@cotal-ai/core 0.90.0 → 0.91.0

package/dist/space-schema-diff.js

@@ -0,0 +1,204 @@
+import { explicitSpaceResourceFields, nativeKvScalarInputDefaults, spaceResourceDefinitions } from "./space-resource-definitions.js";
+import { assertAuthStoreConfig, assertContractStoreConfig, assertRecordsStoreConfig, assertSessionsStoreConfig } from "./endpoint-binding.js";
+import { assertIssuedStoreConfig, WRITE_ONCE_PER_KEY } from "./issued-authority.js";
+import { assertAdmissionStoreConfig } from "./run-admission.js";
+import { authorityStreamShapeIssue } from "./authority-store-config.js";
+import { assertArtifactStoreConfig, LEGACY_ARTIFACT_STORE_MAX_BYTES } from "./streams.js";
+import { streamReadPolicyBaseline, validateCanonicalBackupStreamConfig } from "./backup-config.js";
+import { canonicalJson } from "./canonical.js";
+import { DiscardPolicy } from "@nats-io/jetstream";
+import { diffDeclaredStreamConfigs } from "./stream-schema-diff.js";
+function observedExtraFields(resource, config, declared) {
+    const result = { status: "not-modeled", matchesPolicy: [], nondefaultUndeclared: [], unmodeled: [] };
+    try {
+        if (!Array.isArray(declared.subjects))
+            throw new Error();
+        const baseline = streamReadPolicyBaseline(resource.stream, declared.subjects);
+        if (resource.kind !== "stream") {
+            baseline.discard = DiscardPolicy.New;
+            baseline.allow_rollup_hdrs = true;
+            baseline.allow_direct = true;
+            if (resource.kind === "kv") {
+                // Public input defaults supply only these scalar fields, not an effective stream
+                // builder. Version-dependent/native invariants remain separately checked.
+                Object.assign(baseline, nativeKvScalarInputDefaults());
+            }
+        }
+        const actual = config;
+        result.status = "checked";
+        for (const field of Object.keys(actual).sort()) {
+            if (Object.hasOwn(declared, field))
+                continue;
+            // Native artifact verification deliberately permits either direct-read setting.
+            if (resource.kind === "object-store" && field === "allow_direct" && typeof actual[field] === "boolean") {
+                result.matchesPolicy.push(field);
+                continue;
+            }
+            // Native TTL reconciliation preserves a smaller existing duplicate window.
+            if (resource.kind === "kv" && field === "duplicate_window" && typeof declared.max_age === "number" && declared.max_age > 0) {
+                const value = actual[field];
+                if (typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= declared.max_age)
+                    result.matchesPolicy.push(field);
+                else
+                    result.nondefaultUndeclared.push(field);
+                continue;
+            }
+            if (!Object.hasOwn(baseline, field)) {
+                result.unmodeled.push(field);
+                continue;
+            }
+            let value = actual[field];
+            if (field === "metadata" && value && typeof value === "object" && !Array.isArray(value) && Object.entries(value).every(([key, item]) => key.startsWith("_nats.") && typeof item === "string"))
+                value = {};
+            if (canonicalJson(value) === canonicalJson(baseline[field]))
+                result.matchesPolicy.push(field);
+            else
+                result.nondefaultUndeclared.push(field);
+        }
+    }
+    catch {
+        result.status = "failed";
+    }
+    return result;
+}
+function nativeVerification(resource, config, space) {
+    try {
+        if (resource.kind === "kv" && resource.verification !== "native-runtime-check-required") {
+            const issue = authorityStreamShapeIssue(config, resource.bucket);
+            if (issue)
+                return { status: "not-confirmed", fields: issue.fields };
+        }
+        switch (resource.verification) {
+            case "canonical-backup":
+                validateCanonicalBackupStreamConfig(space, resource.stream, config);
+                break;
+            case "contract":
+                assertContractStoreConfig(config, space);
+                break;
+            case "records":
+                assertRecordsStoreConfig(config, space);
+                break;
+            case "auth":
+                assertAuthStoreConfig(config, space);
+                break;
+            case "sessions":
+                assertSessionsStoreConfig(config, space);
+                break;
+            case "issued":
+                if (resource.kind !== "kv")
+                    return { status: "not-confirmed", fields: [] };
+                assertIssuedStoreConfig(config, space, resource.bucket);
+                break;
+            case "admission":
+                assertAdmissionStoreConfig(config, space);
+                break;
+            case "artifact":
+                assertArtifactStoreConfig(config, space);
+                break;
+            case "declared-fields":
+            case "native-runtime-check-required": return { status: "not-checked", fields: [] };
+            default: throw new Error("unrecognized native schema verification policy");
+        }
+        return { status: "invariants-match", fields: [] };
+    }
+    catch {
+        // Native diagnostics may contain broker values. They are not public schema-report text.
+        return { status: "not-confirmed", fields: [] };
+    }
+}
+/** This allowlist names existing native guard families, never accepted actions. It does not
+ *  call creators/migrations, prove a shadow-free stream or inspect a leftover TTL canary. */
+function reconciliationPolicy(resource, observation, row, extras, unexpanded, space) {
+    const fields = [...new Set([...row.differences.map((difference) => difference.field), ...extras.nondefaultUndeclared])];
+    const blocked = { state: "migration-required", nativeGuard: null, fields, nonAllowlistedFields: fields };
+    if (!observation || observation.state !== "present" || !["declared-fields-match", "incompatible-or-drifted"].includes(row.state))
+        return { ...blocked, state: "not-evaluated" };
+    if (unexpanded.length || extras.status !== "checked" || extras.unmodeled.length)
+        return blocked;
+    if (resource.kind === "kv" && typeof resource.createOptions.ttl === "number" && resource.createOptions.ttl > 0) {
+        const nonAllowlistedFields = fields.filter((field) => field !== "max_age" && field !== "duplicate_window");
+        if (nonAllowlistedFields.length)
+            return { ...blocked, nonAllowlistedFields };
+        return { state: "native-guard-required", nativeGuard: "ttl-enforcement", fields, nonAllowlistedFields: [] };
+    }
+    if (fields.length === 0)
+        return { state: "no-declared-change", nativeGuard: null, fields, nonAllowlistedFields: [] };
+    if (resource.kind === "object-store" && fields.length === 1 && fields[0] === "max_bytes" && observation.config.max_bytes === LEGACY_ARTIFACT_STORE_MAX_BYTES) {
+        try {
+            assertArtifactStoreConfig({ ...observation.config, max_bytes: -1 }, space);
+        }
+        catch {
+            return blocked;
+        }
+        return { state: "native-guard-required", nativeGuard: "artifact-legacy-cap", fields, nonAllowlistedFields: [] };
+    }
+    if (resource.kind === "stream" && resource.verification === "contract") {
+        const allowed = new Set(Object.keys(WRITE_ONCE_PER_KEY));
+        const nonAllowlistedFields = fields.filter((field) => !allowed.has(field));
+        if (nonAllowlistedFields.length)
+            return { ...blocked, nonAllowlistedFields };
+        try {
+            assertContractStoreConfig({ ...observation.config, ...WRITE_ONCE_PER_KEY }, space);
+        }
+        catch {
+            return blocked;
+        }
+        return { state: "native-guard-required", nativeGuard: "contract-shadow", fields, nonAllowlistedFields: [] };
+    }
+    return blocked;
+}
+/** Compare only explicit native stream fields and post-create hardening. KV/object-store
+ *  creation options are not expanded into guessed SDK/server defaults. Pure native invariant
+ *  checks run where declared; runtime checks and complete field policy stay separate. No
+ *  mutating create-or-verify helper, canary, repair or migration is invoked. */
+export function diffSpaceResources(space, observations, options = {}) {
+    const definitions = spaceResourceDefinitions(space, options);
+    const resources = new Map(definitions.resources.map((resource) => [resource.stream, resource]));
+    const found = new Map();
+    for (const observation of observations) {
+        if (!resources.has(observation.stream) || found.has(observation.stream))
+            throw new Error("space schema diff requires unique observations of the declared resource set; no foreign or duplicate observation was adopted");
+        found.set(observation.stream, observation);
+    }
+    const rows = definitions.resources.map((resource) => {
+        const observation = found.get(resource.stream);
+        const fields = explicitSpaceResourceFields(resource), desired = fields.config;
+        const input = observation && observation.state !== "not-observed-budget" ? [
+            observation.kind !== resource.kind ? { stream: resource.stream, state: "target-mismatch" }
+                : observation.state === "present" ? { stream: resource.stream, state: "present", config: observation.config }
+                    : { stream: resource.stream, state: observation.state === "reported-not-found" ? "not-found" : observation.state },
+        ] : [];
+        const row = diffDeclaredStreamConfigs([desired], input)[0];
+        const checked = observation?.state === "present" && row.state !== "target-mismatch" && row.state !== "observation-failed"
+            ? nativeVerification(resource, observation.config, space) : { status: "not-checked", fields: [] };
+        const verification = checked.status;
+        const extras = observation?.state === "present" && row.state !== "target-mismatch" && row.state !== "observation-failed"
+            ? observedExtraFields(resource, observation.config, desired) : { status: "not-modeled", matchesPolicy: [], nondefaultUndeclared: [], unmodeled: [] };
+        const state = row.state === "declared-fields-match"
+            ? fields.unexpanded.length ? "creation-options-policy-required"
+                : extras.status === "failed" ? "observation-failed"
+                    : extras.nondefaultUndeclared.length || extras.unmodeled.length ? "unclassified-stream-settings"
+                        : verification === "not-confirmed" ? "native-store-verification-unconfirmed"
+                            : resource.kind !== "stream" ? verification === "invariants-match" ? "native-store-invariants-match" : "native-store-verification-required"
+                                : row.state
+            : row.state;
+        const reconciliation = reconciliationPolicy(resource, observation, row, extras, fields.unexpanded, space);
+        const { uninspectedFields, ...comparison } = row;
+        return { ...comparison, kind: resource.kind, state, uncomparedFields: uninspectedFields, nativeVerification: verification, nativeInvariantFields: checked.fields, unexpandedCreationOptions: fields.unexpanded, observedExtraFields: extras, reconciliation };
+    });
+    return {
+        kind: "space-resource-schema-diff",
+        space,
+        rows,
+        scope: "explicit stream/public store-option fields, hardening and pure native invariants; unspecified SDK defaults, runtime checks and full field policy remain unestablished",
+        pendingPolicy: definitions.pendingPolicy,
+        completeSpaceSchema: false,
+        sdkDefaultsExpanded: false,
+        sdkInputDefaultsUsedForReadPolicy: true,
+        connectionAuthorityChecked: false,
+        absenceAuthoritativelyProven: false,
+        applyPermitted: false,
+        writes: [],
+    };
+}
+//# sourceMappingURL=space-schema-diff.js.map

package/dist/space-schema-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-schema-diff.js","sourceRoot":"","sources":["../src/space-schema-diff.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,wBAAwB,EAAgC,MAAM,iCAAiC,CAAC;AACnK,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,yBAAyB,EAA8B,MAAM,uBAAuB,CAAC;AAC1K,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,wBAAwB,EAAE,mCAAmC,EAAE,MAAM,oBAAoB,CAAC;AACnG,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAqB,MAAM,oBAAoB,CAAC;AAEtE,OAAO,EAAE,yBAAyB,EAAsD,MAAM,yBAAyB,CAAC;AA0BxH,SAAS,mBAAmB,CAAC,QAAiC,EAAE,MAAoB,EAAE,QAAkD;IACtI,MAAM,MAAM,GAA8C,EAAE,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAChJ,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAA4B,CAAC;QACzG,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,QAAQ,CAAC,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC;YACrC,QAAQ,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAClC,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC;YAC7B,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC3B,iFAAiF;gBACjF,0EAA0E;gBAC1E,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAA4C,CAAC;QAC5D,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC;gBAAE,SAAS;YAC7C,gFAAgF;YAChF,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,KAAK,cAAc,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACvJ,2EAA2E;YAC3E,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,kBAAkB,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBAC3H,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,QAAQ,CAAC,OAAO;oBAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;oBACrI,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAChF,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;gBAAE,KAAK,GAAG,EAAE,CAAC;YAC1M,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;gBACzF,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;IAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAiC,EAAE,MAAoB,EAAE,KAAa;IAChG,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,YAAY,KAAK,+BAA+B,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjE,IAAI,KAAK;gBAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACtE,CAAC;QACD,QAAQ,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC9B,KAAK,kBAAkB;gBAAE,mCAAmC,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,MAA4C,CAAC,CAAC;gBAAC,MAAM;YAC1I,KAAK,UAAU;gBAAE,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAAC,MAAM;YACjE,KAAK,SAAS;gBAAE,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAAC,MAAM;YAC/D,KAAK,MAAM;gBAAE,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAAC,MAAM;YACzD,KAAK,UAAU;gBAAE,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAAC,MAAM;YACjE,KAAK,QAAQ;gBACX,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;oBAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBAC3E,uBAAuB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAC,MAAM;YACjE,KAAK,WAAW;gBAAE,0BAA0B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAAC,MAAM;YACnE,KAAK,UAAU;gBAAE,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAAC,MAAM;YACjE,KAAK,iBAAiB,CAAC;YACvB,KAAK,+BAA+B,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACnF,OAAO,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,wFAAwF;QACxF,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;AACH,CAAC;AAED;6FAC6F;AAC7F,SAAS,oBAAoB,CAAC,QAAiC,EAAE,WAA+C,EAAE,GAAoB,EAAE,MAAiD,EAAE,UAA6B,EAAE,KAAa;IACrO,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxH,MAAM,OAAO,GAAyC,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/I,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,uBAAuB,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAChL,IAAI,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAChG,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,QAAQ,CAAC,aAAa,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;QAC/G,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,kBAAkB,CAAC,CAAC;QAC3G,IAAI,oBAAoB,CAAC,MAAM;YAAE,OAAO,EAAE,GAAG,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC7E,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;IAC9G,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;IACrH,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,WAAW,CAAC,MAAM,CAAC,SAAS,KAAK,+BAA+B,EAAE,CAAC;QAC7J,IAAI,CAAC;YAAC,yBAAyB,CAAC,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QACnF,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC;QAAC,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;IAClH,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACzD,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,IAAI,oBAAoB,CAAC,MAAM;YAAE,OAAO,EAAE,GAAG,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAC7E,IAAI,CAAC;YAAC,yBAAyB,CAAC,EAAE,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,kBAAkB,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAC3F,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC;QAAC,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;IAC9G,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;gFAGgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,YAA+C,EAAE,UAAiC,EAAE;IACpI,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkC,CAAC;IACxD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8HAA8H,CAAC,CAAC;QACzN,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,GAAyB,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAsB,EAAE;QAC5F,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,2BAA2B,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9E,MAAM,KAAK,GAA8B,WAAW,IAAI,WAAW,CAAC,KAAK,KAAK,qBAAqB,CAAC,CAAC,CAAC;YACpG,WAAW,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE;gBACxF,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE;oBAC3G,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,KAAK,oBAAoB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE;SACvH,CAAC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC;QAC5D,MAAM,OAAO,GAAG,WAAW,EAAE,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,iBAAiB,IAAI,GAAG,CAAC,KAAK,KAAK,oBAAoB;YACvH,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAsB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC7G,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;QACpC,MAAM,MAAM,GAAG,WAAW,EAAE,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,iBAAiB,IAAI,GAAG,CAAC,KAAK,KAAK,oBAAoB;YACtH,CAAC,CAAC,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAsB,EAAE,aAAa,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAChK,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,KAAK,uBAAuB;YACjD,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,kCAAkC;gBAC7D,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAoB;oBACjD,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,8BAA8B;wBAChG,CAAC,CAAC,YAAY,KAAK,eAAe,CAAC,CAAC,CAAC,uCAAuC;4BAC9E,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,KAAK,kBAAkB,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,oCAAoC;gCACzI,CAAC,CAAC,GAAG,CAAC,KAAK;YACf,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QACd,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC1G,MAAM,EAAE,iBAAiB,EAAE,GAAG,UAAU,EAAE,GAAG,GAAG,CAAC;QACjD,OAAO,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,EAAE,qBAAqB,EAAE,OAAO,CAAC,MAAM,EAAE,yBAAyB,EAAE,MAAM,CAAC,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAChQ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,IAAI,EAAE,4BAAqC;QAC3C,KAAK;QACL,IAAI;QACJ,KAAK,EAAE,uKAAgL;QACvL,aAAa,EAAE,WAAW,CAAC,aAAa;QACxC,mBAAmB,EAAE,KAAc;QACnC,mBAAmB,EAAE,KAAc;QACnC,iCAAiC,EAAE,IAAa;QAChD,0BAA0B,EAAE,KAAc;QAC1C,4BAA4B,EAAE,KAAc;QAC5C,cAAc,EAAE,KAAc;QAC9B,MAAM,EAAE,EAAW;KACpB,CAAC;AACJ,CAAC"}

package/dist/space-schema-observation.d.ts

@@ -0,0 +1,45 @@
+import { type JetStreamManager, type StreamConfig } from "@nats-io/jetstream";
+import type { EndpointStreamOptions } from "./endpoint-binding.js";
+import { type SpaceResourceDefinition } from "./space-resource-definitions.js";
+/** The schema reader receives only stream-info. Connection custody, target validation and
+ *  credentials stay with its caller; a read port is not evidence of bootstrap authority. */
+export interface SpaceSchemaReadPort {
+    readonly info: (stream: string) => Promise<{
+        config: StreamConfig;
+    }>;
+}
+/** Narrow an existing native manager to a frozen read-only facade. No connection is opened. */
+export declare function spaceSchemaReadPort(manager: JetStreamManager): SpaceSchemaReadPort;
+type ObservedResource = {
+    kind: SpaceResourceDefinition["kind"];
+    stream: string;
+    operation: "stream-info";
+};
+export type SpaceSchemaObservation = ObservedResource & ({
+    state: "present";
+    config: StreamConfig;
+} | {
+    state: "reported-not-found" | "permission-denied" | "target-mismatch" | "observation-failed" | "not-observed-budget";
+});
+/** Structured native stream-read failure classification. It establishes no absence or grant. */
+export declare function spaceSchemaReadFailure(error: unknown): "permission-denied" | "reported-not-found" | "observation-failed";
+/** Read each declared resource once through the supplied port. Structured SDK errors are
+ *  classified without message matching or raw diagnostics. A reported missing stream is not
+ *  authoritative absence, even when a caller describes their connection as privileged. A shared
+ *  five-second budget leaves later rows unvisited and does not cancel an in-flight request. */
+export declare function observeSpaceResources(reads: SpaceSchemaReadPort, space: string, options?: EndpointStreamOptions): Promise<{
+    kind: "space-resource-observations";
+    space: string;
+    observations: SpaceSchemaObservation[];
+    deadlineMs: number;
+    deadlineReached: boolean;
+    readerRequestCancellationEstablished: false;
+    scope: "declared resources through the supplied read port; server/account/mode binding is not established";
+    completeSpaceSchema: false;
+    connectionAuthorityChecked: false;
+    absenceAuthoritativelyProven: false;
+    applyPermitted: false;
+    writes: readonly [];
+}>;
+export {};
+//# sourceMappingURL=space-schema-observation.d.ts.map

package/dist/space-schema-observation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-schema-observation.d.ts","sourceRoot":"","sources":["../src/space-schema-observation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwC,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEpH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,EAA4B,KAAK,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAEzG;4FAC4F;AAC5F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,+FAA+F;AAC/F,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,mBAAmB,CAElF;AAED,KAAK,gBAAgB,GAAG;IAAE,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,CAAC;AAC5G,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,GAAG,CACpD;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAC1C;IAAE,KAAK,EAAE,oBAAoB,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,oBAAoB,GAAG,qBAAqB,CAAA;CAAE,CAC3H,CAAC;AAEF,gGAAgG;AAChG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,GAAG,oBAAoB,GAAG,oBAAoB,CAIxH;AAED;;;+FAG+F;AAC/F,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B;;;;;;;;;;;;;GA0CzH"}

package/dist/space-schema-observation.js

@@ -0,0 +1,78 @@
+import { JetStreamApiCodes, JetStreamApiError } from "@nats-io/jetstream";
+import { PermissionViolationError } from "@nats-io/transport-node";
+import { isJetStreamMissing } from "./jetstream-missing.js";
+import { spaceResourceDefinitions } from "./space-resource-definitions.js";
+/** Narrow an existing native manager to a frozen read-only facade. No connection is opened. */
+export function spaceSchemaReadPort(manager) {
+    return Object.freeze({ info: (stream) => manager.streams.info(stream) });
+}
+/** Structured native stream-read failure classification. It establishes no absence or grant. */
+export function spaceSchemaReadFailure(error) {
+    if (error instanceof PermissionViolationError || error instanceof JetStreamApiError && error.status === 403)
+        return "permission-denied";
+    if (error instanceof JetStreamApiError && error.status === 404 && isJetStreamMissing(error, JetStreamApiCodes.StreamNotFound))
+        return "reported-not-found";
+    return "observation-failed";
+}
+/** Read each declared resource once through the supplied port. Structured SDK errors are
+ *  classified without message matching or raw diagnostics. A reported missing stream is not
+ *  authoritative absence, even when a caller describes their connection as privileged. A shared
+ *  five-second budget leaves later rows unvisited and does not cancel an in-flight request. */
+export async function observeSpaceResources(reads, space, options = {}) {
+    const definitions = spaceResourceDefinitions(space, options);
+    const observations = [];
+    const deadline = performance.now() + 5000;
+    let deadlineReached = false;
+    for (const definition of definitions.resources) {
+        const resource = { kind: definition.kind, stream: definition.stream, operation: "stream-info" };
+        const remaining = deadline - performance.now();
+        if (remaining <= 0)
+            deadlineReached = true;
+        if (deadlineReached) {
+            observations.push({ ...resource, state: "not-observed-budget" });
+            continue;
+        }
+        let timer;
+        try {
+            const result = await Promise.race([
+                reads.info(definition.stream).then((info) => ({ kind: "read", info })),
+                new Promise((resolve) => { timer = setTimeout(() => resolve({ kind: "deadline" }), remaining); }),
+            ]);
+            if (result.kind === "deadline") {
+                deadlineReached = true;
+                observations.push({ ...resource, state: "observation-failed" });
+                continue;
+            }
+            const info = result.info;
+            if (!info || !info.config || typeof info.config !== "object" || Array.isArray(info.config)) {
+                observations.push({ ...resource, state: "observation-failed" });
+            }
+            else if (info.config.name !== definition.stream) {
+                observations.push({ ...resource, state: "target-mismatch" });
+            }
+            else {
+                observations.push({ ...resource, state: "present", config: info.config });
+            }
+        }
+        catch (error) {
+            observations.push({ ...resource, state: spaceSchemaReadFailure(error) });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    return {
+        kind: "space-resource-observations",
+        space,
+        observations,
+        deadlineMs: 5000, deadlineReached,
+        readerRequestCancellationEstablished: false,
+        scope: "declared resources through the supplied read port; server/account/mode binding is not established",
+        completeSpaceSchema: false,
+        connectionAuthorityChecked: false,
+        absenceAuthoritativelyProven: false,
+        applyPermitted: false,
+        writes: [],
+    };
+}
+//# sourceMappingURL=space-schema-observation.js.map

package/dist/space-schema-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-schema-observation.js","sourceRoot":"","sources":["../src/space-schema-observation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAA4C,MAAM,oBAAoB,CAAC;AACpH,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAgC,MAAM,iCAAiC,CAAC;AAQzG,+FAA+F;AAC/F,MAAM,UAAU,mBAAmB,CAAC,OAAyB;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACnF,CAAC;AAQD,gGAAgG;AAChG,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,KAAK,YAAY,wBAAwB,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAC;IACxI,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,CAAC,cAAc,CAAC;QAAE,OAAO,oBAAoB,CAAC;IAC3J,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED;;;+FAG+F;AAC/F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAA0B,EAAE,KAAa,EAAE,UAAiC,EAAE;IACxH,MAAM,WAAW,GAAG,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,YAAY,GAA6B,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC1C,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,KAAK,MAAM,UAAU,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAqB,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;QAClH,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC/C,IAAI,SAAS,IAAI,CAAC;YAAE,eAAe,GAAG,IAAI,CAAC;QAC3C,IAAI,eAAe,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACpG,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/E,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;aACxH,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAAC,eAAe,GAAG,IAAI,CAAC;gBAAC,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACtI,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACzB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3F,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAClE,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;gBAClD,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;gBAAS,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IACpC,CAAC;IACD,OAAO;QACL,IAAI,EAAE,6BAAsC;QAC5C,KAAK;QACL,YAAY;QACZ,UAAU,EAAE,IAAI,EAAE,eAAe;QACjC,oCAAoC,EAAE,KAAc;QACpD,KAAK,EAAE,mGAA4G;QACnH,mBAAmB,EAAE,KAAc;QACnC,0BAA0B,EAAE,KAAc;QAC1C,4BAA4B,EAAE,KAAc;QAC5C,cAAc,EAAE,KAAc;QAC9B,MAAM,EAAE,EAAW;KACpB,CAAC;AACJ,CAAC"}

package/dist/spaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spaces.d.ts","sourceRoot":"","sources":["../src/spaces.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAa3D,qCAAqC;AACrC,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;2EAE2E;AAC3E,wBAAsB,UAAU,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAmDnF;AAyBD;;;;iDAIiD;AACjD,wBAAsB,WAAW,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4C5H"}
+{"version":3,"file":"spaces.d.ts","sourceRoot":"","sources":["../src/spaces.ts"],"names":[],"mappings":"AAaA,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAa3D,qCAAqC;AACrC,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;2EAE2E;AAC3E,wBAAsB,UAAU,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAmDnF;AAyBD;;;;iDAIiD;AACjD,wBAAsB,WAAW,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB5H"}

package/dist/spaces.js

@@ -7,9 +7,9 @@ import { connect, credsAuthenticator } from "@nats-io/transport-node";
 import { JetStreamApiCodes, JetStreamApiError, jetstreamManager } from "@nats-io/jetstream";
 import { Kvm } from "@nats-io/kv";
 import { DEFAULT_SERVER } from "./endpoint.js";
-import { parseSubject, chatStream, dmStream, taskStream, inboxStream, dlvStream, presenceBucket, channelBucket, membersBucket, aclBucket, membershipBucket, deliveryBucket, managerBucket, artifactBucket, isTransferStream, mintLifecycleUid, objectStoreStream, } from "./subjects.js";
+import { parseSubject, isTransferStream, mintLifecycleUid } from "./subjects.js";
+import { spaceDeletionStreams } from "./space-deletion-targets.js";
 import { idFromCreds, newIdentity } from "./identity.js";
-import { endpointPlaneStreamNames } from "./endpoint-binding.js";
 import { mintCreds } from "./provision.js";
 /** Connect opts for a possibly-scoped cred: an authenticator plus the per-id `inboxPrefix` a scoped
  *  cred needs (its `sub.allow` is `_INBOX_<id>.>`, so JS API replies must land there, not the default
@@ -124,29 +124,9 @@ export async function deleteSpace(opts) {
         // Delete EVERY stream + KV bucket `setupSpaceStreams` creates — otherwise `down` leaves the DLV/INBOX
         // streams and the members/acl/membership/delivery/manager buckets orphaned (a space leak), and since
         // `teardown` is the sole STREAM.DELETE holder, nothing else could ever reap them.
-        const streams = [
-            chatStream(opts.space),
-            dmStream(opts.space),
-            taskStream(opts.space),
-            inboxStream(opts.space),
-            dlvStream(opts.space),
-            `KV_${presenceBucket(opts.space)}`,
-            `KV_${channelBucket(opts.space)}`,
-            `KV_${membersBucket(opts.space)}`,
-            `KV_${aclBucket(opts.space)}`,
-            `KV_${membershipBucket(opts.space)}`,
-            `KV_${deliveryBucket(opts.space)}`,
-            `KV_${managerBucket(opts.space)}`,
-            ...endpointPlaneStreamNames(opts.space),
-            // The artifact Object Store's backing stream. It must be named HERE and not swept by
-            // prefix: `$O.<bucket>.>` lives outside the `cotal.<space>.>` grammar, so a subject-based
-            // sweep of the space never sees it. Teardown is the sole STREAM.DELETE holder, so a stream
-            // missing from this list is not merely un-deleted - nothing in the system can ever reap it.
-            objectStoreStream(artifactBucket(opts.space)),
-        ];
-        // Each manager instance that received a carried resume holds its own transfer bucket, so those
-        // streams are found by name shape; a teardown credential deletes the ones named at its mint.
-        streams.push(...await listTransferStreams(nc, opts.space));
+        // The same closed target list mints teardown's exact grants. Transfer streams are enumerated
+        // under this account and filtered to this space, never inferred from a prefix alone.
+        const streams = spaceDeletionStreams(opts.space, await listTransferStreams(nc, opts.space));
         const survived = [];
         for (const s of streams)
             await jsm.streams.delete(s).catch((e) => {

package/dist/spaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"spaces.js","sourceRoot":"","sources":["../src/spaces.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,+FAA+F;AAC/F,2FAA2F;AAC3F,+FAA+F;AAC/F,wFAAwF;AAExF,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAuB,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC5F,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EACL,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EACtE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EACzE,cAAc,EAAE,aAAa,EAC7B,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAE3D;;8FAE8F;AAC9F,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO;QACL,aAAa,EAAE,kBAAkB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClE,WAAW,EAAE,UAAU,WAAW,CAAC,KAAK,CAAC,EAAE;KAC5C,CAAC;AACJ,CAAC;AAgBD;;2EAE2E;AAC3E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B,EAAE;IAC3D,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,cAAc;QACvC,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QAC/B,SAAS,EAAE,KAAK;QAChB,oBAAoB,EAAE,CAAC;QACvB,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;QAC7C,MAAM,GAAG,GAAG,CAAC,KAAa,EAAa,EAAE;YACvC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACjF,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;QAEF,yFAAyF;QACzF,4BAA4B;QAC5B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpE,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;gBAChC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;oBAChC,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM;wBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC5C,CAAC;gBACD,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,uDAAuD;YACzD,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1C,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;gBAClD,IAAI,CAAC;oBAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QAED,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EAAkB,EAAE,KAAa;IAClE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE;QAAE,IAAI,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3H,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAI,OAA2B,EAAE,KAAyB,EAAE,EAAsC;IAClI,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;QACvB,OAAO,EAAE,OAAO,IAAI,cAAc;QAClC,SAAS,EAAE,KAAK;QAChB,oBAAoB,EAAE,CAAC;QACvB,GAAG,iBAAiB,CAAC,KAAK,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,IAAe,EAAE,eAAyB,EAAmB,EAAE,CACnF,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;AAEpG;;;;iDAIiD;AACjD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAA2E;IAC3G,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjJ,+FAA+F;IAC/F,8FAA8F;IAC9F,mBAAmB;IACnB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI;QACrB,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACxJ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IACf,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,sGAAsG;QACtG,qGAAqG;QACrG,kFAAkF;QAClF,MAAM,OAAO,GAAG;YACd,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YACtB,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YACvB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YACrB,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAClC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACjC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACjC,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAC7B,MAAM,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACpC,MAAM,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAClC,MAAM,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACjC,GAAG,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;YACvC,qFAAqF;YACrF,0FAA0F;YAC1F,2FAA2F;YAC3F,4FAA4F;YAC5F,iBAAiB,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC9C,CAAC;QACF,+FAA+F;QAC/F,6FAA6F;QAC7F,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,OAAO;YACrB,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;gBAC/C,IAAI,CAAC,CAAC,CAAC,YAAY,iBAAiB,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,cAAc,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;YACxI,CAAC,CAAC,CAAC;QACL,IAAI,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,SAAS,QAAQ,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,aAAa,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"spaces.js","sourceRoot":"","sources":["../src/spaces.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,+FAA+F;AAC/F,2FAA2F;AAC3F,+FAA+F;AAC/F,wFAAwF;AAExF,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAuB,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC5F,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAE3D;;8FAE8F;AAC9F,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO;QACL,aAAa,EAAE,kBAAkB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClE,WAAW,EAAE,UAAU,WAAW,CAAC,KAAK,CAAC,EAAE;KAC5C,CAAC;AACJ,CAAC;AAgBD;;2EAE2E;AAC3E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B,EAAE;IAC3D,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,cAAc;QACvC,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QAC/B,SAAS,EAAE,KAAK;QAChB,oBAAoB,EAAE,CAAC;QACvB,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;QAC7C,MAAM,GAAG,GAAG,CAAC,KAAa,EAAa,EAAE;YACvC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YACjF,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;QAEF,yFAAyF;QACzF,4BAA4B;QAC5B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpE,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;gBAChC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC7D,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;oBAChC,IAAI,CAAC,EAAE,IAAI,KAAK,MAAM;wBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC5C,CAAC;gBACD,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,uDAAuD;YACzD,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC1C,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;gBAClD,IAAI,CAAC;oBAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QAED,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EAAkB,EAAE,KAAa;IAClE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE;QAAE,IAAI,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3H,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAI,OAA2B,EAAE,KAAyB,EAAE,EAAsC;IAClI,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;QACvB,OAAO,EAAE,OAAO,IAAI,cAAc;QAClC,SAAS,EAAE,KAAK;QAChB,oBAAoB,EAAE,CAAC;QACvB,GAAG,iBAAiB,CAAC,KAAK,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,IAAe,EAAE,eAAyB,EAAmB,EAAE,CACnF,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,UAAU,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;AAEpG;;;;iDAIiD;AACjD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAA2E;IAC3G,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACjJ,+FAA+F;IAC/F,8FAA8F;IAC9F,mBAAmB;IACnB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI;QACrB,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACxJ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IACf,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,sGAAsG;QACtG,qGAAqG;QACrG,kFAAkF;QAClF,6FAA6F;QAC7F,qFAAqF;QACrF,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,OAAO;YACrB,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;gBAC/C,IAAI,CAAC,CAAC,CAAC,YAAY,iBAAiB,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,cAAc,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAM,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;YACxI,CAAC,CAAC,CAAC;QACL,IAAI,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,SAAS,QAAQ,CAAC,MAAM,OAAO,OAAO,CAAC,MAAM,aAAa,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/stream-schema-diff.d.ts

@@ -0,0 +1,31 @@
+import type { StreamConfig } from "@nats-io/jetstream";
+/** Input observations are data, not a credential, target proof or permission to create a store. */
+export type StreamSchemaObservation = {
+    stream: string;
+    state: "present";
+    config: Partial<StreamConfig>;
+} | {
+    stream: string;
+    state: "not-found" | "permission-denied" | "target-mismatch" | "observation-failed";
+};
+export interface StreamSchemaFieldDifference {
+    field: string;
+    observedPresent: boolean;
+    expected: unknown;
+    observed: unknown;
+}
+export interface StreamSchemaRow {
+    stream: string;
+    state: "declared-fields-match" | "incompatible-or-drifted" | "missing-requires-privileged-observation" | "permission-denied" | "target-mismatch" | "observation-failed" | "not-observed";
+    differences: StreamSchemaFieldDifference[];
+    comparedFields: string[];
+    /** Server defaults and undeclared fields were not normalized or silently accepted as canonical. */
+    uninspectedFields: string[];
+}
+/** Pure, conservative diff of the directly declared native stream fields. No broker read/write,
+ *  absent-store proof, migration allowlist or full-space canonicality is manufactured here.
+ *  Subject ordering is irrelevant; a different literal subject set remains a difference. */
+export declare function diffDeclaredStreamConfigs(expected: ReadonlyArray<Partial<StreamConfig> & {
+    name: string;
+}>, observations: readonly StreamSchemaObservation[]): StreamSchemaRow[];
+//# sourceMappingURL=stream-schema-diff.d.ts.map

package/dist/stream-schema-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-schema-diff.d.ts","sourceRoot":"","sources":["../src/stream-schema-diff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,mGAAmG;AACnG,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CAAE,GACnE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,oBAAoB,CAAA;CAAE,CAAC;AAE5G,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,uBAAuB,GAAG,yBAAyB,GAAG,yCAAyC,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,oBAAoB,GAAG,cAAc,CAAC;IACzL,WAAW,EAAE,2BAA2B,EAAE,CAAC;IAC3C,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,mGAAmG;IACnG,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;4FAE4F;AAC5F,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,YAAY,EAAE,SAAS,uBAAuB,EAAE,GAAG,eAAe,EAAE,CA8BhL"}

package/dist/stream-schema-diff.js

@@ -0,0 +1,45 @@
+import { canonicalJson } from "./canonical.js";
+/** Pure, conservative diff of the directly declared native stream fields. No broker read/write,
+ *  absent-store proof, migration allowlist or full-space canonicality is manufactured here.
+ *  Subject ordering is irrelevant; a different literal subject set remains a difference. */
+export function diffDeclaredStreamConfigs(expected, observations) {
+    const names = new Set(expected.map((definition) => definition.name));
+    const found = new Map();
+    for (const observation of observations) {
+        if (!names.has(observation.stream) || found.has(observation.stream))
+            throw new Error("stream schema diff requires unique observations of the selected stream set; no foreign or duplicate observation was adopted");
+        found.set(observation.stream, observation);
+    }
+    const comparable = (field, value) => {
+        if (field === "subjects") {
+            if (!Array.isArray(value) || value.some((subject) => typeof subject !== "string"))
+                throw new Error();
+            return canonicalJson([...new Set(value)].sort());
+        }
+        return canonicalJson(value);
+    };
+    return expected.map((definition) => {
+        const observation = found.get(definition.name), fields = Object.keys(definition).sort();
+        const base = { stream: definition.name, differences: [], comparedFields: [], uninspectedFields: [] };
+        if (!observation)
+            return { ...base, state: "not-observed" };
+        if (observation.state !== "present")
+            return { ...base, state: observation.state === "not-found" ? "missing-requires-privileged-observation" : observation.state };
+        if (observation.config.name !== definition.name)
+            return { ...base, state: "target-mismatch" };
+        const current = observation.config, desired = definition;
+        const differences = [];
+        try {
+            for (const field of fields) {
+                const present = Object.hasOwn(current, field);
+                if (!present || comparable(field, current[field]) !== comparable(field, desired[field]))
+                    differences.push({ field, observedPresent: present, expected: desired[field], observed: present ? current[field] : null });
+            }
+        }
+        catch {
+            return { ...base, state: "observation-failed" };
+        }
+        return { stream: definition.name, state: differences.length ? "incompatible-or-drifted" : "declared-fields-match", differences, comparedFields: fields, uninspectedFields: Object.keys(current).filter((field) => !fields.includes(field)).sort() };
+    });
+}
+//# sourceMappingURL=stream-schema-diff.js.map

package/dist/stream-schema-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-schema-diff.js","sourceRoot":"","sources":["../src/stream-schema-diff.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAuB/C;;4FAE4F;AAC5F,MAAM,UAAU,yBAAyB,CAAC,QAAiE,EAAE,YAAgD;IAC3J,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmC,CAAC;IACzD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6HAA6H,CAAC,CAAC;QACpN,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,KAAc,EAAU,EAAE;QAC3D,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACrG,OAAO,aAAa,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC;IACF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,UAAU,EAAmB,EAAE;QAClD,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QACxF,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,EAAmC,EAAE,cAAc,EAAE,EAAc,EAAE,iBAAiB,EAAE,EAAc,EAAE,CAAC;QAC9J,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAC5D,IAAI,WAAW,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAClK,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QAC9F,MAAM,OAAO,GAAG,WAAW,CAAC,MAAiC,EAAE,OAAO,GAAG,UAAqC,CAAC;QAC/G,MAAM,WAAW,GAAkC,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC9C,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;oBAAE,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACtN,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QAAC,CAAC;QAC5D,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,uBAAuB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACtP,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/streams.d.ts

@@ -1,4 +1,4 @@
-import { StorageType, type ConsumerConfig, type JetStreamClient, type JetStreamManager } from "@nats-io/jetstream";
+import { StorageType, type ConsumerConfig, type JetStreamClient, type JetStreamManager, type StreamConfig } from "@nats-io/jetstream";
 import { type NatsConnection } from "@nats-io/transport-node";
 /** #1356: the presence bucket is memory-backed. Its records are pure liveness that every endpoint
  *  rewrites every heartbeat and republishes after a broker restart, so durability buys nothing, while
@@ -64,6 +64,12 @@ export declare const MANAGER_LEASE_ATTEMPT_MS = 2000;
  *  far above any realistic readership while keeping the bucket from growing unbounded. A deliberate cap,
  *  not a guess at scale — the design is cap-safe by construction (per-agent, store-patterns-not-expanded). */
 export declare const MEMBERSHIP_MAX_BYTES: number;
+/** The `max_bytes` a per-space artifact Object Store carried before the reservation was removed:
+ *  4 GiB, the stock value every store created by that code holds. Kept for ONE purpose —
+ *  {@link ensureArtifactStore} recognizes it and reconciles it to `-1`, releasing the reservation.
+ *  Schema inspection shares the value to name that native migration gate. It is never a new
+ *  quota, a generic widening rule or permission to run the migration. */
+export declare const LEGACY_ARTIFACT_STORE_MAX_BYTES: number;
 export interface ClearSpaceHistoryResult {
     chat: number;
     dm?: number;
@@ -105,6 +111,18 @@ export interface StandaloneAuth {
  *  client-chosen inbox NONCE goes out as the connect `name` — the callout scopes `_INBOX_<nonce>.>`
  *  from it (the client cannot know its nkey pre-connect). Open mode (no auth) connects bare. */
 export declare function standaloneConnectOpts(auth: StandaloneAuth): Record<string, unknown>;
+/** Native message-stream creation fields shared by bootstrap and schema planning. */
+export declare function spaceMessageStreamConfigs(space: string): import("./backup-config.js").CanonicalBackupStreamConfig[];
+/** Native durable registry-stream creation fields. The backup inventory stays independent. */
+export declare function spaceRegistryStreamConfigs(space: string): import("./backup-config.js").CanonicalBackupStreamConfig[];
+/** Native derived-membership creation inputs, not evidence of observed membership. */
+export declare function membershipStoreDefinition(space: string): {
+    bucket: string;
+    createOptions: {
+        history: number;
+        max_bytes: number;
+    };
+};
 /**
  * Create (idempotently) the five message streams for a space.
  *
@@ -235,6 +253,14 @@ export declare function reconcileSpaceTtls(opts: {
     /** Privileged creds for an authed mesh; omit on an open mesh (a bare connection has the rights). */
     creds?: string;
 }): Promise<TtlReconciled[]>;
+/** Native object-store creation inputs. Binding, bounds and legacy-cap checks stay
+ *  in {@link ensureArtifactStore}; SDK-derived fields are not inferred by schema planning. */
+export declare function artifactStoreDefinition(space: string): {
+    bucket: string;
+    createOptions: {
+        max_bytes: number;
+    };
+};
 /**
  * Create the space's artifact Object Store, or VERIFY an existing one — never silently adopt it.
  *
@@ -268,6 +294,9 @@ export declare function reconcileSpaceTtls(opts: {
  * decision and is still refused as drift: this path never silently widens a bound it did not set.
  */
 export declare function ensureArtifactStore(nc: NatsConnection, space: string): Promise<void>;
+/** Pure native artifact-store invariant checks. The legacy-cap update and broker readback
+ *  remain in {@link ensureArtifactStore}; this function never widens a bound or writes. */
+export declare function assertArtifactStoreConfig(config: StreamConfig, space: string): void;
 export declare function setupSpaceStreams(opts: {
     servers: string;
     space: string;