@volter/teams 0.1.87 → 0.1.88

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/teams",
-  "version": "0.1.87",
+  "version": "0.1.88",
   "type": "module",
   "description": "Volter Teams, the neutral team plane: machine identity and daemon core, the local door and server link, admission from machine grants, product doors, and the Teams server's neutral routes (company RFC 0008).",
   "license": "MIT",

package/server/machine-link.mjs

@@ -264,21 +264,49 @@ async function delegatedSessionChannel(api, teamId, sessionRef, token) {
  * the harness session the token names. Null unless the session's owner bound it to the token's Room and Conversation.
  */
 async function boundSessionTarget(api, teamId, access) {
+  return (await sessionDeliveryResolution(api, teamId, access)).target;
+}
+
+/** The same delivery checks, explainable only through a session custodian's authenticated door.
+ * No token is accepted and no grant, binding or native message is created by this read.
+ */
+export async function sessionDeliveryResolution(api, teamId, access, diagnostics = false) {
   const named = await api.store.query('SELECT id, canonical_id FROM sessions WHERE team_id=? AND deleted_at IS NULL AND (id=? OR id IN (SELECT session_id FROM origins WHERE team_id=? AND native_id=? AND deleted_at IS NULL))', [teamId, access.sessionRef, teamId, access.sessionRef]);
+  let reason = 'session_not_found', origins = null;
   for (const found of named) {
     let root = found;
     for (let hops = 0; root?.canonical_id && hops < 16; hops += 1) root = await api.store.one('SELECT id, canonical_id FROM sessions WHERE team_id=? AND id=? AND deleted_at IS NULL', [teamId, root.canonical_id]);
-    if (!root || root.canonical_id) continue;
+    if (!root || root.canonical_id) { reason = 'session_family_unresolved'; continue; }
     const bound = await api.store.one('SELECT 1 ok FROM session_view_bindings WHERE team_id=? AND session_id=? AND issuer=? AND room=? AND conversation=?', [teamId, root.id, access.issuer, access.room, access.conversation]);
-    if (!bound) continue;
+    if (!bound) { reason = 'binding_not_found'; continue; }
     const origin = await api.store.one(`SELECT o.harness, o.native_id, o.session_id, src.machine_id FROM origins o
       JOIN sources src ON src.team_id=o.team_id AND src.id=o.source_id AND src.state='active' AND src.machine_id IS NOT NULL
       JOIN machines m ON m.team_id=src.team_id AND m.id=src.machine_id AND m.revoked_at IS NULL
       WHERE o.team_id=? AND o.deleted_at IS NULL AND o.session_id IN (SELECT id FROM sessions WHERE team_id=? AND deleted_at IS NULL AND (id=? OR canonical_id=?))
       ORDER BY (o.native_id=?) DESC, o.sequence DESC LIMIT 1`, [teamId, teamId, root.id, root.id, access.sessionRef]);
-    if (origin) return { sessionId: root.id, harness: origin.harness, nativeId: origin.native_id, machineId: origin.machine_id };
+    if (origin) {
+      const target = { sessionId: root.id, harness: origin.harness, nativeId: origin.native_id, machineId: origin.machine_id };
+      return { state: 'ready', reason: null, target };
+    }
+    reason = 'no_live_origin';
+    if (diagnostics) {
+      // LEFT joins retain the row that the delivery's inner joins discarded.
+      const rows = await api.store.query(`SELECT o.harness, o.source_id, o.deleted_at, src.state source_state, src.machine_id,
+        m.id enrolled_machine, m.revoked_at machine_revoked_at FROM origins o
+        LEFT JOIN sources src ON src.team_id=o.team_id AND src.id=o.source_id
+        LEFT JOIN machines m ON m.team_id=src.team_id AND m.id=src.machine_id
+        WHERE o.team_id=? AND o.session_id IN (SELECT id FROM sessions WHERE team_id=? AND deleted_at IS NULL AND (id=? OR canonical_id=?))
+        ORDER BY o.sequence DESC LIMIT 51`, [teamId, teamId, root.id, root.id]);
+      const live = rows.filter(row => row.deleted_at == null), active = live.filter(row => row.source_state === 'active');
+      const attached = active.filter(row => row.machine_id != null), enrolled = attached.filter(row => row.enrolled_machine != null);
+      reason = !rows.length ? 'origin_not_found' : !live.length ? 'origin_deleted' : !active.length ? 'source_not_active'
+        : !attached.length ? 'source_without_machine' : !enrolled.length ? 'machine_not_found' : 'machine_revoked';
+      origins = { truncated: rows.length > 50, items: rows.slice(0,50).map(row => ({ harness: row.harness,
+        source_id: row.source_id, source_state: row.source_state, origin_deleted: row.deleted_at != null,
+        machine_id: row.machine_id, machine_present: row.enrolled_machine != null, machine_revoked: row.machine_revoked_at != null })) };
+    }
   }
-  return null;
+  return { state: 'unavailable', reason, target: null, ...(origins ? { origins } : {}) };
 }
 
 /** Close every delegated channel whose grant came from one publication (issuer from delegatedGrantIssuer): it was unpublished. */