@openrig/cli 0.4.8 → 0.5.1

package/node_modules/@openrig/daemon/dist/domain/session-registry.js

@@ -0,0 +1,407 @@
+import { monotonicFactory } from "ulid";
+import { randomUUID } from "node:crypto";
+const ulid = monotonicFactory();
+import { validateSessionName } from "./session-name.js";
+import { formatWatchdogRegistrationError } from "./watchdog-auto-registration.js";
+/** Resume-token provenance precedence (OPR.0.4.0.22; adoption rung added by
+ *  OPR.0.4.3.20 FR-3). Higher rank wins; a lower-rank write never overwrites a
+ *  higher-rank persisted token.
+ *  operator/attested (deliberate set) > hook (runtime self-report) >
+ *  adoption (captured at the reconcile/adopt/bind boundary) > scrape (pane).
+ *  adoption sits BELOW hook deliberately: a live runtime hook self-report is
+ *  fresher than an adoption-time snapshot, so hook must be able to refresh an
+ *  adoption token (FR-3 §2.4 — do not freeze the token at adoption time and
+ *  reintroduce the staleness the survive slice exists to kill). */
+export const RESUME_PROVENANCE_RANK = {
+    scrape: 0,
+    adoption: 1,
+    hook: 2,
+    operator: 3,
+};
+export class SessionRegistry {
+    db;
+    watchdogRegistrationObserver;
+    constructor(db, watchdogRegistrationObserver) {
+        this.db = db;
+        this.watchdogRegistrationObserver = watchdogRegistrationObserver;
+    }
+    setWatchdogRegistrationObserver(observer) {
+        this.watchdogRegistrationObserver = observer;
+    }
+    registerSession(nodeId, sessionName, kind = "initial", reservedGeneration) {
+        if (!validateSessionName(sessionName)) {
+            throw new Error(`Invalid session name "${sessionName}": must match legacy r{NN}-{suffix} or canonical {pod}-{member}@{rig} format with allowed characters (a-z, A-Z, 0-9, -, _, ., @)`);
+        }
+        const id = ulid();
+        this.db
+            .prepare("INSERT INTO sessions (id, node_id, session_name) VALUES (?, ?, ?)")
+            .run(id, nodeId, sessionName);
+        this.mintOccupantTenureBestEffort(nodeId, kind, reservedGeneration); // atom-B: mint this occupant generation
+        this.observeWatchdogRegistration(nodeId, sessionName, kind);
+        return this.rowToSession(this.db.prepare("SELECT * FROM sessions WHERE id = ?").get(id));
+    }
+    /** Register a claimed session — skips naming validation, sets origin='claimed', startup_status='ready'. */
+    registerClaimedSession(nodeId, sessionName, kind = "adopt", reservedGeneration) {
+        const id = ulid();
+        this.db
+            .prepare("INSERT INTO sessions (id, node_id, session_name, status, origin, startup_status) VALUES (?, ?, ?, 'running', 'claimed', 'ready')")
+            .run(id, nodeId, sessionName);
+        this.mintOccupantTenureBestEffort(nodeId, kind, reservedGeneration); // atom-B: mint this occupant generation
+        this.observeWatchdogRegistration(nodeId, sessionName, kind);
+        return this.rowToSession(this.db.prepare("SELECT * FROM sessions WHERE id = ?").get(id));
+    }
+    /**
+     * atom-B — mint (or CONTINUE) the occupant-generation tenure for a node. RELAUNCH is a CONTINUATION:
+     * if the same native session id is already recorded for this node, return the existing tenure WITHOUT
+     * minting a new generation. A new occupant (initial/handover/adopt, or a new/unknown native session)
+     * mints the next generation_ordinal with a fresh generation_uuid. Append-only — the ledger is never
+     * mutated. (Relaunch also naturally continues by NOT re-calling the register verbs; the native-session
+     * dedup here is the safety net for a re-register.)
+     */
+    /** atom-B — mint the occupant tenure at a register verb, but FAIL-ISOLATED: a session registration
+     *  (a core operation) must NOT die because the additive occupant-generation ledger write failed
+     *  (e.g. a db that has not run migration 060). On failure we LOG loudly (once per process — a
+     *  missing ledger table in production is a visible defect) and let the register succeed;
+     *  generation-scoped consumers degrade to loud-pending, never a silent-wrong. Direct callers that
+     *  REQUIRE the tenure use `mintOccupantTenure` (which throws). */
+    mintOccupantTenureBestEffort(nodeId, kind, reservedGeneration) {
+        try {
+            this.mintOccupantTenure(nodeId, kind, null, reservedGeneration);
+        }
+        catch (e) {
+            if (!SessionRegistry.tenureMintWarned) {
+                SessionRegistry.tenureMintWarned = true;
+                // Attributable (node_id + kind/verb) so a failed mint is traceable from logs (orch note 1);
+                // once-per-process to avoid spamming a stale-migration db, but the FIRST failure pins the node.
+                console.warn(`[session-registry] occupant-tenure mint FAILED for node_id="${nodeId}" (kind=${kind}): ${e.message} — ` +
+                    `registration proceeds, but generation-scoped ghost-stage protection is UNAVAILABLE for this node. ` +
+                    `Ensure migration 060_occupant_tenures ran. (Further mint failures suppressed this process.)`);
+            }
+        }
+    }
+    static tenureMintWarned = false;
+    observeWatchdogRegistration(nodeId, sessionName, kind) {
+        const observer = this.watchdogRegistrationObserver;
+        if (!observer)
+            return;
+        if (observer.isEligibleSessionName?.(sessionName) === false) {
+            if (kind === "handover" && observer.reconcileHandover) {
+                this.runWatchdogEnsure(nodeId, sessionName, () => observer.reconcileHandover(nodeId, sessionName));
+            }
+            return;
+        }
+        this.runWatchdogEnsure(nodeId, sessionName, () => observer.ensure(nodeId, sessionName));
+        try {
+            observer.assertCoverage(nodeId, sessionName);
+        }
+        catch (error) {
+            console.warn(`[session-registry] watchdog coverage FAILED for node_id="${nodeId}" ` +
+                `session="${sessionName}": ${formatWatchdogRegistrationError(error)}`);
+        }
+    }
+    runWatchdogEnsure(nodeId, sessionName, ensure) {
+        try {
+            ensure();
+        }
+        catch (error) {
+            if (!SessionRegistry.watchdogEnsureWarned) {
+                SessionRegistry.watchdogEnsureWarned = true;
+                console.warn(`[session-registry] watchdog auto-registration FAILED for node_id="${nodeId}" ` +
+                    `session="${sessionName}": ${formatWatchdogRegistrationError(error)} ` +
+                    `(further ensure failures suppressed this process)`);
+            }
+        }
+    }
+    static watchdogEnsureWarned = false;
+    /** Reserve the generation that a managed process will carry before it starts. The capability probe
+     * is read-only: a failed/missing ledger yields null and launch continues without fabricating state. */
+    reserveOccupantGeneration() {
+        try {
+            this.db.prepare("SELECT 1 FROM occupant_tenures LIMIT 1").get();
+            return randomUUID();
+        }
+        catch {
+            return null;
+        }
+    }
+    /** True only when this exact generation is registered for this exact node. Throws on ledger faults so
+     * callers can preserve the distinct generation_resolver_error verdict. */
+    isOccupantGenerationRegistered(nodeId, generationUuid) {
+        return Boolean(this.db.prepare("SELECT 1 FROM occupant_tenures WHERE node_id = ? AND generation_uuid = ? LIMIT 1").get(nodeId, generationUuid));
+    }
+    mintOccupantTenure(nodeId, kind, nativeSessionIdAtBoot, reservedGeneration) {
+        if (nativeSessionIdAtBoot != null && nativeSessionIdAtBoot !== "") {
+            const existing = this.db
+                .prepare("SELECT * FROM occupant_tenures WHERE node_id = ? AND native_session_id_at_boot = ? ORDER BY generation_ordinal DESC LIMIT 1")
+                .get(nodeId, nativeSessionIdAtBoot);
+            if (existing)
+                return this.rowToTenure(existing); // continuation — no new generation
+        }
+        const nextOrdinal = ((this.db
+            .prepare("SELECT MAX(generation_ordinal) AS m FROM occupant_tenures WHERE node_id = ?")
+            .get(nodeId).m) ?? 0) + 1;
+        const id = ulid();
+        const generationUuid = reservedGeneration || randomUUID();
+        this.db
+            .prepare("INSERT INTO occupant_tenures (id, node_id, generation_ordinal, generation_uuid, kind, native_session_id_at_boot) VALUES (?, ?, ?, ?, ?, ?)")
+            .run(id, nodeId, nextOrdinal, generationUuid, kind, nativeSessionIdAtBoot ?? null);
+        return this.rowToTenure(this.db.prepare("SELECT * FROM occupant_tenures WHERE id = ?").get(id));
+    }
+    /** The LIVE (latest) occupant generation for a node, or null. Consumers compare an entry's minting
+     *  generation_uuid to this to gate stale-generation state (the ghost-stage defect). */
+    currentOccupantTenure(nodeId) {
+        const row = this.db
+            .prepare("SELECT * FROM occupant_tenures WHERE node_id = ? ORDER BY generation_ordinal DESC LIMIT 1")
+            .get(nodeId);
+        return row ? this.rowToTenure(row) : null;
+    }
+    /** ghost-stage (b): the LIVE occupant generation_uuid for the node currently backing a session
+     *  NAME, or null when UNKNOWN (no session row / no node / no tenure — consumers treat null as
+     *  UNKNOWN, never as a match against a stale generation). This is the resolver the compaction
+     *  enforcer's gen-scoped stage gate consumes. Never throws (a bad lookup returns null). */
+    currentOccupantGenerationForSession(sessionName) {
+        try {
+            const row = this.db
+                .prepare("SELECT node_id FROM sessions WHERE session_name = ? ORDER BY id DESC LIMIT 1")
+                .get(sessionName);
+            if (!row)
+                return null;
+            return this.currentOccupantTenure(row.node_id)?.generationUuid ?? null;
+        }
+        catch {
+            return null; // UNKNOWN on any lookup failure (e.g. a db without the tenure ledger)
+        }
+    }
+    rowToTenure(row) {
+        return {
+            id: row.id,
+            nodeId: row.node_id,
+            generationOrdinal: row.generation_ordinal,
+            generationUuid: row.generation_uuid,
+            kind: row.kind,
+            nativeSessionIdAtBoot: row.native_session_id_at_boot,
+            bootAt: row.boot_at,
+        };
+    }
+    updateStatus(sessionId, status) {
+        this.db
+            .prepare("UPDATE sessions SET status = ?, last_seen_at = datetime('now') WHERE id = ?")
+            .run(status, sessionId);
+    }
+    updateStartupStatus(sessionId, status, completedAt) {
+        if (completedAt) {
+            this.db
+                .prepare("UPDATE sessions SET startup_status = ?, startup_completed_at = ? WHERE id = ?")
+                .run(status, completedAt, sessionId);
+        }
+        else {
+            this.db
+                .prepare("UPDATE sessions SET startup_status = ? WHERE id = ?")
+                .run(status, sessionId);
+        }
+    }
+    // OPR.0.4.0.22 — resume-token provenance precedence. A deliberate
+    // operator/attested set is authoritative and OUTRANKS the runtime hook, the
+    // adoption-boundary capture, and the pane scrape (hook > adoption > scrape).
+    // A lower-rank write must never clobber a higher-rank persisted token.
+    //
+    // OPR.0.4.3.20 FR-3 — validity-before-rank guard: an empty/whitespace token
+    // is a SKIP, never a write. "Flakiness = missing = no-write, not a bad
+    // write." This runs BEFORE the rank comparison so NO caller (a flaky hook,
+    // adoption capture, or scrape) can ever replace a valid stored token with an
+    // empty one, even from a higher-provenance source.
+    //
+    // Returns whether a write actually happened: `true` on UPDATE, `false` on an
+    // empty-token skip or a lower-rank no-op. Callers that only set-and-forget can
+    // ignore it; the adoption-capture path uses it so its audit event never
+    // falsely claims a captured write when the provenance guard refused it.
+    updateResumeToken(sessionId, type, token, provenance) {
+        if (typeof token !== "string" || token.trim().length === 0)
+            return false;
+        if (provenance) {
+            const existing = this.db.prepare("SELECT resume_provenance FROM sessions WHERE id = ?").get(sessionId);
+            const existingProv = existing?.resume_provenance ?? null;
+            if (existingProv) {
+                const existingRank = RESUME_PROVENANCE_RANK[existingProv] ?? -1;
+                const newRank = RESUME_PROVENANCE_RANK[provenance] ?? -1;
+                if (newRank < existingRank)
+                    return false; // lower-rank cannot overwrite higher-rank
+            }
+        }
+        const prov = provenance ?? null;
+        // OPR.0.4.3.20 FR-6 — stamp-on-verify (+ equal-value-refresh): a token
+        // (re-)derived from live state IS a verification, so refresh the freshness
+        // marker + mark the last probe `resumable` on EVERY successful write, even
+        // when the token value is unchanged (a re-verified-but-unchanged token must
+        // not look untouched). The plan reads these to compute present/stale.
+        this.db
+            .prepare("UPDATE sessions SET resume_type = ?, resume_token = ?, resume_provenance = COALESCE(?, resume_provenance), " +
+            "resume_last_verified = datetime('now'), resume_last_probe_status = 'resumable' WHERE id = ?")
+            .run(type, token, prov, sessionId);
+        return true;
+    }
+    /** OPR.0.4.3.20 FR-6 — record a live resume-probe outcome WITHOUT clearing the
+     *  token. On `resumable` it stamps the freshness marker (equal-value-refresh);
+     *  on `not_resumable` / `inconclusive` it marks the PRESENT token stale so the
+     *  restore plan surfaces it as `stale/unverified — re-verify` (never a silent
+     *  null). This replaces the old clear-on-not-resumable behavior (§2.1b) — the
+     *  token stays put; FR-7's blank/fresh rollback catches an actually-unresumable
+     *  token at restore time. */
+    markResumeProbeResult(sessionId, status) {
+        if (status === "resumable") {
+            this.db
+                .prepare("UPDATE sessions SET resume_last_verified = datetime('now'), resume_last_probe_status = 'resumable' WHERE id = ?")
+                .run(sessionId);
+            return;
+        }
+        this.db
+            .prepare("UPDATE sessions SET resume_last_probe_status = ? WHERE id = ?")
+            .run(status, sessionId);
+    }
+    /** OPR.0.4.0.22 — resolve a canonical session name to the context needed to
+     *  set its resume token: the latest session row + its node's runtime + the
+     *  current resume provenance. Returns null when no session matches. */
+    findResumeContextByName(sessionName) {
+        const row = this.db.prepare(`SELECT s.id as session_id, s.node_id, n.rig_id, n.runtime, s.resume_provenance
+       FROM sessions s
+       JOIN nodes n ON n.id = s.node_id
+       WHERE s.session_name = ?
+       ORDER BY s.created_at DESC, s.id DESC LIMIT 1`).get(sessionName);
+        if (!row)
+            return null;
+        return {
+            sessionId: row.session_id,
+            nodeId: row.node_id,
+            rigId: row.rig_id,
+            runtime: row.runtime,
+            currentProvenance: row.resume_provenance ?? null,
+        };
+    }
+    clearResumeToken(sessionId) {
+        // OPR.0.4.3.20 FR-6 — also null the verification-freshness columns so a
+        // cleared slot carries no orphan freshness. NOTE: after §2.1b the refresher
+        // validate path marks-stale instead of clearing, so this has no in-tree
+        // caller on the live path; kept for explicit-clear callers/tests.
+        this.db
+            .prepare("UPDATE sessions SET resume_type = NULL, resume_token = NULL, resume_provenance = NULL, resume_last_verified = NULL, resume_last_probe_status = NULL WHERE id = ?")
+            .run(sessionId);
+    }
+    markDetached(sessionId) {
+        this.updateStatus(sessionId, "detached");
+    }
+    markSuperseded(sessionId) {
+        this.updateStatus(sessionId, "superseded");
+    }
+    clearBinding(nodeId) {
+        this.db.prepare("DELETE FROM bindings WHERE node_id = ?").run(nodeId);
+    }
+    getSessionsForRig(rigId) {
+        const rows = this.db
+            .prepare(`SELECT s.* FROM sessions s
+         JOIN nodes n ON s.node_id = n.id
+         WHERE n.rig_id = ?
+         ORDER BY s.created_at`)
+            .all(rigId);
+        return rows.map((r) => this.rowToSession(r));
+    }
+    /** OPR.0.4.3.20 FR-4 — the latest session PER NODE, filtered to live statuses
+     *  (running / idle / unknown), with the fields the resume-metadata refresher
+     *  needs. Lifted from rig-teardown so both the teardown pre-down path and the
+     *  FR-4 periodic/manual snapshot refresh call ONE query (no duplication). */
+    getLatestLiveSessions(rigId) {
+        const rows = this.db.prepare(`
+      SELECT n.id as node_id, s.id as session_id, s.session_name, s.status, n.runtime, n.cwd, s.resume_type, s.resume_token
+      FROM nodes n
+      JOIN sessions s ON s.node_id = n.id
+      WHERE n.rig_id = ?
+        AND s.id = (SELECT s2.id FROM sessions s2 WHERE s2.node_id = n.id ORDER BY s2.created_at DESC, s2.id DESC LIMIT 1)
+        AND s.status IN ('running', 'idle', 'unknown')
+    `).all(rigId);
+        return rows.map((r) => ({
+            nodeId: r.node_id,
+            sessionId: r.session_id,
+            sessionName: r.session_name,
+            status: r.status,
+            runtime: r.runtime,
+            resumeType: r.resume_type,
+            resumeToken: r.resume_token,
+            cwd: r.cwd,
+        }));
+    }
+    getBindingForNode(nodeId) {
+        const row = this.db
+            .prepare("SELECT * FROM bindings WHERE node_id = ?")
+            .get(nodeId);
+        return row ? this.rowToBinding(row) : null;
+    }
+    updateBinding(nodeId, fields) {
+        // Atomic upsert: entire read-modify-write is inside a transaction
+        const upsert = this.db.transaction(() => {
+            const existing = this.db
+                .prepare("SELECT * FROM bindings WHERE node_id = ?")
+                .get(nodeId);
+            if (existing) {
+                // Partial update: only overwrite fields that are provided
+                this.db
+                    .prepare(`UPDATE bindings SET
+              attachment_type = ?,
+              tmux_session = ?,
+              tmux_window = ?,
+              tmux_pane = ?,
+              external_session_name = ?,
+              cmux_workspace = ?,
+              cmux_surface = ?,
+              updated_at = datetime('now')
+            WHERE node_id = ?`)
+                    .run(fields.attachmentType ?? existing.attachment_type ?? "tmux", fields.tmuxSession ?? existing.tmux_session, fields.tmuxWindow ?? existing.tmux_window, fields.tmuxPane ?? existing.tmux_pane, fields.externalSessionName ?? existing.external_session_name, fields.cmuxWorkspace ?? existing.cmux_workspace, fields.cmuxSurface ?? existing.cmux_surface, nodeId);
+            }
+            else {
+                const id = ulid();
+                this.db
+                    .prepare(`INSERT INTO bindings (id, node_id, attachment_type, tmux_session, tmux_window, tmux_pane, external_session_name, cmux_workspace, cmux_surface)
+             VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+                    .run(id, nodeId, fields.attachmentType ?? "tmux", fields.tmuxSession ?? null, fields.tmuxWindow ?? null, fields.tmuxPane ?? null, fields.externalSessionName ?? null, fields.cmuxWorkspace ?? null, fields.cmuxSurface ?? null);
+            }
+        });
+        upsert();
+        return this.rowToBinding(this.db.prepare("SELECT * FROM bindings WHERE node_id = ?").get(nodeId));
+    }
+    // -- Row-to-domain mappers --
+    rowToSession(row) {
+        return {
+            id: row.id,
+            nodeId: row.node_id,
+            sessionName: row.session_name,
+            status: row.status,
+            resumeType: row.resume_type ?? null,
+            resumeToken: row.resume_token ?? null,
+            // OPR.0.4.3.20 FR-6 — carry provenance + verification freshness so a
+            // snapshot's serialized sessions (and getSessionsForRig) surface token
+            // state in the restore plan. Nullable/degrading for pre-45 rows.
+            resumeProvenance: row.resume_provenance ?? null,
+            resumeLastVerified: row.resume_last_verified ?? null,
+            resumeLastProbeStatus: row.resume_last_probe_status ?? null,
+            restorePolicy: row.restore_policy ?? "resume_if_possible",
+            lastSeenAt: row.last_seen_at,
+            createdAt: row.created_at,
+            origin: (row.origin === "claimed" ? "claimed" : "launched"),
+            startupStatus: row.startup_status ?? "pending",
+            startupCompletedAt: row.startup_completed_at ?? null,
+        };
+    }
+    rowToBinding(row) {
+        return {
+            id: row.id,
+            nodeId: row.node_id,
+            attachmentType: row.attachment_type ?? "tmux",
+            tmuxSession: row.tmux_session,
+            tmuxWindow: row.tmux_window,
+            tmuxPane: row.tmux_pane,
+            externalSessionName: row.external_session_name ?? null,
+            cmuxWorkspace: row.cmux_workspace,
+            cmuxSurface: row.cmux_surface,
+            updatedAt: row.updated_at,
+        };
+    }
+}
+//# sourceMappingURL=session-registry.js.map

package/node_modules/@openrig/daemon/dist/domain/session-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-registry.js","sourceRoot":"","sources":["../../src/domain/session-registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;AAEhC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAiClF;;;;;;;;mEAQmE;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAA2B;IAC5D,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CACZ,CAAC;AAsBF,MAAM,OAAO,eAAe;IACjB,EAAE,CAAoB;IACvB,4BAA4B,CAAgC;IACpE,YAAY,EAAqB,EAAE,4BAA2D;QAC5F,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,4BAA4B,GAAG,4BAA4B,CAAC;IACnE,CAAC;IAED,+BAA+B,CAAC,QAAsC;QACpE,IAAI,CAAC,4BAA4B,GAAG,QAAQ,CAAC;IAC/C,CAAC;IAED,eAAe,CACb,MAAc,EACd,WAAmB,EACnB,OAAqB,SAAS,EAC9B,kBAAkC;QAElC,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,yBAAyB,WAAW,kIAAkI,CACvK,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,mEAAmE,CACpE;aACA,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAChC,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,wCAAwC;QAC7G,IAAI,CAAC,2BAA2B,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,YAAY,CACtB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAe,CAC7E,CAAC;IACJ,CAAC;IAED,2GAA2G;IAC3G,sBAAsB,CACpB,MAAc,EACd,WAAmB,EACnB,OAAqB,OAAO,EAC5B,kBAAkC;QAElC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,kIAAkI,CACnI;aACA,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;QAChC,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC,wCAAwC;QAC7G,IAAI,CAAC,2BAA2B,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,YAAY,CACtB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAe,CAC7E,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH;;;;;sEAKkE;IAC1D,4BAA4B,CAClC,MAAc,EACd,IAAkB,EAClB,kBAAkC;QAElC,IAAI,CAAC;YACH,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC;gBACtC,eAAe,CAAC,gBAAgB,GAAG,IAAI,CAAC;gBACxC,4FAA4F;gBAC5F,gGAAgG;gBAChG,OAAO,CAAC,IAAI,CACV,+DAA+D,MAAM,WAAW,IAAI,MAAO,CAAW,CAAC,OAAO,KAAK;oBACjH,oGAAoG;oBACpG,6FAA6F,CAChG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACO,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAEhC,2BAA2B,CAAC,MAAc,EAAE,WAAmB,EAAE,IAAkB;QACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,4BAA4B,CAAC;QACnD,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,QAAQ,CAAC,qBAAqB,EAAE,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;YAC5D,IAAI,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBACtD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,iBAAkB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YACtG,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CACV,4DAA4D,MAAM,IAAI;gBACtE,YAAY,WAAW,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,MAAc,EAAE,WAAmB,EAAE,MAAqB;QAClF,IAAI,CAAC;YACH,MAAM,EAAE,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,oBAAoB,EAAE,CAAC;gBAC1C,eAAe,CAAC,oBAAoB,GAAG,IAAI,CAAC;gBAC5C,OAAO,CAAC,IAAI,CACV,qEAAqE,MAAM,IAAI;oBAC/E,YAAY,WAAW,MAAM,+BAA+B,CAAC,KAAK,CAAC,GAAG;oBACtE,mDAAmD,CACpD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACO,MAAM,CAAC,oBAAoB,GAAG,KAAK,CAAC;IAE5C;2GACuG;IACvG,yBAAyB;QACvB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,EAAE,CAAC;YAChE,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;8EAC0E;IAC1E,8BAA8B,CAAC,MAAc,EAAE,cAAsB;QACnE,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC5B,kFAAkF,CACnF,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,kBAAkB,CAChB,MAAc,EACd,IAAkB,EAClB,qBAAqC,EACrC,kBAAkC;QAElC,IAAI,qBAAqB,IAAI,IAAI,IAAI,qBAAqB,KAAK,EAAE,EAAE,CAAC;YAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;iBACrB,OAAO,CACN,6HAA6H,CAC9H;iBACA,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAkC,CAAC;YACvE,IAAI,QAAQ;gBAAE,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,mCAAmC;QACtF,CAAC;QACD,MAAM,WAAW,GACf,CAAC,CAAE,IAAI,CAAC,EAAE;aACP,OAAO,CAAC,6EAA6E,CAAC;aACtF,GAAG,CAAC,MAAM,CAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;QAClB,MAAM,cAAc,GAAG,kBAAkB,IAAI,UAAU,EAAE,CAAC;QAC1D,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,4IAA4I,CAC7I;aACA,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI,EAAE,qBAAqB,IAAI,IAAI,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,WAAW,CACrB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAsB,CAC5F,CAAC;IACJ,CAAC;IAED;2FACuF;IACvF,qBAAqB,CAAC,MAAc;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,2FAA2F,CAAC;aACpG,GAAG,CAAC,MAAM,CAAkC,CAAC;QAChD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED;;;+FAG2F;IAC3F,mCAAmC,CAAC,WAAmB;QACrD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;iBAChB,OAAO,CAAC,8EAA8E,CAAC;iBACvF,GAAG,CAAC,WAAW,CAAoC,CAAC;YACvD,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,OAAO,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,cAAc,IAAI,IAAI,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,CAAC,sEAAsE;QACrF,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,GAAsB;QACxC,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,iBAAiB,EAAE,GAAG,CAAC,kBAAkB;YACzC,cAAc,EAAE,GAAG,CAAC,eAAe;YACnC,IAAI,EAAE,GAAG,CAAC,IAAoB;YAC9B,qBAAqB,EAAE,GAAG,CAAC,yBAAyB;YACpD,MAAM,EAAE,GAAG,CAAC,OAAO;SACpB,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,SAAiB,EAAE,MAAc;QAC5C,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,6EAA6E,CAAC;aACtF,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,mBAAmB,CAAC,SAAiB,EAAE,MAA6D,EAAE,WAAoB;QACxH,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,+EAA+E,CAAC;iBACxF,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,qDAAqD,CAAC;iBAC9D,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,4EAA4E;IAC5E,6EAA6E;IAC7E,uEAAuE;IACvE,EAAE;IACF,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,mDAAmD;IACnD,EAAE;IACF,6EAA6E;IAC7E,+EAA+E;IAC/E,wEAAwE;IACxE,wEAAwE;IACxE,iBAAiB,CAAC,SAAiB,EAAE,IAAY,EAAE,KAAa,EAAE,UAAwD;QACxH,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACzE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B,qDAAqD,CACtD,CAAC,GAAG,CAAC,SAAS,CAAqD,CAAC;YACrE,MAAM,YAAY,GAAG,QAAQ,EAAE,iBAAiB,IAAI,IAAI,CAAC;YACzD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,YAAY,GAAG,sBAAsB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChE,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzD,IAAI,OAAO,GAAG,YAAY;oBAAE,OAAO,KAAK,CAAC,CAAC,0CAA0C;YACtF,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,CAAC;QAChC,uEAAuE;QACvE,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,sEAAsE;QACtE,IAAI,CAAC,EAAE;aACJ,OAAO,CACN,6GAA6G;YAC3G,6FAA6F,CAChG;aACA,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;iCAM6B;IAC7B,qBAAqB,CAAC,SAAiB,EAAE,MAAsD;QAC7F,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,IAAI,CAAC,EAAE;iBACJ,OAAO,CAAC,iHAAiH,CAAC;iBAC1H,GAAG,CAAC,SAAS,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,+DAA+D,CAAC;aACxE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED;;2EAEuE;IACvE,uBAAuB,CAAC,WAAmB;QAOzC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB;;;;qDAI+C,CAChD,CAAC,GAAG,CAAC,WAAW,CAMJ,CAAC;QACd,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,KAAK,EAAE,GAAG,CAAC,MAAM;YACjB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI;SACjD,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,SAAiB;QAChC,wEAAwE;QACxE,4EAA4E;QAC5E,wEAAwE;QACxE,kEAAkE;QAClE,IAAI,CAAC,EAAE;aACJ,OAAO,CAAC,kKAAkK,CAAC;aAC3K,GAAG,CAAC,SAAS,CAAC,CAAC;IACpB,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,cAAc,CAAC,SAAiB;QAC9B,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;IAED,YAAY,CAAC,MAAc;QACzB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;;+BAGuB,CACxB;aACA,GAAG,CAAC,KAAK,CAAiB,CAAC;QAE9B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED;;;iFAG6E;IAC7E,qBAAqB,CAAC,KAAa;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;KAO5B,CAAC,CAAC,GAAG,CAAC,KAAK,CAA8L,CAAC;QAE3M,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,MAAM,EAAE,CAAC,CAAC,OAAO;YACjB,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,GAAG,EAAE,CAAC,CAAC,GAAG;SACX,CAAC,CAAC,CAAC;IACN,CAAC;IAED,iBAAiB,CAAC,MAAc;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,0CAA0C,CAAC;aACnD,GAAG,CAAC,MAAM,CAA2B,CAAC;QAEzC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAED,aAAa,CAAC,MAAc,EAAE,MAAqB;QACjD,kEAAkE;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE;iBACrB,OAAO,CAAC,0CAA0C,CAAC;iBACnD,GAAG,CAAC,MAAM,CAA2B,CAAC;YAEzC,IAAI,QAAQ,EAAE,CAAC;gBACb,0DAA0D;gBAC1D,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN;;;;;;;;;8BASkB,CACnB;qBACA,GAAG,CACF,MAAM,CAAC,cAAc,IAAI,QAAQ,CAAC,eAAe,IAAI,MAAM,EAC3D,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,YAAY,EAC3C,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC,WAAW,EACzC,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,EACrC,MAAM,CAAC,mBAAmB,IAAI,QAAQ,CAAC,qBAAqB,EAC5D,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,cAAc,EAC/C,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,YAAY,EAC3C,MAAM,CACP,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;gBAClB,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN;gDACoC,CACrC;qBACA,GAAG,CACF,EAAE,EACF,MAAM,EACN,MAAM,CAAC,cAAc,IAAI,MAAM,EAC/B,MAAM,CAAC,WAAW,IAAI,IAAI,EAC1B,MAAM,CAAC,UAAU,IAAI,IAAI,EACzB,MAAM,CAAC,QAAQ,IAAI,IAAI,EACvB,MAAM,CAAC,mBAAmB,IAAI,IAAI,EAClC,MAAM,CAAC,aAAa,IAAI,IAAI,EAC5B,MAAM,CAAC,WAAW,IAAI,IAAI,CAC3B,CAAC;YACN,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,EAAE,CAAC;QAET,OAAO,IAAI,CAAC,YAAY,CACtB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAe,CACtF,CAAC;IACJ,CAAC;IAED,8BAA8B;IAEtB,YAAY,CAAC,GAAe;QAClC,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;YACnC,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,IAAI;YACrC,qEAAqE;YACrE,uEAAuE;YACvE,iEAAiE;YACjE,gBAAgB,EAAE,GAAG,CAAC,iBAAiB,IAAI,IAAI;YAC/C,kBAAkB,EAAE,GAAG,CAAC,oBAAoB,IAAI,IAAI;YACpD,qBAAqB,EAAE,GAAG,CAAC,wBAAwB,IAAI,IAAI;YAC3D,aAAa,EAAE,GAAG,CAAC,cAAc,IAAI,oBAAoB;YACzD,UAAU,EAAE,GAAG,CAAC,YAAY;YAC5B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;YAC3D,aAAa,EAAG,GAAG,CAAC,cAA2C,IAAI,SAAS;YAC5E,kBAAkB,EAAE,GAAG,CAAC,oBAAoB,IAAI,IAAI;SACrD,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,GAAe;QAClC,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,cAAc,EAAG,GAAG,CAAC,eAA6C,IAAI,MAAM;YAC5E,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,mBAAmB,EAAE,GAAG,CAAC,qBAAqB,IAAI,IAAI;YACtD,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;IACJ,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/session-source-rebuild-resolver.d.ts

@@ -0,0 +1,53 @@
+import type { ResolvedStartupFile } from "./runtime-adapter.js";
+import type { SessionSourceRebuildSpec } from "./types.js";
+/**
+ * Result of resolving a `session_source.mode: rebuild` artifact set into the
+ * `ResolvedStartupFile[]` shape that `adapter.deliverStartup` already
+ * accepts. Records gaps (paths the operator declared but that don't exist
+ * on disk at resolve time) without failing — the operator's other declared
+ * artifacts may still carry enough context. The launch only fails if NONE
+ * of the declared paths resolved.
+ */
+export interface RebuildArtifactsResult {
+    ok: true;
+    files: ResolvedStartupFile[];
+    /** Paths from `ref.value` that did not resolve to an existing file. */
+    gaps: string[];
+}
+export type RebuildArtifactsOutcome = RebuildArtifactsResult | {
+    ok: false;
+    error: string;
+    gaps: string[];
+};
+/**
+ * Test/host injection seam: lets unit tests assert path resolution without
+ * touching the real filesystem.
+ */
+export type ExistsFn = (path: string) => boolean;
+/**
+ * Resolve operator-declared rebuild artifacts into the orchestrator's
+ * existing `ResolvedStartupFile[]` shape, preserving the operator's
+ * trust-precedence ordering.
+ *
+ * Identity-honesty notes:
+ * - This function does NOT execute, parse, or evaluate artifact contents.
+ *   It just records that a path exists and hands the orchestrator the
+ *   metadata it needs to deliver the bytes via the standard `deliverStartup`
+ *   seam (which itself only reads + paste-injects via tmux for the
+ *   `send_text` hint).
+ * - The artifacts are tagged `appliesOn: ["fresh_start"]` because rebuild
+ *   IS a fresh launch from the runtime's perspective; the artifacts seed
+ *   it with operator context, but the runtime conversation itself is new.
+ *   `continuityOutcome: rebuilt` (set by the orchestrator) is the only
+ *   signal that distinguishes this from a vanilla fresh launch.
+ *
+ * @param spec - the rebuild spec from the member; `ref.value` is the
+ *               operator-declared list of artifact paths in trust-
+ *               precedence order (highest-trust first).
+ * @param opts.exists - filesystem existence check; defaults to `existsSync`.
+ *                      Tests pass a stub.
+ */
+export declare function resolveRebuildArtifacts(spec: SessionSourceRebuildSpec, opts?: {
+    exists?: ExistsFn;
+}): RebuildArtifactsOutcome;
+//# sourceMappingURL=session-source-rebuild-resolver.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/session-source-rebuild-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-source-rebuild-resolver.d.ts","sourceRoot":"","sources":["../../src/domain/session-source-rebuild-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,IAAI,CAAC;IACT,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,uEAAuE;IACvE,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,MAAM,uBAAuB,GAC/B,sBAAsB,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEjD;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,wBAAwB,EAC9B,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,QAAQ,CAAA;CAAO,GAC/B,uBAAuB,CAgCzB"}

package/node_modules/@openrig/daemon/dist/domain/session-source-rebuild-resolver.js

@@ -0,0 +1,59 @@
+import { existsSync } from "node:fs";
+import { basename, dirname } from "node:path";
+/**
+ * Resolve operator-declared rebuild artifacts into the orchestrator's
+ * existing `ResolvedStartupFile[]` shape, preserving the operator's
+ * trust-precedence ordering.
+ *
+ * Identity-honesty notes:
+ * - This function does NOT execute, parse, or evaluate artifact contents.
+ *   It just records that a path exists and hands the orchestrator the
+ *   metadata it needs to deliver the bytes via the standard `deliverStartup`
+ *   seam (which itself only reads + paste-injects via tmux for the
+ *   `send_text` hint).
+ * - The artifacts are tagged `appliesOn: ["fresh_start"]` because rebuild
+ *   IS a fresh launch from the runtime's perspective; the artifacts seed
+ *   it with operator context, but the runtime conversation itself is new.
+ *   `continuityOutcome: rebuilt` (set by the orchestrator) is the only
+ *   signal that distinguishes this from a vanilla fresh launch.
+ *
+ * @param spec - the rebuild spec from the member; `ref.value` is the
+ *               operator-declared list of artifact paths in trust-
+ *               precedence order (highest-trust first).
+ * @param opts.exists - filesystem existence check; defaults to `existsSync`.
+ *                      Tests pass a stub.
+ */
+export function resolveRebuildArtifacts(spec, opts = {}) {
+    const exists = opts.exists ?? existsSync;
+    const gaps = [];
+    const files = [];
+    for (const path of spec.ref.value) {
+        if (!exists(path)) {
+            gaps.push(path);
+            continue;
+        }
+        files.push({
+            path: basename(path),
+            absolutePath: path,
+            ownerRoot: dirname(path),
+            // `send_text` so the orchestrator's existing post-launch TUI delivery
+            // path picks these up after the harness is ready. Operator-curated
+            // context is meant to seed the running conversation, not to land as
+            // filesystem-projected guidance/skill content.
+            deliveryHint: "send_text",
+            required: true,
+            // `fresh_start` because rebuild IS a fresh-launch from the runtime's
+            // perspective; the artifacts are the operator-declared seed context.
+            appliesOn: ["fresh_start"],
+        });
+    }
+    if (files.length === 0) {
+        return {
+            ok: false,
+            error: `rebuild: none of the ${spec.ref.value.length} declared artifact path${spec.ref.value.length === 1 ? "" : "s"} resolved to an existing file. Verify the paths in session_source.ref.value (declared in trust-precedence order; highest-trust first).`,
+            gaps,
+        };
+    }
+    return { ok: true, files, gaps };
+}
+//# sourceMappingURL=session-source-rebuild-resolver.js.map

package/node_modules/@openrig/daemon/dist/domain/session-source-rebuild-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-source-rebuild-resolver.js","sourceRoot":"","sources":["../../src/domain/session-source-rebuild-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA6B9C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAA8B,EAC9B,OAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChB,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;YACpB,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC;YACxB,sEAAsE;YACtE,mEAAmE;YACnE,oEAAoE;YACpE,+CAA+C;YAC/C,YAAY,EAAE,WAAW;YACzB,QAAQ,EAAE,IAAI;YACd,qEAAqE;YACrE,qEAAqE;YACrE,SAAS,EAAE,CAAC,aAAa,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,wBAAwB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,0BAA0B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,wIAAwI;YAC5P,IAAI;SACL,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}