@openrig/cli 0.5.0 → 0.5.1

package/node_modules/@openrig/daemon/dist/routes/skills.js

@@ -0,0 +1,190 @@
+// Slice 28 Checkpoint C-3 — Skill library HTTP routes.
+//
+// SC-29 EXCEPTION #11 cumulative (verbatim declaration at
+// packages/daemon/src/routes/plugins.ts header; this file adds the skill
+// surface symmetric with the plugin endpoints landed in C-1):
+//
+// Slice 28 SKILL-side scope (additive read-only endpoints):
+//   GET /api/skills/library                          → LibrarySkillPublic[]
+//   GET /api/skills/:id/files/list?path=<rel>        → file listing
+//   GET /api/skills/:id/files/read?path=<rel>        → file content
+//
+// Why this exists: see velocity-qa BLOCKING verdict for slice 28 C-final
+// (qitem-20260513045711-39ccfdf3) — on the founder-walk VM the daemon's
+// allowlist doesn't include the openrig source tree, so the prior
+// useLibrarySkills 3-path probe over /api/files/list couldn't reach
+// `packages/daemon/specs/agents/shared/skills`. Daemon-owned discovery
+// resolves shared-skills via the daemon install path (symmetric with how
+// /api/plugins/:id/files/* resolve via pluginDiscoveryService).
+import { Hono } from "hono";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { resolveAllowedDirectory, resolveAllowedFile, FilePathSafetyError, } from "../domain/files/path-safety.js";
+import { sha256Hex } from "../domain/files/file-write-service.js";
+import { FILE_READ_TRUNCATION_BYTES } from "./files.js";
+function getService(c) {
+    return c.get("skillLibraryDiscoveryService");
+}
+function skillRootAllowlist(absolutePath) {
+    // Synthetic single-root allowlist scoped to the skill's folder.
+    // Same pattern as pluginRootAllowlist (plugins.ts) — reuses the
+    // existing path-safety helpers via a one-element allowlist.
+    let canonical;
+    try {
+        canonical = fs.realpathSync(absolutePath);
+    }
+    catch {
+        canonical = path.resolve(absolutePath);
+    }
+    return [{ name: "skill", canonicalPath: canonical }];
+}
+function pathSafetyErrorResponse(c, err) {
+    const status = err.code === "root_unknown" ? 400
+        : err.code === "path_invalid" || err.code === "path_escape" ? 400
+            : err.code === "stat_failed" ? 404
+                : err.code === "not_a_file" || err.code === "not_a_directory" ? 400
+                    : 500;
+    return c.json({ error: err.code, message: err.message, ...(err.details ?? {}) }, status);
+}
+export function skillsRoutes() {
+    const router = new Hono();
+    // GET /library — consolidated skill list (workspace + openrig-managed).
+    router.get("/library", (c) => {
+        const service = getService(c);
+        if (!service)
+            return c.json({ error: "skill_library_unavailable" }, 503);
+        return c.json(service.listLibrarySkillsPublic());
+    });
+    // GET /:id/files/list — list a directory inside the skill folder.
+    // Mounted BEFORE any bare /:id route (defensive — there's no current
+    // bare /:id endpoint, but the order discipline matches plugins.ts).
+    router.get("/:id/files/list", (c) => {
+        const service = getService(c);
+        if (!service)
+            return c.json({ error: "skill_library_unavailable" }, 503);
+        const id = c.req.param("id");
+        const skill = service.getSkill(id);
+        if (!skill)
+            return c.notFound();
+        const relativePath = c.req.query("path") ?? "";
+        try {
+            const allowlist = skillRootAllowlist(skill.absolutePath);
+            const resolved = resolveAllowedDirectory(allowlist, "skill", relativePath);
+            const entries = fs.readdirSync(resolved, { withFileTypes: true });
+            return c.json({
+                skillId: id,
+                path: relativePath,
+                entries: entries
+                    .map((entry) => {
+                    const fullPath = path.join(resolved, entry.name);
+                    let stat = null;
+                    try {
+                        stat = fs.statSync(fullPath);
+                    }
+                    catch { /* skip stat-failed */ }
+                    return {
+                        name: entry.name,
+                        type: entry.isDirectory() ? "dir" : entry.isFile() ? "file" : "other",
+                        size: stat?.isFile() ? stat.size : null,
+                        mtime: stat ? stat.mtime.toISOString() : null,
+                    };
+                })
+                    .sort((a, b) => {
+                    if (a.type !== b.type)
+                        return a.type === "dir" ? -1 : 1;
+                    return a.name.localeCompare(b.name);
+                }),
+            });
+        }
+        catch (err) {
+            if (err instanceof FilePathSafetyError)
+                return pathSafetyErrorResponse(c, err);
+            return c.json({ error: "list_failed", message: err instanceof Error ? err.message : String(err) }, 500);
+        }
+    });
+    // GET /:id/files/read — read a file inside the skill folder.
+    router.get("/:id/files/read", (c) => {
+        const service = getService(c);
+        if (!service)
+            return c.json({ error: "skill_library_unavailable" }, 503);
+        const id = c.req.param("id");
+        const skill = service.getSkill(id);
+        if (!skill)
+            return c.notFound();
+        const relativePath = c.req.query("path") ?? "";
+        if (!relativePath)
+            return c.json({ error: "path_required" }, 400);
+        try {
+            const allowlist = skillRootAllowlist(skill.absolutePath);
+            const resolved = resolveAllowedFile(allowlist, "skill", relativePath);
+            const stat = fs.statSync(resolved);
+            const fullContent = fs.readFileSync(resolved);
+            const truncated = stat.size > FILE_READ_TRUNCATION_BYTES;
+            const returnedContent = truncated
+                ? fullContent.subarray(0, FILE_READ_TRUNCATION_BYTES)
+                : fullContent;
+            return c.json({
+                skillId: id,
+                path: relativePath,
+                absolutePath: resolved,
+                content: returnedContent.toString("utf-8"),
+                mtime: stat.mtime.toISOString(),
+                contentHash: sha256Hex(fullContent),
+                size: stat.size,
+                truncated,
+                truncatedAtBytes: truncated ? FILE_READ_TRUNCATION_BYTES : null,
+                totalBytes: stat.size,
+            });
+        }
+        catch (err) {
+            if (err instanceof FilePathSafetyError)
+                return pathSafetyErrorResponse(c, err);
+            return c.json({ error: "read_failed", message: err instanceof Error ? err.message : String(err) }, 500);
+        }
+    });
+    router.get("/audit", async (c) => {
+        const service = getService(c);
+        if (!service)
+            return c.json({ ok: false, error: "skill_library_unavailable" }, 503);
+        const { discoverSkillsWithProvenance } = await import("../domain/skill-discovery.js");
+        const { auditSkills } = await import("../domain/skill-audit.js");
+        const homedir = c.get("homedir") ?? process.env.HOME ?? "/tmp";
+        const cwd = c.get("cwd") ?? process.cwd();
+        const claudeResult = discoverSkillsWithProvenance({ runtime: "claude-code", homedir, cwd });
+        const codexResult = discoverSkillsWithProvenance({ runtime: "codex", homedir, cwd });
+        const seenPaths = new Set();
+        const allSkills = [];
+        for (const s of claudeResult.skills) {
+            seenPaths.add(s.path);
+            allSkills.push(s);
+        }
+        for (const s of codexResult.skills) {
+            if (!seenPaths.has(s.path)) {
+                seenPaths.add(s.path);
+                allSkills.push(s);
+            }
+        }
+        let mirrorDrift;
+        let mirrorDriftError;
+        try {
+            const { checkMirrorDriftSafe } = await import("../domain/skill-mirror-drift.js");
+            const driftResult = await checkMirrorDriftSafe();
+            if (driftResult.ok) {
+                mirrorDrift = { stale: driftResult.stale, changes: driftResult.changes };
+            }
+            else {
+                mirrorDriftError = driftResult.reason;
+            }
+        }
+        catch (err) {
+            mirrorDriftError = `Mirror drift check unavailable: ${err instanceof Error ? err.message : String(err)}`;
+        }
+        const auditResult = auditSkills(allSkills, { mirrorDrift });
+        const totalFindings = auditResult.entries.filter((e) => !e.shadowed).reduce((sum, e) => sum + e.findings.length, 0)
+            + auditResult.mirrorDriftFindings.length;
+        const rejected = [...claudeResult.rejected, ...codexResult.rejected];
+        return c.json({ ok: true, entries: auditResult.entries, mirrorDriftFindings: auditResult.mirrorDriftFindings, mirrorDriftError, totalFindings, rejected });
+    });
+    return router;
+}
+//# sourceMappingURL=skills.js.map

package/node_modules/@openrig/daemon/dist/routes/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/routes/skills.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,0DAA0D;AAC1D,yEAAyE;AACzE,8DAA8D;AAC9D,EAAE;AACF,4DAA4D;AAC5D,4EAA4E;AAC5E,oEAAoE;AACpE,oEAAoE;AACpE,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,kEAAkE;AAClE,oEAAoE;AACpE,uEAAuE;AACvE,yEAAyE;AACzE,gEAAgE;AAEhE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,uCAAuC,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAIxD,SAAS,UAAU,CAAC,CAAyB;IAC3C,OAAO,CAAC,CAAC,GAAG,CAAC,8BAAuC,CAA6C,CAAC;AACpG,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,gEAAgE;IAChE,gEAAgE;IAChE,4DAA4D;IAC5D,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,uBAAuB,CAC9B,CAAyD,EACzD,GAAwB;IAExB,MAAM,MAAM,GACV,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,GAAG;QACjC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG;YACjE,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG;gBAClC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,GAAG;oBACnE,CAAC,CAAC,GAAG,CAAC;IACR,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,MAAa,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;IAE1B,wEAAwE;IACxE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,OAAO;qBACb,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;oBACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjD,IAAI,IAAI,GAAoB,IAAI,CAAC;oBACjC,IAAI,CAAC;wBAAC,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;oBACtE,OAAO;wBACL,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,OAAgB;wBAChG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;wBACvC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;qBAC9C,CAAC;gBACJ,CAAC,CAAC;qBACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBACb,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;wBAAE,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACxD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtC,CAAC,CAAC;aACL,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB;gBAAE,OAAO,uBAAuB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QACzE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,YAAY;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACnC,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;YACzD,MAAM,eAAe,GAAG,SAAS;gBAC/B,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,0BAA0B,CAAC;gBACrD,CAAC,CAAC,WAAW,CAAC;YAChB,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE,YAAY;gBAClB,YAAY,EAAE,QAAQ;gBACtB,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC1C,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAC/B,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC;gBACnC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS;gBACT,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI;gBAC/D,UAAU,EAAE,IAAI,CAAC,IAAI;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,mBAAmB;gBAAE,OAAO,uBAAuB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;QAEpF,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACtF,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAkB,CAAuB,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC;QAC9F,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAc,CAAuB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAEzE,MAAM,YAAY,GAAG,4BAA4B,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5F,MAAM,WAAW,GAAG,4BAA4B,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAErF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,SAAS,GAA+B,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YACpC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtB,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtB,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,WAA8D,CAAC;QACnE,IAAI,gBAAoC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;YACjF,MAAM,WAAW,GAAG,MAAM,oBAAoB,EAAE,CAAC;YACjD,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;gBACnB,WAAW,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC;YAC3E,CAAC;iBAAM,CAAC;gBACN,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,gBAAgB,GAAG,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3G,CAAC;QAED,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;cAC/G,WAAW,CAAC,mBAAmB,CAAC,MAAM,CAAC;QAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QAErE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,mBAAmB,EAAE,WAAW,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7J,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/slices.d.ts

@@ -0,0 +1,9 @@
+import { Hono } from "hono";
+import type { SliceIndexer } from "../domain/slices/slice-indexer.js";
+import type { SliceDetailProjector } from "../domain/slices/slice-detail-projector.js";
+export interface SlicesRoutesDeps {
+    indexer: SliceIndexer;
+    projector: SliceDetailProjector;
+}
+export declare function slicesRoutes(): Hono;
+//# sourceMappingURL=slices.d.ts.map

package/node_modules/@openrig/daemon/dist/routes/slices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slices.d.ts","sourceRoot":"","sources":["../../src/routes/slices.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,KAAK,EAAE,YAAY,EAA+B,MAAM,mCAAmC,CAAC;AACnG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAGvF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,oBAAoB,CAAC;CACjC;AAID,wBAAgB,YAAY,IAAI,IAAI,CAqJnC"}

package/node_modules/@openrig/daemon/dist/routes/slices.js

@@ -0,0 +1,257 @@
+// Slice Story View v0 — HTTP routes.
+//
+// Endpoints:
+//   GET /api/slices?filter=all|active|done|blocked  — list (default: all)
+//   GET /api/slices/:name                            — full per-tab payload
+//   GET /api/slices/:name/proof-asset/:relPath{.+}   — serves screenshots /
+//                                                       videos / traces from
+//                                                       the slice's matched
+//                                                       dogfood-evidence dir
+//                                                       (path-traversal guarded)
+//
+// Route-order discipline (per Phase A R1 lesson): static `/api/slices`
+// must be registered BEFORE dynamic `/:name` so the bare-list endpoint
+// isn't shadowed. The proof-asset route similarly goes BEFORE :name to
+// avoid `/proof-asset` being parsed as a slice-name.
+import { Hono } from "hono";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { findSliceWorkflowBinding } from "../domain/workflow/slice-workflow-binding.js";
+const VALID_FILTERS = new Set(["all", "active", "done", "blocked"]);
+export function slicesRoutes() {
+    const app = new Hono();
+    // 1) Static literal `/` BEFORE dynamic `/:name` so the list isn't
+    //    shadowed by a slice named "list" or similar.
+    app.get("/", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "slices_indexer_unavailable" }, 503);
+        if (!deps.indexer.isReady()) {
+            return c.json({
+                error: "slices_root_not_configured",
+                hint: "Run rig config init-workspace, or set workspace.slices_root to workspace/missions. Supported shape: missions/<mission>/slices/<slice>.",
+            }, 503);
+        }
+        const filter = (c.req.query("filter") ?? "all").toLowerCase();
+        if (!VALID_FILTERS.has(filter)) {
+            return c.json({
+                error: "filter_invalid",
+                hint: `Unknown filter '${filter}'. Allowed: ${[...VALID_FILTERS].sort().join(", ")}.`,
+            }, 400);
+        }
+        const refresh = c.req.query("refresh");
+        if (refresh === "1" || refresh === "true") {
+            deps.indexer.invalidate();
+        }
+        // qitem-ccf87c0d corrective — ONE HTTP request is ONE composite
+        // operation: the list rebuild, the boundToWorkflow per-slice get loop,
+        // and the mission sidecar share ONE membership batch (pre-scope, each
+        // uncached get built its own 2-scan batch: 2+2N total queue scans).
+        return deps.indexer.withMembershipBatch(() => {
+            const all = deps.indexer.list();
+            let filtered = filter === "all" ? all : all.filter((s) => s.status === filter);
+            // Workflows in Spec Library v0: optional lens filter — narrow to
+            // slices bound to a workflow_instance of <name>:<version>.
+            const boundToWorkflow = c.req.query("boundToWorkflow");
+            let boundDiagnostic = null;
+            if (boundToWorkflow) {
+                const colonIdx = boundToWorkflow.lastIndexOf(":");
+                if (colonIdx === -1) {
+                    return c.json({
+                        error: "boundToWorkflow_invalid",
+                        hint: "Format is boundToWorkflow=<specName>:<specVersion>",
+                    }, 400);
+                }
+                const specName = boundToWorkflow.slice(0, colonIdx);
+                const specVersion = boundToWorkflow.slice(colonIdx + 1);
+                const db = deps.indexer.db;
+                const before = filtered.length;
+                filtered = filtered.filter((slice) => {
+                    // Re-resolve binding per slice. The indexer's list payload
+                    // doesn't carry workflowName so we do the join here. v0 cost
+                    // is bounded by the slice count + a small SQL per slice (the
+                    // membership batch is shared across the whole request).
+                    const sliceRecord = deps.indexer.get(slice.name);
+                    if (!sliceRecord || sliceRecord.qitemIds.length === 0)
+                        return false;
+                    const binding = findSliceWorkflowBinding(db, sliceRecord.qitemIds);
+                    return binding.primary?.workflowName === specName
+                        && binding.primary?.workflowVersion === specVersion;
+                });
+                boundDiagnostic = { specName, specVersion, matched: filtered.length, total: before };
+            }
+            // Sort by lastActivityAt DESC (most recently touched first); slices
+            // without activity sort to the end.
+            filtered.sort(compareByActivityDesc);
+            return c.json({
+                slices: filtered,
+                totalCount: filtered.length,
+                filter,
+                boundToWorkflow: boundDiagnostic,
+                // VM-005 (release-0.4.7): additive authored mission-status sidecar so
+                // chip surfaces can honor authored-wins precedence without a second
+                // round-trip. The `slices` array itself is byte-untouched.
+                missions: deps.indexer.missionAuthoredStatuses(),
+            });
+        });
+    });
+    // V0.3.1 slice 17 founder-walk-workspace-state-correctness (walk item 8 — Explorer auto-show): explicit cache invalidation surface.
+    // POST /api/slices/refresh drops both indexer caches so newly-created
+    // slice / mission folders are picked up without a daemon restart.
+    // Registered BEFORE the dynamic /:name routes so it isn't shadowed.
+    app.post("/refresh", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "slices_indexer_unavailable" }, 503);
+        deps.indexer.invalidate();
+        return c.json({ ok: true });
+    });
+    // 2) Proof asset serving — registered BEFORE /:name to keep /:name from
+    //    eating /proof-asset paths. Hono's :wildcard matches a single
+    //    segment; we parse the rest of the path manually for nested
+    //    relative paths like "screenshots/foo.png" or
+    //    "headed-browser/screenshots/bar.png".
+    app.get("/:name/proof-asset/*", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "slices_indexer_unavailable" }, 503);
+        const name = c.req.param("name");
+        const slice = deps.indexer.get(name);
+        if (!slice || !slice.proofPacket) {
+            return c.json({ error: "proof_packet_not_found" }, 404);
+        }
+        // Hono path: c.req.path = "/api/slices/<name>/proof-asset/<rest>".
+        // Pull everything after "/proof-asset/".
+        const fullPath = c.req.path;
+        const marker = `/proof-asset/`;
+        const idx = fullPath.indexOf(marker);
+        if (idx === -1)
+            return c.json({ error: "proof_asset_path_invalid" }, 400);
+        const relPath = decodeURIComponent(fullPath.slice(idx + marker.length));
+        if (!relPath || relPath.includes("..")) {
+            return c.json({ error: "proof_asset_path_invalid" }, 400);
+        }
+        const abs = deps.projector.resolveProofAssetPath(slice.proofPacket, relPath);
+        if (!abs)
+            return c.json({ error: "proof_asset_not_found" }, 404);
+        const contentType = inferContentType(abs);
+        return fileAssetResponse(abs, contentType, c.req.header("Range"));
+    });
+    // 3) Doc serving for the Docs tab — markdown content of a single file
+    //    inside the slice folder. Path-traversal guarded by the projector.
+    app.get("/:name/doc/*", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "slices_indexer_unavailable" }, 503);
+        const name = c.req.param("name");
+        const fullPath = c.req.path;
+        const marker = `/doc/`;
+        const idx = fullPath.indexOf(marker);
+        if (idx === -1)
+            return c.json({ error: "doc_path_invalid" }, 400);
+        const relPath = decodeURIComponent(fullPath.slice(idx + marker.length));
+        if (!relPath || relPath.includes("..")) {
+            return c.json({ error: "doc_path_invalid" }, 400);
+        }
+        const content = deps.projector.readDoc(name, relPath);
+        if (content === null)
+            return c.json({ error: "doc_not_found" }, 404);
+        return c.json({ relPath, content });
+    });
+    // 4) Dynamic `/:name` LAST so the literal routes above are not shadowed.
+    app.get("/:name", (c) => {
+        const deps = getDeps(c);
+        if (!deps)
+            return c.json({ error: "slices_indexer_unavailable" }, 503);
+        const name = c.req.param("name");
+        const slice = deps.indexer.get(name);
+        if (!slice)
+            return c.json({ error: "slice_not_found", name }, 404);
+        const payload = deps.projector.project(slice);
+        return c.json(payload);
+    });
+    return app;
+}
+function getDeps(c) {
+    const indexer = c.get("sliceIndexer");
+    const projector = c.get("sliceDetailProjector");
+    if (!indexer || !projector)
+        return null;
+    return { indexer, projector };
+}
+function compareByActivityDesc(a, b) {
+    if (a.lastActivityAt === b.lastActivityAt)
+        return a.name.localeCompare(b.name);
+    if (!a.lastActivityAt)
+        return 1;
+    if (!b.lastActivityAt)
+        return -1;
+    return b.lastActivityAt.localeCompare(a.lastActivityAt);
+}
+function inferContentType(absPath) {
+    const ext = path.extname(absPath).toLowerCase();
+    switch (ext) {
+        case ".png": return "image/png";
+        case ".jpg":
+        case ".jpeg": return "image/jpeg";
+        case ".gif": return "image/gif";
+        case ".webp": return "image/webp";
+        case ".mp4": return "video/mp4";
+        case ".webm": return "video/webm";
+        case ".mov": return "video/quicktime";
+        case ".zip": return "application/zip";
+        case ".md":
+        case ".txt": return "text/plain; charset=utf-8";
+        case ".json": return "application/json; charset=utf-8";
+        default: return "application/octet-stream";
+    }
+}
+function fileAssetResponse(absPath, contentType, rangeHeader) {
+    const size = fs.statSync(absPath).size;
+    const cacheControl = "public, max-age=86400";
+    if (rangeHeader) {
+        const m = rangeHeader.match(/^bytes=(\d*)-(\d*)$/);
+        const start = m && m[1] !== "" ? Number(m[1]) : m && m[2] !== "" ? size - Number(m[2]) : NaN;
+        const end = m && m[1] !== "" && m[2] !== "" ? Number(m[2]) : size - 1;
+        if (!m || Number.isNaN(start) || start < 0 || start >= size || end < start) {
+            return new Response(null, {
+                status: 416,
+                headers: {
+                    "Content-Range": `bytes */${size}`,
+                    "Accept-Ranges": "bytes",
+                },
+            });
+        }
+        const boundedEnd = Math.min(end, size - 1);
+        const length = boundedEnd - start + 1;
+        const fd = fs.openSync(absPath, "r");
+        try {
+            const buf = Buffer.alloc(length);
+            fs.readSync(fd, buf, 0, length, start);
+            return new Response(new Uint8Array(buf), {
+                status: 206,
+                headers: {
+                    "Content-Type": contentType,
+                    "Content-Range": `bytes ${start}-${boundedEnd}/${size}`,
+                    "Content-Length": String(length),
+                    "Accept-Ranges": "bytes",
+                    "Cache-Control": cacheControl,
+                },
+            });
+        }
+        finally {
+            fs.closeSync(fd);
+        }
+    }
+    const data = fs.readFileSync(absPath);
+    return new Response(new Uint8Array(data), {
+        status: 200,
+        headers: {
+            "Content-Type": contentType,
+            "Content-Length": String(size),
+            "Accept-Ranges": "bytes",
+            "Cache-Control": cacheControl,
+        },
+    });
+}
+//# sourceMappingURL=slices.js.map

package/node_modules/@openrig/daemon/dist/routes/slices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slices.js","sourceRoot":"","sources":["../../src/routes/slices.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,aAAa;AACb,0EAA0E;AAC1E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,iFAAiF;AACjF,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,uEAAuE;AACvE,qDAAqD;AAErD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAOxF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAEzF,MAAM,UAAU,YAAY;IAC1B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,kEAAkE;IAClE,kDAAkD;IAClD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACjB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,4BAA4B;gBACnC,IAAI,EAAE,wIAAwI;aAC/I,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9D,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAA6B,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,gBAAgB;gBACvB,IAAI,EAAE,mBAAmB,MAAM,eAAe,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACtF,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC5B,CAAC;QACD,gEAAgE;QAChE,uEAAuE;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,QAAQ,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YAC/E,iEAAiE;YACjE,2DAA2D;YAC3D,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACvD,IAAI,eAAe,GAAqF,IAAI,CAAC;YAC7G,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,QAAQ,GAAG,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBAClD,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;oBACpB,OAAO,CAAC,CAAC,IAAI,CAAC;wBACZ,KAAK,EAAE,yBAAyB;wBAChC,IAAI,EAAE,oDAAoD;qBAC3D,EAAE,GAAG,CAAC,CAAC;gBACV,CAAC;gBACD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACpD,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBACxD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;gBAC/B,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;oBACnC,2DAA2D;oBAC3D,6DAA6D;oBAC7D,6DAA6D;oBAC7D,wDAAwD;oBACxD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO,KAAK,CAAC;oBACpE,MAAM,OAAO,GAAG,wBAAwB,CAAC,EAAE,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;oBACnE,OAAO,OAAO,CAAC,OAAO,EAAE,YAAY,KAAK,QAAQ;2BAC5C,OAAO,CAAC,OAAO,EAAE,eAAe,KAAK,WAAW,CAAC;gBACxD,CAAC,CAAC,CAAC;gBACH,eAAe,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACvF,CAAC;YACD,oEAAoE;YACpE,oCAAoC;YACpC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACrC,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,MAAM;gBACN,eAAe,EAAE,eAAe;gBAChC,sEAAsE;gBACtE,oEAAoE;gBACpE,2DAA2D;gBAC3D,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE;aACjD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,oIAAoI;IACpI,sEAAsE;IACtE,kEAAkE;IAClE,oEAAoE;IACpE,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,kEAAkE;IAClE,gEAAgE;IAChE,kDAAkD;IAClD,2CAA2C;IAC3C,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACjC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;QACD,mEAAmE;QACnE,yCAAyC;QACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAC5B,MAAM,MAAM,GAAG,eAAe,CAAC;QAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QAEjE,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,sEAAsE;IACtE,uEAAuE;IACvE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC;QACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,OAAO,CAAC,CAAoC;IACnD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,cAAuB,CAA6B,CAAC;IAC3E,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,sBAA+B,CAAqC,CAAC;IAC7F,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAiB,EAAE,CAAiB;IACjE,IAAI,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,cAAc;QAAE,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,OAAO,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC;QAChC,KAAK,MAAM,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC;QAClC,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC;QAChC,KAAK,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC;QAClC,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC;QAChC,KAAK,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC;QAClC,KAAK,MAAM,CAAC,CAAC,OAAO,iBAAiB,CAAC;QACtC,KAAK,MAAM,CAAC,CAAC,OAAO,iBAAiB,CAAC;QACtC,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC,CAAC,OAAO,2BAA2B,CAAC;QAChD,KAAK,OAAO,CAAC,CAAC,OAAO,iCAAiC,CAAC;QACvD,OAAO,CAAC,CAAC,OAAO,0BAA0B,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,WAAmB,EAAE,WAAoB;IACnF,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;IACvC,MAAM,YAAY,GAAG,uBAAuB,CAAC;IAE7C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7F,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;YAC3E,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,eAAe,EAAE,WAAW,IAAI,EAAE;oBAClC,eAAe,EAAE,OAAO;iBACzB;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,UAAU,GAAG,KAAK,GAAG,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO,IAAI,QAAQ,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE;gBACvC,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,cAAc,EAAE,WAAW;oBAC3B,eAAe,EAAE,SAAS,KAAK,IAAI,UAAU,IAAI,IAAI,EAAE;oBACvD,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC;oBAChC,eAAe,EAAE,OAAO;oBACxB,eAAe,EAAE,YAAY;iBAC9B;aACF,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO,IAAI,QAAQ,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,WAAW;YAC3B,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC;YAC9B,eAAe,EAAE,OAAO;YACxB,eAAe,EAAE,YAAY;SAC9B;KACF,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/snapshots.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+export declare const snapshotsRoutes: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+export declare const restoreRoutes: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=snapshots.d.ts.map

package/node_modules/@openrig/daemon/dist/routes/snapshots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshots.d.ts","sourceRoot":"","sources":["../../src/routes/snapshots.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAQ5B,eAAO,MAAM,eAAe,4EAAa,CAAC;AAC1C,eAAO,MAAM,aAAa,4EAAa,CAAC"}

package/node_modules/@openrig/daemon/dist/routes/snapshots.js

@@ -0,0 +1,141 @@
+import { Hono } from "hono";
+import { RigNotFoundError } from "../domain/errors.js";
+export const snapshotsRoutes = new Hono();
+export const restoreRoutes = new Hono();
+function getDeps(c) {
+    return {
+        snapshotCapture: c.get("snapshotCapture"),
+        snapshotRepo: c.get("snapshotRepo"),
+        restoreOrchestrator: c.get("restoreOrchestrator"),
+        // OPR.0.4.3.20 FR-4 — for refresh-before-serialize on manual snapshots.
+        resumeMetadataRefresher: c.get("resumeMetadataRefresher"),
+        sessionRegistry: c.get("sessionRegistry"),
+    };
+}
+// POST /api/rigs/:rigId/snapshots
+snapshotsRoutes.post("/", async (c) => {
+    const rigId = c.req.param("rigId");
+    const body = await c.req.json().catch(() => ({}));
+    const kind = typeof body["kind"] === "string" ? body["kind"] : "manual";
+    const { snapshotCapture, resumeMetadataRefresher, sessionRegistry } = getDeps(c);
+    try {
+        // OPR.0.4.3.20 FR-4 — refresh live tokens before serialize, in its OWN
+        // try/catch so a refresh throw NEVER skips the snapshot (guard caveat).
+        if (resumeMetadataRefresher && sessionRegistry) {
+            try {
+                // fillNullOnly: a routine snapshot refresh fills null tokens (lightweight
+                // sidecar/pid-log reads) but NEVER clears a present token nor spawns a
+                // `claude --resume` probe (rev1 fix — keep stale-present for FR-6, no
+                // recurring probe blast radius).
+                await resumeMetadataRefresher.refresh(sessionRegistry.getLatestLiveSessions(rigId), { fillNullOnly: true });
+            }
+            catch { /* best-effort — the snapshot still writes below */ }
+        }
+        const snapshot = snapshotCapture.captureSnapshot(rigId, kind);
+        return c.json(snapshot, 201);
+    }
+    catch (err) {
+        if (err instanceof RigNotFoundError) {
+            return c.json({ error: err.message }, 404);
+        }
+        return c.json({ error: "Failed to capture snapshot" }, 500);
+    }
+});
+// GET /api/rigs/:rigId/snapshots
+snapshotsRoutes.get("/", (c) => {
+    const rigId = c.req.param("rigId");
+    const { snapshotRepo } = getDeps(c);
+    return c.json(snapshotRepo.listSnapshots(rigId));
+});
+// GET /api/rigs/:rigId/snapshots/:id
+snapshotsRoutes.get("/:id", (c) => {
+    const rigId = c.req.param("rigId");
+    const id = c.req.param("id");
+    const { snapshotRepo } = getDeps(c);
+    const snapshot = snapshotRepo.getSnapshot(id);
+    if (!snapshot || snapshot.rigId !== rigId) {
+        return c.json({ error: "Snapshot not found" }, 404);
+    }
+    return c.json(snapshot);
+});
+// POST /api/rigs/:rigId/restore/:snapshotId
+//
+// L3: returns `{ ok: true, attemptId, status: "started", rigId }` AS SOON AS the
+// orchestrator has emitted `restore.started`, BEFORE per-node restore work
+// completes. The persisted `restore.started` event seq IS the attempt id
+// (Decision 1: no separate restore_attempts table). Per-node work continues in
+// the background; clients query event log / node inventory to follow progress.
+//
+// Pre-restore validation failures and other "couldn't even start" errors return
+// the original error payloads with appropriate HTTP status codes (404/409/500),
+// because in those cases no `restore.started` event was emitted.
+restoreRoutes.post("/:snapshotId", async (c) => {
+    const rigId = c.req.param("rigId");
+    const snapshotId = c.req.param("snapshotId");
+    const { snapshotRepo, restoreOrchestrator } = getDeps(c);
+    // Cross-rig guard: verify snapshot belongs to this rig
+    const snapshot = snapshotRepo.getSnapshot(snapshotId);
+    if (!snapshot || snapshot.rigId !== rigId) {
+        return c.json({ error: "Snapshot not found" }, 404);
+    }
+    const adapters = c.get("runtimeAdapters");
+    const fs = await import("node:fs");
+    return new Promise((resolve) => {
+        let resolved = false;
+        const restorePromise = restoreOrchestrator.restore(snapshotId, {
+            adapters: adapters ?? {},
+            fsOps: { exists: (p) => fs.existsSync(p) },
+            onAttemptStarted: (attemptId) => {
+                if (resolved)
+                    return;
+                resolved = true;
+                // Per-node restore work runs in background; client receives attemptId
+                // immediately and can poll /api/events or node inventory for progress.
+                resolve(c.json({ ok: true, attemptId, status: "started", rigId }, 202));
+            },
+        });
+        restorePromise
+            .then((outcome) => {
+            if (resolved) {
+                // Background path: response already sent. Per-node failures are in
+                // the event log; no need to do anything here.
+                return;
+            }
+            // Pre-restore-started error path: no `restore.started` was emitted, so
+            // the route should respond with the original error mapping.
+            resolved = true;
+            if (!outcome.ok) {
+                if (outcome.code === "pre_restore_validation_failed") {
+                    resolve(c.json({
+                        error: outcome.message,
+                        code: outcome.code,
+                        ...outcome.result,
+                        remediation: outcome.result.blockers?.map((blocker) => blocker.remediation) ?? [],
+                    }, 409));
+                    return;
+                }
+                const status = outcome.code === "snapshot_not_found" || outcome.code === "rig_not_found"
+                    ? 404
+                    : outcome.code === "restore_in_progress" || outcome.code === "rig_not_stopped"
+                        ? 409
+                        : 500;
+                resolve(c.json({ error: outcome.message, code: outcome.code }, status));
+                return;
+            }
+            // Defensive: outcome.ok with no onAttemptStarted firing means the
+            // orchestrator emitted restore.started but the callback was somehow
+            // bypassed. Surface the result anyway with a synthesized attemptId.
+            resolve(c.json({ ok: true, attemptId: -1, status: "completed", rigId, result: outcome.result }, 200));
+        })
+            .catch((err) => {
+            if (resolved)
+                return;
+            resolved = true;
+            resolve(c.json({
+                error: err instanceof Error ? err.message : String(err),
+                code: "restore_error",
+            }, 500));
+        });
+    });
+});
+//# sourceMappingURL=snapshots.js.map