23037063390

Committed 12 Mar 2026 01:10PM UTC coverage: 83.085% (-0.04%) from 83.122%

Build # 23037063390

Build Type

push

github

Committed by

web-flow

Commit Message

[FIXED] Panic on malformed fixed32/fixed64 fields (#7941)

Add a length check when scanning for protocol fixed32 and fixed64
fields.

Signed-off-by: Daniele Sciascia <daniele@nats.io>

Coverage Stats

75339 of 90677 relevant lines covered (83.09%)

367545.22 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

74.0

/server/jetstream_api.go

// Copyright 2020-2026 The NATS Authors
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package server

import (
        "bytes"
        "cmp"
        "encoding/json"
        "errors"
        "fmt"
        "io"
        "os"
        "path/filepath"
        "runtime"
        "slices"
        "strings"
        "sync/atomic"
        "time"
        "unicode"

        "github.com/nats-io/nuid"
)

// Request API subjects for JetStream.
const (
        // All API endpoints.
        jsAllAPI = "$JS.API.>"

        // For constructing JetStream domain prefixes.
        jsDomainAPI = "$JS.%s.API.>"

        JSApiPrefix = "$JS.API"

        // JSApiAccountInfo is for obtaining general information about JetStream for this account.
        // Will return JSON response.
        JSApiAccountInfo = "$JS.API.INFO"

        // JSApiStreamCreate is the endpoint to create new streams.
        // Will return JSON response.
        JSApiStreamCreate  = "$JS.API.STREAM.CREATE.*"
        JSApiStreamCreateT = "$JS.API.STREAM.CREATE.%s"

        // JSApiStreamUpdate is the endpoint to update existing streams.
        // Will return JSON response.
        JSApiStreamUpdate  = "$JS.API.STREAM.UPDATE.*"
        JSApiStreamUpdateT = "$JS.API.STREAM.UPDATE.%s"

        // JSApiStreams is the endpoint to list all stream names for this account.
        // Will return JSON response.
        JSApiStreams = "$JS.API.STREAM.NAMES"
        // JSApiStreamList is the endpoint that will return all detailed stream information
        JSApiStreamList = "$JS.API.STREAM.LIST"

        // JSApiStreamInfo is for obtaining general information about a named stream.
        // Will return JSON response.
        JSApiStreamInfo  = "$JS.API.STREAM.INFO.*"
        JSApiStreamInfoT = "$JS.API.STREAM.INFO.%s"

        // JSApiStreamDelete is the endpoint to delete streams.
        // Will return JSON response.
        JSApiStreamDelete  = "$JS.API.STREAM.DELETE.*"
        JSApiStreamDeleteT = "$JS.API.STREAM.DELETE.%s"

        // JSApiStreamPurge is the endpoint to purge streams.
        // Will return JSON response.
        JSApiStreamPurge  = "$JS.API.STREAM.PURGE.*"
        JSApiStreamPurgeT = "$JS.API.STREAM.PURGE.%s"

        // JSApiStreamSnapshot is the endpoint to snapshot streams.
        // Will return a stream of chunks with a nil chunk as EOF to
        // the deliver subject. Caller should respond to each chunk
        // with a nil body response for ack flow.
        JSApiStreamSnapshot  = "$JS.API.STREAM.SNAPSHOT.*"
        JSApiStreamSnapshotT = "$JS.API.STREAM.SNAPSHOT.%s"

        // JSApiStreamRestore is the endpoint to restore a stream from a snapshot.
        // Caller should respond to each chunk with a nil body response.
        JSApiStreamRestore  = "$JS.API.STREAM.RESTORE.*"
        JSApiStreamRestoreT = "$JS.API.STREAM.RESTORE.%s"

        // JSApiMsgDelete is the endpoint to delete messages from a stream.
        // Will return JSON response.
        JSApiMsgDelete  = "$JS.API.STREAM.MSG.DELETE.*"
        JSApiMsgDeleteT = "$JS.API.STREAM.MSG.DELETE.%s"

        // JSApiMsgGet is the template for direct requests for a message by its stream sequence number.
        // Will return JSON response.
        JSApiMsgGet  = "$JS.API.STREAM.MSG.GET.*"
        JSApiMsgGetT = "$JS.API.STREAM.MSG.GET.%s"

        // JSDirectMsgGet is the template for non-api layer direct requests for a message by its stream sequence number or last by subject.
        // Will return the message similar to how a consumer receives the message, no JSON processing.
        // If the message can not be found we will use a status header of 404. If the stream does not exist the client will get a no-responders or timeout.
        JSDirectMsgGet  = "$JS.API.DIRECT.GET.*"
        JSDirectMsgGetT = "$JS.API.DIRECT.GET.%s"

        // This is a direct version of get last by subject, which will be the dominant pattern for KV access once 2.9 is released.
        // The stream and the key will be part of the subject to allow for no-marshal payloads and subject based security permissions.
        JSDirectGetLastBySubject  = "$JS.API.DIRECT.GET.*.>"
        JSDirectGetLastBySubjectT = "$JS.API.DIRECT.GET.%s.%s"

        // jsDirectGetPre
        jsDirectGetPre = "$JS.API.DIRECT.GET"

        // JSApiConsumerCreate is the endpoint to create consumers for streams.
        // This was also the legacy endpoint for ephemeral consumers.
        // It now can take consumer name and optional filter subject, which when part of the subject controls access.
        // Will return JSON response.
        JSApiConsumerCreate    = "$JS.API.CONSUMER.CREATE.*"
        JSApiConsumerCreateT   = "$JS.API.CONSUMER.CREATE.%s"
        JSApiConsumerCreateEx  = "$JS.API.CONSUMER.CREATE.*.>"
        JSApiConsumerCreateExT = "$JS.API.CONSUMER.CREATE.%s.%s.%s"

        // JSApiDurableCreate is the endpoint to create durable consumers for streams.
        // You need to include the stream and consumer name in the subject.
        JSApiDurableCreate  = "$JS.API.CONSUMER.DURABLE.CREATE.*.*"
        JSApiDurableCreateT = "$JS.API.CONSUMER.DURABLE.CREATE.%s.%s"

        // JSApiConsumers is the endpoint to list all consumer names for the stream.
        // Will return JSON response.
        JSApiConsumers  = "$JS.API.CONSUMER.NAMES.*"
        JSApiConsumersT = "$JS.API.CONSUMER.NAMES.%s"

        // JSApiConsumerList is the endpoint that will return all detailed consumer information
        JSApiConsumerList  = "$JS.API.CONSUMER.LIST.*"
        JSApiConsumerListT = "$JS.API.CONSUMER.LIST.%s"

        // JSApiConsumerInfo is for obtaining general information about a consumer.
        // Will return JSON response.
        JSApiConsumerInfo  = "$JS.API.CONSUMER.INFO.*.*"
        JSApiConsumerInfoT = "$JS.API.CONSUMER.INFO.%s.%s"

        // JSApiConsumerDelete is the endpoint to delete consumers.
        // Will return JSON response.
        JSApiConsumerDelete  = "$JS.API.CONSUMER.DELETE.*.*"
        JSApiConsumerDeleteT = "$JS.API.CONSUMER.DELETE.%s.%s"

        // JSApiConsumerPause is the endpoint to pause or unpause consumers.
        // Will return JSON response.
        JSApiConsumerPause  = "$JS.API.CONSUMER.PAUSE.*.*"
        JSApiConsumerPauseT = "$JS.API.CONSUMER.PAUSE.%s.%s"

        // JSApiRequestNextT is the prefix for the request next message(s) for a consumer in worker/pull mode.
        JSApiRequestNextT = "$JS.API.CONSUMER.MSG.NEXT.%s.%s"

        // JSApiConsumerResetT is the prefix for resetting a given consumer to a new starting sequence.
        JSApiConsumerResetT = "$JS.API.CONSUMER.RESET.%s.%s"

        // JSApiConsumerUnpinT is the prefix for unpinning subscription for a given consumer.
        JSApiConsumerUnpin  = "$JS.API.CONSUMER.UNPIN.*.*"
        JSApiConsumerUnpinT = "$JS.API.CONSUMER.UNPIN.%s.%s"

        // jsRequestNextPre
        jsRequestNextPre = "$JS.API.CONSUMER.MSG.NEXT."

        // For snapshots and restores. The ack will have additional tokens.
        jsSnapshotAckT    = "$JS.SNAPSHOT.ACK.%s.%s"
        jsRestoreDeliverT = "$JS.SNAPSHOT.RESTORE.%s.%s"

        // JSApiStreamRemovePeer is the endpoint to remove a peer from a clustered stream and its consumers.
        // Will return JSON response.
        JSApiStreamRemovePeer  = "$JS.API.STREAM.PEER.REMOVE.*"
        JSApiStreamRemovePeerT = "$JS.API.STREAM.PEER.REMOVE.%s"

        // JSApiStreamLeaderStepDown is the endpoint to have stream leader stepdown.
        // Will return JSON response.
        JSApiStreamLeaderStepDown  = "$JS.API.STREAM.LEADER.STEPDOWN.*"
        JSApiStreamLeaderStepDownT = "$JS.API.STREAM.LEADER.STEPDOWN.%s"

        // JSApiConsumerLeaderStepDown is the endpoint to have consumer leader stepdown.
        // Will return JSON response.
        JSApiConsumerLeaderStepDown  = "$JS.API.CONSUMER.LEADER.STEPDOWN.*.*"
        JSApiConsumerLeaderStepDownT = "$JS.API.CONSUMER.LEADER.STEPDOWN.%s.%s"

        // JSApiLeaderStepDown is the endpoint to have our metaleader stepdown.
        // Only works from system account.
        // Will return JSON response.
        JSApiLeaderStepDown = "$JS.API.META.LEADER.STEPDOWN"

        // JSApiRemoveServer is the endpoint to remove a peer server from the cluster.
        // Only works from system account.
        // Will return JSON response.
        JSApiRemoveServer = "$JS.API.SERVER.REMOVE"

        // JSApiAccountPurge is the endpoint to purge the js content of an account
        // Only works from system account.
        // Will return JSON response.
        JSApiAccountPurge  = "$JS.API.ACCOUNT.PURGE.*"
        JSApiAccountPurgeT = "$JS.API.ACCOUNT.PURGE.%s"

        // JSApiServerStreamMove is the endpoint to move streams off a server
        // Only works from system account.
        // Will return JSON response.
        JSApiServerStreamMove  = "$JS.API.ACCOUNT.STREAM.MOVE.*.*"
        JSApiServerStreamMoveT = "$JS.API.ACCOUNT.STREAM.MOVE.%s.%s"

        // JSApiServerStreamCancelMove is the endpoint to cancel a stream move
        // Only works from system account.
        // Will return JSON response.
        JSApiServerStreamCancelMove  = "$JS.API.ACCOUNT.STREAM.CANCEL_MOVE.*.*"
        JSApiServerStreamCancelMoveT = "$JS.API.ACCOUNT.STREAM.CANCEL_MOVE.%s.%s"

        // The prefix for system level account API.
        jsAPIAccountPre = "$JS.API.ACCOUNT."

        // jsAckT is the template for the ack message stream coming back from a consumer
        // when they ACK/NAK, etc a message.
        jsAckT      = "$JS.ACK.%s.%s"
        jsAckPre    = "$JS.ACK."
        jsAckPreLen = len(jsAckPre)

        // jsFlowControl is for flow control subjects.
        jsFlowControlPre = "$JS.FC."
        // jsFlowControl is for FC responses.
        jsFlowControl = "$JS.FC.%s.%s.*"

        // JSAdvisoryPrefix is a prefix for all JetStream advisories.
        JSAdvisoryPrefix = "$JS.EVENT.ADVISORY"

        // JSMetricPrefix is a prefix for all JetStream metrics.
        JSMetricPrefix = "$JS.EVENT.METRIC"

        // JSMetricConsumerAckPre is a metric containing ack latency.
        JSMetricConsumerAckPre = "$JS.EVENT.METRIC.CONSUMER.ACK"

        // JSAdvisoryConsumerMaxDeliveryExceedPre is a notification published when a message exceeds its delivery threshold.
        JSAdvisoryConsumerMaxDeliveryExceedPre = "$JS.EVENT.ADVISORY.CONSUMER.MAX_DELIVERIES"

        // JSAdvisoryConsumerMsgNakPre is a notification published when a message has been naked
        JSAdvisoryConsumerMsgNakPre = "$JS.EVENT.ADVISORY.CONSUMER.MSG_NAKED"

        // JSAdvisoryConsumerMsgTerminatedPre is a notification published when a message has been terminated.
        JSAdvisoryConsumerMsgTerminatedPre = "$JS.EVENT.ADVISORY.CONSUMER.MSG_TERMINATED"

        // JSAdvisoryStreamCreatedPre notification that a stream was created.
        JSAdvisoryStreamCreatedPre = "$JS.EVENT.ADVISORY.STREAM.CREATED"

        // JSAdvisoryStreamDeletedPre notification that a stream was deleted.
        JSAdvisoryStreamDeletedPre = "$JS.EVENT.ADVISORY.STREAM.DELETED"

        // JSAdvisoryStreamUpdatedPre notification that a stream was updated.
        JSAdvisoryStreamUpdatedPre = "$JS.EVENT.ADVISORY.STREAM.UPDATED"

        // JSAdvisoryConsumerCreatedPre notification that a consumer was created.
        JSAdvisoryConsumerCreatedPre = "$JS.EVENT.ADVISORY.CONSUMER.CREATED"

        // JSAdvisoryConsumerDeletedPre notification that a consumer was deleted.
        JSAdvisoryConsumerDeletedPre = "$JS.EVENT.ADVISORY.CONSUMER.DELETED"

        // JSAdvisoryConsumerPausePre notification that a consumer paused/unpaused.
        JSAdvisoryConsumerPausePre = "$JS.EVENT.ADVISORY.CONSUMER.PAUSE"

        // JSAdvisoryConsumerPinnedPre notification that a consumer was pinned.
        JSAdvisoryConsumerPinnedPre = "$JS.EVENT.ADVISORY.CONSUMER.PINNED"

        // JSAdvisoryConsumerUnpinnedPre notification that a consumer was unpinned.
        JSAdvisoryConsumerUnpinnedPre = "$JS.EVENT.ADVISORY.CONSUMER.UNPINNED"

        // JSAdvisoryStreamSnapshotCreatePre notification that a snapshot was created.
        JSAdvisoryStreamSnapshotCreatePre = "$JS.EVENT.ADVISORY.STREAM.SNAPSHOT_CREATE"

        // JSAdvisoryStreamSnapshotCompletePre notification that a snapshot was completed.
        JSAdvisoryStreamSnapshotCompletePre = "$JS.EVENT.ADVISORY.STREAM.SNAPSHOT_COMPLETE"

        // JSAdvisoryStreamRestoreCreatePre notification that a restore was start.
        JSAdvisoryStreamRestoreCreatePre = "$JS.EVENT.ADVISORY.STREAM.RESTORE_CREATE"

        // JSAdvisoryStreamRestoreCompletePre notification that a restore was completed.
        JSAdvisoryStreamRestoreCompletePre = "$JS.EVENT.ADVISORY.STREAM.RESTORE_COMPLETE"

        // JSAdvisoryDomainLeaderElectedPre notification that a jetstream domain has elected a leader.
        JSAdvisoryDomainLeaderElected = "$JS.EVENT.ADVISORY.DOMAIN.LEADER_ELECTED"

        // JSAdvisoryStreamLeaderElectedPre notification that a replicated stream has elected a leader.
        JSAdvisoryStreamLeaderElectedPre = "$JS.EVENT.ADVISORY.STREAM.LEADER_ELECTED"

        // JSAdvisoryStreamQuorumLostPre notification that a stream and its consumers are stalled.
        JSAdvisoryStreamQuorumLostPre = "$JS.EVENT.ADVISORY.STREAM.QUORUM_LOST"

        // JSAdvisoryStreamBatchAbandonedPre notification that a stream's batch was abandoned.
        JSAdvisoryStreamBatchAbandonedPre = "$JS.EVENT.ADVISORY.STREAM.BATCH_ABANDONED"

        // JSAdvisoryConsumerLeaderElectedPre notification that a replicated consumer has elected a leader.
        JSAdvisoryConsumerLeaderElectedPre = "$JS.EVENT.ADVISORY.CONSUMER.LEADER_ELECTED"

        // JSAdvisoryConsumerQuorumLostPre notification that a consumer is stalled.
        JSAdvisoryConsumerQuorumLostPre = "$JS.EVENT.ADVISORY.CONSUMER.QUORUM_LOST"

        // JSAdvisoryServerOutOfStorage notification that a server has no more storage.
        JSAdvisoryServerOutOfStorage = "$JS.EVENT.ADVISORY.SERVER.OUT_OF_STORAGE"

        // JSAdvisoryServerRemoved notification that a server has been removed from the system.
        JSAdvisoryServerRemoved = "$JS.EVENT.ADVISORY.SERVER.REMOVED"

        // JSAdvisoryAPILimitReached notification that a server has reached the JS API hard limit.
        JSAdvisoryAPILimitReached = "$JS.EVENT.ADVISORY.API.LIMIT_REACHED"

        // JSAuditAdvisory is a notification about JetStream API access.
        // FIXME - Add in details about who..
        JSAuditAdvisory = "$JS.EVENT.ADVISORY.API"
)

// Headers used in $JS.API.> requests.
const (
        // JSRequiredApiLevel requires the API level of the responding server to have the specified minimum value.
        JSRequiredApiLevel = "Nats-Required-Api-Level"
)

var denyAllClientJs = []string{jsAllAPI, "$KV.>", "$OBJ.>"}
var denyAllJs = []string{jscAllSubj, raftAllSubj, jsAllAPI, "$KV.>", "$OBJ.>"}

func generateJSMappingTable(domain string) map[string]string {
        mappings := map[string]string{}
        // This set of mappings is very very very ugly.
        // It is a consequence of what we defined the domain prefix to be "$JS.domain.API" and it's mapping to "$JS.API"
        // For optics $KV and $OBJ where made to be independent subject spaces.
        // As materialized views of JS, they did not simply extend that subject space to say "$JS.API.KV" "$JS.API.OBJ"
        // This is very unfortunate!!!
        // Furthermore, it seemed bad to require different domain prefixes for JS/KV/OBJ.
        // Especially since the actual API for say KV, does use stream create from JS.
        // To avoid overlaps KV and OBJ views append the prefix to their API.
        // (Replacing $KV with the prefix allows users to create collisions with say the bucket name)
        // This mapping therefore needs to have extra token so that the mapping can properly discern between $JS, $KV, $OBJ
        for srcMappingSuffix, to := range map[string]string{
                "INFO":       JSApiAccountInfo,
                "STREAM.>":   "$JS.API.STREAM.>",
                "CONSUMER.>": "$JS.API.CONSUMER.>",
                "DIRECT.>":   "$JS.API.DIRECT.>",
                "META.>":     "$JS.API.META.>",
                "SERVER.>":   "$JS.API.SERVER.>",
                "ACCOUNT.>":  "$JS.API.ACCOUNT.>",
                "$KV.>":      "$KV.>",
                "$OBJ.>":     "$OBJ.>",
        } {
                mappings[fmt.Sprintf("$JS.%s.API.%s", domain, srcMappingSuffix)] = to
        }
        return mappings
}

// JSMaxDescription is the maximum description length for streams and consumers.
const JSMaxDescriptionLen = 4 * 1024

// JSMaxMetadataLen is the maximum length for streams and consumers metadata map.
// It's calculated by summing length of all keys and values.
const JSMaxMetadataLen = 128 * 1024

// JSMaxNameLen is the maximum name lengths for streams, consumers and templates.
// Picked 255 as it seems to be a widely used file name limit
const JSMaxNameLen = 255

// JSDefaultRequestQueueLimit is the default number of entries that we will
// put on the global request queue before we react.
const JSDefaultRequestQueueLimit = 10_000

// Responses for API calls.

// ApiResponse is a standard response from the JetStream JSON API
type ApiResponse struct {
        Type  string    `json:"type"`
        Error *ApiError `json:"error,omitempty"`
}

const JSApiSystemResponseType = "io.nats.jetstream.api.v1.system_response"

// When passing back to the clients generalize store failures.
var (
        errStreamStoreFailed   = errors.New("error creating store for stream")
        errConsumerStoreFailed = errors.New("error creating store for consumer")
)

// ToError checks if the response has a error and if it does converts it to an error avoiding
// the pitfalls described by https://yourbasic.org/golang/gotcha-why-nil-error-not-equal-nil/
func (r *ApiResponse) ToError() error {
        if r.Error == nil {
                return nil
        }

        return r.Error
}

const JSApiOverloadedType = "io.nats.jetstream.api.v1.system_overloaded"

// ApiPaged includes variables used to create paged responses from the JSON API
type ApiPaged struct {
        Total  int `json:"total"`
        Offset int `json:"offset"`
        Limit  int `json:"limit"`
}

// ApiPagedRequest includes parameters allowing specific pages to be requests from APIs responding with ApiPaged
type ApiPagedRequest struct {
        Offset int `json:"offset"`
}

// JSApiAccountInfoResponse reports back information on jetstream for this account.
type JSApiAccountInfoResponse struct {
        ApiResponse
        *JetStreamAccountStats
}

const JSApiAccountInfoResponseType = "io.nats.jetstream.api.v1.account_info_response"

// JSApiStreamCreateResponse stream creation.
type JSApiStreamCreateResponse struct {
        ApiResponse
        *StreamInfo
        DidCreate bool `json:"did_create,omitempty"`
}

const JSApiStreamCreateResponseType = "io.nats.jetstream.api.v1.stream_create_response"

// JSApiStreamDeleteResponse stream removal.
type JSApiStreamDeleteResponse struct {
        ApiResponse
        Success bool `json:"success,omitempty"`
}

const JSApiStreamDeleteResponseType = "io.nats.jetstream.api.v1.stream_delete_response"

// JSMaxSubjectDetails The limit of the number of subject details we will send in a stream info response.
const JSMaxSubjectDetails = 100_000

type JSApiStreamInfoRequest struct {
        ApiPagedRequest
        DeletedDetails bool   `json:"deleted_details,omitempty"`
        SubjectsFilter string `json:"subjects_filter,omitempty"`
}

type JSApiStreamInfoResponse struct {
        ApiResponse
        ApiPaged
        *StreamInfo
}

const JSApiStreamInfoResponseType = "io.nats.jetstream.api.v1.stream_info_response"

// JSApiNamesLimit is the maximum entries we will return for streams or consumers lists.
// TODO(dlc) - with header or request support could request chunked response.
const JSApiNamesLimit = 1024
const JSApiListLimit = 256

type JSApiStreamNamesRequest struct {
        ApiPagedRequest
        // These are filters that can be applied to the list.
        Subject string `json:"subject,omitempty"`
}

// JSApiStreamNamesResponse list of streams.
// A nil request is valid and means all streams.
type JSApiStreamNamesResponse struct {
        ApiResponse
        ApiPaged
        Streams []string `json:"streams"`
}

const JSApiStreamNamesResponseType = "io.nats.jetstream.api.v1.stream_names_response"

type JSApiStreamListRequest struct {
        ApiPagedRequest
        // These are filters that can be applied to the list.
        Subject string `json:"subject,omitempty"`
}

// JSApiStreamListResponse list of detailed stream information.
// A nil request is valid and means all streams.
type JSApiStreamListResponse struct {
        ApiResponse
        ApiPaged
        Streams []*StreamInfo     `json:"streams"`
        Missing []string          `json:"missing,omitempty"`
        Offline map[string]string `json:"offline,omitempty"`
}

const JSApiStreamListResponseType = "io.nats.jetstream.api.v1.stream_list_response"

// JSApiStreamPurgeRequest is optional request information to the purge API.
// Subject will filter the purge request to only messages that match the subject, which can have wildcards.
// Sequence will purge up to but not including this sequence and can be combined with subject filtering.
// Keep will specify how many messages to keep. This can also be combined with subject filtering.
// Note that Sequence and Keep are mutually exclusive, so both can not be set at the same time.
type JSApiStreamPurgeRequest struct {
        // Purge up to but not including sequence.
        Sequence uint64 `json:"seq,omitempty"`
        // Subject to match against messages for the purge command.
        Subject string `json:"filter,omitempty"`
        // Number of messages to keep.
        Keep uint64 `json:"keep,omitempty"`
}

type JSApiStreamPurgeResponse struct {
        ApiResponse
        Success bool   `json:"success,omitempty"`
        Purged  uint64 `json:"purged"`
}

const JSApiStreamPurgeResponseType = "io.nats.jetstream.api.v1.stream_purge_response"

type JSApiConsumerUnpinRequest struct {
        Group string `json:"group"`
}

type JSApiConsumerUnpinResponse struct {
        ApiResponse
}

const JSApiConsumerUnpinResponseType = "io.nats.jetstream.api.v1.consumer_unpin_response"

// JSApiStreamUpdateResponse for updating a stream.
type JSApiStreamUpdateResponse struct {
        ApiResponse
        *StreamInfo
}

const JSApiStreamUpdateResponseType = "io.nats.jetstream.api.v1.stream_update_response"

// JSApiMsgDeleteRequest delete message request.
type JSApiMsgDeleteRequest struct {
        Seq     uint64 `json:"seq"`
        NoErase bool   `json:"no_erase,omitempty"`
}

type JSApiMsgDeleteResponse struct {
        ApiResponse
        Success bool `json:"success,omitempty"`
}

const JSApiMsgDeleteResponseType = "io.nats.jetstream.api.v1.stream_msg_delete_response"

type JSApiStreamSnapshotRequest struct {
        // Subject to deliver the chunks to for the snapshot.
        DeliverSubject string `json:"deliver_subject"`
        // Do not include consumers in the snapshot.
        NoConsumers bool `json:"no_consumers,omitempty"`
        // Optional chunk size preference. Defaults to 128KB,
        // automatically clamped to within the range 1KB to 1MB.
        // A smaller chunk size means more in-flight messages
        // and more acks needed. Links with good throughput
        // but high latency may need to increase this.
        ChunkSize int `json:"chunk_size,omitempty"`
        // Optional window size preference. Defaults to 8MB,
        // automatically clamped to within the range 1KB to 32MB.
        // very slow connections may need to reduce this to
        // avoid slow consumer issues.
        WindowSize int `json:"window_size,omitempty"`
        // Check all message's checksums prior to snapshot.
        CheckMsgs bool `json:"jsck,omitempty"`
}

// JSApiStreamSnapshotResponse is the direct response to the snapshot request.
type JSApiStreamSnapshotResponse struct {
        ApiResponse
        // Configuration of the given stream.
        Config *StreamConfig `json:"config,omitempty"`
        // Current State for the given stream.
        State *StreamState `json:"state,omitempty"`
}

const JSApiStreamSnapshotResponseType = "io.nats.jetstream.api.v1.stream_snapshot_response"

// JSApiStreamRestoreRequest is the required restore request.
type JSApiStreamRestoreRequest struct {
        // Configuration of the given stream.
        Config StreamConfig `json:"config"`
        // Current State for the given stream.
        State StreamState `json:"state"`
}

// JSApiStreamRestoreResponse is the direct response to the restore request.
type JSApiStreamRestoreResponse struct {
        ApiResponse
        // Subject to deliver the chunks to for the snapshot restore.
        DeliverSubject string `json:"deliver_subject"`
}

const JSApiStreamRestoreResponseType = "io.nats.jetstream.api.v1.stream_restore_response"

// JSApiStreamRemovePeerRequest is the required remove peer request.
type JSApiStreamRemovePeerRequest struct {
        // Server name of the peer to be removed.
        Peer string `json:"peer"`
}

// JSApiStreamRemovePeerResponse is the response to a remove peer request.
type JSApiStreamRemovePeerResponse struct {
        ApiResponse
        Success bool `json:"success,omitempty"`
}

const JSApiStreamRemovePeerResponseType = "io.nats.jetstream.api.v1.stream_remove_peer_response"

// JSApiStreamLeaderStepDownResponse is the response to a leader stepdown request.
type JSApiStreamLeaderStepDownResponse struct {
        ApiResponse
        Success bool `json:"success,omitempty"`
}

const JSApiStreamLeaderStepDownResponseType = "io.nats.jetstream.api.v1.stream_leader_stepdown_response"

// JSApiConsumerLeaderStepDownResponse is the response to a consumer leader stepdown request.
type JSApiConsumerLeaderStepDownResponse struct {
        ApiResponse
        Success bool `json:"success,omitempty"`
}

const JSApiConsumerLeaderStepDownResponseType = "io.nats.jetstream.api.v1.consumer_leader_stepdown_response"

// JSApiLeaderStepdownRequest allows placement control over the meta leader placement.
type JSApiLeaderStepdownRequest struct {
        Placement *Placement `json:"placement,omitempty"`
}

// JSApiLeaderStepDownResponse is the response to a meta leader stepdown request.
type JSApiLeaderStepDownResponse struct {
        ApiResponse
        Success bool `json:"success,omitempty"`
}

const JSApiLeaderStepDownResponseType = "io.nats.jetstream.api.v1.meta_leader_stepdown_response"

// JSApiMetaServerRemoveRequest will remove a peer from the meta group.
type JSApiMetaServerRemoveRequest struct {
        // Server name of the peer to be removed.
        Server string `json:"peer"`
        // Peer ID of the peer to be removed. If specified this is used
        // instead of the server name.
        Peer string `json:"peer_id,omitempty"`
}

// JSApiMetaServerRemoveResponse is the response to a peer removal request in the meta group.
type JSApiMetaServerRemoveResponse struct {
        ApiResponse
        Success bool `json:"success,omitempty"`
}

const JSApiMetaServerRemoveResponseType = "io.nats.jetstream.api.v1.meta_server_remove_response"

// JSApiMetaServerStreamMoveRequest will move a stream on a server to another
// response to this will come as JSApiStreamUpdateResponse/JSApiStreamUpdateResponseType
type JSApiMetaServerStreamMoveRequest struct {
        // Server name of the peer to be evacuated.
        Server string `json:"server,omitempty"`
        // Cluster the server is in
        Cluster string `json:"cluster,omitempty"`
        // Domain the sever is in
        Domain string `json:"domain,omitempty"`
        // Ephemeral placement tags for the move
        Tags []string `json:"tags,omitempty"`
}

const JSApiAccountPurgeResponseType = "io.nats.jetstream.api.v1.account_purge_response"

// JSApiAccountPurgeResponse is the response to a purge request in the meta group.
type JSApiAccountPurgeResponse struct {
        ApiResponse
        Initiated bool `json:"initiated,omitempty"`
}

// JSApiMsgGetRequest get a message request.
type JSApiMsgGetRequest struct {
        Seq     uint64 `json:"seq,omitempty"`
        LastFor string `json:"last_by_subj,omitempty"`
        NextFor string `json:"next_by_subj,omitempty"`

        // Batch support. Used to request more than one msg at a time.
        // Can be used with simple starting seq, but also NextFor with wildcards.
        Batch int `json:"batch,omitempty"`
        // This will make sure we limit how much data we blast out. If not set we will
        // inherit the slow consumer default max setting of the server. Default is MAX_PENDING_SIZE.
        MaxBytes int `json:"max_bytes,omitempty"`
        // Return messages as of this start time.
        StartTime *time.Time `json:"start_time,omitempty"`

        // Multiple response support. Will get the last msgs matching the subjects. These can include wildcards.
        MultiLastFor []string `json:"multi_last,omitempty"`
        // Only return messages up to this sequence. If not set, will be last sequence for the stream.
        UpToSeq uint64 `json:"up_to_seq,omitempty"`
        // Only return messages up to this time.
        UpToTime *time.Time `json:"up_to_time,omitempty"`
        // Only return the message payload, excluding headers if present.
        NoHeaders bool `json:"no_hdr,omitempty"`
}

type JSApiMsgGetResponse struct {
        ApiResponse
        Message *StoredMsg `json:"message,omitempty"`
}

const JSApiMsgGetResponseType = "io.nats.jetstream.api.v1.stream_msg_get_response"

// JSWaitQueueDefaultMax is the default max number of outstanding requests for pull consumers.
const JSWaitQueueDefaultMax = 512

type JSApiConsumerCreateResponse struct {
        ApiResponse
        *ConsumerInfo
}

const JSApiConsumerCreateResponseType = "io.nats.jetstream.api.v1.consumer_create_response"

type JSApiConsumerDeleteResponse struct {
        ApiResponse
        Success bool `json:"success,omitempty"`
}

const JSApiConsumerDeleteResponseType = "io.nats.jetstream.api.v1.consumer_delete_response"

type JSApiConsumerPauseRequest struct {
        PauseUntil time.Time `json:"pause_until,omitempty"`
}

const JSApiConsumerPauseResponseType = "io.nats.jetstream.api.v1.consumer_pause_response"

type JSApiConsumerPauseResponse struct {
        ApiResponse
        Paused         bool          `json:"paused"`
        PauseUntil     time.Time     `json:"pause_until"`
        PauseRemaining time.Duration `json:"pause_remaining,omitempty"`
}

type JSApiConsumerInfoResponse struct {
        ApiResponse
        *ConsumerInfo
}

const JSApiConsumerInfoResponseType = "io.nats.jetstream.api.v1.consumer_info_response"

type JSApiConsumersRequest struct {
        ApiPagedRequest
}

type JSApiConsumerNamesResponse struct {
        ApiResponse
        ApiPaged
        Consumers []string `json:"consumers"`
}

const JSApiConsumerNamesResponseType = "io.nats.jetstream.api.v1.consumer_names_response"

type JSApiConsumerListResponse struct {
        ApiResponse
        ApiPaged
        Consumers []*ConsumerInfo   `json:"consumers"`
        Missing   []string          `json:"missing,omitempty"`
        Offline   map[string]string `json:"offline,omitempty"`
}

const JSApiConsumerListResponseType = "io.nats.jetstream.api.v1.consumer_list_response"

// JSApiConsumerGetNextRequest is for getting next messages for pull based consumers.
type JSApiConsumerGetNextRequest struct {
        Expires   time.Duration `json:"expires,omitempty"`
        Batch     int           `json:"batch,omitempty"`
        MaxBytes  int           `json:"max_bytes,omitempty"`
        NoWait    bool          `json:"no_wait,omitempty"`
        Heartbeat time.Duration `json:"idle_heartbeat,omitempty"`
        PriorityGroup
}

// JSApiConsumerResetRequest is for resetting a consumer to a specific sequence.
type JSApiConsumerResetRequest struct {
        Seq uint64 `json:"seq,omitempty"`
}

type JSApiConsumerResetResponse struct {
        ApiResponse
        *ConsumerInfo
        ResetSeq uint64 `json:"reset_seq"`
}

const JSApiConsumerResetResponseType = "io.nats.jetstream.api.v1.consumer_reset_response"

// Structure that holds state for a JetStream API request that is processed
// in a separate long-lived go routine. This is to avoid blocking connections.
type jsAPIRoutedReq struct {
        jsub    *subscription
        sub     *subscription
        acc     *Account
        subject string
        reply   string
        msg     []byte
        pa      pubArg
}

func (js *jetStream) apiDispatch(sub *subscription, c *client, acc *Account, subject, reply string, rmsg []byte) {
        // Ignore system level directives meta stepdown and peer remove requests here.
        if subject == JSApiLeaderStepDown ||
                subject == JSApiRemoveServer ||
                strings.HasPrefix(subject, jsAPIAccountPre) {
                return
        }
        // No lock needed, those are immutable.
        s, rr := js.srv, js.apiSubs.Match(subject)

        hdr, msg := c.msgParts(rmsg)
        if len(sliceHeader(ClientInfoHdr, hdr)) == 0 {
                // Check if this is the system account. We will let these through for the account info only.
                sacc := s.SystemAccount()
                if sacc != acc {
                        return
                }
                if subject != JSApiAccountInfo {
                        // Only respond from the initial server entry to the NATS system.
                        if c.kind == CLIENT || c.kind == LEAF {
                                var resp = ApiResponse{
                                        Type:  JSApiSystemResponseType,
                                        Error: NewJSNotEnabledForAccountError(),
                                }
                                s.sendAPIErrResponse(nil, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        }
                        return
                }
        }

        // Short circuit for no interest.
        if len(rr.psubs)+len(rr.qsubs) == 0 {
                if (c.kind == CLIENT || c.kind == LEAF) && acc != s.SystemAccount() {
                        ci, acc, _, _, _ := s.getRequestInfo(c, rmsg)
                        var resp = ApiResponse{
                                Type:  JSApiSystemResponseType,
                                Error: NewJSBadRequestError(),
                        }
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        // We should only have psubs and only 1 per result.
        if len(rr.psubs) != 1 {
                s.Warnf("Malformed JetStream API Request: [%s] %q", subject, rmsg)
                if c.kind == CLIENT || c.kind == LEAF {
                        ci, acc, _, _, _ := s.getRequestInfo(c, rmsg)
                        var resp = ApiResponse{
                                Type:  JSApiSystemResponseType,
                                Error: NewJSBadRequestError(),
                        }
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }
        jsub := rr.psubs[0]

        // We need to make sure not to block. We will send the request to a long-lived
        // pool of go routines.

        // Increment inflight. Do this before queueing.
        atomic.AddInt64(&js.apiInflight, 1)

        // Copy the state. Note the JSAPI only uses the hdr index to piece apart the
        // header from the msg body. No other references are needed.
        // Check pending and warn if getting backed up.
        var queue *ipQueue[*jsAPIRoutedReq]
        var limit int64
        if js.infoSubs.HasInterest(subject) {
                queue = s.jsAPIRoutedInfoReqs
                limit = atomic.LoadInt64(&js.infoQueueLimit)
        } else {
                queue = s.jsAPIRoutedReqs
                limit = atomic.LoadInt64(&js.queueLimit)
        }
        pending, _ := queue.push(&jsAPIRoutedReq{jsub, sub, acc, subject, reply, copyBytes(rmsg), c.pa})
        if pending >= int(limit) {
                s.rateLimitFormatWarnf("%s limit reached, dropping %d requests", queue.name, pending)
                drained := int64(queue.drain())
                atomic.AddInt64(&js.apiInflight, -drained)

                s.publishAdvisory(nil, JSAdvisoryAPILimitReached, JSAPILimitReachedAdvisory{
                        TypedEvent: TypedEvent{
                                Type: JSAPILimitReachedAdvisoryType,
                                ID:   nuid.Next(),
                                Time: time.Now().UTC(),
                        },
                        Server:  s.Name(),
                        Domain:  js.config.Domain,
                        Dropped: drained,
                })
        }
}

func (s *Server) processJSAPIRoutedRequests() {
        defer s.grWG.Done()

        s.mu.RLock()
        queue, infoqueue := s.jsAPIRoutedReqs, s.jsAPIRoutedInfoReqs
        client := &client{srv: s, kind: JETSTREAM}
        s.mu.RUnlock()

        js := s.getJetStream()

        processFromQueue := func(ipq *ipQueue[*jsAPIRoutedReq]) {
                // Only pop one item at a time here, otherwise if the system is recovering
                // from queue buildup, then one worker will pull off all the tasks and the
                // others will be starved of work.
                if r, ok := ipq.popOne(); ok && r != nil {
                        client.pa = r.pa
                        start := time.Now()
                        r.jsub.icb(r.sub, client, r.acc, r.subject, r.reply, r.msg)
                        if dur := time.Since(start); dur >= readLoopReportThreshold {
                                s.Warnf("Internal subscription on %q took too long: %v", r.subject, dur)
                        }
                        atomic.AddInt64(&js.apiInflight, -1)
                }
        }

        for {
                // First select case is prioritizing queue, we will only fall through
                // to the second select case that considers infoqueue if queue is empty.
                // This effectively means infos are deprioritized.
                select {
                case <-queue.ch:
                        processFromQueue(queue)
                case <-s.quitCh:
                        return
                default:
                        select {
                        case <-infoqueue.ch:
                                processFromQueue(infoqueue)
                        case <-queue.ch:
                                processFromQueue(queue)
                        case <-s.quitCh:
                                return
                        }
                }
        }
}

func (s *Server) setJetStreamExportSubs() error {
        js := s.getJetStream()
        if js == nil {
                return NewJSNotEnabledError()
        }

        // Start the go routine that will process API requests received by the
        // subscription below when they are coming from routes, etc..
        const maxProcs = 16
        mp := runtime.GOMAXPROCS(0)
        // Cap at 16 max for now on larger core setups.
        if mp > maxProcs {
                mp = maxProcs
        }
        s.jsAPIRoutedReqs = newIPQueue[*jsAPIRoutedReq](s, "JetStream API queue")
        s.jsAPIRoutedInfoReqs = newIPQueue[*jsAPIRoutedReq](s, "JetStream API info queue")
        for i := 0; i < mp; i++ {
                s.startGoRoutine(s.processJSAPIRoutedRequests)
        }

        // This is the catch all now for all JetStream API calls.
        if _, err := s.sysSubscribe(jsAllAPI, js.apiDispatch); err != nil {
                return err
        }

        if err := s.SystemAccount().AddServiceExport(jsAllAPI, nil); err != nil {
                s.Warnf("Error setting up jetstream service exports: %v", err)
                return err
        }

        // API handles themselves.
        // infopairs are deprioritized compared to pairs in processJSAPIRoutedRequests.
        pairs := []struct {
                subject string
                handler msgHandler
        }{
                {JSApiStreamCreate, s.jsStreamCreateRequest},
                {JSApiStreamUpdate, s.jsStreamUpdateRequest},
                {JSApiStreamDelete, s.jsStreamDeleteRequest},
                {JSApiStreamPurge, s.jsStreamPurgeRequest},
                {JSApiStreamSnapshot, s.jsStreamSnapshotRequest},
                {JSApiStreamRestore, s.jsStreamRestoreRequest},
                {JSApiStreamRemovePeer, s.jsStreamRemovePeerRequest},
                {JSApiStreamLeaderStepDown, s.jsStreamLeaderStepDownRequest},
                {JSApiConsumerLeaderStepDown, s.jsConsumerLeaderStepDownRequest},
                {JSApiMsgDelete, s.jsMsgDeleteRequest},
                {JSApiMsgGet, s.jsMsgGetRequest},
                {JSApiConsumerCreateEx, s.jsConsumerCreateRequest},
                {JSApiConsumerCreate, s.jsConsumerCreateRequest},
                {JSApiDurableCreate, s.jsConsumerCreateRequest},
                {JSApiConsumerDelete, s.jsConsumerDeleteRequest},
                {JSApiConsumerPause, s.jsConsumerPauseRequest},
                {JSApiConsumerUnpin, s.jsConsumerUnpinRequest},
        }
        infopairs := []struct {
                subject string
                handler msgHandler
        }{
                {JSApiAccountInfo, s.jsAccountInfoRequest},
                {JSApiStreams, s.jsStreamNamesRequest},
                {JSApiStreamList, s.jsStreamListRequest},
                {JSApiStreamInfo, s.jsStreamInfoRequest},
                {JSApiConsumers, s.jsConsumerNamesRequest},
                {JSApiConsumerList, s.jsConsumerListRequest},
                {JSApiConsumerInfo, s.jsConsumerInfoRequest},
        }

        js.mu.Lock()
        defer js.mu.Unlock()

        // As well as populating js.apiSubs for the dispatch function to use, we
        // will also populate js.infoSubs, so that the dispatch function can
        // decide quickly whether or not the request is an info request or not.
        for _, p := range append(infopairs, pairs...) {
                sub := &subscription{subject: []byte(p.subject), icb: p.handler}
                if err := js.apiSubs.Insert(sub); err != nil {
                        return err
                }
        }
        for _, p := range infopairs {
                if err := js.infoSubs.Insert(p.subject, struct{}{}); err != nil {
                        return err
                }
        }

        return nil
}

func (s *Server) sendAPIResponse(ci *ClientInfo, acc *Account, subject, reply, request, response string) {
        acc.trackAPI()
        if reply != _EMPTY_ {
                s.sendInternalAccountMsg(nil, reply, response)
        }
        s.sendJetStreamAPIAuditAdvisory(ci, acc, subject, request, response)
}

func (s *Server) sendAPIErrResponse(ci *ClientInfo, acc *Account, subject, reply, request, response string) {
        acc.trackAPIErr()
        if reply != _EMPTY_ {
                s.sendInternalAccountMsg(nil, reply, response)
        }
        s.sendJetStreamAPIAuditAdvisory(ci, acc, subject, request, response)
}

const errRespDelay = 500 * time.Millisecond

type delayedAPIResponse struct {
        ci       *ClientInfo
        acc      *Account
        subject  string
        reply    string
        request  string
        hdr      []byte
        response string
        rg       *raftGroup
        deadline time.Time
        noJs     bool
        next     *delayedAPIResponse
}

// Add `r` in the list that is maintained ordered by the `delayedAPIResponse.deadline` time.
func addDelayedResponse(head, tail **delayedAPIResponse, r *delayedAPIResponse) {
        // Check if list empty.
        if *head == nil {
                *head, *tail = r, r
                return
        }
        // Check if it should be added at the end, which is if after or equal to the tail.
        if r.deadline.After((*tail).deadline) || r.deadline.Equal((*tail).deadline) {
                (*tail).next, *tail = r, r
                return
        }
        // Find its spot in the list.
        var prev *delayedAPIResponse
        for c := *head; c != nil; c = c.next {
                // We insert only if we are stricly before the current `c`.
                if r.deadline.Before(c.deadline) {
                        r.next = c
                        if prev != nil {
                                prev.next = r
                        } else {
                                *head = r
                        }
                        return
                }
                prev = c
        }
}

func (s *Server) delayedAPIResponder() {
        defer s.grWG.Done()
        var (
                head, tail *delayedAPIResponse // Linked list.
                r          *delayedAPIResponse // Updated by calling next().
                rqch       <-chan struct{}     // Quit channel of the Raft group (if present).
                tm         = time.NewTimer(time.Hour)
        )
        next := func() {
                r, rqch = nil, nil
                // Check that JetStream is still on. Do not exit the go routine
                // since JS can be enabled/disabled. The go routine will exit
                // only if server is shutdown.
                js := s.getJetStream()
                if js == nil {
                        // Reset head and tail here. Also drain the ipQueue.
                        head, tail = nil, nil
                        s.delayedAPIResponses.drain()
                        // Fall back into next "if" that resets timer.
                }
                // If there are no delayed messages then delay the timer for
                // a while.
                if head == nil {
                        tm.Reset(time.Hour)
                        return
                }
                // Get the first expected message and then reset the timer.
                r = head
                js.mu.RLock()
                if r.rg != nil && r.rg.node != nil {
                        // If there's an attached Raft group to the delayed response
                        // then pull out the quit channel, so that we don't bother
                        // sending responses for entities which are now no longer
                        // running.
                        rqch = r.rg.node.QuitC()
                }
                js.mu.RUnlock()
                tm.Reset(time.Until(r.deadline))
        }
        pop := func() {
                if head == nil {
                        return
                }
                head = head.next
                if head == nil {
                        tail = nil
                }
        }
        for {
                select {
                case <-s.delayedAPIResponses.ch:
                        v, ok := s.delayedAPIResponses.popOne()
                        if !ok {
                                continue
                        }
                        // Add it to the list, and if ends up being the head, set things up.
                        addDelayedResponse(&head, &tail, v)
                        if v == head {
                                next()
                        }
                case <-s.quitCh:
                        return
                case <-rqch:
                        // If we were the head, drop and setup things for next.
                        if r != nil && r == head {
                                pop()
                        }
                        next()
                case <-tm.C:
                        if r != nil {
                                // If it's not a JS API error, send it as a raw response without additional API/audit tracking.
                                if r.noJs {
                                        s.sendInternalAccountMsgWithReply(r.acc, r.subject, _EMPTY_, r.hdr, r.response, false)
                                } else {
                                        s.sendAPIErrResponse(r.ci, r.acc, r.subject, r.reply, r.request, r.response)
                                }
                                pop()
                        }
                        next()
                }
        }
}

func (s *Server) sendDelayedAPIErrResponse(ci *ClientInfo, acc *Account, subject, reply, request, response string, rg *raftGroup, duration time.Duration) {
        s.delayedAPIResponses.push(&delayedAPIResponse{
                ci, acc, subject, reply, request, nil, response, rg, time.Now().Add(duration), false, nil,
        })
}

func (s *Server) sendDelayedErrResponse(acc *Account, subject string, hdr []byte, response string, duration time.Duration) {
        s.delayedAPIResponses.push(&delayedAPIResponse{
                nil, acc, subject, _EMPTY_, _EMPTY_, hdr, response, nil, time.Now().Add(duration), true, nil,
        })
}

func (s *Server) getRequestInfo(c *client, raw []byte) (pci *ClientInfo, acc *Account, hdr, msg []byte, err error) {
        hdr, msg = c.msgParts(raw)
        var ci ClientInfo

        if len(hdr) > 0 {
                if err := json.Unmarshal(sliceHeader(ClientInfoHdr, hdr), &ci); err != nil {
                        return nil, nil, nil, nil, err
                }
        }

        if ci.Service != _EMPTY_ {
                acc, _ = s.LookupAccount(ci.Service)
        } else if ci.Account != _EMPTY_ {
                acc, _ = s.LookupAccount(ci.Account)
        } else {
                // Direct $SYS access.
                acc = c.acc
                if acc == nil {
                        acc = s.SystemAccount()
                }
        }
        if acc == nil {
                return nil, nil, nil, nil, ErrMissingAccount
        }
        return &ci, acc, hdr, msg, nil
}

func (s *Server) unmarshalRequest(c *client, acc *Account, subject string, msg []byte, v any) error {
        decoder := json.NewDecoder(bytes.NewReader(msg))
        decoder.DisallowUnknownFields()

        for {
                if err := decoder.Decode(v); err != nil {
                        if err == io.EOF {
                                return nil
                        }

                        var syntaxErr *json.SyntaxError
                        if errors.As(err, &syntaxErr) {
                                err = fmt.Errorf("%w at offset %d", err, syntaxErr.Offset)
                        }

                        c.RateLimitWarnf("Invalid JetStream request '%s > %s': %s", acc, subject, err)

                        if s.JetStreamConfig().Strict {
                                return err
                        }

                        return json.Unmarshal(msg, v)
                }
        }
}

func (a *Account) trackAPI() {
        a.mu.RLock()
        jsa := a.js
        a.mu.RUnlock()
        if jsa != nil {
                jsa.usageMu.Lock()
                jsa.usageApi++
                jsa.apiTotal++
                jsa.sendClusterUsageUpdate()
                atomic.AddInt64(&jsa.js.apiTotal, 1)
                jsa.usageMu.Unlock()
        }
}

func (a *Account) trackAPIErr() {
        a.mu.RLock()
        jsa := a.js
        a.mu.RUnlock()
        if jsa != nil {
                jsa.usageMu.Lock()
                jsa.usageApi++
                jsa.apiTotal++
                jsa.usageErr++
                jsa.apiErrors++
                jsa.sendClusterUsageUpdate()
                atomic.AddInt64(&jsa.js.apiTotal, 1)
                atomic.AddInt64(&jsa.js.apiErrors, 1)
                jsa.usageMu.Unlock()
        }
}

const badAPIRequestT = "Malformed JetStream API Request: %q"

// Helper function to check on JetStream being enabled but also on status of leafnodes
// If the local account is not enabled but does have leafnode connectivity we will not
// want to error immediately and let the other side decide.
func (a *Account) checkJetStream() (enabled, shouldError bool) {
        a.mu.RLock()
        defer a.mu.RUnlock()
        return a.js != nil, a.nleafs+a.nrleafs == 0
}

// Request for current usage and limits for this account.
func (s *Server) jsAccountInfoRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }

        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiAccountInfoResponse{ApiResponse: ApiResponse{Type: JSApiAccountInfoResponseType}}

        // Determine if we should proceed here when we are in clustered mode.
        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Make sure we are meta leader.
                if !s.JetStreamIsLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if !doErr {
                        return
                }
                resp.Error = NewJSNotEnabledForAccountError()
        } else {
                stats := acc.JetStreamUsage()
                resp.JetStreamAccountStats = &stats
        }
        b, err := json.Marshal(resp)
        if err != nil {
                return
        }

        s.sendAPIResponse(ci, acc, subject, reply, string(msg), string(b))
}

// Helpers for token extraction.
func streamNameFromSubject(subject string) string {
        return tokenAt(subject, 5)
}

func consumerNameFromSubject(subject string) string {
        return tokenAt(subject, 6)
}

func (s *Server) jsonResponse(v any) string {
        b, err := json.Marshal(v)
        if err != nil {
                s.Warnf("Problem marshaling JSON for JetStream API:", err)
                return ""
        }
        return string(b)
}

// Read lock must be held
func (jsa *jsAccount) tieredReservation(tier string, cfg *StreamConfig) int64 {
        var reservation int64
        for _, sa := range jsa.streams {
                // Don't count the stream toward the limit if it already exists.
                if sa.cfg.Name == cfg.Name {
                        continue
                }
                if (tier == _EMPTY_ || isSameTier(&sa.cfg, cfg)) && sa.cfg.MaxBytes > 0 && sa.cfg.Storage == cfg.Storage {
                        // If tier is empty, all storage is flat and we should adjust for replicas.
                        // Otherwise if tiered, storage replication already taken into consideration.
                        if tier == _EMPTY_ && sa.cfg.Replicas > 1 {
                                reservation += (int64(sa.cfg.Replicas) * sa.cfg.MaxBytes)
                        } else {
                                reservation += sa.cfg.MaxBytes
                        }
                }
        }
        return reservation
}

// Request to create a stream.
func (s *Server) jsStreamCreateRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiStreamCreateResponse{ApiResponse: ApiResponse{Type: JSApiStreamCreateResponseType}}

        // Determine if we should proceed here when we are in clustered mode.
        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Make sure we are meta leader.
                if !s.JetStreamIsLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        var cfg StreamConfigRequest
        if err := s.unmarshalRequest(c, acc, subject, msg, &cfg); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // Initialize asset version metadata.
        setStaticStreamMetadata(&cfg.StreamConfig)

        streamName := streamNameFromSubject(subject)
        if streamName != cfg.Name {
                resp.Error = NewJSStreamMismatchError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // Check for path like separators in the name.
        if strings.ContainsAny(streamName, `\/`) {
                resp.Error = NewJSStreamNameContainsPathSeparatorsError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // Can't create a stream with a sealed state.
        if cfg.Sealed {
                resp.Error = NewJSStreamInvalidConfigError(fmt.Errorf("stream configuration for create can not be sealed"))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // If we are told to do mirror direct but are not mirroring, error.
        if cfg.MirrorDirect && cfg.Mirror == nil {
                resp.Error = NewJSStreamInvalidConfigError(fmt.Errorf("stream has no mirror but does have mirror direct"))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // Hand off to cluster for processing.
        if s.JetStreamIsClustered() {
                s.jsClusteredStreamRequest(ci, acc, subject, reply, rmsg, &cfg)
                return
        }

        if err := acc.jsNonClusteredStreamLimitsCheck(&cfg.StreamConfig); err != nil {
                resp.Error = err
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        mset, err := acc.addStreamPedantic(&cfg.StreamConfig, cfg.Pedantic)
        if err != nil {
                if IsNatsErr(err, JSStreamStoreFailedF) {
                        s.Warnf("Stream create failed for '%s > %s': %v", acc, streamName, err)
                        err = errStreamStoreFailed
                }
                resp.Error = NewJSStreamCreateError(err, Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        msetCfg := mset.config()
        resp.StreamInfo = &StreamInfo{
                Created:   mset.createdTime(),
                State:     mset.state(),
                Config:    *setDynamicStreamMetadata(&msetCfg),
                TimeStamp: time.Now().UTC(),
                Mirror:    mset.mirrorInfo(),
                Sources:   mset.sourcesInfo(),
        }
        resp.DidCreate = true
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request to update a stream.
func (s *Server) jsStreamUpdateRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }

        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiStreamUpdateResponse{ApiResponse: ApiResponse{Type: JSApiStreamUpdateResponseType}}

        // Determine if we should proceed here when we are in clustered mode.
        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Make sure we are meta leader.
                if !s.JetStreamIsLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }
        var ncfg StreamConfigRequest
        if err := s.unmarshalRequest(c, acc, subject, msg, &ncfg); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        cfg, apiErr := s.checkStreamCfg(&ncfg.StreamConfig, acc, ncfg.Pedantic)
        if apiErr != nil {
                resp.Error = apiErr
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        streamName := streamNameFromSubject(subject)
        if streamName != cfg.Name {
                resp.Error = NewJSStreamMismatchError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // Handle clustered version here.
        if s.JetStreamIsClustered() {
                s.jsClusteredStreamUpdateRequest(ci, acc, subject, reply, copyBytes(rmsg), &cfg, nil, ncfg.Pedantic)
                return
        }

        mset, err := acc.lookupStream(streamName)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if mset.offlineReason != _EMPTY_ {
                resp.Error = NewJSStreamOfflineReasonError(errors.New(mset.offlineReason))
                s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                return
        }

        // Update asset version metadata.
        setStaticStreamMetadata(&cfg)

        if err := mset.updatePedantic(&cfg, ncfg.Pedantic); err != nil {
                resp.Error = NewJSStreamUpdateError(err, Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        msetCfg := mset.config()
        resp.StreamInfo = &StreamInfo{
                Created:   mset.createdTime(),
                State:     mset.state(),
                Config:    *setDynamicStreamMetadata(&msetCfg),
                Domain:    s.getOpts().JetStreamDomain,
                Mirror:    mset.mirrorInfo(),
                Sources:   mset.sourcesInfo(),
                TimeStamp: time.Now().UTC(),
        }
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request for the list of all stream names.
func (s *Server) jsStreamNamesRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiStreamNamesResponse{ApiResponse: ApiResponse{Type: JSApiStreamNamesResponseType}}

        // Determine if we should proceed here when we are in clustered mode.
        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Make sure we are meta leader.
                if !s.JetStreamIsLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        var offset int
        var filter string

        if isJSONObjectOrArray(msg) {
                var req JSApiStreamNamesRequest
                if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                        resp.Error = NewJSInvalidJSONError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                offset = req.Offset
                if req.Subject != _EMPTY_ {
                        filter = req.Subject
                }
        }

        // TODO(dlc) - Maybe hold these results for large results that we expect to be paged.
        // TODO(dlc) - If this list is long maybe do this in a Go routine?
        var numStreams int
        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        // TODO(dlc) - Debug or Warn?
                        return
                }
                js.mu.RLock()
                for stream, sa := range cc.streams[acc.Name] {
                        if IsNatsErr(sa.err, JSClusterNotAssignedErr) {
                                continue
                        }
                        if filter != _EMPTY_ {
                                // These could not have subjects auto-filled in since they are raw and unprocessed.
                                if len(sa.Config.Subjects) == 0 {
                                        if SubjectsCollide(filter, sa.Config.Name) {
                                                resp.Streams = append(resp.Streams, stream)
                                        }
                                } else {
                                        for _, subj := range sa.Config.Subjects {
                                                if SubjectsCollide(filter, subj) {
                                                        resp.Streams = append(resp.Streams, stream)
                                                        break
                                                }
                                        }
                                }
                        } else {
                                resp.Streams = append(resp.Streams, stream)
                        }
                }
                js.mu.RUnlock()
                if len(resp.Streams) > 1 {
                        slices.Sort(resp.Streams)
                }
                numStreams = len(resp.Streams)
                if offset > numStreams {
                        offset = numStreams
                }
                if offset > 0 {
                        resp.Streams = resp.Streams[offset:]
                }
                if len(resp.Streams) > JSApiNamesLimit {
                        resp.Streams = resp.Streams[:JSApiNamesLimit]
                }
        } else {
                msets := acc.filteredStreams(filter)
                // Since we page results order matters.
                if len(msets) > 1 {
                        slices.SortFunc(msets, func(i, j *stream) int { return cmp.Compare(i.cfg.Name, j.cfg.Name) })
                }

                numStreams = len(msets)
                if offset > numStreams {
                        offset = numStreams
                }

                for _, mset := range msets[offset:] {
                        resp.Streams = append(resp.Streams, mset.cfg.Name)
                        if len(resp.Streams) >= JSApiNamesLimit {
                                break
                        }
                }
        }
        resp.Total = numStreams
        resp.Limit = JSApiNamesLimit
        resp.Offset = offset

        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request for the list of all detailed stream info.
// TODO(dlc) - combine with above long term
func (s *Server) jsStreamListRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiStreamListResponse{
                ApiResponse: ApiResponse{Type: JSApiStreamListResponseType},
                Streams:     []*StreamInfo{},
        }

        // Determine if we should proceed here when we are in clustered mode.
        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Make sure we are meta leader.
                if !s.JetStreamIsLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        var offset int
        var filter string

        if isJSONObjectOrArray(msg) {
                var req JSApiStreamListRequest
                if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                        resp.Error = NewJSInvalidJSONError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                offset = req.Offset
                if req.Subject != _EMPTY_ {
                        filter = req.Subject
                }
        }

        // Clustered mode will invoke a scatter and gather.
        if s.JetStreamIsClustered() {
                // Need to copy these off before sending.. don't move this inside startGoRoutine!!!
                msg = copyBytes(msg)
                s.startGoRoutine(func() { s.jsClusteredStreamListRequest(acc, ci, filter, offset, subject, reply, msg) })
                return
        }

        // TODO(dlc) - Maybe hold these results for large results that we expect to be paged.
        // TODO(dlc) - If this list is long maybe do this in a Go routine?
        var msets []*stream
        if filter == _EMPTY_ {
                msets = acc.streams()
        } else {
                msets = acc.filteredStreams(filter)
        }

        slices.SortFunc(msets, func(i, j *stream) int { return cmp.Compare(i.cfg.Name, j.cfg.Name) })

        scnt := len(msets)
        if offset > scnt {
                offset = scnt
        }

        var missingNames []string
        for _, mset := range msets[offset:] {
                if mset.offlineReason != _EMPTY_ {
                        if resp.Offline == nil {
                                resp.Offline = make(map[string]string, 1)
                        }
                        resp.Offline[mset.getCfgName()] = mset.offlineReason
                        missingNames = append(missingNames, mset.getCfgName())
                        continue
                }

                config := mset.config()
                resp.Streams = append(resp.Streams, &StreamInfo{
                        Created:   mset.createdTime(),
                        State:     mset.state(),
                        Config:    config,
                        Domain:    s.getOpts().JetStreamDomain,
                        Mirror:    mset.mirrorInfo(),
                        Sources:   mset.sourcesInfo(),
                        TimeStamp: time.Now().UTC(),
                })
                if len(resp.Streams) >= JSApiListLimit {
                        break
                }
        }
        resp.Total = scnt
        resp.Limit = JSApiListLimit
        resp.Offset = offset
        resp.Missing = missingNames
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request for information about a stream.
func (s *Server) jsStreamInfoRequest(sub *subscription, c *client, a *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        streamName := streamNameFromSubject(subject)

        var resp = JSApiStreamInfoResponse{ApiResponse: ApiResponse{Type: JSApiStreamInfoResponseType}}

        // If someone creates a duplicate stream that is identical we will get this request forwarded to us.
        // Make sure the response type is for a create call.
        if rt := getHeader(JSResponseType, hdr); len(rt) > 0 && string(rt) == jsCreateResponse {
                resp.ApiResponse.Type = JSApiStreamCreateResponseType
        }

        var clusterWideConsCount int

        js, cc := s.getJetStreamCluster()
        if js == nil {
                return
        }
        // If we are in clustered mode we need to be the stream leader to proceed.
        if cc != nil {
                // Check to make sure the stream is assigned.
                js.mu.RLock()
                isLeader, sa := cc.isLeader(), js.streamAssignment(acc.Name, streamName)
                var offline bool
                if sa != nil {
                        clusterWideConsCount = len(sa.consumers)
                        offline = s.allPeersOffline(sa.Group)
                        if sa.unsupported != nil && sa.Group != nil && cc.meta != nil && sa.Group.isMember(cc.meta.ID()) {
                                // If we're a member for this stream, and it's not supported, report it as offline.
                                resp.Error = NewJSStreamOfflineReasonError(errors.New(sa.unsupported.reason))
                                s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                                js.mu.RUnlock()
                                return
                        }
                }
                js.mu.RUnlock()

                if isLeader && sa == nil {
                        // We can't find the stream, so mimic what would be the errors below.
                        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                                if doErr {
                                        resp.Error = NewJSNotEnabledForAccountError()
                                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                }
                                return
                        }
                        // No stream present.
                        resp.Error = NewJSStreamNotFoundError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                } else if sa == nil {
                        if js.isLeaderless() {
                                resp.Error = NewJSClusterNotAvailError()
                                // Delaying an error response gives the leader a chance to respond before us
                                s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                        }
                        return
                } else if isLeader && offline {
                        resp.Error = NewJSStreamOfflineError()
                        s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                        return
                }

                // Check to see if we are a member of the group and if the group has no leader.
                isLeaderless := js.isGroupLeaderless(sa.Group)

                // We have the stream assigned and a leader, so only the stream leader should answer.
                if !acc.JetStreamIsStreamLeader(streamName) && !isLeaderless {
                        if js.isLeaderless() {
                                resp.Error = NewJSClusterNotAvailError()
                                // Delaying an error response gives the leader a chance to respond before us
                                s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), sa.Group, errRespDelay)
                                return
                        }

                        // We may be in process of electing a leader, but if this is a scale up from 1 we will still be the state leader
                        // while the new members work through the election and catchup process.
                        // Double check for that instead of exiting here and being silent. e.g. nats stream update test --replicas=3
                        js.mu.RLock()
                        rg := sa.Group
                        var ourID string
                        if cc.meta != nil {
                                ourID = cc.meta.ID()
                        }
                        // We have seen cases where rg is nil at this point,
                        // so check explicitly and bail if that is the case.
                        bail := rg == nil || !rg.isMember(ourID)
                        if !bail {
                                // We know we are a member here, if this group is new and we are preferred allow us to answer.
                                // Also, we have seen cases where rg.node is nil at this point,
                                // so check explicitly and bail if that is the case.
                                bail = rg.Preferred != ourID || (rg.node != nil && time.Since(rg.node.Created()) > lostQuorumIntervalDefault)
                        }
                        js.mu.RUnlock()
                        if bail {
                                return
                        }
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        var details bool
        var subjects string
        var offset int
        if isJSONObjectOrArray(msg) {
                var req JSApiStreamInfoRequest
                if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                        resp.Error = NewJSInvalidJSONError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                details, subjects = req.DeletedDetails, req.SubjectsFilter
                offset = req.Offset
        }

        mset, err := acc.lookupStream(streamName)
        // Error is not to be expected at this point, but could happen if same stream trying to be created.
        if err != nil {
                if cc != nil {
                        // This could be inflight, pause for a short bit and try again.
                        // This will not be inline, so ok.
                        time.Sleep(10 * time.Millisecond)
                        mset, err = acc.lookupStream(streamName)
                }
                // Check again.
                if err != nil {
                        resp.Error = NewJSStreamNotFoundError(Unless(err))
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
        }

        if mset.offlineReason != _EMPTY_ {
                resp.Error = NewJSStreamOfflineReasonError(errors.New(mset.offlineReason))
                s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                return
        }

        config := mset.config()
        resp.StreamInfo = &StreamInfo{
                Created:    mset.createdTime(),
                State:      mset.stateWithDetail(details),
                Config:     *setDynamicStreamMetadata(&config),
                Domain:     s.getOpts().JetStreamDomain,
                Cluster:    js.clusterInfo(mset.raftGroup()),
                Mirror:     mset.mirrorInfo(),
                Sources:    mset.sourcesInfo(),
                Alternates: js.streamAlternates(ci, config.Name),
                TimeStamp:  time.Now().UTC(),
        }
        if clusterWideConsCount > 0 {
                resp.StreamInfo.State.Consumers = clusterWideConsCount
        }

        // Check if they have asked for subject details.
        if subjects != _EMPTY_ {
                st := mset.store.SubjectsTotals(subjects)
                if lst := len(st); lst > 0 {
                        // Common for both cases.
                        resp.Offset = offset
                        resp.Limit = JSMaxSubjectDetails
                        resp.Total = lst

                        if offset == 0 && lst <= JSMaxSubjectDetails {
                                resp.StreamInfo.State.Subjects = st
                        } else {
                                // Here we have to filter list due to offset or maximum constraints.
                                subjs := make([]string, 0, len(st))
                                for subj := range st {
                                        subjs = append(subjs, subj)
                                }
                                // Sort it
                                slices.Sort(subjs)

                                if offset > len(subjs) {
                                        offset = len(subjs)
                                }

                                end := offset + JSMaxSubjectDetails
                                if end > len(subjs) {
                                        end = len(subjs)
                                }
                                actualSize := end - offset
                                var sd map[string]uint64

                                if actualSize > 0 {
                                        sd = make(map[string]uint64, actualSize)
                                        for _, ss := range subjs[offset:end] {
                                                sd[ss] = st[ss]
                                        }
                                }
                                resp.StreamInfo.State.Subjects = sd
                        }
                }
        }
        // Check for out of band catchups.
        if mset.hasCatchupPeers() {
                mset.checkClusterInfo(resp.StreamInfo.Cluster)
        }

        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request to have a stream leader stepdown.
func (s *Server) jsStreamLeaderStepDownRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        // Have extra token for this one.
        name := tokenAt(subject, 6)

        var resp = JSApiStreamLeaderStepDownResponse{ApiResponse: ApiResponse{Type: JSApiStreamLeaderStepDownResponseType}}

        // If we are not in clustered mode this is a failed request.
        if !s.JetStreamIsClustered() {
                resp.Error = NewJSClusterRequiredError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // If we are here we are clustered. See if we are the stream leader in order to proceed.
        js, cc := s.getJetStreamCluster()
        if js == nil || cc == nil {
                return
        }
        if js.isLeaderless() {
                resp.Error = NewJSClusterNotAvailError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        js.mu.RLock()
        isLeader, sa := cc.isLeader(), js.streamAssignment(acc.Name, name)
        js.mu.RUnlock()

        if isLeader && sa == nil {
                resp.Error = NewJSStreamNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        } else if sa == nil {
                return
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        // Check to see if we are a member of the group and if the group has no leader.
        if js.isGroupLeaderless(sa.Group) {
                resp.Error = NewJSClusterNotAvailError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // We have the stream assigned and a leader, so only the stream leader should answer.
        if !acc.JetStreamIsStreamLeader(name) {
                return
        }

        mset, err := acc.lookupStream(name)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if mset == nil {
                resp.Success = true
                s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
                return
        }

        node := mset.raftNode()
        if node == nil {
                resp.Success = true
                s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
                return
        }

        var preferredLeader string
        if isJSONObjectOrArray(msg) {
                var req JSApiLeaderStepdownRequest
                if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                        resp.Error = NewJSInvalidJSONError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                if preferredLeader, resp.Error = s.getStepDownPreferredPlacement(node, req.Placement); resp.Error != nil {
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
        }

        // Call actual stepdown.
        err = node.StepDown(preferredLeader)
        if err != nil {
                resp.Error = NewJSRaftGeneralError(err, Unless(err))
        } else {
                resp.Success = true
        }
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request to have a consumer leader stepdown.
func (s *Server) jsConsumerLeaderStepDownRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiConsumerLeaderStepDownResponse{ApiResponse: ApiResponse{Type: JSApiConsumerLeaderStepDownResponseType}}

        // If we are not in clustered mode this is a failed request.
        if !s.JetStreamIsClustered() {
                resp.Error = NewJSClusterRequiredError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // If we are here we are clustered. See if we are the stream leader in order to proceed.
        js, cc := s.getJetStreamCluster()
        if js == nil || cc == nil {
                return
        }
        if js.isLeaderless() {
                resp.Error = NewJSClusterNotAvailError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // Have extra token for this one.
        stream := tokenAt(subject, 6)
        consumer := tokenAt(subject, 7)

        js.mu.RLock()
        isLeader, sa := cc.isLeader(), js.streamAssignment(acc.Name, stream)
        js.mu.RUnlock()

        if isLeader && sa == nil {
                resp.Error = NewJSStreamNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        } else if sa == nil {
                return
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        var ca *consumerAssignment
        if sa.consumers != nil {
                ca = sa.consumers[consumer]
        }
        if ca == nil {
                resp.Error = NewJSConsumerNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        // Check to see if we are a member of the group and if the group has no leader.
        if js.isGroupLeaderless(ca.Group) {
                resp.Error = NewJSClusterNotAvailError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if !acc.JetStreamIsConsumerLeader(stream, consumer) {
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        mset, err := acc.lookupStream(stream)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        o := mset.lookupConsumer(consumer)
        if o == nil {
                resp.Error = NewJSConsumerNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        n := o.raftNode()
        if n == nil {
                resp.Success = true
                s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
                return
        }

        var preferredLeader string
        if isJSONObjectOrArray(msg) {
                var req JSApiLeaderStepdownRequest
                if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                        resp.Error = NewJSInvalidJSONError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                if preferredLeader, resp.Error = s.getStepDownPreferredPlacement(n, req.Placement); resp.Error != nil {
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
        }

        // Call actual stepdown.
        err = n.StepDown(preferredLeader)
        if err != nil {
                resp.Error = NewJSRaftGeneralError(err, Unless(err))
        } else {
                resp.Success = true
        }
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request to remove a peer from a clustered stream.
func (s *Server) jsStreamRemovePeerRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        // Have extra token for this one.
        name := tokenAt(subject, 6)

        var resp = JSApiStreamRemovePeerResponse{ApiResponse: ApiResponse{Type: JSApiStreamRemovePeerResponseType}}

        // If we are not in clustered mode this is a failed request.
        if !s.JetStreamIsClustered() {
                resp.Error = NewJSClusterRequiredError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // If we are here we are clustered. See if we are the stream leader in order to proceed.
        js, cc := s.getJetStreamCluster()
        if js == nil || cc == nil {
                return
        }
        if js.isLeaderless() {
                resp.Error = NewJSClusterNotAvailError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        js.mu.RLock()
        isLeader, sa := cc.isLeader(), js.streamAssignmentOrInflight(acc.Name, name)
        js.mu.RUnlock()

        // Make sure we are meta leader.
        if !isLeader {
                return
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }
        if isEmptyRequest(msg) {
                resp.Error = NewJSBadRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        var req JSApiStreamRemovePeerRequest
        if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if req.Peer == _EMPTY_ {
                resp.Error = NewJSBadRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if sa == nil {
                // No stream present.
                resp.Error = NewJSStreamNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // Check to see if we are a member of the group and if the group has no leader.
        // Peers here is a server name, convert to node name.
        nodeName := getHash(req.Peer)

        js.mu.RLock()
        rg := sa.Group
        isMember := rg.isMember(nodeName)
        js.mu.RUnlock()

        // Make sure we are a member.
        if !isMember {
                resp.Error = NewJSClusterPeerNotMemberError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // If we are here we have a valid peer member set for removal.
        if !js.removePeerFromStream(sa, nodeName) {
                resp.Error = NewJSPeerRemapError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        resp.Success = true
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request to have the metaleader remove a peer from the system.
func (s *Server) jsLeaderServerRemoveRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }

        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }
        if acc != s.SystemAccount() {
                return
        }

        js, cc := s.getJetStreamCluster()
        if js == nil || cc == nil {
                return
        }

        js.mu.RLock()
        isLeader := cc.isLeader()
        meta := cc.meta
        js.mu.RUnlock()

        // Extra checks here but only leader is listening.
        if !isLeader {
                return
        }

        var resp = JSApiMetaServerRemoveResponse{ApiResponse: ApiResponse{Type: JSApiMetaServerRemoveResponseType}}
        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if isEmptyRequest(msg) {
                resp.Error = NewJSBadRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        var req JSApiMetaServerRemoveRequest
        if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        js.mu.Lock()
        defer js.mu.Unlock()

        // Another peer-remove is already in progress, don't allow multiple concurrent changes.
        if cc.peerRemoveReply != nil {
                resp.Error = NewJSClusterServerMemberChangeInflightError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        var found string
        for _, p := range meta.Peers() {
                // If Peer is specified, it takes precedence
                if req.Peer != _EMPTY_ {
                        if p.ID == req.Peer {
                                found = req.Peer
                                break
                        }
                        continue
                }
                si, ok := s.nodeToInfo.Load(p.ID)
                if ok && si.(nodeInfo).name == req.Server {
                        found = p.ID
                        break
                }
        }

        if found == _EMPTY_ {
                resp.Error = NewJSClusterServerNotMemberError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if err := meta.ProposeRemovePeer(found); err != nil {
                if err == errMembershipChange {
                        resp.Error = NewJSClusterServerMemberChangeInflightError()
                } else {
                        resp.Error = NewJSRaftGeneralError(err)
                }
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if cc.peerRemoveReply == nil {
                cc.peerRemoveReply = make(map[string]peerRemoveInfo, 1)
        }
        // Only copy the request, the subject and reply are already copied.
        cc.peerRemoveReply[found] = peerRemoveInfo{ci: ci, subject: subject, reply: reply, request: string(msg)}
}

func (s *Server) peerSetToNames(ps []string) []string {
        names := make([]string, len(ps))
        for i := 0; i < len(ps); i++ {
                if si, ok := s.nodeToInfo.Load(ps[i]); !ok {
                        names[i] = ps[i]
                } else {
                        names[i] = si.(nodeInfo).name
                }
        }
        return names
}

// looks up the peer id for a given server name. Cluster and domain name are optional filter criteria
func (s *Server) nameToPeer(js *jetStream, serverName, clusterName, domainName string) string {
        js.mu.RLock()
        defer js.mu.RUnlock()
        if cc := js.cluster; cc != nil {
                for _, p := range cc.meta.Peers() {
                        si, ok := s.nodeToInfo.Load(p.ID)
                        if ok && si.(nodeInfo).name == serverName {
                                if clusterName == _EMPTY_ || clusterName == si.(nodeInfo).cluster {
                                        if domainName == _EMPTY_ || domainName == si.(nodeInfo).domain {
                                                return p.ID
                                        }
                                }
                        }
                }
        }
        return _EMPTY_
}

// Request to have the metaleader move a stream on a peer to another
func (s *Server) jsLeaderServerStreamMoveRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }

        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        js, cc := s.getJetStreamCluster()
        if js == nil || cc == nil {
                return
        }

        // Extra checks here but only leader is listening.
        js.mu.RLock()
        isLeader := cc.isLeader()
        js.mu.RUnlock()

        if !isLeader {
                return
        }

        accName := tokenAt(subject, 6)
        streamName := tokenAt(subject, 7)

        if acc.GetName() != accName && acc != s.SystemAccount() {
                return
        }

        var resp = JSApiStreamUpdateResponse{ApiResponse: ApiResponse{Type: JSApiStreamUpdateResponseType}}
        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        var req JSApiMetaServerStreamMoveRequest
        if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        srcPeer := _EMPTY_
        if req.Server != _EMPTY_ {
                srcPeer = s.nameToPeer(js, req.Server, req.Cluster, req.Domain)
        }

        targetAcc, ok := s.accounts.Load(accName)
        if !ok {
                resp.Error = NewJSNoAccountError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        var streamFound bool
        cfg := StreamConfig{}
        currPeers := []string{}
        currCluster := _EMPTY_
        js.mu.Lock()
        streams, ok := cc.streams[accName]
        if ok {
                sa, ok := streams[streamName]
                if ok {
                        cfg = *sa.Config.clone()
                        streamFound = true
                        currPeers = sa.Group.Peers
                        currCluster = sa.Group.Cluster
                }
        }
        js.mu.Unlock()

        if !streamFound {
                resp.Error = NewJSStreamNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // if server was picked, make sure src peer exists and move it to first position.
        // removal will drop peers from the left
        if req.Server != _EMPTY_ {
                if srcPeer == _EMPTY_ {
                        resp.Error = NewJSClusterServerNotMemberError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                var peerFound bool
                for i := 0; i < len(currPeers); i++ {
                        if currPeers[i] == srcPeer {
                                copy(currPeers[1:], currPeers[:i])
                                currPeers[0] = srcPeer
                                peerFound = true
                                break
                        }
                }
                if !peerFound {
                        resp.Error = NewJSClusterPeerNotMemberError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
        }

        // make sure client is scoped to requested account
        ciNew := *(ci)
        ciNew.Account = accName

        // backup placement such that peers can be looked up with modified tag list
        var origPlacement *Placement
        if cfg.Placement != nil {
                tmp := *cfg.Placement
                origPlacement = &tmp
        }

        if len(req.Tags) > 0 {
                if cfg.Placement == nil {
                        cfg.Placement = &Placement{}
                }
                cfg.Placement.Tags = append(cfg.Placement.Tags, req.Tags...)
        }

        peers, e := cc.selectPeerGroup(cfg.Replicas+1, currCluster, &cfg, currPeers, 1, nil)
        if len(peers) <= cfg.Replicas {
                // since expanding in the same cluster did not yield a result, try in different cluster
                peers = nil

                clusters := map[string]struct{}{}
                s.nodeToInfo.Range(func(_, ni any) bool {
                        if currCluster != ni.(nodeInfo).cluster {
                                clusters[ni.(nodeInfo).cluster] = struct{}{}
                        }
                        return true
                })
                errs := &selectPeerError{}
                errs.accumulate(e)
                for cluster := range clusters {
                        newPeers, e := cc.selectPeerGroup(cfg.Replicas, cluster, &cfg, nil, 0, nil)
                        if len(newPeers) >= cfg.Replicas {
                                peers = append([]string{}, currPeers...)
                                peers = append(peers, newPeers[:cfg.Replicas]...)
                                break
                        }
                        errs.accumulate(e)
                }
                if peers == nil {
                        resp.Error = NewJSClusterNoPeersError(errs)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
        }

        cfg.Placement = origPlacement

        s.Noticef("Requested move for stream '%s > %s' R=%d from %+v to %+v",
                accName, streamName, cfg.Replicas, s.peerSetToNames(currPeers), s.peerSetToNames(peers))

        // We will always have peers and therefore never do a callout, therefore it is safe to call inline
        // We should be fine ignoring pedantic mode here. as we do not touch configuration.
        s.jsClusteredStreamUpdateRequest(&ciNew, targetAcc.(*Account), subject, reply, rmsg, &cfg, peers, false)
}

// Request to have the metaleader move a stream on a peer to another
func (s *Server) jsLeaderServerStreamCancelMoveRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }

        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        js, cc := s.getJetStreamCluster()
        if js == nil || cc == nil {
                return
        }

        // Extra checks here but only leader is listening.
        js.mu.RLock()
        isLeader := cc.isLeader()
        js.mu.RUnlock()

        if !isLeader {
                return
        }

        var resp = JSApiStreamUpdateResponse{ApiResponse: ApiResponse{Type: JSApiStreamUpdateResponseType}}
        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        accName := tokenAt(subject, 6)
        streamName := tokenAt(subject, 7)

        if acc.GetName() != accName && acc != s.SystemAccount() {
                return
        }

        targetAcc, ok := s.accounts.Load(accName)
        if !ok {
                resp.Error = NewJSNoAccountError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        streamFound := false
        cfg := StreamConfig{}
        currPeers := []string{}
        js.mu.Lock()
        streams, ok := cc.streams[accName]
        if ok {
                sa, ok := streams[streamName]
                if ok {
                        cfg = *sa.Config.clone()
                        streamFound = true
                        currPeers = sa.Group.Peers
                }
        }
        js.mu.Unlock()

        if !streamFound {
                resp.Error = NewJSStreamNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if len(currPeers) <= cfg.Replicas {
                resp.Error = NewJSStreamMoveNotInProgressError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // make sure client is scoped to requested account
        ciNew := *(ci)
        ciNew.Account = accName

        peers := currPeers[:cfg.Replicas]

        // Remove placement in case tags don't match
        // This can happen if the move was initiated by modifying the tags.
        // This is an account operation.
        // This can NOT happen when the move was initiated by the system account.
        // There move honors the original tag list.
        if cfg.Placement != nil && len(cfg.Placement.Tags) != 0 {
        FOR_TAGCHECK:
                for _, peer := range peers {
                        si, ok := s.nodeToInfo.Load(peer)
                        if !ok {
                                // can't verify tags, do the safe thing and error
                                resp.Error = NewJSStreamGeneralError(
                                        fmt.Errorf("peer %s not present for tag validation", peer))
                                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                return
                        }
                        nodeTags := si.(nodeInfo).tags
                        for _, tag := range cfg.Placement.Tags {
                                if !nodeTags.Contains(tag) {
                                        // clear placement as tags don't match
                                        cfg.Placement = nil
                                        break FOR_TAGCHECK
                                }
                        }

                }
        }

        s.Noticef("Requested cancel of move: R=%d '%s > %s' to peer set %+v and restore previous peer set %+v",
                cfg.Replicas, accName, streamName, s.peerSetToNames(currPeers), s.peerSetToNames(peers))

        // We will always have peers and therefore never do a callout, therefore it is safe to call inline
        s.jsClusteredStreamUpdateRequest(&ciNew, targetAcc.(*Account), subject, reply, rmsg, &cfg, peers, false)
}

// Request to have an account purged
func (s *Server) jsLeaderAccountPurgeRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }

        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }
        if acc != s.SystemAccount() {
                return
        }

        js := s.getJetStream()
        if js == nil {
                return
        }

        accName := tokenAt(subject, 5)

        var resp = JSApiAccountPurgeResponse{ApiResponse: ApiResponse{Type: JSApiAccountPurgeResponseType}}

        if !s.JetStreamIsClustered() {
                var streams []*stream
                var ac *Account
                if ac, err = s.lookupAccount(accName); err == nil && ac != nil {
                        streams = ac.streams()
                }

                s.Noticef("Purge request for account %s (streams: %d, hasAccount: %t)",
                        accName, len(streams), ac != nil)

                for _, mset := range streams {
                        err := mset.delete()
                        if err != nil {
                                resp.Error = NewJSStreamDeleteError(err)
                                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                return
                        }
                }
                if err := os.RemoveAll(filepath.Join(js.config.StoreDir, accName)); err != nil {
                        resp.Error = NewJSStreamGeneralError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                resp.Initiated = true
                s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        _, cc := s.getJetStreamCluster()

        js.mu.RLock()
        isLeader := cc.isLeader()
        meta := cc.meta
        js.mu.RUnlock()

        if !isLeader {
                return
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if js.isMetaRecovering() {
                // While in recovery mode, the data structures are not fully initialized
                resp.Error = NewJSClusterNotAvailError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        js.mu.Lock()
        ns, nc := 0, 0
        for osa := range js.streamAssignmentsOrInflightSeq(accName) {
                for oca := range js.consumerAssignmentsOrInflightSeq(accName, osa.Config.Name) {
                        ca := &consumerAssignment{Group: oca.Group, Stream: oca.Stream, Name: oca.Name, Config: oca.Config, Subject: subject, Client: oca.Client, Created: oca.Created}
                        meta.Propose(encodeDeleteConsumerAssignment(ca))
                        cc.trackInflightConsumerProposal(accName, osa.Config.Name, ca, true)
                        nc++
                }
                sa := &streamAssignment{Group: osa.Group, Config: osa.Config, Subject: subject, Client: osa.Client, Created: osa.Created}
                meta.Propose(encodeDeleteStreamAssignment(sa))
                cc.trackInflightStreamProposal(accName, sa, true)
                ns++
        }
        js.mu.Unlock()

        hasAccount := ns > 0
        s.Noticef("Purge request for account %s (streams: %d, consumer: %d, hasAccount: %t)", accName, ns, nc, hasAccount)

        resp.Initiated = true
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
}

// Request to have the meta leader stepdown.
// These will only be received by the meta leader, so less checking needed.
func (s *Server) jsLeaderStepDownRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }

        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        // This should only be coming from the System Account.
        if acc != s.SystemAccount() {
                s.RateLimitWarnf("JetStream API stepdown request from non-system account: %q user: %q", ci.serviceAccount(), ci.User)
                return
        }

        js, cc := s.getJetStreamCluster()
        if js == nil || cc == nil {
                return
        }

        // Extra checks here but only leader is listening.
        js.mu.RLock()
        isLeader := cc.isLeader()
        meta := cc.meta
        js.mu.RUnlock()

        if !isLeader {
                return
        }

        var preferredLeader string
        var resp = JSApiLeaderStepDownResponse{ApiResponse: ApiResponse{Type: JSApiLeaderStepDownResponseType}}
        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if isJSONObjectOrArray(msg) {
                var req JSApiLeaderStepdownRequest
                if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                        resp.Error = NewJSInvalidJSONError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                if preferredLeader, resp.Error = s.getStepDownPreferredPlacement(meta, req.Placement); resp.Error != nil {
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
        }

        // Call actual stepdown.
        err = meta.StepDown(preferredLeader)
        if err != nil {
                resp.Error = NewJSRaftGeneralError(err, Unless(err))
        } else {
                resp.Success = true
        }
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Check if given []bytes is a JSON Object or Array.
// Technically, valid JSON can also be a plain string or number, but for our use case,
// we care only for JSON objects or arrays which starts with `[` or `{`.
// This function does not have to ensure valid JSON in its entirety. It is used merely
// to hint the codepath if it should attempt to parse the request as JSON or not.
func isJSONObjectOrArray(req []byte) bool {
        // Skip leading JSON whitespace (space, tab, newline, carriage return)
        i := 0
        for i < len(req) && (req[i] == ' ' || req[i] == '\t' || req[i] == '\n' || req[i] == '\r') {
                i++
        }
        // Check for empty input after trimming
        if i >= len(req) {
                return false
        }
        // Check if the first non-whitespace character is '{' or '['
        return req[i] == '{' || req[i] == '['
}

func isEmptyRequest(req []byte) bool {
        if len(req) == 0 {
                return true
        }
        if bytes.Equal(req, []byte("{}")) {
                return true
        }
        // If we are here we didn't get our simple match, but still could be valid.
        var v any
        if err := json.Unmarshal(req, &v); err != nil {
                return false
        }
        vm, ok := v.(map[string]any)
        if !ok {
                return false
        }
        return len(vm) == 0
}

// getStepDownPreferredPlacement attempts to work out what the best placement is
// for a stepdown request. The preferred server name always takes precedence, but
// if not specified, the placement will be used to filter by cluster. The caller
// should check for return API errors and return those to the requestor if needed.
func (s *Server) getStepDownPreferredPlacement(group RaftNode, placement *Placement) (string, *ApiError) {
        if placement == nil {
                return _EMPTY_, nil
        }
        var preferredLeader string
        if placement.Preferred != _EMPTY_ {
                for _, p := range group.Peers() {
                        si, ok := s.nodeToInfo.Load(p.ID)
                        if !ok || si == nil {
                                continue
                        }
                        if si.(nodeInfo).name == placement.Preferred {
                                preferredLeader = p.ID
                                break
                        }
                }
                if preferredLeader == group.ID() {
                        return _EMPTY_, NewJSClusterNoPeersError(fmt.Errorf("preferred server %q is already leader", placement.Preferred))
                }
                if preferredLeader == _EMPTY_ {
                        return _EMPTY_, NewJSClusterNoPeersError(fmt.Errorf("preferred server %q not known", placement.Preferred))
                }
        } else {
                possiblePeers := make(map[*Peer]nodeInfo, len(group.Peers()))
                ourID := group.ID()
                for _, p := range group.Peers() {
                        if p == nil {
                                continue // ... shouldn't happen.
                        }
                        si, ok := s.nodeToInfo.Load(p.ID)
                        if !ok || si == nil {
                                continue
                        }
                        ni := si.(nodeInfo)
                        if ni.offline || p.ID == ourID {
                                continue
                        }
                        possiblePeers[p] = ni
                }
                // If cluster is specified, filter out anything not matching the cluster name.
                if placement.Cluster != _EMPTY_ {
                        for p, si := range possiblePeers {
                                if si.cluster != placement.Cluster {
                                        delete(possiblePeers, p)
                                }
                        }
                }
                // If tags are specified, filter out anything not matching all supplied tags.
                if len(placement.Tags) > 0 {
                        for p, si := range possiblePeers {
                                matchesAll := true
                                for _, tag := range placement.Tags {
                                        if matchesAll = matchesAll && si.tags.Contains(tag); !matchesAll {
                                                break
                                        }
                                }
                                if !matchesAll {
                                        delete(possiblePeers, p)
                                }
                        }
                }
                // If there are no possible peers, return an error.
                if len(possiblePeers) == 0 {
                        return _EMPTY_, NewJSClusterNoPeersError(fmt.Errorf("no replacement peer connected"))
                }
                // Take advantage of random map iteration order to select the preferred.
                for p := range possiblePeers {
                        preferredLeader = p.ID
                        break
                }
        }
        return preferredLeader, nil
}

// Request to delete a stream.
func (s *Server) jsStreamDeleteRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiStreamDeleteResponse{ApiResponse: ApiResponse{Type: JSApiStreamDeleteResponseType}}

        // Determine if we should proceed here when we are in clustered mode.
        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Make sure we are meta leader.
                if !s.JetStreamIsLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        if !isEmptyRequest(msg) {
                resp.Error = NewJSNotEmptyRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        stream := streamNameFromSubject(subject)

        // Clustered.
        if s.JetStreamIsClustered() {
                s.jsClusteredStreamDeleteRequest(ci, acc, stream, subject, reply, msg)
                return
        }

        mset, err := acc.lookupStream(stream)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if err := mset.delete(); err != nil {
                resp.Error = NewJSStreamDeleteError(err, Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        resp.Success = true
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request to delete a message.
// This expects a stream sequence number as the msg body.
func (s *Server) jsMsgDeleteRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        stream := tokenAt(subject, 6)

        var resp = JSApiMsgDeleteResponse{ApiResponse: ApiResponse{Type: JSApiMsgDeleteResponseType}}

        // If we are in clustered mode we need to be the stream leader to proceed.
        if s.JetStreamIsClustered() {
                // Check to make sure the stream is assigned.
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }

                js.mu.RLock()
                isLeader, sa := cc.isLeader(), js.streamAssignment(acc.Name, stream)
                js.mu.RUnlock()

                if isLeader && sa == nil {
                        // We can't find the stream, so mimic what would be the errors below.
                        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                                if doErr {
                                        resp.Error = NewJSNotEnabledForAccountError()
                                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                }
                                return
                        }
                        // No stream present.
                        resp.Error = NewJSStreamNotFoundError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                } else if sa == nil {
                        return
                }

                // Check to see if we are a member of the group and if the group has no leader.
                if js.isGroupLeaderless(sa.Group) {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }

                // We have the stream assigned and a leader, so only the stream leader should answer.
                if !acc.JetStreamIsStreamLeader(stream) {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }
        if isEmptyRequest(msg) {
                resp.Error = NewJSBadRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        var req JSApiMsgDeleteRequest
        if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        mset, err := acc.lookupStream(stream)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if mset.cfg.Sealed {
                resp.Error = NewJSStreamSealedError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if mset.cfg.DenyDelete {
                resp.Error = NewJSStreamMsgDeleteFailedError(errors.New("message delete not permitted"))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if s.JetStreamIsClustered() {
                s.jsClusteredMsgDeleteRequest(ci, acc, mset, stream, subject, reply, &req, rmsg)
                return
        }

        var removed bool
        if req.NoErase {
                removed, err = mset.removeMsg(req.Seq)
        } else {
                removed, err = mset.eraseMsg(req.Seq)
        }
        if err != nil {
                resp.Error = NewJSStreamMsgDeleteFailedError(err, Unless(err))
        } else if !removed {
                resp.Error = NewJSSequenceNotFoundError(req.Seq)
        } else {
                resp.Success = true
        }
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request to get a raw stream message.
func (s *Server) jsMsgGetRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        stream := tokenAt(subject, 6)

        var resp = JSApiMsgGetResponse{ApiResponse: ApiResponse{Type: JSApiMsgGetResponseType}}

        // If we are in clustered mode we need to be the stream leader to proceed.
        if s.JetStreamIsClustered() {
                // Check to make sure the stream is assigned.
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }

                js.mu.RLock()
                isLeader, sa := cc.isLeader(), js.streamAssignment(acc.Name, stream)
                js.mu.RUnlock()

                if isLeader && sa == nil {
                        // We can't find the stream, so mimic what would be the errors below.
                        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                                if doErr {
                                        resp.Error = NewJSNotEnabledForAccountError()
                                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                }
                                return
                        }
                        // No stream present.
                        resp.Error = NewJSStreamNotFoundError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                } else if sa == nil {
                        return
                }

                // Check to see if we are a member of the group and if the group has no leader.
                if js.isGroupLeaderless(sa.Group) {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }

                // We have the stream assigned and a leader, so only the stream leader should answer.
                if !acc.JetStreamIsStreamLeader(stream) {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }
        if isEmptyRequest(msg) {
                resp.Error = NewJSBadRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        var req JSApiMsgGetRequest
        if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // This version does not support batch.
        if req.Batch > 0 || req.MaxBytes > 0 {
                resp.Error = NewJSBadRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // Validate non-conflicting options. Seq, LastFor, and AsOfTime are mutually exclusive.
        // NextFor can be paired with Seq or AsOfTime indicating a filter subject.
        if (req.Seq > 0 && req.LastFor != _EMPTY_) ||
                (req.Seq == 0 && req.LastFor == _EMPTY_ && req.NextFor == _EMPTY_ && req.StartTime == nil) ||
                (req.Seq > 0 && req.StartTime != nil) ||
                (req.StartTime != nil && req.LastFor != _EMPTY_) ||
                (req.LastFor != _EMPTY_ && req.NextFor != _EMPTY_) {
                resp.Error = NewJSBadRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        mset, err := acc.lookupStream(stream)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if mset.offlineReason != _EMPTY_ {
                // Just let the request time out.
                return
        }

        var svp StoreMsg
        var sm *StoreMsg

        // Ensure this read request is isolated and doesn't interleave with writes.
        mset.mu.RLock()
        defer mset.mu.RUnlock()

        // If AsOfTime is set, perform this first to get the sequence.
        var seq uint64
        if req.StartTime != nil {
                seq = mset.store.GetSeqFromTime(*req.StartTime)
        } else {
                seq = req.Seq
        }

        if seq > 0 && req.NextFor == _EMPTY_ {
                sm, err = mset.store.LoadMsg(seq, &svp)
        } else if req.NextFor != _EMPTY_ {
                sm, _, err = mset.store.LoadNextMsg(req.NextFor, subjectHasWildcard(req.NextFor), seq, &svp)
        } else {
                sm, err = mset.store.LoadLastMsg(req.LastFor, &svp)
        }
        if err != nil {
                resp.Error = NewJSNoMessageFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        resp.Message = &StoredMsg{
                Subject:  sm.subj,
                Sequence: sm.seq,
                Data:     sm.msg,
                Time:     time.Unix(0, sm.ts).UTC(),
        }
        if !req.NoHeaders {
                resp.Message.Header = sm.hdr
        }

        // Don't send response through API layer for this call.
        s.sendInternalAccountMsg(nil, reply, s.jsonResponse(resp))
}

func (s *Server) jsConsumerUnpinRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }

        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        stream := streamNameFromSubject(subject)
        consumer := consumerNameFromSubject(subject)

        var resp = JSApiConsumerUnpinResponse{ApiResponse: ApiResponse{Type: JSApiConsumerUnpinResponseType}}

        if s.JetStreamIsClustered() {
                // Check to make sure the stream is assigned.
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }

                // First check if the stream and consumer is there.
                js.mu.RLock()
                sa := js.streamAssignment(acc.Name, stream)
                if sa == nil {
                        js.mu.RUnlock()
                        resp.Error = NewJSStreamNotFoundError(Unless(err))
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                if sa.unsupported != nil {
                        js.mu.RUnlock()
                        // Just let the request time out.
                        return
                }

                ca, ok := sa.consumers[consumer]
                if !ok || ca == nil {
                        js.mu.RUnlock()
                        resp.Error = NewJSConsumerNotFoundError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                if ca.unsupported != nil {
                        js.mu.RUnlock()
                        // Just let the request time out.
                        return
                }
                js.mu.RUnlock()

                // Then check if we are the leader.
                mset, err := acc.lookupStream(stream)
                if err != nil {
                        return
                }

                o := mset.lookupConsumer(consumer)
                if o == nil {
                        return
                }
                if !o.isLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        var req JSApiConsumerUnpinRequest
        if err := json.Unmarshal(msg, &req); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if req.Group == _EMPTY_ {
                resp.Error = NewJSInvalidJSONError(errors.New("consumer group not specified"))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if !validGroupName.MatchString(req.Group) {
                resp.Error = NewJSConsumerInvalidGroupNameError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        mset, err := acc.lookupStream(stream)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if mset.offlineReason != _EMPTY_ {
                // Just let the request time out.
                return
        }
        o := mset.lookupConsumer(consumer)
        if o == nil {
                resp.Error = NewJSConsumerNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if o.offlineReason != _EMPTY_ {
                // Just let the request time out.
                return
        }

        var foundPriority bool
        for _, group := range o.config().PriorityGroups {
                if group == req.Group {
                        foundPriority = true
                        break
                }
        }
        if !foundPriority {
                resp.Error = NewJSConsumerInvalidPriorityGroupError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        o.mu.Lock()
        o.unassignPinId()
        o.sendUnpinnedAdvisoryLocked(req.Group, "admin")
        o.mu.Unlock()
        o.signalNewMessages()
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request to purge a stream.
func (s *Server) jsStreamPurgeRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        stream := streamNameFromSubject(subject)

        var resp = JSApiStreamPurgeResponse{ApiResponse: ApiResponse{Type: JSApiStreamPurgeResponseType}}

        // If we are in clustered mode we need to be the stream leader to proceed.
        if s.JetStreamIsClustered() {
                // Check to make sure the stream is assigned.
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }

                js.mu.RLock()
                isLeader, sa := cc.isLeader(), js.streamAssignment(acc.Name, stream)
                js.mu.RUnlock()

                if isLeader && sa == nil {
                        // We can't find the stream, so mimic what would be the errors below.
                        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                                if doErr {
                                        resp.Error = NewJSNotEnabledForAccountError()
                                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                }
                                return
                        }
                        // No stream present.
                        resp.Error = NewJSStreamNotFoundError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                } else if sa == nil {
                        if js.isLeaderless() {
                                resp.Error = NewJSClusterNotAvailError()
                                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        }
                        return
                }

                // Check to see if we are a member of the group and if the group has no leader.
                if js.isGroupLeaderless(sa.Group) {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }

                // We have the stream assigned and a leader, so only the stream leader should answer.
                if !acc.JetStreamIsStreamLeader(stream) {
                        if js.isLeaderless() {
                                resp.Error = NewJSClusterNotAvailError()
                                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        }
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        var purgeRequest *JSApiStreamPurgeRequest
        if isJSONObjectOrArray(msg) {
                var req JSApiStreamPurgeRequest
                if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                        resp.Error = NewJSInvalidJSONError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                if req.Sequence > 0 && req.Keep > 0 {
                        resp.Error = NewJSBadRequestError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                purgeRequest = &req
        }

        mset, err := acc.lookupStream(stream)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if mset.cfg.Sealed {
                resp.Error = NewJSStreamSealedError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if mset.cfg.DenyPurge {
                resp.Error = NewJSStreamPurgeFailedError(errors.New("stream purge not permitted"))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if s.JetStreamIsClustered() {
                s.jsClusteredStreamPurgeRequest(ci, acc, mset, stream, subject, reply, rmsg, purgeRequest)
                return
        }

        purged, err := mset.purge(purgeRequest)
        if err != nil {
                resp.Error = NewJSStreamGeneralError(err, Unless(err))
        } else {
                resp.Purged = purged
                resp.Success = true
        }
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

func (acc *Account) jsNonClusteredStreamLimitsCheck(cfg *StreamConfig) *ApiError {
        var replicas int
        if cfg != nil {
                replicas = cfg.Replicas
        }
        selectedLimits, tier, jsa, apiErr := acc.selectLimits(replicas)
        if apiErr != nil {
                return apiErr
        }
        jsa.js.mu.RLock()
        defer jsa.js.mu.RUnlock()
        jsa.mu.RLock()
        defer jsa.mu.RUnlock()
        if selectedLimits.MaxStreams > 0 && jsa.countStreams(tier, cfg) >= selectedLimits.MaxStreams {
                return NewJSMaximumStreamsLimitError()
        }
        reserved := jsa.tieredReservation(tier, cfg)
        if err := jsa.js.checkAllLimits(selectedLimits, cfg, reserved, 0); err != nil {
                return NewJSStreamLimitsError(err, Unless(err))
        }
        return nil
}

// Request to restore a stream.
func (s *Server) jsStreamRestoreRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamIsLeader() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiStreamRestoreResponse{ApiResponse: ApiResponse{Type: JSApiStreamRestoreResponseType}}
        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if !acc.JetStreamEnabled() {
                resp.Error = NewJSNotEnabledForAccountError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if isEmptyRequest(msg) {
                resp.Error = NewJSBadRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        var req JSApiStreamRestoreRequest
        if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        stream := streamNameFromSubject(subject)

        if stream != req.Config.Name && req.Config.Name == _EMPTY_ {
                req.Config.Name = stream
        }

        // check stream config at the start of the restore process, not at the end
        cfg, apiErr := s.checkStreamCfg(&req.Config, acc, false)
        if apiErr != nil {
                resp.Error = apiErr
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if s.JetStreamIsClustered() {
                s.jsClusteredStreamRestoreRequest(ci, acc, &req, subject, reply, rmsg)
                return
        }

        if err := acc.jsNonClusteredStreamLimitsCheck(&cfg); err != nil {
                resp.Error = err
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if _, err := acc.lookupStream(stream); err == nil {
                resp.Error = NewJSStreamNameExistRestoreFailedError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        s.processStreamRestore(ci, acc, &req.Config, subject, reply, string(msg))
}

func (s *Server) processStreamRestore(ci *ClientInfo, acc *Account, cfg *StreamConfig, subject, reply, msg string) <-chan error {
        js := s.getJetStream()

        var resp = JSApiStreamRestoreResponse{ApiResponse: ApiResponse{Type: JSApiStreamRestoreResponseType}}

        snapDir := filepath.Join(js.config.StoreDir, snapStagingDir)
        if _, err := os.Stat(snapDir); os.IsNotExist(err) {
                if err := os.MkdirAll(snapDir, defaultDirPerms); err != nil {
                        resp.Error = &ApiError{Code: 503, Description: "JetStream unable to create temp storage for restore"}
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return nil
                }
        }

        tfile, err := os.CreateTemp(snapDir, "js-restore-")
        if err != nil {
                resp.Error = NewJSTempStorageFailedError()
                s.sendAPIErrResponse(ci, acc, subject, reply, msg, s.jsonResponse(&resp))
                return nil
        }

        streamName := cfg.Name
        s.Noticef("Starting restore for stream '%s > %s'", acc.Name, streamName)

        start := time.Now().UTC()
        domain := s.getOpts().JetStreamDomain
        s.publishAdvisory(acc, JSAdvisoryStreamRestoreCreatePre+"."+streamName, &JSRestoreCreateAdvisory{
                TypedEvent: TypedEvent{
                        Type: JSRestoreCreateAdvisoryType,
                        ID:   nuid.Next(),
                        Time: start,
                },
                Stream: streamName,
                Client: ci.forAdvisory(),
                Domain: domain,
        })

        // Create our internal subscription to accept the snapshot.
        restoreSubj := fmt.Sprintf(jsRestoreDeliverT, streamName, nuid.Next())

        type result struct {
                err   error
                reply string
        }

        // For signaling to upper layers.
        resultCh := make(chan result, 1)
        activeQ := newIPQueue[int](s, fmt.Sprintf("[ACC:%s] stream '%s' restore", acc.Name, streamName)) // of int

        var total int

        // FIXME(dlc) - Probably take out of network path eventually due to disk I/O?
        processChunk := func(sub *subscription, c *client, _ *Account, subject, reply string, msg []byte) {
                // We require reply subjects to communicate back failures, flow etc. If they do not have one log and cancel.
                if reply == _EMPTY_ {
                        sub.client.processUnsub(sub.sid)
                        resultCh <- result{
                                fmt.Errorf("restore for stream '%s > %s' requires reply subject for each chunk", acc.Name, streamName),
                                reply,
                        }
                        return
                }
                // Account client messages have \r\n on end. This is an error.
                if len(msg) < LEN_CR_LF {
                        sub.client.processUnsub(sub.sid)
                        resultCh <- result{
                                fmt.Errorf("restore for stream '%s > %s' received short chunk", acc.Name, streamName),
                                reply,
                        }
                        return
                }
                // Adjust.
                msg = msg[:len(msg)-LEN_CR_LF]

                // This means we are complete with our transfer from the client.
                if len(msg) == 0 {
                        s.Debugf("Finished staging restore for stream '%s > %s'", acc.Name, streamName)
                        resultCh <- result{err, reply}
                        return
                }

                // We track total and check on server limits.
                // TODO(dlc) - We could check apriori and cancel initial request if we know it won't fit.
                total += len(msg)
                if js.wouldExceedLimits(FileStorage, total) {
                        s.resourcesExceededError(FileStorage)
                        resultCh <- result{NewJSInsufficientResourcesError(), reply}
                        return
                }

                // Append chunk to temp file. Mark as issue if we encounter an error.
                if n, err := tfile.Write(msg); n != len(msg) || err != nil {
                        resultCh <- result{err, reply}
                        if reply != _EMPTY_ {
                                s.sendInternalAccountMsg(acc, reply, "-ERR 'storage failure during restore'")
                        }
                        return
                }

                activeQ.push(len(msg))

                s.sendInternalAccountMsg(acc, reply, nil)
        }

        sub, err := acc.subscribeInternal(restoreSubj, processChunk)
        if err != nil {
                tfile.Close()
                os.Remove(tfile.Name())
                resp.Error = NewJSRestoreSubscribeFailedError(err, restoreSubj)
                s.sendAPIErrResponse(ci, acc, subject, reply, msg, s.jsonResponse(&resp))
                return nil
        }

        // Mark the subject so the end user knows where to send the snapshot chunks.
        resp.DeliverSubject = restoreSubj
        s.sendAPIResponse(ci, acc, subject, reply, msg, s.jsonResponse(resp))

        doneCh := make(chan error, 1)

        // Monitor the progress from another Go routine.
        s.startGoRoutine(func() {
                defer s.grWG.Done()
                defer func() {
                        tfile.Close()
                        os.Remove(tfile.Name())
                        sub.client.processUnsub(sub.sid)
                        activeQ.unregister()
                }()

                const activityInterval = 5 * time.Second
                notActive := time.NewTimer(activityInterval)
                defer notActive.Stop()

                total := 0
                for {
                        select {
                        case result := <-resultCh:
                                err := result.err
                                var mset *stream

                                // If we staged properly go ahead and do restore now.
                                if err == nil {
                                        s.Debugf("Finalizing restore for stream '%s > %s'", acc.Name, streamName)
                                        tfile.Seek(0, 0)
                                        mset, err = acc.RestoreStream(cfg, tfile)
                                } else {
                                        errStr := err.Error()
                                        tmp := []rune(errStr)
                                        tmp[0] = unicode.ToUpper(tmp[0])
                                        s.Warnf(errStr)
                                }

                                end := time.Now().UTC()

                                // TODO(rip) - Should this have the error code in it??
                                s.publishAdvisory(acc, JSAdvisoryStreamRestoreCompletePre+"."+streamName, &JSRestoreCompleteAdvisory{
                                        TypedEvent: TypedEvent{
                                                Type: JSRestoreCompleteAdvisoryType,
                                                ID:   nuid.Next(),
                                                Time: end,
                                        },
                                        Stream: streamName,
                                        Start:  start,
                                        End:    end,
                                        Bytes:  int64(total),
                                        Client: ci.forAdvisory(),
                                        Domain: domain,
                                })

                                var resp = JSApiStreamCreateResponse{ApiResponse: ApiResponse{Type: JSApiStreamCreateResponseType}}

                                if err != nil {
                                        resp.Error = NewJSStreamRestoreError(err, Unless(err))
                                        s.Warnf("Restore failed for %s for stream '%s > %s' in %v",
                                                friendlyBytes(int64(total)), acc.Name, streamName, end.Sub(start))
                                } else {
                                        msetCfg := mset.config()
                                        resp.StreamInfo = &StreamInfo{
                                                Created:   mset.createdTime(),
                                                State:     mset.state(),
                                                Config:    *setDynamicStreamMetadata(&msetCfg),
                                                TimeStamp: time.Now().UTC(),
                                        }
                                        s.Noticef("Completed restore of %s for stream '%s > %s' in %v",
                                                friendlyBytes(int64(total)), acc.Name, streamName, end.Sub(start).Round(time.Millisecond))
                                }

                                // On the last EOF, send back the stream info or error status.
                                s.sendInternalAccountMsg(acc, result.reply, s.jsonResponse(&resp))
                                // Signal to the upper layers.
                                doneCh <- err
                                return
                        case <-activeQ.ch:
                                if n, ok := activeQ.popOne(); ok {
                                        total += n
                                        notActive.Reset(activityInterval)
                                }
                        case <-notActive.C:
                                err := fmt.Errorf("restore for stream '%s > %s' is stalled", acc, streamName)
                                doneCh <- err
                                return
                        }
                }
        })

        return doneCh
}

// Process a snapshot request.
func (s *Server) jsStreamSnapshotRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        smsg := string(msg)
        stream := streamNameFromSubject(subject)

        // If we are in clustered mode we need to be the stream leader to proceed.
        if s.JetStreamIsClustered() && !acc.JetStreamIsStreamLeader(stream) {
                return
        }

        var resp = JSApiStreamSnapshotResponse{ApiResponse: ApiResponse{Type: JSApiStreamSnapshotResponseType}}
        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if !acc.JetStreamEnabled() {
                resp.Error = NewJSNotEnabledForAccountError()
                s.sendAPIErrResponse(ci, acc, subject, reply, smsg, s.jsonResponse(&resp))
                return
        }
        if isEmptyRequest(msg) {
                resp.Error = NewJSBadRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, smsg, s.jsonResponse(&resp))
                return
        }

        mset, err := acc.lookupStream(stream)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, smsg, s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, smsg, s.jsonResponse(&resp))
                }
                return
        }

        var req JSApiStreamSnapshotRequest
        if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, smsg, s.jsonResponse(&resp))
                return
        }
        if !IsValidSubject(req.DeliverSubject) {
                resp.Error = NewJSSnapshotDeliverSubjectInvalidError()
                s.sendAPIErrResponse(ci, acc, subject, reply, smsg, s.jsonResponse(&resp))
                return
        }

        // We will do the snapshot in a go routine as well since check msgs may
        // stall this go routine.
        go func() {
                if req.CheckMsgs {
                        s.Noticef("Starting health check and snapshot for stream '%s > %s'", mset.jsa.account.Name, mset.name())
                } else {
                        s.Noticef("Starting snapshot for stream '%s > %s'", mset.jsa.account.Name, mset.name())
                }

                start := time.Now().UTC()

                sr, err := mset.snapshot(0, req.CheckMsgs, !req.NoConsumers)
                if err != nil {
                        s.Warnf("Snapshot of stream '%s > %s' failed: %v", mset.jsa.account.Name, mset.name(), err)
                        resp.Error = NewJSStreamSnapshotError(err, Unless(err))
                        s.sendAPIErrResponse(ci, acc, subject, reply, smsg, s.jsonResponse(&resp))
                        return
                }

                config := mset.config()
                resp.State = &sr.State
                resp.Config = &config

                s.sendAPIResponse(ci, acc, subject, reply, smsg, s.jsonResponse(resp))

                s.publishAdvisory(acc, JSAdvisoryStreamSnapshotCreatePre+"."+mset.name(), &JSSnapshotCreateAdvisory{
                        TypedEvent: TypedEvent{
                                Type: JSSnapshotCreatedAdvisoryType,
                                ID:   nuid.Next(),
                                Time: time.Now().UTC(),
                        },
                        Stream: mset.name(),
                        State:  sr.State,
                        Client: ci.forAdvisory(),
                        Domain: s.getOpts().JetStreamDomain,
                })

                // Now do the real streaming.
                s.streamSnapshot(acc, mset, sr, &req)

                end := time.Now().UTC()

                s.publishAdvisory(acc, JSAdvisoryStreamSnapshotCompletePre+"."+mset.name(), &JSSnapshotCompleteAdvisory{
                        TypedEvent: TypedEvent{
                                Type: JSSnapshotCompleteAdvisoryType,
                                ID:   nuid.Next(),
                                Time: end,
                        },
                        Stream: mset.name(),
                        Start:  start,
                        End:    end,
                        Client: ci.forAdvisory(),
                        Domain: s.getOpts().JetStreamDomain,
                })

                s.Noticef("Completed snapshot of %s for stream '%s > %s' in %v",
                        friendlyBytes(int64(sr.State.Bytes)),
                        mset.jsa.account.Name,
                        mset.name(),
                        end.Sub(start))
        }()
}

// Default chunk size for now.
const defaultSnapshotChunkSize = 128 * 1024       // 128KiB
const defaultSnapshotWindowSize = 8 * 1024 * 1024 // 8MiB
const defaultSnapshotAckTimeout = 5 * time.Second

var snapshotAckTimeout = defaultSnapshotAckTimeout

// streamSnapshot will stream out our snapshot to the reply subject.
func (s *Server) streamSnapshot(acc *Account, mset *stream, sr *SnapshotResult, req *JSApiStreamSnapshotRequest) {
        chunkSize, wndSize := req.ChunkSize, req.WindowSize
        if chunkSize == 0 {
                chunkSize = defaultSnapshotChunkSize
        }
        if wndSize == 0 {
                wndSize = defaultSnapshotWindowSize
        }
        chunkSize = min(max(1024, chunkSize), 1024*1024) // Clamp within 1KiB to 1MiB
        wndSize = min(max(1024, wndSize), 32*1024*1024)  // Clamp within 1KiB to 32MiB
        wndSize = max(wndSize, chunkSize)                // Guarantee at least one chunk
        maxInflight := wndSize / chunkSize               // Between 1 and 32,768

        // Setup for the chunk stream.
        reply := req.DeliverSubject
        r := sr.Reader
        defer r.Close()

        // In case we run into an error, this allows subscription callbacks
        // to not sit and block endlessly.
        done := make(chan struct{})
        defer close(done)

        // Check interest for the snapshot deliver subject.
        inch := make(chan bool, 1)
        acc.sl.RegisterNotification(req.DeliverSubject, inch)
        defer acc.sl.ClearNotification(req.DeliverSubject, inch)
        hasInterest := <-inch
        if !hasInterest {
                // Allow 2 seconds or so for interest to show up.
                select {
                case <-inch:
                case <-time.After(2 * time.Second):
                }
        }

        // One slot per chunk. Each chunk read takes a slot, each ack will
        // replace it. Smooths out in-flight number of chunks.
        slots := make(chan struct{}, maxInflight)
        for range maxInflight {
                slots <- struct{}{}
        }

        // We will place sequence number and size of chunk sent in the reply.
        ackSubj := fmt.Sprintf(jsSnapshotAckT, mset.name(), nuid.Next())
        ackSub, _ := mset.subscribeInternal(ackSubj+".>", func(_ *subscription, _ *client, _ *Account, subject, _ string, _ []byte) {
                select {
                case slots <- struct{}{}:
                case <-done:
                }
        })
        defer mset.unsubscribe(ackSub)

        var hdr []byte
        chunk := make([]byte, chunkSize)
        for index := 1; ; index++ {
                select {
                case <-slots:
                        // A slot has become available.
                case <-inch:
                        // The receiver appears to have gone away.
                        hdr = []byte("NATS/1.0 408 No Interest\r\n\r\n")
                        goto done
                case err := <-sr.errCh:
                        // The snapshotting goroutine has failed for some reason.
                        hdr = []byte(fmt.Sprintf("NATS/1.0 500 %s\r\n\r\n", err))
                        goto done
                case <-time.After(snapshotAckTimeout):
                        // It's taking a very long time for the receiver to send us acks,
                        // they have probably stalled or there is high loss on the link.
                        hdr = []byte("NATS/1.0 408 No Flow Response\r\n\r\n")
                        goto done
                }
                n, err := io.ReadFull(r, chunk)
                chunk := chunk[:n]
                if err != nil {
                        if n > 0 {
                                mset.outq.send(newJSPubMsg(reply, _EMPTY_, _EMPTY_, nil, chunk, nil, 0))
                        }
                        break
                }
                ackReply := fmt.Sprintf("%s.%d.%d", ackSubj, len(chunk), index)
                if hdr == nil {
                        hdr = []byte("NATS/1.0 204\r\n\r\n")
                }
                mset.outq.send(newJSPubMsg(reply, _EMPTY_, ackReply, nil, chunk, nil, 0))
        }

done:
        mset.outq.send(newJSPubMsg(reply, _EMPTY_, _EMPTY_, hdr, nil, nil, 0))
}

// For determining consumer request type.
type ccReqType uint8

const (
        ccNew = iota
        ccLegacyEphemeral
        ccLegacyDurable
)

// Request to create a consumer where stream and optional consumer name are part of the subject, and optional
// filtered subjects can be at the tail end.
// Assumes stream and consumer names are single tokens.
func (s *Server) jsConsumerCreateRequest(sub *subscription, c *client, a *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }

        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiConsumerCreateResponse{ApiResponse: ApiResponse{Type: JSApiConsumerCreateResponseType}}

        var req CreateConsumerRequest
        if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                resp.Error = NewJSInvalidJSONError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        var js *jetStream
        isClustered := s.JetStreamIsClustered()

        // Determine if we should proceed here when we are in clustered mode.
        if isClustered {
                if req.Config.Direct {
                        // Check to see if we have this stream and are the stream leader.
                        if !acc.JetStreamIsStreamLeader(streamNameFromSubject(subject)) {
                                return
                        }
                } else {
                        var cc *jetStreamCluster
                        js, cc = s.getJetStreamCluster()
                        if js == nil || cc == nil {
                                return
                        }
                        if js.isLeaderless() {
                                resp.Error = NewJSClusterNotAvailError()
                                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                return
                        }
                        // Make sure we are meta leader.
                        if !s.JetStreamIsLeader() {
                                return
                        }
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        var streamName, consumerName, filteredSubject string
        var rt ccReqType

        if n := numTokens(subject); n < 5 {
                s.Warnf(badAPIRequestT, msg)
                return
        } else if n == 5 {
                // Legacy ephemeral.
                rt = ccLegacyEphemeral
                streamName = streamNameFromSubject(subject)
        } else {
                // New style and durable legacy.
                if tokenAt(subject, 4) == "DURABLE" {
                        rt = ccLegacyDurable
                        if n != 7 {
                                resp.Error = NewJSConsumerDurableNameNotInSubjectError()
                                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                return
                        }
                        streamName = tokenAt(subject, 6)
                        consumerName = tokenAt(subject, 7)
                } else {
                        streamName = streamNameFromSubject(subject)
                        consumerName = consumerNameFromSubject(subject)
                        // New has optional filtered subject as part of main subject..
                        if n > 6 {
                                tokens := strings.Split(subject, tsep)
                                filteredSubject = strings.Join(tokens[6:], tsep)
                        }
                }
        }

        if streamName != req.Stream {
                resp.Error = NewJSStreamMismatchError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if consumerName != _EMPTY_ {
                // Check for path like separators in the name.
                if strings.ContainsAny(consumerName, `\/`) {
                        resp.Error = NewJSConsumerNameContainsPathSeparatorsError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
        }

        // Should we expect a durable name
        if rt == ccLegacyDurable {
                if numTokens(subject) < 7 {
                        resp.Error = NewJSConsumerDurableNameNotInSubjectError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Now check on requirements for durable request.
                if req.Config.Durable == _EMPTY_ {
                        resp.Error = NewJSConsumerDurableNameNotSetError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                if consumerName != req.Config.Durable {
                        resp.Error = NewJSConsumerDurableNameNotMatchSubjectError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Durable, so we need to honor the name.
                req.Config.Name = consumerName
        }
        // If new style and durable set make sure they match.
        if rt == ccNew {
                if req.Config.Durable != _EMPTY_ {
                        if consumerName != req.Config.Durable {
                                resp.Error = NewJSConsumerDurableNameNotMatchSubjectError()
                                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                return
                        }
                }
                // New style ephemeral so we need to honor the name.
                req.Config.Name = consumerName
        }
        // Check for legacy ephemeral mis-configuration.
        if rt == ccLegacyEphemeral && req.Config.Durable != _EMPTY_ {
                resp.Error = NewJSConsumerEphemeralWithDurableNameError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // in case of multiple filters provided, error if new API is used.
        if filteredSubject != _EMPTY_ && len(req.Config.FilterSubjects) != 0 {
                resp.Error = NewJSConsumerMultipleFiltersNotAllowedError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // Check for a filter subject.
        if filteredSubject != _EMPTY_ && req.Config.FilterSubject != filteredSubject {
                resp.Error = NewJSConsumerCreateFilterSubjectMismatchError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if isClustered && !req.Config.Direct {
                s.jsClusteredConsumerRequest(ci, acc, subject, reply, rmsg, req.Stream, &req.Config, req.Action, req.Pedantic)
                return
        }

        // If we are here we are single server mode.
        if req.Config.Replicas > 1 {
                resp.Error = NewJSStreamReplicasNotSupportedError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        stream, err := acc.lookupStream(req.Stream)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if stream.offlineReason != _EMPTY_ {
                resp.Error = NewJSStreamOfflineReasonError(errors.New(stream.offlineReason))
                s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                return
        }

        if o := stream.lookupConsumer(consumerName); o != nil {
                if o.offlineReason != _EMPTY_ {
                        resp.Error = NewJSConsumerOfflineReasonError(errors.New(o.offlineReason))
                        s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                        return
                }
                // If the consumer already exists then don't allow updating the PauseUntil, just set
                // it back to whatever the current configured value is.
                o.mu.RLock()
                req.Config.PauseUntil = o.cfg.PauseUntil
                o.mu.RUnlock()
        }

        // Initialize/update asset version metadata.
        setStaticConsumerMetadata(&req.Config)

        o, err := stream.addConsumerWithAction(&req.Config, req.Action, req.Pedantic)

        if err != nil {
                if IsNatsErr(err, JSConsumerStoreFailedErrF) {
                        cname := req.Config.Durable // Will be empty if ephemeral.
                        s.Warnf("Consumer create failed for '%s > %s > %s': %v", acc, req.Stream, cname, err)
                        err = errConsumerStoreFailed
                }
                resp.Error = NewJSConsumerCreateError(err, Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        resp.ConsumerInfo = setDynamicConsumerInfoMetadata(o.initialInfo())
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))

        o.mu.RLock()
        if o.cfg.PauseUntil != nil && !o.cfg.PauseUntil.IsZero() && time.Now().Before(*o.cfg.PauseUntil) {
                o.sendPauseAdvisoryLocked(&o.cfg)
        }
        o.mu.RUnlock()
}

// Request for the list of all consumer names.
func (s *Server) jsConsumerNamesRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiConsumerNamesResponse{
                ApiResponse: ApiResponse{Type: JSApiConsumerNamesResponseType},
                Consumers:   []string{},
        }

        // Determine if we should proceed here when we are in clustered mode.
        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Make sure we are meta leader.
                if !s.JetStreamIsLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        var offset int
        if isJSONObjectOrArray(msg) {
                var req JSApiConsumersRequest
                if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                        resp.Error = NewJSInvalidJSONError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                offset = req.Offset
        }

        streamName := streamNameFromSubject(subject)
        var numConsumers int

        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        // TODO(dlc) - Debug or Warn?
                        return
                }
                js.mu.RLock()
                sas := cc.streams[acc.Name]
                if sas == nil {
                        js.mu.RUnlock()
                        resp.Error = NewJSStreamNotFoundError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                sa := sas[streamName]
                if sa == nil || sa.err != nil {
                        js.mu.RUnlock()
                        resp.Error = NewJSStreamNotFoundError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                for consumer := range sa.consumers {
                        resp.Consumers = append(resp.Consumers, consumer)
                }
                if len(resp.Consumers) > 1 {
                        slices.Sort(resp.Consumers)
                }
                numConsumers = len(resp.Consumers)
                if offset > numConsumers {
                        offset = numConsumers
                }
                resp.Consumers = resp.Consumers[offset:]
                if len(resp.Consumers) > JSApiNamesLimit {
                        resp.Consumers = resp.Consumers[:JSApiNamesLimit]
                }
                js.mu.RUnlock()

        } else {
                mset, err := acc.lookupStream(streamName)
                if err != nil {
                        resp.Error = NewJSStreamNotFoundError(Unless(err))
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }

                obs := mset.getPublicConsumers()
                slices.SortFunc(obs, func(i, j *consumer) int { return cmp.Compare(i.name, j.name) })

                numConsumers = len(obs)
                if offset > numConsumers {
                        offset = numConsumers
                }

                for _, o := range obs[offset:] {
                        resp.Consumers = append(resp.Consumers, o.String())
                        if len(resp.Consumers) >= JSApiNamesLimit {
                                break
                        }
                }
        }
        resp.Total = numConsumers
        resp.Limit = JSApiNamesLimit
        resp.Offset = offset
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request for the list of all detailed consumer information.
func (s *Server) jsConsumerListRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }

        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiConsumerListResponse{
                ApiResponse: ApiResponse{Type: JSApiConsumerListResponseType},
                Consumers:   []*ConsumerInfo{},
        }

        // Determine if we should proceed here when we are in clustered mode.
        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Make sure we are meta leader.
                if !s.JetStreamIsLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        var offset int
        if isJSONObjectOrArray(msg) {
                var req JSApiConsumersRequest
                if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                        resp.Error = NewJSInvalidJSONError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                offset = req.Offset
        }

        streamName := streamNameFromSubject(subject)

        // Clustered mode will invoke a scatter and gather.
        if s.JetStreamIsClustered() {
                // Need to copy these off before sending.. don't move this inside startGoRoutine!!!
                msg = copyBytes(msg)
                s.startGoRoutine(func() {
                        s.jsClusteredConsumerListRequest(acc, ci, offset, streamName, subject, reply, msg)
                })
                return
        }

        mset, err := acc.lookupStream(streamName)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        obs := mset.getPublicConsumers()
        slices.SortFunc(obs, func(i, j *consumer) int { return cmp.Compare(i.name, j.name) })

        ocnt := len(obs)
        if offset > ocnt {
                offset = ocnt
        }

        var missingNames []string
        for _, o := range obs[offset:] {
                if o.offlineReason != _EMPTY_ {
                        if resp.Offline == nil {
                                resp.Offline = make(map[string]string, 1)
                        }
                        resp.Offline[o.name] = o.offlineReason
                        missingNames = append(missingNames, o.name)
                        continue
                }
                if cinfo := o.info(); cinfo != nil {
                        resp.Consumers = append(resp.Consumers, cinfo)
                }
                if len(resp.Consumers) >= JSApiListLimit {
                        break
                }
        }
        resp.Total = ocnt
        resp.Limit = JSApiListLimit
        resp.Offset = offset
        resp.Missing = missingNames
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request for information about an consumer.
func (s *Server) jsConsumerInfoRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        streamName := streamNameFromSubject(subject)
        consumerName := consumerNameFromSubject(subject)

        var resp = JSApiConsumerInfoResponse{ApiResponse: ApiResponse{Type: JSApiConsumerInfoResponseType}}

        if !isEmptyRequest(msg) {
                resp.Error = NewJSNotEmptyRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        // If we are in clustered mode we need to be the consumer leader to proceed.
        if s.JetStreamIsClustered() {
                // Check to make sure the consumer is assigned.
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }

                js.mu.RLock()
                meta := cc.meta
                js.mu.RUnlock()

                if meta == nil {
                        return
                }

                // Since these could wait on the Raft group lock, don't do so under the JS lock.
                ourID := meta.ID()
                groupLeaderless := meta.Leaderless()
                groupCreated := meta.Created()

                js.mu.RLock()
                isLeader, sa, ca := cc.isLeader(), js.streamAssignment(acc.Name, streamName), js.consumerAssignment(acc.Name, streamName, consumerName)
                var rg *raftGroup
                var offline, isMember bool
                if ca != nil {
                        if rg = ca.Group; rg != nil {
                                offline = s.allPeersOffline(rg)
                                isMember = rg.isMember(ourID)
                        }
                        if ca.unsupported != nil && isMember {
                                // If we're a member for this consumer, and it's not supported, report it as offline.
                                resp.Error = NewJSConsumerOfflineReasonError(errors.New(ca.unsupported.reason))
                                s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                                js.mu.RUnlock()
                                return
                        }
                }
                // Capture consumer leader here.
                isConsumerLeader := cc.isConsumerLeader(acc.Name, streamName, consumerName)
                // Also capture if we think there is no meta leader.
                var isLeaderLess bool
                if !isLeader {
                        isLeaderLess = groupLeaderless && time.Since(groupCreated) > lostQuorumIntervalDefault
                }
                js.mu.RUnlock()

                if isLeader && ca == nil {
                        // We can't find the consumer, so mimic what would be the errors below.
                        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                                if doErr {
                                        resp.Error = NewJSNotEnabledForAccountError()
                                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                }
                                return
                        }
                        if sa == nil {
                                resp.Error = NewJSStreamNotFoundError()
                                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                                return
                        }
                        // If we are here the consumer is not present.
                        resp.Error = NewJSConsumerNotFoundError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                } else if ca == nil {
                        if isLeaderLess {
                                resp.Error = NewJSClusterNotAvailError()
                                // Delaying an error response gives the leader a chance to respond before us
                                s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                        }
                        return
                } else if isLeader && offline {
                        resp.Error = NewJSConsumerOfflineError()
                        s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                        return
                }

                // Check to see if we are a member of the group and if the group has no leader.
                if isMember && js.isGroupLeaderless(ca.Group) {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }

                // We have the consumer assigned and a leader, so only the consumer leader should answer.
                if !isConsumerLeader {
                        if isLeaderLess {
                                resp.Error = NewJSClusterNotAvailError()
                                // Delaying an error response gives the leader a chance to respond before us
                                s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), ca.Group, errRespDelay)
                                return
                        }

                        var node RaftNode
                        var leaderNotPartOfGroup bool

                        // We have a consumer assignment.
                        if isMember {
                                js.mu.RLock()
                                if rg != nil && rg.node != nil {
                                        node = rg.node
                                        if gl := node.GroupLeader(); gl != _EMPTY_ && !rg.isMember(gl) {
                                                leaderNotPartOfGroup = true
                                        }
                                }
                                js.mu.RUnlock()
                        }

                        // Check if we should ignore all together.
                        if node == nil {
                                // We have been assigned but have not created a node yet. If we are a member return
                                // our config and defaults for state and no cluster info.
                                if isMember {
                                        // Since we access consumerAssignment, need js lock.
                                        js.mu.RLock()
                                        resp.ConsumerInfo = &ConsumerInfo{
                                                Stream:    ca.Stream,
                                                Name:      ca.Name,
                                                Created:   ca.Created,
                                                Config:    setDynamicConsumerMetadata(ca.Config),
                                                TimeStamp: time.Now().UTC(),
                                        }
                                        b := s.jsonResponse(resp)
                                        js.mu.RUnlock()
                                        s.sendAPIResponse(ci, acc, subject, reply, string(msg), b)
                                }
                                return
                        }
                        // If we are a member and we have a group leader or we had a previous leader consider bailing out.
                        if !node.Leaderless() || node.HadPreviousLeader() || (rg != nil && rg.Preferred != _EMPTY_ && rg.Preferred != ourID) {
                                if leaderNotPartOfGroup {
                                        resp.Error = NewJSConsumerOfflineError()
                                        s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                                }
                                return
                        }
                        // If we are here we are a member and this is just a new consumer that does not have a (preferred) leader yet.
                        // Will fall through and return what we have. All consumers can respond but this should be very rare
                        // but makes more sense to clients when they try to create, get a consumer exists, and then do consumer info.
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if !acc.JetStreamEnabled() {
                resp.Error = NewJSNotEnabledForAccountError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        mset, err := acc.lookupStream(streamName)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        obs := mset.lookupConsumer(consumerName)
        if obs == nil {
                resp.Error = NewJSConsumerNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if obs.offlineReason != _EMPTY_ {
                resp.Error = NewJSConsumerOfflineReasonError(errors.New(obs.offlineReason))
                s.sendDelayedAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp), nil, errRespDelay)
                return
        }

        if resp.ConsumerInfo = setDynamicConsumerInfoMetadata(obs.info()); resp.ConsumerInfo == nil {
                // This consumer returned nil which means it's closed. Respond with not found.
                resp.Error = NewJSConsumerNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request to delete an Consumer.
func (s *Server) jsConsumerDeleteRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var resp = JSApiConsumerDeleteResponse{ApiResponse: ApiResponse{Type: JSApiConsumerDeleteResponseType}}

        // Determine if we should proceed here when we are in clustered mode.
        if s.JetStreamIsClustered() {
                js, cc := s.getJetStreamCluster()
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Make sure we are meta leader.
                if !s.JetStreamIsLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }
        if !isEmptyRequest(msg) {
                resp.Error = NewJSNotEmptyRequestError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        stream := streamNameFromSubject(subject)
        consumer := consumerNameFromSubject(subject)

        if s.JetStreamIsClustered() {
                s.jsClusteredConsumerDeleteRequest(ci, acc, stream, consumer, subject, reply, rmsg)
                return
        }

        mset, err := acc.lookupStream(stream)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        obs := mset.lookupConsumer(consumer)
        if obs == nil {
                resp.Error = NewJSConsumerNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if err := obs.delete(); err != nil {
                resp.Error = NewJSStreamGeneralError(err, Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        resp.Success = true
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// Request to pause or unpause a Consumer.
func (s *Server) jsConsumerPauseRequest(sub *subscription, c *client, _ *Account, subject, reply string, rmsg []byte) {
        if c == nil || !s.JetStreamEnabled() {
                return
        }
        ci, acc, hdr, msg, err := s.getRequestInfo(c, rmsg)
        if err != nil {
                s.Warnf(badAPIRequestT, msg)
                return
        }

        var req JSApiConsumerPauseRequest
        var resp = JSApiConsumerPauseResponse{ApiResponse: ApiResponse{Type: JSApiConsumerPauseResponseType}}

        if isJSONObjectOrArray(msg) {
                if err := s.unmarshalRequest(c, acc, subject, msg, &req); err != nil {
                        resp.Error = NewJSInvalidJSONError(err)
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
        }

        // Determine if we should proceed here when we are in clustered mode.
        isClustered := s.JetStreamIsClustered()
        js, cc := s.getJetStreamCluster()
        if isClustered {
                if js == nil || cc == nil {
                        return
                }
                if js.isLeaderless() {
                        resp.Error = NewJSClusterNotAvailError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                // Make sure we are meta leader.
                if !s.JetStreamIsLeader() {
                        return
                }
        }

        if errorOnRequiredApiLevel(hdr) {
                resp.Error = NewJSRequiredApiLevelError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        if hasJS, doErr := acc.checkJetStream(); !hasJS {
                if doErr {
                        resp.Error = NewJSNotEnabledForAccountError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                }
                return
        }

        stream := streamNameFromSubject(subject)
        consumer := consumerNameFromSubject(subject)

        if isClustered {
                js.mu.RLock()
                sa := js.streamAssignment(acc.Name, stream)
                if sa == nil {
                        js.mu.RUnlock()
                        resp.Error = NewJSStreamNotFoundError(Unless(err))
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                if sa.unsupported != nil {
                        js.mu.RUnlock()
                        // Just let the request time out.
                        return
                }

                ca, ok := sa.consumers[consumer]
                if !ok || ca == nil {
                        js.mu.RUnlock()
                        resp.Error = NewJSConsumerNotFoundError()
                        s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                        return
                }
                if ca.unsupported != nil {
                        js.mu.RUnlock()
                        // Just let the request time out.
                        return
                }

                nca := *ca
                ncfg := *ca.Config
                nca.Config = &ncfg
                meta := cc.meta
                js.mu.RUnlock()
                pauseUTC := req.PauseUntil.UTC()
                if !pauseUTC.IsZero() {
                        nca.Config.PauseUntil = &pauseUTC
                } else {
                        nca.Config.PauseUntil = nil
                }

                // Update asset version metadata due to updating pause/resume.
                // Only PauseUntil is updated above, so reuse config for both.
                setStaticConsumerMetadata(nca.Config)

                eca := encodeAddConsumerAssignment(&nca)
                meta.Propose(eca)

                resp.PauseUntil = pauseUTC
                if resp.Paused = time.Now().Before(pauseUTC); resp.Paused {
                        resp.PauseRemaining = time.Until(pauseUTC)
                }
                s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
                return
        }

        mset, err := acc.lookupStream(stream)
        if err != nil {
                resp.Error = NewJSStreamNotFoundError(Unless(err))
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if mset.offlineReason != _EMPTY_ {
                // Just let the request time out.
                return
        }

        obs := mset.lookupConsumer(consumer)
        if obs == nil {
                resp.Error = NewJSConsumerNotFoundError()
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }
        if obs.offlineReason != _EMPTY_ {
                // Just let the request time out.
                return
        }

        ncfg := obs.cfg
        pauseUTC := req.PauseUntil.UTC()
        if !pauseUTC.IsZero() {
                ncfg.PauseUntil = &pauseUTC
        } else {
                ncfg.PauseUntil = nil
        }

        // Update asset version metadata due to updating pause/resume.
        setStaticConsumerMetadata(&ncfg)

        if err := obs.updateConfig(&ncfg); err != nil {
                // The only type of error that should be returned here is from o.store,
                // so use a store failed error type.
                resp.Error = NewJSConsumerStoreFailedError(err)
                s.sendAPIErrResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(&resp))
                return
        }

        resp.PauseUntil = pauseUTC
        if resp.Paused = time.Now().Before(pauseUTC); resp.Paused {
                resp.PauseRemaining = time.Until(pauseUTC)
        }
        s.sendAPIResponse(ci, acc, subject, reply, string(msg), s.jsonResponse(resp))
}

// sendJetStreamAPIAuditAdvisory will send the audit event for a given event.
func (s *Server) sendJetStreamAPIAuditAdvisory(ci *ClientInfo, acc *Account, subject, request, response string) {
        s.publishAdvisory(acc, JSAuditAdvisory, JSAPIAudit{
                TypedEvent: TypedEvent{
                        Type: JSAPIAuditType,
                        ID:   nuid.Next(),
                        Time: time.Now().UTC(),
                },
                Server:   s.Name(),
                Client:   ci.forAdvisory(),
                Subject:  subject,
                Request:  request,
                Response: response,
                Domain:   s.getOpts().JetStreamDomain,
        })
}

nats-io / nats-server / 23037063390

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous