@cotal-ai/cli 0.5.0 → 0.7.0

package/dist/lib/manager-proc.js

@@ -5,6 +5,12 @@ import { selfArgv } from "./self-exec.js";
 import { resolveSpace } from "./status.js";
 import { cotalPath } from "./paths.js";
 const PID_PATH = () => cotalPath("manager.pid");
+/** Sibling marker of `manager.pid`: written by THIS build's manager (which no longer hosts Plane-3 —
+ *  the server-side delivery daemon does). Its presence beside a live `manager.pid` proves the manager is
+ *  "delivery-aware" / non-hosting. A live `manager.pid` WITHOUT this marker is an OLD (pre-delivery-daemon)
+ *  manager that still calls `startPlane3` — the delivery preflight stops it before the daemon binds, so an
+ *  old hosting manager never double-binds `fanout`/`reader` against the new daemon. */
+const DELIVERY_AWARE_MARKER = () => cotalPath("manager.delivery-aware");
 function alive(pid) {
     try {
         process.kill(pid, 0); // signal 0: liveness probe, doesn't actually signal
@@ -22,16 +28,46 @@ export function managerUp() {
     const pid = Number(readFileSync(p, "utf8").trim());
     return Number.isFinite(pid) && alive(pid);
 }
+/** True if the live manager carries a delivery-aware marker BOUND to its current pid (i.e. it's THIS
+ *  build, non-hosting). Fail-closed: the marker stores the pid it was written for, and this requires it
+ *  to equal the live `manager.pid` — a stale marker left by a crash, a mismatch, or an unparseable file
+ *  all read as NOT delivery-aware, so a live old hosting `manager.pid` can't be mistaken for non-hosting
+ *  and the delivery preflight stops it. */
+export function managerHasDeliveryMarker() {
+    const markerPath = DELIVERY_AWARE_MARKER();
+    const pidPath = PID_PATH();
+    if (!existsSync(markerPath) || !existsSync(pidPath))
+        return false;
+    const markerPid = Number(readFileSync(markerPath, "utf8").trim());
+    const livePid = Number(readFileSync(pidPath, "utf8").trim());
+    return Number.isFinite(markerPid) && Number.isFinite(livePid) && markerPid === livePid;
+}
 /** True if any process's full command line matches `pattern` (`pgrep -f`). Detects processes that
  *  have no pid file — the cmux-tab manager and the driving session — which live in cmux tabs. */
 export function pgrepMatches(pattern) {
     return spawnSync("pgrep", ["-f", pattern], { stdio: "ignore" }).status === 0;
 }
 /** True if a cmux-runtime manager is live for this space. Its cmux tab persists after the process
- *  exits, so a workspace listing isn't proof — the process is. Matches prod `cotal.js` and dev
- *  `cotal.ts` (both carry `cmux --space <space>`). */
+ *  exits, so a workspace listing isn't proof — the process is. A cmux manager runs `… supervise
+ *  --runtime cmux … --space <space> …`; match order-independently (the session launcher emits the
+ *  two flags adjacent, but a hand-typed launch may reorder them) by narrowing to `--runtime cmux`
+ *  processes, then confirming the exact `--space <space>` token in each one's argv. Works for prod
+ *  `cotal.js` and dev `cotal.ts` alike. */
 export function cmuxManagerRunning(space) {
-    return pgrepMatches(`cmux --space ${space}`);
+    // `--` so pgrep doesn't read the leading `--runtime` as one of its own options.
+    const r = spawnSync("pgrep", ["-f", "--", "--runtime cmux"], { encoding: "utf8" });
+    if (r.status !== 0)
+        return false;
+    // Match the `--space` value as a whole token (space names can't contain whitespace), so `demo`
+    // never matches a process serving `demo2`. Both `--space <space>` and `--space=<space>` forms.
+    const servesSpace = (args) => {
+        const tokens = args.split(/\s+/);
+        return tokens.some((t, i) => (t === "--space" && tokens[i + 1] === space) || t === `--space=${space}`);
+    };
+    return r.stdout
+        .split("\n")
+        .filter(Boolean)
+        .some((pid) => servesSpace(spawnSync("ps", ["-p", pid, "-o", "args="], { encoding: "utf8" }).stdout));
 }
 /** Start the control-plane manager detached (pid in `.cotal/manager.pid`, output to
  *  `.cotal/manager.log`), stopped by `cotal down`. Re-execs this same CLI's `supervise` — the
@@ -54,6 +90,9 @@ export function startManagerDetached(o = {}) {
     closeSync(fd);
     child.unref();
     writeFileSync(PID_PATH(), String(child.pid));
+    // Mark this manager as delivery-aware (non-hosting) so the delivery preflight can tell it apart from
+    // an old Plane-3-hosting manager. Written next to the pid, removed together in stopManager / down.
+    writeFileSync(DELIVERY_AWARE_MARKER(), String(child.pid));
     return child.pid ?? 0;
 }
 /** Make the control plane available: reuse a manager already running for this folder, else start
@@ -68,6 +107,7 @@ export function ensureManager(o = {}) {
  *  so the two don't both answer the control plane (queue-grouped requests would split between them). */
 export function stopManager() {
     const p = PID_PATH();
+    rmSync(DELIVERY_AWARE_MARKER(), { force: true }); // drop the marker with the pid (gone either way)
     if (!existsSync(p))
         return;
     const pid = Number(readFileSync(p, "utf8").trim());

package/dist/lib/manager-proc.js.map

@@ -1 +1 @@
-{"version":3,"file":"manager-proc.js","sourceRoot":"","sources":["../../src/lib/manager-proc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;AAEhD,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,oDAAoD;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,SAAS;IACvB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;iGACiG;AACjG,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED;;sDAEsD;AACtD,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,YAAY,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;;;0FAI0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,IAA2D,EAAE;IAChG,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG;QACX,GAAG,IAAI;QACP,WAAW;QACX,SAAS;QACT,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACtC,UAAU;QACV,CAAC,CAAC,MAAM,IAAI,cAAc;QAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,aAAa,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;iEACiE;AACjE,MAAM,UAAU,aAAa,CAAC,IAA2D,EAAE;IACzF,IAAI,SAAS,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;wGACwG;AACxG,MAAM,UAAU,WAAW;IACzB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,CAAC,CAAC,CAAC;AACZ,CAAC"}
+{"version":3,"file":"manager-proc.js","sourceRoot":"","sources":["../../src/lib/manager-proc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;AAChD;;;;uFAIuF;AACvF,MAAM,qBAAqB,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;AAExE,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,oDAAoD;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,SAAS;IACvB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;;;2CAI2C;AAC3C,MAAM,UAAU,wBAAwB;IACtC,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;IAC3B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,KAAK,OAAO,CAAC;AACzF,CAAC;AAED;iGACiG;AACjG,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;2CAK2C;AAC3C,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,gFAAgF;IAChF,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,+FAA+F;IAC/F,+FAA+F;IAC/F,MAAM,WAAW,GAAG,CAAC,IAAY,EAAW,EAAE;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,WAAW,KAAK,EAAE,CAAC,CAAC;IACzG,CAAC,CAAC;IACF,OAAO,CAAC,CAAC,MAAM;SACZ,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED;;;;0FAI0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,IAA2D,EAAE;IAChG,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG;QACX,GAAG,IAAI;QACP,WAAW;QACX,SAAS;QACT,CAAC,CAAC,KAAK,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACtC,UAAU;QACV,CAAC,CAAC,MAAM,IAAI,cAAc;QAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,aAAa,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,qGAAqG;IACrG,mGAAmG;IACnG,aAAa,CAAC,qBAAqB,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;iEACiE;AACjE,MAAM,UAAU,aAAa,CAAC,IAA2D,EAAE;IACzF,IAAI,SAAS,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;wGACwG;AACxG,MAAM,UAAU,WAAW;IACzB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,MAAM,CAAC,qBAAqB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,iDAAiD;IACnG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,CAAC,CAAC,CAAC;AACZ,CAAC"}

package/dist/lib/meshes.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Drop registry entries whose broker is gone — a `cotal up` that crashed or was `kill -9`'d without
+ * `cotal down` leaves a record behind. Probe each in parallel; only `unreachable` (refused/timeout)
+ * is stale, an auth broker answering `auth-required` is alive. Called by `spawn`/`use`/`meshes`
+ * before they act on the registry — never by completion (a `<TAB>` must not open the network).
+ */
+export declare function pruneStaleMeshes(): Promise<void>;
+//# sourceMappingURL=meshes.d.ts.map

package/dist/lib/meshes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meshes.d.ts","sourceRoot":"","sources":["../../src/lib/meshes.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAOtD"}

package/dist/lib/meshes.js

@@ -0,0 +1,15 @@
+import { loadMeshes, probeConnect, removeMesh } from "@cotal-ai/core";
+/**
+ * Drop registry entries whose broker is gone — a `cotal up` that crashed or was `kill -9`'d without
+ * `cotal down` leaves a record behind. Probe each in parallel; only `unreachable` (refused/timeout)
+ * is stale, an auth broker answering `auth-required` is alive. Called by `spawn`/`use`/`meshes`
+ * before they act on the registry — never by completion (a `<TAB>` must not open the network).
+ */
+export async function pruneStaleMeshes() {
+    await Promise.all(loadMeshes().map(async (m) => {
+        const r = await probeConnect(m.server);
+        if (!r.ok && r.reason === "unreachable")
+            removeMesh(m.space);
+    }));
+}
+//# sourceMappingURL=meshes.js.map

package/dist/lib/meshes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meshes.js","sourceRoot":"","sources":["../../src/lib/meshes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,OAAO,CAAC,GAAG,CACf,UAAU,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa;YAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/lib/onboard.js

@@ -1,15 +1,15 @@
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
 import { join } from "node:path";
+import { homeCotalDir } from "@cotal-ai/core";
 /** Machine-level "I've onboarded before" marker. Its presence flips `cotal` from the
  *  full first-run flow to the compact ensure+status run. Lives next to the materialized
- *  plugin marketplace under ~/.cotal. */
-const MARKER = join(homedir(), ".cotal", "onboarded.json");
+ *  plugin marketplace under ~/.cotal (COTAL_HOME-overridable, via {@link homeCotalDir}). */
+const MARKER = () => join(homeCotalDir(), "onboarded.json");
 export function isOnboarded() {
-    return existsSync(MARKER);
+    return existsSync(MARKER());
 }
 export function markOnboarded(version) {
-    mkdirSync(join(homedir(), ".cotal"), { recursive: true });
-    writeFileSync(MARKER, JSON.stringify({ version, ts: new Date().toISOString() }, null, 2));
+    mkdirSync(homeCotalDir(), { recursive: true, mode: 0o700 });
+    writeFileSync(MARKER(), JSON.stringify({ version, ts: new Date().toISOString() }, null, 2));
 }
 //# sourceMappingURL=onboard.js.map

package/dist/lib/onboard.js.map

@@ -1 +1 @@
-{"version":3,"file":"onboard.js","sourceRoot":"","sources":["../../src/lib/onboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;yCAEyC;AACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAE3D,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC"}
+{"version":3,"file":"onboard.js","sourceRoot":"","sources":["../../src/lib/onboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C;;4FAE4F;AAC5F,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAE5D,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC"}

package/dist/lib/transient.d.ts

@@ -1,18 +1,19 @@
 import { CotalEndpoint } from "@cotal-ai/core";
 /**
  * A one-shot, write-capable connection for the headless commands that touch the live mesh
- * (`dm`/`msg`/`ask`, and `personas list --running`). Resolve space/server/creds the same way
- * everywhere, open a transient endpoint that never joins the roster, do the one thing, stop.
- * Fail-loud throughout — an unreachable server or a space mismatch exits, never degrades.
+ * (`dm`/`msg`/`ask`, and `personas list --running`). Resolution + creds + reachability all go through
+ * the shared `connectOrExit` (so these work from any directory, and an explicit `--creds` is a raw
+ * off-registry connection). Opens a transient endpoint that never joins the roster, does the one
+ * thing, stops.
  */
 export interface ConnectValues {
     space?: string;
     server?: string;
     creds?: string;
 }
-/** Resolve where to connect and with what credentials: an explicit `--creds` wins; else self-mint
- *  from `.cotal/auth` so an AUTH-mode mesh admits us; else connect bare on an open mesh. Exits with
- *  a clear message on a `--space` that contradicts the local auth, or an unreachable server. */
+/** Resolve where to connect + with what credentials (`--creds` → raw off-registry; else the running
+ *  mesh's minted manager creds). Fail-loud — an unresolved registry or an unreachable/auth-mismatched
+ *  broker exits with one sentence, never degrades. */
 export declare function resolveConnect(values: ConnectValues): Promise<{
     server: string;
     space: string;

package/dist/lib/transient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transient.d.ts","sourceRoot":"","sources":["../../src/lib/transient.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EAQd,MAAM,gBAAgB,CAAC;AAIxB;;;;;GAKG;AAEH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;gGAEgG;AAChG,wBAAsB,cAAc,CAClC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuB5D;AAED;iGACiG;AACjG,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,EAAE,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAe/C"}
+{"version":3,"file":"transient.d.ts","sourceRoot":"","sources":["../../src/lib/transient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAI/C;;;;;;GAMG;AAEH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;sDAEsD;AACtD,wBAAsB,cAAc,CAClC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAG5D;AAED;iGACiG;AACjG,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,EAAE,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAe/C"}

package/dist/lib/transient.js

@@ -1,30 +1,11 @@
-import { readFileSync } from "node:fs";
-import { CotalEndpoint, isReachable, DEFAULT_SERVER, DEFAULT_SPACE, authDir, loadSpaceAuth, mintCreds, newIdentity, } from "@cotal-ai/core";
+import { CotalEndpoint } from "@cotal-ai/core";
 import { c } from "../ui.js";
-import { cotalRoot } from "./paths.js";
-/** Resolve where to connect and with what credentials: an explicit `--creds` wins; else self-mint
- *  from `.cotal/auth` so an AUTH-mode mesh admits us; else connect bare on an open mesh. Exits with
- *  a clear message on a `--space` that contradicts the local auth, or an unreachable server. */
+import { connectOrExit } from "./connect.js";
+/** Resolve where to connect + with what credentials (`--creds` → raw off-registry; else the running
+ *  mesh's minted manager creds). Fail-loud — an unresolved registry or an unreachable/auth-mismatched
+ *  broker exits with one sentence, never degrades. */
 export async function resolveConnect(values) {
-    const server = values.server ?? DEFAULT_SERVER;
-    let creds = values.creds ? readFileSync(values.creds, "utf8") : undefined;
-    let space = values.space;
-    if (!creds) {
-        const auth = loadSpaceAuth(authDir(cotalRoot()));
-        if (auth) {
-            if (space && space !== auth.space) {
-                console.error(c.red(`Auth here is for space "${auth.space}", not "${space}". Use --space ${auth.space} (or pass --creds).`));
-                process.exit(1);
-            }
-            space = auth.space;
-            creds = await mintCreds(auth, newIdentity(), "manager");
-        }
-    }
-    space = space ?? DEFAULT_SPACE;
-    if (!(await isReachable(server, { creds }))) {
-        console.error(c.red(`Can't reach NATS at ${server}. Run: cotal up`));
-        process.exit(1);
-    }
+    const { server, space, creds } = await connectOrExit(values, "manager");
     return { server, space, creds };
 }
 /** Open a transient endpoint: it watches presence (so name→id resolution and the live roster work)

package/dist/lib/transient.js.map

@@ -1 +1 @@
-{"version":3,"file":"transient.js","sourceRoot":"","sources":["../../src/lib/transient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EACL,aAAa,EACb,WAAW,EACX,cAAc,EACd,aAAa,EACb,OAAO,EACP,aAAa,EACb,SAAS,EACT,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAevC;;gGAEgG;AAChG,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC;IAC/C,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACzB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClC,OAAO,CAAC,KAAK,CACX,CAAC,CAAC,GAAG,CAAC,2BAA2B,IAAI,CAAC,KAAK,WAAW,KAAK,kBAAkB,IAAI,CAAC,KAAK,qBAAqB,CAAC,CAC9G,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACnB,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,KAAK,GAAG,KAAK,IAAI,aAAa,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,MAAM,iBAAiB,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED;iGACiG;AACjG,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,IAAY;IAEZ,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC;QAC3B,KAAK;QACL,OAAO,EAAE,MAAM;QACf,KAAK;QACL,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,KAAK;QACd,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;KACjC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACvB,CAAC"}
+{"version":3,"file":"transient.js","sourceRoot":"","sources":["../../src/lib/transient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAgB7C;;sDAEsD;AACtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAqB;IAErB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACxE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED;iGACiG;AACjG,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,IAAY;IAEZ,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC;QAC3B,KAAK;QACL,OAAO,EAAE,MAAM;QACf,KAAK;QACL,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,KAAK;QACd,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;KACjC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACvB,CAAC"}

package/dist/render.js

@@ -42,7 +42,7 @@ function presenceLine(ev) {
     const activity = ev.presence.activity ? c.dim(" — " + ev.presence.activity) : "";
     return `${ts(Date.now())} ${label} ${who(ev.presence.card)} ${statusBadge(ev.presence.status)}${activity}`;
 }
-// ---- the passive line stream (console --plain / watch / pipes) -------------
+// ---- the passive line stream (console --plain / pipes) ---------------------
 /** Wire the (not-yet-started) observer into a scrolling line log via the shared MeshView, and
  *  park until SIGINT. MeshView owns the endpoint lifecycle and all the normalization; this just
  *  prints presence changes and each classified+coalesced feed entry as it lands. */

package/dist/web/graph.html

@@ -0,0 +1,204 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Cotal · graph</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com" />
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+    <link
+      href="https://fonts.googleapis.com/css2?family=Work+Sans:wght@400;500;600;700&display=swap"
+      rel="stylesheet"
+    />
+    <style>
+      :root {
+        --bg: #131a26; --panel: #1b2330cc; --line: #38414f; --fg: #eef2f7;
+        --dim: #8b949e; --faint: #6e7681;
+        --chat: #58a6ff; --unicast: #d29922; --anycast: #3fb950;
+        --working: #3fb950; --waiting: #e3b341; --idle: #6e7681; --red: #f85149;
+        --font: "Work Sans", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+      }
+      * { box-sizing: border-box; }
+      html, body { height: 100%; margin: 0; }
+      body {
+        font-family: var(--font); font-size: 13px; background: var(--bg); color: var(--fg);
+        overflow: hidden; -webkit-font-smoothing: antialiased;
+      }
+      #graph { position: fixed; inset: 0; display: block; cursor: grab; }
+      #graph.hover { cursor: pointer; }
+
+      /* floating glass surfaces */
+      .glass {
+        background: var(--panel); border: 1px solid var(--line); border-radius: 12px;
+        backdrop-filter: blur(14px); -webkit-backdrop-filter: blur(14px);
+      }
+
+      /* ── header (top, floating) ── */
+      header {
+        position: fixed; top: 14px; left: 14px; right: 14px; z-index: 10;
+        display: flex; align-items: center; gap: 16px; padding: 9px 14px;
+      }
+      .brand { display: flex; align-items: center; gap: 9px; }
+      .brand .mark { width: 9px; height: 9px; border-radius: 50%; background: var(--chat);
+        box-shadow: 0 0 10px var(--chat); }
+      .brand .title { font-size: 16px; font-weight: 700; }
+      .brand .space { font-size: 13px; color: var(--dim); }
+      .navlink {
+        font-size: 12px; font-weight: 600; color: var(--dim); text-decoration: none;
+        padding: 5px 11px; border-radius: 8px; border: 1px solid var(--line);
+      }
+      .navlink:hover { color: var(--fg); border-color: var(--chat); }
+      .pill { display: inline-flex; align-items: center; gap: 6px; padding: 4px 9px;
+        border-radius: 20px; background: #1f2d24; }
+      .pill .d { width: 7px; height: 7px; border-radius: 50%; background: var(--working); }
+      .pill .t { font-size: 11px; font-weight: 600; color: var(--working); }
+      .pill.down { background: #2a1717; } .pill.down .d { background: var(--red); }
+      .pill.down .t { color: var(--red); }
+      /* membership-freshness pill states */
+      .pill.stale { background: #2a2417; } .pill.stale .d { background: var(--waiting); }
+      .pill.stale .t { color: var(--waiting); }
+      .pill.off { background: #1f242c; } .pill.off .d { background: var(--faint); }
+      .pill.off .t { color: var(--dim); }
+
+      .ctrls { margin-left: auto; display: flex; align-items: center; gap: 7px; }
+      .grp { display: flex; align-items: center; gap: 4px; padding-right: 7px;
+        margin-right: 0; border-right: 1px solid var(--line); }
+      .grp:last-child { border-right: 0; padding-right: 0; }
+      .chip {
+        font-size: 11px; padding: 4px 9px; border-radius: 13px; cursor: pointer;
+        color: var(--faint); user-select: none; border: 1px solid transparent; white-space: nowrap;
+      }
+      .chip:hover { color: var(--fg); }
+      .chip.on { background: #ffffff10; border-color: var(--line); color: var(--fg); }
+      .chip.mode.chat.on { color: var(--chat); } .chip.mode.unicast.on { color: var(--unicast); }
+      .chip.mode.anycast.on { color: var(--anycast); }
+      .chip.pause.on { color: var(--waiting); border-color: var(--waiting); }
+
+      /* ── legend (bottom-left, collapsible) ── */
+      #legend { position: fixed; left: 14px; bottom: 14px; z-index: 10; padding: 0;
+        max-width: 200px; overflow: hidden; }
+      #legend .ltoggle {
+        display: flex; align-items: center; justify-content: space-between;
+        width: 100%; padding: 7px 12px; cursor: pointer; appearance: none;
+        font-size: 10px; font-weight: 600; letter-spacing: .6px; color: var(--faint);
+        text-transform: uppercase; background: transparent; border: 0;
+        text-align: left; font-family: inherit;
+      }
+      #legend .ltoggle:hover { color: var(--dim); }
+      #legend .ltoggle .chev { font-size: 9px; opacity: .5; transition: transform .2s ease; }
+      #legend.collapsed .ltoggle .chev { transform: rotate(-90deg); }
+      #legend .lbody { display: flex; flex-direction: column; gap: 5px; padding: 2px 12px 10px; }
+      #legend.collapsed .lbody { display: none; }
+      #legend .ls { font-size: 9px; font-weight: 600; letter-spacing: .5px; color: var(--faint);
+        text-transform: uppercase; opacity: .65; margin-top: 3px; }
+      #legend .ls:first-child { margin-top: 0; }
+      #legend .row { display: flex; align-items: center; gap: 9px; font-size: 11px; color: var(--dim); }
+      #legend .sw { width: 14px; height: 2px; border-radius: 1px; flex: none; }
+      #legend .sw-dot { width: 8px; height: 8px; border-radius: 50%; }
+      #legend .ring { width: 8px; height: 8px; border-radius: 50%; flex: none;
+        background: transparent; box-shadow: 0 0 0 1.5px currentColor inset; }
+
+      /* ── detail panel (right, floating) ── */
+      #detail {
+        position: fixed; top: 64px; right: 14px; bottom: 14px; width: 308px; z-index: 10;
+        padding: 16px 16px 18px; overflow-y: auto; display: none; flex-direction: column; gap: 14px;
+        scrollbar-width: thin; scrollbar-color: var(--line) transparent;
+      }
+      #detail::-webkit-scrollbar { width: 6px; }
+      #detail::-webkit-scrollbar-thumb { background: var(--line); border-radius: 3px; }
+      #detail.open { display: flex; }
+      #detail .x { position: absolute; top: 10px; right: 10px; cursor: pointer; color: var(--faint);
+        font-size: 13px; width: 22px; height: 22px; display: flex; align-items: center;
+        justify-content: center; border-radius: 5px; line-height: 1; }
+      #detail .x:hover { color: var(--fg); background: #ffffff12; }
+      .d-kind { font-size: 10px; font-weight: 600; letter-spacing: .6px; color: var(--faint);
+        text-transform: uppercase; }
+      .d-who { font-size: 16px; font-weight: 700; line-height: 1.25; padding-right: 26px; }
+      .d-who .role { font-size: 11px; font-weight: 500; color: var(--faint); margin-left: 6px; }
+      .d-status { display: inline-flex; align-items: center; gap: 6px; font-size: 11.5px;
+        font-weight: 500; padding: 3px 10px; border-radius: 20px; background: #ffffff08;
+        color: var(--dim); width: fit-content; }
+      .d-status .dot { width: 7px; height: 7px; border-radius: 50%; background: currentColor;
+        box-shadow: 0 0 6px currentColor; }
+      .d-status.working { background: #16231a; color: var(--working); }
+      .d-status.waiting { background: #2a2117; color: var(--waiting); }
+      .d-status.idle { color: var(--dim); }
+      .d-status.offline { color: var(--faint); }
+      .d-section { display: flex; flex-direction: column; gap: 5px; }
+      .d-label { font-size: 9.5px; font-weight: 600; letter-spacing: .5px; color: var(--faint);
+        text-transform: uppercase; }
+      .d-block { font-size: 12px; line-height: 1.55; padding: 9px 11px; border-radius: 7px;
+        background: #ffffff08; border: 1px solid var(--line); white-space: pre-wrap; word-break: break-word; }
+      .d-block.muted { color: var(--dim); font-style: italic; }
+      .d-rows { display: flex; flex-direction: column; gap: 5px; }
+      .d-row { display: flex; gap: 10px; font-size: 11.5px; line-height: 1.4; }
+      .d-row .k { color: var(--faint); min-width: 64px; flex: none; }
+      .d-row .v { color: var(--fg); word-break: break-word; }
+      .d-msgs { display: flex; flex-direction: column; gap: 5px; }
+      .d-msg { font-size: 11px; line-height: 1.45; padding: 7px 10px 8px; border-radius: 6px;
+        background: #ffffff06; border-left: 2px solid var(--line); }
+      .d-msg .mhead { display: flex; align-items: baseline; gap: 6px; margin-bottom: 3px; }
+      .d-msg .m { font-size: 9px; font-weight: 700; letter-spacing: .3px; text-transform: uppercase; }
+      .d-msg .who { color: var(--fg); font-weight: 600; }
+      .d-msg .tgt { color: var(--dim); }
+      .d-msg .body { color: var(--dim); word-break: break-word; }
+      .d-msg.empty { text-align: center; color: var(--faint); font-style: italic; border-left-color: transparent; }
+      /* member / subscription tag rows in the detail panel */
+      .d-tags { display: flex; flex-wrap: wrap; gap: 5px; }
+      .mtag { display: inline-flex; align-items: center; gap: 6px; font-size: 11px; color: var(--fg);
+        padding: 3px 8px; border-radius: 13px; background: #ffffff08; border: 1px solid var(--line); }
+      .mtag .dot { width: 7px; height: 7px; border-radius: 50%; flex: none; box-shadow: 0 0 5px currentColor; }
+      .mtag .act { font-size: 9px; font-weight: 700; letter-spacing: .3px; text-transform: uppercase; color: var(--chat); }
+      .mtag .off { font-size: 9px; font-weight: 600; letter-spacing: .3px; text-transform: uppercase; color: var(--faint); }
+      .ctag { font-size: 11px; color: var(--chat); padding: 3px 8px; border-radius: 13px;
+        background: #58a6ff14; border: 1px solid #58a6ff33; }
+      .ctag.off { color: var(--dim); background: #ffffff06; border-color: var(--line); }
+      .hint { position: fixed; bottom: 16px; left: 50%; transform: translateX(-50%); z-index: 9;
+        font-size: 11.5px; color: var(--faint); pointer-events: none; transition: opacity .4s; }
+    </style>
+  </head>
+  <body>
+    <canvas id="graph"></canvas>
+
+    <header class="glass">
+      <span class="brand">
+        <span class="mark"></span>
+        <span class="title">Cotal</span>
+        <span class="space" id="space"></span>
+      </span>
+      <a class="navlink" href="/">← Monitor</a>
+      <span class="pill down" id="conn"><span class="d"></span><span class="t">connecting</span></span>
+      <span class="pill off" id="feed" hidden><span class="d"></span><span class="t">membership</span></span>
+      <div class="ctrls">
+        <div class="grp" id="modes">
+          <span class="chip mode chat on" data-mode="chat">channel</span>
+          <span class="chip mode unicast on" data-mode="unicast">direct</span>
+          <span class="chip mode anycast on" data-mode="anycast">anycast</span>
+        </div>
+        <span class="chip pause" id="pause">⏸ pause</span>
+      </div>
+    </header>
+
+    <div id="legend" class="glass">
+      <button class="ltoggle" id="legendToggle" type="button"><span>legend</span><span class="chev">▾</span></button>
+      <div class="lbody">
+        <span class="ls">traffic</span>
+        <span class="row"><span class="sw" style="background:var(--chat)"></span> channel post → hub</span>
+        <span class="row"><span class="sw" style="background:var(--unicast)"></span> direct message</span>
+        <span class="row"><span class="sw sw-dot" style="background:var(--anycast)"></span> anycast (to a role)</span>
+        <span class="ls">membership</span>
+        <span class="row"><span class="sw" style="background:#8493a8"></span> subscribed (live)</span>
+        <span class="row"><span class="sw" style="background:#5a6472;opacity:.7"></span> member · offline</span>
+        <span class="ls">agents</span>
+        <span class="row"><span class="ring" style="color:var(--working)"></span> working</span>
+        <span class="row"><span class="ring" style="color:var(--waiting)"></span> waiting · needs input</span>
+        <span class="row"><span class="ring" style="color:var(--idle)"></span> idle / offline</span>
+      </div>
+    </div>
+
+    <aside id="detail" class="glass"></aside>
+    <div class="hint" id="hint">click a node for detail · scroll to zoom · drag to pan</div>
+
+    <script src="/graph.js"></script>
+  </body>
+</html>