cotal-ai 0.83.0 → 0.84.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cotal-ai",
-  "version": "0.83.0",
+  "version": "0.84.0",
   "description": "Cotal — lateral agent coordination over NATS. Run `npx cotal-ai` for the CLI.",
   "license": "Apache-2.0",
   "keywords": [
@@ -33,24 +33,24 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@cotal-ai/auth": "0.83.0",
-    "@cotal-ai/cli": "0.83.0",
-    "@cotal-ai/connector-core": "0.83.0",
-    "@cotal-ai/core": "0.83.0",
-    "@cotal-ai/delivery": "0.83.0",
-    "@cotal-ai/manager": "0.83.0",
-    "@cotal-ai/runtime": "0.83.0",
-    "@cotal-ai/workspace": "0.83.0"
+    "@cotal-ai/auth": "0.84.0",
+    "@cotal-ai/cli": "0.84.0",
+    "@cotal-ai/connector-core": "0.84.0",
+    "@cotal-ai/core": "0.84.0",
+    "@cotal-ai/delivery": "0.84.0",
+    "@cotal-ai/manager": "0.84.0",
+    "@cotal-ai/runtime": "0.84.0",
+    "@cotal-ai/workspace": "0.84.0"
   },
   "devDependencies": {
-    "@cotal-ai/connector-claude-code": "0.83.0",
-    "@cotal-ai/connector-codex": "0.83.0",
-    "@cotal-ai/connector-hermes": "0.83.0",
-    "@cotal-ai/connector-jcode": "0.83.0",
-    "@cotal-ai/connector-opencode": "0.83.0",
-    "@cotal-ai/pi": "0.83.0",
+    "@cotal-ai/connector-claude-code": "0.84.0",
+    "@cotal-ai/connector-codex": "0.84.0",
+    "@cotal-ai/connector-hermes": "0.84.0",
+    "@cotal-ai/connector-jcode": "0.84.0",
+    "@cotal-ai/connector-opencode": "0.84.0",
+    "@cotal-ai/pi": "0.84.0",
     "@cotal-ai/smoke-kit": "0.0.0",
-    "@cotal-ai/web": "0.83.0",
+    "@cotal-ai/web": "0.84.0",
     "@nats-io/jetstream": "^3.4.0",
     "@nats-io/transport-node": "^3.4.0",
     "typescript": "^5.9.3"

package/seeded-connectors/claude/dist/extension.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgD,KAAK,SAAS,EAAoC,MAAM,gBAAgB,CAAC;AAQhI;;;;;;;;;4FAS4F;AAC5F,eAAO,MAAM,oBAAoB,8/DA4EvB,CAAC;AAgDX;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,SA4M7B,CAAC"}
+{"version":3,"file":"extension.d.ts","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgD,KAAK,SAAS,EAAoC,MAAM,gBAAgB,CAAC;AAShI;;;;;;;;;4FAS4F;AAC5F,eAAO,MAAM,oBAAoB,8/DA4EvB,CAAC;AAgDX;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,SAwM7B,CAAC"}

package/seeded-connectors/claude/dist/index.js

@@ -7,13 +7,13 @@ var __export = (target, all) => {
 // src/setup.ts
 import { spawn, spawnSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
-import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join as join2 } from "node:path";
+import { cpSync, existsSync as existsSync2, mkdirSync, readdirSync, readFileSync as readFileSync2, renameSync, rmSync, writeFileSync } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { dirname, join as join3 } from "node:path";
 import { fileURLToPath } from "node:url";
 import {
   globalConfigPath,
-  mcpServerProblem,
+  mcpServerProblem as mcpServerProblem2,
   registry as registry3
 } from "@cotal-ai/core";
 
@@ -14908,46 +14908,67 @@ var NO_TOOL_ARGS = external_exports.strictObject({});
 // ../connector-core/dist/control.js
 var MAX_FRAME_BYTES = 1 << 20;
 
+// src/user-mcp.ts
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join as join2 } from "node:path";
+import { mcpServerProblem } from "@cotal-ai/core";
+function claudeUserMcpServers() {
+  const path = join2(process.env.CLAUDE_CONFIG_DIR?.trim() || homedir(), ".claude.json");
+  if (!existsSync(path)) return {};
+  let config2;
+  try {
+    config2 = JSON.parse(readFileSync(path, "utf8"));
+  } catch (e) {
+    throw new Error(`${path}: invalid JSON - ${e.message}`);
+  }
+  return config2?.mcpServers ?? {};
+}
+function claudeUserMcpEnvKeys() {
+  const valid = Object.fromEntries(Object.entries(claudeUserMcpServers()).filter(([name, spec]) => mcpServerProblem(name, spec) === void 0));
+  return mcpServerEnvKeys(valid);
+}
+
 // src/setup.ts
 var PACKAGE_ROOT = fileURLToPath(new URL("..", import.meta.url));
 var DOCS_URL = "https://github.com/Cotal-AI/Cotal/blob/main/docs/connect-claude.md";
 var MARKETPLACE = "cotal-mesh";
 function cotalHome() {
   if (process.env.COTAL_HOME) return process.env.COTAL_HOME;
-  if (process.platform === "win32" && process.env.LOCALAPPDATA) return join2(process.env.LOCALAPPDATA, "Cotal");
-  return join2(homedir(), ".cotal");
+  if (process.platform === "win32" && process.env.LOCALAPPDATA) return join3(process.env.LOCALAPPDATA, "Cotal");
+  return join3(homedir2(), ".cotal");
 }
 function marketplaceDir() {
-  return join2(cotalHome(), "claude-plugin");
+  return join3(cotalHome(), "claude-plugin");
 }
 function materialize(name, root, assets, version2) {
   const market = marketplaceDir();
   mkdirSync(market, { recursive: true });
-  const dest = join2(market, name);
+  const dest = join3(market, name);
   const staging = `${dest}.staging.${process.pid}`;
   const old = `${dest}.old.${process.pid}`;
   const orphans = readdirSync(market, { withFileTypes: true }).filter((entry) => entry.isDirectory() && (entry.name.startsWith(`${name}.old.`) || entry.name.startsWith(`${name}.staging.`))).map((entry) => entry.name);
-  if (!existsSync(dest)) {
+  if (!existsSync2(dest)) {
     const recoverable = orphans.find((entry) => entry.startsWith(`${name}.old.`));
-    if (recoverable) renameSync(join2(market, recoverable), dest);
+    if (recoverable) renameSync(join3(market, recoverable), dest);
   }
-  for (const entry of orphans) rmSync(join2(market, entry), { recursive: true, force: true });
+  for (const entry of orphans) rmSync(join3(market, entry), { recursive: true, force: true });
   let movedAside = false;
   let swapped = false;
   try {
     mkdirSync(staging, { recursive: true });
     for (const asset of assets) {
-      const destination = join2(staging, asset);
-      mkdirSync(join2(destination, ".."), { recursive: true });
-      cpSync(join2(root, asset), destination, { recursive: true, dereference: true });
+      const destination = join3(staging, asset);
+      mkdirSync(join3(destination, ".."), { recursive: true });
+      cpSync(join3(root, asset), destination, { recursive: true, dereference: true });
     }
     if (version2) {
-      const manifestPath = join2(staging, ".claude-plugin", "plugin.json");
-      const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+      const manifestPath = join3(staging, ".claude-plugin", "plugin.json");
+      const manifest = JSON.parse(readFileSync2(manifestPath, "utf8"));
       manifest.version = version2;
       writeFileSync(manifestPath, JSON.stringify(manifest, null, 2) + "\n");
     }
-    if (existsSync(dest)) {
+    if (existsSync2(dest)) {
       renameSync(dest, old);
       movedAside = true;
     }
@@ -14955,7 +14976,7 @@ function materialize(name, root, assets, version2) {
     swapped = true;
     if (movedAside) rmSync(old, { recursive: true, force: true });
   } catch (error51) {
-    if (movedAside && !swapped && !existsSync(dest) && existsSync(old)) renameSync(old, dest);
+    if (movedAside && !swapped && !existsSync2(dest) && existsSync2(old)) renameSync(old, dest);
     throw error51;
   } finally {
     rmSync(staging, { recursive: true, force: true });
@@ -14967,16 +14988,16 @@ function command(...args) {
   return { status: result.status, output: `${result.stdout ?? ""}${result.stderr ?? ""}`.trim() };
 }
 function marketplaceEntry(market, name) {
-  const manifest = JSON.parse(readFileSync(join2(market, name, ".claude-plugin", "plugin.json"), "utf8"));
+  const manifest = JSON.parse(readFileSync2(join3(market, name, ".claude-plugin", "plugin.json"), "utf8"));
   const description = typeof manifest.description === "string" ? manifest.description : void 0;
   return { name, source: `./${name}`, ...description ? { description } : {} };
 }
 function marketplaceManifest(market) {
-  const plugins = ["cotal", "cotal-skills"].filter((name) => existsSync(join2(market, name, ".claude-plugin", "plugin.json"))).map((name) => marketplaceEntry(market, name));
+  const plugins = ["cotal", "cotal-skills"].filter((name) => existsSync2(join3(market, name, ".claude-plugin", "plugin.json"))).map((name) => marketplaceEntry(market, name));
   return { name: MARKETPLACE, description: "Cotal for Claude Code", owner: { name: "Cotal" }, plugins };
 }
 function writeMarketplaceManifest(market) {
-  const path = join2(market, ".claude-plugin", "marketplace.json");
+  const path = join3(market, ".claude-plugin", "marketplace.json");
   mkdirSync(dirname(path), { recursive: true });
   writeFileSync(path, JSON.stringify(marketplaceManifest(market), null, 2) + "\n");
   return path;
@@ -15042,19 +15063,8 @@ function skillsRow(entries, { version: version2, skillsRemedy }) {
   if (match.version === version2) return row("ok", "current");
   return row("warn", `${typeof match.version === "string" ? `v${match.version} \u2260 v${version2} \xB7 ` : ""}stale \xB7 ${skillsRemedy}`);
 }
-function userServers() {
-  const path = join2(process.env.CLAUDE_CONFIG_DIR?.trim() || homedir(), ".claude.json");
-  if (!existsSync(path)) return {};
-  let config2;
-  try {
-    config2 = JSON.parse(readFileSync(path, "utf8"));
-  } catch (e) {
-    throw new Error(`${path}: invalid JSON - ${e.message}`);
-  }
-  return config2?.mcpServers ?? {};
-}
 function copyable(name, spec) {
-  if (mcpServerProblem(name, spec) !== void 0) return false;
+  if (mcpServerProblem2(name, spec) !== void 0) return false;
   const { env, headers } = spec;
   return [env, headers].every((values) => values === void 0 || Object.values(values).every((v) => v.replace(ENV_REFERENCE, "") === ""));
 }
@@ -15070,7 +15080,7 @@ var claudeSetupProvider = {
     context: [DOCS_URL],
     run() {
       for (const asset of ["dist/mcp.cjs", "dist/hook.cjs", ".claude-plugin/plugin.json", ".mcp.json", "hooks/hooks.json"])
-        if (!existsSync(join2(PACKAGE_ROOT, asset))) throw new Error(`plugin asset missing: ${join2(PACKAGE_ROOT, asset)}`);
+        if (!existsSync2(join3(PACKAGE_ROOT, asset))) throw new Error(`plugin asset missing: ${join3(PACKAGE_ROOT, asset)}`);
       materialize("cotal", PACKAGE_ROOT, [".claude-plugin", ".mcp.json", "hooks", "dist/mcp.cjs", "dist/hook.cjs"]);
       install("cotal", "local");
       return `cotal@${MARKETPLACE} (local scope)`;
@@ -15082,14 +15092,14 @@ var claudeSetupProvider = {
     explain: "Installs Cotal's authored skills as a Claude Code plugin.",
     context: [DOCS_URL],
     run({ skillsDir, version: version2, stateDir }) {
-      const manifestRoot = join2(PACKAGE_ROOT, "skills-plugin");
-      if (!existsSync(join2(manifestRoot, ".claude-plugin", "plugin.json"))) throw new Error("Claude skills plugin manifest is missing");
-      const payload = join2(stateDir, `.claude-skills-payload.${process.pid}`);
+      const manifestRoot = join3(PACKAGE_ROOT, "skills-plugin");
+      if (!existsSync2(join3(manifestRoot, ".claude-plugin", "plugin.json"))) throw new Error("Claude skills plugin manifest is missing");
+      const payload = join3(stateDir, `.claude-skills-payload.${process.pid}`);
       rmSync(payload, { recursive: true, force: true });
       try {
         mkdirSync(payload, { recursive: true });
-        cpSync(join2(manifestRoot, ".claude-plugin"), join2(payload, ".claude-plugin"), { recursive: true, dereference: true });
-        cpSync(skillsDir, join2(payload, "skills"), { recursive: true, dereference: true });
+        cpSync(join3(manifestRoot, ".claude-plugin"), join3(payload, ".claude-plugin"), { recursive: true, dereference: true });
+        cpSync(skillsDir, join3(payload, "skills"), { recursive: true, dereference: true });
         materialize("cotal-skills", payload, [".claude-plugin", "skills"], version2);
         install("cotal-skills", "user", version2);
         return `cotal-skills@${MARKETPLACE} (user scope)`;
@@ -15104,7 +15114,7 @@ var claudeSetupProvider = {
     explain: "A spawned Claude Code session gets the cotal tools plus the MCP servers your own sessions load. Each spawn starts its own copy of every shared server, so on a small machine remove the heavy ones from the cotal config or spawn with --share-tools none.",
     context: [DOCS_URL],
     run({ seed }) {
-      const installed = Object.entries(userServers());
+      const installed = Object.entries(claudeUserMcpServers());
       const shared = Object.fromEntries(installed.filter((entry) => copyable(...entry)));
       const left = installed.filter((entry) => !copyable(...entry)).map(([name]) => name);
       const path = globalConfigPath();
@@ -15145,30 +15155,30 @@ import { loadAgentFile as loadAgentFile2, registry as registry4, writeLaunchArti
 // src/carried.ts
 import { createHash as createHash2 } from "node:crypto";
 import { execFileSync } from "node:child_process";
-import { copyFileSync, lstatSync, mkdirSync as mkdirSync2, readdirSync as readdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { homedir as homedir2, hostname as hostname3 } from "node:os";
-import { join as join3 } from "node:path";
+import { copyFileSync, lstatSync, mkdirSync as mkdirSync2, readdirSync as readdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import { homedir as homedir3, hostname as hostname3 } from "node:os";
+import { join as join4 } from "node:path";
 var SEAT_PROJECT = "seat";
 var FORK_RECORD = "cotal-fork.json";
 var MIN_VERSION = [2, 1, 234];
 var MAX_TITLE = 1024;
 function configDir(env) {
-  return env.CLAUDE_CONFIG_DIR || join3(env.HOME || homedir2(), ".claude");
+  return env.CLAUDE_CONFIG_DIR || join4(env.HOME || homedir3(), ".claude");
 }
 function transcripts(env) {
-  const projects = join3(configDir(env), "projects");
+  const projects = join4(configDir(env), "projects");
   let dirs;
   try {
-    dirs = readdirSync2(projects, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => join3(projects, d.name));
+    dirs = readdirSync2(projects, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => join4(projects, d.name));
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
   }
-  return dirs.flatMap((dir) => readdirSync2(dir, { withFileTypes: true }).filter((f) => f.isFile() && f.name.endsWith(".jsonl")).map((f) => join3(dir, f.name)));
+  return dirs.flatMap((dir) => readdirSync2(dir, { withFileTypes: true }).filter((f) => f.isFile() && f.name.endsWith(".jsonl")).map((f) => join4(dir, f.name)));
 }
 function titleOf(path) {
   let title;
-  for (const line of readFileSync2(path, "utf8").split("\n")) {
+  for (const line of readFileSync3(path, "utf8").split("\n")) {
     try {
       const entry = JSON.parse(line);
       if (entry.type === "custom-title" && typeof entry.customTitle === "string") title = entry.customTitle;
@@ -15178,7 +15188,7 @@ function titleOf(path) {
   return title;
 }
 function sha256(path) {
-  return createHash2("sha256").update(readFileSync2(path)).digest("hex");
+  return createHash2("sha256").update(readFileSync3(path)).digest("hex");
 }
 var claudeResumeTranscript = {
   find(id, env) {
@@ -15221,14 +15231,14 @@ function refuseCarriedLaunch(binary, seatEnv) {
     );
 }
 function carriedForkRecord(home) {
-  return join3(home, FORK_RECORD);
+  return join4(home, FORK_RECORD);
 }
 function placeCarried(home, transcript, resume, cwd) {
-  writeFileSync2(join3(home, ".claude.json"), JSON.stringify({ hasCompletedOnboarding: true, projects: { [cwd]: { hasTrustDialogAccepted: true } } }), { mode: 384 });
+  writeFileSync2(join4(home, ".claude.json"), JSON.stringify({ hasCompletedOnboarding: true, projects: { [cwd]: { hasTrustDialogAccepted: true } } }), { mode: 384 });
   if (resume !== void 0) {
-    const dir = join3(home, "projects", SEAT_PROJECT);
+    const dir = join4(home, "projects", SEAT_PROJECT);
     mkdirSync2(dir, { recursive: true, mode: 448 });
-    copyFileSync(transcript, join3(dir, `${resume}.jsonl`));
+    copyFileSync(transcript, join4(dir, `${resume}.jsonl`));
   }
   return { CLAUDE_CONFIG_DIR: home, CLAUDE_CODE_PROJECT_DIR_NAME: SEAT_PROJECT, ...resume !== void 0 ? { COTAL_CLAUDE_CARRIED: resume } : {} };
 }
@@ -15321,6 +15331,7 @@ var CLAUDE_PROVIDER_KEYS = [
 var CHANNEL_REF = `server:${MCP_SERVER_NAME}`;
 var PLUGIN_ROOT = fileURLToPath2(new URL("..", import.meta.url));
 var MCP_CJS = resolve(PLUGIN_ROOT, "dist", "mcp.cjs");
+var CLAUDE_MCP_KEYS = ["ENABLE_CLAUDEAI_MCP_SERVERS", "ENABLE_TOOL_SEARCH", "MCP_TIMEOUT", "MCP_CONNECTION_NONBLOCKING"];
 function assertServableModel(model) {
   if (!model.includes("/") || model.startsWith("arn:")) return;
   throw new Error(
@@ -15351,9 +15362,11 @@ var claudeConnector = {
     if (opts.continueSession) throw new Error("claude connector does not support exact-session continuation");
     if (opts.variant) throw new Error("claude connector: model variants are not supported");
     const shared = opts.mcpServers ?? {};
+    const exclusive = opts.mcpServersExclusive === true || opts.carried !== void 0;
+    const nativeEnvKeys = exclusive ? [] : claudeUserMcpEnvKeys();
     const control = controlEndpoint(opts.space, opts.name);
     const env = {
-      ...launchEnv({ providerKeys: CLAUDE_PROVIDER_KEYS, mcpKeys: mcpServerEnvKeys(shared), envAllow: opts.envAllow }),
+      ...launchEnv({ providerKeys: CLAUDE_PROVIDER_KEYS, mcpKeys: [...mcpServerEnvKeys(shared), ...nativeEnvKeys, ...CLAUDE_MCP_KEYS], envAllow: opts.envAllow }),
       ...aclEnv(opts),
       // Creds, broker URL and the control token ride a 0600 file; only its path is exported, so the
       // shells, builds and third-party CLIs this session runs no longer inherit live authority.
@@ -15397,7 +15410,8 @@ var claudeConnector = {
     } else {
       mcpConfig = writeLaunchArtifact(artifacts, "cotal-mcp-", "mcp.json", JSON.stringify({ mcpServers }, null, 2));
     }
-    args.push("--strict-mcp-config", "--mcp-config", mcpConfig);
+    if (exclusive) args.push("--strict-mcp-config");
+    args.push("--mcp-config", mcpConfig);
     if (agentFile) env.COTAL_AGENT_FILE = agentFile;
     if (def?.persona) {
       args.push("--append-system-prompt-file", writeLaunchArtifact(artifacts, "cotal-claude-persona-", "persona.md", def.persona));