onadit 0.0.1 → 1.0.0

package/dist/src/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/config/schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,eAAO,MAAM,cAAc,+BAA6B,CAAC;AACzD,eAAO,MAAM,QAAQ,wCAAsC,CAAC;AAC5D,eAAO,MAAM,SAAS,8CAA4C,CAAC;AAInE,eAAO,MAAM,eAAe;;;;;;IAOxB;;;;;;;;;OASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiDH,CAAC;AAEL,eAAO,MAAM,YAAY;;;;;;;;;EAGd,CAAC;AAEZ,eAAO,MAAM,eAAe;;;IAG1B;;;;OAIG;;IAEH;;;;OAIG;;;;;;;;;;;;EAEM,CAAC;AAEZ;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;;;EAEd,CAAC;AAEZ,eAAO,MAAM,eAAe;;;;;;;;;EAGjB,CAAC;AAEZ,eAAO,MAAM,gBAAgB;;;;;;;;;EAGlB,CAAC;AAEZ,eAAO,MAAM,eAAe;;;;;;;;;EAGjB,CAAC;AAEZ,eAAO,MAAM,UAAU;;;;;;EAEZ,CAAC;AAEZ,eAAO,MAAM,UAAU;IACrB,mEAAmE;;;;;;EAE1D,CAAC;AAMZ,eAAO,MAAM,iBAAiB,mGAA+C,CAAC;AAE9E,eAAO,MAAM,qBAAqB;IAChC;;;;;;OAMG;;;;;;EAEM,CAAC;AAEZ;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,uCAAwC,CAAC;AAC5E,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,eAAO,MAAM,mBAAmB;IAC9B;;;;;OAKG;;;;;;EAEM,CAAC;AAEZ,eAAO,MAAM,mBAAmB;IAC9B;;;;;;;OAOG;;;;;;EAEM,CAAC;AAEZ,eAAO,MAAM,aAAa;IACxB,qEAAqE;;IAErE,yEAAyE;;IAEzE;;;;OAIG;;IAEH,gEAAgE;;QA1DhE;;;;;;WAMG;;;;;;;IAsDH,oEAAoE;;QAxBpE;;;;;;;WAOG;;;;;;;IAmBH;;;;OAIG;;QAxCH;;;;;WAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqCM,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoC9B,CAAC;AAEL,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAKrB,CAAC;AAEZ,eAAO,MAAM,UAAU;;;;;;EAEZ,CAAC;AAEZ;;;;;;;;;GASG;AACH,eAAO,MAAM,YAAY;IACvB,gEAAgE;;IAEhE,uDAAuD;;;;;;;;EAE9C,CAAC;AAEZ;;;;GAIG;AACH,eAAO,MAAM,cAAc;IAEvB;;;;;;;OAOG;;;;;;EAGI,CAAC;AAEZ;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,mCAAmC,uCAGtC,CAAC;AACX,MAAM,MAAM,8BAA8B,GACxC,CAAC,OAAO,mCAAmC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,eAAO,MAAM,wBAAwB;;;;;;EAI1B,CAAC;AAEZ,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;EAIlB,CAAC;AAIZ,eAAO,MAAM,YAAY;;;;;;;QAhVrB;;;;;;;;;WASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA2DL;;;;WAIG;;QAEH;;;;WAIG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAiCH,mEAAmE;;;;;;;;QA2DnE,qEAAqE;;QAErE,yEAAyE;;QAEzE;;;;WAIG;;QAEH,gEAAgE;;YA1DhE;;;;;;eAMG;;;;;;;QAsDH,oEAAoE;;YAxBpE;;;;;;;eAOG;;;;;;;QAmBH;;;;WAIG;;YAxCH;;;;;eAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAgHD;;;;;;;WAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QApBL,gEAAgE;;QAEhE,uDAAuD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsG9C,CAAC;AAEZ,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAClD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/src/config/schema.js

@@ -0,0 +1,339 @@
+import path from "node:path";
+import { z } from "zod";
+import { DEFAULT_AUTO_CAPTURE_SOURCES, SCHEDULED_AUTO_CAPTURE_SOURCE_VALUES, } from "../capture/sources.js";
+// --- Enums ---
+export const ExtractionEnum = z.enum(["cloud", "local"]);
+export const ModeEnum = z.enum(["watch", "scheduled_scan"]);
+export const ScopeEnum = z.enum(["client", "project", "document"]);
+// --- Sub-schemas ---
+export const SourceDirSchema = z
+    .object({
+    path: z.string().min(1),
+    extraction: ExtractionEnum,
+    mode: ModeEnum,
+    scope: ScopeEnum,
+    client_name: z.string().optional(),
+    /**
+     * Paths relative to `path` that should be skipped by watcher/scanner/
+     * reconcile. Rejected at parse time: empty strings, absolute paths,
+     * and paths that escape the source root ("../x", "../../y"). The
+     * escape check is fail-closed on purpose — an operator typo like
+     * `../raw` should surface at config load, not degrade silently into
+     * an unprotected folder. Left optional so existing configs without
+     * an `exclude` field stay valid and `SourceDir`-shaped test
+     * fixtures remain assignable.
+     */
+    exclude: z.array(z.string().min(1)).optional(),
+})
+    .strict()
+    .superRefine((data, ctx) => {
+    // Enforce absolute paths — no ambiguity about resolution base.
+    if (!data.path.startsWith("/")) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["path"],
+            message: "Source path must be absolute (start with /)",
+        });
+    }
+    // client_name required when scope is "client".
+    if (data.scope === "client" &&
+        (data.client_name === undefined || data.client_name.trim() === "")) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["client_name"],
+            message: 'client_name is required when scope is "client"',
+        });
+    }
+    // Exclude entries must be relative paths contained within the source
+    // root. Absolute paths hint at a misunderstanding of how the filter
+    // composes. Paths that normalize to something outside the root are
+    // rejected outright rather than silently dropped later — a typo like
+    // `../raw` should fail at config load, not present as protected.
+    (data.exclude ?? []).forEach((rel, i) => {
+        if (rel.startsWith("/")) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["exclude", i],
+                message: "exclude entries must be relative to the source path",
+            });
+            return;
+        }
+        const normalized = path.posix.normalize(rel);
+        if (normalized === ".." || normalized.startsWith("../")) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["exclude", i],
+                message: `exclude entry "${rel}" escapes the source path`,
+            });
+        }
+    });
+});
+export const ServerSchema = z.object({
+    port: z.number().int().min(1).max(65535).default(3577),
+    host: z.literal("127.0.0.1").default("127.0.0.1"),
+}).strict();
+export const EmbeddingSchema = z.object({
+    provider: z.literal("voyage"),
+    model: z.string().default("voyage-3-lite"),
+    /**
+     * Embeddings API base, without `/embeddings`. Unset means Voyage's own
+     * `https://api.voyageai.com/v1`. Keys Onadit provisions are MongoDB Atlas
+     * model keys, which only work against `https://ai.mongodb.com/v1`.
+     */
+    base_url: z.string().url().optional(),
+    /**
+     * Requested vector size, for models that can return several. Onadit's
+     * tables hold 512-dimension vectors (voyage-3-lite's native size), so a
+     * newer model must be asked for 512.
+     */
+    output_dimension: z.number().int().positive().optional(),
+}).strict();
+/**
+ * Operator-supplied display label for the Voyage project a friend's key
+ * is scoped to. Optional; rendered by `onadit status` for human reference
+ * only — never sent to the relay, never inferred from the key bytes.
+ */
+export const VoyageSchema = z.object({
+    project_label: z.string().min(1).optional(),
+}).strict();
+export const DataPathsSchema = z.object({
+    data_dir: z.string().min(1).default("data"),
+    jobs_dir: z.string().min(1).default("jobs"),
+}).strict();
+export const CompactionSchema = z.object({
+    age_threshold_days: z.number().int().positive().default(30),
+    schedule: z.string().default("0 2 * * 0"),
+}).strict();
+export const RateLimitSchema = z.object({
+    window_ms: z.number().int().positive(),
+    max_requests: z.number().int().positive(),
+}).strict();
+export const CronSchema = z.object({
+    cron_enabled: z.boolean().default(false),
+}).strict();
+export const ScanSchema = z.object({
+    /** Scan interval in seconds. Default: 604800 (7 days / weekly). */
+    interval_seconds: z.number().int().positive().default(604_800),
+}).strict();
+// Sources accepted in `capture.sources`. Built from the scheduled-eligible set,
+// which now includes `cursor_composer` (Cursor scheduling slice): adding it here
+// is the deliberate, persisted opt-in for native Cursor capture. It is NOT a
+// default (see DEFAULT_AUTO_CAPTURE_SOURCES), so a fresh config never enables it.
+export const CaptureSourceEnum = z.enum(SCHEDULED_AUTO_CAPTURE_SOURCE_VALUES);
+export const CaptureCodexCliSchema = z.object({
+    /**
+     * Maximum Codex session size, in bytes, eligible for auto-capture triage.
+     * Sessions larger than this are quarantined to data/quarantine/ and skipped
+     * (no full read, no parse, no triage subprocess) so the Codex CLI prompt
+     * never receives an oversized stdin. Default lives in
+     * `DEFAULT_CODEX_MAX_SESSION_BYTES` (8 MB) — operators may raise it here.
+     */
+    max_session_bytes: z.number().int().positive().optional(),
+}).strict();
+/**
+ * Triage worker selector. Triage (the auto-capture classifier) is the one AI
+ * task a fresh user is forced through to get capture working, so it is the
+ * first capability made provider-selectable. `codex_cli` (the default) keeps
+ * existing installs byte-for-byte unchanged; `claude_code` routes triage
+ * through the locally-authenticated `claude` CLI instead, so a Claude Code
+ * user can run capture without installing/authing Codex.
+ *
+ * Scope is deliberately triage-only: metadata extraction, digest, and
+ * embeddings still resolve via their own gates (enrichment.ai_metadata,
+ * local_generation, embedding.provider) and are unaffected by this field.
+ */
+export const TRIAGE_PROVIDER_VALUES = ["codex_cli", "claude_code"];
+export const CaptureTriageSchema = z.object({
+    /**
+     * Which local AI worker classifies captured conversations. Defaults to
+     * `codex_cli`; set to `claude_code` to triage via the `claude` CLI. Like
+     * Codex, the selected worker is an egress path (conversation content is sent
+     * to the worker on the operator's own subscription — no Onadit-held API key).
+     */
+    provider: z.enum(TRIAGE_PROVIDER_VALUES).default("codex_cli"),
+}).strict();
+export const CaptureCursorSchema = z.object({
+    /**
+     * Maximum native-Cursor session size, in bytes, eligible for auto-capture
+     * triage. Cursor sessions live in a shared `state.vscdb` (no file to stat),
+     * so the guard measures the PARSED transcript before triage; anything larger
+     * is parked as a TERMINAL oversized record (no triage, no save) and is not
+     * auto-recoverable — remediation is raise-this-limit or split the session.
+     * Default lives in `DEFAULT_CURSOR_MAX_SESSION_BYTES` (4 MB).
+     */
+    max_session_bytes: z.number().int().positive().optional(),
+}).strict();
+export const CaptureSchema = z.object({
+    /** Enable automatic capture of supported local CLI conversations. */
+    enabled: z.boolean().default(false),
+    /** Interval between capture runs, in seconds. Default: 3600 (1 hour). */
+    interval_seconds: z.number().int().positive().default(3600),
+    /**
+     * Sources enabled in the scheduled daemon loop.
+     * Defaults to both supported live CLI sources. First-run watermarking
+     * prevents historical backlog ingestion on enablement.
+     */
+    sources: z.array(CaptureSourceEnum).nonempty().default(DEFAULT_AUTO_CAPTURE_SOURCES),
+    /** Per-source overrides for the codex_cli auto-capture path. */
+    codex_cli: CaptureCodexCliSchema.optional(),
+    /** Per-source overrides for the native Cursor auto-capture path. */
+    cursor: CaptureCursorSchema.optional(),
+    /**
+     * Which AI worker backs triage. Optional (not defaulted) so a config that
+     * predates this field still loads; absent reads as `codex_cli` at the
+     * resolution site, preserving the prior hardcoded default.
+     */
+    triage: CaptureTriageSchema.optional(),
+}).strict();
+export const LocalGenerationSchema = z
+    .object({
+    enabled: z.boolean().default(false),
+    runtime: z.literal("ollama").optional(),
+    mode: z.literal("strict_local_only").default("strict_local_only"),
+    base_url: z.string().url().default("http://localhost:11434"),
+    metadata_model: z.string().min(1).optional(),
+    digest_model: z.string().min(1).optional(),
+})
+    .strict()
+    .superRefine((data, ctx) => {
+    if (!data.enabled)
+        return;
+    if (!data.runtime) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["runtime"],
+            message: "runtime is required when local_generation.enabled is true",
+        });
+    }
+    if (!data.metadata_model) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["metadata_model"],
+            message: "metadata_model is required when local_generation.enabled is true",
+        });
+    }
+    if (!data.digest_model) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["digest_model"],
+            message: "digest_model is required when local_generation.enabled is true",
+        });
+    }
+});
+export const RequestLimitsSchema = z.object({
+    json_body_limit_bytes: z.number().int().positive().default(10_485_760),
+    multipart_limit_bytes: z.number().int().positive().default(104_857_600),
+    read_timeout_ms: z.number().int().positive().default(30_000),
+    mutation_timeout_ms: z.number().int().positive().default(120_000),
+}).strict();
+export const AuthSchema = z.object({
+    test_token: z.string().min(1).optional(),
+}).strict();
+/**
+ * OpenAI runtime policy.
+ *
+ * Live ingest no longer touches the OpenAI API — both metadata extraction
+ * and triage route through the locally-authenticated Codex CLI. The fields
+ * here remain only for the **historical-backfill batch path**, which still
+ * uses the OpenAI provider when explicitly invoked: `max_cost_per_batch_usd`
+ * is the per-batch fail-closed cost ceiling and `max_parallel_requests`
+ * caps in-flight concurrency.
+ */
+export const OpenAISchema = z.object({
+    /** Per-batch cost ceiling in USD. Fail-closed when exceeded. */
+    max_cost_per_batch_usd: z.number().positive().default(5),
+    /** Maximum concurrent in-flight requests per batch. */
+    max_parallel_requests: z.number().int().positive().default(4),
+}).strict();
+/**
+ * Codex CLI runtime policy. Global (not under `capture`) because the Codex CLI
+ * backs ALL local generation — triage, metadata extraction, digest, and
+ * large-session recovery — not just auto-capture.
+ */
+export const CodexCliSchema = z
+    .object({
+    /**
+     * Model to pin on every `codex exec` via `--model`. Onadit runs codex with
+     * an isolated CODEX_HOME that drops the user's config.toml, so without this
+     * codex would fall back to its release-default model — which 0.125.0 moved
+     * to one ChatGPT-auth plans reject. When unset, Onadit resolves a model from
+     * the source `~/.codex/config.toml`, a persisted verified model, or a
+     * probed fallback. Set this to override that resolution.
+     */
+    model: z.string().min(1).optional(),
+})
+    .strict();
+/**
+ * Conversation/document metadata enrichment policy.
+ *
+ * `ai_metadata` defaults to FALSE: import and capture use the deterministic,
+ * AI-free `BasicMetadataExtractor` even when the Codex CLI is installed on the
+ * machine. This is the trust-first default — the no-key fast-import path sends
+ * no conversation content off-device, runs no Voyage embedding, and makes ZERO
+ * Codex subprocess calls, so "import + keyword search work without Codex or
+ * embeddings" is literally true on a fresh box. (Independently of this path,
+ * the daemon makes a metadata-only npm version check — no content, no key, no
+ * machine info.)
+ *
+ * It flips to true only when the user explicitly opts into AI enrichment
+ * (`onadit onboard --enable-codex-enrichment` or `--enable-claude-enrichment`,
+ * which persist this flag). Local (Ollama) enrichment has its own explicit
+ * opt-in via `local_generation.enabled` and is unaffected by this gate. The
+ * `RIFT_DISABLE_AI_METADATA` env override still force-disables regardless, for
+ * the activation benchmark.
+ */
+/**
+ * Metadata-extraction worker selector — the metadata-capability analogue of
+ * `capture.triage.provider`. This is deliberately nested UNDER `metadata`
+ * (not a flat `enrichment.provider`) because `enrichment` is a namespace that
+ * spans more than one capability: a flat provider would conflate metadata with
+ * the future digest worker and re-create the global-worker ambiguity we avoid
+ * elsewhere. Capability-level routing (`enrichment.metadata.provider`, later
+ * `enrichment.digest.provider`) keeps each capability independently selectable.
+ *
+ * `codex_cli` (the default) preserves today's behavior byte-for-byte. It only
+ * takes effect when `ai_metadata` is true — the gate above makes ZERO AI calls
+ * regardless of this value when enrichment is off. `claude_code` routes
+ * metadata through the `claude` CLI on the operator's subscription; if that CLI
+ * is missing or a run fails, extraction falls back to deterministic basic
+ * metadata (never blocks import). NOTE: selecting `claude_code` leaves digests/
+ * compaction OFF — there is no Claude digest worker yet and we do NOT silently
+ * borrow Codex for it; that ships with a dedicated `enrichment.digest.provider`.
+ */
+export const ENRICHMENT_METADATA_PROVIDER_VALUES = [
+    "codex_cli",
+    "claude_code",
+];
+export const EnrichmentMetadataSchema = z
+    .object({
+    provider: z.enum(ENRICHMENT_METADATA_PROVIDER_VALUES).default("codex_cli"),
+})
+    .strict();
+export const EnrichmentSchema = z.object({
+    ai_metadata: z.boolean().default(false),
+    // Optional: absent → Codex (default), preserving every pre-existing config.
+    metadata: EnrichmentMetadataSchema.optional(),
+}).strict();
+// --- Top-level schema ---
+export const ConfigSchema = z.object({
+    sources: z.array(SourceDirSchema).min(1),
+    server: ServerSchema.default({}),
+    embedding: EmbeddingSchema,
+    voyage: VoyageSchema.optional(),
+    data_paths: DataPathsSchema.default({}),
+    compaction: CompactionSchema.default({}),
+    rate_limit: RateLimitSchema,
+    cron: CronSchema.default({}),
+    scan: ScanSchema.default({}),
+    capture: CaptureSchema.default({}),
+    codex_cli: CodexCliSchema.optional(),
+    local_generation: LocalGenerationSchema.optional(),
+    // Optional (not defaulted) so a config that predates this field still loads,
+    // and so the gate's `config.enrichment?.ai_metadata` reads as "off" when
+    // absent. Trust-first: missing or `{ ai_metadata: false }` → AI-free import.
+    enrichment: EnrichmentSchema.optional(),
+    request_limits: RequestLimitsSchema.default({}),
+    auth: AuthSchema.default({}),
+    openai: OpenAISchema.default({}),
+}).strict();
+//# sourceMappingURL=schema.js.map

package/dist/src/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,4BAA4B,EAC5B,oCAAoC,GACrC,MAAM,uBAAuB,CAAC;AAE/B,gBAAgB;AAEhB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC5D,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAEnE,sBAAsB;AAEtB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,cAAc;IAC1B,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,SAAS;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC;;;;;;;;;OASG;IACH,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,+DAA+D;IAC/D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,OAAO,EAAE,6CAA6C;SACvD,CAAC,CAAC;IACL,CAAC;IAED,+CAA+C;IAC/C,IACE,IAAI,CAAC,KAAK,KAAK,QAAQ;QACvB,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAClE,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IACrE,oEAAoE;IACpE,mEAAmE;IACnE,qEAAqE;IACrE,iEAAiE;IACjE,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACtC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;gBACpB,OAAO,EAAE,qDAAqD;aAC/D,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;gBACpB,OAAO,EAAE,kBAAkB,GAAG,2BAA2B;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;CAC1C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACzC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,mEAAmE;IACnE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;CAC/D,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,gFAAgF;AAChF,iFAAiF;AACjF,6EAA6E;AAC7E,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C;;;;;;OAMG;IACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,WAAW,EAAE,aAAa,CAAU,CAAC;AAG5E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CAC9D,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C;;;;;;;OAOG;IACH,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,qEAAqE;IACrE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,yEAAyE;IACzE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3D;;;;OAIG;IACH,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,4BAA4B,CAAC;IACpF,gEAAgE;IAChE,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC3C,oEAAoE;IACpE,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACtC;;;;OAIG;IACH,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;IACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACjE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAC5D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;IACzB,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO;IAE1B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,OAAO,EAAE,kEAAkE;SAC5E,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,gEAAgE;SAC1E,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IACtE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACvE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,gEAAgE;IAChE,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,uDAAuD;IACvD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;CAC9D,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN;;;;;;;OAOG;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,WAAW;IACX,aAAa;CACL,CAAC;AAIX,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;CAC3E,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,4EAA4E;IAC5E,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,2BAA2B;AAE3B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,SAAS,EAAE,eAAe;IAC1B,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,UAAU,EAAE,eAAe;IAC3B,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;IAClC,SAAS,EAAE,cAAc,CAAC,QAAQ,EAAE;IACpC,gBAAgB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAClD,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/src/diagnostics/claude-preflight.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Classification of a recorded Claude Code `preflight_error` (the capture-triage
+ * probe failure) into a coarse class that drives honest, CLAUDE-SPECIFIC
+ * doctor/status copy — the Claude analogue of `codex-preflight.ts`.
+ *
+ * The string we classify is the runner's OWN leak-free error (see
+ * `claude-cli-runner.ts`): a canned `classifyClaudeStderr` phrase, the
+ * "No compatible Claude Code CLI found …" aggregate, the "was not found …"
+ * message, or a timeout. Those are structural phrases the runner emits — never
+ * raw stderr, prompt, or model output (the runner already stripped those). So we
+ * only ever pattern-match Onadit's own wording here; nothing user-content-bearing
+ * reaches this module.
+ *
+ * Why a separate worker: when capture triage runs through `claude` instead of
+ * `codex`, "run codex login" is wrong advice. A Claude user needs Claude-shaped
+ * remedies — sign into `claude`, upgrade an old CLI that lacks `--safe-mode`, or
+ * point `RIFT_CLAUDE_CLI_PATH` past a wrapper. These classes encode exactly the
+ * failure buckets the runner can produce.
+ */
+export type ClaudePreflightErrorClass = "missing" | "incompatible" | "wrapper" | "auth" | "rate_limit" | "network" | "timeout" | "unknown";
+export declare function classifyClaudePreflightError(error: string | null | undefined): ClaudePreflightErrorClass;
+/**
+ * A short, leak-free, human summary for a class. Deliberately canned (no raw
+ * stderr, no file paths, no prompt/session content) so SwiftBar/doctor can
+ * surface it without parsing or redacting raw `claude` output.
+ */
+export declare function summarizeClaudePreflightClass(cls: ClaudePreflightErrorClass): string;
+/**
+ * The single concrete remedy for a class — shown as the doctor `nextAction` and
+ * the status `Next:` line. Claude-shaped (never "codex login"). Capture is
+ * automatic, so each remedy ends with "Onadit retries automatically" rather than
+ * telling the user to run `onadit capture` by hand.
+ */
+export declare function claudePreflightNextAction(cls: ClaudePreflightErrorClass): string;
+//# sourceMappingURL=claude-preflight.d.ts.map

package/dist/src/diagnostics/claude-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-preflight.d.ts","sourceRoot":"","sources":["../../../src/diagnostics/claude-preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,yBAAyB,GACjC,SAAS,GACT,cAAc,GACd,SAAS,GACT,MAAM,GACN,YAAY,GACZ,SAAS,GACT,SAAS,GACT,SAAS,CAAC;AAEd,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,yBAAyB,CA2D3B;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,yBAAyB,GAC7B,MAAM,CAmBR;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,yBAAyB,GAC7B,MAAM,CAkBR"}

package/dist/src/diagnostics/claude-preflight.js

@@ -0,0 +1,90 @@
+export function classifyClaudePreflightError(error) {
+    if (!error || error.trim().length === 0) {
+        return "unknown";
+    }
+    const text = error.toLowerCase();
+    // Structural install problems first — they are the most actionable and their
+    // wording is distinctive. Note the "No compatible … found" aggregate is NOT
+    // "missing" (a `claude` exists, it just failed the probe); it carries the
+    // specific per-candidate reasons matched below (e.g. `--safe-mode`, wrapper).
+    if (/was not found on path|was not found in|claude.*was not found/.test(text)) {
+        return "missing";
+    }
+    if (/--safe-mode|too old\/incompatible|too old for headless|\bincompatible\b|flag\/contract error|unknown option|unknown argument|invalid option|unrecognized option/.test(text)) {
+        return "incompatible";
+    }
+    // Auth BEFORE wrapper: a recorded reason can carry both signals — e.g. a legacy
+    // row (or any future caller) whose text says "authentication failed … likely a
+    // wrapper/PTY shim". Auth is the more specific, more actionable cause, so it
+    // wins the tie; a genuine wrapper failure carries no auth wording and still
+    // falls through to `wrapper` below. (The runner now also emits a precise,
+    // non-conflated reason — see claude-cli-runner.ts — so new rows rarely carry
+    // both; this ordering hardens the legacy/ambiguous path.)
+    if (/authentication failed|not (logged|signed) in|\bunauthorized\b|\b401\b|please (run|sign|log).{0,12}(login|in)|login (has )?expired|credentials? (expired|invalid)|sign in/.test(text)) {
+        return "auth";
+    }
+    if (/could not run headless|wrapper\/pty shim|pty shim|input must be provided|when using --print|not a tty|raw mode is not supported/.test(text)) {
+        return "wrapper";
+    }
+    if (/rate limit|\b429\b|too many requests|usage limit|\bquota\b|out of credits|insufficient (credit|quota|balance)/.test(text)) {
+        return "rate_limit";
+    }
+    if (/network error|econnreset|econnrefused|enotfound|etimedout|getaddrinfo|connection (refused|reset)|failed to (connect|reach)|\bnetwork\b|http 5\d\d|socket hang up/.test(text)) {
+        return "network";
+    }
+    if (/timed out|\btimeout\b/.test(text)) {
+        return "timeout";
+    }
+    return "unknown";
+}
+/**
+ * A short, leak-free, human summary for a class. Deliberately canned (no raw
+ * stderr, no file paths, no prompt/session content) so SwiftBar/doctor can
+ * surface it without parsing or redacting raw `claude` output.
+ */
+export function summarizeClaudePreflightClass(cls) {
+    switch (cls) {
+        case "missing":
+            return "Claude Code CLI (`claude`) was not found.";
+        case "incompatible":
+            return "Claude Code CLI is too old for headless triage (it needs `--safe-mode`).";
+        case "wrapper":
+            return "A PATH wrapper is intercepting `claude` and cannot run it headlessly.";
+        case "auth":
+            return "Claude Code login appears to have expired.";
+        case "rate_limit":
+            return "Claude hit a rate or usage limit — usually transient.";
+        case "network":
+            return "Claude could not reach its backend (network/transport).";
+        case "timeout":
+            return "Claude probe timed out — often a transient hiccup.";
+        case "unknown":
+            return "Claude preflight failed for an unrecognized reason.";
+    }
+}
+/**
+ * The single concrete remedy for a class — shown as the doctor `nextAction` and
+ * the status `Next:` line. Claude-shaped (never "codex login"). Capture is
+ * automatic, so each remedy ends with "Onadit retries automatically" rather than
+ * telling the user to run `onadit capture` by hand.
+ */
+export function claudePreflightNextAction(cls) {
+    switch (cls) {
+        case "missing":
+            return "Install Claude Code, or set RIFT_CLAUDE_CLI_PATH to your `claude`; Onadit retries automatically on its next pass.";
+        case "incompatible":
+            return "Upgrade Claude Code so it supports --safe-mode (or set RIFT_CLAUDE_CLI_PATH to a newer claude); Onadit retries automatically on its next pass.";
+        case "wrapper":
+            return "Set RIFT_CLAUDE_CLI_PATH to the real claude binary (a wrapper is intercepting it); Onadit retries automatically on its next pass.";
+        case "auth":
+            return "Sign back in: run claude and log in; Onadit retries automatically on its next pass.";
+        case "rate_limit":
+            return "Wait for the limit to reset; Onadit retries automatically on its next pass.";
+        case "network":
+            return "Check your network connection; Onadit retries automatically on its next pass.";
+        case "timeout":
+        case "unknown":
+            return "Onadit retries automatically on its next pass; check onadit status if it persists.";
+    }
+}
+//# sourceMappingURL=claude-preflight.js.map

package/dist/src/diagnostics/claude-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-preflight.js","sourceRoot":"","sources":["../../../src/diagnostics/claude-preflight.ts"],"names":[],"mappings":"AA6BA,MAAM,UAAU,4BAA4B,CAC1C,KAAgC;IAEhC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAEjC,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,8EAA8E;IAC9E,IAAI,8DAA8D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,iKAAiK,CAAC,IAAI,CACpK,IAAI,CACL,EACD,CAAC;QACD,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,gFAAgF;IAChF,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,6EAA6E;IAC7E,0DAA0D;IAC1D,IACE,0KAA0K,CAAC,IAAI,CAC7K,IAAI,CACL,EACD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IACE,iIAAiI,CAAC,IAAI,CACpI,IAAI,CACL,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IACE,+GAA+G,CAAC,IAAI,CAClH,IAAI,CACL,EACD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IACE,kKAAkK,CAAC,IAAI,CACrK,IAAI,CACL,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,GAA8B;IAE9B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,2CAA2C,CAAC;QACrD,KAAK,cAAc;YACjB,OAAO,0EAA0E,CAAC;QACpF,KAAK,SAAS;YACZ,OAAO,uEAAuE,CAAC;QACjF,KAAK,MAAM;YACT,OAAO,4CAA4C,CAAC;QACtD,KAAK,YAAY;YACf,OAAO,uDAAuD,CAAC;QACjE,KAAK,SAAS;YACZ,OAAO,yDAAyD,CAAC;QACnE,KAAK,SAAS;YACZ,OAAO,oDAAoD,CAAC;QAC9D,KAAK,SAAS;YACZ,OAAO,qDAAqD,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAA8B;IAE9B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,mHAAmH,CAAC;QAC7H,KAAK,cAAc;YACjB,OAAO,gJAAgJ,CAAC;QAC1J,KAAK,SAAS;YACZ,OAAO,mIAAmI,CAAC;QAC7I,KAAK,MAAM;YACT,OAAO,qFAAqF,CAAC;QAC/F,KAAK,YAAY;YACf,OAAO,6EAA6E,CAAC;QACvF,KAAK,SAAS;YACZ,OAAO,+EAA+E,CAAC;QACzF,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,oFAAoF,CAAC;IAChG,CAAC;AACH,CAAC"}

package/dist/src/diagnostics/codex-preflight.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Classification of a recorded Codex `preflight_error` into a coarse class
+ * that drives honest doctor/status copy.
+ *
+ * History: every preflight failure used to render as "Codex login has
+ * expired", which sent users to re-run `codex login` for failures that had
+ * nothing to do with auth (a release-default model the plan rejects, a backend
+ * timeout, MCP noise). This classifier exists so we only claim auth expiry
+ * when the evidence is actually an auth signal — and fall back to a neutral
+ * "preflight failed" bucket otherwise.
+ *
+ * CONSERVATIVE on auth by design. Codex's MCP client subsystem emits a stream
+ * of `AuthRequired` / `invalid_grant` / `TokenRefreshFailed` transport errors
+ * for unrelated MCP servers (figma, adspirer, …). Those are NOT codex login
+ * failures; matching them as auth would recreate the original mislabel from
+ * the other direction. So auth signals are matched only AFTER stripping MCP
+ * transport lines, and anything ambiguous falls to a non-auth bucket — we
+ * never falsely tell the user their login expired.
+ */
+export type CodexPreflightErrorClass = "auth" | "model" | "cli_incompatible" | "binary" | "rate_limit" | "timeout" | "backend" | "unknown";
+/**
+ * The first Codex `ERROR` line saying it refused `model`, or null. Only error
+ * lines naming that model count: Codex also prints "warning: Model metadata
+ * for `X` not found" for models that work. Codex echoes the prompt, and a
+ * triaged conversation can quote an old refusal of this very model, so a line
+ * whose text is in `prompt` is not Codex speaking and is skipped. If a real
+ * refusal is ever skipped that way, the next preflight (a tiny prompt) still
+ * catches it.
+ */
+export declare function findCodexModelRejection(text: string, model: string, prompt?: string): string | null;
+export declare function classifyCodexPreflightError(error: string | null | undefined): CodexPreflightErrorClass;
+/**
+ * Best-effort model name from the codex banner (`model: <name>`), for display
+ * only. Returns null when absent. Never used for control flow.
+ */
+export declare function extractCodexModelFromError(error: string | null | undefined): string | null;
+/**
+ * A short, leak-free, human summary for a class. Deliberately canned (no raw
+ * stderr, no file paths, no prompt/session content) so SwiftBar/doctor can
+ * surface it without parsing or redacting raw codex output.
+ */
+export declare function summarizeCodexPreflightClass(cls: CodexPreflightErrorClass, model: string | null): string;
+//# sourceMappingURL=codex-preflight.d.ts.map

package/dist/src/diagnostics/codex-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-preflight.d.ts","sourceRoot":"","sources":["../../../src/diagnostics/codex-preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,wBAAwB,GAChC,MAAM,GACN,OAAO,GACP,kBAAkB,GAClB,QAAQ,GACR,YAAY,GACZ,SAAS,GACT,SAAS,GACT,SAAS,CAAC;AAiBd;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,SAAK,GACV,MAAM,GAAG,IAAI,CAaf;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,wBAAwB,CAgF1B;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,CAMf;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,wBAAwB,EAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,MAAM,CAqBR"}