@openrig/cli 0.2.0 → 0.3.1

package/daemon/dist/domain/files/file-write-service.d.ts

@@ -0,0 +1,61 @@
+import { type AllowlistRoot } from "./path-safety.js";
+export interface FileWriteRequest {
+    rootName: string;
+    /** Relative path under the allowlist root; same shape as item 3 routes. */
+    path: string;
+    content: string;
+    /** Caller-known mtime (ISO string) at the time of last read. */
+    expectedMtime: string;
+    /** Caller-known SHA-256 content hash (hex) at the time of last read. */
+    expectedContentHash: string;
+    /** Operator session that initiated the write (for the audit row). */
+    actor: string;
+}
+export interface FileWriteResult {
+    /** Resolved canonical absolute path that was written. */
+    absolutePath: string;
+    /** New mtime after the write (ISO string). */
+    newMtime: string;
+    /** New SHA-256 content hash (hex) after the write. */
+    newContentHash: string;
+    /** Byte-count delta (new - prev). */
+    byteCountDelta: number;
+}
+export declare class WriteConflictError extends Error {
+    readonly currentMtime: string;
+    readonly currentContentHash: string;
+    readonly details: Record<string, unknown>;
+    constructor(currentMtime: string, currentContentHash: string, details: Record<string, unknown>);
+}
+export declare class FileWriteError extends Error {
+    readonly code: "stat_failed" | "tmp_write_failed" | "rename_failed" | "audit_write_failed";
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(code: "stat_failed" | "tmp_write_failed" | "rename_failed" | "audit_write_failed", message: string, details?: Record<string, unknown> | undefined);
+}
+export interface FileWriteServiceOpts {
+    /** Allowlist roots resolved from env at startup (re-resolved per request is fine; cheap). */
+    allowlist: AllowlistRoot[];
+    /** Override default audit file location for tests. */
+    auditFilePath?: string;
+    /** Override Date.now() for tests (returns ISO timestamp). */
+    now?: () => Date;
+}
+export declare class FileWriteService {
+    private readonly allowlist;
+    private readonly auditFilePath;
+    private readonly now;
+    constructor(opts: FileWriteServiceOpts);
+    /**
+     * Atomically write content to an allowlisted file. Throws
+     * WriteConflictError on mtime/contentHash mismatch; throws
+     * FileWriteError on stat / temp-write / rename / audit failures.
+     * Returns FileWriteResult with the new mtime + contentHash on
+     * success.
+     */
+    writeAtomic(req: FileWriteRequest): FileWriteResult;
+    private appendAuditRow;
+    /** Test/debug helper: returns the configured audit file path. */
+    getAuditFilePath(): string;
+}
+export declare function sha256Hex(content: Buffer | string): string;
+//# sourceMappingURL=file-write-service.d.ts.map

package/daemon/dist/domain/files/file-write-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write-service.d.ts","sourceRoot":"","sources":["../../../src/domain/files/file-write-service.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE1E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;aAEzB,YAAY,EAAE,MAAM;aACpB,kBAAkB,EAAE,MAAM;aAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFhC,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKnD;AAED,qBAAa,cAAe,SAAQ,KAAK;aAErB,IAAI,EAAE,aAAa,GAAG,kBAAkB,GAAG,eAAe,GAAG,oBAAoB;aAEjF,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjC,IAAI,EAAE,aAAa,GAAG,kBAAkB,GAAG,eAAe,GAAG,oBAAoB,EACjG,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAED,MAAM,WAAW,oBAAoB;IACnC,6FAA6F;IAC7F,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAQD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,IAAI,EAAE,oBAAoB;IAMtC;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,gBAAgB,GAAG,eAAe;IAuGnD,OAAO,CAAC,cAAc;IAKtB,iEAAiE;IACjE,gBAAgB,IAAI,MAAM;CAG3B;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAE1D"}

package/daemon/dist/domain/files/file-write-service.js

@@ -0,0 +1,180 @@
+// UI Enhancement Pack v0 — atomic file write + JSONL audit.
+//
+// Item 4: operator-actionable write surface for STEERING.md /
+// PROGRESS.md / spec YAML / any allowlisted file. Honors the dashboard
+// precedent's mtime + content-hash invariants (cited as retired-but-
+// instructive from `services/dashboard/bin/server.py:1269-1289`;
+// reimplemented fresh in TypeScript per current OpenRig conventions).
+//
+// Atomic-write semantics:
+//   1. Resolve target path under allowlist root (path-safety from
+//      file-allowlist.ts).
+//   2. Re-stat file: if mtime != expectedMtime OR contentHash !=
+//      expectedContentHash, reject with WriteConflictError carrying
+//      the current mtime + contentHash for the UI to surface.
+//   3. Write content to a temp file in the same directory.
+//   4. fsync the temp file so the write is durable before the rename.
+//   5. Atomic rename over the target path. On POSIX this is a single
+//      inode swap, so other readers either see the old file or the
+//      new file — never a partial write.
+//   6. Compute new mtime + contentHash from the rename'd target.
+//   7. Append one JSONL row to the audit file.
+//
+// The audit file is `~/.openrig/file-edit-audit.jsonl` by default
+// (operator-overridable via env). Append-only; never rotates at v0
+// per PRD § Item 4 (rotation is a future concern).
+import { createHash } from "node:crypto";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { resolveAllowedPath } from "./path-safety.js";
+export class WriteConflictError extends Error {
+    currentMtime;
+    currentContentHash;
+    details;
+    constructor(currentMtime, currentContentHash, details) {
+        super("file changed externally; refresh required before writing");
+        this.currentMtime = currentMtime;
+        this.currentContentHash = currentContentHash;
+        this.details = details;
+        this.name = "WriteConflictError";
+    }
+}
+export class FileWriteError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = "FileWriteError";
+    }
+}
+const DEFAULT_AUDIT_FILE = path.join(process.env.HOME ?? process.env.USERPROFILE ?? "/tmp", ".openrig", "file-edit-audit.jsonl");
+export class FileWriteService {
+    allowlist;
+    auditFilePath;
+    now;
+    constructor(opts) {
+        this.allowlist = opts.allowlist;
+        this.auditFilePath = opts.auditFilePath ?? DEFAULT_AUDIT_FILE;
+        this.now = opts.now ?? (() => new Date());
+    }
+    /**
+     * Atomically write content to an allowlisted file. Throws
+     * WriteConflictError on mtime/contentHash mismatch; throws
+     * FileWriteError on stat / temp-write / rename / audit failures.
+     * Returns FileWriteResult with the new mtime + contentHash on
+     * success.
+     */
+    writeAtomic(req) {
+        const target = resolveAllowedPath(this.allowlist, req.rootName, req.path);
+        // Pre-write checks: re-stat + re-hash for conflict detection.
+        let prevStat;
+        let prevContent;
+        try {
+            prevStat = fs.statSync(target);
+            prevContent = fs.readFileSync(target);
+        }
+        catch (err) {
+            throw new FileWriteError("stat_failed", `failed to read '${target}' for conflict detection: ${err instanceof Error ? err.message : String(err)}`, { target });
+        }
+        const prevMtime = prevStat.mtime.toISOString();
+        const prevContentHash = sha256Hex(prevContent);
+        if (prevMtime !== req.expectedMtime || prevContentHash !== req.expectedContentHash) {
+            throw new WriteConflictError(prevMtime, prevContentHash, {
+                target,
+                expectedMtime: req.expectedMtime,
+                expectedContentHash: req.expectedContentHash,
+            });
+        }
+        // Write to temp file in the SAME directory (so atomic rename
+        // works across the same filesystem). Suffix with PID + random
+        // so concurrent writes don't collide.
+        const tmpName = `.openrig-write-${process.pid}-${Math.random().toString(36).slice(2, 10)}-${path.basename(target)}`;
+        const tmpPath = path.join(path.dirname(target), tmpName);
+        let tmpFd = null;
+        try {
+            tmpFd = fs.openSync(tmpPath, "w");
+            fs.writeFileSync(tmpFd, req.content);
+            fs.fsyncSync(tmpFd);
+        }
+        catch (err) {
+            // Clean up temp file if it was partially created.
+            try {
+                if (tmpFd !== null)
+                    fs.closeSync(tmpFd);
+            }
+            catch { /* ignore */ }
+            try {
+                fs.unlinkSync(tmpPath);
+            }
+            catch { /* ignore */ }
+            throw new FileWriteError("tmp_write_failed", `failed to write+fsync temp file at '${tmpPath}': ${err instanceof Error ? err.message : String(err)}`, { target, tmpPath });
+        }
+        finally {
+            try {
+                if (tmpFd !== null)
+                    fs.closeSync(tmpFd);
+            }
+            catch { /* ignore */ }
+        }
+        try {
+            fs.renameSync(tmpPath, target);
+        }
+        catch (err) {
+            // Best-effort cleanup of the orphan temp file. We don't try to
+            // restore the previous content because we never touched the
+            // target (rename failed atomically).
+            try {
+                fs.unlinkSync(tmpPath);
+            }
+            catch { /* ignore */ }
+            throw new FileWriteError("rename_failed", `failed to atomically rename '${tmpPath}' over '${target}': ${err instanceof Error ? err.message : String(err)}`, { target, tmpPath });
+        }
+        // Re-stat to get the new mtime + content hash.
+        const newStat = fs.statSync(target);
+        const newContent = fs.readFileSync(target);
+        const newMtime = newStat.mtime.toISOString();
+        const newContentHash = sha256Hex(newContent);
+        const byteCountDelta = newContent.byteLength - prevContent.byteLength;
+        // Append the audit JSONL row. Failure here is logged but does
+        // NOT undo the write — the user's edit landed; we don't want
+        // audit-system flakes to revert canon edits.
+        const auditRow = {
+            ts: this.now().toISOString(),
+            actor: req.actor,
+            root: req.rootName,
+            path: req.path,
+            absolutePath: target,
+            prevMtime,
+            newMtime,
+            prevContentHash,
+            newContentHash,
+            byteCountDelta,
+        };
+        try {
+            this.appendAuditRow(auditRow);
+        }
+        catch (err) {
+            throw new FileWriteError("audit_write_failed", `write succeeded but audit append failed: ${err instanceof Error ? err.message : String(err)}`, { target, auditFilePath: this.auditFilePath, ...auditRow });
+        }
+        return {
+            absolutePath: target,
+            newMtime,
+            newContentHash,
+            byteCountDelta,
+        };
+    }
+    appendAuditRow(row) {
+        fs.mkdirSync(path.dirname(this.auditFilePath), { recursive: true });
+        fs.appendFileSync(this.auditFilePath, `${JSON.stringify(row)}\n`);
+    }
+    /** Test/debug helper: returns the configured audit file path. */
+    getAuditFilePath() {
+        return this.auditFilePath;
+    }
+}
+export function sha256Hex(content) {
+    return createHash("sha256").update(content).digest("hex");
+}
+//# sourceMappingURL=file-write-service.js.map

package/daemon/dist/domain/files/file-write-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write-service.js","sourceRoot":"","sources":["../../../src/domain/files/file-write-service.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,8DAA8D;AAC9D,uEAAuE;AACvE,qEAAqE;AACrE,iEAAiE;AACjE,sEAAsE;AACtE,EAAE;AACF,0BAA0B;AAC1B,kEAAkE;AAClE,2BAA2B;AAC3B,iEAAiE;AACjE,oEAAoE;AACpE,8DAA8D;AAC9D,2DAA2D;AAC3D,sEAAsE;AACtE,qEAAqE;AACrE,mEAAmE;AACnE,yCAAyC;AACzC,iEAAiE;AACjE,+CAA+C;AAC/C,EAAE;AACF,kEAAkE;AAClE,mEAAmE;AACnE,mDAAmD;AAEnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAsB,MAAM,kBAAkB,CAAC;AA0B1E,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEzB;IACA;IACA;IAHlB,YACkB,YAAoB,EACpB,kBAA0B,EAC1B,OAAgC;QAEhD,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAJlD,iBAAY,GAAZ,YAAY,CAAQ;QACpB,uBAAkB,GAAlB,kBAAkB,CAAQ;QAC1B,YAAO,GAAP,OAAO,CAAyB;QAGhD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IAErB;IAEA;IAHlB,YACkB,IAAiF,EACjG,OAAe,EACC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAA6E;QAEjF,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAWD,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAClC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,MAAM,EACrD,UAAU,EACV,uBAAuB,CACxB,CAAC;AAEF,MAAM,OAAO,gBAAgB;IACV,SAAS,CAAkB;IAC3B,aAAa,CAAS;IACtB,GAAG,CAAa;IAEjC,YAAY,IAA0B;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,kBAAkB,CAAC;QAC9D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;OAMG;IACH,WAAW,CAAC,GAAqB;QAC/B,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAE1E,8DAA8D;QAC9D,IAAI,QAAkB,CAAC;QACvB,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,cAAc,CACtB,aAAa,EACb,mBAAmB,MAAM,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACxG,EAAE,MAAM,EAAE,CACX,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,eAAe,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,GAAG,CAAC,aAAa,IAAI,eAAe,KAAK,GAAG,CAAC,mBAAmB,EAAE,CAAC;YACnF,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAE,eAAe,EAAE;gBACvD,MAAM;gBACN,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,6DAA6D;QAC7D,8DAA8D;QAC9D,sCAAsC;QACtC,MAAM,OAAO,GAAG,kBAAkB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAClC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACrC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,kDAAkD;YAClD,IAAI,CAAC;gBAAC,IAAI,KAAK,KAAK,IAAI;oBAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACvE,IAAI,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,IAAI,cAAc,CACtB,kBAAkB,EAClB,uCAAuC,OAAO,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACtG,EAAE,MAAM,EAAE,OAAO,EAAE,CACpB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,IAAI,KAAK,KAAK,IAAI;oBAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,+DAA+D;YAC/D,4DAA4D;YAC5D,qCAAqC;YACrC,IAAI,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,IAAI,cAAc,CACtB,eAAe,EACf,gCAAgC,OAAO,WAAW,MAAM,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAChH,EAAE,MAAM,EAAE,OAAO,EAAE,CACpB,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,cAAc,GAAG,UAAU,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;QAEtE,8DAA8D;QAC9D,6DAA6D;QAC7D,6CAA6C;QAC7C,MAAM,QAAQ,GAAG;YACf,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,YAAY,EAAE,MAAM;YACpB,SAAS;YACT,QAAQ;YACR,eAAe;YACf,cAAc;YACd,cAAc;SACf,CAAC;QACF,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,cAAc,CACtB,oBAAoB,EACpB,4CAA4C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC9F,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,GAAG,QAAQ,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,OAAO;YACL,YAAY,EAAE,MAAM;YACpB,QAAQ;YACR,cAAc;YACd,cAAc;SACf,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,GAA4B;QACjD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,iEAAiE;IACjE,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,OAAwB;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC"}

package/daemon/dist/domain/files/path-safety.d.ts

@@ -0,0 +1,47 @@
+export interface AllowlistRoot {
+    /** Operator-supplied display name (e.g., "workspace"). */
+    name: string;
+    /** Canonical absolute path on disk. */
+    canonicalPath: string;
+}
+export declare class FilePathSafetyError extends Error {
+    readonly code: "root_unknown" | "path_escape" | "path_invalid" | "stat_failed" | "not_a_file" | "not_a_directory";
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(code: "root_unknown" | "path_escape" | "path_invalid" | "stat_failed" | "not_a_file" | "not_a_directory", message: string, details?: Record<string, unknown> | undefined);
+}
+/**
+ * Decodes a raw `name:/abs/path,name:/abs/path` allowlist string into
+ * canonical AllowlistRoot[]. Whitespace around delimiters trimmed.
+ * Invalid pairs (no colon, empty name, non-absolute path) silently
+ * skipped. Duplicate names: last wins. Same shape both env-var and
+ * settings-file-resolved values produce.
+ */
+export declare function decodeAllowlist(raw: string): AllowlistRoot[];
+/**
+ * Reads the allowlist env var directly and returns the parsed root list.
+ * Preserved for backward-compat callers; v0 callers prefer the resolved
+ * settings-store path which honors env > settings-file > empty.
+ */
+export declare function readAllowlistFromEnv(env?: NodeJS.ProcessEnv): AllowlistRoot[];
+/**
+ * Resolves a relative path against an allowlist root. Throws
+ * FilePathSafetyError on any unsafe condition. Returns the
+ * canonical absolute path on success. Caller is expected to stat
+ * the result to distinguish file/directory.
+ *
+ * Path-safety algorithm:
+ *   1. Validate the root exists in the allowlist (reject "root_unknown").
+ *   2. Reject relative paths that look absolute or contain `..`
+ *      segments (reject "path_invalid" / "path_escape").
+ *   3. Resolve the relative path against the canonical root.
+ *   4. Resolve symlinks: if the realpath does not start with the
+ *      canonical root + path separator, reject "path_escape".
+ *   5. The base case `path = ""` resolves to the root itself (allowed
+ *      so callers can list the root directory).
+ */
+export declare function resolveAllowedPath(allowlist: AllowlistRoot[], rootName: string, relativePath: string): string;
+/** Convenience: resolve + assert the result is an existing regular file. */
+export declare function resolveAllowedFile(allowlist: AllowlistRoot[], rootName: string, relativePath: string): string;
+/** Convenience: resolve + assert the result is an existing directory. */
+export declare function resolveAllowedDirectory(allowlist: AllowlistRoot[], rootName: string, relativePath: string): string;
+//# sourceMappingURL=path-safety.d.ts.map

package/daemon/dist/domain/files/path-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.d.ts","sourceRoot":"","sources":["../../../src/domain/files/path-safety.ts"],"names":[],"mappings":"AA+BA,MAAM,WAAW,aAAa;IAC5B,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,mBAAoB,SAAQ,KAAK;aAE1B,IAAI,EAAE,cAAc,GAAG,aAAa,GAAG,cAAc,GAAG,aAAa,GAAG,YAAY,GAAG,iBAAiB;aAExG,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjC,IAAI,EAAE,cAAc,GAAG,aAAa,GAAG,cAAc,GAAG,aAAa,GAAG,YAAY,GAAG,iBAAiB,EACxH,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAKD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,EAAE,CAqB5D;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,EAAE,CAK1F;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,aAAa,EAAE,EAC1B,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,MAAM,CAwDR;AAED,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,aAAa,EAAE,EAC1B,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,MAAM,CAoBR;AAED,yEAAyE;AACzE,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,aAAa,EAAE,EAC1B,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,MAAM,CAoBR"}

package/daemon/dist/domain/files/path-safety.js

@@ -0,0 +1,176 @@
+// UI Enhancement Pack v0 — file allowlist + path-safety helpers.
+//
+// Daemon-enforced fail-closed path-safety for the operator-allowlisted
+// file browser surface (item 3 + item 4). Reused by all four
+// /api/files/* routes.
+//
+// Allowlist source (driver pivot from PRD's suggested ConfigStore key
+// family — see handoff): OPENRIG_FILES_ALLOWLIST env var, comma-
+// separated `<name>:<absolute-path>` pairs. Operator sets via shell
+// (or via `~/.openrig` env file). Empty / unset → no allowlist roots
+// → routes return empty roots list with a structured "configure
+// OPENRIG_FILES_ALLOWLIST" hint. Default after fresh install: nothing
+// (the safe default per PRD § Item 3).
+//
+// Path-safety contract:
+//   - Each request resolves <relativePath> against <rootName>'s
+//     canonical absolute path.
+//   - Any escape attempt (.., absolute-path passed as relativePath,
+//     symlink whose realpath escapes the root) is rejected with a
+//     structured error.
+//   - Symlinks INSIDE the allowlisted tree resolve normally; symlinks
+//     pointing OUTSIDE the tree are treated as escape attempts.
+//   - Reads/lists never return content from outside the resolved root.
+//
+// MVP single-host context: no per-rig overrides, no remote allowlist
+// management, no audit at allowlist-resolution time (allowlist
+// resolution is read-only). Audit applies to writes only (item 4).
+import * as fs from "node:fs";
+import * as path from "node:path";
+export class FilePathSafetyError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = "FilePathSafetyError";
+    }
+}
+const ENV_VAR = "OPENRIG_FILES_ALLOWLIST";
+const LEGACY_ENV_VAR = "RIGGED_FILES_ALLOWLIST";
+/**
+ * Decodes a raw `name:/abs/path,name:/abs/path` allowlist string into
+ * canonical AllowlistRoot[]. Whitespace around delimiters trimmed.
+ * Invalid pairs (no colon, empty name, non-absolute path) silently
+ * skipped. Duplicate names: last wins. Same shape both env-var and
+ * settings-file-resolved values produce.
+ */
+export function decodeAllowlist(raw) {
+    if (!raw.trim())
+        return [];
+    const out = new Map();
+    for (const pair of raw.split(",")) {
+        const trimmed = pair.trim();
+        if (!trimmed)
+            continue;
+        const colon = trimmed.indexOf(":");
+        if (colon === -1)
+            continue;
+        const name = trimmed.slice(0, colon).trim();
+        const rawPath = trimmed.slice(colon + 1).trim();
+        if (!name || !rawPath)
+            continue;
+        if (!path.isAbsolute(rawPath))
+            continue;
+        let canonical;
+        try {
+            canonical = fs.realpathSync(rawPath);
+        }
+        catch {
+            canonical = path.resolve(rawPath);
+        }
+        out.set(name, canonical);
+    }
+    return Array.from(out.entries()).map(([name, canonicalPath]) => ({ name, canonicalPath }));
+}
+/**
+ * Reads the allowlist env var directly and returns the parsed root list.
+ * Preserved for backward-compat callers; v0 callers prefer the resolved
+ * settings-store path which honors env > settings-file > empty.
+ */
+export function readAllowlistFromEnv(env = process.env) {
+    // Use || (not ??) so an empty-string OPENRIG_FILES_ALLOWLIST falls
+    // back to the legacy var. ?? only handles null/undefined.
+    const raw = (env[ENV_VAR] || env[LEGACY_ENV_VAR] || "").toString();
+    return decodeAllowlist(raw);
+}
+/**
+ * Resolves a relative path against an allowlist root. Throws
+ * FilePathSafetyError on any unsafe condition. Returns the
+ * canonical absolute path on success. Caller is expected to stat
+ * the result to distinguish file/directory.
+ *
+ * Path-safety algorithm:
+ *   1. Validate the root exists in the allowlist (reject "root_unknown").
+ *   2. Reject relative paths that look absolute or contain `..`
+ *      segments (reject "path_invalid" / "path_escape").
+ *   3. Resolve the relative path against the canonical root.
+ *   4. Resolve symlinks: if the realpath does not start with the
+ *      canonical root + path separator, reject "path_escape".
+ *   5. The base case `path = ""` resolves to the root itself (allowed
+ *      so callers can list the root directory).
+ */
+export function resolveAllowedPath(allowlist, rootName, relativePath) {
+    const root = allowlist.find((r) => r.name === rootName);
+    if (!root) {
+        throw new FilePathSafetyError("root_unknown", `allowlist root '${rootName}' is not configured. Allowlist configured roots: ${allowlist.map((r) => r.name).join(", ") || "(none)"}.`, { rootName, configuredRoots: allowlist.map((r) => r.name) });
+    }
+    // Reject ../ escape attempts BEFORE filesystem resolution. Even
+    // though step 4 catches realpath escapes, this rejects the
+    // expressed-intent-to-escape with a clearer error code.
+    if (relativePath.includes("..")) {
+        // Distinguish a literal ".." segment from a filename like "foo..bar"
+        // — split on path.sep and `/` and inspect each segment.
+        const segments = relativePath.split(/[\\/]/).filter((s) => s.length > 0);
+        for (const seg of segments) {
+            if (seg === "..") {
+                throw new FilePathSafetyError("path_escape", `relative path '${relativePath}' contains a '..' segment; reject.`, { rootName, relativePath });
+            }
+        }
+    }
+    if (path.isAbsolute(relativePath)) {
+        throw new FilePathSafetyError("path_invalid", `relative path '${relativePath}' must not be absolute (reject).`, { rootName, relativePath });
+    }
+    const candidate = path.resolve(root.canonicalPath, relativePath);
+    let realpath;
+    try {
+        realpath = fs.realpathSync(candidate);
+    }
+    catch {
+        // If the candidate doesn't exist on disk yet, fall back to the
+        // unresolved candidate. Subsequent stat will surface the absence
+        // with a more specific error code.
+        realpath = candidate;
+    }
+    // Containment check with path.sep boundary to avoid the
+    // /foo/bar matching /foo/bar-other false-positive.
+    const rootWithSep = root.canonicalPath.endsWith(path.sep)
+        ? root.canonicalPath
+        : `${root.canonicalPath}${path.sep}`;
+    if (realpath !== root.canonicalPath && !realpath.startsWith(rootWithSep)) {
+        throw new FilePathSafetyError("path_escape", `resolved path '${realpath}' falls outside allowlist root '${rootName}' (${root.canonicalPath}).`, { rootName, relativePath, resolved: realpath, rootCanonical: root.canonicalPath });
+    }
+    return realpath;
+}
+/** Convenience: resolve + assert the result is an existing regular file. */
+export function resolveAllowedFile(allowlist, rootName, relativePath) {
+    const resolved = resolveAllowedPath(allowlist, rootName, relativePath);
+    let stat;
+    try {
+        stat = fs.statSync(resolved);
+    }
+    catch (err) {
+        throw new FilePathSafetyError("stat_failed", `failed to stat '${resolved}': ${err instanceof Error ? err.message : String(err)}`, { rootName, relativePath, resolved });
+    }
+    if (!stat.isFile()) {
+        throw new FilePathSafetyError("not_a_file", `resolved path '${resolved}' is not a regular file.`, { rootName, relativePath, resolved });
+    }
+    return resolved;
+}
+/** Convenience: resolve + assert the result is an existing directory. */
+export function resolveAllowedDirectory(allowlist, rootName, relativePath) {
+    const resolved = resolveAllowedPath(allowlist, rootName, relativePath);
+    let stat;
+    try {
+        stat = fs.statSync(resolved);
+    }
+    catch (err) {
+        throw new FilePathSafetyError("stat_failed", `failed to stat '${resolved}': ${err instanceof Error ? err.message : String(err)}`, { rootName, relativePath, resolved });
+    }
+    if (!stat.isDirectory()) {
+        throw new FilePathSafetyError("not_a_directory", `resolved path '${resolved}' is not a directory.`, { rootName, relativePath, resolved });
+    }
+    return resolved;
+}
+//# sourceMappingURL=path-safety.js.map

package/daemon/dist/domain/files/path-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.js","sourceRoot":"","sources":["../../../src/domain/files/path-safety.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,uEAAuE;AACvE,6DAA6D;AAC7D,uBAAuB;AACvB,EAAE;AACF,sEAAsE;AACtE,iEAAiE;AACjE,oEAAoE;AACpE,qEAAqE;AACrE,gEAAgE;AAChE,sEAAsE;AACtE,uCAAuC;AACvC,EAAE;AACF,wBAAwB;AACxB,gEAAgE;AAChE,+BAA+B;AAC/B,oEAAoE;AACpE,kEAAkE;AAClE,wBAAwB;AACxB,sEAAsE;AACtE,gEAAgE;AAChE,uEAAuE;AACvE,EAAE;AACF,qEAAqE;AACrE,+DAA+D;AAC/D,mEAAmE;AAEnE,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AASlC,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAE1B;IAEA;IAHlB,YACkB,IAAwG,EACxH,OAAe,EACC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAoG;QAExG,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAC1C,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,SAAS;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QACxC,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvE,mEAAmE;IACnE,0DAA0D;IAC1D,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAA0B,EAC1B,QAAgB,EAChB,YAAoB;IAEpB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,mBAAmB,CAC3B,cAAc,EACd,mBAAmB,QAAQ,oDAAoD,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,EACrI,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,gEAAgE;IAChE,2DAA2D;IAC3D,wDAAwD;IACxD,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,qEAAqE;QACrE,wDAAwD;QACxD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,mBAAmB,CAC3B,aAAa,EACb,kBAAkB,YAAY,oCAAoC,EAClE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC3B,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,mBAAmB,CAC3B,cAAc,EACd,kBAAkB,YAAY,kCAAkC,EAChE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAC3B,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACjE,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,iEAAiE;QACjE,mCAAmC;QACnC,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;IACD,wDAAwD;IACxD,mDAAmD;IACnD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC,aAAa;QACpB,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvC,IAAI,QAAQ,KAAK,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,mBAAmB,CAC3B,aAAa,EACb,kBAAkB,QAAQ,mCAAmC,QAAQ,MAAM,IAAI,CAAC,aAAa,IAAI,EACjG,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAChC,SAA0B,EAC1B,QAAgB,EAChB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvE,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,aAAa,EACb,mBAAmB,QAAQ,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACnF,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,CACrC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,mBAAmB,CAC3B,YAAY,EACZ,kBAAkB,QAAQ,0BAA0B,EACpD,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,uBAAuB,CACrC,SAA0B,EAC1B,QAAgB,EAChB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvE,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAC3B,aAAa,EACb,mBAAmB,QAAQ,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACnF,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,CACrC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,kBAAkB,QAAQ,uBAAuB,EACjD,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/daemon/dist/domain/graph-projection.d.ts

@@ -1,8 +1,13 @@
-import type { RigWithRelations, Session, Binding, Pod } from "./types.js";
+import type { RigWithRelations, Session, Binding, Pod, AgentActivity } from "./types.js";
 export interface RigGraphInput extends RigWithRelations {
     sessions: Session[];
     pods?: Pod[];
 }
+export interface CurrentQitemSummary {
+    qitemId: string;
+    bodyExcerpt: string;
+    tier: string | null;
+}
 interface RFNodeData {
     logicalId: string;
     podLabel?: string | null;
@@ -25,6 +30,10 @@ interface RFNodeData {
     contextUsedPercentage: number | null;
     contextFresh: boolean;
     contextAvailability: string;
+    contextTotalInputTokens: number | null;
+    contextTotalOutputTokens: number | null;
+    agentActivity?: AgentActivity | null;
+    currentQitems?: CurrentQitemSummary[];
 }
 interface RFNode {
     id: string;
@@ -54,6 +63,10 @@ export interface InventoryOverlay {
     contextUsedPercentage?: number | null;
     contextFresh?: boolean;
     contextAvailability?: string;
+    contextTotalInputTokens?: number | null;
+    contextTotalOutputTokens?: number | null;
+    agentActivity?: AgentActivity | null;
+    currentQitems?: CurrentQitemSummary[];
 }
 export declare function projectRigToGraph(input: RigGraphInput, inventoryOverlay?: InventoryOverlay[]): ReactFlowGraph;
 export {};

package/daemon/dist/domain/graph-projection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph-projection.d.ts","sourceRoot":"","sources":["../../src/domain/graph-projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,WAAW,aAAc,SAAQ,gBAAgB;IACrD,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;CACd;AAED,UAAU,UAAU;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,GAAG,gBAAgB,CAAC;IACrC,aAAa,EAAE,SAAS,GAAG,OAAO,GAAG,oBAAoB,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC5E,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,UAAU,MAAM;IACd,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,MAAM;IACd,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAID,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,SAAS,GAAG,OAAO,GAAG,oBAAoB,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC5E,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,GAAG,cAAc,CAmG7G"}
+{"version":3,"file":"graph-projection.d.ts","sourceRoot":"","sources":["../../src/domain/graph-projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEzF,MAAM,WAAW,aAAc,SAAQ,gBAAgB;IACrD,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,UAAU,UAAU;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,GAAG,gBAAgB,CAAC;IACrC,aAAa,EAAE,SAAS,GAAG,OAAO,GAAG,oBAAoB,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC5E,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,YAAY,EAAE,OAAO,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,aAAa,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACvC;AAED,UAAU,MAAM;IACd,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,MAAM;IACd,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAID,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,SAAS,GAAG,OAAO,GAAG,oBAAoB,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC5E,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,aAAa,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACvC;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,GAAG,cAAc,CA2G7G"}

package/daemon/dist/domain/graph-projection.js

@@ -49,6 +49,10 @@ export function projectRigToGraph(input, inventoryOverlay) {
                 contextUsedPercentage: overlay?.contextUsedPercentage ?? null,
                 contextFresh: overlay?.contextFresh ?? false,
                 contextAvailability: overlay?.contextAvailability ?? "unknown",
+                contextTotalInputTokens: overlay?.contextTotalInputTokens ?? null,
+                contextTotalOutputTokens: overlay?.contextTotalOutputTokens ?? null,
+                agentActivity: overlay?.agentActivity ?? null,
+                currentQitems: overlay?.currentQitems ?? [],
             },
         };
     });
@@ -81,6 +85,10 @@ export function projectRigToGraph(input, inventoryOverlay) {
                 contextUsedPercentage: null,
                 contextFresh: false,
                 contextAvailability: "unknown",
+                contextTotalInputTokens: null,
+                contextTotalOutputTokens: null,
+                agentActivity: null,
+                currentQitems: [],
             },
         });
     }

package/daemon/dist/domain/graph-projection.js.map

@@ -1 +1 @@
-{"version":3,"file":"graph-projection.js","sourceRoot":"","sources":["../../src/domain/graph-projection.ts"],"names":[],"mappings":"AAmDA,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAY7B,MAAM,UAAU,iBAAiB,CAAC,KAAoB,EAAE,gBAAqC;IAC3F,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,KAAK,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAE7E,sCAAsC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC,CAAC,mBAAmB;IAEjE,MAAM,KAAK,GAAa,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACnD,sEAAsE;QACtE,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC;YAC3C,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACnE,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,sBAAsB,GAAG,aAAa,EAAE,MAAM,KAAK,SAAS;YAChE,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,IAAK,aAAa,CAAC,aAA6C,IAAI,IAAI,CAAC;YAClG,CAAC,CAAC,IAAI,CAAC;QAET,aAAa;QACb,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,GAAG,gBAAgB,EAAE;YAC/C,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;YACtD,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBACpE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC5E,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBACnD,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO;gBAClE,aAAa,EAAE,sBAAsB;gBACrC,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,IAAI,aAAa,EAAE,WAAW,IAAI,IAAI;gBACzF,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;gBACzB,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,KAAK;gBAChD,WAAW,EAAE,aAAa,EAAE,WAAW,IAAI,IAAI;gBAC/C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI;gBAC/C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;gBAC7B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM;gBAC1F,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,IAAI,IAAI;gBAC7D,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,KAAK;gBAC5C,mBAAmB,EAAE,OAAO,EAAE,mBAAmB,IAAI,SAAS;aAC/D;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC;YACd,EAAE,EAAE,OAAO,KAAK,EAAE;YAClB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;YACxB,IAAI,EAAE;gBACJ,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK;gBAC/C,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK;gBAC1C,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK;gBAClD,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE;gBACnB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,OAAO;gBACjB,aAAa,EAAE,IAAI;gBACnB,oBAAoB,EAAE,IAAI;gBAC1B,KAAK;gBACL,cAAc,EAAE,KAAK;gBACrB,WAAW,EAAE,IAAI;gBACjB,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,CAAC;gBACZ,qBAAqB,EAAE,IAAI;gBAC3B,YAAY,EAAE,KAAK;gBACnB,mBAAmB,EAAE,SAAS;aAC/B;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAa,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,IAAI,CAAC,QAAQ;QACrB,MAAM,EAAE,IAAI,CAAC,QAAQ;QACrB,KAAK,EAAE,IAAI,CAAC,IAAI;KACjB,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,UAAU,EAAE,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC"}
+{"version":3,"file":"graph-projection.js","sourceRoot":"","sources":["../../src/domain/graph-projection.ts"],"names":[],"mappings":"AA6DA,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAgB7B,MAAM,UAAU,iBAAiB,CAAC,KAAoB,EAAE,gBAAqC;IAC3F,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,KAAK,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAE7E,sCAAsC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoB,CAAC,CAAC,mBAAmB;IAEjE,MAAM,KAAK,GAAa,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACnD,sEAAsE;QACtE,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC;YAC3C,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACnE,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,sBAAsB,GAAG,aAAa,EAAE,MAAM,KAAK,SAAS;YAChE,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,IAAK,aAAa,CAAC,aAA6C,IAAI,IAAI,CAAC;YAClG,CAAC,CAAC,IAAI,CAAC;QAET,aAAa;QACb,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5D,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,GAAG,gBAAgB,EAAE;YAC/C,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;YACtD,IAAI,EAAE;gBACJ,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBACpE,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC5E,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBACnD,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO;gBAClE,aAAa,EAAE,sBAAsB;gBACrC,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,IAAI,aAAa,EAAE,WAAW,IAAI,IAAI;gBACzF,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;gBACzB,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,KAAK;gBAChD,WAAW,EAAE,aAAa,EAAE,WAAW,IAAI,IAAI;gBAC/C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,IAAI;gBAC/C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;gBAC7B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM;gBAC1F,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,IAAI,IAAI;gBAC7D,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,KAAK;gBAC5C,mBAAmB,EAAE,OAAO,EAAE,mBAAmB,IAAI,SAAS;gBAC9D,uBAAuB,EAAE,OAAO,EAAE,uBAAuB,IAAI,IAAI;gBACjE,wBAAwB,EAAE,OAAO,EAAE,wBAAwB,IAAI,IAAI;gBACnE,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,IAAI;gBAC7C,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,EAAE;aAC5C;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC/B,UAAU,CAAC,IAAI,CAAC;YACd,EAAE,EAAE,OAAO,KAAK,EAAE;YAClB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;YACxB,IAAI,EAAE;gBACJ,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK;gBAC/C,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK;gBAC1C,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK;gBAClD,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE;gBACnB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,OAAO;gBACjB,aAAa,EAAE,IAAI;gBACnB,oBAAoB,EAAE,IAAI;gBAC1B,KAAK;gBACL,cAAc,EAAE,KAAK;gBACrB,WAAW,EAAE,IAAI;gBACjB,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,CAAC;gBACZ,qBAAqB,EAAE,IAAI;gBAC3B,YAAY,EAAE,KAAK;gBACnB,mBAAmB,EAAE,SAAS;gBAC9B,uBAAuB,EAAE,IAAI;gBAC7B,wBAAwB,EAAE,IAAI;gBAC9B,aAAa,EAAE,IAAI;gBACnB,aAAa,EAAE,EAAE;aAClB;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAa,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,IAAI,CAAC,QAAQ;QACrB,MAAM,EAAE,IAAI,CAAC,QAAQ;QACrB,KAAK,EAAE,IAAI,CAAC,IAAI;KACjB,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,UAAU,EAAE,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC"}

package/daemon/dist/domain/install-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install-engine.d.ts","sourceRoot":"","sources":["../../src/domain/install-engine.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE/E,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AASD,qBAAa,aAAa;IACxB,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,EAAE,CAAc;gBAEZ,WAAW,EAAE,iBAAiB,EAAE,EAAE,EAAE,WAAW;IAK3D,KAAK,CACH,YAAY,EAAE,YAAY,EAC1B,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,MAAM,GACnB,aAAa;IA2EhB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc;IAQ3C,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,kBAAkB;CA0B3B"}
+{"version":3,"file":"install-engine.d.ts","sourceRoot":"","sources":["../../src/domain/install-engine.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE/E,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvD,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,SAAS,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AASD,qBAAa,aAAa;IACxB,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,EAAE,CAAc;gBAEZ,WAAW,EAAE,iBAAiB,EAAE,EAAE,EAAE,WAAW;IAK3D,KAAK,CACH,YAAY,EAAE,YAAY,EAC1B,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,MAAM,GACnB,aAAa;IA2EhB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc;IAQ3C,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,kBAAkB;CA0C3B"}

package/daemon/dist/domain/install-engine.js

@@ -1,7 +1,7 @@
 import path from "node:path";
 import { createHash } from "node:crypto";
-const BLOCK_START = (name) => `<!-- BEGIN RIGGED MANAGED BLOCK: ${name} -->`;
-const BLOCK_END = (name) => `<!-- END RIGGED MANAGED BLOCK: ${name} -->`;
+const BLOCK_START = (name) => `<!-- BEGIN OpenRig MANAGED BLOCK: ${name} -->`;
+const BLOCK_END = (name) => `<!-- END OpenRig MANAGED BLOCK: ${name} -->`;
 function hashContent(content) {
     return createHash("sha256").update(content).digest("hex");
 }
@@ -133,11 +133,27 @@ export class InstallEngine {
             const existing = this.fs.readFile(entry.targetPath);
             const startMarker = BLOCK_START(packageName);
             const endMarker = BLOCK_END(packageName);
-            const startIdx = existing.indexOf(startMarker);
-            const endIdx = existing.indexOf(endMarker);
+            const legacyStart = `<!-- BEGIN RIGGED MANAGED BLOCK: ${packageName} -->`;
+            const legacyEnd = `<!-- END RIGGED MANAGED BLOCK: ${packageName} -->`;
+            // Prefer the OpenRig form; fall back to legacy markers from
+            // prior installs so re-applying a guidance package over a
+            // pre-rename file replaces the old block instead of appending a
+            // duplicate.
+            let startIdx = existing.indexOf(startMarker);
+            let endIdx = existing.indexOf(endMarker);
+            let matchedEndLength = endMarker.length;
+            if (startIdx === -1 || endIdx === -1) {
+                const legacyStartIdx = existing.indexOf(legacyStart);
+                const legacyEndIdx = existing.indexOf(legacyEnd);
+                if (legacyStartIdx !== -1 && legacyEndIdx !== -1) {
+                    startIdx = legacyStartIdx;
+                    endIdx = legacyEndIdx;
+                    matchedEndLength = legacyEnd.length;
+                }
+            }
             if (startIdx !== -1 && endIdx !== -1) {
-                // Update existing block
-                const updated = existing.slice(0, startIdx) + block + existing.slice(endIdx + endMarker.length);
+                // Update existing block (rewrites legacy markers to OpenRig form).
+                const updated = existing.slice(0, startIdx) + block + existing.slice(endIdx + matchedEndLength);
                 this.fs.writeFile(entry.targetPath, updated);
             }
             else {