@aster-rpc/aster 0.1.2

package/dist/trust/producer.js

@@ -0,0 +1,151 @@
+/**
+ * Producer admission — the server-side admission handshake.
+ *
+ * Spec reference: Aster-trust-spec.md S6
+ *
+ * When a producer wants to join a mesh, the accepting producer:
+ * 1. Accepts a connection on the producer admission ALPN
+ * 2. Reads an AdmissionRequest (credential JSON + optional IID token)
+ * 3. Validates the credential (signature, expiry, root pubkey)
+ * 4. Responds with AdmissionResponse (accepted/rejected + mesh state)
+ */
+import { verifyProducerCredential } from './admission.js';
+import { MAX_ADMISSION_PAYLOAD_SIZE } from '../limits.js';
+/** ALPN for producer admission. */
+export const PRODUCER_ADMISSION_ALPN = new TextEncoder().encode('aster.producer_admission');
+/**
+ * Handle a single producer admission connection.
+ *
+ * Reads the credential, validates it, updates mesh state on success,
+ * and responds with the admission result.
+ */
+export async function handleProducerAdmission(conn, opts) {
+    const peerNodeId = conn.remoteNodeId();
+    const log = opts.logger ?? console;
+    const bi = await conn.acceptBi();
+    const send = bi.takeSend();
+    const recv = bi.takeRecv();
+    try {
+        // Read request
+        const raw = await recv.readToEnd(MAX_ADMISSION_PAYLOAD_SIZE);
+        const text = new TextDecoder().decode(raw);
+        let request;
+        try {
+            request = JSON.parse(text);
+        }
+        catch {
+            const resp = buildDenied('malformed request');
+            await sendResponse(send, resp);
+            return resp;
+        }
+        // Parse credential
+        let cred;
+        try {
+            cred = JSON.parse(request.credentialJson);
+        }
+        catch {
+            const resp = buildDenied('malformed credential JSON');
+            await sendResponse(send, resp);
+            return resp;
+        }
+        // Verify root pubkey match
+        if (cred.rootPubkey !== opts.rootPubkey) {
+            log.warn?.('admission: root pubkey mismatch', {
+                peer: peerNodeId.slice(0, 8),
+            });
+            const resp = buildDenied('root pubkey mismatch');
+            await sendResponse(send, resp);
+            return resp;
+        }
+        // Verify credential (expiry, signature)
+        const result = await verifyProducerCredential(cred, opts.rootPubkey);
+        if (!result.admitted) {
+            log.warn?.('admission: denied', {
+                peer: peerNodeId.slice(0, 8),
+                reason: result.reason,
+            });
+            const resp = buildDenied(result.reason ?? 'denied');
+            await sendResponse(send, resp);
+            return resp;
+        }
+        // Verify endpoint ID binding
+        if (cred.endpointId && cred.endpointId !== peerNodeId) {
+            log.warn?.('admission: endpoint ID mismatch', {
+                peer: peerNodeId.slice(0, 8),
+            });
+            const resp = buildDenied('endpoint ID mismatch');
+            await sendResponse(send, resp);
+            return resp;
+        }
+        // Check nonce if OTT credential
+        if (opts.nonceStore && cred.signature) {
+            const nonceHex = cred.signature.slice(0, 64); // use signature prefix as nonce key
+            if (opts.nonceStore.has(nonceHex)) {
+                const resp = buildDenied('nonce already consumed');
+                await sendResponse(send, resp);
+                return resp;
+            }
+            opts.nonceStore.consume(nonceHex);
+        }
+        // Admission successful — update mesh state
+        opts.meshState.addPeer(peerNodeId);
+        log.info?.('admission: accepted producer', {
+            peer: peerNodeId.slice(0, 8),
+        });
+        const resp = {
+            accepted: true,
+            salt: '', // mesh salt (would be populated from mesh state)
+            acceptedProducers: opts.meshState.allPeers(),
+            reason: '', // never sent on wire
+        };
+        await sendResponse(send, resp);
+        return resp;
+    }
+    catch (e) {
+        log.error?.('admission: error', { error: String(e), peer: peerNodeId.slice(0, 8) });
+        const resp = buildDenied('internal error');
+        try {
+            await sendResponse(send, resp);
+        }
+        catch { /* best effort */ }
+        return resp;
+    }
+}
+/**
+ * Serve producer admission — accept loop that handles incoming
+ * producer admission connections until stopped.
+ */
+export async function serveProducerAdmission(node, opts) {
+    const running = opts.running ?? { value: true };
+    const log = opts.logger ?? console;
+    while (running.value) {
+        try {
+            const conn = await node.acceptAster();
+            handleProducerAdmission(conn, opts).catch(e => {
+                log.error?.('admission connection error', { error: String(e) });
+            });
+        }
+        catch (e) {
+            if (!running.value)
+                break;
+            log.error?.('admission accept error', { error: String(e) });
+        }
+    }
+}
+// -- Helpers --
+function buildDenied(reason) {
+    return {
+        accepted: false,
+        salt: '',
+        acceptedProducers: [],
+        reason, // internal only — wire response strips this
+    };
+}
+async function sendResponse(send, resp) {
+    // Never leak reason to peer (oracle protection)
+    const wireResp = { ...resp, reason: '' };
+    const bytes = new TextEncoder().encode(JSON.stringify(wireResp));
+    await send.writeAll(bytes);
+    await send.finish();
+}
+//# sourceMappingURL=producer.js.map

package/dist/trust/producer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"producer.js","sourceRoot":"","sources":["../../src/trust/producer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAG1D,mCAAmC;AACnC,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAiD5F;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAyB,EACzB,IAA8B;IAE9B,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;IAEnC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAE3B,IAAI,CAAC;QACH,eAAe;QACf,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,OAAiC,CAAC;QAEtC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;YAC9C,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,IAAI,IAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,GAAG,WAAW,CAAC,2BAA2B,CAAC,CAAC;YACtD,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,GAAG,CAAC,IAAI,EAAE,CAAC,iCAAiC,EAAE;gBAC5C,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,WAAW,CAAC,sBAAsB,CAAC,CAAC;YACjD,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wCAAwC;QACxC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,EAAE,CAAC,mBAAmB,EAAE;gBAC9B,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC;YACpD,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,EAAE,CAAC,iCAAiC,EAAE;gBAC5C,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aAC7B,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,WAAW,CAAC,sBAAsB,CAAC,CAAC;YACjD,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,gCAAgC;QAChC,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oCAAoC;YAClF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,GAAG,WAAW,CAAC,wBAAwB,CAAC,CAAC;gBACnD,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QAED,2CAA2C;QAC3C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnC,GAAG,CAAC,IAAI,EAAE,CAAC,8BAA8B,EAAE;YACzC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SAC7B,CAAC,CAAC;QAEH,MAAM,IAAI,GAA8B;YACtC,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,EAAE,EAAE,iDAAiD;YAC3D,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;YAC5C,MAAM,EAAE,EAAE,EAAE,qBAAqB;SAClC,CAAC;QACF,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,EAAE,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,WAAW,CAAC,gBAAgB,CAAC,CAAC;QAC3C,IAAI,CAAC;YAAC,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAmB,EACnB,IAAiE;IAEjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC;IAEnC,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBAC5C,GAAG,CAAC,KAAK,EAAE,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,KAAK;gBAAE,MAAM;YAC1B,GAAG,CAAC,KAAK,EAAE,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;AACH,CAAC;AAED,gBAAgB;AAEhB,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,EAAE;QACR,iBAAiB,EAAE,EAAE;QACrB,MAAM,EAAE,4CAA4C;KACrD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAmB,EAAE,IAA+B;IAC9E,gDAAgD;IAChD,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;AACtB,CAAC"}

package/dist/trust/rcan.d.ts

@@ -0,0 +1,29 @@
+/**
+ * RCAN (Role-based Capability Access control Network) validation.
+ *
+ * Spec reference: Aster-trust-spec.md
+ *
+ * Evaluates caller roles against capability requirements (ROLE, ANY_OF, ALL_OF).
+ * Also provides encode/decode for RCAN grant bytes (opaque until spec pins format).
+ */
+import type { CapabilityRequirement } from '../service.js';
+/** Extract caller roles from attributes (comma-separated aster.role). */
+export declare function extractCallerRoles(attributes: Record<string, string>): Set<string>;
+/**
+ * Evaluate a capability requirement against caller attributes.
+ *
+ * @returns true if the caller satisfies the requirement.
+ */
+export declare function evaluateCapability(requirement: CapabilityRequirement, callerAttributes: Record<string, string>): boolean;
+/**
+ * Validate an RCAN grant (opaque bytes).
+ * Currently a stub — non-empty grants accepted, empty bytes rejected.
+ *
+ * @returns [valid, reason]
+ */
+export declare function validateRcan(rcanBytes: Uint8Array): [boolean, string | undefined];
+/** Pass-through encoder for RCAN grant bytes. */
+export declare function encodeRcan(data: Uint8Array): Uint8Array;
+/** Pass-through decoder for RCAN grant bytes. */
+export declare function decodeRcan(data: Uint8Array): Uint8Array;
+//# sourceMappingURL=rcan.d.ts.map

package/dist/trust/rcan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rcan.d.ts","sourceRoot":"","sources":["../../src/trust/rcan.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,yEAAyE;AACzE,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAIlF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,qBAAqB,EAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACvC,OAAO,CAgBT;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,CAKjF;AAED,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAEvD;AAED,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAEvD"}

package/dist/trust/rcan.js

@@ -0,0 +1,57 @@
+/**
+ * RCAN (Role-based Capability Access control Network) validation.
+ *
+ * Spec reference: Aster-trust-spec.md
+ *
+ * Evaluates caller roles against capability requirements (ROLE, ANY_OF, ALL_OF).
+ * Also provides encode/decode for RCAN grant bytes (opaque until spec pins format).
+ */
+/** Extract caller roles from attributes (comma-separated aster.role). */
+export function extractCallerRoles(attributes) {
+    const roleStr = attributes['aster.role'] ?? '';
+    if (!roleStr)
+        return new Set();
+    return new Set(roleStr.split(',').map(r => r.trim()).filter(Boolean));
+}
+/**
+ * Evaluate a capability requirement against caller attributes.
+ *
+ * @returns true if the caller satisfies the requirement.
+ */
+export function evaluateCapability(requirement, callerAttributes) {
+    const roles = extractCallerRoles(callerAttributes);
+    switch (requirement.kind) {
+        case 'role':
+            // Must have the single required role
+            return requirement.roles.length > 0 && roles.has(requirement.roles[0]);
+        case 'any_of':
+            // Must have at least one of the listed roles
+            return requirement.roles.some(r => roles.has(r));
+        case 'all_of':
+            // Must have every listed role
+            return requirement.roles.every(r => roles.has(r));
+        default:
+            return false;
+    }
+}
+/**
+ * Validate an RCAN grant (opaque bytes).
+ * Currently a stub — non-empty grants accepted, empty bytes rejected.
+ *
+ * @returns [valid, reason]
+ */
+export function validateRcan(rcanBytes) {
+    if (rcanBytes.length === 0) {
+        return [false, 'empty RCAN grant'];
+    }
+    return [true, undefined];
+}
+/** Pass-through encoder for RCAN grant bytes. */
+export function encodeRcan(data) {
+    return data;
+}
+/** Pass-through decoder for RCAN grant bytes. */
+export function decodeRcan(data) {
+    return data;
+}
+//# sourceMappingURL=rcan.js.map

package/dist/trust/rcan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rcan.js","sourceRoot":"","sources":["../../src/trust/rcan.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,UAAkC;IACnE,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC/B,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAkC,EAClC,gBAAwC;IAExC,MAAM,KAAK,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IAEnD,QAAQ,WAAW,CAAC,IAAI,EAAE,CAAC;QACzB,KAAK,MAAM;YACT,qCAAqC;YACrC,OAAO,WAAW,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QAC1E,KAAK,QAAQ;YACX,6CAA6C;YAC7C,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,KAAK,QAAQ;YACX,8BAA8B;YAC9B,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,SAAqB;IAChD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAC3B,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Shared types and enums for the Aster RPC framework.
+ */
+/** Serialization mode for Fory codec. */
+export declare const SerializationMode: {
+    /** Cross-language (Fory XLANG). Default and recommended. */
+    readonly XLANG: 0;
+    /** Language-native. Only for LocalTransport (same trust domain). */
+    readonly NATIVE: 1;
+    /** Row-oriented. For random-access reads. */
+    readonly ROW: 2;
+    /** JSON over UTF-8. Cross-language fallback. The TypeScript binding
+     *  uses this exclusively because Fory JS is not yet XLANG-compliant. */
+    readonly JSON: 3;
+};
+export type SerializationMode = (typeof SerializationMode)[keyof typeof SerializationMode];
+/** RPC streaming pattern. */
+export declare const RpcPattern: {
+    readonly UNARY: "unary";
+    readonly SERVER_STREAM: "server_stream";
+    readonly CLIENT_STREAM: "client_stream";
+    readonly BIDI_STREAM: "bidi_stream";
+};
+export type RpcPattern = (typeof RpcPattern)[keyof typeof RpcPattern];
+/** Service dispatch scope.
+ *
+ *  - SHARED:  one service instance shared by all callers, fresh QUIC stream
+ *             per RPC call. The default for stateless services.
+ *  - SESSION: one service instance per client connection, all calls for that
+ *             instance multiplexed onto a single bidirectional QUIC stream.
+ *             Use this when the service needs per-peer state. The decorator
+ *             still accepts the legacy alias `'stream'` on input.
+ */
+export declare const RpcScope: {
+    readonly SHARED: "shared";
+    readonly SESSION: "session";
+};
+export type RpcScope = (typeof RpcScope)[keyof typeof RpcScope];
+/** Exponential backoff configuration. */
+export interface ExponentialBackoff {
+    initialMs: number;
+    maxMs: number;
+    multiplier: number;
+    jitter: number;
+}
+/** Default backoff: 100ms initial, 30s max, 2x multiplier, 10% jitter. */
+export declare const DEFAULT_BACKOFF: ExponentialBackoff;
+/** Retry policy configuration. */
+export interface RetryPolicy {
+    maxAttempts: number;
+    backoff: ExponentialBackoff;
+}
+/** Default retry: 3 attempts with default backoff. */
+export declare const DEFAULT_RETRY: RetryPolicy;
+/** The ALPN protocol identifier for Aster RPC. */
+export declare const RPC_ALPN: Uint8Array<ArrayBuffer>;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,yCAAyC;AACzC,eAAO,MAAM,iBAAiB;IAC5B,4DAA4D;;IAE5D,oEAAoE;;IAEpE,6CAA6C;;IAE7C;4EACwE;;CAEhE,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE3F,6BAA6B;AAC7B,eAAO,MAAM,UAAU;;;;;CAKb,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAC;AAEtE;;;;;;;;GAQG;AACH,eAAO,MAAM,QAAQ;;;CAGX,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,OAAO,QAAQ,CAAC,CAAC;AAEhE,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,0EAA0E;AAC1E,eAAO,MAAM,eAAe,EAAE,kBAK7B,CAAC;AAEF,kCAAkC;AAClC,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED,sDAAsD;AACtD,eAAO,MAAM,aAAa,EAAE,WAG3B,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,QAAQ,yBAAsC,CAAC"}

package/dist/types.js

@@ -0,0 +1,50 @@
+/**
+ * Shared types and enums for the Aster RPC framework.
+ */
+/** Serialization mode for Fory codec. */
+export const SerializationMode = {
+    /** Cross-language (Fory XLANG). Default and recommended. */
+    XLANG: 0,
+    /** Language-native. Only for LocalTransport (same trust domain). */
+    NATIVE: 1,
+    /** Row-oriented. For random-access reads. */
+    ROW: 2,
+    /** JSON over UTF-8. Cross-language fallback. The TypeScript binding
+     *  uses this exclusively because Fory JS is not yet XLANG-compliant. */
+    JSON: 3,
+};
+/** RPC streaming pattern. */
+export const RpcPattern = {
+    UNARY: 'unary',
+    SERVER_STREAM: 'server_stream',
+    CLIENT_STREAM: 'client_stream',
+    BIDI_STREAM: 'bidi_stream',
+};
+/** Service dispatch scope.
+ *
+ *  - SHARED:  one service instance shared by all callers, fresh QUIC stream
+ *             per RPC call. The default for stateless services.
+ *  - SESSION: one service instance per client connection, all calls for that
+ *             instance multiplexed onto a single bidirectional QUIC stream.
+ *             Use this when the service needs per-peer state. The decorator
+ *             still accepts the legacy alias `'stream'` on input.
+ */
+export const RpcScope = {
+    SHARED: 'shared',
+    SESSION: 'session',
+};
+/** Default backoff: 100ms initial, 30s max, 2x multiplier, 10% jitter. */
+export const DEFAULT_BACKOFF = {
+    initialMs: 100,
+    maxMs: 30_000,
+    multiplier: 2.0,
+    jitter: 0.1,
+};
+/** Default retry: 3 attempts with default backoff. */
+export const DEFAULT_RETRY = {
+    maxAttempts: 3,
+    backoff: DEFAULT_BACKOFF,
+};
+/** The ALPN protocol identifier for Aster RPC. */
+export const RPC_ALPN = new TextEncoder().encode('aster/1');
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,yCAAyC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,4DAA4D;IAC5D,KAAK,EAAE,CAAC;IACR,oEAAoE;IACpE,MAAM,EAAE,CAAC;IACT,6CAA6C;IAC7C,GAAG,EAAE,CAAC;IACN;4EACwE;IACxE,IAAI,EAAE,CAAC;CACC,CAAC;AAIX,6BAA6B;AAC7B,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,KAAK,EAAE,OAAO;IACd,aAAa,EAAE,eAAe;IAC9B,aAAa,EAAE,eAAe;IAC9B,WAAW,EAAE,aAAa;CAClB,CAAC;AAIX;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;CACV,CAAC;AAYX,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAuB;IACjD,SAAS,EAAE,GAAG;IACd,KAAK,EAAE,MAAM;IACb,UAAU,EAAE,GAAG;IACf,MAAM,EAAE,GAAG;CACZ,CAAC;AAQF,sDAAsD;AACtD,MAAM,CAAC,MAAM,aAAa,GAAgB;IACxC,WAAW,EAAE,CAAC;IACd,OAAO,EAAE,eAAe;CACzB,CAAC;AAEF,kDAAkD;AAClD,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC"}

package/dist/xlang.d.ts

@@ -0,0 +1,26 @@
+/**
+ * xlang.ts -- XLANG codec factory for cross-language interop.
+ *
+ * Creates a ForyCodec pre-configured with the Aster protocol types
+ * (StreamHeader, RpcStatus) for cross-language communication with
+ * Python and other language bindings.
+ *
+ * @example
+ * ```ts
+ * import { createXlangCodec } from '@aster-rpc/aster';
+ * const codec = createXlangCodec();
+ * const transport = new IrohTransport(connection, codec);
+ * ```
+ */
+import { ForyCodec } from './codec.js';
+/**
+ * Create a ForyCodec pre-configured for cross-language (XLANG) interop.
+ *
+ * Registers the Aster protocol types (StreamHeader, CallHeader, RpcStatus)
+ * so the transport can encode/decode the wire protocol. User-defined types
+ * are serialized dynamically by Fory's compatible mode.
+ *
+ * Requires `@apache-fory/core` to be installed.
+ */
+export declare function createXlangCodec(): ForyCodec;
+//# sourceMappingURL=xlang.d.ts.map

package/dist/xlang.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xlang.d.ts","sourceRoot":"","sources":["../src/xlang.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGvC;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,IAAI,SAAS,CAkC5C"}

package/dist/xlang.js

@@ -0,0 +1,55 @@
+/**
+ * xlang.ts -- XLANG codec factory for cross-language interop.
+ *
+ * Creates a ForyCodec pre-configured with the Aster protocol types
+ * (StreamHeader, RpcStatus) for cross-language communication with
+ * Python and other language bindings.
+ *
+ * @example
+ * ```ts
+ * import { createXlangCodec } from '@aster-rpc/aster';
+ * const codec = createXlangCodec();
+ * const transport = new IrohTransport(connection, codec);
+ * ```
+ */
+import { ForyCodec } from './codec.js';
+import { StreamHeader, CallHeader, RpcStatus } from './protocol.js';
+/**
+ * Create a ForyCodec pre-configured for cross-language (XLANG) interop.
+ *
+ * Registers the Aster protocol types (StreamHeader, CallHeader, RpcStatus)
+ * so the transport can encode/decode the wire protocol. User-defined types
+ * are serialized dynamically by Fory's compatible mode.
+ *
+ * Requires `@apache-fory/core` to be installed.
+ */
+export function createXlangCodec() {
+    // Dynamic import to keep @apache-fory/core optional
+    let Fory;
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-require-imports
+        Fory = require('@apache-fory/core').default;
+    }
+    catch {
+        throw new Error('Cross-language (XLANG) codec requires @apache-fory/core. ' +
+            'Install it with: bun add @apache-fory/core');
+    }
+    const fory = new Fory({ refTracking: false });
+    const codec = new ForyCodec(fory);
+    // Register protocol types with their wire tags
+    const protocolTypes = [StreamHeader, CallHeader, RpcStatus];
+    for (const cls of protocolTypes) {
+        const tag = cls.wireType;
+        if (tag) {
+            const [ns, name] = tag.includes('/') ? tag.split('/') : ['', tag];
+            // Build Fory type description from the class
+            codec.registerType(fory.classResolver.createTypeDescription({
+                type: cls,
+                namespace: ns,
+                typeName: name,
+            }));
+        }
+    }
+    return codec;
+}
+//# sourceMappingURL=xlang.js.map

package/dist/xlang.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xlang.js","sourceRoot":"","sources":["../src/xlang.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB;IAC9B,oDAAoD;IACpD,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,iEAAiE;QACjE,IAAI,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,2DAA2D;YAC3D,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;IAElC,+CAA+C;IAC/C,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,GAAG,GAAI,GAAW,CAAC,QAAkB,CAAC;QAC5C,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAClE,6CAA6C;YAC7C,KAAK,CAAC,YAAY,CAChB,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC;gBACvC,IAAI,EAAE,GAAG;gBACT,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,IAAI;aACf,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@aster-rpc/aster",
+  "version": "0.1.2",
+  "description": "Aster RPC framework for TypeScript \u2014 P2P services with type safety, streaming, and trust",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@aster-rpc/transport": "0.1.2"
+  },
+  "devDependencies": {
+    "@types/node": "^25.5.2",
+    "typescript": "^5.7.0",
+    "vitest": "^3.2.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "license": "Apache-2.0",
+  "homepage": "https://github.com/aster-rpc/aster-rpc",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aster-rpc/aster-rpc.git",
+    "directory": "bindings/typescript/packages/aster"
+  },
+  "bugs": {
+    "url": "https://github.com/aster-rpc/aster-rpc/issues"
+  },
+  "keywords": [
+    "iroh",
+    "p2p",
+    "rpc",
+    "quic",
+    "aster",
+    "streaming",
+    "framework"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}