@cotal-ai/cli 0.11.0 → 0.11.2

package/dist/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgD,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAuD7F,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B;;;oCAGgC;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;uFAEuF;AACvF,wBAAsB,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4DxG"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgD,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AA8D7F,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B;;;oCAGgC;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;uFAEuF;AACvF,wBAAsB,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqExG"}

package/dist/command.js

@@ -1,6 +1,6 @@
 import { commandUsage, parseCommandArgs } from "@cotal-ai/core";
-import { c } from "./ui.js";
-import { isExtensionStub, materializeExtensionCommand, overlayExtensions, setCommandSurface } from "./ext-loader.js";
+import { c, staleStoreHint } from "./ui.js";
+import { isExtensionStub, materializeExtension, materializeExtensionCommand, overlayExtensions, setCommandSurface, setInstalledExtensionsEnabled, } from "./ext-loader.js";
 /** Display order for the help groups — an explicit ranking, NOT registration order: modules
  *  self-register on import and the dev runner (tsx) doesn't guarantee entry-import evaluation
  *  order, so the daemon surface could otherwise print above Setup. Groups not listed here
@@ -54,6 +54,7 @@ function isArgError(e) {
  *  The single entry point a composition root calls — no hardcoded command list.
  *  Parsing happens HERE, from the command's declared specs; `run` gets parsed args. */
 export async function runCli(registry, argv, opts = {}) {
+    setInstalledExtensionsEnabled(Boolean(opts.extensions));
     let commands;
     try {
         commands = opts.extensions ? overlayExtensions(registry) : registry.all("command");
@@ -96,7 +97,12 @@ export async function runCli(registry, argv, opts = {}) {
         }
     }
     try {
-        await cmd.run(parseCommandArgs(cmd, rest));
+        const parsed = parseCommandArgs(cmd, rest);
+        if (opts.extensions && cmd.requiredExtensions) {
+            for (const ref of cmd.requiredExtensions(parsed))
+                await materializeExtension(ref);
+        }
+        await cmd.run(parsed);
     }
     catch (e) {
         // A bad flag/arg prints the command's help, not a stack trace. Trim node's verbose
@@ -113,6 +119,11 @@ export async function runCli(registry, argv, opts = {}) {
         // COTAL_DEBUG for diagnosis.
         const msg = e instanceof Error ? e.message : String(e);
         console.error(c.red(`✗ ${msg}`));
+        // Known failure signatures get a one-line operator hint (e.g. a stale-store durable
+        // collision names the `cotal clean` reset) - the error itself stays verbatim.
+        const hint = staleStoreHint(msg);
+        if (hint)
+            console.error(c.dim(`  ↳ ${hint}`));
         if (process.env.COTAL_DEBUG && e instanceof Error && e.stack)
             console.error(c.dim(e.stack));
         process.exit(1);

package/dist/command.js.map

@@ -1 +1 @@
-{"version":3,"file":"command.js","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA+B,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,SAAS,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAErH;;;4EAG4E;AAC5E,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAEjG,SAAS,IAAI,CAAC,QAAmB;IAC/B,+FAA+F;IAC/F,kFAAkF;IAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;QAClC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,2CAA2C,CAAC;IACxE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;sDACsD;AACtD,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,IAAI,GAAI,CAAuB,EAAE,IAAI,CAAC;IAC5C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACvE,CAAC;AAWD;;uFAEuF;AACvF,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,QAAkB,EAAE,IAAc,EAAE,OAAsB,EAAE;IACvF,IAAI,QAAmB,CAAC;IACxB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAU,SAAS,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,2FAA2F;QAC3F,6EAA6E;QAC7E,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,gEAAgE;IAC7F,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,8FAA8F;IAC9F,6FAA6F;IAC7F,2FAA2F;IAC3F,iEAAiE;IACjE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnF,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IACD,4FAA4F;IAC5F,wFAAwF;IACxF,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,2BAA2B,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,mFAAmF;QACnF,uFAAuF;QACvF,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,GAAG,GAAI,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;YACjC,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,4FAA4F;QAC5F,6FAA6F;QAC7F,sFAAsF;QACtF,6BAA6B;QAC7B,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA+B,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,2BAA2B,EAC3B,iBAAiB,EACjB,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,iBAAiB,CAAC;AAEzB;;;4EAG4E;AAC5E,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAEjG,SAAS,IAAI,CAAC,QAAmB;IAC/B,+FAA+F;IAC/F,kFAAkF;IAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;QAClC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,2CAA2C,CAAC;IACxE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;sDACsD;AACtD,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,IAAI,GAAI,CAAuB,EAAE,IAAI,CAAC;IAC5C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACvE,CAAC;AAWD;;uFAEuF;AACvF,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,QAAkB,EAAE,IAAc,EAAE,OAAsB,EAAE;IACvF,6BAA6B,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACxD,IAAI,QAAmB,CAAC;IACxB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAU,SAAS,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,2FAA2F;QAC3F,6EAA6E;QAC7E,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,gEAAgE;IAC7F,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,8FAA8F;IAC9F,6FAA6F;IAC7F,2FAA2F;IAC3F,iEAAiE;IACjE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnF,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IACD,4FAA4F;IAC5F,wFAAwF;IACxF,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,2BAA2B,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC;gBAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,mFAAmF;QACnF,uFAAuF;QACvF,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,GAAG,GAAI,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;YACjC,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,4FAA4F;QAC5F,6FAA6F;QAC7F,sFAAsF;QACtF,6BAA6B;QAC7B,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,oFAAoF;QACpF,8EAA8E;QAC9E,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/clean.d.ts

@@ -0,0 +1,40 @@
+import { type CompletionResult, type ParsedArgs } from "@cotal-ai/core";
+/** `cotal clean <history|store|all>` - one configurable cleanup verb.
+ *   - `history`: purge the retained message backlog on the RUNNING broker (CHAT, plus DMs with
+ *     `--dms`) via the least-privilege purger cred. `cotal history clear` is a thin alias.
+ *   - `store`: delete the STOPPED mesh's JetStream store (`.cotal/nats` or `--store-dir`) - streams,
+ *     durables, and messages. The reset for stale on-disk state (e.g. durables minted by an older,
+ *     incompatible protocol generation).
+ *   - `all`: `store` plus the space identity (`.cotal/auth`) and every local cred derived from it;
+ *     the next `cotal up` mints a fresh identity.
+ *  `history` needs the mesh UP (it is a live purge); `store`/`all` need it DOWN (files can't be
+ *  deleted under a live server) and refuse loudly while any recorded process is still alive.
+ *  Personas (`.cotal/agents`) are source and are never touched. */
+export declare function clean(args: ParsedArgs): Promise<void>;
+/** The live-purge half, shared with the `cotal history clear` alias. Resolves the running mesh (from
+ *  any dir) + a least-privilege PURGER cred - `--creds` is a raw off-registry connect. Purge-only and
+ *  destructive, so it mints exactly the purge grant (STREAM.PURGE on CHAT + DM), not the broad
+ *  operator cred. In USER MODE the purge rides a one-shot "purger" VIEW bearer, exchange-gated on
+ *  ledger scope "admin" (the refusal names the exact re-grant). */
+export declare function purgeHistory(values: {
+    server?: string;
+    space?: string;
+    creds?: string;
+    dms?: boolean;
+}): Promise<void>;
+/** The recorded mesh process still alive under this root, as a "label (pid N)" string - or
+ *  undefined when everything is stopped. A stale pidfile (recorded pid no longer alive) does not
+ *  block: a crashed broker must not wedge its own cleanup. Liveness rides the shared hardened
+ *  probe (`pidfileState`): pid > 0 only, EPERM counts as alive. */
+export declare function liveMeshProcess(root: string): string | undefined;
+/** Delete the stopped mesh's local state and return what was removed (paths relative to the root).
+ *  `store`: the JetStream store directory. `all` adds the space identity (`.cotal/auth`), the
+ *  locally persisted creds/markers tied to it - all invalid once the identity regenerates, and
+ *  re-minted by the next fresh `cotal up` - plus crash residue a normal `down` would have swept
+ *  (stale pidfiles, `run/`). Callers guard liveness first (`liveMeshProcess`). */
+export declare function removeLocalState(root: string, opts: {
+    includeAuth: boolean;
+    storeDir?: string;
+}): string[];
+export declare function cleanComplete(argv: string[]): CompletionResult;
+//# sourceMappingURL=clean.d.ts.map

package/dist/commands/clean.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clean.d.ts","sourceRoot":"","sources":["../../src/commands/clean.ts"],"names":[],"mappings":"AAEA,OAAO,EAAqB,KAAK,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAU3F;;;;;;;;;;mEAUmE;AACnE,wBAAsB,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA8B3D;AAED;;;;mEAImE;AACnE,wBAAsB,YAAY,CAAC,MAAM,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAY5H;AAED;;;mEAGmE;AACnE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMhE;AAED;;;;kFAIkF;AAClF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,WAAW,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,EAAE,CAgC1G;AAaD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAG9D"}

package/dist/commands/clean.js

@@ -0,0 +1,138 @@
+import { existsSync, rmSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { clearSpaceHistory } from "@cotal-ai/core";
+import { removeMeshesByRoot, resolveSpace } from "@cotal-ai/workspace";
+import { connectOrExit, userViewAuthOrExit } from "../lib/connect.js";
+import { c } from "../ui.js";
+import { cotalRoot } from "../lib/paths.js";
+import { pidfileState, pidfileTargets } from "./down.js";
+const TARGETS = ["history", "store", "all"];
+/** `cotal clean <history|store|all>` - one configurable cleanup verb.
+ *   - `history`: purge the retained message backlog on the RUNNING broker (CHAT, plus DMs with
+ *     `--dms`) via the least-privilege purger cred. `cotal history clear` is a thin alias.
+ *   - `store`: delete the STOPPED mesh's JetStream store (`.cotal/nats` or `--store-dir`) - streams,
+ *     durables, and messages. The reset for stale on-disk state (e.g. durables minted by an older,
+ *     incompatible protocol generation).
+ *   - `all`: `store` plus the space identity (`.cotal/auth`) and every local cred derived from it;
+ *     the next `cotal up` mints a fresh identity.
+ *  `history` needs the mesh UP (it is a live purge); `store`/`all` need it DOWN (files can't be
+ *  deleted under a live server) and refuse loudly while any recorded process is still alive.
+ *  Personas (`.cotal/agents`) are source and are never touched. */
+export async function clean(args) {
+    const target = args.positionals[0];
+    const values = args.values;
+    if (!target || !TARGETS.includes(target))
+        return usage();
+    if (!values.force) {
+        console.error(c.red(`refusing to clean ${target} without --force`));
+        console.error(c.dim(`usage: ${USAGE}`));
+        process.exit(1);
+    }
+    if (target === "history")
+        return purgeHistory(values);
+    const root = cotalRoot();
+    const running = liveMeshProcess(root);
+    if (running) {
+        console.error(c.red(`✗ the mesh is still running (${running}) - stop it first: \`cotal down\`, then \`cotal clean ${target}\``));
+        process.exit(1);
+    }
+    const removed = removeLocalState(root, { includeAuth: target === "all", storeDir: values["store-dir"] });
+    // Full reset also drops the mesh from the machine registry (and the `current` pointer),
+    // keyed by ROOT - see removeMeshesByRoot for why a space-name key would be wrong. A normal
+    // `down` already did this; after a crash it is exactly the ghost entry to clear.
+    if (target === "all")
+        removeMeshesByRoot(root);
+    if (removed.length === 0) {
+        console.log(c.dim("nothing to clean - no local state found"));
+        return;
+    }
+    for (const path of removed)
+        console.log(c.green(`✓ removed ${path}`));
+    if (target === "all")
+        console.log(c.dim("a fresh space identity is minted on the next `cotal up`"));
+}
+/** The live-purge half, shared with the `cotal history clear` alias. Resolves the running mesh (from
+ *  any dir) + a least-privilege PURGER cred - `--creds` is a raw off-registry connect. Purge-only and
+ *  destructive, so it mints exactly the purge grant (STREAM.PURGE on CHAT + DM), not the broad
+ *  operator cred. In USER MODE the purge rides a one-shot "purger" VIEW bearer, exchange-gated on
+ *  ledger scope "admin" (the refusal names the exact re-grant). */
+export async function purgeHistory(values) {
+    const conn = await connectOrExit(values, "purger");
+    const user = conn.bearer ? await userViewAuthOrExit(conn, "purger") : undefined;
+    const { server, space, creds } = conn;
+    const result = await clearSpaceHistory({
+        servers: server,
+        space,
+        ...(user ? { bearer: user.bearer, sentinelCreds: user.sentinelCreds } : { creds }),
+        includeDms: values.dms,
+    });
+    const dm = result.dm === undefined ? "" : `, ${result.dm} DM message${result.dm === 1 ? "" : "s"}`;
+    console.log(c.green(`✓ cleared ${result.chat} channel message${result.chat === 1 ? "" : "s"}${dm} from "${space}"`));
+}
+/** The recorded mesh process still alive under this root, as a "label (pid N)" string - or
+ *  undefined when everything is stopped. A stale pidfile (recorded pid no longer alive) does not
+ *  block: a crashed broker must not wedge its own cleanup. Liveness rides the shared hardened
+ *  probe (`pidfileState`): pid > 0 only, EPERM counts as alive. */
+export function liveMeshProcess(root) {
+    for (const [file, label] of pidfileTargets(resolveSpace(root))) {
+        const s = pidfileState(join(root, ".cotal", file));
+        if (s.live)
+            return `${label}, pid ${s.pid}`;
+    }
+    return undefined;
+}
+/** Delete the stopped mesh's local state and return what was removed (paths relative to the root).
+ *  `store`: the JetStream store directory. `all` adds the space identity (`.cotal/auth`), the
+ *  locally persisted creds/markers tied to it - all invalid once the identity regenerates, and
+ *  re-minted by the next fresh `cotal up` - plus crash residue a normal `down` would have swept
+ *  (stale pidfiles, `run/`). Callers guard liveness first (`liveMeshProcess`). */
+export function removeLocalState(root, opts) {
+    const removed = [];
+    const rm = (path, label) => {
+        if (!existsSync(path))
+            return;
+        rmSync(path, { recursive: true, force: true });
+        removed.push(label);
+    };
+    // The space must be read before `.cotal/auth` goes - it names the auth service's pidfile.
+    const space = resolveSpace(root);
+    const storeDir = opts.storeDir ? resolve(opts.storeDir) : join(root, ".cotal", "nats");
+    rm(storeDir, opts.storeDir ? storeDir : ".cotal/nats (JetStream store)");
+    if (opts.includeAuth) {
+        rm(join(root, ".cotal", "auth"), ".cotal/auth (space identity + creds)");
+        // Creds/records signed by (or tied to) the deleted identity: stale the moment it is gone.
+        // The fresh-`up` path re-mints every one of these (keep in sync with `provisionMembershipCreds`
+        // in up.ts); sweeping them keeps `doctor auth` honest in between and guarantees no
+        // old-operator material survives the reset.
+        for (const f of [
+            "delivery.creds",
+            "manager.delivery-aware",
+            "membership-observer.creds",
+            "membership-rw.creds",
+            "connection-evictor.creds",
+            "membership.json",
+            "renewal.json",
+        ])
+            rm(join(root, ".cotal", f), `.cotal/${f}`);
+        // Crash residue: after a clean `down` none of this exists; after a crash the dead pidfiles and
+        // transient launch artifacts are exactly the leftovers a "full local reset" must not keep.
+        for (const [file] of pidfileTargets(space))
+            rm(join(root, ".cotal", file), `.cotal/${file} (stale pidfile)`);
+        rm(join(root, ".cotal", "run"), ".cotal/run (launch artifacts)");
+    }
+    return removed;
+}
+const USAGE = "cotal clean <history|store|all> --force [--dms] [--space <s>] [--server <url>] [--creds <path>] [--store-dir <dir>]";
+function usage() {
+    console.error(c.red(`usage: ${USAGE}`));
+    console.error(c.dim("  history  purge the message backlog on the running broker (--dms to include DMs)"));
+    console.error(c.dim("  store    delete the stopped mesh's JetStream store (.cotal/nats)"));
+    console.error(c.dim("  all      store + the space identity (.cotal/auth) - full local reset"));
+    process.exit(1);
+}
+export function cleanComplete(argv) {
+    if (argv.length <= 1)
+        return { items: TARGETS.map((value) => ({ value })), directive: "nofiles" };
+    return { items: [], directive: "nofiles" };
+}
+//# sourceMappingURL=clean.js.map

package/dist/commands/clean.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clean.js","sourceRoot":"","sources":["../../src/commands/clean.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAA0C,MAAM,gBAAgB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEzD,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAGrD;;;;;;;;;;mEAUmE;AACnE,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAgB;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAuB,CAAC;IACzD,MAAM,MAAM,GAAG,IAAI,CAAC,MAEnB,CAAC;IACF,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,EAAE,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,MAAM,kBAAkB,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAEtD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,gCAAgC,OAAO,yDAAyD,MAAM,IAAI,CAAC,CAAC,CAAC;QACjI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,KAAK,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACzG,wFAAwF;IACxF,2FAA2F;IAC3F,iFAAiF;IACjF,IAAI,MAAM,KAAK,KAAK;QAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC,CAAC;AACtG,CAAC;AAED;;;;mEAImE;AACnE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAA0E;IAC3G,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,OAAO,EAAE,MAAM;QACf,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QAClF,UAAU,EAAE,MAAM,CAAC,GAAG;KACvB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,cAAc,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACnG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,IAAI,mBAAmB,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC;AACvH,CAAC;AAED;;;mEAGmE;AACnE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;kFAIkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAiD;IAC9F,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAC9B,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC,CAAC;IACF,0FAA0F;IAC1F,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvF,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;IACzE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,sCAAsC,CAAC,CAAC;QACzE,0FAA0F;QAC1F,gGAAgG;QAChG,mFAAmF;QACnF,4CAA4C;QAC5C,KAAK,MAAM,CAAC,IAAI;YACd,gBAAgB;YAChB,wBAAwB;YACxB,2BAA2B;YAC3B,qBAAqB;YACrB,0BAA0B;YAC1B,iBAAiB;YACjB,cAAc;SACf;YAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9C,+FAA+F;QAC/F,2FAA2F;QAC3F,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC;YAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,UAAU,IAAI,kBAAkB,CAAC,CAAC;QAC7G,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,KAAK,GACT,qHAAqH,CAAC;AAExH,SAAS,KAAK;IACZ,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAC,CAAC;IAC1G,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC,CAAC;IAC3F,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC,CAAC;IAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAClG,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC7C,CAAC"}

package/dist/commands/down.d.ts

@@ -1,7 +1,17 @@
-import { type ParsedArgs } from "@cotal-ai/core";
-/** Stop the background processes started by `cotal up --detach`: the manager, the
- *  delivery daemon, the web dashboard, and the mesh. With `-f <cotal.yaml>` (or `--run <id>`) it does
- *  an ownership-scoped teardown of a `spawn -f` deploy instead — removing ONLY what that run created
- *  (its agents + the channels it added), from the ledger, never the whole shared mesh. */
+import { type CompletionResult, type ParsedArgs } from "@cotal-ai/core";
+/** Complete selective component names without importing installed packages. */
+export declare function downComplete(argv: string[]): CompletionResult;
+/** Stop the whole local stack by default, or only named self-registered process components. The
+ *  manifest forms remain ownership-scoped deploy teardown and cannot be mixed with components. */
 export declare function down(args: ParsedArgs): Promise<void>;
+export declare const isAlive: (pid: number) => boolean;
+/** Compatibility inventory for `clean`; lifecycle commands use the registered descriptors above. */
+export declare function pidfileTargets(space: string): Array<[file: string, label: string]>;
+export type PidfileState = {
+    pid?: number;
+    live: boolean;
+    note?: string;
+};
+/** Shared hardened pid probe: positive integers only, and EPERM means the process exists. */
+export declare function pidfileState(path: string): PidfileState;
 //# sourceMappingURL=down.d.ts.map

package/dist/commands/down.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"down.d.ts","sourceRoot":"","sources":["../../src/commands/down.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAOjD;;;0FAG0F;AAC1F,wBAAsB,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAsC1D"}
+{"version":3,"file":"down.d.ts","sourceRoot":"","sources":["../../src/commands/down.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAaxE,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAS7D;AAED;kGACkG;AAClG,wBAAsB,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA6E1D;AAOD,eAAO,MAAM,OAAO,GAAI,KAAK,MAAM,KAAG,OAErC,CAAC;AA4FF,oGAAoG;AACpG,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAQlF;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1E,6FAA6F;AAC7F,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAOvD"}

package/dist/commands/down.js

@@ -1,97 +1,232 @@
-import { existsSync, readFileSync, rmSync } from "node:fs";
+import { closeSync, existsSync, openSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
 import {} from "@cotal-ai/core";
-import { clearCurrent, getCurrent, removeMesh } from "@cotal-ai/workspace";
+import { localProcessPath, removeMeshesByRoot, } from "@cotal-ai/workspace";
+import { extensionNames, localProcessSurface } from "../ext-loader.js";
 import { c } from "../ui.js";
-import { cotalPath } from "../lib/paths.js";
+import { cotalRoot } from "../lib/paths.js";
 import { resolveSpace } from "../lib/status.js";
 import { downManifest } from "./down-manifest.js";
-/** Stop the background processes started by `cotal up --detach`: the manager, the
- *  delivery daemon, the web dashboard, and the mesh. With `-f <cotal.yaml>` (or `--run <id>`) it does
- *  an ownership-scoped teardown of a `spawn -f` deploy instead — removing ONLY what that run created
- *  (its agents + the channels it added), from the ledger, never the whole shared mesh. */
+/** Complete selective component names without importing installed packages. */
+export function downComplete(argv) {
+    if (argv.some((word) => word === "-f" || word === "--file" || word === "--run"))
+        return { items: [], directive: "nofiles" };
+    if ((argv[argv.length - 1] ?? "").startsWith("-"))
+        return { items: [], directive: "nofiles" };
+    const used = new Set(argv.slice(0, -1).filter((word) => !word.startsWith("-")));
+    return {
+        items: extensionNames("local-process").filter((name) => !used.has(name)).map((value) => ({ value })),
+        directive: "nofiles",
+    };
+}
+/** Stop the whole local stack by default, or only named self-registered process components. The
+ *  manifest forms remain ownership-scoped deploy teardown and cannot be mixed with components. */
 export async function down(args) {
     const values = args.values;
+    const requested = [...new Set(args.positionals)];
+    if ((values.file || values.run) && requested.length) {
+        throw new Error("component names cannot be combined with --file or --run");
+    }
     if (values.file || values.run) {
         await downManifest(values.file ?? "<run>", { run: values.run, dryRun: Boolean(values["dry-run"]) });
         return;
     }
-    // The auth service's pid file is SPACE-scoped (auth-service.<space>.pid) — resolve the space
-    // first, so `down` can only ever stop THIS folder's space's daemon, never another space's.
-    const space = resolveSpace(process.cwd());
-    const targets = [
-        ["manager.pid", "manager"],
-        ["delivery.pid", "delivery daemon"],
-        [`auth-service.${encodeURIComponent(space)}.pid`, "user-auth service"],
-        ["web.pid", "web dashboard"],
-        ["nats.pid", "nats-server"],
-    ];
+    const all = localProcessSurface();
+    const known = all.map((component) => component.name).sort();
+    const unknown = requested.filter((name) => !known.includes(name));
+    if (unknown.length)
+        throw new Error(`unknown component${unknown.length > 1 ? "s" : ""} ${unknown.map((name) => JSON.stringify(name)).join(", ")} - known: ${known.join(", ")}`);
+    const selected = (requested.length ? requested.map((name) => all.find((part) => part.name === name)) : all)
+        .sort((a, b) => Number(Boolean(a.stopLast)) - Number(Boolean(b.stopLast)) || (a.order ?? 50) - (b.order ?? 50));
+    const context = { root: cotalRoot(), space: resolveSpace(process.cwd()) };
+    if (selected.some((component) => component.stopLast)) {
+        const selectedNames = new Set(selected.map((component) => component.name));
+        const dependants = all.filter((component) => !selectedNames.has(component.name) && processAlive(component, context));
+        if (dependants.length) {
+            throw new Error(`cannot stop ${selected.filter((component) => component.stopLast).map((component) => component.name).join(", ")} while ${dependants.map((component) => component.name).join(", ")} ${dependants.length === 1 ? "is" : "are"} still running - name them too, or run bare \`cotal down\``);
+        }
+    }
+    if (values["dry-run"]) {
+        const recorded = selected.filter((component) => processRecorded(component, context));
+        for (const component of recorded)
+            console.log(c.dim(`would stop ${component.label}`));
+        if (!recorded.length) {
+            const target = requested.length ? requested.join(", ") : "the local stack";
+            console.error(c.red(`Nothing running for ${target} (no recorded pidfiles).`));
+            process.exit(1);
+        }
+        console.log(c.dim("Dry run - nothing was changed. Re-run without --dry-run to stop these components."));
+        return;
+    }
     let any = false;
-    // Sequential, in declared order (manager → delivery → web → nats): the manager's graceful shutdown
-    // releases its lease OVER nats, so nats must outlive it. Each stop awaits the real exit.
-    for (const [file, label] of targets) {
-        const pidPath = cotalPath(file);
-        if (!existsSync(pidPath))
+    let allStopped = true;
+    for (const component of selected) {
+        any = processRecorded(component, context) || any;
+        if (component.stopLast && !allStopped) {
+            console.error(c.red(`✗ not stopping ${component.label} because an earlier component did not stop`));
             continue;
-        any = true;
-        await stop(pidPath, label);
+        }
+        try {
+            await stop(component, context);
+        }
+        catch (e) {
+            allStopped = false;
+            console.error(c.red(`✗ ${e.message}`));
+        }
+    }
+    if (!allStopped) {
+        console.error(c.red("✗ not cleanly stopped - keeping artifacts and the registry entry"));
+        process.exitCode = 1;
+        return;
+    }
+    for (const component of selected) {
+        for (const artifact of component.artifacts ?? [])
+            rmSync(localProcessPath(artifact, context), { force: true });
+    }
+    // The broker owns the mesh registry entry and transient whole-mesh launch material. Selective
+    // control-plane shutdown leaves both intact so `cotal up` can heal only what was stopped.
+    if (selected.some((component) => component.clearsMesh)) {
+        rmSync(join(context.root, ".cotal", "run"), { recursive: true, force: true });
+        removeMeshesByRoot(context.root);
     }
-    // Non-pid control-plane artifacts: the delivery daemon's scoped creds + the manager's delivery-aware
-    // marker. Drop them with the processes so a stale creds file / marker never lingers.
-    for (const f of ["delivery.creds", "manager.delivery-aware"])
-        rmSync(cotalPath(f), { force: true });
-    // Transient `cotal up -f` launch artifacts (launch specs + materialized runtime personas). `up -f`
-    // owns the whole mesh, so tearing it down clears all run dirs — they're never authoritative source.
-    rmSync(cotalPath("run"), { recursive: true, force: true });
-    // Drop this folder's mesh from the registry (and the `current` pointer if it was the default).
-    removeMesh(space);
-    if (getCurrent() === space)
-        clearCurrent();
     if (!any) {
-        console.error(c.red("Nothing running here (no .cotal/*.pid). Was it started with `cotal up` / `cotal setup`?"));
+        const target = requested.length ? requested.join(", ") : "the local stack";
+        console.error(c.red(`Nothing running for ${target} (no recorded pidfiles).`));
         process.exit(1);
     }
 }
-const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
-const isAlive = (pid) => {
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+const parsePid = (raw) => {
+    const pid = Number(raw.trim());
+    return Number.isInteger(pid) && pid > 0 ? pid : undefined;
+};
+export const isAlive = (pid) => {
     try {
         process.kill(pid, 0);
         return true;
     }
-    catch {
-        return false;
+    catch (e) {
+        return e.code === "EPERM";
     }
 };
-/** Stop one recorded process and AWAIT its actual exit — SIGTERM starts a graceful shutdown (a
- *  manager reaps its agents and releases its JetStream lease over NATS, which isn't instant), so
- *  returning before the process is really gone would let callers (and `up`-style smokes) race a
- *  still-dying manager. Poll the pid, escalate to SIGKILL if it overstays, then confirm it's gone. */
-async function stop(pidPath, label) {
-    const pid = Number(readFileSync(pidPath, "utf8").trim());
-    // Drop the pidfile up front so a concurrent `down` can't double-signal a reused pid.
-    rmSync(pidPath, { force: true });
-    if (!Number.isFinite(pid))
-        return;
-    try {
-        process.kill(pid, "SIGTERM");
+function processRecorded(component, context) {
+    return existsSync(localProcessPath(component.pidFile, context)) || (component.artifacts ?? []).map((artifact) => localProcessPath(artifact, context)).some(existsSync);
+}
+function processAlive(component, context) {
+    const pidPath = localProcessPath(component.pidFile, context);
+    if (!existsSync(pidPath))
+        return false;
+    const pid = parsePid(readFileSync(pidPath, "utf8"));
+    return pid !== undefined && isAlive(pid);
+}
+/** Stop one recorded process and await its actual exit before the next dependency is stopped. */
+async function stop(component, context) {
+    const pidPath = localProcessPath(component.pidFile, context);
+    const found = processRecorded(component, context);
+    if (!existsSync(pidPath))
+        return found;
+    const rawPid = readFileSync(pidPath, "utf8").trim();
+    if (rawPid.startsWith("removing:")) {
+        const owner = parsePid(rawPid.slice("removing:".length));
+        throw new Error(owner && isAlive(owner)
+            ? `${component.name} extension removal is in progress (pid ${owner})`
+            : `${component.name} has a stale extension-removal reservation at ${pidPath} - remove that file and retry`);
     }
-    catch {
-        console.log(c.dim(`${label} (pid ${pid}) was not running.`));
-        return;
+    const pid = parsePid(rawPid);
+    const marker = `${pidPath}.stopping`;
+    let markerFd;
+    for (;;) {
+        try {
+            markerFd = openSync(marker, "wx", 0o600);
+            writeFileSync(markerFd, String(process.pid));
+            break;
+        }
+        catch (e) {
+            if (markerFd !== undefined) {
+                closeSync(markerFd);
+                rmSync(marker, { force: true });
+                markerFd = undefined;
+            }
+            if (e.code !== "EEXIST")
+                throw e;
+            let owner;
+            try {
+                owner = parsePid(readFileSync(marker, "utf8"));
+            }
+            catch (readErr) {
+                if (readErr.code === "ENOENT")
+                    continue;
+                throw readErr;
+            }
+            if (owner && isAlive(owner))
+                throw new Error(`${component.name} is already being stopped by another \`cotal down\` (pid ${owner})`);
+            // A dead owner cannot finish cleanup. Reclaim its marker and retry the exclusive create.
+            rmSync(marker, { force: true });
+        }
     }
-    const graceDeadline = Date.now() + 15_000;
-    while (isAlive(pid) && Date.now() < graceDeadline)
-        await sleep(100);
-    if (isAlive(pid)) {
+    closeSync(markerFd);
+    let stopped = false;
+    try {
+        if (pid === undefined) {
+            console.log(c.dim(`${component.label} had an invalid pidfile.`));
+            stopped = true;
+            return true;
+        }
         try {
-            process.kill(pid, "SIGKILL");
+            process.kill(pid, "SIGTERM");
+        }
+        catch {
+            if (isAlive(pid))
+                throw new Error(`could not signal ${component.label} (pid ${pid})`);
+            console.log(c.dim(`${component.label} (pid ${pid}) was not running.`));
+            stopped = true;
+            return true;
         }
-        catch { /* raced to exit */ }
-        const hardDeadline = Date.now() + 3_000;
-        while (isAlive(pid) && Date.now() < hardDeadline)
+        const graceDeadline = Date.now() + 15_000;
+        while (isAlive(pid) && Date.now() < graceDeadline)
             await sleep(100);
+        if (isAlive(pid)) {
+            try {
+                process.kill(pid, "SIGKILL");
+            }
+            catch { /* raced to exit */ }
+            const hardDeadline = Date.now() + 3_000;
+            while (isAlive(pid) && Date.now() < hardDeadline)
+                await sleep(100);
+        }
+        if (isAlive(pid))
+            throw new Error(`${component.label} (pid ${pid}) did not exit; its pidfile was preserved`);
+        stopped = true;
+        console.log(c.green(`✓ stopped ${component.label} (pid ${pid})`));
+        return true;
+    }
+    finally {
+        if (stopped || pid === undefined || !isAlive(pid)) {
+            rmSync(pidPath, { force: true });
+        }
+        rmSync(marker, { force: true });
     }
-    console.log(isAlive(pid)
-        ? c.red(`✗ ${label} (pid ${pid}) did not exit`)
-        : c.green(`✓ stopped ${label} (pid ${pid})`));
+}
+/** Compatibility inventory for `clean`; lifecycle commands use the registered descriptors above. */
+export function pidfileTargets(space) {
+    return [
+        ["manager.pid", "manager"],
+        ["delivery.pid", "delivery daemon"],
+        [`auth-service.${encodeURIComponent(space)}.pid`, "user-auth service"],
+        ["web.pid", "web dashboard"],
+        ["nats.pid", "nats-server"],
+    ];
+}
+/** Shared hardened pid probe: positive integers only, and EPERM means the process exists. */
+export function pidfileState(path) {
+    if (!existsSync(path))
+        return { live: false, note: "no pidfile" };
+    const raw = readFileSync(path, "utf8").trim();
+    if (raw.startsWith("removing:"))
+        return { live: false, note: "extension removal in progress" };
+    const pid = parsePid(raw);
+    if (!pid)
+        return { live: false, note: "bad pidfile" };
+    return isAlive(pid) ? { pid, live: true } : { pid, live: false, note: "stale pidfile" };
 }
 //# sourceMappingURL=down.js.map