@openrig/cli 0.3.1 → 0.3.2

package/daemon/dist/domain/rig-policy/rig-policy-validator.js

@@ -0,0 +1,211 @@
+// Slice 09 — runtime validator for OperatorContextModeRecord input.
+//
+// The type system (rig-policy-types.ts) blocks invalid values at
+// compile time when callers go through the typed surface. This
+// validator is the defense for inputs that bypass types: JSON file
+// reads, HTTP request bodies, env-var-derived configuration, CLI
+// argument parsing, and migrations from older record shapes.
+//
+// HG-2: every record must carry all 10 fields. Reject missing/extra.
+// HG-1 / HG-SAFE / HG-8: closed enums; auto-accept rejected; no
+// silent-switch value.
+//
+// Error format follows the 3-part convention from the velocity team:
+//   what failed / what's allowed / what to do
+// so an operator gets a useful CLI message.
+import { OPERATOR_CONTEXT_MODES, OPERATOR_CONTEXT_SCOPES, SAFE_PERMISSION_PROMPT_POSTURES, STALE_RULES, } from "./rig-policy-types.js";
+const ALLOWED_AUTONOMY_SCOPES = [
+    "pre_approved_only",
+    "bounded_continuation",
+    "full_autonomy_within_workstream",
+    "full_autonomy",
+];
+const ALLOWED_HEARTBEAT_CADENCES = ["sparse", "normal", "fast"];
+const ALLOWED_INSPECTION_DEPTHS = ["surface", "normal", "forensic"];
+const ALLOWED_UPDATE_DETAILS = ["compact", "normal", "verbose"];
+const ALLOWED_ESCALATION_THRESHOLDS = [
+    "low",
+    "normal",
+    "high",
+    "blocker_only",
+];
+const ALLOWED_CONCURRENCY_LIMITS = ["serial", "2", "4", "unlimited"];
+/**
+ * The 10 required fields of an OperatorContextModeRecord. Used by
+ * validateRecord to enumerate field-set integrity (HG-2) — both
+ * presence and exhaustiveness.
+ *
+ * NOTE: `mode` is NOT in this list. Mode is the binding selector
+ * (Component 2 vocabulary), not part of the Component-3 settings
+ * record. The store/route validate mode separately at the binding
+ * boundary; this validator enforces only the 10 Component-3 fields.
+ */
+export const REQUIRED_RECORD_FIELDS = [
+    "autonomy_scope",
+    "heartbeat_cadence",
+    "inspection_depth",
+    "update_detail",
+    "escalation_threshold",
+    "concurrency_limit",
+    "permission_prompt_posture",
+    "scope",
+    "expiry_or_stale_rule",
+    "evidence_citation",
+];
+function threePart(failed, allowed, recovery) {
+    return `${failed}. Allowed: ${allowed}. ${recovery}`;
+}
+function isPlainObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function checkEnum(fieldName, value, allowed, errors) {
+    if (typeof value !== "string") {
+        errors.push(threePart(`${fieldName} is not a string (got ${typeof value})`, allowed.join(", "), `Set ${fieldName} to one of the allowed values.`));
+        return null;
+    }
+    if (!allowed.includes(value)) {
+        errors.push(threePart(`${fieldName}="${value}" is not a recognized value`, allowed.join(", "), `Set ${fieldName} to one of the allowed values.`));
+        return null;
+    }
+    return value;
+}
+/**
+ * Validate a candidate record against the FROZEN contract. Returns
+ * the typed record on success OR a list of 3-part error messages on
+ * failure (one per offending field; report all at once so an
+ * operator doesn't have to retry per error).
+ *
+ * Strict: any field outside REQUIRED_RECORD_FIELDS is rejected
+ * (HG-2 — field-set integrity; "no merged/dropped fields").
+ */
+export function validateRecord(raw) {
+    const errors = [];
+    if (!isPlainObject(raw)) {
+        return {
+            ok: false,
+            errors: [
+                threePart("Record is not an object", "an object with the 10 required fields", "See conventions/operator-context-mode-system/README.md §Component 3 for the schema."),
+            ],
+        };
+    }
+    // HG-2 — field-set integrity. Reject missing AND extra fields. The
+    // convention says "All ten fields MUST be present in any descendant
+    // that publishes a current-mode artifact. None may be silently
+    // merged or dropped."
+    for (const field of REQUIRED_RECORD_FIELDS) {
+        if (!(field in raw)) {
+            errors.push(threePart(`Missing required field "${field}"`, REQUIRED_RECORD_FIELDS.join(", "), `Add the field to the record. See convention §Component 3.`));
+        }
+    }
+    const requiredSet = new Set(REQUIRED_RECORD_FIELDS);
+    for (const key of Object.keys(raw)) {
+        if (!requiredSet.has(key)) {
+            errors.push(threePart(`Unknown field "${key}"`, REQUIRED_RECORD_FIELDS.join(", "), `Drop the unknown field. The schema is closed at v0; an extension requires a Mode 1.5 amendment.`));
+        }
+    }
+    // If we already failed field-set integrity, return early so the
+    // operator sees only the structural error and not cascade per-field
+    // noise.
+    if (errors.length > 0)
+        return { ok: false, errors };
+    const autonomy_scope = checkEnum("autonomy_scope", raw["autonomy_scope"], ALLOWED_AUTONOMY_SCOPES, errors);
+    const heartbeat_cadence = checkEnum("heartbeat_cadence", raw["heartbeat_cadence"], ALLOWED_HEARTBEAT_CADENCES, errors);
+    const inspection_depth = checkEnum("inspection_depth", raw["inspection_depth"], ALLOWED_INSPECTION_DEPTHS, errors);
+    const update_detail = checkEnum("update_detail", raw["update_detail"], ALLOWED_UPDATE_DETAILS, errors);
+    const escalation_threshold = checkEnum("escalation_threshold", raw["escalation_threshold"], ALLOWED_ESCALATION_THRESHOLDS, errors);
+    const concurrency_limit = checkEnum("concurrency_limit", raw["concurrency_limit"], ALLOWED_CONCURRENCY_LIMITS, errors);
+    // HG-SAFE (runtime) — the type system blocks auto-accept at
+    // compile time; this branch rejects it at runtime for inputs that
+    // bypass typing (JSON / env / HTTP body). The validator does NOT
+    // tolerate any "auto*" / "yes_to_all" / etc. value; it accepts
+    // EXACTLY the three SAFE values.
+    const permission_prompt_posture = checkEnum("permission_prompt_posture", raw["permission_prompt_posture"], SAFE_PERMISSION_PROMPT_POSTURES, errors);
+    const scope = checkEnum("scope", raw["scope"], OPERATOR_CONTEXT_SCOPES, errors);
+    const expiry_or_stale_rule = checkEnum("expiry_or_stale_rule", raw["expiry_or_stale_rule"], STALE_RULES, errors);
+    const evidence_citation_raw = raw["evidence_citation"];
+    if (typeof evidence_citation_raw !== "string") {
+        errors.push(threePart(`evidence_citation is not a string (got ${typeof evidence_citation_raw})`, "a non-empty source-citation string (e.g., qitem id, file path, chatroom topic)", "Provide a brief citation per convention §Citation Rules."));
+    }
+    else if (evidence_citation_raw.trim().length === 0) {
+        errors.push(threePart("evidence_citation is empty", "a non-empty source-citation string", "Provide a brief citation per convention §Citation Rules."));
+    }
+    if (errors.length > 0
+        || autonomy_scope === null
+        || heartbeat_cadence === null
+        || inspection_depth === null
+        || update_detail === null
+        || escalation_threshold === null
+        || concurrency_limit === null
+        || permission_prompt_posture === null
+        || scope === null
+        || expiry_or_stale_rule === null) {
+        return { ok: false, errors };
+    }
+    return {
+        ok: true,
+        record: {
+            autonomy_scope,
+            heartbeat_cadence,
+            inspection_depth,
+            update_detail,
+            escalation_threshold,
+            concurrency_limit,
+            permission_prompt_posture,
+            scope,
+            expiry_or_stale_rule,
+            evidence_citation: evidence_citation_raw.trim(),
+        },
+    };
+}
+/**
+ * Validate an operator-supplied mode name. Mode lives outside the
+ * 10-field record (Component 2 vocabulary, not Component 3 settings).
+ * The route + store call this at the binding boundary; the
+ * disambiguator below (for invocation parsing) is separate.
+ */
+export function validateModeName(raw) {
+    if (typeof raw !== "string") {
+        return { ok: false, error: threePart(`mode is not a string (got ${typeof raw})`, OPERATOR_CONTEXT_MODES.join(", "), "Provide one of the six reserved mode names.") };
+    }
+    if (!OPERATOR_CONTEXT_MODES.includes(raw)) {
+        return { ok: false, error: threePart(`mode="${raw}" is not a recognized mode name`, OPERATOR_CONTEXT_MODES.join(", "), "Provide one of the six reserved mode names. See convention §Component 2.") };
+    }
+    return { ok: true, mode: raw };
+}
+/**
+ * Disambiguate operator-supplied mode input. Per convention §Component 4
+ * "Bare-Word Disambiguation":
+ *
+ * - A bare word that is one of the six reserved modes → invocation
+ * - An explicit `mode:` prefix → invocation
+ * - A word embedded in a sentence → NOT invocation (caller treats as topic)
+ *
+ * Returns the canonical mode name when the input is unambiguously an
+ * invocation; null otherwise. Caller emits a clarification question
+ * for null+bare-multi-word inputs (per convention "ask once").
+ */
+export function disambiguateModeInvocation(rawInput) {
+    const trimmed = rawInput.trim();
+    if (trimmed.length === 0)
+        return null;
+    // Explicit prefix wins.
+    const prefixMatch = trimmed.match(/^mode\s*:\s*(\S+)/i);
+    if (prefixMatch) {
+        const candidate = prefixMatch[1].toLowerCase();
+        if (OPERATOR_CONTEXT_MODES.includes(candidate)) {
+            return candidate;
+        }
+        return null;
+    }
+    // Bare-word: exactly one word AND it's a reserved mode.
+    if (/^\S+$/.test(trimmed)) {
+        const lower = trimmed.toLowerCase();
+        if (OPERATOR_CONTEXT_MODES.includes(lower)) {
+            return lower;
+        }
+        return null;
+    }
+    // Embedded — let the caller ask.
+    return null;
+}
+//# sourceMappingURL=rig-policy-validator.js.map

package/daemon/dist/domain/rig-policy/rig-policy-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rig-policy-validator.js","sourceRoot":"","sources":["../../../src/domain/rig-policy/rig-policy-validator.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,iEAAiE;AACjE,+DAA+D;AAC/D,mEAAmE;AACnE,iEAAiE;AACjE,6DAA6D;AAC7D,EAAE;AACF,qEAAqE;AACrE,gEAAgE;AAChE,uBAAuB;AACvB,EAAE;AACF,qEAAqE;AACrE,8CAA8C;AAC9C,4CAA4C;AAE5C,OAAO,EAYL,sBAAsB,EACtB,uBAAuB,EACvB,+BAA+B,EAC/B,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAE/B,MAAM,uBAAuB,GAA6B;IACxD,mBAAmB;IACnB,sBAAsB;IACtB,iCAAiC;IACjC,eAAe;CAChB,CAAC;AAEF,MAAM,0BAA0B,GAAgC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAE7F,MAAM,yBAAyB,GAA+B,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAEhG,MAAM,sBAAsB,GAA4B,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAEzF,MAAM,6BAA6B,GAAmC;IACpE,KAAK;IACL,QAAQ;IACR,MAAM;IACN,cAAc;CACf,CAAC;AAEF,MAAM,0BAA0B,GAAgC,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AAElG;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiD;IAClF,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,eAAe;IACf,sBAAsB;IACtB,mBAAmB;IACnB,2BAA2B;IAC3B,OAAO;IACP,sBAAsB;IACtB,mBAAmB;CACpB,CAAC;AAcF,SAAS,SAAS,CAAC,MAAc,EAAE,OAAe,EAAE,QAAgB;IAClE,OAAO,GAAG,MAAM,cAAc,OAAO,KAAK,QAAQ,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAChB,SAAiB,EACjB,KAAc,EACd,OAAqB,EACrB,MAAgB;IAEhB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CACT,SAAS,CACP,GAAG,SAAS,yBAAyB,OAAO,KAAK,GAAG,EACpD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAClB,OAAO,SAAS,gCAAgC,CACjD,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CACT,SAAS,CACP,GAAG,SAAS,KAAK,KAAK,6BAA6B,EACnD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAClB,OAAO,SAAS,gCAAgC,CACjD,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE;gBACN,SAAS,CACP,yBAAyB,EACzB,uCAAuC,EACvC,qFAAqF,CACtF;aACF;SACF,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,+DAA+D;IAC/D,sBAAsB;IACtB,KAAK,MAAM,KAAK,IAAI,sBAAsB,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CACT,SAAS,CACP,2BAA2B,KAAK,GAAG,EACnC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EACjC,2DAA2D,CAC5D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,sBAAsB,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CACT,SAAS,CACP,kBAAkB,GAAG,GAAG,EACxB,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EACjC,iGAAiG,CAClG,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,gEAAgE;IAChE,oEAAoE;IACpE,SAAS;IACT,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAEpD,MAAM,cAAc,GAAG,SAAS,CAC9B,gBAAgB,EAChB,GAAG,CAAC,gBAAgB,CAAC,EACrB,uBAAuB,EACvB,MAAM,CACP,CAAC;IACF,MAAM,iBAAiB,GAAG,SAAS,CACjC,mBAAmB,EACnB,GAAG,CAAC,mBAAmB,CAAC,EACxB,0BAA0B,EAC1B,MAAM,CACP,CAAC;IACF,MAAM,gBAAgB,GAAG,SAAS,CAChC,kBAAkB,EAClB,GAAG,CAAC,kBAAkB,CAAC,EACvB,yBAAyB,EACzB,MAAM,CACP,CAAC;IACF,MAAM,aAAa,GAAG,SAAS,CAC7B,eAAe,EACf,GAAG,CAAC,eAAe,CAAC,EACpB,sBAAsB,EACtB,MAAM,CACP,CAAC;IACF,MAAM,oBAAoB,GAAG,SAAS,CACpC,sBAAsB,EACtB,GAAG,CAAC,sBAAsB,CAAC,EAC3B,6BAA6B,EAC7B,MAAM,CACP,CAAC;IACF,MAAM,iBAAiB,GAAG,SAAS,CACjC,mBAAmB,EACnB,GAAG,CAAC,mBAAmB,CAAC,EACxB,0BAA0B,EAC1B,MAAM,CACP,CAAC;IAEF,4DAA4D;IAC5D,kEAAkE;IAClE,iEAAiE;IACjE,+DAA+D;IAC/D,iCAAiC;IACjC,MAAM,yBAAyB,GAAG,SAAS,CACzC,2BAA2B,EAC3B,GAAG,CAAC,2BAA2B,CAAC,EAChC,+BAA+B,EAC/B,MAAM,CACP,CAAC;IAEF,MAAM,KAAK,GAAG,SAAS,CACrB,OAAO,EACP,GAAG,CAAC,OAAO,CAAC,EACZ,uBAAuB,EACvB,MAAM,CACP,CAAC;IAEF,MAAM,oBAAoB,GAAG,SAAS,CACpC,sBAAsB,EACtB,GAAG,CAAC,sBAAsB,CAAC,EAC3B,WAAW,EACX,MAAM,CACP,CAAC;IAEF,MAAM,qBAAqB,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACvD,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CACT,SAAS,CACP,0CAA0C,OAAO,qBAAqB,GAAG,EACzE,gFAAgF,EAChF,0DAA0D,CAC3D,CACF,CAAC;IACJ,CAAC;SAAM,IAAI,qBAAqB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,oCAAoC,EACpC,0DAA0D,CAC3D,CACF,CAAC;IACJ,CAAC;IAED,IACE,MAAM,CAAC,MAAM,GAAG,CAAC;WACd,cAAc,KAAK,IAAI;WACvB,iBAAiB,KAAK,IAAI;WAC1B,gBAAgB,KAAK,IAAI;WACzB,aAAa,KAAK,IAAI;WACtB,oBAAoB,KAAK,IAAI;WAC7B,iBAAiB,KAAK,IAAI;WAC1B,yBAAyB,KAAK,IAAI;WAClC,KAAK,KAAK,IAAI;WACd,oBAAoB,KAAK,IAAI,EAChC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,cAAc;YACd,iBAAiB;YACjB,gBAAgB;YAChB,aAAa;YACb,oBAAoB;YACpB,iBAAiB;YACjB,yBAAyB;YACzB,KAAK;YACL,oBAAoB;YACpB,iBAAiB,EAAG,qBAAgC,CAAC,IAAI,EAAE;SAC5D;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,6BAA6B,OAAO,GAAG,GAAG,EAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,6CAA6C,CAAC,EAAE,CAAC;IACvK,CAAC;IACD,IAAI,CAAE,sBAA4C,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,SAAS,GAAG,iCAAiC,EAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,0EAA0E,CAAC,EAAE,CAAC;IACvM,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAA0B,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,wBAAwB;IACxB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;QAChD,IAAK,sBAA4C,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACtE,OAAO,SAAgC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wDAAwD;IACxD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,IAAK,sBAA4C,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,KAA4B,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/daemon/dist/domain/rigspec-instantiator.d.ts

@@ -90,7 +90,7 @@ export type MaterializeOutcome = {
 export interface LaunchMaterializedNodeResult {
     logicalId: string;
     nodeId: string;
-    status: "launched" | "failed";
+    status: "launched" | "failed" | "attention_required";
     error?: string;
     sessionName?: string;
 }

package/daemon/dist/domain/rigspec-instantiator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rigspec-instantiator.d.ts","sourceRoot":"","sources":["../../src/domain/rigspec-instantiator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI/D,OAAO,KAAK,EAAE,aAAa,IAAI,OAAO,EAAoC,kBAAkB,EAAqB,MAAM,YAAY,CAAC;AAMpI,UAAU,mBAAmB;IAC3B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,CAAC,EAAE,OAAO,qBAAqB,EAAE,WAAW,CAAC;CACzD;AAED,qBAAa,eAAe;IAC1B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,SAAS,CAAmB;IACpC,OAAO,CAAC,WAAW,CAAC,CAA4C;gBAEpD,IAAI,EAAE,mBAAmB;IA0B/B,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAiJ7D,OAAO,CAAC,kBAAkB;CAqE3B;AAOD,OAAO,EAAmB,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAI/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAoC,MAAM,sBAAsB,CAAC;AAE7F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,UAAU,mBAAmB;IAC3B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,YAAY,CAAC;IAC3B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;0EAGsE;IACtE,kBAAkB,CAAC,EAAE,OAAO,iDAAiD,EAAE,yBAAyB,CAAC;IACzG;;;oEAGgE;IAChE,iBAAiB,CAAC,EAAE,OAAO,+CAA+C,EAAE,wBAAwB,CAAC;CACtG;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;CAC7D;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE;QAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,GACpF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAsB;gBAEtB,IAAI,EAAE,mBAAmB;IAS/B,WAAW,CACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GACpF,OAAO,CAAC,kBAAkB,CAAC;IAqKxB,kBAAkB,CACtB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,yBAAyB,CAAC;IA0F/B,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,GAAG;YAAE,EAAE,EAAE,KAAK,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA6N9N,OAAO,CAAC,qBAAqB;YA8Df,qBAAqB;IAwDnC,OAAO,CAAC,iBAAiB;YAWX,yBAAyB;YA8OzB,4BAA4B;IAuF1C,OAAO,CAAC,wBAAwB;IA6BhC,OAAO,CAAC,iCAAiC;IA2CzC,OAAO,CAAC,yBAAyB;IAmEjC;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,kBAAkB;IA+C1B,OAAO,CAAC,kCAAkC;IAiB1C,OAAO,CAAC,0BAA0B;IAmClC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;CAYzB"}
+{"version":3,"file":"rigspec-instantiator.d.ts","sourceRoot":"","sources":["../../src/domain/rigspec-instantiator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI/D,OAAO,KAAK,EAAE,aAAa,IAAI,OAAO,EAAoC,kBAAkB,EAAqB,MAAM,YAAY,CAAC;AAMpI,UAAU,mBAAmB;IAC3B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,YAAY,CAAC;IAC3B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,CAAC,EAAE,OAAO,qBAAqB,EAAE,WAAW,CAAC;CACzD;AAED,qBAAa,eAAe;IAC1B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,SAAS,CAAmB;IACpC,OAAO,CAAC,WAAW,CAAC,CAA4C;gBAEpD,IAAI,EAAE,mBAAmB;IA0B/B,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAiJ7D,OAAO,CAAC,kBAAkB;CAqE3B;AAOD,OAAO,EAAmB,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAI/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAoC,MAAM,sBAAsB,CAAC;AAE7F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,UAAU,mBAAmB;IAC3B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,YAAY,CAAC;IAC3B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACzC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;0EAGsE;IACtE,kBAAkB,CAAC,EAAE,OAAO,iDAAiD,EAAE,yBAAyB,CAAC;IACzG;;;oEAGgE;IAChE,iBAAiB,CAAC,EAAE,OAAO,+CAA+C,EAAE,wBAAwB,CAAC;CACtG;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;CAC7D;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,oBAAoB,CAAC;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE;QAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,GACpF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAC1D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,IAAI,CAAsB;gBAEtB,IAAI,EAAE,mBAAmB;IAS/B,WAAW,CACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GACpF,OAAO,CAAC,kBAAkB,CAAC;IAqKxB,kBAAkB,CACtB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,yBAAyB,CAAC;IA0F/B,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,IAAI,CAAA;SAAE,GAAG;YAAE,EAAE,EAAE,KAAK,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAmS9N,OAAO,CAAC,qBAAqB;YA8Df,qBAAqB;IAwDnC,OAAO,CAAC,iBAAiB;YAWX,yBAAyB;YAqQzB,4BAA4B;IAuF1C,OAAO,CAAC,wBAAwB;IA6BhC,OAAO,CAAC,iCAAiC;IA2CzC,OAAO,CAAC,yBAAyB;IAmEjC;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,kBAAkB;IA+C1B,OAAO,CAAC,kCAAkC;IAiB1C,OAAO,CAAC,0BAA0B;IAmClC;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;CAYzB"}

package/daemon/dist/domain/rigspec-instantiator.js

@@ -515,7 +515,21 @@ export class PodRigInstantiator {
         if (!preflight.ready) {
             return { ok: false, code: "preflight_failed", errors: preflight.errors, warnings: preflight.warnings };
         }
-        // 3. Create rig
+        // 3. Compute launch order from edges (rejects cycles)
+        //
+        // OPR.0.3.2.22 Bug 2: this MUST run BEFORE createRig. Pre-fix, a
+        // cycle in the spec left an orphan stopped-state rig record because
+        // createRig had already committed before the cycle check ran. The
+        // operator-facing consequence was the "ambiguous library-spec vs
+        // restore-target" UX trap on the very next `rig up <builtin>` retry.
+        let launchOrder;
+        try {
+            launchOrder = this.computePodLaunchOrder(rigSpec);
+        }
+        catch (err) {
+            return { ok: false, code: "cycle_error", message: err.message };
+        }
+        // 4. Create rig (after cycle check passes)
         let rigId;
         try {
             const rig = this.deps.rigRepo.createRig(rigSpec.name);
@@ -529,14 +543,6 @@ export class PodRigInstantiator {
         catch (err) {
             return { ok: false, code: "instantiate_error", message: err.message };
         }
-        // 4. Compute launch order from edges (rejects cycles)
-        let launchOrder;
-        try {
-            launchOrder = this.computePodLaunchOrder(rigSpec);
-        }
-        catch (err) {
-            return { ok: false, code: "cycle_error", message: err.message };
-        }
         // 5. Create pods + nodes + edges, then launch in topological order
         const nodeResults = [];
         const nodeIdMap = {}; // "pod.member" -> node DB id
@@ -568,10 +574,15 @@ export class PodRigInstantiator {
         // Sort members by topological launch order
         const orderMap = new Map(launchOrder.map((id, i) => [id, i]));
         memberEntries.sort((a, b) => (orderMap.get(a.qualifiedId) ?? 999) - (orderMap.get(b.qualifiedId) ?? 999));
-        // Prelaunch hook: service gate runs after topology setup, before any node launch
+        // Prelaunch hook: service gate runs after topology setup, before any node launch.
+        //
+        // OPR.0.3.2.22 Bug 2: if the hook fails, roll back the rig record so
+        // the spec name is left free for a clean retry. Pods rely on rigs
+        // via ON DELETE CASCADE so deleting the rig is sufficient.
         if (opts?.prelaunchHook) {
             const hookResult = await opts.prelaunchHook(rigId);
             if (!hookResult.ok) {
+                this.deps.rigRepo.deleteRig(rigId);
                 return { ok: false, code: "service_boot_failed", message: hookResult.message };
             }
         }
@@ -654,6 +665,8 @@ export class PodRigInstantiator {
                 logicalId: qualifiedId,
                 status: launched.status,
                 error: launched.error,
+                evidence: launched.evidence,
+                sessionName: launched.sessionName,
             });
         }
         // Create pod-local edges (after all members created)
@@ -680,9 +693,23 @@ export class PodRigInstantiator {
                 catch { /* best-effort */ }
             }
         }
-        // Check for total failure — kill orphan tmux sessions and clean up rig
-        const allFailed = nodeResults.length > 0 && nodeResults.every((n) => n.status === "failed");
-        if (allFailed) {
+        // OPR.0.3.2.CT (conveyor-trust-minimal-fix):
+        // Distinguish recoverable attention_required (e.g., workspace trust
+        // gate) from terminal failure. ANY attention_required node means
+        // the rig is operator-recoverable — do NOT tear down. Only when
+        // every node is TERMINALLY failed (status === "failed") does the
+        // tear-down run, preserving the existing failure-cleanup behavior.
+        //
+        // For all-attention_required (no successful launch, no terminal
+        // failure), surface an attention_required outcome that carries
+        // the actionable per-node detail. The route returns a 3-part
+        // error pointing the operator at the approve→resume path. Sessions
+        // remain in startup_status='attention_required' so `rig ps` lists
+        // them and tmux panes are NOT killed.
+        const hasAttention = nodeResults.some((n) => n.status === "attention_required");
+        const hasLaunched = nodeResults.some((n) => n.status === "launched");
+        const allTerminal = nodeResults.length > 0 && nodeResults.every((n) => n.status === "failed");
+        if (allTerminal) {
             // Kill orphan tmux sessions
             if (this.deps.tmuxAdapter) {
                 for (const sessionName of launchedSessionNames) {
@@ -699,14 +726,55 @@ export class PodRigInstantiator {
             const details = nodeResults.map((n) => `${n.logicalId}: ${n.error ?? "unknown"}`).join("; ");
             return { ok: false, code: "instantiate_error", message: `all node launches/startups failed — ${details}` };
         }
+        if (hasAttention && !hasLaunched) {
+            // All-attention_required path — rig + sessions PRESERVED; no
+            // tear-down. The operator's path: attach to a session via
+            // `tmux attach -t <session>` and answer the runtime prompt. NO
+            // new trust primitive
+            // introduced (HG-5); reuses the runtime's shipped in-pane
+            // trust-grant prompt.
+            const attentionNodes = nodeResults
+                .filter((n) => n.status === "attention_required")
+                .map((n) => ({
+                logicalId: n.logicalId,
+                sessionName: n.sessionName ?? "",
+                evidence: n.evidence,
+                reason: n.error ?? "node awaiting attention",
+            }));
+            // Emit rig.imported so callers see the rig exists; nodes are
+            // attention_required, not "launched", so `rig ps` shows the
+            // correct lifecycle state.
+            try {
+                this.deps.eventBus.emit({ type: "rig.imported", rigId, specName: rigSpec.name, specVersion: rigSpec.version });
+            }
+            catch { /* best-effort */ }
+            return {
+                ok: false,
+                code: "attention_required",
+                message: `${attentionNodes.length} node${attentionNodes.length === 1 ? "" : "s"} require attention before becoming interactive (rig parked, NOT failed; approve and resume to proceed).`,
+                rigId,
+                attentionNodes,
+            };
+        }
         // Emit rig.imported
         try {
             this.deps.eventBus.emit({ type: "rig.imported", rigId, specName: rigSpec.name, specVersion: rigSpec.version });
         }
         catch { /* best-effort */ }
+        // Carry sessionName + evidence through to InstantiateResult.nodes
+        // so BootstrapOrchestrator can build AttentionNode[] in the mixed
+        // launched+attention_required path (guard verdict
+        // qitem-20260518082933 BLOCKER 1).
+        const resultNodes = nodeResults.map((n) => ({
+            logicalId: n.logicalId,
+            status: n.status,
+            error: n.error,
+            sessionName: n.sessionName,
+            evidence: n.evidence,
+        }));
         return {
             ok: true,
-            result: { rigId, specName: rigSpec.name, specVersion: rigSpec.version, nodes: nodeResults, warnings: podInstantiateWarnings.length > 0 ? podInstantiateWarnings : undefined },
+            result: { rigId, specName: rigSpec.name, specVersion: rigSpec.version, nodes: resultNodes, warnings: podInstantiateWarnings.length > 0 ? podInstantiateWarnings : undefined },
         };
     }
     computePodLaunchOrder(rigSpec) {
@@ -854,7 +922,16 @@ export class PodRigInstantiator {
             return { status: "failed", error: sessionNameErrors.join("; ") };
         }
         const canonicalSessionName = deriveCanonicalSessionName(input.pod.id, input.member.id, input.rigSpec.name);
-        const launchResult = await this.deps.nodeLauncher.launchNode(input.rigId, input.qualifiedId, { sessionName: canonicalSessionName });
+        // Slice 15 — forward per-seat silenceWindowSeconds from the resolved
+        // profile.activity block. NodeLauncher applies the launcher default
+        // (3s) when this is undefined. The seat's tmux monitor-silence is
+        // configured immediately after createSession; SeatActivityService
+        // then reads window_activity to compute terminalActive against this
+        // threshold per poll.
+        const launchResult = await this.deps.nodeLauncher.launchNode(input.rigId, input.qualifiedId, {
+            sessionName: canonicalSessionName,
+            silenceWindowSeconds: configResult.config.activity?.silenceWindowSeconds,
+        });
         if (!launchResult.ok) {
             return { status: "failed", error: launchResult.message };
         }
@@ -920,7 +997,8 @@ export class PodRigInstantiator {
         else if (input.member.sessionSource?.mode === "agent_image") {
             // PL-016 Item 4: agent_image → resolve via library + dispatch
             // through the native-fork code path so nativeResumeProbe
-            // semantics are preserved (architecture.md § Resume honesty).
+            // semantics are preserved
+            // (docs/as-built/architecture/adapters-and-runtimes.md § Resume honesty).
             const library = this.deps.agentImageLibrary;
             if (!library) {
                 return {
@@ -1028,9 +1106,22 @@ export class PodRigInstantiator {
                 console.warn(`[openrig] agent-image fork_count bump failed for ${consumedAgentImageId}: ${err.message}`);
             }
         }
+        // OPR.0.3.2.CT — preserve the attention_required distinction so
+        // the instantiator can leave a recoverable rig + sessions instead
+        // of zero-collapsing. The session row's startup_status was already
+        // persisted by startupOrchestrator.fail() (see startup-orchestrator.ts
+        // lines 223-225, 241-243).
+        if (startupResult.ok) {
+            return {
+                status: "launched",
+                sessionName: canonicalSessionName,
+                warnings: launchResult.warnings,
+            };
+        }
         return {
-            status: startupResult.ok ? "launched" : "failed",
-            error: startupResult.ok ? undefined : startupResult.errors.join("; "),
+            status: startupResult.startupStatus === "attention_required" ? "attention_required" : "failed",
+            error: startupResult.errors.join("; "),
+            evidence: startupResult.evidence,
             sessionName: canonicalSessionName,
             warnings: launchResult.warnings,
         };