@astrale-os/kernel-client 0.2.0

package/dist/session/config.d.ts

@@ -0,0 +1,157 @@
+import type { CredentialInput } from '@astrale-os/kernel-core';
+import type { SelfIdentityExpr, UnresolvedIdentityExpr } from '@astrale-os/kernel-core/expression';
+import type { ClientLogger, Protocol, CallTransport } from '../client/config';
+import type { FnMap } from '../client/fn-map';
+import type { DelegationCache, DelegationCacheConfig } from '../delegation/cache';
+import type { DelegationPolicy } from '../delegation/policy';
+import type { SchemaPersistence } from '../persistence/persistence';
+import type { ClientPool, ClientPoolConfig } from '../pool/pool';
+import type { RedirectPolicy } from '../redirect/policy';
+import type { SchemaRegistry } from '../schema/registry';
+import type { FunctionSchema } from '../schema/types';
+import type { ClientSessionHooks } from './hooks';
+/**
+ * Picker shape — either a static credential, a sync function, or an
+ * async function. `typeof identity === 'function'` is the discriminator.
+ * ClientSession calls the function on every `session.call` that doesn't override
+ * via `opts.credential`.
+ */
+export type IdentityInput = CredentialInput | (() => CredentialInput | Promise<CredentialInput>) | (() => undefined | Promise<undefined>);
+export type ClientSessionConfig<M extends FnMap = FnMap> = {
+    /** Default kernel URL used when `ClientSessionCallOptions.url` is absent — mandatory (§4.3). */
+    default: string;
+    /**
+     * Identity picker. Accepts a function (sync or async), a static
+     * credential value (for per-invocation tools), or `undefined`
+     * (callers must supply `opts.credential` on every call).
+     */
+    identity?: IdentityInput;
+    /**
+     * Redirect policy. If `undefined`, every redirect is followed
+     * (equivalent to `allowAllPolicy()`). Consumers who want to gate
+     * redirects pass `allowlistPolicy` / `promptPolicy` / `strictPolicy`.
+     */
+    redirect?: RedirectPolicy;
+    /**
+     * Maximum redirect hops (default 3). The (maxHops+1)-th hop throws
+     * `HopLimitExceededError`. Per-call override via `ClientSessionCallOptions.maxHops`.
+     */
+    maxHops?: number;
+    /**
+     * Delegation cache. If `undefined`, cross-audience dispatches (direct-dial
+     * to non-default, redirect to non-default) dispatch with the base credential —
+     * the kernel likely rejects, and a plain `AuthenticationError` surfaces.
+     */
+    delegation?: DelegationCacheConfig | DelegationCache;
+    /**
+     * Delegation policy — audience + scope derivation + consent. When
+     * `undefined`, ClientSession uses `allowAllDelegations({ default: config.default })`
+     * which returns `origin` for any target whose origin differs from the
+     * default's origin, and implicitly allows all mints.
+     */
+    delegationPolicy?: DelegationPolicy;
+    /**
+     * Client pool. Always present internally (§4.4). If `undefined`, ClientSession
+     * constructs a default `ClientPool` with `maxSize: 32` and a default
+     * `clientFactory` that constructs `KernelClient` bound to the shared
+     * `SchemaRegistry`.
+     */
+    pool?: ClientPoolConfig<M> | ClientPool<M>;
+    /**
+     * Custom `fetch` forwarded to the default `clientFactory`'s `KernelClient`s
+     * — the wire-layer shim seam. Use it to wrap requests (e.g. a same-origin
+     * wrapper that adds `credentials:'include'` and refresh-on-401 for a
+     * cookie-fronted SPA). Ignored when a custom `pool`/`clientFactory` is
+     * supplied (those own their own wiring). Default: global fetch.
+     */
+    fetch?: typeof fetch;
+    /**
+     * Schema persistence adapter. If `undefined`, the registry lives
+     * in-memory for the ClientSession's lifetime.
+     */
+    schemaStore?: SchemaPersistence;
+    /**
+     * Preloaded schemas OR an external `SchemaRegistry`. Precedence with
+     * `schemaStore` pinned in §7.3.
+     */
+    schema?: FunctionSchema[] | SchemaRegistry;
+    /** Orchestration-level hooks, composed with but not wrapping ClientHooks (§12.1). */
+    hooks?: ClientSessionHooks;
+    /** Logger for hook-failure diagnostics and orchestration-internal warnings. */
+    logger?: ClientLogger;
+};
+export type ClientSessionCallOptions = {
+    /** Per-call timeout override (ms). Applies to every hop independently. */
+    timeout?: number;
+    /** Abort signal — propagates to every hop of a redirect follow chain. */
+    signal?: AbortSignal;
+    /** Class context for instance-method schema resolution (same as client). */
+    class?: string;
+    /**
+     * Per-call URL override. Redirect follow-ups use the redirection's
+     * URL, NOT this override.
+     */
+    url?: string;
+    /**
+     * Per-call transport override (`'http' | 'ws'`). Hop-1 only; subsequent
+     * hops pick their transport from the schema of the new target.
+     */
+    transport?: CallTransport;
+    /**
+     * Per-call protocol override (`'envelope' | 'auto'`). `'auto'` uses
+     * the schema's `RouteBinding` when present and the transport is HTTP,
+     * else envelope. Hop-1 only.
+     */
+    protocol?: Protocol;
+    /**
+     * Caller-provided correlation id. If absent, ClientSession generates one and
+     * threads it through every hop, hook ctx, and thrown error.
+     */
+    correlationId?: string;
+    /**
+     * Per-call credential override. Skips the picker for this call only.
+     */
+    credential?: CredentialInput;
+    /**
+     * Per-call delegation-expression override. When the call's target
+     * requires a delegation (§11.4), this `UnresolvedIdentityExpr` is passed
+     * to the mint instead of `DelegationPolicy.delegationFor`'s output.
+     * `undefined` = defer to policy; the kernel-core builder exports
+     * `scopedSelf(scopes)` for the common "narrow self-delegation" case.
+     */
+    delegation?: UnresolvedIdentityExpr;
+    /**
+     * Per-call attestation override. Carried into the mint's outer envelope
+     * unchanged. `undefined` = defer to `DelegationPolicy.attestationFor`;
+     * if that is also absent, the mint omits the attestation param and the
+     * kernel adapter defaults it to `{ kind: 'identity', self: true }`.
+     */
+    attestation?: SelfIdentityExpr;
+    /**
+     * Per-call delegation bypass. When `true`, ClientSession skips the entire
+     * pre-dispatch delegation block (§8.1 step ④) — `audienceFor` is NOT
+     * called, no mint fires, no policy consent runs. The base credential
+     * (`opts.credential` or the picker) dispatches as-is on every hop.
+     *
+     * Use when the host holds a credential it knows is valid for the target
+     * audience (external bearer, pre-minted delegation, test fixture)
+     * without the policy wrapping it in another delegation. `opts.delegation`
+     * / `opts.attestation` are ignored when this is `true` — the bypass is
+     * total.
+     */
+    skipDelegation?: boolean;
+    /**
+     * Per-call hop cap override. `0` = refuse any redirect. `N >= 1` =
+     * follow up to N. `undefined` = use `ClientSessionConfig.maxHops`.
+     */
+    maxHops?: number;
+    /**
+     * Target-of-call ref for instance-method dispatch (e.g. `@<nodeId>`
+     * or `/path/to/node`). Forwarded as `KernelRequest.self` on the
+     * outbound envelope — sibling of params, never merged into them.
+     * Set by the CLI when rewriting `@<id>::method` and propagated
+     * across redirect hops via `CallRedirection.self`.
+     */
+    self?: string;
+};
+//# sourceMappingURL=config.d.ts.map

package/dist/session/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/session/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAA;AAElG,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAC7E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AACjF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAA;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAA;AAEjD;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,GAClD,CAAC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;AAE1C,MAAM,MAAM,mBAAmB,CAAC,CAAC,SAAS,KAAK,GAAG,KAAK,IAAI;IACzD,gGAAgG;IAChG,OAAO,EAAE,MAAM,CAAA;IAEf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,aAAa,CAAA;IAExB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAA;IAEzB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAEhB;;;;OAIG;IACH,UAAU,CAAC,EAAE,qBAAqB,GAAG,eAAe,CAAA;IAEpD;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IAEnC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAA;IAE1C;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IAEpB;;;OAGG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAE/B;;;OAGG;IACH,MAAM,CAAC,EAAE,cAAc,EAAE,GAAG,cAAc,CAAA;IAE1C,qFAAqF;IACrF,KAAK,CAAC,EAAE,kBAAkB,CAAA;IAE1B,+EAA+E;IAC/E,MAAM,CAAC,EAAE,YAAY,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,SAAS,CAAC,EAAE,aAAa,CAAA;IACzB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;OAEG;IACH,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAA;IACnC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,gBAAgB,CAAA;IAC9B;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAAA"}

package/dist/session/config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=config.js.map

package/dist/session/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/session/config.ts"],"names":[],"mappings":""}

package/dist/session/errors/index.d.ts

@@ -0,0 +1,6 @@
+export { IdentityPickerError, PersistenceLoadFailedError, RegistryWriteFailedError, SchemaOwnershipConflictError, UnresolvedIdentityError, } from './session-errors';
+export { ClientSessionError } from '../../errors/session-error';
+export { DelegationMintError, DelegationPolicyError, DelegationRefusedError, } from '../../delegation/errors';
+export { PoolClosedError } from '../../pool/errors';
+export { HopLimitExceededError, RedirectPolicyError, RedirectRefusedError, } from '../../redirect/errors';
+//# sourceMappingURL=index.d.ts.map

package/dist/session/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/session/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,kBAAkB,CAAA;AAIzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,uBAAuB,CAAA"}

package/dist/session/errors/index.js

@@ -0,0 +1,8 @@
+export { IdentityPickerError, PersistenceLoadFailedError, RegistryWriteFailedError, SchemaOwnershipConflictError, UnresolvedIdentityError, } from './session-errors';
+// Re-exports so consumers catching every ClientSession-thrown shape have one
+// import surface — each still ships from its owning subpath.
+export { ClientSessionError } from '../../errors/session-error';
+export { DelegationMintError, DelegationPolicyError, DelegationRefusedError, } from '../../delegation/errors';
+export { PoolClosedError } from '../../pool/errors';
+export { HopLimitExceededError, RedirectPolicyError, RedirectRefusedError, } from '../../redirect/errors';
+//# sourceMappingURL=index.js.map

package/dist/session/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/session/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,kBAAkB,CAAA;AAEzB,6EAA6E;AAC7E,6DAA6D;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,uBAAuB,CAAA"}

package/dist/session/errors/session-errors.d.ts

@@ -0,0 +1,52 @@
+import { ClientSessionError } from '../../errors/session-error';
+/**
+ * No credential could be resolved for a call.
+ *
+ * Thrown when `ClientSessionCallOptions.credential` is absent, the identity
+ * picker returned `undefined`, or the bound-view captured credential is
+ * unresolvable.
+ */
+export declare class UnresolvedIdentityError extends ClientSessionError {
+    constructor(message?: string);
+}
+/**
+ * The identity picker function threw.
+ *
+ * Wraps the original error as `cause`. Consumers that want to surface
+ * a sign-in prompt typically switch on `UnresolvedIdentityError` and
+ * this class together.
+ */
+export declare class IdentityPickerError extends ClientSessionError {
+    constructor(options?: ErrorOptions);
+}
+/**
+ * A schema learned on redirect was rejected by the registry's
+ * contract-drift check.
+ *
+ * Wraps the registry's error as `cause`. The current hop's schema
+ * disagrees with a previously-registered shape for the same ref —
+ * either a misconfigured kernel or an incompatible version.
+ */
+export declare class RegistryWriteFailedError extends ClientSessionError {
+    readonly ref: string;
+    constructor(ref: string, options?: ErrorOptions);
+}
+/**
+ * Caller passed both a pre-built `SchemaRegistry` and a `SchemaPersistence`
+ * adapter. ClientSession refuses to wire persistence onto a caller-owned registry
+ * to avoid double-writes or ordering corruption — wire persistence yourself
+ * or let ClientSession construct the registry.
+ */
+export declare class SchemaOwnershipConflictError extends ClientSessionError {
+    constructor();
+}
+/**
+ * `SchemaPersistence.load()` threw during ClientSession construction.
+ *
+ * Wraps the adapter's error as `cause`. ClientSession aborts construction
+ * rather than proceed with a half-loaded registry.
+ */
+export declare class PersistenceLoadFailedError extends ClientSessionError {
+    constructor(options?: ErrorOptions);
+}
+//# sourceMappingURL=session-errors.d.ts.map

package/dist/session/errors/session-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-errors.d.ts","sourceRoot":"","sources":["../../../src/session/errors/session-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAE/D;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,kBAAkB;IAC7D,YAAY,OAAO,SAAyC,EAG3D;CACF;AAED;;;;;;GAMG;AACH,qBAAa,mBAAoB,SAAQ,kBAAkB;IACzD,YAAY,OAAO,CAAC,EAAE,YAAY,EAGjC;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,wBAAyB,SAAQ,kBAAkB;aAE5C,GAAG,EAAE,MAAM;IAD7B,YACkB,GAAG,EAAE,MAAM,EAC3B,OAAO,CAAC,EAAE,YAAY,EAIvB;CACF;AAED;;;;;GAKG;AACH,qBAAa,4BAA6B,SAAQ,kBAAkB;IAClE,cAQC;CACF;AAED;;;;;GAKG;AACH,qBAAa,0BAA2B,SAAQ,kBAAkB;IAChE,YAAY,OAAO,CAAC,EAAE,YAAY,EAGjC;CACF"}

package/dist/session/errors/session-errors.js

@@ -0,0 +1,70 @@
+import { ClientSessionError } from '../../errors/session-error';
+/**
+ * No credential could be resolved for a call.
+ *
+ * Thrown when `ClientSessionCallOptions.credential` is absent, the identity
+ * picker returned `undefined`, or the bound-view captured credential is
+ * unresolvable.
+ */
+export class UnresolvedIdentityError extends ClientSessionError {
+    constructor(message = 'No credential resolved for this call') {
+        super(message, 'IDENTITY_UNRESOLVED');
+        this.name = 'UnresolvedIdentityError';
+    }
+}
+/**
+ * The identity picker function threw.
+ *
+ * Wraps the original error as `cause`. Consumers that want to surface
+ * a sign-in prompt typically switch on `UnresolvedIdentityError` and
+ * this class together.
+ */
+export class IdentityPickerError extends ClientSessionError {
+    constructor(options) {
+        super('Identity picker threw', 'IDENTITY_PICKER_THREW', options);
+        this.name = 'IdentityPickerError';
+    }
+}
+/**
+ * A schema learned on redirect was rejected by the registry's
+ * contract-drift check.
+ *
+ * Wraps the registry's error as `cause`. The current hop's schema
+ * disagrees with a previously-registered shape for the same ref —
+ * either a misconfigured kernel or an incompatible version.
+ */
+export class RegistryWriteFailedError extends ClientSessionError {
+    ref;
+    constructor(ref, options) {
+        super(`Registry write failed for "${ref}"`, 'REGISTRY_WRITE_FAILED', options);
+        this.ref = ref;
+        this.name = 'RegistryWriteFailedError';
+    }
+}
+/**
+ * Caller passed both a pre-built `SchemaRegistry` and a `SchemaPersistence`
+ * adapter. ClientSession refuses to wire persistence onto a caller-owned registry
+ * to avoid double-writes or ordering corruption — wire persistence yourself
+ * or let ClientSession construct the registry.
+ */
+export class SchemaOwnershipConflictError extends ClientSessionError {
+    constructor() {
+        super('ClientSessionConfig.schema (SchemaRegistry) is incompatible with ClientSessionConfig.schemaStore. ' +
+            'Pass only the registry and wire persistence yourself, or pass only schemaStore + ' +
+            'let ClientSession construct the registry.', 'SCHEMA_OWNERSHIP_CONFLICT');
+        this.name = 'SchemaOwnershipConflictError';
+    }
+}
+/**
+ * `SchemaPersistence.load()` threw during ClientSession construction.
+ *
+ * Wraps the adapter's error as `cause`. ClientSession aborts construction
+ * rather than proceed with a half-loaded registry.
+ */
+export class PersistenceLoadFailedError extends ClientSessionError {
+    constructor(options) {
+        super('SchemaPersistence.load() threw', 'PERSISTENCE_LOAD_FAILED', options);
+        this.name = 'PersistenceLoadFailedError';
+    }
+}
+//# sourceMappingURL=session-errors.js.map

package/dist/session/errors/session-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-errors.js","sourceRoot":"","sources":["../../../src/session/errors/session-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAE/D;;;;;;GAMG;AACH,MAAM,OAAO,uBAAwB,SAAQ,kBAAkB;IAC7D,YAAY,OAAO,GAAG,sCAAsC;QAC1D,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAA;QACrC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,mBAAoB,SAAQ,kBAAkB;IACzD,YAAY,OAAsB;QAChC,KAAK,CAAC,uBAAuB,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAA;QAChE,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAyB,SAAQ,kBAAkB;IAE5C,GAAG;IADrB,YACkB,GAAW,EAC3B,OAAsB;QAEtB,KAAK,CAAC,8BAA8B,GAAG,GAAG,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAA;mBAH7D,GAAG;QAInB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;IACxC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,4BAA6B,SAAQ,kBAAkB;IAClE;QACE,KAAK,CACH,oGAAoG;YAClG,mFAAmF;YACnF,2CAA2C,EAC7C,2BAA2B,CAC5B,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;IAC5C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,0BAA2B,SAAQ,kBAAkB;IAChE,YAAY,OAAsB;QAChC,KAAK,CAAC,gCAAgC,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA;QAC3E,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAA;IAC1C,CAAC;CACF"}

package/dist/session/forward.d.ts

@@ -0,0 +1,14 @@
+import type { CallOptions } from '../client/config';
+import type { ClientSessionCallOptions } from './config';
+/**
+ * Assemble the `CallOptions` forwarded to `client.send` for one hop.
+ * Per-hop fields (timeout/signal/class/self) forward every hop. The `url` is
+ * hop-specific: hop 0 uses the caller's `opts.url`; redirect follow-ups use
+ * `redirectTarget` (the URL the kernel redirected to), so the per-request URL
+ * builder retargets verbatim instead of falling back to the schema binding.
+ * transport/protocol stay hop-0-only — follow-ups pick them from the new
+ * target's schema. `credential`, `maxHops`, `correlationId` are consumed by
+ * ClientSession itself and not forwarded here.
+ */
+export declare function forwardedFor(opts: ClientSessionCallOptions | undefined, hopIndex: number, redirectTarget?: string): CallOptions;
+//# sourceMappingURL=forward.d.ts.map

package/dist/session/forward.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forward.d.ts","sourceRoot":"","sources":["../../src/session/forward.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAA;AAExD;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,wBAAwB,GAAG,SAAS,EAC1C,QAAQ,EAAE,MAAM,EAChB,cAAc,CAAC,EAAE,MAAM,GACtB,WAAW,CA0Bb"}

package/dist/session/forward.js

@@ -0,0 +1,44 @@
+/**
+ * Assemble the `CallOptions` forwarded to `client.send` for one hop.
+ * Per-hop fields (timeout/signal/class/self) forward every hop. The `url` is
+ * hop-specific: hop 0 uses the caller's `opts.url`; redirect follow-ups use
+ * `redirectTarget` (the URL the kernel redirected to), so the per-request URL
+ * builder retargets verbatim instead of falling back to the schema binding.
+ * transport/protocol stay hop-0-only — follow-ups pick them from the new
+ * target's schema. `credential`, `maxHops`, `correlationId` are consumed by
+ * ClientSession itself and not forwarded here.
+ */
+export function forwardedFor(opts, hopIndex, redirectTarget) {
+    const out = {};
+    if (!opts) {
+        // No caller opts, but a redirect follow-up still needs its target on the wire.
+        if (hopIndex > 0 && redirectTarget !== undefined)
+            out.url = redirectTarget;
+        return out;
+    }
+    if (opts.timeout !== undefined)
+        out.timeout = opts.timeout;
+    if (opts.signal !== undefined)
+        out.signal = opts.signal;
+    if (opts.class !== undefined)
+        out.class = opts.class;
+    // `self` forwards every hop; `redirection.self` replaces it on follow.
+    if (opts.self !== undefined)
+        out.self = opts.self;
+    if (hopIndex === 0) {
+        if (opts.url !== undefined)
+            out.url = opts.url;
+        if (opts.transport !== undefined)
+            out.transport = opts.transport;
+        if (opts.protocol !== undefined)
+            out.protocol = opts.protocol;
+    }
+    else if (redirectTarget !== undefined) {
+        // Redirect-resolved endpoint (path + placeholders intact) → dial verbatim.
+        // http-envelope `targetFor` only appends a trailing slash to a server root
+        // (the kernel envelope, hop 0); a worker route URL must be dialed as-is.
+        out.url = redirectTarget;
+    }
+    return out;
+}
+//# sourceMappingURL=forward.js.map

package/dist/session/forward.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forward.js","sourceRoot":"","sources":["../../src/session/forward.ts"],"names":[],"mappings":"AAGA;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,IAA0C,EAC1C,QAAgB,EAChB,cAAuB;IAEvB,MAAM,GAAG,GAAgB,EAAE,CAAA;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,+EAA+E;QAC/E,IAAI,QAAQ,GAAG,CAAC,IAAI,cAAc,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,GAAG,cAAc,CAAA;QAC1E,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IACvD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACpD,uEAAuE;IACvE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;IAEjD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;QAC9C,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAChE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC/D,CAAC;SAAM,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACxC,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,GAAG,CAAC,GAAG,GAAG,cAAc,CAAA;IAC1B,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/session/helpers.d.ts

@@ -0,0 +1,23 @@
+import type { CallRedirection } from '@astrale-os/kernel-api';
+import type { ClientSessionErrorCtx } from './hooks';
+/**
+ * Unwrap a successful `SendResult` / `SendStreamResult` / `SendBinaryResult`
+ * to the post-orchestration shape ClientSession hands back to the caller. Redirect
+ * results are handled on the dispatch loop; passing one here is a bug.
+ */
+export declare function unwrapResult(result: {
+    kind: 'value' | 'stream' | 'binary' | 'redirect';
+    value?: unknown;
+    chunks?: unknown;
+    response?: unknown;
+    redirection?: CallRedirection;
+}): unknown;
+export declare function freezeHops<T>(arr: readonly T[]): ReadonlyArray<T>;
+/** Non-cryptographic correlation id; `sh-` prefix disambiguates from caller-supplied cids. */
+export declare function generateCid(): string;
+/**
+ * Map an error to a `ClientSessionErrorCtx.context`. Specific subclasses first,
+ * `ClientSessionError` catch-all next, wire `'transport'` last.
+ */
+export declare function classifyError(err: unknown): ClientSessionErrorCtx['context'];
+//# sourceMappingURL=helpers.d.ts.map

package/dist/session/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/session/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAA;AAiBpD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE;IACnC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAA;IAChD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,WAAW,CAAC,EAAE,eAAe,CAAA;CAC9B,GAAG,OAAO,CAWV;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAEjE;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,IAAI,MAAM,CAGpC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAY5E"}

package/dist/session/helpers.js

@@ -0,0 +1,56 @@
+import { DelegationMintError, DelegationPolicyError, DelegationRefusedError, } from '../delegation/errors';
+import { ClientSessionError } from '../errors/session-error';
+import { PoolClosedError } from '../pool/errors';
+import { RedirectPolicyError } from '../redirect/errors';
+import { IdentityPickerError, PersistenceLoadFailedError, RegistryWriteFailedError, UnresolvedIdentityError, } from './errors/session-errors';
+/**
+ * Unwrap a successful `SendResult` / `SendStreamResult` / `SendBinaryResult`
+ * to the post-orchestration shape ClientSession hands back to the caller. Redirect
+ * results are handled on the dispatch loop; passing one here is a bug.
+ */
+export function unwrapResult(result) {
+    switch (result.kind) {
+        case 'value':
+            return result.value;
+        case 'stream':
+            return result.chunks;
+        case 'binary':
+            return result.response;
+        case 'redirect':
+            throw new Error('Unreachable: redirect passed to unwrapResult');
+    }
+}
+export function freezeHops(arr) {
+    return Object.freeze([...arr]);
+}
+/** Non-cryptographic correlation id; `sh-` prefix disambiguates from caller-supplied cids. */
+export function generateCid() {
+    const r = Math.random().toString(36).slice(2, 10);
+    return `sh-${Date.now().toString(36)}-${r}`;
+}
+/**
+ * Map an error to a `ClientSessionErrorCtx.context`. Specific subclasses first,
+ * `ClientSessionError` catch-all next, wire `'transport'` last.
+ */
+export function classifyError(err) {
+    if (err instanceof RegistryWriteFailedError)
+        return 'registry';
+    if (err instanceof PersistenceLoadFailedError)
+        return 'persistence.load';
+    if (err instanceof RedirectPolicyError)
+        return 'redirect.policy';
+    if (err instanceof DelegationPolicyError)
+        return 'delegation.policy';
+    if (err instanceof DelegationMintError)
+        return 'delegation.mint';
+    if (err instanceof DelegationRefusedError)
+        return 'delegation.refused';
+    if (err instanceof UnresolvedIdentityError || err instanceof IdentityPickerError)
+        return 'identity';
+    if (err instanceof PoolClosedError)
+        return 'session';
+    if (err instanceof ClientSessionError)
+        return 'session';
+    return 'transport';
+}
+//# sourceMappingURL=helpers.js.map

package/dist/session/helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/session/helpers.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,yBAAyB,CAAA;AAEhC;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAM5B;IACC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,MAAM,CAAA;QACtB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,QAAQ,CAAA;QACxB,KAAK,UAAU;YACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAI,GAAiB;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACjD,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,wBAAwB;QAAE,OAAO,UAAU,CAAA;IAC9D,IAAI,GAAG,YAAY,0BAA0B;QAAE,OAAO,kBAAkB,CAAA;IACxE,IAAI,GAAG,YAAY,mBAAmB;QAAE,OAAO,iBAAiB,CAAA;IAChE,IAAI,GAAG,YAAY,qBAAqB;QAAE,OAAO,mBAAmB,CAAA;IACpE,IAAI,GAAG,YAAY,mBAAmB;QAAE,OAAO,iBAAiB,CAAA;IAChE,IAAI,GAAG,YAAY,sBAAsB;QAAE,OAAO,oBAAoB,CAAA;IACtE,IAAI,GAAG,YAAY,uBAAuB,IAAI,GAAG,YAAY,mBAAmB;QAC9E,OAAO,UAAU,CAAA;IACnB,IAAI,GAAG,YAAY,eAAe;QAAE,OAAO,SAAS,CAAA;IACpD,IAAI,GAAG,YAAY,kBAAkB;QAAE,OAAO,SAAS,CAAA;IACvD,OAAO,WAAW,CAAA;AACpB,CAAC"}

package/dist/session/hooks.d.ts

@@ -0,0 +1,140 @@
+import type { CallRedirection } from '@astrale-os/kernel-api';
+import type { CredentialInput } from '@astrale-os/kernel-core';
+import type { SelfIdentityExpr, UnresolvedIdentityExpr } from '@astrale-os/kernel-core/expression';
+import type { FunctionSchema } from '../schema/types';
+/** Hop record ClientSession threads through every ctx type. */
+export type ClientSessionHop = {
+    url: string;
+    at: number;
+};
+/**
+ * Ctx for the entry of a top-level `session.call`. Fields are captured
+ * *before* any wire I/O — `credential` is the baseCred resolved from
+ * the picker or `opts.credential`, not the per-hop delegation.
+ */
+export type BeforeCallCtx = {
+    method: string;
+    params: unknown;
+    credential: CredentialInput;
+    /** Initial target — may not equal default if `opts.url` was used. */
+    url: string;
+    correlationId: string;
+    maxHops: number;
+};
+/**
+ * Ctx for a successful `session.call`. `result` is the unwrapped value
+ * the caller received; `hops` is the full chain.
+ */
+export type AfterCallCtx = BeforeCallCtx & {
+    result: unknown;
+    hops: ReadonlyArray<ClientSessionHop>;
+    /** Wall-clock ms from `onBeforeCall` firing to this hook firing. */
+    durationMs: number;
+};
+/** Ctx for a followed redirect hop transition. */
+export type RedirectFollowCtx = BeforeCallCtx & {
+    /** 0-based hop index being departed. */
+    fromHop: number;
+    fromUrl: string;
+    toUrl: string;
+    redirection: CallRedirection;
+    /** Present if `redirection.schema` was saved to the registry. */
+    schemaLearned?: FunctionSchema;
+    /** True if a fresh mint happened for this hop (cache miss). */
+    delegationMinted: boolean;
+};
+/** Ctx for a refused redirect — symmetric with `RedirectFollowCtx`. */
+export type RedirectRefusedCtx = BeforeCallCtx & {
+    fromUrl: string;
+    redirection: CallRedirection;
+    /** From `RedirectPolicy.decide({ follow: false, reason })`. */
+    reason: string;
+};
+/** Ctx for a refused delegation (policy.decide returned `{ allow: false }`). */
+export type DelegationRefusedCtx = BeforeCallCtx & {
+    /** URL the delegation would have targeted. */
+    target: string;
+    /** Audience derived by `DelegationPolicy.audienceFor`. */
+    audience: string;
+    /** Expression the mint would have carried (pre-refine per §9.3.1). */
+    delegation: UnresolvedIdentityExpr;
+    /** Outer-envelope attestation the mint would have carried, if any. */
+    attestation?: SelfIdentityExpr;
+    /** From `DelegationPolicy.decide({ allow: false, reason })`. */
+    reason: string;
+};
+/**
+ * Ctx for a fresh delegation mint. Does NOT extend `BeforeCallCtx` —
+ * a mint can coalesce across N triggering calls, so single-cid fields
+ * would lie; see `triggeringCorrelationIds`.
+ *
+ * `delegation` / `attestation` are post-refine (what was actually minted
+ * and keyed in the cache), not the originals from `delegationFor`.
+ */
+export type DelegationMintCtx = {
+    audience: string;
+    /** The `UnresolvedIdentityExpr` the mint actually carried. */
+    delegation: UnresolvedIdentityExpr;
+    /** The `SelfIdentityExpr` the mint actually carried, if any. */
+    attestation?: SelfIdentityExpr;
+    /**
+     * Correlation id(s) of the call(s) waiting on this mint. When
+     * multiple concurrent callers share one mint, every waiter's id
+     * appears. First element is the triggering call; remaining elements
+     * are callers that joined before resolution.
+     *
+     * Cross-session limitation: when two ClientSessions share one
+     * `DelegationCache` and one of them drives the mint while the other
+     * joins the in-flight promise, only the driving ClientSession's waiters
+     * appear here. The joining ClientSession's `triggeringCorrelationIds` is
+     * empty for that mint. Callers needing mint-correlation across
+     * shared caches observe it through the owning ClientSession's hook.
+     */
+    triggeringCorrelationIds: readonly string[];
+    /**
+     * Method name of the triggering call — quick filtering helper;
+     * per-correlationId methods can be tracked separately.
+     */
+    triggeringMethod: string;
+    /** Wall-clock ms the mint took. */
+    durationMs: number;
+    /** TTL (seconds) of the minted credential. */
+    ttl: number;
+};
+/**
+ * Ctx for any error thrown from ClientSession. `context` triages the error
+ * source without stack parsing.
+ */
+export type ClientSessionErrorCtx = BeforeCallCtx & {
+    error: Error;
+    hops: ReadonlyArray<ClientSessionHop>;
+    context: 'transport' | 'redirect.policy' | 'delegation.policy' | 'delegation.mint' | 'delegation.refused' | 'identity' | 'registry' | 'persistence.load' | 'persistence.save' | 'session';
+};
+/** Ctx for `session.signal` dispatch — fire-and-forget, no result. */
+export type AfterSignalCtx = {
+    method: string;
+    params: unknown;
+    url: string;
+    correlationId: string;
+    dispatchedAt: number;
+};
+/** Orchestration-layer hook surface. `ClientHooks` still fires per hop. */
+export type ClientSessionHooks = {
+    /** Fires once per top-level `session.call`/`stream`/`binary` (NOT per hop). */
+    onBeforeCall?: (ctx: BeforeCallCtx) => void | Promise<void>;
+    /** Fires once per successful top-level call, after final-hop unwrap. */
+    onAfterCall?: (ctx: AfterCallCtx) => void | Promise<void>;
+    /** Fires once per redirect actually followed. */
+    onRedirectFollow?: (ctx: RedirectFollowCtx) => void | Promise<void>;
+    /** Fires once per refused redirect (before the throw). */
+    onRedirectRefused?: (ctx: RedirectRefusedCtx) => void | Promise<void>;
+    /** Fires once per delegation mint (cache miss). */
+    onDelegationMint?: (ctx: DelegationMintCtx) => void | Promise<void>;
+    /** Fires once per refused delegation (before the throw). */
+    onDelegationRefused?: (ctx: DelegationRefusedCtx) => void | Promise<void>;
+    /** Fires on every error thrown from ClientSession. */
+    onError?: (ctx: ClientSessionErrorCtx) => void | Promise<void>;
+    /** Fires on `session.signal` dispatch. */
+    onAfterSignal?: (ctx: AfterSignalCtx) => void | Promise<void>;
+};
+//# sourceMappingURL=hooks.d.ts.map

package/dist/session/hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/session/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAA;AAElG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAErD,+DAA+D;AAC/D,MAAM,MAAM,gBAAgB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAE1D;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,eAAe,CAAA;IAC3B,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG;IACzC,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAA;IACrC,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,kDAAkD;AAClD,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG;IAC9C,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,eAAe,CAAA;IAC5B,iEAAiE;IACjE,aAAa,CAAC,EAAE,cAAc,CAAA;IAC9B,+DAA+D;IAC/D,gBAAgB,EAAE,OAAO,CAAA;CAC1B,CAAA;AAED,uEAAuE;AACvE,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG;IAC/C,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,eAAe,CAAA;IAC5B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,gFAAgF;AAChF,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG;IACjD,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAA;IACd,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAA;IAChB,sEAAsE;IACtE,UAAU,EAAE,sBAAsB,CAAA;IAClC,sEAAsE;IACtE,WAAW,CAAC,EAAE,gBAAgB,CAAA;IAC9B,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,8DAA8D;IAC9D,UAAU,EAAE,sBAAsB,CAAA;IAClC,gEAAgE;IAChE,WAAW,CAAC,EAAE,gBAAgB,CAAA;IAC9B;;;;;;;;;;;;OAYG;IACH,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAA;IACxB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAA;CACZ,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG;IAClD,KAAK,EAAE,KAAK,CAAA;IACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAA;IACrC,OAAO,EACH,WAAW,GACX,iBAAiB,GACjB,mBAAmB,GACnB,iBAAiB,GACjB,oBAAoB,GACpB,UAAU,GACV,UAAU,GACV,kBAAkB,GAClB,kBAAkB,GAClB,SAAS,CAAA;CACd,CAAA;AAED,sEAAsE;AACtE,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,+EAA+E;IAC/E,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,wEAAwE;IACxE,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzD,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrE,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,4DAA4D;IAC5D,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,sDAAsD;IACtD,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,0CAA0C;IAC1C,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9D,CAAA"}

package/dist/session/hooks.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=hooks.js.map

package/dist/session/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/session/hooks.ts"],"names":[],"mappings":""}