@cotal-ai/core 0.1.0

package/dist/streams.js

@@ -0,0 +1,97 @@
+import { jetstreamManager, AckPolicy, DeliverPolicy, RetentionPolicy, DiscardPolicy, StorageType, } from "@nats-io/jetstream";
+import { connect, credsAuthenticator, nanos } from "@nats-io/transport-node";
+import { Kvm } from "@nats-io/kv";
+import { spacePrefix, chatStream, dmStream, dmDurable, unicastSubject, taskStream, taskDurable, anycastSubject, presenceBucket, } from "./subjects.js";
+/** Default presence-bucket entry TTL (ms) — matches the endpoint's default liveness window. */
+const PRESENCE_TTL_MS = 6_000;
+/**
+ * Create (idempotently) the three backing streams for a space — CHAT (multicast backlog +
+ * history), DM (per-instance inboxes), TASK (anycast work queue).
+ *
+ * This is **privileged**: under auth mode `STREAM.CREATE` is denied to regular agents
+ * (streams are space infrastructure, not per-agent), so it runs once at setup
+ * (`cotal up`) or from a permissive endpoint. The single source of the stream
+ * definitions, shared by the endpoint and the setup path so they can't diverge.
+ */
+export async function createSpaceStreams(jsm, space) {
+    const p = spacePrefix(space);
+    await jsm.streams.add({
+        name: chatStream(space),
+        subjects: [`${p}.chat.>`],
+        retention: RetentionPolicy.Limits,
+        storage: StorageType.File,
+        max_msgs_per_subject: 1000, // capped per-channel backlog (buffer + history)
+        discard: DiscardPolicy.Old,
+    });
+    await jsm.streams.add({
+        name: dmStream(space),
+        subjects: [`${p}.inst.>`],
+        retention: RetentionPolicy.Limits,
+        storage: StorageType.File,
+    });
+    await jsm.streams.add({
+        name: taskStream(space),
+        subjects: [`${p}.svc.>`],
+        retention: RetentionPolicy.Workqueue,
+        storage: StorageType.File,
+    });
+}
+/**
+ * The DM inbox durable for an instance — ONE definition, used both by the privileged
+ * pre-create (manager/provisioner, auth mode) and the endpoint's open-mode self-create, so
+ * an idempotent re-add can never error on a config delta. The `filter_subject` binds the
+ * durable to inst.<id>.* — only the privileged creator sets it, which is the whole point:
+ * an agent can't create a durable filtered to someone else's inbox.
+ *
+ * `inactive_threshold` is set ONLY when the caller passes one — i.e. the open-mode
+ * self-create, where the agent owns the durable and a threshold cleanly retires its inbox
+ * after it departs. The privileged auth pre-create OMITS it: the agent BINDS-only and is
+ * denied CONSUMER.CREATE, so a threshold would retire the durable before a late/relaunched
+ * agent binds it, and the bind would then fail permanently ("consumer not found"). Persisting
+ * it is the price of bind-only; explicit cleanup on agent-stop is a follow-up.
+ */
+export function dmDurableConfig(space, id, opts = {}) {
+    const cfg = {
+        durable_name: dmDurable(id),
+        filter_subject: unicastSubject(space, id, "*"),
+        ack_policy: AckPolicy.Explicit,
+        ack_wait: nanos(opts.ackWaitMs ?? 60_000),
+        deliver_policy: DeliverPolicy.All,
+    };
+    if (opts.inactiveThresholdMs)
+        cfg.inactive_threshold = nanos(opts.inactiveThresholdMs);
+    return cfg;
+}
+/**
+ * The TASK work-queue durable for a role — ONE definition, shared by the privileged
+ * pre-create (auth mode) and the endpoint's open-mode self-create. The durable is shared
+ * across all instances of a role (queue group); the privileged creator sets the
+ * filter_subject to svc.<role>.* so an agent can't bind a consumer filtered to another
+ * role's queue (the same create-time-filter attack surface as DM). Idempotent per role.
+ */
+export function taskDurableConfig(space, role, opts = {}) {
+    return {
+        durable_name: taskDurable(role),
+        filter_subject: anycastSubject(space, role, "*"),
+        ack_policy: AckPolicy.Explicit,
+        ack_wait: nanos(opts.ackWaitMs ?? 60_000),
+    };
+}
+/** Connect with the given (privileged) creds, create the space's streams, and disconnect.
+ *  Used by `cotal up` to pre-create streams once at setup. */
+export async function setupSpaceStreams(opts) {
+    const nc = await connect({
+        servers: opts.servers,
+        authenticator: credsAuthenticator(new TextEncoder().encode(opts.creds)),
+    });
+    try {
+        await createSpaceStreams(await jetstreamManager(nc), opts.space);
+        // The presence KV bucket is a stream too — pre-create it so agents (denied KV
+        // stream-create) can open it. Idempotent.
+        await new Kvm(nc).create(presenceBucket(opts.space), { ttl: PRESENCE_TTL_MS });
+    }
+    finally {
+        await nc.drain();
+    }
+}
+//# sourceMappingURL=streams.js.map

package/dist/streams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streams.js","sourceRoot":"","sources":["../src/streams.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,eAAe,EACf,aAAa,EACb,WAAW,GAGZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,WAAW,EACX,UAAU,EACV,QAAQ,EACR,SAAS,EACT,cAAc,EACd,UAAU,EACV,WAAW,EACX,cAAc,EACd,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,+FAA+F;AAC/F,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAqB,EACrB,KAAa;IAEb,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QACpB,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC;QACvB,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;QACzB,SAAS,EAAE,eAAe,CAAC,MAAM;QACjC,OAAO,EAAE,WAAW,CAAC,IAAI;QACzB,oBAAoB,EAAE,IAAI,EAAE,gDAAgD;QAC5E,OAAO,EAAE,aAAa,CAAC,GAAG;KAC3B,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QACpB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC;QACrB,QAAQ,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;QACzB,SAAS,EAAE,eAAe,CAAC,MAAM;QACjC,OAAO,EAAE,WAAW,CAAC,IAAI;KAC1B,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;QACpB,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC;QACvB,QAAQ,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QACxB,SAAS,EAAE,eAAe,CAAC,SAAS;QACpC,OAAO,EAAE,WAAW,CAAC,IAAI;KAC1B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAa,EACb,EAAU,EACV,OAA6D,EAAE;IAE/D,MAAM,GAAG,GAA4B;QACnC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3B,cAAc,EAAE,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC;QAC9C,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QACzC,cAAc,EAAE,aAAa,CAAC,GAAG;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,mBAAmB;QAAE,GAAG,CAAC,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,IAAY,EACZ,OAA+B,EAAE;IAEjC,OAAO;QACL,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC;QAC/B,cAAc,EAAE,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC;QAChD,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;8DAC8D;AAC9D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAIvC;IACC,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,kBAAkB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KACxE,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,MAAM,gBAAgB,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,8EAA8E;QAC9E,0CAA0C;QAC1C,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;IACjF,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/subjects.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Subject naming — the routing half of the wire contract (v0).
+ *
+ *   cotal.<space>.chat.<channel>      multicast to a channel (dotted + hierarchical: team.backend, subscribe team.>)
+ *   cotal.<space>.svc.<service>       anycast to any one instance of a service (queue group)
+ *   cotal.<space>.inst.<instance>     unicast to one specific instance
+ *   cotal.<space>.ctl.<service>       control request/reply to a service (e.g. manager)
+ *   cotal.<space>.trace.<instance>    ambient lifecycle trace (later)
+ *   cotal.<space>.control.<instance>  control-plane commands (later)
+ *
+ * Presence lives in a JetStream KV bucket, not a subject (see presenceBucket()).
+ */
+/** Make a string safe to use as a single NATS subject token. */
+export declare function token(s: string): string;
+export declare const ROOT = "cotal";
+export declare function spacePrefix(space: string): string;
+/** Canonicalize a `mentions` list for the wire: trim, lowercase, drop empties, dedupe.
+ *  Returns `undefined` for an empty result so the field is omitted rather than sent as `[]`.
+ *  Presence-agnostic (no roster lookup) — validation lives in the connector. */
+export declare function normalizeMentions(mentions?: string[]): string[] | undefined;
+export declare function chatSubject(space: string, sender: string, channel: string): string;
+/** True if a channel names a concrete sub-channel (no `*`/`>`) — i.e. it can be
+ *  *published* to. Subscriptions may be wildcard; publishes must be concrete. */
+export declare function isConcreteChannel(channel: string): boolean;
+/** Drop exact duplicates and any subject subsumed by a more-general one — JetStream
+ *  rejects a consumer whose `filter_subjects` overlap, so `[team.>, team.backend]`
+ *  must collapse to `[team.>]` before binding the chat consumer. */
+export declare function collapseFilterSubjects(subjects: string[]): string[];
+/** Unicast: a specific instance's inbox, tagged with the sender. (Either position may be
+ *  `*` for subscribe/allow rules: `inst.<myId>.*` to receive, `inst.*.<myId>` to send as me.) */
+export declare function unicastSubject(space: string, target: string, sender: string): string;
+/** Anycast: a service (role), tagged with the sender. Subscribers join a queue group so one instance receives. */
+export declare function anycastSubject(space: string, service: string, sender: string): string;
+/** Control request/reply to a service (e.g. the manager), tagged with the sender; anycast via queue group. */
+export declare function controlServiceSubject(space: string, service: string, sender: string): string;
+export declare function traceSubject(space: string, agentId: string): string;
+export declare function controlSubject(space: string, agentId: string): string;
+/** Wildcard matching every subject within a space. */
+export declare function spaceWildcard(space: string): string;
+/** Wildcard matching every chat (multicast) subject in a space — the read surface an
+ *  observer is allowed (DM/anycast stay confidential). */
+export declare function chatWildcard(space: string): string;
+/** The three peer-message delivery modes (control/trace/presence are not deliveries). */
+export type DeliveryMode = "chat" | "anycast" | "unicast";
+/** A subject parsed into its routing parts. `sender` is the publishing agent's id;
+ *  `rest` is the channel (chat) or the routed target/role/service (inst/svc/ctl). */
+export interface ParsedSubject {
+    kind: "chat" | "inst" | "svc" | "ctl";
+    sender: string;
+    /** chat → channel (possibly hierarchical); inst → target; svc → role; ctl → service. */
+    rest: string;
+}
+/**
+ * The single authority on the subject layout — every reader of a wire subject goes
+ * through this, so the sender-position asymmetry lives in exactly one place:
+ *   chat.<sender>.<channel…>   sender at [3], channel is everything after
+ *   inst.<target>.<sender>     sender at [4]
+ *   svc.<role>.<sender>        sender at [4]
+ *   ctl.<service>.<sender>     sender at [4]
+ * Validates the prefix and per-kind shape first and returns `null` on anything else,
+ * so a malformed subject can never be read as if it carried a sender.
+ */
+export declare function parseSubject(subject: string): ParsedSubject | null;
+/**
+ * Classify a subject's delivery mode, or `null` for control/trace/etc. A thin map over
+ * {@link parseSubject}. Observers (e.g. a feed) use this instead of re-parsing the layout.
+ */
+export declare function deliveryOf(subject: string): DeliveryMode | null;
+/** Name of the KV bucket holding presence for a space. */
+export declare function presenceBucket(space: string): string;
+/** Stream capturing `chat.>` — multicast backlog + history. */
+export declare function chatStream(space: string): string;
+/** Stream capturing `inst.>` — per-instance direct-message inboxes. */
+export declare function dmStream(space: string): string;
+/** Stream capturing `svc.>` — anycast work queue. */
+export declare function taskStream(space: string): string;
+/** Durable consumer name for an instance's view of the chat stream. */
+export declare function chatDurable(instance: string): string;
+/** Durable consumer name for an instance's private DM inbox. */
+export declare function dmDurable(instance: string): string;
+/** Durable consumer name (shared across instances of a role) for the task queue. */
+export declare function taskDurable(service: string): string;
+//# sourceMappingURL=subjects.d.ts.map

package/dist/subjects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subjects.d.ts","sourceRoot":"","sources":["../src/subjects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,gEAAgE;AAChE,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAGvC;AAED,eAAO,MAAM,IAAI,UAAU,CAAC;AAE5B,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;;gFAEgF;AAChF,wBAAgB,iBAAiB,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,CAI3E;AAgCD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAElF;AAED;iFACiF;AACjF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE1D;AAeD;;oEAEoE;AACpE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAGnE;AAED;iGACiG;AACjG,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED,kHAAkH;AAClH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAErF;AAED,8GAA8G;AAC9G,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE5F;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,sDAAsD;AACtD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;0DAC0D;AAC1D,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,yFAAyF;AACzF,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAE1D;qFACqF;AACrF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAalE;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAI/D;AAED,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAID,+DAA+D;AAC/D,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,uEAAuE;AACvE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED,qDAAqD;AACrD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,uEAAuE;AACvE,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,gEAAgE;AAChE,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,oFAAoF;AACpF,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD"}

package/dist/subjects.js

@@ -0,0 +1,186 @@
+/**
+ * Subject naming — the routing half of the wire contract (v0).
+ *
+ *   cotal.<space>.chat.<channel>      multicast to a channel (dotted + hierarchical: team.backend, subscribe team.>)
+ *   cotal.<space>.svc.<service>       anycast to any one instance of a service (queue group)
+ *   cotal.<space>.inst.<instance>     unicast to one specific instance
+ *   cotal.<space>.ctl.<service>       control request/reply to a service (e.g. manager)
+ *   cotal.<space>.trace.<instance>    ambient lifecycle trace (later)
+ *   cotal.<space>.control.<instance>  control-plane commands (later)
+ *
+ * Presence lives in a JetStream KV bucket, not a subject (see presenceBucket()).
+ */
+const ILLEGAL = /[^A-Za-z0-9_-]/g;
+/** Make a string safe to use as a single NATS subject token. */
+export function token(s) {
+    const t = s.trim().replace(ILLEGAL, "_");
+    return t.length > 0 ? t : "_";
+}
+export const ROOT = "cotal";
+export function spacePrefix(space) {
+    return `${ROOT}.${token(space)}`;
+}
+/** Canonicalize a `mentions` list for the wire: trim, lowercase, drop empties, dedupe.
+ *  Returns `undefined` for an empty result so the field is omitted rather than sent as `[]`.
+ *  Presence-agnostic (no roster lookup) — validation lives in the connector. */
+export function normalizeMentions(mentions) {
+    if (!mentions?.length)
+        return undefined;
+    const out = [...new Set(mentions.map((m) => m.trim().toLowerCase()).filter((m) => m.length > 0))];
+    return out.length ? out : undefined;
+}
+/**
+ * Build the channel portion of a chat subject, preserving NATS hierarchy: split on
+ * `.`, sanitize each segment to a safe token, but keep whole-segment wildcards
+ * (`*` = one level, `>` = the rest). So `team.backend` → `team.backend` (a
+ * sub-channel) and `team.>` → `team.>` (its whole subtree). `>` is only legal as
+ * the final segment; empty segments are dropped.
+ */
+function channelPath(channel) {
+    const segs = channel.split(".").map((s) => s.trim()).filter((s) => s.length > 0);
+    if (segs.length === 0)
+        return "_";
+    return segs
+        .map((s, i) => {
+        if (s === ">") {
+            if (i !== segs.length - 1)
+                throw new Error(`channel "${channel}": '>' is only valid as the last segment`);
+            return ">";
+        }
+        return s === "*" ? "*" : token(s);
+    })
+        .join(".");
+}
+/** A routing token (sender, target, role, service), preserving the literal `*` wildcard
+ *  used on the subscribe/allow side but sanitizing everything else. A no-op on real ids
+ *  (nkey public keys are base32 [A-Z0-9]) and equal to `token()` on every concrete value —
+ *  it only additionally lets `*` through, e.g. for `inst.*.<id>` / `svc.*.<id>` allow rules. */
+function routeToken(s) {
+    return s === "*" ? "*" : token(s);
+}
+export function chatSubject(space, sender, channel) {
+    return `${spacePrefix(space)}.chat.${routeToken(sender)}.${channelPath(channel)}`;
+}
+/** True if a channel names a concrete sub-channel (no `*`/`>`) — i.e. it can be
+ *  *published* to. Subscriptions may be wildcard; publishes must be concrete. */
+export function isConcreteChannel(channel) {
+    return !channel.split(".").some((s) => s.trim() === "*" || s.trim() === ">");
+}
+/** Does NATS subject `pattern` (with `*`/`>`) match `subject`? */
+function subjectMatches(pattern, subject) {
+    const p = pattern.split(".");
+    const s = subject.split(".");
+    for (let i = 0; i < p.length; i++) {
+        if (p[i] === ">")
+            return true; // matches all remaining tokens
+        if (i >= s.length)
+            return false;
+        if (p[i] === "*")
+            continue;
+        if (p[i] !== s[i])
+            return false;
+    }
+    return p.length === s.length;
+}
+/** Drop exact duplicates and any subject subsumed by a more-general one — JetStream
+ *  rejects a consumer whose `filter_subjects` overlap, so `[team.>, team.backend]`
+ *  must collapse to `[team.>]` before binding the chat consumer. */
+export function collapseFilterSubjects(subjects) {
+    const uniq = [...new Set(subjects)];
+    return uniq.filter((x) => !uniq.some((y) => y !== x && subjectMatches(y, x)));
+}
+/** Unicast: a specific instance's inbox, tagged with the sender. (Either position may be
+ *  `*` for subscribe/allow rules: `inst.<myId>.*` to receive, `inst.*.<myId>` to send as me.) */
+export function unicastSubject(space, target, sender) {
+    return `${spacePrefix(space)}.inst.${routeToken(target)}.${routeToken(sender)}`;
+}
+/** Anycast: a service (role), tagged with the sender. Subscribers join a queue group so one instance receives. */
+export function anycastSubject(space, service, sender) {
+    return `${spacePrefix(space)}.svc.${routeToken(service)}.${routeToken(sender)}`;
+}
+/** Control request/reply to a service (e.g. the manager), tagged with the sender; anycast via queue group. */
+export function controlServiceSubject(space, service, sender) {
+    return `${spacePrefix(space)}.ctl.${routeToken(service)}.${routeToken(sender)}`;
+}
+export function traceSubject(space, agentId) {
+    return `${spacePrefix(space)}.trace.${token(agentId)}`;
+}
+export function controlSubject(space, agentId) {
+    return `${spacePrefix(space)}.control.${token(agentId)}`;
+}
+/** Wildcard matching every subject within a space. */
+export function spaceWildcard(space) {
+    return `${spacePrefix(space)}.>`;
+}
+/** Wildcard matching every chat (multicast) subject in a space — the read surface an
+ *  observer is allowed (DM/anycast stay confidential). */
+export function chatWildcard(space) {
+    return `${spacePrefix(space)}.chat.>`;
+}
+/**
+ * The single authority on the subject layout — every reader of a wire subject goes
+ * through this, so the sender-position asymmetry lives in exactly one place:
+ *   chat.<sender>.<channel…>   sender at [3], channel is everything after
+ *   inst.<target>.<sender>     sender at [4]
+ *   svc.<role>.<sender>        sender at [4]
+ *   ctl.<service>.<sender>     sender at [4]
+ * Validates the prefix and per-kind shape first and returns `null` on anything else,
+ * so a malformed subject can never be read as if it carried a sender.
+ */
+export function parseSubject(subject) {
+    const parts = subject.split(".");
+    if (parts[0] !== ROOT)
+        return null; // cotal.<space>.<kind>.…
+    const kind = parts[2];
+    if (kind === "chat") {
+        if (parts.length < 5)
+            return null; // cotal.<space>.chat.<sender>.<channel…>
+        return { kind, sender: parts[3], rest: parts.slice(4).join(".") };
+    }
+    if (kind === "inst" || kind === "svc" || kind === "ctl") {
+        if (parts.length !== 5)
+            return null; // cotal.<space>.<kind>.<route>.<sender>
+        return { kind, sender: parts[4], rest: parts[3] };
+    }
+    return null;
+}
+/**
+ * Classify a subject's delivery mode, or `null` for control/trace/etc. A thin map over
+ * {@link parseSubject}. Observers (e.g. a feed) use this instead of re-parsing the layout.
+ */
+export function deliveryOf(subject) {
+    const p = parseSubject(subject);
+    if (!p)
+        return null;
+    return p.kind === "chat" ? "chat" : p.kind === "svc" ? "anycast" : p.kind === "inst" ? "unicast" : null;
+}
+/** Name of the KV bucket holding presence for a space. */
+export function presenceBucket(space) {
+    return `cotal_presence_${token(space)}`;
+}
+// ---- JetStream streams (the durable backing for the three delivery modes) ----
+/** Stream capturing `chat.>` — multicast backlog + history. */
+export function chatStream(space) {
+    return `CHAT_${token(space)}`;
+}
+/** Stream capturing `inst.>` — per-instance direct-message inboxes. */
+export function dmStream(space) {
+    return `DM_${token(space)}`;
+}
+/** Stream capturing `svc.>` — anycast work queue. */
+export function taskStream(space) {
+    return `TASK_${token(space)}`;
+}
+/** Durable consumer name for an instance's view of the chat stream. */
+export function chatDurable(instance) {
+    return `chat_${token(instance)}`;
+}
+/** Durable consumer name for an instance's private DM inbox. */
+export function dmDurable(instance) {
+    return `dm_${token(instance)}`;
+}
+/** Durable consumer name (shared across instances of a role) for the task queue. */
+export function taskDurable(service) {
+    return `svc_${token(service)}`;
+}
+//# sourceMappingURL=subjects.js.map

package/dist/subjects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subjects.js","sourceRoot":"","sources":["../src/subjects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,OAAO,GAAG,iBAAiB,CAAC;AAElC,gEAAgE;AAChE,MAAM,UAAU,KAAK,CAAC,CAAS;IAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,OAAO,CAAC;AAE5B,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,GAAG,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AACnC,CAAC;AAED;;gFAEgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,QAAmB;IACnD,IAAI,CAAC,QAAQ,EAAE,MAAM;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAClC,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACZ,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,0CAA0C,CAAC,CAAC;YACjF,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED;;;gGAGgG;AAChG,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAc,EAAE,OAAe;IACxE,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AACpF,CAAC;AAED;iFACiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,kEAAkE;AAClE,SAAS,cAAc,CAAC,OAAe,EAAE,OAAe;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,+BAA+B;QAC9D,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,SAAS;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAClC,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC;AAC/B,CAAC;AAED;;oEAEoE;AACpE,MAAM,UAAU,sBAAsB,CAAC,QAAkB;IACvD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED;iGACiG;AACjG,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,MAAc,EAAE,MAAc;IAC1E,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAe,EAAE,MAAc;IAC3E,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,OAAe,EAAE,MAAc;IAClF,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,OAAe;IACzD,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAe;IAC3D,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,YAAY,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;AACnC,CAAC;AAED;0DAC0D;AAC1D,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC;AACxC,CAAC;AAcD;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,yBAAyB;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,yCAAyC;QAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,wCAAwC;QAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1G,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,kBAAkB,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,iFAAiF;AAEjF,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,QAAQ,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AAChC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9B,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,QAAQ,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AAChC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;AACnC,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;AACjC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AACjC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Cotal wire types (v0).
+ *
+ * These are the shapes that travel on the mesh. They are intentionally A2A-inspired
+ * (AgentCard / Message / Part) but transport-agnostic. This file IS part of the
+ * "wire contract" — treat changes here as protocol changes.
+ */
+export type EndpointKind = "agent" | "endpoint";
+export interface AgentSkill {
+    id: string;
+    name: string;
+    description?: string;
+}
+/** A2A-inspired identity record for an endpoint or agent. */
+export interface AgentCard {
+    /** Unique, stable for the lifetime of this connection. */
+    id: string;
+    /** Human-readable display name. */
+    name: string;
+    /** 'agent' (participates in coordination) or a plain 'endpoint' (logger, dashboard…). */
+    kind: EndpointKind;
+    /** Cotal addition: the role this participant plays (planner, reviewer, …). */
+    role?: string;
+    /** A2A-style one-line summary of what this agent does (discovery / observability). */
+    description?: string;
+    /** Cotal: free-form "what it can do" tags (A2A skill-tags, flattened) — discovery only. */
+    tags?: string[];
+    skills?: AgentSkill[];
+    meta?: Record<string, unknown>;
+}
+/**
+ * Lifecycle status of a participant.
+ * - `idle`: connected, no active task
+ * - `waiting`: blocked — awaiting input, approval, or a peer
+ * - `working`: actively executing a task / in a turn
+ * - `offline`: disconnected or heartbeat lapsed (derived by observers, not self-set while live)
+ */
+export type PresenceStatus = "idle" | "waiting" | "working" | "offline";
+/** Live presence record. Stored in the space's KV bucket under key = card.id. */
+export interface Presence {
+    card: AgentCard;
+    status: PresenceStatus;
+    /** Freeform "what I'm doing right now". */
+    activity?: string;
+    /** Epoch ms of the last heartbeat. */
+    ts: number;
+}
+export type Part = {
+    kind: "text";
+    text: string;
+} | {
+    kind: "data";
+    data: unknown;
+};
+export interface EndpointRef {
+    id: string;
+    name: string;
+    role?: string;
+}
+/** A message on the mesh (chat / direct message for now; extensible to other families). */
+export interface CotalMessage {
+    /** Unique message id. */
+    id: string;
+    /** Epoch ms. */
+    ts: number;
+    space: string;
+    from: EndpointRef;
+    /** Channel name — multicast (broadcast to everyone on the channel). */
+    channel?: string;
+    /** Instance id — unicast (direct to one specific endpoint). */
+    to?: string;
+    /** Service / role — anycast (any one instance of the service receives it). */
+    toService?: string;
+    /** Lowercased peer names called out within a `channel` message — a priority/wake hint,
+     *  not a routing target: the message still multicasts to the whole channel. Omitted when
+     *  empty. */
+    mentions?: string[];
+    parts: Part[];
+    /** Id of the message being replied to. */
+    replyTo?: string;
+    /** Conversation / thread correlation id. */
+    contextId?: string;
+}
+export type PresenceEvent = {
+    type: "join";
+    presence: Presence;
+} | {
+    type: "update";
+    presence: Presence;
+} | {
+    type: "offline";
+    presence: Presence;
+};
+/**
+ * Delivery control handed to "message" listeners alongside each {@link CotalMessage}.
+ * The message stays on its JetStream stream until {@link Delivery.ack} is called — so
+ * ack ONLY once the message has actually been surfaced (printed, injected, handled).
+ * A crash before ack redelivers it.
+ */
+export interface Delivery {
+    /** Mark the message handled; advances this reader's bookmark so it won't redeliver. */
+    ack(): void;
+    /** Decline for now; the message redelivers (e.g. couldn't surface it yet). */
+    nak(): void;
+}
+/** Control-plane request/reply (e.g. CLI → manager). */
+export interface ControlRequest {
+    op: string;
+    args?: Record<string, unknown>;
+    from?: EndpointRef;
+}
+export interface ControlReply {
+    ok: boolean;
+    data?: unknown;
+    error?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,6DAA6D;AAC7D,MAAM,WAAW,SAAS;IACxB,0DAA0D;IAC1D,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,IAAI,EAAE,YAAY,CAAC;IACnB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2FAA2F;IAC3F,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAExE,iFAAiF;AACjF,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,cAAc,CAAC;IACvB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,MAAM,IAAI,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEpC,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,2FAA2F;AAC3F,MAAM,WAAW,YAAY;IAC3B,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,WAAW,CAAC;IAElB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;iBAEa;IACb,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,uFAAuF;IACvF,GAAG,IAAI,IAAI,CAAC;IACZ,8EAA8E;IAC9E,GAAG,IAAI,IAAI,CAAC;CACb;AAED,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/types.js

@@ -0,0 +1,9 @@
+/**
+ * Cotal wire types (v0).
+ *
+ * These are the shapes that travel on the mesh. They are intentionally A2A-inspired
+ * (AgentCard / Message / Part) but transport-agnostic. This file IS part of the
+ * "wire contract" — treat changes here as protocol changes.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@cotal-ai/core",
+  "version": "0.1.0",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@nats-io/jetstream": "^3.4.0",
+    "@nats-io/jwt": "0.0.10-5",
+    "@nats-io/kv": "^3.4.0",
+    "@nats-io/nkeys": "^2.0.3",
+    "@nats-io/transport-node": "^3.4.0"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "build": "tsc -p tsconfig.json"
+  }
+}