@openrig/cli 0.6.9 → 0.6.10

package/daemon/dist/domain/restore-guidance.js

@@ -0,0 +1,163 @@
+// A resumed seat's working guidance.
+//
+// An exact resume replays no startup content (the replay containment in restore-orchestrator.ts),
+// because managed CLAUDE.md blocks were once rewritten during a resume. Ordinary `rig down` still
+// strips OpenRig's managed blocks from each seat's guidance file, so an exact resume came back with
+// no role, culture or SOP guidance (and the rig reported fully_restored). The exception is narrow:
+// before the native harness starts, put back only the managed guidance blocks that are MISSING,
+// from the saved startup selection (guidance projections and guidance_merge startup files). An
+// existing block is never refreshed or overwritten; nothing is sent to the conversation; no
+// startup action, skill or plugin runs; no profile is resolved again. The blocks are rebuilt from
+// the saved source paths' current bytes, not from a byte snapshot of the old file.
+//
+// Guidance problems never block the exact resume. What can't be put back is reported.
+import nodePath from "node:path";
+import { MANAGED_BLOCK_START, MANAGED_BLOCK_END, DEFAULT_CLAUDE_MANAGED_BLOCK_FILE, mergeManagedBlock, stripManagedBlocks, } from "./managed-blocks.js";
+import { resolveConcreteHint } from "./runtime-adapter.js";
+import { reanchorBuiltinStartupFile, reanchorShippedProjectionEntry } from "./builtin-startup-files.js";
+const LEGACY_BLOCK_START = (id) => `<!-- BEGIN RIGGED MANAGED BLOCK: ${id} -->`;
+const LEGACY_BLOCK_END = (id) => `<!-- END RIGGED MANAGED BLOCK: ${id} -->`;
+/** The per-seat role block is delivered through send_text, never merged into a shared file
+ *  (ADR-0006); the adapters skip it, and so does this. */
+const NEVER_MERGED = new Set(["rig-role"]);
+/** The guidance file a seat's managed blocks live in, and the blocks it should hold on restore. */
+export function seatGuidance(startupCtx, cwd, claudeManagedBlockFile, exists, readFile) {
+    if (!startupCtx || !cwd)
+        return null;
+    const fileName = startupCtx.runtime === "claude-code"
+        ? (claudeManagedBlockFile ?? DEFAULT_CLAUDE_MANAGED_BLOCK_FILE)
+        : startupCtx.runtime === "codex" ? "AGENTS.md" : null;
+    if (!fileName)
+        return null;
+    const items = new Map();
+    for (const saved of startupCtx.projectionEntries) {
+        if (saved.category !== "guidance" || saved.mergeStrategy !== "managed_block")
+            continue;
+        const e = reanchorShippedProjectionEntry(saved, undefined, exists);
+        items.set(e.effectiveId, { blockId: e.effectiveId, sourcePath: e.absolutePath });
+    }
+    // Every guidance startup file the last launch merged, whatever its appliesOn: a fresh-start-only
+    // file (onboarding, an agent starter) was merged at that launch and stayed in the file until
+    // `rig down` stripped it, so it is part of what the resumed conversation had.
+    for (const saved of startupCtx.resolvedStartupFiles) {
+        const f = reanchorBuiltinStartupFile(saved, undefined, undefined, exists);
+        // An "auto" file is classified from its content, as at launch (a `# SKILL` file is a skill,
+        // not guidance). If the source can't be read it can't be classified: it is reported, not dropped.
+        let hint = f.deliveryHint;
+        if (hint === "auto") {
+            try {
+                hint = resolveConcreteHint(f.path, readFile(f.absolutePath));
+            }
+            catch {
+                if (f.path.endsWith(".md") && !f.path.endsWith("SKILL.md")) {
+                    items.set(f.path, { blockId: f.path, sourcePath: f.absolutePath, unresolved: true });
+                }
+                continue;
+            }
+        }
+        if (hint !== "guidance_merge")
+            continue;
+        items.set(f.path, { blockId: f.path, sourcePath: f.absolutePath });
+    }
+    for (const id of NEVER_MERGED)
+        items.delete(id);
+    return { targetPath: nodePath.join(cwd, fileName), items: [...items.values()] };
+}
+/** A block counts only with both its markers (current or legacy form). A lone marker is incomplete:
+ *  writing next to it is unsafe, because cleanup strips from a BEGIN to the next END. */
+function blockState(content, blockId) {
+    const current = [content.includes(MANAGED_BLOCK_START(blockId)), content.includes(MANAGED_BLOCK_END(blockId))];
+    const legacy = [content.includes(LEGACY_BLOCK_START(blockId)), content.includes(LEGACY_BLOCK_END(blockId))];
+    if ((current[0] && current[1]) || (legacy[0] && legacy[1]))
+        return "complete";
+    if (current[0] || current[1] || legacy[0] || legacy[1])
+        return "incomplete";
+    return "absent";
+}
+function blockStates(guidance, fs) {
+    const content = fs.exists(guidance.targetPath) ? fs.readFile(guidance.targetPath) : "";
+    return new Map(guidance.items.map((item) => [item.blockId, blockState(content, item.blockId)]));
+}
+/** The block ids the seat's guidance file lacks right now (absent, or only partly there). */
+export function missingGuidanceBlocks(guidance, fs) {
+    return [...blockStates(guidance, fs)].filter(([, state]) => state !== "complete").map(([id]) => id);
+}
+/** Put back only the missing managed guidance blocks. Existing blocks and any other text in the
+ *  file are left exactly as they are. Never throws: a failure becomes a reported gap. */
+/** Would appending these blocks to `content` be safe for the next `rig down`? Decided by effect,
+ *  with cleanup itself: safe only when stripping the new file gives exactly what stripping the
+ *  current one gives, so the added blocks strip away cleanly and take nothing else with them. A
+ *  stray, truncated or misplaced marker (cleanup strips from any BEGIN to the next END that ends a
+ *  line) makes the two differ. No second marker grammar to keep in step with cleanup. */
+export function appendIsCleanupSafe(content, blocks) {
+    let candidate = content;
+    const memory = {
+        exists: () => true,
+        readFile: () => candidate,
+        writeFile: (_path, next) => { candidate = next; },
+    };
+    for (const block of blocks)
+        mergeManagedBlock(memory, "(in memory)", block.blockId, block.content);
+    return stripManagedBlocks(candidate) === stripManagedBlocks(content);
+}
+/** Put back only the missing managed guidance blocks. Existing blocks and any other text in the
+ *  file are left exactly as they are, and nothing is written unless cleanup would later remove
+ *  exactly what was added. Never throws: a failure becomes a reported gap. */
+export function restoreMissingGuidance(guidance, fs) {
+    const repair = { restored: [], gaps: [] };
+    let states;
+    let existing;
+    try {
+        states = blockStates(guidance, fs);
+        existing = fs.exists(guidance.targetPath) ? fs.readFile(guidance.targetPath) : null;
+    }
+    catch (err) {
+        repair.gaps.push(`could not read ${guidance.targetPath}: ${err.message}`);
+        return repair;
+    }
+    const toWrite = [];
+    for (const item of guidance.items) {
+        const state = states.get(item.blockId);
+        if (state === "complete")
+            continue;
+        if (state === "incomplete") {
+            repair.gaps.push(`${item.blockId}: ${guidance.targetPath} holds only part of this block (one marker); left as it is`);
+            continue;
+        }
+        if (item.unresolved) {
+            repair.gaps.push(`${item.blockId}: its source ${item.sourcePath} can't be read, so this older startup file can't be classified or put back`);
+            continue;
+        }
+        try {
+            if (!fs.exists(item.sourcePath)) {
+                repair.gaps.push(`${item.blockId}: its source ${item.sourcePath} no longer exists`);
+                continue;
+            }
+            toWrite.push({ blockId: item.blockId, content: fs.readFile(item.sourcePath) });
+        }
+        catch (err) {
+            repair.gaps.push(`${item.blockId}: ${err.message}`);
+        }
+    }
+    if (toWrite.length === 0)
+        return repair;
+    // A file that doesn't exist yet holds no text to lose. An existing one is written only if the
+    // next rig down would remove exactly what is added.
+    if (existing !== null && !appendIsCleanupSafe(existing, toWrite)) {
+        for (const block of toWrite) {
+            repair.gaps.push(`${block.blockId}: not written, because ${guidance.targetPath} has a managed-block marker that the next rig down would strip together with other text, so adding blocks there could cost that text`);
+        }
+        return repair;
+    }
+    for (const block of toWrite) {
+        try {
+            mergeManagedBlock(fs, guidance.targetPath, block.blockId, block.content);
+            repair.restored.push(block.blockId);
+        }
+        catch (err) {
+            repair.gaps.push(`${block.blockId}: ${err.message}`);
+        }
+    }
+    return repair;
+}
+//# sourceMappingURL=restore-guidance.js.map

package/daemon/dist/domain/restore-guidance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-guidance.js","sourceRoot":"","sources":["../../src/domain/restore-guidance.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,oGAAoG;AACpG,mGAAmG;AACnG,gGAAgG;AAChG,+FAA+F;AAC/F,4FAA4F;AAC5F,kGAAkG;AAClG,mFAAmF;AACnF,EAAE;AACF,sFAAsF;AAEtF,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iCAAiC,EACjC,iBAAiB,EACjB,kBAAkB,GAEnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAGxG,MAAM,kBAAkB,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,oCAAoC,EAAE,MAAM,CAAC;AACxF,MAAM,gBAAgB,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,kCAAkC,EAAE,MAAM,CAAC;AAEpF;0DAC0D;AAC1D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAe3C,mGAAmG;AACnG,MAAM,UAAU,YAAY,CAC1B,UAAsC,EACtC,GAA8B,EAC9B,sBAAiD,EACjD,MAAiC,EACjC,QAAkC;IAElC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,KAAK,aAAa;QACnD,CAAC,CAAC,CAAC,sBAAsB,IAAI,iCAAiC,CAAC;QAC/D,CAAC,CAAC,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,aAAa,KAAK,eAAe;YAAE,SAAS;QACvF,MAAM,CAAC,GAAG,8BAA8B,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,iGAAiG;IACjG,6FAA6F;IAC7F,8EAA8E;IAC9E,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,oBAAoB,EAAE,CAAC;QACpD,MAAM,CAAC,GAAG,0BAA0B,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1E,4FAA4F;QAC5F,kGAAkG;QAClG,IAAI,IAAI,GAAW,CAAC,CAAC,YAAY,CAAC;QAClC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3D,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,IAAI,KAAK,gBAAgB;YAAE,SAAS;QACxC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,YAAY;QAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChD,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;AAClF,CAAC;AAID;yFACyF;AACzF,SAAS,UAAU,CAAC,OAAe,EAAE,OAAe;IAClD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5G,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IAC9E,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC;IAC5E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,QAAsB,EAAE,EAAuD;IAClG,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,QAAsB,EAAE,EAAuD;IACnH,OAAO,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACtG,CAAC;AASD;yFACyF;AACzF;;;;yFAIyF;AACzF,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,MAAmD;IACtG,IAAI,SAAS,GAAG,OAAO,CAAC;IACxB,MAAM,MAAM,GAA2B;QACrC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI;QAClB,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS;QACzB,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC;KAClD,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,iBAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACnG,OAAO,kBAAkB,CAAC,SAAS,CAAC,KAAK,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC;AAED;;8EAE8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,QAAsB,EAAE,EAA0B;IACvF,MAAM,MAAM,GAAmB,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC1D,IAAI,MAA+B,CAAC;IACpC,IAAI,QAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnC,QAAQ,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,QAAQ,CAAC,UAAU,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAgD,EAAE,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,UAAU;YAAE,SAAS;QACnC,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,UAAU,4DAA4D,CAAC,CAAC;YACtH,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,gBAAgB,IAAI,CAAC,UAAU,4EAA4E,CAAC,CAAC;YAC7I,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,gBAAgB,IAAI,CAAC,UAAU,mBAAmB,CAAC,CAAC;gBACpF,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACxC,8FAA8F;IAC9F,oDAAoD;IACpD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACjE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,0BAA0B,QAAQ,CAAC,UAAU,sIAAsI,CAAC,CAAC;QACxN,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACzE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/daemon/dist/domain/restore-orchestrator.d.ts

@@ -1,6 +1,6 @@
 import type Database from "better-sqlite3";
 import type { RigRepository } from "./rig-repository.js";
-import type { SessionRegistry } from "./session-registry.js";
+import { type SessionRegistry } from "./session-registry.js";
 import type { EventBus } from "./event-bus.js";
 import type { SnapshotRepository } from "./snapshot-repository.js";
 import type { SnapshotCapture } from "./snapshot-capture.js";
@@ -180,6 +180,11 @@ export declare class RestoreOrchestrator {
     private restoreNodeState;
     private computeRestorePlan;
     private restoreNodeWithCompensation;
+    /** A seat that came back running should also have its role, culture and SOP guidance. If its
+     *  guidance file still lacks a managed block it should hold, the seat keeps its true status (a
+     *  live resumed session is still running) and the gap is disclosed on the node and in the
+     *  warnings, so the rig is reported partially_restored, not fully_restored. */
+    private checkRestoredGuidance;
     /** OPR.0.3.4.2 (B) — roll a just-launched session back to ZERO sessions for
      *  the awaiting-decision outcome: kill the live blank session, mark its row
      *  superseded, and restore the prior binding/session state (the existing

package/daemon/dist/domain/restore-orchestrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"restore-orchestrator.d.ts","sourceRoot":"","sources":["../../src/domain/restore-orchestrator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAI7D,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAEhB,iBAAiB,EAMjB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAapB,MAAM,MAAM,mBAAmB,GAC3B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,GAAG,oBAAoB,CAAC;IACtC,EAAE,EAAE,oBAAoB,CAAC;IACzB,QAAQ,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;QAAC,eAAe,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,QAAQ,CAAA;KAAE,CAAC;CACpH,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EACA,gBAAgB,GAChB,YAAY,GACZ,wBAAwB,GACxB,sBAAsB,GACtB,kBAAkB,GAClB,0BAA0B,GAC1B,wBAAwB,GACxB,uBAAuB,GACvB,iBAAiB,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAUN,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,YAAY,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAE5E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,CAWnF;AAED;;wFAEwF;AACxF,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAI1D,CAAC;AAEH;yFACyF;AACzF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C,gBAAgB,CAAC,EAAE;QACjB,IAAI,EAAE,WAAW,GAAG,iBAAiB,CAAC;QACtC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,QAAQ,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACvE,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,UAAU,uBAAuB;IAC/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,kBAAkB,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,mBAAmB,CAAC;IAClC,WAAW,EAAE,kBAAkB,CAAC;IAChC;mFAC+E;IAC/E,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mBAAmB,CAAC,EAAE,OAAO,2BAA2B,EAAE,mBAAmB,CAAC;IAC9E,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CACtF;AAED,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,mBAAmB,CAAiE;IAC5F,OAAO,CAAC,aAAa,CAAqF;IAC1G,OAAO,CAAC,kBAAkB,CAAgC;gBAE9C,IAAI,EAAE,uBAAuB;IAyCnC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QACvC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC1C;;;;;;WAMG;QACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,mFAAmF;QACnF,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B;wEACgE;QAChE,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;QAC7C;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;KAChD,GAAG,OAAO,CAAC,cAAc,CAAC;IA8JrB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;QACjE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI/B,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;QACzD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,WAAW,GAAG,iBAAiB,CAAC;KACjD,GAAG,kBAAkB;IAoChB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAIjB,iBAAiB;IAoJ/B,OAAO,CAAC,gBAAgB;IAQxB;;;;;;OAMG;YACW,uBAAuB;IA2BrC,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,gBAAgB;IA2BxB,OAAO,CAAC,kBAAkB;YAiFZ,2BAA2B;IAiLzC;;;;;iDAK6C;YAC/B,qBAAqB;YAiBrB,iBAAiB;IA8W/B;iFAC6E;YAC/D,kBAAkB;IAiEhC,OAAO,CAAC,oCAAoC;IAa5C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,qBAAqB;YAoDf,aAAa;IAoH3B;;;;;;;;;;;;OAYG;IACG,yBAAyB,CAC7B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;IAyJ/B,OAAO,CAAC,mBAAmB;CAyB5B"}
+{"version":3,"file":"restore-orchestrator.d.ts","sourceRoot":"","sources":["../../src/domain/restore-orchestrator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAK7D,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAEhB,iBAAiB,EAMjB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAapB,MAAM,MAAM,mBAAmB,GAC3B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,GAAG,oBAAoB,CAAC;IACtC,EAAE,EAAE,oBAAoB,CAAC;IACzB,QAAQ,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;QAAC,eAAe,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,QAAQ,CAAA;KAAE,CAAC;CACpH,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EACA,gBAAgB,GAChB,YAAY,GACZ,wBAAwB,GACxB,sBAAsB,GACtB,kBAAkB,GAClB,0BAA0B,GAC1B,wBAAwB,GACxB,uBAAuB,GACvB,iBAAiB,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAUN,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,YAAY,EAAE,+BAA+B,EAAE,MAAM,sBAAsB,CAAC;AAE5E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,CAanF;AAED;;wFAEwF;AACxF,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAI1D,CAAC;AAEH;yFACyF;AACzF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE7D;AAkBD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B,IAAI,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,cAAc,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9D,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C,gBAAgB,CAAC,EAAE;QACjB,IAAI,EAAE,WAAW,GAAG,iBAAiB,CAAC;QACtC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,QAAQ,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACvE,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH;AAED,UAAU,uBAAuB;IAC/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,kBAAkB,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,mBAAmB,CAAC;IAClC,WAAW,EAAE,kBAAkB,CAAC;IAChC;mFAC+E;IAC/E,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAC7B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mBAAmB,CAAC,EAAE,OAAO,2BAA2B,EAAE,mBAAmB,CAAC;IAC9E,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CACtF;AAED,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,QAAQ,CAAyB;IACzC,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,mBAAmB,CAAiE;IAC5F,OAAO,CAAC,aAAa,CAAqF;IAC1G,OAAO,CAAC,kBAAkB,CAAgC;gBAE9C,IAAI,EAAE,uBAAuB;IAyCnC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QACvC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC1C;;;;;;WAMG;QACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3B,mFAAmF;QACnF,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B;wEACgE;QAChE,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;QAC7C;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;KAChD,GAAG,OAAO,CAAC,cAAc,CAAC;IA8JrB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;QACjE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI/B,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;QACzD,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,WAAW,GAAG,iBAAiB,CAAC;KACjD,GAAG,kBAAkB;IAoChB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,cAAc,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;QAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,kBAAkB,CAAC;YAIjB,iBAAiB;IA4L/B,OAAO,CAAC,gBAAgB;IAQxB;;;;;;OAMG;YACW,uBAAuB;IA2BrC,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,gBAAgB;IA2BxB,OAAO,CAAC,kBAAkB;YAiFZ,2BAA2B;IAkLzC;;;mFAG+E;IAC/E,OAAO,CAAC,qBAAqB;IA8B7B;;;;;iDAK6C;YAC/B,qBAAqB;YAiBrB,iBAAiB;IA6Z/B;iFAC6E;YAC/D,kBAAkB;IAoEhC,OAAO,CAAC,oCAAoC;IAa5C;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,qBAAqB;YAoDf,aAAa;IAoH3B;;;;;;;;;;;;OAYG;IACG,yBAAyB,CAC7B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;IAgK/B,OAAO,CAAC,mBAAmB;CAyB5B"}

package/daemon/dist/domain/restore-orchestrator.js

@@ -1,11 +1,13 @@
 import { nonInterruptiveNotice, nonInterruptiveSummary } from "../adapters/non-interruptive.js";
-import { readFileSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { NativePermissionStore } from "./native-permission-store.js";
 import { resolvePermissionPolicyAttachment } from "./permission-policy/policy-ref.js";
+import { claudeResumeRotation } from "./session-registry.js";
 import { assessNativeResumeProbe } from "./native-resume-probe.js";
-import { verifyClaudePaneProcess } from "./native-process-lineage.js";
+import { observeClaudeDelivery, observeClaudeResumeLaunch, verifyClaudePaneProcess } from "./native-process-lineage.js";
 import { reanchorBuiltinStartupFile, reanchorShippedProjectionEntry } from "./builtin-startup-files.js";
+import { seatGuidance, restoreMissingGuidance, missingGuidanceBlocks } from "./restore-guidance.js";
 import { AppliedLaunchObservationStore } from "./applied-launch-observation-store.js";
 import { classifyPaneRuntimeMatch } from "./seat-identity-reconciler.js";
 import { isShellForeground } from "./shell-classifier.js";
@@ -30,6 +32,9 @@ export function rollupRestoreRigResult(nodes) {
     const allFailed = nodes.every((node) => node.status === "failed");
     if (allFailed)
         return "failed";
+    // A seat running without part of its guidance keeps its own status; the rig isn't fully restored.
+    if (nodes.some((node) => (node.guidanceGaps?.length ?? 0) > 0))
+        return "partially_restored";
     if (nodes.some((node) => node.status === "fresh" || node.status === "fresh-primed" || node.status === "awaiting-decision" || node.status === "failed" || node.status === "attention_required")) {
         return "partially_restored";
     }
@@ -48,6 +53,25 @@ export const NON_RUNNING_LAUNCH_STATUSES = new Set([
 export function launchStatusIsRunning(status) {
     return !NON_RUNNING_LAUNCH_STATUSES.has(status);
 }
+/** What `rig launch` does for this node from this snapshot without --fresh, read as the restore path reads it: the
+ *  occupant, then the pre-launch stop-and-ask check, then the resume decision (restoreNodeWithCompensation and the
+ *  resume step after it). An exited agent's message offers stop-then-launch as a resume only when this says so. */
+function snapshotLaunchOutcome(data, nodeId) {
+    const occupant = resolveActiveSnapshotSession(data, nodeId);
+    if (occupant.kind === "ambiguous")
+        return { kind: "unrecoverable", why: "can't tell which saved session is this seat's" };
+    const session = occupant.kind === "resolved" ? occupant.session : null;
+    if (!session)
+        return { kind: "fresh", why: "saves no session for this seat" };
+    const policy = session.restorePolicy ?? "resume_if_possible";
+    if (policy !== "resume_if_possible")
+        return { kind: "fresh", why: `saves this seat with restore policy '${policy}'` };
+    if (!session.resumeToken)
+        return { kind: "decision", why: "has no resume token for this seat" };
+    if (!session.resumeType || session.resumeType === "none")
+        return { kind: "fresh", why: "records no resume source for this seat" };
+    return { kind: "resume" };
+}
 export class RestoreOrchestrator {
     db;
     activeRestores = new Set();
@@ -334,11 +358,28 @@ export class RestoreOrchestrator {
                 .filter((s) => s.nodeId === node.id && s.status === "running");
             let isLive = false;
             let isUnknown = false;
+            let idleSession;
             for (const session of sessions) {
                 try {
                     const alive = await this.tmuxAdapter.hasSession(session.sessionName);
                     if (alive) {
+                        // A preserved shell is not a running agent. Reuse the process-lineage
+                        // check's positive idle-shell evidence; opaque wrappers stay untouched.
                         isLive = true;
+                        const binding = this.sessionRegistry.getBindingForNode(node.id);
+                        const pane = binding?.tmuxSession === session.sessionName ? binding.tmuxPane : null;
+                        const runtime = allNodes.find(current => current.id === node.id)?.runtime ?? node.runtime;
+                        // Launch needs consistent positive evidence: both samples idle with the same fingerprint, and the
+                        // bound pane still in this session (a recycled pane id could name another session's shell).
+                        if (pane && ["claude-code", "codex", "pi", "omp"].includes(runtime ?? "")
+                            && isShellForeground(await this.tmuxAdapter.getPaneCommand(pane) ?? "")
+                            && (await this.tmuxAdapter.listPanes(session.sessionName)).some(candidate => candidate.id === pane)
+                            && (await observeClaudeDelivery({ target: pane, tmux: this.tmuxAdapter, listProcesses: this.listProcesses }, { unknownKeepsIdle: false })).state === "idle_shell"
+                            && isShellForeground(await this.tmuxAdapter.getPaneCommand(pane) ?? "")) {
+                            idleSession = session.sessionName;
+                            isLive = false;
+                            continue;
+                        }
                         break;
                     }
                 }
@@ -350,6 +391,26 @@ export class RestoreOrchestrator {
                 alreadyRunning.push({ nodeId: node.id, logicalId: node.logicalId });
                 continue;
             }
+            if (idleSession) {
+                // Keep the pane/history and the existing per-target failure contract.
+                // Choosing a fresh versus resumed conversation belongs to the person. Stopping closes the pane, so
+                // stop-then-launch is offered as a resume only when this snapshot can resume the seat; otherwise the
+                // message says what that launch would do instead. The command pins the snapshot that was checked.
+                const outcome = snapshotLaunchOutcome(snapshot.data, node.id);
+                const launchCommand = `rig launch ${rigId} ${node.logicalId} --snapshot-id ${snapshot.id}`;
+                const relaunch = outcome.kind === "resume"
+                    ? `To resume its conversation: rig seat stop ${idleSession} --reason "<why>", then ${launchCommand} (this closes the pane, and launch resumes from that snapshot's resume token). `
+                    : `Stopping it and launching from snapshot ${snapshot.id} won't resume this conversation: that snapshot ${outcome.why}, so launch would `
+                        + `${outcome.kind === "fresh" ? "start a fresh conversation" : outcome.kind === "decision" ? "start nothing and ask for a decision" : "fail"}. `;
+                launched.push({
+                    nodeId: node.id, logicalId: node.logicalId, status: "attention_required",
+                    error: `Session alive, agent not running for '${node.logicalId}': tmux session '${idleSession}' holds an idle shell, and its pane and history are preserved. `
+                        + `The person chooses how to bring the agent back. ${relaunch}`
+                        + `To start a blank occupant: rig seat launch ${idleSession} --fresh --stop --reason "<why>". `
+                        + `To keep the pane: attach to tmux session '${idleSession}' and restart the agent there by hand.`,
+                });
+                continue;
+            }
             if (isUnknown) {
                 // OPR.0.4.3.28 correction — INVERT the fail-closed-on-unknown launch default. A failed tmux
                 // liveness probe is NOT positive evidence of a live seat (only isLive, above, is). Deny-by-
@@ -724,7 +785,39 @@ export class RestoreOrchestrator {
         if (launchResult.warnings?.length) {
             warnings?.push(...launchResult.warnings);
         }
-        return this.postLaunchRestore(entry, rigId, data, launchResult.sessionName, launchResult, opts, warnings, priorState);
+        const restored = await this.postLaunchRestore(entry, rigId, data, launchResult.sessionName, launchResult, opts, warnings, priorState);
+        return this.checkRestoredGuidance(restored, entry.node, rigId, data, warnings);
+    }
+    /** A seat that came back running should also have its role, culture and SOP guidance. If its
+     *  guidance file still lacks a managed block it should hold, the seat keeps its true status (a
+     *  live resumed session is still running) and the gap is disclosed on the node and in the
+     *  warnings, so the rig is reported partially_restored, not fully_restored. */
+    checkRestoredGuidance(result, node, rigId, data, warnings) {
+        // Every status with a live session; attention_required keeps its status and gains the disclosure.
+        if (!["resumed", "fresh-primed", "fresh", "rebuilt", "attention_required"].includes(result.status))
+            return result;
+        let guidance;
+        try {
+            guidance = seatGuidance(data.nodeStartupContext?.[node.id] ?? null, node.cwd, this.rigRepo.getRigClaudeManagedBlockFile(rigId), existsSync, (path) => readFileSync(path, "utf-8"));
+        }
+        catch (err) {
+            warnings?.push(`Restore: ${node.logicalId}: could not check its guidance: ${err.message}`);
+            return { ...result, guidanceGaps: ["(guidance check failed)"] };
+        }
+        if (!guidance || guidance.items.length === 0)
+            return result;
+        let missing;
+        try {
+            missing = missingGuidanceBlocks(guidance, { exists: existsSync, readFile: (path) => readFileSync(path, "utf-8") });
+        }
+        catch (err) {
+            missing = [`(could not read ${guidance.targetPath}: ${err.message})`];
+        }
+        if (missing.length === 0)
+            return result;
+        const gap = `${node.logicalId} is running without part of its guidance: ${guidance.targetPath} lacks the OpenRig blocks ${missing.join(", ")}.`;
+        warnings?.push(`Restore: ${gap}`);
+        return { ...result, guidanceGaps: missing };
     }
     /** OPR.0.3.4.2 (B) — roll a just-launched session back to ZERO sessions for
      *  the awaiting-decision outcome: kill the live blank session, mark its row
@@ -804,6 +897,34 @@ export class RestoreOrchestrator {
                     warnings?.push(`Restore activity hooks: ${error.message}`);
                 }
         }
+        // A narrow exception to the replay containment below: before either native resume path
+        // starts the harness, put back only the MISSING managed guidance blocks from the saved
+        // startup selection. Ordinary `rig down` strips them; without this the resumed
+        // seat came back with no role, culture or SOP. Existing blocks are never refreshed; nothing
+        // reaches the conversation; no action, skill or plugin runs. Never blocks the resume.
+        if (resumeRequested && resumeToken && launchResult) {
+            let guidance = null;
+            try {
+                guidance = seatGuidance(startupCtx, node.cwd, this.rigRepo.getRigClaudeManagedBlockFile(rigId), existsSync, (path) => readFileSync(path, "utf-8"));
+            }
+            catch (err) {
+                // Guidance never blocks the exact resume; the post-launch check discloses the gap.
+                warnings?.push(`Restore guidance: ${node.logicalId}: could not read its saved guidance selection: ${err.message}`);
+            }
+            if (guidance && guidance.items.length > 0) {
+                const repair = restoreMissingGuidance(guidance, {
+                    exists: existsSync,
+                    readFile: (path) => readFileSync(path, "utf-8"),
+                    writeFile: (path, content) => writeFileSync(path, content, "utf-8"),
+                    mkdirp: (path) => mkdirSync(path, { recursive: true }),
+                });
+                if (repair.restored.length > 0) {
+                    warnings?.push(`Restore guidance: ${node.logicalId}: put back missing blocks ${repair.restored.join(", ")} in ${guidance.targetPath} from their current source files.`);
+                }
+                for (const gap of repair.gaps)
+                    warnings?.push(`Restore guidance: ${node.logicalId}: ${gap}`);
+            }
+        }
         if (resumeRequested && !isPodAware) {
             // Legacy resume path
             if (!resumeToken) {
@@ -815,9 +936,28 @@ export class RestoreOrchestrator {
                 return { nodeId: node.id, logicalId: node.logicalId, status: "awaiting-decision", error: `Original session unresumable: resume requested but no token available. No session is running. Re-run with --fresh ${node.logicalId} for a deliberate fresh-primed seat, or restore the original session manually.` };
             }
             else {
+                const launchedSessionId = launchResult?.session.id;
+                if (launchedSessionId && this.claudeResume.canResume(resumeType, resumeToken)) {
+                    // Before the resume: Claude's SessionStart hook can land before attemptResume returns.
+                    try {
+                        this.sessionRegistry.recordResumeLaunch(launchedSessionId, resumeToken);
+                    }
+                    catch { /* best-effort: without it a rotation stays unproved, as before */ }
+                }
                 const resumeOutcome = await this.attemptResume(node.id, sessionName, resumeType, resumeToken, node.cwd ?? "/", node.codexConfigProfile, node.model, this.resolveRestorePosture(node.id, rigId), node.effort, warnings);
                 if (resumeOutcome.kind === "resumed") {
                     baseStatus = "resumed";
+                    if (launchedSessionId && this.claudeResume.canResume(resumeType, resumeToken)) {
+                        // The process this resume started, as the launch itself observes it (#1077): the one its
+                        // identity check proved, else one observed now.
+                        try {
+                            const launched = resumeOutcome.launchedProcess ?? await observeClaudeResumeLaunch({ target: sessionName, tmux: this.tmuxAdapter,
+                                ...(this.listProcesses ? { listProcesses: this.listProcesses } : {}), token: resumeToken });
+                            if (launched)
+                                this.sessionRegistry.recordResumeLaunchProcess(launchedSessionId, resumeToken, launched);
+                        }
+                        catch { /* best-effort: without it a rotation stays unproved, as before */ }
+                    }
                 }
                 else if (resumeOutcome.kind === "attention_required") {
                     // L3 Decision 2: Claude resume-selection prompt -> attention_required.
@@ -896,6 +1036,9 @@ export class RestoreOrchestrator {
         // explicit+versioned+durable+idempotent contract in the D4 operation-id
         // phase, where its durability primitives live. Deliberate fresh-primed
         // launches are new histories and keep their replay.
+        // One narrow exception: MISSING managed guidance blocks are put back before the harness
+        // starts (see restoreMissingGuidance above); existing blocks are still never rewritten, and
+        // nothing else is replayed.
         const replayContained = resumeRequested && !!resumeToken;
         const startupRuntime = startupCtx?.runtime ?? node.runtime ?? null;
         const startupAdapter = startupRuntime ? opts?.adapters?.[startupRuntime] : undefined;
@@ -980,7 +1123,8 @@ export class RestoreOrchestrator {
                     };
                     try {
                         const { StartupOrchestrator } = await import("./startup-orchestrator.js");
-                        const startupOrch = new StartupOrchestrator({ db: this.db, sessionRegistry: this.sessionRegistry, eventBus: this.eventBus, tmuxAdapter: this.tmuxAdapter });
+                        const startupOrch = new StartupOrchestrator({ db: this.db, sessionRegistry: this.sessionRegistry, eventBus: this.eventBus, tmuxAdapter: this.tmuxAdapter,
+                            ...(this.listProcesses ? { listProcesses: this.listProcesses } : {}) });
                         const replayAsRestore = baseStatus !== "fresh-primed";
                         const shouldLaunchHarness = isPodAware;
                         const startupResult = await startupOrch.startNode({
@@ -1140,7 +1284,10 @@ export class RestoreOrchestrator {
             // join; a hook/operator may have changed it meanwhile. Never backfill here.
             const retained = sameSession && (managedClaudeResume
                 ? this.sessionRegistry.resumeTokenMatches(sessionId, "claude_id", resumeToken)
+                    // Claude continued the resumed conversation under a new id (its hook said so).
+                    || this.sessionRegistry.claudeResumeRotatedFrom(sessionId, resumeToken)
                 : current.resume_token === resumeToken
+                    || (node.runtime === "claude-code" && this.sessionRegistry.claudeResumeRotatedFrom(sessionId, resumeToken))
                     || (!current.resume_token && this.sessionRegistry.updateResumeToken(sessionId, node.runtime === "codex" ? "codex_id" : "claude_id", resumeToken, "scrape")));
             if (!retained) {
                 markManagedResumeAttention();
@@ -1272,7 +1419,7 @@ export class RestoreOrchestrator {
                     warnings?.push(`${sessionName}: ${notice}`);
                 if (result.appliedLaunch && launchGeneration)
                     this.appliedLaunchStore.recordGeneration(launchGeneration, result.appliedLaunch);
-                return { kind: "resumed" };
+                return { kind: "resumed", ...(result.launchedProcess ? { launchedProcess: result.launchedProcess } : {}) };
             }
             if (result.code === "retry_fresh")
                 return { kind: "retry_fresh" };
@@ -1412,11 +1559,15 @@ export class RestoreOrchestrator {
         if (!sessionName) {
             return { ok: false, code: "tmux_session_missing", detail: "No tmux session bound for this node." };
         }
-        const sessRow = this.db.prepare("SELECT session_name, resume_token FROM sessions WHERE node_id = ? ORDER BY created_at DESC, id DESC LIMIT 1").get(nodeId);
+        const sessRow = this.db.prepare("SELECT session_name, resume_type, resume_token, resume_provenance, resume_rotated_from, resume_rotated_process, resume_launch_process FROM sessions WHERE node_id = ? ORDER BY created_at DESC, id DESC LIMIT 1").get(nodeId);
         if (!sessRow || sessRow.session_name !== sessionName) {
             return { ok: false, code: "binding_mismatch", detail: `Canonical binding ${sessionName} does not match the latest session row.` };
         }
         const expectedResumeToken = sessRow.resume_token;
+        // The one alternative argv may carry: the token OpenRig launched this row to resume, when the
+        // first hook after that launch recorded Claude continuing it as the stored token (#1077), and
+        // only in the process that sent that hook.
+        const rotation = sessRow.resume_type === "claude_id" ? claudeResumeRotation(sessRow) : null;
         if (!expectedResumeToken) {
             return { ok: false, code: "resume_token_not_used", detail: "No resume token recorded on the latest session row." };
         }
@@ -1437,6 +1588,7 @@ export class RestoreOrchestrator {
         // basename alone is never sufficient for no-input recovery.
         const nodeRow = this.db.prepare("SELECT runtime FROM nodes WHERE id = ?").get(nodeId);
         const runtime = nodeRow?.runtime ?? null;
+        // One exact-lineage check per process, accepting the stored token or the recorded rotation.
         const identity = await rebindAndVerifyPaneIdentity({
             db: this.db,
             sessionRegistry: this.sessionRegistry,
@@ -1446,6 +1598,7 @@ export class RestoreOrchestrator {
             runtime,
             expectedResumeToken,
             requireExactResumeLineage: true,
+            resumeRotation: rotation,
             ...(this.listProcesses ? { listProcesses: this.listProcesses } : {}),
         });
         if (!identity.ok) {
@@ -1457,6 +1610,7 @@ export class RestoreOrchestrator {
             target: identity.pane,
             tmux: this.tmuxAdapter,
             expectedToken: expectedResumeToken,
+            rotation,
             requireResume: true,
             ...(this.listProcesses ? { listProcesses: this.listProcesses } : {}),
         });