@h-rig/cli 0.0.6-alpha.50 → 0.0.6-alpha.51

package/README.md

@@ -21,7 +21,7 @@
 
 - CLI behavior should stay thin and delegate business logic into `@rig/runtime`.
 - `report-bug` uses `@clack/prompts` for its interactive wizard and asks whether Rig Browser is required.
-- `report-bug` creates a runnable beads `task` by default, writes committable evidence under `repos/spliter-monorepo/artifacts/<task-id>/bug-report/`, and upserts task-config wiring.
+- `report-bug` creates a runnable beads `task` by default, writes committable evidence under `artifacts/<task-id>/bug-report/` (relative to the resolved monorepo root), and upserts task-config wiring.
 - `report-bug --no-beads` keeps the old draft-only behavior under `docs/bug-reports/`.
 - `report-bug --no-browser` skips `browser.json`, the `browser-required` label, browser validation, and browser helper commands while preserving task assets.
 - `report-bug` accepts drag-and-drop asset values through `--asset` and `--video`; copied files are stored under `bug-report/assets/` and indexed in `manifest.json`.

package/dist/bin/rig.js

@@ -2949,6 +2949,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve11(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync7(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync4(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -2965,7 +2979,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve11(projectRoot)
     };
@@ -4778,7 +4792,7 @@ async function executeInbox(context, args) {
 init_runner();
 import { appendFileSync as appendFileSync2, existsSync as existsSync12, mkdirSync as mkdirSync8, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "fs";
 import { spawnSync } from "child_process";
-import { resolve as resolve19 } from "path";
+import { basename as basename2, resolve as resolve19 } from "path";
 import { buildRigInitConfigSource } from "@rig/core";
 import { listGitHubProjects as listGitHubProjectsDirect, resolveProjectStatusField as resolveProjectStatusFieldDirect } from "@rig/server";
 
@@ -5646,11 +5660,48 @@ async function pollDeviceAuthUntilComplete(context, pollId, firstPayload) {
   } while (Date.now() < deadline);
   return last;
 }
+function runLocalFilesInit(context, options) {
+  const projectRoot = context.projectRoot;
+  ensureRigPrivateDirs(projectRoot);
+  ensureGitignoreEntries(projectRoot);
+  writeRepoConnection(projectRoot, { selected: "local", linkedAt: new Date().toISOString() });
+  const configTsPath = resolve19(projectRoot, "rig.config.ts");
+  const configExists = existsSync12(configTsPath) || existsSync12(resolve19(projectRoot, "rig.config.json"));
+  if (configExists && !options.repair) {
+    if (context.outputMode !== "json")
+      console.log("rig.config already exists; leaving it unchanged. Pass --repair to rewrite it.");
+  } else {
+    const projectName = basename2(projectRoot) || "rig-project";
+    writeFileSync6(configTsPath, buildRigInitConfigSource({
+      projectName,
+      taskSource: { kind: "files", path: "tasks" },
+      useStandardPlugin: true
+    }), "utf-8");
+  }
+  ensureRigConfigPackageDependencies(projectRoot);
+  const tasksDir = resolve19(projectRoot, "tasks");
+  if (!existsSync12(tasksDir)) {
+    mkdirSync8(tasksDir, { recursive: true });
+    writeFileSync6(resolve19(tasksDir, "T-1.json"), `${JSON.stringify({ id: "T-1", title: "My first Rig task", body: "Describe the change you want an agent to make." }, null, 2)}
+`, "utf-8");
+  }
+  if (context.outputMode !== "json") {
+    console.log("Initialized a local files-source Rig project (no GitHub).");
+    console.log("  tasks live in tasks/*.json \xB7 server: local");
+    console.log("Next: `rig task list`, then `rig task run T-1`.");
+    console.log("To wire GitHub later: `rig init --repair --repo owner/repo --github-auth gh`.");
+  }
+  return { ok: true, group: "init", command: "init", details: { mode: "local-files", projectRoot, taskSourcePath: "tasks" } };
+}
 async function runControlPlaneInit(context, options) {
   const projectRoot = context.projectRoot;
   const detectedSlug = options.repoSlug ?? detectOriginRepoSlug(projectRoot);
   if (!detectedSlug) {
-    throw new CliError2("Could not detect GitHub repo slug from origin. Pass --repo owner/repo.", 1);
+    const authMethod2 = options.githubAuthMethod ?? (options.githubToken ? "token" : "skip");
+    if ((options.server ?? "local") === "local" && authMethod2 === "skip") {
+      return runLocalFilesInit(context, options);
+    }
+    throw new CliError2("Could not detect GitHub repo slug from origin. Pass --repo owner/repo \u2014 or run `rig init --yes --server local --github-auth skip` for a local files-source project without GitHub.", 1);
   }
   const repo = parseRepoSlug(detectedSlug);
   const serverKind = options.server ?? "local";
@@ -5994,6 +6045,9 @@ Usage: rig init [--server local|remote] [--remote-url <url>] [--repo owner/repo]
   if (parsed.rest.length > 0)
     throw new CliError2(`Unexpected arguments: ${parsed.rest.join(" ")}
 Usage: rig init`, 1);
+  if (!process.stdin.isTTY) {
+    throw new CliError2("rig init is interactive and needs a terminal. For scripts, pass flags: rig init --yes --server local --github-auth skip [--repo owner/repo].", 1);
+  }
   return runInteractiveControlPlaneInit(context, await loadClackPrompts());
 }
 
@@ -12275,7 +12329,7 @@ async function executeGroup(context, group, args) {
 }
 // packages/cli/src/launcher.ts
 import { existsSync as existsSync17 } from "fs";
-import { basename as basename2, resolve as resolve26 } from "path";
+import { basename as basename3, resolve as resolve26 } from "path";
 import { loadDotEnvSecrets } from "@rig/runtime/baked-secrets";
 import { RIG_DEFINITION_DIRNAME, RIG_STATE_DIRNAME, resolveNearestRigProjectRoot } from "@rig/runtime/layout";
 function parsePolicyMode(value) {
@@ -12300,7 +12354,7 @@ function resolveProjectRoot({
     return resolve26(cwd, envProjectRoot);
   }
   const fallbackImportDir = importDir ?? cwd;
-  const execName = basename2(execPath).toLowerCase();
+  const execName = basename3(execPath).toLowerCase();
   const execCandidates = execName === "rig" || execName === "rig.exe" ? [resolve26(execPath, "..", "..")] : [];
   const candidates = [cwd, ...execCandidates, resolve26(fallbackImportDir, "..")];
   for (const candidate of candidates) {

package/dist/src/commands/_doctor-checks.js

@@ -141,6 +141,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -157,7 +171,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/_operator-view.js

@@ -136,6 +136,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -152,7 +166,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/_pi-frontend.js

@@ -146,6 +146,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -162,7 +176,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/_pi-remote-session.js

@@ -139,6 +139,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -155,7 +169,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/_pi-worker-bridge-extension.js

@@ -136,6 +136,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -152,7 +166,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/_preflight.js

@@ -135,6 +135,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -151,7 +165,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/_server-client.js

@@ -140,6 +140,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -156,7 +170,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/_snapshot-upload.js

@@ -140,6 +140,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -156,7 +170,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/doctor.js

@@ -145,6 +145,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -161,7 +175,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/github.js

@@ -157,6 +157,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -173,7 +187,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/inbox.js

@@ -251,6 +251,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -267,7 +281,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/init.js

@@ -4,7 +4,7 @@ var __require = import.meta.require;
 // packages/cli/src/commands/init.ts
 import { appendFileSync, existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync2 } from "fs";
 import { spawnSync } from "child_process";
-import { resolve as resolve6 } from "path";
+import { basename, resolve as resolve6 } from "path";
 
 // packages/cli/src/runner.ts
 import { EventBus } from "@rig/runtime/control-plane/runtime/events";
@@ -191,6 +191,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -207,7 +221,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };
@@ -1231,11 +1245,48 @@ async function pollDeviceAuthUntilComplete(context, pollId, firstPayload) {
   } while (Date.now() < deadline);
   return last;
 }
+function runLocalFilesInit(context, options) {
+  const projectRoot = context.projectRoot;
+  ensureRigPrivateDirs(projectRoot);
+  ensureGitignoreEntries(projectRoot);
+  writeRepoConnection(projectRoot, { selected: "local", linkedAt: new Date().toISOString() });
+  const configTsPath = resolve6(projectRoot, "rig.config.ts");
+  const configExists = existsSync5(configTsPath) || existsSync5(resolve6(projectRoot, "rig.config.json"));
+  if (configExists && !options.repair) {
+    if (context.outputMode !== "json")
+      console.log("rig.config already exists; leaving it unchanged. Pass --repair to rewrite it.");
+  } else {
+    const projectName = basename(projectRoot) || "rig-project";
+    writeFileSync2(configTsPath, buildRigInitConfigSource({
+      projectName,
+      taskSource: { kind: "files", path: "tasks" },
+      useStandardPlugin: true
+    }), "utf-8");
+  }
+  ensureRigConfigPackageDependencies(projectRoot);
+  const tasksDir = resolve6(projectRoot, "tasks");
+  if (!existsSync5(tasksDir)) {
+    mkdirSync2(tasksDir, { recursive: true });
+    writeFileSync2(resolve6(tasksDir, "T-1.json"), `${JSON.stringify({ id: "T-1", title: "My first Rig task", body: "Describe the change you want an agent to make." }, null, 2)}
+`, "utf-8");
+  }
+  if (context.outputMode !== "json") {
+    console.log("Initialized a local files-source Rig project (no GitHub).");
+    console.log("  tasks live in tasks/*.json \xB7 server: local");
+    console.log("Next: `rig task list`, then `rig task run T-1`.");
+    console.log("To wire GitHub later: `rig init --repair --repo owner/repo --github-auth gh`.");
+  }
+  return { ok: true, group: "init", command: "init", details: { mode: "local-files", projectRoot, taskSourcePath: "tasks" } };
+}
 async function runControlPlaneInit(context, options) {
   const projectRoot = context.projectRoot;
   const detectedSlug = options.repoSlug ?? detectOriginRepoSlug(projectRoot);
   if (!detectedSlug) {
-    throw new CliError2("Could not detect GitHub repo slug from origin. Pass --repo owner/repo.", 1);
+    const authMethod2 = options.githubAuthMethod ?? (options.githubToken ? "token" : "skip");
+    if ((options.server ?? "local") === "local" && authMethod2 === "skip") {
+      return runLocalFilesInit(context, options);
+    }
+    throw new CliError2("Could not detect GitHub repo slug from origin. Pass --repo owner/repo \u2014 or run `rig init --yes --server local --github-auth skip` for a local files-source project without GitHub.", 1);
   }
   const repo = parseRepoSlug(detectedSlug);
   const serverKind = options.server ?? "local";
@@ -1579,6 +1630,9 @@ Usage: rig init [--server local|remote] [--remote-url <url>] [--repo owner/repo]
   if (parsed.rest.length > 0)
     throw new CliError2(`Unexpected arguments: ${parsed.rest.join(" ")}
 Usage: rig init`, 1);
+  if (!process.stdin.isTTY) {
+    throw new CliError2("rig init is interactive and needs a terminal. For scripts, pass flags: rig init --yes --server local --github-auth skip [--repo owner/repo].", 1);
+  }
   return runInteractiveControlPlaneInit(context, await loadClackPrompts());
 }
 export {

package/dist/src/commands/inspect.js

@@ -182,6 +182,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -198,7 +212,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/run.js

@@ -206,6 +206,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -222,7 +236,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/server.js

@@ -377,6 +377,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -393,7 +407,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands/setup.js

@@ -300,6 +300,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve4(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync3(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync3(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -316,7 +330,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve4(projectRoot)
     };

package/dist/src/commands/task-run-driver.js

@@ -516,6 +516,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve5(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync3(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync3(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -532,7 +546,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve5(projectRoot)
     };

package/dist/src/commands/task.js

@@ -229,6 +229,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve2(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync2(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -245,7 +259,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve2(projectRoot)
     };

package/dist/src/commands.js

@@ -2755,6 +2755,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve10(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync6(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync4(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -2771,7 +2785,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve10(projectRoot)
     };
@@ -4584,7 +4598,7 @@ async function executeInbox(context, args) {
 init_runner();
 import { appendFileSync as appendFileSync2, existsSync as existsSync11, mkdirSync as mkdirSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "fs";
 import { spawnSync } from "child_process";
-import { resolve as resolve18 } from "path";
+import { basename as basename2, resolve as resolve18 } from "path";
 import { buildRigInitConfigSource } from "@rig/core";
 import { listGitHubProjects as listGitHubProjectsDirect, resolveProjectStatusField as resolveProjectStatusFieldDirect } from "@rig/server";
 
@@ -5452,11 +5466,48 @@ async function pollDeviceAuthUntilComplete(context, pollId, firstPayload) {
   } while (Date.now() < deadline);
   return last;
 }
+function runLocalFilesInit(context, options) {
+  const projectRoot = context.projectRoot;
+  ensureRigPrivateDirs(projectRoot);
+  ensureGitignoreEntries(projectRoot);
+  writeRepoConnection(projectRoot, { selected: "local", linkedAt: new Date().toISOString() });
+  const configTsPath = resolve18(projectRoot, "rig.config.ts");
+  const configExists = existsSync11(configTsPath) || existsSync11(resolve18(projectRoot, "rig.config.json"));
+  if (configExists && !options.repair) {
+    if (context.outputMode !== "json")
+      console.log("rig.config already exists; leaving it unchanged. Pass --repair to rewrite it.");
+  } else {
+    const projectName = basename2(projectRoot) || "rig-project";
+    writeFileSync6(configTsPath, buildRigInitConfigSource({
+      projectName,
+      taskSource: { kind: "files", path: "tasks" },
+      useStandardPlugin: true
+    }), "utf-8");
+  }
+  ensureRigConfigPackageDependencies(projectRoot);
+  const tasksDir = resolve18(projectRoot, "tasks");
+  if (!existsSync11(tasksDir)) {
+    mkdirSync7(tasksDir, { recursive: true });
+    writeFileSync6(resolve18(tasksDir, "T-1.json"), `${JSON.stringify({ id: "T-1", title: "My first Rig task", body: "Describe the change you want an agent to make." }, null, 2)}
+`, "utf-8");
+  }
+  if (context.outputMode !== "json") {
+    console.log("Initialized a local files-source Rig project (no GitHub).");
+    console.log("  tasks live in tasks/*.json \xB7 server: local");
+    console.log("Next: `rig task list`, then `rig task run T-1`.");
+    console.log("To wire GitHub later: `rig init --repair --repo owner/repo --github-auth gh`.");
+  }
+  return { ok: true, group: "init", command: "init", details: { mode: "local-files", projectRoot, taskSourcePath: "tasks" } };
+}
 async function runControlPlaneInit(context, options) {
   const projectRoot = context.projectRoot;
   const detectedSlug = options.repoSlug ?? detectOriginRepoSlug(projectRoot);
   if (!detectedSlug) {
-    throw new CliError2("Could not detect GitHub repo slug from origin. Pass --repo owner/repo.", 1);
+    const authMethod2 = options.githubAuthMethod ?? (options.githubToken ? "token" : "skip");
+    if ((options.server ?? "local") === "local" && authMethod2 === "skip") {
+      return runLocalFilesInit(context, options);
+    }
+    throw new CliError2("Could not detect GitHub repo slug from origin. Pass --repo owner/repo \u2014 or run `rig init --yes --server local --github-auth skip` for a local files-source project without GitHub.", 1);
   }
   const repo = parseRepoSlug(detectedSlug);
   const serverKind = options.server ?? "local";
@@ -5800,6 +5851,9 @@ Usage: rig init [--server local|remote] [--remote-url <url>] [--repo owner/repo]
   if (parsed.rest.length > 0)
     throw new CliError2(`Unexpected arguments: ${parsed.rest.join(" ")}
 Usage: rig init`, 1);
+  if (!process.stdin.isTTY) {
+    throw new CliError2("rig init is interactive and needs a terminal. For scripts, pass flags: rig init --yes --server local --github-auth skip [--repo owner/repo].", 1);
+  }
   return runInteractiveControlPlaneInit(context, await loadClackPrompts());
 }
 

package/dist/src/index.js

@@ -2945,6 +2945,20 @@ function readGitHubBearerTokenForRemote(projectRoot) {
     return privateSession;
   return cleanToken(process.env.RIG_SERVER_AUTH_TOKEN) ?? cleanToken(process.env.RIG_REMOTE_AUTH_TOKEN);
 }
+function readStoredGitHubAuthToken(projectRoot) {
+  const path = resolve11(projectRoot, ".rig", "state", "github-auth.json");
+  if (!existsSync7(path))
+    return null;
+  try {
+    const parsed = JSON.parse(readFileSync4(path, "utf8"));
+    return cleanToken(typeof parsed.token === "string" ? parsed.token : undefined);
+  } catch {
+    return null;
+  }
+}
+function readLocalConnectionFallbackToken(projectRoot) {
+  return readGitHubBearerTokenForRemote(projectRoot) ?? cleanToken(process.env.RIG_GITHUB_TOKEN) ?? readStoredGitHubAuthToken(projectRoot);
+}
 async function ensureServerForCli(projectRoot) {
   try {
     const selected = resolveSelectedConnection(projectRoot);
@@ -2961,7 +2975,7 @@ async function ensureServerForCli(projectRoot) {
     const connection = await ensureLocalRigServerConnection(projectRoot);
     return {
       baseUrl: connection.baseUrl,
-      authToken: connection.authToken,
+      authToken: connection.authToken ?? readLocalConnectionFallbackToken(projectRoot),
       connectionKind: "local",
       serverProjectRoot: resolve11(projectRoot)
     };
@@ -4774,7 +4788,7 @@ async function executeInbox(context, args) {
 init_runner();
 import { appendFileSync as appendFileSync2, existsSync as existsSync12, mkdirSync as mkdirSync8, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "fs";
 import { spawnSync } from "child_process";
-import { resolve as resolve19 } from "path";
+import { basename as basename2, resolve as resolve19 } from "path";
 import { buildRigInitConfigSource } from "@rig/core";
 import { listGitHubProjects as listGitHubProjectsDirect, resolveProjectStatusField as resolveProjectStatusFieldDirect } from "@rig/server";
 
@@ -5642,11 +5656,48 @@ async function pollDeviceAuthUntilComplete(context, pollId, firstPayload) {
   } while (Date.now() < deadline);
   return last;
 }
+function runLocalFilesInit(context, options) {
+  const projectRoot = context.projectRoot;
+  ensureRigPrivateDirs(projectRoot);
+  ensureGitignoreEntries(projectRoot);
+  writeRepoConnection(projectRoot, { selected: "local", linkedAt: new Date().toISOString() });
+  const configTsPath = resolve19(projectRoot, "rig.config.ts");
+  const configExists = existsSync12(configTsPath) || existsSync12(resolve19(projectRoot, "rig.config.json"));
+  if (configExists && !options.repair) {
+    if (context.outputMode !== "json")
+      console.log("rig.config already exists; leaving it unchanged. Pass --repair to rewrite it.");
+  } else {
+    const projectName = basename2(projectRoot) || "rig-project";
+    writeFileSync6(configTsPath, buildRigInitConfigSource({
+      projectName,
+      taskSource: { kind: "files", path: "tasks" },
+      useStandardPlugin: true
+    }), "utf-8");
+  }
+  ensureRigConfigPackageDependencies(projectRoot);
+  const tasksDir = resolve19(projectRoot, "tasks");
+  if (!existsSync12(tasksDir)) {
+    mkdirSync8(tasksDir, { recursive: true });
+    writeFileSync6(resolve19(tasksDir, "T-1.json"), `${JSON.stringify({ id: "T-1", title: "My first Rig task", body: "Describe the change you want an agent to make." }, null, 2)}
+`, "utf-8");
+  }
+  if (context.outputMode !== "json") {
+    console.log("Initialized a local files-source Rig project (no GitHub).");
+    console.log("  tasks live in tasks/*.json \xB7 server: local");
+    console.log("Next: `rig task list`, then `rig task run T-1`.");
+    console.log("To wire GitHub later: `rig init --repair --repo owner/repo --github-auth gh`.");
+  }
+  return { ok: true, group: "init", command: "init", details: { mode: "local-files", projectRoot, taskSourcePath: "tasks" } };
+}
 async function runControlPlaneInit(context, options) {
   const projectRoot = context.projectRoot;
   const detectedSlug = options.repoSlug ?? detectOriginRepoSlug(projectRoot);
   if (!detectedSlug) {
-    throw new CliError2("Could not detect GitHub repo slug from origin. Pass --repo owner/repo.", 1);
+    const authMethod2 = options.githubAuthMethod ?? (options.githubToken ? "token" : "skip");
+    if ((options.server ?? "local") === "local" && authMethod2 === "skip") {
+      return runLocalFilesInit(context, options);
+    }
+    throw new CliError2("Could not detect GitHub repo slug from origin. Pass --repo owner/repo \u2014 or run `rig init --yes --server local --github-auth skip` for a local files-source project without GitHub.", 1);
   }
   const repo = parseRepoSlug(detectedSlug);
   const serverKind = options.server ?? "local";
@@ -5990,6 +6041,9 @@ Usage: rig init [--server local|remote] [--remote-url <url>] [--repo owner/repo]
   if (parsed.rest.length > 0)
     throw new CliError2(`Unexpected arguments: ${parsed.rest.join(" ")}
 Usage: rig init`, 1);
+  if (!process.stdin.isTTY) {
+    throw new CliError2("rig init is interactive and needs a terminal. For scripts, pass flags: rig init --yes --server local --github-auth skip [--repo owner/repo].", 1);
+  }
   return runInteractiveControlPlaneInit(context, await loadClackPrompts());
 }
 
@@ -12288,7 +12342,7 @@ var __testOnly = {
 };
 // packages/cli/src/launcher.ts
 import { existsSync as existsSync17 } from "fs";
-import { basename as basename2, resolve as resolve26 } from "path";
+import { basename as basename3, resolve as resolve26 } from "path";
 import { loadDotEnvSecrets } from "@rig/runtime/baked-secrets";
 import { RIG_DEFINITION_DIRNAME, RIG_STATE_DIRNAME, resolveNearestRigProjectRoot } from "@rig/runtime/layout";
 function parsePolicyMode(value) {
@@ -12313,7 +12367,7 @@ function resolveProjectRoot({
     return resolve26(cwd, envProjectRoot);
   }
   const fallbackImportDir = importDir ?? cwd;
-  const execName = basename2(execPath).toLowerCase();
+  const execName = basename3(execPath).toLowerCase();
   const execCandidates = execName === "rig" || execName === "rig.exe" ? [resolve26(execPath, "..", "..")] : [];
   const candidates = [cwd, ...execCandidates, resolve26(fallbackImportDir, "..")];
   for (const candidate of candidates) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@h-rig/cli",
-  "version": "0.0.6-alpha.50",
+  "version": "0.0.6-alpha.51",
   "type": "module",
   "description": "Rig package",
   "license": "UNLICENSED",
@@ -23,12 +23,12 @@
   },
   "dependencies": {
     "@clack/prompts": "^1.2.0",
-    "@earendil-works/pi-coding-agent": "npm:@h-rig/pi-coding-agent@0.0.6-alpha.50",
-    "@rig/client": "npm:@h-rig/client@0.0.6-alpha.50",
-    "@rig/core": "npm:@h-rig/core@0.0.6-alpha.50",
-    "@rig/runtime": "npm:@h-rig/runtime@0.0.6-alpha.50",
-    "@rig/server": "npm:@h-rig/server@0.0.6-alpha.50",
-    "@rig/standard-plugin": "npm:@h-rig/standard-plugin@0.0.6-alpha.50",
+    "@earendil-works/pi-coding-agent": "npm:@h-rig/pi-coding-agent@0.0.6-alpha.51",
+    "@rig/client": "npm:@h-rig/client@0.0.6-alpha.51",
+    "@rig/core": "npm:@h-rig/core@0.0.6-alpha.51",
+    "@rig/runtime": "npm:@h-rig/runtime@0.0.6-alpha.51",
+    "@rig/server": "npm:@h-rig/server@0.0.6-alpha.51",
+    "@rig/standard-plugin": "npm:@h-rig/standard-plugin@0.0.6-alpha.51",
     "picocolors": "^1.1.1"
   }
 }