@openrig/cli 0.6.11 → 0.6.12

package/daemon/dist/domain/provider/usage-windows.d.ts

@@ -0,0 +1,88 @@
+import type { ProviderKind, ProviderUsageAllowance, UsageRefreshOutcome, UsageWindowRow } from "./provider-types.js";
+/** A reading is too old to claim current capacity after this (Ops' openrig.subscription-usage.v1 rule). */
+export declare const USAGE_FRESH_FOR_MS: number;
+/** An observation up to this far in the future is clock skew within tolerance (same rule). */
+export declare const USAGE_CLOCK_TOLERANCE_MS = 60000;
+/** Whether two readings' reset times name the same window: equal, or within the clock tolerance. */
+export declare function sameReset(a: string | null, b: string | null): boolean;
+/** Unresolved observations can't be matched to earlier ones, so each read adds its own rows. Keep those
+ *  from the most recent few reads: enough to compare the latest with the two before it, and bounded
+ *  because nothing else ever removes them. */
+export declare const UNRESOLVED_READS_KEPT = 3;
+export interface UsageReadWindow {
+    /** The provider-native window name. */
+    window: string;
+    durationMins: number | null;
+    usedPercent: number | null;
+    resetsAt: string | null;
+}
+export interface UsageReading<I> {
+    identity: I;
+    windows: UsageReadWindow[];
+    limitEvidence: string | null;
+    observedAt: string;
+}
+/** A reader's outcome: the raw answers on success (normalizing is the provider spec's job), or a named failure. */
+export type UsageReadOutcome<R> = ({
+    ok: true;
+    observedAt: string;
+} & R) | {
+    ok: false;
+    at: string;
+    reason: string;
+    detail: string;
+};
+export interface UsageWindowsSpec<I extends {
+    source: string;
+}, R> {
+    provider: ProviderKind;
+    sourceKind: ProviderUsageAllowance["source"]["kind"];
+    read: () => Promise<UsageReadOutcome<R>>;
+    normalize: (answer: R & {
+        observedAt: string;
+    }) => {
+        ok: true;
+        readings: Array<UsageReading<I>>;
+    } | {
+        ok: false;
+        detail: string;
+    };
+    /** The replacement key of a resolved identity; null when unresolved (never matched or replaced). */
+    key: (identity: I) => string | null;
+    now?: () => string;
+}
+export interface UsageRefreshResult {
+    refresh: UsageRefreshOutcome & {
+        coalesced: boolean;
+    };
+}
+/** Freshness is aged from the window's own observation, never from the time of the request. A row a later
+ *  read superseded is stale whatever its age. */
+export declare function usageFreshness(observedAt: string, now: string, failedAfter: {
+    at: string;
+} | null, superseded?: boolean): Pick<UsageWindowRow, "freshness" | "freshnessReason">;
+/** Level of one window as of its observation. Absent data is never nearing or exhausted. */
+export declare function usageLevel(window: UsageReadWindow, limitEvidence: string | null, now: string): Pick<UsageWindowRow, "level" | "levelReason">;
+export declare const UNRESOLVED_NOTE = "identity unresolved: not matched to, merged with or replacing any other row";
+export declare const UNRESOLVED_EARLIER_NOTE = "identity unresolved: from an earlier read, possibly this same login; not matched to, merged with or replacing any other row";
+export declare class UsageWindows<I extends {
+    source: string;
+}, R> {
+    private readonly spec;
+    private readonly now;
+    private readonly startedAt;
+    private readonly readings;
+    /** Unresolved observations, grouped by read, newest last; at most UNRESOLVED_READS_KEPT reads. */
+    private unresolved;
+    private unresolvedDropped;
+    private lastRefresh;
+    private inflight;
+    constructor(spec: UsageWindowsSpec<I, R>);
+    /** One bounded read. A refresh asked for while one runs joins it; one asked for after it ends reads again. */
+    refresh(): Promise<UsageRefreshResult>;
+    private runRead;
+    private recordFailure;
+    /** The served rows. Reads memory only: it never starts a native read. */
+    project(now: string): ProviderUsageAllowance[];
+}
+//# sourceMappingURL=usage-windows.d.ts.map

package/daemon/dist/domain/provider/usage-windows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-windows.d.ts","sourceRoot":"","sources":["../../../src/domain/provider/usage-windows.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,YAAY,EACZ,sBAAsB,EACtB,mBAAmB,EACnB,cAAc,EACf,MAAM,qBAAqB,CAAC;AAE7B,2GAA2G;AAC3G,eAAO,MAAM,kBAAkB,QAAc,CAAC;AAC9C,8FAA8F;AAC9F,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAE/C,oGAAoG;AACpG,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAIrE;AAED;;8CAE8C;AAC9C,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC;IACZ,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,mHAAmH;AACnH,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAC1B,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,CAAC,CAAC,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,gBAAgB,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC;IAC/D,QAAQ,EAAE,YAAY,CAAC;IACvB,UAAU,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAClI,oGAAoG;IACpG,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,MAAM,GAAG,IAAI,CAAC;IACpC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,mBAAmB,GAAG;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;CACvD;AAED;iDACiD;AACjD,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAAE,UAAU,UAAQ,GACpH,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,iBAAiB,CAAC,CAetD;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAC3F,IAAI,CAAC,cAAc,EAAE,OAAO,GAAG,aAAa,CAAC,CAW9C;AAED,eAAO,MAAM,eAAe,gFAAgF,CAAC;AAC7G,eAAO,MAAM,uBAAuB,gIAAgI,CAAC;AAIrK,qBAAa,YAAY,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC;IAU3C,OAAO,CAAC,QAAQ,CAAC,IAAI;IATjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,kGAAkG;IAClG,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,WAAW,CAAoC;IACvD,OAAO,CAAC,QAAQ,CAA6C;gBAEhC,IAAI,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC;IAKzD,8GAA8G;IACxG,OAAO,IAAI,OAAO,CAAC,kBAAkB,CAAC;YAW9B,OAAO;IA4BrB,OAAO,CAAC,aAAa;IAKrB,yEAAyE;IACzE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB,EAAE;CA2D/C"}

package/daemon/dist/domain/provider/usage-windows.js

@@ -0,0 +1,189 @@
+// Slice 01 (OPR.0.7.0.1) — usage windows for the provider view, shared by every provider's native
+// reader. Holds each provider's last reading in memory, refreshes it only on request (one bounded read;
+// matching overlapping requests share it), and projects rows keyed by allowance identity with freshness
+// kept separate from level. A failed refresh never replaces a reading: the reading stays, with its own
+// time, marked old beside the failure. A row a later read superseded ages to stale. A daemon restart
+// starts empty.
+import { NEARING_THRESHOLD_PERCENT } from "./host-usage-rollup.js";
+/** A reading is too old to claim current capacity after this (Ops' openrig.subscription-usage.v1 rule). */
+export const USAGE_FRESH_FOR_MS = 15 * 60_000;
+/** An observation up to this far in the future is clock skew within tolerance (same rule). */
+export const USAGE_CLOCK_TOLERANCE_MS = 60_000;
+/** Whether two readings' reset times name the same window: equal, or within the clock tolerance. */
+export function sameReset(a, b) {
+    if (a === null || b === null)
+        return a === b;
+    const am = Date.parse(a), bm = Date.parse(b);
+    return Number.isFinite(am) && Number.isFinite(bm) ? Math.abs(am - bm) <= USAGE_CLOCK_TOLERANCE_MS : a === b;
+}
+/** Unresolved observations can't be matched to earlier ones, so each read adds its own rows. Keep those
+ *  from the most recent few reads: enough to compare the latest with the two before it, and bounded
+ *  because nothing else ever removes them. */
+export const UNRESOLVED_READS_KEPT = 3;
+/** Freshness is aged from the window's own observation, never from the time of the request. A row a later
+ *  read superseded is stale whatever its age. */
+export function usageFreshness(observedAt, now, failedAfter, superseded = false) {
+    const observedMs = Date.parse(observedAt);
+    const nowMs = Date.parse(now);
+    if (!Number.isFinite(observedMs) || !Number.isFinite(nowMs)) {
+        return { freshness: "unavailable", freshnessReason: "observation time unreadable" };
+    }
+    if (observedMs - nowMs > USAGE_CLOCK_TOLERANCE_MS) {
+        return { freshness: "unavailable", freshnessReason: "observed in the future beyond the 60 s clock tolerance" };
+    }
+    if (superseded)
+        return { freshness: "stale", freshnessReason: "a later read exists" };
+    if (failedAfter)
+        return { freshness: "stale", freshnessReason: `refresh failed at ${failedAfter.at}; this reading is older` };
+    if (nowMs - observedMs > USAGE_FRESH_FOR_MS) {
+        return { freshness: "stale", freshnessReason: `observed ${Math.round((nowMs - observedMs) / 60_000)} min ago (fresh for 15 min)` };
+    }
+    return { freshness: "fresh" };
+}
+/** Level of one window as of its observation. Absent data is never nearing or exhausted. */
+export function usageLevel(window, limitEvidence, now) {
+    if (window.usedPercent === null)
+        return { level: "unknown", levelReason: "no usage reported for this window" };
+    const resetMs = window.resetsAt === null ? NaN : Date.parse(window.resetsAt);
+    const nowMs = Date.parse(now);
+    if (Number.isFinite(resetMs) && Number.isFinite(nowMs) && nowMs >= resetMs) {
+        return { level: "unknown", levelReason: `reset passed at ${window.resetsAt}; a new reading is needed` };
+    }
+    if (window.usedPercent >= 100)
+        return { level: "exhausted", levelReason: "at the limit" };
+    if (limitEvidence !== null)
+        return { level: "exhausted", levelReason: `provider limit evidence: ${limitEvidence}` };
+    if (window.usedPercent >= NEARING_THRESHOLD_PERCENT)
+        return { level: "nearing", levelReason: `${NEARING_THRESHOLD_PERCENT}% or more used` };
+    return { level: "ok" };
+}
+export const UNRESOLVED_NOTE = "identity unresolved: not matched to, merged with or replacing any other row";
+export const UNRESOLVED_EARLIER_NOTE = "identity unresolved: from an earlier read, possibly this same login; not matched to, merged with or replacing any other row";
+export class UsageWindows {
+    spec;
+    now;
+    startedAt;
+    readings = new Map();
+    /** Unresolved observations, grouped by read, newest last; at most UNRESOLVED_READS_KEPT reads. */
+    unresolved = [];
+    unresolvedDropped = 0;
+    lastRefresh = null;
+    inflight = null;
+    constructor(spec) {
+        this.spec = spec;
+        this.now = spec.now ?? (() => new Date().toISOString());
+        this.startedAt = this.now();
+    }
+    /** One bounded read. A refresh asked for while one runs joins it; one asked for after it ends reads again. */
+    async refresh() {
+        if (this.inflight)
+            return { refresh: { ...(await this.inflight), coalesced: true } };
+        const run = this.runRead();
+        this.inflight = run;
+        try {
+            return { refresh: { ...(await run), coalesced: false } };
+        }
+        finally {
+            if (this.inflight === run)
+                this.inflight = null;
+        }
+    }
+    async runRead() {
+        let outcome;
+        try {
+            outcome = await this.spec.read();
+        }
+        catch (error) {
+            outcome = { ok: false, at: this.now(), reason: "spawn_failed", detail: `the reader failed: ${error instanceof Error ? error.message : String(error)}` };
+        }
+        if (!outcome.ok)
+            return this.recordFailure(outcome.at, outcome.reason, outcome.detail);
+        const normalized = this.spec.normalize(outcome);
+        if (!normalized.ok)
+            return this.recordFailure(outcome.observedAt, "unrecognized_shape", normalized.detail);
+        for (const reading of [...this.readings.values(), ...this.unresolved.flat()])
+            reading.latest = false;
+        const unresolvedNow = [];
+        for (const reading of normalized.readings) {
+            const key = this.spec.key(reading.identity);
+            if (key === null)
+                unresolvedNow.push({ ...reading, latest: true });
+            else
+                this.readings.set(key, { ...reading, latest: true });
+        }
+        if (unresolvedNow.length > 0) {
+            this.unresolved.push(unresolvedNow);
+            while (this.unresolved.length > UNRESOLVED_READS_KEPT) {
+                this.unresolved.shift();
+                this.unresolvedDropped += 1;
+            }
+        }
+        this.lastRefresh = { at: outcome.observedAt, outcome: "ok" };
+        return this.lastRefresh;
+    }
+    recordFailure(at, reason, detail) {
+        this.lastRefresh = { at, outcome: "failed", reason, detail };
+        return this.lastRefresh;
+    }
+    /** The served rows. Reads memory only: it never starts a native read. */
+    project(now) {
+        const provider = this.spec.provider;
+        const source = { kind: this.spec.sourceKind, host: "local" };
+        const failure = this.lastRefresh?.outcome === "failed" ? this.lastRefresh : null;
+        if (this.readings.size === 0 && this.unresolved.length === 0) {
+            return [{
+                    provider,
+                    identity: null,
+                    source,
+                    observedAt: null,
+                    seats: "unknown",
+                    windows: [],
+                    limitEvidence: null,
+                    latestFromSource: false,
+                    lastRefresh: this.lastRefresh,
+                    currentAvailability: "unknown",
+                    unavailableReason: failure
+                        ? `refresh failed at ${failure.at}: ${failure.reason}; no earlier reading since the daemon started at ${this.startedAt}`
+                        : `no reading since the daemon started at ${this.startedAt}; refresh with rig provider status --refresh`,
+                }];
+        }
+        const rows = [];
+        const resolved = [...this.readings.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([, reading]) => reading);
+        for (const reading of [...resolved, ...this.unresolved.flat()]) {
+            const failedAfter = failure && Date.parse(failure.at) >= Date.parse(reading.observedAt) ? failure : null;
+            const windows = reading.windows.map((w) => ({
+                window: w.window,
+                durationMins: w.durationMins,
+                usedPercent: w.usedPercent,
+                remainingPercent: w.usedPercent === null ? null : Math.max(0, 100 - w.usedPercent),
+                resetsAt: w.resetsAt,
+                observedAt: reading.observedAt,
+                ...usageLevel(w, reading.limitEvidence, now),
+                ...usageFreshness(reading.observedAt, now, failedAfter, !reading.latest),
+            }));
+            const known = reading.latest && failedAfter === null && windows.length > 0
+                && windows.every((w) => w.freshness === "fresh" && w.level !== "unknown");
+            rows.push({
+                provider,
+                identity: reading.identity,
+                source,
+                observedAt: reading.observedAt,
+                seats: "unknown",
+                windows,
+                limitEvidence: reading.limitEvidence,
+                latestFromSource: reading.latest,
+                lastRefresh: this.lastRefresh,
+                currentAvailability: known ? "known" : "unknown",
+                ...(reading.identity.source === "unresolved" ? {
+                    unresolved: {
+                        note: reading.latest ? UNRESOLVED_NOTE : UNRESOLVED_EARLIER_NOTE,
+                        keptReads: UNRESOLVED_READS_KEPT,
+                        droppedReads: this.unresolvedDropped,
+                    },
+                } : {}),
+            });
+        }
+        return rows;
+    }
+}
+//# sourceMappingURL=usage-windows.js.map

package/daemon/dist/domain/provider/usage-windows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-windows.js","sourceRoot":"","sources":["../../../src/domain/provider/usage-windows.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,wGAAwG;AACxG,wGAAwG;AACxG,uGAAuG;AACvG,qGAAqG;AACrG,gBAAgB;AAEhB,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAQnE,2GAA2G;AAC3G,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC9C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C,oGAAoG;AACpG,MAAM,UAAU,SAAS,CAAC,CAAgB,EAAE,CAAgB;IAC1D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,wBAAwB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC9G,CAAC;AAED;;8CAE8C;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAoCvC;iDACiD;AACjD,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,GAAW,EAAE,WAAkC,EAAE,UAAU,GAAG,KAAK;IAEpH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,6BAA6B,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,UAAU,GAAG,KAAK,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,wDAAwD,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,UAAU;QAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC;IACtF,IAAI,WAAW;QAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,qBAAqB,WAAW,CAAC,EAAE,yBAAyB,EAAE,CAAC;IAC9H,IAAI,KAAK,GAAG,UAAU,GAAG,kBAAkB,EAAE,CAAC;QAC5C,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,MAAM,CAAC,6BAA6B,EAAE,CAAC;IACrI,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,MAAuB,EAAE,aAA4B,EAAE,GAAW;IAE3F,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,mCAAmC,EAAE,CAAC;IAC/G,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,MAAM,CAAC,QAAQ,2BAA2B,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,IAAI,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;IAC1F,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,4BAA4B,aAAa,EAAE,EAAE,CAAC;IACpH,IAAI,MAAM,CAAC,WAAW,IAAI,yBAAyB;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,yBAAyB,gBAAgB,EAAE,CAAC;IAC5I,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,6EAA6E,CAAC;AAC7G,MAAM,CAAC,MAAM,uBAAuB,GAAG,6HAA6H,CAAC;AAIrK,MAAM,OAAO,YAAY;IAUM;IATZ,GAAG,CAAe;IAClB,SAAS,CAAS;IAClB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACvD,kGAAkG;IAC1F,UAAU,GAA0B,EAAE,CAAC;IACvC,iBAAiB,GAAG,CAAC,CAAC;IACtB,WAAW,GAA+B,IAAI,CAAC;IAC/C,QAAQ,GAAwC,IAAI,CAAC;IAE7D,YAA6B,IAA4B;QAA5B,SAAI,GAAJ,IAAI,CAAwB;QACvD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;IAED,8GAA8G;IAC9G,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;QACrF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,OAA4B,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC1J,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,oBAAoB,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3G,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;QACrG,MAAM,aAAa,GAAmB,EAAE,CAAC;QACzC,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC5C,IAAI,GAAG,KAAK,IAAI;gBAAE,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;;gBAC9D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;gBACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,aAAa,CAAC,EAAU,EAAE,MAAc,EAAE,MAAc;QAC9D,IAAI,CAAC,WAAW,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,yEAAyE;IACzE,OAAO,CAAC,GAAW;QACjB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACpC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,EAAW,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACjF,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC;oBACN,QAAQ;oBACR,QAAQ,EAAE,IAAI;oBACd,MAAM;oBACN,UAAU,EAAE,IAAI;oBAChB,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,EAAE;oBACX,aAAa,EAAE,IAAI;oBACnB,gBAAgB,EAAE,KAAK;oBACvB,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,mBAAmB,EAAE,SAAS;oBAC9B,iBAAiB,EAAE,OAAO;wBACxB,CAAC,CAAC,qBAAqB,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,oDAAoD,IAAI,CAAC,SAAS,EAAE;wBACxH,CAAC,CAAC,0CAA0C,IAAI,CAAC,SAAS,8CAA8C;iBAC3G,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAA6B,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;QACnH,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/D,MAAM,WAAW,GAAG,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACzG,MAAM,OAAO,GAAqB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5D,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,gBAAgB,EAAE,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,WAAW,CAAC;gBAClF,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,GAAG,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;gBAC5C,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;aACzE,CAAC,CAAC,CAAC;YACJ,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;mBACrE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC;gBACR,QAAQ;gBACR,QAAQ,EAAE,OAAO,CAAC,QAAyD;gBAC3E,MAAM;gBACN,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,SAAS;gBAChB,OAAO;gBACP,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,gBAAgB,EAAE,OAAO,CAAC,MAAM;gBAChC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,mBAAmB,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBAChD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC;oBAC7C,UAAU,EAAE;wBACV,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,uBAAuB;wBAChE,SAAS,EAAE,qBAAqB;wBAChC,YAAY,EAAE,IAAI,CAAC,iBAAiB;qBACrC;iBACF,CAAC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/daemon/dist/domain/queue-owner.d.ts

@@ -9,4 +9,10 @@ export declare function resolveSessionNodeId(db: Database.Database, session: str
  *  outside the recorded topology, or a parent with no session binding, resolves to null
  *  (there is no orchestrator session to wake — never synthesize one). */
 export declare function defaultResolveOrchestrator(db: Database.Database, session: string): string | null;
+/** A rig's representative, the seat a person's message to "the rig" reaches: the rig's one
+ *  delegation root, the node that delegates to others and that nothing delegates to, at its
+ *  CURRENT canonical session binding. Null when the rig name is ambiguous or absent, when the rig
+ *  has no such root or several, or when the root has no session; the caller falls back to its
+ *  configured destination rather than guessing. */
+export declare function resolveRigRepresentative(db: Database.Database, rigName: string): string | null;
 //# sourceMappingURL=queue-owner.d.ts.map

package/daemon/dist/domain/queue-owner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue-owner.d.ts","sourceRoot":"","sources":["../../src/domain/queue-owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C;;;sFAGsF;AACtF,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK1F;AAED;;;yEAGyE;AACzE,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAahG"}
+{"version":3,"file":"queue-owner.d.ts","sourceRoot":"","sources":["../../src/domain/queue-owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C;;;sFAGsF;AACtF,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK1F;AAED;;;yEAGyE;AACzE,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAahG;AAED;;;;mDAImD;AACnD,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgB9F"}

package/daemon/dist/domain/queue-owner.js

@@ -25,4 +25,26 @@ export function defaultResolveOrchestrator(db, session) {
         .get(nodeId);
     return row?.parentSession ?? null;
 }
+/** A rig's representative, the seat a person's message to "the rig" reaches: the rig's one
+ *  delegation root, the node that delegates to others and that nothing delegates to, at its
+ *  CURRENT canonical session binding. Null when the rig name is ambiguous or absent, when the rig
+ *  has no such root or several, or when the root has no session; the caller falls back to its
+ *  configured destination rather than guessing. */
+export function resolveRigRepresentative(db, rigName) {
+    const rigs = db.prepare("SELECT id FROM rigs WHERE name = ?").all(rigName);
+    if (rigs.length !== 1)
+        return null;
+    const roots = db
+        .prepare(`SELECT n.id AS nodeId FROM nodes n
+        WHERE n.rig_id = ?
+          AND EXISTS (SELECT 1 FROM edges e WHERE e.source_id = n.id AND e.kind = 'delegates_to')
+          AND NOT EXISTS (SELECT 1 FROM edges e WHERE e.target_id = n.id AND e.kind = 'delegates_to')`)
+        .all(rigs[0].id);
+    if (roots.length !== 1)
+        return null;
+    const row = db
+        .prepare("SELECT session_name FROM sessions WHERE node_id = ? ORDER BY id DESC LIMIT 1")
+        .get(roots[0].nodeId);
+    return row?.session_name ?? null;
+}
 //# sourceMappingURL=queue-owner.js.map

package/daemon/dist/domain/queue-owner.js.map

@@ -1 +1 @@
-{"version":3,"file":"queue-owner.js","sourceRoot":"","sources":["../../src/domain/queue-owner.ts"],"names":[],"mappings":"AAEA;;;sFAGsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,EAAqB,EAAE,OAAe;IACzE,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,8EAA8E,CAAC;SACvF,GAAG,CAAC,OAAO,CAAoC,CAAC;IACnD,OAAO,GAAG,EAAE,OAAO,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED;;;yEAGyE;AACzE,MAAM,UAAU,0BAA0B,CAAC,EAAqB,EAAE,OAAe;IAC/E,MAAM,MAAM,GAAG,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN;;;;gBAIU,CACX;SACA,GAAG,CAAC,MAAM,CAA0C,CAAC;IACxD,OAAO,GAAG,EAAE,aAAa,IAAI,IAAI,CAAC;AACpC,CAAC"}
+{"version":3,"file":"queue-owner.js","sourceRoot":"","sources":["../../src/domain/queue-owner.ts"],"names":[],"mappings":"AAEA;;;sFAGsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,EAAqB,EAAE,OAAe;IACzE,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,8EAA8E,CAAC;SACvF,GAAG,CAAC,OAAO,CAAoC,CAAC;IACnD,OAAO,GAAG,EAAE,OAAO,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED;;;yEAGyE;AACzE,MAAM,UAAU,0BAA0B,CAAC,EAAqB,EAAE,OAAe;IAC/E,MAAM,MAAM,GAAG,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN;;;;gBAIU,CACX;SACA,GAAG,CAAC,MAAM,CAA0C,CAAC;IACxD,OAAO,GAAG,EAAE,aAAa,IAAI,IAAI,CAAC;AACpC,CAAC;AAED;;;;mDAImD;AACnD,MAAM,UAAU,wBAAwB,CAAC,EAAqB,EAAE,OAAe;IAC7E,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,OAAO,CAA0B,CAAC;IACpG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,EAAE;SACb,OAAO,CACN;;;sGAGgG,CACjG;SACA,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,EAAE,CAA8B,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,8EAA8E,CAAC;SACvF,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,CAAyC,CAAC;IACjE,OAAO,GAAG,EAAE,YAAY,IAAI,IAAI,CAAC;AACnC,CAAC"}

package/daemon/dist/domain/queue-repository.d.ts

@@ -2,8 +2,8 @@ import type Database from "better-sqlite3";
 import type { EventBus } from "./event-bus.js";
 import { type LoadResult } from "./gateway/human-registry.js";
 import type { PersistedEvent } from "./types.js";
-import { QueueTransitionLog, type RecentQueueTransitionScope } from "./queue-transition-log.js";
-import { type OutboxHandler } from "./outbox-handler.js";
+import { QueueTransitionLog, type QueueTransition, type RecentQueueTransitionScope } from "./queue-transition-log.js";
+import { type OutboxHandler, type OutboxEntry } from "./outbox-handler.js";
 import { type PickupReceipt } from "./queue-pickup.js";
 import { type WaitingView, type WaitingActivityReader } from "./queue-waiting.js";
 import { type ReplyToChoice } from "./reply-to-choice.js";
@@ -169,6 +169,8 @@ export interface QueueItem {
 export interface QueueNudgeTransport {
     deliveryTarget?(session: string): import("./seat-delivery-guard.js").GuardTarget | null;
     retentionTarget?(session: string): import("./seat-delivery-guard.js").GuardTarget | null;
+    draftAwareTarget?(session: string): import("./seat-delivery-guard.js").GuardTarget | null;
+    configureGuardedWakes?(applicable: (entries: readonly OutboxEntry[]) => boolean): void;
     send(sessionName: string, text: string, opts?: {
         verify?: boolean;
         stampISO?: string;
@@ -176,12 +178,16 @@ export interface QueueNudgeTransport {
         committedOutboxIds?: string[];
         deliveryId?: string;
         auditPointer?: string;
+        queueWake?: boolean;
     }): Promise<{
         ok: boolean;
         verified?: boolean;
         error?: string;
         reason?: string;
         outcome?: string;
+        delivery?: {
+            state: string;
+        };
     }>;
 }
 export interface QueueCreateInput {
@@ -249,6 +255,9 @@ export interface QueueUpdateInput {
     transitionNote?: string;
     closureReason?: string;
     closureTarget?: string;
+    /** The outcome stored in queue_items.resolution when this update closes a row that is still open;
+     *  appended after anything the row already carries. Ignored on every other update. */
+    resolution?: string;
     /**
      * PL-004 Phase D extension: when set, persists the queue_items.handed_off_to
      * column. Used by workflow-projector for state=handed-off transitions so
@@ -390,6 +399,15 @@ export declare function isQitemPrimaryKeyConflict(err: unknown): boolean;
 export declare function deriveCrossHostSuccessorId(sourceQitemId: string, destinationSession: string, hostId: string): string;
 /** The retained next owner must describe this closure, not a handoff before a reopen. */
 export declare function matchesRecordedHandoffTarget(qitemId: string, handedOffTo: string | null, closureTarget: string | null): boolean;
+/**
+ * Shared read-only lineage helper for handoff advisory and stuck sweep.
+ * Checks whether a local successor item exists matching target (by qitem_id or destination_session)
+ * linked to sourceQitemId (via handed_off_from or chain_of_record membership).
+ *
+ * Excludes source row itself (s.qitem_id != sourceQitemId). Guards chain_of_record with json_valid.
+ * Throws on database/query errors so callers can handle lookup failures with their own policies.
+ */
+export declare function hasLinkedSuccessor(db: Database.Database, sourceQitemId: string, target: string): boolean;
 /**
  * L3 — Queue repository. Owns CRUD over `queue_items` plus the wired-in
  * append-only transition log and hot-potato strict-rejection contract.
@@ -440,14 +458,6 @@ export declare function stampSelfHostSuffix(session: string | undefined): string
  * the FR-8 parse contract; the parse family stays byte-identical (C3).
  */
 export declare function destinationRigTeaching(session: string): Record<string, unknown> | undefined;
-/**
- * M1 A4b — entity-level teaching for an UNREGISTERED <local>@external destination (the
- * ENTITY half of proof-2; the DOMAIN half is the closed-set fall-through to
- * unknown_destination_rig, A1/A2). A row addressed to a valid @external domain whose
- * entity is not in the registry refuses LOUDLY with the structured teaching from the
- * gateway resolver (how to register + "not an agent seat"). Loads the registry only for
- * the (rare) @external refusal path. Undefined for non-@external / registered / scheme.
- */
 export declare function externalAdmissionTeaching(session: string, loadRegistry?: () => LoadResult): Record<string, unknown> | undefined;
 /** The refusal teaching for ANY rejected destination: the @external entity teaching
  *  (A4b) OR the host-suffix teaching (4b). One helper, all four refusal sites. */
@@ -553,6 +563,8 @@ export declare class QueueRepository {
      * handoff / handoff-and-complete will start nudging on the next call.
      */
     attachTransport(transport: QueueNudgeTransport): void;
+    private currentWakeIntent;
+    private classifyWakeResult;
     /**
      * W1 (transactional closure): attach the durable wake-intent store AFTER
      * construction (same dep-graph reason as {@link attachTransport}). Once
@@ -804,6 +816,8 @@ export declare class QueueRepository {
         /** `handed-off` for /handoff; `done` for /handoff-and-complete. */
         terminalState: "handed-off" | "done";
         transitionNote?: string;
+        /** The sender's recorded provenance, as the local handoff records it. Null only for an in-process caller. */
+        identityProvenance?: string | null;
     }): {
         item: QueueItem;
         absorbed: boolean;
@@ -920,6 +934,8 @@ export declare class QueueRepository {
     private retireParkGeneratedTimer;
     private propagateBlockerCompletion;
     getParkWakeStatus(qitemId: string): ParkWakeStatus | null;
+    /** For parked diagnosis only (see QueueWakeRepository.servedByOwnRepeatingReminder). */
+    parkWakeServedByOwnReminder(qitemId: string): boolean;
     /** Park timers a seat swap keeps: each is still its blocked row's current wake and still targets the
      *  row's owner (see QueueWakeRepository.currentParkTimerIds). */
     currentParkTimerIds(): string[];
@@ -931,6 +947,10 @@ export declare class QueueRepository {
     listTransitions(qitemId: string): Array<ReturnType<QueueTransitionLog["listForQitem"]>[number] & {
         wake?: ReturnType<QueueWakeRepository["getForTransition"]>;
     }>;
+    /** The transition that closed a row: the first of the trailing run in its current closed state.
+     *  Later notes and delivery receipts on a closed row repeat that state, so the latest transition
+     *  is not the close. Null while the row is still active (pending, in-progress, blocked). */
+    closingTransition(qitemId: string, currentState: string): ReturnType<QueueTransitionLog["listForQitem"]>[number] | null;
     /** Read-only scope-aware RECENT projection. Normalization and its hard cap
      * live with the append-only transition log; the repository owns the public
      * queue-domain door. */
@@ -971,8 +991,21 @@ export declare class QueueRepository {
     replyToChoiceFor(qitemId: string): ReplyToChoice | null;
     /** #96 — whether some update recorded this Slack root as the thread it posts into. Such a
      *  root is shared: its owner's next decision must not reuse it (see slack-subsystem). */
-    isReplyToThread(threadTs: string): boolean;
+    isReplyToThread(threadTs: string, where?: {
+        channel: string;
+    }): boolean;
+    /** #96 — the rows whose recorded choice threads into this ts without naming a channel. Such a choice
+     *  was made for the default channel of its day, which may have changed since, so the note alone
+     *  can't say which root it took; the caller checks where each row's post landed (its recorded parts). */
+    unnamedReplyToChoiceRows(threadTs: string): string[];
     private replyToFallbackFor;
+    /** The parked query's obligation face: open rows to one destination, newest first, without the per-row
+     *  projections list() derives (pickup, waiting view, delivery ledger), which this read never uses. */
+    listOpenObligations(destinationSession: string, limit: number): Array<{
+        qitemId: string;
+        state: "pending" | "in-progress" | "blocked";
+        summary: string | null;
+    }>;
     list(opts: QueueListOptions & {
         compact: true;
     }): CompactQueueItem[];
@@ -1076,7 +1109,8 @@ export declare class QueueRepository {
      *  cannot carry classification evidence (empty/partial bootstrap schemas). */
     private hasTerminalTransport;
     /** Null means legacy/no OWNER history; inactive means OWNER history exists
-     *  but the row no longer projects a current human-notification episode. */
+     *  but the row no longer projects a current human-notification episode.
+     *  owners: the row's owner notifications, newest first. */
     private currentDeliveryEpisode;
     /** OPR.0.5.6.14 — derive the current episode's delivery ledger. Receipt
      *  transitions are same-row but keyed by qitemId:OWNER-transitionId; an old
@@ -1090,12 +1124,39 @@ export declare class QueueRepository {
      *  to a registered human, aliases included) has a POSTED receipt. Legacy rows with no OWNER
      *  history, inactive episodes, never-posted and transport-failed all read false. Same derivation
      *  as deliveryOutcomeFor; it reads row fields, never the waiting view. */
-    humanNotificationPostedThisEpisode(qitemId: string): boolean;
+    humanNotificationPostedThisEpisode(qitemId: string, listed?: ListedLedger): boolean;
+    /** owners: the row's owner notifications as ownerNotificationsForQitems gives them, when the caller read them. */
     private deliveryLedger;
+    private receiptNotesStatement?;
+    /** The delivery ledger of each row, its reads batched: one read of the rows' owner notifications (unless the caller
+     *  read them already), one of their receipts, the human registry loaded once at most. A single row's
+     *  (deliveryOutcomeFor, show, the sweeps) is a batch of one. receiptsAfterEpisodes: read the receipts once the
+     *  episodes (and so the registry) are worked out, as a single row's ledger does; a listing reads them before. */
+    private deliveryOutcomesFor;
+    /** The delivery receipt notes of these qitems, newest first, by qitem. */
+    private receiptNotesFor;
+    /** The ledger of one row's current episode, from its receipt notes (newest first). */
+    private ledgerOf;
     /** The grace window before a receiptless gateway-routed row honestly reads
      *  never-posted (the connector sweep cadence bounds normal posting latency). */
     static readonly NEVER_POSTED_WINDOW_MS = 120000;
     recordNudgeAttempt(qitemId: string, result: string): void;
+    /**
+     * Where, in the row's `resolution`, the fallback line `routeToFallback` last wrote begins; null when it cannot be
+     * told, and the field is then left whole. The row's own transitions say what that reroute printed: a newest-first
+     * seek by row on the live log, then on the archive the retention sweep moves an aged closed row's transitions to,
+     * stopping at the reroute's own transition (the in-process one, with no identity provenance), whose note is `fallback-routed: <from> → <to> (<reason>)`. The line is
+     * `fallback: <reason>`, built from the same printed reason, so it starts at a line start `i` of the field with
+     * `fallback: ` there and the rest of the field, `r`, satisfying note ends with ` (r)`. Neither the destinations nor
+     * the chain are consulted, so how a value was stored cannot matter. At most one `i` can satisfy it when the field
+     * ends with that line: a longer `r` would have to be preceded in the note by ` (`, and a shorter one starts inside the
+     * reason, right after a newline, which is not ` (`.
+     *
+     * A close that came after that reroute from an open state may have appended an outcome behind the line, and an
+     * outcome can read like the line, so then only a field that is nothing but the line (`i` = 0, which an appended
+     * outcome would lengthen) is accepted.
+     */
+    private fallbackLineStart;
     /**
      * Pod-fallback: redirect qitem to a fallback destination (e.g., when a seat
      * is unreachable). Emits qitem.fallback_routed; preserves chain_of_record.
@@ -1132,9 +1193,23 @@ export declare class QueueRepository {
         jobId: string;
     }): import("./policies/types.js").PolicyEvaluation | null;
     ownerActivity(session: string): ReturnType<WaitingActivityReader>;
-    waitingView(qitemId: string): WaitingView | null;
+    /** listed: the row's owner notifications and ledger, when a listing read them for all its rows. */
+    waitingView(qitemId: string, listed?: ListedLedger): WaitingView | null;
     private handoffAdvisory;
     private rowToItem;
 }
+type DeliveryLedger = {
+    outcome: "posted" | "transport-failed" | "never-posted";
+    detail: string;
+    episode: {
+        notificationKey: string;
+        startedAt: string;
+    } | null;
+};
+/** A listed row's owner notifications (newest first) and its delivery ledger, read once for the whole listing. */
+type ListedLedger = {
+    owners: QueueTransition[];
+    ledger: DeliveryLedger | null;
+};
 export {};
 //# sourceMappingURL=queue-repository.d.ts.map