@cotal-ai/pi 0.28.0 → 0.28.1

package/dist/index.js

@@ -15963,7 +15963,7 @@ import { isConcreteChannel as isConcreteChannel3, channelInAllow as channelInAll
 
 // ../connector-core/dist/docs-bundle.generated.js
 var DOCS_BUNDLE = {
-  "version": "0.28.0",
+  "version": "0.28.1",
   "generatedFrom": "docs/*.md + SPEC.md + spec/cotal-lang.md + spec/cotal.schema.json",
   "pages": [
     {

package/dist/standalone.js

@@ -13615,11 +13615,11 @@ var require_connect = __commonJS({
   "../../node_modules/.pnpm/@nats-io+transport-node@3.4.0/node_modules/@nats-io/transport-node/lib/connect.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.connect = connect8;
+    exports.connect = connect7;
     var node_transport_1 = require_node_transport();
     var nats_base_client_1 = require_nats_base_client();
     var nats_base_client_2 = require_nats_base_client();
-    function connect8(opts = {}) {
+    function connect7(opts = {}) {
       if ((0, nats_base_client_2.hasWsProtocol)(opts)) {
         return Promise.reject(nats_base_client_2.errors.InvalidArgumentError.format(`servers`, `node client doesn't support websockets, use the 'wsconnect' function instead`));
       }
@@ -35856,49 +35856,33 @@ var SYS_LIMITS = { ...BASE_LIMITS, mem_storage: 0, disk_storage: 0 };
 var import_nkeys4 = __toESM(require_mod2(), 1);
 
 // ../../packages/core/dist/channels.js
-var import_kv4 = __toESM(require_mod6(), 1);
-var import_transport_node13 = __toESM(require_transport_node(), 1);
-function parseDuration(s) {
-  const m = /^(\d+)(s|m|h|d)$/.exec(s.trim());
-  if (!m)
-    throw new Error(`invalid duration "${s}" - expected <number><s|m|h|d>, e.g. "24h"`);
-  const n = Number(m[1]);
-  const unit = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 }[m[2]];
-  return n * unit;
-}
-function effectiveReplay(cfg, defaults) {
-  return cfg?.replay ?? defaults?.replay ?? true;
-}
-function effectiveReplayWindowMs(cfg, defaults) {
-  const w = cfg?.replayWindow ?? defaults?.replayWindow;
-  return w === void 0 ? void 0 : parseDuration(w);
-}
-function effectiveDeliveryClass(cfg, defaults) {
-  return cfg?.deliveryClass ?? defaults?.deliveryClass ?? "durable";
-}
-async function openChannelRegistry(nc, space, opts = {}) {
-  const kvm = new import_kv4.Kvm(nc);
-  return opts.create ? kvm.create(channelBucket(space)) : kvm.open(channelBucket(space));
-}
-async function readChannelConfig(kv, channel) {
-  return decode2(kv, channel);
-}
-async function readChannelDefaults(kv) {
-  return decode2(kv, CHANNEL_DEFAULTS_KEY);
-}
-async function decode2(kv, key) {
-  const e = await kv.get(key);
-  if (!e || e.operation === "DEL" || e.operation === "PURGE")
-    return void 0;
-  try {
-    return e.json();
-  } catch {
-    return void 0;
-  }
+var import_kv7 = __toESM(require_mod6(), 1);
+var import_transport_node15 = __toESM(require_transport_node(), 1);
+
+// ../../packages/core/dist/endpoint.js
+var import_transport_node14 = __toESM(require_transport_node(), 1);
+var import_nats_core = __toESM(require_mod3(), 1);
+import { EventEmitter } from "node:events";
+import { randomUUID } from "node:crypto";
+import { createConnection } from "node:net";
+
+// ../../packages/core/dist/artifact.js
+var ARTIFACT_PART_KIND = "artifact";
+function isArtifactPart(value) {
+  if (!value || typeof value !== "object")
+    return false;
+  const p = value;
+  return p.kind === ARTIFACT_PART_KIND && typeof p.name === "string" && p.name.length > 0 && typeof p.mediaType === "string" && p.mediaType.length > 0 && typeof p.digest === "string" && isContractDigest(p.digest) && typeof p.size === "number" && Number.isSafeInteger(p.size) && p.size >= 0;
 }
 
+// ../../packages/core/dist/endpoint.js
+var import_jetstream13 = __toESM(require_mod4(), 1);
+var import_jetstream14 = __toESM(require_mod4(), 1);
+var import_kv6 = __toESM(require_mod6(), 1);
+var import_internal2 = __toESM(require_internal_mod3(), 1);
+
 // ../../packages/core/dist/members.js
-var import_kv5 = __toESM(require_mod6(), 1);
+var import_kv4 = __toESM(require_mod6(), 1);
 var StaleMembershipWrite = class extends Error {
   constructor(channel, owner, attempted, current) {
     super(`stale membership write for ${channel}/${owner}: generation ${attempted} < current ${current}`);
@@ -35906,7 +35890,7 @@ var StaleMembershipWrite = class extends Error {
   }
 };
 async function openMembersRegistry(nc, space, opts = {}) {
-  const kvm = new import_kv5.Kvm(nc);
+  const kvm = new import_kv4.Kvm(nc);
   return opts.create ? kvm.create(membersBucket(space)) : kvm.open(membersBucket(space));
 }
 async function readMember(kv, channel, owner, lifecycleUid) {
@@ -36006,312 +35990,14 @@ function durableEligible(rec, seq) {
   return true;
 }
 
-// ../../packages/core/dist/membership-feed.js
-var import_transport_node14 = __toESM(require_transport_node(), 1);
-var import_kv6 = __toESM(require_mod6(), 1);
-
-// ../../packages/core/dist/evict.js
-var import_transport_node15 = __toESM(require_transport_node(), 1);
-
 // ../../packages/core/dist/lease.js
-var import_kv7 = __toESM(require_mod6(), 1);
-var import_transport_node16 = __toESM(require_transport_node(), 1);
+var import_kv5 = __toESM(require_mod6(), 1);
+var import_transport_node13 = __toESM(require_transport_node(), 1);
 async function openDeliveryRegistry(nc, space) {
-  return new import_kv7.Kvm(nc).open(deliveryBucket(space));
-}
-
-// ../../packages/core/dist/agent-file.js
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
-var import_yaml = __toESM(require_dist(), 1);
-function parseFrontmatter(src, path) {
-  let doc;
-  try {
-    doc = (0, import_yaml.parse)(src);
-  } catch (e) {
-    throw new Error(`agent file ${path}: invalid YAML frontmatter; ${e.message}`);
-  }
-  if (doc === null || doc === void 0)
-    return {};
-  if (typeof doc !== "object" || Array.isArray(doc))
-    throw new Error(`agent file ${path}: frontmatter must be a YAML mapping (key: value pairs)`);
-  return doc;
-}
-function loadAgentFile(path) {
-  const src = readFileSync(path, "utf8");
-  const m = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/.exec(src);
-  if (!m)
-    throw new Error(`agent file ${path}: missing "---" frontmatter block`);
-  const fm = parseFrontmatter(m[1], path);
-  const persona = m[2].trim();
-  const str2 = (k) => {
-    const v = fm[k];
-    if (v === void 0 || v === null)
-      return void 0;
-    if (typeof v === "object")
-      throw new Error(`agent file ${path}: "${k}" must be a scalar`);
-    return String(v);
-  };
-  const list = (k) => {
-    const v = fm[k];
-    if (v === void 0 || v === null)
-      return void 0;
-    return (Array.isArray(v) ? v : [v]).map((x) => {
-      if (x === null || typeof x === "object")
-        throw new Error(`agent file ${path}: "${k}" list items must be scalars`);
-      return String(x);
-    });
-  };
-  const name = str2("name");
-  if (!name)
-    throw new Error(`agent file ${path}: "name" is required`);
-  assertValidName(name);
-  const kind = str2("kind");
-  if (kind && kind !== "agent" && kind !== "endpoint")
-    throw new Error(`agent file ${path}: "kind" must be "agent" or "endpoint"`);
-  for (const old of ["channels", "publish"])
-    if (old in fm)
-      throw new Error(`agent file ${path}: "${old}" was renamed - use "subscribe"/"allowSubscribe" (read) and "allowPublish" (post)`);
-  const subscribe = list("subscribe");
-  const allowSubscribe = list("allowSubscribe");
-  const allowPublish = list("allowPublish");
-  const quiet = list("quiet");
-  const muted = list("muted");
-  for (const ch of [...subscribe ?? [], ...allowSubscribe ?? [], ...allowPublish ?? []])
-    try {
-      assertValidChannel(ch);
-    } catch (e) {
-      throw new Error(`agent file ${path}: ${e.message}`);
-    }
-  const effSubscribe = subscribe ?? [];
-  const effAllow = allowSubscribe?.length ? allowSubscribe : effSubscribe;
-  for (const ch of effSubscribe)
-    if (!channelInAllow(effAllow, ch))
-      throw new Error(`agent file ${path}: subscribe channel "${ch}" is not within allowSubscribe [${effAllow.join(", ")}]`);
-  const both = (quiet ?? []).filter((c) => (muted ?? []).includes(c));
-  if (both.length)
-    throw new Error(`agent file ${path}: channel(s) [${both.join(", ")}] are in both quiet and muted - pick one`);
-  for (const [field, chans] of [["quiet", quiet], ["muted", muted]])
-    for (const ch of chans ?? []) {
-      try {
-        assertValidChannel(ch);
-      } catch (e) {
-        throw new Error(`agent file ${path}: ${e.message}`);
-      }
-      if (!isConcreteChannel(ch))
-        throw new Error(`agent file ${path}: ${field} channel "${ch}" must be a concrete channel (no wildcard)`);
-      if (!channelInAllow(effAllow, ch))
-        throw new Error(`agent file ${path}: ${field} channel "${ch}" is not within your read ACL / allowSubscribe [${effAllow.join(", ")}]`);
-    }
-  const launchOptionsRaw = fm["launchOptions"];
-  let launchOptions;
-  if (launchOptionsRaw !== void 0 && launchOptionsRaw !== null) {
-    if (typeof launchOptionsRaw !== "object" || Array.isArray(launchOptionsRaw))
-      throw new Error(`agent file ${path}: "launchOptions" must be a mapping of key: value pairs`);
-    launchOptions = launchOptionsRaw;
-  }
-  const known = /* @__PURE__ */ new Set(["name", "role", "kind", "description", "tags", "subscribe", "allowSubscribe", "allowPublish", "quiet", "muted", "model", "variant", "launchOptions", "capabilities", "owner"]);
-  const meta3 = {};
-  for (const [k, v] of Object.entries(fm))
-    if (!known.has(k) && v !== null && typeof v !== "object")
-      meta3[k] = String(v);
-  return {
-    name,
-    role: str2("role"),
-    kind,
-    description: str2("description"),
-    tags: list("tags"),
-    subscribe,
-    allowSubscribe,
-    allowPublish,
-    quiet,
-    muted,
-    model: str2("model"),
-    variant: str2("variant"),
-    launchOptions,
-    capabilities: list("capabilities"),
-    owner: str2("owner"),
-    meta: Object.keys(meta3).length ? meta3 : void 0,
-    persona: persona || void 0
-  };
-}
-
-// ../../packages/core/dist/secret-fs.js
-import { chmodSync, mkdirSync as mkdirSync2, renameSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { execFileSync } from "node:child_process";
-import { join } from "node:path";
-var isWin = process.platform === "win32";
-function sys32(exe) {
-  const root = process.env.SystemRoot || process.env.windir || "C:\\Windows";
-  return join(root, "System32", exe);
-}
-var cachedSid;
-function ownerSid() {
-  if (cachedSid)
-    return cachedSid;
-  const out = execFileSync(sys32("whoami.exe"), ["/user", "/fo", "csv", "/nh"], { encoding: "utf8" });
-  const sid = out.trim().split(",").pop()?.replace(/^"|"$/g, "").trim();
-  if (!sid || !/^S-1-/.test(sid))
-    throw new Error(`could not determine the current user's SID from \`whoami\` (got: ${out.trim()})`);
-  cachedSid = sid;
-  return sid;
-}
-var BROAD_SIDS = ["S-1-1-0", "S-1-5-11", "S-1-5-32-545"];
-function hardenPrivate(path, kind) {
-  if (!isWin) {
-    chmodSync(path, kind === "dir" ? 448 : 384);
-    return;
-  }
-  const perm = kind === "dir" ? "(OI)(CI)(F)" : "(F)";
-  const removeBroad = BROAD_SIDS.flatMap((sid) => ["/remove:g", `*${sid}`]);
-  const grant = (sid) => ["/grant:r", `*${sid}:${perm}`];
-  try {
-    execFileSync(sys32("icacls.exe"), [
-      path,
-      "/inheritance:r",
-      ...removeBroad,
-      ...grant(ownerSid()),
-      ...grant("S-1-5-18"),
-      ...grant("S-1-5-32-544")
-    ], { stdio: ["ignore", "ignore", "pipe"] });
-  } catch (e) {
-    throw new Error(`failed to harden ${kind} "${path}" to private via icacls: ${e.message.trim()}. Cotal will not leave a secret with a permissive ACL - ensure the path is on an NTFS volume and %SystemRoot%\\System32\\icacls.exe is available.`);
-  }
-}
-function writeSecretFile(path, data) {
-  writeFileSync2(path, data, { mode: 384 });
-  if (!isWin)
-    return;
-  try {
-    hardenPrivate(path, "file");
-  } catch (e) {
-    try {
-      unlinkSync(path);
-    } catch {
-    }
-    throw e;
-  }
-}
-function writeSecretFileAtomic(path, data) {
-  const tmp = `${path}.${process.pid}.${Date.now()}.tmp`;
-  try {
-    writeSecretFile(tmp, data);
-    renameSync(tmp, path);
-  } catch (e) {
-    try {
-      unlinkSync(tmp);
-    } catch {
-    }
-    throw e;
-  }
-}
-function mkSecretDir(path) {
-  mkdirSync2(path, { recursive: true, mode: 448 });
-  hardenPrivate(path, "dir");
-}
-
-// ../../packages/core/dist/launch-material.js
-import { mkdtempSync, readFileSync as readFileSync2, realpathSync, rmSync, rmdirSync, statSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { basename, dirname, join as join2, resolve } from "node:path";
-var DIR_PREFIX = "cotal-launch-";
-var MATERIAL_FILE = "material.json";
-var LAUNCH_MATERIAL_ENV = "COTAL_LAUNCH_MATERIAL";
-function readLaunchMaterial(path) {
-  let raw;
-  try {
-    if (process.platform !== "win32") {
-      const mode = statSync(path).mode & 511;
-      if (mode & 63)
-        throw new Error(`is readable beyond its owner (mode ${mode.toString(8)}) - refusing to read connection material out of a file other local users can open`);
-    }
-    raw = readFileSync2(path, "utf8");
-  } catch (e) {
-    throw new Error(`launch material: cannot read ${path} (${e instanceof Error ? e.message : String(e)})`);
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch {
-    throw new Error(`launch material: ${path} is not valid JSON`);
-  }
-  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
-    throw new Error(`launch material: ${path} must contain a JSON object`);
-  return validate(parsed, path);
-}
-function validate(raw, path) {
-  const material = {};
-  const str2 = (key) => {
-    const v = raw[key];
-    if (v === void 0)
-      return;
-    if (typeof v !== "string" || !v.trim())
-      throw new Error(`launch material: ${path} has a ${key} that is not a non-empty string`);
-    material[key] = v;
-  };
-  str2("servers");
-  str2("creds");
-  str2("token");
-  str2("controlToken");
-  if (raw.userAuth !== void 0) {
-    const u = raw.userAuth;
-    if (typeof u !== "object" || u === null || Array.isArray(u))
-      throw new Error(`launch material: ${path} has a userAuth that is not an object`);
-    const { owner, actor, sentinelCredsPath, bearerCmd } = u;
-    const named = { owner, actor, sentinelCredsPath };
-    for (const [k, v] of Object.entries(named))
-      if (typeof v !== "string" || !v.trim())
-        throw new Error(`launch material: ${path} has a userAuth.${k} that is not a non-empty string`);
-    if (!Array.isArray(bearerCmd) || bearerCmd.length === 0 || !bearerCmd.every((a) => typeof a === "string" && a))
-      throw new Error(`launch material: ${path} has a userAuth.bearerCmd that is not a non-empty array of strings`);
-    material.userAuth = {
-      owner,
-      actor,
-      sentinelCredsPath,
-      bearerCmd
-    };
-  }
-  if (Object.keys(material).length === 0)
-    throw new Error(`launch material: ${path} carries nothing this reader recognises. A launch that references material and supplies none is a broken launcher, not an open-mode launch, so it is refused rather than defaulted.`);
-  return material;
-}
-function discardLaunchMaterial(path) {
-  const file2 = resolve(path);
-  try {
-    rmSync(file2, { force: true });
-  } catch {
-  }
-  const dir = dirname(file2);
-  if (basename(file2) !== MATERIAL_FILE || !basename(dir).startsWith(DIR_PREFIX))
-    return;
-  try {
-    if (realpathSync(dirname(dir)) !== realpathSync(tmpdir()))
-      return;
-    rmdirSync(dir);
-  } catch {
-  }
-}
-
-// ../../packages/core/dist/endpoint.js
-var import_transport_node17 = __toESM(require_transport_node(), 1);
-var import_nats_core = __toESM(require_mod3(), 1);
-import { EventEmitter } from "node:events";
-import { randomUUID } from "node:crypto";
-import { createConnection } from "node:net";
-
-// ../../packages/core/dist/artifact.js
-var ARTIFACT_PART_KIND = "artifact";
-function isArtifactPart(value) {
-  if (!value || typeof value !== "object")
-    return false;
-  const p = value;
-  return p.kind === ARTIFACT_PART_KIND && typeof p.name === "string" && p.name.length > 0 && typeof p.mediaType === "string" && p.mediaType.length > 0 && typeof p.digest === "string" && isContractDigest(p.digest) && typeof p.size === "number" && Number.isSafeInteger(p.size) && p.size >= 0;
+  return new import_kv5.Kvm(nc).open(deliveryBucket(space));
 }
 
 // ../../packages/core/dist/endpoint.js
-var import_jetstream13 = __toESM(require_mod4(), 1);
-var import_jetstream14 = __toESM(require_mod4(), 1);
-var import_kv8 = __toESM(require_mod6(), 1);
-var import_internal2 = __toESM(require_internal_mod3(), 1);
 var DEFAULT_SERVER = "nats://127.0.0.1:4222";
 var PLANE3_FRAME_HEADER = "Cotal-Delivery-Frame";
 var READER_MAX_REDELIVERIES = 10;
@@ -36825,7 +36511,7 @@ var CotalEndpoint = class _CotalEndpoint extends EventEmitter {
     this.watchStatus();
     this.js = (0, import_jetstream13.jetstream)(this.nc);
     if (this.doWatch || this.doRegister) {
-      const kvm = new import_kv8.Kvm(this.nc);
+      const kvm = new import_kv6.Kvm(this.nc);
       this.kv = this.authed ? await kvm.open(presenceBucket(this.space)) : await kvm.create(presenceBucket(this.space), { ttl: this.ttlMs });
     }
     if (this.doWatch) {
@@ -37207,7 +36893,7 @@ var CotalEndpoint = class _CotalEndpoint extends EventEmitter {
       throw new Error(`expectedLastSubjectSeq must be a non-negative safe integer, got ${JSON.stringify(opts.expectedLastSubjectSeq)}`);
     if (!Array.isArray(opts.parts) || opts.parts.length === 0)
       throw new Error("encodedSize requires at least one part");
-    const mh = (0, import_transport_node17.headers)();
+    const mh = (0, import_transport_node14.headers)();
     mh.set("Nats-Msg-Id", opts.id);
     mh.set("Nats-Expected-Last-Subject-Sequence", `${opts.expectedLastSubjectSeq}`);
     const headerBytes = mh.encode().length;
@@ -37713,7 +37399,7 @@ var CotalEndpoint = class _CotalEndpoint extends EventEmitter {
   async membershipFeedRegistry() {
     if (!this.nc)
       throw new Error("endpoint not started");
-    this.membershipFeedKv ??= await new import_kv8.Kvm(this.nc).open(membershipBucket(this.space));
+    this.membershipFeedKv ??= await new import_kv6.Kvm(this.nc).open(membershipBucket(this.space));
     return this.membershipFeedKv;
   }
   /**
@@ -38079,7 +37765,7 @@ var CotalEndpoint = class _CotalEndpoint extends EventEmitter {
       for await (const s of this.nc.status()) {
         if (s.type !== "error")
           continue;
-        if (s.error instanceof import_transport_node17.PermissionViolationError && this.confirmingChatSubs.has(s.error.subject))
+        if (s.error instanceof import_transport_node14.PermissionViolationError && this.confirmingChatSubs.has(s.error.subject))
           continue;
         this.emit("error", describeStatusError(s.error));
       }
@@ -38302,7 +37988,7 @@ var CotalEndpoint = class _CotalEndpoint extends EventEmitter {
       throw new Error("endpoint not started");
     if (this.managerLeaseKv)
       return this.managerLeaseKv;
-    const kvm = new import_kv8.Kvm((0, import_jetstream13.jetstream)(this.nc, { timeout: MANAGER_LEASE_ATTEMPT_MS }));
+    const kvm = new import_kv6.Kvm((0, import_jetstream13.jetstream)(this.nc, { timeout: MANAGER_LEASE_ATTEMPT_MS }));
     if (this.authed) {
       this.managerLeaseKv = await kvm.open(managerBucket(this.space));
     } else {
@@ -38532,7 +38218,7 @@ var CotalEndpoint = class _CotalEndpoint extends EventEmitter {
       filter_subject: subject,
       ack_policy: import_jetstream13.AckPolicy.None,
       mem_storage: true,
-      inactive_threshold: (0, import_transport_node17.nanos)(3e4),
+      inactive_threshold: (0, import_transport_node14.nanos)(3e4),
       deliver_policy: import_jetstream13.DeliverPolicy.StartSequence,
       opt_start_seq: fromSeqExcl + 1
     });
@@ -38994,7 +38680,7 @@ var CotalEndpoint = class _CotalEndpoint extends EventEmitter {
         channel: entry.channel,
         msg: authenticatedChannelMessage(entry.msg, entry.channel)
       };
-      const frameHeaders = (0, import_transport_node17.headers)();
+      const frameHeaders = (0, import_transport_node14.headers)();
       frameHeaders.set(PLANE3_FRAME_HEADER, "1");
       await this.js.publish(dlvSubject(this.space, pr.owner, pr.actor, pr.lifecycleUid), JSON.stringify(frame), {
         msgID: `${entry.msg.id}:${owner}:${pr.lifecycleUid}:${entry.generation}`,
@@ -39124,7 +38810,7 @@ var CotalEndpoint = class _CotalEndpoint extends EventEmitter {
    *  distinct from a responder that errored. nats.js surfaces it as NoRespondersError, or a RequestError
    *  whose `isNoResponders()` is true. */
   isNoResponders(e) {
-    return e instanceof import_transport_node17.NoRespondersError || e instanceof import_transport_node17.RequestError && e.isNoResponders();
+    return e instanceof import_transport_node14.NoRespondersError || e instanceof import_transport_node14.RequestError && e.isNoResponders();
   }
   /** Agent-side: this session's CURRENT durable memberships (channel + join generation) from the
    *  manager — the agent holds no read on the privileged members KV. `undefined` ⇒ NO control responder
@@ -39467,7 +39153,7 @@ var CotalEndpoint = class _CotalEndpoint extends EventEmitter {
       filter_subject: subject,
       ack_policy: import_jetstream13.AckPolicy.None,
       mem_storage: true,
-      inactive_threshold: (0, import_transport_node17.nanos)(3e4),
+      inactive_threshold: (0, import_transport_node14.nanos)(3e4),
       ..."time" in start ? { deliver_policy: import_jetstream13.DeliverPolicy.StartTime, opt_start_time: start.time.toISOString() } : { deliver_policy: import_jetstream13.DeliverPolicy.StartSequence, opt_start_seq: start.seq }
     });
     try {
@@ -39828,7 +39514,7 @@ function authOpts(a) {
     if (!a.sentinelCreds)
       throw new Error("user-mode bearer requires sentinelCreds");
     return {
-      authenticator: [(0, import_transport_node17.credsAuthenticator)(new TextEncoder().encode(a.sentinelCreds)), (0, import_transport_node17.tokenAuthenticator)(a.bearer)],
+      authenticator: [(0, import_transport_node14.credsAuthenticator)(new TextEncoder().encode(a.sentinelCreds)), (0, import_transport_node14.tokenAuthenticator)(a.bearer)],
       tls
     };
   }
@@ -39836,7 +39522,7 @@ function authOpts(a) {
     if (a.token || a.user || a.pass)
       throw new Error("creds are mutually exclusive with token/user/pass auth");
     const creds = a.creds;
-    const authenticator = typeof creds === "function" ? (nonce3) => (0, import_transport_node17.credsAuthenticator)(new TextEncoder().encode(creds()))(nonce3) : (0, import_transport_node17.credsAuthenticator)(new TextEncoder().encode(creds));
+    const authenticator = typeof creds === "function" ? (nonce3) => (0, import_transport_node14.credsAuthenticator)(new TextEncoder().encode(creds()))(nonce3) : (0, import_transport_node14.credsAuthenticator)(new TextEncoder().encode(creds));
     return { authenticator, tls };
   }
   return { token: a.token, user: a.user, pass: a.pass, tls };
@@ -39871,25 +39557,32 @@ function decodeBearerPrincipal(bearer) {
   return { owner, actor };
 }
 function describeStatusError(err2) {
-  if (err2 instanceof import_transport_node17.PermissionViolationError) {
+  if (err2 instanceof import_transport_node14.PermissionViolationError) {
     return new Error(`NATS permission denied: cannot ${err2.operation} "${err2.subject}" - check this endpoint's ACLs (a denied peer looks "absent" rather than blocked)`, { cause: err2 });
   }
   return err2;
 }
 function isPermissionDenied(e) {
-  if (e instanceof import_transport_node17.PermissionViolationError)
+  if (e instanceof import_transport_node14.PermissionViolationError)
     return true;
-  if (e?.cause instanceof import_transport_node17.PermissionViolationError)
+  if (e?.cause instanceof import_transport_node14.PermissionViolationError)
     return true;
   return /permissions?\s+violation/i.test(String(e?.message ?? ""));
 }
 function isPublishPermissionDenied(e) {
-  const typed = e instanceof import_transport_node17.PermissionViolationError ? e : e?.cause instanceof import_transport_node17.PermissionViolationError ? e.cause : void 0;
+  const typed = e instanceof import_transport_node14.PermissionViolationError ? e : e?.cause instanceof import_transport_node14.PermissionViolationError ? e.cause : void 0;
   return typed?.operation === "publish";
 }
+function wsServers(servers) {
+  return /^wss?:\/\//i.test((servers.split(",")[0] ?? "").trim());
+}
 function dialerFor(servers) {
-  const first = (servers.split(",")[0] ?? "").trim();
-  return /^wss?:\/\//i.test(first) ? import_nats_core.wsconnect : import_transport_node17.connect;
+  if (!wsServers(servers))
+    return import_transport_node14.connect;
+  return ((opts) => {
+    const { tls: _tls, ...rest } = opts ?? {};
+    return (0, import_nats_core.wsconnect)(rest);
+  });
 }
 function hostPort(server) {
   const raw = (server.split(",")[0] ?? "").trim();
@@ -39954,13 +39647,331 @@ function classifyProbeFailure(e, opts) {
     } catch {
     }
   }
-  if (e instanceof import_transport_node17.UserAuthenticationExpiredError)
+  if (e instanceof import_transport_node14.UserAuthenticationExpiredError)
     return { ok: false, reason: "stale-auth" };
-  if (e instanceof import_transport_node17.AuthorizationError)
+  if (e instanceof import_transport_node14.AuthorizationError)
     return { ok: false, reason: "auth-required" };
   return { ok: false, reason: "unreachable" };
 }
 
+// ../../packages/core/dist/channels.js
+function parseDuration(s) {
+  const m = /^(\d+)(s|m|h|d)$/.exec(s.trim());
+  if (!m)
+    throw new Error(`invalid duration "${s}" - expected <number><s|m|h|d>, e.g. "24h"`);
+  const n = Number(m[1]);
+  const unit = { s: 1e3, m: 6e4, h: 36e5, d: 864e5 }[m[2]];
+  return n * unit;
+}
+function effectiveReplay(cfg, defaults) {
+  return cfg?.replay ?? defaults?.replay ?? true;
+}
+function effectiveReplayWindowMs(cfg, defaults) {
+  const w = cfg?.replayWindow ?? defaults?.replayWindow;
+  return w === void 0 ? void 0 : parseDuration(w);
+}
+function effectiveDeliveryClass(cfg, defaults) {
+  return cfg?.deliveryClass ?? defaults?.deliveryClass ?? "durable";
+}
+async function openChannelRegistry(nc, space, opts = {}) {
+  const kvm = new import_kv7.Kvm(nc);
+  return opts.create ? kvm.create(channelBucket(space)) : kvm.open(channelBucket(space));
+}
+async function readChannelConfig(kv, channel) {
+  return decode2(kv, channel);
+}
+async function readChannelDefaults(kv) {
+  return decode2(kv, CHANNEL_DEFAULTS_KEY);
+}
+async function decode2(kv, key) {
+  const e = await kv.get(key);
+  if (!e || e.operation === "DEL" || e.operation === "PURGE")
+    return void 0;
+  try {
+    return e.json();
+  } catch {
+    return void 0;
+  }
+}
+
+// ../../packages/core/dist/membership-feed.js
+var import_transport_node16 = __toESM(require_transport_node(), 1);
+var import_kv8 = __toESM(require_mod6(), 1);
+
+// ../../packages/core/dist/evict.js
+var import_transport_node17 = __toESM(require_transport_node(), 1);
+
+// ../../packages/core/dist/agent-file.js
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+var import_yaml = __toESM(require_dist(), 1);
+function parseFrontmatter(src, path) {
+  let doc;
+  try {
+    doc = (0, import_yaml.parse)(src);
+  } catch (e) {
+    throw new Error(`agent file ${path}: invalid YAML frontmatter; ${e.message}`);
+  }
+  if (doc === null || doc === void 0)
+    return {};
+  if (typeof doc !== "object" || Array.isArray(doc))
+    throw new Error(`agent file ${path}: frontmatter must be a YAML mapping (key: value pairs)`);
+  return doc;
+}
+function loadAgentFile(path) {
+  const src = readFileSync(path, "utf8");
+  const m = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/.exec(src);
+  if (!m)
+    throw new Error(`agent file ${path}: missing "---" frontmatter block`);
+  const fm = parseFrontmatter(m[1], path);
+  const persona = m[2].trim();
+  const str2 = (k) => {
+    const v = fm[k];
+    if (v === void 0 || v === null)
+      return void 0;
+    if (typeof v === "object")
+      throw new Error(`agent file ${path}: "${k}" must be a scalar`);
+    return String(v);
+  };
+  const list = (k) => {
+    const v = fm[k];
+    if (v === void 0 || v === null)
+      return void 0;
+    return (Array.isArray(v) ? v : [v]).map((x) => {
+      if (x === null || typeof x === "object")
+        throw new Error(`agent file ${path}: "${k}" list items must be scalars`);
+      return String(x);
+    });
+  };
+  const name = str2("name");
+  if (!name)
+    throw new Error(`agent file ${path}: "name" is required`);
+  assertValidName(name);
+  const kind = str2("kind");
+  if (kind && kind !== "agent" && kind !== "endpoint")
+    throw new Error(`agent file ${path}: "kind" must be "agent" or "endpoint"`);
+  for (const old of ["channels", "publish"])
+    if (old in fm)
+      throw new Error(`agent file ${path}: "${old}" was renamed - use "subscribe"/"allowSubscribe" (read) and "allowPublish" (post)`);
+  const subscribe = list("subscribe");
+  const allowSubscribe = list("allowSubscribe");
+  const allowPublish = list("allowPublish");
+  const quiet = list("quiet");
+  const muted = list("muted");
+  for (const ch of [...subscribe ?? [], ...allowSubscribe ?? [], ...allowPublish ?? []])
+    try {
+      assertValidChannel(ch);
+    } catch (e) {
+      throw new Error(`agent file ${path}: ${e.message}`);
+    }
+  const effSubscribe = subscribe ?? [];
+  const effAllow = allowSubscribe?.length ? allowSubscribe : effSubscribe;
+  for (const ch of effSubscribe)
+    if (!channelInAllow(effAllow, ch))
+      throw new Error(`agent file ${path}: subscribe channel "${ch}" is not within allowSubscribe [${effAllow.join(", ")}]`);
+  const both = (quiet ?? []).filter((c) => (muted ?? []).includes(c));
+  if (both.length)
+    throw new Error(`agent file ${path}: channel(s) [${both.join(", ")}] are in both quiet and muted - pick one`);
+  for (const [field, chans] of [["quiet", quiet], ["muted", muted]])
+    for (const ch of chans ?? []) {
+      try {
+        assertValidChannel(ch);
+      } catch (e) {
+        throw new Error(`agent file ${path}: ${e.message}`);
+      }
+      if (!isConcreteChannel(ch))
+        throw new Error(`agent file ${path}: ${field} channel "${ch}" must be a concrete channel (no wildcard)`);
+      if (!channelInAllow(effAllow, ch))
+        throw new Error(`agent file ${path}: ${field} channel "${ch}" is not within your read ACL / allowSubscribe [${effAllow.join(", ")}]`);
+    }
+  const launchOptionsRaw = fm["launchOptions"];
+  let launchOptions;
+  if (launchOptionsRaw !== void 0 && launchOptionsRaw !== null) {
+    if (typeof launchOptionsRaw !== "object" || Array.isArray(launchOptionsRaw))
+      throw new Error(`agent file ${path}: "launchOptions" must be a mapping of key: value pairs`);
+    launchOptions = launchOptionsRaw;
+  }
+  const known = /* @__PURE__ */ new Set(["name", "role", "kind", "description", "tags", "subscribe", "allowSubscribe", "allowPublish", "quiet", "muted", "model", "variant", "launchOptions", "capabilities", "owner"]);
+  const meta3 = {};
+  for (const [k, v] of Object.entries(fm))
+    if (!known.has(k) && v !== null && typeof v !== "object")
+      meta3[k] = String(v);
+  return {
+    name,
+    role: str2("role"),
+    kind,
+    description: str2("description"),
+    tags: list("tags"),
+    subscribe,
+    allowSubscribe,
+    allowPublish,
+    quiet,
+    muted,
+    model: str2("model"),
+    variant: str2("variant"),
+    launchOptions,
+    capabilities: list("capabilities"),
+    owner: str2("owner"),
+    meta: Object.keys(meta3).length ? meta3 : void 0,
+    persona: persona || void 0
+  };
+}
+
+// ../../packages/core/dist/secret-fs.js
+import { chmodSync, mkdirSync as mkdirSync2, renameSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { execFileSync } from "node:child_process";
+import { join } from "node:path";
+var isWin = process.platform === "win32";
+function sys32(exe) {
+  const root = process.env.SystemRoot || process.env.windir || "C:\\Windows";
+  return join(root, "System32", exe);
+}
+var cachedSid;
+function ownerSid() {
+  if (cachedSid)
+    return cachedSid;
+  const out = execFileSync(sys32("whoami.exe"), ["/user", "/fo", "csv", "/nh"], { encoding: "utf8" });
+  const sid = out.trim().split(",").pop()?.replace(/^"|"$/g, "").trim();
+  if (!sid || !/^S-1-/.test(sid))
+    throw new Error(`could not determine the current user's SID from \`whoami\` (got: ${out.trim()})`);
+  cachedSid = sid;
+  return sid;
+}
+var BROAD_SIDS = ["S-1-1-0", "S-1-5-11", "S-1-5-32-545"];
+function hardenPrivate(path, kind) {
+  if (!isWin) {
+    chmodSync(path, kind === "dir" ? 448 : 384);
+    return;
+  }
+  const perm = kind === "dir" ? "(OI)(CI)(F)" : "(F)";
+  const removeBroad = BROAD_SIDS.flatMap((sid) => ["/remove:g", `*${sid}`]);
+  const grant = (sid) => ["/grant:r", `*${sid}:${perm}`];
+  try {
+    execFileSync(sys32("icacls.exe"), [
+      path,
+      "/inheritance:r",
+      ...removeBroad,
+      ...grant(ownerSid()),
+      ...grant("S-1-5-18"),
+      ...grant("S-1-5-32-544")
+    ], { stdio: ["ignore", "ignore", "pipe"] });
+  } catch (e) {
+    throw new Error(`failed to harden ${kind} "${path}" to private via icacls: ${e.message.trim()}. Cotal will not leave a secret with a permissive ACL - ensure the path is on an NTFS volume and %SystemRoot%\\System32\\icacls.exe is available.`);
+  }
+}
+function writeSecretFile(path, data) {
+  writeFileSync2(path, data, { mode: 384 });
+  if (!isWin)
+    return;
+  try {
+    hardenPrivate(path, "file");
+  } catch (e) {
+    try {
+      unlinkSync(path);
+    } catch {
+    }
+    throw e;
+  }
+}
+function writeSecretFileAtomic(path, data) {
+  const tmp = `${path}.${process.pid}.${Date.now()}.tmp`;
+  try {
+    writeSecretFile(tmp, data);
+    renameSync(tmp, path);
+  } catch (e) {
+    try {
+      unlinkSync(tmp);
+    } catch {
+    }
+    throw e;
+  }
+}
+function mkSecretDir(path) {
+  mkdirSync2(path, { recursive: true, mode: 448 });
+  hardenPrivate(path, "dir");
+}
+
+// ../../packages/core/dist/launch-material.js
+import { mkdtempSync, readFileSync as readFileSync2, realpathSync, rmSync, rmdirSync, statSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { basename, dirname, join as join2, resolve } from "node:path";
+var DIR_PREFIX = "cotal-launch-";
+var MATERIAL_FILE = "material.json";
+var LAUNCH_MATERIAL_ENV = "COTAL_LAUNCH_MATERIAL";
+function readLaunchMaterial(path) {
+  let raw;
+  try {
+    if (process.platform !== "win32") {
+      const mode = statSync(path).mode & 511;
+      if (mode & 63)
+        throw new Error(`is readable beyond its owner (mode ${mode.toString(8)}) - refusing to read connection material out of a file other local users can open`);
+    }
+    raw = readFileSync2(path, "utf8");
+  } catch (e) {
+    throw new Error(`launch material: cannot read ${path} (${e instanceof Error ? e.message : String(e)})`);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error(`launch material: ${path} is not valid JSON`);
+  }
+  if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+    throw new Error(`launch material: ${path} must contain a JSON object`);
+  return validate(parsed, path);
+}
+function validate(raw, path) {
+  const material = {};
+  const str2 = (key) => {
+    const v = raw[key];
+    if (v === void 0)
+      return;
+    if (typeof v !== "string" || !v.trim())
+      throw new Error(`launch material: ${path} has a ${key} that is not a non-empty string`);
+    material[key] = v;
+  };
+  str2("servers");
+  str2("creds");
+  str2("token");
+  str2("controlToken");
+  if (raw.userAuth !== void 0) {
+    const u = raw.userAuth;
+    if (typeof u !== "object" || u === null || Array.isArray(u))
+      throw new Error(`launch material: ${path} has a userAuth that is not an object`);
+    const { owner, actor, sentinelCredsPath, bearerCmd } = u;
+    const named = { owner, actor, sentinelCredsPath };
+    for (const [k, v] of Object.entries(named))
+      if (typeof v !== "string" || !v.trim())
+        throw new Error(`launch material: ${path} has a userAuth.${k} that is not a non-empty string`);
+    if (!Array.isArray(bearerCmd) || bearerCmd.length === 0 || !bearerCmd.every((a) => typeof a === "string" && a))
+      throw new Error(`launch material: ${path} has a userAuth.bearerCmd that is not a non-empty array of strings`);
+    material.userAuth = {
+      owner,
+      actor,
+      sentinelCredsPath,
+      bearerCmd
+    };
+  }
+  if (Object.keys(material).length === 0)
+    throw new Error(`launch material: ${path} carries nothing this reader recognises. A launch that references material and supplies none is a broken launcher, not an open-mode launch, so it is refused rather than defaulted.`);
+  return material;
+}
+function discardLaunchMaterial(path) {
+  const file2 = resolve(path);
+  try {
+    rmSync(file2, { force: true });
+  } catch {
+  }
+  const dir = dirname(file2);
+  if (basename(file2) !== MATERIAL_FILE || !basename(dir).startsWith(DIR_PREFIX))
+    return;
+  try {
+    if (realpathSync(dirname(dir)) !== realpathSync(tmpdir()))
+      return;
+    rmdirSync(dir);
+  } catch {
+  }
+}
+
 // ../../packages/core/dist/spaces.js
 var import_transport_node18 = __toESM(require_transport_node(), 1);
 var import_jetstream15 = __toESM(require_mod4(), 1);
@@ -55867,7 +55878,7 @@ config(en_default());
 
 // ../connector-core/dist/docs-bundle.generated.js
 var DOCS_BUNDLE = {
-  "version": "0.28.0",
+  "version": "0.28.1",
   "generatedFrom": "docs/*.md + SPEC.md + spec/cotal-lang.md + spec/cotal.schema.json",
   "pages": [
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cotal-ai/pi",
-  "version": "0.28.0",
+  "version": "0.28.1",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -34,8 +34,8 @@
     "esbuild": "^0.28.0",
     "typebox": "^1.1.0",
     "zod": "^4.4.3",
-    "@cotal-ai/connector-core": "0.28.0",
-    "@cotal-ai/core": "0.28.0"
+    "@cotal-ai/core": "0.28.1",
+    "@cotal-ai/connector-core": "0.28.1"
   },
   "files": [
     "dist"