@h-rig/cli 0.0.6-alpha.9 → 0.0.6-alpha.91

package/dist/src/commands/inspect.js

@@ -1,16 +1,28 @@
 // @bun
 // packages/cli/src/commands/inspect.ts
-import { existsSync, readFileSync } from "fs";
-import { resolve } from "path";
+import { RIG_RUN_LOG_ENTRY } from "@rig/contracts";
+import {
+  changedFilesForTask,
+  taskArtifactRead,
+  taskArtifacts,
+  taskDeps
+} from "@rig/runtime/control-plane/native/task-ops";
 
 // packages/cli/src/runner.ts
 import { EventBus } from "@rig/runtime/control-plane/runtime/events";
-import { CliError } from "@rig/runtime/control-plane/errors";
+import { CliError as RuntimeCliError } from "@rig/runtime/control-plane/errors";
 import { evaluate, loadPolicy, resolveAction } from "@rig/runtime/control-plane/runtime/guard";
-import { PluginManager } from "@rig/runtime/control-plane/runtime/plugins";
-import { loadRuntimeContextFromEnv } from "@rig/runtime/control-plane/runtime/context";
 import { buildBinary } from "@rig/runtime/control-plane/runtime/isolation";
-import { CliError as CliError2 } from "@rig/runtime/control-plane/errors";
+
+class CliError extends RuntimeCliError {
+  hint;
+  constructor(message, exitCode = 1, options = {}) {
+    super(message, exitCode);
+    if (options.hint?.trim()) {
+      this.hint = options.hint.trim();
+    }
+  }
+}
 function takeOption(args, option) {
   const rest = [];
   let value;
@@ -19,7 +31,7 @@ function takeOption(args, option) {
     if (current === option) {
       const next = args[index + 1];
       if (!next || next.startsWith("-")) {
-        throw new CliError(`Missing value for ${option}`);
+        throw new CliError(`Missing value for ${option}`, 1, { hint: `Provide a value after ${option}, e.g. \`${option} <value>\`.` });
       }
       value = next;
       index += 1;
@@ -45,128 +57,706 @@ Usage: ${usage}`);
   return taskId;
 }
 
-// packages/cli/src/commands/inspect.ts
+// packages/cli/src/commands/_cli-format.ts
+import pc from "picocolors";
+var dim = pc.dim;
+var faintBar = pc.dim("\u2502");
+var accent = pc.cyan;
+function truncate(value, width) {
+  return value.length <= width ? value : `${value.slice(0, Math.max(0, width - 1))}\u2026`;
+}
+function pad(value, width) {
+  return value.length >= width ? value : `${value}${" ".repeat(width - value.length)}`;
+}
+function statusColor(status) {
+  const normalized = status.trim().toLowerCase();
+  if (["done", "completed", "ready", "healthy", "open", "approved"].includes(normalized))
+    return pc.green;
+  if (["failed", "error", "blocked", "rejected", "stopped"].includes(normalized))
+    return pc.red;
+  if (["running", "in_progress", "in-progress", "active", "booting"].includes(normalized))
+    return pc.cyan;
+  if (["pending", "queued", "created", "local"].includes(normalized))
+    return pc.yellow;
+  return pc.dim;
+}
+function firstString(record, keys, fallback = "") {
+  for (const key of keys) {
+    const value = record[key];
+    if (typeof value === "string" && value.trim())
+      return value;
+  }
+  return fallback;
+}
+function runIdOf(run) {
+  return firstString(run, ["runId", "id"], "(unknown-run)");
+}
+function taskIdOf(run) {
+  return firstString(run, ["taskId", "task", "task_id"]);
+}
+function runTitleOf(run) {
+  return firstString(run, ["title", "summary", "name"], taskIdOf(run) || "(untitled)");
+}
+function printFormattedOutput(message) {
+  console.log(message);
+}
+function formatSection(title, subtitle) {
+  return `${pc.bold(accent("\u25C6"))} ${pc.bold(title)}${subtitle ? dim(` \u2014 ${subtitle}`) : ""}`;
+}
+function formatLegacyAutomationSurface() {
+  return [];
+}
+function formatRunList(runs, options = {}) {
+  if (runs.length === 0) {
+    return [
+      formatSection("Runs", "none recorded"),
+      options.source === "server" ? dim("No runs recorded on the selected server.") : dim("No runs recorded in local state."),
+      "",
+      ...formatLegacyAutomationSurface()
+    ].join(`
+`);
+  }
+  const body = runs.map((run) => {
+    const row = run;
+    const runId = runIdOf(row);
+    const status = firstString(row, ["status"], "unknown");
+    const runtime = firstString(row, ["runtime", "runtimeAdapter"], "");
+    return [
+      pc.bold(runId),
+      statusColor(status)(pad(truncate(status, 12), 12)),
+      `${runTitleOf(row)}${runtime ? dim(`  ${runtime}`) : ""}`
+    ].join("  ");
+  });
+  return [formatSection("Runs", options.source === "server" ? "selected server" : "local state"), ...body, "", ...formatLegacyAutomationSurface()].join(`
+`);
+}
+
+// packages/cli/src/commands/_run-projection.ts
+import { existsSync as existsSync2, readdirSync as readdirSync2, readFileSync as readFileSync2 } from "fs";
+import { resolve as resolve2 } from "path";
 import {
-  listAuthorityRuns,
-  readAuthorityRun,
-  resolveAuthorityRunDir,
-  resolveTaskArtifactDirs
-} from "@rig/runtime/control-plane/authority-files";
-import { changedFilesForTask } from "@rig/runtime/control-plane/native/task-ops";
-import { resolveHarnessPaths, resolveMonorepoRoot, runCapture } from "@rig/runtime/control-plane/native/utils";
-import { readTaskArtifactPreview } from "@rig/runtime/control-plane/native/workspace-ops";
-async function executeInspect(context, args) {
-  const [command = "failures", ...rest] = args;
-  switch (command) {
-    case "logs": {
-      const { value: task, rest: remaining } = takeOption(rest, "--task");
-      requireNoExtraArgs(remaining, "bun run rig inspect logs --task <beads-id>");
-      const requiredTask = requireTask(task, "bun run rig inspect logs --task <beads-id>");
-      const latestRun = listAuthorityRuns(context.projectRoot).map((entry) => readAuthorityRun(context.projectRoot, entry.runId)).filter((run) => Boolean(run)).filter((run) => run.taskId === requiredTask).sort((left, right) => String(right.updatedAt ?? "").localeCompare(String(left.updatedAt ?? "")))[0];
-      if (!latestRun) {
-        throw new CliError2(`No runs found for ${requiredTask}.`);
-      }
-      const logsPath = resolve(resolveAuthorityRunDir(context.projectRoot, latestRun.runId), "logs.jsonl");
-      if (!existsSync(logsPath)) {
-        throw new CliError2(`No logs found for run ${latestRun.runId}.`);
-      }
-      await context.runCommand(["cat", logsPath]);
-      return { ok: true, group: "inspect", command, details: { task: requiredTask, runId: latestRun.runId } };
-    }
-    case "artifacts": {
-      const { value: task, rest: remaining } = takeOption(rest, "--task");
-      requireNoExtraArgs(remaining, "bun run rig inspect artifacts --task <beads-id>");
-      const requiredTask = requireTask(task, "bun run rig inspect artifacts --task <beads-id>");
-      const artifactRoot = resolveTaskArtifactDirs(context.projectRoot, requiredTask).find((path) => existsSync(path));
-      if (!artifactRoot) {
-        throw new CliError2(`No artifacts found for ${requiredTask}.`);
-      }
-      await context.runCommand(["ls", "-la", artifactRoot]);
-      return { ok: true, group: "inspect", command, details: { task: requiredTask } };
+  foldRunSessionEntries,
+  sessionIdFromSessionFile as sessionIdFromSessionFile2
+} from "@rig/contracts";
+import { listAgentRuntimes as listAgentRuntimes2 } from "@rig/runtime/control-plane/runtime/isolation";
+
+// packages/cli/src/commands/_run-bridge.ts
+import { existsSync, readdirSync, readFileSync } from "fs";
+import { dirname, resolve } from "path";
+import { CUSTOM_TYPE_FOR, sessionIdFromSessionFile } from "@rig/contracts";
+import { createPluginHost } from "@rig/core";
+import { loadConfig } from "@rig/core/load-config";
+import { resolveOwnerNamespaceKey, resolveRegistryBaseUrl, resolveRegistrySecret, resolveSelectedRemote } from "@rig/runtime/control-plane/remote";
+import { listAgentRuntimes } from "@rig/runtime/control-plane/runtime/isolation";
+import { createRegistryClient } from "@rig/relay-registry";
+import {
+  listActiveCollabSessions as ompListActiveCollabSessions
+} from "@oh-my-pi/pi-coding-agent/collab/api";
+function registrySecret(env = process.env) {
+  return resolveRegistrySecret(process.cwd(), env) ?? null;
+}
+function registryBaseUrl(env = process.env) {
+  return resolveRegistryBaseUrl(process.cwd(), env);
+}
+function collabFromRegistryEntry(entry) {
+  return {
+    sessionId: entry.roomId,
+    sessionPath: "",
+    cwd: "",
+    title: entry.title,
+    joinLink: entry.joinLink,
+    webLink: entry.webLink,
+    relayUrl: entry.relayUrl,
+    owner: entry.owner,
+    selectedRepo: entry.repo,
+    startedAt: entry.startedAt,
+    updatedAt: entry.heartbeatAt,
+    ...entry.pid === undefined ? {} : { pid: entry.pid },
+    stale: entry.stale
+  };
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function readLocalRunCollab(runtime) {
+  if (!runtime.sessionDir || !existsSync(runtime.sessionDir))
+    return null;
+  let files;
+  try {
+    files = readdirSync(runtime.sessionDir).filter((f) => f.endsWith(".jsonl")).sort().reverse();
+  } catch {
+    return null;
+  }
+  for (const file of files) {
+    let lines;
+    try {
+      lines = readFileSync(resolve(runtime.sessionDir, file), "utf8").split(`
+`);
+    } catch {
+      continue;
     }
-    case "artifact": {
-      let previewPending = rest;
-      const task = takeOption(previewPending, "--task");
-      previewPending = task.rest;
-      const file = takeOption(previewPending, "--file");
-      previewPending = file.rest;
-      requireNoExtraArgs(previewPending, "bun run rig inspect artifact --task <beads-id> --file <name>");
-      const requiredTask = requireTask(task.value, "bun run rig inspect artifact --task <beads-id> --file <name>");
-      if (!file.value) {
-        throw new CliError2("Missing --file for rig inspect artifact.");
+    let host = null;
+    for (const line of lines) {
+      if (!line.includes("collab-host-started"))
+        continue;
+      let entry;
+      try {
+        entry = JSON.parse(line);
+      } catch {
+        continue;
       }
-      const preview = readTaskArtifactPreview(context.projectRoot, requiredTask, file.value);
-      if (context.outputMode === "text") {
-        console.log(preview.contents);
-        if (preview.truncated) {
-          console.log(`
-[preview truncated at ${preview.maxBytes} bytes of ${preview.sizeBytes}]`);
-        }
-      }
-      return {
-        ok: true,
-        group: "inspect",
-        command,
-        details: {
-          task: requiredTask,
-          fileName: file.value,
-          path: preview.path,
-          sizeBytes: preview.sizeBytes,
-          truncated: preview.truncated,
-          maxBytes: preview.maxBytes,
-          contents: context.outputMode === "json" ? preview.contents : null
-        }
+      if (!isRecord(entry) || entry.customType !== CUSTOM_TYPE_FOR["timeline-entry"] || !isRecord(entry.data))
+        continue;
+      const payload = isRecord(entry.data.payload) ? entry.data.payload : entry.data;
+      if (payload.type !== "collab-host-started")
+        continue;
+      host = {
+        roomId: typeof payload.roomId === "string" ? payload.roomId : undefined,
+        joinLink: typeof payload.joinLink === "string" ? payload.joinLink : undefined,
+        webLink: typeof payload.webLink === "string" ? payload.webLink : undefined,
+        relayUrl: typeof payload.relayUrl === "string" ? payload.relayUrl : undefined,
+        at: typeof entry.data.at === "string" ? entry.data.at : undefined
       };
     }
-    case "diff": {
-      const { value: task, rest: remaining } = takeOption(rest, "--task");
-      requireNoExtraArgs(remaining, "bun run rig inspect diff [--task <beads-id>]");
-      if (task) {
-        const files = changedFilesForTask(context.projectRoot, task, false);
-        for (const file of files) {
-          console.log(file);
-        }
-      } else {
-        await context.runCommand(["git", "diff", "--stat"]);
-      }
-      return { ok: true, group: "inspect", command, details: { task: task || null } };
+    if (!host?.joinLink)
+      continue;
+    const at = host.at ?? "";
+    const sessionId = host.roomId ?? sessionIdFromSessionFile(resolve(runtime.sessionDir, file)) ?? runtime.id;
+    return {
+      sessionId,
+      sessionPath: resolve(runtime.sessionDir, file),
+      cwd: runtime.workspaceDir,
+      joinLink: host.joinLink,
+      webLink: host.webLink ?? "",
+      relayUrl: host.relayUrl ?? "",
+      title: runtime.taskId ? `[${runtime.taskId}] Rig run ${sessionId}` : `Rig run ${sessionId}`,
+      startedAt: at,
+      updatedAt: at,
+      stale: false
+    };
+  }
+  return null;
+}
+async function listLocalRunCollabSessions(projectRoot) {
+  let runtimes;
+  try {
+    runtimes = await listAgentRuntimes(projectRoot);
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const runtime of runtimes) {
+    const collab = readLocalRunCollab(runtime);
+    if (collab)
+      out.push(collab);
+  }
+  return out;
+}
+async function listActiveRunCollab(filter) {
+  return defaultListActiveCollabSessions(filter);
+}
+async function defaultListActiveCollabSessions(filter) {
+  const projectRoot = process.cwd();
+  const local = await listLocalRunCollabSessions(projectRoot);
+  const namespaceKey = filter.namespaceKey ?? resolveOwnerNamespaceKey(projectRoot);
+  const secret = registrySecret();
+  const remote = namespaceKey && secret ? (await createRegistryClient({ baseUrl: registryBaseUrl(), namespaceKey, secret }).listRoomsByOwner(filter)).map(collabFromRegistryEntry) : await ompListActiveCollabSessions(filter);
+  const seen = new Set(local.map((c) => c.sessionId));
+  return [...local, ...remote.filter((c) => !seen.has(c.sessionId))];
+}
+
+// packages/cli/src/commands/_run-diagnostics.ts
+function normalizeString(value) {
+  if (typeof value !== "string")
+    return null;
+  const normalized = value.replace(/\s+/g, " ").trim();
+  return normalized.length > 0 ? normalized : null;
+}
+function isGenericRunFailure(value) {
+  const text = normalizeString(value);
+  return Boolean(text && /^Task run failed \([^)]*\)$/i.test(text));
+}
+function appendCandidate(candidates, value) {
+  const text = normalizeString(value);
+  if (text && !candidates.includes(text))
+    candidates.push(text);
+}
+function categorizeUsefulRunError(lines) {
+  const taskSourceFailure = lines.find((line) => /failed to update task source/i.test(line));
+  if (taskSourceFailure)
+    return `Task source update failed: ${taskSourceFailure}`;
+  const moduleFailure = lines.find((line) => /cannot find module/i.test(line));
+  if (moduleFailure)
+    return `Runtime module resolution failed: ${moduleFailure}`;
+  const providerFailure = lines.find((line) => /no api key found|unauthorized|authentication failed|invalid api key/i.test(line));
+  if (providerFailure)
+    return `Provider authentication failed: ${providerFailure}`;
+  return null;
+}
+function summarizeUsefulRunError(projection) {
+  if (projection.status !== "failed")
+    return null;
+  const candidates = [];
+  for (const anomaly of projection.anomalies) {
+    appendCandidate(candidates, `Journal anomaly (${anomaly.kind}): ${anomaly.detail}`);
+  }
+  for (const phase of projection.closeoutPhases) {
+    if (phase.outcome === "failed")
+      appendCandidate(candidates, phase.detail);
+  }
+  for (const entry of projection.statusHistory) {
+    appendCandidate(candidates, entry.reason);
+  }
+  appendCandidate(candidates, projection.record.statusDetail);
+  appendCandidate(candidates, projection.record.errorText);
+  const nonGeneric = candidates.filter((candidate) => !isGenericRunFailure(candidate));
+  return categorizeUsefulRunError(nonGeneric) ?? nonGeneric.at(-1) ?? normalizeString(projection.record.errorText);
+}
+
+// packages/cli/src/commands/_run-projection.ts
+var EMPTY_PROJECTION = foldRunSessionEntries([], "");
+function stringOrNull(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+function newestSessionFile(sessionDir) {
+  if (!sessionDir || !existsSync2(sessionDir))
+    return null;
+  try {
+    const files = readdirSync2(sessionDir).filter((file) => file.endsWith(".jsonl")).sort().reverse();
+    return files[0] ? resolve2(sessionDir, files[0]) : null;
+  } catch {
+    return null;
+  }
+}
+function readSessionRunEntries(sessionPath) {
+  if (!sessionPath || !existsSync2(sessionPath))
+    return [];
+  let raw;
+  try {
+    raw = readFileSync2(sessionPath, "utf8");
+  } catch {
+    return [];
+  }
+  const entries = [];
+  for (const line of raw.split(`
+`)) {
+    if (!line.trim())
+      continue;
+    let parsed;
+    try {
+      parsed = JSON.parse(line);
+    } catch {
+      continue;
     }
-    case "failures": {
-      requireNoExtraArgs(rest, "bun run rig inspect failures");
-      const failed = resolveHarnessPaths(context.projectRoot).failedApproachesPath;
-      if (!existsSync(failed)) {
-        console.log("No failures recorded.");
-      } else {
-        process.stdout.write(readFileSync(failed, "utf-8"));
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+      continue;
+    entries.push({
+      type: "type" in parsed && typeof parsed.type === "string" ? parsed.type : "",
+      ..."customType" in parsed && typeof parsed.customType === "string" ? { customType: parsed.customType } : {},
+      ..."data" in parsed ? { data: parsed.data } : {}
+    });
+  }
+  return entries;
+}
+function recordFromProjection(runId, projection, presence) {
+  const record = projection.record;
+  const status = projection.status ?? (presence.stale ? "stale" : presence.live ? "running" : "unknown");
+  const taskId = stringOrNull(record.taskId) ?? presence.fallbackTaskId ?? null;
+  const title = stringOrNull(record.title) ?? stringOrNull(presence.title) ?? (taskId ? `Run ${taskId}` : `Rig run ${runId}`);
+  return {
+    runId,
+    taskId,
+    title,
+    status,
+    source: presence.source,
+    live: presence.live,
+    stale: presence.stale,
+    startedAt: stringOrNull(record.startedAt) ?? presence.startedAt ?? null,
+    updatedAt: stringOrNull(record.updatedAt) ?? presence.updatedAt ?? projection.lastEventAt ?? null,
+    completedAt: stringOrNull(record.completedAt),
+    joinLink: presence.joinLink ?? null,
+    webLink: presence.webLink ?? null,
+    relayUrl: presence.relayUrl ?? null,
+    sessionPath: stringOrNull(record.sessionPath) ?? presence.sessionPath ?? null,
+    prUrl: stringOrNull(record.prUrl),
+    worktreePath: stringOrNull(record.worktreePath),
+    pendingApprovals: projection.pendingApprovals.length,
+    pendingInputs: projection.pendingUserInputs.length,
+    steeringCount: projection.steeringCount,
+    stallCount: projection.stallCount,
+    errorSummary: summarizeUsefulRunError(projection),
+    projection
+  };
+}
+function recordFromLiveCollab(collab) {
+  const runId = collab.sessionId;
+  const sessionPath = stringOrNull(collab.sessionPath);
+  const projection = sessionPath ? foldRunSessionEntries(readSessionRunEntries(sessionPath), runId) : EMPTY_PROJECTION;
+  return recordFromProjection(runId, projection, {
+    source: sessionPath ? "local" : "remote",
+    live: !collab.stale,
+    stale: Boolean(collab.stale),
+    title: collab.title,
+    joinLink: stringOrNull(collab.joinLink),
+    webLink: stringOrNull(collab.webLink),
+    relayUrl: stringOrNull(collab.relayUrl),
+    sessionPath,
+    startedAt: stringOrNull(collab.startedAt),
+    updatedAt: stringOrNull(collab.updatedAt)
+  });
+}
+function recordFromRuntime(runtime) {
+  const sessionPath = newestSessionFile(runtime.sessionDir ?? "");
+  if (!sessionPath)
+    return null;
+  const projection = foldRunSessionEntries(readSessionRunEntries(sessionPath), runtime.id);
+  if (projection.lastSeq === 0)
+    return null;
+  return recordFromProjection(sessionIdFromSessionFile2(sessionPath) ?? runtime.id, projection, {
+    source: "local",
+    live: false,
+    stale: false,
+    sessionPath,
+    fallbackTaskId: stringOrNull(runtime.taskId)
+  });
+}
+function sortByRecency(records) {
+  return [...records].sort((a, b) => {
+    const at = Date.parse(b.updatedAt ?? b.startedAt ?? "") || 0;
+    const bt = Date.parse(a.updatedAt ?? a.startedAt ?? "") || 0;
+    return at - bt;
+  });
+}
+async function listRunProjections(projectRoot, filter = {}) {
+  const byRunId = new Map;
+  let live = [];
+  try {
+    live = await listActiveRunCollab(filter);
+  } catch {
+    live = [];
+  }
+  for (const collab of live) {
+    const record = recordFromLiveCollab(collab);
+    byRunId.set(record.runId, record);
+  }
+  let runtimes = [];
+  try {
+    runtimes = await listAgentRuntimes2(projectRoot);
+  } catch {
+    runtimes = [];
+  }
+  for (const runtime of runtimes) {
+    const record = recordFromRuntime(runtime);
+    if (!record)
+      continue;
+    const sessionId = sessionIdFromSessionFile2(record.sessionPath);
+    const liveMatch = sessionId ? byRunId.get(sessionId) : undefined;
+    if (liveMatch) {
+      if (liveMatch.source === "remote" || !liveMatch.sessionPath) {
+        byRunId.set(liveMatch.runId, { ...liveMatch, sessionPath: record.sessionPath, source: "local" });
       }
-      return { ok: true, group: "inspect", command };
+      continue;
     }
-    case "graph":
-      requireNoExtraArgs(rest, "bun run rig inspect graph");
-      {
-        const monorepoRoot = resolveMonorepoRoot(context.projectRoot);
-        const result = runCapture(["br", "--no-db", "list", "--pretty"], monorepoRoot);
-        if (result.exitCode !== 0) {
-          throw new CliError2(result.stderr || result.stdout || "Failed to inspect graph");
-        }
-        process.stdout.write(result.stdout);
-      }
-      return { ok: true, group: "inspect", command };
-    case "audit": {
-      requireNoExtraArgs(rest, "bun run rig inspect audit");
-      const auditPath = resolve(resolveHarnessPaths(context.projectRoot).logsDir, "audit.jsonl");
-      if (!existsSync(auditPath)) {
-        console.log("No audit log found.");
-      } else {
-        const lines = readFileSync(auditPath, "utf-8").split(/\r?\n/).filter(Boolean).slice(-20);
-        for (const line of lines) {
-          console.log(line);
-        }
-      }
-      return { ok: true, group: "inspect", command };
+    if (byRunId.has(runtime.id))
+      continue;
+    byRunId.set(record.runId, record);
+  }
+  return sortByRecency([...byRunId.values()]);
+}
+async function getRunProjection(projectRoot, runId, filter = {}) {
+  const runs = await listRunProjections(projectRoot, filter);
+  return runs.find((run) => run.runId === runId) ?? runs.find((run) => run.runId.startsWith(runId)) ?? runs.find((run) => run.taskId === runId) ?? null;
+}
+
+// packages/cli/src/commands/inspect.ts
+var INSPECT_USAGE = "rig inspect <logs|artifact|artifacts|run-logs|runs|failures|graph|audit|diff>";
+function printInspectHelp() {
+  console.log([
+    `Usage: ${INSPECT_USAGE}`,
+    "",
+    "Commands:",
+    "  logs --task <id>              Print log lines from the latest projected run for a task.",
+    "  artifact --task <id> --file <name>",
+    "                                Preview a single task artifact.",
+    "  artifacts --task <id>         List task artifacts.",
+    "  run-logs --run <id>           Print log lines from a run journal.",
+    "  runs                          List all projected runs.",
+    "  diff --task <id>              List files changed by a task.",
+    "  graph [--task <id>]           Print the task dependency graph.",
+    "  failures --task <id>          Summarize failed runs, closeout failures, and journal anomalies.",
+    "  audit                         Controlled-command audit is not readable yet in this CLI."
+  ].join(`
+`));
+}
+function asRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function firstString2(record, keys) {
+  for (const key of keys) {
+    const value = record[key];
+    if (typeof value === "string" && value.trim().length > 0) {
+      return value;
+    }
+  }
+  return null;
+}
+function stringifyLogPayload(value) {
+  if (typeof value === "string")
+    return value;
+  if (typeof value === "number" || typeof value === "boolean")
+    return String(value);
+  const record = asRecord(value);
+  if (!record)
+    return null;
+  const direct = firstString2(record, ["line", "message", "text", "content", "output", "summary", "detail"]);
+  if (direct)
+    return direct;
+  try {
+    return JSON.stringify(record);
+  } catch {
+    return String(record);
+  }
+}
+function logLineFromValue(value) {
+  const record = asRecord(value);
+  if (!record)
+    return stringifyLogPayload(value);
+  const direct = firstString2(record, ["line", "message", "text", "content", "output", "summary", "detail"]);
+  if (direct)
+    return direct;
+  if ("payload" in record)
+    return stringifyLogPayload(record.payload);
+  if ("data" in record)
+    return stringifyLogPayload(record.data);
+  return stringifyLogPayload(record);
+}
+function logLineFromSessionEntry(entry) {
+  if (entry.type !== "custom" || entry.customType !== RIG_RUN_LOG_ENTRY)
+    return null;
+  return logLineFromValue(entry.data);
+}
+function logLinesFromProjection(projection) {
+  const projected = projection;
+  const lines = [];
+  for (const key of ["logs", "logEntries", "journalLogs", "runLogs"]) {
+    const entries = projected[key];
+    if (!Array.isArray(entries))
+      continue;
+    for (const entry of entries) {
+      const line = logLineFromValue(entry);
+      if (line !== null)
+        lines.push(line);
+    }
+  }
+  return lines;
+}
+function toRunLike(run) {
+  return {
+    runId: run.runId,
+    taskId: run.taskId,
+    title: run.title,
+    status: run.status,
+    source: run.source,
+    live: run.live,
+    stale: run.stale,
+    startedAt: run.startedAt,
+    updatedAt: run.updatedAt,
+    completedAt: run.completedAt,
+    joinLink: run.joinLink,
+    prUrl: run.prUrl,
+    pendingApprovals: run.pendingApprovals,
+    pendingInputs: run.pendingInputs,
+    steeringCount: run.steeringCount,
+    stallCount: run.stallCount
+  };
+}
+function requireRunId(value, usage) {
+  if (!value || !value.trim()) {
+    throw new CliError(`${usage} requires a run id.`, 2, { hint: "Run `rig inspect runs` to find run ids." });
+  }
+  return value.trim();
+}
+async function executeLogs(context, args, deps) {
+  const taskResult = takeOption(args, "--task");
+  requireNoExtraArgs(taskResult.rest, "rig inspect logs --task <id>");
+  const taskId = requireTask(taskResult.value, "rig inspect logs --task <id>");
+  const projection = await (deps.getRunProjection ?? getRunProjection)(context.projectRoot, taskId);
+  if (!projection) {
+    throw new CliError(`No projected runs found for task ${taskId}.`, 1, {
+      hint: "Run `rig run list` to confirm the run journal is discoverable."
+    });
+  }
+  const projectedLines = logLinesFromProjection(projection.projection);
+  const sessionLines = projectedLines.length > 0 ? [] : (deps.readSessionRunEntries ?? readSessionRunEntries)(projection.sessionPath).map(logLineFromSessionEntry).filter((line) => line !== null);
+  const lines = projectedLines.length > 0 ? projectedLines : sessionLines;
+  if (context.outputMode === "json") {
+    console.log(JSON.stringify({ taskId, runId: projection.runId, lines }, null, 2));
+  } else if (lines.length === 0) {
+    console.log(`No log entries found for task ${taskId}.`);
+  } else {
+    for (const line of lines)
+      console.log(line);
+  }
+  return { ok: true, group: "inspect", command: "logs", details: { taskId, runId: projection.runId, count: lines.length } };
+}
+async function executeArtifact(context, args, deps) {
+  const taskResult = takeOption(args, "--task");
+  const fileResult = takeOption(taskResult.rest, "--file");
+  requireNoExtraArgs(fileResult.rest, "rig inspect artifact --task <id> --file <name>");
+  const taskId = requireTask(taskResult.value, "rig inspect artifact --task <id> --file <name>");
+  const filename = fileResult.value?.trim();
+  if (!filename) {
+    throw new CliError("rig inspect artifact --task <id> --file <name> requires an artifact file name.", 2);
+  }
+  const preview = await (deps.taskArtifactRead ?? taskArtifactRead)(context.projectRoot, filename, {
+    taskId,
+    maxBytes: 64 * 1024
+  });
+  if (context.outputMode === "json") {
+    console.log(JSON.stringify({ taskId, file: filename, ...preview }, null, 2));
+  } else {
+    console.log(preview.contents);
+    if (preview.truncated) {
+      console.log(`
+[truncated at ${preview.maxBytes} bytes; artifact is ${preview.sizeBytes} bytes]`);
     }
+  }
+  return {
+    ok: true,
+    group: "inspect",
+    command: "artifact",
+    details: { taskId, file: filename, ...preview }
+  };
+}
+async function executeRunLogs(context, args, deps) {
+  const runResult = takeOption(args, "--run");
+  requireNoExtraArgs(runResult.rest, "rig inspect run-logs --run <id>");
+  const runId = requireRunId(runResult.value, "rig inspect run-logs --run <id>");
+  const projection = await (deps.getRunProjection ?? getRunProjection)(context.projectRoot, runId);
+  if (!projection) {
+    throw new CliError(`Run not found: ${runId}`, 2, { hint: "Run `rig inspect runs` to see runs." });
+  }
+  const sessionLines = (deps.readSessionRunEntries ?? readSessionRunEntries)(projection.sessionPath).map(logLineFromSessionEntry).filter((line) => line !== null);
+  const lines = sessionLines.length > 0 ? sessionLines : logLinesFromProjection(projection.projection);
+  if (context.outputMode === "json") {
+    console.log(JSON.stringify({ runId: projection.runId, taskId: projection.taskId, lines }, null, 2));
+  } else if (lines.length === 0) {
+    console.log(`No log entries found for run ${projection.runId}.`);
+  } else {
+    for (const line of lines)
+      console.log(line);
+  }
+  return { ok: true, group: "inspect", command: "run-logs", details: { runId: projection.runId, taskId: projection.taskId, count: lines.length } };
+}
+async function executeRuns(context, args, deps) {
+  requireNoExtraArgs(args, "rig inspect runs");
+  const runs = await (deps.listRunProjections ?? listRunProjections)(context.projectRoot);
+  const formatted = runs.map(toRunLike);
+  if (context.outputMode === "text") {
+    printFormattedOutput(formatRunList(formatted));
+  }
+  return { ok: true, group: "inspect", command: "runs", details: { runs: formatted } };
+}
+async function executeArtifacts(context, args, deps) {
+  const taskResult = takeOption(args, "--task");
+  requireNoExtraArgs(taskResult.rest, "rig inspect artifacts --task <id>");
+  const taskId = requireTask(taskResult.value, "rig inspect artifacts --task <id>");
+  await (deps.taskArtifacts ?? taskArtifacts)(context.projectRoot, taskId);
+  return { ok: true, group: "inspect", command: "artifacts", details: { taskId } };
+}
+async function executeDiff(context, args, deps) {
+  const taskResult = takeOption(args, "--task");
+  requireNoExtraArgs(taskResult.rest, "rig inspect diff --task <id>");
+  const taskId = requireTask(taskResult.value, "rig inspect diff --task <id>");
+  const files = (deps.changedFilesForTask ?? changedFilesForTask)(context.projectRoot, taskId, true);
+  if (context.outputMode === "json") {
+    console.log(JSON.stringify({ taskId, files }, null, 2));
+  } else {
+    for (const file of files)
+      console.log(file);
+  }
+  return { ok: true, group: "inspect", command: "diff", details: { taskId, files } };
+}
+async function executeGraph(context, args, deps) {
+  const taskResult = takeOption(args, "--task");
+  requireNoExtraArgs(taskResult.rest, "rig inspect graph [--task <id>]");
+  await (deps.taskDeps ?? taskDeps)(context.projectRoot, taskResult.value);
+  return { ok: true, group: "inspect", command: "graph", details: { taskId: taskResult.value ?? null } };
+}
+function summarizeProjectionFailures(run) {
+  const failures = [];
+  const projection = run.projection;
+  if (run.status === "failed" || projection.status === "failed") {
+    failures.push(`${run.runId}: run status failed`);
+  }
+  for (const phase of projection.closeoutPhases) {
+    if (phase.outcome === "failed") {
+      failures.push(`${run.runId}: closeout ${phase.phase} failed${phase.detail ? ` \u2014 ${phase.detail}` : ""}`);
+    }
+  }
+  for (const anomaly of projection.anomalies) {
+    failures.push(`${run.runId}: anomaly ${anomaly.kind}${anomaly.detail ? ` \u2014 ${anomaly.detail}` : ""}`);
+  }
+  return failures;
+}
+async function runsForTask(context, taskId, deps) {
+  const listRuns = deps.listRunProjections ?? listRunProjections;
+  try {
+    const runs = await listRuns(context.projectRoot);
+    const filtered = runs.filter((run2) => run2.taskId === taskId || run2.runId === taskId);
+    if (filtered.length > 0)
+      return filtered;
+  } catch {}
+  const run = await (deps.getRunProjection ?? getRunProjection)(context.projectRoot, taskId);
+  return run ? [run] : [];
+}
+async function executeFailures(context, args, deps) {
+  const taskResult = takeOption(args, "--task");
+  requireNoExtraArgs(taskResult.rest, "rig inspect failures --task <id>");
+  const taskId = requireTask(taskResult.value, "rig inspect failures --task <id>");
+  const runs = await runsForTask(context, taskId, deps);
+  const failures = runs.flatMap(summarizeProjectionFailures);
+  if (context.outputMode === "json") {
+    console.log(JSON.stringify({ taskId, failures }, null, 2));
+  } else if (failures.length === 0) {
+    console.log(`No failures recorded for task ${taskId}.`);
+  } else {
+    for (const failure of failures)
+      console.log(failure);
+  }
+  return { ok: true, group: "inspect", command: "failures", details: { taskId, count: failures.length } };
+}
+function executeAudit(args) {
+  requireNoExtraArgs(args, "rig inspect audit");
+  throw new CliError("rig inspect audit cannot read the controlled-command audit trail yet: current code only writes audit JSONL and exposes no supported reader API.", 2, { hint: "Use the OMP session history for operator audit context until a controlled-bash audit reader is added." });
+}
+async function executeInspect(context, args, deps = {}) {
+  const [command = "failures", ...rest] = args;
+  if (command === "--help" || command === "-h" || command === "help") {
+    printInspectHelp();
+    return { ok: true, group: "inspect", command: "help" };
+  }
+  switch (command) {
+    case "logs":
+      return executeLogs(context, rest, deps);
+    case "artifact":
+      return executeArtifact(context, rest, deps);
+    case "artifacts":
+      return executeArtifacts(context, rest, deps);
+    case "run-logs":
+      return executeRunLogs(context, rest, deps);
+    case "runs":
+      return executeRuns(context, rest, deps);
+    case "diff":
+      return executeDiff(context, rest, deps);
+    case "graph":
+      return executeGraph(context, rest, deps);
+    case "failures":
+      return executeFailures(context, rest, deps);
+    case "audit":
+      return executeAudit(rest);
     default:
-      throw new CliError2(`Unknown inspect command: ${command}`);
+      throw new CliError(`Unknown inspect command: ${command}`, 1, { hint: "Run `rig inspect --help` to list inspect commands." });
   }
 }
 export {