@openrig/cli 0.5.1 → 0.5.3

package/node_modules/@openrig/daemon/dist/domain/context-packs/profile-source-resolver.d.ts

@@ -0,0 +1,53 @@
+import type { SourceKind } from "./profile-composer.js";
+export declare class SourceResolutionError extends Error {
+    constructor(message: string);
+}
+declare const TREE_KINDS: readonly ["seat", "mission"];
+export type TreeKind = (typeof TREE_KINDS)[number];
+export interface ParsedSourceRef {
+    kind: SourceKind;
+    /** Relative path under the pack dir (library) or the kind's configured root. */
+    rel: string;
+}
+/** Split a pre-`#` ref into its resolver kind + relative path. Fail-loud on an
+ *  unknown prefix or a traversal-shaped path — a clean refusal, never an escape
+ *  (the r2-B3 precedent from the trace verb). */
+export declare function parseSourceRef(ref: string): ParsedSourceRef;
+export interface ProfileSourceRoots {
+    /** The seat's tree directory (recap + lore beside LEARNED) — from config. */
+    seat?: string;
+    /** The mission's tree directory — from config. */
+    mission?: string;
+}
+/** Byte-provenance record for one successful read (r1 rider 1 via 4a's review):
+ *  the label must be CHECKABLE, not merely asserted — with a symlink in play a
+ *  source label is accurate about the REF and wrong about the BYTES, and that
+ *  bites on benign symlinks, not just hostile ones. */
+export interface SourceReadRecord {
+    ref: string;
+    kind: SourceKind;
+    /** The root the read was granted against. */
+    base: string;
+    /** base + rel, before symlink resolution. */
+    nominalPath: string;
+    /** Where the BYTES actually came from (realpath after the successful read). */
+    realPath: string;
+    /** True when realPath sits outside base. Computed via path.relative — never a
+     *  bare string prefix (r1: `startsWith` says /seat-evil is inside /seat). */
+    escapesRoot: boolean;
+}
+/** Build the composer's fail-loud readFile over the pack dir + configured tree
+ *  roots. Every failure names the source kind and what was being resolved —
+ *  a missing root is a MISSING CONFIG error, never a silent empty; a DANGLING
+ *  symlink is its own named failure (a realistic corpus state, not a generic
+ *  unreadable). Each successful read reports byte provenance via onRead. */
+export declare function makeProfileReadFile(opts: {
+    packDir: string;
+    roots: ProfileSourceRoots;
+    onRead?: (record: SourceReadRecord) => void;
+}): (ref: string) => string;
+/** The composer's per-piece source label (Q2-Amendment 1: every assembled piece
+ *  is labeled with its source), derived from the atom's full address. */
+export declare function sourceKindForAddress(address: string): SourceKind;
+export {};
+//# sourceMappingURL=profile-source-resolver.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/profile-source-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-source-resolver.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/profile-source-resolver.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,QAAA,MAAM,UAAU,8BAA+B,CAAC;AAChD,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;iDAEiD;AACjD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CA0B3D;AAED,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;uDAGuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB;iFAC6E;IAC7E,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;;4EAI4E;AAC5E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAC7C,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CA8D1B;AAED;yEACyE;AACzE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAEhE"}

package/node_modules/@openrig/daemon/dist/domain/context-packs/profile-source-resolver.js

@@ -0,0 +1,129 @@
+// OPR.0.5.3.5 Atom 4a — the two pre-`#` resolvers behind ONE grammar.
+//
+// Q2-Amendment 1 (locked), the desk's grammar ruling verbatim: non-library sources
+// are addressable with the SAME `#H2-slug/H3-slug` grammar; only the pre-`#`
+// resolver differs — a library ref resolves through the library (here: the pack's
+// own directory), a tree path resolves from CONFIGURED roots — and both resolve
+// FAIL-LOUD. One grammar held in memory, two resolvers behind it, no second
+// addressing convention. The kind prefix is the entire pre-`#` dialect:
+//
+//   walk.md#welcome              -> library (the pack's declared files)
+//   seat:RECAP.md#decisions      -> the seat tree (recap + lore live beside LEARNED)
+//   mission:NOTES.md#watch-items -> the mission tree
+//
+// Roots arrive from CONFIG through the caller (CE-v2 03-tree-addressability: an
+// addressing verb resolves tree paths from config, never literals — this module
+// holds no path literal and refuses to guess a missing root). Composability comes
+// from ADDRESSING, not homing: nothing must be copied into the library to compose
+// (a profile that copies seat or mission content into the library is a defect —
+// Q2-Amendment 1(c)).
+import { lstatSync, readFileSync, realpathSync } from "node:fs";
+import { isAbsolute, join, normalize, relative, sep } from "node:path";
+import { parseAddress } from "../markdown-address.js";
+export class SourceResolutionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SourceResolutionError";
+    }
+}
+const TREE_KINDS = ["seat", "mission"];
+/** Split a pre-`#` ref into its resolver kind + relative path. Fail-loud on an
+ *  unknown prefix or a traversal-shaped path — a clean refusal, never an escape
+ *  (the r2-B3 precedent from the trace verb). */
+export function parseSourceRef(ref) {
+    const colon = ref.indexOf(":");
+    let kind = "library";
+    let rel = ref;
+    if (colon >= 0) {
+        const prefix = ref.slice(0, colon);
+        if (!TREE_KINDS.includes(prefix)) {
+            throw new SourceResolutionError(`source ref '${ref}' has unknown kind prefix '${prefix}' — the pre-'#' dialect is bare (library), ${TREE_KINDS.map((k) => `'${k}:'`).join(" or ")}.`);
+        }
+        kind = prefix;
+        rel = ref.slice(colon + 1);
+    }
+    if (rel.length === 0) {
+        throw new SourceResolutionError(`source ref '${ref}' has an empty path after its kind prefix.`);
+    }
+    const unsafe = isAbsolute(rel) ||
+        rel.split(/[\\/]/).some((segment) => segment === ".." || segment === "");
+    if (unsafe) {
+        throw new SourceResolutionError(`source ref '${ref}' is traversal-shaped (absolute path, '..' or empty segment) — refs stay inside their source root.`);
+    }
+    return { kind, rel };
+}
+/** Build the composer's fail-loud readFile over the pack dir + configured tree
+ *  roots. Every failure names the source kind and what was being resolved —
+ *  a missing root is a MISSING CONFIG error, never a silent empty; a DANGLING
+ *  symlink is its own named failure (a realistic corpus state, not a generic
+ *  unreadable). Each successful read reports byte provenance via onRead. */
+export function makeProfileReadFile(opts) {
+    return (ref) => {
+        const { kind, rel } = parseSourceRef(ref);
+        let base;
+        if (kind === "library") {
+            base = opts.packDir;
+        }
+        else {
+            const configured = opts.roots[kind];
+            if (!configured) {
+                throw new SourceResolutionError(`source ref '${ref}' needs the ${kind} tree root, which is not configured for this compose — ` +
+                    `tree paths resolve from config, never literals; supply the ${kind} root or drop the ${kind}-homed atom.`);
+            }
+            base = configured;
+        }
+        const abs = normalize(join(base, rel));
+        let text;
+        try {
+            text = readFileSync(abs, "utf-8");
+        }
+        catch (err) {
+            // Name the dangling-symlink state precisely: the path EXISTS as a link
+            // but its target does not — a generic "unreadable" would send an author
+            // hunting for a file that is right there in their listing.
+            let dangling = false;
+            try {
+                lstatSync(abs);
+                dangling = true;
+            }
+            catch {
+                /* genuinely absent */
+            }
+            throw new SourceResolutionError(dangling
+                ? `source ref '${ref}' (${kind}) is a DANGLING symlink: ${abs} exists but its target does not — ${err.message}`
+                : `source ref '${ref}' (${kind}) did not resolve: ${abs} is unreadable — ${err.message}`);
+        }
+        // Provenance AFTER the successful read (r1: realpath on a missing file
+        // throws, and that throw must never garble the honest read error above).
+        if (opts.onRead) {
+            let realPath = abs;
+            try {
+                realPath = realpathSync(abs);
+            }
+            catch {
+                /* raced away post-read; nominal stands as the best truth available */
+            }
+            let realBase = base;
+            try {
+                realBase = realpathSync(base);
+            }
+            catch {
+                /* root itself unresolvable; compare against the nominal base */
+            }
+            const relFromBase = relative(realBase, realPath);
+            // SEGMENT comparison, never a prefix test on a path-shaped string (r1
+            // round-3 F1: a file legitimately NAMED '..hidden-notes.md' inside the
+            // root satisfied startsWith('..') — the identical class as
+            // startsWith(base) saying /seat-evil is inside /seat, one level in).
+            const escapesRoot = relFromBase === ".." || relFromBase.startsWith(`..${sep}`) || isAbsolute(relFromBase);
+            opts.onRead({ ref, kind, base, nominalPath: abs, realPath, escapesRoot });
+        }
+        return text;
+    };
+}
+/** The composer's per-piece source label (Q2-Amendment 1: every assembled piece
+ *  is labeled with its source), derived from the atom's full address. */
+export function sourceKindForAddress(address) {
+    return parseSourceRef(parseAddress(address).ref).kind;
+}
+//# sourceMappingURL=profile-source-resolver.js.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/profile-source-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-source-resolver.js","sourceRoot":"","sources":["../../../src/domain/context-packs/profile-source-resolver.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,mFAAmF;AACnF,6EAA6E;AAC7E,kFAAkF;AAClF,gFAAgF;AAChF,4EAA4E;AAC5E,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,qFAAqF;AACrF,qDAAqD;AACrD,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,kFAAkF;AAClF,kFAAkF;AAClF,gFAAgF;AAChF,sBAAsB;AAEtB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,SAAS,CAAU,CAAC;AAShD;;iDAEiD;AACjD,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,IAAI,GAAe,SAAS,CAAC;IACjC,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAE,UAAgC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,qBAAqB,CAC7B,eAAe,GAAG,8BAA8B,MAAM,8CAA8C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CACrJ,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,MAAkB,CAAC;QAC1B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,qBAAqB,CAAC,eAAe,GAAG,4CAA4C,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,MAAM,GACV,UAAU,CAAC,GAAG,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;IAC3E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,qBAAqB,CAC7B,eAAe,GAAG,oGAAoG,CACvH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AA2BD;;;;4EAI4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,IAInC;IACC,OAAO,CAAC,GAAW,EAAU,EAAE;QAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,IAAY,CAAC;QACjB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,qBAAqB,CAC7B,eAAe,GAAG,eAAe,IAAI,yDAAyD;oBAC5F,8DAA8D,IAAI,qBAAqB,IAAI,cAAc,CAC5G,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,wEAAwE;YACxE,2DAA2D;YAC3D,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC;gBACH,SAAS,CAAC,GAAG,CAAC,CAAC;gBACf,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YACD,MAAM,IAAI,qBAAqB,CAC7B,QAAQ;gBACN,CAAC,CAAC,eAAe,GAAG,MAAM,IAAI,4BAA4B,GAAG,qCAAsC,GAAa,CAAC,OAAO,EAAE;gBAC1H,CAAC,CAAC,eAAe,GAAG,MAAM,IAAI,sBAAsB,GAAG,oBAAqB,GAAa,CAAC,OAAO,EAAE,CACtG,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,GAAG,CAAC;YACnB,IAAI,CAAC;gBACH,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;YACxE,CAAC;YACD,IAAI,QAAQ,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC;gBACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;YACD,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACjD,sEAAsE;YACtE,uEAAuE;YACvE,2DAA2D;YAC3D,qEAAqE;YACrE,MAAM,WAAW,GAAG,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;YAC1G,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED;yEACyE;AACzE,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/context-packs/seat-recap-store.d.ts

@@ -0,0 +1,48 @@
+export declare const RECAP_FILENAME = "RECAP.md";
+export declare class RecapWriteError extends Error {
+    constructor(message: string);
+}
+export interface RecapChainEntry {
+    /** Absolute path of the superseded recap. */
+    path: string;
+    /** The supersession timestamp encoded in the filename (ms epoch). */
+    supersededAtMs: number;
+    /** Same-millisecond disambiguator (1 for the bare name, 2+ for -N suffixes). */
+    sequence: number;
+}
+/** Write the seat's current recap, superseding any existing one into the
+ *  chain. The gate is ADDRESSABILITY only — never prose shape. */
+export declare function writeSeatRecap(opts: {
+    seatDir: string;
+    content: string;
+    now?: () => number;
+}): void;
+/** The superseded chain, oldest first. Empty when no recap was ever superseded. */
+export declare function listRecapChain(seatDir: string): RecapChainEntry[];
+export type RecapContractFinding = {
+    kind: "no-decisions-section";
+} | {
+    kind: "nonstandard-unverified-marker";
+    line: number;
+};
+/** The authoring contract's CHECKABLE subset (Q2): decisions-with-rationale has
+ *  a structural proxy (a decisions-titled section exists); the UNVERIFIED
+ *  marker has a canonical grammar (`UNVERIFIED:` uppercase) that must stay
+ *  findable — a variant marker hides exactly the fact it exists to flag.
+ *  Advisory: findings, never throws. */
+export declare function validateRecapContract(content: string): RecapContractFinding[];
+/** BUILD FOLLOW-UP (r1 verdict bb00e850; row 17015088) — the authored-recap
+ *  pointer resolution, ONE-HOMED here beside the store it reads, parsing the
+ *  seat ref through the CANONICAL parseSessionName (first-@ split, the
+ *  documented greedy-rig ruling) — never a second parser. Safety floor
+ *  preserved: an unresolved or non-canonical ref fails with a LABELED reason
+ *  carrying what was tried; fuzzy-matching another seat's directory would hand
+ *  a successor a DIFFERENT occupant's decisions, which is strictly worse than
+ *  honest absence. */
+export declare function resolveAuthoredRecapPointer(seatRef: string, topologyRoot: string): {
+    address: string;
+    chainLength: number;
+} | {
+    absentReason: string;
+};
+//# sourceMappingURL=seat-recap-store.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/seat-recap-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-recap-store.d.ts","sourceRoot":"","sources":["../../../src/domain/context-packs/seat-recap-store.ts"],"names":[],"mappings":"AA4BA,eAAO,MAAM,cAAc,aAAa,CAAC;AAGzC,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,cAAc,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;kEACkE;AAClE,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAE,GAAG,IAAI,CA4BnG;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,EAAE,CAiBjE;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,IAAI,EAAE,sBAAsB,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,+BAA+B,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D;;;;wCAIwC;AACxC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAa7E;AAED;;;;;;;sBAOsB;AACtB,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAUrE"}

package/node_modules/@openrig/daemon/dist/domain/context-packs/seat-recap-store.js

@@ -0,0 +1,123 @@
+// OPR.0.5.3.5 mini-req 7 (Q2 + Q2-Amendment 1) — the seat recap store.
+//
+// The AUTHORED recap: decisions-with-rationale written by the outgoing occupant
+// at the boundary, extending the shipped from-record boot recap's name (the Q2
+// unify-what-exists ruling — predecessor-recap-resolver.ts remains the
+// transcript-derived sibling). SEAT-HOMED beside LEARNED (Q2-Amendment 1(a):
+// the recap is POSITION knowledge, unshareable by construction — a
+// library-homed recap would be position knowledge on the portable shelf).
+// RETENTION (1(b)): superseded-chain versioning — the newest recap is
+// RECAP.md, predecessors stay byte-preserved under recap-superseded/ in the
+// seat directory, cleaned by seat-directory lifecycle, NEVER by library
+// curation; no librarian job is created.
+//
+// Two validation altitudes, deliberately different:
+// - ADDRESSABILITY is the one HARD gate on write: the recap is composed by
+//   address (seat:RECAP.md#...), so an unaddressable recap (duplicate header
+//   paths, unterminated fence) would fail every handover profile downstream,
+//   silently late. Structural, not prose-shaped.
+// - The AUTHORING CONTRACT validates ADVISORY on its CHECKABLE subset only:
+//   findings flag for review, never gate the boundary (the D2 pattern). The
+//   contract's semantic halves (temporal order, derived-values-as-commands)
+//   are not mechanically checkable and are NOT pretended at.
+import { mkdirSync, readdirSync, renameSync, writeFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { validateMarkdownAddressability, parseMarkdownSections } from "../markdown-address.js";
+import { parseSessionName } from "../session-name.js";
+export const RECAP_FILENAME = "RECAP.md";
+const CHAIN_DIRNAME = "recap-superseded";
+export class RecapWriteError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "RecapWriteError";
+    }
+}
+/** Write the seat's current recap, superseding any existing one into the
+ *  chain. The gate is ADDRESSABILITY only — never prose shape. */
+export function writeSeatRecap(opts) {
+    const findings = validateMarkdownAddressability(opts.content);
+    if (findings.length > 0) {
+        throw new RecapWriteError(`recap is not addressable and could never compose (seat:${RECAP_FILENAME}#... would fail every ` +
+            `handover profile): ${findings.map((f) => f.kind === "unterminated-fence" ? `unterminated fence at line ${f.line}` : `${f.kind} '${"headerPath" in f ? f.headerPath : ""}'`).join("; ")}. ` +
+            `Fix the structure (duplicate header paths / unterminated fences); prose shape is never gated.`);
+    }
+    const now = opts.now ?? Date.now;
+    const current = join(opts.seatDir, RECAP_FILENAME);
+    if (existsSync(current)) {
+        const chainDir = join(opts.seatDir, CHAIN_DIRNAME);
+        mkdirSync(chainDir, { recursive: true });
+        // COLLISION-SAFE naming (r1 F1): renameSync onto an existing path REPLACES
+        // it, so two supersessions in one millisecond silently destroyed a
+        // predecessor — the retention contract inverted. A counter suffix
+        // disambiguates: nothing is lost AND the boundary write still succeeds
+        // (better than throwing on both counts). `now` is injectable, so
+        // programmatic callers collide deterministically, not rarely.
+        const stamp = String(now()).padStart(15, "0");
+        let target = join(chainDir, `RECAP-${stamp}.md`);
+        for (let counter = 2; existsSync(target); counter++) {
+            target = join(chainDir, `RECAP-${stamp}-${counter}.md`);
+        }
+        renameSync(current, target);
+    }
+    writeFileSync(current, opts.content);
+}
+/** The superseded chain, oldest first. Empty when no recap was ever superseded. */
+export function listRecapChain(seatDir) {
+    const chainDir = join(seatDir, CHAIN_DIRNAME);
+    let names;
+    try {
+        names = readdirSync(chainDir);
+    }
+    catch {
+        return [];
+    }
+    return names
+        .map((name) => {
+        const m = name.match(/^RECAP-(\d+)(?:-(\d+))?\.md$/);
+        return m
+            ? { path: join(chainDir, name), supersededAtMs: Number(m[1]), sequence: m[2] ? Number(m[2]) : 1 }
+            : null;
+    })
+        .filter((e) => e !== null)
+        .sort((a, b) => a.supersededAtMs - b.supersededAtMs || a.sequence - b.sequence);
+}
+/** The authoring contract's CHECKABLE subset (Q2): decisions-with-rationale has
+ *  a structural proxy (a decisions-titled section exists); the UNVERIFIED
+ *  marker has a canonical grammar (`UNVERIFIED:` uppercase) that must stay
+ *  findable — a variant marker hides exactly the fact it exists to flag.
+ *  Advisory: findings, never throws. */
+export function validateRecapContract(content) {
+    const findings = [];
+    const sections = parseMarkdownSections(content);
+    const hasDecisions = sections.some((s) => s.headerPath[s.headerPath.length - 1].includes("decision"));
+    if (!hasDecisions)
+        findings.push({ kind: "no-decisions-section" });
+    const lines = content.split("\n");
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        if (/unverified/i.test(line) && !line.includes("UNVERIFIED:")) {
+            findings.push({ kind: "nonstandard-unverified-marker", line: i });
+        }
+    }
+    return findings;
+}
+/** BUILD FOLLOW-UP (r1 verdict bb00e850; row 17015088) — the authored-recap
+ *  pointer resolution, ONE-HOMED here beside the store it reads, parsing the
+ *  seat ref through the CANONICAL parseSessionName (first-@ split, the
+ *  documented greedy-rig ruling) — never a second parser. Safety floor
+ *  preserved: an unresolved or non-canonical ref fails with a LABELED reason
+ *  carrying what was tried; fuzzy-matching another seat's directory would hand
+ *  a successor a DIFFERENT occupant's decisions, which is strictly worse than
+ *  honest absence. */
+export function resolveAuthoredRecapPointer(seatRef, topologyRoot) {
+    const parsed = parseSessionName(seatRef);
+    if (parsed.kind !== "canonical") {
+        return { absentReason: `seat ref '${seatRef}' did not parse as canonical <seat>@<rig> (parse verdict: ${parsed.kind}) — authored recap not resolved, never guessed` };
+    }
+    const seatDir = join(topologyRoot, "rigs", parsed.rig, "seats", parsed.member);
+    if (!existsSync(join(seatDir, RECAP_FILENAME))) {
+        return { absentReason: `no ${RECAP_FILENAME} on the seat tree (${seatDir}) — the predecessor never wrote one` };
+    }
+    return { address: `seat:${RECAP_FILENAME}`, chainLength: listRecapChain(seatDir).length };
+}
+//# sourceMappingURL=seat-recap-store.js.map

package/node_modules/@openrig/daemon/dist/domain/context-packs/seat-recap-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-recap-store.js","sourceRoot":"","sources":["../../../src/domain/context-packs/seat-recap-store.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,uEAAuE;AACvE,6EAA6E;AAC7E,mEAAmE;AACnE,0EAA0E;AAC1E,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,yCAAyC;AACzC,EAAE;AACF,oDAAoD;AACpD,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,iDAAiD;AACjD,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,6DAA6D;AAE7D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAgB,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,8BAA8B,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AACzC,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAWD;kEACkE;AAClE,MAAM,UAAU,cAAc,CAAC,IAA8D;IAC3F,MAAM,QAAQ,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CACvB,0DAA0D,cAAc,wBAAwB;YAC9F,sBAAsB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC3L,+FAA+F,CAClG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACnD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,2EAA2E;QAC3E,mEAAmE;QACnE,kEAAkE;QAClE,uEAAuE;QACvE,iEAAiE;QACjE,8DAA8D;QAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC;QACjD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,KAAK,IAAI,OAAO,KAAK,CAAC,CAAC;QAC1D,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACrD,OAAO,CAAC;YACN,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACjG,CAAC,CAAC,IAAI,CAAC;IACX,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SAC/C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;AACpF,CAAC;AAMD;;;;wCAIwC;AACxC,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACvG,IAAI,CAAC,YAAY;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;sBAOsB;AACtB,MAAM,UAAU,2BAA2B,CACzC,OAAe,EACf,YAAoB;IAEpB,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO,EAAE,YAAY,EAAE,aAAa,OAAO,6DAA6D,MAAM,CAAC,IAAI,gDAAgD,EAAE,CAAC;IACxK,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,sBAAsB,OAAO,qCAAqC,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,cAAc,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5F,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/crash-cart-conductor.d.ts

@@ -0,0 +1,173 @@
+/** The shipped closed per-rig union (never widened at the fleet layer). `not_attempted`
+ *  is first-class — a rig the conductor did not reach (no usable snapshot, or cancelled). */
+export type PerRigOutcome = "fully_restored" | "partially_restored" | "failed" | "not_attempted";
+/** One rig's conductor result. `receiptRef` references the durable restore event/attempt
+ *  seq (the ledger lineage) — the conductor RENDERS receipts, it never re-authors them. */
+export interface ConductorRigResult {
+    rigId: string;
+    outcome: PerRigOutcome;
+    receiptRef?: string | number;
+    /** Per-rig triage rows (seats needing operator action) — the fleet
+     *  attention_required is the UNION of these across the sequence. */
+    attention?: AttentionRow[];
+    /** R3 — for a `not_attempted` rig, WHY it was skipped (no honest gap left blank). */
+    reason?: string;
+    /** R3 — the operator action that would let this rig be restored next time. */
+    remediation?: string;
+}
+export interface RestoreConductorDeps {
+    /** Rigs in restore order — KERNEL FIRST (the supervisor), then the rest. */
+    listRigsInOrder: () => Array<{
+        rigId: string;
+        isKernel: boolean;
+    }>;
+    /** Restore ONE rig. Default (wired at the route) = findLatestRestoreUsable(rigId) →
+     *  RestoreOrchestrator.restore(snapshotId) → rollupRestoreRigResult; a rig with no
+     *  usable snapshot returns `not_attempted` (never a silent older/partial substitute). */
+    restoreRig: (rigId: string) => Promise<{
+        outcome: PerRigOutcome;
+        receiptRef?: string | number;
+        attention?: AttentionRow[];
+        reason?: string;
+        remediation?: string;
+    }>;
+    /** Cancel signal, polled at each rig BOUNDARY (stop-before-next-rig). Optional. */
+    isCancelled?: () => boolean;
+}
+export declare class RestoreConductor {
+    private readonly deps;
+    constructor(deps: RestoreConductorDeps);
+    /** Restore the fleet, kernel-first, best-effort, honoring stop-before-next-rig cancel.
+     *  Returns the ordered per-rig sequence (Atom C aggregates it into the FleetRollup). */
+    restoreFleet(opts?: {
+        onRigDone?: (result: ConductorRigResult) => void;
+    }): Promise<ConductorRigResult[]>;
+}
+/** Deps for the DEFAULT per-rig restore — structurally typed so the conductor stays
+ *  decoupled from the full orchestrator (the real wiring passes
+ *  `snapshotRepo.findLatestRestoreUsable` and `RestoreOrchestrator.restore`, whose
+ *  RestoreOutcome satisfies this shape). */
+export interface RestoreRigDeps {
+    /** Newest restore-usable snapshot for the rig, or null (→ `not_attempted`; never a silent substitute). */
+    findLatestRestoreUsable: (rigId: string) => {
+        id: string;
+    } | null;
+    /** The shipped per-rig restore. `onAttemptStarted` yields the restore-started event seq = the receipt ref. */
+    restore: (snapshotId: string, opts?: {
+        onAttemptStarted?: (attemptId: number) => void;
+    }) => Promise<{
+        ok: boolean;
+        result?: {
+            rigResult: PerRigOutcome;
+            nodes?: RestoreNodeLite[];
+        };
+    }>;
+}
+/** One seat of the subset-launch result, structurally the shipped RestoreNodeResult
+ *  subset the triage mapper reads. */
+export interface AdoptSubsetSeat extends RestoreNodeLite {
+    logicalId: string;
+}
+/** Structural slice of RestoreOrchestrator.launchNodeSubset's result — the shipped
+ *  per-seat resume-verification machinery (FR-7: an unverifiable resume fail-closes
+ *  to awaiting-decision carrying the exact `--fresh <logicalId>` remediation). */
+export interface AdoptSubsetResult {
+    ok: boolean;
+    code?: string;
+    message?: string;
+    launched?: AdoptSubsetSeat[];
+    held?: Array<{
+        logicalId: string;
+        reason: string;
+    }>;
+    alreadyRunning?: Array<{
+        logicalId: string;
+    }>;
+    failedTargets?: Array<{
+        logicalId: string;
+        reason: string;
+    }>;
+}
+export interface AdoptRigDeps {
+    /** The rig's DB-running sessions whose tmux panes are ALIVE — the same
+     *  classification restore's 409 guard runs (sessionRegistry rows ×
+     *  tmuxAdapter.hasSession); the conductor never invents a probe. */
+    probeLiveSessions: (rigId: string) => Promise<Array<{
+        sessionName: string;
+        logicalId: string;
+    }>>;
+    /** The shipped no-launch adopt (ClaimService.reconcileSession — the
+     *  `rig reconcile-session` precedent): session state only, never input. */
+    reconcileSession: (sessionName: string) => Promise<{
+        ok: boolean;
+        code?: string;
+        message?: string;
+    }>;
+    /** The rig's full seat roster (logical ids) — adoption's complement is what
+     *  per-seat resume verification must cover. */
+    listRigSeats: (rigId: string) => string[];
+    /** The shipped subset launcher over the NOT-adopted seats. */
+    launchNodeSubset: (rigId: string, logicalIds: string[]) => Promise<AdoptSubsetResult>;
+}
+/** Build the default `restoreRig` dep: COMPOSE findLatestRestoreUsable → restore →
+ *  rigResult. A rig with no usable snapshot is `not_attempted` (restore never runs);
+ *  a restore that fails outright is `failed`. Never re-authors restore logic.
+ *  With `adoptDeps` wired (Amendment 2), a rig whose panes survived takes the ADOPT
+ *  branch above; DEAD panes (and callers without adoptDeps) run unchanged. */
+export declare function createDefaultRestoreRig(_deps: RestoreRigDeps, adoptDeps?: AdoptRigDeps): (rigId: string) => Promise<{
+    outcome: PerRigOutcome;
+    receiptRef?: number;
+    attention?: AttentionRow[];
+    reason?: string;
+    remediation?: string;
+}>;
+export interface RigOrderDeps {
+    /** All (non-archived) rigs on this host — the conductor's fleet scope, v1. */
+    listRigs: () => Array<{
+        id: string;
+        name: string;
+    }>;
+}
+/** R2 — the founder's order: the KERNEL rig (the supervisor, name "kernel") restores
+ *  FIRST, then the remaining rigs in listRigs order. No kernel rig → all rigs, none
+ *  flagged kernel (honest, never fabricated). This is the `listRigsInOrder` source the
+ *  conductor consumes. */
+export declare function listRigsInKernelFirstOrder(deps: RigOrderDeps): Array<{
+    rigId: string;
+    isKernel: boolean;
+}>;
+/** A triage row: a seat + exactly what it needs (picker/auth/remediation), sourced
+ *  from the shipped per-rig restore-check attention projection. The fleet
+ *  `attention_required` is the UNION of these across rigs — a VIEW, not a parallel record. */
+export interface AttentionRow {
+    rigId: string;
+    seat: string;
+    need: string;
+}
+/** Fleet rollup — PURE AGGREGATION over the conductor's per-rig sequence. The per-rig
+ *  outcome stays the shipped CLOSED union (never widened). NO fleet verdict is stored
+ *  here — a stored verdict could drift from the per-rig truth; derive it on demand via
+ *  {@link deriveFleetVerdict}. `not_attempted` is first-class (never folded into failed). */
+export interface FleetRollup {
+    counts: Record<PerRigOutcome, number>;
+    sequence: ConductorRigResult[];
+    attention_required: AttentionRow[];
+}
+/** The fleet verdict is a DERIVED function of the counts — never a stored field. */
+export type FleetVerdict = "all_fully_restored" | "all_failed" | "none_attempted" | "mixed";
+/** A restore node (structural subset of the shipped RestoreNodeResult) — enough to
+ *  build a triage row from the seats that need operator action. */
+export interface RestoreNodeLite {
+    logicalId: string;
+    status: string;
+    error?: string;
+    attentionEvidence?: string | null;
+}
+/** R5 — map a rig's restore nodes → triage rows: the seats needing operator action
+ *  (a LIVE runtime prompt, an unresumable session, or a hard failure), each with its
+ *  EXACT need. Running/resumed nodes are excluded. Never fabricates a need. */
+export declare function attentionRowsFromNodes(rigId: string, nodes: RestoreNodeLite[]): AttentionRow[];
+export declare function aggregateFleetRollup(sequence: ConductorRigResult[]): FleetRollup;
+/** DERIVED f(counts) — computed, never stored (a stored verdict could drift). */
+export declare function deriveFleetVerdict(counts: Record<PerRigOutcome, number>): FleetVerdict;
+//# sourceMappingURL=crash-cart-conductor.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/crash-cart-conductor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-cart-conductor.d.ts","sourceRoot":"","sources":["../../src/domain/crash-cart-conductor.ts"],"names":[],"mappings":"AAWA;6FAC6F;AAC7F,MAAM,MAAM,aAAa,GAAG,gBAAgB,GAAG,oBAAoB,GAAG,QAAQ,GAAG,eAAe,CAAC;AAEjG;2FAC2F;AAC3F,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B;wEACoE;IACpE,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,eAAe,EAAE,MAAM,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACnE;;6FAEyF;IACzF,UAAU,EAAE,CACV,KAAK,EAAE,MAAM,KACV,OAAO,CAAC;QAAE,OAAO,EAAE,aAAa,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1I,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;CAC7B;AAED,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,oBAAoB;IAEvD;4FACwF;IAClF,YAAY,CAAC,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;CAyC/G;AAED;;;4CAG4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,0GAA0G;IAC1G,uBAAuB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClE,8GAA8G;IAC9G,OAAO,EAAE,CACP,UAAU,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE;QAAE,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAA;KAAE,KACtD,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE;YAAE,SAAS,EAAE,aAAa,CAAC;YAAC,KAAK,CAAC,EAAE,eAAe,EAAE,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;CACjG;AAUD;sCACsC;AACtC,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACtD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;kFAEkF;AAClF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,YAAY;IAC3B;;wEAEoE;IACpE,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACjG;+EAC2E;IAC3E,gBAAgB,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrG;mDAC+C;IAC/C,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAC1C,8DAA8D;IAC9D,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACvF;AAsED;;;;8EAI8E;AAC9E,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,cAAc,EACrB,SAAS,CAAC,EAAE,YAAY,GACvB,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+BhJ;AAED,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAED;;;0BAG0B;AAC1B,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,YAAY,GACjB,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAK7C;AAID;;8FAE8F;AAC9F,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;6FAG6F;AAC7F,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACtC,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,kBAAkB,EAAE,YAAY,EAAE,CAAC;CACpC;AAED,oFAAoF;AACpF,MAAM,MAAM,YAAY,GAAG,oBAAoB,GAAG,YAAY,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAE5F;mEACmE;AACnE,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;+EAE+E;AAC/E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,YAAY,EAAE,CAyB9F;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,WAAW,CAahF;AAED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,YAAY,CAMtF"}