onadit 0.0.1 → 1.0.0

package/dist/src/diagnostics/codex-preflight.js

@@ -0,0 +1,128 @@
+/** Codex's MCP-client subsystem noise — not codex auth/runtime signal. */
+function isMcpNoiseLine(line) {
+    return /rmcp|::transport|mcp_servers|streamable_http|\bmcp\b/i.test(line);
+}
+/**
+ * Codex's own phrasing for a model the account cannot use, e.g. "The 'gpt-5.5'
+ * model is not supported when using Codex with a ChatGPT account." Shared by
+ * the classifier and the runner, which checks the FULL output: the recorded
+ * error is shortened, and on 2026-10-14 dozens of `ERROR: Reconnecting…` lines
+ * pushed this line out of it, so status said "network" for a retired model.
+ */
+const CODEX_MODEL_REJECTION_RE = /\bunsupported model\b|\bunknown model\b|\bmodel_not_found\b|no working codex model|model[^\n]*\bnot (found|supported|available)\b|does not support the model|invalid model/i;
+/**
+ * The first Codex `ERROR` line saying it refused `model`, or null. Only error
+ * lines naming that model count: Codex also prints "warning: Model metadata
+ * for `X` not found" for models that work. Codex echoes the prompt, and a
+ * triaged conversation can quote an old refusal of this very model, so a line
+ * whose text is in `prompt` is not Codex speaking and is skipped. If a real
+ * refusal is ever skipped that way, the next preflight (a tiny prompt) still
+ * catches it.
+ */
+export function findCodexModelRejection(text, model, prompt = "") {
+    for (const line of text.split(/\r?\n/)) {
+        if (/^\s*ERROR\b/.test(line) &&
+            line.includes(model) &&
+            !isMcpNoiseLine(line) &&
+            CODEX_MODEL_REJECTION_RE.test(line) &&
+            !prompt.includes(line.trim())) {
+            return line.trim();
+        }
+    }
+    return null;
+}
+export function classifyCodexPreflightError(error) {
+    if (!error || error.trim().length === 0) {
+        return "unknown";
+    }
+    const codexText = error
+        .split(/\r?\n/)
+        .filter((line) => !isMcpNoiseLine(line))
+        .join("\n")
+        .toLowerCase();
+    // Model first: a rejected/unknown model is the common regression and its
+    // phrasing is distinctive, so it should not be swallowed by a generic 4xx.
+    if (CODEX_MODEL_REJECTION_RE.test(codexText)) {
+        return "model";
+    }
+    // CLI too old / incompatible: the executable launched fine but rejected an
+    // argument we depend on. The canonical signal is a Codex predating
+    // `--output-schema` (added after 0.39) — clap exits 2 with
+    // "error: unexpected argument '--output-schema' found". Also matches Onadit's
+    // own pre-send capability-probe message ("too old … missing required
+    // option(s): --output-schema"). Distinct from `binary` (the executable runs)
+    // and from `auth`/`model`: the fix is to UPGRADE the CLI, not re-login or
+    // change the model. Mirrors the Claude runner's flag/contract bucket. Matched
+    // before the generic buckets so a too-old CLI never falls through to unknown.
+    if (/unexpected argument|unrecognized (subcommand|argument|option)|unknown (option|flag|argument|subcommand)|wasn'?t expected|isn'?t valid in this context|--output-schema|--output-last-message|too old|missing required option/.test(codexText)) {
+        return "cli_incompatible";
+    }
+    // Binary: the codex executable could not be launched at all — almost always
+    // `spawn … ENOENT`, i.e. the resolved path no longer exists (a `brew
+    // upgrade`/reinstall moved or removed it, or it was never installed). This is
+    // an install/runtime problem, distinct from auth/model/backend, and points at
+    // a concrete fix (reinstall/upgrade). Match ENOENT specifically — NOT the
+    // EBADF "failed to spawn" path, which is a transient fd hiccup, nor ENOTFOUND
+    // (a DNS/backend signal handled below).
+    if (/\benoent\b|command not found|no such file or directory/.test(codexText)) {
+        return "binary";
+    }
+    // Auth: only genuine codex login/credential signals (MCP lines already gone).
+    if (/\bunauthorized\b|\b401\b|not (logged|signed) in|please run [`']?codex login|\bcodex login\b|login (has )?expired|authentication failed|missing api key|credentials? (expired|invalid)/.test(codexText)) {
+        return "auth";
+    }
+    // Out of credits / over quota / rate-limited: a 429 from codex's backend, the
+    // common cause being an exhausted OpenAI balance or a hit plan/usage cap.
+    // Mirrors the Claude classifier's rate_limit bucket. Matched before backend
+    // (which only catches 5xx, not 429) so it never falls through to unknown and
+    // gets mislabelled "preflight failed for an unrecognized reason".
+    if (/rate limit|\b429\b|too many requests|usage limit|\bquota\b|out of credits|insufficient (credit|quota|balance)/.test(codexText)) {
+        return "rate_limit";
+    }
+    if (/timed out|\btimeout\b/.test(codexText)) {
+        return "timeout";
+    }
+    if (/connection reset|connection refused|failed to connect|\bnetwork\b|\beconnreset\b|\benotfound\b|reconnecting|http 5\d\d|backend-api/.test(codexText)) {
+        return "backend";
+    }
+    return "unknown";
+}
+/**
+ * Best-effort model name from the codex banner (`model: <name>`), for display
+ * only. Returns null when absent. Never used for control flow.
+ */
+export function extractCodexModelFromError(error) {
+    if (!error) {
+        return null;
+    }
+    const match = /^\s*model:\s*(\S+)/m.exec(error);
+    return match ? (match[1] ?? null) : null;
+}
+/**
+ * A short, leak-free, human summary for a class. Deliberately canned (no raw
+ * stderr, no file paths, no prompt/session content) so SwiftBar/doctor can
+ * surface it without parsing or redacting raw codex output.
+ */
+export function summarizeCodexPreflightClass(cls, model) {
+    switch (cls) {
+        case "auth":
+            return "Codex login appears to have expired.";
+        case "model":
+            return model
+                ? `Codex rejected the model "${model}".`
+                : "Codex rejected the configured model.";
+        case "cli_incompatible":
+            return "Codex CLI is too old for capture — it rejected an option Onadit needs.";
+        case "binary":
+            return "Codex CLI could not be found or started — it may have moved or been removed.";
+        case "rate_limit":
+            return "Codex hit a rate/usage limit or is out of credits — check your OpenAI balance.";
+        case "timeout":
+            return "Codex probe timed out — often a transient backend hiccup.";
+        case "backend":
+            return "Codex could not reach its backend (network/transport).";
+        case "unknown":
+            return "Codex preflight failed for an unrecognized reason.";
+    }
+}
+//# sourceMappingURL=codex-preflight.js.map

package/dist/src/diagnostics/codex-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-preflight.js","sourceRoot":"","sources":["../../../src/diagnostics/codex-preflight.ts"],"names":[],"mappings":"AA6BA,0EAA0E;AAC1E,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,wBAAwB,GAC5B,6KAA6K,CAAC;AAEhL;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,KAAa,EACb,MAAM,GAAG,EAAE;IAEX,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IACE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpB,CAAC,cAAc,CAAC,IAAI,CAAC;YACrB,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;YACnC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAC7B,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAgC;IAEhC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK;SACpB,KAAK,CAAC,OAAO,CAAC;SACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;SACvC,IAAI,CAAC,IAAI,CAAC;SACV,WAAW,EAAE,CAAC;IAEjB,yEAAyE;IACzE,2EAA2E;IAC3E,IAAI,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,2EAA2E;IAC3E,mEAAmE;IACnE,2DAA2D;IAC3D,8EAA8E;IAC9E,qEAAqE;IACrE,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,8EAA8E;IAC9E,IACE,6NAA6N,CAAC,IAAI,CAChO,SAAS,CACV,EACD,CAAC;QACD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,4EAA4E;IAC5E,qEAAqE;IACrE,8EAA8E;IAC9E,8EAA8E;IAC9E,0EAA0E;IAC1E,8EAA8E;IAC9E,wCAAwC;IACxC,IAAI,wDAAwD,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8EAA8E;IAC9E,IACE,uLAAuL,CAAC,IAAI,CAC1L,SAAS,CACV,EACD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,6EAA6E;IAC7E,kEAAkE;IAClE,IACE,+GAA+G,CAAC,IAAI,CAClH,SAAS,CACV,EACD,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IACE,oIAAoI,CAAC,IAAI,CACvI,SAAS,CACV,EACD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAgC;IAEhC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAA6B,EAC7B,KAAoB;IAEpB,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,sCAAsC,CAAC;QAChD,KAAK,OAAO;YACV,OAAO,KAAK;gBACV,CAAC,CAAC,6BAA6B,KAAK,IAAI;gBACxC,CAAC,CAAC,sCAAsC,CAAC;QAC7C,KAAK,kBAAkB;YACrB,OAAO,wEAAwE,CAAC;QAClF,KAAK,QAAQ;YACX,OAAO,8EAA8E,CAAC;QACxF,KAAK,YAAY;YACf,OAAO,gFAAgF,CAAC;QAC1F,KAAK,SAAS;YACZ,OAAO,2DAA2D,CAAC;QACrE,KAAK,SAAS;YACZ,OAAO,wDAAwD,CAAC;QAClE,KAAK,SAAS;YACZ,OAAO,oDAAoD,CAAC;IAChE,CAAC;AACH,CAAC"}

package/dist/src/diagnostics/doctor.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Pure diagnosis layer shared by `onadit doctor`, the repair-prompt
+ * generator, and the daemon's failure notifier.
+ *
+ * It consumes exactly what `onadit status` already consumes — the
+ * `/status/friend` payload plus the friend's local signals (Voyage key
+ * last-4, MCP-client install presence) — and folds them into a small,
+ * severity-ordered list of issues. Each issue carries plain-language
+ * copy and one next action, so every surface (CLI, prompt, notification)
+ * tells the same story.
+ *
+ * Issue ordering follows `decideNextLine` in `friend-header.ts` so the
+ * two surfaces tell the same story, with one deliberate policy on top:
+ * `primary` (the "do this first" action) is always the highest-SEVERITY
+ * issue — a `broken` failure outranks any `warning`, regardless of
+ * positional order. This is why `onadit doctor` can lead with a broken
+ * capture failure where `onadit status`'s flat, positional Next: line
+ * might surface a warning-level inbox rejection first. The lists never
+ * contradict each other; `doctor` simply elevates "what is actually
+ * broken" to the lead, which is its whole job.
+ *
+ * This module is intentionally side-effect free: no IO, no clock except
+ * the injected `now`, no daemon access. Callers fetch the payload and
+ * pass it in.
+ */
+import type { FriendStatusPayload } from "../server/routes/friend-status.js";
+/** Stable identifiers for each diagnosable condition. */
+export type DoctorIssueKind = "daemon_unreachable" | "daemon_auth_failed" | "config_missing" | "voyage_key_missing" | "semantic_search_off" | "codex_auth_expired" | "codex_preflight_failed" | "claude_auth_expired" | "claude_preflight_failed" | "voyage_embed_errors" | "index_write_errors" | "inbox_import_errors" | "capture_failed" | "capture_daemon_stale" | "mcp_not_installed" | "earlier_names_left" | "menu_bar_unavailable" | "menu_bar_broken" | "capture_quarantined" | "capture_repairing" | "update_available";
+/**
+ * `broken` blocks Onadit from doing its job (no capture, no search, no
+ * memory). `warning` is degraded-but-working or user-side (a rejected
+ * import, a missing optional client, an available update).
+ */
+export type DoctorSeverity = "broken" | "warning";
+export interface DoctorIssue {
+    kind: DoctorIssueKind;
+    severity: DoctorSeverity;
+    /** One-line plain-language headline a friend can read. */
+    title: string;
+    /** Plain-language explanation of what is wrong and why it matters. */
+    detail: string;
+    /** Exactly one next action — a command or a concrete step. */
+    nextAction: string;
+    /**
+     * Stable identity of the *cause*, not just the subsystem. For most
+     * issues this is the kind, but error-bearing issues fold in the error
+     * class (e.g. `voyage_embed_errors:provider_400`) so the notifier can
+     * tell "same subsystem, new cause" apart from a still-unresolved
+     * repeat. Optional so hand-built issues fall back to `kind`.
+     */
+    fingerprint?: string;
+    /**
+     * True when a *running* daemon can observe this failure and is
+     * therefore allowed to raise a native notification about it. A fully
+     * dead daemon cannot observe anything, so `daemon_unreachable` is
+     * false here — that case needs the Slice D watchdog, not this path.
+     */
+    daemonObservable: boolean;
+}
+/** Local-only signals the friend's machine answers without the daemon. */
+export interface DoctorLocalSignals {
+    voyageLast4: string | null;
+    mcpClients: Array<{
+        client: string;
+        installed: boolean;
+    }>;
+    /**
+     * SwiftBar presence + plugin health — null when not applicable (non-macOS, or
+     * a caller that does not probe it, e.g. the daemon notifier). `installed:
+     * false` raises the menu-bar advisory; `pluginDangling: true` raises the
+     * "plugin is broken — reinstall" advisory. `pluginDangling` is optional so a
+     * caller that only knows app presence still type-checks (undefined → silent).
+     */
+    swiftBar?: {
+        installed: boolean;
+        pluginDangling?: boolean;
+    } | null;
+    /**
+     * The person's own rule and settings files that still name the earlier
+     * tools, for a connection they moved to the current names. Optional so a
+     * caller that does not probe it stays silent.
+     */
+    earlierNames?: {
+        files: string[];
+    };
+}
+/**
+ * Why `/status/friend` could not be read. A null status is NOT always
+ * "the daemon is down" — the request can fail because there is no config,
+ * no token has been issued, or the daemon rejected our auth. Each needs a
+ * different next action, so the caller classifies the failure and the
+ * diagnosis turns it into the right issue. Defaults to `connection_refused`
+ * (the in-process daemon caller never passes null, so this only matters
+ * for the CLI).
+ */
+export type DoctorUnreachableReason = "connection_refused" | "auth_failed" | "not_authenticated" | "config_missing" | "unknown";
+export interface DoctorInput {
+    /** `/status/friend` payload, or null when it could not be read. */
+    status: FriendStatusPayload | null;
+    /**
+     * When `status` is null, why. Lets the diagnosis distinguish "daemon
+     * down" from "cannot authenticate to the daemon" from "no config yet".
+     */
+    unreachableReason?: DoctorUnreachableReason;
+    localSignals: DoctorLocalSignals;
+    /** Injected clock; defaults to Date.now() at the call site. */
+    now: number;
+}
+export interface DoctorReport {
+    /** True when no `broken` issue is present. Warnings do not flip this. */
+    healthy: boolean;
+    /**
+     * The single most important issue — the one whose `nextAction` a
+     * surface should lead with. Null only when there are no issues at all.
+     */
+    primary: DoctorIssue | null;
+    /** All detected issues, highest priority first. */
+    issues: DoctorIssue[];
+}
+/**
+ * Diagnose Onadit health from the same inputs `onadit status` uses. Pure:
+ * given identical inputs it always returns the same report.
+ */
+export declare function diagnose(input: DoctorInput): DoctorReport;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/src/diagnostics/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../../src/diagnostics/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAS7E,yDAAyD;AACzD,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,oBAAoB,GACpB,qBAAqB,GACrB,oBAAoB,GACpB,wBAAwB,GACxB,qBAAqB,GACrB,yBAAyB,GACzB,qBAAqB,GACrB,oBAAoB,GACpB,qBAAqB,GACrB,gBAAgB,GAChB,sBAAsB,GACtB,mBAAmB,GACnB,oBAAoB,GACpB,sBAAsB,GACtB,iBAAiB,GACjB,qBAAqB,GACrB,mBAAmB,GACnB,kBAAkB,CAAC;AAEvB;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,cAAc,CAAC;IACzB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC1D;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IACnE;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAC/B,oBAAoB,GACpB,aAAa,GACb,mBAAmB,GACnB,gBAAgB,GAChB,SAAS,CAAC;AAEd,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACnC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C,YAAY,EAAE,kBAAkB,CAAC;IACjC,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,mDAAmD;IACnD,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAmHD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,CAsYzD"}