@openrig/cli 0.5.11 → 0.5.12

package/daemon/docs/reference/release-boundary.md

@@ -2,29 +2,27 @@
 
 A CHECKLIST OF JUDGMENT GUIDES, not gates: every item says WHY, most items are one
 act, and anything situational expires at the next boundary. Runs once per release
-fence, after the prior release's ceremony completes. Graduated 2026-08-28 from the
-working SOP; the graduating team's seat-specific ceremony details stay in its
-playbook.
+fence, after the prior release's ceremony completes. The project and seat owners
+select the applicable actions and preserve their reasons in the boundary record.
 
 ## 1. Seats — reset or re-prime, per each seat's continuity needs
 
-- **Builder, QA, and reviewer seats: FRESH GENERATIONS.** Graceful exit with a
-  deposit (recap where provisioned), then relaunch. Why, twice proven: accumulated
-  release context becomes noise that reads as knowledge, and long-running seats
-  carry stale injected catalogs — only a fresh launch carries current skills and
-  canon.
-- **Planning seats: MANAGED COMPACTION + RE-PRIME,** not fresh — planning continuity
-  is the seat's point; the post-compaction restore is exactly the width-restore case
-  the context machinery exists for.
-- **The continuity-bearing orchestration seat: STAYS.** Its memory is the release's
-  memory and the ceremony's custody. Known cost, accepted: its injected catalog
-  stays stale until its own next generation — the capability delta covers the gap by
-  content.
+- **Choose continuity per seat, with its owner.** Fresh launch, managed compaction
+  with re-prime, or retaining the current session serve different needs. Role names
+  alone do not select one. Record the choice, the reason and custody of open work;
+  selecting a procedure does not itself authorize a lifecycle action.
+- **Fresh launch** can clear accumulated context and load current startup guidance.
+  Before an authorized exit, preserve the seat's earned knowledge and continuation
+  (recap where provisioned); verify the new occupant's actual identity and install.
+- **Managed compaction with re-prime** can retain planning continuity while
+  restoring the context needed for the next phase. **Retaining the current session**
+  can preserve ongoing custody. In either case, inspect which guidance is stale and
+  deliver the selected current context; an edit on disk is not delivery to a session.
 - **Re-prime = the world walk + the current capability delta + the mission install**
   per the mission-install convention (`docs/reference/mission-install.md`): the world
   half restores where-you-are; the project half (five layers, two depth profiles,
-  paced pointer-walk) restores what-you-are-doing. Composing the packet by
-  improvisation is the trap this convention closed.
+  paced pointer-walk) restores what-you-are-doing. Composing from named artifacts
+  keeps source precedence visible.
 - **THE CEREMONY IS THE EXPERIMENT.** Every act above runs on the product's own
   primitives, so the ceremony doubles as their live test. Observe passively: what did
   each re-primed seat's first natural turns reach for, and what broke? Findings land
@@ -45,8 +43,8 @@ playbook.
 - Every seat sweeps its DESTINATION for open rows (wakes are unreliable; the sweep
   is the read). Each open row from the finished release gets exactly one of:
   done-with-receipt · carried-to-the-new-mission (re-filed against the new plan,
-  never dragged) · closed-superseded. Ghost obligations accumulate silently without
-  this — the measured specimen was a dozen cold rows against one seat.
+  never dragged) · closed-superseded. The sweep exposes obligations that a missed
+  wake or a stale remembered work list can hide.
 - Verify every closing-paper inheritance has a live intake row with an owner. Zero
   orphans.
 
@@ -79,17 +77,22 @@ playbook.
 ## 6. The capability-delta lifecycle (standing law)
 
 Each release's capability delta is authored at the fence and bound to the exact
-published cut. Its baseline is the canon's actual last-absorbed marker, not an
-assumption that the immediately prior semver was absorbed. When canon is behind, the
-new delta is a cumulative synthesis of every intervening delta, preserving
-supersessions and pivots rather than concatenating old prose.
-
-Canon absorbs the kept public-product truths; the canon header then names the delta,
-which EXPIRES it — verify the expiry fired, and never cite an expired delta. Private
-project topology, host practice, and release ownership go to the versioned project
-world instead of leaking into the public package. The new release's delta obligations
-start at ITS cut. A delta that outlives its absorption is a stale teaching site
-wearing a version number.
+candidate, then reconciled to the published cut. Its baseline is the canon's actual
+last-absorbed marker, not an assumption that the immediately prior semver was
+absorbed. When canon is behind, the new delta is a cumulative synthesis of every
+intervening delta, preserving supersessions and pivots rather than concatenating
+old prose.
+
+Canon absorbs the kept public-product truths. Expiry requires BOTH the canon header
+naming that exact delta AND a distinct successor delta file existing. A header alone
+does not expire it; missing or unreadable inputs remain unknown/live. At the actual
+boundary, verify the event before recording expiry, then stop citing the expired
+delta. Do not create a successor merely to make the condition true. Candidate
+absorption is not proof of publication or served production adoption.
+
+Private project topology, host practice, and release ownership go to the versioned
+project world instead of leaking into the public package. The new release's delta
+obligations start at ITS cut.
 
 ## 7. World absorption and discoverability
 

package/daemon/docs/reference/rig-spec.md

@@ -174,7 +174,7 @@ edges:
 | `name` | string | yes | — | Rig name. Used in session naming (`{pod}-{member}@{name}`), snapshot identification, and spec library lookup. |
 | `summary` | string | no | — | Human-readable description. Shown in spec library, review surfaces, and `rig specs show`. |
 | `culture_file` | string | no | — | Relative path to a rig-wide culture/constitution file. Must be a safe relative path (no `..`, no absolute). |
-| `permission_policy` | string | no | — | Permission policy attached to the rig. Either a built-in (`builtin:locked`, `builtin:standard`, `builtin:open`, `builtin:operator`) or a safe relative path to a custom policy file (resolved from this spec's directory; no `..`, no absolute). Absent leaves the default floor. A member may set its own `permission_policy`, which takes precedence over the rig-level one. See "Attaching a permission policy" below. |
+| `permission_policy` | string | no | — | Permission policy attached to the rig. Either a built-in (`builtin:locked`, `builtin:standard`, `builtin:open`, `builtin:yolo`) or a safe relative path to a custom policy file (resolved from this spec's directory; no `..`, no absolute). Absent leaves the default floor. A member may set its own `permission_policy`, which takes precedence over the rig-level one. See "Attaching a permission policy" below. |
 | `docs` | Doc[] | no | — | Documentation files that should travel with the rig. Included in rig bundles. Each entry has a `path` field (safe relative path). The engine does not consume these — they are for humans and agents setting up the environment before launch. |
 | `startup` | StartupBlock | no | — | Rig-level startup files and actions. Applied to all members via the startup layering model. |
 | `services` | ServicesBlock | no | — | Optional managed services (Docker Compose). When present, services boot before any agent launches. |
@@ -193,7 +193,7 @@ permission_policy: builtin:standard
 permission_policy: policies/my-cautious-dev.policy.md
 ```
 
-Built-in policies (`locked` / `standard` / `open` / `operator`) are read-only and are
+Built-in policies (`locked` / `standard` / `open` / `yolo`) are read-only and are
 referenced as `builtin:<name>`. A custom policy lives in your own project and is
 referenced by a safe relative path (no `..`, no absolute). A shipped example of the
 custom shape is `packages/daemon/policies/examples/my-cautious-dev.policy.md` — copy it
@@ -530,8 +530,8 @@ These are the built-in specs shipped with OpenRig. Read them as worked examples.
 
 | Spec | Location | Pods | Members | Services |
 |------|----------|------|---------|----------|
-| `product-team` | `packages/daemon/specs/rigs/product-team.yaml` | orch, dev, rev | 7 (lead, peer, impl, qa, design, r1, r2) | no |
-| `implementation-pair` | `packages/daemon/specs/rigs/implementation-pair.yaml` | dev | 2 (impl, qa) | no |
-| `adversarial-review` | `packages/daemon/specs/rigs/adversarial-review.yaml` | orch, rev | 3 (lead, r1, r2) | no |
-| `research-team` | `packages/daemon/specs/rigs/research-team.yaml` | orch, research | 3 (lead, analyst, synthesizer) | no |
+| `product-team` | `packages/daemon/specs/rigs/preview/product-team/rig.yaml` | orch1, dev1, rev1 | 7 (lead, peer, impl, qa, design, r1, r2) | no |
+| `implementation-pair` | `packages/daemon/specs/rigs/launch/implementation-pair/rig.yaml` | dev | 2 (impl, qa) | no |
+| `adversarial-review` | `packages/daemon/specs/rigs/focused/adversarial-review/rig.yaml` | orch, review | 3 (lead, r1, r2) | no |
+| `research-team` | `packages/daemon/specs/rigs/focused/research-team/rig.yaml` | orch, research | 3 (lead, analyst, synthesizer) | no |
 | `secrets-manager` | `packages/daemon/specs/rigs/launch/secrets-manager/rig.yaml` | vault | 1 (specialist) | yes (Vault) |

package/daemon/docs/reference/sdlc-conventions.md

@@ -7,10 +7,10 @@
 
 OpenRig is a software factory the human steers from a high altitude. The human
 records intent; agents turn intent into a plan, the plan into a build, the
-build into proof. The TUI is a **plain projection of well-formed
-markdown on disk** — agents change the files, the UI re-projects. These
-conventions define "well-formed." Everything here is **advisory / fail-open
-for agents**: nothing below blocks a write; the audit records and advises.
+build into proof. The TUI projects authored work on disk and, where an owning
+proof policy is selected, derives readiness from recorded judgments. These
+authoring conventions are **advisory / fail-open for agents**: the audit
+records and advises; the selected proof policy separately governs who may judge.
 
 
 ## HOW TO READ THIS DOCUMENT — two parts, and only one of them is the default
@@ -38,7 +38,7 @@ one does not deprecate the others. Nothing below deletes or overrides an existin
 | **PLAN** | **The planning dial** — planning rigor is a spectrum chosen per piece: P0 mini-requirements and pointers (simple, reversible work) · P1 an authored spec with a proof contract (the default) · P2 plus a research round before the spec freezes, run BEFORE build dispatch · P3 plus an adversarial pass by a non-author, judged against product goals, landing amendments with proof-contract teeth · P4 plus a blind from-scratch design diffed against priors before proceeding. Dial up by what the piece is, exactly as build care is priced below. Full reference: `planning-dial.md`. |
 | **BUILD** | **Part A, the simple flow** (below — the default) · **product-journey components** — a mission-selectable menu for greenfield work, drift recovery, public journey probes, one evidence-gated look at the layer below, minimal repair, independent QA/review, integration, and installed smoke; compose only what the work needs in mission/slice YAML, never as a new mode or mandatory pipeline. Full reference: `product-journey-sdlc.md` · **the wave model** — slices build in parallel in disjoint file territories, an integrator merges serially, and independent review fires once per wave (two reviewers with different vantages, never the writers; fix rounds re-earn verdicts at one final revision; per-slice discipline stays failing-test-first and verify-by-effect). The wave IS the care dial: what shares a wave decides how much review each piece gets · **Part B, the rigorous overlay** (below — only when assigned). These combine: a wave can carry one Part-B piece. Full wave reference: `wave-sdlc.md`. |
 | **DISPATCH DATA** | **The execution-data conventions (S27)** — three tiny data disciplines that make execution state derivable instead of hand-tabulated, consumed by `rig view show execution`. **EC-1, edges in frontmatter:** every open slice carries its hard edges in `depends_on:` (an inline JSON array; an explicit `[]` is a statement, absence is INDETERMINATE); soft/serialization edges are one machine-readable Territory line, exactly `SOFT-AFTER: [ids] — reason`. **EC-2, wave-as-data:** wave composition + review model live on a durable queue row tagged `wave-map` + `format:wave-map-v1` whose body carries one fenced ```json block (`{format:"wave-map-v1", mission, waves:[{id, slices, serialized_order?, review_model?}]}`) — composition only, never status labels (status derives at read time); the planning dial recorded at lock surfaces as the frontmatter field `approved-spec-dial:` beside the approve stamp. **EC-3, dispatch names the worktree:** build batons carry the exact body line `worktree_path=<path>` from dispatch onward — it is Q1's join key; batons without it join by naming only and the view marks them `fragile_join`. Existing batons are never rewritten. |
-| **RELEASE** | The release ceremony conventions (publication identity, honest release notes) and the CAPABILITY-DELTA LIFECYCLE LAW: each release's delta is authored at the fence, bound to the exact published cut; canon absorbs its named items; the canon header then names the delta, which expires it — verify the expiry fired, and never cite an expired delta. Full statement: `release-boundary.md` §6. |
+| **RELEASE** | The release ceremony conventions (publication identity, honest release notes) and the CAPABILITY-DELTA LIFECYCLE LAW: each release's delta is authored at the fence and bound to the exact candidate, then reconciled to the published cut. Expiry requires both the canon header naming the absorbed delta and a distinct successor delta existing; a draft header alone is insufficient. Verify the actual boundary event and stop citing an expired delta. Full statement: `release-boundary.md` §6. |
 | **BOUNDARY** | **The release boundary** — housekeeping run once per fence so the next release starts clean: seats reset or re-primed per their continuity needs, memory distilled (keep what changed a decision recently), every queue swept by destination and dispositioned, substrate torn down, boards frozen as records, a clean-box baseline captured. A checklist of judgment guides, not gates. Full reference: `release-boundary.md`. |
 
 > Full reference documents for each component (graduated 2026-08-28): the
@@ -112,6 +112,17 @@ Legacy `README.md`, `IMPLEMENTATION-PRD.md`, and pre-convention trees remain
 readable indefinitely. New scaffolds do not create or mirror them, and repair
 is additive: it never deletes, renames, or rewrites legacy bytes.
 
+When the owning scope selects `proofPolicy.judges`, use `rig proof judge` to
+record an attributed accept, reject or withdraw decision on a contract item,
+and `rig proof show` to read derived readiness up through slice, mission and
+project. The nearest slice, mission or project policy selects authorized judges;
+`rig proof --help` describes setup, selectors and evidence requirements. A
+correction preserves history and unrelated judgments without editing ancestor
+status checklists. An artifact can identify non-code work without a fabricated
+commit. Evidence capture (`proof add`), policy acceptance, higher outcome
+judgment and publication are distinct. This optional component does not select
+Part B or add a mandatory review gate.
+
 The three sections project into the UI's one review structure: a vertical
 stack of **INTENT → PLAN → DELIVERED**. A slice missing a section still
 renders (the projection degrades to a muted "—", never invents content) —

package/daemon/docs/reference/wave-sdlc.md

@@ -1,9 +1,9 @@
 # The wave SDLC — parallel build, wave-level review, composition as the care dial
 
-Graduated 2026-08-28 from the working playbook of the team that proved it live; the
-team-specific custody mechanics stay in that team's playbook. Lock stamps in this
-model are ADDITIVE: approval appends metadata and never rewrites authored bytes, so
-a candidate's identity survives its own approval.
+This is a selectable build and review model from `sdlc-conventions.md`'s component
+menu. The mission owner decides whether it fits the work. Lock stamps in this model
+are ADDITIVE: approval appends metadata and never rewrites authored bytes, so a
+candidate's identity survives its own approval.
 
 ## The model in one paragraph
 
@@ -87,7 +87,7 @@ design session first). Anything irreversible within the hour (publish, cutover,
 destructive operations) — that is the heavy path. And when no independent non-writing
 reviewers exist: nothing ever self-reviews; without them the wave gate is theater.
 
-## Failure modes, with the mitigations that worked (dated observations, 2026-08)
+## Failure modes and mitigations
 
 - **Freeze-merge races:** a candidate freezes seconds before a merge moves the tip.
   Mitigation: zero-overlap restack with content-identity proof (stable patch-id) in
@@ -100,14 +100,3 @@ reviewers exist: nothing ever self-reviews; without them the wave gate is theate
   line still prints. Rule: pin the ABSENCE of the false claim in every encoding.
 - **Phantom checkout status:** merge-by-reference leaves a shared checkout's index
   stale. Never build or commit from a shared checkout; sync its index at fences.
-
-## Measured outcome from the proving run (dated, one team, 2026-08)
-
-Eight slices plus five fix candidates plus two addenda built and merged in ~2.5 hours
-across five writing seats; two wave passes plus three fix-round passes replaced ~20
-per-slice review rounds. Defect yield went UP: the reviewers' findings never
-overlapped once across three consecutive verdicts, and the builders' green suites had
-missed every one of them — wave-level review sees cross-slice seams per-slice review
-structurally cannot. Correction latency: one live defect went found→root-caused→
-specced→locked→built→merged in 24 minutes, because no review round stood between a
-locked spec and a building seat.

package/daemon/docs/reference/worktree-builds.md

@@ -21,11 +21,11 @@ A worktree can therefore report green against code it does not contain.
 
 ## Rules
 
-1. **Run `npm install` in each worktree** (~4s, one time). It is not the slow path; it is the
-   only path that resolves workspace packages to the worktree's own source.
+1. **Run `npm install` in each worktree** so workspace packages resolve to the
+   worktree's own source.
 2. **Never symlink `node_modules` from the primary checkout.** It appears to work — builds pass,
    typechecks pass — which is exactly the danger.
-3. **`npx tsc` with no `node_modules` installs an unrelated 12-year-old `tsc` package** and prints
+3. **`npx tsc` with no `node_modules` installs an unrelated `tsc` package** and prints
    "This is not the tsc command you are looking for". That message means *no install*, not a
    TypeScript error.
 4. **Build `@openrig/daemon` before typechecking `@openrig/cli`** in a fresh worktree: cli imports

package/daemon/policies/examples/my-cautious-dev.policy.md

@@ -35,6 +35,6 @@ permission_policy: policies/my-cautious-dev.policy.md
 ```
 
 Copy it, rename it, and edit the lists to taste — it's yours to change. The built-in
-policies (locked / standard / open / operator) stay read-only and are referenced as
+policies (locked / standard / open / yolo) stay read-only and are referenced as
 `builtin:<name>`; a custom policy like this one lives in your project and is referenced
 by path.

package/daemon/specs/rigs/launch/kernel/agents/operator/agent/guidance/role.md

@@ -19,11 +19,11 @@ human channel; a terminal attachment is not a person's address.
 ## What you do
 
 - Bring rigs up and down (`rig up <spec>`, `rig down <rigId>`).
-- Restart work after a reboot. **The kernel is the only auto-start
-  rig**; other rigs require explicit operator-initiated restart.
+- Restart selected work after a reboot. Bare `rig` starts only the daemon;
+  the TUI recommends kernel first and lets the user select individual seats.
   When the user says "bring my rigs back online":
   1. List rigs that were running pre-reboot using daemon persisted
-     state (`rig ps --json`) and any operator-saved roster.
+     state (`rig ps --json`), then inspect actual selected seat state.
   2. Confirm with the user which subset to restart.
   3. Restart each via `rig up <spec>` (or `rig restore <snapshot>`
      if a snapshot exists).

package/daemon/specs/rigs/launch/kernel/agents/operator/agent/startup/context.md

@@ -22,14 +22,12 @@ restart:
    survived (daemon-restart-only, host stayed up) → marked healthy.
    If tmux is gone (host reboot) → marked detached.
 
-If the host rebooted (not just the daemon), the kernel's member
-tmux sessions are gone. You own the agent-restart workflow:
-
-1. `rig ps --nodes --rig kernel --json` shows which kernel members
-   are detached.
-2. Re-launch each detached member via the normal launch path
-   (the canonical commands live in the `openrig-operator` skill).
-3. `rig ps --nodes --rig kernel --json` again to confirm healthy.
+After a host reboot, a person can type bare `rig` to open the same TUI,
+start the daemon only, and select the existing kernel operator or other seats.
+The TUI recommends kernel first without starting every member. Its default
+for a previously occupied seat is to resume the authoritative conversation.
+Missing or ambiguous history needs repair or a separate named fresh-start
+decision; authentication failure is not a reason to replace history.
 
 Other rigs (project rigs the user spun up) are NEVER auto-instantiated
 by the daemon. If the user asks you to bring those back:
@@ -41,13 +39,14 @@ by the daemon. If the user asks you to bring those back:
    <name>` for warm-restore when a snapshot exists.
 4. `rig ps --nodes --rig <name>` to verify healthy.
 
-This is the agent-driven workflow replacing silent auto-restore.
-See the `openrig-operator` skill for the canonical script.
+The TUI is the normal human entry. Explicit CLI automation remains available;
+use the applicable lifecycle help for an authorized agent-driven operation.
 
 ## What's already running
 
-- The kernel rig itself (you, advisor.lead, queue.worker, the shared
-  operator terminal).
+- Your own successful startup does not prove the other kernel seats are
+  running. Read actual state before routing work to a peer; the user may
+  have selected only this operator.
 - Whatever non-kernel rigs were running before the daemon restarted
   have their rig records persisted in SQLite (the daemon does NOT
   cull rigs on restart) but their member sessions are likely

package/dist/bin-wrapper.d.ts

@@ -2,5 +2,6 @@
 export declare function resolveBinEntry(invokedPath?: string | undefined, moduleUrl?: string): string;
 export declare function isDirectRun(argv1?: string | undefined, moduleUrl?: string): boolean;
 export declare function resolveNodeReexecBinary(currentExecPath?: string, invokedPath?: string | undefined, env?: NodeJS.ProcessEnv, exists?: (candidate: string) => boolean, realpath?: (candidate: string) => string): string | null;
+export declare function canLoadInstalledNative(node: string, wrapper: string): boolean;
 export declare function run(argv?: string[]): Promise<void>;
 //# sourceMappingURL=bin-wrapper.d.ts.map

package/dist/bin-wrapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bin-wrapper.d.ts","sourceRoot":"","sources":["../src/bin-wrapper.ts"],"names":[],"mappings":";AASA,wBAAgB,eAAe,CAAC,WAAW,qBAAkB,EAAE,SAAS,SAAkB,GAAG,MAAM,CAIlG;AAED,wBAAgB,WAAW,CAAC,KAAK,qBAAkB,EAAE,SAAS,SAAkB,GAAG,OAAO,CAOzF;AAED,wBAAgB,uBAAuB,CACrC,eAAe,SAAmB,EAClC,WAAW,qBAAkB,EAC7B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,MAAM,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAoB,EACnD,QAAQ,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAqB,GACrD,MAAM,GAAG,IAAI,CAiBf;AAsBD,wBAAsB,GAAG,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB5D"}
+{"version":3,"file":"bin-wrapper.d.ts","sourceRoot":"","sources":["../src/bin-wrapper.ts"],"names":[],"mappings":";AASA,wBAAgB,eAAe,CAAC,WAAW,qBAAkB,EAAE,SAAS,SAAkB,GAAG,MAAM,CAIlG;AAED,wBAAgB,WAAW,CAAC,KAAK,qBAAkB,EAAE,SAAS,SAAkB,GAAG,OAAO,CAOzF;AAED,wBAAgB,uBAAuB,CACrC,eAAe,SAAmB,EAClC,WAAW,qBAAkB,EAC7B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,MAAM,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAoB,EACnD,QAAQ,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAqB,GACrD,MAAM,GAAG,IAAI,CAiBf;AA0BD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAM7E;AAED,wBAAsB,GAAG,CAAC,IAAI,WAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB5D"}

package/dist/bin-wrapper.js

@@ -44,6 +44,12 @@ function maybeReexecWithSiblingNode(argv = process.argv) {
     if (!preferredNode)
         return;
     const scriptPath = argv[1] ? realpathSync(argv[1]) : fileURLToPath(import.meta.url);
+    // An alias is not runtime authority. Keep a working interpreter; only switch
+    // when the installed native dependency actually loads under the alternative.
+    if (canLoadInstalledNative(process.execPath, scriptPath))
+        return;
+    if (!canLoadInstalledNative(preferredNode, scriptPath))
+        return;
     const result = spawnSync(preferredNode, [scriptPath, ...argv.slice(2)], {
         stdio: "inherit",
         env: {
@@ -56,6 +62,13 @@ function maybeReexecWithSiblingNode(argv = process.argv) {
     }
     process.exit(result.status ?? 0);
 }
+export function canLoadInstalledNative(node, wrapper) {
+    const probe = spawnSync(node, ["--input-type=module", "-e",
+        "import {createRequire} from 'node:module'; const require=createRequire(process.argv[1]); const D=require('better-sqlite3'); new D(':memory:').close();",
+        wrapper,
+    ], { encoding: "utf8", timeout: 5000, stdio: ["ignore", "pipe", "pipe"] });
+    return probe.status === 0;
+}
 export async function run(argv = process.argv) {
     const normalizedArgv = [...argv];
     if (normalizedArgv[1]) {

package/dist/bin-wrapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin-wrapper.js","sourceRoot":"","sources":["../src/bin-wrapper.ts"],"names":[],"mappings":";AAEA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAExD,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C,MAAM,UAAU,eAAe,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG;IACxF,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACrG,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG;IAC9E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,eAAe,GAAG,OAAO,CAAC,QAAQ,EAClC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAC7B,MAAyB,OAAO,CAAC,GAAG,EACpC,SAAyC,UAAU,EACnD,WAA0C,YAAY;IAEtD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,qBAAqB,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,qBAAqB,KAAK,qBAAqB;YAAE,OAAO,IAAI,CAAC;QAEjE,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;IACrD,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACtF,IAAI,CAAC,aAAa;QAAE,OAAO;IAE3B,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;QACtE,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,CAAC,gBAAgB,CAAC,EAAE,GAAG;SACxB;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;IAC3C,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACjC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,cAAc,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAIhC,CAAC;IACF,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAChF,IAAI,KAAK;QAAE,OAAO;IAClB,+EAA+E;IAC/E,oEAAoE;IACpE,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;AAC5D,CAAC;AAED,IAAI,WAAW,EAAE,EAAE,CAAC;IAClB,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"bin-wrapper.js","sourceRoot":"","sources":["../src/bin-wrapper.ts"],"names":[],"mappings":";AAEA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAExD,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C,MAAM,UAAU,eAAe,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG;IACxF,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACrG,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG;IAC9E,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,eAAe,GAAG,OAAO,CAAC,QAAQ,EAClC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAC7B,MAAyB,OAAO,CAAC,GAAG,EACpC,SAAyC,UAAU,EACnD,WAA0C,YAAY;IAEtD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,GAAG,CAAC,gBAAgB,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,qBAAqB,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,qBAAqB,KAAK,qBAAqB;YAAE,OAAO,IAAI,CAAC;QAEjE,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;IACrD,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACtF,IAAI,CAAC,aAAa;QAAE,OAAO;IAE3B,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpF,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,sBAAsB,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;QAAE,OAAO;IACjE,IAAI,CAAC,sBAAsB,CAAC,aAAa,EAAE,UAAU,CAAC;QAAE,OAAO;IAC/D,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;QACtE,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,CAAC,gBAAgB,CAAC,EAAE,GAAG;SACxB;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAe;IAClE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,qBAAqB,EAAE,IAAI;QACxD,wJAAwJ;QACxJ,OAAO;KACR,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;IAC3C,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACjC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,cAAc,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAIhC,CAAC;IACF,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,qEAAqE;IACrE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAChF,IAAI,KAAK;QAAE,OAAO;IAClB,+EAA+E;IAC/E,oEAAoE;IACpE,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,CAAC;AAC5D,CAAC;AAED,IAAI,WAAW,EAAE,EAAE,CAAC;IAClB,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/build-info.js

@@ -1,9 +1,9 @@
 // GENERATED by scripts/build-package.sh — the packaged build-identity stamp.
 export const BUILD_INFO = {
-  semver: "0.5.11",
-  commit: "ffd5ac1dd71367561ed8357bc42d5131821ee5f2",
+  semver: "0.5.12",
+  commit: "b6c8d8f0444bc721d0ba4062a7384d25601c1c6f",
   dirty: false,
-  builtAt: "2026-09-07T18:39:28Z",
+  builtAt: "2026-09-09T12:31:47Z",
 };
 export function stampFields(info = BUILD_INFO) {
   if (!info.commit) return {};

package/dist/commands/crash-cart.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crash-cart.d.ts","sourceRoot":"","sources":["../../src/commands/crash-cart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAepC,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,MAAM,GAAG,YAAY,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,gGAAgG;IAChG,IAAI,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACnC,uCAAuC;IACvC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AA2ED,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAgB9E"}
+{"version":3,"file":"crash-cart.d.ts","sourceRoot":"","sources":["../../src/commands/crash-cart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,MAAM,GAAG,YAAY,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,gGAAgG;IAChG,IAAI,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACnC,uCAAuC;IACvC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAkFD,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAgB9E"}

package/dist/commands/crash-cart.js

@@ -1,7 +1,8 @@
 import { Command } from "commander";
-import { copyFileSync, existsSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
+import { copyFileSync, lstatSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
 import { homedir, tmpdir } from "node:os";
 import { join } from "node:path";
+import { ConfigStore } from "../config-store.js";
 function openrigHome() {
     return process.env.OPENRIG_HOME ?? join(homedir(), ".openrig");
 }
@@ -9,17 +10,29 @@ function openrigHome() {
  *  the detector's readDaemonJson omits it). */
 function readDaemonJsonWithDb(home) {
     const p = join(home, "daemon.json");
-    if (!existsSync(p))
+    if (!existsOrThrow(p))
         return undefined;
     try {
         const j = JSON.parse(readFileSync(p, "utf8"));
         if (typeof j.pid === "number" && typeof j.port === "number" && typeof j.db === "string") {
             return { pid: j.pid, port: j.port, host: typeof j.host === "string" ? j.host : undefined, db: j.db };
         }
-        return undefined;
+        throw new Error("daemon.json has no usable PID, port and database path");
     }
-    catch {
-        return undefined;
+    catch (error) {
+        throw new Error(`Cannot read recorded daemon state at ${p}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/** Only ENOENT means absent; permissions and dangling links must fail visibly. */
+function existsOrThrow(path) {
+    try {
+        lstatSync(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
     }
 }
 /**
@@ -62,7 +75,8 @@ async function realEmit() {
                 isProcessAlive: cc.isProcessAlive,
                 probeHealthz: (url) => probeClassified(url).then((r) => r === "answered"),
                 copyFile: copyFileSync,
-                exists: existsSync,
+                exists: existsOrThrow,
+                configuredDbPath: new ConfigStore().resolve().db.path,
                 makeScratchDir: () => mkdtempSync(join(tmpdir(), "crash-cart-")),
                 removeScratchDir: (d) => rmSync(d, { recursive: true, force: true }),
                 openDb: cc.openDaemonDbReadonly,

package/dist/commands/crash-cart.js.map

@@ -1 +1 @@
-{"version":3,"file":"crash-cart.js","sourceRoot":"","sources":["../../src/commands/crash-cart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA4BjC,SAAS,WAAW;IAClB,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AACjE,CAAC;AAED;+CAC+C;AAC/C,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAoE,CAAC;QACjH,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACxF,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QACvG,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ;IACrB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC3C,MAAM,eAAe,GAAG,CAAC,GAAW,EAAE,EAAE,CACtC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAmB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,MAAM,UAAU,GAAG;QACjB,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,EAAE,CAAC,cAAc;QACjC,cAAc,EAAE,EAAE,CAAC,cAAc;QACjC,YAAY,EAAE,eAAe;QAC7B,UAAU;KACX,CAAC;IACF,OAAO,EAAE,CAAC,kBAAkB,CAAC;QAC3B,YAAY,EAAE,GAAG,EAAE,CACjB,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;QACjI,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,KAAK;gBACpB,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;oBAC5B,CAAC,CAAC,cAAc,KAAK,CAAC,GAAG,GAAG;oBAC5B,CAAC,CAAC,aAAa,KAAK,CAAC,GAAG,GAAG;gBAC7B,CAAC,CAAC,gBAAgB,CAAC;YACrB,MAAM,GAAG,GAAG,UAAU;gBACpB,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU;gBAC5C,CAAC,CAAC,UAAU,KAAK,EAAE,IAAI,IAAI,WAAW,IAAI,KAAK,EAAE,IAAI,IAAI,IAAI,UAAU,CAAC;YAC1E,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;YAC/C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,WAAW,OAAO,GAAG,EAAE,EAAE,CAAC;QACrF,CAAC;QACD,aAAa,EAAE,KAAK,IAAI,EAAE;YACxB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC;gBACpD,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,oBAAoB;gBACpC,cAAc,EAAE,EAAE,CAAC,cAAc;gBACjC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC;gBACzE,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,UAAU;gBAClB,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC;gBAChE,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBACpE,MAAM,EAAE,EAAE,CAAC,oBAAoB;gBAC/B,UAAU;aACX,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAoC;IACnE,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAC/C,wEAAwE,CACzE,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,+CAA+C,CAAC,CAAC;IACtE,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC5B,gGAAgG;QAChG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9B,kFAAkF;QAClF,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"crash-cart.js","sourceRoot":"","sources":["../../src/commands/crash-cart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AA4BjD,SAAS,WAAW;IAClB,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AACjE,CAAC;AAED;+CAC+C;AAC/C,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACpC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAoE,CAAC;QACjH,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACxF,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QACvG,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACrC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACtG,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ;IACrB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC3C,MAAM,eAAe,GAAG,CAAC,GAAW,EAAE,EAAE,CACtC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAmB,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,MAAM,UAAU,GAAG;QACjB,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,EAAE,CAAC,cAAc;QACjC,cAAc,EAAE,EAAE,CAAC,cAAc;QACjC,YAAY,EAAE,eAAe;QAC7B,UAAU;KACX,CAAC;IACF,OAAO,EAAE,CAAC,kBAAkB,CAAC;QAC3B,YAAY,EAAE,GAAG,EAAE,CACjB,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;QACjI,gBAAgB,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,KAAK,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,KAAK;gBACpB,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC;oBAC5B,CAAC,CAAC,cAAc,KAAK,CAAC,GAAG,GAAG;oBAC5B,CAAC,CAAC,aAAa,KAAK,CAAC,GAAG,GAAG;gBAC7B,CAAC,CAAC,gBAAgB,CAAC;YACrB,MAAM,GAAG,GAAG,UAAU;gBACpB,CAAC,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU;gBAC5C,CAAC,CAAC,UAAU,KAAK,EAAE,IAAI,IAAI,WAAW,IAAI,KAAK,EAAE,IAAI,IAAI,IAAI,UAAU,CAAC;YAC1E,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;YAC/C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,WAAW,OAAO,GAAG,EAAE,EAAE,CAAC;QACrF,CAAC;QACD,aAAa,EAAE,KAAK,IAAI,EAAE;YACxB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC;gBACpD,WAAW,EAAE,IAAI;gBACjB,cAAc,EAAE,oBAAoB;gBACpC,cAAc,EAAE,EAAE,CAAC,cAAc;gBACjC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC;gBACzE,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,aAAa;gBACrB,gBAAgB,EAAE,IAAI,WAAW,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,IAAI;gBACrD,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC;gBAChE,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBACpE,MAAM,EAAE,EAAE,CAAC,oBAAoB;gBAC/B,UAAU;aACX,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAoC;IACnE,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAC/C,wEAAwE,CACzE,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,+CAA+C,CAAC,CAAC;IACtE,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC5B,gGAAgG;QAChG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9B,kFAAkF;QAClF,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/commands/proof.d.ts

@@ -1,9 +1,9 @@
 import { Command } from "commander";
 /**
- * `rig proof` — the proof-drop write path (OPR.0.4.4.19 FR-8 + FR-11;
+ * `rig proof add` — the evidence-capture write path (OPR.0.4.4.19 FR-8 + FR-11;
  * conventions C1 + C2 + C8, D2 attestation).
  *
- * CLI-side filesystem only (plan-review + arch-lead confirmed): the drop
+ * The capture leg is CLI-side filesystem only: the drop
  * validates the C1 header AT THE MOMENT THE EVIDENCE IS IN-HAND, writes the
  * artifact into the slice's proof/ dir, and echoes the parsed header (the
  * seat sees what the composer will see). No daemon involvement, no synthetic

package/dist/commands/proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../src/commands/proof.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC;;;;;;;;;;;;;;;;;;GAkBG;AAEH;8CAC8C;AAC9C,eAAO,MAAM,iBAAiB,gEAAiE,CAAC;AAChG,eAAO,MAAM,WAAW,mEAAoE,CAAC;AAK7F,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC9E;AAED,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAc9E;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAgBtE;AAMD,wBAAgB,YAAY,IAAI,OAAO,CA4StC"}
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../src/commands/proof.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC;;;;;;;;;;;;;;;;;;GAkBG;AAEH;8CAC8C;AAC9C,eAAO,MAAM,iBAAiB,gEAAiE,CAAC;AAChG,eAAO,MAAM,WAAW,mEAAoE,CAAC;AAK7F,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC9E;AAED,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAc9E;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAgBtE;AAMD,wBAAgB,YAAY,IAAI,OAAO,CA+WtC"}

package/dist/commands/proof.js

@@ -2,15 +2,16 @@ import fs from "node:fs";
 import path from "node:path";
 import { Command } from "commander";
 import YAML from "yaml";
+import { DaemonClient } from "../client.js";
 import { findSlice, resolveMissionsRoot } from "../lib/scope/scope-fs.js";
 import { ScopeCliError } from "../lib/scope/types.js";
 import { selectProofContractBody, isScaffoldPlaceholderText } from "../lib/scope/scaffold-placeholder.js";
 import { parseLogicalCheckboxes } from "../lib/scope/logical-checkbox.js";
 /**
- * `rig proof` — the proof-drop write path (OPR.0.4.4.19 FR-8 + FR-11;
+ * `rig proof add` — the evidence-capture write path (OPR.0.4.4.19 FR-8 + FR-11;
  * conventions C1 + C2 + C8, D2 attestation).
  *
- * CLI-side filesystem only (plan-review + arch-lead confirmed): the drop
+ * The capture leg is CLI-side filesystem only: the drop
  * validates the C1 header AT THE MOMENT THE EVIDENCE IS IN-HAND, writes the
  * artifact into the slice's proof/ dir, and echoes the parsed header (the
  * seat sees what the composer will see). No daemon involvement, no synthetic
@@ -80,8 +81,87 @@ function isVideoFile(filePath) {
     return VIDEO_EXTENSIONS.has(path.extname(filePath).toLowerCase());
 }
 export function proofCommand() {
-    const cmd = new Command("proof").description("Proof artifacts — drop gate/proof evidence into a slice's proof/ dir with the machine-readable C1 header, validated at the natural moment (OPR.0.4.4.19 FR-8). The drop is the SDLC's proof leg: --evidences joins it to the slice's ## Proof contract items (what the Living Notes DELIVERED section pairs + renders); proof-lock afterwards via rig scope slice approve --scope delivery. Conventions SSOT: docs/reference/sdlc-conventions.md (installed: $OPENRIG_HOME/reference/sdlc-conventions.md).");
-    cmd.option("--workspace <path>", "Override workspace root (else cwd walk or $OPENRIG_WORK_ROOT)");
+    const cmd = new Command("proof").description("Capture evidence (add), record an attributed item judgment (judge), and read derived readiness (show). Capture, policy acceptance, higher outcome judgment and publication are separate.");
+    cmd.addHelpText("after", `
+The selected daemon owns show/judge. Scope addresses are mission/slices/slice#item.
+The project owner selects proofPolicy: { judges: [exact-seat-address] } in the
+owning slice.yaml, mission.yaml or project.yaml (nearest wins; no default gate roles).
+The contract is the authored ## Proof contract. A sole item needs no # selector.
+
+Example (existing evidence, no copied hashes or operation key):
+  rig proof judge trial/slices/01-build#1 --verdict accept --reason 'Observed the promised outcome' --evidence proof/result.md
+  rig proof show trial --json
+  rig proof judge trial/slices/01-build#1 --verdict withdraw --reason 'The result no longer supports acceptance'
+
+Corrections retain prior receipts in proof/judgments/. --replace deliberately
+reaffirms a historical identical judgment after a correction; an ordinary retry
+returns its original receipt plus current readiness and never reinstates old truth.
+Use judge --help for patch-equivalent comparison receipts and advanced identities.
+Legacy proof add artifacts may be referenced directly; queue done and stored
+checkboxes do not accept an item under the selected proof policy.
+`);
+    cmd.option("--workspace <path>", "Capture/add only: override workspace root; show/judge use the selected daemon workspace");
+    const client = () => {
+        if (cmd.opts().workspace)
+            throw new Error("--workspace applies to proof add. Select the judgment daemon using OPENRIG_URL; proof show reports its scope basis.");
+        return new DaemonClient();
+    };
+    const response = async (r) => {
+        const data = r.data;
+        if (r.status >= 400)
+            throw new Error(`${data.error ?? r.status}: ${data.message ?? "Read the named source and retry"}`);
+        return data;
+    };
+    cmd.command("show [scope]").description("Read current attributed proof readiness for a slice, mission or active project; no status files are changed.")
+        .option("--json", "Structured readiness, item revisions and retained judgment references")
+        .action(async (scope, opts) => {
+        try {
+            const data = await response(await client().get(`/api/proof${scope ? `?scope=${encodeURIComponent(scope)}` : ""}`));
+            console.log(opts.json ? JSON.stringify(data) : JSON.stringify(data, null, 2));
+        }
+        catch (e) {
+            console.error(e instanceof Error ? e.message : String(e));
+            process.exitCode = 1;
+        }
+    });
+    cmd.command("judge <scope-item>").description("Record one attributed item judgment and derive readiness. Use mission/slices/slice#item (index, text or ID). Policy inherits proofPolicy.judges from owning slice, mission or project.")
+        .requiredOption("--verdict <verdict>", "accept | reject | withdraw")
+        .requiredOption("--reason <text>", "The evidence-backed judgment being made")
+        .option("--evidence <ref>", "Existing evidence, relative to slice or workspace missions/; repeat for multiple references", (v, prior) => [...prior, v], [])
+        .option("--subject <kind:ref>", "artifact, commit or patch-equivalent subject; artifact inferred when omitted")
+        .option("--comparison <ref>", "Patch-equivalent subject: actual comparison/adoption receipt alongside outcome evidence")
+        .option("--revision <revision>", "Advanced: deliberately require this item revision")
+        .option("--operation-id <id>", "Advanced: explicit retry identity")
+        .option("--replace", "Deliberately reaffirm a historical judgment after a later correction")
+        .option("--json", "Return committed receipt and current readiness")
+        .action(async (address, opts) => {
+        try {
+            const at = address.indexOf("#"), scope = at < 0 ? address : address.slice(0, at), selector = at < 0 ? null : address.slice(at + 1);
+            const refs = [...new Set([...opts.evidence, ...(opts.comparison ? [opts.comparison] : [])])];
+            const query = new URLSearchParams({ scope });
+            for (const ref of refs)
+                query.append("evidence", ref);
+            const c = client(), view = await response(await c.get(`/api/proof?${query}`));
+            const items = view.items;
+            const item = selector ? items?.find(i => i.id === selector || i.text === selector || String(i.index) === selector) : items?.length === 1 ? items[0] : undefined;
+            if (!item)
+                throw new Error("Select one current item with scope#item; rig proof show lists IDs, text and indices");
+            const subjectAt = opts.subject?.indexOf(":") ?? -1;
+            if (opts.subject && subjectAt < 1)
+                throw new Error("--subject must be kind:ref");
+            const body = { scope, item: item.id, verdict: opts.verdict, reason: opts.reason,
+                ...(refs.length ? { evidence: refs, expectedEvidence: view.preparedEvidence } : {}),
+                ...(opts.subject ? { subject: { kind: opts.subject.slice(0, subjectAt), ref: opts.subject.slice(subjectAt + 1), ...(opts.comparison ? { comparison: opts.comparison } : {}) } } : {}),
+                expectedRevision: opts.revision ?? item.revision, expectedPrevious: item.judgment?.id ?? null,
+                operationId: opts.operationId, replace: opts.replace === true };
+            const result = await response(await c.post("/api/proof/judge", body));
+            console.log(opts.json ? JSON.stringify(result) : JSON.stringify(result, null, 2));
+        }
+        catch (e) {
+            console.error(e instanceof Error ? e.message : String(e));
+            process.exitCode = 1;
+        }
+    });
     cmd
         .command("add <slice-path>")
         .description("Drop a proof artifact: authors the C1 frontmatter from flags, writes <slice>/proof/<name>, echoes the parsed header. Contract/self-check/C8 outputs are advisories (exit 0) — never gates.")