@openrig/cli 0.4.8 → 0.5.1

package/daemon/dist/domain/slow-op-recorder.js

@@ -0,0 +1,339 @@
+import { randomUUID } from "node:crypto";
+import { performance } from "node:perf_hooks";
+import { Worker } from "node:worker_threads";
+export const SLOW_OPERATION_BARRIER_TIMEOUT_MS = 250;
+export const SLOW_OPERATION_THRESHOLD_MS = 250;
+export const SLOW_OPERATION_ROTATION_BYTES = 1024 * 1024;
+export const SLOW_OPERATION_ROTATION_COUNT = 3;
+export const SLOW_OPERATION_LOG_BASENAME = "slow-operations.jsonl";
+/**
+ * OPR.0.4.3.21 (51elv2) — the named terminal-failure signal. A rejected
+ * flush/close carries this error after the recorder Worker is lost, so a
+ * caller can never mistake a settled-but-lost drain for a successful durable
+ * one (see the terminal transition in {@link SlowOpRecorder}).
+ */
+export class SlowOpRecorderTerminatedError extends Error {
+    constructor(reason) {
+        super(`slow-operation recorder terminated: ${reason}`);
+        this.name = "SlowOpRecorderTerminatedError";
+    }
+}
+/**
+ * OPR.0.4.3.21 (51elv2) — the named acknowledged-write-failure signal. The
+ * Worker is still alive (distinct from {@link SlowOpRecorderTerminatedError}),
+ * but it acknowledged that a record could not be durably written; flush()/close()
+ * reject with this so a known-lost record can never read as a clean durable drain.
+ */
+export class SlowOpRecorderWriteError extends Error {
+    constructor(reason) {
+        super(`slow-operation recorder write failed: ${reason}`);
+        this.name = "SlowOpRecorderWriteError";
+    }
+}
+// The request-timing MIDDLEWARE, extracted as a wired seam (OPR request-observer). It is
+// MEASUREMENT-ONLY: the observer is invoked in a `finally` and isolated in its own try/catch, so a
+// throwing observer can NEVER replace the route's real status/body. `now` is injectable (default
+// real wall-clock) so the recorded durations are DETERMINISTIC under test — the same injectable-clock
+// discipline as the compaction-restore + mission-bucket seams. server.ts wires this via
+// `app.use("*", createSlowOpRequestMiddleware(recorder))`; the startup-wiring pin proves that enable path.
+export function createSlowOpRequestMiddleware(recorder, now = () => Date.now()) {
+    return async (c, next) => {
+        const startedAt = now();
+        try {
+            await next();
+        }
+        finally {
+            try {
+                recorder.recordRequest?.(`${c.req.method} ${c.req.path}`, now() - startedAt);
+            }
+            catch (error) {
+                // A measurement throw must never re-enter Hono control flow (would turn the route into a 500).
+                console.error("[slow-operation] request observer failed", error);
+            }
+        }
+    };
+}
+const WORKER_SOURCE = String.raw `
+  const fs = require("node:fs");
+  const path = require("node:path");
+  const { parentPort } = require("node:worker_threads");
+
+  function rotate(logPath, rotationCount) {
+    for (let index = rotationCount; index >= 1; index -= 1) {
+      const source = index === 1 ? logPath : logPath + "." + (index - 1);
+      const target = logPath + "." + index;
+      if (!fs.existsSync(source)) continue;
+      if (fs.existsSync(target)) fs.rmSync(target, { force: true });
+      fs.renameSync(source, target);
+      fs.chmodSync(target, 0o600);
+    }
+  }
+
+  function append(message) {
+    const line = JSON.stringify(message.record) + "\n";
+    fs.mkdirSync(path.dirname(message.logPath), { recursive: true, mode: 0o700 });
+    let size = 0;
+    try { size = fs.statSync(message.logPath).size; } catch {}
+    if (size > 0 && size + Buffer.byteLength(line) > message.maxBytes) {
+      rotate(message.logPath, message.rotationCount);
+    }
+    const fd = fs.openSync(message.logPath, "a", 0o600);
+    try {
+      fs.chmodSync(message.logPath, 0o600);
+      fs.writeSync(fd, line);
+      fs.fsyncSync(fd);
+    } finally {
+      fs.closeSync(fd);
+    }
+  }
+
+  parentPort.on("message", (message) => {
+    let ok = true;
+    let error;
+    try {
+      if (message.type === "append") append(message);
+    } catch (caught) {
+      ok = false;
+      error = caught instanceof Error ? caught.message : String(caught);
+    }
+    if (message.signal) {
+      const state = new Int32Array(message.signal);
+      Atomics.store(state, 0, ok ? 1 : 2);
+      Atomics.notify(state, 0);
+    } else if (message.id) {
+      parentPort.postMessage({ id: message.id, ok, error });
+    }
+  });
+`;
+export class SlowOpRecorder {
+    worker;
+    logPath;
+    maxBytes;
+    rotationCount;
+    slowThresholdMs;
+    barrierTimeoutMs;
+    pending = new Map();
+    degraded = { healthy: true };
+    degradedHandler;
+    closed = false;
+    // OPR.0.4.3.21 (51elv2) — set once the Worker is lost (error / unexpected
+    // exit / messageerror / synchronous postMessage failure). Distinct from
+    // `closed` (an expected caller-initiated teardown): a terminal recorder
+    // rejects every future post/flush so nothing waits forever or reports a
+    // false durable drain.
+    terminalReason = null;
+    // OPR.0.4.3.21 (51elv2) — sticky latch set once the Worker acknowledges a
+    // record it could not durably write (ok:false). The Worker stays alive, but
+    // durability is lost, so flush()/close() must refuse to report a clean drain.
+    acknowledgedWriteFailure = false;
+    constructor(options) {
+        this.logPath = options.logPath;
+        this.maxBytes = options.maxBytes ?? SLOW_OPERATION_ROTATION_BYTES;
+        this.rotationCount = options.rotationCount ?? SLOW_OPERATION_ROTATION_COUNT;
+        this.slowThresholdMs = options.slowThresholdMs ?? SLOW_OPERATION_THRESHOLD_MS;
+        this.barrierTimeoutMs = options.barrierTimeoutMs ?? SLOW_OPERATION_BARRIER_TIMEOUT_MS;
+        this.worker = new Worker(WORKER_SOURCE, { eval: true, execArgv: [] });
+        this.worker.unref();
+        this.worker.on("message", (message) => {
+            if (!message.id)
+                return;
+            if (message.ok === false) {
+                // Latch the lost durability BEFORE resolving this waiter (the write
+                // attempt is done, just failed): keep the one-shot degraded signal and
+                // waiter resolution, but flush()/close() will now refuse a clean drain.
+                this.acknowledgedWriteFailure = true;
+                this.markDegraded("recorder_write_failed", "recorder.worker");
+            }
+            this.pending.get(message.id)?.resolve();
+            this.pending.delete(message.id);
+        });
+        // One terminal transition for every unrecoverable Worker-loss trigger.
+        this.worker.on("error", () => this.handleTerminalFailure("recorder_worker_failed"));
+        // An unexpected exit (any code — 0 included) while the recorder is still
+        // open is a loss; a normal close() sets `closed` first, so we skip it.
+        this.worker.on("exit", () => {
+            if (!this.closed)
+                this.handleTerminalFailure("recorder_worker_exited");
+        });
+        this.worker.on("messageerror", () => this.handleTerminalFailure("recorder_worker_message_error"));
+    }
+    setDegradedHandler(handler) {
+        this.degradedHandler = handler;
+    }
+    snapshot() {
+        return { ...this.degraded };
+    }
+    beginSyncSpan(site) {
+        const span = { spanId: randomUUID(), site, startedAt: performance.now() };
+        const signal = new SharedArrayBuffer(Int32Array.BYTES_PER_ELEMENT);
+        const state = new Int32Array(signal);
+        try {
+            this.worker.postMessage({
+                type: "append",
+                signal,
+                logPath: this.logPath,
+                maxBytes: this.maxBytes,
+                rotationCount: this.rotationCount,
+                record: { v: 1, ts: new Date().toISOString(), spanId: span.spanId, phase: "begin", site },
+            });
+        }
+        catch {
+            // Synchronous postMessage failure means the Worker is gone: degrade
+            // through the terminal transition but still return the span so the
+            // wrapped operation runs to completion (its value/error stays exact).
+            this.handleTerminalFailure("recorder_post_failed", site);
+            return span;
+        }
+        const wait = Atomics.wait(state, 0, 0, this.barrierTimeoutMs);
+        if (wait === "timed-out")
+            this.markDegraded("begin_barrier_timeout", site);
+        else if (Atomics.load(state, 0) !== 1)
+            this.markDegraded("begin_barrier_failed", site);
+        return span;
+    }
+    runSync(site, fn) {
+        const span = this.beginSyncSpan(site);
+        try {
+            const value = fn();
+            this.endSpan(span, "ok");
+            return value;
+        }
+        catch (error) {
+            this.endSpan(span, "failed");
+            throw error;
+        }
+    }
+    async runStage(site, fn, classify) {
+        const startedAt = performance.now();
+        try {
+            const value = await fn();
+            this.recordMeasurement(site, performance.now() - startedAt, classify?.(value) ?? "ok");
+            return value;
+        }
+        catch (error) {
+            this.recordMeasurement(site, performance.now() - startedAt, "failed");
+            throw error;
+        }
+    }
+    recordMeasurement(site, durationMs, outcome = "ok") {
+        this.appendAsync({
+            v: 1,
+            ts: new Date().toISOString(),
+            spanId: randomUUID(),
+            phase: "end",
+            site,
+            durationMs: Math.max(0, durationMs),
+            outcome,
+        });
+    }
+    recordRequest(site, durationMs) {
+        if (!Number.isFinite(durationMs) || durationMs < this.slowThresholdMs)
+            return;
+        this.recordMeasurement(`request:${site}`, durationMs);
+    }
+    async flush() {
+        if (this.closed)
+            return;
+        // Rejects with SlowOpRecorderTerminatedError when the Worker is lost —
+        // finite, and never a false durable-drain success.
+        await this.postAndWait({ type: "flush" });
+        // The marker round-tripped, but if the Worker earlier acknowledged a write
+        // it could not persist, durability is unproven — reject so flush()/close()
+        // (and the production drain) never report a clean drain over a lost record.
+        if (this.acknowledgedWriteFailure) {
+            throw new SlowOpRecorderWriteError("recorder_write_failed");
+        }
+    }
+    async close() {
+        if (this.closed)
+            return;
+        // Best-effort drain that still tears the Worker down and finishes finitely,
+        // but preserves a terminal drain failure for the caller (index.ts maps it
+        // to a nonzero exit so a lost drain never looks like a clean shutdown).
+        let drainError;
+        try {
+            await this.flush();
+        }
+        catch (error) {
+            drainError = error;
+        }
+        this.closed = true;
+        await this.worker.terminate();
+        if (drainError)
+            throw drainError;
+    }
+    endSpan(span, outcome) {
+        this.appendAsync({
+            v: 1,
+            ts: new Date().toISOString(),
+            spanId: span.spanId,
+            phase: "end",
+            site: span.site,
+            durationMs: Math.max(0, performance.now() - span.startedAt),
+            outcome,
+        });
+    }
+    appendAsync(record) {
+        if (this.closed)
+            return;
+        // Fire-and-forget: a terminal Worker loss rejects this promise, so we
+        // internalize that outcome — Worker loss must never surface as an
+        // unhandled rejection on a measurement path.
+        void this.postAndWait({
+            type: "append",
+            logPath: this.logPath,
+            maxBytes: this.maxBytes,
+            rotationCount: this.rotationCount,
+            record,
+        }).catch(() => { });
+    }
+    postAndWait(message) {
+        if (this.closed)
+            return Promise.resolve();
+        if (this.terminalReason !== null)
+            return Promise.reject(this.terminalError());
+        const id = randomUUID();
+        return new Promise((resolve, reject) => {
+            this.pending.set(id, { resolve, reject });
+            try {
+                this.worker.postMessage({ ...message, id });
+            }
+            catch {
+                // Synchronous postMessage failure — the Worker is gone. Same terminal
+                // transition; this waiter is rejected along with any others.
+                this.pending.delete(id);
+                this.handleTerminalFailure("recorder_post_failed");
+                reject(this.terminalError());
+            }
+        });
+    }
+    terminalError() {
+        return new SlowOpRecorderTerminatedError(this.terminalReason ?? "recorder_terminated");
+    }
+    /**
+     * The single terminal-failure transition for every unrecoverable Worker-loss
+     * trigger. Idempotent (settles pending exactly once), marks health degraded
+     * with the one-shot high-urgency signal, and rejects every pending waiter so
+     * no flush hangs or reports a false durable drain.
+     */
+    handleTerminalFailure(reason, site = "recorder.worker") {
+        if (this.terminalReason !== null)
+            return;
+        this.terminalReason = reason;
+        this.markDegraded(reason, site);
+        const error = this.terminalError();
+        for (const waiter of this.pending.values())
+            waiter.reject(error);
+        this.pending.clear();
+    }
+    markDegraded(reason, site) {
+        if (!this.degraded.healthy)
+            return;
+        this.degraded = { healthy: false, reason, site };
+        try {
+            this.degradedHandler?.({ reason, site });
+        }
+        catch { }
+    }
+}
+//# sourceMappingURL=slow-op-recorder.js.map

package/daemon/dist/domain/slow-op-recorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slow-op-recorder.js","sourceRoot":"","sources":["../../src/domain/slow-op-recorder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAG7C,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAG,CAAC;AACrD,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAC/C,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,2BAA2B,GAAG,uBAAuB,CAAC;AAQnE;;;;;GAKG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YAAY,MAAc;QACxB,KAAK,CAAC,uCAAuC,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,MAAc;QACxB,KAAK,CAAC,yCAAyC,MAAM,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAkBD,yFAAyF;AACzF,mGAAmG;AACnG,iGAAiG;AACjG,sGAAsG;AACtG,wFAAwF;AACxF,2GAA2G;AAC3G,MAAM,UAAU,6BAA6B,CAC3C,QAA6D,EAC7D,MAAoB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IAEpC,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,+FAA+F;gBAC/F,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAgBD,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmD/B,CAAC;AAEF,MAAM,OAAO,cAAc;IACR,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,QAAQ,CAAS;IACjB,aAAa,CAAS;IACtB,eAAe,CAAS;IACxB,gBAAgB,CAAS;IACzB,OAAO,GAAG,IAAI,GAAG,EAAqE,CAAC;IAChG,QAAQ,GAA0B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACpD,eAAe,CAAgF;IAC/F,MAAM,GAAG,KAAK,CAAC;IACvB,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,uBAAuB;IACf,cAAc,GAAkB,IAAI,CAAC;IAC7C,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IACtE,wBAAwB,GAAG,KAAK,CAAC;IAEzC,YAAY,OAA8B;QACxC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,6BAA6B,CAAC;QAClE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,6BAA6B,CAAC;QAC5E,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,2BAA2B,CAAC;QAC9E,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,iCAAiC,CAAC;QACtF,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAsC,EAAE,EAAE;YACnE,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO;YACxB,IAAI,OAAO,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;gBACzB,oEAAoE;gBACpE,uEAAuE;gBACvE,wEAAwE;gBACxE,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;gBACrC,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,iBAAiB,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,uEAAuE;QACvE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACpF,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YAC1B,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,+BAA+B,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,kBAAkB,CAAC,OAAqF;QACtG,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;IACjC,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,MAAM,IAAI,GAAS,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC;QAChF,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBACtB,IAAI,EAAE,QAAQ;gBACd,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;aAC1F,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,mEAAmE;YACnE,sEAAsE;YACtE,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9D,IAAI,IAAI,KAAK,WAAW;YAAE,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;aACtE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAI,IAAY,EAAE,EAAW;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,IAAY,EACZ,EAAoB,EACpB,QAAwC;QAExC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;YACvF,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,QAAQ,CAAC,CAAC;YACtE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,IAAY,EAAE,UAAkB,EAAE,UAA2B,IAAI;QACjF,IAAI,CAAC,WAAW,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM,EAAE,UAAU,EAAE;YACpB,KAAK,EAAE,KAAK;YACZ,IAAI;YACJ,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC;YACnC,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,UAAkB;QAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,IAAI,CAAC,eAAe;YAAE,OAAO;QAC9E,IAAI,CAAC,iBAAiB,CAAC,WAAW,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1C,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAClC,MAAM,IAAI,wBAAwB,CAAC,uBAAuB,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,4EAA4E;QAC5E,0EAA0E;QAC1E,wEAAwE;QACxE,IAAI,UAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,UAAU;YAAE,MAAM,UAAU,CAAC;IACnC,CAAC;IAEO,OAAO,CAAC,IAAU,EAAE,OAAwB;QAClD,IAAI,CAAC,WAAW,CAAC;YACf,CAAC,EAAE,CAAC;YACJ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3D,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,MAA+B;QACjD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,sEAAsE;QACtE,kEAAkE;QAClE,6CAA6C;QAC7C,KAAK,IAAI,CAAC,WAAW,CAAC;YACpB,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,MAAM;SACP,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IAEO,WAAW,CAAC,OAAgC;QAClD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC9E,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;gBACtE,6DAA6D;gBAC7D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa;QACnB,OAAO,IAAI,6BAA6B,CAAC,IAAI,CAAC,cAAc,IAAI,qBAAqB,CAAC,CAAC;IACzF,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,MAAc,EAAE,IAAI,GAAG,iBAAiB;QACpE,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI;YAAE,OAAO;QACzC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC7B,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,IAAY;QAC/C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO;QACnC,IAAI,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,CAAC,eAAe,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;CACF"}

package/daemon/dist/domain/spec-live-conformance.d.ts

@@ -0,0 +1,60 @@
+import type { RigSpec } from "./types.js";
+/**
+ * Build B — spec-vs-live topology conformance.
+ *
+ * A rig spec is consumed as AUTHORITATIVE by everything that recreates or describes a rig
+ * (instantiation, `rig validate`, bundle export, pod-bundle vendoring) and is MAINTAINED by nothing
+ * that mutates one. `rig expand` adds a pod to a running rig through the daemon; no code path writes
+ * the rigRoot spec back. So drift is not an accident to be prevented here — with no writer it is
+ * guaranteed — and this module does not try to prevent it.
+ *
+ * What it does is make the drift SAYABLE at the two moments it causes damage: a bundle export, which
+ * copies the spec verbatim and would otherwise ship a smaller rig than the one running, in silence;
+ * and an explicit conformance check, which is how a later spec write-back gets VERIFIED instead of
+ * eyeballed.
+ *
+ * REPORTING ONLY. Nothing here mutates a spec or blocks an export.
+ */
+export interface Topology {
+    /** Pod ids, e.g. `orch`. */
+    pods: string[];
+    /** Fully-qualified seat ids, e.g. `orch.lead`. */
+    seats: string[];
+}
+export interface ConformanceResult {
+    conforms: boolean;
+    spec: {
+        pods: number;
+        seats: number;
+    };
+    live: {
+        pods: number;
+        seats: number;
+    };
+    /** Running but undeclared — what a bundle export would silently DROP. */
+    podsMissingFromSpec: string[];
+    seatsMissingFromSpec: string[];
+    /** Declared but not running — what a re-instantiation would try to bring up. */
+    podsMissingFromLive: string[];
+    seatsMissingFromLive: string[];
+    /**
+     * A single actionable line naming the REAL delta, or null when the topologies agree.
+     *
+     * Null-on-conformance is the contract, not an implementation detail. A check that warns every
+     * time trains its reader to skim, and the one export that matters then reads like the ninety-six
+     * before it. Callers may print this whenever it is non-null and print nothing when it is not.
+     */
+    message: string | null;
+}
+export declare function compareSpecToLive(spec: Topology, live: Topology): ConformanceResult;
+/** Pods and seats as the SPEC declares them. */
+export declare function topologyFromRigSpec(spec: Pick<RigSpec, "pods">): Topology;
+/**
+ * Pods and seats as the DAEMON is actually running them, derived from node logical ids
+ * (`<pod>.<member>`). Malformed or empty ids are skipped rather than guessed at — an id we cannot
+ * parse is not evidence of a pod.
+ */
+export declare function topologyFromLiveLogicalIds(logicalIds: readonly (string | null | undefined)[]): Topology;
+/** The one-line export banner. Null when there is nothing to say. */
+export declare function bundleExportWarning(result: ConformanceResult): string | null;
+//# sourceMappingURL=spec-live-conformance.d.ts.map

package/daemon/dist/domain/spec-live-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-live-conformance.d.ts","sourceRoot":"","sources":["../../src/domain/spec-live-conformance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,QAAQ;IACvB,4BAA4B;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,kDAAkD;IAClD,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,yEAAyE;IACzE,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,gFAAgF;IAChF,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B;;;;;;OAMG;IACH,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAYD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,GAAG,iBAAiB,CAuCnF;AAED,gDAAgD;AAChD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,QAAQ,CAWzE;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,GAAG,QAAQ,CAavG;AAED,qEAAqE;AACrE,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAG5E"}

package/daemon/dist/domain/spec-live-conformance.js

@@ -0,0 +1,92 @@
+/** Sorted, de-duplicated, blank-free — so ordering never manufactures a delta. */
+function normalize(values) {
+    return Array.from(new Set(values.filter((v) => typeof v === "string" && v.trim() !== ""))).sort();
+}
+function missing(from, against) {
+    const present = new Set(against);
+    return from.filter((v) => !present.has(v));
+}
+export function compareSpecToLive(spec, live) {
+    const specPods = normalize(spec.pods);
+    const specSeats = normalize(spec.seats);
+    const livePods = normalize(live.pods);
+    const liveSeats = normalize(live.seats);
+    const podsMissingFromSpec = missing(livePods, specPods);
+    const seatsMissingFromSpec = missing(liveSeats, specSeats);
+    const podsMissingFromLive = missing(specPods, livePods);
+    const seatsMissingFromLive = missing(specSeats, liveSeats);
+    const conforms = podsMissingFromSpec.length === 0 &&
+        seatsMissingFromSpec.length === 0 &&
+        podsMissingFromLive.length === 0 &&
+        seatsMissingFromLive.length === 0;
+    const result = {
+        conforms,
+        spec: { pods: specPods.length, seats: specSeats.length },
+        live: { pods: livePods.length, seats: liveSeats.length },
+        podsMissingFromSpec,
+        seatsMissingFromSpec,
+        podsMissingFromLive,
+        seatsMissingFromLive,
+        message: null,
+    };
+    if (conforms)
+        return result;
+    // Name the actual delta. A generic "topology may differ" is the caution a reader learns to skip.
+    const parts = [
+        `spec declares ${result.spec.pods} pods/${result.spec.seats} seats; live rig has ${result.live.pods}/${result.live.seats}`,
+    ];
+    if (podsMissingFromSpec.length)
+        parts.push(`pods running but ABSENT FROM THE SPEC: ${podsMissingFromSpec.join(", ")}`);
+    if (seatsMissingFromSpec.length)
+        parts.push(`seats absent from the spec: ${seatsMissingFromSpec.join(", ")}`);
+    if (podsMissingFromLive.length)
+        parts.push(`pods declared but NOT RUNNING: ${podsMissingFromLive.join(", ")}`);
+    if (seatsMissingFromLive.length)
+        parts.push(`seats declared but not running: ${seatsMissingFromLive.join(", ")}`);
+    result.message = parts.join("; ");
+    return result;
+}
+/** Pods and seats as the SPEC declares them. */
+export function topologyFromRigSpec(spec) {
+    const pods = [];
+    const seats = [];
+    for (const pod of spec.pods ?? []) {
+        if (!pod?.id)
+            continue;
+        pods.push(pod.id);
+        for (const member of pod.members ?? []) {
+            if (member?.id)
+                seats.push(`${pod.id}.${member.id}`);
+        }
+    }
+    return { pods, seats };
+}
+/**
+ * Pods and seats as the DAEMON is actually running them, derived from node logical ids
+ * (`<pod>.<member>`). Malformed or empty ids are skipped rather than guessed at — an id we cannot
+ * parse is not evidence of a pod.
+ */
+export function topologyFromLiveLogicalIds(logicalIds) {
+    const pods = [];
+    const seats = [];
+    for (const id of logicalIds) {
+        if (typeof id !== "string")
+            continue;
+        const trimmed = id.trim();
+        const dot = trimmed.indexOf(".");
+        if (dot <= 0 || dot === trimmed.length - 1)
+            continue;
+        const pod = trimmed.slice(0, dot);
+        if (!pods.includes(pod))
+            pods.push(pod);
+        seats.push(trimmed);
+    }
+    return { pods, seats };
+}
+/** The one-line export banner. Null when there is nothing to say. */
+export function bundleExportWarning(result) {
+    if (result.message === null)
+        return null;
+    return `WARNING: this bundle describes the SPEC, not the live rig — ${result.message}. The bundle will instantiate ${result.spec.pods} pods/${result.spec.seats} seats.`;
+}
+//# sourceMappingURL=spec-live-conformance.js.map

package/daemon/dist/domain/spec-live-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-live-conformance.js","sourceRoot":"","sources":["../../src/domain/spec-live-conformance.ts"],"names":[],"mappings":"AA8CA,kFAAkF;AAClF,SAAS,SAAS,CAAC,MAAyB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACpG,CAAC;AAED,SAAS,OAAO,CAAC,IAAuB,EAAE,OAA0B;IAClE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAc,EAAE,IAAc;IAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAExC,MAAM,mBAAmB,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,oBAAoB,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC3D,MAAM,mBAAmB,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,oBAAoB,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAE3D,MAAM,QAAQ,GACZ,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAChC,oBAAoB,CAAC,MAAM,KAAK,CAAC;QACjC,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAChC,oBAAoB,CAAC,MAAM,KAAK,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAsB;QAChC,QAAQ;QACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE;QACxD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE;QACxD,mBAAmB;QACnB,oBAAoB;QACpB,mBAAmB;QACnB,oBAAoB;QACpB,OAAO,EAAE,IAAI;KACd,CAAC;IACF,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAC;IAE5B,iGAAiG;IACjG,MAAM,KAAK,GAAG;QACZ,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,wBAAwB,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE;KAC3H,CAAC;IACF,IAAI,mBAAmB,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,0CAA0C,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvH,IAAI,oBAAoB,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,+BAA+B,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,IAAI,mBAAmB,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,kCAAkC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/G,IAAI,oBAAoB,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,mCAAmC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClH,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,mBAAmB,CAAC,IAA2B;IAC7D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,EAAE;YAAE,SAAS;QACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,MAAM,EAAE,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAAkD;IAC3F,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QACrC,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACrD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,mBAAmB,CAAC,MAAyB;IAC3D,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,+DAA+D,MAAM,CAAC,OAAO,iCAAiC,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;AAC3K,CAAC"}

package/daemon/dist/domain/startup-orchestrator.d.ts

@@ -88,6 +88,7 @@ export declare class StartupOrchestrator {
     private eventBus;
     private tmuxAdapter;
     private sleep;
+    private appliedLaunchStore;
     constructor(deps: StartupOrchestratorDeps);
     private readFile;
     startNode(input: StartupInput): Promise<StartupResult>;

package/daemon/dist/domain/startup-orchestrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"startup-orchestrator.d.ts","sourceRoot":"","sources":["../../src/domain/startup-orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EACV,cAAc,EAAE,WAAW,EAAE,mBAAmB,EACP,UAAU,EACpD,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAK9D,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,cAAc,CAAC;IACrB,oBAAoB,EAAE,mBAAmB,EAAE,CAAC;IAC5C,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACzC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,mFAAmF;IACnF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,+CAA+C;IAC/C,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;CAAE,GAKnG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,aAAa,EAAE,oBAAoB,GAAG,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvG,UAAU,uBAAuB;IAC/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,2DAA2D;IAC3D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,KAAK,CAAgC;gBAEjC,IAAI,EAAE,uBAAuB;IAWzC,OAAO,CAAC,QAAQ,CAA2B;IAErC,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAoQ5D;;;OAGG;YACW,YAAY;IA6B1B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,IAAI;YAgBE,cAAc;IAwC5B,OAAO,CAAC,4BAA4B;YAOtB,2BAA2B;IA0CzC;;;;;;;OAOG;YACW,2BAA2B;YAmC3B,mBAAmB;CAclC"}
+{"version":3,"file":"startup-orchestrator.d.ts","sourceRoot":"","sources":["../../src/domain/startup-orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EACV,cAAc,EAAE,WAAW,EAAE,mBAAmB,EACP,UAAU,EACpD,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAO9D,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,WAAW,CAAC;IACrB,OAAO,EAAE,cAAc,CAAC;IACxB,IAAI,EAAE,cAAc,CAAC;IACrB,oBAAoB,EAAE,mBAAmB,EAAE,CAAC;IAC5C,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACzC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,mFAAmF;IACnF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,+CAA+C;IAC/C,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAA;CAAE,GAKnG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,aAAa,EAAE,oBAAoB,GAAG,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvG,UAAU,uBAAuB;IAC/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;IACzB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,2DAA2D;IAC3D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,kBAAkB,CAAgC;gBAE9C,IAAI,EAAE,uBAAuB;IAYzC,OAAO,CAAC,QAAQ,CAA2B;IAErC,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IA8Q5D;;;OAGG;YACW,YAAY;IA6B1B,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,IAAI;YAgBE,cAAc;IAwC5B,OAAO,CAAC,4BAA4B;YAOtB,2BAA2B;IA0CzC;;;;;;;OAOG;YACW,2BAA2B;YAmC3B,mBAAmB;CAclC"}

package/daemon/dist/domain/startup-orchestrator.js

@@ -1,5 +1,6 @@
 import { isAttentionRequiredReadinessCode, resolveConcreteHint } from "./runtime-adapter.js";
 import { issueStartupChallenge } from "./startup-proof.js";
+import { AppliedLaunchObservationStore } from "./applied-launch-observation-store.js";
 /**
  * Drives one node from projected resources to startup_status: ready.
  *
@@ -26,6 +27,7 @@ export class StartupOrchestrator {
     eventBus;
     tmuxAdapter;
     sleep;
+    appliedLaunchStore;
     constructor(deps) {
         if (deps.db !== deps.sessionRegistry.db)
             throw new Error("StartupOrchestrator: sessionRegistry must share the same db handle");
@@ -37,6 +39,7 @@ export class StartupOrchestrator {
         this.tmuxAdapter = deps.tmuxAdapter;
         this.readFile = deps.readFile ?? (() => "");
         this.sleep = deps.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+        this.appliedLaunchStore = new AppliedLaunchObservationStore(deps.db);
     }
     readFile;
     async startNode(input) {
@@ -48,6 +51,8 @@ export class StartupOrchestrator {
                 : input.rebuildArtifacts && input.rebuildArtifacts.length > 0
                     ? "rebuilt"
                     : "fresh";
+        let appliedLaunch;
+        const launchGeneration = this.sessionRegistry.currentOccupantTenure(input.nodeId)?.generationUuid;
         // 1. Mark pending
         this.sessionRegistry.updateStartupStatus(input.sessionId, "pending");
         this.eventBus.emit({ type: "node.startup_pending", rigId: input.rigId, nodeId: input.nodeId });
@@ -119,6 +124,7 @@ export class StartupOrchestrator {
                         ...(input.forkSource && !launchResumeToken ? { forkSource: input.forkSource } : {}),
                     });
                     if (launchResult.ok) {
+                        appliedLaunch = launchResult.appliedLaunch;
                         const normalizedResumeToken = launchResult.resumeToken?.trim();
                         if (normalizedResumeToken) {
                             try {
@@ -173,6 +179,12 @@ export class StartupOrchestrator {
             errors.push(`Readiness check error: ${err.message}`);
             return this.fail(input, "failed", errors);
         }
+        // The adapter returned the exact enforcing value it inserted, and readiness
+        // proved this managed launch became live. Persistence is deliberately
+        // best-effort: observation failure yields UNKNOWN, never a failed launch.
+        if (appliedLaunch && launchGeneration) {
+            this.appliedLaunchStore.recordGeneration(launchGeneration, appliedLaunch);
+        }
         // OPR.0.4.3.06 — a fresh or fresh-fallback MANAGED launch is challenged so
         // orientation can be proved (never assumed). Resumed restores (excluded by
         // the `fresh` gate) and skip-harness/legacy no-contract paths are NOT