@openrig/cli 0.4.8 → 0.5.0

package/daemon/dist/domain/plugin-vendor-service.js

@@ -58,14 +58,33 @@ export class PluginVendorService {
             const srcPath = nodePath.join(sourceDir, relPath);
             const destPath = nodePath.join(targetDir, relPath);
             const content = this.fs.readFile(srcPath);
-            // Hash-skip: only write if content differs (idempotent re-runs)
+            // Hash-skip: only write if content differs (idempotent re-runs). Reconcile mode even on
+            // skip — a byte-identical copy staged earlier may still carry the wrong (default) mode.
             if (this.fs.exists(destPath) && hashContent(this.fs.readFile(destPath)) === hashContent(content)) {
+                this.preserveMode(srcPath, destPath);
                 continue;
             }
             this.fs.mkdirp(nodePath.dirname(destPath));
             this.fs.writeFile(destPath, content);
+            this.preserveMode(srcPath, destPath);
         }
     }
+    /**
+     * Reapply the source file's permission bits to the staged/projected dest. Plain
+     * readFile+writeFile (writeFileSync) creates the dest with the process default mode,
+     * dropping executable bits on nested plugin helpers (e.g. claude-compaction-restore/
+     * scripts/*.mjs, 0755). This vendor-staging hop (assets -> ~/.openrig/plugins) runs
+     * UPSTREAM of the adapter CWD projection, so an unfixed mode here strands 0644 in the
+     * staged copy that the adapters then faithfully preserve. No-op when the fs adapter does
+     * not expose mode primitives (keeps existing mock-fs callers unaffected).
+     */
+    preserveMode(src, dest) {
+        if (!this.fs.statMode || !this.fs.chmod)
+            return;
+        const srcMode = this.fs.statMode(src) & 0o777;
+        if ((this.fs.statMode(dest) & 0o777) !== srcMode)
+            this.fs.chmod(dest, srcMode);
+    }
     /** Project one plugin skill into the harness-global skill roots. */
     ensureSkillGlobally(pluginName, skillName, globalSkillRoots) {
         const sourceDir = nodePath.join(this.userPluginsDir, pluginName, "skills", skillName);
@@ -82,10 +101,12 @@ export class PluginVendorService {
                 const content = this.fs.readFile(srcPath);
                 if (this.fs.exists(destPath) &&
                     hashContent(this.fs.readFile(destPath)) === hashContent(content)) {
+                    this.preserveMode(srcPath, destPath);
                     continue;
                 }
                 this.fs.mkdirp(nodePath.dirname(destPath));
                 this.fs.writeFile(destPath, content);
+                this.preserveMode(srcPath, destPath);
             }
         }
     }
@@ -110,7 +131,10 @@ export class PluginVendorService {
             }
             // v0: tarball extraction NOT implemented — when slice 3.6 lands marketplace-
             // consumption, this is where fetch-then-extract logic lives. For now,
-            // success path just logs.
+            // success path just logs. EXPLICIT MODE DECISION: v0 writes no files here, so there is
+            // no mode to preserve; the future extract path MUST route its writes through
+            // preserveMode() (or a tar extractor that preserves mode) so fetched executable helpers
+            // keep 0755 — same invariant as ensureVendored/ensureSkillGlobally.
             this.logger(`[plugin-vendor] fetch ${pluginName} succeeded (${response.status}); v0 vendored copy still authoritative`);
         }
         catch (err) {

package/daemon/dist/domain/plugin-vendor-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-vendor-service.js","sourceRoot":"","sources":["../../src/domain/plugin-vendor-service.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,oBAAoB;AACpB,8EAA8E;AAC9E,qEAAqE;AACrE,2EAA2E;AAC3E,qCAAqC;AACrC,wDAAwD;AACxD,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,mEAAmE;AACnE,uEAAuE;AACvE,uCAAuC;AACvC,EAAE;AACF,gBAAgB;AAChB,oEAAoE;AACpE,8BAA8B;AAC9B,4CAA4C;AAC5C,0EAA0E;AAC1E,sEAAsE;AACtE,6EAA6E;AAE7E,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6BzC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,SAAS,GAAG,8CAA8C,CAAC;AAEjE,MAAM,OAAO,mBAAmB;IACtB,iBAAiB,CAAS;IAC1B,cAAc,CAAS;IACvB,EAAE,CAAiB;IACnB,UAAU,CAAa;IACvB,MAAM,CAA+B;IAE7C,YAAY,IAA6B;QACvC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAEjE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,0CAA0C,UAAU,QAAQ,SAAS,YAAY,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC1C,gEAAgE;YAChE,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjG,SAAS;YACX,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,mBAAmB,CACjB,UAAkB,EAClB,SAAiB,EACjB,gBAA0B;QAE1B,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAC7B,IAAI,CAAC,cAAc,EACnB,UAAU,EACV,QAAQ,EACR,SAAS,CACV,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,yBAAyB,SAAS,6BAA6B,UAAU,GAAG,CAC7E,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACjD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1B,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC1C,IACE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;oBACxB,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,EAChE,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC3C,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAAkB;QACvC,MAAM,GAAG,GAAG,GAAG,SAAS,6BAA6B,UAAU,SAAS,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,IAAI,CAAC,MAAM,CAAC,yBAAyB,UAAU,mFAAmF,CAAC,CAAC;gBACtI,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,yBAAyB,UAAU,oBAAoB,QAAQ,CAAC,MAAM,4BAA4B,CAAC,CAAC;gBAClH,CAAC;gBACD,OAAO;YACT,CAAC;YACD,6EAA6E;YAC7E,sEAAsE;YACtE,0BAA0B;YAC1B,IAAI,CAAC,MAAM,CAAC,yBAAyB,UAAU,eAAe,QAAQ,CAAC,MAAM,yCAAyC,CAAC,CAAC;QAC1H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,yBAAyB,UAAU,YAAY,GAAG,4BAA4B,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"plugin-vendor-service.js","sourceRoot":"","sources":["../../src/domain/plugin-vendor-service.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,4EAA4E;AAC5E,EAAE;AACF,oBAAoB;AACpB,8EAA8E;AAC9E,qEAAqE;AACrE,2EAA2E;AAC3E,qCAAqC;AACrC,wDAAwD;AACxD,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,mEAAmE;AACnE,uEAAuE;AACvE,uCAAuC;AACvC,EAAE;AACF,gBAAgB;AAChB,oEAAoE;AACpE,8BAA8B;AAC9B,4CAA4C;AAC5C,0EAA0E;AAC1E,sEAAsE;AACtE,6EAA6E;AAE7E,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiCzC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,SAAS,GAAG,8CAA8C,CAAC;AAEjE,MAAM,OAAO,mBAAmB;IACtB,iBAAiB,CAAS;IAC1B,cAAc,CAAS;IACvB,EAAE,CAAiB;IACnB,UAAU,CAAa;IACvB,MAAM,CAA+B;IAE7C,YAAY,IAA6B;QACvC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAChD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAEjE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,0CAA0C,UAAU,QAAQ,SAAS,YAAY,CAAC,CAAC;YAC/F,OAAO;QACT,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC1C,wFAAwF;YACxF,wFAAwF;YACxF,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,YAAY,CAAC,GAAW,EAAE,IAAY;QAC5C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK;YAAE,OAAO;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,OAAO;YAAE,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC;IAED,oEAAoE;IACpE,mBAAmB,CACjB,UAAkB,EAClB,SAAiB,EACjB,gBAA0B;QAE1B,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAC7B,IAAI,CAAC,cAAc,EACnB,UAAU,EACV,QAAQ,EACR,SAAS,CACV,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,yBAAyB,SAAS,6BAA6B,UAAU,GAAG,CAC7E,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;YACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACjD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1B,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC1C,IACE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;oBACxB,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,WAAW,CAAC,OAAO,CAAC,EAChE,CAAC;oBACD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBACrC,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC3C,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACrC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,UAAkB;QACvC,MAAM,GAAG,GAAG,GAAG,SAAS,6BAA6B,UAAU,SAAS,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,IAAI,CAAC,MAAM,CAAC,yBAAyB,UAAU,mFAAmF,CAAC,CAAC;gBACtI,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,yBAAyB,UAAU,oBAAoB,QAAQ,CAAC,MAAM,4BAA4B,CAAC,CAAC;gBAClH,CAAC;gBACD,OAAO;YACT,CAAC;YACD,6EAA6E;YAC7E,sEAAsE;YACtE,uFAAuF;YACvF,6EAA6E;YAC7E,wFAAwF;YACxF,oEAAoE;YACpE,IAAI,CAAC,MAAM,CAAC,yBAAyB,UAAU,eAAe,QAAQ,CAAC,MAAM,yCAAyC,CAAC,CAAC;QAC1H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,yBAAyB,UAAU,YAAY,GAAG,4BAA4B,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC"}

package/daemon/dist/domain/provider/claude-usage-reader.d.ts

@@ -0,0 +1,44 @@
+import { type ClaudeStatuslineReading } from "./provider-signals.js";
+import type { ProviderSignal } from "./provider-types.js";
+export interface ProviderUsageCacheFs {
+    readFile(path: string): string;
+    writeFile(path: string, content: string): void;
+    rename(from: string, to: string): void;
+    exists(path: string): boolean;
+}
+/** The on-disk provider_usage cache shape (authored by the Claude statusline sidecar). */
+export interface ProviderUsageCache {
+    seatSession: string;
+    /** Present only when the statusline carried valid Pro/Max rate_limits. */
+    accountKind?: "subscription";
+    asOf: string;
+    /** Present only when the statusline carried a rate_limits object. */
+    rateLimits?: ClaudeStatuslineReading;
+    staleAfter?: string;
+}
+/**
+ * Atomic write: serialize to a tmp sibling, then rename over the target. rename(2) is atomic on the
+ * same filesystem, so a concurrent reader sees EITHER the old file OR the fully-written new one —
+ * never a half-written (torn) read. The sidecar uses this so the daemon never parses a partial cache.
+ */
+export declare function writeProviderUsageCacheAtomic(fs: ProviderUsageCacheFs, path: string, cache: ProviderUsageCache): void;
+export interface ClaudeSeatRef {
+    seatSession: string;
+}
+export interface ClaudeUsageReaderDeps {
+    /** The live Claude seats to read provider_usage for. */
+    listClaudeSeats: () => ClaudeSeatRef[];
+    /** Raw cache JSON for a seat, or null if the cache file is absent (pre-first-response). Never throws. */
+    readCacheRaw: (seatSession: string) => string | null;
+    now: () => string;
+}
+/**
+ * Read each Claude seat's provider_usage cache → provider_statusline rows via
+ * claudeStatuslineSignals. Explicit unknown rows for absent cache (no_statusline_cache_yet) and
+ * cache-present-but-no/-malformed windows (empty_reading).
+ * Never throws — a malformed cache is treated as present-with-no-windows, not a crash.
+ */
+export declare function collectClaudeStatuslineSignals(deps: ClaudeUsageReaderDeps): ProviderSignal[];
+/** Read the seat-keyed cache directory using the same path consumed by daemon startup. */
+export declare function collectClaudeSignalsFromProviderUsageDirectory(directory: string, now?: () => string): ProviderSignal[];
+//# sourceMappingURL=claude-usage-reader.d.ts.map

package/daemon/dist/domain/provider/claude-usage-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-usage-reader.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/claude-usage-reader.ts"],"names":[],"mappings":"AAYA,OAAO,EAA2B,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAC/B;AAED,0FAA0F;AAC1F,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,cAAc,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,EAAE,EAAE,oBAAoB,EACxB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,kBAAkB,GACxB,IAAI,CAIN;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,wDAAwD;IACxD,eAAe,EAAE,MAAM,aAAa,EAAE,CAAC;IACvC,yGAAyG;IACzG,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACrD,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,qBAAqB,GAAG,cAAc,EAAE,CAmC5F;AAED,0FAA0F;AAC1F,wBAAgB,8CAA8C,CAC5D,SAAS,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,MAAuC,GACjD,cAAc,EAAE,CAsBlB"}

package/daemon/dist/domain/provider/claude-usage-reader.js

@@ -0,0 +1,112 @@
+// Slice-04 (OPR.0.5.0.4) seam C3 — the Claude statusline provider_usage cache LANE.
+// A statusline sidecar writes a per-seat provider_usage cache with an atomic tmp+rename (so a
+// concurrent daemon read never sees a torn file); the daemon reads it here and normalizes it into
+// provider_statusline signal rows via the existing claudeStatuslineSignals. Absent cache
+// (pre-first-response) and empty/malformed readings each become an EXPLICIT
+// unknown row with an unknownReason — never a missing row and never a fabricated zero. Never throws.
+//
+// SCOPE: this atom is the cache producer/reader + collectSignals wiring ONLY. It does not touch the
+// C4 reactive tap, C2 Codex app-server, activity-accurate precheck, D switch execution, or BR-1.
+import fs from "node:fs";
+import nodePath from "node:path";
+import { claudeStatuslineSignals } from "./provider-signals.js";
+/**
+ * Atomic write: serialize to a tmp sibling, then rename over the target. rename(2) is atomic on the
+ * same filesystem, so a concurrent reader sees EITHER the old file OR the fully-written new one —
+ * never a half-written (torn) read. The sidecar uses this so the daemon never parses a partial cache.
+ */
+export function writeProviderUsageCacheAtomic(fs, path, cache) {
+    const tmp = `${path}.tmp-${cache.asOf.replace(/[^0-9]/g, "")}`;
+    fs.writeFile(tmp, JSON.stringify(cache));
+    fs.rename(tmp, path);
+}
+/**
+ * Read each Claude seat's provider_usage cache → provider_statusline rows via
+ * claudeStatuslineSignals. Explicit unknown rows for absent cache (no_statusline_cache_yet) and
+ * cache-present-but-no/-malformed windows (empty_reading).
+ * Never throws — a malformed cache is treated as present-with-no-windows, not a crash.
+ */
+export function collectClaudeStatuslineSignals(deps) {
+    const now = deps.now();
+    const out = [];
+    for (const seat of deps.listClaudeSeats()) {
+        let cachePresent = false;
+        let reading;
+        let staleAfter;
+        let capturedAsOf;
+        const raw = deps.readCacheRaw(seat.seatSession);
+        if (raw !== null) {
+            cachePresent = true;
+            try {
+                const parsed = JSON.parse(raw);
+                if (parsed.seatSession === seat.seatSession && parsed.accountKind === "subscription") {
+                    reading = validRateLimits(parsed.rateLimits);
+                }
+                staleAfter = parsed.staleAfter;
+                capturedAsOf = typeof parsed.asOf === "string" ? parsed.asOf : undefined;
+            }
+            catch {
+                // Malformed cache → present-with-no-windows (empty_reading unknown), never a throw.
+                reading = undefined;
+            }
+        }
+        out.push(...claudeStatuslineSignals({
+            seatSession: seat.seatSession,
+            cachePresent,
+            reading,
+            // Signal asOf = when the reading was captured (the cache's asOf) when present+valid; else now.
+            asOf: cachePresent && capturedAsOf ? capturedAsOf : now,
+            staleAfter,
+        }));
+    }
+    return out;
+}
+/** Read the seat-keyed cache directory using the same path consumed by daemon startup. */
+export function collectClaudeSignalsFromProviderUsageDirectory(directory, now = () => new Date().toISOString()) {
+    const seats = new Map();
+    try {
+        for (const file of fs.readdirSync(directory)) {
+            if (!file.endsWith(".json"))
+                continue;
+            try {
+                const parsed = JSON.parse(fs.readFileSync(nodePath.join(directory, file), "utf-8"));
+                if (typeof parsed.seatSession === "string") {
+                    seats.set(parsed.seatSession, { seatSession: parsed.seatSession });
+                }
+            }
+            catch { /* malformed cache cannot create a usable cache signal */ }
+        }
+    }
+    catch { /* absent cache directory */ }
+    return collectClaudeStatuslineSignals({
+        listClaudeSeats: () => [...seats.values()],
+        readCacheRaw: (seatSession) => {
+            const safe = seatSession.replace(/[^a-zA-Z0-9@._-]/g, "_");
+            try {
+                return fs.readFileSync(nodePath.join(directory, `${safe}.json`), "utf-8");
+            }
+            catch {
+                return null;
+            }
+        },
+        now,
+    });
+}
+function validRateLimits(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const source = value;
+    const reading = {};
+    for (const key of ["five_hour", "seven_day"]) {
+        const raw = source[key];
+        if (!raw || typeof raw !== "object" || Array.isArray(raw))
+            continue;
+        const window = raw;
+        if (typeof window.usedPercent === "number" && Number.isFinite(window.usedPercent)
+            && typeof window.resetsAt === "string") {
+            reading[key] = { usedPercent: window.usedPercent, resetsAt: window.resetsAt };
+        }
+    }
+    return reading.five_hour || reading.seven_day ? reading : undefined;
+}
+//# sourceMappingURL=claude-usage-reader.js.map

package/daemon/dist/domain/provider/claude-usage-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-usage-reader.js","sourceRoot":"","sources":["../../../src/domain/provider/claude-usage-reader.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,8FAA8F;AAC9F,kGAAkG;AAClG,yFAAyF;AACzF,4EAA4E;AAC5E,qGAAqG;AACrG,EAAE;AACF,oGAAoG;AACpG,iGAAiG;AAEjG,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAgC,MAAM,uBAAuB,CAAC;AAqB9F;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,EAAwB,EACxB,IAAY,EACZ,KAAyB;IAEzB,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;IAC/D,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAA2B;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAC1C,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,OAA4C,CAAC;QACjD,IAAI,UAA8B,CAAC;QACnC,IAAI,YAAgC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,YAAY,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgC,CAAC;gBAC9D,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,KAAK,cAAc,EAAE,CAAC;oBACrF,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC/C,CAAC;gBACD,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC/B,YAAY,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3E,CAAC;YAAC,MAAM,CAAC;gBACP,oFAAoF;gBACpF,OAAO,GAAG,SAAS,CAAC;YACtB,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CACN,GAAG,uBAAuB,CAAC;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY;YACZ,OAAO;YACP,+FAA+F;YAC/F,IAAI,EAAE,YAAY,IAAI,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG;YACvD,UAAU;SACX,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,8CAA8C,CAC5D,SAAiB,EACjB,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAElD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAA8B,CAAC;gBACjH,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;oBAC3C,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,yDAAyD,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAExC,OAAO,8BAA8B,CAAC;QACpC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC1C,YAAY,EAAE,CAAC,WAAW,EAAE,EAAE;YAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC;gBAAC,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;QAC3G,CAAC;QACD,GAAG;KACJ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,CAAU,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,SAAS;QACpE,MAAM,MAAM,GAAG,GAA8B,CAAC;QAC9C,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;eAC5E,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC"}

package/daemon/dist/domain/provider/codex-auth-reader.d.ts

@@ -0,0 +1,18 @@
+export interface CodexSeatRow {
+    seat: string;
+    rig: string;
+    runtime: string;
+    cwd: string;
+    /** The codex-auth profile name this seat is registered against (opaque, non-secret). */
+    authProfile: string;
+    updatedTs: string;
+}
+export interface CodexAuthMetadata {
+    /** Profile NAMES (opaque, non-secret refs) — never file contents. */
+    profiles: string[];
+    seats: CodexSeatRow[];
+}
+/** Read the codex-auth on-disk METADATA (profile names + seat registry). Never throws; never
+ *  surfaces token-class content. Absent home/files yield empty arrays. */
+export declare function readCodexAuthMetadata(env?: NodeJS.ProcessEnv): CodexAuthMetadata;
+//# sourceMappingURL=codex-auth-reader.d.ts.map

package/daemon/dist/domain/provider/codex-auth-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth-reader.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/codex-auth-reader.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,wFAAwF;IACxF,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAgDD;0EAC0E;AAC1E,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,iBAAiB,CAM7F"}

package/daemon/dist/domain/provider/codex-auth-reader.js

@@ -0,0 +1,64 @@
+// Slice-04 (OPR.0.5.0.4) seam C1 — a DAEMON-LOCAL, secret-safe reader of the codex-auth on-disk
+// contract. The daemon cannot import packages/cli (no @openrig/cli dep); this re-reads the same
+// documented format: $CODEX_HOME||~/.codex with auth-profiles/*.json (profile NAMES) and
+// auth-seat-registry.tsv (6 tab columns: seat/rig/runtime/cwd/auth_profile/updated_ts — NO token
+// column). It reads profile NAMES and the TSV ONLY — never the profile *.json contents, which hold
+// token-class material (BR-6: no secret ever surfaces).
+import fs from "node:fs";
+import path from "node:path";
+const SEAT_COLUMN_COUNT = 6;
+function resolveCodexHome(env) {
+    const codexHome = typeof env.CODEX_HOME === "string" && env.CODEX_HOME.length > 0
+        ? env.CODEX_HOME
+        : path.join(env.HOME ?? "", ".codex");
+    return {
+        profileDir: path.join(codexHome, "auth-profiles"),
+        registryPath: path.join(codexHome, "auth-seat-registry.tsv"),
+    };
+}
+// Profile NAMES only — the *.json file contents (token-class) are never opened.
+function listProfiles(profileDir) {
+    try {
+        return fs
+            .readdirSync(profileDir)
+            .filter((n) => n.endsWith(".json"))
+            .map((n) => n.slice(0, -".json".length))
+            .sort();
+    }
+    catch {
+        return [];
+    }
+}
+function readSeats(registryPath) {
+    let raw;
+    try {
+        raw = fs.readFileSync(registryPath, "utf8");
+    }
+    catch {
+        return [];
+    }
+    const rows = [];
+    for (const line of raw.split("\n")) {
+        if (line.length === 0)
+            continue;
+        const cols = line.split("\t");
+        if (cols.length !== SEAT_COLUMN_COUNT)
+            continue; // skip malformed rows — never fabricate fields
+        // Length is exactly 6 above, so the tuple destructure is total (satisfies noUncheckedIndexedAccess).
+        const [seat, rig, runtime, cwd, authProfile, updatedTs] = cols;
+        if (seat === "seat")
+            continue; // the header row
+        rows.push({ seat, rig, runtime, cwd, authProfile, updatedTs });
+    }
+    return rows;
+}
+/** Read the codex-auth on-disk METADATA (profile names + seat registry). Never throws; never
+ *  surfaces token-class content. Absent home/files yield empty arrays. */
+export function readCodexAuthMetadata(env = process.env) {
+    const { profileDir, registryPath } = resolveCodexHome(env);
+    return {
+        profiles: listProfiles(profileDir),
+        seats: readSeats(registryPath),
+    };
+}
+//# sourceMappingURL=codex-auth-reader.js.map

package/daemon/dist/domain/provider/codex-auth-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-auth-reader.js","sourceRoot":"","sources":["../../../src/domain/provider/codex-auth-reader.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,gGAAgG;AAChG,yFAAyF;AACzF,iGAAiG;AACjG,mGAAmG;AACnG,wDAAwD;AAExD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAkB7B,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,MAAM,SAAS,GACb,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC7D,CAAC,CAAC,GAAG,CAAC,UAAU;QAChB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC;QACjD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,YAAY,CAAC,UAAkB;IACtC,IAAI,CAAC;QACH,OAAO,EAAE;aACN,WAAW,CAAC,UAAU,CAAC;aACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aACvC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,YAAoB;IACrC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,iBAAiB;YAAE,SAAS,CAAC,+CAA+C;QAChG,qGAAqG;QACrG,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,CAAC,GAAG,IAAwD,CAAC;QACnH,IAAI,IAAI,KAAK,MAAM;YAAE,SAAS,CAAC,iBAAiB;QAChD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO;QACL,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC;QAClC,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC;KAC/B,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/provider/host-usage-rollup.d.ts

@@ -0,0 +1,51 @@
+import type { ProviderKind, ProviderSignal, SignalWindow } from "./provider-types.js";
+/** Nearing = the shipped default advisory threshold on the C3-carried percentage. */
+export declare const NEARING_THRESHOLD_PERCENT = 80;
+/** Same-window resets_at spread tolerated as sampling skew before it is a CONFLICT.
+ *  Two seats on ONE account can read the same window seconds apart; two different
+ *  accounts' reset schedules differ by far more than this. */
+export declare const CONFLICTING_RESETS_EPSILON_MS = 120000;
+export type HostUsageState = "ok" | "nearing" | "limited" | "explicit_unknown";
+export interface HostUsageWindowFact {
+    window: SignalWindow | "unknown";
+    usedPercent?: number;
+    resetsAt?: string;
+    asOf: string;
+    /** The contributing seat (topology identity, never an account identity). */
+    seatSession?: string;
+}
+export interface HostUsageConflictAnomaly {
+    kind: "conflicting_seat_windows";
+    window: SignalWindow | "unknown";
+    seats: string[];
+    evidence: string;
+    asOf: string;
+}
+export interface HostUsageRow {
+    /** The reserved LOCAL host id — this daemon's own scope (MH aggregation is out of scope). */
+    host: "local";
+    provider: ProviderKind;
+    state: HostUsageState;
+    /** For `limited`: when the limit lifts, when the source carried it. Honest absence otherwise. */
+    resetsAt?: string;
+    /** (iii) exactly the C3-carried granularity — never normalized-away, never invented. */
+    windows: HostUsageWindowFact[];
+    provenance: {
+        basis: "one_account_per_host_deployment_invariant";
+        note: string;
+    };
+    anomalies: HostUsageConflictAnomaly[];
+    /** Contributing evidence refs: seat sessions (C3) / labeled reactive events (C4). */
+    evidenceSeats: string[];
+    unknownReason?: string;
+    asOf: string;
+}
+export interface HostUsageRollupInput {
+    signals: ProviderSignal[];
+    /** Deployment presence for codex (auth profiles on disk) — presence without a meter is an
+     *  explicit unknown, never an omitted row (the blindside must be visible). */
+    codexProfilesPresent: boolean;
+    now: string;
+}
+export declare function rollupHostUsage(input: HostUsageRollupInput): HostUsageRow[];
+//# sourceMappingURL=host-usage-rollup.d.ts.map

package/daemon/dist/domain/provider/host-usage-rollup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-usage-rollup.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/host-usage-rollup.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEtF,qFAAqF;AACrF,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C;;8DAE8D;AAC9D,eAAO,MAAM,6BAA6B,SAAU,CAAC;AAErD,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,SAAS,GAAG,kBAAkB,CAAC;AAE/E,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,0BAA0B,CAAC;IACjC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IACjC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,6FAA6F;IAC7F,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,YAAY,CAAC;IACvB,KAAK,EAAE,cAAc,CAAC;IACtB,iGAAiG;IACjG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,UAAU,EAAE;QACV,KAAK,EAAE,2CAA2C,CAAC;QACnD,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,SAAS,EAAE,wBAAwB,EAAE,CAAC;IACtC,qFAAqF;IACrF,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACd;AAMD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B;kFAC8E;IAC9E,oBAAoB,EAAE,OAAO,CAAC;IAC9B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,YAAY,EAAE,CAU3E"}

package/daemon/dist/domain/provider/host-usage-rollup.js

@@ -0,0 +1,162 @@
+// Slice-04 S-A (OPR.0.5.0.4, founder re-center amendment A2) — HOST-LEVEL USAGE ROLLUP.
+//
+// Usage is metered per account and this deployment runs ONE account per host, so a
+// usage-limit park is a HOST-level event. This module aggregates the seat-sourced
+// signal rows (C3 Claude statusline lane, sealed 5b56a2a4 · C4 Codex reactive lane,
+// sealed 6508330d) into ONE honest state row per (host, provider):
+//
+//   ok | nearing | limited (until resets_at when known) | explicit_unknown
+//
+// THE THREE BINDING HONESTY CONDITIONS (PM pattern check, verbatim-class):
+//   (i)  host==account is a DEPLOYMENT INVARIANT and every row SAYS so in its
+//        provenance — it is never presented as source-derived account
+//        classification (the C3 Option-A bar stands: the statusline carries no
+//        account identity and none is fabricated here). Rollup keys are
+//        (host, provider) ONLY; no account id/ref ever appears in a row.
+//   (ii) CONFLICTING seat windows on one host falsify the invariant for that
+//        host: they surface as a first-class `conflicting_seat_windows` anomaly
+//        plus an explicit_unknown host state — never a silent merge, never an
+//        averaged/fabricated number. The conflicting facts stay visible.
+//   (iii) usage-limit granularity rides ONLY what the C3 rows already carry
+//        (window / usedPercent / resetsAt / asOf) — nothing coerced, nothing
+//        invented. Codex has NO remaining-meter lane yet (C2 is a later seam),
+//        so codex state derives from fresh reactive EXHAUSTION evidence only,
+//        and its absence is an explicit unknown — never "ok" by silence.
+//
+// The single-daemon scope IS the host scope: rows carry host="local" (the
+// reserved local host id). Multi-host aggregation is explicitly out of scope
+// (the PRD's MH-lane later).
+/** Nearing = the shipped default advisory threshold on the C3-carried percentage. */
+export const NEARING_THRESHOLD_PERCENT = 80;
+/** Same-window resets_at spread tolerated as sampling skew before it is a CONFLICT.
+ *  Two seats on ONE account can read the same window seconds apart; two different
+ *  accounts' reset schedules differ by far more than this. */
+export const CONFLICTING_RESETS_EPSILON_MS = 120_000;
+const PROVENANCE_NOTE = "host==account is a deployment invariant of this rig (one account per host), declared by the operator — " +
+    "it is not source-derived account classification, and no account identity is read or emitted.";
+export function rollupHostUsage(input) {
+    const rows = [];
+    const claude = rollupClaude(input);
+    if (claude)
+        rows.push(claude);
+    const codex = rollupCodex(input);
+    if (codex)
+        rows.push(codex);
+    return rows;
+}
+// ——— Claude: the C3 seat-keyed statusline lane (meter rows + explicit-unknown rows) ———
+function rollupClaude(input) {
+    const lane = input.signals.filter((s) => s.provider === "claude");
+    if (lane.length === 0)
+        return null; // no claude deployment presence → no row
+    const meterRows = lane.filter((s) => s.sourceClass === "provider_statusline" && typeof s.usedPercent === "number");
+    const windows = meterRows.map((s) => ({
+        window: s.window ?? "unknown",
+        usedPercent: s.usedPercent,
+        resetsAt: s.resetsAt,
+        asOf: s.asOf,
+        seatSession: s.seatSession,
+    }));
+    const evidenceSeats = [...new Set(lane.map((s) => s.seatSession).filter((x) => typeof x === "string"))];
+    const base = {
+        host: "local",
+        provider: "claude",
+        windows,
+        provenance: { basis: "one_account_per_host_deployment_invariant", note: PROVENANCE_NOTE },
+        anomalies: [],
+        evidenceSeats,
+        asOf: input.now,
+    };
+    if (meterRows.length === 0) {
+        // Only explicit-unknown seat rows (absent cache / pre-first-response / api-key):
+        // the host state is honestly unknown, carrying the lane's own reason.
+        const reason = lane.find((s) => s.unknownReason)?.unknownReason ?? "no_usable_claude_usage_rows";
+        return { ...base, state: "explicit_unknown", unknownReason: reason };
+    }
+    // (ii) conflict detection per window: under host==account, every seat reading the SAME
+    // window must see the SAME reset schedule (within sampling skew). A wider spread means
+    // the seats are watching DIFFERENT accounts — the invariant is falsified for this host.
+    const anomalies = [];
+    const byWindow = new Map();
+    for (const s of meterRows) {
+        const key = s.window ?? "unknown";
+        byWindow.set(key, [...(byWindow.get(key) ?? []), s]);
+    }
+    for (const [windowKey, group] of byWindow) {
+        const withResets = group.filter((s) => typeof s.resetsAt === "string");
+        if (withResets.length < 2)
+            continue;
+        const times = withResets.map((s) => Date.parse(s.resetsAt)).filter(Number.isFinite);
+        if (times.length < 2)
+            continue;
+        if (Math.max(...times) - Math.min(...times) > CONFLICTING_RESETS_EPSILON_MS) {
+            anomalies.push({
+                kind: "conflicting_seat_windows",
+                window: windowKey,
+                seats: [...new Set(withResets.map((s) => s.seatSession).filter((x) => typeof x === "string"))],
+                evidence: `seats report divergent ${windowKey} reset schedules on one host: ` +
+                    withResets.map((s) => `${s.seatSession ?? "?"} resets_at=${s.resetsAt}`).join(" vs "),
+                asOf: input.now,
+            });
+        }
+    }
+    if (anomalies.length > 0) {
+        return {
+            ...base,
+            state: "explicit_unknown",
+            anomalies,
+            unknownReason: "conflicting_seat_windows: divergent reset schedules falsify the one-account-per-host invariant for this host",
+        };
+    }
+    const maxUsed = Math.max(...meterRows.map((s) => s.usedPercent));
+    if (maxUsed >= 100) {
+        const exhausted = meterRows.filter((s) => s.usedPercent >= 100);
+        const resets = exhausted
+            .map((s) => s.resetsAt)
+            .filter((x) => typeof x === "string")
+            .sort();
+        return { ...base, state: "limited", ...(resets[0] !== undefined ? { resetsAt: resets[0] } : {}) };
+    }
+    if (maxUsed >= NEARING_THRESHOLD_PERCENT)
+        return { ...base, state: "nearing" };
+    return { ...base, state: "ok" };
+}
+// ——— Codex: the C4 reactive lane (exhaustion evidence only — no meter until C2) ———
+function rollupCodex(input) {
+    const lane = input.signals.filter((s) => s.provider === "codex");
+    if (lane.length === 0 && !input.codexProfilesPresent)
+        return null; // no deployment presence
+    const nowMs = Date.parse(input.now);
+    // At-limit exhaustion evidence = a reactive_error event row the C4 tap marked as an
+    // actionable switch trigger (at_limit → allow_switch_decision; stream/stop errors are
+    // advisory and are NOT usage evidence). Freshness is inclusive-expiry (BR-2 class).
+    const freshAtLimit = lane.filter((s) => s.sourceClass === "provider_event" &&
+        s.authority === "reactive_error" &&
+        s.automationUse === "allow_switch_decision" &&
+        typeof s.staleAfter === "string" &&
+        Number.isFinite(Date.parse(s.staleAfter)) &&
+        Number.isFinite(nowMs) &&
+        nowMs < Date.parse(s.staleAfter));
+    const base = {
+        host: "local",
+        provider: "codex",
+        windows: [], // (iii): codex carries no remaining-meter granularity yet — nothing is invented
+        provenance: { basis: "one_account_per_host_deployment_invariant", note: PROVENANCE_NOTE },
+        anomalies: [],
+        evidenceSeats: freshAtLimit.map((s) => `reactive_event asOf=${s.asOf}`),
+        asOf: input.now,
+    };
+    if (freshAtLimit.length > 0) {
+        const resets = freshAtLimit
+            .map((s) => s.resetsAt)
+            .filter((x) => typeof x === "string")
+            .sort();
+        return { ...base, state: "limited", ...(resets[0] !== undefined ? { resetsAt: resets[0] } : {}) };
+    }
+    return {
+        ...base,
+        state: "explicit_unknown",
+        unknownReason: "no usage meter for codex on this host yet (the app-server read lane is a later seam); no fresh at-limit evidence either way",
+    };
+}
+//# sourceMappingURL=host-usage-rollup.js.map

package/daemon/dist/domain/provider/host-usage-rollup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-usage-rollup.js","sourceRoot":"","sources":["../../../src/domain/provider/host-usage-rollup.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,EAAE;AACF,mFAAmF;AACnF,kFAAkF;AAClF,oFAAoF;AACpF,mEAAmE;AACnE,EAAE;AACF,2EAA2E;AAC3E,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,sEAAsE;AACtE,+EAA+E;AAC/E,wEAAwE;AACxE,yEAAyE;AACzE,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,yEAAyE;AACzE,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,6BAA6B;AAI7B,qFAAqF;AACrF,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C;;8DAE8D;AAC9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAC;AAyCrD,MAAM,eAAe,GACnB,yGAAyG;IACzG,8FAA8F,CAAC;AAUjG,MAAM,UAAU,eAAe,CAAC,KAA2B;IACzD,MAAM,IAAI,GAAmB,EAAE,CAAC;IAEhC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yFAAyF;AAEzF,SAAS,YAAY,CAAC,KAA2B;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,yCAAyC;IAE7E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,qBAAqB,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CACpF,CAAC;IAEF,MAAM,OAAO,GAA0B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS;QAC7B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC,CAAC,CAAC;IACJ,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;IAErH,MAAM,IAAI,GAAgC;QACxC,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,QAAQ;QAClB,OAAO;QACP,UAAU,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,IAAI,EAAE,eAAe,EAAE;QACzF,SAAS,EAAE,EAAE;QACb,aAAa;QACb,IAAI,EAAE,KAAK,CAAC,GAAG;KAChB,CAAC;IAEF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,iFAAiF;QACjF,sEAAsE;QACtE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,aAAa,IAAI,6BAA6B,CAAC;QACjG,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACvE,CAAC;IAED,uFAAuF;IACvF,uFAAuF;IACvF,wFAAwF;IACxF,MAAM,SAAS,GAA+B,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;QAClC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACvE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,6BAA6B,EAAE,CAAC;YAC5E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,0BAA0B;gBAChC,MAAM,EAAE,SAAqC;gBAC7C,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;gBAC3G,QAAQ,EACN,0BAA0B,SAAS,gCAAgC;oBACnE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,GAAG,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;gBACvF,IAAI,EAAE,KAAK,CAAC,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,kBAAkB;YACzB,SAAS;YACT,aAAa,EACX,8GAA8G;SACjH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAY,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAY,IAAI,GAAG,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,SAAS;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACtB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;aACjD,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,OAAO,IAAI,yBAAyB;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC/E,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,qFAAqF;AAErF,SAAS,WAAW,CAAC,KAA2B;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB;QAAE,OAAO,IAAI,CAAC,CAAC,yBAAyB;IAE5F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,oFAAoF;IACpF,sFAAsF;IACtF,oFAAoF;IACpF,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,WAAW,KAAK,gBAAgB;QAClC,CAAC,CAAC,SAAS,KAAK,gBAAgB;QAChC,CAAC,CAAC,aAAa,KAAK,uBAAuB;QAC3C,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CACnC,CAAC;IAEF,MAAM,IAAI,GAAgC;QACxC,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,EAAE,EAAE,gFAAgF;QAC7F,UAAU,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,IAAI,EAAE,eAAe,EAAE;QACzF,SAAS,EAAE,EAAE;QACb,aAAa,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,IAAI,EAAE,KAAK,CAAC,GAAG;KAChB,CAAC;IAEF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,YAAY;aACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACtB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;aACjD,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpG,CAAC;IAED,OAAO;QACL,GAAG,IAAI;QACP,KAAK,EAAE,kBAAkB;QACzB,aAAa,EACX,6HAA6H;KAChI,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/provider/provider-collect.d.ts

@@ -0,0 +1,22 @@
+import type { CodexAuthMetadata } from "./codex-auth-reader.js";
+import type { FourBlockReadModel, ProviderSignal } from "./provider-types.js";
+import type { NodeLifecycleState } from "../types.js";
+/** One seat in the fleet (the universe to bind), sourced from node-inventory across rigs. */
+export interface ProviderSeat {
+    seatSession: string;
+    rigName: string;
+    runtime: string;
+    lifecycleState: NodeLifecycleState;
+}
+export interface ProviderCollectDeps {
+    /** Reads codex-auth on-disk METADATA (profile names + seat registry) — never token content. */
+    readCodexAuth: () => CodexAuthMetadata;
+    /** The current seat universe (node-inventory across all rigs). */
+    listSeats: () => ProviderSeat[];
+    /** signals[] — empty until the live Codex/Claude/reactive collection lane is wired. */
+    collectSignals?: () => ProviderSignal[];
+    /** A real caller-provided clock; the read model's asOf (anomalies borrow it, never invented). */
+    now: () => string;
+}
+export declare function collectFourBlockReadModel(deps: ProviderCollectDeps): FourBlockReadModel;
+//# sourceMappingURL=provider-collect.d.ts.map

package/daemon/dist/domain/provider/provider-collect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-collect.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/provider-collect.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAIhE,OAAO,KAAK,EAAE,kBAAkB,EAAmB,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEtD,6FAA6F;AAC7F,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,kBAAkB,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,+FAA+F;IAC/F,aAAa,EAAE,MAAM,iBAAiB,CAAC;IACvC,kEAAkE;IAClE,SAAS,EAAE,MAAM,YAAY,EAAE,CAAC;IAChC,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,cAAc,EAAE,CAAC;IACxC,iGAAiG;IACjG,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,mBAAmB,GAAG,kBAAkB,CAsEvF"}