@openrig/cli 0.4.8 → 0.5.1

package/node_modules/@openrig/daemon/dist/domain/topology/topology-manifest.js

@@ -0,0 +1,195 @@
+// OPR.0.4.4.11 — the topology manifest: the SHAREABLE artifact (FR-1).
+//
+// The key set is CLOSED (arch return R11-1 — this IS the thin-manifest
+// enforcement): an ordered `rigs[]` of entries {source, host?} plus an
+// optional manifest-level `concurrency` cap (default 1 = sequential).
+// NOTHING ELSE. Unknown keys reject loudly — silently ignoring one would
+// reopen the founder's ratified non-goal by stealth. Cross-rig
+// edge/routing/dependency keys reject with a message NAMING that non-goal
+// (thin manifest; inter-rig routing is deferred topology-Q1). `on_failure`
+// was considered and REMOVED for v0 (spec-guard + arch fold): stop-on-failure
+// is the only behavior; re-adding it is an explicit pm-lead decision.
+//
+// Detection contract (PRD FR-1 + guard G-1 folds; the router consumes the
+// exported sniffs): `.rigtopology` extension OR a YAML document with a
+// top-level `rigs:` LIST. Extension wins when both could apply (arch ruling
+// 1 — declared kind binds); a `.rigtopology` file failing validation errors
+// AS a topology, never falls through to rig-spec parsing.
+//
+// Unknown-host-id validation (the FR-1 fourth structural class) resolves
+// against the hosts registry via the shared hosts-registry-reader at the
+// launcher's pre-launch validation pass — still before any launch attempt;
+// this module is filesystem/registry-free by design.
+import { existsSync, readFileSync } from "node:fs";
+import { parse as parseYaml } from "yaml";
+/** The ratified non-goal family: any key that would smuggle cross-rig
+ *  edges/routing/dependency semantics into the thin manifest. */
+const EDGE_ROUTING_KEYS = new Set([
+    "edge",
+    "edges",
+    "route",
+    "routes",
+    "routing",
+    "dependency",
+    "dependencies",
+    "deps",
+    "depends_on",
+    "dependsOn",
+    "needs",
+    "after",
+    "links",
+    "wires",
+    "connections",
+]);
+const MANIFEST_KEYS = new Set(["rigs", "concurrency"]);
+const ENTRY_KEYS = new Set(["source", "host"]);
+function edgeRoutingRejection(prefix, key) {
+    return `${prefix}: '${key}' is a cross-rig edge/routing/dependency key — REJECTED. The topology manifest is deliberately THIN (founder-ratified non-goal: no cross-rig edges, no routing semantics; inter-rig routing is the deferred topology-Q1 decision). Remove the key; the manifest carries only rigs[]{source, host?} + concurrency.`;
+}
+function unknownKeyRejection(prefix, key, allowed) {
+    if (key === "on_failure") {
+        return `${prefix}: 'on_failure' was removed for v0 — stop-on-failure is the only behavior (the walk stops at the first failed entry; already-started rigs are reported honestly). Re-adding the key is an explicit pm-lead decision. Remove it.`;
+    }
+    return `${prefix}: unknown key '${key}' — the manifest key set is CLOSED (${allowed}). Remove or fix the key.`;
+}
+/** Validate an already-parsed YAML document as a topology manifest.
+ *  Collects EVERY structural error (per-entry, what/why/fix) rather than
+ *  failing fast — FR-1 reports them all before any launch. */
+export function validateTopologyManifest(parsed, sourcePath) {
+    const where = `topology manifest at ${sourcePath}`;
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return { ok: false, errors: [`${where}: must be a YAML object with a top-level 'rigs' list`] };
+    }
+    const obj = parsed;
+    const errors = [];
+    for (const key of Object.keys(obj)) {
+        if (MANIFEST_KEYS.has(key))
+            continue;
+        if (EDGE_ROUTING_KEYS.has(key)) {
+            errors.push(edgeRoutingRejection(where, key));
+        }
+        else {
+            errors.push(unknownKeyRejection(where, key, "'rigs' + optional 'concurrency'"));
+        }
+    }
+    let concurrency = 1;
+    const rawConcurrency = obj["concurrency"];
+    if (rawConcurrency !== undefined) {
+        if (typeof rawConcurrency !== "number" || !Number.isInteger(rawConcurrency) || rawConcurrency < 1) {
+            errors.push(`${where}: 'concurrency' must be a positive integer (a fixed staged-launch cap; default 1 = sequential; adaptive throttling is out of scope) — got ${JSON.stringify(rawConcurrency)}`);
+        }
+        else {
+            concurrency = rawConcurrency;
+        }
+    }
+    const rigs = obj["rigs"];
+    if (!Array.isArray(rigs)) {
+        errors.push(`${where}: 'rigs' must be a list of entries {source, host?} — the ordered launch plan`);
+        return { ok: false, errors };
+    }
+    if (rigs.length === 0) {
+        errors.push(`${where}: 'rigs' is empty — a topology must name at least one rig to launch`);
+        return { ok: false, errors };
+    }
+    const validated = [];
+    for (let i = 0; i < rigs.length; i++) {
+        const raw = rigs[i];
+        const prefix = `${where}: rigs[${i}]`;
+        if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
+            errors.push(`${prefix}: must be an object with a 'source' rig ref (spec path, library name, or .rigbundle path) and optional 'host'`);
+            continue;
+        }
+        const entry = raw;
+        for (const key of Object.keys(entry)) {
+            if (ENTRY_KEYS.has(key))
+                continue;
+            if (EDGE_ROUTING_KEYS.has(key)) {
+                errors.push(edgeRoutingRejection(prefix, key));
+            }
+            else {
+                errors.push(unknownKeyRejection(prefix, key, "'source' + optional 'host'"));
+            }
+        }
+        const source = entry["source"];
+        if (typeof source !== "string" || source.trim() === "") {
+            errors.push(`${prefix}.source: required non-empty string — a rig SPEC PATH (v0 boundary; see the per-form rejections below)`);
+            continue;
+        }
+        // ── v0 source-form boundary (arch ruling 2026-07-05, guard F2/F3 fold):
+        // topology entries are SPEC PATHS ONLY, rejected at PARSE time — uniform
+        // entry semantics beat mid-walk failure, and neither widening is free:
+        // bundle targetRoot is a pm-gated closed-key extension (R11-1); library
+        // names need a daemon resolution seam (P4-adjacent+). Both are NAMED
+        // DEFERRALS. Direct-to-rig-up forms are untouched (FR-2 stands).
+        if (/\.rigbundle$/i.test(source)) {
+            errors.push(`${prefix}.source: '.rigbundle' entries are not supported in v0 — topology entries are SPEC PATHS ONLY (a bundle entry needs an explicit per-entry targetRoot, a pm-gated extension of the closed key set; deferred). Workaround: launch that rig directly — single-rig 'rig up ${source}' accepts all source kinds unchanged.`);
+            continue;
+        }
+        if (/\.rigtopology$/i.test(source)) {
+            errors.push(`${prefix}.source: nested topology manifests are not supported — every entry must be a single-rig spec path.`);
+            continue;
+        }
+        if (!source.includes("/") && !/\.ya?ml$/i.test(source)) {
+            errors.push(`${prefix}.source: '${source}' is a bare library/rig name — v0 topology entries are SPEC PATHS ONLY (name entries need a daemon-side resolution seam; deferred). Workaround: run 'rig up ${source}' individually, or reference its spec file by path.`);
+            continue;
+        }
+        const host = entry["host"];
+        if (host !== undefined && (typeof host !== "string" || host.trim() === "")) {
+            errors.push(`${prefix}.host: optional, but if present must be a non-empty registered host id (per-entry 'host:' is the ONLY topology placement mechanism)`);
+            continue;
+        }
+        validated.push({ source, ...(host !== undefined ? { host: host } : {}) });
+    }
+    if (errors.length > 0)
+        return { ok: false, errors };
+    return { ok: true, manifest: { rigs: validated, concurrency } };
+}
+/** Load + parse + validate a topology manifest file. Parse failures error AS
+ *  a topology (arch ruling 1: the declared kind binds — no rig-spec
+ *  fall-through). */
+export function loadTopologyManifest(path) {
+    if (!existsSync(path)) {
+        return {
+            ok: false,
+            errors: [
+                `topology manifest not found at ${path}. Create a .rigtopology YAML file with a top-level 'rigs:' list of {source, host?} entries (+ optional 'concurrency').`,
+            ],
+        };
+    }
+    let raw;
+    try {
+        raw = readFileSync(path, "utf-8");
+    }
+    catch (err) {
+        return { ok: false, errors: [`failed to read topology manifest at ${path}: ${err.message}`] };
+    }
+    let parsed;
+    try {
+        parsed = parseYaml(raw);
+    }
+    catch (err) {
+        return { ok: false, errors: [`failed to parse topology manifest YAML at ${path}: ${err.message}`] };
+    }
+    return validateTopologyManifest(parsed, path);
+}
+/** Detection sniff (FR-1 + guard G-1/yaml folds): a parsed YAML document is
+ *  topology-SHAPED iff it carries a top-level `rigs:` LIST. A rig spec never
+ *  carries top-level `rigs`, so the sniff is unambiguous. Shape only — full
+ *  validation still runs (and rejects) as a topology afterwards. */
+export function hasTopLevelRigsList(parsed) {
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+        return false;
+    return Array.isArray(parsed["rigs"]);
+}
+/** Raw-text form of the sniff for router branches that have not parsed yet
+ *  (the extensionless path-form fallback). Unparseable YAML sniffs false —
+ *  it then flows to the existing non-topology handling unchanged. */
+export function yamlTextHasTopLevelRigsList(raw) {
+    try {
+        return hasTopLevelRigsList(parseYaml(raw));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=topology-manifest.js.map

package/node_modules/@openrig/daemon/dist/domain/topology/topology-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology-manifest.js","sourceRoot":"","sources":["../../../src/domain/topology/topology-manifest.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,yEAAyE;AACzE,+DAA+D;AAC/D,0EAA0E;AAC1E,2EAA2E;AAC3E,8EAA8E;AAC9E,sEAAsE;AACtE,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,4EAA4E;AAC5E,4EAA4E;AAC5E,0DAA0D;AAC1D,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,2EAA2E;AAC3E,qDAAqD;AAErD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAiB1C;iEACiE;AACjE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,cAAc;IACd,MAAM;IACN,YAAY;IACZ,WAAW;IACX,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;AACvD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/C,SAAS,oBAAoB,CAAC,MAAc,EAAE,GAAW;IACvD,OAAO,GAAG,MAAM,MAAM,GAAG,mTAAmT,CAAC;AAC/U,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,GAAW,EAAE,OAAe;IACvE,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACzB,OAAO,GAAG,MAAM,gOAAgO,CAAC;IACnP,CAAC;IACD,OAAO,GAAG,MAAM,kBAAkB,GAAG,uCAAuC,OAAO,2BAA2B,CAAC;AACjH,CAAC;AAED;;8DAE8D;AAC9D,MAAM,UAAU,wBAAwB,CAAC,MAAe,EAAE,UAAkB;IAC1E,MAAM,KAAK,GAAG,wBAAwB,UAAU,EAAE,CAAC;IACnD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,sDAAsD,CAAC,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACrC,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,iCAAiC,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,cAAc,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IAC1C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;YAClG,MAAM,CAAC,IAAI,CACT,GAAG,KAAK,6IAA6I,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CACtL,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,cAAc,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,8EAA8E,CAAC,CAAC;QACpG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,qEAAqE,CAAC,CAAC;QAC3F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,MAAM,GAAG,GAAG,KAAK,UAAU,CAAC,GAAG,CAAC;QACtC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,+GAA+G,CAAC,CAAC;YACtI,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,GAA8B,CAAC;QAE7C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClC,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,EAAE,4BAA4B,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,uGAAuG,CAAC,CAAC;YAC9H,SAAS;QACX,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,iEAAiE;QACjE,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,GAAG,MAAM,yQAAyQ,MAAM,uCAAuC,CAChU,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,oGAAoG,CAAC,CAAC;YAC3H,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CACT,GAAG,MAAM,aAAa,MAAM,+JAA+J,MAAM,qDAAqD,CACvP,CAAC;YACF,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAC3E,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,qIAAqI,CAAC,CAAC;YAC5J,SAAS;QACX,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC;AAClE,CAAC;AAED;;qBAEqB;AACrB,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE;gBACN,kCAAkC,IAAI,wHAAwH;aAC/J;SACF,CAAC;IACJ,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,uCAAuC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,6CAA6C,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;IACjH,CAAC;IACD,OAAO,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAChD,CAAC;AAED;;;oEAGoE;AACpE,MAAM,UAAU,mBAAmB,CAAC,MAAe;IACjD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACzF,OAAO,KAAK,CAAC,OAAO,CAAE,MAAkC,CAAC,MAAM,CAAC,CAAC,CAAC;AACpE,CAAC;AAED;;qEAEqE;AACrE,MAAM,UAAU,2BAA2B,CAAC,GAAW;IACrD,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/topology-converge.d.ts

@@ -0,0 +1,119 @@
+import type { PodRigInstantiator, AddMemberOutcome } from "./rigspec-instantiator.js";
+import type { ClaimService, ReconcileSessionOutcome } from "./claim-service.js";
+/**
+ * Topology-mutation converge spine (OPR.0.3.3.24, AC-6 scaffold).
+ *
+ * The reconciler model is: diff(declaredSpec, liveTopology) -> Op[]; converge(op)
+ * applies each supported op. This release IMPLEMENTS one op — `add_member` —
+ * built on the extracted create-node + launch-binding primitives. The Op union
+ * is COMPLETE-shaped (all reshape kinds typed) and the differ CLASSIFIES the
+ * full set, but the identity-migrating kinds (remove/move/fork/change_runtime)
+ * are CLASSIFIED-deferred to the 0.4.0 identity theme: they migrate or clone an
+ * existing seat's identity (logical-id re-key + continuity_state migration +
+ * queue re-route), which add_member deliberately does not.
+ *
+ * This is a SCAFFOLD, not a reconciler build: there is no `rig apply` loop here
+ * (that is a design sketch this release). converge() never silently skips an
+ * unsupported op — it reports it honestly as "detected, not yet supported".
+ */
+/** The complete topology-mutation op-kind set. */
+export type TopologyOp = {
+    kind: "add_member";
+    pod: string;
+    member: Record<string, unknown>;
+    edges?: Array<{
+        from: string;
+        to: string;
+        kind: string;
+    }>;
+} | {
+    kind: "reconcile_session";
+    sessionName: string;
+    rigId?: string;
+    logicalId?: string;
+} | {
+    kind: "remove_member";
+    logicalId: string;
+} | {
+    kind: "move_member";
+    logicalId: string;
+    toPod: string;
+} | {
+    kind: "fork_member";
+    logicalId: string;
+    toMember: string;
+} | {
+    kind: "change_runtime";
+    logicalId: string;
+    runtime: string;
+};
+export type TopologyOpKind = TopologyOp["kind"];
+/** The op-kinds converge() implements this release. The rest are classified-deferred. */
+export declare const SUPPORTED_OP_KINDS: readonly TopologyOpKind[];
+export declare function isSupportedOpKind(kind: TopologyOpKind): boolean;
+/** Honest message for a classified-but-unsupported op-kind (never silently skipped). */
+export declare const DEFERRED_OP_REASON = "detected, not yet supported in this release";
+export type ConvergeResult = {
+    kind: "add_member";
+    supported: true;
+    outcome: AddMemberOutcome;
+} | {
+    kind: "reconcile_session";
+    supported: true;
+    outcome: ReconcileSessionOutcome;
+} | {
+    kind: TopologyOpKind;
+    detected: true;
+    supported: false;
+    reason: string;
+};
+/** A member as DECLARED in the desired spec (one pod-scoped member fragment). */
+export interface DeclaredMember {
+    pod: string;
+    id: string;
+    runtime: string;
+    fragment: Record<string, unknown>;
+}
+/** A member as it exists LIVE in the rig today. */
+export interface LiveMember {
+    logicalId: string;
+    runtime: string;
+}
+/**
+ * Classify the difference between the declared members and the live topology
+ * into the complete op-kind set. Scaffold semantics:
+ *   - declared but not live              -> add_member        (IMPLEMENTED)
+ *   - live but not declared              -> remove_member     (classified-deferred)
+ *   - present in both, runtime differs   -> change_runtime    (classified-deferred)
+ *
+ * move_member and fork_member are part of the Op union (complete-shaped) but are
+ * NOT auto-derivable from a flat declarative membership diff: a move is
+ * indistinguishable from remove+add without stable-identity tracking, and a fork
+ * is imperative-only (no declarative trigger). Detecting them needs the 0.4.0
+ * identity model (durable state keyed on the stable node-id). convergeOp still
+ * classifies them honestly when handed one directly.
+ */
+export declare function diffTopology(declared: DeclaredMember[], live: LiveMember[]): TopologyOp[];
+/** The domain services the converge boundary composes per op kind (OPR.0.3.4.3:
+ *  the spine grew a second implemented op, so convergeOp takes a deps object —
+ *  add_member runs on the instantiator, reconcile_session on the claim service's
+ *  no-input reconcile binding). */
+export interface ConvergeDeps {
+    instantiator: PodRigInstantiator;
+    /** Required for reconcile_session ops; add_member-only callers may omit it. */
+    claimService?: ClaimService;
+}
+/**
+ * Apply a single topology op. `add_member` runs the extracted create-node +
+ * launch-binding seam via PodRigInstantiator.addMemberToPod; `reconcile_session`
+ * runs ClaimService.reconcileSession — the NO-LAUNCH, NO-INPUT adopt of a live
+ * hand-resumed session into its persisted node (never reaches NodeLauncher.
+ * launchNode or any pane-input primitive). Every other kind is reported honestly
+ * as detected-but-unsupported (NEVER silently skipped). The agent-ergonomics
+ * (json + honest 3-part errors) the CLI and MCP expose live ON this converge
+ * boundary, so future verbs inherit human/agent parity.
+ */
+export declare function convergeOp(deps: ConvergeDeps, rigId: string, op: TopologyOp, rigRoot: string, opts?: {
+    cwdOverride?: string;
+}): Promise<ConvergeResult>;
+//# sourceMappingURL=topology-converge.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/topology-converge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology-converge.d.ts","sourceRoot":"","sources":["../../src/domain/topology-converge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAEhF;;;;;;;;;;;;;;;GAeG;AAEH,kDAAkD;AAClD,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAM/H;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;AAEhD,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,EAAE,SAAS,cAAc,EAAwC,CAAC;AAEjG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAE/D;AAED,wFAAwF;AACxF,eAAO,MAAM,kBAAkB,gDAAgD,CAAC;AAEhF,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,mDAAmD;AACnD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAsBzF;AAED;;;mCAGmC;AACnC,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,kBAAkB,CAAC;IACjC,+EAA+E;IAC/E,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9B,OAAO,CAAC,cAAc,CAAC,CAkCzB"}

package/node_modules/@openrig/daemon/dist/domain/topology-converge.js

@@ -0,0 +1,88 @@
+/** The op-kinds converge() implements this release. The rest are classified-deferred. */
+export const SUPPORTED_OP_KINDS = ["add_member", "reconcile_session"];
+export function isSupportedOpKind(kind) {
+    return SUPPORTED_OP_KINDS.includes(kind);
+}
+/** Honest message for a classified-but-unsupported op-kind (never silently skipped). */
+export const DEFERRED_OP_REASON = "detected, not yet supported in this release";
+/**
+ * Classify the difference between the declared members and the live topology
+ * into the complete op-kind set. Scaffold semantics:
+ *   - declared but not live              -> add_member        (IMPLEMENTED)
+ *   - live but not declared              -> remove_member     (classified-deferred)
+ *   - present in both, runtime differs   -> change_runtime    (classified-deferred)
+ *
+ * move_member and fork_member are part of the Op union (complete-shaped) but are
+ * NOT auto-derivable from a flat declarative membership diff: a move is
+ * indistinguishable from remove+add without stable-identity tracking, and a fork
+ * is imperative-only (no declarative trigger). Detecting them needs the 0.4.0
+ * identity model (durable state keyed on the stable node-id). convergeOp still
+ * classifies them honestly when handed one directly.
+ */
+export function diffTopology(declared, live) {
+    const ops = [];
+    const liveById = new Map(live.map((m) => [m.logicalId, m]));
+    const declaredIds = new Set(declared.map((m) => `${m.pod}.${m.id}`));
+    for (const m of declared) {
+        const qualifiedId = `${m.pod}.${m.id}`;
+        const liveMatch = liveById.get(qualifiedId);
+        if (!liveMatch) {
+            ops.push({ kind: "add_member", pod: m.pod, member: m.fragment });
+        }
+        else if (liveMatch.runtime !== m.runtime) {
+            ops.push({ kind: "change_runtime", logicalId: qualifiedId, runtime: m.runtime });
+        }
+    }
+    for (const m of live) {
+        if (!declaredIds.has(m.logicalId)) {
+            ops.push({ kind: "remove_member", logicalId: m.logicalId });
+        }
+    }
+    return ops;
+}
+/**
+ * Apply a single topology op. `add_member` runs the extracted create-node +
+ * launch-binding seam via PodRigInstantiator.addMemberToPod; `reconcile_session`
+ * runs ClaimService.reconcileSession — the NO-LAUNCH, NO-INPUT adopt of a live
+ * hand-resumed session into its persisted node (never reaches NodeLauncher.
+ * launchNode or any pane-input primitive). Every other kind is reported honestly
+ * as detected-but-unsupported (NEVER silently skipped). The agent-ergonomics
+ * (json + honest 3-part errors) the CLI and MCP expose live ON this converge
+ * boundary, so future verbs inherit human/agent parity.
+ */
+export async function convergeOp(deps, rigId, op, rigRoot, opts) {
+    switch (op.kind) {
+        case "add_member": {
+            const outcome = await deps.instantiator.addMemberToPod(rigId, op.pod, op.member, rigRoot, {
+                cwdOverride: opts?.cwdOverride,
+                edges: op.edges,
+            });
+            return { kind: "add_member", supported: true, outcome };
+        }
+        case "reconcile_session": {
+            if (!deps.claimService) {
+                return {
+                    kind: "reconcile_session",
+                    supported: true,
+                    outcome: { ok: false, code: "reconcile_error", message: "Claim service unavailable; cannot reconcile." },
+                };
+            }
+            const outcome = await deps.claimService.reconcileSession({
+                sessionName: op.sessionName,
+                rigId: op.rigId,
+                logicalId: op.logicalId,
+            });
+            return { kind: "reconcile_session", supported: true, outcome };
+        }
+        case "remove_member":
+        case "move_member":
+        case "fork_member":
+        case "change_runtime":
+            return { kind: op.kind, detected: true, supported: false, reason: DEFERRED_OP_REASON };
+        default: {
+            const _exhaustive = op;
+            throw new Error(`Unknown topology op kind: ${_exhaustive.kind}`);
+        }
+    }
+}
+//# sourceMappingURL=topology-converge.js.map

package/node_modules/@openrig/daemon/dist/domain/topology-converge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology-converge.js","sourceRoot":"","sources":["../../src/domain/topology-converge.ts"],"names":[],"mappings":"AAoCA,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAA8B,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;AAEjG,MAAM,UAAU,iBAAiB,CAAC,IAAoB;IACpD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,kBAAkB,GAAG,6CAA6C,CAAC;AAqBhF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,QAA0B,EAAE,IAAkB;IACzE,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAErE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAYD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAkB,EAClB,KAAa,EACb,EAAc,EACd,OAAe,EACf,IAA+B;IAE/B,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE;gBACxF,WAAW,EAAE,IAAI,EAAE,WAAW;gBAC9B,KAAK,EAAE,EAAE,CAAC,KAAK;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC1D,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,OAAO;oBACL,IAAI,EAAE,mBAAmB;oBACzB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8CAA8C,EAAE;iBACzG,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC;gBACvD,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,SAAS,EAAE,EAAE,CAAC,SAAS;aACxB,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACjE,CAAC;QACD,KAAK,eAAe,CAAC;QACrB,KAAK,aAAa,CAAC;QACnB,KAAK,aAAa,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACzF,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,6BAA8B,WAA0B,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;AACH,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/transcript-capture.d.ts

@@ -0,0 +1,10 @@
+import type Database from "better-sqlite3";
+import type { TmuxAdapter } from "../adapters/tmux.js";
+import type { TranscriptStore } from "./transcript-store.js";
+export declare function startTmuxTranscriptCapture(tmuxAdapter: TmuxAdapter | null | undefined, transcriptStore: TranscriptStore | null | undefined, rigName: string, sessionName: string): Promise<{
+    started: boolean;
+    reason?: string;
+}>;
+/** Restore process-local rotation timers after daemon restart. */
+export declare function resumeRunningTranscriptCaptures(db: Database.Database, tmuxAdapter: TmuxAdapter | null | undefined, transcriptStore: TranscriptStore | null | undefined): Promise<number>;
+//# sourceMappingURL=transcript-capture.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/transcript-capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript-capture.d.ts","sourceRoot":"","sources":["../../src/domain/transcript-capture.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAM7D,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,EAC3C,eAAe,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,EACnD,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBhD;AAOD,kEAAkE;AAClE,wBAAsB,+BAA+B,CACnD,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,WAAW,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,EAC3C,eAAe,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,GAClD,OAAO,CAAC,MAAM,CAAC,CA8BjB"}

package/node_modules/@openrig/daemon/dist/domain/transcript-capture.js

@@ -0,0 +1,46 @@
+import { startTranscriptRotation, getTranscriptRotationOptionsFromEnv, } from "./transcript-rotation.js";
+export async function startTmuxTranscriptCapture(tmuxAdapter, transcriptStore, rigName, sessionName) {
+    if (!tmuxAdapter || !transcriptStore?.enabled) {
+        return { started: false, reason: "transcript_capture_unavailable" };
+    }
+    if (!transcriptStore.ensureTranscriptDir(rigName)) {
+        return { started: false, reason: "transcript_dir_unavailable" };
+    }
+    const transcriptPath = transcriptStore.getTranscriptPath(rigName, sessionName);
+    // V1 pre-release CLI/daemon Item 1: bounded-trail rotation replaces
+    // the pipe-pane infinite-growth file. Defaults from env vars + 1000
+    // line / 2s baseline; failure inside rotation is best-effort silent
+    // and never blocks launch (the prior pipe-pane site treated failure
+    // as launch-warning, not launch-blocker, so behavior stays).
+    startTranscriptRotation(tmuxAdapter, sessionName, transcriptPath, getTranscriptRotationOptionsFromEnv());
+    return { started: true };
+}
+/** Restore process-local rotation timers after daemon restart. */
+export async function resumeRunningTranscriptCaptures(db, tmuxAdapter, transcriptStore) {
+    if (!tmuxAdapter || !transcriptStore?.enabled)
+        return 0;
+    const rows = db.prepare(`
+    SELECT r.name AS rig_name, s.session_name
+    FROM sessions s
+    JOIN nodes n ON n.id = s.node_id
+    JOIN rigs r ON r.id = n.rig_id
+    JOIN bindings b ON b.node_id = n.id
+    WHERE s.status = 'running'
+      AND s.id = (
+        SELECT s2.id FROM sessions s2
+        WHERE s2.node_id = n.id
+        ORDER BY s2.id DESC
+        LIMIT 1
+      )
+      AND COALESCE(b.attachment_type, 'tmux') = 'tmux'
+      AND b.tmux_session = s.session_name
+  `).all();
+    let resumed = 0;
+    for (const row of rows) {
+        const result = await startTmuxTranscriptCapture(tmuxAdapter, transcriptStore, row.rig_name, row.session_name);
+        if (result.started)
+            resumed += 1;
+    }
+    return resumed;
+}
+//# sourceMappingURL=transcript-capture.js.map

package/node_modules/@openrig/daemon/dist/domain/transcript-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript-capture.js","sourceRoot":"","sources":["../../src/domain/transcript-capture.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,uBAAuB,EACvB,mCAAmC,GACpC,MAAM,0BAA0B,CAAC;AAElC,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAA2C,EAC3C,eAAmD,EACnD,OAAe,EACf,WAAmB;IAEnB,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,cAAc,GAAG,eAAe,CAAC,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC/E,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,6DAA6D;IAC7D,uBAAuB,CACrB,WAAW,EACX,WAAW,EACX,cAAc,EACd,mCAAmC,EAAE,CACtC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAOD,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,EAAqB,EACrB,WAA2C,EAC3C,eAAmD;IAEnD,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,EAAE,OAAO;QAAE,OAAO,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;GAevB,CAAC,CAAC,GAAG,EAAgC,CAAC;IAEvC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAC7C,WAAW,EACX,eAAe,EACf,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,YAAY,CACjB,CAAC;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/transcript-redaction.d.ts

@@ -0,0 +1,13 @@
+/** v0 secret-pattern list. Mirrors packages/cli/src/restore-packet/redaction.ts:31-37. */
+export declare const TRANSCRIPT_SECRET_PATTERNS: readonly RegExp[];
+/**
+ * Apply the openrig-v0 redaction policy to transcript content. Returns
+ * the input with each match of the secret patterns replaced by the
+ * literal string `[REDACTED]`. Pure function; no side effects.
+ *
+ * Used by GET /api/transcripts/:session/full to redact the wire payload
+ * BEFORE serialization, so credential patterns never reach the response
+ * body even when a transcript file contains them.
+ */
+export declare function redactTranscriptContent(text: string): string;
+//# sourceMappingURL=transcript-redaction.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/transcript-redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript-redaction.d.ts","sourceRoot":"","sources":["../../src/domain/transcript-redaction.ts"],"names":[],"mappings":"AAUA,0FAA0F;AAC1F,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAMvD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAM5D"}

package/node_modules/@openrig/daemon/dist/domain/transcript-redaction.js

@@ -0,0 +1,34 @@
+// transcript-redaction.ts — daemon-side mirror of the v0 redaction policy.
+//
+// Mirrors packages/cli/src/restore-packet/redaction.ts SECRET_PATTERNS
+// (M1 contract § 4 / openrig-v0 policy). Patterns duplicated rather than
+// imported because @openrig/cli is not a daemon dependency (and adding
+// it would invert the package graph). For M2c-Daemon scope: keep this
+// list byte-equivalent to the CLI list. A future slice may factor a
+// shared @openrig/redaction package; until then, drift between these
+// two arrays is a defect — reviewers should diff them on any change.
+/** v0 secret-pattern list. Mirrors packages/cli/src/restore-packet/redaction.ts:31-37. */
+export const TRANSCRIPT_SECRET_PATTERNS = [
+    /\bsk-[A-Za-z0-9_-]{16,}\b/g,
+    /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g,
+    /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g,
+    /\bBearer\s+[A-Za-z0-9._~+/=-]{20,}\b/g,
+    /\b[A-Za-z0-9+/]{40,}={0,2}\b/g,
+];
+/**
+ * Apply the openrig-v0 redaction policy to transcript content. Returns
+ * the input with each match of the secret patterns replaced by the
+ * literal string `[REDACTED]`. Pure function; no side effects.
+ *
+ * Used by GET /api/transcripts/:session/full to redact the wire payload
+ * BEFORE serialization, so credential patterns never reach the response
+ * body even when a transcript file contains them.
+ */
+export function redactTranscriptContent(text) {
+    let out = text;
+    for (const pattern of TRANSCRIPT_SECRET_PATTERNS) {
+        out = out.replace(pattern, "[REDACTED]");
+    }
+    return out;
+}
+//# sourceMappingURL=transcript-redaction.js.map

package/node_modules/@openrig/daemon/dist/domain/transcript-redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript-redaction.js","sourceRoot":"","sources":["../../src/domain/transcript-redaction.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,EAAE;AACF,uEAAuE;AACvE,yEAAyE;AACzE,uEAAuE;AACvE,sEAAsE;AACtE,oEAAoE;AACpE,qEAAqE;AACrE,qEAAqE;AAErE,0FAA0F;AAC1F,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,4BAA4B;IAC5B,kCAAkC;IAClC,mCAAmC;IACnC,uCAAuC;IACvC,+BAA+B;CAChC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,0BAA0B,EAAE,CAAC;QACjD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/transcript-rotation.d.ts

@@ -0,0 +1,29 @@
+import type { TmuxAdapter } from "../adapters/tmux.js";
+export interface TranscriptRotationOptions {
+    /** Trailing line count to capture each tick. */
+    lines: number;
+    /** Poll interval in milliseconds. */
+    pollIntervalMs: number;
+}
+export declare const DEFAULT_TRANSCRIPT_LINES = 1000;
+export declare const DEFAULT_TRANSCRIPT_POLL_INTERVAL_MS = 2000;
+/** Resolve rotation options from env vars, falling back to defaults.
+ *  File-stored config (rig config set transcripts.lines …) is loaded
+ *  via the daemon settings-store at startup; consumers that need the
+ *  file-stored value can pass an explicit options object instead. */
+export declare function getTranscriptRotationOptionsFromEnv(): TranscriptRotationOptions;
+/** Start a per-session capture-pane rotation timer. Idempotent: a
+ *  second start for the same session replaces the first timer. The
+ *  first tick fires immediately so the transcript file is populated
+ *  before the first poll interval elapses. */
+export declare function startTranscriptRotation(tmuxAdapter: TmuxAdapter, sessionName: string, outputPath: string, opts: TranscriptRotationOptions): void;
+/** Clear the rotation timer for a session. Safe to call when no timer
+ *  is registered. */
+export declare function stopTranscriptRotation(sessionName: string): void;
+/** Test-only: count of active rotators. Production code should not
+ *  depend on this. */
+export declare function getActiveRotationCount(): number;
+/** Test-only: clear all active rotators. Production code should not
+ *  call this; use stopTranscriptRotation for individual sessions. */
+export declare function clearAllTranscriptRotationsForTest(): void;
+//# sourceMappingURL=transcript-rotation.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/transcript-rotation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript-rotation.d.ts","sourceRoot":"","sources":["../../src/domain/transcript-rotation.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,WAAW,yBAAyB;IACxC,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAC7C,eAAO,MAAM,mCAAmC,OAAO,CAAC;AAExD;;;qEAGqE;AACrE,wBAAgB,mCAAmC,IAAI,yBAAyB,CAM/E;AAWD;;;8CAG8C;AAC9C,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,yBAAyB,GAC9B,IAAI,CA2CN;AAED;qBACqB;AACrB,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAMhE;AAED;sBACsB;AACtB,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED;qEACqE;AACrE,wBAAgB,kCAAkC,IAAI,IAAI,CAGzD"}