@openrig/cli 0.5.15 → 0.5.17

package/node_modules/@openrig/daemon/dist/domain/agent-images/evidence-guard.js

@@ -1,185 +0,0 @@
-// Fork Primitive + Starter Agent Images v0 (PL-016) — evidence-
-// preservation guard for `rig agent-image prune` / DELETE
-// /api/agent-images/library/:id.
-//
-// PRD § Item 6 — CATASTROPHIC BOUNCE if dropped. An image is protected
-// from deletion if ANY:
-//
-//   - Pinned (operator placed `.pinned` sentinel via `rig agent-image pin`)
-//   - Referenced by an active agent.yaml (session_source: mode:
-//     agent_image, ref.value: <name>) — scanned across discovery roots
-//     for spec library files
-//   - Referenced by a rig spec in the spec library (members[].session_source)
-//   - Lineage descendant of another protected image (transitive
-//     protection up the chain)
-//
-// The guard fails CLOSED. Operator may pass --force to override.
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { join } from "node:path";
-import { parse as parseYaml } from "yaml";
-/**
- * Compute protection status for every image. The result is parallel to
- * the input array order; the protected image set is what `prune` MUST
- * skip unless --force is supplied.
- */
-export function evaluateProtection(opts) {
-    const referencedNames = scanSpecRootsForReferences(opts.specRoots);
-    // Pass 1: compute direct protection (pinned + referenced).
-    const statuses = new Map();
-    const protectedNameSet = new Set();
-    for (const img of opts.images) {
-        const refs = referencedNames.get(img.name) ?? [];
-        const reasons = [];
-        if (img.pinned)
-            reasons.push("pinned");
-        // Distinguish agent.yaml-shaped vs rig.yaml-shaped references when
-        // both surface; but the scanner returns paths, and the path-based
-        // tag is stored alongside. Simplification at v0: any file whose
-        // basename is `agent.yaml` is agent-spec; otherwise rig-spec.
-        const seenReason = new Set();
-        for (const ref of refs) {
-            const reason = ref.endsWith("/agent.yaml")
-                ? "referenced_by_agent_spec"
-                : "referenced_by_rig_spec";
-            if (!seenReason.has(reason)) {
-                reasons.push(reason);
-                seenReason.add(reason);
-            }
-        }
-        const status = {
-            imageId: img.id,
-            imageName: img.name,
-            imageVersion: img.version,
-            protected: reasons.length > 0,
-            reasons,
-            references: refs,
-        };
-        statuses.set(img.name, status);
-        if (status.protected)
-            protectedNameSet.add(img.name);
-    }
-    // Pass 2: transitive lineage protection. An image whose lineage
-    // includes a protected image becomes protected too. Iterate to a
-    // fixed point so multi-hop chains converge.
-    let changed = true;
-    while (changed) {
-        changed = false;
-        for (const img of opts.images) {
-            const status = statuses.get(img.name);
-            if (status.protected)
-                continue;
-            // img's lineage lists ANCESTORS. We protect a DESCENDANT of a
-            // protected image — meaning if any ancestor of `img` is
-            // protected, `img` itself becomes protected by transit.
-            for (const ancestor of img.lineage) {
-                if (protectedNameSet.has(ancestor)) {
-                    status.protected = true;
-                    status.reasons.push("lineage_descendant_of_protected");
-                    status.references.push(`lineage-of:${ancestor}`);
-                    protectedNameSet.add(img.name);
-                    changed = true;
-                    break;
-                }
-            }
-        }
-    }
-    return opts.images.map((img) => statuses.get(img.name));
-}
-/** Walk spec-library roots for YAML files and collect file paths that
- *  reference any agent_image by name. The match is conservative: any
- *  YAML that contains a `mode: agent_image` directive WITH a
- *  `value: <name>` field is treated as a reference. False positives are
- *  acceptable (over-protection); false negatives would cause
- *  catastrophic data loss. */
-function scanSpecRootsForReferences(roots) {
-    const out = new Map();
-    for (const root of roots) {
-        if (!existsSync(root))
-            continue;
-        walkYaml(root, (absPath) => {
-            let raw;
-            try {
-                raw = readFileSync(absPath, "utf-8");
-            }
-            catch {
-                return;
-            }
-            if (!raw.includes("agent_image"))
-                return;
-            let parsed;
-            try {
-                parsed = parseYaml(raw);
-            }
-            catch {
-                return;
-            }
-            const refs = collectImageRefs(parsed);
-            for (const name of refs) {
-                const existing = out.get(name) ?? [];
-                existing.push(absPath);
-                out.set(name, existing);
-            }
-        });
-    }
-    return out;
-}
-function walkYaml(root, visit) {
-    const stack = [root];
-    while (stack.length > 0) {
-        const current = stack.pop();
-        let entries;
-        try {
-            entries = readdirSync(current, { withFileTypes: true });
-        }
-        catch {
-            continue;
-        }
-        for (const entry of entries) {
-            const abs = join(current, entry.name);
-            if (entry.isDirectory()) {
-                stack.push(abs);
-            }
-            else if (entry.isFile() && (entry.name.endsWith(".yaml") || entry.name.endsWith(".yml"))) {
-                try {
-                    if (statSync(abs).size > 5_000_000)
-                        continue; // skip suspiciously large YAML files
-                }
-                catch {
-                    continue;
-                }
-                visit(abs);
-            }
-        }
-    }
-}
-/** Recursively walk a parsed YAML tree and collect the `value` of any
- *  `session_source: { mode: agent_image, ref: { kind: image_name, value: <name> } }`. */
-function collectImageRefs(node, acc = new Set()) {
-    if (!node || typeof node !== "object")
-        return acc;
-    if (Array.isArray(node)) {
-        for (const item of node)
-            collectImageRefs(item, acc);
-        return acc;
-    }
-    const obj = node;
-    // Match shape: session_source: { mode: agent_image, ref: { value: <name> } }
-    const ss = obj["session_source"] ?? obj["sessionSource"];
-    if (ss && typeof ss === "object" && !Array.isArray(ss)) {
-        const ssObj = ss;
-        if (ssObj["mode"] === "agent_image") {
-            const ref = ssObj["ref"];
-            if (ref && typeof ref === "object" && !Array.isArray(ref)) {
-                const value = ref["value"];
-                if (typeof value === "string" && value.length > 0)
-                    acc.add(value);
-            }
-        }
-    }
-    // Recurse into all values regardless — a rig.yaml has session_source
-    // nested inside members[].
-    for (const v of Object.values(obj))
-        collectImageRefs(v, acc);
-    return acc;
-}
-//# sourceMappingURL=evidence-guard.js.map

package/node_modules/@openrig/daemon/dist/domain/agent-images/evidence-guard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"evidence-guard.js","sourceRoot":"","sources":["../../../src/domain/agent-images/evidence-guard.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,0DAA0D;AAC1D,iCAAiC;AACjC,EAAE;AACF,uEAAuE;AACvE,wBAAwB;AACxB,EAAE;AACF,4EAA4E;AAC5E,gEAAgE;AAChE,uEAAuE;AACvE,6BAA6B;AAC7B,8EAA8E;AAC9E,gEAAgE;AAChE,+BAA+B;AAC/B,EAAE;AACF,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AA4B1C;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAuB;IACxD,MAAM,eAAe,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnE,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,mEAAmE;QACnE,kEAAkE;QAClE,gEAAgE;QAChE,8DAA8D;QAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAqB,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC1D,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,wBAAwB,CAAC;YAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrB,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAA0B;YACpC,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,SAAS,EAAE,GAAG,CAAC,IAAI;YACnB,YAAY,EAAE,GAAG,CAAC,OAAO;YACzB,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC7B,OAAO;YACP,UAAU,EAAE,IAAI;SACjB,CAAC;QACF,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,SAAS;YAAE,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,gEAAgE;IAChE,iEAAiE;IACjE,4CAA4C;IAC5C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,OAAO,GAAG,KAAK,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;YACvC,IAAI,MAAM,CAAC,SAAS;gBAAE,SAAS;YAC/B,8DAA8D;YAC9D,wDAAwD;YACxD,wDAAwD;YACxD,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACnC,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACnC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;oBACxB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;oBACvD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;oBACjD,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC/B,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;8BAK8B;AAC9B,SAAS,0BAA0B,CAAC,KAAwB;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;YACzB,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBAAC,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAAE,OAAO;YACzC,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;YAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YACtC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAgC;IAC9D,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAC7B,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC3F,IAAI,CAAC;oBACH,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,SAAS;wBAAE,SAAS,CAAC,qCAAqC;gBACrF,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;yFACyF;AACzF,SAAS,gBAAgB,CAAC,IAAa,EAAE,MAAmB,IAAI,GAAG,EAAE;IACnE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,IAAI;YAAE,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,6EAA6E;IAC7E,MAAM,EAAE,GAAG,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACzD,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,EAA6B,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAI,GAA+B,CAAC,OAAO,CAAC,CAAC;gBACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IACD,qEAAqE;IACrE,2BAA2B;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,gBAAgB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/agent-images/manifest-parser.d.ts

@@ -1,3 +0,0 @@
-import { type AgentImageManifest } from "./agent-image-types.js";
-export declare function parseAgentImageManifest(rawYaml: string, sourcePath: string): AgentImageManifest;
-//# sourceMappingURL=manifest-parser.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/agent-images/manifest-parser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"manifest-parser.d.ts","sourceRoot":"","sources":["../../../src/domain/agent-images/manifest-parser.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,kBAAkB,EAGxB,MAAM,wBAAwB,CAAC;AAKhC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,kBAAkB,CAoK/F"}

package/node_modules/@openrig/daemon/dist/domain/agent-images/manifest-parser.js

@@ -1,114 +0,0 @@
-// Fork Primitive + Starter Agent Images v0 (PL-016) — manifest parser.
-//
-// Parses ~/.openrig/agent-images/<name>/manifest.yaml into a typed
-// AgentImageManifest. Pure (no fs touches in the parser; caller hands
-// in raw YAML). Validation guards: required field checks, runtime
-// allow-list, path-traversal rejection on supplementary files.
-import { parse as parseYaml } from "yaml";
-import { AgentImageError, } from "./agent-image-types.js";
-const ALLOWED_RUNTIMES = new Set(["claude-code", "codex"]);
-const ALLOWED_FILE_SUFFIXES = [".md", ".markdown", ".yaml", ".yml", ".txt", ".json"];
-export function parseAgentImageManifest(rawYaml, sourcePath) {
-    let parsed;
-    try {
-        parsed = parseYaml(rawYaml);
-    }
-    catch (err) {
-        throw new AgentImageError("manifest_parse_error", `manifest at ${sourcePath} is not valid YAML: ${err.message}`, { sourcePath });
-    }
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} must be a YAML object at the root`, { sourcePath });
-    }
-    const obj = parsed;
-    const name = obj["name"];
-    if (typeof name !== "string" || name.length === 0) {
-        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'name'`, { sourcePath });
-    }
-    const versionRaw = obj["version"];
-    if (versionRaw === undefined || versionRaw === null) {
-        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'version'`, { sourcePath });
-    }
-    const version = String(versionRaw);
-    const runtime = obj["runtime"];
-    if (typeof runtime !== "string" || !ALLOWED_RUNTIMES.has(runtime)) {
-        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} has invalid runtime '${runtime}'; allowed: ${[...ALLOWED_RUNTIMES].join(", ")}`, { sourcePath, runtime });
-    }
-    // Source seat / session id / resume token are required on a real
-    // image. The PRD's v0 manifest schema reads these as load-bearing —
-    // an image without a resume token can't be consumed.
-    const sourceSeatRaw = obj["source_seat"] ?? obj["sourceSeat"];
-    if (typeof sourceSeatRaw !== "string" || sourceSeatRaw.length === 0) {
-        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'source_seat'`, { sourcePath });
-    }
-    const sourceSessionIdRaw = obj["source_session_id"] ?? obj["sourceSessionId"];
-    if (typeof sourceSessionIdRaw !== "string" || sourceSessionIdRaw.length === 0) {
-        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'source_session_id'`, { sourcePath });
-    }
-    const sourceResumeTokenRaw = obj["source_resume_token"] ?? obj["sourceResumeToken"];
-    if (typeof sourceResumeTokenRaw !== "string" || sourceResumeTokenRaw.length === 0) {
-        throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} is missing required field 'source_resume_token'`, { sourcePath });
-    }
-    const createdAtRaw = obj["created_at"] ?? obj["createdAt"];
-    const createdAt = typeof createdAtRaw === "string" && createdAtRaw.length > 0
-        ? createdAtRaw
-        : new Date(0).toISOString();
-    const notes = typeof obj["notes"] === "string" ? obj["notes"] : undefined;
-    // PL-016 source-cwd behavior: optional
-    // source_cwd captured at snapshot time. Manifests authored before this
-    // fix omit the field; consumers fall back to "no cwd line" rendering
-    // (back-compat).
-    const sourceCwdRaw = obj["source_cwd"] ?? obj["sourceCwd"];
-    const sourceCwd = typeof sourceCwdRaw === "string" && sourceCwdRaw.length > 0
-        ? sourceCwdRaw
-        : undefined;
-    const filesRaw = obj["files"];
-    const files = [];
-    if (Array.isArray(filesRaw)) {
-        for (let i = 0; i < filesRaw.length; i++) {
-            const f = filesRaw[i];
-            if (!f || typeof f !== "object" || Array.isArray(f)) {
-                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} has malformed entry at files[${i}] (must be object with path + role)`, { sourcePath, index: i });
-            }
-            const fr = f;
-            const path = fr["path"];
-            if (typeof path !== "string" || path.length === 0) {
-                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}] missing 'path'`, { sourcePath, index: i });
-            }
-            if (path.includes("..") || path.startsWith("/")) {
-                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}].path '${path}' must be a relative path inside the image (no '..', no leading '/')`, { sourcePath, index: i, path });
-            }
-            if (!ALLOWED_FILE_SUFFIXES.some((s) => path.endsWith(s))) {
-                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}].path '${path}' has unsupported suffix; allowed: ${ALLOWED_FILE_SUFFIXES.join(", ")}`, { sourcePath, index: i, path });
-            }
-            const role = fr["role"];
-            if (typeof role !== "string" || role.length === 0) {
-                throw new AgentImageError("manifest_invalid", `manifest at ${sourcePath} files[${i}] missing 'role'`, { sourcePath, index: i, path });
-            }
-            const summary = typeof fr["summary"] === "string" ? fr["summary"] : undefined;
-            files.push(summary === undefined ? { path, role } : { path, role, summary });
-        }
-    }
-    const estimatedTokensRaw = obj["estimated_tokens"] ?? obj["estimatedTokens"];
-    const estimatedTokens = typeof estimatedTokensRaw === "number" && Number.isFinite(estimatedTokensRaw)
-        ? Math.max(0, Math.floor(estimatedTokensRaw))
-        : undefined;
-    const lineageRaw = obj["lineage"];
-    const lineage = Array.isArray(lineageRaw)
-        ? lineageRaw.filter((l) => typeof l === "string" && l.length > 0)
-        : undefined;
-    return {
-        name,
-        version,
-        runtime: runtime,
-        sourceSeat: sourceSeatRaw,
-        sourceSessionId: sourceSessionIdRaw,
-        sourceResumeToken: sourceResumeTokenRaw,
-        ...(sourceCwd !== undefined ? { sourceCwd } : {}),
-        createdAt,
-        ...(notes !== undefined ? { notes } : {}),
-        files,
-        ...(estimatedTokens !== undefined ? { estimatedTokens } : {}),
-        ...(lineage !== undefined ? { lineage } : {}),
-    };
-}
-//# sourceMappingURL=manifest-parser.js.map

package/node_modules/@openrig/daemon/dist/domain/agent-images/manifest-parser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"manifest-parser.js","sourceRoot":"","sources":["../../../src/domain/agent-images/manifest-parser.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,mEAAmE;AACnE,sEAAsE;AACtE,kEAAkE;AAClE,+DAA+D;AAE/D,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,eAAe,GAIhB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,gBAAgB,GAAmC,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3F,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAErF,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,UAAkB;IACzE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CACvB,sBAAsB,EACtB,eAAe,UAAU,uBAAwB,GAAa,CAAC,OAAO,EAAE,EACxE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,oCAAoC,EAC7D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,mCAAmC,EAC5D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,sCAAsC,EAC/D,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEnC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAA4B,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,yBAAyB,OAAO,eAAe,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC1G,EAAE,UAAU,EAAE,OAAO,EAAE,CACxB,CAAC;IACJ,CAAC;IAED,iEAAiE;IACjE,oEAAoE;IACpE,qDAAqD;IACrD,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IAC9D,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,0CAA0C,EACnE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC9E,IAAI,OAAO,kBAAkB,KAAK,QAAQ,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,gDAAgD,EACzE,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAAG,GAAG,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpF,IAAI,OAAO,oBAAoB,KAAK,QAAQ,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,kDAAkD,EAC3E,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAC3E,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAE9B,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,OAAO,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtF,uCAAuC;IACvC,uEAAuE;IACvE,qEAAqE;IACrE,iBAAiB;IACjB,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAC3E,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,iCAAiC,CAAC,qCAAqC,EAChG,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,GAAG,CAA4B,CAAC;YACxC,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,kBAAkB,EACtD,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CACzB,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,sEAAsE,EACzH,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,WAAW,IAAI,sCAAsC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC3H,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;YACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,eAAe,UAAU,UAAU,CAAC,kBAAkB,EACtD,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAC/B,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC7E,MAAM,eAAe,GAAG,OAAO,kBAAkB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACnG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7C,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACvC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9E,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,IAAI;QACJ,OAAO;QACP,OAAO,EAAE,OAA4B;QACrC,UAAU,EAAE,aAAa;QACzB,eAAe,EAAE,kBAAkB;QACnC,iBAAiB,EAAE,oBAAoB;QACvC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,SAAS;QACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,KAAK;QACL,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/agent-images/resume-token-discovery.d.ts

@@ -1,28 +0,0 @@
-import type Database from "better-sqlite3";
-export type DiscoveryRuntime = "claude-code" | "codex";
-export interface DiscoveryResult {
-    runtime: DiscoveryRuntime;
-    /** Native conversation id (Claude resume_token / Codex thread_id /
-     *  external_session_name for external-CLI Codex seats). null when
-     *  the daemon can't surface one yet. */
-    nativeId: string | null;
-    /** PL-016 source-cwd behavior: source
-     *  seat's resolved cwd from the nodes table. Captured here so
-     *  SnapshotCapturer (and any future fork route) can persist it on
-     *  the manifest without an additional query. null when the source
-     *  node has no recorded cwd. */
-    nodeCwd: string | null;
-}
-export interface DiscoveryFailure {
-    code: "session_not_found" | "runtime_unsupported";
-    message: string;
-}
-export type DiscoveryOutcome = {
-    ok: true;
-    result: DiscoveryResult;
-} | {
-    ok: false;
-    failure: DiscoveryFailure;
-};
-export declare function discoverResumeToken(db: Database.Database, sourceSession: string): DiscoveryOutcome;
-//# sourceMappingURL=resume-token-discovery.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/agent-images/resume-token-discovery.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resume-token-discovery.d.ts","sourceRoot":"","sources":["../../../src/domain/agent-images/resume-token-discovery.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,OAAO,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,gBAAgB,CAAC;IAC1B;;4CAEwC;IACxC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;oCAIgC;IAChC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,mBAAmB,GAAG,qBAAqB,CAAC;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAEhH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,GAAG,gBAAgB,CAgDlG"}

package/node_modules/@openrig/daemon/dist/domain/agent-images/resume-token-discovery.js

@@ -1,83 +0,0 @@
-// Fork Primitive + Starter Agent Images v0 (PL-016) — runtime-specific
-// resume-token discovery.
-//
-// Given a canonical session name, returns the native conversation id
-// the runtime uses for fork/resume. Shared between SnapshotCapturer
-// (capture into image) and the /api/agent-images/fork route (one-shot
-// fork without snapshot side effect).
-//
-// Honest failure mode: returns null when no token is available rather
-// than fabricating one (docs/as-built/architecture/adapters-and-runtimes.md § Resume honesty).
-export function discoverResumeToken(db, sourceSession) {
-    const sessionRow = db
-        .prepare("SELECT id, node_id, resume_token FROM sessions WHERE session_name = ? ORDER BY id DESC LIMIT 1")
-        .get(sourceSession);
-    if (!sessionRow) {
-        return {
-            ok: false,
-            failure: {
-                code: "session_not_found",
-                message: `Source session '${sourceSession}' not found. Run 'rig ps --nodes' to see what's running.`,
-            },
-        };
-    }
-    const nodeRow = db
-        .prepare("SELECT runtime, cwd FROM nodes WHERE id = ?")
-        .get(sessionRow.node_id);
-    const runtime = nodeRow?.runtime ?? null;
-    const nodeCwd = nodeRow?.cwd ?? null;
-    if (runtime !== "claude-code" && runtime !== "codex") {
-        return {
-            ok: false,
-            failure: {
-                code: "runtime_unsupported",
-                message: `Source session '${sourceSession}' has runtime '${runtime ?? "(unknown)"}' which has no native fork primitive. Only claude-code and codex sessions can be forked.`,
-            },
-        };
-    }
-    if (runtime === "claude-code") {
-        const contextSessionId = discoverClaudeContextSessionId(db, sessionRow.node_id, sourceSession);
-        return {
-            ok: true,
-            result: { runtime, nativeId: contextSessionId ?? sessionRow.resume_token ?? null, nodeCwd },
-        };
-    }
-    // Codex managed tmux seats persist the captured native thread id on the
-    // sessions row after launch. Use it directly for image capture/fork.
-    if (sessionRow.resume_token) {
-        return { ok: true, result: { runtime, nativeId: sessionRow.resume_token, nodeCwd } };
-    }
-    // Codex external_cli seats may not have a sessions.resume_token; the
-    // external_session_name on the binding row holds the native conversation id.
-    const bindingRow = db
-        .prepare("SELECT external_session_name, attachment_type FROM bindings WHERE node_id = ?")
-        .get(sessionRow.node_id);
-    if (bindingRow?.attachment_type === "external_cli" && bindingRow.external_session_name) {
-        return { ok: true, result: { runtime, nativeId: bindingRow.external_session_name, nodeCwd } };
-    }
-    return { ok: true, result: { runtime, nativeId: null, nodeCwd } };
-}
-function discoverClaudeContextSessionId(db, nodeId, sourceSession) {
-    try {
-        const row = db
-            .prepare(`
-        SELECT session_id, session_name
-        FROM context_usage
-        WHERE node_id = ?
-        LIMIT 1
-      `)
-            .get(nodeId);
-        if (!row)
-            return null;
-        if (row.session_name && row.session_name !== sourceSession)
-            return null;
-        const nativeId = row.session_id?.trim();
-        return nativeId ? nativeId : null;
-    }
-    catch {
-        // Back-compat for minimal test DBs or older stores: fall back to the
-        // persisted sessions.resume_token rather than making discovery fail.
-        return null;
-    }
-}
-//# sourceMappingURL=resume-token-discovery.js.map

package/node_modules/@openrig/daemon/dist/domain/agent-images/resume-token-discovery.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resume-token-discovery.js","sourceRoot":"","sources":["../../../src/domain/agent-images/resume-token-discovery.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,0BAA0B;AAC1B,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,sEAAsE;AACtE,sCAAsC;AACtC,EAAE;AACF,sEAAsE;AACtE,+FAA+F;AA2B/F,MAAM,UAAU,mBAAmB,CAAC,EAAqB,EAAE,aAAqB;IAC9E,MAAM,UAAU,GAAG,EAAE;SAClB,OAAO,CAAC,gGAAgG,CAAC;SACzG,GAAG,CAAC,aAAa,CAA6E,CAAC;IAClG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,mBAAmB,aAAa,0DAA0D;aACpG;SACF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,EAAE;SACf,OAAO,CAAC,6CAA6C,CAAC;SACtD,GAAG,CAAC,UAAU,CAAC,OAAO,CAA+D,CAAC;IACzF,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC;IACrC,IAAI,OAAO,KAAK,aAAa,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE;gBACP,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,mBAAmB,aAAa,kBAAkB,OAAO,IAAI,WAAW,0FAA0F;aAC5K;SACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,MAAM,gBAAgB,GAAG,8BAA8B,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/F,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,IAAI,UAAU,CAAC,YAAY,IAAI,IAAI,EAAE,OAAO,EAAE;SAC5F,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,qEAAqE;IACrE,6EAA6E;IAC7E,MAAM,UAAU,GAAG,EAAE;SAClB,OAAO,CAAC,+EAA+E,CAAC;SACxF,GAAG,CAAC,UAAU,CAAC,OAAO,CAAyF,CAAC;IACnH,IAAI,UAAU,EAAE,eAAe,KAAK,cAAc,IAAI,UAAU,CAAC,qBAAqB,EAAE,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,qBAAqB,EAAE,OAAO,EAAE,EAAE,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,8BAA8B,CACrC,EAAqB,EACrB,MAAc,EACd,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC;;;;;OAKR,CAAC;aACD,GAAG,CAAC,MAAM,CAA2E,CAAC;QAEzF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,KAAK,aAAa;YAAE,OAAO,IAAI,CAAC;QACxE,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QACxC,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,qEAAqE;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/agent-images/snapshot-capturer.d.ts

@@ -1,36 +0,0 @@
-import type Database from "better-sqlite3";
-import type { SessionRegistry } from "../session-registry.js";
-import type { RigRepository } from "../rig-repository.js";
-import { type AgentImageManifest } from "./agent-image-types.js";
-import { AgentImageLibraryService } from "./agent-image-library-service.js";
-export interface CaptureSnapshotOpts {
-    sourceSession: string;
-    name: string;
-    version?: string;
-    notes?: string;
-    estimatedTokens?: number;
-    lineage?: string[];
-    files?: Map<string, string>;
-}
-export interface CaptureSnapshotResult {
-    imageId: string;
-    imagePath: string;
-    manifest: AgentImageManifest;
-}
-export interface SnapshotCapturerDeps {
-    db: Database.Database;
-    rigRepo: RigRepository;
-    sessionRegistry: SessionRegistry;
-    agentImageLibrary: AgentImageLibraryService;
-    /** Target install root — typically ~/.openrig/agent-images/. */
-    targetRoot: string;
-    /** Test seam — defaults to () => new Date(). */
-    now?: () => Date;
-}
-export declare class SnapshotCapturer {
-    private readonly deps;
-    private readonly now;
-    constructor(deps: SnapshotCapturerDeps);
-    capture(opts: CaptureSnapshotOpts): CaptureSnapshotResult;
-}
-//# sourceMappingURL=snapshot-capturer.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/agent-images/snapshot-capturer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"snapshot-capturer.d.ts","sourceRoot":"","sources":["../../../src/domain/agent-images/snapshot-capturer.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAG5E,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,kBAAkB,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,iBAAiB,EAAE,wBAAwB,CAAC;IAC5C,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,IAAI,EAAE,oBAAoB;IAKtC,OAAO,CAAC,IAAI,EAAE,mBAAmB,GAAG,qBAAqB;CA6C1D"}

package/node_modules/@openrig/daemon/dist/domain/agent-images/snapshot-capturer.js

@@ -1,59 +0,0 @@
-// Fork Primitive + Starter Agent Images v0 (PL-016) — snapshot capturer.
-//
-// Captures a productive seat's resumable state into a new agent_image:
-// runtime-specific resume token + manifest + optional cwd-deltas. Used
-// by `rig agent-image create <source-session> --name <name>` and the
-// daemon HTTP route /api/agent-images/snapshot.
-//
-// Resume-token discovery routes through resume-token-discovery.ts so
-// the same logic is shared with the /api/agent-images/fork route.
-//
-// Failure modes surface honest errors per
-// docs/as-built/architecture/adapters-and-runtimes.md § Resume
-// honesty (no fabricated tokens; no auto-fallback to fresh).
-import { AgentImageError, } from "./agent-image-types.js";
-import { discoverResumeToken } from "./resume-token-discovery.js";
-export class SnapshotCapturer {
-    deps;
-    now;
-    constructor(deps) {
-        this.deps = deps;
-        this.now = deps.now ?? (() => new Date());
-    }
-    capture(opts) {
-        const { sourceSession, name } = opts;
-        const version = opts.version ?? "1";
-        const discovery = discoverResumeToken(this.deps.db, sourceSession);
-        if (!discovery.ok) {
-            throw new AgentImageError(discovery.failure.code === "session_not_found" ? "image_not_found" : "runtime_mismatch", discovery.failure.message, { sourceSession });
-        }
-        const { runtime, nativeId, nodeCwd } = discovery.result;
-        if (!nativeId) {
-            throw new AgentImageError("image_not_found", `Could not discover a resume token for ${runtime} source session '${sourceSession}'. The session may not have a native conversation id yet — try again after the seat has produced output, or use rig context --refresh to re-sample.`, { sourceSession, runtime });
-        }
-        const manifest = {
-            name,
-            version,
-            runtime,
-            sourceSeat: sourceSession,
-            sourceSessionId: nativeId,
-            sourceResumeToken: nativeId,
-            // PL-016 source-cwd behavior:
-            // capture source seat's resolved cwd so the Use-as-starter
-            // snippet can emit `cwd: <source_cwd>`. nodeCwd may be null when
-            // the source node has no recorded cwd (legacy fixture or seat
-            // pre-cwd-capture); manifest field is omitted in that case.
-            ...(nodeCwd ? { sourceCwd: nodeCwd } : {}),
-            createdAt: this.now().toISOString(),
-            ...(opts.notes !== undefined ? { notes: opts.notes } : {}),
-            files: [],
-            ...(opts.estimatedTokens !== undefined ? { estimatedTokens: opts.estimatedTokens } : {}),
-            ...(opts.lineage !== undefined ? { lineage: [...opts.lineage] } : {}),
-        };
-        const fileContents = opts.files ?? new Map();
-        const imagePath = this.deps.agentImageLibrary.install(this.deps.targetRoot, manifest, fileContents);
-        this.deps.agentImageLibrary.scan();
-        return { imageId: `agent-image:${name}:${version}`, imagePath, manifest };
-    }
-}
-//# sourceMappingURL=snapshot-capturer.js.map

package/node_modules/@openrig/daemon/dist/domain/agent-images/snapshot-capturer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"snapshot-capturer.js","sourceRoot":"","sources":["../../../src/domain/agent-images/snapshot-capturer.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,qEAAqE;AACrE,gDAAgD;AAChD,EAAE;AACF,qEAAqE;AACrE,kEAAkE;AAClE,EAAE;AACF,0CAA0C;AAC1C,+DAA+D;AAC/D,6DAA6D;AAK7D,OAAO,EACL,eAAe,GAEhB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AA6BlE,MAAM,OAAO,gBAAgB;IACV,IAAI,CAAuB;IAC3B,GAAG,CAAa;IAEjC,YAAY,IAA0B;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,CAAC,IAAyB;QAC/B,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC;QAEpC,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,EACvF,SAAS,CAAC,OAAO,CAAC,OAAO,EACzB,EAAE,aAAa,EAAE,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CACvB,iBAAiB,EACjB,yCAAyC,OAAO,oBAAoB,aAAa,qJAAqJ,EACtO,EAAE,aAAa,EAAE,OAAO,EAAE,CAC3B,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAuB;YACnC,IAAI;YACJ,OAAO;YACP,OAAO;YACP,UAAU,EAAE,aAAa;YACzB,eAAe,EAAE,QAAQ;YACzB,iBAAiB,EAAE,QAAQ;YAC3B,8BAA8B;YAC9B,2DAA2D;YAC3D,iEAAiE;YACjE,8DAA8D;YAC9D,4DAA4D;YAC5D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,KAAK,EAAE,EAAE;YACT,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,EAAkB,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACpG,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,eAAe,IAAI,IAAI,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC5E,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/agent-manifest.d.ts

@@ -1,27 +0,0 @@
-import type { AgentSpec, ValidationResult } from "./types.js";
-/** Canonical form of a compaction strategy: new values pass through, deprecated aliases
- *  map, anything else is null. The ONE vocabulary site — resolvers import this rather
- *  than re-encoding the set (one-shared-resolution-path). */
-export declare function canonicalCompactionStrategy(value: string): string | null;
-/** One ingestion authority for the continuity mechanic address. */
-export declare function canonicalContinuityMechanic(value: unknown): string | null;
-/**
- * Parse raw YAML text into an untyped object.
- * @param yamlText - raw YAML content of agent.yaml
- * @returns parsed object
- */
-export declare function parseAgentSpec(yamlText: string): Record<string, unknown>;
-/**
- * Validate a parsed AgentSpec object. Collects all errors.
- * @param raw - parsed YAML object
- * @returns validation result with all errors
- */
-export declare function validateAgentSpec(raw: unknown): ValidationResult;
-/**
- * Normalize a validated AgentSpec into the canonical typed shape.
- * Applies defaults for optional fields.
- * @param raw - parsed YAML object (must pass validation first)
- * @returns normalized AgentSpec
- */
-export declare function normalizeAgentSpec(raw: Record<string, unknown>): AgentSpec;
-//# sourceMappingURL=agent-manifest.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/agent-manifest.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-manifest.d.ts","sourceRoot":"","sources":["../../src/domain/agent-manifest.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,SAAS,EAIT,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAkBpB;;6DAE6D;AAC7D,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGxE;AAED,mEAAmE;AACnE,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAGzE;AA+FD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAExE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAsKhE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAkD1E"}