@cotal-ai/core 0.79.0 → 0.82.0

package/dist/endpoint.js

@@ -27,7 +27,7 @@ import { Bucket, KvWatchInclude } from "@nats-io/kv/internal";
 import { openMembersRegistry, commitMember, tombstoneMember, activateMember, readMember, listMembers, listLifecycleMemberChannels, durableEligible, StaleMembershipWrite, } from "./members.js";
 import { openAclRegistry, readAcl, readAclForAlias, aclRetired, AmbiguousAclAlias, commitAcl as writeAclRecord, reissueAcl as writeAclReissue } from "./acls.js";
 import { openDeliveryRegistry } from "./lease.js";
-import { openChannelRegistry, effectiveReplay, effectiveReplayWindowMs, effectiveDeliveryClass, readChannelConfig, readChannelDefaults, } from "./channels.js";
+import { openChannelRegistry, effectiveReplay, effectiveReplayWindowMs, effectiveDeliveryClass, readChannelConfig, readChannelDefaults, decodeChannelEntry, } from "./channels.js";
 import { anycastSubject, assertValidRole, CHANNEL_DEFAULTS_KEY, chatStream, chatHistDurable, chatSubject, controlServiceSubject, livenessSubject, livenessServeFilter, CONTROL_DELIVERY, CONTROL_DELIVERY_ADMIN, dmStream, dmDurable, dlvStream, dlvDurable, dlvSubject, dinboxSubject, inboxStream, parseDinboxPrincipal, FANOUT_DURABLE, INBOX_READER_DURABLE, leaseKey, managerBucket, MANAGER_LEASE_KEY, MANAGER_RENEWAL_LEASE_KEY, managerLeaseKey, chatWildcard, assertValidChannel, channelInAllow, isConcreteChannel, normalizeMentions, parseSubject, isPrincipalOwnerToken, assertInboxConnId, presenceBucket, membershipBucket, MEMBERSHIP_FEED_KEY, principalKey, parsePrincipalKey, assertLifecycleToken, mintLifecycleUid, lifecycleNameKey, DEV_OWNER, spacePrefix, spaceWildcard, subjectMatches, taskStream, taskDurable, token, unicastSubject, unicastRecvFilter, } from "./subjects.js";
 export const DEFAULT_SERVER = "nats://127.0.0.1:4222";
 const PLANE3_FRAME_HEADER = "Cotal-Delivery-Frame";
@@ -512,7 +512,8 @@ export class CotalEndpoint extends EventEmitter {
         // principalKey validates both tokens.
         const principal = principalKey(this.owner, this.actor);
         this.card = { ...opts.card, id: principal.key, owner: this.owner, actor: this.actor };
-        this.environment = process.env.COTAL_ENVIRONMENT?.trim() || undefined;
+        this.environment =
+            (opts.environment === undefined ? process.env.COTAL_ENVIRONMENT : opts.environment)?.trim() || undefined;
         this.servers = opts.servers ?? DEFAULT_SERVER;
         this.token = opts.token;
         this.user = opts.user;
@@ -561,7 +562,14 @@ export class CotalEndpoint extends EventEmitter {
         return flight;
     }
     async startOnce() {
-        await this.connectAndBind();
+        // A stopped dial is not a teardown failure. The stopped fence still closes any late epoch.
+        try {
+            await this.connectAndBind();
+        }
+        catch (error) {
+            if (!this.stopped)
+                throw error;
+        }
         // stop() can finish while the INITIAL connectAndBind is still awaiting its broker work. The
         // rebuild path already closes that race; initial start needs the same fence or the late bind
         // leaves a fresh nc, heartbeat, consumers, and presence live on an endpoint already stopped.
@@ -1449,9 +1457,16 @@ export class CotalEndpoint extends EventEmitter {
             await this.closeWithoutLibraryReconnect(oldNc);
             // stop() can arrive while the old epoch closes. Do not start another authentication
             // handshake after it: a terminal credential may already have expired in that window.
+            // Keep old-epoch and late-epoch close failures outside this dial-only catch.
             if (this.stopped)
                 return;
-            await this.connectAndBind();
+            try {
+                await this.connectAndBind();
+            }
+            catch (error) {
+                if (!this.stopped)
+                    throw error;
+            }
             // stop() may have run during the await — don't leave a live connection + heartbeat +
             // supervisor on a stopped endpoint. (Reads this.nc in its own scope — a bare `this.nc`
             // here in doRebuild narrows to `never` via TS inlining connectAndBind's assignment.)
@@ -6191,8 +6206,8 @@ export class CotalEndpoint extends EventEmitter {
         })();
     }
     /** Watch the channel registry: replay existing keys, then stream updates, into the local
-     *  cache. A failed bind throws out of connect; an entry that does not decode is reported as a
-     *  `warning` and dropped, so its channel resolves to the default policy. */
+     *  cache. A failed bind throws out of connect; an entry that does not decode or validate is
+     *  reported as a `warning` and dropped, so its channel resolves to the default policy. */
     async startChannelWatch() {
         if (!this.channelKv)
             return;
@@ -6216,9 +6231,9 @@ export class CotalEndpoint extends EventEmitter {
             return;
         try {
             if (isDefaults)
-                this.channelDefaults = e.json();
+                this.channelDefaults = decodeChannelEntry(e);
             else
-                this.channelConfigs.set(e.key, e.json());
+                this.channelConfigs.set(e.key, decodeChannelEntry(e));
         }
         catch (err) {
             this.emitRecoverable(new Error(`dropped channel registry entry for key ${JSON.stringify(e.key)}: ${err.message}`));