usesteady 0.1.0-alpha.1

package/dist/src/execution/reminders/reminder-time-parser.js

@@ -0,0 +1,113 @@
+/**
+ * Reminder time parser — Phase 6, Execution Layer.
+ *
+ * ── Purpose ───────────────────────────────────────────────────────────────────
+ *
+ * Converts a time_text phrase into a structured ParsedTime.
+ * Conservative, regex-only, fully deterministic.
+ *
+ * ── What it does NOT do ───────────────────────────────────────────────────────
+ *
+ *   Does NOT produce Date objects or resolved timestamps.
+ *   Does NOT assume a default time for day-only phrases.
+ *   Does NOT handle timezones.
+ *   Does NOT do fuzzy matching or ML-based inference.
+ *
+ * ── Pattern priority (first match wins) ──────────────────────────────────────
+ *
+ *   1. relative_offset  — "in N minutes" / "in N hours"
+ *   2. day_with_time    — day qualifier + explicit time phrase
+ *   3. time_of_day      — explicit time with no day qualifier
+ *   4. unresolvable     — anything else (including day qualifier without time)
+ *
+ * ── Day qualifier without time → unresolvable ────────────────────────────────
+ *
+ *   "remind me tomorrow" has no time → unresolvable.
+ *   The execution layer does not guess a default time.
+ *   The caller must surface the missing time to the user.
+ */
+// ─── Patterns ─────────────────────────────────────────────────────────────────
+/** "in 30 minutes" */
+const RELATIVE_MINUTES_RE = /\bin\s+(\d+)\s+minutes?\b/i;
+/** "in 2 hours" */
+const RELATIVE_HOURS_RE = /\bin\s+(\d+)\s+hours?\b/i;
+/**
+ * Explicit time phrase: "at 3pm", "at 09:30 am", "at 14:00"
+ * Groups: [1]=hour, [2]=minute (optional), [3]=am/pm (optional)
+ */
+const TIME_OF_DAY_RE = /\bat\s+(\d{1,2})(?::(\d{2}))?\s*(am|pm)?\b/i;
+/**
+ * Day qualifier: "tomorrow", "today", "next Monday" … "next Sunday"
+ * Captured as a single string for textual preservation.
+ */
+const DAY_QUALIFIER_RE = /\b(tomorrow|today|next\s+(?:monday|tuesday|wednesday|thursday|friday|saturday|sunday))\b/i;
+function extractTimeParts(match) {
+    const hour = parseInt(match[1], 10);
+    const minute = match[2] !== undefined ? parseInt(match[2], 10) : 0;
+    const raw = match[3]?.toLowerCase();
+    const period = raw === "am" ? "am" : raw === "pm" ? "pm" : "24h";
+    return { hour, minute, period };
+}
+// ─── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Parse a time_text phrase into a structured ParsedTime.
+ *
+ * Pure function — same input always produces the same output.
+ * Called once inside executeReminder(); the result is passed to
+ * validateExecutionRequest(req, parsedTime) to avoid duplicate parsing.
+ *
+ * @param time_text  The time phrase extracted by the Present Layer, e.g.
+ *                   "tomorrow at 9am", "in 30 minutes", "at 3pm".
+ */
+export function parseTimeText(time_text) {
+    const input = time_text.trim();
+    // ── 1. Relative offset ────────────────────────────────────────────────────
+    const relMin = RELATIVE_MINUTES_RE.exec(input);
+    if (relMin) {
+        return {
+            kind: "relative_offset",
+            offset_minutes: parseInt(relMin[1], 10),
+            basis: input,
+        };
+    }
+    const relHr = RELATIVE_HOURS_RE.exec(input);
+    if (relHr) {
+        return {
+            kind: "relative_offset",
+            offset_minutes: parseInt(relHr[1], 10) * 60,
+            basis: input,
+        };
+    }
+    // ── 2. Day qualifier + time ───────────────────────────────────────────────
+    const dayMatch = DAY_QUALIFIER_RE.exec(input);
+    const timeMatch = TIME_OF_DAY_RE.exec(input);
+    if (dayMatch && timeMatch) {
+        const { hour, minute, period } = extractTimeParts(timeMatch);
+        return {
+            kind: "day_with_time",
+            day: dayMatch[1].toLowerCase(),
+            hour,
+            minute,
+            period,
+        };
+    }
+    // Day qualifier with no explicit time → unresolvable.
+    // We do not guess a default time (e.g. "tomorrow" alone is ambiguous).
+    if (dayMatch && !timeMatch) {
+        return {
+            kind: "unresolvable",
+            reason: `day qualifier "${dayMatch[1].toLowerCase()}" present but no time specified`,
+        };
+    }
+    // ── 3. Time of day only (no day qualifier) ────────────────────────────────
+    if (timeMatch) {
+        const { hour, minute, period } = extractTimeParts(timeMatch);
+        return { kind: "time_of_day", hour, minute, period };
+    }
+    // ── 4. Unresolvable ───────────────────────────────────────────────────────
+    return {
+        kind: "unresolvable",
+        reason: `could not parse time from: "${input}"`,
+    };
+}
+//# sourceMappingURL=reminder-time-parser.js.map

package/dist/src/execution/reminders/reminder-time-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reminder-time-parser.js","sourceRoot":"","sources":["../../../../src/execution/reminders/reminder-time-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,iFAAiF;AAEjF,sBAAsB;AACtB,MAAM,mBAAmB,GAAG,4BAA4B,CAAC;AAEzD,mBAAmB;AACnB,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAErD;;;GAGG;AACH,MAAM,cAAc,GAAG,6CAA6C,CAAC;AAErE;;;GAGG;AACH,MAAM,gBAAgB,GACpB,2FAA2F,CAAC;AAU9F,SAAS,gBAAgB,CAAC,KAAsB;IAC9C,MAAM,IAAI,GAAK,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,GAAG,GAAM,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACvC,MAAM,MAAM,GACV,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAE/B,6EAA6E;IAE7E,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,IAAI,EAAY,iBAAiB;YACjC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC;YACxC,KAAK,EAAW,KAAK;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO;YACL,IAAI,EAAY,iBAAiB;YACjC,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,GAAG,EAAE;YAC5C,KAAK,EAAW,KAAK;SACtB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAE7E,MAAM,QAAQ,GAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7C,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7D,OAAO;YACL,IAAI,EAAI,eAAe;YACvB,GAAG,EAAK,QAAQ,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE;YAClC,IAAI;YACJ,MAAM;YACN,MAAM;SACP,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,uEAAuE;IACvE,IAAI,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAI,cAAc;YACtB,MAAM,EAAE,kBAAkB,QAAQ,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,iCAAiC;SACtF,CAAC;IACJ,CAAC;IAED,6EAA6E;IAE7E,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvD,CAAC;IAED,6EAA6E;IAE7E,OAAO;QACL,IAAI,EAAI,cAAc;QACtB,MAAM,EAAE,+BAA+B,KAAK,GAAG;KAChD,CAAC;AACJ,CAAC"}

package/dist/src/friction/auto-capture.d.ts

@@ -0,0 +1,38 @@
+/**
+ * src/friction/auto-capture.ts
+ *
+ * Automatic friction event capture hooks for the server layer.
+ *
+ * These functions are the only integration points between the core
+ * workflow domain and the friction pipeline. They must be:
+ *  - Synchronous (no awaiting — never block the HTTP response path)
+ *  - Zero-authority (read-only access to run state)
+ *  - Silent on failure (errors logged to stderr, never rethrown)
+ *
+ * Called from server.ts after state-mutating actions.
+ */
+import type { FrictionContext } from "./types.js";
+import type { WorkflowRun } from "../workflow/types.js";
+/**
+ * Call this after every workflow run that has reached a terminal phase
+ * (task_failed, stopped, skipped_by_intake).
+ *
+ * Enqueues a "workflow-failure" friction event and schedules a flush.
+ * Never throws — any error is written to stderr and silently dropped.
+ */
+export declare function captureWorkflowFailure(run: WorkflowRun, workspaceRoot: string): void;
+/**
+ * Call this from an Express error middleware to capture server-side errors.
+ * The middleware should be registered AFTER all routes in server.ts.
+ */
+export declare function captureServerError(err: Error, route: string): void;
+/**
+ * Enqueue a user-initiated friction report (from UI or CLI).
+ * Called with pre-built context from the UI report modal or `usesteady report`.
+ */
+export declare function captureManualReport(opts: {
+    kind: "ux-block" | "manual-cli" | "install-error";
+    notes: string;
+    context?: Partial<FrictionContext>;
+}): string;
+//# sourceMappingURL=auto-capture.d.ts.map

package/dist/src/friction/auto-capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-capture.d.ts","sourceRoot":"","sources":["../../../src/friction/auto-capture.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAc,sBAAsB,CAAC;AA2BhE;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAY,WAAW,EAC1B,aAAa,EAAE,MAAM,GACpB,IAAI,CAuDN;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAI,KAAK,EACZ,KAAK,EAAE,MAAM,GACZ,IAAI,CAmBN;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,IAAI,EAAW,UAAU,GAAG,YAAY,GAAG,eAAe,CAAC;IAC3D,KAAK,EAAU,MAAM,CAAC;IACtB,OAAO,CAAC,EAAO,OAAO,CAAC,eAAe,CAAC,CAAC;CACzC,GAAG,MAAM,CAYT"}

package/dist/src/friction/auto-capture.js

@@ -0,0 +1,133 @@
+// Copyright 2026 Shortgigs LLC. Licensed under the Apache License, Version 2.0.
+/**
+ * src/friction/auto-capture.ts
+ *
+ * Automatic friction event capture hooks for the server layer.
+ *
+ * These functions are the only integration points between the core
+ * workflow domain and the friction pipeline. They must be:
+ *  - Synchronous (no awaiting — never block the HTTP response path)
+ *  - Zero-authority (read-only access to run state)
+ *  - Silent on failure (errors logged to stderr, never rethrown)
+ *
+ * Called from server.ts after state-mutating actions.
+ */
+import { readFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { enqueue } from "./queue.js";
+import { scheduleFlush } from "./client.js";
+import { readConfig } from "./config.js";
+// ─── Version helper ───────────────────────────────────────────────────────────
+let _version = null;
+function packageVersion() {
+    if (_version)
+        return _version;
+    try {
+        // Walk up from dist/src/friction/ or src/friction/ to find package.json
+        const candidates = [
+            join(process.cwd(), "package.json"),
+        ];
+        for (const p of candidates) {
+            if (existsSync(p)) {
+                const pkg = JSON.parse(readFileSync(p, "utf-8"));
+                _version = pkg.version ?? "unknown";
+                return _version;
+            }
+        }
+    }
+    catch { /* ignore */ }
+    _version = "unknown";
+    return _version;
+}
+// ─── Terminal phase capture ───────────────────────────────────────────────────
+/**
+ * Call this after every workflow run that has reached a terminal phase
+ * (task_failed, stopped, skipped_by_intake).
+ *
+ * Enqueues a "workflow-failure" friction event and schedules a flush.
+ * Never throws — any error is written to stderr and silently dropped.
+ */
+export function captureWorkflowFailure(run, workspaceRoot) {
+    const failurePhasess = new Set([
+        "task_failed",
+        "stopped",
+    ]);
+    // Also capture completed runs that have skipped_by_intake tasks
+    const hasSkippedByIntake = run.tasks.some((t) => t.outcome === "skipped_by_intake");
+    const isCapturable = failurePhasess.has(run.phase) ||
+        (run.phase === "completed" && hasSkippedByIntake);
+    if (!isCapturable)
+        return;
+    try {
+        const kind = run.phase === "stopped" ? "workflow-failure" : "workflow-failure";
+        const taskInputs = run.tasks.map((t) => t.spec.input);
+        // Find the first failed/skipped task for the failure note
+        const failedTask = run.tasks.find((t) => t.outcome === "rejected" ||
+            t.outcome === "stopped" ||
+            t.outcome === "skipped_by_intake");
+        const context = {
+            runId: run.workflowRunId,
+            phase: run.phase,
+            taskInputs,
+            platform: process.platform,
+            nodeVersion: process.version,
+            ...(failedTask ? {
+                failureNote: `Task "${failedTask.spec.input.slice(0, 80)}" — outcome: ${failedTask.outcome}`,
+            } : {}),
+            ...(workspaceRoot ? { workspaceRoot } : {}),
+        };
+        enqueue({
+            kind,
+            capturedAt: new Date().toISOString(),
+            usesteadyVersion: packageVersion(),
+            context,
+        });
+        // Schedule flush — non-blocking, runs after current tick
+        scheduleFlush(readConfig());
+    }
+    catch (err) {
+        process.stderr.write(`[friction-capture] captureWorkflowFailure error: ${String(err)}\n`);
+    }
+}
+/**
+ * Call this from an Express error middleware to capture server-side errors.
+ * The middleware should be registered AFTER all routes in server.ts.
+ */
+export function captureServerError(err, route) {
+    try {
+        enqueue({
+            kind: "server-error",
+            capturedAt: new Date().toISOString(),
+            usesteadyVersion: packageVersion(),
+            context: {
+                errorMessage: err.message,
+                route,
+                platform: process.platform,
+                nodeVersion: process.version,
+                ...(err.stack ? { errorStack: err.stack.slice(0, 1000) } : {}),
+            },
+        });
+        scheduleFlush(readConfig());
+    }
+    catch (captureErr) {
+        process.stderr.write(`[friction-capture] captureServerError error: ${String(captureErr)}\n`);
+    }
+}
+/**
+ * Enqueue a user-initiated friction report (from UI or CLI).
+ * Called with pre-built context from the UI report modal or `usesteady report`.
+ */
+export function captureManualReport(opts) {
+    return enqueue({
+        kind: opts.kind,
+        capturedAt: new Date().toISOString(),
+        usesteadyVersion: packageVersion(),
+        notes: opts.notes,
+        context: {
+            platform: process.platform,
+            nodeVersion: process.version,
+            ...opts.context,
+        },
+    });
+}
+//# sourceMappingURL=auto-capture.js.map

package/dist/src/friction/auto-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-capture.js","sourceRoot":"","sources":["../../../src/friction/auto-capture.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAA0B,WAAW,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAuB,YAAY,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAiB,aAAa,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAoB,aAAa,CAAC;AAIvD,iFAAiF;AAEjF,IAAI,QAAQ,GAAkB,IAAI,CAAC;AAEnC,SAAS,cAAc;IACrB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,CAAC;QACH,wEAAwE;QACxE,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;SACpC,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAyB,CAAC;gBACzE,QAAQ,GAAG,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;gBACpC,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACxB,QAAQ,GAAG,SAAS,CAAC;IACrB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAA0B,EAC1B,aAAqB;IAErB,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;QAClD,aAAa;QACb,SAAS;KACV,CAAC,CAAC;IAEH,gEAAgE;IAChE,MAAM,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,mBAAmB,CACzC,CAAC;IAEF,MAAM,YAAY,GAChB,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QAC7B,CAAC,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,kBAAkB,CAAC,CAAC;IAEpD,IAAI,CAAC,YAAY;QAAE,OAAO;IAE1B,IAAI,CAAC;QACH,MAAM,IAAI,GACR,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAEpE,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEtD,0DAA0D;QAC1D,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAC/B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,OAAO,KAAK,UAAU;YACxB,CAAC,CAAC,OAAO,KAAK,SAAS;YACvB,CAAC,CAAC,OAAO,KAAK,mBAAmB,CACpC,CAAC;QAEF,MAAM,OAAO,GAAoB;YAC/B,KAAK,EAAQ,GAAG,CAAC,aAAa;YAC9B,KAAK,EAAQ,GAAG,CAAC,KAAK;YACtB,UAAU;YACV,QAAQ,EAAK,OAAO,CAAC,QAAQ;YAC7B,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;gBACf,WAAW,EAAE,SAAS,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,UAAU,CAAC,OAAO,EAAE;aAC7F,CAAC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;QAEF,OAAO,CAAC;YACN,IAAI;YACJ,UAAU,EAAQ,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC1C,gBAAgB,EAAE,cAAc,EAAE;YAClC,OAAO;SACR,CAAC,CAAC;QAEH,yDAAyD;QACzD,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAY,EACZ,KAAa;IAEb,IAAI,CAAC;QACH,OAAO,CAAC;YACN,IAAI,EAAc,cAAc;YAChC,UAAU,EAAQ,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC1C,gBAAgB,EAAE,cAAc,EAAE;YAClC,OAAO,EAAE;gBACP,YAAY,EAAE,GAAG,CAAC,OAAO;gBACzB,KAAK;gBACL,QAAQ,EAAM,OAAO,CAAC,QAAQ;gBAC9B,WAAW,EAAG,OAAO,CAAC,OAAO;gBAC7B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D;SACF,CAAC,CAAC;QAEH,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,UAAU,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAInC;IACC,OAAO,OAAO,CAAC;QACb,IAAI,EAAc,IAAI,CAAC,IAAI;QAC3B,UAAU,EAAQ,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1C,gBAAgB,EAAE,cAAc,EAAE;QAClC,KAAK,EAAa,IAAI,CAAC,KAAK;QAC5B,OAAO,EAAE;YACP,QAAQ,EAAK,OAAO,CAAC,QAAQ;YAC7B,WAAW,EAAE,OAAO,CAAC,OAAO;YAC5B,GAAG,IAAI,CAAC,OAAO;SAChB;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/src/friction/client.d.ts

@@ -0,0 +1,39 @@
+/**
+ * src/friction/client.ts
+ *
+ * Submits a queued friction entry to the collection backend.
+ *
+ * The collection endpoint and GitHub token are read from
+ * ~/.usesteady/config.json and ~/.usesteady/auth.json respectively.
+ * No hardcoded private URLs exist in this file — alpha testers receive
+ * a pre-filled config.json out-of-band.
+ *
+ * Transport: GitHub Issues REST API
+ *   POST /repos/{owner}/{repo}/issues
+ *   Authorization: Bearer {github_token}
+ *
+ * The private friction collection repo has triage label
+ * automation that routes + tags incoming issues automatically.
+ */
+import type { FrictionConfig, QueueEntry } from "./types.js";
+/**
+ * Submit one queue entry to the GitHub Issues collection backend.
+ * Returns the created issue number on success, throws on failure.
+ */
+export declare function submitEntry(entry: QueueEntry, config: FrictionConfig): Promise<number>;
+/**
+ * Flush all pending queue entries to the collection backend.
+ *
+ * Designed to be called:
+ *  - At server startup (if a token exists)
+ *  - After each new enqueue (non-blocking, fire-and-forget)
+ *
+ * Uses simple linear back-off between entries to avoid rate limiting.
+ * Returns the count of successfully submitted entries.
+ */
+export declare function flushQueue(config: FrictionConfig): Promise<number>;
+/**
+ * Fire-and-forget flush — called after enqueue() so callers don't need to await.
+ */
+export declare function scheduleFlush(config: FrictionConfig): void;
+//# sourceMappingURL=client.d.ts.map

package/dist/src/friction/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/friction/client.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAiF7D;;;GAGG;AACH,wBAAsB,WAAW,CAC/B,KAAK,EAAG,UAAU,EAClB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,MAAM,CAAC,CAgCjB;AAID;;;;;;;;;GASG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BxE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAM1D"}

package/dist/src/friction/client.js

@@ -0,0 +1,165 @@
+// Copyright 2026 Shortgigs LLC. Licensed under the Apache License, Version 2.0.
+/**
+ * src/friction/client.ts
+ *
+ * Submits a queued friction entry to the collection backend.
+ *
+ * The collection endpoint and GitHub token are read from
+ * ~/.usesteady/config.json and ~/.usesteady/auth.json respectively.
+ * No hardcoded private URLs exist in this file — alpha testers receive
+ * a pre-filled config.json out-of-band.
+ *
+ * Transport: GitHub Issues REST API
+ *   POST /repos/{owner}/{repo}/issues
+ *   Authorization: Bearer {github_token}
+ *
+ * The private friction collection repo has triage label
+ * automation that routes + tags incoming issues automatically.
+ */
+import { readAuth } from "./config.js";
+import { markSubmitted, markFailed, pendingEntries, pruneSubmitted, } from "./queue.js";
+// ─── Issue body builder ───────────────────────────────────────────────────────
+function buildIssueBody(entry, githubLogin) {
+    const { event } = entry;
+    const ctx = event.context;
+    const contextLines = [];
+    if (ctx.phase)
+        contextLines.push(`- **Phase:** ${ctx.phase}`);
+    if (ctx.runId)
+        contextLines.push(`- **Run ID:** \`${ctx.runId}\``);
+    if (ctx.taskInputs?.length) {
+        contextLines.push("- **Task inputs:**");
+        for (const t of ctx.taskInputs)
+            contextLines.push(`  - ${t}`);
+    }
+    if (ctx.failureNote)
+        contextLines.push(`- **Failure note:** ${ctx.failureNote}`);
+    if (ctx.workspaceRoot)
+        contextLines.push(`- **Workspace:** \`${ctx.workspaceRoot}\``);
+    if (ctx.route)
+        contextLines.push(`- **Route:** \`${ctx.route}\``);
+    if (ctx.errorMessage)
+        contextLines.push(`- **Error:** ${ctx.errorMessage}`);
+    const metadata = {
+        id: entry.id,
+        kind: event.kind,
+        capturedAt: event.capturedAt,
+        usesteadyVersion: event.usesteadyVersion,
+        platform: ctx.platform,
+        nodeVersion: ctx.nodeVersion,
+    };
+    return [
+        `## Friction Report`,
+        ``,
+        `**Type:** ${event.kind}`,
+        `**Reporter:** @${githubLogin}`,
+        `**Captured:** ${event.capturedAt}`,
+        `**UseSteady version:** ${event.usesteadyVersion}`,
+        ``,
+        `### Context`,
+        contextLines.length ? contextLines.join("\n") : "_No structured context._",
+        ``,
+        ...(event.notes ? [`### Notes from reporter`, ``, event.notes, ``] : []),
+        `### Metadata`,
+        ``,
+        "```json",
+        JSON.stringify(metadata, null, 2),
+        "```",
+    ].join("\n");
+}
+function buildIssueTitle(entry) {
+    const { event } = entry;
+    const ctx = event.context;
+    switch (event.kind) {
+        case "workflow-failure":
+            return `[friction] workflow ${event.kind}: ${ctx.phase ?? "unknown phase"} — ${ctx.runId?.slice(0, 8) ?? "?"}`;
+        case "server-error":
+            return `[friction] server error: ${ctx.route ?? "unknown route"}`;
+        case "ux-block":
+            return `[friction] ux block: ${(event.notes ?? "").slice(0, 60) || "user report"}`;
+        case "install-error":
+            return `[friction] install error: ${(ctx.errorMessage ?? "").slice(0, 60) || "startup crash"}`;
+        case "manual-cli":
+            return `[friction] manual report: ${(event.notes ?? "").slice(0, 60) || "cli report"}`;
+    }
+}
+/**
+ * Submit one queue entry to the GitHub Issues collection backend.
+ * Returns the created issue number on success, throws on failure.
+ */
+export async function submitEntry(entry, config) {
+    const auth = readAuth();
+    if (!auth?.githubToken) {
+        throw new Error("No GitHub token. Run `usesteady report` and authenticate first.");
+    }
+    const body = {
+        title: buildIssueTitle(entry),
+        body: buildIssueBody(entry, auth.githubLogin),
+        labels: ["status/pending", entry.event.kind],
+    };
+    const resp = await fetch(config.frictionEndpoint, {
+        method: "POST",
+        headers: {
+            "Authorization": `Bearer ${auth.githubToken}`,
+            "Accept": "application/vnd.github+json",
+            "Content-Type": "application/json",
+            "X-GitHub-Api-Version": "2022-11-28",
+            "User-Agent": `usesteady/${entry.event.usesteadyVersion}`,
+        },
+        body: JSON.stringify(body),
+    });
+    if (!resp.ok) {
+        const text = await resp.text().catch(() => resp.statusText);
+        throw new Error(`GitHub API ${resp.status}: ${text}`);
+    }
+    const data = await resp.json();
+    return data.number;
+}
+// ─── Flush loop ───────────────────────────────────────────────────────────────
+/**
+ * Flush all pending queue entries to the collection backend.
+ *
+ * Designed to be called:
+ *  - At server startup (if a token exists)
+ *  - After each new enqueue (non-blocking, fire-and-forget)
+ *
+ * Uses simple linear back-off between entries to avoid rate limiting.
+ * Returns the count of successfully submitted entries.
+ */
+export async function flushQueue(config) {
+    const auth = readAuth();
+    if (!auth?.githubToken)
+        return 0; // nothing to do without a token
+    const entries = pendingEntries(20);
+    if (entries.length === 0)
+        return 0;
+    let submitted = 0;
+    for (const entry of entries) {
+        try {
+            await submitEntry(entry, config);
+            markSubmitted(entry.id);
+            submitted++;
+            // Small delay between submissions — GitHub allows 5000 req/hour per token
+            // but we are polite to avoid bursts.
+            await new Promise((r) => setTimeout(r, 300));
+        }
+        catch (err) {
+            markFailed(entry.id, String(err));
+            process.stderr.write(`[friction-client] submission failed for ${entry.id}: ${String(err)}\n`);
+        }
+    }
+    // Housekeeping: prune old submitted entries
+    pruneSubmitted(30);
+    return submitted;
+}
+/**
+ * Fire-and-forget flush — called after enqueue() so callers don't need to await.
+ */
+export function scheduleFlush(config) {
+    setImmediate(() => {
+        flushQueue(config).catch((err) => {
+            process.stderr.write(`[friction-client] flush error: ${String(err)}\n`);
+        });
+    });
+}
+//# sourceMappingURL=client.js.map

package/dist/src/friction/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/friction/client.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAA8B,aAAa,CAAC;AAC/D,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,iFAAiF;AAEjF,SAAS,cAAc,CAAC,KAAiB,EAAE,WAAmB;IAC5D,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;IAE1B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,GAAG,CAAC,KAAK;QAAU,YAAY,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,IAAI,GAAG,CAAC,KAAK;QAAU,YAAY,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;IAC3E,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAC3B,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU;YAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,GAAG,CAAC,WAAW;QAAI,YAAY,CAAC,IAAI,CAAC,uBAAuB,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,IAAI,GAAG,CAAC,aAAa;QAAE,YAAY,CAAC,IAAI,CAAC,sBAAsB,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,KAAK;QAAU,YAAY,CAAC,IAAI,CAAC,kBAAkB,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,YAAY;QAAG,YAAY,CAAC,IAAI,CAAC,gBAAgB,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;IAE7E,MAAM,QAAQ,GAAG;QACf,EAAE,EAAiB,KAAK,CAAC,EAAE;QAC3B,IAAI,EAAe,KAAK,CAAC,IAAI;QAC7B,UAAU,EAAS,KAAK,CAAC,UAAU;QACnC,gBAAgB,EAAG,KAAK,CAAC,gBAAgB;QACzC,QAAQ,EAAW,GAAG,CAAC,QAAQ;QAC/B,WAAW,EAAQ,GAAG,CAAC,WAAW;KACnC,CAAC;IAEF,OAAO;QACL,oBAAoB;QACpB,EAAE;QACF,aAAa,KAAK,CAAC,IAAI,EAAE;QACzB,kBAAkB,WAAW,EAAE;QAC/B,iBAAiB,KAAK,CAAC,UAAU,EAAE;QACnC,0BAA0B,KAAK,CAAC,gBAAgB,EAAE;QAClD,EAAE;QACF,aAAa;QACb,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,0BAA0B;QAC1E,EAAE;QACF,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,yBAAyB,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,cAAc;QACd,EAAE;QACF,SAAS;QACT,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,KAAK;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC;IAE1B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,kBAAkB;YACrB,OAAO,uBAAuB,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,IAAI,eAAe,MAAM,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;QACjH,KAAK,cAAc;YACjB,OAAO,4BAA4B,GAAG,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;QACpE,KAAK,UAAU;YACb,OAAO,wBAAwB,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;QACrF,KAAK,eAAe;YAClB,OAAO,6BAA6B,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC;QACjG,KAAK,YAAY;YACf,OAAO,6BAA6B,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC;AASD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAkB,EAClB,MAAsB;IAEtB,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IAExB,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,IAAI,GAAG;QACX,KAAK,EAAG,eAAe,CAAC,KAAK,CAAC;QAC9B,IAAI,EAAI,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC;QAC/C,MAAM,EAAE,CAAC,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;KAC7C,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAChD,MAAM,EAAG,MAAM;QACf,OAAO,EAAE;YACP,eAAe,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;YAC7C,QAAQ,EAAS,6BAA6B;YAC9C,cAAc,EAAG,kBAAkB;YACnC,sBAAsB,EAAE,YAAY;YACpC,YAAY,EAAK,aAAa,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE;SAC7D;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAyB,CAAC;IACtD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAsB;IACrD,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI,EAAE,WAAW;QAAE,OAAO,CAAC,CAAC,CAAG,gCAAgC;IAEpE,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEnC,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACjC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxB,SAAS,EAAE,CAAC;YAEZ,0EAA0E;YAC1E,qCAAqC;YACrC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,cAAc,CAAC,EAAE,CAAC,CAAC;IAEnB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAAsB;IAClD,YAAY,CAAC,GAAG,EAAE;QAChB,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/friction/config.d.ts

@@ -0,0 +1,16 @@
+/**
+ * src/friction/config.ts
+ *
+ * Reads and writes ~/.usesteady/config.json and ~/.usesteady/auth.json.
+ *
+ * These files hold the configurable collection endpoint and the GitHub
+ * OAuth token. Neither the endpoint URL nor the token is hardcoded in
+ * the public source — users (and alpha testers) receive them out-of-band.
+ */
+import type { AuthToken, FrictionConfig } from "./types.js";
+export declare function readConfig(): FrictionConfig;
+export declare function writeConfig(config: FrictionConfig): void;
+export declare function readAuth(): AuthToken | null;
+export declare function writeAuth(token: AuthToken): void;
+export declare function clearAuth(): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/src/friction/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/friction/config.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAa5D,wBAAgB,UAAU,IAAI,cAAc,CAO3C;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAGxD;AAID,wBAAgB,QAAQ,IAAI,SAAS,GAAG,IAAI,CAO3C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAGhD;AAED,wBAAgB,SAAS,IAAI,IAAI,CAKhC"}

package/dist/src/friction/config.js

@@ -0,0 +1,56 @@
+// Copyright 2026 Shortgigs LLC. Licensed under the Apache License, Version 2.0.
+/**
+ * src/friction/config.ts
+ *
+ * Reads and writes ~/.usesteady/config.json and ~/.usesteady/auth.json.
+ *
+ * These files hold the configurable collection endpoint and the GitHub
+ * OAuth token. Neither the endpoint URL nor the token is hardcoded in
+ * the public source — users (and alpha testers) receive them out-of-band.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { DEFAULT_FRICTION_CONFIG } from "./types.js";
+const USESTEADY_DIR = join(homedir(), ".usesteady");
+const CONFIG_PATH = join(USESTEADY_DIR, "config.json");
+const AUTH_PATH = join(USESTEADY_DIR, "auth.json");
+function ensureDir() {
+    if (!existsSync(USESTEADY_DIR))
+        mkdirSync(USESTEADY_DIR, { recursive: true });
+}
+// ─── Config ───────────────────────────────────────────────────────────────────
+export function readConfig() {
+    try {
+        if (existsSync(CONFIG_PATH)) {
+            return JSON.parse(readFileSync(CONFIG_PATH, "utf-8"));
+        }
+    }
+    catch { /* fall through to default */ }
+    return DEFAULT_FRICTION_CONFIG;
+}
+export function writeConfig(config) {
+    ensureDir();
+    writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2), "utf-8");
+}
+// ─── Auth token ───────────────────────────────────────────────────────────────
+export function readAuth() {
+    try {
+        if (existsSync(AUTH_PATH)) {
+            return JSON.parse(readFileSync(AUTH_PATH, "utf-8"));
+        }
+    }
+    catch { /* no token */ }
+    return null;
+}
+export function writeAuth(token) {
+    ensureDir();
+    writeFileSync(AUTH_PATH, JSON.stringify(token, null, 2), "utf-8");
+}
+export function clearAuth() {
+    ensureDir();
+    if (existsSync(AUTH_PATH)) {
+        writeFileSync(AUTH_PATH, "{}", "utf-8");
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/src/friction/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/friction/config.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAS,WAAW,CAAC;AAEpC,OAAO,EAAE,uBAAuB,EAAE,MAAa,YAAY,CAAC;AAE5D,MAAM,aAAa,GAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AACrD,MAAM,WAAW,GAAM,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AAC1D,MAAM,SAAS,GAAQ,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;AAExD,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,SAAS,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAmB,CAAC;QAC1E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACzC,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAsB;IAChD,SAAS,EAAE,CAAC;IACZ,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACvE,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,QAAQ;IACtB,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAc,CAAC;QACnE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAgB;IACxC,SAAS,EAAE,CAAC;IACZ,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,SAAS,EAAE,CAAC;IACZ,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/src/friction/github-auth.d.ts

@@ -0,0 +1,41 @@
+/**
+ * src/friction/github-auth.ts
+ *
+ * GitHub Device Flow OAuth — no browser redirect needed.
+ *
+ * Flow:
+ *  1. POST /login/device/code  → get device_code + user_code + verification_uri
+ *  2. Show user_code to the user; they visit verification_uri and enter it
+ *  3. Poll /login/oauth/access_token until user approves or timeout
+ *  4. Exchange token for GitHub user profile
+ *  5. Store token in ~/.usesteady/auth.json
+ *
+ * Required GitHub OAuth App settings:
+ *   - Client ID: set via USESTEADY_GITHUB_CLIENT_ID env var or ~/.usesteady/config.json
+ *   - Scopes: user:email (read public profile + email)
+ *   - Device flow: enabled in GitHub App / OAuth App settings
+ *
+ * Register a free GitHub OAuth App at:
+ *   https://github.com/settings/developers → "New OAuth App"
+ *   Set Authorization callback URL to: http://localhost (unused for device flow)
+ *   Enable "Device Authorization flow" checkbox
+ */
+import type { AuthToken } from "./types.js";
+/**
+ * Run the GitHub device-flow OAuth dance interactively.
+ *
+ * Prints the user code and verification URL to stdout, then polls
+ * until the user approves. Stores the resulting token in
+ * ~/.usesteady/auth.json and returns the AuthToken.
+ *
+ * @param onCode   called with { userCode, verificationUri } when ready to display
+ * @param onWaiting called each poll cycle while waiting for user
+ */
+export declare function runDeviceFlow(opts?: {
+    onCode?: (info: {
+        userCode: string;
+        verificationUri: string;
+    }) => void;
+    onWaiting?: () => void;
+}): Promise<AuthToken>;
+//# sourceMappingURL=github-auth.d.ts.map

package/dist/src/friction/github-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-auth.d.ts","sourceRoot":"","sources":["../../../src/friction/github-auth.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAsK5C;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE;IACzC,MAAM,CAAC,EAAK,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC1E,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;CACxB,GAAG,OAAO,CAAC,SAAS,CAAC,CA0BrB"}