@openrig/cli 0.5.0 → 0.5.1

package/node_modules/@openrig/daemon/dist/domain/session-jsonl.js

@@ -0,0 +1,78 @@
+// Seat-handover stopgap (plan 411c43de) — the shared provider-JSONL role/content reader. Reads a
+// KNOWN provider session-transcript path (claude sidecar `transcript_path` / codex `rollout_path`)
+// into the last-N {role, content} exchanges for the successor's boot recap. DEFENSIVE / honest-degraded
+// by contract: metadata lines, thinking/tool_use-only messages, and unparseable lines carry no user
+// text and are silently skipped; a missing/corrupt file yields [] and NEVER throws (a boot recap must
+// never crash the successor). Ownership: dev-planner ruled this the shared parser (their rig-ask L2
+// only greps raw lines); it may consume this later if L2 upgrades to structured excerpts.
+//
+// Grounded at source on the real claude-projects line shape:
+//   {type:"user"|"assistant", message:{role, content}} where content is a STRING or an array of
+//   {type:"text"|"thinking"|"tool_use", text?} blocks (only "text" carries user-visible content).
+// Codex rollout lines use {payload:{type:"message", role, content}} — handled by the same reader.
+import { existsSync, readFileSync } from "node:fs";
+/** Extract the user-visible text from a message `content` field (string, or an array of blocks —
+ *  join only the `text` blocks; skip thinking/tool_use). Returns "" when there is no text. */
+function extractText(content) {
+    if (typeof content === "string")
+        return content;
+    if (Array.isArray(content)) {
+        return content
+            .filter((b) => !!b && typeof b === "object" && b.type === "text" && typeof b.text === "string")
+            .map((b) => b.text)
+            .join("\n");
+    }
+    return "";
+}
+/** Interpret ONE parsed JSONL object as an exchange, or null if it carries no user-visible message
+ *  (metadata, thinking/tool_use-only, unrecognized shape). */
+function toExchange(obj) {
+    if (!obj || typeof obj !== "object")
+        return null;
+    const o = obj;
+    // claude-projects: {type:"user"|"assistant", message:{role, content}}
+    const msg = o.message;
+    if (msg && typeof msg.role === "string") {
+        const content = extractText(msg.content);
+        return content.length > 0 ? { role: msg.role, content } : null;
+    }
+    // codex rollout: {payload:{type:"message", role, content}}
+    const payload = o.payload;
+    if (payload && payload.type === "message" && typeof payload.role === "string") {
+        const content = extractText(payload.content);
+        return content.length > 0 ? { role: payload.role, content } : null;
+    }
+    return null;
+}
+/**
+ * Parse a provider session JSONL at `path` into the LAST `n` {role, content} exchanges (bounded recap).
+ * Honest-degraded: missing/unreadable file → []; unparseable/metadata/text-less lines are skipped.
+ */
+export function parseJsonlExchanges(path, n) {
+    if (!existsSync(path))
+        return [];
+    let raw;
+    try {
+        raw = readFileSync(path, "utf8");
+    }
+    catch {
+        return [];
+    }
+    const exchanges = [];
+    for (const line of raw.split("\n")) {
+        if (line.trim().length === 0)
+            continue;
+        let obj;
+        try {
+            obj = JSON.parse(line);
+        }
+        catch {
+            continue; // corrupt line — skip, never throw
+        }
+        const ex = toExchange(obj);
+        if (ex)
+            exchanges.push(ex);
+    }
+    return n >= exchanges.length ? exchanges : exchanges.slice(exchanges.length - n);
+}
+//# sourceMappingURL=session-jsonl.js.map

package/node_modules/@openrig/daemon/dist/domain/session-jsonl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-jsonl.js","sourceRoot":"","sources":["../../src/domain/session-jsonl.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,mGAAmG;AACnG,wGAAwG;AACxG,oGAAoG;AACpG,sGAAsG;AACtG,oGAAoG;AACpG,0FAA0F;AAC1F,EAAE;AACF,6DAA6D;AAC7D,gGAAgG;AAChG,kGAAkG;AAClG,kGAAkG;AAClG,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAOnD;8FAC8F;AAC9F,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAK,CAAwB,CAAC,IAAI,KAAK,MAAM,IAAI,OAAQ,CAAwB,CAAC,IAAI,KAAK,QAAQ,CAAC;aACnL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;8DAC8D;AAC9D,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,sEAAsE;IACtE,MAAM,GAAG,GAAG,CAAC,CAAC,OAA4D,CAAC;IAC3E,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,CAAC;IACD,2DAA2D;IAC3D,MAAM,OAAO,GAAG,CAAC,CAAC,OAA4E,CAAC;IAC/F,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9E,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,CAAS;IACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACvC,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,mCAAmC;QAC/C,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,EAAE;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACnF,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/session-name.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Derive a canonical session name from pod, member, and rig name.
+ * Pure concatenation — no normalization, no heuristics.
+ */
+export declare function deriveCanonicalSessionName(podName: string, memberName: string, rigName: string): string;
+/**
+ * Legacy session-name derivation for flat rigs without pods.
+ * Dots in logicalId are normalized to underscores (tmux compat).
+ */
+export declare function deriveSessionName(rigName: string, logicalId: string): string;
+/**
+ * Validate a session name. Accepts both:
+ * - Legacy: r{NN}-{suffix}
+ * - Canonical: {something}@{something} with all chars in allowed set
+ * Both branches enforce the allowed character set.
+ */
+export declare function validateSessionName(name: string): boolean;
+/**
+ * Validate characters in a session name component.
+ * Returns null if valid, or an error string with the specific invalid character.
+ */
+export declare function validateSessionNameChars(value: string, label: string): string | null;
+/**
+ * Validate all three components of a canonical session name.
+ * Returns an array of errors (empty if valid).
+ */
+export declare function validateSessionComponents(podName: string, memberName: string, rigName: string): string[];
+export type ParsedSessionName = {
+    kind: "canonical";
+    member: string;
+    rig: string;
+} | {
+    kind: "legacy";
+    name: string;
+} | {
+    kind: "external";
+    local: string;
+    domain: string;
+} | {
+    kind: "malformed";
+    error: "malformed_session_name";
+    input: string;
+};
+export declare const VIRTUAL_DOMAIN_TOKENS: readonly ["external"];
+/** Arch tooth 1: human-CLASS classification runs BEFORE any parse at sites where
+ *  the human/agent distinction matters (the queue-destination gate + attention
+ *  union). A2 widened it: virtual-domain refs (<local>@external) are human-CLASS
+ *  too (they join human-route enforcement; NEVER a silent agent-class downgrade).
+ *  Admission stays at the A1/A4 gateway. */
+export declare function isHumanSeatSessionRef(sessionRef: string): boolean;
+export declare function parseSessionName(raw: string): ParsedSessionName;
+/** Display: the member/local leg — text before the first "@", or the whole
+ *  string when no "@" is present (the shipped split("@")[0] rendering,
+ *  verbatim: "@rig" yields ""). */
+export declare function sessionMemberLabel(session: string): string;
+/** Routing/grouping: the rig leg of a canonical name, else undefined. */
+export declare function sessionRigOf(session: string): string | undefined;
+//# sourceMappingURL=session-name.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/session-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-name.d.ts","sourceRoot":"","sources":["../../src/domain/session-name.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,MAAM,CAKR;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMzD;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GACZ,MAAM,GAAG,IAAI,CAQf;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GACd,MAAM,EAAE,CAyBV;AAiCD,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAIhC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,wBAAwB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAS1E,eAAO,MAAM,qBAAqB,uBAAwB,CAAC;AAK3D;;;;4CAI4C;AAC5C,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAGjE;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAgB/D;AAED;;mCAEmC;AACnC,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGhE"}

package/node_modules/@openrig/daemon/dist/domain/session-name.js

@@ -0,0 +1,132 @@
+// Session naming: canonical pod-aware format + legacy flat-node format.
+// Canonical: {pod}-{member}@{rig} — human-authored, system-validated.
+// Legacy: r{NN}-{suffix} — for flat rigs without pods.
+const LEGACY_SESSION_NAME_PATTERN = /^r\d{2}-.+$/;
+const MANAGED_STEM_PATTERN = /^r\d{2}(?:-|$)/;
+const ALLOWED_CHARS_PATTERN = /^[a-zA-Z0-9\-_.@]+$/;
+/**
+ * Derive a canonical session name from pod, member, and rig name.
+ * Pure concatenation — no normalization, no heuristics.
+ */
+export function deriveCanonicalSessionName(podName, memberName, rigName) {
+    return `${podName}-${memberName}@${rigName}`;
+}
+/**
+ * Legacy session-name derivation for flat rigs without pods.
+ * Dots in logicalId are normalized to underscores (tmux compat).
+ */
+export function deriveSessionName(rigName, logicalId) {
+    const stem = MANAGED_STEM_PATTERN.test(rigName) ? rigName : `r00-${rigName}`;
+    // tmux replaces dots with underscores in session names — normalize to match
+    const safeId = logicalId.replace(/\./g, "_");
+    return `${stem}-${safeId}`;
+}
+/**
+ * Validate a session name. Accepts both:
+ * - Legacy: r{NN}-{suffix}
+ * - Canonical: {something}@{something} with all chars in allowed set
+ * Both branches enforce the allowed character set.
+ */
+export function validateSessionName(name) {
+    if (!name || !ALLOWED_CHARS_PATTERN.test(name))
+        return false;
+    // Canonical: contains @
+    if (name.includes("@"))
+        return true;
+    // Legacy: r{NN}-{suffix}
+    return LEGACY_SESSION_NAME_PATTERN.test(name);
+}
+/**
+ * Validate characters in a session name component.
+ * Returns null if valid, or an error string with the specific invalid character.
+ */
+export function validateSessionNameChars(value, label) {
+    if (!value)
+        return `${label} must not be empty`;
+    for (const ch of value) {
+        if (!ALLOWED_CHARS_PATTERN.test(ch)) {
+            return `${label} "${value}" contains "${ch}" — tmux session names allow: a-z, A-Z, 0-9, -, _, ., @`;
+        }
+    }
+    return null;
+}
+/**
+ * Validate all three components of a canonical session name.
+ * Returns an array of errors (empty if valid).
+ */
+export function validateSessionComponents(podName, memberName, rigName) {
+    const errors = [];
+    if (!podName) {
+        errors.push("pod name must not be empty");
+    }
+    else {
+        const err = validateSessionNameChars(podName, "pod name");
+        if (err)
+            errors.push(err);
+    }
+    if (!memberName) {
+        errors.push("member name must not be empty");
+    }
+    else {
+        const err = validateSessionNameChars(memberName, "member name");
+        if (err)
+            errors.push(err);
+    }
+    if (!rigName) {
+        errors.push("rig name must not be empty");
+    }
+    else {
+        const err = validateSessionNameChars(rigName, "rig name");
+        if (err)
+            errors.push(err);
+    }
+    return errors;
+}
+const HUMAN_SEAT_SESSION_REF_PATTERN = /^human(?:-[A-Za-z0-9._-]+)?@(kernel|host)$/;
+const LEGACY_FLAT_SESSION_PATTERN = /^r\d{2}-.+$/;
+// A2 4th leg — CLOSED virtual-domain token set as a NAMED CONSTANT beside the
+// pattern (arch: not inline alternation; lexical-only pure fn, no state/IO).
+// Future domain words extend this array (e.g. @a2a) as explicit alternation.
+// Admission (is this @external ref registered?) is NOT here — it is the A1/A4
+// gateway's job; the classifier only recognizes the lexical shape.
+export const VIRTUAL_DOMAIN_TOKENS = ["external"];
+const VIRTUAL_DOMAIN_SESSION_REF_PATTERN = new RegExp(`^[A-Za-z0-9._:-]+@(${VIRTUAL_DOMAIN_TOKENS.join("|")})$`);
+/** Arch tooth 1: human-CLASS classification runs BEFORE any parse at sites where
+ *  the human/agent distinction matters (the queue-destination gate + attention
+ *  union). A2 widened it: virtual-domain refs (<local>@external) are human-CLASS
+ *  too (they join human-route enforcement; NEVER a silent agent-class downgrade).
+ *  Admission stays at the A1/A4 gateway. */
+export function isHumanSeatSessionRef(sessionRef) {
+    return HUMAN_SEAT_SESSION_REF_PATTERN.test(sessionRef) ||
+        VIRTUAL_DOMAIN_SESSION_REF_PATTERN.test(sessionRef);
+}
+export function parseSessionName(raw) {
+    // Precedence (arch): human -> EXTERNAL -> canonical -> legacy -> malformed. The
+    // virtual-domain leg MUST precede canonical, else "mike@external" parses as
+    // member=mike rig=external; A1's rig-name reservation keeps that unambiguous.
+    if (VIRTUAL_DOMAIN_SESSION_REF_PATTERN.test(raw)) {
+        const domainAt = raw.lastIndexOf("@");
+        return { kind: "external", local: raw.slice(0, domainAt), domain: raw.slice(domainAt + 1) };
+    }
+    const at = raw.indexOf("@");
+    if (at > 0 && at < raw.length - 1) {
+        return { kind: "canonical", member: raw.slice(0, at), rig: raw.slice(at + 1) };
+    }
+    if (at === -1 && LEGACY_FLAT_SESSION_PATTERN.test(raw)) {
+        return { kind: "legacy", name: raw };
+    }
+    return { kind: "malformed", error: "malformed_session_name", input: raw };
+}
+/** Display: the member/local leg — text before the first "@", or the whole
+ *  string when no "@" is present (the shipped split("@")[0] rendering,
+ *  verbatim: "@rig" yields ""). */
+export function sessionMemberLabel(session) {
+    const at = session.indexOf("@");
+    return at === -1 ? session : session.slice(0, at);
+}
+/** Routing/grouping: the rig leg of a canonical name, else undefined. */
+export function sessionRigOf(session) {
+    const parsed = parseSessionName(session);
+    return parsed.kind === "canonical" ? parsed.rig : undefined;
+}
+//# sourceMappingURL=session-name.js.map

package/node_modules/@openrig/daemon/dist/domain/session-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-name.js","sourceRoot":"","sources":["../../src/domain/session-name.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,sEAAsE;AACtE,uDAAuD;AAEvD,MAAM,2BAA2B,GAAG,aAAa,CAAC;AAClD,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAC9C,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,UAAkB,EAClB,OAAe;IAEf,OAAO,GAAG,OAAO,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAe,EACf,SAAiB;IAEjB,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,EAAE,CAAC;IAC7E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,wBAAwB;IACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,yBAAyB;IACzB,OAAO,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAa,EACb,KAAa;IAEb,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,KAAK,oBAAoB,CAAC;IAChD,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACpC,OAAO,GAAG,KAAK,KAAK,KAAK,eAAe,EAAE,yDAAyD,CAAC;QACtG,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAe,EACf,UAAkB,EAClB,OAAe;IAEf,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC1D,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,wBAAwB,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAChE,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC1D,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AA0CD,MAAM,8BAA8B,GAAG,4CAA4C,CAAC;AACpF,MAAM,2BAA2B,GAAG,aAAa,CAAC;AAClD,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,UAAU,CAAU,CAAC;AAC3D,MAAM,kCAAkC,GAAG,IAAI,MAAM,CACnD,sBAAsB,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAC1D,CAAC;AAEF;;;;4CAI4C;AAC5C,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,OAAO,8BAA8B,CAAC,IAAI,CAAC,UAAU,CAAC;QACpD,kCAAkC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,gFAAgF;IAChF,4EAA4E;IAC5E,8EAA8E;IAC9E,IAAI,kCAAkC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AAC5E,CAAC;AAED;;mCAEmC;AACnC,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/session-registry.d.ts

@@ -0,0 +1,130 @@
+import type Database from "better-sqlite3";
+import type { Session, Binding } from "./types.js";
+export type OccupantKind = "initial" | "handover" | "adopt";
+export interface OccupantTenure {
+    id: string;
+    nodeId: string;
+    generationOrdinal: number;
+    generationUuid: string;
+    kind: OccupantKind;
+    nativeSessionIdAtBoot: string | null;
+    bootAt: string;
+}
+interface BindingFields {
+    attachmentType?: "tmux" | "external_cli";
+    tmuxSession?: string;
+    tmuxWindow?: string;
+    tmuxPane?: string;
+    externalSessionName?: string;
+    cmuxWorkspace?: string;
+    cmuxSurface?: string;
+}
+/** Resume-token provenance precedence (OPR.0.4.0.22; adoption rung added by
+ *  OPR.0.4.3.20 FR-3). Higher rank wins; a lower-rank write never overwrites a
+ *  higher-rank persisted token.
+ *  operator/attested (deliberate set) > hook (runtime self-report) >
+ *  adoption (captured at the reconcile/adopt/bind boundary) > scrape (pane).
+ *  adoption sits BELOW hook deliberately: a live runtime hook self-report is
+ *  fresher than an adoption-time snapshot, so hook must be able to refresh an
+ *  adoption token (FR-3 §2.4 — do not freeze the token at adoption time and
+ *  reintroduce the staleness the survive slice exists to kill). */
+export declare const RESUME_PROVENANCE_RANK: Record<string, number>;
+/** OPR.0.4.3.20 FR-4 — the latest live session per node, shape needed by the
+ *  resume-metadata refresher (structurally compatible with ResumeRefreshSession). */
+export interface LatestLiveSession {
+    nodeId: string;
+    sessionId: string;
+    sessionName: string;
+    status: string;
+    runtime: string | null;
+    resumeType: string | null;
+    resumeToken: string | null;
+    cwd: string | null;
+}
+export interface WatchdogRegistrationObserver {
+    ensure(nodeId: string, sessionName: string): unknown;
+    assertCoverage(nodeId: string, sessionName: string): unknown;
+    isEligibleSessionName?(sessionName: string): boolean;
+    reconcileHandover?(nodeId: string, sessionName: string): unknown;
+}
+export declare class SessionRegistry {
+    readonly db: Database.Database;
+    private watchdogRegistrationObserver?;
+    constructor(db: Database.Database, watchdogRegistrationObserver?: WatchdogRegistrationObserver);
+    setWatchdogRegistrationObserver(observer: WatchdogRegistrationObserver): void;
+    registerSession(nodeId: string, sessionName: string, kind?: OccupantKind, reservedGeneration?: string | null): Session;
+    /** Register a claimed session — skips naming validation, sets origin='claimed', startup_status='ready'. */
+    registerClaimedSession(nodeId: string, sessionName: string, kind?: OccupantKind, reservedGeneration?: string | null): Session;
+    /**
+     * atom-B — mint (or CONTINUE) the occupant-generation tenure for a node. RELAUNCH is a CONTINUATION:
+     * if the same native session id is already recorded for this node, return the existing tenure WITHOUT
+     * minting a new generation. A new occupant (initial/handover/adopt, or a new/unknown native session)
+     * mints the next generation_ordinal with a fresh generation_uuid. Append-only — the ledger is never
+     * mutated. (Relaunch also naturally continues by NOT re-calling the register verbs; the native-session
+     * dedup here is the safety net for a re-register.)
+     */
+    /** atom-B — mint the occupant tenure at a register verb, but FAIL-ISOLATED: a session registration
+     *  (a core operation) must NOT die because the additive occupant-generation ledger write failed
+     *  (e.g. a db that has not run migration 060). On failure we LOG loudly (once per process — a
+     *  missing ledger table in production is a visible defect) and let the register succeed;
+     *  generation-scoped consumers degrade to loud-pending, never a silent-wrong. Direct callers that
+     *  REQUIRE the tenure use `mintOccupantTenure` (which throws). */
+    private mintOccupantTenureBestEffort;
+    private static tenureMintWarned;
+    private observeWatchdogRegistration;
+    private runWatchdogEnsure;
+    private static watchdogEnsureWarned;
+    /** Reserve the generation that a managed process will carry before it starts. The capability probe
+     * is read-only: a failed/missing ledger yields null and launch continues without fabricating state. */
+    reserveOccupantGeneration(): string | null;
+    /** True only when this exact generation is registered for this exact node. Throws on ledger faults so
+     * callers can preserve the distinct generation_resolver_error verdict. */
+    isOccupantGenerationRegistered(nodeId: string, generationUuid: string): boolean;
+    mintOccupantTenure(nodeId: string, kind: OccupantKind, nativeSessionIdAtBoot?: string | null, reservedGeneration?: string | null): OccupantTenure;
+    /** The LIVE (latest) occupant generation for a node, or null. Consumers compare an entry's minting
+     *  generation_uuid to this to gate stale-generation state (the ghost-stage defect). */
+    currentOccupantTenure(nodeId: string): OccupantTenure | null;
+    /** ghost-stage (b): the LIVE occupant generation_uuid for the node currently backing a session
+     *  NAME, or null when UNKNOWN (no session row / no node / no tenure — consumers treat null as
+     *  UNKNOWN, never as a match against a stale generation). This is the resolver the compaction
+     *  enforcer's gen-scoped stage gate consumes. Never throws (a bad lookup returns null). */
+    currentOccupantGenerationForSession(sessionName: string): string | null;
+    private rowToTenure;
+    updateStatus(sessionId: string, status: string): void;
+    updateStartupStatus(sessionId: string, status: "pending" | "ready" | "attention_required" | "failed", completedAt?: string): void;
+    updateResumeToken(sessionId: string, type: string, token: string, provenance?: "hook" | "scrape" | "operator" | "adoption"): boolean;
+    /** OPR.0.4.3.20 FR-6 — record a live resume-probe outcome WITHOUT clearing the
+     *  token. On `resumable` it stamps the freshness marker (equal-value-refresh);
+     *  on `not_resumable` / `inconclusive` it marks the PRESENT token stale so the
+     *  restore plan surfaces it as `stale/unverified — re-verify` (never a silent
+     *  null). This replaces the old clear-on-not-resumable behavior (§2.1b) — the
+     *  token stays put; FR-7's blank/fresh rollback catches an actually-unresumable
+     *  token at restore time. */
+    markResumeProbeResult(sessionId: string, status: "resumable" | "not_resumable" | "inconclusive"): void;
+    /** OPR.0.4.0.22 — resolve a canonical session name to the context needed to
+     *  set its resume token: the latest session row + its node's runtime + the
+     *  current resume provenance. Returns null when no session matches. */
+    findResumeContextByName(sessionName: string): {
+        sessionId: string;
+        nodeId: string;
+        rigId: string;
+        runtime: string | null;
+        currentProvenance: string | null;
+    } | null;
+    clearResumeToken(sessionId: string): void;
+    markDetached(sessionId: string): void;
+    markSuperseded(sessionId: string): void;
+    clearBinding(nodeId: string): void;
+    getSessionsForRig(rigId: string): Session[];
+    /** OPR.0.4.3.20 FR-4 — the latest session PER NODE, filtered to live statuses
+     *  (running / idle / unknown), with the fields the resume-metadata refresher
+     *  needs. Lifted from rig-teardown so both the teardown pre-down path and the
+     *  FR-4 periodic/manual snapshot refresh call ONE query (no duplication). */
+    getLatestLiveSessions(rigId: string): LatestLiveSession[];
+    getBindingForNode(nodeId: string): Binding | null;
+    updateBinding(nodeId: string, fields: BindingFields): Binding;
+    private rowToSession;
+    private rowToBinding;
+}
+export {};
+//# sourceMappingURL=session-registry.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/session-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-registry.d.ts","sourceRoot":"","sources":["../../src/domain/session-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAK3C,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAKnD,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;AAC5D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,YAAY,CAAC;IACnB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD,UAAU,aAAa;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;mEAQmE;AACnE,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAKzD,CAAC;AAEF;qFACqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACrD,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7D,qBAAqB,CAAC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACrD,iBAAiB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;CAClE;AAED,qBAAa,eAAe;IAC1B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,4BAA4B,CAAC,CAA+B;gBACxD,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC,EAAE,4BAA4B;IAK9F,+BAA+B,CAAC,QAAQ,EAAE,4BAA4B,GAAG,IAAI;IAI7E,eAAe,CACb,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE,YAAwB,EAC9B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,GACjC,OAAO;IAoBV,2GAA2G;IAC3G,sBAAsB,CACpB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE,YAAsB,EAC5B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,GACjC,OAAO;IAeV;;;;;;;OAOG;IACH;;;;;sEAKkE;IAClE,OAAO,CAAC,4BAA4B;IAoBpC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAS;IAExC,OAAO,CAAC,2BAA2B;IAoBnC,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAS;IAE5C;2GACuG;IACvG,yBAAyB,IAAI,MAAM,GAAG,IAAI;IAS1C;8EAC0E;IAC1E,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO;IAM/E,kBAAkB,CAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,YAAY,EAClB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,EACrC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,GACjC,cAAc;IAyBjB;2FACuF;IACvF,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAO5D;;;+FAG2F;IAC3F,mCAAmC,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAYvE,OAAO,CAAC,WAAW;IAYnB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAMrD,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,oBAAoB,GAAG,QAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;IA2BjI,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO;IA4BpI;;;;;;iCAM6B;IAC7B,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,cAAc,GAAG,IAAI;IAYtG;;2EAEuE;IACvE,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG;QAC5C,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;KAClC,GAAG,IAAI;IAwBR,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAUzC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrC,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIvC,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIlC,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE;IAa3C;;;iFAG6E;IAC7E,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAsBzD,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI;IAQjD,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO;IA8D7D,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,YAAY;CAcrB"}