@openrig/cli 0.4.4 → 0.4.7

package/dist/commands/slack.js

@@ -0,0 +1,274 @@
+// `rig slack` — Slice-11 slack-connector-human-queue (OPR.0.4.7.11).
+//
+// Agent-assisted setup/config + the two trusted-host connector runners. The
+// connector accesses the fleet ONLY through `rig queue` (transport-agnostic;
+// connector-host may differ from the queue/alert host — item 10). Secrets load
+// from a 0600 env file / OPENRIG_SLACK_* env at call time, never from config,
+// never from the repo. WebUI setup is OUT of v1.
+import { Command } from "commander";
+import path from "node:path";
+import { getOpenRigHome } from "../openrig-compat.js";
+import { loadConfig, saveConfig, staticReadiness, } from "../slack/config.js";
+import { resolveSecret, checkEnvFilePermissions } from "../slack/secrets.js";
+import { SeenStore, DeadLetterStore } from "../slack/state-store.js";
+import { makeExecRunner } from "../slack/queue-bridge.js";
+import { runOutboundOnce, seedBacklogOnEnable } from "../slack/outbound.js";
+import { InboundRouter, handleEnvelope } from "../slack/inbound.js";
+import { verifyScopes, verifyChannelMembership, openSocketConnection } from "../slack/slack-api.js";
+const SECRET_WEBHOOK = "SLACK_WEBHOOK_URL";
+const SECRET_BOT = "SLACK_BOT_TOKEN";
+const SECRET_APP = "SLACK_APP_TOKEN";
+function stateDir(home) {
+    return path.join(home, "state");
+}
+function defaultRunner(cfg) {
+    // Remote queue targeting (item 10, connector-host != queue-host) via OPENRIG_URL
+    // — supported by ALL queue verbs, unlike `--host` which `queue list`/`show`
+    // reject. queueUrl (when set) overrides the ambient OPENRIG_URL for rig calls.
+    const env = cfg.queueUrl ? { ...process.env, OPENRIG_URL: cfg.queueUrl } : process.env;
+    return makeExecRunner({ rigBin: process.env.OPENRIG_RIG_BIN || "rig", baseArgs: [], env });
+}
+function resolveSecrets(cfg) {
+    const envFile = cfg.secretsEnvFile ?? undefined;
+    return {
+        webhook: resolveSecret(SECRET_WEBHOOK, { envFile }),
+        bot: resolveSecret(SECRET_BOT, { envFile }),
+        app: resolveSecret(SECRET_APP, { envFile }),
+    };
+}
+export function slackCommand(deps = {}) {
+    const home = deps.home ?? getOpenRigHome();
+    const log = deps.log ?? ((m) => console.log(m));
+    const makeRunner = deps.makeRunner ?? defaultRunner;
+    const now = deps.now ?? (() => new Date());
+    const cmd = new Command("slack").description("Slice-11 — Slack human-queue connector (outbound alerts + inbound messages)");
+    // ---- setup ----
+    cmd
+        .command("setup")
+        .description("Configure the connector (first-class config; secrets stay in the env file, never here)")
+        .option("--channel <id>", "Slack channel id the connector app must be a member of")
+        .option("--inbound-destination <session>", "where inbound human messages land (default operator-agent@kernel)")
+        .option("--alert-tag <tag>", "outbound: qitem tag that alerts a human (default founder-alert)")
+        .option("--source-label <label>", "label shown in the posted message footer (where the queue lives)")
+        .option("--secrets-env-file <path>", "path to the 0600 env file with SLACK_WEBHOOK_URL / SLACK_BOT_TOKEN / SLACK_APP_TOKEN")
+        .option("--queue-url <url>", "OPENRIG_URL of a REMOTE queue daemon (connector-host != queue-host); targets all queue verbs")
+        .option("--required-scopes <csv>", "comma-separated bot scopes to require at verify time")
+        .action((opts) => {
+        const cur = loadConfig(home);
+        const next = {
+            ...cur,
+            channel: opts.channel ?? cur.channel,
+            inboundDestination: opts.inboundDestination ?? cur.inboundDestination,
+            alertTag: opts.alertTag ?? cur.alertTag,
+            sourceLabel: opts.sourceLabel ?? cur.sourceLabel,
+            secretsEnvFile: opts.secretsEnvFile ?? cur.secretsEnvFile,
+            queueUrl: opts.queueUrl ?? cur.queueUrl,
+            requiredScopes: opts.requiredScopes ? String(opts.requiredScopes).split(",").map((s) => s.trim()).filter(Boolean) : cur.requiredScopes,
+        };
+        const p = saveConfig(next, home);
+        log(`wrote ${p}`);
+        log(`Next: put SLACK_WEBHOOK_URL / SLACK_BOT_TOKEN / SLACK_APP_TOKEN in ${next.secretsEnvFile ?? "<--secrets-env-file> (0600)"}, then \`rig slack verify\`, then \`rig slack enable\`.`);
+    });
+    // ---- status (honest unconfigured, no network) ----
+    cmd
+        .command("status")
+        .description("Show the connector's configured + resolvable state (honest; no network)")
+        .option("--json", "JSON output")
+        .action((opts) => {
+        const cfg = loadConfig(home);
+        const s = resolveSecrets(cfg);
+        const readiness = staticReadiness(cfg, s.webhook !== null, s.bot !== null, s.app !== null);
+        const permWarn = cfg.secretsEnvFile ? checkEnvFilePermissions(cfg.secretsEnvFile) : null;
+        if (opts.json) {
+            log(JSON.stringify({ config: { ...cfg }, readiness, permWarning: permWarn }));
+        }
+        else {
+            log(`slack-connector (config: ${cfg.enabled ? "enabled" : "disabled"})`);
+            for (const r of readiness)
+                log(`  ${r.ok ? "✓" : "✗"} ${r.label}: ${r.detail}`);
+            if (permWarn)
+                log(`  ⚠ ${permWarn}`);
+        }
+    });
+    // ---- verify (live: GRANTED scopes from headers + channel membership) ----
+    cmd
+        .command("verify")
+        .description("Live-verify GRANTED Slack scopes (from response headers) + channel membership (item 5)")
+        .option("--json", "JSON output")
+        .action(async (opts) => {
+        const cfg = loadConfig(home);
+        const s = resolveSecrets(cfg);
+        if (!s.bot) {
+            log("✗ bot token unresolved — set SLACK_BOT_TOKEN (env or secrets env file). Cannot verify.");
+            process.exitCode = 1;
+            return;
+        }
+        const scope = await verifyScopes(s.bot, cfg.requiredScopes, deps.fetchImpl);
+        let member = null;
+        if (cfg.channel)
+            member = await verifyChannelMembership(s.bot, cfg.channel, deps.fetchImpl);
+        const ready = scope.ok && (member ? member.isMember : false);
+        if (opts.json) {
+            log(JSON.stringify({ scope, member, ready }));
+        }
+        else {
+            log(`granted scopes: ${scope.granted.join(", ") || "(none)"}`);
+            if (!scope.ok)
+                log(`✗ MISSING scopes (configured != granted — reinstall the app): ${scope.missing.join(", ")}${scope.error ? ` [${scope.error}]` : ""}`);
+            else
+                log("✓ all required scopes granted");
+            if (member)
+                log(member.isMember ? `✓ channel member (${member.name ?? cfg.channel})` : `✗ NOT a member of channel ${cfg.channel} — invite the app`);
+            else
+                log("… channel not configured — set --channel to verify membership");
+            log(ready ? "READY for inbound" : "NOT ready");
+        }
+        if (!ready)
+            process.exitCode = 1;
+    });
+    // ---- enable (seeds backlog as history, item 9) ----
+    cmd
+        .command("enable")
+        .description("Enable the connector; seeds the current alert backlog as history (no replay storm)")
+        .action(async () => {
+        const cfg = loadConfig(home);
+        const s = resolveSecrets(cfg);
+        if (!s.webhook) {
+            log("✗ refusing to enable: SLACK_WEBHOOK_URL unresolved (outbound could not post). Configure secrets first.");
+            process.exitCode = 1;
+            return;
+        }
+        const runner = makeRunner(cfg);
+        const seen = new SeenStore(path.join(stateDir(home), "slack-outbound-seen.jsonl"), undefined, now);
+        const res = await seedBacklogOnEnable({ runner, seen, filter: { alertTag: cfg.alertTag, destinations: cfg.outboundDestinations }, log });
+        saveConfig({ ...cfg, enabled: true }, home);
+        log(res.onlineStatus);
+    });
+    cmd
+        .command("disable")
+        .description("Disable the connector")
+        .action(() => {
+        saveConfig({ ...loadConfig(home), enabled: false }, home);
+        log("slack connector disabled");
+    });
+    // ---- outbound (one-shot sweep; for cron/launchd) ----
+    cmd
+        .command("outbound")
+        .description("One outbound sweep: post fresh human alerts to Slack (fail-visible)")
+        .option("--json", "JSON output")
+        .action(async (opts) => {
+        const cfg = loadConfig(home);
+        if (!cfg.enabled) {
+            log("slack connector disabled — `rig slack enable` first");
+            process.exitCode = 1;
+            return;
+        }
+        const s = resolveSecrets(cfg);
+        if (!s.webhook) {
+            log("✗ SLACK_WEBHOOK_URL unresolved — cannot post");
+            process.exitCode = 1;
+            return;
+        }
+        const runner = makeRunner(cfg);
+        const seen = new SeenStore(path.join(stateDir(home), "slack-outbound-seen.jsonl"), undefined, now);
+        const res = await runOutboundOnce({
+            runner,
+            seen,
+            webhookUrl: s.webhook,
+            fetchImpl: deps.fetchImpl,
+            sourceLabel: cfg.sourceLabel,
+            filter: { alertTag: cfg.alertTag, destinations: cfg.outboundDestinations },
+            log,
+        });
+        if (opts.json)
+            log(JSON.stringify(res));
+        if (res.failed.length > 0)
+            process.exitCode = 1; // fail-visible
+    });
+    // ---- inbound (persistent Socket Mode) ----
+    cmd
+        .command("inbound")
+        .description("Run the inbound Socket Mode consumer (persistent; human messages → queue)")
+        .action(async () => {
+        const cfg = loadConfig(home);
+        const s = resolveSecrets(cfg);
+        if (!s.app) {
+            log("✗ SLACK_APP_TOKEN unresolved — inbound cannot connect");
+            process.exitCode = 1;
+            return;
+        }
+        const runner = makeRunner(cfg);
+        const seen = new SeenStore(path.join(stateDir(home), "slack-inbound-seen.jsonl"), undefined, now);
+        const dead = new DeadLetterStore(path.join(stateDir(home), "slack-inbound-deadletter.jsonl"), undefined, now);
+        const router = new InboundRouter({ runner, seen, deadLetter: dead, destination: cfg.inboundDestination, log });
+        await runInboundLoop(s.app, router, deps, log);
+    });
+    return cmd;
+}
+/**
+ * Socket Mode loop: open the ws, FAST-ACK every envelope, route human messages,
+ * drain the dead-letter on connect + periodically, reconnect with backoff.
+ * `deps.inboundMaxConnects` bounds it for tests; unset = forever.
+ */
+export async function runInboundLoop(appToken, router, deps, log) {
+    const wsFactory = deps.wsFactory ?? ((url) => new globalThis.WebSocket(url));
+    const retryIntervalMs = deps.retryIntervalMs ?? 5 * 60 * 1000;
+    let connects = 0;
+    let backoff = 1000;
+    await new Promise((resolve) => {
+        const connect = async () => {
+            connects++;
+            const open = await openSocketConnection(appToken, deps.fetchImpl);
+            if (!open.ok || !open.url) {
+                log(`connect failed: ${open.error}`);
+                if (deps.inboundMaxConnects && connects >= deps.inboundMaxConnects)
+                    return resolve();
+                setTimeout(connect, backoff);
+                backoff = Math.min(backoff * 2, 60000);
+                return;
+            }
+            const ws = wsFactory(open.url);
+            let retryTimer;
+            ws.onopen = () => {
+                backoff = 1000;
+                log("socket connected");
+                void router.retryDeadLetters(); // drain on connect…
+                // …AND periodically WHILE connected (B1: recovery after a queue outage
+                // must not wait for the next Slack reconnect). Cleared on close.
+                retryTimer = setInterval(() => void router.retryDeadLetters(), retryIntervalMs);
+                if (typeof retryTimer.unref === "function") {
+                    retryTimer.unref();
+                }
+            };
+            ws.onmessage = (m) => {
+                let env;
+                try {
+                    env = JSON.parse(String(m.data));
+                }
+                catch {
+                    return;
+                }
+                void handleEnvelope(env, () => env.envelope_id && ws.send(JSON.stringify({ envelope_id: env.envelope_id })), router, log);
+            };
+            ws.onclose = () => {
+                if (retryTimer)
+                    clearInterval(retryTimer);
+                log(`socket closed; reconnect in ${backoff}ms`);
+                if (deps.inboundMaxConnects && connects >= deps.inboundMaxConnects)
+                    return resolve();
+                setTimeout(connect, backoff);
+                backoff = Math.min(backoff * 2, 60000);
+            };
+            ws.onerror = () => {
+                try {
+                    ws.close();
+                }
+                catch {
+                    /* ignore */
+                }
+            };
+        };
+        void connect();
+    });
+}
+//# sourceMappingURL=slack.js.map

package/dist/commands/slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.js","sourceRoot":"","sources":["../../src/commands/slack.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,8EAA8E;AAC9E,iDAAiD;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,UAAU,EACV,UAAU,EACV,eAAe,GAEhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,cAAc,EAAoB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,cAAc,EAAwC,MAAM,qBAAqB,CAAC;AAC1G,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAkB,MAAM,uBAAuB,CAAC;AAEpH,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AA0BrC,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AACD,SAAS,aAAa,CAAC,GAAyB;IAC9C,iFAAiF;IACjF,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACvF,OAAO,cAAc,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,cAAc,CAAC,GAAyB;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,IAAI,SAAS,CAAC;IAChD,OAAO;QACL,OAAO,EAAE,aAAa,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC;QACnD,GAAG,EAAE,aAAa,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC;QAC3C,GAAG,EAAE,aAAa,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAkB,EAAE;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE3C,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,6EAA6E,CAAC,CAAC;IAE5H,kBAAkB;IAClB,GAAG;SACA,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,wFAAwF,CAAC;SACrG,MAAM,CAAC,gBAAgB,EAAE,wDAAwD,CAAC;SAClF,MAAM,CAAC,iCAAiC,EAAE,mEAAmE,CAAC;SAC9G,MAAM,CAAC,mBAAmB,EAAE,iEAAiE,CAAC;SAC9F,MAAM,CAAC,wBAAwB,EAAE,kEAAkE,CAAC;SACpG,MAAM,CAAC,2BAA2B,EAAE,sFAAsF,CAAC;SAC3H,MAAM,CAAC,mBAAmB,EAAE,8FAA8F,CAAC;SAC3H,MAAM,CAAC,yBAAyB,EAAE,sDAAsD,CAAC;SACzF,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAyB;YACjC,GAAG,GAAG;YACN,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO;YACpC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,GAAG,CAAC,kBAAkB;YACrE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YACvC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW;YAChD,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc;YACzD,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YACvC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc;SAC/I,CAAC;QACF,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAClB,GAAG,CAAC,sEAAsE,IAAI,CAAC,cAAc,IAAI,6BAA6B,yDAAyD,CAAC,CAAC;IAC3L,CAAC,CAAC,CAAC;IAEL,qDAAqD;IACrD,GAAG;SACA,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,yEAAyE,CAAC;SACtF,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACzF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,4BAA4B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YACzE,KAAK,MAAM,CAAC,IAAI,SAAS;gBAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAChF,IAAI,QAAQ;gBAAE,GAAG,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,4EAA4E;IAC5E,GAAG;SACA,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wFAAwF,CAAC;SACrG,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YACX,GAAG,CAAC,wFAAwF,CAAC,CAAC;YAC9F,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,MAAM,GAA6E,IAAI,CAAC;QAC5F,IAAI,GAAG,CAAC,OAAO;YAAE,MAAM,GAAG,MAAM,uBAAuB,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,mBAAmB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,EAAE;gBAAE,GAAG,CAAC,iEAAiE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;;gBACpJ,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC1C,IAAI,MAAM;gBAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,6BAA6B,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC;;gBAC/I,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAC1E,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEL,sDAAsD;IACtD,GAAG;SACA,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,oFAAoF,CAAC;SACjG,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,GAAG,CAAC,wGAAwG,CAAC,CAAC;YAC9G,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,2BAA2B,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACnG,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzI,UAAU,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC5C,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,uBAAuB,CAAC;SACpC,MAAM,CAAC,GAAG,EAAE;QACX,UAAU,CAAC,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1D,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEL,wDAAwD;IACxD,GAAG;SACA,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,qEAAqE,CAAC;SAClF,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC;SAC/B,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,qDAAqD,CAAC,CAAC;YAC3D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,GAAG,CAAC,8CAA8C,CAAC,CAAC;YACpD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,2BAA2B,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QACnG,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC;YAChC,MAAM;YACN,IAAI;YACJ,UAAU,EAAE,CAAC,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,oBAAoB,EAAE;YAC1E,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,eAAe;IAClE,CAAC,CAAC,CAAC;IAEL,6CAA6C;IAC7C,GAAG;SACA,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,2EAA2E,CAAC;SACxF,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YACX,GAAG,CAAC,uDAAuD,CAAC,CAAC;YAC7D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAClG,MAAM,IAAI,GAAG,IAAI,eAAe,CAAa,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,gCAAgC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1H,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/G,MAAM,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEL,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAqB,EAAE,IAAe,EAAE,GAAwB;IACrH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,IAAK,UAAkE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9I,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC9D,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,IAAI,CAAC;IAEnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;YACzB,QAAQ,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAClE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC1B,GAAG,CAAC,mBAAmB,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrC,IAAI,IAAI,CAAC,kBAAkB,IAAI,QAAQ,IAAI,IAAI,CAAC,kBAAkB;oBAAE,OAAO,OAAO,EAAE,CAAC;gBACrF,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7B,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YACD,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,UAAsD,CAAC;YAC3D,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;gBACf,OAAO,GAAG,IAAI,CAAC;gBACf,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBACxB,KAAK,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,oBAAoB;gBACpD,uEAAuE;gBACvE,iEAAiE;gBACjE,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,gBAAgB,EAAE,EAAE,eAAe,CAAC,CAAC;gBAChF,IAAI,OAAQ,UAAgD,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBACjF,UAA+C,CAAC,KAAK,EAAE,CAAC;gBAC3D,CAAC;YACH,CAAC,CAAC;YACF,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE;gBACnB,IAAI,GAAmB,CAAC;gBACxB,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAmB,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;gBACD,KAAK,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5H,CAAC,CAAC;YACF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,IAAI,UAAU;oBAAE,aAAa,CAAC,UAAU,CAAC,CAAC;gBAC1C,GAAG,CAAC,+BAA+B,OAAO,IAAI,CAAC,CAAC;gBAChD,IAAI,IAAI,CAAC,kBAAkB,IAAI,QAAQ,IAAI,IAAI,CAAC,kBAAkB;oBAAE,OAAO,OAAO,EAAE,CAAC;gBACrF,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7B,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YACzC,CAAC,CAAC;YACF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,EAAE,CAAC;gBACb,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;YACH,CAAC,CAAC;QACJ,CAAC,CAAC;QACF,KAAK,OAAO,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commands/terminal.d.ts

@@ -0,0 +1,6 @@
+import { Command } from "commander";
+import type { StatusDeps } from "./status.js";
+export interface TerminalDeps extends StatusDeps {
+}
+export declare function terminalCommand(depsOverride?: TerminalDeps): Command;
+//# sourceMappingURL=terminal.d.ts.map

package/dist/commands/terminal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.d.ts","sourceRoot":"","sources":["../../src/commands/terminal.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,WAAW,YAAa,SAAQ,UAAU;CAAG;AA+DnD,wBAAgB,eAAe,CAAC,YAAY,CAAC,EAAE,YAAY,GAAG,OAAO,CAuDpE"}

package/dist/commands/terminal.js

@@ -0,0 +1,116 @@
+// OPR.0.4.6.02 C3 — the `rig terminal` command family (the TUI-1 opaque verb +
+// the operator's terminal-provider-ride entry). Three subcommands, all hitting
+// the ONE canonical daemon composer (`/api/terminal/...`):
+//
+//   rig terminal open <view> [--provider herdr|cmux] [--json]
+//   rig terminal views [--json]
+//   rig terminal status [--provider herdr|cmux] [--json]
+//
+// `<view>` resolves daemon-side: a rig name (per-rig derived) | `mission:<id>` |
+// `slice:<id>` (derived) | a saved-view id. The result is the ONE shared
+// `{ opened, absent, degraded }` partition, carried byte-identically here and
+// in the route JSON (arch Q3).
+//
+// Exit semantics (PRD / arch Q3): a partial open WITH NAMES is a SUCCESS with
+// disclosure → exit 0; a ZERO-pane open (nothing tiled: unknown view, provider
+// down, every seat absent/degraded) → non-zero. `views`/`status` are always
+// exit 0 unless the daemon is unreachable.
+import { Command } from "commander";
+import { DaemonClient } from "../client.js";
+import { getDaemonStatus, getDaemonUrl } from "../daemon-lifecycle.js";
+import { realDeps } from "./daemon.js";
+async function withClient(deps, fn) {
+    const status = await getDaemonStatus(deps.lifecycleDeps);
+    if (status.state !== "running" || status.healthy === false) {
+        console.error("Daemon not running. Start it with: rig daemon start");
+        process.exitCode = 1;
+        return undefined;
+    }
+    const client = deps.clientFactory(getDaemonUrl(status));
+    return fn(client);
+}
+/** Print a plain daemon response (views/status). JSON = compact; human = pretty. */
+function printResult(json, body, status) {
+    console.log(json ? JSON.stringify(body) : JSON.stringify(body, null, 2));
+    if (status >= 400)
+        process.exitCode = status >= 500 ? 2 : 1;
+}
+/** Human-format the honest-partial open result (opened/absent/degraded, each named). */
+function humanOpen(r) {
+    const lines = [];
+    const tiled = r.opened.length;
+    lines.push(tiled > 0
+        ? `Opened ${tiled} tile(s) in ${r.provider}${r.pages > 1 ? ` across ${r.pages} page(s)` : ""}.`
+        : `No tiles opened in ${r.provider}.`);
+    if (r.error)
+        lines.push(`  provider: ${r.error}${r.code ? ` (${r.code})` : ""}`);
+    for (const seat of r.opened)
+        lines.push(`  ● ${seat}`);
+    for (const a of r.absent)
+        lines.push(`  ○ ${a.seat} — absent: ${a.reason}`);
+    for (const d of r.degraded)
+        lines.push(`  ▲ ${d.seat} — skipped (${d.host}): ${d.reason}`);
+    return lines.join("\n");
+}
+/** Open exit rule: exit 0 iff at least one pane was tiled (partial-with-names is success). */
+function printOpen(json, r, status) {
+    if (json) {
+        console.log(JSON.stringify(r));
+    }
+    else {
+        console.log(humanOpen(r));
+    }
+    // A 4xx/5xx (bad input / unknown view / service down) OR a zero-pane open is a failure.
+    if (status >= 400 || r.opened.length === 0) {
+        process.exitCode = status >= 500 ? 2 : 1;
+    }
+}
+export function terminalCommand(depsOverride) {
+    const cmd = new Command("terminal").description("Open OpenRig views (agent terminals) as tiles in a terminal provider (herdr / cmux)");
+    const getDeps = () => depsOverride ?? {
+        lifecycleDeps: realDeps(),
+        clientFactory: (url) => new DaemonClient(url),
+    };
+    cmd
+        .command("open")
+        .argument("<view>", "a rig name, mission:<id>, slice:<id>, or a saved-view id")
+        .description("Open every live agent in the view as an interactive terminal tile")
+        .option("--provider <name>", "terminal provider: herdr (default) or cmux (best-effort)")
+        .option("--json", "JSON output for agents")
+        .action(async (view, opts) => {
+        const deps = getDeps();
+        await withClient(deps, async (client) => {
+            const body = { view, ...(opts.provider ? { provider: opts.provider } : {}) };
+            const res = await client.post("/api/terminal/open", body);
+            printOpen(opts.json ?? false, res.data, res.status);
+        });
+    });
+    cmd
+        .command("views")
+        .description("List saved views + the rigs openable as derived views")
+        .option("--json", "JSON output for agents")
+        .action(async (opts) => {
+        const deps = getDeps();
+        await withClient(deps, async (client) => {
+            const res = await client.get("/api/terminal/views");
+            printResult(opts.json ?? false, res.data, res.status);
+        });
+    });
+    cmd
+        .command("status")
+        .description("Show terminal provider availability + liveness (doctor)")
+        .option("--provider <name>", "restrict to one provider (herdr / cmux)")
+        .option("--json", "JSON output for agents")
+        .action(async (opts) => {
+        const deps = getDeps();
+        await withClient(deps, async (client) => {
+            const path = opts.provider
+                ? `/api/terminal/status?provider=${encodeURIComponent(opts.provider)}`
+                : "/api/terminal/status";
+            const res = await client.get(path);
+            printResult(opts.json ?? false, res.data, res.status);
+        });
+    });
+    return cmd;
+}
+//# sourceMappingURL=terminal.js.map

package/dist/commands/terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal.js","sourceRoot":"","sources":["../../src/commands/terminal.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,+EAA+E;AAC/E,2DAA2D;AAC3D,EAAE;AACF,8DAA8D;AAC9D,gCAAgC;AAChC,yDAAyD;AACzD,EAAE;AACF,iFAAiF;AACjF,yEAAyE;AACzE,8EAA8E;AAC9E,+BAA+B;AAC/B,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,2CAA2C;AAE3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAkBvC,KAAK,UAAU,UAAU,CACvB,IAAkB,EAClB,EAAwC;IAExC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;AACpB,CAAC;AAED,oFAAoF;AACpF,SAAS,WAAW,CAAC,IAAa,EAAE,IAAa,EAAE,MAAc;IAC/D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,wFAAwF;AACxF,SAAS,SAAS,CAAC,CAAiB;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAC9B,KAAK,CAAC,IAAI,CACR,KAAK,GAAG,CAAC;QACP,CAAC,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG;QAC/F,CAAC,CAAC,sBAAsB,CAAC,CAAC,QAAQ,GAAG,CACxC,CAAC;IACF,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8FAA8F;AAC9F,SAAS,SAAS,CAAC,IAAa,EAAE,CAAiB,EAAE,MAAc;IACjE,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,wFAAwF;IACxF,IAAI,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,QAAQ,GAAG,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,YAA2B;IACzD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAC7C,qFAAqF,CACtF,CAAC;IAEF,MAAM,OAAO,GAAG,GAAiB,EAAE,CACjC,YAAY,IAAI;QACd,aAAa,EAAE,QAAQ,EAAE;QACzB,aAAa,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC;KACtD,CAAC;IAEJ,GAAG;SACA,OAAO,CAAC,MAAM,CAAC;SACf,QAAQ,CAAC,QAAQ,EAAE,0DAA0D,CAAC;SAC9E,WAAW,CAAC,mEAAmE,CAAC;SAChF,MAAM,CAAC,mBAAmB,EAAE,0DAA0D,CAAC;SACvF,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,IAA2C,EAAE,EAAE;QAC1E,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7E,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAiB,oBAAoB,EAAE,IAAI,CAAC,CAAC;YAC1E,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,uDAAuD,CAAC;SACpE,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAU,qBAAqB,CAAC,CAAC;YAC7D,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,mBAAmB,EAAE,yCAAyC,CAAC;SACtE,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,MAAM,CAAC,KAAK,EAAE,IAA2C,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ;gBACxB,CAAC,CAAC,iCAAiC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACtE,CAAC,CAAC,sBAAsB,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAU,IAAI,CAAC,CAAC;YAC5C,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/commands/transcript.d.ts

@@ -1,4 +1,9 @@
 import { Command } from "commander";
 import type { StatusDeps } from "./status.js";
-export declare function transcriptCommand(depsOverride?: StatusDeps): Command;
+import { loadHostRegistry } from "../host-registry.js";
+export interface TranscriptDeps extends StatusDeps {
+    /** Test seam: inject a registry loader so no real ~/.openrig is touched. */
+    hostRegistryLoader?: () => ReturnType<typeof loadHostRegistry>;
+}
+export declare function transcriptCommand(depsOverride?: TranscriptDeps): Command;
 //# sourceMappingURL=transcript.d.ts.map

package/dist/commands/transcript.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transcript.d.ts","sourceRoot":"","sources":["../../src/commands/transcript.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,wBAAgB,iBAAiB,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,OAAO,CA+EpE"}
+{"version":3,"file":"transcript.d.ts","sourceRoot":"","sources":["../../src/commands/transcript.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAkC,MAAM,qBAAqB,CAAC;AAKvF,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,MAAM,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;CAChE;AAED,wBAAgB,iBAAiB,CAAC,YAAY,CAAC,EAAE,cAAc,GAAG,OAAO,CA4FxE"}

package/dist/commands/transcript.js

@@ -1,7 +1,12 @@
 import { Command } from "commander";
+import { resolveEffectiveHost } from "../host-selection.js";
 import { DaemonClient } from "../client.js";
 import { getDaemonStatus, getDaemonUrl } from "../daemon-lifecycle.js";
 import { realDeps } from "./daemon.js";
+import { loadHostRegistry, resolveHost, hostDisplayTarget } from "../host-registry.js";
+import { emitCrossHostError, emitRemoteHttpFailure } from "../cross-host-cli-helpers.js";
+import { resolveCrossHostTarget } from "../cross-host-target.js";
+import { runRemoteHttpOp } from "../remote-host-ops.js";
 export function transcriptCommand(depsOverride) {
     const cmd = new Command("transcript").description("Read agent transcript output");
     const getDeps = () => depsOverride ?? {
@@ -12,31 +17,60 @@ export function transcriptCommand(depsOverride) {
         .argument("<session>", "Session name (e.g. dev-impl@my-rig)")
         .option("--tail <lines>", "Show last N lines (default: 50)", "50")
         .option("--grep <pattern>", "Search for lines matching pattern (regex)")
+        .option("--host <id>", "Read from a remote host declared in ~/.openrig/hosts.yaml (http hosts only — CLI-direct to the remote daemon's transcript routes)")
         .option("--json", "JSON output for agents")
         .addHelpText("after", `
 Examples:
   rig transcript dev-impl@my-rig --tail 100
   rig transcript dev-impl@my-rig --grep "decision|architecture"
-  rig transcript dev-impl@my-rig --json`)
+  rig transcript dev-impl@my-rig --json
+  rig transcript --host vps-b dev-impl@my-rig --tail 100
+  rig transcript dev-impl@my-rig@vps-b --grep "handoff"
+
+--host reads the transcript from a remote host declared in
+~/.openrig/hosts.yaml, CLI-direct against that daemon's shipped transcript
+routes (http-registered hosts, e.g. pair-registered; an ssh-registered host
+fails with the structured transport-requirement error). Output shape is the
+origin's, verbatim. A session of the form agent@rig@host is sugar for --host
+when the suffix is a REGISTERED host id (explicit --host > sugar > persisted
+selection).`)
         .action(async (session, opts) => {
+        // OPR.0.4.6.MH4 C2 — cross-host observe: explicit --host > the
+        // `agent@rig@host` target sugar > the persisted host selection
+        // (resolveEffectiveHost). The local path below is byte-untouched.
+        const explicitHost = opts.host;
+        opts.host = resolveEffectiveHost(opts.host);
         const deps = getDeps();
-        const status = await getDaemonStatus(deps.lifecycleDeps);
-        if (status.state !== "running" || status.healthy === false) {
-            console.error("Daemon not running. Start it with: rig daemon start");
+        const targetResolution = resolveCrossHostTarget(session, explicitHost, deps.hostRegistryLoader);
+        if (!targetResolution.ok) {
+            console.error(targetResolution.error);
             process.exitCode = 1;
             return;
         }
-        const client = deps.clientFactory(getDaemonUrl(status));
+        session = targetResolution.target;
+        const crossHostHint = targetResolution.hint;
+        opts.host = explicitHost ?? targetResolution.sugarHost ?? opts.host;
         // --grep takes precedence over --tail when both given
         const useGrep = !!opts.grep;
-        let res;
-        if (useGrep) {
-            res = await client.get(`/api/transcripts/${encodeURIComponent(session)}/grep?pattern=${encodeURIComponent(opts.grep)}`);
+        const tailLines = parseInt(opts.tail ?? "50", 10);
+        const apiPath = useGrep
+            ? `/api/transcripts/${encodeURIComponent(session)}/grep?pattern=${encodeURIComponent(opts.grep)}`
+            : `/api/transcripts/${encodeURIComponent(session)}/tail?lines=${isNaN(tailLines) ? 50 : tailLines}`;
+        // --- Cross-host path (CLI-direct GET to the remote daemon's shipped
+        // transcript routes — the SAME paths the local path builds, origin
+        // shape verbatim; read-class deadline; daemon untouched). ---
+        if (opts.host) {
+            await runCrossHostTranscript(opts.host, apiPath, useGrep, opts, deps, crossHostHint);
+            return;
         }
-        else {
-            const lines = parseInt(opts.tail ?? "50", 10);
-            res = await client.get(`/api/transcripts/${encodeURIComponent(session)}/tail?lines=${isNaN(lines) ? 50 : lines}`);
+        const status = await getDaemonStatus(deps.lifecycleDeps);
+        if (status.state !== "running" || status.healthy === false) {
+            console.error("Daemon not running. Start it with: rig daemon start");
+            process.exitCode = 1;
+            return;
         }
+        const client = deps.clientFactory(getDaemonUrl(status));
+        const res = await client.get(apiPath);
         if (opts.json) {
             console.log(JSON.stringify(res.data));
             if (res.status >= 400)
@@ -46,32 +80,81 @@ Examples:
         if (res.status >= 400) {
             const error = res.data["error"];
             console.error(error ?? `Transcript request failed (HTTP ${res.status})`);
+            // MH-4 §4 loud-failure hint: 3-part-shaped target, unregistered suffix.
+            if (crossHostHint)
+                console.error(`hint: ${crossHostHint}`);
             process.exitCode = 1;
             return;
         }
-        if (useGrep) {
-            const matches = res.data["matches"];
-            if (matches && matches.length > 0) {
-                for (const line of matches) {
-                    console.log(line);
-                }
-            }
-            else {
-                console.log("No matches found.");
+        renderTranscript(res.data, useGrep);
+    });
+    return cmd;
+}
+/**
+ * OPR.0.4.6.MH4 C2 — cross-host transcript over http, CLI-DIRECT to the
+ * remote daemon's shipped GET /api/transcripts/:session/tail | /grep
+ * (zero daemon-side changes; the MH-2 read-through PATTERN, one hop from
+ * the bearer-capable CLI). An ssh-registered host surfaces runRemoteHttpOp's
+ * structured transport error — never a silent wrong-transport attempt.
+ */
+async function runCrossHostTranscript(hostId, apiPath, useGrep, opts, deps, hint) {
+    // Resolve the host in the caller (the send/capture pattern) so an unknown
+    // host surfaces as the SAME `unknown-host` step class across all four
+    // verbs, and the banner carries the display target uniformly.
+    const loader = deps.hostRegistryLoader ?? loadHostRegistry;
+    const registry = loader();
+    if (!registry.ok) {
+        emitCrossHostError(hostId, "registry-load-failed", registry.error, opts.json);
+        return;
+    }
+    const resolved = resolveHost(registry.registry, hostId);
+    if (!resolved.ok) {
+        emitCrossHostError(hostId, "unknown-host", hint ? `${resolved.error} (${hint})` : resolved.error, opts.json);
+        return;
+    }
+    const host = resolved.host;
+    const result = await runRemoteHttpOp(hostId, "GET", apiPath, undefined, deps, {});
+    if (opts.json) {
+        console.log(JSON.stringify({
+            cross_host: { host: host.id, target: hostDisplayTarget(host), transport: "http" },
+            result,
+            ...(!result.ok && hint ? { hint } : {}),
+        }));
+        if (!result.ok)
+            process.exitCode = 1;
+        return;
+    }
+    if (!result.ok) {
+        emitRemoteHttpFailure(host.id, hostDisplayTarget(host), result, false, hint);
+        return;
+    }
+    console.log(`[via host=${host.id} (${hostDisplayTarget(host)})]`);
+    renderTranscript((result.data ?? {}), useGrep);
+}
+/** One renderer, two callers — the remote output shape is the origin's,
+ *  so local and cross-host reads render identically. */
+function renderTranscript(data, useGrep) {
+    if (useGrep) {
+        const matches = data["matches"];
+        if (matches && matches.length > 0) {
+            for (const line of matches) {
+                console.log(line);
             }
         }
         else {
-            const content = res.data["content"];
-            if (content) {
-                // Print each line via console.log for consistent capture in tests and terminal
-                const lines = content.split("\n");
-                for (const line of lines) {
-                    if (line)
-                        console.log(line);
-                }
+            console.log("No matches found.");
+        }
+    }
+    else {
+        const content = data["content"];
+        if (content) {
+            // Print each line via console.log for consistent capture in tests and terminal
+            const lines = content.split("\n");
+            for (const line of lines) {
+                if (line)
+                    console.log(line);
             }
         }
-    });
-    return cmd;
+    }
 }
 //# sourceMappingURL=transcript.js.map