@openrig/cli 0.4.2 → 0.4.4

package/daemon/dist/domain/hosts/hosts-registry-reader.d.ts

@@ -0,0 +1,49 @@
+export interface SshHostEntry {
+    id: string;
+    transport: "ssh";
+    target: string;
+    user?: string;
+    notes?: string;
+}
+export interface HttpHostEntry {
+    id: string;
+    transport: "http";
+    url: string;
+    bearer_env?: string;
+    bearer_file?: string;
+    notes?: string;
+}
+export type HostEntry = SshHostEntry | HttpHostEntry;
+export interface HostRegistry {
+    hosts: HostEntry[];
+}
+export type HostRegistryLoadResult = {
+    ok: true;
+    registry: HostRegistry;
+} | {
+    ok: false;
+    error: string;
+};
+export type HostResolution = {
+    ok: true;
+    host: HostEntry;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function defaultHostRegistryPath(): string;
+/** Load + validate the operator's hosts registry (read-only). Mirrors the CLI
+ *  loader's error surfaces so operators see one vocabulary everywhere. */
+export declare function loadHostRegistry(path?: string): HostRegistryLoadResult;
+export declare function validateHostRegistry(parsed: unknown, sourcePath: string): HostRegistryLoadResult;
+/** Resolve a host id for placement. Unknown id names the requested id and
+ *  lists up to 10 known ids — the FR-4 per-entry validation message rides
+ *  this (what/why/fix, before any launch attempt). */
+export declare function resolveHost(registry: HostRegistry, id: string): HostResolution;
+/** FR-4: placement requires a transport that can carry remote-up. v0 that is
+ *  the http transport (the shipped remote single-rig leaf is POST /api/up
+ *  over runRemoteHttpOp); ssh-transport hosts are reachable for send/capture
+ *  but cannot carry remote-up — a structured per-entry error, not a launch
+ *  attempt. */
+export declare function resolvePlacementHost(registry: HostRegistry, id: string): HostResolution;
+//# sourceMappingURL=hosts-registry-reader.d.ts.map

package/daemon/dist/domain/hosts/hosts-registry-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts-registry-reader.d.ts","sourceRoot":"","sources":["../../../src/domain/hosts/hosts-registry-reader.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,KAAK,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,aAAa,CAAC;AAErD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,SAAS,EAAE,CAAC;CACpB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAIjC,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED;0EAC0E;AAC1E,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAkC,GAAG,sBAAsB,CAoBjG;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,sBAAsB,CAuFhG;AAED;;sDAEsD;AACtD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,cAAc,CAW9E;AAED;;;;eAIe;AACf,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,cAAc,CAUvF"}

package/daemon/dist/domain/hosts/hosts-registry-reader.js

@@ -0,0 +1,165 @@
+// OPR.0.4.4.11 — the SHARED daemon-side hosts-registry read module (the P3/P4
+// interface cell, pm-lead ruling c): P3 uses it for topology placement
+// resolution + validation messages; P4's fan-out aggregation consumes the
+// SAME module. Land once, here; P4 must not re-implement it.
+//
+// READ-ONLY FOREVER (arch ruling 3): the registry is operator-managed YAML at
+// ~/.openrig/hosts.yaml; nothing in the daemon ever writes it. This module
+// MIRRORS the CLI's packages/cli/src/host-registry.ts schema + validation
+// (incl. the exactly-one-bearer rule) — the CLI copy is deliberately
+// untouched this slice (no-unification boundary); the twin is held in sync by
+// packages/daemon/test/hosts-registry-parity.test.ts, the same discipline as
+// the scope-audit CLI/daemon twins.
+import { existsSync, readFileSync } from "node:fs";
+import { parse as parseYaml } from "yaml";
+import { getDefaultOpenRigPath } from "../../openrig-compat.js";
+const KNOWN_TRANSPORTS = new Set(["ssh", "http"]);
+export function defaultHostRegistryPath() {
+    return getDefaultOpenRigPath("hosts.yaml");
+}
+/** Load + validate the operator's hosts registry (read-only). Mirrors the CLI
+ *  loader's error surfaces so operators see one vocabulary everywhere. */
+export function loadHostRegistry(path = defaultHostRegistryPath()) {
+    if (!existsSync(path)) {
+        return {
+            ok: false,
+            error: `host registry not found at ${path}. Create it with a 'hosts:' array; transport: ssh (target + user) or http (url + bearer_env/bearer_file).`,
+        };
+    }
+    let raw;
+    try {
+        raw = readFileSync(path, "utf-8");
+    }
+    catch (err) {
+        return { ok: false, error: `failed to read host registry at ${path}: ${err.message}` };
+    }
+    let parsed;
+    try {
+        parsed = parseYaml(raw);
+    }
+    catch (err) {
+        return { ok: false, error: `failed to parse host registry YAML at ${path}: ${err.message}` };
+    }
+    return validateHostRegistry(parsed, path);
+}
+export function validateHostRegistry(parsed, sourcePath) {
+    if (parsed === null || typeof parsed !== "object") {
+        return { ok: false, error: `host registry at ${sourcePath} must be a YAML object with a 'hosts' array` };
+    }
+    const obj = parsed;
+    const hosts = obj["hosts"];
+    if (!Array.isArray(hosts)) {
+        return { ok: false, error: `host registry at ${sourcePath}: 'hosts' must be an array` };
+    }
+    const seenIds = new Set();
+    const validated = [];
+    for (let i = 0; i < hosts.length; i++) {
+        const raw = hosts[i];
+        const prefix = `host registry at ${sourcePath}: hosts[${i}]`;
+        if (raw === null || typeof raw !== "object") {
+            return { ok: false, error: `${prefix}: must be an object with id/transport/target` };
+        }
+        const entry = raw;
+        const id = entry["id"];
+        if (typeof id !== "string" || id.trim() === "") {
+            return { ok: false, error: `${prefix}.id: required non-empty string` };
+        }
+        if (seenIds.has(id)) {
+            return { ok: false, error: `${prefix}.id: duplicate host id '${id}' (each host id must be unique within the registry)` };
+        }
+        seenIds.add(id);
+        const transport = entry["transport"];
+        if (typeof transport !== "string" || !KNOWN_TRANSPORTS.has(transport)) {
+            return {
+                ok: false,
+                error: `${prefix}.transport: must be one of ${[...KNOWN_TRANSPORTS].sort().join(", ")} (got ${JSON.stringify(transport)})`,
+            };
+        }
+        const notes = entry["notes"];
+        if (notes !== undefined && typeof notes !== "string") {
+            return { ok: false, error: `${prefix}.notes: optional, but if present must be a string` };
+        }
+        if (transport === "ssh") {
+            const target = entry["target"];
+            if (typeof target !== "string" || target.trim() === "") {
+                return { ok: false, error: `${prefix}.target: required non-empty string (an ssh target)` };
+            }
+            const user = entry["user"];
+            if (user !== undefined && (typeof user !== "string" || user.trim() === "")) {
+                return { ok: false, error: `${prefix}.user: optional, but if present must be a non-empty string` };
+            }
+            validated.push({
+                id,
+                transport: "ssh",
+                target,
+                ...(user !== undefined ? { user: user } : {}),
+                ...(notes !== undefined ? { notes: notes } : {}),
+            });
+        }
+        else if (transport === "http") {
+            const url = entry["url"];
+            if (typeof url !== "string" || url.trim() === "") {
+                return { ok: false, error: `${prefix}.url: required non-empty string (the remote daemon's base URL)` };
+            }
+            const bearerEnv = entry["bearer_env"];
+            const bearerFile = entry["bearer_file"];
+            const hasEnv = bearerEnv !== undefined;
+            const hasFile = bearerFile !== undefined;
+            if (!hasEnv && !hasFile) {
+                return { ok: false, error: `${prefix}: http transport requires exactly one of bearer_env or bearer_file` };
+            }
+            if (hasEnv && hasFile) {
+                return { ok: false, error: `${prefix}: specify exactly one of bearer_env or bearer_file, not both` };
+            }
+            if (hasEnv && (typeof bearerEnv !== "string" || bearerEnv.trim() === "")) {
+                return { ok: false, error: `${prefix}.bearer_env: must be a non-empty env var name` };
+            }
+            if (hasFile && (typeof bearerFile !== "string" || bearerFile.trim() === "")) {
+                return { ok: false, error: `${prefix}.bearer_file: must be a non-empty file path` };
+            }
+            validated.push({
+                id,
+                transport: "http",
+                url: url,
+                ...(hasEnv ? { bearer_env: bearerEnv } : {}),
+                ...(hasFile ? { bearer_file: bearerFile } : {}),
+                ...(notes !== undefined ? { notes: notes } : {}),
+            });
+        }
+    }
+    return { ok: true, registry: { hosts: validated } };
+}
+/** Resolve a host id for placement. Unknown id names the requested id and
+ *  lists up to 10 known ids — the FR-4 per-entry validation message rides
+ *  this (what/why/fix, before any launch attempt). */
+export function resolveHost(registry, id) {
+    const match = registry.hosts.find((h) => h.id === id);
+    if (match)
+        return { ok: true, host: match };
+    const knownIds = registry.hosts.map((h) => h.id).slice(0, 10);
+    const idsHint = knownIds.length > 0
+        ? ` Known host ids: ${knownIds.join(", ")}${registry.hosts.length > knownIds.length ? ` (+${registry.hosts.length - knownIds.length} more)` : ""}.`
+        : " (registry is empty)";
+    return {
+        ok: false,
+        error: `unknown host id '${id}'.${idsHint}`,
+    };
+}
+/** FR-4: placement requires a transport that can carry remote-up. v0 that is
+ *  the http transport (the shipped remote single-rig leaf is POST /api/up
+ *  over runRemoteHttpOp); ssh-transport hosts are reachable for send/capture
+ *  but cannot carry remote-up — a structured per-entry error, not a launch
+ *  attempt. */
+export function resolvePlacementHost(registry, id) {
+    const res = resolveHost(registry, id);
+    if (!res.ok)
+        return res;
+    if (res.host.transport !== "http") {
+        return {
+            ok: false,
+            error: `host '${id}' uses transport '${res.host.transport}', which cannot carry remote rig-up. Placement requires an http-transport host (url + bearer_env/bearer_file) — update the registry entry or launch that rig locally.`,
+        };
+    }
+    return res;
+}
+//# sourceMappingURL=hosts-registry-reader.js.map

package/daemon/dist/domain/hosts/hosts-registry-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts-registry-reader.js","sourceRoot":"","sources":["../../../src/domain/hosts/hosts-registry-reader.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,uEAAuE;AACvE,0EAA0E;AAC1E,6DAA6D;AAC7D,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,qEAAqE;AACrE,8EAA8E;AAC9E,6EAA6E;AAC7E,oCAAoC;AAEpC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAiChE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAElD,MAAM,UAAU,uBAAuB;IACrC,OAAO,qBAAqB,CAAC,YAAY,CAAC,CAAC;AAC7C,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,OAAe,uBAAuB,EAAE;IACvE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,8BAA8B,IAAI,2GAA2G;SACrJ,CAAC;IACJ,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1G,CAAC;IACD,OAAO,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAe,EAAE,UAAkB;IACtE,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,UAAU,6CAA6C,EAAE,CAAC;IAC3G,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,UAAU,4BAA4B,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,SAAS,GAAgB,EAAE,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,oBAAoB,UAAU,WAAW,CAAC,GAAG,CAAC;QAC7D,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,8CAA8C,EAAE,CAAC;QACvF,CAAC;QACD,MAAM,KAAK,GAAG,GAA8B,CAAC;QAC7C,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,gCAAgC,EAAE,CAAC;QACzE,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,2BAA2B,EAAE,qDAAqD,EAAE,CAAC;QAC3H,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACtE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,MAAM,8BAA8B,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG;aAC3H,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,mDAAmD,EAAE,CAAC;QAC5F,CAAC;QAED,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,oDAAoD,EAAE,CAAC;YAC7F,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,4DAA4D,EAAE,CAAC;YACrG,CAAC;YACD,SAAS,CAAC,IAAI,CAAC;gBACb,EAAE;gBACF,SAAS,EAAE,KAAK;gBAChB,MAAM;gBACN,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,gEAAgE,EAAE,CAAC;YACzG,CAAC;YACD,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC;YACtC,MAAM,UAAU,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,SAAS,KAAK,SAAS,CAAC;YACvC,MAAM,OAAO,GAAG,UAAU,KAAK,SAAS,CAAC;YACzC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,oEAAoE,EAAE,CAAC;YAC7G,CAAC;YACD,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;gBACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,8DAA8D,EAAE,CAAC;YACvG,CAAC;YACD,IAAI,MAAM,IAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,+CAA+C,EAAE,CAAC;YACxF,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,6CAA6C,EAAE,CAAC;YACtF,CAAC;YACD,SAAS,CAAC,IAAI,CAAC;gBACb,EAAE;gBACF,SAAS,EAAE,MAAM;gBACjB,GAAG,EAAE,GAAa;gBAClB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;AACtD,CAAC;AAED;;sDAEsD;AACtD,MAAM,UAAU,WAAW,CAAC,QAAsB,EAAE,EAAU;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,oBAAoB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG;QACnJ,CAAC,CAAC,sBAAsB,CAAC;IAC3B,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,oBAAoB,EAAE,KAAK,OAAO,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED;;;;eAIe;AACf,MAAM,UAAU,oBAAoB,CAAC,QAAsB,EAAE,EAAU;IACrE,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,SAAS,EAAE,qBAAqB,GAAG,CAAC,IAAI,CAAC,SAAS,uKAAuK;SACjO,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/daemon/dist/domain/hosts/remote-daemon-http.d.ts

@@ -0,0 +1,35 @@
+import type { HttpHostEntry } from "./hosts-registry-reader.js";
+export interface RemoteJsonDeps {
+    /** Injected for tests; defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+    env?: Record<string, string | undefined>;
+    readFile?: (path: string) => string;
+}
+export interface RemoteJsonOptions extends RemoteJsonDeps {
+    method: "GET" | "POST";
+    body?: unknown;
+    /** REQUIRED — the caller names its deadline class explicitly. */
+    timeoutMs: number;
+}
+export type RemoteJsonFailureKind = "bearer" | "timeout" | "network" | "http";
+export interface RemoteJsonFailure {
+    ok: false;
+    kind: RemoteJsonFailureKind;
+    /** For kind=timeout: whether the deadline fired before headers
+     *  ("request") or while reading the body ("body"). */
+    phase?: "request" | "body";
+    /** HTTP status when headers arrived (kind=http, or kind=timeout/phase=body). */
+    status?: number;
+    /** Bearer message / network error message / remote error text (may be ""). */
+    detail: string;
+}
+export type RemoteJsonResult = {
+    ok: true;
+    status: number;
+    payload: unknown;
+} | RemoteJsonFailure;
+/** One bounded daemon→daemon JSON exchange. The single deadline covers
+ *  request + body; every outcome is structured — this function never hangs
+ *  and never throws. */
+export declare function remoteJsonRequest(host: HttpHostEntry, path: string, opts: RemoteJsonOptions): Promise<RemoteJsonResult>;
+//# sourceMappingURL=remote-daemon-http.d.ts.map

package/daemon/dist/domain/hosts/remote-daemon-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-daemon-http.d.ts","sourceRoot":"","sources":["../../../src/domain/hosts/remote-daemon-http.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;AAE9E,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,qBAAqB,CAAC;IAC5B;0DACsD;IACtD,KAAK,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC3B,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG,iBAAiB,CAAC;AAwBlG;;wBAEwB;AACxB,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmD7H"}

package/daemon/dist/domain/hosts/remote-daemon-http.js

@@ -0,0 +1,105 @@
+// OPR.0.4.4.15 — the SHARED daemon→daemon HTTP core (arch cell 1, RATIFIED).
+//
+// Extracted from topology/remote-up-leaf.ts so the P4 aggregation fan-out
+// does not mint a second copy of security-adjacent transport code (bearer
+// resolution + bounded-abort discipline + status classification). The
+// up-leaf is now a thin consumer that FORMATS this module's structured
+// result into its shipped error strings (its tests byte-preserved).
+//
+// DEADLINE IS A REQUIRED ARGUMENT (arch sharpening, no module default):
+// the up-leaf passes its 120s long-running rig-up budget at ITS call-site;
+// the attention aggregator passes its 5s read-class deadline at ITS
+// call-site. A buried default would invite the next consumer to silently
+// inherit the wrong class.
+//
+// The G-R2B1-1 discipline is structural here: ONE deadline armed through
+// the WHOLE exchange — request AND body parse (2xx or error body). A host
+// that sends headers and never finishes the body yields a structured
+// timeout, never a hung caller. The body race is explicit against the
+// signal (a hand-built/proxied Response is not necessarily wired to the
+// controller — no trust in fetch internals).
+import { readFileSync } from "node:fs";
+/** Mirrors the CLI's resolveRemoteBearer (host-registry.ts): exactly-one of
+ *  bearer_env / bearer_file, resolved at call time. */
+function resolveBearer(host, deps) {
+    const env = deps.env ?? process.env;
+    const readFile = deps.readFile ?? ((p) => readFileSync(p, "utf-8"));
+    if (host.bearer_env) {
+        const token = env[host.bearer_env]?.trim();
+        if (token)
+            return { ok: true, token };
+        return { ok: false, detail: `bearer env var ${host.bearer_env} is not set or empty for host ${host.id}` };
+    }
+    if (host.bearer_file) {
+        try {
+            const token = readFile(host.bearer_file).trim();
+            if (token)
+                return { ok: true, token };
+            return { ok: false, detail: `bearer file ${host.bearer_file} is empty for host ${host.id}` };
+        }
+        catch {
+            return { ok: false, detail: `bearer file ${host.bearer_file} not readable for host ${host.id}` };
+        }
+    }
+    return { ok: false, detail: `host ${host.id} has no bearer_env or bearer_file configured` };
+}
+/** One bounded daemon→daemon JSON exchange. The single deadline covers
+ *  request + body; every outcome is structured — this function never hangs
+ *  and never throws. */
+export async function remoteJsonRequest(host, path, opts) {
+    const bearer = resolveBearer(host, opts);
+    if (!bearer.ok)
+        return { ok: false, kind: "bearer", detail: bearer.detail };
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const url = `${host.url.replace(/\/$/, "")}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), opts.timeoutMs);
+    let res;
+    try {
+        res = await fetchImpl(url, {
+            method: opts.method,
+            headers: {
+                ...(opts.body !== undefined ? { "Content-Type": "application/json" } : {}),
+                Authorization: `Bearer ${bearer.token}`,
+            },
+            ...(opts.body !== undefined ? { body: JSON.stringify(opts.body) } : {}),
+            signal: controller.signal,
+        });
+    }
+    catch (err) {
+        clearTimeout(timer);
+        if (controller.signal.aborted)
+            return { ok: false, kind: "timeout", phase: "request", detail: "" };
+        return { ok: false, kind: "network", detail: err.message };
+    }
+    // Body parse under the SAME still-armed deadline, raced explicitly.
+    const abortRace = new Promise((_resolve, reject) => {
+        const onAbort = () => reject(new Error("body read aborted"));
+        if (controller.signal.aborted)
+            onAbort();
+        else
+            controller.signal.addEventListener("abort", onAbort, { once: true });
+    });
+    let payload;
+    let bodyTimedOut = false;
+    try {
+        payload = await Promise.race([res.json(), abortRace]);
+    }
+    catch {
+        if (controller.signal.aborted)
+            bodyTimedOut = true;
+        // else: non-JSON body — payload stays undefined; status is the honest detail
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    if (bodyTimedOut)
+        return { ok: false, kind: "timeout", phase: "body", status: res.status, detail: "" };
+    if (res.status >= 200 && res.status < 300)
+        return { ok: true, status: res.status, payload };
+    const remoteError = payload && typeof payload === "object" && typeof payload.error === "string"
+        ? payload.error
+        : "";
+    return { ok: false, kind: "http", status: res.status, detail: remoteError };
+}
+//# sourceMappingURL=remote-daemon-http.js.map

package/daemon/dist/domain/hosts/remote-daemon-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-daemon-http.js","sourceRoot":"","sources":["../../../src/domain/hosts/remote-daemon-http.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,uEAAuE;AACvE,oEAAoE;AACpE,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,oEAAoE;AACpE,yEAAyE;AACzE,2BAA2B;AAC3B,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,qEAAqE;AACrE,sEAAsE;AACtE,wEAAwE;AACxE,6CAA6C;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAiCvC;uDACuD;AACvD,SAAS,aAAa,CAAC,IAAmB,EAAE,IAAoB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,IAAI,CAAC,UAAU,iCAAiC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,IAAI,CAAC,WAAW,sBAAsB,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,IAAI,CAAC,WAAW,0BAA0B,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;QACnG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,EAAE,8CAA8C,EAAE,CAAC;AAC9F,CAAC;AAED;;wBAEwB;AACxB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAmB,EAAE,IAAY,EAAE,IAAuB;IAChG,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAE5E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnE,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;aACxC;YACD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACnG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;;YACpC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,OAAgB,CAAC;IACrB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,YAAY,GAAG,IAAI,CAAC;QACnD,6EAA6E;IAC/E,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAE5F,MAAM,WAAW,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAQ,OAA+B,CAAC,KAAK,KAAK,QAAQ;QACtH,CAAC,CAAE,OAA6B,CAAC,KAAK;QACtC,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC9E,CAAC"}

package/daemon/dist/domain/human-route-enforcer.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Human-route enforcement (OPR.0.4.4.19 FR-4 + FR-5; conventions C6 + C3).
+ *
+ * Sibling of hot-potato-enforcer.ts: a pure domain validator wired at the
+ * QueueRepository write paths (create / handoff / handoff-and-complete, and
+ * the FR-6 park transition) so every surface — CLI, HTTP, future UI —
+ * inherits the same guarantee. NOT enforced at the route, NOT at the CLI.
+ *
+ * THE scoping predicate (PRD §5 — the complete trigger list, BR-1):
+ *
+ *   tier = 'human-gate'
+ *   OR is_human_seat_session(destination_session)
+ *   OR (state = 'blocked' AND is_human_seat_session(blocked_on))   [FR-6]
+ *
+ * When the predicate is FALSE, this module validates NOTHING: ordinary
+ * agent-to-agent queue traffic gains zero new required fields, zero new
+ * rejection paths, zero new warns (BR-1 zero-friction boundary). Do not
+ * broaden the trigger by destination tag, body text, or state alone.
+ */
+/**
+ * The EXACT human-seat regex. Single TS source of truth — the same pattern
+ * QueueRepository registers as the SQLite `is_human_seat_session` function
+ * (queue-repository.ts constructor) so SQL-side and TS-side checks cannot
+ * drift. Mirrors the UI's feed-classifier isHumanSeat.
+ */
+export declare const HUMAN_SEAT_SESSION_PATTERN: RegExp;
+export declare function isHumanSeatSession(value: unknown): boolean;
+export interface HumanRouteRequest {
+    tier: string | null | undefined;
+    destinationSession: string;
+    summary: string | null | undefined;
+    evidenceRef: string | null | undefined;
+}
+export interface HumanRouteValidationOk {
+    ok: true;
+    /** True when the §5 predicate matched (the item is human-routed). */
+    humanRouted: boolean;
+}
+export interface HumanRouteValidationErr {
+    ok: false;
+    code: "human_route_fields_required";
+    message: string;
+    missingFields: string[];
+}
+export type HumanRouteValidation = HumanRouteValidationOk | HumanRouteValidationErr;
+/**
+ * Validate the C6/C3 structure of a NEW qitem (create / the created half of a
+ * handoff). Fires ONLY when the item is human-routed via legs 1–2 of the §5
+ * predicate (human-gate tier, human-seat destination). The park leg
+ * (blocked_on a human seat) is validated by {@link validateHumanPark} at the
+ * blocked-transition write path.
+ */
+export declare function validateHumanRoute(req: HumanRouteRequest): HumanRouteValidation;
+export interface HumanParkRequest {
+    /** The blocker the item is being parked on (qitem id OR human-seat session). */
+    blockedOn: string | null | undefined;
+    /** Effective values at park time: the value provided on the park call,
+     *  falling back to what the item already carries. */
+    summary: string | null | undefined;
+    evidenceRef: string | null | undefined;
+}
+/**
+ * OPR.0.4.4.19 FR-6 — leg-1 park enforcement (§5 predicate leg 3). Fires
+ * ONLY when the blocker is a human seat; blocking on another qitem (today's
+ * shipped usage) requires nothing new. The parked qitem itself — id, slice
+ * tag, summary — IS the what-it-unblocks (arch-ruled: no decision_descriptor
+ * field). Enforcement symmetry: park requires summary + evidence_ref like
+ * FR-7's resolve requires non-empty decision text.
+ */
+export declare function validateHumanPark(req: HumanParkRequest): HumanRouteValidation;
+//# sourceMappingURL=human-route-enforcer.d.ts.map

package/daemon/dist/domain/human-route-enforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"human-route-enforcer.d.ts","sourceRoot":"","sources":["../../src/domain/human-route-enforcer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAA+C,CAAC;AAEvF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE1D;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,IAAI,CAAC;IACT,qEAAqE;IACrE,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,MAAM,oBAAoB,GAAG,sBAAsB,GAAG,uBAAuB,CAAC;AAMpF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,GAAG,oBAAoB,CAQ/E;AAED,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC;yDACqD;IACrD,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,GAAG,oBAAoB,CAQ7E"}

package/daemon/dist/domain/human-route-enforcer.js

@@ -0,0 +1,80 @@
+/**
+ * Human-route enforcement (OPR.0.4.4.19 FR-4 + FR-5; conventions C6 + C3).
+ *
+ * Sibling of hot-potato-enforcer.ts: a pure domain validator wired at the
+ * QueueRepository write paths (create / handoff / handoff-and-complete, and
+ * the FR-6 park transition) so every surface — CLI, HTTP, future UI —
+ * inherits the same guarantee. NOT enforced at the route, NOT at the CLI.
+ *
+ * THE scoping predicate (PRD §5 — the complete trigger list, BR-1):
+ *
+ *   tier = 'human-gate'
+ *   OR is_human_seat_session(destination_session)
+ *   OR (state = 'blocked' AND is_human_seat_session(blocked_on))   [FR-6]
+ *
+ * When the predicate is FALSE, this module validates NOTHING: ordinary
+ * agent-to-agent queue traffic gains zero new required fields, zero new
+ * rejection paths, zero new warns (BR-1 zero-friction boundary). Do not
+ * broaden the trigger by destination tag, body text, or state alone.
+ */
+/**
+ * The EXACT human-seat regex. Single TS source of truth — the same pattern
+ * QueueRepository registers as the SQLite `is_human_seat_session` function
+ * (queue-repository.ts constructor) so SQL-side and TS-side checks cannot
+ * drift. Mirrors the UI's feed-classifier isHumanSeat.
+ */
+export const HUMAN_SEAT_SESSION_PATTERN = /^human(?:-[A-Za-z0-9._-]+)?@(kernel|host)$/;
+export function isHumanSeatSession(value) {
+    return typeof value === "string" && HUMAN_SEAT_SESSION_PATTERN.test(value);
+}
+function isBlank(value) {
+    return value === null || value === undefined || value.trim().length === 0;
+}
+/**
+ * Validate the C6/C3 structure of a NEW qitem (create / the created half of a
+ * handoff). Fires ONLY when the item is human-routed via legs 1–2 of the §5
+ * predicate (human-gate tier, human-seat destination). The park leg
+ * (blocked_on a human seat) is validated by {@link validateHumanPark} at the
+ * blocked-transition write path.
+ */
+export function validateHumanRoute(req) {
+    return validateRequiredFields(req.tier === "human-gate" || isHumanSeatSession(req.destinationSession), req.summary, req.evidenceRef, "human-routed queue items", "Provide --summary / --evidence-ref (ordinary agent-to-agent items are unaffected).");
+}
+/**
+ * OPR.0.4.4.19 FR-6 — leg-1 park enforcement (§5 predicate leg 3). Fires
+ * ONLY when the blocker is a human seat; blocking on another qitem (today's
+ * shipped usage) requires nothing new. The parked qitem itself — id, slice
+ * tag, summary — IS the what-it-unblocks (arch-ruled: no decision_descriptor
+ * field). Enforcement symmetry: park requires summary + evidence_ref like
+ * FR-7's resolve requires non-empty decision text.
+ */
+export function validateHumanPark(req) {
+    return validateRequiredFields(isHumanSeatSession(req.blockedOn), req.summary, req.evidenceRef, "parking a qitem on a human seat", "Provide them at park time (rig queue block --summary --evidence-ref) or on the item beforehand; blocking on another qitem requires nothing new.");
+}
+function validateRequiredFields(predicateFired, summary, evidenceRef, subject, remedy) {
+    if (!predicateFired) {
+        return { ok: true, humanRouted: false };
+    }
+    const missing = [];
+    if (isBlank(summary))
+        missing.push("summary");
+    if (isBlank(evidenceRef))
+        missing.push("evidence_ref");
+    if (missing.length === 0) {
+        return { ok: true, humanRouted: true };
+    }
+    const why = [];
+    if (missing.includes("summary")) {
+        why.push("summary: a decision the human reads must be in plain language (convention C6)");
+    }
+    if (missing.includes("evidence_ref")) {
+        why.push("evidence_ref: the human must have a durable artifact to judge (convention C3)");
+    }
+    return {
+        ok: false,
+        code: "human_route_fields_required",
+        message: `${subject} require${subject.endsWith("s") ? "" : "s"} ${missing.join(" + ")} — ${why.join("; ")}. ${remedy}`,
+        missingFields: missing,
+    };
+}
+//# sourceMappingURL=human-route-enforcer.js.map

package/daemon/dist/domain/human-route-enforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"human-route-enforcer.js","sourceRoot":"","sources":["../../src/domain/human-route-enforcer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,4CAA4C,CAAC;AAEvF,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAwBD,SAAS,OAAO,CAAC,KAAgC;IAC/C,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAsB;IACvD,OAAO,sBAAsB,CAC3B,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,kBAAkB,CAAC,GAAG,CAAC,kBAAkB,CAAC,EACvE,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,WAAW,EACf,0BAA0B,EAC1B,oFAAoF,CACrF,CAAC;AACJ,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAqB;IACrD,OAAO,sBAAsB,CAC3B,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,EACjC,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,WAAW,EACf,iCAAiC,EACjC,iJAAiJ,CAClJ,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,cAAuB,EACvB,OAAkC,EAClC,WAAsC,EACtC,OAAe,EACf,MAAc;IAEd,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,GAAG,OAAO,WAAW,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE;QACtH,aAAa,EAAE,OAAO;KACvB,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/mission-control/audit-browse.d.ts

@@ -12,6 +12,14 @@ export interface AuditQueryInput {
     limit?: number;
     /** Pagination cursor: returns rows whose action_id < beforeId. */
     beforeId?: string;
+    /** OPR.0.4.4.19 FR-9 — the scope-approval target filters (the pinned
+     *  audit_notes_json shape's read path). These make Packet 2's one-query
+     *  UNVERIFIED-stamp cross-check real: filter by the stable scope target
+     *  (tier + dot-ID + canonical path) and/or approval scope. */
+    scopeTier?: string;
+    scopeId?: string;
+    scopePath?: string;
+    approvalScope?: string;
 }
 export interface AuditQueryResult {
     rows: MissionControlActionEntry[];

package/daemon/dist/domain/mission-control/audit-browse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-browse.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/audit-browse.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EACL,KAAK,yBAAyB,EAG/B,MAAM,iCAAiC,CAAC;AAEzC,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,yBAAyB,EAAE,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAoBD,qBAAa,yBAAyB;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB;CAsDhD"}
+{"version":3,"file":"audit-browse.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/audit-browse.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EACL,KAAK,yBAAyB,EAG/B,MAAM,iCAAiC,CAAC;AAEzC,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;kEAG8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,yBAAyB,EAAE,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAoBD,qBAAa,yBAAyB;IACxB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD,KAAK,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB;CAyEhD"}

package/daemon/dist/domain/mission-control/audit-browse.js

@@ -33,6 +33,25 @@ export class MissionControlAuditBrowse {
             where.push("actor_session = ?");
             params.push(input.actorSession);
         }
+        // OPR.0.4.4.19 FR-9 — filter on the pinned audit_notes_json shape via
+        // SQLite JSON1 (ships with better-sqlite3). NULL audit_notes_json rows
+        // simply don't match.
+        if (input.scopeTier) {
+            where.push("json_extract(audit_notes_json, '$.scope_tier') = ?");
+            params.push(input.scopeTier);
+        }
+        if (input.scopeId) {
+            where.push("json_extract(audit_notes_json, '$.scope_id') = ?");
+            params.push(input.scopeId);
+        }
+        if (input.scopePath) {
+            where.push("json_extract(audit_notes_json, '$.scope_path') = ?");
+            params.push(input.scopePath);
+        }
+        if (input.approvalScope) {
+            where.push("json_extract(audit_notes_json, '$.approval_scope') = ?");
+            params.push(input.approvalScope);
+        }
         if (input.since) {
             where.push("acted_at >= ?");
             params.push(input.since);

package/daemon/dist/domain/mission-control/audit-browse.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-browse.js","sourceRoot":"","sources":["../../../src/domain/mission-control/audit-browse.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,yEAAyE;AACzE,kEAAkE;AAClE,yEAAyE;AACzE,EAAE;AACF,6DAA6D;AAC7D,uEAAuE;AAGvE,OAAO,EAGL,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AAqCzC,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,MAAM,OAAO,yBAAyB;IACP;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,KAAK,CAAC,KAAsB;QAC1B,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAgC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CACb,wBAAwB,KAAK,CAAC,UAAU,iBAAiB,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,6DAA6D;YAC7D,6DAA6D;YAC7D,6DAA6D;YAC7D,gCAAgC;YAChC,gDAAgD;YAChD,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,kEAAkE;QAClE,qEAAqE;QACrE,gEAAgE;QAChE,MAAM,GAAG,GAAG,yCAAyC,WAAW;kDAClB,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,GAAG,CAAC,CAAgB,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,MAAM,YAAY,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACnG,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAC7B,OAAO;YACP,YAAY;SACb,CAAC;IACJ,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IACzE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,GAAc;IAChC,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,UAAU,EAAE,GAAG,CAAC,WAAiC;QACjD,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,WAAW,EAAE,GAAG,CAAC,iBAAiB;YAChC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAA6B;YAChE,CAAC,CAAC,IAAI;QACR,UAAU,EAAE,GAAG,CAAC,gBAAgB;YAC9B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA6B;YAC/D,CAAC,CAAC,IAAI;QACR,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,GAAG,CAAC,gBAAgB,KAAK,CAAC;QAC3C,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,UAAU,EAAE,GAAG,CAAC,gBAAgB;YAC9B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA6B;YAC/D,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC"}
+{"version":3,"file":"audit-browse.js","sourceRoot":"","sources":["../../../src/domain/mission-control/audit-browse.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,EAAE;AACF,yEAAyE;AACzE,kEAAkE;AAClE,yEAAyE;AACzE,EAAE;AACF,6DAA6D;AAC7D,uEAAuE;AAGvE,OAAO,EAGL,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AA6CzC,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,MAAM,OAAO,yBAAyB;IACP;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,KAAK,CAAC,KAAsB;QAC1B,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAgC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,KAAK,CACb,wBAAwB,KAAK,CAAC,UAAU,iBAAiB,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;QACD,sEAAsE;QACtE,uEAAuE;QACvE,sBAAsB;QACtB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,6DAA6D;YAC7D,6DAA6D;YAC7D,6DAA6D;YAC7D,gCAAgC;YAChC,gDAAgD;YAChD,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,kEAAkE;QAClE,qEAAqE;QACrE,gEAAgE;QAChE,MAAM,GAAG,GAAG,yCAAyC,WAAW;kDAClB,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,GAAG,CAAC,CAAgB,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,MAAM,YAAY,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACnG,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAC7B,OAAO;YACP,YAAY;SACb,CAAC;IACJ,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IACzE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,GAAc;IAChC,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,UAAU,EAAE,GAAG,CAAC,WAAiC;QACjD,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,WAAW,EAAE,GAAG,CAAC,iBAAiB;YAChC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAA6B;YAChE,CAAC,CAAC,IAAI;QACR,UAAU,EAAE,GAAG,CAAC,gBAAgB;YAC9B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA6B;YAC/D,CAAC,CAAC,IAAI;QACR,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,GAAG,CAAC,gBAAgB,KAAK,CAAC;QAC3C,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,UAAU,EAAE,GAAG,CAAC,gBAAgB;YAC9B,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAA6B;YAC/D,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/mission-control/mission-control-action-log.d.ts

@@ -1,5 +1,5 @@
 import type Database from "better-sqlite3";
-export declare const MISSION_CONTROL_VERBS: readonly ["approve", "deny", "route", "annotate", "hold", "drop", "handoff"];
+export declare const MISSION_CONTROL_VERBS: readonly ["approve", "deny", "route", "annotate", "hold", "drop", "handoff", "resolve"];
 export type MissionControlVerb = (typeof MISSION_CONTROL_VERBS)[number];
 export interface MissionControlActionRecordInput {
     actionVerb: MissionControlVerb;