@astrale-os/kernel-protocol 0.5.0-beta.60 → 0.5.0-beta.61

package/dist/artifact/index.d.ts

@@ -1 +1 @@
-export { accept, identify, type Digest, type Ref } from './ref.js';
+export { accept, canonicalMediaType, identify, type Digest, type Ref } from './ref.js';

package/dist/artifact/index.js

@@ -1 +1 @@
-export { accept, identify } from './ref.js';
+export { accept, canonicalMediaType, identify } from './ref.js';

package/dist/artifact/ref.d.ts

@@ -8,3 +8,5 @@ export interface Ref {
 export declare function accept(input: unknown): Ref;
 /** Identify exact bytes under one canonical media type. */
 export declare function identify(bytes: Uint8Array, mediaType: string): Ref;
+/** Canonicalize one portable artifact media type, retaining token parameters and their values. */
+export declare function canonicalMediaType(input: string): string;

package/dist/artifact/ref.js

@@ -18,7 +18,7 @@ export function accept(input) {
     }
     return Object.freeze({
         digest: value.digest,
-        mediaType: normalizeMediaType(value.mediaType),
+        mediaType: canonicalMediaType(value.mediaType),
         size: value.size,
     });
 }
@@ -31,11 +31,12 @@ export function identify(bytes, mediaType) {
         hexadecimal += byte.toString(16).padStart(2, '0');
     return Object.freeze({
         digest: `sha256:${hexadecimal}`,
-        mediaType: normalizeMediaType(mediaType),
+        mediaType: canonicalMediaType(mediaType),
         size: bytes.byteLength,
     });
 }
-function normalizeMediaType(input) {
+/** Canonicalize one portable artifact media type, retaining token parameters and their values. */
+export function canonicalMediaType(input) {
     const [essence, ...parametersInput] = input.split(';');
     const [rawType, rawSubtype, ...extra] = essence.trim().split('/');
     if (rawType === undefined ||

package/dist/invocation/binary.js

@@ -1,3 +1,4 @@
+import { canonicalMediaType } from '../artifact/index.js';
 import { acceptHeaders, exactDataObject, exactFields, invalid, invocation, requestId, required, string, } from './admission.js';
 const FIELDS = new Set([
     'kind',
@@ -8,7 +9,6 @@ const FIELDS = new Set([
     'status',
     'headers',
 ]);
-const MEDIA_TYPE = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+\/[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u;
 export function decodeBinaryResponse(input) {
     const object = exactDataObject(input, 'binary response');
     exactFields(object, FIELDS, 'binary response');
@@ -17,9 +17,13 @@ export function decodeBinaryResponse(input) {
         invalid('binary response.kind must be "binary"');
     if (!(object.body instanceof Uint8Array))
         invalid('binary response.body must be a Uint8Array');
-    const mediaType = string(object.mediaType, 'binary response.mediaType');
-    if (!MEDIA_TYPE.test(mediaType))
+    let mediaType;
+    try {
+        mediaType = canonicalMediaType(string(object.mediaType, 'binary response.mediaType'));
+    }
+    catch {
         invalid('binary response.mediaType is invalid');
+    }
     const status = object.status ?? 200;
     if (!Number.isInteger(status) || status < 200 || status > 599) {
         invalid('binary response.status is invalid');

package/dist/invocation/http/index.d.ts

@@ -1,4 +1,5 @@
 export { BINARY_DELIVERY_FIELD, BINARY_HEADERS_FIELD, decodeBinaryHeaderNames, decodeInvocationId, encodeBinaryHeaderNames, encodeInvocationId, isApplicationBinaryHeader, MAXIMUM_INVOCATION_FIELD_BYTES, INVOCATION_FIELD, REQUEST_ID_FIELD, STREAMING_BINARY_DELIVERY, } from './binary.js';
 export { codecForContentType, negotiateResponseCodec } from './negotiation.js';
+export { BINARY_LENGTH_FIELD, BINARY_REQUEST_CONTENT_TYPE, decodeBinaryRequestEnvelope, encodeBinaryRequestEnvelope, MAXIMUM_REQUEST_ENVELOPE_BYTES, REQUEST_ENVELOPE_FIELD, } from './request.js';
 export { encodeStreamFrame, LENGTH_PREFIX_V1, STREAM_FRAMING_FIELD } from './stream.js';
 export { BAGGAGE_FIELD, decodeTraceHeaders, encodeTraceHeaders, TRACEPARENT_FIELD, TRACESTATE_FIELD, } from './trace.js';

package/dist/invocation/http/index.js

@@ -1,4 +1,5 @@
 export { BINARY_DELIVERY_FIELD, BINARY_HEADERS_FIELD, decodeBinaryHeaderNames, decodeInvocationId, encodeBinaryHeaderNames, encodeInvocationId, isApplicationBinaryHeader, MAXIMUM_INVOCATION_FIELD_BYTES, INVOCATION_FIELD, REQUEST_ID_FIELD, STREAMING_BINARY_DELIVERY, } from './binary.js';
 export { codecForContentType, negotiateResponseCodec } from './negotiation.js';
+export { BINARY_LENGTH_FIELD, BINARY_REQUEST_CONTENT_TYPE, decodeBinaryRequestEnvelope, encodeBinaryRequestEnvelope, MAXIMUM_REQUEST_ENVELOPE_BYTES, REQUEST_ENVELOPE_FIELD, } from './request.js';
 export { encodeStreamFrame, LENGTH_PREFIX_V1, STREAM_FRAMING_FIELD } from './stream.js';
 export { BAGGAGE_FIELD, decodeTraceHeaders, encodeTraceHeaders, TRACEPARENT_FIELD, TRACESTATE_FIELD, } from './trace.js';

package/dist/invocation/http/request.d.ts

@@ -0,0 +1,9 @@
+import { type Request } from '../request.js';
+export declare const REQUEST_ENVELOPE_FIELD: 'x-astrale-request';
+export declare const BINARY_LENGTH_FIELD: 'x-astrale-binary-length';
+export declare const BINARY_REQUEST_CONTENT_TYPE: 'application/octet-stream';
+export declare const MAXIMUM_REQUEST_ENVELOPE_BYTES = 8192;
+/** Encode one canonical V2 Request into the binary-request HTTP field. */
+export declare function encodeBinaryRequestEnvelope(input: Request): string;
+/** Decode one bounded base64url JSON V2 Request from the binary-request HTTP field. */
+export declare function decodeBinaryRequestEnvelope(input: string | null): Request;

package/dist/invocation/http/request.js

@@ -0,0 +1,61 @@
+import { json } from '../../codecs/index.js';
+import { CODES, ProtocolError } from '../../errors/index.js';
+import { decodeRequest } from '../request.js';
+export const REQUEST_ENVELOPE_FIELD = 'x-astrale-request';
+export const BINARY_LENGTH_FIELD = 'x-astrale-binary-length';
+export const BINARY_REQUEST_CONTENT_TYPE = 'application/octet-stream';
+export const MAXIMUM_REQUEST_ENVELOPE_BYTES = 8_192;
+const BASE64URL = /^[A-Za-z0-9_-]+$/u;
+const MAXIMUM_ENCODED_BYTES = Math.ceil(MAXIMUM_REQUEST_ENVELOPE_BYTES / 3) * 4;
+/** Encode one canonical V2 Request into the binary-request HTTP field. */
+export function encodeBinaryRequestEnvelope(input) {
+    const request = decodeRequest(input);
+    const encoded = json.encode(request);
+    if (typeof encoded !== 'string')
+        throw new TypeError('JSON Request codec returned non-text output.');
+    const bytes = new TextEncoder().encode(encoded);
+    if (bytes.byteLength > MAXIMUM_REQUEST_ENVELOPE_BYTES)
+        return invalid();
+    return btoa(String.fromCharCode(...bytes))
+        .replaceAll('+', '-')
+        .replaceAll('/', '_')
+        .replace(/=+$/u, '');
+}
+/** Decode one bounded base64url JSON V2 Request from the binary-request HTTP field. */
+export function decodeBinaryRequestEnvelope(input) {
+    if (input === null ||
+        input.length === 0 ||
+        input.length > MAXIMUM_ENCODED_BYTES ||
+        !BASE64URL.test(input)) {
+        return invalid();
+    }
+    let bytes;
+    try {
+        const binary = atob(input.replaceAll('-', '+').replaceAll('_', '/') + '='.repeat((4 - (input.length % 4)) % 4));
+        bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+    }
+    catch {
+        return invalid();
+    }
+    if (bytes.byteLength > MAXIMUM_REQUEST_ENVELOPE_BYTES)
+        return invalid();
+    try {
+        // Require canonical base64url so alternate encodings cannot name the same envelope.
+        const canonical = btoa(String.fromCharCode(...bytes))
+            .replaceAll('+', '-')
+            .replaceAll('/', '_')
+            .replace(/=+$/u, '');
+        if (canonical !== input)
+            return invalid();
+        return decodeRequest(json.decode(bytes));
+    }
+    catch {
+        return invalid();
+    }
+}
+function invalid() {
+    throw new ProtocolError({
+        code: CODES.INVALID_REQUEST,
+        message: 'HTTP binary Request envelope is invalid.',
+    });
+}

package/dist/routes/compiler.js

@@ -1,3 +1,4 @@
+import { isBinaryInput } from '@astrale-os/kernel-dsl/v1';
 import { admitRouteDeclaration } from '../publication/route.js';
 import { rejectCollisions } from './collision.js';
 import { fail } from './error.js';
@@ -14,6 +15,9 @@ export function compile(input) {
         if (meaning === undefined || (isMethod(meaning) && !meaning.executable)) {
             fail('NATIVE_ROUTE_BINDING_INVALID', `Unavailable callable ${declaration.callable}.`);
         }
+        if (isBinaryInput(meaning.definition.input)) {
+            fail('NATIVE_ROUTE_BINDING_INVALID', `Native route ${declaration.name} cannot bind a binary-input Function.`);
+        }
         const href = placePath(declaration.path, 'https://routes.invalid');
         const route = { ...declaration, href };
         validateTemplate(href);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-protocol",
-  "version": "0.5.0-beta.60",
+  "version": "0.5.0-beta.61",
   "description": "Portable Astrale invocation, publication, installation, routing, and issuer protocols",
   "license": "Apache-2.0",
   "repository": {
@@ -137,8 +137,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-core": "0.9.0-beta.54",
-    "@astrale-os/kernel-dsl": "0.2.0-beta.39",
+    "@astrale-os/kernel-core": "0.9.0-beta.55",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.40",
     "@noble/hashes": "2.3.0"
   },
   "devDependencies": {