@openrig/cli 0.5.16 → 0.5.17

package/node_modules/@openrig/daemon/dist/domain/terminal/view-composer.js

@@ -1,137 +0,0 @@
-// OPR.0.4.6.02 C2 — the PURE view composer.
-//
-// Turns a resolved list of view members into a provider-neutral `ComposedView`
-// (`{ opened, absent, degraded, pages }`, BR-6 honest-partial). All of the
-// partition rules live here, in one testable pure function, so no provider
-// re-implements them:
-//
-//   local live       → `tmux attach -t <session>`
-//   view-only / cross-rig (read-only)
-//                    → `tmux attach -r -t <session>`
-//   ssh host         → `ssh <dest> tmux attach [-r] -t <session>`
-//   http host        → NO pane; honest-degrade { seat, host, reason }
-//   dead / no session → absent[] (named, never silently dropped)
-//
-// The composer takes members that already carry a STRUCTURED `host` field (a
-// host id, never a `member@rig@host` string — MH BR-1). Host classification
-// (ssh vs http vs unknown) is resolved through the operator's read-only hosts
-// registry via the injected `resolveHost`.
-/**
- * Panes per grid page (3×3). Overflow spills to the next provider tab/page.
- * A module constant in v1 — a future per-rig `terminal.tiles_per_page` config
- * key is a natural extension, but no config key ships in this slice (the plan
- * keeps the C1 config surface to the single `terminal.status_bar` key).
- */
-export const PANES_PER_PAGE = 9;
-/** POSIX single-quote a string so session names / targets are shell-inert in the composed command. */
-function shellQuote(s) {
-    return "'" + s.replace(/'/g, "'\"'\"'") + "'";
-}
-/** The remote ssh destination — `user@target` when a user is declared, else `target`. */
-function sshDest(host) {
-    return host.user ? `${host.user}@${host.target}` : host.target;
-}
-/** Chunk panes into fixed-size grid pages (one provider tab per page). */
-export function chunkPanes(panes, perPage = PANES_PER_PAGE) {
-    if (perPage < 1)
-        throw new Error(`chunkPanes: perPage must be >= 1 (got ${perPage})`);
-    const pages = [];
-    for (let i = 0; i < panes.length; i += perPage) {
-        pages.push(panes.slice(i, i + perPage));
-    }
-    return pages;
-}
-/**
- * Compose a resolved member list into a provider-neutral view. Pure: same
- * inputs → byte-identical output. Member order is preserved into `opened`
- * (and therefore into page assignment), so paging is deterministic.
- */
-export function composeView(id, members, ctx) {
-    const opened = [];
-    const absent = [];
-    const degraded = [];
-    for (const m of members) {
-        const attachFlag = m.readOnly ? "-r " : "";
-        if (m.host !== null) {
-            // Remote member: classify by the registry entry's transport.
-            const host = ctx.resolveHost(m.host);
-            if (!host) {
-                // Unknown host id is a config gap, not a live seat — degrade named,
-                // never a silent omission.
-                degraded.push({
-                    seat: m.seat,
-                    host: m.host,
-                    reason: `host ${m.host} is not in the hosts registry`,
-                });
-                continue;
-            }
-            if (host.transport === "http") {
-                // http hosts speak daemon REST, not interactive ssh panes — the tile
-                // surface needs ssh. Honest-degrade, R1(a).
-                degraded.push({
-                    seat: m.seat,
-                    host: m.host,
-                    reason: `host ${m.host} is http-registered; tiles need ssh`,
-                });
-                continue;
-            }
-            // ssh host: a seat with no recorded tmux session cannot be attached.
-            if (!m.tmuxSession) {
-                absent.push({
-                    seat: m.seat,
-                    host: m.host,
-                    reason: "no tmux session recorded for this seat",
-                });
-                continue;
-            }
-            // Guard G1: the host registry is STRUCTURED data, but the pane command is a
-            // shell string — so the ssh destination must be shell-inert AND not
-            // option-shaped. A registry `user`/`target` with whitespace or shell
-            // metacharacters would otherwise split into extra shell words; a leading
-            // `-` would be parsed BY ssh as an option (option injection). We shell-quote
-            // the destination so it stays exactly ONE argument, and honest-degrade (named,
-            // never run) a destination that begins with `-`.
-            const dest = sshDest(host);
-            if (dest.startsWith("-")) {
-                degraded.push({
-                    seat: m.seat,
-                    host: m.host,
-                    reason: `host ${m.host} ssh destination '${dest}' is option-shaped (leading '-'); refusing to compose an ssh tile`,
-                });
-                continue;
-            }
-            opened.push({
-                seat: m.seat,
-                label: m.label,
-                paneCommand: `ssh ${shellQuote(dest)} tmux attach ${attachFlag}-t ${shellQuote(m.tmuxSession)}`,
-                readOnly: m.readOnly,
-            });
-            continue;
-        }
-        // Local member.
-        if (!m.tmuxSession) {
-            absent.push({
-                seat: m.seat,
-                host: null,
-                reason: "no tmux session recorded for this seat",
-            });
-            continue;
-        }
-        if (!m.alive) {
-            absent.push({
-                seat: m.seat,
-                host: null,
-                reason: `tmux session ${m.tmuxSession} is not alive`,
-            });
-            continue;
-        }
-        opened.push({
-            seat: m.seat,
-            label: m.label,
-            paneCommand: `tmux attach ${attachFlag}-t ${shellQuote(m.tmuxSession)}`,
-            readOnly: m.readOnly,
-        });
-    }
-    return { id, opened, absent, degraded, pages: chunkPanes(opened) };
-}
-//# sourceMappingURL=view-composer.js.map

package/node_modules/@openrig/daemon/dist/domain/terminal/view-composer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"view-composer.js","sourceRoot":"","sources":["../../../src/domain/terminal/view-composer.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,sBAAsB;AACtB,EAAE;AACF,kDAAkD;AAClD,sCAAsC;AACtC,qDAAqD;AACrD,kEAAkE;AAClE,sEAAsE;AACtE,iEAAiE;AACjE,EAAE;AACF,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,2CAA2C;AAU3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AA4BhC,sGAAsG;AACtG,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,GAAG,CAAC;AAChD,CAAC;AAED,yFAAyF;AACzF,SAAS,OAAO,CAAC,IAA8C;IAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;AACjE,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CACxB,KAAqB,EACrB,UAAkB,cAAc;IAEhC,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,GAAG,CAAC,CAAC;IACtF,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,EAAU,EACV,OAA0B,EAC1B,GAAmB;IAEnB,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IAEpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3C,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACpB,6DAA6D;YAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,oEAAoE;gBACpE,2BAA2B;gBAC3B,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,+BAA+B;iBACtD,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;gBAC9B,qEAAqE;gBACrE,4CAA4C;gBAC5C,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,qCAAqC;iBAC5D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,qEAAqE;YACrE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,wCAAwC;iBACjD,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,4EAA4E;YAC5E,oEAAoE;YACpE,qEAAqE;YACrE,yEAAyE;YACzE,6EAA6E;YAC7E,+EAA+E;YAC/E,iDAAiD;YACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,qBAAqB,IAAI,mEAAmE;iBACnH,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,OAAO,UAAU,CAAC,IAAI,CAAC,gBAAgB,UAAU,MAAM,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE;gBAC/F,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,gBAAgB;QAChB,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,wCAAwC;aACjD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,gBAAgB,CAAC,CAAC,WAAW,eAAe;aACrD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,eAAe,UAAU,MAAM,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE;YACvE,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;AACrE,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/tmux-discovery-scanner.d.ts

@@ -1,29 +0,0 @@
-import type { TmuxAdapter } from "../adapters/tmux.js";
-/** A single pane observed during a scan */
-export interface ScannedPane {
-    tmuxSession: string;
-    tmuxWindow: string;
-    tmuxPane: string;
-    pid: number | null;
-    cwd: string | null;
-    activeCommand: string | null;
-}
-/** Result of a full tmux scan */
-export interface ScanResult {
-    panes: ScannedPane[];
-    scannedAt: string;
-}
-/**
- * Enumerates all tmux sessions/windows/panes and resolves PID, cwd,
- * and active foreground command per pane. Uses TmuxAdapter — no raw
- * tmux CLI strings in domain code.
- */
-export declare class TmuxDiscoveryScanner {
-    private tmux;
-    constructor(deps: {
-        tmuxAdapter: TmuxAdapter;
-    });
-    /** Scan all tmux panes and resolve metadata. */
-    scan(): Promise<ScanResult>;
-}
-//# sourceMappingURL=tmux-discovery-scanner.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/tmux-discovery-scanner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tmux-discovery-scanner.d.ts","sourceRoot":"","sources":["../../src/domain/tmux-discovery-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,2CAA2C;AAC3C,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,iCAAiC;AACjC,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,IAAI,CAAc;gBAEd,IAAI,EAAE;QAAE,WAAW,EAAE,WAAW,CAAA;KAAE;IAI9C,gDAAgD;IAC1C,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;CA2ClC"}

package/node_modules/@openrig/daemon/dist/domain/tmux-discovery-scanner.js

@@ -1,50 +0,0 @@
-/**
- * Enumerates all tmux sessions/windows/panes and resolves PID, cwd,
- * and active foreground command per pane. Uses TmuxAdapter — no raw
- * tmux CLI strings in domain code.
- */
-export class TmuxDiscoveryScanner {
-    tmux;
-    constructor(deps) {
-        this.tmux = deps.tmuxAdapter;
-    }
-    /** Scan all tmux panes and resolve metadata. */
-    async scan() {
-        const panes = [];
-        const scannedAt = new Date().toISOString();
-        const sessions = await this.tmux.listSessions();
-        for (const session of sessions) {
-            const windows = await this.tmux.listWindows(session.name);
-            for (const window of windows) {
-                const target = `${session.name}:${window.index}`;
-                const tmuxPanes = await this.tmux.listPanes(target);
-                for (const pane of tmuxPanes) {
-                    let pid = null;
-                    let activeCommand = null;
-                    try {
-                        pid = await this.tmux.getPanePid(pane.id);
-                    }
-                    catch {
-                        // Pane metadata lookup failed — continue with null
-                    }
-                    try {
-                        activeCommand = await this.tmux.getPaneCommand(pane.id);
-                    }
-                    catch {
-                        // Pane metadata lookup failed — continue with null
-                    }
-                    panes.push({
-                        tmuxSession: session.name,
-                        tmuxWindow: `${window.index}`,
-                        tmuxPane: pane.id,
-                        pid,
-                        cwd: pane.cwd || null,
-                        activeCommand,
-                    });
-                }
-            }
-        }
-        return { panes, scannedAt };
-    }
-}
-//# sourceMappingURL=tmux-discovery-scanner.js.map

package/node_modules/@openrig/daemon/dist/domain/tmux-discovery-scanner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tmux-discovery-scanner.js","sourceRoot":"","sources":["../../src/domain/tmux-discovery-scanner.ts"],"names":[],"mappings":"AAkBA;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IACvB,IAAI,CAAc;IAE1B,YAAY,IAAkC;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;IAC/B,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,IAAI;QACR,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEhD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAE1D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAEpD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;oBAC7B,IAAI,GAAG,GAAkB,IAAI,CAAC;oBAC9B,IAAI,aAAa,GAAkB,IAAI,CAAC;oBAExC,IAAI,CAAC;wBACH,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC5C,CAAC;oBAAC,MAAM,CAAC;wBACP,mDAAmD;oBACrD,CAAC;oBAED,IAAI,CAAC;wBACH,aAAa,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC1D,CAAC;oBAAC,MAAM,CAAC;wBACP,mDAAmD;oBACrD,CAAC;oBAED,KAAK,CAAC,IAAI,CAAC;wBACT,WAAW,EAAE,OAAO,CAAC,IAAI;wBACzB,UAAU,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE;wBAC7B,QAAQ,EAAE,IAAI,CAAC,EAAE;wBACjB,GAAG;wBACH,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI;wBACrB,aAAa;qBACd,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;CACF"}

package/node_modules/@openrig/daemon/dist/domain/tmux-option-defaults.d.ts

@@ -1,89 +0,0 @@
-import type { TmuxAdapter } from "../adapters/tmux.js";
-export interface TmuxOptionDefaultsDeps {
-    tmuxAdapter: TmuxAdapter;
-    /**
-     * OPR.0.4.6.02 S1 — reads the daemon's tmux option defaults at APPLY time.
-     * Resolved fresh per call (from the SettingsStore in startup) so an
-     * operator's `terminal.status_bar` flip applies to FUTURE launches only.
-     * Defaults to `statusBar: false` (bar hidden) when omitted.
-     */
-    readTmuxOptionDefaults?: () => {
-        statusBar: boolean;
-    };
-    /**
-     * OPR.0.4.6.02 S1 — platform selector for the server-scope `copy-command`
-     * table. Defaults to `process.platform`; injectable for the scope tests.
-     */
-    platform?: NodeJS.Platform;
-    /**
-     * OPR.0.4.6.02 S1 — cheap `command -v <bin>` probe for the linux
-     * copy-command fallback chain. Defaults to a real shell probe; injectable
-     * for deterministic tests.
-     */
-    hasCommand?: (bin: string) => boolean;
-}
-/**
- * OPR.0.4.6.02 S1 — applies the daemon's tmux option defaults to a
- * FRESHLY-CREATED session. Shared by `NodeLauncher` (the launch path) and
- * `SuccessorSessionLauncher` (the fresh seat-handover successor path) so
- * every fresh operator/agent seat gets consistent mouse/status/clipboard
- * defaults (orch C1 scope ruling: fold fresh successors in via ONE helper).
- *
- * Scope discipline (guard b2): SESSION-scope options (`mouse`, `status`) are
- * applied ONLY to the just-created session name passed in — never a
- * pre-existing/discovered session — so the never-retro-flip rail (BR-1)
- * holds and a `terminal.status_bar` flip affects future launches only.
- * SERVER-scope options (`set-clipboard`, `copy-command`) are asserted ONCE
- * per daemon lifetime via the shared memo on this single instance; a daemon
- * RESTART re-asserts (a fresh applier). Callers MUST only invoke this after
- * a successful `createSession` on a freshly-created session.
- */
-export declare class TmuxOptionDefaultsApplier {
-    private tmuxAdapter;
-    private readTmuxOptionDefaults;
-    private platform;
-    private hasCommand;
-    private serverDefaultsAsserted;
-    constructor(deps: TmuxOptionDefaultsDeps);
-    /**
-     * Apply the option defaults to a JUST-CREATED session. `mouse` is always
-     * on; the inner status bar follows the `terminal.status_bar` config key
-     * (default off), read at apply time so a flip applies to FUTURE launches
-     * only (this touches only `sessionName`). Then assert the server-scope
-     * defaults once per daemon lifetime.
-     *
-     * Returns the list of non-fatal warnings (empty when all sets succeed) so
-     * the caller can fold them into its own launch-warning channel. NEVER
-     * throws for an option-set failure — a seat without mouse-scroll is
-     * degraded, not dead (and a handover successor must not be handover-fatal
-     * over a cosmetic option).
-     */
-    applyToFreshSession(sessionName: string): Promise<string[]>;
-    /**
-     * Assert the SERVER-scope tmux defaults (`set-clipboard on` + the
-     * per-platform `copy-command`) on the daemon's OWN tmux server, ONCE per
-     * daemon lifetime. Written only through `setServerOption` (`set-option
-     * -s`) — never a `-t` session target (guard b2 scope contract).
-     *
-     * Per-process memoization means a daemon RESTART re-asserts these (a fresh
-     * applier instance): an operator's manual `copy-command` / `set-clipboard`
-     * override does NOT survive a daemon restart — the named off-switch
-     * follow-up is the customization path. Re-running is harmless (idempotent
-     * set of the same values); the memo is an optimization, not a correctness
-     * gate.
-     */
-    private ensureServerDefaults;
-}
-/**
- * OPR.0.4.6.02 S1 — the per-platform tmux `copy-command` table (arch rail
- * b). Ref: the tmux "Clipboard" wiki — `copy-command` is the shell command
- * tmux pipes a copy-mode selection into to reach the system clipboard.
- *  - darwin → `pbcopy`
- *  - linux  → `wl-copy` if present, else `xclip -selection clipboard -i`,
- *             else UNSET (null) — fall back to `set-clipboard on` OSC 52.
- *  - other  → UNSET (null).
- * Pure: platform + a `command -v` probe in, the command string (or null)
- * out. One table, no side effects — the applier decides whether to write.
- */
-export declare function resolveCopyCommand(platform: NodeJS.Platform, hasCommand: (bin: string) => boolean): string | null;
-//# sourceMappingURL=tmux-option-defaults.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/tmux-option-defaults.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tmux-option-defaults.d.ts","sourceRoot":"","sources":["../../src/domain/tmux-option-defaults.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,WAAW,CAAC;IACzB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,MAAM;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IACtD;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;CACvC;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,sBAAsB,CAA+B;IAC7D,OAAO,CAAC,QAAQ,CAAkB;IAClC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,sBAAsB,CAAS;gBAE3B,IAAI,EAAE,sBAAsB;IAOxC;;;;;;;;;;;;OAYG;IACG,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAuBjE;;;;;;;;;;;;OAYG;YACW,oBAAoB;CAmBnC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GACnC,MAAM,GAAG,IAAI,CAQf"}

package/node_modules/@openrig/daemon/dist/domain/tmux-option-defaults.js

@@ -1,133 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { runSyncSite } from "./sync-site-wrap.js";
-/**
- * OPR.0.4.6.02 S1 — applies the daemon's tmux option defaults to a
- * FRESHLY-CREATED session. Shared by `NodeLauncher` (the launch path) and
- * `SuccessorSessionLauncher` (the fresh seat-handover successor path) so
- * every fresh operator/agent seat gets consistent mouse/status/clipboard
- * defaults (orch C1 scope ruling: fold fresh successors in via ONE helper).
- *
- * Scope discipline (guard b2): SESSION-scope options (`mouse`, `status`) are
- * applied ONLY to the just-created session name passed in — never a
- * pre-existing/discovered session — so the never-retro-flip rail (BR-1)
- * holds and a `terminal.status_bar` flip affects future launches only.
- * SERVER-scope options (`set-clipboard`, `copy-command`) are asserted ONCE
- * per daemon lifetime via the shared memo on this single instance; a daemon
- * RESTART re-asserts (a fresh applier). Callers MUST only invoke this after
- * a successful `createSession` on a freshly-created session.
- */
-export class TmuxOptionDefaultsApplier {
-    tmuxAdapter;
-    readTmuxOptionDefaults;
-    platform;
-    hasCommand;
-    serverDefaultsAsserted = false;
-    constructor(deps) {
-        this.tmuxAdapter = deps.tmuxAdapter;
-        this.readTmuxOptionDefaults = deps.readTmuxOptionDefaults ?? (() => ({ statusBar: false }));
-        this.platform = deps.platform ?? process.platform;
-        this.hasCommand = deps.hasCommand ?? defaultHasCommand;
-    }
-    /**
-     * Apply the option defaults to a JUST-CREATED session. `mouse` is always
-     * on; the inner status bar follows the `terminal.status_bar` config key
-     * (default off), read at apply time so a flip applies to FUTURE launches
-     * only (this touches only `sessionName`). Then assert the server-scope
-     * defaults once per daemon lifetime.
-     *
-     * Returns the list of non-fatal warnings (empty when all sets succeed) so
-     * the caller can fold them into its own launch-warning channel. NEVER
-     * throws for an option-set failure — a seat without mouse-scroll is
-     * degraded, not dead (and a handover successor must not be handover-fatal
-     * over a cosmetic option).
-     */
-    async applyToFreshSession(sessionName) {
-        const warnings = [];
-        const mouse = await this.tmuxAdapter.setSessionOption(sessionName, "mouse", "on");
-        if (!mouse.ok) {
-            warnings.push(`tmux "mouse" option not set for ${sessionName}: ${mouse.message}`);
-        }
-        let statusBar = false;
-        try {
-            statusBar = this.readTmuxOptionDefaults().statusBar === true;
-        }
-        catch {
-            statusBar = false;
-        }
-        const status = await this.tmuxAdapter.setSessionOption(sessionName, "status", statusBar ? "on" : "off");
-        if (!status.ok) {
-            warnings.push(`tmux "status" option not set for ${sessionName}: ${status.message}`);
-        }
-        await this.ensureServerDefaults(warnings);
-        return warnings;
-    }
-    /**
-     * Assert the SERVER-scope tmux defaults (`set-clipboard on` + the
-     * per-platform `copy-command`) on the daemon's OWN tmux server, ONCE per
-     * daemon lifetime. Written only through `setServerOption` (`set-option
-     * -s`) — never a `-t` session target (guard b2 scope contract).
-     *
-     * Per-process memoization means a daemon RESTART re-asserts these (a fresh
-     * applier instance): an operator's manual `copy-command` / `set-clipboard`
-     * override does NOT survive a daemon restart — the named off-switch
-     * follow-up is the customization path. Re-running is harmless (idempotent
-     * set of the same values); the memo is an optimization, not a correctness
-     * gate.
-     */
-    async ensureServerDefaults(warnings) {
-        if (this.serverDefaultsAsserted)
-            return;
-        // Set first so concurrent applies don't double-assert; either way the
-        // sets are idempotent.
-        this.serverDefaultsAsserted = true;
-        const clip = await this.tmuxAdapter.setServerOption("set-clipboard", "on");
-        if (!clip.ok) {
-            warnings.push(`tmux "set-clipboard" server option not set: ${clip.message}`);
-        }
-        const copyCommand = resolveCopyCommand(this.platform, this.hasCommand);
-        if (copyCommand !== null) {
-            const cc = await this.tmuxAdapter.setServerOption("copy-command", copyCommand);
-            if (!cc.ok) {
-                warnings.push(`tmux "copy-command" server option not set: ${cc.message}`);
-            }
-        }
-    }
-}
-/**
- * OPR.0.4.6.02 S1 — the per-platform tmux `copy-command` table (arch rail
- * b). Ref: the tmux "Clipboard" wiki — `copy-command` is the shell command
- * tmux pipes a copy-mode selection into to reach the system clipboard.
- *  - darwin → `pbcopy`
- *  - linux  → `wl-copy` if present, else `xclip -selection clipboard -i`,
- *             else UNSET (null) — fall back to `set-clipboard on` OSC 52.
- *  - other  → UNSET (null).
- * Pure: platform + a `command -v` probe in, the command string (or null)
- * out. One table, no side effects — the applier decides whether to write.
- */
-export function resolveCopyCommand(platform, hasCommand) {
-    if (platform === "darwin")
-        return "pbcopy";
-    if (platform === "linux") {
-        if (hasCommand("wl-copy"))
-            return "wl-copy";
-        if (hasCommand("xclip"))
-            return "xclip -selection clipboard -i";
-        return null;
-    }
-    return null;
-}
-/**
- * OPR.0.4.6.02 S1 — default `command -v <bin>` probe (POSIX shell builtin).
- * Returns true when the binary resolves on PATH. Cheap + best-effort; any
- * failure (spawn error, non-shell env) reads as absent.
- */
-function defaultHasCommand(bin) {
-    try {
-        const r = runSyncSite("tmux_options.command_v", () => spawnSync(`command -v ${bin}`, { shell: true, stdio: "ignore" }));
-        return r.status === 0;
-    }
-    catch {
-        return false;
-    }
-}
-//# sourceMappingURL=tmux-option-defaults.js.map

package/node_modules/@openrig/daemon/dist/domain/tmux-option-defaults.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tmux-option-defaults.js","sourceRoot":"","sources":["../../src/domain/tmux-option-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAwBlD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,yBAAyB;IAC5B,WAAW,CAAc;IACzB,sBAAsB,CAA+B;IACrD,QAAQ,CAAkB;IAC1B,UAAU,CAA2B;IACrC,sBAAsB,GAAG,KAAK,CAAC;IAEvC,YAAY,IAA4B;QACtC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;QAClD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC;IACzD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,mCAAmC,WAAW,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,KAAK,CAAC;QACpB,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,oCAAoC,WAAW,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,oBAAoB,CAAC,QAAkB;QACnD,IAAI,IAAI,CAAC,sBAAsB;YAAE,OAAO;QACxC,sEAAsE;QACtE,uBAAuB;QACvB,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QAEnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,+CAA+C,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACvE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC/E,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACX,QAAQ,CAAC,IAAI,CAAC,8CAA8C,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAyB,EACzB,UAAoC;IAEpC,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,IAAI,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,+BAA+B,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,WAAW,CAAC,wBAAwB,EAAE,GAAG,EAAE,CACnD,SAAS,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CACjE,CAAC;QACF,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/node_modules/@openrig/daemon/dist/domain/topology/multi-rig-launcher.d.ts

@@ -1,49 +0,0 @@
-import type { TopologyManifest } from "./topology-manifest.js";
-import type { HostEntry, HostRegistryLoadResult } from "../hosts/hosts-registry-reader.js";
-export type TopologyEntryStatus = "ok" | "failed" | "skipped";
-export interface TopologyEntryResult {
-    rigRef: string;
-    /** Uniform on every entry: the placed host id, or the literal "local". */
-    host: string;
-    status: TopologyEntryStatus;
-    error?: string;
-}
-export interface TopologyLaunchResult {
-    /** True ONLY when every entry is ok (FR-5 — no false green). */
-    ok: boolean;
-    entries: TopologyEntryResult[];
-}
-export interface MultiRigLauncherDeps {
-    /** The SAME public lock pair the up route uses (bootstrap-orchestrator). */
-    tryAcquire: (sourceRef: string) => boolean;
-    release: (sourceRef: string) => void;
-    /** The existing local single-rig leaf (public bootstrap() via routes/up.ts
-     *  wiring). Resolves ok:false with the leaf's own error on failure — the
-     *  launcher invents no failure taxonomy. */
-    launchLocal: (source: string) => Promise<{
-        ok: boolean;
-        error?: string;
-    }>;
-    /** The shipped remote POST /api/up leaf for a placed entry. */
-    launchRemote: (source: string, host: HostEntry) => Promise<{
-        ok: boolean;
-        error?: string;
-    }>;
-    /** Lazy hosts-registry read (shared reader) — consulted only when the
-     *  manifest actually places entries on hosts. */
-    loadRegistry: () => HostRegistryLoadResult;
-    /** Resolve a local entry's manifest source string to the EXACT ref used
-     *  for BOTH the lock and the leaf (guard fixback F1): the orchestrator
-     *  normalizes lock keys with path.resolve, so locking the raw relative
-     *  string would key against the daemon cwd while the leaf launches the
-     *  manifest-dir-resolved file — false lock negatives (standalone up of
-     *  the real path doesn't conflict) AND false positives (two manifests'
-     *  './a.yaml' collide across different files). Identity when omitted. */
-    resolveLocalRef?: (source: string) => string;
-}
-export declare class MultiRigLauncher {
-    private deps;
-    constructor(deps: MultiRigLauncherDeps);
-    launch(manifest: TopologyManifest): Promise<TopologyLaunchResult>;
-}
-//# sourceMappingURL=multi-rig-launcher.d.ts.map

package/node_modules/@openrig/daemon/dist/domain/topology/multi-rig-launcher.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"multi-rig-launcher.d.ts","sourceRoot":"","sources":["../../../src/domain/topology/multi-rig-launcher.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAG3F,MAAM,MAAM,mBAAmB,GAAG,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,gEAAgE;IAChE,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3C,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC;;gDAE4C;IAC5C,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1E,+DAA+D;IAC/D,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5F;qDACiD;IACjD,YAAY,EAAE,MAAM,sBAAsB,CAAC;IAC3C;;;;;;6EAMyE;IACzE,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC;CAC9C;AAKD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,IAAI,CAAuB;gBAEvB,IAAI,EAAE,oBAAoB;IAIhC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAqGxE"}

package/node_modules/@openrig/daemon/dist/domain/topology/multi-rig-launcher.js

@@ -1,132 +0,0 @@
-// OPR.0.4.4.11 — MultiRigLauncher: the THIN walker (FR-3/FR-4/FR-5).
-//
-// It INVOKES the existing single-rig leaves — it never re-implements stages,
-// locks, provenance, or result shapes. A local entry runs through the SAME
-// public bootstrap() entry + tryAcquire/release lock pair routes/up.ts uses
-// (guard G-2: the per-sourceRef lock is ROUTE-side today — bootstrap() never
-// acquires; the launcher explicitly participates in that same lock set,
-// acquire before the leaf, release in finally on success AND failure). A
-// host-placed entry runs through the shipped remote POST /api/up leaf. Both
-// leaves are injected so this module stays testable and the wiring in
-// routes/up.ts (the ONLY production caller) binds the real seams.
-//
-// Aggregate contract (arch ruling 5, verbatim): status is the CLOSED enum
-// {ok | failed | skipped}; entries after the failed one report `skipped`
-// EXPLICITLY (never absent — omission-proof); `host` is present uniformly on
-// every entry (the literal "local" for local entries); overall success =
-// every entry ok. Stop-on-failure is the ONLY v0 behavior (FR-5): no new
-// entry starts after a failure; already-started rigs are reported honestly
-// (mixed state, no rollback ceremony).
-import { resolvePlacementHost } from "../hosts/hosts-registry-reader.js";
-/** Mirrors the route's 409 lock-conflict semantics for a topology entry. */
-const LOCK_CONFLICT_ERROR = "Already in progress for this source (conflict): a concurrent up holds this rig's launch lock";
-export class MultiRigLauncher {
-    deps;
-    constructor(deps) {
-        this.deps = deps;
-    }
-    async launch(manifest) {
-        const entries = manifest.rigs;
-        // Every entry starts explicitly skipped — an entry the walk never
-        // reaches is REPORTED, not absent (omission-proof aggregate).
-        const results = entries.map((e) => ({
-            rigRef: e.source,
-            host: e.host ?? "local",
-            status: "skipped",
-        }));
-        // ── Pre-launch placement validation (FR-1/FR-4: per-entry structured
-        // errors BEFORE any launch attempt). Registry is read once, only if a
-        // host-placed entry exists. Any placement failure aborts the whole run
-        // before the first leaf call: bad entries report failed, the rest stay
-        // skipped.
-        const placed = new Map();
-        if (entries.some((e) => e.host !== undefined)) {
-            const reg = this.deps.loadRegistry();
-            let placementFailed = false;
-            for (let i = 0; i < entries.length; i++) {
-                const hostId = entries[i].host;
-                if (hostId === undefined)
-                    continue;
-                if (!reg.ok) {
-                    results[i] = { ...results[i], status: "failed", error: reg.error };
-                    placementFailed = true;
-                    continue;
-                }
-                const res = resolvePlacementHost(reg.registry, hostId);
-                if (!res.ok) {
-                    results[i] = { ...results[i], status: "failed", error: res.error };
-                    placementFailed = true;
-                }
-                else {
-                    placed.set(i, res.host);
-                }
-            }
-            if (placementFailed)
-                return { ok: false, entries: results };
-        }
-        // ── Staged walk: entries START in manifest order under the fixed cap
-        // (default 1 = strictly sequential); a failure stops all further starts
-        // while in-flight entries complete and report honestly.
-        let nextIndex = 0;
-        let stopped = false;
-        const runEntry = async (i) => {
-            const entry = entries[i];
-            const hostEntry = placed.get(i);
-            try {
-                if (hostEntry) {
-                    const res = await this.deps.launchRemote(entry.source, hostEntry);
-                    results[i] = {
-                        rigRef: entry.source,
-                        host: hostEntry.id,
-                        status: res.ok ? "ok" : "failed",
-                        ...(res.ok ? {} : { error: res.error ?? "remote up failed" }),
-                    };
-                    return;
-                }
-                // Local: the route-side lock discipline, explicitly (guard G-2).
-                // Lock key and launch ref are the SAME resolved string (guard F1) —
-                // the aggregate's rigRef stays the raw manifest string for display.
-                const launchRef = this.deps.resolveLocalRef ? this.deps.resolveLocalRef(entry.source) : entry.source;
-                if (!this.deps.tryAcquire(launchRef)) {
-                    results[i] = { rigRef: entry.source, host: "local", status: "failed", error: LOCK_CONFLICT_ERROR };
-                    return;
-                }
-                try {
-                    const res = await this.deps.launchLocal(launchRef);
-                    results[i] = {
-                        rigRef: entry.source,
-                        host: "local",
-                        status: res.ok ? "ok" : "failed",
-                        ...(res.ok ? {} : { error: res.error ?? "bootstrap failed" }),
-                    };
-                }
-                finally {
-                    this.deps.release(launchRef);
-                }
-            }
-            catch (err) {
-                results[i] = {
-                    rigRef: entry.source,
-                    host: hostEntry ? hostEntry.id : "local",
-                    status: "failed",
-                    error: err.message,
-                };
-            }
-        };
-        const cap = Math.max(1, manifest.concurrency);
-        const workers = Array.from({ length: Math.min(cap, entries.length) }, async () => {
-            while (!stopped) {
-                const i = nextIndex;
-                if (i >= entries.length)
-                    return;
-                nextIndex += 1;
-                await runEntry(i);
-                if (results[i].status === "failed")
-                    stopped = true; // FR-5: stop at the failed entry
-            }
-        });
-        await Promise.all(workers);
-        return { ok: results.every((r) => r.status === "ok"), entries: results };
-    }
-}
-//# sourceMappingURL=multi-rig-launcher.js.map