Agent Skills › mvschwarz/openrig › rig-lifecycle

rig-lifecycle

GitHub

处理 Rig 生命周期操作（创建、启动、恢复等）及故障模式分析，确保状态一致性与恢复可靠性。

skills/_canonical/core/rig-lifecycle/SKILL.md mvschwarz/openrig

Trigger Scenarios

执行 rig up/down/restore/resume 等操作分析 rig ps 输出或设计生命周期场景证明

Install

npx skills add mvschwarz/openrig --skill rig-lifecycle -g -y

More Options

Non-standard path

npx skills add https://github.com/mvschwarz/openrig/tree/main/skills/_canonical/core/rig-lifecycle -g -y

Use without installing

npx skills use mvschwarz/openrig@rig-lifecycle

指定 Agent (Claude Code)

npx skills add mvschwarz/openrig --skill rig-lifecycle -a claude-code -g -y

安装 repo 全部 skill

npx skills add mvschwarz/openrig --all -g -y

预览 repo 内 skill

npx skills add mvschwarz/openrig --list

SKILL.md

Frontmatter

{
    "name": "rig-lifecycle",
    "metadata": {
        "openrig": {
            "stage": "factory-approved",
            "sibling_skills": [
                "topology-mutation-and-seat-management",
                "seat-scaling-and-specialization",
                "cross-host-rig-commands",
                "sidecar-operator",
                "rig-bundles-and-shareable-artifacts",
                "specification-system",
                "extension-and-user-workspace"
            ]
        },
        "cli_surfaces_referenced": [
            "destroy",
            "down",
            "ps",
            "release",
            "restore",
            "restore-check",
            "resume",
            "snapshot",
            "unclaim",
            "up"
        ]
    },
    "description": "Use when reasoning about the rig lifecycle operations family (create \/ start \/ stop \/ resume \/ restore \/ snapshot \/ release \/ unclaim \/ destroy), reading or trusting `rig ps` \/ lifecycle projections after recovery, or designing proof for a lifecycle scenario. Covers the 4 failure modes (auto-restore creates partial rig; projections report healthier than reality; provider auth treated as impl work; resume succeeds for one runtime fails another) plus the restore-honesty rule (failed resume is FAILED loudly — no auto fresh fallback)."
}

Rig Lifecycle

The family of operations that create, start, stop, resume, restore, snapshot, release, unclaim, and destroy OpenRig-managed topologies. Includes the user story after reboot: "bring my work back without turning a clean recovery into a cleanup project."

If lifecycle is brittle, every higher-level primitive inherits that brittleness. Queue, workflow, seat continuity, cross-host operation, and RSI all assume that rigs and seats can be restored into known states.

Use this when

Operating rig up / down / restore / resume / snapshot / release / unclaim / destroy
Reading rig ps after a reboot or recovery and deciding what to trust
Designing proof for a lifecycle scenario (clean start / warm resume / host reboot / provider auth loss / partial boot / operator recovery)
Reasoning about restore-outcome semantics (resumed / rebuilt / fresh / failed / attention_required)
Auditing whether a lifecycle proof is in-process bedrock vs requires real reboot evidence

Don't use this when

The operation is single-command and deterministic — use openrig-user skill for CLI surface
The work is operator-level configuration of OpenRig itself — use openrig-operator
The work is rig spec authoring — use openrig-architect

Failure modes (4)

Auto-restore creates a partially restored rig that must be cleaned up before real recovery. Partial restore looks like recovery but isn't; cleanup-before-recovery becomes the actual workload.
rig ps or lifecycle projections report a healthier state than the runtime actually has. Projections are summaries; the runtime is truth. Don't trust projections silently.
Provider auth is unavailable after reboot and the system treats that as implementation work instead of a human/environment decision. Auth issues are environmental; route to human.
Resume succeeds for one runtime/provider but fails for another scenario that was never tested. Per-runtime parity assumptions break silently; matrix proof catches them.

Restore-honesty rule (load-bearing)

Failed resume is FAILED loudly. No automatic fresh fallback. Fresh launch is explicit follow-up only. This is enforced architecturally at the daemon level (per architecture.md §7 rule 15).

The locked restore-outcome vocabulary:

Outcome	Meaning
`resumed`	Native runtime resumed the same conversation
`rebuilt`	New process assembled from artifacts (`session_source: mode: rebuild`)
`fresh`	New process with no prior continuity
`failed`	Restore attempted and failed; no automatic fallback
`attention_required`	Recoverable blocker (provider auth refused, etc.); needs operator action
`n-a`	Not applicable (terminal nodes, etc.)

Codex auth-refusal returns attention_required (recoverable); Claude looksLikeClaudeLoginPrompt returns failed/login_required (terminal). Cross-runtime alignment is an open follow-up question.

Proof standard

Lifecycle proof should include real reboot or VM-reboot evidence, not only daemon-unit evidence. The minimum useful matrix covers:

Scenario	What it proves
Clean start	Boot from spec into known state
Warm resume	`rig down` → `rig up <name>` resumes seats
Host reboot / tmux socket absence	Recovery from lost tmux connection
Provider auth loss	Codex/Claude auth refusal handled honestly
Partial boot / partial failure	Some seats up, some failed; honest reporting
Intentional operator recovery	Operator-initiated restore from snapshot

Tier 1: in-process bedrock (daemon-unit evidence). Tier 2: real reboot or disposable Tart VM. Tier 1 alone is not lifecycle proof; it's bedrock.

Default policy is part of the primitive

Treat default policy as part of the primitive, not an afterthought. Lifecycle defaults that are too optimistic for the reliability level actually proven create silent harm:

auto-restore defaults that mask failure modes
Implicit fresh-fallback that hides resume failure
Permissive verification that doesn't distinguish honest success from "appeared to work"

Total-Host Restore Product Rail v2

The rail sequences restore truth into four rungs:

fully_restored is a Rung 3 execution rollup
"fully back" is reserved for Rung 4 only

Naming discipline matters. "Fully restored" and "fully back" are different claims; don't conflate.

rig-lifecycle

rig-lifecycle

Trigger Scenarios

Install

SKILL.md

Rig Lifecycle

Use this when

Don't use this when

Failure modes (4)

Restore-honesty rule (load-bearing)

Proof standard

Default policy is part of the primitive

Total-Host Restore Product Rail v2

See also

Version History

Same Skill Collection

Metadata

文库