Sealtun

First Decision

Classify the request before answering or editing:

• User operation: install, shell completion, TUI/console, guided init, login, up, discover local ports, expose HTTPS, remote HTTP upstream targets, SSH, or generic TCP, access cluster-internal Services/Pods with connect, build service-level cross-region Mesh, generate protocol templates, secure public HTTP traffic, show/set policy, audit access, create/list/revoke/rotate temporary share links, rotate server secret, plan/add/verify a custom domain, inspect state, watch status, view or tune resources, stop/start/resume, clean up, or export YAML. Read references/cli.md.
• Declarative configuration: sealtun.yaml, apply -f, diff -f, export, multi-tunnel management, stable names, ttl, Pod resources, HTTPS access policies, SSH tunnel declarations, or generic TCP tunnel declarations. Read references/declarative.md.
• Troubleshooting: login/profile mismatch, daemon/session issues, local port discovery/failures, SSH/TCP direct NodePort problems, remote Kubernetes problems, resource lists/resource occupancy, DNS, Ingress, certificate, logs, metrics, or events. Read references/troubleshooting.md.
• Skill maintenance or quality review: trigger precision, workflow scoring, or regression prompts for this skill. Read references/evals.md.

If the request is inside the Sealtun repository, prefer the current source tree, README, and QuickStart docs over these references when they conflict. Use rg to inspect Cobra commands and flags before changing CLI usage guidance.

Stability Routing

• Prefer Stable commands for normal guidance and automation.
• Current Alpha entrypoints are init, tui/console, connect, mesh, ssh connect, and the standalone discover, template, export, events, metrics, resources, and watch commands. Their capabilities remain available, but their interfaces may change or be removed without backward-compatibility guarantees. State this briefly before recommending an Alpha path.
• repair, domain set, and top-level disconnect are Deprecated compatibility commands. Do not recommend them for new usage; use doctor <id> --fix, domain add, and connect disconnect.
• Alpha does not mean broken or incomplete. Use an Alpha feature when it uniquely matches the user's explicit request, then apply the same preflight, mutation, and verification rules as Stable features.