OpenRig v0.6.3 — Managed Claude messaging repair

Published: @openrig/cli@0.6.3 is available on npm as latest.

npm install -g @openrig/cli@0.6.3

OpenRig v0.6.3 — Managed Claude messaging repair

This patch repairs a 0.6.2 regression that refused messages to running Claude
Code seats launched with an explicit permission mode. It also fixes snapshot
helper cleanup and interference from archived rigs with duplicate names.

Managed Claude seats can receive messages

OpenRig's managed launch can leave a shell wrapper in front of Claude Code.
The delivery check previously treated that wrapper as a bare shell and refused
rig send, even though Claude was running beneath it.

The check now recognizes a stable, foreground Claude process descended from the
bound pane, with the expected native session identity. A bare shell alone still
does not qualify. Fork arguments that identify the parent rather than the
current occupant remain insufficient evidence.

Thanks to @dmelo for the detailed
#197 report, addressed by
#220.

Snapshot helpers and archived rigs

• Clean up a newly created snapshot helper when its input target cannot be
  established and its ownership can still be proven. This prevents unusable
  rigged-refresh-* helpers accumulating on repeated attempts. If ownership
  cannot be established, preserve the session and report the limitation.
  Thanks to @z4cc for
  #188, addressed by
  #189.
• Exclude archived rigs from seat-reference resolution, prefer unarchived
  delivery targets, and preserve another live seat's session and queue work
  when removing a stale duplicate node. Removal reports whose session it kept.
  Thanks to @Farkinell for
  #174, addressed by
  #181.

Proof media and repository checks

rig proof add rejects binary files supplied as artifact text, requires a
Markdown artifact name, and requires --replace before overwriting an existing
artifact. Attach screenshots and other binary evidence with --media. This
prevents a proof write from replacing media with a Markdown body
(#177). Thanks to
@agammann for the fix and
@korallis for reporting
#170.

Repository script tests now run serially because packaging tests rebuild daemon
output that other tests import. This removes the reproduced shared-output race
without weakening those tests
(#221).

Upgrade and verification scope

Node.js 22 and 24 remain supported. This patch changes no dependencies, engine
requirements or database migrations. Use the
existing upgrade procedure.

The fixes have source reviews and focused regression coverage. The Claude
process checks use synthetic process metadata; an installed Claude/Fedora send
has not been demonstrated by that evidence. These checks do not establish
native receipt, automatic recovery, or protection against a process exiting
between verification and input.

Release commit: 8b5e948807e258aa659862064258e41da9e3eaa9.