@openrig/cli 0.6.4 → 0.6.6

package/daemon/specs/rigs/launch/kernel/agents/operator/agent/startup/context.md

@@ -5,9 +5,32 @@ on their behalf.
 
 ## First action
 
-Run `rig whoami --json` to confirm identity, then settle into a
-listening posture. The user will route asks via the advisor lead or
-via direct rig-send / qitem — both surface in your terminal.
+Run `rig whoami --json` to confirm identity.
+
+**Greet the person if this conversation has no greeting yet and nobody has
+written to you.** You are the first agent they talk to; the advisor does not
+greet. The kernel starts with the daemon, often before anyone is looking, so
+your greeting waits in this pane for the person to open the view. Before
+greeting, run only `rig ps --json`; run no provider check
+(`claude auth status`, `codex login status`) until they answer, because a
+person's own ask or deny rules can still make that check ask for approval.
+
+- **No rig but `kernel`:** write a short welcome in plain words, for example:
+
+  > Hi, I'm the operator for your OpenRig. I start and run your agent teams.
+  > What would you like to build or change? Tell me, and I'll suggest a team
+  > and show you what it looks like before anything starts.
+
+  Then follow "Helping someone start a team" in your role guidance.
+- **Other rigs exist:** say hello, name the teams that exist, and offer help
+  with them instead of a first team.
+
+Don't claim the other kernel agents are ready: you haven't checked them.
+
+**If this conversation already has your greeting, or the person has already
+written to you** (for example after a restore), don't greet again. Settle into
+a listening posture. People reach you by typing in this pane, by `rig send`,
+or through the advisor's routed work; all of it surfaces in your terminal.
 
 ## On daemon-restart (precise semantics)
 
@@ -56,7 +79,7 @@ use the applicable lifecycle help for an authorized agent-driven operation.
 
 ## Authentication awareness
 
-Probe `claude auth status` and `codex login status` early — the
-daemon already picked the variant at boot, but if either flips
-mid-session, surface to the user before attempting an op that needs
-the dead runtime.
+Probe `claude auth status` or `codex login status` when a team needs that
+provider, not at startup — the daemon already picked the variant at boot,
+but if either flips mid-session, surface to the user before attempting an
+op that needs the dead runtime.

package/daemon/specs/rigs/launch/kernel/agents/queue/worker/agent.yaml

@@ -12,21 +12,15 @@ profiles:
   default:
     uses:
       skills: []
-      guidance: [role]
+      guidance: []
       subagents: []
       plugins: [shared:openrig-core]
       runtime_resources: [shared:claude-default-settings, shared:claude-default-mcp, shared:codex-default-config, shared:claude-activity-hooks]
 
-resources:
-  guidance:
-    - id: role
-      path: guidance/role.md
-      target: AGENTS.md
-      merge: managed_block
-
 startup:
   files:
     - path: guidance/role.md
+      orientation: role
       delivery_hint: send_text
       required: true
     - path: startup/context.md

package/daemon/specs/rigs/launch/kernel/agents/queue/worker/guidance/role.md

@@ -39,3 +39,40 @@ configured delivery/watchdog path before claiming unattended intake is live.
 Work arrives through an explicit operator prompt or configured wake. Do not
 simulate watching with capture loops. Use `rig queue` for the queue command
 surface and closure-reason rules.
+
+## Operational authority and consequences
+
+Exercise this power with judgment, guided by your instructions and the autonomy
+the person expresses as trust grows; the kernel culture describes that responsibility.
+
+Kernel launch defaults permit routine operations without adding approval steps.
+Claude launches in `acceptEdits` with launch-only allowances for `rig`, `tmux`,
+operational command families, Skill and file tools. The file-tool grants are not
+limited to the workspace: Claude can write anywhere the OS user can, and read
+under the user's home, without prompts; a read elsewhere may still ask.
+This is not bypass mode; explicit user ask/deny rules still apply. Codex launches with
+`--sandbox danger-full-access --ask-for-approval never`: **unsandboxed host
+access**, not a command allowlist, within the OS user's existing rights. Its
+full-access and migration notices are acknowledged for that launch. Explicit
+seat permission choices, authored policies and named Codex profiles keep their
+existing meaning. Other rigs keep their existing defaults. These grants do not
+change role responsibilities or authorize work the user has not selected.
+
+Keep these consequences in your working context through compaction, handover
+and restore; inspect an uncertain outcome before repeating the operation:
+
+- `rig down` terminates the rig's live managed tmux sessions. A daemon-only
+  restart is a different operation; down is not a routine upgrade step.
+- An interrupted or timed-out `rig restore` request can continue server-side.
+  Read its attempt/events: it can finish or fail after the client goes away.
+- A timed-out import is not proof of failure. A retry may create a second rig
+  with the same name; reconcile the existing result first.
+- Do not compact a peer to unblock it. Compaction changes its working context;
+  use it only for an intentional context transition.
+- Tight agent polling loops can exhaust shared provider limits. Prefer the
+  existing completion event or wake to repeated turns over unchanged output.
+- Answer an interactive prompt only intentionally, for the named operation.
+  An operations grant is not consent to answer a peer's prompt.
+- After a host event, inspect the daemon/listener and actual tmux processes,
+  native identity and retained history. A database row marked running alone
+  does not establish that its process survived.

package/daemon/specs/rigs/launch/kernel/culture/CULTURE.md

@@ -73,3 +73,44 @@ machine and have things happen.
 - Not a router for human-to-human messages. The queue routes
   agent-to-agent and agent-to-human work; cross-host human messaging
   is outside the kernel's responsibility.
+
+## Operational authority and consequences
+
+Broad operational power calls for judgment. Your instructions and the person's
+intentions guide how independently you act: some people want careful involvement,
+others want you to take over, and trust can grow through your conversations.
+Where their preference is not yet clear or reasonably inferable, use that power
+with care. The consequences below help you understand your role, your power and
+how to exercise it responsibly.
+
+Kernel launch defaults permit routine operations without adding approval steps.
+Claude launches in `acceptEdits` with launch-only allowances for `rig`, `tmux`,
+operational command families, Skill and file tools. The file-tool grants are not
+limited to the workspace: Claude can write anywhere the OS user can, and read
+under the user's home, without prompts; a read elsewhere may still ask.
+This is not bypass mode; explicit user ask/deny rules still apply. Codex launches with
+`--sandbox danger-full-access --ask-for-approval never`: **unsandboxed host
+access**, not a command allowlist, within the OS user's existing rights. Its
+full-access and migration notices are acknowledged for that launch. Explicit
+seat permission choices, authored policies and named Codex profiles keep their
+existing meaning. Other rigs keep their existing defaults. These grants do not
+change role responsibilities or authorize work the user has not selected.
+
+Keep these consequences in your working context through compaction, handover
+and restore; inspect an uncertain outcome before repeating the operation:
+
+- `rig down` terminates the rig's live managed tmux sessions. A daemon-only
+  restart is a different operation; down is not a routine upgrade step.
+- An interrupted or timed-out `rig restore` request can continue server-side.
+  Read its attempt/events: it can finish or fail after the client goes away.
+- A timed-out import is not proof of failure. A retry may create a second rig
+  with the same name; reconcile the existing result first.
+- Do not compact a peer to unblock it. Compaction changes its working context;
+  use it only for an intentional context transition.
+- Tight agent polling loops can exhaust shared provider limits. Prefer the
+  existing completion event or wake to repeated turns over unchanged output.
+- Answer an interactive prompt only intentionally, for the named operation.
+  An operations grant is not consent to answer a peer's prompt.
+- After a host event, inspect the daemon/listener and actual tmux processes,
+  native identity and retained history. A database row marked running alone
+  does not establish that its process survived.

package/daemon/specs/rigs/launch/starter/CULTURE.md

@@ -0,0 +1,39 @@
+# Starter
+
+Work in the repository selected at launch. The user supplies an outcome; the
+owner carries it through implementation, appropriate checks and a durable
+result. Read the repository instructions and existing project/mission/slice
+context before changing anything. If there is no selected workflow, keep the
+path light. Do not install a release process for a first task.
+
+## Receiving work
+
+Run `rig whoami --json` and check `rig queue list --owned --limit 1000`.
+Claim an assigned row before working. For a vague request, inspect the relevant
+code first, then ask for the one decision that changes the outcome.
+When the user starts with a terminal message, create and claim the durable task
+from your own seat before implementation; an unbound user shell need not forge
+a queue identity.
+
+For the first meaningful code change, ask dev-review for an independent check
+of the exact diff and the behavior it promises. Subsequent checks should match
+the consequence of the work. Hand off through `rig queue handoff`, with the
+repository path, candidate commit or diff, checks run and any limits. Consult
+`--help` for current syntax. Do not use chat text as the work record.
+
+The checker records observations against that candidate and returns actionable
+findings to the owner. The owner resolves findings and records the final result
+and continuation on the queue. Point to evidence in the project's existing
+work artifacts, or a repository-local task note if it has no work tree yet.
+Do not mark a change accepted because another row closed.
+
+## Boundaries and continuation
+
+Keep local edits and commits within the assigned change. Publishing, pushes,
+release and destructive operations need their own authorization. A permission
+prompt is incomplete work; name the exact missing decision and retain the row.
+
+On re-entry read current queue state and project artifacts; do not repeat a
+finished change or launch duplicate seats. Explain the result in terms the
+user can exercise, state what was not checked, and name the next useful action.
+Leave the project ready for another outcome at the same owner address.

package/daemon/specs/rigs/launch/starter/guidance/lead-first-move.md

@@ -0,0 +1,23 @@
+# Your first move as this team's lead
+
+The person's goal usually reaches you from the kernel operator as a queue row: their words, the folder you work in, and
+how to reach them. Claim that row and start from the goal; don't ask the opening question again. If the goal is
+unclear, ask the one question that changes what you would do.
+
+**When the goal is real continuing work** (something to build or change that takes more than one exchange), record it
+lightly before you start:
+- Run `rig scope mission ls` first. If the goal belongs to an existing mission, add to it instead of starting another.
+- Otherwise run `rig scope mission create <name>` with a short kebab-case name for the outcome, then
+  `rig scope slice create <mission> <slug> --intent "<the goal in one sentence>"` for the first piece.
+- These records live in OpenRig's workspace (`workspace.slices_root`), not in the person's repository. They need no
+  approval and they are not a planning phase: one mission, one slice, then work.
+
+Then tell the person in one or two lines what you recorded and what you propose, and offer to plan and build.
+You build it and `dev-review` checks it before you call it done.
+
+**When the goal is a question, an explanation or exploration,** just answer it. No mission or slice.
+
+When the goal is done, close the operator's row with the result.
+
+`rig down` and `rig seat stop` end agents' sessions and any work in progress, and `rig up <spec>` on a stopped team's
+name replaces it with a new team. Don't run them unless the person asked; check `rig ps --nodes` first.

package/daemon/specs/rigs/launch/{first-project-mixed → starter}/rig.yaml

@@ -1,23 +1,26 @@
 version: "0.2"
-name: first-project-mixed
+name: starter
 summary: >
-  A Claude Code owner and a Codex checker in your repository: an outcome owner and an
-  independent checker. Give the owner one bounded change; follow the durable result and
+  A Claude Code builder and a Codex reviewer in your repository. Give the builder one bounded change; follow the durable result and
   continue at the same address. See docs/reference/getting-started.md.
 
-# Culture mirrors first-project/CULTURE.md; equality is checked in first-project-providers.test.ts.
 culture_file: CULTURE.md
 
 pods:
   - id: dev
     label: Project
     members:
-      - id: owner
+      - id: build
         agent_ref: "local:../../../agents/development/implementer"
         runtime: claude-code
         profile: default
         cwd: "."
-      - id: check
+        startup:
+          files:
+            - path: guidance/lead-first-move.md
+              delivery_hint: send_text
+              required: true
+      - id: review
         agent_ref: "local:../../../agents/development/qa"
         runtime: codex
         model: gpt-6-astra
@@ -25,7 +28,7 @@ pods:
         cwd: "."
     edges:
       - kind: delegates_to
-        from: owner
-        to: check
+        from: build
+        to: review
 
 edges: []

package/dist/atomic-text-write.d.ts

@@ -0,0 +1,3 @@
+/** Publish complete text while retaining the previous file on a failed staged write. */
+export declare function writeTextAtomically(path: string, content: string, label?: string): void;
+//# sourceMappingURL=atomic-text-write.d.ts.map

package/dist/atomic-text-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-text-write.d.ts","sourceRoot":"","sources":["../src/atomic-text-write.ts"],"names":[],"mappings":"AAIA,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,SAAS,GAAG,IAAI,CA0DvF"}

package/dist/atomic-text-write.js

@@ -0,0 +1,79 @@
+import { constants, writeFileSync, unlinkSync, lstatSync, readlinkSync, statSync, chmodSync, chownSync, openSync, closeSync, renameSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { dirname, join, resolve } from "node:path";
+/** Publish complete text while retaining the previous file on a failed staged write. */
+export function writeTextAtomically(path, content, label = "file") {
+    // Keep stream/device semantics, including symlinks to pipes such as /dev/stdout.
+    // Probing a FIFO for write access would deliver an empty EOF to its reader.
+    const direct = statSync(path, { throwIfNoEntry: false });
+    if (direct && !direct.isFile()) {
+        writeFileSync(path, content, "utf-8");
+        return;
+    }
+    let target = path;
+    // Follow file links just as writeFileSync did; rename the target,
+    // never the link. A dangling final target is still created normally.
+    for (let depth = 0;; depth++) {
+        const entry = lstatSync(target, { throwIfNoEntry: false });
+        if (!entry?.isSymbolicLink())
+            break;
+        if (depth >= 40)
+            throw Object.assign(new Error(`Too many ${label} symlinks`), { code: "ELOOP" });
+        target = resolve(dirname(target), readlinkSync(target));
+    }
+    const existing = statSync(target, { throwIfNoEntry: false });
+    // Match direct writes: a writable directory must not bypass a read-only
+    // target. Opening without truncation also checks native ACL permissions.
+    if (existing)
+        closeSync(openSync(target, constants.O_WRONLY));
+    const temporary = join(dirname(target), `.openrig.tmp-${randomUUID()}`);
+    let owned = false;
+    let canFallBack = true;
+    try {
+        // Atomic replacement requires directory create/rename permission. Keep
+        // staged bytes private until the original ownership and mode are restored.
+        const fd = openSync(temporary, "wx", 0o600);
+        owned = true;
+        // A failed data write must never retry against the original file.
+        canFallBack = false;
+        try {
+            writeFileSync(fd, content, "utf-8");
+        }
+        finally {
+            closeSync(fd);
+        }
+        canFallBack = true;
+        if (existing && process.platform !== "win32") {
+            const staged = statSync(temporary);
+            if (staged.uid !== existing.uid || staged.gid !== existing.gid) {
+                try {
+                    chownSync(temporary, existing.uid, existing.gid);
+                }
+                catch (error) {
+                    throw Object.assign(new Error(`Cannot preserve ${label} ownership at ${target}: ${error.message}`), { code: error.code });
+                }
+            }
+        }
+        // chown may clear permission bits, so apply the final mode afterward.
+        chmodSync(temporary, existing ? existing.mode & 0o777 : 0o666 & ~process.umask());
+        renameSync(temporary, target);
+    }
+    catch (error) {
+        const code = error.code;
+        if (canFallBack && (code === "EACCES" || code === "EPERM" || code === "EBUSY")) {
+            // Preserve setups that permit writing the file but not replacing it,
+            // such as an unwritable parent or a single-file bind mount.
+            writeFileSync(target, content, "utf-8");
+            return;
+        }
+        throw error;
+    }
+    finally {
+        if (owned)
+            try {
+                unlinkSync(temporary);
+            }
+            catch { /* Renamed or already removed. */ }
+    }
+}
+//# sourceMappingURL=atomic-text-write.js.map

package/dist/atomic-text-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-text-write.js","sourceRoot":"","sources":["../src/atomic-text-write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzJ,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,OAAe,EAAE,KAAK,GAAG,MAAM;IAC/E,iFAAiF;IACjF,4EAA4E;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/B,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IACD,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,kEAAkE;IAClE,qEAAqE;IACrE,KAAK,IAAI,KAAK,GAAG,CAAC,GAAI,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE;YAAE,MAAM;QACpC,IAAI,KAAK,IAAI,EAAE;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACjG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,wEAAwE;IACxE,yEAAyE;IACzE,IAAI,QAAQ;QAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,gBAAgB,UAAU,EAAE,EAAE,CAAC,CAAC;IACxE,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,WAAW,GAAG,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,uEAAuE;QACvE,2EAA2E;QAC3E,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,KAAK,GAAG,IAAI,CAAC;QACb,kEAAkE;QAClE,WAAW,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YAAC,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACvE,WAAW,GAAG,IAAI,CAAC;QACnB,IAAI,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,EAAE,CAAC;gBAC/D,IAAI,CAAC;oBAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;gBACzD,OAAO,KAAK,EAAE,CAAC;oBACb,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,KAAK,iBAAiB,MAAM,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,EAC3G,EAAE,IAAI,EAAG,KAA+B,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;QACD,sEAAsE;QACtE,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAClF,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,WAAW,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;YAC/E,qEAAqE;YACrE,4DAA4D;YAC5D,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,IAAI,CAAC;gBAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/dist/build-info.js

@@ -1,9 +1,9 @@
 // GENERATED by scripts/build-package.sh — the packaged build-identity stamp.
 export const BUILD_INFO = {
-  semver: "0.6.4",
-  commit: "6342862884a7146cbd0797e91399b3704025f161",
+  semver: "0.6.6",
+  commit: "2620dea84efad75e3c5fff9fcf816a78c8e8155f",
   dirty: false,
-  builtAt: "2026-10-02T04:43:48Z",
+  builtAt: "2026-10-07T00:25:05Z",
 };
 export function stampFields(info = BUILD_INFO) {
   if (!info.commit) return {};

package/dist/bundle-behaviour.d.ts

@@ -0,0 +1,10 @@
+import type { BundleBehaviour } from "@openrig/daemon/bundle-behaviour";
+export declare function formatBundleBehaviour(view: BundleBehaviour): string[];
+interface InspectionResponse {
+    status: number;
+    data: Record<string, unknown>;
+}
+/** Diagnostic only: this helper must not change an install/up request, prompt or exit code. */
+export declare function showBundleBehaviourBeforeAction(inspect: () => Promise<InspectionResponse>, output?: (line: string) => void): Promise<BundleBehaviour | undefined>;
+export {};
+//# sourceMappingURL=bundle-behaviour.d.ts.map

package/dist/bundle-behaviour.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-behaviour.d.ts","sourceRoot":"","sources":["../src/bundle-behaviour.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAKxE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,EAAE,CAyCrE;AAED,UAAU,kBAAkB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AAE9E,+FAA+F;AAC/F,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,EAC1C,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAoB,GAC7C,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAatC"}

package/dist/bundle-behaviour.js

@@ -0,0 +1,72 @@
+/** Archive text is data, including terminal escape sequences. */
+const plain = (value) => String(value).replace(/[\x00-\x1f\x7f-\x9f]/g, " ");
+export function formatBundleBehaviour(view) {
+    const lines = ["What this bundle declares before installation:"];
+    const identity = view.identity;
+    lines.push(`Source (bundle-stated): ${identity.source ? plain(JSON.stringify(identity.source)) : "not recorded"}`);
+    lines.push(`Assembler (bundle-stated): ${identity.assembler ? plain(JSON.stringify(identity.assembler)) : "not recorded"}; view generator: ${plain(identity.generator.openrigVersion)}`);
+    if (identity.compatibility && Object.keys(identity.compatibility).length)
+        lines.push(`Declared compatibility: ${plain(JSON.stringify(identity.compatibility))}`);
+    if (identity.statedProvenance && Object.keys(identity.statedProvenance).length)
+        lines.push(`Bundle-stated provenance (not verified): ${plain(JSON.stringify(identity.statedProvenance))}`);
+    lines.push(`Integrity checks: archive digest ${identity.integrity.digestValid ? "matches" : "not confirmed"}; packaged files ${identity.integrity.filesVerified ? "match" : "not confirmed"}.`);
+    if (view.state === "not_generated") {
+        lines.push(`View not generated: ${plain(view.reason)}`, `Inspect locally: ${plain(view.localInspectCommand)}`);
+    }
+    else {
+        lines.push(`Configuration: ${plain(view.identity.configurationId ?? "not recorded in the archive")}`);
+        for (const member of view.team)
+            lines.push(`  ${plain(member.seat)}: ${plain(member.runtime)}, profile ${plain(member.profile)}, declared working folder ${plain(member.cwd)}${member.model ? `, configured model ${plain(member.model)}` : ""}`);
+        lines.push("Permission posture:");
+        if (view.posture.length > 0 && view.posture.length === view.team.length && view.posture.every(item => item.permissionPrompts === "off")) {
+            lines.push("Permission prompts: off for all seats (archive declaration).");
+        }
+        for (const item of view.posture)
+            lines.push(`  ${plain(item.seat)}: ${plain(item.selection)} (${item.basis}); effective native settings unknown.`);
+        lines.push("Access: agents can run shell commands using your account, subject to runtime and host policy.");
+        for (const item of view.posture) {
+            if (item.firstRunWarnings?.claudeBypass === "harness_asks_once")
+                lines.push(`  ${plain(item.seat)}: Claude Code asks for bypass-warning acceptance when it has not been remembered. With rig bundle install <archive-or-link> --non-interruptive, OpenRig can accept it for this rig's launches using a launch flag.`);
+        }
+        if (view.posture.some(item => item.nonInterruptiveDefault === true))
+            lines.push("Non-interruptive launches are declared by this bundle for its full-bypass Claude/Codex seats: broad file, command and network access; supported harness warnings are accepted or hidden using launch flags. An explicit --no-non-interruptive choice overrides this default. Login and unsupported harness notices still apply.");
+        if (view.posture.some(item => item.nonInterruptive === "available" && item.nonInterruptiveDefault !== true))
+            lines.push("Non-interruptive mode is available using rig bundle install <archive-or-link> --non-interruptive for the declared full-bypass Claude/Codex seats. This view does not select the mode or check whether you've already accepted the warning on this machine; login and other harness preconditions still apply.");
+        lines.push("Told files:", ...view.toldFiles.map(f => `  ${f.seat ? plain(f.seat) + ": " : ""}${plain(f.pathOrRef)} [${f.resolution}${f.delivery ? `; ${plain(f.delivery)}` : ""}]`));
+        lines.push("Also declared to run:", ...view.alsoRuns.map(f => `  ${f.seat ? plain(f.seat) + ": " : ""}${plain(f.kind)}: ${plain(f.pathOrRef)} [${f.resolution}${f.trigger ? `; ${plain(f.trigger)}` : ""}]`));
+        lines.push("Writes and library additions (destinations, runtime support and conflicts resolved at launch):", ...view.writes.map(w => `  ${w.seat ? plain(w.seat) + ": " : ""}${plain(w.destinationBase)}/${plain(w.path)} — ${plain(w.operation)}, ${plain(w.phase)}`));
+        lines.push(`Outside domains found in files (not predicted traffic): ${view.outsideAddresses.map(a => plain(a.domain)).join(", ") || "none found"}`);
+        lines.push("Needs (not checked):");
+        for (const need of view.needs) {
+            lines.push(`  ${need.seat ? plain(need.seat) + ": " : ""}${plain(need.name)}${need.versionConstraint ? ` ${plain(need.versionConstraint)}` : ""}`);
+            if (need.commands?.length) {
+                lines.push("    Author setup commands (not run; one shell, in order):");
+                for (const command of need.commands)
+                    lines.push(`      ${plain(command)}`);
+            }
+        }
+        lines.push("Unknown before launch:", ...view.unknownBeforeLaunch.map(u => `  ${u.seat && u.seat !== u.subject ? plain(u.seat) + ": " : ""}${plain(u.subject)}: ${plain(u.reason)}`));
+    }
+    if (view.identity.packageDigest)
+        lines.push(`Package digest: ${plain(view.identity.packageDigest.value)} (${plain(view.identity.packageDigest.coverage)}). Coverage: packaged content bytes; excludes bundle.yaml, .DS_Store, Thumbs.db, .gitkeep, file modes and host-resolved resources.`);
+    lines.push("Integrity means the archive is self-consistent, not who made it.", "Provenance is stated by the bundle and not verified.");
+    return lines;
+}
+/** Diagnostic only: this helper must not change an install/up request, prompt or exit code. */
+export async function showBundleBehaviourBeforeAction(inspect, output = console.error) {
+    try {
+        const response = await inspect();
+        const view = response.data.behaviour;
+        if (response.status < 400 && view?.schema === "openrig.bundle-behaviour/v1") {
+            for (const line of formatBundleBehaviour(view))
+                output(line);
+            return view;
+        }
+        output(`Bundle view not generated: ${plain(response.data.error ?? "the daemon did not provide a behaviour view")}. Existing installation checks still apply.`);
+    }
+    catch (error) {
+        output(`Bundle view not generated: ${plain(error instanceof Error ? error.message : error)}. Existing installation checks still apply.`);
+    }
+    return undefined;
+}
+//# sourceMappingURL=bundle-behaviour.js.map

package/dist/bundle-behaviour.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-behaviour.js","sourceRoot":"","sources":["../src/bundle-behaviour.ts"],"names":[],"mappings":"AAEA,iEAAiE;AACjE,MAAM,KAAK,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;AAE9F,MAAM,UAAU,qBAAqB,CAAC,IAAqB;IACzD,MAAM,KAAK,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,2BAA2B,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;IACnH,KAAK,CAAC,IAAI,CAAC,8BAA8B,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,qBAAqB,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACzL,IAAI,QAAQ,CAAC,aAAa,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,2BAA2B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC;IACjK,IAAI,QAAQ,CAAC,gBAAgB,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,4CAA4C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3L,KAAK,CAAC,IAAI,CAAC,oCAAoC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,oBAAoB,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;IAChM,IAAI,IAAI,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,uBAAuB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,oBAAoB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACjH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,IAAI,6BAA6B,CAAC,EAAE,CAAC,CAAC;QACtG,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAsB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClP,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,EAAE,CAAC;YACxI,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,KAAK,uCAAuC,CAAC,CAAC;QACnJ,KAAK,CAAC,IAAI,CAAC,+FAA+F,CAAC,CAAC;QAC5G,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,gBAAgB,EAAE,YAAY,KAAK,mBAAmB;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,oNAAoN,CAAC,CAAC;QACzT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,sBAAsB,KAAK,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,iUAAiU,CAAC,CAAC;QACnZ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,WAAW,IAAI,IAAI,CAAC,sBAAsB,KAAK,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,+SAA+S,CAAC,CAAC;QACza,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACrL,KAAK,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9M,KAAK,CAAC,IAAI,CAAC,gGAAgG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACxQ,KAAK,CAAC,IAAI,CAAC,2DAA2D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;QACpJ,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnJ,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;gBACxE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACvL,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,oIAAoI,CAAC,CAAC;IAC7R,KAAK,CAAC,IAAI,CAAC,kEAAkE,EAAE,sDAAsD,CAAC,CAAC;IACvI,OAAO,KAAK,CAAC;AACf,CAAC;AAID,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAA0C,EAC1C,SAAiC,OAAO,CAAC,KAAK;IAE9C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAwC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,MAAM,KAAK,6BAA6B,EAAE,CAAC;YAC5E,KAAK,MAAM,IAAI,IAAI,qBAAqB,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,8BAA8B,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,6CAA6C,CAAC,6CAA6C,CAAC,CAAC;IACjK,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,8BAA8B,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC3I,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/cli-error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-error.d.ts","sourceRoot":"","sources":["../src/cli-error.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMpD;AAED,wFAAwF;AACxF,wBAAgB,OAAO,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAO7E;AAED,mGAAmG;AACnG,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAQhE;AAQD,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAQ1D;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAIpG;AAED,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAMxD;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,CAAC,EAAE,OAAO,EACV,EAAE,EAAE;IAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACxE,OAAO,CAiCT;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoCzG"}
+{"version":3,"file":"cli-error.d.ts","sourceRoot":"","sources":["../src/cli-error.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKzC;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMpD;AAED,wFAAwF;AACxF,wBAAgB,OAAO,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAO7E;AAED,mGAAmG;AACnG,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAQhE;AAQD,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAQ1D;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAIpG;AAED,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAMxD;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,CAAC,EAAE,OAAO,EACV,EAAE,EAAE;IAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACxE,OAAO,CA6CT;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAE,YAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoCzG"}

package/dist/cli-error.js

@@ -1,5 +1,6 @@
 import { InvalidArgumentError } from "commander";
 import { DaemonConnectionError, DaemonResponseError, DaemonTimeoutError } from "./client.js";
+import { blockedConnectionGuidance, isBlockedConnectionCode } from "./daemon-reachability.js";
 /**
  * Commander option parser — a positive integer (>= 1). Rejects negative, zero,
  * and non-numeric values (finding 4). Throws InvalidArgumentError, which the
@@ -82,10 +83,22 @@ export function renderDaemonTransportError(e, io) {
         };
     }
     else if (e instanceof DaemonConnectionError) {
+        const unknownWrite = e.writeOutcome === "unknown";
+        const reconcile = "Reconcile using the recovery ID before any retry. A lost connection does not prove the write failed.";
+        const delivery = unknownWrite
+            ? "The command's outcome is UNKNOWN — no usable response confirmed whether the write was applied."
+            : "The command was not delivered.";
+        // #275: a connection this machine blocked (EPERM/EACCES) is not a stopped daemon.
+        const blocked = isBlockedConnectionCode(e.causeCode) ? blockedConnectionGuidance(e.causeCode) : undefined;
         parts = {
             fact: e.message,
-            consequence: "The command was not delivered.",
-            action: "Confirm the daemon is reachable with 'rig daemon status'; if it is down, start it with 'rig up' or 'rig daemon start'.",
+            consequence: blocked ? `${delivery} ${blocked.consequence}` : delivery,
+            action: blocked
+                ? (unknownWrite ? `${blocked.action} ${reconcile}` : blocked.action)
+                : unknownWrite
+                    ? `Check 'rig daemon status' on the affected host; if it is down, start it with 'rig daemon start'. ${reconcile}`
+                    : "Confirm the daemon is reachable with 'rig daemon status'; if it is down, start it with 'rig up' or 'rig daemon start'.",
+            ...(e.causeCode ? { causeCode: e.causeCode } : {}),
         };
     }
     if (!parts)

package/dist/cli-error.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-error.js","sourceRoot":"","sources":["../src/cli-error.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE7F;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,oBAAoB,CAAC,2CAA2C,KAAK,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,OAAO,CAAC,OAA0B;IAChD,OAAO,CAAC,KAAa,EAAU,EAAE;QAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAChG,IAAI,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,CAAC,GAAG,GAAyB,CAAC;IACpC,OAAO,CACL,CAAC,EAAE,IAAI,KAAK,yBAAyB;QACrC,CAAC,EAAE,IAAI,KAAK,mBAAmB;QAC/B,CAAC,EAAE,IAAI,KAAK,gBAAgB;QAC5B,CAAC,OAAO,CAAC,EAAE,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,CAAC,GAAG,GAAyB,CAAC;IACpC,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,EAAE;QAC5B,GAAG,CAAC,YAAY,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,CAAC;AAChB,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,CAAU,EACV,EAAyE;IAEzE,IAAI,KAAwE,CAAC;IAC7E,8EAA8E;IAC9E,IAAI,CAAC,YAAY,mBAAmB,EAAE,CAAC;QACrC,KAAK,GAAG;YACN,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,WAAW,EAAE,yEAAyE;YACtF,MAAM,EACJ,uLAAuL;SAC1L,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,YAAY,kBAAkB,EAAE,CAAC;QAC3C,KAAK,GAAG;YACN,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,WAAW,EAAE,uEAAuE;YACpF,MAAM,EACJ,gLAAgL;SACnL,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,YAAY,qBAAqB,EAAE,CAAC;QAC9C,KAAK,GAAG;YACN,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,WAAW,EAAE,gCAAgC;YAC7C,MAAM,EAAE,wHAAwH;SACjI,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACZ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnB,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACjC,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAgB,EAAE,IAAc,EAAE,KAAmB,EAAE;IACtF,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5C,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,iFAAiF;IACjF,gFAAgF;IAChF,2DAA2D;IAC3D,MAAM,WAAW,GAAG,CAAC,GAAY,EAAE,EAAE;QACnC,GAAG,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAW,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChG,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ;YAAE,WAAW,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,WAAW,CAAC,OAAO,CAAC,CAAC;IAErB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,oBAAoB,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACtC,8EAA8E;QAC9E,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,0BAA0B,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,CAAC,CAAC,CAAC;YACR,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,IAAI,GAAI,CAAwB,EAAE,QAAQ,IAAI,CAAC,CAAC;QACtD,IAAI,IAAI,EAAE,CAAC;YACT,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,+EAA+E;QAC/E,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"cli-error.js","sourceRoot":"","sources":["../src/cli-error.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAE9F;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,oBAAoB,CAAC,2CAA2C,KAAK,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,OAAO,CAAC,OAA0B;IAChD,OAAO,CAAC,KAAa,EAAU,EAAE;QAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,oBAAoB,CAAC,mBAAmB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAChG,IAAI,iCAAiC,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,yFAAyF;AACzF,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,CAAC,GAAG,GAAyB,CAAC;IACpC,OAAO,CACL,CAAC,EAAE,IAAI,KAAK,yBAAyB;QACrC,CAAC,EAAE,IAAI,KAAK,mBAAmB;QAC/B,CAAC,EAAE,IAAI,KAAK,gBAAgB;QAC5B,CAAC,OAAO,CAAC,EAAE,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,CAAC,GAAG,GAAyB,CAAC;IACpC,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,EAAE;QAC5B,GAAG,CAAC,YAAY,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,CAAC;AAChB,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,CAAU,EACV,EAAyE;IAEzE,IAAI,KAA4F,CAAC;IACjG,8EAA8E;IAC9E,IAAI,CAAC,YAAY,mBAAmB,EAAE,CAAC;QACrC,KAAK,GAAG;YACN,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,WAAW,EAAE,yEAAyE;YACtF,MAAM,EACJ,uLAAuL;SAC1L,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,YAAY,kBAAkB,EAAE,CAAC;QAC3C,KAAK,GAAG;YACN,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,WAAW,EAAE,uEAAuE;YACpF,MAAM,EACJ,gLAAgL;SACnL,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,YAAY,qBAAqB,EAAE,CAAC;QAC9C,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC;QAClD,MAAM,SAAS,GAAG,sGAAsG,CAAC;QACzH,MAAM,QAAQ,GAAG,YAAY;YAC3B,CAAC,CAAC,gGAAgG;YAClG,CAAC,CAAC,gCAAgC,CAAC;QACrC,kFAAkF;QAClF,MAAM,OAAO,GAAG,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,KAAK,GAAG;YACN,IAAI,EAAE,CAAC,CAAC,OAAO;YACf,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ;YACtE,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;gBACpE,CAAC,CAAC,YAAY;oBACZ,CAAC,CAAC,oGAAoG,SAAS,EAAE;oBACjH,CAAC,CAAC,wHAAwH;YAC9H,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACZ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnB,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACjC,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAgB,EAAE,IAAc,EAAE,KAAmB,EAAE;IACtF,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5C,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,iFAAiF;IACjF,gFAAgF;IAChF,2DAA2D;IAC3D,MAAM,WAAW,GAAG,CAAC,GAAY,EAAE,EAAE;QACnC,GAAG,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAW,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChG,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ;YAAE,WAAW,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,WAAW,CAAC,OAAO,CAAC,CAAC;IAErB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,oBAAoB,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACtC,8EAA8E;QAC9E,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,0BAA0B,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,CAAC,CAAC,CAAC;YACR,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,IAAI,GAAI,CAAwB,EAAE,QAAQ,IAAI,CAAC,CAAC;QACtD,IAAI,IAAI,EAAE,CAAC;YACT,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,+EAA+E;QAC/E,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/client.d.ts

@@ -12,8 +12,15 @@ export declare const SENDER_IDENTITY_HEADER = "X-OpenRig-Session";
 export declare function senderIdentityHeaders(originSelfHostId?: string): Record<string, string>;
 /** Construct registered remote clients with the origin derived from this instance's durable store. */
 export declare function remoteDaemonClient(clientFactory: (baseUrl: string) => DaemonClient, url: string, originSelfHostId?: string): DaemonClient;
+/** The OS code behind a failed connection (`EPERM`, `ECONNREFUSED`, …) when Node exposes one.
+ *  `fetch` reports every connection failure as "fetch failed" and keeps the code on `cause`. */
+export declare function connectionErrorCode(err: unknown): string | undefined;
 export declare class DaemonConnectionError extends Error {
-    constructor(message: string);
+    /** A write caller cannot infer nondelivery from losing the response. */
+    writeOutcome?: "unknown";
+    /** #275: the OS cause, so a connection this machine blocked is not rendered as a stopped daemon. */
+    causeCode?: string;
+    constructor(message: string, causeCode?: string);
 }
 /**
  * Slow-response: the request reached its bound without a reply. A SUBCLASS of
@@ -38,6 +45,12 @@ export interface DaemonResponse<T = unknown> {
     status: number;
     data: T;
 }
+/**
+ * Issue #425: wrap bare IPv6 literals in brackets for URL hosts. `::1` must
+ * render as `[::1]` — `http://::1:7433` never parses in fetch. Hostnames,
+ * IPv4, and already-bracketed literals pass through unchanged.
+ */
+export declare function formatDaemonHostForUrl(host: string): string;
 interface DaemonRequestOptions {
     timeoutMs?: number;
     /** Per-call header overrides (e.g., `Authorization: Bearer ...`). */

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAOA,wBAAgB,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAG5D;AAED,gGAAgG;AAChG,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASvF;AAED,sGAAsG;AACtG,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,YAAY,EAChD,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,MAAM,GACxB,YAAY,CAKd;AAeD,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,qBAAqB;gBAC/C,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBACjB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAMzC;AAED,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,OAAO;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,CAAC;CACT;AAED,UAAU,oBAAoB;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,UAAU,mBAAmB;IAC3B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAkBD,qBAAa,YAAY;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,SAAS,CAAS;IAC1B,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,UAAS;IACrB,OAAO,CAAC,QAAQ,CAAC,CAAkC;IACnD,OAAO,CAAC,aAAa,CAAS;YAEhB,eAAe;gBA8BjB,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB;IAwBrD,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAI1F,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAItF,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAQ3G,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,SAAc,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAQ/K,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAQ7G,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAO7F,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YAUlG,KAAK;YA6CL,WAAW;YAgBX,WAAW;CAK1B"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAOA,wBAAgB,mBAAmB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAG5D;AAED,gGAAgG;AAChG,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAE1D;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASvF;AAED,sGAAsG;AACtG,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,YAAY,EAChD,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,MAAM,GACxB,YAAY,CAKd;AAeD;gGACgG;AAChG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIpE;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,wEAAwE;IACxE,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,oGAAoG;IACpG,SAAS,CAAC,EAAE,MAAM,CAAC;gBAEP,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM;CAKhD;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,qBAAqB;gBAC/C,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBACjB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAMzC;AAED,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,OAAO;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,CAAC,CAAC;CACT;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI3D;AAED,UAAU,oBAAoB;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,UAAU,mBAAmB;IAC3B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAkBD,qBAAa,YAAY;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,SAAS,CAAS;IAC1B,0FAA0F;IAC1F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,UAAS;IACrB,OAAO,CAAC,QAAQ,CAAC,CAAkC;IACnD,OAAO,CAAC,aAAa,CAAS;YAEhB,eAAe;gBA8BjB,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB;IAwBrD,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAI1F,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAItF,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAQ3G,QAAQ,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,SAAc,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAQ/K,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAQ7G,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAO7F,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YAUlG,KAAK;YAiDL,WAAW;YAgBX,WAAW;CAK1B"}