@cotal-ai/connector-hermes 0.9.0 → 0.10.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/connector-hermes",
   "description": "Cotal connector for the Hermes (Nous Research) agent.",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -23,14 +23,14 @@
   "dependencies": {
     "tsx": "^4.22.4",
     "zod": "^4.4.3",
-    "@cotal-ai/connector-core": "0.9.0"
+    "@cotal-ai/connector-core": "0.10.0"
   },
   "peerDependencies": {
     "@cotal-ai/core": ">=0.1.0"
   },
   "devDependencies": {
     "esbuild": "^0.28.0",
-    "@cotal-ai/core": "0.9.0"
+    "@cotal-ai/core": "0.10.0"
   },
   "files": [
     "bin",

package/plugin/cotal/_sidecar/standalone.cjs

@@ -16601,6 +16601,7 @@ var Algorithms;
 
 // ../../packages/core/dist/provision.js
 var import_nkeys2 = __toESM(require_mod(), 1);
+var FIVE_MINUTES = 5 * 60;
 var BASE_LIMITS = {
   subs: -1,
   conn: -1,
@@ -16617,7 +16618,56 @@ var SYS_LIMITS = { ...BASE_LIMITS, mem_storage: 0, disk_storage: 0 };
 // ../../packages/core/dist/streams.js
 var import_jetstream = __toESM(require_mod4(), 1);
 var import_transport_node = __toESM(require_transport_node(), 1);
+var import_kv2 = __toESM(require_mod6(), 1);
+
+// ../../packages/core/dist/acls.js
 var import_kv = __toESM(require_mod6(), 1);
+async function openAclRegistry(nc, space, opts = {}) {
+  const kvm = new import_kv.Kvm(nc);
+  return opts.create ? kvm.create(aclBucket(space)) : kvm.open(aclBucket(space));
+}
+async function readAcl(kv, owner) {
+  const e = await kv.get(aclKey(owner));
+  if (!e || e.operation === "DEL" || e.operation === "PURGE")
+    return void 0;
+  try {
+    const record2 = e.json();
+    if (!Array.isArray(record2.allowSubscribe))
+      return void 0;
+    return { record: record2, revision: e.revision };
+  } catch {
+    return void 0;
+  }
+}
+async function commitAcl(kv, owner, allowSubscribe) {
+  const key = aclKey(owner);
+  for (let attempt = 0; attempt < 5; attempt++) {
+    const cur = await readAcl(kv, owner);
+    const next = {
+      allowSubscribe: [...allowSubscribe],
+      revision: (cur?.record.revision ?? 0) + 1,
+      updatedAt: Date.now()
+    };
+    const data = new TextEncoder().encode(JSON.stringify(next));
+    if (!cur) {
+      try {
+        await kv.create(key, data);
+        return next;
+      } catch {
+        continue;
+      }
+    }
+    try {
+      await kv.update(key, data, cur.revision);
+      return next;
+    } catch {
+      continue;
+    }
+  }
+  throw new Error(`acl CAS exhausted retries for ${owner}`);
+}
+
+// ../../packages/core/dist/streams.js
 var MAX_MSGS_PER_SUBJECT = 1e3;
 var PLANE3_DEDUP_WINDOW_MS = 2 * 60 * 60 * 1e3;
 var DINBOX_MAX_ACK_PENDING = 1e3;
@@ -16723,7 +16773,7 @@ function fanoutDurableConfig(space, opts = {}) {
 }
 
 // ../../packages/core/dist/channels.js
-var import_kv2 = __toESM(require_mod6(), 1);
+var import_kv3 = __toESM(require_mod6(), 1);
 var import_transport_node2 = __toESM(require_transport_node(), 1);
 function parseDuration(s) {
   const m = /^(\d+)(s|m|h|d)$/.exec(s.trim());
@@ -16744,7 +16794,7 @@ function effectiveDeliveryClass(cfg, defaults) {
   return cfg?.deliveryClass ?? defaults?.deliveryClass ?? "durable";
 }
 async function openChannelRegistry(nc, space, opts = {}) {
-  const kvm = new import_kv2.Kvm(nc);
+  const kvm = new import_kv3.Kvm(nc);
   return opts.create ? kvm.create(channelBucket(space)) : kvm.open(channelBucket(space));
 }
 async function readChannelConfig(kv, channel) {
@@ -16765,7 +16815,7 @@ async function decode(kv, key) {
 }
 
 // ../../packages/core/dist/members.js
-var import_kv3 = __toESM(require_mod6(), 1);
+var import_kv4 = __toESM(require_mod6(), 1);
 var StaleMembershipWrite = class extends Error {
   constructor(channel, owner, attempted, current) {
     super(`stale membership write for ${channel}/${owner}: generation ${attempted} < current ${current}`);
@@ -16773,7 +16823,7 @@ var StaleMembershipWrite = class extends Error {
   }
 };
 async function openMembersRegistry(nc, space, opts = {}) {
-  const kvm = new import_kv3.Kvm(nc);
+  const kvm = new import_kv4.Kvm(nc);
   return opts.create ? kvm.create(membersBucket(space)) : kvm.open(membersBucket(space));
 }
 async function readMember(kv, channel, owner) {
@@ -16872,53 +16922,6 @@ function durableEligible(rec, seq) {
   return true;
 }
 
-// ../../packages/core/dist/acls.js
-var import_kv4 = __toESM(require_mod6(), 1);
-async function openAclRegistry(nc, space, opts = {}) {
-  const kvm = new import_kv4.Kvm(nc);
-  return opts.create ? kvm.create(aclBucket(space)) : kvm.open(aclBucket(space));
-}
-async function readAcl(kv, owner) {
-  const e = await kv.get(aclKey(owner));
-  if (!e || e.operation === "DEL" || e.operation === "PURGE")
-    return void 0;
-  try {
-    const record2 = e.json();
-    if (!Array.isArray(record2.allowSubscribe))
-      return void 0;
-    return { record: record2, revision: e.revision };
-  } catch {
-    return void 0;
-  }
-}
-async function commitAcl(kv, owner, allowSubscribe) {
-  const key = aclKey(owner);
-  for (let attempt = 0; attempt < 5; attempt++) {
-    const cur = await readAcl(kv, owner);
-    const next = {
-      allowSubscribe: [...allowSubscribe],
-      revision: (cur?.record.revision ?? 0) + 1,
-      updatedAt: Date.now()
-    };
-    const data = new TextEncoder().encode(JSON.stringify(next));
-    if (!cur) {
-      try {
-        await kv.create(key, data);
-        return next;
-      } catch {
-        continue;
-      }
-    }
-    try {
-      await kv.update(key, data, cur.revision);
-      return next;
-    } catch {
-      continue;
-    }
-  }
-  throw new Error(`acl CAS exhausted retries for ${owner}`);
-}
-
 // ../../packages/core/dist/membership-feed.js
 var import_transport_node3 = __toESM(require_transport_node(), 1);
 var import_kv5 = __toESM(require_mod6(), 1);
@@ -19371,6 +19374,7 @@ function configFromEnv(env = process.env) {
 
 // ../connector-core/dist/agent.js
 var import_node_events2 = require("node:events");
+var SPAWN_TIMEOUT_MS = 4e4;
 function buildMeta(config2) {
   const meta3 = { ...config2.meta ?? {} };
   if (config2.model)
@@ -19732,11 +19736,14 @@ var MeshAgent = class extends import_node_events2.EventEmitter {
   }
   // ---- supervision ---------------------------------------------------------
   /** Ask the manager to spawn a new teammate into this space (its `start` op).
+   *  #159 B1: the manager replies to `start` only on a REAL outcome — presence join, process exit,
+   *  or its ~30s readiness backstop — so the request must outlive that window ({@link SPAWN_TIMEOUT_MS}),
+   *  not the 5s op default.
    *  How it lands — a detached PTY, a tmux window, a cmux tab — is the manager's
    *  runtime; from here it just joins the mesh as a lateral peer. `opts.agent` picks
-   *  the harness (default the manager's `cotal`/Claude), `opts.model` overrides the
+   *  the harness (default the manager's `COTAL_DEFAULT_AGENT`, else `cotal`/Claude), `opts.model` overrides the
    *  persona file's `model:`, and `opts.cwd` roots the new peer at a different folder/repo
-   *  than the manager's workspace — the same knobs the operator's `cotal start` carries, so
+   *  than the manager's workspace — the same knobs the operator's `cotal spawn --detach` carries, so
    *  the agent and operator spawn doors share one control-op contract. (Session `resume` is
    *  intentionally NOT forwarded here: forking a host-local `~/.claude` transcript is an
    *  operator-local intent, kept off the peer-facing spawn door — see #159.) */
@@ -19745,7 +19752,7 @@ var MeshAgent = class extends import_node_events2.EventEmitter {
     return this.ep.requestControl(CONTROL_PRIVILEGED, {
       op: "start",
       args: { name, role, agent: opts?.agent, model: opts?.model, cwd: opts?.cwd }
-    });
+    }, SPAWN_TIMEOUT_MS);
   }
   /** Ask the manager to tear a teammate down (its `stop` op). Graceful by default —
    *  the session is told to exit cleanly (so it leaves the mesh) before the
@@ -34817,14 +34824,14 @@ ${info}${caught}`);
       schema: {
         name: external_exports.string().describe("Which persona to spawn \u2014 the persona FILENAME in .cotal/agents (e.g. `review-critic`), without the .md. The new peer joins under the persona's own `name:` (auto-numbered, e.g. socrates-2, if that's taken). Fails if no such persona file exists \u2014 spawn an existing persona, don't invent a name."),
         role: external_exports.string().optional().describe("Optional role for the new peer (e.g. worker, reviewer); overrides the persona file's role."),
-        agent: external_exports.string().optional().describe("Optional harness the new peer runs on \u2014 the agent/connector type (claude, opencode, hermes), NOT the persona to spawn (that's `name`). Defaults to the manager's default (Claude)."),
+        agent: external_exports.string().optional().describe("Optional harness the new peer runs on \u2014 the agent/connector type (claude, opencode, hermes), NOT the persona to spawn (that's `name`). Defaults to the manager's COTAL_DEFAULT_AGENT, else Claude."),
         model: external_exports.string().optional().describe("Optional model override (e.g. opus, sonnet) \u2014 wins over the persona file's model:."),
         cwd: external_exports.string().optional().describe("Optional working directory to root the new peer at (e.g. a different repo). A relative path resolves against the manager's workspace; omitted \u2192 it shares the manager's workspace.")
         // NOTE: session `resume` is deliberately NOT exposed here. Forking a host-local `~/.claude`
         // transcript is an operator-local intent; letting a spawn-capable mesh PEER name a host
         // session id would expand `spawn` into host-transcript disclosure with no broker-enforced
-        // boundary. Resume lives only on the operator CLI (`cotal spawn --resume` / `cotal start
-        // --resume`); a peer-facing, capability-gated resume is deferred (see #159).
+        // boundary. Resume lives only on the operator CLI (`cotal spawn --resume`, foreground or
+        // --detach); a peer-facing, capability-gated resume is deferred (see #159).
       },
       async run(agent, _config, { name, role, agent: agentType, model, cwd }) {
         try {