@openrig/cli 0.4.3 → 0.4.4

package/daemon/assets/guidance/openrig-start.md

@@ -17,6 +17,12 @@ That skill covers the broader surface, including chatroom, discovery, adopt/bind
 Your per-session startup guidance may also name additional packaged skills for your role and pod.
 Load those too. This shared overlay is only the common bootstrap floor, not the full operating manual for your seat.
 
+## Working missions and slices (the SDLC)
+
+If your seat works missions or slices, load the packaged `mission-slice-sop` skill BEFORE authoring or building — it teaches the flow the Living Notes UI projects: intent → mini-requirements + proof contract (→ mockups for UI slices) → plan-lock (`rig scope slice approve --scope spec`) → build the locked set → QA visual compare → `rig proof add … --media` drops (the C1 drop verb — never hand-place proof files) → proof-lock (`--scope delivery`).
+
+The conventions themselves (section names, proof-contract format, the two locks, C1 proof headers) live in ONE shipped document: `docs/reference/sdlc-conventions.md` (in the CLI package). `rig scope slice create` scaffolds the convention sections for every template kind; `rig scope audit` is the advisory backstop — it records and advises, it never blocks your work.
+
 ## Identity
 
 Run this first after launch or compaction to recover your identity:

package/daemon/assets/plugins/openrig-core/skills/mission-slice-sop/SKILL.md

@@ -1,19 +1,20 @@
 ---
 name: mission-slice-sop
-description: Use when working a mission or slice — how to track, prove, hand off, and carry state across agents and compaction via the canonical files (PROGRESS.md / PROOF.md / MISSION_NOTES.md / MISSION_BRIEF.md / README.md). Covers the per-file WHO/WHEN/HOW rules, the four-legs lifecycle (SCAFFOLD/POPULATE/PROJECT/VERIFY), hot-potato queue handoffs, the moment-of-truth checklist, the deterministic `rig scope audit` backstop, and the known ghost-text gotcha when reading terminal captures.
+description: Use when working a mission or slice — the full SDLC flow (intent → mini-requirements + proof contract → mockups → plan-lock → build → QA visual compare → `rig proof` drops → proof-lock) plus how to track, prove, hand off, and carry state across agents and compaction via the canonical files (PROGRESS.md / PROOF.md / MISSION_NOTES.md / MISSION_BRIEF.md / README.md / IMPLEMENTATION-PRD.md). Covers the convention sections the Living Notes UI projects, the two locks, the three role contracts, per-file WHO/WHEN/HOW rules, the four-legs lifecycle, hot-potato queue handoffs, the moment-of-truth checklist, the deterministic `rig scope audit` backstop, and the ghost-text capture gotcha.
 metadata:
   openrig:
     stage: shipped
-    last_verified: "2026-07-03"
+    last_verified: "2026-07-06"
     distribution_scope: product-bound
     source_evidence: |
-      Authored + embedded in release-0.4.3 slice 32 (mission-slice-sop). The
-      canonical SOP is the operating surface for mission/slice work: the
-      PROGRESS / PROOF / MISSION_NOTES / MISSION_BRIEF files drive the workspace
-      UI and carry state across agents + compaction. Operationalizes the
-      markdown-control-plane convention (loose freeform write + deterministic
-      verify) and the shipped `rig scope audit` classifier — the deterministic
-      backstop is the audit, not standalone check scripts.
+      Authored + embedded in release-0.4.3 slice 32 (mission-slice-sop);
+      moved into the canonical product skill source and updated in
+      release-0.4.4 slice 23 (operationalize the SDLC control plane) to
+      teach the full SDLC flow the Living Notes UI projects: the convention
+      sections, the proof-contract pairing, the two staged-approval locks,
+      C1 proof drops, and the three role contracts. Conventions SSOT:
+      docs/reference/sdlc-conventions.md (shipped with the CLI package).
+      The deterministic backstop is the `rig scope audit` classifier.
     sibling_skills:
       - queue-handoff
       - seat-continuity-and-handover
@@ -22,17 +23,43 @@ metadata:
 
 # Mission/Slice SOP — how you work a mission & slice
 
-Use this skill to actually **do** mission/slice work the way OpenRig expects: track on the canonical files, prove on them, hand off through them, and survive compaction on them. **Do the work described here; do not merely explain the protocol.** The deterministic backstop is `rig scope audit` — there are no separate bundled check scripts; the audit classifier is the source of truth for adherence.
+Use this skill to actually **do** mission/slice work the way OpenRig expects: author the convention sections, track on the canonical files, prove on them, hand off through them, and survive compaction on them. **Do the work described here; do not merely explain the protocol.** The deterministic backstop is `rig scope audit` — the audit classifier is the source of truth for adherence. The conventions themselves live in ONE place: **`docs/reference/sdlc-conventions.md`** (shipped with the CLI package) — this skill teaches the flow; the SSOT defines the formats.
 
-> The canonical files below are the **operating surface of the work** — you track on them, prove on them, hand off through them, and survive compaction on them. They are NOT side-artifacts to "maintain"; keeping them current *is* the work.
+## The SDLC flow (intent → proof)
+
+```
+intent → mini-requirements + proof contract → (UI slices: mockups)
+      → plan-lock (rig scope slice approve --scope spec)
+      → build the LOCKED set
+      → QA: mockup ↔ delivered VISUAL compare
+      → proof drops (rig proof add <slice> …)
+      → proof-lock (rig scope slice approve --scope delivery)
+```
+
+1. **Record intent** verbatim in the slice's `## Intent` section (`rig scope slice create` scaffolds it — every template kind).
+2. **Author the mini-requirements + proof contract**: `## Mini-requirements` is the concise one-glance tier (approval starts there); `## Proof contract` is a checkbox list of promised deliverables, each written as an observable outcome. UI deliverables name their planned mockup. The IMPLEMENTATION-PRD opens with the mini-requirements; everything between intent and proof is **elastic** — for a small slice the mini-requirements may BE the whole PRD.
+3. **Plan-lock**: `rig scope slice approve <slice> --scope spec` — "the PRD matches the intent; THIS artifact set is what gets built." One daemon-side write: frontmatter stamp + append-only audit row.
+4. **Build the locked set** — look at the mockups, not just the spec text.
+5. **QA visual compare**: for each deliverable, load the planned mockup, produce the real artifact in a test/demo environment, visually compare, and record the verdict.
+6. **Drop proof**: `rig proof add <slice> --artifact-type qa --verdict PASS --candidate-sha <tip> --money-evidence "…" --evidences "1,3" --media "walk.webm,panel.png" --self-check "…"` — the C1 header's closed sets validate at drop time; `--evidences` joins the drop to its proof-contract items and `--media` names the curated proof/-relative media the drop stands behind (that pairing + media set is what the UI's DELIVERED section renders).
+7. **Proof-lock**: `rig scope slice approve <slice> --scope delivery` — the terminal sign-off. Approval is freeze/sign-off, **never** proven-green: proven-green requires the recorded C1 verdicts.
+
+## The three role contracts
+
+- **Planning agent:** authors intent + mini-requirements + the proof contract; produces mockups for UI deliverables and attaches them to the locked set (a UI slice with no mockup is an incomplete plan; non-UI slices have none — not a gate); locks the plan.
+- **Build agent:** builds against the LOCKED set only; looks at the mockups.
+- **QA agent (owns the compare):** visually compares planned vs delivered per deliverable, records verdict + note via proof drops, and **curates** the canonical proof set (bounded, mapped to deliverables; the fix-loop pile stays in `proof/`, one drill-in down). On mismatch: fix-and-re-review or kick back with the reason — never escalate a raw mismatch to the human.
 
 ## The canonical files (the operating surface)
 
-- **README.md** (mission + slice) — the overview: what the mission/slice is + why. The **mission README carries this SOP at its bottom.**
+> The canonical files below are the **operating surface of the work** — you track on them, prove on them, hand off through them, and survive compaction on them. They are NOT side-artifacts to "maintain"; keeping them current *is* the work.
+
+- **README.md** (mission + slice) — the overview, OPENING with the convention sections (`## Intent` / `## Mini-requirements` / `## Proof contract`). The **mission README carries this SOP at its bottom.**
+- **IMPLEMENTATION-PRD.md** — the full PRD; opens with the mini-requirements; the `## Proof contract` here is what the UI's DELIVERED pairing joins proof against.
 - **PROGRESS.md** — the live delivery state. One line per outcome; links down for detail.
 - **MISSION_NOTES.md** — the accruing handoff + tribal-knowledge doc. Blank-slate onboarding + **compaction-restore** read it. `§1` top-of-mind + per-seat `§A–§X`.
 - **MISSION_BRIEF.md** — the steering doc (the UI "Steering" tab). The 7-section schema.
-- **PROOF.md** (+ `proof/`) — acceptance evidence. **A slice is not done until every plan success-criterion has proof.**
+- **PROOF.md** (+ `proof/`) — acceptance evidence. **A slice is not done until every proof-contract item has evidence.**
 
 ## Per-file rules — WHO / WHEN / HOW
 
@@ -41,10 +68,10 @@ Use this skill to actually **do** mission/slice work the way OpenRig expects: tr
 - **WHEN:** after every slice-done **AND every commit**; on any material state change.
 - **HOW:** one line per outcome (checkbox), link down for detail (workstream-continuity format); keep frontmatter `stage`/`verified` honest.
 
-### PROOF.md
+### PROOF.md + proof/
 - **WHO:** the impl/QA pair that worked the slice.
-- **WHEN:** a slice is **NOT "done"** until PROOF.md exists and every plan success-criterion has evidence.
-- **HOW:** proof maps **1:1 to the plan's acceptance/success criteria** — each criterion gets an evidence artifact (screenshot/capture/log) in `proof/` + a line in PROOF.md stating what it proves. No proof → not done.
+- **WHEN:** a slice is **NOT "done"** until every proof-contract item has evidence.
+- **HOW:** proof maps **1:1 to the proof contract's deliverables** — put media under `proof/`, then ATTACH it with `rig proof add <slice> … --evidences <item> --media <files>` (the drop writes the C1 header the DELIVERED pairing joins on) + a line in PROOF.md stating what it proves. **Hand-placing files in `proof/` without a drop is the anti-pattern** — the deliverable stays unpaired and `unverified`. No proof → not done.
 
 ### MISSION_NOTES.md
 - **WHO:** any agent updates `§1` (top-of-mind); each seat owns + appends to its own `§A–§X` section.
@@ -59,11 +86,11 @@ Use this skill to actually **do** mission/slice work the way OpenRig expects: tr
 ### README.md
 - **WHO:** the author at creation; refreshed on rescope.
 - **WHEN:** at mission/slice creation + when scope/theme changes.
-- **HOW:** overview + honest frontmatter (`id`/`stage`/`verified`); the mission README carries this SOP at its bottom.
+- **HOW:** overview + honest frontmatter (`id`/`stage`/`verified`) + the convention sections up top; the mission README carries this SOP at its bottom.
 
 ## The lifecycle (4 legs)
 
-**SCAFFOLD** (`rig scope` creates the files from templates) → **POPULATE** (agents fill them as work happens, per the rules above) → **PROJECT** (the workspace UI reads them into tabs) → **VERIFY** (`rig scope audit` + the validation scripts check adherence). "Loose freeform write + deterministic verify."
+**SCAFFOLD** (`rig scope` creates the files from templates — every slice kind emits the convention sections + `proof/` + the IMPLEMENTATION-PRD skeleton) → **POPULATE** (agents fill them as work happens, per the rules above) → **PROJECT** (the Living Notes UI reads them into INTENT → PLAN → DELIVERED) → **VERIFY** (`rig scope audit` checks adherence). "Loose freeform write + deterministic verify."
 
 ## Hot-potato (handoffs)
 
@@ -71,7 +98,7 @@ End every turn by passing the ball — a `rig queue` handoff to the next agent (
 
 ## Verify (deterministic backstop)
 
-Run `rig scope audit` at slice-close. The validation scripts flag: committed-without-touching-PROGRESS; slice-marked-done-without-PROOF; active-mission-without-MISSION_NOTES; MISSION_BRIEF off-schema. **Fix the flag, don't suppress it.**
+Run `rig scope audit` at slice-close. It flags: committed-without-touching-PROGRESS; slice-marked-done-without-PROOF; active-mission-without-MISSION_NOTES; MISSION_BRIEF off-schema; proof artifacts violating the C1 header; missing IMPLEMENTATION-PRD on a building slice; missing convention sections (`## Intent`, a well-formed `## Proof contract`, the UI-slice mockup ref). Every convention check is **advisory / fail-open** — it records and advises, never blocks a write. **Fix the flag, don't suppress it.**
 
 ## Reading terminal captures — KNOWN GOTCHA: ghost-text autocomplete is NOT real
 
@@ -81,7 +108,8 @@ When you `rig capture` a pane, **greyed / ghost autocomplete suggestions are NOT
 
 ## Moment-of-truth checklist
 
-- **Finishing a slice?** → PROOF complete (every criterion has evidence)? PROGRESS updated? MISSION_NOTES `§1` refreshed? Handed off via queue?
+- **Starting a slice?** → intent recorded verbatim? mini-requirements + proof contract authored? mockups attached (UI slices)? plan locked (`--scope spec`)?
+- **Finishing a slice?** → every proof-contract item has curated evidence via `rig proof add … --evidences --media` (C1 drops — never only hand-placed files)? PROGRESS updated? MISSION_NOTES `§1` refreshed? proof locked (`--scope delivery`)? Handed off via queue?
 - **Committing?** → PROGRESS updated?
 - **Compacting?** → filed your state in MISSION_NOTES?
-- **Starting on a mission?** → read the mission README (incl. this SOP) + MISSION_NOTES?
+- **Starting on a mission?** → read the mission README (incl. this SOP) + MISSION_NOTES + `docs/reference/sdlc-conventions.md`?

package/daemon/assets/plugins/openrig-core/skills/openrig-user/SKILL.md

@@ -61,7 +61,7 @@ Default posture on this host now:
 
 Most work in OpenRig reduces to this loop:
 - recover identity: `rig whoami --json`
-- inspect inventory: `rig ps --nodes --json`
+- inspect inventory: `rig ps` (fleet map) / `rig ps --nodes -A --json` (fleet nodes)
 - read context: `rig transcript ...`, `rig ask ...`, `rig chatroom history ...`
 - act: `rig send`, `rig capture`, `rig broadcast`, lifecycle commands
 
@@ -90,13 +90,13 @@ If the daemon is unreachable but identity can still be inferred, `--json` may re
 ## Inventory and Monitoring
 
 ```bash
-rig ps
-rig ps --json
-rig ps --nodes
-rig ps --nodes --json
+rig ps                      # ALL active rigs, one compact row each (v0.4.4 default)
+rig ps --json               # bare array, all non-archived rigs
+rig ps --nodes              # current rig's nodes (session default, local only)
+rig ps --nodes -A --json    # fleet node inventory (explicit)
 ```
 
-Use `rig ps --nodes --json` for the current node inventory across rigs. It is the best machine-readable operator surface for:
+Use `rig ps --nodes -A --json` for the current node inventory across rigs (v0.4.4: `--nodes` needs an explicit scope outside a managed session). It is the best machine-readable operator surface for:
 - session name
 - runtime
 - session/startup status
@@ -386,7 +386,7 @@ rig whoami --json
 
 Notes:
 - for tmux-backed self-attach, `rig whoami --json` is the right verification
-- for raw/external self-attach, `rig ps --nodes --json` is currently the more reliable verification surface
+- for raw/external self-attach, `rig ps --nodes -A --json` is currently the more reliable verification surface
 - if the current shell is outside tmux, pass `--display-name <name>` when you want a stable human session label recorded
 
 ### Adopt a topology and bind live sessions
@@ -453,13 +453,13 @@ Verification loop:
 ```bash
 rig discover --json
 rig adopt <fragment.yaml> --bindings-file <bindings.yaml> --target-rig <rigId>
-rig ps --nodes --json
+rig ps --nodes -A --json
 rig export <rigId> -o rig.yaml
 ```
 
 Success looks like:
 - the new sessions stop appearing in `rig discover`
-- the new logical IDs appear in `rig ps --nodes --json`
+- the new logical IDs appear in `rig ps --nodes -A --json`
 - `rig export` includes the new pod
 
 ### Mixed-origin rigs are allowed
@@ -477,7 +477,7 @@ Current safety rule:
 The proven operator pattern is:
 - keep one OpenRig manager session outside the rig it manages
 - address the target by rig name, not cached rig ID
-- resolve the current owner from fresh `rig ps --nodes --json`
+- resolve the current owner from fresh `rig ps --nodes -A --json`
 - send the manager the spec path, bindings path, and verification steps with `rig send`
 
 This lets ordinary agents ask the manager for OpenRig help instead of every agent needing to be an OpenRig expert.
@@ -548,7 +548,7 @@ When the CLI behaves strangely, use the smallest truthful check first:
 ```bash
 rig whoami --json
 rig daemon status
-rig ps --nodes --json
+rig ps --nodes -A --json
 ```
 
 Specific operator rules:
@@ -584,7 +584,7 @@ Design assumptions that hold in the shipped CLI:
 
 1. `rig whoami --json`
 2. `rig transcript <your-session> --tail 100`
-3. `rig ps --nodes --json`
+3. `rig ps --nodes -A --json`
 4. `rig chatroom history <rig> --limit 50`
 
 ## Commands That Do Not Exist

package/daemon/dist/build-info.d.ts

@@ -0,0 +1,12 @@
+export interface BuildInfo {
+    semver: string | null;
+    commit: string | null;
+    dirty: boolean | null;
+    builtAt: string | null;
+}
+export declare const BUILD_INFO: BuildInfo;
+/** The additive /healthz fields: the four stamp keys when stamped, an EMPTY
+ *  object when dev — existing consumers (including exact-body probes against
+ *  dev daemons) see no change. */
+export declare function stampFields(info?: BuildInfo): Record<string, unknown>;
+//# sourceMappingURL=build-info.d.ts.map

package/daemon/dist/build-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.d.ts","sourceRoot":"","sources":["../src/build-info.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,eAAO,MAAM,UAAU,EAAE,SAKxB,CAAC;AAEF;;kCAEkC;AAClC,wBAAgB,WAAW,CAAC,IAAI,GAAE,SAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGjF"}

package/daemon/dist/build-info.js

@@ -0,0 +1,11 @@
+// GENERATED by scripts/build-package.sh — the packaged build-identity stamp.
+export const BUILD_INFO = {
+  semver: "0.4.4",
+  commit: "ac75777a3cad318592dae9d616a09d824f1398e5",
+  dirty: false,
+  builtAt: "2026-07-06T08:21:05Z",
+};
+export function stampFields(info = BUILD_INFO) {
+  if (!info.commit) return {};
+  return { semver: info.semver, commit: info.commit, dirty: info.dirty, builtAt: info.builtAt };
+}

package/daemon/dist/build-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.js","sourceRoot":"","sources":["../src/build-info.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,+DAA+D;AAC/D,wEAAwE;AACxE,iEAAiE;AASjE,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,IAAI;IACZ,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,IAAI;CACd,CAAC;AAEF;;kCAEkC;AAClC,MAAM,UAAU,WAAW,CAAC,OAAkB,UAAU;IACtD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AAChG,CAAC"}

package/daemon/dist/db/migrations/048_queue_item_evidence_ref.d.ts

@@ -0,0 +1,18 @@
+import type { Migration } from "../migrate.js";
+/**
+ * OPR.0.4.4.19 FR-5 — queue_items.evidence_ref column.
+ *
+ * Adds `evidence_ref TEXT` (NULLABLE) to queue_items: a pointer to the
+ * durable artifact a human judges when the item is human-routed (convention
+ * C3), authored via `--evidence-ref` on `rig queue create` / `handoff` and
+ * persistable at park time (`rig queue block`, FR-6). Follows the 044
+ * summary-column pattern exactly: additive, nullable, defensive
+ * detectQueueColumn read so pre-048 fixtures degrade.
+ *
+ * NULLABLE by contract: required ONLY for human-routed items (the §5
+ * predicate, enforced at the domain write path — FR-4/FR-5), so ordinary
+ * agent-to-agent rows stay NULL forever (BR-1 zero-friction). Do NOT make
+ * this NOT NULL or add a default.
+ */
+export declare const queueItemEvidenceRefSchema: Migration;
+//# sourceMappingURL=048_queue_item_evidence_ref.d.ts.map

package/daemon/dist/db/migrations/048_queue_item_evidence_ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"048_queue_item_evidence_ref.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/048_queue_item_evidence_ref.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAKxC,CAAC"}

package/daemon/dist/db/migrations/048_queue_item_evidence_ref.js

@@ -0,0 +1,22 @@
+/**
+ * OPR.0.4.4.19 FR-5 — queue_items.evidence_ref column.
+ *
+ * Adds `evidence_ref TEXT` (NULLABLE) to queue_items: a pointer to the
+ * durable artifact a human judges when the item is human-routed (convention
+ * C3), authored via `--evidence-ref` on `rig queue create` / `handoff` and
+ * persistable at park time (`rig queue block`, FR-6). Follows the 044
+ * summary-column pattern exactly: additive, nullable, defensive
+ * detectQueueColumn read so pre-048 fixtures degrade.
+ *
+ * NULLABLE by contract: required ONLY for human-routed items (the §5
+ * predicate, enforced at the domain write path — FR-4/FR-5), so ordinary
+ * agent-to-agent rows stay NULL forever (BR-1 zero-friction). Do NOT make
+ * this NOT NULL or add a default.
+ */
+export const queueItemEvidenceRefSchema = {
+    name: "048_queue_item_evidence_ref.sql",
+    sql: `
+    ALTER TABLE queue_items ADD COLUMN evidence_ref TEXT;
+  `,
+};
+//# sourceMappingURL=048_queue_item_evidence_ref.js.map

package/daemon/dist/db/migrations/048_queue_item_evidence_ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"048_queue_item_evidence_ref.js","sourceRoot":"","sources":["../../../src/db/migrations/048_queue_item_evidence_ref.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAc;IACnD,IAAI,EAAE,iCAAiC;IACvC,GAAG,EAAE;;GAEJ;CACF,CAAC"}

package/daemon/dist/domain/feed/attention-aggregator.d.ts

@@ -0,0 +1,31 @@
+import type { AggregatedPayload } from "../hosts/fanout-contract.js";
+import type { HostRegistryLoadResult } from "../hosts/hosts-registry-reader.js";
+/** The aggregation READ deadline class (per-host bound). Distinct from the
+ *  up-leaf's long-running budget by design — named here, passed explicitly. */
+export declare const ATTENTION_READ_TIMEOUT_MS = 5000;
+/** Fixed fan-out cap — a poll across a handful of hosts; adaptive
+ *  throttling is out of scope (same v1 posture as the topology walker). */
+export declare const ATTENTION_FANOUT_CONCURRENCY = 4;
+export type AttentionItem = Record<string, unknown>;
+export interface AttentionAggregatorDeps {
+    /** The SAME query the shipped /api/queue/list?attention=1 route runs. */
+    listLocalAttention: () => AttentionItem[];
+    /** settings-store.listFeedHostSubscriptions (the G15-P1 dynamic class). */
+    listSubscriptions: () => Array<{
+        hostId: string;
+        enabled: boolean;
+    }>;
+    /** S11's shared reader — called lazily, only when a remote sub exists. */
+    loadRegistry: () => HostRegistryLoadResult;
+    fetchImpl?: typeof fetch;
+    env?: Record<string, string | undefined>;
+    readFile?: (path: string) => string;
+    /** Test override; production uses ATTENTION_READ_TIMEOUT_MS. */
+    timeoutMs?: number;
+    concurrency?: number;
+}
+/** One merged attention payload: local ALWAYS included (stamped with the
+ *  contract's LOCAL_HOST_ID), each enabled remote host fanned out under the
+ *  read deadline + fixed cap, per-host status complete by construction. */
+export declare function aggregateAttention(deps: AttentionAggregatorDeps): Promise<AggregatedPayload<AttentionItem>>;
+//# sourceMappingURL=attention-aggregator.d.ts.map

package/daemon/dist/domain/feed/attention-aggregator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attention-aggregator.d.ts","sourceRoot":"","sources":["../../../src/domain/feed/attention-aggregator.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,iBAAiB,EAAiB,MAAM,6BAA6B,CAAC;AAEpF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAIhF;+EAC+E;AAC/E,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAE/C;2EAC2E;AAC3E,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,aAAa,EAAE,CAAC;IAC1C,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACrE,0EAA0E;IAC1E,YAAY,EAAE,MAAM,sBAAsB,CAAC;IAC3C,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAgED;;2EAE2E;AAC3E,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAgCjH"}

package/daemon/dist/domain/feed/attention-aggregator.js

@@ -0,0 +1,119 @@
+// OPR.0.4.4.15 FR-1 — daemon-side attention aggregation (the SEE architecture,
+// call A): the LOCAL daemon fans out server-side to each subscribed host's
+// shipped GET /api/queue/list?attention=1 over the registered HTTP+bearer
+// transport, merges, and returns ONE AggregatedPayload. Bearer tokens never
+// reach the browser — this module is the only place remote hosts are
+// contacted for the feed.
+//
+// Reuse, not reimplementation: the LOCAL leg invokes the SAME
+// QueueRepository.listAttention query the existing route uses (injected at
+// the route wiring); the registry is read through S11's shared
+// hosts-registry-reader (interface cell — never re-parsed); the remote hop
+// rides the shared remote-daemon-http core with the READ deadline class
+// named EXPLICITLY at this call-site (arch sharpening: 5s — a poll, not a
+// bootstrap; the up-leaf's 120s budget lives at ITS call-site).
+//
+// FR-1/R15-2 honesty: EVERY subscribed host appears in hosts[] on EVERY
+// call — ok, unreachable, auth-failed, or unsupported-transport — never
+// all-or-nothing, never a silently thinner feed. The registry is read ONLY
+// when ≥1 remote subscription is enabled (zero-config never touches it).
+import { LOCAL_HOST_ID } from "../hosts/fanout-contract.js";
+import { resolveHost } from "../hosts/hosts-registry-reader.js";
+import { remoteJsonRequest } from "../hosts/remote-daemon-http.js";
+/** The aggregation READ deadline class (per-host bound). Distinct from the
+ *  up-leaf's long-running budget by design — named here, passed explicitly. */
+export const ATTENTION_READ_TIMEOUT_MS = 5_000;
+/** Fixed fan-out cap — a poll across a handful of hosts; adaptive
+ *  throttling is out of scope (same v1 posture as the topology walker). */
+export const ATTENTION_FANOUT_CONCURRENCY = 4;
+async function readHostAttention(hostId, reg, deps) {
+    if (!reg.ok) {
+        // Registry unreadable: every subscribed host reports it honestly —
+        // the operator sees ONE actionable error per host row, local items
+        // are untouched.
+        return { status: { hostId, status: "unreachable", error: reg.error }, items: [] };
+    }
+    const resolved = resolveHost(reg.registry, hostId);
+    if (!resolved.ok) {
+        return { status: { hostId, status: "unreachable", error: resolved.error }, items: [] };
+    }
+    if (resolved.host.transport !== "http") {
+        // R15-2 (the whoami --all-hosts precedent): SSH-declared hosts are a
+        // structured per-host status, never a silently thinner feed.
+        return {
+            status: { hostId, status: "unsupported-transport", error: `host '${hostId}' is SSH-declared; the aggregated feed read requires an http-transport registry entry (url + bearer)` },
+            items: [],
+        };
+    }
+    const res = await remoteJsonRequest(resolved.host, "/api/queue/list?attention=1", {
+        method: "GET",
+        timeoutMs: deps.timeoutMs ?? ATTENTION_READ_TIMEOUT_MS,
+        fetchImpl: deps.fetchImpl,
+        env: deps.env,
+        readFile: deps.readFile,
+    });
+    if (res.ok) {
+        const arr = Array.isArray(res.payload) ? res.payload : [];
+        return { status: { hostId, status: "ok" }, items: arr.map((i) => ({ ...i, hostId })) };
+    }
+    switch (res.kind) {
+        case "bearer":
+            return { status: { hostId, status: "auth-failed", error: res.detail, failedStep: "permission-gate" }, items: [] };
+        case "http":
+            if (res.status === 401 || res.status === 403) {
+                return { status: { hostId, status: "auth-failed", error: `HTTP ${res.status}${res.detail ? `: ${res.detail}` : ""}`, failedStep: "permission-gate" }, items: [] };
+            }
+            // A remote 4xx/5xx on the read: the feed cannot show that host's
+            // items — the closest closed-enum truth is unreachable, with the
+            // remote's own status/text as the honest detail and the shipped
+            // FailedStep vocabulary riding as the additive detail field.
+            return { status: { hostId, status: "unreachable", error: `HTTP ${res.status}${res.detail ? `: ${res.detail}` : ""}`, failedStep: "remote-command-failed" }, items: [] };
+        case "timeout":
+            return {
+                status: {
+                    hostId,
+                    status: "unreachable",
+                    error: res.phase === "body" ? `read timed out: response headers arrived (HTTP ${res.status}) but the body never completed` : `read timed out after ${deps.timeoutMs ?? ATTENTION_READ_TIMEOUT_MS}ms`,
+                    failedStep: "remote-daemon-unreachable",
+                },
+                items: [],
+            };
+        case "network":
+            return { status: { hostId, status: "unreachable", error: res.detail, failedStep: "remote-daemon-unreachable" }, items: [] };
+    }
+}
+/** One merged attention payload: local ALWAYS included (stamped with the
+ *  contract's LOCAL_HOST_ID), each enabled remote host fanned out under the
+ *  read deadline + fixed cap, per-host status complete by construction. */
+export async function aggregateAttention(deps) {
+    const localItems = deps.listLocalAttention().map((i) => ({ ...i, hostId: LOCAL_HOST_ID }));
+    const hosts = [{ hostId: LOCAL_HOST_ID, status: "ok" }];
+    const items = [...localItems];
+    const subs = deps.listSubscriptions().filter((s) => s.enabled);
+    if (subs.length === 0) {
+        // Zero remote subscriptions: the registry is NEVER read; the payload
+        // is today's local feed plus the local status row.
+        return { items, hosts };
+    }
+    const reg = deps.loadRegistry();
+    const outcomes = new Array(subs.length);
+    let next = 0;
+    const cap = Math.max(1, Math.min(deps.concurrency ?? ATTENTION_FANOUT_CONCURRENCY, subs.length));
+    const workers = Array.from({ length: cap }, async () => {
+        while (true) {
+            const i = next;
+            if (i >= subs.length)
+                return;
+            next += 1;
+            outcomes[i] = await readHostAttention(subs[i].hostId, reg, deps);
+        }
+    });
+    await Promise.all(workers);
+    // Subscription order preserved in both arrays (deterministic payload).
+    for (const outcome of outcomes) {
+        hosts.push(outcome.status);
+        items.push(...outcome.items);
+    }
+    return { items, hosts };
+}
+//# sourceMappingURL=attention-aggregator.js.map

package/daemon/dist/domain/feed/attention-aggregator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attention-aggregator.js","sourceRoot":"","sources":["../../../src/domain/feed/attention-aggregator.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,qEAAqE;AACrE,0BAA0B;AAC1B,EAAE;AACF,8DAA8D;AAC9D,2EAA2E;AAC3E,+DAA+D;AAC/D,2EAA2E;AAC3E,wEAAwE;AACxE,0EAA0E;AAC1E,gEAAgE;AAChE,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,yEAAyE;AAGzE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE;+EAC+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAE/C;2EAC2E;AAC3E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAwB9C,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,GAA2B,EAAE,IAA6B;IACzG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,mEAAmE;QACnE,mEAAmE;QACnE,iBAAiB;QACjB,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACvC,qEAAqE;QACrE,6DAA6D;QAC7D,OAAO;YACL,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,SAAS,MAAM,sGAAsG,EAAE;YACjL,KAAK,EAAE,EAAE;SACV,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,6BAA6B,EAAE;QAChF,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,yBAAyB;QACtD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,OAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IACD,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACpH,KAAK,MAAM;YACT,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACpK,CAAC;YACD,iEAAiE;YACjE,iEAAiE;YACjE,gEAAgE;YAChE,6DAA6D;YAC7D,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,uBAAuB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC1K,KAAK,SAAS;YACZ,OAAO;gBACL,MAAM,EAAE;oBACN,MAAM;oBACN,MAAM,EAAE,aAAa;oBACrB,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,kDAAkD,GAAG,CAAC,MAAM,gCAAgC,CAAC,CAAC,CAAC,wBAAwB,IAAI,CAAC,SAAS,IAAI,yBAAyB,IAAI;oBACpM,UAAU,EAAE,2BAA2B;iBACxC;gBACD,KAAK,EAAE,EAAE;aACV,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,2BAA2B,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAChI,CAAC;AACH,CAAC;AAED;;2EAE2E;AAC3E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA6B;IACpE,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAoB,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,MAAM,KAAK,GAAoB,CAAC,GAAG,UAAU,CAAC,CAAC;IAE/C,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,qEAAqE;QACrE,mDAAmD;QACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAiB,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,4BAA4B,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACjG,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,IAAI,EAAE;QACrD,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,IAAI,CAAC;YACf,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YAC7B,IAAI,IAAI,CAAC,CAAC;YACV,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACpE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAE3B,uEAAuE;IACvE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC"}

package/daemon/dist/domain/files/file-write-service.d.ts

@@ -28,9 +28,9 @@ export declare class WriteConflictError extends Error {
     constructor(currentMtime: string, currentContentHash: string, details: Record<string, unknown>);
 }
 export declare class FileWriteError extends Error {
-    readonly code: "stat_failed" | "tmp_write_failed" | "rename_failed" | "audit_write_failed";
+    readonly code: "stat_failed" | "tmp_write_failed" | "rename_failed" | "audit_write_failed" | "target_exists";
     readonly details?: Record<string, unknown> | undefined;
-    constructor(code: "stat_failed" | "tmp_write_failed" | "rename_failed" | "audit_write_failed", message: string, details?: Record<string, unknown> | undefined);
+    constructor(code: "stat_failed" | "tmp_write_failed" | "rename_failed" | "audit_write_failed" | "target_exists", message: string, details?: Record<string, unknown> | undefined);
 }
 export interface FileWriteServiceOpts {
     /** Allowlist roots resolved from env at startup (re-resolved per request is fine; cheap). */
@@ -53,6 +53,15 @@ export declare class FileWriteService {
      * success.
      */
     writeAtomic(req: FileWriteRequest): FileWriteResult;
+    /**
+     * Atomically CREATE a new allowlisted file (OPR.0.4.4.20 FR-6 — the frozen
+     * review export). Exclusive: throws `target_exists` when the file is
+     * already there (frozen exports are point-in-time snapshots, never
+     * rewritten; re-invoking the freeze for the same approval is an idempotent
+     * no-op at the caller). Same temp-write + fsync + audit-row machinery as
+     * writeAtomic — one writer family, no parallel write path.
+     */
+    createAtomic(req: Omit<FileWriteRequest, "expectedMtime" | "expectedContentHash">): FileWriteResult;
     private appendAuditRow;
     /** Test/debug helper: returns the configured audit file path. */
     getAuditFilePath(): string;

package/daemon/dist/domain/files/file-write-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-write-service.d.ts","sourceRoot":"","sources":["../../../src/domain/files/file-write-service.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE1E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;aAEzB,YAAY,EAAE,MAAM;aACpB,kBAAkB,EAAE,MAAM;aAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFhC,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKnD;AAED,qBAAa,cAAe,SAAQ,KAAK;aAErB,IAAI,EAAE,aAAa,GAAG,kBAAkB,GAAG,eAAe,GAAG,oBAAoB;aAEjF,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjC,IAAI,EAAE,aAAa,GAAG,kBAAkB,GAAG,eAAe,GAAG,oBAAoB,EACjG,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAED,MAAM,WAAW,oBAAoB;IACnC,6FAA6F;IAC7F,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAQD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,IAAI,EAAE,oBAAoB;IAMtC;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,gBAAgB,GAAG,eAAe;IAuGnD,OAAO,CAAC,cAAc;IAKtB,iEAAiE;IACjE,gBAAgB,IAAI,MAAM;CAG3B;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAE1D"}
+{"version":3,"file":"file-write-service.d.ts","sourceRoot":"","sources":["../../../src/domain/files/file-write-service.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE1E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;aAEzB,YAAY,EAAE,MAAM;aACpB,kBAAkB,EAAE,MAAM;aAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFhC,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,MAAM,EAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKnD;AAED,qBAAa,cAAe,SAAQ,KAAK;aAErB,IAAI,EAAE,aAAa,GAAG,kBAAkB,GAAG,eAAe,GAAG,oBAAoB,GAAG,eAAe;aAEnG,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjC,IAAI,EAAE,aAAa,GAAG,kBAAkB,GAAG,eAAe,GAAG,oBAAoB,GAAG,eAAe,EACnH,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAED,MAAM,WAAW,oBAAoB;IACnC,6FAA6F;IAC7F,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAQD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,IAAI,EAAE,oBAAoB;IAMtC;;;;;;OAMG;IACH,WAAW,CAAC,GAAG,EAAE,gBAAgB,GAAG,eAAe;IAuGnD;;;;;;;OAOG;IACH,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,eAAe,GAAG,qBAAqB,CAAC,GAAG,eAAe;IAqEnG,OAAO,CAAC,cAAc;IAKtB,iEAAiE;IACjE,gBAAgB,IAAI,MAAM;CAG3B;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAE1D"}

package/daemon/dist/domain/files/file-write-service.js

@@ -165,6 +165,83 @@ export class FileWriteService {
             byteCountDelta,
         };
     }
+    /**
+     * Atomically CREATE a new allowlisted file (OPR.0.4.4.20 FR-6 — the frozen
+     * review export). Exclusive: throws `target_exists` when the file is
+     * already there (frozen exports are point-in-time snapshots, never
+     * rewritten; re-invoking the freeze for the same approval is an idempotent
+     * no-op at the caller). Same temp-write + fsync + audit-row machinery as
+     * writeAtomic — one writer family, no parallel write path.
+     */
+    createAtomic(req) {
+        const target = resolveAllowedPath(this.allowlist, req.rootName, req.path);
+        if (fs.existsSync(target)) {
+            throw new FileWriteError("target_exists", `refusing to overwrite existing file '${target}'`, { target });
+        }
+        const tmpName = `.openrig-write-${process.pid}-${Math.random().toString(36).slice(2, 10)}-${path.basename(target)}`;
+        const tmpPath = path.join(path.dirname(target), tmpName);
+        let tmpFd = null;
+        try {
+            tmpFd = fs.openSync(tmpPath, "w");
+            fs.writeFileSync(tmpFd, req.content);
+            fs.fsyncSync(tmpFd);
+        }
+        catch (err) {
+            try {
+                if (tmpFd !== null)
+                    fs.closeSync(tmpFd);
+            }
+            catch { /* ignore */ }
+            try {
+                fs.unlinkSync(tmpPath);
+            }
+            catch { /* ignore */ }
+            throw new FileWriteError("tmp_write_failed", `failed to write+fsync temp file at '${tmpPath}': ${err instanceof Error ? err.message : String(err)}`, { target, tmpPath });
+        }
+        finally {
+            try {
+                if (tmpFd !== null)
+                    fs.closeSync(tmpFd);
+            }
+            catch { /* ignore */ }
+        }
+        try {
+            // linkSync fails if the target appeared meanwhile — true exclusive create.
+            fs.linkSync(tmpPath, target);
+            fs.unlinkSync(tmpPath);
+        }
+        catch (err) {
+            try {
+                fs.unlinkSync(tmpPath);
+            }
+            catch { /* ignore */ }
+            const code = err.code === "EEXIST" ? "target_exists" : "rename_failed";
+            throw new FileWriteError(code, `failed to atomically create '${target}': ${err instanceof Error ? err.message : String(err)}`, { target, tmpPath });
+        }
+        const newStat = fs.statSync(target);
+        const newContent = fs.readFileSync(target);
+        const newMtime = newStat.mtime.toISOString();
+        const newContentHash = sha256Hex(newContent);
+        const auditRow = {
+            ts: this.now().toISOString(),
+            actor: req.actor,
+            root: req.rootName,
+            path: req.path,
+            absolutePath: target,
+            prevMtime: null,
+            newMtime,
+            prevContentHash: null,
+            newContentHash,
+            byteCountDelta: newContent.byteLength,
+        };
+        try {
+            this.appendAuditRow(auditRow);
+        }
+        catch (err) {
+            throw new FileWriteError("audit_write_failed", `create succeeded but audit append failed: ${err instanceof Error ? err.message : String(err)}`, { target, auditFilePath: this.auditFilePath, ...auditRow });
+        }
+        return { absolutePath: target, newMtime, newContentHash, byteCountDelta: newContent.byteLength };
+    }
     appendAuditRow(row) {
         fs.mkdirSync(path.dirname(this.auditFilePath), { recursive: true });
         fs.appendFileSync(this.auditFilePath, `${JSON.stringify(row)}\n`);