@openrig/cli 0.4.4 → 0.4.6

package/daemon/specs/agents/shared/skills/core/openrig-herdr/SKILL.md

@@ -0,0 +1,158 @@
+---
+name: openrig-herdr
+description: >
+  Use when opening OpenRig fleet terminals as a herdr wall — turning a rig, pod, mission, slice, or
+  saved view into live interactive agent tiles via `rig terminal`, watching another rig read-only,
+  or driving herdr on an agent's request ("open all my rigs + a mission as views"). Covers the
+  `rig terminal open|views|status` verbs, the honest-partial/degrade reading of the result, the
+  read-only-by-construction rail for cross-rig views, scroll/copy out of the box, and the
+  same-size-only duplicate-pane limit. herdr is the default, proof-gated provider.
+metadata:
+  openrig:
+    stage: candidate
+    distribution_scope: product-bound
+    source_evidence: |
+      Empirical herdr 0.7.1 hands-on findings + the ratified implementation PRD. Authored
+      clean-room (patterns only, no herdr source text; AGPL arm's-length).
+    transfer_test: pending
+    sibling_skills:
+      - openrig-cmux
+      - openrig-user
+---
+
+# openrig-herdr
+
+OpenRig decides **which** agents make up a view (a rig, a pod, a mission, a slice, or a saved
+group); **herdr** renders the pixels. A view opens as live, interactive terminal tiles — each tile
+is a nested `tmux attach` to a daemon-owned agent session, so you get the real session, not a
+snapshot. OpenRig owns the semantics; herdr owns the surface. You drive it entirely through the
+`rig terminal` CLI, which rides the installed herdr binary at arm's length — never link, embed, or
+plugin it.
+
+## The whole surface — three verbs
+
+```bash
+rig terminal open <view> [--provider herdr|cmux] [--json]   # herdr is the default provider
+rig terminal views [--json]                                 # list openable views (saved + derived)
+rig terminal status [--provider] [--json]                   # provider liveness / health
+```
+
+`<view>` resolves, in order, to one of:
+- a **rig name** — every live agent in that rig, auto-laid-out;
+- **`pod:<rig>/<podNamespace>`** — every live agent in one pod of a rig (the rig's inventory filtered by pod);
+- **`mission:<id>`** — the agents working that mission (derived live from topology);
+- **`slice:<id>`** — the agents working that slice (derived live);
+- a **saved-view name** — a user-defined group (see Saved views).
+
+## Compose a view from a sentence
+
+An agent asked "open all my rigs plus a mission as views" runs one `open` per target:
+
+```bash
+rig terminal open acme-web                     # a whole rig, live agents as tiles
+rig terminal open mission:site-relaunch        # exactly the agents working the mission
+rig terminal open slice:02-search-filters      # the agents working one slice
+```
+
+No hand-listing of seats: the mission/slice membership is derived from live topology at open time.
+
+## Read the result honestly — partial and degrade
+
+The result is a partition — every seat lands in exactly one bucket, each **named**:
+
+- **opened** — the live agents now showing as tiles.
+- **absent** — seats in the view that aren't currently live: **named and skipped, never silently
+  dropped.** A view that opens *some* of its seats is a success (the partial is disclosed) and exits
+  **0**. Only a view where **no** pane opens exits **non-zero**.
+- **degraded** — an agent that structurally cannot tile, named **with the reason**. The v1 case:
+  an agent on a host registered over HTTP has no ssh path, so its tile can't be composed — it reads
+  as **"host `<id>` is http-registered; tiles need ssh"** and is skipped, never dropped. (ssh-reachable
+  hosts tile via an ssh-wrapped attach; full http-host tiling is deferred to the cross-host transport
+  seam.)
+
+Read `--json` to branch on the partition programmatically; the exit code alone tells you opened-something
+(0) vs opened-nothing (non-zero).
+
+## Read-only — who's interactive, who's watch-only
+
+Read-only is composed into the pane at open time — a read-only tile is a `tmux attach -r`, the client
+reports `readonly=1`, and it **physically cannot send input**. The current policy, by view kind:
+
+- **A rig view or a `pod:` view is interactive** — you asked for that rig (or pod) directly, so you
+  can drive its agents.
+- **`mission:` and `slice:` views are read-only by construction** — these derived views cut across
+  rigs; you watch and scroll, you don't keystroke into them.
+- **A saved view is per-member** — each member carries its own `readOnly` (omit = interactive;
+  `true` = `attach -r`).
+
+So you don't have to remember to be careful: the view kind (and, for a saved view, the per-member
+flag) sets it at open time.
+
+## Safety rails (hard — the fleet-safety rail)
+
+- A tile is a **view** (a nested `tmux attach`) of a daemon-owned session. **Never** move, join, kill,
+  or re-parent a daemon-owned pane. Closing a tile detaches one tmux client — the daemon's session is
+  untouched and its addressing (send/capture/nudge) is unaffected.
+- Host-local read-only viewing mutates nothing. Anything that would change a **live** daemon session's
+  shared state (e.g. flipping a tmux option on a running seat) is a config/design change — prove it in
+  an isolated environment, never live-flip in production.
+
+## Scroll + copy work out of the box
+
+On a freshly-launched agent tile the mouse wheel scrolls the pane's history and a drag-select copies
+to your **system** clipboard — with no tmux commands typed. This rides the daemon's terminal defaults
+(a per-session scroll option set at launch, plus the daemon tmux server's clipboard defaults). Honest
+timing: agents that were already running before this shipped pick up wheel-scroll at their **next
+natural relaunch** (the scroll default is per-session and running seats are never retro-flipped);
+system-clipboard copy works immediately (it's server-wide).
+
+## Limits — state them, don't paper over them
+
+- **Tile chrome v1 = a plain label** (agent + slice). Rich per-tile status is roadmap.
+- **Duplicate / multi-view membership** (the same agent live in two views at once) works — put the
+  duplicates in **same-size panes**. Different-sized duplicate panes have an inherent tmux
+  multi-client resize mismatch (tmux clamps to the smallest client); it is **documented, not fixed** —
+  don't expect a setting to remove it.
+- **Inner tmux status bar** is hidden by default (herdr provides the chrome); one config key
+  (`terminal.status_bar`) flips it back on for raw-tmux / no-provider surfaces, and the flip applies
+  to **future launches only**.
+
+## Saved views — the library (`terminal-views.yaml`)
+
+In v1 you **create** a saved view by **hand-authoring** `terminal-views.yaml` — there is no save/write
+verb (`open` / `views` / `status` are the whole surface; a `rig terminal save <id>` verb is a named
+stretch/follow-up). You **reopen** it like any other view: `rig terminal open <id>`.
+
+The file lives at the OpenRig home root (resolved via `getDefaultOpenRigPath()`), is written
+atomically (tmp + rename), and is byte-stable. **Only hand-authored saved views live here — derived
+views (a rig, `pod:<rig>/<pod>`, `mission:<id>`, `slice:<id>`) are computed live and never written to
+this file.**
+
+Schema — use these field names **exactly**, in this order; **omit** optional fields when absent
+(never write `null`):
+
+```yaml
+version: 1
+views:
+  - id: my-view-id             # required — the id `rig terminal open <id>` takes
+    name: Human Name           # required
+    members:
+      - seat: pod-member@rig    # required — the canonical session name
+        label: agent . slice    # optional — pane label
+        host: some-host-id      # optional — STRUCTURED host id (NEVER a `member@rig@host` string);
+                                #            omit for local. ssh-registered hosts tile;
+                                #            http-registered hosts honest-degrade (named + skipped, with reason)
+        tmuxSession: sessname   # optional — defaults to `seat`
+        readOnly: true          # optional — omit = interactive; true = `tmux attach -r`
+```
+
+An agent composing a saved view on request **writes this YAML** and then opens the id:
+`rig terminal open my-view-id` (add `--provider cmux` for cmux). The library is provider-agnostic —
+the same saved view opens in herdr or cmux.
+
+## AGPL / clean-room
+
+Driving herdr through the `rig terminal` CLI (which talks to the installed herdr binary over its
+CLI/socket) is arm's-length and fine. Do **not** link herdr's source, embed it in-process, or ship a
+herdr plugin — a plugin needs legal review. This skill and its docs are clean-room: patterns only,
+never herdr source text.

package/daemon/specs/agents/shared/skills/core/openrig-user/SKILL.md

@@ -28,7 +28,7 @@ the receipt and move on.
 Example:
 
 ```bash
-rig send velocity-guard@openrig-velocity "Heads up — filing per-commit handoff on slice-22 Bug 1 BONUS at tip 6b8673b6." --verify
+rig send reviewer@acme-web "Heads up — filing the per-commit handoff on the search-filters slice at the current tip." --verify
 ```
 
 ### `rig queue create --source <X> --destination <Y> --tags <...> --body "<...>"` — durable work item
@@ -47,9 +47,9 @@ Example:
 
 ```bash
 rig queue create \
-  --source redo-driver-2@openrig-velocity \
-  --destination redo-guard-2@openrig-velocity \
-  --tags "mission:release-0.3.2,slice:22-rig-up-paper-cut-fix-round,gate:guard,handoff:per-commit,checkpoint:bug-1-bonus" \
+  --source builder@acme-web \
+  --destination reviewer@acme-web \
+  --tags "mission:site-relaunch,slice:02-search-filters,gate:guard,handoff:per-commit,checkpoint:bug-1" \
   --body "$(cat /tmp/per-commit-body.txt)"
 ```
 
@@ -64,8 +64,8 @@ Example:
 
 ```bash
 rig queue handoff qitem-20260601012431-d78aa805 \
-  --to velocity-qa@openrig-velocity \
-  --tags "mission:release-0.3.2,slice:22-rig-up-paper-cut-fix-round,gate:qa,handoff:adversarial-dogfood"
+  --to qa@acme-web \
+  --tags "mission:site-relaunch,slice:02-search-filters,gate:qa,handoff:adversarial-dogfood"
 ```
 
 ### §1b doctrine — turn ends by passing the ball

package/daemon/specs/rigs/launch/factory-rsi/CULTURE.md

@@ -0,0 +1,47 @@
+# factory-rsi — the single-rig RSI factory MVP
+
+This rig IS a recursive-self-improvement loop. One workflow (`factory-rsi`)
+moves one slice through the inner loop **plan → implement → check → review →
+release**. Dogfood is decoupled from that gated loop: it continuously uses the
+**shipped** product out-of-band and feeds its findings into the **next** plan
+cycle. That feedback edge is the whole point — and it needs no human in the loop.
+
+## How the loop runs
+
+- The **engine routes the inner loop**, not the orchestrator. A failing check or
+  review routes back to build for bounded remediation; a clean review proceeds
+  to release prep. Nobody hand-relays a packet around the loop.
+- **Dogfood is out-of-band.** It runs continuously against the SHIPPED product —
+  not a second QA on the pre-release build artifact — and records findings that
+  become the next plan's input. The RSI recursion stays ungated: dogfood findings
+  feed the next plan with no human gate (a human MAY steer via the roadmap but is
+  never required; there is no loop-stop in the MVP).
+- **Findings are recorded state, not memory.** The next plan builds from the
+  recorded dogfood findings — never a seat's chat history.
+- **Exceptions go orchestrator-first** (the WF-5 dial); the human knows at
+  altitude. A `max_hops` trip is an exception, and a resume grants exactly one
+  more bounded window — the loop never runs away.
+- **Publishing is a human act.** The release seat PREPARES notes/docs/PR and
+  holds the ship decision at a human gate. No seat pushes, tags, or publishes.
+
+## The seats
+
+| Seat | Runtime | Does |
+|---|---|---|
+| `plan-planner` | claude-code | turns the corpus / previous findings into ONE buildable slice spec |
+| `build-implementer` | claude-code | builds the slice, produces proof |
+| `check-qa` | codex | checks the artifact; a failing check loops back to build |
+| `review-reviewer` | codex | reviews (cross-runtime vs the builder) |
+| `dogfood-tester` | codex | continuously USES the shipped product out-of-band; records findings that feed the next plan |
+| `release-manager` | claude-code | prepares the release, holds the human gate |
+| `orch-lead` | claude-code | the exception dial target — exceptions only |
+
+Seats inherit their runtime's default model (no per-seat model pin): plan,
+build, release, and orchestration run on claude-code; check, review, and dogfood
+run on codex for cross-runtime diversity against the builder.
+
+## Deployment
+
+As a shipped starter this rig is workspace-agnostic — point
+`rig up factory-rsi --cwd <repo>` at whatever real repository the loop should
+improve, and the planner's product-intent corpus is that repo's real specs.

package/daemon/specs/rigs/launch/factory-rsi/rig.yaml

@@ -0,0 +1,115 @@
+version: "0.2"
+name: factory-rsi
+culture_file: CULTURE.md
+summary: >
+  The single-rig RSI factory MVP (OPR.0.4.6.FAC2): ONE rig whose seats map 1:1
+  to the `factory-rsi` workflow — the inner loop plans, builds, checks, and
+  reviews one slice, then prepares its release. Dogfood is decoupled: it
+  continuously uses the SHIPPED product out-of-band and feeds findings back into
+  the next plan — the recursive-self-improvement edge, with no human required in
+  the loop. Run it with `rig up factory-rsi`, then instantiate the `factory-rsi`
+  workflow and watch the loop close. Seats inherit their runtime's default
+  model; qa, review, and dogfood run on the alternate runtime for cross-runtime
+  diversity against the builder.
+
+# Seven pods, one member each, so every canonical session name is
+# `<pod>-<member>@factory-rsi` and matches the workflow's preferred_targets 1:1.
+pods:
+  - id: plan
+    label: Planning
+    members:
+      - id: planner
+        agent_ref: "local:../../../agents/conveyor/planner"
+        runtime: claude-code
+        profile: default
+        cwd: "."
+    edges: []
+
+  - id: build
+    label: Build
+    members:
+      - id: implementer
+        agent_ref: "local:../../../agents/development/implementer"
+        runtime: claude-code
+        profile: default
+        cwd: "."
+    edges: []
+
+  - id: check
+    label: Check
+    members:
+      - id: qa
+        agent_ref: "local:../../../agents/development/qa"
+        runtime: codex
+        profile: default
+        cwd: "."
+    edges: []
+
+  - id: review
+    label: Review
+    members:
+      - id: reviewer
+        agent_ref: "local:../../../agents/review/independent-reviewer"
+        runtime: codex
+        profile: default
+        cwd: "."
+    edges: []
+
+  - id: dogfood
+    label: Dogfood
+    members:
+      - id: tester
+        agent_ref: "local:../../../agents/factory-rsi/dogfood"
+        runtime: codex
+        profile: default
+        cwd: "."
+    edges: []
+
+  - id: release
+    label: Release
+    members:
+      - id: manager
+        agent_ref: "local:../../../agents/factory-rsi/release-manager"
+        runtime: claude-code
+        profile: default
+        cwd: "."
+    edges: []
+
+  - id: orch
+    label: Orchestration
+    members:
+      - id: lead
+        agent_ref: "local:../../../agents/orchestration/orchestrator"
+        runtime: claude-code
+        profile: default
+        cwd: "."
+    edges: []
+
+# The orchestrator delegates across the pipeline; review and check can observe
+# the build. Workflow ROUTING is the `factory-rsi` spec's job (the engine
+# routes the loop-close); these edges are topology hints, not the routing.
+edges:
+  - kind: delegates_to
+    from: orch.lead
+    to: plan.planner
+  - kind: delegates_to
+    from: orch.lead
+    to: build.implementer
+  - kind: delegates_to
+    from: orch.lead
+    to: check.qa
+  - kind: delegates_to
+    from: orch.lead
+    to: review.reviewer
+  - kind: delegates_to
+    from: orch.lead
+    to: dogfood.tester
+  - kind: delegates_to
+    from: orch.lead
+    to: release.manager
+  - kind: can_observe
+    from: check.qa
+    to: build.implementer
+  - kind: can_observe
+    from: review.reviewer
+    to: build.implementer

package/dist/build-info.js

@@ -1,9 +1,9 @@
 // GENERATED by scripts/build-package.sh — the packaged build-identity stamp.
 export const BUILD_INFO = {
-  semver: "0.4.4",
-  commit: "ac75777a3cad318592dae9d616a09d824f1398e5",
+  semver: "0.4.6",
+  commit: "8250d702a27aa24bb9acf0b4bef12f58fd83df12",
   dirty: false,
-  builtAt: "2026-07-06T08:21:05Z",
+  builtAt: "2026-07-09T22:59:04Z",
 };
 export function stampFields(info = BUILD_INFO) {
   if (!info.commit) return {};

package/dist/commands/broadcast.d.ts

@@ -1,4 +1,9 @@
 import { Command } from "commander";
 import type { StatusDeps } from "./status.js";
-export declare function broadcastCommand(depsOverride?: StatusDeps): Command;
+import { loadHostRegistry } from "../host-registry.js";
+export interface BroadcastDeps extends StatusDeps {
+    /** Test seam: inject a registry loader so no real ~/.openrig is touched. */
+    hostRegistryLoader?: () => ReturnType<typeof loadHostRegistry>;
+}
+export declare function broadcastCommand(depsOverride?: BroadcastDeps): Command;
 //# sourceMappingURL=broadcast.d.ts.map

package/dist/commands/broadcast.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"broadcast.d.ts","sourceRoot":"","sources":["../../src/commands/broadcast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,wBAAgB,gBAAgB,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,OAAO,CAsEnE"}
+{"version":3,"file":"broadcast.d.ts","sourceRoot":"","sources":["../../src/commands/broadcast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAkC,MAAM,qBAAqB,CAAC;AAYvF,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,MAAM,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;CAChE;AAED,wBAAgB,gBAAgB,CAAC,YAAY,CAAC,EAAE,aAAa,GAAG,OAAO,CAiFtE"}

package/dist/commands/broadcast.js

@@ -1,7 +1,18 @@
 import { Command } from "commander";
+import { resolveEffectiveHost } from "../host-selection.js";
 import { DaemonClient } from "../client.js";
 import { getDaemonStatus, getDaemonUrl } from "../daemon-lifecycle.js";
 import { realDeps } from "./daemon.js";
+import { loadHostRegistry, resolveHost, hostDisplayTarget } from "../host-registry.js";
+import { emitCrossHostError, emitRemoteHttpFailure } from "../cross-host-cli-helpers.js";
+import { runRemoteHttpOp } from "../remote-host-ops.js";
+/**
+ * OPR.0.4.6.MH4 C3 — the cross-host broadcast deadline, named at the call
+ * site (arch delivery-lane note (a)): the remote route responds only after
+ * the ORIGIN daemon's per-target fan-out loop completes, so a many-seat rig
+ * needs more than the 5s read-class default.
+ */
+const BROADCAST_REMOTE_TIMEOUT_MS = 30_000;
 export function broadcastCommand(depsOverride) {
     const cmd = new Command("broadcast").description("Send a message to multiple agent sessions");
     const getDeps = () => depsOverride ?? {
@@ -13,6 +24,7 @@ export function broadcastCommand(depsOverride) {
         .option("--rig <name>", "Broadcast to all sessions in a rig")
         .option("--pod <name>", "Broadcast to all sessions in a pod")
         .option("--force", "Send even if targets appear mid-task")
+        .option("--host <id>", "Broadcast on a remote host declared in ~/.openrig/hosts.yaml (http hosts only — CLI-direct to the remote daemon's fan-out)")
         .option("--json", "JSON output for agents")
         .addHelpText("after", `
 Examples:
@@ -20,11 +32,32 @@ Examples:
   rig broadcast --pod dev "New task spec at docs/planning/next-task.md"
   rig broadcast "System maintenance in 5 minutes."
   rig broadcast --rig my-rig "message" --json
+  rig broadcast --host vps-b --rig remote-rig "coordinate the remote factory"
 
 Without --rig or --pod, broadcasts to ALL running tmux sessions plus any attached external_cli nodes across all rigs.
-Unsupported external_cli targets are returned as explicit per-target failures in the result.`)
+Unsupported external_cli targets are returned as explicit per-target failures in the result.
+
+--host broadcasts on a remote host declared in ~/.openrig/hosts.yaml,
+CLI-direct against that daemon's shipped broadcast fan-out (http-registered
+hosts, e.g. pair-registered; an ssh-registered host fails with the structured
+transport-requirement error). The REMOTE daemon resolves --rig/--pod on ITS
+topology and its per-target results print verbatim — a partial fan-out exits
+non-zero exactly as a local one does. The positional is message text (never
+parsed as a target), so broadcast takes --host or the persisted host
+selection, not the agent@rig@host sugar.`)
         .action(async (text, opts) => {
+        // OPR.0.4.6.MH4 C3 — explicit --host > persisted selection. Broadcast
+        // has NO session-target operand (the positional is message text, which
+        // must never be sugar-parsed), so the §4 sugar does not apply here.
+        opts.host = resolveEffectiveHost(opts.host);
         const deps = getDeps();
+        // --- Cross-host path (CLI-direct POST to the remote daemon's shipped
+        // /api/transport/broadcast; its own fan-out engine resolves the
+        // TargetSpec on ITS topology; daemon untouched). ---
+        if (opts.host) {
+            await runCrossHostBroadcast(opts.host, text, opts, deps);
+            return;
+        }
         const status = await getDaemonStatus(deps.lifecycleDeps);
         if (status.state !== "running" || status.healthy === false) {
             console.error("Daemon not running. Start it with: rig daemon start");
@@ -51,21 +84,74 @@ Unsupported external_cli targets are returned as explicit per-target failures in
             process.exitCode = 1;
             return;
         }
-        const data = res.data;
-        const results = data["results"] ?? [];
-        for (const r of results) {
-            if (r.ok) {
-                console.log(`${r.sessionName}: sent`);
-            }
-            else {
-                console.log(`${r.sessionName}: FAILED — ${r.error ?? "unknown error"}`);
-            }
-        }
-        console.log(`${data["sent"]}/${data["total"]} delivered`);
-        if (data["failed"] > 0 || results.some((r) => !r.ok)) {
-            process.exitCode = 1;
-        }
+        renderBroadcastResults(res.data);
     });
     return cmd;
 }
+/**
+ * OPR.0.4.6.MH4 C3 — cross-host broadcast over http, CLI-DIRECT to the
+ * remote daemon's shipped POST /api/transport/broadcast (zero daemon-side
+ * changes). The body is the LOCAL shape verbatim ({text, force, rig?,
+ * pod?}); the ORIGIN daemon's own fan-out engine resolves the TargetSpec on
+ * ITS topology and returns per-target results, printed VERBATIM — per-target
+ * honesty is passthrough, never summarized; a partial fan-out exits non-zero
+ * exactly as the local path does. Deadline: BROADCAST_REMOTE_TIMEOUT_MS
+ * (named — a full fan-out outlives the read-class default).
+ */
+async function runCrossHostBroadcast(hostId, text, opts, deps) {
+    const loader = deps.hostRegistryLoader ?? loadHostRegistry;
+    const registry = loader();
+    if (!registry.ok) {
+        emitCrossHostError(hostId, "registry-load-failed", registry.error, opts.json);
+        return;
+    }
+    const resolved = resolveHost(registry.registry, hostId);
+    if (!resolved.ok) {
+        emitCrossHostError(hostId, "unknown-host", resolved.error, opts.json);
+        return;
+    }
+    const host = resolved.host;
+    const body = { text, force: opts.force };
+    if (opts.rig)
+        body.rig = opts.rig;
+    if (opts.pod)
+        body.pod = opts.pod;
+    const result = await runRemoteHttpOp(hostId, "POST", "/api/transport/broadcast", body, deps, {
+        timeoutMs: BROADCAST_REMOTE_TIMEOUT_MS,
+    });
+    if (opts.json) {
+        console.log(JSON.stringify({
+            cross_host: { host: host.id, target: hostDisplayTarget(host), transport: "http" },
+            result,
+        }));
+        const results = result.data?.["results"] ?? [];
+        if (!result.ok || results.some((r) => !r.ok))
+            process.exitCode = 1;
+        return;
+    }
+    if (!result.ok) {
+        emitRemoteHttpFailure(host.id, hostDisplayTarget(host), result, false);
+        return;
+    }
+    console.log(`[via host=${host.id} (${hostDisplayTarget(host)})]`);
+    renderBroadcastResults((result.data ?? {}));
+}
+/** One renderer, two callers — the remote route returns the same shape the
+ *  local route does, so per-target honesty prints identically. A partial
+ *  fan-out sets a non-zero exit either way. */
+function renderBroadcastResults(data) {
+    const results = data["results"] ?? [];
+    for (const r of results) {
+        if (r.ok) {
+            console.log(`${r.sessionName}: sent`);
+        }
+        else {
+            console.log(`${r.sessionName}: FAILED — ${r.error ?? "unknown error"}`);
+        }
+    }
+    console.log(`${data["sent"]}/${data["total"]} delivered`);
+    if (data["failed"] > 0 || results.some((r) => !r.ok)) {
+        process.exitCode = 1;
+    }
+}
 //# sourceMappingURL=broadcast.js.map

package/dist/commands/broadcast.js.map

@@ -1 +1 @@
-{"version":3,"file":"broadcast.js","sourceRoot":"","sources":["../../src/commands/broadcast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,MAAM,UAAU,gBAAgB,CAAC,YAAyB;IACxD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,2CAA2C,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,GAAe,EAAE,CAAC,YAAY,IAAI;QAChD,aAAa,EAAE,QAAQ,EAAE;QACzB,aAAa,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC;KACtD,CAAC;IAEF,GAAG;SACA,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;SAC/C,MAAM,CAAC,cAAc,EAAE,oCAAoC,CAAC;SAC5D,MAAM,CAAC,cAAc,EAAE,oCAAoC,CAAC;SAC5D,MAAM,CAAC,SAAS,EAAE,sCAAsC,CAAC;SACzD,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,WAAW,CAAC,OAAO,EAAE;;;;;;;;6FAQmE,CAAC;SACzF,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAAqE,EAAE,EAAE;QACpG,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEzD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC3D,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAClE,IAAI,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAElC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAA0B,0BAA0B,EAAE,IAAI,CAAC,CAAC;QAEzF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACtC,MAAM,OAAO,GAAK,GAAG,CAAC,IAAgC,CAAC,SAAS,CAAwC,IAAI,EAAE,CAAC;YAC/G,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,KAAK,GAAI,GAAG,CAAC,IAAgC,CAAC,OAAO,CAAuB,CAAC;YACnF,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,0BAA0B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAA+B,CAAC;QACjD,MAAM,OAAO,GAAI,IAAI,CAAC,SAAS,CAAiE,IAAI,EAAE,CAAC;QACvG,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;gBACT,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,cAAc,CAAC,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE1D,IAAK,IAAI,CAAC,QAAQ,CAAY,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"broadcast.js","sourceRoot":"","sources":["../../src/commands/broadcast.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD;;;;;GAKG;AACH,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAO3C,MAAM,UAAU,gBAAgB,CAAC,YAA4B;IAC3D,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,2CAA2C,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,GAAkB,EAAE,CAAC,YAAY,IAAI;QACnD,aAAa,EAAE,QAAQ,EAAE;QACzB,aAAa,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC;KACtD,CAAC;IAEF,GAAG;SACA,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;SAC/C,MAAM,CAAC,cAAc,EAAE,oCAAoC,CAAC;SAC5D,MAAM,CAAC,cAAc,EAAE,oCAAoC,CAAC;SAC5D,MAAM,CAAC,SAAS,EAAE,sCAAsC,CAAC;SACzD,MAAM,CAAC,aAAa,EAAE,4HAA4H,CAAC;SACnJ,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;yCAkBe,CAAC;SACrC,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAAoF,EAAE,EAAE;QACnH,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QAEvB,sEAAsE;QACtE,gEAAgE;QAChE,qDAAqD;QACrD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAEzD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC3D,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAClE,IAAI,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QAElC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAA0B,0BAA0B,EAAE,IAAI,CAAC,CAAC;QAEzF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YACtC,MAAM,OAAO,GAAK,GAAG,CAAC,IAAgC,CAAC,SAAS,CAAwC,IAAI,EAAE,CAAC;YAC/G,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YAC1E,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,KAAK,GAAI,GAAG,CAAC,IAAgC,CAAC,OAAO,CAAuB,CAAC;YACnF,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,0BAA0B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,sBAAsB,CAAC,GAAG,CAAC,IAA+B,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEL,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,qBAAqB,CAClC,MAAc,EACd,IAAY,EACZ,IAAqE,EACrE,IAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,IAAI,gBAAgB,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,kBAAkB,CAAC,MAAM,EAAE,sBAAsB,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAE3B,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAClE,IAAI,IAAI,CAAC,GAAG;QAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IAClC,IAAI,IAAI,CAAC,GAAG;QAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IAElC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,IAAI,EAAE,IAAI,EAAE;QAC3F,SAAS,EAAE,2BAA2B;KACvC,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE;YACjF,MAAM;SACP,CAAC,CAAC,CAAC;QACJ,MAAM,OAAO,GAAK,MAAM,CAAC,IAA4C,EAAE,CAAC,SAAS,CAAwC,IAAI,EAAE,CAAC;QAChI,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,EAAE,KAAK,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,sBAAsB,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC,CAAC;AACzE,CAAC;AAED;;+CAE+C;AAC/C,SAAS,sBAAsB,CAAC,IAA6B;IAC3D,MAAM,OAAO,GAAI,IAAI,CAAC,SAAS,CAAiE,IAAI,EAAE,CAAC;IACvG,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,cAAc,CAAC,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAE1D,IAAK,IAAI,CAAC,QAAQ,CAAY,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACjE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/commands/capture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capture.d.ts","sourceRoot":"","sources":["../../src/commands/capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAkC,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAG9F,MAAM,WAAW,WAAY,SAAQ,UAAU;IAC7C,kBAAkB,CAAC,EAAE,MAAM,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAC/D,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC/C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,IAAI,CAAC,EAAE,uBAAuB,KAC3B,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAC7C;AAED,wBAAgB,cAAc,CAAC,YAAY,CAAC,EAAE,WAAW,GAAG,OAAO,CA0FlE"}
+{"version":3,"file":"capture.d.ts","sourceRoot":"","sources":["../../src/commands/capture.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAsD,MAAM,qBAAqB,CAAC;AAC3G,OAAO,EAAE,mBAAmB,EAAE,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAK9F,MAAM,WAAW,WAAY,SAAQ,UAAU;IAC7C,kBAAkB,CAAC,EAAE,MAAM,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAC/D,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAC/C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,IAAI,CAAC,EAAE,uBAAuB,KAC3B,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CAC7C;AAED,wBAAgB,cAAc,CAAC,YAAY,CAAC,EAAE,WAAW,GAAG,OAAO,CAsHlE"}