@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/domain/wake-resolver.d.ts

@@ -0,0 +1,41 @@
+/**
+ * L3b — resolve a seat[@generation] to a resume token for a wake, on the stores
+ * that exist TODAY (ruling A): the `sessions` rows for the seat's session_name,
+ * newest-first. No dedicated tenure ledger exists yet (that is the pooled
+ * boot-capture atom); until it lands, "which tenures exist" = the sessions rows,
+ * and a wake target that cannot be resolved REFUSES with a teaching listing —
+ * raw tokens accepted, guessed tokens never.
+ */
+export interface WakeSessionRow {
+    id: number;
+    sessionName: string;
+    resumeToken: string | null;
+    runtime: string | null;
+    createdAt: string;
+}
+export interface WakeResolveInput {
+    seat: string;
+    /** 1 = newest tenure (default), 2 = next-older, … */
+    generation?: number;
+}
+export interface KnownTenure {
+    generation: number;
+    sessionId: number;
+    tokenPresent: boolean;
+    createdAt: string;
+}
+export type WakeResolution = {
+    resolved: true;
+    token: string;
+    runtime: "claude" | "codex";
+    sessionId: number;
+} | {
+    resolved: false;
+    reason: string;
+    known: KnownTenure[];
+};
+/**
+ * @param rows sessions for the seat's session_name, NEWEST-FIRST (id DESC).
+ */
+export declare function resolveWakeTarget(rows: WakeSessionRow[], input: WakeResolveInput): WakeResolution;
+//# sourceMappingURL=wake-resolver.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/wake-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake-resolver.d.ts","sourceRoot":"","sources":["../../src/domain/wake-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACjF;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC;AAE9D;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,gBAAgB,GAAG,cAAc,CAoCjG"}

package/node_modules/@openrig/daemon/dist/domain/wake-resolver.js

@@ -0,0 +1,45 @@
+/**
+ * L3b — resolve a seat[@generation] to a resume token for a wake, on the stores
+ * that exist TODAY (ruling A): the `sessions` rows for the seat's session_name,
+ * newest-first. No dedicated tenure ledger exists yet (that is the pooled
+ * boot-capture atom); until it lands, "which tenures exist" = the sessions rows,
+ * and a wake target that cannot be resolved REFUSES with a teaching listing —
+ * raw tokens accepted, guessed tokens never.
+ */
+/**
+ * @param rows sessions for the seat's session_name, NEWEST-FIRST (id DESC).
+ */
+export function resolveWakeTarget(rows, input) {
+    const known = rows.map((r, i) => ({
+        generation: i + 1,
+        sessionId: r.id,
+        tokenPresent: !!r.resumeToken,
+        createdAt: r.createdAt,
+    }));
+    if (rows.length === 0) {
+        return {
+            resolved: false,
+            reason: `No known sessions for seat '${input.seat}'. It may never have run on this host, or its sessions predate resume-token capture.`,
+            known,
+        };
+    }
+    const gen = input.generation ?? 1;
+    if (gen < 1 || gen > rows.length) {
+        return {
+            resolved: false,
+            reason: `Generation ${gen} does not exist for seat '${input.seat}' — only ${rows.length} tenure(s) recorded. Pick 1..${rows.length} (1 = newest).`,
+            known,
+        };
+    }
+    const row = rows[gen - 1];
+    if (!row.resumeToken) {
+        return {
+            resolved: false,
+            reason: `Tenure ${gen} of seat '${input.seat}' has no captured resume token (not resumable). Try another generation, or pass a raw token to --wake.`,
+            known,
+        };
+    }
+    const runtime = row.runtime === "codex" ? "codex" : "claude";
+    return { resolved: true, token: row.resumeToken, runtime, sessionId: row.id };
+}
+//# sourceMappingURL=wake-resolver.js.map

package/node_modules/@openrig/daemon/dist/domain/wake-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake-resolver.js","sourceRoot":"","sources":["../../src/domain/wake-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA2BH;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAsB,EAAE,KAAuB;IAC/E,MAAM,KAAK,GAAkB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,UAAU,EAAE,CAAC,GAAG,CAAC;QACjB,SAAS,EAAE,CAAC,CAAC,EAAE;QACf,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;QAC7B,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC,CAAC,CAAC;IAEJ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,+BAA+B,KAAK,CAAC,IAAI,sFAAsF;YACvI,KAAK;SACN,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,cAAc,GAAG,6BAA6B,KAAK,CAAC,IAAI,YAAY,IAAI,CAAC,MAAM,gCAAgC,IAAI,CAAC,MAAM,gBAAgB;YAClJ,KAAK;SACN,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,UAAU,GAAG,aAAa,KAAK,CAAC,IAAI,wGAAwG;YACpJ,KAAK;SACN,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAuB,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;AAChF,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/watchdog-auto-registration.d.ts

@@ -0,0 +1,50 @@
+import type Database from "better-sqlite3";
+import type { SettingsStore } from "./user-settings/settings-store.js";
+import { type WatchdogJob, type WatchdogJobsRepository } from "./watchdog-jobs-repository.js";
+export declare class WatchdogAutoRegistrationError extends Error {
+    readonly code: "target_mismatch" | "missing";
+    readonly details: Record<string, unknown>;
+    constructor(code: "target_mismatch" | "missing", message: string, details: Record<string, unknown>);
+}
+export interface WatchdogAutoRegistrationDeps {
+    db: Database.Database;
+    jobsRepo: WatchdogJobsRepository;
+    settingsStore: SettingsStore;
+    warn?: (message: string) => void;
+}
+export declare function formatWatchdogRegistrationError(error: unknown): string;
+/**
+ * W2c's one structural seam: every canonical seat mint ensures its role-bound
+ * idle-gate job, while startup only audits existing live-like seats. Core seat
+ * creation remains fail-isolated from this additive supervision layer.
+ */
+export declare class WatchdogAutoRegistration {
+    private readonly deps;
+    private readonly warn;
+    constructor(deps: WatchdogAutoRegistrationDeps);
+    /** Named exclusions: flat legacy and noncanonical/external seats cannot own qitems. */
+    isEligibleSessionName(sessionName: string): boolean;
+    /**
+     * A discovered handover may legitimately claim a noncanonical tmux name.
+     * It is not eligible for a new role job, but the retired canonical target
+     * must stop being deliverable. Terminal history lets a later canonical
+     * occupant create a fresh active job; an operator-stopped row stays stopped.
+     */
+    reconcileHandover(nodeId: string, sessionName: string): WatchdogJob | null;
+    /**
+     * B6 founder ruling — auto-registration is NOT default-on. A NEW job is created only when the
+     * fleet opted in (`auto_register: "all"`) or this seat is named in `opt_in_sessions`. A seat that
+     * ALREADY HAS a job keeps being maintained regardless: existing registered jobs survive the
+     * default flip, and their alias refresh must not silently stop.
+     */
+    private autoRegisterAllowed;
+    ensure(nodeId: string, sessionName: string): WatchdogJob | null;
+    assertCoverage(nodeId: string, sessionName: string): WatchdogJob | null;
+    /** Audit every latest live-like seat at startup; never create or delete rows. */
+    assertLiveSeatCoverage(): void;
+    private resolveTopology;
+    private canonicalAliases;
+    private resolveCadence;
+    private generatedSpec;
+}
+//# sourceMappingURL=watchdog-auto-registration.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/watchdog-auto-registration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchdog-auto-registration.d.ts","sourceRoot":"","sources":["../../src/domain/watchdog-auto-registration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,sBAAsB,EAC5B,MAAM,+BAA+B,CAAC;AAMvC,qBAAa,6BAA8B,SAAQ,KAAK;aAEpC,IAAI,EAAE,iBAAiB,GAAG,SAAS;aAEnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFhC,IAAI,EAAE,iBAAiB,GAAG,SAAS,EACnD,OAAO,EAAE,MAAM,EACC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKnD;AAoBD,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAMtE;AAED;;;;GAIG;AACH,qBAAa,wBAAwB;IAGvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA4B;gBAEpB,IAAI,EAAE,4BAA4B;IAI/D,uFAAuF;IACvF,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAInD;;;;;OAKG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAwB1E;;;;;OAKG;IACH,OAAO,CAAC,mBAAmB;IAU3B,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IA4B/D,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IA6BvE,iFAAiF;IACjF,sBAAsB,IAAI,IAAI;IAyB9B,OAAO,CAAC,eAAe;IAmBvB,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,aAAa;CAQtB"}

package/node_modules/@openrig/daemon/dist/domain/watchdog-auto-registration.js

@@ -0,0 +1,178 @@
+import { parseSessionName, validateSessionName } from "./session-name.js";
+const POLICY = "idle-gate-qitem";
+const REGISTRAR = "daemon@kernel";
+const TERMINAL_SESSION_STATUSES = new Set(["superseded", "detached", "exited"]);
+export class WatchdogAutoRegistrationError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(`${code}: ${message}`);
+        this.code = code;
+        this.details = details;
+        this.name = "WatchdogAutoRegistrationError";
+    }
+}
+export function formatWatchdogRegistrationError(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    const details = typeof error === "object" && error !== null && "details" in error
+        ? error.details
+        : undefined;
+    return details === undefined ? message : `${message}; details=${JSON.stringify(details)}`;
+}
+/**
+ * W2c's one structural seam: every canonical seat mint ensures its role-bound
+ * idle-gate job, while startup only audits existing live-like seats. Core seat
+ * creation remains fail-isolated from this additive supervision layer.
+ */
+export class WatchdogAutoRegistration {
+    deps;
+    warn;
+    constructor(deps) {
+        this.deps = deps;
+        this.warn = deps.warn ?? ((message) => console.warn(message));
+    }
+    /** Named exclusions: flat legacy and noncanonical/external seats cannot own qitems. */
+    isEligibleSessionName(sessionName) {
+        return validateSessionName(sessionName) && parseSessionName(sessionName).kind === "canonical";
+    }
+    /**
+     * A discovered handover may legitimately claim a noncanonical tmux name.
+     * It is not eligible for a new role job, but the retired canonical target
+     * must stop being deliverable. Terminal history lets a later canonical
+     * occupant create a fresh active job; an operator-stopped row stays stopped.
+     */
+    reconcileHandover(nodeId, sessionName) {
+        const row = this.deps.db.prepare(`SELECT n.id AS node_id, n.rig_id AS rig_id, r.name AS rig_name
+         FROM nodes n LEFT JOIN rigs r ON r.id = n.rig_id
+        WHERE n.id = ?`).get(nodeId);
+        if (!row || row.rig_name === null) {
+            throw new WatchdogAutoRegistrationError("target_mismatch", `watchdog handover topology missing for node_id="${nodeId}" session="${sessionName}"`, { nodeId, sessionName, actualRig: row?.rig_name ?? null });
+        }
+        const job = this.deps.jobsRepo.findAutoRegistration(POLICY, sessionName, null, this.canonicalAliases(nodeId, row.rig_name, sessionName));
+        if (!job || job.state === "stopped")
+            return job;
+        this.deps.jobsRepo.markTerminal(job.jobId, "handover_noncanonical_successor");
+        return this.deps.jobsRepo.getByIdOrThrow(job.jobId);
+    }
+    /**
+     * B6 founder ruling — auto-registration is NOT default-on. A NEW job is created only when the
+     * fleet opted in (`auto_register: "all"`) or this seat is named in `opt_in_sessions`. A seat that
+     * ALREADY HAS a job keeps being maintained regardless: existing registered jobs survive the
+     * default flip, and their alias refresh must not silently stop.
+     */
+    autoRegisterAllowed(sessionName) {
+        // Trimmed at the enforcement seam: the validator accepts whitespace-padded enum values
+        // (it validates the trimmed raw), so the gate must compare the same normalization — an
+        // accepted " all " silently behaving as "off" is a config that lies.
+        const mode = String(this.deps.settingsStore.resolveOne("policies.idle_gate_qitem.auto_register").value ?? "off").trim();
+        if (mode === "all")
+            return true;
+        const optIn = String(this.deps.settingsStore.resolveOne("policies.idle_gate_qitem.opt_in_sessions").value ?? "");
+        return optIn.split(",").map((s) => s.trim()).filter(Boolean).includes(sessionName);
+    }
+    ensure(nodeId, sessionName) {
+        const topology = this.resolveTopology(nodeId, sessionName);
+        if (!topology)
+            return null;
+        if (!this.autoRegisterAllowed(sessionName)) {
+            const existing = this.deps.jobsRepo.findAutoRegistration(POLICY, sessionName, null, this.canonicalAliases(nodeId, topology.rig_name, sessionName));
+            if (!existing)
+                return null; // fresh seat, not opted in — no job, by ruling
+        }
+        const cadence = this.resolveCadence();
+        return this.deps.jobsRepo.ensureAutoRegistration({
+            policy: POLICY,
+            specYaml: this.generatedSpec(sessionName, cadence.scan, cadence.activeWake),
+            targetSession: sessionName,
+            intervalSeconds: cadence.scan,
+            scanIntervalSeconds: cadence.scan,
+            activeWakeIntervalSeconds: cadence.activeWake,
+            registeredBySession: REGISTRAR,
+            targetGenerationUuid: null,
+        }, this.canonicalAliases(nodeId, topology.rig_name, sessionName));
+    }
+    assertCoverage(nodeId, sessionName) {
+        const topology = this.resolveTopology(nodeId, sessionName);
+        if (!topology)
+            return null;
+        const job = this.deps.jobsRepo.findAutoRegistration(POLICY, sessionName, null, this.canonicalAliases(nodeId, topology.rig_name, sessionName));
+        if (!job || job.targetSession !== sessionName) {
+            // B6 — no job on a seat that is not opted in is the RULED default, not a
+            // coverage failure; only an opted-in seat (or a stale-targeted job) pages.
+            if (!job && !this.autoRegisterAllowed(sessionName))
+                return null;
+            throw new WatchdogAutoRegistrationError("missing", `watchdog auto-registration missing for node_id="${nodeId}" session="${sessionName}"`, {
+                nodeId,
+                sessionName,
+                policy: POLICY,
+                staleTargetSession: job?.targetSession ?? null,
+                staleJobId: job?.jobId ?? null,
+                staleState: job?.state ?? null,
+            });
+        }
+        return job;
+    }
+    /** Audit every latest live-like seat at startup; never create or delete rows. */
+    assertLiveSeatCoverage() {
+        const rows = this.deps.db.prepare(`SELECT node_id, session_name, status
+         FROM sessions
+        ORDER BY created_at DESC, id DESC`).all();
+        const seen = new Set();
+        for (const row of rows) {
+            if (seen.has(row.node_id))
+                continue;
+            seen.add(row.node_id);
+            if (TERMINAL_SESSION_STATUSES.has(row.status))
+                continue;
+            if (!this.isEligibleSessionName(row.session_name))
+                continue;
+            try {
+                // B6 — assertCoverage is gate-aware: a non-opted seat with no job returns
+                // null (the ruled default) instead of warning at every startup audit.
+                this.assertCoverage(row.node_id, row.session_name);
+            }
+            catch (error) {
+                this.warn(`[watchdog-auto-registration] startup coverage FAILED for node_id="${row.node_id}" ` +
+                    `session="${row.session_name}": ${formatWatchdogRegistrationError(error)}`);
+            }
+        }
+    }
+    resolveTopology(nodeId, sessionName) {
+        if (!validateSessionName(sessionName))
+            return null;
+        const parsed = parseSessionName(sessionName);
+        if (parsed.kind !== "canonical")
+            return null;
+        const row = this.deps.db.prepare(`SELECT n.id AS node_id, n.rig_id AS rig_id, r.name AS rig_name
+         FROM nodes n LEFT JOIN rigs r ON r.id = n.rig_id
+        WHERE n.id = ?`).get(nodeId);
+        if (!row || row.rig_name === null || row.rig_name !== parsed.rig) {
+            throw new WatchdogAutoRegistrationError("target_mismatch", `canonical seat topology mismatch for node_id="${nodeId}" session="${sessionName}"`, { nodeId, sessionName, parsedRig: parsed.rig, actualRig: row?.rig_name ?? null });
+        }
+        return row;
+    }
+    canonicalAliases(nodeId, rigName, currentSession) {
+        const rows = this.deps.db.prepare(`SELECT session_name FROM sessions WHERE node_id = ? ORDER BY created_at ASC, id ASC`).all(nodeId);
+        return [...new Set([...rows.map((row) => row.session_name), currentSession])].filter((candidate) => {
+            if (!validateSessionName(candidate))
+                return false;
+            const parsed = parseSessionName(candidate);
+            return parsed.kind === "canonical" && parsed.rig === rigName;
+        });
+    }
+    resolveCadence() {
+        return {
+            scan: this.deps.settingsStore.resolveOne("policies.idle_gate_qitem.scan_interval_seconds").value,
+            activeWake: this.deps.settingsStore.resolveOne("policies.idle_gate_qitem.active_wake_interval_seconds").value,
+        };
+    }
+    generatedSpec(sessionName, scan, activeWake) {
+        return `policy: ${POLICY}\n` +
+            `generated_by: openrig-daemon\n` +
+            `target:\n  session: ${sessionName}\n` +
+            `interval_seconds: ${scan}\n` +
+            `scan_interval_seconds: ${scan}\n` +
+            `active_wake_interval_seconds: ${activeWake}\n`;
+    }
+}
+//# sourceMappingURL=watchdog-auto-registration.js.map

package/node_modules/@openrig/daemon/dist/domain/watchdog-auto-registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchdog-auto-registration.js","sourceRoot":"","sources":["../../src/domain/watchdog-auto-registration.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAO1E,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,SAAS,GAAG,eAAe,CAAC;AAClC,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEhF,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAEpC;IAEA;IAHlB,YACkB,IAAmC,EACnD,OAAe,EACC,OAAgC;QAEhD,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAJb,SAAI,GAAJ,IAAI,CAA+B;QAEnC,YAAO,GAAP,OAAO,CAAyB;QAGhD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AA2BD,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,IAAI,KAAK;QAC/E,CAAC,CAAE,KAA+B,CAAC,OAAO;QAC1C,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IAGN;IAFZ,IAAI,CAA4B;IAEjD,YAA6B,IAAkC;QAAlC,SAAI,GAAJ,IAAI,CAA8B;QAC7D,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,uFAAuF;IACvF,qBAAqB,CAAC,WAAmB;QACvC,OAAO,mBAAmB,CAAC,WAAW,CAAC,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;IAChG,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,MAAc,EAAE,WAAmB;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B;;uBAEiB,CAClB,CAAC,GAAG,CAAC,MAAM,CAA+B,CAAC;QAC5C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,6BAA6B,CACrC,iBAAiB,EACjB,mDAAmD,MAAM,cAAc,WAAW,GAAG,EACrF,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI,EAAE,CAC1D,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CACjD,MAAM,EACN,WAAW,EACX,IAAI,EACJ,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CACzD,CAAC;QACF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CAAC,WAAmB;QAC7C,uFAAuF;QACvF,uFAAuF;QACvF,qEAAqE;QACrE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,wCAAwC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACxH,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,0CAA0C,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACjH,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,WAAmB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CACtD,MAAM,EACN,WAAW,EACX,IAAI,EACJ,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC9D,CAAC;YACF,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC,CAAC,+CAA+C;QAC7E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAC9C;YACE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC;YAC3E,aAAa,EAAE,WAAW;YAC1B,eAAe,EAAE,OAAO,CAAC,IAAI;YAC7B,mBAAmB,EAAE,OAAO,CAAC,IAAI;YACjC,yBAAyB,EAAE,OAAO,CAAC,UAAU;YAC7C,mBAAmB,EAAE,SAAS;YAC9B,oBAAoB,EAAE,IAAI;SAC3B,EACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC9D,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,MAAc,EAAE,WAAmB;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CACjD,MAAM,EACN,WAAW,EACX,IAAI,EACJ,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC9D,CAAC;QACF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;YAC9C,yEAAyE;YACzE,2EAA2E;YAC3E,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChE,MAAM,IAAI,6BAA6B,CACrC,SAAS,EACT,mDAAmD,MAAM,cAAc,WAAW,GAAG,EACrF;gBACE,MAAM;gBACN,WAAW;gBACX,MAAM,EAAE,MAAM;gBACd,kBAAkB,EAAE,GAAG,EAAE,aAAa,IAAI,IAAI;gBAC9C,UAAU,EAAE,GAAG,EAAE,KAAK,IAAI,IAAI;gBAC9B,UAAU,EAAE,GAAG,EAAE,KAAK,IAAI,IAAI;aAC/B,CACF,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,iFAAiF;IACjF,sBAAsB;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/B;;0CAEoC,CACrC,CAAC,GAAG,EAAwB,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YACpC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YACxD,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC;gBAAE,SAAS;YAC5D,IAAI,CAAC;gBACH,0EAA0E;gBAC1E,sEAAsE;gBACtE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CACP,qEAAqE,GAAG,CAAC,OAAO,IAAI;oBACpF,YAAY,GAAG,CAAC,YAAY,MAAM,+BAA+B,CAAC,KAAK,CAAC,EAAE,CAC3E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,MAAc,EAAE,WAAmB;QACzD,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B;;uBAEiB,CAClB,CAAC,GAAG,CAAC,MAAM,CAA+B,CAAC;QAC5C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;YACjE,MAAM,IAAI,6BAA6B,CACrC,iBAAiB,EACjB,iDAAiD,MAAM,cAAc,WAAW,GAAG,EACnF,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI,EAAE,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,GAAkB,CAAC;IAC5B,CAAC;IAEO,gBAAgB,CAAC,MAAc,EAAE,OAAe,EAAE,cAAsB;QAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAC/B,qFAAqF,CACtF,CAAC,GAAG,CAAC,MAAM,CAAoC,CAAC;QACjD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE;YACjG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;YAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,cAAc;QACpB,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,gDAAgD,CAAC,CAAC,KAAe;YAC1G,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,uDAAuD,CAAC,CAAC,KAAe;SACxH,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,WAAmB,EAAE,IAAY,EAAE,UAAkB;QACzE,OAAO,WAAW,MAAM,IAAI;YAC1B,gCAAgC;YAChC,uBAAuB,WAAW,IAAI;YACtC,qBAAqB,IAAI,IAAI;YAC7B,0BAA0B,IAAI,IAAI;YAClC,iCAAiC,UAAU,IAAI,CAAC;IACpD,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/watchdog-history-log.d.ts

@@ -0,0 +1,49 @@
+import type Database from "better-sqlite3";
+/**
+ * Watchdog history log (PL-004 Phase C; append-only audit writer).
+ *
+ * Per slice IMPL § Guard Checkpoint Focus item 2:
+ * - Pure `not_due` polls are NOT recorded (matches POC; minimizes
+ *   table size). Only `sent` / `skipped` / `terminal` outcomes pass
+ *   through this log.
+ * - Append-only API surface: only `record()` exposed. UPDATE/DELETE
+ *   are not exposed. SQLite has no view/role layer so direct SQL
+ *   could mutate, but the contract is enforced at this domain
+ *   boundary.
+ */
+export type WatchdogOutcome = "sent" | "skipped" | "terminal";
+export interface WatchdogHistoryRecordInput {
+    jobId: string;
+    evaluatedAt: string;
+    outcome: WatchdogOutcome;
+    skipReason?: string | null;
+    deliveryTargetSession?: string | null;
+    deliveryStatus?: string | null;
+    deliveryMessage?: string | null;
+    evaluationNotes?: Record<string, unknown> | null;
+}
+export interface WatchdogHistoryEntry {
+    historyId: string;
+    jobId: string;
+    evaluatedAt: string;
+    outcome: WatchdogOutcome;
+    skipReason: string | null;
+    deliveryTargetSession: string | null;
+    deliveryStatus: string | null;
+    deliveryMessage: string | null;
+    evaluationNotes: Record<string, unknown> | null;
+}
+export declare class WatchdogHistoryLog {
+    private readonly db;
+    constructor(db: Database.Database);
+    /**
+     * Append a meaningful evaluation outcome. Returns the persisted entry.
+     * Caller MUST NOT invoke this for `not_due` pure-skip outcomes — those
+     * are not recorded (per POC + IMPL guidance).
+     */
+    record(input: WatchdogHistoryRecordInput): WatchdogHistoryEntry;
+    listForJob(jobId: string, limit?: number): WatchdogHistoryEntry[];
+    listAll(limit?: number): WatchdogHistoryEntry[];
+    countForJob(jobId: string): number;
+}
+//# sourceMappingURL=watchdog-history-log.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/watchdog-history-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchdog-history-log.d.ts","sourceRoot":"","sources":["../../src/domain/watchdog-history-log.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAE9D,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,eAAe,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,eAAe,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACjD;AAcD,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD;;;;OAIG;IACH,MAAM,CAAC,KAAK,EAAE,0BAA0B,GAAG,oBAAoB;IAkC/D,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,oBAAoB,EAAE;IAU7D,OAAO,CAAC,KAAK,SAAM,GAAG,oBAAoB,EAAE;IAU5C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAMnC"}

package/node_modules/@openrig/daemon/dist/domain/watchdog-history-log.js

@@ -0,0 +1,67 @@
+import { ulid } from "ulid";
+export class WatchdogHistoryLog {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Append a meaningful evaluation outcome. Returns the persisted entry.
+     * Caller MUST NOT invoke this for `not_due` pure-skip outcomes — those
+     * are not recorded (per POC + IMPL guidance).
+     */
+    record(input) {
+        const historyId = ulid();
+        this.db
+            .prepare(`INSERT INTO watchdog_history (
+          history_id, job_id, evaluated_at, outcome,
+          skip_reason, delivery_target_session, delivery_status,
+          delivery_message, evaluation_notes
+        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+            .run(historyId, input.jobId, input.evaluatedAt, input.outcome, input.skipReason ?? null, input.deliveryTargetSession ?? null, input.deliveryStatus ?? null, input.deliveryMessage ?? null, input.evaluationNotes ? JSON.stringify(input.evaluationNotes) : null);
+        return {
+            historyId,
+            jobId: input.jobId,
+            evaluatedAt: input.evaluatedAt,
+            outcome: input.outcome,
+            skipReason: input.skipReason ?? null,
+            deliveryTargetSession: input.deliveryTargetSession ?? null,
+            deliveryStatus: input.deliveryStatus ?? null,
+            deliveryMessage: input.deliveryMessage ?? null,
+            evaluationNotes: input.evaluationNotes ?? null,
+        };
+    }
+    listForJob(jobId, limit = 50) {
+        const rows = this.db
+            .prepare(`SELECT * FROM watchdog_history WHERE job_id = ?
+         ORDER BY evaluated_at DESC, history_id DESC LIMIT ?`)
+            .all(jobId, limit);
+        return rows.map(rowToEntry);
+    }
+    listAll(limit = 100) {
+        const rows = this.db
+            .prepare(`SELECT * FROM watchdog_history
+         ORDER BY evaluated_at DESC, history_id DESC LIMIT ?`)
+            .all(limit);
+        return rows.map(rowToEntry);
+    }
+    countForJob(jobId) {
+        const row = this.db
+            .prepare(`SELECT COUNT(*) AS n FROM watchdog_history WHERE job_id = ?`)
+            .get(jobId);
+        return row.n;
+    }
+}
+function rowToEntry(row) {
+    return {
+        historyId: row.history_id,
+        jobId: row.job_id,
+        evaluatedAt: row.evaluated_at,
+        outcome: row.outcome,
+        skipReason: row.skip_reason,
+        deliveryTargetSession: row.delivery_target_session,
+        deliveryStatus: row.delivery_status,
+        deliveryMessage: row.delivery_message,
+        evaluationNotes: row.evaluation_notes ? JSON.parse(row.evaluation_notes) : null,
+    };
+}
+//# sourceMappingURL=watchdog-history-log.js.map

package/node_modules/@openrig/daemon/dist/domain/watchdog-history-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchdog-history-log.js","sourceRoot":"","sources":["../../src/domain/watchdog-history-log.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAoD5B,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD;;;;OAIG;IACH,MAAM,CAAC,KAAiC;QACtC,MAAM,SAAS,GAAG,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;6CAIqC,CACtC;aACA,GAAG,CACF,SAAS,EACT,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,UAAU,IAAI,IAAI,EACxB,KAAK,CAAC,qBAAqB,IAAI,IAAI,EACnC,KAAK,CAAC,cAAc,IAAI,IAAI,EAC5B,KAAK,CAAC,eAAe,IAAI,IAAI,EAC7B,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CACrE,CAAC;QACJ,OAAO;YACL,SAAS;YACT,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;YACpC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,IAAI,IAAI;YAC1D,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;YAC5C,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI;YAC9C,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI;SAC/C,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,KAAK,GAAG,EAAE;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;6DACqD,CACtD;aACA,GAAG,CAAC,KAAK,EAAE,KAAK,CAAiB,CAAC;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,KAAK,GAAG,GAAG;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;6DACqD,CACtD;aACA,GAAG,CAAC,KAAK,CAAiB,CAAC;QAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,WAAW,CAAC,KAAa;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CAAC,6DAA6D,CAAC;aACtE,GAAG,CAAC,KAAK,CAAkB,CAAC;QAC/B,OAAO,GAAG,CAAC,CAAC,CAAC;IACf,CAAC;CACF;AAED,SAAS,UAAU,CAAC,GAAe;IACjC,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,OAAO,EAAE,GAAG,CAAC,OAA0B;QACvC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,qBAAqB,EAAE,GAAG,CAAC,uBAAuB;QAClD,cAAc,EAAE,GAAG,CAAC,eAAe;QACnC,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,eAAe,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;KAChF,CAAC;AACJ,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/watchdog-jobs-repository.d.ts

@@ -0,0 +1,118 @@
+import type Database from "better-sqlite3";
+/**
+ * Watchdog jobs repository (PL-004 Phase C; extended in Phase D).
+ *
+ * Owns all reads/writes against `watchdog_jobs`. Pure persistence; no
+ * event-bus, no scheduler, no policy dispatch. Composed by the
+ * scheduler and policy engine.
+ *
+ * Phase D v1 accepts FOUR policy values (the orch-ratified Phase C
+ * `workflow-keepalive` deferral has been lifted; the policy module
+ * now exists at `policies/workflow-keepalive.ts` and reads from the
+ * SQLite `workflow_instances` table introduced in Phase D):
+ *   - periodic-reminder (Phase C)
+ *   - artifact-pool-ready (Phase C)
+ *   - edge-artifact-required (Phase C)
+ *   - workflow-keepalive (Phase D)
+ *
+ * PHASE_C_POLICIES retained as a deprecated alias for callers that
+ * still reference it; new code uses PHASE_D_POLICIES.
+ */
+export declare const PHASE_D_POLICIES: readonly ["periodic-reminder", "artifact-pool-ready", "edge-artifact-required", "workflow-keepalive", "idle-gate-qitem"];
+/** @deprecated since Phase D — use PHASE_D_POLICIES. */
+export declare const PHASE_C_POLICIES: readonly ["periodic-reminder", "artifact-pool-ready", "edge-artifact-required", "workflow-keepalive", "idle-gate-qitem"];
+export type WatchdogPolicyName = (typeof PHASE_D_POLICIES)[number];
+export type WatchdogJobState = "active" | "stopped" | "terminal";
+export interface WatchdogJob {
+    jobId: string;
+    policy: WatchdogPolicyName;
+    specYaml: string;
+    targetSession: string;
+    intervalSeconds: number;
+    activeWakeIntervalSeconds: number | null;
+    scanIntervalSeconds: number | null;
+    lastEvaluationAt: string | null;
+    lastFireAt: string | null;
+    actionable: boolean;
+    lastActionableAt: string | null;
+    state: WatchdogJobState;
+    registeredBySession: string;
+    registeredAt: string;
+    terminalReason: string | null;
+    /** (e/Class-B) atom-B generation of the occupant that armed this job; null = UNKNOWN/pre-063. */
+    registeredByGeneration: string | null;
+    /** (i-c) opt-in target occupant-generation this wake is bound to; null = ROLE-bound (fire at whoever
+     *  occupies the seat name). Only a non-null value opts the job into the fire-time gen-gate. */
+    targetGeneration: string | null;
+}
+export interface RegisterWatchdogJobInput {
+    policy: string;
+    specYaml: string;
+    targetSession: string;
+    intervalSeconds: number;
+    activeWakeIntervalSeconds?: number | null;
+    scanIntervalSeconds?: number | null;
+    registeredBySession: string;
+    /** (i-c) opt-in: the occupant-generation this wake is bound to. Omit/null = ROLE-bound (the common
+     *  case — fires at whoever occupies the seat, unchanged). Non-null opts into the fire-time gen-gate. */
+    targetGenerationUuid?: string | null;
+}
+export type EnsureAutoRegistrationInput = RegisterWatchdogJobInput;
+export declare class WatchdogJobsError extends Error {
+    readonly code: string;
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(code: string, message: string, details?: Record<string, unknown> | undefined);
+}
+export declare class WatchdogJobsRepository {
+    private readonly db;
+    private readonly now;
+    private readonly resolveOccupantGeneration?;
+    private readonly hasGenColumn;
+    private readonly hasTargetGenColumn;
+    constructor(db: Database.Database, now?: () => Date, resolveOccupantGeneration?: ((sessionName: string) => string | null) | undefined);
+    register(input: RegisterWatchdogJobInput): WatchdogJob;
+    /**
+     * Ensure the daemon-owned, role-bound auto-registration tuple has exactly
+     * one nonterminal row. Stopped is an operator opt-out and is therefore as
+     * durable as active; terminal-only history is replaced. The table has no
+     * uniqueness constraint, so every matching row must be inspected.
+     */
+    ensureAutoRegistration(input: EnsureAutoRegistrationInput, historicalTargetSessions?: string[]): WatchdogJob;
+    /**
+     * Resolve the one active/stopped role-bound row across every historical
+     * session alias for a node. Persisted states are intentionally closed:
+     * unknown values are neither runnable jobs nor operator opt-outs.
+     */
+    findAutoRegistration(policy: string, targetSession: string, targetGenerationUuid: string | null, historicalTargetSessions?: string[]): WatchdogJob | null;
+    /** All rows for the exact policy/seat/generation tuple, including history. */
+    listExactTuple(policy: string, targetSession: string, targetGenerationUuid: string | null): WatchdogJob[];
+    private listAliasTuples;
+    getById(jobId: string): WatchdogJob | null;
+    getByIdOrThrow(jobId: string): WatchdogJob;
+    listAll(): WatchdogJob[];
+    listActive(): WatchdogJob[];
+    recordEvaluation(jobId: string, evaluatedAt: string, fired: boolean): void;
+    /**
+     * R1 fix: write the actionable-state machine columns. Mirrors POC
+     * engine's `state.actionable` + `state.last_actionable_at`. Called
+     * by the policy engine after every meaningful evaluation:
+     *   - newActionable=false (skip): clears actionable + last_actionable_at.
+     *   - newActionable=true with no preserveLastActionableAt: stamps
+     *     last_actionable_at to evaluatedAt (newly actionable).
+     *   - newActionable=true with preserveLastActionableAt set: keeps the
+     *     existing first-actionable timestamp (continued actionable window).
+     */
+    setActionable(jobId: string, newActionable: boolean, evaluatedAt: string, preserveLastActionableAt?: string | null): void;
+    markTerminal(jobId: string, reason: string): void;
+    stop(jobId: string, reason?: string): WatchdogJob;
+    /**
+     * GHOST-STAGE (e/Class-B): at a seat swap, stop every ARMED (state='active') job registered by the
+     * RETIRING generation — a stale wake firing into the successor's context is the specimen; the
+     * successor re-arms its own. Gen-scoped, NEVER name-scoped (the successor shares the seat name, so a
+     * name-scoped stop would kill the successor's own jobs). A NULL/empty generation never matches
+     * (UNKNOWN ≠ retired — note-2). Returns the count stopped. Auditable (terminal_reason), not a hard
+     * delete — the row stays for forensics. Pre-063 dbs no-op.
+     */
+    dropArmedByRegisteringGeneration(generationUuid: string): number;
+}
+//# sourceMappingURL=watchdog-jobs-repository.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/watchdog-jobs-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"watchdog-jobs-repository.d.ts","sourceRoot":"","sources":["../../src/domain/watchdog-jobs-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C;;;;;;;;;;;;;;;;;;GAkBG;AAEH,eAAO,MAAM,gBAAgB,0HASnB,CAAC;AAEX,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,0HAAmB,CAAC;AAEjD,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAEjE,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,yBAAyB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,gBAAgB,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iGAAiG;IACjG,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC;mGAC+F;IAC/F,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,mBAAmB,EAAE,MAAM,CAAC;IAC5B;4GACwG;IACxG,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AAsBnE,qBAAa,iBAAkB,SAAQ,KAAK;aAExB,IAAI,EAAE,MAAM;aAEZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFjC,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD;AAaD,qBAAa,sBAAsB;IAI/B,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAIpB,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAR7C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAU;IACvC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;gBAE1B,EAAE,EAAE,QAAQ,CAAC,QAAQ,EACrB,GAAG,GAAE,MAAM,IAAuB,EAIlC,yBAAyB,CAAC,GAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,aAAA;IAMrF,QAAQ,CAAC,KAAK,EAAE,wBAAwB,GAAG,WAAW;IAmFtD;;;;;OAKG;IACH,sBAAsB,CACpB,KAAK,EAAE,2BAA2B,EAClC,wBAAwB,GAAE,MAAM,EAA0B,GACzD,WAAW;IA0Bd;;;;OAIG;IACH,oBAAoB,CAClB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,oBAAoB,EAAE,MAAM,GAAG,IAAI,EACnC,wBAAwB,GAAE,MAAM,EAAoB,GACnD,WAAW,GAAG,IAAI;IAiCrB,8EAA8E;IAC9E,cAAc,CACZ,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAClC,WAAW,EAAE;IAiBhB,OAAO,CAAC,eAAe;IAwBvB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAO1C,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,WAAW;IAY1C,OAAO,IAAI,WAAW,EAAE;IAOxB,UAAU,IAAI,WAAW,EAAE;IAO3B,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IAc1E;;;;;;;;;OASG;IACH,aAAa,CACX,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,OAAO,EACtB,WAAW,EAAE,MAAM,EACnB,wBAAwB,GAAE,MAAM,GAAG,IAAW,GAC7C,IAAI;IAiBP,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAQjD,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,SAAqB,GAAG,WAAW;IAgB7D;;;;;;;OAOG;IACH,gCAAgC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM;CAUjE"}