otacon 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Zero Liu
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,88 @@
+<img width="9034" height="1857" alt="github-otacon" src="https://github.com/user-attachments/assets/18796111-63d7-4df6-a2ba-b95f132eabd3" />
+
+Plan review surface for coding agents (Claude Code, Codex, OpenCode). Replaces native
+plan modes with one CLI protocol: schema'd concise plans, anchored comments and
+questions from any device (phone included, over Tailscale), revision diffs against
+what you last reviewed, and a mandatory grill-me interview phase before any plan
+reaches review. Approval produces a committed plan artifact for a future implementer
+skill (`snake`) to execute.
+
+Behavior spec: [DESIGN.md](DESIGN.md) · tradeoff rationale: [DECISIONS.md](DECISIONS.md)
+· agent conventions: [AGENTS.md](AGENTS.md)
+
+Personal tool by/for Zero. Zero API spend by construction — all model work happens in
+your interactive subscription-backed agent session; the daemon, CLI, and UI never call
+an LLM.
+
+## Install
+
+One-time machine setup (DESIGN.md §16):
+
+```sh
+npm install -g otacon                   # one package: CLI + daemon (Node ≥ 20)
+otacon install --all                    # agent wrappers; or --agent claude|codex|opencode
+otacon install --agent claude --hooks   # also register the Claude Code Stop hook
+otacon doctor                           # verify: node, daemon boots, wrappers, Tailscale
+```
+
+`otacon install` writes the protocol wrapper into each agent's skill location —
+Claude Code: `~/.claude/skills/otacon/SKILL.md` (+ the Stop hook script at
+`~/.claude/hooks/otacon-stop.sh`); Codex: a marked block in `~/.codex/AGENTS.md`;
+OpenCode: `~/.config/opencode/skills/otacon/SKILL.md`. Wrappers are managed files:
+reinstalls overwrite them (outside-the-markers content in Codex's shared file
+survives). `--hooks` merges the Stop hook into `~/.claude/settings.json` additively
+and idempotently, backing the file up first. The daemon is never started by hand —
+any `otacon` command auto-spawns it.
+
+Per-repo setup: **none.** The first `otacon start` in a repo creates `.otacon/` and
+gitignores it. Approved plans land committed in `docs/plans/`. `otacon clean` archives
+ended sessions' working state to `.otacon/archive/`.
+
+### Updating
+
+```sh
+npm update -g otacon   # the version handshake restarts the daemon on next use
+```
+
+### Build from source (contributors)
+
+For contributors or the bleeding edge only — the published npm package is the
+supported user path. Clone the repo and run from source:
+
+```sh
+git clone https://github.com/zeroliu/otacon && cd otacon
+bun install
+./bin/otacon doctor              # run straight from source
+# — or build a Node artifact and link it onto PATH —
+bun run build && npm link        # `otacon` now points at this checkout
+```
+
+(`npm i -g github:zeroliu/otacon` is **not** a supported install — the published
+package ships a prebuilt `dist/`, and a GitHub install would need a build-on-install
+step that is intentionally not wired.)
+
+## Phone access
+
+Reviews work from a phone over Tailscale (DESIGN.md §11) — plans never leave your
+devices, and the tailnet is the auth:
+
+1. Install Tailscale on the Mac and the phone; log in (`tailscale up`).
+2. Enable **HTTPS Certificates** for the tailnet: Tailscale admin console → DNS →
+   Enable HTTPS (MagicDNS must be on). This is the one step otacon cannot do for you.
+3. `otacon expose` — configures `tailscale serve` for the daemon port, verifies the
+   tailnet URL actually serves, and prints the HTTPS URL with `verified: true`.
+   Bookmark it on the phone.
+4. Keep the Mac awake while a plan is in review: `caffeinate -i`.
+
+If you skip step 2, `tailscale serve` still succeeds but the URL resets every TLS
+handshake — so `otacon expose` reports `verified: false` and links the admin DNS page
+instead of handing you a dead URL. (Just enabled HTTPS? The cert can take a minute to
+provision; re-run `expose`.)
+
+On the Mac App Store Tailscale, putting `tailscale` on your `PATH` needs a manual
+launcher — a wrapper script that runs the app-bundle binary (a bare symlink crashes).
+otacon finds the app-bundle binary on its own either way.
+
+---
+
+Maintainers cutting a release: see [RELEASING.md](RELEASING.md).

package/dist/cli/client.js

@@ -0,0 +1,188 @@
+// HTTP client for otacond, plus ensureDaemon — the auto-spawn and version
+// handshake every CLI command runs first (DESIGN.md §16).
+//
+// The daemon is spawned by resolved path — the dist/daemon/main.js sibling of
+// this very module — never via PATH (DECISIONS.md "Daemon spawned by resolved
+// file path"), detached with stdout/stderr appended to $OTACON_HOME/daemon.log.
+// Instead of reading the boot line, the CLI re-probes /api/health and watches
+// the child's exit code: exit 0 before health means it lost the spawn race to
+// another otacond (the port is the lock — keep polling the winner); any other
+// exit is a refusal or crash, surfaced with a pointer at the log (DECISIONS.md
+// "Daemon spawn: health re-probe, not the boot line").
+import { spawn } from "node:child_process";
+import { closeSync, existsSync, mkdirSync, openSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { daemonLogPath, otaconHome, otaconPort } from "../shared/paths.js";
+import { VERSION } from "../shared/version.js";
+import { fail, notice } from "./output.js";
+const PROBE_TIMEOUT_MS = 1500;
+const SPAWN_DEADLINE_MS = 8000;
+const POLL_INTERVAL_MS = 100;
+export const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+export function baseUrl() {
+    return `http://127.0.0.1:${otaconPort()}`;
+}
+/**
+ * JSON request/response against the daemon. A connection failure (refused,
+ * reset, aborted, truncated body) throws E_DAEMON_DOWN — an actionable exit-1
+ * failure per the exit-code contract, not an internal error. `otacon wait`
+ * treats exactly that code as "back off and re-park".
+ */
+export async function api(method, path, body, signal) {
+    try {
+        const response = await fetch(`${baseUrl()}${path}`, {
+            method,
+            headers: body === undefined ? undefined : { "content-type": "application/json" },
+            body: body === undefined ? undefined : JSON.stringify(body),
+            signal,
+        });
+        // Every /api response is JSON; a body that fails to parse is a connection
+        // truncated mid-response and must NOT pass as an empty result — for events
+        // that would print {} as the event while the daemon requeues it.
+        const parsed = (await response.json());
+        return { status: response.status, body: parsed };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        fail("E_DAEMON_DOWN", `cannot reach otacond at ${baseUrl()}${path}: ${message}; retry`);
+    }
+}
+/** down = nothing answered HTTP; foreign = answered but is not otacond. */
+async function probe() {
+    let response;
+    try {
+        response = await fetch(`${baseUrl()}/api/health`, {
+            signal: AbortSignal.timeout(PROBE_TIMEOUT_MS),
+        });
+    }
+    catch {
+        return { state: "down" };
+    }
+    try {
+        const health = (await response.json());
+        if (health.app === "otacond" && typeof health.version === "string") {
+            return { state: "up", health };
+        }
+    }
+    catch {
+        // non-JSON body: not otacond
+    }
+    return { state: "foreign" };
+}
+function portConflict() {
+    fail("E_PORT_CONFLICT", `port ${otaconPort()} is in use by something that is not otacond; set OTACON_PORT to pick another port`);
+}
+/** dist/daemon/main.js sibling; from a source-tree run (bun) the .ts entry. */
+function daemonEntry() {
+    const built = fileURLToPath(new URL("../daemon/main.js", import.meta.url));
+    if (existsSync(built))
+        return built;
+    // Running from src/ (e.g. `bun run src/cli/main.ts`): no built sibling, but
+    // process.execPath is bun, which runs the TypeScript entry directly — this
+    // is what keeps "local dev behaves identically" true (DECISIONS.md "Daemon
+    // spawned by resolved file path").
+    return fileURLToPath(new URL("../daemon/main.ts", import.meta.url));
+}
+/** Spawn the daemon detached; returns the child's exit code, undefined while alive. */
+function spawnDaemon() {
+    mkdirSync(otaconHome(), { recursive: true });
+    const log = openSync(daemonLogPath(), "a");
+    const child = spawn(process.execPath, [daemonEntry()], {
+        detached: true,
+        stdio: ["ignore", log, log],
+    });
+    child.unref();
+    closeSync(log); // the child holds its own descriptor
+    let exitCode;
+    child.on("error", (error) => {
+        // spawn itself failed (ENOENT/EACCES); without a listener this event
+        // would crash the CLI outside the JSON-on-stdout contract.
+        notice(`failed to spawn otacond: ${error.message}`);
+        exitCode = 1;
+    });
+    child.on("exit", (code) => {
+        exitCode = code ?? 1; // signal death counts as failure
+    });
+    return () => exitCode;
+}
+async function spawnAndAwaitHealth() {
+    const exitCode = spawnDaemon();
+    const deadline = Date.now() + SPAWN_DEADLINE_MS;
+    while (Date.now() < deadline) {
+        const result = await probe();
+        if (result.state === "up")
+            return result.health;
+        if (result.state === "foreign")
+            portConflict();
+        const code = exitCode();
+        if (code !== undefined && code !== 0) {
+            // Covers the non-HTTP port squatter too: the probe sees "down", the
+            // spawned daemon hits EADDRINUSE, fails its own ownership check, exits 1.
+            fail("E_DAEMON_START", `otacond exited with code ${code} before becoming healthy; see ${daemonLogPath()} (if the port is taken, set OTACON_PORT)`);
+        }
+        await sleep(POLL_INTERVAL_MS);
+    }
+    fail("E_DAEMON_START", `otacond did not become healthy on ${baseUrl()}; see ${daemonLogPath()}`);
+}
+async function shutdownStaleDaemon() {
+    // Re-check identity and version immediately before firing the shutdown: the
+    // caller probed moments ago, but a peer CLI may have completed the same
+    // restart in between — killing the healthy current-version daemon it just
+    // spawned would drop parked waiters for nothing (the probe→shutdown TOCTOU).
+    const recheck = await probe();
+    if (recheck.state === "down")
+        return;
+    if (recheck.state === "foreign")
+        portConflict();
+    if (recheck.health.version === VERSION)
+        return;
+    try {
+        await api("POST", "/api/shutdown");
+    }
+    catch {
+        // it may drop the connection while exiting; the down-poll below decides
+    }
+    const deadline = Date.now() + SPAWN_DEADLINE_MS;
+    while (Date.now() < deadline) {
+        const result = await probe();
+        if (result.state === "down")
+            return;
+        // A concurrent CLI may have already respawned the current version into
+        // the gap; that restart is as good as ours — without this check we would
+        // poll a healthy daemon for the full deadline and fail spuriously.
+        if (result.state === "up" && result.health.version === VERSION)
+            return;
+        await sleep(POLL_INTERVAL_MS);
+    }
+    fail("E_DAEMON_RESTART", "stale otacond did not exit after POST /api/shutdown");
+}
+/** Whole probe→shutdown→respawn cycles before giving up on a version fight. */
+const RESTART_ATTEMPTS = 3;
+/**
+ * Health probe → spawn if down → exact-version handshake, restarting a stale
+ * daemon via POST /api/shutdown (DESIGN.md §16). Refuses a port held by a
+ * non-otacond process. The restart cycle is bounded (peer CLIs of different
+ * versions could otherwise ping-pong restarts forever), and the shutdown
+ * re-checks the daemon's version right before firing, so a peer's completed
+ * restart is adopted instead of killed (DECISIONS.md "Stale-daemon restart").
+ */
+export async function ensureDaemon() {
+    for (let attempt = 0; attempt < RESTART_ATTEMPTS; attempt++) {
+        const current = await probe();
+        if (current.state === "foreign")
+            portConflict();
+        if (current.state === "up") {
+            if (current.health.version === VERSION)
+                return current.health;
+            notice(`restarting stale otacond ${current.health.version} → ${VERSION}`);
+            await shutdownStaleDaemon();
+            continue; // re-probe: a peer may have respawned the current version
+        }
+        const health = await spawnAndAwaitHealth();
+        if (health.version === VERSION)
+            return health;
+        // An older CLI won the respawn race; loop to shut its daemon down too.
+    }
+    fail("E_VERSION_MISMATCH", `daemon on port ${otaconPort()} still runs another version after ${RESTART_ATTEMPTS} restart attempts — a CLI of a different version keeps respawning it; retry`);
+}
+//# sourceMappingURL=client.js.map

package/dist/cli/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/cli/client.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0DAA0D;AAC1D,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,uDAAuD;AAEvD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAQ3C,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE7F,MAAM,UAAU,OAAO;IACrB,OAAO,oBAAoB,UAAU,EAAE,EAAE,CAAC;AAC5C,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,MAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE;YAClD,MAAM;YACN,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAChF,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC3D,MAAM;SACP,CAAC,CAAC;QACH,0EAA0E;QAC1E,2EAA2E;QAC3E,iEAAiE;QACjE,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QAClE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,CAAC,eAAe,EAAE,2BAA2B,OAAO,EAAE,GAAG,IAAI,KAAK,OAAO,SAAS,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAID,2EAA2E;AAC3E,KAAK,UAAU,KAAK;IAClB,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,EAAE,aAAa,EAAE;YAChD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAiB,CAAC;QACvD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACnE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CACF,iBAAiB,EACjB,QAAQ,UAAU,EAAE,mFAAmF,CACxG,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW;IAClB,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,mCAAmC;IACnC,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,uFAAuF;AACvF,SAAS,WAAW;IAClB,SAAS,CAAC,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE;QACrD,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC;KAC5B,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,qCAAqC;IACrD,IAAI,QAA4B,CAAC;IACjC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1B,qEAAqE;QACrE,2DAA2D;QAC3D,MAAM,CAAC,4BAA4B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,iCAAiC;IACzD,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC;IAChD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QAChD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,YAAY,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACrC,oEAAoE;YACpE,0EAA0E;YAC1E,IAAI,CACF,gBAAgB,EAChB,4BAA4B,IAAI,iCAAiC,aAAa,EAAE,0CAA0C,CAC3H,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,qCAAqC,OAAO,EAAE,SAAS,aAAa,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,OAAO,GAAG,MAAM,KAAK,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM;QAAE,OAAO;IACrC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,YAAY,EAAE,CAAC;IAChD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC;IAChD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YAAE,OAAO;QACpC,uEAAuE;QACvE,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO;QACvE,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,kBAAkB,EAAE,qDAAqD,CAAC,CAAC;AAClF,CAAC;AAED,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,KAAK,EAAE,CAAC;QAC9B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,YAAY,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC;YAC9D,MAAM,CAAC,4BAA4B,OAAO,CAAC,MAAM,CAAC,OAAO,MAAM,OAAO,EAAE,CAAC,CAAC;YAC1E,MAAM,mBAAmB,EAAE,CAAC;YAC5B,SAAS,CAAC,0DAA0D;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC;QAC9C,uEAAuE;IACzE,CAAC;IACD,IAAI,CACF,oBAAoB,EACpB,kBAAkB,UAAU,EAAE,qCAAqC,gBAAgB,6EAA6E,CACjK,CAAC;AACJ,CAAC"}

package/dist/cli/commands/answer.js

@@ -0,0 +1,63 @@
+// otacon answer <question-id> (--body "…" | --file f.md) [--session id] — the
+// agent's reply to a user question (DESIGN.md §6, §9): the answer lands on the
+// question's thread, the plan and status stay untouched, and the agent goes
+// back to `otacon wait`.
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { parseArgs } from "node:util";
+import { api, ensureDaemon } from "../client.js";
+import { fail, printJson, usageError } from "../output.js";
+import { listSessions, realpathOr, resolveSession } from "../session.js";
+export async function answerCommand(argv) {
+    const { values, positionals } = parseArgs({
+        args: argv,
+        options: {
+            body: { type: "string" },
+            file: { type: "string" },
+            session: { type: "string" },
+        },
+        allowPositionals: true,
+    });
+    const questionId = positionals[0];
+    if (questionId === undefined || positionals.length > 1) {
+        usageError("otacon answer takes exactly one <question-id>");
+    }
+    if ((values.body === undefined) === (values.file === undefined)) {
+        usageError("otacon answer requires exactly one of --body or --file");
+    }
+    let body;
+    if (values.body !== undefined) {
+        body = values.body;
+    }
+    else {
+        const path = resolve(values.file);
+        try {
+            body = readFileSync(path, "utf8");
+        }
+        catch {
+            fail("E_NO_FILE", `cannot read answer file ${path}`);
+        }
+    }
+    if (body.trim() === "")
+        usageError("the answer body must be non-empty");
+    await ensureDaemon();
+    const session = resolveSession(await listSessions(), values.session, realpathOr(process.cwd()));
+    const response = await api("POST", `/api/sessions/${session.id}/questions/${encodeURIComponent(questionId)}/answer`, { body });
+    if (response.status === 200) {
+        printJson(response.body);
+        return 0;
+    }
+    const code = response.body.error?.code;
+    if (response.status === 404 && code === "E_UNKNOWN_QUESTION") {
+        fail("E_UNKNOWN_QUESTION", `session ${session.id} has no question ${questionId}`);
+    }
+    if (response.status === 404) {
+        fail("E_UNKNOWN_SESSION", `daemon no longer knows session ${session.id}`);
+    }
+    if (response.status === 409) {
+        const message = response.body?.error?.message;
+        fail("E_SESSION_OVER", message ?? `session ${session.id} is approved — the session is over`);
+    }
+    fail("E_INTERNAL", `answer failed: ${JSON.stringify(response.body)}`, undefined, 2);
+}
+//# sourceMappingURL=answer.js.map

package/dist/cli/commands/answer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"answer.js","sourceRoot":"","sources":["../../../src/cli/commands/answer.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,yBAAyB;AAEzB,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;QACxC,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC5B;QACD,gBAAgB,EAAE,IAAI;KACvB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,UAAU,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvD,UAAU,CAAC,+CAA+C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;QAChE,UAAU,CAAC,wDAAwD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAc,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,WAAW,EAAE,2BAA2B,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,UAAU,CAAC,mCAAmC,CAAC,CAAC;IAExE,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,YAAY,EAAE,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAEhG,MAAM,QAAQ,GAAG,MAAM,GAAG,CACxB,MAAM,EACN,iBAAiB,OAAO,CAAC,EAAE,cAAc,kBAAkB,CAAC,UAAU,CAAC,SAAS,EAChF,EAAE,IAAI,EAAE,CACT,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAI,QAAQ,CAAC,IAAI,CAAC,KAAuC,EAAE,IAAI,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC7D,IAAI,CAAC,oBAAoB,EAAE,WAAW,OAAO,CAAC,EAAE,oBAAoB,UAAU,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,mBAAmB,EAAE,kCAAkC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAI,QAAQ,CAAC,IAAyC,EAAE,KAAK,EAAE,OAAO,CAAC;QACpF,IAAI,CAAC,gBAAgB,EAAE,OAAO,IAAI,WAAW,OAAO,CAAC,EAAE,oCAAoC,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,kBAAkB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AACtF,CAAC"}

package/dist/cli/commands/ask.js

@@ -0,0 +1,117 @@
+// otacon ask --question "…" [--options "A|B|C"] [--recommend A] [--multi]
+// [--session id] — post a grill question card to the UI (DESIGN.md §6, §8).
+// Prints the question id; the agent then parks in `otacon wait` and the
+// user's answer arrives as an {"event":"answer"} on stdout there.
+//
+// `--batch <file|->` posts several INDEPENDENT questions in one call (a JSON
+// array of the same specs): the daemon mints them atomically and they render
+// as ordinary cards, each answered instantly. Dependency-first grilling still
+// holds — only independent siblings batch (DESIGN.md §8).
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { parseArgs } from "node:util";
+import { parseQuestionSpec } from "../../shared/question-spec.js";
+import { api, ensureDaemon } from "../client.js";
+import { fail, printJson, usageError } from "../output.js";
+import { listSessions, realpathOr, resolveSession } from "../session.js";
+/**
+ * Hold one question body to the shared validator (DESIGN.md §6, §8) — the same
+ * rules the daemon re-checks — turning its error string into a usage error
+ * (E_USAGE, exit 2) carrying the caller's context: a `--batch[i] ` index, or
+ * "" for the bare flag form.
+ */
+function specOrUsage(raw, where) {
+    const spec = parseQuestionSpec(raw);
+    if (typeof spec === "string")
+        usageError(`${where}${spec}`);
+    return spec;
+}
+/**
+ * Parse and validate a --batch payload: a non-empty JSON array of question
+ * specs. Throws a usage error on a malformed array or member (naming its
+ * index) so the agent fixes its file before the daemon sees it; the daemon
+ * re-validates and mints the whole batch atomically (a bad member fails it
+ * all — no partial queue).
+ */
+export function parseBatch(content) {
+    let parsed;
+    try {
+        parsed = JSON.parse(content);
+    }
+    catch {
+        usageError("--batch must be a JSON array of question objects");
+    }
+    if (!Array.isArray(parsed) || parsed.length === 0) {
+        usageError("--batch must be a non-empty JSON array of question objects");
+    }
+    return parsed.map((raw, i) => specOrUsage(raw, `--batch[${i}] `));
+}
+export async function askCommand(argv) {
+    const { values } = parseArgs({
+        args: argv,
+        options: {
+            question: { type: "string" },
+            options: { type: "string" },
+            recommend: { type: "string" },
+            multi: { type: "boolean", default: false },
+            session: { type: "string" },
+            batch: { type: "string" },
+        },
+    });
+    let payload;
+    if (values.batch !== undefined) {
+        if (values.question !== undefined ||
+            values.options !== undefined ||
+            values.recommend !== undefined ||
+            values.multi === true) {
+            usageError("--batch is exclusive with --question/--options/--recommend/--multi");
+        }
+        let content;
+        try {
+            content = readFileSync(values.batch === "-" ? 0 : resolve(values.batch), "utf8");
+        }
+        catch {
+            fail("E_NO_BATCH", `cannot read --batch ${values.batch}; write the questions there or pass -`);
+        }
+        payload = { questions: parseBatch(content) };
+    }
+    else {
+        if (values.question === undefined || values.question.trim() === "") {
+            usageError('otacon ask requires --question "…" (or --batch <file|->)');
+        }
+        // Assemble the same spec a --batch member is, then hold it to the one shared
+        // validator — the only flag-specific bit is splitting --options on "|".
+        payload = {
+            ...specOrUsage({
+                question: values.question,
+                ...(values.options !== undefined
+                    ? { options: values.options.split("|").map((o) => o.trim()) }
+                    : {}),
+                ...(values.recommend !== undefined ? { recommend: values.recommend } : {}),
+                ...(values.multi === true ? { multi: true } : {}),
+            }, ""),
+        };
+    }
+    await ensureDaemon();
+    const session = resolveSession(await listSessions(), values.session, realpathOr(process.cwd()));
+    const response = await api("POST", `/api/sessions/${session.id}/ask`, payload);
+    if (response.status === 201) {
+        // single: {ok, session, id: "q<n>"}; batch: {ok, session, ids: [...]} —
+        // now park in `otacon wait`, looping it to drain a batch.
+        printJson(response.body);
+        return 0;
+    }
+    const code = response.body.error?.code;
+    const message = response.body.error?.message;
+    if (response.status === 409) {
+        fail(code ?? "E_SESSION_OVER", message ?? `session ${session.id} is over`);
+    }
+    if (response.status === 404) {
+        fail("E_UNKNOWN_SESSION", `daemon no longer knows session ${session.id}`);
+    }
+    if (response.status === 400) {
+        fail("E_BAD_REQUEST", message ?? "daemon rejected the question");
+    }
+    fail("E_INTERNAL", `ask failed: ${JSON.stringify(response.body)}`, undefined, 2);
+}
+//# sourceMappingURL=ask.js.map

package/dist/cli/commands/ask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask.js","sourceRoot":"","sources":["../../../src/cli/commands/ask.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,4EAA4E;AAC5E,wEAAwE;AACxE,kEAAkE;AAClE,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,0DAA0D;AAE1D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAqB,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEzE;;;;;GAKG;AACH,SAAS,WAAW,CAAC,GAAY,EAAE,KAAa;IAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,UAAU,CAAC,GAAG,KAAK,GAAG,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,CAAC,kDAAkD,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,UAAU,CAAC,4DAA4D,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC7C,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE;YACP,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC5B,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;YAC1C,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC1B;KACF,CAAC,CAAC;IAEH,IAAI,OAAgC,CAAC;IACrC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,IACE,MAAM,CAAC,QAAQ,KAAK,SAAS;YAC7B,MAAM,CAAC,OAAO,KAAK,SAAS;YAC5B,MAAM,CAAC,SAAS,KAAK,SAAS;YAC9B,MAAM,CAAC,KAAK,KAAK,IAAI,EACrB,CAAC;YACD,UAAU,CAAC,oEAAoE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,YAAY,EAAE,uBAAuB,MAAM,CAAC,KAAK,uCAAuC,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACnE,UAAU,CAAC,0DAA0D,CAAC,CAAC;QACzE,CAAC;QACD,6EAA6E;QAC7E,wEAAwE;QACxE,OAAO,GAAG;YACR,GAAG,WAAW,CACZ;gBACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;oBAC9B,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE;oBAC7D,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,EACD,EAAE,CACH;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,YAAY,EAAE,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAEhG,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,iBAAiB,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,wEAAwE;QACxE,0DAA0D;QAC1D,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAI,QAAQ,CAAC,IAAI,CAAC,KAAuC,EAAE,IAAI,CAAC;IAC1E,MAAM,OAAO,GAAI,QAAQ,CAAC,IAAI,CAAC,KAA0C,EAAE,OAAO,CAAC;IACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,gBAAgB,EAAE,OAAO,IAAI,WAAW,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,mBAAmB,EAAE,kCAAkC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,eAAe,EAAE,OAAO,IAAI,8BAA8B,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,eAAe,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AACnF,CAAC"}

package/dist/cli/commands/clean.js

@@ -0,0 +1,48 @@
+// otacon clean [--all] — archive working state for ended sessions (DESIGN.md
+// §6, §12): for every terminal session in this repo (--all: everywhere), it
+// calls DELETE /api/sessions/:id; the daemon deregisters the session and
+// archives its .otacon/<id>/ dir to .otacon/archive/<id>/, reporting the
+// destination as `archivedTo` (the review UI drives the same route — terminal
+// archives, non-terminal hard-deletes). Committed artifacts under docs/plans/
+// are never touched (DECISIONS.md "clean: daemon deregisters and archives").
+import { parseArgs } from "node:util";
+import { TERMINAL_STATUSES } from "../../shared/types.js";
+import { api, ensureDaemon } from "../client.js";
+import { notice, printJson } from "../output.js";
+import { findRepoRoot, listSessions, realpathOr } from "../session.js";
+export async function cleanCommand(argv) {
+    const { values } = parseArgs({
+        args: argv,
+        options: { all: { type: "boolean", default: false } },
+    });
+    await ensureDaemon();
+    const cwd = realpathOr(process.cwd());
+    const root = findRepoRoot(cwd) ?? cwd;
+    // Only terminal (ended) sessions qualify — approved, plus implemented /
+    // implement_failed once a build finishes (DESIGN.md §12). A terminal session
+    // stays terminal, so clean's DELETE always takes the daemon's archive branch,
+    // never the non-terminal hard-delete one — a racing status change cannot
+    // sweep a live (including `implementing`) session.
+    const targets = (await listSessions()).filter((s) => TERMINAL_STATUSES.includes(s.status) && (values.all || realpathOr(s.repo) === root));
+    const cleaned = [];
+    for (const session of targets) {
+        const response = await api("DELETE", `/api/sessions/${session.id}`);
+        if (response.status !== 200) {
+            notice(`skipping ${session.id}: ${JSON.stringify(response.body)}`);
+            continue;
+        }
+        const pending = response.body.pendingEvents;
+        if (typeof pending === "number" && pending > 0) {
+            notice(`${session.id}: ${pending} undelivered event(s) archived with it`);
+        }
+        // The daemon archived the dir and tells us where (null only if it was gone).
+        const archivedTo = response.body.archivedTo ?? null;
+        cleaned.push({ session: session.id, title: session.title, repo: session.repo, archivedTo });
+    }
+    if (cleaned.length === 0) {
+        notice(values.all ? "no ended sessions to clean" : `no ended sessions for ${root} (try --all)`);
+    }
+    printJson({ ok: true, cleaned });
+    return 0;
+}
+//# sourceMappingURL=clean.js.map

package/dist/cli/commands/clean.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clean.js","sourceRoot":"","sources":["../../../src/cli/commands/clean.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,yEAAyE;AACzE,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAE7E,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEvE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;KACtD,CAAC,CAAC;IACH,MAAM,YAAY,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;IACtC,wEAAwE;IACxE,6EAA6E;IAC7E,8EAA8E;IAC9E,yEAAyE;IACzE,mDAAmD;IACnD,MAAM,OAAO,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAC3F,CAAC;IAEF,MAAM,OAAO,GAAkF,EAAE,CAAC;IAClG,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,iBAAiB,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,CAAC,YAAY,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnE,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;QAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,KAAK,OAAO,wCAAwC,CAAC,CAAC;QAC5E,CAAC;QACD,6EAA6E;QAC7E,MAAM,UAAU,GAAI,QAAQ,CAAC,IAAI,CAAC,UAAwC,IAAI,IAAI,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,yBAAyB,IAAI,cAAc,CAAC,CAAC;IAClG,CAAC;IACD,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/cli/commands/doctor.js

@@ -0,0 +1,86 @@
+// otacon doctor — verify the machine setup (DESIGN.md §16): Node version,
+// daemon boots and the port is free-or-ours (ensureDaemon does both), wrapper
+// presence per agent, Stop hook registration, Tailscale state. Hard checks
+// (node, daemon) fail the run with exit 1; everything optional — wrappers for
+// agents the user may not use, phone access — is a warning, never a failure.
+import { existsSync, readFileSync } from "node:fs";
+import { parseArgs } from "node:util";
+import { otaconPort } from "../../shared/paths.js";
+import { ensureDaemon } from "../client.js";
+import { CODEX_BEGIN, MANAGED_MARKER } from "../install/assets.js";
+import { claudeHookScriptPath, claudeSkillPath, codexAgentsPath, opencodeSkillPath, settingsRegisterStopHook, } from "../install/locations.js";
+import { findTailscale, tailscaleStatus } from "../install/tailscale.js";
+import { CliError, printJson } from "../output.js";
+function wrapperCheck(name, path, marker) {
+    const present = existsSync(path) && readFileSync(path, "utf8").includes(marker);
+    return present
+        ? { name, status: "ok", detail: path }
+        : {
+            name,
+            status: "warn",
+            detail: `wrapper not installed at ${path}; run otacon install --agent ${name.replace("wrapper-", "")}`,
+        };
+}
+function stopHookCheck() {
+    const name = "stop-hook";
+    if (settingsRegisterStopHook()) {
+        return { name, status: "ok", detail: claudeHookScriptPath() };
+    }
+    return {
+        name,
+        status: "warn",
+        detail: "Stop hook not registered; run otacon install --agent claude --hooks",
+    };
+}
+function tailscaleCheck() {
+    const name = "tailscale";
+    const bin = findTailscale();
+    if (bin === undefined) {
+        return {
+            name,
+            status: "warn",
+            detail: "tailscale CLI not found — phone access is optional (DESIGN.md §11; otacon expose)",
+        };
+    }
+    const status = tailscaleStatus(bin);
+    if (status?.backendState === "Running") {
+        return { name, status: "ok", detail: `${bin} (${status.dnsName ?? "no MagicDNS name"})` };
+    }
+    return {
+        name,
+        status: "warn",
+        detail: `tailscale backend is ${status?.backendState ?? "unreachable"}; run \`tailscale up\` before otacon expose`,
+    };
+}
+export async function doctorCommand(argv) {
+    parseArgs({ args: argv, options: {} });
+    const checks = [];
+    const nodeMajor = Number(process.versions.node.split(".")[0]);
+    checks.push(nodeMajor >= 20
+        ? { name: "node", status: "ok", detail: `node ${process.versions.node}` }
+        : { name: "node", status: "fail", detail: `node ${process.versions.node} — otacon needs >=20` });
+    try {
+        const health = await ensureDaemon();
+        checks.push({
+            name: "daemon",
+            status: "ok",
+            detail: `otacond ${health.version} (pid ${health.pid}) on port ${otaconPort()}`,
+        });
+    }
+    catch (error) {
+        checks.push({
+            name: "daemon",
+            status: "fail",
+            detail: error instanceof CliError ? `${error.code}: ${error.message}` : String(error),
+        });
+    }
+    checks.push(wrapperCheck("wrapper-claude", claudeSkillPath(), MANAGED_MARKER));
+    checks.push(wrapperCheck("wrapper-codex", codexAgentsPath(), CODEX_BEGIN));
+    checks.push(wrapperCheck("wrapper-opencode", opencodeSkillPath(), MANAGED_MARKER));
+    checks.push(stopHookCheck());
+    checks.push(tailscaleCheck());
+    const ok = checks.every((c) => c.status !== "fail");
+    printJson({ ok, checks });
+    return ok ? 0 : 1;
+}
+//# sourceMappingURL=doctor.js.map