@openrig/cli 0.7.0 → 0.7.1

package/daemon/dist/domain/terminal-policy.js

@@ -0,0 +1,117 @@
+import { resolveCurrentSessionAddress } from "./session-registry.js";
+export const TERMINAL_PRESETS = ["no-peer-interventions", "help-within-instructions", "full-control"];
+const CURRENT = { preset: "full-control", helpers: [], exceptions: {} };
+const SCOPES = ["self", "openrig", "peer"];
+const ACTIONS = ["compaction", "model"];
+/** Deliberate choices, not a free-text instruction interpreter or native permission policy. */
+export function parseTerminalPolicy(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error("Supply a terminal policy object.");
+    const v = value;
+    if (!TERMINAL_PRESETS.includes(v.preset))
+        throw new Error(`preset must be ${TERMINAL_PRESETS.join(", ")}`);
+    const helpers = v.helpers ?? [];
+    if (!Array.isArray(helpers) || helpers.length > 100 || helpers.some(h => typeof h !== "string" || !h.trim() || h.length > 256))
+        throw new Error("helpers must be a list of named seat addresses (at most 100).");
+    const exceptions = v.exceptions ?? {};
+    if (!exceptions || typeof exceptions !== "object" || Array.isArray(exceptions))
+        throw new Error("exceptions must be an object.");
+    for (const [scope, actions] of Object.entries(exceptions)) {
+        if (!SCOPES.includes(scope) || !actions || typeof actions !== "object" || Array.isArray(actions))
+            throw new Error("Exception scopes are self, openrig and peer.");
+        for (const [action, decision] of Object.entries(actions)) {
+            if (!ACTIONS.includes(action) || typeof decision !== "string" || !["allow", "deny"].includes(decision))
+                throw new Error("Exceptions select allow or deny for compaction or model (including effort).");
+        }
+    }
+    return { preset: v.preset, helpers: [...new Set(helpers.map(h => h.trim()))],
+        exceptions: JSON.parse(JSON.stringify(exceptions)) };
+}
+export class TerminalPolicyRefusal extends Error {
+    actorClass;
+    action;
+    code = "terminal_policy_refused";
+    constructor(actorClass, action) {
+        super(`This seat's terminal policy does not allow ${actorClass} ${action}${action === "model" ? " or effort changes" : ""}. Read rig seat status <seat>; change the explicit policy with rig seat set-terminal-policy if authorised. The existing rig send --dangerously-interact --reason path is unchanged; native prompt and interruption guards still apply.`);
+        this.actorClass = actorClass;
+        this.action = action;
+    }
+}
+/** One node-owned choice survives occupant replacement. Missing old schemas retain the old behaviour. */
+export class TerminalPolicyStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    available() {
+        return !!this.db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='seat_terminal_policies'").get();
+    }
+    read(nodeId) {
+        const row = this.available() ? this.db.prepare("SELECT * FROM seat_terminal_policies WHERE node_id=?").get(nodeId) : undefined;
+        return { config: row ? parseTerminalPolicy(JSON.parse(row.config_json)) : CURRENT,
+            source: row?.source ?? "schema_unavailable", actor: row?.actor ?? null,
+            instruction: row?.instruction ?? "Terminal policy unavailable; current behaviour retained.", changedAt: row?.changed_at ?? null };
+    }
+    write(nodeId, config, actor, instruction, rigDefault = false) {
+        if (!this.available())
+            throw new Error("Terminal policy schema unavailable; upgrade the daemon before selecting a policy.");
+        const node = this.db.prepare("SELECT rig_id FROM nodes WHERE id=?").get(nodeId);
+        if (!node)
+            throw new Error("Seat no longer exists.");
+        const table = rigDefault ? "rig_terminal_policy_defaults" : "seat_terminal_policies";
+        const key = rigDefault ? "rig_id" : "node_id";
+        this.db.prepare(`INSERT INTO ${table}(${key},config_json,actor,instruction${rigDefault ? "" : ",source"})
+      VALUES (?,?,?,?${rigDefault ? "" : ",'explicit'"}) ON CONFLICT(${key}) DO UPDATE SET
+      config_json=excluded.config_json,actor=excluded.actor,instruction=excluded.instruction,changed_at=datetime('now')
+      ${rigDefault ? "" : ",source='explicit'"}`)
+            .run(rigDefault ? node.rig_id : nodeId, JSON.stringify(parseTerminalPolicy(config)), actor, instruction);
+    }
+    sameSeat(a, b) {
+        if (a === b)
+            return true;
+        const left = resolveCurrentSessionAddress(this.db, a);
+        return !!left && left.nodeId === resolveCurrentSessionAddress(this.db, b)?.nodeId;
+    }
+    classify(nodeId, actor) {
+        if (actor.source === "openrig")
+            return "openrig";
+        if (!actor.session)
+            return "unknown";
+        return resolveCurrentSessionAddress(this.db, actor.session)?.nodeId === nodeId ? "self" : "peer";
+    }
+    check(nodeId, action, actor) {
+        const { config, source } = this.read(nodeId);
+        if (source === "schema_unavailable")
+            return { actorClass: "unknown", actor: null, preset: config.preset };
+        const actorClass = this.classify(nodeId, actor);
+        // No authenticated identity is invented for a plain shell or old caller. This is cooperative policy.
+        if (actorClass === "unknown")
+            return { actorClass, actor: null, preset: config.preset };
+        const exception = config.exceptions[actorClass]?.[action];
+        const allowed = exception ? exception === "allow" : actorClass !== "peer" || config.preset === "full-control"
+            || (config.preset === "help-within-instructions" && actor.source === "caller" && actor.session !== null
+                && config.helpers.some(helper => this.sameSeat(helper, actor.session)));
+        if (!allowed)
+            throw new TerminalPolicyRefusal(actorClass, action);
+        return { actorClass, actor: actor.source === "caller" ? actor.session : "OpenRig", preset: config.preset };
+    }
+    account(nodeId, runtime) {
+        const saved = this.read(nodeId);
+        const rules = Object.fromEntries(SCOPES.map(scope => [scope, Object.fromEntries(ACTIONS.map(action => [action,
+                saved.config.exceptions[scope]?.[action] ?? (scope !== "peer" || saved.config.preset === "full-control" ? "allow"
+                    : saved.config.preset === "no-peer-interventions" ? "deny" : "named helpers only")]))]));
+        const label = Object.values(saved.config.exceptions).some(actions => Object.keys(actions ?? {}).length > 0) ? "Custom" : saved.config.preset;
+        const rigDefault = this.available() ? this.db.prepare(`SELECT d.config_json,d.actor,d.instruction
+      FROM nodes n JOIN rig_terminal_policy_defaults d ON d.rig_id=n.rig_id WHERE n.id=?`).get(nodeId) : undefined;
+        const { config: _config, ...metadata } = saved;
+        return { state: saved.source === "schema_unavailable" ? "unknown" : "planned",
+            ...metadata, preset: saved.config.preset, label, helpers: saved.config.helpers, rules,
+            rigDefault: { config: rigDefault ? parseTerminalPolicy(JSON.parse(rigDefault.config_json)) : CURRENT,
+                actor: rigDefault?.actor ?? null, instruction: rigDefault?.instruction ?? "Current behaviour", appliesTo: "newly added seats only" },
+            supported: { compaction: runtime === "claude-code" ? "managed" : "not applicable", model: "saved setting; native effect unverified" },
+            enforced: ["managed compaction", "saved model and effort changes"],
+            guidanceOnly: ["other terminal interventions", "standing instruction interpretation"],
+            limits: "Cooperative caller attribution, not authentication. Unattributed callers retain current behaviour. No native permission, interruption-level or override change. OpenRig compaction authority and self behaviour remain allowed unless explicitly changed.", };
+    }
+}
+//# sourceMappingURL=terminal-policy.js.map

package/daemon/dist/domain/terminal-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-policy.js","sourceRoot":"","sources":["../../src/domain/terminal-policy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAErE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,uBAAuB,EAAE,0BAA0B,EAAE,cAAc,CAAU,CAAC;AAW/G,MAAM,OAAO,GAAyB,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAC9F,MAAM,MAAM,GAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC5D,MAAM,OAAO,GAAqB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;AAE1D,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrH,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAwB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7H,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;QAC5H,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACjI,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAsB,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAC/G,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAwB,CAAC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACtH,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAwB,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5F,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAuC,EAAE,CAAC;AAC/F,CAAC;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAEzB;IAAoC;IADhD,IAAI,GAAG,yBAAyB,CAAC;IAC1C,YAAqB,UAAyB,EAAW,MAAsB;QAC7E,KAAK,CAAC,8CAA8C,UAAU,IAAI,MAAM,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,wOAAwO,CAAC,CAAC;QADhV,eAAU,GAAV,UAAU,CAAe;QAAW,WAAM,GAAN,MAAM,CAAgB;IAE/E,CAAC;CACF;AAED,yGAAyG;AACzG,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,SAAS;QACP,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kFAAkF,CAAC,CAAC,GAAG,EAAE,CAAC;IACrH,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,MAAM,CACG,CAAC,CAAC,CAAC,SAAS,CAAC;QACjI,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;YAC/E,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,IAAI,IAAI;YACtE,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,0DAA0D,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,IAAI,IAAI,EAAE,CAAC;IACtI,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,MAA4B,EAAE,KAAa,EAAE,WAAmB,EAAE,UAAU,GAAG,KAAK;QACxG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QAC5H,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAmC,CAAC;QAClH,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACrD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,wBAAwB,CAAC;QACrF,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI,GAAG,iCAAiC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;uBACpF,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,iBAAiB,GAAG;;QAElE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC;aAC1C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC7G,CAAC;IAEO,QAAQ,CAAC,CAAS,EAAE,CAAS;QACnC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC;IACpF,CAAC;IAED,QAAQ,CAAC,MAAc,EAAE,KAAoB;QAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACrC,OAAO,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACnG,CAAC;IAED,KAAK,CAAC,MAAc,EAAE,MAAsB,EAAE,KAAoB;QAChE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,oBAAoB;YAAE,OAAO,EAAE,UAAU,EAAE,SAAkB,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACnH,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChD,qGAAqG;QACrG,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACxF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc;eACxG,CAAC,MAAM,CAAC,MAAM,KAAK,0BAA0B,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;mBAClG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,OAAQ,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAClE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC7G,CAAC;IAED,OAAO,CAAC,MAAc,EAAE,OAAsB;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM;gBAC3G,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO;oBAC/G,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7I,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;yFAC+B,CAAC,CAAC,GAAG,CAAC,MAAM,CACtB,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,oBAAoB,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,SAAkB;YAC7F,GAAG,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK;YACrF,UAAU,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;gBAClG,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,IAAI,mBAAmB,EAAE,SAAS,EAAE,wBAAwB,EAAE;YACtI,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,EAAE,KAAK,EAAE,yCAAyC,EAAE;YACrI,QAAQ,EAAE,CAAC,oBAAoB,EAAE,gCAAgC,CAAC;YAClE,YAAY,EAAE,CAAC,8BAA8B,EAAE,qCAAqC,CAAC;YACrF,MAAM,EAAE,2PAA2P,GACpQ,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/domain/terminal-seat.d.ts

@@ -0,0 +1,9 @@
+import type Database from "better-sqlite3";
+/** Exact-text selection needs the same unique current target as input delivery,
+ * plus a binding to the actual tmux address. Historical rows and unbound
+ * canonical names alone do not establish what is receiving this input. */
+export declare function isBoundTerminalSeat(db: Database.Database, sessionName: string): boolean;
+/** A `runtime: terminal` node, by its newest session row or else its composed canonical name
+ *  (`<logical id with dashes>@<rig>`). A database that can't answer reads as not terminal. */
+export declare function isTerminalSeat(db: Database.Database, sessionName: string): boolean;
+//# sourceMappingURL=terminal-seat.d.ts.map

package/daemon/dist/domain/terminal-seat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-seat.d.ts","sourceRoot":"","sources":["../../src/domain/terminal-seat.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAG3C;;0EAE0E;AAC1E,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAYvF;AAED;8FAC8F;AAC9F,wBAAgB,cAAc,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAiBlF"}

package/daemon/dist/domain/terminal-seat.js

@@ -0,0 +1,37 @@
+import { resolveGuardTarget } from "./seat-delivery-guard.js";
+/** Exact-text selection needs the same unique current target as input delivery,
+ * plus a binding to the actual tmux address. Historical rows and unbound
+ * canonical names alone do not establish what is receiving this input. */
+export function isBoundTerminalSeat(db, sessionName) {
+    try {
+        const target = resolveGuardTarget(db, sessionName);
+        if (!target)
+            return false;
+        const current = db.prepare(`SELECT n.runtime AS runtime FROM nodes n JOIN bindings b ON b.node_id = n.id
+        WHERE n.id = ? AND (b.tmux_session = ? OR b.tmux_pane = ?)`).get(target.nodeId, sessionName, sessionName);
+        return current?.runtime === "terminal";
+    }
+    catch {
+        return false;
+    }
+}
+/** A `runtime: terminal` node, by its newest session row or else its composed canonical name
+ *  (`<logical id with dashes>@<rig>`). A database that can't answer reads as not terminal. */
+export function isTerminalSeat(db, sessionName) {
+    try {
+        const exact = db.prepare(`SELECT n.runtime AS runtime FROM sessions s JOIN nodes n ON n.id = s.node_id
+        WHERE s.session_name = ? ORDER BY s.id DESC LIMIT 1`).get(sessionName);
+        if (exact)
+            return exact.runtime === "terminal";
+        const at = sessionName.lastIndexOf("@");
+        if (at <= 0)
+            return false;
+        const composed = db.prepare(`SELECT n.runtime AS runtime FROM nodes n JOIN rigs r ON r.id = n.rig_id
+        WHERE r.name = ? AND REPLACE(n.logical_id, '.', '-') = ? LIMIT 1`).get(sessionName.slice(at + 1), sessionName.slice(0, at));
+        return composed?.runtime === "terminal";
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=terminal-seat.js.map

package/daemon/dist/domain/terminal-seat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-seat.js","sourceRoot":"","sources":["../../src/domain/terminal-seat.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D;;0EAE0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,EAAqB,EAAE,WAAmB;IAC5E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CACxB;mEAC6D,CAC9D,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAA2C,CAAC;QACzF,OAAO,OAAO,EAAE,OAAO,KAAK,UAAU,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;8FAC8F;AAC9F,MAAM,UAAU,cAAc,CAAC,EAAqB,EAAE,WAAmB;IACvE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,OAAO,CACtB;4DACsD,CACvD,CAAC,GAAG,CAAC,WAAW,CAA2C,CAAC;QAC7D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU,CAAC;QAC/C,MAAM,EAAE,GAAG,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CACzB;yEACmE,CACpE,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAA2C,CAAC;QACrG,OAAO,QAAQ,EAAE,OAAO,KAAK,UAAU,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/daemon/dist/domain/topology-converge.d.ts

@@ -1,11 +1,16 @@
 import type { PodRigInstantiator, AddMemberOutcome } from "./rigspec-instantiator.js";
 import type { ClaimService, ReconcileSessionOutcome } from "./claim-service.js";
+import type { SeatSkillPaths } from "./seat-skill-storage.js";
+import type { RigRepository } from "./rig-repository.js";
+import { type EdgeOpOutcome } from "./rig-edge-ops.js";
+import type { RecordCreated } from "./operation-correlation.js";
 /**
  * Topology-mutation converge spine (OPR.0.3.3.24, AC-6 scaffold).
  *
  * The reconciler model is: diff(declaredSpec, liveTopology) -> Op[]; converge(op)
- * applies each supported op. This release IMPLEMENTS one op — `add_member` —
- * built on the extracted create-node + launch-binding primitives. The Op union
+ * applies each supported op: member addition, session reconciliation and
+ * edge-only mutation. Member addition uses the create-node + launch-binding
+ * primitives; edge operations only change persisted topology. The Op union
  * is COMPLETE-shaped (all reshape kinds typed) and the differ CLASSIFIES the
  * full set, but the identity-migrating kinds (remove/move/fork/change_runtime)
  * are CLASSIFIED-deferred to the 0.4.0 identity theme: they migrate or clone an
@@ -47,6 +52,16 @@ export type TopologyOp = {
     kind: "change_runtime";
     logicalId: string;
     runtime: string;
+} | {
+    kind: "add_edge";
+    from: string;
+    to: string;
+    edgeKind: string;
+    plan?: boolean;
+} | {
+    kind: "remove_edge";
+    edgeId: string;
+    plan?: boolean;
 };
 export type TopologyOpKind = TopologyOp["kind"];
 /** The op-kinds converge() implements this release. The rest are classified-deferred. */
@@ -62,6 +77,10 @@ export type ConvergeResult = {
     kind: "reconcile_session";
     supported: true;
     outcome: ReconcileSessionOutcome;
+} | {
+    kind: "add_edge" | "remove_edge";
+    supported: true;
+    outcome: EdgeOpOutcome;
 } | {
     kind: TopologyOpKind;
     detected: true;
@@ -103,6 +122,8 @@ export interface ConvergeDeps {
     instantiator: PodRigInstantiator;
     /** Required for reconcile_session ops; add_member-only callers may omit it. */
     claimService?: ClaimService;
+    /** Required for edge-only ops. */
+    rigRepo?: RigRepository;
 }
 /**
  * Apply a single topology op. `add_member` runs the extracted create-node +
@@ -116,5 +137,7 @@ export interface ConvergeDeps {
  */
 export declare function convergeOp(deps: ConvergeDeps, rigId: string, op: TopologyOp, rigRoot: string, opts?: {
     cwdOverride?: string;
+    launchAdditionsFrom?: SeatSkillPaths;
+    recordCreated?: RecordCreated;
 }): Promise<ConvergeResult>;
 //# sourceMappingURL=topology-converge.d.ts.map

package/daemon/dist/domain/topology-converge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"topology-converge.d.ts","sourceRoot":"","sources":["../../src/domain/topology-converge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAEhF;;;;;;;;;;;;;;;GAeG;AAEH,kDAAkD;AAClD,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAM/H;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,GACnH;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;AAEhD,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,EAAE,SAAS,cAAc,EAAwC,CAAC;AAEjG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAE/D;AAED,wFAAwF;AACxF,eAAO,MAAM,kBAAkB,gDAAgD,CAAC;AAEhF,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,mDAAmD;AACnD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAsBzF;AAED;;;mCAGmC;AACnC,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,kBAAkB,CAAC;IACjC,+EAA+E;IAC/E,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9B,OAAO,CAAC,cAAc,CAAC,CAmCzB"}
+{"version":3,"file":"topology-converge.d.ts","sourceRoot":"","sources":["../../src/domain/topology-converge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,KAAK,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE;;;;;;;;;;;;;;;;GAgBG;AAEH,kDAAkD;AAClD,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAM/H;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,GACnH;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAI9D;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE5D,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;AAEhD,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,EAAE,SAAS,cAAc,EAAmE,CAAC;AAE5H,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAE/D;AAED,wFAAwF;AACxF,eAAO,MAAM,kBAAkB,gDAAgD,CAAC;AAEhF,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GAChF;IAAE,IAAI,EAAE,UAAU,GAAG,aAAa,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/E,iFAAiF;AACjF,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,mDAAmD;AACnD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAsBzF;AAED;;;mCAGmC;AACnC,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,kBAAkB,CAAC;IACjC,+EAA+E;IAC/E,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,kCAAkC;IAClC,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,UAAU,EACd,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,cAAc,CAAC;IAAC,aAAa,CAAC,EAAE,aAAa,CAAA;CAAE,GACnG,OAAO,CAAC,cAAc,CAAC,CA+CzB"}

package/daemon/dist/domain/topology-converge.js

@@ -1,5 +1,6 @@
+import { addRigEdge, removeRigEdge } from "./rig-edge-ops.js";
 /** The op-kinds converge() implements this release. The rest are classified-deferred. */
-export const SUPPORTED_OP_KINDS = ["add_member", "reconcile_session"];
+export const SUPPORTED_OP_KINDS = ["add_member", "reconcile_session", "add_edge", "remove_edge"];
 export function isSupportedOpKind(kind) {
     return SUPPORTED_OP_KINDS.includes(kind);
 }
@@ -55,7 +56,9 @@ export async function convergeOp(deps, rigId, op, rigRoot, opts) {
         case "add_member": {
             const outcome = await deps.instantiator.addMemberToPod(rigId, op.pod, op.member, rigRoot, {
                 cwdOverride: opts?.cwdOverride,
+                ...(opts?.launchAdditionsFrom ? { launchAdditionsFrom: opts.launchAdditionsFrom } : {}),
                 edges: op.edges,
+                recordCreated: opts?.recordCreated,
             });
             return { kind: "add_member", supported: true, outcome };
         }
@@ -75,6 +78,16 @@ export async function convergeOp(deps, rigId, op, rigRoot, opts) {
             });
             return { kind: "reconcile_session", supported: true, outcome };
         }
+        case "add_edge":
+        case "remove_edge": {
+            if (!deps.rigRepo) {
+                return { kind: op.kind, supported: true, outcome: { ok: false, code: "unavailable", message: "Rig repository unavailable; cannot change edges." } };
+            }
+            const outcome = op.kind === "add_edge"
+                ? addRigEdge(deps.rigRepo, { rigId, from: op.from, to: op.to, kind: op.edgeKind, plan: op.plan })
+                : removeRigEdge(deps.rigRepo, { rigId, edgeId: op.edgeId, plan: op.plan });
+            return { kind: op.kind, supported: true, outcome };
+        }
         case "remove_member":
         case "move_member":
         case "fork_member":

package/daemon/dist/domain/topology-converge.js.map

@@ -1 +1 @@
-{"version":3,"file":"topology-converge.js","sourceRoot":"","sources":["../../src/domain/topology-converge.ts"],"names":[],"mappings":"AAoCA,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAA8B,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;AAEjG,MAAM,UAAU,iBAAiB,CAAC,IAAoB;IACpD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,kBAAkB,GAAG,6CAA6C,CAAC;AAqBhF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,QAA0B,EAAE,IAAkB;IACzE,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAErE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAYD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAkB,EAClB,KAAa,EACb,EAAc,EACd,OAAe,EACf,IAA+B;IAE/B,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE;gBACxF,WAAW,EAAE,IAAI,EAAE,WAAW;gBAC9B,KAAK,EAAE,EAAE,CAAC,KAAK;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC1D,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,OAAO;oBACL,IAAI,EAAE,mBAAmB;oBACzB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8CAA8C,EAAE;iBACzG,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC;gBACvD,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;aACxC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACjE,CAAC;QACD,KAAK,eAAe,CAAC;QACrB,KAAK,aAAa,CAAC;QACnB,KAAK,aAAa,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACzF,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,6BAA8B,WAA0B,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"topology-converge.js","sourceRoot":"","sources":["../../src/domain/topology-converge.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAsB,MAAM,mBAAmB,CAAC;AA0ClF,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAA8B,CAAC,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AAE5H,MAAM,UAAU,iBAAiB,CAAC,IAAoB;IACpD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,kBAAkB,GAAG,6CAA6C,CAAC;AAsBhF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,QAA0B,EAAE,IAAkB;IACzE,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAErE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAcD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAkB,EAClB,KAAa,EACb,EAAc,EACd,OAAe,EACf,IAAoG;IAEpG,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE;gBACxF,WAAW,EAAE,IAAI,EAAE,WAAW;gBAC9B,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvF,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,aAAa,EAAE,IAAI,EAAE,aAAa;aACnC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC1D,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,OAAO;oBACL,IAAI,EAAE,mBAAmB;oBACzB,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,8CAA8C,EAAE;iBACzG,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC;gBACvD,WAAW,EAAE,EAAE,CAAC,WAAW;gBAC3B,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;aACxC,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACjE,CAAC;QACD,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,kDAAkD,EAAE,EAAE,CAAC;YACtJ,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,KAAK,UAAU;gBACpC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;gBACjG,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7E,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;QACD,KAAK,eAAe,CAAC;QACrB,KAAK,aAAa,CAAC;QACnB,KAAK,aAAa,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACzF,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,6BAA8B,WAA0B,CAAC,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;AACH,CAAC"}

package/daemon/dist/domain/types.d.ts

@@ -30,6 +30,8 @@ export interface Node {
     runtime: string | null;
     model: string | null;
     effort?: string | null;
+    /** Session-scoped Claude Advisor model; never written to shared Claude settings. */
+    advisor?: string | null;
     /** OPR.0.7.0.7: the seat's explicit effort choice (rig seat set-effort); null = none. */
     effortChoice?: string | null;
     codexConfigProfile?: string | null;
@@ -119,6 +121,8 @@ export type RigEvent = {
     pinnedModel: string;
     effectiveModel: string;
     diagnosis: string | null;
+    /** Absent on events written before this field existed. When present, a restarted daemon doesn't proclaim it again. */
+    occurrenceId?: string;
     channels: Array<{
         channel: string;
         target: string | null;
@@ -151,8 +155,17 @@ export type RigEvent = {
     rigId: string;
     nodeId: string;
     sessionName: string;
+} | {
+    type: "node.terminal_policy_changed";
+    rigId: string;
+    nodeId: string;
+    scope: "seat" | "rig_default";
+    config: unknown;
+    actor: string;
+    reason: string;
 } | {
     type: "node.model_changed";
+    actorClass?: string;
     rigId: string;
     nodeId: string;
     logicalId: string;
@@ -171,6 +184,7 @@ export type RigEvent = {
     operator: string | null;
 } | {
     type: "node.effort_changed";
+    actorClass?: string;
     rigId: string;
     nodeId: string;
     logicalId: string;
@@ -271,6 +285,7 @@ export type RigEvent = {
     nativeSessionIdReason?: string;
     model: string | null;
     effort?: string | null;
+    advisor?: string | null;
     startupPolicyHash: string;
     reason: string;
     operator: string | null;
@@ -287,6 +302,7 @@ export type RigEvent = {
     newGeneration: string | null;
     model: string | null;
     effort?: string | null;
+    advisor?: string | null;
     startupPolicyHash: string;
     reason: string;
     operator: string | null;
@@ -358,6 +374,14 @@ export type RigEvent = {
     detectedReason: string;
     evidenceSource: string;
     overrideReason: string | null;
+    input?: {
+        classification: string;
+        visibleRows: number;
+        suggestionRows: number;
+        choice: "inspect" | "type_without_checking";
+        outcome: "stopped" | "proceed";
+        clearAttempted: false;
+    };
 } | {
     type: "agent.session_identity";
     rigId: string;
@@ -406,6 +430,16 @@ export type RigEvent = {
     };
     reason?: string;
     previousError: string | null;
+} | {
+    type: "seat.attention_clear_refused";
+    rigId: string;
+    nodeId: string;
+    sessionId: string;
+    sessionName: string;
+    attentionClass: "restore_outcome";
+    code: string;
+    attemptId?: number;
+    probe?: import("./native-resume-probe-evidence.js").NativeResumeProbeEvidence;
 } | {
     type: "rig.imported";
     rigId: string;
@@ -569,6 +603,7 @@ export type RigEvent = {
     hasPendingWork?: boolean;
     requestedResumeToken?: string | null;
     requestedResumeType?: string | null;
+    probe?: import("./native-resume-probe-evidence.js").NativeResumeProbeEvidence;
 } | {
     type: "node.startup_challenged";
     rigId: string;
@@ -761,6 +796,10 @@ export type RigEvent = {
     type: "watchdog.job_stopped";
     jobId: string;
     reason: string;
+} | {
+    type: "watchdog.job_updated";
+    jobId: string;
+    changed: string[];
 } | {
     type: "workflow.revised";
     instanceId: string;
@@ -980,7 +1019,7 @@ export interface RestoreValidationBlocker {
 export interface RestoreNodeResult {
     nodeId: string;
     logicalId: string;
-    status: "resumed" | "rebuilt" | "fresh" | "fresh-primed" | "awaiting-decision" | "failed" | "attention_required" | "operator_recovered";
+    status: "resumed" | "rebuilt" | "fresh" | "fresh-primed" | "awaiting-decision" | "failed" | "attention_required" | "operator_recovered" | "left_attached";
     error?: string;
     /** Pane evidence captured when status is `attention_required` (L3, optional). */
     attentionEvidence?: string | null;
@@ -1056,6 +1095,8 @@ export interface AgentActivity {
     eventAt?: string | null;
     /** The emitter's own order for its posts (OpenRig's pi/omp runner), when it sent one. */
     sourceSequence?: number | null;
+    /** How often the emitter promises to report while idle; an idle report older than two of these no longer holds. */
+    livenessSeconds?: number | null;
     rawEvent?: string | null;
     rawSubtype?: string | null;
     runtime?: string | null;
@@ -1186,6 +1227,12 @@ export interface NodeInventoryEntry {
     resumeType: string | null;
     resumeToken: string | null;
     startupCompletedAt: string | null;
+    /** The daemon's attention predicate, also used by the rig attention total. */
+    needsAttention?: boolean;
+    /** true = observed input; false = observed clear; null = no authoritative needs-input answer.
+     * Absent only on inventory that has not been enriched. Never infer false from a zero count. */
+    arbitratedNeedsInput?: boolean | null;
+    needsInputEvidence?: import("./activity-taxonomy.js").ArbitratedSeatState["needsInputEvidence"];
     agentActivity?: AgentActivity;
     contextUsage?: ContextUsage;
     /** Health of the daemon-owned transcript capture for this seat. */
@@ -1413,7 +1460,7 @@ export interface StartupBlock {
     files: StartupFile[];
     actions: StartupAction[];
 }
-export type StartupFailureStage = "permission_selection" | "proof_selection" | "projection" | "pre_launch_files" | "persistence" | "harness_launch" | "readiness_check" | "initial_prompt" | "restore_preload" | "post_launch_files" | "after_files" | "after_ready" | "post_delivery_readiness" | "identity_verification";
+export type StartupFailureStage = "permission_selection" | "proof_selection" | "projection" | "pre_launch_files" | "persistence" | "harness_launch" | "readiness_check" | "initial_prompt" | "restore_preload" | "post_launch_files" | "after_files" | "after_ready" | "post_delivery_readiness" | "assisted_startup" | "identity_verification";
 export interface LifecycleDefaults {
     executionMode: "interactive_resident";
     compactionStrategy?: "default-compaction" | "managed-compaction" | "handover" | "apprentice-handover";
@@ -1464,6 +1511,7 @@ export interface ProfileSpec {
         runtime?: string;
         model?: string;
         effort?: string;
+        advisor?: string;
     };
     startup?: StartupBlock;
     lifecycle?: LifecycleDefaults;
@@ -1494,6 +1542,7 @@ export interface AgentSpec {
         runtime?: string;
         model?: string;
         effort?: string;
+        advisor?: string;
         lifecycle?: LifecycleDefaults;
     };
     startup: StartupBlock;
@@ -1513,6 +1562,7 @@ export interface LegacyRigSpecNode {
     role?: string;
     model?: string;
     effort?: string;
+    advisor?: string;
     cwd?: string;
     surfaceHint?: string;
     workspace?: string;
@@ -1614,6 +1664,7 @@ export interface RigSpecPodMember {
     codexConfigProfile?: string;
     model?: string;
     effort?: string;
+    advisor?: string;
     /**
      * OPR.0.4.6.FAC1: optional seat-side role declaration (writes the
      * existing `nodes.role` column via createMemberNode → addNode). The
@@ -1625,6 +1676,11 @@ export interface RigSpecPodMember {
     /** OPR.0.4.8.3 Seam B: optional per-seat permission_policy REF (builtin:<name> or a spec-relative
      *  custom path). Absent = the floor. Overrides the rig-level ref. */
     permissionPolicy?: string;
+    /** OPR.0.7.0.9 — Claude members only: their own agent file, appended system prompt file and plugin folders,
+     *  as paths beside the spec. Copied into the seat's own storage at launch. */
+    agentFile?: string;
+    appendSystemPromptFile?: string;
+    pluginDirs?: string[];
     /** Non-secret launch environment for this seat; overrides the rig-level `env`. */
     env?: Record<string, string>;
     cwd: string;