@openrig/cli 0.5.7 → 0.5.9

package/daemon/specs/agents/shared/skills/core/openrig-upgrade/scripts/refresh-managed-plugin.mjs

@@ -0,0 +1,151 @@
+#!/usr/bin/env node
+
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+
+function argument(name) {
+  const index = process.argv.indexOf(name);
+  return index === -1 ? undefined : process.argv[index + 1];
+}
+
+function fail(message, next) {
+  process.stderr.write(`${JSON.stringify({ ok: false, error: message, next }, null, 2)}\n`);
+  process.exit(1);
+}
+
+function inventory(root) {
+  const files = new Map();
+  if (!fs.existsSync(root)) return files;
+
+  function walk(directory, prefix = "") {
+    for (const entry of fs.readdirSync(directory, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+      const relative = prefix ? `${prefix}/${entry.name}` : entry.name;
+      const absolute = path.join(directory, entry.name);
+      if (entry.isDirectory()) {
+        walk(absolute, relative);
+      } else if (entry.isFile()) {
+        files.set(relative, {
+          kind: "file",
+          hash: crypto.createHash("sha256").update(fs.readFileSync(absolute)).digest("hex"),
+          mode: fs.statSync(absolute).mode & 0o777,
+        });
+      } else {
+        files.set(relative, { kind: "unsupported" });
+      }
+    }
+  }
+
+  walk(root);
+  return files;
+}
+
+// Equality is the COMPLETE inventoried state, not just the bytes. Mode is a
+// local modification like any other: an operator who chmods a managed file has
+// changed it, and comparing only the hash classifies that file refresh-safe and
+// then chmods it back to the packaged mode. The inventory already carries mode;
+// dropping the axis here is what let the write through.
+function same(left, right) {
+  return left?.kind === "file"
+    && right?.kind === "file"
+    && left.hash === right.hash
+    && left.mode === right.mode;
+}
+
+function hasNonDirectoryLiveAncestor(relative, live) {
+  const parts = relative.split("/");
+  return parts.slice(0, -1).some((_, index) => (
+    live.has(parts.slice(0, index + 1).join("/"))
+  ));
+}
+
+function classify(ancestor, target, live) {
+  if ([ancestor, target, live].some((item) => item?.kind === "unsupported")) return "preserve-unsupported-type";
+  if (target && live && same(target, live)) return "current";
+  if (ancestor && target && live && same(ancestor, live)) return "refresh-safe";
+  if (!ancestor && target && !live) return "add-safe";
+  if (ancestor && target && live) return "preserve-local-modification";
+  if (ancestor && target && !live) return "preserve-local-deletion";
+  if (!ancestor && !target && live) return "preserve-live-only";
+  if (ancestor && !target && live) return "preserve-target-removal";
+  if (!ancestor && target && live) return "preserve-unproven-existing";
+  return "preserve-unclassified";
+}
+
+function atomicCopy(source, destination, mode) {
+  fs.mkdirSync(path.dirname(destination), { recursive: true });
+  const temporary = `${destination}.openrig-refresh-${process.pid}-${crypto.randomBytes(4).toString("hex")}`;
+  try {
+    fs.copyFileSync(source, temporary, fs.constants.COPYFILE_EXCL);
+    fs.chmodSync(temporary, mode);
+    fs.renameSync(temporary, destination);
+  } finally {
+    fs.rmSync(temporary, { force: true });
+  }
+}
+
+const ancestorArg = argument("--ancestor");
+const targetArg = argument("--target");
+const liveArg = argument("--live");
+const applySafe = process.argv.includes("--apply-safe");
+if (!ancestorArg || !targetArg || !liveArg) {
+  fail("--ancestor, --target, and --live are required", "derive all three plugin roots before classifying any managed file");
+}
+
+const roots = {
+  ancestor: path.resolve(ancestorArg),
+  target: path.resolve(targetArg),
+  live: path.resolve(liveArg),
+};
+for (const name of ["ancestor", "target"]) {
+  if (!fs.existsSync(roots[name]) || !fs.statSync(roots[name]).isDirectory()) {
+    fail(`${name} is not a directory: ${roots[name]}`, `derive the ${name} packaged plugin root before retrying`);
+  }
+}
+if (fs.existsSync(roots.live) && !fs.statSync(roots.live).isDirectory()) {
+  fail(`live is not a directory: ${roots.live}`, "do not replace a non-directory live path automatically");
+}
+
+const inventories = {
+  ancestor: inventory(roots.ancestor),
+  target: inventory(roots.target),
+  live: inventory(roots.live),
+};
+const paths = [...new Set([
+  ...inventories.ancestor.keys(),
+  ...inventories.target.keys(),
+  ...inventories.live.keys(),
+])].sort();
+const actions = paths.map((relative) => ({
+  path: relative,
+  decision: hasNonDirectoryLiveAncestor(relative, inventories.live)
+    ? "preserve-unsupported-type"
+    : classify(
+      inventories.ancestor.get(relative),
+      inventories.target.get(relative),
+      inventories.live.get(relative),
+    ),
+}));
+
+const written = [];
+if (applySafe) {
+  for (const action of actions) {
+    if (action.decision !== "refresh-safe" && action.decision !== "add-safe") continue;
+    const target = inventories.target.get(action.path);
+    atomicCopy(path.join(roots.target, action.path), path.join(roots.live, action.path), target.mode);
+    written.push(action.path);
+  }
+}
+
+const preserved = actions.filter((action) => action.decision.startsWith("preserve-"));
+process.stdout.write(`${JSON.stringify({
+  schema: "openrig-managed-plugin-refresh/v1",
+  roots,
+  applied: applySafe,
+  complete: preserved.length === 0,
+  written,
+  actions,
+  next: preserved.length === 0
+    ? "re-run the plan after the surrounding upgrade step and verify the live tree"
+    : "resolve preserved paths individually; this helper will not delete or overwrite them",
+}, null, 2)}\n`);

package/daemon/specs/rigs/preview/product-team/topology/instance/CRAFT.md

@@ -12,13 +12,13 @@
 - **Derive paths from configuration.** `rig config get <key>` answers where
   things live (`workspace.root`, `topology.root`, `db.path`). A literal path
   copied from another machine is wrong on this one.
-- **Two trees.** The topology tree (this file's tree: instance → rig → seat)
+- **Two trees.** The topology tree (this file's tree: instance → rig → pod → seat)
   carries how work is done; the project tree (missions → slices) carries what
   is being built. Confusing them is the most common orientation error.
 - **Verify by effect, never by success message.** Re-read from disk, run the
   consumer, count the rows. Zero is not a plausible success.
 - **A scoped search is not a global absence.** "Not in the place I looked" and
   "not anywhere" are different claims; say which one you have.
-- **Trace before trusting context**: `rig context trace --rig <rig> --seat
-  <seat> --name <NAME>.md` walks this tree from where you stand. Your reads
-  ARE the walk.
+- **Trace before trusting context**: `rig context trace --rig <rig> [--pod
+  <pod>] --seat <seat> --name <NAME>.md` walks this tree from where you stand.
+  Your reads ARE the walk.

package/daemon/specs/rigs/preview/product-team/topology/rig/ORCHESTRATION-CRAFT.md

@@ -1,9 +1,9 @@
 # Orchestration Craft — shipped defaults (product-team)
 
 <!-- Shipped by the product-team rig spec (copy-if-absent; append freely).
-     Pod-class tactical reminders, shipped at the RIG altitude by ruling (the
-     pod level is deliberately skipped; revisit someday, not now). These are
-     the reminders you need AT THE MOMENT OF ACTING on another seat. -->
+     Cross-pod tactical reminders stay at the RIG altitude; a pod directory is
+     for context that one bounded sub-team owns. These are the reminders you
+     need AT THE MOMENT OF ACTING on another seat. -->
 
 ## Reading another seat's pane
 

package/dist/build-info.js

@@ -1,9 +1,9 @@
 // GENERATED by scripts/build-package.sh — the packaged build-identity stamp.
 export const BUILD_INFO = {
-  semver: "0.5.7",
-  commit: "bda1bba537366cc33a8850812ec16ce001973e80",
+  semver: "0.5.9",
+  commit: "dbf05f9d59ef3b0ae14fc00174c643df4858d45a",
   dirty: false,
-  builtAt: "2026-09-01T05:16:57Z",
+  builtAt: "2026-09-05T02:09:38Z",
 };
 export function stampFields(info = BUILD_INFO) {
   if (!info.commit) return {};

package/dist/commands/config-init-workspace.d.ts

@@ -1,33 +1,14 @@
 import { Command } from "commander";
+import { workspaceScaffoldDirs, workspaceScaffoldFiles, type InitWorkspaceResult } from "@openrig/daemon/instance-initialization";
+export { workspaceScaffoldDirs, workspaceScaffoldFiles };
+export type { InitWorkspaceResult };
 export interface InitWorkspaceOpts {
     root?: string;
+    /** Deprecated compatibility input. Existing files are always preserved. */
     force?: boolean;
     dryRun?: boolean;
     json?: boolean;
 }
-export interface InitWorkspaceResult {
-    root: string;
-    /** True when this run would (or did) create the root dir; false if root existed. */
-    rootCreated: boolean;
-    subdirs: Array<{
-        name: string;
-        path: string;
-        created: boolean;
-    }>;
-    files: Array<{
-        relPath: string;
-        absPath: string;
-        created: boolean;
-        skipped: "exists" | null;
-    }>;
-    /** True when --dry-run; nothing was actually written. */
-    dryRun: boolean;
-}
-export declare function workspaceScaffoldDirs(): string[];
-export declare function workspaceScaffoldFiles(): Array<{
-    relPath: string;
-    content: string;
-}>;
 export declare function initWorkspaceCommand(configPath?: string): Command;
 export declare function runInitWorkspace(opts: InitWorkspaceOpts & {
     configPath?: string;

package/dist/commands/config-init-workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-init-workspace.d.ts","sourceRoot":"","sources":["../../src/commands/config-init-workspace.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACjE,KAAK,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,QAAQ,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC/F,yDAAyD;IACzD,MAAM,EAAE,OAAO,CAAC;CACjB;AAygBD,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAEhD;AAED,wBAAgB,sBAAsB,IAAI,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA8CpF;AAED,wBAAgB,oBAAoB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CA8BjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,CA+CvG"}
+{"version":3,"file":"config-init-workspace.d.ts","sourceRoot":"","sources":["../../src/commands/config-init-workspace.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAEL,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,mBAAmB,EACzB,MAAM,yCAAyC,CAAC;AAGjD,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,CAAC;AACzD,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,oBAAoB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CA8BjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,CAWvG"}