@openrig/cli 0.1.12 → 0.2.0

package/daemon/dist/domain/agent-starter-resolver.js

@@ -0,0 +1,200 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join, basename } from "node:path";
+import os from "node:os";
+/**
+ * Thrown by `resolveStarter` when the no-credentials scan fails. Per
+ * review-independent finding 2, the resolver MUST throw rather than
+ * return a structured "ok: false" result the orchestrator could ignore;
+ * a failed scan is a hard refusal point that aborts the launch.
+ */
+export class AgentStarterCredentialScanFailedError extends Error {
+    starterName;
+    reason;
+    constructor(starterName, reason) {
+        super(`Agent Starter "${starterName}" credential scan failed: ${reason}`);
+        this.name = "AgentStarterCredentialScanFailedError";
+        this.starterName = starterName;
+        this.reason = reason;
+    }
+}
+const DEFAULT_ENV_VAR = "OPENRIG_AGENT_STARTER_ROOT";
+const DEFAULT_HOME_SUBPATH = ".openrig/agent-starters";
+const DEFAULT_SUBSTRATE_FALLBACK = "/Users/wrandom/code/substrate/shared-docs/openrig-work/specs/agent-starters";
+export class AgentStarterResolver {
+    registryRoot;
+    exists;
+    readFile;
+    constructor(opts = {}) {
+        this.exists = opts.exists ?? existsSync;
+        this.readFile = opts.readFile ?? ((p) => readFileSync(p, "utf-8"));
+        this.registryRoot = AgentStarterResolver.resolveRegistryRoot(opts, this.exists);
+    }
+    /** Exposed for tests + diagnostics. */
+    getRegistryRoot() {
+        return this.registryRoot;
+    }
+    /**
+     * Look up the registry root via the documented chain:
+     *   opts.registryRoot > env[envVarName] > homeDirRoot (if exists) > substrateFallback
+     *
+     * The first three are explicit; the substrate fallback is the dogfood
+     * default and always returns even if the path doesn't exist (resolveStarter
+     * will throw with a missing-entry error when the fallback is dead). This
+     * keeps the constructor side-effect-free; the file-existence check lives
+     * inside `resolveStarter`.
+     */
+    static resolveRegistryRoot(opts, exists) {
+        if (typeof opts.registryRoot === "string" && opts.registryRoot !== "") {
+            return opts.registryRoot;
+        }
+        const env = opts.env ?? process.env;
+        const envVarName = opts.envVarName ?? DEFAULT_ENV_VAR;
+        const fromEnv = env[envVarName];
+        if (typeof fromEnv === "string" && fromEnv !== "") {
+            return fromEnv;
+        }
+        const homeBase = opts.homeDirRoot
+            ?? join(env.HOME ?? os.homedir(), DEFAULT_HOME_SUBPATH);
+        if (exists(homeBase)) {
+            return homeBase;
+        }
+        return opts.substrateFallback ?? DEFAULT_SUBSTRATE_FALLBACK;
+    }
+    /**
+     * Resolve a starter by registry name. THROWS on:
+     * - missing registry entry (no `<root>/<name>.yaml`);
+     * - malformed YAML (best-effort detection — empty file, unparseable
+     *   front-matter shape — driver does not pull in a YAML parser at
+     *   M1 to keep the dependency surface narrow);
+     * - failed no-credentials scan (`AgentStarterCredentialScanFailedError`).
+     *
+     * On a clean scan, emits `ResolvedStartupFile[]`. v1 M1 scaffolding
+     * shape: one entry per registry-relative file the starter declares
+     * (currently the registry entry YAML itself, treated as guidance_merge
+     * content; later milestones can extend the resolver to walk the
+     * priming-pack manifest's `read_full` paths once M2/M3 wiring is in
+     * place). All emitted files are tagged `appliesOn: ["fresh_start"]`
+     * because starter context seeds a fresh-launch conversation.
+     */
+    resolveStarter(name) {
+        if (!/^[a-zA-Z0-9][a-zA-Z0-9_-]*$/.test(name)) {
+            throw new Error(`Agent Starter resolver: invalid name ${JSON.stringify(name)} (must be alphanumeric with optional "_" or "-")`);
+        }
+        const registryPath = join(this.registryRoot, `${name}.yaml`);
+        if (!this.exists(registryPath)) {
+            throw new Error(`Agent Starter resolver: no registry entry found at ${registryPath}`);
+        }
+        let content;
+        try {
+            content = this.readFile(registryPath);
+        }
+        catch (err) {
+            throw new Error(`Agent Starter resolver: failed to read ${registryPath}: ${err.message}`);
+        }
+        if (typeof content !== "string" || content.trim() === "") {
+            throw new Error(`Agent Starter resolver: ${registryPath} is empty or unreadable`);
+        }
+        // Smoke check that the file parses as YAML front-matter shape: it must
+        // contain `starter_id:` line. Keeps M1 dependency surface narrow (no
+        // yaml parser pulled in); M2 can swap in a real parser when it walks
+        // the priming-pack manifest.
+        if (!/^starter_id:\s*\S+/m.test(content)) {
+            throw new Error(`Agent Starter resolver: ${registryPath} does not match registry-entry shape (missing "starter_id:" field)`);
+        }
+        // Path-aware + content-aware credential scan. Mirrors the v0 wrapper
+        // helper at `specs/agent-starters/lib/agent-starter-helpers.sh`
+        // `scan_starter_file`. THROWS on match (per finding 2: refuse, do
+        // not return).
+        const scanResult = scanForCredentials(content, registryPath);
+        if (!scanResult.ok) {
+            throw new AgentStarterCredentialScanFailedError(name, scanResult.reason);
+        }
+        // M1 scaffolding shape: one ResolvedStartupFile pointing at the
+        // registry entry itself. The orchestrator's `deliverStartup` seam
+        // already accepts `deliveryHint: "guidance_merge"`. Later milestones
+        // (M2 instantiator integration; M3 Claude e2e; M4 Codex parity) can
+        // extend the resolver to walk the priming-pack manifest's `read_full`
+        // paths if the e2e proof requires richer per-layer artifacts. The
+        // type contract and refusal semantics are what M1 is locking in.
+        const files = [
+            {
+                path: basename(registryPath),
+                absolutePath: registryPath,
+                ownerRoot: this.registryRoot,
+                deliveryHint: "guidance_merge",
+                required: true,
+                appliesOn: ["fresh_start"],
+            },
+        ];
+        return { files, registryPath };
+    }
+}
+// --- No-credentials scan (mirrors `lib/agent-starter-helpers.sh::scan_starter_file`) ---
+const CRED_PATH_LITERALS = [
+    ".claude/.credentials.json",
+    ".codex/auth.json",
+    ".aws/credentials",
+    ".ssh/",
+];
+const CRED_PATH_RE = /(credentials|auth\.json|secrets|tokens?\.json)([^a-zA-Z0-9._-]|$)/;
+const CRED_STRING_RE = /(api[_-]?key|secret[_-]?key|bearer[_-]?token|sk-[A-Za-z0-9]{20,}|gh[ps]_[A-Za-z0-9]{20,}|password[\s]*[:=])/i;
+function scanForCredentials(content, filePath) {
+    // Allowlist exception: `transcript_path` field values under
+    // `~/.claude/projects/` or `~/.openrig/transcripts/` are accepted
+    // (mirrors the v0 wrapper); same paths under any other field/key/comment
+    // are rejected as suspicious copying.
+    const transcriptPath = extractFieldValue(content, "transcript_path");
+    let lineNo = 0;
+    for (const rawLine of content.split("\n")) {
+        lineNo += 1;
+        const line = rawLine;
+        // Allowlist check for transcript_path's own line.
+        const stripped = line.replace(/^\s+/, "");
+        let isAllowlistedTranscript = false;
+        if (transcriptPath && stripped.startsWith("transcript_path:")) {
+            if (transcriptPath.includes("/.claude/projects/")
+                || transcriptPath.includes("/.openrig/transcripts/")) {
+                isAllowlistedTranscript = true;
+            }
+        }
+        // 1. Literal credential paths.
+        // Refusal reason intentionally REDACTS the matched line content. The
+        // daemon-tier resolver flows error messages into logs/API responses;
+        // echoing the matched line would leak the credential-bearing content
+        // the deny-list is meant to catch. Operators see refusal code + line
+        // number + file path; that's enough to triage. Closes the v0 wrapper
+        // diagnostic-`match`-field caveat at the daemon-tier productization
+        // layer (per M1 Revision 2 finding 3).
+        for (const literal of CRED_PATH_LITERALS) {
+            if (line.includes(literal)) {
+                return {
+                    ok: false,
+                    reason: `credential_path_disallowed: line ${lineNo} of ${filePath} matches a deny-list literal credential path (content redacted)`,
+                };
+            }
+        }
+        // 2. Path regex (credentials|auth.json|secrets|tokens.json).
+        if (!isAllowlistedTranscript && CRED_PATH_RE.test(line)) {
+            return {
+                ok: false,
+                reason: `credential_path_disallowed: line ${lineNo} of ${filePath} matches credential path pattern (content redacted)`,
+            };
+        }
+        // 3. Credential string regex (case-insensitive).
+        if (CRED_STRING_RE.test(line)) {
+            return {
+                ok: false,
+                reason: `credential_content_disallowed: line ${lineNo} of ${filePath} matches credential content pattern (content redacted)`,
+            };
+        }
+    }
+    return { ok: true };
+}
+function extractFieldValue(content, field) {
+    const re = new RegExp(`^\\s*${field}:\\s*(.*?)\\s*$`, "m");
+    const match = content.match(re);
+    if (!match || !match[1])
+        return "";
+    return match[1].replace(/^['"]|['"]$/g, "").trim();
+}
+//# sourceMappingURL=agent-starter-resolver.js.map

package/daemon/dist/domain/agent-starter-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-starter-resolver.js","sourceRoot":"","sources":["../../src/domain/agent-starter-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,MAAM,SAAS,CAAC;AA0DzB;;;;;GAKG;AACH,MAAM,OAAO,qCAAsC,SAAQ,KAAK;IACrD,WAAW,CAAS;IACpB,MAAM,CAAS;IACxB,YAAY,WAAmB,EAAE,MAAc;QAC7C,KAAK,CAAC,kBAAkB,WAAW,6BAA6B,MAAM,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,uCAAuC,CAAC;QACpD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,eAAe,GAAG,4BAA4B,CAAC;AACrD,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AACvD,MAAM,0BAA0B,GAC9B,6EAA6E,CAAC;AAEhF,MAAM,OAAO,oBAAoB;IACd,YAAY,CAAS;IACrB,MAAM,CAAW;IACjB,QAAQ,CAAa;IAEtC,YAAY,OAAiC,EAAE;QAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,YAAY,GAAG,oBAAoB,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClF,CAAC;IAED,uCAAuC;IACvC,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,mBAAmB,CACxB,IAA8B,EAC9B,MAAgB;QAEhB,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,eAAe,CAAC;QACtD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QAChC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAClD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW;eAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;IAC9D,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,cAAc,CAAC,IAAY;QACzB,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,wCAAwC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,kDAAkD,CAC/G,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,sDAAsD,YAAY,EAAE,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,0CAA0C,YAAY,KAAM,GAAa,CAAC,OAAO,EAAE,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,2BAA2B,YAAY,yBAAyB,CACjE,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,6BAA6B;QAC7B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,2BAA2B,YAAY,oEAAoE,CAC5G,CAAC;QACJ,CAAC;QAED,qEAAqE;QACrE,gEAAgE;QAChE,kEAAkE;QAClE,eAAe;QACf,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,qCAAqC,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3E,CAAC;QAED,gEAAgE;QAChE,kEAAkE;QAClE,qEAAqE;QACrE,oEAAoE;QACpE,sEAAsE;QACtE,kEAAkE;QAClE,iEAAiE;QACjE,MAAM,KAAK,GAA0B;YACnC;gBACE,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC;gBAC5B,YAAY,EAAE,YAAY;gBAC1B,SAAS,EAAE,IAAI,CAAC,YAAY;gBAC5B,YAAY,EAAE,gBAAgB;gBAC9B,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,CAAC,aAAa,CAAC;aAC3B;SACF,CAAC;QAEF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACjC,CAAC;CACF;AAED,0FAA0F;AAE1F,MAAM,kBAAkB,GAAG;IACzB,2BAA2B;IAC3B,kBAAkB;IAClB,kBAAkB;IAClB,OAAO;CACR,CAAC;AAEF,MAAM,YAAY,GAAG,mEAAmE,CAAC;AACzF,MAAM,cAAc,GAAG,8GAA8G,CAAC;AAEtI,SAAS,kBAAkB,CACzB,OAAe,EACf,QAAgB;IAEhB,4DAA4D;IAC5D,kEAAkE;IAClE,yEAAyE;IACzE,sCAAsC;IACtC,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAErE,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,IAAI,GAAG,OAAO,CAAC;QAErB,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,uBAAuB,GAAG,KAAK,CAAC;QACpC,IAAI,cAAc,IAAI,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9D,IACE,cAAc,CAAC,QAAQ,CAAC,oBAAoB,CAAC;mBAC1C,cAAc,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EACpD,CAAC;gBACD,uBAAuB,GAAG,IAAI,CAAC;YACjC,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,oEAAoE;QACpE,uCAAuC;QACvC,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,oCAAoC,MAAM,OAAO,QAAQ,iEAAiE;iBACnI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,IAAI,CAAC,uBAAuB,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,oCAAoC,MAAM,OAAO,QAAQ,qDAAqD;aACvH,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,uCAAuC,MAAM,OAAO,QAAQ,wDAAwD;aAC7H,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,KAAa;IACvD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,QAAQ,KAAK,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC"}

package/daemon/dist/domain/classifier-lease-manager.d.ts

@@ -0,0 +1,130 @@
+import type Database from "better-sqlite3";
+import type { EventBus } from "./event-bus.js";
+/**
+ * Classifier lease manager (PL-004 Phase B; L2 founder-resolved).
+ *
+ * Daemon-enforced single-writer lease for the project (classifier) primitive.
+ * Per PRD § L2 hard rule + slice IMPL § Guard Checkpoint Focus item 2:
+ *
+ * - Single-writer: at most one lease in `state='active'` at any time, enforced
+ *   via partial UNIQUE index `idx_classifier_leases_active_singleton`.
+ * - TTL-based expiry: every lease has an `expires_at` (acquired_at + ttlMs).
+ * - Heartbeat: `last_heartbeat` is updated by the lease holder. Stale heartbeat
+ *   past TTL signals deadness.
+ * - Deadness detection: caller of `evaluateDeadness` is the project verb path
+ *   OR a watchdog. The manager itself does NOT auto-reclaim — only marks
+ *   `expired` when heartbeat is stale.
+ * - Reclaim is OPERATOR-VERB ONLY: `rig project --reclaim-classifier
+ *   [--if-dead]`. Daemon does NOT auto-reclaim. The reclaim path takes the
+ *   active lease away from the previous holder and emits classifier.reclaimed.
+ *
+ * Pattern mirrors Phase A's hot-potato-enforcer.ts shape: pure validation +
+ * lifecycle methods, no Hono. Routes import this; this does not import routes.
+ */
+export declare const LEASE_STATES: readonly ["active", "expired", "reclaimed"];
+export type LeaseState = (typeof LEASE_STATES)[number];
+export interface ClassifierLease {
+    leaseId: string;
+    classifierSession: string;
+    acquiredAt: string;
+    expiresAt: string;
+    lastHeartbeat: string;
+    state: LeaseState;
+    reclaimedBySession: string | null;
+    reclaimReason: string | null;
+}
+export declare class ClassifierLeaseError extends Error {
+    readonly code: string;
+    readonly meta: Record<string, unknown> | undefined;
+    constructor(code: string, message: string, meta?: Record<string, unknown>);
+}
+export interface ClassifierLeaseManagerOptions {
+    ttlMs?: number;
+    /** For tests: inject a deterministic clock. Defaults to `() => new Date()`. */
+    now?: () => Date;
+    /**
+     * Liveness check (per PRD: via whoami-service / node-inventory). Returns
+     * true if the session is still alive. The lease-manager calls this when
+     * evaluating deadness; if the function returns false AND the lease's
+     * heartbeat is stale, the lease is marked expired.
+     *
+     * Defaults to `() => true` (no liveness check; tests can stub).
+     */
+    isAlive?: (classifierSession: string) => boolean;
+}
+export declare class ClassifierLeaseManager {
+    readonly db: Database.Database;
+    private readonly eventBus;
+    private readonly ttlMs;
+    private readonly now;
+    private isAlive;
+    constructor(db: Database.Database, eventBus: EventBus, opts?: ClassifierLeaseManagerOptions);
+    /**
+     * Wire post-construction liveness check (used by startup.ts when
+     * whoami-service is constructed later in the dep graph).
+     */
+    attachIsAlive(check: (classifierSession: string) => boolean): void;
+    /**
+     * Acquire the active lease for a classifier session. Fails with
+     * `lease_held` (409) if another session currently holds an active lease
+     * AND that session is alive. If the held lease is by a dead session, the
+     * caller should first invoke `evaluateDeadness` (which marks it expired)
+     * or use the operator reclaim path.
+     *
+     * Idempotent for the SAME classifier_session: re-calling acquire on the
+     * lease holder's behalf returns the existing lease unchanged (heartbeat
+     * is updated separately via `heartbeat`).
+     */
+    acquire(classifierSession: string): ClassifierLease;
+    /**
+     * Heartbeat from the lease holder. Updates `last_heartbeat` and extends
+     * `expires_at` by the TTL (sliding-window TTL semantics).
+     */
+    heartbeat(leaseId: string, classifierSession: string): ClassifierLease;
+    /**
+     * Evaluate deadness for the currently-active lease. If the lease's
+     * heartbeat is stale (now > expires_at) OR the holder is reported dead
+     * by `isAlive`, mark the lease expired and emit classifier.lease_expired
+     * + classifier.dead. Returns the (now-expired) lease, or null if no
+     * active lease exists or it remains alive.
+     *
+     * Called by: project verb path (before acquire, to clear dead leases),
+     * watchdog (periodic sweep), or operator-driven check.
+     *
+     * Per PRD: this method does NOT reclaim — it only marks expired. The
+     * next `acquire` call by ANY session can then succeed (since the partial
+     * UNIQUE on state='active' is now empty).
+     */
+    evaluateDeadness(): ClassifierLease | null;
+    /**
+     * Operator-verb reclaim. Per PRD § L2 hard rule: ONLY this path may take
+     * an active lease away from its holder. Daemon does NOT auto-reclaim.
+     *
+     * - If `ifDead`: only succeed when isAlive(holder) returns false. If the
+     *   holder is alive, refuse with `lease_still_active`.
+     * - If `!ifDead`: take the lease unconditionally.
+     *
+     * Marks the active lease state='reclaimed', records reclaimed_by_session
+     * + reclaim_reason, and emits classifier.reclaimed. The next acquire
+     * (by ANY session) can then succeed.
+     */
+    reclaim(byClassifierSession: string, opts?: {
+        ifDead?: boolean;
+        reason?: string;
+    }): ClassifierLease;
+    /**
+     * Validation hook used by project-classifier: returns the active lease
+     * iff the supplied session holds it, else throws. Centralizes the
+     * "must hold the lease to project" check.
+     */
+    requireActiveHolder(classifierSession: string): ClassifierLease;
+    getActiveLease(): ClassifierLease | null;
+    getById(leaseId: string): ClassifierLease | null;
+    list(opts?: {
+        classifierSession?: string;
+        limit?: number;
+    }): ClassifierLease[];
+    private getByIdOrThrow;
+    private rowToLease;
+}
+//# sourceMappingURL=classifier-lease-manager.d.ts.map

package/daemon/dist/domain/classifier-lease-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier-lease-manager.d.ts","sourceRoot":"","sources":["../../src/domain/classifier-lease-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG/C;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,eAAO,MAAM,YAAY,6CAA8C,CAAC;AACxE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,UAAU,CAAC;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAaD,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;gBACvC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAK1E;AAWD,MAAM,WAAW,6BAA6B;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,CAAC;CAClD;AAED,qBAAa,sBAAsB;IACjC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,OAAO,CAAyC;gBAGtD,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,QAAQ,EAAE,QAAQ,EAClB,IAAI,CAAC,EAAE,6BAA6B;IAStC;;;OAGG;IACH,aAAa,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,OAAO,GAAG,IAAI;IAIlE;;;;;;;;;;OAUG;IACH,OAAO,CAAC,iBAAiB,EAAE,MAAM,GAAG,eAAe;IA0CnD;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,eAAe;IAiCtE;;;;;;;;;;;;;OAaG;IACH,gBAAgB,IAAI,eAAe,GAAG,IAAI;IAuC1C;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,mBAAmB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe;IA4CnG;;;;OAIG;IACH,mBAAmB,CAAC,iBAAiB,EAAE,MAAM,GAAG,eAAe;IAwB/D,cAAc,IAAI,eAAe,GAAG,IAAI;IAOxC,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAOhD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe,EAAE;IAgB9E,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,UAAU;CAYnB"}

package/daemon/dist/domain/classifier-lease-manager.js

@@ -0,0 +1,285 @@
+import { ulid } from "ulid";
+/**
+ * Classifier lease manager (PL-004 Phase B; L2 founder-resolved).
+ *
+ * Daemon-enforced single-writer lease for the project (classifier) primitive.
+ * Per PRD § L2 hard rule + slice IMPL § Guard Checkpoint Focus item 2:
+ *
+ * - Single-writer: at most one lease in `state='active'` at any time, enforced
+ *   via partial UNIQUE index `idx_classifier_leases_active_singleton`.
+ * - TTL-based expiry: every lease has an `expires_at` (acquired_at + ttlMs).
+ * - Heartbeat: `last_heartbeat` is updated by the lease holder. Stale heartbeat
+ *   past TTL signals deadness.
+ * - Deadness detection: caller of `evaluateDeadness` is the project verb path
+ *   OR a watchdog. The manager itself does NOT auto-reclaim — only marks
+ *   `expired` when heartbeat is stale.
+ * - Reclaim is OPERATOR-VERB ONLY: `rig project --reclaim-classifier
+ *   [--if-dead]`. Daemon does NOT auto-reclaim. The reclaim path takes the
+ *   active lease away from the previous holder and emits classifier.reclaimed.
+ *
+ * Pattern mirrors Phase A's hot-potato-enforcer.ts shape: pure validation +
+ * lifecycle methods, no Hono. Routes import this; this does not import routes.
+ */
+export const LEASE_STATES = ["active", "expired", "reclaimed"];
+export class ClassifierLeaseError extends Error {
+    code;
+    meta;
+    constructor(code, message, meta) {
+        super(message);
+        this.code = code;
+        this.meta = meta;
+    }
+}
+/**
+ * Default lease TTL: 15 minutes. Per PRD: "TTL-based"; concrete value is
+ * implementation choice. 15 min is the operator-friendly midpoint between
+ * stale-detection latency (longer = slower deadness signal) and unnecessary
+ * heartbeat traffic (shorter = more wake-ups). Configurable via constructor
+ * option for tests + future tuning.
+ */
+const DEFAULT_LEASE_TTL_MS = 15 * 60 * 1000;
+export class ClassifierLeaseManager {
+    db;
+    eventBus;
+    ttlMs;
+    now;
+    isAlive;
+    constructor(db, eventBus, opts) {
+        this.db = db;
+        this.eventBus = eventBus;
+        this.ttlMs = opts?.ttlMs ?? DEFAULT_LEASE_TTL_MS;
+        this.now = opts?.now ?? (() => new Date());
+        this.isAlive = opts?.isAlive ?? (() => true);
+    }
+    /**
+     * Wire post-construction liveness check (used by startup.ts when
+     * whoami-service is constructed later in the dep graph).
+     */
+    attachIsAlive(check) {
+        this.isAlive = check;
+    }
+    /**
+     * Acquire the active lease for a classifier session. Fails with
+     * `lease_held` (409) if another session currently holds an active lease
+     * AND that session is alive. If the held lease is by a dead session, the
+     * caller should first invoke `evaluateDeadness` (which marks it expired)
+     * or use the operator reclaim path.
+     *
+     * Idempotent for the SAME classifier_session: re-calling acquire on the
+     * lease holder's behalf returns the existing lease unchanged (heartbeat
+     * is updated separately via `heartbeat`).
+     */
+    acquire(classifierSession) {
+        const active = this.getActiveLease();
+        if (active) {
+            if (active.classifierSession === classifierSession) {
+                // Idempotent re-acquire by current holder.
+                return active;
+            }
+            throw new ClassifierLeaseError("lease_held", `classifier lease is held by ${active.classifierSession} until ${active.expiresAt}; reclaim via 'rig project --reclaim-classifier' if needed`, { holder: active.classifierSession, expiresAt: active.expiresAt });
+        }
+        const leaseId = ulid();
+        const acquiredAt = this.now().toISOString();
+        const expiresAt = new Date(this.now().getTime() + this.ttlMs).toISOString();
+        const txn = this.db.transaction(() => {
+            this.db
+                .prepare(`INSERT INTO classifier_leases (
+            lease_id, classifier_session, acquired_at, expires_at,
+            last_heartbeat, state
+          ) VALUES (?, ?, ?, ?, ?, 'active')`)
+                .run(leaseId, classifierSession, acquiredAt, expiresAt, acquiredAt);
+            return this.eventBus.persistWithinTransaction({
+                type: "classifier.lease_acquired",
+                leaseId,
+                classifierSession,
+                acquiredAt,
+                expiresAt,
+            });
+        });
+        const persisted = txn();
+        this.eventBus.notifySubscribers(persisted);
+        return this.getByIdOrThrow(leaseId);
+    }
+    /**
+     * Heartbeat from the lease holder. Updates `last_heartbeat` and extends
+     * `expires_at` by the TTL (sliding-window TTL semantics).
+     */
+    heartbeat(leaseId, classifierSession) {
+        const lease = this.getById(leaseId);
+        if (!lease) {
+            throw new ClassifierLeaseError("lease_not_found", `lease ${leaseId} not found`);
+        }
+        if (lease.classifierSession !== classifierSession) {
+            throw new ClassifierLeaseError("lease_session_mismatch", `lease ${leaseId} is held by ${lease.classifierSession}, not ${classifierSession}`);
+        }
+        if (lease.state !== "active") {
+            throw new ClassifierLeaseError("lease_not_active", `lease ${leaseId} is in state ${lease.state}; cannot heartbeat`);
+        }
+        const now = this.now();
+        const lastHeartbeat = now.toISOString();
+        const expiresAt = new Date(now.getTime() + this.ttlMs).toISOString();
+        this.db
+            .prepare(`UPDATE classifier_leases
+           SET last_heartbeat = ?, expires_at = ?
+         WHERE lease_id = ?`)
+            .run(lastHeartbeat, expiresAt, leaseId);
+        return this.getByIdOrThrow(leaseId);
+    }
+    /**
+     * Evaluate deadness for the currently-active lease. If the lease's
+     * heartbeat is stale (now > expires_at) OR the holder is reported dead
+     * by `isAlive`, mark the lease expired and emit classifier.lease_expired
+     * + classifier.dead. Returns the (now-expired) lease, or null if no
+     * active lease exists or it remains alive.
+     *
+     * Called by: project verb path (before acquire, to clear dead leases),
+     * watchdog (periodic sweep), or operator-driven check.
+     *
+     * Per PRD: this method does NOT reclaim — it only marks expired. The
+     * next `acquire` call by ANY session can then succeed (since the partial
+     * UNIQUE on state='active' is now empty).
+     */
+    evaluateDeadness() {
+        const active = this.getActiveLease();
+        if (!active)
+            return null;
+        const nowIso = this.now().toISOString();
+        const ttlPassed = nowIso > active.expiresAt;
+        const sessionDead = !this.isAlive(active.classifierSession);
+        if (!ttlPassed && !sessionDead)
+            return null;
+        const events = [];
+        const txn = this.db.transaction(() => {
+            this.db
+                .prepare(`UPDATE classifier_leases SET state = 'expired' WHERE lease_id = ? AND state = 'active'`)
+                .run(active.leaseId);
+            events.push(this.eventBus.persistWithinTransaction({
+                type: "classifier.lease_expired",
+                leaseId: active.leaseId,
+                classifierSession: active.classifierSession,
+                expiredAt: nowIso,
+            }));
+            if (sessionDead) {
+                events.push(this.eventBus.persistWithinTransaction({
+                    type: "classifier.dead",
+                    leaseId: active.leaseId,
+                    classifierSession: active.classifierSession,
+                    lastHeartbeat: active.lastHeartbeat,
+                    detectedAt: nowIso,
+                }));
+            }
+        });
+        txn();
+        for (const e of events)
+            this.eventBus.notifySubscribers(e);
+        return this.getByIdOrThrow(active.leaseId);
+    }
+    /**
+     * Operator-verb reclaim. Per PRD § L2 hard rule: ONLY this path may take
+     * an active lease away from its holder. Daemon does NOT auto-reclaim.
+     *
+     * - If `ifDead`: only succeed when isAlive(holder) returns false. If the
+     *   holder is alive, refuse with `lease_still_active`.
+     * - If `!ifDead`: take the lease unconditionally.
+     *
+     * Marks the active lease state='reclaimed', records reclaimed_by_session
+     * + reclaim_reason, and emits classifier.reclaimed. The next acquire
+     * (by ANY session) can then succeed.
+     */
+    reclaim(byClassifierSession, opts) {
+        const active = this.getActiveLease();
+        if (!active) {
+            throw new ClassifierLeaseError("no_active_lease", "no active classifier lease to reclaim");
+        }
+        if (opts?.ifDead === true && this.isAlive(active.classifierSession)) {
+            throw new ClassifierLeaseError("lease_still_active", `classifier lease holder ${active.classifierSession} is still alive; --if-dead refuses to reclaim`, { holder: active.classifierSession });
+        }
+        const reason = opts?.reason ?? (opts?.ifDead ? "operator-reclaim --if-dead" : "operator-reclaim");
+        const reclaimedAt = this.now().toISOString();
+        const txn = this.db.transaction(() => {
+            this.db
+                .prepare(`UPDATE classifier_leases
+             SET state = 'reclaimed',
+                 reclaimed_by_session = ?,
+                 reclaim_reason = ?
+           WHERE lease_id = ? AND state = 'active'`)
+                .run(byClassifierSession, reason, active.leaseId);
+            return this.eventBus.persistWithinTransaction({
+                type: "classifier.reclaimed",
+                leaseId: active.leaseId,
+                previousClassifierSession: active.classifierSession,
+                reclaimedBySession: byClassifierSession,
+                reason,
+                reclaimedAt,
+            });
+        });
+        const persisted = txn();
+        this.eventBus.notifySubscribers(persisted);
+        return this.getByIdOrThrow(active.leaseId);
+    }
+    /**
+     * Validation hook used by project-classifier: returns the active lease
+     * iff the supplied session holds it, else throws. Centralizes the
+     * "must hold the lease to project" check.
+     */
+    requireActiveHolder(classifierSession) {
+        const active = this.getActiveLease();
+        if (!active) {
+            throw new ClassifierLeaseError("no_active_lease", "no active classifier lease; call acquire first");
+        }
+        if (active.classifierSession !== classifierSession) {
+            throw new ClassifierLeaseError("lease_held", `classifier lease is held by ${active.classifierSession}, not ${classifierSession}`, { holder: active.classifierSession });
+        }
+        if (active.expiresAt < this.now().toISOString()) {
+            throw new ClassifierLeaseError("lease_expired", `classifier lease for ${classifierSession} expired at ${active.expiresAt}`);
+        }
+        return active;
+    }
+    getActiveLease() {
+        const row = this.db
+            .prepare(`SELECT * FROM classifier_leases WHERE state = 'active' LIMIT 1`)
+            .get();
+        return row ? this.rowToLease(row) : null;
+    }
+    getById(leaseId) {
+        const row = this.db
+            .prepare(`SELECT * FROM classifier_leases WHERE lease_id = ?`)
+            .get(leaseId);
+        return row ? this.rowToLease(row) : null;
+    }
+    list(opts) {
+        const limit = opts?.limit ?? 100;
+        const conditions = [];
+        const params = [];
+        if (opts?.classifierSession) {
+            conditions.push("classifier_session = ?");
+            params.push(opts.classifierSession);
+        }
+        const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+        params.push(limit);
+        const rows = this.db
+            .prepare(`SELECT * FROM classifier_leases ${where} ORDER BY acquired_at DESC LIMIT ?`)
+            .all(...params);
+        return rows.map((r) => this.rowToLease(r));
+    }
+    getByIdOrThrow(leaseId) {
+        const lease = this.getById(leaseId);
+        if (!lease) {
+            throw new ClassifierLeaseError("lease_not_found", `lease ${leaseId} not found after write`);
+        }
+        return lease;
+    }
+    rowToLease(row) {
+        return {
+            leaseId: row.lease_id,
+            classifierSession: row.classifier_session,
+            acquiredAt: row.acquired_at,
+            expiresAt: row.expires_at,
+            lastHeartbeat: row.last_heartbeat,
+            state: row.state,
+            reclaimedBySession: row.reclaimed_by_session,
+            reclaimReason: row.reclaim_reason,
+        };
+    }
+}
+//# sourceMappingURL=classifier-lease-manager.js.map

package/daemon/dist/domain/classifier-lease-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifier-lease-manager.js","sourceRoot":"","sources":["../../src/domain/classifier-lease-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;AAyBxE,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,CAAS;IACb,IAAI,CAAsC;IACnD,YAAY,IAAY,EAAE,OAAe,EAAE,IAA8B;QACvE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAiB5C,MAAM,OAAO,sBAAsB;IACxB,EAAE,CAAoB;IACd,QAAQ,CAAW;IACnB,KAAK,CAAS;IACd,GAAG,CAAa;IACzB,OAAO,CAAyC;IAExD,YACE,EAAqB,EACrB,QAAkB,EAClB,IAAoC;QAEpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,oBAAoB,CAAC;QACjD,IAAI,CAAC,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,KAA6C;QACzD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,iBAAyB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;gBACnD,2CAA2C;gBAC3C,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,oBAAoB,CAC5B,YAAY,EACZ,+BAA+B,MAAM,CAAC,iBAAiB,UAAU,MAAM,CAAC,SAAS,4DAA4D,EAC7I,EAAE,MAAM,EAAE,MAAM,CAAC,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAE5E,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;;6CAGmC,CACpC;iBACA,GAAG,CAAC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAEtE,OAAO,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBAC5C,IAAI,EAAE,2BAA2B;gBACjC,OAAO;gBACP,iBAAiB;gBACjB,UAAU;gBACV,SAAS;aACV,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,OAAe,EAAE,iBAAyB;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,SAAS,OAAO,YAAY,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;YAClD,MAAM,IAAI,oBAAoB,CAC5B,wBAAwB,EACxB,SAAS,OAAO,eAAe,KAAK,CAAC,iBAAiB,SAAS,iBAAiB,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,oBAAoB,CAC5B,kBAAkB,EAClB,SAAS,OAAO,gBAAgB,KAAK,CAAC,KAAK,oBAAoB,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,aAAa,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAErE,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;4BAEoB,CACrB;aACA,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAE1C,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,gBAAgB;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC;QAC5C,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAE5C,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN,wFAAwF,CACzF;iBACA,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAEvB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBACjD,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,SAAS,EAAE,MAAM;aAClB,CAAC,CAAC,CAAC;YAEJ,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;oBACjD,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;oBAC3C,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,UAAU,EAAE,MAAM;iBACnB,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,GAAG,EAAE,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,mBAA2B,EAAE,IAA4C;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,oBAAoB,CAC5B,iBAAiB,EACjB,uCAAuC,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,EAAE,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,2BAA2B,MAAM,CAAC,iBAAiB,+CAA+C,EAClG,EAAE,MAAM,EAAE,MAAM,CAAC,iBAAiB,EAAE,CACrC,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAClG,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAE7C,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;;;mDAIyC,CAC1C;iBACA,GAAG,CAAC,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAEpD,OAAO,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBAC5C,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,yBAAyB,EAAE,MAAM,CAAC,iBAAiB;gBACnD,kBAAkB,EAAE,mBAAmB;gBACvC,MAAM;gBACN,WAAW;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CAAC,iBAAyB;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,oBAAoB,CAC5B,iBAAiB,EACjB,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,iBAAiB,EAAE,CAAC;YACnD,MAAM,IAAI,oBAAoB,CAC5B,YAAY,EACZ,+BAA+B,MAAM,CAAC,iBAAiB,SAAS,iBAAiB,EAAE,EACnF,EAAE,MAAM,EAAE,MAAM,CAAC,iBAAiB,EAAE,CACrC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,oBAAoB,CAC5B,eAAe,EACf,wBAAwB,iBAAiB,eAAe,MAAM,CAAC,SAAS,EAAE,CAC3E,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,gEAAgE,CAAC;aACzE,GAAG,EAAoC,CAAC;QAC3C,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,oDAAoD,CAAC;aAC7D,GAAG,CAAC,OAAO,CAAmC,CAAC;QAClD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC,IAAqD;QACxD,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC;QACjC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,IAAI,IAAI,EAAE,iBAAiB,EAAE,CAAC;YAC5B,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CAAC,mCAAmC,KAAK,oCAAoC,CAAC;aACrF,GAAG,CAAC,GAAG,MAAM,CAAyB,CAAC;QAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAEO,cAAc,CAAC,OAAe;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,SAAS,OAAO,wBAAwB,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,UAAU,CAAC,GAAuB;QACxC,OAAO;YACL,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,iBAAiB,EAAE,GAAG,CAAC,kBAAkB;YACzC,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,KAAK,EAAE,GAAG,CAAC,KAAmB;YAC9B,kBAAkB,EAAE,GAAG,CAAC,oBAAoB;YAC5C,aAAa,EAAE,GAAG,CAAC,cAAc;SAClC,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/domain/context-usage-store.d.ts

@@ -1,7 +1,7 @@
 import type Database from "better-sqlite3";
 import type { ContextUsage, ContextUnknownReason } from "./types.js";
 /** Freshness threshold: samples older than this are considered stale for compact displays. */
-export declare const FRESHNESS_THRESHOLD_MS = 120000;
+export declare const FRESHNESS_THRESHOLD_MS = 600000;
 export interface ContextUsageStoreOpts {
     stateDir: string;
 }