@astrale-os/kernel-client 0.5.1 → 0.6.0-beta.2

package/dist/session/errors/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/session/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAI5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAClE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,uBAAuB,CAAA"}

package/dist/session/errors/index.js

@@ -1,8 +0,0 @@
-export { IdentityPickerError, PersistenceLoadFailedError, RegistryWriteFailedError, SchemaOwnershipConflictError, UnresolvedIdentityError, } from './session-errors.js';
-// Re-exports so consumers catching every ClientSession-thrown shape have one
-// import surface — each still ships from its owning subpath.
-export { ClientSessionError } from '../../errors/session-error.js';
-export { DelegationMintError, DelegationPolicyError, DelegationRefusedError, } from '../delegation/errors.js';
-export { PoolClosedError } from '../../pool/errors.js';
-export { HopLimitExceededError, RedirectPolicyError, RedirectRefusedError, } from '../redirect/errors.js';
-//# sourceMappingURL=index.js.map

package/dist/session/errors/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/session/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAE5B,6EAA6E;AAC7E,6DAA6D;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAClE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,uBAAuB,CAAA"}

package/dist/session/errors/session-errors.d.ts

@@ -1,52 +0,0 @@
-import { ClientSessionError } from '../../errors/session-error.js';
-/**
- * No credential could be resolved for a call.
- *
- * Thrown when `ClientSessionCallOptions.credential` is absent, the identity
- * picker returned `undefined`, or the bound-view captured credential is
- * unresolvable.
- */
-export declare class UnresolvedIdentityError extends ClientSessionError {
-    constructor(message?: string);
-}
-/**
- * The identity picker function threw.
- *
- * Wraps the original error as `cause`. Consumers that want to surface
- * a sign-in prompt typically switch on `UnresolvedIdentityError` and
- * this class together.
- */
-export declare class IdentityPickerError extends ClientSessionError {
-    constructor(options?: ErrorOptions);
-}
-/**
- * A schema learned on redirect was rejected by the registry's
- * contract-drift check.
- *
- * Wraps the registry's error as `cause`. The current hop's schema
- * disagrees with a previously-registered shape for the same ref —
- * either a misconfigured kernel or an incompatible version.
- */
-export declare class RegistryWriteFailedError extends ClientSessionError {
-    readonly ref: string;
-    constructor(ref: string, options?: ErrorOptions);
-}
-/**
- * Caller passed both a pre-built `SchemaRegistry` and a `SchemaPersistence`
- * adapter. ClientSession refuses to wire persistence onto a caller-owned registry
- * to avoid double-writes or ordering corruption — wire persistence yourself
- * or let ClientSession construct the registry.
- */
-export declare class SchemaOwnershipConflictError extends ClientSessionError {
-    constructor();
-}
-/**
- * `SchemaPersistence.load()` threw during ClientSession construction.
- *
- * Wraps the adapter's error as `cause`. ClientSession aborts construction
- * rather than proceed with a half-loaded registry.
- */
-export declare class PersistenceLoadFailedError extends ClientSessionError {
-    constructor(options?: ErrorOptions);
-}
-//# sourceMappingURL=session-errors.d.ts.map

package/dist/session/errors/session-errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-errors.d.ts","sourceRoot":"","sources":["../../../src/session/errors/session-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE;;;;;;GAMG;AACH,qBAAa,uBAAwB,SAAQ,kBAAkB;IAC7D,YAAY,OAAO,SAAyC,EAG3D;CACF;AAED;;;;;;GAMG;AACH,qBAAa,mBAAoB,SAAQ,kBAAkB;IACzD,YAAY,OAAO,CAAC,EAAE,YAAY,EAGjC;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,wBAAyB,SAAQ,kBAAkB;aAE5C,GAAG,EAAE,MAAM;IAD7B,YACkB,GAAG,EAAE,MAAM,EAC3B,OAAO,CAAC,EAAE,YAAY,EAIvB;CACF;AAED;;;;;GAKG;AACH,qBAAa,4BAA6B,SAAQ,kBAAkB;IAClE,cAQC;CACF;AAED;;;;;GAKG;AACH,qBAAa,0BAA2B,SAAQ,kBAAkB;IAChE,YAAY,OAAO,CAAC,EAAE,YAAY,EAGjC;CACF"}

package/dist/session/errors/session-errors.js

@@ -1,70 +0,0 @@
-import { ClientSessionError } from '../../errors/session-error.js';
-/**
- * No credential could be resolved for a call.
- *
- * Thrown when `ClientSessionCallOptions.credential` is absent, the identity
- * picker returned `undefined`, or the bound-view captured credential is
- * unresolvable.
- */
-export class UnresolvedIdentityError extends ClientSessionError {
-    constructor(message = 'No credential resolved for this call') {
-        super(message, 'IDENTITY_UNRESOLVED');
-        this.name = 'UnresolvedIdentityError';
-    }
-}
-/**
- * The identity picker function threw.
- *
- * Wraps the original error as `cause`. Consumers that want to surface
- * a sign-in prompt typically switch on `UnresolvedIdentityError` and
- * this class together.
- */
-export class IdentityPickerError extends ClientSessionError {
-    constructor(options) {
-        super('Identity picker threw', 'IDENTITY_PICKER_THREW', options);
-        this.name = 'IdentityPickerError';
-    }
-}
-/**
- * A schema learned on redirect was rejected by the registry's
- * contract-drift check.
- *
- * Wraps the registry's error as `cause`. The current hop's schema
- * disagrees with a previously-registered shape for the same ref —
- * either a misconfigured kernel or an incompatible version.
- */
-export class RegistryWriteFailedError extends ClientSessionError {
-    ref;
-    constructor(ref, options) {
-        super(`Registry write failed for "${ref}"`, 'REGISTRY_WRITE_FAILED', options);
-        this.ref = ref;
-        this.name = 'RegistryWriteFailedError';
-    }
-}
-/**
- * Caller passed both a pre-built `SchemaRegistry` and a `SchemaPersistence`
- * adapter. ClientSession refuses to wire persistence onto a caller-owned registry
- * to avoid double-writes or ordering corruption — wire persistence yourself
- * or let ClientSession construct the registry.
- */
-export class SchemaOwnershipConflictError extends ClientSessionError {
-    constructor() {
-        super('ClientSessionConfig.schema (SchemaRegistry) is incompatible with ClientSessionConfig.schemaStore. ' +
-            'Pass only the registry and wire persistence yourself, or pass only schemaStore + ' +
-            'let ClientSession construct the registry.', 'SCHEMA_OWNERSHIP_CONFLICT');
-        this.name = 'SchemaOwnershipConflictError';
-    }
-}
-/**
- * `SchemaPersistence.load()` threw during ClientSession construction.
- *
- * Wraps the adapter's error as `cause`. ClientSession aborts construction
- * rather than proceed with a half-loaded registry.
- */
-export class PersistenceLoadFailedError extends ClientSessionError {
-    constructor(options) {
-        super('SchemaPersistence.load() threw', 'PERSISTENCE_LOAD_FAILED', options);
-        this.name = 'PersistenceLoadFailedError';
-    }
-}
-//# sourceMappingURL=session-errors.js.map

package/dist/session/errors/session-errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-errors.js","sourceRoot":"","sources":["../../../src/session/errors/session-errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE;;;;;;GAMG;AACH,MAAM,OAAO,uBAAwB,SAAQ,kBAAkB;IAC7D,YAAY,OAAO,GAAG,sCAAsC;QAC1D,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAA;QACrC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,mBAAoB,SAAQ,kBAAkB;IACzD,YAAY,OAAsB;QAChC,KAAK,CAAC,uBAAuB,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAA;QAChE,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,wBAAyB,SAAQ,kBAAkB;IAE5C,GAAG;IADrB,YACkB,GAAW,EAC3B,OAAsB;QAEtB,KAAK,CAAC,8BAA8B,GAAG,GAAG,EAAE,uBAAuB,EAAE,OAAO,CAAC,CAAA;mBAH7D,GAAG;QAInB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;IACxC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,4BAA6B,SAAQ,kBAAkB;IAClE;QACE,KAAK,CACH,oGAAoG;YAClG,mFAAmF;YACnF,2CAA2C,EAC7C,2BAA2B,CAC5B,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAA;IAC5C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,0BAA2B,SAAQ,kBAAkB;IAChE,YAAY,OAAsB;QAChC,KAAK,CAAC,gCAAgC,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA;QAC3E,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAA;IAC1C,CAAC;CACF"}

package/dist/session/forward.d.ts

@@ -1,15 +0,0 @@
-import type { CallOptions } from '../client/config.js';
-import type { ClientSessionCallOptions } from './config.js';
-/**
- * Assemble the `CallOptions` forwarded to `client.send` for one hop.
- * Per-hop fields (timeout/signal/class/self) forward every hop. The `url` is
- * hop-specific: hop 0 uses the caller's `opts.url` unless a learned route
- * supplied `targetOverride`; redirect follow-ups also use `targetOverride`, so
- * the per-request URL builder retargets verbatim instead of falling back to the
- * schema binding.
- * transport/protocol stay hop-0-only — follow-ups pick them from the new
- * target's schema. `credential`, `maxHops`, `correlationId` are consumed by
- * ClientSession itself and not forwarded here.
- */
-export declare function forwardedFor(opts: ClientSessionCallOptions | undefined, hopIndex: number, targetOverride?: string): CallOptions;
-//# sourceMappingURL=forward.d.ts.map

package/dist/session/forward.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"forward.d.ts","sourceRoot":"","sources":["../../src/session/forward.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAE3D;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,wBAAwB,GAAG,SAAS,EAC1C,QAAQ,EAAE,MAAM,EAChB,cAAc,CAAC,EAAE,MAAM,GACtB,WAAW,CAqBb"}

package/dist/session/forward.js

@@ -1,40 +0,0 @@
-/**
- * Assemble the `CallOptions` forwarded to `client.send` for one hop.
- * Per-hop fields (timeout/signal/class/self) forward every hop. The `url` is
- * hop-specific: hop 0 uses the caller's `opts.url` unless a learned route
- * supplied `targetOverride`; redirect follow-ups also use `targetOverride`, so
- * the per-request URL builder retargets verbatim instead of falling back to the
- * schema binding.
- * transport/protocol stay hop-0-only — follow-ups pick them from the new
- * target's schema. `credential`, `maxHops`, `correlationId` are consumed by
- * ClientSession itself and not forwarded here.
- */
-export function forwardedFor(opts, hopIndex, targetOverride) {
-    const out = {};
-    if (!opts) {
-        if (targetOverride !== undefined)
-            out.url = targetOverride;
-        return out;
-    }
-    if (opts.timeout !== undefined)
-        out.timeout = opts.timeout;
-    if (opts.signal !== undefined)
-        out.signal = opts.signal;
-    if (opts.class !== undefined)
-        out.class = opts.class;
-    // `self` forwards every hop; `redirection.self` replaces it on follow.
-    if (opts.self !== undefined)
-        out.self = opts.self;
-    if (hopIndex === 0) {
-        if (opts.transport !== undefined)
-            out.transport = opts.transport;
-        if (opts.protocol !== undefined)
-            out.protocol = opts.protocol;
-    }
-    if (targetOverride !== undefined)
-        out.url = targetOverride;
-    else if (hopIndex === 0 && opts.url !== undefined)
-        out.url = opts.url;
-    return out;
-}
-//# sourceMappingURL=forward.js.map

package/dist/session/forward.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"forward.js","sourceRoot":"","sources":["../../src/session/forward.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAC1B,IAA0C,EAC1C,QAAgB,EAChB,cAAuB;IAEvB,MAAM,GAAG,GAAgB,EAAE,CAAA;IAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,cAAc,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,GAAG,cAAc,CAAA;QAC1D,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IACvD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACpD,uEAAuE;IACvE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;IAEjD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAChE,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC/D,CAAC;IACD,IAAI,cAAc,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,cAAc,CAAA;SACrD,IAAI,QAAQ,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;QAAE,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAA;IAErE,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/session/helpers.d.ts

@@ -1,23 +0,0 @@
-import type { CallRedirection } from '@astrale-os/kernel-api';
-import type { ClientSessionErrorCtx } from './hooks.js';
-/**
- * Unwrap a successful `SendResult` / `SendStreamResult` / `SendBinaryResult`
- * to the post-orchestration shape ClientSession hands back to the caller. Redirect
- * results are handled on the dispatch loop; passing one here is a bug.
- */
-export declare function unwrapResult(result: {
-    kind: 'value' | 'stream' | 'binary' | 'redirect';
-    value?: unknown;
-    chunks?: unknown;
-    response?: unknown;
-    redirection?: CallRedirection;
-}): unknown;
-export declare function freezeHops<T>(arr: readonly T[]): ReadonlyArray<T>;
-/** Non-cryptographic correlation id; `sh-` prefix disambiguates from caller-supplied cids. */
-export declare function generateCid(): string;
-/**
- * Map an error to a `ClientSessionErrorCtx.context`. Specific subclasses first,
- * `ClientSessionError` catch-all next, wire `'transport'` last.
- */
-export declare function classifyError(err: unknown): ClientSessionErrorCtx['context'];
-//# sourceMappingURL=helpers.d.ts.map

package/dist/session/helpers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/session/helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AAiBvD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE;IACnC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAA;IAChD,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,WAAW,CAAC,EAAE,eAAe,CAAA;CAC9B,GAAG,OAAO,CAWV;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAEjE;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,IAAI,MAAM,CAGpC;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAY5E"}

package/dist/session/helpers.js

@@ -1,56 +0,0 @@
-import { ClientSessionError } from '../errors/session-error.js';
-import { PoolClosedError } from '../pool/errors.js';
-import { DelegationMintError, DelegationPolicyError, DelegationRefusedError, } from './delegation/errors.js';
-import { IdentityPickerError, PersistenceLoadFailedError, RegistryWriteFailedError, UnresolvedIdentityError, } from './errors/session-errors.js';
-import { RedirectPolicyError } from './redirect/errors.js';
-/**
- * Unwrap a successful `SendResult` / `SendStreamResult` / `SendBinaryResult`
- * to the post-orchestration shape ClientSession hands back to the caller. Redirect
- * results are handled on the dispatch loop; passing one here is a bug.
- */
-export function unwrapResult(result) {
-    switch (result.kind) {
-        case 'value':
-            return result.value;
-        case 'stream':
-            return result.chunks;
-        case 'binary':
-            return result.response;
-        case 'redirect':
-            throw new Error('Unreachable: redirect passed to unwrapResult');
-    }
-}
-export function freezeHops(arr) {
-    return Object.freeze([...arr]);
-}
-/** Non-cryptographic correlation id; `sh-` prefix disambiguates from caller-supplied cids. */
-export function generateCid() {
-    const r = Math.random().toString(36).slice(2, 10);
-    return `sh-${Date.now().toString(36)}-${r}`;
-}
-/**
- * Map an error to a `ClientSessionErrorCtx.context`. Specific subclasses first,
- * `ClientSessionError` catch-all next, wire `'transport'` last.
- */
-export function classifyError(err) {
-    if (err instanceof RegistryWriteFailedError)
-        return 'registry';
-    if (err instanceof PersistenceLoadFailedError)
-        return 'persistence.load';
-    if (err instanceof RedirectPolicyError)
-        return 'redirect.policy';
-    if (err instanceof DelegationPolicyError)
-        return 'delegation.policy';
-    if (err instanceof DelegationMintError)
-        return 'delegation.mint';
-    if (err instanceof DelegationRefusedError)
-        return 'delegation.refused';
-    if (err instanceof UnresolvedIdentityError || err instanceof IdentityPickerError)
-        return 'identity';
-    if (err instanceof PoolClosedError)
-        return 'session';
-    if (err instanceof ClientSessionError)
-        return 'session';
-    return 'transport';
-}
-//# sourceMappingURL=helpers.js.map

package/dist/session/helpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"helpers.js","sourceRoot":"","sources":["../../src/session/helpers.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAM5B;IACC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,MAAM,CAAA;QACtB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,QAAQ,CAAA;QACxB,KAAK,UAAU;YACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAI,GAAiB;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;AAChC,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACjD,OAAO,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAA;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,GAAG,YAAY,wBAAwB;QAAE,OAAO,UAAU,CAAA;IAC9D,IAAI,GAAG,YAAY,0BAA0B;QAAE,OAAO,kBAAkB,CAAA;IACxE,IAAI,GAAG,YAAY,mBAAmB;QAAE,OAAO,iBAAiB,CAAA;IAChE,IAAI,GAAG,YAAY,qBAAqB;QAAE,OAAO,mBAAmB,CAAA;IACpE,IAAI,GAAG,YAAY,mBAAmB;QAAE,OAAO,iBAAiB,CAAA;IAChE,IAAI,GAAG,YAAY,sBAAsB;QAAE,OAAO,oBAAoB,CAAA;IACtE,IAAI,GAAG,YAAY,uBAAuB,IAAI,GAAG,YAAY,mBAAmB;QAC9E,OAAO,UAAU,CAAA;IACnB,IAAI,GAAG,YAAY,eAAe;QAAE,OAAO,SAAS,CAAA;IACpD,IAAI,GAAG,YAAY,kBAAkB;QAAE,OAAO,SAAS,CAAA;IACvD,OAAO,WAAW,CAAA;AACpB,CAAC"}

package/dist/session/hooks.d.ts

@@ -1,140 +0,0 @@
-import type { CallRedirection } from '@astrale-os/kernel-api';
-import type { CredentialInput } from '@astrale-os/kernel-core';
-import type { SelfIdentityExpr, UnresolvedIdentityExpr } from '@astrale-os/kernel-core/expression';
-import type { FunctionSchema } from '../schema/types.js';
-/** Hop record ClientSession threads through every ctx type. */
-export type ClientSessionHop = {
-    url: string;
-    at: number;
-};
-/**
- * Ctx for the entry of a top-level `session.call`. Fields are captured
- * *before* any wire I/O — `credential` is the baseCred resolved from
- * the picker or `opts.credential`, not the per-hop delegation.
- */
-export type BeforeCallCtx = {
-    method: string;
-    params: unknown;
-    credential: CredentialInput;
-    /** Initial target — may not equal default if `opts.url` was used. */
-    url: string;
-    correlationId: string;
-    maxHops: number;
-};
-/**
- * Ctx for a successful `session.call`. `result` is the unwrapped value
- * the caller received; `hops` is the full chain.
- */
-export type AfterCallCtx = BeforeCallCtx & {
-    result: unknown;
-    hops: ReadonlyArray<ClientSessionHop>;
-    /** Wall-clock ms from `onBeforeCall` firing to this hook firing. */
-    durationMs: number;
-};
-/** Ctx for a followed redirect hop transition. */
-export type RedirectFollowCtx = BeforeCallCtx & {
-    /** 0-based hop index being departed. */
-    fromHop: number;
-    fromUrl: string;
-    toUrl: string;
-    redirection: CallRedirection;
-    /** Present if `redirection.schema` was saved to the registry. */
-    schemaLearned?: FunctionSchema;
-    /** True if a fresh mint happened for this hop (cache miss). */
-    delegationMinted: boolean;
-};
-/** Ctx for a refused redirect — symmetric with `RedirectFollowCtx`. */
-export type RedirectRefusedCtx = BeforeCallCtx & {
-    fromUrl: string;
-    redirection: CallRedirection;
-    /** From `RedirectPolicy.decide({ follow: false, reason })`. */
-    reason: string;
-};
-/** Ctx for a refused delegation (policy.decide returned `{ allow: false }`). */
-export type DelegationRefusedCtx = BeforeCallCtx & {
-    /** URL the delegation would have targeted. */
-    target: string;
-    /** Audience derived by `DelegationPolicy.audienceFor`. */
-    audience: string;
-    /** Expression the mint would have carried (pre-refine per §9.3.1). */
-    delegation: UnresolvedIdentityExpr;
-    /** Outer-envelope attestation the mint would have carried, if any. */
-    attestation?: SelfIdentityExpr;
-    /** From `DelegationPolicy.decide({ allow: false, reason })`. */
-    reason: string;
-};
-/**
- * Ctx for a fresh delegation mint. Does NOT extend `BeforeCallCtx` —
- * a mint can coalesce across N triggering calls, so single-cid fields
- * would lie; see `triggeringCorrelationIds`.
- *
- * `delegation` / `attestation` are post-refine (what was actually minted
- * and keyed in the cache), not the originals from `delegationFor`.
- */
-export type DelegationMintCtx = {
-    audience: string;
-    /** The `UnresolvedIdentityExpr` the mint actually carried. */
-    delegation: UnresolvedIdentityExpr;
-    /** The `SelfIdentityExpr` the mint actually carried, if any. */
-    attestation?: SelfIdentityExpr;
-    /**
-     * Correlation id(s) of the call(s) waiting on this mint. When
-     * multiple concurrent callers share one mint, every waiter's id
-     * appears. First element is the triggering call; remaining elements
-     * are callers that joined before resolution.
-     *
-     * Cross-session limitation: when two ClientSessions share one
-     * `DelegationCache` and one of them drives the mint while the other
-     * joins the in-flight promise, only the driving ClientSession's waiters
-     * appear here. The joining ClientSession's `triggeringCorrelationIds` is
-     * empty for that mint. Callers needing mint-correlation across
-     * shared caches observe it through the owning ClientSession's hook.
-     */
-    triggeringCorrelationIds: readonly string[];
-    /**
-     * Method name of the triggering call — quick filtering helper;
-     * per-correlationId methods can be tracked separately.
-     */
-    triggeringMethod: string;
-    /** Wall-clock ms the mint took. */
-    durationMs: number;
-    /** TTL (seconds) of the minted credential. */
-    ttl: number;
-};
-/**
- * Ctx for any error thrown from ClientSession. `context` triages the error
- * source without stack parsing.
- */
-export type ClientSessionErrorCtx = BeforeCallCtx & {
-    error: Error;
-    hops: ReadonlyArray<ClientSessionHop>;
-    context: 'transport' | 'redirect.policy' | 'delegation.policy' | 'delegation.mint' | 'delegation.refused' | 'identity' | 'registry' | 'persistence.load' | 'persistence.save' | 'session';
-};
-/** Ctx for `session.signal` dispatch — fire-and-forget, no result. */
-export type AfterSignalCtx = {
-    method: string;
-    params: unknown;
-    url: string;
-    correlationId: string;
-    dispatchedAt: number;
-};
-/** Orchestration-layer hook surface. `ClientHooks` still fires per hop. */
-export type ClientSessionHooks = {
-    /** Fires once per top-level `session.call`/`stream`/`binary` (NOT per hop). */
-    onBeforeCall?: (ctx: BeforeCallCtx) => void | Promise<void>;
-    /** Fires once per successful top-level call, after final-hop unwrap. */
-    onAfterCall?: (ctx: AfterCallCtx) => void | Promise<void>;
-    /** Fires once per redirect actually followed. */
-    onRedirectFollow?: (ctx: RedirectFollowCtx) => void | Promise<void>;
-    /** Fires once per refused redirect (before the throw). */
-    onRedirectRefused?: (ctx: RedirectRefusedCtx) => void | Promise<void>;
-    /** Fires once per delegation mint (cache miss). */
-    onDelegationMint?: (ctx: DelegationMintCtx) => void | Promise<void>;
-    /** Fires once per refused delegation (before the throw). */
-    onDelegationRefused?: (ctx: DelegationRefusedCtx) => void | Promise<void>;
-    /** Fires on every error thrown from ClientSession. */
-    onError?: (ctx: ClientSessionErrorCtx) => void | Promise<void>;
-    /** Fires on `session.signal` dispatch. */
-    onAfterSignal?: (ctx: AfterSignalCtx) => void | Promise<void>;
-};
-//# sourceMappingURL=hooks.d.ts.map

package/dist/session/hooks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hooks.d.ts","sourceRoot":"","sources":["../../src/session/hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAA;AAElG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAExD,+DAA+D;AAC/D,MAAM,MAAM,gBAAgB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAE1D;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,UAAU,EAAE,eAAe,CAAA;IAC3B,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG;IACzC,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAA;IACrC,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,kDAAkD;AAClD,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG;IAC9C,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,eAAe,CAAA;IAC5B,iEAAiE;IACjE,aAAa,CAAC,EAAE,cAAc,CAAA;IAC9B,+DAA+D;IAC/D,gBAAgB,EAAE,OAAO,CAAA;CAC1B,CAAA;AAED,uEAAuE;AACvE,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG;IAC/C,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,eAAe,CAAA;IAC5B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED,gFAAgF;AAChF,MAAM,MAAM,oBAAoB,GAAG,aAAa,GAAG;IACjD,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAA;IACd,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAA;IAChB,sEAAsE;IACtE,UAAU,EAAE,sBAAsB,CAAA;IAClC,sEAAsE;IACtE,WAAW,CAAC,EAAE,gBAAgB,CAAA;IAC9B,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,8DAA8D;IAC9D,UAAU,EAAE,sBAAsB,CAAA;IAClC,gEAAgE;IAChE,WAAW,CAAC,EAAE,gBAAgB,CAAA;IAC9B;;;;;;;;;;;;OAYG;IACH,wBAAwB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAA;IACxB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAA;CACZ,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG;IAClD,KAAK,EAAE,KAAK,CAAA;IACZ,IAAI,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAA;IACrC,OAAO,EACH,WAAW,GACX,iBAAiB,GACjB,mBAAmB,GACnB,iBAAiB,GACjB,oBAAoB,GACpB,UAAU,GACV,UAAU,GACV,kBAAkB,GAClB,kBAAkB,GAClB,SAAS,CAAA;CACd,CAAA;AAED,sEAAsE;AACtE,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,OAAO,CAAA;IACf,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG;IAC/B,+EAA+E;IAC/E,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,wEAAwE;IACxE,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzD,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrE,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,4DAA4D;IAC5D,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,sDAAsD;IACtD,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,qBAAqB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,0CAA0C;IAC1C,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9D,CAAA"}

package/dist/session/hooks.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=hooks.js.map

package/dist/session/hooks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../../src/session/hooks.ts"],"names":[],"mappings":""}

package/dist/session/redirect/errors.d.ts

@@ -1,45 +0,0 @@
-import type { CallRedirection } from '@astrale-os/kernel-api';
-import { ClientSessionError } from '../../errors/session-error.js';
-/**
- * Redirect policy refused to follow a redirection.
- *
- * Thrown by ClientSession's dispatch loop after `RedirectPolicy.decide` returns
- * `{ follow: false, reason }`. The refused `redirection` is preserved so
- * consumers can surface the URL to the user or retry explicitly via
- * `session.call(..., { url: e.redirection.url })`. Spec §10.3.
- */
-export declare class RedirectRefusedError extends ClientSessionError {
-    readonly redirection: CallRedirection;
-    readonly reason: string;
-    constructor(redirection: CallRedirection, reason: string, options?: ErrorOptions);
-}
-/**
- * Redirect chain exceeded the configured `maxHops`.
- *
- * Thrown by ClientSession's dispatch loop before calling `RedirectPolicy.decide`
- * on the would-be (N+1)-th hop. `hops` carries the full chain to that
- * point — first element is the initial target, last is the hop that
- * returned the cap-triggering redirect. Spec §10.3.
- */
-export declare class HopLimitExceededError extends ClientSessionError {
-    readonly method: string;
-    readonly hops: ReadonlyArray<{
-        url: string;
-        at: number;
-    }>;
-    constructor(method: string, hops: ReadonlyArray<{
-        url: string;
-        at: number;
-    }>);
-}
-/**
- * A `RedirectPolicy.decide` implementation itself threw.
- *
- * Programmer error at the policy layer. The thrown error wraps as
- * `cause`. Consumers treating this as "refused" is safe. Spec §10.3.
- */
-export declare class RedirectPolicyError extends ClientSessionError {
-    readonly redirection: CallRedirection;
-    constructor(redirection: CallRedirection, options?: ErrorOptions);
-}
-//# sourceMappingURL=errors.d.ts.map

package/dist/session/redirect/errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/session/redirect/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE;;;;;;;GAOG;AACH,qBAAa,oBAAqB,SAAQ,kBAAkB;aAExC,WAAW,EAAE,eAAe;aAC5B,MAAM,EAAE,MAAM;IAFhC,YACkB,WAAW,EAAE,eAAe,EAC5B,MAAM,EAAE,MAAM,EAC9B,OAAO,CAAC,EAAE,YAAY,EAIvB;CACF;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,kBAAkB;aAEzC,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAFlE,YACkB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,aAAa,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,EAIjE;CACF;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,kBAAkB;aAEvC,WAAW,EAAE,eAAe;IAD9C,YACkB,WAAW,EAAE,eAAe,EAC5C,OAAO,CAAC,EAAE,YAAY,EAQvB;CACF"}

package/dist/session/redirect/errors.js

@@ -1,52 +0,0 @@
-import { ClientSessionError } from '../../errors/session-error.js';
-/**
- * Redirect policy refused to follow a redirection.
- *
- * Thrown by ClientSession's dispatch loop after `RedirectPolicy.decide` returns
- * `{ follow: false, reason }`. The refused `redirection` is preserved so
- * consumers can surface the URL to the user or retry explicitly via
- * `session.call(..., { url: e.redirection.url })`. Spec §10.3.
- */
-export class RedirectRefusedError extends ClientSessionError {
-    redirection;
-    reason;
-    constructor(redirection, reason, options) {
-        super(`Redirect to ${redirection.url} refused: ${reason}`, 'REDIRECT_REFUSED', options);
-        this.redirection = redirection;
-        this.reason = reason;
-        this.name = 'RedirectRefusedError';
-    }
-}
-/**
- * Redirect chain exceeded the configured `maxHops`.
- *
- * Thrown by ClientSession's dispatch loop before calling `RedirectPolicy.decide`
- * on the would-be (N+1)-th hop. `hops` carries the full chain to that
- * point — first element is the initial target, last is the hop that
- * returned the cap-triggering redirect. Spec §10.3.
- */
-export class HopLimitExceededError extends ClientSessionError {
-    method;
-    hops;
-    constructor(method, hops) {
-        super(`Hop limit exceeded for "${method}": ${hops.length} hops`, 'HOP_LIMIT_EXCEEDED');
-        this.method = method;
-        this.hops = hops;
-        this.name = 'HopLimitExceededError';
-    }
-}
-/**
- * A `RedirectPolicy.decide` implementation itself threw.
- *
- * Programmer error at the policy layer. The thrown error wraps as
- * `cause`. Consumers treating this as "refused" is safe. Spec §10.3.
- */
-export class RedirectPolicyError extends ClientSessionError {
-    redirection;
-    constructor(redirection, options) {
-        super(`Redirect policy threw while deciding → ${redirection.url}`, 'REDIRECT_POLICY_THREW', options);
-        this.redirection = redirection;
-        this.name = 'RedirectPolicyError';
-    }
-}
-//# sourceMappingURL=errors.js.map

package/dist/session/redirect/errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/session/redirect/errors.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAqB,SAAQ,kBAAkB;IAExC,WAAW;IACX,MAAM;IAFxB,YACkB,WAA4B,EAC5B,MAAc,EAC9B,OAAsB;QAEtB,KAAK,CAAC,eAAe,WAAW,CAAC,GAAG,aAAa,MAAM,EAAE,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAA;2BAJvE,WAAW;sBACX,MAAM;QAItB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;IACpC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAsB,SAAQ,kBAAkB;IAEzC,MAAM;IACN,IAAI;IAFtB,YACkB,MAAc,EACd,IAAgD;QAEhE,KAAK,CAAC,2BAA2B,MAAM,MAAM,IAAI,CAAC,MAAM,OAAO,EAAE,oBAAoB,CAAC,CAAA;sBAHtE,MAAM;oBACN,IAAI;QAGpB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;IACrC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,mBAAoB,SAAQ,kBAAkB;IAEvC,WAAW;IAD7B,YACkB,WAA4B,EAC5C,OAAsB;QAEtB,KAAK,CACH,0CAA0C,WAAW,CAAC,GAAG,EAAE,EAC3D,uBAAuB,EACvB,OAAO,CACR,CAAA;2BAPe,WAAW;QAQ3B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAA;IACnC,CAAC;CACF"}

package/dist/session/redirect/policy.d.ts

@@ -1,79 +0,0 @@
-import type { CallRedirection } from '@astrale-os/kernel-api';
-/**
- * Hop record ClientSession threads through every policy call. Each entry is a
- * URL the call dispatched to and the timestamp at which it was reached;
- * the initial target is `hops[0]`, the current hop is `hops[hops.length-1]`.
- */
-export type RedirectHop = {
-    url: string;
-    at: number;
-};
-/**
- * Policy decision returned by `RedirectPolicy.decide`.
- *
- * `{ follow: true }` follows to `redirection.url`. `{ follow: false,
- * reason }` causes ClientSession to throw `RedirectRefusedError(redirection,
- * reason)`.
- */
-export type RedirectDecision = {
-    follow: true;
-} | {
-    follow: false;
-    reason: string;
-};
-/**
- * Decision surface for ClientSession's redirect follow loop. Spec §9.4.
- *
- * Owns ONLY the follow/refuse decision and reason attribution. Does NOT
- * own the follow loop (ClientSession does, §8.1), hop-cap enforcement (ClientSession
- * checks before calling `decide`), audience derivation (that's
- * `DelegationPolicy`, §9.3), or schema persistence (ClientSession sequences it).
- */
-export interface RedirectPolicy {
-    /**
-     * Decide whether to follow. `signal` propagates the caller's abort —
-     * implementations that await UI input MUST race against it.
-     */
-    decide(redirection: CallRedirection, hops: ReadonlyArray<RedirectHop>, correlationId: string, signal: AbortSignal | undefined): RedirectDecision | Promise<RedirectDecision>;
-}
-/**
- * Follow every redirect. Default when `ClientSessionConfig.redirect` is absent.
- *
- * Consumers who want to gate redirects on a URL allowlist use
- * `allowlistPolicy`; consumers who want to prompt the user per hop use
- * `promptPolicy`; consumers who want to refuse every redirect use
- * `strictPolicy`.
- */
-export declare function allowAllPolicy(): RedirectPolicy;
-/**
- * Refuse every redirect. Opt-in — when a consumer wants cross-kernel
- * follow blocked entirely and every redirect surfaced as a
- * `RedirectRefusedError`.
- */
-export declare function strictPolicy(): RedirectPolicy;
-/**
- * Follow only URLs that the `allow` predicate returns true for.
- *
- * ```ts
- * allowlistPolicy({
- *   allow: (url) => new URL(url).host.endsWith('.trusted.kernel'),
- * })
- * ```
- */
-export declare function allowlistPolicy(opts: {
-    allow: (url: string) => boolean;
-}): RedirectPolicy;
-/**
- * Ask the consumer for each redirect. The returned policy races the UI
- * `onPrompt` call against the caller's `signal`, so aborting the
- * top-level `session.call` cancels the prompt.
- *
- * `allow`, when provided, is a fast-path predicate that skips the
- * prompt (for pre-approved URLs). Returning `false` from `allow` falls
- * through to `onPrompt`.
- */
-export declare function promptPolicy(opts: {
-    onPrompt: (redirection: CallRedirection, hops: ReadonlyArray<RedirectHop>) => Promise<boolean>;
-    allow?: (url: string) => boolean;
-}): RedirectPolicy;
-//# sourceMappingURL=policy.d.ts.map