@openrig/cli 0.1.12 → 0.3.0

package/daemon/dist/routes/files.js

@@ -0,0 +1,262 @@
+// UI Enhancement Pack v0 + Operator Surface Reconciliation v0 — file browser routes.
+//
+// Endpoints (item 3 + item 4):
+//   GET  /api/files/roots                          allowlist root list
+//   GET  /api/files/list?root=<name>&path=<rel>    directory entries
+//   GET  /api/files/read?root=<name>&path=<rel>    file content + metadata
+//   GET  /api/files/asset?root=<name>&path=<rel>   raw bytes for embedded images
+//   POST /api/files/write                          atomic write (item 4)
+//
+// Operator Surface Reconciliation v0 item 5: GET /read caps returned
+// content at FILE_READ_TRUNCATION_BYTES (1 MB; PRD § Item 5;
+// dashboard precedent). Response includes `truncated`, `truncatedAtBytes`,
+// `totalBytes` so the UI can render a truncation marker. The hash is
+// still computed over the FULL file content so atomic-write conflict
+// detection stays honest even when the read was truncated.
+//
+// Route-order discipline (per Phase A R1 SSE lesson): all routes are
+// literal — no `/:param` catchalls — so order doesn't matter for
+// shadowing. Kept sequential for readability.
+import { Hono } from "hono";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { resolveAllowedDirectory, resolveAllowedFile, resolveAllowedPath, FilePathSafetyError, } from "../domain/files/path-safety.js";
+import { WriteConflictError, FileWriteError, sha256Hex, } from "../domain/files/file-write-service.js";
+/** Operator Surface Reconciliation v0 item 5: file-read truncation
+ *  cap. PRD § Item 5 picks 1 MB. The dashboard
+ *  precedent was 200 KB; the v0 ceiling is 1 MB so the operator can
+ *  read most workspace canon files in full. */
+export const FILE_READ_TRUNCATION_BYTES = 1_048_576;
+export function filesRoutes() {
+    const app = new Hono();
+    function getDeps(c) {
+        const allowlist = c.get("filesAllowlist");
+        const writeService = c.get("fileWriteService");
+        if (!allowlist)
+            return null;
+        return { allowlist, writeService: writeService ?? null };
+    }
+    function pathSafetyErrorResponse(c, err) {
+        const status = err.code === "root_unknown" ? 400
+            : err.code === "path_invalid" || err.code === "path_escape" ? 400
+                : err.code === "stat_failed" ? 404
+                    : err.code === "not_a_file" || err.code === "not_a_directory" ? 400
+                        : 500;
+        return c.json({ error: err.code, message: err.message, ...(err.details ?? {}) }, status);
+    }
+    app.get("/roots", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "files_routes_unavailable" }, 503);
+        if (deps.allowlist.length === 0) {
+            return c.json({
+                roots: [],
+                hint: "No allowlist roots configured. Set OPENRIG_FILES_ALLOWLIST=name1:/abs/path,name2:/abs/path and restart the daemon.",
+            });
+        }
+        return c.json({
+            roots: deps.allowlist.map((r) => ({ name: r.name, path: r.canonicalPath })),
+        });
+    });
+    app.get("/list", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "files_routes_unavailable" }, 503);
+        const rootName = c.req.query("root") ?? "";
+        const relativePath = c.req.query("path") ?? "";
+        if (!rootName)
+            return c.json({ error: "root_required" }, 400);
+        try {
+            const resolved = resolveAllowedDirectory(deps.allowlist, rootName, relativePath);
+            const entries = fs.readdirSync(resolved, { withFileTypes: true });
+            return c.json({
+                root: rootName,
+                path: relativePath,
+                entries: entries
+                    .map((entry) => {
+                    // Skip dotfiles by default unless they're inside an
+                    // allowlisted root that's a dot-directory itself (e.g.,
+                    // operator allowlists ~/.openrig — the operator clearly
+                    // wants to inspect dotfiles in that case). Implementation:
+                    // include dotfiles always at v0; the operator has already
+                    // expressed inspection intent by allowlisting the root.
+                    const fullPath = path.join(resolved, entry.name);
+                    let stat = null;
+                    try {
+                        stat = fs.statSync(fullPath);
+                    }
+                    catch { /* skip stat-failed */ }
+                    return {
+                        name: entry.name,
+                        type: entry.isDirectory() ? "dir" : entry.isFile() ? "file" : "other",
+                        size: stat?.isFile() ? stat.size : null,
+                        mtime: stat ? stat.mtime.toISOString() : null,
+                    };
+                })
+                    .sort((a, b) => {
+                    if (a.type !== b.type)
+                        return a.type === "dir" ? -1 : 1;
+                    return a.name.localeCompare(b.name);
+                }),
+            });
+        }
+        catch (err) {
+            if (err instanceof FilePathSafetyError)
+                return pathSafetyErrorResponse(c, err);
+            return c.json({ error: "list_failed", message: err instanceof Error ? err.message : String(err) }, 500);
+        }
+    });
+    app.get("/read", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "files_routes_unavailable" }, 503);
+        const rootName = c.req.query("root") ?? "";
+        const relativePath = c.req.query("path") ?? "";
+        if (!rootName || !relativePath)
+            return c.json({ error: "root_and_path_required" }, 400);
+        try {
+            const resolved = resolveAllowedFile(deps.allowlist, rootName, relativePath);
+            const stat = fs.statSync(resolved);
+            const fullContent = fs.readFileSync(resolved);
+            // Operator Surface Reconciliation v0 item 5: cap returned content
+            // at FILE_READ_TRUNCATION_BYTES (1 MB). Hash is over the FULL
+            // file so edit-mode conflict detection stays honest.
+            const truncated = stat.size > FILE_READ_TRUNCATION_BYTES;
+            const returnedContent = truncated
+                ? fullContent.subarray(0, FILE_READ_TRUNCATION_BYTES)
+                : fullContent;
+            return c.json({
+                root: rootName,
+                path: relativePath,
+                absolutePath: resolved,
+                content: returnedContent.toString("utf-8"),
+                mtime: stat.mtime.toISOString(),
+                contentHash: sha256Hex(fullContent),
+                size: stat.size,
+                truncated,
+                truncatedAtBytes: truncated ? FILE_READ_TRUNCATION_BYTES : null,
+                totalBytes: stat.size,
+            });
+        }
+        catch (err) {
+            if (err instanceof FilePathSafetyError)
+                return pathSafetyErrorResponse(c, err);
+            return c.json({ error: "read_failed", message: err instanceof Error ? err.message : String(err) }, 500);
+        }
+    });
+    app.get("/asset", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "files_routes_unavailable" }, 503);
+        const rootName = c.req.query("root") ?? "";
+        const relativePath = c.req.query("path") ?? "";
+        if (!rootName || !relativePath)
+            return c.json({ error: "root_and_path_required" }, 400);
+        try {
+            const resolved = resolveAllowedFile(deps.allowlist, rootName, relativePath);
+            const data = fs.readFileSync(resolved);
+            const contentType = inferContentType(resolved);
+            return new Response(new Uint8Array(data), {
+                status: 200,
+                headers: {
+                    "Content-Type": contentType,
+                    "Cache-Control": "public, max-age=300",
+                },
+            });
+        }
+        catch (err) {
+            if (err instanceof FilePathSafetyError)
+                return pathSafetyErrorResponse(c, err);
+            return c.json({ error: "asset_failed", message: err instanceof Error ? err.message : String(err) }, 500);
+        }
+    });
+    app.post("/write", async (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "files_routes_unavailable" }, 503);
+        if (!deps.writeService) {
+            return c.json({
+                error: "file_write_service_unavailable",
+                hint: "OPENRIG_FILES_ALLOWLIST is empty or unset; configure at least one root and restart.",
+            }, 503);
+        }
+        const body = await c.req.json().catch(() => ({}));
+        if (!body.root)
+            return c.json({ error: "root_required" }, 400);
+        if (!body.path)
+            return c.json({ error: "path_required" }, 400);
+        if (typeof body.content !== "string")
+            return c.json({ error: "content_required" }, 400);
+        if (!body.expectedMtime)
+            return c.json({ error: "expectedMtime_required" }, 400);
+        if (!body.expectedContentHash)
+            return c.json({ error: "expectedContentHash_required" }, 400);
+        if (!body.actor)
+            return c.json({ error: "actor_required" }, 400);
+        try {
+            const result = deps.writeService.writeAtomic({
+                rootName: body.root,
+                path: body.path,
+                content: body.content,
+                expectedMtime: body.expectedMtime,
+                expectedContentHash: body.expectedContentHash,
+                actor: body.actor,
+            });
+            return c.json({
+                root: body.root,
+                path: body.path,
+                absolutePath: result.absolutePath,
+                newMtime: result.newMtime,
+                newContentHash: result.newContentHash,
+                byteCountDelta: result.byteCountDelta,
+            });
+        }
+        catch (err) {
+            if (err instanceof WriteConflictError) {
+                return c.json({
+                    error: "write_conflict",
+                    message: err.message,
+                    currentMtime: err.currentMtime,
+                    currentContentHash: err.currentContentHash,
+                }, 409);
+            }
+            if (err instanceof FilePathSafetyError)
+                return pathSafetyErrorResponse(c, err);
+            if (err instanceof FileWriteError) {
+                return c.json({ error: err.code, message: err.message, ...(err.details ?? {}) }, 500);
+            }
+            return c.json({ error: "write_failed", message: err instanceof Error ? err.message : String(err) }, 500);
+        }
+    });
+    return app;
+}
+function inferContentType(absPath) {
+    const ext = path.extname(absPath).toLowerCase();
+    switch (ext) {
+        case ".png": return "image/png";
+        case ".jpg":
+        case ".jpeg": return "image/jpeg";
+        case ".gif": return "image/gif";
+        case ".webp": return "image/webp";
+        case ".svg": return "image/svg+xml";
+        case ".mp4": return "video/mp4";
+        case ".webm": return "video/webm";
+        case ".pdf": return "application/pdf";
+        case ".md":
+        case ".txt":
+        case ".log": return "text/plain; charset=utf-8";
+        case ".json": return "application/json; charset=utf-8";
+        case ".yaml":
+        case ".yml": return "text/yaml; charset=utf-8";
+        case ".js":
+        case ".ts":
+        case ".tsx":
+        case ".jsx":
+        case ".css":
+        case ".html": return "text/plain; charset=utf-8";
+        default: return "application/octet-stream";
+    }
+}
+// Re-export for the route-order discipline test in workflow-routes.
+export { resolveAllowedPath };
+//# sourceMappingURL=files.js.map

package/daemon/dist/routes/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,EAAE;AACF,+BAA+B;AAC/B,uEAAuE;AACvE,qEAAqE;AACrE,2EAA2E;AAC3E,iFAAiF;AACjF,yEAAyE;AACzE,EAAE;AACF,qEAAqE;AACrE,6DAA6D;AAC7D,2EAA2E;AAC3E,qEAAqE;AACrE,qEAAqE;AACrE,2DAA2D;AAC3D,EAAE;AACF,qEAAqE;AACrE,iEAAiE;AACjE,8CAA8C;AAE9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,SAAS,GAEV,MAAM,uCAAuC,CAAC;AAS/C;;;+CAG+C;AAC/C,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAS,CAAC;AAEpD,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,SAAS,OAAO,CAAC,CAAoC;QACnD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAyB,CAAgC,CAAC;QAClF,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,kBAA2B,CAAwC,CAAC;QAC/F,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,IAAI,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,SAAS,uBAAuB,CAAC,CAAyD,EAAE,GAAwB;QAClH,MAAM,MAAM,GACV,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG;YACjC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG;gBACjE,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG;oBAClC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,GAAG;wBACnE,CAAC,CAAC,GAAG,CAAC;QACR,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,MAAa,CAAC,CAAC;IAClG,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,oHAAoH;aAC3H,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YACjF,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,OAAO;qBACb,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;oBACb,oDAAoD;oBACpD,wDAAwD;oBACxD,wDAAwD;oBACxD,2DAA2D;oBAC3D,0DAA0D;oBAC1D,wDAAwD;oBACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjD,IAAI,IAAI,GAAoB,IAAI,CAAC;oBACjC,IAAI,CAAC;wBAAC,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;oBACtE,OAAO;wBACL,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,OAAgB;wBAChG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;wBACvC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;qBAC9C,CAAC;gBACJ,CAAC,CAAC;qBACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBACb,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;wBAAE,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACxD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtC,CAAC,CAAC;aACL,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB;gBAAE,OAAO,uBAAuB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC9C,kEAAkE;YAClE,8DAA8D;YAC9D,qDAAqD;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;YACzD,MAAM,eAAe,GAAG,SAAS;gBAC/B,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,0BAA0B,CAAC;gBACrD,CAAC,CAAC,WAAW,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,YAAY;gBAClB,YAAY,EAAE,QAAQ;gBACtB,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC1C,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAC/B,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC;gBACnC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS;gBACT,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI;gBAC/D,UAAU,EAAE,IAAI,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB;gBAAE,OAAO,uBAAuB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,WAAW,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE;gBACxC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,cAAc,EAAE,WAAW;oBAC3B,eAAe,EAAE,qBAAqB;iBACvC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB;gBAAE,OAAO,uBAAuB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,gCAAgC;gBACvC,IAAI,EAAE,qFAAqF;aAC5F,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAOzB,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAY,CAAA,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,mBAAmB;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7F,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC;gBAC3C,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;gBAC7C,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;gBACtC,OAAO,CAAC,CAAC,IAAI,CAAC;oBACZ,KAAK,EAAE,gBAAgB;oBACvB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,YAAY,EAAE,GAAG,CAAC,YAAY;oBAC9B,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;iBAC3C,EAAE,GAAG,CAAC,CAAC;YACV,CAAC;YACD,IAAI,GAAG,YAAY,mBAAmB;gBAAE,OAAO,uBAAuB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,IAAI,GAAG,YAAY,cAAc,EAAE,CAAC;gBAClC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC;QAChC,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC;QAClC,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC;QAChC,KAAK,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC;QAClC,KAAK,MAAM,CAAC,CAAC,OAAO,eAAe,CAAC;QACpC,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC;QAChC,KAAK,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC;QAClC,KAAK,MAAM,CAAC,CAAC,OAAO,iBAAiB,CAAC;QACtC,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,OAAO,2BAA2B,CAAC;QAChD,KAAK,OAAO,CAAC,CAAC,OAAO,iCAAiC,CAAC;QACvD,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC,CAAC,OAAO,0BAA0B,CAAC;QAC/C,KAAK,KAAK,CAAC;QACX,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,OAAO,2BAA2B,CAAC;QACjD,OAAO,CAAC,CAAC,OAAO,0BAA0B,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/daemon/dist/routes/health-summary.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import type Database from "better-sqlite3";
+import type { RigRepository } from "../domain/rig-repository.js";
+export interface HealthSummaryRoutesDeps {
+    db: Database.Database;
+    rigRepo: RigRepository;
+}
+export declare function healthSummaryRoutes(): Hono;
+//# sourceMappingURL=health-summary.d.ts.map

package/daemon/dist/routes/health-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-summary.d.ts","sourceRoot":"","sources":["../../src/routes/health-summary.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAMjE,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAsB1C"}

package/daemon/dist/routes/health-summary.js

@@ -0,0 +1,33 @@
+// Operator Surface Reconciliation v0 — compact health-summary routes.
+//
+// Endpoints (item 1F):
+//   GET /api/health-summary/nodes    cross-rig roll-up of node sessionStatus + lifecycle
+//   GET /api/health-summary/context  cross-rig roll-up of context-usage urgency + freshness
+//
+// Both wrap existing daemon-side aggregation helpers; the steering
+// surface's compact gates consume them.
+import { Hono } from "hono";
+import { computeContextHealthSummary, computeNodeHealthSummary, } from "../domain/steering/health-summary.js";
+export function healthSummaryRoutes() {
+    const app = new Hono();
+    function getDeps(c) {
+        const rigRepo = c.get("rigRepo");
+        if (!rigRepo)
+            return null;
+        return { db: rigRepo.db, rigRepo };
+    }
+    app.get("/nodes", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "health_summary_unavailable" }, 503);
+        return c.json(computeNodeHealthSummary(deps));
+    });
+    app.get("/context", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "health_summary_unavailable" }, 503);
+        return c.json(computeContextHealthSummary({ db: deps.db }));
+    });
+    return app;
+}
+//# sourceMappingURL=health-summary.js.map

package/daemon/dist/routes/health-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health-summary.js","sourceRoot":"","sources":["../../src/routes/health-summary.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,uBAAuB;AACvB,yFAAyF;AACzF,4FAA4F;AAC5F,EAAE;AACF,mEAAmE;AACnE,wCAAwC;AAExC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,EACL,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAO9C,MAAM,UAAU,mBAAmB;IACjC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,SAAS,OAAO,CAAC,CAAoC;QACnD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAkB,CAA8B,CAAC;QACvE,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;IACrC,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/daemon/dist/routes/mission-control.d.ts

@@ -0,0 +1,37 @@
+import { Hono } from "hono";
+/**
+ * Mission Control HTTP routes (PL-005 Phase A). Backs the integrated
+ * Mission Control product UI inside the existing shell.
+ *
+ * Per Phase A R1 (PL-004) SSE route-order lesson: SSE/literal paths
+ * mounted BEFORE bare-param /:view-name catchall.
+ *
+ * Endpoints:
+ *   GET  /api/mission-control/views/:view-name   read one of 7 views
+ *   POST /api/mission-control/action              execute one of 7 verbs
+ *   GET  /api/mission-control/sse                 SSE stream of mission_control.* events
+ *   GET  /api/mission-control/watch               alias of /sse
+ *   GET  /api/mission-control/cli-capabilities    per-rig CLI capability cache
+ *   GET  /api/mission-control/destinations         handoff/route destination candidates
+ *   GET  /api/mission-control/views               list view names
+ */
+export interface MissionControlRoutesOpts {
+    /**
+     * PL-005 Phase B: bearer token enforced on write verbs (POST /action,
+     * POST /notifications/test) when set. When null, the daemon is
+     * loopback-bound and no auth is enforced (the index.ts startup
+     * check guarantees this).
+     */
+    bearerToken?: string | null;
+}
+export interface MissionControlDestination {
+    sessionName: string;
+    label: string;
+    source: "topology" | "queue";
+    rigName?: string | null;
+    logicalId?: string | null;
+    runtime?: string | null;
+    status?: string | null;
+}
+export declare function missionControlRoutes(opts?: MissionControlRoutesOpts): Hono;
+//# sourceMappingURL=mission-control.d.ts.map

package/daemon/dist/routes/mission-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-control.d.ts","sourceRoot":"","sources":["../../src/routes/mission-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAuB5B;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAgV1E"}

package/daemon/dist/routes/mission-control.js

@@ -0,0 +1,283 @@
+import { Hono } from "hono";
+import { streamSSE } from "hono/streaming";
+import { authBearerTokenMiddleware } from "../middleware/auth-bearer-token.js";
+import { MissionControlActionLogError, MISSION_CONTROL_VERBS, } from "../domain/mission-control/mission-control-action-log.js";
+import { MISSION_CONTROL_VIEWS, } from "../domain/mission-control/mission-control-read-layer.js";
+import { MissionControlWriteContractError, } from "../domain/mission-control/mission-control-write-contract.js";
+export function missionControlRoutes(opts) {
+    const app = new Hono();
+    const bearerToken = opts?.bearerToken ?? null;
+    // PL-005 Phase B: bearer-token middleware mounted on write verbs.
+    // Reads remain open behind tailnet bind for the headed-browser-from-
+    // phone case where the operator hasn't typed the token into mobile
+    // yet — the bearer is for write integrity, not view confidentiality.
+    // (Operator may extend gating to reads by mounting on read paths in
+    // a future revision; v0 default per planner brief is gate-writes-only.)
+    const requireAuth = authBearerTokenMiddleware({ expectedToken: bearerToken });
+    function getReadLayer(c) {
+        return c.get("missionControlReadLayer");
+    }
+    function getAuditBrowse(c) {
+        return c.get("missionControlAuditBrowse");
+    }
+    function getNotificationDispatcher(c) {
+        return c.get("missionControlNotificationDispatcher");
+    }
+    function getWriteContract(c) {
+        return c.get("missionControlWriteContract");
+    }
+    function getCliCapability(c) {
+        return c.get("missionControlFleetCliCapability");
+    }
+    function getEventBus(c) {
+        return c.get("eventBus");
+    }
+    function getDb(c) {
+        return c.get("db");
+    }
+    function tableExists(db, tableName) {
+        const row = db
+            .prepare("SELECT 1 AS present FROM sqlite_master WHERE type = 'table' AND name = ?")
+            .get(tableName);
+        return Boolean(row);
+    }
+    function listDestinations(db) {
+        const destinations = new Map();
+        const addDestination = (candidate) => {
+            const sessionName = candidate.sessionName.trim();
+            if (!sessionName)
+                return;
+            const existing = destinations.get(sessionName);
+            if (!existing || candidate.source === "topology") {
+                destinations.set(sessionName, { ...candidate, sessionName });
+            }
+        };
+        if (tableExists(db, "sessions") && tableExists(db, "nodes") && tableExists(db, "rigs")) {
+            const rows = db
+                .prepare(`
+            SELECT
+              s.session_name,
+              s.status,
+              n.logical_id,
+              n.runtime,
+              r.name AS rig_name
+            FROM sessions s
+            JOIN nodes n ON n.id = s.node_id
+            JOIN rigs r ON r.id = n.rig_id
+            WHERE s.session_name IS NOT NULL AND TRIM(s.session_name) != ''
+            ORDER BY r.name COLLATE NOCASE, n.logical_id COLLATE NOCASE, s.session_name COLLATE NOCASE
+          `)
+                .all();
+            for (const row of rows) {
+                const topologyLabel = row.logical_id && row.rig_name ? `${row.logical_id}@${row.rig_name}` : null;
+                addDestination({
+                    sessionName: row.session_name,
+                    label: topologyLabel && topologyLabel !== row.session_name
+                        ? `${topologyLabel} - ${row.session_name}`
+                        : row.session_name,
+                    source: "topology",
+                    rigName: row.rig_name,
+                    logicalId: row.logical_id,
+                    runtime: row.runtime,
+                    status: row.status,
+                });
+            }
+        }
+        if (tableExists(db, "queue_items")) {
+            const rows = db
+                .prepare(`
+            SELECT DISTINCT TRIM(session_name) AS session_name
+            FROM (
+              SELECT source_session AS session_name FROM queue_items
+              UNION
+              SELECT destination_session AS session_name FROM queue_items
+              UNION
+              SELECT handed_off_to AS session_name FROM queue_items
+              UNION
+              SELECT handed_off_from AS session_name FROM queue_items
+            )
+            WHERE session_name IS NOT NULL AND TRIM(session_name) != ''
+            ORDER BY session_name COLLATE NOCASE
+          `)
+                .all();
+            for (const row of rows) {
+                addDestination({
+                    sessionName: row.session_name,
+                    label: row.session_name,
+                    source: "queue",
+                });
+            }
+        }
+        return [...destinations.values()].sort((a, b) => {
+            if (a.source !== b.source)
+                return a.source === "topology" ? -1 : 1;
+            return a.label.localeCompare(b.label);
+        });
+    }
+    function errorResponse(c, err) {
+        if (err instanceof MissionControlActionLogError) {
+            const status = err.code === "verb_unknown" ? 400
+                : err.code === "annotation_required" || err.code === "reason_required" ? 400
+                    : 500;
+            return c.json({ error: err.code, message: err.message, ...(err.details ?? {}) }, status);
+        }
+        if (err instanceof MissionControlWriteContractError) {
+            const status = err.code === "qitem_not_found" ? 404
+                : err.code === "qitem_already_terminal" ? 409
+                    : err.code === "destination_required" ? 400
+                        : err.code === "annotation_required" ? 400
+                            : 500;
+            return c.json({ error: err.code, message: err.message, ...(err.details ?? {}) }, status);
+        }
+        const message = err instanceof Error ? err.message : "internal error";
+        return c.json({ error: "internal_error", message }, 500);
+    }
+    // GET /views — list view names. MUST precede /views/:view-name catchall.
+    app.get("/views", (c) => {
+        return c.json({ views: [...MISSION_CONTROL_VIEWS] });
+    });
+    // GET /cli-capabilities — fleet roll-up + drift indicator.
+    app.get("/cli-capabilities", async (c) => {
+        const fleet = await getCliCapability(c).rollupFleet();
+        return c.json(fleet);
+    });
+    // GET /destinations — phone-friendly route/handoff candidates. MUST precede
+    // /views/:view-name catchall with the other Mission Control literal routes.
+    app.get("/destinations", (c) => {
+        const db = getDb(c);
+        if (!db)
+            return c.json({ destinations: [] });
+        return c.json({ destinations: listDestinations(db) });
+    });
+    // SSE for mission_control.* events. MUST precede /views/:view-name
+    // (per PL-004 Phase A R1 SSE route-order lesson).
+    const sseHandler = (c) => {
+        const eventBus = getEventBus(c);
+        return streamSSE(c, async (stream) => {
+            const unsubscribe = eventBus.subscribe((event) => {
+                if (event.type !== "mission_control.action_executed" &&
+                    event.type !== "mission_control.cli_drift_detected" &&
+                    event.type !== "mission_control.view_refreshed")
+                    return;
+                const sse = { id: String(event.seq), data: JSON.stringify(event) };
+                stream.writeSSE(sse).catch(() => { });
+            });
+            try {
+                await new Promise((resolve) => stream.onAbort(() => resolve()));
+            }
+            finally {
+                unsubscribe();
+            }
+        });
+    };
+    app.get("/sse", sseHandler);
+    app.get("/watch", sseHandler);
+    // PL-005 Phase B: bearer-token gate on write verbs.
+    app.post("/action", requireAuth);
+    app.post("/notifications/test", requireAuth);
+    // POST /action — execute one of 7 verbs through the atomic write contract.
+    app.post("/action", async (c) => {
+        const body = await c.req
+            .json()
+            .catch(() => ({}));
+        if (!body.verb)
+            return c.json({ error: "verb is required" }, 400);
+        if (!MISSION_CONTROL_VERBS.includes(body.verb)) {
+            return c.json({
+                error: "verb_unknown",
+                message: `unknown verb '${body.verb}'; supported: ${MISSION_CONTROL_VERBS.join(", ")}`,
+                supported: [...MISSION_CONTROL_VERBS],
+            }, 400);
+        }
+        if (!body.qitemId)
+            return c.json({ error: "qitemId is required" }, 400);
+        if (!body.actorSession)
+            return c.json({ error: "actorSession is required" }, 400);
+        try {
+            const result = await getWriteContract(c).act({
+                verb: body.verb,
+                qitemId: body.qitemId,
+                actorSession: body.actorSession,
+                destinationSession: body.destinationSession,
+                body: body.body,
+                annotation: body.annotation,
+                reason: body.reason,
+                notify: body.notify,
+                auditNotes: body.auditNotes,
+            });
+            return c.json(result);
+        }
+        catch (err) {
+            return errorResponse(c, err);
+        }
+    });
+    // PL-005 Phase B: GET /audit — read-only browse over mission_control_actions.
+    // MUST come BEFORE /views/:view-name catchall (route-order discipline
+    // per PL-004 Phase A R1 lesson).
+    app.get("/audit", async (c) => {
+        const audit = getAuditBrowse(c);
+        if (!audit)
+            return c.json({ error: "audit_browse_unavailable" }, 500);
+        const qitemId = c.req.query("qitem_id") || undefined;
+        const actionVerb = c.req.query("action_verb") || undefined;
+        const actorSession = c.req.query("actor_session") || undefined;
+        const since = c.req.query("since") || undefined;
+        const until = c.req.query("until") || undefined;
+        const limit = c.req.query("limit") ? Number.parseInt(c.req.query("limit"), 10) : undefined;
+        const beforeId = c.req.query("before_id") || undefined;
+        try {
+            const result = audit.query({ qitemId, actionVerb, actorSession, since, until, limit, beforeId });
+            return c.json(result);
+        }
+        catch (err) {
+            return c.json({
+                error: "audit_query_failed",
+                message: err instanceof Error ? err.message : "internal error",
+            }, 500);
+        }
+    });
+    // PL-005 Phase B: POST /notifications/test — synthetic notification
+    // through the configured mechanism so the operator can verify before
+    // relying on it. Bearer-token gated (registered above).
+    app.post("/notifications/test", async (c) => {
+        const dispatcher = getNotificationDispatcher(c);
+        if (!dispatcher) {
+            return c.json({
+                error: "notifications_unconfigured",
+                message: "notifications dispatcher is not wired; configure notifications.mechanism (ntfy|webhook) in daemon config and restart",
+            }, 503);
+        }
+        try {
+            const result = await dispatcher.sendTest();
+            return c.json(result);
+        }
+        catch (err) {
+            return c.json({
+                error: "notification_test_failed",
+                message: err instanceof Error ? err.message : "internal error",
+            }, 500);
+        }
+    });
+    // GET /views/:view-name — read one of 7 views. MUST come AFTER /views,
+    // /cli-capabilities, /sse, /watch, /audit literal paths.
+    app.get("/views/:view-name", async (c) => {
+        const viewName = c.req.param("view-name");
+        if (!MISSION_CONTROL_VIEWS.includes(viewName)) {
+            return c.json({
+                error: "view_unknown",
+                message: `unknown view '${viewName}'; supported: ${MISSION_CONTROL_VIEWS.join(", ")}`,
+                supported: [...MISSION_CONTROL_VIEWS],
+            }, 404);
+        }
+        const operatorSession = c.req.query("operatorSession") || undefined;
+        try {
+            const result = await getReadLayer(c).readView(viewName, { operatorSession });
+            return c.json(result);
+        }
+        catch (err) {
+            return errorResponse(c, err);
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=mission-control.js.map