v0.97.1

Install or update: npm i -g cotal-ai@0.97.1

Changes in this release

• epWatchEvents(...).stop() settles when its connection closes mid-drain, the same way serveEndpoint(...).stop() does since 0.97.0: nats-core settles a drain on the server's PONG and rejects no pending flush when the connection closes, so a stop racing the connection's close hung. The drain is now bounded by the connection's own closed(), and a stop on an already-closed connection settles instead of rejecting.
• A proposal read names its endpoint's binding only when that binding is the reader's own (the operator reads it as before), so an owner whose proposal sits under another owner's name no longer sees that owner's token, claim reference and request. cotal service-endpoint approve|refuse|name-bind prints the request id it was sent under and takes --request-id <hex32> to send the identical request again, which the host replays; a run without it is a new request. The docs now list the four caller-policy operations the host route serves as the owner, say that the admission operations have no engine handler yet and answer unsupported, and require unpredictable request ids.
• cotal service-endpoint approve|refuse|name-bind records its request under the request id before sending it, and --request-id sends that recorded request again as it was. The replay used to rebuild the decision from a fresh proposal read, so once the first attempt had moved the proposal the resend carried different revisions under the same id and the host answered conflict instead of replaying the approval. A lost answer now names the recorded id to resend; an id this root never recorded, or one recorded for another command or subject, is refused with nothing sent.

What's Changed

• fix(auth): scope a proposal read's name binding to its reader, and let the CLI replay a decision by @davidfarah2003 in #4405
• fix(core): settle epWatchEvents stop() when the connection closes mid-drain by @davidfarah2003 in #4408
• docs(auth): name the broker-owning auth service as the only holder of the retained system-account seed by @davidfarah2003 in #4410
• test(auth): reach the member-missing and recompile-mismatch refusals of a referenced schema closure by @davidfarah2003 in #4411
• test(auth): pin what --service-endpoints does on a root without seed custody by @davidfarah2003 in #4412
• docs: say the root retains the $SYS seed in its own custody record by @davidfarah2003 in #4413
• test(manager): wait for the standing family to recover before each ef-continuity recovery call by @davidfarah2003 in #4414
• test(census): own the service-endpoint command and --service-endpoints in the census and flag inventory by @davidfarah2003 in #4416
• fix(auth): send a recorded service-endpoint request on --request-id instead of rebuilding it by @davidfarah2003 in #4417
• chore(release): version packages by @davidfarah2003 in #4407

Full Changelog: v0.97.0...v0.97.1