onadit 0.0.1 → 1.0.0

package/dist/src/cli/feedback/feedback-config.d.ts

@@ -0,0 +1,67 @@
+import { z } from "zod";
+import type { RelaySecretStore } from "./relay-secret-store.js";
+export declare const FeedbackConfigSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    url: z.ZodOptional<z.ZodString>;
+    installation_id: z.ZodOptional<z.ZodString>;
+    hmac_secret: z.ZodOptional<z.ZodString>;
+    unsigned: z.ZodOptional<z.ZodBoolean>;
+    email: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    enabled: boolean;
+    url?: string | undefined;
+    email?: string | undefined;
+    installation_id?: string | undefined;
+    hmac_secret?: string | undefined;
+    unsigned?: boolean | undefined;
+}, {
+    enabled: boolean;
+    url?: string | undefined;
+    email?: string | undefined;
+    installation_id?: string | undefined;
+    hmac_secret?: string | undefined;
+    unsigned?: boolean | undefined;
+}>;
+export type FeedbackConfig = z.infer<typeof FeedbackConfigSchema>;
+export declare function feedbackConfigPath(dataDir: string): string;
+export declare function loadFeedbackConfig(dataDir: string): FeedbackConfig;
+/**
+ * Persist the feedback config, ALWAYS stripping the deprecated `hmac_secret`
+ * — the secret belongs in the Keychain, never the sidecar. Writes mode 0600.
+ */
+export declare function writeFeedbackConfig(dataDir: string, cfg: FeedbackConfig): void;
+/**
+ * Resolve the relay HMAC secret, migrating a legacy plaintext sidecar secret
+ * into the Keychain on first use. Order:
+ *   1. Keychain (the canonical home) — return it if present.
+ *   2. Legacy `hmac_secret` in the sidecar — write it to the Keychain, strip
+ *      it from the file, then return it.
+ *   3. None / not securely resolvable — return null.
+ *
+ * NEVER returns a secret that isn't (or didn't just become) securely stored:
+ *   - If the Keychain READ fails (e.g. locked), returns null — the caller must
+ *     not downgrade to an unsigned production POST.
+ *   - A legacy plaintext secret is returned ONLY after it is successfully
+ *     written to the Keychain. If that write fails, returns null (no silent
+ *     plaintext fallback); migration retries next time once the Keychain is
+ *     reachable.
+ *
+ * NEVER throws — it runs in the best-effort `onadit feedback` relay path. The
+ * plaintext strip is best-effort and RETRYABLE: a strip that fails (e.g. a
+ * read-only sidecar) leaves the plaintext for a later call to remove, and a
+ * later call strips a lingering plaintext copy even when the Keychain already
+ * holds the secret (the partial-migration case).
+ */
+export declare function resolveRelaySecret(deps: {
+    dataDir: string;
+    store: RelaySecretStore;
+}): Promise<string | null>;
+/**
+ * Turn the relay on for this install (from an accepted invite or operator
+ * flags): set `enabled` + `url`, mint an `installation_id` when absent, and
+ * preserve any existing email. `writeFeedbackConfig` guarantees no secret
+ * lands in the sidecar — the caller writes the secret to the Keychain. Returns
+ * the persisted config.
+ */
+export declare function applyRelayUrl(dataDir: string, url: string): FeedbackConfig;
+//# sourceMappingURL=feedback-config.d.ts.map

package/dist/src/cli/feedback/feedback-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-config.d.ts","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-config.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;EAmBtB,CAAC;AAEZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAclE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,CAc9E;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,gBAAgB,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA6BzB;AAkBD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,cAAc,CAU1E"}

package/dist/src/cli/feedback/feedback-config.js

@@ -0,0 +1,169 @@
+/**
+ * Feedback opt-in sidecar.
+ *
+ * Lives at `<data_dir>/feedback-config.json`, written by `onadit onboard` /
+ * `onadit feedback setup`. Holds the relay URL + a per-installation pseudonymous
+ * UUID + optional contact email — all non-secret. The relay HMAC secret is
+ * NOT stored here: it lives in the macOS Keychain (see `relay-secret-store.ts`)
+ * and is resolved at POST time via `resolveRelaySecret`.
+ *
+ * `hmac_secret` remains in the schema ONLY so legacy plaintext sidecars still
+ * parse and can be migrated into the Keychain on next use; new writes never
+ * include it.
+ *
+ * Loader is fail-soft: a missing or unreadable sidecar yields a "relay
+ * off" config so `onadit feedback` still writes a local row.
+ */
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { z } from "zod";
+export const FeedbackConfigSchema = z
+    .object({
+    enabled: z.boolean(),
+    url: z.string().url().optional(),
+    installation_id: z.string().min(1).optional(),
+    // DEPRECATED — legacy plaintext secret. Read only for one-time migration
+    // into the Keychain (see `resolveRelaySecret`); never written by new code.
+    hmac_secret: z.string().min(1).optional(),
+    // True only for an intentionally-unsigned dev/local relay
+    // (`--allow-unsigned-feedback-relay`). Lets `maybeRelay` POST without a
+    // secret ONLY when this was an explicit choice — never as a silent
+    // fallback when a secret should exist but couldn't be resolved.
+    unsigned: z.boolean().optional(),
+    // Opt-in beta contact email, captured at onboarding. Stored locally;
+    // reaches the operator only via the relay (or the local
+    // beta-signups.jsonl) and only because the user chose to share it.
+    // Absent unless the user opted in.
+    email: z.string().email().optional(),
+})
+    .strict();
+export function feedbackConfigPath(dataDir) {
+    return path.join(dataDir, "feedback-config.json");
+}
+export function loadFeedbackConfig(dataDir) {
+    const file = feedbackConfigPath(dataDir);
+    let raw;
+    try {
+        raw = fs.readFileSync(file, "utf8");
+    }
+    catch {
+        return { enabled: false };
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        return FeedbackConfigSchema.parse(parsed);
+    }
+    catch {
+        return { enabled: false };
+    }
+}
+/**
+ * Persist the feedback config, ALWAYS stripping the deprecated `hmac_secret`
+ * — the secret belongs in the Keychain, never the sidecar. Writes mode 0600.
+ */
+export function writeFeedbackConfig(dataDir, cfg) {
+    const { hmac_secret: _legacy, ...safe } = cfg;
+    void _legacy;
+    fs.mkdirSync(dataDir, { recursive: true });
+    const file = feedbackConfigPath(dataDir);
+    fs.writeFileSync(file, JSON.stringify(safe, null, 2) + "\n", {
+        encoding: "utf8",
+        mode: 0o600,
+    });
+    try {
+        fs.chmodSync(file, 0o600);
+    }
+    catch {
+        // best-effort permission fix
+    }
+}
+/**
+ * Resolve the relay HMAC secret, migrating a legacy plaintext sidecar secret
+ * into the Keychain on first use. Order:
+ *   1. Keychain (the canonical home) — return it if present.
+ *   2. Legacy `hmac_secret` in the sidecar — write it to the Keychain, strip
+ *      it from the file, then return it.
+ *   3. None / not securely resolvable — return null.
+ *
+ * NEVER returns a secret that isn't (or didn't just become) securely stored:
+ *   - If the Keychain READ fails (e.g. locked), returns null — the caller must
+ *     not downgrade to an unsigned production POST.
+ *   - A legacy plaintext secret is returned ONLY after it is successfully
+ *     written to the Keychain. If that write fails, returns null (no silent
+ *     plaintext fallback); migration retries next time once the Keychain is
+ *     reachable.
+ *
+ * NEVER throws — it runs in the best-effort `onadit feedback` relay path. The
+ * plaintext strip is best-effort and RETRYABLE: a strip that fails (e.g. a
+ * read-only sidecar) leaves the plaintext for a later call to remove, and a
+ * later call strips a lingering plaintext copy even when the Keychain already
+ * holds the secret (the partial-migration case).
+ */
+export async function resolveRelaySecret(deps) {
+    let fromStore;
+    try {
+        fromStore = await deps.store.read();
+    }
+    catch {
+        // Keychain unreadable (e.g. locked) — cannot resolve a secure secret.
+        return null;
+    }
+    if (fromStore) {
+        // Keychain is canonical. Strip any plaintext copy a prior partial
+        // migration left behind (best-effort; retried each call).
+        stripLegacyPlaintextSecret(deps.dataDir);
+        return fromStore;
+    }
+    const legacy = loadFeedbackConfig(deps.dataDir).hmac_secret;
+    if (!legacy)
+        return null;
+    try {
+        await deps.store.write(legacy);
+    }
+    catch {
+        // Could not secure the legacy secret — do NOT fall back to the plaintext.
+        return null;
+    }
+    // Now safely in the Keychain → strip the plaintext copy (best-effort) and
+    // use it. A strip failure must NOT throw out of the best-effort feedback
+    // path; the next call retries via the Keychain-hit branch above.
+    stripLegacyPlaintextSecret(deps.dataDir);
+    return legacy;
+}
+/**
+ * Best-effort removal of a legacy plaintext `hmac_secret` from the sidecar.
+ * Rewrites only when the secret is actually present (no needless writes) and
+ * NEVER throws — a failed strip (e.g. read-only file) leaves the plaintext for
+ * the next call to retry and must not break the best-effort feedback path.
+ */
+function stripLegacyPlaintextSecret(dataDir) {
+    try {
+        const cfg = loadFeedbackConfig(dataDir);
+        if (cfg.hmac_secret === undefined)
+            return; // nothing to strip
+        writeFeedbackConfig(dataDir, cfg); // writeFeedbackConfig drops hmac_secret
+    }
+    catch {
+        // best-effort — retried on a later call once the sidecar is writable
+    }
+}
+/**
+ * Turn the relay on for this install (from an accepted invite or operator
+ * flags): set `enabled` + `url`, mint an `installation_id` when absent, and
+ * preserve any existing email. `writeFeedbackConfig` guarantees no secret
+ * lands in the sidecar — the caller writes the secret to the Keychain. Returns
+ * the persisted config.
+ */
+export function applyRelayUrl(dataDir, url) {
+    const existing = loadFeedbackConfig(dataDir);
+    const cfg = {
+        enabled: true,
+        url,
+        installation_id: existing.installation_id ?? crypto.randomUUID(),
+        ...(existing.email ? { email: existing.email } : {}),
+    };
+    writeFeedbackConfig(dataDir, cfg);
+    return cfg;
+}
+//# sourceMappingURL=feedback-config.js.map

package/dist/src/cli/feedback/feedback-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-config.js","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,yEAAyE;IACzE,2EAA2E;IAC3E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,0DAA0D;IAC1D,wEAAwE;IACxE,mEAAmE;IACnE,gEAAgE;IAChE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,qEAAqE;IACrE,wDAAwD;IACxD,mEAAmE;IACnE,mCAAmC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,GAAmB;IACtE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IAC9C,KAAK,OAAO,CAAC;IACb,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAC3D,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAGxC;IACC,IAAI,SAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,kEAAkE;QAClE,0DAA0D;QAC1D,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,0EAA0E;IAC1E,yEAAyE;IACzE,iEAAiE;IACjE,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,0BAA0B,CAAC,OAAe;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,CAAC,mBAAmB;QAC9D,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,wCAAwC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,GAAW;IACxD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAmB;QAC1B,OAAO,EAAE,IAAI;QACb,GAAG;QACH,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,MAAM,CAAC,UAAU,EAAE;QAChE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;IACF,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/cli/feedback/feedback-history.d.ts

@@ -0,0 +1,11 @@
+export declare function sanitizeText(input: string): string;
+export declare function formatHistoryLine(rawLine: string): string;
+/**
+ * Render a beta-signup row. Signups carry the user's own email (no note),
+ * so the audit surface shows it back to them — that is the point of the
+ * audit. ts/email still pass through `sanitizeText` for control-char and
+ * path/secret safety.
+ */
+export declare function formatSignupLine(rawLine: string): string;
+export declare function renderHistory(dataDir: string, emit: (line: string) => void): void;
+//# sourceMappingURL=feedback-history.d.ts.map

package/dist/src/cli/feedback/feedback-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-history.d.ts","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-history.ts"],"names":[],"mappings":"AA4EA,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAkBzD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAcxD;AAUD,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC3B,IAAI,CAaN"}

package/dist/src/cli/feedback/feedback-history.js

@@ -0,0 +1,145 @@
+/**
+ * Render `onadit feedback --history` for a friend.
+ *
+ * The local JSONL at `data/observability/feedback.jsonl` is canonical and
+ * left untouched — it can hold raw notes, paths, and (in legacy rows) the
+ * superseded product names. This renderer is the friend-visible surface,
+ * and so it MUST never echo:
+ *  - any superseded product/tool name (the pre-Onadit names this codebase
+ *    used to ship under, or any of their `<prefix>_*` MCP tool names),
+ *  - filesystem paths anchored at common macOS roots (`/Users/`, `~/`,
+ *    `/private/var/`, `/var/`, `/tmp/`, `/Volumes/`),
+ *  - anything that looks like an API key, bearer token, or other long
+ *    high-entropy blob,
+ *  - control characters or embedded newlines — a stored note must not be
+ *    able to inject ANSI escapes or fake terminal lines into the
+ *    friend-visible history.
+ *
+ * Malformed rows print a fixed placeholder; their raw content never reaches
+ * stdout. Recognized fields (`ts`, `kind`, `note`) are extracted and
+ * sanitized one by one — extra fields are dropped, never serialized.
+ *
+ * The legacy-name regex literals are assembled from fragments at module
+ * load time so the source file itself never contains the forbidden
+ * substrings (the rename gate scans this file). The control-character
+ * pattern is built from a string literal for the same reason — no raw
+ * control bytes appear in this source file.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { isFeedbackKind } from "./feedback-payload.js";
+const LEGACY_PREFIX = "life";
+const LEGACY_SUFFIX = "brain";
+const LEGACY_NAME_PATTERNS = [
+    new RegExp(`\\b${LEGACY_PREFIX}[-_]${LEGACY_SUFFIX}\\b`, "gi"),
+    new RegExp(`\\b${LEGACY_PREFIX}${LEGACY_SUFFIX}\\b`, "gi"),
+    new RegExp(`\\bsecond-${LEGACY_SUFFIX}\\b`, "gi"),
+    new RegExp(`\\b${LEGACY_PREFIX}_[a-z0-9_]+\\b`, "gi"),
+];
+/**
+ * Match an absolute path under a known macOS root (or `~`), spanning multiple
+ * path components.
+ *
+ * A space inside a component continues the path when EITHER:
+ *  - an upcoming `/` proves we are still inside an interior segment
+ *    (`/Volumes/My Drive/export.json` — `Drive/` ahead), OR
+ *  - the next token starts with an uppercase letter, signalling Title-Case
+ *    continuation (`/Volumes/My Drive` — terminal multi-word directory).
+ *
+ * Token chars exclude sentence punctuation (`.,;:?!`) plus the universally
+ * unsafe set (`/'"\``, whitespace). `.` is re-admitted via `\.(?!\s)` so
+ * extensions (`foo.json`, `.rift.env`) and dotted multi-segment names still
+ * compose, but a sentence-ending `.<space>` ends the path:
+ *   `/Volumes/My Drive. Then it crashed.` → `<path>. Then it crashed.`
+ *   `/tmp/Test Folder, opened it`         → `<path>, opened it`
+ *
+ * Lowercase prose after the path stops the match cleanly (no `/` ahead and
+ * not Title Case), preserving friend-visible context like `then crashed`,
+ * `before lunch`, `for output`. Title-Case prose right after a path may be
+ * over-redacted; we accept that — a leaked path suffix is worse than a
+ * couple of swallowed prose words.
+ */
+const PATH_PATTERNS = [
+    /(?:\/(?:private\/var|Volumes|Users|var|tmp)|~)(?:\/(?:[^\/\s'"`.,;:?!]|\.(?!\s))+(?: (?:(?=(?:[^\/\s'"`.,;:?!]|\.(?!\s))*\/)|[A-Z])(?:[^\/\s'"`.,;:?!]|\.(?!\s))*)*)+/g,
+];
+const SECRET_PATTERNS = [
+    /\b(?:sk|pa|pk|rk|gh[opsu])-[A-Za-z0-9_-]{16,}/g,
+    /\bBearer\s+[A-Za-z0-9_.~+/=-]{16,}/gi,
+    /\b[A-Za-z0-9_/+=-]{32,}\b/g,
+];
+const CONTROL_CHARS = new RegExp("[\\u0000-\\u001f\\u007f]+", "g");
+export function sanitizeText(input) {
+    let out = input.replace(CONTROL_CHARS, " ").replace(/ {2,}/g, " ");
+    for (const re of PATH_PATTERNS)
+        out = out.replace(re, "<path>");
+    for (const re of LEGACY_NAME_PATTERNS)
+        out = out.replace(re, "<legacy>");
+    for (const re of SECRET_PATTERNS)
+        out = out.replace(re, "<redacted>");
+    return out;
+}
+export function formatHistoryLine(rawLine) {
+    let parsed;
+    try {
+        parsed = JSON.parse(rawLine);
+    }
+    catch {
+        return "[malformed row — skipped]";
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return "[malformed row — skipped]";
+    }
+    const row = parsed;
+    const ts = typeof row.ts === "string" ? sanitizeText(row.ts) : "?";
+    const kind = typeof row.kind === "string" && isFeedbackKind(row.kind) ? row.kind : "?";
+    const noteRaw = typeof row.note === "string" ? row.note : "";
+    const note = sanitizeText(noteRaw).trim();
+    const status = row.status_snapshot ? "  (with status)" : "";
+    return `${ts} · ${kind} · ${note}${status}`;
+}
+/**
+ * Render a beta-signup row. Signups carry the user's own email (no note),
+ * so the audit surface shows it back to them — that is the point of the
+ * audit. ts/email still pass through `sanitizeText` for control-char and
+ * path/secret safety.
+ */
+export function formatSignupLine(rawLine) {
+    let parsed;
+    try {
+        parsed = JSON.parse(rawLine);
+    }
+    catch {
+        return "[malformed row — skipped]";
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return "[malformed row — skipped]";
+    }
+    const row = parsed;
+    const ts = typeof row.ts === "string" ? sanitizeText(row.ts) : "?";
+    const email = typeof row.email === "string" ? sanitizeText(row.email) : "?";
+    return `${ts} · beta signup · ${email}`;
+}
+function readNonEmptyLines(file) {
+    if (!fs.existsSync(file))
+        return [];
+    return fs
+        .readFileSync(file, "utf8")
+        .split("\n")
+        .filter((l) => l.length > 0);
+}
+export function renderHistory(dataDir, emit) {
+    const obs = path.join(dataDir, "observability");
+    const feedbackLines = readNonEmptyLines(path.join(obs, "feedback.jsonl"));
+    // beta-signups.jsonl is part of "every byte that went to Clem", so the
+    // audit surface must include it — not just feedback.jsonl.
+    const signupLines = readNonEmptyLines(path.join(obs, "beta-signups.jsonl"));
+    if (feedbackLines.length === 0 && signupLines.length === 0) {
+        emit("No feedback rows yet.");
+        return;
+    }
+    for (const line of feedbackLines)
+        emit(formatHistoryLine(line));
+    for (const line of signupLines)
+        emit(formatSignupLine(line));
+}
+//# sourceMappingURL=feedback-history.js.map

package/dist/src/cli/feedback/feedback-history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-history.js","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-history.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,aAAa,GAAG,OAAO,CAAC;AAE9B,MAAM,oBAAoB,GAA0B;IAClD,IAAI,MAAM,CAAC,MAAM,aAAa,OAAO,aAAa,KAAK,EAAE,IAAI,CAAC;IAC9D,IAAI,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,KAAK,EAAE,IAAI,CAAC;IAC1D,IAAI,MAAM,CAAC,aAAa,aAAa,KAAK,EAAE,IAAI,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,aAAa,gBAAgB,EAAE,IAAI,CAAC;CACtD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,aAAa,GAA0B;IAC3C,wKAAwK;CACzK,CAAC;AAEF,MAAM,eAAe,GAA0B;IAC7C,gDAAgD;IAChD,sCAAsC;IACtC,4BAA4B;CAC7B,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;AAEnE,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnE,KAAK,MAAM,EAAE,IAAI,aAAa;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAChE,KAAK,MAAM,EAAE,IAAI,oBAAoB;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACzE,KAAK,MAAM,EAAE,IAAI,eAAe;QAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnE,MAAM,IAAI,GACR,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,OAAO,GAAG,EAAE,MAAM,IAAI,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5E,OAAO,GAAG,EAAE,oBAAoB,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,EAAE;SACN,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;SAC1B,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,IAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC1E,uEAAuE;IACvE,2DAA2D;IAC3D,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAE5E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,aAAa;QAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,WAAW;QAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/dist/src/cli/feedback/feedback-payload.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Build the feedback row that lands in `data/observability/feedback.jsonl`
+ * and (optionally) on the relay.
+ *
+ * Privacy contract — what this payload carries:
+ *  - `ts`              : ISO timestamp the friend hit enter.
+ *  - `installation_id` : per-install random UUID from `feedback-config.json`,
+ *                        present only if relay opt-in is on. **Not** the
+ *                        friend's username or hostname.
+ *  - `email`           : OPT-IN beta contact email, present only if the user
+ *                        chose to share it at onboarding (it lives in
+ *                        `feedback-config.json`). Lets the operator attribute
+ *                        feedback to a person and send news/pricing/launch
+ *                        updates. Absent for anyone who didn't opt in.
+ *  - `kind`            : enum free-form intent tag (worked|broke|surprised|idea).
+ *  - `note`            : free text from the friend. **Untrusted** — the
+ *                        friend can paste anything they like into this. We
+ *                        write it locally as-is, and forward it as-is to
+ *                        the relay (no scrubbing). The relay endpoint is
+ *                        opt-in; the friend chose to share it. Local-only
+ *                        rows never leave the machine.
+ *  - `version` / `commit` / `node` : daemon build identity.
+ *  - `status_snapshot?`: only when `--with-status`. Sanitized: counts and
+ *                        booleans, no path strings, no error messages, no
+ *                        Voyage key bytes, no machine name.
+ */
+import type { BuildInfo } from "../../server/build-info.js";
+export type FeedbackKind = "worked" | "broke" | "surprised" | "idea";
+export declare const FEEDBACK_KINDS: readonly FeedbackKind[];
+export interface FeedbackStatusSnapshot {
+    health: {
+        status: "ok" | "unreachable";
+        uptime_seconds: number | null;
+        voyage_key_present: boolean | null;
+    };
+    build: BuildInfo | null;
+    auto_capture: {
+        last_run_ts: string | null;
+        last_run_ok: boolean | null;
+        last_preflight_ok: boolean | null;
+        last_run_error_count: number | null;
+        last_run_saved: number | null;
+        last_run_review: number | null;
+        last_run_discarded: number | null;
+    };
+}
+export interface FeedbackPayload {
+    ts: string;
+    installation_id?: string;
+    kind: FeedbackKind;
+    note: string;
+    email?: string;
+    version: string;
+    commit: string;
+    node: string;
+    status_snapshot?: FeedbackStatusSnapshot;
+}
+/**
+ * One-time beta signup, emitted at onboarding when a user opts in to stay
+ * connected. Distinct from feedback: it carries the email but no note/kind.
+ * Written to `data/observability/beta-signups.jsonl` (canonical) and POSTed
+ * to the relay when an endpoint URL is configured.
+ */
+export interface SignupPayload {
+    ts: string;
+    event: "beta_signup";
+    email: string;
+    installation_id: string;
+    version: string;
+    commit: string;
+    node: string;
+}
+export declare function isFeedbackKind(s: string): s is FeedbackKind;
+//# sourceMappingURL=feedback-payload.d.ts.map

package/dist/src/cli/feedback/feedback-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-payload.d.ts","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAE5D,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,MAAM,CAAC;AAErE,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAKxC,CAAC;AAEX,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE;QACN,MAAM,EAAE,IAAI,GAAG,aAAa,CAAC;QAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAC;KACpC,CAAC;IACF,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE;QACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;QAC5B,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAC;QAClC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;QACpC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,YAAY,CAE3D"}

package/dist/src/cli/feedback/feedback-payload.js

@@ -0,0 +1,10 @@
+export const FEEDBACK_KINDS = [
+    "worked",
+    "broke",
+    "surprised",
+    "idea",
+];
+export function isFeedbackKind(s) {
+    return FEEDBACK_KINDS.includes(s);
+}
+//# sourceMappingURL=feedback-payload.js.map

package/dist/src/cli/feedback/feedback-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-payload.js","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-payload.ts"],"names":[],"mappings":"AA8BA,MAAM,CAAC,MAAM,cAAc,GAA4B;IACrD,QAAQ;IACR,OAAO;IACP,WAAW;IACX,MAAM;CACE,CAAC;AAgDX,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,OAAQ,cAAoC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/src/cli/feedback/feedback-relay.d.ts

@@ -0,0 +1,15 @@
+import type { FeedbackPayload, SignupPayload } from "./feedback-payload.js";
+export interface RelayResult {
+    attempted: boolean;
+    ok: boolean;
+    status?: number;
+    error?: string;
+}
+export interface RelayOpts {
+    url: string;
+    hmacSecret?: string;
+    fetchFn?: typeof fetch;
+    timeoutMs?: number;
+}
+export declare function postFeedback(payload: FeedbackPayload | SignupPayload, opts: RelayOpts): Promise<RelayResult>;
+//# sourceMappingURL=feedback-relay.d.ts.map

package/dist/src/cli/feedback/feedback-relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-relay.d.ts","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-relay.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE5E,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,YAAY,CAChC,OAAO,EAAE,eAAe,GAAG,aAAa,EACxC,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,WAAW,CAAC,CA+BtB"}

package/dist/src/cli/feedback/feedback-relay.js

@@ -0,0 +1,47 @@
+/**
+ * Best-effort relay POST. Local JSONL row is canonical; this is the
+ * opt-in fan-out to a Clem-controlled endpoint.
+ *
+ * Behavior:
+ *  - 5 s timeout. Network failure / non-2xx is non-fatal — caller surfaces
+ *    the result, but the row already lives in the local JSONL.
+ *  - Optional HMAC-SHA256 over the canonical JSON body, sent as
+ *    `X-Rift-Signature: sha256=<hex>`. Slack incoming webhooks ignore it;
+ *    the future Cloudflare Worker validates it.
+ */
+import { createHmac } from "node:crypto";
+export async function postFeedback(payload, opts) {
+    const fetchFn = opts.fetchFn ?? fetch;
+    const body = JSON.stringify(payload);
+    const headers = {
+        "content-type": "application/json",
+    };
+    if (opts.hmacSecret) {
+        const sig = createHmac("sha256", opts.hmacSecret).update(body).digest("hex");
+        headers["x-rift-signature"] = `sha256=${sig}`;
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? 5_000);
+    try {
+        const res = await fetchFn(opts.url, {
+            method: "POST",
+            body,
+            headers,
+            signal: controller.signal,
+        });
+        return res.ok
+            ? { attempted: true, ok: true, status: res.status }
+            : { attempted: true, ok: false, status: res.status };
+    }
+    catch (err) {
+        return {
+            attempted: true,
+            ok: false,
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=feedback-relay.js.map

package/dist/src/cli/feedback/feedback-relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-relay.js","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-relay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiBzC,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAwC,EACxC,IAAe;IAEf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7E,OAAO,CAAC,kBAAkB,CAAC,GAAG,UAAU,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,IAAI;YACJ,OAAO;YACP,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE;YACX,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;YACnD,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,SAAS,EAAE,IAAI;YACf,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/src/cli/feedback/feedback-status.d.ts

@@ -0,0 +1,11 @@
+import type { FeedbackStatusSnapshot } from "./feedback-payload.js";
+export interface BuildSnapshotDeps {
+    dataDir: string;
+    baseUrl: string | null;
+    /** Test injection. */
+    fetchFn?: typeof fetch;
+    /** Test injection: clock used for the network timeout. */
+    timeoutMs?: number;
+}
+export declare function buildStatusSnapshot(deps: BuildSnapshotDeps): Promise<FeedbackStatusSnapshot>;
+//# sourceMappingURL=feedback-status.d.ts.map

package/dist/src/cli/feedback/feedback-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-status.d.ts","sourceRoot":"","sources":["../../../../src/cli/feedback/feedback-status.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,sBAAsB;IACtB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,sBAAsB,CAAC,CAQjC"}