@cotal-ai/cli 0.148.2 → 0.149.0

package/dist/commands/spawn.js

@@ -3,11 +3,12 @@ import { createHash } from "node:crypto";
 import { readFileSync, rmSync, statSync } from "node:fs";
 import { hostname } from "node:os";
 import { resolve as resolvePath } from "node:path";
-import { assertValidRole, agentFilePath, AgentGrantConflictError, connectorServers, spawnEnvAllow, deprovisionAgent, discardLaunchArtifacts, firstFreeName, isReachable, reclaimWithChild, loadCotalConfig, modelPolicyRefusal, mintCreds, newIdentity, DEV_OWNER, parseShareSelection, principalKey, assertLifecycleToken, mintLifecycleUid, MANAGED_HANDOFF_FILE_ENV, parseManagedLifecycleHandoff, spawnNameError, provisionAgent, provisionAgentDurables, registry, resolveAuthProvider, resolveReadAcl, runAgentBearer, CotalEndpoint, GOAL_ENTITY_RUNNING_DETAIL_KIND, EP_UNDECLARED_ARG, seatCapFrom, acquireLock, inspectLock, localConsumerClaimPath, transferBucket, writeTransfer, peerLabel, } from "@cotal-ai/core";
+import { assertValidRole, agentFilePath, AgentGrantConflictError, connectorServers, spawnEnvAllow, deprovisionAgent, discardLaunchArtifacts, firstFreeName, isReachable, reclaimWithChild, loadCotalConfig, modelPolicyRefusal, mintCreds, newIdentity, DEV_OWNER, parseShareSelection, principalKey, assertLifecycleToken, mintLifecycleUid, MANAGED_HANDOFF_FILE_ENV, parseManagedLifecycleHandoff, spawnNameError, provisionAgent, provisionAgentDurables, registry, resolveAuthProvider, resolveReadAcl, runAgentBearer, GOAL_ENTITY_RUNNING_DETAIL_KIND, EP_UNDECLARED_ARG, seatCapFrom, acquireLock, inspectLock, localConsumerClaimPath, transferBucket, writeTransfer, peerLabel, attemptCleanup, describeCleanupFailures, rejectionText, } from "@cotal-ai/core";
 import { parseCommaList, CommandFailure, loadLaunchPersonaFile, personaFileReference, PersonaSourceError, inputDisabledByFlag, jsonFlag, plainFlag, presentationOf, recordOperationWarning, renderReport, terminalWidth, wrapWords, writeResult, agentActorTokenKey, agentLifecycleSecretFilePaths, agentSecretFilePaths, agentSecretKeyForFile, agentSentinelCredsKey, authDir, cachedPreferences, credsFlag, launchFlags, findMesh, getSpaceAuth, loadManagerInstanceIdentity, materializeSecretToFile, mergeLaunchOptions, parseLaunchOptions, preflightOrThrow, provenance, resolveAgentType, resolvePreference, resolveTargetOrThrow, serverFlag, spaceAccountPath, spaceFlag, spaceKey, userAuthStateDir, workspaceSecretStore, refreshRegistrationPolicy, resolveSeatControlTarget, connectUserControlOrExit, userViewAuth, oneLine, codeSpan, DEFAULT_CONNECTOR, hintedConnector, manifestExtensionNames, OFFICIAL_CONNECTORS, recordOperationSpace, resolveMeshTarget, activateTerminalSeat, issueTerminalSeat, retireTerminalSeat, seatExpiryAt, resolveControlTarget, } from "@cotal-ai/workspace";
 import { readManagedLaunch, requestManagedLaunch } from "@cotal-ai/workspace/launch";
 import { c, stderrLine } from "../ui.js";
 import { liveMeshNames } from "../lib/live-names.js";
+import { withProvisioner } from "../lib/provisioner.js";
 import { displayCmd } from "../lib/self-exec.js";
 import { entryScript } from "../seed/paths.js";
 import { completedFlagValue, completingFlagValue, hasCompletedFlagValue, positionalsForCompletion } from "../lib/completion.js";
@@ -586,7 +587,8 @@ export async function launchManagedPersona(values, positionals, events, launchOp
         // Without a flag the harness is the persona pin or a default, which only the target manager
         // can read: ask it, so the carry looks with the connector the launch runs (#2899).
         const agent = values.agent ?? await launchAgentOrExit(t, on, { name: ref, config: managerConfigRef, defaultAgent });
-        const claim = await carryTranscriptOrExit(flags, on, values.resume, agent);
+        // The carry and its transfer-writer view stay on the mesh selected for this launch.
+        const claim = await carryTranscriptOrExit({ ...flags, space: t.space, server: t.server }, on, values.resume, agent);
         if (claim !== undefined)
             resumeClaim = { claim, agent };
     }
@@ -1596,49 +1598,36 @@ export async function spawn(args) {
         // channel rather than two.
         if (launchEvents)
             allowPublish = [...(allowPublish ?? []), connector.eventChannel({ owner: DEV_OWNER, actor: identity.id })];
-        const prov = new CotalEndpoint({
-            space,
-            servers: server,
-            creds: await mintCreds(auth, newIdentity(), "provisioner"),
-            channels: [],
-            consume: false,
-            registerPresence: false,
-            watchPresence: false,
-            watchChannels: false,
-            card: { name: "spawn-provisioner", role: "provisioner", kind: "endpoint" },
-        });
-        const reportStaticProvisioner = (e) => console.error(`! provisioner: ${e.message}`);
-        prov.on("error", reportStaticProvisioner);
-        prov.on("warning", reportStaticProvisioner);
-        await prov.start();
         // Foreground provisions the SAME durable footprint as `--detach` (DM/DLV durables + read-ACL
         // row): the daemon authorizes durable joins off the ACL row and leave is agent self-service, so
         // no managing host is required — and a silently live-only foreground agent permanently loses
         // every channel message posted while its connection blips (reconnect deliberately re-opens the
         // core-subs without re-backfill). `--live-only` opts back out; on a mesh with no delivery
-        // daemon the boot join itself reports live-only, ACL row or not.
+        // daemon the boot join itself reports live-only, ACL row or not. A failed provisioner stop
+        // never reaches this catch, so it cannot retire a credential the provisioning already minted.
         try {
-            // The seat's lifecycle is activated first, so the issuance can name its gate as the source of
-            // the evidence a helper's spawn is bounded by.
-            const seatTarget = { server, space, tlsRequired: target.tlsRequired, auth };
-            seat = { actor: identity.id, alias: name, lifecycleUid };
-            await activateTerminalSeat(seatTarget, seat);
-            const creds = await issueTerminalSeat(seatTarget, seat, seatExpiry(values, true), (issue) => {
-                acceptedToken = issue.issued.acceptedToken;
-                return provisionAgent(prov, auth, identity, {
-                    subscribe,
-                    allowSubscribe,
-                    allowPublish,
-                    role,
-                    capabilities: def.capabilities,
-                    ...(values["live-only"] ? { durableMembership: false } : {}),
-                    lifecycleUid,
-                    expiresAt: issue.expiresAt,
-                    issued: issue.issued,
-                    issuance: issue.issuance,
+            const creds = await withProvisioner({ space, servers: server, auth }, "spawn-provisioner", async (prov) => {
+                // The seat's lifecycle is activated first, so the issuance can name its gate as the source of
+                // the evidence a helper's spawn is bounded by.
+                const seatTarget = { server, space, tlsRequired: target.tlsRequired, auth };
+                seat = { actor: identity.id, alias: name, lifecycleUid };
+                await activateTerminalSeat(seatTarget, seat);
+                return issueTerminalSeat(seatTarget, seat, seatExpiry(values, true), (issue) => {
+                    acceptedToken = issue.issued.acceptedToken;
+                    return provisionAgent(prov, auth, identity, {
+                        subscribe,
+                        allowSubscribe,
+                        allowPublish,
+                        role,
+                        capabilities: def.capabilities,
+                        ...(values["live-only"] ? { durableMembership: false } : {}),
+                        lifecycleUid,
+                        expiresAt: issue.expiresAt,
+                        issued: issue.issued,
+                        issuance: issue.issuance,
+                    });
                 });
             });
-            await prov.stop();
             // Store first (the source of truth), then materialize — the child's launch reads this FILE.
             // The CLI is the local FS composition (byte-identical), same posture as the manager's spawn.
             const secrets = workspaceSecretStore(target.root);
@@ -1797,31 +1786,6 @@ function checkRemoteAgentMaterial(v, actor) {
         },
     };
 }
-/** A caught value's text for a refusal. A provider or store may reject with any value, including null
- *  or one whose `message` getter or `toString` throws, and the refusal must still be printed, so the
- *  coercion to text runs inside the guard. */
-function rejectionText(e) {
-    try {
-        return String(e?.message ?? e);
-    }
-    catch {
-        return "an unreadable rejection";
-    }
-}
-/** Run one cleanup step, recording its failure in `failed`. A step that threw would otherwise skip
- *  every step after it, and a swallowed one would leave nothing to report. */
-async function attemptCleanup(failed, step, run) {
-    try {
-        await run();
-    }
-    catch (err) {
-        failed.push({ step, err });
-    }
-}
-/** `<step>: <reason>` for each failure. */
-function describeCleanupFailures(failed) {
-    return failed.map(({ step, err }) => `${step}: ${rejectionText(err)}`).join("; ");
-}
 /** Shred a user-mode agent's local material: both secrets from the store, then their files and the
  *  health file. Each step is attempted and a failed one is recorded in `failed`. */
 async function shredAgentMaterial(failed, store, space, name, composition, paths) {
@@ -2070,34 +2034,15 @@ async function provisionUserForeground(target, name, ref, opts) {
             custody: { kind: "foreground" },
         });
         ownedToken = grant.actorToken;
-        const prov = new CotalEndpoint({
-            space,
-            servers: server,
-            creds: await mintCreds(infra, newIdentity(), "provisioner"),
-            channels: [],
-            consume: false,
-            registerPresence: false,
-            watchPresence: false,
-            watchChannels: false,
-            card: { name: "spawn-provisioner", role: "provisioner", kind: "endpoint" },
-        });
-        const reportUserProvisioner = (e) => console.error(`! provisioner: ${e.message}`);
-        prov.on("error", reportUserProvisioner);
-        prov.on("warning", reportUserProvisioner);
-        await prov.start();
-        try {
-            // Full durable footprint, same as the static foreground path: the ACL row is what lets the
-            // delivery daemon authorize this agent's durable joins. `--live-only` opts out.
-            await provisionAgentDurables(prov, { owner, actor: name, lifecycleUid: opts.lifecycleUid }, {
-                subscribe: opts.subscribe,
-                allowSubscribe: opts.allowSubscribe,
-                role: opts.role,
-                ...(opts.liveOnly ? { durableMembership: false } : {}),
-            });
-        }
-        finally {
-            await prov.stop();
-        }
+        await withProvisioner({ space, servers: server, auth: infra }, "spawn-provisioner", (prov) => 
+        // Full durable footprint, same as the static foreground path: the ACL row is what lets the
+        // delivery daemon authorize this agent's durable joins. `--live-only` opts out.
+        provisionAgentDurables(prov, { owner, actor: name, lifecycleUid: opts.lifecycleUid }, {
+            subscribe: opts.subscribe,
+            allowSubscribe: opts.allowSubscribe,
+            role: opts.role,
+            ...(opts.liveOnly ? { durableMembership: false } : {}),
+        }));
         // The store holds the source of truth; the bearer re-exec (`--token-file`) and the launch's
         // sentinel handoff read FILES — materialize both at the canonical paths (byte-identical
         // rewrites under this, the local FS, composition).