@openrig/cli 0.2.0 → 0.3.0

package/daemon/dist/domain/agent-images/agent-image-types.d.ts

@@ -0,0 +1,113 @@
+export type AgentImageRuntime = "claude-code" | "codex";
+export interface AgentImageManifest {
+    name: string;
+    version: string;
+    runtime: AgentImageRuntime;
+    /** Source seat's canonical session name, e.g. "velocity-driver@openrig-velocity". */
+    sourceSeat: string;
+    /** Native conversation id captured at snapshot time. Claude: the
+     *  resume_token from the sessions table. Codex: the thread_id from
+     *  codex-thread-id.ts. */
+    sourceSessionId: string;
+    /** Same value as sourceSessionId for v0 — kept as a separate field
+     *  in the manifest so future versions can split runtime conversation
+     *  identity from a runtime-resume token without breaking older
+     *  manifests. */
+    sourceResumeToken: string;
+    /** PL-016 source-cwd behavior: the
+     *  source seat's resolved cwd at snapshot time. Captured so the
+     *  Use-as-starter snippet can emit `cwd: <source_cwd>` and the fork
+     *  starts in the SAME directory the parent session was created in
+     *  — Claude's project-dir-scoped session storage works because the
+     *  jsonl file lives there. The daemon does NOT override cwd at fork
+     *  dispatch — if operator manually changes the rig.yaml cwd, fork
+     *  fails honestly with "no conversation found". Optional: manifests
+     *  authored before source_cwd support omit this field; snippet renders
+     *  without cwd line for back-compat. */
+    sourceCwd?: string;
+    createdAt: string;
+    notes?: string;
+    /** Optional supplementary files (analogous to context_pack files).
+     *  v0 ships no consumers for this surface beyond passthrough; the
+     *  startup orchestrator will compose them into the seat's cwd at
+     *  launch time when the v0+1 trigger names them. */
+    files: AgentImageManifestFile[];
+    /** Operator-supplied or capturer-derived estimate. Used for at-a-
+     *  glance display in the library; the library service ALSO computes
+     *  a derivedEstimatedTokens from the actual on-disk content size. */
+    estimatedTokens?: number;
+    /** Lineage chain populated when the image is forked from another
+     *  image (image creation can record `lineage: [<parent>, ...]`). */
+    lineage?: string[];
+}
+export interface AgentImageManifestFile {
+    path: string;
+    role: string;
+    summary?: string;
+}
+export interface AgentImageStats {
+    /** Incremented atomically when the image is consumed (either by
+     *  rig fork / agent-image fork or by a session_source: mode:
+     *  agent_image consumer at instantiation time). */
+    forkCount: number;
+    /** ISO timestamp of the most-recent consumption. */
+    lastUsedAt: string | null;
+    /** Daemon-derived estimate of total bytes under the image dir
+     *  (manifest + supplementary files). */
+    estimatedSizeBytes: number;
+    /** Fully-resolved lineage chain (mirrors manifest.lineage; kept on
+     *  stats so it's mutable independently when a parent image is
+     *  renamed). */
+    lineage: string[];
+}
+export type AgentImageSourceType = "user_file" | "workspace" | "builtin";
+export interface AgentImageEntry {
+    /** Stable id `agent-image:<name>:<version>` parallel to context-pack:. */
+    id: string;
+    kind: "agent-image";
+    name: string;
+    version: string;
+    runtime: AgentImageRuntime;
+    sourceSeat: string;
+    sourceSessionId: string;
+    /** Source seat's cwd at snapshot time. null when the manifest predates
+     *  source_cwd support (back-compat surface). Consumed
+     *  by the Use-as-starter snippet generator. */
+    sourceCwd: string | null;
+    notes: string | null;
+    createdAt: string;
+    sourceType: AgentImageSourceType;
+    /** Absolute path to the image directory. */
+    sourcePath: string;
+    /** Path relative to the discovery root that found this image. */
+    relativePath: string;
+    /** Most-recent mtime under the image dir. */
+    updatedAt: string;
+    manifestEstimatedTokens: number | null;
+    derivedEstimatedTokens: number;
+    files: AgentImageEntryFile[];
+    /** Resume-token surface kept separate from manifest data so the
+     *  library/list/get routes can omit it when the operator is browsing
+     *  but include it when the consumer is the instantiator. */
+    sourceResumeToken: string;
+    stats: AgentImageStats;
+    lineage: string[];
+    /** True when an explicit `pin` file exists at <sourcePath>/.pinned.
+     *  Pinned images are protected from `prune` regardless of active-
+     *  reference scan results. */
+    pinned: boolean;
+}
+export interface AgentImageEntryFile {
+    path: string;
+    role: string;
+    summary: string | null;
+    absolutePath: string | null;
+    bytes: number | null;
+    estimatedTokens: number | null;
+}
+export declare class AgentImageError extends Error {
+    readonly code: "manifest_missing" | "manifest_parse_error" | "manifest_invalid" | "image_not_found" | "image_referenced" | "image_pinned" | "runtime_mismatch" | "stats_write_failed";
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(code: "manifest_missing" | "manifest_parse_error" | "manifest_invalid" | "image_not_found" | "image_referenced" | "image_pinned" | "runtime_mismatch" | "stats_write_failed", message: string, details?: Record<string, unknown> | undefined);
+}
+//# sourceMappingURL=agent-image-types.d.ts.map

package/daemon/dist/domain/agent-images/agent-image-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-image-types.d.ts","sourceRoot":"","sources":["../../../src/domain/agent-images/agent-image-types.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG,OAAO,CAAC;AAExD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,qFAAqF;IACrF,UAAU,EAAE,MAAM,CAAC;IACnB;;8BAE0B;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB;;;qBAGiB;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;4CASwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;wDAGoD;IACpD,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAChC;;yEAEqE;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;wEACoE;IACpE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B;;uDAEmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;4CACwC;IACxC,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;oBAEgB;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,CAAC;AAEzE,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB;;mDAE+C;IAC/C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,oBAAoB,CAAC;IACjC,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B;;gEAE4D;IAC5D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;kCAE8B;IAC9B,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,IAAI,EAChB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,GAClB,iBAAiB,GACjB,kBAAkB,GAClB,cAAc,GACd,kBAAkB,GAClB,oBAAoB;aAER,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAVjC,IAAI,EAChB,kBAAkB,GAClB,sBAAsB,GACtB,kBAAkB,GAClB,iBAAiB,GACjB,kBAAkB,GAClB,cAAc,GACd,kBAAkB,GAClB,oBAAoB,EACxB,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAKpD"}

package/daemon/dist/domain/agent-images/agent-image-types.js

@@ -0,0 +1,24 @@
+// Fork Primitive + Starter Agent Images v0 (PL-016) — typed primitive
+// parallel to skills + workflow_specs + context_packs (PL-014).
+//
+// An agent_image is a snapshot bundle of a productive seat's
+// resumable state — runtime-specific resume token (Claude resume_token
+// / Codex thread_id), source-seat lineage, optional cwd-deltas + notes
+// — surfaced in the Specs library and consumable by AgentSpec
+// `session_source: mode: agent_image, ref: { kind: image_name, ... }`.
+// Storage at ~/.openrig/agent-images/<name>/ + workspace-local
+// .openrig/agent-images/<name>/.
+//
+// MVP single-host context: filesystem-canonical; NO new SQLite tables;
+// library cache is in-memory at the daemon scope.
+export class AgentImageError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = "AgentImageError";
+    }
+}
+//# sourceMappingURL=agent-image-types.js.map

package/daemon/dist/domain/agent-images/agent-image-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-image-types.js","sourceRoot":"","sources":["../../../src/domain/agent-images/agent-image-types.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,gEAAgE;AAChE,EAAE;AACF,6DAA6D;AAC7D,uEAAuE;AACvE,uEAAuE;AACvE,8DAA8D;AAC9D,uEAAuE;AACvE,+DAA+D;AAC/D,iCAAiC;AACjC,EAAE;AACF,uEAAuE;AACvE,kDAAkD;AAoHlD,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IAUA;IAXlB,YACkB,IAQQ,EACxB,OAAe,EACC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAZC,SAAI,GAAJ,IAAI,CAQI;QAER,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF"}

package/daemon/dist/domain/agent-images/evidence-guard.d.ts

@@ -0,0 +1,26 @@
+import type { AgentImageEntry } from "./agent-image-types.js";
+export type ProtectionReason = "pinned" | "referenced_by_agent_spec" | "referenced_by_rig_spec" | "lineage_descendant_of_protected";
+export interface ImageProtectionStatus {
+    imageId: string;
+    imageName: string;
+    imageVersion: string;
+    protected: boolean;
+    reasons: ProtectionReason[];
+    /** Specific filesystem paths that hold the protective references. */
+    references: string[];
+}
+export interface EvidenceGuardOpts {
+    /** All images in the library (so lineage-based protection can
+     *  traverse the chain without re-walking discovery roots). */
+    images: readonly AgentImageEntry[];
+    /** Spec-library directories to walk for active references. Each is
+     *  walked recursively for `*.yaml` / `*.yml` files. */
+    specRoots: readonly string[];
+}
+/**
+ * Compute protection status for every image. The result is parallel to
+ * the input array order; the protected image set is what `prune` MUST
+ * skip unless --force is supplied.
+ */
+export declare function evaluateProtection(opts: EvidenceGuardOpts): ImageProtectionStatus[];
+//# sourceMappingURL=evidence-guard.d.ts.map

package/daemon/dist/domain/agent-images/evidence-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-guard.d.ts","sourceRoot":"","sources":["../../../src/domain/agent-images/evidence-guard.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,0BAA0B,GAC1B,wBAAwB,GACxB,iCAAiC,CAAC;AAEtC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,qEAAqE;IACrE,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC;kEAC8D;IAC9D,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IACnC;2DACuD;IACvD,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,GAAG,qBAAqB,EAAE,CA8DnF"}

package/daemon/dist/domain/agent-images/evidence-guard.js

@@ -0,0 +1,185 @@
+// Fork Primitive + Starter Agent Images v0 (PL-016) — evidence-
+// preservation guard for `rig agent-image prune` / DELETE
+// /api/agent-images/library/:id.
+//
+// PRD § Item 6 — CATASTROPHIC BOUNCE if dropped. An image is protected
+// from deletion if ANY:
+//
+//   - Pinned (operator placed `.pinned` sentinel via `rig agent-image pin`)
+//   - Referenced by an active agent.yaml (session_source: mode:
+//     agent_image, ref.value: <name>) — scanned across discovery roots
+//     for spec library files
+//   - Referenced by a rig spec in the spec library (members[].session_source)
+//   - Lineage descendant of another protected image (transitive
+//     protection up the chain)
+//
+// The guard fails CLOSED. Operator may pass --force to override.
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+import { parse as parseYaml } from "yaml";
+/**
+ * Compute protection status for every image. The result is parallel to
+ * the input array order; the protected image set is what `prune` MUST
+ * skip unless --force is supplied.
+ */
+export function evaluateProtection(opts) {
+    const referencedNames = scanSpecRootsForReferences(opts.specRoots);
+    // Pass 1: compute direct protection (pinned + referenced).
+    const statuses = new Map();
+    const protectedNameSet = new Set();
+    for (const img of opts.images) {
+        const refs = referencedNames.get(img.name) ?? [];
+        const reasons = [];
+        if (img.pinned)
+            reasons.push("pinned");
+        // Distinguish agent.yaml-shaped vs rig.yaml-shaped references when
+        // both surface; but the scanner returns paths, and the path-based
+        // tag is stored alongside. Simplification at v0: any file whose
+        // basename is `agent.yaml` is agent-spec; otherwise rig-spec.
+        const seenReason = new Set();
+        for (const ref of refs) {
+            const reason = ref.endsWith("/agent.yaml")
+                ? "referenced_by_agent_spec"
+                : "referenced_by_rig_spec";
+            if (!seenReason.has(reason)) {
+                reasons.push(reason);
+                seenReason.add(reason);
+            }
+        }
+        const status = {
+            imageId: img.id,
+            imageName: img.name,
+            imageVersion: img.version,
+            protected: reasons.length > 0,
+            reasons,
+            references: refs,
+        };
+        statuses.set(img.name, status);
+        if (status.protected)
+            protectedNameSet.add(img.name);
+    }
+    // Pass 2: transitive lineage protection. An image whose lineage
+    // includes a protected image becomes protected too. Iterate to a
+    // fixed point so multi-hop chains converge.
+    let changed = true;
+    while (changed) {
+        changed = false;
+        for (const img of opts.images) {
+            const status = statuses.get(img.name);
+            if (status.protected)
+                continue;
+            // img's lineage lists ANCESTORS. We protect a DESCENDANT of a
+            // protected image — meaning if any ancestor of `img` is
+            // protected, `img` itself becomes protected by transit.
+            for (const ancestor of img.lineage) {
+                if (protectedNameSet.has(ancestor)) {
+                    status.protected = true;
+                    status.reasons.push("lineage_descendant_of_protected");
+                    status.references.push(`lineage-of:${ancestor}`);
+                    protectedNameSet.add(img.name);
+                    changed = true;
+                    break;
+                }
+            }
+        }
+    }
+    return opts.images.map((img) => statuses.get(img.name));
+}
+/** Walk spec-library roots for YAML files and collect file paths that
+ *  reference any agent_image by name. The match is conservative: any
+ *  YAML that contains a `mode: agent_image` directive WITH a
+ *  `value: <name>` field is treated as a reference. False positives are
+ *  acceptable (over-protection); false negatives would cause
+ *  catastrophic data loss. */
+function scanSpecRootsForReferences(roots) {
+    const out = new Map();
+    for (const root of roots) {
+        if (!existsSync(root))
+            continue;
+        walkYaml(root, (absPath) => {
+            let raw;
+            try {
+                raw = readFileSync(absPath, "utf-8");
+            }
+            catch {
+                return;
+            }
+            if (!raw.includes("agent_image"))
+                return;
+            let parsed;
+            try {
+                parsed = parseYaml(raw);
+            }
+            catch {
+                return;
+            }
+            const refs = collectImageRefs(parsed);
+            for (const name of refs) {
+                const existing = out.get(name) ?? [];
+                existing.push(absPath);
+                out.set(name, existing);
+            }
+        });
+    }
+    return out;
+}
+function walkYaml(root, visit) {
+    const stack = [root];
+    while (stack.length > 0) {
+        const current = stack.pop();
+        let entries;
+        try {
+            entries = readdirSync(current, { withFileTypes: true });
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            const abs = join(current, entry.name);
+            if (entry.isDirectory()) {
+                stack.push(abs);
+            }
+            else if (entry.isFile() && (entry.name.endsWith(".yaml") || entry.name.endsWith(".yml"))) {
+                try {
+                    if (statSync(abs).size > 5_000_000)
+                        continue; // skip suspiciously large YAML files
+                }
+                catch {
+                    continue;
+                }
+                visit(abs);
+            }
+        }
+    }
+}
+/** Recursively walk a parsed YAML tree and collect the `value` of any
+ *  `session_source: { mode: agent_image, ref: { kind: image_name, value: <name> } }`. */
+function collectImageRefs(node, acc = new Set()) {
+    if (!node || typeof node !== "object")
+        return acc;
+    if (Array.isArray(node)) {
+        for (const item of node)
+            collectImageRefs(item, acc);
+        return acc;
+    }
+    const obj = node;
+    // Match shape: session_source: { mode: agent_image, ref: { value: <name> } }
+    const ss = obj["session_source"] ?? obj["sessionSource"];
+    if (ss && typeof ss === "object" && !Array.isArray(ss)) {
+        const ssObj = ss;
+        if (ssObj["mode"] === "agent_image") {
+            const ref = ssObj["ref"];
+            if (ref && typeof ref === "object" && !Array.isArray(ref)) {
+                const value = ref["value"];
+                if (typeof value === "string" && value.length > 0)
+                    acc.add(value);
+            }
+        }
+    }
+    // Recurse into all values regardless — a rig.yaml has session_source
+    // nested inside members[].
+    for (const v of Object.values(obj))
+        collectImageRefs(v, acc);
+    return acc;
+}
+//# sourceMappingURL=evidence-guard.js.map

package/daemon/dist/domain/agent-images/evidence-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-guard.js","sourceRoot":"","sources":["../../../src/domain/agent-images/evidence-guard.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,0DAA0D;AAC1D,iCAAiC;AACjC,EAAE;AACF,uEAAuE;AACvE,wBAAwB;AACxB,EAAE;AACF,4EAA4E;AAC5E,gEAAgE;AAChE,uEAAuE;AACvE,6BAA6B;AAC7B,8EAA8E;AAC9E,gEAAgE;AAChE,+BAA+B;AAC/B,EAAE;AACF,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AA4B1C;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnE,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,mEAAmE;QACnE,kEAAkE;QAClE,gEAAgE;QAChE,8DAA8D;QAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAqB,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC1D,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,wBAAwB,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrB,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAA0B;YACpC,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,SAAS,EAAE,GAAG,CAAC,IAAI;YACnB,YAAY,EAAE,GAAG,CAAC,OAAO;YACzB,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC7B,OAAO;YACP,UAAU,EAAE,IAAI;SACjB,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,SAAS;YAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,gEAAgE;IAChE,iEAAiE;IACjE,4CAA4C;IAC5C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;YACvC,IAAI,MAAM,CAAC,SAAS;gBAAE,SAAS;YAC/B,8DAA8D;YAC9D,wDAAwD;YACxD,wDAAwD;YACxD,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACnC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;oBACxB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;oBACvD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;oBACjD,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC/B,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;8BAK8B;AAC9B,SAAS,0BAA0B,CAAC,KAAwB;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;YACzB,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBAAC,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAAE,OAAO;YACzC,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;YAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACtC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAgC;IAC9D,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAC7B,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC3F,IAAI,CAAC;oBACH,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,SAAS;wBAAE,SAAS,CAAC,qCAAqC;gBACrF,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;yFACyF;AACzF,SAAS,gBAAgB,CAAC,IAAa,EAAE,MAAmB,IAAI,GAAG,EAAE;IACnE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,6EAA6E;IAC7E,MAAM,EAAE,GAAG,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACzD,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,EAA6B,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAI,GAA+B,CAAC,OAAO,CAAC,CAAC;gBACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,2BAA2B;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,gBAAgB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/daemon/dist/domain/agent-images/manifest-parser.d.ts

@@ -0,0 +1,3 @@
+import { type AgentImageManifest } from "./agent-image-types.js";
+export declare function parseAgentImageManifest(rawYaml: string, sourcePath: string): AgentImageManifest;
+//# sourceMappingURL=manifest-parser.d.ts.map

package/daemon/dist/domain/agent-images/manifest-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-parser.d.ts","sourceRoot":"","sources":["../../../src/domain/agent-images/manifest-parser.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,kBAAkB,EAGxB,MAAM,wBAAwB,CAAC;AAKhC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAoK/F"}

package/daemon/dist/domain/agent-images/manifest-parser.js

@@ -0,0 +1,114 @@
+// Fork Primitive + Starter Agent Images v0 (PL-016) — manifest parser.
+//
+// Parses ~/.openrig/agent-images/<name>/manifest.yaml into a typed
+// AgentImageManifest. Pure (no fs touches in the parser; caller hands
+// in raw YAML). Validation guards: required field checks, runtime
+// allow-list, path-traversal rejection on supplementary files.
+import { parse as parseYaml } from "yaml";
+import { AgentImageError, } from "./agent-image-types.js";
+const ALLOWED_RUNTIMES = new Set(["claude-code", "codex"]);
+const ALLOWED_FILE_SUFFIXES = [".md", ".markdown", ".yaml", ".yml", ".txt", ".json"];
+export function parseAgentImageManifest(rawYaml, sourcePath) {
+    let parsed;
+    try {
+        parsed = parseYaml(rawYaml);
+    }
+    catch (err) {
+        throw new AgentImageError("manifest_parse_error", `manifest at ${sourcePath} is not valid YAML: ${err.message}`, { sourcePath });
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} must be a YAML object at the root`, { sourcePath });
+    }
+    const obj = parsed;
+    const name = obj["name"];
+    if (typeof name !== "string" || name.length === 0) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'name'`, { sourcePath });
+    }
+    const versionRaw = obj["version"];
+    if (versionRaw === undefined || versionRaw === null) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'version'`, { sourcePath });
+    }
+    const version = String(versionRaw);
+    const runtime = obj["runtime"];
+    if (typeof runtime !== "string" || !ALLOWED_RUNTIMES.has(runtime)) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} has invalid runtime '${runtime}'; allowed: ${[...ALLOWED_RUNTIMES].join(", ")}`, { sourcePath, runtime });
+    }
+    // Source seat / session id / resume token are required on a real
+    // image. The PRD's v0 manifest schema reads these as load-bearing —
+    // an image without a resume token can't be consumed.
+    const sourceSeatRaw = obj["source_seat"] ?? obj["sourceSeat"];
+    if (typeof sourceSeatRaw !== "string" || sourceSeatRaw.length === 0) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'source_seat'`, { sourcePath });
+    }
+    const sourceSessionIdRaw = obj["source_session_id"] ?? obj["sourceSessionId"];
+    if (typeof sourceSessionIdRaw !== "string" || sourceSessionIdRaw.length === 0) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'source_session_id'`, { sourcePath });
+    }
+    const sourceResumeTokenRaw = obj["source_resume_token"] ?? obj["sourceResumeToken"];
+    if (typeof sourceResumeTokenRaw !== "string" || sourceResumeTokenRaw.length === 0) {
+        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'source_resume_token'`, { sourcePath });
+    }
+    const createdAtRaw = obj["created_at"] ?? obj["createdAt"];
+    const createdAt = typeof createdAtRaw === "string" && createdAtRaw.length > 0
+        ? createdAtRaw
+        : new Date(0).toISOString();
+    const notes = typeof obj["notes"] === "string" ? obj["notes"] : undefined;
+    // PL-016 source-cwd behavior: optional
+    // source_cwd captured at snapshot time. Manifests authored before this
+    // fix omit the field; consumers fall back to "no cwd line" rendering
+    // (back-compat).
+    const sourceCwdRaw = obj["source_cwd"] ?? obj["sourceCwd"];
+    const sourceCwd = typeof sourceCwdRaw === "string" && sourceCwdRaw.length > 0
+        ? sourceCwdRaw
+        : undefined;
+    const filesRaw = obj["files"];
+    const files = [];
+    if (Array.isArray(filesRaw)) {
+        for (let i = 0; i < filesRaw.length; i++) {
+            const f = filesRaw[i];
+            if (!f || typeof f !== "object" || Array.isArray(f)) {
+                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} has malformed entry at files[${i}] (must be object with path + role)`, { sourcePath, index: i });
+            }
+            const fr = f;
+            const path = fr["path"];
+            if (typeof path !== "string" || path.length === 0) {
+                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}] missing 'path'`, { sourcePath, index: i });
+            }
+            if (path.includes("..") || path.startsWith("/")) {
+                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}].path '${path}' must be a relative path inside the image (no '..', no leading '/')`, { sourcePath, index: i, path });
+            }
+            if (!ALLOWED_FILE_SUFFIXES.some((s) => path.endsWith(s))) {
+                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}].path '${path}' has unsupported suffix; allowed: ${ALLOWED_FILE_SUFFIXES.join(", ")}`, { sourcePath, index: i, path });
+            }
+            const role = fr["role"];
+            if (typeof role !== "string" || role.length === 0) {
+                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}] missing 'role'`, { sourcePath, index: i, path });
+            }
+            const summary = typeof fr["summary"] === "string" ? fr["summary"] : undefined;
+            files.push(summary === undefined ? { path, role } : { path, role, summary });
+        }
+    }
+    const estimatedTokensRaw = obj["estimated_tokens"] ?? obj["estimatedTokens"];
+    const estimatedTokens = typeof estimatedTokensRaw === "number" && Number.isFinite(estimatedTokensRaw)
+        ? Math.max(0, Math.floor(estimatedTokensRaw))
+        : undefined;
+    const lineageRaw = obj["lineage"];
+    const lineage = Array.isArray(lineageRaw)
+        ? lineageRaw.filter((l) => typeof l === "string" && l.length > 0)
+        : undefined;
+    return {
+        name,
+        version,
+        runtime: runtime,
+        sourceSeat: sourceSeatRaw,
+        sourceSessionId: sourceSessionIdRaw,
+        sourceResumeToken: sourceResumeTokenRaw,
+        ...(sourceCwd !== undefined ? { sourceCwd } : {}),
+        createdAt,
+        ...(notes !== undefined ? { notes } : {}),
+        files,
+        ...(estimatedTokens !== undefined ? { estimatedTokens } : {}),
+        ...(lineage !== undefined ? { lineage } : {}),
+    };
+}
+//# sourceMappingURL=manifest-parser.js.map

package/daemon/dist/domain/agent-images/manifest-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-parser.js","sourceRoot":"","sources":["../../../src/domain/agent-images/manifest-parser.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,kEAAkE;AAClE,+DAA+D;AAE/D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,eAAe,GAIhB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,gBAAgB,GAAmC,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3F,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAErF,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,UAAkB;IACzE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,eAAe,UAAU,uBAAwB,GAAa,CAAC,OAAO,EAAE,EACxE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,oCAAoC,EAC7D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,mCAAmC,EAC5D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,sCAAsC,EAC/D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEnC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAA4B,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,yBAAyB,OAAO,eAAe,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC1G,EAAE,UAAU,EAAE,OAAO,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,oEAAoE;IACpE,qDAAqD;IACrD,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAC9D,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,0CAA0C,EACnE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC9E,IAAI,OAAO,kBAAkB,KAAK,QAAQ,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,gDAAgD,EACzE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAAG,GAAG,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpF,IAAI,OAAO,oBAAoB,KAAK,QAAQ,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,kDAAkD,EAC3E,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAC3E,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAE9B,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,OAAO,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtF,uCAAuC;IACvC,uEAAuE;IACvE,qEAAqE;IACrE,iBAAiB;IACjB,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAC3E,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,iCAAiC,CAAC,qCAAqC,EAChG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,kBAAkB,EACtD,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,sEAAsE,EACzH,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,sCAAsC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC3H,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,kBAAkB,EACtD,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,OAAO,kBAAkB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACnG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACvC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9E,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,IAAI;QACJ,OAAO;QACP,OAAO,EAAE,OAA4B;QACrC,UAAU,EAAE,aAAa;QACzB,eAAe,EAAE,kBAAkB;QACnC,iBAAiB,EAAE,oBAAoB;QACvC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,SAAS;QACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,KAAK;QACL,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/agent-images/resume-token-discovery.d.ts

@@ -0,0 +1,28 @@
+import type Database from "better-sqlite3";
+export type DiscoveryRuntime = "claude-code" | "codex";
+export interface DiscoveryResult {
+    runtime: DiscoveryRuntime;
+    /** Native conversation id (Claude resume_token / Codex thread_id /
+     *  external_session_name for external-CLI Codex seats). null when
+     *  the daemon can't surface one yet. */
+    nativeId: string | null;
+    /** PL-016 source-cwd behavior: source
+     *  seat's resolved cwd from the nodes table. Captured here so
+     *  SnapshotCapturer (and any future fork route) can persist it on
+     *  the manifest without an additional query. null when the source
+     *  node has no recorded cwd. */
+    nodeCwd: string | null;
+}
+export interface DiscoveryFailure {
+    code: "session_not_found" | "runtime_unsupported";
+    message: string;
+}
+export type DiscoveryOutcome = {
+    ok: true;
+    result: DiscoveryResult;
+} | {
+    ok: false;
+    failure: DiscoveryFailure;
+};
+export declare function discoverResumeToken(db: Database.Database, sourceSession: string): DiscoveryOutcome;
+//# sourceMappingURL=resume-token-discovery.d.ts.map

package/daemon/dist/domain/agent-images/resume-token-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-token-discovery.d.ts","sourceRoot":"","sources":["../../../src/domain/agent-images/resume-token-discovery.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,OAAO,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,gBAAgB,CAAC;IAC1B;;4CAEwC;IACxC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;oCAIgC;IAChC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,mBAAmB,GAAG,qBAAqB,CAAC;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAEhH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,GAAG,gBAAgB,CAgDlG"}

package/daemon/dist/domain/agent-images/resume-token-discovery.js

@@ -0,0 +1,83 @@
+// Fork Primitive + Starter Agent Images v0 (PL-016) — runtime-specific
+// resume-token discovery.
+//
+// Given a canonical session name, returns the native conversation id
+// the runtime uses for fork/resume. Shared between SnapshotCapturer
+// (capture into image) and the /api/agent-images/fork route (one-shot
+// fork without snapshot side effect).
+//
+// Honest failure mode: returns null when no token is available rather
+// than fabricating one (architecture.md § Resume honesty).
+export function discoverResumeToken(db, sourceSession) {
+    const sessionRow = db
+        .prepare("SELECT id, node_id, resume_token FROM sessions WHERE session_name = ? ORDER BY id DESC LIMIT 1")
+        .get(sourceSession);
+    if (!sessionRow) {
+        return {
+            ok: false,
+            failure: {
+                code: "session_not_found",
+                message: `Source session '${sourceSession}' not found. Run 'rig ps --nodes' to see what's running.`,
+            },
+        };
+    }
+    const nodeRow = db
+        .prepare("SELECT runtime, cwd FROM nodes WHERE id = ?")
+        .get(sessionRow.node_id);
+    const runtime = nodeRow?.runtime ?? null;
+    const nodeCwd = nodeRow?.cwd ?? null;
+    if (runtime !== "claude-code" && runtime !== "codex") {
+        return {
+            ok: false,
+            failure: {
+                code: "runtime_unsupported",
+                message: `Source session '${sourceSession}' has runtime '${runtime ?? "(unknown)"}' which has no native fork primitive. Only claude-code and codex sessions can be forked.`,
+            },
+        };
+    }
+    if (runtime === "claude-code") {
+        const contextSessionId = discoverClaudeContextSessionId(db, sessionRow.node_id, sourceSession);
+        return {
+            ok: true,
+            result: { runtime, nativeId: contextSessionId ?? sessionRow.resume_token ?? null, nodeCwd },
+        };
+    }
+    // Codex managed tmux seats persist the captured native thread id on the
+    // sessions row after launch. Use it directly for image capture/fork.
+    if (sessionRow.resume_token) {
+        return { ok: true, result: { runtime, nativeId: sessionRow.resume_token, nodeCwd } };
+    }
+    // Codex external_cli seats may not have a sessions.resume_token; the
+    // external_session_name on the binding row holds the native conversation id.
+    const bindingRow = db
+        .prepare("SELECT external_session_name, attachment_type FROM bindings WHERE node_id = ?")
+        .get(sessionRow.node_id);
+    if (bindingRow?.attachment_type === "external_cli" && bindingRow.external_session_name) {
+        return { ok: true, result: { runtime, nativeId: bindingRow.external_session_name, nodeCwd } };
+    }
+    return { ok: true, result: { runtime, nativeId: null, nodeCwd } };
+}
+function discoverClaudeContextSessionId(db, nodeId, sourceSession) {
+    try {
+        const row = db
+            .prepare(`
+        SELECT session_id, session_name
+        FROM context_usage
+        WHERE node_id = ?
+        LIMIT 1
+      `)
+            .get(nodeId);
+        if (!row)
+            return null;
+        if (row.session_name && row.session_name !== sourceSession)
+            return null;
+        const nativeId = row.session_id?.trim();
+        return nativeId ? nativeId : null;
+    }
+    catch {
+        // Back-compat for minimal test DBs or older stores: fall back to the
+        // persisted sessions.resume_token rather than making discovery fail.
+        return null;
+    }
+}
+//# sourceMappingURL=resume-token-discovery.js.map

package/daemon/dist/domain/agent-images/resume-token-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-token-discovery.js","sourceRoot":"","sources":["../../../src/domain/agent-images/resume-token-discovery.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,0BAA0B;AAC1B,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,sEAAsE;AACtE,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,2DAA2D;AA2B3D,MAAM,UAAU,mBAAmB,CAAC,EAAqB,EAAE,aAAqB;IAC9E,MAAM,UAAU,GAAG,EAAE;SAClB,OAAO,CAAC,gGAAgG,CAAC;SACzG,GAAG,CAAC,aAAa,CAA6E,CAAC;IAClG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,mBAAmB,aAAa,0DAA0D;aACpG;SACF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,EAAE;SACf,OAAO,CAAC,6CAA6C,CAAC;SACtD,GAAG,CAAC,UAAU,CAAC,OAAO,CAA+D,CAAC;IACzF,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC;IACrC,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,mBAAmB,aAAa,kBAAkB,OAAO,IAAI,WAAW,0FAA0F;aAC5K;SACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,MAAM,gBAAgB,GAAG,8BAA8B,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/F,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,IAAI,UAAU,CAAC,YAAY,IAAI,IAAI,EAAE,OAAO,EAAE;SAC5F,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,qEAAqE;IACrE,6EAA6E;IAC7E,MAAM,UAAU,GAAG,EAAE;SAClB,OAAO,CAAC,+EAA+E,CAAC;SACxF,GAAG,CAAC,UAAU,CAAC,OAAO,CAAyF,CAAC;IACnH,IAAI,UAAU,EAAE,eAAe,KAAK,cAAc,IAAI,UAAU,CAAC,qBAAqB,EAAE,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,qBAAqB,EAAE,OAAO,EAAE,EAAE,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,8BAA8B,CACrC,EAAqB,EACrB,MAAc,EACd,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC;;;;;OAKR,CAAC;aACD,GAAG,CAAC,MAAM,CAA2E,CAAC;QAEzF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QACxE,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,qEAAqE;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}