@cotal-ai/cli 0.48.2 → 0.50.0

package/dist/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgD,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAiH7F,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B;;;oCAGgC;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;uFAEuF;AACvF,wBAAsB,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyGxG"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgD,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAwH7F,2DAA2D;AAC3D,MAAM,WAAW,aAAa;IAC5B;;;oCAGgC;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;uFAEuF;AACvF,wBAAsB,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyGxG"}

package/dist/command.js

@@ -87,6 +87,14 @@ function skipAutoReconcile(argv) {
         return true;
     if (argv.includes("--help") || argv.includes("-h"))
         return true; // command-specific help must not mutate state
+    // A dry run promises to plan and print while mutating NOTHING, and the boot-gate reconcile is a
+    // mutation of the operator-global seed store, manifest and npm prefix — it ran BEFORE the command
+    // body could reject the invocation, so `down --preserve-state --dry-run` (an unsupported
+    // combination) migrated the whole store to the invoking binary's generation and only then printed
+    // the usage refusal, leaving an older live deployment on a store it no longer matches (#1620). The
+    // planning surface reads what is installed; it never seeds to make the plan prettier.
+    if (argv.includes("--dry-run"))
+        return true;
     if (name === "update")
         return true; // update owns one explicit reconcile; never auto-refresh then force-refresh
     // The seed is skipped for an INTERNAL CHILD re-exec — the `up`/`spawn` that spawns the delivery

package/dist/command.js.map

@@ -1 +1 @@
-{"version":3,"file":"command.js","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA+B,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,2BAA2B,EAC3B,iBAAiB,EACjB,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEjE;;;4EAG4E;AAC5E,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAEjG,SAAS,IAAI,CAAC,QAAmB;IAC/B,+FAA+F;IAC/F,kFAAkF;IAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;QAClC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,2CAA2C,CAAC;IACxE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;sDACsD;AACtD,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,QAAQ,CAAC,QAAkB,EAAE,IAAc;IACxD,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IACzB,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAU,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACpF,kGAAkG;QAClG,8FAA8F;QAC9F,8DAA8D;QAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,WAAW,CAAC,MAAM,CAAC,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,yBAAyB,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAc;IACvC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACtH,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,8CAA8C;IAC/G,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,CAAC,4EAA4E;IAChH,gGAAgG;IAChG,qGAAqG;IACrG,oGAAoG;IACpG,qGAAqG;IACrG,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,gHAAgH;IACnK,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,mDAAmD;IACtG,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,IAAI,oBAAoB,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,gCAAgC;IAC5G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,IAAI,GAAI,CAAuB,EAAE,IAAI,CAAC;IAC5C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACvE,CAAC;AAWD;;uFAEuF;AACvF,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,QAAkB,EAAE,IAAc,EAAE,OAAsB,EAAE;IACvF,iGAAiG;IACjG,iGAAiG;IACjG,6FAA6F;IAC7F,0BAA0B;IAC1B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,YAAY,UAAU,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACzD,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,6BAA6B,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACxD,+FAA+F;IAC/F,+FAA+F;IAC/F,yFAAyF;IACzF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,MAAM,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAAE,OAAO;QAC7C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,QAAmB,CAAC;IACxB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAU,SAAS,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,2FAA2F;QAC3F,6EAA6E;QAC7E,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,gEAAgE;IAC7F,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,8FAA8F;IAC9F,6FAA6F;IAC7F,2FAA2F;IAC3F,iEAAiE;IACjE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnF,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IACD,4FAA4F;IAC5F,wFAAwF;IACxF,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,2BAA2B,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC;gBAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,mFAAmF;QACnF,uFAAuF;QACvF,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,GAAG,GAAI,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;YACjC,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,8FAA8F;QAC9F,2FAA2F;QAC3F,4FAA4F;QAC5F,8FAA8F;QAC9F,+FAA+F;QAC/F,oBAAoB;QACpB,IAAI,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzE,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,KAAK;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,4FAA4F;QAC5F,6FAA6F;QAC7F,sFAAsF;QACtF,6BAA6B;QAC7B,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,oFAAoF;QACpF,8EAA8E;QAC9E,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA+B,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,2BAA2B,EAC3B,iBAAiB,EACjB,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAEjE;;;4EAG4E;AAC5E,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAEjG,SAAS,IAAI,CAAC,QAAmB;IAC/B,+FAA+F;IAC/F,kFAAkF;IAClF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;QAClC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,2CAA2C,CAAC;IACxE,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,GAAG,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,GAAG,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IACtF,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED;sDACsD;AACtD,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,QAAQ,CAAC,QAAkB,EAAE,IAAc;IACxD,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IACzB,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAU,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACpF,kGAAkG;QAClG,8FAA8F;QAC9F,8DAA8D;QAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,WAAW,CAAC,MAAM,CAAC,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,yBAAyB,EAAE,CAAC;IAClC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAc;IACvC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACtH,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,8CAA8C;IAC/G,gGAAgG;IAChG,kGAAkG;IAClG,yFAAyF;IACzF,kGAAkG;IAClG,mGAAmG;IACnG,sFAAsF;IACtF,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,CAAC,4EAA4E;IAChH,gGAAgG;IAChG,qGAAqG;IACrG,oGAAoG;IACpG,qGAAqG;IACrG,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,gHAAgH;IACnK,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,CAAC,mDAAmD;IACtG,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,IAAI,oBAAoB,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,gCAAgC;IAC5G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yFAAyF;AACzF,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,IAAI,GAAI,CAAuB,EAAE,IAAI,CAAC;IAC5C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AACvE,CAAC;AAWD;;uFAEuF;AACvF,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,QAAkB,EAAE,IAAc,EAAE,OAAsB,EAAE;IACvF,iGAAiG;IACjG,iGAAiG;IACjG,6FAA6F;IAC7F,0BAA0B;IAC1B,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,YAAY,UAAU,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACzD,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,6BAA6B,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACxD,+FAA+F;IAC/F,+FAA+F;IAC/F,yFAAyF;IACzF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,MAAM,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAAE,OAAO;QAC7C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,QAAmB,CAAC;IACxB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAU,SAAS,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,2FAA2F;QAC3F,6EAA6E;QAC7E,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,gEAAgE;IAC7F,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChF,IAAI,CAAC,QAAQ,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,8FAA8F;IAC9F,6FAA6F;IAC7F,2FAA2F;IAC3F,iEAAiE;IACjE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACnF,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IACD,4FAA4F;IAC5F,wFAAwF;IACxF,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,2BAA2B,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC;gBAAE,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,mFAAmF;QACnF,uFAAuF;QACvF,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,GAAG,GAAI,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;YACjC,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,8FAA8F;QAC9F,2FAA2F;QAC3F,4FAA4F;QAC5F,8FAA8F;QAC9F,+FAA+F;QAC/F,oBAAoB;QACpB,IAAI,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzE,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,KAAK;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,4FAA4F;QAC5F,6FAA6F;QAC7F,sFAAsF;QACtF,6BAA6B;QAC7B,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,oFAAoF;QACpF,8EAA8E;QAC9E,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/agents.d.ts

@@ -1,4 +1,5 @@
-import { type CompletionResult, type ParsedArgs } from "@cotal-ai/core";
+import { standaloneConnectOpts, type CompletionResult, type ParsedArgs, type SpaceAuth } from "@cotal-ai/core";
+import { type ScatterInstanceReply } from "../lib/control.js";
 export declare const stopFlags: readonly [{
     readonly name: "space";
     readonly type: "string";
@@ -135,6 +136,8 @@ type AgentRow = {
     status: string;
     uptimeMs: number;
     mesh: string;
+    /** The manager's own presence-view state when it built the row; absent from older managers. */
+    meshView?: "current" | "stale" | "unpopulated";
     authHealth?: string;
     authReason?: string;
     model?: string;
@@ -152,6 +155,93 @@ type AgentRow = {
  *  recorded: when no override was requested it stays absent rather than inventing an effective
  *  provider default Cotal cannot observe. */
 export declare function agentIdentity(r: Pick<AgentRow, "agent" | "model" | "variant" | "mode">): string;
+/**
+ * WHERE does the named seat live? A `stop` or `attach` can only be served by the manager actually
+ * HOSTING the seat, and the class queue does not know which one that is — so without this the verb
+ * is answered by whichever instance wins the race and fails on a seat that plainly exists.
+ *
+ * This is a POSITIVE lookup, not a retry after a miss, and that is forced by measurement: a manager
+ * asked about a seat it does not host answers `not-found: no agent "<n>"` — the SAME code and the
+ * same message it gives for a name that exists nowhere. "Hosted elsewhere" and "does not exist" are
+ * indistinguishable from a single manager's answer, so a caller that retried on a miss would scatter
+ * for a typo and, worse, could only ever report the ambiguous message. Asking every instance is the
+ * only construction that can tell the two apart — which is also what lets the error finally say
+ * which case it is.
+ *
+ * Costs a second one-shot instrument. The scatter's freeze read belongs to the PRIVILEGED tier;
+ * `stop`/`attach` mint ADMIN, which is denied that read deliberately ("the admin tier never
+ * scatters"). Rather than widen admin for convenience, the lookup runs as its own privileged
+ * instrument and the admin instrument is then minted pinned to the answer.
+ */
+export type SeatLocation = {
+    kind: "pin";
+    instanceId: string;
+} | {
+    kind: "unpinned";
+} | {
+    kind: "absent";
+    checked: number;
+}
+/** #1638 item 3: the search could not settle. At least one registered instance did not answer
+ *  FOR ITSELF, so the seat may be sitting on it; absence is not what was established. */
+ | {
+    kind: "unknown";
+    answered: number;
+    silent: string[];
+    refused: {
+        instanceId: string;
+        error: string;
+    }[];
+};
+/**
+ * WHAT THE SCATTER ESTABLISHED about one seat name — the whole decision, as a function of the rows
+ * alone, so it is gradable without a broker.
+ *
+ * ANSWERED FOR ITSELF means an instance returned its own roster. A slot that never answered and one
+ * that answered with a REFUSAL are the same fact for this search: neither stated which seats it
+ * hosts, so neither licenses a conclusion about a seat that might be sitting on it (#1638 item 3).
+ * The refusal half is the reachable-but-errored row `scatterManager` reports, which the older
+ * filter counted as a manager that had looked and found nothing.
+ *
+ * Absence is a claim about the WHOLE space, so it is concluded only when the whole space answered.
+ */
+export declare function locateSeatIn(instances: readonly ScatterInstanceReply[], name: string): SeatLocation;
+/**
+ * What a `stop`/`attach`/`input` that did not find its seat TELLS the operator — and the difference
+ * between the two things it can mean (#1638 item 3).
+ *
+ * ABSENT is a claim about the whole space and is only made when the whole space answered for
+ * itself. A registration that gave no answer within the deadline is NOT told to "retry": a manager
+ * whose host died never deregisters, so its row stays in the registry indefinitely and answers
+ * nothing, and a retry against it loops forever. Say what is known (registered, silent), what it
+ * may mean (a live slow host OR a dead registration), and the two real actions.
+ *
+ * UNKNOWN is the other case and it used to print as the first one. The seat may be sitting on the
+ * instance that did not answer, so "no managed agent <name>" was a definite negative drawn from an
+ * incomplete search — and it names the instance COUNT, which is the shape a reader believes.
+ * Measured on a live mesh: a seat that `ps` listed as running the whole time was reported absent,
+ * and the same command with `--on` succeeded first time. A retry loop that reads the old sentence
+ * as "already gone" stops looking for a seat that is still running.
+ */
+export declare function seatMissRefusal(name: string, verb: string, loc: Extract<SeatLocation, {
+    kind: "absent" | "unknown";
+}>): string;
+/** Render one managed-agent row (process fact, mesh fact, optional auth-health line), indented for
+ *  the per-manager grouping a class scatter prints.
+ *
+ *  Two facts, printed as two facts. The manager reports the PROCESS (`status` from the runtime
+ *  handle, `uptimeMs` from its start) and the MESH presence separately, and they disagree in the
+ *  common failure: a seat that is `running` for two days but `offline` on the mesh. Folding them
+ *  into one word rendered ten live processes as "offline" and a 57h-old process with no roster
+ *  entry as "starting…", both false. `mesh: absent` means exactly "not in the presence roster",
+ *  so it prints as that; the process age next to it tells the reader whether it is a fresh start
+ *  or a seat that never joined. */
+/** The mesh column of one `ps` row. A verdict needs a fresh observer: when the manager reports its
+ *  own presence view as `stale` (its watch went silent past TTL) or `unpopulated` (its watch has not
+ *  replayed the bucket yet), `offline` and `absent` describe the manager's watch, not the seat. Print
+ *  "mesh unknown" with the reason instead of a liveness word an operator, or a watchdog, would act
+ *  on. A row from a manager that predates `meshView` carries no field and renders as before. */
+export declare function meshColumn(r: Pick<AgentRow, "mesh" | "meshView">): string;
 /** Extra operational facts for `--wide`. Model and requested variant are already in the compact
  *  identity row, so repeating them here would make wide output noisier without adding provenance.
  *  Only fields the manager actually recorded print; lifecycle uid is required on every row. */
@@ -193,13 +283,84 @@ export declare function reconnectNotice(est: {
 /**
  * The line an exit owes an operator about sessions this attach could not hand back, or nothing.
  *
- * Suppressed on `gone`, and that is not tidiness. That verdict exists because the manager answered
- * `not-found`, which it only answers once the seat has been freed, and freeing a seat ends every
- * session bound to it (`freeSlot` into `endForTarget`, on despawn, self-stop, reap and natural exit
- * alike). The sessions this would name have already been collected, so naming them would be
- * inventing work for someone who is about to close their terminal.
+ * Suppressed on `gone`, and that is not tidiness. That verdict exists only when the manager proves
+ * the live seat is absent: either `not-found`, or the namespaced durable static-slot observation
+ * after its process is gone. Freeing a seat ends every session bound to it (`freeSlot` into
+ * `endForTarget`, on despawn, self-stop, reap and natural exit alike). The sessions this would name
+ * have already been collected, so naming them would be inventing work for someone who is about to
+ * close their terminal.
  */
 export declare function heldSessionNotice(pending: number, verdict: AttachVerdict["kind"]): string | undefined;
+/** Why attach cannot redeem a session grant, said in terms of what the command actually resolved.
+ *
+ *  Three distinct states, kept distinct because the remedy differs and a single sentence covering
+ *  all three is the defect issue #722 opened on (its old text named an internal work item and no
+ *  root at all). A USER-AUTH mesh holds no local seed by design. A REGISTERED static mesh has a
+ *  root and it is named, so an operator can see which directory the command used rather than
+ *  guessing at their cwd.
+ *
+ *  The third arm is an INVARIANT, not advice, and is written that way on purpose. A connection with
+ *  no resolved root is what the type allows, and no supported route reaches redemption in that
+ *  state: both off-registry routes are refused earlier, which `smoke:attach-auth-root` measures
+ *  rather than assumes. So that arm says what its own existence would mean instead of offering a
+ *  remedy for a situation that cannot currently arise. */
+/** The mesh contract that decides how attach redeems a session grant. The mode is the REGISTERED
+ *  one (`MeshTarget.mode`), carried forward from the resolve. It is the only input to the decision:
+ *  `spaceAuth` says whether a SEALED mesh's seed is present, and is never consulted to decide which
+ *  kind of mesh this is. */
+export type AttachSessionTarget = {
+    space: string;
+    server: string;
+    root?: string;
+    spaceAuth?: SpaceAuth;
+    mode?: "auth" | "open" | "user";
+    auth: {
+        bearer?: unknown;
+    };
+};
+/**
+ * HOW this mesh's session grant is redeemed, as a closed union with no optional credential.
+ *
+ * `bare` and `session-caller` are structurally distinct rather than "session-caller, but the creds
+ * may be missing". That distinction is the whole fix for #1205. An optional `creds?: string` on the
+ * redeem path invites exactly one question at every call site — "is the seed there?" — and answering
+ * it with `!creds` is the defect: an OPEN mesh has no seed BY DESIGN, so absence means "bare",
+ * while on a SEALED mesh the same absence means "refuse". One field cannot carry both meanings, so
+ * the mode is named and the compiler makes every consumer read the name.
+ */
+export type RedeemLink = {
+    mode: "bare";
+    tls: boolean;
+} | {
+    mode: "session-caller";
+    tls: boolean;
+    creds: string;
+};
+/** The ONE place a {@link RedeemLink} becomes NATS connect options. Both connections on the redeem
+ *  path (the session link and the abandoned-session hand-back) go through here, so neither can
+ *  invent a credential for an open mesh or drop one on a sealed mesh, and a third caller gets the
+ *  same two arms for free. */
+export declare function redeemConnectOpts(link: RedeemLink): ReturnType<typeof standaloneConnectOpts>;
+/**
+ * Which redeem contract this target gets: a bare open-mesh connection, a seed-backed mint, or a
+ * loud refusal. Graded by `smoke:attach-open-mode`, whose mutations flip each arm in turn.
+ *
+ * EXHAUSTIVE over the three recorded modes on purpose, with `user` named rather than reached by
+ * fallthrough. A `user` entry holds no local seed by design and its two-step redemption is not
+ * wired, so it must refuse even on the day a user-mode root happens to carry static material on
+ * disk; letting it fall through to the seed test would silently mint on the wrong identity plane.
+ * An UNRECORDED mode (a raw off-registry connection) is the conservative arm: it is not known to be
+ * open, so it takes the sealed test and refuses without a seed.
+ */
+export declare function attachSessionMaterial(t: AttachSessionTarget): {
+    kind: "bare";
+} | {
+    kind: "mint";
+    auth: SpaceAuth;
+} | {
+    kind: "fatal";
+    message: string;
+};
 /** How the attach finished, decided inside the loop and acted on outside it — so the terminal is
  *  always given back before anything prints or exits. */
 type AttachVerdict = {

package/dist/commands/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/commands/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6E,KAAK,gBAAgB,EAAkC,KAAK,UAAU,EAAqB,MAAM,gBAAgB,CAAC;AA4BtM,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;EAAgH,CAAC;AACvI,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAsF,CAAC;AAK3G,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAsI,CAAC;AAC/J;;;;;sDAKsD;AACtD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMiB,CAAC;AAEzC,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAQrE;AAED,wBAAsB,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB1D;AAED,KAAK,QAAQ,GAAG;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF;;;6CAG6C;AAC7C,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,GAAG,MAAM,CAM/F;AAkJD;;+FAE+F;AAC/F,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,cAAc,GAAG,YAAY,GAAG,MAAM,CAAC,GAAG,MAAM,EAAE,CAS9H;AAiBD,wBAAsB,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAwGxD;AAuDD;;qCAEqC;AACrC,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAO5D;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,CAAC,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAChC,aAAa,CAKf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE;IAAE,WAAW,CAAC,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGrH;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAIrG;AAybD;yDACyD;AACzD,KAAK,aAAa,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhG,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B5D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB3D"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/commands/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsD,qBAAqB,EAAE,KAAK,gBAAgB,EAAkC,KAAK,UAAU,EAAqB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAItN,OAAO,EAAiH,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAwB7K,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;EAAgH,CAAC;AACvI,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAsF,CAAC;AAK3G,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAAsI,CAAC;AAC/J;;;;;sDAKsD;AACtD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMiB,CAAC;AAEzC,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAQrE;AAED,wBAAsB,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB1D;AAED,KAAK,QAAQ,GAAG;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IAGpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF;;;6CAG6C;AAC7C,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,GAAG,MAAM,CAM/F;AAcD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACrC;yFACyF;GACvF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,CAAC;AAa9G;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,SAAS,oBAAoB,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,CAUnG;AAcD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAA;CAAE,CAAC,GACzD,MAAM,CAWR;AAmCD;;;;;;;;;mCASmC;AACnC;;;;gGAIgG;AAChG,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAAC,GAAG,MAAM,CAYzE;AAuBD;;+FAE+F;AAC/F,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,cAAc,GAAG,YAAY,GAAG,MAAM,CAAC,GAAG,MAAM,EAAE,CAS9H;AAiBD,wBAAsB,EAAE,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAwGxD;AAuDD;;qCAEqC;AACrC,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAO5D;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,CAAC,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAChC,aAAa,CAKf;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE;IAAE,WAAW,CAAC,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGrH;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAIrG;AAiHD;;;;;;;;;;;;0DAY0D;AAC1D;;;4BAG4B;AAC5B,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAChC,IAAI,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC5B,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,GAAG,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D;;;8BAG8B;AAC9B,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAI5F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,mBAAmB,GACxD;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAiBrC;AA2UD;yDACyD;AACzD,KAAK,aAAa,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhG,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA+B5D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,KAAK,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAqB3D"}

package/dist/commands/agents.js

@@ -116,14 +116,33 @@ async function locateSeat(v, name) {
     const scatter = await scatterManager(probe.space, probe.server, "ps", probe.auth, probe.spaceAuth);
     if (!scatter.ok)
         return { kind: "unpinned" }; // cannot locate ⇒ behave exactly as before, never worse
-    const reachable = scatter.instances.filter((i) => i.reachable);
-    const unreachable = scatter.instances.filter((i) => !i.reachable).map((i) => i.instanceId);
-    if (reachable.length <= 1 && !unreachable.length)
+    return locateSeatIn(scatter.instances, name);
+}
+/**
+ * WHAT THE SCATTER ESTABLISHED about one seat name — the whole decision, as a function of the rows
+ * alone, so it is gradable without a broker.
+ *
+ * ANSWERED FOR ITSELF means an instance returned its own roster. A slot that never answered and one
+ * that answered with a REFUSAL are the same fact for this search: neither stated which seats it
+ * hosts, so neither licenses a conclusion about a seat that might be sitting on it (#1638 item 3).
+ * The refusal half is the reachable-but-errored row `scatterManager` reports, which the older
+ * filter counted as a manager that had looked and found nothing.
+ *
+ * Absence is a claim about the WHOLE space, so it is concluded only when the whole space answered.
+ */
+export function locateSeatIn(instances, name) {
+    const reachable = instances.filter((i) => i.reachable);
+    const silent = instances.filter((i) => !i.reachable).map((i) => i.instanceId);
+    if (reachable.length <= 1 && !silent.length)
         return { kind: "unpinned" };
-    const host = reachable.find((i) => (i.data ?? []).some((r) => r.name === name));
+    const answered = reachable.filter((i) => i.error === undefined);
+    const refused = reachable.filter((i) => i.error !== undefined).map((i) => ({ instanceId: i.instanceId, error: i.error }));
+    const host = answered.find((i) => (i.data ?? []).some((r) => r.name === name));
     if (host)
         return { kind: "pin", instanceId: host.instanceId };
-    return { kind: "absent", checked: reachable.length, unreachable };
+    if (silent.length || refused.length)
+        return { kind: "unknown", answered: answered.length, silent, refused };
+    return { kind: "absent", checked: answered.length };
 }
 /** Resolve `--on` for a targeted verb: an explicit pin wins; otherwise locate the seat. Returns the
  *  instance to address, or exits with an error that says WHICH case the miss was. */
@@ -136,17 +155,38 @@ async function pinForTarget(v, verb) {
         return loc.instanceId;
     if (loc.kind === "unpinned")
         return undefined;
-    // The honest error #383 asked for: name the search, not just the absence. A registration that
-    // gave no answer within the deadline is NOT told to "retry": a manager whose host died never
-    // deregisters, so its row stays in the registry indefinitely and answers nothing, and a retry
-    // against it loops forever. Say what is known (registered, silent), what it may mean (a live
-    // slow host OR a dead registration), and the two real actions.
-    const missed = loc.unreachable.length
-        ? ` ${loc.unreachable.length} registered manager instance(s) gave no answer within the deadline (${loc.unreachable.join(", ")}). Either that host is alive but slow, or it died and its registration was never removed; if it is dead, deregister it. To address it directly: \`${verb} --on <instance>\` (the whole id, as printed).`
-        : "";
-    console.error(c.red(`✗ no managed agent "${v.name}" on any of the ${loc.checked} reachable manager instance(s) in this space.${missed}`));
+    console.error(c.red(`✗ ${seatMissRefusal(String(v.name), verb, loc)}`));
     process.exit(1);
 }
+/**
+ * What a `stop`/`attach`/`input` that did not find its seat TELLS the operator — and the difference
+ * between the two things it can mean (#1638 item 3).
+ *
+ * ABSENT is a claim about the whole space and is only made when the whole space answered for
+ * itself. A registration that gave no answer within the deadline is NOT told to "retry": a manager
+ * whose host died never deregisters, so its row stays in the registry indefinitely and answers
+ * nothing, and a retry against it loops forever. Say what is known (registered, silent), what it
+ * may mean (a live slow host OR a dead registration), and the two real actions.
+ *
+ * UNKNOWN is the other case and it used to print as the first one. The seat may be sitting on the
+ * instance that did not answer, so "no managed agent <name>" was a definite negative drawn from an
+ * incomplete search — and it names the instance COUNT, which is the shape a reader believes.
+ * Measured on a live mesh: a seat that `ps` listed as running the whole time was reported absent,
+ * and the same command with `--on` succeeded first time. A retry loop that reads the old sentence
+ * as "already gone" stops looking for a seat that is still running.
+ */
+export function seatMissRefusal(name, verb, loc) {
+    const address = `To address one directly: \`${verb} --on <instance>\` (the whole id, as printed).`;
+    if (loc.kind === "absent")
+        return `no managed agent "${name}" on any of the ${loc.checked} reachable manager instance(s) in this space.`;
+    const silent = loc.silent.length
+        ? ` ${loc.silent.length} registered manager instance(s) gave no answer within the deadline (${loc.silent.join(", ")}). Either that host is alive but slow, or it died and its registration was never removed; if it is dead, deregister it.`
+        : "";
+    const refused = loc.refused.length
+        ? ` ${loc.refused.length} refused the read rather than answering (${loc.refused.map((r) => `${r.instanceId}: ${r.error}`).join("; ")}).`
+        : "";
+    return `could not establish where "${name}" is: ${loc.answered} manager instance(s) answered and none hosts it, but ${loc.silent.length + loc.refused.length} did not answer for themselves, so this is NOT a report that it is gone — it may be running on one of those.${silent}${refused} ${address}`;
+}
 /**
  * What one SILENT manager instance's row says. The wording lives here, in the CLI, and not in the
  * scatter that produced the fact: core reports a frozen slot that did not answer, and turning that
@@ -186,13 +226,17 @@ function silentManagerRow(liveness, instanceId) {
  *  entry as "starting…", both false. `mesh: absent` means exactly "not in the presence roster",
  *  so it prints as that; the process age next to it tells the reader whether it is a fresh start
  *  or a seat that never joined. */
-function printAgentRow(r, indent = "") {
-    const proc = r.status === "running"
-        ? c.green("running") + c.dim(" " + fmtUptime(r.uptimeMs))
-        : r.status === "exited"
-            ? c.red("exited") + c.dim(" after " + fmtUptime(r.uptimeMs))
-            : c.yellow(r.status) + c.dim(" " + fmtUptime(r.uptimeMs));
-    const mesh = r.mesh === "absent"
+/** The mesh column of one `ps` row. A verdict needs a fresh observer: when the manager reports its
+ *  own presence view as `stale` (its watch went silent past TTL) or `unpopulated` (its watch has not
+ *  replayed the bucket yet), `offline` and `absent` describe the manager's watch, not the seat. Print
+ *  "mesh unknown" with the reason instead of a liveness word an operator, or a watchdog, would act
+ *  on. A row from a manager that predates `meshView` carries no field and renders as before. */
+export function meshColumn(r) {
+    if (r.meshView === "stale")
+        return c.yellow("mesh unknown") + c.dim(" (manager's presence view is stale)");
+    if (r.meshView === "unpopulated")
+        return c.yellow("mesh unknown") + c.dim(" (manager's presence view not yet populated)");
+    return r.mesh === "absent"
         ? c.yellow("not in roster")
         : r.mesh === "offline"
             ? c.dim("mesh offline")
@@ -201,6 +245,14 @@ function printAgentRow(r, indent = "") {
                 : r.mesh === "waiting"
                     ? c.yellow("waiting")
                     : c.cyan(r.mesh);
+}
+function printAgentRow(r, indent = "") {
+    const proc = r.status === "running"
+        ? c.green("running") + c.dim(" " + fmtUptime(r.uptimeMs))
+        : r.status === "exited"
+            ? c.red("exited") + c.dim(" after " + fmtUptime(r.uptimeMs))
+            : c.yellow(r.status) + c.dim(" " + fmtUptime(r.uptimeMs));
+    const mesh = meshColumn(r);
     // Confirmed failure is red; ambiguity/warning states (unknown/stale) are yellow — the operator
     // triages "definitely broken" before "might be".
     const authColor = r.authHealth === "auth-renewal-failed" ? c.red : c.yellow;
@@ -437,11 +489,12 @@ export function reconnectNotice(est, alreadySaid) {
 /**
  * The line an exit owes an operator about sessions this attach could not hand back, or nothing.
  *
- * Suppressed on `gone`, and that is not tidiness. That verdict exists because the manager answered
- * `not-found`, which it only answers once the seat has been freed, and freeing a seat ends every
- * session bound to it (`freeSlot` into `endForTarget`, on despawn, self-stop, reap and natural exit
- * alike). The sessions this would name have already been collected, so naming them would be
- * inventing work for someone who is about to close their terminal.
+ * Suppressed on `gone`, and that is not tidiness. That verdict exists only when the manager proves
+ * the live seat is absent: either `not-found`, or the namespaced durable static-slot observation
+ * after its process is gone. Freeing a seat ends every session bound to it (`freeSlot` into
+ * `endForTarget`, on despawn, self-stop, reap and natural exit alike). The sessions this would name
+ * have already been collected, so naming them would be inventing work for someone who is about to
+ * close their terminal.
  */
 export function heldSessionNotice(pending, verdict) {
     if (pending < 1 || verdict === "gone")
@@ -481,9 +534,10 @@ async function establishAttachSession(v, on, reconnect, first) {
     if (!reply.ok)
         return { ok: false, kind: attachRefusal(reply.code, reply.details), message: reply.error ?? "error", fromManager: true };
     // P2 item 6: the reply is the holder-bound §13.6 session GRANT (no ws:// URL). Redeem it over the
-    // mesh — mint a per-session, rails-only caller cred from the local space seed, connect, and drive
-    // the terminal through the session rail. USER mesh (bearer, no local seed): refuse LOUD — the
-    // 2-step user-mode redemption callout is the #29 follow-up, deliberately not wired here.
+    // mesh. A static-auth mesh mints a per-session, rails-only caller cred from the resolved root's
+    // seed. A registered open mesh has no seed: the same bare connection `askManagerEp` already used
+    // for the control round trip opens the caller rail. USER mesh (bearer, no local seed): refuse LOUD
+    // — the 2-step user-mode redemption callout is the #29 follow-up, deliberately not wired here.
     const { grant } = reply.data;
     // The trust material the TARGET resolved, not a second answer walked up from the cwd. This used
     // to be `loadSpaceAuth(authDir(findCotalRoot()), t.space)`, which is the defect behind issue #722:
@@ -505,17 +559,27 @@ async function establishAttachSession(v, on, reconnect, first) {
     if (shadow)
         console.error(`! this directory resolves to ${shadow.cwdRoot}, whose .cotal/auth holds a DIFFERENT trust chain for space "${t.space}".\n` +
             `  attach used ${t.root}, the root this mesh resolved to. The other one is not being used, and is worth a look.`);
-    const auth = t.spaceAuth;
-    if (!auth)
-        return {
-            ok: false, kind: "fatal",
-            message: attachNoSeedMessage(t),
-        };
+    const tls = t.auth.tls === true;
     const id = newIdentity();
-    const creds = await mintCreds(auth, id, "session-caller", {
-        sessionCaller: { endpoint: grant.endpoint, sessionId: grant.sessionId, epoch: grant.serving.epoch },
-        expiresAt: Math.floor(grant.exp / 1000), // grant.exp is ms (now+ttlMs); the JWT exp is seconds
-    });
+    // WHICH CONTRACT redeems this grant is decided ONCE, by the recorded mesh mode, and the answer is
+    // a value this function then carries. It is never re-derived from the absence of a seed: that
+    // inference is issue #1205 itself, where an open mesh (which holds no seed BY DESIGN) was read as
+    // a static mesh whose seed had gone missing, and every open attach was refused.
+    const material = attachSessionMaterial(t);
+    if (material.kind === "fatal")
+        return { ok: false, kind: "fatal", message: material.message };
+    const link = material.kind === "bare"
+        // An open mesh has no credential system: the same bare connection the control round trip
+        // already used opens the caller rail. Nothing is minted and nothing is invented.
+        ? { mode: "bare", tls }
+        : {
+            mode: "session-caller",
+            tls,
+            creds: await mintCreds(material.auth, id, "session-caller", {
+                sessionCaller: { endpoint: grant.endpoint, sessionId: grant.sessionId, epoch: grant.serving.epoch },
+                expiresAt: Math.floor(grant.exp / 1000), // grant.exp is ms (now+ttlMs); the JWT exp is seconds
+            }),
+        };
     // maxReconnectAttempts is the whole difference between the two modes, and it is deliberate.
     // ONE-SHOT keeps the old -1: the NATS layer redials forever under a single session.
     // RECONNECTING uses 0, because that redial is what breaks the attach rather than saving it — the
@@ -526,7 +590,7 @@ async function establishAttachSession(v, on, reconnect, first) {
     // real repaint, instead of a restored socket over a session that ended without us.
     const nc = await dialerFor(t.server)({
         servers: t.server,
-        ...standaloneConnectOpts({ creds, tls: false }),
+        ...redeemConnectOpts(link),
         inboxPrefix: `_INBOX_${id.id}`,
         maxReconnectAttempts: reconnect ? 0 : -1,
         // Detection latency is part of the defect, not a detail of it. A laptop waking from sleep does
@@ -540,21 +604,46 @@ async function establishAttachSession(v, on, reconnect, first) {
         // half-opens a link is what would grade this line, and it does not exist here yet.
         ...(reconnect ? { pingInterval: 10_000 } : {}),
     });
-    return { ok: true, nc, grant, creds, inbox: id.id, server: t.server };
+    return { ok: true, nc, grant, link, inbox: id.id, server: t.server };
 }
-/** Why attach cannot redeem a session grant, said in terms of what the command actually resolved.
- *
- *  Three distinct states, kept distinct because the remedy differs and a single sentence covering
- *  all three is the defect issue #722 opened on (its old text named an internal work item and no
- *  root at all). A USER-AUTH mesh holds no local seed by design. A REGISTERED static mesh has a
- *  root and it is named, so an operator can see which directory the command used rather than
- *  guessing at their cwd.
+/** The ONE place a {@link RedeemLink} becomes NATS connect options. Both connections on the redeem
+ *  path (the session link and the abandoned-session hand-back) go through here, so neither can
+ *  invent a credential for an open mesh or drop one on a sealed mesh, and a third caller gets the
+ *  same two arms for free. */
+export function redeemConnectOpts(link) {
+    return link.mode === "bare"
+        ? standaloneConnectOpts({ tls: link.tls })
+        : standaloneConnectOpts({ creds: link.creds, tls: link.tls });
+}
+/**
+ * Which redeem contract this target gets: a bare open-mesh connection, a seed-backed mint, or a
+ * loud refusal. Graded by `smoke:attach-open-mode`, whose mutations flip each arm in turn.
  *
- *  The third arm is an INVARIANT, not advice, and is written that way on purpose. A connection with
- *  no resolved root is what the type allows, and no supported route reaches redemption in that
- *  state: both off-registry routes are refused earlier, which `smoke:attach-auth-root` measures
- *  rather than assumes. So that arm says what its own existence would mean instead of offering a
- *  remedy for a situation that cannot currently arise. */
+ * EXHAUSTIVE over the three recorded modes on purpose, with `user` named rather than reached by
+ * fallthrough. A `user` entry holds no local seed by design and its two-step redemption is not
+ * wired, so it must refuse even on the day a user-mode root happens to carry static material on
+ * disk; letting it fall through to the seed test would silently mint on the wrong identity plane.
+ * An UNRECORDED mode (a raw off-registry connection) is the conservative arm: it is not known to be
+ * open, so it takes the sealed test and refuses without a seed.
+ */
+export function attachSessionMaterial(t) {
+    switch (t.mode) {
+        // An OPEN mesh: no credential system at all, so there is no seed to be missing and nothing to
+        // mint. This is the arm issue #1205 did not have.
+        case "open":
+            return { kind: "bare" };
+        // A USER mesh: refused by name, and refused EVEN IF a seed is present, because the bearer plane
+        // is the control surface there and static material would be the wrong identity.
+        case "user":
+            return { kind: "fatal", message: attachNoSeedMessage(t) };
+        // SEALED (`auth`) and unrecorded: the seed is required, and its absence is a refusal. A sealed
+        // mesh must never be rescued by the open arm — that is the failure a fix for #1205 is most
+        // likely to introduce, and `smoke:attach-open-mode` asserts the refusal by name against a live
+        // sealed broker.
+        default:
+            return t.spaceAuth ? { kind: "mint", auth: t.spaceAuth } : { kind: "fatal", message: attachNoSeedMessage(t) };
+    }
+}
 function attachNoSeedMessage(t) {
     const shadow = t.root === undefined ? undefined : divergentCwdAnchor(t.root, t.space);
     const shadowLine = shadow
@@ -565,7 +654,7 @@ function attachNoSeedMessage(t) {
         return `${head}\n  broker ${t.server}\n  This is a USER-AUTH mesh, which holds no local seed by design; two-step user-mode redemption is not wired yet, so attach is unavailable on it from every directory, not just this one.${shadowLine}`;
     if (t.root === undefined)
         return `${head}\n  broker ${t.server}\n  This connection resolved NO checkout root, and no supported route reaches redemption in that state: an off-registry \`--server\` on an unregistered space is refused for missing credentials, and \`--creds\` is refused at the control surface, both before a session grant is asked for. Reaching this sentence means a route now exists that skips both refusals.${shadowLine}`;
-    return `${head}\n  broker ${t.server}\n  resolved root ${t.root}\n  A static-auth mesh keeps this space's seed under <root>/.cotal/auth. That root is what this command resolved and connected with, so if it is not the checkout holding this space's auth, re-register the mesh with \`cotal meshes add ${t.space} --server ${t.server} --root <dir>\`.${shadowLine}`;
+    return `${head}\n  broker ${t.server}\n  resolved root ${t.root}\n  This is a static-auth mesh. Attach still needs this space's seed under ${t.root}/.cotal/auth. Restore the seed at that checkout. This mesh is not open, so attach will not connect without the seed.${shadowLine}`;
 }
 /**
  * Tell the manager a session is over, so it gets its slot back.
@@ -577,15 +666,16 @@ function attachNoSeedMessage(t) {
  * to 2 — one slot per outage, held until the seat or the manager ends it, against a ceiling of 64.
  *
  * The mechanism is the advisory close frame the rail already defines; the manager's bridge ends on
- * it. It has to be published with THIS session's caller credential, the only one scoped to this
- * session's subjects, so a re-establishment cannot send it on the abandoned session's behalf — a
- * fresh session's credential covers a fresh session's subjects. Hence a short-lived connection
- * minted from the credential the abandoned session already had.
+ * it. On a static-auth mesh it has to be published with THIS session's caller credential, the only
+ * one scoped to this session's subjects, so a re-establishment cannot send it on the abandoned
+ * session's behalf. On a registered open mesh there is no session-caller seed: the same bare
+ * connection the session used hands the slot back. Hence a short-lived connection minted from the
+ * abandoned session's own material, never an invented seed.
  */
 async function releaseAbandonedSession(s) {
     const nc = await dialerFor(s.server)({
         servers: s.server,
-        ...standaloneConnectOpts({ creds: s.creds, tls: false }),
+        ...redeemConnectOpts(s.link),
         inboxPrefix: `_INBOX_${s.inbox}`,
         maxReconnectAttempts: 0,
         timeout: LINK_DEADLINE_MS,
@@ -786,7 +876,7 @@ async function runAttachLoop(vv, pin, reconnect, key, hold) {
                 releaseStdin();
                 const late = await attempting.catch(() => undefined);
                 if (late?.ok) {
-                    abandoned.push({ grant: late.grant, creds: late.creds, inbox: late.inbox, server: late.server });
+                    abandoned.push({ grant: late.grant, link: late.link, inbox: late.inbox, server: late.server });
                     // And CLOSE the link that session came up on. Nothing here will ever read it, and an open
                     // NATS connection is a ref'd handle: measured, the attach printed `detached from` and then
                     // sat there forever, because the hand-back mints its own short-lived connection from the
@@ -864,7 +954,7 @@ async function runAttachLoop(vv, pin, reconnect, key, hold) {
                 handedBack = await flushed(est.nc);
             }
             if (!handedBack && reconnect) {
-                abandoned.push({ grant: est.grant, creds: est.creds, inbox: est.inbox, server: est.server });
+                abandoned.push({ grant: est.grant, link: est.link, inbox: est.inbox, server: est.server });
             }
             await closeLink(est.nc);
         }