@monoes/monomindcli 2.16.13 → 2.16.14

package/dist/src/commands/org-observe-approvals.js

@@ -0,0 +1,211 @@
+// packages/@monomind/cli/src/commands/org-observe-approvals.ts
+//
+// `monomind org approvals | approve | deny` — pending tool/action approval
+// requests and their live-or-offline resolution.
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { utcDateMinute } from '../orgrt/reporting.js';
+import { ORG_DIR } from '../orgrt/types.js';
+import { output } from '../output.js';
+import { orgJson, printOrgJson, resolverFlag } from './org-observe-shared.js';
+const log = (text) => {
+    console.log(text);
+};
+/** Read approvals.json — the tool/action-approval queue checked by
+ *  checkApproval for Bash/WebFetch/WebSearch/org_complete (session.ts).
+ *  Distinct from questions.json/gates.json: approving those does NOT touch
+ *  this file or grant anything here. A MISSING file legitimately means "no
+ *  pending approvals" → []. Any other failure THROWS, same rationale as
+ *  readQuestions above — approveAction/denyAction rewrite this file from
+ *  what this returns. */
+const readApprovals = (cwd, name) => {
+    const path = join(cwd, ORG_DIR, name, 'approvals.json');
+    let raw;
+    try {
+        raw = readFileSync(path, 'utf8');
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return [];
+        throw new Error(`cannot read ${path}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`${path} is not valid JSON (${err instanceof Error ? err.message : String(err)})`);
+    }
+    if (parsed?.approvals === undefined || parsed.approvals === null)
+        return [];
+    if (!Array.isArray(parsed.approvals))
+        throw new Error(`${path}: "approvals" is not an array`);
+    return parsed.approvals;
+};
+/** `org approvals <name> [--all]` — list pending (or all) tool/action approval requests. */
+export const approvalsAction = async (ctx, name) => {
+    let all;
+    try {
+        all = readApprovals(ctx.cwd, name);
+    }
+    catch (err) {
+        log(output.error(`Cannot read approvals for org ${name}: ${err instanceof Error ? err.message : String(err)}`));
+        return { success: false, message: 'approvals.json unreadable' };
+    }
+    const shown = ctx.flags.all === true ? all : all.filter((a) => a.approved === null);
+    if (orgJson(ctx))
+        return printOrgJson({
+            v: 1,
+            org: name,
+            // M5: requestId / resolvedBy / input are always present (null for
+            // entries recorded before they existed).
+            items: shown.map((a) => ({
+                ...a,
+                requestId: a.requestId ?? null,
+                resolvedBy: a.resolvedBy ?? null,
+                input: a.input ?? null,
+            })),
+        });
+    if (!shown.length) {
+        log(output.info(all.length
+            ? `No pending approvals for org ${name} (${all.length} resolved — use --all).`
+            : `No approval requests recorded for org ${name}.`));
+        return { success: true };
+    }
+    for (const a of shown) {
+        const when = utcDateMinute(a.ts);
+        const mark = a.approved === null ? '❓' : a.approved ? '✓' : '✗';
+        const ref = a.requestId ? ` [${a.requestId}]` : '';
+        const by = a.resolvedBy ? ` (by ${a.resolvedBy})` : '';
+        log(output.info(`${mark} ${when}  ${a.roleId}: ${a.action}${ref}${by}`));
+    }
+    if (shown.some((a) => a.approved === null))
+        log(output.info(`\nApprove with: monomind org approve ${name} <role> <action> [--request <id>] [--by <resolver>]\nDeny with: monomind org deny ${name} <role> <action> [--request <id>] [--by <resolver>]`));
+    return { success: true };
+};
+/** `org approve <org> <role> <action>` — approve a pending tool/action approval */
+/** Shared by approveAction/denyAction: try the live daemon first (updates its
+ *  in-memory state and notifies the waiting agent's mailbox immediately), and
+ *  fall back to writing approvals.json directly when the org isn't running or
+ *  the daemon is unreachable — mirrors answerAction's live-then-offline shape. */
+async function resolveApproval(ctx, name, role, action, approved) {
+    const verb = approved ? 'approved' : 'denied';
+    // M5: attribution and request scoping.
+    const byFlag = await resolverFlag(ctx);
+    if (!byFlag.ok)
+        return { success: false, message: byFlag.message };
+    const resolvedBy = byFlag.by;
+    const requestId = typeof ctx.flags.request === 'string' && ctx.flags.request ? ctx.flags.request : undefined;
+    if (ctx.flags.request !== undefined && !requestId)
+        return { success: false, message: '--request needs an approval request id (apr-…)' };
+    // SEC: approvals carry human authority — the operator credential, never the
+    // broker entry's agent credential (which any agent subprocess can read).
+    const { lookupOrg, readOperatorCredential } = await import('../orgrt/broker.js');
+    const remote = lookupOrg(name);
+    if (remote) {
+        const cred = readOperatorCredential(name);
+        try {
+            const res = await fetch(`${remote.url}/api/set-approval`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    ...(cred ? { 'x-monomind-cred': cred } : {}),
+                },
+                body: JSON.stringify({
+                    org: name,
+                    role,
+                    action,
+                    approved,
+                    resolvedBy,
+                    ...(requestId ? { requestId } : {}),
+                }),
+                signal: AbortSignal.timeout(10_000),
+            });
+            const data = (await res.json().catch(() => ({})));
+            if (res.ok && data.ok) {
+                if (orgJson(ctx))
+                    return printOrgJson({
+                        v: 1,
+                        org: name,
+                        role,
+                        action,
+                        approved,
+                        delivery: 'live',
+                        resolvedBy,
+                        requestId: requestId ?? null,
+                    });
+                log(approved
+                    ? output.success(`Approved: ${role} may execute ${action} (live, by ${resolvedBy}).`)
+                    : output.info(`Denied: ${role} may NOT execute ${action} (live, by ${resolvedBy}).`));
+                return { success: true, message: `${verb} ${action} for ${role}` };
+            }
+            log(output.warning(`Live delivery rejected (${data.error ?? res.status}) — falling back to offline queue.`));
+        }
+        catch (err) {
+            log(output.warning(`Hosting daemon unreachable (${err instanceof Error ? err.message : 'error'}) — falling back to offline queue.`));
+        }
+    }
+    // Offline path: org isn't live (or the live call failed) — write approvals.json directly.
+    const approvalsPath = join(ctx.cwd, ORG_DIR, name, 'approvals.json');
+    if (!existsSync(approvalsPath)) {
+        return { success: false, message: `no pending approvals for org ${name}` };
+    }
+    const data = JSON.parse(readFileSync(approvalsPath, 'utf8'));
+    const pending = data.approvals ?? [];
+    // Same selection as the daemon's setApproval: the one request named by
+    // --request, else every still-pending entry for the (role, action) pair.
+    const items = pending.filter((a) => a.roleId === role &&
+        a.action === action &&
+        a.approved === null &&
+        (requestId === undefined || a.requestId === requestId));
+    if (items.length === 0) {
+        return {
+            success: false,
+            message: requestId
+                ? `no pending approval ${requestId} found for role ${role} action ${action}`
+                : `no pending approval found for role ${role} action ${action}`,
+        };
+    }
+    const now = Date.now();
+    for (const item of items) {
+        item.approved = approved;
+        item.ts = now;
+        item.resolvedBy = resolvedBy;
+        item.resolvedAt = now;
+    }
+    writeFileSync(approvalsPath, JSON.stringify({ approvals: pending }, null, 2));
+    if (orgJson(ctx))
+        return printOrgJson({
+            v: 1,
+            org: name,
+            role,
+            action,
+            approved,
+            delivery: 'recorded',
+            resolvedBy,
+            requestId: requestId ?? null,
+        });
+    log(approved
+        ? output.success(`Approved: ${role} may execute ${action} (by ${resolvedBy})`)
+        : output.info(`Denied: ${role} may NOT execute ${action} (by ${resolvedBy})`));
+    return { success: true, message: `${verb} ${action} for ${role}` };
+}
+/** `org approve <org> <role> <action> [--request <id>] [--by <resolver>]` — approve a pending tool/action approval */
+export const approveAction = async (ctx, name) => {
+    const role = ctx.args[1];
+    const action = ctx.args[2];
+    if (!role || !action) {
+        return { success: false, message: 'usage: org approve <org> <role> <action>' };
+    }
+    return resolveApproval(ctx, name, role, action, true);
+};
+/** `org deny <org> <role> <action> [--request <id>] [--by <resolver>]` — deny a pending tool/action approval */
+export const denyAction = async (ctx, name) => {
+    const role = ctx.args[1];
+    const action = ctx.args[2];
+    if (!role || !action) {
+        return { success: false, message: 'usage: org deny <org> <role> <action>' };
+    }
+    return resolveApproval(ctx, name, role, action, false);
+};
+//# sourceMappingURL=org-observe-approvals.js.map

package/dist/src/commands/org-observe-approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-observe-approvals.js","sourceRoot":"","sources":["../../../src/commands/org-observe-approvals.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,2EAA2E;AAC3E,iDAAiD;AAEjD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE9E,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE;IACjC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC,CAAC;AAeF;;;;;;yBAMyB;AACzB,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,IAAY,EAAiB,EAAE;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACxD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,MAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,EAAE,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+BAA+B,CAAC,CAAC;IAC9F,OAAO,MAAM,CAAC,SAAS,CAAC;AAC1B,CAAC,CAAC;AAEF,4FAA4F;AAC5F,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,GAAmB,EACnB,IAAY,EACY,EAAE;IAC1B,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,MAAM,CAAC,KAAK,CACV,iCAAiC,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7F,CACF,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,GAAG,CAAC;QACd,OAAO,YAAY,CAAC;YAClB,CAAC,EAAE,CAAC;YACJ,GAAG,EAAE,IAAI;YACT,kEAAkE;YAClE,yCAAyC;YACzC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,GAAG,CAAC;gBACJ,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;gBAC9B,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;gBAChC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;aACvB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,GAAG,CACD,MAAM,CAAC,IAAI,CACT,GAAG,CAAC,MAAM;YACR,CAAC,CAAC,gCAAgC,IAAI,KAAK,GAAG,CAAC,MAAM,yBAAyB;YAC9E,CAAC,CAAC,yCAAyC,IAAI,GAAG,CACrD,CACF,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAChE,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;QACxC,GAAG,CACD,MAAM,CAAC,IAAI,CACT,wCAAwC,IAAI,qFAAqF,IAAI,qDAAqD,CAC3L,CACF,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF,mFAAmF;AACnF;;;kFAGkF;AAClF,KAAK,UAAU,eAAe,CAC5B,GAAmB,EACnB,IAAY,EACZ,IAAY,EACZ,MAAc,EACd,QAAiB;IAEjB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9C,uCAAuC;IACvC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACnE,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC;IAC7B,MAAM,SAAS,GACb,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,SAAS;QAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;IAEvF,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,mBAAmB,EAAE;gBACxD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7C;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,GAAG,EAAE,IAAI;oBACT,IAAI;oBACJ,MAAM;oBACN,QAAQ;oBACR,UAAU;oBACV,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpC,CAAC;gBACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAqC,CAAC;YACtF,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACtB,IAAI,OAAO,CAAC,GAAG,CAAC;oBACd,OAAO,YAAY,CAAC;wBAClB,CAAC,EAAE,CAAC;wBACJ,GAAG,EAAE,IAAI;wBACT,IAAI;wBACJ,MAAM;wBACN,QAAQ;wBACR,QAAQ,EAAE,MAAM;wBAChB,UAAU;wBACV,SAAS,EAAE,SAAS,IAAI,IAAI;qBAC7B,CAAC,CAAC;gBACL,GAAG,CACD,QAAQ;oBACN,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,gBAAgB,MAAM,cAAc,UAAU,IAAI,CAAC;oBACrF,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,oBAAoB,MAAM,cAAc,UAAU,IAAI,CAAC,CACvF,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,MAAM,QAAQ,IAAI,EAAE,EAAE,CAAC;YACrE,CAAC;YACD,GAAG,CACD,MAAM,CAAC,OAAO,CACZ,2BAA2B,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,oCAAoC,CACxF,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CACD,MAAM,CAAC,OAAO,CACZ,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,oCAAoC,CAChH,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0FAA0F;IAC1F,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gCAAgC,IAAI,EAAE,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAkB,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IACpD,uEAAuE;IACvE,yEAAyE;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAC1B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,IAAI;QACjB,CAAC,CAAC,MAAM,KAAK,MAAM;QACnB,CAAC,CAAC,QAAQ,KAAK,IAAI;QACnB,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CACzD,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,SAAS;gBAChB,CAAC,CAAC,uBAAuB,SAAS,mBAAmB,IAAI,WAAW,MAAM,EAAE;gBAC5E,CAAC,CAAC,sCAAsC,IAAI,WAAW,MAAM,EAAE;SAClE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC;QACd,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;IACxB,CAAC;IACD,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAE9E,IAAI,OAAO,CAAC,GAAG,CAAC;QACd,OAAO,YAAY,CAAC;YAClB,CAAC,EAAE,CAAC;YACJ,GAAG,EAAE,IAAI;YACT,IAAI;YACJ,MAAM;YACN,QAAQ;YACR,QAAQ,EAAE,UAAU;YACpB,UAAU;YACV,SAAS,EAAE,SAAS,IAAI,IAAI;SAC7B,CAAC,CAAC;IACL,GAAG,CACD,QAAQ;QACN,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,IAAI,gBAAgB,MAAM,QAAQ,UAAU,GAAG,CAAC;QAC9E,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,oBAAoB,MAAM,QAAQ,UAAU,GAAG,CAAC,CAChF,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,IAAI,MAAM,QAAQ,IAAI,EAAE,EAAE,CAAC;AACrE,CAAC;AAED,sHAAsH;AACtH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAAE,GAAmB,EAAE,IAAY,EAA0B,EAAE;IAC/F,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC,CAAC;AAEF,gHAAgH;AAChH,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAmB,EAAE,IAAY,EAA0B,EAAE;IAC5F,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACzD,CAAC,CAAC"}

package/dist/src/commands/org-observe-checkpoint.d.ts

@@ -0,0 +1,26 @@
+import type { CommandContext, CommandResult } from '../types.js';
+/** `org replay <org> <run-id>` — time-travel debugging: re-emit a past run's bus
+ *  events into a fresh replay run for inspection. This is event-log replay only —
+ *  it does not restart agent execution or restore live sessions. To actually
+ *  resume an org's execution from where it left off, use `org run --resume`. */
+export declare const replayAction: (ctx: CommandContext, name: string) => Promise<CommandResult>;
+/** `org resume-from <org>` — resume live execution from the org's persisted
+ *  checkpoint (runtime.json): restores mailbox queues, policy/token counters,
+ *  and session state, subject to checkpoint TTL and checksum validation. Unlike
+ *  `replay`, this restarts real agent execution via `startOrg(..., { resume: true })`. */
+export declare const resumeFromAction: (ctx: CommandContext, name: string) => Promise<CommandResult>;
+/** `org branch <org> <run-id> <label> [--format json]` — snapshot a run's event
+ *  log for replay. This is NOT an executable what-if scenario: it copies
+ *  bus.jsonl into a new run directory tagged with a `.branch-source` marker so
+ *  it can be inspected or replayed later; it does not fork or re-run agent
+ *  execution. Delegates to the shared, atomic (tmp+rename) implementation in
+ *  checkpoint-ops.ts.
+ *
+ *  `<label>` is a note recorded in `.branch-source`, not the new run's name —
+ *  the run id is generated. `--format json` reports that generated id as a
+ *  field so a scripted caller can feed it to `org replay` without scraping the
+ *  human-readable line (#292). */
+export declare const branchAction: (ctx: CommandContext, name: string) => Promise<CommandResult>;
+/** `org decisions <org> [--run id]` — show Rifft-style decision traces */
+export declare const decisionsAction: (ctx: CommandContext, name: string) => Promise<CommandResult>;
+//# sourceMappingURL=org-observe-checkpoint.d.ts.map

package/dist/src/commands/org-observe-checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-observe-checkpoint.d.ts","sourceRoot":"","sources":["../../../src/commands/org-observe-checkpoint.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAOjE;;;gFAGgF;AAChF,eAAO,MAAM,YAAY,QAAe,cAAc,QAAQ,MAAM,KAAG,OAAO,CAAC,aAAa,CAuC3F,CAAC;AAyBF;;;0FAG0F;AAC1F,eAAO,MAAM,gBAAgB,QACtB,cAAc,QACb,MAAM,KACX,OAAO,CAAC,aAAa,CAkDvB,CAAC;AAEF;;;;;;;;;;kCAUkC;AAClC,eAAO,MAAM,YAAY,QAAe,cAAc,QAAQ,MAAM,KAAG,OAAO,CAAC,aAAa,CAkB3F,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,eAAe,QACrB,cAAc,QACb,MAAM,KACX,OAAO,CAAC,aAAa,CAkDvB,CAAC"}

package/dist/src/commands/org-observe-checkpoint.js

@@ -0,0 +1,180 @@
+// packages/@monomind/cli/src/commands/org-observe-checkpoint.ts
+//
+// `monomind org replay | resume-from | branch | decisions` — checkpoint
+// replay, resume and branching, and decision traces.
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { branchCheckpoint } from '../orgrt/checkpoint-ops.js';
+import { readRunEvents } from '../orgrt/reporting.js';
+import { ORG_DIR } from '../orgrt/types.js';
+import { output } from '../output.js';
+import { orgJson, printOrgJson, resolveRun } from './org-observe-shared.js';
+const log = (text) => {
+    console.log(text);
+};
+/** `org replay <org> <run-id>` — time-travel debugging: re-emit a past run's bus
+ *  events into a fresh replay run for inspection. This is event-log replay only —
+ *  it does not restart agent execution or restore live sessions. To actually
+ *  resume an org's execution from where it left off, use `org run --resume`. */
+export const replayAction = async (ctx, name) => {
+    const run = ctx.args[1];
+    if (!run) {
+        return { success: false, message: 'usage: org replay <org> <run-id>' };
+    }
+    const runDir = join(ctx.cwd, ORG_DIR, name, run);
+    if (!existsSync(runDir)) {
+        return { success: false, message: `run ${run} not found for org ${name}` };
+    }
+    const busFile = join(runDir, 'bus.jsonl');
+    if (!existsSync(busFile)) {
+        return { success: false, message: `no bus events found for run ${run}` };
+    }
+    log(output.info(`Replaying org ${name} events from checkpoint ${run}...`));
+    // Create daemon and replay the bus events for debugging/inspection
+    const { OrgDaemon } = await import('../orgrt/daemon.js');
+    const daemon = new OrgDaemon(ctx.cwd, { forward: false });
+    const resumed = await daemon.replayFrom(name, run);
+    if (!resumed) {
+        return {
+            success: false,
+            message: `replay failed - check bus.jsonl and org config for ${name} are valid`,
+        };
+    }
+    log(output.success(`Org ${name} events replayed from ${run} as run ${resumed.run}`));
+    log(output.info(`Use: monomind org logs ${name} --run ${resumed.run} to inspect events.`));
+    log(output.info(`This is debug replay only — it does not restart agent execution. To resume live execution, use: monomind org run ${name} --resume`));
+    return { success: true, message: `replayed events from checkpoint ${run} as ${resumed.run}` };
+};
+/** PID of a live `org serve` daemon for this project, or null. Mirrors
+ *  runAction's `liveServeDaemonPid` (commands/org-control.ts) — duplicated
+ *  rather than imported because that function wasn't exported when this copy
+ *  was written and this file was scoped to not touch org.ts. Liveness is confirmed against the pid
+ *  itself, not just heartbeat-file presence, since a SIGKILLed daemon leaves
+ *  a stale heartbeat behind; a stamp older than a few beats (daemon beats
+ *  every 30s) means it's gone or wedged. */
+function liveServeDaemonPid(cwd) {
+    try {
+        const hb = JSON.parse(readFileSync(join(cwd, '.monomind', 'serve-heartbeat.json'), 'utf8'));
+        if (typeof hb.pid !== 'number' || hb.pid === process.pid)
+            return null;
+        const age = Date.now() - Date.parse(hb.updatedAt ?? '');
+        if (!Number.isFinite(age) || age > 3 * 60_000)
+            return null;
+        process.kill(hb.pid, 0); // throws if the process is gone
+        return hb.pid;
+    }
+    catch {
+        return null;
+    }
+}
+/** `org resume-from <org>` — resume live execution from the org's persisted
+ *  checkpoint (runtime.json): restores mailbox queues, policy/token counters,
+ *  and session state, subject to checkpoint TTL and checksum validation. Unlike
+ *  `replay`, this restarts real agent execution via `startOrg(..., { resume: true })`. */
+export const resumeFromAction = async (ctx, name) => {
+    // A live `org serve` daemon (or another `org run`) may already own this
+    // org's execution. Building a fresh in-process OrgDaemon and resuming
+    // unconditionally — as this action used to — puts two processes on one
+    // runtime.json/broker lease and spawns a second set of role sessions
+    // against the same shared git workspace, since the fresh daemon's
+    // duplicate-start guard (`this.orgs.has(name)`) is scoped to its own empty
+    // in-memory map and never sees the other process. `runAction` (org.ts)
+    // already guards this by handing the request to the live daemon via a
+    // runfile instead of racing it — but that runfile mechanism only carries a
+    // plain "start" request (pollRunfiles/org.ts calls `daemon.startOrg(name,
+    // task)` with no resume option), so it can't be reused for a resume
+    // request without also touching org.ts. Refuse instead of racing the live
+    // daemon.
+    const serveOwner = liveServeDaemonPid(ctx.cwd);
+    if (serveOwner != null) {
+        log(output.error(`org ${name}: a live serve daemon (pid ${serveOwner}) already owns this project's orgs — refusing to start a second execution here.`));
+        log(output.info(`Check it against the live daemon instead: monomind org status ${name} / org decisions ${name} / org gates ${name}. ` +
+            `To resume from checkpoint yourself, stop the live daemon first (monomind org stop) or let it pick the org back up on its own schedule.`));
+        return {
+            success: false,
+            message: `org ${name}: already owned by live serve daemon (pid ${serveOwner}) — refused to avoid a duplicate execution`,
+        };
+    }
+    log(output.info(`Resuming org ${name} from checkpoint...`));
+    const { OrgDaemon } = await import('../orgrt/daemon.js');
+    const daemon = new OrgDaemon(ctx.cwd, { forward: false });
+    const resumed = await daemon.resumeOrg(name);
+    if (!resumed) {
+        return {
+            success: false,
+            message: `resume failed for ${name} - check runtime.json checkpoint is present, unexpired, and valid`,
+        };
+    }
+    log(output.success(`Org ${name} resumed - ${resumed.agents.size} role(s) restored`));
+    log(output.info(`Stop with: monomind org stop ${name}`));
+    return { success: true, message: `resumed ${name} - ${resumed.agents.size} role(s) restored` };
+};
+/** `org branch <org> <run-id> <label> [--format json]` — snapshot a run's event
+ *  log for replay. This is NOT an executable what-if scenario: it copies
+ *  bus.jsonl into a new run directory tagged with a `.branch-source` marker so
+ *  it can be inspected or replayed later; it does not fork or re-run agent
+ *  execution. Delegates to the shared, atomic (tmp+rename) implementation in
+ *  checkpoint-ops.ts.
+ *
+ *  `<label>` is a note recorded in `.branch-source`, not the new run's name —
+ *  the run id is generated. `--format json` reports that generated id as a
+ *  field so a scripted caller can feed it to `org replay` without scraping the
+ *  human-readable line (#292). */
+export const branchAction = async (ctx, name) => {
+    const run = ctx.args[1];
+    const label = ctx.args[2];
+    if (!run || !label) {
+        return { success: false, message: 'usage: org branch <org> <run-id> <label>' };
+    }
+    const result = branchCheckpoint(ctx.cwd, name, run, label);
+    if (!result.ok) {
+        return { success: false, message: result.error };
+    }
+    if (orgJson(ctx))
+        return printOrgJson({ v: 1, org: name, run: result.branchRun, from: run, label });
+    log(output.success(`Snapshotted ${run} as run ${result.branchRun} (label: "${label}")`));
+    log(output.info(`Replay it with: monomind org replay ${name} ${result.branchRun}`));
+    return { success: true, message: `snapshotted ${run} as run ${result.branchRun}` };
+};
+/** `org decisions <org> [--run id]` — show Rifft-style decision traces */
+export const decisionsAction = async (ctx, name) => {
+    const run = resolveRun(ctx.cwd, name, ctx.flags.run);
+    if (!run) {
+        return { success: false, message: `no runs found for org ${name}` };
+    }
+    const events = readRunEvents(ctx.cwd, name, run);
+    if (!events.length) {
+        return { success: false, message: `run ${run} has no recorded events` };
+    }
+    // Filter decision trace events
+    const decisionEvents = events.filter((e) => e.type === 'audit' && e.reason === 'decision-trace' && e.data && typeof e.data === 'object');
+    if (orgJson(ctx)) {
+        return printOrgJson({
+            v: 1,
+            org: name,
+            run,
+            items: decisionEvents.map((e) => ({
+                ts: e.ts,
+                role: e.from ?? 'system',
+                ...e.data,
+            })),
+        });
+    }
+    if (!decisionEvents.length) {
+        log(output.info(`No decision traces found in ${run}`));
+        return { success: true };
+    }
+    log(output.info(`Decision traces for ${name} / ${run} (${decisionEvents.length} decisions):`));
+    log(output.info('┌──────────────────┬─────────────┬────────────────────────────────────────┐'));
+    log(output.info('│ Role             │ Type        │ Context                                │'));
+    log(output.info('├──────────────────┼─────────────┼────────────────────────────────────────┤'));
+    for (const e of decisionEvents) {
+        const role = e.from ?? 'system';
+        const type = e.data.decisionType ?? 'unknown';
+        const context = e.data.context ?? '-';
+        log(output.info(`│ ${role.padEnd(16)} │ ${type.padEnd(11)} │ ${context.padEnd(38)} │`));
+    }
+    log(output.info('└──────────────────┴─────────────┴────────────────────────────────────────┘'));
+    return { success: true, message: `${decisionEvents.length} decision traces` };
+};
+//# sourceMappingURL=org-observe-checkpoint.js.map

package/dist/src/commands/org-observe-checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-observe-checkpoint.js","sourceRoot":"","sources":["../../../src/commands/org-observe-checkpoint.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,wEAAwE;AACxE,qDAAqD;AAErD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE5E,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE;IACjC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC,CAAC;AAEF;;;gFAGgF;AAChF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAmB,EAAE,IAAY,EAA0B,EAAE;IAC9F,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,sBAAsB,IAAI,EAAE,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,GAAG,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,IAAI,2BAA2B,GAAG,KAAK,CAAC,CAAC,CAAC;IAE3E,mEAAmE;IACnE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,sDAAsD,IAAI,YAAY;SAChF,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,yBAAyB,GAAG,WAAW,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,IAAI,UAAU,OAAO,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC;IAC3F,GAAG,CACD,MAAM,CAAC,IAAI,CACT,oHAAoH,IAAI,WAAW,CACpI,CACF,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,mCAAmC,GAAG,OAAO,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;AAChG,CAAC,CAAC;AAEF;;;;;;4CAM4C;AAC5C,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAGzF,CAAC;QACF,IAAI,OAAO,EAAE,CAAC,GAAG,KAAK,QAAQ,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,gCAAgC;QACzD,OAAO,EAAE,CAAC,GAAG,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;0FAG0F;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,GAAmB,EACnB,IAAY,EACY,EAAE;IAC1B,wEAAwE;IACxE,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,kEAAkE;IAClE,2EAA2E;IAC3E,uEAAuE;IACvE,sEAAsE;IACtE,2EAA2E;IAC3E,0EAA0E;IAC1E,oEAAoE;IACpE,0EAA0E;IAC1E,UAAU;IACV,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CACD,MAAM,CAAC,KAAK,CACV,OAAO,IAAI,8BAA8B,UAAU,iFAAiF,CACrI,CACF,CAAC;QACF,GAAG,CACD,MAAM,CAAC,IAAI,CACT,iEAAiE,IAAI,oBAAoB,IAAI,gBAAgB,IAAI,IAAI;YACnH,wIAAwI,CAC3I,CACF,CAAC;QACF,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,OAAO,IAAI,6CAA6C,UAAU,4CAA4C;SACxH,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,qBAAqB,CAAC,CAAC,CAAC;IAE5D,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAE1D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,qBAAqB,IAAI,mEAAmE;SACtG,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,OAAO,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC;IACrF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEzD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,IAAI,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;AACjG,CAAC,CAAC;AAEF;;;;;;;;;;kCAUkC;AAClC,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAmB,EAAE,IAAY,EAA0B,EAAE;IAC9F,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC;QACd,OAAO,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAEpF,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,GAAG,WAAW,MAAM,CAAC,SAAS,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC;IACzF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACpF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,GAAG,WAAW,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;AACrF,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,GAAmB,EACnB,IAAY,EACY,EAAE;IAC1B,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,IAAI,EAAE,EAAE,CAAC;IACtE,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,yBAAyB,EAAE,CAAC;IAC1E,CAAC;IAED,+BAA+B;IAC/B,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAC9F,CAAC;IAEF,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;YAClB,CAAC,EAAE,CAAC;YACJ,GAAG,EAAE,IAAI;YACT,GAAG;YACH,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,QAAQ;gBACxB,GAAI,CAAC,CAAC,IAAgC;aACvC,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC,CAAC;QACvD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,IAAI,MAAM,GAAG,KAAK,cAAc,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC;IAC/F,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC,CAAC;IAChG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC,CAAC;IAChG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC,CAAC;IAEhG,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC;QAChC,MAAM,IAAI,GAAI,CAAC,CAAC,IAAkC,CAAC,YAAY,IAAI,SAAS,CAAC;QAC7E,MAAM,OAAO,GAAI,CAAC,CAAC,IAA6B,CAAC,OAAO,IAAI,GAAG,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC,CAAC;IAEhG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,MAAM,kBAAkB,EAAE,CAAC;AAChF,CAAC,CAAC"}

package/dist/src/commands/org-observe-config.d.ts

@@ -0,0 +1,8 @@
+import type { CommandContext, CommandResult } from '../types.js';
+/** Validate org config(s) against OrgDefSchema — the exact parse `org run`/`org serve`
+ * perform — plus the structural invariants the runtime assumes but the schema can't
+ * express (single root role, resolvable reports_to, unique ids, parseable schedule). */
+export declare const validateAction: (ctx: CommandContext) => Promise<CommandResult>;
+/** `org create <name> --template <t> [--goal g] [--schedule s]` — scaffold a config from a template. */
+export declare const createAction: (ctx: CommandContext, name: string) => Promise<CommandResult>;
+//# sourceMappingURL=org-observe-config.d.ts.map

package/dist/src/commands/org-observe-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-observe-config.d.ts","sourceRoot":"","sources":["../../../src/commands/org-observe-config.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAOjE;;wFAEwF;AACxF,eAAO,MAAM,cAAc,QAAe,cAAc,KAAG,OAAO,CAAC,aAAa,CA4E/E,CAAC;AAEF,wGAAwG;AACxG,eAAO,MAAM,YAAY,QAAe,cAAc,QAAQ,MAAM,KAAG,OAAO,CAAC,aAAa,CAoF3F,CAAC"}

package/dist/src/commands/org-observe-config.js

@@ -0,0 +1,160 @@
+// packages/@monomind/cli/src/commands/org-observe-config.ts
+//
+// `monomind org validate | create` — org config validation and template
+// scaffolding.
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { resolveOrgDefBlueprints } from '../catalog/blueprints.js';
+import { checkOrgStructure } from '../orgrt/migrate.js';
+import { gitEnforcementFindings } from '../orgrt/role-sandbox.js';
+import { resolveModel } from '../orgrt/session.js';
+import { buildFromTemplate, ORG_TEMPLATES } from '../orgrt/templates.js';
+import { ORG_DIR, OrgDefSchema } from '../orgrt/types.js';
+import { output } from '../output.js';
+import { listOrgConfigFiles, validateOrgName } from './org-control.js';
+const log = (text) => {
+    console.log(text);
+};
+/** Validate org config(s) against OrgDefSchema — the exact parse `org run`/`org serve`
+ * perform — plus the structural invariants the runtime assumes but the schema can't
+ * express (single root role, resolvable reports_to, unique ids, parseable schedule). */
+export const validateAction = async (ctx) => {
+    const orgsDir = join(ctx.cwd || process.cwd(), ORG_DIR);
+    let files;
+    if (ctx.args[0]) {
+        const validated = validateOrgName(ctx.args[0]);
+        if (!validated.ok)
+            return validated.result;
+        files = [`${validated.name}.json`];
+    }
+    else {
+        if (!existsSync(orgsDir))
+            return {
+                success: false,
+                message: 'no orgs directory — create an org first with /mastermind:createorg',
+            };
+        files = listOrgConfigFiles(orgsDir);
+        if (!files.length)
+            return { success: false, message: 'no org configs found' };
+    }
+    let failed = 0;
+    for (const f of files) {
+        const stem = f.replace(/\.json$/, '');
+        const path = join(orgsDir, f);
+        const errors = [];
+        const warnings = [];
+        if (!existsSync(path)) {
+            log(output.error(`${stem}: not found (${path})`));
+            failed++;
+            continue;
+        }
+        try {
+            const parsedDef = OrgDefSchema.parse(JSON.parse(readFileSync(path, 'utf8')));
+            const bp = resolveOrgDefBlueprints(parsedDef, ctx.cwd || process.cwd());
+            const def = bp.def;
+            errors.push(...bp.errors);
+            for (const n of bp.notes)
+                log(output.info(`${stem}: ${n}`));
+            errors.push(...checkOrgStructure(def));
+            // ADR-O001 D8: a cost tier that can't resolve a model for a role's
+            // provider is a config error, not a runtime fallback — surface it here
+            // as well as at daemon start, so it's caught before a run is attempted.
+            const { validateCostTiers } = await import('../orgrt/cost-tier.js');
+            errors.push(...validateCostTiers(def));
+            // S3: a typo'd placeholder would reach the prompt verbatim.
+            const { unknownPromptVarErrors } = await import('../orgrt/prompt-vars.js');
+            errors.push(...unknownPromptVarErrors(def));
+            // ADR-O001 D7: catalog size (>15 is an error, <5 a warning) and every
+            // loadout's skills/file must resolve — same checks as daemon start.
+            const { validateLoadouts } = await import('../orgrt/loadouts.js');
+            const loadoutFindings = validateLoadouts(def, ctx.cwd || process.cwd());
+            errors.push(...loadoutFindings.errors);
+            warnings.push(...loadoutFindings.warnings);
+            const { validateRoleSkills } = await import('../orgrt/skill-library.js');
+            errors.push(...def.roles.flatMap((r) => validateRoleSkills(r, ctx.cwd || process.cwd())));
+            // #258: roles whose policy.git won't have the OS sandbox behind it here
+            const gitFindings = gitEnforcementFindings(def);
+            errors.push(...gitFindings.errors);
+            warnings.push(...gitFindings.warnings);
+            if (def.name !== stem)
+                warnings.push(`def.name "${def.name}" differs from filename — the runtime addresses this org as "${stem}"`);
+        }
+        catch (err) {
+            errors.push(err instanceof Error ? err.message : String(err));
+        }
+        for (const w of warnings)
+            log(output.warning(`${stem}: ${w}`));
+        if (errors.length) {
+            failed++;
+            for (const e of errors)
+                log(output.error(`${stem}: ${e}`));
+        }
+        else {
+            log(output.success(`${stem}: valid${warnings.length ? ` (${warnings.length} warning(s))` : ''}`));
+        }
+    }
+    return failed
+        ? { success: false, message: `${failed} of ${files.length} org config(s) failed validation` }
+        : { success: true, message: `${files.length} org config(s) valid` };
+};
+/** `org create <name> --template <t> [--goal g] [--schedule s]` — scaffold a config from a template. */
+export const createAction = async (ctx, name) => {
+    const templateName = typeof ctx.flags.template === 'string' ? ctx.flags.template : '';
+    if (!templateName) {
+        log(output.info(`Available templates: ${Object.keys(ORG_TEMPLATES).join(', ')}`));
+        return {
+            success: false,
+            message: 'usage: monomind org create <name> --template <template> [--goal "..."] [--schedule 30m]',
+        };
+    }
+    const def = buildFromTemplate(templateName, name, typeof ctx.flags.goal === 'string' ? ctx.flags.goal : undefined);
+    if (!def) {
+        log(output.error(`Unknown template "${templateName}" — available: ${Object.keys(ORG_TEMPLATES).join(', ')}`));
+        return { success: false, message: 'unknown template' };
+    }
+    if (typeof ctx.flags.schedule === 'string')
+        def.schedule = ctx.flags.schedule;
+    const file = join(ctx.cwd, ORG_DIR, `${name}.json`);
+    if (existsSync(file) && ctx.flags.force !== true) {
+        log(output.error(`Org "${name}" already exists — pass --force to overwrite.`));
+        return { success: false, message: 'org exists' };
+    }
+    OrgDefSchema.parse(def); // templates must always produce a runnable config
+    // Per-role model — the single most consequential setting the template picked on
+    // the user's behalf. Mirror resolveModel() (same helper `org run`'s cost estimate
+    // uses) so a role relying on its runtime/vendor default isn't mislabeled here.
+    const modelRows = def.roles.map((r) => {
+        const explicit = r.adapter_config?.model;
+        return {
+            id: r.id,
+            model: String(explicit ?? resolveModel(r, r.runtime ?? def.runtime, r.provider?.vendor)),
+            explicit: !!explicit,
+        };
+    });
+    const printModels = () => {
+        log(output.bold('  Models:'));
+        for (const r of modelRows) {
+            log(`    ${r.id.padEnd(20)} ${r.model}${r.explicit ? '' : '  (default)'}`);
+        }
+    };
+    if (ctx.interactive && ctx.flags.yes !== true) {
+        log(output.bold(`\nAbout to create org "${name}" from template "${templateName}" (${def.roles.length} roles):`));
+        printModels();
+        const { confirm } = await import('../prompt.js');
+        const proceed = await confirm({ message: 'Create this org?', default: true });
+        if (!proceed) {
+            log(output.info('Cancelled — no file written. Adjust --template/--goal, or edit the template, then retry (pass --yes to skip this prompt).'));
+            return { success: false, message: 'cancelled by user' };
+        }
+    }
+    const { mkdirSync } = await import('node:fs');
+    mkdirSync(join(ctx.cwd, ORG_DIR), { recursive: true });
+    writeFileSync(file, `${JSON.stringify(def, null, 2)}\n`, 'utf8');
+    log(output.success(`Org "${name}" created from template "${templateName}" (${def.roles.length} roles).`));
+    log(output.info(`  Budget: ${def.run_config.budget_tokens} tokens · Turn limit: ${def.run_config.max_turns_per_message} per message (effectively unlimited by default — set run_config.max_turns_per_message, or a role's own max_turns_per_message, to cap it).`));
+    if (!ctx.interactive || ctx.flags.yes === true)
+        printModels();
+    log(output.info(`  Edit the goal/roles in ${file}, then: monomind org run ${name}`));
+    return { success: true };
+};
+//# sourceMappingURL=org-observe-config.js.map