@astrale-os/kernel-client 0.6.0-beta.1 → 0.6.0-beta.2

package/dist/schema/admission.js

@@ -0,0 +1,23 @@
+import { KernelSchema } from '@astrale-os/kernel-core/schema';
+import { schema } from '@astrale-os/kernel-dsl/v1';
+import * as portable from '@astrale-os/kernel-dsl/value';
+export function acceptOutput(owner, input) {
+    if (owner.declaration.output.mode !== 'value') {
+        throw new TypeError('Schema Client expected a value-producing Kernel syscall.');
+    }
+    const value = portable.accept(input);
+    const diagnostics = schema.values.validate(KernelSchema, owner.declaration.output.schema, value, '/output');
+    if (diagnostics.length > 0) {
+        throw new TypeError(`Kernel returned an invalid Schema result: ${diagnostics[0].message}`);
+    }
+    return freeze(value);
+}
+function freeze(input) {
+    if (input !== null && typeof input === 'object' && !Object.isFrozen(input)) {
+        for (const value of Object.values(input))
+            freeze(value);
+        Object.freeze(input);
+    }
+    return input;
+}
+//# sourceMappingURL=admission.js.map

package/dist/schema/admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.js","sourceRoot":"","sources":["../../schema/admission.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAClD,OAAO,KAAK,QAAQ,MAAM,8BAA8B,CAAA;AASxD,MAAM,UAAU,YAAY,CAAI,KAAmB,EAAE,KAAc;IACjE,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CAAC,0DAA0D,CAAC,CAAA;IACjF,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAU,CAAA;IAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CACxC,YAAY,EACZ,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,EAC/B,KAAK,EACL,SAAS,CACV,CAAA;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CAAC,6CAA6C,WAAW,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAM,CAAA;AAC3B,CAAC;AAED,SAAS,MAAM,CAAkB,KAAQ;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/schema/index.d.ts

@@ -0,0 +1,4 @@
+export { createSchema, type SchemaApi, type SchemaCall, type SchemaOptions, type ReadyInstallation, } from './schema.js';
+export type { DesiredInstallation, InstallReceipt, InstallRequest, UninstallReceipt, UninstallRequest, } from '@astrale-os/kernel-ports/schema';
+export type { Operation, OperationId } from '@astrale-os/kernel-ports/schema/installation';
+//# sourceMappingURL=index.d.ts.map

package/dist/schema/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAA;AAEpB,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,iCAAiC,CAAA;AACxC,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAA"}

package/dist/schema/index.js

@@ -0,0 +1,2 @@
+export { createSchema, } from './schema.js';
+//# sourceMappingURL=index.js.map

package/dist/schema/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../schema/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,GAKb,MAAM,aAAa,CAAA"}

package/dist/schema/introspection.d.ts

@@ -0,0 +1,6 @@
+import type { introspection as language } from '@astrale-os/kernel-core/schema';
+import type { schema as protocol } from '@astrale-os/kernel-protocol';
+import type { RequestOptions } from '../transport/index.js';
+import type { SchemaCall, SchemaOptions } from './schema.js';
+export declare function introspect<InputType extends language.Introspection>(invoke: SchemaCall, limits: SchemaOptions, request: InputType, options?: RequestOptions): Promise<protocol.installation.introspection.ResultFor<InputType>>;
+//# sourceMappingURL=introspection.d.ts.map

package/dist/schema/introspection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"introspection.d.ts","sourceRoot":"","sources":["../../schema/introspection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,gCAAgC,CAAA;AAE/E,OAAO,KAAK,EAAE,MAAM,IAAI,QAAQ,EAAE,MAAM,6BAA6B,CAAA;AAMrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAM5D,wBAAsB,UAAU,CAAC,SAAS,SAAS,QAAQ,CAAC,aAAa,EACvE,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,SAAS,EAClB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CASnE"}

package/dist/schema/introspection.js

@@ -0,0 +1,16 @@
+import { Path } from '@astrale-os/kernel-core/path';
+import { syscalls } from '@astrale-os/kernel-core/schema';
+import { schema } from '@astrale-os/kernel-protocol';
+import { call } from '../client/index.js';
+const INTROSPECT_PATH = Path.project(syscalls.introspect.ref).raw;
+export async function introspect(invoke, limits, request, options) {
+    const result = await invoke(call(INTROSPECT_PATH, request), options);
+    if (result.kind !== 'binary') {
+        throw new TypeError('Schema introspection returned a non-binary result.');
+    }
+    if (result.value.mediaType !== schema.installation.introspection.MEDIA_TYPE) {
+        throw new TypeError('Schema introspection returned an unsupported media type.');
+    }
+    return schema.installation.introspection.decode(request, result.value.body, limits);
+}
+//# sourceMappingURL=introspection.js.map

package/dist/schema/introspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"introspection.js","sourceRoot":"","sources":["../../schema/introspection.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAA;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAKpD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAEzC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAA;AAEjE,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAkB,EAClB,MAAqB,EACrB,OAAkB,EAClB,OAAwB;IAExB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,OAA2B,CAAC,EAAE,OAAO,CAAC,CAAA;IACxF,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAA;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CAAC,0DAA0D,CAAC,CAAA;IACjF,CAAC;IACD,OAAO,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACrF,CAAC"}

package/dist/schema/schema.d.ts

@@ -0,0 +1,21 @@
+import type { introspection } from '@astrale-os/kernel-core/schema';
+import type { Result } from '@astrale-os/kernel-ports/functions';
+import type { InstallReceipt, InstallRequest, UninstallReceipt, UninstallRequest } from '@astrale-os/kernel-ports/schema';
+import type { schema as protocolSchema } from '@astrale-os/kernel-protocol';
+import type { Call } from '../client/index.js';
+import type { RequestOptions } from '../transport/index.js';
+export type SchemaCall = (call: Call, options?: RequestOptions) => Promise<Result>;
+export interface SchemaOptions extends protocolSchema.installation.introspection.Limits {
+}
+export type ReadyInstallation = protocolSchema.installation.introspection.Installation & {
+    readonly state: 'ready';
+    readonly readiness: protocolSchema.installation.introspection.Digest;
+};
+export interface SchemaApi {
+    install(request: InstallRequest, options?: RequestOptions): Promise<InstallReceipt>;
+    uninstall(request: UninstallRequest, options?: RequestOptions): Promise<UninstallReceipt>;
+    introspect<Input extends introspection.Introspection>(request: Input, options?: RequestOptions): Promise<protocolSchema.installation.introspection.ResultFor<Input>>;
+}
+/** Bind the canonical Schema lifecycle syscalls to one caller-scoped value-call capability. */
+export declare function createSchema(call: SchemaCall, limits: SchemaOptions): SchemaApi;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../schema/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AACnE,OAAO,KAAK,EAAS,MAAM,EAAE,MAAM,oCAAoC,CAAA;AACvE,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,iCAAiC,CAAA;AACxC,OAAO,KAAK,EAAE,MAAM,IAAI,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAK3E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAM3D,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;AAElF,MAAM,WAAW,aAAc,SAAQ,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM;CAAG;AAE1F,MAAM,MAAM,iBAAiB,GAAG,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,YAAY,GAAG;IACvF,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAA;CACrE,CAAA;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACnF,SAAS,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACzF,UAAU,CAAC,KAAK,SAAS,aAAa,CAAC,aAAa,EAClD,OAAO,EAAE,KAAK,EACd,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;CACvE;AAKD,+FAA+F;AAC/F,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,GAAG,SAAS,CAuB/E"}

package/dist/schema/schema.js

@@ -0,0 +1,43 @@
+import { Path } from '@astrale-os/kernel-core/path';
+import { syscalls } from '@astrale-os/kernel-core/schema';
+import { call as invocation } from '../client/index.js';
+import { acceptOutput } from './admission.js';
+import { introspect as inspect } from './introspection.js';
+const INSTALL_PATH = Path.project(syscalls.install.ref).raw;
+const UNINSTALL_PATH = Path.project(syscalls.uninstall.ref).raw;
+/** Bind the canonical Schema lifecycle syscalls to one caller-scoped value-call capability. */
+export function createSchema(call, limits) {
+    if (typeof call !== 'function')
+        throw new TypeError('Schema call capability is invalid.');
+    const admittedLimits = admitLimits(limits);
+    return Object.freeze({
+        async install(request, options) {
+            const output = value(await call(invocation(INSTALL_PATH, request), options));
+            return acceptOutput(syscalls.install, output);
+        },
+        async uninstall(request, options) {
+            const output = value(await call(invocation(UNINSTALL_PATH, request), options));
+            return acceptOutput(syscalls.uninstall, output);
+        },
+        async introspect(request, options) {
+            return inspect(call, admittedLimits, request, options);
+        },
+    });
+}
+function value(result) {
+    if (result.kind !== 'value')
+        throw new TypeError('Schema syscall returned a non-value result.');
+    return result.value;
+}
+function admitLimits(input) {
+    if (input === null ||
+        typeof input !== 'object' ||
+        !Number.isSafeInteger(input.maximumPublicationBytes) ||
+        input.maximumPublicationBytes < 1 ||
+        !Number.isSafeInteger(input.maximumBundleBytes) ||
+        input.maximumBundleBytes < 1) {
+        throw new TypeError('Schema introspection limits are invalid.');
+    }
+    return Object.freeze({ ...input });
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../schema/schema.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,IAAI,EAAE,MAAM,8BAA8B,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAA;AAKzD,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,UAAU,IAAI,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAoB1D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAA;AAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,CAAA;AAE/D,+FAA+F;AAC/F,MAAM,UAAU,YAAY,CAAC,IAAgB,EAAE,MAAqB;IAClE,IAAI,OAAO,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAA;IACzF,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,OAAO,CAAC,OAAuB,EAAE,OAAwB;YAC7D,MAAM,MAAM,GAAG,KAAK,CAClB,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,OAA2B,CAAC,EAAE,OAAO,CAAC,CAC3E,CAAA;YACD,OAAO,YAAY,CAAiB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,OAAyB,EAAE,OAAwB;YACjE,MAAM,MAAM,GAAG,KAAK,CAClB,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,OAA2B,CAAC,EAAE,OAAO,CAAC,CAC7E,CAAA;YACD,OAAO,YAAY,CAAmB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QACnE,CAAC;QACD,KAAK,CAAC,UAAU,CACd,OAAc,EACd,OAAwB;YAExB,OAAO,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACxD,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,MAAc;IAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAA;IAC/F,OAAO,MAAM,CAAC,KAAK,CAAA;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB;IACvC,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,uBAAuB,CAAC;QACpD,KAAK,CAAC,uBAAuB,GAAG,CAAC;QACjC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC/C,KAAK,CAAC,kBAAkB,GAAG,CAAC,EAC5B,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;AACpC,CAAC"}

package/dist/session/context/index.d.ts

@@ -1,5 +1,5 @@
 export { admitControlOptions, type SessionControlOptions } from './control.js';
 export { DEFAULT_MAXIMUM_BUNDLE_BYTES, DEFAULT_MAXIMUM_PUBLICATION_BYTES, DEFAULT_MAXIMUM_RESPONSE_BYTES, DEFAULT_MAXIMUM_ROUTES, DEFAULT_TIMEOUT_MS, platformDuration, positive, } from './limits.js';
 export { createSessionOperation, runSessionOperation, sessionTransportOptions, type SessionOperation, } from './operation.js';
-export { admitPolicy, allowEndpoint, endpoint, type SessionPolicy } from './policy.js';
+export { admitKernel, admitPolicy, allowEndpoint, kernelInvocationEndpoint, type SessionPolicy, } from './policy.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/session/context/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../session/context/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAC9E,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,8BAA8B,EAC9B,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,QAAQ,GACT,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../session/context/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAC9E,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,8BAA8B,EAC9B,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,QAAQ,GACT,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,WAAW,EACX,WAAW,EACX,aAAa,EACb,wBAAwB,EACxB,KAAK,aAAa,GACnB,MAAM,aAAa,CAAA"}

package/dist/session/context/index.js

@@ -1,5 +1,5 @@
 export { admitControlOptions } from './control.js';
 export { DEFAULT_MAXIMUM_BUNDLE_BYTES, DEFAULT_MAXIMUM_PUBLICATION_BYTES, DEFAULT_MAXIMUM_RESPONSE_BYTES, DEFAULT_MAXIMUM_ROUTES, DEFAULT_TIMEOUT_MS, platformDuration, positive, } from './limits.js';
 export { createSessionOperation, runSessionOperation, sessionTransportOptions, } from './operation.js';
-export { admitPolicy, allowEndpoint, endpoint } from './policy.js';
+export { admitKernel, admitPolicy, allowEndpoint, kernelInvocationEndpoint, } from './policy.js';
 //# sourceMappingURL=index.js.map

package/dist/session/context/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../session/context/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAA8B,MAAM,cAAc,CAAA;AAC9E,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,8BAA8B,EAC9B,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,QAAQ,GACT,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GAExB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAsB,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../session/context/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAA8B,MAAM,cAAc,CAAA;AAC9E,OAAO,EACL,4BAA4B,EAC5B,iCAAiC,EACjC,8BAA8B,EAC9B,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,QAAQ,GACT,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,GAExB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,WAAW,EACX,WAAW,EACX,aAAa,EACb,wBAAwB,GAEzB,MAAM,aAAa,CAAA"}

package/dist/session/context/policy.d.ts

@@ -1,10 +1,12 @@
+import type { IssuerId } from '@astrale-os/kernel-core/auth';
 export interface SessionPolicy {
     readonly maximumRouteAgeMs: number;
     readonly allowEndpoint?: (url: string) => boolean;
     readonly allowInsecureHttp?: boolean;
 }
 export declare function admitPolicy(input: SessionPolicy): Readonly<SessionPolicy>;
-export declare function endpoint(input: string, insecure: boolean): string;
+export declare function admitKernel(input: string, insecure: boolean): IssuerId;
+export declare function kernelInvocationEndpoint(input: IssuerId): string;
 export declare function websocketEndpoint(input: string, insecure: boolean): string;
 export declare function allowEndpoint(url: string, policy: Readonly<SessionPolicy>): void;
 //# sourceMappingURL=policy.d.ts.map

package/dist/session/context/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../session/context/policy.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;IACjD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CACrC;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC,CAezE;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAgBjE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAgB1E;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,IAAI,CAahF"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../session/context/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAO5D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;IACjD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CACrC;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC,CAezE;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAmBtE;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAEhE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAgB1E;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,IAAI,CAahF"}

package/dist/session/context/policy.js

@@ -1,3 +1,4 @@
+import { issuer } from '@astrale-os/kernel-core/auth';
 import { ClientError } from '../../errors/index.js';
 import { positive } from './limits.js';
 export function admitPolicy(input) {
@@ -16,21 +17,27 @@ export function admitPolicy(input) {
         ...(input.allowInsecureHttp === true ? { allowInsecureHttp: true } : {}),
     });
 }
-export function endpoint(input, insecure) {
+export function admitKernel(input, insecure) {
     let url;
+    let admitted;
     try {
-        url = new URL(input);
+        admitted = issuer.accept(input);
+        url = new URL(admitted);
     }
     catch (cause) {
-        throw new TypeError('Session endpoint is invalid.', { cause });
+        throw new TypeError('Session Kernel issuer is invalid.', { cause });
     }
     if (url.username !== '' ||
         url.password !== '' ||
         url.hash !== '' ||
+        url.search !== '' ||
         (url.protocol !== 'https:' && !(insecure && url.protocol === 'http:'))) {
-        throw new TypeError('Session endpoint is invalid.');
+        throw new TypeError('Session Kernel issuer is invalid.');
     }
-    return url.toString();
+    return admitted;
+}
+export function kernelInvocationEndpoint(input) {
+    return `${input}/invoke`;
 }
 export function websocketEndpoint(input, insecure) {
     let url;

package/dist/session/context/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../session/context/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAQtC,MAAM,UAAU,WAAW,CAAC,KAAoB;IAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1F,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QACzE,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;QACpF,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,QAAiB;IACvD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,IAAI,KAAK,EAAE;QACf,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAA;IACrD,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,QAAiB;IAChE,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,IAAI,KAAK,EAAE;QACf,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAA+B;IACxE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/D,IACE,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC;YAC1D,MAAM,CAAC,iBAAiB,KAAK,IAAI,EACjC,CAAC;YACD,MAAM,IAAI,WAAW,CAAC,kDAAkD,CAAC,CAAA;QAC3E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,WAAW,CAAC,uCAAuC,CAAC,CAAA;IAChE,CAAC;AACH,CAAC"}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../session/context/policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAA;AAErD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAQtC,MAAM,UAAU,WAAW,CAAC,KAAoB;IAC9C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1F,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QACzE,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;QACpF,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,QAAiB;IAC1D,IAAI,GAAQ,CAAA;IACZ,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/B,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,mCAAmC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACrE,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,IAAI,KAAK,EAAE;QACf,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAe;IACtD,OAAO,GAAG,KAAK,SAAS,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,QAAiB;IAChE,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,IAAI,KAAK,EAAE;QACf,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAA;AACvB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAA+B;IACxE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/D,IACE,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC;YAC1D,MAAM,CAAC,iBAAiB,KAAK,IAAI,EACjC,CAAC;YACD,MAAM,IAAI,WAAW,CAAC,kDAAkD,CAAC,CAAA;QAC3E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,WAAW,CAAC,uCAAuC,CAAC,CAAA;IAChE,CAAC;AACH,CAAC"}

package/dist/session/discovery/bundle.js

@@ -22,28 +22,28 @@ export class BundleDiscovery {
         this.bundles.clear();
     }
     async fetch(publication, operation) {
-        if (publication.schema.bundle.size > this.options.maximumBytes) {
+        if (publication.schema.bundle.ref.size > this.options.maximumBytes) {
             throw new ClientError('Bundle artifact exceeds its byte limit.');
         }
         const href = publication.schema.bundle.href;
         allowEndpoint(href, this.options.policy);
         const response = await runSessionOperation(operation, (signal) => this.options.fetch(href, {
-            headers: { accept: publication.schema.bundle.mediaType },
+            headers: { accept: publication.schema.bundle.ref.mediaType },
             redirect: 'manual',
             signal,
         }));
         requireExactResponse(response, href, 'Bundle retrieval');
         if (!response.ok)
             throw new ClientError(`Bundle retrieval returned HTTP ${response.status}.`);
-        if (response.headers.get('content-type') !== publication.schema.bundle.mediaType) {
+        if (response.headers.get('content-type') !== publication.schema.bundle.ref.mediaType) {
             throw new ClientError('Bundle artifact media type differs from its descriptor.');
         }
         const etag = response.headers.get('etag');
-        if (etag !== null && etag !== `"${publication.schema.bundle.digest}"`) {
+        if (etag !== null && etag !== `"${publication.schema.bundle.ref.digest}"`) {
             throw new ClientError('Bundle response ETag differs from its descriptor.');
         }
-        const bytes = await runSessionOperation(operation, (signal) => boundedResponse(response, publication.schema.bundle.size, signal));
-        if (bytes.byteLength !== publication.schema.bundle.size) {
+        const bytes = await runSessionOperation(operation, (signal) => boundedResponse(response, publication.schema.bundle.ref.size, signal));
+        if (bytes.byteLength !== publication.schema.bundle.ref.size) {
             throw new ClientError('Bundle artifact size differs from its descriptor.');
         }
         return publicationCodec.decodeBundle(publication, bytes);

package/dist/session/discovery/bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../../session/discovery/bundle.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,IAAI,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAK7E,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAQxE,MAAM,OAAO,eAAe;IAGG,OAAO;IAFnB,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAA;IAE3D,YAA6B,OAA+B;uBAA/B,OAAO;IAA2B,CAAC;IAEhE,KAAK,CAAC,GAAG,CACP,WAAoC,EACpC,SAA2B;QAE3B,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,CAAC,CAAA;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAA;QAC3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,UAAU,CAAA;QACpD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QAC/B,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,WAAoC,EACpC,SAA2B;QAE3B,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/D,MAAM,IAAI,WAAW,CAAC,yCAAyC,CAAC,CAAA;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAA;QAC3C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;YACvB,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACxD,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACP,CAAC,CACH,CAAA;QACD,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAA;QACxD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,kCAAkC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;QAC7F,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACjF,MAAM,IAAI,WAAW,CAAC,yDAAyD,CAAC,CAAA;QAClF,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;YACtE,MAAM,IAAI,WAAW,CAAC,mDAAmD,CAAC,CAAA;QAC5E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAC5D,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAClE,CAAA;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxD,MAAM,IAAI,WAAW,CAAC,mDAAmD,CAAC,CAAA;QAC5E,CAAC;QACD,OAAO,gBAAgB,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC1D,CAAC;CACF;AAED,SAAS,SAAS,CAAC,WAAoC;IACrD,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,SAAS,WAAW,CAAC,IAAI,EAAE,CAAA;AACrF,CAAC"}
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../../session/discovery/bundle.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,IAAI,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAK7E,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACxE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAQxE,MAAM,OAAO,eAAe;IAGG,OAAO;IAFnB,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAA;IAE3D,YAA6B,OAA+B;uBAA/B,OAAO;IAA2B,CAAC;IAEhE,KAAK,CAAC,GAAG,CACP,WAAoC,EACpC,SAA2B;QAE3B,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,CAAC,CAAA;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACtC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAA;QAC3C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,UAAU,CAAA;QACpD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QAC/B,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,WAAoC,EACpC,SAA2B;QAE3B,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACnE,MAAM,IAAI,WAAW,CAAC,yCAAyC,CAAC,CAAA;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAA;QAC3C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;YACvB,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE;YAC5D,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACP,CAAC,CACH,CAAA;QACD,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAA;QACxD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,WAAW,CAAC,kCAAkC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;QAC7F,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACrF,MAAM,IAAI,WAAW,CAAC,yDAAyD,CAAC,CAAA;QAClF,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;YAC1E,MAAM,IAAI,WAAW,CAAC,mDAAmD,CAAC,CAAA;QAC5E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAC5D,eAAe,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CACtE,CAAA;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC5D,MAAM,IAAI,WAAW,CAAC,mDAAmD,CAAC,CAAA;QAC5E,CAAC;QACD,OAAO,gBAAgB,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC1D,CAAC;CACF;AAED,SAAS,SAAS,CAAC,WAAoC;IACrD,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,SAAS,WAAW,CAAC,IAAI,EAAE,CAAA;AACrF,CAAC"}

package/dist/session/discovery/discovery.d.ts

@@ -1,15 +1,10 @@
-import type { bundle } from '@astrale-os/kernel-dsl/v1';
-import type { publication } from '@astrale-os/kernel-protocol';
+import type { IssuerId } from '@astrale-os/kernel-core/auth';
 import type { SessionOperation, SessionPolicy } from '../context/index.js';
 import type { BundleDiscovery } from './bundle.js';
 import type { PublicationDiscovery } from './publication.js';
 import type { SessionSnapshot } from './snapshot.js';
-export interface DiscoveredSource {
-    readonly publication: publication.Publication;
-    readonly bundle: bundle.Bundle;
-}
 export declare class SessionDiscovery {
-    readonly url: string;
+    readonly kernel: IssuerId;
     private readonly policy;
     private readonly publications;
     private readonly bundles;
@@ -17,10 +12,8 @@ export declare class SessionDiscovery {
     private readonly acquisitionOperation;
     private retained?;
     private flight?;
-    constructor(url: string, policy: Readonly<SessionPolicy>, publications: PublicationDiscovery, bundles: BundleDiscovery, requireOpen: () => void, acquisitionOperation: () => SessionOperation);
+    constructor(kernel: IssuerId, policy: Readonly<SessionPolicy>, publications: PublicationDiscovery, bundles: BundleDiscovery, requireOpen: () => void, acquisitionOperation: () => SessionOperation);
     snapshot(operation: SessionOperation): Promise<SessionSnapshot>;
-    discover(url: string, operation: SessionOperation): Promise<DiscoveredSource>;
-    invalidate(url: string): void;
     clear(): void;
     private acquireSnapshot;
 }

package/dist/session/discovery/discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../session/discovery/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAE9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAMpD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,WAAW,CAAA;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAA;CAC/B;AAED,qBAAa,gBAAgB;IAKzB,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IATvC,OAAO,CAAC,QAAQ,CAAC,CAAiB;IAClC,OAAO,CAAC,MAAM,CAAC,CAA0B;IAEzC,YACW,GAAG,EAAE,MAAM,EACH,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC/B,YAAY,EAAE,oBAAoB,EAClC,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,MAAM,IAAI,EACvB,oBAAoB,EAAE,MAAM,gBAAgB,EAC3D;IAEJ,QAAQ,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAY9D;IAEK,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAMlF;IAED,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI5B;IAED,KAAK,IAAI,IAAI,CAIZ;YAEa,eAAe;CAY9B"}
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../session/discovery/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAE5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAMpD,qBAAa,gBAAgB;IAKzB,QAAQ,CAAC,MAAM,EAAE,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,oBAAoB;IATvC,OAAO,CAAC,QAAQ,CAAC,CAAiB;IAClC,OAAO,CAAC,MAAM,CAAC,CAA0B;IAEzC,YACW,MAAM,EAAE,QAAQ,EACR,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,EAC/B,YAAY,EAAE,oBAAoB,EAClC,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,MAAM,IAAI,EACvB,oBAAoB,EAAE,MAAM,gBAAgB,EAC3D;IAEJ,QAAQ,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAY9D;IAED,KAAK,IAAI,IAAI,CAIZ;YAEa,eAAe;CAY9B"}

package/dist/session/discovery/discovery.js

@@ -2,7 +2,7 @@ import { runSessionOperation } from '../context/index.js';
 import { rootViewCatalog } from '../views/index.js';
 import { createSessionSnapshot } from './snapshot.js';
 export class SessionDiscovery {
-    url;
+    kernel;
     policy;
     publications;
     bundles;
@@ -10,8 +10,8 @@ export class SessionDiscovery {
     acquisitionOperation;
     retained;
     flight;
-    constructor(url, policy, publications, bundles, requireOpen, acquisitionOperation) {
-        this.url = url;
+    constructor(kernel, policy, publications, bundles, requireOpen, acquisitionOperation) {
+        this.kernel = kernel;
         this.policy = policy;
         this.publications = publications;
         this.bundles = bundles;
@@ -33,27 +33,14 @@ export class SessionDiscovery {
             .catch(() => undefined);
         return runSessionOperation(operation, () => flight);
     }
-    async discover(url, operation) {
-        this.requireOpen();
-        const publication = await this.publications.get(url, operation);
-        const artifact = await this.bundles.get(publication, operation);
-        this.requireOpen();
-        return Object.freeze({ publication, bundle: artifact });
-    }
-    invalidate(url) {
-        this.publications.invalidate(url);
-        this.bundles.clear();
-        if (new URL(url).origin === new URL(this.url).origin)
-            this.retained = undefined;
-    }
     clear() {
         this.publications.invalidate();
         this.bundles.clear();
         this.retained = undefined;
     }
     async acquireSnapshot(operation) {
-        const previous = this.publications.current(this.url);
-        const publication = await this.publications.revalidate(this.url, operation);
+        const previous = this.publications.current();
+        const publication = await this.publications.revalidate(operation);
         if (previous !== undefined && previous.etag !== publication.etag)
             this.bundles.clear();
         const artifact = await this.bundles.get(publication, operation);
@@ -61,7 +48,7 @@ export class SessionDiscovery {
         if (this.retained?.publication.etag === publication.etag)
             return this.retained;
         const views = rootViewCatalog(publication, artifact, this.policy);
-        const snapshot = createSessionSnapshot(this.url, publication, artifact, views);
+        const snapshot = createSessionSnapshot(this.kernel, publication, artifact, views);
         this.retained = snapshot;
         return snapshot;
     }

package/dist/session/discovery/discovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../session/discovery/discovery.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAOrD,MAAM,OAAO,gBAAgB;IAKhB,GAAG;IACK,MAAM;IACN,YAAY;IACZ,OAAO;IACP,WAAW;IACX,oBAAoB;IAT/B,QAAQ,CAAkB;IAC1B,MAAM,CAA2B;IAEzC,YACW,GAAW,EACH,MAA+B,EAC/B,YAAkC,EAClC,OAAwB,EACxB,WAAuB,EACvB,oBAA4C;mBALpD,GAAG;sBACK,MAAM;4BACN,YAAY;uBACZ,OAAO;2BACP,WAAW;oCACX,oBAAoB;IACpC,CAAC;IAEJ,QAAQ,CAAC,SAA2B;QAClC,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAA;QAC3B,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,mBAAmB,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAA;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAA;QAChE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,KAAK,MAAM;aACR,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;QACrD,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,OAAO,mBAAmB,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAA;IACrD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,SAA2B;QACrD,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC/D,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IACzD,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;IACjF,CAAC;IAED,KAAK;QACH,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAA;QAC9B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;IAC3B,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,SAA2B;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QAC3E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACtF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC/D,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,IAAI,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAA;QAC9E,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACjE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC9E,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,OAAO,QAAQ,CAAA;IACjB,CAAC;CACF"}
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../session/discovery/discovery.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAErD,MAAM,OAAO,gBAAgB;IAKhB,MAAM;IACE,MAAM;IACN,YAAY;IACZ,OAAO;IACP,WAAW;IACX,oBAAoB;IAT/B,QAAQ,CAAkB;IAC1B,MAAM,CAA2B;IAEzC,YACW,MAAgB,EACR,MAA+B,EAC/B,YAAkC,EAClC,OAAwB,EACxB,WAAuB,EACvB,oBAA4C;sBALpD,MAAM;sBACE,MAAM;4BACN,YAAY;uBACZ,OAAO;2BACP,WAAW;oCACX,oBAAoB;IACpC,CAAC;IAEJ,QAAQ,CAAC,SAA2B;QAClC,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAA;QAC3B,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,mBAAmB,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAA;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAA;QAChE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,KAAK,MAAM;aACR,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAA;QACrD,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzB,OAAO,mBAAmB,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAA;IACrD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAA;QAC9B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAA;IAC3B,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,SAA2B;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAA;QAC5C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACjE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACtF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;QAC/D,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,IAAI,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAA;QAC9E,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACjE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAA;QACjF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,OAAO,QAAQ,CAAA;IACjB,CAAC;CACF"}

package/dist/session/discovery/index.d.ts

@@ -1,18 +1,15 @@
+import type { IssuerId } from '@astrale-os/kernel-core/auth';
 import type { Fetch } from '../../transport/http/index.js';
 import type { SessionOperation, SessionPolicy } from '../context/index.js';
-import type { DiscoveredSource } from './discovery.js';
 import type { SessionSnapshot } from './snapshot.js';
-export type { DiscoveredSource } from './discovery.js';
 export type { SessionSnapshot } from './snapshot.js';
 export interface SessionDiscovery {
-    readonly url: string;
+    readonly kernel: IssuerId;
     snapshot(operation: SessionOperation): Promise<SessionSnapshot>;
-    discover(url: string, operation: SessionOperation): Promise<DiscoveredSource>;
-    invalidate(url: string): void;
     clear(): void;
 }
 export interface SessionDiscoveryOptions {
-    readonly url: string;
+    readonly kernel: IssuerId;
     readonly fetch: Fetch;
     readonly policy: Readonly<SessionPolicy>;
     readonly maximumPublicationBytes: number;

package/dist/session/discovery/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../session/discovery/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAMpD,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC7E,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,KAAK,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAA;IACxC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAA;IACxC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,IAAI,CAAA;IAChC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;CACtD;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAiBzF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../session/discovery/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAE5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAMpD,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC/D,KAAK,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAA;IACxC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAA;IACxC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,IAAI,CAAA;IAChC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;CACtD;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CAkBzF"}

package/dist/session/discovery/index.js

@@ -2,7 +2,8 @@ import { BundleDiscovery } from './bundle.js';
 import { SessionDiscovery as SessionDiscoveryImplementation } from './discovery.js';
 import { PublicationDiscovery } from './publication.js';
 export function createSessionDiscovery(options) {
-    return new SessionDiscoveryImplementation(options.url, options.policy, new PublicationDiscovery({
+    return new SessionDiscoveryImplementation(options.kernel, options.policy, new PublicationDiscovery({
+        kernel: options.kernel,
         fetch: options.fetch,
         policy: options.policy,
         maximumBytes: options.maximumPublicationBytes,

package/dist/session/discovery/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../session/discovery/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,gBAAgB,IAAI,8BAA8B,EAAE,MAAM,gBAAgB,CAAA;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAuBvD,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,OAAO,IAAI,8BAA8B,CACvC,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,MAAM,EACd,IAAI,oBAAoB,CAAC;QACvB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,uBAAuB;KAC9C,CAAC,EACF,IAAI,eAAe,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,kBAAkB;KACzC,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,oBAAoB,CAC7B,CAAA;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../session/discovery/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,gBAAgB,IAAI,8BAA8B,EAAE,MAAM,gBAAgB,CAAA;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAoBvD,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,OAAO,IAAI,8BAA8B,CACvC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,EACd,IAAI,oBAAoB,CAAC;QACvB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,uBAAuB;KAC9C,CAAC,EACF,IAAI,eAAe,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,CAAC,kBAAkB;KACzC,CAAC,EACF,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,oBAAoB,CAC7B,CAAA;AACH,CAAC"}

package/dist/session/discovery/publication.d.ts

@@ -1,20 +1,22 @@
+import type { IssuerId } from '@astrale-os/kernel-core/auth';
 import type { publication } from '@astrale-os/kernel-protocol';
 import type { Fetch } from '../../transport/http/index.js';
 import type { SessionOperation } from '../context/index.js';
 import { type SessionPolicy } from '../context/index.js';
 export interface PublicationDiscoveryOptions {
+    readonly kernel: IssuerId;
     readonly fetch: Fetch;
     readonly policy: Readonly<SessionPolicy>;
     readonly maximumBytes: number;
 }
 export declare class PublicationDiscovery {
     private readonly options;
-    private readonly publications;
+    private publication;
+    private revision;
     constructor(options: PublicationDiscoveryOptions);
-    current(url: string): publication.Publication | undefined;
-    get(url: string, operation: SessionOperation): Promise<publication.Publication>;
-    revalidate(url: string, operation: SessionOperation): Promise<publication.Publication>;
-    invalidate(url?: string): void;
+    current(): publication.Publication | undefined;
+    revalidate(operation: SessionOperation): Promise<publication.Publication>;
+    invalidate(): void;
     private fetch;
 }
 export declare function boundedResponse(response: Response, maximum: number, signal: AbortSignal): Promise<Uint8Array>;

package/dist/session/discovery/publication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publication.d.ts","sourceRoot":"","sources":["../../../session/discovery/publication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAI9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAG3D,OAAO,EAAsC,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAE5F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAA;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,qBAAa,oBAAoB;IAGnB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA6C;IAE1E,YAA6B,OAAO,EAAE,2BAA2B,EAAI;IAErE,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAC,WAAW,GAAG,SAAS,CAExD;IAEK,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAEpF;IAEK,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAS3F;IAED,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAG7B;YAEa,KAAK;CAyCpB;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,UAAU,CAAC,CAiCrB;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAI9F"}
+{"version":3,"file":"publication.d.ts","sourceRoot":"","sources":["../../../session/discovery/publication.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAI9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAG3D,OAAO,EAAsC,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAE5F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAA;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAC9B;AAED,qBAAa,oBAAoB;IAInB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,WAAW,CAAqC;IACxD,OAAO,CAAC,QAAQ,CAAI;IAEpB,YAA6B,OAAO,EAAE,2BAA2B,EAAI;IAErE,OAAO,IAAI,WAAW,CAAC,WAAW,GAAG,SAAS,CAE7C;IAEK,UAAU,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAQ9E;IAED,UAAU,IAAI,IAAI,CAGjB;YAEa,KAAK;CA2CpB;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,UAAU,CAAC,CAiCrB;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAI9F"}

package/dist/session/discovery/publication.js

@@ -3,35 +3,30 @@ import { ClientError } from '../../errors/index.js';
 import { allowEndpoint, runSessionOperation } from '../context/index.js';
 export class PublicationDiscovery {
     options;
-    publications = new Map();
+    publication;
+    revision = 0;
     constructor(options) {
         this.options = options;
     }
-    current(url) {
-        return this.publications.get(new URL(url).origin);
+    current() {
+        return this.publication;
     }
-    async get(url, operation) {
-        return this.current(url) ?? this.revalidate(url, operation);
-    }
-    async revalidate(url, operation) {
-        const origin = new URL(url).origin;
-        const previous = this.publications.get(origin);
-        const discovered = await this.fetch(origin, operation, previous);
-        const current = this.publications.get(origin);
-        if (current !== previous)
-            return current ?? this.revalidate(origin, operation);
+    async revalidate(operation) {
+        const revision = this.revision;
+        const previous = this.publication;
+        const discovered = await this.fetch(operation, previous);
+        if (revision !== this.revision)
+            return this.revalidate(operation);
         const retained = previous?.etag === discovered.etag ? previous : discovered;
-        this.publications.set(origin, retained);
+        this.publication = retained;
         return retained;
     }
-    invalidate(url) {
-        if (url === undefined)
-            this.publications.clear();
-        else
-            this.publications.delete(new URL(url).origin);
+    invalidate() {
+        this.revision += 1;
+        this.publication = undefined;
     }
-    async fetch(origin, operation, previous) {
-        const url = new URL(publicationCodec.PATH, origin).toString();
+    async fetch(operation, previous) {
+        const url = publicationCodec.url(this.options.kernel);
         allowEndpoint(url, this.options.policy);
         const response = await runSessionOperation(operation, (signal) => this.options.fetch(url, {
             headers: {
@@ -57,6 +52,9 @@ export class PublicationDiscovery {
         }
         const body = await runSessionOperation(operation, (signal) => boundedResponse(response, this.options.maximumBytes, signal));
         const admitted = publicationCodec.accept(codecs.json.decode(body));
+        if (admitted.identity.issuer !== this.options.kernel) {
+            throw new ClientError('Publication issuer differs from the requested Kernel issuer.');
+        }
         const etag = response.headers.get('etag');
         if (etag !== null && etag !== `"${admitted.etag}"`) {
             throw new ClientError('Publication response ETag differs from its canonical content.');