@openrig/cli 0.4.4 → 0.4.6

package/daemon/dist/domain/terminal/herdr-transport.js

@@ -0,0 +1,145 @@
+// OPR.0.4.6.02 FB4 — the herdr SOCKET transport (arm's-length AGPL boundary).
+//
+// herdr is an AGPL terminal multiplexer. OpenRig integrates it at ARM'S LENGTH:
+// we talk to its local unix-domain CONTROL SOCKET (a runtime IPC endpoint the
+// operator's installed herdr exposes) exactly the way we shell out to tmux/cmux
+// — a local IPC client, NEVER importing, linking, embedding, or vendoring herdr
+// code. This file only frames JSON on a socket the operator's herdr owns.
+//
+// Why a socket, not the CLI (the FB4 correction): herdr 0.7.1 has NO `layout`
+// CLI command — the prior CLI transport (`herdr layout apply …`) could never
+// tile a view (the VM proof at e373f741 hit `herdr_layout_unsupported`). herdr
+// 0.7.1's layout mechanism is the socket JSON-RPC `layout.apply`, which the
+// slice research validated over the raw socket. The wire protocol here is
+// grounded in the VERBATIM captures preserved at
+// research/herdr-socket-captures/herdr-phase3-*.json:
+//   - socket: ~/.config/herdr/herdr.sock (HERDR_SOCKET_PATH / HERDR_SESSION overrides)
+//   - framing: newline-delimited JSON (one object per line)
+//   - envelope: request {id,method,params} → success {id,result:{type,…}}
+//     (NOT JSON-RPC 2.0 — there is no `jsonrpc` field; some methods, e.g. ping,
+//      may answer with a bare {type,…})
+// The error-response envelope, the exact socket lifecycle, and workspace.create
+// were not captured verbatim; they are handled DEFENSIVELY here and are the
+// first-run-empirical items the fresh VM re-proof must confirm (unproven until
+// that proof artifact lands).
+import net from "node:net";
+import { homedir } from "node:os";
+import path from "node:path";
+/** Resolve the herdr control socket path: env override → per-session → default. */
+export function resolveHerdrSocketPath(env = process.env) {
+    if (env["HERDR_SOCKET_PATH"])
+        return env["HERDR_SOCKET_PATH"];
+    const base = path.join(homedir(), ".config", "herdr");
+    const session = env["HERDR_SESSION"];
+    return session ? path.join(base, "sessions", session, "herdr.sock") : path.join(base, "herdr.sock");
+}
+/** Extract a version token (e.g. from a ping result's `version`, or `herdr --version`). */
+export function parseHerdrVersion(out) {
+    if (typeof out !== "string")
+        return null;
+    const m = out.match(/(\d+\.\d+\.\d+(?:[-.][0-9A-Za-z]+)*)/);
+    return m?.[1] ?? null;
+}
+/**
+ * Normalize a parsed response line to its result body. Accepts BOTH the wrapped
+ * `{id,result:{type,…}}` (layout.apply/workspace.create) and a bare `{type,…}`
+ * (ping) shape, and treats an `{…,error:…}` (uncaptured shape, handled
+ * defensively) or a shapeless line as an error.
+ */
+export function unwrapHerdrResponse(raw) {
+    if (raw && typeof raw === "object") {
+        const obj = raw;
+        if (obj["error"] != null) {
+            const e = obj["error"];
+            throw new Error(`herdr error: ${typeof e === "string" ? e : JSON.stringify(e)}`);
+        }
+        const result = obj["result"];
+        if (result && typeof result === "object")
+            return result;
+        if (typeof obj["type"] === "string")
+            return obj; // bare {type,…} (e.g. pong)
+    }
+    throw new Error(`herdr: unrecognized socket response ${JSON.stringify(raw)}`);
+}
+/**
+ * The REAL unix-socket RPC (node:net). One-shot per request: connect, send one
+ * newline-delimited JSON line, read lines until the one whose `id` matches (or a
+ * bare typed response), then close. Rejects on ENOENT (herdr not running),
+ * timeout, connection error, socket close before a response, or a herdr error.
+ * Injectable so the adapter/tests never open a real socket.
+ */
+export function createHerdrSocketRpc(socketPath = resolveHerdrSocketPath(), timeoutMs = 5000) {
+    return (req) => new Promise((resolve, reject) => {
+        const conn = net.createConnection({ path: socketPath });
+        let buf = "";
+        let settled = false;
+        const finish = (fn) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            conn.destroy();
+            fn();
+        };
+        const timer = setTimeout(() => finish(() => reject(new Error(`herdr socket timeout after ${timeoutMs}ms (${socketPath})`))), timeoutMs);
+        conn.on("connect", () => conn.write(`${JSON.stringify(req)}\n`));
+        conn.on("data", (chunk) => {
+            buf += chunk.toString("utf8");
+            let nl;
+            while ((nl = buf.indexOf("\n")) >= 0) {
+                const line = buf.slice(0, nl).trim();
+                buf = buf.slice(nl + 1);
+                if (!line)
+                    continue;
+                let parsed;
+                try {
+                    parsed = JSON.parse(line);
+                }
+                catch {
+                    continue; // a partial/foreign line — keep reading
+                }
+                const id = parsed?.id;
+                if (id != null && id !== req.id)
+                    continue; // a subscription/other message, not our reply
+                try {
+                    const body = unwrapHerdrResponse(parsed);
+                    finish(() => resolve(body));
+                }
+                catch (err) {
+                    finish(() => reject(err instanceof Error ? err : new Error(String(err))));
+                }
+                return;
+            }
+        });
+        conn.on("error", (err) => finish(() => reject(err)));
+        conn.on("end", () => finish(() => reject(new Error("herdr socket closed before a response"))));
+    });
+}
+/**
+ * The socket transport. `request` sends through the injected RPC with a fresh
+ * id; `probe` sends `ping` and reads `{type:"pong",version,protocol}`
+ * (unreachable / non-pong → alive:false, the honest answer).
+ */
+export function createHerdrSocketTransport(rpc) {
+    return () => {
+        let counter = 0;
+        const nextId = () => `openrig-${(counter += 1)}`;
+        return {
+            async probe() {
+                try {
+                    const pong = await rpc({ id: nextId(), method: "ping", params: {} });
+                    const version = parseHerdrVersion(pong["version"]);
+                    const protocol = typeof pong["protocol"] === "number" ? pong["protocol"] : null;
+                    return { alive: pong["type"] === "pong" || version != null || protocol != null, version, protocol };
+                }
+                catch {
+                    return { alive: false, version: null, protocol: null };
+                }
+            },
+            request(method, params) {
+                return rpc({ id: nextId(), method, params });
+            },
+        };
+    };
+}
+//# sourceMappingURL=herdr-transport.js.map

package/daemon/dist/domain/terminal/herdr-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"herdr-transport.js","sourceRoot":"","sources":["../../../src/domain/terminal/herdr-transport.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,0EAA0E;AAC1E,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,0EAA0E;AAC1E,iDAAiD;AACjD,sDAAsD;AACtD,uFAAuF;AACvF,4DAA4D;AAC5D,0EAA0E;AAC1E,gFAAgF;AAChF,wCAAwC;AACxC,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,8BAA8B;AAE9B,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AA2B7B,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,IAAI,GAAG,CAAC,mBAAmB,CAAC;QAAE,OAAO,GAAG,CAAC,mBAAmB,CAAW,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACtG,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5D,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,gBAAgB,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAqB,CAAC;QACvE,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,OAAO,GAAkB,CAAC,CAAC,4BAA4B;IAC9F,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,aAAqB,sBAAsB,EAAE,EAC7C,SAAS,GAAG,IAAI;IAEhB,OAAO,CAAC,GAAG,EAAE,EAAE,CACb,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACxD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,SAAS,OAAO,UAAU,GAAG,CAAC,CAAC,CAAC,EAClG,SAAS,CACV,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAChC,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACxB,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,wCAAwC;gBACpD,CAAC;gBACD,MAAM,EAAE,GAAI,MAA2B,EAAE,EAAE,CAAC;gBAC5C,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE;oBAAE,SAAS,CAAC,8CAA8C;gBACzF,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;oBACzC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO;YACT,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAmB;IAC5D,OAAO,GAAmB,EAAE;QAC1B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,KAAK,CAAC,KAAK;gBACT,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;oBACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBACnD,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,UAAU,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC5F,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,IAAI,IAAI,IAAI,QAAQ,IAAI,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACtG,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,OAAO,CAAC,MAAc,EAAE,MAAe;gBACrC,OAAO,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/terminal/terminal-provider.d.ts

@@ -0,0 +1,88 @@
+/**
+ * A single provider-neutral pane, fully composed. `paneCommand` is the exact
+ * shell command the provider runs inside the pane (e.g. `tmux attach -t 's'`
+ * or `ssh host tmux attach -r -t 's'`); the provider does not modify it.
+ */
+export interface ComposedPane {
+    /** Canonical session name of the seat this pane attaches to. */
+    seat: string;
+    /** Human pane label — `<agent> · <slice>` per AC-7. */
+    label: string;
+    /** The provider-neutral shell command the pane runs. Composed upstream. */
+    paneCommand: string;
+    /** True when the attach is view-only (`tmux attach -r`) — cross-rig / saved read-only. */
+    readOnly: boolean;
+}
+/** A seat that could not be tiled because it has no live/attachable session. Named, never dropped. */
+export interface AbsentSeat {
+    seat: string;
+    /** Structured host id when the seat is remote; null for a local seat. */
+    host: string | null;
+    reason: string;
+}
+/** A seat that is honestly degraded (e.g. an http-registered host that tiles cannot reach over ssh). */
+export interface DegradedSeat {
+    seat: string;
+    /** Structured host id (degrade is always host-driven). */
+    host: string;
+    reason: string;
+}
+/**
+ * A fully-composed view: the provider-neutral output of `composeView`.
+ * `opened` is the flat tiled set; `pages` is that same set chunked into
+ * fixed-size grids (one provider tab/workspace per page).
+ */
+export interface ComposedView {
+    id: string;
+    opened: ComposedPane[];
+    absent: AbsentSeat[];
+    degraded: DegradedSeat[];
+    /** `opened` chunked into ≤ PANES_PER_PAGE grids; a provider renders one tab per page. */
+    pages: ComposedPane[][];
+}
+/** Provider availability + version + capability map (from a version-adaptive probe). */
+export interface ProviderStatus {
+    provider: string;
+    available: boolean;
+    /** Provider version when the probe could determine it; omitted when unknown. */
+    version?: string;
+    capabilities: Record<string, boolean>;
+}
+/** Liveness of the provider surface itself (herdr: `herdr status`; NOT a daemon ping). */
+export interface ProviderLiveness {
+    alive: boolean;
+    /** Optional honest detail (why not alive / probe note). */
+    detail?: string;
+}
+/**
+ * The result of rendering a composed view. `opened` lists the seats that were
+ * actually placed into panes; `absent`/`degraded` carry forward the composer's
+ * honest-partial classification (a provider may add its own degrades, e.g. a
+ * pane that failed to render). `pages` is the number of grid pages painted.
+ */
+export interface OpenViewResult {
+    provider: string;
+    ok: boolean;
+    opened: string[];
+    absent: AbsentSeat[];
+    degraded: DegradedSeat[];
+    pages: number;
+    /** Present only on a hard provider failure (surface unreachable, layout apply refused). */
+    error?: string;
+    code?: string;
+}
+/**
+ * The provider contract. Three methods only:
+ *  - `status()`   — availability + version + capabilities (version-adaptive probe).
+ *  - `liveness()` — is the provider surface itself up right now.
+ *  - `openView()` — render an already-composed view into the provider surface.
+ *
+ * Pane-command composition is deliberately NOT part of this interface.
+ */
+export interface TerminalProvider {
+    readonly name: string;
+    status(): Promise<ProviderStatus>;
+    liveness(): Promise<ProviderLiveness>;
+    openView(view: ComposedView): Promise<OpenViewResult>;
+}
+//# sourceMappingURL=terminal-provider.d.ts.map

package/daemon/dist/domain/terminal/terminal-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-provider.d.ts","sourceRoot":"","sources":["../../../src/domain/terminal/terminal-provider.ts"],"names":[],"mappings":"AAgBA;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,sGAAsG;AACtG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wGAAwG;AACxG,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,yFAAyF;IACzF,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;CACzB;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,0FAA0F;AAC1F,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAClC,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACvD"}

package/daemon/dist/domain/terminal/terminal-provider.js

@@ -0,0 +1,17 @@
+// OPR.0.4.6.02 C2 — the TerminalProvider abstraction (the CORE seam of the
+// terminal-provider ride).
+//
+// A provider renders an ALREADY-COMPOSED view into its own surface model
+// (herdr workspace/tab/pane; cmux workspace/surface). It NEVER composes the
+// pane command itself — pane-command composition lives entirely in
+// `view-composer.ts`, which emits provider-neutral `ComposedPane.paneCommand`
+// strings. The provider's only job is placement + labeling + liveness. This
+// split keeps the composition rules (local vs ssh vs http honest-degrade,
+// read-only `-r`, paging) in one pure, testable place regardless of which
+// provider paints the tiles.
+//
+// The one shared result shape is `{ opened, absent, degraded }` (BR-6
+// honest-partial): a view that can only partially render says so explicitly —
+// never a silent omission.
+export {};
+//# sourceMappingURL=terminal-provider.js.map

package/daemon/dist/domain/terminal/terminal-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-provider.js","sourceRoot":"","sources":["../../../src/domain/terminal/terminal-provider.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,2BAA2B;AAC3B,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,mEAAmE;AACnE,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,6BAA6B;AAC7B,EAAE;AACF,sEAAsE;AACtE,8EAA8E;AAC9E,2BAA2B"}

package/daemon/dist/domain/terminal/terminal-service.d.ts

@@ -0,0 +1,60 @@
+import type { LiveSeatRow, SavedView, TerminalViewsStore } from "./terminal-views-store.js";
+import type { HostEntry } from "../hosts/hosts-registry-reader.js";
+import type { OpenViewResult, ProviderLiveness, ProviderStatus, TerminalProvider } from "./terminal-provider.js";
+/** The v1 provider name set (herdr = proof-gated primary; cmux = best-effort). */
+export type TerminalProviderName = "herdr" | "cmux";
+export declare const DEFAULT_PROVIDER: TerminalProviderName;
+export interface OpenViewRequest {
+    /** Provider name; defaults to herdr when omitted. */
+    provider?: string;
+    /** The view argument: a rig name | `mission:<id>` | `slice:<id>` | a saved-view id. */
+    view: string;
+}
+/** The `rig terminal views` payload: saved views + the live rig names you can open. */
+export interface ListViewsResult {
+    saved: SavedView[];
+    /** Rig names openable as per-rig derived views (live from the inventory). */
+    rigs: string[];
+}
+/** One provider's doctor line for `rig terminal status`. */
+export interface ProviderStatusReport {
+    name: string;
+    status: ProviderStatus;
+    liveness: ProviderLiveness;
+}
+export interface TerminalStatusResult {
+    providers: ProviderStatusReport[];
+}
+export interface TerminalServiceDeps {
+    /** Resolve a provider name to its adapter, or null for an unknown name. */
+    resolveProvider(name: string): TerminalProvider | null;
+    /** The saved-views store (read paths only from this service). */
+    viewsStore: Pick<TerminalViewsStore, "get" | "list">;
+    /** Live seats of a rig BY NAME; null when no such rig is known (vs [] = a known-but-empty rig). */
+    listRigSeats(rigName: string): Promise<LiveSeatRow[] | null> | LiveSeatRow[] | null;
+    /** Live seats of a pod within a rig (by rig name-or-id + pod namespace); null when the rig/pod is unknown. */
+    listPodSeats(rigArg: string, podNamespace: string): Promise<LiveSeatRow[] | null> | LiveSeatRow[] | null;
+    /** Live seats for a derived scope (`mission:<id>` | `slice:<id>`); null when the scope is unknown/invalid. */
+    listScopeSeats(scope: string): Promise<LiveSeatRow[] | null> | LiveSeatRow[] | null;
+    /** Known rig names (for the `views` listing). */
+    listRigNames(): Promise<string[]> | string[];
+    /** Read-only host resolution for the composer (registry unavailable → null for every id). */
+    resolveHost(id: string): HostEntry | null;
+    /** Local liveness refine — has-session for a local tmux session; remote members are not probed here. */
+    hasSession(tmuxSession: string): Promise<boolean> | boolean;
+}
+export declare class TerminalService {
+    private readonly deps;
+    constructor(deps: TerminalServiceDeps);
+    /** Open a view in the chosen provider. Always returns the one shared result shape. */
+    openView(req: OpenViewRequest): Promise<OpenViewResult>;
+    /** List saved views + the rig names openable as derived views. */
+    listViews(): Promise<ListViewsResult>;
+    /** Provider availability + liveness (doctor). Unknown named provider → empty report for it. */
+    status(providerName?: string): Promise<TerminalStatusResult>;
+    /** Resolve a view argument into composer-ready members (precedence in the file header). */
+    private resolveView;
+    /** Refine local members' liveness with a real has-session probe (a dead seat → absent, honest-partial). */
+    private refineLiveness;
+}
+//# sourceMappingURL=terminal-service.d.ts.map

package/daemon/dist/domain/terminal/terminal-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-service.d.ts","sourceRoot":"","sources":["../../../src/domain/terminal/terminal-service.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EAET,kBAAkB,EACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAEhC,kFAAkF;AAClF,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,MAAM,CAAC;AACpD,eAAO,MAAM,gBAAgB,EAAE,oBAA8B,CAAC;AAE9D,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,uFAAuF;AACvF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,6EAA6E;IAC7E,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,4DAA4D;AAC5D,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,oBAAoB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAAC;IACvD,iEAAiE;IACjE,UAAU,EAAE,IAAI,CAAC,kBAAkB,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC;IACrD,mGAAmG;IACnG,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;IACpF,8GAA8G;IAC9G,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;IACzG,8GAA8G;IAC9G,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;IACpF,iDAAiD;IACjD,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC;IAC7C,6FAA6F;IAC7F,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAC;IAC1C,wGAAwG;IACxG,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC7D;AA0BD,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,mBAAmB;IAEtD,sFAAsF;IAChF,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;IA4B7D,kEAAkE;IAC5D,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAO3C,+FAA+F;IACzF,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkBlE,2FAA2F;YAC7E,WAAW;IAyDzB,2GAA2G;YAC7F,cAAc;CAW7B"}

package/daemon/dist/domain/terminal/terminal-service.js

@@ -0,0 +1,174 @@
+// OPR.0.4.6.02 C3 — the TerminalService orchestrator.
+//
+// ONE daemon-side composer for EVERY view kind (arch R1 / guard b1): the
+// canonical route and the CLI both call this, so there is never a second
+// composition path. It resolves a view ARGUMENT into composer-ready members,
+// composes them into a provider-neutral `ComposedView` (the pure `composeView`
+// owns the local/ssh/http/read-only partition rules), and hands that to the
+// chosen `TerminalProvider`. It adds no pixel logic and no provider-specific
+// branching — the provider paints, the composer partitions, this service only
+// RESOLVES + ROUTES.
+//
+// View argument resolution (precedence):
+//   1. `mission:<id>` / `slice:<id>`  → derived, LIVE from the review agents
+//      band; READ-ONLY by construction (a cross-rig observational grouping —
+//      AC-3 "another rig's agents ... read-only"). Never persisted (A3).
+//   2. a rig NAME                      → per-rig derived, LIVE from the node
+//      inventory; INTERACTIVE (you asked for that rig, you drive it — AC-1c).
+//   3. a saved-view id                 → from `terminal-views.yaml`; per-member
+//      read-only as the operator saved it.
+//   Anything else → a named `view_not_found` (never a silent empty open).
+//
+// The read-only policy above is a v1 build decision grounded in AC-1c/AC-3
+// (interactive rig view vs read-only cross-rig/derived view); it is NAMED here
+// for the guard/QA gates, not silently absorbed. Saved views carry their own
+// per-member read-only, so an operator can save an interactive multi-rig view
+// deliberately.
+//
+// The one shared result shape is `OpenViewResult { opened, absent, degraded }`
+// (arch Q3): this service returns it for resolution failures too (view/provider
+// not found), so the route JSON and the CLI JSON carry ONE contract for every
+// outcome.
+import { composeView } from "./view-composer.js";
+// deriveViewMembers is a VALUE exported by the views store (not the composer).
+import { deriveViewMembers } from "./terminal-views-store.js";
+export const DEFAULT_PROVIDER = "herdr";
+/** Build the one shared result shape for a pre-provider failure (view/provider not found). */
+function errorResult(provider, code, error) {
+    return { provider, ok: false, opened: [], absent: [], degraded: [], pages: 0, error, code };
+}
+/** Map a persisted saved-view member to a composer input (defaults filled; alive refined later). */
+function savedMemberToInput(m) {
+    return {
+        seat: m.seat,
+        label: m.label ?? m.seat,
+        // A local saved member without an explicit tmuxSession falls back to the
+        // seat's canonical name (the common local seat == session case); a wrong
+        // guess simply lands the seat in absent[] at compose time (honest).
+        tmuxSession: m.tmuxSession ?? m.seat,
+        host: m.host ?? null,
+        readOnly: m.readOnly === true,
+        // Refined by refineLiveness for local members; remote members are routed by
+        // the composer regardless (ssh reachability is not a has-session concern).
+        alive: true,
+    };
+}
+export class TerminalService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** Open a view in the chosen provider. Always returns the one shared result shape. */
+    async openView(req) {
+        const providerName = (req.provider ?? DEFAULT_PROVIDER).trim() || DEFAULT_PROVIDER;
+        const provider = this.deps.resolveProvider(providerName);
+        if (!provider) {
+            return errorResult(providerName, "unknown_provider", `unknown provider '${providerName}' — expected herdr or cmux`);
+        }
+        const view = (req.view ?? "").trim();
+        if (!view) {
+            return errorResult(providerName, "view_required", "a view argument is required (a rig name, mission:<id>, slice:<id>, or a saved-view id)");
+        }
+        const resolved = await this.resolveView(view);
+        if ("code" in resolved) {
+            return errorResult(providerName, resolved.code, resolved.error);
+        }
+        const refined = await this.refineLiveness(resolved.members);
+        const composed = composeView(resolved.id, refined, {
+            resolveHost: (id) => this.deps.resolveHost(id),
+        });
+        return provider.openView(composed);
+    }
+    /** List saved views + the rig names openable as derived views. */
+    async listViews() {
+        return {
+            saved: this.deps.viewsStore.list(),
+            rigs: await this.deps.listRigNames(),
+        };
+    }
+    /** Provider availability + liveness (doctor). Unknown named provider → empty report for it. */
+    async status(providerName) {
+        const names = providerName ? [providerName] : ["herdr", "cmux"];
+        const providers = [];
+        for (const name of names) {
+            const p = this.deps.resolveProvider(name);
+            if (!p) {
+                providers.push({
+                    name,
+                    status: { provider: name, available: false, capabilities: {} },
+                    liveness: { alive: false, detail: `unknown provider '${name}'` },
+                });
+                continue;
+            }
+            providers.push({ name, status: await p.status(), liveness: await p.liveness() });
+        }
+        return { providers };
+    }
+    /** Resolve a view argument into composer-ready members (precedence in the file header). */
+    async resolveView(view) {
+        // 1. derived scope prefixes → live, read-only, never persisted.
+        if (view.startsWith("mission:") || view.startsWith("slice:")) {
+            const rows = await this.deps.listScopeSeats(view);
+            if (rows == null) {
+                return { code: "view_not_found", error: `unknown or invalid scope '${view}'` };
+            }
+            return {
+                id: view,
+                members: deriveViewMembers(rows, { readOnly: true, labelSuffix: view }),
+            };
+        }
+        // 2. a pod within a rig — `pod:<rig-id-or-name>/<podNamespace>` (AC-5 launcher
+        //    target). Interactive (a subset of your own rig).
+        if (view.startsWith("pod:")) {
+            const rest = view.slice("pod:".length);
+            const slash = rest.lastIndexOf("/");
+            if (slash <= 0 || slash === rest.length - 1) {
+                return { code: "view_not_found", error: `malformed pod view '${view}' — expected pod:<rig>/<pod>` };
+            }
+            const rows = await this.deps.listPodSeats(rest.slice(0, slash), rest.slice(slash + 1));
+            if (rows == null) {
+                return { code: "view_not_found", error: `unknown pod '${rest.slice(slash + 1)}' in rig '${rest.slice(0, slash)}'` };
+            }
+            return { id: view, members: deriveViewMembers(rows, { readOnly: false }) };
+        }
+        // 3. a rig — either the bare name (the common case: `rig terminal open acme`)
+        //    or the explicit `rig:<id-or-name>` form the rig-scoped route alias
+        //    composes (arch R1: the alias just prefixes `rig:<rigId>` and delegates,
+        //    zero composition logic of its own). `listRigSeats` resolves the arg as
+        //    a rig name first, then as a rig id.
+        const explicitRig = view.startsWith("rig:");
+        const rigArg = explicitRig ? view.slice("rig:".length) : view;
+        const rigRows = await this.deps.listRigSeats(rigArg);
+        if (rigRows != null) {
+            return { id: `rig:${rigArg}`, members: deriveViewMembers(rigRows, { readOnly: false }) };
+        }
+        // An explicit `rig:<x>` that resolves to no rig is a named not-found — it must
+        // NOT fall through to the saved-view lookup (the caller asked for a rig).
+        if (explicitRig) {
+            return { code: "view_not_found", error: `unknown rig '${rigArg}'` };
+        }
+        // 4. a saved-view id.
+        const saved = this.deps.viewsStore.get(view);
+        if (saved) {
+            return { id: saved.id, members: saved.members.map(savedMemberToInput) };
+        }
+        return {
+            code: "view_not_found",
+            error: `unknown view '${view}' — not a known rig, a mission:/slice: scope, or a saved-view id`,
+        };
+    }
+    /** Refine local members' liveness with a real has-session probe (a dead seat → absent, honest-partial). */
+    async refineLiveness(members) {
+        const out = [];
+        for (const m of members) {
+            if (m.host === null && m.tmuxSession) {
+                out.push({ ...m, alive: await this.deps.hasSession(m.tmuxSession) });
+            }
+            else {
+                out.push(m);
+            }
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=terminal-service.js.map

package/daemon/dist/domain/terminal/terminal-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-service.js","sourceRoot":"","sources":["../../../src/domain/terminal/terminal-service.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,qBAAqB;AACrB,EAAE;AACF,yCAAyC;AACzC,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,2CAA2C;AAC3C,0EAA0E;AAC1E,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,gBAAgB;AAChB,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,WAAW;AAEX,OAAO,EAAE,WAAW,EAAwB,MAAM,oBAAoB,CAAC;AACvE,+EAA+E;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAiB9D,MAAM,CAAC,MAAM,gBAAgB,GAAyB,OAAO,CAAC;AA8C9D,8FAA8F;AAC9F,SAAS,WAAW,CAAC,QAAgB,EAAE,IAAY,EAAE,KAAa;IAChE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC9F,CAAC;AAED,oGAAoG;AACpG,SAAS,kBAAkB,CAAC,CAAkB;IAC5C,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI;QACxB,yEAAyE;QACzE,yEAAyE;QACzE,oEAAoE;QACpE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI;QACpC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;QAC7B,4EAA4E;QAC5E,2EAA2E;QAC3E,KAAK,EAAE,IAAI;KACZ,CAAC;AACJ,CAAC;AAID,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,IAAyB;QAAzB,SAAI,GAAJ,IAAI,CAAqB;IAAG,CAAC;IAE1D,sFAAsF;IACtF,KAAK,CAAC,QAAQ,CAAC,GAAoB;QACjC,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,gBAAgB,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB,CAAC;QACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,WAAW,CAChB,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,YAAY,4BAA4B,CAC9D,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,WAAW,CAAC,YAAY,EAAE,eAAe,EAAE,wFAAwF,CAAC,CAAC;QAC9I,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;YACvB,OAAO,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE;YACjD,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;SAC/C,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,SAAS;QACb,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;YAClC,IAAI,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;SACrC,CAAC;IACJ,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,MAAM,CAAC,YAAqB;QAChC,MAAM,KAAK,GAAa,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI;oBACJ,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE;oBAC9D,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,IAAI,GAAG,EAAE;iBACjE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,CAAC;IACvB,CAAC;IAED,2FAA2F;IACnF,KAAK,CAAC,WAAW,CAAC,IAAY;QACpC,gEAAgE;QAChE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;gBACjB,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,6BAA6B,IAAI,GAAG,EAAE,CAAC;YACjF,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;aACxE,CAAC;QACJ,CAAC;QAED,+EAA+E;QAC/E,sDAAsD;QACtD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5C,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,IAAI,8BAA8B,EAAE,CAAC;YACtG,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACvF,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;gBACjB,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YACtH,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC7E,CAAC;QAED,8EAA8E;QAC9E,wEAAwE;QACxE,6EAA6E;QAC7E,4EAA4E;QAC5E,yCAAyC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,OAAO,MAAM,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3F,CAAC;QACD,+EAA+E;QAC/E,0EAA0E;QAC1E,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,MAAM,GAAG,EAAE,CAAC;QACtE,CAAC;QAED,sBAAsB;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC1E,CAAC;QAED,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,iBAAiB,IAAI,kEAAkE;SAC/F,CAAC;IACJ,CAAC;IAED,2GAA2G;IACnG,KAAK,CAAC,cAAc,CAAC,OAA0B;QACrD,MAAM,GAAG,GAAsB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACrC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/daemon/dist/domain/terminal/terminal-views-store.d.ts

@@ -0,0 +1,77 @@
+import type { ViewMemberInput } from "./view-composer.js";
+/** One persisted member of a saved view. Optionals are omitted-when-absent on write. */
+export interface SavedViewMember {
+    /** Canonical session name of the seat. */
+    seat: string;
+    /** Pane label — `<agent> · <slice>`. */
+    label?: string;
+    /** Structured host id (never a `member@rig@host` string). Omitted for a local seat. */
+    host?: string;
+    /** The tmux session to attach to. */
+    tmuxSession?: string;
+    /** View-only / read-only attach. Omitted (defaults false) when not read-only. */
+    readOnly?: boolean;
+}
+export interface SavedView {
+    id: string;
+    name: string;
+    members: SavedViewMember[];
+}
+export interface TerminalViewsFile {
+    version: 1;
+    views: SavedView[];
+}
+export declare class TerminalViewsStore {
+    private readonly path;
+    constructor(path?: string);
+    /** The resolved on-disk path (useful for tests / diagnostics). */
+    getPath(): string;
+    /**
+     * Read-at-launch. An absent file yields the empty set. A malformed file
+     * throws (honest — never a silent reset that would discard operator layouts).
+     */
+    read(): TerminalViewsFile;
+    list(): SavedView[];
+    get(id: string): SavedView | null;
+    /**
+     * Persist a SAVED view (upsert by id). Atomic (tmp + rename) and byte-stable.
+     * Returns the resulting file. Only accepts `SavedView` — a derived view can
+     * never reach disk through this path (A3).
+     */
+    save(view: SavedView): TerminalViewsFile;
+    /** Remove a saved view by id (idempotent). Atomic. */
+    remove(id: string): TerminalViewsFile;
+    private writeAtomic;
+}
+/**
+ * The minimal structural shape of a live seat row the derived-view mapper
+ * needs. Deliberately a subset (not an import of `NodeInventoryEntry`) so this
+ * module stays free of the inventory's transitive deps and is trivially
+ * testable. Field names match `NodeInventoryEntry`.
+ */
+export interface LiveSeatRow {
+    canonicalSessionName: string | null;
+    /** "tmux" for tmux-backed seats; other kinds have no attachable pane. */
+    attachmentType: string | null;
+    /** The tmux session name (canonical session name for tmux-backed seats). */
+    tmuxSession?: string | null;
+    rigName?: string | null;
+    logicalId?: string | null;
+}
+/** Options controlling how a derived view labels/scopes its members. */
+export interface DeriveOptions {
+    /** Structured host id to stamp on every derived member (remote scope); omit for local. */
+    host?: string | null;
+    /** When true, members attach read-only (`-r`) — cross-rig / view-only derived scopes. */
+    readOnly?: boolean;
+    /** Slice/mission label suffix for the pane label (`<agent> · <slice>`); optional. */
+    labelSuffix?: string;
+}
+/**
+ * Map a live seat inventory into composer-ready members. PURE and IN-MEMORY —
+ * the result is handed straight to `composeView`; it is NEVER written to the
+ * saved-views file. Non-tmux / session-less rows are dropped from the derived
+ * set (a derived view only tiles attachable seats; saved views name absents).
+ */
+export declare function deriveViewMembers(rows: LiveSeatRow[], opts?: DeriveOptions): ViewMemberInput[];
+//# sourceMappingURL=terminal-views-store.d.ts.map

package/daemon/dist/domain/terminal/terminal-views-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-views-store.d.ts","sourceRoot":"","sources":["../../../src/domain/terminal/terminal-views-store.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,SAAS,EAAE,CAAC;CACpB;AA2BD,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,GAAE,MAAqD;IAExF,kEAAkE;IAClE,OAAO,IAAI,MAAM;IAIjB;;;OAGG;IACH,IAAI,IAAI,iBAAiB;IAgBzB,IAAI,IAAI,SAAS,EAAE;IAInB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAIjC;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,SAAS,GAAG,iBAAiB;IAWxC,sDAAsD;IACtD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB;IAUrC,OAAO,CAAC,WAAW;CAKpB;AAID;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,yEAAyE;IACzE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,yFAAyF;IACzF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qFAAqF;IACrF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,WAAW,EAAE,EACnB,IAAI,GAAE,aAAkB,GACvB,eAAe,EAAE,CAsBnB"}