tauri-agent-tools 0.6.0 → 0.7.0

package/.agents/skills/tauri-agent-tools/SKILL.md

@@ -1,8 +1,8 @@
 ---
 name: tauri-agent-tools
-description: CLI for inspecting and interacting with Tauri desktop apps — DOM queries, screenshots, interaction (click/type/scroll), IPC monitoring, store inspection, structured assertions
-version: 0.6.0
-tags: [tauri, desktop, debugging, screenshot, dom, inspection, diff, mutations, snapshot, interaction, click, type, scroll, invoke, probe, capture, check, store-inspect]
+description: CLI for inspecting and interacting with Tauri desktop apps — DOM queries, screenshots, interaction (click/type/scroll), IPC monitoring, store inspection, structured assertions, plus bridge-free diagnostics (OS logs, app paths, sidecar NDJSON tap/replay, forensic bundles) and the `diagnose` super-command for one-shot triage
+version: 0.7.0
+tags: [tauri, desktop, debugging, screenshot, dom, inspection, diff, mutations, snapshot, interaction, click, type, scroll, invoke, probe, capture, check, store-inspect, forensics, os-logs, app-paths, sidecar, config-inspect, diagnose]
 ---
 
 # tauri-agent-tools
@@ -33,16 +33,40 @@ npm install -g tauri-agent-tools
 Some commands require the Rust dev bridge running inside the Tauri app. Others work standalone.
 
 **Bridge required** (needs running Tauri app with bridge):
-`screenshot --selector`, `dom`, `eval`, `wait --selector`, `wait --eval`, `ipc-monitor`, `console-monitor`, `rust-logs`, `storage`, `page-state`, `mutations`, `snapshot`, `click`, `type`, `scroll`, `focus`, `navigate`, `select`, `invoke`, `capture`, `check`, `store-inspect`
+`screenshot --selector`, `dom`, `eval`, `wait --selector`, `wait --eval`, `ipc-monitor`, `console-monitor`, `rust-logs`, `storage`, `page-state`, `mutations`, `snapshot`, `click`, `type`, `scroll`, `focus`, `navigate`, `select`, `invoke`, `capture`, `check`, `store-inspect`, `process-tree` *(v0.7+)*, `capabilities audit` *(v0.7+)*, `webview attach` *(v0.7+)*, `health` *(v0.7+)*
 
 **Standalone** (no bridge needed):
-`screenshot --title` (full window only), `wait --title`, `list-windows`, `info`, `diff`
+`screenshot --title` (full window only), `wait --title`, `list-windows`, `info`, `diff`, `app-paths`, `config inspect`, `os-logs`, `sidecar tap`, `sidecar replay`, `forensics`
 
 **Optional bridge:**
 `probe` (works standalone to discover bridges, richer output with bridge)
 
 The bridge auto-discovers via token files in `/tmp/tauri-dev-bridge-*.token`. No manual port/token configuration needed.
 
+## Don't know where to start? `diagnose`
+
+When something's wrong and you're not sure why, run:
+
+```bash
+tauri-agent-tools diagnose --config ./src-tauri -o ./diagnose-out
+```
+
+`diagnose` is a best-effort super-command. It always runs the bridge-free forensics half; if a dev bridge is reachable it also layers `/process`, `/capabilities`, `/devtools`, `/health` data. The master `summary.md` lists "Next steps" pointing at the right deeper command. See the [`tauri-debug-quickstart`](../tauri-debug-quickstart/SKILL.md) skill for a full symptom-to-command decision tree.
+
+## Debugging decision tree (precision form)
+
+When you know what you're looking at, jump straight to:
+
+| Symptom | First command |
+|---------|---------------|
+| Don't know — give me everything | `tauri-agent-tools diagnose -o ./diag` |
+| App is running and bridge is responding | Use the bridge-mediated commands listed above (`screenshot`, `dom`, `eval`, …) |
+| Bridge isn't responding (release build, app crashed, pre-webview boot failure) | `tauri-agent-tools forensics -o ./forensics-out` |
+| You only have the bundle id, no source tree | `tauri-agent-tools app-paths --identifier com.example.app --platform all --exists` |
+| Need a structured snapshot of `tauri.conf.json` + capabilities | `tauri-agent-tools config inspect --json` |
+| Suspicion: a sidecar process is emitting malformed/unexpected NDJSON | Run the sidecar under `tauri-agent-tools sidecar tap --schema <path> -- <cmd>` instead of under Tauri |
+| OS-level error visible in Console.app/journalctl but not in app logs | `tauri-agent-tools os-logs --identifier com.example.app --level error --duration 30000` |
+
 ## Core Workflows
 
 ### Inspect DOM then screenshot an element
@@ -120,6 +144,60 @@ tauri-agent-tools rust-logs --source sidecar --duration 10000 --json
 tauri-agent-tools rust-logs --source sidecar:ffmpeg --duration 5000 --json
 ```
 
+### Bridge-extended diagnostics (process tree, capabilities, devtools, health — requires bridge v0.7.0+)
+
+Four commands that talk to new endpoints on the dev bridge. Each calls `GET /version` first to feature-detect and emits a clear "requires bridge v0.7.0+ — re-copy dev_bridge.rs" error against older bridges.
+
+```bash
+# Tauri PID + registered sidecars (uses /process)
+tauri-agent-tools process-tree --json
+
+# Devtron-style live capability audit (uses /capabilities)
+tauri-agent-tools capabilities audit --json
+# findings[] flag wildcard "*", over-broad shell:/fs:/http: scopes,
+# capabilities that reference window labels not actually registered, etc.
+
+# Inspector URL or platform hint (uses /devtools)
+tauri-agent-tools webview attach              # human-readable with hint
+tauri-agent-tools webview attach --print-url  # URL alone (empty if none)
+tauri-agent-tools webview attach --open       # launch in default browser
+
+# "Is this app sick" check (uses /health). Exits non-zero on unhealthy.
+tauri-agent-tools health --json
+```
+
+Sidecars only appear in `process-tree` / `health` if integrators register them — either by passing `Some(&registry)` to `dev_bridge::spawn_sidecar_monitored`, or by calling `dev_bridge::register_sidecar` after their own spawn.
+
+### Bridge-free diagnostics (post-mortem & sidecar workflows)
+
+These six commands need no live bridge — useful for release builds, dead apps, and sidecar processes.
+
+```bash
+# Resolve the app's OS data/log/cache/config dirs from tauri.conf.json
+tauri-agent-tools app-paths --config ./src-tauri --json
+# All three platforms (handy for cross-OS forensics)
+tauri-agent-tools app-paths --config ./src-tauri --platform all --exists
+
+# Structured snapshot of the app config + capability/permission audit
+tauri-agent-tools config inspect --config ./src-tauri --json
+# warnings[] flags wildcard "*" perms, fs:allow-all, capabilities referencing
+# plugins not declared in Cargo.toml, sidecars declared without tauri-plugin-shell.
+
+# OS-level log tail, filtered to a Tauri bundle id (NDJSON one-per-line)
+tauri-agent-tools os-logs --identifier com.example.app --duration 5000
+tauri-agent-tools os-logs --level error --source main --duration 30000
+
+# Run a sidecar under a tap to see its stdio + validate against a JSON Schema
+tauri-agent-tools sidecar tap --schema ./schema.json --record /tmp/run.ndjson -- node my-sidecar.js
+# Replay deterministically
+tauri-agent-tools sidecar replay /tmp/run.ndjson --to-exec node my-sidecar.js --rate 100
+
+# One-shot forensic bundle for post-crash analysis. Works on a DEAD app.
+tauri-agent-tools forensics --config ./src-tauri -o ./forensics-out
+# → ./forensics-out/{summary.md,summary.json,project.json,app-log-tail.txt,live-os-log.ndjson}
+# summary.md includes detected panic markers + suggested next commands.
+```
+
 ### Watch DOM mutations
 
 ```bash
@@ -237,6 +315,17 @@ tauri-agent-tools eval "document.title" --window-label overlay --json
 | `capture` | `-o <dir>`, `-s <css>`, `--logs-duration <ms>`, `--json` | yes | Full debug evidence bundle |
 | `check` | `--selector`, `--text`, `--eval`, `--no-errors`, `--json` | yes | Structured assertions (exit 0/1) |
 | `store-inspect` | `--framework`, `--store <name>`, `--depth <n>`, `--json` | yes | Inspect reactive store state |
+| `app-paths` | `--config <path>`, `--identifier <id>`, `--platform <os>`, `--exists`, `--json` | no | Resolve Tauri 2 app's OS data/log/cache/config dirs |
+| `config inspect` | `--config <path>`, `--capabilities-dir <path>`, `--cargo-toml <path>`, `--json` | no | Structured `tauri.conf.json` snapshot + capability audit |
+| `os-logs` | `--identifier <id>`, `--level <lvl>`, `--source <src>`, `--since <dur>`, `--duration <ms>`, `--json` | no | Tail host OS log stream filtered to a Tauri bundle id |
+| `sidecar tap` | `-- <cmd...>`, `--schema <path>`, `--record <path>`, `--raw`, `--json` | no | Wrap-and-run a sidecar, frame NDJSON, validate envelopes |
+| `sidecar replay` | `<file>`, `--to-exec <cmd>`, `--rate <lps>`, `--loop` | no | Replay a recorded NDJSON sidecar stream |
+| `forensics` | `--config <path>`, `--identifier <id>`, `-o <dir>`, `--since <dur>`, `--json` | no | One-shot forensic bundle (works on dead apps) |
+| `process-tree` | `--json` | yes (v0.7+) | Tauri PID + registered sidecars with alive/DEAD status |
+| `capabilities audit` | `--json` | yes (v0.7+) | Live Devtron-style audit of declared Tauri capabilities |
+| `webview attach` | `--print-url`, `--open`, `--json` | yes (v0.7+) | Print webview inspector URL or platform hint |
+| `health` | `--json` | yes (v0.7+) | Uptime + webview/sidecar liveness (exit non-zero if unhealthy) |
+| `diagnose` | `--config <path>`, `-o <dir>`, `--since <dur>`, `--no-bridge`, `--json` | optional | Best-effort super-bundle (forensics + live bridge enrichment) |
 
 ## Targeting Flags
 

package/.agents/skills/tauri-bridge-setup/SKILL.md

@@ -1,26 +1,34 @@
 ---
 name: tauri-bridge-setup
 description: How to add the tauri-agent-tools Rust dev bridge to a Tauri application
-version: 0.6.0
-tags: [tauri, rust, bridge, setup, integration, multi-window]
+version: 0.7.0
+tags: [tauri, rust, bridge, setup, integration, multi-window, process-tree, capabilities, devtools, health]
 ---
 
 # Tauri Dev Bridge Setup
 
-Add the dev bridge to a Tauri app so `tauri-agent-tools` can inspect DOM, evaluate JS, monitor IPC, take element screenshots, and interact with the UI.
+Add the dev bridge to a Tauri app so `tauri-agent-tools` can inspect DOM, evaluate JS, monitor IPC, take element screenshots, and interact with the UI. Bridge v0.7 also exposes process tree, capability audit, devtools URL, and health endpoints.
 
 The bridge runs **only in debug builds** and is stripped from release builds automatically.
 
+## Re-copying for v0.7
+
+> **Upgrading from v0.6:** The bridge surface grew with four new endpoints (`/process`, `/capabilities`, `/devtools`, `/health`) and `start_bridge` now returns a third tuple element (the sidecar registry). **Re-copy `dev_bridge.rs` from the latest `examples/tauri-bridge/src/dev_bridge.rs`** and adjust your `main.rs` to destructure the new return shape (see Step 3 below). The CLI's new commands (`process-tree`, `capabilities audit`, `webview attach`, `health`) feature-detect via `GET /version` and emit a clear "requires v0.7.0+" error when the bridge is older — so partial upgrades fail loudly rather than silently.
+
 ## Bridge Endpoints
 
-The bridge exposes four HTTP endpoints on a random localhost port:
+The bridge exposes eight HTTP endpoints on a random localhost port:
 
 | Endpoint | Method | Auth | Purpose |
 |----------|--------|------|---------|
 | `/eval` | POST | token | Evaluate JS in a webview (supports `window` param for multi-window) |
 | `/logs` | POST | token | Drain Rust tracing logs and sidecar output |
 | `/describe` | POST | token | Report PID, window labels, and capabilities |
-| `/version` | GET | none | Bridge version and available endpoints |
+| `/version` | GET | none | Bridge version and available endpoints (used for feature detection) |
+| `/process` | POST | token | Tauri PID + registered sidecars (powers `process-tree`) — **v0.7+** |
+| `/capabilities` | POST | token | Declared Tauri capability set + live window labels (powers `capabilities audit`) — **v0.7+** |
+| `/devtools` | POST | token | Webview inspector URL or platform hint (powers `webview attach`) — **v0.7+** |
+| `/health` | POST | token | Uptime + webview readiness + sidecar liveness (powers `health`) — **v0.7+** |
 
 ## Step 1 — Add Cargo dependencies
 
@@ -35,8 +43,13 @@ rand = "0.8"
 uuid = { version = "1", features = ["v4"] }
 tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["registry"] }
+
+[target.'cfg(unix)'.dependencies]
+libc = "0.2"
 ```
 
+(`libc` is used for the cheap `kill(pid, 0)` aliveness probe powering `/process` and `/health` sidecar reporting. Windows is supported but skips the liveness check in v0.7.)
+
 ## Step 2 — Copy the bridge module
 
 Copy `dev_bridge.rs` from the tauri-agent-tools package into your project:
@@ -74,6 +87,9 @@ fn main() {
     builder
         .setup(|app| {
             if cfg!(debug_assertions) {
+                // start_bridge returns (port, LogBuffer, SidecarRegistry).
+                // Hold onto the registry if you plan to spawn sidecars; otherwise
+                // the bound `let _` keeps it alive for the app's lifetime.
                 if let Err(e) = dev_bridge::start_bridge(app.handle()).map(|_| ()) {
                     eprintln!("Warning: Failed to start dev bridge: {e}");
                 }
@@ -132,25 +148,41 @@ tauri-agent-tools probe --json
 # → { "bridges": [{ "windows": ["main", "overlay", "settings"], ... }] }
 ```
 
-## Optional: Sidecar Log Capture
+## Optional: Sidecar Log Capture + Process Visibility
 
-To capture stdout/stderr from sidecar processes (external binaries), use `spawn_sidecar_monitored()`:
+To capture stdout/stderr from sidecar processes (external binaries) AND have them show up in `process-tree`/`health`, use `spawn_sidecar_monitored()` and pass the registry returned by `start_bridge`:
 
 ```rust
 if cfg!(debug_assertions) {
-    let (_port, log_buffer) = dev_bridge::start_bridge(app.handle())?;
+    let (_port, log_buffer, sidecar_registry) = dev_bridge::start_bridge(app.handle())?;
 
-    // Spawn a sidecar with monitored output
+    // Spawn a sidecar with monitored output AND registry tracking
     dev_bridge::spawn_sidecar_monitored(
-        "ffmpeg",           // name (appears as source: "sidecar:ffmpeg")
-        "ffmpeg",           // command
-        &["-i", "input.mp4", "-f", "null", "-"],  // args
+        "ffmpeg",                                     // name (source: "sidecar:ffmpeg")
+        "ffmpeg",                                     // command
+        &["-i", "input.mp4", "-f", "null", "-"],      // args
         &log_buffer,
+        Some(&sidecar_registry),                      // register for /process + /health
     )?;
 }
 ```
 
-Then monitor with: `tauri-agent-tools rust-logs --source sidecar --duration 10000`
+Pass `None` for the registry argument to opt out of process tracking (useful for ephemeral one-shot helpers).
+
+If you spawn children with your own mechanism, register them after the fact so they appear in `process-tree`:
+
+```rust
+let child = my_own_spawn(...)?;
+dev_bridge::register_sidecar(
+    &sidecar_registry,
+    "my-helper",
+    child.id(),
+    Some("/path/to/binary".to_string()),
+    vec!["--mode=watch".to_string()],
+);
+```
+
+Then monitor with: `tauri-agent-tools rust-logs --source sidecar --duration 10000`, view the tree with `tauri-agent-tools process-tree`, and check liveness with `tauri-agent-tools health`.
 
 ## Troubleshooting
 

package/.agents/skills/tauri-debug-quickstart/SKILL.md

@@ -0,0 +1,80 @@
+---
+name: tauri-debug-quickstart
+description: First-30-seconds triage for a broken Tauri desktop app. Pick the right command for the symptom you're seeing, with one-line escalations to deeper skills.
+version: 0.7.0
+tags: [tauri, debugging, triage, quickstart, decision-tree, forensics, diagnose]
+---
+
+# Tauri Debug Quickstart
+
+When something is wrong with a Tauri app, the first 30 seconds matter — they decide whether you spend the next hour reading the right logs or the wrong ones. This skill points you at the right `tauri-agent-tools` command for the symptom you're seeing.
+
+## The single-command answer
+
+If you don't know where to start, run this first:
+
+```bash
+tauri-agent-tools diagnose --config ./src-tauri -o ./diagnose-out
+```
+
+`diagnose` is a best-effort super-command that:
+
+1. Resolves the app's config + OS data/log paths
+2. Runs a forensics bundle (works even on dead apps — tails app logs for panics, pulls macOS DiagnosticReports, lists app-data files)
+3. If a live dev bridge is reachable, layers `/process`, `/capabilities`, `/devtools`, `/health` data on top
+4. Writes a master `summary.md` with detected anomalies and suggested next steps
+
+Then open `./diagnose-out/summary.md` and follow the "Next steps" section.
+
+## Symptom → command (when you need precision)
+
+Pick the row that matches what's broken. Each command works without the bridge unless noted.
+
+| Symptom | First command | Why |
+|---|---|---|
+| Don't know what's wrong | `tauri-agent-tools diagnose -o ./diag` | Everything-bundle; graceful on dead apps |
+| App crashed at startup | `tauri-agent-tools forensics --config ./src-tauri -o ./forensics` | Reads app log + DiagnosticReports without needing a live process |
+| App is running but bridge isn't responding | `tauri-agent-tools probe` | Detects whether the bridge process is up and shows token-file state |
+| App is running, bridge is up, but webview looks wrong | `tauri-agent-tools health --json` *(needs bridge v0.7+)* | Returns webview_ready + sidecar liveness in one call |
+| A sidecar process is the suspect | `tauri-agent-tools sidecar tap --schema ./schema.json -- <cmd>` | Wrap-and-run the sidecar standalone; frame NDJSON; validate envelopes |
+| Need to know exactly which files the app touches | `tauri-agent-tools app-paths --config ./src-tauri --exists` | Resolves Tauri 2's per-platform `app_data_dir`/`app_log_dir`/etc. + checks existence |
+| Need to audit Tauri capabilities for over-broad permissions | `tauri-agent-tools config inspect --config ./src-tauri` (static) **or** `tauri-agent-tools capabilities audit` (live, needs bridge v0.7+) | Flags `*`, `fs:allow-all`, `shell:allow-spawn`, etc. |
+| OS-level error visible in Console.app or journalctl | `tauri-agent-tools os-logs --identifier com.example.app --level error --duration 30000` | Filters platform log stream to the Tauri bundle id |
+| Inspector / webview attach | `tauri-agent-tools webview attach` *(needs bridge v0.7+)* | Returns inspector URL or platform-specific hint |
+| What sidecars did this app spawn? | `tauri-agent-tools process-tree --json` *(needs bridge v0.7+)* | Tauri PID + registered sidecars with alive/dead per-PID |
+
+## Decision tree
+
+```
+The app is...
+│
+├── crashed / not running ────────► forensics
+│   └─ no source on hand? ────────► forensics --identifier com.foo.bar
+│
+├── running but bridge down ──────► probe → fix bridge → retry
+│
+└── running, bridge up
+    ├── webview misbehaving ──────► health → snapshot → capabilities audit
+    ├── sidecar suspected ────────► sidecar tap (run sidecar under it standalone)
+    ├── IPC slow / wrong ─────────► ipc-monitor → check
+    └── DOM / UI inspection ──────► dom → screenshot → eval
+```
+
+When in doubt, escalate to `diagnose` — its `summary.md` will tell you which deeper command to use.
+
+## Output conventions
+
+- All commands accept `--json` for machine-readable output.
+- Bundle commands (`forensics`, `diagnose`) write a `summary.md` agents can open directly and a `summary.json` agents can parse.
+- Streaming commands (`os-logs`, `rust-logs`, `sidecar tap`) emit one NDJSON envelope per line on stdout.
+- Bridge v0.7+ commands feature-detect via `GET /version` and emit a clear "re-copy dev_bridge.rs" error against older bridges.
+
+## When this skill is wrong
+
+This guidance assumes the agent is inspecting a Tauri 2 desktop app on macOS or Linux. Caveats:
+
+- **Tauri 1 apps** — the `dirs`/`directories-next` path semantics that `app-paths` encodes match Tauri 2's `PathResolver`. Tauri 1's paths differ; some derived paths will be slightly off.
+- **Windows** — `os-logs` is stubbed in v0.7 (the Windows event log adapter is planned). `forensics` and `diagnose` still produce useful bundles on Windows; they just skip the live OS-log tail.
+- **The dev bridge requires `cfg!(debug_assertions)`** — release builds strip it, so bridge-dependent commands won't work against signed/notarized release artifacts. Use bridge-free commands (`forensics`, `app-paths`, `os-logs`, `config inspect`, `sidecar tap`) for those.
+
+For deeper how-tos see the [`tauri-agent-tools`](../tauri-agent-tools/SKILL.md) skill. For bridge integration setup (Rust side), see [`tauri-bridge-setup`](../tauri-bridge-setup/SKILL.md).

package/README.md

@@ -4,7 +4,7 @@
 
 **Agent-driven inspection toolkit for Tauri desktop apps**
 
-25 commands to screenshot, inspect, interact with, and monitor Tauri apps from the CLI.
+36 commands to screenshot, inspect, interact with, monitor, post-mortem, audit, and diagnose Tauri apps from the CLI.
 
 [![CI](https://github.com/cesarandreslopez/tauri-agent-tools/actions/workflows/ci.yml/badge.svg)](https://github.com/cesarandreslopez/tauri-agent-tools/actions/workflows/ci.yml)
 [![npm version](https://img.shields.io/npm/v/tauri-agent-tools.svg)](https://www.npmjs.com/package/tauri-agent-tools)
@@ -284,6 +284,74 @@ All bridge-dependent commands support:
 | `--pid <n>` | Target a specific app by PID |
 | `--window-label <label>` | Target a specific webview window (default: main) |
 
+## Don't know where to start? `diagnose`
+
+When something's wrong and you're not sure why, run this first:
+
+```bash
+tauri-agent-tools diagnose --config ./src-tauri -o ./diagnose-out
+# → ./diagnose-out/summary.md   (master report with "Next steps")
+# → ./diagnose-out/forensics/   (Tier 1 bundle: log tail, panics, paths)
+# → ./diagnose-out/bridge.json  (Tier 2 bridge data when reachable)
+```
+
+`diagnose` is a best-effort super-command. It works on dead apps. It layers bridge data on top when a dev bridge is reachable, degrades cleanly when not, and the master `summary.md` includes a "Next steps" section pointing at the right deeper command. Pass `--no-bridge` to skip the bridge phase entirely.
+
+See [`docs/troubleshooting/decision-tree.md`](docs/troubleshooting/decision-tree.md) for the full symptom → command flowchart.
+
+## Bridge-extending diagnostics (new in 0.7, requires bridge v0.7.0+)
+
+Four commands that talk to new dev-bridge endpoints. Each feature-detects via `GET /version` and surfaces an actionable upgrade error when the bridge is older than v0.7.0.
+
+```bash
+# Tauri PID + registered sidecars
+tauri-agent-tools process-tree --json
+
+# Live capability audit (vs. config inspect which reads JSON files)
+tauri-agent-tools capabilities audit --json
+
+# Webview inspector URL or platform hint
+tauri-agent-tools webview attach --print-url
+tauri-agent-tools webview attach --open
+
+# Quick "is this app sick" check — exits non-zero when unhealthy (CI-friendly)
+tauri-agent-tools health --json
+```
+
+> **Integrators upgrading from v0.6:** Re-copy `examples/tauri-bridge/src/dev_bridge.rs` into your app. `start_bridge` now returns a third tuple element (`SidecarRegistry`); pass it to `spawn_sidecar_monitored` so sidecars show up in `process-tree`/`health`. See `.agents/skills/tauri-bridge-setup/SKILL.md` for the full upgrade walkthrough.
+
+## Bridge-free diagnostics (new in 0.7)
+
+Six commands that work **without** the dev bridge — for release builds, dead apps, and sidecar processes that the bridge can't reach.
+
+```bash
+# Resolve Tauri 2's OS data/log/cache/config dirs from tauri.conf.json
+tauri-agent-tools app-paths --config ./src-tauri --json
+tauri-agent-tools app-paths --identifier com.example.app --platform all --exists
+
+# Structured "tauri info --json" + capability/permission audit
+tauri-agent-tools config inspect --config ./src-tauri --json
+# Warnings: wildcard permissions, fs:allow-all, capability/Cargo.toml plugin mismatches
+
+# Tail OS logs filtered to a Tauri bundle id (NDJSON envelopes)
+tauri-agent-tools os-logs --identifier com.example.app --duration 5000
+tauri-agent-tools os-logs --level error --source main --duration 30000
+
+# Wrap a sidecar, frame its stdout as NDJSON, validate against a JSON Schema
+tauri-agent-tools sidecar tap --schema ./schema.json --record /tmp/run.ndjson -- node my-sidecar.js
+# Replay the recording deterministically — to stdout or into a fresh sidecar's stdin
+tauri-agent-tools sidecar replay /tmp/run.ndjson --to-exec node my-sidecar.js --rate 100
+
+# Forensic bundle for post-crash analysis (composes the above; works on dead apps)
+tauri-agent-tools forensics --config ./src-tauri -o ./forensics-out
+# → ./forensics-out/{summary.md,summary.json,project.json,app-log-tail.txt,live-os-log.ndjson}
+```
+
+When to reach for them:
+- **The bridge isn't responding** → start with `forensics`.
+- **A sidecar is the suspect** → run it under `sidecar tap` instead of under Tauri.
+- **You don't have source on hand, just a bundle id** → `app-paths --identifier com.example.app`.
+
 ## How It Works
 
 ```
@@ -349,7 +417,7 @@ This package ships [Agent Skills](https://agentskills.io) so AI coding agents ca
 
 | Skill | Description |
 |-------|-------------|
-| `tauri-agent-tools` | Using all 25 CLI commands to inspect and interact with Tauri apps |
+| `tauri-agent-tools` | Using all 36 CLI commands to inspect and interact with Tauri apps |
 | `tauri-bridge-setup` | Adding the Rust dev bridge to a Tauri project |
 
 <details>
@@ -403,7 +471,7 @@ Full documentation is available at the [docs site](https://cesarandreslopez.gith
 - [Installation](https://cesarandreslopez.github.io/tauri-agent-tools/getting-started/installation/) — system requirements and setup
 - [Quick Start](https://cesarandreslopez.github.io/tauri-agent-tools/getting-started/quick-start/) — get running in 5 minutes
 - [Bridge Setup](https://cesarandreslopez.github.io/tauri-agent-tools/getting-started/bridge-setup/) — integrate the Rust bridge into your Tauri app
-- [Command Reference](https://cesarandreslopez.github.io/tauri-agent-tools/commands/) — all 25 commands with examples
+- [Command Reference](https://cesarandreslopez.github.io/tauri-agent-tools/commands/) — all 36 commands with examples
 - [Platform Support](https://cesarandreslopez.github.io/tauri-agent-tools/platform-support/) — X11, Wayland, macOS details
 - [Architecture](https://cesarandreslopez.github.io/tauri-agent-tools/architecture/overview/) — how it works under the hood
 

package/dist/bridge/client.d.ts

@@ -1,10 +1,14 @@
 import type { BridgeConfig } from '../schemas/bridge.js';
-import type { ElementRect, RustLogEntry, DescribeResponse, VersionResponse } from '../schemas/bridge.js';
+import type { ElementRect, RustLogEntry, DescribeResponse, VersionResponse, ProcessResponse, CapabilitiesResponse, DevtoolsResponse, HealthResponse } from '../schemas/bridge.js';
 import type { A11yNode } from '../schemas/dom.js';
 export declare class BridgeClient {
     private baseUrl;
     private token;
     private windowLabel;
+    /** Cached `/version` response. Populated by `requireEndpoint` on first call. */
+    private versionCache;
+    /** Set when `/version` is unreachable so we don't retry it for every call. */
+    private versionUnreachable;
     constructor(config: BridgeConfig, windowLabel?: string);
     eval(js: string, timeout?: number): Promise<unknown>;
     getElementRect(selector: string): Promise<ElementRect | null>;
@@ -18,4 +22,16 @@ export declare class BridgeClient {
     ping(): Promise<boolean>;
     describe(): Promise<DescribeResponse | null>;
     version(): Promise<VersionResponse | null>;
+    /**
+     * Verify the bridge exposes the requested endpoint. Caches the `/version`
+     * response so a CLI command that hits the bridge multiple times only pays
+     * one roundtrip for feature detection. Throws an actionable error when the
+     * bridge is too old, with a hint pointing integrators at the example.
+     */
+    requireEndpoint(path: string): Promise<void>;
+    process(): Promise<ProcessResponse>;
+    capabilities(): Promise<CapabilitiesResponse>;
+    devtools(): Promise<DevtoolsResponse>;
+    health(): Promise<HealthResponse>;
+    private postAuthed;
 }

package/dist/bridge/client.js

@@ -1,9 +1,24 @@
-import { ElementRectSchema, ViewportSizeSchema, BridgeEvalResponseSchema, BridgeLogsResponseSchema, DescribeResponseSchema, VersionResponseSchema, } from '../schemas/bridge.js';
+import { ElementRectSchema, ViewportSizeSchema, BridgeEvalResponseSchema, BridgeLogsResponseSchema, DescribeResponseSchema, VersionResponseSchema, ProcessResponseSchema, CapabilitiesResponseSchema, DevtoolsResponseSchema, HealthResponseSchema, } from '../schemas/bridge.js';
 import { A11yNodeSchema } from '../schemas/dom.js';
+/**
+ * Minimum bridge version supplying a given endpoint. Used by `requireEndpoint`
+ * to translate a missing-endpoint condition into an actionable error instead
+ * of an opaque 404.
+ */
+const ENDPOINT_MIN_VERSION = {
+    '/process': '0.7.0',
+    '/capabilities': '0.7.0',
+    '/devtools': '0.7.0',
+    '/health': '0.7.0',
+};
 export class BridgeClient {
     baseUrl;
     token;
     windowLabel;
+    /** Cached `/version` response. Populated by `requireEndpoint` on first call. */
+    versionCache = null;
+    /** Set when `/version` is unreachable so we don't retry it for every call. */
+    versionUnreachable = false;
     constructor(config, windowLabel) {
         this.baseUrl = `http://127.0.0.1:${config.port}`;
         this.token = config.token;
@@ -172,5 +187,71 @@ export class BridgeClient {
             return null;
         }
     }
+    /**
+     * Verify the bridge exposes the requested endpoint. Caches the `/version`
+     * response so a CLI command that hits the bridge multiple times only pays
+     * one roundtrip for feature detection. Throws an actionable error when the
+     * bridge is too old, with a hint pointing integrators at the example.
+     */
+    async requireEndpoint(path) {
+        if (this.versionUnreachable) {
+            throw new Error(`Bridge at ${this.baseUrl} did not respond to /version. The bridge may be ` +
+                `too old (pre-0.6.0) or not running. Confirm the dev server is up and try again.`);
+        }
+        if (this.versionCache === null) {
+            const v = await this.version();
+            if (v === null) {
+                this.versionUnreachable = true;
+                throw new Error(`Bridge at ${this.baseUrl} did not respond to /version. The bridge may be ` +
+                    `too old (pre-0.6.0) or not running. Confirm the dev server is up and try again.`);
+            }
+            this.versionCache = v;
+        }
+        if (this.versionCache.endpoints.includes(path))
+            return;
+        const minVersion = ENDPOINT_MIN_VERSION[path];
+        const versionHint = minVersion
+            ? `requires bridge v${minVersion}+ (this app reports v${this.versionCache.version})`
+            : `is not supported by the running bridge (v${this.versionCache.version})`;
+        throw new Error(`${path} ${versionHint}. ` +
+            `Re-copy examples/tauri-bridge/src/dev_bridge.rs into your app and rebuild — ` +
+            `see rust-bridge/README.md.`);
+    }
+    async process() {
+        await this.requireEndpoint('/process');
+        const res = await this.postAuthed('/process');
+        return ProcessResponseSchema.parse(await res.json());
+    }
+    async capabilities() {
+        await this.requireEndpoint('/capabilities');
+        const res = await this.postAuthed('/capabilities');
+        return CapabilitiesResponseSchema.parse(await res.json());
+    }
+    async devtools() {
+        await this.requireEndpoint('/devtools');
+        const res = await this.postAuthed('/devtools');
+        return DevtoolsResponseSchema.parse(await res.json());
+    }
+    async health() {
+        await this.requireEndpoint('/health');
+        const res = await this.postAuthed('/health');
+        return HealthResponseSchema.parse(await res.json());
+    }
+    async postAuthed(path, timeout = 5000) {
+        const res = await fetch(`${this.baseUrl}${path}`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ token: this.token }),
+            signal: AbortSignal.timeout(timeout),
+        });
+        if (!res.ok) {
+            if (res.status === 401 || res.status === 403) {
+                throw new Error('Bridge authentication failed — check your token');
+            }
+            const text = await res.text().catch(() => '');
+            throw new Error(`Bridge error (${res.status}) on ${path}: ${text}`);
+        }
+        return res;
+    }
 }
 //# sourceMappingURL=client.js.map

package/dist/bridge/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/bridge/client.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,MAAM,OAAO,YAAY;IACf,OAAO,CAAS;IAChB,KAAK,CAAS;IACd,WAAW,CAAqB;IAExC,YAAY,MAAoB,EAAE,WAAoB;QACpD,IAAI,CAAC,OAAO,GAAG,oBAAoB,MAAM,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,OAAO,GAAG,IAAI;QACnC,MAAM,IAAI,GAA4B,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QACjC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG;2CAC4B,OAAO;;;;SAIzC,CAAC;QAEN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,EAAE,GAAG,0EAA0E,CAAC;QACtF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,QAAQ,GAAG,MAAM,EAAE,KAAK,GAAG,EAAE;QACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CAmD4B,OAAO;;4CAEN,KAAK;SACxC,CAAC;QAEN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAO,GAAG,IAAI;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,WAAW,EAAE;gBAClD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC3C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,sBAAsB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,UAAU,EAAE;gBACjD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,qBAAqB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/bridge/client.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAW9B,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD;;;;GAIG;AACH,MAAM,oBAAoB,GAA2B;IACnD,UAAU,EAAE,OAAO;IACnB,eAAe,EAAE,OAAO;IACxB,WAAW,EAAE,OAAO;IACpB,SAAS,EAAE,OAAO;CACnB,CAAC;AAEF,MAAM,OAAO,YAAY;IACf,OAAO,CAAS;IAChB,KAAK,CAAS;IACd,WAAW,CAAqB;IACxC,gFAAgF;IACxE,YAAY,GAA2B,IAAI,CAAC;IACpD,8EAA8E;IACtE,kBAAkB,GAAG,KAAK,CAAC;IAEnC,YAAY,MAAoB,EAAE,WAAoB;QACpD,IAAI,CAAC,OAAO,GAAG,oBAAoB,MAAM,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,OAAO,GAAG,IAAI;QACnC,MAAM,IAAI,GAA4B,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QACjC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG;2CAC4B,OAAO;;;;SAIzC,CAAC;QAEN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,EAAE,GAAG,0EAA0E,CAAC;QACtF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,QAAQ,GAAG,MAAM,EAAE,KAAK,GAAG,EAAE;QACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CAmD4B,OAAO;;4CAEN,KAAK;SACxC,CAAC;QAEN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAO,GAAG,IAAI;QAC5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,WAAW,EAAE;gBAClD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC3C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,sBAAsB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,UAAU,EAAE;gBACjD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,qBAAqB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,IAAY;QAChC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,OAAO,kDAAkD;gBACzE,iFAAiF,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACf,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,OAAO,kDAAkD;oBACzE,iFAAiF,CACpF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO;QAEvD,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,UAAU;YAC5B,CAAC,CAAC,oBAAoB,UAAU,wBAAwB,IAAI,CAAC,YAAY,CAAC,OAAO,GAAG;YACpF,CAAC,CAAC,4CAA4C,IAAI,CAAC,YAAY,CAAC,OAAO,GAAG,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,IAAI,WAAW,IAAI;YACxB,8EAA8E;YAC9E,4BAA4B,CAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC9C,OAAO,qBAAqB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QACnD,OAAO,0BAA0B,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC/C,OAAO,sBAAsB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,OAAO,GAAG,IAAI;QACnD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,QAAQ,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/cli.js

@@ -34,6 +34,17 @@ import { registerStoreInspect } from './commands/storeInspect.js';
 import { registerCheck } from './commands/check.js';
 import { registerProbe } from './commands/probe.js';
 import { registerCapture } from './commands/capture.js';
+import { registerAppPaths } from './commands/appPaths.js';
+import { registerConfigInspect } from './commands/configInspect.js';
+import { registerOsLogs } from './commands/osLogs.js';
+import { registerSidecarTap } from './commands/sidecarTap.js';
+import { registerSidecarReplay } from './commands/sidecarReplay.js';
+import { registerForensics } from './commands/forensics.js';
+import { registerProcessTree } from './commands/processTree.js';
+import { registerCapabilitiesAudit } from './commands/capabilitiesAudit.js';
+import { registerWebviewAttach } from './commands/webviewAttach.js';
+import { registerHealth } from './commands/health.js';
+import { registerDiagnose } from './commands/diagnose.js';
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const pkg = PackageJsonSchema.parse(JSON.parse(readFileSync(resolve(__dirname, '..', 'package.json'), 'utf-8')));
 const program = new Command()
@@ -83,6 +94,20 @@ registerStoreInspect(program);
 registerCheck(program);
 registerProbe(program);
 registerCapture(program, getAdapter);
+// ── Bridge-free diagnostics (Tier 1) ─────────────────────────────────────────
+registerAppPaths(program);
+registerConfigInspect(program);
+registerOsLogs(program);
+registerSidecarTap(program);
+registerSidecarReplay(program);
+registerForensics(program);
+// ── Bridge-extending diagnostics (Tier 2 — requires bridge v0.7.0+) ──────────
+registerProcessTree(program);
+registerCapabilitiesAudit(program);
+registerWebviewAttach(program);
+registerHealth(program);
+// ── Tier 3: super-command (composes Tier 1 + Tier 2) ─────────────────────────
+registerDiagnose(program);
 program.parseAsync().catch((err) => {
     console.error(err instanceof Error ? err.message : String(err));
     process.exitCode = 1;