@cotal-ai/cli 0.6.0 → 0.8.0

package/dist/lib/onboard.js

@@ -1,15 +1,15 @@
 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
 import { join } from "node:path";
+import { homeCotalDir } from "@cotal-ai/workspace";
 /** Machine-level "I've onboarded before" marker. Its presence flips `cotal` from the
  *  full first-run flow to the compact ensure+status run. Lives next to the materialized
- *  plugin marketplace under ~/.cotal. */
-const MARKER = join(homedir(), ".cotal", "onboarded.json");
+ *  plugin marketplace under ~/.cotal (COTAL_HOME-overridable, via {@link homeCotalDir}). */
+const MARKER = () => join(homeCotalDir(), "onboarded.json");
 export function isOnboarded() {
-    return existsSync(MARKER);
+    return existsSync(MARKER());
 }
 export function markOnboarded(version) {
-    mkdirSync(join(homedir(), ".cotal"), { recursive: true });
-    writeFileSync(MARKER, JSON.stringify({ version, ts: new Date().toISOString() }, null, 2));
+    mkdirSync(homeCotalDir(), { recursive: true, mode: 0o700 });
+    writeFileSync(MARKER(), JSON.stringify({ version, ts: new Date().toISOString() }, null, 2));
 }
 //# sourceMappingURL=onboard.js.map

package/dist/lib/onboard.js.map

@@ -1 +1 @@
-{"version":3,"file":"onboard.js","sourceRoot":"","sources":["../../src/lib/onboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;yCAEyC;AACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAE3D,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC"}
+{"version":3,"file":"onboard.js","sourceRoot":"","sources":["../../src/lib/onboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD;;4FAE4F;AAC5F,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAE5D,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,SAAS,CAAC,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC"}

package/dist/lib/paths.js

@@ -1,5 +1,5 @@
 import { join } from "node:path";
-import { findCotalRoot } from "@cotal-ai/core";
+import { findCotalRoot } from "@cotal-ai/workspace";
 /** The project's `.cotal/` root, found by walking up from cwd (like git finds `.git`), so every
  *  command resolves the same `.cotal/` whether you're at the project root or a subdirectory. */
 export function cotalRoot() {

package/dist/lib/paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/lib/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C;gGACgG;AAChG,MAAM,UAAU,SAAS;IACvB,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAED;yDACyD;AACzD,MAAM,UAAU,SAAS,CAAC,GAAG,QAAkB;IAC7C,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC;AAClD,CAAC"}
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/lib/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD;gGACgG;AAChG,MAAM,UAAU,SAAS;IACvB,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAED;yDACyD;AACzD,MAAM,UAAU,SAAS,CAAC,GAAG,QAAkB;IAC7C,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC;AAClD,CAAC"}

package/dist/lib/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/lib/status.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;sEAEsE;AACtE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;8FAC8F;AAC9F,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CASjE;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACrC,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CAChD;AAED,kEAAkE;AAClE,wBAAsB,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAe5D;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAG3C;AAQD,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGjD"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/lib/status.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;sEAEsE;AACtE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;8FAC8F;AAC9F,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CASjE;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACrC,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CAChD;AAED,kEAAkE;AAClE,wBAAsB,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAe5D;AAED,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAG3C;AAQD,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGjD"}

package/dist/lib/status.js

@@ -1,7 +1,8 @@
 import { spawnSync } from "node:child_process";
 import { existsSync } from "node:fs";
 import { join } from "node:path";
-import { DEFAULT_SERVER, DEFAULT_SPACE, authDir, findCotalRoot, isReachable, loadSpaceAuth } from "@cotal-ai/core";
+import { DEFAULT_SERVER, DEFAULT_SPACE, isReachable } from "@cotal-ai/core";
+import { authDir, findCotalRoot, loadSpaceAuth } from "@cotal-ai/workspace";
 import { resolveNatsServer } from "./nats-bin.js";
 /** The space this folder operates on: its `.cotal/auth` space if set up, else the default.
  *  A folder has exactly one space (its auth) — commands resolve it through here so they always

package/dist/lib/status.js.map

@@ -1 +1 @@
-{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/lib/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACnH,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASlD;;sEAEsE;AACtE,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,aAAa,CAAC;AAC5E,CAAC;AAED;8FAC8F;AAC9F,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW;IAC1C,MAAM,MAAM,GAAG,cAAc,CAAC;IAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO;QACL,SAAS,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC;QACpC,MAAM;QACN,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,aAAa;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;KACpB,CAAC;AACJ,CAAC;AAQD,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,IAAI,GAA0B,SAAS,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,IAAI;QACJ,YAAY,EAAE,qBAAqB,EAAE;QACrC,MAAM,EAAE;YACN,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC;SAC7B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3G,CAAC"}
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/lib/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASlD;;sEAEsE;AACtE,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,aAAa,CAAC;AAC5E,CAAC;AAED;8FAC8F;AAC9F,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW;IAC1C,MAAM,MAAM,GAAG,cAAc,CAAC;IAC9B,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO;QACL,SAAS,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC;QACpC,MAAM;QACN,KAAK,EAAE,IAAI,EAAE,KAAK,IAAI,aAAa;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;KACpB,CAAC;AACJ,CAAC;AAQD,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,IAAI,IAAI,GAA0B,SAAS,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,IAAI;QACJ,YAAY,EAAE,qBAAqB,EAAE;QACrC,MAAM,EAAE;YACN,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC;SAC7B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,qBAAqB;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3G,CAAC"}

package/dist/lib/transient.d.ts

@@ -1,18 +1,19 @@
 import { CotalEndpoint } from "@cotal-ai/core";
 /**
  * A one-shot, write-capable connection for the headless commands that touch the live mesh
- * (`dm`/`msg`/`ask`, and `personas list --running`). Resolve space/server/creds the same way
- * everywhere, open a transient endpoint that never joins the roster, do the one thing, stop.
- * Fail-loud throughout — an unreachable server or a space mismatch exits, never degrades.
+ * (`dm`/`msg`/`ask`, and `personas list --running`). Resolution + creds + reachability all go through
+ * the shared `connectOrExit` (so these work from any directory, and an explicit `--creds` is a raw
+ * off-registry connection). Opens a transient endpoint that never joins the roster, does the one
+ * thing, stops.
  */
 export interface ConnectValues {
     space?: string;
     server?: string;
     creds?: string;
 }
-/** Resolve where to connect and with what credentials: an explicit `--creds` wins; else self-mint
- *  from `.cotal/auth` so an AUTH-mode mesh admits us; else connect bare on an open mesh. Exits with
- *  a clear message on a `--space` that contradicts the local auth, or an unreachable server. */
+/** Resolve where to connect + with what credentials (`--creds` → raw off-registry; else the running
+ *  mesh's minted manager creds). Fail-loud — an unresolved registry or an unreachable/auth-mismatched
+ *  broker exits with one sentence, never degrades. */
 export declare function resolveConnect(values: ConnectValues): Promise<{
     server: string;
     space: string;

package/dist/lib/transient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transient.d.ts","sourceRoot":"","sources":["../../src/lib/transient.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EAQd,MAAM,gBAAgB,CAAC;AAIxB;;;;;GAKG;AAEH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;gGAEgG;AAChG,wBAAsB,cAAc,CAClC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAuB5D;AAED;iGACiG;AACjG,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,EAAE,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAe/C"}
+{"version":3,"file":"transient.d.ts","sourceRoot":"","sources":["../../src/lib/transient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAI/C;;;;;;GAMG;AAEH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;sDAEsD;AACtD,wBAAsB,cAAc,CAClC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAG5D;AAED;iGACiG;AACjG,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,EAAE,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAe/C"}

package/dist/lib/transient.js

@@ -1,30 +1,11 @@
-import { readFileSync } from "node:fs";
-import { CotalEndpoint, isReachable, DEFAULT_SERVER, DEFAULT_SPACE, authDir, loadSpaceAuth, mintCreds, newIdentity, } from "@cotal-ai/core";
+import { CotalEndpoint } from "@cotal-ai/core";
 import { c } from "../ui.js";
-import { cotalRoot } from "./paths.js";
-/** Resolve where to connect and with what credentials: an explicit `--creds` wins; else self-mint
- *  from `.cotal/auth` so an AUTH-mode mesh admits us; else connect bare on an open mesh. Exits with
- *  a clear message on a `--space` that contradicts the local auth, or an unreachable server. */
+import { connectOrExit } from "./connect.js";
+/** Resolve where to connect + with what credentials (`--creds` → raw off-registry; else the running
+ *  mesh's minted manager creds). Fail-loud — an unresolved registry or an unreachable/auth-mismatched
+ *  broker exits with one sentence, never degrades. */
 export async function resolveConnect(values) {
-    const server = values.server ?? DEFAULT_SERVER;
-    let creds = values.creds ? readFileSync(values.creds, "utf8") : undefined;
-    let space = values.space;
-    if (!creds) {
-        const auth = loadSpaceAuth(authDir(cotalRoot()));
-        if (auth) {
-            if (space && space !== auth.space) {
-                console.error(c.red(`Auth here is for space "${auth.space}", not "${space}". Use --space ${auth.space} (or pass --creds).`));
-                process.exit(1);
-            }
-            space = auth.space;
-            creds = await mintCreds(auth, newIdentity(), "manager");
-        }
-    }
-    space = space ?? DEFAULT_SPACE;
-    if (!(await isReachable(server, { creds }))) {
-        console.error(c.red(`Can't reach NATS at ${server}. Run: cotal up`));
-        process.exit(1);
-    }
+    const { server, space, creds } = await connectOrExit(values, "manager");
     return { server, space, creds };
 }
 /** Open a transient endpoint: it watches presence (so name→id resolution and the live roster work)

package/dist/lib/transient.js.map

@@ -1 +1 @@
-{"version":3,"file":"transient.js","sourceRoot":"","sources":["../../src/lib/transient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EACL,aAAa,EACb,WAAW,EACX,cAAc,EACd,aAAa,EACb,OAAO,EACP,aAAa,EACb,SAAS,EACT,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAevC;;gGAEgG;AAChG,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,cAAc,CAAC;IAC/C,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IACzB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClC,OAAO,CAAC,KAAK,CACX,CAAC,CAAC,GAAG,CAAC,2BAA2B,IAAI,CAAC,KAAK,WAAW,KAAK,kBAAkB,IAAI,CAAC,KAAK,qBAAqB,CAAC,CAC9G,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACnB,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,KAAK,GAAG,KAAK,IAAI,aAAa,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,MAAM,iBAAiB,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED;iGACiG;AACjG,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,IAAY;IAEZ,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC;QAC3B,KAAK;QACL,OAAO,EAAE,MAAM;QACf,KAAK;QACL,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,KAAK;QACd,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;KACjC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACvB,CAAC"}
+{"version":3,"file":"transient.js","sourceRoot":"","sources":["../../src/lib/transient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAgB7C;;sDAEsD;AACtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAqB;IAErB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACxE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED;iGACiG;AACjG,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,IAAY;IAEZ,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC;QAC3B,KAAK;QACL,OAAO,EAAE,MAAM;QACf,KAAK;QACL,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,KAAK;QACd,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;KACjC,CAAC,CAAC;IACH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACvB,CAAC"}

package/dist/web/graph.html

@@ -0,0 +1,207 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Cotal · graph</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com" />
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+    <link
+      href="https://fonts.googleapis.com/css2?family=Work+Sans:wght@400;500;600;700&display=swap"
+      rel="stylesheet"
+    />
+    <style>
+      :root {
+        --bg: #131a26; --panel: #1b2330cc; --line: #38414f; --fg: #eef2f7;
+        --dim: #8b949e; --faint: #6e7681;
+        --chat: #58a6ff; --unicast: #d29922; --anycast: #3fb950;
+        --working: #3fb950; --waiting: #e3b341; --idle: #6e7681; --red: #f85149;
+        --font: "Work Sans", -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+      }
+      * { box-sizing: border-box; }
+      html, body { height: 100%; margin: 0; }
+      body {
+        font-family: var(--font); font-size: 13px; background: var(--bg); color: var(--fg);
+        overflow: hidden; -webkit-font-smoothing: antialiased;
+      }
+      #graph { position: fixed; inset: 0; display: block; cursor: grab; }
+      #graph.hover { cursor: pointer; }
+
+      /* floating glass surfaces */
+      .glass {
+        background: var(--panel); border: 1px solid var(--line); border-radius: 12px;
+        backdrop-filter: blur(14px); -webkit-backdrop-filter: blur(14px);
+      }
+
+      /* ── header (top, floating) ── */
+      header {
+        position: fixed; top: 14px; left: 14px; right: 14px; z-index: 10;
+        display: flex; align-items: center; gap: 16px; padding: 9px 14px;
+      }
+      .brand { display: flex; align-items: center; gap: 9px; }
+      .brand .mark { width: 9px; height: 9px; border-radius: 50%; background: var(--chat);
+        box-shadow: 0 0 10px var(--chat); }
+      .brand .title { font-size: 16px; font-weight: 700; }
+      .brand .space { font-size: 13px; color: var(--dim); }
+      .navlink {
+        font-size: 12px; font-weight: 600; color: var(--dim); text-decoration: none;
+        padding: 5px 11px; border-radius: 8px; border: 1px solid var(--line);
+      }
+      .navlink:hover { color: var(--fg); border-color: var(--chat); }
+      .pill { display: inline-flex; align-items: center; gap: 6px; padding: 4px 9px;
+        border-radius: 20px; background: #1f2d24; }
+      .pill .d { width: 7px; height: 7px; border-radius: 50%; background: var(--working); }
+      .pill .t { font-size: 11px; font-weight: 600; color: var(--working); }
+      .pill.down { background: #2a1717; } .pill.down .d { background: var(--red); }
+      .pill.down .t { color: var(--red); }
+      /* membership-freshness pill states */
+      .pill.stale { background: #2a2417; } .pill.stale .d { background: var(--waiting); }
+      .pill.stale .t { color: var(--waiting); }
+      .pill.off { background: #1f242c; } .pill.off .d { background: var(--faint); }
+      .pill.off .t { color: var(--dim); }
+
+      .ctrls { margin-left: auto; display: flex; align-items: center; gap: 7px; }
+      .grp { display: flex; align-items: center; gap: 4px; padding-right: 7px;
+        margin-right: 0; border-right: 1px solid var(--line); }
+      .grp:last-child { border-right: 0; padding-right: 0; }
+      .chip {
+        font-size: 11px; padding: 4px 9px; border-radius: 13px; cursor: pointer;
+        color: var(--faint); user-select: none; border: 1px solid transparent; white-space: nowrap;
+      }
+      .chip:hover { color: var(--fg); }
+      .chip.on { background: #ffffff10; border-color: var(--line); color: var(--fg); }
+      .chip.mode.chat.on { color: var(--chat); } .chip.mode.unicast.on { color: var(--unicast); }
+      .chip.mode.anycast.on { color: var(--anycast); }
+      .chip.pause.on { color: var(--waiting); border-color: var(--waiting); }
+      .chip.offline.on { color: var(--idle); border-color: var(--line); }
+
+      /* ── legend (bottom-left, collapsible) ── */
+      #legend { position: fixed; left: 14px; bottom: 14px; z-index: 10; padding: 0;
+        max-width: 200px; overflow: hidden; }
+      #legend .ltoggle {
+        display: flex; align-items: center; justify-content: space-between;
+        width: 100%; padding: 7px 12px; cursor: pointer; appearance: none;
+        font-size: 10px; font-weight: 600; letter-spacing: .6px; color: var(--faint);
+        text-transform: uppercase; background: transparent; border: 0;
+        text-align: left; font-family: inherit;
+      }
+      #legend .ltoggle:hover { color: var(--dim); }
+      #legend .ltoggle .chev { font-size: 9px; opacity: .5; transition: transform .2s ease; }
+      #legend.collapsed .ltoggle .chev { transform: rotate(-90deg); }
+      #legend .lbody { display: flex; flex-direction: column; gap: 5px; padding: 2px 12px 10px; }
+      #legend.collapsed .lbody { display: none; }
+      #legend .ls { font-size: 9px; font-weight: 600; letter-spacing: .5px; color: var(--faint);
+        text-transform: uppercase; opacity: .65; margin-top: 3px; }
+      #legend .ls:first-child { margin-top: 0; }
+      #legend .row { display: flex; align-items: center; gap: 9px; font-size: 11px; color: var(--dim); }
+      #legend .sw { width: 14px; height: 2px; border-radius: 1px; flex: none; }
+      #legend .sw-dot { width: 8px; height: 8px; border-radius: 50%; }
+      #legend .ring { width: 8px; height: 8px; border-radius: 50%; flex: none;
+        background: transparent; box-shadow: 0 0 0 1.5px currentColor inset; }
+
+      /* ── detail panel (right, floating) ── */
+      #detail {
+        position: fixed; top: 64px; right: 14px; bottom: 14px; width: 308px; z-index: 10;
+        padding: 16px 16px 18px; overflow-y: auto; display: none; flex-direction: column; gap: 14px;
+        scrollbar-width: thin; scrollbar-color: var(--line) transparent;
+      }
+      #detail::-webkit-scrollbar { width: 6px; }
+      #detail::-webkit-scrollbar-thumb { background: var(--line); border-radius: 3px; }
+      #detail.open { display: flex; }
+      #detail .x { position: absolute; top: 10px; right: 10px; cursor: pointer; color: var(--faint);
+        font-size: 13px; width: 22px; height: 22px; display: flex; align-items: center;
+        justify-content: center; border-radius: 5px; line-height: 1; }
+      #detail .x:hover { color: var(--fg); background: #ffffff12; }
+      .d-kind { font-size: 10px; font-weight: 600; letter-spacing: .6px; color: var(--faint);
+        text-transform: uppercase; }
+      .d-who { font-size: 16px; font-weight: 700; line-height: 1.25; padding-right: 26px; }
+      .d-who .role { font-size: 11px; font-weight: 500; color: var(--faint); margin-left: 6px; }
+      .d-status { display: inline-flex; align-items: center; gap: 6px; font-size: 11.5px;
+        font-weight: 500; padding: 3px 10px; border-radius: 20px; background: #ffffff08;
+        color: var(--dim); width: fit-content; }
+      .d-status .dot { width: 7px; height: 7px; border-radius: 50%; background: currentColor;
+        box-shadow: 0 0 6px currentColor; }
+      .d-status.working { background: #16231a; color: var(--working); }
+      .d-status.waiting { background: #2a2117; color: var(--waiting); }
+      .d-status.idle { color: var(--dim); }
+      .d-status.offline { color: var(--faint); }
+      .d-section { display: flex; flex-direction: column; gap: 5px; }
+      .d-label { font-size: 9.5px; font-weight: 600; letter-spacing: .5px; color: var(--faint);
+        text-transform: uppercase; }
+      .d-block { font-size: 12px; line-height: 1.55; padding: 9px 11px; border-radius: 7px;
+        background: #ffffff08; border: 1px solid var(--line); white-space: pre-wrap; word-break: break-word; }
+      .d-block.muted { color: var(--dim); font-style: italic; }
+      .d-rows { display: flex; flex-direction: column; gap: 5px; }
+      .d-row { display: flex; gap: 10px; font-size: 11.5px; line-height: 1.4; }
+      .d-row .k { color: var(--faint); min-width: 64px; flex: none; }
+      .d-row .v { color: var(--fg); word-break: break-word; }
+      .d-msgs { display: flex; flex-direction: column; gap: 5px; }
+      .d-msg { font-size: 11px; line-height: 1.45; padding: 7px 10px 8px; border-radius: 6px;
+        background: #ffffff06; border-left: 2px solid var(--line); }
+      .d-msg .mhead { display: flex; align-items: baseline; gap: 6px; margin-bottom: 3px; }
+      .d-msg .m { font-size: 9px; font-weight: 700; letter-spacing: .3px; text-transform: uppercase; }
+      .d-msg .who { color: var(--fg); font-weight: 600; }
+      .d-msg .tgt { color: var(--dim); }
+      .d-msg .body { color: var(--dim); word-break: break-word; }
+      .d-msg.empty { text-align: center; color: var(--faint); font-style: italic; border-left-color: transparent; }
+      /* member / subscription tag rows in the detail panel */
+      .d-tags { display: flex; flex-wrap: wrap; gap: 5px; }
+      .mtag { display: inline-flex; align-items: center; gap: 6px; font-size: 11px; color: var(--fg);
+        padding: 3px 8px; border-radius: 13px; background: #ffffff08; border: 1px solid var(--line); }
+      .mtag .dot { width: 7px; height: 7px; border-radius: 50%; flex: none; box-shadow: 0 0 5px currentColor; }
+      .mtag .act { font-size: 9px; font-weight: 700; letter-spacing: .3px; text-transform: uppercase; color: var(--chat); }
+      .mtag .off { font-size: 9px; font-weight: 600; letter-spacing: .3px; text-transform: uppercase; color: var(--faint); }
+      .ctag { font-size: 11px; color: var(--chat); padding: 3px 8px; border-radius: 13px;
+        background: #58a6ff14; border: 1px solid #58a6ff33; }
+      .ctag.off { color: var(--dim); background: #ffffff06; border-color: var(--line); }
+      .hint { position: fixed; bottom: 16px; left: 50%; transform: translateX(-50%); z-index: 9;
+        font-size: 11.5px; color: var(--faint); pointer-events: none; transition: opacity .4s; }
+    </style>
+  </head>
+  <body>
+    <canvas id="graph"></canvas>
+
+    <header class="glass">
+      <span class="brand">
+        <span class="mark"></span>
+        <span class="title">Cotal</span>
+        <span class="space" id="space"></span>
+      </span>
+      <a class="navlink" href="/">← Monitor</a>
+      <span class="pill down" id="conn"><span class="d"></span><span class="t">connecting</span></span>
+      <span class="pill off" id="feed" hidden><span class="d"></span><span class="t">membership</span></span>
+      <div class="ctrls">
+        <div class="grp" id="modes">
+          <span class="chip mode chat on" data-mode="chat">channel</span>
+          <span class="chip mode unicast on" data-mode="unicast">direct</span>
+          <span class="chip mode anycast on" data-mode="anycast">anycast</span>
+        </div>
+        <span class="chip offline on" id="hideOffline">hide offline</span>
+        <span class="chip offline on" id="hideEmpty">hide empty</span>
+        <span class="chip pause" id="pause">⏸ pause</span>
+      </div>
+    </header>
+
+    <div id="legend" class="glass">
+      <button class="ltoggle" id="legendToggle" type="button"><span>legend</span><span class="chev">▾</span></button>
+      <div class="lbody">
+        <span class="ls">traffic</span>
+        <span class="row"><span class="sw" style="background:var(--chat)"></span> channel post → hub</span>
+        <span class="row"><span class="sw" style="background:var(--unicast)"></span> direct message</span>
+        <span class="row"><span class="sw sw-dot" style="background:var(--anycast)"></span> anycast (to a role)</span>
+        <span class="ls">membership</span>
+        <span class="row"><span class="sw" style="background:#8493a8"></span> subscribed (live)</span>
+        <span class="row"><span class="sw" style="background:#5a6472;opacity:.7"></span> member · offline</span>
+        <span class="ls">agents</span>
+        <span class="row"><span class="ring" style="color:var(--working)"></span> working</span>
+        <span class="row"><span class="ring" style="color:var(--waiting)"></span> waiting · needs input</span>
+        <span class="row"><span class="ring" style="color:var(--idle)"></span> idle / offline</span>
+      </div>
+    </div>
+
+    <aside id="detail" class="glass"></aside>
+    <div class="hint" id="hint">click a node for detail · scroll to zoom · drag to pan</div>
+
+    <script src="/graph.js"></script>
+  </body>
+</html>