@astrale-os/kernel-client 0.2.0

package/dist/redirect/policy.d.ts

@@ -0,0 +1,79 @@
+import type { CallRedirection } from '@astrale-os/kernel-api';
+/**
+ * Hop record ClientSession threads through every policy call. Each entry is a
+ * URL the call dispatched to and the timestamp at which it was reached;
+ * the initial target is `hops[0]`, the current hop is `hops[hops.length-1]`.
+ */
+export type RedirectHop = {
+    url: string;
+    at: number;
+};
+/**
+ * Policy decision returned by `RedirectPolicy.decide`.
+ *
+ * `{ follow: true }` follows to `redirection.url`. `{ follow: false,
+ * reason }` causes ClientSession to throw `RedirectRefusedError(redirection,
+ * reason)`.
+ */
+export type RedirectDecision = {
+    follow: true;
+} | {
+    follow: false;
+    reason: string;
+};
+/**
+ * Decision surface for ClientSession's redirect follow loop. Spec §9.4.
+ *
+ * Owns ONLY the follow/refuse decision and reason attribution. Does NOT
+ * own the follow loop (ClientSession does, §8.1), hop-cap enforcement (ClientSession
+ * checks before calling `decide`), audience derivation (that's
+ * `DelegationPolicy`, §9.3), or schema persistence (ClientSession sequences it).
+ */
+export interface RedirectPolicy {
+    /**
+     * Decide whether to follow. `signal` propagates the caller's abort —
+     * implementations that await UI input MUST race against it.
+     */
+    decide(redirection: CallRedirection, hops: ReadonlyArray<RedirectHop>, correlationId: string, signal: AbortSignal | undefined): RedirectDecision | Promise<RedirectDecision>;
+}
+/**
+ * Follow every redirect. Default when `ClientSessionConfig.redirect` is absent.
+ *
+ * Consumers who want to gate redirects on a URL allowlist use
+ * `allowlistPolicy`; consumers who want to prompt the user per hop use
+ * `promptPolicy`; consumers who want to refuse every redirect use
+ * `strictPolicy`.
+ */
+export declare function allowAllPolicy(): RedirectPolicy;
+/**
+ * Refuse every redirect. Opt-in — when a consumer wants cross-kernel
+ * follow blocked entirely and every redirect surfaced as a
+ * `RedirectRefusedError`.
+ */
+export declare function strictPolicy(): RedirectPolicy;
+/**
+ * Follow only URLs that the `allow` predicate returns true for.
+ *
+ * ```ts
+ * allowlistPolicy({
+ *   allow: (url) => new URL(url).host.endsWith('.trusted.kernel'),
+ * })
+ * ```
+ */
+export declare function allowlistPolicy(opts: {
+    allow: (url: string) => boolean;
+}): RedirectPolicy;
+/**
+ * Ask the consumer for each redirect. The returned policy races the UI
+ * `onPrompt` call against the caller's `signal`, so aborting the
+ * top-level `session.call` cancels the prompt.
+ *
+ * `allow`, when provided, is a fast-path predicate that skips the
+ * prompt (for pre-approved URLs). Returning `false` from `allow` falls
+ * through to `onPrompt`.
+ */
+export declare function promptPolicy(opts: {
+    onPrompt: (redirection: CallRedirection, hops: ReadonlyArray<RedirectHop>) => Promise<boolean>;
+    allow?: (url: string) => boolean;
+}): RedirectPolicy;
+//# sourceMappingURL=policy.d.ts.map

package/dist/redirect/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/redirect/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAI7D;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAErD;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAAE,MAAM,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEnF;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,MAAM,CACJ,WAAW,EAAE,eAAe,EAC5B,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,EAChC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,WAAW,GAAG,SAAS,GAC9B,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;CAChD;AAID;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,cAAc,CAI/C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,cAAc,CAI7C;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;CAAE,GAAG,cAAc,CAOzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,QAAQ,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9F,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;CACjC,GAAG,cAAc,CAajB"}

package/dist/redirect/policy.js

@@ -0,0 +1,69 @@
+import { raceAgainstSignal } from '../util/race-signal';
+// ─── Factories ───────────────────────────────────────────────────────────────
+/**
+ * Follow every redirect. Default when `ClientSessionConfig.redirect` is absent.
+ *
+ * Consumers who want to gate redirects on a URL allowlist use
+ * `allowlistPolicy`; consumers who want to prompt the user per hop use
+ * `promptPolicy`; consumers who want to refuse every redirect use
+ * `strictPolicy`.
+ */
+export function allowAllPolicy() {
+    return {
+        decide: () => ({ follow: true }),
+    };
+}
+/**
+ * Refuse every redirect. Opt-in — when a consumer wants cross-kernel
+ * follow blocked entirely and every redirect surfaced as a
+ * `RedirectRefusedError`.
+ */
+export function strictPolicy() {
+    return {
+        decide: () => ({ follow: false, reason: 'strict policy refuses all redirects' }),
+    };
+}
+/**
+ * Follow only URLs that the `allow` predicate returns true for.
+ *
+ * ```ts
+ * allowlistPolicy({
+ *   allow: (url) => new URL(url).host.endsWith('.trusted.kernel'),
+ * })
+ * ```
+ */
+export function allowlistPolicy(opts) {
+    return {
+        decide: (redirection) => {
+            if (opts.allow(redirection.url))
+                return { follow: true };
+            return { follow: false, reason: `URL not in allowlist: ${redirection.url}` };
+        },
+    };
+}
+/**
+ * Ask the consumer for each redirect. The returned policy races the UI
+ * `onPrompt` call against the caller's `signal`, so aborting the
+ * top-level `session.call` cancels the prompt.
+ *
+ * `allow`, when provided, is a fast-path predicate that skips the
+ * prompt (for pre-approved URLs). Returning `false` from `allow` falls
+ * through to `onPrompt`.
+ */
+export function promptPolicy(opts) {
+    return {
+        decide: async (redirection, hops, _correlationId, signal) => {
+            if (opts.allow?.(redirection.url))
+                return { follow: true };
+            // Short-circuit a pre-aborted signal before opening the prompt —
+            // otherwise the consumer's UI flashes for a call the caller already cancelled.
+            if (signal?.aborted)
+                throw signal.reason instanceof Error ? signal.reason : new Error('aborted');
+            const accepted = await raceAgainstSignal(opts.onPrompt(redirection, hops), signal);
+            if (accepted)
+                return { follow: true };
+            return { follow: false, reason: `consumer declined redirect → ${redirection.url}` };
+        },
+    };
+}
+//# sourceMappingURL=policy.js.map

package/dist/redirect/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/redirect/policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAuCvD,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KACjC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;KACjF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,IAAyC;IACvE,OAAO;QACL,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE;YACtB,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;YACxD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,WAAW,CAAC,GAAG,EAAE,EAAE,CAAA;QAC9E,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,IAG5B;IACC,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE;YAC1D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;YAC1D,iEAAiE;YACjE,+EAA+E;YAC/E,IAAI,MAAM,EAAE,OAAO;gBACjB,MAAM,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAA;YAC7E,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;YAClF,IAAI,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;YACrC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,WAAW,CAAC,GAAG,EAAE,EAAE,CAAA;QACrF,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/schema/call-args.d.ts

@@ -0,0 +1,6 @@
+import type { ProxyCallOptions } from './proxy-types';
+/**
+ * Distinguish between method(), method(opts), and method(params, opts).
+ */
+export declare function resolveCallArgs(first?: unknown, second?: ProxyCallOptions): [Record<string, unknown>, ProxyCallOptions | undefined];
+//# sourceMappingURL=call-args.d.ts.map

package/dist/schema/call-args.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-args.d.ts","sourceRoot":"","sources":["../../src/schema/call-args.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAErD;;GAEG;AACH,wBAAgB,eAAe,CAC7B,KAAK,CAAC,EAAE,OAAO,EACf,MAAM,CAAC,EAAE,gBAAgB,GACxB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC,CAgBzD"}

package/dist/schema/call-args.js

@@ -0,0 +1,21 @@
+/**
+ * Distinguish between method(), method(opts), and method(params, opts).
+ */
+export function resolveCallArgs(first, second) {
+    // method() — no args
+    if (first === undefined)
+        return [{}, undefined];
+    // method(params, opts) — two args
+    if (second !== undefined)
+        return [first, second];
+    // method(arg) — is it params or opts?
+    if (first &&
+        typeof first === 'object' &&
+        ('timeout' in first ||
+            'signal' in first ||
+            'credential' in first)) {
+        return [{}, first];
+    }
+    return [first, undefined];
+}
+//# sourceMappingURL=call-args.js.map

package/dist/schema/call-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-args.js","sourceRoot":"","sources":["../../src/schema/call-args.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAe,EACf,MAAyB;IAEzB,qBAAqB;IACrB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;IAC/C,kCAAkC;IAClC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,KAAgC,EAAE,MAAM,CAAC,CAAA;IAC3E,sCAAsC;IACtC,IACE,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,SAAS,IAAK,KAAgB;YAC7B,QAAQ,IAAK,KAAgB;YAC7B,YAAY,IAAK,KAAgB,CAAC,EACpC,CAAC;QACD,OAAO,CAAC,EAAE,EAAE,KAAyB,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,CAAC,KAAgC,EAAE,SAAS,CAAC,CAAA;AACtD,CAAC"}

package/dist/schema/class-proxy.d.ts

@@ -0,0 +1,8 @@
+import type { ProxyCaller } from './proxy-types';
+/**
+ * Create a typed Proxy for static methods on a class.
+ *
+ * Uses an allow-list (knownMethods) — only actual static methods produce call thunks.
+ */
+export declare function createClassProxy(caller: ProxyCaller, domain: string, className: string, knownMethods?: Set<string>): unknown;
+//# sourceMappingURL=class-proxy.d.ts.map

package/dist/schema/class-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"class-proxy.d.ts","sourceRoot":"","sources":["../../src/schema/class-proxy.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAQhD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GACzB,OAAO,CA0BT"}

package/dist/schema/class-proxy.js

@@ -0,0 +1,38 @@
+import { MethodPath, Ref } from '@astrale-os/kernel-core/domain';
+import { resolveCallArgs } from './call-args';
+// Runtime walks `of_domain` via namespaced edge slugs (`class.<Name>`), so the
+// wire path has to carry the namespace prefix too. `MethodPath.from` accepts any
+// member string by design — it's the caller's job to pass the qualified form.
+/**
+ * Create a typed Proxy for static methods on a class.
+ *
+ * Uses an allow-list (knownMethods) — only actual static methods produce call thunks.
+ */
+export function createClassProxy(caller, domain, className, knownMethods) {
+    return new Proxy(Object.create(null), {
+        get(_target, prop) {
+            if (typeof prop !== 'string')
+                return undefined;
+            if (knownMethods && !knownMethods.has(prop))
+                return undefined;
+            return (paramsOrOpts, maybeOpts) => {
+                // Wire form is the qualified `:class.X:method` slug — runtime
+                // walks `of_domain` via the namespaced edge slug.
+                const wirePath = MethodPath.from({
+                    domain,
+                    member: Ref.member('class', className).toString(),
+                    memberKind: 'class',
+                    method: prop,
+                }).raw;
+                const [params, opts] = resolveCallArgs(paramsOrOpts, maybeOpts);
+                return caller(wirePath, params, opts?.credential, {
+                    timeout: opts?.timeout,
+                    signal: opts?.signal,
+                    correlationId: opts?.correlationId,
+                    url: opts?.url,
+                });
+            };
+        },
+    });
+}
+//# sourceMappingURL=class-proxy.js.map

package/dist/schema/class-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"class-proxy.js","sourceRoot":"","sources":["../../src/schema/class-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,gCAAgC,CAAA;AAKhE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C,+EAA+E;AAC/E,iFAAiF;AACjF,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAmB,EACnB,MAAc,EACd,SAAiB,EACjB,YAA0B;IAE1B,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QACpC,GAAG,CAAC,OAAO,EAAE,IAAI;YACf,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YAC9C,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAA;YAE7D,OAAO,CAAC,YAAsB,EAAE,SAA4B,EAAE,EAAE;gBAC9D,8DAA8D;gBAC9D,kDAAkD;gBAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC;oBAC/B,MAAM;oBACN,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE;oBACjD,UAAU,EAAE,OAAO;oBACnB,MAAM,EAAE,IAAI;iBACb,CAAC,CAAC,GAAG,CAAA;gBACN,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;gBAE/D,OAAO,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;oBAChD,OAAO,EAAE,IAAI,EAAE,OAAO;oBACtB,MAAM,EAAE,IAAI,EAAE,MAAM;oBACpB,aAAa,EAAE,IAAI,EAAE,aAAa;oBAClC,GAAG,EAAE,IAAI,EAAE,GAAG;iBACf,CAAC,CAAA;YACJ,CAAC,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/schema/extract.d.ts

@@ -0,0 +1,9 @@
+import type { Schema } from '@astrale-os/kernel-dsl';
+/**
+ * Extract method names per class from a builder Schema.
+ *
+ * Used by `withSchema()` to build proxy allow-lists — only properties
+ * that appear in this set produce call thunks on the proxy.
+ */
+export declare function extractMethodsByClass(schema: Schema): Map<string, Set<string>>;
+//# sourceMappingURL=extract.d.ts.map

package/dist/schema/extract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../src/schema/extract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAIpD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAS9E"}

package/dist/schema/extract.js

@@ -0,0 +1,16 @@
+import { resolveAllMethods } from '@astrale-os/kernel-dsl';
+/**
+ * Extract method names per class from a builder Schema.
+ *
+ * Used by `withSchema()` to build proxy allow-lists — only properties
+ * that appear in this set produce call thunks on the proxy.
+ */
+export function extractMethodsByClass(schema) {
+    const methodsByClass = new Map();
+    for (const [className, def] of Object.entries(schema.classes)) {
+        const methods = resolveAllMethods(def);
+        methodsByClass.set(className, new Set(Object.keys(methods)));
+    }
+    return methodsByClass;
+}
+//# sourceMappingURL=extract.js.map

package/dist/schema/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../src/schema/extract.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAE1D;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAuB,CAAA;IAErD,KAAK,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAA;QACtC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC9D,CAAC;IAED,OAAO,cAAc,CAAA;AACvB,CAAC"}

package/dist/schema/from-entries.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Convert BoundMethod[] to FunctionSchema[] for the client SchemaRegistry.
+ *
+ * Extracts the routing + shape metadata from bound methods so the client can
+ * resolve target URLs and transport modes at call time. `code` is emitted as
+ * empty strings — the client never executes handler bodies, it only dispatches
+ * to the server or follows a redirect.
+ */
+import type { FunctionSchema } from '@astrale-os/kernel-core/domain';
+import type { BoundMethod } from '@astrale-os/kernel-core/domain';
+export declare function toFunctionSchemas(methods: BoundMethod[]): FunctionSchema[];
+//# sourceMappingURL=from-entries.d.ts.map

package/dist/schema/from-entries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"from-entries.d.ts","sourceRoot":"","sources":["../../src/schema/from-entries.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAA;AAIjE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,cAAc,EAAE,CAgB1E"}

package/dist/schema/from-entries.js

@@ -0,0 +1,39 @@
+/**
+ * Convert BoundMethod[] to FunctionSchema[] for the client SchemaRegistry.
+ *
+ * Extracts the routing + shape metadata from bound methods so the client can
+ * resolve target URLs and transport modes at call time. `code` is emitted as
+ * empty strings — the client never executes handler bodies, it only dispatches
+ * to the server or follows a redirect.
+ */
+import { zodToJsonSchema } from '@astrale-os/kernel-core/domain';
+export function toFunctionSchemas(methods) {
+    return methods.map((method) => {
+        const handler = method.handler;
+        const binding = extractBinding(handler);
+        const schema = {
+            ref: method.ref,
+            inputSchema: zodToJsonSchema(method.inputSchema),
+            outputSchema: zodToJsonSchema(method.outputSchema),
+            output: method.output,
+            // Client-side schemas carry no code bodies — the client only dispatches,
+            // it never hydrates a sandbox. Empty strings satisfy the canonical shape.
+            code: { authorize: '', execute: '' },
+        };
+        if (binding)
+            schema.binding = binding;
+        return schema;
+    });
+}
+function extractBinding(handler) {
+    const { route, remoteUrl } = handler;
+    if (route === undefined && remoteUrl === undefined)
+        return undefined;
+    const binding = {};
+    if (remoteUrl !== undefined)
+        binding.remoteUrl = remoteUrl;
+    if (route !== undefined)
+        binding.route = route;
+    return binding;
+}
+//# sourceMappingURL=from-entries.js.map

package/dist/schema/from-entries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"from-entries.js","sourceRoot":"","sources":["../../src/schema/from-entries.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,UAAU,iBAAiB,CAAC,OAAsB;IACtD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAuD,CAAA;QAC9E,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,MAAM,GAAmB;YAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC;YAChD,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC;YAClD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,yEAAyE;YACzE,0EAA0E;YAC1E,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;SACrC,CAAA;QACD,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAA;QACrC,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAGvB;IACC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACpE,MAAM,OAAO,GAAoB,EAAE,CAAA;IACnC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAA;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAA;IAC9C,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/schema/index.d.ts

@@ -0,0 +1,11 @@
+export { SCHEMA_REGISTRY_BRAND, SchemaRegistry } from './registry';
+export { createSchemaClient } from './typed-client';
+export { createClassProxy } from './class-proxy';
+export { createNodeProxy } from './node-proxy';
+export { resolveMethodKey } from './resolve';
+export { resolveCallArgs } from './call-args';
+export { extractMethodsByClass } from './extract';
+export { toFunctionSchemas } from './from-entries';
+export type { FunctionSchema } from './types';
+export type { ClassNames, ClassProxy, NodeProxy, ProxyCallOptions, ProxyCaller, SchemaTypedClient, } from './proxy-types';
+//# sourceMappingURL=index.d.ts.map

package/dist/schema/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAC7C,YAAY,EACV,UAAU,EACV,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,WAAW,EACX,iBAAiB,GAClB,MAAM,eAAe,CAAA"}

package/dist/schema/index.js

@@ -0,0 +1,9 @@
+export { SCHEMA_REGISTRY_BRAND, SchemaRegistry } from './registry';
+export { createSchemaClient } from './typed-client';
+export { createClassProxy } from './class-proxy';
+export { createNodeProxy } from './node-proxy';
+export { resolveMethodKey } from './resolve';
+export { resolveCallArgs } from './call-args';
+export { extractMethodsByClass } from './extract';
+export { toFunctionSchemas } from './from-entries';
+//# sourceMappingURL=index.js.map

package/dist/schema/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA"}

package/dist/schema/node-proxy.d.ts

@@ -0,0 +1,9 @@
+import type { ProxyCaller } from './proxy-types';
+/**
+ * Create a typed Proxy for a node instance.
+ *
+ * Uses an allow-list (knownMethods) — only properties that are actual methods
+ * on the class produce call thunks. Everything else returns undefined.
+ */
+export declare function createNodeProxy(caller: ProxyCaller, className: string, nodeId: string, knownMethods?: Set<string>): unknown;
+//# sourceMappingURL=node-proxy.d.ts.map

package/dist/schema/node-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-proxy.d.ts","sourceRoot":"","sources":["../../src/schema/node-proxy.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAoB,WAAW,EAAE,MAAM,eAAe,CAAA;AAIlE;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GACzB,OAAO,CAsBT"}

package/dist/schema/node-proxy.js

@@ -0,0 +1,32 @@
+import { IdPath } from '@astrale-os/kernel-core';
+import { InstanceMethodPath } from '@astrale-os/kernel-core/domain';
+import { resolveCallArgs } from './call-args';
+/**
+ * Create a typed Proxy for a node instance.
+ *
+ * Uses an allow-list (knownMethods) — only properties that are actual methods
+ * on the class produce call thunks. Everything else returns undefined.
+ */
+export function createNodeProxy(caller, className, nodeId, knownMethods) {
+    const source = IdPath.from(nodeId);
+    return new Proxy(Object.create(null), {
+        get(_target, prop) {
+            if (typeof prop !== 'string')
+                return undefined;
+            if (knownMethods && !knownMethods.has(prop))
+                return undefined;
+            return (paramsOrOpts, maybeOpts) => {
+                const wirePath = InstanceMethodPath.from(source, prop).raw;
+                const [params, opts] = resolveCallArgs(paramsOrOpts, maybeOpts);
+                return caller(wirePath, params, opts?.credential, {
+                    timeout: opts?.timeout,
+                    signal: opts?.signal,
+                    class: className,
+                    correlationId: opts?.correlationId,
+                    url: opts?.url,
+                });
+            };
+        },
+    });
+}
+//# sourceMappingURL=node-proxy.js.map

package/dist/schema/node-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-proxy.js","sourceRoot":"","sources":["../../src/schema/node-proxy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AAInE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAE7C;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAmB,EACnB,SAAiB,EACjB,MAAc,EACd,YAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAgB,CAAC,CAAA;IAE5C,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QACpC,GAAG,CAAC,OAAO,EAAE,IAAI;YACf,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YAC9C,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,SAAS,CAAA;YAE7D,OAAO,CAAC,YAAsB,EAAE,SAA4B,EAAE,EAAE;gBAC9D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAA;gBAC1D,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;gBAE/D,OAAO,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;oBAChD,OAAO,EAAE,IAAI,EAAE,OAAO;oBACtB,MAAM,EAAE,IAAI,EAAE,MAAM;oBACpB,KAAK,EAAE,SAAS;oBAChB,aAAa,EAAE,IAAI,EAAE,aAAa;oBAClC,GAAG,EAAE,IAAI,EAAE,GAAG;iBACf,CAAC,CAAA;YACJ,CAAC,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/schema/proxy-types.d.ts

@@ -0,0 +1,112 @@
+import type { CredentialInput, z } from '@astrale-os/kernel-core';
+import type { AllMethods, ExtractMethodNames, ExtractMethodParams, ExtractMethodReturnValue, Schema } from '@astrale-os/kernel-dsl';
+import type { CallOptions } from '../client/config';
+/** Extract a class Def from a Schema by class name. */
+type DefOf<S extends Schema, K extends string> = K extends keyof S['classes'] ? S['classes'][K] : never;
+/** All class names in a Schema. */
+export type ClassNames<S extends Schema> = keyof S['classes'] & string;
+/** True if method M on def D is static. */
+type IsStaticMethod<D, M extends string> = M extends keyof AllMethods<D> ? AllMethods<D>[M] extends {
+    config: {
+        static: true;
+    };
+} ? true : false : false;
+/** Instance method names (non-static). */
+type InstanceMethodNames<D> = {
+    [M in ExtractMethodNames<D>]: IsStaticMethod<D, M> extends true ? never : M;
+}[ExtractMethodNames<D>];
+/** Static method names. */
+type StaticMethodNames<D> = {
+    [M in ExtractMethodNames<D>]: IsStaticMethod<D, M> extends true ? M : never;
+}[ExtractMethodNames<D>];
+/**
+ * Infer runtime param type from a Zod ParamShape.
+ *
+ * Preserves optionality: keys whose Zod schema is `z.optional()` or
+ * `z.default()` become TypeScript-optional, so callers can omit them.
+ */
+type OptionalKeys<P> = {
+    [K in keyof P]: P[K] extends z.ZodOptional<any> | z.ZodDefault<any> ? K : never;
+}[keyof P];
+type RequiredKeys<P> = Exclude<keyof P, OptionalKeys<P>>;
+type InferParams<P> = {
+    [K in RequiredKeys<P>]: P[K] extends z.ZodType<infer T> ? T : never;
+} & {
+    [K in OptionalKeys<P>]?: P[K] extends z.ZodType<infer T> ? T : never;
+};
+/** Infer runtime param type from a method's params. */
+type MethodParams<D, M extends string> = InferParams<ExtractMethodParams<D, M>>;
+/** True if params is empty (no required fields). */
+type IsEmptyParams<P> = keyof P extends never ? true : false;
+/**
+ * Call signature for a single method.
+ * Empty-params: (opts?) => Promise<R>
+ * With params:  (params, opts?) => Promise<R>
+ */
+type MethodCall<D, M extends string> = IsEmptyParams<MethodParams<D, M>> extends true ? (opts?: ProxyCallOptions) => Promise<ExtractMethodReturnValue<D, M>> : (params: MethodParams<D, M>, opts?: ProxyCallOptions) => Promise<ExtractMethodReturnValue<D, M>>;
+/**
+ * Typed proxy for a node instance — exposes non-static methods.
+ *
+ * ```typescript
+ * const doc = app.node('Document', nodeId)
+ * await doc.get()                         // typed return
+ * await doc.summary({ maxLength: 100 })   // typed params
+ * ```
+ */
+export type NodeProxy<S extends Schema, K extends string> = {
+    [M in InstanceMethodNames<DefOf<S, K>>]: MethodCall<DefOf<S, K>, M & string>;
+};
+/**
+ * Typed proxy for static methods — no node instance needed.
+ *
+ * ```typescript
+ * const Domain = app.static('Domain')
+ * await Domain.init({ parent: { id: rootId }, domain: 'foo' })
+ * ```
+ */
+export type ClassProxy<S extends Schema, K extends string> = {
+    [M in StaticMethodNames<DefOf<S, K>>]: MethodCall<DefOf<S, K>, M & string>;
+};
+export type ProxyCallOptions = {
+    timeout?: number;
+    signal?: AbortSignal;
+    credential?: CredentialInput;
+    /**
+     * Caller-provided correlation id — threaded into every `ClientHooks`
+     * context and onto any thrown error's `.details.correlationId`.
+     */
+    correlationId?: string;
+    /**
+     * Override target URL for this call only. Used by orchestrators
+     * (layer D) to retarget after a redirect.
+     */
+    url?: string;
+};
+/**
+ * A function that sends a method call through the client.
+ *
+ * Created at withSchema() time — closes over the client and its
+ * credential strategy. Proxies call this without knowing which
+ * client type they're working with.
+ */
+export type ProxyCaller = (method: string, params: Record<string, unknown>, credential?: CredentialInput, callOpts?: CallOptions) => Promise<unknown>;
+/**
+ * A KernelClient view bound to a specific schema.
+ * Provides typed `node()` and `static()` without repeating the schema.
+ */
+export interface SchemaTypedClient<S extends Schema> {
+    /**
+     * Create a typed proxy for a node instance.
+     * Exposes non-static methods. CallTransport format: @nodeId::method
+     */
+    node<K extends ClassNames<S>>(className: K, nodeId: string): NodeProxy<S, K>;
+    /**
+     * Create a typed proxy for static methods.
+     * CallTransport format: /:domain:ClassName:method
+     */
+    static<K extends ClassNames<S>>(className: K): ClassProxy<S, K>;
+    /** The bound schema (runtime value). */
+    readonly schema: S;
+}
+export {};
+//# sourceMappingURL=proxy-types.d.ts.map

package/dist/schema/proxy-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-types.d.ts","sourceRoot":"","sources":["../../src/schema/proxy-types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,KAAK,EACV,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,MAAM,EACP,MAAM,wBAAwB,CAAA;AAE/B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAInD,uDAAuD;AACvD,KAAK,KAAK,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,MAAM,CAAC,CAAC,SAAS,CAAC,GACzE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GACf,KAAK,CAAA;AAET,mCAAmC;AACnC,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,MAAM,IAAI,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,MAAM,CAAA;AAItE,2CAA2C;AAC3C,KAAK,cAAc,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,MAAM,UAAU,CAAC,CAAC,CAAC,GACpE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;IAAE,MAAM,EAAE;QAAE,MAAM,EAAE,IAAI,CAAA;KAAE,CAAA;CAAE,GACnD,IAAI,GACJ,KAAK,GACP,KAAK,CAAA;AAIT,0CAA0C;AAC1C,KAAK,mBAAmB,CAAC,CAAC,IAAI;KAC3B,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,GAAG,KAAK,GAAG,CAAC;CAC5E,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAA;AAExB,2BAA2B;AAC3B,KAAK,iBAAiB,CAAC,CAAC,IAAI;KACzB,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK;CAC5E,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAA;AAIxB;;;;;GAKG;AACH,KAAK,YAAY,CAAC,CAAC,IAAI;KACpB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK;CAChF,CAAC,MAAM,CAAC,CAAC,CAAA;AACV,KAAK,YAAY,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAA;AACxD,KAAK,WAAW,CAAC,CAAC,IAAI;KACnB,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK;CACpE,GAAG;KACD,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK;CACrE,CAAA;AAED,uDAAuD;AACvD,KAAK,YAAY,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,IAAI,WAAW,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AAE/E,oDAAoD;AACpD,KAAK,aAAa,CAAC,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,GAAG,IAAI,GAAG,KAAK,CAAA;AAE5D;;;;GAIG;AACH,KAAK,UAAU,CAAC,CAAC,EAAE,CAAC,SAAS,MAAM,IACjC,aAAa,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,GAC1C,CAAC,IAAI,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACpE,CACE,MAAM,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,IAAI,CAAC,EAAE,gBAAgB,KACpB,OAAO,CAAC,wBAAwB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AAIlD;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,IAAI;KACzD,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;CAC7E,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,IAAI;KAC1D,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;CAC3E,CAAA;AAID,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb,CAAA;AAID;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,CAAC,EAAE,eAAe,EAC5B,QAAQ,CAAC,EAAE,WAAW,KACnB,OAAO,CAAC,OAAO,CAAC,CAAA;AAIrB;;;GAGG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,MAAM;IACjD;;;OAGG;IACH,IAAI,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAE5E;;;OAGG;IACH,MAAM,CAAC,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAE/D,wCAAwC;IACxC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;CACnB"}

package/dist/schema/proxy-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=proxy-types.js.map

package/dist/schema/proxy-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-types.js","sourceRoot":"","sources":["../../src/schema/proxy-types.ts"],"names":[],"mappings":""}

package/dist/schema/registry.d.ts

@@ -0,0 +1,51 @@
+import type { FunctionSchema } from './types';
+/**
+ * Cross-realm brand so `isSchemaRegistry(x)` works even when two copies
+ * of `@astrale-os/kernel-client` end up in the same process (peer-dep
+ * drift, iframe + parent page, etc). `instanceof SchemaRegistry` fails
+ * in that case; the Symbol.for-based check does not.
+ */
+export declare const SCHEMA_REGISTRY_BRAND: unique symbol;
+/**
+ * Client-side cache of function schemas keyed by canonical ref.
+ *
+ * Two ways to populate it:
+ *   - `load(schemas)` — one-shot, rejects duplicates. Used when the caller
+ *     brings the schemas with them (static domain imports, `Function.list`
+ *     prefetch).
+ *   - `save(schema)` — upsert learned from a redirect response. Strict:
+ *     input/output/output-mode must match any existing entry; only `binding`
+ *     is allowed to change (URL relocation is legitimate, contract drift is
+ *     not).
+ */
+export declare class SchemaRegistry {
+    readonly [SCHEMA_REGISTRY_BRAND] = true;
+    private methods;
+    load(schemas: FunctionSchema[]): void;
+    /**
+     * Upsert a schema — typically one learned from a `redirect` response.
+     *
+     * If no entry exists for the ref, inserts verbatim. If an entry exists,
+     * asserts that the contract shape (input / output / output mode) matches
+     * and updates only the `binding`. Contract drift throws — a server that
+     * ships a mismatched schema is either misconfigured or malicious.
+     */
+    save(schema: FunctionSchema): void;
+    get(ref: string): FunctionSchema | undefined;
+    has(ref: string): boolean;
+    clear(): void;
+    /**
+     * Type guard for `SchemaRegistry | FunctionSchema[]` unions. Works
+     * across package-duplicate realms, unlike `instanceof`.
+     */
+    static is(value: unknown): value is SchemaRegistry;
+    /**
+     * Resolve a wire method address to its schema entry.
+     *
+     * Delegates normalization to `resolveMethodKey`. When the input lacks a
+     * namespace (an instance dispatch or a `:member:method` path), probes the
+     * `class` and `interface` namespaces in that order.
+     */
+    resolve(method: string, classHint?: string): FunctionSchema | undefined;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/schema/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/schema/registry.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAA;AAM7C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,eAAuC,CAAA;AAEzE;;;;;;;;;;;GAWG;AACH,qBAAa,cAAc;IACzB,QAAQ,CAAC,CAAC,qBAAqB,CAAC,QAAO;IACvC,OAAO,CAAC,OAAO,CAAoC;IAEnD,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,IAAI,CAWpC;IAED;;;;;;;OAOG;IACH,IAAI,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAcjC;IAED,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE3C;IAED,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAExB;IAED,KAAK,IAAI,IAAI,CAEZ;IAED;;;OAGG;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAMjD;IAED;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAUtE;CACF"}