@h-rig/cli 0.0.6-alpha.93 → 0.0.6-alpha.95

package/dist/src/commands/_pi-install.js

@@ -1,167 +0,0 @@
-// @bun
-// packages/cli/src/commands/_pi-install.ts
-import { existsSync } from "fs";
-import { homedir } from "os";
-import { resolve } from "path";
-var PI_RIG_PACKAGE_NAME = "@h-rig/pi-rig";
-async function defaultCommandRunner(command, options = {}) {
-  const proc = Bun.spawn(command, { cwd: options.cwd, stdout: "pipe", stderr: "pipe" });
-  const [stdout, stderr, exitCode] = await Promise.all([
-    new Response(proc.stdout).text(),
-    new Response(proc.stderr).text(),
-    proc.exited
-  ]);
-  return { exitCode, stdout, stderr };
-}
-function resolvePiRigExtensionPath(homeDir) {
-  return resolve(homeDir, ".pi", "agent", "extensions", "pi-rig");
-}
-function resolvePiRigPackageSource(projectRoot, exists = existsSync) {
-  const localPackage = resolve(projectRoot, "packages", "pi-rig");
-  if (exists(resolve(localPackage, "package.json")))
-    return localPackage;
-  return `npm:${PI_RIG_PACKAGE_NAME}`;
-}
-function resolvePiHomeDir(inputHomeDir) {
-  return inputHomeDir ?? process.env.RIG_PI_HOME_DIR?.trim() ?? homedir();
-}
-function piListContainsPiRig(output) {
-  return output.split(/\r?\n/).some((line) => {
-    const normalized = line.trim();
-    return normalized.includes(PI_RIG_PACKAGE_NAME) || /(?:^|[\\/])packages[\\/]pi-rig(?:$|\s)/.test(normalized);
-  });
-}
-async function safeRun(runner, command, options) {
-  try {
-    return await runner(command, options);
-  } catch (error) {
-    return { exitCode: 1, stdout: "", stderr: error instanceof Error ? error.message : String(error) };
-  }
-}
-function splitInstallCommand(value) {
-  return value.match(/(?:[^\s"']+|"[^"]*"|'[^']*')+/g)?.map((part) => part.replace(/^['"]|['"]$/g, "")) ?? [];
-}
-async function ensurePiBinaryAvailable(input) {
-  const current = await safeRun(input.runner, ["pi", "--version"]);
-  if (current.exitCode === 0) {
-    const updateCommand = process.env.RIG_PI_UPDATE_COMMAND?.trim();
-    if (updateCommand) {
-      const parts2 = splitInstallCommand(updateCommand);
-      if (parts2.length > 0)
-        await safeRun(input.runner, parts2, input.projectRoot ? { cwd: input.projectRoot } : undefined);
-    }
-    return { ok: true, detail: (current.stdout || current.stderr).trim() || undefined };
-  }
-  const installCommand = process.env.RIG_PI_INSTALL_COMMAND?.trim();
-  if (!installCommand) {
-    return {
-      ok: false,
-      error: `${(current.stderr || current.stdout).trim() || "pi --version failed"}. Set RIG_PI_INSTALL_COMMAND to a supported installer or install Pi manually.`
-    };
-  }
-  const parts = splitInstallCommand(installCommand);
-  if (parts.length === 0) {
-    return { ok: false, error: (current.stderr || current.stdout).trim() || "pi --version failed" };
-  }
-  const install = await safeRun(input.runner, parts, input.projectRoot ? { cwd: input.projectRoot } : undefined);
-  if (install.exitCode !== 0) {
-    return { ok: false, installedOrUpdated: true, error: (install.stderr || install.stdout).trim() || `Pi install command failed (${install.exitCode})` };
-  }
-  const next = await safeRun(input.runner, ["pi", "--version"]);
-  return {
-    ok: next.exitCode === 0,
-    installedOrUpdated: true,
-    detail: (next.stdout || next.stderr).trim() || undefined,
-    ...next.exitCode === 0 ? {} : { error: (next.stderr || next.stdout).trim() || "pi --version failed after install" }
-  };
-}
-async function checkPiRigInstall(input = {}) {
-  const home = resolvePiHomeDir(input.homeDir);
-  const extensionPath = resolvePiRigExtensionPath(home);
-  if (process.env.RIG_TEST_FAKE_PI_INSTALL === "1") {
-    return {
-      extensionPath,
-      pi: { ok: true, label: "pi", detail: "fake-pi" },
-      piRig: { ok: true, label: "pi-rig global extension", detail: extensionPath }
-    };
-  }
-  const runner = input.commandRunner ?? defaultCommandRunner;
-  const piResult = await safeRun(runner, ["pi", "--version"]);
-  const piListResult = piResult.exitCode === 0 ? await safeRun(runner, ["pi", "list"]) : { exitCode: 1, stdout: "", stderr: "" };
-  const hasPiRig = piListResult.exitCode === 0 && piListContainsPiRig(`${piListResult.stdout}
-${piListResult.stderr}`);
-  const hasLegacyBridgeScaffold = !hasPiRig && (input.exists ?? existsSync)(extensionPath);
-  return {
-    extensionPath,
-    pi: {
-      ok: piResult.exitCode === 0,
-      label: "pi",
-      detail: (piResult.stdout || piResult.stderr).trim() || undefined,
-      hint: piResult.exitCode === 0 ? undefined : "Install Pi/OMP manually or set RIG_PI_INSTALL_COMMAND before verifying with bare `rig` / Cockpit \u2192 Doctor."
-    },
-    piRig: {
-      ok: hasPiRig,
-      label: "pi-rig global extension",
-      detail: hasPiRig ? piListResult.stdout.trim() || PI_RIG_PACKAGE_NAME : hasLegacyBridgeScaffold ? `legacy bridge scaffold at ${extensionPath}` : undefined,
-      hint: hasPiRig ? undefined : `Install the Rig OMP extension with \`pi install ${PI_RIG_PACKAGE_NAME}\`, then verify with bare \`rig\` / Cockpit \u2192 Doctor.`
-    }
-  };
-}
-async function ensurePiRigInstalled(input) {
-  const home = resolvePiHomeDir(input.homeDir);
-  if (process.env.RIG_TEST_FAKE_PI_INSTALL === "1") {
-    const status = await checkPiRigInstall({ homeDir: home, commandRunner: input.commandRunner });
-    return { ...status, installedPath: status.extensionPath };
-  }
-  const runner = input.commandRunner ?? defaultCommandRunner;
-  const piAvailable = await ensurePiBinaryAvailable({ runner, projectRoot: input.projectRoot });
-  if (!piAvailable.ok) {
-    throw new Error(`Pi install/update failed: ${piAvailable.error ?? "pi unavailable"}`);
-  }
-  const packageSource = resolvePiRigPackageSource(input.projectRoot);
-  const install = await runner(["pi", "install", packageSource], { cwd: input.projectRoot });
-  if (install.exitCode !== 0) {
-    throw new Error(`pi-rig install failed: ${(install.stderr || install.stdout).trim() || `exit ${install.exitCode}`}`);
-  }
-  const next = await checkPiRigInstall({ homeDir: home, commandRunner: runner });
-  return { ...next, installedPath: packageSource };
-}
-async function ensureRemotePiRigInstalled(input) {
-  const payload = await input.requestJson("/api/pi-rig/install", {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify({ package: PI_RIG_PACKAGE_NAME, scope: "global" })
-  });
-  const record = payload && typeof payload === "object" && !Array.isArray(payload) ? payload : {};
-  const piOk = record.piOk === true || record.ok === true;
-  const piRigOk = record.piRigOk === true || record.installed === true || record.ok === true;
-  const extensionPath = typeof record.extensionPath === "string" ? record.extensionPath : "remote:~/.pi/agent/extensions/pi-rig";
-  return {
-    remote: true,
-    extensionPath,
-    pi: {
-      ok: piOk,
-      label: "pi",
-      detail: typeof record.piVersion === "string" ? record.piVersion : undefined,
-      hint: piOk ? undefined : "Install/update Pi on the selected remote control host, then verify with bare `rig` / Cockpit \u2192 Doctor."
-    },
-    piRig: {
-      ok: piRigOk,
-      label: "pi-rig global extension",
-      detail: extensionPath,
-      hint: piRigOk ? undefined : `Install/enable the Rig OMP extension (${PI_RIG_PACKAGE_NAME}) on the selected remote control host, then verify with bare \`rig\` / Cockpit \u2192 Doctor.`
-    }
-  };
-}
-async function buildPiSetupChecks(input = {}) {
-  const status = await checkPiRigInstall(input);
-  return [status.pi, status.piRig];
-}
-export {
-  resolvePiRigPackageSource,
-  resolvePiRigExtensionPath,
-  ensureRemotePiRigInstalled,
-  ensurePiRigInstalled,
-  checkPiRigInstall,
-  buildPiSetupChecks
-};

package/dist/src/commands/_policy.d.ts

@@ -1,8 +0,0 @@
-import { type RunnerContext } from "../runner";
-export type PolicyMode = "off" | "observe" | "enforce";
-export declare function resolveEffectivePolicyMode(context: RunnerContext): PolicyMode;
-export declare function appendControlledBashAudit(context: RunnerContext, mode: PolicyMode, command: string, args: string[], matchedRuleIds: string[], action?: "warn" | "blocked"): void;
-export declare function enforceNativeCommandPolicy(context: RunnerContext, args: string[], options: {
-    commandPrefix: string;
-    writeAuditLog: boolean;
-}): Promise<void>;

package/dist/src/commands/_policy.js

@@ -1,127 +0,0 @@
-// @bun
-// packages/cli/src/commands/_policy.ts
-import { appendFileSync, existsSync, mkdirSync, readFileSync } from "fs";
-import { resolve as resolve2 } from "path";
-
-// packages/cli/src/runner.ts
-import { EventBus } from "@rig/runtime/control-plane/runtime/events";
-import { CliError as RuntimeCliError } from "@rig/runtime/control-plane/errors";
-import { evaluate, loadPolicy, resolveAction } from "@rig/runtime/control-plane/runtime/guard";
-import { buildBinary } from "@rig/runtime/control-plane/runtime/isolation";
-
-class CliError extends RuntimeCliError {
-  hint;
-  constructor(message, exitCode = 1, options = {}) {
-    super(message, exitCode);
-    if (options.hint?.trim()) {
-      this.hint = options.hint.trim();
-    }
-  }
-}
-function formatCommand(parts) {
-  return parts.map((part) => /[^a-zA-Z0-9_./:-]/.test(part) ? JSON.stringify(part) : part).join(" ");
-}
-
-// packages/cli/src/commands/_paths.ts
-import { resolve } from "path";
-import { resolveMonorepoRoot } from "@rig/runtime/layout";
-function resolveControlPlaneHostStateRoot(projectRoot) {
-  return resolve(projectRoot, ".rig");
-}
-function resolveControlPlaneHostLogsDir(projectRoot) {
-  return resolve(resolveControlPlaneHostStateRoot(projectRoot), "logs");
-}
-function resolveControlPlaneDefinitionRoot(projectRoot) {
-  return resolve(projectRoot, "rig");
-}
-
-// packages/cli/src/commands/_policy.ts
-function loadPolicyFile(projectRoot) {
-  const policyPath = resolve2(resolveControlPlaneDefinitionRoot(projectRoot), "policy", "policy.json");
-  if (!existsSync(policyPath)) {
-    return { mode: "observe", rules: [] };
-  }
-  try {
-    const parsed = JSON.parse(readFileSync(policyPath, "utf8"));
-    const mode = parsed.mode === "off" || parsed.mode === "observe" || parsed.mode === "enforce" ? parsed.mode : "observe";
-    const rules = Array.isArray(parsed.rules) ? parsed.rules.filter((value) => Boolean(value && typeof value === "object" && !Array.isArray(value))).map((value, index) => ({
-      id: typeof value.id === "string" && value.id.trim() ? value.id.trim() : `rule-${index + 1}`,
-      reason: typeof value.reason === "string" && value.reason.trim() ? value.reason.trim() : undefined,
-      match: typeof value.match === "string" && value.match.trim() ? value.match.trim() : undefined,
-      command: typeof value.command === "string" && value.command.trim() ? value.command.trim() : undefined
-    })) : [];
-    return { mode, rules };
-  } catch {
-    return { mode: "observe", rules: [] };
-  }
-}
-function matchingRules(command, rules) {
-  return rules.filter((rule) => {
-    const rawPattern = rule.command ?? rule.match;
-    if (!rawPattern)
-      return false;
-    try {
-      return new RegExp(rawPattern, "i").test(command);
-    } catch {
-      return command.includes(rawPattern);
-    }
-  });
-}
-function resolveEffectivePolicyMode(context) {
-  const envMode = process.env.RIG_BASH_MODE;
-  if (envMode === "off" || envMode === "observe" || envMode === "enforce") {
-    return envMode;
-  }
-  return context.policyMode ?? loadPolicyFile(context.projectRoot).mode;
-}
-function appendControlledBashAudit(context, mode, command, args, matchedRuleIds, action) {
-  if (mode === "off") {
-    return;
-  }
-  const logsDir = resolveControlPlaneHostLogsDir(context.projectRoot);
-  const logFile = resolve2(logsDir, "controlled-bash.jsonl");
-  mkdirSync(logsDir, { recursive: true });
-  const payload = {
-    timestamp: new Date().toISOString(),
-    mode,
-    cwd: process.cwd(),
-    pid: process.pid,
-    ppid: process.ppid,
-    argv: args,
-    command,
-    matchedRuleIds
-  };
-  if (action) {
-    payload.action = action;
-  }
-  appendFileSync(logFile, `${JSON.stringify(payload)}
-`, "utf-8");
-}
-async function enforceNativeCommandPolicy(context, args, options) {
-  const mode = resolveEffectivePolicyMode(context);
-  const command = formatCommand([options.commandPrefix, ...args]);
-  const rules = matchingRules(command, loadPolicyFile(context.projectRoot).rules);
-  const matchedRuleIds = rules.map((rule) => rule.id);
-  const action = rules.length === 0 ? "allow" : mode === "enforce" ? "block" : "warn";
-  await context.emitEvent("policy.decision", {
-    target: "command",
-    command,
-    mode,
-    allowed: action !== "block",
-    matchedRuleIds,
-    reasons: rules.map((rule) => rule.reason).filter(Boolean)
-  });
-  if (options.writeAuditLog) {
-    appendControlledBashAudit(context, mode, command, args, matchedRuleIds, action === "block" ? "blocked" : action === "warn" ? "warn" : undefined);
-  }
-  if (action === "block") {
-    throw new CliError(`Policy blocked command: ${command}`, 126, {
-      hint: "Review rig/policy/policy.json, or re-run with `--policy-mode observe` to log instead of block."
-    });
-  }
-}
-export {
-  resolveEffectivePolicyMode,
-  enforceNativeCommandPolicy,
-  appendControlledBashAudit
-};

package/dist/src/commands/_probes.d.ts

@@ -1 +0,0 @@
-export declare function runQuietBinaryProbe(binaryPath: string, args: string[], cwd: string): Promise<boolean>;

package/dist/src/commands/_probes.js

@@ -1,13 +0,0 @@
-// @bun
-// packages/cli/src/commands/_probes.ts
-async function runQuietBinaryProbe(binaryPath, args, cwd) {
-  try {
-    const run = await Bun.$`${binaryPath} ${args}`.cwd(cwd).quiet().nothrow();
-    return run.exitCode === 0;
-  } catch {
-    return false;
-  }
-}
-export {
-  runQuietBinaryProbe
-};

package/dist/src/commands/_run-bridge.d.ts

@@ -1,114 +0,0 @@
-import type { ChildProcess, SpawnOptions } from "node:child_process";
-import { type RegisteredTaskSource } from "@rig/contracts";
-import { type CollabRegistryFilter, type LiveCollabProjection } from "@oh-my-pi/pi-coding-agent/collab/api";
-export type RigExtensionTask = {
-    readonly id: string;
-    readonly title?: string | null;
-    readonly status?: string | null;
-    readonly source?: string | null;
-    readonly url?: string | null;
-    readonly body?: string | null;
-};
-export type RigExtensionServerState = {
-    readonly alias: string;
-    readonly kind: "local" | "remote";
-    readonly baseUrl?: string | null;
-    readonly projectRoot?: string | null;
-    readonly status?: string | null;
-    readonly taskSource?: string | null;
-};
-export type RigExtensionAttachResult = {
-    readonly sessionPath?: string | null;
-    readonly joinLink?: string | null;
-    readonly collabSessionId?: string | null;
-};
-export type RunRunProcessInput = {
-    readonly projectRoot?: string;
-    readonly taskId: string;
-    readonly runId?: string;
-    readonly title?: string | null;
-    readonly model?: string | null;
-    readonly prompt?: string | null;
-    readonly rigRunBin?: string;
-    readonly writeStdout?: (text: string) => void;
-};
-export type RunRunProcessResult = {
-    readonly runId: string;
-    readonly pid: number;
-    readonly sessionName: string;
-    readonly runtime: unknown;
-};
-export type RunRunProcess = (input: RunRunProcessInput) => Promise<RunRunProcessResult>;
-type SpawnFunction = (command: string, args: readonly string[], options: SpawnOptions) => ChildProcess;
-type ListTasksDeps = {
-    readonly loadTaskSource?: (projectRoot: string) => Promise<{
-        readonly kind: string;
-        readonly source: RegisteredTaskSource;
-    }>;
-};
-type SpawnRunProcessDeps = {
-    readonly runRunProcess?: RunRunProcess;
-    readonly spawn?: SpawnFunction;
-    readonly uuid?: () => string;
-    readonly resolveRigRunBin?: () => string;
-    readonly env?: NodeJS.ProcessEnv;
-};
-type AttachViaRelayDeps = {
-    readonly listActiveCollabSessions?: (filter: CollabRegistryFilter) => Promise<readonly LiveCollabProjection[]>;
-    readonly sleep?: (ms: number) => Promise<void>;
-    readonly now?: () => number;
-};
-export type SpawnRunProcessInput = {
-    readonly projectRoot: string;
-    readonly taskId: string;
-    readonly title?: string | null;
-};
-export type AttachViaRelayInput = {
-    readonly runId: string;
-    readonly taskId?: string | null;
-    readonly identityFilter: CollabRegistryFilter;
-    readonly timeoutMs?: number;
-    readonly pollIntervalMs?: number;
-};
-export declare function listTasksFromSource(projectRoot: string, deps?: ListTasksDeps): Promise<readonly RigExtensionTask[]>;
-export declare function getTaskFromSource(projectRoot: string, taskId: string, deps?: ListTasksDeps): Promise<RigExtensionTask | null>;
-export declare function readSelectedTarget(projectRoot: string, env?: NodeJS.ProcessEnv): Promise<RigExtensionServerState>;
-export declare function resolveRigRunBin(): string;
-export declare function spawnRunProcess(input: SpawnRunProcessInput, deps?: SpawnRunProcessDeps): Promise<{
-    readonly runId: string;
-}>;
-export type RunControl = {
-    readonly kind: "steer";
-    readonly message: string;
-} | {
-    readonly kind: "stop";
-    readonly reason: string;
-};
-export interface DeliverRemoteControlDeps {
-    readonly env?: NodeJS.ProcessEnv;
-    readonly spawn?: SpawnFunction;
-}
-interface RemoteControlContext {
-    readonly checkout?: string | null;
-    readonly registryBaseUrl?: string | null;
-    readonly namespaceKey?: string | null;
-}
-/**
- * Build the remote shell command that re-runs the operator's control VERB on the
- * remote host. The run is LOCAL there (its session journal lives on the remote
- * disk), so `rig run steer/stop <runId>` resolves it locally and the remote
- * worker's own localRunChanges consumer applies it — fully symmetric with local
- * placement. We SSH the verb (not a pre-built sentinel) so the remote rebuilds via
- * its canonical stop path. Identity is passed inline (SSH does not forward local
- * env); the registry HMAC secret is read from the remote env, never sent over argv.
- */
-export declare function buildRemoteControlCommand(runId: string, control: RunControl, ctx: RemoteControlContext): string;
-/**
- * Deliver a steer/stop control to a REMOTE run by running the verb on the remote
- * host over SSH (login shell, identical to spawnRunProcess). Awaits the remote
- * exit code so the operator gets an honest success/failure — not fire-and-forget.
- */
-export declare function deliverRemoteRunControl(projectRoot: string, runId: string, control: RunControl, deps?: DeliverRemoteControlDeps): Promise<void>;
-export declare function listActiveRunCollab(filter: CollabRegistryFilter): Promise<readonly LiveCollabProjection[]>;
-export declare function attachViaRelay(input: AttachViaRelayInput, deps?: AttachViaRelayDeps): Promise<RigExtensionAttachResult | null>;
-export {};