@openrig/cli 0.5.2 → 0.5.3

package/daemon/specs/rigs/preview/product-team/topology/rig/ORCHESTRATION-CRAFT.md

@@ -0,0 +1,50 @@
+# Orchestration Craft — shipped defaults (product-team)
+
+<!-- Shipped by the product-team rig spec (copy-if-absent; append freely).
+     Pod-class tactical reminders, shipped at the RIG altitude by ruling (the
+     pod level is deliberately skipped; revisit someday, not now). These are
+     the reminders you need AT THE MOMENT OF ACTING on another seat. -->
+
+## Reading another seat's pane
+
+- **Ghost text vs staged text.** Both Claude Code and Codex render
+  autocomplete GHOST TEXT in the input box, and a capture cannot show font
+  color. Discriminators: cursor at the END of the text → possibly
+  typed-and-left (staged); cursor at the BEGINNING → ghost text.
+  Behaviorally: an Enter that does not consume it → ghost. Misreading ghost
+  as staged (or vice versa) has caused real misdiagnoses — check the cursor
+  before you conclude anything about an un-submitted line.
+- **Text sitting AT the prompt = staged, not consumed.** The fix is one
+  `C-m`, never a re-send (a re-send delivers twice).
+- **The spinner renders ABOVE the input box.** A capture of fewer than ~20
+  lines shows a bare prompt for a seat deep in work; never lower the line
+  count to "simplify" a liveness read.
+
+## Watching without burning the fleet
+
+- **One capture, then arrange to be told.** You cannot watch — only glance,
+  and every glance costs a turn. If you must poll: two minutes minimum, and
+  identical output twice means STOP polling, not poll harder. A tight loop on
+  a shared provider can exhaust the usage limit and stop every seat on it.
+- **Liveness is not health.** A pane can render while nothing progresses.
+  Cross the screen (`rig capture`) with `claimedAt` and
+  `rig queue transitions` before you call a seat stuck.
+
+## Acting on another seat
+
+- **A wake, a refocus, and a checkpoint are three different interventions.**
+  A wake restores liveness and must not reframe the work; a refocus corrects
+  drift and opens with "finish your current action first"; a checkpoint is a
+  deliberate phase-boundary pause. Sending the heavy one is the most common
+  self-inflicted stall.
+- **Never compact a peer to unblock something.** What comes back believes it
+  knows everything and no longer does — and you are the only one who knows it
+  happened. Deposit first, announce, and state what the seat no longer holds.
+
+## Adding a practice to these files
+
+Discovery (it appears where it was earned — a LEARNED, a field note, a review
+observation) → curation (is it generally applicable, or project-specific?) →
+ship (add it to the spec's `topology/` defaults in source, one motivating
+incident per line). Editing this installed copy helps THIS rig now; shipping
+it helps every future install. See docs/reference/chain-file-convention.md.

package/daemon/specs/rigs/preview/product-team/topology/seats/dev1-qa/CRAFT.md

@@ -0,0 +1,13 @@
+# Seat Craft — dev1-qa (shipped default)
+
+<!-- Copy-if-absent; this seat's occupants append what the position learns. -->
+
+- QA owns the test-fix-feedback LOOP: fix in-slice issues directly, rerun the
+  proof, hill-climb, then ask the driver to check. The banned pattern is
+  find-bug → file RED → hand back → wait → repeat.
+- You may author a fix; you may not be its sole final verifier.
+- Reproduce before you fix; if the proof apparatus grows bigger than the fix,
+  stop and use the product instead — a human clicking finds in minutes what
+  immaculate rigor misses for days.
+- A green suite is not proof the user path works: drive the real path on the
+  running artifact, pass/fail named before you run it.

package/daemon/specs/rigs/preview/product-team/topology/seats/orch1-lead/CRAFT.md

@@ -0,0 +1,17 @@
+# Seat Craft — orch1-lead (shipped default)
+
+<!-- Copy-if-absent; this seat's occupants append what the position learns. -->
+
+- You are the seat whose wrong claim gets believed downstream. Verify at
+  SOURCE before ruling — the handler body, not the summary; "merged" means on
+  the branch tip, checked with git.
+- Do not do the work yourself: lock what *good* looks like, then delegate.
+  Hand-building converts your context — the scarce thing — into output
+  someone else could have produced.
+- You are the shock absorber, not the wire: absorb upstream churn, relay only
+  settled decisions.
+- Only this seat may park, and only with a watchdog armed
+  (`rig watchdog register`). Every other seat passes the baton.
+- Never invent work to look busy; if every action this session was a reaction
+  to an inbound message, you have not chosen work once — that is drift even
+  when each response was correct.

package/daemon/specs/rigs/preview/product-team/topology/seats/rev1-r1/CRAFT.md

@@ -0,0 +1,17 @@
+# Seat Craft — rev1-r1 (shipped default)
+
+<!-- Copy-if-absent; this seat's occupants append what the position learns. -->
+
+- A CLEAR from this seat means you RAN it, not that you read a receipt.
+  Reading the handler body is still contract review; the completing check is
+  a behavioral probe of the running mechanism.
+- Verdicts are BASE-SCOPED. If main moves during your review, say so in the
+  verdict: name both bases and the disposition (restack + patch-id proof
+  carries a CLEAR only on MATCH).
+- Gates have a third state: INDETERMINATE. A killed, starved, or
+  contention-timed run is not RED and not green — attribute before ruling,
+  with a base A/B where possible.
+- Predict before you check: state what a failing result would look like
+  BEFORE running the discriminator. If your finding appeared verbatim in the
+  dispatch, go read the artifact.
+- Never review your own authorship; name the exclusion in the verdict.

package/daemon/specs/rigs/preview/product-team/topology/seats/rev1-r2/CRAFT.md

@@ -0,0 +1,15 @@
+# Seat Craft — rev1-r2 (shipped default)
+
+<!-- Copy-if-absent; this seat's occupants append what the position learns. -->
+
+- Your gate asks a DIFFERENT question than r1's: does each claim survive
+  contact with source, on your runtime. Two gates that ask the same question
+  are one gate.
+- Check claims at source, not at the summary: open the named files at the
+  frozen sha, confirm ancestry from the stated base, run the focused suites
+  yourself.
+- Mark every claim you relay: verified-at-source, inherited-unverified, or
+  believed. Fluency reads as reliability, so unmarked confidence transfers.
+- An author's green is evidence, not a verdict; your independent count is the
+  verdict. Disclose any check you could not complete as INDETERMINATE with
+  its cause — never fold it into the CLEAR silently.

package/dist/build-info.js

@@ -1,9 +1,9 @@
 // GENERATED by scripts/build-package.sh — the packaged build-identity stamp.
 export const BUILD_INFO = {
-  semver: "0.5.2",
-  commit: "029acda80a198db6d994b8ef80e349c758ad2848",
+  semver: "0.5.3",
+  commit: "e6add8b86b4bd008b8d46ec31a16fb09aff3b8f2",
   dirty: false,
-  builtAt: "2026-08-22T17:39:04Z",
+  builtAt: "2026-08-26T02:55:45Z",
 };
 export function stampFields(info = BUILD_INFO) {
   if (!info.commit) return {};

package/dist/commands/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC,wBAAgB,aAAa,CAC3B,UAAU,CAAC,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IACL,mFAAmF;IACnF,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C,GACA,OAAO,CAuJT"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC,wBAAgB,aAAa,CAC3B,UAAU,CAAC,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IACL,mFAAmF;IACnF,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C,GACA,OAAO,CA+JT"}

package/dist/commands/config.js

@@ -49,8 +49,16 @@ Keys:
   daemon.*               port, host
   db.path
   transcripts.*          enabled, path, lines, poll_interval_seconds
+                         (lines/poll_interval set scrollback CAPTURE depth + cadence.
+                         Thin CLAUDE transcripts usually are NOT these — they mean the
+                         seat's fullscreen renderer, whose alternate screen emits no
+                         scrollback. OpenRig launches Claude with
+                         CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN=1 by default; set
+                         OPENRIG_CLAUDE_DISABLE_ALTERNATE_SCREEN=0 to opt back into fullscreen.)
   workspace.*            root, slices_root, steering_path, field_notes_root,
                          specs_root, dogfood_evidence_root, operator_seat_name
+  topology.root          the topology tree root (instance altitude at its top; default $OPENRIG_HOME/topology)
+  context.packs_root     context-pack library landing zone for 'rig context add' (default $OPENRIG_HOME/context-packs)
   files.allowlist        name:/abs/path,name:/abs/path
   progress.scan_roots    name:/abs/path,name:/abs/path
   ui.preview.*           refresh_interval_seconds, max_pins, default_lines

package/dist/commands/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAuC,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc;IAC5C,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAkB;IAC3C,OAAO,KAAK,CAAC,oBAAoB,EAAE,CAAC;AACtC,CAAC;AAED,qFAAqF;AACrF,qFAAqF;AACrF,8BAA8B;AAC9B,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AACjE,MAAM,kBAAkB,GAAG,CAAC,cAAc,CAAC,CAAC;AAE5C,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAAmB,EACnB,IAGC;IAED,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,kBAAkB,GAAG,IAAI,EAAE,kBAAkB,IAAI,CAAC,KAAK,IAAI,EAAE;QACjE,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACnE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,CAAC,kDAAkD;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG;SACA,MAAM,CAAC,QAAQ,EAAE,gDAAgD,CAAC;SAClE,MAAM,CAAC,eAAe,EAAE,oDAAoD,CAAC;SAC7E,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oEAqC0C,CAAC;SAChE,MAAM,CAAC,CAAC,IAA8C,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC5C,CAAC;qBAAM,CAAC;oBACN,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;wBAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;wBACnB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBACnE,CAAC;gBACH,CAAC;gBACD,OAAO;YACT,CAAC;YACD,4DAA4D;YAC5D,+DAA+D;YAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACrC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;oBAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;SAC9B,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC;SAClD,MAAM,CAAC,QAAQ,EAAE,2CAA2C,CAAC;SAC7D,MAAM,CAAC,eAAe,EAAE,uCAAuC,CAAC;SAChE,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,CAAC,GAAW,EAAE,IAA8C,EAAE,EAAE;QACtE,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAsB,CAAC,IAAI,EAAE,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;SAC9B,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC;SAClD,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;SACnC,WAAW,CAAC,oBAAoB,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,KAAa,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,gFAAgF;YAChF,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBACvD,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,4JAA4J,CAAC,CAAC;YAC3L,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;SAClC,QAAQ,CAAC,OAAO,EAAE,0DAA0D,CAAC;SAC7E,WAAW,CAAC,uEAAuE,CAAC;SACpF,MAAM,CAAC,CAAC,GAAuB,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,sBAAsB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzB,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAuC,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc;IAC5C,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAkB;IAC3C,OAAO,KAAK,CAAC,oBAAoB,EAAE,CAAC;AACtC,CAAC;AAED,qFAAqF;AACrF,qFAAqF;AACrF,8BAA8B;AAC9B,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AACjE,MAAM,kBAAkB,GAAG,CAAC,cAAc,CAAC,CAAC;AAE5C,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAAmB,EACnB,IAGC;IAED,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,kBAAkB,GAAG,IAAI,EAAE,kBAAkB,IAAI,CAAC,KAAK,IAAI,EAAE;QACjE,IAAI,CAAC;YACH,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACnE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,CAAC,kDAAkD;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG;SACA,MAAM,CAAC,QAAQ,EAAE,gDAAgD,CAAC;SAClE,MAAM,CAAC,eAAe,EAAE,oDAAoD,CAAC;SAC7E,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oEA6C0C,CAAC;SAChE,MAAM,CAAC,CAAC,IAA8C,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC5C,CAAC;qBAAM,CAAC;oBACN,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;wBAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;wBACnB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBACnE,CAAC;gBACH,CAAC;gBACD,OAAO;YACT,CAAC;YACD,4DAA4D;YAC5D,+DAA+D;YAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC/C,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACrC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;oBAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnB,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;SAC9B,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC;SAClD,MAAM,CAAC,QAAQ,EAAE,2CAA2C,CAAC;SAC7D,MAAM,CAAC,eAAe,EAAE,uCAAuC,CAAC;SAChE,WAAW,CAAC,4BAA4B,CAAC;SACzC,MAAM,CAAC,CAAC,GAAW,EAAE,IAA8C,EAAE,EAAE;QACtE,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAsB,CAAC,IAAI,EAAE,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;SAC9B,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC;SAClD,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;SACnC,WAAW,CAAC,oBAAoB,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,KAAa,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,gFAAgF;YAChF,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,kBAAkB,EAAE,CAAC,EAAE,CAAC;gBACvD,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,4JAA4J,CAAC,CAAC;YAC3L,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;SAClC,QAAQ,CAAC,OAAO,EAAE,0DAA0D,CAAC;SAC7E,WAAW,CAAC,uEAAuE,CAAC;SACpF,MAAM,CAAC,CAAC,GAAuB,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjB,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,sBAAsB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;YACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvB,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvB,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzB,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/commands/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAepC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA0L9C,wBAAgB,cAAc,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,OAAO,CA0RjE"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/commands/context.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoBpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6Q9C,wBAAgB,cAAc,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,OAAO,CA0fjE"}

package/dist/commands/context.js

@@ -10,10 +10,11 @@
 // ~/.openrig/context-packs/<name>/ — host-symlink-free contract,
 // matches `rig specs add` shape (regular files only; no symlinks).
 import { Command } from "commander";
-import { cpSync, existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, } from "node:fs";
+import { cpSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { dirname } from "node:path";
 import { basename, extname, isAbsolute, join, resolve } from "node:path";
 import { parse as parseYaml } from "yaml";
-import { getDefaultOpenRigPath } from "../openrig-compat.js";
+import { ConfigStore } from "../config-store.js";
 import { DaemonClient } from "../client.js";
 import { getDaemonStatus, getDaemonUrl, statusGuardMessage } from "../daemon-lifecycle.js";
 import { realDeps } from "./daemon.js";
@@ -75,7 +76,10 @@ function assertDestinationNamespaceContained(targetRoot, installName) {
         }
     }
 }
-const ALLOWED_CONTEXT_PACK_SUFFIXES = new Set([".md", ".markdown", ".yaml", ".yml", ".txt"]);
+// Kept in lockstep with the daemon parser's ALLOWED_FILE_SUFFIXES (manifest-parser.ts).
+// OPR.0.5.3.7 R2 added .sh/.ts (skill helper assets, served as text); the install
+// validator must accept what the daemon will serve.
+const ALLOWED_CONTEXT_PACK_SUFFIXES = new Set([".md", ".markdown", ".yaml", ".yml", ".txt", ".sh", ".ts"]);
 function validateContextPackManifestForInstall(manifestPath) {
     let parsed;
     try {
@@ -124,6 +128,80 @@ function validateContextPackManifestForInstall(manifestPath) {
         }
     }
 }
+function isHttpUrl(source) {
+    return /^https?:\/\//i.test(source);
+}
+async function fetchTextOrThrow(url, what) {
+    let res;
+    try {
+        res = await fetch(url);
+    }
+    catch (err) {
+        throw new Error(`Could not reach ${what} at ${url}: ${err.message}`);
+    }
+    if (!res.ok)
+        throw new Error(`Could not fetch ${what} at ${url}: HTTP ${res.status} ${res.statusText}`.trim());
+    // res.url is the FINAL url after any redirects — declared files must resolve
+    // relative to it, not the caller's original spelling (r2 MEDIUM-1).
+    return { text: await res.text(), finalUrl: res.url || url };
+}
+// OPR.0.5.3.7 R4 — install a context pack from a URL. <url> points at the pack's
+// manifest.yaml (a trailing '/' is treated as '<url>manifest.yaml'); every
+// files[].path is fetched relative to that manifest. ATOMIC BY CONSTRUCTION:
+// everything stages into a temp SIBLING of the target and is published by one
+// renameSync, so a malformed manifest, an unreachable URL, or a missing declared
+// file leaves NO partial pack behind. Deliberately dumb: no registry, no cache.
+async function installPackFromUrl(url, overrideName, targetRoot) {
+    const manifestUrl = url.endsWith("/") ? `${url}manifest.yaml` : url;
+    mkdirSync(targetRoot, { recursive: true });
+    const staging = mkdtempSync(join(targetRoot, ".tmp-add-"));
+    try {
+        // Fetch + validate the manifest before touching the target namespace.
+        const { text: manifestText, finalUrl: finalManifestUrl } = await fetchTextOrThrow(manifestUrl, "manifest");
+        writeFileSync(join(staging, "manifest.yaml"), manifestText);
+        validateContextPackManifestForInstall(join(staging, "manifest.yaml"));
+        const manifest = parseYaml(manifestText);
+        const installName = overrideName ?? manifest.name;
+        assertSafeInstallRef(installName);
+        assertDestinationNamespaceContained(targetRoot, installName);
+        const targetDir = join(targetRoot, installName);
+        if (existsSync(targetDir)) {
+            throw new Error(`A context pack named '${installName}' already exists at ${targetDir}. Remove it first or use --name to install under a different name.`);
+        }
+        // Fetch every declared file relative to the manifest's FINAL url (after
+        // redirects), via the platform URL resolver — never the caller's original
+        // spelling (r2 MEDIUM-1: a redirected manifest must not resolve files against
+        // the stale request base).
+        //
+        // BOUNDARY (r2 HIGH-1): new URL() also honors an ABSOLUTE f.path, and the
+        // manifest validator accepts a URL-shaped value as a filesystem-relative
+        // path. Require every resolved file URL to stay under the manifest's own
+        // directory (same origin + path prefix) so a stranger-supplied manifest can
+        // never make add fetch cross-origin or climb out of its pack. The trailing
+        // slash on the base defeats prefix-sibling ('/pack' vs '/pack-evil') tricks.
+        const manifestDirUrl = new URL("./", finalManifestUrl).href;
+        for (const f of manifest.files) {
+            const fileUrl = new URL(f.path, finalManifestUrl).href;
+            if (!fileUrl.startsWith(manifestDirUrl)) {
+                throw new Error(`manifest file '${f.path}' resolves to ${fileUrl}, outside the pack directory ${manifestDirUrl}. ` +
+                    `Declared files must be relative to the manifest (no absolute URLs, no escaping the pack).`);
+            }
+            const { text: fileText } = await fetchTextOrThrow(fileUrl, `file '${f.path}'`);
+            const dest = join(staging, f.path);
+            mkdirSync(dirname(dest), { recursive: true });
+            writeFileSync(dest, fileText);
+        }
+        // Re-validate the on-disk staged pack, then publish atomically.
+        validateContextPackManifestForInstall(join(staging, "manifest.yaml"));
+        assertTreeHasNoSymlinks(staging);
+        renameSync(staging, targetDir);
+        return { targetDir, installName };
+    }
+    catch (err) {
+        rmSync(staging, { recursive: true, force: true });
+        throw err;
+    }
+}
 async function resolvePack(client, nameOrRef) {
     if (nameOrRef.startsWith("context-pack:")) {
         throw new Error("Context pack colon-id addressing ('context-pack:<name>:<version>') was removed. " +
@@ -167,6 +245,7 @@ Examples:
   rig context add ./my-pack
   rig context rm packs/compaction-restore
   rig context sync
+  rig context trace --rig product-team --seat orch1-lead --name LEARNED.md
 `);
     const getDeps = () => depsOverride ?? {
         lifecycleDeps: realDeps(),
@@ -182,6 +261,56 @@ Examples:
         }
         return deps.clientFactory(getDaemonUrl(status));
     }
+    // OPR.0.5.3.6 — the productized chain-file trace. Daemon-independent by
+    // design: the walk is a config read + filesystem reads, so it works on a
+    // box whose daemon is down (orientation is exactly when that happens).
+    cmd.command("trace")
+        .description("Walk the topology tree for one chain filename (instance -> rig -> seat), keyed off topology.root")
+        .requiredOption("--rig <rig>", "Rig name (the rigs/<rig> altitude)")
+        .option("--seat <seat>", "Seat id (the seats/<seat> altitude); omit for a rig-level trace")
+        .requiredOption("--name <file>", "Chain filename, identical at every altitude (e.g. LEARNED.md, CULTURE.md)")
+        .option("--json", "JSON output for agents")
+        .action(async (opts) => {
+        const { ConfigStore } = await import("../config-store.js");
+        const { traceTopologyChain } = await import("../lib/topology-trace.js");
+        const store = new ConfigStore();
+        const resolved = store.resolveWithSource("topology.root");
+        let result;
+        try {
+            result = traceTopologyChain({
+                topologyRoot: String(resolved.value),
+                name: opts.name,
+                rig: opts.rig,
+                seat: opts.seat ?? null,
+            });
+        }
+        catch (err) {
+            // r2-B3: traversal-shaped input is a clean refusal, never a stack trace.
+            console.error(err instanceof Error ? err.message : String(err));
+            process.exitCode = 1;
+            return;
+        }
+        // Advisories go to stderr on BOTH output modes — a legacy read must
+        // never pass silently, and stdout stays clean for piping.
+        for (const level of result.levels) {
+            if (level.advisory)
+                console.error(`ADVISORY ${level.advisory}`);
+        }
+        if (opts.json) {
+            console.log(JSON.stringify({ topologyRootSource: resolved.source, ...result }, null, 2));
+            return;
+        }
+        console.log(`chain "${result.name}" under topology.root=${result.topologyRoot} (source: ${resolved.source})`);
+        for (const level of result.levels) {
+            if (level.source === "absent") {
+                console.log(`\n== ${level.altitude} — absent (${level.path})`);
+                continue;
+            }
+            const origin = level.source === "legacy" ? ` [LEGACY: ${level.resolvedPath}]` : "";
+            console.log(`\n== ${level.altitude} — ${level.path}${origin}`);
+            console.log(level.content?.trimEnd() ?? "");
+        }
+    });
     cmd.command("compose")
         .description("Compose ordered files into a durable context-pack ref (never delivers)")
         .requiredOption("--out <ref>", "Path-like durable output ref")
@@ -305,6 +434,175 @@ Examples:
             process.exitCode = 1;
         }
     });
+    // OPR.0.5.3.7 R1 — the PULL verb: an agent-facing serving verb over the EXISTING assembler
+    // path (the same by-ref/preview machinery `preview` uses — never a parallel assembler).
+    // `preview` is the operator's pre-send check; `get` is what a seat runs on demand to LOAD a
+    // library entry. Output is the assembled bundle itself (so the agent consumes exactly those
+    // bytes), warnings to stderr; `--json` for programmatic use. Naming ruled: `rig context get`
+    // (one library, one verb — NOT `rig skills get`; "skills" is an org category in the library).
+    cmd.command("get")
+        .argument("<name-or-ref>", "Context library entry name, path-like ref, or address (<pack-ref>/<file>#H2-slug/H3-slug)")
+        .description("Serve the assembled bundle for an agent to load on demand (the pull verb)")
+        .option("--json", "JSON output")
+        .action(async (nameOrRef, opts) => {
+        try {
+            const client = await getClient();
+            // OPR.0.5.3.5 Atom 4c (Q4: one `name#H2/H3` form across the verb
+            // family): an address routes to the daemon's single resolver home;
+            // stdout is exactly the resolved span bytes so an agent consumes the
+            // addressed section and nothing else. Fail-loud passthrough — the
+            // daemon names every failure; this verb adds nothing to it.
+            if (nameOrRef.includes("#")) {
+                const res = await client.get(`/api/context-packs/library/resolve-address?address=${encodeURIComponent(nameOrRef)}`);
+                if (res.status !== 200) {
+                    throw new Error(res.data?.message ?? res.data?.error ?? `Daemon returned HTTP ${res.status} for resolve-address`);
+                }
+                if (opts.json)
+                    console.log(JSON.stringify(res.data, null, 2));
+                else
+                    console.log(res.data.text);
+                return;
+            }
+            const entry = await resolvePack(client, nameOrRef);
+            const res = await client.get(`/api/context-packs/library/by-ref/preview?ref=${encodeURIComponent(entry.relativePath)}`);
+            if (res.status !== 200)
+                throw new Error(`Daemon returned HTTP ${res.status}`);
+            const bundle = res.data;
+            if (opts.json) {
+                console.log(JSON.stringify(bundle, null, 2));
+                return;
+            }
+            // Warnings go to stderr so stdout is exactly the served bundle bytes.
+            if (bundle.missingFiles.length > 0) {
+                console.error(`Warning: ${bundle.missingFiles.length} file(s) referenced by manifest are missing on disk.`);
+                for (const m of bundle.missingFiles)
+                    console.error(`  - ${m.path} (role: ${m.role})`);
+            }
+            console.log(bundle.bundleText);
+        }
+        catch (err) {
+            console.error(err.message);
+            process.exitCode = 1;
+        }
+    });
+    // OPR.0.5.3.5 Atom 4d — situation-composed delivery (the profile verb).
+    // Serving only: pieces to stdout with their source labels (Q2-Amendment 1),
+    // budget report + provenance warnings to stderr. Delivery-free like every
+    // library verb — nothing here sends to a seat. Naming rig/seat (or mission)
+    // is the caller's explicit grant of read access to that directory subtree.
+    cmd.command("profile")
+        .argument("<name-or-ref>", "Context pack name or path-like ref (its manifest must declare atoms)")
+        .requiredOption("--situation <situation>", "fresh | handover | post-compaction")
+        // r1 4d obs 2: default from the seat's own environment — a codex seat that
+        // forgets the flag must not silently get a claude profile (mini-req 3 is
+        // the rule that the runtimes compose DIFFERENT profiles). Flag beats env;
+        // an unrecognized env value falls back to claude rather than erroring a
+        // surface the env owner may not control.
+        .option("--runtime <runtime>", "claude | codex (default: $OPENRIG_RUNTIME, else claude)")
+        .option("--budget <tokens>", "Situation token budget — overage is REPORTED, never truncated")
+        .option("--rig <rig>", "With --seat: grant read access to that seat's tree (seat: atoms)")
+        .option("--seat <seat>", "With --rig: the seat whose tree seat: atoms may read")
+        .option("--mission <mission>", "Grant read access to that mission's tree (mission: atoms)")
+        .option("--json", "JSON output (the full composed profile)")
+        .action(async (nameOrRef, opts) => {
+        try {
+            const client = await getClient();
+            const entry = await resolvePack(client, nameOrRef);
+            // r1 F2: the product's runtime vocabulary is "claude-code" / "codex"
+            // (the adapters' values, live on real seats) — map it EXPLICITLY. A
+            // genuinely unknown value falls back to claude WITH A VOICE: a future
+            // third runtime must not silently get a claude profile (the exact
+            // mini-req 3 hazard this default exists to close).
+            const envRuntime = process.env["OPENRIG_RUNTIME"];
+            let runtime = opts.runtime;
+            if (runtime === undefined) {
+                if (envRuntime === "codex")
+                    runtime = "codex";
+                else if (envRuntime === "claude-code" || envRuntime === "claude")
+                    runtime = "claude";
+                else {
+                    if (envRuntime)
+                        console.error(`Warning: unrecognized OPENRIG_RUNTIME '${envRuntime}' — composing the claude profile; pass --runtime to override.`);
+                    runtime = "claude";
+                }
+            }
+            const params = new URLSearchParams({ ref: entry.relativePath, situation: opts.situation, runtime });
+            if (opts.budget !== undefined)
+                params.set("budget", opts.budget);
+            if (opts.rig !== undefined)
+                params.set("rig", opts.rig);
+            if (opts.seat !== undefined)
+                params.set("seat", opts.seat);
+            if (opts.mission !== undefined)
+                params.set("mission", opts.mission);
+            const res = await client.get(`/api/context-packs/library/by-ref/profile?${params.toString()}`);
+            if (res.status !== 200) {
+                throw new Error(res.data?.message ?? res.data?.error ?? `Daemon returned HTTP ${res.status} for by-ref/profile`);
+            }
+            const profile = res.data;
+            if (opts.json) {
+                console.log(JSON.stringify(profile, null, 2));
+                return;
+            }
+            // Warnings and the budget report ride stderr so stdout is exactly the
+            // composed walk an agent consumes.
+            for (const w of profile.provenanceWarnings ?? [])
+                console.error(`PROVENANCE ${w}`);
+            if (profile.budget) {
+                console.error(`BUDGET: over by ~${profile.budget.overageTokens} tokens (limit ${profile.budget.limitTokens}); ` +
+                    `drop candidates in order: ${profile.budget.dropCandidates.map((d) => `${d.atomId} (${d.priority}, ~${d.estimatedTokens})`).join(", ")}`);
+            }
+            for (const p of profile.pieces ?? []) {
+                // r1 4d obs 1: the escape marker rides the FRAMING header, so an
+                // agent that discards stderr still learns a piece's bytes came from
+                // outside its root — self-describing payload, zero composed bytes
+                // touched.
+                const escaped = p.provenance?.escapesRoot ? " !ESCAPED-ROOT" : "";
+                console.log(`=== ${p.atomId} [${p.sourceKind}${escaped}] ${p.address} (~${p.estimatedTokens} tokens)`);
+                console.log(p.text);
+                console.log("");
+            }
+        }
+        catch (err) {
+            console.error(err.message);
+            process.exitCode = 1;
+        }
+    });
+    // OPR.0.5.3.5 mini-req 7 — the outgoing occupant's boundary write (the Q2
+    // requirement the store alone does not satisfy). Daemon-independent like
+    // trace: the seat dir resolves from topology.root CONFIG; the write flows
+    // through the ONE store (supersession + addressability gate); advisory
+    // contract findings ride stderr while the write still lands — the boundary
+    // is never blocked on prose shape.
+    cmd.command("recap-write")
+        .description("Write this seat's authored RECAP (decisions-with-rationale) at the handover boundary; supersedes the previous recap into the seat's chain")
+        .requiredOption("--rig <rig>", "Rig name (the rigs/<rig> altitude)")
+        .requiredOption("--seat <seat>", "Seat id (the seats/<seat> altitude)")
+        .requiredOption("--file <path>", "Markdown file containing the recap content")
+        .action(async (opts) => {
+        try {
+            const { writeSeatRecap, validateRecapContract, listRecapChain } = await import("@openrig/daemon/seat-recap-store");
+            const content = readFileSync(opts.file, "utf-8");
+            const store = new ConfigStore();
+            const topologyRoot = String(store.resolveWithSource("topology.root").value);
+            const seatDir = join(topologyRoot, "rigs", opts.rig, "seats", opts.seat);
+            if (!existsSync(seatDir)) {
+                throw new Error(`seat directory ${seatDir} does not exist — check --rig/--seat against the topology tree (topology.root=${topologyRoot}).`);
+            }
+            for (const f of validateRecapContract(content)) {
+                console.error(f.kind === "no-decisions-section"
+                    ? "ADVISORY no-decisions-section: the authoring contract asks for decisions WITH rationale — conclusions alone are the lossy handoff shape."
+                    : `ADVISORY nonstandard-unverified-marker (line ${f.line}): use the canonical 'UNVERIFIED:' form so uncertain facts stay findable.`);
+            }
+            writeSeatRecap({ seatDir, content });
+            const chain = listRecapChain(seatDir);
+            console.log(`Recap written: ${join(seatDir, "RECAP.md")}${chain.length > 0 ? ` (${chain.length} superseded predecessor${chain.length === 1 ? "" : "s"} retained)` : ""}`);
+        }
+        catch (err) {
+            console.error(err.message);
+            process.exitCode = 1;
+        }
+    });
     cmd.command("sync")
         .description("Re-walk discovery roots and refresh the library index")
         .option("--json", "JSON output")
@@ -332,56 +630,63 @@ Examples:
         }
     });
     cmd.command("add")
-        .argument("<source-dir>", "Directory containing manifest.yaml + included files")
-        .description("Install a context pack from a local directory into ~/.openrig/context-packs/")
-        .option("--name <name>", "Override the install name (defaults to source directory basename)")
+        .argument("<source>", "Local directory OR http(s):// URL of a context pack (manifest.yaml + files)")
+        .description("Install a context pack from a local directory or a URL into the context-packs landing zone")
+        .option("--name <name>", "Override the install name (defaults to the manifest name / source basename)")
         .option("--json", "JSON output")
-        .action(async (sourceDir, opts) => {
+        .action(async (source, opts) => {
         try {
-            if (!existsSync(sourceDir))
-                throw new Error(`Source directory not found: ${sourceDir}`);
-            const stat = lstatSync(sourceDir);
-            if (stat.isSymbolicLink())
-                throw new Error(`Source must not be a symlink: ${sourceDir}`);
-            if (!stat.isDirectory())
-                throw new Error(`Source must be a directory containing manifest.yaml: ${sourceDir}`);
-            const manifestPath = join(sourceDir, "manifest.yaml");
-            if (!existsSync(manifestPath)) {
-                throw new Error(`Source directory must contain manifest.yaml: ${sourceDir}`);
-            }
-            validateContextPackManifestForInstall(manifestPath);
-            // Read the manifest's name as the canonical install name when
-            // --name not given. Cheap parse: trust the daemon to validate
-            // on next sync; here we just need the name.
-            const installName = opts.name ?? (() => {
+            // OPR.0.5.3.7 R4 — config-resolved landing zone (env > config > $OPENRIG_HOME/context-packs),
+            // never a hardcoded ~/.openrig literal; the daemon resolves the same key.
+            const targetRoot = new ConfigStore().resolve().context.packsRoot;
+            let targetDir;
+            if (isHttpUrl(source)) {
+                // R4 — URL install: fetch → validate → atomic stage+rename (no partial pack).
+                ({ targetDir } = await installPackFromUrl(source, opts.name, targetRoot));
+            }
+            else {
+                // Local directory install.
+                if (!existsSync(source))
+                    throw new Error(`Source directory not found: ${source}`);
+                const stat = lstatSync(source);
+                if (stat.isSymbolicLink())
+                    throw new Error(`Source must not be a symlink: ${source}`);
+                if (!stat.isDirectory())
+                    throw new Error(`Source must be a directory containing manifest.yaml: ${source}`);
+                const manifestPath = join(source, "manifest.yaml");
+                if (!existsSync(manifestPath)) {
+                    throw new Error(`Source directory must contain manifest.yaml: ${source}`);
+                }
+                validateContextPackManifestForInstall(manifestPath);
+                const installName = opts.name ?? (() => {
+                    try {
+                        const raw = readFileSync(manifestPath, "utf-8");
+                        const m = raw.match(/^name:\s*['"]?([^'"\n]+)['"]?\s*$/m);
+                        return m?.[1]?.trim() || basename(source);
+                    }
+                    catch {
+                        return basename(source);
+                    }
+                })();
+                assertSafeInstallRef(installName);
+                assertTreeHasNoSymlinks(source);
+                mkdirSync(targetRoot, { recursive: true });
+                assertDestinationNamespaceContained(targetRoot, installName);
+                targetDir = join(targetRoot, installName);
+                let targetExists = false;
                 try {
-                    const raw = readFileSync(manifestPath, "utf-8");
-                    const m = raw.match(/^name:\s*['"]?([^'"\n]+)['"]?\s*$/m);
-                    return m?.[1]?.trim() || basename(sourceDir);
+                    lstatSync(targetDir);
+                    targetExists = true;
                 }
-                catch {
-                    return basename(sourceDir);
+                catch (err) {
+                    if (err.code !== "ENOENT")
+                        throw err;
                 }
-            })();
-            assertSafeInstallRef(installName);
-            assertTreeHasNoSymlinks(sourceDir);
-            const targetRoot = getDefaultOpenRigPath("context-packs");
-            mkdirSync(targetRoot, { recursive: true });
-            assertDestinationNamespaceContained(targetRoot, installName);
-            const targetDir = join(targetRoot, installName);
-            let targetExists = false;
-            try {
-                lstatSync(targetDir);
-                targetExists = true;
-            }
-            catch (err) {
-                if (err.code !== "ENOENT")
-                    throw err;
-            }
-            if (targetExists) {
-                throw new Error(`A context pack named '${installName}' already exists at ${targetDir}. Remove it first or use --name to install under a different name.`);
-            }
-            cpSync(sourceDir, targetDir, { recursive: true });
+                if (targetExists) {
+                    throw new Error(`A context pack named '${installName}' already exists at ${targetDir}. Remove it first or use --name to install under a different name.`);
+                }
+                cpSync(source, targetDir, { recursive: true });
+            }
             // Sync the daemon library so the new pack appears immediately.
             const client = await getClient();
             const syncRes = await client.post("/api/context-packs/library/sync");