@haaaiawd/second-nature 0.1.27 → 0.1.29

package/workspace-ops-bridge.js

@@ -5,6 +5,11 @@
  * `createCliRuntimeDeps` + `createOpsRouter` + `createCliCommands` path as the workspace CLI.
  * `process.chdir(workspaceRoot)` during dispatch so `memory/workspace` paths match CLI cwd semantics.
  *
+ * v7 additions (T-ROS.C.2): pass auditStore (AppendOnlyAuditStore) to createOpsRouter so that
+ * heartbeat_digest, restore, and other v7 commands work through the bridge. The store is created
+ * fresh per-bridge-open (in-memory; not persisted across restarts). secretAnchorDeps are not wired
+ * here yet — runtime_secret_bootstrap will degrade gracefully until T-ROS.C.4 wires the real port.
+ *
  * Boundaries: no static imports from `./runtime/*` (sql.js top-level await stays out of register() graph).
  * VM safety: do not read `import.meta.url` at module scope — some OpenClaw loaders evaluate this file in contexts
  * where top-level `import.meta` breaks before `register()` runs; compute package root only inside `openWorkspaceOpsBridge`.
@@ -30,13 +35,20 @@ export async function openWorkspaceOpsBridge(workspaceRoot) {
         const storageDb = (await import("./runtime/storage/db/index.js"));
         const obsDb = (await import("./runtime/observability/db/index.js"));
         const boundary = (await import("./runtime/cli/runtime/runtime-artifact-boundary.js"));
+        // v7 (T-ROS.C.2): in-memory audit store for v7 ops surface (heartbeat_digest, restore, etc.)
+        const auditMod = (await import("./runtime/observability/audit/append-only-audit-store.js"));
+        const auditStore = new auditMod.AppendOnlyAuditStore();
         const dataDir = path.join(resolvedRoot, "data");
         fs.mkdirSync(dataDir, { recursive: true });
         const statePath = path.join(dataDir, "state.db");
         const obsPath = path.join(dataDir, "observability.db");
         const stateDb = storageDb.createStateDatabase(statePath);
         const observabilityDb = obsDb.createObservabilityDatabase(obsPath);
-        const deps = cliIndex.createCliRuntimeDeps({ stateDb, observabilityDb });
+        const deps = cliIndex.createCliRuntimeDeps({
+            stateDb,
+            observabilityDb,
+            workspaceRoot: resolvedRoot,
+        });
         const runtimeResolved = boundary.resolvePackagedRuntime(pluginPackageRoot);
         const opsRouter = cliIndex.createOpsRouter({
             runtimeAvailable: runtimeResolved.ok,
@@ -48,6 +60,9 @@ export async function openWorkspaceOpsBridge(workspaceRoot) {
             workspaceRoot: resolvedRoot,
             connectorExecutor: deps.connectorExecutor,
             registry: deps.registry,
+            // v7 (T-ROS.C.2): in-memory audit store for heartbeat_digest / restore / self_health
+            auditStore,
+            restoreSnapshotStore: deps.restoreSnapshotStore,
         });
         const commands = commandsMod.createCliCommands({
             readModels: deps.readModels,