@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/adapters/yolo-mode.d.ts

@@ -0,0 +1,23 @@
+/** OPR.0.4.8.3 Seam B: a seat's RESOLVED permission-policy posture. When present it is
+ *  authoritative for that seat and overrides the OPENRIG_YOLO env read in BOTH directions
+ *  (an attached builtin:locked keeps the floor even under global YOLO; an attached custom
+ *  full_bypass flag policy lifts the seat without the env switch). Absent = no policy
+ *  attached → the env decision stands (0.4.8.2 behavior, unchanged). */
+export type ResolvedLaunchPosture = "floor" | "full_bypass";
+export declare function yoloEnabled(env?: NodeJS.ProcessEnv, resolvedPosture?: ResolvedLaunchPosture): boolean;
+/** Claude launch posture flag: floor `--permission-mode acceptEdits`, or the full bypass
+ *  (global YOLO, or a per-seat resolved full_bypass policy attachment). */
+export declare function claudePostureFlag(env?: NodeJS.ProcessEnv, resolvedPosture?: ResolvedLaunchPosture): string;
+/**
+ * Codex launch posture segment (leading space included), applied on EVERY managed Codex path
+ * (fresh / resume / native-fork). `profileArg` is the already-formatted ` -p <profile>` string or "".
+ * - YOLO ON → ` -s danger-full-access` (maximally-permissive sandbox), overriding even a named profile.
+ * - OFF + named profile → the profile (it governs its own sandbox).
+ * - OFF + no profile → OpenRig's explicit workspace-only floor ` -s workspace-write`.
+ * No forced approval flag on any path — the approval flow is left to Codex, unforced.
+ */
+export declare function codexPostureArg(profileArg: string, env?: NodeJS.ProcessEnv, resolvedPosture?: ResolvedLaunchPosture): string;
+/** Pi RESOURCE TRUST (Pi's --approve/--no-approve govern resource trust, NOT a permission policy):
+ *  YOLO forces `approve`; otherwise the configured posture (default `no-approve`). */
+export declare function piTrust(configured: "approve" | "no-approve" | undefined, env?: NodeJS.ProcessEnv, resolvedPosture?: ResolvedLaunchPosture): "approve" | "no-approve";
+//# sourceMappingURL=yolo-mode.d.ts.map

package/node_modules/@openrig/daemon/dist/adapters/yolo-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"yolo-mode.d.ts","sourceRoot":"","sources":["../../src/adapters/yolo-mode.ts"],"names":[],"mappings":"AAcA;;;;wEAIwE;AACxE,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,aAAa,CAAC;AAE5D,wBAAgB,WAAW,CACzB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,eAAe,CAAC,EAAE,qBAAqB,GACtC,OAAO,CAIT;AAOD;2EAC2E;AAC3E,wBAAgB,iBAAiB,CAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,eAAe,CAAC,EAAE,qBAAqB,GACtC,MAAM,CAER;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,eAAe,CAAC,EAAE,qBAAqB,GACtC,MAAM,CAGR;AAED;sFACsF;AACtF,wBAAgB,OAAO,CACrB,UAAU,EAAE,SAAS,GAAG,YAAY,GAAG,SAAS,EAChD,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,eAAe,CAAC,EAAE,qBAAqB,GACtC,SAAS,GAAG,YAAY,CAI1B"}

package/node_modules/@openrig/daemon/dist/adapters/yolo-mode.js

@@ -0,0 +1,49 @@
+// OPR.0.4.8.2 — OpenRig YOLO mode (opt-in, DEFAULT OFF).
+//
+// A simple deterministic setting that rides the STABLE launch-flag surface only (per the founder's
+// two-surface rule: launch flags may be deterministic code; config-file policy may NOT). When ON,
+// every managed seat boots at its harness's maximally-permissive LAUNCH FLAG:
+//   - Claude: --dangerously-skip-permissions  (permission bypass)
+//   - Codex:  -s danger-full-access           (maximally-permissive sandbox; OFF floor = the
+//             explicit -s workspace-write flag, NOT a harness default)
+//   - Pi:     --approve                       (full RESOURCE TRUST — Pi's
+//             --approve/--no-approve govern RESOURCE TRUST, not a permission policy)
+// When OFF (the default), seats boot with the usability floor, unchanged. The YOLO path writes ZERO
+// config files — it only selects a launch flag. Opt-in via the OPENRIG_YOLO env setting. (The
+// zero-permission-config-write property concerns Claude/Codex permission policy; Pi is resource trust.)
+export function yoloEnabled(env = process.env, resolvedPosture) {
+    if (resolvedPosture)
+        return resolvedPosture === "full_bypass";
+    const v = env.OPENRIG_YOLO;
+    return v === "1" || v === "true";
+}
+// ── The single launch-posture decision per harness — used on EVERY managed launch path (fresh,
+// resume, fork) so the floor (OFF) and the maximally-permissive posture (ON) are uniform, never
+// path-dependent. NOTE the ON posture differs by harness: Claude/Codex = permission bypass; Pi =
+// full RESOURCE TRUST (--approve), which is not a permission policy. ──
+/** Claude launch posture flag: floor `--permission-mode acceptEdits`, or the full bypass
+ *  (global YOLO, or a per-seat resolved full_bypass policy attachment). */
+export function claudePostureFlag(env = process.env, resolvedPosture) {
+    return yoloEnabled(env, resolvedPosture) ? "--dangerously-skip-permissions" : "--permission-mode acceptEdits";
+}
+/**
+ * Codex launch posture segment (leading space included), applied on EVERY managed Codex path
+ * (fresh / resume / native-fork). `profileArg` is the already-formatted ` -p <profile>` string or "".
+ * - YOLO ON → ` -s danger-full-access` (maximally-permissive sandbox), overriding even a named profile.
+ * - OFF + named profile → the profile (it governs its own sandbox).
+ * - OFF + no profile → OpenRig's explicit workspace-only floor ` -s workspace-write`.
+ * No forced approval flag on any path — the approval flow is left to Codex, unforced.
+ */
+export function codexPostureArg(profileArg, env = process.env, resolvedPosture) {
+    if (yoloEnabled(env, resolvedPosture))
+        return " -s danger-full-access";
+    return profileArg ? profileArg : " -s workspace-write";
+}
+/** Pi RESOURCE TRUST (Pi's --approve/--no-approve govern resource trust, NOT a permission policy):
+ *  YOLO forces `approve`; otherwise the configured posture (default `no-approve`). */
+export function piTrust(configured, env = process.env, resolvedPosture) {
+    // Pi wording discipline: this is RESOURCE TRUST, not a permission policy — a resolved
+    // full_bypass policy forces full resource trust exactly as global YOLO does.
+    return yoloEnabled(env, resolvedPosture) ? "approve" : configured ?? "no-approve";
+}
+//# sourceMappingURL=yolo-mode.js.map

package/node_modules/@openrig/daemon/dist/adapters/yolo-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yolo-mode.js","sourceRoot":"","sources":["../../src/adapters/yolo-mode.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,8EAA8E;AAC9E,kEAAkE;AAClE,6FAA6F;AAC7F,uEAAuE;AACvE,0EAA0E;AAC1E,qFAAqF;AACrF,oGAAoG;AACpG,8FAA8F;AAC9F,wGAAwG;AASxG,MAAM,UAAU,WAAW,CACzB,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAuC;IAEvC,IAAI,eAAe;QAAE,OAAO,eAAe,KAAK,aAAa,CAAC;IAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;IAC3B,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC;AACnC,CAAC;AAED,gGAAgG;AAChG,gGAAgG;AAChG,iGAAiG;AACjG,wEAAwE;AAExE;2EAC2E;AAC3E,MAAM,UAAU,iBAAiB,CAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAuC;IAEvC,OAAO,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,+BAA+B,CAAC;AAChH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,UAAkB,EAClB,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAuC;IAEvC,IAAI,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC;QAAE,OAAO,wBAAwB,CAAC;IACvE,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC;AACzD,CAAC;AAED;sFACsF;AACtF,MAAM,UAAU,OAAO,CACrB,UAAgD,EAChD,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAuC;IAEvC,sFAAsF;IACtF,6EAA6E;IAC7E,OAAO,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,YAAY,CAAC;AACpF,CAAC"}

package/node_modules/@openrig/daemon/dist/build-info.d.ts

@@ -0,0 +1,12 @@
+export interface BuildInfo {
+    semver: string | null;
+    commit: string | null;
+    dirty: boolean | null;
+    builtAt: string | null;
+}
+export declare const BUILD_INFO: BuildInfo;
+/** The additive /healthz fields: the four stamp keys when stamped, an EMPTY
+ *  object when dev — existing consumers (including exact-body probes against
+ *  dev daemons) see no change. */
+export declare function stampFields(info?: BuildInfo): Record<string, unknown>;
+//# sourceMappingURL=build-info.d.ts.map

package/node_modules/@openrig/daemon/dist/build-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.d.ts","sourceRoot":"","sources":["../src/build-info.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,eAAO,MAAM,UAAU,EAAE,SAKxB,CAAC;AAEF;;kCAEkC;AAClC,wBAAgB,WAAW,CAAC,IAAI,GAAE,SAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGjF"}

package/node_modules/@openrig/daemon/dist/build-info.js

@@ -0,0 +1,11 @@
+// GENERATED by scripts/build-package.sh — the packaged build-identity stamp.
+export const BUILD_INFO = {
+  semver: "0.5.2",
+  commit: "029acda80a198db6d994b8ef80e349c758ad2848",
+  dirty: false,
+  builtAt: "2026-08-22T17:39:04Z",
+};
+export function stampFields(info = BUILD_INFO) {
+  if (!info.commit) return {};
+  return { semver: info.semver, commit: info.commit, dirty: info.dirty, builtAt: info.builtAt };
+}

package/node_modules/@openrig/daemon/dist/build-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.js","sourceRoot":"","sources":["../src/build-info.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,4EAA4E;AAC5E,+DAA+D;AAC/D,wEAAwE;AACxE,iEAAiE;AASjE,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,IAAI;IACZ,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,IAAI;CACd,CAAC;AAEF;;kCAEkC;AAClC,MAAM,UAAU,WAAW,CAAC,OAAkB,UAAU;IACtD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;AAChG,CAAC"}

package/node_modules/@openrig/daemon/dist/builtins/workflow-specs/basic-loop.yaml

@@ -0,0 +1,76 @@
+# OpenRig 0.3.0 starter workflow.
+# A slower walkthrough loop for watching one work packet move end to end.
+workflow:
+  id: basic-loop
+  version: 1
+  objective: >
+    Walk one work packet through the conveyor rig slowly enough for a new user
+    to inspect each handoff.
+  target:
+    rig: conveyor
+  entry:
+    role: intake
+  coordination_terminal_turn_rule: hot_potato
+  roles:
+    intake:
+      skill_refs: [openrig-user, backlog-capture]
+      preferred_targets: [intake-lead@conveyor]
+    planner:
+      skill_refs: [openrig-user, writing-plans]
+      preferred_targets: [plan-planner@conveyor]
+    builder:
+      skill_refs: [openrig-user, executing-plans]
+      preferred_targets: [build-builder@conveyor]
+    reviewer:
+      skill_refs: [openrig-user, review-team]
+      preferred_targets: [review-reviewer@conveyor]
+    closer:
+      skill_refs: [openrig-user, verification-before-completion]
+      preferred_targets: [intake-lead@conveyor]
+  steps:
+    - id: intake
+      actor_role: intake
+      objective: Restate the objective and hand off one packet.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [planner]
+    - id: plan
+      actor_role: planner
+      objective: Produce a short plan for one build turn.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [builder]
+    - id: build
+      actor_role: builder
+      objective: Build or draft the planned output.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [reviewer]
+    - id: review
+      actor_role: reviewer
+      objective: Check the output and clear it for close.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [closer]
+    - id: close
+      actor_role: closer
+      objective: Close the walkthrough packet.
+      allowed_exits: [done, failed]
+      next_hop:
+        mode: forbid
+  invariants:
+    continuation_required: true
+    preserve_lineage: true
+    closure_required: true
+    allowed_exits: [handoff, waiting, done, failed]
+  loop_guards:
+    max_hops: 10
+    spawn_budget: 0
+  closure:
+    success: Walkthrough packet closed.
+    degraded: Walkthrough stopped with a named blocker.
+    failed: Walkthrough failed with evidence.

package/node_modules/@openrig/daemon/dist/builtins/workflow-specs/branched-remediation.yaml

@@ -0,0 +1,31 @@
+# OpenRig 0.4.6 spec-language example — the BRANCHED REMEDIATION shape.
+# `failed` branches to a remediation step (branch keys = the recorded
+# exit enum ONLY); the remediate → verify → remediate loop is a
+# branch-created cycle, legitimate ONLY under the declared max_hops
+# (remove loop_guards and validation fails naming the cycle + the fix).
+workflow:
+  id: branched-remediation
+  version: 1
+  objective: Build with a bounded failed-path remediation loop.
+  loop_guards:
+    max_hops: 8
+  roles:
+    builder:
+      preferred_targets: [flow-builder@acme-flow]
+    fixer:
+      preferred_targets: [flow-fixer@acme-flow]
+    prover:
+      preferred_targets: [flow-prover@acme-flow]
+  steps:
+    - id: build
+      actor_role: builder
+      next_hop:
+        on: { failed: remediate }
+    - id: verify
+      actor_role: prover
+      next_hop:
+        on: { failed: remediate }
+    - id: remediate
+      actor_role: fixer
+      next_hop:
+        suggested_roles: [prover]

package/node_modules/@openrig/daemon/dist/builtins/workflow-specs/conveyor.yaml

@@ -0,0 +1,80 @@
+# OpenRig 0.3.0 starter workflow.
+# Generic station pipeline. Multiple workflow instances may run at once; queue
+# depth at each station is the backpressure signal.
+workflow:
+  id: conveyor
+  version: 1
+  objective: >
+    Move a work packet through intake, planning, build, review, and close on
+    the generic conveyor starter rig.
+  target:
+    rig: conveyor
+  entry:
+    role: intake
+  coordination_terminal_turn_rule: hot_potato
+  roles:
+    intake:
+      skill_refs: [openrig-user, backlog-capture, orchestration-team]
+      preferred_targets: [intake-lead@conveyor]
+    planner:
+      skill_refs: [openrig-user, requirements-writer, writing-plans]
+      preferred_targets: [plan-planner@conveyor]
+    builder:
+      skill_refs: [openrig-user, development-team, test-driven-development]
+      preferred_targets: [build-builder@conveyor]
+    reviewer:
+      skill_refs: [openrig-user, review-team, plan-review]
+      preferred_targets: [review-reviewer@conveyor]
+    closer:
+      skill_refs: [openrig-user, orchestration-team, verification-before-completion]
+      preferred_targets: [intake-lead@conveyor]
+  steps:
+    - id: intake
+      actor_role: intake
+      objective: Clarify the request, create a small packet, and hand it to planning.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [planner]
+    - id: plan
+      actor_role: planner
+      objective: Turn the packet into an executable plan with verification.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [builder]
+    - id: build
+      actor_role: builder
+      objective: Execute the plan and produce proof for review.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [reviewer]
+    - id: review
+      actor_role: reviewer
+      objective: >
+        Check the build output. Use ordinary queue handoff to send targeted
+        rework back to build when needed; use the workflow handoff path when
+        the packet is ready to close.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [closer, builder]
+    - id: close
+      actor_role: closer
+      objective: Close the packet with evidence and any follow-up notes.
+      allowed_exits: [done, failed]
+      next_hop:
+        mode: forbid
+  invariants:
+    continuation_required: true
+    preserve_lineage: true
+    closure_required: true
+    allowed_exits: [handoff, waiting, done, failed]
+  loop_guards:
+    max_hops: 20
+    spawn_budget: 0
+  closure:
+    success: Packet closed with evidence.
+    degraded: Packet stopped with a named blocker or follow-up.
+    failed: Packet failed; preserve the review finding and owner.

package/node_modules/@openrig/daemon/dist/builtins/workflow-specs/factory-rsi.yaml

@@ -0,0 +1,152 @@
+# OpenRig 0.4.6 canonical single-rig RSI factory MVP (OPR.0.4.6.FAC2).
+#
+# ONE rig + ONE workflow = the recursive-self-improvement factory MVP. The
+# in-band INNER LOOP is a bounded, engine-routed SDLC:
+#   plan → implement → qa_check → review → release
+# under the enforceable max_hops guard (WF-1 sanction); a failing check or
+# review routes back to implement for bounded remediation; exceptions route via
+# the WF-5 dial (orchestrator-first); the release leg PREPARES and holds the ship
+# decision at a human gate (publish is a human act). Runs on the shipped engine
+# with the v0 hardcode seam (target.rig baked + preferred_targets) — no binding
+# layer needed.
+#
+# The RSI recursion is the DECOUPLED dogfood edge: the dogfood seat runs
+# out-of-band and continuously against the SHIPPED product (not a second QA on
+# the build artifact) and feeds its findings into the next plan — ungated, with
+# no loop-stop in the MVP. The exact continuous out-of-band runtime mechanism is
+# refined in a later release; here the inner loop is in-band and dogfood is the
+# out-of-band feed, referenced by the `dogfood` role below.
+workflow:
+  id: factory-rsi
+  version: 1
+  objective: >
+    Plan, build, check, review, and release one slice as a bounded,
+    deterministic, engine-routed inner loop on a single rig. Dogfood runs
+    out-of-band against the shipped product and feeds its findings into the next
+    plan — the RSI edge, with no human required.
+  target:
+    rig: factory-rsi
+  entry:
+    role: planner
+  coordination_terminal_turn_rule: hot_potato
+  # Exceptions route orchestrator-first (the WF-5 v1.3 dial); the human knows
+  # at altitude via the awareness row. The orchestrator role below is the dial
+  # target — resolved through the same role→preferred_targets mechanism.
+  exception_routing:
+    default: orchestrator
+    orchestrator_role: orchestrator
+  roles:
+    planner:
+      skill_refs: [openrig-user, requirements-writer, writing-plans]
+      preferred_targets: [plan-planner@factory-rsi]
+    implementer:
+      skill_refs: [openrig-user, development-team, test-driven-development]
+      preferred_targets: [build-implementer@factory-rsi]
+    qa:
+      skill_refs: [openrig-user, verification-before-completion]
+      preferred_targets: [check-qa@factory-rsi]
+    reviewer:
+      skill_refs: [openrig-user, review-team, plan-review]
+      preferred_targets: [review-reviewer@factory-rsi]
+    release_manager:
+      skill_refs: [openrig-user, release-manager]
+      preferred_targets: [release-manager@factory-rsi]
+    orchestrator:
+      skill_refs: [openrig-user, orchestration-team]
+      preferred_targets: [orch-lead@factory-rsi]
+    # The dogfood role is DECOUPLED from the inner loop: it runs out-of-band
+    # against the SHIPPED product and feeds findings into the next plan (the RSI
+    # edge). It is intentionally NOT an inner-loop step here; the continuous
+    # out-of-band runtime mechanism is refined in a later release.
+    dogfood:
+      skill_refs: [openrig-user, dogfood, systematic-debugging]
+      preferred_targets: [dogfood-tester@factory-rsi]
+  steps:
+    - id: plan
+      actor_role: planner
+      objective: >
+        Turn the current input — the product corpus on cycle 1, or the recorded
+        out-of-band dogfood findings thereafter — into ONE buildable slice spec.
+        The findings arrive as recorded closure evidence, never chat.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [implementer]
+    - id: implement
+      actor_role: implementer
+      objective: Build the slice per the plan and produce proof for the check.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [qa]
+    - id: qa_check
+      actor_role: qa
+      objective: >
+        Check the built artifact. Passing hands to review; a FAILING check (the
+        artifact's verdict, not the step's dysfunction) routes back to implement
+        for bounded remediation.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [reviewer]
+        on:
+          failed: implement
+    - id: review
+      actor_role: reviewer
+      objective: >
+        Review the artifact (cross-runtime diversity vs the builder). Passing
+        hands to the release prep; a failing review routes back to implement.
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        mode: require
+        suggested_roles: [release_manager]
+        on:
+          failed: implement
+    - id: release_prep
+      actor_role: release_manager
+      objective: >
+        Prepare the release notes, docs/website updates, and the release PR, and
+        record the cycle's release evidence at `proof/PROOF.md` in the workspace
+        (the `evidence_ref` the sign-off gate points at). This is the
+        release-manager's ACTUAL work and it runs BEFORE any gate — the prepared
+        artifacts exist first; publish stays a human act (held at release_signoff).
+      allowed_exits: [handoff, waiting, failed]
+      next_hop:
+        # Explicit step-id route (NOT suggested_roles): release_prep and
+        # release_signoff share the release_manager actor_role, so a role-based
+        # hop would be ambiguous (it would match the first release_manager step).
+        # The prepared artifacts therefore exist BEFORE the human gate below.
+        on:
+          handoff: release_signoff
+    - id: release_signoff
+      actor_role: release_manager
+      objective: >
+        Hold the ship decision at the human gate, against the release artifacts
+        already prepared in release_prep. Approval lets the human proceed to
+        publish; nothing is published automatically.
+      allowed_exits: [done, waiting, failed]
+      gate:
+        target: human@kernel
+        summary: "RSI cycle clean; release artifacts prepared — sign off to publish (publish is a human act)."
+        # Workspace-relative pointer to the release evidence release_prep records
+        # (the same convention the shipped gated-release.yaml example uses); it is
+        # produced in the running workspace per cycle, not a slice file.
+        evidence_ref: proof/PROOF.md
+      next_hop:
+        mode: forbid
+  invariants:
+    continuation_required: true
+    preserve_lineage: true
+    closure_required: true
+    allowed_exits: [handoff, waiting, done, failed]
+  loop_guards:
+    # ENFORCEABLE (integer >= 1) — sanctions the bounded remediation loops
+    # (qa_check→implement, review→implement); the WF-1 validator requires it and
+    # the Argo unbounded-recursion lesson demands it. A trip becomes a WF-5
+    # exception; a resume grants one more bounded window (WF-5 FR-4 livelock rail).
+    max_hops: 20
+    spawn_budget: 0
+  closure:
+    success: RSI cycle clean; release candidate prepared and held at the human ship gate.
+    degraded: Cycle stopped with a named blocker or a bounded max_hops trip awaiting resume.
+    failed: Step failed as an exception; preserve the finding and route via the dial.

package/node_modules/@openrig/daemon/dist/builtins/workflow-specs/gated-release.yaml

@@ -0,0 +1,26 @@
+# OpenRig 0.4.6 spec-language example — the GATED STAGE shape.
+# A human sign-off gate on the final step (compiles to the shipped
+# human-route machinery: tier human-gate + summary + evidence_ref,
+# resolved by `rig queue resolve`), plus per-step harness pins.
+workflow:
+  id: gated-release
+  version: 1
+  objective: Build, prove, then hold the ship decision at a human gate.
+  roles:
+    builder:
+      preferred_targets: [flow-builder@acme-flow]
+    prover:
+      preferred_targets: [flow-prover@acme-flow, flow-prover2@acme-flow]
+  steps:
+    - id: build
+      actor_role: builder
+      harness: claude-code
+    - id: prove
+      actor_role: prover
+      harness: codex
+    - id: ship-signoff
+      actor_role: prover
+      gate:
+        target: human@kernel
+        summary: "Release candidate proven; sign off to ship"
+        evidence_ref: proof/PROOF.md

package/node_modules/@openrig/daemon/dist/builtins/workflow-specs/linear-build.yaml

@@ -0,0 +1,21 @@
+# OpenRig 0.4.6 spec-language example — the LINEAR PIPELINE shape.
+# Zero WF-2 features: declaration-order routing, byte-identical to the
+# WF-1 engine's behavior (the zero-regression reference shape).
+workflow:
+  id: linear-build
+  version: 1
+  objective: Move one packet through plan, build, prove in declaration order.
+  roles:
+    planner:
+      preferred_targets: [flow-planner@acme-flow]
+    builder:
+      preferred_targets: [flow-builder@acme-flow]
+    prover:
+      preferred_targets: [flow-prover@acme-flow]
+  steps:
+    - id: plan
+      actor_role: planner
+    - id: build
+      actor_role: builder
+    - id: prove
+      actor_role: prover

package/node_modules/@openrig/daemon/dist/crash-cart-surface.d.ts

@@ -0,0 +1,5 @@
+export * from "./domain/crash-cart-discovery.js";
+export * from "./domain/crash-cart-detect.js";
+export * from "./domain/crash-cart-probes.js";
+export * from "./domain/crash-cart-emit.js";
+//# sourceMappingURL=crash-cart-surface.d.ts.map

package/node_modules/@openrig/daemon/dist/crash-cart-surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-cart-surface.d.ts","sourceRoot":"","sources":["../src/crash-cart-surface.ts"],"names":[],"mappings":"AAIA,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC"}

package/node_modules/@openrig/daemon/dist/crash-cart-surface.js

@@ -0,0 +1,9 @@
+// The NARROW `@openrig/daemon/crash-cart` public surface (packaging ruling A, rail 1): ONLY the
+// crash-cart read / emit / detect — never a blanket daemon export (accidental-public-API guard).
+// Consumed by the `rig crash-cart --json` verb (lazy-imported at invocation, dep rail 2). The C2 read
+// (loadCrashCartDiscovery) is re-exported VERBATIM (coupling rail 2 — a single impl, not a parallel one).
+export * from "./domain/crash-cart-discovery.js";
+export * from "./domain/crash-cart-detect.js";
+export * from "./domain/crash-cart-probes.js";
+export * from "./domain/crash-cart-emit.js";
+//# sourceMappingURL=crash-cart-surface.js.map

package/node_modules/@openrig/daemon/dist/crash-cart-surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-cart-surface.js","sourceRoot":"","sources":["../src/crash-cart-surface.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,iGAAiG;AACjG,sGAAsG;AACtG,0GAA0G;AAC1G,cAAc,kCAAkC,CAAC;AACjD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,6BAA6B,CAAC"}

package/node_modules/@openrig/daemon/dist/daemon-db-path.d.ts

@@ -0,0 +1,13 @@
+/**
+ * D15 — resolve the daemon's SQLite path. An explicit OPENRIG_DB / RIGGED_DB wins
+ * (the operator takes responsibility for that path); otherwise the db is anchored
+ * under OPENRIG_HOME, NEVER a bare CWD-relative filename.
+ *
+ * Incident 2026-08-07: the entrypoint defaulted `dbPath` to a bare "openrig.sqlite"
+ * which resolves against the process CWD — so a daemon launched with an isolated
+ * OPENRIG_HOME could still open the SHARED fleet db (whatever sat in its CWD).
+ * Anchoring the default to OPENRIG_HOME makes an isolated-home daemon isolate its
+ * db too, which is the whole point of setting OPENRIG_HOME.
+ */
+export declare function resolveDaemonDbPath(explicitDb: string | undefined | null, openrigHome: string): string;
+//# sourceMappingURL=daemon-db-path.d.ts.map

package/node_modules/@openrig/daemon/dist/daemon-db-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-db-path.d.ts","sourceRoot":"","sources":["../src/daemon-db-path.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAKtG"}

package/node_modules/@openrig/daemon/dist/daemon-db-path.js

@@ -0,0 +1,19 @@
+import { join } from "node:path";
+/**
+ * D15 — resolve the daemon's SQLite path. An explicit OPENRIG_DB / RIGGED_DB wins
+ * (the operator takes responsibility for that path); otherwise the db is anchored
+ * under OPENRIG_HOME, NEVER a bare CWD-relative filename.
+ *
+ * Incident 2026-08-07: the entrypoint defaulted `dbPath` to a bare "openrig.sqlite"
+ * which resolves against the process CWD — so a daemon launched with an isolated
+ * OPENRIG_HOME could still open the SHARED fleet db (whatever sat in its CWD).
+ * Anchoring the default to OPENRIG_HOME makes an isolated-home daemon isolate its
+ * db too, which is the whole point of setting OPENRIG_HOME.
+ */
+export function resolveDaemonDbPath(explicitDb, openrigHome) {
+    if (explicitDb && explicitDb.length > 0) {
+        return explicitDb;
+    }
+    return join(openrigHome, "openrig.sqlite");
+}
+//# sourceMappingURL=daemon-db-path.js.map

package/node_modules/@openrig/daemon/dist/daemon-db-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-db-path.js","sourceRoot":"","sources":["../src/daemon-db-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAqC,EAAE,WAAmB;IAC5F,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAC7C,CAAC"}

package/node_modules/@openrig/daemon/dist/db/all-migrations.d.ts

@@ -0,0 +1,4 @@
+import type { Migration } from "./migrate.js";
+/** Ordered 001→071 (068 enforcer decisions, dropped forward by 071; 069/070 W3 launch truth). */
+export declare const ALL_MIGRATIONS: Migration[];
+//# sourceMappingURL=all-migrations.d.ts.map

package/node_modules/@openrig/daemon/dist/db/all-migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"all-migrations.d.ts","sourceRoot":"","sources":["../../src/db/all-migrations.ts"],"names":[],"mappings":"AA4EA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9C,iGAAiG;AACjG,eAAO,MAAM,cAAc,EAAE,SAAS,EAwErC,CAAC"}