@cotal-ai/core 0.90.1 → 0.91.0

package/dist/connector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;8EAE0E;IAC1E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;mDAC+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;uGAImG;IACnG,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC5F;;+EAE2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;wGAEoG;IACpG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;sGAEkG;IAClG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;iFAO6E;IAC7E,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;uDAImD;IACnD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;kEAE8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;8FAG0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;gCAI4B;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;qFAGiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC;;;;2CAIuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;uFAMmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;0DAIsD;IACtD,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D;;;;iFAI6E;IAC7E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;iFAI6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;4BAQwB;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;qDAEiD;IACjD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;0EAIsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C;6FACyF;IACzF,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;sBAIkB;IAClB,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B;;qGAEiG;IACjG,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;2FAEuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;mDAE+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;;6CAIyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;wEAEoE;IACpE,aAAa,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC;;;mCAG+B;IAC/B,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;;;;wBAMoB;IACpB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C;;iGAE6F;IAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;wCAKoC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;6BAGyB;IACzB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;kDACkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;8DAC8D;AAC9D,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED,qGAAqG;AACrG,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,iEAAiE;AACjE,MAAM,WAAW,qBAAsB,SAAQ,YAAY;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;kFAC8E;IAC9E,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC1C;8DAC0D;IAC1D,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3E;;;;;;;;;;oDAUgD;IAChD,YAAY,CAAC,CAAC,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;IACnE;;;;yCAIqC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;+DAG2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;uBAMmB;IACnB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;8EAE0E;IAC1E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IACpD;6FACyF;IACzF,QAAQ,CAAC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAC/C;4EACwE;IACxE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC;;;mDAG+C;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C;iEAC6D;IAC7D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC;;uEAEmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;;;;;;OAOG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC;;;;uEAImE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,gEAAgE;AAChE,MAAM,WAAW,uBAAuB;IACtC;;mEAE+D;IAC/D,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACxF;AAED,oFAAoF;AACpF,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,YAAY,CAAC;AAE/E;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,6BAA6B,GAAG,oBAAoB,CAAC,GAClG,sBAAsB,CAIxB;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC,GAAG,IAAI,CAK5G"}
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;8EAE0E;IAC1E,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;mDAC+C;IAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;uGAImG;IACnG,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC5F;;+EAE2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;wGAEoG;IACpG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;sGAEkG;IAClG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;iFAO6E;IAC7E,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;uDAImD;IACnD,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;kEAE8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;8FAG0F;IAC1F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;gCAI4B;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;qFAGiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC;;;;2CAIuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;uFAMmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;0DAIsD;IACtD,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D;;;;iFAI6E;IAC7E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;iFAI6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;4BAQwB;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;qDAEiD;IACjD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;0EAIsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3C;6FACyF;IACzF,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;sBAIkB;IAClB,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B;;qGAEiG;IACjG,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;2FAEuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;mDAE+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;;6CAIyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;wEAEoE;IACpE,aAAa,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC;;;mCAG+B;IAC/B,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;;;;wBAMoB;IACpB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C;;iGAE6F;IAC7F,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;wCAKoC;IACpC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;6BAGyB;IACzB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;kDACkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;8DAC8D;AAC9D,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED,qGAAqG;AACrG,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB;uGACmG;IACnG,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,iEAAiE;AACjE,MAAM,WAAW,qBAAsB,SAAQ,YAAY;IACzD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAU,SAAQ,SAAS;IAC1C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;kFAC8E;IAC9E,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC1C;8DAC0D;IAC1D,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3E;;;;;;;;;;oDAUgD;IAChD,YAAY,CAAC,CAAC,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;IACnE;;;;yCAIqC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;+DAG2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;uBAMmB;IACnB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;8EAE0E;IAC1E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IACpD;6FACyF;IACzF,QAAQ,CAAC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAC/C;4EACwE;IACxE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC;;;mDAG+C;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAC5C;iEAC6D;IAC7D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC;;uEAEmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;;;;;;OAOG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC;;;;uEAImE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,gEAAgE;AAChE,MAAM,WAAW,uBAAuB;IACtC;;mEAE+D;IAC/D,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACxF;AAED,oFAAoF;AACpF,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,YAAY,CAAC;AAE/E;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,6BAA6B,GAAG,oBAAoB,CAAC,GAClG,sBAAsB,CAIxB;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC,GAAG,IAAI,CAK5G"}

package/dist/connector.js.map

@@ -1 +1 @@
-{"version":3,"file":"connector.js","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAiVA;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAmG;IAEnG,IAAI,SAAS,CAAC,2BAA2B;QAAE,OAAO,OAAO,CAAC;IAC1D,IAAI,SAAS,CAAC,cAAc;QAAE,OAAO,MAAM,CAAC;IAC5C,OAAO,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,SAAsD;IACpG,IAAI,SAAS,CAAC,wBAAwB,KAAK,IAAI;QAAE,OAAO;IACxD,MAAM,IAAI,KAAK,CACb,qIAAqI,CACtI,CAAC;AACJ,CAAC"}
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../src/connector.ts"],"names":[],"mappings":"AAoVA;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAmG;IAEnG,IAAI,SAAS,CAAC,2BAA2B;QAAE,OAAO,OAAO,CAAC;IAC1D,IAAI,SAAS,CAAC,cAAc;QAAE,OAAO,MAAM,CAAC;IAC5C,OAAO,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,SAAsD;IACpG,IAAI,SAAS,CAAC,wBAAwB,KAAK,IAAI;QAAE,OAAO;IACxD,MAAM,IAAI,KAAK,CACb,qIAAqI,CACtI,CAAC;AACJ,CAAC"}

package/dist/endpoint-binding.d.ts

@@ -9,7 +9,7 @@
  * created by exactly one trusted principal (provisioner or the owning infra principal) and the
  * §13.9 grant rows are generated against these same names and filters.
  */
-import { type ConsumerConfig, type JetStreamManager } from "@nats-io/jetstream";
+import { type ConsumerConfig, type JetStreamManager, type StreamConfig } from "@nats-io/jetstream";
 import type { Kvm } from "@nats-io/kv";
 import { type EpCaller } from "./endpoint-subjects.js";
 import type { RecordKindDef } from "./endpoint-records.js";
@@ -152,6 +152,12 @@ export declare function assertFactRetentionFloor(factMaxAgeMs: number | undefine
     resultRetentionMs?: number;
     receiptRetentionMs?: number;
 } | number): void;
+/** Pure native configurations for the directly declared endpoint/workflow streams. Bootstrap
+ *  consumes the same values that a schema observer reads; this performs no broker operation.
+ *  Authority/contract stores and the independent owned-stream census keep their own guards. */
+export declare function endpointDataStreamConfigs(space: string, opts?: EndpointStreamOptions): Array<Partial<StreamConfig> & {
+    name: string;
+}>;
 /**
  * Create (idempotently) the §13.12 per-space control-surface resources: the seven JetStream
  * streams, the work-pool WorkQueue, and the KV buckets (records + auth + the §13.6 session ledger).
@@ -164,6 +170,50 @@ export declare function assertFactRetentionFloor(factMaxAgeMs: number | undefine
  * ({@link createSessionsStore}), never the auth bucket.
  */
 export declare function createEndpointStreams(jsm: JetStreamManager, kvm: Kvm, space: string, opts?: EndpointStreamOptions): Promise<void>;
+/** Native contract-stream creation fields. Existing-store migration and shadow checks remain
+ *  in {@link ensureContractStore}; these values alone never authorize a change. */
+export declare function endpointContractStreamConfig(space: string): {
+    max_msgs_per_subject: 1;
+    discard: "new";
+    discard_new_per_subject: true;
+    name: string;
+    subjects: string[];
+    retention: "limits";
+    storage: "file";
+    allow_direct: boolean;
+    deny_delete: boolean;
+    deny_purge: boolean;
+};
+/** Native authority-bucket creation inputs and post-create hardening. Reading a definition
+ *  does not replace the binding, leader-read or drift checks in {@link ensureAuthorityStores}. */
+export declare function endpointAuthorityStoreDefinitions(space: string): {
+    records: {
+        bucket: string;
+        createOptions: {
+            allow_direct: boolean;
+        };
+        hardenAfterCreate: Readonly<{
+            allow_rollup_hdrs: false;
+            deny_delete: true;
+            deny_purge: true;
+        }>;
+    };
+    auth: {
+        bucket: string;
+        createOptions: {
+            allow_direct: boolean;
+            markerTTL: number;
+        };
+    };
+};
+/** Native session-ledger creation inputs; verification remains in {@link createSessionsStore}. */
+export declare function endpointSessionStoreDefinition(space: string): {
+    bucket: string;
+    createOptions: {
+        allow_direct: boolean;
+        markerTTL: number;
+    };
+};
 /**
  * Ensure the per-space CONTRACT store (EPC) exists with its normative shape (§13.7/§13.12) —
  * content-addressed artifacts, one immutable message per digest subject, create-only mediated
@@ -210,6 +260,11 @@ export declare function createEndpointStreams(jsm: JetStreamManager, kvm: Kvm, s
  * lands; an older broker that ignores the flag is caught here and the daemon fails to start.
  */
 export declare function ensureContractStore(jsm: JetStreamManager, space: string): Promise<void>;
+/** Pure checks of the native contract-store invariants. This does not prove a legacy store
+ *  clean for migration and never applies the per-subject cap. */
+export declare function assertContractStoreConfig(cfg: StreamConfig & {
+    discard_new_per_subject?: boolean;
+}, space: string): void;
 /**
  * Ensure the two per-space AUTHORITY stores exist with their normative shape (§13.12):
  *
@@ -238,6 +293,16 @@ export declare function ensureAuthorityStores(jsm: JetStreamManager, kvm: Kvm, s
  *  structural fix for the §13.9 subject-blindness a shared auth bucket would carry (creds + gates).
  *  Create-or-verify, safe at every manager boot; a drifted store FAILS LOUD (§13.12). */
 export declare function createSessionsStore(jsm: JetStreamManager, kvm: Kvm, space: string): Promise<void>;
+/** Pure native records-store invariant checks; no read, repair or authority is supplied. */
+export declare function assertRecordsStoreConfig(recordCfg: StreamConfig, space: string): void;
+/** Pure native auth-store invariant checks; no read, repair or authority is supplied. */
+export declare function assertAuthStoreConfig(authCfg: StreamConfig & {
+    allow_msg_ttl?: boolean;
+}, space: string): void;
+/** Pure native sessions-store invariant checks; no read, repair or authority is supplied. */
+export declare function assertSessionsStoreConfig(cfg: StreamConfig & {
+    allow_msg_ttl?: boolean;
+}, space: string): void;
 /** `poolD = pool_<e>_<pool>` — parses uniquely from its LAST `_` because a pool token contains
  *  no `_` (`[a-z0-9-]`) while `<e>` may. */
 export declare function poolDurable(endpoint: string, pool: string): string;

package/dist/endpoint-binding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"endpoint-binding.d.ts","sourceRoot":"","sources":["../src/endpoint-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,gBAAgB,EAEtB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAOL,KAAK,QAAQ,EACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAA6F,MAAM,uBAAuB,CAAC;AAC9K,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAMtD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AAErE,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AACtF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAsC;AAC7F,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AACtF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AACtF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AACtF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AAEtF;;;8EAG8E;AAC9E,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AAEtF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;qFAOqF;AACrF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjE;AAED;;;oFAGoF;AACpF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;;;;uGAOuG;AACvG,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;yFAIyF;AACzF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAiBhE;AAED;;;;oFAIoF;AACpF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpE;AAID;;;iGAGiG;AACjG,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C;;4CAE4C;AAC5C,eAAO,MAAM,wBAAwB,QAAsB,CAAC;AAE5D,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,QAAsB,CAAC;AAEvD;8DAC8D;AAC9D,eAAO,MAAM,qBAAqB,QAAsB,CAAC;AAEzD;;2DAE2D;AAC3D,eAAO,MAAM,mBAAmB,QAA2B,CAAC;AAE5D;;;kDAGkD;AAClD,eAAO,MAAM,qBAAqB,QAAiB,CAAC;AAEpD,MAAM,WAAW,qBAAqB;IACpC,sGAAsG;IACtG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;6FAEyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;2EAGuE;IACvE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;4EAEwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;iDAG6C;IAC7C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sGAAsG;IACtG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4FAA4F;IAC5F,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAC7F,IAAI,CA6BN;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,gBAAgB,EACrB,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,IAAI,CAAC,CAyGf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgD7F;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BzG;AAED;;;;;;;;;;yFAUyF;AACzF,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASvG;AAgBD;4CAC4C;AAC5C,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;gEAKgE;AAChE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;0EAC0E;AAC1E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED;;;;;;uFAMuF;AACvF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAGpG;AAED;wGACwG;AACxG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAGnF;AAmCD;6FAC6F;AAC7F,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACxD,OAAO,CAAC,cAAc,CAAC,CASzB;AAED;;yEAEyE;AACzE,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACxD,OAAO,CAAC,cAAc,CAAC,CASzB;AAED;;;;;iGAKiG;AACjG,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,aAAa,EAClB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAUzB;AAED;;qFAEqF;AACrF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAQzB;AAED;;;;qCAIqC;AACrC,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAczB;AAED;;qEAEqE;AACrE,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,QAAQ,EAChB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAQzB;AAED,yGAAyG;AACzG,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,QAAQ,EAChB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAQzB;AAuBD;;;;sFAIsF;AACtF,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACxF,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAczB;AAYD;;;0EAG0E;AAC1E,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACtE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAkDzB;AAED,mGAAmG;AACnG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAyC;AA8DnG,mGAAmG;AACnG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAI7E;AAED;;;;;;;;;wEASwE;AACxE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAKjF;AAED;;;;;;;;;6EAS6E;AAC7E,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM;AACb;;;;;;;;GAQG;AACH,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAAO,GACtF,OAAO,CAAC,cAAc,CAAC,CAoBzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAUjG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAS7G;AAED,oGAAoG;AACpG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAI9F;AAED;4EAC4E;AAC5E,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED;;;+BAG+B;AAC/B,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAKjG;AAED;iGACiG;AACjG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3E;AAED,uGAAuG;AACvG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,MAAM,EAAE,CAI9E;AAED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAIzD;AAED;uGACuG;AACvG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3F;AAED;4FAC4F;AAC5F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,EAAE,CAIvF;AAED,0GAA0G;AAC1G,MAAM,WAAW,iBAAiB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;CAAE;AAEtF;;;mGAGmG;AACnG,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,EAAE,CAMjF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uEA+BuE;AACvE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAcnI;AAED;;;;;;;;;;;;;;6FAc6F;AAC7F,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAWpJ;AAED;;;;;;;;;;;;;;;;;;;;;;;4FAuB4F;AAC5F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAgCjI;AAED;;;;;;;;;;;;;;;;;;;;;;sGAsBsG;AACtG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAM5H;AAED;6FAC6F;AAC7F,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAG5H;AAwBD;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA2BgC;AAChC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAW7G;AAED;;;;;;;;;;;;;;;;;;;;;2CAqB2C;AAC3C,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAOjH"}
+{"version":3,"file":"endpoint-binding.d.ts","sourceRoot":"","sources":["../src/endpoint-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAML,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAOL,KAAK,QAAQ,EACd,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAA6F,MAAM,uBAAuB,CAAC;AAC9K,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAMtD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AAErE,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AACtF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAsC;AAC7F,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AACtF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AACtF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AACtF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AAEtF;;;8EAG8E;AAC9E,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAkC;AAEtF;;;;;;;;;;;;;GAaG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;qFAOqF;AACrF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjE;AAED;;;oFAGoF;AACpF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;;;;uGAOuG;AACvG,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;;;;yFAIyF;AACzF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAiBhE;AAED;;;;oFAIoF;AACpF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpE;AAID;;;iGAGiG;AACjG,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C;;4CAE4C;AAC5C,eAAO,MAAM,wBAAwB,QAAsB,CAAC;AAE5D,qFAAqF;AACrF,eAAO,MAAM,mBAAmB,QAAsB,CAAC;AAEvD;8DAC8D;AAC9D,eAAO,MAAM,qBAAqB,QAAsB,CAAC;AAEzD;;2DAE2D;AAC3D,eAAO,MAAM,mBAAmB,QAA2B,CAAC;AAE5D;;;kDAGkD;AAClD,eAAO,MAAM,qBAAqB,QAAiB,CAAC;AAEpD,MAAM,WAAW,qBAAqB;IACpC,sGAAsG;IACtG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;6FAEyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;2EAGuE;IACvE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;4EAEwE;IACxE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;iDAG6C;IAC7C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sGAAsG;IACtG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4FAA4F;IAC5F,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAC7F,IAAI,CA6BN;AAED;;+FAE+F;AAC/F,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,qBAA0B,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA8F1I;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,gBAAgB,EACrB,GAAG,EAAE,GAAG,EACR,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,IAAI,CAAC,CAef;AAED;mFACmF;AACnF,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,MAAM;;;;;;;;;;;EAWzD;AAED;kGACkG;AAClG,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,MAAM;;;;;;;;;;;;;;;;;;;EAK9D;AAED,kGAAkG;AAClG,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,MAAM;;;;;;EAE3D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgC7F;AAED;iEACiE;AACjE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,YAAY,GAAG;IAAE,uBAAuB,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAUxH;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBzG;AAED;;;;;;;;;;yFAUyF;AACzF,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQvG;AAED,4FAA4F;AAC5F,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAKrF;AAED,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,GAAG;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAK9G;AAED,6FAA6F;AAC7F,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,YAAY,GAAG;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAK9G;AAgBD;4CAC4C;AAC5C,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;gEAKgE;AAChE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;0EAC0E;AAC1E,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED;;;;;;uFAMuF;AACvF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAGpG;AAED;wGACwG;AACxG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAGnF;AAmCD;6FAC6F;AAC7F,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACxD,OAAO,CAAC,cAAc,CAAC,CASzB;AAED;;yEAEyE;AACzE,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACxD,OAAO,CAAC,cAAc,CAAC,CASzB;AAED;;;;;iGAKiG;AACjG,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,aAAa,EAClB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAUzB;AAED;;qFAEqF;AACrF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAQzB;AAED;;;;qCAIqC;AACrC,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAczB;AAED;;qEAEqE;AACrE,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,QAAQ,EAChB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAQzB;AAED,yGAAyG;AACzG,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,QAAQ,EAChB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAQzB;AAuBD;;;;sFAIsF;AACtF,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACxF,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAczB;AAYD;;;0EAG0E;AAC1E,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EACtE,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,cAAc,CAAC,CAkDzB;AAED,mGAAmG;AACnG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAyC;AA8DnG,mGAAmG;AACnG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAI7E;AAED;;;;;;;;;wEASwE;AACxE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAKjF;AAED;;;;;;;;;6EAS6E;AAC7E,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM;AACb;;;;;;;;GAQG;AACH,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAAO,GACtF,OAAO,CAAC,cAAc,CAAC,CAoBzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAUjG;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAS7G;AAED,oGAAoG;AACpG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAI9F;AAED;4EAC4E;AAC5E,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED;;;+BAG+B;AAC/B,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAKjG;AAED;iGACiG;AACjG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3E;AAED,uGAAuG;AACvG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,MAAM,EAAE,CAI9E;AAED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAIzD;AAED;uGACuG;AACvG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3F;AAED;4FAC4F;AAC5F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,MAAM,EAAE,CAIvF;AAED,0GAA0G;AAC1G,MAAM,WAAW,iBAAiB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;CAAE;AAEtF;;;mGAGmG;AACnG,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,EAAE,CAMjF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uEA+BuE;AACvE,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAcnI;AAED;;;;;;;;;;;;;;6FAc6F;AAC7F,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAWpJ;AAED;;;;;;;;;;;;;;;;;;;;;;;4FAuB4F;AAC5F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAgCjI;AAED;;;;;;;;;;;;;;;;;;;;;;sGAsBsG;AACtG,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAM5H;AAED;6FAC6F;AAC7F,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAG5H;AAwBD;;;;;;;;;;;;;;;;;;;;;;;;;;;gCA2BgC;AAChC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAW7G;AAED;;;;;;;;;;;;;;;;;;;;;2CAqB2C;AAC3C,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAOjH"}

package/dist/endpoint-binding.js

@@ -16,7 +16,7 @@ import { endpointToken, assertIdToken, assertGrantId, assertPoolToken, assertLif
 import { AUTHORITY_KIND_DEFS, callerReadableRecordKind } from "./endpoint-records.js";
 import { epjStreamName, epfStreamName, canonDurable, IDEMPOTENCY_HORIZON_MS_DEFAULT, RESULT_RETENTION_MS_DEFAULT, RECEIPT_RETENTION_MS_DEFAULT } from "./endpoint-journal.js";
 import { recordsBucket } from "./endpoint-records.js";
-import { ensureIssuedStores, issuedStoreStreamNames } from "./issued-authority.js";
+import { AUTHORITY_STORE_IMMUTABLE_FLAGS, WRITE_ONCE_PER_KEY, ensureIssuedStores, issuedStoreStreamNames } from "./issued-authority.js";
 import { admissionBucket, ensureAdmissionStore } from "./run-admission.js";
 // Re-exported so the binding module presents the complete §13.12 name table even though the
 // journal/records helpers own the definitions their own logic is written against.
@@ -181,6 +181,104 @@ export function assertFactRetentionFloor(factMaxAgeMs, terms) {
             + `as NEW WORK rather than resolved to its recorded decision, and a receipt whose acceptance fact has `
             + `gone can no longer be reconstructed (SPEC §13.12)`);
 }
+/** Pure native configurations for the directly declared endpoint/workflow streams. Bootstrap
+ *  consumes the same values that a schema observer reads; this performs no broker operation.
+ *  Authority/contract stores and the independent owned-stream census keep their own guards. */
+export function endpointDataStreamConfigs(space, opts = {}) {
+    const p = spacePrefix(space);
+    // Refused BEFORE the first stream exists, so a breaching config never leaves a half-built space.
+    assertFactRetentionFloor(opts.factMaxAgeMs, {
+        horizonMs: opts.idempotencyHorizonMs ?? IDEMPOTENCY_HORIZON_MS_DEFAULT,
+        ...(opts.resultRetentionMs !== undefined ? { resultRetentionMs: opts.resultRetentionMs } : {}),
+        ...(opts.receiptRetentionMs !== undefined ? { receiptRetentionMs: opts.receiptRetentionMs } : {}),
+    });
+    return [
+        // EPJ — raw submissions, untrusted, at-least-once. NO allow_direct (nothing reads it but the
+        // canonicalizer's durable and harness MSG.GET); duplicate window pinned to the server minimum.
+        {
+            name: epjStreamName(space),
+            subjects: [`${p}.epj.>`],
+            retention: RetentionPolicy.Limits,
+            storage: StorageType.File,
+            max_age: nanos(opts.submissionMaxAgeMs ?? EP_SUBMISSION_MAX_AGE_MS),
+            duplicate_window: nanos(EPJ_DUPLICATE_WINDOW_MS),
+        },
+        // EPF — canonical facts; acceptance is create-only CAS; allow_direct serves the §13.9
+        // last-by-subject fact reads (trusted principals only; callers read via the mediator).
+        {
+            name: epfStreamName(space),
+            subjects: [`${p}.epf.>`],
+            retention: RetentionPolicy.Limits,
+            storage: StorageType.File,
+            allow_direct: true,
+            ...(opts.factMaxAgeMs ? { max_age: nanos(opts.factMaxAgeMs) } : {}),
+        },
+        // EPE — events/progress.
+        {
+            name: epeStreamName(space),
+            subjects: [`${p}.epe.>`],
+            retention: RetentionPolicy.Limits,
+            storage: StorageType.File,
+            max_age: nanos(opts.eventMaxAgeMs ?? EP_EVENT_MAX_AGE_MS),
+        },
+        // EPT_REQ — schedule REQUESTS. Message schedules DISABLED (the default; asserted by the
+        // smoke): a client-set scheduling header here cannot arm anything, which is what closes the
+        // ADR-51 confused deputy — only the timer writer's `.armed` publish (on EPT) schedules.
+        {
+            name: eptReqStreamName(space),
+            subjects: [`${p}.ept.*.*.*.*.schedule`],
+            retention: RetentionPolicy.Limits,
+            storage: StorageType.File,
+            max_age: nanos(opts.ingressMaxAgeMs ?? EP_INGRESS_MAX_AGE_MS),
+        },
+        // EPR — record-write ingress, consumed only by the per-kind record writers.
+        {
+            name: eprStreamName(space),
+            subjects: [`${p}.epr.>`],
+            retention: RetentionPolicy.Limits,
+            storage: StorageType.File,
+            max_age: nanos(opts.ingressMaxAgeMs ?? EP_INGRESS_MAX_AGE_MS),
+        },
+        // EPT — authoritative schedules (.armed) + fires (.fire). AllowMsgSchedules; each schedule
+        // targets its sibling `.fire` (ADR-51 forbids target = publish subject), and both patterns
+        // live on THIS stream because ADR-51 requires the target be captured by the same stream.
+        {
+            name: eptStreamName(space),
+            subjects: [`${p}.ept.*.*.*.*.armed`, `${p}.ept.*.*.*.*.fire`],
+            retention: RetentionPolicy.Limits,
+            storage: StorageType.File,
+            allow_msg_schedules: true,
+            max_age: nanos(opts.timerMaxAgeMs ?? EP_TIMER_MAX_AGE_MS),
+        },
+        // EPW — work pools, one item per subject. NO allow_direct: the §13.6 reconciliation probe
+        // (an acked item leaves the WorkQueue, an in-flight one remains readable — exactly the
+        // predicate) is a FENCING read that gates the re-enqueue decision, so it goes leader-served
+        // STREAM.MSG.GET (§13.9 "Work-pool reconciliation probe"), never a follower-servable Direct Get whose stale miss
+        // would re-arm settled work. Nothing else reads EPW: the pool workers drain it via the
+        // WorkQueue consumer (CONSUMER.MSG.NEXT), not by subject read.
+        {
+            name: epwStreamName(space),
+            subjects: [`${p}.epw.>`],
+            retention: RetentionPolicy.Workqueue,
+            storage: StorageType.File,
+            allow_direct: false,
+        },
+        // WFJ — the workflow step journal, one subject per run (see wfjSubject: the activation barrier
+        // is per-subject, so the subject is the run). NO max_age: a run's journal must outlive any
+        // retention window a control-surface plane wants, because a run that sleeps for a month resumes
+        // by re-reading it, and an evicted prefix is not a shorter journal, it is a run that will
+        // re-perform effects it already performed. Retirement is by subject purge, deliberately.
+        // NO allow_direct: a resume must read its own predecessor's last appends, and Direct Get is
+        // follower-servable — a stale miss there reads as "this step never ran".
+        {
+            name: wfjStreamName(space),
+            subjects: [`${p}.wfj.*`],
+            retention: RetentionPolicy.Limits,
+            storage: StorageType.File,
+            allow_direct: false,
+        },
+    ];
+}
 /**
  * Create (idempotently) the §13.12 per-space control-surface resources: the seven JetStream
  * streams, the work-pool WorkQueue, and the KV buckets (records + auth + the §13.6 session ledger).
@@ -193,97 +291,8 @@ export function assertFactRetentionFloor(factMaxAgeMs, terms) {
  * ({@link createSessionsStore}), never the auth bucket.
  */
 export async function createEndpointStreams(jsm, kvm, space, opts = {}) {
-    const p = spacePrefix(space);
-    // Refused BEFORE the first stream exists, so a breaching config never leaves a half-built space.
-    assertFactRetentionFloor(opts.factMaxAgeMs, {
-        horizonMs: opts.idempotencyHorizonMs ?? IDEMPOTENCY_HORIZON_MS_DEFAULT,
-        ...(opts.resultRetentionMs !== undefined ? { resultRetentionMs: opts.resultRetentionMs } : {}),
-        ...(opts.receiptRetentionMs !== undefined ? { receiptRetentionMs: opts.receiptRetentionMs } : {}),
-    });
-    // EPJ — raw submissions, untrusted, at-least-once. NO allow_direct (nothing reads it but the
-    // canonicalizer's durable and harness MSG.GET); duplicate window pinned to the server minimum.
-    await jsm.streams.add({
-        name: epjStreamName(space),
-        subjects: [`${p}.epj.>`],
-        retention: RetentionPolicy.Limits,
-        storage: StorageType.File,
-        max_age: nanos(opts.submissionMaxAgeMs ?? EP_SUBMISSION_MAX_AGE_MS),
-        duplicate_window: nanos(EPJ_DUPLICATE_WINDOW_MS),
-    });
-    // EPF — canonical facts; acceptance is create-only CAS; allow_direct serves the §13.9
-    // last-by-subject fact reads (trusted principals only; callers read via the mediator).
-    await jsm.streams.add({
-        name: epfStreamName(space),
-        subjects: [`${p}.epf.>`],
-        retention: RetentionPolicy.Limits,
-        storage: StorageType.File,
-        allow_direct: true,
-        ...(opts.factMaxAgeMs ? { max_age: nanos(opts.factMaxAgeMs) } : {}),
-    });
-    // EPE — events/progress.
-    await jsm.streams.add({
-        name: epeStreamName(space),
-        subjects: [`${p}.epe.>`],
-        retention: RetentionPolicy.Limits,
-        storage: StorageType.File,
-        max_age: nanos(opts.eventMaxAgeMs ?? EP_EVENT_MAX_AGE_MS),
-    });
-    // EPT_REQ — schedule REQUESTS. Message schedules DISABLED (the default; asserted by the
-    // smoke): a client-set scheduling header here cannot arm anything, which is what closes the
-    // ADR-51 confused deputy — only the timer writer's `.armed` publish (on EPT) schedules.
-    await jsm.streams.add({
-        name: eptReqStreamName(space),
-        subjects: [`${p}.ept.*.*.*.*.schedule`],
-        retention: RetentionPolicy.Limits,
-        storage: StorageType.File,
-        max_age: nanos(opts.ingressMaxAgeMs ?? EP_INGRESS_MAX_AGE_MS),
-    });
-    // EPR — record-write ingress, consumed only by the per-kind record writers.
-    await jsm.streams.add({
-        name: eprStreamName(space),
-        subjects: [`${p}.epr.>`],
-        retention: RetentionPolicy.Limits,
-        storage: StorageType.File,
-        max_age: nanos(opts.ingressMaxAgeMs ?? EP_INGRESS_MAX_AGE_MS),
-    });
-    // EPT — authoritative schedules (.armed) + fires (.fire). AllowMsgSchedules; each schedule
-    // targets its sibling `.fire` (ADR-51 forbids target = publish subject), and both patterns
-    // live on THIS stream because ADR-51 requires the target be captured by the same stream.
-    await jsm.streams.add({
-        name: eptStreamName(space),
-        subjects: [`${p}.ept.*.*.*.*.armed`, `${p}.ept.*.*.*.*.fire`],
-        retention: RetentionPolicy.Limits,
-        storage: StorageType.File,
-        allow_msg_schedules: true,
-        max_age: nanos(opts.timerMaxAgeMs ?? EP_TIMER_MAX_AGE_MS),
-    });
-    // EPW — work pools, one item per subject. NO allow_direct: the §13.6 reconciliation probe
-    // (an acked item leaves the WorkQueue, an in-flight one remains readable — exactly the
-    // predicate) is a FENCING read that gates the re-enqueue decision, so it goes leader-served
-    // STREAM.MSG.GET (§13.9 "Work-pool reconciliation probe"), never a follower-servable Direct Get whose stale miss
-    // would re-arm settled work. Nothing else reads EPW: the pool workers drain it via the
-    // WorkQueue consumer (CONSUMER.MSG.NEXT), not by subject read.
-    await jsm.streams.add({
-        name: epwStreamName(space),
-        subjects: [`${p}.epw.>`],
-        retention: RetentionPolicy.Workqueue,
-        storage: StorageType.File,
-        allow_direct: false,
-    });
-    // WFJ — the workflow step journal, one subject per run (see wfjSubject: the activation barrier
-    // is per-subject, so the subject is the run). NO max_age: a run's journal must outlive any
-    // retention window a control-surface plane wants, because a run that sleeps for a month resumes
-    // by re-reading it, and an evicted prefix is not a shorter journal, it is a run that will
-    // re-perform effects it already performed. Retirement is by subject purge, deliberately.
-    // NO allow_direct: a resume must read its own predecessor's last appends, and Direct Get is
-    // follower-servable — a stale miss there reads as "this step never ran".
-    await jsm.streams.add({
-        name: wfjStreamName(space),
-        subjects: [`${p}.wfj.*`],
-        retention: RetentionPolicy.Limits,
-        storage: StorageType.File,
-        allow_direct: false,
-    });
+    for (const definition of endpointDataStreamConfigs(space, opts))
+        await jsm.streams.add(definition);
     await ensureContractStore(jsm, space);
     await ensureAuthorityStores(jsm, kvm, space);
     // The issued-authority stores (SPEC 13.15) and the run admission store (SPEC 14.8) join the
@@ -298,6 +307,32 @@ export async function createEndpointStreams(jsm, kvm, space, opts = {}) {
     // that ensures the endpoint streams (auth + open both run this at the manager's boot) has it.
     await createSessionsStore(jsm, kvm, space);
 }
+/** Native contract-stream creation fields. Existing-store migration and shadow checks remain
+ *  in {@link ensureContractStore}; these values alone never authorize a change. */
+export function endpointContractStreamConfig(space) {
+    return {
+        name: epcStreamName(space),
+        subjects: [`${spacePrefix(space)}.epc.>`],
+        retention: RetentionPolicy.Limits,
+        storage: StorageType.File,
+        allow_direct: true,
+        deny_delete: true,
+        deny_purge: true,
+        ...WRITE_ONCE_PER_KEY,
+    };
+}
+/** Native authority-bucket creation inputs and post-create hardening. Reading a definition
+ *  does not replace the binding, leader-read or drift checks in {@link ensureAuthorityStores}. */
+export function endpointAuthorityStoreDefinitions(space) {
+    return {
+        records: { bucket: recordsBucket(space), createOptions: { allow_direct: true }, hardenAfterCreate: AUTHORITY_STORE_IMMUTABLE_FLAGS },
+        auth: { bucket: epAuthBucket(space), createOptions: { allow_direct: false, markerTTL: EP_AUTH_MARKER_TTL_MS } },
+    };
+}
+/** Native session-ledger creation inputs; verification remains in {@link createSessionsStore}. */
+export function endpointSessionStoreDefinition(space) {
+    return { bucket: sessionsBucket(space), createOptions: { allow_direct: false, markerTTL: EP_AUTH_MARKER_TTL_MS } };
+}
 /**
  * Ensure the per-space CONTRACT store (EPC) exists with its normative shape (§13.7/§13.12) —
  * content-addressed artifacts, one immutable message per digest subject, create-only mediated
@@ -344,20 +379,11 @@ export async function createEndpointStreams(jsm, kvm, space, opts = {}) {
  * lands; an older broker that ignores the flag is caught here and the daemon fails to start.
  */
 export async function ensureContractStore(jsm, space) {
-    const name = epcStreamName(space);
-    const subject = `${spacePrefix(space)}.epc.>`;
-    const hardening = { max_msgs_per_subject: 1, discard: DiscardPolicy.New, discard_new_per_subject: true };
+    const definition = endpointContractStreamConfig(space);
+    const name = definition.name;
+    const hardening = WRITE_ONCE_PER_KEY;
     if (await jsm.streams.info(name).catch(() => undefined) === undefined) {
-        await jsm.streams.add({
-            name,
-            subjects: [subject],
-            retention: RetentionPolicy.Limits,
-            storage: StorageType.File,
-            allow_direct: true,
-            deny_delete: true,
-            deny_purge: true,
-            ...hardening,
-        });
+        await jsm.streams.add(definition);
     }
     else {
         // Upgrade path: an EPC stream from a pre-hardening release lacks the per-subject cap. Add it
@@ -384,6 +410,12 @@ export async function ensureContractStore(jsm, space) {
         }
     }
     const cfg = (await jsm.streams.info(name)).config;
+    assertContractStoreConfig(cfg, space);
+}
+/** Pure checks of the native contract-store invariants. This does not prove a legacy store
+ *  clean for migration and never applies the per-subject cap. */
+export function assertContractStoreConfig(cfg, space) {
+    const name = epcStreamName(space), subject = `${spacePrefix(space)}.epc.>`;
     if (cfg.allow_direct !== true || cfg.deny_delete !== true || cfg.deny_purge !== true)
         throw new Error(`the contract store ${name} has a drifted shape (allow_direct=${String(cfg.allow_direct)}, deny_delete=${String(cfg.deny_delete)}, deny_purge=${String(cfg.deny_purge)}); an authority store is never silently adopted - reprovision it (SPEC 13.12)`);
     if (cfg.max_msgs_per_subject !== 1 || cfg.discard !== DiscardPolicy.New || cfg.discard_new_per_subject !== true)
@@ -415,25 +447,22 @@ export async function ensureAuthorityStores(jsm, kvm, space) {
     // through the SAME final `streams.info` + full normative verify — a drifted authority store is
     // an operator error, never silently adopted (§13.12: the flags + store-binding are load-bearing
     // for deny-new and the barrier CAS fences).
-    const recordBucket = recordsBucket(space);
+    const definitions = endpointAuthorityStoreDefinitions(space);
+    const recordBucket = definitions.records.bucket;
     const recordStream = `KV_${recordBucket}`;
     if (await jsm.streams.info(recordStream).catch(() => undefined) === undefined) {
-        await kvm.create(recordBucket, { allow_direct: true });
+        await kvm.create(recordBucket, definitions.records.createOptions);
         const recordConfig = (await jsm.streams.info(recordStream)).config;
-        await jsm.streams.update(recordStream, { ...recordConfig, allow_rollup_hdrs: false, deny_delete: true, deny_purge: true });
+        await jsm.streams.update(recordStream, { ...recordConfig, ...definitions.records.hardenAfterCreate });
     }
     const recordCfg = (await jsm.streams.info(recordStream)).config;
-    if (recordCfg.allow_direct !== true || recordCfg.allow_rollup_hdrs !== false || recordCfg.deny_delete !== true || recordCfg.deny_purge !== true)
-        throw new Error(`the records store ${recordBucket} has a drifted shape (allow_direct=${String(recordCfg.allow_direct)}, allow_rollup_hdrs=${String(recordCfg.allow_rollup_hdrs)}, deny_delete=${String(recordCfg.deny_delete)}, deny_purge=${String(recordCfg.deny_purge)}); an authority store is never silently adopted - reprovision it (SPEC 13.12)`);
-    assertAuthorityStoreBinding(recordCfg, recordBucket);
-    const authBucket = epAuthBucket(space);
+    assertRecordsStoreConfig(recordCfg, space);
+    const authBucket = definitions.auth.bucket;
     const authStream = `KV_${authBucket}`;
     if (await jsm.streams.info(authStream).catch(() => undefined) === undefined)
-        await kvm.create(authBucket, { allow_direct: false, markerTTL: EP_AUTH_MARKER_TTL_MS });
+        await kvm.create(authBucket, definitions.auth.createOptions);
     const authCfg = (await jsm.streams.info(authStream)).config;
-    if (authCfg.allow_direct !== false || authCfg.allow_msg_ttl !== true)
-        throw new Error(`the auth store ${authBucket} has a drifted shape (allow_direct=${String(authCfg.allow_direct)}, allow_msg_ttl=${String(authCfg.allow_msg_ttl)}); an authority store is never silently adopted - reprovision it (SPEC 13.12)`);
-    assertAuthorityStoreBinding(authCfg, authBucket);
+    assertAuthStoreConfig(authCfg, space);
 }
 /** Create (idempotently) the per-space SESSION ledger store (§13.6): the DEDICATED
  *  {@link sessionsBucket} the manager's session plane CASes `session.<id>` rows over. Kept OUT of
@@ -447,11 +476,31 @@ export async function ensureAuthorityStores(jsm, kvm, space) {
  *  structural fix for the §13.9 subject-blindness a shared auth bucket would carry (creds + gates).
  *  Create-or-verify, safe at every manager boot; a drifted store FAILS LOUD (§13.12). */
 export async function createSessionsStore(jsm, kvm, space) {
-    const bucket = sessionsBucket(space);
+    const definition = endpointSessionStoreDefinition(space);
+    const bucket = definition.bucket;
     const stream = `KV_${bucket}`;
     if (await jsm.streams.info(stream).catch(() => undefined) === undefined)
-        await kvm.create(bucket, { allow_direct: false, markerTTL: EP_AUTH_MARKER_TTL_MS });
+        await kvm.create(bucket, definition.createOptions);
     const cfg = (await jsm.streams.info(stream)).config;
+    assertSessionsStoreConfig(cfg, space);
+}
+/** Pure native records-store invariant checks; no read, repair or authority is supplied. */
+export function assertRecordsStoreConfig(recordCfg, space) {
+    const recordBucket = recordsBucket(space);
+    if (recordCfg.allow_direct !== true || recordCfg.allow_rollup_hdrs !== false || recordCfg.deny_delete !== true || recordCfg.deny_purge !== true)
+        throw new Error(`the records store ${recordBucket} has a drifted shape (allow_direct=${String(recordCfg.allow_direct)}, allow_rollup_hdrs=${String(recordCfg.allow_rollup_hdrs)}, deny_delete=${String(recordCfg.deny_delete)}, deny_purge=${String(recordCfg.deny_purge)}); an authority store is never silently adopted - reprovision it (SPEC 13.12)`);
+    assertAuthorityStoreBinding(recordCfg, recordBucket);
+}
+/** Pure native auth-store invariant checks; no read, repair or authority is supplied. */
+export function assertAuthStoreConfig(authCfg, space) {
+    const authBucket = epAuthBucket(space);
+    if (authCfg.allow_direct !== false || authCfg.allow_msg_ttl !== true)
+        throw new Error(`the auth store ${authBucket} has a drifted shape (allow_direct=${String(authCfg.allow_direct)}, allow_msg_ttl=${String(authCfg.allow_msg_ttl)}); an authority store is never silently adopted - reprovision it (SPEC 13.12)`);
+    assertAuthorityStoreBinding(authCfg, authBucket);
+}
+/** Pure native sessions-store invariant checks; no read, repair or authority is supplied. */
+export function assertSessionsStoreConfig(cfg, space) {
+    const bucket = sessionsBucket(space);
     if (cfg.allow_direct !== false || cfg.allow_msg_ttl !== true)
         throw new Error(`the sessions store ${bucket} has a drifted shape (allow_direct=${String(cfg.allow_direct)}, allow_msg_ttl=${String(cfg.allow_msg_ttl)}); an authority store is never silently adopted - reprovision it (SPEC 13.12)`);
     assertAuthorityStoreBinding(cfg, bucket);