@openrig/cli 0.6.4 → 0.6.6

package/daemon/dist/domain/mission-control/mission-control-read-layer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mission-control-read-layer.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/mission-control-read-layer.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAyB,MAAM,wBAAwB,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,oBAAoB,CAAC;AAClE,OAAO,KAAK,EAAE,gCAAgC,EAAkB,MAAM,2CAA2C,CAAC;AAElH,eAAO,MAAM,qBAAqB,uHAQxB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;IAChE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,cAAc,GAAG,IAAI,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzB;;;OAGG;IACH,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED,UAAU,aAAa;IACrB,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,SAAS,EAAE,eAAe,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,kBAAkB,EAAE,gCAAgC,CAAC;IACrD,4DAA4D;IAC5D,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAeD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAmC;IACtE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAS;gBAEpC,IAAI,EAAE,aAAa;IAQ/B;;;mEAG+D;IAC/D,yBAAyB,IAAI,MAAM;IAM7B,QAAQ,CACZ,QAAQ,EAAE,sBAAsB,EAChC,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,wBAAwB,CAAC;IAmBpC,OAAO,CAAC,WAAW;IAkBnB,OAAO,CAAC,aAAa;YAaP,SAAS;IAevB,OAAO,CAAC,cAAc;IAkBtB,OAAO,CAAC,eAAe;IAcvB,OAAO,CAAC,kBAAkB;IAa1B,OAAO,CAAC,sBAAsB;CAgB/B"}
+{"version":3,"file":"mission-control-read-layer.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/mission-control-read-layer.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAyB,MAAM,wBAAwB,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,oBAAoB,CAAC;AAClE,OAAO,KAAK,EAAE,gCAAgC,EAAkB,MAAM,2CAA2C,CAAC;AAElH,eAAO,MAAM,qBAAqB,uHAQxB,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;IAChE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,EAAE,MAAM,GAAG,cAAc,GAAG,cAAc,GAAG,IAAI,CAAC;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzB;;;OAGG;IACH,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED,UAAU,aAAa;IACrB,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,SAAS,EAAE,eAAe,CAAC;IAC3B,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,kBAAkB,EAAE,gCAAgC,CAAC;IACrD,4DAA4D;IAC5D,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAeD,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAmC;IACtE,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAS;gBAEpC,IAAI,EAAE,aAAa;IAQ/B;;;mEAG+D;IAC/D,yBAAyB,IAAI,MAAM;IAM7B,QAAQ,CACZ,QAAQ,EAAE,sBAAsB,EAChC,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC,wBAAwB,CAAC;IAmBpC,OAAO,CAAC,WAAW;IAkBnB,OAAO,CAAC,aAAa;YAaP,SAAS;IAgBvB,OAAO,CAAC,cAAc;IAkBtB,OAAO,CAAC,eAAe;IAcvB,OAAO,CAAC,kBAAkB;IAa1B,OAAO,CAAC,sBAAsB;CAmB/B"}

package/daemon/dist/domain/mission-control/mission-control-read-layer.js

@@ -4,8 +4,7 @@
 //   - my-queue            → queue_items where destination_session = operator
 //                            AND tier='human-gate'
 //   - human-gate          → queue_items where tier='human-gate'
-//   - fleet               → shell out to `rig ps --nodes -A --json` (graceful
-//                            degradation per 4-sub-clause spec)
+//   - fleet               → daemon rig registry + queue, with optional CLI observations
 //   - active-work         → queue_items where state in (pending, in-progress,
 //                            blocked) sorted by priority
 //   - recent-ships        → queue_items where state in (done, handed-off)
@@ -122,6 +121,7 @@ export class MissionControlReadLayer {
             meta: {
                 rowCount: rows.length,
                 rigsRunningStaleCli: fleet.staleCliCount,
+                rigsWithUnknownCliCapabilities: fleet.unknownCliCount,
                 degradedFields: fleet.degradedFields.length > 0 ? fleet.degradedFields : undefined,
                 sourceFallback: fleet.sourceFallback ?? undefined,
             },
@@ -176,7 +176,10 @@ export class MissionControlReadLayer {
                 meta: { rowCount: 0, sourceFallback: "stream-store-not-wired" },
             };
         }
-        const items = this.streamStore.list({ limit: RECENT_OBSERVATIONS_LIMIT });
+        const items = this.streamStore.list({
+            limit: RECENT_OBSERVATIONS_LIMIT,
+            direction: "latest",
+        });
         const rows = items.map((s) => streamItemToCompactRow(s));
         return {
             viewName: "recent-observations",

package/daemon/dist/domain/mission-control/mission-control-read-layer.js.map

@@ -1 +1 @@
-{"version":3,"file":"mission-control-read-layer.js","sourceRoot":"","sources":["../../../src/domain/mission-control/mission-control-read-layer.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,oDAAoD;AACpD,6EAA6E;AAC7E,mDAAmD;AACnD,gEAAgE;AAChE,8EAA8E;AAC9E,gEAAgE;AAChE,8EAA8E;AAC9E,yDAAyD;AACzD,0EAA0E;AAC1E,+DAA+D;AAC/D,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,kDAAkD;AAClD,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,oBAAoB;AAEpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAOjE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU;IACV,YAAY;IACZ,OAAO;IACP,aAAa;IACb,cAAc;IACd,iBAAiB;IACjB,qBAAqB;CACb,CAAC;AAiEX,iFAAiF;AACjF,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAErC,MAAM,aAAa,GAA2B;IAC5C,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,OAAO,EAAE,CAAC;IACV,UAAU,EAAE,CAAC;CACd,CAAC;AAEF,MAAM,OAAO,uBAAuB;IACjB,SAAS,CAAkB;IAC3B,aAAa,CAAgB;IAC7B,WAAW,CAA0B;IACrC,kBAAkB,CAAmC;IACrD,sBAAsB,CAAS;IAEhD,YAAY,IAAmB;QAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC;IAClE,CAAC;IAED;;;mEAG+D;IAC/D,yBAAyB;QACvB,IAAI,IAAI,CAAC,sBAAsB;YAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC;QACpE,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,QAAgC,EAChC,IAAmC;QAEnC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,eAAe,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC,CAAC;YACrF,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9B,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/B,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;YAChC,KAAK,iBAAiB;gBACpB,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnC,KAAK,qBAAqB;gBACxB,OAAO,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,eAAuB;QACzC,IAAI,CAAC,eAAe;YAAE,OAAO;gBAC3B,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;gBAC9B,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,yGAAyG,CAAC,EAAE;aACnJ,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAChC,kBAAkB,EAAE,eAAe;YACnC,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC;YAC5C,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QACnE,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC;YAClF,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,EAAE;SACzC,CAAC;IACJ,CAAC;IAEO,aAAa;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAChC,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC;YAC5C,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QACnE,OAAO;YACL,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC;YAClF,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,EAAE;SACzC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAuB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,IAAI;YACJ,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI,CAAC,MAAM;gBACrB,mBAAmB,EAAE,KAAK,CAAC,aAAa;gBACxC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;gBAClF,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,SAAS;aAClD;SACF,CAAC;IACJ,CAAC;IAEO,cAAc;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAChC,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC;YAC5C,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAClB,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,EAAE,KAAK,EAAE;gBAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;YAClE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE;SACjC,CAAC;IACJ,CAAC;IAEO,eAAe;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC/B,KAAK,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;YAC7B,KAAK,EAAE,kBAAkB,GAAG,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC9C,OAAO;YACL,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC;YACxE,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;SAC/B,CAAC;IACJ,CAAC;IAEO,kBAAkB;QACxB,iEAAiE;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAuB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACvD,0BAA0B,CAAC,iBAAiB,EAAE,GAAG,CAAC,CACnD,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,iBAAiB;YAC3B,IAAI;YACJ,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;SAChC,CAAC;IACJ,CAAC;IAEO,sBAAsB;QAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO;gBACL,QAAQ,EAAE,qBAAqB;gBAC/B,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,wBAAwB,EAAE;aAChE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAiB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,OAAO;YACL,QAAQ,EAAE,qBAAqB;YAC/B,IAAI;YACJ,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;SAChC,CAAC;IACJ,CAAC;CACF;AAED,SAAS,UAAU,CACjB,CAAY,EACZ,IAAuD;IAEvD,MAAM,KAAK,GAAG,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9F,OAAO;QACL,gBAAgB,EAAE,CAAC,CAAC,kBAAkB;QACtC,YAAY,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;QAC5B,KAAK;QACL,UAAU;QACV,oBAAoB;QACpB,QAAQ,EAAE,IAAI,CAAC,eAAe;QAC9B,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,mBAAmB,EAAE,CAAC,CAAC,QAAQ;QAC/B,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,YAAY,EAAE,CAAC,CAAC,aAAa;QAC7B,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QACnC,SAAS,EAAE,CAAC,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,OAAO,CAAC;IAC1C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC;AACjD,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAiB;IACjD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY;YACf,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAiB;IAC7C,OAAO;QACL,gBAAgB,EAAE,CAAC,CAAC,OAAO;QAC3B,YAAY,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;QACtC,KAAK,EAAE,CAAC,CAAC,aAAa;QACtB,UAAU,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;QACrC,oBAAoB,EAAE,IAAI;QAC1B,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,mBAAmB,EAAE,CAAC,CAAC,eAAe;QACtC,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,CAAC,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,QAAgB,EAChB,GAA4B;IAE5B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAiB,EAAE;QACvC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC;IACF,OAAO;QACL,gBAAgB,EACd,GAAG,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,QAAQ;QAC7E,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI;QACjD,KAAK,EAAE,MAAM;QACb,UAAU,EAAE,IAAI;QAChB,oBAAoB,EAAE,IAAI;QAC1B,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC9E,mBAAmB,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI;QAC5C,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC;QACxB,YAAY,EAAE,GAAG,CAAC,gBAAgB,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAa;IAC3C,OAAO;QACL,gBAAgB,EAAE,CAAC,CAAC,aAAa;QACjC,YAAY,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;QAChC,KAAK,EAAE,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;QAC1D,UAAU,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;QACrC,oBAAoB,EAAE,IAAI;QAC1B,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,mBAAmB,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;QAC1C,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,CAAC,CAAC,YAAY;KAC7B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"mission-control-read-layer.js","sourceRoot":"","sources":["../../../src/domain/mission-control/mission-control-read-layer.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,oDAAoD;AACpD,6EAA6E;AAC7E,mDAAmD;AACnD,gEAAgE;AAChE,wFAAwF;AACxF,8EAA8E;AAC9E,yDAAyD;AACzD,0EAA0E;AAC1E,+DAA+D;AAC/D,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,kDAAkD;AAClD,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,oBAAoB;AAEpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAOjE,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,UAAU;IACV,YAAY;IACZ,OAAO;IACP,aAAa;IACb,cAAc;IACd,iBAAiB;IACjB,qBAAqB;CACb,CAAC;AAkEX,iFAAiF;AACjF,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAErC,MAAM,aAAa,GAA2B;IAC5C,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,CAAC;IACP,OAAO,EAAE,CAAC;IACV,UAAU,EAAE,CAAC;CACd,CAAC;AAEF,MAAM,OAAO,uBAAuB;IACjB,SAAS,CAAkB;IAC3B,aAAa,CAAgB;IAC7B,WAAW,CAA0B;IACrC,kBAAkB,CAAmC;IACrD,sBAAsB,CAAS;IAEhD,YAAY,IAAmB;QAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,CAAC;QAClD,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC;IAClE,CAAC;IAED;;;mEAG+D;IAC/D,yBAAyB;QACvB,IAAI,IAAI,CAAC,sBAAsB;YAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC;QACpE,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,QAAgC,EAChC,IAAmC;QAEnC,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,UAAU;gBACb,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,eAAe,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC,CAAC;YACrF,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9B,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/B,KAAK,cAAc;gBACjB,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;YAChC,KAAK,iBAAiB;gBACpB,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnC,KAAK,qBAAqB;gBACxB,OAAO,IAAI,CAAC,sBAAsB,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,eAAuB;QACzC,IAAI,CAAC,eAAe;YAAE,OAAO;gBAC3B,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;gBAC9B,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,yGAAyG,CAAC,EAAE;aACnJ,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAChC,kBAAkB,EAAE,eAAe;YACnC,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC;YAC5C,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QACnE,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC;YAClF,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,EAAE;SACzC,CAAC;IACJ,CAAC;IAEO,aAAa;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAChC,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC;YAC5C,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QACnE,OAAO;YACL,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC;YAClF,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,EAAE;SACzC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAuB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,IAAI;YACJ,IAAI,EAAE;gBACJ,QAAQ,EAAE,IAAI,CAAC,MAAM;gBACrB,mBAAmB,EAAE,KAAK,CAAC,aAAa;gBACxC,8BAA8B,EAAE,KAAK,CAAC,eAAe;gBACrD,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;gBAClF,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,SAAS;aAClD;SACF,CAAC;IACJ,CAAC;IAEO,cAAc;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAChC,KAAK,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC;YAC5C,KAAK,EAAE,iBAAiB;SACzB,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAClB,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,EAAE,KAAK,EAAE;gBAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,OAAO;YACL,QAAQ,EAAE,aAAa;YACvB,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;YAClE,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE;SACjC,CAAC;IACJ,CAAC;IAEO,eAAe;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC/B,KAAK,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;YAC7B,KAAK,EAAE,kBAAkB,GAAG,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC9C,OAAO;YACL,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC;YACxE,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE;SAC/B,CAAC;IACJ,CAAC;IAEO,kBAAkB;QACxB,iEAAiE;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAuB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACvD,0BAA0B,CAAC,iBAAiB,EAAE,GAAG,CAAC,CACnD,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,iBAAiB;YAC3B,IAAI;YACJ,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;SAChC,CAAC;IACJ,CAAC;IAEO,sBAAsB;QAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO;gBACL,QAAQ,EAAE,qBAAqB;gBAC/B,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,cAAc,EAAE,wBAAwB,EAAE;aAChE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAiB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAChD,KAAK,EAAE,yBAAyB;YAChC,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,OAAO;YACL,QAAQ,EAAE,qBAAqB;YAC/B,IAAI;YACJ,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE;SAChC,CAAC;IACJ,CAAC;CACF;AAED,SAAS,UAAU,CACjB,CAAY,EACZ,IAAuD;IAEvD,MAAM,KAAK,GAAG,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9F,OAAO;QACL,gBAAgB,EAAE,CAAC,CAAC,kBAAkB;QACtC,YAAY,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;QAC5B,KAAK;QACL,UAAU;QACV,oBAAoB;QACpB,QAAQ,EAAE,IAAI,CAAC,eAAe;QAC9B,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,mBAAmB,EAAE,CAAC,CAAC,QAAQ;QAC/B,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,YAAY,EAAE,CAAC,CAAC,aAAa;QAC7B,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QACnC,SAAS,EAAE,CAAC,CAAC,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,OAAO,CAAC;IAC1C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC;AACjD,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAiB;IACjD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY;YACf,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAiB;IAC7C,OAAO;QACL,gBAAgB,EAAE,CAAC,CAAC,OAAO;QAC3B,YAAY,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;QACtC,KAAK,EAAE,CAAC,CAAC,aAAa;QACtB,UAAU,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;QACrC,oBAAoB,EAAE,IAAI;QAC1B,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,mBAAmB,EAAE,CAAC,CAAC,eAAe;QACtC,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,CAAC,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,QAAgB,EAChB,GAA4B;IAE5B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAiB,EAAE;QACvC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC;IACF,OAAO;QACL,gBAAgB,EACd,GAAG,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,QAAQ;QAC7E,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI;QACjD,KAAK,EAAE,MAAM;QACb,UAAU,EAAE,IAAI;QAChB,oBAAoB,EAAE,IAAI;QAC1B,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC9E,mBAAmB,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI;QAC5C,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC;QACxB,YAAY,EAAE,GAAG,CAAC,gBAAgB,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAa;IAC3C,OAAO;QACL,gBAAgB,EAAE,CAAC,CAAC,aAAa;QACjC,YAAY,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;QAChC,KAAK,EAAE,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;QAC1D,UAAU,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;QACrC,oBAAoB,EAAE,IAAI;QAC1B,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,mBAAmB,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;QAC1C,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,CAAC,CAAC,YAAY;KAC7B,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/mission-control/notification-adapter-ntfy.d.ts

@@ -7,11 +7,16 @@ export interface NtfyAdapterOpts {
     topicUrl: string;
     /** Optional fetch override for tests. */
     fetchImpl?: typeof fetch;
+    /** Optional logger for startup warnings. Defaults to console.warn. */
+    warn?: (msg: string) => void;
 }
 export declare class NtfyNotificationAdapter implements NotificationAdapter {
     readonly mechanism = "ntfy";
     readonly target: string;
+    readonly disabled?: boolean;
+    readonly validationError?: string;
     private readonly fetchImpl;
+    private readonly authHeader?;
     constructor(opts: NtfyAdapterOpts);
     send(payload: NotificationPayload): Promise<NotificationDeliveryResult>;
 }

package/daemon/dist/domain/mission-control/notification-adapter-ntfy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification-adapter-ntfy.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/notification-adapter-ntfy.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,uBAAwB,YAAW,mBAAmB;IACjE,QAAQ,CAAC,SAAS,UAAU;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,IAAI,EAAE,eAAe;IAK3B,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC;CAyB9E"}
+{"version":3,"file":"notification-adapter-ntfy.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/notification-adapter-ntfy.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AAGzC,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,sEAAsE;IACtE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,qBAAa,uBAAwB,YAAW,mBAAmB;IACjE,QAAQ,CAAC,SAAS,UAAU;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;gBAEzB,IAAI,EAAE,eAAe;IAsB3B,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC;CAkC9E"}

package/daemon/dist/domain/mission-control/notification-adapter-ntfy.js

@@ -4,18 +4,49 @@
 // as the notification text. Headers like Title, Click, Tags shape the
 // rendering. Free, self-hostable, simple HTTP POST → push notification
 // on the operator's phone (ntfy mobile app subscribed to the topic).
+import { validateOutboundUrl, redactUrl, safeDecodeURIComponent } from "./outbound-url-validator.js";
 export class NtfyNotificationAdapter {
     mechanism = "ntfy";
     target;
+    disabled;
+    validationError;
     fetchImpl;
+    authHeader;
     constructor(opts) {
-        this.target = opts.topicUrl;
+        const validation = validateOutboundUrl(opts.topicUrl);
+        if (!validation.valid) {
+            this.disabled = true;
+            this.validationError = `Invalid ntfy topic URL '${redactUrl(opts.topicUrl)}': ${validation.reason}`;
+            const warn = opts.warn ?? console.warn;
+            warn(`[openrig] Notifications disabled: ${this.validationError}`);
+            this.target = opts.topicUrl;
+        }
+        else {
+            const parsed = new URL(validation.parsedUrl.toString());
+            if (parsed.username || parsed.password) {
+                const user = safeDecodeURIComponent(parsed.username);
+                const pass = safeDecodeURIComponent(parsed.password);
+                this.authHeader = `Basic ${Buffer.from(`${user}:${pass}`).toString("base64")}`;
+                parsed.username = "";
+                parsed.password = "";
+            }
+            this.target = parsed.toString();
+        }
         this.fetchImpl = opts.fetchImpl ?? fetch;
     }
     async send(payload) {
+        if (this.disabled) {
+            return {
+                ok: false,
+                error: this.validationError ?? "notifications disabled: invalid topic URL",
+            };
+        }
         const headers = {
             Title: truncateHeader(payload.title, 250),
         };
+        if (this.authHeader) {
+            headers.Authorization = this.authHeader;
+        }
         if (payload.qitemRef)
             headers.Click = payload.qitemRef;
         if (payload.tags && payload.tags.length > 0) {
@@ -43,6 +74,6 @@ export class NtfyNotificationAdapter {
 /** ntfy headers must be ASCII single-line; truncate + strip newlines. */
 function truncateHeader(s, max) {
     const cleaned = s.replace(/[\r\n]+/g, " ").trim();
-    return cleaned.length > max ? cleaned.slice(0, max - 1) + "…" : cleaned;
+    return cleaned.length > max ? cleaned.slice(0, max - 3) + "..." : cleaned;
 }
 //# sourceMappingURL=notification-adapter-ntfy.js.map

package/daemon/dist/domain/mission-control/notification-adapter-ntfy.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification-adapter-ntfy.js","sourceRoot":"","sources":["../../../src/domain/mission-control/notification-adapter-ntfy.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AAkBrE,MAAM,OAAO,uBAAuB;IACzB,SAAS,GAAG,MAAM,CAAC;IACnB,MAAM,CAAS;IACP,SAAS,CAAe;IAEzC,YAAY,IAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA4B;QACrC,MAAM,OAAO,GAA2B;YACtC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SAC1C,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACzD,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,yEAAyE;AACzE,SAAS,cAAc,CAAC,CAAS,EAAE,GAAW;IAC5C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"notification-adapter-ntfy.js","sourceRoot":"","sources":["../../../src/domain/mission-control/notification-adapter-ntfy.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AAOrE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAcrG,MAAM,OAAO,uBAAuB;IACzB,SAAS,GAAG,MAAM,CAAC;IACnB,MAAM,CAAS;IACf,QAAQ,CAAW;IACnB,eAAe,CAAU;IACjB,SAAS,CAAe;IACxB,UAAU,CAAU;IAErC,YAAY,IAAqB;QAC/B,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,eAAe,GAAG,2BAA2B,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC;YACpG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YACvC,IAAI,CAAC,qCAAqC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,SAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACrD,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACrD,IAAI,CAAC,UAAU,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/E,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;gBACrB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA4B;QACrC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,eAAe,IAAI,2CAA2C;aAC3E,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAA2B;YACtC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SAC1C,CAAC;QACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC;QAC1C,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ;YAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACzD,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,yEAAyE;AACzE,SAAS,cAAc,CAAC,CAAS,EAAE,GAAW;IAC5C,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5E,CAAC"}

package/daemon/dist/domain/mission-control/notification-adapter-types.d.ts

@@ -20,6 +20,8 @@ export interface NotificationAdapter {
     readonly mechanism: string;
     /** Target descriptor (ntfy topic URL or webhook endpoint URL). */
     readonly target: string;
+    /** True when the adapter was constructed with an invalid target URL and cannot deliver notifications. */
+    readonly disabled?: boolean;
     send(payload: NotificationPayload): Promise<NotificationDeliveryResult>;
 }
 //# sourceMappingURL=notification-adapter-types.d.ts.map

package/daemon/dist/domain/mission-control/notification-adapter-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification-adapter-types.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/notification-adapter-types.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACzE"}
+{"version":3,"file":"notification-adapter-types.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/notification-adapter-types.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,mBAAmB;IAClC,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,gEAAgE;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yGAAyG;IACzG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACzE"}

package/daemon/dist/domain/mission-control/notification-adapter-webhook.d.ts

@@ -6,6 +6,8 @@ export interface WebhookAdapterOpts {
     fetchImpl?: typeof fetch;
     /** Optional extra headers (e.g., `X-Webhook-Signature`). */
     extraHeaders?: Record<string, string>;
+    /** Optional logger for startup warnings. Defaults to console.warn. */
+    warn?: (msg: string) => void;
 }
 export interface WebhookBodyShape {
     source: "openrig.mission-control";
@@ -19,6 +21,8 @@ export interface WebhookBodyShape {
 export declare class WebhookNotificationAdapter implements NotificationAdapter {
     readonly mechanism = "webhook";
     readonly target: string;
+    readonly disabled?: boolean;
+    readonly validationError?: string;
     private readonly fetchImpl;
     private readonly extraHeaders;
     constructor(opts: WebhookAdapterOpts);

package/daemon/dist/domain/mission-control/notification-adapter-webhook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notification-adapter-webhook.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/notification-adapter-webhook.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AAEzC,MAAM,WAAW,kBAAkB;IACjC,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,yBAAyB,CAAC;IAClC,cAAc,EAAE,CAAC,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,QAAQ,CAAC,SAAS,aAAa;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;gBAE1C,IAAI,EAAE,kBAAkB;IAM9B,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC;CA8B9E"}
+{"version":3,"file":"notification-adapter-webhook.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/notification-adapter-webhook.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AAGzC,MAAM,WAAW,kBAAkB;IACjC,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,sEAAsE;IACtE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,yBAAyB,CAAC;IAClC,cAAc,EAAE,CAAC,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,0BAA2B,YAAW,mBAAmB;IACpE,QAAQ,CAAC,SAAS,aAAa;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;gBAE1C,IAAI,EAAE,kBAAkB;IA6B9B,IAAI,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,0BAA0B,CAAC;CAoC9E"}

package/daemon/dist/domain/mission-control/notification-adapter-webhook.js

@@ -2,17 +2,48 @@
 //
 // Documented stable JSON body shape so the operator can POST through
 // Slack incoming webhooks, Discord, Telegram bots, or their own infra.
+import { validateOutboundUrl, redactUrl, safeDecodeURIComponent } from "./outbound-url-validator.js";
 export class WebhookNotificationAdapter {
     mechanism = "webhook";
     target;
+    disabled;
+    validationError;
     fetchImpl;
     extraHeaders;
     constructor(opts) {
-        this.target = opts.endpointUrl;
+        const validation = validateOutboundUrl(opts.endpointUrl);
+        const extraHeaders = { ...(opts.extraHeaders ?? {}) };
+        if (!validation.valid) {
+            this.disabled = true;
+            this.validationError = `Invalid webhook endpoint URL '${redactUrl(opts.endpointUrl)}': ${validation.reason}`;
+            const warn = opts.warn ?? console.warn;
+            warn(`[openrig] Notifications disabled: ${this.validationError}`);
+            this.target = opts.endpointUrl;
+        }
+        else {
+            const parsed = new URL(validation.parsedUrl.toString());
+            if (parsed.username || parsed.password) {
+                const user = safeDecodeURIComponent(parsed.username);
+                const pass = safeDecodeURIComponent(parsed.password);
+                const basicAuth = `Basic ${Buffer.from(`${user}:${pass}`).toString("base64")}`;
+                if (!extraHeaders["Authorization"] && !extraHeaders["authorization"]) {
+                    extraHeaders["Authorization"] = basicAuth;
+                }
+                parsed.username = "";
+                parsed.password = "";
+            }
+            this.target = parsed.toString();
+        }
         this.fetchImpl = opts.fetchImpl ?? fetch;
-        this.extraHeaders = opts.extraHeaders ?? {};
+        this.extraHeaders = extraHeaders;
     }
     async send(payload) {
+        if (this.disabled) {
+            return {
+                ok: false,
+                error: this.validationError ?? "notifications disabled: invalid webhook endpoint URL",
+            };
+        }
         const body = {
             source: "openrig.mission-control",
             schema_version: 1,

package/daemon/dist/domain/mission-control/notification-adapter-webhook.js.map

@@ -1 +1 @@
-{"version":3,"file":"notification-adapter-webhook.js","sourceRoot":"","sources":["../../../src/domain/mission-control/notification-adapter-webhook.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AA2BvE,MAAM,OAAO,0BAA0B;IAC5B,SAAS,GAAG,SAAS,CAAC;IACtB,MAAM,CAAS;IACP,SAAS,CAAe;IACxB,YAAY,CAAyB;IAEtD,YAAY,IAAwB;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA4B;QACrC,MAAM,IAAI,GAAqB;YAC7B,MAAM,EAAE,yBAAyB;YACjC,cAAc,EAAE,CAAC;YACjB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,IAAI,CAAC,YAAY;iBACrB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5D,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"notification-adapter-webhook.js","sourceRoot":"","sources":["../../../src/domain/mission-control/notification-adapter-webhook.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AAOvE,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAuBrG,MAAM,OAAO,0BAA0B;IAC5B,SAAS,GAAG,SAAS,CAAC;IACtB,MAAM,CAAS;IACf,QAAQ,CAAW;IACnB,eAAe,CAAU;IACjB,SAAS,CAAe;IACxB,YAAY,CAAyB;IAEtD,YAAY,IAAwB;QAClC,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzD,MAAM,YAAY,GAA2B,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QAE9E,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,eAAe,GAAG,iCAAiC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC;YAC7G,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YACvC,IAAI,CAAC,qCAAqC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,SAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACrD,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACrD,MAAM,SAAS,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/E,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,CAAC;oBACrE,YAAY,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC;gBAC5C,CAAC;gBACD,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;gBACrB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA4B;QACrC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI,CAAC,eAAe,IAAI,sDAAsD;aACtF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAqB;YAC7B,MAAM,EAAE,yBAAyB;YACjC,cAAc,EAAE,CAAC;YACjB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,QAAQ;YAC3B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,IAAI,CAAC,YAAY;iBACrB;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5D,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/daemon/dist/domain/mission-control/outbound-url-validator.d.ts

@@ -0,0 +1,27 @@
+export interface OutboundUrlValidationResult {
+    valid: boolean;
+    reason?: string;
+    parsedUrl?: URL;
+}
+/**
+ * Validates notification target URLs (webhook and ntfy endpoints).
+ *
+ * Refuses:
+ * - Non-HTTP/HTTPS protocols (e.g. file:, ftp:, gopher:, data:, javascript:)
+ * - Malformed URLs or URLs without a hostname
+ *
+ * URLs with embedded credentials (e.g. https://user:pass@host) are permitted;
+ * adapters strip credentials from the URL and transmit them via Authorization headers.
+ * Self-hosted notifiers on localhost or the local network are standard OpenRig
+ * configurations and are explicitly permitted without restriction.
+ */
+export declare function validateOutboundUrl(rawUrl: string): OutboundUrlValidationResult;
+/**
+ * Safely redacts credentials from a raw URL string for safe inclusion in logs and error messages.
+ */
+export declare function redactUrl(rawUrl: string): string;
+/**
+ * Safely decodes a URI component, falling back to the raw string if decoding throws a URIError (e.g. unescaped % characters).
+ */
+export declare function safeDecodeURIComponent(str: string): string;
+//# sourceMappingURL=outbound-url-validator.d.ts.map

package/daemon/dist/domain/mission-control/outbound-url-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-url-validator.d.ts","sourceRoot":"","sources":["../../../src/domain/mission-control/outbound-url-validator.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,GAAG,CAAC;CACjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,2BAA2B,CAoB/E;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAYhD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAM1D"}

package/daemon/dist/domain/mission-control/outbound-url-validator.js

@@ -0,0 +1,60 @@
+/**
+ * Validates notification target URLs (webhook and ntfy endpoints).
+ *
+ * Refuses:
+ * - Non-HTTP/HTTPS protocols (e.g. file:, ftp:, gopher:, data:, javascript:)
+ * - Malformed URLs or URLs without a hostname
+ *
+ * URLs with embedded credentials (e.g. https://user:pass@host) are permitted;
+ * adapters strip credentials from the URL and transmit them via Authorization headers.
+ * Self-hosted notifiers on localhost or the local network are standard OpenRig
+ * configurations and are explicitly permitted without restriction.
+ */
+export function validateOutboundUrl(rawUrl) {
+    let parsed;
+    try {
+        parsed = new URL(rawUrl);
+    }
+    catch {
+        return { valid: false, reason: "invalid_url_format" };
+    }
+    // 1. Protocol check: strict http/https
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        return { valid: false, reason: `unsupported_protocol_${parsed.protocol.replace(":", "")}` };
+    }
+    // 2. Ensure hostname is present
+    const hostname = parsed.hostname.toLowerCase().trim();
+    if (!hostname) {
+        return { valid: false, reason: "missing_hostname" };
+    }
+    return { valid: true, parsedUrl: parsed };
+}
+/**
+ * Safely redacts credentials from a raw URL string for safe inclusion in logs and error messages.
+ */
+export function redactUrl(rawUrl) {
+    try {
+        const parsed = new URL(rawUrl);
+        if (parsed.username || parsed.password) {
+            parsed.username = "***";
+            parsed.password = "***";
+            return parsed.toString();
+        }
+        return rawUrl;
+    }
+    catch {
+        return rawUrl.replace(/:\/\/([^:]+):([^@]+)@/, "://***:***@");
+    }
+}
+/**
+ * Safely decodes a URI component, falling back to the raw string if decoding throws a URIError (e.g. unescaped % characters).
+ */
+export function safeDecodeURIComponent(str) {
+    try {
+        return decodeURIComponent(str);
+    }
+    catch {
+        return str;
+    }
+}
+//# sourceMappingURL=outbound-url-validator.js.map

package/daemon/dist/domain/mission-control/outbound-url-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-url-validator.js","sourceRoot":"","sources":["../../../src/domain/mission-control/outbound-url-validator.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACxD,CAAC;IAED,uCAAuC;IACvC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;IAC9F,CAAC;IAED,gCAAgC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;YACxB,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC;YACxB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC"}

package/daemon/dist/domain/native-permission-store.d.ts

@@ -6,12 +6,26 @@ export interface StoredNativePermissionSelection extends NativePermissionSelecti
     reason: string;
     updatedAt: string;
 }
+export type PermissionModeSource = "explicit" | "member_spec" | "rig_spec" | "kernel_default" | "system_default";
+export interface ResolvedSeatPermission {
+    effectiveMode: string;
+    source: PermissionModeSource;
+    launchPosture?: "floor" | "full_bypass" | "auto";
+    permissionMode?: string;
+    fallbackReason?: string;
+}
 /** The stable node owns the desired setting. Native history and current processes are untouched. */
 export declare class NativePermissionStore {
     private readonly db;
     constructor(db: Database.Database);
+    /** Kernel is the persisted class-of-one rig, never a pane-name or cwd heuristic.
+     * Authored policies and named Codex profiles keep their existing meaning. */
+    private launchDefault;
+    /** One decision shared by fresh/continue, legacy restore and same-seat handover. */
+    launchOverride(nodeId: string, runtime: string): Pick<NodeBinding, "launchPosture" | "permissionMode" | "kernelAuthority" | "teamPermissionDefault">;
     read(nodeId: string): StoredNativePermissionSelection | null;
     write(nodeId: string, selection: NativePermissionSelection | null, actor: string, reason: string): void;
+    resolve(nodeId: string, runtime: string): ResolvedSeatPermission;
     apply(binding: NodeBinding, runtime: string): NodeBinding;
 }
 //# sourceMappingURL=native-permission-store.d.ts.map

package/daemon/dist/domain/native-permission-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native-permission-store.d.ts","sourceRoot":"","sources":["../../src/domain/native-permission-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAA6B,KAAK,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAE7G,MAAM,WAAW,+BAAgC,SAAQ,yBAAyB;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,oGAAoG;AACpG,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,+BAA+B,GAAG,IAAI;IAY5D,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,yBAAyB,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAYvG,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW;CAK1D"}
+{"version":3,"file":"native-permission-store.d.ts","sourceRoot":"","sources":["../../src/domain/native-permission-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAA6B,KAAK,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAG7G,MAAM,WAAW,+BAAgC,SAAQ,yBAAyB;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,aAAa,GAAG,UAAU,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAEjH,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,aAAa,CAAC,EAAE,OAAO,GAAG,aAAa,GAAG,MAAM,CAAC;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,oGAAoG;AACpG,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD;iFAC6E;IAC7E,OAAO,CAAC,aAAa;IAkBrB,oFAAoF;IACpF,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,eAAe,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,uBAAuB,CAAC;IAYpJ,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,+BAA+B,GAAG,IAAI;IAY5D,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,yBAAyB,GAAG,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAYvG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,sBAAsB;IA2JhE,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW;CAW1D"}

package/daemon/dist/domain/native-permission-store.js

@@ -1,10 +1,43 @@
 import { permissionBindingOverride } from "./native-permission-selection.js";
+import { builtinLaunchPosture } from "./permission-policy/policy-ref.js";
 /** The stable node owns the desired setting. Native history and current processes are untouched. */
 export class NativePermissionStore {
     db;
     constructor(db) {
         this.db = db;
     }
+    /** Kernel is the persisted class-of-one rig, never a pane-name or cwd heuristic.
+     * Authored policies and named Codex profiles keep their existing meaning. */
+    launchDefault(nodeId, runtime) {
+        if (runtime !== "claude-code" && runtime !== "codex")
+            return undefined;
+        try {
+            const row = this.db.prepare(`SELECT r.name, n.permission_policy AS member_policy,
+        r.permission_policy AS rig_policy, n.codex_config_profile AS profile
+        FROM nodes n JOIN rigs r ON r.id = n.rig_id WHERE n.id = ?`).get(nodeId);
+            if (!row || row.member_policy != null || row.rig_policy != null
+                || (runtime === "codex" && row.profile?.trim()))
+                return undefined;
+            return row.name === "kernel" ? "kernel" : "team";
+        }
+        catch {
+            // This optional default must not block otherwise supported launches when
+            // its metadata lookup is unavailable. Keep the existing permission path.
+            return undefined;
+        }
+    }
+    /** One decision shared by fresh/continue, legacy restore and same-seat handover. */
+    launchOverride(nodeId, runtime) {
+        const selection = this.read(nodeId);
+        if (selection && selection.runtime !== runtime) {
+            throw new Error("Seat runtime changed since permission selection; explicitly select again or inherit.");
+        }
+        const launchDefault = selection ? undefined : this.launchDefault(nodeId, runtime);
+        if (launchDefault === "kernel") {
+            return { kernelAuthority: true, teamPermissionDefault: false, launchPosture: runtime === "codex" ? "full_bypass" : "floor" };
+        }
+        return { kernelAuthority: false, teamPermissionDefault: launchDefault === "team", ...permissionBindingOverride(selection) };
+    }
     read(nodeId) {
         const row = this.db.prepare("SELECT * FROM node_permission_selections WHERE node_id = ?").get(nodeId);
         if (!row)
@@ -26,11 +59,142 @@ export class NativePermissionStore {
         actor=excluded.actor, reason=excluded.reason, updated_at=excluded.updated_at`)
             .run(nodeId, selection.runtime, selection.mode, actor, reason);
     }
+    resolve(nodeId, runtime) {
+        // Level 1: Explicit per-seat selection (records actor + reason, overrides member and rig)
+        const explicit = this.read(nodeId);
+        if (explicit) {
+            if (explicit.runtime !== runtime) {
+                throw new Error("Seat runtime changed since permission selection; explicitly select again or inherit.");
+            }
+            return {
+                effectiveMode: explicit.mode,
+                source: "explicit",
+                ...(explicit.mode === "floor" || explicit.mode === "full_bypass"
+                    ? { launchPosture: explicit.mode }
+                    : {}),
+                ...(explicit.mode !== "floor" && explicit.mode !== "full_bypass"
+                    ? { permissionMode: explicit.mode }
+                    : {}),
+            };
+        }
+        // Query node for member-level policy, resolved posture, and rig_id
+        let memberPolicy = null;
+        let nodePosture = null;
+        let rigId = null;
+        let rigPolicy = null;
+        let rigPosture = null;
+        try {
+            const nodeRow = this.db.prepare("SELECT permission_policy, policy_launch_posture, rig_id FROM nodes WHERE id = ?").get(nodeId);
+            if (nodeRow) {
+                memberPolicy = nodeRow.permission_policy ?? null;
+                nodePosture = nodeRow.policy_launch_posture ?? null;
+                rigId = nodeRow.rig_id ?? null;
+            }
+            if (rigId) {
+                const rigRow = this.db.prepare("SELECT permission_policy, rig_policy_launch_posture FROM rigs WHERE id = ?").get(rigId);
+                if (rigRow) {
+                    rigPolicy = rigRow.permission_policy ?? null;
+                    rigPosture = rigRow.rig_policy_launch_posture ?? null;
+                }
+            }
+        }
+        catch {
+            // Table or column might be missing in minimal/legacy test environments
+        }
+        // Level 2: Member-level declaration in rig.yaml
+        // Precedence: member's own declaration must never be silently outranked by a rig-wide default.
+        if (memberPolicy !== null) {
+            const effectivePosture = nodePosture ?? builtinLaunchPosture(memberPolicy);
+            if (effectivePosture === "auto") {
+                if (runtime !== "claude-code") {
+                    const runtimeName = runtime === "codex" ? "Codex" : runtime === "pi" ? "Pi" : runtime;
+                    return {
+                        effectiveMode: "floor",
+                        source: "member_spec",
+                        launchPosture: "floor",
+                        fallbackReason: `${runtimeName} has no auto mode and launches at the floor`,
+                    };
+                }
+                return {
+                    effectiveMode: "auto",
+                    source: "member_spec",
+                    launchPosture: "auto",
+                    permissionMode: "auto",
+                };
+            }
+            if (effectivePosture === "full_bypass") {
+                return {
+                    effectiveMode: "full_bypass",
+                    source: "member_spec",
+                    launchPosture: "full_bypass",
+                };
+            }
+            // effectivePosture === "floor" (e.g. builtin:locked, none, or custom floor policy)
+            return {
+                effectiveMode: runtime === "codex" ? "floor" : "acceptEdits",
+                source: "member_spec",
+                launchPosture: "floor",
+            };
+        }
+        // Kernel's operational default also replaces persisted no-policy floor provenance.
+        if (this.launchDefault(nodeId, runtime) === "kernel") {
+            return { effectiveMode: runtime === "codex" ? "full_bypass" : "acceptEdits", source: "kernel_default",
+                launchPosture: runtime === "codex" ? "full_bypass" : "floor" };
+        }
+        // Level 3: Rig-level declaration in rig.yaml
+        // Applied when the member did not declare its own policy.
+        const effectiveRigPosture = rigPosture ?? (rigPolicy !== null ? builtinLaunchPosture(rigPolicy)
+            : (nodePosture && nodePosture !== "floor" ? nodePosture : null));
+        if (rigPolicy !== null || effectiveRigPosture !== null) {
+            const posture = effectiveRigPosture ?? "floor";
+            if (posture === "auto") {
+                if (runtime !== "claude-code") {
+                    const runtimeName = runtime === "codex" ? "Codex" : runtime === "pi" ? "Pi" : runtime;
+                    return {
+                        effectiveMode: "floor",
+                        source: "rig_spec",
+                        launchPosture: "floor",
+                        fallbackReason: `${runtimeName} has no auto mode and launches at the floor`,
+                    };
+                }
+                return {
+                    effectiveMode: "auto",
+                    source: "rig_spec",
+                    launchPosture: "auto",
+                    permissionMode: "auto",
+                };
+            }
+            if (posture === "full_bypass") {
+                return {
+                    effectiveMode: "full_bypass",
+                    source: "rig_spec",
+                    launchPosture: "full_bypass",
+                };
+            }
+            // posture === "floor" (e.g. builtin:locked, none)
+            return {
+                effectiveMode: runtime === "codex" ? "floor" : "acceptEdits",
+                source: "rig_spec",
+                launchPosture: "floor",
+            };
+        }
+        // Level 4: System default floor
+        return {
+            effectiveMode: runtime === "codex" ? "floor" : "acceptEdits",
+            source: "system_default",
+            launchPosture: "floor",
+        };
+    }
     apply(binding, runtime) {
-        const selection = this.read(binding.nodeId);
-        if (selection && selection.runtime !== runtime)
-            throw new Error("Seat runtime changed since permission selection; explicitly select again or inherit.");
-        return { ...binding, ...permissionBindingOverride(selection) };
+        const override = this.launchOverride(binding.nodeId, runtime);
+        const effectivePosture = override.launchPosture ?? binding.launchPosture;
+        const permissionMode = override.permissionMode ?? (effectivePosture === "auto" && runtime === "claude-code" ? "auto" : undefined);
+        return {
+            ...binding,
+            ...override,
+            ...(override.kernelAuthority ? { permissionMode: undefined } : {}),
+            ...(permissionMode ? { permissionMode } : {}),
+        };
     }
 }
 //# sourceMappingURL=native-permission-store.js.map