@cotal-ai/cli 0.51.0 → 0.52.0

package/dist/console/commands.js

@@ -1,9 +1,26 @@
 // The console's `:` command catalog — the operator's send/control verbs. A small local list (NOT
 // the CLI `Command` registry, which is argv/process-exit shaped). The catalog drives both execution
 // and the palette's autocomplete. Write commands publish over the mesh via the observer endpoint;
-// they are gated on `canWrite` (open mode, or a privileged --creds).
+// they are gated on `canWrite` (open mode, or a privileged --creds). Control commands go through
+// `ctx.control` (one per-action call on the CLI's control path, console/control.ts), gated on
+// `canControl`; the observer endpoint never carries control.
 import { resolvePeer, AmbiguousPeerError } from "@cotal-ai/core";
 import { mentionsIn } from "../lib/mentions.js";
+/** The reply's error, or a generic word: the status line has one row. */
+const why = (r) => r.error ?? "failed";
+/** One managed-agent row as `:status` prints it. Two facts, printed as two facts, the way
+ *  `cotal ps` prints them: `status` is the PROCESS the manager runs and `mesh` is that seat's
+ *  presence, and they disagree in the common failure (running for days, offline on the mesh).
+ *
+ *  Presence `working` is the one word that needs qualifying. It records that the seat said it was
+ *  working, never that anyone observed progress, so it reaches the reader as `working · progress
+ *  unknown` here exactly as it does from `cotal ps`, the roster, and the connector's orientation.
+ *  A bare `working` would claim an observation the manager never made. */
+export function formatManagedRow(a) {
+    const mesh = a.mesh === "working" ? "working · progress unknown" : a.mesh;
+    const role = a.role ? ` (${a.role})` : "";
+    return `${a.name}${role} · ${a.agent} · ${a.mode} · ${a.status} · mesh ${mesh} · up ${Math.round(a.uptimeMs / 60000)}m`;
+}
 /** Resolve an agent/endpoint name (with or without a leading @) to its instance id. Fail-loud:
  *  an exact id or a unique name resolves; a same-name collision throws `AmbiguousPeerError`
  *  (the caller renders {@link ambiguityNote}). */
@@ -30,6 +47,8 @@ export const COMMANDS = [
             }
             if (!text.trim())
                 return ctx.notify("usage: msg [#channel] <text>");
+            if (!(await ctx.ensureParticipant()))
+                return;
             await ctx.ep.multicast(text, { channel, mentions: mentionsIn(text) });
             ctx.notify(`→ #${channel}`);
         },
@@ -54,6 +73,8 @@ export const COMMANDS = [
             }
             if (!id)
                 return ctx.notify(`no agent "${m[1]}"`);
+            if (!(await ctx.ensureParticipant()))
+                return;
             await ctx.ep.unicast(id, m[2]);
             ctx.notify(`→ ${m[1].replace(/^@/, "")}`);
         },
@@ -76,6 +97,8 @@ export const COMMANDS = [
             }
             if (!id)
                 return ctx.notify(`no agent "${name}"`);
+            if (!(await ctx.ensureParticipant()))
+                return;
             await ctx.ep.unicast(id, "👋 ping");
             ctx.setMode("dm");
             ctx.notify(`called ${name}`);
@@ -90,6 +113,8 @@ export const COMMANDS = [
             const m = rest.match(/^@?(\S+)\s+([\s\S]+)/);
             if (!m)
                 return ctx.notify("usage: ask <@role> <text>");
+            if (!(await ctx.ensureParticipant()))
+                return;
             await ctx.ep.anycast(m[1], m[2]);
             ctx.notify(`→ @${m[1]}`);
         },
@@ -97,17 +122,84 @@ export const COMMANDS = [
     {
         name: "ps",
         summary: "list manager-spawned agents",
+        control: true,
         run: async (ctx) => {
-            try {
-                const r = await ctx.ep.invokeService("manager", "ps");
-                if (r.reply.ok !== true)
-                    return ctx.notify("ps: " + (r.reply.error?.message ?? r.reply.error?.code ?? "failed"));
-                const list = r.reply.data ?? [];
-                ctx.notify(list.length ? "agents: " + list.map((a) => a.name).join(", ") : "no managed agents");
-            }
-            catch (e) {
-                ctx.notify("ps: " + e.message);
-            }
+            const r = await ctx.ps();
+            if (!r.ok)
+                return ctx.notify("ps: " + r.error);
+            // A silent or failed instance is named, never dropped: without it a merged list short by a
+            // whole manager's seats reads as the complete managed set of the space.
+            const issues = [
+                ...r.failed.map((f) => `${f.instanceId}: ${f.error}`),
+                ...(r.silent.length ? [`${r.silent.length} manager instance(s) gave no answer: ${r.silent.join(", ")}`] : []),
+            ];
+            const partial = issues.length ? ` (${issues.join("; ")})` : "";
+            ctx.notify((r.rows.length ? "agents: " + r.rows.map((a) => a.name).join(", ") : "no managed agents") + partial);
+        },
+    },
+    {
+        name: "spawn",
+        summary: "spawn an agent from a persona (waits for it to join)",
+        usage: "spawn <persona> [name]",
+        control: true,
+        run: async (ctx, rest) => {
+            const [persona, identity] = rest.trim().split(/\s+/).filter(Boolean);
+            if (!persona)
+                return ctx.notify("usage: spawn <persona> [name]");
+            ctx.notify(`spawning ${persona}… (the manager answers on join, exit, or its readiness deadline)`);
+            // The event plane is on by default since #1758, and a connector that cannot publish one is
+            // refused by the manager. The palette has no events toggle (nothing here consumes the plane),
+            // so it mirrors `cotal spawn --no-events`: a seat spawned from the console is spawned to be
+            // watched and driven here, and the plane is the connector's own concern.
+            const r = await ctx.control("start", identity ? { name: persona, identity, events: false } : { name: persona, events: false });
+            if (!r.ok)
+                return ctx.notify("spawn: " + why(r));
+            ctx.notify(`spawned ${r.data?.name ?? persona}`);
+        },
+    },
+    {
+        name: "status",
+        summary: "one managed agent's state",
+        usage: "status <agent>",
+        control: true,
+        run: async (ctx, rest) => {
+            const name = rest.replace(/^@/, "").trim().split(/\s+/)[0] ?? "";
+            if (!name)
+                return ctx.notify("usage: status <agent>");
+            const r = await ctx.control("status", { name });
+            if (!r.ok)
+                return ctx.notify("status: " + why(r));
+            ctx.notify(formatManagedRow(r.data));
+        },
+    },
+    {
+        name: "attach",
+        summary: "open a managed seat's terminal (Ctrl-] to detach)",
+        usage: "attach <agent>",
+        control: true,
+        run: (ctx, rest) => {
+            const name = rest.replace(/^@/, "").trim().split(/\s+/)[0] ?? "";
+            if (!name)
+                return ctx.notify("usage: attach <agent>");
+            ctx.startAttach(name);
+        },
+    },
+    {
+        name: "purge",
+        summary: "clear the space's history (type the space name to confirm)",
+        control: true,
+        run: (ctx) => ctx.confirmPurge(),
+    },
+    {
+        name: "delchan",
+        summary: "delete one channel's history + registry entry (type its name to confirm)",
+        usage: "delchan <channel>",
+        control: true,
+        run: (ctx, rest) => {
+            const channel = rest.replace(/^#/, "").trim().split(/\s+/)[0] ?? "";
+            if (!channel)
+                return ctx.notify("usage: delchan <channel>");
+            ctx.confirmDelchan(channel);
         },
     },
     { name: "dms", summary: "toggle the DM lens", run: (ctx) => ctx.setMode("dm") },
@@ -118,7 +210,7 @@ export const COMMANDS = [
     { name: "quit", summary: "quit the console", run: (ctx) => ctx.exit() },
 ];
 /** Parse + dispatch a typed palette line. Unknown / read-only-blocked commands notify and no-op. */
-export function runCommand(line, ctx, canWrite) {
+export function runCommand(line, ctx, canWrite, canControl) {
     const trimmed = line.trim();
     if (!trimmed)
         return;
@@ -129,6 +221,10 @@ export function runCommand(line, ctx, canWrite) {
         return ctx.notify(`unknown command: ${name}`);
     if (cmd.write && !canWrite)
         return ctx.notify("read-only - pass --creds to send");
-    void cmd.run(ctx, rest);
+    if (cmd.control && !canControl)
+        return ctx.notify("no control path - a raw --creds file cannot drive the manager; run against a registered mesh");
+    // A verb that throws (a control call that could not even start) lands on the status line rather
+    // than as an unhandled rejection that would take the console down over one bad line.
+    void Promise.resolve(cmd.run(ctx, rest)).catch((e) => ctx.notify(`${name}: ${e.message}`));
 }
 //# sourceMappingURL=commands.js.map

package/dist/console/commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/console/commands.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,oGAAoG;AACpG,kGAAkG;AAClG,qEAAqE;AACrE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAsB,MAAM,gBAAgB,CAAC;AAErF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAuBhD;;kDAEkD;AAClD,SAAS,IAAI,CAAC,IAAkB,EAAE,IAAY;IAC5C,OAAO,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAC,CAAqB;IAC1C,OAAO,IAAI,CAAC,CAAC,MAAM,8BAA8B,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAqB;IACxC;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,mBAAmB;QAC5B,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,OAAO,GAAG,GAAG,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;YAC1E,IAAI,IAAI,GAAG,IAAI,CAAC;YAChB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC5C,IAAI,CAAC,EAAE,CAAC;gBACN,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACf,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;YACpE,MAAM,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC;QAC9B,CAAC;KACF;IACD;QACE,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YACvD,IAAI,EAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,kBAAkB;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzE,MAAM,CAAC,CAAC;YACV,CAAC;YACD,IAAI,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,kCAAkC;QAC3C,KAAK,EAAE,eAAe;QACtB,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjE,IAAI,EAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,kBAAkB;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzE,MAAM,CAAC,CAAC;YACV,CAAC;YACD,IAAI,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC,CAAC;YACjD,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACpC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;KACF;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YACvD,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;KACF;IACD;QACE,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,6BAA6B;QACtC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBACtD,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC;gBACjH,MAAM,IAAI,GAAI,CAAC,CAAC,KAAK,CAAC,IAA2B,IAAI,EAAE,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAClG,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,CAAC,MAAM,GAAI,CAAW,CAAC,OAAO,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;KACF;IACD,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;IAC/E,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;IACxF,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE;IAC3F,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,4BAA4B,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE;IACrF,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;IAC3E,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE;CACxE,CAAC;AAEF,oGAAoG;AACpG,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,GAAe,EAAE,QAAiB;IACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;IAClF,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/console/commands.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,oGAAoG;AACpG,kGAAkG;AAClG,iGAAiG;AACjG,8FAA8F;AAC9F,6DAA6D;AAC7D,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAsB,MAAM,gBAAgB,CAAC;AAIrF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAwChD,yEAAyE;AACzE,MAAM,GAAG,GAAG,CAAC,CAAe,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,QAAQ,CAAC;AAE7D;;;;;;;0EAO0E;AAC1E,MAAM,UAAU,gBAAgB,CAAC,CAAa;IAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,OAAO,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,WAAW,IAAI,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC;AAC1H,CAAC;AAED;;kDAEkD;AAClD,SAAS,IAAI,CAAC,IAAkB,EAAE,IAAY;IAC5C,OAAO,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAC,CAAqB;IAC1C,OAAO,IAAI,CAAC,CAAC,MAAM,8BAA8B,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAqB;IACxC;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,mBAAmB;QAC5B,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,IAAI,OAAO,GAAG,GAAG,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;YAC1E,IAAI,IAAI,GAAG,IAAI,CAAC;YAChB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;YAC5C,IAAI,CAAC,EAAE,CAAC;gBACN,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACf,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;YACpE,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;gBAAE,OAAO;YAC7C,MAAM,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC;QAC9B,CAAC;KACF;IACD;QACE,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,yBAAyB;QAClC,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YACvD,IAAI,EAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,kBAAkB;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzE,MAAM,CAAC,CAAC;YACV,CAAC;YACD,IAAI,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;gBAAE,OAAO;YAC7C,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;KACF;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,kCAAkC;QAC3C,KAAK,EAAE,eAAe;QACtB,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjE,IAAI,EAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,YAAY,kBAAkB;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzE,MAAM,CAAC,CAAC;YACV,CAAC;YACD,IAAI,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;gBAAE,OAAO;YAC7C,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACpC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClB,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;KACF;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,0BAA0B;QACnC,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,IAAI;QACX,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC7C,IAAI,CAAC,CAAC;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;YACvD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;gBAAE,OAAO;YAC7C,MAAM,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;KACF;IACD;QACE,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,6BAA6B;QACtC,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACjB,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;YAC/C,2FAA2F;YAC3F,wEAAwE;YACxE,MAAM,MAAM,GAAG;gBACb,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;gBACrD,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,wCAAwC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9G,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QAClH,CAAC;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,sDAAsD;QAC/D,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrE,IAAI,CAAC,OAAO;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;YACjE,GAAG,CAAC,MAAM,CAAC,YAAY,OAAO,kEAAkE,CAAC,CAAC;YAClG,2FAA2F;YAC3F,8FAA8F;YAC9F,4FAA4F;YAC5F,yEAAyE;YACzE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/H,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,WAAY,CAAC,CAAC,IAA0B,EAAE,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,2BAA2B;QACpC,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjE,IAAI,CAAC,IAAI;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YACtD,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAkB,CAAC,CAAC,CAAC;QACrD,CAAC;KACF;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,mDAAmD;QAC5D,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACjE,IAAI,CAAC,IAAI;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;YACtD,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,4DAA4D;QACrE,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE;KACjC;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,0EAA0E;QACnF,KAAK,EAAE,mBAAmB;QAC1B,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpE,IAAI,CAAC,OAAO;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;YAC5D,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;KACF;IACD,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;IAC/E,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,0BAA0B,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;IACxF,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE;IAC3F,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,4BAA4B,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE;IACrF,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;IAC3E,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE;CACxE,CAAC;AAEF,oGAAoG;AACpG,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,GAAe,EAAE,QAAiB,EAAE,UAAmB;IAC9F,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;IAClF,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,8FAA8F,CAAC,CAAC;IAClJ,gGAAgG;IAChG,qFAAqF;IACrF,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACjH,CAAC"}

package/dist/console/control.d.ts

@@ -0,0 +1,141 @@
+import { type ManagerReply } from "../lib/control.js";
+import { type ConnectFlags } from "../lib/connect.js";
+/** The console's control coordinates: the same `ConnectFlags` triple the CLI's control commands
+ *  resolve from. `space` is the one the console is currently watching. */
+export type ControlCtx = ConnectFlags;
+/** The manager ops the console drives, each with the instrument profile the matching CLI command
+ *  mints and whether the op names a seat (a targeted op resolves seat locality first, so it is
+ *  served by the manager actually hosting the seat). */
+declare const OPS: {
+    readonly status: {
+        readonly profile: "control-caller-privileged";
+        readonly targeted: true;
+    };
+    readonly start: {
+        readonly profile: "control-caller-privileged";
+        readonly targeted: false;
+        readonly timeoutMs: 40000;
+    };
+    readonly purge: {
+        readonly profile: "control-caller-admin";
+        readonly targeted: false;
+    };
+    readonly stop: {
+        readonly profile: "control-caller-admin";
+        readonly targeted: true;
+    };
+};
+export type ControlOp = keyof typeof OPS;
+/** Delete one channel: its retained history (a filtered purge) and its registry entry, through
+ *  core's `clearChannel`, the operation the web dashboard's delete button runs, with the same
+ *  per-action authority: a static-auth mesh mints a one-shot `channel-purger` credential from the
+ *  resolved mesh's seed, a user mesh asks for a `channel-purger` view (a fresh ledger check per
+ *  click), an open mesh connects bare. No manager involved. The name must be the one the mesh
+ *  uses, concrete and valid: a wildcard is refused (it would purge channels the operator did not
+ *  name) and a name the wire would rewrite is refused rather than quietly rewritten. */
+export declare function deleteChannel(ctx: ControlCtx, channel: string): Promise<{
+    ok: true;
+    purged: number;
+} | {
+    ok: false;
+    error: string;
+}>;
+/** One managed-agent row as the manager's `ps` / `inspect` answer it (the fields the console reads). */
+export interface ManagedRow {
+    name: string;
+    id: string;
+    role?: string;
+    agent: string;
+    mode: string;
+    status: string;
+    uptimeMs: number;
+    mesh: string;
+    model?: string;
+}
+/** One control call. A targeted op names its seat in `args.name`; the alias is resolved to the
+ *  incarnation triple inside `askManager` (the manager's `inspect` read), so the wire never carries
+ *  a name as a target. Reach is `owner` on a user mesh (the bearer's one path; the manager decides
+ *  by ledger scope) and `any` on a static or open mesh (the admin instrument's cross-agent row). */
+export declare function control(ctx: ControlCtx, op: ControlOp, args?: Record<string, unknown>): Promise<ManagerReply>;
+/** The managed rows of every reachable manager in the space: the `cotal ps` read.
+ *
+ *  `rows` is the merged list, `silent` the instances that did not answer, `failed` the reachable
+ *  instances that answered with an error, and `answered` the rows attributed to the instance that
+ *  served them. The attribution is what makes a partial answer
+ *  usable: a caller holding state across polls can replace exactly the instances that spoke and
+ *  keep only what a silent one last said, which neither a merged list nor a flat rebuild allows.
+ *  `cotal ps` prints a silent instance rather than dropping it, and the console must not be the
+ *  one surface that quietly answers a narrower question than the one asked. */
+export type PsReply = {
+    ok: true;
+    rows: ManagedRow[];
+    silent: string[];
+    failed: {
+        instanceId: string;
+        error: string;
+    }[];
+    answered: {
+        instanceId: string;
+        rows: ManagedRow[];
+    }[];
+} | {
+    ok: false;
+    error: string;
+};
+/** Fold one ps answer into the rows held per manager instance, which is the only shape that can
+ *  both DROP a despawned seat and KEEP a quiet manager's seats.
+ *
+ *  An instance that answered has its rows replaced wholesale, so a seat it no longer lists is gone
+ *  on that tick. An instance that was asked and stayed silent keeps what it last said, because a
+ *  seat is not gone just because nobody could be reached to ask about it. An instance that is
+ *  neither has left the registry, and its rows leave with it.
+ *
+ *  A flat merge across instances cannot express the first of those: it can add and overwrite but
+ *  never delete, so one silent registration, which can persist indefinitely when a manager's host
+ *  dies without deregistering, would freeze every other manager's seats in place forever. A flat
+ *  rebuild is the opposite error, emptying a quiet manager's seats off the display. */
+export declare function foldManagedRows(prev: Map<string, ManagedRow[]>, reply: {
+    answered: {
+        instanceId: string;
+        rows: ManagedRow[];
+    }[];
+    silent: string[];
+}): Map<string, ManagedRow[]>;
+/** The per-instance rows flattened to the id-keyed harness facts the roster and detail card read. */
+export declare function managedById(byInstance: Map<string, ManagedRow[]>): Map<string, {
+    agent?: string;
+    mode?: string;
+}>;
+/** What one tick did, so a caller (and a test) can tell the three apart. */
+export type PollOutcome = "applied" | "skipped" | "stopped";
+/** The managed-row poll, SINGLE FLIGHT. One read may outlast the interval that scheduled it: the
+ *  scatter alone budgets a service resolve, a gather and a reconcile, and the resolve and mint in
+ *  front of it are additional. Left unguarded, two reads overlap and are applied in COMPLETION
+ *  order rather than request order, so an older answer can land after a newer one and restore the
+ *  very rows the newer one retired. That is the fold's own guarantee undone one layer up, and no
+ *  test of the fold can see it.
+ *
+ *  A tick while a read is in flight is therefore skipped outright rather than queued: the state is
+ *  a snapshot of the whole space, so a skipped tick loses nothing that the next one will not carry,
+ *  and skipping also bounds how much control traffic a slow mesh can accumulate. Being single
+ *  flight is also what keeps a STALE FAILURE from stopping the poll after a newer success, since
+ *  there can be no newer success in flight to race.
+ *
+ *  Stopping on a failed read is deliberate and reported by the caller: an open mesh with no
+ *  supervisor must not knock every tick. */
+export declare function createManagedPoller(read: () => Promise<PsReply>, on: {
+    rows(flat: Map<string, {
+        agent?: string;
+        mode?: string;
+    }>): void;
+    partial(silent: string[], failed: {
+        instanceId: string;
+        error: string;
+    }[]): void;
+    stopped(error: string): void;
+}): {
+    tick(): Promise<PollOutcome>;
+};
+export declare function controlPs(ctx: ControlCtx): Promise<PsReply>;
+export {};
+//# sourceMappingURL=control.d.ts.map

package/dist/console/control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.d.ts","sourceRoot":"","sources":["../../src/console/control.ts"],"names":[],"mappings":"AAWA,OAAO,EAAsE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC1H,OAAO,EAAgC,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGpF;0EAC0E;AAC1E,MAAM,MAAM,UAAU,GAAG,YAAY,CAAC;AAEtC;;wDAEwD;AACxD,QAAA,MAAM,GAAG;;;;;;;;;;;;;;;;;;CAQC,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,GAAG,CAAC;AAEzC;;;;;;wFAMwF;AACxF,wBAAsB,aAAa,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAc1I;AAED,wGAAwG;AACxG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;oGAGoG;AACpG,wBAAsB,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAoBnH;AAMD;;;;;;;;+EAQ+E;AAC/E,MAAM,MAAM,OAAO,GACf;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,UAAU,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAAC,QAAQ,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,EAAE,CAAA;KAAE,EAAE,CAAA;CAAE,GAC3J;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC;;;;;;;;;;;uFAWuF;AACvF,wBAAgB,eAAe,CAC7B,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAC/B,KAAK,EAAE;IAAE,QAAQ,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,EAAE,CAAA;KAAE,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAClF,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAM3B;AAED,qGAAqG;AACrG,wBAAgB,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAIjH;AAED,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAE5D;;;;;;;;;;;;;;4CAc4C;AAC5C,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAC5B,EAAE,EAAE;IAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACvL;IAAE,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;CAAE,CA+BlC;AACD,wBAAsB,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAwBjE"}

package/dist/console/control.js

@@ -0,0 +1,189 @@
+// The console's control door: every operator action (kill / spawn / purge / status) is ONE call
+// through the CLI's own per-action path (`ps` is the scatter below, one call per manager) — `resolveControlTarget` resolves
+// the mesh and mints a one-shot instrument (or connects bare on an open mesh), `askManager` rides
+// the ep rails, and nothing survives the call. The observer endpoint the console watches through
+// never carries control, and the console never holds a seed or a standing instrument: the only
+// thing it keeps is the `--space` / `--server` / `--creds` triple the CLI's control commands take.
+//
+// Every refusal comes back as a `{ok:false, error}` the status line can show. The THROWING resolve
+// form is used throughout (`onRefusal: "throw"`): the CLI commands' default prints a sentence and
+// exits the process, which inside a TUI would blank the screen mid-session.
+import { assertValidChannel, clearChannel, isConcreteChannel } from "@cotal-ai/core";
+import { askManager, resolveControlTarget, scatterManager, START_TIMEOUT_MS } from "../lib/control.js";
+import { connectOrThrow, userViewAuth } from "../lib/connect.js";
+import { locateSeat, seatNotFoundMessage } from "../commands/agents.js";
+/** The manager ops the console drives, each with the instrument profile the matching CLI command
+ *  mints and whether the op names a seat (a targeted op resolves seat locality first, so it is
+ *  served by the manager actually hosting the seat). */
+const OPS = {
+    // `status` is `inspect` on the manager that HOSTS the seat: a multi-manager space answers a
+    // class-queue call from whichever manager is quickest, which may not be the host, and reports a
+    // false miss. Located and pinned like `stop`.
+    status: { profile: "control-caller-privileged", targeted: true },
+    start: { profile: "control-caller-privileged", targeted: false, timeoutMs: START_TIMEOUT_MS },
+    purge: { profile: "control-caller-admin", targeted: false },
+    stop: { profile: "control-caller-admin", targeted: true },
+};
+/** Delete one channel: its retained history (a filtered purge) and its registry entry, through
+ *  core's `clearChannel`, the operation the web dashboard's delete button runs, with the same
+ *  per-action authority: a static-auth mesh mints a one-shot `channel-purger` credential from the
+ *  resolved mesh's seed, a user mesh asks for a `channel-purger` view (a fresh ledger check per
+ *  click), an open mesh connects bare. No manager involved. The name must be the one the mesh
+ *  uses, concrete and valid: a wildcard is refused (it would purge channels the operator did not
+ *  name) and a name the wire would rewrite is refused rather than quietly rewritten. */
+export async function deleteChannel(ctx, channel) {
+    try {
+        assertValidChannel(channel);
+        if (!isConcreteChannel(channel))
+            return { ok: false, error: `"${channel}" is a wildcard, not a deletable channel` };
+        const conn = await connectOrThrow(ctx, "channel-purger");
+        const r = conn.bearer
+            ? await userViewAuth(conn, "channel-purger").then((p) => clearChannel({ servers: conn.server, space: conn.space, channel, bearer: p.bearer, sentinelCreds: p.sentinelCreds }))
+            : await clearChannel({ servers: conn.server, space: conn.space, channel, creds: conn.creds });
+        return { ok: true, purged: r.purged };
+    }
+    catch (e) {
+        return { ok: false, error: e.message };
+    }
+}
+/** One control call. A targeted op names its seat in `args.name`; the alias is resolved to the
+ *  incarnation triple inside `askManager` (the manager's `inspect` read), so the wire never carries
+ *  a name as a target. Reach is `owner` on a user mesh (the bearer's one path; the manager decides
+ *  by ledger scope) and `any` on a static or open mesh (the admin instrument's cross-agent row). */
+export async function control(ctx, op, args) {
+    const spec = OPS[op];
+    try {
+        let on;
+        if (spec.targeted) {
+            const name = String(args?.name ?? "").trim();
+            if (!name)
+                return { ok: false, error: `${op} requires a name` };
+            const loc = await locateSeat(ctx, name, { onRefusal: "throw" });
+            if (loc.kind === "absent")
+                return { ok: false, error: seatNotFoundMessage(loc, name) };
+            if (loc.kind === "pin")
+                on = loc.instanceId;
+        }
+        const t = await resolveControlTarget(ctx, spec.profile, on, { onRefusal: "throw" });
+        const reach = t.auth.bearer ? "owner" : "any";
+        const timeoutMs = "timeoutMs" in spec ? spec.timeoutMs : undefined;
+        // `args` goes through as given: a void-input command is refused by the manager's schema when it
+        // is handed `{}` instead of nothing, so no default is filled in here.
+        return await askManager(t.space, t.server, op, args, t.auth, reach, timeoutMs, spec.targeted ? { instanceId: on } : undefined);
+    }
+    catch (e) {
+        return { ok: false, error: e.message };
+    }
+}
+/** The single manager a user-mesh bearer reaches, which has no scatter and therefore no instance
+ *  id of its own. A caller keeping rows per instance needs one key for it. */
+const BEARER_INSTANCE = "owner";
+/** Fold one ps answer into the rows held per manager instance, which is the only shape that can
+ *  both DROP a despawned seat and KEEP a quiet manager's seats.
+ *
+ *  An instance that answered has its rows replaced wholesale, so a seat it no longer lists is gone
+ *  on that tick. An instance that was asked and stayed silent keeps what it last said, because a
+ *  seat is not gone just because nobody could be reached to ask about it. An instance that is
+ *  neither has left the registry, and its rows leave with it.
+ *
+ *  A flat merge across instances cannot express the first of those: it can add and overwrite but
+ *  never delete, so one silent registration, which can persist indefinitely when a manager's host
+ *  dies without deregistering, would freeze every other manager's seats in place forever. A flat
+ *  rebuild is the opposite error, emptying a quiet manager's seats off the display. */
+export function foldManagedRows(prev, reply) {
+    const next = new Map(prev);
+    for (const id of [...next.keys()])
+        if (!reply.answered.some((a) => a.instanceId === id) && !reply.silent.includes(id))
+            next.delete(id);
+    for (const a of reply.answered)
+        next.set(a.instanceId, a.rows);
+    return next;
+}
+/** The per-instance rows flattened to the id-keyed harness facts the roster and detail card read. */
+export function managedById(byInstance) {
+    const flat = new Map();
+    for (const rows of byInstance.values())
+        for (const a of rows)
+            flat.set(a.id, { agent: a.agent, mode: a.mode });
+    return flat;
+}
+/** The managed-row poll, SINGLE FLIGHT. One read may outlast the interval that scheduled it: the
+ *  scatter alone budgets a service resolve, a gather and a reconcile, and the resolve and mint in
+ *  front of it are additional. Left unguarded, two reads overlap and are applied in COMPLETION
+ *  order rather than request order, so an older answer can land after a newer one and restore the
+ *  very rows the newer one retired. That is the fold's own guarantee undone one layer up, and no
+ *  test of the fold can see it.
+ *
+ *  A tick while a read is in flight is therefore skipped outright rather than queued: the state is
+ *  a snapshot of the whole space, so a skipped tick loses nothing that the next one will not carry,
+ *  and skipping also bounds how much control traffic a slow mesh can accumulate. Being single
+ *  flight is also what keeps a STALE FAILURE from stopping the poll after a newer success, since
+ *  there can be no newer success in flight to race.
+ *
+ *  Stopping on a failed read is deliberate and reported by the caller: an open mesh with no
+ *  supervisor must not knock every tick. */
+export function createManagedPoller(read, on) {
+    let byInstance = new Map();
+    let inFlight = false;
+    let stopped = false;
+    let announcedPartial = "";
+    return {
+        async tick() {
+            if (stopped)
+                return "stopped";
+            if (inFlight)
+                return "skipped";
+            inFlight = true;
+            try {
+                const r = await read();
+                if (!r.ok) {
+                    stopped = true;
+                    on.stopped(r.error);
+                    return "stopped";
+                }
+                const partialKey = JSON.stringify({ silent: r.silent, failed: r.failed });
+                if ((r.silent.length || r.failed.length) && partialKey !== announcedPartial) {
+                    announcedPartial = partialKey;
+                    on.partial(r.silent, r.failed);
+                }
+                if (!r.silent.length && !r.failed.length)
+                    announcedPartial = "";
+                byInstance = foldManagedRows(byInstance, r);
+                on.rows(managedById(byInstance));
+                return "applied";
+            }
+            finally {
+                inFlight = false;
+            }
+        },
+    };
+}
+export async function controlPs(ctx) {
+    try {
+        const t = await resolveControlTarget(ctx, "control-caller-privileged", undefined, { onRefusal: "throw" });
+        if (t.auth.bearer) {
+            const r = await askManager(t.space, t.server, "ps", undefined, t.auth, "owner", undefined, {});
+            if (!r.ok)
+                return { ok: false, error: r.error ?? "error" };
+            const rows = r.data ?? [];
+            return { ok: true, rows, silent: [], failed: [], answered: [{ instanceId: BEARER_INSTANCE, rows }] };
+        }
+        const s = await scatterManager(t.space, t.server, "ps", t.auth, t.spaceAuth);
+        if (!s.ok)
+            return s;
+        const answered = s.instances
+            .filter((i) => i.reachable && !i.error)
+            .map((i) => ({ instanceId: i.instanceId, rows: (i.data ?? []) }));
+        return {
+            ok: true,
+            rows: answered.flatMap((i) => i.rows),
+            silent: s.instances.filter((i) => !i.reachable).map((i) => i.instanceId),
+            failed: s.instances.filter((i) => i.reachable && i.error).map((i) => ({ instanceId: i.instanceId, error: i.error })),
+            answered,
+        };
+    }
+    catch (e) {
+        return { ok: false, error: e.message };
+    }
+}
+//# sourceMappingURL=control.js.map

package/dist/console/control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../../src/console/control.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,4HAA4H;AAC5H,kGAAkG;AAClG,iGAAiG;AACjG,+FAA+F;AAC/F,mGAAmG;AACnG,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,4EAA4E;AAC5E,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,cAAc,EAAE,gBAAgB,EAAqB,MAAM,mBAAmB,CAAC;AAC1H,OAAO,EAAE,cAAc,EAAE,YAAY,EAAqB,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAMxE;;wDAEwD;AACxD,MAAM,GAAG,GAAG;IACV,4FAA4F;IAC5F,gGAAgG;IAChG,8CAA8C;IAC9C,MAAM,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,QAAQ,EAAE,IAAI,EAAE;IAChE,KAAK,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE;IAC7F,KAAK,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC3D,IAAI,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,IAAI,EAAE;CACjD,CAAC;AAGX;;;;;;wFAMwF;AACxF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAe,EAAE,OAAe;IAClE,IAAI,CAAC;QACH,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,OAAO,0CAA0C,EAAE,CAAC;QACpH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM;YACnB,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACpD,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CACrH;YACH,CAAC,CAAC,MAAM,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAChG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACxC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAeD;;;oGAGoG;AACpG,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAe,EAAE,EAAa,EAAE,IAA8B;IAC1F,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,EAAsB,CAAC;QAC3B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC;YAChE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YACvF,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK;gBAAE,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;QAC9C,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9C,MAAM,SAAS,GAAG,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,gGAAgG;QAChG,sEAAsE;QACtE,OAAO,MAAM,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjI,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED;8EAC8E;AAC9E,MAAM,eAAe,GAAG,OAAO,CAAC;AAehC;;;;;;;;;;;uFAWuF;AACvF,MAAM,UAAU,eAAe,CAC7B,IAA+B,EAC/B,KAAmF;IAEnF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtG,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,WAAW,CAAC,UAAqC;IAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,EAA6C,CAAC;IAClE,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,MAAM,EAAE;QAAE,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/G,OAAO,IAAI,CAAC;AACd,CAAC;AAKD;;;;;;;;;;;;;;4CAc4C;AAC5C,MAAM,UAAU,mBAAmB,CACjC,IAA4B,EAC5B,EAAwL;IAExL,IAAI,UAAU,GAAG,IAAI,GAAG,EAAwB,CAAC;IACjD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,OAAO;QACL,KAAK,CAAC,IAAI;YACR,IAAI,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC9B,IAAI,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAC/B,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;oBACV,OAAO,GAAG,IAAI,CAAC;oBACf,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC1E,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,UAAU,KAAK,gBAAgB,EAAE,CAAC;oBAC5E,gBAAgB,GAAG,UAAU,CAAC;oBAC9B,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;gBACD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;oBAAE,gBAAgB,GAAG,EAAE,CAAC;gBAChE,UAAU,GAAG,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC5C,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;gBACjC,OAAO,SAAS,CAAC;YACnB,CAAC;oBAAS,CAAC;gBACT,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAe;IAC7C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,2BAA2B,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1G,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YAC/F,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,OAAO,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAI,CAAC,CAAC,IAAqB,IAAI,EAAE,CAAC;YAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACvG,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QACpB,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS;aACzB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAE,CAAC,CAAC,IAAqB,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACrC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;YACxE,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAM,EAAE,CAAC,CAAC;YACrH,QAAQ;SACT,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/console/mesh.d.ts

@@ -1,6 +1,6 @@
 import type { CotalEndpoint } from "@cotal-ai/core";
 import type { MeshSnapshot, MeshViewOptions } from "../view/mesh-view.js";
-export type { FeedEntry, MeshViewOptions, FeedDelivery } from "../view/mesh-view.js";
+export type { FeedEntry, MeshViewOptions, FeedDelivery, MembershipView } from "../view/mesh-view.js";
 export type MeshState = MeshSnapshot;
 /** Focusable panes across the console (normal panels + the DM and topology lenses). */
 export type FocusId = "roster" | "feed" | "needsyou" | "dmpeers" | "dmthread" | "topo";

package/dist/console/mesh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mesh.d.ts","sourceRoot":"","sources":["../../src/console/mesh.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAI1E,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACrF,MAAM,MAAM,SAAS,GAAG,YAAY,CAAC;AAErC,uFAAuF;AACvF,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAEvF,wBAAgB,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,YAAY,CAgB/E"}
+{"version":3,"file":"mesh.d.ts","sourceRoot":"","sources":["../../src/console/mesh.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAI1E,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACrG,MAAM,MAAM,SAAS,GAAG,YAAY,CAAC;AAErC,uFAAuF;AACvF,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAEvF,wBAAgB,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,eAAe,GAAG,YAAY,CAgB/E"}

package/dist/console/root.d.ts

@@ -1,4 +1,5 @@
 import { CotalEndpoint } from "@cotal-ai/core";
+import type { ControlCtx } from "./control.js";
 /** How the observer authenticates: a static/open creds file, OR the user-mode admin-view material
  *  (a bearer SOURCE so the standing tap survives the ≤5-min token life, plus the pinned principal a
  *  source-mode endpoint requires). Never both. */
@@ -14,17 +15,28 @@ export interface ObserverAuth {
 /** The read-only observer the console watches a space through — invisible to peers. Built once
  *  per selected space (the picker can switch spaces at runtime). */
 export declare function makeObserver(space: string, server: string, auth?: ObserverAuth, name?: string): CotalEndpoint;
+/** The operator's presence peer: a second endpoint carrying the observer's own card (the same id,
+ *  name, and role, so it IS the `from` of everything the observer sends) that does nothing but
+ *  register presence. The console starts it on the operator's first send, so a pure-watch session
+ *  stays invisible and a speaking operator becomes a roster peer agents can reply to; the replies
+ *  arrive over the observer's whole-space tap. Open mesh only: the console's authed observers hold
+ *  no presence-write grant and no live read of their own inbox, so Root offers no factory there.
+ *  Not started here: App owns its lifecycle (start on first send, stop with the console). */
+export declare function makeParticipant(observer: CotalEndpoint, server: string): CotalEndpoint;
 /**
  * Console root. With a fixed `space` (explicit `--space`, or the single space under auth) it goes
  * straight into the per-space console. Without one (open mesh) it shows the space overview first;
  * picking a space mounts the console for it — `key={space}` forces a clean MeshView remount, and
  * `onBack` tears it down to return to the overview.
  */
-export declare function Root({ server, auth, space, canWrite, name, }: {
+export declare function Root({ server, auth, space, canWrite, canControl, controlCtx, name, }: {
     server: string;
     auth: ObserverAuth;
     space?: string;
     canWrite?: boolean;
+    canControl?: boolean;
+    /** Trust material for per-action control mints — space-less; App adds its own space. */
+    controlCtx?: Omit<ControlCtx, "space">;
     name?: string;
 }): import("react").JSX.Element;
 //# sourceMappingURL=root.d.ts.map

package/dist/console/root.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../../src/console/root.tsx"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAkC,MAAM,gBAAgB,CAAC;AAI/E;;kDAEkD;AAClD,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/F;AAED;oEACoE;AACpE,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,YAAiB,EACvB,IAAI,SAAY,GACf,aAAa,CAuBf;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,EACnB,MAAM,EACN,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,IAAI,GACL,EAAE;IACD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,+BAqBA"}
+{"version":3,"file":"root.d.ts","sourceRoot":"","sources":["../../src/console/root.tsx"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAkC,MAAM,gBAAgB,CAAC;AAE/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG/C;;kDAEkD;AAClD,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/F;AAED;oEACoE;AACpE,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,YAAiB,EACvB,IAAI,SAAY,GACf,aAAa,CAuBf;AAED;;;;;;6FAM6F;AAC7F,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CAYtF;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,EACnB,MAAM,EACN,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,UAAU,EACV,UAAU,EACV,IAAI,GACL,EAAE;IACD,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wFAAwF;IACxF,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,+BAwBA"}