@openrig/cli 0.6.5 → 0.6.7

package/daemon/docs/reference/schemas/fixtures/valid/run-record/withdraws-earlier.json

@@ -0,0 +1,99 @@
+{
+  "schema": "openrig.run-record/v1",
+  "id": "rr-20261004-003",
+  "subject": {
+    "kind": "team",
+    "source": {
+      "repository": "https://github.com/mvschwarz/openrig-world",
+      "folder": "rigs/openrig-dev",
+      "resolvedCommit": "894ad0e301ab46ac6ddd74dea784b7f6311d69a2",
+      "requestedRef": "main",
+      "canonicalUrl": "https://github.com/mvschwarz/openrig-world/tree/894ad0e301ab46ac6ddd74dea784b7f6311d69a2/rigs/openrig-dev"
+    },
+    "configurationId": "build.impl=claude-code,build.lead=claude-code,check.qa=codex,check.review=codex",
+    "packageDigest": {
+      "algorithm": "sha256",
+      "value": "5f2c0a1e9b8d7c6f5e4d3c2b1a0f9e8d7c6b5a4f3e2d1c0b9a8f7e6d5c4b3a29",
+      "coverage": "openrig.package-digest/v1"
+    },
+    "assembler": {
+      "openrigVersion": "0.6.6",
+      "commit": "910bf9f1"
+    }
+  },
+  "execution": {
+    "resources": [
+      {
+        "kind": "plugin",
+        "ref": "openrig-core",
+        "version": "0.1.3"
+      }
+    ],
+    "settings": {
+      "permissionPolicy": "none declared"
+    },
+    "unknowns": [
+      "model chosen by the runtime default"
+    ]
+  },
+  "environment": {
+    "openrig": {
+      "version": "0.6.6",
+      "commit": "910bf9f1"
+    },
+    "platform": "linux",
+    "arch": "x64",
+    "harnesses": [
+      {
+        "name": "claude-code",
+        "version": "2.1.0",
+        "knownBy": "claude --version"
+      },
+      {
+        "name": "codex",
+        "version": "0.50.0",
+        "knownBy": "codex --version"
+      }
+    ]
+  },
+  "evidence": {
+    "kind": "native-workflow",
+    "receipt": {
+      "ref": "receipt.md",
+      "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+    }
+  },
+  "journey": {
+    "id": "contributor-team",
+    "version": 1
+  },
+  "outcome": {
+    "steps": [
+      {
+        "id": "install",
+        "result": "PASS"
+      },
+      {
+        "id": "orient",
+        "result": "PASS"
+      },
+      {
+        "id": "pull-request",
+        "result": "PASS"
+      }
+    ],
+    "assistance": {
+      "count": 0,
+      "description": ""
+    },
+    "recordedBy": "fleet",
+    "at": "2026-10-04T12:00:00Z"
+  },
+  "relations": {
+    "supersedes": [],
+    "withdraws": [
+      "rr-20261004-001"
+    ],
+    "resolves": []
+  }
+}

package/daemon/docs/reference/schemas/fixtures/valid/status/status.json

@@ -0,0 +1,61 @@
+{
+  "generated": {
+    "by": "openrig-world tools/status.mjs",
+    "notice": "Generated file. Do not edit by hand; regenerate it.",
+    "rule": "openrig.status-rule/v1",
+    "generatorVersion": 1
+  },
+  "listings": {
+    "openrig-dev": {
+      "state": "ok",
+      "configurations": {
+        "build.impl=claude-code,build.lead=claude-code,check.qa=codex,check.review=codex": {
+          "platforms": {
+            "linux-x64": {
+              "label": "tested",
+              "date": "2026-10-04",
+              "openrigVersion": "0.6.6",
+              "recordIds": [
+                "rr-20261004-003"
+              ],
+              "packageDigests": [
+                {
+                  "algorithm": "sha256",
+                  "value": "5f2c0a1e9b8d7c6f5e4d3c2b1a0f9e8d7c6b5a4f3e2d1c0b9a8f7e6d5c4b3a29",
+                  "coverage": "openrig.package-digest/v1"
+                }
+              ]
+            }
+          },
+          "communityReports": 0
+        },
+        "build.impl=pi,build.lead=pi,check.qa=pi,check.review=pi": {
+          "platforms": {},
+          "communityReports": 0
+        }
+      }
+    },
+    "unreadable-example": {
+      "state": "status_unavailable",
+      "configurations": {}
+    }
+  },
+  "harnessChecks": {
+    "state": "ok",
+    "harnesses": {
+      "pi": {
+        "linux-x64": {
+          "result": "BLOCKED",
+          "date": "2026-10-04",
+          "openrigVersion": "0.6.6",
+          "harnessVersion": "unknown",
+          "recordIds": [
+            "rr-20261004-004"
+          ],
+          "note": "Pi was not signed in on the test machine."
+        }
+      }
+    }
+  },
+  "bodyDigest": "548f7ce51c9cf66f34fd0b613dd3754240350cd856ac51f7f98140300766dd57"
+}

package/daemon/docs/reference/schemas/registry-entry.v1.schema.json

@@ -0,0 +1,139 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openrig.dev/schemas/registry-entry.v1.json",
+  "title": "Registry entry (openrig-registry/registry/<slug>.yaml)",
+  "type": "object",
+  "required": [
+    "schema",
+    "slug",
+    "name",
+    "source",
+    "configurations",
+    "review",
+    "status"
+  ],
+  "properties": {
+    "schema": {
+      "const": "openrig.registry-entry/v1"
+    },
+    "slug": {
+      "type": "string",
+      "pattern": "^[a-z0-9][a-z0-9-]*$"
+    },
+    "name": {
+      "type": "string",
+      "minLength": 1
+    },
+    "summary": {
+      "type": "string"
+    },
+    "source": {
+      "$ref": "https://openrig.dev/schemas/bundle-common.v1.json#/$defs/source"
+    },
+    "configurations": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "required": [
+          "id",
+          "packageDigest",
+          "assembler",
+          "behaviour"
+        ],
+        "properties": {
+          "id": {
+            "$ref": "https://openrig.dev/schemas/bundle-common.v1.json#/$defs/configurationId"
+          },
+          "alias": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]*$"
+          },
+          "recommended": {
+            "type": "boolean"
+          },
+          "packageDigest": {
+            "$ref": "https://openrig.dev/schemas/bundle-common.v1.json#/$defs/packageDigest"
+          },
+          "assembler": {
+            "$ref": "https://openrig.dev/schemas/bundle-common.v1.json#/$defs/assembler"
+          },
+          "behaviour": {
+            "type": "string",
+            "pattern": "^(?!/)(?!.*(^|/)\\.\\.(/|$)).+\\.json$",
+            "description": "Registry-relative path of the generated behaviour view for this configuration and assembler version."
+          },
+          "evidenceReuse": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "required": [
+                "packageDigest",
+                "reason"
+              ],
+              "properties": {
+                "packageDigest": {
+                  "$ref": "https://openrig.dev/schemas/bundle-common.v1.json#/$defs/packageDigest"
+                },
+                "reason": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              }
+            },
+            "description": "Earlier packages whose evidence still applies to this one, with the public reason (for example 'only EVIDENCE.md changed'). Labels resting on it show both digests."
+          }
+        }
+      }
+    },
+    "review": {
+      "type": "object",
+      "required": [
+        "date"
+      ],
+      "properties": {
+        "date": {
+          "type": "string",
+          "format": "date"
+        },
+        "note": {
+          "type": "string"
+        }
+      }
+    },
+    "status": {
+      "enum": [
+        "listed",
+        "withdrawn"
+      ]
+    },
+    "withdrawnOn": {
+      "type": "string",
+      "format": "date",
+      "description": "When the entry was withdrawn; set with status: withdrawn."
+    }
+  },
+  "allOf": [
+    {
+      "if": {
+        "properties": {
+          "status": {
+            "const": "withdrawn"
+          }
+        }
+      },
+      "then": {
+        "required": [
+          "withdrawnOn"
+        ]
+      },
+      "else": {
+        "not": {
+          "required": [
+            "withdrawnOn"
+          ]
+        }
+      }
+    }
+  ]
+}

package/daemon/docs/reference/schemas/run-record.v1.schema.json

@@ -0,0 +1,315 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://openrig.dev/schemas/run-record.v1.json",
+  "title": "Run record v1 (private; kept beside its receipt)",
+  "type": "object",
+  "required": [
+    "schema",
+    "id",
+    "subject",
+    "execution",
+    "environment",
+    "evidence",
+    "journey",
+    "outcome",
+    "relations"
+  ],
+  "properties": {
+    "schema": {
+      "const": "openrig.run-record/v1"
+    },
+    "id": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$"
+    },
+    "subject": {
+      "oneOf": [
+        {
+          "type": "object",
+          "required": [
+            "kind",
+            "source",
+            "configurationId",
+            "packageDigest",
+            "assembler"
+          ],
+          "properties": {
+            "kind": {
+              "const": "team"
+            },
+            "source": {
+              "$ref": "https://openrig.dev/schemas/bundle-common.v1.json#/$defs/source"
+            },
+            "configurationId": {
+              "$ref": "https://openrig.dev/schemas/bundle-common.v1.json#/$defs/configurationId"
+            },
+            "packageDigest": {
+              "$ref": "https://openrig.dev/schemas/bundle-common.v1.json#/$defs/packageDigest"
+            },
+            "assembler": {
+              "$ref": "https://openrig.dev/schemas/bundle-common.v1.json#/$defs/assembler"
+            }
+          },
+          "additionalProperties": false
+        },
+        {
+          "type": "object",
+          "required": [
+            "kind",
+            "harness"
+          ],
+          "properties": {
+            "kind": {
+              "const": "harness_check"
+            },
+            "harness": {
+              "$ref": "https://openrig.dev/schemas/bundle-common.v1.json#/$defs/runtime"
+            }
+          },
+          "description": "A harness check never upgrades a team label.",
+          "additionalProperties": false
+        }
+      ]
+    },
+    "execution": {
+      "type": "object",
+      "required": [
+        "resources",
+        "settings",
+        "unknowns"
+      ],
+      "properties": {
+        "resources": {
+          "type": "array",
+          "items": {
+            "type": "object"
+          }
+        },
+        "settings": {
+          "type": "object"
+        },
+        "unknowns": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "environment": {
+      "type": "object",
+      "required": [
+        "openrig",
+        "platform",
+        "arch",
+        "harnesses"
+      ],
+      "properties": {
+        "openrig": {
+          "type": "object",
+          "required": [
+            "version"
+          ],
+          "properties": {
+            "version": {
+              "type": "string"
+            },
+            "commit": {
+              "type": "string"
+            }
+          }
+        },
+        "platform": {
+          "enum": [
+            "linux",
+            "darwin",
+            "win32"
+          ],
+          "description": "Node's process.platform; with arch, it forms the status file's <os>-<arch> platform key."
+        },
+        "arch": {
+          "enum": [
+            "x64",
+            "arm64"
+          ],
+          "description": "Node's process.arch."
+        },
+        "harnesses": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": [
+              "name",
+              "version",
+              "knownBy"
+            ],
+            "properties": {
+              "name": {
+                "type": "string"
+              },
+              "version": {
+                "type": "string"
+              },
+              "knownBy": {
+                "type": "string"
+              }
+            }
+          }
+        }
+      }
+    },
+    "evidence": {
+      "type": "object",
+      "required": [
+        "kind",
+        "receipt"
+      ],
+      "properties": {
+        "kind": {
+          "enum": [
+            "native-workflow",
+            "daemon-adoption",
+            "running-seat",
+            "installed-only",
+            "synthetic",
+            "community-reported"
+          ]
+        },
+        "receipt": {
+          "type": "object",
+          "required": [
+            "ref",
+            "sha256"
+          ],
+          "properties": {
+            "ref": {
+              "type": "string"
+            },
+            "sha256": {
+              "type": "string",
+              "pattern": "^[0-9a-f]{64}$"
+            }
+          }
+        }
+      }
+    },
+    "journey": {
+      "type": "object",
+      "required": [
+        "id",
+        "version"
+      ],
+      "properties": {
+        "id": {
+          "type": "string"
+        },
+        "version": {
+          "type": "integer",
+          "minimum": 1
+        }
+      }
+    },
+    "outcome": {
+      "type": "object",
+      "required": [
+        "steps",
+        "assistance",
+        "recordedBy",
+        "at"
+      ],
+      "properties": {
+        "steps": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "required": [
+              "id",
+              "result"
+            ],
+            "properties": {
+              "id": {
+                "type": "string"
+              },
+              "result": {
+                "enum": [
+                  "PASS",
+                  "FAIL",
+                  "BLOCKED",
+                  "NOT_RUN"
+                ]
+              }
+            }
+          }
+        },
+        "assistance": {
+          "type": "object",
+          "required": [
+            "count"
+          ],
+          "properties": {
+            "count": {
+              "type": "integer",
+              "minimum": 0
+            },
+            "description": {
+              "type": "string"
+            }
+          }
+        },
+        "recordedBy": {
+          "type": "string"
+        },
+        "at": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "publicNote": {
+          "type": "string",
+          "maxLength": 280,
+          "description": "A short public cause for a BLOCKED or FAIL result; the only record text that reaches status.json."
+        }
+      }
+    },
+    "relations": {
+      "type": "object",
+      "required": [
+        "supersedes",
+        "withdraws",
+        "resolves"
+      ],
+      "properties": {
+        "supersedes": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "withdraws": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "resolves": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": [
+              "record",
+              "step"
+            ],
+            "properties": {
+              "record": {
+                "type": "string"
+              },
+              "step": {
+                "type": "string"
+              }
+            }
+          }
+        }
+      }
+    }
+  }
+}

package/daemon/docs/reference/scoped-operating-posture.md

@@ -23,8 +23,9 @@ rig mode unset mission my-project/release-1
 Unsetting reveals the next applicable explicit choice, or the visible human-led
 product default. A new, resolved rig with no binding reports `human-led`,
 `source: product-default`, and `binding: null`. Missing scope identity, conflicting
-linkage, unavailable storage or malformed authored context reports `unknown` with
-a reason. Calling `effective` without a scope does not select a rig implicitly.
+linkage or malformed authored context reports `unknown` with a reason. If the mode
+store itself is unavailable, the route answers HTTP 503 `rig_policy_store_unavailable`
+instead. Calling `effective` without a scope does not select a rig implicitly.
 The existing operator bearer requirement still applies. `set` requires `--confirm`;
 `unset` is an explicit deletion command and applies immediately.
 
@@ -40,12 +41,12 @@ another preference store or infer delegation from workflow existence or activity
 | --- | --- |
 | `posture` | `human-led`, `delegated`, or `unknown` |
 | `source` | `product-default`, `binding`, or `unknown` |
-| `context` | Resolved rig/project/mission/workstream/qitem IDs, source addresses, canonical authored paths and phase; null if scope resolution failed |
-| `context.phase` | `{value, source}` from an explicit workflow packet step, otherwise slice stage/status, otherwise mission release phase/status; null fields when unavailable |
+| `context` | Resolved rig/project/mission/workstream/qitem IDs, source addresses, canonical authored paths, phase and `warnings` (for example a malformed `rigs` list that project inference skipped); null if scope resolution failed |
+| `context.phase` | `{value, source}` from an explicit workflow packet step, otherwise slice stage/status, otherwise mission release phase/status. A slice with neither gives `value: null` with its `SPEC.md` as the source; a mission with neither makes the whole read unknown; both fields are null only for rig- or project-only scopes |
 | `binding` | Winning binding ID, scope, timestamp and evidence citation; null for default/unknown |
 | `reason` | Explanation of the result or the missing/conflicting fact |
 | `grantsAuthority` | Always `false` |
-| `members` | For queue-backed findings, each member's qitem, posture, source and binding ID; differing or unknown member postures yield unknown aggregate posture |
+| `members` | For queue-backed findings, each member's qitem, posture, source and binding ID; differing or unknown member postures, or members in different project/mission/workstream contexts, yield unknown aggregate posture |
 
 The existing SQLite mode-binding table remains the only preference store. Matching
 posture bindings resolve in this order: qitem, workstream, mission, project, rig,
@@ -54,16 +55,23 @@ global host. The qualifiers are respectively a qitem ID, `project/mission/slice-
 The workstream is an existing authored slice, found by its directory or SPEC ID;
 the returned identity uses its SPEC ID and project/mission qualification.
 
-Project selection reads `workspace.yaml`'s declared `projects: [{id, root}]`
-catalog, or the workspace's own `project.yaml` when no catalog exists. Multiple
-projects require an explicit project selection. A sole project may be derived.
+Project selection reads the declared `projects: [{id, root}]` catalog at
+`workspace.catalog_path` (default `workspace.yaml` in the workspace root), the
+same catalog `rig context work-install` uses, or the workspace's own
+`project.yaml` when no catalog exists. A sole project may be derived. With several
+projects and no explicit selection, posture picks one the way `rig context work-install`
+does: a project whose `projects[].rigs` lists the rig, then (for qitem reads) the deepest
+project root containing the destination seat's working folder, then the only project no rig
+claims. The method is recorded in the source as `#selected-by=rig:<name>`, `cwd:<path>` or
+`unclaimed`. If none gives a single answer, the read is unknown.
 The project manifest validates identity and supplies `missions.root` (default
 `missions`). Mission and slice identities come from those authored work nodes;
 missing, duplicate or conflicting identities remain unknown. The selected work
 must stay inside its canonical project root.
 
 Qitem reads join explicit `project:`, `mission:`, `slice:`/`workstream:` tags,
-destination rig, and the existing workflow packet binding. Workflow lifecycle
+destination rig, and the existing workflow packet binding. A qitem with a mission but no
+project gets its project from the selection above. Workflow lifecycle
 project/mission identity must agree with the tags and requested scope. The bound
 packet's exact step is the phase source; phase names are not classified by guess.
 An unlinked qitem does not silently inherit the default. Scope reads are observational.