@cotal-ai/connector-hermes 0.6.0 → 0.8.0

package/dist/extension.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AACA,OAAO,EAAY,KAAK,SAAS,EAAoC,MAAM,gBAAgB,CAAC;AAW5F;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,EAAE,SAsB7B,CAAC"}
+{"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AACA,OAAO,EAA2B,KAAK,SAAS,EAAoC,MAAM,gBAAgB,CAAC;AAW3G;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,EAAE,SA6B7B,CAAC"}

package/dist/extension.js

@@ -1,6 +1,6 @@
 import { fileURLToPath } from "node:url";
-import { registry } from "@cotal-ai/core";
-import { launchEnv, MODEL_PROVIDER_KEYS } from "@cotal-ai/connector-core";
+import { loadAgentFile, registry } from "@cotal-ai/core";
+import { aclEnv, launchEnv, MODEL_PROVIDER_KEYS } from "@cotal-ai/connector-core";
 /** The launcher (run via tsx, which loads both) owns the mesh endpoint and supervises the Hermes
  *  gateway as a child — see launch.ts. Resolve `.ts` when this module loads from source (dev) and
  *  `.js` when it loads from the build: the package's `import` resolves to dist/, so a hardcoded
@@ -21,12 +21,14 @@ const LAUNCH_ENTRY = fileURLToPath(new URL(`./launch.${ENTRY_EXT}`, import.meta.
 export const hermesConnector = {
     kind: "connector",
     name: "hermes",
+    requires: ["hermes"],
     buildLaunch(opts) {
         // OS allow-list + the named model-provider key (Hermes is model-agnostic; any one unlocks a
         // provider), forwarded BY NAME — never `...process.env` — so the operator's unrelated secrets
         // don't reach the gateway child (P3).
         const env = {
             ...launchEnv({ providerKeys: MODEL_PROVIDER_KEYS }),
+            ...aclEnv(opts),
             COTAL_SPACE: opts.space,
             COTAL_NAME: opts.name,
         };
@@ -42,8 +44,13 @@ export const hermesConnector = {
         // Hermes' SOUL.md (system prompt) at gateway startup, the one place it can be set.
         if (opts.configPath)
             env.COTAL_AGENT_FILE = opts.configPath;
-        if (process.env.HERMES_MODEL)
-            env.HERMES_MODEL = process.env.HERMES_MODEL;
+        // Model precedence, at parity with the Claude/OpenCode connectors: the `--model` flag, else the
+        // agent file's `model:`, else an ambient HERMES_MODEL. The launcher reads HERMES_MODEL as the
+        // gateway model — resolving here is the one place that honors the file's model for Hermes.
+        const fileModel = opts.configPath ? loadAgentFile(opts.configPath).model : undefined;
+        const model = opts.model ?? fileModel ?? process.env.HERMES_MODEL;
+        if (model)
+            env.HERMES_MODEL = model;
         return { command: TSX, args: [LAUNCH_ENTRY], env };
     },
 };

package/dist/extension.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension.js","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAoD,MAAM,gBAAgB,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE1E;;;2DAG2D;AAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAChF,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,SAAS,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEtF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAc;IACxC,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,QAAQ;IACd,WAAW,CAAC,IAAgB;QAC1B,4FAA4F;QAC5F,8FAA8F;QAC9F,sCAAsC;QACtC,MAAM,GAAG,GAA2B;YAClC,GAAG,SAAS,CAAC,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAC;YACnD,WAAW,EAAE,IAAI,CAAC,KAAK;YACvB,UAAU,EAAE,IAAI,CAAC,IAAI;SACtB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1C,IAAI,IAAI,CAAC,EAAE;YAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,KAAK;YAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO;YAAE,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC;QACnD,wFAAwF;QACxF,mFAAmF;QACnF,IAAI,IAAI,CAAC,UAAU;YAAE,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC;QAC5D,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;YAAE,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAa,CAAC;QAC3E,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC;IACrD,CAAC;CACF,CAAC;AAEF,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC"}
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAoD,MAAM,gBAAgB,CAAC;AAC3G,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAElF;;;2DAG2D;AAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,0BAA0B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAChF,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,SAAS,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEtF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAc;IACxC,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,WAAW,CAAC,IAAgB;QAC1B,4FAA4F;QAC5F,8FAA8F;QAC9F,sCAAsC;QACtC,MAAM,GAAG,GAA2B;YAClC,GAAG,SAAS,CAAC,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAC;YACnD,GAAG,MAAM,CAAC,IAAI,CAAC;YACf,WAAW,EAAE,IAAI,CAAC,KAAK;YACvB,UAAU,EAAE,IAAI,CAAC,IAAI;SACtB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1C,IAAI,IAAI,CAAC,EAAE;YAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,KAAK;YAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO;YAAE,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC;QACnD,wFAAwF;QACxF,mFAAmF;QACnF,IAAI,IAAI,CAAC,UAAU;YAAE,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC;QAC5D,gGAAgG;QAChG,8FAA8F;QAC9F,2FAA2F;QAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAClE,IAAI,KAAK;YAAE,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC;IACrD,CAAC;CACF,CAAC;AAEF,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC"}

package/dist/launch.js

@@ -19,7 +19,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { loadAgentFile } from "@cotal-ai/core";
-import { hasIdentity, configFromEnv, controlSocketPath } from "@cotal-ai/connector-core";
+import { hasIdentity, configFromEnv, controlSocketPath, ORIENTATION_BOOTSTRAP } from "@cotal-ai/connector-core";
 import { startSidecar } from "./sidecar.js";
 /** Hermes API line this connector is written + pinned against (see pyproject.toml). A different
  *  major.minor may move the plugin/platform/hook signatures, so we assert and fail loudly. */
@@ -62,9 +62,10 @@ function setupProfile(home, opts) {
     if (opts.model)
         lines.push(`model: ${yamlStr(opts.model)}`);
     writeFileSync(join(home, "config.yaml"), lines.join("\n") + "\n");
-    // Persona → SOUL.md (Hermes' identity file) — the one place a system prompt can be set.
+    // Persona → SOUL.md (Hermes' identity file) — the one place a system prompt can be set. Append the
+    // orientation bootstrap so the agent orients first; gated on persona so we don't clobber the default SOUL.
     if (opts.persona)
-        writeFileSync(join(home, "SOUL.md"), opts.persona.trim() + "\n");
+        writeFileSync(join(home, "SOUL.md"), `${opts.persona.trim()}\n\n${ORIENTATION_BOOTSTRAP}\n`);
 }
 /** Assert the installed hermes-agent is on the pinned API line, or throw. No silent degrade: a
  *  different major.minor can shift the plugin/platform/hook contract this connector depends on. */

package/dist/launch.js.map

@@ -1 +1 @@
-{"version":3,"file":"launch.js","sourceRoot":"","sources":["../src/launch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C;8FAC8F;AAC9F,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,OAAO,GAAG,iBAAiB,CAAC;AAClC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AAEtF,iGAAiG;AACjG,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAEpD,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACnD,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,2DAA2D;AAC3D,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAE5F;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,IAA0C;IAC5E,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG;QACZ,wEAAwE;QACxE,UAAU;QACV,oBAAoB;QACpB,UAAU;QACV,cAAc;QACd,YAAY;QACZ,qBAAqB;QACrB,YAAY;QACZ,aAAa;KACd,CAAC;IACF,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAElE,wFAAwF;IACxF,IAAI,IAAI,CAAC,OAAO;QAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;AACrF,CAAC;AAED;mGACmG;AACnG,SAAS,mBAAmB;IAC1B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAChB,IAAI,EACJ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,wEAAwE,CAAC,EAClI,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,oGAAqG,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;IAC/I,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,UAAU;QACrB,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,yBAAyB,UAAU,sCAAsC,UAAU,sDAAsD,CAAC,CAAC;IAChL,GAAG,CAAC,gBAAgB,GAAG,iBAAiB,UAAU,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,8EAA8E;IAC9E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACnB,GAAG,CAAC,6DAA6D,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC1C,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,OAAO;QACrD,CAAC,CAAC,SAAS,CAAC;IACd,YAAY,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IAEjE,2FAA2F;IAC3F,6FAA6F;IAC7F,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,WAAW,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,UAAU,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAEzC,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAE/B,qFAAqF;IACrF,mBAAmB,EAAE,CAAC;IAEtB,MAAM,QAAQ,GAAsB;QAClC,GAAG,OAAO,CAAC,GAAG;QACd,WAAW,EAAE,IAAI;QACjB,oBAAoB,EAAE,WAAW;QACjC,mBAAmB,EAAE,UAAU;QAC/B,gBAAgB,EAAE,SAAS;KAC5B,CAAC;IAEF,GAAG,CAAC,+BAA+B,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,IAAI,GAAG,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;QACnF,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QACrD,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACtB,GAAG,CAAC,oCAAoC,CAAC,CAAC,OAAO,wCAAwC,CAAC,CAAC;QAC3F,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,GAAG,CAAC,UAAW,CAAW,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"launch.js","sourceRoot":"","sources":["../src/launch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAChH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C;8FAC8F;AAC9F,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,OAAO,GAAG,iBAAiB,CAAC;AAClC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AAEtF,iGAAiG;AACjG,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAEpD,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACnD,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,2DAA2D;AAC3D,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;AAE5F;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,IAA0C;IAC5E,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG;QACZ,wEAAwE;QACxE,UAAU;QACV,oBAAoB;QACpB,UAAU;QACV,cAAc;QACd,YAAY;QACZ,qBAAqB;QACrB,YAAY;QACZ,aAAa;KACd,CAAC;IACF,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAElE,mGAAmG;IACnG,2GAA2G;IAC3G,IAAI,IAAI,CAAC,OAAO;QACd,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,qBAAqB,IAAI,CAAC,CAAC;AACjG,CAAC;AAED;mGACmG;AACnG,SAAS,mBAAmB;IAC1B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAChB,IAAI,EACJ,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,wEAAwE,CAAC,EAClI,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,oGAAqG,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;IAC/I,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,IAAI,KAAK,UAAU;QACrB,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,yBAAyB,UAAU,sCAAsC,UAAU,sDAAsD,CAAC,CAAC;IAChL,GAAG,CAAC,gBAAgB,GAAG,iBAAiB,UAAU,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,8EAA8E;IAC9E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACnB,GAAG,CAAC,6DAA6D,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAE/B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB;QAC1C,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,OAAO;QACrD,CAAC,CAAC,SAAS,CAAC;IACd,YAAY,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IAEjE,2FAA2F;IAC3F,6FAA6F;IAC7F,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,WAAW,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,UAAU,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAEzC,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAE/B,qFAAqF;IACrF,mBAAmB,EAAE,CAAC;IAEtB,MAAM,QAAQ,GAAsB;QAClC,GAAG,OAAO,CAAC,GAAG;QACd,WAAW,EAAE,IAAI;QACjB,oBAAoB,EAAE,WAAW;QACjC,mBAAmB,EAAE,UAAU;QAC/B,gBAAgB,EAAE,SAAS;KAC5B,CAAC;IAEF,GAAG,CAAC,+BAA+B,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,IAAI,GAAG,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;QACnF,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QACrD,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACrD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QACtB,GAAG,CAAC,oCAAoC,CAAC,CAAC,OAAO,wCAAwC,CAAC,CAAC;QAC3F,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,GAAG,CAAC,UAAW,CAAW,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/connector-hermes",
   "description": "Cotal connector for the Hermes (Nous Research) agent.",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -23,14 +23,14 @@
   "dependencies": {
     "tsx": "^4.22.4",
     "zod": "^4.4.3",
-    "@cotal-ai/connector-core": "0.6.0"
+    "@cotal-ai/connector-core": "0.8.0"
   },
   "peerDependencies": {
     "@cotal-ai/core": ">=0.1.0"
   },
   "devDependencies": {
     "esbuild": "^0.28.0",
-    "@cotal-ai/core": "0.6.0"
+    "@cotal-ai/core": "0.8.0"
   },
   "files": [
     "bin",

package/plugin/cotal/_sidecar/standalone.cjs

@@ -6425,7 +6425,7 @@ var require_authenticator = __commonJS({
     exports2.tokenAuthenticator = tokenAuthenticator;
     exports2.nkeyAuthenticator = nkeyAuthenticator;
     exports2.jwtAuthenticator = jwtAuthenticator;
-    exports2.credsAuthenticator = credsAuthenticator6;
+    exports2.credsAuthenticator = credsAuthenticator7;
     var nkeys_1 = require_nkeys2();
     var encoders_1 = require_encoders();
     function multiAuthenticator(authenticators) {
@@ -6475,7 +6475,7 @@ var require_authenticator = __commonJS({
         return { jwt: jwt2, nkey, sig };
       };
     }
-    function credsAuthenticator6(creds) {
+    function credsAuthenticator7(creds) {
       const fn = typeof creds !== "function" ? () => creds : creds;
       const parse3 = () => {
         const CREDS = /\s*(?:(?:[-]{3,}[^\n]*[-]{3,}\n)(.+)(?:\n\s*[-]{3,}[^\n]*[-]{3,}\n))/ig;
@@ -13605,11 +13605,11 @@ var require_connect = __commonJS({
   "../../node_modules/.pnpm/@nats-io+transport-node@3.4.0/node_modules/@nats-io/transport-node/lib/connect.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.connect = connect6;
+    exports2.connect = connect7;
     var node_transport_1 = require_node_transport();
     var nats_base_client_1 = require_nats_base_client();
     var nats_base_client_2 = require_nats_base_client();
-    function connect6(opts = {}) {
+    function connect7(opts = {}) {
       if ((0, nats_base_client_2.hasWsProtocol)(opts)) {
         return Promise.reject(nats_base_client_2.errors.InvalidArgumentError.format(`servers`, `node client doesn't support websockets, use the 'wsconnect' function instead`));
       }
@@ -13801,7 +13801,7 @@ var require_kv = __commonJS({
         throw new Error(`invalid bucket name: ${name}`);
       }
     }
-    var Kvm8 = class {
+    var Kvm9 = class {
       js;
       /**
        * Creates an instance of the Kv that allows you to create and access KV stores.
@@ -13867,7 +13867,7 @@ var require_kv = __commonJS({
         return new internal_2.ListerImpl(subj, filter, this.js);
       }
     };
-    exports2.Kvm = Kvm8;
+    exports2.Kvm = Kvm9;
     var Bucket = class _Bucket {
       js;
       jsm;
@@ -14848,6 +14848,10 @@ function aclBucket(space) {
 function aclKey(owner) {
   return token(owner);
 }
+function membershipBucket(space) {
+  return `cotal_membership_${token(space)}`;
+}
+var MEMBERSHIP_FEED_KEY = "=feed";
 function deliveryBucket(space) {
   return `cotal_delivery_${token(space)}`;
 }
@@ -16611,6 +16615,7 @@ var import_kv = __toESM(require_mod6(), 1);
 var MAX_MSGS_PER_SUBJECT = 1e3;
 var PLANE3_DEDUP_WINDOW_MS = 2 * 60 * 60 * 1e3;
 var DINBOX_MAX_ACK_PENDING = 1e3;
+var MEMBERSHIP_MAX_BYTES = 64 * 1024 * 1024;
 async function createSpaceStreams(jsm, space) {
   const p = spacePrefix(space);
   await jsm.streams.add({
@@ -16907,11 +16912,15 @@ async function commitAcl(kv, owner, allowSubscribe) {
   throw new Error(`acl CAS exhausted retries for ${owner}`);
 }
 
-// ../../packages/core/dist/lease.js
-var import_kv5 = __toESM(require_mod6(), 1);
+// ../../packages/core/dist/membership-feed.js
 var import_transport_node3 = __toESM(require_transport_node(), 1);
+var import_kv5 = __toESM(require_mod6(), 1);
+
+// ../../packages/core/dist/lease.js
+var import_kv6 = __toESM(require_mod6(), 1);
+var import_transport_node4 = __toESM(require_transport_node(), 1);
 async function openDeliveryRegistry(nc, space) {
-  return new import_kv5.Kvm(nc).open(deliveryBucket(space));
+  return new import_kv6.Kvm(nc).open(deliveryBucket(space));
 }
 
 // ../../packages/core/dist/agent-file.js
@@ -17029,9 +17038,9 @@ function loadAgentFile(path) {
 // ../../packages/core/dist/endpoint.js
 var import_node_events = require("node:events");
 var import_node_crypto = require("node:crypto");
-var import_transport_node4 = __toESM(require_transport_node(), 1);
+var import_transport_node5 = __toESM(require_transport_node(), 1);
 var import_jetstream2 = __toESM(require_mod4(), 1);
-var import_kv6 = __toESM(require_mod6(), 1);
+var import_kv7 = __toESM(require_mod6(), 1);
 var DEFAULT_SERVER = "nats://127.0.0.1:4222";
 var READER_MAX_REDELIVERIES = 10;
 var CotalEndpoint = class extends import_node_events.EventEmitter {
@@ -17061,6 +17070,7 @@ var CotalEndpoint = class extends import_node_events.EventEmitter {
   membersKv;
   aclKv;
   deliveryKv;
+  membershipKv;
   /** The live `ctl.delivery` serve subscription (delivery daemon) — re-created on every (re)connect by
    *  {@link armDeliveryControl}; tracked so the stale one is dropped on reconnect. */
   deliveryServeSub;
@@ -17179,7 +17189,7 @@ var CotalEndpoint = class extends import_node_events.EventEmitter {
    *  idempotent (durables bind by name, JetStream dedups by msgID, KV opens are idempotent). */
   async connectAndBind() {
     this.clearConnectionScoped();
-    this.nc = await (0, import_transport_node4.connect)({
+    this.nc = await (0, import_transport_node5.connect)({
       servers: this.servers,
       name: `cotal:${this.card.name}`,
       // Per-identity inbox namespace (the "Private Inbox" pattern). nats.js routes ALL
@@ -17193,7 +17203,7 @@ var CotalEndpoint = class extends import_node_events.EventEmitter {
     this.watchStatus();
     this.js = (0, import_jetstream2.jetstream)(this.nc);
     if (this.doWatch || this.doRegister) {
-      const kvm = new import_kv6.Kvm(this.nc);
+      const kvm = new import_kv7.Kvm(this.nc);
       this.kv = this.creds ? await kvm.open(presenceBucket(this.space)) : await kvm.create(presenceBucket(this.space), { ttl: this.ttlMs });
     }
     if (this.doWatch) {
@@ -17735,6 +17745,57 @@ var CotalEndpoint = class extends import_node_events.EventEmitter {
       arr.sort(byName);
     return map2;
   }
+  /** Lazily open the derived membership feed KV (admin/observer read; the delivery daemon writes it).
+   *  Read-only here — the dashboard consumes it; agents hold no grant and never call this. */
+  async membershipRegistry() {
+    if (!this.nc)
+      throw new Error("endpoint not started");
+    this.membershipKv ??= await new import_kv7.Kvm(this.nc).open(membershipBucket(this.space));
+    return this.membershipKv;
+  }
+  /**
+   * Snapshot the broker-sourced channel-membership feed (admin/observer read): every agent's
+   * `{live, durable}` record plus `asOf` — the feed's freshness heartbeat (epoch ms of the daemon's last
+   * successful poll, from the reserved {@link MEMBERSHIP_FEED_KEY}). `live` patterns are kept as-is
+   * (wildcards preserved); the consumer expands them against the channel registry. `asOf` is undefined
+   * when the feed has never been written (no daemon → the dashboard degrades to traffic-only).
+   */
+  async readMembership() {
+    const kv = await this.membershipRegistry();
+    const members = [];
+    let asOf;
+    for await (const key of await kv.keys()) {
+      const e = await kv.get(key);
+      if (!e || e.operation === "DEL" || e.operation === "PURGE")
+        continue;
+      if (key === MEMBERSHIP_FEED_KEY) {
+        try {
+          asOf = e.json().observedAt;
+        } catch {
+        }
+        continue;
+      }
+      try {
+        const rec = e.json();
+        members.push({ id: key, live: rec.live ?? [], durable: rec.durable ?? [], observedAt: rec.observedAt });
+      } catch {
+      }
+    }
+    return { asOf, members };
+  }
+  /** Watch the membership feed for changes (admin/observer): `onChange` fires on every KV entry,
+   *  including the initial replay — the caller debounces + re-reads {@link readMembership}. Returns a
+   *  stop handle. Best-effort: a feed the cred can't read (or absent) surfaces as an `error` event and
+   *  the dashboard keeps its last snapshot. */
+  async watchMembership(onChange) {
+    const kv = await this.membershipRegistry();
+    const iter = await kv.watch();
+    void (async () => {
+      for await (const _ of iter)
+        onChange();
+    })().catch((err2) => this.emit("error", err2));
+    return { stop: () => iter.stop() };
+  }
   /** Fetch recent messages from a channel's JetStream backlog. */
   async channelHistory(channel, opts) {
     return this.streamHistory(chatStream(this.space), chatSubject(this.space, "*", channel), opts?.limit ?? 100);
@@ -17785,7 +17846,7 @@ var CotalEndpoint = class extends import_node_events.EventEmitter {
       for await (const s of this.nc.status()) {
         if (s.type !== "error")
           continue;
-        if (s.error instanceof import_transport_node4.PermissionViolationError && this.confirmingChatSubs.has(s.error.subject))
+        if (s.error instanceof import_transport_node5.PermissionViolationError && this.confirmingChatSubs.has(s.error.subject))
           continue;
         this.emit("error", describeStatusError(s.error));
       }
@@ -18058,7 +18119,7 @@ var CotalEndpoint = class extends import_node_events.EventEmitter {
       filter_subject: subject,
       ack_policy: import_jetstream2.AckPolicy.None,
       mem_storage: true,
-      inactive_threshold: (0, import_transport_node4.nanos)(3e4),
+      inactive_threshold: (0, import_transport_node5.nanos)(3e4),
       deliver_policy: import_jetstream2.DeliverPolicy.StartSequence,
       opt_start_seq: fromSeqExcl + 1
     });
@@ -18458,7 +18519,7 @@ var CotalEndpoint = class extends import_node_events.EventEmitter {
    *  distinct from a responder that errored. nats.js surfaces it as NoRespondersError, or a RequestError
    *  whose `isNoResponders()` is true. */
   isNoResponders(e) {
-    return e instanceof import_transport_node4.NoRespondersError || e instanceof import_transport_node4.RequestError && e.isNoResponders();
+    return e instanceof import_transport_node5.NoRespondersError || e instanceof import_transport_node5.RequestError && e.isNoResponders();
   }
   /** Agent-side: this session's CURRENT durable memberships (channel + join generation) from the
    *  manager — the agent holds no read on the privileged members KV. `undefined` ⇒ NO control responder
@@ -18801,7 +18862,7 @@ var CotalEndpoint = class extends import_node_events.EventEmitter {
       filter_subject: subject,
       ack_policy: import_jetstream2.AckPolicy.None,
       mem_storage: true,
-      inactive_threshold: (0, import_transport_node4.nanos)(3e4),
+      inactive_threshold: (0, import_transport_node5.nanos)(3e4),
       ..."time" in start ? { deliver_policy: import_jetstream2.DeliverPolicy.StartTime, opt_start_time: start.time.toISOString() } : { deliver_policy: import_jetstream2.DeliverPolicy.StartSequence, opt_start_seq: start.seq }
     });
     try {
@@ -18950,7 +19011,7 @@ var CotalEndpoint = class extends import_node_events.EventEmitter {
     }
   }
   async publishPresence() {
-    if (!this.kv)
+    if (!this.doRegister || !this.kv)
       return;
     const p = {
       card: this.card,
@@ -19091,28 +19152,28 @@ function authOpts(a) {
   if (a.creds) {
     if (a.token || a.user || a.pass)
       throw new Error("creds are mutually exclusive with token/user/pass auth");
-    return { authenticator: (0, import_transport_node4.credsAuthenticator)(new TextEncoder().encode(a.creds)), tls };
+    return { authenticator: (0, import_transport_node5.credsAuthenticator)(new TextEncoder().encode(a.creds)), tls };
   }
   return { token: a.token, user: a.user, pass: a.pass, tls };
 }
 function describeStatusError(err2) {
-  if (err2 instanceof import_transport_node4.PermissionViolationError) {
+  if (err2 instanceof import_transport_node5.PermissionViolationError) {
     return new Error(`NATS permission denied: cannot ${err2.operation} "${err2.subject}" \u2014 check this endpoint's ACLs (a denied peer looks "absent" rather than blocked)`, { cause: err2 });
   }
   return err2;
 }
 function isPermissionDenied(e) {
-  if (e instanceof import_transport_node4.PermissionViolationError)
+  if (e instanceof import_transport_node5.PermissionViolationError)
     return true;
-  if (e?.cause instanceof import_transport_node4.PermissionViolationError)
+  if (e?.cause instanceof import_transport_node5.PermissionViolationError)
     return true;
   return /permissions?\s+violation/i.test(String(e?.message ?? ""));
 }
 
 // ../../packages/core/dist/spaces.js
-var import_transport_node5 = __toESM(require_transport_node(), 1);
+var import_transport_node6 = __toESM(require_transport_node(), 1);
 var import_jetstream3 = __toESM(require_mod4(), 1);
-var import_kv7 = __toESM(require_mod6(), 1);
+var import_kv8 = __toESM(require_mod6(), 1);
 
 // ../../packages/core/dist/registry.js
 var Registry = class {
@@ -19195,7 +19256,7 @@ function configFromEnv(env = process.env) {
     subscribe: resolvedSubscribe,
     allowSubscribe: resolvedAllowSub,
     // Post ACL is default-DENY: only what's explicitly declared (env > agent-file). The broker
-    // enforces it under auth; in open mode posting is unrestricted regardless (see laneLine).
+    // enforces it under auth; in open mode posting is unrestricted regardless.
     allowPublish: resolvedAllowPub,
     quiet: resolvedQuiet,
     muted: resolvedMuted,
@@ -19573,10 +19634,16 @@ var MeshAgent = class extends import_node_events2.EventEmitter {
   // ---- supervision ---------------------------------------------------------
   /** Ask the manager to spawn a new teammate into this space (its `start` op).
    *  How it lands — a detached PTY, a tmux window, a cmux tab — is the manager's
-   *  runtime; from here it just joins the mesh as a lateral peer. */
-  async spawn(name, role) {
+   *  runtime; from here it just joins the mesh as a lateral peer. `opts.agent` picks
+   *  the harness (default the manager's `cotal`/Claude) and `opts.model` overrides the
+   *  persona file's `model:` — the same knobs the operator's `cotal start` carries, so
+   *  the agent and operator spawn doors share one control-op contract. */
+  async spawn(name, role, opts) {
     this.assertConnected();
-    return this.ep.requestControl(CONTROL_PRIVILEGED, { op: "start", args: { name, role } });
+    return this.ep.requestControl(CONTROL_PRIVILEGED, {
+      op: "start",
+      args: { name, role, agent: opts?.agent, model: opts?.model }
+    });
   }
   /** Ask the manager to tear a teammate down (its `stop` op). Graceful by default —
    *  the session is told to exit cleanly (so it leaves the mesh) before the
@@ -34267,6 +34334,66 @@ function date4(params) {
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 config(en_default());
 
+// ../connector-core/dist/orientation.js
+var CORE_TOOLS = /* @__PURE__ */ new Set([
+  "cotal_inbox",
+  "cotal_send",
+  "cotal_dm",
+  "cotal_anycast",
+  "cotal_roster",
+  "cotal_status"
+]);
+function buildOrientation(agent, config2, visibleTools, generatedAt) {
+  const core = [];
+  const more = [];
+  for (const t of visibleTools) {
+    if (t.name === "cotal_orientation")
+      continue;
+    (CORE_TOOLS.has(t.name) ? core : more).push(t);
+  }
+  const peers = agent.roster().filter((p) => p.card.id !== agent.id);
+  const shown = peers.slice(0, 8).map((p) => `${p.card.role ? `${p.card.name}/${p.card.role}` : p.card.name} (${p.status})`);
+  const summary = peers.length ? shown.join(", ") + (peers.length > shown.length ? `, +${peers.length - shown.length} more` : "") : "no other peers present";
+  return {
+    v: 1,
+    generatedAt,
+    identity: { name: config2.name, role: config2.role, space: config2.space, id: agent.id },
+    access: {
+      authMode: !!config2.creds,
+      read: config2.subscribe,
+      readAcl: config2.allowSubscribe,
+      post: config2.allowPublish
+    },
+    capabilities: config2.capabilities ?? [],
+    tools: { core, more },
+    peers: { present: peers.length, summary },
+    status: agent.status,
+    attention: agent.attention,
+    unread: { total: agent.inboxCount() },
+    actions: {
+      read: "cotal_inbox",
+      replyChannel: "cotal_send",
+      replyPrivate: "cotal_dm",
+      askRole: "cotal_anycast"
+    }
+  };
+}
+function renderOrientation(o) {
+  const fmt = (cs) => cs.length ? cs.map((c) => `#${c}`).join(", ") : "\u2014";
+  const who = o.identity.role ? `${o.identity.name}/${o.identity.role}` : o.identity.name;
+  const aclDiffers = o.access.readAcl.length !== o.access.read.length || o.access.readAcl.some((c) => !o.access.read.includes(c));
+  const lines = [
+    `You are ${who} in space "${o.identity.space}" (id ${o.identity.id.slice(0, 8)}\u2026).`,
+    "",
+    `Access \u2014 ${o.access.authMode ? "auth mode (grants are broker-enforced)" : "open mode (grants advisory, host-trusted)"}:`,
+    `  \u2022 read: ${fmt(o.access.read)}`
+  ];
+  if (aclDiffers)
+    lines.push(`  \u2022 may join (read ACL): ${fmt(o.access.readAcl)}`);
+  lines.push(`  \u2022 post: ${o.access.post.length ? fmt(o.access.post) : "\u2014 (read-only; no post channels)"}`, `  \u2022 capabilities: ${o.capabilities.length ? o.capabilities.join(", ") : "none beyond defaults"}`, "", `Tools \u2014 core loop: ${o.tools.core.map((t) => t.name).join(", ") || "\u2014"}`, `Tools \u2014 more: ${o.tools.more.map((t) => t.name).join(", ") || "\u2014"}`, "", `Right now (snapshot @ ${new Date(o.generatedAt).toISOString()}):`, `  \u2022 status: ${o.status} \xB7 attention: ${o.attention}`, `  \u2022 peers present: ${o.peers.present} \u2014 ${o.peers.summary}`, `  \u2022 unread: ${o.unread.total}`, "", `Act \u2192 read: ${o.actions.read} \xB7 reply on a channel: ${o.actions.replyChannel} \xB7 private: ${o.actions.replyPrivate} \xB7 ask a role: ${o.actions.askRole}`);
+  return lines.join("\n");
+}
+
 // ../connector-core/dist/tool-specs.js
 var ok = (text) => ({ text });
 var err = (text) => ({ text, isError: true });
@@ -34326,6 +34453,21 @@ function resolveFeedbackEmail(explicit) {
 function cotalToolSpecs(config2, source = "connector") {
   const canSpawn = !config2.creds || (config2.capabilities?.includes("spawn") ?? false);
   const specs = [
+    {
+      name: "cotal_orientation",
+      title: "Cotal: orient \u2014 who you are & what you can do",
+      description: "Your orientation card: who you are (name/role/space), the channels you can read and post to, your capabilities, the tools available to you (grouped into a core loop plus the rest), who's present, your status/attention, and how many messages are unread. Call this first to get your bearings; it's read-only and safe to re-check anytime.",
+      run(agent) {
+        const visible = cotalToolSpecs(config2, source).map((s) => ({
+          name: s.name,
+          title: s.title
+        }));
+        const card = renderOrientation(buildOrientation(agent, config2, visible, Date.now()));
+        return ok(agent.connected ? card : `(not connected to the mesh yet \u2014 the live context below is empty)
+
+${card}`);
+      }
+    },
     {
       name: "cotal_roster",
       title: "Cotal: who's present",
@@ -34573,12 +34715,14 @@ ${info}${caught}`);
       title: "Cotal: spawn a new teammate",
       description: "Ask the manager to start a new peer endpoint in your space. It joins the mesh as a lateral peer (and, when the manager runs the cmux runtime, appears in its own tab). Use when the team needs another agent.",
       schema: {
-        name: external_exports.string().describe("Name for the new peer; auto-numbered (e.g. reviewer-2) if taken."),
-        role: external_exports.string().optional().describe("Optional role for the new peer (e.g. worker, reviewer).")
+        name: external_exports.string().describe("Which persona to spawn \u2014 the persona FILENAME in .cotal/agents (e.g. `review-critic`), without the .md. The new peer joins under the persona's own `name:` (auto-numbered, e.g. socrates-2, if that's taken). Fails if no such persona file exists \u2014 spawn an existing persona, don't invent a name."),
+        role: external_exports.string().optional().describe("Optional role for the new peer (e.g. worker, reviewer); overrides the persona file's role."),
+        agent: external_exports.string().optional().describe("Optional harness the new peer runs on \u2014 the agent/connector type (claude, opencode, hermes), NOT the persona to spawn (that's `name`). Defaults to the manager's default (Claude)."),
+        model: external_exports.string().optional().describe("Optional model override (e.g. opus, sonnet) \u2014 wins over the persona file's model:.")
       },
-      async run(agent, _config, { name, role }) {
+      async run(agent, _config, { name, role, agent: agentType, model }) {
         try {
-          const reply = await agent.spawn(name, role);
+          const reply = await agent.spawn(name, role, { agent: agentType, model });
           if (!reply.ok)
             return err(`Couldn't spawn ${name}: ${reply.error ?? "manager refused"}`);
           const d = reply.data;