@openrig/cli 0.5.0 → 0.5.2

package/node_modules/@openrig/daemon/dist/domain/seat-identity-store.js

@@ -0,0 +1,167 @@
+function rowToVerdict(row) {
+    return {
+        nodeId: row.node_id,
+        verdict: row.verdict,
+        evidenceSource: row.evidence_source,
+        reason: row.reason,
+        evidence: {
+            registeredPane: row.registered_pane,
+            observedPid: row.observed_pid,
+            observedCommand: row.observed_command,
+            matchedLayer: row.matched_layer,
+        },
+        sessionName: row.session_name,
+        observedAt: row.observed_at,
+    };
+}
+/**
+ * OPR.0.4.3.19 — explicit, durable store for the per-node liveness identity
+ * verdict (migration 046 `seat_identity_verdicts`). The reconciler writes;
+ * node-inventory reads. Kept as a thin, stateless wrapper over the table so
+ * the liveness truth lives in the DB, never in transient in-memory state
+ * (dev-guard plan-review caveat).
+ *
+ * Reads are DEFENSIVE: fixtures that bypass the canonical migration list (no
+ * `seat_identity_verdicts` table) get an empty map/undefined rather than a
+ * crash — the projection degrades to "no verdict" (never down-ranks), matching
+ * the fail-open-on-unknown contract.
+ */
+export class SeatIdentityStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /** Upsert one node's verdict (last-writer-wins per node). */
+    upsert(v) {
+        this.db.prepare(`
+      INSERT INTO seat_identity_verdicts
+        (node_id, verdict, evidence_source, reason, registered_pane, observed_pid, observed_command, matched_layer, session_name, observed_at)
+      VALUES (@node_id, @verdict, @evidence_source, @reason, @registered_pane, @observed_pid, @observed_command, @matched_layer, @session_name, @observed_at)
+      ON CONFLICT(node_id) DO UPDATE SET
+        verdict = excluded.verdict,
+        evidence_source = excluded.evidence_source,
+        reason = excluded.reason,
+        registered_pane = excluded.registered_pane,
+        observed_pid = excluded.observed_pid,
+        observed_command = excluded.observed_command,
+        matched_layer = excluded.matched_layer,
+        session_name = excluded.session_name,
+        observed_at = excluded.observed_at
+    `).run({
+            node_id: v.nodeId,
+            verdict: v.verdict,
+            evidence_source: v.evidenceSource,
+            reason: v.reason,
+            registered_pane: v.evidence.registeredPane,
+            observed_pid: v.evidence.observedPid,
+            observed_command: v.evidence.observedCommand,
+            matched_layer: v.evidence.matchedLayer,
+            session_name: v.sessionName,
+            observed_at: v.observedAt,
+        });
+    }
+    /** Read all verdicts for the nodes of a rig, keyed by node_id. Defensive. */
+    getForRig(rigId) {
+        const out = new Map();
+        try {
+            const rows = this.db.prepare(`
+        SELECT v.* FROM seat_identity_verdicts v
+        JOIN nodes n ON n.id = v.node_id
+        WHERE n.rig_id = ?
+      `).all(rigId);
+            for (const row of rows)
+                out.set(row.node_id, rowToVerdict(row));
+        }
+        catch {
+            // Table absent (partial fixture) — degrade to no verdicts.
+        }
+        return out;
+    }
+    /**
+     * FS-1 W1.2 — all rigs' verdicts in ONE query, keyed rigId → (nodeId →
+     * verdict). Same JOIN + `rowToVerdict` as `getForRig`, minus the per-rig
+     * WHERE — so a per-rig `getForAllRigs().get(rigId)` is equivalent to
+     * `getForRig(rigId)` (empty map when a rig has no verdicts). Defensive.
+     */
+    getForAllRigs() {
+        const out = new Map();
+        try {
+            const rows = this.db.prepare(`
+        SELECT v.*, n.rig_id as owning_rig_id FROM seat_identity_verdicts v
+        JOIN nodes n ON n.id = v.node_id
+      `).all();
+            for (const row of rows) {
+                let m = out.get(row.owning_rig_id);
+                if (!m) {
+                    m = new Map();
+                    out.set(row.owning_rig_id, m);
+                }
+                m.set(row.node_id, rowToVerdict(row));
+            }
+        }
+        catch {
+            // Table absent (partial fixture) — degrade to no verdicts.
+        }
+        return out;
+    }
+    /** Read a single node's verdict, or null. Defensive. */
+    getForNode(nodeId) {
+        try {
+            const row = this.db.prepare("SELECT * FROM seat_identity_verdicts WHERE node_id = ?").get(nodeId);
+            return row ? rowToVerdict(row) : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /** Drop verdicts for nodes no longer in the live set (memory/table hygiene). */
+    pruneExcept(liveNodeIds) {
+        try {
+            const existing = this.db.prepare("SELECT node_id FROM seat_identity_verdicts").all();
+            const live = new Set(liveNodeIds);
+            const del = this.db.prepare("DELETE FROM seat_identity_verdicts WHERE node_id = ?");
+            for (const r of existing) {
+                if (!live.has(r.node_id))
+                    del.run(r.node_id);
+            }
+        }
+        catch {
+            // Table absent — nothing to prune.
+        }
+    }
+}
+/**
+ * 51-09 increment 1 — thin durable store for the daemon's own self-host id
+ * (migration 059 `self_host_identity`, singleton row). Co-located with the
+ * seat-identity substrate per arch ruling cb19867f (extend, do not invent a
+ * parallel identity store). The reconciler mints once + reconciles at boot; this
+ * store is the DB access seam only (no policy — mint/reconcile decisions live in
+ * seat-identity-reconciler.ts). Reads are DEFENSIVE (table absent → null),
+ * matching SeatIdentityStore's fixture-tolerant contract.
+ */
+export class SelfHostIdentityStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /** The current self-host record, or null when none has been minted. */
+    get() {
+        try {
+            const row = this.db.prepare("SELECT host_id, minted_at, reconciled_at FROM self_host_identity WHERE singleton = 1").get();
+            return row ? { hostId: row.host_id, mintedAt: row.minted_at, reconciledAt: row.reconciled_at } : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    /** Insert the singleton self-host record (first boot only). minted_at == reconciled_at at mint. */
+    mint(hostId, nowIso) {
+        this.db.prepare("INSERT INTO self_host_identity (singleton, host_id, minted_at, reconciled_at) VALUES (1, ?, ?, ?)").run(hostId, nowIso, nowIso);
+        return { hostId, mintedAt: nowIso, reconciledAt: nowIso };
+    }
+    /** Advance reconciled_at on the existing singleton row; host_id + minted_at are never touched. */
+    touchReconciledAt(nowIso) {
+        this.db.prepare("UPDATE self_host_identity SET reconciled_at = ? WHERE singleton = 1").run(nowIso);
+    }
+}
+//# sourceMappingURL=seat-identity-store.js.map

package/node_modules/@openrig/daemon/dist/domain/seat-identity-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-identity-store.js","sourceRoot":"","sources":["../../src/domain/seat-identity-store.ts"],"names":[],"mappings":"AAgBA,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,OAAO;QACnB,OAAO,EAAE,GAAG,CAAC,OAAyC;QACtD,cAAc,EAAE,GAAG,CAAC,eAAwD;QAC5E,MAAM,EAAE,GAAG,CAAC,MAAuC;QACnD,QAAQ,EAAE;YACR,cAAc,EAAE,GAAG,CAAC,eAAe;YACnC,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,eAAe,EAAE,GAAG,CAAC,gBAAgB;YACrC,YAAY,EAAE,GAAG,CAAC,aAAa;SAChC;QACD,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,UAAU,EAAE,GAAG,CAAC,WAAW;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,6DAA6D;IAC7D,MAAM,CAAC,CAAsB;QAC3B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;KAcf,CAAC,CAAC,GAAG,CAAC;YACL,OAAO,EAAE,CAAC,CAAC,MAAM;YACjB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,eAAe,EAAE,CAAC,CAAC,cAAc;YACjC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc;YAC1C,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW;YACpC,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe;YAC5C,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,YAAY;YACtC,YAAY,EAAE,CAAC,CAAC,WAAW;YAC3B,WAAW,EAAE,CAAC,CAAC,UAAU;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,SAAS,CAAC,KAAa;QACrB,MAAM,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;OAI5B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAiB,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,aAAa;QACX,MAAM,GAAG,GAAG,IAAI,GAAG,EAA4C,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;OAG5B,CAAC,CAAC,GAAG,EAAmD,CAAC;YAC1D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACnC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAAC,CAAC,GAAG,IAAI,GAAG,EAA+B,CAAC;oBAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACtF,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,wDAAwD;IACxD,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,wDAAwD,CACzD,CAAC,GAAG,CAAC,MAAM,CAA2B,CAAC;YACxC,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,WAAW,CAAC,WAAqB;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC9B,4CAA4C,CAC7C,CAAC,GAAG,EAAgC,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC;YACpF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;CACF;AASD;;;;;;;;GAQG;AACH,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,uEAAuE;IACvE,GAAG;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,sFAAsF,CACvF,CAAC,GAAG,EAA+E,CAAC;YACrF,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACxG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,mGAAmG;IACnG,IAAI,CAAC,MAAc,EAAE,MAAc;QACjC,IAAI,CAAC,EAAE,CAAC,OAAO,CACb,mGAAmG,CACpG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAC5D,CAAC;IAED,kGAAkG;IAClG,iBAAiB,CAAC,MAAc;QAC9B,IAAI,CAAC,EAAE,CAAC,OAAO,CACb,qEAAqE,CACtE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/seat-status-service.d.ts

@@ -0,0 +1,50 @@
+import type { RigRepository } from "./rig-repository.js";
+import type { NodeInventoryEntry } from "./types.js";
+export interface SeatStatus {
+    seat_ref: string;
+    rig_id: string;
+    rig_name: string;
+    logical_id: string;
+    pod_id: string | null;
+    pod_namespace: string | null;
+    runtime: string | null;
+    current_occupant: string | null;
+    session_status: string | null;
+    startup_status: NodeInventoryEntry["startupStatus"];
+    occupant_lifecycle: NodeInventoryEntry["occupantLifecycle"];
+    continuity_outcome: NodeInventoryEntry["continuityOutcome"];
+    handover_result: NodeInventoryEntry["handoverResult"];
+    previous_occupant: string | null;
+    handover_at: string | null;
+    restore_outcome: NodeInventoryEntry["restoreOutcome"];
+}
+export type SeatStatusResult = {
+    ok: true;
+    status: SeatStatus;
+} | {
+    ok: false;
+    code: "seat_ref_required" | "seat_not_found";
+    message: string;
+    guidance: string;
+} | {
+    ok: false;
+    code: "seat_ambiguous";
+    message: string;
+    guidance: string;
+    matches: Array<{
+        rig_name: string;
+        logical_id: string;
+        current_occupant: string | null;
+    }>;
+};
+export declare class SeatStatusService {
+    private rigRepo;
+    constructor(deps: {
+        rigRepo: RigRepository;
+    });
+    getStatus(seatRef: string): SeatStatusResult;
+    private findMatches;
+    private entriesForRig;
+    private projectStatus;
+}
+//# sourceMappingURL=seat-status-service.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/seat-status-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-status-service.d.ts","sourceRoot":"","sources":["../../src/domain/seat-status-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIrD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACpD,kBAAkB,EAAE,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;IAC5D,kBAAkB,EAAE,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;IAC5D,eAAe,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACtD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,EAAE,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GAChC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,mBAAmB,GAAG,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC9F;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAMxK,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAgB;gBAEnB,IAAI,EAAE;QAAE,OAAO,EAAE,aAAa,CAAA;KAAE;IAI5C,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB;IA2B5C,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,aAAa;IAIrB,OAAO,CAAC,aAAa;CAoBtB"}

package/node_modules/@openrig/daemon/dist/domain/seat-status-service.js

@@ -0,0 +1,68 @@
+import { getNodeInventory } from "./node-inventory.js";
+import { parseSessionName } from "./session-name.js";
+const SEAT_LOOKUP_GUIDANCE = "List seats with: rig ps --nodes";
+export class SeatStatusService {
+    rigRepo;
+    constructor(deps) {
+        this.rigRepo = deps.rigRepo;
+    }
+    getStatus(seatRef) {
+        const ref = seatRef.trim();
+        if (!ref) {
+            return { ok: false, code: "seat_ref_required", message: "seat reference is required", guidance: SEAT_LOOKUP_GUIDANCE };
+        }
+        const matches = this.findMatches(ref);
+        if (matches.length === 0) {
+            return { ok: false, code: "seat_not_found", message: `Seat "${ref}" not found`, guidance: SEAT_LOOKUP_GUIDANCE };
+        }
+        if (matches.length > 1) {
+            return {
+                ok: false,
+                code: "seat_ambiguous",
+                message: `Seat "${ref}" matched multiple nodes`,
+                guidance: SEAT_LOOKUP_GUIDANCE,
+                matches: matches.map(({ entry }) => ({
+                    rig_name: entry.rigName,
+                    logical_id: entry.logicalId,
+                    current_occupant: entry.canonicalSessionName,
+                })),
+            };
+        }
+        return { ok: true, status: this.projectStatus(ref, matches[0].entry) };
+    }
+    findMatches(ref) {
+        // OPR.0.4.6.MH1 FR-8: the shared parse contract (greedy first-@ rig).
+        const parsed = parseSessionName(ref);
+        if (parsed.kind === "canonical") {
+            const localRef = parsed.member;
+            const rigName = parsed.rig;
+            const rigs = this.rigRepo.findRigsByName(rigName);
+            return rigs.flatMap((rig) => this.entriesForRig(rig.id).filter((entry) => entry.canonicalSessionName === ref || entry.logicalId === localRef).map((entry) => ({ entry })));
+        }
+        return this.rigRepo.listRigs().flatMap((rig) => this.entriesForRig(rig.id).filter((entry) => entry.canonicalSessionName === ref || entry.logicalId === ref).map((entry) => ({ entry })));
+    }
+    entriesForRig(rigId) {
+        return getNodeInventory(this.rigRepo.db, rigId);
+    }
+    projectStatus(seatRef, entry) {
+        return {
+            seat_ref: seatRef,
+            rig_id: entry.rigId,
+            rig_name: entry.rigName,
+            logical_id: entry.logicalId,
+            pod_id: entry.podId,
+            pod_namespace: entry.podNamespace ?? null,
+            runtime: entry.runtime,
+            current_occupant: entry.canonicalSessionName,
+            session_status: entry.sessionStatus,
+            startup_status: entry.startupStatus,
+            occupant_lifecycle: entry.occupantLifecycle,
+            continuity_outcome: entry.continuityOutcome,
+            handover_result: entry.handoverResult,
+            previous_occupant: entry.previousOccupant,
+            handover_at: entry.handoverAt,
+            restore_outcome: entry.restoreOutcome,
+        };
+    }
+}
+//# sourceMappingURL=seat-status-service.js.map

package/node_modules/@openrig/daemon/dist/domain/seat-status-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-status-service.js","sourceRoot":"","sources":["../../src/domain/seat-status-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGrD,MAAM,oBAAoB,GAAG,iCAAiC,CAAC;AA8B/D,MAAM,OAAO,iBAAiB;IACpB,OAAO,CAAgB;IAE/B,YAAY,IAAgC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,OAAe;QACvB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,4BAA4B,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;QACzH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,GAAG,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;QACnH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,SAAS,GAAG,0BAA0B;gBAC/C,QAAQ,EAAE,oBAAoB;gBAC9B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;oBACnC,QAAQ,EAAE,KAAK,CAAC,OAAO;oBACvB,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,gBAAgB,EAAE,KAAK,CAAC,oBAAoB;iBAC7C,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1E,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,sEAAsE;QACtE,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACvE,KAAK,CAAC,oBAAoB,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CACnE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,KAAK,CAAC,oBAAoB,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAC9D,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAC9B,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,KAAa;QACjC,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IAEO,aAAa,CAAC,OAAe,EAAE,KAAyB;QAC9D,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,KAAK,CAAC,KAAK;YACnB,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,MAAM,EAAE,KAAK,CAAC,KAAK;YACnB,aAAa,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACzC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,gBAAgB,EAAE,KAAK,CAAC,oBAAoB;YAC5C,cAAc,EAAE,KAAK,CAAC,aAAa;YACnC,cAAc,EAAE,KAAK,CAAC,aAAa;YACnC,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;YAC3C,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;YAC3C,eAAe,EAAE,KAAK,CAAC,cAAc;YACrC,iBAAiB,EAAE,KAAK,CAAC,gBAAgB;YACzC,WAAW,EAAE,KAAK,CAAC,UAAU;YAC7B,eAAe,EAAE,KAAK,CAAC,cAAc;SACtC,CAAC;IACJ,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/seat-structural-activity-service.d.ts

@@ -0,0 +1,58 @@
+import type Database from "better-sqlite3";
+import type { TmuxAdapter } from "../adapters/tmux.js";
+import { type PaneActivityClassification } from "./session-transport.js";
+/** A cached STRUCTURAL pane observation: the classifyPaneActivity verdict plus WHEN the pane was read
+ *  as motion. observedAt is a LIVENESS timestamp (last time we saw the pane), NOT a hook-arrival age —
+ *  that distinction is the whole point of constraint 2 (a real counter is not a real liveness verdict). */
+export interface StructuralObservation {
+    state: PaneActivityClassification["state"];
+    reason: string;
+    evidence: string | null;
+    observedAt: string;
+}
+export declare const DEFAULT_STRUCTURAL_POLL_INTERVAL_MS = 1000;
+export declare const DEFAULT_STRUCTURAL_STALE_MS = 5000;
+/**
+ * 5b82324b — the STRUCTURAL activity cache. Sibling of SeatActivityService (which reads ONLY the tmux
+ * window_activity TIMESTAMP and is deliberately text-blind): this service captures pane TEXT once per
+ * running tmux seat per tick and classifies it STRUCTURALLY via classifyPaneActivity (spinner shapes,
+ * `esc to interrupt`, idle-prompt / status-bar signatures — never a verb allowlist, so a "Drizzling"-
+ * style spinner reads as motion instead of a false park). The cache is READ (capture-FREE) by
+ * attachAgentActivity so the `rig ps` ACTIVITY column reflects real pane motion for hook-less / stale-
+ * hook / turn-boundary seats WITHOUT reintroducing the per-request capture storm the healthz-wedge
+ * cheap-default removed. Two safety rules make the BACKGROUND path itself safe:
+ *   (MF1) a read refuses a stale observation and a failed capture invalidates the prior row — a stale
+ *         positive verdict never survives a capture outage or a same-name occupant transition; and
+ *   (MF2) sweeps are SINGLE-FLIGHT and HELD until the real captures settle — a slow/stuck tmux can
+ *         never accumulate overlapping whole-fleet captures (only one sweep's captures are ever in
+ *         flight). We deliberately do NOT time-out a capture to release the guard: execCommand has no
+ *         AbortSignal, so a wrapper timeout would release single-flight while the child process lives,
+ *         letting a later sweep spawn MORE children — the storm at the process level. A permanently
+ *         stuck tmux therefore degrades to "no structural signal" (honest, via MF1 age-expiry), never
+ *         a storm. A kill-backed capture primitive (bounded abort) is a tmux-adapter follow-on.
+ */
+export declare class SeatStructuralActivityService {
+    private readonly tmuxAdapter;
+    private readonly now;
+    private readonly captureLines;
+    private readonly staleAfterMs;
+    private readonly latestBySession;
+    private timer;
+    private sweeping;
+    constructor(tmuxAdapter: Pick<TmuxAdapter, "capturePaneContent">, now?: () => Date, captureLines?: number, staleAfterMs?: number);
+    /** The cached structural observation — ONLY while current (capture-FREE read). Returns null AND evicts
+     *  once the observation is older than the freshness window, so a stalled/failed poller never leaves a
+     *  stale positive verdict authoritative over an honest stale hook (MUST-FIX 1). */
+    getStructuralActivity(sessionName: string): StructuralObservation | null;
+    /** Capture + structurally classify one seat's pane, caching the observation keyed by session name. A
+     *  null or failed capture INVALIDATES the prior row (never leaves a stale positive verdict) and
+     *  returns null (MUST-FIX 1). */
+    pollSeat(sessionName: string): Promise<StructuralObservation | null>;
+    /** Refresh every running tmux-bound seat once. SINGLE-FLIGHT and HELD until the captures settle: a new
+     *  sweep never starts while one is in flight (MUST-FIX 2), so a slow/stuck tmux can never accumulate
+     *  overlapping whole-fleet captures — at most one sweep's worth (N seats) is ever in flight. */
+    pollAllRunningTmuxSeats(db: Database.Database): Promise<void>;
+    start(db: Database.Database, intervalMs?: number): void;
+    stop(): void;
+}
+//# sourceMappingURL=seat-structural-activity-service.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/seat-structural-activity-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-structural-activity-service.d.ts","sourceRoot":"","sources":["../../src/domain/seat-structural-activity-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAwB,KAAK,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAE/F;;2GAE2G;AAC3G,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,mCAAmC,OAAO,CAAC;AAMxD,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAEhD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,6BAA6B;IAMtC,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAR/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA4C;IAC5E,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,QAAQ,CAAS;gBAGN,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAC,EACpD,GAAG,GAAE,MAAM,IAAuB,EAClC,YAAY,GAAE,MAAW,EACzB,YAAY,GAAE,MAAoC;IAGrE;;uFAEmF;IACnF,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI;IAUxE;;qCAEiC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAuB1E;;oGAEgG;IAC1F,uBAAuB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BnE,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAE,MAA4C,GAAG,IAAI;IAQ5F,IAAI,IAAI,IAAI;CAGb"}

package/node_modules/@openrig/daemon/dist/domain/seat-structural-activity-service.js

@@ -0,0 +1,130 @@
+import { classifyPaneActivity } from "./session-transport.js";
+export const DEFAULT_STRUCTURAL_POLL_INTERVAL_MS = 1000;
+// A cached observation is authoritative only while CURRENT. Past this window with no fresh capture — a
+// tmux/capture outage, a stalled poller, or a same-name occupant transition — the READ refuses it and
+// evicts it, so a stale positive verdict can never masquerade as liveness (MUST-FIX 1). 5× the poll
+// tolerates a few missed ticks; a persistently failing/stuck poller ages the row out and the ACTIVITY
+// projection falls back to the honest hook/unknown state.
+export const DEFAULT_STRUCTURAL_STALE_MS = 5000;
+/**
+ * 5b82324b — the STRUCTURAL activity cache. Sibling of SeatActivityService (which reads ONLY the tmux
+ * window_activity TIMESTAMP and is deliberately text-blind): this service captures pane TEXT once per
+ * running tmux seat per tick and classifies it STRUCTURALLY via classifyPaneActivity (spinner shapes,
+ * `esc to interrupt`, idle-prompt / status-bar signatures — never a verb allowlist, so a "Drizzling"-
+ * style spinner reads as motion instead of a false park). The cache is READ (capture-FREE) by
+ * attachAgentActivity so the `rig ps` ACTIVITY column reflects real pane motion for hook-less / stale-
+ * hook / turn-boundary seats WITHOUT reintroducing the per-request capture storm the healthz-wedge
+ * cheap-default removed. Two safety rules make the BACKGROUND path itself safe:
+ *   (MF1) a read refuses a stale observation and a failed capture invalidates the prior row — a stale
+ *         positive verdict never survives a capture outage or a same-name occupant transition; and
+ *   (MF2) sweeps are SINGLE-FLIGHT and HELD until the real captures settle — a slow/stuck tmux can
+ *         never accumulate overlapping whole-fleet captures (only one sweep's captures are ever in
+ *         flight). We deliberately do NOT time-out a capture to release the guard: execCommand has no
+ *         AbortSignal, so a wrapper timeout would release single-flight while the child process lives,
+ *         letting a later sweep spawn MORE children — the storm at the process level. A permanently
+ *         stuck tmux therefore degrades to "no structural signal" (honest, via MF1 age-expiry), never
+ *         a storm. A kill-backed capture primitive (bounded abort) is a tmux-adapter follow-on.
+ */
+export class SeatStructuralActivityService {
+    tmuxAdapter;
+    now;
+    captureLines;
+    staleAfterMs;
+    latestBySession = new Map();
+    timer = null;
+    sweeping = false; // single-flight guard: one whole-fleet sweep at a time (MUST-FIX 2)
+    constructor(tmuxAdapter, now = () => new Date(), captureLines = 20, staleAfterMs = DEFAULT_STRUCTURAL_STALE_MS) {
+        this.tmuxAdapter = tmuxAdapter;
+        this.now = now;
+        this.captureLines = captureLines;
+        this.staleAfterMs = staleAfterMs;
+    }
+    /** The cached structural observation — ONLY while current (capture-FREE read). Returns null AND evicts
+     *  once the observation is older than the freshness window, so a stalled/failed poller never leaves a
+     *  stale positive verdict authoritative over an honest stale hook (MUST-FIX 1). */
+    getStructuralActivity(sessionName) {
+        const obs = this.latestBySession.get(sessionName);
+        if (!obs)
+            return null;
+        if (this.now().getTime() - Date.parse(obs.observedAt) >= this.staleAfterMs) {
+            this.latestBySession.delete(sessionName);
+            return null;
+        }
+        return obs;
+    }
+    /** Capture + structurally classify one seat's pane, caching the observation keyed by session name. A
+     *  null or failed capture INVALIDATES the prior row (never leaves a stale positive verdict) and
+     *  returns null (MUST-FIX 1). */
+    async pollSeat(sessionName) {
+        let content;
+        try {
+            content = await this.tmuxAdapter.capturePaneContent(sessionName, this.captureLines);
+        }
+        catch {
+            this.latestBySession.delete(sessionName);
+            return null;
+        }
+        if (content === null) {
+            this.latestBySession.delete(sessionName);
+            return null;
+        }
+        const c = classifyPaneActivity(content);
+        const obs = {
+            state: c.state,
+            reason: c.reason,
+            evidence: c.evidence,
+            observedAt: this.now().toISOString(),
+        };
+        this.latestBySession.set(sessionName, obs);
+        return obs;
+    }
+    /** Refresh every running tmux-bound seat once. SINGLE-FLIGHT and HELD until the captures settle: a new
+     *  sweep never starts while one is in flight (MUST-FIX 2), so a slow/stuck tmux can never accumulate
+     *  overlapping whole-fleet captures — at most one sweep's worth (N seats) is ever in flight. */
+    async pollAllRunningTmuxSeats(db) {
+        if (this.sweeping)
+            return;
+        this.sweeping = true;
+        try {
+            const rows = db.prepare(`
+        SELECT s.session_name as session_name
+        FROM nodes n
+        JOIN sessions s ON s.node_id = n.id
+          AND s.id = (SELECT s2.id FROM sessions s2 WHERE s2.node_id = n.id ORDER BY s2.id DESC LIMIT 1)
+        LEFT JOIN bindings b ON b.node_id = n.id
+        WHERE s.status = 'running'
+          AND s.session_name IS NOT NULL
+          AND COALESCE(b.attachment_type, 'tmux') = 'tmux'
+      `).all();
+            const live = new Set(rows.map((r) => r.session_name));
+            for (const s of Array.from(this.latestBySession.keys())) {
+                if (!live.has(s))
+                    this.latestBySession.delete(s); // release memory + never serve a stale read
+            }
+            await Promise.all(rows.map(async (r) => {
+                try {
+                    await this.pollSeat(r.session_name);
+                }
+                catch { /* isolate: one seat's failure never crashes the sweep */ }
+            }));
+        }
+        finally {
+            this.sweeping = false;
+        }
+    }
+    start(db, intervalMs = DEFAULT_STRUCTURAL_POLL_INTERVAL_MS) {
+        if (this.timer)
+            return; // idempotent
+        this.timer = setInterval(() => { void this.pollAllRunningTmuxSeats(db); }, intervalMs);
+        if (this.timer && typeof this.timer === "object" && "unref" in this.timer) {
+            this.timer.unref();
+        }
+    }
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+}
+//# sourceMappingURL=seat-structural-activity-service.js.map

package/node_modules/@openrig/daemon/dist/domain/seat-structural-activity-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-structural-activity-service.js","sourceRoot":"","sources":["../../src/domain/seat-structural-activity-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAmC,MAAM,wBAAwB,CAAC;AAY/F,MAAM,CAAC,MAAM,mCAAmC,GAAG,IAAI,CAAC;AACxD,uGAAuG;AACvG,sGAAsG;AACtG,oGAAoG;AACpG,sGAAsG;AACtG,0DAA0D;AAC1D,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAEhD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,6BAA6B;IAMrB;IACA;IACA;IACA;IARF,eAAe,GAAG,IAAI,GAAG,EAAiC,CAAC;IACpE,KAAK,GAA0C,IAAI,CAAC;IACpD,QAAQ,GAAG,KAAK,CAAC,CAAC,oEAAoE;IAE9F,YACmB,WAAoD,EACpD,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAClC,eAAuB,EAAE,EACzB,eAAuB,2BAA2B;QAHlD,gBAAW,GAAX,WAAW,CAAyC;QACpD,QAAG,GAAH,GAAG,CAA+B;QAClC,iBAAY,GAAZ,YAAY,CAAa;QACzB,iBAAY,GAAZ,YAAY,CAAsC;IAClE,CAAC;IAEJ;;uFAEmF;IACnF,qBAAqB,CAAC,WAAmB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3E,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;qCAEiC;IACjC,KAAK,CAAC,QAAQ,CAAC,WAAmB;QAChC,IAAI,OAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,GAAG,GAA0B;YACjC,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;oGAEgG;IAChG,KAAK,CAAC,uBAAuB,CAAC,EAAqB;QACjD,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;;OASvB,CAAC,CAAC,GAAG,EAAqC,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YACtD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,4CAA4C;YAChG,CAAC;YACD,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;gBACrC,IAAI,CAAC;oBAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,yDAAyD,CAAC,CAAC;YAClH,CAAC,CAAC,CAAC,CAAC;QACN,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,EAAqB,EAAE,aAAqB,mCAAmC;QACnF,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,aAAa;QACrC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACvF,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACzE,IAAI,CAAC,KAAwB,CAAC,KAAK,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;IACnE,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/seat-switch-client-service.d.ts

@@ -0,0 +1,57 @@
+import type { RigRepository } from "./rig-repository.js";
+import type { TmuxAdapter } from "../adapters/tmux.js";
+export interface SeatSwitchClientRequest {
+    seatRef: string;
+    /** Target a specific attached client; required when multiple are attached. */
+    client?: string | null;
+    /** Target window index; defaults to 0 (the canonical seat window). */
+    toWindow?: number | null;
+}
+export interface SeatSwitchClientSuccess {
+    seat_ref: string;
+    session: string;
+    window: number;
+    target: string;
+    client: string;
+    /** VIEW-ONLY marker: switch-client never mutates routing/bindings/identity. */
+    mutated: false;
+    retargeted: true;
+}
+interface ClientRef {
+    name: string;
+    session: string;
+}
+export type SeatSwitchClientResult = {
+    ok: true;
+    result: SeatSwitchClientSuccess;
+} | {
+    ok: false;
+    code: "seat_ref_required" | "seat_not_found" | "seat_ambiguous" | "missing_canonical_session" | "session_not_found" | "window_not_found" | "no_client" | "ambiguous_client" | "client_not_found" | "switch_failed" | "tmux_probe_failed";
+    message: string;
+    guidance?: string;
+    /** Attached clients, surfaced on the ambiguous / not-found paths so the
+     *  operator can re-run with an explicit --client. */
+    clients?: ClientRef[];
+    matches?: Array<{
+        rig_name: string;
+        logical_id: string;
+        current_occupant: string | null;
+    }>;
+};
+export declare class SeatSwitchClientService {
+    private rigRepo;
+    private tmuxAdapter;
+    constructor(deps: {
+        rigRepo: RigRepository;
+        tmuxAdapter: TmuxAdapter;
+    });
+    /** Honest probe-failure result. The tmux adapter intentionally RETHROWS
+     *  unexpected probe failures (permission / socket errors). Every probe here
+     *  (hasSession / listWindows / listClients) routes a throw through this so it
+     *  surfaces as a structured tmux_probe_failed (-> HTTP 502) that names the
+     *  failed operation, never an unstructured 500. */
+    private probeFailed;
+    switchClient(req: SeatSwitchClientRequest): Promise<SeatSwitchClientResult>;
+}
+export {};
+//# sourceMappingURL=seat-switch-client-service.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/seat-switch-client-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-switch-client-service.d.ts","sourceRoot":"","sources":["../../src/domain/seat-switch-client-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAA0B,MAAM,qBAAqB,CAAC;AAuB/E,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,OAAO,EAAE,KAAK,CAAC;IACf,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,UAAU,SAAS;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,GAC7C;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EACA,mBAAmB,GACnB,gBAAgB,GAChB,gBAAgB,GAChB,2BAA2B,GAC3B,mBAAmB,GACnB,kBAAkB,GAClB,WAAW,GACX,kBAAkB,GAClB,kBAAkB,GAClB,eAAe,GACf,mBAAmB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;yDACqD;IACrD,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAC5F,CAAC;AAEN,qBAAa,uBAAuB;IAClC,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,WAAW,CAAc;gBAErB,IAAI,EAAE;QAAE,OAAO,EAAE,aAAa,CAAC;QAAC,WAAW,EAAE,WAAW,CAAA;KAAE;IAKtE;;;;uDAImD;IACnD,OAAO,CAAC,WAAW;IASb,YAAY,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAmIlF"}