@openrig/cli 0.1.12 → 0.3.0

package/daemon/dist/domain/agent-images/evidence-guard.js

@@ -0,0 +1,185 @@
+// Fork Primitive + Starter Agent Images v0 (PL-016) — evidence-
+// preservation guard for `rig agent-image prune` / DELETE
+// /api/agent-images/library/:id.
+//
+// PRD § Item 6 — CATASTROPHIC BOUNCE if dropped. An image is protected
+// from deletion if ANY:
+//
+//   - Pinned (operator placed `.pinned` sentinel via `rig agent-image pin`)
+//   - Referenced by an active agent.yaml (session_source: mode:
+//     agent_image, ref.value: <name>) — scanned across discovery roots
+//     for spec library files
+//   - Referenced by a rig spec in the spec library (members[].session_source)
+//   - Lineage descendant of another protected image (transitive
+//     protection up the chain)
+//
+// The guard fails CLOSED. Operator may pass --force to override.
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { parse as parseYaml } from "yaml";
+/**
+ * Compute protection status for every image. The result is parallel to
+ * the input array order; the protected image set is what `prune` MUST
+ * skip unless --force is supplied.
+ */
+export function evaluateProtection(opts) {
+    const referencedNames = scanSpecRootsForReferences(opts.specRoots);
+    // Pass 1: compute direct protection (pinned + referenced).
+    const statuses = new Map();
+    const protectedNameSet = new Set();
+    for (const img of opts.images) {
+        const refs = referencedNames.get(img.name) ?? [];
+        const reasons = [];
+        if (img.pinned)
+            reasons.push("pinned");
+        // Distinguish agent.yaml-shaped vs rig.yaml-shaped references when
+        // both surface; but the scanner returns paths, and the path-based
+        // tag is stored alongside. Simplification at v0: any file whose
+        // basename is `agent.yaml` is agent-spec; otherwise rig-spec.
+        const seenReason = new Set();
+        for (const ref of refs) {
+            const reason = ref.endsWith("/agent.yaml")
+                ? "referenced_by_agent_spec"
+                : "referenced_by_rig_spec";
+            if (!seenReason.has(reason)) {
+                reasons.push(reason);
+                seenReason.add(reason);
+            }
+        }
+        const status = {
+            imageId: img.id,
+            imageName: img.name,
+            imageVersion: img.version,
+            protected: reasons.length > 0,
+            reasons,
+            references: refs,
+        };
+        statuses.set(img.name, status);
+        if (status.protected)
+            protectedNameSet.add(img.name);
+    }
+    // Pass 2: transitive lineage protection. An image whose lineage
+    // includes a protected image becomes protected too. Iterate to a
+    // fixed point so multi-hop chains converge.
+    let changed = true;
+    while (changed) {
+        changed = false;
+        for (const img of opts.images) {
+            const status = statuses.get(img.name);
+            if (status.protected)
+                continue;
+            // img's lineage lists ANCESTORS. We protect a DESCENDANT of a
+            // protected image — meaning if any ancestor of `img` is
+            // protected, `img` itself becomes protected by transit.
+            for (const ancestor of img.lineage) {
+                if (protectedNameSet.has(ancestor)) {
+                    status.protected = true;
+                    status.reasons.push("lineage_descendant_of_protected");
+                    status.references.push(`lineage-of:${ancestor}`);
+                    protectedNameSet.add(img.name);
+                    changed = true;
+                    break;
+                }
+            }
+        }
+    }
+    return opts.images.map((img) => statuses.get(img.name));
+}
+/** Walk spec-library roots for YAML files and collect file paths that
+ *  reference any agent_image by name. The match is conservative: any
+ *  YAML that contains a `mode: agent_image` directive WITH a
+ *  `value: <name>` field is treated as a reference. False positives are
+ *  acceptable (over-protection); false negatives would cause
+ *  catastrophic data loss. */
+function scanSpecRootsForReferences(roots) {
+    const out = new Map();
+    for (const root of roots) {
+        if (!existsSync(root))
+            continue;
+        walkYaml(root, (absPath) => {
+            let raw;
+            try {
+                raw = readFileSync(absPath, "utf-8");
+            }
+            catch {
+                return;
+            }
+            if (!raw.includes("agent_image"))
+                return;
+            let parsed;
+            try {
+                parsed = parseYaml(raw);
+            }
+            catch {
+                return;
+            }
+            const refs = collectImageRefs(parsed);
+            for (const name of refs) {
+                const existing = out.get(name) ?? [];
+                existing.push(absPath);
+                out.set(name, existing);
+            }
+        });
+    }
+    return out;
+}
+function walkYaml(root, visit) {
+    const stack = [root];
+    while (stack.length > 0) {
+        const current = stack.pop();
+        let entries;
+        try {
+            entries = readdirSync(current, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            const abs = join(current, entry.name);
+            if (entry.isDirectory()) {
+                stack.push(abs);
+            }
+            else if (entry.isFile() && (entry.name.endsWith(".yaml") || entry.name.endsWith(".yml"))) {
+                try {
+                    if (statSync(abs).size > 5_000_000)
+                        continue; // skip suspiciously large YAML files
+                }
+                catch {
+                    continue;
+                }
+                visit(abs);
+            }
+        }
+    }
+}
+/** Recursively walk a parsed YAML tree and collect the `value` of any
+ *  `session_source: { mode: agent_image, ref: { kind: image_name, value: <name> } }`. */
+function collectImageRefs(node, acc = new Set()) {
+    if (!node || typeof node !== "object")
+        return acc;
+    if (Array.isArray(node)) {
+        for (const item of node)
+            collectImageRefs(item, acc);
+        return acc;
+    }
+    const obj = node;
+    // Match shape: session_source: { mode: agent_image, ref: { value: <name> } }
+    const ss = obj["session_source"] ?? obj["sessionSource"];
+    if (ss && typeof ss === "object" && !Array.isArray(ss)) {
+        const ssObj = ss;
+        if (ssObj["mode"] === "agent_image") {
+            const ref = ssObj["ref"];
+            if (ref && typeof ref === "object" && !Array.isArray(ref)) {
+                const value = ref["value"];
+                if (typeof value === "string" && value.length > 0)
+                    acc.add(value);
+            }
+        }
+    }
+    // Recurse into all values regardless — a rig.yaml has session_source
+    // nested inside members[].
+    for (const v of Object.values(obj))
+        collectImageRefs(v, acc);
+    return acc;
+}
+//# sourceMappingURL=evidence-guard.js.map

package/daemon/dist/domain/agent-images/evidence-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-guard.js","sourceRoot":"","sources":["../../../src/domain/agent-images/evidence-guard.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,0DAA0D;AAC1D,iCAAiC;AACjC,EAAE;AACF,uEAAuE;AACvE,wBAAwB;AACxB,EAAE;AACF,4EAA4E;AAC5E,gEAAgE;AAChE,uEAAuE;AACvE,6BAA6B;AAC7B,8EAA8E;AAC9E,gEAAgE;AAChE,+BAA+B;AAC/B,EAAE;AACF,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AA4B1C;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnE,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,mEAAmE;QACnE,kEAAkE;QAClE,gEAAgE;QAChE,8DAA8D;QAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAqB,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC1D,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,wBAAwB,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrB,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAA0B;YACpC,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,SAAS,EAAE,GAAG,CAAC,IAAI;YACnB,YAAY,EAAE,GAAG,CAAC,OAAO;YACzB,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC7B,OAAO;YACP,UAAU,EAAE,IAAI;SACjB,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,SAAS;YAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,gEAAgE;IAChE,iEAAiE;IACjE,4CAA4C;IAC5C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;YACvC,IAAI,MAAM,CAAC,SAAS;gBAAE,SAAS;YAC/B,8DAA8D;YAC9D,wDAAwD;YACxD,wDAAwD;YACxD,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACnC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;oBACxB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;oBACvD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;oBACjD,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC/B,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;8BAK8B;AAC9B,SAAS,0BAA0B,CAAC,KAAwB;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;YACzB,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBAAC,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAAE,OAAO;YACzC,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;YAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACtC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAgC;IAC9D,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAC7B,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC3F,IAAI,CAAC;oBACH,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,SAAS;wBAAE,SAAS,CAAC,qCAAqC;gBACrF,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;yFACyF;AACzF,SAAS,gBAAgB,CAAC,IAAa,EAAE,MAAmB,IAAI,GAAG,EAAE;IACnE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,6EAA6E;IAC7E,MAAM,EAAE,GAAG,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACzD,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,EAA6B,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAI,GAA+B,CAAC,OAAO,CAAC,CAAC;gBACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,2BAA2B;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,gBAAgB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/daemon/dist/domain/agent-images/manifest-parser.d.ts

@@ -0,0 +1,3 @@
+import { type AgentImageManifest } from "./agent-image-types.js";
+export declare function parseAgentImageManifest(rawYaml: string, sourcePath: string): AgentImageManifest;
+//# sourceMappingURL=manifest-parser.d.ts.map

package/daemon/dist/domain/agent-images/manifest-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-parser.d.ts","sourceRoot":"","sources":["../../../src/domain/agent-images/manifest-parser.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,kBAAkB,EAGxB,MAAM,wBAAwB,CAAC;AAKhC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAoK/F"}

package/daemon/dist/domain/agent-images/manifest-parser.js

@@ -0,0 +1,114 @@
+// Fork Primitive + Starter Agent Images v0 (PL-016) — manifest parser.
+//
+// Parses ~/.openrig/agent-images/<name>/manifest.yaml into a typed
+// AgentImageManifest. Pure (no fs touches in the parser; caller hands
+// in raw YAML). Validation guards: required field checks, runtime
+// allow-list, path-traversal rejection on supplementary files.
+import { parse as parseYaml } from "yaml";
+import { AgentImageError, } from "./agent-image-types.js";
+const ALLOWED_RUNTIMES = new Set(["claude-code", "codex"]);
+const ALLOWED_FILE_SUFFIXES = [".md", ".markdown", ".yaml", ".yml", ".txt", ".json"];
+export function parseAgentImageManifest(rawYaml, sourcePath) {
+    let parsed;
+    try {
+        parsed = parseYaml(rawYaml);
+    }
+    catch (err) {
+        throw new AgentImageError("manifest_parse_error", `manifest at ${sourcePath} is not valid YAML: ${err.message}`, { sourcePath });
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} must be a YAML object at the root`, { sourcePath });
+    }
+    const obj = parsed;
+    const name = obj["name"];
+    if (typeof name !== "string" || name.length === 0) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'name'`, { sourcePath });
+    }
+    const versionRaw = obj["version"];
+    if (versionRaw === undefined || versionRaw === null) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'version'`, { sourcePath });
+    }
+    const version = String(versionRaw);
+    const runtime = obj["runtime"];
+    if (typeof runtime !== "string" || !ALLOWED_RUNTIMES.has(runtime)) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} has invalid runtime '${runtime}'; allowed: ${[...ALLOWED_RUNTIMES].join(", ")}`, { sourcePath, runtime });
+    }
+    // Source seat / session id / resume token are required on a real
+    // image. The PRD's v0 manifest schema reads these as load-bearing —
+    // an image without a resume token can't be consumed.
+    const sourceSeatRaw = obj["source_seat"] ?? obj["sourceSeat"];
+    if (typeof sourceSeatRaw !== "string" || sourceSeatRaw.length === 0) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'source_seat'`, { sourcePath });
+    }
+    const sourceSessionIdRaw = obj["source_session_id"] ?? obj["sourceSessionId"];
+    if (typeof sourceSessionIdRaw !== "string" || sourceSessionIdRaw.length === 0) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'source_session_id'`, { sourcePath });
+    }
+    const sourceResumeTokenRaw = obj["source_resume_token"] ?? obj["sourceResumeToken"];
+    if (typeof sourceResumeTokenRaw !== "string" || sourceResumeTokenRaw.length === 0) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'source_resume_token'`, { sourcePath });
+    }
+    const createdAtRaw = obj["created_at"] ?? obj["createdAt"];
+    const createdAt = typeof createdAtRaw === "string" && createdAtRaw.length > 0
+        ? createdAtRaw
+        : new Date(0).toISOString();
+    const notes = typeof obj["notes"] === "string" ? obj["notes"] : undefined;
+    // PL-016 source-cwd behavior: optional
+    // source_cwd captured at snapshot time. Manifests authored before this
+    // fix omit the field; consumers fall back to "no cwd line" rendering
+    // (back-compat).
+    const sourceCwdRaw = obj["source_cwd"] ?? obj["sourceCwd"];
+    const sourceCwd = typeof sourceCwdRaw === "string" && sourceCwdRaw.length > 0
+        ? sourceCwdRaw
+        : undefined;
+    const filesRaw = obj["files"];
+    const files = [];
+    if (Array.isArray(filesRaw)) {
+        for (let i = 0; i < filesRaw.length; i++) {
+            const f = filesRaw[i];
+            if (!f || typeof f !== "object" || Array.isArray(f)) {
+                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} has malformed entry at files[${i}] (must be object with path + role)`, { sourcePath, index: i });
+            }
+            const fr = f;
+            const path = fr["path"];
+            if (typeof path !== "string" || path.length === 0) {
+                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}] missing 'path'`, { sourcePath, index: i });
+            }
+            if (path.includes("..") || path.startsWith("/")) {
+                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}].path '${path}' must be a relative path inside the image (no '..', no leading '/')`, { sourcePath, index: i, path });
+            }
+            if (!ALLOWED_FILE_SUFFIXES.some((s) => path.endsWith(s))) {
+                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}].path '${path}' has unsupported suffix; allowed: ${ALLOWED_FILE_SUFFIXES.join(", ")}`, { sourcePath, index: i, path });
+            }
+            const role = fr["role"];
+            if (typeof role !== "string" || role.length === 0) {
+                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}] missing 'role'`, { sourcePath, index: i, path });
+            }
+            const summary = typeof fr["summary"] === "string" ? fr["summary"] : undefined;
+            files.push(summary === undefined ? { path, role } : { path, role, summary });
+        }
+    }
+    const estimatedTokensRaw = obj["estimated_tokens"] ?? obj["estimatedTokens"];
+    const estimatedTokens = typeof estimatedTokensRaw === "number" && Number.isFinite(estimatedTokensRaw)
+        ? Math.max(0, Math.floor(estimatedTokensRaw))
+        : undefined;
+    const lineageRaw = obj["lineage"];
+    const lineage = Array.isArray(lineageRaw)
+        ? lineageRaw.filter((l) => typeof l === "string" && l.length > 0)
+        : undefined;
+    return {
+        name,
+        version,
+        runtime: runtime,
+        sourceSeat: sourceSeatRaw,
+        sourceSessionId: sourceSessionIdRaw,
+        sourceResumeToken: sourceResumeTokenRaw,
+        ...(sourceCwd !== undefined ? { sourceCwd } : {}),
+        createdAt,
+        ...(notes !== undefined ? { notes } : {}),
+        files,
+        ...(estimatedTokens !== undefined ? { estimatedTokens } : {}),
+        ...(lineage !== undefined ? { lineage } : {}),
+    };
+}
+//# sourceMappingURL=manifest-parser.js.map

package/daemon/dist/domain/agent-images/manifest-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-parser.js","sourceRoot":"","sources":["../../../src/domain/agent-images/manifest-parser.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,kEAAkE;AAClE,+DAA+D;AAE/D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,eAAe,GAIhB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,gBAAgB,GAAmC,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3F,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAErF,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,UAAkB;IACzE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,eAAe,UAAU,uBAAwB,GAAa,CAAC,OAAO,EAAE,EACxE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,oCAAoC,EAC7D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,mCAAmC,EAC5D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,sCAAsC,EAC/D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEnC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAA4B,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,yBAAyB,OAAO,eAAe,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC1G,EAAE,UAAU,EAAE,OAAO,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,oEAAoE;IACpE,qDAAqD;IACrD,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAC9D,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,0CAA0C,EACnE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC9E,IAAI,OAAO,kBAAkB,KAAK,QAAQ,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,gDAAgD,EACzE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAAG,GAAG,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpF,IAAI,OAAO,oBAAoB,KAAK,QAAQ,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,kDAAkD,EAC3E,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAC3E,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAE9B,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,OAAO,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtF,uCAAuC;IACvC,uEAAuE;IACvE,qEAAqE;IACrE,iBAAiB;IACjB,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAC3E,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,iCAAiC,CAAC,qCAAqC,EAChG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,kBAAkB,EACtD,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,sEAAsE,EACzH,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,sCAAsC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC3H,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,kBAAkB,EACtD,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,OAAO,kBAAkB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACnG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACvC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9E,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,IAAI;QACJ,OAAO;QACP,OAAO,EAAE,OAA4B;QACrC,UAAU,EAAE,aAAa;QACzB,eAAe,EAAE,kBAAkB;QACnC,iBAAiB,EAAE,oBAAoB;QACvC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,SAAS;QACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,KAAK;QACL,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/agent-images/resume-token-discovery.d.ts

@@ -0,0 +1,28 @@
+import type Database from "better-sqlite3";
+export type DiscoveryRuntime = "claude-code" | "codex";
+export interface DiscoveryResult {
+    runtime: DiscoveryRuntime;
+    /** Native conversation id (Claude resume_token / Codex thread_id /
+     *  external_session_name for external-CLI Codex seats). null when
+     *  the daemon can't surface one yet. */
+    nativeId: string | null;
+    /** PL-016 source-cwd behavior: source
+     *  seat's resolved cwd from the nodes table. Captured here so
+     *  SnapshotCapturer (and any future fork route) can persist it on
+     *  the manifest without an additional query. null when the source
+     *  node has no recorded cwd. */
+    nodeCwd: string | null;
+}
+export interface DiscoveryFailure {
+    code: "session_not_found" | "runtime_unsupported";
+    message: string;
+}
+export type DiscoveryOutcome = {
+    ok: true;
+    result: DiscoveryResult;
+} | {
+    ok: false;
+    failure: DiscoveryFailure;
+};
+export declare function discoverResumeToken(db: Database.Database, sourceSession: string): DiscoveryOutcome;
+//# sourceMappingURL=resume-token-discovery.d.ts.map

package/daemon/dist/domain/agent-images/resume-token-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-token-discovery.d.ts","sourceRoot":"","sources":["../../../src/domain/agent-images/resume-token-discovery.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,OAAO,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,gBAAgB,CAAC;IAC1B;;4CAEwC;IACxC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;oCAIgC;IAChC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,mBAAmB,GAAG,qBAAqB,CAAC;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAEhH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,GAAG,gBAAgB,CAgDlG"}

package/daemon/dist/domain/agent-images/resume-token-discovery.js

@@ -0,0 +1,83 @@
+// Fork Primitive + Starter Agent Images v0 (PL-016) — runtime-specific
+// resume-token discovery.
+//
+// Given a canonical session name, returns the native conversation id
+// the runtime uses for fork/resume. Shared between SnapshotCapturer
+// (capture into image) and the /api/agent-images/fork route (one-shot
+// fork without snapshot side effect).
+//
+// Honest failure mode: returns null when no token is available rather
+// than fabricating one (architecture.md § Resume honesty).
+export function discoverResumeToken(db, sourceSession) {
+    const sessionRow = db
+        .prepare("SELECT id, node_id, resume_token FROM sessions WHERE session_name = ? ORDER BY id DESC LIMIT 1")
+        .get(sourceSession);
+    if (!sessionRow) {
+        return {
+            ok: false,
+            failure: {
+                code: "session_not_found",
+                message: `Source session '${sourceSession}' not found. Run 'rig ps --nodes' to see what's running.`,
+            },
+        };
+    }
+    const nodeRow = db
+        .prepare("SELECT runtime, cwd FROM nodes WHERE id = ?")
+        .get(sessionRow.node_id);
+    const runtime = nodeRow?.runtime ?? null;
+    const nodeCwd = nodeRow?.cwd ?? null;
+    if (runtime !== "claude-code" && runtime !== "codex") {
+        return {
+            ok: false,
+            failure: {
+                code: "runtime_unsupported",
+                message: `Source session '${sourceSession}' has runtime '${runtime ?? "(unknown)"}' which has no native fork primitive. Only claude-code and codex sessions can be forked.`,
+            },
+        };
+    }
+    if (runtime === "claude-code") {
+        const contextSessionId = discoverClaudeContextSessionId(db, sessionRow.node_id, sourceSession);
+        return {
+            ok: true,
+            result: { runtime, nativeId: contextSessionId ?? sessionRow.resume_token ?? null, nodeCwd },
+        };
+    }
+    // Codex managed tmux seats persist the captured native thread id on the
+    // sessions row after launch. Use it directly for image capture/fork.
+    if (sessionRow.resume_token) {
+        return { ok: true, result: { runtime, nativeId: sessionRow.resume_token, nodeCwd } };
+    }
+    // Codex external_cli seats may not have a sessions.resume_token; the
+    // external_session_name on the binding row holds the native conversation id.
+    const bindingRow = db
+        .prepare("SELECT external_session_name, attachment_type FROM bindings WHERE node_id = ?")
+        .get(sessionRow.node_id);
+    if (bindingRow?.attachment_type === "external_cli" && bindingRow.external_session_name) {
+        return { ok: true, result: { runtime, nativeId: bindingRow.external_session_name, nodeCwd } };
+    }
+    return { ok: true, result: { runtime, nativeId: null, nodeCwd } };
+}
+function discoverClaudeContextSessionId(db, nodeId, sourceSession) {
+    try {
+        const row = db
+            .prepare(`
+        SELECT session_id, session_name
+        FROM context_usage
+        WHERE node_id = ?
+        LIMIT 1
+      `)
+            .get(nodeId);
+        if (!row)
+            return null;
+        if (row.session_name && row.session_name !== sourceSession)
+            return null;
+        const nativeId = row.session_id?.trim();
+        return nativeId ? nativeId : null;
+    }
+    catch {
+        // Back-compat for minimal test DBs or older stores: fall back to the
+        // persisted sessions.resume_token rather than making discovery fail.
+        return null;
+    }
+}
+//# sourceMappingURL=resume-token-discovery.js.map

package/daemon/dist/domain/agent-images/resume-token-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-token-discovery.js","sourceRoot":"","sources":["../../../src/domain/agent-images/resume-token-discovery.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,0BAA0B;AAC1B,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,sEAAsE;AACtE,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,2DAA2D;AA2B3D,MAAM,UAAU,mBAAmB,CAAC,EAAqB,EAAE,aAAqB;IAC9E,MAAM,UAAU,GAAG,EAAE;SAClB,OAAO,CAAC,gGAAgG,CAAC;SACzG,GAAG,CAAC,aAAa,CAA6E,CAAC;IAClG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,mBAAmB,aAAa,0DAA0D;aACpG;SACF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,EAAE;SACf,OAAO,CAAC,6CAA6C,CAAC;SACtD,GAAG,CAAC,UAAU,CAAC,OAAO,CAA+D,CAAC;IACzF,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC;IACrC,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,mBAAmB,aAAa,kBAAkB,OAAO,IAAI,WAAW,0FAA0F;aAC5K;SACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,MAAM,gBAAgB,GAAG,8BAA8B,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/F,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,IAAI,UAAU,CAAC,YAAY,IAAI,IAAI,EAAE,OAAO,EAAE;SAC5F,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,qEAAqE;IACrE,6EAA6E;IAC7E,MAAM,UAAU,GAAG,EAAE;SAClB,OAAO,CAAC,+EAA+E,CAAC;SACxF,GAAG,CAAC,UAAU,CAAC,OAAO,CAAyF,CAAC;IACnH,IAAI,UAAU,EAAE,eAAe,KAAK,cAAc,IAAI,UAAU,CAAC,qBAAqB,EAAE,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,qBAAqB,EAAE,OAAO,EAAE,EAAE,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,8BAA8B,CACrC,EAAqB,EACrB,MAAc,EACd,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC;;;;;OAKR,CAAC;aACD,GAAG,CAAC,MAAM,CAA2E,CAAC;QAEzF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QACxE,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,qEAAqE;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/daemon/dist/domain/agent-images/snapshot-capturer.d.ts

@@ -0,0 +1,36 @@
+import type Database from "better-sqlite3";
+import type { SessionRegistry } from "../session-registry.js";
+import type { RigRepository } from "../rig-repository.js";
+import { type AgentImageManifest } from "./agent-image-types.js";
+import { AgentImageLibraryService } from "./agent-image-library-service.js";
+export interface CaptureSnapshotOpts {
+    sourceSession: string;
+    name: string;
+    version?: string;
+    notes?: string;
+    estimatedTokens?: number;
+    lineage?: string[];
+    files?: Map<string, string>;
+}
+export interface CaptureSnapshotResult {
+    imageId: string;
+    imagePath: string;
+    manifest: AgentImageManifest;
+}
+export interface SnapshotCapturerDeps {
+    db: Database.Database;
+    rigRepo: RigRepository;
+    sessionRegistry: SessionRegistry;
+    agentImageLibrary: AgentImageLibraryService;
+    /** Target install root — typically ~/.openrig/agent-images/. */
+    targetRoot: string;
+    /** Test seam — defaults to () => new Date(). */
+    now?: () => Date;
+}
+export declare class SnapshotCapturer {
+    private readonly deps;
+    private readonly now;
+    constructor(deps: SnapshotCapturerDeps);
+    capture(opts: CaptureSnapshotOpts): CaptureSnapshotResult;
+}
+//# sourceMappingURL=snapshot-capturer.d.ts.map

package/daemon/dist/domain/agent-images/snapshot-capturer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-capturer.d.ts","sourceRoot":"","sources":["../../../src/domain/agent-images/snapshot-capturer.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAG5E,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,iBAAiB,EAAE,wBAAwB,CAAC;IAC5C,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,IAAI,EAAE,oBAAoB;IAKtC,OAAO,CAAC,IAAI,EAAE,mBAAmB,GAAG,qBAAqB;CA6C1D"}

package/daemon/dist/domain/agent-images/snapshot-capturer.js

@@ -0,0 +1,58 @@
+// Fork Primitive + Starter Agent Images v0 (PL-016) — snapshot capturer.
+//
+// Captures a productive seat's resumable state into a new agent_image:
+// runtime-specific resume token + manifest + optional cwd-deltas. Used
+// by `rig agent-image create <source-session> --name <name>` and the
+// daemon HTTP route /api/agent-images/snapshot.
+//
+// Resume-token discovery routes through resume-token-discovery.ts so
+// the same logic is shared with the /api/agent-images/fork route.
+//
+// Failure modes surface honest errors per architecture.md § Resume
+// honesty (no fabricated tokens; no auto-fallback to fresh).
+import { AgentImageError, } from "./agent-image-types.js";
+import { discoverResumeToken } from "./resume-token-discovery.js";
+export class SnapshotCapturer {
+    deps;
+    now;
+    constructor(deps) {
+        this.deps = deps;
+        this.now = deps.now ?? (() => new Date());
+    }
+    capture(opts) {
+        const { sourceSession, name } = opts;
+        const version = opts.version ?? "1";
+        const discovery = discoverResumeToken(this.deps.db, sourceSession);
+        if (!discovery.ok) {
+            throw new AgentImageError(discovery.failure.code === "session_not_found" ? "image_not_found" : "runtime_mismatch", discovery.failure.message, { sourceSession });
+        }
+        const { runtime, nativeId, nodeCwd } = discovery.result;
+        if (!nativeId) {
+            throw new AgentImageError("image_not_found", `Could not discover a resume token for ${runtime} source session '${sourceSession}'. The session may not have a native conversation id yet — try again after the seat has produced output, or use rig context --refresh to re-sample.`, { sourceSession, runtime });
+        }
+        const manifest = {
+            name,
+            version,
+            runtime,
+            sourceSeat: sourceSession,
+            sourceSessionId: nativeId,
+            sourceResumeToken: nativeId,
+            // PL-016 source-cwd behavior:
+            // capture source seat's resolved cwd so the Use-as-starter
+            // snippet can emit `cwd: <source_cwd>`. nodeCwd may be null when
+            // the source node has no recorded cwd (legacy fixture or seat
+            // pre-cwd-capture); manifest field is omitted in that case.
+            ...(nodeCwd ? { sourceCwd: nodeCwd } : {}),
+            createdAt: this.now().toISOString(),
+            ...(opts.notes !== undefined ? { notes: opts.notes } : {}),
+            files: [],
+            ...(opts.estimatedTokens !== undefined ? { estimatedTokens: opts.estimatedTokens } : {}),
+            ...(opts.lineage !== undefined ? { lineage: [...opts.lineage] } : {}),
+        };
+        const fileContents = opts.files ?? new Map();
+        const imagePath = this.deps.agentImageLibrary.install(this.deps.targetRoot, manifest, fileContents);
+        this.deps.agentImageLibrary.scan();
+        return { imageId: `agent-image:${name}:${version}`, imagePath, manifest };
+    }
+}
+//# sourceMappingURL=snapshot-capturer.js.map

package/daemon/dist/domain/agent-images/snapshot-capturer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-capturer.js","sourceRoot":"","sources":["../../../src/domain/agent-images/snapshot-capturer.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,qEAAqE;AACrE,gDAAgD;AAChD,EAAE;AACF,qEAAqE;AACrE,kEAAkE;AAClE,EAAE;AACF,mEAAmE;AACnE,6DAA6D;AAK7D,OAAO,EACL,eAAe,GAEhB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AA6BlE,MAAM,OAAO,gBAAgB;IACV,IAAI,CAAuB;IAC3B,GAAG,CAAa;IAEjC,YAAY,IAA0B;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,CAAC,IAAyB;QAC/B,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC;QAEpC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,EACvF,SAAS,CAAC,OAAO,CAAC,OAAO,EACzB,EAAE,aAAa,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CACvB,iBAAiB,EACjB,yCAAyC,OAAO,oBAAoB,aAAa,qJAAqJ,EACtO,EAAE,aAAa,EAAE,OAAO,EAAE,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAuB;YACnC,IAAI;YACJ,OAAO;YACP,OAAO;YACP,UAAU,EAAE,aAAa;YACzB,eAAe,EAAE,QAAQ;YACzB,iBAAiB,EAAE,QAAQ;YAC3B,8BAA8B;YAC9B,2DAA2D;YAC3D,iEAAiE;YACjE,8DAA8D;YAC9D,4DAA4D;YAC5D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,KAAK,EAAE,EAAE;YACT,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,EAAkB,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACpG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,eAAe,IAAI,IAAI,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC5E,CAAC;CACF"}

package/daemon/dist/domain/agent-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-manifest.d.ts","sourceRoot":"","sources":["../../src/domain/agent-manifest.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,SAAS,EAGT,gBAAgB,EACjB,MAAM,YAAY,CAAC;AA4FpB;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAExE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAyHhE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CA0C1E"}
+{"version":3,"file":"agent-manifest.d.ts","sourceRoot":"","sources":["../../src/domain/agent-manifest.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,SAAS,EAGT,gBAAgB,EACjB,MAAM,YAAY,CAAC;AA4FpB;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAExE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CA4HhE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CA0C1E"}

package/daemon/dist/domain/agent-manifest.js

@@ -178,6 +178,9 @@ export function validateAgentSpec(raw) {
                             if (!entries[i]["runtime"] || typeof entries[i]["runtime"] !== "string") {
                                 errors.push(`resources.runtime_resources[${i}].runtime: required non-empty string`);
                             }
+                            if (!entries[i]["type"] || typeof entries[i]["type"] !== "string") {
+                                errors.push(`resources.runtime_resources[${i}].type: required non-empty string`);
+                            }
                         }
                     }
                 }