@openrig/cli 0.4.4 → 0.4.7

package/daemon/dist/domain/hosts/remote-daemon-http.js

@@ -19,8 +19,11 @@
 // signal (a hand-built/proxied Response is not necessarily wired to the
 // controller — no trust in fetch internals).
 import { readFileSync } from "node:fs";
-/** Mirrors the CLI's resolveRemoteBearer (host-registry.ts): exactly-one of
- *  bearer_env / bearer_file, resolved at call time. */
+/** Mirrors the CLI's resolveRemoteBearer (host-registry.ts): at-most-one of
+ *  bearer_env / bearer_file, resolved at call time. Neither configured is an
+ *  anonymous (URL-only) host — a tokenless daemon; ok with no token, so no
+ *  Authorization header is sent. A configured-but-unresolvable pointer still
+ *  fails (fail-closed). */
 function resolveBearer(host, deps) {
     const env = deps.env ?? process.env;
     const readFile = deps.readFile ?? ((p) => readFileSync(p, "utf-8"));
@@ -41,7 +44,7 @@ function resolveBearer(host, deps) {
             return { ok: false, detail: `bearer file ${host.bearer_file} not readable for host ${host.id}` };
         }
     }
-    return { ok: false, detail: `host ${host.id} has no bearer_env or bearer_file configured` };
+    return { ok: true };
 }
 /** One bounded daemon→daemon JSON exchange. The single deadline covers
  *  request + body; every outcome is structured — this function never hangs
@@ -60,7 +63,7 @@ export async function remoteJsonRequest(host, path, opts) {
             method: opts.method,
             headers: {
                 ...(opts.body !== undefined ? { "Content-Type": "application/json" } : {}),
-                Authorization: `Bearer ${bearer.token}`,
+                ...(bearer.token ? { Authorization: `Bearer ${bearer.token}` } : {}),
             },
             ...(opts.body !== undefined ? { body: JSON.stringify(opts.body) } : {}),
             signal: controller.signal,
@@ -102,4 +105,53 @@ export async function remoteJsonRequest(host, path, opts) {
         : "";
     return { ok: false, kind: "http", status: res.status, detail: remoteError };
 }
+/** One bounded daemon→daemon GET, body passed through as text for ANY origin
+ *  status (arch P3 verbatim rule). Same bearer resolution + single-deadline +
+ *  explicit body race discipline as remoteJsonRequest; never hangs, never
+ *  throws. */
+export async function remoteRawRequest(host, path, opts) {
+    const bearer = resolveBearer(host, opts);
+    if (!bearer.ok)
+        return { ok: false, kind: "bearer", detail: bearer.detail };
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const url = `${host.url.replace(/\/$/, "")}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), opts.timeoutMs);
+    let res;
+    try {
+        res = await fetchImpl(url, {
+            method: "GET",
+            headers: bearer.token ? { Authorization: `Bearer ${bearer.token}` } : {},
+            signal: controller.signal,
+        });
+    }
+    catch (err) {
+        clearTimeout(timer);
+        if (controller.signal.aborted)
+            return { ok: false, kind: "timeout", phase: "request", detail: "" };
+        return { ok: false, kind: "network", detail: err.message };
+    }
+    const abortRace = new Promise((_resolve, reject) => {
+        const onAbort = () => reject(new Error("body read aborted"));
+        if (controller.signal.aborted)
+            onAbort();
+        else
+            controller.signal.addEventListener("abort", onAbort, { once: true });
+    });
+    let bodyText = "";
+    let bodyTimedOut = false;
+    try {
+        bodyText = await Promise.race([res.text(), abortRace]);
+    }
+    catch {
+        if (controller.signal.aborted)
+            bodyTimedOut = true;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    if (bodyTimedOut)
+        return { ok: false, kind: "timeout", phase: "body", status: res.status, detail: "" };
+    return { ok: true, status: res.status, contentType: res.headers.get("content-type") ?? "application/json", bodyText };
+}
 //# sourceMappingURL=remote-daemon-http.js.map

package/daemon/dist/domain/hosts/remote-daemon-http.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-daemon-http.js","sourceRoot":"","sources":["../../../src/domain/hosts/remote-daemon-http.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,uEAAuE;AACvE,oEAAoE;AACpE,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,oEAAoE;AACpE,yEAAyE;AACzE,2BAA2B;AAC3B,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,qEAAqE;AACrE,sEAAsE;AACtE,wEAAwE;AACxE,6CAA6C;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAiCvC;uDACuD;AACvD,SAAS,aAAa,CAAC,IAAmB,EAAE,IAAoB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,IAAI,CAAC,UAAU,iCAAiC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,IAAI,CAAC,WAAW,sBAAsB,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,IAAI,CAAC,WAAW,0BAA0B,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;QACnG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,EAAE,8CAA8C,EAAE,CAAC;AAC9F,CAAC;AAED;;wBAEwB;AACxB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAmB,EAAE,IAAY,EAAE,IAAuB;IAChG,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAE5E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnE,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;aACxC;YACD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACnG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;;YACpC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,OAAgB,CAAC;IACrB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,YAAY,GAAG,IAAI,CAAC;QACnD,6EAA6E;IAC/E,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAE5F,MAAM,WAAW,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAQ,OAA+B,CAAC,KAAK,KAAK,QAAQ;QACtH,CAAC,CAAE,OAA6B,CAAC,KAAK;QACtC,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC9E,CAAC"}
+{"version":3,"file":"remote-daemon-http.js","sourceRoot":"","sources":["../../../src/domain/hosts/remote-daemon-http.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,sEAAsE;AACtE,uEAAuE;AACvE,oEAAoE;AACpE,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,oEAAoE;AACpE,yEAAyE;AACzE,2BAA2B;AAC3B,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,qEAAqE;AACrE,sEAAsE;AACtE,wEAAwE;AACxE,6CAA6C;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAkDvC;;;;2BAI2B;AAC3B,SAAS,aAAa,CAAC,IAAmB,EAAE,IAAoB;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,IAAI,CAAC,UAAU,iCAAiC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,KAAK;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,IAAI,CAAC,WAAW,sBAAsB,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,IAAI,CAAC,WAAW,0BAA0B,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC;QACnG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;wBAEwB;AACxB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAmB,EAAE,IAAY,EAAE,IAAuB;IAChG,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAE5E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnE,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;YACD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACnG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;;YACpC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,OAAgB,CAAC;IACrB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,YAAY,GAAG,IAAI,CAAC;QACnD,6EAA6E;IAC/E,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAE5F,MAAM,WAAW,GAAG,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAQ,OAA+B,CAAC,KAAK,KAAK,QAAQ;QACtH,CAAC,CAAE,OAA6B,CAAC,KAAK;QACtC,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC9E,CAAC;AAED;;;cAGc;AACd,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAmB,EAAE,IAAY,EAAE,IAAsB;IAC9F,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAE5E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IACpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnE,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACzB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;YACxE,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACnG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;;YACpC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,YAAY,GAAG,IAAI,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,IAAI,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kBAAkB,EAAE,QAAQ,EAAE,CAAC;AACxH,CAAC"}

package/daemon/dist/domain/node-inventory.d.ts

@@ -2,6 +2,7 @@ import type Database from "better-sqlite3";
 import type { NodeInventoryEntry, NodeDetailEntry, NodeRestoreOutcome, NodeLifecycleState, Snapshot, SeatIdentityVerdictKind } from "./types.js";
 import type { RuntimeAdapter } from "./runtime-adapter.js";
 import type { ContextUsageStore } from "./context-usage-store.js";
+import type { TranscriptStore } from "./transcript-store.js";
 import type { AgentActivityStore } from "./agent-activity-store.js";
 import type { SeatActivityService } from "./seat-activity-service.js";
 import type { TmuxAdapter } from "../adapters/tmux.js";
@@ -36,6 +37,8 @@ export declare function deriveNodeLifecycleState(input: {
  * Single source of truth consumed by CLI, UI, and MCP.
  */
 export declare function getNodeInventory(db: Database.Database, rigId: string): NodeInventoryEntry[];
+export declare function getNodeInventoryForAllRigs(db: Database.Database): Map<string, NodeInventoryEntry[]>;
+export declare function getNodeInventoryForRigs(db: Database.Database, rigIds: ReadonlySet<string>): Map<string, NodeInventoryEntry[]>;
 /**
  * Get detailed node information including startup files, resources, and events.
  * The adapter dependency is optional — when provided, uses live listInstalled;
@@ -54,7 +57,7 @@ export declare function getNodeDetail(db: Database.Database, rigId: string, logi
  * Context-aware wrapper: returns inventory with context usage attached.
  * Uses one daemon-owned ContextUsageStore for all reads.
  */
-export declare function getNodeInventoryWithContext(db: Database.Database, rigId: string, contextUsageStore: ContextUsageStore): NodeInventoryEntry[];
+export declare function getNodeInventoryWithContext(db: Database.Database, rigId: string, contextUsageStore: ContextUsageStore, transcriptStore?: Pick<TranscriptStore, "getIngestHealth">): NodeInventoryEntry[];
 /**
  * Context-aware wrapper: returns node detail with context usage attached.
  */
@@ -76,6 +79,12 @@ export declare function attachTerminalActivityAndWork(entries: NodeInventoryEntr
     db: Database.Database;
     seatActivity?: SeatActivityService;
 }): NodeInventoryEntry[];
+/** EXPORTED (OPR.0.4.6.FAC1): the derived canonical coordinate
+ *  `{pod}-{member}@{rig}` for an inventory entry — the binding layer's
+ *  ONE string rule (tiebreak key AND recorded destination) reuses
+ *  exactly this dual-key derivation, never a parallel one. */
+export declare function deriveCanonicalFromEntry(entry: NodeInventoryEntry): string | null;
+export declare function readPendingWorkBySession(db: Database.Database): Map<string, number>;
 export declare function attachAgentActivity(entries: NodeInventoryEntry[], deps: {
     tmuxAdapter: TmuxAdapter;
     activityStore?: AgentActivityStore;

package/daemon/dist/domain/node-inventory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-inventory.d.ts","sourceRoot":"","sources":["../../src/domain/node-inventory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAyD,kBAAkB,EAAE,kBAAkB,EAAgD,QAAQ,EAAsC,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAI1R,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAwJvD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,kBAAkB,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,QAAQ,GAAG,IAAI,CAAC;IAChC;;;gEAG4D;IAC5D,eAAe,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;CAClD,GAAG,kBAAkB,CA2BrB;AA0KD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAqI3F;AAiBD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;IACL,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1C,iGAAiG;IACjG,0BAA0B,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1F,GACA,eAAe,GAAG,IAAI,CA0JxB;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,MAAM,EACb,iBAAiB,EAAE,iBAAiB,GACnC,kBAAkB,EAAE,CA0BtB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,iBAAiB,EACpC,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,GACzC,eAAe,GAAG,IAAI,CAexB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,kBAAkB,EAAE,EAC7B,IAAI,EAAE;IAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAAC,YAAY,CAAC,EAAE,mBAAmB,CAAA;CAAE,GAClE,kBAAkB,EAAE,CAiBtB;AAqED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,EAAE,EAC7B,IAAI,EAAE;IACJ,WAAW,EAAE,WAAW,CAAC;IACzB,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,GAAG,CAAC,EAAE,IAAI,CAAC;IAaX,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GACA,OAAO,CAAC,kBAAkB,EAAE,CAAC,CA2C/B"}
+{"version":3,"file":"node-inventory.d.ts","sourceRoot":"","sources":["../../src/domain/node-inventory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAyD,kBAAkB,EAAgB,kBAAkB,EAAgD,QAAQ,EAAsC,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAIxS,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAyJvD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,kBAAkB,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,QAAQ,GAAG,IAAI,CAAC;IAChC;;;gEAG4D;IAC5D,eAAe,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;CAClD,GAAG,kBAAkB,CA2BrB;AAuLD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAsB3F;AAwPD,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAEnG;AAQD,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAG7H;AAiBD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;IACL,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1C,iGAAiG;IACjG,0BAA0B,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1F,GACA,eAAe,GAAG,IAAI,CA0JxB;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,MAAM,EACb,iBAAiB,EAAE,iBAAiB,EACpC,eAAe,CAAC,EAAE,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,GACzD,kBAAkB,EAAE,CAoCtB;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,iBAAiB,EACpC,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,GACzC,eAAe,GAAG,IAAI,CAexB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,kBAAkB,EAAE,EAC7B,IAAI,EAAE;IAAE,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAAC,YAAY,CAAC,EAAE,mBAAmB,CAAA;CAAE,GAClE,kBAAkB,EAAE,CAiBtB;AAgDD;;;8DAG8D;AAC9D,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAOjF;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAUnF;AAED,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,kBAAkB,EAAE,EAC7B,IAAI,EAAE;IACJ,WAAW,EAAE,WAAW,CAAC;IACzB,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,GAAG,CAAC,EAAE,IAAI,CAAC;IAaX,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GACA,OAAO,CAAC,kBAAkB,EAAE,CAAC,CA2C/B"}

package/daemon/dist/domain/node-inventory.js

@@ -1,8 +1,8 @@
 import { identityVerdictDownranksRunning } from "./types.js";
 import { SeatIdentityStore } from "./seat-identity-store.js";
-import { deriveOriented } from "./startup-proof.js";
+import { buildOrientedMap } from "./startup-proof.js";
 import { probeSessionActivity } from "./session-transport.js";
-import { findLatestUsableSnapshot } from "./rig-repository.js";
+import { findLatestUsableSnapshot, findLatestUsableSnapshotsForAllRigs } from "./rig-repository.js";
 import { resolveNodeWorkspace } from "./workspace/workspace-resolver.js";
 import { deriveCanonicalSessionName } from "./session-name.js";
 import { buildNativeResumeCommand, buildCodexResumeCore } from "./native-resume-probe.js";
@@ -142,32 +142,47 @@ function deriveContinuityOutcome(row, restoreOutcome) {
         return null;
     return restoreOutcome;
 }
-function deriveRestoreOutcome(db, rigId, nodeId) {
-    // OPR.0.3.4.11 + 0.4.0.16: per-node-latest across restore.completed,
-    // restore.subset_completed, AND restore.outcome_reconciled.
-    // restore.outcome_reconciled has a different shape: top-level nodeId/to,
-    // not result.nodes[]. A newer reconcile overrides an older failure; an
-    // older reconcile must not override a newer failure.
-    const rows = db.prepare("SELECT type, payload, seq FROM events WHERE rig_id = ? AND type IN ('restore.completed', 'restore.subset_completed', 'restore.outcome_reconciled') ORDER BY seq DESC").all(rigId);
+// FS-1 W1.3 S1 — hoist restore-outcome derivation to ONCE-PER-RIG.
+// Prior shape: deriveRestoreOutcome(db, rigId, nodeId) fetched + JSON-parsed the
+// rig's ENTIRE restore-event set once PER NODE inside buildInventoryEntry (K
+// nodes x E events per rig per poll = the dominant W3 residual). This builds a
+// nodeId->outcome map in ONE seq-DESC pass and buildInventoryEntry does an O(1)
+// lookup.
+//   OPR.0.3.4.11 + 0.4.0.16: per-node-latest across restore.completed,
+//   restore.subset_completed, AND restore.outcome_reconciled. reconciled has a
+//   different shape (top-level nodeId/to, not result.nodes[]).
+// BYTE-IDENTICAL BY CONSTRUCTION: the prior per-node reader returned the FIRST
+// event in seq-DESC order that referenced the node. This single seq-DESC pass
+// sets a node's outcome ONLY IF ABSENT — so the first (highest-seq) event
+// referencing a node wins, reproducing exactly that (incl.
+// newer-reconcile-overrides-older-failure). rigId given -> WHERE rig_id=? (the
+// prior single-rig filter); rigId omitted -> all rigs in one pass (a nodeId is
+// referenced only by its own rig's events, so the per-node value is identical).
+// [GUARD AT CODE REVIEW: the only-if-absent set is the one load-bearing
+//  semantics cell — it is what preserves first/newest-wins.]
+function buildRestoreOutcomeMap(db, rigId) {
+    const stmt = db.prepare(`SELECT type, payload, seq FROM events WHERE type IN ('restore.completed', 'restore.subset_completed', 'restore.outcome_reconciled')${rigId ? " AND rig_id = ?" : ""} ORDER BY seq DESC`);
+    const rows = (rigId ? stmt.all(rigId) : stmt.all());
+    const map = new Map();
     for (const row of rows) {
         try {
             if (row.type === "restore.outcome_reconciled") {
                 const event = JSON.parse(row.payload);
-                if (event.nodeId !== nodeId)
-                    continue;
-                return mapStatus(event.to);
+                if (!map.has(event.nodeId))
+                    map.set(event.nodeId, mapStatus(event.to));
+                continue;
             }
             const event = JSON.parse(row.payload);
-            const nodeResult = event.result.nodes.find((n) => n.nodeId === nodeId);
-            if (!nodeResult)
-                continue;
-            return mapStatus(nodeResult.status);
+            for (const nodeResult of event.result.nodes) {
+                if (!map.has(nodeResult.nodeId))
+                    map.set(nodeResult.nodeId, mapStatus(nodeResult.status));
+            }
         }
         catch {
             continue;
         }
     }
-    return "n-a";
+    return map;
 }
 function mapStatus(status) {
     if (status === "resumed")
@@ -288,6 +303,27 @@ export function getNodeInventory(db, rigId) {
     // per projection (cheap indexed read, defensive to a missing table). Gates
     // the running/active green derivations below.
     const identityVerdicts = new SeatIdentityStore(db).getForRig(rigId);
+    // FS-1 W1.3 S1/S2 — the per-node restore-outcome + oriented reads built ONCE
+    // for the rig (was a query per node inside the rows.map). rig-scoped restore
+    // map = the prior WHERE rig_id=? filter; oriented map is node-scoped/global.
+    const restoreOutcomes = buildRestoreOutcomeMap(db, rigId);
+    const orienteds = buildOrientedMap(db);
+    const rows = queryInventoryRows(db, rigId);
+    return rows.map((row) => buildInventoryEntry(db, row, { usableSnapshot, workspaceSpec, identityVerdicts, restoreOutcomes, orienteds }));
+}
+/**
+ * FS-1 W1.2 — the shared inventory-row query. Extracted verbatim from the prior
+ * inline `getNodeInventory` SELECT so the single-rig and all-rigs paths run the
+ * IDENTICAL query.
+ *   - `rigId` given → one rig (`WHERE n.rig_id = ?`, `ORDER BY n.created_at`) —
+ *     byte-identical to the prior per-rig read.
+ *   - `rigId` omitted → ALL rigs in one pass (no WHERE; `ORDER BY n.rig_id,
+ *     n.created_at` so JS grouping preserves each rig's `created_at` order,
+ *     matching the per-rig ordering exactly).
+ * The latest-session subquery (`s2.node_id = n.id ORDER BY id DESC LIMIT 1`)
+ * rides the W1.1 index (051, idx_sessions_node_created_id).
+ */
+function runInventoryRowQuery(db, whereClause, orderClause, params) {
     // Join nodes with newest session (max ULID = max session.id string comparison)
     // and the rig name
     const hasCodexConfigProfile = db.prepare("PRAGMA table_info(nodes)").all()
@@ -295,7 +331,7 @@ export function getNodeInventory(db, rigId) {
     const codexConfigProfileSelect = hasCodexConfigProfile
         ? "n.codex_config_profile"
         : "NULL";
-    const rows = db.prepare(`
+    const stmt = db.prepare(`
     SELECT
       n.id as node_id,
       n.rig_id,
@@ -303,6 +339,7 @@ export function getNodeInventory(db, rigId) {
       n.logical_id,
       n.pod_id,
       p.namespace as pod_namespace,
+      n.role,
       n.runtime,
       n.model,
       ${codexConfigProfileSelect} as codex_config_profile,
@@ -332,82 +369,184 @@ export function getNodeInventory(db, rigId) {
     LEFT JOIN sessions s ON s.node_id = n.id
       AND s.id = (SELECT s2.id FROM sessions s2 WHERE s2.node_id = n.id ORDER BY s2.id DESC LIMIT 1)
     LEFT JOIN bindings b ON b.node_id = n.id
-    WHERE n.rig_id = ?
-    ORDER BY n.created_at
-  `).all(rigId);
-    return rows.map((row) => {
-        const restoreOutcome = deriveRestoreOutcome(db, rigId, row.node_id);
-        // OPR.0.4.3.19 rev1-r2 B1 — a durable verdict is keyed only by node_id, so
-        // after a rebind/relaunch (same node, NEW session + NEW pane) a stale
-        // `verified` verdict for the OLD pane would otherwise be served for the new
-        // pane until the next 5s reconcile tick, suppressing down-rank and rendering
-        // a fresh squat/orphan false-green. Make applicability LOAD-BEARING at read
-        // time: a stored verdict applies ONLY when it was computed against the
-        // current binding (its sessionName === the latest session AND its
-        // registeredPane === the current binding pane). Otherwise treat it as ABSENT
-        // (null) — a STALE verdict becomes fail-open (never down-ranks a running
-        // seat), it does NOT itself down-rank. Only a MATCHING mismatch/pane_missing
-        // verdict down-ranks.
-        const identityVerdict = applicableVerdict(identityVerdicts.get(row.node_id) ?? null, row);
-        const lifecycleState = deriveNodeLifecycleState({
-            sessionStatus: row.session_status,
-            restoreOutcome,
-            nodeId: row.node_id,
-            usableSnapshot,
-            identityVerdict: identityVerdict?.verdict ?? null,
-        });
-        return {
-            rigId: row.rig_id,
-            rigName: row.rig_name,
-            logicalId: row.logical_id,
-            podId: row.pod_id,
-            podNamespace: row.pod_namespace,
-            canonicalSessionName: row.session_name,
-            attachmentType: row.binding_attachment_type ?? null,
-            nodeKind: deriveNodeKind(row.runtime),
-            runtime: row.runtime,
-            sessionStatus: row.session_status,
-            startupStatus: row.startup_status,
-            restoreOutcome,
-            oriented: deriveOriented(db, row.node_id),
-            lifecycleState,
-            occupantLifecycle: deriveOccupantLifecycle(row, identityVerdict?.verdict ?? null),
-            continuityOutcome: deriveContinuityOutcome(row, restoreOutcome),
-            handoverResult: row.handover_result ?? null,
-            previousOccupant: row.previous_occupant,
-            handoverAt: row.handover_at,
-            tmuxAttachCommand: row.binding_attachment_type === "tmux" && row.session_name ? `tmux attach -t ${row.session_name}` : null,
-            resumeCommand: computeResumeCommand(row.runtime, row.resume_token, row.codex_config_profile),
-            // OPR.0.4.0.26: recoveryGuidance is NOT inlined per node in the LIST
-            // payload. It duplicated ~47KB of templated prose across all nodes and
-            // no node-list consumer reads it. The full guidance is recomputed on
-            // the single-node detail path (getNodeDetail / GET
-            // /api/rigs/:rigId/nodes/:logicalId) — relocation, not loss.
-            recoveryGuidance: null,
-            latestError: row.startup_status === "ready" ? null : getLatestError(db, rigId, row.node_id),
-            // Extended fields
-            model: row.model,
-            agentRef: row.agent_ref,
-            profile: row.profile,
-            codexConfigProfile: row.codex_config_profile,
-            resolvedSpecName: row.resolved_spec_name,
-            resolvedSpecVersion: row.resolved_spec_version,
-            resolvedSpecHash: row.resolved_spec_hash,
-            cwd: row.cwd,
-            restorePolicy: row.restore_policy,
-            resumeType: row.resume_type,
-            resumeToken: row.resume_token,
-            startupCompletedAt: row.startup_completed_at,
-            // PL-007 Workspace Primitive — per-node workspace summary derived
-            // from cwd against the rig's typed workspace block. null when the
-            // rig has no workspace declaration.
-            workspace: resolveNodeWorkspace({ spec: workspaceSpec, cwd: row.cwd }),
-            // OPR.0.4.3.19 — the liveness identity verdict (third axis). null when
-            // never observed; carries evidence on mismatch/missing.
-            identityVerdict,
-            heldReason: deriveHeldReason(db, rigId, row.node_id, row.session_status),
-        };
+    ${whereClause}
+    ORDER BY ${orderClause}
+  `);
+    return stmt.all(...params);
+}
+// Single-rig (WHERE n.rig_id=?) or ALL-rigs (no WHERE). Byte-identical SQL/order to
+// the prior inline read; existing single-rig callers are unchanged.
+function queryInventoryRows(db, rigId) {
+    return runInventoryRowQuery(db, rigId ? "WHERE n.rig_id = ?" : "", rigId ? "n.created_at" : "n.rig_id, n.created_at", rigId ? [rigId] : []);
+}
+// Scoped to a rig-id SET — every IN value bound as a parameter; per-rig created_at
+// order preserved (same ORDER BY as the all-rigs path). Callers guarantee a
+// non-empty list (empty set → getNodeInventoryForRigs returns early, no query run).
+function queryInventoryRowsForRigs(db, rigIds) {
+    const placeholders = rigIds.map(() => "?").join(", ");
+    return runInventoryRowQuery(db, `WHERE n.rig_id IN (${placeholders})`, "n.rig_id, n.created_at", rigIds);
+}
+function buildInventoryEntry(db, row, ctx) {
+    const { usableSnapshot, workspaceSpec, identityVerdicts, restoreOutcomes, orienteds } = ctx;
+    // FS-1 W1.3 S1 — O(1) lookup into the once-per-rig restore-outcome map
+    // (byte-identical to the prior per-node deriveRestoreOutcome; "n-a" when a node
+    // is referenced by no restore event, matching the prior fall-through).
+    const restoreOutcome = restoreOutcomes.get(row.node_id) ?? "n-a";
+    // OPR.0.4.3.19 rev1-r2 B1 — a durable verdict is keyed only by node_id, so
+    // after a rebind/relaunch (same node, NEW session + NEW pane) a stale
+    // `verified` verdict for the OLD pane would otherwise be served for the new
+    // pane until the next 5s reconcile tick, suppressing down-rank and rendering
+    // a fresh squat/orphan false-green. Make applicability LOAD-BEARING at read
+    // time: a stored verdict applies ONLY when it was computed against the
+    // current binding (its sessionName === the latest session AND its
+    // registeredPane === the current binding pane). Otherwise treat it as ABSENT
+    // (null) — a STALE verdict becomes fail-open (never down-ranks a running
+    // seat), it does NOT itself down-rank. Only a MATCHING mismatch/pane_missing
+    // verdict down-ranks.
+    const identityVerdict = applicableVerdict(identityVerdicts.get(row.node_id) ?? null, row);
+    const lifecycleState = deriveNodeLifecycleState({
+        sessionStatus: row.session_status,
+        restoreOutcome,
+        nodeId: row.node_id,
+        usableSnapshot,
+        identityVerdict: identityVerdict?.verdict ?? null,
     });
+    return {
+        rigId: row.rig_id,
+        rigName: row.rig_name,
+        logicalId: row.logical_id,
+        podId: row.pod_id,
+        podNamespace: row.pod_namespace,
+        // OPR.0.4.6.FAC1: the seat-side role dimension (nodes.role,
+        // declared in the pod-member spec) — the workflow binding layer's
+        // candidate filter. null = role-less (never role-resolved).
+        role: row.role,
+        canonicalSessionName: row.session_name,
+        attachmentType: row.binding_attachment_type ?? null,
+        nodeKind: deriveNodeKind(row.runtime),
+        runtime: row.runtime,
+        sessionStatus: row.session_status,
+        startupStatus: row.startup_status,
+        restoreOutcome,
+        // FS-1 W1.3 S2 — O(1) lookup into the fleet-batched oriented map
+        // (byte-identical to the prior per-node deriveOriented; "n-a" when a node has
+        // no proof events, matching deriveOriented's no-challenge branch).
+        oriented: orienteds.get(row.node_id) ?? "n-a",
+        lifecycleState,
+        occupantLifecycle: deriveOccupantLifecycle(row, identityVerdict?.verdict ?? null),
+        continuityOutcome: deriveContinuityOutcome(row, restoreOutcome),
+        handoverResult: row.handover_result ?? null,
+        previousOccupant: row.previous_occupant,
+        handoverAt: row.handover_at,
+        tmuxAttachCommand: row.binding_attachment_type === "tmux" && row.session_name ? `tmux attach -t ${row.session_name}` : null,
+        resumeCommand: computeResumeCommand(row.runtime, row.resume_token, row.codex_config_profile),
+        // OPR.0.4.0.26: recoveryGuidance is NOT inlined per node in the LIST
+        // payload. It duplicated ~47KB of templated prose across all nodes and
+        // no node-list consumer reads it. The full guidance is recomputed on
+        // the single-node detail path (getNodeDetail / GET
+        // /api/rigs/:rigId/nodes/:logicalId) — relocation, not loss.
+        recoveryGuidance: null,
+        latestError: row.startup_status === "ready" ? null : getLatestError(db, row.rig_id, row.node_id),
+        // Extended fields
+        model: row.model,
+        agentRef: row.agent_ref,
+        profile: row.profile,
+        codexConfigProfile: row.codex_config_profile,
+        resolvedSpecName: row.resolved_spec_name,
+        resolvedSpecVersion: row.resolved_spec_version,
+        resolvedSpecHash: row.resolved_spec_hash,
+        cwd: row.cwd,
+        restorePolicy: row.restore_policy,
+        resumeType: row.resume_type,
+        resumeToken: row.resume_token,
+        startupCompletedAt: row.startup_completed_at,
+        // PL-007 Workspace Primitive — per-node workspace summary derived
+        // from cwd against the rig's typed workspace block. null when the
+        // rig has no workspace declaration.
+        workspace: resolveNodeWorkspace({ spec: workspaceSpec, cwd: row.cwd }),
+        // OPR.0.4.3.19 — the liveness identity verdict (third axis). null when
+        // never observed; carries evidence on mismatch/missing.
+        identityVerdict,
+        heldReason: deriveHeldReason(db, row.rig_id, row.node_id, row.session_status),
+    };
+}
+/** FS-1 W1.2 — all-rigs batched form of `readRigWorkspaceJson`: one query,
+ *  `rigId → WorkspaceSpec`. Rigs with no/malformed workspace are absent (callers
+ *  default to null — byte-identical to `readRigWorkspaceJson`'s null return). */
+function readAllRigWorkspaceJson(db) {
+    const out = new Map();
+    try {
+        const rows = db.prepare("SELECT id, workspace_json FROM rigs").all();
+        for (const row of rows) {
+            if (!row.workspace_json)
+                continue;
+            try {
+                out.set(row.id, JSON.parse(row.workspace_json));
+            }
+            catch { /* malformed → absent → caller null (matches per-rig) */ }
+        }
+    }
+    catch { /* column/table absent → empty → caller null (matches per-rig defensive path) */ }
+    return out;
+}
+/**
+ * FS-1 W1.2 — the rig-level N+1 collapse. Builds inventory for ALL rigs in a
+ * bounded, rig-count-INDEPENDENT set of queries: 3 batched setup reads
+ * (snapshots / workspaces / identity verdicts) + 1 all-rigs node SELECT, grouped
+ * by rig_id. Every entry is built through the SAME `buildInventoryEntry` that the
+ * per-rig `getNodeInventory` uses, so `getNodeInventoryForAllRigs(db).get(rigId)`
+ * is byte-identical to `getNodeInventory(db, rigId)` — the collapse changes only
+ * HOW the context + rows are fetched (batched vs per-rig), never how an entry is
+ * derived. Per-node reads inside `buildInventoryEntry` (`deriveRestoreOutcome`
+ * etc.) remain per-node and ride the 047 index — NOT the rig-level N+1 removed here.
+ */
+// Shared batched builder — the common body of the all-rigs and scoped-rigs paths.
+// Builds the fleet setup maps + EXACTLY one fleet startup-orientation
+// (buildOrientedMap) and one fleet restore-outcome (buildRestoreOutcomeMap) scan
+// ONCE, then builds a NodeInventoryEntry for each PROVIDED row via the SAME
+// buildInventoryEntry, grouped by rig_id with per-rig created_at order preserved.
+// `rows` decides the scope (all rigs vs a selected rig set); entry derivation is
+// identical, so a rig's entries are byte-identical regardless of which caller ran.
+function buildInventoryMapFromRows(db, rows) {
+    const snapshotByRig = findLatestUsableSnapshotsForAllRigs(db);
+    const workspaceByRig = readAllRigWorkspaceJson(db);
+    const verdictsByRig = new SeatIdentityStore(db).getForAllRigs();
+    // FS-1 W1.3 S1/S2 — the per-node reads built ONCE (O(1) queries, not O(nodes)).
+    // Restore map unscoped: a nodeId is referenced only by its own rig's restore
+    // events, so each node's value equals the single-rig path.
+    const restoreOutcomes = buildRestoreOutcomeMap(db); // one fleet restore-outcome scan
+    const orienteds = buildOrientedMap(db); // one fleet startup-orientation scan
+    const out = new Map();
+    for (const row of rows) {
+        const entry = buildInventoryEntry(db, row, {
+            usableSnapshot: snapshotByRig.get(row.rig_id) ?? null,
+            workspaceSpec: workspaceByRig.get(row.rig_id) ?? null,
+            identityVerdicts: verdictsByRig.get(row.rig_id) ?? new Map(),
+            restoreOutcomes,
+            orienteds,
+        });
+        let list = out.get(row.rig_id);
+        if (!list) {
+            list = [];
+            out.set(row.rig_id, list);
+        }
+        list.push(entry);
+    }
+    return out;
+}
+export function getNodeInventoryForAllRigs(db) {
+    return buildInventoryMapFromRows(db, queryInventoryRows(db));
+}
+// slice-04 — inventory for a SELECTED set of rigs only (e.g. the rigs a summary
+// actually returns), so the per-node fold never widens to rigs the caller excluded
+// (e.g. archived). Retains exactly one fleet startup-orientation + one fleet
+// restore-outcome scan via the shared builder. Empty set → empty Map, NO scans and
+// no invalid `IN ()`. getNodeInventoryForRigs(db, {r}).get(r) is byte-identical to
+// the all-rigs path's entry list for r (same rows, same builder).
+export function getNodeInventoryForRigs(db, rigIds) {
+    if (rigIds.size === 0)
+        return new Map();
+    return buildInventoryMapFromRows(db, queryInventoryRowsForRigs(db, [...rigIds]));
 }
 /** PL-007 — read the rig's typed workspace block from `rigs.workspace_json`
  *  defensively. Migration 038 may not yet be applied in older test fixtures
@@ -577,7 +716,7 @@ export function getNodeDetail(db, rigId, logicalId, opts) {
  * Context-aware wrapper: returns inventory with context usage attached.
  * Uses one daemon-owned ContextUsageStore for all reads.
  */
-export function getNodeInventoryWithContext(db, rigId, contextUsageStore) {
+export function getNodeInventoryWithContext(db, rigId, contextUsageStore, transcriptStore) {
     const entries = getNodeInventory(db, rigId);
     // Find node IDs for batch read
     const nodeRows = db.prepare("SELECT id, logical_id FROM nodes WHERE rig_id = ?").all(rigId);
@@ -595,7 +734,17 @@ export function getNodeInventoryWithContext(db, rigId, contextUsageStore) {
         // large fleet; no node-list consumer reads it). All scalars are kept so
         // the ring/table/filter consumers are unaffected. The full currentUsage
         // remains on the detail/whoami path (getNodeDetailWithContext, whoami).
-        return { ...e, contextUsage: { ...usage, currentUsage: null } };
+        const transcriptIngest = transcriptStore && e.canonicalSessionName
+            ? {
+                ...transcriptStore.getIngestHealth(e.rigName, e.canonicalSessionName),
+                runtime: e.runtime,
+            }
+            : undefined;
+        return {
+            ...e,
+            contextUsage: { ...usage, currentUsage: null },
+            ...(transcriptIngest ? { transcriptIngest } : {}),
+        };
     });
 }
 /**
@@ -689,7 +838,11 @@ function countPendingForEntry(entry, pendingByDest) {
     }
     return count;
 }
-function deriveCanonicalFromEntry(entry) {
+/** EXPORTED (OPR.0.4.6.FAC1): the derived canonical coordinate
+ *  `{pod}-{member}@{rig}` for an inventory entry — the binding layer's
+ *  ONE string rule (tiebreak key AND recorded destination) reuses
+ *  exactly this dual-key derivation, never a parallel one. */
+export function deriveCanonicalFromEntry(entry) {
     if (!entry.rigName || !entry.logicalId)
         return null;
     const dotIdx = entry.logicalId.indexOf(".");
@@ -699,7 +852,7 @@ function deriveCanonicalFromEntry(entry) {
     const member = entry.logicalId.slice(dotIdx + 1);
     return deriveCanonicalSessionName(pod, member, entry.rigName);
 }
-function readPendingWorkBySession(db) {
+export function readPendingWorkBySession(db) {
     const rows = db.prepare(`
     SELECT destination_session, COUNT(*) as c
     FROM queue_items