@openrig/cli 0.5.16 → 0.5.17

package/node_modules/@openrig/daemon/dist/domain/successor-session-launcher.d.ts

@@ -1,168 +0,0 @@
-import type { TmuxAdapter } from "../adapters/tmux.js";
-import type { DiscoveryRepository } from "./discovery-repository.js";
-import type { RuntimeAdapter, ForkSource } from "./runtime-adapter.js";
-import type { AppliedLaunchObservation } from "./permission-drift.js";
-import type { TmuxOptionDefaultsApplier } from "./tmux-option-defaults.js";
-/**
- * OPR.0.4.3.04 — the explicit successor-creation seam for the seat-handover
- * full-cycle composer (IMPL-SPEC §2.1b; resolves the rev1-dual BLOCKING B1).
- *
- * It creates an UNMANAGED, discoverable tmux successor for a non-discovered
- * handover source (fresh), routes it through REAL runtime startup so it becomes
- * a LIVE, READY agent (not a bare shell), records it as an ACTIVE discovery
- * candidate, and returns that candidate + the captured launch resume token so
- * the composer can route it through the EXISTING discovered->commit rebind path.
- * It deliberately does NOT `registerClaimedSession`/`upsertBinding` — the
- * session stays unmanaged until the handover `commit` claims it, so the
- * departing seat's binding is never touched before successor readiness.
- *
- * B1 (rev1-dual fix): the successor is launched through the runtime adapter's
- * `launchHarness` + readiness poll — the SAME startup/readiness primitives
- * `StartupOrchestrator` drives — WITHOUT the ahead-of-commit managed-session
- * registration those `StartupOrchestrator.startNode` bookkeeping steps would
- * require (updateStartupStatus / node_startup_context / updateResumeToken by
- * sessionId all need a registered session row). Driving the adapter primitives
- * directly is how we make the successor a live agent while keeping it unmanaged
- * until commit. Any launch/readiness failure UNWINDS the created session and
- * leaves the original binding intact (commit never runs).
- *
- * Why not `NodeLauncher.launchNode`: it refuses a bound node and, on success,
- * registers a managed session + binding in the same transaction — which would
- * trip `successor_already_managed` in the commit path. This seam creates a
- * DISTINCT unmanaged session instead.
- */
-export interface SuccessorNode {
-    id: string;
-    runtime: string | null;
-    cwd: string | null;
-    /** OPR.0.4.8.3 Seam B: the departing seat's PERSISTED resolved launch posture —
-     *  the successor is a CONTINUITY edge of the same seat, so its policy posture
-     *  carries (populated by the caller from node provenance; absent = env decision). */
-    launchPosture?: "floor" | "full_bypass";
-    /** 0.5.2-07 model fidelity: the seat's SPEC-pinned model (nodes.model). The successor is a continuity
-     *  edge of the same seat, so its launch must READ THE SPEC — a launch path that drops it makes the
-     *  running topology drift from the founder-designed one. Populated by the caller from node provenance;
-     *  absent → the adapter emits no model flag (unchanged for legacy/unpinned seats). */
-    model?: string | null;
-    /** 0.5.2-07 A4-profile: the seat's SPEC-pinned codex config profile (nodes.codex_config_profile).
-     *  Same continuity rationale as model — populated by the caller from node provenance; absent → the
-     *  adapter emits no -p flag (unchanged for legacy/unpinned seats). */
-    codexConfigProfile?: string | null;
-}
-export type SuccessorLaunchResult = {
-    ok: true;
-    discoveredId: string;
-    tmuxSession: string;
-    tmuxPane: string;
-    resumeToken?: string;
-    resumeType?: string;
-    appliedLaunch?: AppliedLaunchObservation;
-    /**
-     * OPR.0.4.6.02 S1 — non-fatal tmux option-default warnings from the
-     * fresh successor's launch (mouse/status/clipboard). Present only when
-     * an option-set degraded; omitted (undefined) on the clean path so the
-     * shape stays byte-compatible with pre-02 successors.
-     */
-    warnings?: string[];
-} | {
-    ok: false;
-    code: string;
-    step: "create_successor" | "resolve_pane" | "start_agent";
-    message: string;
-    /** True once the predecessor process has been replaced in its pane. */
-    replacementStarted: boolean;
-};
-export declare class SuccessorSessionLauncher {
-    private tmuxAdapter;
-    private discoveryRepo;
-    private sessionEnv;
-    private newId;
-    private runtimeAdapters;
-    private readinessTimeoutMs;
-    private sleep;
-    private tmuxOptionDefaults;
-    private exitPollMs;
-    private exitTimeoutMs;
-    constructor(tmuxAdapter: TmuxAdapter, discoveryRepo: DiscoveryRepository, opts?: {
-        sessionEnv?: Record<string, string | undefined>;
-        newId?: () => string;
-        /** Runtime adapters keyed by runtime, used to launch + ready-probe the
-         *  successor agent. Absent → a fresh successor cannot be launched. */
-        runtimeAdapters?: Record<string, RuntimeAdapter>;
-        /** Readiness timeout in ms (default 30000, mirrors StartupOrchestrator). */
-        readinessTimeoutMs?: number;
-        /** Injectable sleep (tests). */
-        sleep?: (ms: number) => Promise<void>;
-        /**
-         * OPR.0.4.6.02 S1 — the SHARED tmux option-defaults applier. A FRESH
-         * successor is a new operator/agent seat (same launch-only class as
-         * NodeLauncher), so it gets the same mouse/status/clipboard defaults on
-         * its just-created session. Omitted → option application is skipped.
-         */
-        tmuxOptionDefaults?: TmuxOptionDefaultsApplier;
-        /** Cutover retiree-exit poll interval + total bounded timeout (per graceful/forced phase). */
-        exitPollMs?: number;
-        exitTimeoutMs?: number;
-    });
-    /**
-     * Create the unmanaged successor tmux session, launch it into a LIVE agent,
-     * and record it as an active discovery candidate. The candidate satisfies the
-     * discovered->commit guards: active (upsert sets status='active'), distinct
-     * name, matching runtime hint, unmanaged (no binding/session claims it),
-     * tmux-present (just created). The returned resume token (if any) is the
-     * launch-scraped token the composer persists at commit (B2 for fresh).
-     */
-    createSuccessor(input: {
-        node: SuccessorNode;
-        departingSessionName: string;
-        occupantGeneration?: string | null;
-        /** Synchronous physical-cutover observer; runs after the retiree is proven gone and before respawn. */
-        onReplacementStarted?: () => void;
-        /** OPR.0.5.5.5 fork source: the successor launches as a NATIVE FORK of this
-         *  resolved id (adapter forkSource seam) — it carries the incumbent's
-         *  conversation from its first byte; the returned resume token is the NEW
-         *  post-fork token, never the parent's. Absent → a plain fresh launch. */
-        forkSource?: ForkSource;
-    }): Promise<SuccessorLaunchResult>;
-    /**
-     * B1 — launch the successor into a live, ready agent via the runtime adapter's
-     * `launchHarness` + readiness probe (the same primitives StartupOrchestrator
-     * drives), capturing the launch resume token. No session/binding is
-     * registered — the successor stays unmanaged until commit. The token is NEVER
-     * logged or placed in a returned message.
-     */
-    private startAgent;
-    /**
-     * Wait for harness readiness with exponential backoff (1s→2s→…→16s cap,
-     * 30s default timeout) — mirrors StartupOrchestrator.waitForReady.
-     */
-    private waitForReady;
-    /**
-     * Cutover: terminate the retiree occupant in its pane so the successor can respawn into it WHILE
-     * PRESERVING scrollback. `setRemainOnExit(true)` FIRST (so the pane survives dead, not destroyed, on
-     * exit); graceful SIGTERM ("exits in place" — a clean exit also protects the provider session state the
-     * successor's resume depends on); a bounded-timeout SIGKILL is the pinned DEGRADED fallback. Returns
-     * which path terminated the retiree, or a failure if it never became dead (then commit never runs).
-     * (Graceful signal = SIGTERM as the desk-provisional default under build-ahead; dev-planner ratifies
-     * the exact graceful mechanism — SIGTERM vs a runtime-specific quit — at their resume.)
-     */
-    private terminateRetiree;
-    /** KI-14: is the respawned pane's foreground a bare shell? A non-shell here means the pane booted
-     *  a baked-in command (the resumed-old-context defect) or the respawn was ignored. Classification
-     *  is the shared shell-classifier PLUS the basename of the shell this launcher itself selected
-     *  (r2-B1: a configured tcsh/csh — or any configured default shell — is a valid blank; a
-     *  hard-coded set here false-refused AFTER the destructive cutover). One bounded retry absorbs
-     *  shell spawn latency; a null probe counts as unverified (refuse, never assume). */
-    private verifyPaneIsBlankShell;
-    /** Poll `isPaneDead` up to the bounded exit timeout (count-bounded so injected no-op sleeps stay fast). */
-    private waitPaneDead;
-    /**
-     * Composer unwind for a successor that launched but failed downstream (context delivery or continuity
-     * verify). CUTOVER INVARIANT: the successor occupies the retiree's PRESERVED pane, so cleanup NEVER
-     * kills the session — that would destroy the seat's recoverable state. It only marks the discovery
-     * candidate vanished; the re-wakeable shell stays in the pane and the seat is recoverable from its
-     * provider session file. (`tmuxSession` is retained for signature stability + call-site logging.)
-     */
-    cleanup(_tmuxSession: string, discoveredId: string | null): Promise<void>;
-}
-//# sourceMappingURL=successor-session-launcher.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/successor-session-launcher.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"successor-session-launcher.d.ts","sourceRoot":"","sources":["../../src/domain/successor-session-launcher.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,KAAK,EAAE,cAAc,EAAgC,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAErG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAG3E;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB;;yFAEqF;IACrF,aAAa,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC;IACxC;;;0FAGsF;IACtF,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;0EAEsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,MAAM,qBAAqB,GAC7B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,wBAAwB,CAAC;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,kBAAkB,GAAG,cAAc,GAAG,aAAa,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAAC;AAEN,qBAAa,wBAAwB;IACnC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,eAAe,CAAiC;IACxD,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,kBAAkB,CAAmC;IAC7D,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,aAAa,CAAS;gBAG5B,WAAW,EAAE,WAAW,EACxB,aAAa,EAAE,mBAAmB,EAClC,IAAI,GAAE;QACJ,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QAChD,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;QACrB;8EACsE;QACtE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACjD,4EAA4E;QAC5E,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,gCAAgC;QAChC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtC;;;;;WAKG;QACH,kBAAkB,CAAC,EAAE,yBAAyB,CAAC;QAC/C,8FAA8F;QAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;KACnB;IAcR;;;;;;;OAOG;IACG,eAAe,CAAC,KAAK,EAAE;QAC3B,IAAI,EAAE,aAAa,CAAC;QACpB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,uGAAuG;QACvG,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAC;QAClC;;;kFAG0E;QAC1E,UAAU,CAAC,EAAE,UAAU,CAAC;KACzB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IA2HlC;;;;;;OAMG;YACW,UAAU;IA0FxB;;;OAGG;YACW,YAAY;IAsB1B;;;;;;;;OAQG;YACW,gBAAgB;IAiB9B;;;;;yFAKqF;YACvE,sBAAsB;IASpC,2GAA2G;YAC7F,YAAY;IAS1B;;;;;;OAMG;IACG,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;CAGhF"}

package/node_modules/@openrig/daemon/dist/domain/successor-session-launcher.js

@@ -1,336 +0,0 @@
-import { ulid } from "ulid";
-import { isAttentionRequiredReadinessCode } from "./runtime-adapter.js";
-import { isShellForeground } from "./shell-classifier.js";
-export class SuccessorSessionLauncher {
-    tmuxAdapter;
-    discoveryRepo;
-    sessionEnv;
-    newId;
-    runtimeAdapters;
-    readinessTimeoutMs;
-    sleep;
-    tmuxOptionDefaults;
-    exitPollMs;
-    exitTimeoutMs;
-    constructor(tmuxAdapter, discoveryRepo, opts = {}) {
-        this.tmuxAdapter = tmuxAdapter;
-        this.discoveryRepo = discoveryRepo;
-        this.sessionEnv = opts.sessionEnv ?? {};
-        this.newId = opts.newId ?? ulid;
-        this.runtimeAdapters = opts.runtimeAdapters ?? {};
-        this.readinessTimeoutMs = opts.readinessTimeoutMs ?? 30_000;
-        this.sleep = opts.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
-        this.tmuxOptionDefaults = opts.tmuxOptionDefaults ?? null;
-        this.exitPollMs = opts.exitPollMs ?? 100;
-        this.exitTimeoutMs = opts.exitTimeoutMs ?? 3_000;
-    }
-    /**
-     * Create the unmanaged successor tmux session, launch it into a LIVE agent,
-     * and record it as an active discovery candidate. The candidate satisfies the
-     * discovered->commit guards: active (upsert sets status='active'), distinct
-     * name, matching runtime hint, unmanaged (no binding/session claims it),
-     * tmux-present (just created). The returned resume token (if any) is the
-     * launch-scraped token the composer persists at commit (B2 for fresh).
-     */
-    async createSuccessor(input) {
-        // CUTOVER MODEL (plan 411c43de): a SEAT = one durable tmux session; the successor takes over the
-        // retiree's EXACT pane via respawn-pane, so the canonical session name is PRESERVED (no -h shuffle)
-        // and native scrollback survives — predecessor history stays above the successor boot (the money
-        // proof). The retiree exits in place; its provider session file is the durable wake target, so the
-        // new unwind invariant is that a failed successor NEVER destroys that recoverable state.
-        const departingSession = input.departingSessionName;
-        // OpenRig identity env mirrors NodeLauncher.launchNode's pattern so the successor self-identifies +
-        // reports activity like a launched seat. OPENRIG_SESSION_NAME is the PRESERVED canonical name.
-        const env = compactEnv({
-            OPENRIG_NODE_ID: input.node.id,
-            OPENRIG_SESSION_NAME: departingSession,
-            OPENRIG_RUNTIME: input.node.runtime ?? undefined,
-            ...this.sessionEnv,
-            OPENRIG_OCCUPANT_GENERATION: input.occupantGeneration ?? undefined,
-        });
-        const cwd = input.node.cwd ?? undefined;
-        // 1. Resolve the DEPARTING session's active pane — the retiree's pane we take over. A probe throw or
-        //    an empty result is a structured resolve_pane failure BEFORE any respawn, so the seat is wholly
-        //    untouched (still the live retiree; nothing to recover).
-        let pane;
-        try {
-            const panes = await this.tmuxAdapter.listPanes(departingSession);
-            pane = panes.find((p) => p.active) ?? panes[0];
-        }
-        catch (err) {
-            return {
-                ok: false,
-                code: "pane_probe_failed",
-                step: "resolve_pane",
-                replacementStarted: false,
-                message: `Could not probe tmux panes for departing session "${departingSession}": ${err instanceof Error ? err.message : String(err)}`,
-            };
-        }
-        if (!pane) {
-            return {
-                ok: false,
-                code: "pane_unresolved",
-                step: "resolve_pane",
-                replacementStarted: false,
-                message: `Could not resolve a tmux pane for departing session "${departingSession}".`,
-            };
-        }
-        // 2. Terminate the retiree IN PLACE, then respawn the now-dead pane WITHOUT -k so native scrollback
-        //    survives (respawn-pane -k CLEARS the pane history — verified on tmux 3.6a; that would defeat the
-        //    money-proof). The swap: set remain-on-exit so the pane survives the exit → graceful SIGTERM
-        //    ("exits in place"; also protects the provider session state the successor's resume depends on) →
-        //    bounded-timeout SIGKILL fallback (pinned degraded path) → respawn-pane (no -k) on the dead pane.
-        const terminated = await this.terminateRetiree(pane.id);
-        if (!terminated.ok) {
-            return { ok: false, code: "retiree_not_terminated", step: "create_successor", message: terminated.message, replacementStarted: false };
-        }
-        input.onReplacementStarted?.();
-        // KI-14: the respawn command must be EXPLICIT. `respawn-pane` without a command re-runs the
-        // pane's creation (or last-respawn) command — the default shell only for createSession panes.
-        // Adopted/hand-recovered panes carry a full harness invocation there (`codex … resume
-        // <old-token>`), which is exactly how the 2026-08-22 wave's "fresh" successors booted 14-day-old
-        // contexts. An explicit shell also resets the pane's respawn default, self-healing the pane.
-        const blankShell = (await this.tmuxAdapter.getDefaultShell()) ?? "/bin/sh";
-        const respawned = await this.tmuxAdapter.respawnPane(pane.id, blankShell, { cwd, env });
-        if (!respawned.ok) {
-            return {
-                ok: false,
-                code: respawned.code ?? "respawn_failed",
-                step: "create_successor",
-                replacementStarted: true,
-                message: `Could not respawn the successor into pane "${pane.id}" of "${departingSession}": ${respawned.message ?? "respawn-pane failed"}`,
-            };
-        }
-        // KI-14: VERIFY the blank slate before any launch. The fresh contract is a verified blank shell
-        // or a loud refusal — never a launch driven into a resumed harness that then gets committed as a
-        // fresh successor. One bounded retry absorbs the shell's spawn latency. On failure the seat is
-        // preserved (unwind invariant: never killSession) and no discovery candidate exists yet.
-        const blank = await this.verifyPaneIsBlankShell(pane.id, blankShell);
-        if (!blank.ok) {
-            return {
-                ok: false,
-                code: "successor_pane_not_blank",
-                step: "create_successor",
-                replacementStarted: true,
-                message: `Fresh successor pane "${pane.id}" of "${departingSession}" is running "${blank.observed ?? "unknown"}" instead of a blank shell — refusing to launch into a non-blank pane. The pane's start command likely bakes in a harness invocation; recreate the pane (or hand over with --source discovered:<id>) and retry.`,
-            };
-        }
-        // Ghost-stage (e) re-key: the retiring occupant's seat-name-keyed stores are invalidated so the
-        // successor never inherits a ghost. That call is made ATOMICALLY at SeatHandoverService.commit()
-        // (inside the rebind tx, where the retiring + successor names are in scope), per the ghost-stage
-        // contract — NOT here at the swap, so it commits together with the rebind. See occupant-invalidator.ts.
-        // 3. Route the successor through REAL runtime startup (launchHarness send-keys + readiness) so it
-        //    becomes a LIVE, READY agent in the reused pane BEFORE it can be committed. UNWIND INVARIANT:
-        //    on ANY launch/readiness failure we do NOT killSession the preserved seat — that would destroy
-        //    the retiree's recoverable state. We return the structured failure and leave the re-wakeable
-        //    shell in the pane; commit never runs, so the binding is not repointed.
-        const started = await this.startAgent(input.node, departingSession, pane.id, cwd, input.forkSource);
-        if (!started.ok) {
-            return { ok: false, code: started.code, step: "start_agent", message: started.message, replacementStarted: true };
-        }
-        const discovered = this.discoveryRepo.upsertDiscoveredSession({
-            tmuxSession: departingSession,
-            tmuxPane: pane.id,
-            // The hint equals the node's own runtime, so the commit-path runtime check always matches; null
-            // runtime records as "unknown" (which the check skips).
-            runtimeHint: (input.node.runtime ?? "unknown"),
-            confidence: "high",
-            cwd: input.node.cwd ?? undefined,
-        });
-        return {
-            ok: true,
-            discoveredId: discovered.id,
-            tmuxSession: departingSession,
-            tmuxPane: pane.id,
-            resumeToken: started.resumeToken,
-            resumeType: started.resumeType,
-            appliedLaunch: started.appliedLaunch,
-        };
-    }
-    /**
-     * B1 — launch the successor into a live, ready agent via the runtime adapter's
-     * `launchHarness` + readiness probe (the same primitives StartupOrchestrator
-     * drives), capturing the launch resume token. No session/binding is
-     * registered — the successor stays unmanaged until commit. The token is NEVER
-     * logged or placed in a returned message.
-     */
-    async startAgent(node, tmuxSession, tmuxPane, cwd, forkSource) {
-        const adapter = node.runtime ? this.runtimeAdapters[node.runtime] : undefined;
-        if (!adapter) {
-            return {
-                ok: false,
-                code: "successor_runtime_unsupported",
-                message: `No runtime adapter for "${node.runtime ?? "unknown"}"; a live successor cannot be launched for this seat.`,
-            };
-        }
-        // Transient binding for the adapter launch/readiness probe — the successor
-        // is unmanaged, so there is no persisted binding row (id/updatedAt are inert
-        // for the adapter; it reads tmuxSession/tmuxPane/cwd/model). 0.5.2-07 (model
-        // fidelity): the SPEC-pinned model IS carried now — a successor is a continuity
-        // edge of the same seat, so its launch must read the seat's spec, else the
-        // running topology silently drifts from the founder-designed one at every
-        // handover. (config profile is still a tracked follow-on.)
-        const binding = {
-            id: "",
-            nodeId: node.id,
-            attachmentType: "tmux",
-            tmuxSession,
-            tmuxWindow: null,
-            tmuxPane,
-            cmuxWorkspace: null,
-            cmuxSurface: null,
-            updatedAt: "",
-            cwd: cwd ?? "",
-            // Seam B: continuity — the successor launches at the departing seat's posture.
-            ...(node.launchPosture ? { launchPosture: node.launchPosture } : {}),
-            // 0.5.2-07: the successor reads the seat's SPEC-pinned model (adapter emits -m/--model).
-            model: node.model ?? undefined,
-            // 0.5.2-07 A4-profile: the successor reads the seat's SPEC-pinned codex config profile (adapter emits -p).
-            codexConfigProfile: node.codexConfigProfile ?? undefined,
-        };
-        let launch;
-        try {
-            launch = await adapter.launchHarness(binding, { name: tmuxSession, ...(forkSource ? { forkSource } : {}) });
-        }
-        catch (err) {
-            return { ok: false, code: "successor_launch_failed", message: `Successor harness launch threw: ${err instanceof Error ? err.message : String(err)}` };
-        }
-        if (!launch.ok) {
-            return { ok: false, code: "successor_launch_failed", message: `Successor harness launch failed: ${launch.error}` };
-        }
-        // Capture the launch-scraped resume token (never logged). Persisted by the
-        // composer at commit with provenance "scrape" (B2, launched modes).
-        let resumeToken;
-        let resumeType;
-        const trimmed = launch.resumeToken?.trim();
-        if (trimmed) {
-            resumeToken = trimmed;
-            resumeType = launch.resumeType;
-        }
-        // OPR.0.4.3.04 rev2 code-review fix — checkReady/waitForReady can THROW after
-        // createSession already succeeded (adapter/socket/permission errors rethrow).
-        // A thrown exception must NOT reject createSuccessor before its kill/unwind
-        // runs (that would LEAK the unmanaged successor + surface an unstructured 500).
-        // Catch it here and return a STRUCTURED ok:false so the caller kills the
-        // just-created session (killBestEffort) and fails loudly at step=start_agent —
-        // exactly like a returned readiness failure.
-        let readiness;
-        try {
-            readiness = await this.waitForReady(adapter, binding);
-        }
-        catch (err) {
-            return {
-                ok: false,
-                code: "successor_readiness_failed",
-                message: `Successor readiness probe threw: ${err instanceof Error ? err.message : String(err)}`,
-            };
-        }
-        if (!readiness.ready) {
-            return {
-                ok: false,
-                code: isAttentionRequiredReadinessCode(readiness.code) ? "successor_attention_required" : "successor_not_ready",
-                message: `Successor did not become a ready agent: ${readiness.reason ?? "readiness timeout"}`,
-            };
-        }
-        return { ok: true, resumeToken, resumeType, appliedLaunch: launch.appliedLaunch };
-    }
-    /**
-     * Wait for harness readiness with exponential backoff (1s→2s→…→16s cap,
-     * 30s default timeout) — mirrors StartupOrchestrator.waitForReady.
-     */
-    async waitForReady(adapter, binding) {
-        const startTime = Date.now();
-        let delay = 1000;
-        const maxDelay = 16_000;
-        while (true) {
-            const result = await adapter.checkReady(binding);
-            if (result.ready)
-                return result;
-            if (isAttentionRequiredReadinessCode(result.code))
-                return result;
-            const elapsed = Date.now() - startTime;
-            if (elapsed + delay > this.readinessTimeoutMs) {
-                const finalResult = await adapter.checkReady(binding);
-                if (finalResult.ready)
-                    return finalResult;
-                return { ready: false, reason: result.reason ?? "readiness timeout" };
-            }
-            await this.sleep(delay);
-            delay = Math.min(delay * 2, maxDelay);
-        }
-    }
-    /**
-     * Cutover: terminate the retiree occupant in its pane so the successor can respawn into it WHILE
-     * PRESERVING scrollback. `setRemainOnExit(true)` FIRST (so the pane survives dead, not destroyed, on
-     * exit); graceful SIGTERM ("exits in place" — a clean exit also protects the provider session state the
-     * successor's resume depends on); a bounded-timeout SIGKILL is the pinned DEGRADED fallback. Returns
-     * which path terminated the retiree, or a failure if it never became dead (then commit never runs).
-     * (Graceful signal = SIGTERM as the desk-provisional default under build-ahead; dev-planner ratifies
-     * the exact graceful mechanism — SIGTERM vs a runtime-specific quit — at their resume.)
-     */
-    async terminateRetiree(paneId) {
-        const failures = [];
-        const remain = await this.tmuxAdapter.setRemainOnExit(paneId, true);
-        if (!remain.ok)
-            failures.push(`remain-on-exit: ${remain.message}`);
-        const term = await this.tmuxAdapter.signalPaneProcess(paneId, "TERM");
-        if (!term.ok)
-            failures.push(`TERM: ${term.message}`);
-        if (await this.waitPaneDead(paneId))
-            return { ok: true, path: "graceful" };
-        // Graceful window elapsed — force-kill (the pinned degraded path).
-        const kill = await this.tmuxAdapter.signalPaneProcess(paneId, "KILL");
-        if (!kill.ok)
-            failures.push(`KILL: ${kill.message}`);
-        if (await this.waitPaneDead(paneId))
-            return { ok: true, path: "forced" };
-        const detail = failures.length > 0 ? ` Tmux failures: ${failures.join("; ")}.` : "";
-        return { ok: false, message: `Retiree in pane "${paneId}" did not exit after graceful TERM + forced KILL.${detail}` };
-    }
-    /** KI-14: is the respawned pane's foreground a bare shell? A non-shell here means the pane booted
-     *  a baked-in command (the resumed-old-context defect) or the respawn was ignored. Classification
-     *  is the shared shell-classifier PLUS the basename of the shell this launcher itself selected
-     *  (r2-B1: a configured tcsh/csh — or any configured default shell — is a valid blank; a
-     *  hard-coded set here false-refused AFTER the destructive cutover). One bounded retry absorbs
-     *  shell spawn latency; a null probe counts as unverified (refuse, never assume). */
-    async verifyPaneIsBlankShell(paneId, expectedShell) {
-        let observed = await this.tmuxAdapter.getPaneCommand(paneId);
-        if (observed && isShellForeground(observed, expectedShell))
-            return { ok: true };
-        await this.sleep(this.exitPollMs);
-        observed = await this.tmuxAdapter.getPaneCommand(paneId);
-        if (observed && isShellForeground(observed, expectedShell))
-            return { ok: true };
-        return { ok: false, observed };
-    }
-    /** Poll `isPaneDead` up to the bounded exit timeout (count-bounded so injected no-op sleeps stay fast). */
-    async waitPaneDead(paneId) {
-        const maxPolls = Math.max(1, Math.ceil(this.exitTimeoutMs / this.exitPollMs));
-        for (let i = 0; i < maxPolls; i++) {
-            if (await this.tmuxAdapter.isPaneDead(paneId))
-                return true;
-            await this.sleep(this.exitPollMs);
-        }
-        return this.tmuxAdapter.isPaneDead(paneId);
-    }
-    /**
-     * Composer unwind for a successor that launched but failed downstream (context delivery or continuity
-     * verify). CUTOVER INVARIANT: the successor occupies the retiree's PRESERVED pane, so cleanup NEVER
-     * kills the session — that would destroy the seat's recoverable state. It only marks the discovery
-     * candidate vanished; the re-wakeable shell stays in the pane and the seat is recoverable from its
-     * provider session file. (`tmuxSession` is retained for signature stability + call-site logging.)
-     */
-    async cleanup(_tmuxSession, discoveredId) {
-        if (discoveredId)
-            this.discoveryRepo.markVanished([discoveredId]);
-    }
-}
-function compactEnv(input) {
-    const result = {};
-    for (const [key, value] of Object.entries(input)) {
-        if (typeof value === "string" && value.length > 0)
-            result[key] = value;
-    }
-    return result;
-}
-//# sourceMappingURL=successor-session-launcher.js.map

package/node_modules/@openrig/daemon/dist/domain/successor-session-launcher.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"successor-session-launcher.js","sourceRoot":"","sources":["../../src/domain/successor-session-launcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,EAAE,gCAAgC,EAAE,MAAM,sBAAsB,CAAC;AAGxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AA2E1D,MAAM,OAAO,wBAAwB;IAC3B,WAAW,CAAc;IACzB,aAAa,CAAsB;IACnC,UAAU,CAAqC;IAC/C,KAAK,CAAe;IACpB,eAAe,CAAiC;IAChD,kBAAkB,CAAS;IAC3B,KAAK,CAAgC;IACrC,kBAAkB,CAAmC;IACrD,UAAU,CAAS;IACnB,aAAa,CAAS;IAE9B,YACE,WAAwB,EACxB,aAAkC,EAClC,OAoBI,EAAE;QAEN,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;QAChC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC;QAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC;QAC1D,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;QACzC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC;IACnD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CAAC,KAWrB;QACC,iGAAiG;QACjG,oGAAoG;QACpG,iGAAiG;QACjG,mGAAmG;QACnG,yFAAyF;QACzF,MAAM,gBAAgB,GAAG,KAAK,CAAC,oBAAoB,CAAC;QAEpD,oGAAoG;QACpG,+FAA+F;QAC/F,MAAM,GAAG,GAAG,UAAU,CAAC;YACrB,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;YAC9B,oBAAoB,EAAE,gBAAgB;YACtC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS;YAChD,GAAG,IAAI,CAAC,UAAU;YAClB,2BAA2B,EAAE,KAAK,CAAC,kBAAkB,IAAI,SAAS;SACnE,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC;QAExC,qGAAqG;QACrG,oGAAoG;QACpG,6DAA6D;QAC7D,IAAI,IAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACjE,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,cAAc;gBACpB,kBAAkB,EAAE,KAAK;gBACzB,OAAO,EAAE,qDAAqD,gBAAgB,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACvI,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE,cAAc;gBACpB,kBAAkB,EAAE,KAAK;gBACzB,OAAO,EAAE,wDAAwD,gBAAgB,IAAI;aACtF,CAAC;QACJ,CAAC;QAED,oGAAoG;QACpG,sGAAsG;QACtG,iGAAiG;QACjG,sGAAsG;QACtG,sGAAsG;QACtG,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;QACzI,CAAC;QACD,KAAK,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC/B,4FAA4F;QAC5F,8FAA8F;QAC9F,sFAAsF;QACtF,iGAAiG;QACjG,6FAA6F;QAC7F,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC,IAAI,SAAS,CAAC;QAC3E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAG,SAA+B,CAAC,IAAI,IAAI,gBAAgB;gBAC/D,IAAI,EAAE,kBAAkB;gBACxB,kBAAkB,EAAE,IAAI;gBACxB,OAAO,EAAE,8CAA8C,IAAI,CAAC,EAAE,SAAS,gBAAgB,MAAO,SAAkC,CAAC,OAAO,IAAI,qBAAqB,EAAE;aACpK,CAAC;QACJ,CAAC;QAED,gGAAgG;QAChG,iGAAiG;QACjG,+FAA+F;QAC/F,yFAAyF;QACzF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,kBAAkB;gBACxB,kBAAkB,EAAE,IAAI;gBACxB,OAAO,EAAE,yBAAyB,IAAI,CAAC,EAAE,SAAS,gBAAgB,iBAAiB,KAAK,CAAC,QAAQ,IAAI,SAAS,iNAAiN;aAChU,CAAC;QACJ,CAAC;QAED,gGAAgG;QAChG,iGAAiG;QACjG,iGAAiG;QACjG,wGAAwG;QAExG,kGAAkG;QAClG,kGAAkG;QAClG,mGAAmG;QACnG,iGAAiG;QACjG,4EAA4E;QAC5E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACpG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;QACpH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC;YAC5D,WAAW,EAAE,gBAAgB;YAC7B,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,gGAAgG;YAChG,wDAAwD;YACxD,WAAW,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,CAAgB;YAC7D,UAAU,EAAE,MAAM;YAClB,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS;SACjC,CAAC,CAAC;QAEH,OAAO;YACL,EAAE,EAAE,IAAI;YACR,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,WAAW,EAAE,gBAAgB;YAC7B,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,UAAU,CACtB,IAAmB,EACnB,WAAmB,EACnB,QAAgB,EAChB,GAAuB,EACvB,UAAuB;QAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,+BAA+B;gBACrC,OAAO,EAAE,2BAA2B,IAAI,CAAC,OAAO,IAAI,SAAS,uDAAuD;aACrH,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,6EAA6E;QAC7E,6EAA6E;QAC7E,gFAAgF;QAChF,2EAA2E;QAC3E,0EAA0E;QAC1E,2DAA2D;QAC3D,MAAM,OAAO,GAAgB;YAC3B,EAAE,EAAE,EAAE;YACN,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,cAAc,EAAE,MAAM;YACtB,WAAW;YACX,UAAU,EAAE,IAAI;YAChB,QAAQ;YACR,aAAa,EAAE,IAAI;YACnB,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,EAAE;YACb,GAAG,EAAE,GAAG,IAAI,EAAE;YACd,+EAA+E;YAC/E,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,yFAAyF;YACzF,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;YAC9B,2GAA2G;YAC3G,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,SAAS;SACzD,CAAC;QAEF,IAAI,MAA4D,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9G,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACxJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,oCAAoC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACrH,CAAC;QAED,2EAA2E;QAC3E,oEAAoE;QACpE,IAAI,WAA+B,CAAC;QACpC,IAAI,UAA8B,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAC3C,IAAI,OAAO,EAAE,CAAC;YACZ,WAAW,GAAG,OAAO,CAAC;YACtB,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACjC,CAAC;QAED,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,gFAAgF;QAChF,yEAAyE;QACzE,+EAA+E;QAC/E,6CAA6C;QAC7C,IAAI,SAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,4BAA4B;gBAClC,OAAO,EAAE,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAChG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gCAAgC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,qBAAqB;gBAC/G,OAAO,EAAE,2CAA2C,SAAS,CAAC,MAAM,IAAI,mBAAmB,EAAE;aAC9F,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;IACpF,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,YAAY,CAAC,OAAuB,EAAE,OAAoB;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,CAAC;QAExB,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,KAAK;gBAAE,OAAO,MAAM,CAAC;YAChC,IAAI,gCAAgC,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,OAAO,MAAM,CAAC;YAEjE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACvC,IAAI,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC9C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACtD,IAAI,WAAW,CAAC,KAAK;oBAAE,OAAO,WAAW,CAAC;gBAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;YACxE,CAAC;YAED,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,gBAAgB,CAC5B,MAAc;QAEd,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC3E,mEAAmE;QACnE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,MAAM,oDAAoD,MAAM,EAAE,EAAE,CAAC;IACxH,CAAC;IAED;;;;;yFAKqF;IAC7E,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,aAAqB;QACxE,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,QAAQ,IAAI,iBAAiB,CAAC,QAAQ,EAAE,aAAa,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAChF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,QAAQ,IAAI,iBAAiB,CAAC,QAAQ,EAAE,aAAa,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED,2GAA2G;IACnG,KAAK,CAAC,YAAY,CAAC,MAAc;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3D,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,YAAoB,EAAE,YAA2B;QAC7D,IAAI,YAAY;YAAE,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IACpE,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAyC;IAC3D,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/sync-site-wrap.d.ts

@@ -1,13 +0,0 @@
-import type { SlowOperationInstrumentation } from "./slow-op-recorder.js";
-export declare function configureSyncSiteRecorder(next: SlowOperationInstrumentation | undefined): void;
-export declare function runSyncSite<T>(site: string, fn: () => T): T;
-/**
- * Async twin of runSyncSite: instruments a NON-blocking site through the
- * recorder's async `runStage` seam (falls back to a bare call when no recorder
- * is configured). Use this for sites whose work must NOT block the event loop
- * (e.g. process-table sampling via async execFile) — a synchronous `runSyncSite`
- * wrapping an `execFileSync` freezes the loop for the whole spawn, which is the
- * daemon-degradation defect this replaces.
- */
-export declare function runAsyncSite<T>(site: string, fn: () => Promise<T>): Promise<T>;
-//# sourceMappingURL=sync-site-wrap.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/sync-site-wrap.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-site-wrap.d.ts","sourceRoot":"","sources":["../../src/domain/sync-site-wrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAI1E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,4BAA4B,GAAG,SAAS,GAAG,IAAI,CAE9F;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAE3D;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEpF"}

package/node_modules/@openrig/daemon/dist/domain/sync-site-wrap.js

@@ -1,19 +0,0 @@
-let recorder;
-export function configureSyncSiteRecorder(next) {
-    recorder = next;
-}
-export function runSyncSite(site, fn) {
-    return recorder?.runSync ? recorder.runSync(site, fn) : fn();
-}
-/**
- * Async twin of runSyncSite: instruments a NON-blocking site through the
- * recorder's async `runStage` seam (falls back to a bare call when no recorder
- * is configured). Use this for sites whose work must NOT block the event loop
- * (e.g. process-table sampling via async execFile) — a synchronous `runSyncSite`
- * wrapping an `execFileSync` freezes the loop for the whole spawn, which is the
- * daemon-degradation defect this replaces.
- */
-export async function runAsyncSite(site, fn) {
-    return recorder?.runStage ? recorder.runStage(site, fn) : fn();
-}
-//# sourceMappingURL=sync-site-wrap.js.map

package/node_modules/@openrig/daemon/dist/domain/sync-site-wrap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-site-wrap.js","sourceRoot":"","sources":["../../src/domain/sync-site-wrap.ts"],"names":[],"mappings":"AAEA,IAAI,QAAkD,CAAC;AAEvD,MAAM,UAAU,yBAAyB,CAAC,IAA8C;IACtF,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,WAAW,CAAI,IAAY,EAAE,EAAW;IACtD,OAAO,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAI,IAAY,EAAE,EAAoB;IACtE,OAAO,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjE,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/system-world.d.ts

@@ -1,45 +0,0 @@
-export declare const SYSTEM_WORLD_SCHEMA = "openrig.system-world/v0alpha1";
-export declare const DEFAULT_SYSTEM_WORLD_SELECTION = "default";
-export declare const DISABLED_SYSTEM_WORLD_SELECTION = "disabled";
-export declare const DEFAULT_SYSTEM_WORLD_RELATIVE_PATH = "system/system-world.yaml";
-export declare const DEFAULT_SYSTEM_WORLD_MANIFEST = "schema: openrig.system-world/v0alpha1\nid: openrig-default\nversion: \"0.5.9\"\ncontext:\n  - ref: onboarding-width\n  - ref: world-public\n    profiles:\n      claude: guided\n      codex: codex-coverage\nskills: []\n";
-export interface SystemWorldContextSelection {
-    ref: string;
-    profiles?: {
-        claude?: string;
-        codex?: string;
-    };
-}
-export interface SystemWorldManifest {
-    schema: typeof SYSTEM_WORLD_SCHEMA;
-    id: string;
-    version: string;
-    context: SystemWorldContextSelection[];
-    skills: string[];
-}
-export type SystemWorldSource = "default" | "file" | "env";
-export type SystemWorldResolution = {
-    ok: true;
-    state: "default" | "replacement" | "disabled";
-    source: SystemWorldSource;
-    selection: string;
-    manifestPath: string | null;
-    manifest: SystemWorldManifest | null;
-} | {
-    ok: false;
-    state: "default" | "replacement";
-    source: SystemWorldSource;
-    selection: string;
-    manifestPath: string;
-    error: {
-        code: "system_world_missing" | "system_world_invalid";
-        message: string;
-    };
-};
-export declare function parseSystemWorldManifest(text: string, sourcePath?: string): SystemWorldManifest;
-export declare function resolveSystemWorld(input: {
-    contextRoot: string;
-    selection: string;
-    source: SystemWorldSource;
-}): SystemWorldResolution;
-//# sourceMappingURL=system-world.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/system-world.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"system-world.d.ts","sourceRoot":"","sources":["../../src/domain/system-world.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,mBAAmB,kCAAkC,CAAC;AACnE,eAAO,MAAM,8BAA8B,YAAY,CAAC;AACxD,eAAO,MAAM,+BAA+B,aAAa,CAAC;AAC1D,eAAO,MAAM,kCAAkC,6BAA6B,CAAC;AAE7E,eAAO,MAAM,6BAA6B,+NAUzC,CAAC;AAKF,MAAM,WAAW,2BAA2B;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,mBAAmB,CAAC;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,2BAA2B,EAAE,CAAC;IACvC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,MAAM,GAAG,KAAK,CAAC;AAE3D,MAAM,MAAM,qBAAqB,GAC7B;IACA,EAAE,EAAE,IAAI,CAAC;IACT,KAAK,EAAE,SAAS,GAAG,aAAa,GAAG,UAAU,CAAC;IAC9C,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACtC,GACC;IACA,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,SAAS,GAAG,aAAa,CAAC;IACjC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE;QAAE,IAAI,EAAE,sBAAsB,GAAG,sBAAsB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACnF,CAAC;AAkBJ,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,SAA0B,GAAG,mBAAmB,CAuChH;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;CAC3B,GAAG,qBAAqB,CAsCxB"}