@h-rig/cli 0.0.6-alpha.5 → 0.0.6-alpha.51

package/dist/src/commands/task.js

@@ -1,16 +1,14 @@
 // @bun
 // packages/cli/src/commands/task.ts
-import { readFileSync as readFileSync4 } from "fs";
-import { spawnSync as spawnSync2 } from "child_process";
-import { createInterface as createInterface3 } from "readline/promises";
-import { resolve as resolve4 } from "path";
+import { readFileSync as readFileSync3 } from "fs";
+import { spawnSync } from "child_process";
+import { resolve as resolve3 } from "path";
+import { cancel as cancel2, confirm, isCancel as isCancel2 } from "@clack/prompts";
 
 // packages/cli/src/runner.ts
 import { EventBus } from "@rig/runtime/control-plane/runtime/events";
 import { CliError } from "@rig/runtime/control-plane/errors";
 import { evaluate, loadPolicy, resolveAction } from "@rig/runtime/control-plane/runtime/guard";
-import { PluginManager } from "@rig/runtime/control-plane/runtime/plugins";
-import { loadRuntimeContextFromEnv } from "@rig/runtime/control-plane/runtime/context";
 import { buildBinary } from "@rig/runtime/control-plane/runtime/isolation";
 import { CliError as CliError2 } from "@rig/runtime/control-plane/errors";
 function takeFlag(args, flag) {
@@ -130,6 +128,11 @@ function readJsonFile(path) {
     throw new CliError2(`Invalid Rig connection state at ${path}: ${error instanceof Error ? error.message : String(error)}`, 1);
   }
 }
+function writeJsonFile2(path, value) {
+  mkdirSync(dirname(path), { recursive: true });
+  writeFileSync(path, `${JSON.stringify(value, null, 2)}
+`, "utf8");
+}
 function normalizeConnection(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     return null;
@@ -170,29 +173,38 @@ function readRepoConnection(projectRoot) {
   return {
     selected,
     project: typeof record.project === "string" ? record.project : undefined,
-    linkedAt: typeof record.linkedAt === "string" ? record.linkedAt : undefined
+    linkedAt: typeof record.linkedAt === "string" ? record.linkedAt : undefined,
+    serverProjectRoot: typeof record.serverProjectRoot === "string" && record.serverProjectRoot.trim() ? record.serverProjectRoot.trim() : undefined
   };
 }
+function writeRepoConnection(projectRoot, state) {
+  writeJsonFile2(resolveRepoConnectionPath(projectRoot), state);
+}
 function resolveSelectedConnection(projectRoot, options = {}) {
   const repo = readRepoConnection(projectRoot);
   if (!repo)
     return null;
   if (repo.selected === "local")
-    return { alias: "local", connection: { kind: "local", mode: "auto" } };
+    return { alias: "local", connection: { kind: "local", mode: "auto" }, serverProjectRoot: repo.serverProjectRoot };
   const global = readGlobalConnections(options);
   const connection = global.connections[repo.selected];
   if (!connection) {
-    throw new CliError2(`Selected Rig connection "${repo.selected}" was not found. Run \`rig connect list\` or \`rig connect use local\`.`, 1);
+    throw new CliError2(`Selected Rig server "${repo.selected}" was not found. Run \`rig server list\` or \`rig server use local\`.`, 1);
   }
-  return { alias: repo.selected, connection };
+  return { alias: repo.selected, connection, serverProjectRoot: repo.serverProjectRoot };
+}
+function writeRepoServerProjectRoot(projectRoot, serverProjectRoot) {
+  const repo = readRepoConnection(projectRoot);
+  if (!repo)
+    return;
+  writeRepoConnection(projectRoot, { ...repo, serverProjectRoot });
 }
 
 // packages/cli/src/commands/_server-client.ts
-import { spawnSync } from "child_process";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
 import { resolve as resolve2 } from "path";
 import { ensureLocalRigServerConnection } from "@rig/runtime/local-server";
-var cachedGitHubBearerToken;
+var scopedGitHubBearerTokens = new Map;
 function cleanToken(value) {
   const trimmed = value?.trim();
   return trimmed ? trimmed : null;
@@ -209,41 +221,47 @@ function readPrivateRemoteSessionToken(projectRoot) {
   }
 }
 function readGitHubBearerTokenForRemote(projectRoot) {
-  if (cachedGitHubBearerToken !== undefined)
-    return cachedGitHubBearerToken;
+  const scopedKey = resolve2(projectRoot);
+  if (scopedGitHubBearerTokens.has(scopedKey))
+    return scopedGitHubBearerTokens.get(scopedKey) ?? null;
   const privateSession = readPrivateRemoteSessionToken(projectRoot);
-  if (privateSession) {
-    cachedGitHubBearerToken = privateSession;
-    return cachedGitHubBearerToken;
-  }
-  const envToken = cleanToken(process.env.RIG_GITHUB_TOKEN) ?? cleanToken(process.env.GITHUB_TOKEN) ?? cleanToken(process.env.GH_TOKEN);
-  if (envToken) {
-    cachedGitHubBearerToken = envToken;
-    return cachedGitHubBearerToken;
-  }
-  const result = spawnSync("gh", ["auth", "token"], {
-    encoding: "utf8",
-    timeout: 5000,
-    stdio: ["ignore", "pipe", "ignore"]
-  });
-  cachedGitHubBearerToken = result.status === 0 ? cleanToken(result.stdout) : null;
-  return cachedGitHubBearerToken;
+  if (privateSession)
+    return privateSession;
+  return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
+}
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
 }
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
     if (selected?.connection.kind === "remote") {
+      const authToken = readGitHubBearerTokenForRemote(projectRoot);
+      const serverProjectRoot = selected.serverProjectRoot ?? await backfillRemoteServerProjectRoot(projectRoot, selected.connection.baseUrl, authToken);
       return {
         baseUrl: selected.connection.baseUrl,
-        authToken: readGitHubBearerTokenForRemote(projectRoot),
-        connectionKind: "remote"
+        authToken,
+        connectionKind: "remote",
+        serverProjectRoot
       };
     }
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
-      connectionKind: "local"
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
+      connectionKind: "local",
+      serverProjectRoot: resolve2(projectRoot)
     };
   } catch (error) {
     if (error instanceof Error) {
@@ -252,6 +270,29 @@ async function ensureServerForCli(projectRoot) {
     throw error;
   }
 }
+async function backfillRemoteServerProjectRoot(projectRoot, baseUrl, authToken) {
+  const repo = readRepoConnection(projectRoot);
+  const slug = repo?.project?.trim();
+  if (!slug)
+    return null;
+  try {
+    const response = await fetch(`${baseUrl}/api/projects/${encodeURIComponent(slug)}`, {
+      headers: mergeHeaders(undefined, authToken)
+    });
+    if (!response.ok)
+      return null;
+    const payload = await response.json();
+    const project = payload.project && typeof payload.project === "object" && !Array.isArray(payload.project) ? payload.project : null;
+    const checkouts = Array.isArray(project?.checkouts) ? project.checkouts : [];
+    const latestCheckout = [...checkouts].reverse().find((entry) => Boolean(entry && typeof entry === "object" && !Array.isArray(entry) && typeof entry.path === "string"));
+    const path = typeof latestCheckout?.path === "string" && latestCheckout.path.trim() ? latestCheckout.path.trim() : null;
+    if (path)
+      writeRepoServerProjectRoot(projectRoot, path);
+    return path;
+  } catch {
+    return null;
+  }
+}
 function appendTaskFilterParams(url, filters) {
   if (filters.assignee)
     url.searchParams.set("assignee", filters.assignee);
@@ -286,9 +327,12 @@ function diagnosticMessage(payload) {
 }
 async function requestServerJson(context, pathname, init = {}) {
   const server = await ensureServerForCli(context.projectRoot);
+  const headers = mergeHeaders(init.headers, server.authToken);
+  if (server.serverProjectRoot)
+    headers.set("x-rig-project-root", server.serverProjectRoot);
   const response = await fetch(`${server.baseUrl}${pathname}`, {
     ...init,
-    headers: mergeHeaders(init.headers, server.authToken)
+    headers
   });
   const text = await response.text();
   const payload = text.trim().length > 0 ? (() => {
@@ -347,6 +391,15 @@ async function getRunLogsViaServer(context, runId, options = {}) {
   const payload = await requestServerJson(context, `${url.pathname}${url.search}`);
   return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { entries: [] };
 }
+async function getRunTimelineViaServer(context, runId, options = {}) {
+  const url = new URL(`http://rig.local/api/runs/${encodeURIComponent(runId)}/timeline`);
+  if (options.limit !== undefined)
+    url.searchParams.set("limit", String(options.limit));
+  if (options.cursor)
+    url.searchParams.set("cursor", options.cursor);
+  const payload = await requestServerJson(context, `${url.pathname}${url.search}`);
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { entries: [] };
+}
 async function stopRunViaServer(context, runId) {
   const payload = await requestServerJson(context, "/api/runs/stop", {
     method: "POST",
@@ -363,6 +416,72 @@ async function steerRunViaServer(context, runId, message) {
   });
   return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { ok: true };
 }
+async function getRunPiSessionViaServer(context, runId) {
+  const payload = await requestServerJson(context, `/api/runs/${encodeURIComponent(runId)}/pi`);
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : {};
+}
+async function getRunPiMessagesViaServer(context, runId) {
+  const payload = await requestServerJson(context, `/api/runs/${encodeURIComponent(runId)}/pi/messages`);
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { messages: [] };
+}
+async function getRunPiStatusViaServer(context, runId) {
+  const payload = await requestServerJson(context, `/api/runs/${encodeURIComponent(runId)}/pi/status`);
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : {};
+}
+async function getRunPiCommandsViaServer(context, runId) {
+  const payload = await requestServerJson(context, `/api/runs/${encodeURIComponent(runId)}/pi/commands`);
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { commands: [] };
+}
+async function getRunPiCapabilitiesViaServer(context, runId) {
+  const payload = await requestServerJson(context, `/api/runs/${encodeURIComponent(runId)}/pi/capabilities`);
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { capabilities: null };
+}
+async function sendRunPiPromptViaServer(context, runId, text, streamingBehavior) {
+  const payload = await requestServerJson(context, `/api/runs/${encodeURIComponent(runId)}/pi/prompt`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ text, streamingBehavior })
+  });
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { accepted: true };
+}
+async function sendRunPiShellViaServer(context, runId, text) {
+  const payload = await requestServerJson(context, `/api/runs/${encodeURIComponent(runId)}/pi/shell`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ text })
+  });
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { accepted: true };
+}
+async function runRunPiCommandViaServer(context, runId, text) {
+  const payload = await requestServerJson(context, `/api/runs/${encodeURIComponent(runId)}/pi/commands/run`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ text })
+  });
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { type: "done" };
+}
+async function respondRunPiExtensionUiViaServer(context, runId, requestId, valueOrCancel) {
+  const payload = await requestServerJson(context, `/api/runs/${encodeURIComponent(runId)}/pi/extension-ui/respond`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ requestId, ...valueOrCancel })
+  });
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { accepted: true };
+}
+async function abortRunPiViaServer(context, runId) {
+  const payload = await requestServerJson(context, `/api/runs/${encodeURIComponent(runId)}/pi/abort`, { method: "POST" });
+  return payload && typeof payload === "object" && !Array.isArray(payload) ? payload : { aborted: true };
+}
+async function buildRunPiEventsWebSocketUrl(context, runId) {
+  const server = await ensureServerForCli(context.projectRoot);
+  const url = new URL(`${server.baseUrl.replace(/\/+$/, "")}/api/runs/${encodeURIComponent(runId)}/pi/events`);
+  url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
+  if (server.authToken)
+    url.searchParams.set("token", server.authToken);
+  if (server.serverProjectRoot)
+    url.searchParams.set("rigProjectRoot", server.serverProjectRoot);
+  return url.toString();
+}
 async function submitTaskRunViaServer(context, input) {
   const isTaskRun = Boolean(input.taskId);
   const endpoint = isTaskRun ? "/api/runs/task" : "/api/runs/adhoc";
@@ -395,78 +514,6 @@ async function submitTaskRunViaServer(context, input) {
   return { runId };
 }
 
-// packages/cli/src/commands/_pi-install.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, rmSync } from "fs";
-import { homedir as homedir2 } from "os";
-import { resolve as resolve3 } from "path";
-var PI_RIG_PACKAGE_NAME = "@rig/pi-rig";
-async function defaultCommandRunner(command, options = {}) {
-  const proc = Bun.spawn(command, { cwd: options.cwd, stdout: "pipe", stderr: "pipe" });
-  const [stdout, stderr, exitCode] = await Promise.all([
-    new Response(proc.stdout).text(),
-    new Response(proc.stderr).text(),
-    proc.exited
-  ]);
-  return { exitCode, stdout, stderr };
-}
-function resolvePiRigExtensionPath(homeDir) {
-  return resolve3(homeDir, ".pi", "agent", "extensions", "pi-rig");
-}
-function resolvePiHomeDir(inputHomeDir) {
-  return inputHomeDir ?? process.env.RIG_PI_HOME_DIR?.trim() ?? homedir2();
-}
-function piListContainsPiRig(output) {
-  return output.split(/\r?\n/).some((line) => {
-    const normalized = line.trim();
-    return normalized.includes(PI_RIG_PACKAGE_NAME) || /(?:^|[\\/])packages[\\/]pi-rig(?:$|\s)/.test(normalized);
-  });
-}
-async function safeRun(runner, command, options) {
-  try {
-    return await runner(command, options);
-  } catch (error) {
-    return { exitCode: 1, stdout: "", stderr: error instanceof Error ? error.message : String(error) };
-  }
-}
-async function checkPiRigInstall(input = {}) {
-  const home = resolvePiHomeDir(input.homeDir);
-  const extensionPath = resolvePiRigExtensionPath(home);
-  if (process.env.RIG_TEST_FAKE_PI_INSTALL === "1") {
-    return {
-      extensionPath,
-      pi: { ok: true, label: "pi", detail: "fake-pi" },
-      piRig: { ok: true, label: "pi-rig global extension", detail: extensionPath }
-    };
-  }
-  const exists = input.exists ?? existsSync3;
-  const runner = input.commandRunner ?? defaultCommandRunner;
-  const piResult = await safeRun(runner, ["pi", "--version"]);
-  const piListResult = piResult.exitCode === 0 ? await safeRun(runner, ["pi", "list"]) : { exitCode: 1, stdout: "", stderr: "" };
-  const listedPiRig = piListResult.exitCode === 0 && piListContainsPiRig(`${piListResult.stdout}
-${piListResult.stderr}`);
-  const legacyBridge = exists(resolve3(extensionPath, "index.ts"));
-  const hasPiRig = listedPiRig;
-  return {
-    extensionPath,
-    pi: {
-      ok: piResult.exitCode === 0,
-      label: "pi",
-      detail: (piResult.stdout || piResult.stderr).trim() || undefined,
-      hint: piResult.exitCode === 0 ? undefined : "Install Pi or run `rig init --yes` to install/update the Pi runtime."
-    },
-    piRig: {
-      ok: hasPiRig,
-      label: "pi-rig global extension",
-      detail: hasPiRig ? piListResult.stdout.trim() || PI_RIG_PACKAGE_NAME : legacyBridge ? `${extensionPath} (legacy bridge; reinstall required)` : undefined,
-      hint: hasPiRig ? undefined : "Run `rig init --yes` to install/enable the global pi-rig package with `pi install`."
-    }
-  };
-}
-async function buildPiSetupChecks(input = {}) {
-  const status = await checkPiRigInstall(input);
-  return [status.pi, status.piRig];
-}
-
 // packages/cli/src/commands/_preflight.ts
 function preflightCheck(id, label, status, detail, remediation) {
   return {
@@ -522,6 +569,9 @@ function permissionAllowsPr(payload) {
   }
   return null;
 }
+function isNotFoundError(error) {
+  return /\b(404|not found)\b/i.test(message(error));
+}
 function projectCheckoutReady(payload) {
   if (!payload || typeof payload !== "object" || Array.isArray(payload))
     return null;
@@ -554,19 +604,33 @@ async function runFastTaskRunPreflight(context, options = {}) {
   const checks = [];
   const request = options.requestJson ?? ((pathname, init) => requestServerJson(context, pathname, init));
   const taskId = options.taskId?.trim() || null;
+  const requiresCurrentRunApi = Boolean(taskId);
+  const selectedServer = options.requestJson ? null : await ensureServerForCli(context.projectRoot).catch(() => null);
+  const allowLocalLegacyTaskRunCompatibility = selectedServer?.connectionKind === "local";
+  let legacyServerCompatibility = false;
   try {
     await request("/api/server/status");
     checks.push(preflightCheck("server", "Rig server reachable", "pass"));
   } catch (error) {
-    checks.push(preflightCheck("server", "Rig server reachable", "fail", message(error), "Start or select a reachable Rig server."));
+    if (isNotFoundError(error)) {
+      try {
+        await request("/health");
+        legacyServerCompatibility = !requiresCurrentRunApi || allowLocalLegacyTaskRunCompatibility;
+        checks.push(requiresCurrentRunApi && !allowLocalLegacyTaskRunCompatibility ? preflightCheck("server", "Rig server reachable", "fail", "legacy /health endpoint only; current task-run APIs are required", "Upgrade/select the Rig server before launching a task run.") : preflightCheck("server", "Rig server reachable", "pass", allowLocalLegacyTaskRunCompatibility ? "local legacy /health endpoint; submit endpoint will be authoritative" : "legacy /health endpoint"));
+      } catch (healthError) {
+        checks.push(preflightCheck("server", "Rig server reachable", "fail", message(healthError), "Start or select a reachable Rig server."));
+      }
+    } else {
+      checks.push(preflightCheck("server", "Rig server reachable", "fail", message(error), "Start or select a reachable Rig server."));
+    }
   }
   const repo = readRepoConnection(context.projectRoot);
-  checks.push(repo ? preflightCheck("project-link", "project linked to Rig connection", repo.project ? "pass" : "warn", `${repo.selected}${repo.project ? ` -> ${repo.project}` : ""}`, "Run `rig init --yes --repo owner/repo` to record the GitHub repo slug.") : preflightCheck("project-link", "project linked to Rig connection", "fail", "missing .rig/state/connection.json", "Run `rig init` or `rig connect use <alias|local>`."));
+  checks.push(repo ? preflightCheck("project-link", "project linked to Rig server", repo.project ? "pass" : "warn", `${repo.selected}${repo.project ? ` -> ${repo.project}` : ""}`, "Run `rig init --yes --repo owner/repo` to record the GitHub repo slug.") : preflightCheck("project-link", "project linked to Rig server", legacyServerCompatibility ? "warn" : "fail", "missing .rig/state/connection.json", "Run `rig init` or `rig server use <alias|local>`."));
   try {
     const auth = await request("/api/github/auth/status");
-    checks.push(isAuthenticated(auth) ? preflightCheck("github-auth", "GitHub auth valid", "pass") : preflightCheck("github-auth", "GitHub auth valid", "fail", "not authenticated", "Run `rig github auth import-gh` or `rig github auth token --token <token>`."));
+    checks.push(isAuthenticated(auth) ? preflightCheck("github-auth", "GitHub auth valid", "pass") : preflightCheck("github-auth", "GitHub auth valid", legacyServerCompatibility ? "warn" : "fail", "not authenticated", "Run `rig github auth import-gh` or `rig github auth token --token <token>`."));
   } catch (error) {
-    checks.push(preflightCheck("github-auth", "GitHub auth valid", "fail", message(error), "Fix GitHub auth on the selected Rig server."));
+    checks.push(preflightCheck("github-auth", "GitHub auth valid", legacyServerCompatibility ? "warn" : "fail", message(error), "Fix GitHub auth on the selected Rig server."));
   }
   try {
     const projection = await request("/api/workspace/task-projection");
@@ -594,9 +658,9 @@ async function runFastTaskRunPreflight(context, options = {}) {
     try {
       const tasks = await request(`/api/workspace/tasks?limit=200&refresh=1`);
       const found = Array.isArray(tasks) && tasks.some((task) => taskMatchesId(task, taskId));
-      checks.push(found ? preflightCheck("issue", "task/issue accessible", "pass", taskId) : preflightCheck("issue", "task/issue accessible", "fail", taskId, "Confirm the issue exists and matches the configured task filters."));
+      checks.push(found ? preflightCheck("issue", "task/issue accessible", "pass", taskId) : preflightCheck("issue", "task/issue accessible", legacyServerCompatibility ? "warn" : "fail", taskId, "Confirm the issue exists and matches the configured task filters."));
     } catch (error) {
-      checks.push(preflightCheck("issue", "task/issue accessible", "fail", message(error), "Fix the task source before launching a run."));
+      checks.push(preflightCheck("issue", "task/issue accessible", legacyServerCompatibility ? "warn" : "fail", message(error), "Fix the task source before launching a run."));
     }
     try {
       const runs = await request("/api/runs?limit=200");
@@ -607,14 +671,7 @@ async function runFastTaskRunPreflight(context, options = {}) {
     }
   }
   if ((options.runtimeAdapter ?? "pi") === "pi") {
-    const piChecks = await (options.piChecks ?? (() => buildPiSetupChecks()))().catch((error) => [{
-      ok: false,
-      label: "pi/pi-rig checks",
-      hint: message(error)
-    }]);
-    for (const pi of piChecks) {
-      checks.push(preflightCheck(pi.label === "pi" ? "pi" : "pi-rig", pi.label, pi.ok ? "pass" : "fail", pi.detail, pi.hint ?? (pi.ok ? undefined : "Run `rig init --yes` to install/update Pi and enable pi-rig.")));
-    }
+    checks.push(preflightCheck("runtime", "worker Pi SDK session daemon", "pass", selectedServer?.connectionKind === "remote" ? "remote worker-owned runtime" : "bundled server-owned runtime"));
   } else {
     checks.push(preflightCheck("runtime", "runtime adapter", "pass", options.runtimeAdapter));
   }
@@ -706,7 +763,200 @@ function withMutedConsole(mute, fn) {
 }
 
 // packages/cli/src/commands/_task-picker.ts
-import { createInterface } from "readline/promises";
+import { cancel, isCancel, select } from "@clack/prompts";
+
+// packages/cli/src/commands/_operator-surface.ts
+import { createInterface } from "readline";
+import { createInterface as createPromptInterface } from "readline/promises";
+var CANONICAL_STAGES = [
+  "Connect",
+  "GitHub/task sync",
+  "Prepare workspace",
+  "Launch Pi",
+  "Plan",
+  "Implement",
+  "Validate",
+  "Commit",
+  "Open PR",
+  "Review/CI",
+  "Merge",
+  "Complete"
+];
+function logDetail(log) {
+  return typeof log.detail === "string" ? log.detail.trim() : "";
+}
+function parseProviderProtocolLog(title, detail) {
+  if (title.trim().toLowerCase() !== "agent output")
+    return null;
+  if (!detail.startsWith("{") || !detail.endsWith("}"))
+    return null;
+  try {
+    const record = JSON.parse(detail);
+    if (!record || typeof record !== "object" || Array.isArray(record))
+      return null;
+    const type = record.type;
+    return typeof type === "string" && [
+      "assistant",
+      "message_start",
+      "message_update",
+      "message_end",
+      "stream_event",
+      "tool_result",
+      "tool_execution_start",
+      "tool_execution_update",
+      "tool_execution_end",
+      "turn_start",
+      "turn_end"
+    ].includes(type) ? record : null;
+  } catch {
+    return null;
+  }
+}
+function renderProviderProtocolLog(record) {
+  const type = typeof record.type === "string" ? record.type : "";
+  if (type === "tool_execution_start" || type === "tool_execution_update" || type === "tool_execution_end") {
+    const toolName = String(record.toolName ?? record.name ?? "tool");
+    const status = type === "tool_execution_start" ? "started" : type === "tool_execution_end" ? record.isError === true || record.result && typeof record.result === "object" && !Array.isArray(record.result) && record.result.isError === true ? "failed" : "completed" : "running";
+    return `[Pi tool] ${toolName} ${status}`;
+  }
+  return null;
+}
+function entryId(entry, fallback) {
+  return typeof entry.id === "string" && entry.id.trim() ? entry.id : fallback;
+}
+function renderOperatorSnapshot(snapshot) {
+  const run = snapshot.run.run && typeof snapshot.run.run === "object" ? snapshot.run.run : snapshot.run;
+  const runId = String(run.runId ?? run.id ?? "run");
+  const status = String(run.status ?? "unknown");
+  const logs = snapshot.logs ?? [];
+  const latestByStage = new Map;
+  for (const log of logs) {
+    const title = String(log.title ?? "").toLowerCase();
+    const stageName = String(log.stage ?? "").toLowerCase();
+    const stage = CANONICAL_STAGES.find((candidate) => candidate.toLowerCase() === title || candidate.toLowerCase() === stageName);
+    if (stage)
+      latestByStage.set(stage, log);
+  }
+  const stageLines = CANONICAL_STAGES.flatMap((stage) => {
+    const match = latestByStage.get(stage);
+    return match ? [`${stage}: ${String(match.status ?? status)}${logDetail(match) ? ` \u2014 ${logDetail(match)}` : ""}`] : [];
+  });
+  return [`Rig run ${runId}: ${status}`, ...stageLines].join(`
+`);
+}
+function createPiRunStreamRenderer(output = process.stdout) {
+  let lastSnapshot = "";
+  const assistantTextById = new Map;
+  const seenTimeline = new Set;
+  const seenLogs = new Set;
+  const writeLine = (line) => output.write(`${line}
+`);
+  return {
+    renderSnapshot(snapshot) {
+      const rendered = renderOperatorSnapshot(snapshot);
+      if (rendered && rendered !== lastSnapshot) {
+        writeLine(rendered);
+        lastSnapshot = rendered;
+      }
+    },
+    renderTimeline(entries) {
+      for (const [index, entry] of entries.entries()) {
+        const id = entryId(entry, `timeline:${index}:${String(entry.cursor ?? "")}`);
+        if (entry.type === "assistant_message" && typeof entry.text === "string") {
+          const text = entry.text;
+          const previousText = assistantTextById.get(id) ?? "";
+          if (!previousText && text.trim()) {
+            writeLine("[Pi assistant]");
+          }
+          if (text.startsWith(previousText)) {
+            const delta = text.slice(previousText.length);
+            if (delta)
+              output.write(delta);
+          } else if (text.trim() && text !== previousText) {
+            if (previousText)
+              writeLine(`
+[Pi assistant]`);
+            output.write(text);
+          }
+          assistantTextById.set(id, text);
+          continue;
+        }
+        if (seenTimeline.has(id))
+          continue;
+        seenTimeline.add(id);
+        if (entry.type === "tool_execution_start" || entry.type === "tool_execution_update" || entry.type === "tool_execution_end" || entry.type === "mcp_tool_call") {
+          writeLine(`[Pi tool] ${String(entry.toolName ?? entry.name ?? entry.title ?? entry.type)} ${String(entry.status ?? entry.state ?? "")}`.trim());
+          continue;
+        }
+        if (entry.type === "timeline_warning") {
+          writeLine(`[Rig timeline] ${String(entry.detail ?? entry.message ?? "timeline unavailable")}`);
+          continue;
+        }
+        if (entry.type === "action") {
+          const text = String(entry.detail ?? entry.message ?? entry.title ?? "").trim();
+          if (text)
+            writeLine(`[Rig action] ${text}`);
+          continue;
+        }
+        if (entry.type === "user_message") {
+          const text = String(entry.text ?? entry.message ?? entry.detail ?? "").trim();
+          if (text)
+            writeLine(`[Operator] ${text}`);
+          continue;
+        }
+        const fallback = String(entry.detail ?? entry.message ?? entry.text ?? entry.title ?? "").trim();
+        if (fallback)
+          writeLine(`[${String(entry.type ?? "timeline")}] ${fallback}`);
+      }
+    },
+    renderLogs(entries) {
+      for (const [index, entry] of entries.entries()) {
+        const id = entryId(entry, `log:${index}:${String(entry.createdAt ?? "")}:${String(entry.title ?? "")}`);
+        if (seenLogs.has(id))
+          continue;
+        seenLogs.add(id);
+        const title = String(entry.title ?? "");
+        if (CANONICAL_STAGES.some((stage) => stage.toLowerCase() === title.toLowerCase()))
+          continue;
+        const detail = logDetail(entry);
+        if (!detail)
+          continue;
+        const protocolRecord = parseProviderProtocolLog(title, detail);
+        if (protocolRecord) {
+          const protocolLine = renderProviderProtocolLog(protocolRecord);
+          if (protocolLine)
+            writeLine(protocolLine);
+          continue;
+        }
+        writeLine(`[${title || "Rig log"}] ${detail}`);
+      }
+    }
+  };
+}
+function createOperatorSurface(options = {}) {
+  const input = options.input ?? process.stdin;
+  const output = options.output ?? process.stdout;
+  const errorOutput = options.errorOutput ?? process.stderr;
+  const renderer = createPiRunStreamRenderer(output);
+  const writeLine = (line) => output.write(`${line}
+`);
+  return {
+    mode: "pi-compatible-text",
+    ...renderer,
+    info: writeLine,
+    error: (message2) => errorOutput.write(`${message2}
+`),
+    attachCommandInput(handler) {
+      if (options.interactive === false || !input.isTTY)
+        return null;
+      const rl = createInterface({ input, output: process.stdout, terminal: false });
+      rl.on("line", (line) => {
+        Promise.resolve(handler(line)).catch((error) => writeLine(`Operator command failed: ${error instanceof Error ? error.message : String(error)}`));
+      });
+      return { close: () => rl.close() };
+    }
+  };
+}
 function taskId(task) {
   return typeof task.id === "string" && task.id.trim() ? task.id : "<unknown>";
 }
@@ -719,6 +969,19 @@ function taskStatus(task) {
 function renderTaskPickerRows(tasks) {
   return tasks.map((task, index) => `${index + 1}. ${taskId(task)} \xB7 ${taskStatus(task)} \xB7 ${taskTitle(task)}`);
 }
+async function promptForTaskSelection(question) {
+  const rl = createPromptInterface({ input: process.stdin, output: process.stdout });
+  try {
+    return await rl.question(question);
+  } finally {
+    rl.close();
+  }
+}
+
+// packages/cli/src/commands/_task-picker.ts
+function taskId2(task) {
+  return typeof task.id === "string" && task.id.trim() ? task.id : "<unknown>";
+}
 async function selectTaskWithTextPicker(tasks, io = {}) {
   if (tasks.length === 0)
     return null;
@@ -728,56 +991,800 @@ async function selectTaskWithTextPicker(tasks, io = {}) {
   if (!isTty) {
     throw new Error("task run requires an interactive terminal to pick a task; pass --task <id>, --next, or --detach with a task id.");
   }
-  const prompt = io.prompt ?? (async (question) => {
-    const rl = createInterface({ input: process.stdin, output: process.stdout });
-    try {
-      return await rl.question(question);
-    } finally {
-      rl.close();
+  if (io.prompt || io.renderer) {
+    const prompt = io.prompt ?? promptForTaskSelection;
+    const renderer = io.renderer ?? { writeLine: (line) => process.stdout.write(`${line}
+`) };
+    renderer.writeLine("Select Rig task:");
+    for (const row of renderTaskPickerRows(tasks))
+      renderer.writeLine(`  ${row}`);
+    const answer2 = (await prompt(`Task [1-${tasks.length}] or id: `)).trim();
+    if (!answer2)
+      return null;
+    if (/^\d+$/.test(answer2)) {
+      const index2 = Number.parseInt(answer2, 10) - 1;
+      return tasks[index2] ?? null;
     }
+    return tasks.find((task) => taskId2(task) === answer2) ?? null;
+  }
+  const options = tasks.map((task, index2) => ({
+    value: `${index2}`,
+    label: `${taskId2(task)} \xB7 ${typeof task.title === "string" && task.title.trim() ? task.title.trim() : "Untitled task"}`,
+    hint: typeof task.status === "string" && task.status.trim() ? task.status.trim() : undefined
+  }));
+  const answer = await select({
+    message: "Select Rig task",
+    options
   });
-  console.log("Select Rig task:");
-  for (const row of renderTaskPickerRows(tasks))
-    console.log(`  ${row}`);
-  const answer = (await prompt(`Task [1-${tasks.length}] or id: `)).trim();
-  if (!answer)
+  if (isCancel(answer)) {
+    cancel("No task selected.");
     return null;
-  if (/^\d+$/.test(answer)) {
-    const index = Number.parseInt(answer, 10) - 1;
-    return tasks[index] ?? null;
   }
-  return tasks.find((task) => taskId(task) === answer) ?? null;
+  const index = Number.parseInt(String(answer), 10);
+  return Number.isFinite(index) ? tasks[index] ?? null : null;
 }
 
-// packages/cli/src/commands/_operator-view.ts
-import { createInterface as createInterface2 } from "readline";
+// packages/cli/src/commands/_pi-frontend.ts
+import { mkdtempSync, rmSync } from "fs";
+import { tmpdir } from "os";
+import { join } from "path";
+import {
+  createAgentSessionFromServices,
+  createAgentSessionServices,
+  main as runPiMain
+} from "@earendil-works/pi-coding-agent";
+
+// packages/cli/src/commands/_pi-remote-session.ts
+import { AgentSession as PiAgentSession, expandPromptTemplate } from "@earendil-works/pi-coding-agent";
 var TERMINAL_RUN_STATUSES = new Set(["completed", "failed", "stopped", "cancelled", "canceled", "closed", "merged", "needs_attention", "needs-attention"]);
-var CANONICAL_STAGES = [
-  "Connect",
-  "GitHub/task sync",
-  "Prepare workspace",
-  "Launch Pi",
-  "Plan",
-  "Implement",
-  "Validate",
-  "Commit",
-  "Open PR",
-  "Review/CI",
-  "Merge",
-  "Complete"
-];
-function renderOperatorSnapshot(snapshot) {
-  const run = snapshot.run.run && typeof snapshot.run.run === "object" ? snapshot.run.run : snapshot.run;
-  const runId = String(run.runId ?? run.id ?? "run");
-  const status = String(run.status ?? "unknown");
-  const logs = snapshot.logs ?? [];
-  const stageLines = CANONICAL_STAGES.flatMap((stage) => {
-    const match = logs.find((log) => String(log.title ?? "").toLowerCase() === stage.toLowerCase() || String(log.stage ?? "").toLowerCase() === stage.toLowerCase());
-    return match ? [`${stage}: ${String(match.status ?? status)}`] : [];
+function defaultTransport() {
+  return {
+    getSession: getRunPiSessionViaServer,
+    getMessages: getRunPiMessagesViaServer,
+    getStatus: getRunPiStatusViaServer,
+    getCommands: getRunPiCommandsViaServer,
+    getCapabilities: getRunPiCapabilitiesViaServer,
+    sendPrompt: sendRunPiPromptViaServer,
+    sendShell: sendRunPiShellViaServer,
+    runCommand: runRunPiCommandViaServer,
+    abort: abortRunPiViaServer,
+    buildEventsWebSocketUrl: buildRunPiEventsWebSocketUrl
+  };
+}
+function recordOf(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function emptyRemoteStatus() {
+  return {
+    isStreaming: false,
+    isCompacting: false,
+    isBashRunning: false,
+    pendingMessageCount: 0,
+    steeringMessages: [],
+    followUpMessages: [],
+    model: null,
+    thinkingLevel: null,
+    sessionName: null,
+    cwd: null,
+    stats: null,
+    contextUsage: null
+  };
+}
+function resolveAttachReadyTimeoutMs() {
+  const raw = Number.parseInt(process.env.RIG_PI_ATTACH_TIMEOUT_MS ?? "", 10);
+  return Number.isFinite(raw) && raw > 0 ? raw : 10 * 60000;
+}
+
+class RigRemoteSessionController {
+  context;
+  runId;
+  status = emptyRemoteStatus();
+  transport;
+  hooks = {};
+  session = null;
+  socket = null;
+  closed = false;
+  pendingShells = [];
+  pendingCompactions = [];
+  constructor(input) {
+    this.context = input.context;
+    this.runId = input.runId;
+    this.transport = input.transport ?? defaultTransport();
+  }
+  ingestEnvelope(envelopeValue) {
+    this.applyEnvelope(envelopeValue);
+  }
+  bindSession(session) {
+    this.session = session;
+  }
+  setUiHooks(hooks) {
+    this.hooks = hooks;
+  }
+  async connect() {
+    const ready = await this.waitForReady();
+    if (!ready || this.closed)
+      return;
+    let catchupDone = false;
+    const buffered = [];
+    const wsUrl = await this.transport.buildEventsWebSocketUrl(this.context, this.runId);
+    const socket = new WebSocket(wsUrl);
+    this.socket = socket;
+    socket.onopen = () => {
+      this.hooks.onConnectionChange?.(true);
+      this.hooks.onStatusText?.("worker session live");
+    };
+    socket.onmessage = (message2) => {
+      try {
+        const payload = typeof message2.data === "string" ? JSON.parse(message2.data) : JSON.parse(Buffer.from(message2.data).toString("utf8"));
+        if (!catchupDone)
+          buffered.push(payload);
+        else
+          this.applyEnvelope(payload);
+      } catch (error) {
+        this.hooks.onError?.(`Unparseable worker Pi event: ${error instanceof Error ? error.message : String(error)}`);
+      }
+    };
+    socket.onerror = () => socket.close();
+    socket.onclose = () => {
+      this.hooks.onConnectionChange?.(false);
+      if (!this.closed)
+        this.hooks.onStatusText?.("worker Pi WebSocket disconnected");
+    };
+    try {
+      const [messagesPayload, statusPayload, commandsPayload, capabilitiesPayload] = await Promise.all([
+        this.transport.getMessages(this.context, this.runId),
+        this.transport.getStatus(this.context, this.runId),
+        this.transport.getCommands(this.context, this.runId),
+        this.transport.getCapabilities(this.context, this.runId).catch(() => ({ capabilities: null }))
+      ]);
+      const messages = Array.isArray(messagesPayload.messages) ? messagesPayload.messages : [];
+      this.applyStatusPayload(statusPayload);
+      this.session?.replaceRemoteMessages(messages);
+      const commands = Array.isArray(commandsPayload.commands) ? commandsPayload.commands : [];
+      const capabilities = capabilitiesPayload.capabilities && typeof capabilitiesPayload.capabilities === "object" && !Array.isArray(capabilitiesPayload.capabilities) ? capabilitiesPayload.capabilities : null;
+      this.hooks.onCatchUp?.(messages, commands, capabilities);
+      catchupDone = true;
+      for (const payload of buffered.splice(0))
+        this.applyEnvelope(payload);
+    } catch (error) {
+      catchupDone = true;
+      this.hooks.onError?.(`Worker Pi catch-up failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+  }
+  close() {
+    this.closed = true;
+    this.socket?.close();
+    for (const shell of this.pendingShells.splice(0))
+      shell.reject(new Error("Remote session closed."));
+    for (const compaction of this.pendingCompactions.splice(0))
+      compaction.reject(new Error("Remote session closed."));
+  }
+  async sendPrompt(text, streamingBehavior) {
+    await this.transport.sendPrompt(this.context, this.runId, text, streamingBehavior);
+  }
+  async sendCommand(text) {
+    const result = await this.transport.runCommand(this.context, this.runId, text);
+    return typeof result.message === "string" ? result.message : "worker command accepted";
+  }
+  async sendShell(text) {
+    await this.transport.sendShell(this.context, this.runId, text);
+  }
+  async abort() {
+    await this.transport.abort(this.context, this.runId);
+  }
+  registerPendingShell(shell) {
+    this.pendingShells.push(shell);
+  }
+  failPendingShell(shell, error) {
+    const index = this.pendingShells.indexOf(shell);
+    if (index !== -1)
+      this.pendingShells.splice(index, 1);
+    shell.reject(error);
+  }
+  registerPendingCompaction(pending) {
+    this.pendingCompactions.push(pending);
+  }
+  async waitForReady() {
+    const startedAt = Date.now();
+    const deadline = startedAt + resolveAttachReadyTimeoutMs();
+    let consecutiveFailures = 0;
+    while (!this.closed) {
+      let requestFailed = false;
+      const session = await this.transport.getSession(this.context, this.runId).catch((error) => {
+        requestFailed = true;
+        return { ready: false, status: error instanceof Error ? error.message : String(error), retryAfterMs: 1000 };
+      });
+      if (session.ready !== false)
+        return true;
+      consecutiveFailures = requestFailed ? consecutiveFailures + 1 : 0;
+      const status = String(session.status ?? "starting");
+      if (TERMINAL_RUN_STATUSES.has(status.toLowerCase())) {
+        this.hooks.onError?.(`Run ended before the worker Pi daemon became ready: ${status}. Inspect with \`rig run show ${this.runId}\`.`);
+        return false;
+      }
+      this.hooks.onStatusText?.(consecutiveFailures >= 5 ? "Rig server unreachable \xB7 retrying \xB7 /detach to exit" : `waiting for worker Pi daemon \xB7 ${status} \xB7 /detach to exit`);
+      if (Date.now() >= deadline) {
+        this.hooks.onError?.(`Worker Pi daemon did not become ready (last status: ${status}). Set RIG_PI_ATTACH_TIMEOUT_MS to wait longer.`);
+        return false;
+      }
+      await Bun.sleep(typeof session.retryAfterMs === "number" ? session.retryAfterMs : 750);
+    }
+    return false;
+  }
+  applyEnvelope(envelopeValue) {
+    const envelope = recordOf(envelopeValue);
+    if (!envelope)
+      return;
+    const type = String(envelope.type ?? "");
+    if (type === "status.update") {
+      this.applyStatusPayload(envelope);
+      return;
+    }
+    if (type === "activity.update") {
+      const activity = recordOf(envelope.activity);
+      this.hooks.onActivity?.(String(activity?.label ?? ""), activity?.detail ? String(activity.detail) : undefined);
+      return;
+    }
+    if (type === "extension_ui_request") {
+      const request = recordOf(envelope.request);
+      if (request)
+        this.hooks.onExtensionUiRequest?.(request);
+      return;
+    }
+    if (type === "pi.ui_event") {
+      this.applyShellUiEvent(envelope.event);
+      return;
+    }
+    if (type === "pi.event") {
+      this.session?.handleRemoteSessionEvent(envelope.event);
+      this.settlePendingCompaction(envelope.event);
+      return;
+    }
+    if (type === "error") {
+      this.hooks.onError?.(String(envelope.message ?? envelope.detail ?? "unknown worker error"));
+    }
+  }
+  applyStatusPayload(payload) {
+    const status = recordOf(payload.status) ?? payload;
+    const next = this.status;
+    next.isStreaming = status.isStreaming === true;
+    next.isCompacting = status.isCompacting === true;
+    next.isBashRunning = status.isBashRunning === true;
+    next.pendingMessageCount = typeof status.pendingMessageCount === "number" ? status.pendingMessageCount : 0;
+    next.steeringMessages = Array.isArray(status.steeringMessages) ? status.steeringMessages.map(String) : [];
+    next.followUpMessages = Array.isArray(status.followUpMessages) ? status.followUpMessages.map(String) : [];
+    next.model = recordOf(status.model) ?? next.model;
+    next.thinkingLevel = typeof status.thinkingLevel === "string" ? status.thinkingLevel : next.thinkingLevel;
+    next.sessionName = typeof status.sessionName === "string" ? status.sessionName : next.sessionName;
+    next.cwd = typeof status.cwd === "string" ? status.cwd : next.cwd;
+    next.stats = recordOf(status.stats) ?? next.stats;
+    next.contextUsage = recordOf(status.contextUsage) ?? next.contextUsage;
+  }
+  applyShellUiEvent(value) {
+    const event = recordOf(value);
+    if (!event)
+      return;
+    const type = String(event.type ?? "");
+    const pending = this.pendingShells[0];
+    if (type === "shell.chunk" && pending) {
+      pending.sawChunk = true;
+      pending.onData(Buffer.from(String(event.chunk ?? "")));
+      return;
+    }
+    if (type === "shell.end" && pending) {
+      const output = String(event.output ?? "");
+      if (output && !pending.sawChunk)
+        pending.onData(Buffer.from(output));
+      const index = this.pendingShells.indexOf(pending);
+      if (index !== -1)
+        this.pendingShells.splice(index, 1);
+      pending.resolve({ exitCode: typeof event.exitCode === "number" ? event.exitCode : event.isError === true ? 1 : 0 });
+    }
+  }
+  settlePendingCompaction(eventValue) {
+    const event = recordOf(eventValue);
+    if (!event)
+      return;
+    const type = String(event.type ?? "");
+    if (type !== "compaction_end" || this.pendingCompactions.length === 0)
+      return;
+    const pending = this.pendingCompactions.shift();
+    const result = recordOf(event.result);
+    if (result)
+      pending.resolve(result);
+    else if (event.aborted === true)
+      pending.reject(new Error("Compaction aborted on the worker."));
+    else
+      pending.resolve({});
+  }
+}
+
+class RigRemoteAgentSession extends PiAgentSession {
+  remote;
+  constructor(config, remote) {
+    super(config);
+    this.remote = remote;
+    remote.bindSession(this);
+  }
+  handleRemoteSessionEvent(eventValue) {
+    const event = recordOf(eventValue);
+    if (!event)
+      return;
+    const type = String(event.type ?? "");
+    if ((type === "message_end" || type === "turn_end") && recordOf(event.message)) {
+      this.agent.state.messages = [...this.agent.state.messages, event.message];
+    }
+    this._emit(eventValue);
+  }
+  replaceRemoteMessages(messages) {
+    this.agent.state.messages = messages;
+  }
+  async expandLocalInput(text) {
+    let current = text;
+    const runner = this.extensionRunner;
+    if (runner.hasHandlers("input")) {
+      const result = await runner.emitInput(current, undefined, "interactive");
+      if (result.action === "handled")
+        return null;
+      if (result.action === "transform")
+        current = result.text;
+    }
+    current = this._expandSkillCommand(current);
+    current = expandPromptTemplate(current, [...this.promptTemplates]);
+    return current;
+  }
+  async prompt(text, options) {
+    const trimmed = text.trim();
+    if (!trimmed)
+      return;
+    if (trimmed.startsWith("/")) {
+      if (await this._tryExecuteExtensionCommand(trimmed))
+        return;
+      const expanded2 = await this.expandLocalInput(trimmed);
+      if (expanded2 === null)
+        return;
+      if (expanded2 !== trimmed) {
+        const behavior2 = options?.streamingBehavior ?? (this.isStreaming || this.isCompacting ? "steer" : undefined);
+        options?.preflightResult?.(true);
+        await this.remote.sendPrompt(expanded2, behavior2);
+        return;
+      }
+      await this.remote.sendCommand(trimmed);
+      return;
+    }
+    if (trimmed.startsWith("!")) {
+      await this.remote.sendShell(trimmed);
+      return;
+    }
+    const expanded = await this.expandLocalInput(trimmed);
+    if (expanded === null)
+      return;
+    const behavior = options?.streamingBehavior ?? (this.isStreaming || this.isCompacting ? "steer" : undefined);
+    options?.preflightResult?.(true);
+    await this.remote.sendPrompt(expanded, behavior);
+  }
+  async steer(text) {
+    const trimmed = text.trim();
+    if (trimmed.startsWith("/") && await this._tryExecuteExtensionCommand(trimmed))
+      return;
+    const expanded = await this.expandLocalInput(trimmed);
+    if (expanded === null)
+      return;
+    await this.remote.sendPrompt(expanded, "steer");
+  }
+  async followUp(text) {
+    const trimmed = text.trim();
+    if (trimmed.startsWith("/") && await this._tryExecuteExtensionCommand(trimmed))
+      return;
+    const expanded = await this.expandLocalInput(trimmed);
+    if (expanded === null)
+      return;
+    await this.remote.sendPrompt(expanded, "followUp");
+  }
+  async abort() {
+    await this.remote.abort();
+  }
+  async compact(customInstructions) {
+    const pending = new Promise((resolve3, reject) => {
+      this.remote.registerPendingCompaction({ resolve: resolve3, reject });
+    });
+    await this.remote.sendCommand(`/compact${customInstructions ? ` ${customInstructions}` : ""}`);
+    return pending;
+  }
+  clearQueue() {
+    const cleared = {
+      steering: [...this.remote.status.steeringMessages],
+      followUp: [...this.remote.status.followUpMessages]
+    };
+    this.remote.status.steeringMessages = [];
+    this.remote.status.followUpMessages = [];
+    this.remote.status.pendingMessageCount = 0;
+    this.remote.sendCommand("/queue-clear").catch(() => {});
+    return cleared;
+  }
+  get isStreaming() {
+    return this.remote.status.isStreaming;
+  }
+  get isCompacting() {
+    return this.remote.status.isCompacting;
+  }
+  get isBashRunning() {
+    return this.remote.status.isBashRunning;
+  }
+  get pendingMessageCount() {
+    return this.remote.status.pendingMessageCount;
+  }
+  getSteeringMessages() {
+    return this.remote.status.steeringMessages;
+  }
+  getFollowUpMessages() {
+    return this.remote.status.followUpMessages;
+  }
+  get model() {
+    return this.remote.status.model ?? super.model;
+  }
+  async setModel(model) {
+    await this.remote.sendCommand(`/model ${model.provider}/${model.id}`);
+    this.remote.status.model = model;
+  }
+  get thinkingLevel() {
+    return this.remote.status.thinkingLevel ?? super.thinkingLevel;
+  }
+  setThinkingLevel(level) {
+    this.remote.status.thinkingLevel = level;
+    this.remote.sendCommand(`/thinking ${level}`).catch(() => {});
+  }
+  get sessionName() {
+    return this.remote.status.sessionName ?? super.sessionName;
+  }
+  setSessionName(name) {
+    this.remote.status.sessionName = name;
+    this.remote.sendCommand(`/name ${name}`).catch(() => {});
+  }
+  getSessionStats() {
+    return this.remote.status.stats ?? super.getSessionStats();
+  }
+  getContextUsage() {
+    return this.remote.status.contextUsage ?? super.getContextUsage();
+  }
+  dispose() {
+    this.remote.close();
+    super.dispose();
+  }
+}
+function createRemoteBashOperations(controller, excludeFromContext) {
+  return {
+    exec(command, _cwd, execOptions) {
+      return new Promise((resolve3, reject) => {
+        const pending = { onData: execOptions.onData, resolve: resolve3, reject, sawChunk: false };
+        const cleanup = () => {
+          execOptions.signal?.removeEventListener("abort", onAbort);
+          if (timer)
+            clearTimeout(timer);
+        };
+        const onAbort = () => {
+          cleanup();
+          controller.failPendingShell(pending, new Error("Remote worker shell command aborted locally."));
+        };
+        const timeoutMs = typeof execOptions.timeout === "number" && execOptions.timeout > 0 ? execOptions.timeout : 0;
+        const timer = timeoutMs > 0 ? setTimeout(() => {
+          cleanup();
+          controller.failPendingShell(pending, new Error(`Remote worker shell command timed out after ${timeoutMs}ms.`));
+        }, timeoutMs) : null;
+        const wrappedResolve = pending.resolve;
+        const wrappedReject = pending.reject;
+        pending.resolve = (result) => {
+          cleanup();
+          wrappedResolve(result);
+        };
+        pending.reject = (error) => {
+          cleanup();
+          wrappedReject(error);
+        };
+        execOptions.signal?.addEventListener("abort", onAbort, { once: true });
+        controller.registerPendingShell(pending);
+        controller.sendShell(`${excludeFromContext ? "!!" : "!"}${command}`).catch((error) => {
+          cleanup();
+          controller.failPendingShell(pending, error instanceof Error ? error : new Error(String(error)));
+        });
+      });
+    }
+  };
+}
+
+// packages/cli/src/commands/_spinner.ts
+var SPINNER_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+
+// packages/cli/src/commands/_pi-worker-bridge-extension.ts
+function recordOf2(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function asText(value) {
+  if (typeof value === "string")
+    return value;
+  if (value === null || value === undefined)
+    return "";
+  if (typeof value === "number" || typeof value === "boolean")
+    return String(value);
+  try {
+    return JSON.stringify(value);
+  } catch {
+    return String(value);
+  }
+}
+function names(value, key = "name") {
+  if (!Array.isArray(value))
+    return [];
+  return value.flatMap((entry) => {
+    if (typeof entry === "string")
+      return [entry];
+    const record = recordOf2(entry);
+    const name = record?.[key];
+    return typeof name === "string" ? [name] : [];
   });
-  return [`Rig run ${runId}: ${status}`, ...stageLines].join(`
-`);
 }
+function renderWorkerCapabilities(capabilities) {
+  const lines = ["Worker session capabilities (in effect for this run)"];
+  const tools = Array.isArray(capabilities.tools) ? capabilities.tools : [];
+  const activeTools = tools.flatMap((tool) => {
+    const record = recordOf2(tool);
+    return record && record.active === true && typeof record.name === "string" ? [record.name] : [];
+  });
+  const inactiveCount = tools.length - activeTools.length;
+  lines.push(`  tools       ${activeTools.join(", ") || "(none)"}${inactiveCount > 0 ? `  (+${inactiveCount} inactive)` : ""}`);
+  const extensions = Array.isArray(capabilities.extensions) ? capabilities.extensions : [];
+  const extensionLabels = extensions.flatMap((entry) => {
+    const record = recordOf2(entry);
+    if (!record)
+      return [];
+    const path = typeof record.path === "string" ? record.path : "";
+    const short = path.split("/").filter(Boolean).slice(-2).join("/") || path || "extension";
+    return [short];
+  });
+  lines.push(`  extensions  ${extensionLabels.join(", ") || "(none)"}`);
+  const hookEvents = names(capabilities.hookEvents);
+  const hookList = Array.isArray(capabilities.hookEvents) ? capabilities.hookEvents.map(asText).filter(Boolean) : hookEvents;
+  lines.push(`  hooks       ${hookList.join(", ") || "(none)"}`);
+  lines.push(`  skills      ${names(capabilities.skills).join(", ") || "(none)"}`);
+  lines.push(`  prompts     ${names(capabilities.prompts).join(", ") || "(none)"}`);
+  const model = typeof capabilities.model === "string" ? capabilities.model : "(unknown)";
+  const thinking = typeof capabilities.thinkingLevel === "string" ? capabilities.thinkingLevel : "";
+  const cwd = typeof capabilities.cwd === "string" ? capabilities.cwd : "";
+  lines.push(`  model       ${model}${thinking ? ` \xB7 ${thinking}` : ""}`);
+  if (cwd)
+    lines.push(`  cwd         ${cwd}`);
+  lines.push("  (worker commands are in your palette as [worker \u2026] \xB7 /worker shows this again)");
+  return lines;
+}
+async function answerExtensionUiRequest(options, ctx, request) {
+  const requestId = String(request.requestId ?? request.id ?? `ui-${Date.now()}`);
+  const method = String(request.method ?? request.type ?? "input");
+  const prompt = asText(request.prompt ?? request.message ?? request.title ?? method);
+  const rawOptions = Array.isArray(request.options) ? request.options : Array.isArray(request.items) ? request.items : [];
+  const choices = rawOptions.map((option) => {
+    const record = recordOf2(option);
+    return record ? asText(record.label ?? record.value ?? record.name ?? option) : asText(option);
+  }).filter(Boolean);
+  try {
+    if (method === "confirm") {
+      const confirmed = await ctx.ui.confirm("Worker request", prompt);
+      await respondRunPiExtensionUiViaServer(options.context, options.runId, requestId, { value: confirmed, confirmed });
+      return;
+    }
+    if (choices.length > 0) {
+      const selected = await ctx.ui.select(prompt, choices);
+      await respondRunPiExtensionUiViaServer(options.context, options.runId, requestId, selected === undefined ? { cancelled: true } : { value: selected });
+      return;
+    }
+    const value = await ctx.ui.input("Worker request", prompt);
+    await respondRunPiExtensionUiViaServer(options.context, options.runId, requestId, value === undefined ? { cancelled: true } : { value });
+  } catch (error) {
+    ctx.ui.notify(`Failed to answer worker UI request: ${error instanceof Error ? error.message : String(error)}`, "error");
+  }
+}
+var LOCALLY_OWNED_COMMANDS = new Set(["detach", "quit", "q", "stop", "worker", "settings", "model", "thinking", "compact", "session", "name", "reload"]);
+function registerDaemonCommands(pi, options, ctx, commands, registered) {
+  for (const command of commands) {
+    const record = recordOf2(command);
+    const name = typeof record?.name === "string" ? record.name : "";
+    const source = typeof record?.source === "string" ? record.source : "worker";
+    if (!name || source === "builtin" || registered.has(name) || LOCALLY_OWNED_COMMANDS.has(name))
+      continue;
+    registered.add(name);
+    const description = typeof record?.description === "string" ? record.description : undefined;
+    try {
+      pi.registerCommand(name, {
+        description: `[worker ${source}] ${description ?? ""}`.trim(),
+        handler: async (args) => {
+          try {
+            const message2 = await options.controller.sendCommand(`/${name}${args ? ` ${args}` : ""}`);
+            ctx.ui.notify(message2, "info");
+          } catch (error) {
+            ctx.ui.notify(error instanceof Error ? error.message : String(error), "error");
+          }
+        }
+      });
+    } catch {}
+  }
+}
+function createRigWorkerPiBridgeExtension(options) {
+  return (pi) => {
+    const registeredDaemonCommands = new Set;
+    let capabilityLines = null;
+    let statusText = "connecting to worker session";
+    let busy = true;
+    let connected = false;
+    let frame = 0;
+    let spinnerTimer = null;
+    const renderStatus = (ctx) => {
+      const prefix = busy ? `${SPINNER_FRAMES[frame]} ` : connected ? "\u25CF " : "\u25CB ";
+      ctx.ui.setStatus("rig-worker-pi", `${prefix}${statusText}`);
+    };
+    const setStatus = (ctx, text, isBusy) => {
+      statusText = text;
+      busy = isBusy;
+      renderStatus(ctx);
+    };
+    pi.registerCommand("detach", {
+      description: "Detach from this run; the worker keeps going",
+      handler: async (_args, ctx) => {
+        ctx.ui.notify("Detached locally; the worker Pi daemon continues.", "info");
+        ctx.shutdown();
+      }
+    });
+    pi.registerCommand("stop", {
+      description: "Stop the worker Pi run and detach",
+      handler: async (_args, ctx) => {
+        await options.controller.abort();
+        ctx.ui.notify("Stop requested for the worker Pi daemon.", "info");
+        ctx.shutdown();
+      }
+    });
+    pi.registerCommand("worker", {
+      description: "Show the worker session's real capabilities (tools, extensions, hooks, skills)",
+      handler: async (_args, ctx) => {
+        if (capabilityLines)
+          ctx.ui.setWidget("rig-worker-capabilities", capabilityLines, { placement: "aboveEditor" });
+        else
+          ctx.ui.notify("Worker capabilities are not available yet (still connecting).", "info");
+      }
+    });
+    pi.on("user_bash", (event) => ({
+      operations: createRemoteBashOperations(options.controller, event.excludeFromContext === true)
+    }));
+    pi.on("session_start", async (_event, ctx) => {
+      ctx.ui.setTitle("Rig \xB7 enriched bundled Pi");
+      setStatus(ctx, "waiting for worker Pi daemon", true);
+      spinnerTimer = setInterval(() => {
+        frame = (frame + 1) % SPINNER_FRAMES.length;
+        if (busy)
+          renderStatus(ctx);
+      }, 150);
+      ctx.ui.notify(`Enriched bundled Pi \u2014 native UI + Rig layers, worker brain. Attached to run ${options.runId}. /worker shows live capabilities \xB7 /detach exits \xB7 /stop cancels.`, "info");
+      if (options.initialMessageSent)
+        ctx.ui.notify("Initial message sent to the worker Pi daemon.", "info");
+      const nativeUi = ctx.ui;
+      options.controller.setUiHooks({
+        onStatusText: (text) => setStatus(ctx, text, !connected),
+        onActivity: (label, detail) => {
+          const active = label !== "idle" && !/complete|ready/i.test(label);
+          setStatus(ctx, [label, detail].filter(Boolean).join(" \u2014 "), active);
+          if (/agent running|tool:/.test(label))
+            ctx.ui.setWidget("rig-worker-capabilities", undefined);
+        },
+        onConnectionChange: (nextConnected) => {
+          connected = nextConnected;
+          setStatus(ctx, nextConnected ? "worker session live" : "worker session disconnected", false);
+        },
+        onError: (message2) => ctx.ui.notify(message2, "error"),
+        onExtensionUiRequest: (request) => {
+          answerExtensionUiRequest(options, ctx, request);
+        },
+        onCatchUp: (messages, commands, capabilities) => {
+          if (nativeUi.appendSessionMessages)
+            nativeUi.appendSessionMessages(messages);
+          const cwd = options.controller.status.cwd;
+          if (nativeUi.setDisplayCwd && cwd)
+            nativeUi.setDisplayCwd(cwd);
+          registerDaemonCommands(pi, options, ctx, commands, registeredDaemonCommands);
+          if (capabilities) {
+            capabilityLines = renderWorkerCapabilities(capabilities);
+            ctx.ui.setWidget("rig-worker-capabilities", capabilityLines, { placement: "aboveEditor" });
+          }
+        }
+      });
+      options.controller.connect().catch((error) => {
+        ctx.ui.notify(error instanceof Error ? error.message : String(error), "error");
+      });
+    });
+    pi.on("session_shutdown", () => {
+      if (spinnerTimer)
+        clearInterval(spinnerTimer);
+      options.controller.close();
+    });
+  };
+}
+
+// packages/cli/src/commands/_pi-frontend.ts
+function setTemporaryEnv(updates) {
+  const previous = new Map;
+  for (const [key, value] of Object.entries(updates)) {
+    previous.set(key, process.env[key]);
+    process.env[key] = value;
+  }
+  return () => {
+    for (const [key, value] of previous) {
+      if (value === undefined)
+        delete process.env[key];
+      else
+        process.env[key] = value;
+    }
+  };
+}
+async function attachRunBundledPiFrontend(context, input) {
+  const tempSessionDir = mkdtempSync(join(tmpdir(), "rig-pi-frontend-sessions-"));
+  const restoreEnv = setTemporaryEnv({
+    PI_CODING_AGENT_SESSION_DIR: tempSessionDir,
+    PI_SKIP_VERSION_CHECK: "1",
+    PI_HIDDEN_COMMANDS: "import,fork,clone,tree,new,resume,trust"
+  });
+  const controller = new RigRemoteSessionController({ context, runId: input.runId });
+  const createRemoteRuntime = async ({ cwd, agentDir, sessionManager, sessionStartEvent }) => {
+    const services = await createAgentSessionServices({
+      cwd,
+      agentDir,
+      resourceLoaderOptions: {
+        extensionFactories: [
+          createRigWorkerPiBridgeExtension({
+            context,
+            controller,
+            runId: input.runId,
+            initialMessageSent: input.steered === true
+          })
+        ],
+        noExtensions: true,
+        noSkills: true,
+        noPromptTemplates: true,
+        noContextFiles: true
+      }
+    });
+    const created = await createAgentSessionFromServices({
+      services,
+      sessionManager,
+      sessionStartEvent,
+      noTools: "all",
+      sessionFactory: (config) => new RigRemoteAgentSession(config, controller)
+    });
+    return { ...created, services, diagnostics: services.diagnostics };
+  };
+  let detached = false;
+  try {
+    await runPiMain([], {
+      createRuntimeOverride: () => createRemoteRuntime
+    });
+    detached = true;
+  } finally {
+    restoreEnv();
+    controller.close();
+    rmSync(tempSessionDir, { recursive: true, force: true });
+  }
+  let run = { runId: input.runId, status: "unknown" };
+  try {
+    run = await getRunDetailsViaServer(context, input.runId);
+  } catch {}
+  return {
+    run,
+    logs: [],
+    timeline: [],
+    timelineCursor: null,
+    steered: input.steered === true,
+    detached,
+    rendered: "enriched bundled Pi frontend with remote worker session runtime"
+  };
+}
+
+// packages/cli/src/commands/_operator-view.ts
+var TERMINAL_RUN_STATUSES2 = new Set(["completed", "failed", "stopped", "cancelled", "canceled", "closed", "merged", "needs_attention", "needs-attention"]);
 function runStatusFromPayload(payload) {
   const run = payload.run && typeof payload.run === "object" && !Array.isArray(payload.run) ? payload.run : payload;
   return String(run.status ?? "unknown").toLowerCase();
@@ -799,56 +1806,640 @@ async function applyOperatorCommand(context, input, deps = {}) {
   await (deps.steer ?? steerRunViaServer)(context, input.runId, userMessage);
   return { action: "continue", message: "Steering message queued." };
 }
-async function readOperatorSnapshot(context, runId) {
+async function readOperatorSnapshot(context, runId, options = {}) {
   const run = await getRunDetailsViaServer(context, runId);
   const logsPage = await getRunLogsViaServer(context, runId, { limit: 100 });
-  const entries = Array.isArray(logsPage.entries) ? logsPage.entries.filter((entry) => Boolean(entry && typeof entry === "object" && !Array.isArray(entry))) : [];
-  return { run, logs: entries, rendered: renderOperatorSnapshot({ run, logs: entries }) };
+  const timelinePage = await getRunTimelineViaServer(context, runId, { limit: 200, ...options.timelineCursor ? { cursor: options.timelineCursor } : {} }).catch((error) => ({
+    entries: [{
+      id: `timeline-unavailable:${runId}`,
+      type: "timeline_warning",
+      detail: `Selected Rig server did not provide run timeline events: ${error instanceof Error ? error.message : String(error)}`,
+      createdAt: new Date().toISOString()
+    }],
+    nextCursor: options.timelineCursor ?? null
+  }));
+  const logs = Array.isArray(logsPage.entries) ? logsPage.entries.filter((entry) => Boolean(entry && typeof entry === "object" && !Array.isArray(entry))).toReversed() : [];
+  const timeline = Array.isArray(timelinePage.entries) ? timelinePage.entries.filter((entry) => Boolean(entry && typeof entry === "object" && !Array.isArray(entry))) : [];
+  const timelineCursor = typeof timelinePage.nextCursor === "string" ? timelinePage.nextCursor : options.timelineCursor ?? null;
+  return { run, logs, timeline, timelineCursor, rendered: renderOperatorSnapshot({ run, logs, timeline }) };
 }
 async function attachRunOperatorView(context, input) {
   let steered = false;
   if (input.message?.trim()) {
-    await steerRunViaServer(context, input.runId, input.message.trim());
+    await sendRunPiPromptViaServer(context, input.runId, input.message.trim(), "steer").catch(() => steerRunViaServer(context, input.runId, input.message.trim()));
     steered = true;
   }
+  if (input.follow && !input.once && input.interactive !== false && context.outputMode === "text" && Boolean(process.stdin.isTTY && process.stdout.isTTY)) {
+    return attachRunBundledPiFrontend(context, {
+      runId: input.runId,
+      steered
+    });
+  }
+  const surface = createOperatorSurface({ interactive: input.interactive !== false });
   let snapshot = await readOperatorSnapshot(context, input.runId);
   if (context.outputMode === "text") {
-    console.log(snapshot.rendered);
+    surface.renderSnapshot(snapshot);
+    surface.renderTimeline(snapshot.timeline);
+    surface.renderLogs(snapshot.logs);
     if (steered)
-      console.log("Steering message queued.");
+      surface.info("Message submitted to worker Pi.");
   }
   let detached = false;
-  let rl = null;
+  let commandInput = null;
   if (input.follow && !input.once && context.outputMode === "text") {
     if (input.interactive !== false && process.stdin.isTTY) {
-      console.log("Controls: /user <message>, /stop, /detach");
-      rl = createInterface2({ input: process.stdin, output: process.stdout, terminal: false });
-      rl.on("line", (line) => {
-        applyOperatorCommand(context, { runId: input.runId, line }).then((result) => {
-          if (result.message)
-            console.log(result.message);
-          if (result.action === "detach" || result.action === "stopped") {
-            detached = true;
-            rl?.close();
-          }
-        }).catch((error) => console.log(`Operator command failed: ${error instanceof Error ? error.message : String(error)}`));
+      surface.info("Controls: /user <message>, /stop, /detach");
+      commandInput = surface.attachCommandInput(async (line) => {
+        const result = await applyOperatorCommand(context, { runId: input.runId, line });
+        if (result.message)
+          surface.info(result.message);
+        if (result.action === "detach" || result.action === "stopped") {
+          detached = true;
+          commandInput?.close();
+        }
       });
     }
-    let lastRendered = snapshot.rendered;
     const pollMs = Math.max(250, Math.trunc(input.pollMs ?? 2000));
-    while (!detached && !TERMINAL_RUN_STATUSES.has(runStatusFromPayload(snapshot.run))) {
+    let timelineCursor = snapshot.timelineCursor;
+    while (!detached && !TERMINAL_RUN_STATUSES2.has(runStatusFromPayload(snapshot.run))) {
       await Bun.sleep(pollMs);
-      snapshot = await readOperatorSnapshot(context, input.runId);
-      if (snapshot.rendered !== lastRendered) {
-        console.log(snapshot.rendered);
-        lastRendered = snapshot.rendered;
-      }
+      snapshot = await readOperatorSnapshot(context, input.runId, { timelineCursor });
+      timelineCursor = snapshot.timelineCursor;
+      surface.renderSnapshot(snapshot);
+      surface.renderTimeline(snapshot.timeline);
+      surface.renderLogs(snapshot.logs);
     }
-    rl?.close();
+    commandInput?.close();
   }
   return { ...snapshot, steered, detached };
 }
 
+// packages/cli/src/commands/_cli-format.ts
+import { log, note } from "@clack/prompts";
+import pc from "picocolors";
+function stringField(record, key, fallback = "") {
+  const value = record[key];
+  return typeof value === "string" && value.trim() ? value.trim() : fallback;
+}
+function numberField(record, key) {
+  const value = record[key];
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function arrayField(record, key) {
+  const value = record[key];
+  return Array.isArray(value) ? value.flatMap((entry) => typeof entry === "string" && entry.trim() ? [entry.trim()] : []) : [];
+}
+function rawObject(record) {
+  const raw = record.raw;
+  return raw && typeof raw === "object" && !Array.isArray(raw) ? raw : {};
+}
+function truncate(value, width) {
+  if (value.length <= width)
+    return value;
+  if (width <= 1)
+    return "\u2026";
+  return `${value.slice(0, width - 1)}\u2026`;
+}
+function pad(value, width) {
+  return value.length >= width ? value : `${value}${" ".repeat(width - value.length)}`;
+}
+function statusColor(status) {
+  const normalized = status.toLowerCase();
+  if (["completed", "merged", "closed", "done", "accepted", "pass", "selected", "approved"].includes(normalized))
+    return pc.green;
+  if (["failed", "needs_attention", "needs-attention", "blocked", "error", "rejected"].includes(normalized))
+    return pc.red;
+  if (["running", "reviewing", "validating", "in_progress", "in-progress", "remote"].includes(normalized))
+    return pc.cyan;
+  if (["ready", "open", "queued", "created", "preparing", "local", "pending"].includes(normalized))
+    return pc.yellow;
+  return pc.dim;
+}
+function compactValue(value) {
+  if (value === null || value === undefined)
+    return "";
+  if (typeof value === "string")
+    return value;
+  if (typeof value === "number" || typeof value === "boolean")
+    return String(value);
+  if (Array.isArray(value))
+    return value.map(compactValue).filter(Boolean).join(", ");
+  return JSON.stringify(value);
+}
+function shouldUseClackOutput() {
+  return Boolean(process.stdout.isTTY) && process.env.RIG_CLI_PLAIN_HELP !== "1";
+}
+function printFormattedOutput(message2, options = {}) {
+  if (!shouldUseClackOutput()) {
+    console.log(message2);
+    return;
+  }
+  if (options.title)
+    note(message2, options.title);
+  else
+    log.message(message2);
+}
+function formatStatusPill(status) {
+  const label = status || "unknown";
+  return statusColor(label)(`\u25CF ${label}`);
+}
+function formatSection(title, subtitle) {
+  return `${pc.bold(pc.cyan("\u25C6"))} ${pc.bold(title)}${subtitle ? pc.dim(` \u2014 ${subtitle}`) : ""}`;
+}
+function formatSuccessCard(title, rows = []) {
+  const body = rows.filter(([, value]) => value !== undefined && value !== null && String(value).length > 0).map(([key, value]) => `${pc.dim("\u2502")} ${pc.dim(key.padEnd(12))} ${value}`);
+  return [formatSection(title), ...body].join(`
+`);
+}
+function formatNextSteps(steps) {
+  if (steps.length === 0)
+    return [];
+  return [pc.bold("Next"), ...steps.map((step) => `${pc.dim("\u203A")} ${step}`)];
+}
+function formatTaskList(tasks, options = {}) {
+  if (options.raw)
+    return tasks.map((task) => JSON.stringify(task)).join(`
+`);
+  if (tasks.length === 0)
+    return [formatSection("Tasks", "none found"), ...formatNextSteps(["Try `rig server status` to confirm the selected server.", "Relax filters or run `rig task run --title ... --initial-prompt ...` for ad hoc work."])].join(`
+`);
+  const rows = tasks.map((task) => {
+    const raw = rawObject(task);
+    const id = stringField(task, "id", "<unknown>");
+    const status = stringField(task, "status", "unknown");
+    const title = stringField(task, "title", "Untitled task");
+    const source = stringField(task, "source", stringField(raw, "source", ""));
+    const labels = arrayField(task, "labels").length > 0 ? arrayField(task, "labels") : arrayField(raw, "labels");
+    return { id, status, title, source, labels };
+  });
+  const idWidth = Math.min(18, Math.max(4, ...rows.map((row) => row.id.length)));
+  const statusWidth = Math.min(16, Math.max(6, ...rows.map((row) => row.status.length)));
+  const header = `${pc.bold(pad("TASK", idWidth))}  ${pc.bold(pad("STATUS", statusWidth))}  ${pc.bold("TITLE")}`;
+  const body = rows.map((row) => {
+    const labels = row.labels.length > 0 ? pc.dim(`  ${row.labels.slice(0, 4).map((label) => `#${label}`).join(" ")}`) : "";
+    const source = row.source ? pc.dim(`  ${row.source}`) : "";
+    return [
+      pc.bold(pad(truncate(row.id, idWidth), idWidth)),
+      statusColor(row.status)(pad(truncate(row.status, statusWidth), statusWidth)),
+      `${row.title}${labels}${source}`
+    ].join("  ");
+  });
+  return [formatSection("Tasks", `${rows.length} shown`), header, ...body, "", ...formatNextSteps(["Run one: `rig task run <id>` or `rig task run --next`", "Attach later: `rig run attach <run-id> --follow`"])].join(`
+`);
+}
+function formatTaskCard(task, options = {}) {
+  const raw = rawObject(task);
+  const id = stringField(task, "id", stringField(raw, "id", "<unknown>"));
+  const status = stringField(task, "status", stringField(raw, "status", "unknown"));
+  const title = stringField(task, "title", stringField(raw, "title", "Untitled task"));
+  const source = stringField(task, "source", stringField(raw, "source", ""));
+  const url = stringField(task, "url", stringField(raw, "url", ""));
+  const number = numberField(task, "number") ?? numberField(raw, "number");
+  const labels = arrayField(task, "labels").length > 0 ? arrayField(task, "labels") : arrayField(raw, "labels");
+  const assignees = arrayField(task, "assignees").length > 0 ? arrayField(task, "assignees") : arrayField(raw, "assignees");
+  const readiness = compactValue(task.readiness ?? raw.readiness);
+  const validators = compactValue(task.validators ?? raw.validators ?? task.validation ?? raw.validation);
+  const rows = [
+    ["task", pc.bold(id)],
+    ["status", formatStatusPill(status)],
+    ["title", title],
+    ["source", source],
+    ["number", number],
+    ["labels", labels.length ? labels.map((label) => `#${label}`).join(" ") : ""],
+    ["assignees", assignees.join(", ")],
+    ["readiness", readiness],
+    ["validators", validators],
+    ["url", url]
+  ];
+  return [
+    formatSuccessCard(options.title ?? (options.selected ? "Selected task" : "Task"), rows),
+    "",
+    ...formatNextSteps([`Start: \`rig task run ${id}\``, `Details: \`rig task show ${id} --raw\``])
+  ].join(`
+`);
+}
+function formatTaskDetails(task) {
+  return formatTaskCard(task, { title: "Task details" });
+}
+function formatSubmittedRun(input) {
+  const rows = [["run", pc.bold(input.runId)]];
+  if (input.task) {
+    const id = stringField(input.task, "id", "<unknown>");
+    const status = stringField(input.task, "status", "unknown");
+    const title = stringField(input.task, "title", "Untitled task");
+    rows.push(["task", `${pc.bold(id)} ${formatStatusPill(status)} ${title}`]);
+  }
+  const runtime = [input.runtimeAdapter || "pi", input.runtimeMode || "full-access", input.interactionMode || "default"].filter(Boolean).join(" \xB7 ");
+  rows.push(["runtime", runtime]);
+  return [
+    formatSuccessCard("Run submitted", rows),
+    "",
+    ...formatNextSteps([
+      `Attach: \`rig run attach ${input.runId} --follow\``,
+      `Inspect: \`rig run show ${input.runId}\``,
+      input.detached ? "Submitted detached; attach when you are ready." : "Interactive mode opens the enriched bundled Pi (native UI + Rig layers, worker brain)."
+    ])
+  ].join(`
+`);
+}
+
+// packages/cli/src/commands/_help-catalog.ts
+import { intro, log as log2, note as note2, outro } from "@clack/prompts";
+import pc2 from "picocolors";
+var TOP_LEVEL_SECTIONS = [
+  {
+    title: "Start here",
+    subtitle: "one-time setup for a repo",
+    commands: [
+      { command: "rig init", description: "Wizard: config, GitHub auth, task source, server, Pi wiring." },
+      { command: "rig doctor", description: "Check every part of the wiring \u2014 run this when anything feels off." },
+      { command: "rig server use <alias|local>", description: "Pick which Rig server owns this repo (`rig server list` to see them)." }
+    ]
+  },
+  {
+    title: "Work",
+    subtitle: "find a task and put an agent on it",
+    commands: [
+      { command: "rig task list", description: "What's on the board (from the selected source/server)." },
+      { command: "rig task next", description: "The next ready task, as a card." },
+      { command: "rig task run --next", description: "Dispatch an agent; interactive mode opens the native Pi session." },
+      { command: "rig task run <id> --detach", description: "Fire-and-forget a specific task." }
+    ]
+  },
+  {
+    title: "Watch & steer",
+    subtitle: "live runs are observable and steerable, attached or not",
+    commands: [
+      { command: "rig run status", description: "Active and recent runs at a glance." },
+      { command: "rig run attach <id> --follow", description: "Join the live Pi session (worker keeps running if you /detach)." },
+      { command: "rig run steer <id> -m <text>", description: "Drop a message into a live worker without attaching." },
+      { command: "rig run stop <id>", description: "Cancel a running worker." }
+    ]
+  },
+  {
+    title: "Unblock & gate",
+    subtitle: "answer what workers ask; control what merges",
+    commands: [
+      { command: "rig inbox approvals", description: "Approvals workers are waiting on (then `rig inbox approve \u2026`)." },
+      { command: "rig inbox inputs", description: "Questions workers asked (then `rig inbox respond \u2026`)." },
+      { command: "rig review show|set", description: "The completion review gate (Greptile is mandatory on merges)." }
+    ]
+  },
+  {
+    title: "Extend",
+    subtitle: "more Pi, more plugins",
+    commands: [
+      { command: "rig pi search <term>", description: "Discover community Pi extensions on npm." },
+      { command: "rig pi add <pkg>", description: "Add a Pi extension to this project (workers pick it up too)." },
+      { command: "rig plugin list", description: "What the rig.config.ts plugins contribute." }
+    ]
+  }
+];
+var PRIMARY_GROUPS = [
+  {
+    name: "server",
+    summary: "Choose, inspect, and start the Rig server that owns tasks and runs.",
+    usage: ["rig server <status|list|add|use|start> [options]"],
+    commands: [
+      { command: "status", description: "Show the selected server for this repo.", primary: true },
+      { command: "use local", description: "Switch this repo to the local Rig server.", primary: true },
+      { command: "add <alias> <url>", description: "Save a remote Rig server URL.", primary: true },
+      { command: "use <alias>", description: "Select a saved remote server alias.", primary: true },
+      { command: "list", description: "List saved local/remote server aliases.", primary: true },
+      { command: "start [--host <host>] [--port <n>]", description: "Start a local rig-server process." }
+    ],
+    examples: [
+      "rig server status",
+      "rig server add prod https://where.rig-does.work",
+      "rig server use prod",
+      "rig server use local",
+      "rig server start --port 3773"
+    ],
+    next: ["Use `rig task list` to see server-owned work.", "Use `rig run list` or `rig run attach <id> --follow` to monitor runs."],
+    advanced: ["Compatibility alias: `rig connect ...` remains callable."]
+  },
+  {
+    name: "task",
+    summary: "Find work, start Pi-backed runs, and validate task results.",
+    usage: ["rig task <list|next|show|run> [options]"],
+    commands: [
+      { command: "list [--assignee <login|@me>] [--state open|closed]", description: "List tasks from the selected server/source.", primary: true },
+      { command: "next [filters]", description: "Render the next matching task as a selected-task card.", primary: true },
+      { command: "show <id>|--task <id> [--raw]", description: "Show a human task summary; --raw prints the full payload.", primary: true },
+      { command: "run [#<issue>|<task-id>|--next|--task <id>]", description: "Submit a task run; interactive follows with bundled Pi.", primary: true },
+      { command: "validate|verify [--task <id>]", description: "Run configured task checks/review gates." },
+      { command: "details --task <id>", description: "Show full task info from the configured source." },
+      { command: "reopen [--task <id> | --all] [--reason <text>]", description: "Reopen closed task(s) in the configured source." },
+      { command: "reset --task <id>", description: "Compatibility spelling of `reopen --task <id>`." },
+      { command: "artifacts|artifact-dir|artifact-write", description: "Inspect or write task artifacts." },
+      { command: "report-bug", description: "Create a structured bug report/task." }
+    ],
+    examples: [
+      "rig task list --assignee @me --limit 20",
+      "rig task next",
+      "rig task show 123 --raw",
+      "rig task run --next",
+      "rig task run #123 --runtime-adapter pi",
+      "rig task run --title 'Investigate deploy drift' --initial-prompt 'Check server health'"
+    ],
+    next: ["Use `--detach` to submit without attaching.", "Use `rig run attach <run-id> --follow` to rejoin a live run."]
+  },
+  {
+    name: "run",
+    summary: "Observe, attach to, and control Rig runs.",
+    usage: ["rig run <list|status|show|attach|stop> [options]"],
+    commands: [
+      { command: "list", description: "List recent runs from the selected server or local state.", primary: true },
+      { command: "status", description: "Render active and recent run groups.", primary: true },
+      { command: "show <id>|--run <id> [--raw]", description: "Show a human run summary; --raw prints the full payload.", primary: true },
+      { command: "attach <run-id>|--run <id> [--follow]", description: "Attach to the run; --follow opens the enriched bundled Pi (worker brain).", primary: true },
+      { command: "stop [<run-id>|--run <id>]", description: "Request stop for one run or local active runs.", primary: true },
+      { command: "steer <run-id> --message <text>", description: "Queue a steering message into a live worker without attaching." },
+      { command: "timeline --run <id> [--follow]", description: "Stream raw run timeline events." },
+      { command: "resume", description: "Resume the most recent interrupted local run." },
+      { command: "restart", description: "Restart the most recent local run from a clean runtime." },
+      { command: "delete|cleanup", description: "Remove completed run records/artifacts." }
+    ],
+    examples: [
+      "rig run list",
+      "rig run status",
+      "rig run show <run-id>",
+      "rig run attach <run-id> --follow",
+      "rig run stop <run-id>"
+    ],
+    next: ["Use `rig task run --next` to create a new run.", "Use `--json` when scripts need the full structured record."]
+  },
+  {
+    name: "inbox",
+    summary: "Review approval and user-input requests that block worker runs.",
+    usage: ["rig inbox <approvals|approve|inputs|respond> [options]"],
+    commands: [
+      { command: "approvals [--run <id>] [--task <id>]", description: "List pending approvals.", primary: true },
+      { command: "inputs [--run <id>] [--task <id>]", description: "List pending user-input requests.", primary: true },
+      { command: "approve --run <id> --request <id> --decision approve|reject", description: "Resolve an approval request." },
+      { command: "respond --run <id> --request <id> --answer key=value", description: "Answer a user-input request." }
+    ],
+    examples: [
+      "rig inbox approvals",
+      "rig inbox inputs --run <run-id>",
+      "rig inbox approve --run <run-id> --request <request-id> --decision approve"
+    ],
+    next: ["Rejoin the run after resolving a block: `rig run attach <run-id> --follow`."]
+  },
+  {
+    name: "review",
+    summary: "Inspect or change completion review gate policy.",
+    usage: ["rig review <show|set>"],
+    commands: [
+      { command: "show", description: "Show current review gate settings.", primary: true },
+      { command: "set <off|advisory|required> [--provider greptile]", description: "Change review strictness/provider.", primary: true }
+    ],
+    examples: ["rig review show", "rig review set required --provider greptile"],
+    next: ["Use `rig inbox approvals` for blocked run handoffs."]
+  },
+  {
+    name: "init",
+    summary: "Set up Rig for this repo: server, GitHub auth, checkout strategy, task source, and Pi wiring.",
+    usage: ["rig init [--yes] [--server local|remote] [--repo owner/repo] [--remote-url <url>]"],
+    commands: [
+      { command: "init", description: "Interactive setup wizard for a new or existing Rig repo.", primary: true },
+      { command: "init --yes", description: "Non-interactive setup using detected/default settings.", primary: true },
+      { command: "init --server remote --remote-url <url>", description: "Link this repo to a remote Rig server.", primary: true },
+      { command: "init --repair", description: "Repair missing private state without replacing project config." }
+    ],
+    examples: [
+      "rig init",
+      "rig init --yes --repo humanity-org/humanwork",
+      "rig init --server remote --remote-url https://where.rig-does.work --repo owner/repo"
+    ],
+    next: ["After init, run `rig server status`.", "Then use `rig task list` and `rig task run --next` for day-to-day work."]
+  },
+  {
+    name: "doctor",
+    summary: "Diagnostics for project/server/GitHub/Pi state.",
+    usage: ["rig doctor"],
+    commands: [
+      { command: "doctor", description: "Run setup and runtime diagnostics.", primary: true },
+      { command: "check", description: "Compatibility spelling for diagnostics." }
+    ],
+    examples: ["rig doctor", "rig doctor --json"],
+    next: ["Use `rig server status` and `rig github auth status` to inspect common failure points."]
+  },
+  {
+    name: "github",
+    summary: "GitHub auth helpers for the selected Rig server.",
+    usage: ["rig github auth <status|import-gh|token>"],
+    commands: [
+      { command: "auth status", description: "Show GitHub auth state.", primary: true },
+      { command: "auth import-gh", description: "Import the current `gh` token into the selected server." },
+      { command: "auth token --token <token>", description: "Store a token on the selected server." }
+    ],
+    examples: ["rig github auth status", "rig github auth import-gh"],
+    next: ["After auth is valid, use `rig task run --next`."]
+  }
+];
+var ADVANCED_GROUPS = [
+  { name: "connect", summary: "Compatibility alias for `rig server` selection commands.", usage: ["rig connect <status|list|add|use>"], commands: [{ command: "status|list|add|use", description: "Use `rig server ...` for the primary UX." }] },
+  { name: "setup", summary: "Bootstrap/check local setup.", usage: ["rig setup <bootstrap|check|preflight>"], commands: [{ command: "bootstrap|check|preflight", description: "Setup helpers." }] },
+  {
+    name: "inspect",
+    summary: "Inspect logs, artifacts, graphs, failures for a task.",
+    usage: ["rig inspect <logs|artifacts|failures|graph|audit|diff> --task <id>"],
+    commands: [
+      { command: "logs --task <id>", description: "Latest run log for a task (local or selected server)." },
+      { command: "artifacts --task <id>", description: "List the task's completion artifacts." },
+      { command: "failures --task <id>", description: "Recorded failures for a task." },
+      { command: "graph", description: "Task dependency graph." },
+      { command: "audit", description: "Controlled-command audit trail." },
+      { command: "diff --task <id>", description: "Changed files for a task." }
+    ]
+  },
+  { name: "repo", summary: "Repository sync/baseline helpers.", usage: ["rig repo <sync|reset-baseline>"], commands: [{ command: "sync", description: "Sync project repository state." }] },
+  { name: "profile", summary: "Runtime profile/model defaults.", usage: ["rig profile <show|set>"], commands: [{ command: "show", description: "Show active profile." }] },
+  {
+    name: "browser",
+    summary: "Browser/app diagnostics for browser-required tasks.",
+    usage: ["rig browser <help|explain|demo|app|hp-next> [options]"],
+    commands: [
+      { command: "help", description: "Rich browser command help (canonical: `rig browser help`)." },
+      { command: "explain", description: "Explain the browser-required task contract." },
+      { command: "demo", description: "Run browser demo flows against a local page." },
+      { command: "app", description: "Launch the Rig Browser workstation app." },
+      { command: "hp-next <dev|check|e2e|reset>", description: "Drive the hp-next browser test harness." }
+    ]
+  },
+  {
+    name: "pi",
+    summary: "Manage Pi extension packages for this project (community extensions from npm/git).",
+    usage: ["rig pi <list|add|remove|search> [args]"],
+    commands: [
+      { command: "list", description: "Show project and user Pi extension packages." },
+      { command: "add <source>", description: "Add an npm/git Pi extension to .pi/settings.json (auto-installs at next session)." },
+      { command: "remove <source>", description: "Remove an operator-added Pi extension." },
+      { command: "search [term]", description: "Discover Pi extension packages on the npm registry." }
+    ],
+    examples: ["rig pi search subagents", "rig pi add pi-subagents", "rig pi list"],
+    next: ["Config-managed extensions: declare `runtime: { pi: { packages: [...] } }` in rig.config.ts \u2014 workers pick them up automatically."]
+  },
+  {
+    name: "plugin",
+    summary: "Plugin listing, validation, and plugin-contributed commands.",
+    usage: ["rig plugin <list|validate|run> [options]"],
+    commands: [
+      { command: "list", description: "List plugins declared in rig.config.ts and their contributions." },
+      { command: "validate --task <id>", description: "Run plugin-contributed validators for a task." },
+      { command: "run <command-id> [args...]", description: "Execute a plugin-contributed CLI command (also callable as `rig <command-id>`)." }
+    ]
+  },
+  { name: "queue", summary: "Run task queues locally.", usage: ["rig queue run [options]"], commands: [{ command: "run", description: "Process queue work." }] },
+  { name: "agent", summary: "Runtime agent workspace helpers.", usage: ["rig agent <list|prepare|run|cleanup>"], commands: [{ command: "list", description: "List prepared agents." }] },
+  { name: "inspector", summary: "Event stream and drift scanners.", usage: ["rig inspector <stream|scan-upstream-drift>"], commands: [{ command: "stream", description: "Stream events." }] },
+  { name: "dist", summary: "Build/install packaged Rig CLI.", usage: ["rig dist <build|install|doctor>"], commands: [{ command: "build", description: "Build distribution." }] },
+  { name: "workspace", summary: "Workspace topology/service helpers.", usage: ["rig workspace <summary|topology|remote-hosts>"], commands: [{ command: "summary", description: "Show workspace summary." }] },
+  { name: "remote", summary: "Compatibility remote orchestration controls.", usage: ["rig remote <status|watch|pause|resume|...>"], commands: [{ command: "status", description: "Show remote state." }] },
+  { name: "git", summary: "Pass through to Rig git-flow helper.", usage: ["rig git <args...>"], commands: [{ command: "<args...>", description: "Advanced git flow operations." }] },
+  { name: "harness", summary: "Pass through to runtime harness CLI.", usage: ["rig harness <args...>"], commands: [{ command: "<args...>", description: "Advanced harness operations." }] },
+  { name: "test", summary: "Project test wrappers.", usage: ["rig test <unit|e2e|all>"], commands: [{ command: "all", description: "Run configured project tests." }] }
+];
+var ALL_GROUPS = [...PRIMARY_GROUPS, ...ADVANCED_GROUPS];
+function heading(title) {
+  return pc2.bold(pc2.cyan(title));
+}
+function renderRigBanner(version) {
+  const m = (s) => pc2.bold(pc2.magenta(s));
+  const c = (s) => pc2.bold(pc2.cyan(s));
+  const y = (s) => pc2.yellow(s);
+  const d = (s) => pc2.dim(s);
+  const lines = [
+    m("    \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2557 ") + d("  \u2591\u2592\u2593\u2588 "),
+    m("    \u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D ") + d("\u2593\u2592\u2591"),
+    c("    \u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551\u2588\u2588\u2551  \u2588\u2588\u2588\u2557") + d("    \u2591\u2592"),
+    c("    \u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551\u2588\u2588\u2551   \u2588\u2588\u2551") + d(" \u2588\u2593\u2591"),
+    y("    \u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2551\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D") + d("   \u2592\u2591"),
+    y("    \u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D "),
+    "",
+    `    ${c("\u25E2\u25E4")} ${pc2.bold("the control rig for autonomous coding agents")} ${m("//")} ${d("you are the operator")}`,
+    version ? `    ${d(`v${version} \xB7 jack in: rig task run --next`)}` : `    ${d("jack in: rig task run --next")}`
+  ];
+  return lines.join(`
+`);
+}
+function commandLine(command, description) {
+  const commandColumn = command.length >= 38 ? `${command}  ` : command.padEnd(38);
+  return `${pc2.dim("\u2502")} ${pc2.bold(commandColumn)} ${description}`;
+}
+function renderCommandBlock(commands) {
+  return commands.map((entry) => commandLine(entry.command, entry.description)).join(`
+`);
+}
+function renderGroup(group) {
+  const lines = [
+    `${heading(`rig ${group.name}`)} \u2014 ${group.summary}`,
+    "",
+    pc2.bold("Usage"),
+    ...group.usage.map((line) => `  ${line}`),
+    "",
+    pc2.bold("Commands"),
+    ...group.commands.map((entry) => commandLine(entry.command, entry.description))
+  ];
+  if (group.examples?.length) {
+    lines.push("", pc2.bold("Examples"), ...group.examples.map((line) => `  ${pc2.dim("$")} ${line}`));
+  }
+  if (group.next?.length) {
+    lines.push("", pc2.bold("Next steps"), ...group.next.map((line) => `  ${pc2.dim("\u203A")} ${line}`));
+  }
+  if (group.advanced?.length) {
+    lines.push("", pc2.bold("Compatibility / advanced"), ...group.advanced.map((line) => `  ${pc2.dim("\u203A")} ${line}`));
+  }
+  return lines.join(`
+`);
+}
+function renderTopLevelHelp() {
+  return [
+    `${heading("rig")} ${pc2.dim("\u2014 server-owned task/run control plane for Pi-backed engineering work")}`,
+    pc2.dim("Current path: select a server, choose a task, submit a run, attach with native Pi, clear inbox/review gates."),
+    "",
+    ...TOP_LEVEL_SECTIONS.flatMap((section) => [
+      `${pc2.bold(pc2.magenta(`\u25C7 ${section.title}`))} \u2014 ${pc2.dim(section.subtitle)}`,
+      renderCommandBlock(section.commands),
+      ""
+    ]),
+    pc2.dim("More: `rig help --advanced` for dev/compatibility commands; `rig <group> --help` for rich per-group help; `rig --version` for the installed version."),
+    "",
+    pc2.bold("Global options"),
+    commandLine("--project <path>", "Use a project root instead of auto-discovery."),
+    commandLine("--json", "Emit structured output for scripts/agents."),
+    commandLine("--dry-run", "Print the command plan without mutating state.")
+  ].join(`
+`).trimEnd();
+}
+function renderGroupHelp(groupName) {
+  const group = ALL_GROUPS.find((candidate) => candidate.name === groupName);
+  return group ? renderGroup(group) : null;
+}
+function shouldUseClackOutput2() {
+  return Boolean(process.stdout.isTTY) && process.env.RIG_CLI_PLAIN_HELP !== "1";
+}
+function printTopLevelHelp(state = {}) {
+  if (!shouldUseClackOutput2()) {
+    console.log(renderTopLevelHelp());
+    return;
+  }
+  console.log(renderRigBanner(state.version));
+  console.log("");
+  if (state.projectInitialized === false) {
+    intro("no rig project in this directory");
+    note2([
+      commandLine("rig init", "Set this repo up: config, GitHub auth, task source, server, Pi."),
+      commandLine("rig init --yes", "Same, non-interactive, sensible defaults."),
+      commandLine("rig doctor", "Already initialized somewhere else? Check the wiring.")
+    ].join(`
+`), "Get started");
+    outro("After init: rig task run --next puts an agent on your next task.");
+    return;
+  }
+  intro(state.selectedServer ? `server: ${state.selectedServer}` : "rig");
+  for (const section of TOP_LEVEL_SECTIONS) {
+    note2(renderCommandBlock(section.commands), `${section.title} \u2014 ${section.subtitle}`);
+  }
+  log2.info("More: rig help --advanced \xB7 rig <group> --help \xB7 rig --version");
+  note2([
+    commandLine("--project <path>", "Use a project root instead of auto-discovery."),
+    commandLine("--json", "Emit structured output for scripts/agents."),
+    commandLine("--dry-run", "Print the command plan without mutating state.")
+  ].join(`
+`), "Global options");
+  outro("init \u2192 task run \u2192 watch/steer \u2192 inbox/review \u2192 merged.");
+}
+function printGroupHelpDocument(groupName) {
+  const rendered = renderGroupHelp(groupName) ?? renderTopLevelHelp();
+  if (!shouldUseClackOutput2()) {
+    console.log(rendered);
+    return;
+  }
+  const group = ALL_GROUPS.find((candidate) => candidate.name === groupName);
+  if (!group) {
+    printTopLevelHelp();
+    return;
+  }
+  intro(`rig ${group.name}`);
+  note2(group.summary, "Purpose");
+  note2(group.usage.join(`
+`), "Usage");
+  note2(group.commands.map((entry) => commandLine(entry.command, entry.description)).join(`
+`), "Commands");
+  if (group.examples?.length)
+    note2(group.examples.map((line) => `$ ${line}`).join(`
+`), "Examples");
+  if (group.next?.length)
+    note2(group.next.map((line) => `\u203A ${line}`).join(`
+`), "Next steps");
+  if (group.advanced?.length)
+    log2.info(group.advanced.join(`
+`));
+  outro("Run with --json when scripts need structured output.");
+}
+
 // packages/cli/src/commands/task.ts
 import { buildPluginHostContext } from "@rig/runtime/control-plane/plugin-host-context";
 import { loadConfig } from "@rig/core/load-config";
@@ -924,7 +2515,7 @@ function normalizePrMode(value) {
   throw new CliError2("--pr must be auto, ask, or off.", 2);
 }
 function detectLocalDirtyState(projectRoot) {
-  const result = spawnSync2("git", ["-C", projectRoot, "status", "--porcelain"], { encoding: "utf8", timeout: 5000 });
+  const result = spawnSync("git", ["-C", projectRoot, "status", "--porcelain"], { encoding: "utf8", timeout: 5000 });
   if (result.status !== 0)
     return { dirty: false, modified: 0, untracked: 0, lines: [] };
   const lines = result.stdout.split(/\r?\n/).map((line) => line.trimEnd()).filter(Boolean);
@@ -958,13 +2549,15 @@ async function resolveDirtyBaselineForTaskRun(context, explicit) {
   if (explicit)
     return { mode: explicit, state };
   if (context.outputMode === "text" && process.stdin.isTTY && process.stdout.isTTY) {
-    const rl = createInterface3({ input: process.stdin, output: process.stdout });
-    try {
-      const answer = (await rl.question("Include current uncommitted changes in run baseline? [y/N] ")).trim().toLowerCase();
-      return { mode: answer === "y" || answer === "yes" ? "dirty-snapshot" : "head", state };
-    } finally {
-      rl.close();
+    const answer = await confirm({
+      message: "Include current uncommitted changes in run baseline?",
+      initialValue: false
+    });
+    if (isCancel2(answer)) {
+      cancel2("Run cancelled.");
+      throw new CliError2("Run cancelled by user.", 1);
     }
+    return { mode: answer ? "dirty-snapshot" : "head", state };
   }
   return { mode: "head", state };
 }
@@ -998,38 +2591,30 @@ function summarizeTask(task, options = {}) {
     ...options.raw ? { raw: raw ?? task } : {}
   };
 }
-function printTaskSummary(task) {
-  const id = readTaskId(task) ?? "<unknown>";
-  const title = readTaskString(task, "title") ?? "Untitled task";
-  const status = readTaskString(task, "status") ?? "unknown";
-  console.log(`- ${id} \xB7 ${status} \xB7 ${title}`);
-}
 async function validatorRegistryForTaskCommands(projectRoot) {
   return buildPluginHostContext(projectRoot).then((ctx) => ctx?.validatorRegistry ?? undefined).catch(() => {
     return;
   });
 }
 async function executeTask(context, args, options) {
-  const [command = "info", ...rest] = args;
+  if (args.length === 0) {
+    if (context.outputMode === "text") {
+      printGroupHelpDocument("task");
+    }
+    return { ok: true, group: "task", command: "help" };
+  }
+  const [command = "help", ...rest] = args;
   switch (command) {
     case "list": {
       let pending = rest;
       const rawResult = takeFlag(pending, "--raw");
       pending = rawResult.rest;
       const { filters, rest: remaining } = parseTaskFilters(pending);
-      requireNoExtraArgs(remaining, "bun run rig task list [--raw] [--assignee <login|@me>] [--assigned-to <login|me|@me>] [--state open|closed] [--status <status>] [--limit <n>]");
+      requireNoExtraArgs(remaining, "rig task list [--raw] [--assignee <login|@me>] [--assigned-to <login|me|@me>] [--state open|closed] [--status <status>] [--limit <n>]");
       const tasks = await listWorkspaceTasksViaServer(context, filters);
       if (context.outputMode === "text") {
-        if (tasks.length === 0) {
-          console.log("No matching tasks.");
-        } else {
-          for (const task of tasks) {
-            if (rawResult.value)
-              console.log(JSON.stringify(summarizeTask(task, { raw: true })));
-            else
-              printTaskSummary(task);
-          }
-        }
+        const renderedTasks = rawResult.value ? tasks.map((task) => summarizeTask(task, { raw: true })) : tasks.map((task) => summarizeTask(task));
+        printFormattedOutput(formatTaskList(renderedTasks, { raw: rawResult.value }));
       }
       return {
         ok: true,
@@ -1039,30 +2624,34 @@ async function executeTask(context, args, options) {
       };
     }
     case "show": {
-      const taskOption = takeOption(rest, "--task");
+      let pending = rest;
+      const rawResult = takeFlag(pending, "--raw");
+      pending = rawResult.rest;
+      const taskOption = takeOption(pending, "--task");
       const positional = taskOption.rest.length > 0 && taskOption.rest[0] && !taskOption.rest[0].startsWith("-") ? taskOption.rest[0] : undefined;
       const remaining = positional ? taskOption.rest.slice(1) : taskOption.rest;
-      requireNoExtraArgs(remaining, "bun run rig task show <id>|--task <id>");
-      const taskId2 = normalizeTaskRunTaskId(taskOption.value ?? positional);
-      if (!taskId2)
+      requireNoExtraArgs(remaining, "rig task show <id>|--task <id> [--raw]");
+      const taskId3 = normalizeTaskRunTaskId(taskOption.value ?? positional);
+      if (!taskId3)
         throw new CliError2("task show requires a task id.", 2);
-      const task = await getWorkspaceTaskViaServer(context, taskId2);
+      const task = await getWorkspaceTaskViaServer(context, taskId3);
       if (!task)
-        throw new CliError2(`Task not found: ${taskId2}`, 3);
+        throw new CliError2(`Task not found: ${taskId3}`, 3);
       const summary = summarizeTask(task, { raw: true });
-      if (context.outputMode === "text")
-        console.log(JSON.stringify(summary, null, 2));
-      return { ok: true, group: "task", command, details: { task: summary } };
+      if (context.outputMode === "text") {
+        printFormattedOutput(rawResult.value ? JSON.stringify(summary, null, 2) : formatTaskDetails(summary));
+      }
+      return { ok: true, group: "task", command, details: { task: summary, raw: rawResult.value } };
     }
     case "next": {
       const { filters, rest: remaining } = parseTaskFilters(rest);
-      requireNoExtraArgs(remaining, "bun run rig task next [--assignee <login|@me>] [--assigned-to <login|me|@me>] [--state open|closed] [--status <status>] [--limit <n>]");
+      requireNoExtraArgs(remaining, "rig task next [--assignee <login|@me>] [--assigned-to <login|me|@me>] [--state open|closed] [--status <status>] [--limit <n>]");
       const selected = await selectNextWorkspaceTaskViaServer(context, filters);
       if (context.outputMode === "text") {
         if (selected.task) {
-          printTaskSummary(selected.task);
+          printFormattedOutput(formatTaskCard(summarizeTask(selected.task, { raw: true }), { title: "Selected task", selected: true }));
         } else {
-          console.log("No matching tasks.");
+          printFormattedOutput("No matching tasks.\n\nNext\n\u203A Try `rig task list` to inspect available work.\n\u203A Check server: `rig server status`");
         }
       }
       return {
@@ -1078,31 +2667,31 @@ async function executeTask(context, args, options) {
     }
     case "info": {
       const { value: task, rest: remaining } = takeOption(rest, "--task");
-      requireNoExtraArgs(remaining, "bun run rig task info [--task <beads-id>]");
+      requireNoExtraArgs(remaining, "rig task info [--task <task-id>]");
       await withMutedConsole(context.outputMode === "json", () => taskInfo(context.projectRoot, task || undefined));
       return { ok: true, group: "task", command, details: { task: task || null } };
     }
     case "scope": {
       const filesFlag = takeFlag(rest, "--files");
       const { value: task, rest: remaining } = takeOption(filesFlag.rest, "--task");
-      requireNoExtraArgs(remaining, "bun run rig task scope [--task <id>] [--files]");
+      requireNoExtraArgs(remaining, "rig task scope [--task <id>] [--files]");
       await withMutedConsole(context.outputMode === "json", () => taskScope(context.projectRoot, filesFlag.value, task || undefined));
       return { ok: true, group: "task", command, details: { files: filesFlag.value, task: task || null } };
     }
     case "deps":
-      requireNoExtraArgs(rest, "bun run rig task deps");
+      requireNoExtraArgs(rest, "rig task deps");
       await withMutedConsole(context.outputMode === "json", () => taskDeps(context.projectRoot));
       return { ok: true, group: "task", command };
     case "status":
-      requireNoExtraArgs(rest, "bun run rig task status");
+      requireNoExtraArgs(rest, "rig task status");
       withMutedConsole(context.outputMode === "json", () => taskStatus2(context.projectRoot));
       return { ok: true, group: "task", command };
     case "artifacts":
-      requireNoExtraArgs(rest, "bun run rig task artifacts");
+      requireNoExtraArgs(rest, "rig task artifacts");
       withMutedConsole(context.outputMode === "json", () => taskArtifacts(context.projectRoot));
       return { ok: true, group: "task", command };
     case "artifact-dir": {
-      requireNoExtraArgs(rest, "bun run rig task artifact-dir");
+      requireNoExtraArgs(rest, "rig task artifact-dir");
       const path = taskArtifactDir(context.projectRoot);
       if (context.outputMode === "text") {
         console.log(path);
@@ -1111,7 +2700,7 @@ async function executeTask(context, args, options) {
     }
     case "artifact-write": {
       if (rest.length < 1) {
-        throw new CliError2(`Usage: bun run rig task artifact-write <filename> [--file <path>]
+        throw new CliError2(`Usage: rig task artifact-write <filename> [--file <path>]
 ` + `  Reads content from stdin (or --file), writes to the active task artifact dir.
 ` + "  Example: echo '...' | rig task artifact-write collection-audit.md");
       }
@@ -1119,12 +2708,12 @@ async function executeTask(context, args, options) {
       const fileFlag = takeOption(rest.slice(1), "--file");
       let content;
       if (fileFlag.value) {
-        content = readFileSync4(resolve4(context.projectRoot, fileFlag.value), "utf-8");
+        content = readFileSync3(resolve3(context.projectRoot, fileFlag.value), "utf-8");
       } else {
         content = await readStdin();
       }
       if (!artifactFilename) {
-        throw new CliError2("Usage: bun run rig task artifact-write <filename> [--file path]");
+        throw new CliError2("Usage: rig task artifact-write <filename> [--file path]");
       }
       withMutedConsole(context.outputMode === "json", () => taskArtifactWrite(context.projectRoot, artifactFilename, content));
       return { ok: true, group: "task", command, details: { filename: artifactFilename } };
@@ -1133,11 +2722,11 @@ async function executeTask(context, args, options) {
       return options.executeTaskReportBug(context, rest);
     case "lookup": {
       if (rest.length !== 1) {
-        throw new CliError2("Usage: bun run rig task lookup <beads-id>");
+        throw new CliError2("Usage: rig task lookup <task-id>");
       }
       const lookupId = rest[0];
       if (!lookupId) {
-        throw new CliError2("Usage: bun run rig task lookup <beads-id>");
+        throw new CliError2("Usage: rig task lookup <task-id>");
       }
       const result = taskLookup(context.projectRoot, lookupId);
       if (context.outputMode === "text") {
@@ -1147,17 +2736,17 @@ async function executeTask(context, args, options) {
     }
     case "record": {
       if (rest.length < 2) {
-        throw new CliError2("Usage: bun run rig task record <decision|failure> <text>");
+        throw new CliError2("Usage: rig task record <decision|failure> <text>");
       }
       const type = rest[0];
       if (type !== "decision" && type !== "failure") {
-        throw new CliError2("Usage: bun run rig task record <decision|failure> <text>");
+        throw new CliError2("Usage: rig task record <decision|failure> <text>");
       }
       withMutedConsole(context.outputMode === "json", () => taskRecord(context.projectRoot, type, rest.slice(1).join(" ")));
       return { ok: true, group: "task", command, details: { type: rest[0] } };
     }
     case "ready":
-      requireNoExtraArgs(rest, "bun run rig task ready");
+      requireNoExtraArgs(rest, "rig task ready");
       await withMutedConsole(context.outputMode === "json", () => taskReady(context.projectRoot));
       return { ok: true, group: "task", command };
     case "run": {
@@ -1194,7 +2783,7 @@ async function executeTask(context, args, options) {
       if (positionalTaskId) {
         pending = pending.slice(1);
       }
-      requireNoExtraArgs(pending, "bun run rig task run [#<issue>|<task-id>] [--next] [--task <id>] [--detach] [--assignee <login|@me>] [--assigned-to <login|me|@me>] [--state open|closed] [--status <status>] [--limit <n>] [--title <text>] [--runtime-adapter claude-code|codex|pi] [--model <model>] [--runtime-mode <mode>] [--interaction-mode <mode>] [--initial-prompt <text>] [--pr auto|ask|off] [--no-pr] [--dirty-baseline head|dirty-snapshot] [--skip-project-sync]");
+      requireNoExtraArgs(pending, "rig task run [#<issue>|<task-id>] [--next] [--task <id>] [--detach] [--assignee <login|@me>] [--assigned-to <login|me|@me>] [--state open|closed] [--status <status>] [--limit <n>] [--title <text>] [--runtime-adapter claude-code|codex|pi] [--model <model>] [--runtime-mode <mode>] [--interaction-mode <mode>] [--initial-prompt <text>] [--pr auto|ask|off] [--no-pr] [--dirty-baseline head|dirty-snapshot] [--skip-project-sync]");
       if (nextResult.value && (taskResult.value || positionalTaskId)) {
         throw new CliError2("task run cannot combine --next with an explicit task id.", 2);
       }
@@ -1248,16 +2837,24 @@ async function executeTask(context, args, options) {
       });
       let attachDetails = null;
       if (!detachResult.value && context.outputMode === "text") {
-        console.log(`Run submitted: ${submitted.runId}`);
-        if (selectedTask) {
-          printTaskSummary(selectedTask);
-        }
+        printFormattedOutput(formatSubmittedRun({
+          runId: submitted.runId,
+          task: selectedTask ? summarizeTask(selectedTask) : null,
+          runtimeAdapter,
+          runtimeMode: runtimeModeResult.value || projectDefaults.runtimeMode || "full-access",
+          interactionMode: interactionModeResult.value || "default",
+          detached: false
+        }));
         attachDetails = await attachRunOperatorView(context, { runId: submitted.runId, follow: true });
       } else if (context.outputMode === "text") {
-        console.log(`Run submitted: ${submitted.runId}`);
-        if (selectedTask) {
-          printTaskSummary(selectedTask);
-        }
+        printFormattedOutput(formatSubmittedRun({
+          runId: submitted.runId,
+          task: selectedTask ? summarizeTask(selectedTask) : null,
+          runtimeAdapter,
+          runtimeMode: runtimeModeResult.value || projectDefaults.runtimeMode || "full-access",
+          interactionMode: interactionModeResult.value || "default",
+          detached: true
+        }));
       }
       return {
         ok: true,
@@ -1281,7 +2878,7 @@ async function executeTask(context, args, options) {
     }
     case "validate": {
       const { value: task, rest: remaining } = takeOption(rest, "--task");
-      requireNoExtraArgs(remaining, "bun run rig task validate [--task <beads-id>]");
+      requireNoExtraArgs(remaining, "rig task validate [--task <task-id>]");
       if (context.dryRun) {
         await context.runCommand(["rig", "task", "validate", ...task ? ["--task", task] : []]);
         return { ok: true, group: "task", command, details: { task: task || "active" } };
@@ -1294,12 +2891,12 @@ async function executeTask(context, args, options) {
     }
     case "verify": {
       const { value: task, rest: remaining } = takeOption(rest, "--task");
-      requireNoExtraArgs(remaining, "bun run rig task verify [--task <beads-id>]");
+      requireNoExtraArgs(remaining, "rig task verify [--task <task-id>]");
       if (context.dryRun) {
         await context.runCommand(["rig", "task", "verify", ...task ? ["--task", task] : []]);
         return { ok: true, group: "task", command, details: { task: task || "active" } };
       }
-      const ok = await withMutedConsole(context.outputMode === "json", () => taskVerify(context.projectRoot, context.plugins, task || undefined));
+      const ok = await withMutedConsole(context.outputMode === "json", () => taskVerify(context.projectRoot, task || undefined));
       if (!ok) {
         throw new CliError2(`Verification rejected for ${task || "active task"}.`, 2);
       }
@@ -1307,15 +2904,19 @@ async function executeTask(context, args, options) {
     }
     case "reset": {
       const { value: task, rest: remaining } = takeOption(rest, "--task");
-      requireNoExtraArgs(remaining, "bun run rig task reset --task <beads-id>");
-      const requiredTask = requireTask(task, "bun run rig task reset --task <beads-id>");
-      await context.runCommand(["br", "--no-db", "update", requiredTask, "--status", "open"]);
-      return { ok: true, group: "task", command, details: { task: requiredTask } };
+      requireNoExtraArgs(remaining, "rig task reset --task <task-id>");
+      const requiredTask = requireTask(task, "rig task reset --task <task-id>");
+      const summary = withMutedConsole(context.outputMode === "json", () => taskReopen(context.projectRoot, {
+        all: false,
+        taskId: requiredTask,
+        dryRun: false
+      }));
+      return { ok: true, group: "task", command, details: summary };
     }
     case "details": {
       const { value: task, rest: remaining } = takeOption(rest, "--task");
-      requireNoExtraArgs(remaining, "bun run rig task details --task <beads-id>");
-      const requiredTask = requireTask(task, "bun run rig task details --task <beads-id>");
+      requireNoExtraArgs(remaining, "rig task details --task <task-id>");
+      const requiredTask = requireTask(task, "rig task details --task <task-id>");
       await withMutedConsole(context.outputMode === "json", () => taskInfo(context.projectRoot, requiredTask));
       return { ok: true, group: "task", command, details: { task: requiredTask } };
     }
@@ -1323,9 +2924,9 @@ async function executeTask(context, args, options) {
       const { value: task, rest: rest1 } = takeOption(rest, "--task");
       const allFlag = takeFlag(rest1, "--all");
       const { rest: remaining } = takeOption(allFlag.rest, "--reason");
-      requireNoExtraArgs(remaining, "bun run rig task reopen [--task <id> | --all] [--reason <text>]");
+      requireNoExtraArgs(remaining, "rig task reopen [--task <id> | --all] [--reason <text>]");
       if (!allFlag.value && !task) {
-        throw new CliError2("Usage: bun run rig task reopen [--task <id> | --all] [--reason <text>]");
+        throw new CliError2("Usage: rig task reopen [--task <id> | --all] [--reason <text>]");
       }
       const summary = withMutedConsole(context.outputMode === "json", () => taskReopen(context.projectRoot, {
         all: allFlag.value,