@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/domain/model-divergence/effective-model-readers.js

@@ -0,0 +1,163 @@
+// B8 / slice-07 A3 — per-runtime EFFECTIVE-model reads (the load-bearing signal).
+//
+// The detector compares effective vs pinned; these readers own "effective". Both specimens proved
+// the REQUESTED echo lies (the codex banner kept naming the pinned model while the footer ran a
+// fallback), so each read comes from the runtime's own record of what is actually answering:
+//   - claude-code: the last assistant message's `message.model` in the provider transcript — the
+//     API response names the model that produced it. Absent until the seat's first assistant turn.
+//   - codex: the latest `world_state` event's `collaboration_mode.model` in the rollout.
+//
+// BOUNDED READS by contract: provider records on live seats reach hundreds of MB (a whole-file
+// readFileSync throws ERR_STRING_TOO_LONG past ~0.5GB and stalls the loop long before that — the
+// B12 lesson). The claude signal recurs every assistant turn, so a single 512KB tail always holds
+// it on a live seat. The codex world_state is SPARSE (r1 measured a 65.9MB rollout whose newest
+// record sat 0.80MB from EOF — outside one tail window), so the codex reader scans BACKWARD in
+// tail-sized chunks up to MAX_SCAN_BYTES. A signal older than the scan cap reads as null (honest
+// UNKNOWN — the detector reports it as observable pending), never a guess.
+import { openSync, readSync, closeSync, fstatSync } from "node:fs";
+const TAIL_BYTES = 512 * 1024;
+const MAX_SCAN_BYTES = 8 * 1024 * 1024;
+/** Read at most the last TAIL_BYTES of a file as utf-8, split into whole lines (the first,
+ *  possibly-truncated line is dropped). Missing/unreadable → []. */
+export function readTailLines(path, tailBytes = TAIL_BYTES) {
+    let fd;
+    try {
+        fd = openSync(path, "r");
+    }
+    catch {
+        return [];
+    }
+    try {
+        const size = fstatSync(fd).size;
+        const start = Math.max(0, size - tailBytes);
+        const buf = Buffer.alloc(size - start);
+        readSync(fd, buf, 0, buf.length, start);
+        const lines = buf.toString("utf-8").split("\n");
+        if (start > 0)
+            lines.shift(); // first line may be cut mid-record
+        return lines;
+    }
+    catch {
+        return [];
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** The model that produced the seat's newest assistant turn, or null when no turn is in the tail
+ *  window (a just-launched seat has none — the detector treats null as PENDING, not as a match). */
+export function readClaudeEffectiveModel(transcriptPath) {
+    const lines = readTailLines(transcriptPath);
+    for (let i = lines.length - 1; i >= 0; i--) {
+        const line = lines[i];
+        if (!line.includes('"assistant"') || !line.includes('"model"'))
+            continue;
+        try {
+            const obj = JSON.parse(line);
+            if (obj.message?.role === "assistant" && typeof obj.message.model === "string" && obj.message.model.length > 0) {
+                return obj.message.model;
+            }
+        }
+        catch {
+            /* corrupt line — keep scanning */
+        }
+    }
+    return null;
+}
+function newestCodexModel(lines) {
+    for (let i = lines.length - 1; i >= 0; i--) {
+        const line = lines[i];
+        // PRIMARY: turn_context.payload.model — preferred for DENSITY, not existence. (~~"old July-era
+        // records carry NO collaboration_mode"~~ — WRONG, r1 measured 14/72 world_states carrying it in
+        // the same July file; the truth is collaboration_mode is SPARSE WITHIN world_state, while
+        // turn_context.model recurs every turn — 232 occurrences in that file — so it sits near EOF on
+        // any live seat. A reader deciding whether the world_state belt can be dropped: it cannot; both
+        // signals are real, turn_context is just denser.)
+        if (line.includes('"turn_context"')) {
+            try {
+                const obj = JSON.parse(line);
+                if (obj.type === "turn_context") {
+                    const model = obj.payload?.model;
+                    if (typeof model === "string" && model.length > 0)
+                        return model;
+                }
+            }
+            catch {
+                /* corrupt line — keep scanning */
+            }
+        }
+        // BELT: world_state.collaboration_mode.model (the new-format state snapshot).
+        if (line.includes('"world_state"')) {
+            try {
+                const obj = JSON.parse(line);
+                if (obj.type === "world_state") {
+                    const model = obj.payload?.state?.collaboration_mode?.model;
+                    if (typeof model === "string" && model.length > 0)
+                        return model;
+                }
+            }
+            catch {
+                /* corrupt line — keep scanning */
+            }
+        }
+    }
+    return null;
+}
+/** The codex runtime's own current model per its NEWEST turn_context (primary; both rollout
+ *  formats) or world_state collaboration_mode (belt). Scans backward from EOF in tail-sized
+ *  windows up to MAX_SCAN_BYTES: the signal is sparse relative to bulk event lines (r1's live
+ *  census put records 0.4-0.8MB from EOF on the big rollouts), so one tail window is not always
+ *  enough, but 8MB bounds the read far under the loop-stall class. */
+export function readCodexEffectiveModel(rolloutPath, maxScanBytes = MAX_SCAN_BYTES) {
+    let fd;
+    try {
+        fd = openSync(rolloutPath, "r");
+    }
+    catch {
+        return null;
+    }
+    try {
+        const size = fstatSync(fd).size;
+        const scanFloor = Math.max(0, size - maxScanBytes);
+        let end = size;
+        while (end > scanFloor) {
+            const start = Math.max(scanFloor, end - TAIL_BYTES);
+            const buf = Buffer.alloc(end - start);
+            readSync(fd, buf, 0, buf.length, start);
+            const lines = buf.toString("utf-8").split("\n");
+            // The first line may be a record's TAIL cut at the window boundary. Drop it here — and size
+            // the next window to END just past that fragment, so the straddling record is re-read WHOLE
+            // from its own line start. A fixed small overlap loses any straddler longer than it (r1
+            // proved a 20KB record vanishing over a 4KB overlap — and a lost straddler usually means a
+            // STALE model read, the exact silence this detector exists to end; real world_state records
+            // reach ~22KB). Sizing from the dropped fragment makes the overlap exact by construction.
+            let droppedBytes = 0;
+            if (start > 0 && lines.length > 0) {
+                droppedBytes = Buffer.byteLength(lines[0], "utf-8");
+                lines.shift();
+            }
+            const model = newestCodexModel(lines);
+            if (model !== null)
+                return model;
+            if (start === scanFloor)
+                break;
+            // Fragment-sized step-back — UNLESS the fragment fills the whole window (a single line wider
+            // than 512KB: real, r1 measured 44 such lines on this box, longest 8.2MB). In that case
+            // `start + droppedBytes + 1` would be ≥ end and the old `min(end - 1, …)` guard degraded to
+            // ONE-BYTE steps re-reading 512KB each — r1 measured a 6MB file grinding past 30s
+            // (extrapolated ~1.4TB of reads) on the exact deep-scan file the cap exists to serve. When
+            // fragment sizing yields no progress, step a FULL window instead: the giant line cannot be
+            // recovered whole either way (the accepted tradeoff), but the scan terminates.
+            const next = start + droppedBytes + 1;
+            end = next < end ? next : start;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+//# sourceMappingURL=effective-model-readers.js.map

package/node_modules/@openrig/daemon/dist/domain/model-divergence/effective-model-readers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effective-model-readers.js","sourceRoot":"","sources":["../../../src/domain/model-divergence/effective-model-readers.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,6FAA6F;AAC7F,iGAAiG;AACjG,mGAAmG;AACnG,yFAAyF;AACzF,EAAE;AACF,+FAA+F;AAC/F,iGAAiG;AACjG,kGAAkG;AAClG,gGAAgG;AAChG,+FAA+F;AAC/F,iGAAiG;AACjG,2EAA2E;AAE3E,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEnE,MAAM,UAAU,GAAG,GAAG,GAAG,IAAI,CAAC;AAC9B,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC;oEACoE;AACpE,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,SAAS,GAAG,UAAU;IAChE,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;QACvC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,KAAK,GAAG,CAAC;YAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,mCAAmC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,wBAAwB,CAAC,cAAsB;IAC7D,MAAM,KAAK,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QACzE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsE,CAAC;YAClG,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,KAAK,WAAW,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/G,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe;IACvC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,+FAA+F;QAC/F,gGAAgG;QAChG,0FAA0F;QAC1F,+FAA+F;QAC/F,gGAAgG;QAChG,kDAAkD;QAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsD,CAAC;gBAClF,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBAChC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;oBACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;wBAAE,OAAO,KAAK,CAAC;gBAClE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC;QACD,8EAA8E;QAC9E,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAG1B,CAAC;gBACF,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,CAAC;oBAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;wBAAE,OAAO,KAAK,CAAC;gBAClE,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;sEAIsE;AACtE,MAAM,UAAU,uBAAuB,CAAC,WAAmB,EAAE,YAAY,GAAG,cAAc;IACxF,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,YAAY,CAAC,CAAC;QACnD,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,OAAO,GAAG,GAAG,SAAS,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;YACtC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChD,4FAA4F;YAC5F,4FAA4F;YAC5F,wFAAwF;YACxF,2FAA2F;YAC3F,4FAA4F;YAC5F,0FAA0F;YAC1F,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,CAAC;gBACrD,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;YACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;YACjC,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM;YAC/B,6FAA6F;YAC7F,wFAAwF;YACxF,4FAA4F;YAC5F,kFAAkF;YAClF,2FAA2F;YAC3F,2FAA2F;YAC3F,+EAA+E;YAC/E,MAAM,IAAI,GAAG,KAAK,GAAG,YAAY,GAAG,CAAC,CAAC;YACtC,GAAG,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAClC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/model-divergence/model-divergence-monitor.d.ts

@@ -0,0 +1,113 @@
+export interface PinnedSeat {
+    nodeId: string;
+    sessionName: string;
+    rigId: string;
+    rigName: string;
+    runtime: string | null;
+    pinnedModel: string;
+    /** Occupant generation (null = unknown; falls back to sessionName grain). */
+    generation: string | null;
+}
+export interface ChannelOutcome {
+    channel: "orchestrator" | "operator" | "oversight" | "slack";
+    target: string | null;
+    status: "delivered" | "failed" | "deferred";
+    detail?: string;
+}
+export interface ModelDivergenceProclamation {
+    nodeId: string;
+    sessionName: string;
+    rigId: string;
+    rigName: string;
+    runtime: string | null;
+    pinnedModel: string;
+    effectiveModel: string;
+    diagnosis: string | null;
+    detectedAt: string;
+    channels: ChannelOutcome[];
+}
+/** D-a — the effective read carries a NAMED reason on every no-answer outcome, and may be async
+ *  (the current-generation join reads the live process table). */
+export type EffectiveModelRead = {
+    ok: true;
+    model: string;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface ModelDivergenceMonitorDeps {
+    /** Every running canonical seat carrying a model pin (the detector's whole population). */
+    listPinnedSeats: () => PinnedSeat[];
+    /** Per-runtime effective read via the CURRENT GENERATION's own record (D-a: never a name/token
+     *  lookup that can silently cross a generation boundary). No-answer = named reason = pending. */
+    readEffectiveModel: (seat: PinnedSeat) => Promise<EffectiveModelRead> | EffectiveModelRead;
+    /** In-daemon send to a session (the watchdog delivery seam). */
+    sendToSession: (sessionName: string, message: string) => Promise<{
+        ok: boolean;
+        error?: string;
+    }>;
+    /** The seat's own rig's orchestrator seats (session names). */
+    resolveOrchSeats: (rigName: string) => string[];
+    /** The configured operator seat (derived from config, never hardcoded). Null = unconfigured. */
+    resolveOperatorSeat: () => string | null;
+    /** The fleet oversight judgment seat (cross-host target), or null when unroutable. */
+    resolveOversightSeat: () => string | null;
+    /** Durable record of the proclamation + its per-channel outcomes. */
+    recordProclamation: (p: ModelDivergenceProclamation) => void;
+    /** Optional cause string when a rejection signal is known (diagnosis, NEVER the trigger). */
+    diagnose?: (seat: PinnedSeat) => string | null;
+    now?: () => Date;
+    warn?: (message: string) => void;
+}
+export declare const SLACK_DEFERRAL_LINE = "human-via-Slack: deferred: M1 not landed";
+/** Polls a pinned generation may stay signal-less before it is loudly named as unchecked. */
+export declare const PENDING_VISIBILITY_POLLS = 10;
+export declare function formatProclamation(p: Omit<ModelDivergenceProclamation, "channels">): string;
+export declare class ModelDivergenceMonitor {
+    private readonly deps;
+    /** Generations already given their one verdict (match or proclaimed divergence). */
+    private readonly settled;
+    /** r1 B8 finding — OBSERVABLE PENDING: consecutive no-signal polls per generation. Detection
+     *  silence is the failure class one layer under channel silence: a seat whose effective model
+     *  never reads must be VISIBLE as never-checked, not skipped by a bare continue forever. */
+    private readonly pendingPolls;
+    private readonly pendingReasons;
+    private readonly pendingWarned;
+    private timer;
+    private readonly warn;
+    constructor(deps: ModelDivergenceMonitorDeps);
+    startPolling(intervalMs: number): void;
+    stop(): void;
+    /** Pinned generations currently pending (no effective read yet) with their poll counts — the
+     *  observable face of detection-pending (tests + any future status surface). */
+    pendingSeats(): Array<{
+        key: string;
+        polls: number;
+        reason: string | null;
+    }>;
+    /** One pass over the pinned population. Returns the proclamations fired this pass (for tests). */
+    checkOnce(): Promise<ModelDivergenceProclamation[]>;
+    private proclaim;
+    private deliver;
+}
+/** Pin comparison: EXACT, case-insensitive, after trimming. This ruling has now traveled the full
+ *  arc and lands where it started, with the reasons on record: exact was ruled at build; this seat
+ *  reversed it to whole-token alias matching when the live census showed alias pins ("fable") vs
+ *  full effective ids ("claude-fable-5"); r2 REVERSED IT BACK — generic token containment lets one
+ *  pin bless multiple distinct models ("codex" matched gpt-5.6-codex AND gpt-5.1-codex-mini), and
+ *  the ruled remedy is DATA-side: canonicalize the fleet's three alias pins at the spec layer
+ *  (orch's lane, in-wave). TRANSITION HAZARD, named loudly: until pins read canonical, an
+ *  alias-pinned claude seat compares "fable" vs "claude-fable-5" and PROCLAIMS — the detector's
+ *  claude leg must not roll ahead of pin canonicalization. If a transition tolerance is ever
+ *  needed, it is an explicit provider-aware mapping with an expiry, never token containment. */
+export declare function modelsMatch(pinned: string, effective: string): boolean;
+/** MIGRATION BRIDGE (r2 addendum, desk-ruled 05:03Z) — provider-specific, ONE measured pair, with
+ *  a BEHAVIORAL executable expiry (r2 round-4: a filename tripwire is not a coupling — the
+ *  advisory can land inside an existing validator file):
+ *  - condition 2 (dormancy): fires only while a nodes.model row still carries the alias pin.
+ *  - condition 1 (removal): gated at RUNTIME on rigspec-schema's SPEC_VALIDATION_CAPABILITIES —
+ *    when the 5.3 advisory registers "model-pin-canonicalization" there (its registry contract),
+ *    modelsMatch stops consulting this map in code, and the pin test goes RED until the constant
+ *    is deleted. The registry's own doc-comment carries the 5.3 obligation. */
+export declare const CLAUDE_ALIAS_MIGRATION_BRIDGE: Record<string, string>;
+//# sourceMappingURL=model-divergence-monitor.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/model-divergence/model-divergence-monitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-divergence-monitor.d.ts","sourceRoot":"","sources":["../../../src/domain/model-divergence/model-divergence-monitor.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,CAAC;IAC7D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED;kEACkE;AAClE,MAAM,MAAM,kBAAkB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,MAAM,WAAW,0BAA0B;IACzC,2FAA2F;IAC3F,eAAe,EAAE,MAAM,UAAU,EAAE,CAAC;IACpC;qGACiG;IACjG,kBAAkB,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IAC3F,gEAAgE;IAChE,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClG,+DAA+D;IAC/D,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAChD,gGAAgG;IAChG,mBAAmB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACzC,sFAAsF;IACtF,oBAAoB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC1C,qEAAqE;IACrE,kBAAkB,EAAE,CAAC,CAAC,EAAE,2BAA2B,KAAK,IAAI,CAAC;IAC7D,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,MAAM,GAAG,IAAI,CAAC;IAC/C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED,eAAO,MAAM,mBAAmB,6CAA6C,CAAC;AAE9E,6FAA6F;AAC7F,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAE3C,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,2BAA2B,EAAE,UAAU,CAAC,GAAG,MAAM,CAO3F;AAED,qBAAa,sBAAsB;IAYrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAXjC,oFAAoF;IACpF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C;;gGAE4F;IAC5F,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6B;IAC1D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA4B;gBAEpB,IAAI,EAAE,0BAA0B;IAI7D,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAQtC,IAAI,IAAI,IAAI;IAKZ;oFACgF;IAChF,YAAY,IAAI,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAI5E,kGAAkG;IAC5F,SAAS,IAAI,OAAO,CAAC,2BAA2B,EAAE,CAAC;YAoC3C,QAAQ;YA8CR,OAAO;CAUtB;AAED;;;;;;;;;gGASgG;AAChG,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAQtE;AAED;;;;;;;+EAO+E;AAC/E,eAAO,MAAM,6BAA6B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAEhE,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/model-divergence/model-divergence-monitor.js

@@ -0,0 +1,190 @@
+// B8 / slice-07 A3 — MODEL-DIVERGENCE DETECTOR + four-channel proclamation (founder-ruled).
+//
+// DETECT THE DIVERGENCE, NOT THE CAUSES (pm-ruled): the trigger is one comparison — the runtime's
+// EFFECTIVE model vs the seat's PINNED model — at the earliest reliable read. No cause enumeration:
+// specimen #1 was model-invalid (400 silently degraded), specimen #2 was environment-invalid (a
+// missing --add-dir degraded the tier); a 400-handler catches one and misses the other, this
+// comparison catches both. The cause string, when known, rides the proclamation as DIAGNOSIS only.
+//
+// "AT READINESS", operationally: the check ARMS when a pinned seat's occupant generation appears
+// and FIRES at the first reliable effective-model read. A claude seat has no assistant turn at
+// readiness (the effective signal does not exist yet), so the monitor polls and each generation
+// stays PENDING until its runtime produces the signal — then exactly ONE verdict per generation.
+// Every-occurrence semantics live at the generation grain: every new occupant of a diverged seat
+// proclaims again (founder-classed every-occurrence, not digest), while one generation never spams.
+//
+// FOUR CHANNELS, per the desk's target ruling (2026-08-21): orchestrator = the seat's own rig's
+// orch.* seats; operator = the seat resolved from the workspace operator config (derived, never
+// hardcoded — may be cross-host); oversight = the fleet oversight judgment seat (cross-host via the
+// registered route); human-via-Slack = NAMED DEFERRAL ("deferred: M1 not landed") until the M1
+// gateway contract lands — no shadow path. Every channel's delivery OUTCOME is recorded on the
+// proclamation event; an unreachable channel is a named failure/deferral, never a silence.
+import { SPEC_VALIDATION_CAPABILITIES } from "../rigspec-schema.js";
+export const SLACK_DEFERRAL_LINE = "human-via-Slack: deferred: M1 not landed";
+/** Polls a pinned generation may stay signal-less before it is loudly named as unchecked. */
+export const PENDING_VISIBILITY_POLLS = 10;
+export function formatProclamation(p) {
+    return [
+        `MODEL DIVERGENCE on ${p.sessionName}: pinned=${p.pinnedModel} effective=${p.effectiveModel}`,
+        `The seat is RUNNING (graceful degrade held) but on a model nobody chose.`,
+        p.diagnosis ? `Diagnosis (informational): ${p.diagnosis}` : `Diagnosis: none captured — the divergence itself is the trigger.`,
+        `Detected ${p.detectedAt} (runtime ${p.runtime ?? "unknown"}, node ${p.nodeId}).`,
+    ].join("\n");
+}
+export class ModelDivergenceMonitor {
+    deps;
+    /** Generations already given their one verdict (match or proclaimed divergence). */
+    settled = new Set();
+    /** r1 B8 finding — OBSERVABLE PENDING: consecutive no-signal polls per generation. Detection
+     *  silence is the failure class one layer under channel silence: a seat whose effective model
+     *  never reads must be VISIBLE as never-checked, not skipped by a bare continue forever. */
+    pendingPolls = new Map();
+    pendingReasons = new Map();
+    pendingWarned = new Set();
+    timer = null;
+    warn;
+    constructor(deps) {
+        this.deps = deps;
+        this.warn = deps.warn ?? ((m) => console.warn(m));
+    }
+    startPolling(intervalMs) {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => {
+            void this.checkOnce().catch((err) => this.warn(`[model-divergence] check failed: ${err instanceof Error ? err.message : String(err)}`));
+        }, intervalMs);
+        this.timer.unref?.();
+    }
+    stop() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+    }
+    /** Pinned generations currently pending (no effective read yet) with their poll counts — the
+     *  observable face of detection-pending (tests + any future status surface). */
+    pendingSeats() {
+        return [...this.pendingPolls.entries()].map(([key, polls]) => ({ key, polls, reason: this.pendingReasons.get(key) ?? null }));
+    }
+    /** One pass over the pinned population. Returns the proclamations fired this pass (for tests). */
+    async checkOnce() {
+        const fired = [];
+        for (const seat of this.deps.listPinnedSeats()) {
+            const key = `${seat.nodeId}:${seat.generation ?? seat.sessionName}`;
+            if (this.settled.has(key))
+                continue;
+            const read = await this.deps.readEffectiveModel(seat);
+            if (!read.ok) {
+                // PENDING, never assumed — and never invisible: past the threshold this generation is
+                // named ONCE as never-checked (r1 measured real codex rollouts whose signal sat outside
+                // the bounded read; without this line such a seat would be skipped silently forever).
+                const polls = (this.pendingPolls.get(key) ?? 0) + 1;
+                this.pendingPolls.set(key, polls);
+                this.pendingReasons.set(key, read.reason);
+                if (polls >= PENDING_VISIBILITY_POLLS && !this.pendingWarned.has(key)) {
+                    this.pendingWarned.add(key);
+                    this.warn(`[model-divergence] ${seat.sessionName} (pin ${seat.pinnedModel}) has NO effective-model ` +
+                        `read after ${polls} polls — this seat is pinned but UNCHECKED (${read.reason}). ` +
+                        `A divergence here would currently be invisible.`);
+                }
+                continue;
+            }
+            this.pendingPolls.delete(key);
+            this.pendingReasons.delete(key);
+            if (modelsMatch(seat.pinnedModel, read.model)) {
+                this.settled.add(key);
+                continue;
+            }
+            const proclamation = await this.proclaim(seat, read.model);
+            this.settled.add(key);
+            fired.push(proclamation);
+        }
+        return fired;
+    }
+    async proclaim(seat, effectiveModel) {
+        const detectedAt = (this.deps.now?.() ?? new Date()).toISOString();
+        const base = {
+            nodeId: seat.nodeId,
+            sessionName: seat.sessionName,
+            rigId: seat.rigId,
+            rigName: seat.rigName,
+            runtime: seat.runtime,
+            pinnedModel: seat.pinnedModel,
+            effectiveModel,
+            diagnosis: this.deps.diagnose?.(seat) ?? null,
+            detectedAt,
+        };
+        const message = formatProclamation(base);
+        const channels = [];
+        const orchSeats = this.deps.resolveOrchSeats(seat.rigName);
+        if (orchSeats.length === 0) {
+            channels.push({ channel: "orchestrator", target: null, status: "failed", detail: `no orch seats found in rig ${seat.rigName}` });
+        }
+        else {
+            for (const target of orchSeats)
+                channels.push(await this.deliver("orchestrator", target, message));
+        }
+        const operator = this.deps.resolveOperatorSeat();
+        channels.push(operator
+            ? await this.deliver("operator", operator, message)
+            : { channel: "operator", target: null, status: "failed", detail: "no operator seat configured" });
+        const oversight = this.deps.resolveOversightSeat();
+        channels.push(oversight
+            ? await this.deliver("oversight", oversight, message)
+            : { channel: "oversight", target: null, status: "deferred", detail: "deferred: no oversight route registered from this host" });
+        // DS2 (founder-locked transport): Slack rides ONLY the M1 gateway contract. Until M1 lands this
+        // channel refuses loudly with its named deferral — never an improvised shadow path.
+        channels.push({ channel: "slack", target: null, status: "deferred", detail: SLACK_DEFERRAL_LINE });
+        const proclamation = { ...base, channels };
+        try {
+            this.deps.recordProclamation(proclamation);
+        }
+        catch (err) {
+            this.warn(`[model-divergence] proclamation record failed for ${seat.sessionName}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        return proclamation;
+    }
+    async deliver(channel, target, message) {
+        try {
+            const res = await this.deps.sendToSession(target, message);
+            return res.ok
+                ? { channel, target, status: "delivered" }
+                : { channel, target, status: "failed", detail: res.error ?? "send failed" };
+        }
+        catch (err) {
+            return { channel, target, status: "failed", detail: err instanceof Error ? err.message : String(err) };
+        }
+    }
+}
+/** Pin comparison: EXACT, case-insensitive, after trimming. This ruling has now traveled the full
+ *  arc and lands where it started, with the reasons on record: exact was ruled at build; this seat
+ *  reversed it to whole-token alias matching when the live census showed alias pins ("fable") vs
+ *  full effective ids ("claude-fable-5"); r2 REVERSED IT BACK — generic token containment lets one
+ *  pin bless multiple distinct models ("codex" matched gpt-5.6-codex AND gpt-5.1-codex-mini), and
+ *  the ruled remedy is DATA-side: canonicalize the fleet's three alias pins at the spec layer
+ *  (orch's lane, in-wave). TRANSITION HAZARD, named loudly: until pins read canonical, an
+ *  alias-pinned claude seat compares "fable" vs "claude-fable-5" and PROCLAIMS — the detector's
+ *  claude leg must not roll ahead of pin canonicalization. If a transition tolerance is ever
+ *  needed, it is an explicit provider-aware mapping with an expiry, never token containment. */
+export function modelsMatch(pinned, effective) {
+    const pin = pinned.trim().toLowerCase();
+    const eff = effective.trim().toLowerCase();
+    if (pin === eff)
+        return true;
+    // The bridge is DEAD CODE the moment the 5.3 advisory registers its capability — runtime-gated
+    // on the behavioral sentinel, not on anyone remembering a comment (r2 round-4 HIGH-2).
+    if (SPEC_VALIDATION_CAPABILITIES.has("model-pin-canonicalization"))
+        return false;
+    return CLAUDE_ALIAS_MIGRATION_BRIDGE[pin] === eff;
+}
+/** MIGRATION BRIDGE (r2 addendum, desk-ruled 05:03Z) — provider-specific, ONE measured pair, with
+ *  a BEHAVIORAL executable expiry (r2 round-4: a filename tripwire is not a coupling — the
+ *  advisory can land inside an existing validator file):
+ *  - condition 2 (dormancy): fires only while a nodes.model row still carries the alias pin.
+ *  - condition 1 (removal): gated at RUNTIME on rigspec-schema's SPEC_VALIDATION_CAPABILITIES —
+ *    when the 5.3 advisory registers "model-pin-canonicalization" there (its registry contract),
+ *    modelsMatch stops consulting this map in code, and the pin test goes RED until the constant
+ *    is deleted. The registry's own doc-comment carries the 5.3 obligation. */
+export const CLAUDE_ALIAS_MIGRATION_BRIDGE = {
+    fable: "claude-fable-5",
+};
+//# sourceMappingURL=model-divergence-monitor.js.map

package/node_modules/@openrig/daemon/dist/domain/model-divergence/model-divergence-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-divergence-monitor.js","sourceRoot":"","sources":["../../../src/domain/model-divergence/model-divergence-monitor.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,EAAE;AACF,kGAAkG;AAClG,oGAAoG;AACpG,gGAAgG;AAChG,6FAA6F;AAC7F,mGAAmG;AACnG,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,gGAAgG;AAChG,iGAAiG;AACjG,iGAAiG;AACjG,oGAAoG;AACpG,EAAE;AACF,gGAAgG;AAChG,gGAAgG;AAChG,oGAAoG;AACpG,+FAA+F;AAC/F,+FAA+F;AAC/F,2FAA2F;AAE3F,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AA2DpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,0CAA0C,CAAC;AAE9E,6FAA6F;AAC7F,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAE3C,MAAM,UAAU,kBAAkB,CAAC,CAAgD;IACjF,OAAO;QACL,uBAAuB,CAAC,CAAC,WAAW,YAAY,CAAC,CAAC,WAAW,cAAc,CAAC,CAAC,cAAc,EAAE;QAC7F,0EAA0E;QAC1E,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,kEAAkE;QAC9H,YAAY,CAAC,CAAC,UAAU,aAAa,CAAC,CAAC,OAAO,IAAI,SAAS,UAAU,CAAC,CAAC,MAAM,IAAI;KAClF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,OAAO,sBAAsB;IAYJ;IAX7B,oFAAoF;IACnE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7C;;gGAE4F;IAC3E,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,KAAK,GAA0C,IAAI,CAAC;IAC3C,IAAI,CAA4B;IAEjD,YAA6B,IAAgC;QAAhC,SAAI,GAAJ,IAAI,CAA4B;QAC3D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,YAAY,CAAC,UAAkB;QAC7B,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1I,CAAC,EAAE,UAAU,CAAC,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;oFACgF;IAChF,YAAY;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,SAAS;QACb,MAAM,KAAK,GAAkC,EAAE,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC/C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,sFAAsF;gBACtF,wFAAwF;gBACxF,sFAAsF;gBACtF,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAClC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,KAAK,IAAI,wBAAwB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC5B,IAAI,CAAC,IAAI,CACP,sBAAsB,IAAI,CAAC,WAAW,SAAS,IAAI,CAAC,WAAW,2BAA2B;wBAC1F,cAAc,KAAK,+CAA+C,IAAI,CAAC,MAAM,KAAK;wBAClF,iDAAiD,CAClD,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAgB,EAAE,cAAsB;QAC7D,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc;YACd,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI;YAC7C,UAAU;SACX,CAAC;QACF,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAqB,EAAE,CAAC;QAEtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,8BAA8B,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACnI,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,MAAM,IAAI,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC,QAAQ;YACpB,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC;YACnD,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAEpG,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,SAAS;YACrB,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;YACrD,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC,CAAC;QAElI,gGAAgG;QAChG,oFAAoF;QACpF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAEnG,MAAM,YAAY,GAAgC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC;QACxE,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,qDAAqD,IAAI,CAAC,WAAW,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1I,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,OAAkC,EAAE,MAAc,EAAE,OAAe;QACvF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC3D,OAAO,GAAG,CAAC,EAAE;gBACX,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE;gBAC1C,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,aAAa,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACzG,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;gGASgG;AAChG,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,SAAiB;IAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC7B,+FAA+F;IAC/F,uFAAuF;IACvF,IAAI,4BAA4B,CAAC,GAAG,CAAC,4BAA4B,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,6BAA6B,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC;AACpD,CAAC;AAED;;;;;;;+EAO+E;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAA2B;IACnE,KAAK,EAAE,gBAAgB;CACxB,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/native-resume-probe.d.ts

@@ -0,0 +1,22 @@
+export type NativeResumeProbeStatus = "resumed" | "failed" | "inconclusive" | "attention_required";
+export interface NativeResumeProbeInput {
+    runtime: string | null;
+    paneCommand: string | null;
+    paneContent: string | null;
+}
+export interface NativeResumeProbeResult {
+    status: NativeResumeProbeStatus;
+    code: string;
+    detail: string;
+}
+export interface ProbeShellReadyInput {
+    paneCommand: string | null;
+    paneContent: string | null;
+}
+export declare function buildNativeResumeCommand(runtime: string | null, resumeToken: string | null, sessionName?: string | null, codexConfigProfile?: string | null): string | null;
+export declare function buildCodexResumeCore(resumeToken: string, codexConfigProfile?: string | null, useLast?: boolean, extraArgs?: string, resolvedPosture?: "floor" | "full_bypass", model?: string | null, 
+/** Launch callers may pass the exact already-resolved segment they insert, avoiding a second policy decision. */
+precomputedPostureArg?: string): string;
+export declare function assessNativeResumeProbe(input: NativeResumeProbeInput): NativeResumeProbeResult;
+export declare function isProbeShellReady(input: ProbeShellReadyInput): boolean;
+//# sourceMappingURL=native-resume-probe.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/native-resume-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-resume-probe.d.ts","sourceRoot":"","sources":["../../src/domain/native-resume-probe.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,QAAQ,GAAG,cAAc,GAAG,oBAAoB,CAAC;AAEnG,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,uBAAuB,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAID,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,EAC3B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,GACjC,MAAM,GAAG,IAAI,CAUf;AAED,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,MAAM,EACnB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,EAClC,OAAO,CAAC,EAAE,OAAO,EACjB,SAAS,CAAC,EAAE,MAAM,EAIlB,eAAe,CAAC,EAAE,OAAO,GAAG,aAAa,EAIzC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;AACrB,iHAAiH;AACjH,qBAAqB,CAAC,EAAE,MAAM,GAC7B,MAAM,CAYR;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,sBAAsB,GAC5B,uBAAuB,CAiJzB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAItE"}