@openrig/cli 0.5.16 → 0.5.17

package/node_modules/@openrig/daemon/dist/domain/crash-cart-discovery.d.ts

@@ -1,139 +0,0 @@
-import Database from "better-sqlite3";
-/** Refusal: a live daemon holds the DB, so the direct read is unsafe (route to the live read API). */
-export declare class DaemonLiveError extends Error {
-    constructor(message: string);
-}
-/** Loud failure in the direct-read path (e.g. the daemon DB is not where we resolved it). */
-export declare class CrashCartReadError extends Error {
-    constructor(message: string);
-}
-/** The daemon's default DB basename (`$OPENRIG_HOME/openrig.sqlite`) — NOT `main.db`. */
-export declare const DAEMON_DB_BASENAME = "openrig.sqlite";
-/** The daemon state file shape (`$OPENRIG_HOME/daemon.json`) — the authoritative DB-path + liveness record. */
-export interface DaemonJson {
-    pid: number;
-    port: number;
-    host?: string;
-    /** The exact resolved DB path the daemon opened (prefer this over recomputing). */
-    db: string;
-    startedAt?: string;
-}
-export interface AssertDaemonDownDeps {
-    /** `$OPENRIG_HOME` — where daemon.json lives. */
-    openrigHome: string;
-    /** Parse `$OPENRIG_HOME/daemon.json` → the record, or undefined if absent/unparseable (treated as down). */
-    readDaemonJson: (openrigHome: string) => DaemonJson | undefined;
-    /** True if `pid` is a live process (e.g. `process.kill(pid, 0)` succeeds). */
-    isProcessAlive: (pid: number) => boolean;
-    /** GET `<url>` → true if ANY daemon answered (the control-plane is live). Never throws. */
-    probeHealthz: (url: string) => Promise<boolean>;
-    /** `OPENRIG_URL` override — when set, its /healthz is probed too (bypasses the state file, like getDaemonStatus). */
-    openrigUrl?: string;
-}
-/**
- * FAIL-CLOSED guard: throw DaemonLiveError if a daemon is live, else resolve. A daemon counts as
- * live if EITHER the recorded pid is alive OR a /healthz probe answers (both must be negative to
- * proceed). Mirrors the daemon's own liveness logic (daemon.json pid + /healthz, honoring
- * OPENRIG_URL) so the crash-cart never disagrees with `getDaemonStatus` about "is it running".
- */
-export declare function assertDaemonDown(deps: AssertDaemonDownDeps): Promise<void>;
-/** The resolved daemon DB location + provenance. `relative` flags a state-file path we cannot
- *  reliably locate (the daemon's CWD is unknown to a separate reader) — the caller must handle it. */
-export interface ResolvedDbPath {
-    path: string;
-    fromStateFile: boolean;
-    relative: boolean;
-}
-/**
- * Resolve the daemon DB path. PREFER `daemon.json.db` (the exact path the daemon opened) over
- * recomputing; fall back to `$OPENRIG_HOME/openrig.sqlite`. A relative state-file path is flagged
- * (it resolves against the daemon's CWD, unknown here) rather than silently mis-located.
- */
-export declare function resolveDaemonDbPath(openrigHome: string, readDaemonJson: (openrigHome: string) => DaemonJson | undefined, configuredDbPath?: string): ResolvedDbPath;
-export interface SnapshotDeps {
-    /** Copy one file (e.g. `copyFileSync`). */
-    copyFile: (src: string, dest: string) => void;
-    /** True if the path exists (e.g. `existsSync`). */
-    exists: (p: string) => boolean;
-}
-/**
- * Copy the `{db, -wal, -shm}` triple into `scratchDir` and return the copied db path. The db file is
- * required (loud fail if absent); sidecars are copied only when present (a clean-shutdown DB may have
- * no -wal). The daemon-down precondition (no concurrent writer) is what makes a plain file-copy
- * consistent — opening the COPY then replays the WAL on the copy, never touching the originals.
- */
-export declare function snapshotDaemonDb(dbPath: string, scratchDir: string, deps: SnapshotDeps): string;
-/**
- * Open a COPIED daemon DB read-only. On the copy (in a writable scratch dir with its -wal/-shm
- * alongside) SQLite replays the WAL → the fresh, last-pre-crash view. Read-only is safe here because
- * the copy is disposable and the ORIGINALS are never opened by this path.
- */
-export declare function openDaemonDbReadonly(copyDbPath: string): Database.Database;
-/** Header facts. `stopReason`/`priorUptimeMs` are ALWAYS null: no shutdown/uptime record is persisted
- *  anywhere (verified at source), so they are honest-null daemon-down — never fabricated. */
-export interface CrashCartHeader {
-    /** Newest write-timestamp across the durable tables (best-effort "last activity"); null if empty. */
-    lastActivityAt: string | null;
-    /** Last daemon boot (self_host_identity.reconciled_at advances every boot); null if never booted. */
-    lastBootAt: string | null;
-    /** First-ever boot (self_host_identity.minted_at). */
-    firstBootAt: string | null;
-    hostId: string | null;
-    /** UNRECOVERABLE daemon-down — no shutdown record exists. Honest-null. */
-    stopReason: null;
-    /** UNRECOVERABLE daemon-down — no persisted uptime. Honest-null. */
-    priorUptimeMs: null;
-}
-/** One rig found on this host, with the recovery-relevant counts. */
-export interface RigFound {
-    rigId: string;
-    rigName: string;
-    seatCount: number;
-    runningCount: number;
-    /** Seats whose LATEST session was probed resumable (derived; the recoverable bucket). */
-    resumableCount: number;
-    /** Newest persisted `sessions.last_seen_at` for the rig; null if none. (Live "last active" is a
-     *  tmux observation, unavailable daemon-down — this is the honest DB approximation.) */
-    lastActiveAt: string | null;
-}
-/** One in-progress queue item at crash time (display-only; the cart never mutates queue state). */
-export interface StoppedWork {
-    qitemId: string;
-    destinationSession: string;
-    sourceSession: string;
-    state: string;
-    claimedAt: string | null;
-    summary: string | null;
-    tsUpdated: string;
-}
-export interface CrashCartDiscovery {
-    header: CrashCartHeader;
-    foundOnHost: RigFound[];
-    whereWorkStopped: StoppedWork[];
-}
-/** Read the full daemon-down discovery view from an already-opened (copied) daemon DB. Read-only. */
-export declare function readCrashCartDiscovery(db: Database.Database): CrashCartDiscovery;
-export interface LoadCrashCartDiscoveryDeps extends AssertDaemonDownDeps {
-    /** Current CLI configuration, used only when no daemon has recorded its opened DB. */
-    configuredDbPath?: string;
-    /** Copy one file (e.g. `copyFileSync`). */
-    copyFile: (src: string, dest: string) => void;
-    /** True if the path exists (e.g. `existsSync`). */
-    exists: (p: string) => boolean;
-    /** Create a fresh disposable scratch dir for the DB copy; returns its path. */
-    makeScratchDir: () => string;
-    /** Remove the scratch dir (best-effort cleanup). */
-    removeScratchDir: (dir: string) => void;
-    /** Open the copied DB read-only. Defaults to openDaemonDbReadonly; injected in tests. */
-    openDb?: (copyDbPath: string) => Database.Database;
-}
-/**
- * The public C2 entry: safely read the daemon-down discovery view. FAIL-CLOSED FIRST (throws
- * DaemonLiveError before touching disk if a daemon is live), then copy-then-read the DB into a
- * disposable scratch dir, read the view, and ALWAYS clean up the scratch copy. Read-only end to end.
- */
-export declare function loadCrashCartDiscovery(deps: LoadCrashCartDiscoveryDeps): Promise<{
-    discovery: CrashCartDiscovery;
-    dbPath: ResolvedDbPath;
-}>;
-//# sourceMappingURL=crash-cart-discovery.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/crash-cart-discovery.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"crash-cart-discovery.d.ts","sourceRoot":"","sources":["../../src/domain/crash-cart-discovery.ts"],"names":[],"mappings":"AAcA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAGtC,sGAAsG;AACtG,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,6FAA6F;AAC7F,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AAEnD,+GAA+G;AAC/G,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,4GAA4G;IAC5G,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;IAChE,8EAA8E;IAC9E,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,2FAA2F;IAC3F,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,qHAAqH;IACrH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AASD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgChF;AAED;sGACsG;AACtG,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,EAC/D,gBAAgB,CAAC,EAAE,MAAM,GACxB,cAAc,CAOhB;AAED,MAAM,WAAW,YAAY;IAC3B,2CAA2C;IAC3C,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,mDAAmD;IACnD,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;CAChC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,MAAM,CAU/F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAE1E;AAID;6FAC6F;AAC7F,MAAM,WAAW,eAAe;IAC9B,qGAAqG;IACrG,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,qGAAqG;IACrG,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sDAAsD;IACtD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,0EAA0E;IAC1E,UAAU,EAAE,IAAI,CAAC;IACjB,oEAAoE;IACpE,aAAa,EAAE,IAAI,CAAC;CACrB;AAED,qEAAqE;AACrE,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,cAAc,EAAE,MAAM,CAAC;IACvB;4FACwF;IACxF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,mGAAmG;AACnG,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,QAAQ,EAAE,CAAC;IACxB,gBAAgB,EAAE,WAAW,EAAE,CAAC;CACjC;AAED,qGAAqG;AACrG,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,kBAAkB,CAMhF;AAmED,MAAM,WAAW,0BAA2B,SAAQ,oBAAoB;IACtE,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2CAA2C;IAC3C,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9C,mDAAmD;IACnD,MAAM,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/B,+EAA+E;IAC/E,cAAc,EAAE,MAAM,MAAM,CAAC;IAC7B,oDAAoD;IACpD,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,yFAAyF;IACzF,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,QAAQ,CAAC,QAAQ,CAAC;CACpD;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,0BAA0B,GAC/B,OAAO,CAAC;IAAE,SAAS,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC,CAiCpE"}

package/node_modules/@openrig/daemon/dist/domain/crash-cart-discovery.js

@@ -1,225 +0,0 @@
-// Crash-cart C2 — daemon-DOWN bounded direct-read discovery (plan c015d9ed §C2, arch a1344201).
-//
-// When the daemon is down (or won't start), the cockpit must still SHOW what is on this host —
-// looking is always safe. This module reads the daemon's durable SQLite state WITHOUT a running
-// daemon, via COPY-THEN-READ (arch Q1): the daemon DB is WAL-mode, so a post-crash `-wal` holds
-// the last committed-but-unreplayed frames (exactly the where-work-stopped rows we must show).
-// We copy the {db, -wal, -shm} triple to a disposable scratch dir and open the COPY read-only, so
-// SQLite replays the WAL on the copy → a FRESH view with ZERO interference to the originals a
-// restarting daemon will reopen. READ-ONLY by construction: nothing here ever writes daemon state.
-//
-// The read is fail-closed: it REFUSES if a daemon is live (see assertDaemonDown) — never contend
-// with the process it exists to recover. All process/IO probes are injected so the logic is
-// hermetically unit-testable.
-import Database from "better-sqlite3";
-import { basename, isAbsolute, join } from "node:path";
-/** Refusal: a live daemon holds the DB, so the direct read is unsafe (route to the live read API). */
-export class DaemonLiveError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "DaemonLiveError";
-    }
-}
-/** Loud failure in the direct-read path (e.g. the daemon DB is not where we resolved it). */
-export class CrashCartReadError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "CrashCartReadError";
-    }
-}
-/** The daemon's default DB basename (`$OPENRIG_HOME/openrig.sqlite`) — NOT `main.db`. */
-export const DAEMON_DB_BASENAME = "openrig.sqlite";
-const DEFAULT_HOST = "127.0.0.1";
-const DEFAULT_PORT = 7433;
-function stripTrailingSlash(u) {
-    return u.endsWith("/") ? u.slice(0, -1) : u;
-}
-/**
- * FAIL-CLOSED guard: throw DaemonLiveError if a daemon is live, else resolve. A daemon counts as
- * live if EITHER the recorded pid is alive OR a /healthz probe answers (both must be negative to
- * proceed). Mirrors the daemon's own liveness logic (daemon.json pid + /healthz, honoring
- * OPENRIG_URL) so the crash-cart never disagrees with `getDaemonStatus` about "is it running".
- */
-export async function assertDaemonDown(deps) {
-    const { openrigHome, readDaemonJson, isProcessAlive, probeHealthz, openrigUrl } = deps;
-    // OPENRIG_URL, when set, is a direct daemon target — probe it first (a live answer = refuse).
-    if (openrigUrl && openrigUrl.trim().length > 0) {
-        if (await probeHealthz(`${stripTrailingSlash(openrigUrl.trim())}/healthz`)) {
-            throw new DaemonLiveError(`a daemon answered OPENRIG_URL ${openrigUrl} — refusing the direct read`);
-        }
-    }
-    const state = readDaemonJson(openrigHome);
-    if (state) {
-        if (typeof state.pid === "number" && isProcessAlive(state.pid)) {
-            throw new DaemonLiveError(`daemon.json pid ${state.pid} is still alive — refusing the direct read`);
-        }
-        const host = state.host ?? DEFAULT_HOST;
-        const port = state.port ?? DEFAULT_PORT;
-        if (await probeHealthz(`http://${host}:${port}/healthz`)) {
-            throw new DaemonLiveError(`a daemon answered http://${host}:${port}/healthz — refusing the direct read`);
-        }
-        return;
-    }
-    // With an explicit target and no local state, an unrelated default daemon
-    // does not own this instance. The recorded PID/target guards above still win.
-    if (openrigUrl?.trim())
-        return;
-    // No explicit target or state file: probe the default address.
-    if (await probeHealthz(`http://${DEFAULT_HOST}:${DEFAULT_PORT}/healthz`)) {
-        throw new DaemonLiveError(`a daemon answered the default http://${DEFAULT_HOST}:${DEFAULT_PORT}/healthz — refusing the direct read`);
-    }
-}
-/**
- * Resolve the daemon DB path. PREFER `daemon.json.db` (the exact path the daemon opened) over
- * recomputing; fall back to `$OPENRIG_HOME/openrig.sqlite`. A relative state-file path is flagged
- * (it resolves against the daemon's CWD, unknown here) rather than silently mis-located.
- */
-export function resolveDaemonDbPath(openrigHome, readDaemonJson, configuredDbPath) {
-    const state = readDaemonJson(openrigHome);
-    if (state?.db && state.db.trim().length > 0) {
-        return { path: state.db, fromStateFile: true, relative: !isAbsolute(state.db) };
-    }
-    const path = configuredDbPath ?? join(openrigHome, DAEMON_DB_BASENAME);
-    return { path, fromStateFile: false, relative: !isAbsolute(path) };
-}
-/**
- * Copy the `{db, -wal, -shm}` triple into `scratchDir` and return the copied db path. The db file is
- * required (loud fail if absent); sidecars are copied only when present (a clean-shutdown DB may have
- * no -wal). The daemon-down precondition (no concurrent writer) is what makes a plain file-copy
- * consistent — opening the COPY then replays the WAL on the copy, never touching the originals.
- */
-export function snapshotDaemonDb(dbPath, scratchDir, deps) {
-    if (!deps.exists(dbPath)) {
-        throw new CrashCartReadError(`daemon DB not found at ${dbPath} — cannot copy-then-read`);
-    }
-    const destDb = join(scratchDir, basename(dbPath));
-    deps.copyFile(dbPath, destDb);
-    for (const suffix of ["-wal", "-shm"]) {
-        if (deps.exists(dbPath + suffix))
-            deps.copyFile(dbPath + suffix, destDb + suffix);
-    }
-    return destDb;
-}
-/**
- * Open a COPIED daemon DB read-only. On the copy (in a writable scratch dir with its -wal/-shm
- * alongside) SQLite replays the WAL → the fresh, last-pre-crash view. Read-only is safe here because
- * the copy is disposable and the ORIGINALS are never opened by this path.
- */
-export function openDaemonDbReadonly(copyDbPath) {
-    return new Database(copyDbPath, { readonly: true, fileMustExist: true });
-}
-/** Read the full daemon-down discovery view from an already-opened (copied) daemon DB. Read-only. */
-export function readCrashCartDiscovery(db) {
-    return {
-        header: readHeader(db),
-        foundOnHost: readFoundOnHost(db),
-        whereWorkStopped: readWhereWorkStopped(db),
-    };
-}
-function readHeader(db) {
-    const id = db
-        .prepare("SELECT host_id, minted_at, reconciled_at FROM self_host_identity WHERE singleton = 1")
-        .get();
-    // Newest write across the durable tables. datetime() in ORDER BY normalizes the mixed timestamp
-    // formats (ISO-Z app writes vs SQLite `datetime('now')` defaults) so the comparison is chronological;
-    // we return the ORIGINAL string of that newest row.
-    const act = db
-        .prepare(`SELECT ts FROM (
-         SELECT last_seen_at AS ts FROM sessions
-         UNION ALL SELECT created_at FROM sessions
-         UNION ALL SELECT created_at FROM events
-         UNION ALL SELECT ts_updated FROM queue_items
-         UNION ALL SELECT last_seen_at FROM discovered_sessions
-         UNION ALL SELECT reconciled_at FROM self_host_identity WHERE singleton = 1
-       ) WHERE ts IS NOT NULL ORDER BY datetime(ts) DESC LIMIT 1`)
-        .get();
-    return {
-        lastActivityAt: act?.ts ?? null,
-        lastBootAt: id?.reconciled_at ?? null,
-        firstBootAt: id?.minted_at ?? null,
-        hostId: id?.host_id ?? null,
-        stopReason: null,
-        priorUptimeMs: null,
-    };
-}
-function readFoundOnHost(db) {
-    // Per rig: seat count + counts folded over the LATEST session per node (max ULID id, per the
-    // daemon's own latest-per-node convention) + newest persisted last_seen_at.
-    const rows = db
-        .prepare(`SELECT r.id AS rigId, r.name AS rigName,
-         (SELECT COUNT(*) FROM nodes n WHERE n.rig_id = r.id) AS seatCount,
-         (SELECT COUNT(*) FROM nodes n WHERE n.rig_id = r.id
-            AND (SELECT s.status FROM sessions s WHERE s.node_id = n.id ORDER BY s.id DESC LIMIT 1) = 'running'
-         ) AS runningCount,
-         (SELECT COUNT(*) FROM nodes n WHERE n.rig_id = r.id
-            AND (SELECT s.resume_last_probe_status FROM sessions s WHERE s.node_id = n.id ORDER BY s.id DESC LIMIT 1) = 'resumable'
-         ) AS resumableCount,
-         (SELECT MAX(s.last_seen_at) FROM sessions s JOIN nodes n ON s.node_id = n.id WHERE n.rig_id = r.id) AS lastActiveAt
-       FROM rigs r
-       WHERE r.archived_at IS NULL
-       ORDER BY r.name ASC`)
-        .all();
-    return rows.map((r) => ({
-        rigId: r.rigId,
-        rigName: r.rigName,
-        seatCount: r.seatCount,
-        runningCount: r.runningCount,
-        resumableCount: r.resumableCount,
-        lastActiveAt: r.lastActiveAt ?? null,
-    }));
-}
-/**
- * The public C2 entry: safely read the daemon-down discovery view. FAIL-CLOSED FIRST (throws
- * DaemonLiveError before touching disk if a daemon is live), then copy-then-read the DB into a
- * disposable scratch dir, read the view, and ALWAYS clean up the scratch copy. Read-only end to end.
- */
-export async function loadCrashCartDiscovery(deps) {
-    // Refuse before any disk work if a daemon holds the DB.
-    await assertDaemonDown(deps);
-    const resolved = resolveDaemonDbPath(deps.openrigHome, deps.readDaemonJson, deps.configuredDbPath);
-    if (resolved.relative) {
-        throw new CrashCartReadError(`daemon DB path '${resolved.path}' is relative — the daemon CWD is unknown, cannot locate it daemon-down`);
-    }
-    if (!resolved.fromStateFile && !deps.exists(resolved.path)) {
-        return { dbPath: resolved, discovery: {
-                header: { lastActivityAt: null, lastBootAt: null, firstBootAt: null, hostId: null, stopReason: null, priorUptimeMs: null },
-                foundOnHost: [], whereWorkStopped: [],
-            } };
-    }
-    const scratchDir = deps.makeScratchDir();
-    try {
-        const copyDb = snapshotDaemonDb(resolved.path, scratchDir, {
-            copyFile: deps.copyFile,
-            exists: deps.exists,
-        });
-        const db = (deps.openDb ?? openDaemonDbReadonly)(copyDb);
-        try {
-            return { discovery: readCrashCartDiscovery(db), dbPath: resolved };
-        }
-        finally {
-            db.close();
-        }
-    }
-    finally {
-        deps.removeScratchDir(scratchDir);
-    }
-}
-function readWhereWorkStopped(db) {
-    const rows = db
-        .prepare(`SELECT qitem_id AS qitemId, destination_session AS destinationSession, source_session AS sourceSession,
-              state, claimed_at AS claimedAt, summary, ts_updated AS tsUpdated
-       FROM queue_items
-       WHERE state = 'in-progress'
-       ORDER BY datetime(ts_updated) DESC, qitem_id DESC`)
-        .all();
-    return rows.map((r) => ({
-        qitemId: r.qitemId,
-        destinationSession: r.destinationSession,
-        sourceSession: r.sourceSession,
-        state: r.state,
-        claimedAt: r.claimedAt ?? null,
-        summary: r.summary ?? null,
-        tsUpdated: r.tsUpdated,
-    }));
-}
-//# sourceMappingURL=crash-cart-discovery.js.map

package/node_modules/@openrig/daemon/dist/domain/crash-cart-discovery.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crash-cart-discovery.js","sourceRoot":"","sources":["../../src/domain/crash-cart-discovery.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,EAAE;AACF,+FAA+F;AAC/F,gGAAgG;AAChG,gGAAgG;AAChG,+FAA+F;AAC/F,kGAAkG;AAClG,8FAA8F;AAC9F,mGAAmG;AACnG,EAAE;AACF,iGAAiG;AACjG,4FAA4F;AAC5F,8BAA8B;AAE9B,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEvD,sGAAsG;AACtG,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,6FAA6F;AAC7F,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAyBnD,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,SAAS,kBAAkB,CAAC,CAAS;IACnC,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA0B;IAC/D,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAEvF,8FAA8F;IAC9F,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,MAAM,YAAY,CAAC,GAAG,kBAAkB,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,eAAe,CAAC,iCAAiC,UAAU,6BAA6B,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,eAAe,CAAC,mBAAmB,KAAK,CAAC,GAAG,4CAA4C,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,YAAY,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,YAAY,CAAC;QACxC,IAAI,MAAM,YAAY,CAAC,UAAU,IAAI,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,eAAe,CAAC,4BAA4B,IAAI,IAAI,IAAI,qCAAqC,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO;IACT,CAAC;IAED,0EAA0E;IAC1E,8EAA8E;IAC9E,IAAI,UAAU,EAAE,IAAI,EAAE;QAAE,OAAO;IAC/B,+DAA+D;IAC/D,IAAI,MAAM,YAAY,CAAC,UAAU,YAAY,IAAI,YAAY,UAAU,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,eAAe,CACvB,wCAAwC,YAAY,IAAI,YAAY,qCAAqC,CAC1G,CAAC;IACJ,CAAC;AACH,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAmB,EACnB,cAA+D,EAC/D,gBAAyB;IAEzB,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,KAAK,EAAE,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IAClF,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,IAAI,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACvE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;AACrE,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,UAAkB,EAAE,IAAkB;IACrF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,kBAAkB,CAAC,0BAA0B,MAAM,0BAA0B,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3E,CAAC;AAkDD,qGAAqG;AACrG,MAAM,UAAU,sBAAsB,CAAC,EAAqB;IAC1D,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QACtB,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;QAChC,gBAAgB,EAAE,oBAAoB,CAAC,EAAE,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,EAAqB;IACvC,MAAM,EAAE,GAAG,EAAE;SACV,OAAO,CAAC,sFAAsF,CAAC;SAC/F,GAAG,EAA+E,CAAC;IACtF,gGAAgG;IAChG,sGAAsG;IACtG,oDAAoD;IACpD,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN;;;;;;;iEAO2D,CAC5D;SACA,GAAG,EAAgC,CAAC;IACvC,OAAO;QACL,cAAc,EAAE,GAAG,EAAE,EAAE,IAAI,IAAI;QAC/B,UAAU,EAAE,EAAE,EAAE,aAAa,IAAI,IAAI;QACrC,WAAW,EAAE,EAAE,EAAE,SAAS,IAAI,IAAI;QAClC,MAAM,EAAE,EAAE,EAAE,OAAO,IAAI,IAAI;QAC3B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,IAAI;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,EAAqB;IAC5C,6FAA6F;IAC7F,4EAA4E;IAC5E,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;;;;;;;;;;;2BAWqB,CACtB;SACA,GAAG,EAOJ,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;KACrC,CAAC,CAAC,CAAC;AACN,CAAC;AAiBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAgC;IAEhC,wDAAwD;IACxD,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAE7B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACnG,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,kBAAkB,CAC1B,mBAAmB,QAAQ,CAAC,IAAI,yEAAyE,CAC1G,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE;gBACpC,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;gBAC1H,WAAW,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE;aACtC,EAAE,CAAC;IACN,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE;YACzD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,OAAO,EAAE,SAAS,EAAE,sBAAsB,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,EAAqB;IACjD,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;;;;yDAImD,CACpD;SACA,GAAG,EAQJ,CAAC;IACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;QAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC,CAAC,CAAC;AACN,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/crash-cart-emit.d.ts

@@ -1,22 +0,0 @@
-import type { DaemonState, DaemonUnverifiedEvidence } from "./crash-cart-detect.js";
-import type { CrashCartDiscovery } from "./crash-cart-discovery.js";
-/** The verb's JSON payload. Exactly one of {evidence | discovery | refusal} accompanies the state
- *  (up → none; unverified → evidence; down → discovery, or refusal if the read fail-closed). */
-export interface CrashCartEmit {
-    state: DaemonState;
-    evidence?: DaemonUnverifiedEvidence;
-    discovery?: CrashCartDiscovery;
-    refusal?: string;
-}
-export interface EmitCrashCartDeps {
-    /** Resolve the 3-state verdict (bounded-retry detector). */
-    resolveState: () => Promise<DaemonState>;
-    /** Assemble the UNVERIFIED evidence (pid state + last probe). */
-    assembleEvidence: () => Promise<DaemonUnverifiedEvidence>;
-    /** Run the C2 daemon-down read (loadCrashCartDiscovery) VERBATIM; may fail-closed (throws). */
-    loadDiscovery: () => Promise<CrashCartDiscovery>;
-}
-/** Assemble the verb's verdict. UP → state only; UNVERIFIED → state + evidence (no read); DOWN → the
- *  read's discovery, or a structured refusal note if the read fail-closed. */
-export declare function emitCrashCartState(deps: EmitCrashCartDeps): Promise<CrashCartEmit>;
-//# sourceMappingURL=crash-cart-emit.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/crash-cart-emit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"crash-cart-emit.d.ts","sourceRoot":"","sources":["../../src/domain/crash-cart-emit.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AACpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAEpE;gGACgG;AAChG,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,YAAY,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,iEAAiE;IACjE,gBAAgB,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC1D,+FAA+F;IAC/F,aAAa,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAClD;AAED;8EAC8E;AAC9E,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CAUxF"}

package/node_modules/@openrig/daemon/dist/domain/crash-cart-emit.js

@@ -1,23 +0,0 @@
-// Crash-cart C3 — the SSOT for the `rig crash-cart --json` payload (plan c015d9ed §C3, coupling
-// ruling option C, 4 rails). ONE JSON = the 3-state detector verdict + (on DOWN) the discovery
-// (rail 3). Composes the detector + the C2 read VERBATIM (rail 2 — never a parallel read). A
-// fail-closed refusal of the read emits a STRUCTURED refusal note (NOT exit-code-only, NO discovery)
-// so the TUI never renders the recovery cockpit from a refusal. Read-only (rail 1). The sub-steps are
-// injected so this decision layer is deterministic; the CLI verb wires the real detector + read.
-/** Assemble the verb's verdict. UP → state only; UNVERIFIED → state + evidence (no read); DOWN → the
- *  read's discovery, or a structured refusal note if the read fail-closed. */
-export async function emitCrashCartState(deps) {
-    const state = await deps.resolveState();
-    if (state === "up")
-        return { state };
-    if (state === "unverified")
-        return { state, evidence: await deps.assembleEvidence() };
-    // down — attempt the C2 read; a refusal is structured, never a rendered cockpit.
-    try {
-        return { state, discovery: await deps.loadDiscovery() };
-    }
-    catch (e) {
-        return { state, refusal: e instanceof Error ? e.message : String(e) };
-    }
-}
-//# sourceMappingURL=crash-cart-emit.js.map

package/node_modules/@openrig/daemon/dist/domain/crash-cart-emit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crash-cart-emit.js","sourceRoot":"","sources":["../../src/domain/crash-cart-emit.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,+FAA+F;AAC/F,6FAA6F;AAC7F,qGAAqG;AACrG,sGAAsG;AACtG,iGAAiG;AAuBjG;8EAC8E;AAC9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAuB;IAC9D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;IACxC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACrC,IAAI,KAAK,KAAK,YAAY;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;IACtF,iFAAiF;IACjF,IAAI,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC;AACH,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/crash-cart-probes.d.ts

@@ -1,24 +0,0 @@
-import type { DaemonStateFile, HealthzProbeResult } from "./crash-cart-detect.js";
-/** Classify a fetch REJECTION into a probe result — POSITIVE-FORM predicate (guard/orch rail):
- *  DOWN (refused) ONLY when (a) at least one terminal attempt exists AND (b) EVERY terminal attempt is
- *  recognizably ECONNREFUSED. Anything else — a timeout, an abort, another code, or a CODE-LESS /
- *  unrecognized failure — is ambiguous evidence and stays timeout/unverified (a timeout never promotes to
- *  a confirmed down; the cart never offers RESTORE on partial evidence). "No known-bad sibling" (a negated
- *  code-Set) erased a code-less sibling; "ALL known-good" (this positive form) closes the whole family. */
-export declare function classifyProbeError(err: unknown): HealthzProbeResult;
-export interface ProbeDeps {
-    fetch: (url: string, init?: {
-        signal?: AbortSignal;
-    }) => Promise<Response>;
-    timeoutMs?: number;
-}
-/** Probe `<url>` (a daemon /healthz): 2xx → answered; non-2xx (foreign occupant) → not-openrig; a
- *  rejection is classified (refused/timeout). Bounded by an abort timeout. */
-export declare function probeHealthz(url: string, deps: ProbeDeps): Promise<HealthzProbeResult>;
-/** True if `pid` is a live process. `process.kill(pid, 0)` throws ESRCH when absent, EPERM when it
- *  exists but we can't signal it (still alive). */
-export declare function isProcessAlive(pid: number): boolean;
-/** Read + parse `$OPENRIG_HOME/daemon.json` → the {pid,port,host} record, or undefined if absent or
- *  malformed (treated as "no state file"). */
-export declare function readDaemonJson(openrigHome: string): DaemonStateFile | undefined;
-//# sourceMappingURL=crash-cart-probes.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/crash-cart-probes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"crash-cart-probes.d.ts","sourceRoot":"","sources":["../../src/domain/crash-cart-probes.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAiDlF;;;;;2GAK2G;AAC3G,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CAInE;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;8EAC8E;AAC9E,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAW5F;AAED;mDACmD;AACnD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AAED;8CAC8C;AAC9C,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAY/E"}

package/node_modules/@openrig/daemon/dist/domain/crash-cart-probes.js

@@ -1,109 +0,0 @@
-// Crash-cart C3 — the REAL probe adapters wired into resolveDaemonState (main.ts). The classification
-// logic is unit-tested (injected fetch); isProcessAlive/readDaemonJson are thin node-API wrappers
-// proven by the real-daemon-down run.
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-/** Collect the TERMINAL ATTEMPTS from a rejection tree — the leaf error nodes that represent an actual
- *  connect attempt. Node/Undici's global fetch wraps a refused socket as an OUTER `TypeError
- *  {message:"fetch failed", code:undefined}` → `cause` (single address), or an `AggregateError` whose
- *  `.errors[]` are the per-address attempts. A node WITH a `cause` or non-empty `errors[]` is a WRAPPER
- *  (it recurses, never counts as a terminal attempt); a node with neither is a terminal attempt — which
- *  may carry a `code` (ECONNREFUSED/ETIMEDOUT/…) or NONE at all. A code-less attempt is retained here,
- *  which a flattened code-Set would erase. Depth-bounded (cycle-safe); a node hit at the cap is treated
- *  as a terminal attempt (its code, typically absent, then counts — conservatively). */
-const MAX_WALK_DEPTH = 10; // real Undici chains are 2–3 deep; this is generous. Beyond it = UNRESOLVED.
-function collectTerminalAttempts(err) {
-    const attempts = [];
-    const onPath = new Set(); // cycle detection by IDENTITY (a back-edge cannot be resolved)
-    const visit = (e, depth) => {
-        // A non-object rejection (string/undefined/…) is not a resolvable terminal → unknown (non-refused).
-        if (!e || typeof e !== "object") {
-            attempts.push({ unresolved: true });
-            return;
-        }
-        const o = e;
-        // CYCLE: this exact object is already on the current path — it cannot be fully resolved → unknown.
-        if (onPath.has(o)) {
-            attempts.push({ unresolved: true });
-            return;
-        }
-        const children = [];
-        if (o.cause)
-            children.push(o.cause);
-        if (Array.isArray(o.errors))
-            children.push(...o.errors);
-        if (children.length === 0) {
-            // A FULLY-RESOLVED terminal attempt (no cause, no errors): its own code is real evidence.
-            attempts.push({ code: typeof o.code === "string" ? o.code : undefined, name: typeof o.name === "string" ? o.name : undefined });
-            return;
-        }
-        // A WRAPPER (has children). If depth is exhausted, we CANNOT resolve it → record an UNKNOWN attempt;
-        // NEVER reinterpret an unresolved wrapper's OWN code as terminal evidence (exhaustion is not evidence).
-        if (depth >= MAX_WALK_DEPTH) {
-            attempts.push({ unresolved: true });
-            return;
-        }
-        onPath.add(o);
-        for (const c of children)
-            visit(c, depth + 1);
-        onPath.delete(o);
-    };
-    visit(err, 0);
-    return attempts;
-}
-/** Classify a fetch REJECTION into a probe result — POSITIVE-FORM predicate (guard/orch rail):
- *  DOWN (refused) ONLY when (a) at least one terminal attempt exists AND (b) EVERY terminal attempt is
- *  recognizably ECONNREFUSED. Anything else — a timeout, an abort, another code, or a CODE-LESS /
- *  unrecognized failure — is ambiguous evidence and stays timeout/unverified (a timeout never promotes to
- *  a confirmed down; the cart never offers RESTORE on partial evidence). "No known-bad sibling" (a negated
- *  code-Set) erased a code-less sibling; "ALL known-good" (this positive form) closes the whole family. */
-export function classifyProbeError(err) {
-    const attempts = collectTerminalAttempts(err);
-    const refusedUnanimous = attempts.length > 0 && attempts.every((a) => a.code === "ECONNREFUSED");
-    return refusedUnanimous ? "refused" : "timeout";
-}
-/** Probe `<url>` (a daemon /healthz): 2xx → answered; non-2xx (foreign occupant) → not-openrig; a
- *  rejection is classified (refused/timeout). Bounded by an abort timeout. */
-export async function probeHealthz(url, deps) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), deps.timeoutMs ?? 800);
-    try {
-        const res = await deps.fetch(url, { signal: controller.signal });
-        return res.ok ? "answered" : "not-openrig";
-    }
-    catch (e) {
-        return classifyProbeError((e ?? {}));
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-/** True if `pid` is a live process. `process.kill(pid, 0)` throws ESRCH when absent, EPERM when it
- *  exists but we can't signal it (still alive). */
-export function isProcessAlive(pid) {
-    try {
-        process.kill(pid, 0);
-        return true;
-    }
-    catch (e) {
-        return e.code === "EPERM";
-    }
-}
-/** Read + parse `$OPENRIG_HOME/daemon.json` → the {pid,port,host} record, or undefined if absent or
- *  malformed (treated as "no state file"). */
-export function readDaemonJson(openrigHome) {
-    const p = join(openrigHome, "daemon.json");
-    if (!existsSync(p))
-        return undefined;
-    try {
-        const j = JSON.parse(readFileSync(p, "utf8"));
-        if (typeof j.pid === "number" && typeof j.port === "number") {
-            return { pid: j.pid, port: j.port, host: typeof j.host === "string" ? j.host : undefined };
-        }
-        return undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-//# sourceMappingURL=crash-cart-probes.js.map

package/node_modules/@openrig/daemon/dist/domain/crash-cart-probes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crash-cart-probes.js","sourceRoot":"","sources":["../../src/domain/crash-cart-probes.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,kGAAkG;AAClG,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC;;;;;;;wFAOwF;AACxF,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC,6EAA6E;AAExG,SAAS,uBAAuB,CAAC,GAAY;IAC3C,MAAM,QAAQ,GAAkE,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,+DAA+D;IACjG,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,KAAa,EAAQ,EAAE;QAChD,oGAAoG;QACpG,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,CAA0E,CAAC;QACrF,mGAAmG;QACnG,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,KAAK;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAI,CAAC,CAAC,MAAoB,CAAC,CAAC;QACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,0FAA0F;YAC1F,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;YAChI,OAAO;QACT,CAAC;QACD,qGAAqG;QACrG,wGAAwG;QACxG,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC;IACF,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACd,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;2GAK2G;AAC3G,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,MAAM,QAAQ,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;IACjG,OAAO,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAOD;8EAC8E;AAC9E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,IAAe;IAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAqC,CAAC,CAAC;IAC3E,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;mDACmD;AACnD,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAQ,CAA2B,CAAC,IAAI,KAAK,OAAO,CAAC;IACvD,CAAC;AACH,CAAC;AAED;8CAC8C;AAC9C,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAsD,CAAC;QACnG,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5D,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC7F,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}