@cotal-ai/connector-core 0.53.0 → 0.55.0

package/dist/agent.d.ts

@@ -1,5 +1,5 @@
 import { EventEmitter } from "node:events";
-import { CotalEndpoint, type ControlReply, type Presence, type PresenceCondition, type PresenceStatus, type AttentionMode, type ChannelMode, type CotalMessage } from "@cotal-ai/core";
+import { CotalEndpoint, type ControlReply, type Presence, type PresenceCondition, type PresenceStatus, type PresenceView, type AttentionMode, type ChannelMode, type CotalMessage } from "@cotal-ai/core";
 import type { AgentConfig } from "./config.js";
 export type { AttentionMode, ChannelMode };
 /** Client-side floor for a spawn action's submit + follow. The manager acceptance carries the exact
@@ -191,6 +191,14 @@ export declare class MeshAgent extends EventEmitter {
     private focusExcludedIds;
     private focusRecallUnsafeChannels;
     private _stopping;
+    /** Presence writes go out IN CALL ORDER (#636, #2055). setStatus is two awaited puts and every
+     *  connector fires it without awaiting, so two overlapping calls interleave their puts and the
+     *  record that lands last is whichever call's second put finished last, not the call made last;
+     *  at a driven turn's end the measured order was working, idle, working, and the seat then read
+     *  working forever. Every write below runs its whole body through this chain, so the later
+     *  call's puts start only after the earlier call's have settled. A rejected write must not
+     *  poison the chain: the tail is swallowed and the next write still runs. */
+    private presenceChain;
     constructor(config: AgentConfig);
     get id(): string;
     get connected(): boolean;
@@ -212,6 +220,8 @@ export declare class MeshAgent extends EventEmitter {
         forMs: number;
         error?: string;
         bucket: string;
+        consecutiveFailures: number;
+        stuck: boolean;
     } | undefined;
     /** The latest successful, non-empty inbox drain in this session. */
     get lastInboxDrainedAt(): number | undefined;
@@ -494,7 +504,14 @@ export declare class MeshAgent extends EventEmitter {
      *  wrongly reject it), case-insensitively. Send is all-or-nothing: one unknown @name aborts
      *  the whole broadcast (fail-loud on typos). Caveat: only catches peers THIS client has seen
      *  — an offline peer lingers in the roster, but one never observed (or not yet filled in
-     *  after connect) throws. See docs/architecture.md. */
+     *  after connect) throws. See docs/architecture.md.
+     *
+     *  #1229: the roster can only support an ABSENCE verdict while `presenceView()` is `current`.
+     *  `clearConnectionScoped()` empties it on every reconnect and the watch refills entry by
+     *  entry, so a refusal under an unsafe view would reject a mention of a live peer. A name
+     * already in the roster is accepted in every state; an absent name under `unpopulated`
+     *  waits once for the initial snapshot and re-reads; a still-unverifiable name refuses with
+     *  the observer's own condition (never "no such peer") and the send does not go out. */
     private assertKnownMentions;
     anycast(role: string, text: string): Promise<CotalMessage>;
     /** Resolve a peer by instance id (exact) or display name. Deterministic and fail-loud: returns
@@ -525,10 +542,11 @@ export declare class MeshAgent extends EventEmitter {
         cwd?: string;
         prompt?: string;
         events?: boolean;
+        instance?: string;
     }): Promise<ControlReply>;
     /** The manager's recorded model pin for a managed seat (`inspect.model`). Absence is a real
      *  state: a launch may pin none. Distinct from a failed inspect, which cannot attest. */
-    inspectModel(name: string): Promise<{
+    inspectModel(name: string, instance?: string): Promise<{
         ok: true;
         model?: string;
     } | {
@@ -654,8 +672,23 @@ export declare class MeshAgent extends EventEmitter {
     showPersona(name: string): Promise<ControlReply>;
     /** The full roster, including ourselves. */
     roster(): Presence[];
+    /** Trust state of this observer's presence watch (`CotalEndpoint.presenceView()`): the roster
+     *  above can only support an absence verdict while this is `current` (#1229). */
+    presenceView(): PresenceView;
     /** Our last self-reported presence status. */
     get status(): PresenceStatus;
+    /** Run one presence write through the chain (#636): the write starts only after every earlier
+     *  admitted write has settled, and a rejection is swallowed at the TAIL only, so it propagates
+     *  to this write's own caller while the next admitted write still runs.
+     *
+     *  The straggler rule: departure is the last write, later writes are refused, not reordered.
+     *  Once `stop()` has begun, any write admitted here rejects AT ONCE (no put queued, no wait on
+     *  the chain) with a fixed error, instead of running after — or, for a write that calls
+     *  `requireConnected` (e.g. `setStatus`), sitting out the ten-second connect grace before
+     *  rejecting anyway. `stop()` itself submits departure's own put through this same method (the
+     *  `forDeparture` escape) so departure keeps landing after every write already admitted, even
+     *  though `_stopping` is already true by the time it does. */
+    private inOrder;
     setStatus(status: PresenceStatus, activity?: string): Promise<void>;
     /**
      * Publish presence for something that is NOT a turn ending.
@@ -706,7 +739,7 @@ export declare class MeshAgent extends EventEmitter {
         replay: boolean;
         joined: boolean;
         durableUnclosed: boolean;
-        deliveryHealth?: "active" | "degraded";
+        deliveryHealth?: "active" | "degraded" | "unknown";
         messages: number;
         mode: ChannelMode | "normal";
     }[]>;

package/dist/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAQL,aAAa,EAQb,KAAK,YAAY,EAIjB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAEnB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI/C,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AAE3C;;;6DAG6D;AAC7D,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC;;;;;;8EAM8E;AAC9E,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC;;8BAE8B;AAC9B,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAItD;AAgCD,2EAA2E;AAC3E,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX;;;;;;6EAMyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,kGAAkG;IAClG,UAAU,EAAE,OAAO,CAAC;IACpB,+FAA+F;IAC/F,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAaD,0GAA0G;AAC1G,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,0GAA0G;AAC1G,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CASrE;AAmCD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,WAAW,GAAG,WAAW,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAiBD;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,cAAc,GAAG,SAAS,CAAC;AAE3G;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,SAAU,CAAC;AAmChD,qBAAa,SAAU,SAAQ,YAAY;IACzC,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAE7B,OAAO,CAAC,KAAK,CAAiB;IAC9B;;;;;;oGAMgG;IAChG,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,cAAc,CAAqB;IAC3C;;8DAE0D;IAC1D,OAAO,CAAC,sBAAsB,CAA6D;IAC3F;wGACoG;IACpG,OAAO,CAAC,iBAAiB,CAA6B;IACtD;oDACgD;IAChD,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,oBAAoB,CAAS;IACrC;;6EAEyE;IACzE,OAAO,CAAC,oBAAoB,CAAqB;IACjD,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,UAAU,CAAS;IAC3B,+FAA+F;IAC/F,OAAO,CAAC,mBAAmB,CAAS;IACpC;;0CAEsC;IACtC,OAAO,CAAC,mBAAmB,CAAC,CAAS;IACrC;;;;;;uFAMmF;IACnF,OAAO,CAAC,uBAAuB,CAAC,CAAS;IACzC;;;;;;sFAMkF;IAClF,OAAO,CAAC,2BAA2B,CAAC,CAAS;IAC7C;sEACkE;IAClE,OAAO,CAAC,mBAAmB,CAAC,CAAS;IACrC,OAAO,CAAC,iBAAiB,CAAmE;IAC5F,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,aAAa,CAAiC;IACtD;;kEAE8D;IAC9D,OAAO,CAAC,cAAc,CAAqB;IAC3C;;;8EAG0E;IAC1E,OAAO,CAAC,YAAY,CAAkC;IACtD;;;;mFAI+E;IAC/E,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,aAAa,CAAC,CAAiC;IACvD,wFAAwF;IACxF,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,UAAU,CAAqB;IACvC;qFACiF;IACjF,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAS;IAC9B;;;;;mGAK+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAChE,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,gBAAgB,CAA6B;IACrD,OAAO,CAAC,yBAAyB,CAAqB;IACtD,OAAO,CAAC,SAAS,CAAS;gBAEd,MAAM,EAAE,WAAW;IAwE/B,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,qGAAqG;IACrG,IAAI,kBAAkB,IAAI,OAAO,CAEhC;IAED,yGAAyG;IACzG,IAAI,eAAe,IAAI,MAAM,GAAG,SAAS,CAExC;IAED;;;;;;;;kGAQ8F;IAC9F,IAAI,oBAAoB,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAEvG;IAED,oEAAoE;IACpE,IAAI,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAE3C;IAED,2FAA2F;IAC3F,IAAI,sBAAsB,IAAI,MAAM,GAAG,SAAS,CAE/C;IAED;;;oEAGgE;IAChE,IAAI,0BAA0B,IAAI,MAAM,GAAG,SAAS,CAEnD;IAED;2CACuC;IACvC,OAAO,CAAC,kBAAkB;IAS1B;6FACyF;IACzF,OAAO,CAAC,yBAAyB;IAMjC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,0BAA0B,CAAC,GAAG,SAAa,GAAG,MAAM,GAAG,SAAS;IAQhE;;yGAEqG;IACrG,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;;;;;;;;;;4CAWwC;IACxC,IAAI,eAAe,IAAI,eAAe,CAQrC;IAED;;oFAEgF;IAC1E,kBAAkB,CAAC,SAAS,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B3D,+EAA+E;IAC/E,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAKjD,4FAA4F;IAC5F,KAAK,CAAC,OAAO,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YAItB,WAAW;IAyCnB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB3B;;;;iGAI6F;IACvF,SAAS,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA+B5D,OAAO,CAAC,MAAM;IA+Fd,OAAO,CAAC,MAAM;IA8Ed,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,kBAAkB;IAa1B;;;;gDAI4C;IAC5C,OAAO,CAAC,WAAW;IAwBnB;sDACkD;IAClD,SAAS,CAAC,KAAK,GAAE,UAAkB,GAAG,SAAS,EAAE;IAIjD;;;;;;;;;;;;;kEAa8D;IAC9D,YAAY,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO;IAa7C;;;sGAGkG;IAClG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI/B;mGAC+F;IAC/F,eAAe,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAS7C,8FAA8F;IAC9F,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,GAAE,UAAkB,GAAG,SAAS,EAAE;IAsBlE;;;;;;iDAM6C;IAC7C,oBAAoB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB;IAiC/D,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,OAAO;IAIf;;gGAE4F;IAC5F,OAAO,CAAC,WAAW;IAUnB,UAAU,CAAC,KAAK,GAAE,UAAkB,GAAG,MAAM;IAI7C,kFAAkF;IAClF,yBAAyB,IAAI,MAAM,GAAG,SAAS;IAS/C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,YAAY,IAAI,UAAU,CAE7B;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAIpC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,WAAW,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO;IAI1C,oFAAoF;IACpF,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIpC;;;;;;;;OAQG;IACH,eAAe,IAAI,MAAM;IAIzB,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAInC;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;IAKvB;gCAC4B;IAC5B,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,SAAS;IAK/D;;;0EAGsE;IACtE,oBAAoB,IAAI,MAAM;IAI9B;;;;;;0GAMsG;IACtG,WAAW,IAAI,MAAM;IAYrB;;;wFAGoF;IACpF,WAAW,IAAI,IAAI;IAMnB;qFACiF;IACjF,IAAI,SAAS,IAAI,aAAa,CAE7B;IAED,4FAA4F;IAC5F,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAItD,4EAA4E;IAC5E,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;IAIjD;;;;;;;;iDAQ6C;IACvC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlF;;;;;;kCAM8B;IACxB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BtD;;;;;;;;;iBASa;IACP,aAAa,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAAC,eAAe,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IA0B3E,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAOtF;;;;;OAKG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAe3D;;;;;2DAKuD;IACvD,OAAO,CAAC,mBAAmB;IASrB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAKhE;;wEAEoE;IACpE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAI3C,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,YAAY,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC;IAUtF;;;;;;;;;;;kFAW8E;IACxE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAiDtN;6FACyF;IACnF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAStG;;;;;;sEAMkE;YACpD,aAAa;IAyC3B;;;;;kGAK8F;YAChF,gBAAgB;IAS9B;;;;;;;4FAOwF;IAClF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAYlF;;;;4CAIwC;IAClC,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAUtH,OAAO,CAAC,cAAc;IAStB;;;;sGAIkG;YACpF,SAAS;IAsBvB;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;IASvB;;;;;mGAK+F;IAC/F,gBAAgB,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,SAAS;IAqBnE;;uFAEmF;IACnF,mBAAmB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAOrD;;;oFAGgF;IAC1E,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,EAAE,IAAI,GAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAgBxI;uGACmG;IAC7F,YAAY,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAM1E;;;;;;;;;;;;;;;;;;;+FAmB2F;IACrF,aAAa,CAAC,GAAG,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,YAAY,GAAG;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;KAAE,CAAC;IAwE9F;6CACyC;IACnC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC;IAK3C,8FAA8F;IACxF,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAOtD,4CAA4C;IAC5C,MAAM,IAAI,QAAQ,EAAE;IAIpB,8CAA8C;IAC9C,IAAI,MAAM,IAAI,cAAc,CAE3B;IAEK,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBzE;;;;;;;;;OASG;IACG,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAS7D,aAAa;IAK3B,qEAAqE;IAC/D,YAAY,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE;;;4FAGwF;IACxF,OAAO,CAAC,cAAc;IAUtB;;;8EAG0E;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D;;;;qFAIiF;IACjF,eAAe,IAAI,MAAM,GAAG,SAAS;IAUrC;oFACgF;IAChF,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE;IAUnH,2EAA2E;IAC3E,cAAc,IAAI,MAAM,EAAE;IAI1B;;iEAE6D;IACvD,YAAY,IAAI,OAAO,CAC3B;QACE,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;QAChB,eAAe,EAAE,OAAO,CAAC;QACzB,cAAc,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;QACvC,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAC;KAC9B,EAAE,CACJ;IA6DD;;;;;2BAKuB;IACjB,WAAW,CACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAKtF,mEAAmE;IAC7D,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAO/D,OAAO,CAAC,GAAG;IAIX;;wEAEoE;YACtD,gBAAgB;IAI9B;;;;+EAI2E;IACrE,aAAa,CAAC,SAAS,GAAE,MAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxE;;;6DAGyD;IACzD,OAAO,CAAC,eAAe;IAmBvB;;qEAEiE;IACjE,OAAO,CAAC,mBAAmB;IAO3B;;uFAEmF;IACnF,OAAO,CAAC,mBAAmB;IAQ3B,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,GAAG;CAGZ;AAED,kGAAkG;AAClG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAOrF"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAQL,aAAa,EASb,KAAK,YAAY,EAIjB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,YAAY,EAEjB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,YAAY,EAElB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK/C,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AAE3C;;;6DAG6D;AAC7D,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC;;;;;;8EAM8E;AAC9E,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC;;8BAE8B;AAC9B,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAItD;AAgCD,2EAA2E;AAC3E,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX;;;;;;6EAMyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC;IACnC,mCAAmC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,kGAAkG;IAClG,UAAU,EAAE,OAAO,CAAC;IACpB,+FAA+F;IAC/F,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAaD,0GAA0G;AAC1G,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,0GAA0G;AAC1G,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CASrE;AAmCD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,WAAW,GAAG,WAAW,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAiBD;;;;;;;;;;;;;;;GAeG;AACH;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,cAAc,GAAG,SAAS,CAAC;AAE3G;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,SAAU,CAAC;AAmChD,qBAAa,SAAU,SAAQ,YAAY;IACzC,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAE7B,OAAO,CAAC,KAAK,CAAiB;IAC9B;;;;;;oGAMgG;IAChG,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,cAAc,CAAqB;IAC3C;;8DAE0D;IAC1D,OAAO,CAAC,sBAAsB,CAA6D;IAC3F;wGACoG;IACpG,OAAO,CAAC,iBAAiB,CAA6B;IACtD;oDACgD;IAChD,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,oBAAoB,CAAS;IACrC;;6EAEyE;IACzE,OAAO,CAAC,oBAAoB,CAAqB;IACjD,OAAO,CAAC,gBAAgB,CAAqB;IAC7C,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,UAAU,CAAS;IAC3B,+FAA+F;IAC/F,OAAO,CAAC,mBAAmB,CAAS;IACpC;;0CAEsC;IACtC,OAAO,CAAC,mBAAmB,CAAC,CAAS;IACrC;;;;;;uFAMmF;IACnF,OAAO,CAAC,uBAAuB,CAAC,CAAS;IACzC;;;;;;sFAMkF;IAClF,OAAO,CAAC,2BAA2B,CAAC,CAAS;IAC7C;sEACkE;IAClE,OAAO,CAAC,mBAAmB,CAAC,CAAS;IACrC,OAAO,CAAC,iBAAiB,CAAmE;IAC5F,OAAO,CAAC,OAAO,CAA0B;IACzC,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,aAAa,CAAiC;IACtD;;kEAE8D;IAC9D,OAAO,CAAC,cAAc,CAAqB;IAC3C;;;8EAG0E;IAC1E,OAAO,CAAC,YAAY,CAAkC;IACtD;;;;mFAI+E;IAC/E,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,aAAa,CAAC,CAAiC;IACvD,wFAAwF;IACxF,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,UAAU,CAAqB;IACvC;qFACiF;IACjF,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,aAAa,CAAS;IAC9B;;;;;mGAK+F;IAC/F,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAkC;IAChE,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,gBAAgB,CAA6B;IACrD,OAAO,CAAC,yBAAyB,CAAqB;IACtD,OAAO,CAAC,SAAS,CAAS;IAC1B;;;;;;iFAM6E;IAC7E,OAAO,CAAC,aAAa,CAAoC;gBAE7C,MAAM,EAAE,WAAW;IAwE/B,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,qGAAqG;IACrG,IAAI,kBAAkB,IAAI,OAAO,CAEhC;IAED,yGAAyG;IACzG,IAAI,eAAe,IAAI,MAAM,GAAG,SAAS,CAExC;IAED;;;;;;;;kGAQ8F;IAC9F,IAAI,oBAAoB,IAAI;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,mBAAmB,EAAE,MAAM,CAAC;QAC5B,KAAK,EAAE,OAAO,CAAC;KAChB,GAAG,SAAS,CAEZ;IAED,oEAAoE;IACpE,IAAI,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAE3C;IAED,2FAA2F;IAC3F,IAAI,sBAAsB,IAAI,MAAM,GAAG,SAAS,CAE/C;IAED;;;oEAGgE;IAChE,IAAI,0BAA0B,IAAI,MAAM,GAAG,SAAS,CAEnD;IAED;2CACuC;IACvC,OAAO,CAAC,kBAAkB;IAS1B;6FACyF;IACzF,OAAO,CAAC,yBAAyB;IAMjC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,0BAA0B,CAAC,GAAG,SAAa,GAAG,MAAM,GAAG,SAAS;IAQhE;;yGAEqG;IACrG,IAAI,QAAQ,IAAI,OAAO,CAEtB;IAED;;;;;;;;;;;4CAWwC;IACxC,IAAI,eAAe,IAAI,eAAe,CAQrC;IAED;;oFAEgF;IAC1E,kBAAkB,CAAC,SAAS,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IA0B3D,+EAA+E;IAC/E,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAKjD,4FAA4F;IAC5F,KAAK,CAAC,OAAO,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YAItB,WAAW;IAyCnB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B3B;;;;iGAI6F;IACvF,SAAS,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IA+B5D,OAAO,CAAC,MAAM;IA+Fd,OAAO,CAAC,MAAM;IA8Ed,OAAO,CAAC,eAAe;IAYvB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,kBAAkB;IAa1B;;;;gDAI4C;IAC5C,OAAO,CAAC,WAAW;IAwBnB;sDACkD;IAClD,SAAS,CAAC,KAAK,GAAE,UAAkB,GAAG,SAAS,EAAE;IAIjD;;;;;;;;;;;;;kEAa8D;IAC9D,YAAY,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO;IAa7C;;;sGAGkG;IAClG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI/B;mGAC+F;IAC/F,eAAe,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAS7C,8FAA8F;IAC9F,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,GAAE,UAAkB,GAAG,SAAS,EAAE;IAsBlE;;;;;;iDAM6C;IAC7C,oBAAoB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,gBAAgB;IAiC/D,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,OAAO;IAIf;;gGAE4F;IAC5F,OAAO,CAAC,WAAW;IAUnB,UAAU,CAAC,KAAK,GAAE,UAAkB,GAAG,MAAM;IAI7C,kFAAkF;IAClF,yBAAyB,IAAI,MAAM,GAAG,SAAS;IAS/C;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,YAAY,IAAI,UAAU,CAE7B;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAIpC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,WAAW,CAAC,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO;IAI1C,oFAAoF;IACpF,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIpC;;;;;;;;OAQG;IACH,eAAe,IAAI,MAAM;IAIzB,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAInC;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;IAKvB;gCAC4B;IAC5B,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,SAAS;IAK/D;;;0EAGsE;IACtE,oBAAoB,IAAI,MAAM;IAI9B;;;;;;0GAMsG;IACtG,WAAW,IAAI,MAAM;IAYrB;;;wFAGoF;IACpF,WAAW,IAAI,IAAI;IAMnB;qFACiF;IACjF,IAAI,SAAS,IAAI,aAAa,CAE7B;IAED,4FAA4F;IAC5F,WAAW,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAItD,4EAA4E;IAC5E,kBAAkB,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;IAIjD;;;;;;;;iDAQ6C;IACvC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAYlF;;;;;;kCAM8B;IACxB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BtD;;;;;;;;;iBASa;IACP,aAAa,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAAC,eAAe,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IA0B3E,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAOtF;;;;;OAKG;IACG,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAe3D;;;;;;;;;;;;4FAYwF;YAC1E,mBAAmB;IAuB3B,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAKhE;;wEAEoE;IACpE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAI3C,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,YAAY,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC;IA8BtF;;;;;;;;;;;kFAW8E;IACxE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAyDzO;6FACyF;IACnF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IASzH;;;;;;sEAMkE;YACpD,aAAa;IA+E3B;;;;;kGAK8F;YAChF,gBAAgB;IAS9B;;;;;;;4FAOwF;IAClF,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAYlF;;;;4CAIwC;IAClC,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IAUtH,OAAO,CAAC,cAAc;IAStB;;;;sGAIkG;YACpF,SAAS;IAsBvB;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;IASvB;;;;;mGAK+F;IAC/F,gBAAgB,IAAI;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,SAAS;IAqBnE;;uFAEmF;IACnF,mBAAmB,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAOrD;;;oFAGgF;IAC1E,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,EAAE,IAAI,GAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAgBxI;uGACmG;IAC7F,YAAY,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAM1E;;;;;;;;;;;;;;;;;;;+FAmB2F;IACrF,aAAa,CAAC,GAAG,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,YAAY,GAAG;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;KAAE,CAAC;IAwE9F;6CACyC;IACnC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC;IAK3C,8FAA8F;IACxF,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAOtD,4CAA4C;IAC5C,MAAM,IAAI,QAAQ,EAAE;IAIpB;qFACiF;IACjF,YAAY,IAAI,YAAY;IAI5B,8CAA8C;IAC9C,IAAI,MAAM,IAAI,cAAc,CAE3B;IAED;;;;;;;;;;kEAU8D;IAC9D,OAAO,CAAC,OAAO;IAOT,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBzE;;;;;;;;;OASG;IACG,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAW7D,aAAa;IAK3B,qEAAqE;IAC/D,YAAY,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE;;;4FAGwF;IACxF,OAAO,CAAC,cAAc;IAUtB;;;8EAG0E;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D;;;;qFAIiF;IACjF,eAAe,IAAI,MAAM,GAAG,SAAS;IAUrC;oFACgF;IAChF,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE;IAUnH,2EAA2E;IAC3E,cAAc,IAAI,MAAM,EAAE;IAI1B;;iEAE6D;IACvD,YAAY,IAAI,OAAO,CAC3B;QACE,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;QAChB,eAAe,EAAE,OAAO,CAAC;QACzB,cAAc,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;QACnD,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAC;KAC9B,EAAE,CACJ;IAuFD;;;;;2BAKuB;IACjB,WAAW,CACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAKtF,mEAAmE;IAC7D,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAO/D,OAAO,CAAC,GAAG;IAIX;;wEAEoE;YACtD,gBAAgB;IAI9B;;;;+EAI2E;IACrE,aAAa,CAAC,SAAS,GAAE,MAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxE;;;6DAGyD;IACzD,OAAO,CAAC,eAAe;IAmBvB;;qEAEiE;IACjE,OAAO,CAAC,mBAAmB;IAO3B;;uFAEmF;IACnF,OAAO,CAAC,mBAAmB;IAQ3B,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,GAAG;CAGZ;AAED,kGAAkG;AAClG,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAOrF"}

package/dist/agent.js

@@ -1,7 +1,8 @@
 import { execFile } from "node:child_process";
 import { EventEmitter } from "node:events";
 import { hostname } from "node:os";
-import { normalizeMentions, RUN_LAUNCH_DEADLINE_MS, subjectMatches, isConcreteChannel, assertValidChannel, channelInAllow, resolvePeer as resolvePeerInRoster, CotalEndpoint, BASELINE_LIFECYCLE_ENDPOINT, EpEnvelopeError, isPublishPermissionDenied, unansweredRequest, renderLifecycleBlocked, partsToText, } from "@cotal-ai/core";
+import { normalizeMentions, RUN_LAUNCH_DEADLINE_MS, subjectMatches, isConcreteChannel, assertValidChannel, channelInAllow, resolvePeer as resolvePeerInRoster, CotalEndpoint, BASELINE_LIFECYCLE_ENDPOINT, assertLifecycleToken, EpEnvelopeError, isPublishPermissionDenied, unansweredRequest, renderLifecycleBlocked, partsToText, } from "@cotal-ai/core";
+import { invokeUserManager } from "./manager-call.js";
 /** Client-side floor for a spawn action's submit + follow. The manager acceptance carries the exact
  *  connector-selected readiness budget, and core extends the follow through that budget plus
  *  delivery margin. This floor still outlives the manager's generic 30s default and protects
@@ -44,9 +45,9 @@ function buildMeta(config) {
 /** Exec the spawner-provided bearer argv and return the one line it prints. The command owns
  *  discovery, the exchange protocol, and the secret file — a failure here is ITS operator-exact
  *  stderr sentence, surfaced verbatim (the endpoint emits it as a loud "error" and retries). */
-function execBearerCmd(argv) {
+function execBearerCmd(argv, signal, timeout = 30_000) {
     return new Promise((resolve, reject) => {
-        execFile(argv[0], argv.slice(1), { timeout: 30_000, maxBuffer: 64 * 1024 }, (err, stdout, stderr) => {
+        execFile(argv[0], argv.slice(1), { timeout, signal, maxBuffer: 64 * 1024 }, (err, stdout, stderr) => {
             if (err)
                 return reject(new Error(stderr.trim() || err.message));
             const bearer = stdout.trim();
@@ -239,6 +240,14 @@ export class MeshAgent extends EventEmitter {
     focusExcludedIds = new Map();
     focusRecallUnsafeChannels = new Set();
     _stopping = false;
+    /** Presence writes go out IN CALL ORDER (#636, #2055). setStatus is two awaited puts and every
+     *  connector fires it without awaiting, so two overlapping calls interleave their puts and the
+     *  record that lands last is whichever call's second put finished last, not the call made last;
+     *  at a driven turn's end the measured order was working, idle, working, and the seat then read
+     *  working forever. Every write below runs its whole body through this chain, so the later
+     *  call's puts start only after the earlier call's have settled. A rejected write must not
+     *  poison the chain: the tail is swallowed and the next write still runs. */
+    presenceChain = Promise.resolve();
     constructor(config) {
         super();
         this.config = config;
@@ -534,6 +543,14 @@ export class MeshAgent extends EventEmitter {
         // Unconditional: a background self-heal can flip _connected without us, so a `_connected`
         // guard could skip the stop and leak the live connection/heartbeat/supervisor. ep.stop() is
         // idempotent (early-returns once stopped), so calling it when already-down is a noop.
+        // #636: departure is the last write. Running it THROUGH the chain (as its own inOrder entry,
+        // not merely awaited alongside it) orders offline behind every write already admitted,
+        // whichever method admitted it — setStatus's requireConnected included. The race is bounded so
+        // a wedged write cannot hang shutdown; on the timeout path the chain is abandoned but the
+        // endpoint must still stop, so ep.stop() runs directly once there. Every write admitted AFTER
+        // this point is refused at once by inOrder() (see there) rather than queued behind departure,
+        // so a straggler cannot land after offline and does not sit out setStatus's connect grace.
+        await Promise.race([this.inOrder(() => this.ep.stop(), true), sleep(3_000)]);
         await this.ep.stop();
     }
     /** Manual reconnect: tear down the mesh connection and rebuild it in-process, WITHOUT
@@ -1144,11 +1161,13 @@ export class MeshAgent extends EventEmitter {
             throw new Error(`"${channel}" must be a concrete channel (no wildcard) to set its attention`);
         if (!channelInAllow(this.config.allowSubscribe, channel))
             throw new Error(`"${channel}" is not within your read ACL (allowSubscribe) [${this.config.allowSubscribe.join(", ")}]`);
-        if (mode === "normal")
-            this.channelModes.delete(channel);
-        else
-            this.channelModes.set(channel, mode);
-        await this.ep.setChannelModes(this.channelModeEntries());
+        await this.inOrder(() => {
+            if (mode === "normal")
+                this.channelModes.delete(channel);
+            else
+                this.channelModes.set(channel, mode);
+            return this.ep.setChannelModes(this.channelModeEntries());
+        });
     }
     /** Set the attention mode. Entering `focus` captures the chat frontier as the focus-watermark
      *  (recall surfaces ambient published after it); leaving focus clears it. Requires a live
@@ -1158,34 +1177,36 @@ export class MeshAgent extends EventEmitter {
       *  it landed just before or after the captured frontier. Only ambient arriving after the local
       *  switch is ack-dropped. */
     async setAttention(mode) {
-        if (mode === "focus") {
-            await this.requireConnected();
-            this.focusExcludedIds.clear();
-            this.focusRecallUnsafeChannels.clear();
-            this.enteringFocus = this._attention !== "focus";
-            try {
-                this.focusSince = await this.ep.chatFrontier();
+        await this.inOrder(async () => {
+            if (mode === "focus") {
+                await this.requireConnected();
+                this.focusExcludedIds.clear();
+                this.focusRecallUnsafeChannels.clear();
+                this.enteringFocus = this._attention !== "focus";
+                try {
+                    this.focusSince = await this.ep.chatFrontier();
+                }
+                catch (error) {
+                    this.enteringFocus = false;
+                    this.focusExcludedIds.clear();
+                    this.focusRecallUnsafeChannels.clear();
+                    throw error;
+                }
+                this.enteringFocus = false;
+                this.resetRecallWalk();
             }
-            catch (error) {
+            else {
                 this.enteringFocus = false;
+                this.focusSince = undefined;
                 this.focusExcludedIds.clear();
                 this.focusRecallUnsafeChannels.clear();
-                throw error;
+                this.resetRecallWalk();
             }
-            this.enteringFocus = false;
-            this.resetRecallWalk();
-        }
-        else {
-            this.enteringFocus = false;
-            this.focusSince = undefined;
-            this.focusExcludedIds.clear();
-            this.focusRecallUnsafeChannels.clear();
-            this.resetRecallWalk();
-        }
-        this._attention = mode;
-        // Mirror to presence (advisory observability — peers can see "they're in focus"). Best-effort:
-        // a no-op until the KV is bound, and never read back into delivery.
-        await this.ep.setAttention(mode);
+            this._attention = mode;
+            // Mirror to presence (advisory observability — peers can see "they're in focus"). Best-effort:
+            // a no-op until the KV is bound, and never read back into delivery.
+            await this.ep.setAttention(mode);
+        });
     }
     /** Focus recall: the channel ambient + @mentions ack-dropped since this agent entered focus,
      *  read back from the chat stream on demand and **replay-gated per channel** (a `replay=off`
@@ -1227,7 +1248,7 @@ export class MeshAgent extends EventEmitter {
         await this.requireConnected();
         const clean = normalizeMentions(mentions);
         if (clean)
-            this.assertKnownMentions(clean);
+            await this.assertKnownMentions(clean);
         return this.ep.multicast(text, { channel, mentions: clean, contextId: this._contextId });
     }
     /**
@@ -1259,12 +1280,32 @@ export class MeshAgent extends EventEmitter {
      *  wrongly reject it), case-insensitively. Send is all-or-nothing: one unknown @name aborts
      *  the whole broadcast (fail-loud on typos). Caveat: only catches peers THIS client has seen
      *  — an offline peer lingers in the roster, but one never observed (or not yet filled in
-     *  after connect) throws. See docs/architecture.md. */
-    assertKnownMentions(mentions) {
-        const names = new Set(this.ep.getRoster().map((p) => p.card.name.toLowerCase()));
-        const unknown = mentions.filter((m) => !names.has(m));
-        if (unknown.length)
+     *  after connect) throws. See docs/architecture.md.
+     *
+     *  #1229: the roster can only support an ABSENCE verdict while `presenceView()` is `current`.
+     *  `clearConnectionScoped()` empties it on every reconnect and the watch refills entry by
+     *  entry, so a refusal under an unsafe view would reject a mention of a live peer. A name
+     * already in the roster is accepted in every state; an absent name under `unpopulated`
+     *  waits once for the initial snapshot and re-reads; a still-unverifiable name refuses with
+     *  the observer's own condition (never "no such peer") and the send does not go out. */
+    async assertKnownMentions(mentions) {
+        const names = () => new Set(this.ep.getRoster().map((p) => p.card.name.toLowerCase()));
+        const view = this.ep.presenceView();
+        if (view.state === "unpopulated") {
+            const unknown = mentions.filter((m) => !names().has(m));
+            if (unknown.length)
+                await this.ep.waitForPresenceSnapshot();
+        }
+        const after = this.ep.presenceView();
+        const unknown = mentions.filter((m) => !names().has(m));
+        if (!unknown.length)
+            return;
+        if (after.state === "current")
             throw new Error(`unknown mention${unknown.length > 1 ? "s" : ""}: ${unknown.map((u) => `@${u}`).join(", ")} — no such peer observed in space "${this.config.space}"`);
+        const condition = after.state === "stale"
+            ? `the presence view is stale since ${new Date(after.staleSince).toISOString()} (${Math.max(0, Date.now() - after.staleSince)}ms silent)`
+            : "the presence view is unpopulated — the watch has not completed its initial snapshot";
+        throw new Error(`cannot verify mention${unknown.length > 1 ? "s" : ""} ${unknown.map((u) => `@${u}`).join(", ")} in space "${this.config.space}": ${condition}, so absence is not a verdict — the peer may be present but unobserved. The send was not published.`);
     }
     async anycast(role, text) {
         await this.requireConnected();
@@ -1278,9 +1319,25 @@ export class MeshAgent extends EventEmitter {
     }
     async dm(target, text) {
         await this.requireConnected();
-        const peer = this.resolvePeer(target);
-        if (!peer)
-            throw new Error(`no peer "${target}" in space "${this.config.space}"`);
+        // #1229: a miss is only a real "no peer" while the view is current. Under `unpopulated`
+        // the roster may be a reconnect refill in progress, so wait once for the snapshot and
+        // re-resolve; a still-unverifiable target refuses naming the observer's condition (never
+        // "no peer"), and the DM does not go out.
+        const view = this.ep.presenceView();
+        let peer = this.resolvePeer(target);
+        if (!peer && view.state === "unpopulated") {
+            await this.ep.waitForPresenceSnapshot();
+            peer = this.resolvePeer(target);
+        }
+        if (!peer) {
+            const after = this.ep.presenceView();
+            if (after.state === "current")
+                throw new Error(`no peer "${target}" in space "${this.config.space}"`);
+            const condition = after.state === "stale"
+                ? `the presence view is stale since ${new Date(after.staleSince).toISOString()} (${Math.max(0, Date.now() - after.staleSince)}ms silent)`
+                : "the presence view is unpopulated — the watch has not completed its initial snapshot";
+            throw new Error(`cannot verify peer "${target}" in space "${this.config.space}": ${condition}, so absence is not a verdict — the peer may be present but unobserved. The DM was not sent.`);
+        }
         const msg = await this.ep.unicast(peer.card.id, text, { contextId: this._contextId });
         return { msg, peer };
     }
@@ -1303,10 +1360,19 @@ export class MeshAgent extends EventEmitter {
         if (raw !== undefined && !raw.trim())
             return { ok: false, error: "model: must not be empty" };
         const requested = raw?.trim();
+        let instance;
+        try {
+            instance = opts?.instance === undefined ? undefined : assertLifecycleToken(opts.instance, "instance");
+        }
+        catch (e) {
+            return { ok: false, error: e.message };
+        }
+        if (this.config.userAuth && instance !== undefined && this.config.managerInstanceId !== undefined && instance !== this.config.managerInstanceId)
+            return { ok: false, error: "the requested manager instance differs from this credential's instance authority" };
         const args = { name, role, agent: opts?.agent, model: requested || undefined, variant: opts?.variant, launchOptions: opts?.launchOptions, cwd: opts?.cwd, prompt: opts?.prompt, events: opts?.events };
         // P2 item 2 (2b): spawn is an ACTION — follow the acceptance to the terminal so cotal_spawn
         // stays synchronous (the MCP reply carries the live outcome, not the pre-launch acceptance).
-        const reply = await this.managerInvoke("spawn", args, { deadlineMs: SPAWN_TIMEOUT_MS, follow: true });
+        const reply = await this.managerInvoke("spawn", args, { deadlineMs: SPAWN_TIMEOUT_MS, follow: true, ...(instance !== undefined ? { instanceId: instance } : {}) });
         if (!requested)
             return reply;
         // A requested pin that the manager did not record is the silent-drop failure (#972): the spawn
@@ -1315,7 +1381,7 @@ export class MeshAgent extends EventEmitter {
         // A wait-timeout is still a timeout, not evidence the pin landed — annotate it, never upgrade it.
         const actual = reply.data;
         const seat = actual?.name ?? name;
-        const recorded = await this.inspectModel(seat);
+        const recorded = await this.inspectModel(seat, instance);
         const recordedLabel = !recorded.ok
             ? `could not inspect the recorded pin: ${recorded.error}`
             : recorded.model === undefined
@@ -1346,8 +1412,8 @@ export class MeshAgent extends EventEmitter {
     }
     /** The manager's recorded model pin for a managed seat (`inspect.model`). Absence is a real
      *  state: a launch may pin none. Distinct from a failed inspect, which cannot attest. */
-    async inspectModel(name) {
-        const info = await this.managerInvoke("inspect", { name });
+    async inspectModel(name, instance) {
+        const info = await this.managerInvoke("inspect", { name }, instance === undefined ? undefined : { instanceId: instance });
         if (!info.ok)
             return { ok: false, error: info.error ?? "inspect refused" };
         const model = info.data?.model;
@@ -1368,7 +1434,48 @@ export class MeshAgent extends EventEmitter {
         const clean = args === undefined ? undefined : Object.fromEntries(Object.entries(args).filter(([, v]) => v !== undefined));
         let r;
         try {
-            r = await this.ep.invokeService(BASELINE_LIFECYCLE_ENDPOINT, command, clean && Object.keys(clean).length ? clean : undefined, opts);
+            const input = clean && Object.keys(clean).length ? clean : undefined;
+            if (this.config.userAuth) {
+                const managerInstanceId = opts.instanceId ?? this.config.managerInstanceId;
+                const { instanceId: _instanceId, ...invokeOpts } = opts;
+                const submit = async (signal) => {
+                    const bearer = await execBearerCmd([
+                        ...this.config.userAuth.bearerCmd,
+                        "--manager-call",
+                        ...(managerInstanceId ? ["--manager-instance", managerInstanceId] : []),
+                    ], signal);
+                    return invokeUserManager({ ...this.config, managerInstanceId }, bearer, command, input, { ...invokeOpts, signal });
+                };
+                // Subscribe before submission on the renewing main connection. A long accepted launch
+                // must not inherit the short-lived control credential's expiry.
+                r = opts.follow
+                    ? await this.ep.followServiceGoal(BASELINE_LIFECYCLE_ENDPOINT, submit, opts.deadlineMs, {
+                        reconcile: async (goalId, attributed, context) => {
+                            const instanceId = attributed.responder?.instanceId;
+                            if (!instanceId)
+                                throw new Error("accepted goal has no broker-attributed manager instance");
+                            const bearer = await execBearerCmd([
+                                ...this.config.userAuth.bearerCmd,
+                                "--manager-call", "--manager-instance", instanceId,
+                            ], context.signal, Math.min(30_000, context.deadlineMs));
+                            // Validate the renewed bearer against the accepting identity, not mutable session state.
+                            const config = {
+                                ...this.config, managerInstanceId: instanceId, lifecycleUid: context.caller.uid,
+                                userAuth: { ...this.config.userAuth, owner: context.caller.owner, actor: context.caller.actor },
+                            };
+                            const queryRes = await invokeUserManager(config, bearer, "goal-result", { goalId }, {
+                                signal: context.signal, deadlineMs: Math.min(invokeOpts.deadlineMs ?? 10_000, context.deadlineMs),
+                            });
+                            if (queryRes.reply.ok !== true)
+                                throw new Error(queryRes.reply.error?.message ?? "goal-result query refused");
+                            return queryRes.reply.data;
+                        },
+                    })
+                    : await submit();
+            }
+            else {
+                r = await this.ep.invokeService(BASELINE_LIFECYCLE_ENDPOINT, command, input, opts);
+            }
         }
         catch (e) {
             // The verdict "nobody answered" comes from core's answer-provenance marker, NEVER from the
@@ -1686,30 +1793,55 @@ export class MeshAgent extends EventEmitter {
     roster() {
         return this.ep.getRoster();
     }
+    /** Trust state of this observer's presence watch (`CotalEndpoint.presenceView()`): the roster
+     *  above can only support an absence verdict while this is `current` (#1229). */
+    presenceView() {
+        return this.ep.presenceView();
+    }
     /** Our last self-reported presence status. */
     get status() {
         return this._status;
     }
+    /** Run one presence write through the chain (#636): the write starts only after every earlier
+     *  admitted write has settled, and a rejection is swallowed at the TAIL only, so it propagates
+     *  to this write's own caller while the next admitted write still runs.
+     *
+     *  The straggler rule: departure is the last write, later writes are refused, not reordered.
+     *  Once `stop()` has begun, any write admitted here rejects AT ONCE (no put queued, no wait on
+     *  the chain) with a fixed error, instead of running after — or, for a write that calls
+     *  `requireConnected` (e.g. `setStatus`), sitting out the ten-second connect grace before
+     *  rejecting anyway. `stop()` itself submits departure's own put through this same method (the
+     *  `forDeparture` escape) so departure keeps landing after every write already admitted, even
+     *  though `_stopping` is already true by the time it does. */
+    inOrder(write, forDeparture = false) {
+        if (this._stopping && !forDeparture)
+            return Promise.reject(new Error("agent is stopping; presence writes are refused"));
+        const next = this.presenceChain.then(write, write);
+        this.presenceChain = next.catch(() => { });
+        return next;
+    }
     async setStatus(status, activity) {
-        await this.requireConnected();
-        const prev = this._status;
-        try {
-            if (prev !== "working" && status === "working")
-                await this.ep.setCondition(null);
-            await this.publishStatus(status, activity);
-        }
-        finally {
-            // The transition is a fact about the SEAT, not about whether its presence row was written:
-            // assigning before the writes meant one failed publish (which every adapter swallows) left
-            // `_status` idle with no boundary run, and the next real turn end saw no transition at all.
-            this._status = status;
-            // The turn relay's boundary: an adapter funnels its turn-end through this transition (Stop
-            // hooks set idle), so the automatic `done` yield and the immediate re-poll live here once
-            // instead of per connector. `waiting` is not a boundary — a seat blocked on a permission has
-            // not finished, and its deadline is what bounds a stuck one.
-            if (prev === "working" && status === "idle")
-                this.onTurnBoundary();
-        }
+        await this.inOrder(async () => {
+            await this.requireConnected();
+            const prev = this._status;
+            try {
+                if (prev !== "working" && status === "working")
+                    await this.ep.setCondition(null);
+                await this.publishStatus(status, activity);
+            }
+            finally {
+                // The transition is a fact about the SEAT, not about whether its presence row was written:
+                // assigning before the writes meant one failed publish (which every adapter swallows) left
+                // `_status` idle with no boundary run, and the next real turn end saw no transition at all.
+                this._status = status;
+                // The turn relay's boundary: an adapter funnels its turn-end through this transition (Stop
+                // hooks set idle), so the automatic `done` yield and the immediate re-poll live here once
+                // instead of per connector. `waiting` is not a boundary — a seat blocked on a permission has
+                // not finished, and its deadline is what bounds a stuck one.
+                if (prev === "working" && status === "idle")
+                    this.onTurnBoundary();
+            }
+        });
     }
     /**
      * Publish presence for something that is NOT a turn ending.
@@ -1722,13 +1854,15 @@ export class MeshAgent extends EventEmitter {
      * than an ending.
      */
     async resetStatus(status, activity) {
-        await this.requireConnected();
-        try {
-            await this.publishStatus(status, activity);
-        }
-        finally {
-            this._status = status;
-        }
+        await this.inOrder(async () => {
+            await this.requireConnected();
+            try {
+                await this.publishStatus(status, activity);
+            }
+            finally {
+                this._status = status;
+            }
+        });
     }
     async publishStatus(status, activity) {
         if (activity !== undefined)
@@ -1737,7 +1871,7 @@ export class MeshAgent extends EventEmitter {
     }
     /** Relay a harness-reported condition into presence, or clear it. */
     async setCondition(condition) {
-        await this.ep.setCondition(condition);
+        await this.inOrder(() => this.ep.setCondition(condition));
     }
     /** The working→idle boundary: yield `done` for every SURFACED turn (its payload was in the
      *  context of the turn that just ended; ending without an explicit yield IS the done signal),
@@ -1761,7 +1895,7 @@ export class MeshAgent extends EventEmitter {
     async setModel(model, variant) {
         if (this.config.model)
             return; // operator pin is authoritative — never override it with the runtime value
-        await this.ep.setCardModel(model, this.config.variant ?? variant);
+        await this.inOrder(() => this.ep.setCardModel(model, this.config.variant ?? variant));
     }
     // ---- channel registry ----------------------------------------------------
     /** The boot-time "push" half of channel onboarding: a fenced, one-line description per
@@ -1801,25 +1935,52 @@ export class MeshAgent extends EventEmitter {
         const mine = this.ep.joinedChannels();
         const pending = this.ep.pendingDurableLeaves();
         const unclosed = new Set(pending);
-        // Non-gating delivery-health signal: read the server-side daemon's lease ONCE (a durable-joined
-        // channel must not render as ordinary "subscribed, replay on" when the daemon is down). A read that
-        // throws = open mode / no delivery bucket / no grant → no health surface (left undefined).
+        // Non-gating delivery-health signal (#445): "active" requires an AFFIRMATIVE bounded round-trip
+        // to the delivery daemon's ctl.delivery responder — the one signal a killed daemon cannot leave
+        // behind. The lease read alone was residue (a SIGKILLed daemon's KV row stays `ready: true` for
+        // the bucket TTL) and the session-local membership map never notices daemon death at all, so
+        // together they certified a corpse. Two separable facts, read separately:
+        //   `leaseReadable` — the reader may read the delivery plane (an under-granted read throws);
+        //   `daemonMemberships` — the daemon's OWN answer (undefined ⇒ no responder answered, so no
+        //   daemon is serving this plane; a throw ⇒ responder-present error, fail closed below).
         let leaseLive = false;
-        let daemonKnown = false;
+        let leaseReadable = false;
+        let daemonMemberships;
         try {
             // "ready" (responder bound), not mere lease existence (single-flight slot claimed mid-startup).
             leaseLive = (await this.ep.readDeliveryLease(0))?.ready === true;
-            daemonKnown = true;
+            leaseReadable = true;
         }
         catch {
             /* open dev mode or no delivery plane here — health surface does not apply */
         }
-        // Membership-aware: "active" requires BOTH a live daemon lease AND an established owner membership.
-        // A joined durable channel whose boot self-join hasn't landed yet (daemon was down at connect, now
-        // reconciling) has no backstop for this owner even if the lease is live — render it degraded, never
-        // a false "active" off the lease alone (ux honesty blocker).
-        const health = (channel, joined) => daemonKnown && joined && this.ep.channelDeliveryClass(channel) === "durable"
-            ? (leaseLive && this.ep.hasDurableMembership(channel) ? "active" : "degraded")
+        if (leaseReadable) {
+            try {
+                daemonMemberships = await this.ep.fetchMemberships();
+            }
+            catch {
+                /* responder present but errored — health cannot be established, never "active" */
+                daemonMemberships = undefined;
+                leaseReadable = false;
+            }
+        }
+        // Membership-aware: "active" requires a daemon that ANSWERED and lists this channel for this
+        // lifecycle (the round-trip is scoped to it), plus a live lease (the lease still carries
+        // information the round-trip does not: it distinguishes a serving daemon from one whose loops
+        // are still binding). A SIGKILLed daemon leaves the lease row behind with ready:true and the
+        // local map set, but answers nothing — degraded. A joined durable channel whose health cannot
+        // be established (the reader lacks the grant, or the responder errored) renders "unknown",
+        // distinct from the degraded of a daemon that answered but holds no membership for this owner —
+        // and from the undefined of a channel where health does not apply (not durable-class, not
+        // joined, open mode).
+        const health = (channel, joined) => joined && this.ep.channelDeliveryClass(channel) === "durable"
+            ? !leaseReadable
+                ? "unknown"
+                : daemonMemberships === undefined
+                    ? "degraded"
+                    : daemonMemberships.some((m) => m.channel === channel) && leaseLive
+                        ? "active"
+                        : "degraded"
             : undefined;
         const rows = (await this.ep.listChannels()).map((c) => {
             const joined = mine.some((p) => subjectMatches(p, c.channel));