@openrig/cli 0.4.8 → 0.5.1

package/node_modules/@openrig/daemon/dist/domain/rig-policy/rig-policy-validator.d.ts

@@ -0,0 +1,58 @@
+import { type OperatorContextMode, type OperatorContextModeRecord } from "./rig-policy-types.js";
+/**
+ * The 10 required fields of an OperatorContextModeRecord. Used by
+ * validateRecord to enumerate field-set integrity (HG-2) — both
+ * presence and exhaustiveness.
+ *
+ * NOTE: `mode` is NOT in this list. Mode is the binding selector
+ * (Component 2 vocabulary), not part of the Component-3 settings
+ * record. The store/route validate mode separately at the binding
+ * boundary; this validator enforces only the 10 Component-3 fields.
+ */
+export declare const REQUIRED_RECORD_FIELDS: readonly (keyof OperatorContextModeRecord)[];
+export interface ValidationOk {
+    ok: true;
+    record: OperatorContextModeRecord;
+}
+export interface ValidationError {
+    ok: false;
+    errors: string[];
+}
+export type ValidationResult = ValidationOk | ValidationError;
+/**
+ * Validate a candidate record against the FROZEN contract. Returns
+ * the typed record on success OR a list of 3-part error messages on
+ * failure (one per offending field; report all at once so an
+ * operator doesn't have to retry per error).
+ *
+ * Strict: any field outside REQUIRED_RECORD_FIELDS is rejected
+ * (HG-2 — field-set integrity; "no merged/dropped fields").
+ */
+export declare function validateRecord(raw: unknown): ValidationResult;
+/**
+ * Validate an operator-supplied mode name. Mode lives outside the
+ * 10-field record (Component 2 vocabulary, not Component 3 settings).
+ * The route + store call this at the binding boundary; the
+ * disambiguator below (for invocation parsing) is separate.
+ */
+export declare function validateModeName(raw: unknown): {
+    ok: true;
+    mode: OperatorContextMode;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Disambiguate operator-supplied mode input. Per convention §Component 4
+ * "Bare-Word Disambiguation":
+ *
+ * - A bare word that is one of the six reserved modes → invocation
+ * - An explicit `mode:` prefix → invocation
+ * - A word embedded in a sentence → NOT invocation (caller treats as topic)
+ *
+ * Returns the canonical mode name when the input is unambiguously an
+ * invocation; null otherwise. Caller emits a clarification question
+ * for null+bare-multi-word inputs (per convention "ask once").
+ */
+export declare function disambiguateModeInvocation(rawInput: string): OperatorContextMode | null;
+//# sourceMappingURL=rig-policy-validator.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/rig-policy/rig-policy-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rig-policy-validator.d.ts","sourceRoot":"","sources":["../../../src/domain/rig-policy/rig-policy-validator.ts"],"names":[],"mappings":"AAgBA,OAAO,EAOL,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAQ/B,MAAM,uBAAuB,CAAC;AAwB/B;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,CAAC,MAAM,yBAAyB,CAAC,EAW9E,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,yBAAyB,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,eAAe,CAAC;AAuC9D;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAgK7D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAQrH;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAyBvF"}

package/node_modules/@openrig/daemon/dist/domain/rig-policy/rig-policy-validator.js

@@ -0,0 +1,211 @@
+// Slice 09 — runtime validator for OperatorContextModeRecord input.
+//
+// The type system (rig-policy-types.ts) blocks invalid values at
+// compile time when callers go through the typed surface. This
+// validator is the defense for inputs that bypass types: JSON file
+// reads, HTTP request bodies, env-var-derived configuration, CLI
+// argument parsing, and migrations from older record shapes.
+//
+// HG-2: every record must carry all 10 fields. Reject missing/extra.
+// HG-1 / HG-SAFE / HG-8: closed enums; auto-accept rejected; no
+// silent-switch value.
+//
+// Error format follows the 3-part convention from the velocity team:
+//   what failed / what's allowed / what to do
+// so an operator gets a useful CLI message.
+import { OPERATOR_CONTEXT_MODES, OPERATOR_CONTEXT_SCOPES, SAFE_PERMISSION_PROMPT_POSTURES, STALE_RULES, } from "./rig-policy-types.js";
+const ALLOWED_AUTONOMY_SCOPES = [
+    "pre_approved_only",
+    "bounded_continuation",
+    "full_autonomy_within_workstream",
+    "full_autonomy",
+];
+const ALLOWED_HEARTBEAT_CADENCES = ["sparse", "normal", "fast"];
+const ALLOWED_INSPECTION_DEPTHS = ["surface", "normal", "forensic"];
+const ALLOWED_UPDATE_DETAILS = ["compact", "normal", "verbose"];
+const ALLOWED_ESCALATION_THRESHOLDS = [
+    "low",
+    "normal",
+    "high",
+    "blocker_only",
+];
+const ALLOWED_CONCURRENCY_LIMITS = ["serial", "2", "4", "unlimited"];
+/**
+ * The 10 required fields of an OperatorContextModeRecord. Used by
+ * validateRecord to enumerate field-set integrity (HG-2) — both
+ * presence and exhaustiveness.
+ *
+ * NOTE: `mode` is NOT in this list. Mode is the binding selector
+ * (Component 2 vocabulary), not part of the Component-3 settings
+ * record. The store/route validate mode separately at the binding
+ * boundary; this validator enforces only the 10 Component-3 fields.
+ */
+export const REQUIRED_RECORD_FIELDS = [
+    "autonomy_scope",
+    "heartbeat_cadence",
+    "inspection_depth",
+    "update_detail",
+    "escalation_threshold",
+    "concurrency_limit",
+    "permission_prompt_posture",
+    "scope",
+    "expiry_or_stale_rule",
+    "evidence_citation",
+];
+function threePart(failed, allowed, recovery) {
+    return `${failed}. Allowed: ${allowed}. ${recovery}`;
+}
+function isPlainObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function checkEnum(fieldName, value, allowed, errors) {
+    if (typeof value !== "string") {
+        errors.push(threePart(`${fieldName} is not a string (got ${typeof value})`, allowed.join(", "), `Set ${fieldName} to one of the allowed values.`));
+        return null;
+    }
+    if (!allowed.includes(value)) {
+        errors.push(threePart(`${fieldName}="${value}" is not a recognized value`, allowed.join(", "), `Set ${fieldName} to one of the allowed values.`));
+        return null;
+    }
+    return value;
+}
+/**
+ * Validate a candidate record against the FROZEN contract. Returns
+ * the typed record on success OR a list of 3-part error messages on
+ * failure (one per offending field; report all at once so an
+ * operator doesn't have to retry per error).
+ *
+ * Strict: any field outside REQUIRED_RECORD_FIELDS is rejected
+ * (HG-2 — field-set integrity; "no merged/dropped fields").
+ */
+export function validateRecord(raw) {
+    const errors = [];
+    if (!isPlainObject(raw)) {
+        return {
+            ok: false,
+            errors: [
+                threePart("Record is not an object", "an object with the 10 required fields", "See conventions/operator-context-mode-system/README.md §Component 3 for the schema."),
+            ],
+        };
+    }
+    // HG-2 — field-set integrity. Reject missing AND extra fields. The
+    // convention says "All ten fields MUST be present in any descendant
+    // that publishes a current-mode artifact. None may be silently
+    // merged or dropped."
+    for (const field of REQUIRED_RECORD_FIELDS) {
+        if (!(field in raw)) {
+            errors.push(threePart(`Missing required field "${field}"`, REQUIRED_RECORD_FIELDS.join(", "), `Add the field to the record. See convention §Component 3.`));
+        }
+    }
+    const requiredSet = new Set(REQUIRED_RECORD_FIELDS);
+    for (const key of Object.keys(raw)) {
+        if (!requiredSet.has(key)) {
+            errors.push(threePart(`Unknown field "${key}"`, REQUIRED_RECORD_FIELDS.join(", "), `Drop the unknown field. The schema is closed at v0; an extension requires a Mode 1.5 amendment.`));
+        }
+    }
+    // If we already failed field-set integrity, return early so the
+    // operator sees only the structural error and not cascade per-field
+    // noise.
+    if (errors.length > 0)
+        return { ok: false, errors };
+    const autonomy_scope = checkEnum("autonomy_scope", raw["autonomy_scope"], ALLOWED_AUTONOMY_SCOPES, errors);
+    const heartbeat_cadence = checkEnum("heartbeat_cadence", raw["heartbeat_cadence"], ALLOWED_HEARTBEAT_CADENCES, errors);
+    const inspection_depth = checkEnum("inspection_depth", raw["inspection_depth"], ALLOWED_INSPECTION_DEPTHS, errors);
+    const update_detail = checkEnum("update_detail", raw["update_detail"], ALLOWED_UPDATE_DETAILS, errors);
+    const escalation_threshold = checkEnum("escalation_threshold", raw["escalation_threshold"], ALLOWED_ESCALATION_THRESHOLDS, errors);
+    const concurrency_limit = checkEnum("concurrency_limit", raw["concurrency_limit"], ALLOWED_CONCURRENCY_LIMITS, errors);
+    // HG-SAFE (runtime) — the type system blocks auto-accept at
+    // compile time; this branch rejects it at runtime for inputs that
+    // bypass typing (JSON / env / HTTP body). The validator does NOT
+    // tolerate any "auto*" / "yes_to_all" / etc. value; it accepts
+    // EXACTLY the three SAFE values.
+    const permission_prompt_posture = checkEnum("permission_prompt_posture", raw["permission_prompt_posture"], SAFE_PERMISSION_PROMPT_POSTURES, errors);
+    const scope = checkEnum("scope", raw["scope"], OPERATOR_CONTEXT_SCOPES, errors);
+    const expiry_or_stale_rule = checkEnum("expiry_or_stale_rule", raw["expiry_or_stale_rule"], STALE_RULES, errors);
+    const evidence_citation_raw = raw["evidence_citation"];
+    if (typeof evidence_citation_raw !== "string") {
+        errors.push(threePart(`evidence_citation is not a string (got ${typeof evidence_citation_raw})`, "a non-empty source-citation string (e.g., qitem id, file path, chatroom topic)", "Provide a brief citation per convention §Citation Rules."));
+    }
+    else if (evidence_citation_raw.trim().length === 0) {
+        errors.push(threePart("evidence_citation is empty", "a non-empty source-citation string", "Provide a brief citation per convention §Citation Rules."));
+    }
+    if (errors.length > 0
+        || autonomy_scope === null
+        || heartbeat_cadence === null
+        || inspection_depth === null
+        || update_detail === null
+        || escalation_threshold === null
+        || concurrency_limit === null
+        || permission_prompt_posture === null
+        || scope === null
+        || expiry_or_stale_rule === null) {
+        return { ok: false, errors };
+    }
+    return {
+        ok: true,
+        record: {
+            autonomy_scope,
+            heartbeat_cadence,
+            inspection_depth,
+            update_detail,
+            escalation_threshold,
+            concurrency_limit,
+            permission_prompt_posture,
+            scope,
+            expiry_or_stale_rule,
+            evidence_citation: evidence_citation_raw.trim(),
+        },
+    };
+}
+/**
+ * Validate an operator-supplied mode name. Mode lives outside the
+ * 10-field record (Component 2 vocabulary, not Component 3 settings).
+ * The route + store call this at the binding boundary; the
+ * disambiguator below (for invocation parsing) is separate.
+ */
+export function validateModeName(raw) {
+    if (typeof raw !== "string") {
+        return { ok: false, error: threePart(`mode is not a string (got ${typeof raw})`, OPERATOR_CONTEXT_MODES.join(", "), "Provide one of the six reserved mode names.") };
+    }
+    if (!OPERATOR_CONTEXT_MODES.includes(raw)) {
+        return { ok: false, error: threePart(`mode="${raw}" is not a recognized mode name`, OPERATOR_CONTEXT_MODES.join(", "), "Provide one of the six reserved mode names. See convention §Component 2.") };
+    }
+    return { ok: true, mode: raw };
+}
+/**
+ * Disambiguate operator-supplied mode input. Per convention §Component 4
+ * "Bare-Word Disambiguation":
+ *
+ * - A bare word that is one of the six reserved modes → invocation
+ * - An explicit `mode:` prefix → invocation
+ * - A word embedded in a sentence → NOT invocation (caller treats as topic)
+ *
+ * Returns the canonical mode name when the input is unambiguously an
+ * invocation; null otherwise. Caller emits a clarification question
+ * for null+bare-multi-word inputs (per convention "ask once").
+ */
+export function disambiguateModeInvocation(rawInput) {
+    const trimmed = rawInput.trim();
+    if (trimmed.length === 0)
+        return null;
+    // Explicit prefix wins.
+    const prefixMatch = trimmed.match(/^mode\s*:\s*(\S+)/i);
+    if (prefixMatch) {
+        const candidate = prefixMatch[1].toLowerCase();
+        if (OPERATOR_CONTEXT_MODES.includes(candidate)) {
+            return candidate;
+        }
+        return null;
+    }
+    // Bare-word: exactly one word AND it's a reserved mode.
+    if (/^\S+$/.test(trimmed)) {
+        const lower = trimmed.toLowerCase();
+        if (OPERATOR_CONTEXT_MODES.includes(lower)) {
+            return lower;
+        }
+        return null;
+    }
+    // Embedded — let the caller ask.
+    return null;
+}
+//# sourceMappingURL=rig-policy-validator.js.map

package/node_modules/@openrig/daemon/dist/domain/rig-policy/rig-policy-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rig-policy-validator.js","sourceRoot":"","sources":["../../../src/domain/rig-policy/rig-policy-validator.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,iEAAiE;AACjE,+DAA+D;AAC/D,mEAAmE;AACnE,iEAAiE;AACjE,6DAA6D;AAC7D,EAAE;AACF,qEAAqE;AACrE,gEAAgE;AAChE,uBAAuB;AACvB,EAAE;AACF,qEAAqE;AACrE,8CAA8C;AAC9C,4CAA4C;AAE5C,OAAO,EAYL,sBAAsB,EACtB,uBAAuB,EACvB,+BAA+B,EAC/B,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAE/B,MAAM,uBAAuB,GAA6B;IACxD,mBAAmB;IACnB,sBAAsB;IACtB,iCAAiC;IACjC,eAAe;CAChB,CAAC;AAEF,MAAM,0BAA0B,GAAgC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAE7F,MAAM,yBAAyB,GAA+B,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAEhG,MAAM,sBAAsB,GAA4B,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAEzF,MAAM,6BAA6B,GAAmC;IACpE,KAAK;IACL,QAAQ;IACR,MAAM;IACN,cAAc;CACf,CAAC;AAEF,MAAM,0BAA0B,GAAgC,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;AAElG;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAiD;IAClF,gBAAgB;IAChB,mBAAmB;IACnB,kBAAkB;IAClB,eAAe;IACf,sBAAsB;IACtB,mBAAmB;IACnB,2BAA2B;IAC3B,OAAO;IACP,sBAAsB;IACtB,mBAAmB;CACpB,CAAC;AAcF,SAAS,SAAS,CAAC,MAAc,EAAE,OAAe,EAAE,QAAgB;IAClE,OAAO,GAAG,MAAM,cAAc,OAAO,KAAK,QAAQ,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAChB,SAAiB,EACjB,KAAc,EACd,OAAqB,EACrB,MAAgB;IAEhB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CACT,SAAS,CACP,GAAG,SAAS,yBAAyB,OAAO,KAAK,GAAG,EACpD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAClB,OAAO,SAAS,gCAAgC,CACjD,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CACT,SAAS,CACP,GAAG,SAAS,KAAK,KAAK,6BAA6B,EACnD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAClB,OAAO,SAAS,gCAAgC,CACjD,CACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE;gBACN,SAAS,CACP,yBAAyB,EACzB,uCAAuC,EACvC,qFAAqF,CACtF;aACF;SACF,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,+DAA+D;IAC/D,sBAAsB;IACtB,KAAK,MAAM,KAAK,IAAI,sBAAsB,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CACT,SAAS,CACP,2BAA2B,KAAK,GAAG,EACnC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EACjC,2DAA2D,CAC5D,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,sBAAsB,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CACT,SAAS,CACP,kBAAkB,GAAG,GAAG,EACxB,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EACjC,iGAAiG,CAClG,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,gEAAgE;IAChE,oEAAoE;IACpE,SAAS;IACT,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAEpD,MAAM,cAAc,GAAG,SAAS,CAC9B,gBAAgB,EAChB,GAAG,CAAC,gBAAgB,CAAC,EACrB,uBAAuB,EACvB,MAAM,CACP,CAAC;IACF,MAAM,iBAAiB,GAAG,SAAS,CACjC,mBAAmB,EACnB,GAAG,CAAC,mBAAmB,CAAC,EACxB,0BAA0B,EAC1B,MAAM,CACP,CAAC;IACF,MAAM,gBAAgB,GAAG,SAAS,CAChC,kBAAkB,EAClB,GAAG,CAAC,kBAAkB,CAAC,EACvB,yBAAyB,EACzB,MAAM,CACP,CAAC;IACF,MAAM,aAAa,GAAG,SAAS,CAC7B,eAAe,EACf,GAAG,CAAC,eAAe,CAAC,EACpB,sBAAsB,EACtB,MAAM,CACP,CAAC;IACF,MAAM,oBAAoB,GAAG,SAAS,CACpC,sBAAsB,EACtB,GAAG,CAAC,sBAAsB,CAAC,EAC3B,6BAA6B,EAC7B,MAAM,CACP,CAAC;IACF,MAAM,iBAAiB,GAAG,SAAS,CACjC,mBAAmB,EACnB,GAAG,CAAC,mBAAmB,CAAC,EACxB,0BAA0B,EAC1B,MAAM,CACP,CAAC;IAEF,4DAA4D;IAC5D,kEAAkE;IAClE,iEAAiE;IACjE,+DAA+D;IAC/D,iCAAiC;IACjC,MAAM,yBAAyB,GAAG,SAAS,CACzC,2BAA2B,EAC3B,GAAG,CAAC,2BAA2B,CAAC,EAChC,+BAA+B,EAC/B,MAAM,CACP,CAAC;IAEF,MAAM,KAAK,GAAG,SAAS,CACrB,OAAO,EACP,GAAG,CAAC,OAAO,CAAC,EACZ,uBAAuB,EACvB,MAAM,CACP,CAAC;IAEF,MAAM,oBAAoB,GAAG,SAAS,CACpC,sBAAsB,EACtB,GAAG,CAAC,sBAAsB,CAAC,EAC3B,WAAW,EACX,MAAM,CACP,CAAC;IAEF,MAAM,qBAAqB,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACvD,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CACT,SAAS,CACP,0CAA0C,OAAO,qBAAqB,GAAG,EACzE,gFAAgF,EAChF,0DAA0D,CAC3D,CACF,CAAC;IACJ,CAAC;SAAM,IAAI,qBAAqB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CACT,SAAS,CACP,4BAA4B,EAC5B,oCAAoC,EACpC,0DAA0D,CAC3D,CACF,CAAC;IACJ,CAAC;IAED,IACE,MAAM,CAAC,MAAM,GAAG,CAAC;WACd,cAAc,KAAK,IAAI;WACvB,iBAAiB,KAAK,IAAI;WAC1B,gBAAgB,KAAK,IAAI;WACzB,aAAa,KAAK,IAAI;WACtB,oBAAoB,KAAK,IAAI;WAC7B,iBAAiB,KAAK,IAAI;WAC1B,yBAAyB,KAAK,IAAI;WAClC,KAAK,KAAK,IAAI;WACd,oBAAoB,KAAK,IAAI,EAChC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,cAAc;YACd,iBAAiB;YACjB,gBAAgB;YAChB,aAAa;YACb,oBAAoB;YACpB,iBAAiB;YACjB,yBAAyB;YACzB,KAAK;YACL,oBAAoB;YACpB,iBAAiB,EAAG,qBAAgC,CAAC,IAAI,EAAE;SAC5D;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,6BAA6B,OAAO,GAAG,GAAG,EAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,6CAA6C,CAAC,EAAE,CAAC;IACvK,CAAC;IACD,IAAI,CAAE,sBAA4C,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,SAAS,GAAG,iCAAiC,EAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,0EAA0E,CAAC,EAAE,CAAC;IACvM,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAA0B,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB;IACzD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,wBAAwB;IACxB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;QAChD,IAAK,sBAA4C,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACtE,OAAO,SAAgC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wDAAwD;IACxD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,IAAK,sBAA4C,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,KAA4B,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/rig-repository.d.ts

@@ -0,0 +1,151 @@
+import type Database from "better-sqlite3";
+import type { Rig, Node, Edge, RigWithRelations, RigServicesRecord, RigServicesRecordInput, Snapshot } from "./types.js";
+export declare function findLatestUsableSnapshot(db: Database.Database, rigId: string): Snapshot | null;
+/**
+ * FS-1 W1.2 — the all-rigs batched form of `findLatestUsableSnapshot`: the
+ * latest snapshot per rig in ONE query (same `created_at DESC, id DESC` order),
+ * each mapped through the shared `snapshotFromRowIfUsable`. Rigs with no usable
+ * snapshot are simply absent from the map (callers default to null). Rides the
+ * arch-D1.1 sibling-audit `snapshots(rig_id, created_at)` index candidate.
+ */
+export declare function findLatestUsableSnapshotsForAllRigs(db: Database.Database): Map<string, Snapshot>;
+/**
+ * OPR.0.3.3.19 - rig archive read filter. Default daemon reads EXCLUDE archived
+ * rigs; explicit modes opt in. Mirrors the stream-items `--include-archived`
+ * precedent (stream-store.list).
+ */
+export interface RigArchiveFilter {
+    /** include both active and archived rigs */
+    includeArchived?: boolean;
+    /** return ONLY archived rigs */
+    archivedOnly?: boolean;
+}
+/**
+ * SQL condition fragment for the archive filter on a column (e.g. "archived_at"
+ * or the aliased "r.archived_at"). Returns null when no filter applies
+ * (includeArchived = include everything). Default (no filter) excludes archived.
+ */
+export declare function archiveWhereClause(col: string, filter?: RigArchiveFilter): string | null;
+interface NodeOptions {
+    role?: string;
+    runtime?: string;
+    model?: string;
+    codexConfigProfile?: string;
+    /** OPR.0.4.8.3 Seam B: per-seat permission_policy REF (builtin:<name> or spec-relative path). */
+    permissionPolicy?: string;
+    cwd?: string;
+    surfaceHint?: string;
+    workspace?: string;
+    restorePolicy?: string;
+    packageRefs?: string[];
+    podId?: string;
+    agentRef?: string;
+    profile?: string;
+    label?: string;
+    resolvedSpecName?: string;
+    resolvedSpecVersion?: string;
+    resolvedSpecHash?: string;
+}
+export declare class RigRepository {
+    readonly db: Database.Database;
+    constructor(db: Database.Database);
+    createRig(name: string): Rig;
+    /**
+     * PL-007 Workspace Primitive — persist the typed workspace block on the
+     * rigs row. Stored as JSON in `workspace_json` (migration 038). Pass
+     * null to clear. Older test fixtures that bypass the canonical migration
+     * list don't have the column; setter is a no-op in that case (the
+     * caller's contract is "best-effort persistence"). Whoami / node-inventory
+     * read this column to surface the rig's workspace block alongside cwd.
+     */
+    setRigWorkspace(rigId: string, workspace: import("./types.js").WorkspaceSpec | null): void;
+    /** PL-007 — read the persisted workspace block for a rig. */
+    getRigWorkspace(rigId: string): import("./types.js").WorkspaceSpec | null;
+    /** OPR.0.4.8.3 Seam B — persist a rig's attached permission_policy REF (builtin:<name> or a
+     *  spec-relative custom path), or null to clear. Mirrors setRigWorkspace (migration 056). */
+    setRigPermissionPolicy(rigId: string, permissionPolicy: string | null): void;
+    /** OPR.0.4.8.3 Seam B — read the persisted rig-level permission_policy REF (null when none). */
+    getRigPermissionPolicy(rigId: string): string | null;
+    /** Seam B Guard-F1 — persist the RIG-level resolved attachment provenance (migration 058).
+     *  declaringDir = the ORIGINAL declaring RigSpec dir; consumers must never re-resolve the
+     *  raw relative ref against an unrelated operation root. No-op on pre-058 fixture DBs. */
+    setRigPolicyProvenance(rigId: string, provenance: {
+        origin: "builtin" | "custom" | "deliberate_none";
+        resolvedTarget: string | null;
+        declaringDir: string | null;
+        launchPosture: "floor" | "full_bypass";
+    }): void;
+    /** Seam B Guard-F1 — read the rig-level resolved attachment provenance (null when none). */
+    getRigPolicyProvenance(rigId: string): {
+        origin: "builtin" | "custom" | "deliberate_none";
+        resolvedTarget: string | null;
+        declaringDir: string | null;
+        launchPosture: "floor" | "full_bypass";
+        /** the raw rig ref (056) alongside, for re-validation */
+        rigRef: string | null;
+    } | null;
+    /** OPR.0.4.8.3 Seam B (R2, dev-guard ruling) — persist a node's RESOLVED policy attachment
+     *  provenance (restart-stable: origin + resolved target + declaring dir + launch posture).
+     *  Builtins carry resolvedTarget=null until the packaging leg's canonical path is ruled
+     *  (PM lane c76c7153) — never a `builtin:<name>` echo. No-op on pre-057 fixture DBs. */
+    setNodePolicyProvenance(nodeId: string, provenance: {
+        origin: "builtin" | "custom" | "deliberate_none";
+        resolvedTarget: string | null;
+        declaringDir: string | null;
+        launchPosture: "floor" | "full_bypass";
+    }): void;
+    /** Seam B (R2) — read a node's persisted policy provenance; null when none attached
+     *  (or pre-057 DB). Restore consumers re-derive posture from this without the spec. */
+    getNodePolicyProvenance(nodeId: string): {
+        origin: "builtin" | "custom" | "deliberate_none";
+        resolvedTarget: string | null;
+        declaringDir: string | null;
+        launchPosture: "floor" | "full_bypass";
+        /** The node's own raw ref (member-level; null when the attachment came from the rig). */
+        nodeRef: string | null;
+    } | null;
+    /** PL-007 — defensive column probe on rigs (migration 038's
+     *  workspace_json is absent in legacy test fixtures). */
+    private hasRigColumn;
+    addNode(rigId: string, logicalId: string, opts?: NodeOptions): Node;
+    addEdge(rigId: string, sourceId: string, targetId: string, kind: string): Edge;
+    getRig(rigId: string): RigWithRelations | null;
+    listRigs(filter?: RigArchiveFilter): Rig[];
+    /**
+     * Returns the latest snapshot for this rig with at least one non-null resume token,
+     * or null if no usable snapshot exists. Used by the lifecycle projection to derive
+     * `recoverable` state.
+     */
+    findLatestUsableSnapshot(rigId: string): Snapshot | null;
+    findRigsByName(name: string): Rig[];
+    getRigSummaries(filter?: RigArchiveFilter): Array<{
+        id: string;
+        name: string;
+        nodeCount: number;
+        latestSnapshotAt: string | null;
+        latestSnapshotId: string | null;
+        hasServices: boolean;
+        archivedAt: string | null;
+    }>;
+    /**
+     * OPR.0.3.3.19 - soft-archive a rig: sets `archived_at`. The rigs row,
+     * topology rows, and snapshots are all RETAINED (this is NOT the delete
+     * path - contrast deleteRig). Returns false if the rig was already archived.
+     */
+    archiveRig(rigId: string): boolean;
+    /** OPR.0.3.3.19 - reverse archive: clears `archived_at`. Returns false if not archived. */
+    unarchiveRig(rigId: string): boolean;
+    deleteRig(rigId: string): void;
+    deleteNode(nodeId: string): void;
+    setServicesRecord(rigId: string, record: RigServicesRecordInput): RigServicesRecord;
+    getServicesRecord(rigId: string): RigServicesRecord | null;
+    updateServicesReceipt(rigId: string, latestReceiptJson: string | null): RigServicesRecord | null;
+    private rowToRig;
+    private rowToNode;
+    private rowToEdge;
+    private rowToBinding;
+    private rowToServicesRecord;
+    private hasNodeColumn;
+}
+export {};
+//# sourceMappingURL=rig-repository.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/rig-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rig-repository.d.ts","sourceRoot":"","sources":["../../src/domain/rig-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C,OAAO,KAAK,EACV,GAAG,EACH,IAAI,EACJ,IAAI,EAGJ,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,QAAQ,EAET,MAAM,YAAY,CAAC;AAsCpB,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAM9F;AAED;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAchG;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4CAA4C;IAC5C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gCAAgC;IAChC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAIxF;AAED,UAAU,WAAW;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iGAAiG;IACjG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,aAAa;IACxB,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;gBACnB,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAIjC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG;IAW5B;;;;;;;OAOG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,YAAY,EAAE,aAAa,GAAG,IAAI,GAAG,IAAI;IAO1F,6DAA6D;IAC7D,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,YAAY,EAAE,aAAa,GAAG,IAAI;IAYzE;iGAC6F;IAC7F,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAM5E,gGAAgG;IAChG,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAOpD;;8FAE0F;IAC1F,sBAAsB,CACpB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE;QACV,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC;QACjD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,EAAE,OAAO,GAAG,aAAa,CAAC;KACxC,GACA,IAAI;IAOP,4FAA4F;IAC5F,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG;QACrC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC;QACjD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,EAAE,OAAO,GAAG,aAAa,CAAC;QACvC,yDAAyD;QACzD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,GAAG,IAAI;IAqBR;;;4FAGwF;IACxF,uBAAuB,CACrB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE;QACV,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC;QACjD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,EAAE,OAAO,GAAG,aAAa,CAAC;KACxC,GACA,IAAI;IAOP;2FACuF;IACvF,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG;QACvC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC;QACjD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,EAAE,OAAO,GAAG,aAAa,CAAC;QACvC,yFAAyF;QACzF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,GAAG,IAAI;IAqBR;6DACyD;IACzD,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI;IAsGnE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAa9E,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI;IAiC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,GAAG,EAAE;IAS1C;;;;OAIG;IACH,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAIxD,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,EAAE;IAOnC,eAAe,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,WAAW,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAkCrN;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAOlC,2FAA2F;IAC3F,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAOpC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI9B,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIhC,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,GAAG,iBAAiB;IA2CnF,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAK1D,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,GAAG,IAAI;IAchG,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,SAAS;IA+BjB,OAAO,CAAC,SAAS;IAWjB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,mBAAmB;IAc3B,OAAO,CAAC,aAAa;CAItB"}