@openrig/cli 0.4.8 → 0.5.1

package/node_modules/@openrig/daemon/dist/domain/scope/scaffold-placeholder.js

@@ -0,0 +1,98 @@
+// release-0.4.7 intent-stage/scaffold-projection — the ONE scaffold-recognition
+// grammar: "this text is shipped-template placeholder, not authored content."
+//
+// PARITY CONTRACT (arch ruling 2026-07-11, intent-stage plan AR-1 + P1 pin):
+// this file is a BYTE-EQUIVALENT TWIN — it exists identically at
+//   packages/cli/src/lib/scope/scaffold-placeholder.ts
+//   packages/daemon/src/domain/scope/scaffold-placeholder.ts
+// and byte-equivalence is CI-enforced by scope-audit-parity CLASSIFIER_FILES.
+// Do NOT diverge the copies, and do NOT "deduplicate" them into one file in a
+// cleanup pass — a true shared module importable by both packages does not
+// exist in this layout, so the twin-plus-parity arrangement IS the
+// single-grammar guarantee (one grammar, three consumers: review compose,
+// slice-detail-projector, and both scope-audit twins). If the layout ever
+// gains a real shared package, the twins collapse into it then — not before.
+//
+// Grammar (arch-stated): trimmed text fully bracket-wrapped = a scaffold
+// placeholder — the shipped-template marker, verified template-by-template
+// across scope-templates/*.md. Honest edge (test-pinned, not gated): ANY
+// character outside the brackets makes it real; a fully-bracket-wrapped REAL
+// deliverable is written in template grammar. `[a] and [b]` starts with `[`
+// and ends with `]`, so it classifies placeholder — arch-grammar-faithful,
+// deliberately not special-cased (no private grammar).
+/** True when `text`, trimmed, is fully bracket-wrapped (`[...]`) — the
+ *  shipped scaffold-template placeholder marker, i.e. NOT authored content. */
+export function isScaffoldPlaceholderText(text) {
+    return /^\[.*\]$/.test(text.trim());
+}
+/** release-0.4.7 placeholder-suppression completeness — true when `body`
+ *  carries at least one numbered item (`1.` OR `1)` form) whose text is NOT a
+ *  scaffold placeholder: the ONE authored-numbered-item grammar. Consumers:
+ *  review compose `hasAuthoredMiniReqs` + BOTH scope-audit mini-reqs arms —
+ *  one predicate heals the IF-3 dot/paren grammar divergence and the audit
+ *  arm's placeholder-blindness together (arch MB-AR-1 primary shape).
+ *  Prose-only or bullet-only bodies are deliberately NOT authored — the
+ *  numbered tier is where approval starts (reviewer-L1 ruling 2026-07-11,
+ *  intent-stage gate). `null` → false. */
+export function hasAuthoredNumberedItem(body) {
+    if (body === null)
+        return false;
+    for (const line of body.split("\n")) {
+        const m = line.match(/^\s*\d+[.)]\s+(.+)$/);
+        if (m && !isScaffoldPlaceholderText(m[1].trim()))
+            return true;
+    }
+    return false;
+}
+/** release-0.4.7 placeholder-suppression completeness — true when EVERY
+ *  non-blank line of `block` is a scaffold placeholder: the section-level
+ *  "nothing authored here" test. Per-LINE deliberately, not a whole-string
+ *  trim — a two-line `[a]\n[b]` body is placeholder-only per line but would
+ *  fail the single-line regex (the multi-line honest case, arch MB-AR-2).
+ *  `null`/empty/blank-only → false: absence is its own state; callers keep
+ *  their existing null handling. */
+export function isPlaceholderOnlyBlock(block) {
+    if (block === null)
+        return false;
+    const lines = block
+        .split("\n")
+        .map((l) => l.trim())
+        .filter((l) => l.length > 0);
+    if (lines.length === 0)
+        return false;
+    return lines.every((l) => isScaffoldPlaceholderText(l));
+}
+/** PM dogfood #1 (qitem-20260720015700-630eef64) — true when `body` is a
+ *  PRESENT section whose EVERY non-blank line is scaffold-placeholder
+ *  content: either a bare placeholder line, or a structural list row
+ *  (numbered `1.`/`1)`, checkbox `- [ ]`, or bullet `-`/`*`) whose text is a
+ *  placeholder — i.e. exactly what the shipped templates scaffold, nothing
+ *  authored. This is the SECTION-level pristine test behind per-section
+ *  source selection: only a pristine PRD section may yield to an authored
+ *  README section; authored/prose/mixed content is NOT pristine and stays
+ *  canonical wherever it lives. `null`/blank-only → false (absence is its
+ *  own state; a missing section never triggers fallback). */
+export function isPristineScaffoldSection(body) {
+    if (body === null)
+        return false;
+    const lines = body
+        .split("\n")
+        .map((l) => l.trim())
+        .filter((l) => l.length > 0);
+    if (lines.length === 0)
+        return false;
+    return lines.every((l) => {
+        const stripped = l.replace(/^(?:\d+[.)]\s+|-\s*\[[ xX]\]\s*|[-*]\s+)/, "");
+        return isScaffoldPlaceholderText(stripped);
+    });
+}
+/** The generic acceptance triple scaffolded by
+ *  `packages/cli/src/lib/scope-templates/slice-progress.md` — exact trimmed
+ *  literals, sync-tested against the shipped template so constant/template
+ *  drift fails CI instead of silently reviving the bogus pristine count. */
+export const GENERIC_SCAFFOLD_ACCEPTANCE = [
+    "Implementation complete",
+    "Tests passing",
+    "Review approved",
+];
+//# sourceMappingURL=scaffold-placeholder.js.map

package/node_modules/@openrig/daemon/dist/domain/scope/scaffold-placeholder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold-placeholder.js","sourceRoot":"","sources":["../../../src/domain/scope/scaffold-placeholder.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,iEAAiE;AACjE,uDAAuD;AACvD,6DAA6D;AAC7D,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,mEAAmE;AACnE,0EAA0E;AAC1E,0EAA0E;AAC1E,6EAA6E;AAC7E,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;AAC7E,4EAA4E;AAC5E,2EAA2E;AAC3E,uDAAuD;AAEvD;+EAC+E;AAC/E,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;0CAQ0C;AAC1C,MAAM,UAAU,uBAAuB,CAAC,IAAmB;IACzD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;oCAMoC;AACpC,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IACzD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK;SAChB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;6DAS6D;AAC7D,MAAM,UAAU,yBAAyB,CAAC,IAAmB;IAC3D,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI;SACf,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC;QAC3E,OAAO,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;4EAG4E;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,yBAAyB;IACzB,eAAe;IACf,iBAAiB;CAClB,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/scope/scope-approve.d.ts

@@ -0,0 +1,81 @@
+import type { MissionControlActionLog } from "../mission-control/mission-control-action-log.js";
+export type ScopeTier = "slice" | "mission";
+export type ApprovalScope = "spec" | "delivery";
+export interface ScopeApproveInput {
+    scopeTier: ScopeTier;
+    /** Canonical missions-root-relative path (e.g.
+     *  "release-0.4.4/slices/19-living-notes-signal-layer" or "release-0.4.4"). */
+    scopePath: string;
+    /** STAGED APPROVAL (founder un-deferred): `spec` = "the PRD matches my
+     *  intent" (the first accept-point); `delivery` = the terminal sign-off
+     *  (the freeze trigger). Omitted upstream ⇒ delivery (back-compat). */
+    approvalScope: ApprovalScope;
+    /** The REAL invoking session (honest provenance — never overwritten by
+     *  delegation). */
+    actorSession: string;
+    /** P21 era-stamp: how actorSession was established. The route passes `transport:v1` when it derived
+     *  the actor from the authenticated transport chokepoint; omitted (null) ⇒ claimed-era (a direct
+     *  caller / pre-P21 row), rendered "recorded (pre-verification era)", never re-labeled. */
+    identityProvenance?: string | null;
+    /** DELEGATED APPROVAL: whose decision this stamp records when an agent
+     *  invokes on the founder's behalf. Recorded in the audit notes only. */
+    onBehalfOf?: string | null;
+    /** OPR.0.5.0.18 — AMEND/RE-STAMP: re-approve an already-approved scope as a
+     *  new reasoned attestation superseding the prior (both preserved in the
+     *  append-only audit log; ARCH-SHAPING 9d64ceb6 v2). Atomic: same
+     *  frontmatter-first → audit-second → byte-restore ordering; no unapprove
+     *  window ever exists. */
+    reApprove?: boolean;
+    /** REQUIRED with reApprove (a reasoned deliberate act, never an accident). */
+    reason?: string | null;
+}
+export interface ScopeApproveResult {
+    scopeTier: ScopeTier;
+    scopeId: string;
+    scopePath: string;
+    approvalScope: ApprovalScope;
+    approvedBy: string;
+    approvedAt: string;
+    onBehalfOf: string | null;
+    actionId: string;
+    /** Packet-2 interface cell: only the DELIVERY stamp fires the freeze; the
+     *  compose-and-freeze endpoint ships in Packet 2, so P1 always reports
+     *  false. The stamp + audit row stand regardless of any render outcome. */
+    freezeFired: false;
+    /** OPR.0.5.0.18 — true when this result is an amendment (a re-stamp). */
+    reApproved: boolean;
+    /** The superseded attestation (present only on a re-stamp). */
+    priorApprovedBy?: string;
+    priorApprovedAt?: string | null;
+}
+export declare class ScopeApproveError extends Error {
+    readonly code: string;
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(code: string, message: string, details?: Record<string, unknown> | undefined);
+}
+/** The pinned audit_notes_json shape (spec-guard blocker 2): a stable,
+ *  queryable scope-target identity + the approval scope + delegation
+ *  provenance. The audit-browse read path filters on these keys — the pair
+ *  is what makes Packet 2's one-query UNVERIFIED-stamp cross-check real. */
+export interface ScopeApprovalAuditNotes extends Record<string, unknown> {
+    kind: "scope-approval";
+    scope_tier: ScopeTier;
+    scope_id: string;
+    scope_path: string;
+    approval_scope: ApprovalScope;
+    on_behalf_of: string | null;
+}
+interface ScopeApproveDeps {
+    /** Resolves the live missions root (SliceIndexer.slicesRoot), or null when
+     *  the workspace is not configured. */
+    missionsRoot: () => string | null;
+    actionLog: MissionControlActionLog;
+    now?: () => Date;
+}
+export declare class ScopeApproveService {
+    private readonly deps;
+    constructor(deps: ScopeApproveDeps);
+    approve(input: ScopeApproveInput): ScopeApproveResult;
+}
+export {};
+//# sourceMappingURL=scope-approve.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/scope/scope-approve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-approve.d.ts","sourceRoot":"","sources":["../../../src/domain/scope/scope-approve.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAGhG,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAC5C,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,UAAU,CAAC;AAEhD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,SAAS,CAAC;IACrB;mFAC+E;IAC/E,SAAS,EAAE,MAAM,CAAC;IAClB;;2EAEuE;IACvE,aAAa,EAAE,aAAa,CAAC;IAC7B;uBACmB;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB;;+FAE2F;IAC3F,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;6EACyE;IACzE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;8BAI0B;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB;;+EAE2E;IAC3E,WAAW,EAAE,KAAK,CAAC;IACnB,yEAAyE;IACzE,UAAU,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,qBAAa,iBAAkB,SAAQ,KAAK;aAExB,IAAI,EAAE,MAAM;aAEZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjC,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAED;;;4EAG4E;AAC5E,MAAM,WAAW,uBAAwB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACtE,IAAI,EAAE,gBAAgB,CAAC;IACvB,UAAU,EAAE,SAAS,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,aAAa,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAOD,UAAU,gBAAgB;IACxB;2CACuC;IACvC,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,EAAE,uBAAuB,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;gBAE5B,IAAI,EAAE,gBAAgB;IAIlC,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,kBAAkB;CAmLtD"}

package/node_modules/@openrig/daemon/dist/domain/scope/scope-approve.js

@@ -0,0 +1,241 @@
+// OPR.0.4.4.19 FR-9 — scope approve: frontmatter sole-writer + append-only
+// audit row (kills vibe-shuttled approval).
+//
+// Daemon-side by design (plan-review CONFIRMED; arch-lead interface-cell
+// PASS): the stamp is a workspace frontmatter write, the audit row is a
+// mission_control_actions insert, and the freeze-trigger interface cell
+// (Packet 2) invokes the compose-and-freeze endpoint AFTER the stamp+audit
+// commit — so the stamp+audit pair lives behind ONE daemon operation.
+//
+// Ordering (arch-lead PIN, 2026-07-04): frontmatter-first → audit-second →
+// on audit failure LOUD-FAIL + byte-restore the prior frontmatter. The
+// compensating-DELETE variant is REJECTED — no row is ever deleted from
+// mission_control_actions; append-only stands.
+//
+// Two-regime role clarity (BR-6, ratified): approval is the freeze/LOCKED
+// trigger and the regime-2 sign-off — it is NEVER the source of proven-green.
+// Nothing here computes or stores "green".
+import * as fs from "node:fs";
+import * as path from "node:path";
+import YAML from "yaml";
+import { derivePlanLockArtifacts } from "./plan-lock-artifacts.js";
+export class ScopeApproveError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = "ScopeApproveError";
+    }
+}
+const STAMP_FIELDS = {
+    delivery: { by: "approved-by", at: "approved-at", priors: "approved-priors" },
+    spec: { by: "approved-spec-by", at: "approved-spec-at", priors: "approved-spec-priors" },
+};
+export class ScopeApproveService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    approve(input) {
+        const missionsRoot = this.deps.missionsRoot();
+        if (!missionsRoot) {
+            throw new ScopeApproveError("workspace_not_configured", "The daemon has no missions root configured; scope approve needs the workspace primitive.");
+        }
+        // Path containment: the scope path must resolve INSIDE the missions root
+        // (content-surfaces discipline — no ../ escapes).
+        const resolved = path.resolve(missionsRoot, input.scopePath);
+        if (resolved !== missionsRoot && !resolved.startsWith(missionsRoot + path.sep)) {
+            throw new ScopeApproveError("scope_path_escape", `scopePath '${input.scopePath}' resolves outside the missions root.`, { scopePath: input.scopePath });
+        }
+        const readmePath = path.join(resolved, "README.md");
+        if (!fs.existsSync(readmePath)) {
+            throw new ScopeApproveError("scope_not_found", `No README.md at ${input.scopePath} under the missions root — not a declared ${input.scopeTier}.`, { scopePath: input.scopePath, scopeTier: input.scopeTier });
+        }
+        const originalBytes = fs.readFileSync(readmePath, "utf8");
+        const frontmatter = parseFrontmatter(originalBytes);
+        const scopeId = typeof frontmatter["id"] === "string" && frontmatter["id"].trim().length > 0
+            ? frontmatter["id"]
+            : null;
+        if (!scopeId) {
+            throw new ScopeApproveError("scope_id_missing", `${input.scopePath} has no frontmatter id (dot-ID) — the audit target contract requires a stable scope_id.`, { scopePath: input.scopePath, action: "Run: rig scope " + input.scopeTier + " reconcile <path> to mint the id, then re-approve." });
+        }
+        // OPR.0.5.0.18 — the amend/re-stamp verb (ARCH-SHAPING 9d64ceb6 v2): a
+        // lock is a point-in-time ATTESTATION, not an irreversible seal. Without
+        // --re-approve, an existing stamp still refuses loudly — but the refusal
+        // TEACHES the sanctioned verb instead of dead-ending. With it, the stamp
+        // is superseded by a new reasoned attestation; both live in the
+        // append-only audit log. A spec stamp followed by a delivery stamp is
+        // still the normal staged sequence (different scopes never collide).
+        const fields = STAMP_FIELDS[input.approvalScope];
+        const existingBy = frontmatter[fields.by];
+        const hasExistingStamp = typeof existingBy === "string" && existingBy.trim().length > 0;
+        const isReApprove = input.reApprove === true;
+        if (hasExistingStamp && !isReApprove) {
+            throw new ScopeApproveError("already_approved", `${input.scopePath} already carries a ${input.approvalScope} approval stamp: ${fields.by}: ${existingBy}, ${fields.at}: ${String(frontmatter[fields.at] ?? "?")}. To amend/re-stamp it as a new reasoned attestation (prior preserved in the audit log), re-run with --re-approve --reason "<why>".`, { scopePath: input.scopePath, approvalScope: input.approvalScope, existingBy, existingAt: frontmatter[fields.at] ?? null });
+        }
+        const reason = typeof input.reason === "string" ? input.reason.trim() : "";
+        if (isReApprove && reason.length === 0) {
+            throw new ScopeApproveError("reason_required", `--re-approve is a reasoned deliberate act: pass --reason "<why>" describing what changed since the prior ${input.approvalScope} attestation.`, { scopePath: input.scopePath, approvalScope: input.approvalScope });
+        }
+        if (isReApprove && !hasExistingStamp) {
+            throw new ScopeApproveError("nothing_to_reapprove", `${input.scopePath} carries no ${input.approvalScope} approval stamp to supersede — run a plain approve (without --re-approve) for the first attestation.`, { scopePath: input.scopePath, approvalScope: input.approvalScope });
+        }
+        const priorApprovedBy = hasExistingStamp ? existingBy : null;
+        const priorApprovedAt = hasExistingStamp
+            ? (typeof frontmatter[fields.at] === "string" ? frontmatter[fields.at] : null)
+            : null;
+        const priorCount = typeof frontmatter[fields.priors] === "number" ? frontmatter[fields.priors] : 0;
+        const approvedAt = (this.deps.now?.() ?? new Date()).toISOString();
+        // Stage-3 Lever A — plan-lock snapshot: ONLY a slice SPEC approval derives +
+        // co-serializes the `locked-artifacts` set (mission/delivery NEVER create it;
+        // a delivery merge preserves an existing list). PRD read fails open to null.
+        const isPlanLock = input.scopeTier === "slice" && input.approvalScope === "spec";
+        const lockedArtifacts = isPlanLock
+            ? derivePlanLockArtifacts(originalBytes, tryReadPRD(resolved))
+            : undefined;
+        // 1. Frontmatter FIRST (the arch-pinned ordering). The stamp AND the
+        // co-serialized `locked-artifacts` land in ONE writeFrontmatterFields +
+        // writeFileSync — so a later audit failure restores a clean verbatim README.
+        const updated = writeFrontmatterFields(originalBytes, {
+            [fields.by]: input.actorSession,
+            [fields.at]: approvedAt,
+            // OPR.0.5.0.18 — amendment lineage in the ONE atomic frontmatter write:
+            // prior-count rides beside the current attestation so the (filesystem-
+            // local) scope audit can show lineage; the rows hold the full history.
+            ...(isReApprove ? { [fields.priors]: priorCount + 1 } : {}),
+            ...(isPlanLock ? { "locked-artifacts": lockedArtifacts } : {}),
+            // P21 era-stamp: a `provenance:` line beside the approved-by stamp records how the approver
+            // identity was established. Present (`transport:v1`) ⇒ transport-derived; absent ⇒ claimed-era.
+            ...(input.identityProvenance ? { provenance: input.identityProvenance } : {}),
+        });
+        fs.writeFileSync(readmePath, updated, "utf8");
+        // 2. Audit SECOND. On failure: byte-restore the prior frontmatter and
+        // fail loudly — a failed audit write can never leave a trusted half-stamp
+        // (QA plan-review guardrail), and no audit row is ever deleted.
+        const scopePathCanonical = path.relative(missionsRoot, resolved).split(path.sep).join("/");
+        const auditNotes = {
+            kind: "scope-approval",
+            scope_tier: input.scopeTier,
+            scope_id: scopeId,
+            scope_path: scopePathCanonical,
+            approval_scope: input.approvalScope,
+            on_behalf_of: input.onBehalfOf ?? null,
+            // OPR.0.5.0.18 — the amendment row makes the supersession explicit
+            // (additive keys; the audit-browse scope filters are untouched). The
+            // provenance triple: authorizer = on_behalf_of, acting agent =
+            // actor_session, reason = the verbatim operator reason.
+            ...(isReApprove
+                ? {
+                    re_approval: true,
+                    reason,
+                    prior_approved_by: priorApprovedBy,
+                    prior_approved_at: priorApprovedAt,
+                    prior_count: priorCount + 1,
+                }
+                : {}),
+        };
+        let actionId;
+        try {
+            const baseReason = input.onBehalfOf
+                ? `scope-approval (${input.approvalScope}) on behalf of ${input.onBehalfOf}`
+                : `scope-approval (${input.approvalScope})`;
+            const entry = this.deps.actionLog.record({
+                actionVerb: "approve",
+                qitemId: null, // scope approvals are NOT qitem actions
+                actorSession: input.actorSession,
+                actedAt: approvedAt,
+                reason: isReApprove ? `${baseReason} re-approve: ${reason}` : baseReason,
+                auditNotes,
+                identityProvenance: input.identityProvenance ?? null,
+            });
+            actionId = entry.actionId;
+        }
+        catch (err) {
+            fs.writeFileSync(readmePath, originalBytes, "utf8");
+            throw new ScopeApproveError("audit_write_failed", `The approval audit row could not be written; the frontmatter stamp was restored to its prior state (no half-stamp). Cause: ${err instanceof Error ? err.message : String(err)}`, { scopePath: input.scopePath, approvalScope: input.approvalScope });
+        }
+        // 3. Freeze-trigger interface cell (Packet 2): the DELIVERY stamp will
+        // synchronously invoke the ONE compose-and-freeze endpoint AFTER this
+        // point. The endpoint does not exist at P1; when it lands, a failed
+        // render never un-approves and never half-stamps — the stamp + audit
+        // row above stand regardless of the render outcome.
+        return {
+            scopeTier: input.scopeTier,
+            scopeId,
+            scopePath: scopePathCanonical,
+            approvalScope: input.approvalScope,
+            approvedBy: input.actorSession,
+            approvedAt,
+            onBehalfOf: input.onBehalfOf ?? null,
+            actionId,
+            freezeFired: false,
+            reApproved: isReApprove,
+            ...(isReApprove && priorApprovedBy !== null
+                ? { priorApprovedBy, priorApprovedAt }
+                : {}),
+        };
+    }
+}
+// ——— frontmatter helpers (daemon-side mirror of the CLI scope-fs shape:
+// hand-rolled split + YAML.parse, safe-by-default per PRD §4 leg 2) ———
+function parseFrontmatter(content) {
+    if (!content.startsWith("---"))
+        return {};
+    const match = /^---\s*\n([\s\S]*?)\n---/.exec(content);
+    if (!match)
+        return {};
+    try {
+        const parsed = YAML.parse(match[1]);
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+/** Reads the slice IMPLEMENTATION-PRD.md; returns null on ANY missing/unreadable
+ *  error (never throws) — the plan-lock derivation fails open to a PRD-only set. */
+function tryReadPRD(sliceDir) {
+    try {
+        return fs.readFileSync(path.join(sliceDir, "IMPLEMENTATION-PRD.md"), "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+/** P15 (WRITER-EXCEEDS-ITS-OWNERSHIP fix, PM-ruled 2026-08-07): the stamp is
+ *  sole-writer of its OWN keys and must byte-preserve every line it does not
+ *  own. The old implementation parsed and RE-SERIALIZED the whole block, so
+ *  stamping invalidated any seal taken over the file — seal-then-lock broke by
+ *  construction. Now: each owned key is serialized alone and spliced in by
+ *  index (replace-in-place when the key exists, append at the block end when
+ *  absent). Unowned bytes — folded scalars, quoting style, ordering — are
+ *  untouched, so stripping exactly the owned lines restores the pre-stamp
+ *  bytes. Index splicing (never String.replace with a dynamic replacement)
+ *  keeps $-metacharacters in values inert. */
+function writeFrontmatterFields(content, fields) {
+    const match = /^---\s*\n([\s\S]*?)\n---/.exec(content);
+    if (!match) {
+        const yaml = YAML.stringify(fields).trimEnd();
+        return `---\n${yaml}\n---\n\n${content}`;
+    }
+    let block = match[1];
+    for (const [key, value] of Object.entries(fields)) {
+        if (value === undefined)
+            continue;
+        const rendered = YAML.stringify({ [key]: value }).trimEnd();
+        const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        // a top-level `key:` line plus its indented continuation lines (nested blocks)
+        const keyRe = new RegExp(`^${escaped}:[^\\n]*(?:\\n[ \\t]+[^\\n]*)*`, "m");
+        const existing = keyRe.exec(block);
+        if (existing) {
+            block = block.slice(0, existing.index) + rendered + block.slice(existing.index + existing[0].length);
+        }
+        else {
+            block = block.length > 0 ? `${block}\n${rendered}` : rendered;
+        }
+    }
+    return content.slice(0, match.index) + `---\n${block}\n---` + content.slice(match.index + match[0].length);
+}
+//# sourceMappingURL=scope-approve.js.map

package/node_modules/@openrig/daemon/dist/domain/scope/scope-approve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-approve.js","sourceRoot":"","sources":["../../../src/domain/scope/scope-approve.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,4CAA4C;AAC5C,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,sEAAsE;AACtE,EAAE;AACF,2EAA2E;AAC3E,uEAAuE;AACvE,wEAAwE;AACxE,+CAA+C;AAC/C,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,2CAA2C;AAE3C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAsDnE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAExB;IAEA;IAHlB,YACkB,IAAY,EAC5B,OAAe,EACC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QAEZ,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAeD,MAAM,YAAY,GAAsE;IACtF,QAAQ,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,iBAAiB,EAAE;IAC7E,IAAI,EAAE,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,sBAAsB,EAAE;CACzF,CAAC;AAUF,MAAM,OAAO,mBAAmB;IACb,IAAI,CAAmB;IAExC,YAAY,IAAsB;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,OAAO,CAAC,KAAwB;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,iBAAiB,CACzB,0BAA0B,EAC1B,0FAA0F,CAC3F,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,QAAQ,KAAK,YAAY,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,EACnB,cAAc,KAAK,CAAC,SAAS,uCAAuC,EACpE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,iBAAiB,CACzB,iBAAiB,EACjB,mBAAmB,KAAK,CAAC,SAAS,6CAA6C,KAAK,CAAC,SAAS,GAAG,EACjG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAG,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC1F,CAAC,CAAE,WAAW,CAAC,IAAI,CAAY;YAC/B,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,iBAAiB,CACzB,kBAAkB,EAClB,GAAG,KAAK,CAAC,SAAS,yFAAyF,EAC3G,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,iBAAiB,GAAG,KAAK,CAAC,SAAS,GAAG,oDAAoD,EAAE,CACnI,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,gEAAgE;QAChE,sEAAsE;QACtE,qEAAqE;QACrE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,gBAAgB,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACxF,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;QAC7C,IAAI,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,iBAAiB,CACzB,kBAAkB,EAClB,GAAG,KAAK,CAAC,SAAS,sBAAsB,KAAK,CAAC,aAAa,oBAAoB,MAAM,CAAC,EAAE,KAAK,UAAU,KAAK,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,qIAAqI,EACpS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAC3H,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,iBAAiB,CACzB,iBAAiB,EACjB,4GAA4G,KAAK,CAAC,aAAa,eAAe,EAC9I,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM,IAAI,iBAAiB,CACzB,sBAAsB,EACtB,GAAG,KAAK,CAAC,SAAS,eAAe,KAAK,CAAC,aAAa,sGAAsG,EAC1J,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,gBAAgB,CAAC,CAAC,CAAE,UAAqB,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,MAAM,eAAe,GAAG,gBAAgB;YACtC,CAAC,CAAC,CAAC,OAAO,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1F,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,UAAU,GAAG,OAAO,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/G,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAEnE,6EAA6E;QAC7E,8EAA8E;QAC9E,6EAA6E;QAC7E,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,KAAK,OAAO,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,CAAC;QACjF,MAAM,eAAe,GAAG,UAAU;YAChC,CAAC,CAAC,uBAAuB,CAAC,aAAa,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC9D,CAAC,CAAC,SAAS,CAAC;QAEd,qEAAqE;QACrE,wEAAwE;QACxE,6EAA6E;QAC7E,MAAM,OAAO,GAAG,sBAAsB,CAAC,aAAa,EAAE;YACpD,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,YAAY;YAC/B,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU;YACvB,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,4FAA4F;YAC5F,gGAAgG;YAChG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE9C,sEAAsE;QACtE,0EAA0E;QAC1E,gEAAgE;QAChE,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3F,MAAM,UAAU,GAA4B;YAC1C,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,kBAAkB;YAC9B,cAAc,EAAE,KAAK,CAAC,aAAa;YACnC,YAAY,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACtC,mEAAmE;YACnE,qEAAqE;YACrE,+DAA+D;YAC/D,wDAAwD;YACxD,GAAG,CAAC,WAAW;gBACb,CAAC,CAAC;oBACE,WAAW,EAAE,IAAI;oBACjB,MAAM;oBACN,iBAAiB,EAAE,eAAe;oBAClC,iBAAiB,EAAE,eAAe;oBAClC,WAAW,EAAE,UAAU,GAAG,CAAC;iBAC5B;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU;gBACjC,CAAC,CAAC,mBAAmB,KAAK,CAAC,aAAa,kBAAkB,KAAK,CAAC,UAAU,EAAE;gBAC5E,CAAC,CAAC,mBAAmB,KAAK,CAAC,aAAa,GAAG,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;gBACvC,UAAU,EAAE,SAAS;gBACrB,OAAO,EAAE,IAAI,EAAE,wCAAwC;gBACvD,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,UAAU,gBAAgB,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU;gBACxE,UAAU;gBACV,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;aACrD,CAAC,CAAC;YACH,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,IAAI,iBAAiB,CACzB,oBAAoB,EACpB,8HAA8H,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAChL,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CACnE,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,oDAAoD;QAEpD,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO;YACP,SAAS,EAAE,kBAAkB;YAC7B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,UAAU,EAAE,KAAK,CAAC,YAAY;YAC9B,UAAU;YACV,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,QAAQ;YACR,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,WAAW;YACvB,GAAG,CAAC,WAAW,IAAI,eAAe,KAAK,IAAI;gBACzC,CAAC,CAAC,EAAE,eAAe,EAAE,eAAe,EAAE;gBACtC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;CACF;AAED,yEAAyE;AACzE,wEAAwE;AAExE,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAY,CAAC;QAChD,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;oFACoF;AACpF,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;8CAS8C;AAC9C,SAAS,sBAAsB,CAAC,OAAe,EAAE,MAA+B;IAC9E,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,QAAQ,IAAI,YAAY,OAAO,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC3D,+EAA+E;QAC/E,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,gCAAgC,EAAE,GAAG,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvG,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,KAAK,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7G,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/scope/scope-audit.d.ts

@@ -0,0 +1,48 @@
+export type RailStatus = "present" | "missing" | "malformed" | "readme-only";
+export type FindingSeverity = "high" | "medium" | "low" | "info";
+export type FindingKind = "missing_progress" | "registration_ghost" | "missing_id" | "id_convention_violation" | "orphan_progress" | "missing_mission_brief" | "malformed_mission_brief" | "missing_mission_notes" | "missing_proof" | "progress_not_updated_on_commit" | "proof_artifact_c1_invalid" | "missing_impl_prd" | "missing_intent_section" | "mini_requirements_missing_or_malformed" | "proof_contract_missing_or_malformed" | "ui_slice_missing_mockup";
+export interface AuditFinding {
+    kind: FindingKind;
+    severity: FindingSeverity;
+    path: string;
+    message: string;
+    remediation: string;
+}
+export interface ScopeAuditInput {
+    id: string | null;
+    path: string;
+    readmeFrontmatterRaw: string | null;
+    progressFileExists: boolean;
+    readmeOnlyMarker: boolean;
+    isActiveRelease: boolean;
+    level: "mission" | "slice";
+    missionBriefExists?: boolean;
+    missionBriefPath?: string;
+    missionBriefContent?: string | null;
+    missionNotesExists?: boolean;
+    missionNotesPath?: string;
+    proofFileExists?: boolean;
+    proofFilePath?: string;
+    proofDirExists?: boolean;
+    proofDirPath?: string;
+    proofDirHasEntries?: boolean;
+    hasProofPacket?: boolean;
+    sliceStatus?: string | null;
+    sliceTouchedByRecentCommit?: boolean;
+    progressTouchedByRecentCommit?: boolean;
+    proofArtifacts?: Array<{
+        path: string;
+        frontmatterRaw: string | null;
+    }>;
+    implementationPrdExists?: boolean;
+    readmeContent?: string | null;
+    implementationPrdContent?: string | null;
+}
+export interface ScopeAuditResult {
+    railStatus: RailStatus;
+    findings: AuditFinding[];
+    frontmatterError: string | null;
+}
+export declare const MISSION_BRIEF_HEADERS: string[];
+export declare function classifyScopeItem(input: ScopeAuditInput): ScopeAuditResult;
+//# sourceMappingURL=scope-audit.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/scope/scope-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-audit.d.ts","sourceRoot":"","sources":["../../../src/domain/scope/scope-audit.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,CAAC;AAC7E,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AACjE,MAAM,MAAM,WAAW,GACnB,kBAAkB,GAClB,oBAAoB,GACpB,YAAY,GACZ,yBAAyB,GACzB,iBAAiB,GACjB,uBAAuB,GACvB,yBAAyB,GACzB,uBAAuB,GACvB,eAAe,GACf,gCAAgC,GAGhC,2BAA2B,GAC3B,kBAAkB,GAIlB,wBAAwB,GACxB,wCAAwC,GACxC,qCAAqC,GACrC,yBAAyB,CAAC;AAE9B,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC;IAC3B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAQ5B,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,6BAA6B,CAAC,EAAE,OAAO,CAAC;IAMxC,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAGxE,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAKlC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAMD,eAAO,MAAM,qBAAqB,UAA4E,CAAC;AA2H/G,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CA4T1E"}