@openrig/cli 0.4.2 → 0.4.4

package/daemon/dist/domain/seat-identity-reconciler.js

@@ -0,0 +1,207 @@
+import { SeatIdentityStore } from "./seat-identity-store.js";
+/** Default identity-reconcile cadence: 5s. Process identity changes rarely
+ *  (a seat's pane/process is stable for its whole life), and the check is
+ *  more expensive than the 1Hz activity poll (per-seat pane PID + command
+ *  tmux reads), so a slower cadence is the right cost/freshness trade. */
+export const DEFAULT_IDENTITY_POLL_INTERVAL_MS = 5000;
+/** Foreground commands that read as a bare shell (a seat that dropped to a
+ *  prompt, or an orphan/QA-squat shell occupying the pane). Mirrors the
+ *  SessionFingerprinter SHELL_NAMES vocabulary. `pane_current_command` may
+ *  carry a login-shell `-` prefix. */
+const SHELL_COMMANDS = new Set([
+    "bash", "zsh", "fish", "sh", "dash", "tcsh", "csh",
+    "-bash", "-zsh", "-fish", "-sh", "-dash", "-tcsh", "-csh",
+]);
+/**
+ * Classify the pane's foreground command against the registered runtime.
+ *
+ * Deliberately LENIENT to preserve the slice-15 no-false-green-for-live-seats
+ * invariant: a genuinely-live claude/codex TUI usually reports its host
+ * process (`node`) as `pane_current_command`, NOT the literal runtime name, so
+ * we only declare `mismatch` on a POSITIVE contradiction — a different known
+ * agent runtime, or a bare shell where an agent was expected (the process
+ * died / an orphan shell squatted the pane). Ambiguous commands (`node`,
+ * `python`, empty) never down-rank.
+ *
+ * Mirrors SessionFingerprinter's Layer-1 process-command vocabulary; we do NOT
+ * run the full 4-layer scan (cmux query + pane-content capture) per poll — it
+ * is far more expensive at fleet scale and its content layer would not change
+ * the down-rank decision here (the reconcile only needs to distinguish
+ * "process contradicts the seat" from "no contradiction").
+ */
+export function classifyPaneRuntimeMatch(command, expectedRuntime) {
+    if (!command)
+        return "match"; // no signal — never false-mismatch a present pane
+    const cmd = command.trim().toLowerCase();
+    const expectsAgent = expectedRuntime === "claude-code" || expectedRuntime === "codex";
+    // Positive same-runtime signal.
+    if (expectedRuntime === "claude-code" && cmd.includes("claude"))
+        return "match";
+    if (expectedRuntime === "codex" && cmd.includes("codex"))
+        return "match";
+    // Cross-runtime contradiction (a DIFFERENT agent occupies the pane).
+    if (expectedRuntime === "claude-code" && cmd.includes("codex"))
+        return "mismatch";
+    if (expectedRuntime === "codex" && cmd.includes("claude"))
+        return "mismatch";
+    // A bare shell where an agent runtime was expected — the agent process is
+    // gone or an orphan/squat shell occupies the pane.
+    if (expectsAgent && SHELL_COMMANDS.has(cmd))
+        return "mismatch";
+    // Ambiguous / expected-shell (terminal nodes) — no contradiction.
+    return "match";
+}
+/**
+ * OPR.0.4.3.19 — periodic reconciler for the liveness identity verdict (the
+ * THIRD axis). Mirrors SeatActivityService.start(): polls every running
+ * tmux-bound managed seat, reconciles the current pane PID/command against the
+ * registered seat, and persists the verdict to `seat_identity_verdicts`.
+ * Projections then read the cheap persisted verdict synchronously.
+ *
+ * Non-inference: this reconciler reads ONLY tmux pane process identity vs the
+ * registered binding. It NEVER reads queue/classifier/hook heartbeats, and it
+ * does NOT touch `terminalActive` / `hasAssignedWork`.
+ */
+export class SeatIdentityReconciler {
+    db;
+    tmux;
+    now;
+    store;
+    timer = null;
+    constructor(deps) {
+        this.db = deps.db;
+        this.tmux = deps.tmux;
+        this.now = deps.now ?? (() => new Date());
+        this.store = new SeatIdentityStore(deps.db);
+    }
+    runningSeats() {
+        return this.db.prepare(`
+      SELECT n.id as node_id, n.runtime as runtime,
+             s.session_name as session_name, b.tmux_pane as tmux_pane
+      FROM nodes n
+      JOIN sessions s ON s.node_id = n.id
+        AND s.id = (SELECT s2.id FROM sessions s2 WHERE s2.node_id = n.id ORDER BY s2.id DESC LIMIT 1)
+      LEFT JOIN bindings b ON b.node_id = n.id
+      WHERE s.status = 'running'
+        AND s.session_name IS NOT NULL
+        AND COALESCE(b.attachment_type, 'tmux') = 'tmux'
+    `).all();
+    }
+    /** Reconcile every running tmux-bound seat once and persist the verdicts. */
+    async reconcileAll() {
+        const seats = this.runningSeats();
+        // Prune verdicts for nodes no longer running (keep the table bounded).
+        this.store.pruneExcept(seats.map((s) => s.node_id));
+        if (seats.length === 0)
+            return;
+        const observedAt = this.now().toISOString();
+        // One tmux availability probe per poll. If tmux is entirely unreachable
+        // (throws) OR reports zero live sessions while we have running seats in
+        // the DB, treat it as a transient tmux blip and record `tmux_unavailable`
+        // for every seat — NEVER down-rank a live fleet on an infra hiccup.
+        let liveSessions = null;
+        try {
+            const sessions = await this.tmux.listSessions();
+            liveSessions = new Set(sessions.map((s) => s.name));
+        }
+        catch {
+            liveSessions = null;
+        }
+        if (liveSessions === null || liveSessions.size === 0) {
+            for (const seat of seats) {
+                this.store.upsert(this.tmuxUnavailableVerdict(seat, observedAt));
+            }
+            return;
+        }
+        for (const seat of seats) {
+            try {
+                this.store.upsert(await this.computeVerdict(seat, liveSessions, observedAt));
+            }
+            catch {
+                // A single seat's tmux failure must not crash the loop; record it as
+                // an unknown (non-down-ranking) observation.
+                this.store.upsert(this.tmuxUnavailableVerdict(seat, observedAt));
+            }
+        }
+    }
+    tmuxUnavailableVerdict(seat, observedAt) {
+        return {
+            nodeId: seat.node_id,
+            verdict: "tmux_unavailable",
+            evidenceSource: null,
+            reason: "tmux_unavailable",
+            evidence: { registeredPane: seat.tmux_pane, observedPid: null, observedCommand: null, matchedLayer: null },
+            sessionName: seat.session_name,
+            observedAt,
+        };
+    }
+    async computeVerdict(seat, liveSessions, observedAt) {
+        const base = {
+            nodeId: seat.node_id,
+            sessionName: seat.session_name,
+            observedAt,
+        };
+        // No registered pane to reconcile against — we cannot verify identity.
+        // Non-down-ranking (unknown), so a missing binding pane never flips a live
+        // seat non-green.
+        if (!seat.tmux_pane) {
+            return {
+                ...base,
+                verdict: "tmux_unavailable",
+                evidenceSource: null,
+                reason: "tmux_unavailable",
+                evidence: { registeredPane: null, observedPid: null, observedCommand: null, matchedLayer: null },
+            };
+        }
+        const pid = await this.tmux.getPanePid(seat.tmux_pane);
+        if (pid === null) {
+            // The registered pane no longer resolves. Distinguish "the whole tmux
+            // session is gone" from "the pane within a live session is gone".
+            const sessionAlive = liveSessions.has(seat.session_name);
+            return {
+                ...base,
+                verdict: "pane_missing",
+                evidenceSource: sessionAlive ? "pane_process" : "tmux_session",
+                reason: sessionAlive ? "pane_pid_gone" : "session_missing",
+                evidence: { registeredPane: seat.tmux_pane, observedPid: null, observedCommand: null, matchedLayer: null },
+            };
+        }
+        const command = await this.tmux.getPaneCommand(seat.tmux_pane);
+        const match = classifyPaneRuntimeMatch(command, seat.runtime);
+        if (match === "mismatch") {
+            return {
+                ...base,
+                verdict: "mismatch",
+                evidenceSource: "pane_process",
+                reason: "process_identity_mismatch",
+                evidence: { registeredPane: seat.tmux_pane, observedPid: pid, observedCommand: command, matchedLayer: 1 },
+            };
+        }
+        return {
+            ...base,
+            verdict: "verified",
+            evidenceSource: "pane_process",
+            reason: null,
+            evidence: { registeredPane: seat.tmux_pane, observedPid: pid, observedCommand: command, matchedLayer: 1 },
+        };
+    }
+    /** Start the scheduler. Idempotent — calling twice is a no-op. */
+    start(intervalMs = DEFAULT_IDENTITY_POLL_INTERVAL_MS) {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => {
+            void this.reconcileAll();
+        }, intervalMs);
+        if (this.timer && typeof this.timer === "object" && "unref" in this.timer) {
+            this.timer.unref();
+        }
+    }
+    /** Stop the scheduler. Safe to call before start or multiple times. */
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+}
+//# sourceMappingURL=seat-identity-reconciler.js.map

package/daemon/dist/domain/seat-identity-reconciler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-identity-reconciler.js","sourceRoot":"","sources":["../../src/domain/seat-identity-reconciler.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D;;;0EAG0E;AAC1E,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC;AAEtD;;;sCAGsC;AACtC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;IAClD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM;CAC1D,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAsB,EACtB,eAA8B;IAE9B,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,CAAC,kDAAkD;IAChF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,eAAe,KAAK,aAAa,IAAI,eAAe,KAAK,OAAO,CAAC;IAEtF,gCAAgC;IAChC,IAAI,eAAe,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAChF,IAAI,eAAe,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAEzE,qEAAqE;IACrE,IAAI,eAAe,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAC;IAClF,IAAI,eAAe,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,UAAU,CAAC;IAE7E,0EAA0E;IAC1E,mDAAmD;IACnD,IAAI,YAAY,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAE/D,kEAAkE;IAClE,OAAO,OAAO,CAAC;AACjB,CAAC;AAeD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IAChB,EAAE,CAAoB;IACtB,IAAI,CAAqC;IACzC,GAAG,CAAa;IAChB,KAAK,CAAoB;IAClC,KAAK,GAA0C,IAAI,CAAC;IAE5D,YAAY,IAAgC;QAC1C,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IAEO,YAAY;QAClB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;KAUtB,CAAC,CAAC,GAAG,EAAsB,CAAC;IAC/B,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,YAAY;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,uEAAuE;QACvE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE/B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAE5C,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,oEAAoE;QACpE,IAAI,YAAY,GAAuB,IAAI,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAChD,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;YACnE,CAAC;YACD,OAAO;QACT,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;YAC/E,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;gBACrE,6CAA6C;gBAC7C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,IAAoB,EAAE,UAAkB;QACrE,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,OAAO,EAAE,kBAAkB;YAC3B,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;YAC1G,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,UAAU;SACX,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,IAAoB,EACpB,YAAyB,EACzB,UAAkB;QAElB,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,UAAU;SACX,CAAC;QAEF,uEAAuE;QACvE,2EAA2E;QAC3E,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO;gBACL,GAAG,IAAI;gBACP,OAAO,EAAE,kBAAkB;gBAC3B,cAAc,EAAE,IAAI;gBACpB,MAAM,EAAE,kBAAkB;gBAC1B,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;aACjG,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,sEAAsE;YACtE,kEAAkE;YAClE,MAAM,YAAY,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACzD,OAAO;gBACL,GAAG,IAAI;gBACP,OAAO,EAAE,cAAc;gBACvB,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc;gBAC9D,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB;gBAC1D,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;aAC3G,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,OAAO;gBACL,GAAG,IAAI;gBACP,OAAO,EAAE,UAAU;gBACnB,cAAc,EAAE,cAAc;gBAC9B,MAAM,EAAE,2BAA2B;gBACnC,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE;aAC1G,CAAC;QACJ,CAAC;QAED,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,UAAU;YACnB,cAAc,EAAE,cAAc;YAC9B,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE;SAC1G,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,aAAqB,iCAAiC;QAC1D,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3B,CAAC,EAAE,UAAU,CAAC,CAAC;QACf,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACzE,IAAI,CAAC,KAAwB,CAAC,KAAK,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;CACF"}

package/daemon/dist/domain/seat-identity-store.d.ts

@@ -0,0 +1,27 @@
+import type Database from "better-sqlite3";
+import type { SeatIdentityVerdict } from "./types.js";
+/**
+ * OPR.0.4.3.19 — explicit, durable store for the per-node liveness identity
+ * verdict (migration 046 `seat_identity_verdicts`). The reconciler writes;
+ * node-inventory reads. Kept as a thin, stateless wrapper over the table so
+ * the liveness truth lives in the DB, never in transient in-memory state
+ * (dev-guard plan-review caveat).
+ *
+ * Reads are DEFENSIVE: fixtures that bypass the canonical migration list (no
+ * `seat_identity_verdicts` table) get an empty map/undefined rather than a
+ * crash — the projection degrades to "no verdict" (never down-ranks), matching
+ * the fail-open-on-unknown contract.
+ */
+export declare class SeatIdentityStore {
+    private readonly db;
+    constructor(db: Database.Database);
+    /** Upsert one node's verdict (last-writer-wins per node). */
+    upsert(v: SeatIdentityVerdict): void;
+    /** Read all verdicts for the nodes of a rig, keyed by node_id. Defensive. */
+    getForRig(rigId: string): Map<string, SeatIdentityVerdict>;
+    /** Read a single node's verdict, or null. Defensive. */
+    getForNode(nodeId: string): SeatIdentityVerdict | null;
+    /** Drop verdicts for nodes no longer in the live set (memory/table hygiene). */
+    pruneExcept(liveNodeIds: string[]): void;
+}
+//# sourceMappingURL=seat-identity-store.d.ts.map

package/daemon/dist/domain/seat-identity-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-identity-store.d.ts","sourceRoot":"","sources":["../../src/domain/seat-identity-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAgCtD;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAiB;IAChB,OAAO,CAAC,QAAQ,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ,CAAC,QAAQ;IAElD,6DAA6D;IAC7D,MAAM,CAAC,CAAC,EAAE,mBAAmB,GAAG,IAAI;IA6BpC,6EAA6E;IAC7E,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAe1D,wDAAwD;IACxD,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAWtD,gFAAgF;IAChF,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI;CAczC"}

package/daemon/dist/domain/seat-identity-store.js

@@ -0,0 +1,106 @@
+function rowToVerdict(row) {
+    return {
+        nodeId: row.node_id,
+        verdict: row.verdict,
+        evidenceSource: row.evidence_source,
+        reason: row.reason,
+        evidence: {
+            registeredPane: row.registered_pane,
+            observedPid: row.observed_pid,
+            observedCommand: row.observed_command,
+            matchedLayer: row.matched_layer,
+        },
+        sessionName: row.session_name,
+        observedAt: row.observed_at,
+    };
+}
+/**
+ * OPR.0.4.3.19 — explicit, durable store for the per-node liveness identity
+ * verdict (migration 046 `seat_identity_verdicts`). The reconciler writes;
+ * node-inventory reads. Kept as a thin, stateless wrapper over the table so
+ * the liveness truth lives in the DB, never in transient in-memory state
+ * (dev-guard plan-review caveat).
+ *
+ * Reads are DEFENSIVE: fixtures that bypass the canonical migration list (no
+ * `seat_identity_verdicts` table) get an empty map/undefined rather than a
+ * crash — the projection degrades to "no verdict" (never down-ranks), matching
+ * the fail-open-on-unknown contract.
+ */
+export class SeatIdentityStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /** Upsert one node's verdict (last-writer-wins per node). */
+    upsert(v) {
+        this.db.prepare(`
+      INSERT INTO seat_identity_verdicts
+        (node_id, verdict, evidence_source, reason, registered_pane, observed_pid, observed_command, matched_layer, session_name, observed_at)
+      VALUES (@node_id, @verdict, @evidence_source, @reason, @registered_pane, @observed_pid, @observed_command, @matched_layer, @session_name, @observed_at)
+      ON CONFLICT(node_id) DO UPDATE SET
+        verdict = excluded.verdict,
+        evidence_source = excluded.evidence_source,
+        reason = excluded.reason,
+        registered_pane = excluded.registered_pane,
+        observed_pid = excluded.observed_pid,
+        observed_command = excluded.observed_command,
+        matched_layer = excluded.matched_layer,
+        session_name = excluded.session_name,
+        observed_at = excluded.observed_at
+    `).run({
+            node_id: v.nodeId,
+            verdict: v.verdict,
+            evidence_source: v.evidenceSource,
+            reason: v.reason,
+            registered_pane: v.evidence.registeredPane,
+            observed_pid: v.evidence.observedPid,
+            observed_command: v.evidence.observedCommand,
+            matched_layer: v.evidence.matchedLayer,
+            session_name: v.sessionName,
+            observed_at: v.observedAt,
+        });
+    }
+    /** Read all verdicts for the nodes of a rig, keyed by node_id. Defensive. */
+    getForRig(rigId) {
+        const out = new Map();
+        try {
+            const rows = this.db.prepare(`
+        SELECT v.* FROM seat_identity_verdicts v
+        JOIN nodes n ON n.id = v.node_id
+        WHERE n.rig_id = ?
+      `).all(rigId);
+            for (const row of rows)
+                out.set(row.node_id, rowToVerdict(row));
+        }
+        catch {
+            // Table absent (partial fixture) — degrade to no verdicts.
+        }
+        return out;
+    }
+    /** Read a single node's verdict, or null. Defensive. */
+    getForNode(nodeId) {
+        try {
+            const row = this.db.prepare("SELECT * FROM seat_identity_verdicts WHERE node_id = ?").get(nodeId);
+            return row ? rowToVerdict(row) : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /** Drop verdicts for nodes no longer in the live set (memory/table hygiene). */
+    pruneExcept(liveNodeIds) {
+        try {
+            const existing = this.db.prepare("SELECT node_id FROM seat_identity_verdicts").all();
+            const live = new Set(liveNodeIds);
+            const del = this.db.prepare("DELETE FROM seat_identity_verdicts WHERE node_id = ?");
+            for (const r of existing) {
+                if (!live.has(r.node_id))
+                    del.run(r.node_id);
+            }
+        }
+        catch {
+            // Table absent — nothing to prune.
+        }
+    }
+}
+//# sourceMappingURL=seat-identity-store.js.map

package/daemon/dist/domain/seat-identity-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-identity-store.js","sourceRoot":"","sources":["../../src/domain/seat-identity-store.ts"],"names":[],"mappings":"AAgBA,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,OAAO,EAAE,GAAG,CAAC,OAAyC;QACtD,cAAc,EAAE,GAAG,CAAC,eAAwD;QAC5E,MAAM,EAAE,GAAG,CAAC,MAAuC;QACnD,QAAQ,EAAE;YACR,cAAc,EAAE,GAAG,CAAC,eAAe;YACnC,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,eAAe,EAAE,GAAG,CAAC,gBAAgB;YACrC,YAAY,EAAE,GAAG,CAAC,aAAa;SAChC;QACD,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,6DAA6D;IAC7D,MAAM,CAAC,CAAsB;QAC3B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;KAcf,CAAC,CAAC,GAAG,CAAC;YACL,OAAO,EAAE,CAAC,CAAC,MAAM;YACjB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,eAAe,EAAE,CAAC,CAAC,cAAc;YACjC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc;YAC1C,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW;YACpC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe;YAC5C,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY;YACtC,YAAY,EAAE,CAAC,CAAC,WAAW;YAC3B,WAAW,EAAE,CAAC,CAAC,UAAU;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,SAAS,CAAC,KAAa;QACrB,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;OAI5B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAiB,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,wDAAwD;IACxD,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,wDAAwD,CACzD,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAC;YACxC,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,WAAW,CAAC,WAAqB;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B,4CAA4C,CAC7C,CAAC,GAAG,EAAgC,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC;YACpF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;CACF"}

package/daemon/dist/domain/seat-switch-client-service.d.ts

@@ -0,0 +1,57 @@
+import type { RigRepository } from "./rig-repository.js";
+import type { TmuxAdapter } from "../adapters/tmux.js";
+export interface SeatSwitchClientRequest {
+    seatRef: string;
+    /** Target a specific attached client; required when multiple are attached. */
+    client?: string | null;
+    /** Target window index; defaults to 0 (the canonical seat window). */
+    toWindow?: number | null;
+}
+export interface SeatSwitchClientSuccess {
+    seat_ref: string;
+    session: string;
+    window: number;
+    target: string;
+    client: string;
+    /** VIEW-ONLY marker: switch-client never mutates routing/bindings/identity. */
+    mutated: false;
+    retargeted: true;
+}
+interface ClientRef {
+    name: string;
+    session: string;
+}
+export type SeatSwitchClientResult = {
+    ok: true;
+    result: SeatSwitchClientSuccess;
+} | {
+    ok: false;
+    code: "seat_ref_required" | "seat_not_found" | "seat_ambiguous" | "missing_canonical_session" | "session_not_found" | "window_not_found" | "no_client" | "ambiguous_client" | "client_not_found" | "switch_failed" | "tmux_probe_failed";
+    message: string;
+    guidance?: string;
+    /** Attached clients, surfaced on the ambiguous / not-found paths so the
+     *  operator can re-run with an explicit --client. */
+    clients?: ClientRef[];
+    matches?: Array<{
+        rig_name: string;
+        logical_id: string;
+        current_occupant: string | null;
+    }>;
+};
+export declare class SeatSwitchClientService {
+    private rigRepo;
+    private tmuxAdapter;
+    constructor(deps: {
+        rigRepo: RigRepository;
+        tmuxAdapter: TmuxAdapter;
+    });
+    /** Honest probe-failure result. The tmux adapter intentionally RETHROWS
+     *  unexpected probe failures (permission / socket errors). Every probe here
+     *  (hasSession / listWindows / listClients) routes a throw through this so it
+     *  surfaces as a structured tmux_probe_failed (-> HTTP 502) that names the
+     *  failed operation, never an unstructured 500. */
+    private probeFailed;
+    switchClient(req: SeatSwitchClientRequest): Promise<SeatSwitchClientResult>;
+}
+export {};
+//# sourceMappingURL=seat-switch-client-service.d.ts.map

package/daemon/dist/domain/seat-switch-client-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-switch-client-service.d.ts","sourceRoot":"","sources":["../../src/domain/seat-switch-client-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAA0B,MAAM,qBAAqB,CAAC;AAuB/E,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,OAAO,EAAE,KAAK,CAAC;IACf,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAC7C;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EACA,mBAAmB,GACnB,gBAAgB,GAChB,gBAAgB,GAChB,2BAA2B,GAC3B,mBAAmB,GACnB,kBAAkB,GAClB,WAAW,GACX,kBAAkB,GAClB,kBAAkB,GAClB,eAAe,GACf,mBAAmB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;yDACqD;IACrD,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAC5F,CAAC;AAEN,qBAAa,uBAAuB;IAClC,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,WAAW,CAAc;gBAErB,IAAI,EAAE;QAAE,OAAO,EAAE,aAAa,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE;IAKtE;;;;uDAImD;IACnD,OAAO,CAAC,WAAW;IASb,YAAY,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAmIlF"}

package/daemon/dist/domain/seat-switch-client-service.js

@@ -0,0 +1,168 @@
+import { SeatStatusService } from "./seat-status-service.js";
+/**
+ * OPR.0.4.3.26 — seat-recovery switch-client VIEW retarget.
+ *
+ * Points an already-attached tmux client (a human terminal / CMUX tile) at the
+ * seat's canonical session/window. It is deliberately VIEW-ONLY: the only
+ * dependencies are `rigRepo` (read, via SeatStatusService) and `tmuxAdapter`
+ * (probe + switch). It holds NO SessionRegistry write surface, NO ClaimService,
+ * NO SeatHandoverService, and never calls converge/reconcile — so it is
+ * structurally incapable of mutating routing, bindings, sessions, transcripts,
+ * or node identity. It composes AFTER the routing-repair verbs
+ * (`reconcile-session` / seat handover) as a distinct step.
+ */
+const RECONCILE_GUIDANCE = "Repair routing first (rig reconcile-session <session>, or rig seat handover <seat> ...), then re-run switch-client. switch-client only retargets a client's view; it never repairs routing.";
+function attachGuidance(session) {
+    return `Attach a client first: tmux attach -t ${session} (or open the seat in CMUX), then re-run switch-client. switch-client never opens a new terminal.`;
+}
+export class SeatSwitchClientService {
+    rigRepo;
+    tmuxAdapter;
+    constructor(deps) {
+        this.rigRepo = deps.rigRepo;
+        this.tmuxAdapter = deps.tmuxAdapter;
+    }
+    /** Honest probe-failure result. The tmux adapter intentionally RETHROWS
+     *  unexpected probe failures (permission / socket errors). Every probe here
+     *  (hasSession / listWindows / listClients) routes a throw through this so it
+     *  surfaces as a structured tmux_probe_failed (-> HTTP 502) that names the
+     *  failed operation, never an unstructured 500. */
+    probeFailed(operation, err) {
+        return {
+            ok: false,
+            code: "tmux_probe_failed",
+            message: `tmux ${operation} probe failed: ${err instanceof Error ? err.message : String(err)}`,
+            guidance: RECONCILE_GUIDANCE,
+        };
+    }
+    async switchClient(req) {
+        // 1. Resolve seat -> canonical session, READ-ONLY (no binding mutation).
+        const statusService = new SeatStatusService({ rigRepo: this.rigRepo });
+        const status = statusService.getStatus(req.seatRef);
+        if (!status.ok) {
+            // Propagate the read-only resolution errors verbatim (seat_ref_required /
+            // seat_not_found / seat_ambiguous, incl. the ambiguity match list).
+            if (status.code === "seat_ambiguous") {
+                return { ok: false, code: "seat_ambiguous", message: status.message, guidance: status.guidance, matches: status.matches };
+            }
+            return { ok: false, code: status.code, message: status.message, guidance: status.guidance };
+        }
+        const session = status.status.current_occupant;
+        if (!session) {
+            return {
+                ok: false,
+                code: "missing_canonical_session",
+                message: `Seat "${req.seatRef}" has no canonical tmux session to view.`,
+                guidance: RECONCILE_GUIDANCE,
+            };
+        }
+        // 2. Probe the canonical session (read-only). A genuine probe failure
+        //    (permission, etc.) is surfaced honestly rather than swallowed.
+        let sessionLive;
+        try {
+            sessionLive = await this.tmuxAdapter.hasSession(session);
+        }
+        catch (err) {
+            return this.probeFailed(`has-session for "${session}"`, err);
+        }
+        if (!sessionLive) {
+            return {
+                ok: false,
+                code: "session_not_found",
+                message: `Canonical session "${session}" for seat "${req.seatRef}" is not live.`,
+                guidance: RECONCILE_GUIDANCE,
+            };
+        }
+        // 3. Resolve the target window. Default = 0 (the canonical seat window).
+        //    An explicit --to-window is verified against the live session so the
+        //    operator gets actionable guidance, never a raw tmux failure.
+        const windowIndex = req.toWindow ?? 0;
+        if (req.toWindow != null) {
+            let windows;
+            try {
+                windows = await this.tmuxAdapter.listWindows(session);
+            }
+            catch (err) {
+                return this.probeFailed(`list-windows for "${session}"`, err);
+            }
+            if (!windows.some((w) => w.index === req.toWindow)) {
+                const available = windows.map((w) => w.index).join(", ") || "none";
+                return {
+                    ok: false,
+                    code: "window_not_found",
+                    message: `Window ${req.toWindow} does not exist in session "${session}".`,
+                    guidance: `Available windows: ${available}.`,
+                };
+            }
+        }
+        // 4. Select the attached client to retarget.
+        let clients;
+        try {
+            clients = await this.tmuxAdapter.listClients();
+        }
+        catch (err) {
+            return this.probeFailed("list-clients", err);
+        }
+        if (clients.length === 0) {
+            return {
+                ok: false,
+                code: "no_client",
+                message: `No attached tmux client to retarget for seat "${req.seatRef}".`,
+                guidance: attachGuidance(session),
+            };
+        }
+        let targetClient;
+        if (req.client) {
+            const match = clients.find((cl) => cl.name === req.client);
+            if (!match) {
+                return {
+                    ok: false,
+                    code: "client_not_found",
+                    message: `No attached client named "${req.client}".`,
+                    guidance: "Re-run with a --client from the attached clients list.",
+                    clients: clients.map((cl) => ({ name: cl.name, session: cl.session })),
+                };
+            }
+            targetClient = match.name;
+        }
+        else if (clients.length === 1) {
+            targetClient = clients[0].name;
+        }
+        else {
+            // Never silently retarget one of several humans' views — force an
+            // explicit --client selection.
+            return {
+                ok: false,
+                code: "ambiguous_client",
+                message: `Multiple attached clients; specify one with --client <name>.`,
+                guidance: "Re-run with --client set to one of the attached clients.",
+                clients: clients.map((cl) => ({ name: cl.name, session: cl.session })),
+            };
+        }
+        // 5. Retarget the client's VIEW (the only side effect; not a mutation of
+        //    OpenRig routing/identity).
+        const target = `${session}:${windowIndex}`;
+        const switchResult = await this.tmuxAdapter.switchClient(targetClient, target);
+        if (!switchResult.ok) {
+            return {
+                ok: false,
+                code: "switch_failed",
+                message: `tmux switch-client failed: ${switchResult.message}`,
+                guidance: RECONCILE_GUIDANCE,
+            };
+        }
+        return {
+            ok: true,
+            result: {
+                seat_ref: req.seatRef,
+                session,
+                window: windowIndex,
+                target,
+                client: targetClient,
+                mutated: false,
+                retargeted: true,
+            },
+        };
+    }
+}
+//# sourceMappingURL=seat-switch-client-service.js.map

package/daemon/dist/domain/seat-switch-client-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-switch-client-service.js","sourceRoot":"","sources":["../../src/domain/seat-switch-client-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D;;;;;;;;;;;GAWG;AAEH,MAAM,kBAAkB,GACtB,6LAA6L,CAAC;AAEhM,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,yCAAyC,OAAO,mGAAmG,CAAC;AAC7J,CAAC;AAkDD,MAAM,OAAO,uBAAuB;IAC1B,OAAO,CAAgB;IACvB,WAAW,CAAc;IAEjC,YAAY,IAA0D;QACpE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;IAED;;;;uDAImD;IAC3C,WAAW,CAAC,SAAiB,EAAE,GAAY;QACjD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,QAAQ,SAAS,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAC9F,QAAQ,EAAE,kBAAkB;SAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAA4B;QAC7C,yEAAyE;QACzE,MAAM,aAAa,GAAG,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,0EAA0E;YAC1E,oEAAoE;YACpE,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5H,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC9F,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,SAAS,GAAG,CAAC,OAAO,0CAA0C;gBACvE,QAAQ,EAAE,kBAAkB;aAC7B,CAAC;QACJ,CAAC;QAED,sEAAsE;QACtE,oEAAoE;QACpE,IAAI,WAAoB,CAAC;QACzB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,WAAW,CAAC,oBAAoB,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,sBAAsB,OAAO,eAAe,GAAG,CAAC,OAAO,gBAAgB;gBAChF,QAAQ,EAAE,kBAAkB;aAC7B,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,OAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,WAAW,CAAC,qBAAqB,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;gBACnE,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,UAAU,GAAG,CAAC,QAAQ,+BAA+B,OAAO,IAAI;oBACzE,QAAQ,EAAE,sBAAsB,SAAS,GAAG;iBAC7C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,IAAI,OAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,iDAAiD,GAAG,CAAC,OAAO,IAAI;gBACzE,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC;aAClC,CAAC;QACJ,CAAC;QAED,IAAI,YAAoB,CAAC;QACzB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,6BAA6B,GAAG,CAAC,MAAM,IAAI;oBACpD,QAAQ,EAAE,wDAAwD;oBAClE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;iBACvE,CAAC;YACJ,CAAC;YACD,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC;QAC5B,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,YAAY,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,kEAAkE;YAClE,+BAA+B;YAC/B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,8DAA8D;gBACvE,QAAQ,EAAE,0DAA0D;gBACpE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;aACvE,CAAC;QACJ,CAAC;QAED,yEAAyE;QACzE,gCAAgC;QAChC,MAAM,MAAM,GAAG,GAAG,OAAO,IAAI,WAAW,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC/E,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,8BAA8B,YAAY,CAAC,OAAO,EAAE;gBAC7D,QAAQ,EAAE,kBAAkB;aAC7B,CAAC;QACJ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE;gBACN,QAAQ,EAAE,GAAG,CAAC,OAAO;gBACrB,OAAO;gBACP,MAAM,EAAE,WAAW;gBACnB,MAAM;gBACN,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,IAAI;aACjB;SACF,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/domain/self-attach-service.d.ts

@@ -15,6 +15,9 @@ export type SelfAttachSuccess = {
     env: {
         OPENRIG_NODE_ID: string;
         OPENRIG_SESSION_NAME: string;
+        OPENRIG_RUNTIME?: string;
+        OPENRIG_URL?: string;
+        OPENRIG_ACTIVITY_HOOK_TOKEN?: string;
     };
 };
 export type SelfAttachFailureCode = "rig_not_found" | "node_not_found" | "pod_not_found" | "already_bound" | "duplicate_logical_id" | "invalid_member_name" | "runtime_required" | "runtime_mismatch";
@@ -37,6 +40,10 @@ interface SelfAttachServiceDeps {
             tmuxSession?: string | null;
         }): void;
     };
+    activityEnv?: {
+        url?: string;
+        token?: string;
+    };
 }
 interface AttachToNodeOptions {
     rigId: string;
@@ -75,6 +82,7 @@ export declare class SelfAttachService {
     private tmuxAdapter;
     private transcriptStore;
     private claudeContextProvisioner;
+    private activityEnv;
     constructor(deps: SelfAttachServiceDeps);
     attachToNode(opts: AttachToNodeOptions): Promise<SelfAttachResult>;
     attachToPod(opts: AttachToPodOptions): Promise<SelfAttachResult>;

package/daemon/dist/domain/self-attach-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"self-attach-service.d.ts","sourceRoot":"","sources":["../../src/domain/self-attach-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,cAAc,CAAC;IACxC,GAAG,EAAE;QACH,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,sBAAsB,GACtB,qBAAqB,GACrB,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,gBAAgB,GACxB,iBAAiB,GACjB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,UAAU,qBAAqB;IAC7B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,wBAAwB,CAAC,EAAE;QACzB,sBAAsB,CAAC,OAAO,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;KAC7F,CAAC;CACH;AAED,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED,UAAU,kBAAkB;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED,UAAU,wBAAwB;IAChC,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,iBAAiB;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,GAAG,iBAAiB,CAAC;AAE7E,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,wBAAwB,CAA2D;gBAE/E,IAAI,EAAE,qBAAqB;IAejC,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmClE,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAoDxD,kBAAkB;YA0BlB,cAAc;IAuB5B,OAAO,CAAC,mCAAmC;IA6C3C,OAAO,CAAC,cAAc;YAgBR,2BAA2B;IASzC,OAAO,CAAC,8BAA8B;IAetC,OAAO,CAAC,SAAS;CAoBlB"}
+{"version":3,"file":"self-attach-service.d.ts","sourceRoot":"","sources":["../../src/domain/self-attach-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAG7D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,cAAc,CAAC;IACxC,GAAG,EAAE;QACH,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,MAAM,CAAC;QAE7B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,2BAA2B,CAAC,EAAE,MAAM,CAAC;KACtC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,sBAAsB,GACtB,qBAAqB,GACrB,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,gBAAgB,GACxB,iBAAiB,GACjB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,UAAU,qBAAqB;IAC7B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,wBAAwB,CAAC,EAAE;QACzB,sBAAsB,CAAC,OAAO,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,GAAG,IAAI,CAAC;KAC7F,CAAC;IAKF,WAAW,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED,UAAU,mBAAmB;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED,UAAU,kBAAkB;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAED,UAAU,wBAAwB;IAChC,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,iBAAiB;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,GAAG,iBAAiB,CAAC;AAE7E,qBAAa,iBAAiB;IAC5B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,wBAAwB,CAA2D;IAC3F,OAAO,CAAC,WAAW,CAAmC;gBAE1C,IAAI,EAAE,qBAAqB;IAgBjC,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmClE,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAoDxD,kBAAkB;YA0BlB,cAAc;IAuB5B,OAAO,CAAC,mCAAmC;IA6C3C,OAAO,CAAC,cAAc;YAgBR,2BAA2B;IASzC,OAAO,CAAC,8BAA8B;IAetC,OAAO,CAAC,SAAS;CA6BlB"}