feat(patterns): add boot, SSH, Flatpak, AppArmor, XWayland patterns across all 25 distro files

Adds 141 new pattern entries via expansion script:

Universal (all 25 files):
- slow-boot-network-wait: detect NetworkManager-wait-online stalling boot
- slow-boot-device-timeout: detect fstab entries for disconnected devices
- slow-boot-long-running-job: surface slow service with systemd-analyze hint
- ssh-permissions-key: catch unprotected private key file warning
- flatpak-missing-runtime: detect missing Flatpak runtime with update/reinstall advice

Per distro family:
- apparmor-denial: added to windows-to-debian (only missing debian target)
- xwayland-crash: added to all files missing it, with distro-correct install cmd
  (apt/pacman/dnf/zypper per target family)

All 42 Rust unit tests pass.

src-tauri/patterns/android-to-arch.toml

@@ -144,3 +144,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Search for the package: pkgfile libname.so.6 (install pkgfile first: sudo pacman -S pkgfile && sudo pkgfile -u). Or search: pacman -Ss libname. Install it: sudo pacman -S packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo pacman -S xorg-xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/android-to-debian.toml

@@ -145,3 +145,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, most apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: apt-file search libname.so.6 (swap in the missing filename). Or search: apt-cache search libname. Install it: sudo apt install libpackagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo apt install xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/android-to-fedora.toml

@@ -110,3 +110,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: dnf provides 'libname.so.6'. Or search: dnf search libname. Install it: sudo dnf install packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo dnf install xorg-x11-server-Xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/android-to-opensuse.toml

@@ -111,3 +111,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: zypper what-provides 'libname.so.6'. Or search: zypper search libname. Install it: sudo zypper install packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo zypper install xorg-x11-server-Xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/arch-to-debian.toml

@@ -154,3 +154,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, most apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: apt-file search libname.so.6 (swap in the missing filename). Or search: apt-cache search libname. Install it: sudo apt install libpackagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo apt install xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/arch-to-fedora.toml

@@ -144,3 +144,47 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: dnf provides 'libname.so.6'. Or search: dnf search libname. Install it: sudo dnf install packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."

src-tauri/patterns/arch-to-opensuse.toml

@@ -138,3 +138,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: zypper what-provides 'libname.so.6'. Or search: zypper search libname. Install it: sudo zypper install packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo zypper install xorg-x11-server-Xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/debian-to-arch.toml

@@ -194,3 +194,47 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Search for the package: pkgfile libname.so.6 (install pkgfile first: sudo pacman -S pkgfile && sudo pkgfile -u). Or search: pacman -Ss libname. Install it: sudo pacman -S packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."

src-tauri/patterns/debian-to-fedora.toml

@@ -152,3 +152,47 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: dnf provides 'libname.so.6'. Or search: dnf search libname. Install it: sudo dnf install packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."

src-tauri/patterns/debian-to-opensuse.toml

@@ -128,3 +128,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: zypper what-provides 'libname.so.6'. Or search: zypper search libname. Install it: sudo zypper install packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo zypper install xorg-x11-server-Xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/dualboot-macos.toml

@@ -63,3 +63,47 @@ match_text = "RTC time"
 severity = "info"
 title    = "System clock drifted after macOS boot"
 body     = "macOS stores the hardware clock in local time; Linux stores it in UTC. This causes clock drift in dual-boot. Fix in Linux: timedatectl set-local-rtc 0 — then set macOS to UTC by running in Terminal: sudo systemsetup -setusingnetworktime off && sudo systemsetup -settime $(date -u +%H:%M:%S)"
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."

src-tauri/patterns/dualboot-windows.toml

@@ -73,3 +73,47 @@ match_text = "ntfs-3g: Failed to open"
 severity = "warn"
 title    = "NTFS permission error"
 body     = "ntfs-3g can't open the Windows partition. Check your /etc/fstab mount options — add uid=1000,gid=1000,umask=022 to give your Linux user access. Make sure Windows is fully shut down first."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."

src-tauri/patterns/fedora-to-arch.toml

@@ -180,3 +180,47 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Search for the package: pkgfile libname.so.6 (install pkgfile first: sudo pacman -S pkgfile && sudo pkgfile -u). Or search: pacman -Ss libname. Install it: sudo pacman -S packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."

src-tauri/patterns/fedora-to-debian.toml

@@ -146,3 +146,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, most apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: apt-file search libname.so.6 (swap in the missing filename). Or search: apt-cache search libname. Install it: sudo apt install libpackagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo apt install xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/fedora-to-opensuse.toml

@@ -138,3 +138,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: zypper what-provides 'libname.so.6'. Or search: zypper search libname. Install it: sudo zypper install packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo zypper install xorg-x11-server-Xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/ipad-to-arch.toml

@@ -128,3 +128,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Search for the package: pkgfile libname.so.6 (install pkgfile first: sudo pacman -S pkgfile && sudo pkgfile -u). Or search: pacman -Ss libname. Install it: sudo pacman -S packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo pacman -S xorg-xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/ipad-to-debian.toml

@@ -145,3 +145,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, most apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: apt-file search libname.so.6 (swap in the missing filename). Or search: apt-cache search libname. Install it: sudo apt install libpackagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo apt install xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/ipad-to-fedora.toml

@@ -110,3 +110,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: dnf provides 'libname.so.6'. Or search: dnf search libname. Install it: sudo dnf install packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo dnf install xorg-x11-server-Xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/ipad-to-opensuse.toml

@@ -119,3 +119,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: zypper what-provides 'libname.so.6'. Or search: zypper search libname. Install it: sudo zypper install packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo zypper install xorg-x11-server-Xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/linux-to-arch.toml

@@ -227,3 +227,47 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Search for the package: pkgfile libname.so.6 (install pkgfile first: sudo pacman -S pkgfile && sudo pkgfile -u). Or search: pacman -Ss libname. Install it: sudo pacman -S packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."

src-tauri/patterns/macos-to-arch.toml

@@ -185,3 +185,47 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Search for the package: pkgfile libname.so.6 (install pkgfile first: sudo pacman -S pkgfile && sudo pkgfile -u). Or search: pacman -Ss libname. Install it: sudo pacman -S packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."

src-tauri/patterns/opensuse-to-arch.toml

@@ -180,3 +180,47 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Search for the package: pkgfile libname.so.6 (install pkgfile first: sudo pacman -S pkgfile && sudo pkgfile -u). Or search: pacman -Ss libname. Install it: sudo pacman -S packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."

src-tauri/patterns/opensuse-to-debian.toml

@@ -146,3 +146,58 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, most apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: apt-file search libname.so.6 (swap in the missing filename). Or search: apt-cache search libname. Install it: sudo apt install libpackagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo apt install xwayland) and check GPU driver stability. Log out and back in to recover."
+

src-tauri/patterns/opensuse-to-fedora.toml

@@ -154,3 +154,47 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: dnf provides 'libname.so.6'. Or search: dnf search libname. Install it: sudo dnf install packagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."

src-tauri/patterns/windows-to-debian.toml

@@ -195,3 +195,69 @@ match_text = "cannot open shared object file: No such file or directory"
 severity = "warn"
 title    = "App is missing a system library"
 body     = "This program needs a shared library that isn't installed. On Linux, most apps use shared system libraries rather than bundling their own — unlike Windows .exe files. Find the right package: apt-file search libname.so.6 (swap in the missing filename). Or search by name: apt-cache search libname. Install it: sudo apt install libpackagename. Note: pip and pip3 cannot fix this — Python packages are not system libraries."
+
+[[patterns]]
+id       = "slow-boot-network-wait"
+sources  = ["journald"]
+match_text = "Failed to start Network Wait Online"
+severity = "warn"
+title    = "Boot is slow: waiting for network"
+body     = "systemd is waiting for a full network connection before finishing boot. This is almost never needed on a desktop or laptop. Disable it: sudo systemctl disable systemd-networkd-wait-online.service NetworkManager-wait-online.service — then reboot. Unlike Windows, Linux lets you disable any boot step that isn't relevant to your setup."
+
+[[patterns]]
+id       = "slow-boot-device-timeout"
+sources  = ["journald"]
+match_text = "Timed out waiting for device"
+severity = "warn"
+title    = "Boot is slow: a device that no longer exists"
+body     = "systemd is waiting for a disk, partition, or device that isn't connected. Common cause: /etc/fstab has an entry for an external drive or old partition. Check: cat /etc/fstab — look for lines pointing to drives that aren't always connected. Add the 'nofail' option to make them optional: UUID=xxx /mnt/point type defaults,nofail 0 0. Or comment the line out with #."
+
+[[patterns]]
+id       = "slow-boot-long-running-job"
+sources  = ["journald"]
+match_text = "A start job is running for"
+severity = "info"
+title    = "A service is taking a long time to start"
+body     = "A background service is taking longer than expected during boot. To find what's slowing your startup: open a terminal after booting and run: systemd-analyze blame — the top entries are the biggest contributors. For a visual timeline saved to a file: systemd-analyze plot > ~/boot-profile.svg — then open the SVG in a browser."
+
+# ── SSH / remote access ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "ssh-permissions-key"
+sources  = ["journald"]
+match_text = "WARNING: UNPROTECTED PRIVATE KEY FILE"
+severity = "warn"
+title    = "SSH key permissions are too open"
+body     = "Your SSH private key is readable by other users on this system — SSH refuses to use it as a security measure. Fix: chmod 600 ~/.ssh/id_rsa (replace id_rsa with the key filename shown in the error). Also lock the directory: chmod 700 ~/.ssh. This is different from Windows where file permissions are mostly advisory."
+
+# ── Flatpak ───────────────────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "flatpak-missing-runtime"
+sources  = ["journald"]
+match_text = "error: runtime/org."
+severity = "warn"
+title    = "Flatpak app is missing a runtime"
+body     = "A Flatpak app can't find a required runtime (a shared set of libraries). Update all runtimes first: flatpak update — if that doesn't fix it, reinstall the app: flatpak install flathub com.example.AppName. Flatpak runtimes are like Windows runtime packages (VC++ Redistributable) but for Linux apps."
+
+# ── Security (AppArmor) ───────────────────────────────────────────────────────
+
+[[patterns]]
+id       = "apparmor-denial"
+sources  = ["journald"]
+match_text = "apparmor=\"DENIED\""
+severity = "warn"
+title    = "AppArmor blocked an application"
+body     = "AppArmor (a mandatory access control system) blocked a program from accessing a file or resource. This often happens with Wine, Bottles, or AppImages running software that wasn't installed through your package manager. To see what was blocked: sudo journalctl -b | grep apparmor. To temporarily put a profile in learning mode: sudo aa-complain /etc/apparmor.d/profile-name."
+
+
+# ── Display / Wayland compatibility ──────────────────────────────────────────
+
+[[patterns]]
+id       = "xwayland-crash"
+sources  = ["journald"]
+match_text = "XWayland server terminated unexpectedly"
+severity = "warn"
+title    = "XWayland crashed"
+body     = "XWayland is the compatibility layer that lets older X11 apps run under Wayland. It crashed, so apps that aren't Wayland-native will stop working until you restart your session. If XWayland keeps crashing: make sure it's installed (sudo apt install xwayland) and check GPU driver stability. Log out and back in to recover."
+