onadit 0.0.1 → 1.0.0

package/dist/src/cli/commands/search.js

@@ -0,0 +1,118 @@
+import { Command } from "commander";
+import { createHttpClient, readToken, resolveBaseUrl, CliError } from "../http-client.js";
+import { printError, printJson, printText } from "../output.js";
+/**
+ * Format a search response for terminal output (non-JSON mode).
+ * Kept exported so integration tests can assert on the real CLI rendering
+ * without re-implementing the format.
+ *
+ * The `expand:` line renders `r.expand.params` as key=value pairs so the
+ * printed pointer is round-trippable — a human or test can rebuild the
+ * request body from stdout alone without losing `tier` or `source_table`.
+ */
+export function formatSearchResultsForCli(resp) {
+    const lines = [];
+    if (resp.results.length === 0) {
+        lines.push("No results.");
+        return lines;
+    }
+    for (const r of resp.results) {
+        lines.push(`[${r.score.toFixed(3)}] (${r.tier}, ${r.retrieval_method}) ${r.title}`);
+        if (r.snippet)
+            lines.push(`    ${r.snippet}`);
+        const kv = Object.entries(r.expand.params)
+            .map(([k, v]) => `${k}=${String(v)}`)
+            .join(" ");
+        lines.push(`    expand: ${r.expand.route} ${kv}`);
+    }
+    return lines;
+}
+export function makeSearchCommand() {
+    return new Command("search")
+        .description("Search across all indexed content")
+        // `[query]` is optional — `onadit search --id <id> --detail middle|full`
+        // is a valid invocation that bypasses ranked retrieval entirely. The
+        // action handler rejects the empty case where neither query nor id is set.
+        .argument("[query]", "Search query")
+        .option("--scope <scope>", "Search scope (all|clients|projects|conversations|documents)")
+        .option("--client <name>", "Filter by client name")
+        .option("--since <date>", "Filter by date (ISO-8601)")
+        .option("--top-k <n>", "Max results", parseInt)
+        .option("--detail <level>", "Output detail: 'summary' (default, compact), 'middle' (bounded head+tail excerpt), or 'full' (raw content)")
+        .option("--id <id>", "With --detail=middle or full, fetch exactly this row by id")
+        .option("--tier <tier>", "With --id, scope the lookup to a tier (hot|cold|digest|document|structured_doc)")
+        .option("--source-table <name>", "With --id, the authoritative backing table (disambiguates rows shared across cloud/local)")
+        .action(async (query, opts, cmd) => {
+        const globalOpts = cmd.optsWithGlobals();
+        try {
+            // Exact-ID mode is recognised by `--id` with `--detail middle` or
+            // `--detail full`; everything else needs a positional query. We
+            // refuse here rather than send a bad shape that the daemon would
+            // reject — the trust contract is that the CLI is loud about
+            // precise-lookup misuse, not silent.
+            const isExactIdMode = !!opts.id && (opts.detail === "full" || opts.detail === "middle");
+            if (!query && !isExactIdMode) {
+                printError("Missing query. Pass a search query, or use `--id <id> --detail middle|full` for exact lookup.");
+                process.exitCode = 1;
+                return;
+            }
+            const baseUrl = resolveBaseUrl(globalOpts.config);
+            const token = await readToken();
+            if (!token) {
+                printError("No auth token. Run: onadit token issue");
+                process.exitCode = 1;
+                return;
+            }
+            const client = createHttpClient({ baseUrl, token });
+            const body = {};
+            // In exact-ID mode the daemon ignores `query` — omit it from the
+            // body so stdout / logs don't suggest a ranked search ran.
+            if (query && !isExactIdMode)
+                body.query = query;
+            if (opts.scope)
+                body.scope = opts.scope;
+            if (opts.client)
+                body.client = opts.client;
+            if (opts.since)
+                body.since = opts.since;
+            if (opts.topK)
+                body.top_k = opts.topK;
+            if (opts.detail)
+                body.detail = opts.detail;
+            if (opts.id)
+                body.id = opts.id;
+            if (opts.tier)
+                body.tier = opts.tier;
+            if (opts.sourceTable)
+                body.source_table = opts.sourceTable;
+            const { data } = await client.post("/search", body);
+            const resp = data;
+            if (globalOpts.json) {
+                printJson(resp);
+                return;
+            }
+            if (resp.degraded) {
+                process.stderr.write(`Warning: degraded results${resp.degraded_reason ? ` (${resp.degraded_reason})` : ""}\n`);
+            }
+            else if (resp.mode === "lexical") {
+                // Intentional, not a failure: no embedding key is configured, so
+                // search is keyword-based by design. Keep it calm and actionable.
+                process.stderr.write("Keyword search (no embedding key — semantic search is off). " +
+                    "Run `onadit onboard` and add a key to also search by meaning.\n");
+            }
+            for (const line of formatSearchResultsForCli(resp)) {
+                printText(line);
+            }
+        }
+        catch (err) {
+            if (err instanceof CliError) {
+                printError(err.message);
+            }
+            else {
+                printError(err instanceof Error ? err.message : String(err));
+            }
+            process.exitCode = 1;
+        }
+    });
+}
+//# sourceMappingURL=search.js.map

package/dist/src/cli/commands/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../../../src/cli/commands/search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAwBhE;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAoB;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,KAAK,EAAE,CACxE,CAAC;QACF,IAAI,CAAC,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;SACzB,WAAW,CAAC,mCAAmC,CAAC;QACjD,yEAAyE;QACzE,qEAAqE;QACrE,2EAA2E;SAC1E,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;SACnC,MAAM,CAAC,iBAAiB,EAAE,6DAA6D,CAAC;SACxF,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;SAClD,MAAM,CAAC,gBAAgB,EAAE,2BAA2B,CAAC;SACrD,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,CAAC;SAC9C,MAAM,CACL,kBAAkB,EAClB,4GAA4G,CAC7G;SACA,MAAM,CAAC,WAAW,EAAE,4DAA4D,CAAC;SACjF,MAAM,CACL,eAAe,EACf,iFAAiF,CAClF;SACA,MAAM,CACL,uBAAuB,EACvB,2FAA2F,CAC5F;SACA,MAAM,CAAC,KAAK,EAAE,KAAyB,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,EAAuC,CAAC;QAC9E,IAAI,CAAC;YACH,kEAAkE;YAClE,gEAAgE;YAChE,iEAAiE;YACjE,4DAA4D;YAC5D,qCAAqC;YACrC,MAAM,aAAa,GACjB,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;YACpE,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC7B,UAAU,CACR,+FAA+F,CAChG,CAAC;gBACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,UAAU,CAAC,wCAAwC,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACnG,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAEpD,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,iEAAiE;YACjE,2DAA2D;YAC3D,IAAI,KAAK,IAAI,CAAC,aAAa;gBAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YAChD,IAAI,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3C,IAAI,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACxC,IAAI,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;YACtC,IAAI,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3C,IAAI,IAAI,CAAC,EAAE;gBAAE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACrC,IAAI,IAAI,CAAC,WAAW;gBAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC;YAE3D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,IAAsB,CAAC;YAEpC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpB,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO;YACT,CAAC;YAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4BAA4B,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CACzF,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACnC,iEAAiE;gBACjE,kEAAkE;gBAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8DAA8D;oBAC5D,iEAAiE,CACpE,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,SAAS,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;gBAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;iBAAM,CAAC;gBAAC,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC;YAChI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/cli/commands/setup.d.ts

@@ -0,0 +1,30 @@
+import { Command } from "commander";
+import { type HttpClient } from "../http-client.js";
+interface GlobalOpts {
+    config?: string;
+}
+export interface SetupOpenDeps {
+    readAccessToken: () => Promise<string | null>;
+    issueAccessToken: (configPath: string) => Promise<string>;
+    createClient: (baseUrl: string, token: string) => HttpClient;
+    openUrl: (url: string) => Promise<void>;
+    wait: (milliseconds: number) => Promise<void>;
+}
+/** Where the installer puts Onadit.app. The home folder comes first: no admin. */
+export declare function findRiftApp(homeDir?: string): string | null;
+export declare function makeSetupCommand(): Command;
+export interface AppSetupSession {
+    base_url: string;
+    token: string;
+    api_version: number | null;
+    expires_in_seconds: number | null;
+}
+export declare function openSetup(globalOpts: GlobalOpts, deps?: SetupOpenDeps): Promise<string>;
+/**
+ * Mint a scoped setup session for Onadit.app. The app never sees the daemon's
+ * full bearer token: it gets the same narrow capability the setup page uses,
+ * and asks for a new one when it expires.
+ */
+export declare function createSetupSession(globalOpts: GlobalOpts, deps?: SetupOpenDeps): Promise<AppSetupSession>;
+export {};
+//# sourceMappingURL=setup.d.ts.map

package/dist/src/cli/commands/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/setup.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AAC5C,OAAO,EAML,KAAK,UAAU,EAChB,MAAM,mBAAmB,CAAC;AAK3B,UAAU,UAAU;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAOD,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9C,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,YAAY,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,UAAU,CAAC;IAC7D,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/C;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,OAAO,GAAE,MAAqB,GAAG,MAAM,GAAG,IAAI,CAMzE;AAED,wBAAgB,gBAAgB,IAAI,OAAO,CAmC1C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,wBAAsB,SAAS,CAC7B,UAAU,EAAE,UAAU,EACtB,IAAI,GAAE,aAA6B,GAClC,OAAO,CAAC,MAAM,CAAC,CAgBjB;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,UAAU,EACtB,IAAI,GAAE,aAA6B,GAClC,OAAO,CAAC,eAAe,CAAC,CAkB1B"}

package/dist/src/cli/commands/setup.js

@@ -0,0 +1,122 @@
+import { execFile } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { promisify } from "node:util";
+import { Command, Option } from "commander";
+import { CliError, createHttpClient, readToken, requireExistingConfigPath, resolveBaseUrl, } from "../http-client.js";
+import { issueToken } from "../token.js";
+const execFileAsync = promisify(execFile);
+/** Where the installer puts Onadit.app. The home folder comes first: no admin. */
+export function findRiftApp(homeDir = os.homedir()) {
+    const candidates = [
+        path.join(homeDir, "Applications", "Onadit.app"),
+        "/Applications/Onadit.app",
+    ];
+    return candidates.find((candidate) => fs.existsSync(path.join(candidate, "Contents", "Info.plist"))) ?? null;
+}
+export function makeSetupCommand() {
+    return new Command("setup")
+        .description("Open Onadit to import chats and connect your AI tools")
+        .option("--browser", "Open the private setup page in the browser instead of Onadit.app")
+        // Onadit.app reads this JSON over a pipe. It carries the scoped setup
+        // credential, so it is hidden and never meant for a terminal or a log.
+        .addOption(new Option("--app-session").hideHelp())
+        .action(async (opts, cmd) => {
+        const globalOpts = cmd.optsWithGlobals();
+        try {
+            if (opts.appSession) {
+                const session = await createSetupSession(globalOpts);
+                process.stdout.write(`${JSON.stringify(session)}\n`);
+                return;
+            }
+            const app = opts.browser ? null : findRiftApp();
+            if (app) {
+                // `open` focuses the running app instead of starting a second copy.
+                await execFileAsync("/usr/bin/open", [app]);
+                process.stdout.write("Onadit opened.\n");
+                return;
+            }
+            await openSetup(globalOpts);
+            // The setup URL contains a short-lived, narrowly scoped credential.
+            // Do not print it into installer or shell logs after opening it.
+            process.stdout.write("Onadit setup opened in your browser.\n");
+        }
+        catch (error) {
+            process.stderr.write(`Setup could not open: ${error instanceof Error ? error.message : String(error)}\n`);
+            process.exitCode = 1;
+        }
+    });
+}
+export async function openSetup(globalOpts, deps = defaultDeps()) {
+    const { baseUrl, response } = await requestSetupSession(globalOpts, deps);
+    if (typeof response.path !== "string" ||
+        !/^\/setup\/[A-Za-z0-9_-]+$/.test(response.path)) {
+        throw new Error("The Onadit daemon returned an invalid setup link.");
+    }
+    const setupUrl = new URL(response.path, baseUrl);
+    if (setupUrl.hostname !== "127.0.0.1" || setupUrl.origin !== baseUrl) {
+        throw new Error("Refusing to open a non-local setup link.");
+    }
+    await deps.openUrl(setupUrl.toString());
+    return setupUrl.toString();
+}
+/**
+ * Mint a scoped setup session for Onadit.app. The app never sees the daemon's
+ * full bearer token: it gets the same narrow capability the setup page uses,
+ * and asks for a new one when it expires.
+ */
+export async function createSetupSession(globalOpts, deps = defaultDeps()) {
+    const { baseUrl, response } = await requestSetupSession(globalOpts, deps);
+    // Older daemons only return `path`; the token is its last segment.
+    const fromPath = typeof response.path === "string"
+        ? /^\/setup\/([A-Za-z0-9_-]+)$/.exec(response.path)?.[1]
+        : undefined;
+    const token = typeof response.token === "string" ? response.token : fromPath;
+    if (!token || !/^[A-Za-z0-9_-]+$/.test(token)) {
+        throw new Error("The Onadit daemon returned an invalid setup session.");
+    }
+    return {
+        base_url: baseUrl,
+        token,
+        api_version: typeof response.api_version === "number" ? response.api_version : null,
+        expires_in_seconds: typeof response.expires_in_seconds === "number" ? response.expires_in_seconds : null,
+    };
+}
+async function requestSetupSession(globalOpts, deps) {
+    const configPath = requireExistingConfigPath(globalOpts);
+    const baseUrl = resolveBaseUrl(configPath);
+    let token = await deps.readAccessToken();
+    if (!token)
+        token = await deps.issueAccessToken(configPath);
+    const client = deps.createClient(baseUrl, token);
+    let lastError;
+    // A newly issued token reaches the daemon through SIGHUP. Give that hot
+    // reload a brief chance to land instead of opening a broken setup page.
+    for (let attempt = 0; attempt < 20; attempt += 1) {
+        try {
+            const result = await client.post("/setup/session", {});
+            return { baseUrl, response: (result.data ?? {}) };
+        }
+        catch (error) {
+            lastError = error;
+            if (!(error instanceof CliError) || error.code !== "unauthorized") {
+                throw error;
+            }
+            await deps.wait(100);
+        }
+    }
+    throw lastError ?? new Error("The Onadit daemon did not accept the setup session.");
+}
+function defaultDeps() {
+    return {
+        readAccessToken: () => readToken(),
+        issueAccessToken: async (configPath) => (await issueToken(configPath)).token,
+        createClient: (baseUrl, token) => createHttpClient({ baseUrl, token }),
+        openUrl: async (url) => {
+            await execFileAsync("/usr/bin/open", [url]);
+        },
+        wait: (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)),
+    };
+}
+//# sourceMappingURL=setup.js.map

package/dist/src/cli/commands/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../../../src/cli/commands/setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EACL,QAAQ,EACR,gBAAgB,EAChB,SAAS,EACT,yBAAyB,EACzB,cAAc,GAEf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAmB1C,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;IACxD,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,YAAY,CAAC;QAChD,0BAA0B;KAC3B,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;SACxB,WAAW,CAAC,uDAAuD,CAAC;SACpE,MAAM,CAAC,WAAW,EAAE,kEAAkE,CAAC;QACxF,sEAAsE;QACtE,uEAAuE;SACtE,SAAS,CAAC,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,IAAsB,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,EAAgB,CAAC;QACvD,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,GAAG,EAAE,CAAC;gBACR,oEAAoE;gBACpE,MAAM,aAAa,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YACD,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;YAC5B,oEAAoE;YACpE,iEAAiE;YACjE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yBACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,IAAI,CACL,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,UAAsB,EACtB,OAAsB,WAAW,EAAE;IAEnC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC1E,IACE,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACjC,CAAC,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAChD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAsB,EACtB,OAAsB,WAAW,EAAE;IAEnC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC1E,mEAAmE;IACnE,MAAM,QAAQ,GACZ,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAC/B,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,KAAK,GAAG,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC7E,IAAI,CAAC,KAAK,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,KAAK;QACL,WAAW,EAAE,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;QACnF,kBAAkB,EAChB,OAAO,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI;KACvF,CAAC;AACJ,CAAC;AASD,KAAK,UAAU,mBAAmB,CAChC,UAAsB,EACtB,IAAmB;IAEnB,MAAM,UAAU,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,SAAkB,CAAC;IAEvB,wEAAwE;IACxE,wEAAwE;IACxE,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAyB,EAAE,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;YAClB,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAClE,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,eAAe,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE;QAClC,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CACrC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK;QACtC,YAAY,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACtE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,aAAa,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,EAAE,CAAC,YAAY,EAAE,EAAE,CACrB,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;KAC9D,CAAC;AACJ,CAAC"}

package/dist/src/cli/commands/stats.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare function makeStatsCommand(): Command;
+//# sourceMappingURL=stats.d.ts.map

package/dist/src/cli/commands/stats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/stats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,wBAAgB,gBAAgB,IAAI,OAAO,CA4B1C"}

package/dist/src/cli/commands/stats.js

@@ -0,0 +1,42 @@
+import { Command } from "commander";
+import { createHttpClient, readToken, resolveBaseUrl, CliError } from "../http-client.js";
+import { printError, printJson, printText } from "../output.js";
+export function makeStatsCommand() {
+    return new Command("stats")
+        .description("Show table statistics")
+        .action(async (_opts, cmd) => {
+        const globalOpts = cmd.optsWithGlobals();
+        try {
+            const baseUrl = resolveBaseUrl(globalOpts.config);
+            const token = await readToken();
+            if (!token) {
+                printError("No auth token. Run: onadit token issue");
+                process.exitCode = 1;
+                return;
+            }
+            const client = createHttpClient({ baseUrl, token });
+            const data = (await client.get("/stats"));
+            if (globalOpts.json) {
+                printJson(data);
+            }
+            else {
+                const t = data.tables;
+                printText(`structured_docs:          ${t.structured_docs.count}\n` +
+                    `conversations_hot:        ${t.conversations_hot.count}\n` +
+                    `conversations_cold:       ${t.conversations_cold.count}\n` +
+                    `digests:                  ${t.digests.count}\n` +
+                    `conversation_artifacts:   ${t.conversation_artifacts_total}`);
+            }
+        }
+        catch (err) {
+            if (err instanceof CliError) {
+                printError(err.message);
+            }
+            else {
+                printError(err instanceof Error ? err.message : String(err));
+            }
+            process.exitCode = 1;
+        }
+    });
+}
+//# sourceMappingURL=stats.js.map

package/dist/src/cli/commands/stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../../../src/cli/commands/stats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAYhE,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;SACxB,WAAW,CAAC,uBAAuB,CAAC;SACpC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,EAAuC,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,UAAU,CAAC,wCAAwC,CAAC,CAAC;gBAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACnG,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAkB,CAAC;YAC3D,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpB,SAAS,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;gBACtB,SAAS,CACP,6BAA6B,CAAC,CAAC,eAAe,CAAC,KAAK,IAAI;oBACxD,6BAA6B,CAAC,CAAC,iBAAiB,CAAC,KAAK,IAAI;oBAC1D,6BAA6B,CAAC,CAAC,kBAAkB,CAAC,KAAK,IAAI;oBAC3D,6BAA6B,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI;oBAChD,6BAA6B,CAAC,CAAC,4BAA4B,EAAE,CAC9D,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;gBAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;iBAAM,CAAC;gBAAC,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC;YAChI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/cli/commands/status.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `onadit status` — friend-readable daemon health.
+ *
+ * Sequence: hit `/status/friend` for structured daemon signals, read
+ * local signals (Voyage key last 4, MCP-client install presence), then
+ * render the header. The MCP capability map is agent-facing reference
+ * material; keep it out of the default human path and show it only with
+ * `--tools` (or in `--json`, where callers expect the old shape).
+ *
+ * `--json` returns `{ header, friend, capability_map, mcp_clients }`. Pass
+ * `--no-capability-map` to skip the extra `/status` fetch — fast pollers
+ * like the menu bar never render it. When the daemon is unreachable, the
+ * header still prints (with an "unreachable" line) and the map is omitted.
+ */
+import { Command } from "commander";
+export declare function makeStatusCommand(): Command;
+//# sourceMappingURL=status.d.ts.map

package/dist/src/cli/commands/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,wBAAgB,iBAAiB,IAAI,OAAO,CA6I3C"}

package/dist/src/cli/commands/status.js

@@ -0,0 +1,206 @@
+/**
+ * `onadit status` — friend-readable daemon health.
+ *
+ * Sequence: hit `/status/friend` for structured daemon signals, read
+ * local signals (Voyage key last 4, MCP-client install presence), then
+ * render the header. The MCP capability map is agent-facing reference
+ * material; keep it out of the default human path and show it only with
+ * `--tools` (or in `--json`, where callers expect the old shape).
+ *
+ * `--json` returns `{ header, friend, capability_map, mcp_clients }`. Pass
+ * `--no-capability-map` to skip the extra `/status` fetch — fast pollers
+ * like the menu bar never render it. When the daemon is unreachable, the
+ * header still prints (with an "unreachable" line) and the map is omitted.
+ */
+import { Command } from "commander";
+import { createHttpClient, probeDefaultDaemonHealth, readToken, resolveBaseUrl, resolveBaseUrlLenient, CliError, } from "../http-client.js";
+import { printError, printJson, printText } from "../output.js";
+import { renderFriendHeader } from "../status/friend-header.js";
+import { readLocalSignals } from "../status/local-signals.js";
+export function makeStatusCommand() {
+    return new Command("status")
+        .description("Show daemon status briefing with friend-readable header")
+        .option("--tools", "Also show the agent tool guide / capability map")
+        .option("--no-capability-map", "Omit the agent capability map from --json (skips an extra /status fetch — for fast pollers like the menu bar)")
+        .action(async (opts, cmd) => {
+        const globalOpts = cmd.optsWithGlobals();
+        try {
+            // Per A-2.3a/A-2.3b: status is the only diagnostic command that
+            // must NOT hard-fail on missing config — friends will run it
+            // before/after `onadit onboard`. Probe /health directly when
+            // resolveBaseUrl can't load a config; render a no-config-yet
+            // header instead of erroring out.
+            let baseUrl;
+            // When set, the config is newer than this CLI (an unknown top-level
+            // key like `codex_cli` from a later beta). We still render status —
+            // diagnostics must not die on a forward-compatible config — but we
+            // surface this line so the friend knows to update their CLI.
+            let staleCliNote = null;
+            try {
+                baseUrl = resolveBaseUrl(globalOpts.config);
+            }
+            catch (err) {
+                if (err instanceof CliError && err.code === "not_found") {
+                    await renderNoConfigStatus(globalOpts.json, globalOpts.config);
+                    return;
+                }
+                // Per A-2.3a: status is the diagnostic command and must stay useful
+                // when an OLDER CLI meets a NEWER config. Strict Zod parsing fails
+                // closed on an unrecognized top-level key, but for status we only
+                // need the daemon's host/port — read those leniently and keep going.
+                // This does NOT weaken validation for daemon startup or write paths.
+                //
+                // Crucially, only a FORWARD-COMPAT failure (code "config_too_new":
+                // the config carries keys this CLI doesn't know) earns this path. A
+                // genuinely broken config (code "invalid": a known field with a bad
+                // value) must still surface as "config invalid" — otherwise status
+                // would tell the friend "your CLI is older than your config" when
+                // the real problem is a typo in their config. That diagnostic lie is
+                // exactly the failure mode this whole fix exists to kill.
+                if (err instanceof CliError && err.code === "config_too_new") {
+                    const lenient = resolveBaseUrlLenient(globalOpts.config);
+                    if (lenient) {
+                        baseUrl = lenient;
+                        staleCliNote =
+                            "Your Onadit CLI is older than your config. Update with: onadit update (or npm install -g onadit@latest).";
+                    }
+                    else {
+                        throw err;
+                    }
+                }
+                else {
+                    throw err;
+                }
+            }
+            const token = await readToken();
+            if (!token) {
+                printError("No auth token. Run: onadit token issue");
+                process.exitCode = 1;
+                return;
+            }
+            const client = createHttpClient({ baseUrl, token });
+            const friend = await safeFetchFriendStatus(client);
+            const local = readLocalSignals();
+            const headerLines = renderFriendHeader({
+                status: friend,
+                voyageLast4: local.voyageLast4,
+                mcpClients: local.mcpClients.map((c) => ({
+                    client: c.client,
+                    installed: c.installed,
+                })),
+                swiftBar: local.swiftBar,
+                localAiApps: local.localAiApps,
+            });
+            // The capability map is agent reference material fetched via a
+            // second /status round-trip. The menu bar polls `status --json`
+            // every 10s and never renders it, so `--no-capability-map` lets it
+            // opt out. Default stays on to preserve the `--json` shape.
+            const wantCapabilityMap = opts.capabilityMap !== false &&
+                (globalOpts.json || opts.tools === true);
+            const capabilityMap = friend && wantCapabilityMap
+                ? await safeFetchStatusMarkdown(client)
+                : null;
+            if (globalOpts.json) {
+                printJson({
+                    header: headerLines.join("\n"),
+                    friend,
+                    capability_map: capabilityMap,
+                    // Present only when an older CLI read a newer config; consumers
+                    // (menu bar) can surface the "update your CLI" nudge.
+                    stale_cli: staleCliNote,
+                    // Structured client-connection list for non-human consumers
+                    // (the menu bar). The human header already folds this in;
+                    // exposing it here keeps `onadit status` the single source of
+                    // truth for "which AI tools are connected" instead of forcing
+                    // the menu to re-implement client detection or parse text.
+                    mcp_clients: local.mcpClients.map((c) => ({
+                        client: c.client,
+                        installed: c.installed,
+                    })),
+                    // SwiftBar presence so non-human consumers (the menu bar) and
+                    // `doctor` agree on the "menu can't show" state. null on non-macOS.
+                    swift_bar: local.swiftBar,
+                    // Local AI desktop apps (Claude/ChatGPT) whose chats are NOT
+                    // auto-captured — exposed so the menu bar can mirror the header's
+                    // "export → onadit import" expectation. null on non-macOS. Emitted
+                    // snake_case to match the rest of the machine-facing JSON surface
+                    // (mcp_clients, swift_bar) — the internal signal stays camelCase.
+                    local_ai_apps: local.localAiApps
+                        ? {
+                            claude_desktop: local.localAiApps.claudeDesktop,
+                            chatgpt_app: local.localAiApps.chatgptApp,
+                        }
+                        : null,
+                });
+                return;
+            }
+            for (const line of headerLines)
+                printText(line);
+            if (staleCliNote)
+                printText(`Heads up:    ${staleCliNote}`);
+            if (opts.tools && capabilityMap) {
+                printText("");
+                printText(capabilityMap);
+            }
+        }
+        catch (err) {
+            if (err instanceof CliError) {
+                printError(err.message);
+            }
+            else {
+                printError(err instanceof Error ? err.message : String(err));
+            }
+            process.exitCode = 1;
+        }
+    });
+}
+async function safeFetchFriendStatus(client) {
+    try {
+        const data = await client.get("/status/friend");
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+async function safeFetchStatusMarkdown(client) {
+    try {
+        const data = await client.get("/status");
+        return typeof data === "string" ? data : JSON.stringify(data, null, 2);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * No-config branch for `onadit status`. Per A-2.3a/A-2.3b: render the
+ * daemon's actual up/down state (probed at the well-known port without
+ * reading any config) plus a "config missing — run onadit onboard" line.
+ * Don't throw, don't `process.exitCode = 1` — this is the expected
+ * pre-onboard friend experience.
+ */
+async function renderNoConfigStatus(asJson, configPath) {
+    const probe = await probeDefaultDaemonHealth();
+    const summaryLine = probe.up
+        ? "config missing — run onadit onboard (daemon up at 127.0.0.1:3577)"
+        : "daemon down — run onadit onboard, or check launchctl print gui/$UID/com.getrift.daemon";
+    const lines = [
+        `Onadit  ·  daemon: ${probe.up ? "running" : "down"}  ·  port 3577`,
+        `Config:      ${summaryLine}`,
+        `             expected at: ${configPath}`,
+    ];
+    if (asJson) {
+        printJson({
+            header: lines.join("\n"),
+            friend: null,
+            capability_map: null,
+            config_missing: true,
+            config_expected_at: configPath,
+            daemon_up: probe.up,
+        });
+        return;
+    }
+    for (const line of lines)
+        printText(line);
+}
+//# sourceMappingURL=status.js.map

package/dist/src/cli/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../../src/cli/commands/status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,SAAS,EACT,cAAc,EACd,qBAAqB,EACrB,QAAQ,GACT,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAG9D,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC;SACzB,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,SAAS,EAAE,iDAAiD,CAAC;SACpE,MAAM,CACL,qBAAqB,EACrB,+GAA+G,CAChH;SACA,MAAM,CAAC,KAAK,EAAE,IAAkD,EAAE,GAAG,EAAE,EAAE;QACxE,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,EAGrC,CAAC;QACF,IAAI,CAAC;YACH,gEAAgE;YAChE,6DAA6D;YAC7D,6DAA6D;YAC7D,6DAA6D;YAC7D,kCAAkC;YAClC,IAAI,OAAe,CAAC;YACpB,oEAAoE;YACpE,oEAAoE;YACpE,mEAAmE;YACnE,6DAA6D;YAC7D,IAAI,YAAY,GAAkB,IAAI,CAAC;YACvC,IAAI,CAAC;gBACH,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACxD,MAAM,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;oBAC/D,OAAO;gBACT,CAAC;gBACD,oEAAoE;gBACpE,mEAAmE;gBACnE,kEAAkE;gBAClE,qEAAqE;gBACrE,qEAAqE;gBACrE,EAAE;gBACF,mEAAmE;gBACnE,oEAAoE;gBACpE,oEAAoE;gBACpE,mEAAmE;gBACnE,kEAAkE;gBAClE,qEAAqE;gBACrE,0DAA0D;gBAC1D,IAAI,GAAG,YAAY,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBAC7D,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;oBACzD,IAAI,OAAO,EAAE,CAAC;wBACZ,OAAO,GAAG,OAAO,CAAC;wBAClB,YAAY;4BACV,0GAA0G,CAAC;oBAC/G,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAC;oBACZ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,UAAU,CAAC,wCAAwC,CAAC,CAAC;gBACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAEpD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,kBAAkB,CAAC;gBACrC,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACvC,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;iBACvB,CAAC,CAAC;gBACH,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,+DAA+D;YAC/D,gEAAgE;YAChE,mEAAmE;YACnE,4DAA4D;YAC5D,MAAM,iBAAiB,GACrB,IAAI,CAAC,aAAa,KAAK,KAAK;gBAC5B,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;YAC3C,MAAM,aAAa,GACjB,MAAM,IAAI,iBAAiB;gBACzB,CAAC,CAAC,MAAM,uBAAuB,CAAC,MAAM,CAAC;gBACvC,CAAC,CAAC,IAAI,CAAC;YAEX,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpB,SAAS,CAAC;oBACR,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC9B,MAAM;oBACN,cAAc,EAAE,aAAa;oBAC7B,gEAAgE;oBAChE,sDAAsD;oBACtD,SAAS,EAAE,YAAY;oBACvB,4DAA4D;oBAC5D,0DAA0D;oBAC1D,8DAA8D;oBAC9D,8DAA8D;oBAC9D,2DAA2D;oBAC3D,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACxC,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;qBACvB,CAAC,CAAC;oBACH,8DAA8D;oBAC9D,oEAAoE;oBACpE,SAAS,EAAE,KAAK,CAAC,QAAQ;oBACzB,6DAA6D;oBAC7D,kEAAkE;oBAClE,mEAAmE;oBACnE,kEAAkE;oBAClE,kEAAkE;oBAClE,aAAa,EAAE,KAAK,CAAC,WAAW;wBAC9B,CAAC,CAAC;4BACE,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,aAAa;4BAC/C,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU;yBAC1C;wBACH,CAAC,CAAC,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,WAAW;gBAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,YAAY;gBAAE,SAAS,CAAC,gBAAgB,YAAY,EAAE,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,KAAK,IAAI,aAAa,EAAE,CAAC;gBAChC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACd,SAAS,CAAC,aAAa,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;gBAC5B,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,MAAmD;IAEnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChD,OAAO,IAA2B,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,MAAmD;IAEnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,oBAAoB,CACjC,MAAe,EACf,UAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,wBAAwB,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,KAAK,CAAC,EAAE;QAC1B,CAAC,CAAC,mEAAmE;QACrE,CAAC,CAAC,wFAAwF,CAAC;IAC7F,MAAM,KAAK,GAAG;QACZ,sBAAsB,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,gBAAgB;QACnE,gBAAgB,WAAW,EAAE;QAC7B,6BAA6B,UAAU,EAAE;KAC1C,CAAC;IACF,IAAI,MAAM,EAAE,CAAC;QACX,SAAS,CAAC;YACR,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YACxB,MAAM,EAAE,IAAI;YACZ,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,IAAI;YACpB,kBAAkB,EAAE,UAAU;YAC9B,SAAS,EAAE,KAAK,CAAC,EAAE;SACpB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,SAAS,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC"}

package/dist/src/cli/commands/token-issue.d.ts

@@ -0,0 +1,3 @@
+import { Command } from "commander";
+export declare function makeTokenIssueCommand(): Command;
+//# sourceMappingURL=token-issue.d.ts.map

package/dist/src/cli/commands/token-issue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-issue.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/token-issue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,wBAAgB,qBAAqB,IAAI,OAAO,CA2B/C"}

package/dist/src/cli/commands/token-issue.js

@@ -0,0 +1,33 @@
+import { Command } from "commander";
+import { issueToken } from "../token.js";
+import { requireExistingConfigPath } from "../http-client.js";
+import { printError, printText } from "../output.js";
+export function makeTokenIssueCommand() {
+    return new Command("issue")
+        .description("Issue a new bearer token and signal the daemon")
+        .action(async (_opts, cmd) => {
+        const globalOpts = cmd.optsWithGlobals();
+        try {
+            // Per A-2.2: validate the config exists before calling
+            // issueToken (which loads it without canonical error mapping).
+            // This is especially critical because onboard's keychain-locked
+            // recovery copy now points users at `onadit token issue`; if
+            // *that* command itself crashes with raw ENOENT on a missing
+            // config, the recovery loop is broken.
+            const configPath = requireExistingConfigPath(globalOpts);
+            const result = await issueToken(configPath);
+            printText(`v${result.version}: ${result.token}`);
+            if (result.signal.signaled) {
+                process.stderr.write("Daemon notified (SIGHUP).\n");
+            }
+            else {
+                process.stderr.write(`Warning: ${result.signal.warning} Token written; restart daemon to activate.\n`);
+            }
+        }
+        catch (err) {
+            printError(err instanceof Error ? err.message : String(err));
+            process.exitCode = 1;
+        }
+    });
+}
+//# sourceMappingURL=token-issue.js.map

package/dist/src/cli/commands/token-issue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-issue.js","sourceRoot":"","sources":["../../../../src/cli/commands/token-issue.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;SACxB,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,EAAwB,CAAC;QAC/D,IAAI,CAAC;YACH,uDAAuD;YACvD,+DAA+D;YAC/D,gEAAgE;YAChE,6DAA6D;YAC7D,6DAA6D;YAC7D,uCAAuC;YACvC,MAAM,UAAU,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;YAC5C,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,MAAM,CAAC,MAAM,CAAC,OAAO,+CAA+C,CACjF,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}