@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/domain/context-packs/context-pack-types.d.ts

@@ -0,0 +1,64 @@
+export interface ContextPackManifestFile {
+    /** Relative path within the pack directory. */
+    path: string;
+    /** Free-form operator-defined role (e.g., "prd", "proof-packet",
+     *  "architecture-brief"); closed enum at v1+ if patterns emerge. */
+    role: string;
+    /** One-line description rendered in the review pane and bundle frame. */
+    summary?: string;
+}
+export interface ContextPackManifest {
+    name: string;
+    version: string;
+    purpose?: string;
+    files: ContextPackManifestFile[];
+    /** Operator-supplied estimate (used as a hint when no per-file
+     *  estimate is available); the library service computes a derived
+     *  `derivedEstimatedTokens` from actual file sizes for display. */
+    estimatedTokens?: number;
+}
+export type ContextPackSourceType = "builtin" | "user_file" | "workspace";
+/** Library-shaped record emitted by ContextPackLibraryService. */
+export interface ContextPackEntry {
+    /** Stable identifier for routes / UI navigation:
+     *  `context-pack:<name>:<version>`. */
+    id: string;
+    kind: "context-pack";
+    name: string;
+    version: string;
+    purpose: string | null;
+    sourceType: ContextPackSourceType;
+    /** Absolute path to the pack directory. */
+    sourcePath: string;
+    /** Path relative to the discovery root that found this pack. */
+    relativePath: string;
+    /** ISO timestamp of the most recent mtime under the pack dir
+     *  (manifest.yaml or any included file — whichever is newer). */
+    updatedAt: string;
+    /** Operator-supplied estimate from the manifest, or null. */
+    manifestEstimatedTokens: number | null;
+    /** Daemon-derived estimate from actual file sizes (chars / 4
+     *  rounded — matches the existing context-usage convention). */
+    derivedEstimatedTokens: number;
+    /** Per-file metadata projected from the manifest + on-disk reads. */
+    files: ContextPackEntryFile[];
+}
+export interface ContextPackEntryFile {
+    path: string;
+    role: string;
+    summary: string | null;
+    /** Absolute path to the file on disk; null when manifest references
+     *  a file that doesn't exist (the entry surfaces honestly with
+     *  bytes=null instead of refusing to index). */
+    absolutePath: string | null;
+    /** File size in bytes; null when missing or unreadable. */
+    bytes: number | null;
+    /** Daemon-derived per-file token estimate (chars / 4 rounded). */
+    estimatedTokens: number | null;
+}
+export declare class ContextPackError extends Error {
+    readonly code: "manifest_missing" | "manifest_parse_error" | "manifest_invalid" | "pack_not_found" | "file_outside_pack" | "file_read_failed" | "unsafe_ref" | "missing_files" | "pack_exists" | "pack_ref_below_pack" | "unsafe_ref_namespace" | "pack_write_failed" | "store_unavailable" | "pack_not_removable";
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(code: "manifest_missing" | "manifest_parse_error" | "manifest_invalid" | "pack_not_found" | "file_outside_pack" | "file_read_failed" | "unsafe_ref" | "missing_files" | "pack_exists" | "pack_ref_below_pack" | "unsafe_ref_namespace" | "pack_write_failed" | "store_unavailable" | "pack_not_removable", message: string, details?: Record<string, unknown> | undefined);
+}
+//# sourceMappingURL=context-pack-types.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/context-pack-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-pack-types.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/context-pack-types.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb;wEACoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,uBAAuB,EAAE,CAAC;IACjC;;uEAEmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;AAE1E,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B;2CACuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,qBAAqB,CAAC;IAClC,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB;qEACiE;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC;oEACgE;IAChE,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,KAAK,EAAE,oBAAoB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;oDAEgD;IAChD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2DAA2D;IAC3D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,kEAAkE;IAClE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAChB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,GAGlB,YAAY,GAEZ,eAAe,GACf,aAAa,GACb,qBAAqB,GACrB,sBAAsB,GACtB,mBAAmB,GACnB,mBAAmB,GAInB,oBAAoB;aAER,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAtBjC,IAAI,EAChB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,GAClB,gBAAgB,GAChB,mBAAmB,GACnB,kBAAkB,GAGlB,YAAY,GAEZ,eAAe,GACf,aAAa,GACb,qBAAqB,GACrB,sBAAsB,GACtB,mBAAmB,GACnB,mBAAmB,GAInB,oBAAoB,EACxB,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD"}

package/node_modules/@openrig/daemon/dist/domain/context-packs/context-pack-types.js

@@ -0,0 +1,22 @@
+// Rig Context / Composable Context Injection v0 (PL-014) — typed primitive
+// shared types.
+//
+// A context_pack is a directory containing `manifest.yaml` + included
+// markdown / yaml / txt files. Operator-authored, library-discoverable,
+// reviewable, sendable. Parallel to skills + workflow_specs in shape.
+//
+// MVP single-host context: storage filesystem-canonical at
+// ~/.openrig/context-packs/<name>/ (host) + workspace-local
+// .openrig/context-packs/<name>/. NO new SQLite tables; library cache
+// is in-memory at the daemon scope.
+export class ContextPackError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = "ContextPackError";
+    }
+}
+//# sourceMappingURL=context-pack-types.js.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/context-pack-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-pack-types.js","sourceRoot":"","sources":["../../../src/domain/context-packs/context-pack-types.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gBAAgB;AAChB,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,sEAAsE;AACtE,EAAE;AACF,2DAA2D;AAC3D,4DAA4D;AAC5D,sEAAsE;AACtE,oCAAoC;AAiEpC,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IAsBA;IAvBlB,YACkB,IAoBQ,EACxB,OAAe,EACC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAxBC,SAAI,GAAJ,IAAI,CAoBI;QAER,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/context-packs/manifest-parser.d.ts

@@ -0,0 +1,3 @@
+import { type ContextPackManifest } from "./context-pack-types.js";
+export declare function parseManifest(rawYaml: string, sourcePath: string): ContextPackManifest;
+//# sourceMappingURL=manifest-parser.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/manifest-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-parser.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/manifest-parser.ts"],"names":[],"mappings":"AAQA,OAAO,EAAoB,KAAK,mBAAmB,EAAgC,MAAM,yBAAyB,CAAC;AAKnH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,mBAAmB,CA0HtF"}

package/node_modules/@openrig/daemon/dist/domain/context-packs/manifest-parser.js

@@ -0,0 +1,85 @@
+// Rig Context / Composable Context Injection v0 (PL-014) — manifest
+// parser.
+//
+// Parses ~/.openrig/context-packs/<name>/manifest.yaml into a typed
+// shape with structured-error rejects on malformed input. Pure
+// (no fs touches in the parser itself; caller hands in raw YAML).
+import { parse as parseYaml } from "yaml";
+import { ContextPackError } from "./context-pack-types.js";
+import { isSafePackVersion } from "./ref-safety.js";
+const ALLOWED_FILE_SUFFIXES = [".md", ".markdown", ".yaml", ".yml", ".txt"];
+export function parseManifest(rawYaml, sourcePath) {
+    let parsed;
+    try {
+        parsed = parseYaml(rawYaml);
+    }
+    catch (err) {
+        throw new ContextPackError("manifest_parse_error", `manifest at ${sourcePath} is not valid YAML: ${err.message}`, { sourcePath });
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} must be a YAML object at the root`, { sourcePath });
+    }
+    const obj = parsed;
+    const name = obj["name"];
+    if (typeof name !== "string" || name.length === 0) {
+        throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'name' (string)`, { sourcePath });
+    }
+    // Version may be a number or string in YAML; normalize to string for
+    // round-tripping with library ids and `<name>:<version>` formatting.
+    const versionRaw = obj["version"];
+    if (versionRaw === undefined || versionRaw === null) {
+        throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'version'`, { sourcePath });
+    }
+    const version = String(versionRaw);
+    // Slice-03 lineage repair (R2 HIGH-2): enforce the bounded, delimiter-free
+    // version predicate at the ingestion chokepoint — a colon-bearing version
+    // forges a `<name>:<version>` store id and an overlong one breaches the OS
+    // filename bound. Rejecting here covers every scan/install path that flows
+    // through the parser.
+    if (!isSafePackVersion(version)) {
+        throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} has an invalid version '${version}' — a version must be a single bounded token ` +
+            `[A-Za-z0-9][A-Za-z0-9._+-]{0,31} (no ':' or other separator, no whitespace, ≤32 chars) so it cannot ` +
+            `forge a '<name>:<version>' store id or breach the OS filename bound.`, { sourcePath });
+    }
+    const purpose = typeof obj["purpose"] === "string" ? obj["purpose"] : undefined;
+    const filesRaw = obj["files"];
+    if (!Array.isArray(filesRaw)) {
+        throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} must declare 'files: [...]' (got: ${typeof filesRaw})`, { sourcePath });
+    }
+    const files = [];
+    for (let i = 0; i < filesRaw.length; i++) {
+        const f = filesRaw[i];
+        if (!f || typeof f !== "object" || Array.isArray(f)) {
+            throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} has malformed entry at files[${i}] (must be an object with 'path' + 'role')`, { sourcePath, index: i });
+        }
+        const fr = f;
+        const path = fr["path"];
+        if (typeof path !== "string" || path.length === 0) {
+            throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} files[${i}] missing 'path' (string)`, { sourcePath, index: i });
+        }
+        if (path.includes("..") || path.startsWith("/")) {
+            throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} files[${i}].path '${path}' must be a relative path inside the pack (no '..' segments, no leading '/')`, { sourcePath, index: i, path });
+        }
+        const role = fr["role"];
+        if (typeof role !== "string" || role.length === 0) {
+            throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} files[${i}] missing 'role' (string)`, { sourcePath, index: i, path });
+        }
+        if (!ALLOWED_FILE_SUFFIXES.some((s) => path.endsWith(s))) {
+            throw new ContextPackError("manifest_invalid", `manifest at ${sourcePath} files[${i}].path '${path}' has an unsupported suffix; allowed: ${ALLOWED_FILE_SUFFIXES.join(", ")}`, { sourcePath, index: i, path });
+        }
+        const summary = typeof fr["summary"] === "string" ? fr["summary"] : undefined;
+        files.push(summary === undefined ? { path, role } : { path, role, summary });
+    }
+    const estimatedTokensRaw = obj["estimated_tokens"] ?? obj["estimatedTokens"];
+    const estimatedTokens = typeof estimatedTokensRaw === "number" && Number.isFinite(estimatedTokensRaw)
+        ? Math.max(0, Math.floor(estimatedTokensRaw))
+        : undefined;
+    return {
+        name,
+        version,
+        ...(purpose !== undefined ? { purpose } : {}),
+        files,
+        ...(estimatedTokens !== undefined ? { estimatedTokens } : {}),
+    };
+}
+//# sourceMappingURL=manifest-parser.js.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/manifest-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-parser.js","sourceRoot":"","sources":["../../../src/domain/context-packs/manifest-parser.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,UAAU;AACV,EAAE;AACF,oEAAoE;AACpE,+DAA+D;AAC/D,kEAAkE;AAElE,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAA0D,MAAM,yBAAyB,CAAC;AACnH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE5E,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,UAAkB;IAC/D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CACxB,sBAAsB,EACtB,eAAe,UAAU,uBAAwB,GAAa,CAAC,OAAO,EAAE,EACxE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,oCAAoC,EAC7D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,4CAA4C,EACrE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,sCAAsC,EAC/D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACnC,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,sBAAsB;IACtB,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,4BAA4B,OAAO,+CAA+C;YACzG,sGAAsG;YACtG,sEAAsE,EACxE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5F,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,sCAAsC,OAAO,QAAQ,GAAG,EACjF,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,iCAAiC,CAAC,4CAA4C,EACvG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,CAA4B,CAAC;QACxC,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,2BAA2B,EAC/D,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,8EAA8E,EACjI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,2BAA2B,EAC/D,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,gBAAgB,CACxB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,yCAAyC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9H,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,OAAO,kBAAkB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACnG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,IAAI;QACJ,OAAO;QACP,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,KAAK;QACL,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/context-packs/ref-safety.d.ts

@@ -0,0 +1,11 @@
+/**
+ * A path-like pack ref is one or more `/`-separated segments, each a safe segment. Empty ref, an
+ * absolute path (empty leading segment), a double/trailing slash (empty segment), a '.'/'..'
+ * traversal segment, or any injection char in a segment → NOT safe.
+ */
+export declare function isSafePackRef(ref: string): boolean;
+/** Throwing form for write/resolve sites — packs must stay inside the context store root. */
+export declare function assertSafePackRef(ref: string): void;
+/** A pack version must be a single bounded token (no separators, whitespace, '@', or ':'). */
+export declare function isSafePackVersion(version: string): boolean;
+//# sourceMappingURL=ref-safety.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/ref-safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ref-safety.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/ref-safety.ts"],"names":[],"mappings":"AAkBA;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAQlD;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAQnD;AAED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE1D"}

package/node_modules/@openrig/daemon/dist/domain/context-packs/ref-safety.js

@@ -0,0 +1,46 @@
+// Slice-03 rig-context v1 (OPR.0.5.0.3) — the addressing-contract hardening (§2 "the ONE thing
+// that must be right"). Salvaged from the frozen candidate (assertSafePackName @ 37972eb6,
+// isSafePackVersion @ b10c1618) with the mandated BEND: refs are PATH-LIKE MULTI-SEGMENT, so the
+// single-component name check becomes a PER-SEGMENT check over the same charset. This keeps every
+// hardening property (no traversal, no absolute, no empty segment, no whitespace/YAML/id injection)
+// while enabling `packs/compaction-restore`-style refs. The version token stays a bounded,
+// delimiter-free single token (fixes R2 (a) ENAMETOOLONG + the store-id half of (b)).
+// One safe path segment: the salvaged charset allowlist (leading alnum, then alnum/._-; ≤64 chars).
+// The allowlist alone bans '/', whitespace, ':' , newlines, quotes — every traversal + YAML/id
+// injection vector — and its leading-alnum rule rejects '.', '..' and dotfiles.
+const SAFE_SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+// Bounded, delimiter-free version token — salvaged VERBATIM from checkpoint b10c1618
+// (manifest-parser.ts). The ≤32-char cap keeps `${name}-${version}.md` well under the OS 255-byte
+// filename limit, and the charset admits no separator that could forge a store id.
+const SAFE_VERSION = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,31}$/;
+/**
+ * A path-like pack ref is one or more `/`-separated segments, each a safe segment. Empty ref, an
+ * absolute path (empty leading segment), a double/trailing slash (empty segment), a '.'/'..'
+ * traversal segment, or any injection char in a segment → NOT safe.
+ */
+export function isSafePackRef(ref) {
+    if (ref.length === 0)
+        return false;
+    for (const segment of ref.split("/")) {
+        if (segment.length === 0)
+            return false; // absolute leading, interior '//', or trailing '/'
+        if (segment === "." || segment === "..")
+            return false; // defensive (SAFE_SEGMENT already bans them)
+        if (!SAFE_SEGMENT.test(segment))
+            return false;
+    }
+    return true;
+}
+/** Throwing form for write/resolve sites — packs must stay inside the context store root. */
+export function assertSafePackRef(ref) {
+    if (!isSafePackRef(ref)) {
+        throw new Error(`unsafe pack ref '${ref}' — a ref must be one or more '/'-separated segments, each matching ` +
+            `[A-Za-z0-9][A-Za-z0-9._-]{0,63} (no '.'/'..' , no absolute path, no empty segment, no ` +
+            `whitespace or injection), so packs stay inside the context store root.`);
+    }
+}
+/** A pack version must be a single bounded token (no separators, whitespace, '@', or ':'). */
+export function isSafePackVersion(version) {
+    return SAFE_VERSION.test(version);
+}
+//# sourceMappingURL=ref-safety.js.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/ref-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ref-safety.js","sourceRoot":"","sources":["../../../src/domain/context-packs/ref-safety.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,2FAA2F;AAC3F,iGAAiG;AACjG,kGAAkG;AAClG,oGAAoG;AACpG,2FAA2F;AAC3F,sFAAsF;AAEtF,oGAAoG;AACpG,+FAA+F;AAC/F,gFAAgF;AAChF,MAAM,YAAY,GAAG,mCAAmC,CAAC;AAEzD,qFAAqF;AACrF,kGAAkG;AAClG,mFAAmF;AACnF,MAAM,YAAY,GAAG,oCAAoC,CAAC;AAE1D;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,mDAAmD;QAC3F,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,CAAC,6CAA6C;QACpG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,oBAAoB,GAAG,sEAAsE;YAC3F,wFAAwF;YACxF,wEAAwE,CAC3E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/context-packs/token-estimate.d.ts

@@ -0,0 +1,3 @@
+/** Cheap stable token estimate shared by store and assembly projections. */
+export declare function estimateTokensFromBytes(bytes: number): number;
+//# sourceMappingURL=token-estimate.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/token-estimate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-estimate.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/token-estimate.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE7D"}

package/node_modules/@openrig/daemon/dist/domain/context-packs/token-estimate.js

@@ -0,0 +1,5 @@
+/** Cheap stable token estimate shared by store and assembly projections. */
+export function estimateTokensFromBytes(bytes) {
+    return Math.ceil(bytes / 4);
+}
+//# sourceMappingURL=token-estimate.js.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/token-estimate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-estimate.js","sourceRoot":"","sources":["../../../src/domain/context-packs/token-estimate.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/context-usage-store.d.ts

@@ -0,0 +1,93 @@
+import Database from "better-sqlite3";
+import type { ContextUsage, ContextUnknownReason } from "./types.js";
+/** Freshness threshold: samples older than this are considered stale for compact displays. */
+export declare const FRESHNESS_THRESHOLD_MS = 600000;
+export interface ContextUsageStoreOpts {
+    stateDir: string;
+    codexHomeDir?: string | null;
+    resolveOccupantBootAt?: (nodeId: string) => string | null;
+}
+interface SidecarRaw {
+    context_window?: {
+        context_window_size?: number;
+        used_percentage?: number;
+        remaining_percentage?: number;
+        total_input_tokens?: number;
+        total_output_tokens?: number;
+        current_usage?: unknown;
+    };
+    session_id?: string;
+    session_name?: string;
+    transcript_path?: string;
+    sampled_at?: string;
+}
+export declare class ContextUsageStore {
+    readonly db: Database.Database;
+    private stateDir;
+    private codexHomeDir;
+    private readonly resolveOccupantBootAt?;
+    constructor(db: Database.Database, opts: ContextUsageStoreOpts);
+    /**
+     * GHOST-STAGE (c-id): is this reading from a generation PRIOR to the node's live occupant?
+     * A reading sampled strictly before the current occupant booted belongs to a retired tenure
+     * (the frozen-88% specimen in the mixed-gen window after handover, where the name is reused so
+     * session_mismatch cannot catch it). Returns false when boot time is UNKNOWN or the reading has
+     * no sampled_at — the gate is inert (note-2: never treat unknown as stale), leaving
+     * session_mismatch + freshness as the remaining guards. Date.parse tolerates the format skew
+     * between the collector's ISO sampled_at and SQLite datetime('now') boot_at.
+     */
+    private isPriorGenerationReading;
+    /** Get the sidecar file path for a session. */
+    getSidecarPath(sessionName: string): string;
+    /**
+     * GHOST-STAGE (e) Class-A 2a: remove a retiring occupant's name-keyed context sidecar so a
+     * same-name successor does not read the predecessor's frozen telemetry sample (the "gen-1 88%
+     * resurfaced as a live threshold flag" specimen). Safe by TIMING — the cutover seam
+     * (OccupantInvalidator) calls this inside SeatHandoverService.commit(), BEFORE the successor
+     * writes its own sidecar. Missing file = no-op; best-effort (a leftover is caught downstream by
+     * the freshness gate). NOTE: this is the DISK sidecar (name-keyed); the context_usage DB table is
+     * node_id-keyed + already session_mismatch-gated, so it needs no invalidation here.
+     */
+    invalidateOccupantSidecar(sessionName: string): void;
+    /** Read and parse a sidecar JSON file. Returns discriminated result. */
+    readSidecar(sessionName: string): {
+        ok: true;
+        data: SidecarRaw;
+    } | {
+        ok: false;
+        reason: "missing_sidecar" | "parse_error";
+    };
+    /** Read sidecar and normalize into ContextUsage in one step. */
+    readAndNormalize(sessionName: string): ContextUsage;
+    /** Read the latest Codex token_count event for a thread and normalize it. */
+    readCodexAndNormalize(input: {
+        threadId: string | null | undefined;
+        sessionName: string;
+    }): ContextUsage;
+    /** Normalize raw sidecar data into a ContextUsage record. */
+    normalizeSample(raw: SidecarRaw | null): ContextUsage;
+    /** Normalize a Codex token_count JSONL event into ContextUsage. */
+    private normalizeCodexTokenCount;
+    /** Persist a context usage record for a node. Upserts. */
+    persist(nodeId: string, usage: ContextUsage): void;
+    /** Get context usage for a single node. Session-aware: mismatched session returns unknown. */
+    getForNode(nodeId: string, currentSessionName: string | null): ContextUsage;
+    /** Batch get context usage for multiple nodes. Session-aware per entry. */
+    getForNodes(entries: Array<{
+        nodeId: string;
+        currentSessionName: string | null;
+    }>): Map<string, ContextUsage>;
+    /** Create an unknown ContextUsage with an honest reason. */
+    unknownUsage(reason: ContextUnknownReason): ContextUsage;
+    /** Check if a sample timestamp is fresh. */
+    private isFresh;
+    /** Convert a DB row to a ContextUsage, applying freshness. */
+    private rowToUsage;
+    private normalizeCurrentUsage;
+    private readCodexThread;
+    private resolveCodexStateDbPaths;
+    private readLatestCodexTokenCount;
+    private readTail;
+}
+export {};
+//# sourceMappingURL=context-usage-store.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/context-usage-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-usage-store.d.ts","sourceRoot":"","sources":["../../src/domain/context-usage-store.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAItC,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAErE,8FAA8F;AAC9F,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAE9C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAI7B,qBAAqB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC3D;AAED,UAAU,UAAU;IAClB,cAAc,CAAC,EAAE;QACf,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA0CD,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAAgB;IAEpC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAoC;gBAC/D,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,qBAAqB;IAO9D;;;;;;;;OAQG;IACH,OAAO,CAAC,wBAAwB;IAUhC,+CAA+C;IAC/C,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAM3C;;;;;;;;OAQG;IACH,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IASpD,wEAAwE;IACxE,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa,CAAA;KAAE;IAY3H,gEAAgE;IAChE,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY;IAMnD,6EAA6E;IAC7E,qBAAqB,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,YAAY;IAkBxG,6DAA6D;IAC7D,eAAe,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,GAAG,YAAY;IA+BrD,mEAAmE;IACnE,OAAO,CAAC,wBAAwB;IA4ChC,0DAA0D;IAC1D,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI;IAyClD,8FAA8F;IAC9F,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY;IAqB3E,2EAA2E;IAC3E,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC;IA0C7G,4DAA4D;IAC5D,YAAY,CAAC,MAAM,EAAE,oBAAoB,GAAG,YAAY;IAmBxD,4CAA4C;IAC5C,OAAO,CAAC,OAAO;IASf,8DAA8D;IAC9D,OAAO,CAAC,UAAU;IAoBlB,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,wBAAwB;IA8BhC,OAAO,CAAC,yBAAyB;IAsBjC,OAAO,CAAC,QAAQ;CAajB"}