@cotal-ai/cli 0.14.11 → 0.16.0

package/dist/commands/meshes-wizard.js

@@ -0,0 +1,277 @@
+import * as p from "@clack/prompts";
+import { findMesh } from "@cotal-ai/workspace";
+import { bold, brand, brandBold, dim, ok } from "../lib/theme.js";
+import { abortIfCancel } from "../lib/cancel.js";
+import { candidateTarget, checkEnforcement, checkMode, checkRoot, checkServer, checkTrust, isDir, probeEnforcement, spacesAtRoot, verifyTarget, writeRecord, } from "./meshes-add.js";
+/** The real terminal, via clack. Cancellation (Ctrl-C / Esc) exits here rather than returning a
+ *  sentinel the wizard body would have to thread through every branch. */
+export function clackIO() {
+    return {
+        intro: (m) => p.intro(m),
+        outro: (m) => p.outro(m),
+        note: (body, title) => p.note(body, title),
+        cancel: (m) => p.cancel(m),
+        log: { info: (m) => p.log.info(m), warn: (m) => p.log.warn(m), error: (m) => p.log.error(m) },
+        spinner: () => {
+            const s = p.spinner();
+            return { start: (m) => s.start(m), stop: (m) => s.stop(m) };
+        },
+        text: async (opts) => abortIfCancel(await p.text(opts)),
+        select: async (opts) => abortIfCancel(await p.select(opts)),
+        confirm: async (opts) => abortIfCancel(await p.confirm({ ...opts, initialValue: true })),
+    };
+}
+/** Whether a guided run is possible at all: both ends of the pipe must be a real terminal. Without
+ *  this a missing flag would hang a script waiting on input nobody is there to give; the flag form
+ *  keeps failing loud instead. */
+export function canPrompt() {
+    return Boolean(process.stdin.isTTY) && Boolean(process.stdout.isTTY) && process.env.COTAL_NO_PROMPT !== "1";
+}
+/** Run the guided registration. Returns false if the operator backed out (the caller exits 0 —
+ *  cancelling is not a failure). */
+export async function addWizard(seed, cwd, io = clackIO()) {
+    io.intro(brandBold("Register a mesh"));
+    io.note("A mesh running somewhere else - another machine, a shared broker, a hosted space - so that\n`cotal spawn` and `--space` can reach it from any folder on this machine.\n\nNothing is written until you confirm.", brand("What this does"));
+    // TWO different decisions, deliberately not one flag. `--force` conflates them for the scripted
+    // form (documented there), but here they are reached separately and must stay separate:
+    // `unverified` means the operator accepted a record nothing confirmed; `replace` means an
+    // existing record for that name is being overwritten. Folding replace into unverified would
+    // silently skip the broker checks for anyone who picked "replace that record" — a record
+    // presented as checked that never was, which is the failure this command exists to refuse.
+    let unverified = Boolean(seed.force);
+    let replace = Boolean(seed.force);
+    // ── 1. the one thing that cannot be derived ────────────────────────────────────────────────────
+    let server = seed.server;
+    let enforces = "unreachable";
+    for (;;) {
+        if (!server) {
+            server = await io.text({
+                message: "Broker URL of the mesh you want to reach",
+                placeholder: "nats://10.0.0.5:4222",
+                validate: (v) => {
+                    if (!v)
+                        return "Required - this is the address the mesh's broker listens on.";
+                    const r = checkServer(v);
+                    return r.ok ? undefined : r.message.replace(/^✗ (--server )?/, "");
+                },
+            });
+        }
+        else {
+            const pre = checkServer(server);
+            if (!pre.ok) {
+                io.log.error(pre.message);
+                server = undefined;
+                continue;
+            }
+        }
+        const spin = io.spinner();
+        spin.start(`Asking ${server} what it is`);
+        enforces = await probeEnforcement(server);
+        spin.stop(enforces === "auth"
+            ? `${ok("✓")} ${server} answered - it ${bold("requires credentials")}`
+            : enforces === "open"
+                ? `${ok("✓")} ${server} answered - it is ${bold("open")} (accepts anyone)`
+                : `${server} did not answer`);
+        if (enforces !== "unreachable")
+            break;
+        const next = await io.select({
+            message: "No broker answered there.",
+            options: [
+                { value: "retype", label: "Use a different address", hint: "typo, wrong port, VPN not up" },
+                { value: "anyway", label: "Register it anyway", hint: "the mesh is down right now; nothing is verified" },
+                { value: "cancel", label: "Cancel" },
+            ],
+        });
+        if (next === "cancel")
+            return cancelled(io);
+        if (next === "anyway") {
+            unverified = true;
+            break;
+        }
+        server = undefined;
+    }
+    // ── 2. where this mesh's local trust + personas live ───────────────────────────────────────────
+    // A LOOP, not a recursive re-entry: "point at a different folder" has to actually ask for one.
+    // Clearing the answer and inferring again would land on the same project root inside a project,
+    // re-hit the same dead end, and offer the same useless choice forever.
+    const inferred = checkRoot(seed.root, cwd);
+    let root = inferred.ok ? inferred.value : undefined;
+    if (root && !seed.root)
+        io.log.info(`Using this project as its local folder: ${bold(root)}`);
+    // The cwd is only a sensible default the FIRST time. After the operator has been told this
+    // folder holds no credentials, offering it back pre-filled makes them clear the field to answer
+    // the question at all — so the recovery ask starts empty and insists on a real path.
+    let defaultRoot = cwd;
+    let accounts = [];
+    for (;;) {
+        while (!root)
+            root = await askRoot(io, cwd, defaultRoot);
+        const inventory = spacesAtRoot(root);
+        if (!inventory.ok) {
+            // Unreadable trust is not "no trust": say so and let them point somewhere else.
+            io.log.error(inventory.message);
+            root = undefined;
+            defaultRoot = undefined;
+            continue;
+        }
+        accounts = inventory.value;
+        // An auth broker with no trust here cannot be registered at all — say what is missing and where
+        // it comes from, rather than failing after more questions.
+        if (enforces !== "auth" || accounts.length > 0)
+            break;
+        io.log.warn(`That broker requires credentials, and ${bold(root)} holds none.\n` +
+            dim("Copy the mesh's .cotal/auth from the machine it runs on (or `cotal mint` there), then point at that folder."));
+        const next = await io.select({
+            message: "That folder holds no credentials for this broker. What next?",
+            options: [
+                { value: "root", label: "Point at a different folder", hint: "one that already holds its credentials" },
+                { value: "cancel", label: "Cancel" },
+            ],
+        });
+        if (next === "cancel")
+            return cancelled(io);
+        root = undefined; // ask for a path; never re-infer, or this offers the same dead end again
+        defaultRoot = undefined; // …and never offer the folder we just rejected as the default
+    }
+    // ── 3. which space ────────────────────────────────────────────────────────────────────────────
+    // The clash gate runs for EVERY resolved name, including one that came in on the command line.
+    // Gating it on "did we just ask?" let `cotal meshes add <already-registered>` overwrite silently —
+    // something the flag form refuses outright.
+    let space = seed.space;
+    for (;;) {
+        while (!space) {
+            if (accounts.length > 0) {
+                const picked = await io.select({
+                    message: "Which space on that broker?",
+                    options: [
+                        ...accounts.map((s) => ({ value: s, label: s, hint: "credentials for this space are already here" })),
+                        { value: null, label: "Another name…" }, // null, not a sentinel string: no space name can collide with it
+                    ],
+                });
+                if (picked !== null)
+                    space = picked;
+            }
+            if (!space) {
+                space = await io.text({
+                    message: "Space name on that broker",
+                    placeholder: "the name the mesh was started with",
+                    validate: (v) => (v ? undefined : "Required - it must match the space name where the mesh runs."),
+                });
+            }
+        }
+        const clash = findMesh(space);
+        if (!clash || replace)
+            break;
+        const next = await io.select({
+            message: `"${space}" is already registered here (${clash.server}).`,
+            options: [
+                { value: "replace", label: "Replace that record", hint: clash.root },
+                { value: "rename", label: "Use a different name" },
+                { value: "cancel", label: "Cancel" },
+            ],
+        });
+        if (next === "cancel")
+            return cancelled(io);
+        if (next === "rename")
+            space = undefined;
+        else {
+            replace = true;
+            break;
+        }
+    }
+    // ── 4. mode + trust, decided rather than asked ─────────────────────────────────────────────────
+    // The probe's answer is the best evidence of the mode — but only when the broker actually
+    // answered. An UNREACHABLE broker knows nothing, and reading "not auth" out of silence would
+    // record an auth mesh as open (the exact wrong-mode failure this command is built to refuse); so
+    // fall back to the same on-disk inference the flag form uses.
+    const modeHint = seed.mode ?? (enforces === "unreachable" ? undefined : enforces);
+    const modeCheck = checkMode(space, root, accounts, modeHint);
+    if (!modeCheck.ok) {
+        io.log.error(modeCheck.message);
+        return cancelled(io, "Nothing was registered.");
+    }
+    const mode = modeCheck.value;
+    const trust = checkTrust(mode, root, space);
+    if (!trust.ok) {
+        io.log.error(trust.message);
+        return cancelled(io, "Nothing was registered.");
+    }
+    if (!unverified) {
+        const match = checkEnforcement(mode, enforces, server, space, root);
+        if (!match.ok) {
+            io.log.error(match.message);
+            return cancelled(io, "Nothing was registered.");
+        }
+    }
+    // ── 5. verify for real, then confirm ──────────────────────────────────────────────────────────
+    if (!unverified) {
+        const target = candidateTarget(space, server, root, mode, trust.value);
+        const spin = io.spinner();
+        spin.start(mode === "auth" ? `Checking this folder's credentials for "${space}"` : `Checking the connection to "${space}"`);
+        const verified = await verifyTarget(target);
+        spin.stop(verified.ok ? `${ok("✓")} ${mode === "auth" ? "Credentials accepted" : "Connected"}` : "Could not connect");
+        if (!verified.ok) {
+            io.log.error(verified.message);
+            const next = await io.select({
+                message: "The check did not pass. What next?",
+                options: [
+                    { value: "anyway", label: "Register it anyway", hint: "the record will say it was not verified" },
+                    { value: "cancel", label: "Cancel" },
+                ],
+            });
+            if (next === "cancel")
+                return cancelled(io, "Nothing was registered.");
+            unverified = true;
+        }
+    }
+    io.note([
+        `${dim("space ")}  ${bold(space)}`,
+        `${dim("broker")}  ${server}`,
+        `${dim("mode  ")}  ${mode}${unverified ? dim("  (not verified - the broker was not reachable/checked)") : dim(mode === "auth" ? "  (broker enforces credentials)" : "  (broker is open)")}`,
+        ...(replace ? [`${dim("note  ")}  ${bold("replaces")} the existing record for "${space}"`] : []),
+        `${dim("folder")}  ${root}`,
+    ].join("\n"), brand("About to record"));
+    const go = await io.confirm({ message: "Register this mesh?" });
+    if (!go)
+        return cancelled(io, "Nothing was registered.");
+    const entry = { space, server: server, root, mode, origin: "manual", ts: new Date().toISOString() };
+    const result = writeRecord(entry);
+    // Padded from the rendered widths, not a guess: the commands carry the space name, so a
+    // hard-coded gutter misaligns for every name but the one it was written against.
+    const rows = [
+        result.adoptedCurrent
+            ? ["cotal spawn", "launch an agent into it (it is now the default)"]
+            : [`cotal use ${space}`, "make it the default a bare spawn joins"],
+        [`cotal status --space ${space}`, "check it"],
+        [`cotal meshes rm ${space}`, "forget it again (never stops the mesh)"],
+    ];
+    const width = Math.max(...rows.map(([cmd]) => cmd.length));
+    io.note(rows.map(([cmd, why]) => `${bold(cmd.padEnd(width))}  ${dim(why)}`).join("\n"), brand("What you can do now"));
+    io.outro(ok(`Registered "${space}"${result.keptCurrent ? ` - "${result.keptCurrent}" is still the default` : ""}`));
+    return true;
+}
+/** Ask for the folder, re-asking until it resolves. `defaultTo` is accepted on an empty answer;
+ *  without one, an empty answer is a non-answer rather than a silent fallback. */
+async function askRoot(io, cwd, defaultTo) {
+    for (;;) {
+        const typed = await io.text({
+            message: "Local folder for this mesh's credentials and personas",
+            placeholder: defaultTo ?? "the folder holding its .cotal/auth",
+            validate: (v) => {
+                const candidate = v || defaultTo;
+                if (!candidate)
+                    return "Required - the folder that holds this mesh's .cotal/auth and .cotal/agents.";
+                return isDir(candidate) ? undefined : "Not a directory - it must already exist.";
+            },
+        });
+        const r = checkRoot(typed || defaultTo, cwd);
+        if (r.ok)
+            return r.value;
+        io.log.error(r.message);
+    }
+}
+function cancelled(io, message = "Cancelled.") {
+    io.cancel(message);
+    return false;
+}
+//# sourceMappingURL=meshes-wizard.js.map

package/dist/commands/meshes-wizard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meshes-wizard.js","sourceRoot":"","sources":["../../src/commands/meshes-wizard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAkB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,SAAS,EACT,WAAW,EACX,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,WAAW,GACZ,MAAM,iBAAiB,CAAC;AAwCzB;0EAC0E;AAC1E,MAAM,UAAU,OAAO;IACrB,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACxB,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QAC1C,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1B,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QAC7F,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAa,CAAC,CAAC;QAChE,MAAM,EAAE,KAAK,EAAK,IAAgF,EAAE,EAAE,CACpG,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAAI,IAAa,CAAC,CAAM;QACtD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;KACzF,CAAC;AACJ,CAAC;AAED;;kCAEkC;AAClC,MAAM,UAAU,SAAS;IACvB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC;AAC9G,CAAC;AAYD;oCACoC;AACpC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAgB,EAAE,GAAW,EAAE,KAAe,OAAO,EAAE;IACrF,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvC,EAAE,CAAC,IAAI,CACL,gNAAgN,EAChN,KAAK,CAAC,gBAAgB,CAAC,CACxB,CAAC;IAEF,gGAAgG;IAChG,wFAAwF;IACxF,0FAA0F;IAC1F,4FAA4F;IAC5F,yFAAyF;IACzF,2FAA2F;IAC3F,IAAI,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAElC,kGAAkG;IAClG,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzB,IAAI,QAAQ,GAAoC,aAAa,CAAC;IAE9D,SAAS,CAAC;QACR,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,0CAA0C;gBACnD,WAAW,EAAE,sBAAsB;gBACnC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;oBACd,IAAI,CAAC,CAAC;wBAAE,OAAO,8DAA8D,CAAC;oBAC9E,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;oBACzB,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;gBACrE,CAAC;aACF,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC1B,MAAM,GAAG,SAAS,CAAC;gBACnB,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,UAAU,MAAM,aAAa,CAAC,CAAC;QAC1C,QAAQ,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CACP,QAAQ,KAAK,MAAM;YACjB,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,kBAAkB,IAAI,CAAC,sBAAsB,CAAC,EAAE;YACtE,CAAC,CAAC,QAAQ,KAAK,MAAM;gBACnB,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,qBAAqB,IAAI,CAAC,MAAM,CAAC,mBAAmB;gBAC1E,CAAC,CAAC,GAAG,MAAM,iBAAiB,CACjC,CAAC;QACF,IAAI,QAAQ,KAAK,aAAa;YAAE,MAAM;QAEtC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;YACzB,OAAO,EAAE,2BAA2B;YACpC,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,8BAA8B,EAAE;gBAC3F,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,iDAAiD,EAAE;gBACzG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;aACrC;SACF,CAAC,CAAC;QACL,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,UAAU,GAAG,IAAI,CAAC;YAClB,MAAM;QACR,CAAC;QACD,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IAED,kGAAkG;IAClG,+FAA+F;IAC/F,gGAAgG;IAChG,uEAAuE;IACvE,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,2CAA2C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,2FAA2F;IAC3F,gGAAgG;IAChG,qFAAqF;IACrF,IAAI,WAAW,GAAuB,GAAG,CAAC;IAC1C,IAAI,QAAQ,GAAa,EAAE,CAAC;IAC5B,SAAS,CAAC;QACR,OAAO,CAAC,IAAI;YAAE,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,gFAAgF;YAChF,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;YACjB,WAAW,GAAG,SAAS,CAAC;YACxB,SAAS;QACX,CAAC;QACD,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC;QAC3B,gGAAgG;QAChG,2DAA2D;QAC3D,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM;QACtD,EAAE,CAAC,GAAG,CAAC,IAAI,CACT,yCAAyC,IAAI,CAAC,IAAI,CAAC,gBAAgB;YACjE,GAAG,CAAC,6GAA6G,CAAC,CACrH,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;YACzB,OAAO,EAAE,8DAA8D;YACvE,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,6BAA6B,EAAE,IAAI,EAAE,wCAAwC,EAAE;gBACvG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;aACrC;SACF,CAAC,CAAC;QACL,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,SAAS,CAAC,CAAC,yEAAyE;QAC3F,WAAW,GAAG,SAAS,CAAC,CAAC,8DAA8D;IACzF,CAAC;IAED,iGAAiG;IACjG,+FAA+F;IAC/F,mGAAmG;IACnG,4CAA4C;IAC5C,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,SAAS,CAAC;QACR,OAAO,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAgB;oBAC1C,OAAO,EAAE,6BAA6B;oBACtC,OAAO,EAAE;wBACP,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,6CAA6C,EAAE,CAAC,CAAC;wBACtH,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,iEAAiE;qBAC3G;iBACF,CAAC,CAAC;gBACL,IAAI,MAAM,KAAK,IAAI;oBAAE,KAAK,GAAG,MAAM,CAAC;YACtC,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;oBAClB,OAAO,EAAE,2BAA2B;oBACpC,WAAW,EAAE,oCAAoC;oBACjD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8DAA8D,CAAC;iBAClG,CAAC,CAAC;YACP,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,OAAO;YAAE,MAAM;QAC7B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;YACzB,OAAO,EAAE,IAAI,KAAK,iCAAiC,KAAK,CAAC,MAAM,IAAI;YACnE,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;gBACpE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,sBAAsB,EAAE;gBAClD,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;aACrC;SACF,CAAC,CAAC;QACL,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,KAAK,QAAQ;YAAE,KAAK,GAAG,SAAS,CAAC;aACpC,CAAC;YACJ,OAAO,GAAG,IAAI,CAAC;YACf,MAAM;QACR,CAAC;IACH,CAAC;IAED,kGAAkG;IAClG,0FAA0F;IAC1F,6FAA6F;IAC7F,iGAAiG;IACjG,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,SAAS,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,SAAS,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,iGAAiG;IACjG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,MAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,2CAA2C,KAAK,GAAG,CAAC,CAAC,CAAC,+BAA+B,KAAK,GAAG,CAAC,CAAC;QAC5H,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QACtH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;gBACzB,OAAO,EAAE,oCAAoC;gBAC7C,OAAO,EAAE;oBACP,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,yCAAyC,EAAE;oBACjG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;iBACrC;aACF,CAAC,CAAC;YACL,IAAI,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;YACvE,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,EAAE,CAAC,IAAI,CACL;QACE,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE;QAClC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM,EAAE;QAC7B,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE;QAC3L,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,6BAA6B,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;KAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,KAAK,CAAC,iBAAiB,CAAC,CACzB,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAc,EAAE,KAAK,EAAE,MAAM,EAAE,MAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACzH,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAElC,wFAAwF;IACxF,iFAAiF;IACjF,MAAM,IAAI,GAAuB;QAC/B,MAAM,CAAC,cAAc;YACnB,CAAC,CAAC,CAAC,aAAa,EAAE,iDAAiD,CAAC;YACpE,CAAC,CAAC,CAAC,aAAa,KAAK,EAAE,EAAE,wCAAwC,CAAC;QACpE,CAAC,wBAAwB,KAAK,EAAE,EAAE,UAAU,CAAC;QAC7C,CAAC,mBAAmB,KAAK,EAAE,EAAE,wCAAwC,CAAC;KACvE,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACtH,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,KAAK,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,WAAW,wBAAwB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;kFACkF;AAClF,KAAK,UAAU,OAAO,CAAC,EAAY,EAAE,GAAW,EAAE,SAA6B;IAC7E,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YACxB,OAAO,EAAE,uDAAuD;YAChE,WAAW,EAAE,SAAS,IAAI,oCAAoC;YAC9D,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;gBACd,MAAM,SAAS,GAAG,CAAC,IAAI,SAAS,CAAC;gBACjC,IAAI,CAAC,SAAS;oBAAE,OAAO,6EAA6E,CAAC;gBACrG,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0CAA0C,CAAC;YACnF,CAAC;SACF,CAAC,CAAC;QACL,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,IAAK,SAAoB,EAAE,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC,KAAK,CAAC;QACzB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,EAAY,EAAE,OAAO,GAAG,YAAY;IACrD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/commands/meshes.d.ts

@@ -1,6 +1,24 @@
-import type { ParsedArgs } from "@cotal-ai/core";
-/** `cotal meshes` — list the running meshes (one `cotal up` each), with a `*` on the `current`
- *  default. The kubectl `get-contexts` analogue: how you see what a bare `cotal spawn` would join,
- *  and which `--space` names are available. Prunes dead entries first. */
+import { type CompletionResult, type ParsedArgs } from "@cotal-ai/core";
+export declare const meshesFlags: readonly [{
+    readonly name: "server";
+    readonly type: "string";
+    readonly value: "<url>";
+    readonly description: "add: the mesh's broker URL (required)";
+}, {
+    readonly name: "root";
+    readonly type: "string";
+    readonly value: "<dir>";
+    readonly description: "add: folder holding this mesh's .cotal/auth + .cotal/agents (default: this project)";
+}, {
+    readonly name: "mode";
+    readonly type: "string";
+    readonly value: "<auth|open>";
+    readonly description: "add: how the broker authenticates (default: inferred from --root)";
+}, {
+    readonly name: "force";
+    readonly type: "boolean";
+    readonly description: "add: record without verifying, replacing any existing record · rm: drop a running mesh's record";
+}];
 export declare function meshes(args: ParsedArgs): Promise<void>;
+export declare function meshesComplete(argv: string[]): CompletionResult;
 //# sourceMappingURL=meshes.d.ts.map

package/dist/commands/meshes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"meshes.d.ts","sourceRoot":"","sources":["../../src/commands/meshes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAKjD;;0EAE0E;AAC1E,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB5D"}
+{"version":3,"file":"meshes.d.ts","sourceRoot":"","sources":["../../src/commands/meshes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAkC,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AA6CxG,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;EAKgB,CAAC;AAIzC,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAU5D;AAmLD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAW/D"}

package/dist/commands/meshes.js

@@ -1,25 +1,221 @@
-import { getCurrent, loadMeshes } from "@cotal-ai/workspace";
+import {} from "@cotal-ai/core";
+import { authDir, clearCurrent, findMesh, getCurrent, loadMeshes, removeMesh, } from "@cotal-ai/workspace";
 import { c } from "../ui.js";
 import { pruneStaleMeshes } from "../lib/meshes.js";
-/** `cotal meshes` — list the running meshes (one `cotal up` each), with a `*` on the `current`
- *  default. The kubectl `get-contexts` analogue: how you see what a bare `cotal spawn` would join,
- *  and which `--space` names are available. Prunes dead entries first. */
+import { completingFlagValue } from "../lib/completion.js";
+import { liveMeshOwner } from "./clean.js";
+import { candidateTarget, checkEnforcement, checkMode, checkRoot, checkServer, checkTrust, probeEnforcement, spacesAtRoot, verifyTarget, writeRecord, } from "./meshes-add.js";
+import { addWizard, canPrompt } from "./meshes-wizard.js";
+/**
+ * `cotal meshes` — the registry of meshes this machine can reach, and the two verbs that maintain
+ * it by hand.
+ *
+ *   cotal meshes                       list (the kubectl `get-contexts` analogue)
+ *   cotal meshes add <space> --server  register a mesh this machine did NOT start
+ *   cotal meshes rm <space> …          drop records (never stops anything)
+ *
+ * `up` and `down` still write and clear their own records; `add`/`rm` exist for the meshes they
+ * cannot speak for — one running on another machine, a shared broker, a hosted space. Those records
+ * are marked `manual` and are never auto-pruned (see `pruneMesh`), because this machine has no way
+ * to write them back: a dead broker under one is reported `offline`, not deleted.
+ */
+const SUBCOMMANDS = ["list", "add", "rm", "remove"];
+export const meshesFlags = [
+    { name: "server", type: "string", value: "<url>", description: "add: the mesh's broker URL (required)" },
+    { name: "root", type: "string", value: "<dir>", description: "add: folder holding this mesh's .cotal/auth + .cotal/agents (default: this project)" },
+    { name: "mode", type: "string", value: "<auth|open>", description: "add: how the broker authenticates (default: inferred from --root)" },
+    { name: "force", type: "boolean", description: "add: record without verifying, replacing any existing record · rm: drop a running mesh's record" },
+];
 export async function meshes(args) {
-    await pruneStaleMeshes();
+    const sub = args.positionals[0];
+    const v = args.values;
+    if (sub === "add")
+        return addMesh(args.positionals.slice(1), v);
+    if (sub === "rm" || sub === "remove")
+        return removeMeshes(args.positionals.slice(1), v);
+    if (sub !== undefined && sub !== "list") {
+        console.error(c.red(`✗ unknown subcommand "${sub}" - usage: cotal meshes [list | add <space> --server <url> | rm <space> …]`));
+        process.exit(1);
+    }
+    return listMeshes();
+}
+// ---- list -----------------------------------------------------------------------------------
+/** The registered meshes, one per line, with a `*` on the `current` default. This is how you see
+ *  what a bare `cotal spawn` would join and which `--space` names exist. The sweep runs first, so
+ *  a mesh this machine started and lost is gone from the list; an operator-registered one whose
+ *  broker is down stays, tagged `offline` — it is still the mesh you meant, just not up. */
+async function listMeshes() {
+    const sweep = await pruneStaleMeshes();
     const all = loadMeshes();
     if (all.length === 0) {
-        console.log(c.dim("no meshes running - start one with `cotal up`"));
+        console.log(c.dim("no meshes registered - `cotal up` starts one here, `cotal meshes add <space> --server <url>` registers one running elsewhere"));
         return;
     }
     const current = getCurrent();
-    const pad = Math.max(...all.map((m) => m.space.length));
+    const offline = new Set(sweep.offline);
+    const width = (pick, header) => Math.max(header.length, ...all.map((m) => pick(m).length));
+    const wSpace = width((m) => m.space, "SPACE");
+    const wServer = width((m) => m.server, "SERVER");
+    const wMode = width((m) => m.mode, "MODE");
+    console.log(c.dim(`  ${"SPACE".padEnd(wSpace)}  ${"SERVER".padEnd(wServer)}  ${"MODE".padEnd(wMode)}  ROOT`));
     for (const m of all) {
         const marker = m.space === current ? c.green("*") : " ";
-        console.log(`${marker} ${m.space.padEnd(pad)}  ${c.dim(`${m.server}  ${m.mode}  ${m.root}`)}`);
+        const tags = [
+            ...(m.origin === "manual" ? [c.dim("registered")] : []),
+            ...(offline.has(m.space) ? [c.yellow("offline")] : []),
+        ];
+        console.log(`${marker} ${m.space.padEnd(wSpace)}  ${c.dim(`${m.server.padEnd(wServer)}  ${m.mode.padEnd(wMode)}  ${m.root}`)}` +
+            (tags.length ? `  ${tags.join(c.dim(" · "))}` : ""));
     }
-    // A `current` that no longer matches any running mesh (its broker went down) shows no `*` — say
+    // A `current` that no longer matches any recorded mesh (its broker went down) shows no `*` — say
     // why, so a bare `cotal spawn` still reporting "multiple meshes" isn't a mystery.
     if (current && !all.some((m) => m.space === current))
         console.log(c.dim(`\nnote: default "${current}" is not running - \`cotal use <name>\` to set a live one`));
 }
+// ---- add ------------------------------------------------------------------------------------
+/** `cotal meshes add <space> --server <url>` — register a mesh this machine did not start, so
+ *  `--space`, `cotal use` and a bare `cotal spawn` can reach it from any directory. The record
+ *  holds a broker URL, a local root and a mode; trust material itself stays in that root's
+ *  `.cotal/auth`, exactly as it does for a mesh started here. */
+async function addMesh(positionals, v) {
+    const space = positionals[0];
+    if (positionals.length > 1) {
+        console.error(c.red("usage: cotal meshes add <space> --server <url> [--root <dir>] [--mode auth|open]"));
+        process.exit(1);
+    }
+    // GUIDED FORM. A registration needs four facts, three of which the machine can find out — so a
+    // command missing either irreducible one, on a real terminal, is an operator who would rather be
+    // asked than read a usage line. Scripts and agents are unaffected: without a TTY (or with
+    // COTAL_NO_PROMPT=1) the flag form's fail-loud sentences stand, which is what every smoke asserts.
+    if ((!space || !v.server) && canPrompt()) {
+        const done = await addWizard({ ...(space ? { space } : {}), ...(v.server ? { server: v.server } : {}), ...(v.root ? { root: v.root } : {}),
+            ...(v.mode ? { mode: v.mode } : {}), ...(v.force ? { force: true } : {}) }, process.cwd());
+        if (!done)
+            process.exitCode = 0; // backing out of a wizard is not a failure
+        return;
+    }
+    if (!space) {
+        console.error(c.red("usage: cotal meshes add <space> --server <url> [--root <dir>] [--mode auth|open]"));
+        process.exit(1);
+    }
+    if (!v.server) {
+        console.error(c.red("✗ --server <url> is required - a mesh you did not start here has no address to infer (e.g. --server nats://10.0.0.5:4222)"));
+        process.exit(1);
+    }
+    const server = take(checkServer(v.server));
+    const root = take(checkRoot(v.root, process.cwd()));
+    const accounts = take(spacesAtRoot(root));
+    const mode = take(checkMode(space, root, accounts, v.mode));
+    if (mode === "open" && accounts.includes(space))
+        console.log(c.dim(`note: ${authDir(root)} holds trust for "${space}", but --mode open records a credless connect`));
+    const auth = take(checkTrust(mode, root, space));
+    const existing = findMesh(space);
+    if (existing && !v.force) {
+        console.error(c.red(`✗ "${space}" is already registered at ${existing.server} (${existing.root}) - \`cotal meshes rm ${space}\` first, or --force to replace it`));
+        process.exit(1);
+    }
+    // VERIFY BEFORE RECORDING. A wrong address, a broker that wants auth, creds that don't open this
+    // space, an expired cred — all one probe away here, and every one of them would otherwise surface
+    // as a confusing failure at the first `cotal spawn` against a record that looks fine. `--force`
+    // is the explicit escape (registering a mesh that is currently down), and it says so on the
+    // success line rather than pretending the mesh was checked.
+    if (!v.force) {
+        take(checkEnforcement(mode, await probeEnforcement(server), server, space, root));
+        const verified = await verifyTarget(candidateTarget(space, server, root, mode, auth));
+        if (!verified.ok) {
+            console.error(c.red(verified.message));
+            console.error(c.dim("nothing was registered - fix the above, or `--force` to record it without verifying (e.g. the mesh is down right now)"));
+            process.exit(1);
+        }
+    }
+    const result = writeRecord({ space, server, root, mode, origin: "manual", ts: new Date().toISOString() });
+    console.log(c.green(`✓ registered "${space}"`), 
+    // "recorded without verifying" describes THIS registration, not a durable property of the
+    // record: verification is point-in-time — a verified record loses it the moment a port is
+    // reused — so it is reported as what just happened rather than persisted as a stored claim
+    // that would quietly decay into a false one.
+    c.dim(`${server}  ${mode}  ${root}${v.force ? "  (recorded without verifying)" : ""}`));
+    if (result.adoptedCurrent) {
+        console.log(c.dim(`it is now the default mesh - \`cotal spawn\` from any directory joins it`));
+        return;
+    }
+    if (result.keptCurrent)
+        console.log(c.dim(`current is still "${result.keptCurrent}" - \`cotal use ${space}\` to switch`));
+}
+/** Take a rule's value, or print its sentence and exit — the flag form's whole error posture. */
+function take(r) {
+    if (r.ok)
+        return r.value;
+    console.error(c.red(r.message));
+    process.exit(1);
+}
+// ---- rm -------------------------------------------------------------------------------------
+/** `cotal meshes rm <space> …` — drop records. This never stops a mesh: it removes what THIS
+ *  machine remembers about one. For a mesh running here that distinction is a footgun (the broker
+ *  keeps running with nothing pointing at it), so those are refused in favour of `cotal down`. */
+async function removeMeshes(names, v) {
+    if (names.length === 0) {
+        console.error(c.red("usage: cotal meshes rm <space> [<space> …]"));
+        process.exit(1);
+    }
+    let failed = false;
+    let clearedCurrent = false;
+    for (const space of names) {
+        const m = findMesh(space);
+        if (!m) {
+            console.error(c.red(`✗ no mesh named "${space}" is registered - see \`cotal meshes\``));
+            failed = true;
+            continue;
+        }
+        // Refuse only when THIS MACHINE demonstrably runs the mesh — a live recorded pid under its
+        // root. Reachability was the wrong test: any broker on that address answers, including a
+        // reused port or a foreign NATS, which produced a refusal plus a `cotal down` instruction that
+        // would stop nothing. Local process ownership is the fact the refusal actually claims.
+        //
+        // It is asked only of records this machine started. Pidfiles are ROOT-scoped, and a root is
+        // shared on purpose here: `add` defaults `--root` to the project you run it in, so a local mesh
+        // and a registration for a remote one routinely live under one root. A pid there belongs to
+        // whichever mesh owns the root — never to the remote broker — so asking this of a hand-registered
+        // record can only produce a false "it is running here". That is safe to skip precisely because
+        // provenance is now decided at the call site that started the broker: anything this machine
+        // actually runs is stamped `up` and does reach the check.
+        //
+        // Skipped entirely under `--force`: the probe itself throws on a multi-tenant or unreadable
+        // root, which must not defeat the documented override. Keyed on the entry's OWN space rather
+        // than one re-resolved from the root, which on a multi-tenant root can name another tenant.
+        const running = m.origin === "manual" || v.force ? undefined : liveMeshOwner(m.root, m.space);
+        if (running) {
+            console.error(c.red(`✗ "${space}" is running from ${m.root} (${running}) - \`cotal down\` there stops it and drops the record; --force drops the record only, leaving the mesh running`));
+            failed = true;
+            continue;
+        }
+        removeMesh(space);
+        if (getCurrent() === space) {
+            clearCurrent();
+            clearedCurrent = true;
+        }
+        console.log(c.green(`✓ unregistered "${space}"`), c.dim(m.server));
+    }
+    if (clearedCurrent)
+        console.log(c.dim("there is no default mesh now - `cotal use <name>` to set one"));
+    if (failed)
+        process.exit(1);
+}
+// ---- completion -----------------------------------------------------------------------------
+export function meshesComplete(argv) {
+    const flag = completingFlagValue(argv, meshesFlags);
+    if (flag?.name === "mode")
+        return { items: [{ value: "auth" }, { value: "open" }], directive: "nofiles" };
+    if (flag?.name === "root")
+        return { items: [], directive: "default" }; // a directory
+    if (flag?.name === "server")
+        return { items: [], directive: "nofiles" };
+    const sub = argv[0];
+    if (argv.length <= 1)
+        return { items: SUBCOMMANDS.map((value) => ({ value })), directive: "nofiles" };
+    // `rm` completes on what's registered; `add` names a mesh that by definition isn't.
+    if (sub === "rm" || sub === "remove")
+        return { items: loadMeshes().map((m) => ({ value: m.space })), directive: "nofiles" };
+    return { items: [], directive: "nofiles" };
+}
 //# sourceMappingURL=meshes.js.map

package/dist/commands/meshes.js.map

@@ -1 +1 @@
-{"version":3,"file":"meshes.js","sourceRoot":"","sources":["../../src/commands/meshes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;0EAE0E;AAC1E,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAgB;IAC3C,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,gGAAgG;IAChG,kFAAkF;IAClF,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,OAAO,2DAA2D,CAAC,CAAC,CAAC;AAC/G,CAAC"}
+{"version":3,"file":"meshes.js","sourceRoot":"","sources":["../../src/commands/meshes.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0E,MAAM,gBAAgB,CAAC;AACxG,OAAO,EACL,OAAO,EACP,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,UAAU,EACV,UAAU,GAEX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,SAAS,EACT,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,WAAW,GAEZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE1D;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAU,CAAC;AAE7D,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,uCAAuC,EAAE;IACxG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,qFAAqF,EAAE;IACpJ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,mEAAmE,EAAE;IACxI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,iGAAiG,EAAE;CAC5G,CAAC;AAIzC,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAgB;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAgB,CAAC;IAChC,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxF,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,yBAAyB,GAAG,4EAA4E,CAAC,CAAC,CAAC;QAC/H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,gGAAgG;AAEhG;;;4FAG4F;AAC5F,KAAK,UAAU,UAAU;IACvB,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,8HAA8H,CAAC,CAAC,CAAC;QACnJ,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,IAA8B,EAAE,MAAc,EAAE,EAAE,CAC/D,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9G,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACxD,MAAM,IAAI,GAAG;YACX,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC;QACF,OAAO,CAAC,GAAG,CACT,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE;YAChH,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACtD,CAAC;IACJ,CAAC;IACD,iGAAiG;IACjG,kFAAkF;IAClF,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,OAAO,2DAA2D,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED,gGAAgG;AAEhG;;;iEAGiE;AACjE,KAAK,UAAU,OAAO,CAAC,WAAqB,EAAE,CAAS;IACrD,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC,CAAC;QACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,+FAA+F;IAC/F,iGAAiG;IACjG,0FAA0F;IAC1F,mGAAmG;IACnG,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,SAAS,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3G,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC5E,OAAO,CAAC,GAAG,EAAE,CACd,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,2CAA2C;QAC5E,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC,CAAC;QACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,2HAA2H,CAAC,CAAC,CAAC;QAClJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,qBAAqB,KAAK,+CAA+C,CAAC,CAAC,CAAC;IACtH,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,8BAA8B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,yBAAyB,KAAK,oCAAoC,CAAC,CAAC,CAAC;QACnK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iGAAiG;IACjG,kGAAkG;IAClG,gGAAgG;IAChG,4FAA4F;IAC5F,4DAA4D;IAC5D,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACvC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,uHAAuH,CAAC,CAAC,CAAC;YAC9I,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1G,OAAO,CAAC,GAAG,CACT,CAAC,CAAC,KAAK,CAAC,iBAAiB,KAAK,GAAG,CAAC;IAClC,0FAA0F;IAC1F,0FAA0F;IAC1F,2FAA2F;IAC3F,6CAA6C;IAC7C,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,KAAK,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACvF,CAAC;IACF,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC,CAAC;QAC/F,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,WAAW,mBAAmB,KAAK,cAAc,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,iGAAiG;AACjG,SAAS,IAAI,CAAI,CAAW;IAC1B,IAAI,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACzB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,gGAAgG;AAEhG;;kGAEkG;AAClG,KAAK,UAAU,YAAY,CAAC,KAAe,EAAE,CAAS;IACpD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,KAAK,wCAAwC,CAAC,CAAC,CAAC;YACxF,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,2FAA2F;QAC3F,yFAAyF;QACzF,+FAA+F;QAC/F,uFAAuF;QACvF,EAAE;QACF,4FAA4F;QAC5F,gGAAgG;QAChG,4FAA4F;QAC5F,kGAAkG;QAClG,+FAA+F;QAC/F,4FAA4F;QAC5F,0DAA0D;QAC1D,EAAE;QACF,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9F,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC,IAAI,KAAK,OAAO,iHAAiH,CAAC,CAAC,CAAC;YAC1L,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,UAAU,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,UAAU,EAAE,KAAK,KAAK,EAAE,CAAC;YAC3B,YAAY,EAAE,CAAC;YACf,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,cAAc;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC,CAAC;IACvG,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,gGAAgG;AAEhG,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACpD,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IAC1G,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,cAAc;IACrF,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACtG,oFAAoF;IACpF,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,QAAQ;QAClC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACxF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC7C,CAAC"}

package/dist/commands/spawn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../src/commands/spawn.ts"],"names":[],"mappings":"AAGA,OAAO,EAmBL,KAAK,gBAAgB,EAErB,KAAK,YAAY,EAKjB,KAAK,UAAU,EAGhB,MAAM,gBAAgB,CAAC;AAmCxB;;;+BAG+B;AAC/B,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAmC9D;AAUD,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE5I;AAqED;;;6EAG6E;AAC7E,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWiB,CAAC;AAEzC;;;;iDAIiD;AACjD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,YAAY,EAAE,CAIjF;AAwDD,wBAAsB,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgU3D"}
+{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../src/commands/spawn.ts"],"names":[],"mappings":"AAGA,OAAO,EAmBL,KAAK,gBAAgB,EAErB,KAAK,YAAY,EAKjB,KAAK,UAAU,EAGhB,MAAM,gBAAgB,CAAC;AAmCxB;;;+BAG+B;AAC/B,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAmC9D;AAUD,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,WAAW,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE5I;AAqED;;;6EAG6E;AAC7E,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWiB,CAAC;AAEzC;;;;iDAIiD;AACjD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,YAAY,EAAE,CAIjF;AAwDD,wBAAsB,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAkU3D"}

package/dist/commands/spawn.js

@@ -453,7 +453,9 @@ export async function spawn(args) {
             transcript,
             mcpServers,
         });
-        console.error(`spawning ${name}${role ? ` (${role})` : ""} on the mesh - press Enter at the dev-channels prompt`);
+        // What happens next belongs to the CONNECTOR: naming one harness's first-run gate for all of
+        // them sends the operator looking for a prompt that never appears, and reads as a hang.
+        console.error(`spawning ${name}${role ? ` (${role})` : ""} on the mesh${connector.launchHint ? ` - ${connector.launchHint}` : ""}`);
         if (userAuth)
             console.error(c.dim(`  running as you: ${userAuth.owner}.${name} (actor granted; revoked automatically when this process exits)`));
         child = spawnProcess(spec.command, spec.args, {