@astrale-os/kernel-client 0.5.1 → 0.6.0-beta.10

package/dist/transport/websocket/transport.js

@@ -0,0 +1,164 @@
+import * as codecs from '@astrale-os/kernel-protocol/codecs';
+import * as protocol from '@astrale-os/kernel-protocol/invocation';
+import { ProtocolError, ResponseError, TransportError } from '../../errors/index.js';
+import { invocationFailure } from '../failure.js';
+import { asError, controlledSignal, positiveInteger, requireLive } from '../index.js';
+import { WebSocketConnection } from './connection.js';
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_MAXIMUM_REQUEST_BYTES = 16 * 1024 * 1024;
+const DEFAULT_MAXIMUM_RESPONSE_BYTES = 16 * 1024 * 1024;
+const DEFAULT_MAXIMUM_BUFFERED_BYTES = 16 * 1024 * 1024;
+const DEFAULT_MAXIMUM_ACTIVE_INVOCATIONS = 1_024;
+const DEFAULT_MAXIMUM_BUFFERED_STREAM_ITEMS = 256;
+/** WebSocket implementation of the universal invocation protocol. */
+export class WebSocketTransport {
+    url;
+    connectionUrl;
+    codecName;
+    WebSocketConstructor;
+    timeoutMs;
+    maximumRequestBytes;
+    maximumResponseBytes;
+    maximumBufferedBytes;
+    maximumActiveInvocations;
+    maximumBufferedStreamItems;
+    connections = new Set();
+    connectionOwner = Object.freeze({
+        closed: (connection) => this.connectionClosed(connection),
+    });
+    connection;
+    stopped = false;
+    nextId = 1;
+    constructor(options) {
+        if (options === null || typeof options !== 'object') {
+            throw new TypeError('WebSocketTransport options must be an object.');
+        }
+        this.url = normalizeUrl(options.url);
+        this.connectionUrl = this.url;
+        this.codecName = admitCodecName(options.codec);
+        this.WebSocketConstructor = admitWebSocket(options.websocket);
+        this.timeoutMs = positiveInteger(options.timeoutMs ?? DEFAULT_TIMEOUT_MS, 'timeoutMs');
+        this.maximumRequestBytes = positiveInteger(options.maximumRequestBytes ?? DEFAULT_MAXIMUM_REQUEST_BYTES, 'maximumRequestBytes');
+        this.maximumResponseBytes = positiveInteger(options.maximumResponseBytes ?? DEFAULT_MAXIMUM_RESPONSE_BYTES, 'maximumResponseBytes');
+        this.maximumBufferedBytes = positiveInteger(options.maximumBufferedBytes ?? DEFAULT_MAXIMUM_BUFFERED_BYTES, 'maximumBufferedBytes');
+        this.maximumActiveInvocations = positiveInteger(options.maximumActiveInvocations ?? DEFAULT_MAXIMUM_ACTIVE_INVOCATIONS, 'maximumActiveInvocations');
+        this.maximumBufferedStreamItems = positiveInteger(options.maximumBufferedStreamItems ?? DEFAULT_MAXIMUM_BUFFERED_STREAM_ITEMS, 'maximumBufferedStreamItems');
+    }
+    async dispatch(input, options = {}) {
+        if (this.stopped) {
+            throw invocationFailure('WebSocketTransport is closed.', 'closed');
+        }
+        const timeoutMs = positiveInteger(options.timeoutMs ?? this.timeoutMs, 'timeoutMs');
+        const codec = await this.codec();
+        if (this.stopped) {
+            throw invocationFailure('WebSocketTransport is closed.', 'closed');
+        }
+        const request = protocol.decodeRequest({
+            version: protocol.VERSION,
+            requestId: this.nextRequestId(),
+            ...input,
+            ...(options.idempotencyKey === undefined ? {} : { idempotencyKey: options.idempotencyKey }),
+        });
+        const control = controlledSignal(options.signal, timeoutMs);
+        let owned = false;
+        try {
+            requireLive(control);
+            const connection = await this.acquire(control, codec);
+            requireLive(control);
+            owned = true;
+            return await connection.dispatch(request, control, this.maximumBufferedStreamItems);
+        }
+        catch (error) {
+            throw transportFailure(error, control, options.signal, timeoutMs, this.url);
+        }
+        finally {
+            if (!owned)
+                control.close();
+        }
+    }
+    /** Close the multiplexed connection, reject active exchanges, and reject future dispatches. */
+    close() {
+        if (this.stopped)
+            return;
+        this.stopped = true;
+        this.connection = undefined;
+        const failure = invocationFailure('WebSocketTransport is closed.', 'closed');
+        for (const connection of this.connections)
+            connection.shutdown(failure);
+    }
+    connectionClosed(connection) {
+        this.connections.delete(connection);
+        if (this.connection === connection)
+            this.connection = undefined;
+    }
+    async acquire(control, codec) {
+        let connection = this.connection;
+        if (connection === undefined || !connection.isAvailable) {
+            connection = new WebSocketConnection(this.connectionOwner, this.WebSocketConstructor, this.connectionUrl, codec, this.maximumRequestBytes, this.maximumResponseBytes, this.maximumBufferedBytes, this.maximumActiveInvocations);
+            this.connection = connection;
+            this.connections.add(connection);
+        }
+        await connection.connect(control);
+        return connection;
+    }
+    nextRequestId() {
+        const id = this.nextId;
+        this.nextId = id === Number.MAX_SAFE_INTEGER ? 1 : id + 1;
+        return id;
+    }
+    codec() {
+        return this.codecName === 'msgpack' ? codecs.loadMsgpack() : Promise.resolve(codecs.json);
+    }
+}
+function normalizeUrl(input) {
+    if (typeof input !== 'string')
+        throw new TypeError('server URL must be a string.');
+    let parsed;
+    try {
+        parsed = new URL(input);
+    }
+    catch (error) {
+        throw new TypeError(`Invalid server URL ${JSON.stringify(input)}.`, { cause: asError(error) });
+    }
+    if (parsed.protocol === 'http:')
+        parsed.protocol = 'ws:';
+    else if (parsed.protocol === 'https:')
+        parsed.protocol = 'wss:';
+    else if (parsed.protocol !== 'ws:' && parsed.protocol !== 'wss:') {
+        throw new TypeError('server URL must use http, https, ws, or wss.');
+    }
+    if (parsed.username !== '' || parsed.password !== '' || parsed.hash !== '') {
+        throw new TypeError('server URL cannot contain credentials or a fragment.');
+    }
+    return parsed.toString();
+}
+function admitCodecName(input) {
+    if (input === undefined || input === 'json')
+        return 'json';
+    if (input === 'msgpack')
+        return input;
+    throw new TypeError('codec must be "json" or "msgpack".');
+}
+function admitWebSocket(input) {
+    const implementation = input ?? globalThis.WebSocket;
+    if (typeof implementation !== 'function') {
+        throw new TypeError('WebSocketTransport requires a WebSocket implementation.');
+    }
+    return implementation;
+}
+function transportFailure(input, control, parent, timeoutMs, url) {
+    if (input instanceof ResponseError || input instanceof ProtocolError)
+        return input;
+    if (input instanceof TransportError)
+        return input;
+    if (control.timedOut) {
+        return invocationFailure(`WebSocket invocation timed out after ${timeoutMs}ms.`, 'timeout', {
+            cause: asError(input),
+        });
+    }
+    if (parent?.aborted)
+        return asError(parent.reason ?? input);
+    return invocationFailure(`Failed to communicate with the server at ${url}.`, 'connect', {
+        cause: asError(input),
+    });
+}

package/package.json

@@ -1,16 +1,21 @@
 {
   "name": "@astrale-os/kernel-client",
-  "version": "0.5.1",
-  "description": "Unified kernel client — protocol-first, transport-agnostic",
+  "version": "0.6.0-beta.10",
+  "description": "Universal Client — protocol-first, transport-agnostic",
   "keywords": [
     "astrale",
     "client",
-    "kernel",
+    "protocol",
     "sdk",
     "webos"
   ],
   "license": "Apache-2.0",
   "author": "Astrale",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/astrale-os/kernel.git",
+    "directory": "client"
+  },
   "files": [
     "dist"
   ],
@@ -22,65 +27,66 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
-    "./pacer": {
-      "types": "./dist/pacer/index.d.ts",
-      "import": "./dist/pacer/index.js"
+    "./auth": {
+      "types": "./dist/auth/index.d.ts",
+      "import": "./dist/auth/index.js"
+    },
+    "./errors": {
+      "types": "./dist/errors/index.d.ts",
+      "import": "./dist/errors/index.js"
+    },
+    "./graph": {
+      "types": "./dist/graph/index.d.ts",
+      "import": "./dist/graph/index.js"
     },
     "./schema": {
       "types": "./dist/schema/index.d.ts",
       "import": "./dist/schema/index.js"
     },
-    "./pool": {
-      "types": "./dist/pool/index.d.ts",
-      "import": "./dist/pool/index.js"
-    },
     "./session": {
       "types": "./dist/session/index.d.ts",
       "import": "./dist/session/index.js"
     },
-    "./graph": {
-      "types": "./dist/graph/index.d.ts",
-      "import": "./dist/graph/index.js"
+    "./pacer": {
+      "types": "./dist/pacer/index.d.ts",
+      "import": "./dist/pacer/index.js"
+    },
+    "./pool": {
+      "types": "./dist/pool/index.d.ts",
+      "import": "./dist/pool/index.js"
     },
     "./store": {
       "types": "./dist/store/index.d.ts",
       "import": "./dist/store/index.js"
     },
-    "./auth": {
-      "types": "./dist/auth/index.d.ts",
-      "import": "./dist/auth/index.js"
-    },
     "./package.json": "./package.json"
   },
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
-    "@tanstack/pacer": "^0.20.0",
-    "dequal": "2.0.3",
-    "@astrale-os/kernel-api": "^0.4.18",
-    "@astrale-os/kernel-core": "^0.8.1",
-    "@astrale-os/kernel-dsl": "^0.1.5"
+    "@astrale-os/kernel-core": ">=0.9.0-beta.9 <1.0.0",
+    "@astrale-os/kernel-dsl": ">=0.2.0-beta.7 <1.0.0",
+    "@astrale-os/kernel-protocol": ">=0.5.0-beta.9 <1.0.0",
+    "@tanstack/pacer": "0.20.1",
+    "msgpackr": "^2.0.5"
   },
   "devDependencies": {
+    "@astrale-os/kernel-server": ">=0.5.0-beta.10 <1.0.0",
     "@astrale/typescript-config": "npm:@jsr/astrale__typescript-config@~1.1.0",
-    "@hono/node-server": "^1.19.9",
-    "@hono/node-ws": "^1.3.0",
     "@types/node": "^22.0.0",
-    "@types/ws": "^8.5.12",
-    "@typescript/native-preview": "latest",
-    "hono": "^4.6.20",
-    "typescript": "~6.0.1-rc",
-    "vitest": "^3.1.4",
-    "ws": "^8.18.0",
-    "zod": "^4.3.6",
-    "@astrale-os/kernel-server": "^0.4.17"
+    "typescript": "7.0.2",
+    "vitest": "^4.1.10"
   },
   "scripts": {
-    "build": "tsgo",
-    "dev": "tsgo --watch",
-    "typecheck": "tsgo --noEmit && tsgo --noEmit -p tsconfig.type-tests.json",
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "typecheck": "tsc --noEmit",
     "test": "vitest run",
+    "test:boundary:protocol": "vitest run --config vitest.protocol-boundary.config.ts",
+    "test:boundary:server": "vitest run --config vitest.server-boundary.config.ts",
+    "test:file": "vitest run",
+    "test:package": "node scripts/verify-packed-package.mjs",
     "test:watch": "vitest",
     "clean": "rm -rf dist",
     "preinstall": "node -e \"try{require('./.check-workspace.cjs')}catch{}\""

package/dist/auth/addressing.d.ts

@@ -1,32 +0,0 @@
-/**
- * Addressing for the auth surface — the one place a syscall address is formed.
- * Method slugs and the static `whoami` path derive from `K.Identity.*`
- * accessors, so a kernel schema rename breaks at compile time (the property
- * access) instead of failing silently at dispatch.
- */
-/** AuthApi verb → the K-derived Identity method slug it dispatches. */
-export declare const IDENTITY_METHOD: {
-    readonly mint: string;
-    readonly delegate: string;
-    readonly check: string;
-    readonly grant: string;
-    readonly revoke: string;
-    readonly extend: string;
-    readonly constrain: string;
-    readonly exclude: string;
-    readonly removeExtension: string;
-    readonly removeConstraint: string;
-    readonly removeExclusion: string;
-};
-/**
- * Static dispatch path of `Identity.whoami` — the layout-independent MethodPath
- * (`/:kernel.astrale.ai:interface.Identity:whoami`). The one static syscall.
- */
-export declare const WHOAMI_PATH: string;
-/**
- * Format an `InstanceMethodPath` (`<base>::<slug>`) for a syscall dispatched at
- * one identity node. `idOrPath` is already-raw; a leading `/` or `@` is used
- * verbatim, a bare id gets the `@` prefix — never a double `@`.
- */
-export declare function instanceTarget(idOrPath: string, slug: string): string;
-//# sourceMappingURL=addressing.d.ts.map

package/dist/auth/addressing.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"addressing.d.ts","sourceRoot":"","sources":["../../src/auth/addressing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,uEAAuE;AACvE,eAAO,MAAM,eAAe;aAC1B,IAAI;aACJ,QAAQ;aACR,KAAK;aACL,KAAK;aACL,MAAM;aACN,MAAM;aACN,SAAS;aACT,OAAO;aACP,eAAe;aACf,gBAAgB;aAChB,eAAe;CACP,CAAA;AAEV;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,MAA0C,CAAA;AAEpE;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAGrE"}

package/dist/auth/addressing.js

@@ -1,36 +0,0 @@
-/**
- * Addressing for the auth surface — the one place a syscall address is formed.
- * Method slugs and the static `whoami` path derive from `K.Identity.*`
- * accessors, so a kernel schema rename breaks at compile time (the property
- * access) instead of failing silently at dispatch.
- */
-import { K } from '@astrale-os/kernel-core';
-/** AuthApi verb → the K-derived Identity method slug it dispatches. */
-export const IDENTITY_METHOD = {
-    mint: K.Identity.mintIdentityCredential.path.method.method,
-    delegate: K.Identity.mintDelegationCredential.path.method.method,
-    check: K.Identity.checkPerm.path.method.method,
-    grant: K.Identity.grantPerm.path.method.method,
-    revoke: K.Identity.revokePerm.path.method.method,
-    extend: K.Identity.extendIdentity.path.method.method,
-    constrain: K.Identity.constrainIdentity.path.method.method,
-    exclude: K.Identity.excludeIdentity.path.method.method,
-    removeExtension: K.Identity.removeExtension.path.method.method,
-    removeConstraint: K.Identity.removeConstraint.path.method.method,
-    removeExclusion: K.Identity.removeExclusion.path.method.method,
-};
-/**
- * Static dispatch path of `Identity.whoami` — the layout-independent MethodPath
- * (`/:kernel.astrale.ai:interface.Identity:whoami`). The one static syscall.
- */
-export const WHOAMI_PATH = K.Identity.whoami.path.method.raw;
-/**
- * Format an `InstanceMethodPath` (`<base>::<slug>`) for a syscall dispatched at
- * one identity node. `idOrPath` is already-raw; a leading `/` or `@` is used
- * verbatim, a bare id gets the `@` prefix — never a double `@`.
- */
-export function instanceTarget(idOrPath, slug) {
-    const base = idOrPath.startsWith('/') || idOrPath.startsWith('@') ? idOrPath : `@${idOrPath}`;
-    return `${base}::${slug}`;
-}
-//# sourceMappingURL=addressing.js.map

package/dist/auth/addressing.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"addressing.js","sourceRoot":"","sources":["../../src/auth/addressing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,yBAAyB,CAAA;AAE3C,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;IAC1D,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;IAChE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;IAC9C,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;IAC9C,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;IAChD,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;IACpD,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;IAC1D,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;IACtD,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;IAC9D,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;IAChE,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;CACtD,CAAA;AAEV;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;AAEpE;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAY;IAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAA;IAC7F,OAAO,GAAG,IAAI,KAAK,IAAI,EAAE,CAAA;AAC3B,CAAC"}

package/dist/auth/api.d.ts

@@ -1,70 +0,0 @@
-/**
- * The `AuthApi` surface and its one implementation, `createAuth` — the control
- * plane of a bound session view, over the same {@link GraphCall} capability as
- * `graph/`. Instance-dispatched verbs target the counterparty identity
- * (`@<id>::<slug>`); `whoami` is the one static syscall. `createAuth` is thin:
- * it wires the verb modules over one caller resolver.
- */
-import type { CredentialInput, Node } from '@astrale-os/kernel-core';
-import type { GraphCall } from '../graph/index.js';
-import type { Composition } from './composition.js';
-import type { DelegateOpts, MintOpts } from './minting.js';
-import type { CheckInput, GrantInput, RevokeInput } from './permissions.js';
-import type { AuthShorthands } from './shorthands.js';
-/**
- * Control-plane surface of a bound session view. All calls dispatch with the
- * view's credential.
- */
-export interface AuthApi extends AuthShorthands {
-    /** The authenticated caller's identity node. Always a live syscall — never cached. */
-    whoami(): Promise<Node>;
-    /**
-     * The credential this view currently dispatches with — resolved fresh per
-     * call, so never cache the return.
-     */
-    credential(): CredentialInput;
-    /**
-     * Mint a single-layer identity credential for {@link MintOpts.subject}
-     * (default: the memoized principal). (syscall: mintIdentityCredential)
-     */
-    mint(opts?: MintOpts): Promise<string>;
-    /**
-     * Mint a two-layer delegation credential — always as self (no subject param).
-     * {@link DelegateOpts.delegation} defaults to `{ kind: 'identity', self: true }`.
-     * (syscall: mintDelegationCredential)
-     */
-    delegate(opts?: DelegateOpts): Promise<string>;
-    /**
-     * Does `who` (default: self) hold `perms` on `on` by its own STANDING grant
-     * edges — "does this identity hold X", not "would the current (maybe narrowed)
-     * token pass". Batch: array in → positionally-aligned `boolean[]`.
-     */
-    check(q: CheckInput): Promise<boolean>;
-    check(q: readonly CheckInput[]): Promise<boolean[]>;
-    /**
-     * Grant `perms` to `to` on `on` (and its subtree). ⚠ SETS the has_perm bits —
-     * does NOT OR; re-granting with fewer bits downgrades. Batch: set semantics,
-     * not a transaction — a failure throws `AuthBatchError` with per-entry outcomes.
-     */
-    grant(g: GrantInput): Promise<void>;
-    grant(g: readonly GrantInput[]): Promise<void>;
-    /** Remove `perms` from `from` on `on`. Batch semantics mirror {@link grant}. */
-    revoke(r: RevokeInput): Promise<void>;
-    revoke(r: readonly RevokeInput[]): Promise<void>;
-    /**
-     * Attach the described composition edges to `who` (default: self). Fields fan
-     * out; an empty record is a resolved no-op. On any entry failure throws
-     * `AuthBatchError` with per-entry outcomes.
-     */
-    bind(c: Composition): Promise<void>;
-    /** Detach the described composition edges — the exact mirror of {@link bind}. */
-    unbind(c: Composition): Promise<void>;
-}
-/**
- * Bind the auth surface onto a call capability and a credential thunk. One caller
- * resolver (whoami + principal memo) fans into the verb modules.
- */
-export declare function createAuth(call: GraphCall, opts: {
-    credential: () => CredentialInput;
-}): AuthApi;
-//# sourceMappingURL=api.d.ts.map

package/dist/auth/api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/auth/api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAA;AAEpE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAQrD;;;GAGG;AACH,MAAM,WAAW,OAAQ,SAAQ,cAAc;IAE7C,sFAAsF;IACtF,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAGvB;;;OAGG;IACH,UAAU,IAAI,eAAe,CAAA;IAC7B;;;OAGG;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACtC;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAG9C;;;;OAIG;IACH,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtC,KAAK,CAAC,CAAC,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;IACnD;;;;OAIG;IACH,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,KAAK,CAAC,CAAC,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,gFAAgF;IAChF,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,CAAC,CAAC,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAGhD;;;;OAIG;IACH,IAAI,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnC,iFAAiF;IACjF,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,eAAe,CAAA;CAAE,GAAG,OAAO,CAoBhG"}

package/dist/auth/api.js

@@ -1,36 +0,0 @@
-/**
- * The `AuthApi` surface and its one implementation, `createAuth` — the control
- * plane of a bound session view, over the same {@link GraphCall} capability as
- * `graph/`. Instance-dispatched verbs target the counterparty identity
- * (`@<id>::<slug>`); `whoami` is the one static syscall. `createAuth` is thin:
- * it wires the verb modules over one caller resolver.
- */
-import { createComposition } from './composition.js';
-import { createMinting } from './minting.js';
-import { createPermissions } from './permissions.js';
-import { createCaller } from './principal.js';
-import { makeAuthShorthands } from './shorthands.js';
-/**
- * Bind the auth surface onto a call capability and a credential thunk. One caller
- * resolver (whoami + principal memo) fans into the verb modules.
- */
-export function createAuth(call, opts) {
-    const caller = createCaller(call);
-    const { mint, delegate } = createMinting(call, caller);
-    const { check, grant, revoke } = createPermissions(call, caller);
-    const { bind, unbind } = createComposition(call, caller);
-    const credential = () => opts.credential();
-    return {
-        whoami: caller.whoami,
-        credential,
-        mint,
-        delegate,
-        check,
-        grant,
-        revoke,
-        bind,
-        unbind,
-        ...makeAuthShorthands(check),
-    };
-}
-//# sourceMappingURL=api.js.map

package/dist/auth/api.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/auth/api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AA2DpD;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAe,EAAE,IAA2C;IACrF,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACtD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAChE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAExD,MAAM,UAAU,GAAG,GAAoB,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAA;IAE3D,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU;QACV,IAAI;QACJ,QAAQ;QACR,KAAK;QACL,KAAK;QACL,MAAM;QACN,IAAI;QACJ,MAAM;QACN,GAAG,kBAAkB,CAAC,KAAK,CAAC;KAC7B,CAAA;AACH,CAAC"}

package/dist/auth/batch.d.ts

@@ -1,18 +0,0 @@
-/**
- * Batch fan-out for the auth surface. Set semantics, not a transaction: entries
- * dispatch in PARALLEL and partial application is possible, so a failure
- * surfaces every entry's outcome through {@link AuthBatchError}.
- */
-/** One unit of a fan-out: a summary of the entry plus the dispatch that runs it. */
-export interface BatchEntry<T> {
-    /** Caller-legible summary of this entry (goes into {@link AuthBatchOutcome.input}). */
-    readonly input: unknown;
-    run(): Promise<T>;
-}
-/**
- * Run every entry in parallel; resolve to the results positionally aligned with
- * `entries`, or throw {@link AuthBatchError} carrying all outcomes if any
- * rejected. Zero entries ⇒ zero dispatches, resolves to `[]` (the no-op case).
- */
-export declare function settleAll<T>(operation: string, entries: readonly BatchEntry<T>[]): Promise<T[]>;
-//# sourceMappingURL=batch.d.ts.map

package/dist/auth/batch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../../src/auth/batch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,oFAAoF;AACpF,MAAM,WAAW,UAAU,CAAC,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,CAAA;CAClB;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,GAChC,OAAO,CAAC,CAAC,EAAE,CAAC,CAed"}

package/dist/auth/batch.js

@@ -1,25 +0,0 @@
-/**
- * Batch fan-out for the auth surface. Set semantics, not a transaction: entries
- * dispatch in PARALLEL and partial application is possible, so a failure
- * surfaces every entry's outcome through {@link AuthBatchError}.
- */
-import { AuthBatchError } from '../errors/errors.js';
-/**
- * Run every entry in parallel; resolve to the results positionally aligned with
- * `entries`, or throw {@link AuthBatchError} carrying all outcomes if any
- * rejected. Zero entries ⇒ zero dispatches, resolves to `[]` (the no-op case).
- */
-export async function settleAll(operation, entries) {
-    const settled = await Promise.allSettled(entries.map((e) => e.run()));
-    const outcomes = settled.map((result, index) => ({
-        index,
-        input: entries[index].input,
-        status: result.status,
-        ...(result.status === 'fulfilled' ? { value: result.value } : { error: result.reason }),
-    }));
-    if (outcomes.some((o) => o.status === 'rejected')) {
-        throw new AuthBatchError(operation, outcomes);
-    }
-    return settled.map((r) => r.value);
-}
-//# sourceMappingURL=batch.js.map

package/dist/auth/batch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"batch.js","sourceRoot":"","sources":["../../src/auth/batch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AASpD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,SAAiB,EACjB,OAAiC;IAEjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IAErE,MAAM,QAAQ,GAAuB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnE,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK,CAAE,CAAC,KAAK;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;KACxF,CAAC,CAAC,CAAA;IAEH,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IAC/C,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA+B,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC"}

package/dist/auth/composition.d.ts

@@ -1,27 +0,0 @@
-/**
- * Durable composition — `bind` / `unbind`, six syscalls behind two verbs over
- * one described edge delta, plus the delta shape and its flattening.
- */
-import type { GraphCall, Ref } from '../graph/index.js';
-import type { Caller } from './principal.js';
-/**
- * A described composition delta — the flat edge set on one identity node. Field
- * names are the edge classes (camelCased); each is optional, accepts one or many
- * counterparties, and fans out. An empty record is a resolved no-op.
- */
-export interface Composition {
-    /** The identity the edges hang off. Absent ⇒ the memoized principal. */
-    who?: Ref;
-    /** extends_with — `who` gains each counterparty's reach (union). */
-    extendsWith?: Ref | readonly Ref[];
-    /** constrained_by — `who` reaches only the overlap (intersect). */
-    constrainedBy?: Ref | readonly Ref[];
-    /** excluded_from — `who` loses each counterparty's reach (asymmetric). */
-    excludedFrom?: Ref | readonly Ref[];
-}
-/** Bind bind + unbind onto a call capability and the caller resolver. */
-export declare function createComposition(call: GraphCall, caller: Caller): {
-    bind(c: Composition): Promise<void>;
-    unbind(c: Composition): Promise<void>;
-};
-//# sourceMappingURL=composition.d.ts.map

package/dist/auth/composition.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"composition.d.ts","sourceRoot":"","sources":["../../src/auth/composition.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAA;AAEvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AAM5C;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,GAAG,CAAC,EAAE,GAAG,CAAA;IACT,oEAAoE;IACpE,WAAW,CAAC,EAAE,GAAG,GAAG,SAAS,GAAG,EAAE,CAAA;IAClC,mEAAmE;IACnE,aAAa,CAAC,EAAE,GAAG,GAAG,SAAS,GAAG,EAAE,CAAA;IACpC,0EAA0E;IAC1E,YAAY,CAAC,EAAE,GAAG,GAAG,SAAS,GAAG,EAAE,CAAA;CACpC;AAED,yEAAyE;AACzE,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,EACf,MAAM,EAAE,MAAM,GACb;IAAE,IAAI,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAwBhF"}

package/dist/auth/composition.js

@@ -1,83 +0,0 @@
-/**
- * Durable composition — `bind` / `unbind`, six syscalls behind two verbs over
- * one described edge delta, plus the delta shape and its flattening.
- */
-import { refRaw } from '../graph/mutate/index.js';
-import { IDENTITY_METHOD, instanceTarget } from './addressing.js';
-import { settleAll } from './batch.js';
-/** Bind bind + unbind onto a call capability and the caller resolver. */
-export function createComposition(call, caller) {
-    const compose = async (c, kind) => {
-        const fields = compositionFields(c, kind);
-        // Empty / all-absent record: a resolved no-op — no whoami, no dispatch.
-        if (fields.length === 0)
-            return;
-        const whoRaw = c.who !== undefined ? refRaw(c.who) : await caller.principal();
-        const entries = fields.map(({ ref, slug, paramKey, edge }) => {
-            const counterparty = refRaw(ref);
-            const target = instanceTarget(whoRaw, slug);
-            return {
-                input: { who: whoRaw, edge, counterparty },
-                run: async () => {
-                    await call(target, { [paramKey]: counterparty });
-                },
-            };
-        });
-        await settleAll(kind, entries);
-    };
-    const bind = (c) => compose(c, 'bind');
-    const unbind = (c) => compose(c, 'unbind');
-    return { bind, unbind };
-}
-/** Flatten a {@link Composition} into per-(field × counterparty) dispatch specs. */
-function compositionFields(c, kind) {
-    const specs = kind === 'bind'
-        ? [
-            {
-                refs: c.extendsWith,
-                slug: IDENTITY_METHOD.extend,
-                paramKey: 'with',
-                edge: 'extendsWith',
-            },
-            {
-                refs: c.constrainedBy,
-                slug: IDENTITY_METHOD.constrain,
-                paramKey: 'by',
-                edge: 'constrainedBy',
-            },
-            {
-                refs: c.excludedFrom,
-                slug: IDENTITY_METHOD.exclude,
-                paramKey: 'without',
-                edge: 'excludedFrom',
-            },
-        ]
-        : [
-            {
-                refs: c.extendsWith,
-                slug: IDENTITY_METHOD.removeExtension,
-                paramKey: 'identity',
-                edge: 'extendsWith',
-            },
-            {
-                refs: c.constrainedBy,
-                slug: IDENTITY_METHOD.removeConstraint,
-                paramKey: 'identity',
-                edge: 'constrainedBy',
-            },
-            {
-                refs: c.excludedFrom,
-                slug: IDENTITY_METHOD.removeExclusion,
-                paramKey: 'identity',
-                edge: 'excludedFrom',
-            },
-        ];
-    return specs.flatMap(({ refs, slug, paramKey, edge }) => toRefArray(refs).map((ref) => ({ ref, slug, paramKey, edge })));
-}
-/** Normalize `Ref | readonly Ref[] | undefined` to an array (single Ref → `[ref]`). */
-function toRefArray(v) {
-    if (v === undefined)
-        return [];
-    return Array.isArray(v) ? v : [v];
-}
-//# sourceMappingURL=composition.js.map