@openrig/cli 0.5.16 → 0.6.0

package/node_modules/@openrig/daemon/dist/domain/activity-endpoint.js

@@ -1,91 +0,0 @@
-// OPR.0.4.3.28 B2/B3 — self-provisioned activity-hook endpoint (url + token).
-//
-// The daemon generates a per-install activity-hook token and derives its own
-// ingest URL so launched seats can reach /api/activity/hooks WITHOUT the
-// operator seeding OPENRIG_URL / OPENRIG_ACTIVITY_HOOK_TOKEN into their shell
-// (the confirmed live break — see the slice-28 IMPL-SPEC §1.1).
-//
-// The token is a LOCALHOST internal-auth HANDLE, not a founder-secret: kept out
-// of logs/prints and stored mode-0600, but no redaction machinery is built
-// around it (orch-advisor ruling 2026-07-02).
-//
-// - activity-hook-token : durable token, STABLE across daemon restarts so
-//   already-launched seats (whose env froze the token at launch) still
-//   authenticate after a restart.
-// - activity-endpoint.json : {baseUrl, token} snapshot, re-written each boot,
-//   read by the relay's file-discovery fallback for reconcile/restored seats
-//   whose frozen process env carries no OpenRig activity vars (B3).
-import fs from "node:fs";
-import nodePath from "node:path";
-import { randomBytes } from "node:crypto";
-const TOKEN_FILE = "activity-hook-token";
-const ENDPOINT_FILE = "activity-endpoint.json";
-const DEFAULT_DAEMON_PORT = "7433";
-/** OPR.0.4.3.28 B2 — derive the activity ingest URL the daemon injects into seats
- *  from its OWN bound host+port, so the seat's relay posts to an address the
- *  daemon is actually listening on. When OPENRIG_HOST is an explicit host
- *  (loopback, localhost, a tailnet IP, a hostname) the daemon binds ONLY that
- *  host, so the URL MUST use it — a hardcoded 127.0.0.1 would be unreachable.
- *  Wildcard/bind-all hosts (0.0.0.0 / ::) are not connectable addresses and the
- *  daemon also binds loopback there, so they map to 127.0.0.1. An absent host
- *  (the default loopback+tailscale multi-bind) also uses loopback. */
-export function deriveActivityUrl(host, port) {
-    const p = port && port.trim().length > 0 ? port.trim() : DEFAULT_DAEMON_PORT;
-    const h = host?.trim();
-    const wildcard = !h || h === "0.0.0.0" || h === "::" || h === "[::]" || h === "*";
-    return `http://${wildcard ? "127.0.0.1" : h}:${p}`;
-}
-/** Read the durable activity-hook token from state, or generate + persist one.
- *  Stable across restarts (so frozen-env seats keep authenticating). */
-export function ensureActivityHookToken(stateDir) {
-    const tokenPath = nodePath.join(stateDir, TOKEN_FILE);
-    try {
-        const existing = fs.readFileSync(tokenPath, "utf-8").trim();
-        if (existing.length > 0)
-            return existing;
-    }
-    catch {
-        // not present yet — generate below
-    }
-    const token = randomBytes(32).toString("hex");
-    try {
-        fs.mkdirSync(stateDir, { recursive: true });
-        fs.writeFileSync(tokenPath, token, { mode: 0o600 });
-        fs.chmodSync(tokenPath, 0o600); // enforce mode even if the file pre-existed
-    }
-    catch {
-        // best-effort persist — an in-memory token still works for this daemon run,
-        // it just won't survive a restart (falls back to regenerate).
-    }
-    return token;
-}
-/** Snapshot the current {baseUrl, token} to activity-endpoint.json (mode 0600)
- *  for the relay file-discovery fallback (B3). Best-effort. */
-export function writeActivityEndpointFile(stateDir, endpoint) {
-    const endpointPath = nodePath.join(stateDir, ENDPOINT_FILE);
-    try {
-        fs.mkdirSync(stateDir, { recursive: true });
-        fs.writeFileSync(endpointPath, JSON.stringify({ baseUrl: endpoint.baseUrl, token: endpoint.token }), { mode: 0o600 });
-        fs.chmodSync(endpointPath, 0o600);
-    }
-    catch {
-        // best-effort — reconcile/restored seats simply won't get file-discovery.
-    }
-}
-/** Read {baseUrl, token} from activity-endpoint.json, or null if absent/invalid.
- *  (The relay .cjs reads the file directly; this is for daemon-side use + tests.) */
-export function readActivityEndpointFile(stateDir) {
-    const endpointPath = nodePath.join(stateDir, ENDPOINT_FILE);
-    try {
-        const parsed = JSON.parse(fs.readFileSync(endpointPath, "utf-8"));
-        if (typeof parsed.baseUrl === "string" && parsed.baseUrl.length > 0
-            && typeof parsed.token === "string" && parsed.token.length > 0) {
-            return { baseUrl: parsed.baseUrl, token: parsed.token };
-        }
-    }
-    catch {
-        // absent or malformed
-    }
-    return null;
-}
-//# sourceMappingURL=activity-endpoint.js.map

package/node_modules/@openrig/daemon/dist/domain/activity-endpoint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"activity-endpoint.js","sourceRoot":"","sources":["../../src/domain/activity-endpoint.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAC9E,gEAAgE;AAChE,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,kCAAkC;AAClC,8EAA8E;AAC9E,6EAA6E;AAC7E,oEAAoE;AAEpE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,UAAU,GAAG,qBAAqB,CAAC;AACzC,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAC/C,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;;;;;sEAOsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,IAAwB,EAAE,IAAwB;IAClF,MAAM,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAC7E,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,CAAC;IAClF,OAAO,UAAU,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACrD,CAAC;AAED;wEACwE;AACxE,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,4CAA4C;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,8DAA8D;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;+DAC+D;AAC/D,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,QAA4C;IACtG,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtH,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED;qFACqF;AACrF,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAA2C,CAAC;QAC5G,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;eAC9D,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/activity-taxonomy.d.ts

@@ -1,112 +0,0 @@
-/** Activity axis — what a present agent is doing. */
-export type ActivityValue = "working" | "idle-at-prompt" | "unknown";
-export declare const ACTIVITY_VALUES: ReadonlySet<string>;
-/** Session axis — does a process exist. */
-export type SessionPresenceValue = "present" | "detached" | "exited" | "absent";
-export declare const SESSION_PRESENCE_VALUES: ReadonlySet<string>;
-/** Resumability axis — orthogonal to both: revival optimism is never blended into
- *  reachability (the omnigent strict-liveness split). */
-export type ResumabilityValue = "live" | "resumable" | "context-walled";
-export declare const RESUMABILITY_VALUES: ReadonlySet<string>;
-/** needs-input as COUNT + short reason phrase — never a status value. count=0 means
- *  none; reason is the short human phrase ("permission prompt", "usage limit",
- *  "classifier hold") naming WHY nothing is moving. */
-export interface NeedsInput {
-    count: number;
-    reason: string | null;
-}
-/** The addendum's human-facing display value: the four-value list human surfaces show. */
-export type DisplayActivityValue = "working" | "idle" | "needs-input" | "unknown";
-/** THE one bridge from the typed axes to the addendum's human-facing value. needs-input
- *  renders whenever the count is positive — visible needs-input evidence outranks a
- *  working self-report for THIS signal (herdr's arbitration cut) — without "needs-input"
- *  ever existing as a stored state. A non-taxonomy activity value refuses loudly: the
- *  surface-local vocabularies this slice retires must not leak back in through display. */
-export declare function deriveDisplayActivity(activity: string, needsInput: NeedsInput): DisplayActivityValue;
-/** The named rungs, in ARBITRATION RANK order for the working/idle decision (top first).
- *  needs-input-chrome is special-cased: it outranks self-report for the needs-input
- *  signal ONLY, never for working/idle. window-sampling is the fallback floor. */
-export type EvidenceRungId = "self-report" | "lifecycle-hooks" | "needs-input-chrome" | "window-sampling";
-export declare const EVIDENCE_RUNG_RANK: readonly EvidenceRungId[];
-/** AM-2 symmetric admission: a rung EARNS authority the way lower rungs retire.
- *  authoritative — consulted for state; trial — admitted by fixture pass, measured for
- *  agreement, NOT consulted; identity-only — usable for identity/resume refs only
- *  (partial-coverage honesty, and the AM-1 degradation target); absent — not staffed. */
-export type RungTrust = "authoritative" | "trial" | "identity-only" | "absent";
-export interface RungDeclaration {
-    rung: EvidenceRungId;
-    /** herdr's cut: only full lifecycle coverage can ever be authoritative. */
-    lifecycleCoverage: "full" | "partial" | "none";
-    /** The trust the rung STARTS with on this adapter (promotion may raise trial). */
-    initialTrust: RungTrust;
-}
-/** What an adapter declares about itself — arbitration ranks what each source can
- *  actually observe. Re-declared at every occupant swap (AM-1 corollary): a successor
- *  never inherits its predecessor's rung authority. */
-export interface AdapterRungInventory {
-    adapterId: string;
-    runtime: "claude-code" | "codex" | "tmux-generic";
-    rungs: RungDeclaration[];
-}
-/** One piece of evidence an adapter reports into the oracle. Every rung's evidence is
- *  SELF-DATED except historically the hook rung — which is exactly why hook authority is
- *  time-bounded (AM-1): observedAt here is the ingest clock for hooks. */
-export interface ActivityEvidence {
-    seatNodeId: string;
-    sessionName: string;
-    rung: EvidenceRungId;
-    /** Stable source id, e.g. "claude:pid-json", "codex:hooks", "tmux:window-activity". */
-    sourceId: string;
-    /** Monotonic per source — stale or reordered reports are dropped. */
-    seq: number;
-    observedAt: string;
-    activity?: ActivityValue;
-    needsInput?: NeedsInput;
-}
-/** A visible rung-health transition (AM-1): arbitration can never make a silently-dead
- *  source authoritative, and the degradation itself must be observable. */
-export interface RungHealthEvent {
-    seatNodeId: string;
-    rung: EvidenceRungId;
-    sourceId: string;
-    from: RungTrust;
-    to: RungTrust;
-    reason: string;
-    at: string;
-}
-/** The arbitrated, seat-keyed answer every surface renders from. */
-export interface ArbitratedSeatState {
-    seatNodeId: string;
-    activity: ActivityValue;
-    needsInput: NeedsInput;
-    /** Which rung decided `activity` — confidence made visible. */
-    decidedBy: EvidenceRungId | null;
-    /** Monotonic arbitrated-state sequence (wait-after-seq consumes it). */
-    seq: number;
-    changedAt: string;
-    rungs: Array<{
-        rung: EvidenceRungId;
-        sourceId: string;
-        trust: RungTrust;
-        lastEvidenceAt: string | null;
-    }>;
-    /** The occupant swap is its OWN visible event, never an activity transition. */
-    lastSwap: {
-        generation: string;
-        at: string;
-    } | null;
-}
-/** Claude Code: pid.json self-report ABOVE hooks for working/idle (r3 standing), the
- *  Stop/StopFailure hook pair (r2 standing), visible chrome (r4 standing), sampling
- *  floor (r1). All full-lifecycle → authoritative (the named CURRENT rungs). */
-export declare const CLAUDE_ACTIVITY_RUNG_INVENTORY: AdapterRungInventory;
-/** Codex 0.147: the four-event hook rung covers the turn lifecycle — a REAL authority
- *  CANDIDATE (AM-2: enters at TRIAL; production agreement promotes). NO pid.json analog
- *  (verified on-box) — its ladder tops out at hooks; sampling stays the floor. */
-export declare const CODEX_ACTIVITY_RUNG_INVENTORY: AdapterRungInventory;
-/** The generic tmux floor: sampling only — exactly what an undeclared seat gets. */
-export declare const TMUX_GENERIC_RUNG_INVENTORY: AdapterRungInventory;
-/** Resolve a runtime string to its rung inventory (the ingest auto-declaration path).
- *  Unknown runtimes get the generic floor — partial-coverage honesty by default. */
-export declare function runtimeRungInventory(runtime: string | null): AdapterRungInventory;
-//# sourceMappingURL=activity-taxonomy.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/activity-taxonomy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"activity-taxonomy.d.ts","sourceRoot":"","sources":["../../src/domain/activity-taxonomy.ts"],"names":[],"mappings":"AAqBA,qDAAqD;AACrD,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,gBAAgB,GAAG,SAAS,CAAC;AACrE,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAI9C,CAAC;AAEH,2CAA2C;AAC3C,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAChF,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAKtD,CAAC;AAEH;yDACyD;AACzD,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,WAAW,GAAG,gBAAgB,CAAC;AACxE,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAIlD,CAAC;AAEH;;uDAEuD;AACvD,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,0FAA0F;AAC1F,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,MAAM,GAAG,aAAa,GAAG,SAAS,CAAC;AAElF;;;;2FAI2F;AAC3F,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,oBAAoB,CAUpG;AAID;;kFAEkF;AAClF,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,iBAAiB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAC1G,eAAO,MAAM,kBAAkB,EAAE,SAAS,cAAc,EAIvD,CAAC;AAEF;;;yFAGyF;AACzF,MAAM,MAAM,SAAS,GAAG,eAAe,GAAG,OAAO,GAAG,eAAe,GAAG,QAAQ,CAAC;AAE/E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,cAAc,CAAC;IACrB,2EAA2E;IAC3E,iBAAiB,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IAC/C,kFAAkF;IAClF,YAAY,EAAE,SAAS,CAAC;CACzB;AAED;;uDAEuD;AACvD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,aAAa,GAAG,OAAO,GAAG,cAAc,CAAC;IAClD,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAED;;0EAE0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,cAAc,CAAC;IACrB,uFAAuF;IACvF,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED;2EAC2E;AAC3E,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,cAAc,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,oEAAoE;AACpE,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,aAAa,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,+DAA+D;IAC/D,SAAS,EAAE,cAAc,GAAG,IAAI,CAAC;IACjC,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,CAAC;QAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC1G,gFAAgF;IAChF,QAAQ,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACrD;AAKD;;gFAEgF;AAChF,eAAO,MAAM,8BAA8B,EAAE,oBAS5C,CAAC;AAEF;;kFAEkF;AAClF,eAAO,MAAM,6BAA6B,EAAE,oBAO3C,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,2BAA2B,EAAE,oBAIzC,CAAC;AAEF;oFACoF;AACpF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,oBAAoB,CAIjF"}

package/node_modules/@openrig/daemon/dist/domain/activity-taxonomy.js

@@ -1,99 +0,0 @@
-// OPR.0.5.5.19 — THE FORMAL ACTIVITY TAXONOMY: the declared state language every surface
-// renders from (TUI, `rig ps`, node-inventory). Three orthogonal axes plus derived
-// diagnoses, ratified at product/from-openrig.dev/taxonomy-agent-state-ADDENDUM-2026-08-26.md
-// (founder ruling 22:00Z); reconciliation vs herdr/omnigent lives in
-// docs/reference/agent-state-taxonomy.md — the doc CITES the addendum, never forks it.
-//
-// BINDING EXCLUSIONS (SPEC mini-req 1, adversarially held — verdict 1229a4b7):
-//  - attention and needs-input are NEVER values of the activity enum. needs-input rides
-//    as a count + short reason phrase (the omnigent pending_elicitations_count +
-//    blocked_on shape); attention stays in its own machinery (attentionCount).
-//  - UNKNOWN is a first-class honest value — the oracle saying "cannot tell", never an
-//    error and never a guess. Unknown beats a confident wrong answer.
-//  - Derived diagnoses (PARKED, HELD-is-not-parked, DONE-UNSEEN) are computed at read
-//    time from the axes + the queue's obligation face; they are never stored as states.
-//
-// The addendum's human-facing activity list shows four values (working / idle /
-// needs-input / unknown). The typed enum carries THREE: needs-input is derived for
-// display from the count+reason fields via `deriveDisplayActivity` — the one bridge —
-// so no store or transition ever holds "needs-input" as a state. That reconciliation
-// is documented in the reference doc's addendum-mapping section.
-export const ACTIVITY_VALUES = new Set([
-    "working",
-    "idle-at-prompt",
-    "unknown",
-]);
-export const SESSION_PRESENCE_VALUES = new Set([
-    "present",
-    "detached",
-    "exited",
-    "absent",
-]);
-export const RESUMABILITY_VALUES = new Set([
-    "live",
-    "resumable",
-    "context-walled",
-]);
-/** THE one bridge from the typed axes to the addendum's human-facing value. needs-input
- *  renders whenever the count is positive — visible needs-input evidence outranks a
- *  working self-report for THIS signal (herdr's arbitration cut) — without "needs-input"
- *  ever existing as a stored state. A non-taxonomy activity value refuses loudly: the
- *  surface-local vocabularies this slice retires must not leak back in through display. */
-export function deriveDisplayActivity(activity, needsInput) {
-    if (!ACTIVITY_VALUES.has(activity)) {
-        throw new Error(`"${activity}" is not a taxonomy activity value (working | idle-at-prompt | unknown) — ` +
-            `surface-local vocabulary must be mapped at its adapter, never rendered`);
-    }
-    if (needsInput.count > 0)
-        return "needs-input";
-    if (activity === "idle-at-prompt")
-        return "idle";
-    return activity;
-}
-export const EVIDENCE_RUNG_RANK = [
-    "self-report",
-    "lifecycle-hooks",
-    "window-sampling",
-];
-// ── Per-runtime rung inventories (SPEC mini-reqs 4, 5, 7) — ONE data source; the
-// adapters and the ingest auto-declaration both read these, never redefine them. ──
-/** Claude Code: pid.json self-report ABOVE hooks for working/idle (r3 standing), the
- *  Stop/StopFailure hook pair (r2 standing), visible chrome (r4 standing), sampling
- *  floor (r1). All full-lifecycle → authoritative (the named CURRENT rungs). */
-export const CLAUDE_ACTIVITY_RUNG_INVENTORY = {
-    adapterId: "claude-code-adapter",
-    runtime: "claude-code",
-    rungs: [
-        { rung: "self-report", lifecycleCoverage: "full", initialTrust: "authoritative" },
-        { rung: "lifecycle-hooks", lifecycleCoverage: "full", initialTrust: "authoritative" },
-        { rung: "needs-input-chrome", lifecycleCoverage: "full", initialTrust: "authoritative" },
-        { rung: "window-sampling", lifecycleCoverage: "full", initialTrust: "authoritative" },
-    ],
-};
-/** Codex 0.147: the four-event hook rung covers the turn lifecycle — a REAL authority
- *  CANDIDATE (AM-2: enters at TRIAL; production agreement promotes). NO pid.json analog
- *  (verified on-box) — its ladder tops out at hooks; sampling stays the floor. */
-export const CODEX_ACTIVITY_RUNG_INVENTORY = {
-    adapterId: "codex-runtime-adapter",
-    runtime: "codex",
-    rungs: [
-        { rung: "lifecycle-hooks", lifecycleCoverage: "full", initialTrust: "trial" },
-        { rung: "window-sampling", lifecycleCoverage: "full", initialTrust: "authoritative" },
-    ],
-};
-/** The generic tmux floor: sampling only — exactly what an undeclared seat gets. */
-export const TMUX_GENERIC_RUNG_INVENTORY = {
-    adapterId: "tmux-generic",
-    runtime: "tmux-generic",
-    rungs: [{ rung: "window-sampling", lifecycleCoverage: "full", initialTrust: "authoritative" }],
-};
-/** Resolve a runtime string to its rung inventory (the ingest auto-declaration path).
- *  Unknown runtimes get the generic floor — partial-coverage honesty by default. */
-export function runtimeRungInventory(runtime) {
-    if (runtime === "claude-code")
-        return CLAUDE_ACTIVITY_RUNG_INVENTORY;
-    if (runtime === "codex")
-        return CODEX_ACTIVITY_RUNG_INVENTORY;
-    return TMUX_GENERIC_RUNG_INVENTORY;
-}
-//# sourceMappingURL=activity-taxonomy.js.map

package/node_modules/@openrig/daemon/dist/domain/activity-taxonomy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"activity-taxonomy.js","sourceRoot":"","sources":["../../src/domain/activity-taxonomy.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,mFAAmF;AACnF,8FAA8F;AAC9F,qEAAqE;AACrE,uFAAuF;AACvF,EAAE;AACF,+EAA+E;AAC/E,wFAAwF;AACxF,iFAAiF;AACjF,+EAA+E;AAC/E,uFAAuF;AACvF,sEAAsE;AACtE,sFAAsF;AACtF,wFAAwF;AACxF,EAAE;AACF,gFAAgF;AAChF,mFAAmF;AACnF,sFAAsF;AACtF,qFAAqF;AACrF,iEAAiE;AAIjE,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAgB;IACzE,SAAS;IACT,gBAAgB;IAChB,SAAS;CACV,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAuB;IACxF,SAAS;IACT,UAAU;IACV,QAAQ;IACR,QAAQ;CACT,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAoB;IACjF,MAAM;IACN,WAAW;IACX,gBAAgB;CACjB,CAAC,CAAC;AAaH;;;;2FAI2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,UAAsB;IAC5E,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,IAAI,QAAQ,4EAA4E;YACxF,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IAC/C,IAAI,QAAQ,KAAK,gBAAgB;QAAE,OAAO,MAAM,CAAC;IACjD,OAAO,QAAiC,CAAC;AAC3C,CAAC;AAQD,MAAM,CAAC,MAAM,kBAAkB,GAA8B;IAC3D,aAAa;IACb,iBAAiB;IACjB,iBAAiB;CAClB,CAAC;AAoEF,kFAAkF;AAClF,oFAAoF;AAEpF;;gFAEgF;AAChF,MAAM,CAAC,MAAM,8BAA8B,GAAyB;IAClE,SAAS,EAAE,qBAAqB;IAChC,OAAO,EAAE,aAAa;IACtB,KAAK,EAAE;QACL,EAAE,IAAI,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE;QACjF,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE;QACrF,EAAE,IAAI,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE;QACxF,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE;KACtF;CACF,CAAC;AAEF;;kFAEkF;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAAyB;IACjE,SAAS,EAAE,uBAAuB;IAClC,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE;QACL,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE;QAC7E,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE;KACtF;CACF,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,2BAA2B,GAAyB;IAC/D,SAAS,EAAE,cAAc;IACzB,OAAO,EAAE,cAAc;IACvB,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;CAC/F,CAAC;AAEF;oFACoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,OAAsB;IACzD,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,8BAA8B,CAAC;IACrE,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,6BAA6B,CAAC;IAC9D,OAAO,2BAA2B,CAAC;AACrC,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/agent-activity-store.d.ts

@@ -1,92 +0,0 @@
-import type Database from "better-sqlite3";
-import type { EventBus } from "./event-bus.js";
-import type { AgentActivity, PersistedEvent } from "./types.js";
-export declare const AGENT_ACTIVITY_FRESHNESS_MS: number;
-export interface HookActivityInput {
-    runtime: string | null;
-    sessionName?: string | null;
-    nodeId?: string | null;
-    hookEvent: string;
-    subtype?: string | null;
-    occurredAt?: string | null;
-    /** W2a-1 — the EMITTING occupant's generation, CARRIED source-bound on the hook (the producer/relay
-     *  supplies it at fire time; the route ingests it). NOT inferred from record-time state — that
-     *  inference mis-attributes a delayed prior-occupant hook to the live occupant. Absent on a legacy,
-     *  excluded, or no-tenure emitting path ⇒ stamped null ⇒ unresolved at read (never false-fresh). */
-    generation?: string | null;
-}
-export type RecordHookActivityResult = {
-    ok: true;
-    activity: AgentActivity;
-    event: PersistedEvent;
-} | {
-    ok: false;
-    code: "missing_session_identity" | "session_not_found";
-    error: string;
-};
-interface AgentActivityStoreDeps {
-    db: Database.Database;
-    eventBus: EventBus;
-    now?: () => Date;
-    freshnessMs?: number;
-    /** W2a-1 — resolve the LIVE occupant generation for a node (the shipped occupant-tenure
-     *  generation_uuid), or null when UNKNOWN. Injected (not self-constructed) so the store stays
-     *  decoupled from SessionRegistry and unit-testable with a fake. When ABSENT the store applies no
-     *  generation gate — legacy clock-only freshness — so the existing callers are unchanged until the
-     *  producer wiring injects the real resolver. Resolution is SYNCHRONOUS (a better-sqlite3 read),
-     *  which is why the gate lives inline in the sync read path with no signature churn to 9 callers. */
-    resolveOccupantGeneration?: (nodeId: string) => string | null;
-    /** Confirm that a carried generation is registered for this node. A side-effect-free reservation
-     * that never committed must remain unresolvable, not become positive mismatch evidence. */
-    isRegisteredOccupantGeneration?: (nodeId: string, generation: string) => boolean;
-}
-export declare class AgentActivityStore {
-    readonly db: Database.Database;
-    private readonly eventBus;
-    private readonly now;
-    private readonly freshnessMs;
-    private readonly resolveOccupantGeneration?;
-    private readonly isRegisteredOccupantGeneration?;
-    constructor(deps: AgentActivityStoreDeps);
-    recordHookEvent(input: HookActivityInput): RecordHookActivityResult;
-    getLatestForNode(input: {
-        nodeId?: string | null;
-        sessionName?: string | null;
-        now?: Date;
-    }): AgentActivity | null;
-    /** W2a-1 — the dead-tenure verdict: the claim's occupant generation is REGISTERED FOR THIS NODE and
-     *  DIFFERENT from the live generation. The membership gate runs before this helper, so an uncommitted
-     *  reservation can never manufacture a positive dead-tenure finding.
-     *  It must not be honored as the live seat. Returns unknown + `generation_mismatch`,
-     *  stale:true (detection fires), provenance `resolved` (both generations WERE resolved — they simply
-     *  differ). This is the ONLY generation case that abstains; a null on either side is UNRESOLVED
-     *  provenance and is DELIVERED labelled, never routed here. */
-    private generationMismatch;
-    /** W2a-1 — the UNRESOLVABLE-provenance verdict (ABSENCE of evidence, not a dead-tenure finding).
-     *  State UNKNOWN + a distinct reason + stale:true so no consumer reads it as verified-live (fresh is
-     *  a positive liveness claim). The STORE delivers the row carrying generationProvenance:"unresolved"
-     *  at the ACTIVITY layer; turning that label into a still-flowing CONSUMER row is the tap FOLLOW-ON
-     *  (verify-demotion, qitem-20260808183747-f7f04662) — the unchanged tap still discards it in the
-     *  INTERIM (a bounded regression, mint-race-transient exposure; mm2 has no occupant_tenures table
-     *  until 0.5.1). Kept DISTINCT from generationMismatch: ignorance and evidence get different verdicts,
-     *  and the paths must not collapse — at the store now, and at the tap when the follow-on lands. */
-    private generationUnresolved;
-    /** W2a-1 — the resolver-EXCEPTION verdict: the live-generation resolver threw (a transient ledger/db
-     *  fault). DEGRADE to unknown + a DISTINCT reason (`generation_resolver_error`) + stale:true, so the
-     *  read never crashes and the claim is never rendered fresh; provenance `unresolved`. Kept separate
-     *  from a clean null (unresolvable) so a resolver FAULT is distinguishable from an honest ABSENCE. */
-    private generationDegraded;
-    resolveSession(input: {
-        sessionName?: string | null;
-        nodeId?: string | null;
-        runtime?: string | null;
-    }): {
-        sessionId: string;
-        rigId: string;
-        nodeId: string;
-        sessionName: string;
-    } | null;
-    private _resolveSession;
-}
-export {};
-//# sourceMappingURL=agent-activity-store.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/agent-activity-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-activity-store.d.ts","sourceRoot":"","sources":["../../src/domain/agent-activity-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEhE,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AAEzD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;wGAGoG;IACpG,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,0BAA0B,GAAG,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzF,UAAU,sBAAsB;IAC9B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;yGAKqG;IACrG,yBAAyB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC9D;+FAC2F;IAC3F,8BAA8B,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;CAClF;AAaD,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAoC;IAC/E,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAkD;gBAEtF,IAAI,EAAE,sBAAsB;IASxC,eAAe,CAAC,KAAK,EAAE,iBAAiB,GAAG,wBAAwB;IAkDnE,gBAAgB,CAAC,KAAK,EAAE;QACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,GAAG,CAAC,EAAE,IAAI,CAAC;KACZ,GAAG,aAAa,GAAG,IAAI;IA8FxB;;;;;;mEAM+D;IAC/D,OAAO,CAAC,kBAAkB;IAa1B;;;;;;;uGAOmG;IACnG,OAAO,CAAC,oBAAoB;IAiB5B;;;0GAGsG;IACtG,OAAO,CAAC,kBAAkB;IAa1B,cAAc,CAAC,KAAK,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAUzL,OAAO,CAAC,eAAe;CAwBxB"}