@openrig/cli 0.4.4 → 0.4.7

package/daemon/dist/domain/terminal/herdr-adapter.js

@@ -0,0 +1,307 @@
+// OPR.0.4.6.02 C2+FB4 — the herdr TerminalProvider (the proof-gated primary
+// provider). Arm's-length AGPL: it drives the installed herdr's local control
+// SOCKET through the injected `HerdrTransport` (see herdr-transport.ts) and
+// never links herdr.
+//
+// FB4 (the VM-RED correction): herdr 0.7.1 has NO `layout` CLI command — the
+// prior CLI shape (`herdr layout apply …`) could never tile (proven RED in the
+// VM at e373f741). herdr's real layout mechanism is the socket `layout.apply`,
+// validated verbatim in research/herdr-socket-captures/herdr-phase3-*.json:
+//   request  {id, method:"layout.apply",
+//             params:{workspace_id, tab_label, focus, root}}
+//   root     = {type:"split", direction:"right"|"down", ratio, first, second}
+//              | {type:"pane", label, command:[argv…]}
+//   response {id, result:{type:"layout_apply", layout:{workspace_id, tab_id,…}}}
+//
+// Behavior contract (unchanged from the guard-cleared shape):
+//  - ONE atomic `layout.apply` per grid page — the whole page's panes land in
+//    a single request so a page is never half-tiled.
+//  - FRESH tab/workspace on every relaunch (BR-5, not-replace-idempotent):
+//    each open creates its own workspace (`workspace.create`) and the tab
+//    label embeds a per-launch token — and `layout.apply` itself is
+//    empirically non-idempotent (the four-reapply capture shows a re-apply
+//    minting tab t3, never replacing t2), so a re-open can never clobber a
+//    previous view.
+//  - Pane labels ride the layout.apply pane nodes' `label` field (AC-7
+//    `<agent> · <slice>`) — the captures show the label echoed per pane, so
+//    no separate `pane rename` pass is needed (there is no `pane rename` CLI
+//    to shell anyway).
+//  - The composer's `paneCommand` is a SHELL string (`tmux attach -r -t 's'`,
+//    `ssh 'dest' tmux attach …`); the pane node's `command` is an ARGV array —
+//    so it is carried as `["sh", "-c", paneCommand]`, preserving the composed
+//    quoting byte-for-byte without the adapter re-parsing shell.
+//  - Liveness/availability = the socket `ping` (is the multiplexer's OWN
+//    control socket answering — NOT a daemon server ping; HERDR-FINDINGS #3's
+//    intent, carried to the socket transport). No "layout command" probe: the
+//    CLI help surface is irrelevant to the socket API.
+//  - EQUAL auto-grid cells (OPR.0.4.7.1). The layout tree matches the UI
+//    TerminalLauncher suggestLayout shape exactly — cols=ceil(sqrt(N)),
+//    rows=ceil(N/cols): N=2 → 2×1, N=5 → 3×2, N=7 → 3×3 (cols×rows) — built
+//    as equal right-strips per row combined by equal down-strips, using
+//    first-vs-rest ratios (1/N, then 1/(N-1), …; VM pane.layout-verified).
+//    The prior alternating-0.5 BSP is retired: it rendered N=7 as 4×2 with
+//    one double-width cell. Incomplete rectangles are padded with inert
+//    blank panes (cmux's blank-surface precedent); blanks are never
+//    reported as opened seats.
+//
+// The `workspace.create` response envelope is VM-confirmed (OPR.0.4.7.1):
+// `result.workspace.workspace_id` + `result.tab.tab_id` + `result.root_pane`.
+// Extraction stays null-safe/defensive for older builds (extractWorkspaceId).
+// The create's default tab (a blank pane) is deliberately LEFT ALONE — PM
+// ruling: no tab.close unless live evidence shows a user visibly landing on
+// the blank tab (current evidence shows the populated view tab focused).
+import { autoGridCols } from "../cmux-layout-service.js";
+/** Sentinel host for herdr-surface degrades (a pane herdr itself failed to render). */
+const HERDR_SURFACE_HOST = "herdr";
+/**
+ * Combine N nodes into an equal N-way strip along one direction. PURE.
+ * Equal N-way BSP is first-vs-rest at ratio 1/N, recursively 1/(N-1) —
+ * NOT midpoint 0.5 (the VM-reproduced defect: alternating 0.5 splits gave
+ * N=7 a 4×2 layout with one double-width cell instead of the promised 3×3).
+ */
+export function equalStrip(nodes, direction) {
+    if (nodes.length === 1)
+        return nodes[0];
+    return {
+        type: "split",
+        direction,
+        ratio: 1 / nodes.length,
+        first: nodes[0],
+        second: equalStrip(nodes.slice(1), direction),
+    };
+}
+/** An inert blank pane — pads an incomplete grid rectangle (cmux's blank-surface precedent). */
+function blankPane() {
+    return { type: "pane", label: "", command: ["sh"] };
+}
+/**
+ * Build the EQUAL auto-grid layout tree for one page of panes. PURE. The grid
+ * shape matches the UI TerminalLauncher `suggestLayout` exactly —
+ * cols = ceil(sqrt(N)), rows = ceil(N/cols): N=2 → 2×1, N=5 → 3×2, N=7 → 3×3
+ * (cols×rows). An incomplete rectangle is padded with inert blank panes so
+ * every cell is the same size; blanks are layout filler only — they are never
+ * reported as opened seats. Each real leaf runs the composer's shell
+ * `paneCommand` via `["sh","-c",…]` so the composed quoting (read-only `-r`,
+ * ssh-wrap) is preserved untouched. Rows are built as equal `right` strips,
+ * then combined with equal `down` strips.
+ */
+export function buildGridRoot(panes) {
+    const cols = autoGridCols(panes.length);
+    const rows = Math.ceil(panes.length / cols);
+    const blanks = rows * cols - panes.length;
+    const leaves = panes.map((pane) => ({
+        type: "pane",
+        label: pane.label,
+        command: ["sh", "-c", pane.paneCommand],
+    }));
+    for (let i = 0; i < blanks; i++)
+        leaves.push(blankPane());
+    const rowStrips = [];
+    for (let r = 0; r < rows; r++) {
+        rowStrips.push(equalStrip(leaves.slice(r * cols, (r + 1) * cols), "right"));
+    }
+    return { root: equalStrip(rowStrips, "down"), blanks };
+}
+/**
+ * Build the herdr socket plan for a composed view. PURE — no I/O. Each page
+ * gets a fresh tab labeled `${tabPrefix}:${view.id}#${launchToken}/<pageIndex>`;
+ * two calls with different `launchToken`s produce DIFFERENT labels, which is
+ * exactly the fresh-tab-on-relaunch (not-replace) invariant.
+ */
+export function planHerdrLayout(view, launchToken, tabPrefix = "openrig") {
+    const base = `${tabPrefix}:${view.id}#${launchToken}`;
+    const pages = view.pages.map((page, pageIndex) => {
+        const grid = buildGridRoot(page);
+        return {
+            tabLabel: view.pages.length > 1 ? `${base}/${pageIndex + 1}` : base,
+            root: grid.root,
+            blanks: grid.blanks,
+        };
+    });
+    return { workspaceLabel: base, pages };
+}
+/**
+ * Extract the created workspace's id from a `workspace.create` result body.
+ * The live envelope is VM-confirmed (OPR.0.4.7.1): `result.workspace.
+ * workspace_id` + `result.tab.tab_id` + `result.root_pane` — covered by the
+ * nested-`workspace` home below. The other defensive homes are retained
+ * (top-level `workspace_id`, nested `layout`, bare `id`) for older builds.
+ * Returns null when nothing string-shaped is found (the caller degrades
+ * honestly rather than guessing).
+ */
+export function extractWorkspaceId(result) {
+    const direct = result["workspace_id"];
+    if (typeof direct === "string" && direct)
+        return direct;
+    for (const key of ["workspace", "layout"]) {
+        const nested = result[key];
+        if (nested && typeof nested === "object") {
+            const obj = nested;
+            const id = obj["workspace_id"] ?? obj["id"];
+            if (typeof id === "string" && id)
+                return id;
+        }
+    }
+    const bare = result["id"];
+    if (typeof bare === "string" && bare)
+        return bare;
+    return null;
+}
+export class HerdrAdapter {
+    deps;
+    name = "herdr";
+    transport;
+    newLaunchToken;
+    tabPrefix;
+    launchCounter = 0;
+    constructor(deps) {
+        this.deps = deps;
+        this.transport = deps.transportFactory();
+        this.tabPrefix = deps.tabPrefix ?? "openrig";
+        this.newLaunchToken =
+            deps.newLaunchToken ?? (() => `l${(this.launchCounter += 1)}`);
+    }
+    async status() {
+        try {
+            const probe = await this.transport.probe();
+            return {
+                provider: this.name,
+                available: probe.alive,
+                ...(probe.version ? { version: probe.version } : {}),
+                // The socket answering ping IS the capability surface: layout.apply is
+                // the protocol's layout verb (there is no per-command discovery on
+                // 0.7.1 — `api schema` is absent; HERDR-FINDINGS §3).
+                capabilities: { socket: probe.alive, "layout.apply": probe.alive },
+            };
+        }
+        catch {
+            // An unreachable socket (herdr not running) = honestly unavailable.
+            return { provider: this.name, available: false, capabilities: {} };
+        }
+    }
+    async liveness() {
+        // Liveness is the multiplexer's OWN control socket answering ping.
+        try {
+            const probe = await this.transport.probe();
+            return probe.alive
+                ? { alive: true }
+                : { alive: false, detail: "herdr control socket is not answering ping" };
+        }
+        catch (err) {
+            return { alive: false, detail: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    async openView(view) {
+        const absent = [...view.absent];
+        const degraded = [...view.degraded];
+        const opened = [];
+        // Gate on the socket being alive — the honest "herdr isn't running" refuse.
+        // (No CLI-help "layout command" probe: the socket API is the layout surface.)
+        const probe = await this.transport.probe();
+        if (!probe.alive) {
+            return {
+                provider: this.name,
+                ok: false,
+                opened,
+                absent,
+                degraded,
+                pages: 0,
+                error: "herdr control socket is not answering ping; is herdr running?",
+                code: "herdr_unavailable",
+            };
+        }
+        const launchToken = this.newLaunchToken();
+        const plan = planHerdrLayout(view, launchToken, this.tabPrefix);
+        // Nothing to tile (an all-absent/degraded view) → no workspace side effect.
+        if (plan.pages.length === 0) {
+            return {
+                provider: this.name,
+                ok: view.opened.length === 0,
+                opened,
+                absent,
+                degraded,
+                pages: 0,
+            };
+        }
+        // A fresh workspace per open (BR-5 fresh-on-relaunch, strongest form).
+        // The labeled create is tried first; a failure falls back ONCE to a bare
+        // create before degrading.
+        let workspaceId = null;
+        let createErr = null;
+        try {
+            workspaceId = extractWorkspaceId(await this.transport.request("workspace.create", {
+                focus: false,
+                label: plan.workspaceLabel,
+            }));
+        }
+        catch (err) {
+            createErr = err;
+        }
+        if (workspaceId == null) {
+            try {
+                workspaceId = extractWorkspaceId(await this.transport.request("workspace.create", { focus: false }));
+                createErr = null;
+            }
+            catch (err) {
+                createErr = createErr ?? err;
+            }
+        }
+        if (workspaceId == null) {
+            // No workspace → nothing can tile. Degrade every pane honestly.
+            const reason = `herdr workspace.create failed: ${createErr instanceof Error
+                ? createErr.message
+                : createErr != null
+                    ? String(createErr)
+                    : "no workspace id in the response"}`;
+            for (const page of view.pages) {
+                for (const pane of page) {
+                    degraded.push({ seat: pane.seat, host: HERDR_SURFACE_HOST, reason });
+                }
+            }
+            return {
+                provider: this.name,
+                ok: view.opened.length === 0,
+                opened,
+                absent,
+                degraded,
+                pages: 0,
+                error: reason,
+                code: "herdr_workspace_failed",
+            };
+        }
+        for (let pageIndex = 0; pageIndex < plan.pages.length; pageIndex++) {
+            const pagePlan = plan.pages[pageIndex];
+            const pagePanes = view.pages[pageIndex];
+            try {
+                // ONE atomic layout.apply for the whole page (capture-verified shape).
+                await this.transport.request("layout.apply", {
+                    workspace_id: workspaceId,
+                    tab_label: pagePlan.tabLabel,
+                    focus: true,
+                    root: pagePlan.root,
+                });
+                for (const pane of pagePanes)
+                    opened.push(pane.seat);
+            }
+            catch (err) {
+                // The whole page failed to apply — degrade its seats honestly.
+                for (const pane of pagePanes) {
+                    degraded.push({
+                        seat: pane.seat,
+                        host: HERDR_SURFACE_HOST,
+                        reason: `herdr layout.apply failed: ${err instanceof Error ? err.message : String(err)}`,
+                    });
+                }
+            }
+        }
+        return {
+            provider: this.name,
+            ok: opened.length > 0 || view.opened.length === 0,
+            opened,
+            absent,
+            degraded,
+            pages: plan.pages.length,
+        };
+    }
+}
+//# sourceMappingURL=herdr-adapter.js.map

package/daemon/dist/domain/terminal/herdr-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"herdr-adapter.js","sourceRoot":"","sources":["../../../src/domain/terminal/herdr-adapter.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,qBAAqB;AACrB,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,yCAAyC;AACzC,6DAA6D;AAC7D,8EAA8E;AAC9E,uDAAuD;AACvD,iFAAiF;AACjF,EAAE;AACF,8DAA8D;AAC9D,8EAA8E;AAC9E,qDAAqD;AACrD,2EAA2E;AAC3E,0EAA0E;AAC1E,oEAAoE;AACpE,2EAA2E;AAC3E,2EAA2E;AAC3E,oBAAoB;AACpB,uEAAuE;AACvE,4EAA4E;AAC5E,6EAA6E;AAC7E,uBAAuB;AACvB,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,iEAAiE;AACjE,yEAAyE;AACzE,8EAA8E;AAC9E,8EAA8E;AAC9E,uDAAuD;AACvD,yEAAyE;AACzE,wEAAwE;AACxE,4EAA4E;AAC5E,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,wEAAwE;AACxE,oEAAoE;AACpE,+BAA+B;AAC/B,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AAiBzE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,uFAAuF;AACvF,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAoBnC;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,KAAwB,EAAE,SAA2B;IAC9E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAE,CAAC;IACzC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,SAAS;QACT,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM;QACvB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAE;QAChB,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,SAAS,SAAS;IAChB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,KAAqB;IACjD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;IAC1C,MAAM,MAAM,GAAsB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC;KACxC,CAAC,CAAC,CAAC;IACJ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AACzD,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAkB,EAClB,WAAmB,EACnB,YAAoB,SAAS;IAE7B,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,IAAI,CAAC,EAAE,IAAI,WAAW,EAAE,CAAC;IACtD,MAAM,KAAK,GAAoB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;QAChE,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;YACnE,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAmB;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,MAAiC,CAAC;YAC9C,MAAM,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE;gBAAE,OAAO,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAcD,MAAM,OAAO,YAAY;IAOM;IANpB,IAAI,GAAG,OAAO,CAAC;IACP,SAAS,CAAiB;IAC1B,cAAc,CAAe;IAC7B,SAAS,CAAS;IAC3B,aAAa,GAAG,CAAC,CAAC;IAE1B,YAA6B,IAAsB;QAAtB,SAAI,GAAJ,IAAI,CAAkB;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;QAC7C,IAAI,CAAC,cAAc;YACjB,IAAI,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC3C,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,SAAS,EAAE,KAAK,CAAC,KAAK;gBACtB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,uEAAuE;gBACvE,mEAAmE;gBACnE,sDAAsD;gBACtD,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,KAAK,EAAE;aACnE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,mEAAmE;QACnE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC,KAAK;gBAChB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE;gBACjB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAkB;QAC/B,MAAM,MAAM,GAAiB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAmB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,4EAA4E;QAC5E,8EAA8E;QAC9E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,EAAE,EAAE,KAAK;gBACT,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,+DAA+D;gBACtE,IAAI,EAAE,mBAAmB;aAC1B,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEhE,4EAA4E;QAC5E,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAC5B,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,CAAC;aACT,CAAC;QACJ,CAAC;QAED,uEAAuE;QACvE,yEAAyE;QACzE,2BAA2B;QAC3B,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,IAAI,SAAS,GAAY,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,WAAW,GAAG,kBAAkB,CAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE;gBAC/C,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,IAAI,CAAC,cAAc;aAC3B,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,CAAC;QAClB,CAAC;QACD,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,WAAW,GAAG,kBAAkB,CAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CACnE,CAAC;gBACF,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,SAAS,IAAI,GAAG,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;YACxB,gEAAgE;YAChE,MAAM,MAAM,GAAG,kCACb,SAAS,YAAY,KAAK;gBACxB,CAAC,CAAC,SAAS,CAAC,OAAO;gBACnB,CAAC,CAAC,SAAS,IAAI,IAAI;oBACjB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;oBACnB,CAAC,CAAC,iCACR,EAAE,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;oBACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAC5B,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,MAAM;gBACb,IAAI,EAAE,wBAAwB;aAC/B,CAAC;QACJ,CAAC;QAED,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC;YACzC,IAAI,CAAC;gBACH,uEAAuE;gBACvE,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE;oBAC3C,YAAY,EAAE,WAAW;oBACzB,SAAS,EAAE,QAAQ,CAAC,QAAQ;oBAC5B,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,QAAQ,CAAC,IAAI;iBACpB,CAAC,CAAC;gBACH,KAAK,MAAM,IAAI,IAAI,SAAS;oBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,+DAA+D;gBAC/D,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,IAAI,EAAE,kBAAkB;wBACxB,MAAM,EAAE,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBACzF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,EAAE,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YACjD,MAAM;YACN,MAAM;YACN,QAAQ;YACR,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;SACzB,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/domain/terminal/herdr-transport.d.ts

@@ -0,0 +1,50 @@
+/** A herdr socket result body — always carries a `type` discriminator. */
+export interface HerdrResult {
+    type: string;
+    [k: string]: unknown;
+}
+export interface HerdrProbeResult {
+    /** Is the herdr control socket reachable + answering `ping`? */
+    alive: boolean;
+    version: string | null;
+    protocol: number | null;
+}
+/** One socket round-trip: send {id,method,params}, resolve the matching response body. */
+export type HerdrSocketRpc = (req: {
+    id: string;
+    method: string;
+    params: unknown;
+}) => Promise<HerdrResult>;
+export interface HerdrTransport {
+    /** Liveness + version/protocol via the socket `ping` (not the absent CLI). */
+    probe(): Promise<HerdrProbeResult>;
+    /** Send a socket request; resolve the `result` body, reject on error / no result / unreachable. */
+    request(method: string, params: unknown): Promise<HerdrResult>;
+}
+export type HerdrTransportFactory = () => HerdrTransport;
+/** Resolve the herdr control socket path: env override → per-session → default. */
+export declare function resolveHerdrSocketPath(env?: NodeJS.ProcessEnv): string;
+/** Extract a version token (e.g. from a ping result's `version`, or `herdr --version`). */
+export declare function parseHerdrVersion(out: unknown): string | null;
+/**
+ * Normalize a parsed response line to its result body. Accepts BOTH the wrapped
+ * `{id,result:{type,…}}` (layout.apply/workspace.create) and a bare `{type,…}`
+ * (ping) shape, and treats an `{…,error:…}` (uncaptured shape, handled
+ * defensively) or a shapeless line as an error.
+ */
+export declare function unwrapHerdrResponse(raw: unknown): HerdrResult;
+/**
+ * The REAL unix-socket RPC (node:net). One-shot per request: connect, send one
+ * newline-delimited JSON line, read lines until the one whose `id` matches (or a
+ * bare typed response), then close. Rejects on ENOENT (herdr not running),
+ * timeout, connection error, socket close before a response, or a herdr error.
+ * Injectable so the adapter/tests never open a real socket.
+ */
+export declare function createHerdrSocketRpc(socketPath?: string, timeoutMs?: number): HerdrSocketRpc;
+/**
+ * The socket transport. `request` sends through the injected RPC with a fresh
+ * id; `probe` sends `ping` and reads `{type:"pong",version,protocol}`
+ * (unreachable / non-pong → alive:false, the honest answer).
+ */
+export declare function createHerdrSocketTransport(rpc: HerdrSocketRpc): HerdrTransportFactory;
+//# sourceMappingURL=herdr-transport.d.ts.map

package/daemon/dist/domain/terminal/herdr-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"herdr-transport.d.ts","sourceRoot":"","sources":["../../../src/domain/terminal/herdr-transport.ts"],"names":[],"mappings":"AA6BA,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,0FAA0F;AAC1F,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;AAE5G,MAAM,WAAW,cAAc;IAC7B,8EAA8E;IAC9E,KAAK,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnC,mGAAmG;IACnG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAChE;AAED,MAAM,MAAM,qBAAqB,GAAG,MAAM,cAAc,CAAC;AAEzD,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAKnF;AAED,2FAA2F;AAC3F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAI7D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CAY7D;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,GAAE,MAAiC,EAC7C,SAAS,SAAO,GACf,cAAc,CA6ChB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,cAAc,GAAG,qBAAqB,CAoBrF"}

package/daemon/dist/domain/terminal/herdr-transport.js

@@ -0,0 +1,145 @@
+// OPR.0.4.6.02 FB4 — the herdr SOCKET transport (arm's-length AGPL boundary).
+//
+// herdr is an AGPL terminal multiplexer. OpenRig integrates it at ARM'S LENGTH:
+// we talk to its local unix-domain CONTROL SOCKET (a runtime IPC endpoint the
+// operator's installed herdr exposes) exactly the way we shell out to tmux/cmux
+// — a local IPC client, NEVER importing, linking, embedding, or vendoring herdr
+// code. This file only frames JSON on a socket the operator's herdr owns.
+//
+// Why a socket, not the CLI (the FB4 correction): herdr 0.7.1 has NO `layout`
+// CLI command — the prior CLI transport (`herdr layout apply …`) could never
+// tile a view (the VM proof at e373f741 hit `herdr_layout_unsupported`). herdr
+// 0.7.1's layout mechanism is the socket JSON-RPC `layout.apply`, which the
+// slice research validated over the raw socket. The wire protocol here is
+// grounded in the VERBATIM captures preserved at
+// research/herdr-socket-captures/herdr-phase3-*.json:
+//   - socket: ~/.config/herdr/herdr.sock (HERDR_SOCKET_PATH / HERDR_SESSION overrides)
+//   - framing: newline-delimited JSON (one object per line)
+//   - envelope: request {id,method,params} → success {id,result:{type,…}}
+//     (NOT JSON-RPC 2.0 — there is no `jsonrpc` field; some methods, e.g. ping,
+//      may answer with a bare {type,…})
+// The error-response envelope, the exact socket lifecycle, and workspace.create
+// were not captured verbatim; they are handled DEFENSIVELY here and are the
+// first-run-empirical items the fresh VM re-proof must confirm (unproven until
+// that proof artifact lands).
+import net from "node:net";
+import { homedir } from "node:os";
+import path from "node:path";
+/** Resolve the herdr control socket path: env override → per-session → default. */
+export function resolveHerdrSocketPath(env = process.env) {
+    if (env["HERDR_SOCKET_PATH"])
+        return env["HERDR_SOCKET_PATH"];
+    const base = path.join(homedir(), ".config", "herdr");
+    const session = env["HERDR_SESSION"];
+    return session ? path.join(base, "sessions", session, "herdr.sock") : path.join(base, "herdr.sock");
+}
+/** Extract a version token (e.g. from a ping result's `version`, or `herdr --version`). */
+export function parseHerdrVersion(out) {
+    if (typeof out !== "string")
+        return null;
+    const m = out.match(/(\d+\.\d+\.\d+(?:[-.][0-9A-Za-z]+)*)/);
+    return m?.[1] ?? null;
+}
+/**
+ * Normalize a parsed response line to its result body. Accepts BOTH the wrapped
+ * `{id,result:{type,…}}` (layout.apply/workspace.create) and a bare `{type,…}`
+ * (ping) shape, and treats an `{…,error:…}` (uncaptured shape, handled
+ * defensively) or a shapeless line as an error.
+ */
+export function unwrapHerdrResponse(raw) {
+    if (raw && typeof raw === "object") {
+        const obj = raw;
+        if (obj["error"] != null) {
+            const e = obj["error"];
+            throw new Error(`herdr error: ${typeof e === "string" ? e : JSON.stringify(e)}`);
+        }
+        const result = obj["result"];
+        if (result && typeof result === "object")
+            return result;
+        if (typeof obj["type"] === "string")
+            return obj; // bare {type,…} (e.g. pong)
+    }
+    throw new Error(`herdr: unrecognized socket response ${JSON.stringify(raw)}`);
+}
+/**
+ * The REAL unix-socket RPC (node:net). One-shot per request: connect, send one
+ * newline-delimited JSON line, read lines until the one whose `id` matches (or a
+ * bare typed response), then close. Rejects on ENOENT (herdr not running),
+ * timeout, connection error, socket close before a response, or a herdr error.
+ * Injectable so the adapter/tests never open a real socket.
+ */
+export function createHerdrSocketRpc(socketPath = resolveHerdrSocketPath(), timeoutMs = 5000) {
+    return (req) => new Promise((resolve, reject) => {
+        const conn = net.createConnection({ path: socketPath });
+        let buf = "";
+        let settled = false;
+        const finish = (fn) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            conn.destroy();
+            fn();
+        };
+        const timer = setTimeout(() => finish(() => reject(new Error(`herdr socket timeout after ${timeoutMs}ms (${socketPath})`))), timeoutMs);
+        conn.on("connect", () => conn.write(`${JSON.stringify(req)}\n`));
+        conn.on("data", (chunk) => {
+            buf += chunk.toString("utf8");
+            let nl;
+            while ((nl = buf.indexOf("\n")) >= 0) {
+                const line = buf.slice(0, nl).trim();
+                buf = buf.slice(nl + 1);
+                if (!line)
+                    continue;
+                let parsed;
+                try {
+                    parsed = JSON.parse(line);
+                }
+                catch {
+                    continue; // a partial/foreign line — keep reading
+                }
+                const id = parsed?.id;
+                if (id != null && id !== req.id)
+                    continue; // a subscription/other message, not our reply
+                try {
+                    const body = unwrapHerdrResponse(parsed);
+                    finish(() => resolve(body));
+                }
+                catch (err) {
+                    finish(() => reject(err instanceof Error ? err : new Error(String(err))));
+                }
+                return;
+            }
+        });
+        conn.on("error", (err) => finish(() => reject(err)));
+        conn.on("end", () => finish(() => reject(new Error("herdr socket closed before a response"))));
+    });
+}
+/**
+ * The socket transport. `request` sends through the injected RPC with a fresh
+ * id; `probe` sends `ping` and reads `{type:"pong",version,protocol}`
+ * (unreachable / non-pong → alive:false, the honest answer).
+ */
+export function createHerdrSocketTransport(rpc) {
+    return () => {
+        let counter = 0;
+        const nextId = () => `openrig-${(counter += 1)}`;
+        return {
+            async probe() {
+                try {
+                    const pong = await rpc({ id: nextId(), method: "ping", params: {} });
+                    const version = parseHerdrVersion(pong["version"]);
+                    const protocol = typeof pong["protocol"] === "number" ? pong["protocol"] : null;
+                    return { alive: pong["type"] === "pong" || version != null || protocol != null, version, protocol };
+                }
+                catch {
+                    return { alive: false, version: null, protocol: null };
+                }
+            },
+            request(method, params) {
+                return rpc({ id: nextId(), method, params });
+            },
+        };
+    };
+}
+//# sourceMappingURL=herdr-transport.js.map

package/daemon/dist/domain/terminal/herdr-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"herdr-transport.js","sourceRoot":"","sources":["../../../src/domain/terminal/herdr-transport.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,0EAA0E;AAC1E,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,4EAA4E;AAC5E,0EAA0E;AAC1E,iDAAiD;AACjD,sDAAsD;AACtD,uFAAuF;AACvF,4DAA4D;AAC5D,0EAA0E;AAC1E,gFAAgF;AAChF,wCAAwC;AACxC,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,8BAA8B;AAE9B,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AA2B7B,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,IAAI,GAAG,CAAC,mBAAmB,CAAC;QAAE,OAAO,GAAG,CAAC,mBAAmB,CAAW,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACtG,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5D,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,gBAAgB,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAqB,CAAC;QACvE,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,OAAO,GAAkB,CAAC,CAAC,4BAA4B;IAC9F,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,aAAqB,sBAAsB,EAAE,EAC7C,SAAS,GAAG,IAAI;IAEhB,OAAO,CAAC,GAAG,EAAE,EAAE,CACb,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACxD,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,EAAE,EAAE,CAAC;QACP,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,SAAS,OAAO,UAAU,GAAG,CAAC,CAAC,CAAC,EAClG,SAAS,CACV,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAChC,GAAG,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACxB,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,wCAAwC;gBACpD,CAAC;gBACD,MAAM,EAAE,GAAI,MAA2B,EAAE,EAAE,CAAC;gBAC5C,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE;oBAAE,SAAS,CAAC,8CAA8C;gBACzF,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;oBACzC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO;YACT,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAmB;IAC5D,OAAO,GAAmB,EAAE;QAC1B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC;QACjD,OAAO;YACL,KAAK,CAAC,KAAK;gBACT,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;oBACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBACnD,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,UAAU,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC5F,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,IAAI,IAAI,IAAI,QAAQ,IAAI,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;gBACtG,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACzD,CAAC;YACH,CAAC;YACD,OAAO,CAAC,MAAc,EAAE,MAAe;gBACrC,OAAO,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/terminal/terminal-provider.d.ts

@@ -0,0 +1,88 @@
+/**
+ * A single provider-neutral pane, fully composed. `paneCommand` is the exact
+ * shell command the provider runs inside the pane (e.g. `tmux attach -t 's'`
+ * or `ssh host tmux attach -r -t 's'`); the provider does not modify it.
+ */
+export interface ComposedPane {
+    /** Canonical session name of the seat this pane attaches to. */
+    seat: string;
+    /** Human pane label — `<agent> · <slice>` per AC-7. */
+    label: string;
+    /** The provider-neutral shell command the pane runs. Composed upstream. */
+    paneCommand: string;
+    /** True when the attach is view-only (`tmux attach -r`) — cross-rig / saved read-only. */
+    readOnly: boolean;
+}
+/** A seat that could not be tiled because it has no live/attachable session. Named, never dropped. */
+export interface AbsentSeat {
+    seat: string;
+    /** Structured host id when the seat is remote; null for a local seat. */
+    host: string | null;
+    reason: string;
+}
+/** A seat that is honestly degraded (e.g. an http-registered host that tiles cannot reach over ssh). */
+export interface DegradedSeat {
+    seat: string;
+    /** Structured host id (degrade is always host-driven). */
+    host: string;
+    reason: string;
+}
+/**
+ * A fully-composed view: the provider-neutral output of `composeView`.
+ * `opened` is the flat tiled set; `pages` is that same set chunked into
+ * fixed-size grids (one provider tab/workspace per page).
+ */
+export interface ComposedView {
+    id: string;
+    opened: ComposedPane[];
+    absent: AbsentSeat[];
+    degraded: DegradedSeat[];
+    /** `opened` chunked into ≤ PANES_PER_PAGE grids; a provider renders one tab per page. */
+    pages: ComposedPane[][];
+}
+/** Provider availability + version + capability map (from a version-adaptive probe). */
+export interface ProviderStatus {
+    provider: string;
+    available: boolean;
+    /** Provider version when the probe could determine it; omitted when unknown. */
+    version?: string;
+    capabilities: Record<string, boolean>;
+}
+/** Liveness of the provider surface itself (herdr: `herdr status`; NOT a daemon ping). */
+export interface ProviderLiveness {
+    alive: boolean;
+    /** Optional honest detail (why not alive / probe note). */
+    detail?: string;
+}
+/**
+ * The result of rendering a composed view. `opened` lists the seats that were
+ * actually placed into panes; `absent`/`degraded` carry forward the composer's
+ * honest-partial classification (a provider may add its own degrades, e.g. a
+ * pane that failed to render). `pages` is the number of grid pages painted.
+ */
+export interface OpenViewResult {
+    provider: string;
+    ok: boolean;
+    opened: string[];
+    absent: AbsentSeat[];
+    degraded: DegradedSeat[];
+    pages: number;
+    /** Present only on a hard provider failure (surface unreachable, layout apply refused). */
+    error?: string;
+    code?: string;
+}
+/**
+ * The provider contract. Three methods only:
+ *  - `status()`   — availability + version + capabilities (version-adaptive probe).
+ *  - `liveness()` — is the provider surface itself up right now.
+ *  - `openView()` — render an already-composed view into the provider surface.
+ *
+ * Pane-command composition is deliberately NOT part of this interface.
+ */
+export interface TerminalProvider {
+    readonly name: string;
+    status(): Promise<ProviderStatus>;
+    liveness(): Promise<ProviderLiveness>;
+    openView(view: ComposedView): Promise<OpenViewResult>;
+}
+//# sourceMappingURL=terminal-provider.d.ts.map

package/daemon/dist/domain/terminal/terminal-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-provider.d.ts","sourceRoot":"","sources":["../../../src/domain/terminal/terminal-provider.ts"],"names":[],"mappings":"AAgBA;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,0FAA0F;IAC1F,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,sGAAsG;AACtG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wGAAwG;AACxG,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,yFAAyF;IACzF,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;CACzB;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,0FAA0F;AAC1F,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAClC,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACvD"}

package/daemon/dist/domain/terminal/terminal-provider.js

@@ -0,0 +1,17 @@
+// OPR.0.4.6.02 C2 — the TerminalProvider abstraction (the CORE seam of the
+// terminal-provider ride).
+//
+// A provider renders an ALREADY-COMPOSED view into its own surface model
+// (herdr workspace/tab/pane; cmux workspace/surface). It NEVER composes the
+// pane command itself — pane-command composition lives entirely in
+// `view-composer.ts`, which emits provider-neutral `ComposedPane.paneCommand`
+// strings. The provider's only job is placement + labeling + liveness. This
+// split keeps the composition rules (local vs ssh vs http honest-degrade,
+// read-only `-r`, paging) in one pure, testable place regardless of which
+// provider paints the tiles.
+//
+// The one shared result shape is `{ opened, absent, degraded }` (BR-6
+// honest-partial): a view that can only partially render says so explicitly —
+// never a silent omission.
+export {};
+//# sourceMappingURL=terminal-provider.js.map

package/daemon/dist/domain/terminal/terminal-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-provider.js","sourceRoot":"","sources":["../../../src/domain/terminal/terminal-provider.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,2BAA2B;AAC3B,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,mEAAmE;AACnE,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,6BAA6B;AAC7B,EAAE;AACF,sEAAsE;AACtE,8EAA8E;AAC9E,2BAA2B"}