@cotal-ai/delivery 0.57.0 → 0.59.0

package/dist/transport-health.js

@@ -0,0 +1,111 @@
+import { LoopLagMeter } from "./watchdog.js";
+/** Delivery's broker coupling, driven by the resident NATS connection rather than a second
+ * authenticated connection. A successful credential adoption counts only after the caller has
+ * proved it against the broker; a disconnected socket cannot be made healthy by an adoption. */
+export class DeliveryTransportHealth {
+    onGone;
+    onCredentialExpired;
+    windowMs;
+    backstopMs;
+    now;
+    connected = true;
+    disconnectedAt = 0;
+    lag = new LoopLagMeter(250);
+    timer;
+    stopped = false;
+    expired = false;
+    constructor(onGone, onCredentialExpired, windowMs = 15_000, backstopMs = windowMs * 4, now = Date.now) {
+        this.onGone = onGone;
+        this.onCredentialExpired = onCredentialExpired;
+        this.windowMs = windowMs;
+        this.backstopMs = backstopMs;
+        this.now = now;
+        if (windowMs <= 0 || backstopMs < windowMs)
+            throw new Error("invalid delivery broker health windows");
+    }
+    /** The endpoint's own current-epoch `transport` edge, including initial connection, reconnect,
+     * expiry close and terminal close. No timer and no dial run while it is connected. */
+    transport(connected) {
+        if (this.stopped)
+            return;
+        if (connected) {
+            this.connected = true;
+            if (this.expired)
+                return; // a stale JWT can reconnect briefly before the broker closes it again
+            this.expired = false;
+            this.disconnectedAt = 0;
+            this.clear();
+            return;
+        }
+        if (!this.connected)
+            return;
+        this.connected = false;
+        if (!this.disconnectedAt)
+            this.disconnectedAt = this.now();
+        this.armTimer();
+    }
+    /** Called only after the real credential-adoption operation succeeded. A preflight failure,
+     * file change, or merely queued adoption must never reset the broker-loss clock. */
+    adopted() {
+        if (this.stopped || !this.connected)
+            return;
+        this.expired = false;
+        this.disconnectedAt = 0;
+        this.lag.reset();
+        this.clear();
+    }
+    /** NATS reports authentication expiry as an explicit status error before its disconnect edge.
+     * Surface it immediately, leave room for renewal, and never call it broker unavailability. */
+    credentialExpired() {
+        if (this.stopped || this.expired)
+            return;
+        this.expired = true;
+        if (!this.disconnectedAt)
+            this.disconnectedAt = this.now();
+        this.armTimer();
+        this.onCredentialExpired();
+    }
+    armTimer() {
+        if (this.timer !== undefined)
+            return;
+        this.lag = new LoopLagMeter(250);
+        this.lag.tick(this.now());
+        this.timer = setInterval(() => this.evaluate(), 250);
+        this.timer.unref?.();
+    }
+    evaluate() {
+        if ((this.connected && !this.expired) || this.stopped)
+            return;
+        const now = this.now();
+        this.lag.tick(now);
+        const elapsed = now - this.disconnectedAt;
+        if (elapsed < this.windowMs)
+            return;
+        if (this.expired) {
+            if (elapsed >= this.backstopMs) {
+                this.clear();
+                this.stopped = true;
+                this.onGone("credential-expired");
+            }
+            return;
+        }
+        // A late local callback is not evidence that the broker spent that time unavailable. The
+        // absolute backstop still prevents indefinite survival after a real disconnect.
+        const reason = elapsed >= this.backstopMs ? "backstop" : elapsed - this.lag.starvedMsWithin(elapsed) >= this.windowMs ? "broker-gone" : undefined;
+        if (reason) {
+            this.clear();
+            this.stopped = true;
+            this.onGone(reason);
+        }
+    }
+    stop() {
+        this.stopped = true;
+        this.clear();
+    }
+    clear() {
+        if (this.timer !== undefined)
+            clearInterval(this.timer);
+        this.timer = undefined;
+    }
+}
+//# sourceMappingURL=transport-health.js.map

package/dist/transport-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-health.js","sourceRoot":"","sources":["../src/transport-health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C;;gGAEgG;AAChG,MAAM,OAAO,uBAAuB;IASf;IACA;IACA;IACA;IACA;IAZX,SAAS,GAAG,IAAI,CAAC;IACjB,cAAc,GAAG,CAAC,CAAC;IACnB,GAAG,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;IAC5B,KAAK,CAA6C;IAClD,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IAExB,YACmB,MAA2E,EAC3E,mBAA+B,EAC/B,WAAW,MAAM,EACjB,aAAa,QAAQ,GAAG,CAAC,EACzB,MAAoB,IAAI,CAAC,GAAG;QAJ5B,WAAM,GAAN,MAAM,CAAqE;QAC3E,wBAAmB,GAAnB,mBAAmB,CAAY;QAC/B,aAAQ,GAAR,QAAQ,CAAS;QACjB,eAAU,GAAV,UAAU,CAAe;QACzB,QAAG,GAAH,GAAG,CAAyB;QAE7C,IAAI,QAAQ,IAAI,CAAC,IAAI,UAAU,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxG,CAAC;IAED;0FACsF;IACtF,SAAS,CAAC,SAAkB;QAC1B,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,sEAAsE;YAChG,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED;wFACoF;IACpF,OAAO;QACL,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;kGAC8F;IAC9F,iBAAiB;QACf,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO;QACrC,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAEO,QAAQ;QACd,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ;YAAE,OAAO;QACpC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACpC,CAAC;YACD,OAAO;QACT,CAAC;QACD,yFAAyF;QACzF,gFAAgF;QAChF,MAAM,MAAM,GAAG,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAClJ,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEO,KAAK;QACX,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;CACF"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/delivery",
   "description": "Cotal delivery daemon: the server-side Plane-3 durable backstop (fan-out writer + trusted reader + membership/ACL authority), a scoped least-privilege NATS client co-located with the broker.",
-  "version": "0.57.0",
+  "version": "0.59.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -18,9 +18,9 @@
     }
   },
   "dependencies": {
-    "@nats-io/jetstream": "^3.4.0",
-    "@cotal-ai/core": "0.57.0",
-    "@cotal-ai/workspace": "0.57.0"
+    "@cotal-ai/core": "0.59.0",
+    "@cotal-ai/workspace": "0.59.0",
+    "@nats-io/jetstream": "^3.4.0"
   },
   "files": [
     "dist"
@@ -29,9 +29,9 @@
     "access": "public"
   },
   "devDependencies": {
+    "@cotal-ai/smoke-kit": "0.0.0",
     "@nats-io/kv": "^3.4.0",
-    "@nats-io/transport-node": "^3.4.0",
-    "@cotal-ai/smoke-kit": "0.0.0"
+    "@nats-io/transport-node": "^3.4.0"
   },
   "scripts": {
     "test": "tsx smoke/delivery-store-boundary.smoke.ts",