@openrig/cli 0.5.2 → 0.5.4

package/daemon/dist/domain/seat-lifecycle-service.js

@@ -0,0 +1,312 @@
+import { getNodeInventory } from "./node-inventory.js";
+import { parseSessionName } from "./session-name.js";
+/**
+ * S5 (OPR.0.5.4.7) — the seat-lifecycle verb surface: set-model, single-seat stop,
+ * dead-session clean. One coherent design (KI-5.3-9):
+ *
+ *   - ONE seat-resolution path shared by all three verbs (the SeatStatusService
+ *     findMatches semantics: parseSessionName greedy first-@ rig; canonical-name or
+ *     logical-id match; ambiguity returns the match list) — never a per-verb resolver.
+ *   - Every mutation is transactional and persists its audit event in the SAME
+ *     transaction (node.model_changed / session.stopped / session.cleaned).
+ *   - Every refusal names what was actually checked; an indeterminate tmux probe is
+ *     a refusal, never a guess (the S1 error bar applied at birth).
+ */
+const SEAT_LOOKUP_GUIDANCE = "List seats with: rig ps --nodes";
+/** Terminal session statuses — rows the clean verb must NOT touch (they already
+ *  record an ended tenancy; the vocabulary is shared with seat-handover-service
+ *  and the watchdog's TERMINAL_SESSION_STATUSES). */
+const TERMINAL_SESSION_STATUSES = new Set(["superseded", "detached", "exited"]);
+export class SeatLifecycleService {
+    db;
+    rigRepo;
+    sessionRegistry;
+    eventBus;
+    tmuxAdapter;
+    constructor(deps) {
+        if (deps.db !== deps.rigRepo.db)
+            throw new Error("SeatLifecycleService: rigRepo must share the same db handle");
+        if (deps.db !== deps.sessionRegistry.db)
+            throw new Error("SeatLifecycleService: sessionRegistry must share the same db handle");
+        if (deps.db !== deps.eventBus.db)
+            throw new Error("SeatLifecycleService: eventBus must share the same db handle");
+        this.db = deps.db;
+        this.rigRepo = deps.rigRepo;
+        this.sessionRegistry = deps.sessionRegistry;
+        this.eventBus = deps.eventBus;
+        this.tmuxAdapter = deps.tmuxAdapter;
+    }
+    async setModel(input) {
+        const required = this.requireReason(input.reason);
+        if (required)
+            return required;
+        if (!input.model?.trim()) {
+            return { ok: false, code: "missing_model", message: "A target model id is required (--model)." };
+        }
+        const resolved = this.resolveSeat(input.seatRef);
+        if ("code" in resolved)
+            return resolved;
+        const model = input.model.trim();
+        const seat = this.describe(resolved);
+        const from = resolved.entry.model ?? null;
+        if (from === model) {
+            // Honest no-op: the persisted value already IS the target; no event is minted.
+            return { ok: true, seat, from, to: model, changed: false };
+        }
+        let persisted = null;
+        const tx = this.db.transaction(() => {
+            this.rigRepo.setNodeModel(resolved.nodeId, model);
+            persisted = this.eventBus.persistWithinTransaction({
+                type: "node.model_changed",
+                rigId: seat.rigId,
+                nodeId: seat.nodeId,
+                logicalId: seat.logicalId,
+                from,
+                to: model,
+                reason: input.reason.trim(),
+                operator: input.operator ?? null,
+            });
+        });
+        tx();
+        if (persisted)
+            this.eventBus.notifySubscribers(persisted);
+        return { ok: true, seat, from, to: model, changed: true };
+    }
+    async stopSeat(input) {
+        const required = this.requireReason(input.reason);
+        if (required)
+            return required;
+        const resolved = this.resolveSeat(input.seatRef);
+        if ("code" in resolved)
+            return resolved;
+        const seat = this.describe(resolved);
+        const session = this.latestSession(resolved.nodeId);
+        if (!session) {
+            return { ok: false, code: "no_session", message: `Seat "${input.seatRef}" has no session to stop (checked: latest sessions row for node ${seat.logicalId}).` };
+        }
+        if (session.origin === "claimed") {
+            return {
+                ok: false,
+                code: "claimed_session",
+                message: `Session "${session.session_name}" was adopted (origin=claimed), not launched by OpenRig — stop refuses to kill it.`,
+                guidance: "Release an adopted session with: rig unclaim",
+            };
+        }
+        // Wave-2 fix round 1 (r1 row 9baac99f): consume the CLASSIFIED probe, never the
+        // collapsed hasSession view — a transport blip is INDETERMINATE, not absence
+        // (KI-5.3-8 fabricated-absence class, destructive direction).
+        const probed = await this.probeLiveness(session.session_name, "stop refuses rather than kill blind");
+        if ("code" in probed)
+            return probed;
+        if (probed.state === "absent") {
+            return {
+                ok: false,
+                code: "session_not_live",
+                message: `Session "${session.session_name}" is absent in tmux (checked: tmux has-session, POSITIVE absence evidence) — there is nothing to stop.`,
+                guidance: "A dead seat with stale records is returned to launchable with: rig seat clean",
+            };
+        }
+        // Kill exactly this seat's own tmux session — structurally single-seat.
+        const kill = await this.tmuxAdapter.killSession(session.session_name);
+        if (kill && !kill.ok && kill.code !== "session_not_found") {
+            return {
+                ok: false,
+                code: "tmux_probe_failed",
+                message: `tmux kill-session for "${session.session_name}" failed: ${kill.message ?? kill.code}`,
+            };
+        }
+        let persisted = null;
+        const tx = this.db.transaction(() => {
+            this.sessionRegistry.updateStatus(session.id, "exited");
+            this.sessionRegistry.clearBinding(resolved.nodeId);
+            persisted = this.eventBus.persistWithinTransaction({
+                type: "session.stopped",
+                rigId: seat.rigId,
+                nodeId: seat.nodeId,
+                sessionName: session.session_name,
+                reason: input.reason.trim(),
+                operator: input.operator ?? null,
+            });
+        });
+        tx();
+        if (persisted)
+            this.eventBus.notifySubscribers(persisted);
+        return { ok: true, seat, sessionName: session.session_name, sessionId: session.id };
+    }
+    async cleanSeat(input) {
+        const required = this.requireReason(input.reason);
+        if (required)
+            return required;
+        const resolved = this.resolveSeat(input.seatRef);
+        if ("code" in resolved)
+            return resolved;
+        const seat = this.describe(resolved);
+        const binding = this.sessionRegistry.getBindingForNode(resolved.nodeId);
+        const nonTerminal = this.db.prepare("SELECT id, session_name, status, origin FROM sessions WHERE node_id = ? ORDER BY id").all(resolved.nodeId)
+            .filter((s) => !TERMINAL_SESSION_STATUSES.has(s.status));
+        // Fix r2-F3 (row 30045f39): clean MUTATES every non-terminal session row, so
+        // its safety checks must cover exactly that set — probing only the newest row
+        // fabricates safety for the others (older-live/newer-dead under canonical-name
+        // churn). Every row that would be touched is checked for adopted origin and
+        // probed for POSITIVE absence (r1 discipline); the binding's own tmux session
+        // is probed too when it names a session no row carries.
+        const mutationTargets = nonTerminal;
+        for (const row of mutationTargets) {
+            if (row.origin === "claimed") {
+                return {
+                    ok: false,
+                    code: "claimed_session",
+                    message: `Session "${row.session_name}" was adopted (origin=claimed) — clean refuses to touch adopted state.`,
+                    guidance: "Release an adopted session with: rig unclaim",
+                };
+            }
+        }
+        const probeNames = [...new Set([
+                ...mutationTargets.map((s) => s.session_name),
+                ...(binding?.tmuxSession ? [binding.tmuxSession] : []),
+            ])];
+        for (const name of probeNames) {
+            const probed = await this.probeLiveness(name, "clean refuses rather than clear state under a possibly-live seat");
+            if ("code" in probed)
+                return probed;
+            if (probed.state === "present") {
+                return {
+                    ok: false,
+                    code: "session_live",
+                    message: `Session "${name}" is alive in tmux (checked: tmux has-session, against EVERY session row clean would mutate) — clean only operates on dead seats.`,
+                    guidance: "Stop a live seat first with: rig seat stop",
+                };
+            }
+        }
+        const session = this.latestSession(resolved.nodeId);
+        if (!binding && nonTerminal.length === 0) {
+            return {
+                ok: false,
+                code: "nothing_to_clean",
+                message: `Seat "${input.seatRef}" is already clean (checked: no binding row for the node, and no session rows outside terminal statuses ${[...TERMINAL_SESSION_STATUSES].join("/")}).`,
+            };
+        }
+        const sessionsExited = [];
+        let persisted = null;
+        const tx = this.db.transaction(() => {
+            for (const row of nonTerminal) {
+                this.sessionRegistry.updateStatus(row.id, "exited");
+                sessionsExited.push(row.session_name);
+            }
+            this.sessionRegistry.clearBinding(resolved.nodeId);
+            persisted = this.eventBus.persistWithinTransaction({
+                type: "session.cleaned",
+                rigId: seat.rigId,
+                nodeId: seat.nodeId,
+                sessionName: session?.session_name ?? null,
+                reason: input.reason.trim(),
+                operator: input.operator ?? null,
+                actions: { sessionsExited, bindingCleared: binding !== null },
+            });
+        });
+        tx();
+        if (persisted)
+            this.eventBus.notifySubscribers(persisted);
+        return { ok: true, seat, actions: { sessionsExited, bindingCleared: binding !== null } };
+    }
+    // -- shared internals --
+    /**
+     * The ONE liveness read both mutating verbs share (fix r1, row 9baac99f):
+     * the CLASSIFIED probeSession, never the collapsed hasSession view.
+     *   present / absent        → returned for the verb to act on (absent is
+     *                             POSITIVE tmux evidence, per OPR.0.5.4.2).
+     *   transport_unavailable   → an INDETERMINATE refusal: session existence was
+     *                             NOT determined, so neither verb may act — and the
+     *                             refusal never routes the operator to a
+     *                             destructive verb.
+     *   unexpected probe throw  → the same indeterminate refusal (fail closed).
+     */
+    async probeLiveness(sessionName, refusalConsequence) {
+        let probe;
+        try {
+            probe = await this.tmuxAdapter.probeSession(sessionName);
+        }
+        catch (err) {
+            return {
+                ok: false,
+                code: "tmux_probe_failed",
+                message: `tmux liveness probe for "${sessionName}" failed (${err instanceof Error ? err.message : String(err)}) — liveness is INDETERMINATE, so ${refusalConsequence}.`,
+            };
+        }
+        if (probe.state === "transport_unavailable") {
+            return {
+                ok: false,
+                code: "tmux_probe_failed",
+                message: `tmux transport unavailable probing "${sessionName}" (${probe.cause}) — session existence was NOT determined (checked: classified tmux probe), so ${refusalConsequence}. Retry when the tmux transport is back.`,
+            };
+        }
+        return { state: probe.state };
+    }
+    requireReason(reason) {
+        if (!reason?.trim()) {
+            return { ok: false, code: "missing_reason", message: "An audit reason is required (--reason)." };
+        }
+        return null;
+    }
+    describe(resolved) {
+        return {
+            rigId: resolved.entry.rigId,
+            rigName: resolved.entry.rigName,
+            logicalId: resolved.entry.logicalId,
+            nodeId: resolved.nodeId,
+        };
+    }
+    latestSession(nodeId) {
+        const row = this.db.prepare("SELECT id, session_name, status, origin FROM sessions WHERE node_id = ? ORDER BY id DESC LIMIT 1").get(nodeId);
+        return row ?? null;
+    }
+    /** The ONE resolution path, mirroring SeatStatusService.findMatches semantics
+     *  (seat-status-service.ts) so every seat verb resolves identically: a canonical
+     *  `name@rig` ref scopes to that rig's inventory; a bare ref scans all rigs;
+     *  matches are by canonicalSessionName or logicalId; >1 match is a listed
+     *  ambiguity, never a pick. */
+    resolveSeat(seatRef) {
+        const ref = seatRef?.trim() ?? "";
+        if (!ref) {
+            return { ok: false, code: "seat_ref_required", message: "seat reference is required", guidance: SEAT_LOOKUP_GUIDANCE };
+        }
+        const matches = this.findMatches(ref);
+        if (matches.length === 0) {
+            return {
+                ok: false,
+                code: "seat_not_found",
+                message: `Seat "${ref}" not found (checked: canonical session names and logical ids across ${parseSessionName(ref).kind === "canonical" ? "the named rig" : "all rigs"}).`,
+                guidance: SEAT_LOOKUP_GUIDANCE,
+            };
+        }
+        if (matches.length > 1) {
+            return {
+                ok: false,
+                code: "seat_ambiguous",
+                message: `Seat "${ref}" matched multiple nodes`,
+                guidance: SEAT_LOOKUP_GUIDANCE,
+                matches: matches.map((entry) => ({
+                    rig_name: entry.rigName,
+                    logical_id: entry.logicalId,
+                    current_occupant: entry.canonicalSessionName,
+                })),
+            };
+        }
+        const entry = matches[0];
+        const nodeRow = this.db.prepare("SELECT id FROM nodes WHERE rig_id = ? AND logical_id = ?").get(entry.rigId, entry.logicalId);
+        if (!nodeRow) {
+            return { ok: false, code: "seat_not_found", message: `Seat "${ref}" resolved to a node that no longer exists.`, guidance: SEAT_LOOKUP_GUIDANCE };
+        }
+        return { entry, nodeId: nodeRow.id };
+    }
+    findMatches(ref) {
+        const parsed = parseSessionName(ref);
+        if (parsed.kind === "canonical") {
+            const localRef = parsed.member;
+            const rigs = this.rigRepo.findRigsByName(parsed.rig);
+            return rigs.flatMap((rig) => getNodeInventory(this.db, rig.id).filter((entry) => entry.canonicalSessionName === ref || entry.logicalId === localRef));
+        }
+        return this.rigRepo.listRigs().flatMap((rig) => getNodeInventory(this.db, rig.id).filter((entry) => entry.canonicalSessionName === ref || entry.logicalId === ref));
+    }
+}
+//# sourceMappingURL=seat-lifecycle-service.js.map

package/daemon/dist/domain/seat-lifecycle-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seat-lifecycle-service.js","sourceRoot":"","sources":["../../src/domain/seat-lifecycle-service.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;;;;;;;;GAWG;AAEH,MAAM,oBAAoB,GAAG,iCAAiC,CAAC;AAE/D;;qDAEqD;AACrD,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AA4DhF,MAAM,OAAO,oBAAoB;IACd,EAAE,CAAoB;IACtB,OAAO,CAAgB;IACvB,eAAe,CAAkB;IACjC,QAAQ,CAAW;IACnB,WAAW,CAAc;IAE1C,YAAY,IAAuB;QACjC,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAChH,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,eAAe,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAChI,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClH,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAmF;QAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;QACnG,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,MAAM,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAExC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;QAC1C,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,+EAA+E;YAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,SAAS,GAA0B,IAAI,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAClD,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBACjD,IAAI,EAAE,oBAAoB;gBAC1B,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI;gBACJ,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;QACL,IAAI,SAAS;YAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAoE;QACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,MAAM,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAErC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,KAAK,CAAC,OAAO,mEAAmE,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACjK,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,YAAY,OAAO,CAAC,YAAY,oFAAoF;gBAC7H,QAAQ,EAAE,8CAA8C;aACzD,CAAC;QACJ,CAAC;QAED,gFAAgF;QAChF,6EAA6E;QAC7E,8DAA8D;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,qCAAqC,CAAC,CAAC;QACrG,IAAI,MAAM,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QACpC,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,YAAY,OAAO,CAAC,YAAY,wGAAwG;gBACjJ,QAAQ,EAAE,+EAA+E;aAC1F,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACtE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC1D,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,0BAA0B,OAAO,CAAC,YAAY,aAAa,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE;aAChG,CAAC;QACJ,CAAC;QAED,IAAI,SAAS,GAA0B,IAAI,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACxD,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnD,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBACjD,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,OAAO,CAAC,YAAY;gBACjC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;QACL,IAAI,SAAS;YAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAoE;QAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,MAAM,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAErC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxE,MAAM,WAAW,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAClC,qFAAqF,CACtF,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAwB;aAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAE3D,6EAA6E;QAC7E,8EAA8E;QAC9E,+EAA+E;QAC/E,4EAA4E;QAC5E,8EAA8E;QAC9E,wDAAwD;QACxD,MAAM,eAAe,GAAG,WAAW,CAAC;QACpC,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;YAClC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,YAAY,GAAG,CAAC,YAAY,wEAAwE;oBAC7G,QAAQ,EAAE,8CAA8C;iBACzD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;gBAC7B,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;gBAC7C,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC,CAAC,CAAC;QACJ,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,kEAAkE,CAAC,CAAC;YAClH,IAAI,MAAM,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YACpC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,YAAY,IAAI,mIAAmI;oBAC5J,QAAQ,EAAE,4CAA4C;iBACvD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEpD,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,SAAS,KAAK,CAAC,OAAO,2GAA2G,CAAC,GAAG,yBAAyB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;aACvL,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,IAAI,SAAS,GAA0B,IAAI,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAClC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;gBAC9B,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;gBACpD,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACxC,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnD,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;gBACjD,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,WAAW,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;gBAChC,OAAO,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,KAAK,IAAI,EAAE;aAC9D,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,EAAE,EAAE,CAAC;QACL,IAAI,SAAS;YAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,OAAO,KAAK,IAAI,EAAE,EAAE,CAAC;IAC3F,CAAC;IAED,yBAAyB;IAEzB;;;;;;;;;;OAUG;IACK,KAAK,CAAC,aAAa,CACzB,WAAmB,EACnB,kBAA0B;QAE1B,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAC3D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,4BAA4B,WAAW,aAAa,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,qCAAqC,kBAAkB,GAAG;aACxK,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,uBAAuB,EAAE,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,uCAAuC,WAAW,MAAM,KAAK,CAAC,KAAK,iFAAiF,kBAAkB,0CAA0C;aAC1N,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;QACnG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,QAAQ,CAAC,QAAsB;QACrC,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK;YAC3B,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO;YAC/B,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;YACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACzB,kGAAkG,CACnG,CAAC,GAAG,CAAC,MAAM,CAAiC,CAAC;QAC9C,OAAO,GAAG,IAAI,IAAI,CAAC;IACrB,CAAC;IAED;;;;mCAI+B;IACvB,WAAW,CAAC,OAAe;QACjC,MAAM,GAAG,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,4BAA4B,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;QACzH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,SAAS,GAAG,wEAAwE,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,IAAI;gBAC1K,QAAQ,EAAE,oBAAoB;aAC/B,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,SAAS,GAAG,0BAA0B;gBAC/C,QAAQ,EAAE,oBAAoB;gBAC9B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAC/B,QAAQ,EAAE,KAAK,CAAC,OAAO;oBACvB,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,gBAAgB,EAAE,KAAK,CAAC,oBAAoB;iBAC7C,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAC7B,0DAA0D,CAC3D,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAA+B,CAAC;QAClE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,GAAG,6CAA6C,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;QACnJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;IACvC,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9E,KAAK,CAAC,oBAAoB,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CACnE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7C,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACjD,KAAK,CAAC,oBAAoB,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,KAAK,GAAG,CAC9D,CACF,CAAC;IACJ,CAAC;CACF"}

package/daemon/dist/domain/session-transport.d.ts

@@ -57,6 +57,12 @@ export interface SendOpts {
     reason?: string;
     actorSession?: string | null;
     stampISO?: string;
+    submitOnly?: boolean;
+    expectedStagedText?: string;
+    /** Round-2 (r2 HIGH-1): the walked piece's own line count — placeholder identity. A large paste
+     *  renders as "[Pasted text #N +X lines]"; X must match this count for the placeholder to count
+     *  as evidence of THIS piece. */
+    expectedStagedLineCount?: number;
 }
 export interface BroadcastOpts extends SendOpts {
     envelopeSender?: string;
@@ -83,6 +89,8 @@ export interface SendResult {
     warning?: string;
     error?: string;
     reason?: string;
+    /** Set on the submit-only (bare Enter) mode's success — no text was typed. */
+    submitOnly?: boolean;
     activity?: AgentActivity;
     waitedMs?: number;
     attempts?: number;
@@ -130,11 +138,14 @@ export declare class SessionTransport {
     constructor(deps: SessionTransportDeps);
     /**
      * Slice-05 D5/D6 — when a live transport op (send/capture) observes that the
-     * seat's tmux session is genuinely gone (`hasSession(sessionName) === false`),
-     * durably record the SAME `session_missing` identity verdict the reconciler
-     * would write, so `rig ps` stops reporting the dead seat as running WITHOUT
-     * waiting for the next reconciler poll. This is the transport-side writer of
-     * the shared verdict bridge; the reconciler is the poll-side writer.
+     * seat's tmux session is genuinely gone (a `probeSession` result of `absent`
+     * — POSITIVE tmux evidence, never a transport failure; OPR.0.5.4.2 mini-req
+     * 5), durably record the SAME `session_missing` identity verdict the
+     * reconciler would write, so `rig ps` stops reporting the dead seat as
+     * running WITHOUT waiting for the next reconciler poll. This is the
+     * transport-side writer of the shared verdict bridge; the reconciler is the
+     * poll-side writer. Transport-absence must never reach this method: a blip
+     * against a live seat would otherwise fabricate a durable absence verdict.
      *
      * Only writes an APPLICABLE verdict: the join is narrowed to the node whose
      * LATEST running session_name equals the probed session (so

package/daemon/dist/domain/session-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-transport.d.ts","sourceRoot":"","sources":["../../src/domain/session-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAA4C,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAGvG,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAmE1E,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,cAAc,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AA6CD,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,0BAA0B,CAsFpF;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3D,WAAW,EAAE,WAAW,CAAC;IACzB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,OAAO,CAAC,aAAa,CAAC,CAiGzB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,0BAA0B,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAK/F;AAmBD;;0FAE0F;AAC1F,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,aAAa,CAMtF;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAInB;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACtB;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,CAAC;AAErB,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9F;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAElE,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAG7B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAOD,MAAM,WAAW,aAAc,SAAQ,QAAQ;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;CAGzB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,sBAAsB,GAAG,QAAQ,CAAC;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,UAAU,oBAAoB;IAC5B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAGxC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,cAAc,CAAC,EAAE,4BAA4B,CAAC;CAC/C;AAOD,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,kBAAkB,CAAC,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,CAAW;IAC5B,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,wBAAwB,CAAS;IACzC,OAAO,CAAC,cAAc,CAAC,CAA+B;gBAE1C,IAAI,EAAE,oBAAoB;IActC;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,2BAA2B;IAyBnC,OAAO,CAAC,cAAc;IAmBhB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC;IAgBjE,OAAO,CAAC,aAAa;IAkBrB,OAAO,CAAC,oBAAoB;IAyD5B,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,YAAY;IA0BpB,OAAO,CAAC,YAAY;IA0CpB,OAAO,CAAC,6BAA6B;IAuC/B,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAsPnF,OAAO,CAAC,QAAQ;YAUF,WAAW;YA2DX,qBAAqB;IA6DnC,OAAO,CAAC,gBAAgB;YAWV,oBAAoB;IAwDlC,OAAO,CAAC,oBAAoB;IA2BtB,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IA6C/E,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC;CAoDlG"}
+{"version":3,"file":"session-transport.d.ts","sourceRoot":"","sources":["../../src/domain/session-transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAA4C,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAGvG,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAmE1E,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,cAAc,GAAG,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AA6CD,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,0BAA0B,CAsFpF;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3D,WAAW,EAAE,WAAW,CAAC;IACzB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,OAAO,CAAC,aAAa,CAAC,CAiGzB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,0BAA0B,CAAC,OAAO,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAK/F;AAmBD;;0FAE0F;AAC1F,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,aAAa,CAMtF;AAED,MAAM,MAAM,UAAU,GAClB;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAInB;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACtB;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACf;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,CAAC;AAErB,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAC9F;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAElE,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAG7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAMlB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;qCAEiC;IACjC,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAOD,MAAM,WAAW,aAAc,SAAQ,QAAQ;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;CAGzB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,EAAE,WAAW,GAAG,sBAAsB,GAAG,QAAQ,CAAC;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,UAAU,EAAE,CAAC;CACvB;AAED,UAAU,oBAAoB;IAC5B,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAGxC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,cAAc,CAAC,EAAE,4BAA4B,CAAC;CAC/C;AAOD,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IAC/B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,kBAAkB,CAAC,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,CAAW;IAC5B,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,KAAK,CAAgC;IAC7C,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,wBAAwB,CAAS;IACzC,OAAO,CAAC,cAAc,CAAC,CAA+B;gBAE1C,IAAI,EAAE,oBAAoB;IActC;;;;;;;;;;;;;;;;;;OAkBG;IACH,OAAO,CAAC,2BAA2B;IAyBnC,OAAO,CAAC,cAAc;IAmBhB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC;IAgBjE,OAAO,CAAC,aAAa;IAkBrB,OAAO,CAAC,oBAAoB;IAyD5B,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,YAAY;IA0BpB,OAAO,CAAC,YAAY;IA0CpB,OAAO,CAAC,6BAA6B;IAuC/B,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAkXnF,OAAO,CAAC,QAAQ;YAUF,WAAW;YA2DX,qBAAqB;IA6DnC,OAAO,CAAC,gBAAgB;YAWV,oBAAoB;IAwDlC,OAAO,CAAC,oBAAoB;IA2BtB,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAuD/E,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC;CAoDlG"}

package/daemon/dist/domain/session-transport.js

@@ -340,11 +340,14 @@ export class SessionTransport {
     }
     /**
      * Slice-05 D5/D6 — when a live transport op (send/capture) observes that the
-     * seat's tmux session is genuinely gone (`hasSession(sessionName) === false`),
-     * durably record the SAME `session_missing` identity verdict the reconciler
-     * would write, so `rig ps` stops reporting the dead seat as running WITHOUT
-     * waiting for the next reconciler poll. This is the transport-side writer of
-     * the shared verdict bridge; the reconciler is the poll-side writer.
+     * seat's tmux session is genuinely gone (a `probeSession` result of `absent`
+     * — POSITIVE tmux evidence, never a transport failure; OPR.0.5.4.2 mini-req
+     * 5), durably record the SAME `session_missing` identity verdict the
+     * reconciler would write, so `rig ps` stops reporting the dead seat as
+     * running WITHOUT waiting for the next reconciler poll. This is the
+     * transport-side writer of the shared verdict bridge; the reconciler is the
+     * poll-side writer. Transport-absence must never reach this method: a blip
+     * against a live seat would otherwise fabricate a durable absence verdict.
      *
      * Only writes an APPLICABLE verdict: the join is narrowed to the node whose
      * LATEST running session_name equals the probed session (so
@@ -625,27 +628,153 @@ export class SessionTransport {
                 };
             }
         }
-        // 1. Check session exists / tmux available
+        // 1. Resolve the session through the classified probe (OPR.0.5.4.2): a
+        // transport blip must never read as a dead seat, and absence is only ever
+        // asserted on positive tmux evidence.
         try {
-            const exists = await this.tmuxAdapter.hasSession(sessionName);
-            if (!exists) {
+            const probe = await this.tmuxAdapter.probeSession(sessionName);
+            if (probe.state === "absent") {
                 this.recordSessionMissingVerdict(sessionName);
                 return {
                     ok: false,
                     sessionName,
                     reason: "session_missing",
-                    error: `Session '${sessionName}' not found. Check available sessions with: rig ps --nodes`,
+                    error: `Session '${sessionName}' not found: tmux reports no session with this name. No text was sent. Check available sessions with: rig ps --nodes`,
+                };
+            }
+            if (probe.state === "transport_unavailable") {
+                return {
+                    ok: false,
+                    sessionName,
+                    reason: "tmux_unavailable",
+                    error: `The tmux server could not be reached (${probe.cause}). Whether session '${sessionName}' exists was not determined. No text was sent.`,
                 };
             }
         }
-        catch {
+        catch (err) {
             return {
                 ok: false,
                 sessionName,
                 reason: "tmux_unavailable",
-                error: "tmux is not available. Ensure tmux is installed and a server is running.",
+                error: `The tmux session probe failed unexpectedly (${err instanceof Error ? err.message : String(err)}). Whether session '${sessionName}' exists was not determined. No text was sent.`,
             };
         }
+        // SUBMIT-ONLY (mechanics-gate fix, desk ruling d9b3989a): the single Enter retry for staged
+        // text. Types NOTHING; verifies the pane actually holds the expected staged text FIRST, so a
+        // bare Enter can never land on anything else (a permission prompt, someone else's input).
+        if (opts?.submitOnly) {
+            if (text.length > 0) {
+                return { ok: false, sessionName, reason: "invalid_submit_only", error: "submitOnly sends no text — the text argument must be empty." };
+            }
+            const expected = opts.expectedStagedText ?? "";
+            if (expected.trim().length === 0) {
+                return { ok: false, sessionName, reason: "invalid_submit_only", error: "submitOnly requires expectedStagedText — the Enter is only pressed onto the exact staged content." };
+            }
+            const norm = (s) => s.replace(/\s+/g, "");
+            const pane = await this.runStage("session_transport.submit_only_precheck", () => this.tmuxAdapter.capturePaneContent(sessionName, 50));
+            // Round-2 (r2 HIGH-1): the evidence must be the CURRENT ACTIVE INPUT and must identify
+            // THIS piece — stale scrollback can carry an old placeholder while a LATER interactive
+            // prompt owns the input, and an Enter there approves the prompt. So:
+            //   1. Only the pane's LAST input-marker line counts (the current input; everything above
+            //      is history).
+            //   2. A numbered-option line (`❯ 1. …`) is a PROMPT SELECTION, never staged input: refuse.
+            //   3. A pasted-text placeholder is identity-qualified: "[Pasted text #N +X lines]" counts
+            //      only when X matches the expected piece's own line count (±1 for a trailing newline).
+            //      More than one placeholder is COALESCED staging (several pieces, one Enter): refuse.
+            //   4. Otherwise the line must carry the content's own head (24 normalized chars — a short
+            //      paste renders inline, possibly truncated).
+            const paneLines = (pane ?? "").split("\n");
+            let currentInputAt = -1;
+            for (let i = paneLines.length - 1; i >= 0; i--) {
+                if (paneLines[i].trimStart().startsWith("❯")) {
+                    currentInputAt = i;
+                    break;
+                }
+            }
+            let stagedEvidence = false;
+            if (currentInputAt >= 0) {
+                const inputLine = paneLines[currentInputAt].trimStart();
+                // The region is the last ❯-line through the input box's closing separator (a box-drawing
+                // line) or pane end — wrapped input continues below the marker; everything ABOVE the
+                // marker is history and everything below the separator is hint-bar chrome.
+                let regionEnd = paneLines.length;
+                for (let i = currentInputAt + 1; i < paneLines.length; i++) {
+                    const t = paneLines[i].trim();
+                    if (t.length >= 10 && /^[─═-]+$/.test(t)) {
+                        regionEnd = i;
+                        break;
+                    }
+                }
+                const region = paneLines.slice(currentInputAt, regionEnd).join("\n");
+                if (!/^❯\s*\d+\./.test(inputLine)) {
+                    // Round-3 (r2 R2 HIGH-1, specimen-pinned): Claude renders ONE staged piece as MANY
+                    // placeholders whose displayed counts are SEGMENT sizes (sum ≤ source lines), followed
+                    // by the piece's own literal tail wrapped across pane lines — and the placeholder
+                    // tokens themselves wrap. So: collapse wrapping, then
+                    //   IDENTITY  — the literal residual (region minus tokens minus hint chrome) must be a
+                    //               CONTIGUOUS substring of the piece: the visible words are the piece's
+                    //               words. Foreign residual (another piece, stale content) refuses.
+                    //   SANITY    — the segment-count sum must not exceed the piece's own line count
+                    //               (small slack), and with NO residual anchor must reach at least 60% of
+                    //               it — a bare unrelated placeholder cannot masquerade as this piece.
+                    const placeholderRe = /\[Pasted text #\d+ \+(\d+) lines\]/g;
+                    const regionFlat = region.replace(/\s+/g, " ");
+                    const counts = [...regionFlat.matchAll(placeholderRe)].map((m) => Number(m[1]));
+                    if (counts.length === 0) {
+                        const head = norm(expected).slice(0, 24);
+                        stagedEvidence = head.length > 0 && norm(region).includes(head);
+                    }
+                    else {
+                        // Round-4 (r2 R3 HIGH-1): identity is the rendering's own structure, specimen-proven —
+                        // the placeholders are the piece's HEAD chunks and the literal residual is the piece's
+                        // normalized SUFFIX (524 chars in the preserved capture). Size similarity and short
+                        // shared phrases are NOT identity: with no residual, or one under 48 normalized chars,
+                        // or one that is not the piece's own suffix, FAIL CLOSED — the TUI did not expose
+                        // enough content to identify the staged state, and a bare Enter is never guessed.
+                        const chrome = /paste again to expand|ctrl\+g to edit( in Vim)?/gi;
+                        const residual = norm(regionFlat.replace(placeholderRe, "").replace(chrome, "")).replace(/^❯/, "");
+                        const pieceNorm = norm(expected);
+                        const sum = counts.reduce((a, b) => a + b, 0);
+                        // Round-5 (r2 R4 HIGH-1): the suffix anchor is JOINED to the opaque prefix. The
+                        // placeholder sum identifies the hidden SOURCE BOUNDARY immediately before the
+                        // visible suffix (specimen: sum 130 = the residual begins after exactly 130 of the
+                        // piece's 142 source newlines). Compute the boundary from the piece bytes — the
+                        // number of leading source lines whose normalized text the residual does NOT cover —
+                        // and require the sum to EQUAL it exactly (round-6, r2 R5: both separately staged
+                        // preserved pieces are exact — 130=130 and 82=82; a tolerance was unsupported by the
+                        // renderer evidence). A matched suffix with a non-matching sum is a truncated or
+                        // wrong prefix: refuse.
+                        let boundary = -1;
+                        if (residual.length >= 48 && pieceNorm.endsWith(residual)) {
+                            const srcLines = expected.split("\n");
+                            let acc = 0;
+                            boundary = 0;
+                            for (let i = srcLines.length - 1; i >= 0; i--) {
+                                acc += norm(srcLines[i]).length;
+                                if (acc >= residual.length) {
+                                    boundary = i;
+                                    break;
+                                }
+                            }
+                        }
+                        stagedEvidence = boundary >= 0 && sum === boundary;
+                    }
+                }
+            }
+            if (!stagedEvidence) {
+                return {
+                    ok: false,
+                    sessionName,
+                    reason: "staged_mismatch",
+                    error: `submitOnly refused: the pane of '${sessionName}' does not show the expected staged text — pressing Enter here could drive something else entirely. Nothing was submitted.`,
+                };
+            }
+            const submitResult = await this.runStage("session_transport.submit", () => this.tmuxAdapter.sendKeys(sessionName, ["C-m"]), (result) => result.ok ? "ok" : "failed");
+            if (!submitResult.ok) {
+                return { ok: false, sessionName, reason: "submit_failed", outcome: "failed", error: `submitOnly: Enter did not land on '${sessionName}': ${submitResult.message}` };
+            }
+            return { ok: true, sessionName, outcome: "rendered-unconfirmed", submitOnly: true };
+        }
         if (waitForIdleMs !== undefined) {
             const waitResult = await this.waitForIdle({
                 sessionName,
@@ -1016,24 +1145,34 @@ export class SessionTransport {
                 error: `Session '${sessionName}' is attached as an external CLI node. Inbound tmux capture is unavailable for this target.`,
             };
         }
+        // Classified probe (OPR.0.5.4.2) — same discipline as the send gate: a
+        // transport blip is a transport answer, never a dead-seat answer.
         try {
-            const exists = await this.tmuxAdapter.hasSession(sessionName);
-            if (!exists) {
+            const probe = await this.tmuxAdapter.probeSession(sessionName);
+            if (probe.state === "absent") {
                 this.recordSessionMissingVerdict(sessionName);
                 return {
                     ok: false,
                     sessionName,
                     reason: "session_missing",
-                    error: `Session '${sessionName}' not found. Check available sessions with: rig ps --nodes`,
+                    error: `Session '${sessionName}' not found: tmux reports no session with this name. Nothing was captured. Check available sessions with: rig ps --nodes`,
+                };
+            }
+            if (probe.state === "transport_unavailable") {
+                return {
+                    ok: false,
+                    sessionName,
+                    reason: "tmux_unavailable",
+                    error: `The tmux server could not be reached (${probe.cause}). Whether session '${sessionName}' exists was not determined. Nothing was captured.`,
                 };
             }
         }
-        catch {
+        catch (err) {
             return {
                 ok: false,
                 sessionName,
                 reason: "tmux_unavailable",
-                error: "tmux is not available. Ensure tmux is installed and a server is running.",
+                error: `The tmux session probe failed unexpectedly (${err instanceof Error ? err.message : String(err)}). Whether session '${sessionName}' exists was not determined. Nothing was captured.`,
             };
         }
         const lines = opts?.lines ?? 20;