@astrale-os/adapter-cloudflare 0.4.10 → 0.5.0-beta.2

package/dist/codegen/worker.js

@@ -1,120 +0,0 @@
-/**
- * Codegen for the Cloudflare Worker entry (`.astrale/worker.gen.ts`).
- *
- * The dev wires the domain ONCE in a worker-safe `domain.ts`
- * (`export const domain = defineDomain({ schema, methods, deps, views,
- * functions })`) and binds it to an adapter in `astrale.config.ts`
- * (`deploy(domain, cloudflare({ … }))`). This generates the
- * `export default { fetch }` plumbing the adapter owns by importing that single
- * `domain` and SPREADING it into `domainWorkerEntry` — so the author's folder
- * layout is irrelevant (any internal organization works as long as `domain.ts`
- * re-exports the wired definition) and the node-only deploy adapter, which lives
- * in `astrale.config.ts`, never enters this worker bundle.
- *
- * Everything the entry needs — schema/methods/deps/views/functions/requires/
- * postInstall — rides on the spread; the only build-time signal left is whether
- * this adapter env serves a client SPA (`hasClient`), which gates the `/ui`
- * asset hook and its import. Key properties:
- *
- *  • Per-request `url` = the live serving origin (`scheme://host`). It is passed
- *    only to `createRemoteServer({ url })`; the SDK stamps every
- *    `binding.remoteUrl` from that single value at spec-build time — so deployed
- *    Function nodes point back at THIS worker with zero hardcoded URLs.
- *  • Self-issued JWKS: a Worker can't fetch its own hostname; the verifier
- *    resolves a credential whose `iss` is this worker from the in-memory key,
- *    so no self-fetch is attempted (the worker's JWKS is served as a normal
- *    route by createRemoteServer).
- *  • Self-binding (autobinding): when a handler calls back into its OWN domain
- *    (`ctx.kernel.call` / `ctx.fn.kernel().call`), the redirect resolves to
- *    this worker's own host — a forbidden same-host subrequest. We route those
- *    through the `SELF` service binding instead.
- *  • SPA: `/ui/*` is served from the `ASSETS` binding (or proxied to Vite in
- *    dev via `VIEW_DEV_URL`).
- */
-export function generateWorkerEntry(opts) {
-    // The asset-serving hook is a library helper (`assets`), not inlined string
-    // logic — imported only when this adapter env serves client assets.
-    const serverImport = opts.hasClient
-        ? `import { assets, domainWorkerEntry } from '@astrale-os/sdk/server'`
-        : `import { domainWorkerEntry } from '@astrale-os/sdk/server'`;
-    const clientHook = opts.hasClient
-        ? `
-  // Client assets under /ui/* — served from the ASSETS binding (or proxied to
-  // Vite in dev via VIEW_DEV_URL). The matching/stripping logic lives in the SDK helper.
-  before: assets({ binding: (env) => env.ASSETS, devProxy: (env) => env.VIEW_DEV_URL }),`
-        : '';
-    const router = opts.router;
-    // Service binding for instance-host subrequest routing (Env field + helper +
-    // routeSubrequest), wired only when the adapter's `router` is set.
-    const routerEnvField = router
-        ? `
-  ${router.binding}?: { fetch(request: Request): Promise<Response> }
-  // Sibling WFP services share one dispatch namespace; this binding reaches them
-  // IN-PROCESS (a same-zone public fetch 522s; the instance router doesn't know svc
-  // hosts). Injected by the \`services\` domain at deploy; absent → svc routing no-ops.
-  DISPATCHER?: { get(name: string): { fetch(request: Request): Promise<Response> } }`
-        : '';
-    const routerHelper = router
-        ? `
-// A platform INSTANCE hostname (e.g. <slug>.<region>${router.hostSuffix}) is served
-// by a router Worker on the SAME zone — a direct Worker→Worker public fetch 522s.
-// Route those subrequests (e.g. fetching an instance kernel's JWKS to verify a
-// cross-instance credential) through the ${router.binding} service binding instead.
-function isInstanceHost(host) {
-  return host.endsWith('${router.hostSuffix}') && host.split('.').length >= ${router.minLabels}
-}
-`
-        : '';
-    const routerHook = router
-        ? `
-  // Divert platform subrequests off the same-zone public edge (CF 522s a same-zone
-  // Worker→Worker public fetch). No-op when a binding is absent.
-  routeSubrequest: (url, env) => {
-    const host = url.hostname
-    // Sibling WFP service (<script>.svc.<domain>) → in-process via the dispatch namespace.
-    if (env.DISPATCHER && host.split('.')[1] === 'svc') return env.DISPATCHER.get(host.split('.')[0])
-    // Instance host → router service binding.
-    if (env.${router.binding} && isInstanceHost(host)) return env.${router.binding}
-    return null
-  },`
-        : '';
-    return `// AUTO-GENERATED by @astrale-os/adapter-cloudflare — do not edit.
-// Regenerated on every \`astrale-domain dev|deploy\`. Edit your domain.ts (the
-// wired \`defineDomain\`) and astrale.config.ts (the \`deploy(domain, …)\`).
-// (origin: ${opts.origin})
-${serverImport}
-
-// The worker-safe domain definition — schema/methods/deps/views/functions plus
-// origin/requires/postInstall — wired by the author in domain.ts. Spreading it
-// keeps this entry layout-agnostic; the deploy adapter stays in astrale.config.ts.
-import { domain } from '../domain'
-import { PRIVATE_JWK } from './identity'
-
-interface Env {
-  WORKER_URL?: string
-  ASSETS?: { fetch(request: Request): Promise<Response> }
-  SELF?: { fetch(request: Request): Promise<Response> }
-  VIEW_DEV_URL?: string${routerEnvField}
-  [key: string]: unknown
-}
-${routerHelper}
-// \`domainWorkerEntry\` folds the runtime-domain compile + server build + the
-// shared worker plumbing (JWKS self-resolution, SELF-binding routing, per-URL
-// app cache, canonical iss resolution) into one declaration. \`deps\` (when the
-// domain declares one) rides the spread and runs per cold isolate / serving URL.
-export default domainWorkerEntry<Env>()({
-  ...domain,
-  privateKey: PRIVATE_JWK,
-  // The worker's serving URL = its identity (iss). Prefer the adapter-injected
-  // WORKER_URL (pins one canonical host for routed deploys, so iss stays stable
-  // even when also reachable via *.workers.dev); fall back to the per-request
-  // host for dev / workers.dev-only (single-host → it IS the canonical URL).
-  // Behind a TLS-terminating proxy (cloudflared tunnel → wrangler dev) the SDK
-  // upgrades the fallback origin via X-Forwarded-Proto, so iss = the public
-  // https URL, not the raw http one workerd sees.
-  resolveUrl: (env, requestOrigin) => env.WORKER_URL ?? requestOrigin,
-  selfBinding: (env) => env.SELF,${routerHook}${clientHook}
-})
-`;
-}
-//# sourceMappingURL=worker.js.map

package/dist/codegen/worker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/codegen/worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAeH,MAAM,UAAU,mBAAmB,CAAC,IAA0B;IAC5D,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS;QACjC,CAAC,CAAC,oEAAoE;QACtE,CAAC,CAAC,4DAA4D,CAAA;IAEhE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS;QAC/B,CAAC,CAAC;;;yFAGmF;QACrF,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC1B,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM,cAAc,GAAG,MAAM;QAC3B,CAAC,CAAC;IACF,MAAM,CAAC,OAAO;;;;qFAImE;QACjF,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,YAAY,GAAG,MAAM;QACzB,CAAC,CAAC;uDACiD,MAAM,CAAC,UAAU;;;4CAG5B,MAAM,CAAC,OAAO;;0BAEhC,MAAM,CAAC,UAAU,mCAAmC,MAAM,CAAC,SAAS;;CAE7F;QACG,CAAC,CAAC,EAAE,CAAA;IACN,MAAM,UAAU,GAAG,MAAM;QACvB,CAAC,CAAC;;;;;;;;cAQQ,MAAM,CAAC,OAAO,wCAAwC,MAAM,CAAC,OAAO;;KAE7E;QACD,CAAC,CAAC,EAAE,CAAA;IAEN,OAAO;;;cAGK,IAAI,CAAC,MAAM;EACvB,YAAY;;;;;;;;;;;;yBAYW,cAAc;;;EAGrC,YAAY;;;;;;;;;;;;;;;;mCAgBqB,UAAU,GAAG,UAAU;;CAEzD,CAAA;AACD,CAAC"}

package/dist/codegen/wrangler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"wrangler.d.ts","sourceRoot":"","sources":["../../src/codegen/wrangler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAA;IAClB,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B,kDAAkD;IAClD,WAAW,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7C;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAID,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CAoC3E"}

package/dist/codegen/wrangler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"wrangler.js","sourceRoot":"","sources":["../../src/codegen/wrangler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AA4BzC,MAAM,kBAAkB,GAAG,YAAY,CAAA;AAEvC,MAAM,UAAU,sBAAsB,CAAC,IAA4B;IACjE,MAAM,MAAM,GAA4B;QACtC,IAAI,EAAE,IAAI,CAAC,UAAU;QACrB,IAAI,EAAE,iBAAiB;QACvB,kBAAkB,EAAE,kBAAkB;QACtC,mBAAmB,EAAE,CAAC,eAAe,EAAE,oCAAoC,CAAC;QAC5E,WAAW,EAAE,IAAI;QACjB,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;KACjC,CAAA;IAED,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAChE,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,CAAC,MAAM,GAAG;YACd,SAAS,EAAE,MAAM,eAAe,EAAE;YAClC,OAAO,EAAE,QAAQ;YACjB,kBAAkB,EAAE,yBAAyB;YAC7C,gBAAgB,EAAE,IAAI;SACvB,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAgD,EAAE,CAAA;IAChE,IAAI,IAAI,CAAC,WAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;IAClF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAEnD,IAAI,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAC9E,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAA;AAC/C,CAAC;AAED,qEAAqE;AACrE,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;AAE/D;;;;GAIG;AACH,SAAS,eAAe,CACtB,IAA6B,EAC7B,IAA6B;IAE7B,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAA;IAC9D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,qDAAqD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAC5E,gEAAgE;YAChE,mDAAmD,CACtD,CAAA;IACH,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AACpC,CAAC"}

package/dist/parse-output.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"parse-output.d.ts","sourceRoot":"","sources":["../src/parse-output.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW/E;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI/E;AAED,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAShE"}

package/dist/parse-output.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"parse-output.js","sourceRoot":"","sources":["../src/parse-output.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,QAAQ,GAAG,yDAAyD,CAAA;AAC1E,MAAM,cAAc,GAAG,mCAAmC,CAAA;AAE1D;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACjC,IAAI,KAAK;QAAE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,CAAA;IACjD,wEAAwE;IACxE,kEAAkE;IAClE,MAAM,eAAe,GAAG,IAAI,MAAM,CAChC,2CAA2C,IAAI,YAAY,EAC3D,GAAG,CACJ,CAAA;IACD,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAc;IACzD,IAAI,KAAK;QAAE,OAAO,WAAW,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAA;IACzD,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7B,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,IAAY;IACtD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QACtB,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS;YAAE,CAAC,CAAC,QAAQ,GAAG,WAAW,CAAA;QACtD,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QAClC,OAAO,CAAC,CAAC,MAAM,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,oBAAoB,IAAI,EAAE,CAAA;IACnC,CAAC;AACH,CAAC"}

package/dist/wrangler-cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"wrangler-cli.d.ts","sourceRoot":"","sources":["../src/wrangler-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmBH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AA8BD,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,OAAO,CAAA;IACf,sFAAsF;IACtF,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,gFAAgF;IAChF,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,QAAQ,EAAE,MAAM,IAAI,CAAA;IACpB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B,GAAG,OAAO,CAAC,SAAS,CAAC,CA4FrB;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,qFAAqF;IACrF,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,UAAU,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAKvC;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,EACtE,IAAI,EAAE,UAAU,GACf,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAwBvC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAO9E;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBhB;AAyCD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B,GAAG,OAAO,CAAC,MAAM,CAAC,CAalB"}

package/dist/wrangler-cli.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"wrangler-cli.js","sourceRoot":"","sources":["../src/wrangler-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEjE,SAAS,eAAe,CAAC,UAAkB;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;IAClE,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IACxD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAA;AACtD,CAAC;AAOD;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,YAAY,EAAE,CAAA;QAC1B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QACvC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3D,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,gCAAgC;AAChC,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,YAAY,EAAE,CAAA;QAC1B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACzB,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE;YACvB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAA;YAC1B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;YAC7D,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QAChC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAWpC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,IAAI,WAAW,CAAA;IACvC,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAA;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,IAAI,CAAC,IAAI,qBAAqB,MAAM,mCAAmC,CAAC,CAAA;QAC7F,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAClC,CAAC;IACD,MAAM,YAAY,GAAG;QACnB,GAAG,MAAM;QACT,KAAK;QACL,UAAU;QACV,IAAI,CAAC,UAAU;QACf,QAAQ;QACR,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,kBAAkB;QAClB,MAAM;QACN,MAAM;QACN,IAAI,CAAC,EAAE,IAAI,WAAW;QACtB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE;QACrC,GAAG,EAAE,IAAI,CAAC,UAAU;QACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE;KACxD,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAA;IACnD,+EAA+E;IAC/E,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,4EAA4E;IAC5E,sEAAsE;IACtE,4DAA4D;IAC5D,IAAI,cAAc,GAAG,EAAE,CAAA;IAEvB,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAA;YACrC,CAAC;YACD,IAAI,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,cAAc,GAAG,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAA;YACvD,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC/C,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,GAAG,IAAI,CAAA;oBACf,OAAO,CAAC,KAAK,CAAC,CAAA;gBAChB,CAAC;YACH,CAAC;iBAAM,IAAI,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,QAAQ,EAAE,CAAA;YACjB,CAAC;QACH,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,IAAI,IAAI,MAAM,IAAI,CAAC,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,CAAC,GAAG,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CAAC,CAAA;QACF,6EAA6E;QAC7E,qEAAqE;QACrE,uEAAuE;QACvE,yEAAyE;QACzE,OAAO;QACP,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACzC,QAAQ,GAAG,IAAI,CAAA;gBACf,IAAI,cAAc,EAAE,CAAC;oBACnB,KAAK,SAAS,CAAC,KAAK,CAAC,CAAA;oBACrB,MAAM,CACJ,IAAI,KAAK,CACP,8DAA8D,cAAc,EAAE,CAC/E,CACF,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,WAAW,CAAC,CAAA;gBACtB,CAAC;YACH,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;AAC9C,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAyC;IAEzC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,CAAC,UAAkB,EAAE,EAAE,CACpC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7F,OAAO,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAsE,EACtE,IAAgB;IAEhB,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAEjD,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,IAAI,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,KAAK,EAAE,CACV,oGAAoG,CACrG,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CACzF,CAAA;QACH,CAAC;QACD,CAAC;QAAA,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,2DAA2D,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,UAAmB;IACnE,MAAM,YAAY,GAChB,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;QACtC,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC;QACvC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACxD,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAKpC;IACC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAC9B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACtC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QACnD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CACpC,GAAG,EACH,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAChE,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,KAAK,CACX,CAAA;QACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,SAAS,UAAU,CACjB,GAAW,EACX,IAAc,EACd,GAAW,EACX,KAA8B;IAE9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE;SACxD,CAAC,CAAA;QACF,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC3B,GAAG,IAAI,IAAI,CAAA;YACX,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAA;QACrE,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAC7D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAmB;IAC1C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAM;IACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACjC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrB,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAClD,OAAO,EAAE,CAAA;QACX,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAKvC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CACpC,GAAG,EACH,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EACxF,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,KAAK,CACX,CAAA;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC5F,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IACpE,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IACzF,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,CAAA;IAClE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AACrC,CAAC"}

package/src/assets-pack.ts

@@ -1,32 +0,0 @@
-/**
- * Pack a built client SPA (the `CLIENT_DIST_DIR` build) into the host box's asset-archive
- * format: `gzip(JSON [{ path, contentBase64 }])` — the exact shape
- * `downloadAssets` on the box consumes (kernel/host workerd service layout).
- */
-
-import { readdirSync, readFileSync, statSync } from 'node:fs'
-import { join, relative } from 'node:path'
-import { gzipSync } from 'node:zlib'
-
-type AssetFile = { path: string; contentBase64: string }
-
-function walk(dir: string, root: string, out: AssetFile[]): void {
-  for (const name of readdirSync(dir)) {
-    const full = join(dir, name)
-    if (statSync(full).isDirectory()) walk(full, root, out)
-    else {
-      out.push({
-        path: relative(root, full).split('\\').join('/'),
-        contentBase64: readFileSync(full).toString('base64'),
-      })
-    }
-  }
-}
-
-/** Gzip the SPA dir into the box's asset archive. Returns null when empty. */
-export function packAssets(distClientDir: string): Buffer | null {
-  const files: AssetFile[] = []
-  walk(distClientDir, distClientDir, files)
-  if (files.length === 0) return null
-  return gzipSync(Buffer.from(JSON.stringify(files)))
-}

package/src/client.ts

@@ -1,89 +0,0 @@
-/** Client SPA build helpers. The source dir is adapter env config, not domain config. */
-
-import type { DomainInfo } from '@astrale-os/sdk'
-
-import { spawn } from 'node:child_process'
-import { existsSync } from 'node:fs'
-import { isAbsolute, join } from 'node:path'
-
-export type ClientConfig = {
-  /** Vite project directory, relative to the domain project root unless absolute. */
-  dir: string
-}
-
-/** Built client output, relative to the project root. The Vite config must emit here. */
-export const CLIENT_DIST_DIR = '.dist'
-
-export function resolveClientDir(args: {
-  adapterName: string
-  env: string
-  projectDir: string
-  client?: ClientConfig
-  domain: DomainInfo
-}): string | undefined {
-  const { adapterName, projectDir, client, domain } = args
-  for (const view of domain.mountedViews) {
-    if (!isUiMount(view.mount)) {
-      throw new Error(
-        `${adapterName} adapter: mounted view "${view.slug}" uses mount "${view.mount}", ` +
-          'but adapter-managed client assets currently serve only /ui routes.',
-      )
-    }
-  }
-  if (domain.mountedViews.length > 0 && !client) {
-    const mounts = domain.mountedViews.map((v) => `${v.slug}:${v.mount}`).join(', ')
-    throw new Error(
-      `${adapterName} adapter: ${domain.origin} declares mounted view(s) (${mounts}) ` +
-        `but env "${args.env}" has no \`client: { dir: ... }\` config. ` +
-        'Add `client` to the selected adapter env in astrale.config.ts.',
-    )
-  }
-  if (!client) return undefined
-  return isAbsolute(client.dir) ? client.dir : join(projectDir, client.dir)
-}
-
-function isUiMount(mount: string): boolean {
-  return mount === '/ui' || mount.startsWith('/ui/')
-}
-
-export async function buildClient(
-  clientDir: string,
-  projectDir: string,
-  onLog?: (line: string) => void,
-): Promise<void> {
-  const viteBin = [
-    join(clientDir, 'node_modules', '.bin', 'vite'),
-    join(projectDir, 'node_modules', '.bin', 'vite'),
-  ].find((p) => existsSync(p))
-  if (!viteBin) {
-    throw new Error(
-      `client build: vite not found in ${clientDir}. Run \`pnpm install\` at the project root ` +
-        `first.`,
-    )
-  }
-  const { code, out } = await runCapture(viteBin, ['build'], clientDir, onLog)
-  if (code !== 0) {
-    throw new Error(`client build failed (code ${code}):\n${out.slice(-1500)}`)
-  }
-}
-
-function runCapture(
-  cmd: string,
-  args: string[],
-  cwd: string,
-  onLog?: (line: string) => void,
-): Promise<{ code: number; out: string }> {
-  return new Promise((resolve, reject) => {
-    const child = spawn(cmd, args, { cwd, stdio: ['ignore', 'pipe', 'pipe'] })
-    let out = ''
-    const onData = (buf: Buffer) => {
-      const text = buf.toString()
-      out += text
-      for (const line of text.split('\n')) if (line.trim()) onLog?.(line)
-    }
-    child.stdout?.on('data', onData)
-    child.stderr?.on('data', onData)
-    child.on('exit', (code) => resolve({ code: code ?? 1, out }))
-    child.on('error', reject)
-  })
-}

package/src/codegen/worker.ts

@@ -1,136 +0,0 @@
-/**
- * Codegen for the Cloudflare Worker entry (`.astrale/worker.gen.ts`).
- *
- * The dev wires the domain ONCE in a worker-safe `domain.ts`
- * (`export const domain = defineDomain({ schema, methods, deps, views,
- * functions })`) and binds it to an adapter in `astrale.config.ts`
- * (`deploy(domain, cloudflare({ … }))`). This generates the
- * `export default { fetch }` plumbing the adapter owns by importing that single
- * `domain` and SPREADING it into `domainWorkerEntry` — so the author's folder
- * layout is irrelevant (any internal organization works as long as `domain.ts`
- * re-exports the wired definition) and the node-only deploy adapter, which lives
- * in `astrale.config.ts`, never enters this worker bundle.
- *
- * Everything the entry needs — schema/methods/deps/views/functions/requires/
- * postInstall — rides on the spread; the only build-time signal left is whether
- * this adapter env serves a client SPA (`hasClient`), which gates the `/ui`
- * asset hook and its import. Key properties:
- *
- *  • Per-request `url` = the live serving origin (`scheme://host`). It is passed
- *    only to `createRemoteServer({ url })`; the SDK stamps every
- *    `binding.remoteUrl` from that single value at spec-build time — so deployed
- *    Function nodes point back at THIS worker with zero hardcoded URLs.
- *  • Self-issued JWKS: a Worker can't fetch its own hostname; the verifier
- *    resolves a credential whose `iss` is this worker from the in-memory key,
- *    so no self-fetch is attempted (the worker's JWKS is served as a normal
- *    route by createRemoteServer).
- *  • Self-binding (autobinding): when a handler calls back into its OWN domain
- *    (`ctx.kernel.call` / `ctx.fn.kernel().call`), the redirect resolves to
- *    this worker's own host — a forbidden same-host subrequest. We route those
- *    through the `SELF` service binding instead.
- *  • SPA: `/ui/*` is served from the `ASSETS` binding (or proxied to Vite in
- *    dev via `VIEW_DEV_URL`).
- */
-
-export interface WorkerCodegenOptions {
-  origin: string
-  hasClient: boolean
-  /**
-   * When set, the worker routes subrequests to platform INSTANCE hostnames
-   * through `<binding>` (a service binding to a router Worker) instead of the
-   * public edge — a same-zone Worker→Worker public fetch 522s, which otherwise
-   * blocks fetching an instance kernel's JWKS to verify a cross-instance
-   * credential.
-   */
-  router?: { binding: string; hostSuffix: string; minLabels: number }
-}
-
-export function generateWorkerEntry(opts: WorkerCodegenOptions): string {
-  // The asset-serving hook is a library helper (`assets`), not inlined string
-  // logic — imported only when this adapter env serves client assets.
-  const serverImport = opts.hasClient
-    ? `import { assets, domainWorkerEntry } from '@astrale-os/sdk/server'`
-    : `import { domainWorkerEntry } from '@astrale-os/sdk/server'`
-
-  const clientHook = opts.hasClient
-    ? `
-  // Client assets under /ui/* — served from the ASSETS binding (or proxied to
-  // Vite in dev via VIEW_DEV_URL). The matching/stripping logic lives in the SDK helper.
-  before: assets({ binding: (env) => env.ASSETS, devProxy: (env) => env.VIEW_DEV_URL }),`
-    : ''
-
-  const router = opts.router
-  // Service binding for instance-host subrequest routing (Env field + helper +
-  // routeSubrequest), wired only when the adapter's `router` is set.
-  const routerEnvField = router
-    ? `
-  ${router.binding}?: { fetch(request: Request): Promise<Response> }
-  // Sibling WFP services share one dispatch namespace; this binding reaches them
-  // IN-PROCESS (a same-zone public fetch 522s; the instance router doesn't know svc
-  // hosts). Injected by the \`services\` domain at deploy; absent → svc routing no-ops.
-  DISPATCHER?: { get(name: string): { fetch(request: Request): Promise<Response> } }`
-    : ''
-  const routerHelper = router
-    ? `
-// A platform INSTANCE hostname (e.g. <slug>.<region>${router.hostSuffix}) is served
-// by a router Worker on the SAME zone — a direct Worker→Worker public fetch 522s.
-// Route those subrequests (e.g. fetching an instance kernel's JWKS to verify a
-// cross-instance credential) through the ${router.binding} service binding instead.
-function isInstanceHost(host) {
-  return host.endsWith('${router.hostSuffix}') && host.split('.').length >= ${router.minLabels}
-}
-`
-    : ''
-  const routerHook = router
-    ? `
-  // Divert platform subrequests off the same-zone public edge (CF 522s a same-zone
-  // Worker→Worker public fetch). No-op when a binding is absent.
-  routeSubrequest: (url, env) => {
-    const host = url.hostname
-    // Sibling WFP service (<script>.svc.<domain>) → in-process via the dispatch namespace.
-    if (env.DISPATCHER && host.split('.')[1] === 'svc') return env.DISPATCHER.get(host.split('.')[0])
-    // Instance host → router service binding.
-    if (env.${router.binding} && isInstanceHost(host)) return env.${router.binding}
-    return null
-  },`
-    : ''
-
-  return `// AUTO-GENERATED by @astrale-os/adapter-cloudflare — do not edit.
-// Regenerated on every \`astrale-domain dev|deploy\`. Edit your domain.ts (the
-// wired \`defineDomain\`) and astrale.config.ts (the \`deploy(domain, …)\`).
-// (origin: ${opts.origin})
-${serverImport}
-
-// The worker-safe domain definition — schema/methods/deps/views/functions plus
-// origin/requires/postInstall — wired by the author in domain.ts. Spreading it
-// keeps this entry layout-agnostic; the deploy adapter stays in astrale.config.ts.
-import { domain } from '../domain'
-import { PRIVATE_JWK } from './identity'
-
-interface Env {
-  WORKER_URL?: string
-  ASSETS?: { fetch(request: Request): Promise<Response> }
-  SELF?: { fetch(request: Request): Promise<Response> }
-  VIEW_DEV_URL?: string${routerEnvField}
-  [key: string]: unknown
-}
-${routerHelper}
-// \`domainWorkerEntry\` folds the runtime-domain compile + server build + the
-// shared worker plumbing (JWKS self-resolution, SELF-binding routing, per-URL
-// app cache, canonical iss resolution) into one declaration. \`deps\` (when the
-// domain declares one) rides the spread and runs per cold isolate / serving URL.
-export default domainWorkerEntry<Env>()({
-  ...domain,
-  privateKey: PRIVATE_JWK,
-  // The worker's serving URL = its identity (iss). Prefer the adapter-injected
-  // WORKER_URL (pins one canonical host for routed deploys, so iss stays stable
-  // even when also reachable via *.workers.dev); fall back to the per-request
-  // host for dev / workers.dev-only (single-host → it IS the canonical URL).
-  // Behind a TLS-terminating proxy (cloudflared tunnel → wrangler dev) the SDK
-  // upgrades the fallback origin via X-Forwarded-Proto, so iss = the public
-  // https URL, not the raw http one workerd sees.
-  resolveUrl: (env, requestOrigin) => env.WORKER_URL ?? requestOrigin,
-  selfBinding: (env) => env.SELF,${routerHook}${clientHook}
-})
-`
-}

package/template/.env.example

@@ -1,9 +0,0 @@
-# Secrets for an env live in `.env.<env>` (e.g. .env.dev, .env.prod), pointed at
-# by `secrets:` in astrale.config.ts. The ENTIRE file is treated as secrets:
-# injected into the local runtime in dev, pushed to the Worker secret store in
-# prod. These files are gitignored — copy this to `.env.dev` and fill in.
-#
-# Add one line per secret your handlers read (they arrive as typed fields on
-# `Env` — see `env.ts`). For example:
-#
-# EXAMPLE_API_KEY=sk-...

package/template/.gitignore.template

@@ -1,16 +0,0 @@
-# Deps
-node_modules/
-
-# Generated plumbing (worker entry, wrangler config, identity, spec)
-.astrale/
-.domain-studio/.cache/
-
-# Worker dev + build artifacts
-.dev.vars
-.wrangler/
-.dist/
-
-# Secrets — every .env.<env> is gitignored; .env.example is the only one tracked
-.env
-.env.*
-!.env.example

package/template/CLAUDE.md

@@ -1,13 +0,0 @@
-# Astrale domain
-
-Load the `astrale-domain` skill before changing schema, runtime, views, integrations, security, or
-simulation code. Install it user-level if needed:
-
-```bash
-npx skills add astrale-os/cli -g
-```
-
-This scaffold is intentionally empty. Organize schema, runtime, core, simulation, and client code by
-real bounded contexts. Keep I/O out of `core/`, use one explicit file per method or standalone function,
-wrap nondeterministic handler work in `step`, derive graph keys and paths from the compiled schema, and
-batch graph reads or mutations where possible.

package/template/README.md

@@ -1,47 +0,0 @@
-# Astrale domain
-
-A minimal Astrale domain scaffold. It builds, runs, and deploys before you add any domain concepts.
-
-```bash
-pnpm install
-pnpm dev
-pnpm typecheck
-pnpm test
-pnpm prod
-```
-
-Load the `astrale-domain` skill before authoring the domain:
-
-```bash
-npx skills add astrale-os/cli -g
-```
-
-## Shape
-
-```text
-schema/        vocabulary, split by bounded context
-runtime/       method implementations, split by bounded context and one file per method
-core/          pure deterministic logic, paths, defaults, and domain errors
-integrations/  external-system ports and adapters
-simulation/    samples and business scenarios
-client/        React views built on @astrale-os/shell-react
-icons.ts       shared SVG wrapper; named icons stay with their context
-env.ts         worker bindings and secrets
-deps.ts        env-to-runtime dependency composition
-domain.ts      worker-safe domain assembly
-```
-
-Keep `schema/index.ts` and `runtime/index.ts` as composition roots. Put standalone functions in the
-bounded context that owns them, then wire them from `domain.ts`; do not create a generic functions
-junk drawer. The same rule applies to views and client code.
-
-Cross-layer imports use the package's `#` aliases (`#schema`, `#runtime`, `#deps`, `#core/*`,
-`#integrations/*`, `#functions/*`, `#simulation/*`, and `#views`). Keep relative imports for nearby
-files inside the same bounded context.
-
-The client includes Tailwind CSS v4 and an empty shadcn `radix-nova` setup. Add only the components a
-real view needs with `pnpm exec shadcn add <component>`; component source stays in the project and can
-be adapted to the domain's visual language.
-
-The adapter generates worker plumbing under `.astrale/`. Do not edit it. The signing identity in
-`.astrale/identity.ts` is gitignored; back it up before deploying from more than one machine.

package/template/client/.gitignore.template

@@ -1,4 +0,0 @@
-node_modules/
-
-# Vite build output goes to ../.dist (gitignored at the domain root)
-dist/

package/template/client/__tests__/app.test.tsx

@@ -1,15 +0,0 @@
-import { cleanup, render, screen } from '@testing-library/react'
-import { afterEach, describe, expect, it } from 'vitest'
-
-import { App } from '@/app'
-
-afterEach(cleanup)
-
-describe('domain client', () => {
-  it('renders a standalone preview outside the Astrale shell', () => {
-    render(<App />)
-
-    expect(screen.getByText('Domain client')).toBeTruthy()
-    expect(screen.getByRole('heading', { name: 'Ready to build.' })).toBeTruthy()
-  })
-})

package/template/client/components.json

@@ -1,25 +0,0 @@
-{
-  "$schema": "https://ui.shadcn.com/schema.json",
-  "style": "radix-nova",
-  "rsc": false,
-  "tsx": true,
-  "tailwind": {
-    "config": "",
-    "css": "src/styles.css",
-    "baseColor": "neutral",
-    "cssVariables": true,
-    "prefix": ""
-  },
-  "iconLibrary": "lucide",
-  "rtl": false,
-  "aliases": {
-    "components": "@/components",
-    "utils": "@/components/ui/cn",
-    "ui": "@/components/ui",
-    "lib": "@/lib",
-    "hooks": "@/hooks"
-  },
-  "menuColor": "default",
-  "menuAccent": "subtle",
-  "registries": {}
-}

package/template/client/index.html

@@ -1,12 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="utf-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>Domain view</title>
-  </head>
-  <body>
-    <div id="root"></div>
-    <script type="module" src="/src/main.tsx"></script>
-  </body>
-</html>

package/template/client/package.json

@@ -1,35 +0,0 @@
-{
-  "name": "astrale-domain-client",
-  "version": "0.1.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "build": "vite build",
-    "dev": "vite build --watch",
-    "dev:hmr": "vite",
-    "typecheck": "tsgo --noEmit",
-    "test": "vitest run"
-  },
-  "dependencies": {
-    "@astrale-os/shell-react": ">=0.2.5 <1.0.0",
-    "@fontsource-variable/instrument-sans": "^5.2.8",
-    "@fontsource/ibm-plex-mono": "^5.2.7",
-    "clsx": "^2.1.1",
-    "react": "^19.2.0",
-    "react-dom": "^19.2.0",
-    "shadcn": "^4.13.0",
-    "tailwind-merge": "^3.6.0",
-    "tw-animate-css": "^1.4.0"
-  },
-  "devDependencies": {
-    "@tailwindcss/vite": "^4.3.2",
-    "@testing-library/react": "^16.3.0",
-    "@types/react": "^19.2.0",
-    "@types/react-dom": "^19.2.0",
-    "@vitejs/plugin-react": "^5.0.4",
-    "happy-dom": "^20.0.0",
-    "tailwindcss": "^4.3.2",
-    "vite": "^7.1.7",
-    "vitest": "^3.2.4"
-  }
-}