@cotal-ai/delivery 0.56.0 → 0.57.0

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAChL,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AA8CzD,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC;AAC3J,OAAO,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAChL,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAmDzD,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC;AAC3J,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/index.js

@@ -8,23 +8,28 @@
 import { registry } from "@cotal-ai/core";
 import { assertUninjectedCredsSharesCwdRoot, DELIVERY_CREDS_KIND, deliveryCredsKey, reloadStoreIdentityFromCredsPath, reloadStoreIdentityOf, runDelivery } from "./delivery.js";
 import { runFeedbackIntake } from "./feedback-intake.js";
+import { runPending } from "./pending.js";
 const deliveryCommands = [
     {
         kind: "command",
         name: "deliver",
         group: "Manager",
-        summary: "run the delivery daemon — the server-side Plane-3 durable backstop [--space <s>] [--server <url>] [--creds <file>] (auth mode only; N=1)",
+        summary: "run the delivery daemon — the server-side Plane-3 durable backstop [--space <s>] [--server <url>] [--creds <file>] (auth mode only; N=1); or `deliver pending <name>` to inspect a recipient's held DMs",
+        positionals: "[pending <name> [--limit <n>] [--durable <name>]]",
         flags: [
             { name: "space", type: "string", value: "<s>", description: "space to serve (required; the scoped cred doesn't encode it)" },
             { name: "server", type: "string", value: "<url>", description: "broker URL (default: the broker recorded for --space, else the local mesh)" },
             { name: "tls", type: "boolean", description: "REQUIRE TLS to the broker - refuse to connect if it is not offered" },
-            { name: "creds", type: "string", value: "<file>", description: "pre-minted scoped delivery cred" },
+            { name: "creds", type: "string", value: "<file>", description: "pre-minted scoped delivery cred, or (with `pending`) an admin cred" },
             { name: "shard", type: "string", value: "<n>", description: "shard index (N=1 only; non-zero is rejected)" },
             { name: "shards", type: "string", value: "<n>", description: "shard count (N=1 only; >1 is rejected)" },
             { name: "dev-mint", type: "boolean", description: "standalone dev: mint a scoped delivery cred from the local signer" },
+            { name: "limit", type: "string", value: "<n>", description: "pending: max recent candidate ids to print (default 20)" },
+            { name: "durable", type: "string", value: "<name>", description: "pending: read this exact DM durable (a live read's printed name) instead of resolving <name>" },
+            { name: "json", type: "boolean", description: "pending: print the facts as one JSON object" },
         ],
         prepareMeshTarget: false,
-        run: (args) => runDelivery(args),
+        run: (args) => (args.positionals[0] === "pending" ? runPending(args) : runDelivery(args)),
     },
     {
         kind: "command",

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAgB,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAChL,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,gBAAgB,GAAc;IAClC;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,OAAO,EACL,0IAA0I;QAC5I,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,8DAA8D,EAAE;YAC5H,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,4EAA4E,EAAE;YAC7I,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,oEAAoE,EAAE;YACnH,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;YAClG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,8CAA8C,EAAE;YAC5G,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,wCAAwC,EAAE;YACvG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mEAAmE,EAAE;SACxH;QACD,iBAAiB,EAAE,KAAK;QACxB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC;KACjC;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,SAAS;QAChB,OAAO,EACL,+FAA+F;QACjG,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;YACnG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,6BAA6B,EAAE;YAC1F,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,oEAAoE,EAAE;YACpI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,+DAA+D,EAAE;YAChI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,0DAA0D,EAAE;YACxH,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,sDAAsD,EAAE;YACzH,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,sCAAsC,EAAE;YACvG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,6CAA6C,EAAE;YAC9G,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,iDAAiD,EAAE;YACnH,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,kDAAkD,EAAE;SACtH;QACD,iBAAiB,EAAE,KAAK;QACxB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;KACvC;CACF,CAAC;AAEF,QAAQ,CAAC,QAAQ,CAAC,GAAG,gBAAgB,CAAC,CAAC;AAEvC,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC;AAC3J,OAAO,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAgB,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAChL,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,gBAAgB,GAAc;IAClC;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,OAAO,EACL,yMAAyM;QAC3M,WAAW,EAAE,mDAAmD;QAChE,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,8DAA8D,EAAE;YAC5H,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,4EAA4E,EAAE;YAC7I,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,oEAAoE,EAAE;YACnH,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,oEAAoE,EAAE;YACrI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,8CAA8C,EAAE;YAC5G,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,wCAAwC,EAAE;YACvG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mEAAmE,EAAE;YACvH,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,yDAAyD,EAAE;YACvH,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,8FAA8F,EAAE;YACjK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,6CAA6C,EAAE;SAC9F;QACD,iBAAiB,EAAE,KAAK;QACxB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;KAC1F;IACD;QACE,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,SAAS;QAChB,OAAO,EACL,+FAA+F;QACjG,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;YACnG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,6BAA6B,EAAE;YAC1F,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,oEAAoE,EAAE;YACpI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,+DAA+D,EAAE;YAChI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,0DAA0D,EAAE;YACxH,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,sDAAsD,EAAE;YACzH,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,sCAAsC,EAAE;YACvG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,6CAA6C,EAAE;YAC9G,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,iDAAiD,EAAE;YACnH,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,kDAAkD,EAAE;SACtH;QACD,iBAAiB,EAAE,KAAK;QACxB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;KACvC;CACF,CAAC;AAEF,QAAQ,CAAC,QAAQ,CAAC,GAAG,gBAAgB,CAAC,CAAC;AAEvC,OAAO,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC;AAC3J,OAAO,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/pending.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `cotal deliver pending <name>` — an operator inspection read over one recipient's DM durable.
+ * Never starts the daemon. Answers exactly the question issue #417 asks after a suspected drop:
+ * what does the broker hold for this recipient right now. Reads only; never acks, never creates
+ * a durable, never claims delivery — the only truthful facts here are what JetStream reports about
+ * a consumer that already exists.
+ */
+import { type ParsedArgs } from "@cotal-ai/core";
+export declare function runPending(args: ParsedArgs): Promise<void>;
+//# sourceMappingURL=pending.d.ts.map

package/dist/pending.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending.d.ts","sourceRoot":"","sources":["../src/pending.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EASL,KAAK,UAAU,EAEhB,MAAM,gBAAgB,CAAC;AAyCxB,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAiIhE"}

package/dist/pending.js

@@ -0,0 +1,186 @@
+/**
+ * `cotal deliver pending <name>` — an operator inspection read over one recipient's DM durable.
+ * Never starts the daemon. Answers exactly the question issue #417 asks after a suspected drop:
+ * what does the broker hold for this recipient right now. Reads only; never acks, never creates
+ * a durable, never claims delivery — the only truthful facts here are what JetStream reports about
+ * a consumer that already exists.
+ */
+import { CotalEndpoint, dialerFor, dmDurable, dmStream, parsePrincipalKey, resolvePeer, standaloneConnectOpts, unicastSubject, } from "@cotal-ai/core";
+import { connectOrExit } from "@cotal-ai/workspace";
+import { jetstream, jetstreamManager, JetStreamApiCodes, JetStreamApiError } from "@nats-io/jetstream";
+/** A short presence watch, the shape `send.ts` polls: an `offline` card still counts as a resolved
+ *  peer (the recipient may be dead, that is exactly what this verb exists to inspect). */
+async function pollPresence(ep, target) {
+    let peer;
+    for (let i = 0; i < 20 && !peer; i++) {
+        peer = resolvePeer(ep.getRoster(), target);
+        if (!peer)
+            await new Promise((r) => setTimeout(r, 100));
+    }
+    return peer;
+}
+function notFound(name, space) {
+    console.error(`✗ not-found: no agent "${name}" and no DM durable for it in space ${space}`);
+    process.exit(1);
+}
+function notFoundDurable(durable, space) {
+    console.error(`✗ not-found: no DM durable "${durable}" in space ${space}`);
+    process.exit(1);
+}
+/** Inverse of {@link dmDurable} for the `dm_<owner>-<actor>-<lifecycleUid>` name form. Owner/actor
+ *  tokens ban `-` ({@link assertValidOwnerToken}) and the lifecycleUid token is `[a-z0-9]{26,32}`
+ *  (also `-`-free), so splitting the part after the well-known `dm_` prefix on `-` is unambiguous
+ *  exactly when it yields three parts each matching its own token grammar; anything else (a name
+ *  typed by hand, a different durable kind) is reported as unparseable rather than guessed at. */
+function parseDmDurable(durable) {
+    if (!durable.startsWith("dm_"))
+        return null;
+    const parts = durable.slice(3).split("-");
+    if (parts.length !== 3)
+        return null;
+    const [owner, actor, uid] = parts;
+    if (!/^[A-Za-z0-9_]+$/.test(owner) || !/^[A-Za-z0-9_]+$/.test(actor) || !/^[a-z0-9]{26,32}$/.test(uid))
+        return null;
+    return { owner, actor };
+}
+export async function runPending(args) {
+    const values = args.values;
+    const name = args.positionals[1];
+    if (!name || args.positionals.length > 2) {
+        console.error('usage: cotal deliver pending <name> [--limit <n>] [--durable <name>] [--space <s>] [--server <url>] [--creds <file>]');
+        process.exit(1);
+    }
+    const limit = values.limit ? Number(values.limit) : 20;
+    if (!Number.isSafeInteger(limit) || limit <= 0) {
+        console.error(`✗ --limit must be a positive integer, got ${JSON.stringify(values.limit)}`);
+        process.exit(1);
+    }
+    // Admin-only, static-mesh route (the same route `cotal mint --profile admin` takes): this verb
+    // grants no new authority, it rides the existing admin profile's STREAM.INFO/CONSUMER.INFO rows.
+    // A user-mode mesh has no equivalent read authority yet (see brief "Maintainer's calls"); refuse
+    // naming that rather than widening any other profile.
+    const conn = await connectOrExit(values, "admin");
+    const { server, space, tls } = conn;
+    // `<name>` stays required and is only echoed in error text; `--durable` (the exact consumer
+    // name a live read prints, via dmDurable/lifecycleNameKey) skips the presence watch entirely so
+    // an old lifecycle's held DMs stay reachable once its card is gone from the roster (a same-name
+    // respawn's card can never be steered back to a dead lifecycle's owner/actor by name alone).
+    let durable;
+    let recip;
+    if (values.durable) {
+        durable = values.durable;
+        recip = parseDmDurable(durable) ?? undefined;
+    }
+    else {
+        const ep = new CotalEndpoint({
+            space,
+            servers: server,
+            creds: conn.creds,
+            channels: [],
+            consume: false,
+            registerPresence: false,
+            watchPresence: true,
+            card: { name: "deliver-pending", kind: "endpoint" },
+        });
+        let peer;
+        await ep.start();
+        try {
+            peer = await pollPresence(ep, name);
+        }
+        finally {
+            await ep.stop();
+        }
+        if (!peer?.lifecycleUid)
+            notFound(name, space);
+        recip = parsePrincipalKey(peer.card.id) ?? undefined;
+        durable = dmDurable(recip?.owner ?? name, recip?.actor ?? name, peer.lifecycleUid);
+    }
+    const stream = dmStream(space);
+    const nc = await dialerFor(server)({ servers: server, ...standaloneConnectOpts({ creds: conn.creds, tls }), maxReconnectAttempts: 0 });
+    try {
+        const jsm = await jetstreamManager(nc);
+        let info;
+        try {
+            info = await jsm.consumers.info(stream, durable);
+        }
+        catch (e) {
+            if (e instanceof JetStreamApiError && e.code === JetStreamApiCodes.ConsumerNotFound) {
+                if (values.durable)
+                    notFoundDurable(durable, space);
+                notFound(name, space);
+            }
+            throw e;
+        }
+        const streamInfo = await jsm.streams.info(stream);
+        const frontier = Math.max(0, (info.config.opt_start_seq ?? 1) - 1);
+        const facts = {
+            durable,
+            pending: info.num_pending,
+            ackPending: info.num_ack_pending,
+            delivered: info.delivered.stream_seq,
+            ackFloor: info.ack_floor.stream_seq,
+            created: info.created,
+            frontier,
+            max_age: streamInfo.config.max_age,
+            max_msgs_per_subject: streamInfo.config.max_msgs_per_subject,
+            discard: streamInfo.config.discard,
+        };
+        if (values.json) {
+            console.log(JSON.stringify(facts));
+        }
+        else {
+            console.log(durable);
+            console.log(`pending ${facts.pending}`);
+            console.log(`ack-pending ${facts.ackPending}`);
+            console.log(`delivered ${facts.delivered}`);
+            console.log(`ack-floor ${facts.ackFloor}`);
+            console.log(`created ${facts.created}`);
+            console.log(`frontier ${facts.frontier}`);
+            console.log(`max_age ${facts.max_age} max_msgs_per_subject ${facts.max_msgs_per_subject} discard ${facts.discard}`);
+        }
+        // Bounded read of recent candidate ids from the ack floor - an ephemeral ordered consumer,
+        // never acked, never durable. Not proof of a hole: it names what is there, nothing more.
+        // Needs owner/actor to filter subjects; skipped (and said so) when neither a resolved card
+        // nor an unambiguous --durable parse supplied them.
+        if (!recip) {
+            console.log("recent candidate ids: not read (no resolved card)");
+        }
+        else {
+            const js = jetstream(nc);
+            const subjects = [unicastSubject(space, recip.owner, recip.actor, "*", "*")];
+            const start = facts.ackFloor + 1;
+            const consumer = await js.consumers.get(stream, { filter_subjects: subjects, opt_start_seq: start });
+            try {
+                const cinfo = await consumer.info(true);
+                const pendingCandidates = Math.min(cinfo.num_pending, limit);
+                console.log("recent candidate ids (from the ack floor; not proof of a hole)");
+                if (pendingCandidates > 0) {
+                    const iter = await consumer.consume({ max_messages: pendingCandidates });
+                    let seen = 0;
+                    try {
+                        for await (const m of iter) {
+                            const body = JSON.parse(new TextDecoder().decode(m.data));
+                            console.log(`  ${body.id}  from=${body.from}  ts=${body.ts}`);
+                            seen++;
+                            if (seen >= pendingCandidates)
+                                break;
+                        }
+                    }
+                    finally {
+                        iter.stop();
+                    }
+                }
+            }
+            finally {
+                try {
+                    await consumer.delete();
+                }
+                catch { /* ephemeral, best-effort cleanup */ }
+            }
+        }
+    }
+    finally {
+        await nc.drain();
+    }
+}
+//# sourceMappingURL=pending.js.map

package/dist/pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending.js","sourceRoot":"","sources":["../src/pending.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,aAAa,EACb,SAAS,EACT,SAAS,EACT,QAAQ,EACR,iBAAiB,EACjB,WAAW,EACX,qBAAqB,EACrB,cAAc,GAGf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAIvG;0FAC0F;AAC1F,KAAK,UAAU,YAAY,CAAC,EAAiB,EAAE,MAAc;IAC3D,IAAI,IAA0B,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,uCAAuC,KAAK,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,KAAa;IACrD,OAAO,CAAC,KAAK,CAAC,+BAA+B,OAAO,cAAc,KAAK,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED;;;;kGAIkG;AAClG,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;IAClC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAgB;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAgB,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,KAAK,CAAC,sHAAsH,CAAC,CAAC;QACtI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,6CAA6C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+FAA+F;IAC/F,iGAAiG;IACjG,iGAAiG;IACjG,sDAAsD;IACtD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAEpC,4FAA4F;IAC5F,gGAAgG;IAChG,gGAAgG;IAChG,6FAA6F;IAC7F,IAAI,OAAe,CAAC;IACpB,IAAI,KAAmD,CAAC;IACxD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,GAAG,IAAI,aAAa,CAAC;YAC3B,KAAK;YACL,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,KAAK;YACvB,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,UAAU,EAAE;SACpD,CAAC,CAAC;QACH,IAAI,IAA0B,CAAC;QAC/B,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,YAAY;YAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/C,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;QACrD,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE/B,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC,CAAC;IACvI,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,iBAAiB,IAAI,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;gBACpF,IAAI,MAAM,CAAC,OAAO;oBAAE,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACpD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxB,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG;YACZ,OAAO;YACP,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,UAAU,EAAE,IAAI,CAAC,eAAe;YAChC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU;YACpC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU;YACnC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ;YACR,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO;YAClC,oBAAoB,EAAE,UAAU,CAAC,MAAM,CAAC,oBAAoB;YAC5D,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO;SACnC,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,WAAW,KAAK,CAAC,OAAO,yBAAyB,KAAK,CAAC,oBAAoB,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtH,CAAC;QAED,2FAA2F;QAC3F,yFAAyF;QACzF,2FAA2F;QAC3F,oDAAoD;QACpD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YACzB,MAAM,QAAQ,GAAG,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YACrG,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxC,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBAC7D,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;gBAC9E,IAAI,iBAAiB,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAC,CAAC;oBACzE,IAAI,IAAI,GAAG,CAAC,CAAC;oBACb,IAAI,CAAC;wBACH,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;4BAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAA6C,CAAC;4BACtG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,UAAU,IAAI,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC9D,IAAI,EAAE,CAAC;4BACP,IAAI,IAAI,IAAI,iBAAiB;gCAAE,MAAM;wBACvC,CAAC;oBACH,CAAC;4BAAS,CAAC;wBACT,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/delivery",
   "description": "Cotal delivery daemon: the server-side Plane-3 durable backstop (fan-out writer + trusted reader + membership/ACL authority), a scoped least-privilege NATS client co-located with the broker.",
-  "version": "0.56.0",
+  "version": "0.57.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -18,8 +18,9 @@
     }
   },
   "dependencies": {
-    "@cotal-ai/core": "0.56.0",
-    "@cotal-ai/workspace": "0.56.0"
+    "@nats-io/jetstream": "^3.4.0",
+    "@cotal-ai/core": "0.57.0",
+    "@cotal-ai/workspace": "0.57.0"
   },
   "files": [
     "dist"
@@ -28,7 +29,6 @@
     "access": "public"
   },
   "devDependencies": {
-    "@nats-io/jetstream": "^3.4.0",
     "@nats-io/kv": "^3.4.0",
     "@nats-io/transport-node": "^3.4.0",
     "@cotal-ai/smoke-kit": "0.0.0"