@openrig/cli 0.5.16 → 0.6.0

package/node_modules/@openrig/daemon/dist/instance-initialization-surface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"instance-initialization-surface.js","sourceRoot":"","sources":["../src/instance-initialization-surface.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,qCAAqC,GAGtC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,GAKvB,MAAM,kDAAkD,CAAC"}

package/node_modules/@openrig/daemon/dist/lib/pane-envelope.d.ts

@@ -1,50 +0,0 @@
-/** Send/broadcast header envelope metadata (ruling 03c35295). The ENVELOPE carries the machine truth;
- *  the rendered header is a PROJECTION of it. Both twins (this + cli wrapSendBody) share this shape. */
-export interface EnvelopeScope {
-    /** dm = a single recipient; multi = a named recipient set; rig-broadcast/topology = scaled broadcasts. */
-    kind: "dm" | "multi" | "rig-broadcast" | "topology";
-    /** multi: the full recipient list (WHO got it). */
-    recipients?: string[];
-    /** rig-broadcast: the rig + seat count (the anti-storm scale). */
-    rig?: string;
-    seats?: number;
-}
-export interface EnvelopeMeta {
-    /** ISO-8601, stamped ONCE at the transport layer at send-time. Render READS it; never re-derives
-     *  (the 51-02 wall-clock-in-projection forbids computing it at read). */
-    stampISO?: string;
-    scope?: EnvelopeScope;
-    /** GHOST-STAGE (g): the SENDER's atom-B occupant generation-uuid, resolved ONCE at the transport
-     *  layer at send-time (same seam as stampISO). Lets a recipient attribute a delayed lifecycle
-     *  message to the composing generation rather than inheriting it as the current occupant's.
-     *  ABSENT ⇒ UNKNOWN (cross-host --from relay whose sender isn't local, or pre-tenure daemon) —
-     *  the render omits it, never forges a generation. Render is a PROJECTION of this machine truth. */
-    genUuid?: string;
-}
-/** The To-line projection + anti-storm scale (header-alone distinguishability, ruling pin 2). */
-export declare function renderToLine(recipient: string, scope?: EnvelopeScope): string;
-/** Short glanceable stamp MM-DD HH:MMZ (12 chars) from the transport ISO (ruling pin 3). */
-export declare function renderShortStamp(stampISO: string): string;
-/** GHOST-STAGE (h): a delivery is FLAGGED as delayed only once its compose→write gap crosses this
- *  threshold. 10s is clearly beyond idle-wait jitter — unambiguously "this waited" — so sub-threshold
- *  gaps render nothing (measured-telemetry: a flag, not sub-second noise). ONE named constant. */
-export declare const DELIVERED_LATENCY_FLAG_MS = 10000;
-/** GHOST-STAGE (h): append the relative delivered-latency segment to the Sent: line at the WRITE
- *  moment (daemon-side only — the CLI composes, it never delivers to a pane, so there is no compose
- *  twin for this). `deltaMs` is (write-time − the Sent: stampISO): how long the message waited since
- *  it was composed. Only a genuinely delayed delivery (deltaMs ≥ DELIVERED_LATENCY_FLAG_MS) renders a
- *  segment; whole seconds, in the g gen-suffix style (' · delivered +12s'). sent-ISO + this delta
- *  gives absolute delivered time for free. CONTAINMENT (the ' · delivered ' twin of g's ' · gen '):
- *  the segment is appended ONLY to the Sent: line WITHIN the header block (before the first "\n---\n"),
- *  so a body line that itself contains ' · delivered …' can never be mistaken for the real stamp. No
- *  Sent: line (unenveloped / meta-less send) ⇒ returned unchanged. */
-export declare function appendDeliveredSegment(envelope: string, deltaMs: number): string;
-/** Wrap a tmux-pane body with the canonical From/To envelope. The
- *  recipient pane sees both the sender's identity and a reply hint.
- *  Cross-host nudges should NOT double-wrap: the remote rig wraps
- *  when it processes the same command (matches `wrapSendBody`'s
- *  cross-host carve-out).
- *  `meta` (ruling 03c35295) projects the recipient scale + a transport-stamped timestamp; ABSENT ⇒
- *  today's exact DM envelope (backward-compat until every sender surface threads it). */
-export declare function wrapPaneEnvelope(sender: string | undefined, recipient: string, body: string, meta?: EnvelopeMeta): string;
-//# sourceMappingURL=pane-envelope.d.ts.map

package/node_modules/@openrig/daemon/dist/lib/pane-envelope.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pane-envelope.d.ts","sourceRoot":"","sources":["../../src/lib/pane-envelope.ts"],"names":[],"mappings":"AAuBA;wGACwG;AACxG,MAAM,WAAW,aAAa;IAC5B,0GAA0G;IAC1G,IAAI,EAAE,IAAI,GAAG,OAAO,GAAG,eAAe,GAAG,UAAU,CAAC;IACpD,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,YAAY;IAC3B;6EACyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;;wGAIoG;IACpG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,iGAAiG;AACjG,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,MAAM,CAK7E;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;kGAEkG;AAClG,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD;;;;;;;;sEAQsE;AACtE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAWhF;AAED;;;;;;yFAMyF;AACzF,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,YAAY,GAClB,MAAM,CAqBR"}

package/node_modules/@openrig/daemon/dist/lib/pane-envelope.js

@@ -1,92 +0,0 @@
-// V0.3.1 slice 23 founder-walk-queue-handoff-envelope.
-//
-// Daemon-side renderer for the email-style envelope the recipient's
-// tmux pane shows when a peer sends them a message (`rig send`) or
-// when a queue handoff/create nudges them. Wrapping the body with
-// From / To / --- / body / --- / ↩ Reply gives both a sender
-// identity and a copy-pasteable reply hint.
-//
-// PARITY CONTRACT with CLI:
-// `packages/cli/src/commands/send.ts :: wrapSendBody` must produce
-// BYTE-IDENTICAL output for the same inputs. The two implementations
-// live in separate packages because cli + daemon don't cross-import
-// today; the contract is enforced via:
-//   1. Identical function body (visual diff)
-//   2. `packages/daemon/test/pane-envelope.test.ts` mirroring the
-//      assertions in `packages/cli/test/send-header.test.ts`
-//   3. Live integration parity (HG-5): a queue handoff nudge and a
-//      rig send to the same destination render byte-identical
-//      output except for the body content
-// If you update this function, update wrapSendBody in lockstep.
-const SENDER_FALLBACK = "<unknown sender>";
-/** The To-line projection + anti-storm scale (header-alone distinguishability, ruling pin 2). */
-export function renderToLine(recipient, scope) {
-    if (!scope || scope.kind === "dm")
-        return `To: ${recipient}`;
-    if (scope.kind === "multi")
-        return `To: ${(scope.recipients ?? [recipient]).join(", ")}`;
-    if (scope.kind === "rig-broadcast")
-        return `To: broadcast to ${scope.rig} (${scope.seats} seats)`;
-    return "To: broadcast to topology";
-}
-/** Short glanceable stamp MM-DD HH:MMZ (12 chars) from the transport ISO (ruling pin 3). */
-export function renderShortStamp(stampISO) {
-    return `${stampISO.slice(5, 7)}-${stampISO.slice(8, 10)} ${stampISO.slice(11, 16)}Z`;
-}
-/** GHOST-STAGE (h): a delivery is FLAGGED as delayed only once its compose→write gap crosses this
- *  threshold. 10s is clearly beyond idle-wait jitter — unambiguously "this waited" — so sub-threshold
- *  gaps render nothing (measured-telemetry: a flag, not sub-second noise). ONE named constant. */
-export const DELIVERED_LATENCY_FLAG_MS = 10_000;
-/** GHOST-STAGE (h): append the relative delivered-latency segment to the Sent: line at the WRITE
- *  moment (daemon-side only — the CLI composes, it never delivers to a pane, so there is no compose
- *  twin for this). `deltaMs` is (write-time − the Sent: stampISO): how long the message waited since
- *  it was composed. Only a genuinely delayed delivery (deltaMs ≥ DELIVERED_LATENCY_FLAG_MS) renders a
- *  segment; whole seconds, in the g gen-suffix style (' · delivered +12s'). sent-ISO + this delta
- *  gives absolute delivered time for free. CONTAINMENT (the ' · delivered ' twin of g's ' · gen '):
- *  the segment is appended ONLY to the Sent: line WITHIN the header block (before the first "\n---\n"),
- *  so a body line that itself contains ' · delivered …' can never be mistaken for the real stamp. No
- *  Sent: line (unenveloped / meta-less send) ⇒ returned unchanged. */
-export function appendDeliveredSegment(envelope, deltaMs) {
-    if (!Number.isFinite(deltaMs) || deltaMs < DELIVERED_LATENCY_FLAG_MS)
-        return envelope;
-    const marker = "\n---\n";
-    const idx = envelope.indexOf(marker);
-    const headerBlock = idx === -1 ? envelope : envelope.slice(0, idx);
-    const rest = idx === -1 ? "" : envelope.slice(idx);
-    const lines = headerBlock.split("\n");
-    const sentIdx = lines.findIndex((l) => l.startsWith("Sent: "));
-    if (sentIdx === -1)
-        return envelope;
-    lines[sentIdx] = `${lines[sentIdx]} · delivered +${Math.floor(deltaMs / 1000)}s`;
-    return lines.join("\n") + rest;
-}
-/** Wrap a tmux-pane body with the canonical From/To envelope. The
- *  recipient pane sees both the sender's identity and a reply hint.
- *  Cross-host nudges should NOT double-wrap: the remote rig wraps
- *  when it processes the same command (matches `wrapSendBody`'s
- *  cross-host carve-out).
- *  `meta` (ruling 03c35295) projects the recipient scale + a transport-stamped timestamp; ABSENT ⇒
- *  today's exact DM envelope (backward-compat until every sender surface threads it). */
-export function wrapPaneEnvelope(sender, recipient, body, meta) {
-    // FOUNDER ROOT INVARIANT (2026-08-27, supersedes 51-09 incr 3 / ruling cb19867f Q2
-    // always-suffix): the sender renders EXACTLY AS RECEIVED. A local sender is the bare
-    // member@rig (the reply hint is copy-paste-usable locally); a cross-host arrival already
-    // carries its origin triple from the forwarding boundary and rides verbatim — the wrapper
-    // never appends this host's id to anything.
-    const senderLabel = sender && sender.trim().length > 0 ? sender : SENDER_FALLBACK;
-    const header = [`From: ${senderLabel}`, renderToLine(recipient, meta?.scope)];
-    if (meta?.stampISO) {
-        // GHOST-STAGE (g): the sender's occupant generation rides the Sent: line as a short suffix
-        // (first8 of the uuid — discriminates at per-node scale; the ledger keeps the full uuid for
-        // exact joins). ABSENT gen ⇒ OMIT the suffix entirely — never "gen unknown", never a forged
-        // value. The suffix is positionally bound to the Sent: header line (a body line, always after
-        // the first "---", can contain " · gen …" but cannot inject a Sent: line — containment).
-        const genSuffix = meta.genUuid && meta.genUuid.length > 0 ? ` · gen ${meta.genUuid.slice(0, 8)}` : "";
-        header.push(`Sent: ${renderShortStamp(meta.stampISO)}${genSuffix}`);
-    }
-    const reply = senderLabel.endsWith("@external")
-        ? `↩ Reply if needed: rig queue create --destination ${senderLabel} --body "..." --verify`
-        : `↩ Reply: rig send ${senderLabel} "..."`;
-    return [...header, "---", body, "---", reply].join("\n");
-}
-//# sourceMappingURL=pane-envelope.js.map

package/node_modules/@openrig/daemon/dist/lib/pane-envelope.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pane-envelope.js","sourceRoot":"","sources":["../../src/lib/pane-envelope.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,kEAAkE;AAClE,6DAA6D;AAC7D,4CAA4C;AAC5C,EAAE;AACF,4BAA4B;AAC5B,mEAAmE;AACnE,qEAAqE;AACrE,oEAAoE;AACpE,uCAAuC;AACvC,6CAA6C;AAC7C,kEAAkE;AAClE,6DAA6D;AAC7D,mEAAmE;AACnE,8DAA8D;AAC9D,0CAA0C;AAC1C,gEAAgE;AAEhE,MAAM,eAAe,GAAG,kBAAkB,CAAC;AA0B3C,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,KAAqB;IACnE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,SAAS,EAAE,CAAC;IAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACzF,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,oBAAoB,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,KAAK,SAAS,CAAC;IAClG,OAAO,2BAA2B,CAAC;AACrC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC;AACvF,CAAC;AAED;;kGAEkG;AAClG,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD;;;;;;;;sEAQsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,OAAe;IACtE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,yBAAyB;QAAE,OAAO,QAAQ,CAAC;IACtF,MAAM,MAAM,GAAG,SAAS,CAAC;IACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/D,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACpC,KAAK,CAAC,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;IACjF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED;;;;;;yFAMyF;AACzF,MAAM,UAAU,gBAAgB,CAC9B,MAA0B,EAC1B,SAAiB,EACjB,IAAY,EACZ,IAAmB;IAEnB,mFAAmF;IACnF,qFAAqF;IACrF,yFAAyF;IACzF,0FAA0F;IAC1F,4CAA4C;IAC5C,MAAM,WAAW,GAAG,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC;IAClF,MAAM,MAAM,GAAG,CAAC,SAAS,WAAW,EAAE,EAAE,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9E,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnB,2FAA2F;QAC3F,4FAA4F;QAC5F,4FAA4F;QAC5F,8FAA8F;QAC9F,yFAAyF;QACzF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,MAAM,CAAC,IAAI,CAAC,SAAS,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7C,CAAC,CAAC,qDAAqD,WAAW,wBAAwB;QAC1F,CAAC,CAAC,qBAAqB,WAAW,QAAQ,CAAC;IAC7C,OAAO,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC"}

package/node_modules/@openrig/daemon/dist/local-reading-surface.d.ts

@@ -1,3 +0,0 @@
-export { readAllowedFile } from "./domain/files/file-read.js";
-export { decodeAllowlist, resolveAllowedDirectory, resolveAllowedPath, FilePathSafetyError } from "./domain/files/path-safety.js";
-//# sourceMappingURL=local-reading-surface.d.ts.map

package/node_modules/@openrig/daemon/dist/local-reading-surface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-reading-surface.d.ts","sourceRoot":"","sources":["../src/local-reading-surface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC"}

package/node_modules/@openrig/daemon/dist/local-reading-surface.js

@@ -1,3 +0,0 @@
-export { readAllowedFile } from "./domain/files/file-read.js";
-export { decodeAllowlist, resolveAllowedDirectory, resolveAllowedPath, FilePathSafetyError } from "./domain/files/path-safety.js";
-//# sourceMappingURL=local-reading-surface.js.map

package/node_modules/@openrig/daemon/dist/local-reading-surface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-reading-surface.js","sourceRoot":"","sources":["../src/local-reading-surface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC"}

package/node_modules/@openrig/daemon/dist/middleware/auth-bearer-token.d.ts

@@ -1,91 +0,0 @@
-import { type NetworkInterfaceInfo } from "node:os";
-import type { MiddlewareHandler } from "hono";
-/**
- * Constant-time string equality using Node's timingSafeEqual.
- * Returns false when lengths differ (timingSafeEqual throws on
- * length mismatch; we pad-compare to keep a constant-ish branch
- * profile while still returning the honest false).
- */
-export declare function constantTimeEqual(a: string, b: string): boolean;
-export interface AuthBearerTokenOpts {
-    /**
-     * The expected bearer token. When this is null, the middleware
-     * lets all requests through (the daemon-level startup check
-     * elsewhere ensures this only happens when bound on loopback).
-     */
-    expectedToken: string | null;
-}
-/**
- * Hono middleware that enforces bearer-token auth on the routes it
- * is mounted on. Returns 401 with a three-part error body for missing
- * or mismatched tokens.
- *
- * When `expectedToken` is null, the middleware passes through. The
- * startup check in `startup.ts` ensures null is only valid when the
- * bind interface is loopback.
- */
-export declare function authBearerTokenMiddleware(opts: AuthBearerTokenOpts): MiddlewareHandler;
-/**
- * Detect whether a host bind value is loopback-only (safe to skip
- * bearer requirement) vs non-loopback (tailnet / public; requires
- * bearer). Loopback set: `127.x.x.x`, `::1`, `localhost`. Anything
- * else (including `0.0.0.0`, `::`, named hostnames, tailnet IPs) is
- * treated as non-loopback.
- */
-export declare function isLoopbackBind(host: string | undefined | null): boolean;
-/**
- * Detect tailscale CGNAT IPv4 (100.64.0.0/10) and ULA IPv6 prefix
- * (fd7a:115c:a1e0::/48). Returns true for tailnet-literal IP addresses
- * only; hostname callers must first resolve via {@link resolveToIpOrNull}.
- *
- * Rationale: tailscale's WireGuard mesh + ACLs ARE the auth boundary, so
- * a tailnet-bound daemon does not need an additional bearer token. The
- * CGNAT IPv4 range and ULA IPv6 prefix are reserved by tailscale and
- * documented; collisions on real-world networks are essentially zero.
- *
- * Boundary semantics for HG-3: CGNAT is 100.64.0.0/10 → first octet
- * exactly 100, second octet 64..127 inclusive. 100.63.x.x and
- * 100.128.x.x are NOT tailnet.
- */
-export declare function isTailscaleBind(host: string | undefined | null): boolean;
-/**
- * Pure helper for {@link detectTailscaleInterface}: takes a NetworkInterfaces
- * dictionary (the shape returned by os.networkInterfaces()) and returns the
- * first non-internal address that matches the tailnet IP ranges, or null.
- * Factored out so tests can supply synthetic interface fixtures without
- * mocking node:os.
- */
-export declare function findTailscaleIpInInterfaces(interfaces: NodeJS.Dict<NetworkInterfaceInfo[]>): string | null;
-/**
- * Probe the host's network interfaces and return the first tailscale-IP
- * address found (CGNAT IPv4 or tailnet ULA IPv6), or null when no tailnet
- * interface is currently active. Used at daemon startup to decide whether
- * to multi-bind (loopback + tailnet) or loopback-only. Detection is
- * IP-based, not interface-name-based, so it survives platform differences
- * in how tailscale names its tun device.
- */
-export declare function detectTailscaleInterface(): string | null;
-/**
- * Resolve a hostname to its first IP via node:dns/promises lookup.
- * Returns null on resolution failure (DNS error, timeout, no such host).
- * Wrapped with a 5s race-timeout per Risk 9.2 in the slice IMPL-PRD so an
- * unresponsive resolver does not stall daemon startup indefinitely.
- */
-export declare function resolveToIpOrNull(host: string): Promise<string | null>;
-export declare class AuthBearerTokenStartupError extends Error {
-    constructor(message: string);
-}
-/**
- * Startup-side check (HARD-GATE audit row 8). Throws an explicit
- * AuthBearerTokenStartupError when the bind interface is genuinely
- * public/LAN AND the bearer token is empty. Loopback or tailscale-IP
- * binds short-circuit (the tailnet is the auth boundary). Hostname
- * binds resolve via DNS first; if resolution yields a loopback or
- * tailnet IP, the same short-circuit applies. Public/LAN binds without
- * a bearer throw and the daemon refuses to start.
- */
-export declare function assertBindAuthInvariant(opts: {
-    host: string;
-    bearerToken: string | null;
-}): Promise<void>;
-//# sourceMappingURL=auth-bearer-token.d.ts.map

package/node_modules/@openrig/daemon/dist/middleware/auth-bearer-token.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-bearer-token.d.ts","sourceRoot":"","sources":["../../src/middleware/auth-bearer-token.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAqB,KAAK,oBAAoB,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE9C;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAe/D;AAwBD,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,mBAAmB,GACxB,iBAAiB,CAyBnB;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAWvE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,OAAO,CAaxE;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,GAC9C,MAAM,GAAG,IAAI,CASf;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,GAAG,IAAI,CAExD;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAa5E;AAED,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBhB"}

package/node_modules/@openrig/daemon/dist/middleware/auth-bearer-token.js

@@ -1,236 +0,0 @@
-// PL-005 Phase B: bearer-token middleware for /api/mission-control/*.
-//
-// Per slice IMPL § Write Set + audit hard-gates 8 + 9:
-//   - Constant-time bearer comparison via Node `crypto.timingSafeEqual`.
-//     No early-return on byte mismatch.
-//   - 401 with three-part error body on missing or mismatched token
-//     (what failed + why it matters + what to do).
-//   - Daemon refuses to start with a non-loopback bind interface AND
-//     empty bearer config — startup-side check (see startup.ts).
-//
-// MVP context (single-developer, single-user, single-host): one static
-// bearer token sourced from a config field. NO OAuth / SSO / per-user
-// routing / role-based permissions / token rotation. Token holder is
-// fully privileged.
-//
-// Mounted on /api/mission-control/* write verbs at minimum (POST
-// /action, POST /notifications/test). Reads (GET /views, /audit, etc.)
-// MAY be gated under the same token at operator option (Phase B
-// driver default: gate writes only; reads remain open behind tailnet
-// bind for the headed-browser-from-phone case where the operator
-// hasn't typed the token into mobile yet — the bearer is for write
-// integrity, not view confidentiality).
-import { Buffer } from "node:buffer";
-import { timingSafeEqual } from "node:crypto";
-import { promises as dns } from "node:dns";
-import { networkInterfaces } from "node:os";
-/**
- * Constant-time string equality using Node's timingSafeEqual.
- * Returns false when lengths differ (timingSafeEqual throws on
- * length mismatch; we pad-compare to keep a constant-ish branch
- * profile while still returning the honest false).
- */
-export function constantTimeEqual(a, b) {
-    // Length check is unavoidable for timingSafeEqual to work, but the
-    // compare is still constant-time within the equal-length case. For
-    // unequal lengths we still run a fixed-size compare against a buffer
-    // of zeros so an attacker cannot infer "wrong length vs wrong byte"
-    // from response timing.
-    const aBuf = Buffer.from(a, "utf8");
-    const bBuf = Buffer.from(b, "utf8");
-    if (aBuf.length !== bBuf.length) {
-        // Compare against a same-length zero buffer to keep the call site
-        // cost similar across mismatch paths. Result is always false here.
-        timingSafeEqual(aBuf, Buffer.alloc(aBuf.length));
-        return false;
-    }
-    return timingSafeEqual(aBuf, bBuf);
-}
-/**
- * Three-part error body shape per OpenRig honest-error-reporting
- * convention. Renders inside the route's c.json call.
- */
-function unauthorizedBody(reason) {
-    return {
-        error: "unauthorized",
-        message: `Mission Control auth failed: ${reason}`,
-        what_failed: reason,
-        why_it_matters: "Mission Control write verbs require a bearer token because the daemon may be bound on a non-loopback interface (tailnet) where unauthenticated mutation would be unsafe.",
-        what_to_do: "Set the auth.bearerToken field in daemon config (or OPENRIG_AUTH_BEARER_TOKEN env), restart the daemon, and resend the request with `Authorization: Bearer <token>`.",
-    };
-}
-/**
- * Hono middleware that enforces bearer-token auth on the routes it
- * is mounted on. Returns 401 with a three-part error body for missing
- * or mismatched tokens.
- *
- * When `expectedToken` is null, the middleware passes through. The
- * startup check in `startup.ts` ensures null is only valid when the
- * bind interface is loopback.
- */
-export function authBearerTokenMiddleware(opts) {
-    const { expectedToken } = opts;
-    return async (c, next) => {
-        if (expectedToken === null) {
-            // Loopback-only mode (no bearer configured). Pass through.
-            await next();
-            return;
-        }
-        const header = c.req.header("Authorization") ?? c.req.header("authorization");
-        if (!header) {
-            return c.json(unauthorizedBody("missing Authorization header"), 401);
-        }
-        const match = /^Bearer\s+(.+)$/i.exec(header);
-        if (!match) {
-            return c.json(unauthorizedBody("Authorization header must be 'Bearer <token>'"), 401);
-        }
-        const provided = match[1].trim();
-        if (!constantTimeEqual(provided, expectedToken)) {
-            return c.json(unauthorizedBody("bearer token does not match"), 401);
-        }
-        await next();
-    };
-}
-/**
- * Detect whether a host bind value is loopback-only (safe to skip
- * bearer requirement) vs non-loopback (tailnet / public; requires
- * bearer). Loopback set: `127.x.x.x`, `::1`, `localhost`. Anything
- * else (including `0.0.0.0`, `::`, named hostnames, tailnet IPs) is
- * treated as non-loopback.
- */
-export function isLoopbackBind(host) {
-    if (!host || host.length === 0) {
-        // Default Hono / @hono/node-server bind is 0.0.0.0 — treat as
-        // non-loopback for safety (force operator to either bind explicitly
-        // to 127.0.0.1 or set the bearer token).
-        return false;
-    }
-    const trimmed = host.trim().toLowerCase();
-    if (trimmed === "localhost" || trimmed === "::1" || trimmed === "[::1]")
-        return true;
-    if (trimmed.startsWith("127."))
-        return true;
-    return false;
-}
-/**
- * Detect tailscale CGNAT IPv4 (100.64.0.0/10) and ULA IPv6 prefix
- * (fd7a:115c:a1e0::/48). Returns true for tailnet-literal IP addresses
- * only; hostname callers must first resolve via {@link resolveToIpOrNull}.
- *
- * Rationale: tailscale's WireGuard mesh + ACLs ARE the auth boundary, so
- * a tailnet-bound daemon does not need an additional bearer token. The
- * CGNAT IPv4 range and ULA IPv6 prefix are reserved by tailscale and
- * documented; collisions on real-world networks are essentially zero.
- *
- * Boundary semantics for HG-3: CGNAT is 100.64.0.0/10 → first octet
- * exactly 100, second octet 64..127 inclusive. 100.63.x.x and
- * 100.128.x.x are NOT tailnet.
- */
-export function isTailscaleBind(host) {
-    if (!host)
-        return false;
-    const trimmed = host.trim().toLowerCase();
-    const ipv4Match = /^(\d+)\.(\d+)\.(\d+)\.(\d+)$/.exec(trimmed);
-    if (ipv4Match) {
-        const first = parseInt(ipv4Match[1], 10);
-        const second = parseInt(ipv4Match[2], 10);
-        if (first === 100 && second >= 64 && second <= 127)
-            return true;
-        return false;
-    }
-    const cleaned = trimmed.replace(/^\[|\]$/g, "");
-    if (cleaned.startsWith("fd7a:115c:a1e0:"))
-        return true;
-    return false;
-}
-/**
- * Pure helper for {@link detectTailscaleInterface}: takes a NetworkInterfaces
- * dictionary (the shape returned by os.networkInterfaces()) and returns the
- * first non-internal address that matches the tailnet IP ranges, or null.
- * Factored out so tests can supply synthetic interface fixtures without
- * mocking node:os.
- */
-export function findTailscaleIpInInterfaces(interfaces) {
-    for (const addrs of Object.values(interfaces)) {
-        if (!addrs)
-            continue;
-        for (const addr of addrs) {
-            if (addr.internal)
-                continue;
-            if (isTailscaleBind(addr.address))
-                return addr.address;
-        }
-    }
-    return null;
-}
-/**
- * Probe the host's network interfaces and return the first tailscale-IP
- * address found (CGNAT IPv4 or tailnet ULA IPv6), or null when no tailnet
- * interface is currently active. Used at daemon startup to decide whether
- * to multi-bind (loopback + tailnet) or loopback-only. Detection is
- * IP-based, not interface-name-based, so it survives platform differences
- * in how tailscale names its tun device.
- */
-export function detectTailscaleInterface() {
-    return findTailscaleIpInInterfaces(networkInterfaces());
-}
-/**
- * Resolve a hostname to its first IP via node:dns/promises lookup.
- * Returns null on resolution failure (DNS error, timeout, no such host).
- * Wrapped with a 5s race-timeout per Risk 9.2 in the slice IMPL-PRD so an
- * unresponsive resolver does not stall daemon startup indefinitely.
- */
-export async function resolveToIpOrNull(host) {
-    try {
-        const timeout = new Promise((resolve) => {
-            setTimeout(() => resolve(null), 5000).unref();
-        });
-        const lookup = dns
-            .lookup(host, { all: false })
-            .then((r) => r.address)
-            .catch(() => null);
-        return await Promise.race([lookup, timeout]);
-    }
-    catch {
-        return null;
-    }
-}
-export class AuthBearerTokenStartupError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "AuthBearerTokenStartupError";
-    }
-}
-/**
- * Startup-side check (HARD-GATE audit row 8). Throws an explicit
- * AuthBearerTokenStartupError when the bind interface is genuinely
- * public/LAN AND the bearer token is empty. Loopback or tailscale-IP
- * binds short-circuit (the tailnet is the auth boundary). Hostname
- * binds resolve via DNS first; if resolution yields a loopback or
- * tailnet IP, the same short-circuit applies. Public/LAN binds without
- * a bearer throw and the daemon refuses to start.
- */
-export async function assertBindAuthInvariant(opts) {
-    if (isLoopbackBind(opts.host))
-        return;
-    if (isTailscaleBind(opts.host))
-        return;
-    let resolvedIp = null;
-    // Hostname (non-IP literal) — resolve and re-check.
-    if (!/^[\d.]+$/.test(opts.host) && !opts.host.includes(":")) {
-        resolvedIp = await resolveToIpOrNull(opts.host);
-        if (resolvedIp) {
-            if (isLoopbackBind(resolvedIp))
-                return;
-            if (isTailscaleBind(resolvedIp))
-                return;
-        }
-    }
-    if (opts.bearerToken && opts.bearerToken.length > 0)
-        return;
-    throw new AuthBearerTokenStartupError(`daemon refusing to start: bind host '${opts.host}'${resolvedIp ? ` (resolves to ${resolvedIp})` : ""} is not loopback or tailscale, ` +
-        `and auth.bearerToken (env OPENRIG_AUTH_BEARER_TOKEN) is empty. ` +
-        `Either: (a) bind to 127.0.0.1 / localhost, (b) bind to a tailscale interface (100.64.0.0/10 IPv4 or fd7a:115c:a1e0::/48 IPv6), ` +
-        `or (c) set OPENRIG_AUTH_BEARER_TOKEN to a non-empty value before starting the daemon.`);
-}
-//# sourceMappingURL=auth-bearer-token.js.map

package/node_modules/@openrig/daemon/dist/middleware/auth-bearer-token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-bearer-token.js","sourceRoot":"","sources":["../../src/middleware/auth-bearer-token.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,uDAAuD;AACvD,yEAAyE;AACzE,wCAAwC;AACxC,oEAAoE;AACpE,mDAAmD;AACnD,qEAAqE;AACrE,iEAAiE;AACjE,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,qEAAqE;AACrE,oBAAoB;AACpB,EAAE;AACF,iEAAiE;AACjE,uEAAuE;AACvE,gEAAgE;AAChE,qEAAqE;AACrE,iEAAiE;AACjE,mEAAmE;AACnE,wCAAwC;AAExC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAA6B,MAAM,SAAS,CAAC;AAGvE;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAS,EAAE,CAAS;IACpD,mEAAmE;IACnE,mEAAmE;IACnE,qEAAqE;IACrE,oEAAoE;IACpE,wBAAwB;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,kEAAkE;QAClE,mEAAmE;QACnE,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,MAAc;IAOtC,OAAO;QACL,KAAK,EAAE,cAAc;QACrB,OAAO,EAAE,gCAAgC,MAAM,EAAE;QACjD,WAAW,EAAE,MAAM;QACnB,cAAc,EACZ,0KAA0K;QAC5K,UAAU,EACR,sKAAsK;KACzK,CAAC;AACJ,CAAC;AAWD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAyB;IAEzB,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC/B,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,2DAA2D;YAC3D,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,8BAA8B,CAAC,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,IAAI,CACX,gBAAgB,CAAC,+CAA+C,CAAC,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAA+B;IAC5D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,8DAA8D;QAC9D,oEAAoE;QACpE,yCAAyC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrF,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,IAA+B;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,GAAG,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAA+C;IAE/C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAC5B,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,2BAA2B,CAAC,iBAAiB,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5C,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,GAAG;aACf,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aAC5B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;aACtB,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAG7C;IACC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO;IACtC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO;IAEvC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,oDAAoD;IACpD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,UAAU,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,cAAc,CAAC,UAAU,CAAC;gBAAE,OAAO;YACvC,IAAI,eAAe,CAAC,UAAU,CAAC;gBAAE,OAAO;QAC1C,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO;IAC5D,MAAM,IAAI,2BAA2B,CACnC,wCAAwC,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,iBAAiB,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,iCAAiC;QACpI,iEAAiE;QACjE,iIAAiI;QACjI,uFAAuF,CAC1F,CAAC;AACJ,CAAC"}

package/node_modules/@openrig/daemon/dist/openrig-compat.d.ts

@@ -1,9 +0,0 @@
-export declare function getOpenRigHome(): string;
-export declare function getLegacyRiggedHome(): string;
-export declare const OPENRIG_HOME: string;
-export declare const LEGACY_RIGGED_HOME: string;
-export declare function readOpenRigEnv(primary: string, legacy?: string): string | undefined;
-export declare function getPreferredOpenRigHome(): string;
-export declare function getDefaultOpenRigPath(filename: string): string;
-export declare function getCompatibleOpenRigPath(filename: string): string;
-//# sourceMappingURL=openrig-compat.d.ts.map

package/node_modules/@openrig/daemon/dist/openrig-compat.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"openrig-compat.d.ts","sourceRoot":"","sources":["../src/openrig-compat.ts"],"names":[],"mappings":"AAMA,wBAAgB,cAAc,IAAI,MAAM,CAIvC;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,eAAO,MAAM,YAAY,QAAmB,CAAC;AAC7C,eAAO,MAAM,kBAAkB,QAAwB,CAAC;AAQxD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAanF;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAahD;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgBjE"}

package/node_modules/@openrig/daemon/dist/openrig-compat.js

@@ -1,62 +0,0 @@
-import { existsSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-const warnedKeys = new Set();
-export function getOpenRigHome() {
-    const configured = readOpenRigEnv("OPENRIG_HOME", "RIGGED_HOME");
-    if (configured !== undefined)
-        return configured;
-    return join(homedir(), ".openrig");
-}
-export function getLegacyRiggedHome() {
-    return join(homedir(), ".rigged");
-}
-export const OPENRIG_HOME = getOpenRigHome();
-export const LEGACY_RIGGED_HOME = getLegacyRiggedHome();
-function warnOnce(key, message) {
-    if (warnedKeys.has(key))
-        return;
-    warnedKeys.add(key);
-    console.warn(message);
-}
-export function readOpenRigEnv(primary, legacy) {
-    const primaryValue = process.env[primary];
-    if (primaryValue !== undefined && primaryValue !== "")
-        return primaryValue;
-    if (legacy) {
-        const legacyValue = process.env[legacy];
-        if (legacyValue !== undefined && legacyValue !== "") {
-            warnOnce(`env:${legacy}`, `Warning: ${legacy} is deprecated; use ${primary} instead.`);
-            return legacyValue;
-        }
-    }
-    return undefined;
-}
-export function getPreferredOpenRigHome() {
-    const openrigHome = getOpenRigHome();
-    const legacyRiggedHome = getLegacyRiggedHome();
-    if (existsSync(openrigHome))
-        return openrigHome;
-    if (existsSync(legacyRiggedHome)) {
-        warnOnce("path:home", `Warning: using legacy state directory ${legacyRiggedHome}; migrate to ${openrigHome}.`);
-        return legacyRiggedHome;
-    }
-    return openrigHome;
-}
-export function getDefaultOpenRigPath(filename) {
-    return join(getOpenRigHome(), filename);
-}
-export function getCompatibleOpenRigPath(filename) {
-    const openrigHome = getOpenRigHome();
-    const legacyRiggedHome = getLegacyRiggedHome();
-    const primaryPath = join(openrigHome, filename);
-    if (existsSync(primaryPath))
-        return primaryPath;
-    const legacyPath = join(legacyRiggedHome, filename);
-    if (existsSync(legacyPath)) {
-        warnOnce(`path:${filename}`, `Warning: using legacy state path ${legacyPath}; migrate to ${primaryPath}.`);
-        return legacyPath;
-    }
-    return primaryPath;
-}
-//# sourceMappingURL=openrig-compat.js.map

package/node_modules/@openrig/daemon/dist/openrig-compat.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"openrig-compat.js","sourceRoot":"","sources":["../src/openrig-compat.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;AAErC,MAAM,UAAU,cAAc;IAC5B,MAAM,UAAU,GAAG,cAAc,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IACjE,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,EAAE,CAAC;AAExD,SAAS,QAAQ,CAAC,GAAW,EAAE,OAAe;IAC5C,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAChC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,MAAe;IAC7D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,EAAE;QAAE,OAAO,YAAY,CAAC;IAE3E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACpD,QAAQ,CAAC,OAAO,MAAM,EAAE,EAAE,YAAY,MAAM,uBAAuB,OAAO,WAAW,CAAC,CAAC;YACvF,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IAE/C,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IAChD,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjC,QAAQ,CACN,WAAW,EACX,yCAAyC,gBAAgB,gBAAgB,WAAW,GAAG,CACxF,CAAC;QACF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,IAAI,CAAC,cAAc,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,gBAAgB,GAAG,mBAAmB,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,WAAW,CAAC;IAEhD,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,QAAQ,CACN,QAAQ,QAAQ,EAAE,EAClB,oCAAoC,UAAU,gBAAgB,WAAW,GAAG,CAC7E,CAAC;QACF,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/node_modules/@openrig/daemon/dist/project-catalog-surface.d.ts

@@ -1,2 +0,0 @@
-export { readProjectCatalog, selectCatalogProject, ProjectReadError } from "./domain/workspace/project-catalog.js";
-//# sourceMappingURL=project-catalog-surface.d.ts.map

package/node_modules/@openrig/daemon/dist/project-catalog-surface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"project-catalog-surface.d.ts","sourceRoot":"","sources":["../src/project-catalog-surface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC"}

package/node_modules/@openrig/daemon/dist/project-catalog-surface.js

@@ -1,2 +0,0 @@
-export { readProjectCatalog, selectCatalogProject, ProjectReadError } from "./domain/workspace/project-catalog.js";
-//# sourceMappingURL=project-catalog-surface.js.map

package/node_modules/@openrig/daemon/dist/project-catalog-surface.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"project-catalog-surface.js","sourceRoot":"","sources":["../src/project-catalog-surface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC"}

package/node_modules/@openrig/daemon/dist/project-lifecycle-surface.d.ts

@@ -1,3 +0,0 @@
-export { compileProjectLifecycle, type LifecycleCompilation, type LifecycleGraphSource, type LifecycleSourceDigest, } from "./domain/project-lifecycle-compiler.js";
-export { validateMissionComposition, LifecycleManifestValidationError, type LifecycleMissionMember, } from "./domain/lifecycle-manifest.js";
-//# sourceMappingURL=project-lifecycle-surface.d.ts.map

package/node_modules/@openrig/daemon/dist/project-lifecycle-surface.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"project-lifecycle-surface.d.ts","sourceRoot":"","sources":["../src/project-lifecycle-surface.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,KAAK,oBAAoB,EAAE,KAAK,oBAAoB,EACpD,KAAK,qBAAqB,GAC3B,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,EAChC,KAAK,sBAAsB,GAC5B,MAAM,gCAAgC,CAAC"}

package/node_modules/@openrig/daemon/dist/project-lifecycle-surface.js

@@ -1,3 +0,0 @@
-export { compileProjectLifecycle, } from "./domain/project-lifecycle-compiler.js";
-export { validateMissionComposition, LifecycleManifestValidationError, } from "./domain/lifecycle-manifest.js";
-//# sourceMappingURL=project-lifecycle-surface.js.map