@cotal-ai/manager 0.16.0 → 0.18.0

package/dist/static-lifecycle.js

@@ -0,0 +1,262 @@
+/**
+ * The STATIC §13.1 lifecycle executor (Unit B): the manager-side adapter that drives the ONE
+ * shared core saga (`@cotal-ai/core` lifecycle-saga) over a direct-KV
+ * {@link LifecycleStateTransport}, plus the static executor's OWN orchestration — the durable
+ * slot mapping (F3 outer spawn intent + the F5-bind alias -> (owner, actor, uid) join), the
+ * static credential-ledger rows, and the F1 terminal sequence.
+ *
+ * Three-way split (the Unit B design note, panel-locked): the key/value GRAMMAR lives in core
+ * `lifecycle-state.ts`; the CAS SEQUENCING is the shared core saga this module DELEGATES to
+ * (never a hand-ordered local copy); the barrier ORCHESTRATION here is the static executor's
+ * own (revoke from the slot's recorded credentialIds, best-effort eviction = the child process
+ * kill the manager already did, footprint cleanup via the manager's deprovision hooks).
+ *
+ * F5-bind (the F4 restatement): the wire AUTHORITY coordinate is the incarnation-unique nkey
+ * (`actor`); the ALIAS is routing only, protected by the name-keyed slot row + uid reservation +
+ * the manager's freeSlot hold — never by the head CAS alone (the head is principal-keyed).
+ */
+import { EpEnvelopeError, staticSlotKey, parseStaticSlotRow, credRowKey, parseLedgerRow, SOURCE_ROOT, createRecordEntry, updateRecordEntry, runActivationSagaAtUid, resumeActivationSaga, gateObserve, gateFreeze, gateRetire, headCandidate, headBeginRetirement, headCompleteRetirement, } from "@cotal-ai/core";
+const enc = new TextEncoder();
+/** The direct-KV transport over the two authority stores, bound per lifecycle OPERATION on an
+ *  ephemeral, key-pinned `lifecycle-executor` connection (the manager mints it; see
+ *  `withLifecycleExecutor`). Mirrors the auth implementation's sealed `transportOf` — a
+ *  transport carries no sequencing decisions of its own. */
+export function staticLifecycleTransport(recordsKv, authKv) {
+    const entryOf = (e) => e === null ? undefined : { value: e.value, revision: e.revision, operation: e.operation };
+    return {
+        getRecord: async (key) => entryOf(await recordsKv.get(key)),
+        createRecord: (key, value) => createRecordEntry(recordsKv, key, value),
+        updateRecord: (key, value, rev) => updateRecordEntry(recordsKv, key, value, rev),
+        getAuth: async (key) => entryOf(await authKv.get(key)),
+        putAuth: (key, payload, rev) => authKv.put(key, payload, { previousSeq: rev }),
+    };
+}
+/** Read one slot row (DEL/PURGE marker = corruption, never absence — supervision state is
+ *  CASed over, never deleted). */
+export async function readStaticSlot(t, owner, alias) {
+    const key = staticSlotKey(owner, alias);
+    const entry = await t.getRecord(key);
+    if (!entry)
+        return undefined;
+    if (entry.operation !== "PUT")
+        throw new EpEnvelopeError("failed-precondition", `the static slot row ${key} carries a ${entry.operation} marker; a slot row is never deleted (corruption, not absence)`);
+    return { row: parseStaticSlotRow(entry.value, key), revision: entry.revision };
+}
+/** Persist the F3 durable OUTER spawn intent — phase `provisioning`, written BEFORE the head
+ *  activation so a crash between them leaves a discoverable coordinate (the boot sweep or the
+ *  next same-alias spawn re-drives it). Create-only for a virgin alias; a CAS over the RETIRED
+ *  predecessor row for a reused alias; anything else is a live/terminalizing/crashed slot and
+ *  REFUSES loudly (the caller resolves it first — resume or terminal, never silent adoption). */
+export async function writeStaticSlotIntent(t, row) {
+    const key = staticSlotKey(row.owner, row.alias);
+    const intent = { ...row, phase: "provisioning", credentialIds: [] };
+    const existing = await readStaticSlot(t, row.owner, row.alias);
+    if (existing === undefined)
+        return { revision: await t.createRecord(key, intent) };
+    if (existing.row.phase !== "retired")
+        throw new EpEnvelopeError("failed-precondition", `the static slot for "${row.owner}/${row.alias}" is ${existing.row.phase} at uid ${existing.row.lifecycleUid}; a new spawn intent may only replace a RETIRED slot - resolve the standing slot first (resume its provisioning or drive its terminal)`);
+    return { revision: await t.updateRecord(key, intent, existing.revision) };
+}
+/** CAS a slot row to a new phase/content at its observed revision. */
+export async function casStaticSlot(t, row, revision) {
+    return t.updateRecord(staticSlotKey(row.owner, row.alias), row, revision);
+}
+/** Record a credentialId on the slot BEFORE its ledger row is appended and BEFORE the cred is
+ *  minted (the crash-safe order: slot record -> ledger row -> mint/write; a credential never
+ *  exists without its id recorded and its row appended first). */
+export async function recordSlotCredential(t, owner, alias, lifecycleUid, credentialId) {
+    const slot = await readStaticSlot(t, owner, alias);
+    if (slot === undefined || slot.row.lifecycleUid !== lifecycleUid)
+        throw new EpEnvelopeError("failed-precondition", `the static slot for "${owner}/${alias}" ${slot === undefined ? "does not exist" : `is at uid ${slot.row.lifecycleUid}`}, not uid ${lifecycleUid}; a credential is recorded only on its own incarnation's slot`);
+    if (slot.row.phase === "terminalizing" || slot.row.phase === "retired")
+        throw new EpEnvelopeError("failed-precondition", `the static slot for "${owner}/${alias}" is ${slot.row.phase}; no credential is minted after terminalizing (F5(b))`);
+    if (slot.row.credentialIds.includes(credentialId))
+        return; // crash-resume idempotence
+    await casStaticSlot(t, { ...slot.row, credentialIds: [...slot.row.credentialIds, credentialId] }, slot.revision);
+}
+/** Append this incarnation's credential-ledger row (`cred.<uid>.<credId>`, state `active`,
+ *  lineage `root` — the manager's seed IS the root authority in static mode). Create-only;
+ *  an existing SAME row is crash-resume idempotence, anything else refuses. */
+export async function appendStaticCredentialRow(t, args) {
+    const key = credRowKey(args.lifecycleUid, args.credentialId);
+    const row = {
+        credentialId: args.credentialId,
+        holderPrincipal: args.holderPrincipal,
+        lifecycleUid: args.lifecycleUid,
+        sourceChain: [SOURCE_ROOT],
+        state: "active",
+        exp: args.exp,
+    };
+    const existing = await t.getAuth(key);
+    if (existing !== undefined) {
+        if (existing.operation !== "PUT")
+            throw new EpEnvelopeError("failed-precondition", `the ledger row ${key} carries a ${existing.operation} marker; a ledger row is never deleted (SPEC 13.12)`);
+        const cur = parseLedgerRow(existing.value, key);
+        if (cur.holderPrincipal === args.holderPrincipal && cur.state === "active")
+            return; // our own crash-resume
+        throw new EpEnvelopeError("already-exists", `the ledger row ${key} already exists (holder ${cur.holderPrincipal}, state ${cur.state}); a credentialId is never re-issued (SPEC 13.1)`);
+    }
+    await t.putAuth(key, enc.encode(JSON.stringify(row)), 0);
+}
+/** The static terminal's B1 revoke: CAS every recorded row `active -> revoked`. Enumeration is
+ *  the SLOT's recorded credentialIds (recorded before every mint), never a store listing. An
+ *  ABSENT row is the legitimate crash window (id recorded, mint never reached) — no credential
+ *  exists for it, logged and skipped; a revoked row is idempotence. */
+export async function revokeStaticCredentialRows(t, lifecycleUid, credentialIds, log) {
+    for (const id of credentialIds) {
+        const key = credRowKey(lifecycleUid, id);
+        const entry = await t.getAuth(key);
+        if (entry === undefined) {
+            log(`ledger row ${key} absent at revoke: the id was recorded but its mint never completed (crash window); no credential exists for it`);
+            continue;
+        }
+        if (entry.operation !== "PUT")
+            throw new EpEnvelopeError("failed-precondition", `the ledger row ${key} carries a ${entry.operation} marker; a ledger row is never deleted (SPEC 13.12)`);
+        const row = parseLedgerRow(entry.value, key);
+        if (row.state === "revoked")
+            continue;
+        await t.putAuth(key, enc.encode(JSON.stringify({ ...row, state: "revoked" })), entry.revision);
+    }
+}
+/** The static ACTIVATION: F3 intent FIRST (durable outer spawn intent, phase `provisioning`),
+ *  then the SHARED core activation saga at the spawn's uid (reserve -> gate frozen -> head CAS
+ *  -> reopen LAST). Returns the slot revision the spawn path later CASes to `active` once the
+ *  managed row owns the slot. */
+export async function activateStaticLifecycle(t, args) {
+    const { revision } = await writeStaticSlotIntent(t, {
+        owner: args.owner,
+        alias: args.alias,
+        actor: args.actor,
+        lifecycleUid: args.lifecycleUid,
+        managerInstance: args.managerInstance,
+        ownerInstanceId: args.ownerInstanceId,
+    });
+    await runActivationSagaAtUid(t, { owner: args.owner, actor: args.actor, lifecycleUid: args.lifecycleUid, managerInstance: args.managerInstance });
+    return { slotRevision: revision };
+}
+/** The static TERMINAL (F1, the (b2) order): freeze-under-the-retirement-op -> head
+ *  `active -> retiring` -> B1 ledger revoke -> cleanup (the injected footprint teardown; the
+ *  process kill — static "eviction" — already happened on the manager's stop path) -> gate
+ *  `frozen -> retired` -> head `retiring -> retired` LAST -> slot `retired` (the alias frees).
+ *  Every gate/head step DELEGATES to the shared core saga; recovery recognizes a SAME-OP
+ *  terminal gate and finishes the head (the lost-ack alias wedge the panel closed).
+ *
+ *  Total over partial durable state: an alias whose activation never reached the saga (slot
+ *  `provisioning`, no gate) terminalizes by slot alone; a crashed activation frozen by its own
+ *  activation op is terminalized THROUGH that op (gateRetire is op-pinned) — the exact-op static
+ *  retirement F3 requires. */
+export async function runStaticTerminal(t, args, hooks) {
+    const slot = await readStaticSlot(t, args.owner, args.alias);
+    if (slot === undefined)
+        throw new EpEnvelopeError("failed-precondition", `no static slot exists for "${args.owner}/${args.alias}"; nothing to terminalize`);
+    if (slot.row.lifecycleUid !== args.lifecycleUid)
+        throw new EpEnvelopeError("failed-precondition", `the static slot for "${args.owner}/${args.alias}" is at uid ${slot.row.lifecycleUid}, not ${args.lifecycleUid}; a terminal never addresses another incarnation (SPEC 13.1)`);
+    if (slot.row.phase === "retired")
+        return "retired"; // completed terminal, idempotent
+    // Latch the DURABLE terminal intent first: after this CAS the slot can never mint again
+    // (recordSlotCredential refuses terminalizing), the exact window the F5 renewal gate needs.
+    let slotRevision = slot.revision;
+    if (slot.row.phase !== "terminalizing")
+        slotRevision = await casStaticSlot(t, { ...slot.row, phase: "terminalizing" }, slot.revision);
+    const gate = await gateObserve(t, args.lifecycleUid);
+    if (gate === undefined) {
+        // Crash before the saga's first durable write (or before gate creation): only the intent
+        // (and possibly the burned uid reservation) exists. No head to retire; settle the slot.
+        const head = await headCandidate(t, args.owner, args.actor);
+        if (head !== undefined && head.mapping.lifecycleUid === args.lifecycleUid)
+            throw new EpEnvelopeError("internal", `the head for "${args.owner}/${args.actor}" names uid ${args.lifecycleUid} but its gate does not exist; an active head without a gate is corruption (SPEC 13.1)`);
+        await revokeStaticCredentialRows(t, args.lifecycleUid, slot.row.credentialIds, hooks.log);
+        await hooks.cleanup();
+        await casStaticSlot(t, { ...slot.row, phase: "retired" }, slotRevision);
+        return "retired";
+    }
+    if (gate.row.state === "frozen" && gate.row.op?.kind === "activation") {
+        // A crashed ACTIVATION. Two durable shapes, decided by the head (§13.1: the saga writes the
+        // head BEFORE its reopen):
+        const head = await headCandidate(t, args.owner, args.actor);
+        if (head !== undefined && head.mapping.state === "active" && head.mapping.lifecycleUid === args.lifecycleUid) {
+            // The head won; only the reopen is missing. FINISH the activation under ITS OWN op (the
+            // shared resume), then retire the now-live lifecycle normally below.
+            await resumeActivationSaga(t, { owner: args.owner, actor: args.actor, lifecycleUid: args.lifecycleUid, opId: gate.row.op.opId });
+        }
+        else {
+            // The head never won: burn the uid THROUGH the activation's own op (op-pinned exact-op
+            // static retirement), then settle the slot — there is no head to retire.
+            await gateRetire(t, { lifecycleUid: args.lifecycleUid, revision: gate.revision, opId: gate.row.op.opId });
+            await revokeStaticCredentialRows(t, args.lifecycleUid, slot.row.credentialIds, hooks.log);
+            await hooks.cleanup();
+            const cur = await readStaticSlot(t, args.owner, args.alias);
+            if (cur !== undefined && cur.row.lifecycleUid === args.lifecycleUid && cur.row.phase !== "retired")
+                await casStaticSlot(t, { ...cur.row, phase: "retired" }, cur.revision);
+            return "retired";
+        }
+    }
+    else if (gate.row.state === "frozen" && gate.row.op?.kind !== "retirement") {
+        throw new EpEnvelopeError("failed-precondition", `the issuance gate for ${args.lifecycleUid} is frozen by a ${gate.row.op?.kind ?? "<unknown>"} (op ${gate.row.op?.opId ?? "<none>"}); a foreign barrier is in flight - refuse (SPEC 13.1)`);
+    }
+    else if (gate.row.state === "frozen" && gate.row.op?.opId !== args.opId) {
+        throw new EpEnvelopeError("failed-precondition", `the issuance gate for ${args.lifecycleUid} is frozen by retirement op ${gate.row.op?.opId ?? "<none>"}, not ${args.opId}; one retirement at a time (SPEC 13.1)`);
+    }
+    // Freeze under OUR retirement op if the gate is open (fresh terminal, or the just-finished
+    // activation resume). A gate frozen by our op (crash-resume) or already terminal (same-op
+    // recovery, verified below) passes through.
+    const gAfter = await gateObserve(t, args.lifecycleUid);
+    if (gAfter === undefined)
+        throw new EpEnvelopeError("internal", `the issuance gate for ${args.lifecycleUid} vanished mid-terminal; a gate is never deleted (SPEC 13.12)`);
+    if (gAfter.row.state === "open")
+        await gateFreeze(t, { lifecycleUid: args.lifecycleUid, revision: gAfter.revision, op: { opId: args.opId, kind: "retirement" } });
+    // Head containment: `active -> retiring` under our op (idempotent for our own crash-resume;
+    // a foreign uid or a foreign retiring op refuses inside the shared step).
+    const headNow = await headCandidate(t, args.owner, args.actor);
+    if (headNow === undefined)
+        throw new EpEnvelopeError("internal", `the head for "${args.owner}/${args.actor}" is absent while its gate exists past activation; corruption (SPEC 13.1)`);
+    if (headNow.mapping.lifecycleUid !== args.lifecycleUid)
+        throw new EpEnvelopeError("failed-precondition", `the head for "${args.owner}/${args.actor}" names uid ${headNow.mapping.lifecycleUid}, not ${args.lifecycleUid}; foreign movement - refuse (SPEC 13.1)`);
+    if (headNow.mapping.state !== "retired")
+        await headBeginRetirement(t, { owner: args.owner, actor: args.actor, lifecycleUid: args.lifecycleUid, opId: args.opId });
+    await revokeStaticCredentialRows(t, args.lifecycleUid, slot.row.credentialIds, hooks.log);
+    await hooks.cleanup();
+    // The terminal tail, in the (b2) order: gate frozen->retired FIRST (retains the opId, the
+    // recovery coordinate), head retiring->retired LAST (drops the op; the alias frees only now).
+    // gateRetire is called UNCONDITIONALLY: on a frozen gate it terminalizes; on an already-retired
+    // gate it is SAME-OP idempotent and refuses a foreign terminal (the op-pin is the verification).
+    const gNow = await gateObserve(t, args.lifecycleUid);
+    if (gNow === undefined)
+        throw new EpEnvelopeError("internal", `the issuance gate for ${args.lifecycleUid} vanished mid-terminal; a gate is never deleted (SPEC 13.12)`);
+    await gateRetire(t, { lifecycleUid: args.lifecycleUid, revision: gNow.revision, opId: args.opId });
+    const head = await headCandidate(t, args.owner, args.actor);
+    if (head !== undefined && head.mapping.lifecycleUid === args.lifecycleUid && head.mapping.state !== "retired")
+        await headCompleteRetirement(t, { owner: args.owner, actor: args.actor, lifecycleUid: args.lifecycleUid, opId: args.opId });
+    const cur = await readStaticSlot(t, args.owner, args.alias);
+    if (cur === undefined)
+        throw new EpEnvelopeError("internal", `the static slot for "${args.owner}/${args.alias}" vanished mid-terminal; a slot row is never deleted`);
+    if (cur.row.lifecycleUid === args.lifecycleUid && cur.row.phase !== "retired")
+        await casStaticSlot(t, { ...cur.row, phase: "retired" }, cur.revision);
+    return "retired";
+}
+/** The boot-sweep resume decision, TOTAL over the phase enum (F3): what the manager must do
+ *  with a durable slot it did not adopt from a live inventory. */
+export function planStaticSlotResume(row, adopted) {
+    switch (row.phase) {
+        case "retired":
+            return "none";
+        case "provisioning":
+        case "terminalizing":
+            // A crashed spawn (its process never joined) or a crashed terminal: both re-drive the
+            // exact-op terminal (runStaticTerminal is total over the partial durable states).
+            return "drive-terminal";
+        case "active":
+            // `adopted` is genuine live membership (the manager holds this incarnation as a managed
+            // agent). Adopted -> the live process owns it, leave it. NOT adopted -> the process is gone
+            // (a non-preserving restart, or an orphan the resume did not claim): the incarnation is
+            // dead, terminalize. The CALLER supplies `adopted` correctly per sweep: a boot sweep with a
+            // resume pending DEFERS active slots (adoption has not run yet) rather than passing a false
+            // adopted; the post-adoption sweep passes true membership.
+            return adopted ? "none" : "drive-terminal";
+        default: {
+            const never = row.phase;
+            throw new EpEnvelopeError("internal", `unhandled static slot phase ${String(never)}; the resume table is total by construction (F3)`);
+        }
+    }
+}
+//# sourceMappingURL=static-lifecycle.js.map

package/dist/static-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-lifecycle.js","sourceRoot":"","sources":["../src/static-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EACL,eAAe,EAMf,aAAa,EACb,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,oBAAoB,EACpB,WAAW,EACX,UAAU,EACV,UAAU,EACV,aAAa,EACb,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AAGxB,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAE9B;;;4DAG4D;AAC5D,MAAM,UAAU,wBAAwB,CAAC,SAAa,EAAE,MAAU;IAChE,MAAM,OAAO,GAAG,CAAC,CAAoE,EAAgC,EAAE,CACrH,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;IAC5F,OAAO;QACL,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3D,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC;QACtE,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC;QAChF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtD,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED;kCACkC;AAClC,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,CAA0B,EAC1B,KAAa,EACb,KAAa;IAEb,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK;QAC3B,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,uBAAuB,GAAG,cAAc,KAAK,CAAC,SAAS,gEAAgE,CAAC,CAAC;IAC5K,OAAO,EAAE,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;AACjF,CAAC;AAED;;;;iGAIiG;AACjG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,CAA0B,EAC1B,GAA0D;IAE1D,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,MAAM,GAAyB,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAC1F,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;IACnF,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS;QAClC,MAAM,IAAI,eAAe,CACvB,qBAAqB,EACrB,wBAAwB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,QAAQ,QAAQ,CAAC,GAAG,CAAC,KAAK,WAAW,QAAQ,CAAC,GAAG,CAAC,YAAY,wIAAwI,CACrP,CAAC;IACJ,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,CAA0B,EAC1B,GAAyB,EACzB,QAAgB;IAEhB,OAAO,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC5E,CAAC;AAED;;kEAEkE;AAClE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,CAA0B,EAC1B,KAAa,EACb,KAAa,EACb,YAAoB,EACpB,YAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,KAAK,YAAY;QAC9D,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,wBAAwB,KAAK,IAAI,KAAK,KAAK,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,aAAa,YAAY,+DAA+D,CAAC,CAAC;IACpQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS;QACpE,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,wBAAwB,KAAK,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,KAAK,uDAAuD,CAAC,CAAC;IACxK,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,CAAC,2BAA2B;IACtF,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;AACnH,CAAC;AAED;;+EAE+E;AAC/E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,CAA0B,EAC1B,IAA0F;IAE1F,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAwB;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK;YAC9B,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,kBAAkB,GAAG,cAAc,QAAQ,CAAC,SAAS,qDAAqD,CAAC,CAAC;QAC/J,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,GAAG,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,uBAAuB;QAC3G,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,kBAAkB,GAAG,2BAA2B,GAAG,CAAC,eAAe,WAAW,GAAG,CAAC,KAAK,kDAAkD,CAAC,CAAC;IACzL,CAAC;IACD,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;uEAGuE;AACvE,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,CAA0B,EAC1B,YAAoB,EACpB,aAAgC,EAChC,GAA2B;IAE3B,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,GAAG,CAAC,cAAc,GAAG,iHAAiH,CAAC,CAAC;YACxI,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK;YAC3B,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,kBAAkB,GAAG,cAAc,KAAK,CAAC,SAAS,qDAAqD,CAAC,CAAC;QAC5J,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QACtC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED;;;iCAGiC;AACjC,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,CAA0B,EAC1B,IAA6H;IAE7H,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE;QAClD,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IAClJ,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;;8BAU8B;AAC9B,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,CAA0B,EAC1B,IAAyF,EACzF,KAAoE;IAEpE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,IAAI,KAAK,SAAS;QACpB,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,8BAA8B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,2BAA2B,CAAC,CAAC;IACtI,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;QAC7C,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,wBAAwB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,GAAG,CAAC,YAAY,SAAS,IAAI,CAAC,YAAY,8DAA8D,CAAC,CAAC;IACjO,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,CAAC,iCAAiC;IACrF,wFAAwF;IACxF,4FAA4F;IAC5F,IAAI,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;IACjC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,eAAe;QACpC,YAAY,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,yFAAyF;QACzF,wFAAwF;QACxF,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;YACvE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,iBAAiB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,YAAY,uFAAuF,CAAC,CAAC;QAC1M,MAAM,0BAA0B,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1F,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;QACtE,4FAA4F;QAC5F,2BAA2B;QAC3B,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7G,wFAAwF;YACxF,qEAAqE;YACrE,MAAM,oBAAoB,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACnI,CAAC;aAAM,CAAC;YACN,uFAAuF;YACvF,yEAAyE;YACzE,MAAM,UAAU,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1G,MAAM,0BAA0B,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1F,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS;gBAChG,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzE,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,KAAK,YAAY,EAAE,CAAC;QAC7E,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,yBAAyB,IAAI,CAAC,YAAY,mBAAmB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,IAAI,WAAW,QAAQ,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,IAAI,QAAQ,wDAAwD,CAAC,CAAC;IAC/O,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1E,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,yBAAyB,IAAI,CAAC,YAAY,+BAA+B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,IAAI,QAAQ,SAAS,IAAI,CAAC,IAAI,wCAAwC,CAAC,CAAC;IACrN,CAAC;IACD,2FAA2F;IAC3F,0FAA0F;IAC1F,4CAA4C;IAC5C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,SAAS;QACtB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,yBAAyB,IAAI,CAAC,YAAY,8DAA8D,CAAC,CAAC;IAClJ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,MAAM;QAC7B,MAAM,UAAU,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IACnI,4FAA4F;IAC5F,0EAA0E;IAC1E,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,OAAO,KAAK,SAAS;QACvB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,iBAAiB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,2EAA2E,CAAC,CAAC;IAC9J,IAAI,OAAO,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;QACpD,MAAM,IAAI,eAAe,CAAC,qBAAqB,EAAE,iBAAiB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,eAAe,OAAO,CAAC,OAAO,CAAC,YAAY,SAAS,IAAI,CAAC,YAAY,yCAAyC,CAAC,CAAC;IAC5M,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;QACrC,MAAM,mBAAmB,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3H,MAAM,0BAA0B,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1F,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;IACtB,0FAA0F;IAC1F,8FAA8F;IAC9F,gGAAgG;IAChG,iGAAiG;IACjG,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,SAAS;QACpB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,yBAAyB,IAAI,CAAC,YAAY,8DAA8D,CAAC,CAAC;IAClJ,MAAM,UAAU,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnG,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;QAC3G,MAAM,sBAAsB,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9H,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,SAAS;QACnB,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,wBAAwB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,sDAAsD,CAAC,CAAC;IAChJ,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS;QAC3E,MAAM,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,oBAAoB,CAAC,GAAyB,EAAE,OAAgB;IAC9E,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC;QAChB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe;YAClB,sFAAsF;YACtF,kFAAkF;YAClF,OAAO,gBAAgB,CAAC;QAC1B,KAAK,QAAQ;YACX,wFAAwF;YACxF,4FAA4F;YAC5F,wFAAwF;YACxF,4FAA4F;YAC5F,4FAA4F;YAC5F,2DAA2D;YAC3D,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC7C,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,KAAK,GAAU,GAAG,CAAC,KAAK,CAAC;YAC/B,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,+BAA+B,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACxI,CAAC;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/manager",
-  "description": "Cotal agent supervisor: spawns and manages mesh nodes via a pluggable runtime (pty/tmux/cmux/orca).",
-  "version": "0.16.0",
+  "description": "Cotal agent supervisor: spawns and manages mesh nodes via a pluggable runtime (pty/tmux/cmux/orca/herdr).",
+  "version": "0.18.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -27,14 +27,17 @@
     "ws": "^8.21.0",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@cotal-ai/workspace": "0.16.0",
-    "@cotal-ai/core": "0.16.0"
+    "@cotal-ai/core": "0.18.0",
+    "@cotal-ai/workspace": "0.18.0"
   },
   "devDependencies": {
     "@nats-io/jetstream": "^3.4.0",
+    "@nats-io/kv": "^3.4.0",
+    "@nats-io/nats-core": "^3.4.0",
     "@nats-io/transport-node": "^3.4.0",
     "@types/ws": "^8.18.1",
-    "@cotal-ai/connector-core": "0.16.0"
+    "esbuild": "^0.28.1",
+    "@cotal-ai/connector-core": "0.18.0"
   },
   "files": [
     "dist"
@@ -45,6 +48,7 @@
   "scripts": {
     "test": "tsx smoke/start-model-preflight.smoke.ts && tsx smoke/start-overrides.smoke.ts && tsx smoke/preserve-state.smoke.ts",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "build": "tsc -p tsconfig.json && node -e \"const fs=require('node:fs'); fs.rmSync('dist/console', { recursive: true, force: true }); fs.cpSync('src/console', 'dist/console', { recursive: true })\""
+    "build": "tsc -p tsconfig.json && node -e \"const fs=require('node:fs'); fs.rmSync('dist/console', { recursive: true, force: true }); fs.cpSync('src/console', 'dist/console', { recursive: true })\" && pnpm run build:console-bundle",
+    "build:console-bundle": "esbuild src/console-session-entry.ts --bundle --format=iife --platform=browser --target=es2020 --alias:node:crypto=./src/console-crypto-shim.ts --outfile=dist/console/session-bundle.js && node scripts/console-bundle-loadtest.mjs"
   }
 }