@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/db/migrations/034_workflow_instances.d.ts

@@ -0,0 +1,42 @@
+import type { Migration } from "../migrate.js";
+/**
+ * Workflow instances (PL-004 Phase D; live workflow state).
+ *
+ * Per PRD § L4 Workflow Runtime: a workflow instance is a SQLite-canonical
+ * record of a running workflow. Survives daemon restart without
+ * filesystem reconciliation. The current_frontier_json column holds the
+ * array of qitem_ids that are the active step packets at any given time.
+ *
+ * R2 fix (guard blocker 1): durable current-step binding via
+ * `current_step_id`. Replaces trail-based "last_step + 1" inference,
+ * which produced wrong results for reused-frontier packets (e.g.,
+ * waiting → resume on same packet would skip a step). Mirrors POC
+ * which extracts step_id from the current packet binding rather than
+ * inferring from trail order. v1 supports a single active frontier
+ * packet; multi-frontier (parallel branches) is graduation and would
+ * need a packet→step map.
+ *
+ * Status enum (matches POC + PRD):
+ *   - active: instance has at least one frontier packet in-flight
+ *   - waiting: instance has a frontier packet blocked on an external gate
+ *   - completed: terminal success state; current_frontier_json is []
+ *   - failed: terminal failure state
+ *
+ * fallback_synthesis: nullable text recording the agent-judgment
+ * synthesis used when peer continuity relay was not available (closed
+ * but no successor identified). Optional audit context.
+ *
+ * hop_count: count of step transitions executed; PRD invariant
+ * `loop_guards.max_hops` is checked at projection time.
+ *
+ * last_continuation_decision_json: optional structured record of the
+ * most recent continuation/closure decision (the `handoff_decision`,
+ * `wait_decision`, or `close_decision` shape from the POC). Used for
+ * trace and debugging.
+ *
+ * Indexes:
+ *   - (status, workflow_name) — fast "find active instances of workflow X"
+ *   - (created_by_session, status) — fast "find my live workflows"
+ */
+export declare const workflowInstancesSchema: Migration;
+//# sourceMappingURL=034_workflow_instances.d.ts.map

package/node_modules/@openrig/daemon/dist/db/migrations/034_workflow_instances.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"034_workflow_instances.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/034_workflow_instances.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAsBrC,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/034_workflow_instances.js

@@ -0,0 +1,63 @@
+/**
+ * Workflow instances (PL-004 Phase D; live workflow state).
+ *
+ * Per PRD § L4 Workflow Runtime: a workflow instance is a SQLite-canonical
+ * record of a running workflow. Survives daemon restart without
+ * filesystem reconciliation. The current_frontier_json column holds the
+ * array of qitem_ids that are the active step packets at any given time.
+ *
+ * R2 fix (guard blocker 1): durable current-step binding via
+ * `current_step_id`. Replaces trail-based "last_step + 1" inference,
+ * which produced wrong results for reused-frontier packets (e.g.,
+ * waiting → resume on same packet would skip a step). Mirrors POC
+ * which extracts step_id from the current packet binding rather than
+ * inferring from trail order. v1 supports a single active frontier
+ * packet; multi-frontier (parallel branches) is graduation and would
+ * need a packet→step map.
+ *
+ * Status enum (matches POC + PRD):
+ *   - active: instance has at least one frontier packet in-flight
+ *   - waiting: instance has a frontier packet blocked on an external gate
+ *   - completed: terminal success state; current_frontier_json is []
+ *   - failed: terminal failure state
+ *
+ * fallback_synthesis: nullable text recording the agent-judgment
+ * synthesis used when peer continuity relay was not available (closed
+ * but no successor identified). Optional audit context.
+ *
+ * hop_count: count of step transitions executed; PRD invariant
+ * `loop_guards.max_hops` is checked at projection time.
+ *
+ * last_continuation_decision_json: optional structured record of the
+ * most recent continuation/closure decision (the `handoff_decision`,
+ * `wait_decision`, or `close_decision` shape from the POC). Used for
+ * trace and debugging.
+ *
+ * Indexes:
+ *   - (status, workflow_name) — fast "find active instances of workflow X"
+ *   - (created_by_session, status) — fast "find my live workflows"
+ */
+export const workflowInstancesSchema = {
+    name: "034_workflow_instances.sql",
+    sql: `
+    CREATE TABLE IF NOT EXISTS workflow_instances (
+      instance_id TEXT PRIMARY KEY,
+      workflow_name TEXT NOT NULL,
+      workflow_version TEXT NOT NULL,
+      created_by_session TEXT NOT NULL,
+      created_at TEXT NOT NULL,
+      status TEXT NOT NULL DEFAULT 'active',
+      current_frontier_json TEXT NOT NULL DEFAULT '[]',
+      current_step_id TEXT,
+      hop_count INTEGER NOT NULL DEFAULT 0,
+      fallback_synthesis TEXT,
+      last_continuation_decision_json TEXT,
+      completed_at TEXT
+    );
+    CREATE INDEX IF NOT EXISTS idx_workflow_instances_status_name
+      ON workflow_instances(status, workflow_name);
+    CREATE INDEX IF NOT EXISTS idx_workflow_instances_creator_status
+      ON workflow_instances(created_by_session, status);
+  `,
+};
+//# sourceMappingURL=034_workflow_instances.js.map

package/node_modules/@openrig/daemon/dist/db/migrations/034_workflow_instances.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"034_workflow_instances.js","sourceRoot":"","sources":["../../../src/db/migrations/034_workflow_instances.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAc;IAChD,IAAI,EAAE,4BAA4B;IAClC,GAAG,EAAE;;;;;;;;;;;;;;;;;;;GAmBJ;CACF,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/035_workflow_step_trails.d.ts

@@ -0,0 +1,29 @@
+import type { Migration } from "../migrate.js";
+/**
+ * Workflow step trails (PL-004 Phase D; append-only history).
+ *
+ * Per PRD § L4 Workflow Runtime: every workflow step transition records
+ * a trail entry. Append-only: writers only INSERT. UPDATE/DELETE are
+ * not exposed by WorkflowStepTrailLog API; direct SQL would succeed
+ * (SQLite has no view/role layer) but is a contract violation enforced
+ * at the domain-layer API boundary.
+ *
+ * Columns:
+ *   - trail_id (ULID PK)
+ *   - instance_id (FK to workflow_instances)
+ *   - step_id (from spec; e.g., "produce", "review-convergence")
+ *   - step_role (from spec; e.g., "producer", "orchestrator")
+ *   - closed_at (ISO timestamp of the closure/transition)
+ *   - closure_reason (enum: "handoff", "waiting", "done", "failed")
+ *   - closure_evidence_json (operator-supplied evidence + system-derived
+ *     audit context; JSON-encoded)
+ *   - actor_session (the session that closed the packet — owner-as-author)
+ *   - next_qitem_id (FK to queue_items; null on terminal closure)
+ *   - prior_qitem_id (the closed packet; FK to queue_items)
+ *
+ * Indexes:
+ *   - (instance_id, closed_at DESC) — fast "trail for one workflow instance"
+ *   - (closed_at DESC) — global recent activity
+ */
+export declare const workflowStepTrailsSchema: Migration;
+//# sourceMappingURL=035_workflow_step_trails.d.ts.map

package/node_modules/@openrig/daemon/dist/db/migrations/035_workflow_step_trails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"035_workflow_step_trails.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/035_workflow_step_trails.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAoBtC,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/035_workflow_step_trails.js

@@ -0,0 +1,48 @@
+/**
+ * Workflow step trails (PL-004 Phase D; append-only history).
+ *
+ * Per PRD § L4 Workflow Runtime: every workflow step transition records
+ * a trail entry. Append-only: writers only INSERT. UPDATE/DELETE are
+ * not exposed by WorkflowStepTrailLog API; direct SQL would succeed
+ * (SQLite has no view/role layer) but is a contract violation enforced
+ * at the domain-layer API boundary.
+ *
+ * Columns:
+ *   - trail_id (ULID PK)
+ *   - instance_id (FK to workflow_instances)
+ *   - step_id (from spec; e.g., "produce", "review-convergence")
+ *   - step_role (from spec; e.g., "producer", "orchestrator")
+ *   - closed_at (ISO timestamp of the closure/transition)
+ *   - closure_reason (enum: "handoff", "waiting", "done", "failed")
+ *   - closure_evidence_json (operator-supplied evidence + system-derived
+ *     audit context; JSON-encoded)
+ *   - actor_session (the session that closed the packet — owner-as-author)
+ *   - next_qitem_id (FK to queue_items; null on terminal closure)
+ *   - prior_qitem_id (the closed packet; FK to queue_items)
+ *
+ * Indexes:
+ *   - (instance_id, closed_at DESC) — fast "trail for one workflow instance"
+ *   - (closed_at DESC) — global recent activity
+ */
+export const workflowStepTrailsSchema = {
+    name: "035_workflow_step_trails.sql",
+    sql: `
+    CREATE TABLE IF NOT EXISTS workflow_step_trails (
+      trail_id TEXT PRIMARY KEY,
+      instance_id TEXT NOT NULL REFERENCES workflow_instances(instance_id),
+      step_id TEXT NOT NULL,
+      step_role TEXT NOT NULL,
+      closed_at TEXT NOT NULL,
+      closure_reason TEXT NOT NULL,
+      closure_evidence_json TEXT,
+      actor_session TEXT NOT NULL,
+      next_qitem_id TEXT REFERENCES queue_items(qitem_id),
+      prior_qitem_id TEXT REFERENCES queue_items(qitem_id)
+    );
+    CREATE INDEX IF NOT EXISTS idx_workflow_step_trails_instance_recent
+      ON workflow_step_trails(instance_id, closed_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_workflow_step_trails_recent
+      ON workflow_step_trails(closed_at DESC);
+  `,
+};
+//# sourceMappingURL=035_workflow_step_trails.js.map

package/node_modules/@openrig/daemon/dist/db/migrations/035_workflow_step_trails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"035_workflow_step_trails.js","sourceRoot":"","sources":["../../../src/db/migrations/035_workflow_step_trails.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAc;IACjD,IAAI,EAAE,8BAA8B;IACpC,GAAG,EAAE;;;;;;;;;;;;;;;;;GAiBJ;CACF,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/036_watchdog_policy_enum_extension.d.ts

@@ -0,0 +1,35 @@
+import type { Migration } from "../migrate.js";
+/**
+ * Watchdog policy enum extension (PL-004 Phase D).
+ *
+ * DOCUMENTING NO-OP MIGRATION.
+ *
+ * Phase C implements the watchdog_jobs.policy enum at the application
+ * layer (in WatchdogJobsRepository.register() via the PHASE_C_POLICIES
+ * array + WORKFLOW_KEEPALIVE_DEFERRED_POLICY constant). The SQLite
+ * column itself is plain TEXT with no CHECK constraint, so extending
+ * the enum to include "workflow-keepalive" requires NO schema change.
+ *
+ * The actual enforcement extension lives in:
+ *   packages/daemon/src/domain/watchdog-jobs-repository.ts
+ *     - PHASE_C_POLICIES → renamed to PHASE_D_POLICIES (or extended)
+ *       to include "workflow-keepalive"
+ *     - WORKFLOW_KEEPALIVE_DEFERRED_POLICY rejection removed
+ *
+ * This migration exists for two reasons:
+ *   1. Audit trail: documents that Phase D extended the policy enum
+ *      surface, even though no DDL was needed.
+ *   2. Migration sequence integrity: keeps Phase D's migration count
+ *      visible in the daemon startup log alongside the three new
+ *      workflow tables (033, 034, 035). Slice IMPL row 17 explicitly
+ *      requires the extension migration land "cleanly without
+ *      touching Phase C's existing migration files" — this no-op
+ *      satisfies that constraint.
+ *
+ * Per slice IMPL § Write Set:
+ *   "if the enforcement is application-layer in
+ *   `watchdog-policy-engine.ts`, the migration is a no-op SQL but
+ *   documents the policy enum intent."
+ */
+export declare const watchdogPolicyEnumExtensionSchema: Migration;
+//# sourceMappingURL=036_watchdog_policy_enum_extension.d.ts.map

package/node_modules/@openrig/daemon/dist/db/migrations/036_watchdog_policy_enum_extension.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"036_watchdog_policy_enum_extension.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/036_watchdog_policy_enum_extension.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,iCAAiC,EAAE,SAS/C,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/036_watchdog_policy_enum_extension.js

@@ -0,0 +1,43 @@
+/**
+ * Watchdog policy enum extension (PL-004 Phase D).
+ *
+ * DOCUMENTING NO-OP MIGRATION.
+ *
+ * Phase C implements the watchdog_jobs.policy enum at the application
+ * layer (in WatchdogJobsRepository.register() via the PHASE_C_POLICIES
+ * array + WORKFLOW_KEEPALIVE_DEFERRED_POLICY constant). The SQLite
+ * column itself is plain TEXT with no CHECK constraint, so extending
+ * the enum to include "workflow-keepalive" requires NO schema change.
+ *
+ * The actual enforcement extension lives in:
+ *   packages/daemon/src/domain/watchdog-jobs-repository.ts
+ *     - PHASE_C_POLICIES → renamed to PHASE_D_POLICIES (or extended)
+ *       to include "workflow-keepalive"
+ *     - WORKFLOW_KEEPALIVE_DEFERRED_POLICY rejection removed
+ *
+ * This migration exists for two reasons:
+ *   1. Audit trail: documents that Phase D extended the policy enum
+ *      surface, even though no DDL was needed.
+ *   2. Migration sequence integrity: keeps Phase D's migration count
+ *      visible in the daemon startup log alongside the three new
+ *      workflow tables (033, 034, 035). Slice IMPL row 17 explicitly
+ *      requires the extension migration land "cleanly without
+ *      touching Phase C's existing migration files" — this no-op
+ *      satisfies that constraint.
+ *
+ * Per slice IMPL § Write Set:
+ *   "if the enforcement is application-layer in
+ *   `watchdog-policy-engine.ts`, the migration is a no-op SQL but
+ *   documents the policy enum intent."
+ */
+export const watchdogPolicyEnumExtensionSchema = {
+    name: "036_watchdog_policy_enum_extension.sql",
+    sql: `
+    -- No DDL: Phase C policy enum is enforced at the application layer
+    -- via PHASE_D_POLICIES in watchdog-jobs-repository.ts. The
+    -- watchdog_jobs.policy column remains plain TEXT. This migration
+    -- exists as an audit-trail marker for the Phase D enum extension.
+    SELECT 1 WHERE 0;
+  `,
+};
+//# sourceMappingURL=036_watchdog_policy_enum_extension.js.map

package/node_modules/@openrig/daemon/dist/db/migrations/036_watchdog_policy_enum_extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"036_watchdog_policy_enum_extension.js","sourceRoot":"","sources":["../../../src/db/migrations/036_watchdog_policy_enum_extension.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAc;IAC1D,IAAI,EAAE,wCAAwC;IAC9C,GAAG,EAAE;;;;;;GAMJ;CACF,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/037_mission_control_actions.d.ts

@@ -0,0 +1,55 @@
+import type { Migration } from "../migrate.js";
+/**
+ * Mission Control actions (PL-005 Phase A; daemon-backed action audit).
+ *
+ * Per PRD § Q5 + slice IMPL § Write Set: SQLite-canonical append-only
+ * audit log of every operator action through Mission Control. Records
+ * every invocation of the 7 Phase A verbs with before/after snapshots
+ * for forensic reconstruction.
+ *
+ * Append-only contract: writers only INSERT. UPDATE/DELETE are not
+ * exposed by MissionControlActionLog API; direct SQL UPDATE/DELETE
+ * would succeed at the DB level (SQLite has no view/role layer) but
+ * is a contract violation enforced at the domain-layer API boundary.
+ *
+ * Action verb enum (Phase A v1; 7 values):
+ *   - approve     — operator approved a human-gated item
+ *   - deny        — operator denied a human-gated item
+ *   - route       — operator routed an item to a different destination
+ *   - annotate    — operator added an annotation (annotation field required)
+ *   - hold        — operator held an item with a reason (reason required)
+ *   - drop        — operator dropped an item with a reason (reason required)
+ *   - handoff     — atomic 4-step (source-update + destination-create
+ *                   + opt-in best-effort notify + audit append)
+ *
+ * Columns:
+ *   - action_id (ULID PK)
+ *   - action_verb (TEXT, app-layer enum enforcement)
+ *   - qitem_id (TEXT, FK to queue_items when applicable; nullable for
+ *     observations / non-queue actions in future scope)
+ *   - actor_session (TEXT NOT NULL) — operator session that fired the verb
+ *   - acted_at (TEXT NOT NULL) — ISO timestamp
+ *   - before_state_json (TEXT) — snapshot of qitem state pre-action
+ *   - after_state_json (TEXT) — snapshot of qitem state post-action
+ *   - reason (TEXT) — required for hold + drop
+ *   - annotation (TEXT) — required for annotate
+ *   - notify_attempted (INTEGER 0|1) — for handoff
+ *   - notify_result (TEXT) — verified | delivered-ack-pending | failed:<reason>
+ *     (post-OPR.0.3.2.21.FR-4(c) wording: "sent-unverified" was misleading
+ *     because it read as a partial-failure even when delivery was fine;
+ *     "delivered-ack-pending" reads as the normal-and-expected case for
+ *     codex seats whose synchronous ack window expired while busy)
+ *   - audit_notes_json (TEXT) — operator-supplied evidence map
+ *
+ * Indexes:
+ *   - (acted_at DESC, action_verb) — recent-actions and per-verb scans
+ *   - (qitem_id, acted_at DESC) — per-qitem audit trail
+ *   - (actor_session, acted_at DESC) — per-operator audit
+ *
+ * Archive policy hooks: not implemented as automatic v1; the table is
+ * append-only and grows unbounded. Future archive can move rows older
+ * than N days into a sibling archive table OR export to filesystem.
+ * JSONL mirror is deferred unless a concrete durability need surfaces.
+ */
+export declare const missionControlActionsSchema: Migration;
+//# sourceMappingURL=037_mission_control_actions.d.ts.map

package/node_modules/@openrig/daemon/dist/db/migrations/037_mission_control_actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"037_mission_control_actions.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/037_mission_control_actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAwBzC,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/037_mission_control_actions.js

@@ -0,0 +1,78 @@
+/**
+ * Mission Control actions (PL-005 Phase A; daemon-backed action audit).
+ *
+ * Per PRD § Q5 + slice IMPL § Write Set: SQLite-canonical append-only
+ * audit log of every operator action through Mission Control. Records
+ * every invocation of the 7 Phase A verbs with before/after snapshots
+ * for forensic reconstruction.
+ *
+ * Append-only contract: writers only INSERT. UPDATE/DELETE are not
+ * exposed by MissionControlActionLog API; direct SQL UPDATE/DELETE
+ * would succeed at the DB level (SQLite has no view/role layer) but
+ * is a contract violation enforced at the domain-layer API boundary.
+ *
+ * Action verb enum (Phase A v1; 7 values):
+ *   - approve     — operator approved a human-gated item
+ *   - deny        — operator denied a human-gated item
+ *   - route       — operator routed an item to a different destination
+ *   - annotate    — operator added an annotation (annotation field required)
+ *   - hold        — operator held an item with a reason (reason required)
+ *   - drop        — operator dropped an item with a reason (reason required)
+ *   - handoff     — atomic 4-step (source-update + destination-create
+ *                   + opt-in best-effort notify + audit append)
+ *
+ * Columns:
+ *   - action_id (ULID PK)
+ *   - action_verb (TEXT, app-layer enum enforcement)
+ *   - qitem_id (TEXT, FK to queue_items when applicable; nullable for
+ *     observations / non-queue actions in future scope)
+ *   - actor_session (TEXT NOT NULL) — operator session that fired the verb
+ *   - acted_at (TEXT NOT NULL) — ISO timestamp
+ *   - before_state_json (TEXT) — snapshot of qitem state pre-action
+ *   - after_state_json (TEXT) — snapshot of qitem state post-action
+ *   - reason (TEXT) — required for hold + drop
+ *   - annotation (TEXT) — required for annotate
+ *   - notify_attempted (INTEGER 0|1) — for handoff
+ *   - notify_result (TEXT) — verified | delivered-ack-pending | failed:<reason>
+ *     (post-OPR.0.3.2.21.FR-4(c) wording: "sent-unverified" was misleading
+ *     because it read as a partial-failure even when delivery was fine;
+ *     "delivered-ack-pending" reads as the normal-and-expected case for
+ *     codex seats whose synchronous ack window expired while busy)
+ *   - audit_notes_json (TEXT) — operator-supplied evidence map
+ *
+ * Indexes:
+ *   - (acted_at DESC, action_verb) — recent-actions and per-verb scans
+ *   - (qitem_id, acted_at DESC) — per-qitem audit trail
+ *   - (actor_session, acted_at DESC) — per-operator audit
+ *
+ * Archive policy hooks: not implemented as automatic v1; the table is
+ * append-only and grows unbounded. Future archive can move rows older
+ * than N days into a sibling archive table OR export to filesystem.
+ * JSONL mirror is deferred unless a concrete durability need surfaces.
+ */
+export const missionControlActionsSchema = {
+    name: "037_mission_control_actions.sql",
+    sql: `
+    CREATE TABLE IF NOT EXISTS mission_control_actions (
+      action_id TEXT PRIMARY KEY,
+      action_verb TEXT NOT NULL,
+      qitem_id TEXT REFERENCES queue_items(qitem_id),
+      actor_session TEXT NOT NULL,
+      acted_at TEXT NOT NULL,
+      before_state_json TEXT,
+      after_state_json TEXT,
+      reason TEXT,
+      annotation TEXT,
+      notify_attempted INTEGER NOT NULL DEFAULT 0,
+      notify_result TEXT,
+      audit_notes_json TEXT
+    );
+    CREATE INDEX IF NOT EXISTS idx_mc_actions_recent
+      ON mission_control_actions(acted_at DESC, action_verb);
+    CREATE INDEX IF NOT EXISTS idx_mc_actions_qitem
+      ON mission_control_actions(qitem_id, acted_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_mc_actions_actor
+      ON mission_control_actions(actor_session, acted_at DESC);
+  `,
+};
+//# sourceMappingURL=037_mission_control_actions.js.map

package/node_modules/@openrig/daemon/dist/db/migrations/037_mission_control_actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"037_mission_control_actions.js","sourceRoot":"","sources":["../../../src/db/migrations/037_mission_control_actions.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAc;IACpD,IAAI,EAAE,iCAAiC;IACvC,GAAG,EAAE;;;;;;;;;;;;;;;;;;;;;GAqBJ;CACF,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/038_workspace_primitive.d.ts

@@ -0,0 +1,16 @@
+import type { Migration } from "../migrate.js";
+/**
+ * PL-007 Workspace Primitive v0 — rigs.workspace_json column.
+ *
+ * Adds `workspace_json TEXT` to the rigs table. Holds the typed
+ * RigSpec.workspace block as JSON when a rig declares one. Populated by
+ * RigRepository.setRigWorkspace at instantiate time. Whoami /
+ * node-inventory read this column to surface workspace fields alongside
+ * cwd. NULL for rigs without a workspace block.
+ *
+ * The companion queue_items.target_repo column ships in migration 039
+ * so test fixtures that exercise rigs without queue_items (and vice
+ * versa) can apply only the half they need.
+ */
+export declare const workspacePrimitiveSchema: Migration;
+//# sourceMappingURL=038_workspace_primitive.d.ts.map

package/node_modules/@openrig/daemon/dist/db/migrations/038_workspace_primitive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"038_workspace_primitive.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/038_workspace_primitive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAKtC,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/038_workspace_primitive.js

@@ -0,0 +1,20 @@
+/**
+ * PL-007 Workspace Primitive v0 — rigs.workspace_json column.
+ *
+ * Adds `workspace_json TEXT` to the rigs table. Holds the typed
+ * RigSpec.workspace block as JSON when a rig declares one. Populated by
+ * RigRepository.setRigWorkspace at instantiate time. Whoami /
+ * node-inventory read this column to surface workspace fields alongside
+ * cwd. NULL for rigs without a workspace block.
+ *
+ * The companion queue_items.target_repo column ships in migration 039
+ * so test fixtures that exercise rigs without queue_items (and vice
+ * versa) can apply only the half they need.
+ */
+export const workspacePrimitiveSchema = {
+    name: "038_workspace_primitive.sql",
+    sql: `
+    ALTER TABLE rigs ADD COLUMN workspace_json TEXT;
+  `,
+};
+//# sourceMappingURL=038_workspace_primitive.js.map

package/node_modules/@openrig/daemon/dist/db/migrations/038_workspace_primitive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"038_workspace_primitive.js","sourceRoot":"","sources":["../../../src/db/migrations/038_workspace_primitive.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAc;IACjD,IAAI,EAAE,6BAA6B;IACnC,GAAG,EAAE;;GAEJ;CACF,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/039_queue_target_repo.d.ts

@@ -0,0 +1,16 @@
+import type { Migration } from "../migrate.js";
+/**
+ * PL-007 Workspace Primitive v0 — queue_items.target_repo column.
+ *
+ * Adds `target_repo TEXT` to the queue_items table. Carries the
+ * per-item typed repo scope when an operator passes
+ * `rigx queue create --target-repo <name>` etc. Validated at the
+ * route layer against the source rig's RigSpec.workspace.repos[].
+ * NULL when the qitem is unambiguous against the rig's default_repo
+ * or when no workspace is declared. Mission Control views surface
+ * the field for cross-rig handoff clarity.
+ *
+ * Companion to migration 038 which adds rigs.workspace_json.
+ */
+export declare const queueTargetRepoSchema: Migration;
+//# sourceMappingURL=039_queue_target_repo.d.ts.map

package/node_modules/@openrig/daemon/dist/db/migrations/039_queue_target_repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"039_queue_target_repo.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/039_queue_target_repo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAMnC,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/039_queue_target_repo.js

@@ -0,0 +1,21 @@
+/**
+ * PL-007 Workspace Primitive v0 — queue_items.target_repo column.
+ *
+ * Adds `target_repo TEXT` to the queue_items table. Carries the
+ * per-item typed repo scope when an operator passes
+ * `rigx queue create --target-repo <name>` etc. Validated at the
+ * route layer against the source rig's RigSpec.workspace.repos[].
+ * NULL when the qitem is unambiguous against the rig's default_repo
+ * or when no workspace is declared. Mission Control views surface
+ * the field for cross-rig handoff clarity.
+ *
+ * Companion to migration 038 which adds rigs.workspace_json.
+ */
+export const queueTargetRepoSchema = {
+    name: "039_queue_target_repo.sql",
+    sql: `
+    ALTER TABLE queue_items ADD COLUMN target_repo TEXT;
+    CREATE INDEX IF NOT EXISTS idx_queue_items_target_repo ON queue_items(target_repo);
+  `,
+};
+//# sourceMappingURL=039_queue_target_repo.js.map

package/node_modules/@openrig/daemon/dist/db/migrations/039_queue_target_repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"039_queue_target_repo.js","sourceRoot":"","sources":["../../../src/db/migrations/039_queue_target_repo.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAc;IAC9C,IAAI,EAAE,2BAA2B;IACjC,GAAG,EAAE;;;GAGJ;CACF,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/040_workflow_specs_diagnostic.d.ts

@@ -0,0 +1,32 @@
+import type { Migration } from "../migrate.js";
+/**
+ * Slice 11 (release-0.3.1 workflow-spec-folder-discovery) —
+ * workflow_specs diagnostic columns.
+ *
+ * SC-29 #10 (verbatim, declared in commit body):
+ *   "Slice 11 (workflow-spec-folder-discovery) requires schema
+ *   migration 040_workflow_specs_diagnostic.ts adding
+ *   status TEXT DEFAULT 'valid' + error_message TEXT columns to the
+ *   workflow_specs cache. No new table, no constraint changes beyond
+ *   default; ALTER TABLE ADD COLUMN preserves existing rows (default
+ *   'valid' fills retroactively for already-cached rows). Read-only
+ *   diagnostic surface — the cache stores parser/validator errors
+ *   so the Library UI can render them; daemon does not act on the
+ *   diagnostic state. Per IMPL-PRD §HG-8 'unless provenance / status
+ *   columns require migration — declare upfront if so': declared
+ *   upfront in slice 11 ACK + commit body."
+ *
+ * Columns:
+ *   - status TEXT NOT NULL DEFAULT 'valid' — one of 'valid' | 'error'.
+ *     Existing rows pre-040 retroactively gain 'valid' via the
+ *     DEFAULT clause when ALTER TABLE ADD COLUMN populates them.
+ *   - error_message TEXT NULL — populated only when status='error';
+ *     carries the parse/validation diagnostic for the UI to render.
+ *
+ * Provenance is NOT a new column — derived at scan time from
+ * source_path relative to the daemon's bundled-builtin starter dir
+ * (existing scanner logic at spec-library-workflow-scanner.ts
+ * already does isUnderDir(source_path, workflowBuiltinSpecsDir)).
+ */
+export declare const workflowSpecsDiagnosticSchema: Migration;
+//# sourceMappingURL=040_workflow_specs_diagnostic.d.ts.map

package/node_modules/@openrig/daemon/dist/db/migrations/040_workflow_specs_diagnostic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"040_workflow_specs_diagnostic.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/040_workflow_specs_diagnostic.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAM3C,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/040_workflow_specs_diagnostic.js

@@ -0,0 +1,37 @@
+/**
+ * Slice 11 (release-0.3.1 workflow-spec-folder-discovery) —
+ * workflow_specs diagnostic columns.
+ *
+ * SC-29 #10 (verbatim, declared in commit body):
+ *   "Slice 11 (workflow-spec-folder-discovery) requires schema
+ *   migration 040_workflow_specs_diagnostic.ts adding
+ *   status TEXT DEFAULT 'valid' + error_message TEXT columns to the
+ *   workflow_specs cache. No new table, no constraint changes beyond
+ *   default; ALTER TABLE ADD COLUMN preserves existing rows (default
+ *   'valid' fills retroactively for already-cached rows). Read-only
+ *   diagnostic surface — the cache stores parser/validator errors
+ *   so the Library UI can render them; daemon does not act on the
+ *   diagnostic state. Per IMPL-PRD §HG-8 'unless provenance / status
+ *   columns require migration — declare upfront if so': declared
+ *   upfront in slice 11 ACK + commit body."
+ *
+ * Columns:
+ *   - status TEXT NOT NULL DEFAULT 'valid' — one of 'valid' | 'error'.
+ *     Existing rows pre-040 retroactively gain 'valid' via the
+ *     DEFAULT clause when ALTER TABLE ADD COLUMN populates them.
+ *   - error_message TEXT NULL — populated only when status='error';
+ *     carries the parse/validation diagnostic for the UI to render.
+ *
+ * Provenance is NOT a new column — derived at scan time from
+ * source_path relative to the daemon's bundled-builtin starter dir
+ * (existing scanner logic at spec-library-workflow-scanner.ts
+ * already does isUnderDir(source_path, workflowBuiltinSpecsDir)).
+ */
+export const workflowSpecsDiagnosticSchema = {
+    name: "040_workflow_specs_diagnostic.sql",
+    sql: `
+    ALTER TABLE workflow_specs ADD COLUMN status TEXT NOT NULL DEFAULT 'valid';
+    ALTER TABLE workflow_specs ADD COLUMN error_message TEXT;
+  `,
+};
+//# sourceMappingURL=040_workflow_specs_diagnostic.js.map

package/node_modules/@openrig/daemon/dist/db/migrations/040_workflow_specs_diagnostic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"040_workflow_specs_diagnostic.js","sourceRoot":"","sources":["../../../src/db/migrations/040_workflow_specs_diagnostic.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAc;IACtD,IAAI,EAAE,mCAAmC;IACzC,GAAG,EAAE;;;GAGJ;CACF,CAAC"}

package/node_modules/@openrig/daemon/dist/db/migrations/041_rig_policy.d.ts

@@ -0,0 +1,32 @@
+import type { Migration } from "../migrate.js";
+/**
+ * Slice 09 Rig Policy Primitive (OPR.0.3.2.9) — operator-context-mode
+ * binding table.
+ *
+ * One row per scoped binding:
+ *   (scope, qualifier) is a unique key; multiple modes at different
+ *   scopes coexist (e.g., sleep@global_host + debug@qitem). The
+ *   effective-mode resolver picks the most-specific applicable row
+ *   for a (rig, workstream, qitem) read context.
+ *
+ * Schema follows the workspace-primitive migration pattern: small
+ * table, JSON column for the 10-field record (the validator owns
+ * its integrity at write time). This matches the typed-primitive
+ * precedent the slice IMPL-PRD names (HG-5: no parallel store).
+ *
+ * `qualifier` is NULL for `scope = 'global_host'` and carries the
+ * appropriate id for the other three scopes.
+ *
+ * `set_at` is a UTC ISO string written by the daemon. The drift
+ * mechanism reads this to compute long-gap re-confirmation prompts
+ * (v0 ships the field; the numeric threshold is convention Q3
+ * follow-on).
+ *
+ * `set_by` is always `'operator'` in v0 — there is no agent-set path.
+ * The column exists so future operator-attribution work (e.g.,
+ * multi-operator hosts) can shape per-operator views without a
+ * schema migration; v0's validator + route enforce the operator-only
+ * contract at the boundary.
+ */
+export declare const rigPolicySchema: Migration;
+//# sourceMappingURL=041_rig_policy.d.ts.map

package/node_modules/@openrig/daemon/dist/db/migrations/041_rig_policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"041_rig_policy.d.ts","sourceRoot":"","sources":["../../../src/db/migrations/041_rig_policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,eAAO,MAAM,eAAe,EAAE,SAgB7B,CAAC"}