@openrig/cli 0.4.8 → 0.5.1

package/node_modules/@openrig/daemon/dist/domain/stream-store.js

@@ -0,0 +1,135 @@
+import { monotonicFactory } from "ulid";
+const ulid = monotonicFactory();
+/**
+ * L1 — Stream store. Append-only intake/audit root.
+ * Items are immutable after emit (only `archived_at` may be set).
+ */
+export class StreamStore {
+    db;
+    eventBus;
+    /** P21 §4: detected once — a curated-migration test DB (or a pre-067 daemon) may lack the
+     *  era-stamp column, so the writer degrades (omits it) instead of throwing. */
+    hasIdentityProvenanceColumn;
+    constructor(db, eventBus) {
+        this.db = db;
+        this.eventBus = eventBus;
+        this.hasIdentityProvenanceColumn = this.db.prepare("PRAGMA table_info(stream_items)").all().some((col) => col.name === "identity_provenance");
+    }
+    /**
+     * Idempotent emit: same `streamItemId` returns the existing row.
+     */
+    emit(input) {
+        const tsEmitted = new Date().toISOString();
+        const id = input.streamItemId ?? ulid();
+        const existing = this.getByIdRaw(id);
+        if (existing)
+            return this.rowToItem(existing);
+        const sortKey = ulid();
+        const interrupt = input.interrupt ? 1 : 0;
+        const tagsJson = input.hintTags ? JSON.stringify(input.hintTags) : null;
+        const persistTxn = this.db.transaction(() => {
+            if (this.hasIdentityProvenanceColumn) {
+                this.db
+                    .prepare(`INSERT INTO stream_items (
+              stream_item_id, ts_emitted, stream_sort_key, source_session, body,
+              format, hint_type, hint_urgency, hint_destination, hint_tags, interrupt, identity_provenance
+            ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+                    .run(id, tsEmitted, sortKey, input.sourceSession, input.body, input.format ?? "text", input.hintType ?? null, input.hintUrgency ?? null, input.hintDestination ?? null, tagsJson, interrupt, input.identityProvenance ?? null);
+            }
+            else {
+                this.db
+                    .prepare(`INSERT INTO stream_items (
+              stream_item_id, ts_emitted, stream_sort_key, source_session, body,
+              format, hint_type, hint_urgency, hint_destination, hint_tags, interrupt
+            ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+                    .run(id, tsEmitted, sortKey, input.sourceSession, input.body, input.format ?? "text", input.hintType ?? null, input.hintUrgency ?? null, input.hintDestination ?? null, tagsJson, interrupt);
+            }
+            return this.eventBus.persistWithinTransaction({
+                type: "stream.emitted",
+                streamItemId: id,
+                sourceSession: input.sourceSession,
+                hintDestination: input.hintDestination ?? null,
+                hintType: input.hintType ?? null,
+                hintUrgency: input.hintUrgency ?? null,
+                interrupt: Boolean(input.interrupt),
+            });
+        });
+        const persistedEvent = persistTxn();
+        this.eventBus.notifySubscribers(persistedEvent);
+        return this.rowToItem(this.getByIdRaw(id));
+    }
+    getById(streamItemId) {
+        const row = this.getByIdRaw(streamItemId);
+        return row ? this.rowToItem(row) : null;
+    }
+    list(opts) {
+        const limit = opts?.limit ?? 100;
+        const conditions = [];
+        const params = [];
+        if (!opts?.includeArchived) {
+            conditions.push("archived_at IS NULL");
+        }
+        if (opts?.afterSortKey) {
+            conditions.push("(ts_emitted, stream_sort_key) > (SELECT ts_emitted, stream_sort_key FROM stream_items WHERE stream_sort_key = ?)");
+            params.push(opts.afterSortKey);
+        }
+        if (opts?.sourceSession) {
+            conditions.push("source_session = ?");
+            params.push(opts.sourceSession);
+        }
+        if (opts?.hintDestination) {
+            conditions.push("hint_destination = ?");
+            params.push(opts.hintDestination);
+        }
+        if (opts?.hintTag) {
+            conditions.push("EXISTS (SELECT 1 FROM json_each(stream_items.hint_tags) WHERE json_each.value = ?)");
+            params.push(opts.hintTag);
+        }
+        if (opts?.since) {
+            conditions.push("ts_emitted >= ?");
+            params.push(opts.since);
+        }
+        if (opts?.until) {
+            conditions.push("ts_emitted <= ?");
+            params.push(opts.until);
+        }
+        const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+        params.push(limit);
+        const latest = opts?.direction === "latest";
+        const rows = this.db
+            .prepare(`SELECT * FROM stream_items ${where} ORDER BY ts_emitted ${latest ? "DESC" : "ASC"}, stream_sort_key ${latest ? "DESC" : "ASC"} LIMIT ?`)
+            .all(...params);
+        return (latest ? rows.reverse() : rows).map((r) => this.rowToItem(r));
+    }
+    /**
+     * Soft-archive — sets `archived_at`. Items remain in the table for audit.
+     */
+    archive(streamItemId) {
+        const result = this.db
+            .prepare("UPDATE stream_items SET archived_at = datetime('now') WHERE stream_item_id = ? AND archived_at IS NULL")
+            .run(streamItemId);
+        return result.changes > 0;
+    }
+    getByIdRaw(streamItemId) {
+        return this.db
+            .prepare("SELECT * FROM stream_items WHERE stream_item_id = ?")
+            .get(streamItemId);
+    }
+    rowToItem(row) {
+        return {
+            streamItemId: row.stream_item_id,
+            tsEmitted: row.ts_emitted,
+            streamSortKey: row.stream_sort_key,
+            sourceSession: row.source_session,
+            body: row.body,
+            format: row.format,
+            hintType: row.hint_type,
+            hintUrgency: row.hint_urgency,
+            hintDestination: row.hint_destination,
+            hintTags: row.hint_tags ? JSON.parse(row.hint_tags) : null,
+            interrupt: row.interrupt === 1,
+            archivedAt: row.archived_at,
+        };
+    }
+}
+//# sourceMappingURL=stream-store.js.map

package/node_modules/@openrig/daemon/dist/domain/stream-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-store.js","sourceRoot":"","sources":["../../src/domain/stream-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,MAAM,CAAC;AAGxC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;AA2DhC;;;GAGG;AACH,MAAM,OAAO,WAAW;IACb,EAAE,CAAoB;IACd,QAAQ,CAAW;IACpC;mFAC+E;IAC9D,2BAA2B,CAAU;IAEtD,YAAY,EAAqB,EAAE,QAAkB;QACnD,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,2BAA2B,GAC9B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,GAAG,EACvD,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,KAAsB;QACzB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;QAExC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE9C,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAExE,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAC1C,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;gBACrC,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN;;;0DAG8C,CAC/C;qBACA,GAAG,CACF,EAAE,EACF,SAAS,EACT,OAAO,EACP,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,IAAI,MAAM,EACtB,KAAK,CAAC,QAAQ,IAAI,IAAI,EACtB,KAAK,CAAC,WAAW,IAAI,IAAI,EACzB,KAAK,CAAC,eAAe,IAAI,IAAI,EAC7B,QAAQ,EACR,SAAS,EACT,KAAK,CAAC,kBAAkB,IAAI,IAAI,CACjC,CAAC;YACN,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,EAAE;qBACJ,OAAO,CACN;;;uDAG2C,CAC5C;qBACA,GAAG,CACF,EAAE,EACF,SAAS,EACT,OAAO,EACP,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,MAAM,IAAI,MAAM,EACtB,KAAK,CAAC,QAAQ,IAAI,IAAI,EACtB,KAAK,CAAC,WAAW,IAAI,IAAI,EACzB,KAAK,CAAC,eAAe,IAAI,IAAI,EAC7B,QAAQ,EACR,SAAS,CACV,CAAC;YACN,CAAC;YAED,OAAO,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBAC5C,IAAI,EAAE,gBAAgB;gBACtB,YAAY,EAAE,EAAE;gBAChB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI;gBAC9C,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBACtC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;aACpC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;QAEhD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAE,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,CAAC,YAAoB;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC1C,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC,IAAwB;QAC3B,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC;QACjC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAc,EAAE,CAAC;QAE7B,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,kHAAkH,CAAC,CAAC;YACpI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,EAAE,aAAa,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,EAAE,eAAe,EAAE,CAAC;YAC1B,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,oFAAoF,CAAC,CAAC;YACtG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEnB,MAAM,MAAM,GAAG,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN,8BAA8B,KAAK,wBAAwB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,qBAAqB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU,CACzI;aACA,GAAG,CAAC,GAAG,MAAM,CAAoB,CAAC;QAErC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,YAAoB;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE;aACnB,OAAO,CACN,wGAAwG,CACzG;aACA,GAAG,CAAC,YAAY,CAAC,CAAC;QACrB,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;IAC5B,CAAC;IAEO,UAAU,CAAC,YAAoB;QACrC,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CAAC,qDAAqD,CAAC;aAC9D,GAAG,CAAC,YAAY,CAA8B,CAAC;IACpD,CAAC;IAEO,SAAS,CAAC,GAAkB;QAClC,OAAO;YACL,YAAY,EAAE,GAAG,CAAC,cAAc;YAChC,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,aAAa,EAAE,GAAG,CAAC,eAAe;YAClC,aAAa,EAAE,GAAG,CAAC,cAAc;YACjC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,eAAe,EAAE,GAAG,CAAC,gBAAgB;YACrC,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAc,CAAC,CAAC,CAAC,IAAI;YACxE,SAAS,EAAE,GAAG,CAAC,SAAS,KAAK,CAAC;YAC9B,UAAU,EAAE,GAAG,CAAC,WAAW;SAC5B,CAAC;IACJ,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/successor-session-launcher.d.ts

@@ -0,0 +1,156 @@
+import type { TmuxAdapter } from "../adapters/tmux.js";
+import type { DiscoveryRepository } from "./discovery-repository.js";
+import type { RuntimeAdapter } from "./runtime-adapter.js";
+import type { AppliedLaunchObservation } from "./permission-drift.js";
+import type { TmuxOptionDefaultsApplier } from "./tmux-option-defaults.js";
+/**
+ * OPR.0.4.3.04 — the explicit successor-creation seam for the seat-handover
+ * full-cycle composer (IMPL-SPEC §2.1b; resolves the rev1-dual BLOCKING B1).
+ *
+ * It creates an UNMANAGED, discoverable tmux successor for a non-discovered
+ * handover source (fresh), routes it through REAL runtime startup so it becomes
+ * a LIVE, READY agent (not a bare shell), records it as an ACTIVE discovery
+ * candidate, and returns that candidate + the captured launch resume token so
+ * the composer can route it through the EXISTING discovered->commit rebind path.
+ * It deliberately does NOT `registerClaimedSession`/`upsertBinding` — the
+ * session stays unmanaged until the handover `commit` claims it, so the
+ * departing seat's binding is never touched before successor readiness.
+ *
+ * B1 (rev1-dual fix): the successor is launched through the runtime adapter's
+ * `launchHarness` + readiness poll — the SAME startup/readiness primitives
+ * `StartupOrchestrator` drives — WITHOUT the ahead-of-commit managed-session
+ * registration those `StartupOrchestrator.startNode` bookkeeping steps would
+ * require (updateStartupStatus / node_startup_context / updateResumeToken by
+ * sessionId all need a registered session row). Driving the adapter primitives
+ * directly is how we make the successor a live agent while keeping it unmanaged
+ * until commit. Any launch/readiness failure UNWINDS the created session and
+ * leaves the original binding intact (commit never runs).
+ *
+ * Why not `NodeLauncher.launchNode`: it refuses a bound node and, on success,
+ * registers a managed session + binding in the same transaction — which would
+ * trip `successor_already_managed` in the commit path. This seam creates a
+ * DISTINCT unmanaged session instead.
+ */
+export interface SuccessorNode {
+    id: string;
+    runtime: string | null;
+    cwd: string | null;
+    /** OPR.0.4.8.3 Seam B: the departing seat's PERSISTED resolved launch posture —
+     *  the successor is a CONTINUITY edge of the same seat, so its policy posture
+     *  carries (populated by the caller from node provenance; absent = env decision). */
+    launchPosture?: "floor" | "full_bypass";
+    /** 0.5.2-07 model fidelity: the seat's SPEC-pinned model (nodes.model). The successor is a continuity
+     *  edge of the same seat, so its launch must READ THE SPEC — a launch path that drops it makes the
+     *  running topology drift from the founder-designed one. Populated by the caller from node provenance;
+     *  absent → the adapter emits no model flag (unchanged for legacy/unpinned seats). */
+    model?: string | null;
+    /** 0.5.2-07 A4-profile: the seat's SPEC-pinned codex config profile (nodes.codex_config_profile).
+     *  Same continuity rationale as model — populated by the caller from node provenance; absent → the
+     *  adapter emits no -p flag (unchanged for legacy/unpinned seats). */
+    codexConfigProfile?: string | null;
+}
+export type SuccessorLaunchResult = {
+    ok: true;
+    discoveredId: string;
+    tmuxSession: string;
+    tmuxPane: string;
+    resumeToken?: string;
+    resumeType?: string;
+    appliedLaunch?: AppliedLaunchObservation;
+    /**
+     * OPR.0.4.6.02 S1 — non-fatal tmux option-default warnings from the
+     * fresh successor's launch (mouse/status/clipboard). Present only when
+     * an option-set degraded; omitted (undefined) on the clean path so the
+     * shape stays byte-compatible with pre-02 successors.
+     */
+    warnings?: string[];
+} | {
+    ok: false;
+    code: string;
+    step: "create_successor" | "resolve_pane" | "start_agent";
+    message: string;
+    /** True once the predecessor process has been replaced in its pane. */
+    replacementStarted: boolean;
+};
+export declare class SuccessorSessionLauncher {
+    private tmuxAdapter;
+    private discoveryRepo;
+    private sessionEnv;
+    private newId;
+    private runtimeAdapters;
+    private readinessTimeoutMs;
+    private sleep;
+    private tmuxOptionDefaults;
+    private exitPollMs;
+    private exitTimeoutMs;
+    constructor(tmuxAdapter: TmuxAdapter, discoveryRepo: DiscoveryRepository, opts?: {
+        sessionEnv?: Record<string, string | undefined>;
+        newId?: () => string;
+        /** Runtime adapters keyed by runtime, used to launch + ready-probe the
+         *  successor agent. Absent → a fresh successor cannot be launched. */
+        runtimeAdapters?: Record<string, RuntimeAdapter>;
+        /** Readiness timeout in ms (default 30000, mirrors StartupOrchestrator). */
+        readinessTimeoutMs?: number;
+        /** Injectable sleep (tests). */
+        sleep?: (ms: number) => Promise<void>;
+        /**
+         * OPR.0.4.6.02 S1 — the SHARED tmux option-defaults applier. A FRESH
+         * successor is a new operator/agent seat (same launch-only class as
+         * NodeLauncher), so it gets the same mouse/status/clipboard defaults on
+         * its just-created session. Omitted → option application is skipped.
+         */
+        tmuxOptionDefaults?: TmuxOptionDefaultsApplier;
+        /** Cutover retiree-exit poll interval + total bounded timeout (per graceful/forced phase). */
+        exitPollMs?: number;
+        exitTimeoutMs?: number;
+    });
+    /**
+     * Create the unmanaged successor tmux session, launch it into a LIVE agent,
+     * and record it as an active discovery candidate. The candidate satisfies the
+     * discovered->commit guards: active (upsert sets status='active'), distinct
+     * name, matching runtime hint, unmanaged (no binding/session claims it),
+     * tmux-present (just created). The returned resume token (if any) is the
+     * launch-scraped token the composer persists at commit (B2 for fresh).
+     */
+    createSuccessor(input: {
+        node: SuccessorNode;
+        departingSessionName: string;
+        occupantGeneration?: string | null;
+        /** Synchronous physical-cutover observer; runs after the retiree is proven gone and before respawn. */
+        onReplacementStarted?: () => void;
+    }): Promise<SuccessorLaunchResult>;
+    /**
+     * B1 — launch the successor into a live, ready agent via the runtime adapter's
+     * `launchHarness` + readiness probe (the same primitives StartupOrchestrator
+     * drives), capturing the launch resume token. No session/binding is
+     * registered — the successor stays unmanaged until commit. The token is NEVER
+     * logged or placed in a returned message.
+     */
+    private startAgent;
+    /**
+     * Wait for harness readiness with exponential backoff (1s→2s→…→16s cap,
+     * 30s default timeout) — mirrors StartupOrchestrator.waitForReady.
+     */
+    private waitForReady;
+    /**
+     * Cutover: terminate the retiree occupant in its pane so the successor can respawn into it WHILE
+     * PRESERVING scrollback. `setRemainOnExit(true)` FIRST (so the pane survives dead, not destroyed, on
+     * exit); graceful SIGTERM ("exits in place" — a clean exit also protects the provider session state the
+     * successor's resume depends on); a bounded-timeout SIGKILL is the pinned DEGRADED fallback. Returns
+     * which path terminated the retiree, or a failure if it never became dead (then commit never runs).
+     * (Graceful signal = SIGTERM as the desk-provisional default under build-ahead; dev-planner ratifies
+     * the exact graceful mechanism — SIGTERM vs a runtime-specific quit — at their resume.)
+     */
+    private terminateRetiree;
+    /** Poll `isPaneDead` up to the bounded exit timeout (count-bounded so injected no-op sleeps stay fast). */
+    private waitPaneDead;
+    /**
+     * Composer unwind for a successor that launched but failed downstream (context delivery or continuity
+     * verify). CUTOVER INVARIANT: the successor occupies the retiree's PRESERVED pane, so cleanup NEVER
+     * kills the session — that would destroy the seat's recoverable state. It only marks the discovery
+     * candidate vanished; the re-wakeable shell stays in the pane and the seat is recoverable from its
+     * provider session file. (`tmuxSession` is retained for signature stability + call-site logging.)
+     */
+    cleanup(_tmuxSession: string, discoveredId: string | null): Promise<void>;
+}
+//# sourceMappingURL=successor-session-launcher.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/successor-session-launcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"successor-session-launcher.d.ts","sourceRoot":"","sources":["../../src/domain/successor-session-launcher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,KAAK,EAAE,cAAc,EAAgC,MAAM,sBAAsB,CAAC;AAEzF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB;;yFAEqF;IACrF,aAAa,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IACxC;;;0FAGsF;IACtF,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;0EAEsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,MAAM,qBAAqB,GAC7B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,kBAAkB,GAAG,cAAc,GAAG,aAAa,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEN,qBAAa,wBAAwB;IACnC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,eAAe,CAAiC;IACxD,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,kBAAkB,CAAmC;IAC7D,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAS;gBAG5B,WAAW,EAAE,WAAW,EACxB,aAAa,EAAE,mBAAmB,EAClC,IAAI,GAAE;QACJ,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QAChD,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;QACrB;8EACsE;QACtE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACjD,4EAA4E;QAC5E,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,gCAAgC;QAChC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC;;;;;WAKG;QACH,kBAAkB,CAAC,EAAE,yBAAyB,CAAC;QAC/C,8FAA8F;QAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;KACnB;IAcR;;;;;;;OAOG;IACG,eAAe,CAAC,KAAK,EAAE;QAC3B,IAAI,EAAE,aAAa,CAAC;QACpB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,uGAAuG;QACvG,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAC;KACnC,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAsGlC;;;;;;OAMG;YACW,UAAU;IAyFxB;;;OAGG;YACW,YAAY;IAsB1B;;;;;;;;OAQG;YACW,gBAAgB;IAiB9B,2GAA2G;YAC7F,YAAY;IAS1B;;;;;;OAMG;IACG,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAGhF"}

package/node_modules/@openrig/daemon/dist/domain/successor-session-launcher.js

@@ -0,0 +1,299 @@
+import { ulid } from "ulid";
+import { isAttentionRequiredReadinessCode } from "./runtime-adapter.js";
+export class SuccessorSessionLauncher {
+    tmuxAdapter;
+    discoveryRepo;
+    sessionEnv;
+    newId;
+    runtimeAdapters;
+    readinessTimeoutMs;
+    sleep;
+    tmuxOptionDefaults;
+    exitPollMs;
+    exitTimeoutMs;
+    constructor(tmuxAdapter, discoveryRepo, opts = {}) {
+        this.tmuxAdapter = tmuxAdapter;
+        this.discoveryRepo = discoveryRepo;
+        this.sessionEnv = opts.sessionEnv ?? {};
+        this.newId = opts.newId ?? ulid;
+        this.runtimeAdapters = opts.runtimeAdapters ?? {};
+        this.readinessTimeoutMs = opts.readinessTimeoutMs ?? 30_000;
+        this.sleep = opts.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+        this.tmuxOptionDefaults = opts.tmuxOptionDefaults ?? null;
+        this.exitPollMs = opts.exitPollMs ?? 100;
+        this.exitTimeoutMs = opts.exitTimeoutMs ?? 3_000;
+    }
+    /**
+     * Create the unmanaged successor tmux session, launch it into a LIVE agent,
+     * and record it as an active discovery candidate. The candidate satisfies the
+     * discovered->commit guards: active (upsert sets status='active'), distinct
+     * name, matching runtime hint, unmanaged (no binding/session claims it),
+     * tmux-present (just created). The returned resume token (if any) is the
+     * launch-scraped token the composer persists at commit (B2 for fresh).
+     */
+    async createSuccessor(input) {
+        // CUTOVER MODEL (plan 411c43de): a SEAT = one durable tmux session; the successor takes over the
+        // retiree's EXACT pane via respawn-pane, so the canonical session name is PRESERVED (no -h shuffle)
+        // and native scrollback survives — predecessor history stays above the successor boot (the money
+        // proof). The retiree exits in place; its provider session file is the durable wake target, so the
+        // new unwind invariant is that a failed successor NEVER destroys that recoverable state.
+        const departingSession = input.departingSessionName;
+        // OpenRig identity env mirrors NodeLauncher.launchNode's pattern so the successor self-identifies +
+        // reports activity like a launched seat. OPENRIG_SESSION_NAME is the PRESERVED canonical name.
+        const env = compactEnv({
+            OPENRIG_NODE_ID: input.node.id,
+            OPENRIG_SESSION_NAME: departingSession,
+            OPENRIG_RUNTIME: input.node.runtime ?? undefined,
+            ...this.sessionEnv,
+            OPENRIG_OCCUPANT_GENERATION: input.occupantGeneration ?? undefined,
+        });
+        const cwd = input.node.cwd ?? undefined;
+        // 1. Resolve the DEPARTING session's active pane — the retiree's pane we take over. A probe throw or
+        //    an empty result is a structured resolve_pane failure BEFORE any respawn, so the seat is wholly
+        //    untouched (still the live retiree; nothing to recover).
+        let pane;
+        try {
+            const panes = await this.tmuxAdapter.listPanes(departingSession);
+            pane = panes.find((p) => p.active) ?? panes[0];
+        }
+        catch (err) {
+            return {
+                ok: false,
+                code: "pane_probe_failed",
+                step: "resolve_pane",
+                replacementStarted: false,
+                message: `Could not probe tmux panes for departing session "${departingSession}": ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        if (!pane) {
+            return {
+                ok: false,
+                code: "pane_unresolved",
+                step: "resolve_pane",
+                replacementStarted: false,
+                message: `Could not resolve a tmux pane for departing session "${departingSession}".`,
+            };
+        }
+        // 2. Terminate the retiree IN PLACE, then respawn the now-dead pane WITHOUT -k so native scrollback
+        //    survives (respawn-pane -k CLEARS the pane history — verified on tmux 3.6a; that would defeat the
+        //    money-proof). The swap: set remain-on-exit so the pane survives the exit → graceful SIGTERM
+        //    ("exits in place"; also protects the provider session state the successor's resume depends on) →
+        //    bounded-timeout SIGKILL fallback (pinned degraded path) → respawn-pane (no -k) on the dead pane.
+        const terminated = await this.terminateRetiree(pane.id);
+        if (!terminated.ok) {
+            return { ok: false, code: "retiree_not_terminated", step: "create_successor", message: terminated.message, replacementStarted: false };
+        }
+        input.onReplacementStarted?.();
+        const respawned = await this.tmuxAdapter.respawnPane(pane.id, undefined, { cwd, env });
+        if (!respawned.ok) {
+            return {
+                ok: false,
+                code: respawned.code ?? "respawn_failed",
+                step: "create_successor",
+                replacementStarted: true,
+                message: `Could not respawn the successor into pane "${pane.id}" of "${departingSession}": ${respawned.message ?? "respawn-pane failed"}`,
+            };
+        }
+        // Ghost-stage (e) re-key: the retiring occupant's seat-name-keyed stores are invalidated so the
+        // successor never inherits a ghost. That call is made ATOMICALLY at SeatHandoverService.commit()
+        // (inside the rebind tx, where the retiring + successor names are in scope), per the ghost-stage
+        // contract — NOT here at the swap, so it commits together with the rebind. See occupant-invalidator.ts.
+        // 3. Route the successor through REAL runtime startup (launchHarness send-keys + readiness) so it
+        //    becomes a LIVE, READY agent in the reused pane BEFORE it can be committed. UNWIND INVARIANT:
+        //    on ANY launch/readiness failure we do NOT killSession the preserved seat — that would destroy
+        //    the retiree's recoverable state. We return the structured failure and leave the re-wakeable
+        //    shell in the pane; commit never runs, so the binding is not repointed.
+        const started = await this.startAgent(input.node, departingSession, pane.id, cwd);
+        if (!started.ok) {
+            return { ok: false, code: started.code, step: "start_agent", message: started.message, replacementStarted: true };
+        }
+        const discovered = this.discoveryRepo.upsertDiscoveredSession({
+            tmuxSession: departingSession,
+            tmuxPane: pane.id,
+            // The hint equals the node's own runtime, so the commit-path runtime check always matches; null
+            // runtime records as "unknown" (which the check skips).
+            runtimeHint: (input.node.runtime ?? "unknown"),
+            confidence: "high",
+            cwd: input.node.cwd ?? undefined,
+        });
+        return {
+            ok: true,
+            discoveredId: discovered.id,
+            tmuxSession: departingSession,
+            tmuxPane: pane.id,
+            resumeToken: started.resumeToken,
+            resumeType: started.resumeType,
+            appliedLaunch: started.appliedLaunch,
+        };
+    }
+    /**
+     * B1 — launch the successor into a live, ready agent via the runtime adapter's
+     * `launchHarness` + readiness probe (the same primitives StartupOrchestrator
+     * drives), capturing the launch resume token. No session/binding is
+     * registered — the successor stays unmanaged until commit. The token is NEVER
+     * logged or placed in a returned message.
+     */
+    async startAgent(node, tmuxSession, tmuxPane, cwd) {
+        const adapter = node.runtime ? this.runtimeAdapters[node.runtime] : undefined;
+        if (!adapter) {
+            return {
+                ok: false,
+                code: "successor_runtime_unsupported",
+                message: `No runtime adapter for "${node.runtime ?? "unknown"}"; a live successor cannot be launched for this seat.`,
+            };
+        }
+        // Transient binding for the adapter launch/readiness probe — the successor
+        // is unmanaged, so there is no persisted binding row (id/updatedAt are inert
+        // for the adapter; it reads tmuxSession/tmuxPane/cwd/model). 0.5.2-07 (model
+        // fidelity): the SPEC-pinned model IS carried now — a successor is a continuity
+        // edge of the same seat, so its launch must read the seat's spec, else the
+        // running topology silently drifts from the founder-designed one at every
+        // handover. (config profile is still a tracked follow-on.)
+        const binding = {
+            id: "",
+            nodeId: node.id,
+            attachmentType: "tmux",
+            tmuxSession,
+            tmuxWindow: null,
+            tmuxPane,
+            cmuxWorkspace: null,
+            cmuxSurface: null,
+            updatedAt: "",
+            cwd: cwd ?? "",
+            // Seam B: continuity — the successor launches at the departing seat's posture.
+            ...(node.launchPosture ? { launchPosture: node.launchPosture } : {}),
+            // 0.5.2-07: the successor reads the seat's SPEC-pinned model (adapter emits -m/--model).
+            model: node.model ?? undefined,
+            // 0.5.2-07 A4-profile: the successor reads the seat's SPEC-pinned codex config profile (adapter emits -p).
+            codexConfigProfile: node.codexConfigProfile ?? undefined,
+        };
+        let launch;
+        try {
+            launch = await adapter.launchHarness(binding, { name: tmuxSession });
+        }
+        catch (err) {
+            return { ok: false, code: "successor_launch_failed", message: `Successor harness launch threw: ${err instanceof Error ? err.message : String(err)}` };
+        }
+        if (!launch.ok) {
+            return { ok: false, code: "successor_launch_failed", message: `Successor harness launch failed: ${launch.error}` };
+        }
+        // Capture the launch-scraped resume token (never logged). Persisted by the
+        // composer at commit with provenance "scrape" (B2, launched modes).
+        let resumeToken;
+        let resumeType;
+        const trimmed = launch.resumeToken?.trim();
+        if (trimmed) {
+            resumeToken = trimmed;
+            resumeType = launch.resumeType;
+        }
+        // OPR.0.4.3.04 rev2 code-review fix — checkReady/waitForReady can THROW after
+        // createSession already succeeded (adapter/socket/permission errors rethrow).
+        // A thrown exception must NOT reject createSuccessor before its kill/unwind
+        // runs (that would LEAK the unmanaged successor + surface an unstructured 500).
+        // Catch it here and return a STRUCTURED ok:false so the caller kills the
+        // just-created session (killBestEffort) and fails loudly at step=start_agent —
+        // exactly like a returned readiness failure.
+        let readiness;
+        try {
+            readiness = await this.waitForReady(adapter, binding);
+        }
+        catch (err) {
+            return {
+                ok: false,
+                code: "successor_readiness_failed",
+                message: `Successor readiness probe threw: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        if (!readiness.ready) {
+            return {
+                ok: false,
+                code: isAttentionRequiredReadinessCode(readiness.code) ? "successor_attention_required" : "successor_not_ready",
+                message: `Successor did not become a ready agent: ${readiness.reason ?? "readiness timeout"}`,
+            };
+        }
+        return { ok: true, resumeToken, resumeType, appliedLaunch: launch.appliedLaunch };
+    }
+    /**
+     * Wait for harness readiness with exponential backoff (1s→2s→…→16s cap,
+     * 30s default timeout) — mirrors StartupOrchestrator.waitForReady.
+     */
+    async waitForReady(adapter, binding) {
+        const startTime = Date.now();
+        let delay = 1000;
+        const maxDelay = 16_000;
+        while (true) {
+            const result = await adapter.checkReady(binding);
+            if (result.ready)
+                return result;
+            if (isAttentionRequiredReadinessCode(result.code))
+                return result;
+            const elapsed = Date.now() - startTime;
+            if (elapsed + delay > this.readinessTimeoutMs) {
+                const finalResult = await adapter.checkReady(binding);
+                if (finalResult.ready)
+                    return finalResult;
+                return { ready: false, reason: result.reason ?? "readiness timeout" };
+            }
+            await this.sleep(delay);
+            delay = Math.min(delay * 2, maxDelay);
+        }
+    }
+    /**
+     * Cutover: terminate the retiree occupant in its pane so the successor can respawn into it WHILE
+     * PRESERVING scrollback. `setRemainOnExit(true)` FIRST (so the pane survives dead, not destroyed, on
+     * exit); graceful SIGTERM ("exits in place" — a clean exit also protects the provider session state the
+     * successor's resume depends on); a bounded-timeout SIGKILL is the pinned DEGRADED fallback. Returns
+     * which path terminated the retiree, or a failure if it never became dead (then commit never runs).
+     * (Graceful signal = SIGTERM as the desk-provisional default under build-ahead; dev-planner ratifies
+     * the exact graceful mechanism — SIGTERM vs a runtime-specific quit — at their resume.)
+     */
+    async terminateRetiree(paneId) {
+        const failures = [];
+        const remain = await this.tmuxAdapter.setRemainOnExit(paneId, true);
+        if (!remain.ok)
+            failures.push(`remain-on-exit: ${remain.message}`);
+        const term = await this.tmuxAdapter.signalPaneProcess(paneId, "TERM");
+        if (!term.ok)
+            failures.push(`TERM: ${term.message}`);
+        if (await this.waitPaneDead(paneId))
+            return { ok: true, path: "graceful" };
+        // Graceful window elapsed — force-kill (the pinned degraded path).
+        const kill = await this.tmuxAdapter.signalPaneProcess(paneId, "KILL");
+        if (!kill.ok)
+            failures.push(`KILL: ${kill.message}`);
+        if (await this.waitPaneDead(paneId))
+            return { ok: true, path: "forced" };
+        const detail = failures.length > 0 ? ` Tmux failures: ${failures.join("; ")}.` : "";
+        return { ok: false, message: `Retiree in pane "${paneId}" did not exit after graceful TERM + forced KILL.${detail}` };
+    }
+    /** Poll `isPaneDead` up to the bounded exit timeout (count-bounded so injected no-op sleeps stay fast). */
+    async waitPaneDead(paneId) {
+        const maxPolls = Math.max(1, Math.ceil(this.exitTimeoutMs / this.exitPollMs));
+        for (let i = 0; i < maxPolls; i++) {
+            if (await this.tmuxAdapter.isPaneDead(paneId))
+                return true;
+            await this.sleep(this.exitPollMs);
+        }
+        return this.tmuxAdapter.isPaneDead(paneId);
+    }
+    /**
+     * Composer unwind for a successor that launched but failed downstream (context delivery or continuity
+     * verify). CUTOVER INVARIANT: the successor occupies the retiree's PRESERVED pane, so cleanup NEVER
+     * kills the session — that would destroy the seat's recoverable state. It only marks the discovery
+     * candidate vanished; the re-wakeable shell stays in the pane and the seat is recoverable from its
+     * provider session file. (`tmuxSession` is retained for signature stability + call-site logging.)
+     */
+    async cleanup(_tmuxSession, discoveredId) {
+        if (discoveredId)
+            this.discoveryRepo.markVanished([discoveredId]);
+    }
+}
+function compactEnv(input) {
+    const result = {};
+    for (const [key, value] of Object.entries(input)) {
+        if (typeof value === "string" && value.length > 0)
+            result[key] = value;
+    }
+    return result;
+}
+//# sourceMappingURL=successor-session-launcher.js.map

package/node_modules/@openrig/daemon/dist/domain/successor-session-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"successor-session-launcher.js","sourceRoot":"","sources":["../../src/domain/successor-session-launcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AA6ExE,MAAM,OAAO,wBAAwB;IAC3B,WAAW,CAAc;IACzB,aAAa,CAAsB;IACnC,UAAU,CAAqC;IAC/C,KAAK,CAAe;IACpB,eAAe,CAAiC;IAChD,kBAAkB,CAAS;IAC3B,KAAK,CAAgC;IACrC,kBAAkB,CAAmC;IACrD,UAAU,CAAS;IACnB,aAAa,CAAS;IAE9B,YACE,WAAwB,EACxB,aAAkC,EAClC,OAoBI,EAAE;QAEN,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;QAChC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC;QAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;IACnD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CAAC,KAMrB;QACC,iGAAiG;QACjG,oGAAoG;QACpG,iGAAiG;QACjG,mGAAmG;QACnG,yFAAyF;QACzF,MAAM,gBAAgB,GAAG,KAAK,CAAC,oBAAoB,CAAC;QAEpD,oGAAoG;QACpG,+FAA+F;QAC/F,MAAM,GAAG,GAAG,UAAU,CAAC;YACrB,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;YAC9B,oBAAoB,EAAE,gBAAgB;YACtC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS;YAChD,GAAG,IAAI,CAAC,UAAU;YAClB,2BAA2B,EAAE,KAAK,CAAC,kBAAkB,IAAI,SAAS;SACnE,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;QAExC,qGAAqG;QACrG,oGAAoG;QACpG,6DAA6D;QAC7D,IAAI,IAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACjE,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,cAAc;gBACpB,kBAAkB,EAAE,KAAK;gBACzB,OAAO,EAAE,qDAAqD,gBAAgB,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACvI,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,cAAc;gBACpB,kBAAkB,EAAE,KAAK;gBACzB,OAAO,EAAE,wDAAwD,gBAAgB,IAAI;aACtF,CAAC;QACJ,CAAC;QAED,oGAAoG;QACpG,sGAAsG;QACtG,iGAAiG;QACjG,sGAAsG;QACtG,sGAAsG;QACtG,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;QACzI,CAAC;QACD,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAG,SAA+B,CAAC,IAAI,IAAI,gBAAgB;gBAC/D,IAAI,EAAE,kBAAkB;gBACxB,kBAAkB,EAAE,IAAI;gBACxB,OAAO,EAAE,8CAA8C,IAAI,CAAC,EAAE,SAAS,gBAAgB,MAAO,SAAkC,CAAC,OAAO,IAAI,qBAAqB,EAAE;aACpK,CAAC;QACJ,CAAC;QAED,gGAAgG;QAChG,iGAAiG;QACjG,iGAAiG;QACjG,wGAAwG;QAExG,kGAAkG;QAClG,kGAAkG;QAClG,mGAAmG;QACnG,iGAAiG;QACjG,4EAA4E;QAC5E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;QACpH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC;YAC5D,WAAW,EAAE,gBAAgB;YAC7B,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,gGAAgG;YAChG,wDAAwD;YACxD,WAAW,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAgB;YAC7D,UAAU,EAAE,MAAM;YAClB,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS;SACjC,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,WAAW,EAAE,gBAAgB;YAC7B,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,UAAU,CACtB,IAAmB,EACnB,WAAmB,EACnB,QAAgB,EAChB,GAAuB;QAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,+BAA+B;gBACrC,OAAO,EAAE,2BAA2B,IAAI,CAAC,OAAO,IAAI,SAAS,uDAAuD;aACrH,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,6EAA6E;QAC7E,6EAA6E;QAC7E,gFAAgF;QAChF,2EAA2E;QAC3E,0EAA0E;QAC1E,2DAA2D;QAC3D,MAAM,OAAO,GAAgB;YAC3B,EAAE,EAAE,EAAE;YACN,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,cAAc,EAAE,MAAM;YACtB,WAAW;YACX,UAAU,EAAE,IAAI;YAChB,QAAQ;YACR,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,EAAE;YACb,GAAG,EAAE,GAAG,IAAI,EAAE;YACd,+EAA+E;YAC/E,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,yFAAyF;YACzF,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;YAC9B,2GAA2G;YAC3G,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,SAAS;SACzD,CAAC;QAEF,IAAI,MAA4D,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACxJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,oCAAoC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACrH,CAAC;QAED,2EAA2E;QAC3E,oEAAoE;QACpE,IAAI,WAA+B,CAAC;QACpC,IAAI,UAA8B,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAC3C,IAAI,OAAO,EAAE,CAAC;YACZ,WAAW,GAAG,OAAO,CAAC;YACtB,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACjC,CAAC;QAED,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,gFAAgF;QAChF,yEAAyE;QACzE,+EAA+E;QAC/E,6CAA6C;QAC7C,IAAI,SAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,4BAA4B;gBAClC,OAAO,EAAE,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAChG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gCAAgC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,qBAAqB;gBAC/G,OAAO,EAAE,2CAA2C,SAAS,CAAC,MAAM,IAAI,mBAAmB,EAAE;aAC9F,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;IACpF,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,YAAY,CAAC,OAAuB,EAAE,OAAoB;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,CAAC;QAExB,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,KAAK;gBAAE,OAAO,MAAM,CAAC;YAChC,IAAI,gCAAgC,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,MAAM,CAAC;YAEjE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACvC,IAAI,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC9C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACtD,IAAI,WAAW,CAAC,KAAK;oBAAE,OAAO,WAAW,CAAC;gBAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;YACxE,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,gBAAgB,CAC5B,MAAc;QAEd,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC3E,mEAAmE;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,MAAM,oDAAoD,MAAM,EAAE,EAAE,CAAC;IACxH,CAAC;IAED,2GAA2G;IACnG,KAAK,CAAC,YAAY,CAAC,MAAc;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,YAAoB,EAAE,YAA2B;QAC7D,IAAI,YAAY;YAAE,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACpE,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAyC;IAC3D,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/sync-site-wrap.d.ts

@@ -0,0 +1,4 @@
+import type { SlowOperationInstrumentation } from "./slow-op-recorder.js";
+export declare function configureSyncSiteRecorder(next: SlowOperationInstrumentation | undefined): void;
+export declare function runSyncSite<T>(site: string, fn: () => T): T;
+//# sourceMappingURL=sync-site-wrap.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/sync-site-wrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-site-wrap.d.ts","sourceRoot":"","sources":["../../src/domain/sync-site-wrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAI1E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,4BAA4B,GAAG,SAAS,GAAG,IAAI,CAE9F;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAE3D"}

package/node_modules/@openrig/daemon/dist/domain/sync-site-wrap.js

@@ -0,0 +1,8 @@
+let recorder;
+export function configureSyncSiteRecorder(next) {
+    recorder = next;
+}
+export function runSyncSite(site, fn) {
+    return recorder?.runSync ? recorder.runSync(site, fn) : fn();
+}
+//# sourceMappingURL=sync-site-wrap.js.map

package/node_modules/@openrig/daemon/dist/domain/sync-site-wrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-site-wrap.js","sourceRoot":"","sources":["../../src/domain/sync-site-wrap.ts"],"names":[],"mappings":"AAEA,IAAI,QAAkD,CAAC;AAEvD,MAAM,UAAU,yBAAyB,CAAC,IAA8C;IACtF,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,WAAW,CAAI,IAAY,EAAE,EAAW;IACtD,OAAO,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/D,CAAC"}