@cotal-ai/cli 0.6.0 → 0.8.0

package/dist/lib/manifest/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../../../src/lib/manifest/render.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,aAAa,CAAC;AAKhC,MAAM,KAAK,GAAG;IACZ,SAAS,EAAE,kCAAkC;IAC7C,cAAc,EAAE,gCAAgC;IAChD,YAAY,EAAE,yBAAyB;CACxC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,EAAY,EAAU,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;AAErF,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,CAAmB;IAChD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACrB,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,oBAAoB,CAAC;IACzD,GAAG,CAAC,IAAI,CACN,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,GAAG,CAAC;QACzB,CAAC,CAAC,GAAG,CAAC,cAAc,MAAM,cAAc,CAAC,CAAC,OAAO,IAAI,KAAK,0BAA0B,CAAC,CAAC,kBAAkB,GAAG,CAAC,CAC/G,CAAC;IAEF,iEAAiE;IACjE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5F,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7E,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACrF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACnF,IAAI,EAAE,CAAC,YAAY;YAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,uFAAuF;IACvF,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1D,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;aACxG,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnF,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM;YACvB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1J,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAEvC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;sGACsG;AACtG,MAAM,UAAU,YAAY,CAAC,CAAmB,EAAE,MAAc;IAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACrB,MAAM,IAAI,GAAG;QACX,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;QACtB,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,MAAM,EAAE;QACzE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAChH,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,cAAc,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1F,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,GAAG,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,mEAAmE,CAAC,EAAE,CAAC;AACxH,CAAC;AAED;uGACuG;AACvG,MAAM,UAAU,eAAe,CAAC,CAAmB;IACjD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC;QACtB,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;QACtF,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM;YAAE,SAAS;QAChD,kGAAkG;QAClG,4DAA4D;QAC5D,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM;YACvB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,wBAAwB,CAAC,EAAE,CAAC,CAAC;QACxJ,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG;gBACZ,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;gBAC9D,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;gBACnE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;aAChE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,OAAO,oCAAoC,CAAC,EAAE,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC5B,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvH,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,cAAc,CAAC,QAAwB;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9G,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED;;;sCAGsC;AACtC,MAAM,UAAU,eAAe,CAC7B,CAAmB,EACnB,QAAqB,EACrB,MAAiB,EACjB,SAA0B,EAC1B,GAAuD;IAEvD,MAAM,GAAG,GAAa,CAAC,CAAC,CAAC,IAAI,CAAC,mDAAmD,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEjG,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAClC,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACzH,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;QACjI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,WAAW,IAAI,QAAQ,cAAc,IAAI,CAAC,WAAW,IAAI,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QACtH,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;YAC5D,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,iFAAiF,CAAC,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,CAAC,CAAC;IAC9H,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE5H,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACxI,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,KAAK,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACnJ,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK;QAC1B,GAAG,CAAC,IAAI,CACN,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,GAAG;YACnF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,GAAG,CAAC,CAC5H,CAAC;IACJ,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE7D,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,sCAAsC,GAAG,CAAC,KAAK,kDAAkD,CAAC,CAAC,CAAC;IACvI,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED;;;6EAG6E;AAC7E,MAAM,UAAU,eAAe,CAAC,CAAkB;IAChD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,aAAa;QAC5B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mDAAmD,IAAI,IAAI,CAAC,CAAC,CAAC,IAAc,CAAC,CAAC,WAAW,EAAE,mDAAmD,CAAC;QACvJ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kIAAkI,CAAC,CAAC;IAC9I,mGAAmG;IACnG,2CAA2C;IAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACpC,OAAO,CAAC,CAAC,cAAc,CAAC,MAAM;YAC5B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,MAAM,uEAAuE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;YAChI,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,MAAM,kDAAkD,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrI,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;qFACqF;AACrF,MAAM,UAAU,kBAAkB,CAAC,GAUlC;IACC,MAAM,GAAG,GAAa,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClF,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,OAAO,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtJ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,QAAQ,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5H,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM;QAC5B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,eAAe,CAAC,MAAM,mCAAmC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjK,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,aAAa,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACnE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC,GAAG,iBAAiB,GAAG,CAAC,YAAY,UAAU,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACzG,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/lib/manifest/resolve.d.ts

@@ -0,0 +1,5 @@
+import type { ResolvedManifest } from "./model.js";
+/** Parse + validate a manifest source into the resolved model. `sourcePath` anchors relative
+ *  persona refs and locates errors. */
+export declare function resolveManifest(src: string, sourcePath: string): ResolvedManifest;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/lib/manifest/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/lib/manifest/resolve.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAmE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGpH;uCACuC;AACvC,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,gBAAgB,CA4EjF"}

package/dist/lib/manifest/resolve.js

@@ -0,0 +1,185 @@
+/**
+ * The pure manifest pipeline (no network, no persona-file reads — those are preflight):
+ *
+ *   parse (YAML, keep line/col) → schema (strict Zod) → normalize + invert (channel-centric →
+ *   per-agent ACLs) → semantic checks (names resolve, allowSubscribe ⊇ subscribe, concrete tokens).
+ *
+ * Returns a {@link ResolvedManifest}; throws {@link ManifestError} with every problem located by
+ * file + line. Stages 1–4 of the plan — deterministic and unit-testable.
+ */
+import { isAbsolute, resolve as resolvePath, dirname } from "node:path";
+import { parseDocument, LineCounter } from "yaml";
+import { assertValidChannel, assertValidName, isConcreteChannel } from "@cotal-ai/core";
+import { MeshManifestSchema } from "./schema.js";
+import { ManifestError } from "./errors.js";
+/** Parse + validate a manifest source into the resolved model. `sourcePath` anchors relative
+ *  persona refs and locates errors. */
+export function resolveManifest(src, sourcePath) {
+    const lc = new LineCounter();
+    const doc = parseDocument(src, { lineCounter: lc });
+    // Best-effort location: try the exact node, then walk up the path (union/object-level errors
+    // often have no node of their own), finally the document root. Diagnostics only — never on the
+    // resolved model (engineer, round-6).
+    const locate = (path) => {
+        if (!path)
+            return {};
+        const p = [...path];
+        for (;;) {
+            const node = doc.getIn(p, true);
+            if (node?.range) {
+                const { line, col } = lc.linePos(node.range[0]);
+                return { line, col };
+            }
+            if (p.length === 0)
+                return {};
+            p.pop();
+        }
+    };
+    // 1. Parse. Syntax errors + duplicate map keys (yaml enforces unique keys) surface here.
+    if (doc.errors.length)
+        throw new ManifestError(sourcePath, doc.errors.map((e) => ({ message: e.message.split("\n")[0], line: e.linePos?.[0]?.line, col: e.linePos?.[0]?.col })));
+    // Targeted message for the single-space deferral before the strict schema rejects it generically.
+    if (doc.has("spaces"))
+        throw new ManifestError(sourcePath, [
+            { message: "`spaces:` is not supported in v1 (single-space) — use a scalar `space:`", path: ["spaces"], ...locate(["spaces"]) },
+        ]);
+    // 2. Schema (strict): shape + unknown-key rejection. Map every Zod issue back to a located line.
+    const parsed = MeshManifestSchema.safeParse(doc.toJS());
+    if (!parsed.success)
+        throw new ManifestError(sourcePath, parsed.error.issues.map((iss) => {
+            const path = iss.path.filter((p) => typeof p !== "symbol");
+            // Point the line at the offending unknown key, not just its containing object.
+            const keys = iss.keys;
+            const locPath = iss.code === "unrecognized_keys" && keys?.length ? [...path, keys[0]] : path;
+            return { message: iss.message, path, ...locate(locPath) };
+        }));
+    const raw = parsed.data;
+    // 3 + 4. Normalize/invert and run pure semantic checks, collecting every problem in one pass.
+    const issues = [];
+    const add = (message, path) => issues.push({ message, path, ...locate(path) });
+    const agentNames = new Set(Object.keys(raw.agents ?? {}));
+    for (const name of agentNames)
+        try {
+            assertValidName(name);
+        }
+        catch (e) {
+            add(e.message, ["agents", name]);
+        }
+    if (raw.broker)
+        validateBroker(raw.broker, add);
+    const channels = normalizeChannels(raw, agentNames, add);
+    const agents = resolveAgents(raw, channels, sourcePath, add);
+    if (issues.length)
+        throw new ManifestError(sourcePath, issues);
+    return {
+        space: raw.space,
+        broker: raw.broker,
+        runtime: raw.runtime,
+        personaPermissions: raw.personaPermissions ?? "reject",
+        defaults: raw.defaults,
+        agents,
+        channels,
+        sourcePath,
+    };
+}
+/** Normalize each channel (default `allowSubscribe` ⇐ `subscribe`, dedup) and run the channel-level
+ *  semantic checks: concrete token, every referenced name resolves, `allowSubscribe ⊇ subscribe`. */
+function normalizeChannels(raw, agentNames, add) {
+    const out = [];
+    for (const [name, entry] of Object.entries(raw.channels)) {
+        try {
+            assertValidChannel(name);
+            if (!isConcreteChannel(name))
+                throw new Error(`channel "${name}" must be concrete — wildcard channels are not supported in v1`);
+        }
+        catch (e) {
+            add(e.message, ["channels", name]);
+        }
+        const subscribe = dedupe(entry.subscribe ?? []);
+        const allowSubscribe = entry.allowSubscribe ? dedupe(entry.allowSubscribe) : [...subscribe];
+        const allowPublish = dedupe(entry.allowPublish ?? []);
+        // Every name listed under a channel must resolve to an `agents:` entry (no silent default).
+        for (const [field, names] of [["subscribe", subscribe], ["allowSubscribe", allowSubscribe], ["allowPublish", allowPublish]])
+            for (const n of names)
+                if (!agentNames.has(n))
+                    add(`"${n}" is not declared in agents:`, ["channels", name, field]);
+        // An explicit allowSubscribe must be a superset of subscribe (the read-ACL invariant).
+        const missing = subscribe.filter((n) => !allowSubscribe.includes(n));
+        if (missing.length)
+            add(`subscribe [${missing.join(", ")}] not in allowSubscribe — a subscriber must be allowed to read`, ["channels", name, "allowSubscribe"]);
+        out.push({
+            name,
+            description: entry.description,
+            instructions: entry.instructions,
+            subscribe,
+            allowSubscribe,
+            allowPublish,
+            replay: entry.replay,
+            replayWindow: entry.replayWindow,
+            deliveryClass: entry.deliveryClass,
+        });
+    }
+    return out;
+}
+/** Build each agent's resolved form: its persona source (file/inline) + the per-agent ACLs inverted
+ *  from channel membership. Behavior overrides are carried verbatim; the persona default is filled
+ *  in during preflight (which reads the file). */
+function resolveAgents(raw, channels, sourcePath, add) {
+    const topPolicy = raw.personaPermissions ?? "reject";
+    const dir = dirname(sourcePath);
+    const personaPath = (ref) => (isAbsolute(ref) ? ref : resolvePath(dir, ref));
+    // No silent default connector (matches roster.yaml): an agent needs its own `agent:` or the
+    // top-level default. Fail loud rather than guessing claude/opencode.
+    const connector = (name, own) => {
+        const t = own ?? raw.agent;
+        if (!t)
+            add(`no connector for "${name}" — set \`agent:\` on it or a top-level \`agent:\` default`, ["agents", name]);
+        return t ?? "";
+    };
+    // After schema preprocessing every entry is the object form (a bare string was normalized to
+    // `{ persona }`), so there's a single shape to read here.
+    return Object.entries(raw.agents ?? {}).map(([name, entry]) => ({
+        name,
+        agentType: connector(name, entry.agent),
+        persona: entry.persona ? personaPath(entry.persona) : undefined,
+        model: entry.model,
+        role: entry.role,
+        description: entry.description,
+        instructions: entry.instructions,
+        capabilities: entry.capabilities,
+        personaPermissions: entry.personaPermissions ?? topPolicy,
+        policy: invertPolicy(name, channels),
+    }));
+}
+/** Invert channel-centric membership into one agent's per-channel ACLs (the channels it appears in). */
+function invertPolicy(name, channels) {
+    return {
+        subscribe: channels.filter((c) => c.subscribe.includes(name)).map((c) => c.name),
+        allowSubscribe: channels.filter((c) => c.allowSubscribe.includes(name)).map((c) => c.name),
+        allowPublish: channels.filter((c) => c.allowPublish.includes(name)).map((c) => c.name),
+    };
+}
+/** Reject inline credentials in the broker config: a `nats://user:pass@host` URL must use the
+ *  auth creds/profile path, not embedded secrets (critic, round-6); `host` is a bind address, not
+ *  a URL. Each server entry must parse as a URL (no silent fallback). */
+function validateBroker(broker, add) {
+    if (broker.host?.includes("://"))
+        add(`broker.host is a bind address (e.g. 127.0.0.1), not a URL — drop the scheme`, ["broker", "host"]);
+    if (broker.servers)
+        for (const s of broker.servers.split(",").map((x) => x.trim()).filter(Boolean)) {
+            let u;
+            try {
+                u = new URL(s);
+            }
+            catch {
+                add(`broker.servers entry "${s}" is not a valid URL (e.g. nats://127.0.0.1:4222)`, ["broker", "servers"]);
+                continue;
+            }
+            if (u.username || u.password)
+                add(`broker.servers must not embed credentials ("${u.username}:***@…") — use auth creds/profile, not inline secrets`, ["broker", "servers"]);
+        }
+}
+function dedupe(xs) {
+    return [...new Set(xs)];
+}
+//# sourceMappingURL=resolve.js.map

package/dist/lib/manifest/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/lib/manifest/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAoB,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAsB,MAAM,aAAa,CAAC;AAEhE;uCACuC;AACvC,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,UAAkB;IAC7D,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,6FAA6F;IAC7F,+FAA+F;IAC/F,sCAAsC;IACtC,MAAM,MAAM,GAAG,CAAC,IAA0B,EAAmC,EAAE;QAC7E,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACpB,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAqD,CAAC;YACpF,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;gBAChB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC9B,CAAC,CAAC,GAAG,EAAE,CAAC;QACV,CAAC;IACH,CAAC,CAAC;IAEF,yFAAyF;IACzF,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM;QACnB,MAAM,IAAI,aAAa,CACrB,UAAU,EACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CACrH,CAAC;IAEJ,kGAAkG;IAClG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;QACnB,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE;YAClC,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE;SAChI,CAAC,CAAC;IAEL,iGAAiG;IACjG,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,OAAO;QACjB,MAAM,IAAI,aAAa,CACrB,UAAU,EACV,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAwB,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YACjF,+EAA+E;YAC/E,MAAM,IAAI,GAAI,GAA2B,CAAC,IAAI,CAAC;YAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,mBAAmB,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7F,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,CAAC,CAAC,CACH,CAAC;IACJ,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;IAExB,8FAA8F;IAC9F,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,IAA0B,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE7G,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,UAAU;QAC3B,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAE,CAAW,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;IAEH,IAAI,GAAG,CAAC,MAAM;QAAE,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAE7D,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/D,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,IAAI,QAAQ;QACtD,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM;QACN,QAAQ;QACR,UAAU;KACX,CAAC;AACJ,CAAC;AAED;qGACqG;AACrG,SAAS,iBAAiB,CACxB,GAAgB,EAChB,UAAuB,EACvB,GAA0D;IAE1D,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,gEAAgE,CAAC,CAAC;QAClI,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAE,CAAW,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;QAC5F,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAEtD,4FAA4F;QAC5F,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC,gBAAgB,EAAE,cAAc,CAAC,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC,CAAU;YAClI,KAAK,MAAM,CAAC,IAAI,KAAK;gBACnB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAEhG,uFAAuF;QACvF,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,OAAO,CAAC,MAAM;YAChB,GAAG,CAAC,cAAc,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gEAAgE,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAE9I,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS;YACT,cAAc;YACd,YAAY;YACZ,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;kDAEkD;AAClD,SAAS,aAAa,CACpB,GAAgB,EAChB,QAA2B,EAC3B,UAAkB,EAClB,GAA0D;IAE1D,MAAM,SAAS,GAAuB,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC;IACzE,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACrF,4FAA4F;IAC5F,qEAAqE;IACrE,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,GAAY,EAAU,EAAE;QACvD,MAAM,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,CAAC;YAAE,GAAG,CAAC,qBAAqB,IAAI,4DAA4D,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACrH,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC;IAEF,6FAA6F;IAC7F,0DAA0D;IAC1D,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI;QACJ,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,SAAS;QACzD,MAAM,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC;KACrC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,wGAAwG;AACxG,SAAS,YAAY,CAAC,IAAY,EAAE,QAA2B;IAC7D,OAAO;QACL,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1F,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KACvF,CAAC;AACJ,CAAC;AAED;;yEAEyE;AACzE,SAAS,cAAc,CAAC,MAA0C,EAAE,GAAiD;IACnH,IAAI,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC;QAC9B,GAAG,CAAC,6EAA6E,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,OAAO;QAChB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAM,CAAC;YACX,IAAI,CAAC;gBACH,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,yBAAyB,CAAC,mDAAmD,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC1G,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ;gBAC1B,GAAG,CAAC,+CAA+C,CAAC,CAAC,QAAQ,uDAAuD,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QACjJ,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAI,EAAO;IACxB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1B,CAAC"}

package/dist/lib/manifest/schema.d.ts

@@ -0,0 +1,103 @@
+/**
+ * The mesh-manifest schema (`cotal.yaml`, `kind: Mesh`) — the strict Zod shape the parser
+ * validates before any normalization. Strict objects reject unknown keys (no silent ignore —
+ * matches the repo's "no fallbacks" rule); the resolved/inverted model lives in {@link ./model.js}.
+ *
+ * This is shape-only: cross-field rules (names resolve to an agent, `allowSubscribe ⊇ subscribe`,
+ * concrete channel tokens) are pure semantic checks in {@link ./resolve.js}, where they can report
+ * the offending file + line.
+ */
+import { z } from "zod";
+/** An `agents:` value is a string (bare persona path) OR the object above. A plain `z.union`
+ *  collapses an object with a bad key to a useless "Invalid input", so normalize the string form to
+ *  `{ persona }` first and validate the one strict object — its real errors (unrecognized key, …)
+ *  then surface with their path. */
+declare const AgentEntry: z.ZodPreprocess<z.ZodObject<{
+    persona: z.ZodOptional<z.ZodString>;
+    agent: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+    role: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    instructions: z.ZodOptional<z.ZodString>;
+    capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    personaPermissions: z.ZodOptional<z.ZodEnum<{
+        reject: "reject";
+        include: "include";
+    }>>;
+}, z.core.$strict>>;
+/** A channel carries its registry card (description/instructions + replay knobs — the existing
+ *  ChannelConfig fields) plus the three native access verbs listed per-channel (agents under it). */
+declare const ChannelEntry: z.ZodObject<{
+    description: z.ZodOptional<z.ZodString>;
+    instructions: z.ZodOptional<z.ZodString>;
+    subscribe: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    allowSubscribe: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    allowPublish: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    replay: z.ZodOptional<z.ZodBoolean>;
+    replayWindow: z.ZodOptional<z.ZodString>;
+    deliveryClass: z.ZodOptional<z.ZodEnum<{
+        live: "live";
+        durable: "durable";
+    }>>;
+}, z.core.$strict>;
+/** The whole manifest. `apiVersion`/`kind` are literals so a foreign YAML doc is rejected up front;
+ *  `agents` and `channels` are required maps. */
+export declare const MeshManifestSchema: z.ZodObject<{
+    apiVersion: z.ZodLiteral<"cotal/v1">;
+    kind: z.ZodLiteral<"Mesh">;
+    space: z.ZodString;
+    broker: z.ZodOptional<z.ZodObject<{
+        servers: z.ZodOptional<z.ZodString>;
+        host: z.ZodOptional<z.ZodString>;
+        auth: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    runtime: z.ZodOptional<z.ZodEnum<{
+        pty: "pty";
+        tmux: "tmux";
+        cmux: "cmux";
+    }>>;
+    agent: z.ZodOptional<z.ZodString>;
+    personaPermissions: z.ZodOptional<z.ZodEnum<{
+        reject: "reject";
+        include: "include";
+    }>>;
+    agents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodPreprocess<z.ZodObject<{
+        persona: z.ZodOptional<z.ZodString>;
+        agent: z.ZodOptional<z.ZodString>;
+        model: z.ZodOptional<z.ZodString>;
+        role: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        instructions: z.ZodOptional<z.ZodString>;
+        capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        personaPermissions: z.ZodOptional<z.ZodEnum<{
+            reject: "reject";
+            include: "include";
+        }>>;
+    }, z.core.$strict>>>>;
+    defaults: z.ZodOptional<z.ZodObject<{
+        replay: z.ZodOptional<z.ZodBoolean>;
+        replayWindow: z.ZodOptional<z.ZodString>;
+        deliveryClass: z.ZodOptional<z.ZodEnum<{
+            live: "live";
+            durable: "durable";
+        }>>;
+    }, z.core.$strict>>;
+    channels: z.ZodRecord<z.ZodString, z.ZodObject<{
+        description: z.ZodOptional<z.ZodString>;
+        instructions: z.ZodOptional<z.ZodString>;
+        subscribe: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        allowSubscribe: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        allowPublish: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        replay: z.ZodOptional<z.ZodBoolean>;
+        replayWindow: z.ZodOptional<z.ZodString>;
+        deliveryClass: z.ZodOptional<z.ZodEnum<{
+            live: "live";
+            durable: "durable";
+        }>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type RawManifest = z.infer<typeof MeshManifestSchema>;
+export type RawAgentEntry = z.infer<typeof AgentEntry>;
+export type RawChannelEntry = z.infer<typeof ChannelEntry>;
+export {};
+//# sourceMappingURL=schema.d.ts.map

package/dist/lib/manifest/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/lib/manifest/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2BxB;;;oCAGoC;AACpC,QAAA,MAAM,UAAU;;;;;;;;;;;;mBAAsF,CAAC;AAEvG;qGACqG;AACrG,QAAA,MAAM,YAAY;;;;;;;;;;;;kBAShB,CAAC;AAcH;iDACiD;AACjD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAc7B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC7D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AACvD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/lib/manifest/schema.js

@@ -0,0 +1,77 @@
+/**
+ * The mesh-manifest schema (`cotal.yaml`, `kind: Mesh`) — the strict Zod shape the parser
+ * validates before any normalization. Strict objects reject unknown keys (no silent ignore —
+ * matches the repo's "no fallbacks" rule); the resolved/inverted model lives in {@link ./model.js}.
+ *
+ * This is shape-only: cross-field rules (names resolve to an agent, `allowSubscribe ⊇ subscribe`,
+ * concrete channel tokens) are pure semantic checks in {@link ./resolve.js}, where they can report
+ * the offending file + line.
+ */
+import { z } from "zod";
+const DeliveryClass = z.enum(["live", "durable"]);
+const PersonaPermissions = z.enum(["reject", "include"]);
+/** An `agents:` value is a string (a bare persona path) OR an object — either an override on a
+ *  persona file (`persona:` present) or a fully inline agent (no `persona:`). One object schema
+ *  covers both; {@link ./resolve.js} splits them on the presence of `persona`. */
+const AgentEntryObject = z
+    .strictObject({
+    persona: z.string().min(1).optional(),
+    /** Connector type to spawn this agent with (claude / opencode / hermes / …). Overrides the
+     *  top-level `agent:` default; one of the two must be set (no silent default — matches roster). */
+    agent: z.string().min(1).optional(),
+    model: z.string().min(1).optional(),
+    role: z.string().min(1).optional(),
+    description: z.string().optional(),
+    instructions: z.string().optional(),
+    capabilities: z.array(z.string().min(1)).optional(),
+    /** Per-agent override of the top-level `personaPermissions` policy. */
+    personaPermissions: PersonaPermissions.optional(),
+})
+    .refine((v) => v.persona !== undefined || v.model !== undefined || v.instructions !== undefined, {
+    message: "inline agent (no `persona:`) needs at least `model` or `instructions` — otherwise reference a persona file",
+});
+/** An `agents:` value is a string (bare persona path) OR the object above. A plain `z.union`
+ *  collapses an object with a bad key to a useless "Invalid input", so normalize the string form to
+ *  `{ persona }` first and validate the one strict object — its real errors (unrecognized key, …)
+ *  then surface with their path. */
+const AgentEntry = z.preprocess((v) => (typeof v === "string" ? { persona: v } : v), AgentEntryObject);
+/** A channel carries its registry card (description/instructions + replay knobs — the existing
+ *  ChannelConfig fields) plus the three native access verbs listed per-channel (agents under it). */
+const ChannelEntry = z.strictObject({
+    description: z.string().optional(),
+    instructions: z.string().optional(),
+    subscribe: z.array(z.string().min(1)).optional(),
+    allowSubscribe: z.array(z.string().min(1)).optional(),
+    allowPublish: z.array(z.string().min(1)).optional(),
+    replay: z.boolean().optional(),
+    replayWindow: z.string().optional(),
+    deliveryClass: DeliveryClass.optional(),
+});
+const Defaults = z.strictObject({
+    replay: z.boolean().optional(),
+    replayWindow: z.string().optional(),
+    deliveryClass: DeliveryClass.optional(),
+});
+const Broker = z.strictObject({
+    servers: z.string().min(1).optional(),
+    host: z.string().min(1).optional(),
+    auth: z.boolean().optional(),
+});
+/** The whole manifest. `apiVersion`/`kind` are literals so a foreign YAML doc is rejected up front;
+ *  `agents` and `channels` are required maps. */
+export const MeshManifestSchema = z.strictObject({
+    apiVersion: z.literal("cotal/v1"),
+    kind: z.literal("Mesh"),
+    space: z.string().min(1),
+    broker: Broker.optional(),
+    runtime: z.enum(["pty", "tmux", "cmux"]).optional(),
+    /** Default connector for agents that don't set their own `agent:`. */
+    agent: z.string().min(1).optional(),
+    personaPermissions: PersonaPermissions.optional(),
+    // `agents` is optional — a channels-first manifest can seed the rooms now and add agents later.
+    // A channel that references an undeclared name is still a hard error (in resolve.ts).
+    agents: z.record(z.string().min(1), AgentEntry).optional(),
+    defaults: Defaults.optional(),
+    channels: z.record(z.string().min(1), ChannelEntry),
+});
+//# sourceMappingURL=schema.js.map

package/dist/lib/manifest/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/lib/manifest/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAClD,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEzD;;kFAEkF;AAClF,MAAM,gBAAgB,GAAG,CAAC;KACvB,YAAY,CAAC;IACZ,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC;uGACmG;IACnG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,uEAAuE;IACvE,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,EAAE;IAC/F,OAAO,EACL,4GAA4G;CAC/G,CAAC,CAAC;AAEL;;;oCAGoC;AACpC,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;AAEvG;qGACqG;AACrG,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH;iDACiD;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/C,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;IACzB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnD,sEAAsE;IACtE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,kBAAkB,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACjD,gGAAgG;IAChG,sFAAsF;IACtF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE;IAC1D,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC;CACpD,CAAC,CAAC"}

package/dist/lib/manifest/spawn-plan.d.ts

@@ -0,0 +1,87 @@
+/**
+ * `cotal spawn -f` classification — the pure decision layer over a running mesh's live state (the
+ * channel registry, the roster, the broker-sourced membership feed) plus any prior ledger for this
+ * manifest. It never mutates: it produces the plan that drives `--dry-run`, the apply grouping, and
+ * the SECURITY warnings. Creation-only by construction — a pre-existing unmanaged channel/agent is
+ * classified, never adopted or patched.
+ */
+import { type ChannelConfig, type ChannelRegistryFile, type MembershipSnapshot, type Presence } from "@cotal-ai/core";
+import type { ResolvedChannel } from "./model.js";
+import type { PreparedAgent } from "./prepare.js";
+import type { MeshLedger } from "./ledger.js";
+export interface ChannelPlan {
+    /** Brand-new registry keys this run will create + seed + ledger-own. */
+    create: ResolvedChannel[];
+    /** Keys that already exist and are NOT owned by this run — left untouched (no card mutation); the
+     *  manifest-desired card is shown against the live one. */
+    existsUnmanaged: Array<{
+        channel: ResolvedChannel;
+        live: ChannelConfig;
+    }>;
+    /** Keys this run already owns (prior ledger) — ours to additively re-seed. */
+    owned: ResolvedChannel[];
+}
+/** Classify each declared channel against the live registry + this run's owned keys. Only brand-new
+ *  keys are creatable/ownable; a key present but unowned is `exists-unmanaged` (never adopted). */
+export declare function classifyChannels(declared: ResolvedChannel[], live: ChannelRegistryFile, ownedKeys: Set<string>): ChannelPlan;
+export type AgentDisposition = "will-create" | "already-owned" | "stale";
+export interface PriorAgent {
+    requested: string;
+    name: string;
+    id: string;
+    hash: string;
+}
+export interface AgentPlanEntry {
+    agent: PreparedAgent;
+    /** Resolved hash of the declared agent (drift key). */
+    hash: string;
+    disposition: AgentDisposition;
+    /** The prior ledger entry, for `already-owned` / `stale`. */
+    prior?: PriorAgent;
+    /** Whether the prior spawned agent is currently present on the mesh (stale wording). */
+    running?: boolean;
+}
+export interface AgentPlan {
+    entries: AgentPlanEntry[];
+    willCreate: AgentPlanEntry[];
+    alreadyOwned: AgentPlanEntry[];
+    stale: AgentPlanEntry[];
+}
+/** Classify declared agents against any prior ledger (matched by manifest key) + the live roster:
+ *  not previously created → `will-create`; previously created + same resolved hash → `already-owned`
+ *  (no-op); previously created + hash changed → `stale` (restart required). */
+export declare function classifyAgents(agents: PreparedAgent[], roster: Presence[], prior?: MeshLedger): AgentPlan;
+export interface UnmanagedActor {
+    id: string;
+    name?: string;
+    /** How the access was observed: a durable membership record, or a live (CONNZ) subscription. */
+    via: "durable" | "live";
+}
+export interface ChannelExposure {
+    channel: string;
+    actors: UnmanagedActor[];
+}
+export interface UnmanagedReport {
+    /** Per declared channel: unmanaged actors observed with read access to it (a SECURITY conflict). */
+    perChannel: ChannelExposure[];
+    /** True when the broker-sourced membership feed was readable (the per-channel signal is meaningful).
+     *  When false, the report is presence-only — an explicit LOWER BOUND, not "no unmanaged access." */
+    feedAvailable: boolean;
+    /** Feed freshness (epoch ms) when available. */
+    asOf?: number;
+    /** Present peers not owned by this run — mesh-level context (not necessarily on a declared channel). */
+    presentUnowned: Array<{
+        id: string;
+        name: string;
+        role?: string;
+    }>;
+}
+/** Observe unmanaged actors with read access to a manifest-declared channel — an isolation conflict
+ *  on a shared mesh. v1 is an explicit LOWER BOUND: it uses the roster (presence) + the broker
+ *  membership feed (durable members + CONNZ live subscriptions); when the feed is absent it falls back
+ *  to presence only and says so. `owned` is this run's agents (ids + spawned names) to exclude. */
+export declare function detectUnmanagedActors(declared: string[], snapshot: MembershipSnapshot | null, roster: Presence[], owned: {
+    ids: Set<string>;
+    names: Set<string>;
+}): UnmanagedReport;
+//# sourceMappingURL=spawn-plan.d.ts.map

package/dist/lib/manifest/spawn-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-plan.d.ts","sourceRoot":"","sources":["../../../src/lib/manifest/spawn-plan.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAkB,KAAK,aAAa,EAAE,KAAK,mBAAmB,EAAE,KAAK,kBAAkB,EAAE,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACtI,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B;+DAC2D;IAC3D,eAAe,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,eAAe,CAAC;QAAC,IAAI,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;IAC1E,8EAA8E;IAC9E,KAAK,EAAE,eAAe,EAAE,CAAC;CAC1B;AAED;mGACmG;AACnG,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,WAAW,CAW5H;AAID,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,eAAe,GAAG,OAAO,CAAC;AAEzE,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,aAAa,CAAC;IACrB,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,gBAAgB,CAAC;IAC9B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,wFAAwF;IACxF,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED;;+EAE+E;AAC/E,wBAAgB,cAAc,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAgBzG;AAID,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,GAAG,EAAE,SAAS,GAAG,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,oGAAoG;IACpG,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B;wGACoG;IACpG,aAAa,EAAE,OAAO,CAAC;IACvB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wGAAwG;IACxG,cAAc,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE;AAED;;;mGAGmG;AACnG,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAAE,EAClB,QAAQ,EAAE,kBAAkB,GAAG,IAAI,EACnC,MAAM,EAAE,QAAQ,EAAE,EAClB,KAAK,EAAE;IAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAE,GAC9C,eAAe,CAmBjB"}

package/dist/lib/manifest/spawn-plan.js

@@ -0,0 +1,75 @@
+/**
+ * `cotal spawn -f` classification — the pure decision layer over a running mesh's live state (the
+ * channel registry, the roster, the broker-sourced membership feed) plus any prior ledger for this
+ * manifest. It never mutates: it produces the plan that drives `--dry-run`, the apply grouping, and
+ * the SECURITY warnings. Creation-only by construction — a pre-existing unmanaged channel/agent is
+ * classified, never adopted or patched.
+ */
+import { subjectMatches } from "@cotal-ai/core";
+import { hashAgent } from "./apply.js";
+/** Classify each declared channel against the live registry + this run's owned keys. Only brand-new
+ *  keys are creatable/ownable; a key present but unowned is `exists-unmanaged` (never adopted). */
+export function classifyChannels(declared, live, ownedKeys) {
+    const create = [];
+    const existsUnmanaged = [];
+    const owned = [];
+    for (const ch of declared) {
+        const liveCfg = live.channels?.[ch.name];
+        if (!liveCfg)
+            create.push(ch);
+        else if (ownedKeys.has(ch.name))
+            owned.push(ch);
+        else
+            existsUnmanaged.push({ channel: ch, live: liveCfg });
+    }
+    return { create, existsUnmanaged, owned };
+}
+/** Classify declared agents against any prior ledger (matched by manifest key) + the live roster:
+ *  not previously created → `will-create`; previously created + same resolved hash → `already-owned`
+ *  (no-op); previously created + hash changed → `stale` (restart required). */
+export function classifyAgents(agents, roster, prior) {
+    const present = new Set(roster.filter((p) => p.status !== "offline").map((p) => p.card.name));
+    const priorByKey = new Map((prior?.created.agents ?? []).map((a) => [a.requested, a]));
+    const entries = agents.map((agent) => {
+        const hash = hashAgent(agent);
+        const p = priorByKey.get(agent.name); // PreparedAgent.name is the manifest `agents:` key
+        if (!p)
+            return { agent, hash, disposition: "will-create" };
+        const running = present.has(p.name);
+        return { agent, hash, disposition: p.hash === hash ? "already-owned" : "stale", prior: p, running };
+    });
+    return {
+        entries,
+        willCreate: entries.filter((e) => e.disposition === "will-create"),
+        alreadyOwned: entries.filter((e) => e.disposition === "already-owned"),
+        stale: entries.filter((e) => e.disposition === "stale"),
+    };
+}
+/** Observe unmanaged actors with read access to a manifest-declared channel — an isolation conflict
+ *  on a shared mesh. v1 is an explicit LOWER BOUND: it uses the roster (presence) + the broker
+ *  membership feed (durable members + CONNZ live subscriptions); when the feed is absent it falls back
+ *  to presence only and says so. `owned` is this run's agents (ids + spawned names) to exclude. */
+export function detectUnmanagedActors(declared, snapshot, roster, owned) {
+    const presentUnowned = roster
+        .filter((p) => p.status !== "offline" && !owned.ids.has(p.card.id) && !owned.names.has(p.card.name))
+        .map((p) => ({ id: p.card.id, name: p.card.name, role: p.card.role }));
+    const nameOf = new Map(roster.map((p) => [p.card.id, p.card.name]));
+    const perChannel = [];
+    if (snapshot) {
+        for (const channel of declared) {
+            const actors = [];
+            for (const m of snapshot.members) {
+                if (owned.ids.has(m.id))
+                    continue;
+                const durable = m.durable.includes(channel);
+                const live = !durable && m.live.some((pat) => subjectMatches(pat, channel)); // channel-token wildcards (`team.>`)
+                if (durable || live)
+                    actors.push({ id: m.id, name: nameOf.get(m.id), via: durable ? "durable" : "live" });
+            }
+            if (actors.length)
+                perChannel.push({ channel, actors });
+        }
+    }
+    return { perChannel, feedAvailable: Boolean(snapshot?.asOf), asOf: snapshot?.asOf, presentUnowned };
+}
+//# sourceMappingURL=spawn-plan.js.map

package/dist/lib/manifest/spawn-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-plan.js","sourceRoot":"","sources":["../../../src/lib/manifest/spawn-plan.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,cAAc,EAAwF,MAAM,gBAAgB,CAAC;AAItI,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAcvC;mGACmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,QAA2B,EAAE,IAAyB,EAAE,SAAsB;IAC7G,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,eAAe,GAA6D,EAAE,CAAC;IACrF,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;aACzB,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;YAC3C,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AAC5C,CAAC;AA+BD;;+EAE+E;AAC/E,MAAM,UAAU,cAAc,CAAC,MAAuB,EAAE,MAAkB,EAAE,KAAkB;IAC5F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9F,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,OAAO,GAAqB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,mDAAmD;QACzF,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACtG,CAAC,CAAC,CAAC;IACH,OAAO;QACL,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,aAAa,CAAC;QAClE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,eAAe,CAAC;QACtE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,OAAO,CAAC;KACxD,CAAC;AACJ,CAAC;AA4BD;;;mGAGmG;AACnG,MAAM,UAAU,qBAAqB,CACnC,QAAkB,EAClB,QAAmC,EACnC,MAAkB,EAClB,KAA+C;IAE/C,MAAM,cAAc,GAAG,MAAM;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACnG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAqB,EAAE,CAAC;YACpC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACjC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAClC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,qCAAqC;gBAClH,IAAI,OAAO,IAAI,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5G,CAAC;YACD,IAAI,MAAM,CAAC,MAAM;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AACtG,CAAC"}

package/dist/lib/meshes.d.ts

@@ -0,0 +1,2 @@
+export { pruneStaleMeshes } from "@cotal-ai/workspace";
+//# sourceMappingURL=meshes.d.ts.map

package/dist/lib/meshes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meshes.d.ts","sourceRoot":"","sources":["../../src/lib/meshes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/lib/meshes.js

@@ -0,0 +1,6 @@
+// `pruneStaleMeshes` lives in `@cotal-ai/workspace` (`preflight.ts`) — the workstation layer the
+// manager control commands share too. Re-exported from here so its CLI importers (`connect`,
+// `commands/meshes`, `commands/use`) and the `spawn-from-anywhere` smokes keep resolving it from
+// this module unchanged.
+export { pruneStaleMeshes } from "@cotal-ai/workspace";
+//# sourceMappingURL=meshes.js.map

package/dist/lib/meshes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meshes.js","sourceRoot":"","sources":["../../src/lib/meshes.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,6FAA6F;AAC7F,iGAAiG;AACjG,yBAAyB;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC"}