@astrale-os/kernel-protocol 0.5.0-beta.2

package/dist/issuer/hosted.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted.js","sourceRoot":"","sources":["../../issuer/hosted.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAEvC,MAAM,UAAU,GAAG,sBAAsB,CAAA;AAEzC,MAAM,UAAU,MAAM,CAAC,IAAY,EAAE,UAAkB;IACrD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAA;IACpF,OAAO,YAAY,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,UAAU,EAAE,CAAC,CAAA;AAChE,CAAC"}

package/dist/issuer/index.d.ts

@@ -0,0 +1,7 @@
+export { acceptConfiguration, configuration, type Configuration, type ConfigurationOptions, } from './configuration.js';
+export { DiscoveryError, type DiscoveryErrorCode } from './error.js';
+export { hosted } from './hosted.js';
+export { acceptKeySet, keySet, type KeySet } from './key-set.js';
+export { paths, type Paths } from './paths.js';
+export * as exchange from './exchange.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/issuer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../issuer/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAA;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,EAAE,KAAK,EAAE,KAAK,KAAK,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA"}

package/dist/issuer/index.js

@@ -0,0 +1,7 @@
+export { acceptConfiguration, configuration, } from './configuration.js';
+export { DiscoveryError } from './error.js';
+export { hosted } from './hosted.js';
+export { acceptKeySet, keySet } from './key-set.js';
+export { paths } from './paths.js';
+export * as exchange from './exchange.js';
+//# sourceMappingURL=index.js.map

package/dist/issuer/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../issuer/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,aAAa,GAGd,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,cAAc,EAA2B,MAAM,YAAY,CAAA;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAe,MAAM,cAAc,CAAA;AAChE,OAAO,EAAE,KAAK,EAAc,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAA"}

package/dist/issuer/key-set.d.ts

@@ -0,0 +1,7 @@
+import { type JsonWebKey } from '@astrale-os/kernel-core/auth';
+export interface KeySet {
+    readonly keys: readonly JsonWebKey[];
+}
+export declare function keySet(keys: readonly JsonWebKey[], algorithms: readonly [string, ...string[]]): KeySet;
+export declare function acceptKeySet(input: unknown, algorithms: readonly [string, ...string[]]): KeySet;
+//# sourceMappingURL=key-set.d.ts.map

package/dist/issuer/key-set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-set.d.ts","sourceRoot":"","sources":["../../issuer/key-set.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,8BAA8B,CAAA;AAKnF,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,SAAS,UAAU,EAAE,CAAA;CACrC;AAED,wBAAgB,MAAM,CACpB,IAAI,EAAE,SAAS,UAAU,EAAE,EAC3B,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GACzC,MAAM,CAKR;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,CAU/F"}

package/dist/issuer/key-set.js

@@ -0,0 +1,48 @@
+import { AuthValueError, jwk } from '@astrale-os/kernel-core/auth';
+import { acceptAlgorithms } from './configuration.js';
+import { fail } from './error.js';
+export function keySet(keys, algorithms) {
+    if (!Array.isArray(keys))
+        fail('ISSUER_KEY_SET_INVALID', 'Issuer keys must be an array.');
+    const acceptedAlgorithms = new Set(acceptAlgorithms(algorithms));
+    const admittedKeys = keys.map((key) => admitKey(key, acceptedAlgorithms));
+    return deepFreeze({ keys: admittedKeys });
+}
+export function acceptKeySet(input, algorithms) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
+        fail('ISSUER_KEY_SET_INVALID', 'Issuer key set is invalid.');
+    }
+    const value = input;
+    const fields = Reflect.ownKeys(value);
+    if (fields.length !== 1 || fields[0] !== 'keys' || !Array.isArray(value.keys)) {
+        fail('ISSUER_KEY_SET_INVALID', 'Issuer key set is invalid.');
+    }
+    return keySet(value.keys, algorithms);
+}
+function admitKey(input, algorithms) {
+    let accepted;
+    try {
+        accepted = jwk.acceptPublic(input);
+    }
+    catch (cause) {
+        if (cause instanceof AuthValueError) {
+            return fail('ISSUER_KEY_SET_INVALID', 'Issuer public key is invalid.', cause);
+        }
+        throw cause;
+    }
+    if (accepted.alg !== undefined && !algorithms.has(accepted.alg)) {
+        fail('ISSUER_KEY_SET_INVALID', 'Issuer key algorithm is not advertised.');
+    }
+    if (accepted.use !== undefined && accepted.use !== 'sig') {
+        fail('ISSUER_KEY_SET_INVALID', 'Issuer key is not admitted for signature verification.');
+    }
+    return Object.freeze({ ...accepted });
+}
+function deepFreeze(input) {
+    if (input === null || typeof input !== 'object' || Object.isFrozen(input))
+        return input;
+    for (const value of Object.values(input))
+        deepFreeze(value);
+    return Object.freeze(input);
+}
+//# sourceMappingURL=key-set.js.map

package/dist/issuer/key-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-set.js","sourceRoot":"","sources":["../../issuer/key-set.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,GAAG,EAAmB,MAAM,8BAA8B,CAAA;AAEnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAMjC,MAAM,UAAU,MAAM,CACpB,IAA2B,EAC3B,UAA0C;IAE1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,wBAAwB,EAAE,+BAA+B,CAAC,CAAA;IACzF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAA;IACzE,OAAO,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAW,CAAA;AACrD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,UAA0C;IACrF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,wBAAwB,EAAE,4BAA4B,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG,KAA0C,CAAA;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC,wBAAwB,EAAE,4BAA4B,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAoB,EAAE,UAAU,CAAC,CAAA;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,UAA+B;IAC/D,IAAI,QAAoB,CAAA;IACxB,IAAI,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,wBAAwB,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,wBAAwB,EAAE,yCAAyC,CAAC,CAAA;IAC3E,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;QACzD,IAAI,CAAC,wBAAwB,EAAE,wDAAwD,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACvF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAA;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7B,CAAC"}

package/dist/issuer/paths.d.ts

@@ -0,0 +1,7 @@
+export interface Paths {
+    readonly configuration: string;
+    readonly keys: string;
+    readonly tokenExchange: string;
+}
+export declare function paths(issuer: string): Paths;
+//# sourceMappingURL=paths.d.ts.map

package/dist/issuer/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../issuer/paths.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B;AAED,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAQ3C"}

package/dist/issuer/paths.js

@@ -0,0 +1,11 @@
+import { acceptIssuer } from './url.js';
+export function paths(issuer) {
+    const admitted = acceptIssuer(issuer);
+    const pathname = new URL(admitted).pathname.replace(/\/+$/u, '');
+    return Object.freeze({
+        configuration: `${pathname}/.well-known/openid-configuration`,
+        keys: `${pathname}/.well-known/jwks.json`,
+        tokenExchange: `${pathname}/.well-known/astrale/token`,
+    });
+}
+//# sourceMappingURL=paths.js.map

package/dist/issuer/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../issuer/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAQvC,MAAM,UAAU,KAAK,CAAC,MAAc;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IAChE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,GAAG,QAAQ,mCAAmC;QAC7D,IAAI,EAAE,GAAG,QAAQ,wBAAwB;QACzC,aAAa,EAAE,GAAG,QAAQ,4BAA4B;KACvD,CAAC,CAAA;AACJ,CAAC"}

package/dist/issuer/url.d.ts

@@ -0,0 +1,3 @@
+import { type IssuerId } from '@astrale-os/kernel-core/auth';
+export declare function acceptIssuer(input: unknown): IssuerId;
+//# sourceMappingURL=url.d.ts.map

package/dist/issuer/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../issuer/url.ts"],"names":[],"mappings":"AAAA,OAAO,EAA0B,KAAK,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAIpF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAmCrD"}

package/dist/issuer/url.js

@@ -0,0 +1,34 @@
+import { AuthValueError, issuer } from '@astrale-os/kernel-core/auth';
+import { fail } from './error.js';
+export function acceptIssuer(input) {
+    if (typeof input !== 'string') {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer must be an absolute HTTP(S) URL.');
+    }
+    let url;
+    try {
+        url = new URL(input);
+    }
+    catch (cause) {
+        if (cause instanceof TypeError) {
+            return fail('ISSUER_DISCOVERY_INVALID', 'Issuer must be an absolute HTTP(S) URL.', cause);
+        }
+        throw cause;
+    }
+    if ((url.protocol !== 'https:' && url.protocol !== 'http:') ||
+        url.username !== '' ||
+        url.password !== '' ||
+        url.hash !== '' ||
+        url.search !== '') {
+        fail('ISSUER_DISCOVERY_INVALID', 'Issuer must be HTTP(S) without credentials, query, or fragment.');
+    }
+    try {
+        return issuer.accept(input.replace(/\/+$/u, ''));
+    }
+    catch (cause) {
+        if (cause instanceof AuthValueError) {
+            return fail('ISSUER_DISCOVERY_INVALID', 'Issuer is invalid.', cause);
+        }
+        throw cause;
+    }
+}
+//# sourceMappingURL=url.js.map

package/dist/issuer/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../../issuer/url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,EAAiB,MAAM,8BAA8B,CAAA;AAEpF,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAEjC,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,0BAA0B,EAAE,yCAAyC,CAAC,CAAA;IAC7E,CAAC;IAED,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,0BAA0B,EAAE,yCAAyC,EAAE,KAAK,CAAC,CAAA;QAC3F,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;QACvD,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,IAAI,KAAK,EAAE;QACf,GAAG,CAAC,MAAM,KAAK,EAAE,EACjB,CAAC;QACD,IAAI,CACF,0BAA0B,EAC1B,iEAAiE,CAClE,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,0BAA0B,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAA;QACtE,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/publication/bindings/callable.d.ts

@@ -0,0 +1,9 @@
+import { Key } from '@astrale-os/kernel-dsl/v1';
+import type { InvocationEndpoints } from './invocation.js';
+export interface CallableBinding {
+    readonly callable: Key.Callable;
+    readonly endpoint: InvocationEndpoints;
+}
+export declare function admitCallableBinding(input: unknown, origin: string): CallableBinding;
+export declare function admitCallableKey(input: unknown, origin: string): Key.Callable;
+//# sourceMappingURL=callable.d.ts.map

package/dist/publication/bindings/callable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"callable.d.ts","sourceRoot":"","sources":["../../../publication/bindings/callable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAO,MAAM,2BAA2B,CAAA;AAEpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAM1D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;CACvC;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAOpF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,QAAQ,CAoB7E"}

package/dist/publication/bindings/callable.js

@@ -0,0 +1,32 @@
+import { Key, Ref } from '@astrale-os/kernel-dsl/v1';
+import { exact, record } from '../content.js';
+import { fail } from '../error.js';
+import { acceptInvocationEndpoints } from './invocation.js';
+export function admitCallableBinding(input, origin) {
+    const value = record(input, 'PUBLICATION_BINDING_INVALID', 'Callable binding is invalid.');
+    exact(value, ['callable', 'endpoint'], 'PUBLICATION_BINDING_INVALID');
+    return Object.freeze({
+        callable: admitCallableKey(value.callable, origin),
+        endpoint: acceptInvocationEndpoints(value.endpoint),
+    });
+}
+export function admitCallableKey(input, origin) {
+    let callable;
+    try {
+        callable = Key(String(input));
+    }
+    catch (cause) {
+        if (cause instanceof TypeError) {
+            return fail('PUBLICATION_BINDING_INVALID', 'Callable key is invalid.', cause);
+        }
+        throw cause;
+    }
+    const reference = Key.ref(callable);
+    if (Key.origin(callable) !== origin ||
+        (!Ref.isDefinition(reference) && !Ref.isMethod(reference)) ||
+        (!reference.startsWith('function.') && !Ref.isMethod(reference))) {
+        fail('PUBLICATION_BINDING_INVALID', 'Binding must name one callable owned by the root Domain.');
+    }
+    return callable;
+}
+//# sourceMappingURL=callable.js.map

package/dist/publication/bindings/callable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callable.js","sourceRoot":"","sources":["../../../publication/bindings/callable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,2BAA2B,CAAA;AAIpD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAClC,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAA;AAO3D,MAAM,UAAU,oBAAoB,CAAC,KAAc,EAAE,MAAc;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,6BAA6B,EAAE,8BAA8B,CAAC,CAAA;IAC1F,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,6BAA6B,CAAC,CAAA;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;QAClD,QAAQ,EAAE,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC;KACpD,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,MAAc;IAC7D,IAAI,QAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAiB,CAAA;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,6BAA6B,EAAE,0BAA0B,EAAE,KAAK,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACnC,IACE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,MAAM;QAC/B,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAChE,CAAC;QACD,IAAI,CAAC,6BAA6B,EAAE,0DAA0D,CAAC,CAAA;IACjG,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/publication/bindings/index.d.ts

@@ -0,0 +1,4 @@
+export { admitCallableBinding, admitCallableKey, type CallableBinding } from './callable.js';
+export { acceptInvocationEndpoints, type InvocationEndpoints } from './invocation.js';
+export { admitViewBinding, type ViewBinding } from './view.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/publication/bindings/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../publication/bindings/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAA;AAC5F,OAAO,EAAE,yBAAyB,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrF,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAA"}

package/dist/publication/bindings/index.js

@@ -0,0 +1,4 @@
+export { admitCallableBinding, admitCallableKey } from './callable.js';
+export { acceptInvocationEndpoints } from './invocation.js';
+export { admitViewBinding } from './view.js';
+//# sourceMappingURL=index.js.map

package/dist/publication/bindings/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../publication/bindings/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAwB,MAAM,eAAe,CAAA;AAC5F,OAAO,EAAE,yBAAyB,EAA4B,MAAM,iBAAiB,CAAA;AACrF,OAAO,EAAE,gBAAgB,EAAoB,MAAM,WAAW,CAAA"}

package/dist/publication/bindings/invocation.d.ts

@@ -0,0 +1,6 @@
+export interface InvocationEndpoints {
+    readonly http: string;
+    readonly websocket?: string;
+}
+export declare function acceptInvocationEndpoints(input: unknown): InvocationEndpoints;
+//# sourceMappingURL=invocation.d.ts.map

package/dist/publication/bindings/invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation.d.ts","sourceRoot":"","sources":["../../../publication/bindings/invocation.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAa7E"}

package/dist/publication/bindings/invocation.js

@@ -0,0 +1,14 @@
+import { absoluteHttpUrl, absoluteUrl, exact, record } from '../content.js';
+export function acceptInvocationEndpoints(input) {
+    const value = record(input, 'PUBLICATION_BINDING_INVALID', 'Invocation endpoints are invalid.');
+    exact(value, ['http', 'websocket'], 'PUBLICATION_BINDING_INVALID');
+    const http = absoluteHttpUrl(value.http, true, 'PUBLICATION_BINDING_INVALID');
+    const websocket = value.websocket === undefined
+        ? undefined
+        : absoluteUrl(value.websocket, ['ws:', 'wss:'], true, 'PUBLICATION_BINDING_INVALID');
+    return Object.freeze({
+        http,
+        ...(websocket === undefined ? {} : { websocket }),
+    });
+}
+//# sourceMappingURL=invocation.js.map

package/dist/publication/bindings/invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation.js","sourceRoot":"","sources":["../../../publication/bindings/invocation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAO3E,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,6BAA6B,EAAE,mCAAmC,CAAC,CAAA;IAC/F,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,6BAA6B,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,6BAA6B,CAAC,CAAA;IAC7E,MAAM,SAAS,GACb,KAAK,CAAC,SAAS,KAAK,SAAS;QAC3B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,6BAA6B,CAAC,CAAA;IAExF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KAClD,CAAC,CAAA;AACJ,CAAC"}

package/dist/publication/bindings/view.d.ts

@@ -0,0 +1,8 @@
+import { Key } from '@astrale-os/kernel-dsl/v1';
+export interface ViewBinding {
+    readonly view: Key.View;
+    readonly href: string;
+    readonly handshake: 'shell' | 'none';
+}
+export declare function admitViewBinding(input: unknown, origin: string): ViewBinding;
+//# sourceMappingURL=view.d.ts.map

package/dist/publication/bindings/view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.d.ts","sourceRoot":"","sources":["../../../publication/bindings/view.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,2BAA2B,CAAA;AAK/C,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAAA;CACrC;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,CAyB5E"}

package/dist/publication/bindings/view.js

@@ -0,0 +1,29 @@
+import { Key } from '@astrale-os/kernel-dsl/v1';
+import { absoluteHttpUrl, exact, record } from '../content.js';
+import { fail } from '../error.js';
+export function admitViewBinding(input, origin) {
+    const value = record(input, 'PUBLICATION_VIEW_INVALID', 'Published View binding is invalid.');
+    exact(value, ['view', 'href', 'handshake'], 'PUBLICATION_VIEW_INVALID');
+    let view;
+    try {
+        view = Key(String(value.view));
+    }
+    catch (cause) {
+        if (cause instanceof TypeError) {
+            return fail('PUBLICATION_VIEW_INVALID', 'View key is invalid.', cause);
+        }
+        throw cause;
+    }
+    if (Key.origin(view) !== origin || !Key.ref(view).startsWith('view.')) {
+        fail('PUBLICATION_VIEW_INVALID', 'View binding must name a root View.');
+    }
+    if (value.handshake !== 'shell' && value.handshake !== 'none') {
+        fail('PUBLICATION_VIEW_INVALID', 'View handshake is invalid.');
+    }
+    return Object.freeze({
+        view,
+        href: absoluteHttpUrl(value.href, true, 'PUBLICATION_VIEW_INVALID'),
+        handshake: value.handshake,
+    });
+}
+//# sourceMappingURL=view.js.map

package/dist/publication/bindings/view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.js","sourceRoot":"","sources":["../../../publication/bindings/view.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,2BAA2B,CAAA;AAE/C,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAA;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAQlC,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,MAAc;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,0BAA0B,EAAE,oCAAoC,CAAC,CAAA;IAC7F,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,0BAA0B,CAAC,CAAA;IAEvE,IAAI,IAAc,CAAA;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAa,CAAA;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,0BAA0B,EAAE,sBAAsB,EAAE,KAAK,CAAC,CAAA;QACxE,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,0BAA0B,EAAE,qCAAqC,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC9D,IAAI,CAAC,0BAA0B,EAAE,4BAA4B,CAAC,CAAA;IAChE,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,0BAA0B,CAAC;QACnE,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAA;AACJ,CAAC"}

package/dist/publication/bundle.d.ts

@@ -0,0 +1,16 @@
+import { bundle } from '@astrale-os/kernel-dsl/v1';
+import type { Publication } from './publication.js';
+import * as artifact from '../artifact/index.js';
+export declare const BUNDLE_MEDIA_TYPE: 'application/vnd.astrale.domain-bundle+json;v=1';
+export interface BundleDescriptor {
+    readonly href: string;
+    readonly ref: artifact.Ref & {
+        readonly mediaType: typeof BUNDLE_MEDIA_TYPE;
+    };
+}
+export declare function admitBundleDescriptor(input: unknown): BundleDescriptor;
+export declare function describeBundle(input: bundle.Bundle, href: string): BundleDescriptor;
+export declare function acceptBundleValue(input: unknown): bundle.Bundle;
+export declare function verifyBundleBytes(publication: Publication, bytes: Uint8Array): void;
+export declare function decodeBundleValue(publication: Publication, bytes: Uint8Array): bundle.Bundle;
+//# sourceMappingURL=bundle.d.ts.map

package/dist/publication/bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../publication/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAU,MAAM,2BAA2B,CAAA;AAE1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEnD,OAAO,KAAK,QAAQ,MAAM,sBAAsB,CAAA;AAKhD,eAAO,MAAM,iBAAiB,EAAG,gDAAyD,CAAA;AAE1F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,GAAG;QAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,iBAAiB,CAAA;KAAE,CAAA;CAC9E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CActE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,CASnF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAS/D;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAQnF;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,CAa5F"}

package/dist/publication/bundle.js

@@ -0,0 +1,65 @@
+import { bundle, schema } from '@astrale-os/kernel-dsl/v1';
+import * as artifact from '../artifact/index.js';
+import { absoluteHttpUrl, exact, record } from './content.js';
+import { fail } from './error.js';
+import { sha256Hex } from './etag.js';
+export const BUNDLE_MEDIA_TYPE = 'application/vnd.astrale.domain-bundle+json;v=1';
+export function admitBundleDescriptor(input) {
+    const value = record(input, 'PUBLICATION_INVALID', 'Bundle descriptor is invalid.');
+    exact(value, ['href', 'ref'], 'PUBLICATION_INVALID');
+    const ref = artifact.accept(value.ref);
+    if (ref.mediaType !== BUNDLE_MEDIA_TYPE) {
+        fail('PUBLICATION_INVALID', 'Bundle media type is unsupported.');
+    }
+    if (ref.size < 1) {
+        fail('PUBLICATION_INVALID', 'Bundle size is invalid.');
+    }
+    return Object.freeze({
+        href: absoluteHttpUrl(value.href, true, 'PUBLICATION_INVALID'),
+        ref: Object.freeze({ ...ref, mediaType: BUNDLE_MEDIA_TYPE }),
+    });
+}
+export function describeBundle(input, href) {
+    const bytes = bundle.encode(input);
+    return Object.freeze({
+        href: absoluteHttpUrl(href, true, 'PUBLICATION_INVALID'),
+        ref: Object.freeze({
+            ...artifact.identify(bytes, BUNDLE_MEDIA_TYPE),
+            mediaType: BUNDLE_MEDIA_TYPE,
+        }),
+    });
+}
+export function acceptBundleValue(input) {
+    try {
+        return bundle.accept(input);
+    }
+    catch (cause) {
+        if (cause instanceof schema.Error) {
+            return fail('PUBLICATION_INVALID', 'Publication bundle is invalid.', cause);
+        }
+        throw cause;
+    }
+}
+export function verifyBundleBytes(publication, bytes) {
+    const descriptor = publication.schema.bundle;
+    if (bytes.byteLength !== descriptor.ref.size ||
+        `sha256:${sha256Hex(bytes)}` !== descriptor.ref.digest) {
+        fail('PUBLICATION_INVALID', 'Bundle artifact does not match its descriptor.');
+    }
+}
+export function decodeBundleValue(publication, bytes) {
+    if (!(bytes instanceof Uint8Array)) {
+        fail('PUBLICATION_INVALID', 'Bundle artifact bytes are invalid.');
+    }
+    verifyBundleBytes(publication, bytes);
+    try {
+        return bundle.decode(bytes);
+    }
+    catch (cause) {
+        if (cause instanceof schema.Error) {
+            return fail('PUBLICATION_INVALID', 'Bundle artifact cannot be decoded.', cause);
+        }
+        throw cause;
+    }
+}
+//# sourceMappingURL=bundle.js.map

package/dist/publication/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../publication/bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAI1D,OAAO,KAAK,QAAQ,MAAM,sBAAsB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAErC,MAAM,CAAC,MAAM,iBAAiB,GAAG,gDAAyD,CAAA;AAO1F,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,qBAAqB,EAAE,+BAA+B,CAAC,CAAA;IACnF,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,qBAAqB,CAAC,CAAA;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACtC,IAAI,GAAG,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACxC,IAAI,CAAC,qBAAqB,EAAE,mCAAmC,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACjB,IAAI,CAAC,qBAAqB,EAAE,yBAAyB,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,qBAAqB,CAAC;QAC9D,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;KAC7D,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAoB,EAAE,IAAY;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,qBAAqB,CAAC;QACxD,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;YACjB,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;YAC9C,SAAS,EAAE,iBAAiB;SAC7B,CAAC;KACH,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,qBAAqB,EAAE,gCAAgC,EAAE,KAAK,CAAC,CAAA;QAC7E,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAwB,EAAE,KAAiB;IAC3E,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAA;IAC5C,IACE,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,GAAG,CAAC,IAAI;QACxC,UAAU,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,GAAG,CAAC,MAAM,EACtD,CAAC;QACD,IAAI,CAAC,qBAAqB,EAAE,gDAAgD,CAAC,CAAA;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAwB,EAAE,KAAiB;IAC3E,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,qBAAqB,EAAE,oCAAoC,CAAC,CAAA;IACnE,CAAC;IACD,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,qBAAqB,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAA;QACjF,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/publication/content.d.ts

@@ -0,0 +1,11 @@
+import type { PublicationErrorCode } from './error.js';
+import type { Publication } from './publication.js';
+export type Content = Omit<Publication, 'etag'>;
+export declare function record(input: unknown, code: PublicationErrorCode, message: string): Record<string, unknown>;
+export declare function exact(value: Record<string, unknown>, allowed: readonly string[], code: PublicationErrorCode): void;
+export declare function array(input: unknown, code: PublicationErrorCode): readonly unknown[];
+export declare function unique(values: readonly string[], code: PublicationErrorCode, label: string): void;
+export declare function deepFreeze<T>(value: T): T;
+export declare function absoluteHttpUrl(input: unknown, allowSearch: boolean, code: PublicationErrorCode, allowTemplate?: boolean): string;
+export declare function absoluteUrl(input: unknown, protocols: readonly string[], allowSearch: boolean, code: PublicationErrorCode, allowTemplate?: boolean): string;
+//# sourceMappingURL=content.d.ts.map

package/dist/publication/content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.d.ts","sourceRoot":"","sources":["../../publication/content.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAInD,MAAM,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;AAE/C,wBAAgB,MAAM,CACpB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,oBAAoB,EAC1B,OAAO,EAAE,MAAM,GACd,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB;AAED,wBAAgB,KAAK,CACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,IAAI,EAAE,oBAAoB,GACzB,IAAI,CAKN;AAED,wBAAgB,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,GAAG,SAAS,OAAO,EAAE,CAGpF;AAED,wBAAgB,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEjG;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAIzC;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,WAAW,EAAE,OAAO,EACpB,IAAI,EAAE,oBAAoB,EAC1B,aAAa,UAAQ,GACpB,MAAM,CAER;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,WAAW,EAAE,OAAO,EACpB,IAAI,EAAE,oBAAoB,EAC1B,aAAa,UAAQ,GACpB,MAAM,CAyBR"}

package/dist/publication/content.js

@@ -0,0 +1,56 @@
+import { fail } from './error.js';
+export function record(input, code, message) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input))
+        fail(code, message);
+    return input;
+}
+export function exact(value, allowed, code) {
+    const admitted = new Set(allowed);
+    if (Object.keys(value).some((key) => !admitted.has(key))) {
+        fail(code, 'Object contains unknown fields.');
+    }
+}
+export function array(input, code) {
+    if (!Array.isArray(input))
+        fail(code, 'Expected an array.');
+    return input;
+}
+export function unique(values, code, label) {
+    if (new Set(values).size !== values.length)
+        fail(code, `Duplicate ${label}.`);
+}
+export function deepFreeze(value) {
+    if (value === null || typeof value !== 'object' || Object.isFrozen(value))
+        return value;
+    for (const nested of Object.values(value))
+        deepFreeze(nested);
+    return Object.freeze(value);
+}
+export function absoluteHttpUrl(input, allowSearch, code, allowTemplate = false) {
+    return absoluteUrl(input, ['http:', 'https:'], allowSearch, code, allowTemplate);
+}
+export function absoluteUrl(input, protocols, allowSearch, code, allowTemplate = false) {
+    if (typeof input !== 'string')
+        return fail(code, 'Expected an absolute URL.');
+    if (!allowTemplate && (input.includes('{') || input.includes('}'))) {
+        return fail(code, 'Only native route URLs may contain placeholders.');
+    }
+    let url;
+    try {
+        url = new URL(allowTemplate ? input.replaceAll(/\{[A-Za-z][A-Za-z0-9_]*\+?\}/gu, 'placeholder') : input);
+    }
+    catch (cause) {
+        if (cause instanceof TypeError)
+            return fail(code, 'Expected an absolute URL.', cause);
+        throw cause;
+    }
+    if (!protocols.includes(url.protocol) ||
+        url.username !== '' ||
+        url.password !== '' ||
+        url.hash !== '' ||
+        (!allowSearch && url.search !== '')) {
+        fail(code, 'URL has a forbidden protocol, credentials, query, or fragment.');
+    }
+    return input;
+}
+//# sourceMappingURL=content.js.map

package/dist/publication/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../publication/content.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AAIjC,MAAM,UAAU,MAAM,CACpB,KAAc,EACd,IAA0B,EAC1B,OAAe;IAEf,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC5F,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,KAAK,CACnB,KAA8B,EAC9B,OAA0B,EAC1B,IAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IACjC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAc,EAAE,IAA0B;IAC9D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAA;IAC3D,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,MAAyB,EAAE,IAA0B,EAAE,KAAa;IACzF,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,EAAE,aAAa,KAAK,GAAG,CAAC,CAAA;AAC/E,CAAC;AAED,MAAM,UAAU,UAAU,CAAI,KAAQ;IACpC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACvF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;QAAE,UAAU,CAAC,MAAM,CAAC,CAAA;IACxF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7B,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAc,EACd,WAAoB,EACpB,IAA0B,EAC1B,aAAa,GAAG,KAAK;IAErB,OAAO,WAAW,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;AAClF,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,SAA4B,EAC5B,WAAoB,EACpB,IAA0B,EAC1B,aAAa,GAAG,KAAK;IAErB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAA;IAC7E,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC,IAAI,EAAE,kDAAkD,CAAC,CAAA;IACvE,CAAC;IAED,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CACX,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,gCAAgC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAC1F,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS;YAAE,OAAO,IAAI,CAAC,IAAI,EAAE,2BAA2B,EAAE,KAAK,CAAC,CAAA;QACrF,MAAM,KAAK,CAAA;IACb,CAAC;IACD,IACE,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjC,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,IAAI,KAAK,EAAE;QACf,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,EACnC,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,gEAAgE,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/publication/delivery/attestation.d.ts

@@ -0,0 +1,7 @@
+declare const ATTESTATION: unique symbol;
+export type Attestation = string & {
+    readonly [ATTESTATION]: true;
+};
+export declare function acceptAttestation(input: unknown): Attestation;
+export {};
+//# sourceMappingURL=attestation.d.ts.map

package/dist/publication/delivery/attestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.d.ts","sourceRoot":"","sources":["../../../publication/delivery/attestation.ts"],"names":[],"mappings":"AAGA,OAAO,CAAC,MAAM,WAAW,EAAE,OAAO,MAAM,CAAA;AAExC,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG;IACjC,QAAQ,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,CAAA;CAC7B,CAAA;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAS7D"}

package/dist/publication/delivery/attestation.js

@@ -0,0 +1,11 @@
+import { fail } from './error.js';
+import { ATTESTATION_MAX_BYTES } from './limits.js';
+export function acceptAttestation(input) {
+    if (typeof input !== 'string' ||
+        input.length === 0 ||
+        new TextEncoder().encode(input).byteLength > ATTESTATION_MAX_BYTES) {
+        fail('DELIVERY_INVALID', 'Delivery attestation is invalid.');
+    }
+    return input;
+}
+//# sourceMappingURL=attestation.js.map

package/dist/publication/delivery/attestation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestation.js","sourceRoot":"","sources":["../../../publication/delivery/attestation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAQnD,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,qBAAqB,EAClE,CAAC;QACD,IAAI,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,KAAoB,CAAA;AAC7B,CAAC"}

package/dist/publication/delivery/claims.d.ts

@@ -0,0 +1,16 @@
+import * as auth from '@astrale-os/kernel-core/auth';
+import { type schema } from '@astrale-os/kernel-dsl/v1';
+import type { Etag } from '../index.js';
+import { PURPOSE } from './limits.js';
+export interface Claims {
+    readonly purpose: typeof PURPOSE;
+    readonly iss: auth.IssuerId;
+    readonly sub: auth.IdentitySubject;
+    readonly aud: auth.IssuerId;
+    readonly nonce: string;
+    readonly etag: Etag;
+    readonly schemaRevision: schema.Revision;
+    readonly exp: number;
+}
+export declare function acceptClaims(input: unknown): Claims;
+//# sourceMappingURL=claims.d.ts.map

package/dist/publication/delivery/claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../../publication/delivery/claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,8BAA8B,CAAA;AACpD,OAAO,EAAuB,KAAK,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAE5E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAGvC,OAAO,EAAsC,OAAO,EAAE,MAAM,aAAa,CAAA;AAEzE,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,OAAO,EAAE,OAAO,OAAO,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAA;IAC3B,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAA;IAClC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAA;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA4CnD"}