@astrale-os/kernel-protocol 0.5.0-beta.67 → 0.5.0-beta.69

package/dist/codecs/index.d.ts

@@ -1,4 +1,3 @@
 export { DecodeError, type Codec, type EncodedEnvelope } from './codec.js';
 export { json } from './json.js';
-export { CONTENT_TYPE_JSON, CONTENT_TYPE_MSGPACK } from './media-types.js';
-export { loadMsgpack } from './msgpack.js';
+export { CONTENT_TYPE_JSON } from './media-types.js';

package/dist/codecs/index.js

@@ -1,4 +1,3 @@
 export { DecodeError } from './codec.js';
 export { json } from './json.js';
-export { CONTENT_TYPE_JSON, CONTENT_TYPE_MSGPACK } from './media-types.js';
-export { loadMsgpack } from './msgpack.js';
+export { CONTENT_TYPE_JSON } from './media-types.js';

package/dist/codecs/media-types.d.ts

@@ -1,2 +1 @@
 export declare const CONTENT_TYPE_JSON: 'application/vnd.astrale+json';
-export declare const CONTENT_TYPE_MSGPACK: 'application/vnd.astrale.msgpack';

package/dist/codecs/media-types.js

@@ -1,2 +1 @@
 export const CONTENT_TYPE_JSON = 'application/vnd.astrale+json';
-export const CONTENT_TYPE_MSGPACK = 'application/vnd.astrale.msgpack';

package/dist/index.d.ts

@@ -2,7 +2,9 @@ export * as artifact from './artifact/index.js';
 export * as invocation from './invocation/index.js';
 export * as codecs from './codecs/index.js';
 export * as errors from './errors/index.js';
-export * as publication from './publication/index.js';
+/** @deprecated Use `release`; Publication v2/v3 remains available under `release.legacy`. */
+export * as publication from './release/legacy/index.js';
+export * as release from './release/index.js';
 export * as schema from './schema/index.js';
 export * as routes from './routes/index.js';
 export * as issuer from './issuer/index.js';

package/dist/index.js

@@ -2,7 +2,9 @@ export * as artifact from './artifact/index.js';
 export * as invocation from './invocation/index.js';
 export * as codecs from './codecs/index.js';
 export * as errors from './errors/index.js';
-export * as publication from './publication/index.js';
+/** @deprecated Use `release`; Publication v2/v3 remains available under `release.legacy`. */
+export * as publication from './release/legacy/index.js';
+export * as release from './release/index.js';
 export * as schema from './schema/index.js';
 export * as routes from './routes/index.js';
 export * as issuer from './issuer/index.js';

package/dist/invocation/admission.d.ts

@@ -3,7 +3,7 @@ import { NodePath } from '@astrale-os/kernel-core/path';
 import { Key } from '@astrale-os/kernel-dsl/v1/addressing';
 import { type Object as ValueObject } from '@astrale-os/kernel-dsl/value';
 import type { ErrorPayload } from '../errors/index.js';
-import type { Etag } from '../publication/index.js';
+import type { Sha256Digest } from '../release/digest.js';
 import { type RequestId } from './correlation.js';
 import { type InvocationId } from './identity.js';
 export declare function portableObject(input: unknown, label: string): ValueObject;
@@ -16,7 +16,7 @@ export declare function nodePath(input: unknown, label: string): NodePath;
 export declare function issuerId(input: unknown, label: string): IssuerId;
 export declare function string(input: unknown, label: string): string;
 export declare function count(input: unknown, label: string): number;
-export declare function digest(input: unknown, label: string): Etag;
+export declare function digest(input: unknown, label: string): Sha256Digest;
 export declare function callableKey(input: unknown, label: string): Key.Callable;
 export declare function errorPayload(input: unknown, label: string): ErrorPayload;
 export declare function acceptHeaders(input: unknown): Readonly<Record<string, string>>;

package/dist/invocation/admission.js

@@ -2,14 +2,14 @@ import { AuthValueError } from '@astrale-os/kernel-core/auth/error';
 import { accept as acceptIssuer } from '@astrale-os/kernel-core/auth/issuer';
 import { NodePath, PathError } from '@astrale-os/kernel-core/path';
 import { callableAddress, Key } from '@astrale-os/kernel-dsl/v1/addressing';
-import { accept as acceptValue, BoundaryError, } from '@astrale-os/kernel-dsl/value';
+import { acceptForRead, BoundaryError, } from '@astrale-os/kernel-dsl/value';
 import { CODES, acceptPayload, ProtocolError } from '../errors/index.js';
 import { acceptRequestId } from './correlation.js';
 import { acceptInvocationId, InvocationError } from './identity.js';
 export function portableObject(input, label) {
-    let cloned;
+    let snapshot;
     try {
-        cloned = acceptValue(input);
+        snapshot = acceptForRead(input);
     }
     catch (cause) {
         if (cause instanceof BoundaryError) {
@@ -17,9 +17,9 @@ export function portableObject(input, label) {
         }
         throw cause;
     }
-    if (!isValueObject(cloned))
+    if (!isValueObject(snapshot))
         invalid(`${label} must be an object`);
-    return cloned;
+    return snapshot;
 }
 export function exactDataObject(input, label) {
     if (input === null || typeof input !== 'object' || Array.isArray(input)) {

package/dist/invocation/binding-codecs.d.ts

@@ -1,5 +1,5 @@
 import type { Codec } from '../codecs/codec.js';
-export type CodecProfile = 'json' | 'msgpack';
+export type CodecProfile = 'json';
 export interface SupportedCodec {
     readonly codec: Codec;
     readonly profile: CodecProfile;

package/dist/invocation/binding-codecs.js

@@ -1,11 +1,6 @@
 import { json } from '../codecs/json.js';
-import { isMsgpackCodec } from '../codecs/msgpack.js';
 export function codecProfile(codec) {
-    if (codec === json)
-        return 'json';
-    if (isMsgpackCodec(codec))
-        return 'msgpack';
-    return undefined;
+    return codec === json ? 'json' : undefined;
 }
 export function admitSupportedCodecs(supported) {
     if (!Array.isArray(supported))

package/dist/invocation/http/negotiation.js

@@ -1,4 +1,4 @@
-import { CONTENT_TYPE_JSON, CONTENT_TYPE_MSGPACK } from '../../codecs/index.js';
+import { CONTENT_TYPE_JSON } from '../../codecs/index.js';
 import { admitSupportedCodecs } from '../binding-codecs.js';
 const TOKEN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u;
 const QVALUE = /^(?:0(?:\.\d{0,3})?|1(?:\.0{0,3})?)$/u;
@@ -9,11 +9,7 @@ export function codecForContentType(contentType, supported) {
     const mediaType = parseContentType(contentType);
     if (mediaType === undefined)
         return undefined;
-    const profile = mediaType === CONTENT_TYPE_JSON
-        ? 'json'
-        : mediaType === CONTENT_TYPE_MSGPACK
-            ? 'msgpack'
-            : undefined;
+    const profile = mediaType === CONTENT_TYPE_JSON ? 'json' : undefined;
     return admitted.find((entry) => entry.profile === profile)?.codec;
 }
 export function negotiateResponseCodec(accept, requestCodec, supported) {
@@ -27,7 +23,7 @@ export function negotiateResponseCodec(accept, requestCodec, supported) {
     if (ranges.length === 0)
         return undefined;
     const candidates = admitted.flatMap((entry) => {
-        const [type, subtype] = contentTypeOf(entry.profile).split('/');
+        const [type, subtype] = CONTENT_TYPE_JSON.split('/');
         const governing = ranges
             .filter((range) => range.mediaParameters === 0 &&
             (range.type === '*' || range.type === type) &&
@@ -56,9 +52,6 @@ export function negotiateResponseCodec(accept, requestCodec, supported) {
     });
     return candidates[0]?.codec;
 }
-function contentTypeOf(profile) {
-    return profile === 'json' ? CONTENT_TYPE_JSON : CONTENT_TYPE_MSGPACK;
-}
 function parseContentType(input) {
     if (splitOutsideQuotes(input, ',')?.length !== 1)
         return undefined;

package/dist/invocation/index.d.ts

@@ -5,14 +5,17 @@ export { acceptIdempotencyKey, HTTP_IDEMPOTENCY_KEY, MAXIMUM_IDEMPOTENCY_KEY_LEN
 export { acceptInvocationId, InvocationError, MAXIMUM_INVOCATION_ID_LENGTH, sameInvocationId, type InvocationId, } from './identity.js';
 export * as http from './http/index.js';
 export { acceptDelegate, type Delegate } from './delegate.js';
+export type { PublicationBindingInput, PublicationVia } from './legacy/index.js';
+/** @deprecated The legacy routed witness every Kernel emits until the breaking release (AM-1). */
+export * as legacy from './legacy/index.js';
 export { decodeMiss, miss, type Miss } from './miss.js';
 export { acceptRoute, acceptRedirection, decodeRedirectResponse, remoteRoute, type RemoteBindingInput, type Redirection, type RedirectResponse, type Route, } from './redirect.js';
 export { decodeRequest, type Request } from './request.js';
 export { admitTrace, MAXIMUM_TRACEPARENT_BYTES, MAXIMUM_TRACESTATE_BYTES, MAXIMUM_TRACESTATE_MEMBERS, type Trace, } from './trace.js';
-export { acceptRouting, type Refresh, type Routing, type Via } from './routing.js';
+export { acceptRouting, routedDigest, routedRevision, type Refresh, type Routing, type Via, } from './routing.js';
 export { acceptSchemaTarget, type SchemaTarget } from './schema.js';
 export { decodeResponse, type ErrorResponse, type Response, type ResponseContext, type SuccessResponse, } from './response.js';
-export { CALLABLE_FINGERPRINT_MISMATCH, SCHEMA_REVISION_MISMATCH, SERVICE_CANDIDATE_INVALID, SERVICE_TRUST_REQUIRED, SERVICE_UNAVAILABLE, serviceErrorOf, type CallableFingerprintMismatchDetails, type CallableFingerprintMismatchReason, type SchemaRevisionMismatchDetails, type SchemaRevisionMismatchReason, type ServiceCandidateInvalidDetails, type ServiceCandidateInvalidReason, type ServiceErrorPayload, type ServiceReason, type ServiceTrustRequiredDetails, type ServiceTrustRequiredReason, type ServiceUnavailableDetails, type ServiceUnavailableReason, } from './service-reason.js';
+export { CALLABLE_FINGERPRINT_MISMATCH, DEPLOYMENT_RETIRED, SERVICE_CANDIDATE_INVALID, SERVICE_TRUST_REQUIRED, SERVICE_UNAVAILABLE, serviceErrorOf, type CallableFingerprintMismatchDetails, type CallableFingerprintMismatchReason, type DeploymentRetiredDetails, type DeploymentRetiredReason, type ServiceCandidateInvalidDetails, type ServiceCandidateInvalidReason, type ServiceErrorPayload, type ServiceReason, type ServiceTrustRequiredDetails, type ServiceTrustRequiredReason, type ServiceUnavailableDetails, type ServiceUnavailableReason, } from './service-reason.js';
 export { decodeStale, stale, type Stale } from './stale-route.js';
 export { decodeStreamFrame, type StreamEndFrame, type StreamErrorFrame, type StreamFrame, type StreamItemFrame, type StreamStartFrame, } from './stream.js';
 export { Target, targetPath, acceptCall, type Call } from './target.js';

package/dist/invocation/index.js

@@ -5,14 +5,16 @@ export { acceptIdempotencyKey, HTTP_IDEMPOTENCY_KEY, MAXIMUM_IDEMPOTENCY_KEY_LEN
 export { acceptInvocationId, InvocationError, MAXIMUM_INVOCATION_ID_LENGTH, sameInvocationId, } from './identity.js';
 export * as http from './http/index.js';
 export { acceptDelegate } from './delegate.js';
+/** @deprecated The legacy routed witness every Kernel emits until the breaking release (AM-1). */
+export * as legacy from './legacy/index.js';
 export { decodeMiss, miss } from './miss.js';
 export { acceptRoute, acceptRedirection, decodeRedirectResponse, remoteRoute, } from './redirect.js';
 export { decodeRequest } from './request.js';
 export { admitTrace, MAXIMUM_TRACEPARENT_BYTES, MAXIMUM_TRACESTATE_BYTES, MAXIMUM_TRACESTATE_MEMBERS, } from './trace.js';
-export { acceptRouting } from './routing.js';
+export { acceptRouting, routedDigest, routedRevision, } from './routing.js';
 export { acceptSchemaTarget } from './schema.js';
 export { decodeResponse, } from './response.js';
-export { CALLABLE_FINGERPRINT_MISMATCH, SCHEMA_REVISION_MISMATCH, SERVICE_CANDIDATE_INVALID, SERVICE_TRUST_REQUIRED, SERVICE_UNAVAILABLE, serviceErrorOf, } from './service-reason.js';
+export { CALLABLE_FINGERPRINT_MISMATCH, DEPLOYMENT_RETIRED, SERVICE_CANDIDATE_INVALID, SERVICE_TRUST_REQUIRED, SERVICE_UNAVAILABLE, serviceErrorOf, } from './service-reason.js';
 export { decodeStale, stale } from './stale-route.js';
 export { decodeStreamFrame, } from './stream.js';
 export { Target, targetPath, acceptCall } from './target.js';

package/dist/invocation/legacy/index.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Publication-based routing, retained for v2/v3 pins and frozen v3 projections of v4 pins.
+ * The Kernel emits this shape while decoders also accept release-based `Via`.
+ * Superseded by `Via` and `remoteRoute` from `@astrale-os/kernel-protocol/invocation`.
+ *
+ * Short-term consumers:
+ * - the Runtime redirect (`runtime/functions/runtime.ts`), the Kernel's only emitter until the
+ *   breaking release (AM-1, CT5-E), because every client and View built before K5 decodes only
+ *   this shape: the pinned document's own reference for a v2/v3 pin, the frozen v3 projection's
+ *   for a v4 pin. The breaking release switches v4 pins to `remoteRoute`; v2/v3 pins keep this;
+ * - servers built from a v2/v3 Publication, which admit only this shape (the SDK's `requireVia`,
+ *   the Server's `HandlerRequest.via`).
+ *
+ * Removal, in a separate breaking release: the conditions of `protocol/release/legacy/index.ts`
+ * hold (no installation pins a v2/v3 document) and every supported client relays `Via`. Then
+ * delete, in the same PR:
+ * - this folder, the `legacy` namespace of `invocation/index.ts` and its `PublicationVia` and
+ *   `PublicationBindingInput` type exports;
+ * - the `publication` branch of `acceptVia` and of `routedRevision`/`routedDigest` in `routing.ts`;
+ * - the `PublicationVia` member of `Routing` (`routing.ts`) and of `Route.via` (`redirect.ts`);
+ * - the `PublicationVia` member of `routes.Invocation.routing` (`routes/request.ts`) and of the
+ *   Server's `HandlerRequest.via` (`server/invocation/types.ts`), with the refusal of a release
+ *   `Via` at a Publication-backed destination (law SV-PUBLICATION-ADMITS-LEGACY-VIA);
+ * - the legacy vectors of TEST-VIA-NAMES-EXACTLY-ONE-REFERENCE, and the Runtime redirect's last
+ *   `legacy.remoteRoute` call with its dispatch test;
+ * - `PublicationVia` and `Route.via` from law PROTOCOL-LEGACY-WIRE-FIELDS and its test.
+ */
+export { remoteRoute } from './route.js';
+export type { PublicationBindingInput, PublicationVia } from './via.js';

package/dist/invocation/legacy/index.js

@@ -0,0 +1,28 @@
+/**
+ * Publication-based routing, retained for v2/v3 pins and frozen v3 projections of v4 pins.
+ * The Kernel emits this shape while decoders also accept release-based `Via`.
+ * Superseded by `Via` and `remoteRoute` from `@astrale-os/kernel-protocol/invocation`.
+ *
+ * Short-term consumers:
+ * - the Runtime redirect (`runtime/functions/runtime.ts`), the Kernel's only emitter until the
+ *   breaking release (AM-1, CT5-E), because every client and View built before K5 decodes only
+ *   this shape: the pinned document's own reference for a v2/v3 pin, the frozen v3 projection's
+ *   for a v4 pin. The breaking release switches v4 pins to `remoteRoute`; v2/v3 pins keep this;
+ * - servers built from a v2/v3 Publication, which admit only this shape (the SDK's `requireVia`,
+ *   the Server's `HandlerRequest.via`).
+ *
+ * Removal, in a separate breaking release: the conditions of `protocol/release/legacy/index.ts`
+ * hold (no installation pins a v2/v3 document) and every supported client relays `Via`. Then
+ * delete, in the same PR:
+ * - this folder, the `legacy` namespace of `invocation/index.ts` and its `PublicationVia` and
+ *   `PublicationBindingInput` type exports;
+ * - the `publication` branch of `acceptVia` and of `routedRevision`/`routedDigest` in `routing.ts`;
+ * - the `PublicationVia` member of `Routing` (`routing.ts`) and of `Route.via` (`redirect.ts`);
+ * - the `PublicationVia` member of `routes.Invocation.routing` (`routes/request.ts`) and of the
+ *   Server's `HandlerRequest.via` (`server/invocation/types.ts`), with the refusal of a release
+ *   `Via` at a Publication-backed destination (law SV-PUBLICATION-ADMITS-LEGACY-VIA);
+ * - the legacy vectors of TEST-VIA-NAMES-EXACTLY-ONE-REFERENCE, and the Runtime redirect's last
+ *   `legacy.remoteRoute` call with its dispatch test;
+ * - `PublicationVia` and `Route.via` from law PROTOCOL-LEGACY-WIRE-FIELDS and its test.
+ */
+export { remoteRoute } from './route.js';

package/dist/invocation/legacy/route.d.ts

@@ -0,0 +1,14 @@
+import type { IssuerId } from '@astrale-os/kernel-core/auth/issuer';
+import type { Key } from '@astrale-os/kernel-dsl/v1';
+import type { Route } from '../redirect.js';
+import type { PublicationBindingInput } from './via.js';
+/**
+ * Project one remote binding into the route every Kernel emits until the breaking release (AM-1):
+ * a `PublicationVia` naming the v3 reference, the pinned document's own for a legacy pin and the
+ * frozen projection's for a v4 pin. It reads only the binding's Publication coordinates, so a
+ * binding that also carries a release digest still projects to its v3 reference.
+ *
+ * @deprecated Successor: `remoteRoute`, which projects a release binding to `Via`; the breaking
+ * release calls it instead.
+ */
+export declare function remoteRoute(origin: Key.Origin, binding: PublicationBindingInput, issuer: IssuerId): Route;

package/dist/invocation/legacy/route.js

@@ -0,0 +1,25 @@
+import { acceptRoute } from '../redirect.js';
+/**
+ * Project one remote binding into the route every Kernel emits until the breaking release (AM-1):
+ * a `PublicationVia` naming the v3 reference, the pinned document's own for a legacy pin and the
+ * frozen projection's for a v4 pin. It reads only the binding's Publication coordinates, so a
+ * binding that also carries a release digest still projects to its v3 reference.
+ *
+ * @deprecated Successor: `remoteRoute`, which projects a release binding to `Via`; the breaking
+ * release calls it instead.
+ */
+export function remoteRoute(origin, binding, issuer) {
+    return acceptRoute({
+        endpoint: binding.endpoint,
+        via: {
+            kind: 'via',
+            publication: {
+                origin,
+                identity: { issuer: binding.issuer, subject: binding.subject },
+                revision: binding.revision,
+                etag: binding.etag,
+            },
+            issuer,
+        },
+    });
+}

package/dist/invocation/legacy/via.d.ts

@@ -0,0 +1,30 @@
+import type { IssuerId } from '@astrale-os/kernel-core/auth/issuer';
+import type { InvocationEndpoints } from '../../release/bindings/invocation.js';
+import type { Etag } from '../../release/legacy/etag.js';
+import type { PublicationRef } from '../../release/legacy/reference.js';
+/**
+ * Routed witness of a legacy pin, or of the v3 projection of a v4 pin: the reference keeps its
+ * Publication meaning (origin, identity, schema revision, Publication ETag).
+ *
+ * @deprecated Successor: `Via.release`, emitted by the breaking release (AM-1).
+ */
+export interface PublicationVia {
+    readonly kind: 'via';
+    readonly publication: PublicationRef;
+    readonly issuer: IssuerId;
+}
+/**
+ * Remote binding of a legacy pin, or of a v4 pin projected to its v3 Publication: the endpoint
+ * and the Publication reference coordinates the Kernel routes it with.
+ *
+ * @deprecated Successor: `RemoteBindingInput`, which carries the release digest.
+ */
+export interface PublicationBindingInput {
+    readonly endpoint: InvocationEndpoints;
+    readonly issuer: IssuerId;
+    readonly subject: string;
+    readonly revision: PublicationRef['revision'];
+    readonly etag: Etag;
+}
+/** Admit the Publication reference of one received `PublicationVia`. */
+export declare function acceptPublicationReference(input: unknown, label: string): PublicationRef;

package/dist/invocation/legacy/via.js

@@ -0,0 +1,15 @@
+import { PublicationError } from '../../release/legacy/error.js';
+import { acceptReference } from '../../release/legacy/reference.js';
+import { invalid } from '../admission.js';
+/** Admit the Publication reference of one received `PublicationVia`. */
+export function acceptPublicationReference(input, label) {
+    try {
+        return acceptReference(input);
+    }
+    catch (cause) {
+        if (cause instanceof PublicationError) {
+            return invalid(`${label} is invalid: ${cause.message}`);
+        }
+        throw cause;
+    }
+}

package/dist/invocation/redirect.d.ts

@@ -1,18 +1,20 @@
 import type { IssuerId } from '@astrale-os/kernel-core/auth/issuer';
-import type { Key } from '@astrale-os/kernel-dsl/v1';
-import type { InvocationEndpoints } from '../publication/bindings/invocation.js';
-import type { Etag } from '../publication/etag.js';
-import type { PublicationRef } from '../publication/reference.js';
+import type { Key, Revision } from '@astrale-os/kernel-dsl/v1';
+import type { InvocationEndpoints } from '../release/bindings/invocation.js';
+import type { ReleaseDigest } from '../release/digest.js';
 import type { RequestId } from './correlation.js';
 import type { InvocationId } from './identity.js';
+import type { PublicationVia } from './legacy/via.js';
+import type { Via } from './routing.js';
 import type { Trace } from './trace.js';
 export interface Route {
     readonly endpoint: InvocationEndpoints;
-    readonly via: {
-        readonly kind: 'via';
-        readonly publication: PublicationRef;
-        readonly issuer: IssuerId;
-    };
+    /**
+     * Routed witness of the installed release. Its `PublicationVia` shape is deprecated (legacy
+     * pins and the v3 projection of v4 pins); successor: `Via`, emitted by the breaking release
+     * (AM-1).
+     */
+    readonly via: Via | PublicationVia;
 }
 export interface Redirection {
     readonly route: Route;
@@ -26,15 +28,16 @@ export interface RedirectResponse {
     readonly invocation: InvocationId;
     readonly redirect: Redirection;
 }
+/** Remote binding of one installed release: the endpoint and the release it routes to. */
 export interface RemoteBindingInput {
     readonly endpoint: InvocationEndpoints;
     readonly issuer: IssuerId;
     readonly subject: string;
-    readonly revision: PublicationRef['revision'];
-    readonly etag: Etag;
+    readonly revision: Revision;
+    readonly release: ReleaseDigest;
 }
 export declare function acceptRoute(input: unknown): Route;
-/** Project one semantic remote binding into its admitted protocol route representation. */
+/** Project an installed release binding into a release `Via`; legacy emitters use `legacy.remoteRoute`. */
 export declare function remoteRoute(origin: Key.Origin, binding: RemoteBindingInput, issuer: IssuerId): Route;
 export declare function acceptRedirection(input: unknown): Redirection;
 export declare function decodeRedirectResponse(input: unknown): RedirectResponse;

package/dist/invocation/redirect.js

@@ -1,30 +1,18 @@
-import { acceptInvocationEndpoints } from '../publication/bindings/invocation.js';
-import { PublicationError } from '../publication/error.js';
-import { acceptReference } from '../publication/reference.js';
-import { exactFields, invalid, issuerId, invocation, portableObject, requestId, required, string, } from './admission.js';
+import { acceptInvocationEndpoints } from '../release/legacy/bindings.js';
+import { PublicationError } from '../release/legacy/error.js';
+import { exactFields, invalid, invocation, portableObject, requestId, required, string, } from './admission.js';
+import { acceptVia } from './routing.js';
 import { admitTrace } from './trace.js';
 const ROUTE_FIELDS = new Set(['endpoint', 'via']);
-const VIA_FIELDS = new Set(['kind', 'publication', 'issuer']);
 const REDIRECTION_FIELDS = new Set(['route', 'credential', 'trace']);
 const REDIRECT_RESPONSE_FIELDS = new Set(['kind', 'requestId', 'invocation', 'redirect']);
 export function acceptRoute(input) {
     const object = portableObject(input, 'route');
     exactFields(object, ROUTE_FIELDS, 'route');
     required(object, ['endpoint', 'via'], 'route');
+    const via = acceptVia(portableObject(object.via, 'route.via'), 'route.via');
     try {
-        const via = portableObject(object.via, 'route.via');
-        exactFields(via, VIA_FIELDS, 'route.via');
-        required(via, ['kind', 'publication', 'issuer'], 'route.via');
-        if (via.kind !== 'via')
-            invalid('route.via.kind must be "via"');
-        return Object.freeze({
-            endpoint: acceptInvocationEndpoints(object.endpoint),
-            via: Object.freeze({
-                kind: 'via',
-                publication: acceptReference(via.publication),
-                issuer: issuerId(via.issuer, 'route.via.issuer'),
-            }),
-        });
+        return Object.freeze({ endpoint: acceptInvocationEndpoints(object.endpoint), via });
     }
     catch (cause) {
         if (cause instanceof PublicationError) {
@@ -33,17 +21,17 @@ export function acceptRoute(input) {
         throw cause;
     }
 }
-/** Project one semantic remote binding into its admitted protocol route representation. */
+/** Project an installed release binding into a release `Via`; legacy emitters use `legacy.remoteRoute`. */
 export function remoteRoute(origin, binding, issuer) {
     return acceptRoute({
         endpoint: binding.endpoint,
         via: {
             kind: 'via',
-            publication: {
+            release: {
                 origin,
                 identity: { issuer: binding.issuer, subject: binding.subject },
                 revision: binding.revision,
-                etag: binding.etag,
+                digest: binding.release,
             },
             issuer,
         },

package/dist/invocation/request.js

@@ -3,7 +3,7 @@ import { acceptDelegate } from './delegate.js';
 import { acceptIdempotencyKey } from './idempotency.js';
 import { acceptRouting } from './routing.js';
 import { acceptSchemaTarget } from './schema.js';
-import { acceptCall } from './target.js';
+import { callFromSnapshot } from './target.js';
 import { admitTrace } from './trace.js';
 const REQUEST_FIELDS = new Set([
     'version',
@@ -39,7 +39,7 @@ export function decodeRequest(input) {
     return Object.freeze({
         version: 2,
         requestId: requestId(object.requestId, 'request.requestId'),
-        call: acceptCall(object.call),
+        call: callFromSnapshot(object.call),
         ...(credential === undefined ? {} : { credential }),
         ...(delegate === undefined ? {} : { delegate }),
         ...(routing === undefined ? {} : { routing }),

package/dist/invocation/routing.d.ts

@@ -1,14 +1,28 @@
 import type { IssuerId } from '@astrale-os/kernel-core/auth/issuer';
-import type { Etag } from '../publication/etag.js';
-import type { PublicationRef } from '../publication/reference.js';
+import type { Revision } from '@astrale-os/kernel-dsl/v1/addressing';
+import type { Object as ValueObject } from '@astrale-os/kernel-dsl/value';
+import type { Sha256Digest } from '../release/digest.js';
+import type { ReleaseRef } from '../release/reference.js';
+import type { PublicationVia } from './legacy/via.js';
+/** Routed witness of one installed release: the Kernel routed this call to that exact release. */
 export interface Via {
     readonly kind: 'via';
-    readonly publication: PublicationRef;
+    readonly release: ReleaseRef;
     readonly issuer: IssuerId;
 }
 export interface Refresh {
     readonly kind: 'refresh';
-    readonly stale: Etag;
+    readonly stale: Sha256Digest;
 }
-export type Routing = Via | Refresh;
+/** A received `Via` names exactly one of a `ReleaseRef` or a legacy `PublicationRef`. */
+export type Routing = Via | PublicationVia | Refresh;
 export declare function acceptRouting(input: unknown): Routing;
+/** Admit one routed witness carrying exactly one of `release` or legacy `publication`. */
+export declare function acceptVia(object: ValueObject, label: string): Via | PublicationVia;
+/** Schema revision of the release or Publication the witness routed the call to. */
+export declare function routedRevision(via: Via | PublicationVia): Revision;
+/**
+ * Digest designating what the witness routed the call to: the release digest of a `Via`, the
+ * Publication ETag of a legacy `PublicationVia`.
+ */
+export declare function routedDigest(via: Via | PublicationVia): Sha256Digest;

package/dist/invocation/routing.js

@@ -1,27 +1,13 @@
-import { PublicationError } from '../publication/error.js';
-import { acceptReference } from '../publication/reference.js';
+import { ReleaseError } from '../release/error.js';
+import { acceptReference } from '../release/reference.js';
 import { digest, exactFields, invalid, issuerId, portableObject, required } from './admission.js';
-const VIA_FIELDS = new Set(['kind', 'publication', 'issuer']);
+import { acceptPublicationReference } from './legacy/via.js';
+const VIA_FIELDS = new Set(['kind', 'release', 'publication', 'issuer']);
 const REFRESH_FIELDS = new Set(['kind', 'stale']);
 export function acceptRouting(input) {
     const object = portableObject(input, 'routing');
-    if (object.kind === 'via') {
-        exactFields(object, VIA_FIELDS, 'via routing');
-        required(object, ['kind', 'publication', 'issuer'], 'via routing');
-        try {
-            return Object.freeze({
-                kind: 'via',
-                publication: acceptReference(object.publication),
-                issuer: issuerId(object.issuer, 'via routing.issuer'),
-            });
-        }
-        catch (cause) {
-            if (cause instanceof PublicationError) {
-                return invalid(`via routing.publication is invalid: ${cause.message}`);
-            }
-            throw cause;
-        }
-    }
+    if (object.kind === 'via')
+        return acceptVia(object, 'via routing');
     if (object.kind === 'refresh') {
         exactFields(object, REFRESH_FIELDS, 'refresh routing');
         required(object, ['kind', 'stale'], 'refresh routing');
@@ -32,3 +18,47 @@ export function acceptRouting(input) {
     }
     return invalid('routing.kind must be "via" or "refresh"');
 }
+/** Admit one routed witness carrying exactly one of `release` or legacy `publication`. */
+export function acceptVia(object, label) {
+    exactFields(object, VIA_FIELDS, label);
+    if (object.kind !== 'via')
+        invalid(`${label}.kind must be "via"`);
+    const hasRelease = Object.hasOwn(object, 'release');
+    if (hasRelease === Object.hasOwn(object, 'publication')) {
+        invalid(`${label} must contain exactly one of release or publication`);
+    }
+    required(object, ['issuer'], label);
+    if (!hasRelease) {
+        return Object.freeze({
+            kind: 'via',
+            publication: acceptPublicationReference(object.publication, `${label}.publication`),
+            issuer: issuerId(object.issuer, `${label}.issuer`),
+        });
+    }
+    return Object.freeze({
+        kind: 'via',
+        release: acceptReleaseReference(object.release, `${label}.release`),
+        issuer: issuerId(object.issuer, `${label}.issuer`),
+    });
+}
+/** Schema revision of the release or Publication the witness routed the call to. */
+export function routedRevision(via) {
+    return 'release' in via ? via.release.revision : via.publication.revision;
+}
+/**
+ * Digest designating what the witness routed the call to: the release digest of a `Via`, the
+ * Publication ETag of a legacy `PublicationVia`.
+ */
+export function routedDigest(via) {
+    return 'release' in via ? via.release.digest : via.publication.etag;
+}
+function acceptReleaseReference(input, label) {
+    try {
+        return acceptReference(input);
+    }
+    catch (cause) {
+        if (cause instanceof ReleaseError)
+            return invalid(`${label} is invalid: ${cause.message}`);
+        throw cause;
+    }
+}

package/dist/invocation/schema.d.ts

@@ -1,15 +1,10 @@
-import type { Revision } from '@astrale-os/kernel-dsl/v1/addressing';
-import type { Sha256Digest } from '../publication/index.js';
+import type { Sha256Digest } from '../release/digest.js';
 /**
- * Source-Kernel precondition for one invocation: the exact installed artifact target, the Schema
- * revision, or the fingerprint of the callable meaning the static consumer compiled against.
+ * Source-Kernel precondition for one invocation: the exact installed artifact target, or the
+ * fingerprint of the callable meaning the static consumer compiled against.
  */
 export type SchemaTarget = {
     readonly target: Sha256Digest;
-}
-/** @deprecated Pin the callable meaning with `fingerprint`; revision pinning will be removed. */
- | {
-    readonly revision: Revision;
 } | {
     readonly fingerprint: Sha256Digest;
 };