@openrig/cli 0.2.0 → 0.3.1

package/daemon/dist/domain/managed-blocks.js

@@ -1,6 +1,12 @@
 import nodePath from "node:path";
-export const MANAGED_BLOCK_START = (id) => `<!-- BEGIN RIGGED MANAGED BLOCK: ${id} -->`;
-export const MANAGED_BLOCK_END = (id) => `<!-- END RIGGED MANAGED BLOCK: ${id} -->`;
+// Pre-release: projection markers that land in user-managed files
+// (CLAUDE.md / AGENTS.md) carry the canonical product name. New writes
+// emit the OpenRig form; legacy "RIGGED" markers from prior installs
+// are still recognized by stripManagedBlocks below for clean uninstall.
+export const MANAGED_BLOCK_START = (id) => `<!-- BEGIN OpenRig MANAGED BLOCK: ${id} -->`;
+export const MANAGED_BLOCK_END = (id) => `<!-- END OpenRig MANAGED BLOCK: ${id} -->`;
+const LEGACY_BLOCK_START = (id) => `<!-- BEGIN RIGGED MANAGED BLOCK: ${id} -->`;
+const LEGACY_BLOCK_END = (id) => `<!-- END RIGGED MANAGED BLOCK: ${id} -->`;
 export function mergeManagedBlock(fs, targetPath, blockId, content, options) {
     const begin = MANAGED_BLOCK_START(blockId);
     const end = MANAGED_BLOCK_END(blockId);
@@ -15,7 +21,10 @@ export function mergeManagedBlock(fs, targetPath, blockId, content, options) {
     const replaceableIds = allReplaceIds.filter((id) => {
         const candidateBegin = MANAGED_BLOCK_START(id);
         const candidateEnd = MANAGED_BLOCK_END(id);
-        return existing.includes(candidateBegin) && existing.includes(candidateEnd);
+        const legacyBegin = LEGACY_BLOCK_START(id);
+        const legacyEnd = LEGACY_BLOCK_END(id);
+        return ((existing.includes(candidateBegin) && existing.includes(candidateEnd)) ||
+            (existing.includes(legacyBegin) && existing.includes(legacyEnd)));
     });
     if (replaceableIds.length > 0) {
         let updated = existing;
@@ -24,6 +33,12 @@ export function mergeManagedBlock(fs, targetPath, blockId, content, options) {
             const candidateEnd = MANAGED_BLOCK_END(id);
             const regex = new RegExp(`${escapeRegex(candidateBegin)}[\\s\\S]*?${escapeRegex(candidateEnd)}`, "g");
             updated = updated.replace(regex, id === blockId ? block : "");
+            // Legacy marker variant from prior installs — replace with the
+            // OpenRig form (or strip when not the active block id).
+            const legacyBegin = LEGACY_BLOCK_START(id);
+            const legacyEnd = LEGACY_BLOCK_END(id);
+            const legacyRegex = new RegExp(`${escapeRegex(legacyBegin)}[\\s\\S]*?${escapeRegex(legacyEnd)}`, "g");
+            updated = updated.replace(legacyRegex, id === blockId ? block : "");
         }
         if (!updated.includes(begin) || !updated.includes(end)) {
             updated = `${updated.trim()}\n\n${block}`.trim();
@@ -50,7 +65,11 @@ export function removeManagedBlocksFromFile(fs, targetPath) {
     return false;
 }
 export function stripManagedBlocks(content) {
+    // Recognize both the OpenRig form (current writes) and the legacy
+    // RIGGED form (existing user files written by prior installs) so
+    // uninstall + cleanup paths handle both transitional states.
     return content
+        .replace(/(?:\n|^)\s*<!-- BEGIN OpenRig MANAGED BLOCK: [\s\S]*?<!-- END OpenRig MANAGED BLOCK: [^>]+ -->\s*(?=\n|$)/g, "\n")
         .replace(/(?:\n|^)\s*<!-- BEGIN RIGGED MANAGED BLOCK: [\s\S]*?<!-- END RIGGED MANAGED BLOCK: [^>]+ -->\s*(?=\n|$)/g, "\n")
         .replace(/\n{3,}/g, "\n\n")
         .trim();

package/daemon/dist/domain/managed-blocks.js.map

@@ -1 +1 @@
-{"version":3,"file":"managed-blocks.js","sourceRoot":"","sources":["../../src/domain/managed-blocks.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,oCAAoC,EAAE,MAAM,CAAC;AAChG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,kCAAkC,EAAE,MAAM,CAAC;AAiB5F,MAAM,UAAU,iBAAiB,CAC/B,EAA0B,EAC1B,UAAkB,EAClB,OAAe,EACf,OAAe,EACf,OAAkC;IAElC,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,KAAK,KAAK,OAAO,KAAK,GAAG,EAAE,CAAC;IAE7C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1C,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACjD,MAAM,cAAc,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,QAAQ,CAAC;QACvB,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,MAAM,cAAc,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,WAAW,CAAC,cAAc,CAAC,aAAa,WAAW,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACtG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QACnD,CAAC;QACD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,QAAQ,OAAO,KAAK,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,EAA4B,EAAE,UAAkB;IAC1F,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,OAAO;SACX,OAAO,CAAC,0GAA0G,EAAE,IAAI,CAAC;SACzH,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"managed-blocks.js","sourceRoot":"","sources":["../../src/domain/managed-blocks.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,WAAW,CAAC;AAEjC,kEAAkE;AAClE,uEAAuE;AACvE,qEAAqE;AACrE,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,qCAAqC,EAAE,MAAM,CAAC;AACjG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,mCAAmC,EAAE,MAAM,CAAC;AAC7F,MAAM,kBAAkB,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,oCAAoC,EAAE,MAAM,CAAC;AACxF,MAAM,gBAAgB,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,kCAAkC,EAAE,MAAM,CAAC;AAiBpF,MAAM,UAAU,iBAAiB,CAC/B,EAA0B,EAC1B,UAAkB,EAClB,OAAe,EACf,OAAe,EACf,OAAkC;IAElC,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,KAAK,KAAK,OAAO,KAAK,GAAG,EAAE,CAAC;IAE7C,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1C,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACjD,MAAM,cAAc,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,OAAO,CACL,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACtE,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CACjE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,QAAQ,CAAC;QACvB,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YAChC,MAAM,cAAc,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,YAAY,GAAG,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,WAAW,CAAC,cAAc,CAAC,aAAa,WAAW,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACtG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9D,+DAA+D;YAC/D,wDAAwD;YACxD,MAAM,WAAW,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACvC,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,aAAa,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACtG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,OAAO,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QACnD,CAAC;QACD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,QAAQ,OAAO,KAAK,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,EAA4B,EAAE,UAAkB;IAC1F,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,kEAAkE;IAClE,iEAAiE;IACjE,6DAA6D;IAC7D,OAAO,OAAO;SACX,OAAO,CAAC,4GAA4G,EAAE,IAAI,CAAC;SAC3H,OAAO,CAAC,0GAA0G,EAAE,IAAI,CAAC;SACzH,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}

package/daemon/dist/domain/mission-control/audit-browse.d.ts

@@ -0,0 +1,26 @@
+import type Database from "better-sqlite3";
+import { type MissionControlActionEntry } from "./mission-control-action-log.js";
+export interface AuditQueryInput {
+    qitemId?: string;
+    actionVerb?: string;
+    actorSession?: string;
+    /** ISO timestamp; rows with acted_at >= since are included. */
+    since?: string;
+    /** ISO timestamp; rows with acted_at <= until are included. */
+    until?: string;
+    /** Default 50; capped at 200. */
+    limit?: number;
+    /** Pagination cursor: returns rows whose action_id < beforeId. */
+    beforeId?: string;
+}
+export interface AuditQueryResult {
+    rows: MissionControlActionEntry[];
+    hasMore: boolean;
+    nextBeforeId: string | null;
+}
+export declare class MissionControlAuditBrowse {
+    private readonly db;
+    constructor(db: Database.Database);
+    query(input: AuditQueryInput): AuditQueryResult;
+}
+//# sourceMappingURL=audit-browse.d.ts.map

package/daemon/dist/domain/mission-control/audit-browse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-browse.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/audit-browse.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EACL,KAAK,yBAAyB,EAG/B,MAAM,iCAAiC,CAAC;AAEzC,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,yBAAyB,EAAE,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAoBD,qBAAa,yBAAyB;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB;CAsDhD"}

package/daemon/dist/domain/mission-control/audit-browse.js

@@ -0,0 +1,101 @@
+// PL-005 Phase B: read-only audit-history browse over mission_control_actions.
+//
+// Filters: qitem_id (exact), action_verb (exact), actor_session (exact),
+// since/until (acted_at range). Pagination via before_id + limit.
+// Returns {rows, has_more, next_before_id} shape so the UI can paginate.
+//
+// Read-only: no writers, no UPDATE/DELETE methods. Phase A's
+// MissionControlActionLog is the only writer; this layer only queries.
+import { MISSION_CONTROL_VERBS, } from "./mission-control-action-log.js";
+const DEFAULT_LIMIT = 50;
+const MAX_LIMIT = 200;
+export class MissionControlAuditBrowse {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    query(input) {
+        if (input.actionVerb && !MISSION_CONTROL_VERBS.includes(input.actionVerb)) {
+            throw new Error(`unknown action_verb '${input.actionVerb}'; supported: ${MISSION_CONTROL_VERBS.join(", ")}`);
+        }
+        const limit = clampLimit(input.limit);
+        const where = [];
+        const params = [];
+        if (input.qitemId) {
+            where.push("qitem_id = ?");
+            params.push(input.qitemId);
+        }
+        if (input.actionVerb) {
+            where.push("action_verb = ?");
+            params.push(input.actionVerb);
+        }
+        if (input.actorSession) {
+            where.push("actor_session = ?");
+            params.push(input.actorSession);
+        }
+        if (input.since) {
+            where.push("acted_at >= ?");
+            params.push(input.since);
+        }
+        if (input.until) {
+            where.push("acted_at <= ?");
+            params.push(input.until);
+        }
+        if (input.beforeId) {
+            // Look up the cursor row's rowid so pagination uses SQLite's
+            // monotonic insertion order (deterministic) rather than ULID
+            // action_id (whose same-ms tail is random; non-deterministic
+            // for tiebreaks). Filed lesson:
+            // feedback_ulid_tiebreaker_nondeterministic.md.
+            where.push("rowid < (SELECT rowid FROM mission_control_actions WHERE action_id = ?)");
+            params.push(input.beforeId);
+        }
+        const whereClause = where.length > 0 ? `WHERE ${where.join(" AND ")}` : "";
+        // Fetch limit+1 to detect hasMore without a separate count query.
+        // ORDER BY acted_at DESC primary; rowid DESC tiebreak (deterministic
+        // insertion order; safer than ULID action_id for same-ms ties).
+        const sql = `SELECT * FROM mission_control_actions ${whereClause}
+       ORDER BY acted_at DESC, rowid DESC LIMIT ?`;
+        const rows = this.db.prepare(sql).all(...params, limit + 1);
+        const hasMore = rows.length > limit;
+        const trimmed = hasMore ? rows.slice(0, limit) : rows;
+        const nextBeforeId = hasMore && trimmed.length > 0 ? trimmed[trimmed.length - 1].action_id : null;
+        return {
+            rows: trimmed.map(rowToEntry),
+            hasMore,
+            nextBeforeId,
+        };
+    }
+}
+function clampLimit(input) {
+    if (input === undefined || !Number.isFinite(input))
+        return DEFAULT_LIMIT;
+    if (input < 1)
+        return 1;
+    if (input > MAX_LIMIT)
+        return MAX_LIMIT;
+    return Math.floor(input);
+}
+function rowToEntry(row) {
+    return {
+        actionId: row.action_id,
+        actionVerb: row.action_verb,
+        qitemId: row.qitem_id,
+        actorSession: row.actor_session,
+        actedAt: row.acted_at,
+        beforeState: row.before_state_json
+            ? JSON.parse(row.before_state_json)
+            : null,
+        afterState: row.after_state_json
+            ? JSON.parse(row.after_state_json)
+            : null,
+        reason: row.reason,
+        annotation: row.annotation,
+        notifyAttempted: row.notify_attempted !== 0,
+        notifyResult: row.notify_result,
+        auditNotes: row.audit_notes_json
+            ? JSON.parse(row.audit_notes_json)
+            : null,
+    };
+}
+//# sourceMappingURL=audit-browse.js.map

package/daemon/dist/domain/mission-control/audit-browse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-browse.js","sourceRoot":"","sources":["../../../src/domain/mission-control/audit-browse.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,yEAAyE;AACzE,kEAAkE;AAClE,yEAAyE;AACzE,EAAE;AACF,6DAA6D;AAC7D,uEAAuE;AAGvE,OAAO,EAGL,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAqCzC,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,MAAM,OAAO,yBAAyB;IACP;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,KAAK,CAAC,KAAsB;QAC1B,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAgC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CACb,wBAAwB,KAAK,CAAC,UAAU,iBAAiB,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,6DAA6D;YAC7D,6DAA6D;YAC7D,6DAA6D;YAC7D,gCAAgC;YAChC,gDAAgD;YAChD,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,kEAAkE;QAClE,qEAAqE;QACrE,gEAAgE;QAChE,MAAM,GAAG,GAAG,yCAAyC,WAAW;kDAClB,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,GAAG,CAAC,CAAgB,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,MAAM,YAAY,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACnG,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAC7B,OAAO;YACP,YAAY;SACb,CAAC;IACJ,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IACzE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,GAAc;IAChC,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,UAAU,EAAE,GAAG,CAAC,WAAiC;QACjD,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,WAAW,EAAE,GAAG,CAAC,iBAAiB;YAChC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAA6B;YAChE,CAAC,CAAC,IAAI;QACR,UAAU,EAAE,GAAG,CAAC,gBAAgB;YAC9B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA6B;YAC/D,CAAC,CAAC,IAAI;QACR,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,GAAG,CAAC,gBAAgB,KAAK,CAAC;QAC3C,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,UAAU,EAAE,GAAG,CAAC,gBAAgB;YAC9B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA6B;YAC/D,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/mission-control/mission-control-action-log.d.ts

@@ -0,0 +1,51 @@
+import type Database from "better-sqlite3";
+export declare const MISSION_CONTROL_VERBS: readonly ["approve", "deny", "route", "annotate", "hold", "drop", "handoff"];
+export type MissionControlVerb = (typeof MISSION_CONTROL_VERBS)[number];
+export interface MissionControlActionRecordInput {
+    actionVerb: MissionControlVerb;
+    qitemId: string | null;
+    actorSession: string;
+    actedAt: string;
+    beforeState?: Record<string, unknown> | null;
+    afterState?: Record<string, unknown> | null;
+    reason?: string | null;
+    annotation?: string | null;
+    notifyAttempted?: boolean;
+    notifyResult?: string | null;
+    auditNotes?: Record<string, unknown> | null;
+}
+export interface MissionControlActionEntry {
+    actionId: string;
+    actionVerb: MissionControlVerb;
+    qitemId: string | null;
+    actorSession: string;
+    actedAt: string;
+    beforeState: Record<string, unknown> | null;
+    afterState: Record<string, unknown> | null;
+    reason: string | null;
+    annotation: string | null;
+    notifyAttempted: boolean;
+    notifyResult: string | null;
+    auditNotes: Record<string, unknown> | null;
+}
+export declare class MissionControlActionLogError extends Error {
+    readonly code: string;
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(code: string, message: string, details?: Record<string, unknown> | undefined);
+}
+export declare class MissionControlActionLog {
+    private readonly db;
+    constructor(db: Database.Database);
+    /**
+     * Append an action record. Validates verb-specific required fields
+     * (annotate → annotation; hold/drop → reason). Designed to compose
+     * inside an outer caller-managed transaction (used by the
+     * write-contract for the atomic 4-step handoff).
+     */
+    record(input: MissionControlActionRecordInput): MissionControlActionEntry;
+    listRecent(limit?: number): MissionControlActionEntry[];
+    listForQitem(qitemId: string, limit?: number): MissionControlActionEntry[];
+    listForActor(actorSession: string, limit?: number): MissionControlActionEntry[];
+    countAll(): number;
+}
+//# sourceMappingURL=mission-control-action-log.d.ts.map

package/daemon/dist/domain/mission-control/mission-control-action-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-control-action-log.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/mission-control-action-log.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C,eAAO,MAAM,qBAAqB,8EAQxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,kBAAkB,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC5C;AAiBD,qBAAa,4BAA6B,SAAQ,KAAK;aAEnC,IAAI,EAAE,MAAM;aAEZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjC,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAED,qBAAa,uBAAuB;IACtB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,+BAA+B,GAAG,yBAAyB;IA6DzE,UAAU,CAAC,KAAK,SAAK,GAAG,yBAAyB,EAAE;IAUnD,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,yBAAyB,EAAE;IAUtE,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,yBAAyB,EAAE;IAU3E,QAAQ,IAAI,MAAM;CAMnB"}

package/daemon/dist/domain/mission-control/mission-control-action-log.js

@@ -0,0 +1,124 @@
+// PL-005 Phase A: Mission Control action log (append-only).
+//
+// Owns inserts into mission_control_actions. Append-only at the API
+// surface: only `record()` is exposed. UPDATE/DELETE/remove are not
+// methods — direct SQL could mutate but is a contract violation
+// enforced at this domain boundary (per PRD § Q5 + slice IMPL).
+//
+// Pattern mirrors PL-004 Phase C's WatchdogHistoryLog and Phase A's
+// QueueTransitionLog and Phase D's WorkflowStepTrailLog.
+import { ulid } from "ulid";
+export const MISSION_CONTROL_VERBS = [
+    "approve",
+    "deny",
+    "route",
+    "annotate",
+    "hold",
+    "drop",
+    "handoff",
+];
+export class MissionControlActionLogError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = "MissionControlActionLogError";
+    }
+}
+export class MissionControlActionLog {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Append an action record. Validates verb-specific required fields
+     * (annotate → annotation; hold/drop → reason). Designed to compose
+     * inside an outer caller-managed transaction (used by the
+     * write-contract for the atomic 4-step handoff).
+     */
+    record(input) {
+        if (!MISSION_CONTROL_VERBS.includes(input.actionVerb)) {
+            throw new MissionControlActionLogError("verb_unknown", `unknown action_verb '${input.actionVerb}'; Phase A v1 supports: ${MISSION_CONTROL_VERBS.join(", ")}`, { actionVerb: input.actionVerb, supported: [...MISSION_CONTROL_VERBS] });
+        }
+        if (input.actionVerb === "annotate" && !input.annotation) {
+            throw new MissionControlActionLogError("annotation_required", `action_verb=annotate requires annotation`, { actionVerb: input.actionVerb });
+        }
+        if ((input.actionVerb === "hold" || input.actionVerb === "drop") && !input.reason) {
+            throw new MissionControlActionLogError("reason_required", `action_verb=${input.actionVerb} requires reason`, { actionVerb: input.actionVerb });
+        }
+        const actionId = ulid();
+        this.db
+            .prepare(`INSERT INTO mission_control_actions (
+           action_id, action_verb, qitem_id, actor_session, acted_at,
+           before_state_json, after_state_json, reason, annotation,
+           notify_attempted, notify_result, audit_notes_json
+         ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .run(actionId, input.actionVerb, input.qitemId ?? null, input.actorSession, input.actedAt, input.beforeState ? JSON.stringify(input.beforeState) : null, input.afterState ? JSON.stringify(input.afterState) : null, input.reason ?? null, input.annotation ?? null, input.notifyAttempted ? 1 : 0, input.notifyResult ?? null, input.auditNotes ? JSON.stringify(input.auditNotes) : null);
+        return {
+            actionId,
+            actionVerb: input.actionVerb,
+            qitemId: input.qitemId ?? null,
+            actorSession: input.actorSession,
+            actedAt: input.actedAt,
+            beforeState: input.beforeState ?? null,
+            afterState: input.afterState ?? null,
+            reason: input.reason ?? null,
+            annotation: input.annotation ?? null,
+            notifyAttempted: Boolean(input.notifyAttempted),
+            notifyResult: input.notifyResult ?? null,
+            auditNotes: input.auditNotes ?? null,
+        };
+    }
+    listRecent(limit = 50) {
+        const rows = this.db
+            .prepare(`SELECT * FROM mission_control_actions
+         ORDER BY acted_at DESC, rowid DESC LIMIT ?`)
+            .all(limit);
+        return rows.map(rowToEntry);
+    }
+    listForQitem(qitemId, limit = 50) {
+        const rows = this.db
+            .prepare(`SELECT * FROM mission_control_actions WHERE qitem_id = ?
+         ORDER BY acted_at DESC, rowid DESC LIMIT ?`)
+            .all(qitemId, limit);
+        return rows.map(rowToEntry);
+    }
+    listForActor(actorSession, limit = 50) {
+        const rows = this.db
+            .prepare(`SELECT * FROM mission_control_actions WHERE actor_session = ?
+         ORDER BY acted_at DESC, rowid DESC LIMIT ?`)
+            .all(actorSession, limit);
+        return rows.map(rowToEntry);
+    }
+    countAll() {
+        const row = this.db
+            .prepare(`SELECT COUNT(*) AS n FROM mission_control_actions`)
+            .get();
+        return row.n;
+    }
+}
+function rowToEntry(row) {
+    return {
+        actionId: row.action_id,
+        actionVerb: row.action_verb,
+        qitemId: row.qitem_id,
+        actorSession: row.actor_session,
+        actedAt: row.acted_at,
+        beforeState: row.before_state_json
+            ? JSON.parse(row.before_state_json)
+            : null,
+        afterState: row.after_state_json
+            ? JSON.parse(row.after_state_json)
+            : null,
+        reason: row.reason,
+        annotation: row.annotation,
+        notifyAttempted: row.notify_attempted !== 0,
+        notifyResult: row.notify_result,
+        auditNotes: row.audit_notes_json
+            ? JSON.parse(row.audit_notes_json)
+            : null,
+    };
+}
+//# sourceMappingURL=mission-control-action-log.js.map

package/daemon/dist/domain/mission-control/mission-control-action-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-control-action-log.js","sourceRoot":"","sources":["../../../src/domain/mission-control/mission-control-action-log.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,oEAAoE;AACpE,oEAAoE;AACpE,gEAAgE;AAChE,gEAAgE;AAChE,EAAE;AACF,oEAAoE;AACpE,yDAAyD;AAGzD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,SAAS;IACT,MAAM;IACN,OAAO;IACP,UAAU;IACV,MAAM;IACN,MAAM;IACN,SAAS;CACD,CAAC;AAgDX,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAEnC;IAEA;IAHlB,YACkB,IAAY,EAC5B,OAAe,EACC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QAEZ,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,OAAO,uBAAuB;IACL;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD;;;;;OAKG;IACH,MAAM,CAAC,KAAsC;QAC3C,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,4BAA4B,CACpC,cAAc,EACd,wBAAwB,KAAK,CAAC,UAAU,2BAA2B,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACrG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,GAAG,qBAAqB,CAAC,EAAE,CACxE,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YACzD,MAAM,IAAI,4BAA4B,CACpC,qBAAqB,EACrB,0CAA0C,EAC1C,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CACjC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClF,MAAM,IAAI,4BAA4B,CACpC,iBAAiB,EACjB,eAAe,KAAK,CAAC,UAAU,kBAAkB,EACjD,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CACjC,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;uDAI+C,CAChD;aACA,GAAG,CACF,QAAQ,EACR,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,OAAO,IAAI,IAAI,EACrB,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAC5D,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAC1D,KAAK,CAAC,MAAM,IAAI,IAAI,EACpB,KAAK,CAAC,UAAU,IAAI,IAAI,EACxB,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC7B,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3D,CAAC;QACJ,OAAO;YACL,QAAQ;YACR,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC;YAC/C,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;SACrC,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,KAAK,GAAG,EAAE;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;oDAC4C,CAC7C;aACA,GAAG,CAAC,KAAK,CAAgB,CAAC;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,YAAY,CAAC,OAAe,EAAE,KAAK,GAAG,EAAE;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;oDAC4C,CAC7C;aACA,GAAG,CAAC,OAAO,EAAE,KAAK,CAAgB,CAAC;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,YAAY,CAAC,YAAoB,EAAE,KAAK,GAAG,EAAE;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;oDAC4C,CAC7C;aACA,GAAG,CAAC,YAAY,EAAE,KAAK,CAAgB,CAAC;QAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,QAAQ;QACN,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,mDAAmD,CAAC;aAC5D,GAAG,EAAmB,CAAC;QAC1B,OAAO,GAAG,CAAC,CAAC,CAAC;IACf,CAAC;CACF;AAED,SAAS,UAAU,CAAC,GAAc;IAChC,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,UAAU,EAAE,GAAG,CAAC,WAAiC;QACjD,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,WAAW,EAAE,GAAG,CAAC,iBAAiB;YAChC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAA6B;YAChE,CAAC,CAAC,IAAI;QACR,UAAU,EAAE,GAAG,CAAC,gBAAgB;YAC9B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA6B;YAC/D,CAAC,CAAC,IAAI;QACR,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,GAAG,CAAC,gBAAgB,KAAK,CAAC;QAC3C,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,UAAU,EAAE,GAAG,CAAC,gBAAgB;YAC9B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA6B;YAC/D,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/mission-control/mission-control-fleet-cli-capability.d.ts

@@ -0,0 +1,131 @@
+import type Database from "better-sqlite3";
+import type { EventBus } from "../event-bus.js";
+import type { RigRepository } from "../rig-repository.js";
+export interface FleetRollupRow {
+    rigName: string;
+    /** Compact 5-state activity for a fleet view. */
+    activityState: "active" | "idle" | "attention" | "blocked" | "degraded";
+    lifecycleState: string | null;
+    attentionReason: string | null;
+    lastUpdate: string;
+    /** v0.1.12-style label or "head" / "unknown". */
+    cliVersionLabel: string;
+    /** True if this rig was observed missing one or more allow-listed fields. */
+    cliDriftDetected: boolean;
+}
+export interface FleetRollup {
+    rows: FleetRollupRow[];
+    staleCliCount: number;
+    /** Fields known to be missing across the observed rigs (de-duplicated). */
+    degradedFields: string[];
+    /**
+     * If the fleet roll-up couldn't reach the canonical CLI source and
+     * fell back to a daemon-internal projection, this is the fallback
+     * mode label. Null when the canonical source was used.
+     */
+    sourceFallback: string | null;
+}
+interface CliCapabilityDeps {
+    db: Database.Database;
+    eventBus: EventBus;
+    rigRepo: RigRepository;
+    /**
+     * Optional: probe a rig for which `rig ps --fields <field>` keys it
+     * supports. v0 default is a no-op (returns empty unsupported list);
+     * future versions may shell out to `rig ps --version` per rig.
+     */
+    probeRig?: (rigName: string) => Promise<{
+        cliVersionLabel: string;
+        unsupportedFields: string[];
+    }>;
+    /** Override clock for tests. */
+    now?: () => Date;
+}
+/**
+ * Fields the operator-friendly fleet view tries to present. When a rig
+ * does not surface one of these fields, the per-row drift indicator is
+ * set + the per-(rig,field) "logged once" event is emitted.
+ *
+ * `recoveryGuidance` is intentionally listed even though it is not in
+ * the 0.2.0 CLI allow-list (audit row 5 yellow). This is the canonical
+ * cross-CLI-version drift case: the spec assumes some future CLI
+ * surfaces this; the read-layer surfaces "field unavailable on this
+ * rig's daemon version" honestly today.
+ */
+export declare const MISSION_CONTROL_DESIRED_FIELDS: readonly ["agentActivity", "recoveryGuidance"];
+/**
+ * Daemon-side mirror of the CLI's `rig ps --nodes --fields ...`
+ * node-level allow-list. Sourced from
+ * `packages/cli/src/commands/ps.ts:79-96` (ALLOWED_NODE_FIELDS).
+ * The CLI does not export this set, so the daemon mirrors it here at
+ * the workspace version (Phase A v0 ships at OpenRig 0.2.0). Future
+ * graduation can replace this mirror with a live CLI introspection
+ * shell-out per rig; v1 single-host topology makes that overhead
+ * unnecessary.
+ *
+ * To compute drift: any field in MISSION_CONTROL_DESIRED_FIELDS that
+ * is NOT in this set is "missing on this rig's CLI version" — the
+ * production probe surfaces it as drift.
+ */
+export declare const LOCAL_CLI_NODE_FIELDS_AT_0_2_0: ReadonlySet<string>;
+/**
+ * Local CLI version label embedded at workspace build time. Mission
+ * Control reports this label in the drift indicator alongside per-rig
+ * field availability. Hardcoded at v0.2.0 (the workspace shipping
+ * version); a future graduation can read it from package.json or a
+ * build-time constant.
+ */
+export declare const LOCAL_CLI_VERSION_LABEL = "0.2.0";
+/**
+ * Production probe factory (R1 fix per guard PL-005 Phase A review).
+ * Returns a probeRig function that compares MISSION_CONTROL_DESIRED_FIELDS
+ * against the daemon-mirrored LOCAL_CLI_NODE_FIELDS_AT_0_2_0 set and
+ * reports any missing fields as drift. Per-rig honesty (sub-clause 2):
+ * each rig is probed individually; in v1 single-host topology all rigs
+ * share the same local CLI, so they all report the same drift result,
+ * which is the honest outcome for the audit-row-5 case.
+ *
+ * For test scaffolding (or a future per-rig shell-out probe), callers
+ * can override probeRig in the constructor; this factory is the v1
+ * production default and is wired into createDaemon's startup so the
+ * `/api/mission-control/cli-capabilities` route reports drift honestly
+ * out of the box.
+ */
+export declare function makeLocalCliCapabilityProbe(opts?: {
+    versionLabel?: string;
+    knownNodeFields?: ReadonlySet<string>;
+}): (rigName: string) => Promise<{
+    cliVersionLabel: string;
+    unsupportedFields: string[];
+}>;
+export declare class MissionControlFleetCliCapability {
+    private readonly db;
+    private readonly eventBus;
+    private readonly rigRepo;
+    private readonly probeRig;
+    private readonly now;
+    /** Per-(rig, field) once-per-session log set. Cleared on daemon restart. */
+    private readonly loggedDriftKeys;
+    constructor(deps: CliCapabilityDeps);
+    rollupFleet(): Promise<FleetRollup>;
+    /**
+     * Per-(rig, field) once-per-session-per-rig log per PRD sub-clause 3.
+     * Daemon restart clears the set so logging fires again on first
+     * post-restart observation.
+     */
+    private maybeLogDriftOnce;
+    /**
+     * Summarize a rig's queue state for the fleet view. Synthesized
+     * from PL-004 Phase A queue_items via a single SQL aggregation:
+     *   - active: any in-progress qitem
+     *   - blocked: any blocked qitem (no in-progress)
+     *   - attention: only pending qitems older than 1h
+     *   - idle: no active queue activity
+     *   - degraded: any failed/denied/canceled qitem in last 24h
+     */
+    private summarizeRigQueue;
+    /** Test/observability helper: clear the once-per-session log set. */
+    resetDriftLogForTest(): void;
+}
+export {};
+//# sourceMappingURL=mission-control-fleet-cli-capability.d.ts.map

package/daemon/dist/domain/mission-control/mission-control-fleet-cli-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-control-fleet-cli-capability.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/mission-control-fleet-cli-capability.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,aAAa,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;IACxE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,cAAc,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,2EAA2E;IAC3E,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,UAAU,iBAAiB;IACzB,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;QACtC,eAAe,EAAE,MAAM,CAAC;QACxB,iBAAiB,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC,CAAC;IACH,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AASD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,8BAA8B,gDAGjC,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,MAAM,CAiB7D,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,UAAU,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,CAAC,EAAE;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACvC,GAAG,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,CAAC,CAYD;AAID,qBAAa,gCAAgC;IAC3C,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAoB;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;IACtE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IAEjC,4EAA4E;IAC5E,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0B;gBAE9C,IAAI,EAAE,iBAAiB;IAU7B,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC;IA2CzC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAazB;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAoDzB,qEAAqE;IACrE,oBAAoB,IAAI,IAAI;CAG7B"}