@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/domain/seat-handover-service.d.ts

@@ -0,0 +1,224 @@
+import type Database from "better-sqlite3";
+import type { RigRepository } from "./rig-repository.js";
+import type { SessionRegistry } from "./session-registry.js";
+import type { DiscoveryRepository } from "./discovery-repository.js";
+import type { EventBus } from "./event-bus.js";
+import type { TmuxAdapter } from "../adapters/tmux.js";
+import type { TmuxOptionDefaultsApplier } from "./tmux-option-defaults.js";
+import { type SeatStatusResult } from "./seat-status-service.js";
+import { type SeatHandoverPlan, type SeatHandoverSource } from "./seat-handover-planner.js";
+import { type ResumeTokenCaptureDeps } from "./resume-token-capture.js";
+import type { RuntimeAdapter } from "./runtime-adapter.js";
+import type { OccupantInvalidator } from "./occupant-invalidator.js";
+import type { JsonlExchange } from "./session-jsonl.js";
+/** A bounded labeled-from-record recap of the predecessor's last exchanges + the record path,
+ *  resolved from the predecessor's provider transcript (claude transcript_path / codex rollout_path).
+ *  The permanent claude-runtime leg of scrollback preservation (alternate-screen seats keep no
+ *  native scrollback); renders on codex seats too, where native scrollback is the money proof. */
+export interface PredecessorRecap {
+    recap: JsonlExchange[];
+    recordPath: string;
+}
+/** B16 — every no-recap outcome is NAMED: the resolver returns either the recap or the reason it
+ *  is unavailable, and the packet prints that reason (honest-degraded means labeled, not silent). */
+export type PredecessorRecapResolution = PredecessorRecap | {
+    unavailableReason: string;
+};
+/** Resolve the predecessor's bounded recap for the successor boot packet, or a named unavailable
+ *  verdict (never a silent null — the packet renders the reason). */
+export type PredecessorRecapResolver = (args: {
+    nodeId: string;
+    runtime: string | null;
+    sessionName: string;
+}) => PredecessorRecapResolution;
+export interface SeatHandoverMutationResult {
+    ok: true;
+    dryRun: false;
+    mutated: true;
+    continuityTransferred: false;
+    seat: SeatHandoverPlan["seat"];
+    source: SeatHandoverSource;
+    reason: string;
+    operator: string | null;
+    previousOccupant: string;
+    currentOccupant: string;
+    previousSessionIdsSuperseded: string[];
+    newSessionId: string;
+    discovery: {
+        id: string;
+        status: "claimed";
+        tmuxSession: string;
+        tmuxPane: string | null;
+    };
+    currentStatus: SeatHandoverPlan["currentStatus"];
+    handoverAt: string;
+    eventSeq: number;
+    sideEffects: {
+        departingSessionKilled: false;
+        startupContextDelivered: boolean;
+        provenanceRecordWritten: false;
+    };
+}
+export type SeatHandoverResult = {
+    ok: true;
+    plan: SeatHandoverPlan;
+} | {
+    ok: true;
+    result: SeatHandoverMutationResult;
+} | {
+    ok: false;
+    code: "missing_reason" | "invalid_source" | "successor_creation_not_implemented" | "source_not_supported";
+    message: string;
+    guidance: string;
+} | {
+    ok: false;
+    code: "current_occupant_required" | "discovered_not_active" | "successor_tmux_absent" | "successor_already_managed" | "successor_is_current" | "runtime_mismatch";
+    message: string;
+    guidance: string;
+} | {
+    ok: false;
+    code: "discovered_not_found";
+    message: string;
+    guidance: string;
+} | {
+    ok: false;
+    code: "tmux_probe_failed" | "handover_commit_failed" | "successor_create_failed" | "context_delivery_failed";
+    message: string;
+    guidance: string;
+} | Extract<SeatStatusResult, {
+    ok: false;
+}>;
+interface SeatHandoverServiceDeps {
+    db: Database.Database;
+    rigRepo: RigRepository;
+    sessionRegistry: SessionRegistry;
+    discoveryRepo: DiscoveryRepository;
+    eventBus: EventBus;
+    tmuxAdapter: TmuxAdapter;
+    now?: () => Date;
+    /** OpenRig identity/activity env stamped onto a created successor session,
+     *  mirroring the launch identity env. Defaults to {} (the three core identity
+     *  vars are always derived internally). */
+    sessionEnv?: Record<string, string | undefined>;
+    /** Injectable id source for the successor session name (tests). */
+    newSuccessorId?: () => string;
+    /** Runtime adapters keyed by runtime — used to launch a fresh successor into
+     *  a LIVE agent (B1) before commit. Absent → fresh handover cannot launch. */
+    runtimeAdapters?: Record<string, RuntimeAdapter>;
+    /** Claude sidecar reader for discovered-mode resume-token capture (B2). */
+    contextUsageStore?: ResumeTokenCaptureDeps["contextUsageStore"];
+    /** Codex thread-id capturer for discovered-mode resume-token capture (B2). */
+    resumeTokenCapturer?: ResumeTokenCaptureDeps["resumeTokenCapturer"];
+    /** OPR.0.4.6.PI1 FR-6 — pi-runner sidecar reader for Pi resume-token capture. */
+    piRunnerStateStore?: ResumeTokenCaptureDeps["piRunnerStateStore"];
+    /** Readiness timeout for the successor launch (tests shorten it). */
+    readinessTimeoutMs?: number;
+    /** Injectable sleep for the successor readiness backoff (tests). */
+    sleep?: (ms: number) => Promise<void>;
+    /**
+     * OPR.0.4.6.02 S1 — the SHARED tmux option-defaults applier, threaded into
+     * the successor launcher so a FRESH handover successor gets the same
+     * mouse/status/clipboard defaults as a NodeLauncher-launched seat.
+     */
+    tmuxOptionDefaults?: TmuxOptionDefaultsApplier;
+    /**
+     * Ghost-stage (e) seam — the per-store retiring-occupant invalidator, authored by the ghost-stage
+     * slice and CALLED once at commit() so the cutover successor never inherits a predecessor's seat-name-
+     * keyed state. Optional: absent until the ghost-stage slice lands → the commit call is skipped (never
+     * blocking the handover). See occupant-invalidator.ts.
+     */
+    occupantInvalidator?: OccupantInvalidator;
+    /**
+     * Resolves the predecessor's bounded from-record recap for the successor boot packet (claude
+     * transcript_path / codex rollout_path → parseJsonlExchanges). Optional: absent → the recap
+     * sections are omitted honestly. The recap is the permanent claude-runtime leg of scrollback
+     * preservation (alternate-screen seats keep no native scrollback); on codex seats the preserved
+     * native scrollback is the money proof. Wired in production to ContextUsageStore + parseJsonlExchanges.
+     */
+    predecessorRecapResolver?: PredecessorRecapResolver;
+}
+export declare class SeatHandoverService {
+    private db;
+    private statusService;
+    private planner;
+    private rigRepo;
+    private sessionRegistry;
+    private discoveryRepo;
+    private eventBus;
+    private tmuxAdapter;
+    private successorLauncher;
+    private captureDeps;
+    private occupantInvalidator;
+    private predecessorRecapResolver;
+    /** Injectable sleep (tests): also carries the shared paste-then-submit settle in deliverRestorePacket. */
+    private sleep;
+    private appliedLaunchObservations;
+    private now;
+    constructor(deps: SeatHandoverServiceDeps);
+    handover(input: {
+        seatRef: string;
+        reason?: string | null;
+        source?: string | null;
+        operator?: string | null;
+        dryRun?: boolean;
+    }): Promise<SeatHandoverResult>;
+    /**
+     * The shared discovered->commit path (validation + presence-verify + rebind).
+     * `cleanup` is invoked before returning ANY failure so a composer-created
+     * successor is unwound; the discovered-source caller passes null (nothing to
+     * unwind). The `hasSession` probe here is the continuity/presence verify that
+     * runs BEFORE the commit releases the original binding.
+     */
+    private finalizeWithDiscovered;
+    /**
+     * B2 — best-effort discovered-mode resume-token capture at commit. Derives the
+     * live token via the shared FR-3 derive-helper (pure read), persists it with
+     * provenance "adoption" (the rank guard governs clobber), and emits the same
+     * captured/preserved/skipped events FR-3 uses. Honest failure = persist
+     * nothing + a redacted skip event. NEVER throws, never logs the token.
+     */
+    private captureDiscoveredResumeToken;
+    private emitCaptureSkip;
+    /** Best-effort capture of the departing seat's visible terminal before the
+     *  successor is created. Never throws; an empty capture is honestly recorded
+     *  as "no capture available" in the restore packet. */
+    private captureDepartingContext;
+    /** Deliver the captured restore packet to a fresh successor via the shipped
+     *  interactive-text transport (send_text + Enter), mirroring the startup
+     *  orchestrator's initial-prompt delivery. */
+    private deliverRestorePacket;
+    private checkRuntimeMismatch;
+    private lookupNode;
+    private lookupLatestSession;
+    private lookupManagedOwner;
+    private commit;
+    private upsertBinding;
+}
+/** Assemble the restore packet delivered to a fresh successor: seat identity + handover reason +
+ *  predecessor session + the captured predecessor terminal, and a bounded LABELED-FROM-RECORD recap
+ *  of the last few predecessor exchanges + a receipt line naming the predecessor record path
+ *  (honest-degraded). The recap is the permanent claude-runtime leg of scrollback preservation —
+ *  claude-code seats run in the tmux alternate screen, which keeps no scrollback buffer, so no
+ *  successor pane can natively scroll into the predecessor conversation there; the cutover's
+ *  respawn-pane owns native scrollback on codex seats. Never called "scrollback": the label must
+ *  make replay unmistakable, because passing a replayed recap off as native history is the one
+ *  thing the requirement cannot survive. Exported for unit test. */
+export declare function buildRestorePacket(info: {
+    seatRef: string;
+    reason: string;
+    departingSession: string;
+    handoverAt: string;
+    capturedContext: string;
+    /** The last few predecessor exchanges read from the provider JSONL, bounded on count and per-exchange length. */
+    recap?: Array<{
+        role: string;
+        content: string;
+    }>;
+    /** The predecessor provider record path (claude transcript_path / codex rollout_path). */
+    recordPath?: string | null;
+    /** B16 — the NAMED reason when no recap resolved; rendered as its own labeled line so the absence
+     *  is visible in the pane (honest-degraded means labeled, not silent). */
+    recapUnavailableReason?: string;
+}): string;
+export {};
+//# sourceMappingURL=seat-handover-service.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/seat-handover-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-handover-service.d.ts","sourceRoot":"","sources":["../../src/domain/seat-handover-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAsC,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACrG,OAAO,EAA4C,KAAK,gBAAgB,EAAE,KAAK,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEtI,OAAO,EAAqB,KAAK,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAE3F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKxD;;;kGAGkG;AAClG,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;CACpB;AACD;qGACqG;AACrG,MAAM,MAAM,0BAA0B,GAAG,gBAAgB,GAAG;IAAE,iBAAiB,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F;qEACqE;AACrE,MAAM,MAAM,wBAAwB,GAAG,CAAC,IAAI,EAAE;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB,KAAK,0BAA0B,CAAC;AAEjC,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,KAAK,CAAC;IACd,OAAO,EAAE,IAAI,CAAC;IACd,qBAAqB,EAAE,KAAK,CAAC;IAC7B,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAI/B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE;QACT,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,SAAS,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF,aAAa,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE;QACX,sBAAsB,EAAE,KAAK,CAAC;QAC9B,uBAAuB,EAAE,OAAO,CAAC;QACjC,uBAAuB,EAAE,KAAK,CAAC;KAChC,CAAC;CACH;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,0BAA0B,CAAA;CAAE,GAChD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,oCAAoC,GAAG,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC3J;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,2BAA2B,GAAG,uBAAuB,GAAG,uBAAuB,GAAG,2BAA2B,GAAG,sBAAsB,GAAG,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACnN;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,mBAAmB,GAAG,wBAAwB,GAAG,yBAAyB,GAAG,yBAAyB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC9J,OAAO,CAAC,gBAAgB,EAAE;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AA0B7C,UAAU,uBAAuB;IAC/B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,mBAAmB,CAAC;IACnC,QAAQ,EAAE,QAAQ,CAAC;IACnB,WAAW,EAAE,WAAW,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB;;+CAE2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B;kFAC8E;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACjD,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;IAChE,8EAA8E;IAC9E,mBAAmB,CAAC,EAAE,sBAAsB,CAAC,qBAAqB,CAAC,CAAC;IACpE,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,sBAAsB,CAAC,oBAAoB,CAAC,CAAC;IAClE,qEAAqE;IACrE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,yBAAyB,CAAC;IAC/C;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;CACrD;AAED,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,EAAE,CAAoB;IAC9B,OAAO,CAAC,aAAa,CAAoB;IACzC,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,iBAAiB,CAA2B;IACpD,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,mBAAmB,CAA6B;IACxD,OAAO,CAAC,wBAAwB,CAAkC;IAClE,0GAA0G;IAC1G,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,yBAAyB,CAAgC;IACjE,OAAO,CAAC,GAAG,CAAa;gBAEZ,IAAI,EAAE,uBAAuB;IAiCnC,QAAQ,CAAC,KAAK,EAAE;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,EAAE,OAAO,CAAC;KAClB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA4N/B;;;;;;OAMG;YACW,sBAAsB;IAwHpC;;;;;;OAMG;YACW,4BAA4B;IAiC1C,OAAO,CAAC,eAAe;IAcvB;;2DAEuD;YACzC,uBAAuB;IASrC;;kDAE8C;YAChC,oBAAoB;IAgClC,OAAO,CAAC,oBAAoB;IAY5B,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,kBAAkB;IAqB1B,OAAO,CAAC,MAAM;IAoLd,OAAO,CAAC,aAAa;CAqBtB;AAED;;;;;;;;oEAQoE;AACpE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,iHAAiH;IACjH,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,0FAA0F;IAC1F,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;8EAC0E;IAC1E,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,MAAM,CAgCT"}