@openrig/cli 0.5.16 → 0.6.0

package/node_modules/@openrig/daemon/dist/domain/restore-check-service.js

@@ -1,1139 +0,0 @@
-import { accessSync, constants } from "node:fs";
-import { homedir } from "node:os";
-import { isAbsolute, join, relative } from "node:path";
-import { getCompatibleOpenRigPath } from "../openrig-compat.js";
-// --- Service ---
-const DAEMON_HEALTHY_PATTERN = /^Daemon running\b/m;
-// OPR.0.3.2.14 — fallback subpath uses a generic .openrig placeholder
-// rather than an internal-team layout, to close the source-side
-// privacy leak. Fallback preserved per slice README §"Architecture
-// note" (option-A removal cascaded 36 test yellows in 0.3.1 cleanup).
-const SUBSTRATE_SHARED_DOCS_ROOT = process.env["OPENRIG_SUBSTRATE_SHARED_DOCS"]
-    ?? join(homedir(), ".openrig", "shared-docs");
-// OPR.0.3.2.14 — these four constants used to be copy-pasted in 7+
-// test files. Exporting from source + importing in tests eliminates
-// the divergence class that broke 17 tests during 0.3.1 cleanup.
-export const CLAUDE_HOOKS_ROOT = join(SUBSTRATE_SHARED_DOCS_ROOT, "control-plane", "services", "claude-hooks");
-export const CLAUDE_SESSION_START_COMPACT_COMMAND = join(CLAUDE_HOOKS_ROOT, "bin", "session-start-compact-context.sh");
-export const CLAUDE_USER_PROMPT_SUBMIT_COMMAND = join(CLAUDE_HOOKS_ROOT, "bin", "userpromptsubmit-queue-attention.sh");
-export const CLAUDE_HOOK_FRAGMENT_PATH = join(CLAUDE_HOOKS_ROOT, "config", "settings.fragment.json");
-export class RestoreCheckService {
-    deps;
-    constructor(deps) {
-        this.deps = deps;
-    }
-    check(opts) {
-        const checks = [];
-        // rev1-r2 no-false-ready: ready-seat caveat signals that default compact
-        // COMPUTES but does NOT emit (AC-4 token-safe) still count toward the
-        // top-level verdict/readiness/counts, so the headline never reports a false
-        // ready while a rig rollup is ready_with_caveats.
-        const deferredAssessmentChecks = [];
-        const rigRollupInputs = [];
-        const recoveryRigInputs = [];
-        // Host-level checks — daemon probe throw produces unknown (not not_restorable).
-        // Daemon definitely-down (healthy=false, negative text) is red/not_restorable.
-        // Daemon probe exception (socket unavailable, etc.) is unknown.
-        const daemonCheck = this.checkDaemonReachable();
-        if (daemonCheck === null) {
-            // Probe threw — state is uninspectable
-            return this.buildUnknown([
-                { check: "daemon.reachable", status: "red", evidence: "Daemon health probe failed (unable to determine state)", remediation: "Start the daemon with: rig daemon start",
-                    remediationSafe: false },
-            ]);
-        }
-        checks.push(daemonCheck);
-        checks.push(this.checkStateDirWritable());
-        const hostInfraCheck = this.checkHostInfraDeclaration();
-        checks.push(hostInfraCheck.check);
-        // Get rigs — probe error produces unknown, not not_restorable
-        let rigs;
-        try {
-            rigs = this.deps.listRigs();
-        }
-        catch (err) {
-            return this.buildUnknown([
-                ...checks,
-                { check: "probe.error", status: "red", evidence: `Failed to list rigs: ${err instanceof Error ? err.message : String(err)}`, remediation: "Check daemon status with: rig daemon status", remediationSafe: true },
-            ]);
-        }
-        if (opts.rig) {
-            rigs = rigs.filter((r) => r.name === opts.rig);
-            if (rigs.length === 0) {
-                return this.buildResult([
-                    ...checks,
-                    { check: `rig.${opts.rig}.exists`, status: "red", evidence: `Rig "${opts.rig}" not found`, remediation: "List rigs with: rig ps", remediationSafe: true },
-                ], [], hostInfraCheck.hostInfra);
-            }
-        }
-        // Per-rig checks
-        for (const rig of rigs) {
-            const rigChecks = [];
-            const snapshotCheck = this.checkSnapshot(rig);
-            checks.push(snapshotCheck);
-            rigChecks.push(snapshotCheck);
-            // Rig spec/root check
-            const specCheck = this.checkSpecPresent(rig);
-            checks.push(specCheck);
-            rigChecks.push(specCheck);
-            // Per-seat checks — probe error produces unknown, not not_restorable
-            let nodes;
-            try {
-                nodes = this.deps.getNodeInventory(rig.rigId);
-            }
-            catch (err) {
-                return this.buildUnknown([
-                    ...checks,
-                    { check: "probe.error", status: "red", evidence: `Failed to get node inventory for ${rig.name}: ${err instanceof Error ? err.message : String(err)}`, remediation: "Check daemon status" },
-                ]);
-            }
-            for (const node of nodes) {
-                const readinessCheck = this.checkSeatReadiness(node);
-                checks.push(readinessCheck);
-                rigChecks.push(readinessCheck);
-                // OPR.0.4.0.29: in default compact, ready (green) seats SKIP full per-seat
-                // detail assembly — the FR-3/AC-4 compute "look-above" win (transcript,
-                // resume, queue, hooks are NOT probed). But the FR-8 summary still needs
-                // the restore-readiness caveat signal: a running/ready seat whose startup
-                // context is missing/unrestorable is ready_with_caveats, not ready. So we
-                // compute ONLY checkStartupContext for every seat and feed it to the rig
-                // rollup (rigChecks); it is emitted to the top-level `checks` only when we
-                // are not skipping (full, --ready/includeReady, or a non-ready seat).
-                const omitReadyDetail = opts.compact && !opts.includeReady && readinessCheck.status === "green";
-                const startupContextCheck = this.checkStartupContext(node);
-                if ("unknownChecks" in startupContextCheck) {
-                    return this.buildUnknown([
-                        ...checks,
-                        ...startupContextCheck.unknownChecks,
-                    ]);
-                }
-                rigChecks.push(startupContextCheck.check);
-                if (omitReadyDetail) {
-                    // Not emitted (AC-4 token-safe), but counts toward the top-level
-                    // verdict/readiness/counts (rev1-r2 no-false-ready).
-                    deferredAssessmentChecks.push(startupContextCheck.check);
-                }
-                else {
-                    checks.push(startupContextCheck.check);
-                }
-                // AC-4 / FR-3: default compact does NOT assemble the rest of the
-                // ready-seat detail (the genuine compute skip, not a post-assembly hide).
-                if (omitReadyDetail) {
-                    continue;
-                }
-                const transcriptCheck = this.checkTranscript(rig.name, node);
-                checks.push(transcriptCheck);
-                rigChecks.push(transcriptCheck);
-                const resumeCheck = this.checkResumePath(node);
-                checks.push(resumeCheck);
-                rigChecks.push(resumeCheck);
-                if (!opts.noQueue) {
-                    const queueCheck = this.checkQueueFile(rig.name, node);
-                    checks.push(queueCheck);
-                    rigChecks.push(queueCheck);
-                }
-                if (!opts.noHooks) {
-                    const hooksCheck = this.checkHooks(node);
-                    checks.push(hooksCheck);
-                    rigChecks.push(hooksCheck);
-                }
-            }
-            rigRollupInputs.push({ rig, nodes, checks: rigChecks });
-        }
-        const rigRollups = rigRollupInputs.map((input) => this.buildRigRollup(input));
-        for (const rollup of rigRollups) {
-            const latestSnapshot = this.inspectLatestSnapshot(rollup.rigId);
-            recoveryRigInputs.push({
-                rigId: rollup.rigId,
-                rigName: rollup.rigName,
-                expectedNodes: rollup.expectedNodes,
-                runningReadyNodes: rollup.runningReadyNodes,
-                blockingChecks: rollup.blockingChecks,
-                latestSnapshot: latestSnapshot.snapshot,
-                snapshotLookupError: latestSnapshot.error,
-            });
-        }
-        return this.buildResult(checks, rigRollups, hostInfraCheck.hostInfra, recoveryRigInputs, deferredAssessmentChecks);
-    }
-    /** Returns CheckEntry on success/definite-down; null on probe exception
-     *  (uninspectable state → caller should produce verdict: unknown). */
-    checkDaemonReachable() {
-        try {
-            const probe = this.deps.probeDaemonHealth();
-            // Anchored positive match: only "Daemon running" at line start is green.
-            // Anything else (including "Daemon not running", empty output, or text
-            // that contains "running" non-anchored) is red. This preserves the
-            // reviewer fix from prototype 0e2af8d.
-            if (probe.healthy && DAEMON_HEALTHY_PATTERN.test(probe.evidence)) {
-                return { check: "daemon.reachable", status: "green", evidence: probe.evidence, remediation: "" };
-            }
-            return {
-                check: "daemon.reachable", status: "red",
-                evidence: probe.evidence || "Daemon health probe returned non-positive result",
-                remediation: "Start the daemon with: rig daemon start",
-                remediationSafe: false,
-            };
-        }
-        catch {
-            // Probe threw — return null to signal uninspectable state
-            return null;
-        }
-    }
-    checkStateDirWritable() {
-        const stateDir = getCompatibleOpenRigPath("");
-        try {
-            // Non-mutating permission probe — no file creation/deletion.
-            // accessSync throws if the directory is not writable.
-            accessSync(stateDir, constants.W_OK);
-            return { check: "host.state-dir-writable", status: "green", evidence: `${stateDir} is writable`, remediation: "" };
-        }
-        catch {
-            return {
-                check: "host.state-dir-writable", status: "red",
-                evidence: `${stateDir} is not writable`,
-                remediation: `Fix permissions: chmod u+w ${stateDir}`,
-                remediationSafe: false,
-            };
-        }
-    }
-    checkHostInfraDeclaration() {
-        const declarationPath = getCompatibleOpenRigPath("host-infra.json");
-        const check = "host.bootstrap-autostart.declaration";
-        try {
-            if (!this.deps.exists(declarationPath)) {
-                const evidence = `Host infra declaration missing at ${declarationPath}`;
-                return {
-                    check: {
-                        check,
-                        status: "yellow",
-                        evidence,
-                        remediation: `Create host infra declaration at ${declarationPath}`,
-                        remediationSafe: false,
-                    },
-                    hostInfra: {
-                        status: "not_declared",
-                        evidence,
-                    },
-                };
-            }
-            let raw;
-            try {
-                raw = this.deps.readFile(declarationPath);
-            }
-            catch (err) {
-                const evidence = `Host infra declaration inspection failed at ${declarationPath}: ${err instanceof Error ? err.message : String(err)}`;
-                return {
-                    check: {
-                        check,
-                        status: "yellow",
-                        evidence,
-                        remediation: `Inspect or fix host infra declaration at ${declarationPath}`,
-                        remediationSafe: false,
-                    },
-                    hostInfra: {
-                        status: "unknown",
-                        evidence,
-                    },
-                };
-            }
-            let parsed;
-            try {
-                parsed = JSON.parse(raw);
-            }
-            catch (err) {
-                const evidence = `Host infra declaration JSON parse failed at ${declarationPath}: ${err instanceof Error ? err.message : String(err)}`;
-                return {
-                    check: {
-                        check,
-                        status: "yellow",
-                        evidence,
-                        remediation: `Fix host infra declaration JSON at ${declarationPath}`,
-                        remediationSafe: false,
-                    },
-                    hostInfra: {
-                        status: "not_declared",
-                        evidence,
-                    },
-                };
-            }
-            const validation = this.validateHostInfraDeclaration(parsed);
-            if (validation.errors.length > 0) {
-                const evidence = `Invalid host infra declaration at ${declarationPath}: missing/invalid ${validation.errors.join(", ")}`;
-                return {
-                    check: {
-                        check,
-                        status: "yellow",
-                        evidence,
-                        remediation: `Fix host infra declaration shape at ${declarationPath}`,
-                        remediationSafe: false,
-                    },
-                    hostInfra: {
-                        status: "not_declared",
-                        evidence,
-                    },
-                };
-            }
-            if (validation.schemaVersion === 2 && validation.evidenceProblems.length > 0) {
-                const evidence = `Host infra declaration at ${declarationPath} declared with insufficient evidence paths; ${validation.evidenceProblems.join("; ")}`;
-                return {
-                    check: {
-                        check,
-                        status: "yellow",
-                        evidence,
-                        remediation: `Add or repair host infra evidence path(s): ${validation.evidenceProblems.join("; ")}`,
-                        remediationSafe: false,
-                    },
-                    hostInfra: {
-                        status: "declared",
-                        evidence,
-                    },
-                };
-            }
-            const evidence = validation.schemaVersion === 2
-                ? `Host infra declaration at ${declarationPath} declared, evidence paths present, not autostart verified; daemonBootstrap mechanism=${validation.mechanism}; requiredSupportingInfra=${validation.requiredSupportingInfra}; evidencePaths=${validation.evidencePaths.join(", ")}`
-                : `Host infra declaration at ${declarationPath} declared, not verified; daemonBootstrap mechanism=${validation.mechanism}; requiredSupportingInfra=${validation.requiredSupportingInfra}`;
-            return {
-                check: {
-                    check,
-                    status: "green",
-                    evidence,
-                    remediation: "",
-                },
-                hostInfra: {
-                    status: "declared",
-                    evidence,
-                },
-            };
-        }
-        catch (err) {
-            const evidence = `Host infra declaration inspection failed at ${declarationPath}: ${err instanceof Error ? err.message : String(err)}`;
-            return {
-                check: {
-                    check,
-                    status: "yellow",
-                    evidence,
-                    remediation: `Inspect or fix host infra declaration at ${declarationPath}`,
-                    remediationSafe: false,
-                },
-                hostInfra: {
-                    status: "unknown",
-                    evidence,
-                },
-            };
-        }
-    }
-    validateHostInfraDeclaration(value) {
-        const errors = [];
-        const evidencePaths = [];
-        const evidenceProblems = [];
-        const obj = isRecord(value) ? value : null;
-        if (obj === null) {
-            return {
-                errors: ["schemaVersion", "daemonBootstrap.mechanism", "supportingInfra"],
-                schemaVersion: null,
-                mechanism: "unknown",
-                requiredSupportingInfra: 0,
-                evidencePaths,
-                evidenceProblems,
-            };
-        }
-        const schemaVersion = obj["schemaVersion"] === 1 || obj["schemaVersion"] === 2
-            ? obj["schemaVersion"]
-            : null;
-        if (schemaVersion === null) {
-            errors.push("schemaVersion");
-        }
-        const daemonBootstrap = isRecord(obj["daemonBootstrap"]) ? obj["daemonBootstrap"] : null;
-        const mechanism = daemonBootstrap && typeof daemonBootstrap["mechanism"] === "string"
-            ? daemonBootstrap["mechanism"].trim()
-            : "";
-        if (!mechanism) {
-            errors.push("daemonBootstrap.mechanism");
-        }
-        if (daemonBootstrap?.["declared"] !== true) {
-            errors.push("daemonBootstrap.declared");
-        }
-        const supportingInfra = Array.isArray(obj["supportingInfra"]) ? obj["supportingInfra"] : null;
-        if (!supportingInfra) {
-            errors.push("supportingInfra");
-        }
-        const requiredSupportingInfra = supportingInfra
-            ? supportingInfra.filter((entry) => isRecord(entry) && entry["required"] === true).length
-            : 0;
-        if (schemaVersion === 2 && errors.length === 0) {
-            this.collectRequiredEvidencePaths("daemonBootstrap.evidencePaths", daemonBootstrap?.["evidencePaths"], evidencePaths, evidenceProblems);
-            supportingInfra?.forEach((entry, index) => {
-                if (!isRecord(entry) || entry["required"] !== true)
-                    return;
-                const id = typeof entry["id"] === "string" && entry["id"].trim()
-                    ? entry["id"].trim()
-                    : String(index);
-                this.collectRequiredEvidencePaths(`supportingInfra[${id}].evidencePaths`, entry["evidencePaths"], evidencePaths, evidenceProblems);
-            });
-        }
-        return {
-            errors,
-            schemaVersion,
-            mechanism: mechanism || "unknown",
-            requiredSupportingInfra,
-            evidencePaths,
-            evidenceProblems,
-        };
-    }
-    collectRequiredEvidencePaths(label, value, evidencePaths, evidenceProblems) {
-        if (!Array.isArray(value) || value.length === 0) {
-            evidenceProblems.push(`${label} missing or empty`);
-            return;
-        }
-        for (const candidate of value) {
-            if (typeof candidate !== "string" || candidate.trim() === "") {
-                evidenceProblems.push(`${label} contains invalid evidence path ${String(candidate)}`);
-                continue;
-            }
-            const resolved = this.resolveHostInfraEvidencePath(candidate.trim());
-            if ("error" in resolved) {
-                evidenceProblems.push(`${label} invalid evidence path ${candidate}: ${resolved.error}`);
-                continue;
-            }
-            const resolvedPath = resolved.path;
-            evidencePaths.push(resolvedPath);
-            if (!this.deps.exists(resolvedPath)) {
-                evidenceProblems.push(`${label} missing evidence path ${resolvedPath}`);
-            }
-        }
-    }
-    resolveHostInfraEvidencePath(rawPath) {
-        const openRigPrefix = "${OPENRIG_HOME}/";
-        const hasTraversal = rawPath.split(/[\\/]+/).includes("..");
-        if (rawPath.startsWith(openRigPrefix)) {
-            const relativePath = rawPath.slice(openRigPrefix.length);
-            if (!relativePath || isAbsolute(relativePath) || hasTraversal) {
-                return { error: "path traversal or empty OPENRIG_HOME-relative path rejected" };
-            }
-            const openRigHome = getCompatibleOpenRigPath("");
-            const resolved = join(openRigHome, relativePath);
-            const relativeToHome = relative(openRigHome, resolved);
-            if (relativeToHome.startsWith("..") || isAbsolute(relativeToHome)) {
-                return { error: "path traversal outside OPENRIG_HOME rejected" };
-            }
-            return { path: resolved };
-        }
-        if (!isAbsolute(rawPath)) {
-            return { error: "plain relative evidence paths are rejected; use absolute or ${OPENRIG_HOME}/..." };
-        }
-        if (hasTraversal) {
-            return { error: "path traversal evidence paths are rejected" };
-        }
-        return { path: rawPath };
-    }
-    checkSnapshot(rig) {
-        try {
-            const has = this.deps.hasSnapshot(rig.rigId);
-            if (has) {
-                return { check: `rig.${rig.name}.snapshot`, status: "green", evidence: "Snapshot available", remediation: "" };
-            }
-            return {
-                check: `rig.${rig.name}.snapshot`, status: "yellow",
-                evidence: "No snapshot found (first-boot or adopted rig)",
-                remediation: "Create a snapshot with: rig snapshot <rigId>",
-                remediationSafe: false,
-            };
-        }
-        catch {
-            return { check: `rig.${rig.name}.snapshot`, status: "yellow", evidence: "Could not check snapshots", remediation: "" };
-        }
-    }
-    checkTranscript(rigName, node) {
-        const session = node.canonicalSessionName ?? node.logicalId;
-        const check = `seat.${session}.transcript`;
-        // Terminal/infrastructure nodes are exempt from transcript checks
-        if (node.nodeKind === "infrastructure") {
-            return { check, status: "green", evidence: "Terminal/infrastructure node — transcript exempt", remediation: "" };
-        }
-        const transcriptPath = join(getCompatibleOpenRigPath("transcripts"), rigName, `${session}.log`);
-        if (this.deps.exists(transcriptPath)) {
-            return { check, status: "green", evidence: `Transcript exists at ${transcriptPath}`, remediation: "" };
-        }
-        return {
-            check, status: "yellow",
-            evidence: `Transcript missing: ${transcriptPath}`,
-            remediation: "Transcript will be created on next session launch",
-            remediationSafe: true,
-        };
-    }
-    checkSeatReadiness(node) {
-        const session = node.canonicalSessionName ?? node.logicalId;
-        const check = `seat.${session}.readiness`;
-        if (!node.canonicalSessionName) {
-            return {
-                check,
-                status: "red",
-                evidence: "Missing canonical session identity",
-                remediation: "Restore or relaunch the seat so it has a canonical session identity",
-                remediationSafe: false,
-            };
-        }
-        if (node.sessionStatus !== "running" || node.startupStatus !== "ready") {
-            const latestError = node.latestError ? ` latestError=${node.latestError}` : "";
-            return {
-                check,
-                status: "red",
-                evidence: `Seat not running/ready: sessionStatus=${node.sessionStatus ?? "unknown"} startupStatus=${node.startupStatus ?? "unknown"}${latestError}`,
-                remediation: "Restore or relaunch the seat, then rerun rig restore-check",
-                remediationSafe: false,
-            };
-        }
-        return {
-            check,
-            status: "green",
-            evidence: `Seat running and ready: ${node.canonicalSessionName}`,
-            remediation: "",
-        };
-    }
-    checkResumePath(node) {
-        const session = node.canonicalSessionName ?? node.logicalId;
-        if (node.tmuxAttachCommand) {
-            return { check: `seat.${session}.resume-path`, status: "green", evidence: node.tmuxAttachCommand, remediation: "" };
-        }
-        return {
-            check: `seat.${session}.resume-path`, status: "yellow",
-            evidence: "No attach command available",
-            remediation: "Session will be created fresh on restore",
-            remediationSafe: true,
-        };
-    }
-    checkStartupContext(node) {
-        const session = node.canonicalSessionName ?? node.logicalId;
-        const check = `seat.${session}.startup-context`;
-        const runningReady = node.sessionStatus === "running" && node.startupStatus === "ready";
-        if (!node.nodeId) {
-            return {
-                check: this.buildStartupContextAvailabilityCheck(check, runningReady, `Startup context cannot be inspected because node id is missing for ${session}`),
-            };
-        }
-        const probe = this.deps.getStartupContext(node.nodeId);
-        switch (probe.status) {
-            case "probe_error":
-                return {
-                    unknownChecks: [{
-                            check: "probe.error",
-                            status: "red",
-                            evidence: `Failed to inspect startup context for ${session}: ${probe.evidence}`,
-                            remediation: "Check daemon logs with: rig daemon logs",
-                            remediationSafe: true,
-                        }],
-                };
-            case "missing":
-            case "malformed":
-                return {
-                    check: this.buildStartupContextAvailabilityCheck(check, runningReady, probe.evidence),
-                };
-            case "ok":
-                break;
-        }
-        const startupContext = probe;
-        const missingRequired = startupContext.resolvedStartupFiles.filter((file) => file.required && !this.deps.exists(file.absolutePath));
-        const missingOptional = startupContext.resolvedStartupFiles.filter((file) => !file.required && !this.deps.exists(file.absolutePath));
-        const missingProjectionEntries = startupContext.projectionEntries.filter((entry) => !this.deps.exists(entry.absolutePath));
-        if (missingRequired.length === 0 && missingOptional.length === 0 && missingProjectionEntries.length === 0) {
-            const detailParts = [];
-            if (startupContext.resolvedStartupFiles.length > 0) {
-                detailParts.push(`resolved startup files present: ${startupContext.resolvedStartupFiles.map((file) => file.absolutePath).join(", ")}`);
-            }
-            if (startupContext.projectionEntries.length > 0) {
-                detailParts.push(`projection source paths present: ${startupContext.projectionEntries.map((entry) => entry.absolutePath).join(", ")}`);
-            }
-            if (detailParts.length === 0) {
-                detailParts.push("no persisted startup files or projection source paths declared");
-            }
-            return {
-                check: {
-                    check,
-                    status: "green",
-                    evidence: `Startup context present for node ${node.nodeId}; ${detailParts.join("; ")}`,
-                    remediation: "",
-                },
-            };
-        }
-        const evidenceParts = [];
-        if (missingRequired.length > 0) {
-            evidenceParts.push(`missing required startup file(s): ${missingRequired.map((file) => file.absolutePath).join(", ")}`);
-        }
-        if (missingOptional.length > 0) {
-            evidenceParts.push(`missing optional startup file(s): ${missingOptional.map((file) => file.absolutePath).join(", ")}`);
-        }
-        if (missingProjectionEntries.length > 0) {
-            evidenceParts.push(`missing projection source path(s): ${missingProjectionEntries.map((entry) => entry.absolutePath).join(", ")}`);
-        }
-        const status = missingRequired.length > 0 && !runningReady ? "red" : "yellow";
-        return {
-            check: {
-                check,
-                status,
-                evidence: `Startup context present for node ${node.nodeId}, but replay inputs are incomplete: ${evidenceParts.join("; ")}`,
-                remediation: `Restore or recreate the missing startup inputs from the rig or agent spec before trusting replay: ${[
-                    ...missingRequired.map((file) => file.absolutePath),
-                    ...missingOptional.map((file) => file.absolutePath),
-                    ...missingProjectionEntries.map((entry) => entry.absolutePath),
-                ].join(", ")}`,
-                remediationSafe: false,
-            },
-        };
-    }
-    buildStartupContextAvailabilityCheck(check, runningReady, evidence) {
-        return {
-            check,
-            status: runningReady ? "yellow" : "red",
-            evidence,
-            remediation: "Recreate the seat startup context from the rig or agent spec before trusting replay inputs",
-            remediationSafe: false,
-        };
-    }
-    checkQueueFile(rigName, node) {
-        const session = node.canonicalSessionName ?? node.logicalId;
-        const check = `seat.${session}.queue-file`;
-        // Derive queue file path from pod/member
-        const podName = node.podNamespace ?? (node.logicalId.includes(".") ? node.logicalId.split(".")[0] : null);
-        const memberName = node.logicalId.includes(".") ? node.logicalId.split(".").slice(1).join(".") : node.logicalId;
-        if (!podName) {
-            return { check, status: "yellow", evidence: "Cannot derive queue path (no pod namespace)", remediation: "" };
-        }
-        // OPR.0.3.2.14 — subpath scrubbed (internal-team layout → generic placeholder).
-        const substrateRoot = this.deps.substrateRoot ?? join(process.env["HOME"] ?? "~", ".openrig", "shared-docs");
-        const queuePath = join(substrateRoot, "rigs", rigName, "state", podName, `${memberName}.queue.md`);
-        if (this.deps.exists(queuePath)) {
-            return { check, status: "green", evidence: `Queue file exists at ${queuePath}`, remediation: "" };
-        }
-        return {
-            check, status: "yellow",
-            evidence: `Queue file missing: ${queuePath}`,
-            remediation: "Create the missing durable queue file before relying on restored queue continuity",
-            remediationSafe: false,
-        };
-    }
-    checkHooks(node) {
-        const session = node.canonicalSessionName ?? node.logicalId;
-        if (node.nodeKind !== "agent") {
-            return {
-                check: `seat.${session}.hooks`, status: "green",
-                evidence: "Infrastructure/terminal node; Claude Code hook inspection not applicable",
-                remediation: "",
-            };
-        }
-        if (node.runtime !== "claude-code") {
-            return {
-                check: `seat.${session}.hooks`, status: "green",
-                evidence: `${node.runtime ?? "non-Claude"} seat; Claude Code hook inspection not applicable`,
-                remediation: "",
-            };
-        }
-        const candidates = this.getClaudeSettingsCandidates(node);
-        const searchedPaths = candidates.map((candidate) => candidate.path);
-        const cwdUnavailable = !node.cwd;
-        const inspections = [];
-        const malformed = [];
-        for (const candidate of candidates) {
-            if (!this.deps.exists(candidate.path))
-                continue;
-            let parsed;
-            try {
-                parsed = JSON.parse(this.deps.readFile(candidate.path));
-            }
-            catch (err) {
-                malformed.push(`${candidate.path}: ${err instanceof Error ? err.message : String(err)}`);
-                continue;
-            }
-            inspections.push({
-                path: candidate.path,
-                hasSessionStartCompact: this.hasClaudeCommandHook(parsed, "SessionStart", CLAUDE_SESSION_START_COMPACT_COMMAND, "compact"),
-                hasUserPromptSubmit: this.hasClaudeCommandHook(parsed, "UserPromptSubmit", CLAUDE_USER_PROMPT_SUBMIT_COMMAND),
-            });
-        }
-        if (malformed.length > 0) {
-            return {
-                check: `seat.${session}.hooks`, status: "yellow",
-                evidence: `Malformed applicable Claude settings file(s): ${malformed.join("; ")}. Claude hook configuration could not be trusted until the malformed applicable settings file is fixed. Searched settings paths: ${searchedPaths.join(", ")}`,
-                remediation: `Fix Claude settings JSON before trusting hook readiness: ${malformed.map((entry) => entry.split(":")[0]).join(", ")}`,
-                remediationSafe: false,
-            };
-        }
-        const sessionStartPaths = inspections
-            .filter((inspection) => inspection.hasSessionStartCompact)
-            .map((inspection) => inspection.path);
-        const userPromptSubmitPaths = inspections
-            .filter((inspection) => inspection.hasUserPromptSubmit)
-            .map((inspection) => inspection.path);
-        const hasSessionStart = sessionStartPaths.length > 0;
-        const hasUserPromptSubmit = userPromptSubmitPaths.length > 0;
-        if (hasSessionStart && hasUserPromptSubmit) {
-            return {
-                check: `seat.${session}.hooks`, status: "green",
-                evidence: `Claude Code hook configuration present, not hook-execution verified; SessionStart matcher compact command found in ${sessionStartPaths.join(", ")}; UserPromptSubmit command found in ${userPromptSubmitPaths.join(", ")}. Searched settings paths: ${searchedPaths.join(", ")}`,
-                remediation: "",
-            };
-        }
-        const missing = [];
-        if (!hasSessionStart) {
-            missing.push(`SessionStart matcher compact command ${CLAUDE_SESSION_START_COMPACT_COMMAND}`);
-        }
-        if (!hasUserPromptSubmit) {
-            missing.push(`UserPromptSubmit command ${CLAUDE_USER_PROMPT_SUBMIT_COMMAND}`);
-        }
-        const inspected = inspections.length > 0
-            ? `Existing settings inspected: ${inspections.map((inspection) => inspection.path).join(", ")}.`
-            : "No existing Claude settings files were found.";
-        const cwdEvidence = cwdUnavailable
-            ? " project settings were not inspected because cwd is unavailable."
-            : "";
-        return {
-            check: `seat.${session}.hooks`, status: "yellow",
-            evidence: `Claude Code hook configuration missing required entries: ${missing.join("; ")}. Searched settings paths: ${searchedPaths.join(", ")}. ${inspected}${cwdEvidence}`,
-            remediation: `Merge required Claude hook entries from ${CLAUDE_HOOK_FRAGMENT_PATH} into host-global or project Claude settings`,
-            remediationSafe: false,
-        };
-    }
-    getClaudeSettingsCandidates(node) {
-        const home = process.env["HOME"] ?? "~";
-        const candidates = [{
-                path: join(home, ".claude", "settings.json"),
-                scope: "host-global",
-            }];
-        if (node.cwd) {
-            candidates.push({
-                path: join(node.cwd, ".claude", "settings.json"),
-                scope: "project",
-            });
-            candidates.push({
-                path: join(node.cwd, ".claude", "settings.local.json"),
-                scope: "project-local",
-            });
-        }
-        return candidates;
-    }
-    hasClaudeCommandHook(settings, eventName, requiredCommand, requiredMatcher) {
-        if (!isRecord(settings) || !isRecord(settings["hooks"]))
-            return false;
-        const eventEntries = settings["hooks"][eventName];
-        if (!Array.isArray(eventEntries))
-            return false;
-        return eventEntries.some((entry) => {
-            if (!isRecord(entry))
-                return false;
-            if (requiredMatcher !== undefined && entry["matcher"] !== requiredMatcher)
-                return false;
-            const hooks = entry["hooks"];
-            if (!Array.isArray(hooks))
-                return false;
-            return hooks.some((hook) => isRecord(hook) && hook["command"] === requiredCommand);
-        });
-    }
-    checkSpecPresent(rig) {
-        // OPR.0.3.2.14 — subpath scrubbed (internal-team layout → generic placeholder).
-        const substrateRoot = this.deps.substrateRoot ?? join(process.env["HOME"] ?? "~", ".openrig", "shared-docs");
-        const rigRoot = join(substrateRoot, "rigs", rig.name);
-        const rigYaml = join(rigRoot, "rig.yaml");
-        if (!this.deps.exists(rigRoot)) {
-            return {
-                check: `rig.${rig.name}.spec-present`, status: "red",
-                evidence: `Rig root missing: ${rigRoot}`,
-                remediation: `Create the rig root directory at ${rigRoot} with a rig.yaml spec`,
-                remediationSafe: false,
-            };
-        }
-        if (!this.deps.exists(rigYaml)) {
-            return {
-                check: `rig.${rig.name}.spec-present`, status: "yellow",
-                evidence: `Rig root exists but rig.yaml missing: ${rigYaml}`,
-                remediation: `Add a rig.yaml spec to ${rigRoot}`,
-                remediationSafe: false,
-            };
-        }
-        return { check: `rig.${rig.name}.spec-present`, status: "green", evidence: `Spec present at ${rigYaml}`, remediation: "" };
-    }
-    inspectLatestSnapshot(rigId) {
-        if (!this.deps.getLatestSnapshot) {
-            return { snapshot: null };
-        }
-        try {
-            const snapshot = this.deps.getLatestSnapshot(rigId);
-            if (!snapshot)
-                return { snapshot: null };
-            return { snapshot: { id: snapshot.id, kind: snapshot.kind } };
-        }
-        catch (err) {
-            return {
-                snapshot: null,
-                error: `Latest snapshot lookup failed: ${err instanceof Error ? err.message : String(err)}`,
-            };
-        }
-    }
-    buildResult(checks, rigs, hostInfra, recoveryInputs = [], assessmentExtra = []) {
-        // counts + verdict assess the FULL signal (emitted checks + any computed-but-
-        // omitted ready-seat caveats) so default compact never reports a false ready;
-        // repairPacket/recovery still operate on the EMITTED checks (token-safe).
-        const assessed = assessmentExtra.length > 0 ? [...checks, ...assessmentExtra] : checks;
-        const red = assessed.filter((c) => c.status === "red").length;
-        const yellow = assessed.filter((c) => c.status === "yellow").length;
-        const green = assessed.filter((c) => c.status === "green").length;
-        let verdict;
-        if (red > 0) {
-            verdict = "not_restorable";
-        }
-        else if (yellow > 0) {
-            verdict = "restorable_with_caveats";
-        }
-        else {
-            verdict = "restorable";
-        }
-        const repairPacket = this.buildRepairPacket(checks, verdict);
-        const recovery = this.buildRecovery(verdict, checks, recoveryInputs);
-        return this.withAssertion({ verdict, counts: { red, yellow, green }, checks, repairPacket, recovery }, rigs, hostInfra);
-    }
-    /** Probe error produces verdict=unknown (not not_restorable) so operators
-     *  can distinguish "definitely broken" from "checker couldn't inspect." */
-    buildUnknown(checks) {
-        const red = checks.filter((c) => c.status === "red").length;
-        const yellow = checks.filter((c) => c.status === "yellow").length;
-        const green = checks.filter((c) => c.status === "green").length;
-        const repairPacket = this.buildRepairPacket(checks, "unknown");
-        const evidence = checks.find((check) => check.status === "red")?.evidence
-            ?? "Restore-check state could not be inspected";
-        return this.withAssertion({
-            verdict: "unknown",
-            counts: { red, yellow, green },
-            checks,
-            repairPacket,
-            recovery: {
-                status: "unknown",
-                summary: "Recovery status could not be inspected because restore-check state is unknown.",
-                actions: [],
-                blocked: [],
-                unknown: [{ scope: "host", reason: evidence }],
-            },
-        }, []);
-    }
-    withAssertion(result, rigs, hostInfra) {
-        const blockingRigCount = rigs.filter((rig) => rig.blockedNodes > 0 || rig.blockingChecks.length > 0).length;
-        const caveatRigCount = rigs.filter((rig) => rig.blockedNodes === 0 && rig.blockingChecks.length === 0 && (rig.caveatNodes > 0 || rig.caveatChecks.length > 0)).length;
-        const unknownRigCount = rigs.filter((rig) => rig.status === "unknown").length;
-        let readinessStatus;
-        let reason;
-        if (result.verdict === "unknown") {
-            readinessStatus = "unknown";
-            reason = "unknown_probe_state";
-        }
-        else if (result.counts.red > 0) {
-            readinessStatus = "not_ready";
-            reason = "blockers_present";
-        }
-        else if (result.counts.yellow > 0) {
-            readinessStatus = "ready_with_caveats";
-            reason = "caveats_present";
-        }
-        else {
-            readinessStatus = "ready";
-            reason = hostInfra?.status === "declared"
-                ? "all_observable_checks_green_host_infra_declared_not_verified"
-                : "all_observable_checks_green";
-        }
-        // Continuity is always not_proven in v1 — no code path can produce "proven"
-        const continuity = {
-            status: "not_proven",
-            evidence: "Strict same-session/provider-context resume is not verified by restore-check v1. Observable readiness is verified.",
-            provenCapabilities: this.computeProvenCapabilities(result.checks),
-            unprovenCapabilities: [
-                "provider_session_resume",
-                "context_window_preservation",
-                "interrupted_work_functional_resume",
-            ],
-        };
-        return {
-            ...result,
-            readiness: {
-                status: readinessStatus,
-                reason,
-                blockingRigCount,
-                caveatRigCount,
-                unknownRigCount,
-            },
-            continuity,
-            rigs,
-            // FR-8: fleet-wide ready-confidence breakdown = sum of the per-rig class counts.
-            classCounts: rigs.reduce((acc, r) => ({
-                ready: acc.ready + r.classCounts.ready,
-                ready_with_caveats: acc.ready_with_caveats + r.classCounts.ready_with_caveats,
-                not_ready: acc.not_ready + r.classCounts.not_ready,
-                attention_required: acc.attention_required + r.classCounts.attention_required,
-                unknown: acc.unknown + r.classCounts.unknown,
-            }), { ready: 0, ready_with_caveats: 0, not_ready: 0, attention_required: 0, unknown: 0 }),
-            hostInfra: result.verdict === "unknown"
-                ? {
-                    status: "unknown",
-                    evidence: "Host bootstrap/autostart source could not be inspected because restore-check state is unknown",
-                }
-                : (hostInfra ?? {
-                    status: "not_inspected",
-                    evidence: "No host bootstrap/autostart source inspected by v0; readiness only covers observable daemon, rig, and seat checks",
-                }),
-            recovery: result.recovery,
-        };
-    }
-    /** Derive proven capabilities from green checks for the continuity block. */
-    computeProvenCapabilities(checks) {
-        const proven = [];
-        if (checks.some((c) => c.check === "daemon.reachable" && c.status === "green"))
-            proven.push("daemon_reachable");
-        if (checks.some((c) => c.check.endsWith(".transcript") && c.status === "green"))
-            proven.push("transcript_readable");
-        if (checks.some((c) => c.check.endsWith(".spec-present") && c.status === "green"))
-            proven.push("spec_present");
-        if (checks.some((c) => c.check.endsWith(".queue-file") && c.status === "green"))
-            proven.push("queue_file_present");
-        if (checks.some((c) => c.check.endsWith(".resume-path") && c.status === "green"))
-            proven.push("seat_identity_resolvable");
-        return proven;
-    }
-    buildRecovery(verdict, checks, recoveryInputs) {
-        if (verdict === "unknown") {
-            const evidence = checks.find((check) => check.status === "red")?.evidence
-                ?? "Restore-check state could not be inspected";
-            return {
-                status: "unknown",
-                summary: "Recovery status could not be inspected because restore-check state is unknown.",
-                actions: [],
-                blocked: [],
-                unknown: [{ scope: "host", reason: evidence }],
-            };
-        }
-        if (recoveryInputs.length === 0) {
-            const firstRed = checks.find((check) => check.status === "red");
-            if (firstRed) {
-                return {
-                    status: "blocked",
-                    summary: "No exact recovery action is known in v0 because restore-check found blockers outside runnable rig inventory.",
-                    actions: [],
-                    blocked: [{ scope: "host", reason: firstRed.evidence }],
-                    unknown: [],
-                };
-            }
-            return {
-                status: "not_needed",
-                summary: "All observable rigs are already running/ready; no recovery action needed.",
-                actions: [],
-                blocked: [],
-                unknown: [],
-            };
-        }
-        const allReady = recoveryInputs.every((input) => input.runningReadyNodes === input.expectedNodes);
-        if (allReady) {
-            return {
-                status: "not_needed",
-                summary: "All observable rigs are already running/ready; no recovery action needed.",
-                actions: [],
-                blocked: [],
-                unknown: [],
-            };
-        }
-        const actions = [];
-        const blocked = [];
-        const unknown = [];
-        for (const input of recoveryInputs) {
-            if (input.runningReadyNodes === input.expectedNodes)
-                continue;
-            if (input.snapshotLookupError) {
-                unknown.push({
-                    scope: "rig",
-                    rigId: input.rigId,
-                    rigName: input.rigName,
-                    reason: input.snapshotLookupError,
-                });
-                continue;
-            }
-            const restoreInputBlockers = input.blockingChecks.filter((check) => this.classifyRecoveryBlockingCheck(check) === "restore_input");
-            if (restoreInputBlockers.length > 0) {
-                blocked.push({
-                    scope: "rig",
-                    rigId: input.rigId,
-                    rigName: input.rigName,
-                    reason: `No exact recovery action is known in v0 because restore-input blockers remain: ${restoreInputBlockers.map((check) => check.evidence).join("; ")}`,
-                });
-                continue;
-            }
-            if (input.latestSnapshot) {
-                actions.push({
-                    scope: "rig",
-                    rigId: input.rigId,
-                    rigName: input.rigName,
-                    action: "restore_from_latest_snapshot",
-                    command: `rig up --existing ${shellQuote(input.rigName)}`,
-                    reason: "Rig has a latest snapshot and one or more seats are not running/ready.",
-                    safe: false,
-                    blocking: true,
-                });
-                continue;
-            }
-            actions.push({
-                scope: "rig",
-                rigId: input.rigId,
-                rigName: input.rigName,
-                action: "restore_from_latest_snapshot",
-                command: `rig up --existing ${shellQuote(input.rigName)}`,
-                reason: "Rig has persisted current DB state but no latest snapshot; rig up will capture an auto-rehydrate snapshot and restore.",
-                safe: false,
-                blocking: true,
-            });
-        }
-        const status = unknown.length > 0
-            ? "unknown"
-            : actions.length > 0
-                ? "actionable"
-                : blocked.length > 0
-                    ? "blocked"
-                    : "not_needed";
-        return {
-            status,
-            summary: this.buildRecoverySummary(status, actions, blocked, unknown),
-            actions,
-            blocked,
-            unknown,
-        };
-    }
-    classifyRecoveryBlockingCheck(check) {
-        if (check.status !== "red")
-            return "other";
-        if (check.check.startsWith("seat.") && check.check.endsWith(".readiness")) {
-            if (check.evidence.includes("Missing canonical session identity")) {
-                return "restore_input";
-            }
-            return "runtime";
-        }
-        if (check.check.startsWith("seat.") && check.check.endsWith(".startup-context")) {
-            return "restore_input";
-        }
-        return "other";
-    }
-    buildRecoverySummary(status, actions, blocked, unknown) {
-        if (status === "not_needed") {
-            return "All observable rigs are already running/ready; no recovery action needed.";
-        }
-        if (status === "unknown") {
-            return `Recovery status could not be inspected completely; ${actions.length} actionable, ${blocked.length} blocked, ${unknown.length} unknown.`;
-        }
-        if (status === "actionable") {
-            return `${actions.length} ${pluralize(actions.length, "rig")} can be recovered by known OpenRig command; ${blocked.length} ${pluralize(blocked.length, "rig")} blocked; ${unknown.length} unknown.`;
-        }
-        return `${blocked.length} ${pluralize(blocked.length, "rig")} blocked; ${actions.length} actionable; ${unknown.length} unknown.`;
-    }
-    buildRigRollup(input) {
-        const blockingChecks = input.checks.filter((check) => check.status === "red");
-        const caveatChecks = input.checks.filter((check) => check.status === "yellow");
-        const expectedNodes = input.nodes.length;
-        let runningReadyNodes = 0;
-        let blockedNodes = 0;
-        let caveatNodes = 0;
-        // FR-8: per-seat class breakdown (each seat counts toward exactly one class).
-        const classCounts = { ready: 0, ready_with_caveats: 0, not_ready: 0, attention_required: 0, unknown: 0 };
-        // unknown/no-snapshot derives from the REAL snapshot primitive: the
-        // rig-level `rig.<name>.snapshot` yellow check (no snapshot found / could
-        // not check). A rig with no snapshot cannot be restored, so its seats'
-        // restore-readiness is unknown (not "ready"), per FR-8/AC-7.
-        const rigNoSnapshot = input.checks.some((check) => check.check === `rig.${input.rig.name}.snapshot` && check.status === "yellow");
-        for (const node of input.nodes) {
-            const session = node.canonicalSessionName ?? node.logicalId;
-            const nodeChecks = input.checks.filter((check) => check.check.startsWith(`seat.${session}.`));
-            const hasBlocking = nodeChecks.some((check) => check.status === "red");
-            const hasCaveat = nodeChecks.some((check) => check.status === "yellow");
-            const runningReady = Boolean(node.canonicalSessionName) && node.sessionStatus === "running" && node.startupStatus === "ready";
-            if (runningReady)
-                runningReadyNodes += 1;
-            if (hasBlocking)
-                blockedNodes += 1;
-            else if (hasCaveat)
-                caveatNodes += 1;
-            // FR-8 class derivation (precedence; each from a real primitive).
-            // attention/not_ready WIN FIRST (a failed/attention seat is surfaced even
-            // in a no-snapshot rig); no-snapshot then overrides ONLY ready/caveat (a
-            // clean seat in an unrestorable rig is unknown); a real yellow caveat then
-            // wins over plain ready so the class count matches the per-rig status +
-            // caveatNodes (a running/ready seat with a yellow check is NOT plain ready):
-            //   attention_required ← node.startupStatus
-            //   not_ready          ← a red seat check (failed/down)
-            //   unknown            ← no-snapshot (rig can't restore)
-            //   ready_with_caveats ← a yellow seat check
-            //   ready              ← running/ready, no caveat
-            //   unknown            ← indeterminate remainder
-            if (node.startupStatus === "attention_required")
-                classCounts.attention_required += 1;
-            else if (hasBlocking)
-                classCounts.not_ready += 1;
-            else if (rigNoSnapshot)
-                classCounts.unknown += 1;
-            else if (hasCaveat)
-                classCounts.ready_with_caveats += 1;
-            else if (runningReady)
-                classCounts.ready += 1;
-            else
-                classCounts.unknown += 1;
-        }
-        let verdict;
-        let status;
-        if (blockingChecks.length > 0) {
-            verdict = "not_restorable";
-            status = "not_ready";
-        }
-        else if (caveatChecks.length > 0) {
-            verdict = "restorable_with_caveats";
-            status = "ready_with_caveats";
-        }
-        else {
-            verdict = "restorable";
-            status = "ready";
-        }
-        return {
-            rigId: input.rig.rigId,
-            rigName: input.rig.name,
-            status,
-            verdict,
-            expectedNodes,
-            runningReadyNodes,
-            blockedNodes,
-            caveatNodes,
-            classCounts,
-            blockingChecks,
-            caveatChecks,
-        };
-    }
-    /** Generate ordered repair steps from non-green checks with remediation.
-     *  null when all green (restorable — nothing to repair).
-     *  Blockers (red) first in check order, then caveats (yellow). */
-    buildRepairPacket(checks, verdict) {
-        if (verdict === "restorable")
-            return null;
-        // Blockers first, then caveats, preserving original check order within each group
-        const blockers = checks.filter((c) => c.status === "red" && c.remediation);
-        const caveats = checks.filter((c) => c.status === "yellow" && c.remediation);
-        const ordered = [...blockers, ...caveats];
-        if (ordered.length === 0)
-            return null;
-        let step = 0;
-        return ordered.map((c) => ({
-            step: ++step,
-            command: c.remediation,
-            rationale: c.evidence,
-            safe: c.remediationSafe === true, // conservative: default false unless explicitly marked safe
-            blocking: c.status === "red",
-        }));
-    }
-}
-function shellQuote(value) {
-    if (/^[A-Za-z0-9._@:-]+$/.test(value))
-        return value;
-    return `'${value.replace(/'/g, `'\\''`)}'`;
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function pluralize(count, noun) {
-    return count === 1 ? noun : `${noun}s`;
-}
-//# sourceMappingURL=restore-check-service.js.map