@astrale-os/kernel-protocol 0.5.0-beta.9 → 0.5.0

package/dist/schema/installation/introspection/result.d.ts

@@ -1,33 +1,92 @@
+import type { IssuerId } from '@astrale-os/kernel-core/auth/issuer';
 import type { introspection } from '@astrale-os/kernel-core/schema';
-import type { bundle } from '@astrale-os/kernel-dsl/v1';
-import type { Ref } from '../../../artifact/index.js';
-import type { Publication } from '../../../publication/index.js';
-import type { PublicationRequirements } from '../../../publication/index.js';
+import type { bundle, Key, Revision } from '@astrale-os/kernel-dsl/v1';
+import type { BuildDigest, ReleaseDigest, ReleaseRef, DomainRelease, Requirements } from '../../../release/index.js';
 export type Digest = `sha256:${string}`;
-export type Source = {
-    readonly kind: 'builtin';
-    readonly bundle: Ref;
-} | {
-    readonly kind: 'local';
-    readonly artifact: Ref;
-    readonly bundle: Ref;
-} | {
-    readonly kind: 'remote';
-    readonly publication: Publication;
-};
-export interface Installation {
-    readonly state: 'installed' | 'ready' | 'removing';
-    readonly target: Digest;
-    readonly source: Source;
-    readonly bundle: bundle.Bundle;
-    readonly readiness: Digest | null;
+/** Lightweight proof of one exact ready installed Domain generation. */
+export interface DomainInfo {
+    readonly origin: Key.Origin;
+    readonly revision: Revision;
+    readonly generation: Digest;
+    /** Exact reference of the ready pinned release, or null for a local Domain. */
+    readonly release: ReleaseRef | null;
+    readonly readiness: Digest;
     readonly capabilities: {
-        readonly requested: PublicationRequirements['capabilities'];
-        readonly materialized: PublicationRequirements['capabilities'];
+        readonly requested: Requirements['capabilities'];
+        readonly materialized: Requirements['capabilities'];
     };
+    readonly bindings: DomainRelease['bindings'];
+}
+/** Explicit complete Bundle observed coherently with its ready Domain generation. */
+export interface DomainBundle {
+    readonly domain: DomainInfo;
+    readonly bundle: bundle.Bundle;
+}
+/**
+ * How one ready Domain generation binds one dependency of its exact closure: `exact` when the
+ * pinned revision is the one the Kernel serves, `retained` when the Kernel serves another revision
+ * and keeps the pinned one as inactive context admitted by unchanged meaning.
+ */
+export interface DependencyBinding {
+    readonly origin: Key.Origin;
+    readonly pinned: Revision;
+    readonly active: Revision;
+    readonly binding: 'exact' | 'retained';
+}
+/** The origin-ordered dependency bindings observed coherently with a ready Domain generation. */
+export interface DomainDependencies {
+    readonly domain: DomainInfo;
+    readonly dependencies: readonly DependencyBinding[];
+}
+/**
+ * What one installation pins: a DomainRelease v4 pin, its release digest beside the build digest
+ * it runs, or, for a local install, the digest of the stored artifact its source named.
+ */
+export type InstalledPin = {
+    readonly kind: 'release';
+    readonly release: ReleaseDigest;
+    readonly build: BuildDigest;
+} | {
+    readonly kind: 'artifact';
+    readonly artifact: Digest;
+};
+/**
+ * The issuer of a release one installation replaced, as the Kernel records it: accepted while its
+ * work drains, and listed until a later consented install re-pins or prunes it, drained or not.
+ */
+export interface InFlightIssuer {
+    readonly issuer: IssuerId;
+    /** Pinned document digest of the replaced release. */
+    readonly release: Digest;
+    /** UTC millisecond ISO 8601 instant of the activation commit that replaced it. */
+    readonly replacedAt: string;
+}
+/**
+ * One ready installation the Kernel pins to a deployment or to a stored artifact, as its caller can
+ * read it.
+ */
+export interface InstalledRelease {
+    readonly origin: Key.Origin;
+    readonly revision: Revision;
+    /** Issuer of the installation's Domain principal. */
+    readonly issuer: IssuerId;
+    /**
+     * The deployment URL, an HTTP(S) origin, the Kernel discovered the pinned document at: present
+     * exactly for a `release` pin, since an `artifact` pin names no deployment.
+     */
+    readonly url?: string;
+    readonly pin: InstalledPin;
+    /** Issuer-ordered, distinct, never the current issuer. */
+    readonly inFlight: readonly InFlightIssuer[];
 }
-export type ResultFor<Input extends introspection.Introspection> = Pick<Installation, Extract<keyof Input['select'], keyof Installation>> | null;
+export type ResultFor<Input extends introspection.Introspection> = Input extends {
+    readonly kind: 'installed';
+} ? readonly InstalledRelease[] : Input extends {
+    readonly kind: 'bundle';
+} ? DomainBundle : Input extends {
+    readonly kind: 'dependencies';
+} ? DomainDependencies : DomainInfo;
 export interface Limits {
-    readonly maximumPublicationBytes: number;
+    readonly maximumReleaseBytes: number;
     readonly maximumBundleBytes: number;
 }

package/dist/schema/installation/result.d.ts

@@ -0,0 +1,15 @@
+import type { InstallReceipt } from '@astrale-os/kernel-core/schema/kernel/syscalls/contracts';
+import type { Key, Revision } from '@astrale-os/kernel-dsl/v1';
+/** One exact installed Domain generation: what an install that changes nothing reports. */
+export interface InstalledGeneration {
+    readonly origin: Key.Origin;
+    readonly revision: Revision;
+    readonly generation: `sha256:${string}`;
+}
+export type InstallResult = {
+    readonly changed: true;
+    readonly receipt: InstallReceipt;
+} | {
+    readonly changed: false;
+    readonly domains: readonly [InstalledGeneration, ...InstalledGeneration[]];
+};

package/dist/schema/installation/result.js

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@astrale-os/kernel-protocol",
-  "version": "0.5.0-beta.9",
-  "description": "Portable Astrale invocation, publication, installation, routing, and issuer protocols",
+  "version": "0.5.0",
+  "description": "Portable Astrale invocation, Release, installation, routing, and issuer protocols",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -27,6 +27,10 @@
       "types": "./dist/errors/index.d.ts",
       "import": "./dist/errors/index.js"
     },
+    "./issuer/claims": {
+      "types": "./dist/issuer/claims.d.ts",
+      "import": "./dist/issuer/claims.js"
+    },
     "./issuer/configuration": {
       "types": "./dist/issuer/configuration.d.ts",
       "import": "./dist/issuer/configuration.js"
@@ -47,49 +51,25 @@
       "types": "./dist/issuer/paths.d.ts",
       "import": "./dist/issuer/paths.js"
     },
+    "./issuer/workflow-engine": {
+      "types": "./dist/issuer/workflow-engine.d.ts",
+      "import": "./dist/issuer/workflow-engine.js"
+    },
     "./invocation": {
       "types": "./dist/invocation/index.d.ts",
       "import": "./dist/invocation/index.js"
     },
-    "./invocation/service-reason": {
-      "types": "./dist/invocation/service-reason.d.ts",
-      "import": "./dist/invocation/service-reason.js"
-    },
     "./artifact": {
       "types": "./dist/artifact/index.d.ts",
       "import": "./dist/artifact/index.js"
     },
-    "./publication": {
-      "types": "./dist/publication/index.d.ts",
-      "import": "./dist/publication/index.js"
-    },
-    "./publication/publication": {
-      "types": "./dist/publication/publication.d.ts",
-      "import": "./dist/publication/publication.js"
-    },
-    "./publication/reference": {
-      "types": "./dist/publication/reference.d.ts",
-      "import": "./dist/publication/reference.js"
-    },
-    "./publication/requirements": {
-      "types": "./dist/publication/requirements.d.ts",
-      "import": "./dist/publication/requirements.js"
-    },
-    "./publication/delivery": {
-      "types": "./dist/publication/delivery/index.d.ts",
-      "import": "./dist/publication/delivery/index.js"
-    },
-    "./publication/bundle": {
-      "types": "./dist/publication/bundle.d.ts",
-      "import": "./dist/publication/bundle.js"
-    },
-    "./publication/bundle-evidence": {
-      "types": "./dist/publication/bundle-evidence.d.ts",
-      "import": "./dist/publication/bundle-evidence.js"
+    "./release": {
+      "types": "./dist/release/index.d.ts",
+      "import": "./dist/release/index.js"
     },
-    "./publication/delivery-declaration": {
-      "types": "./dist/publication/delivery-declaration.d.ts",
-      "import": "./dist/publication/delivery-declaration.js"
+    "./release/delivery": {
+      "types": "./dist/release/delivery/index.d.ts",
+      "import": "./dist/release/delivery/index.js"
     },
     "./routes": {
       "types": "./dist/routes/index.d.ts",
@@ -99,30 +79,6 @@
       "types": "./dist/schema/index.d.ts",
       "import": "./dist/schema/index.js"
     },
-    "./routes/admission": {
-      "types": "./dist/routes/admission.d.ts",
-      "import": "./dist/routes/admission.js"
-    },
-    "./routes/binding": {
-      "types": "./dist/routes/binding.d.ts",
-      "import": "./dist/routes/binding.js"
-    },
-    "./routes/evidence": {
-      "types": "./dist/routes/evidence.d.ts",
-      "import": "./dist/routes/evidence.js"
-    },
-    "./routes/placement": {
-      "types": "./dist/routes/placement.d.ts",
-      "import": "./dist/routes/placement.js"
-    },
-    "./routes/release-unavailable": {
-      "types": "./dist/routes/release-unavailable.d.ts",
-      "import": "./dist/routes/release-unavailable.js"
-    },
-    "./routes/routing": {
-      "types": "./dist/routes/routing.d.ts",
-      "import": "./dist/routes/routing.js"
-    },
     "./runtime": {
       "types": "./dist/runtime/index.d.ts",
       "import": "./dist/runtime/index.js"
@@ -133,31 +89,21 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-core": ">=0.9.0-beta.9 <1.0.0",
-    "@astrale-os/kernel-dsl": ">=0.2.0-beta.7 <1.0.0",
+    "@astrale-os/kernel-core": "0.9.0",
+    "@astrale-os/kernel-dsl": "0.2.0",
     "@noble/hashes": "2.3.0"
   },
   "devDependencies": {
     "@astrale/typescript-config": "npm:@jsr/astrale__typescript-config@~1.1.0",
-    "msgpackr": "^2.0.5",
     "typescript": "7.0.2",
-    "vitest": "^4.1.10"
-  },
-  "peerDependencies": {
-    "msgpackr": "^2.0.5"
-  },
-  "peerDependenciesMeta": {
-    "msgpackr": {
-      "optional": true
-    }
+    "vitest": "^5.0.1"
   },
   "scripts": {
     "build": "tsc",
     "clean": "rm -rf dist",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.workers.json",
     "test": "vitest run",
     "test:file": "vitest run",
-    "test:watch": "vitest",
-    "preinstall": "node -e \"try{require('./.check-workspace.cjs')}catch{}\""
+    "test:watch": "vitest"
   }
 }

package/dist/codecs/msgpack.d.ts

@@ -1,4 +0,0 @@
-import type { Codec } from './codec.js';
-export declare function loadMsgpack(): Promise<Codec>;
-/** Package-private canonical identity check used by Protocol binding selection. */
-export declare function isMsgpackCodec(input: Codec): boolean;

package/dist/codecs/msgpack.js

@@ -1,50 +0,0 @@
-import { accept as acceptValue, BoundaryError } from '@astrale-os/kernel-dsl/value';
-import { DecodeError } from './codec.js';
-import { CONTENT_TYPE_MSGPACK } from './media-types.js';
-let library = null;
-export async function loadMsgpack() {
-    if (library === null) {
-        const [packing, unpacking] = await Promise.all([
-            import('msgpackr/pack'),
-            import('msgpackr/unpack'),
-        ]);
-        library = Object.freeze({ pack: packing.pack, unpack: unpacking.unpack });
-    }
-    return MSGPACK;
-}
-const MSGPACK = Object.freeze({
-    name: 'msgpack',
-    contentType: CONTENT_TYPE_MSGPACK,
-    binary: true,
-    encode(data) {
-        if (library === null)
-            throw new Error('MsgPack codec is not loaded');
-        return new Uint8Array(library.pack(acceptValue(data)));
-    },
-    decode(input) {
-        if (library === null)
-            throw new Error('MsgPack codec is not loaded');
-        if (typeof input === 'string')
-            throw new TypeError('MsgPack requires a binary envelope');
-        let decoded;
-        try {
-            decoded = library.unpack(input);
-        }
-        catch (cause) {
-            throw new DecodeError('MsgPack envelope is malformed.', { cause });
-        }
-        try {
-            return acceptValue(decoded);
-        }
-        catch (cause) {
-            if (cause instanceof BoundaryError) {
-                throw new DecodeError('MsgPack envelope is not a portable value.', { cause });
-            }
-            throw cause;
-        }
-    },
-});
-/** Package-private canonical identity check used by Protocol binding selection. */
-export function isMsgpackCodec(input) {
-    return input === MSGPACK;
-}

package/dist/publication/bindings/invocation.js

@@ -1,13 +0,0 @@
-import { absoluteHttpUrl, absoluteUrl, exact, record } from '../content.js';
-export function acceptInvocationEndpoints(input) {
-    const value = record(input, 'PUBLICATION_BINDING_INVALID', 'Invocation endpoints are invalid.');
-    exact(value, ['http', 'websocket'], 'PUBLICATION_BINDING_INVALID');
-    const http = absoluteHttpUrl(value.http, true, 'PUBLICATION_BINDING_INVALID');
-    const websocket = value.websocket === undefined
-        ? undefined
-        : absoluteUrl(value.websocket, ['ws:', 'wss:'], true, 'PUBLICATION_BINDING_INVALID');
-    return Object.freeze({
-        http,
-        ...(websocket === undefined ? {} : { websocket }),
-    });
-}

package/dist/publication/bindings/view.d.ts

@@ -1,7 +0,0 @@
-import { Key } from '@astrale-os/kernel-dsl/v1/addressing';
-export interface ViewBinding {
-    readonly view: Key.View;
-    readonly href: string;
-    readonly handshake: 'shell' | 'none';
-}
-export declare function admitViewBinding(input: unknown, origin: string): ViewBinding;

package/dist/publication/bindings/view.js

@@ -1,28 +0,0 @@
-import { Key } from '@astrale-os/kernel-dsl/v1/addressing';
-import { absoluteHttpUrl, exact, record } from '../content.js';
-import { fail } from '../error.js';
-export function admitViewBinding(input, origin) {
-    const value = record(input, 'PUBLICATION_VIEW_INVALID', 'Published View binding is invalid.');
-    exact(value, ['view', 'href', 'handshake'], 'PUBLICATION_VIEW_INVALID');
-    let view;
-    try {
-        view = Key(String(value.view));
-    }
-    catch (cause) {
-        if (cause instanceof TypeError) {
-            return fail('PUBLICATION_VIEW_INVALID', 'View key is invalid.', cause);
-        }
-        throw cause;
-    }
-    if (Key.origin(view) !== origin || !view.slice(view.indexOf(':') + 1).startsWith('view.')) {
-        fail('PUBLICATION_VIEW_INVALID', 'View binding must name a root View.');
-    }
-    if (value.handshake !== 'shell' && value.handshake !== 'none') {
-        fail('PUBLICATION_VIEW_INVALID', 'View handshake is invalid.');
-    }
-    return Object.freeze({
-        view,
-        href: absoluteHttpUrl(value.href, true, 'PUBLICATION_VIEW_INVALID'),
-        handshake: value.handshake,
-    });
-}

package/dist/publication/bundle-admission.d.ts

@@ -1,4 +0,0 @@
-import * as dslBundle from '@astrale-os/kernel-dsl/v1/bundle';
-import type { Publication } from './publication.js';
-export declare function acceptBundle(input: Publication, artifact: unknown): dslBundle.Bundle;
-export declare function decodeBundle(input: Publication, bytes: Uint8Array): dslBundle.Bundle;

package/dist/publication/bundle-evidence.d.ts

@@ -1,3 +0,0 @@
-import type { Publication } from './publication.js';
-/** Verify exact artifact bytes without decoding an authored Schema Bundle. */
-export declare function verifyBundleBytes(publication: Publication, bytes: Uint8Array): void;

package/dist/publication/bundle-evidence.js

@@ -1,13 +0,0 @@
-import { fail } from './error.js';
-import { sha256Hex } from './etag.js';
-/** Verify exact artifact bytes without decoding an authored Schema Bundle. */
-export function verifyBundleBytes(publication, bytes) {
-    if (!(bytes instanceof Uint8Array)) {
-        fail('PUBLICATION_INVALID', 'Bundle artifact bytes are invalid.');
-    }
-    const descriptor = publication.schema.bundle;
-    if (bytes.byteLength !== descriptor.ref.size ||
-        `sha256:${sha256Hex(bytes)}` !== descriptor.ref.digest) {
-        fail('PUBLICATION_INVALID', 'Bundle artifact does not match its descriptor.');
-    }
-}

package/dist/publication/content.d.ts

@@ -1,10 +0,0 @@
-import type { PublicationErrorCode } from './error.js';
-import type { Publication } from './publication.js';
-export type Content = Omit<Publication, 'etag'>;
-export declare function record(input: unknown, code: PublicationErrorCode, message: string): Record<string, unknown>;
-export declare function exact(value: Record<string, unknown>, allowed: readonly string[], code: PublicationErrorCode): void;
-export declare function array(input: unknown, code: PublicationErrorCode): readonly unknown[];
-export declare function unique(values: readonly string[], code: PublicationErrorCode, label: string): void;
-export declare function deepFreeze<T>(value: T): T;
-export declare function absoluteHttpUrl(input: unknown, allowSearch: boolean, code: PublicationErrorCode, allowTemplate?: boolean): string;
-export declare function absoluteUrl(input: unknown, protocols: readonly string[], allowSearch: boolean, code: PublicationErrorCode, allowTemplate?: boolean): string;

package/dist/publication/delivery/delivery.d.ts

@@ -1,9 +0,0 @@
-import type { Publication } from '../publication.js';
-import type { Attestation } from './attestation.js';
-export interface Delivery {
-    readonly format: 'astrale.domain.delivery';
-    readonly version: 1;
-    readonly publication: Publication;
-    readonly attestation: Attestation;
-}
-export declare function accept(input: unknown): Delivery;

package/dist/publication/delivery/limits.js

@@ -1,4 +0,0 @@
-export const PURPOSE = 'astrale.domain.delivery.v1';
-export const NONCE_MIN_LENGTH = 16;
-export const NONCE_MAX_LENGTH = 256;
-export const ATTESTATION_MAX_BYTES = 16_384;

package/dist/publication/delivery-endpoint.js

@@ -1,22 +0,0 @@
-import { absoluteHttpUrl, exact, record } from './content.js';
-import { fail } from './error.js';
-export function admitEndpoint(input, publicUrl) {
-    if (input === undefined)
-        return undefined;
-    const value = record(input, 'PUBLICATION_INVALID', 'Delivery endpoint is invalid.');
-    exact(value, ['href', 'method', 'authentication'], 'PUBLICATION_INVALID');
-    const href = absoluteHttpUrl(value.href, true, 'PUBLICATION_INVALID');
-    if (new URL(href).origin !== new URL(publicUrl).origin || value.method !== 'POST') {
-        fail('PUBLICATION_INVALID', 'Delivery endpoint must be same-origin POST.');
-    }
-    const authentication = record(value.authentication, 'PUBLICATION_INVALID', 'Delivery authentication is invalid.');
-    exact(authentication, ['kind'], 'PUBLICATION_INVALID');
-    if (authentication.kind !== 'public' && authentication.kind !== 'bearer') {
-        fail('PUBLICATION_INVALID', 'Delivery authentication kind is invalid.');
-    }
-    return Object.freeze({
-        href,
-        method: 'POST',
-        authentication: Object.freeze({ kind: authentication.kind }),
-    });
-}

package/dist/publication/error.d.ts

@@ -1,7 +0,0 @@
-export type PublicationErrorCode = 'PUBLICATION_INVALID' | 'PUBLICATION_ETAG_MISMATCH' | 'PUBLICATION_BINDING_INVALID' | 'PUBLICATION_ROUTE_INVALID' | 'PUBLICATION_VIEW_INVALID';
-export declare class PublicationError extends Error {
-    readonly code: PublicationErrorCode;
-    readonly name = "PublicationError";
-    constructor(code: PublicationErrorCode, message: string, options?: ErrorOptions);
-}
-export declare function fail(code: PublicationErrorCode, message: string, cause?: unknown): never;

package/dist/publication/error.js

@@ -1,11 +0,0 @@
-export class PublicationError extends Error {
-    code;
-    name = 'PublicationError';
-    constructor(code, message, options) {
-        super(message, options);
-        this.code = code;
-    }
-}
-export function fail(code, message, cause) {
-    throw new PublicationError(code, message, cause === undefined ? undefined : { cause });
-}

package/dist/publication/etag.d.ts

@@ -1,6 +0,0 @@
-import type { Content } from './content.js';
-export type Sha256Digest = `sha256:${string}`;
-export type Etag = Sha256Digest;
-export declare function admitDigest(input: unknown): Sha256Digest;
-export declare function computeEtag(input: Content): Etag;
-export declare function sha256Hex(input: Uint8Array): string;

package/dist/publication/index.d.ts

@@ -1,17 +0,0 @@
-export { MEDIA_TYPE, PATH, url, seal, accept, encode, type Publication } from './publication.js';
-export { acceptBundle, decodeBundle } from './bundle-admission.js';
-export { BUNDLE_MEDIA_TYPE, describeBundle, type BundleDescriptor } from './bundle.js';
-export { verifyBundleBytes } from './bundle-evidence.js';
-export type { Content } from './content.js';
-export type { Declaration, DeliveryDeclaration } from './declaration.js';
-export { placeDelivery } from './delivery-declaration.js';
-export type { Etag, Sha256Digest } from './etag.js';
-export { PublicationError, type PublicationErrorCode } from './error.js';
-export * as delivery from './delivery/index.js';
-export type { Authentication as DeliveryAuthentication, Endpoint as DeliveryEndpoint, } from './delivery-endpoint.js';
-export type { Manifest } from './manifest.js';
-export { ClassOperationOrder, admitRequirements, validateRequirements, type CapabilityAdminRequirements, type CapabilityRequirements, type ClassCapabilityRequirement, type ClassOperation, type NonEmpty, type PublicationRequirements, } from './requirements.js';
-export { acceptReference, compareReference, compareReferences, matchesReference, reference, type PublicationRef, type PublicationReferenceRelation, } from './reference.js';
-export type { BodyPick, CredentialSource, HttpMethod, HttpRoute, HttpRouteDeclaration, RouteBody, RouteHeaders, SingleCredentialSource, } from './route.js';
-export type { Schema } from './schema.js';
-export { acceptInvocationEndpoints, type CallableBinding, type InvocationEndpoints, type ViewBinding, } from './bindings/index.js';

package/dist/publication/index.js

@@ -1,10 +0,0 @@
-export { MEDIA_TYPE, PATH, url, seal, accept, encode } from './publication.js';
-export { acceptBundle, decodeBundle } from './bundle-admission.js';
-export { BUNDLE_MEDIA_TYPE, describeBundle } from './bundle.js';
-export { verifyBundleBytes } from './bundle-evidence.js';
-export { placeDelivery } from './delivery-declaration.js';
-export { PublicationError } from './error.js';
-export * as delivery from './delivery/index.js';
-export { ClassOperationOrder, admitRequirements, validateRequirements, } from './requirements.js';
-export { acceptReference, compareReference, compareReferences, matchesReference, reference, } from './reference.js';
-export { acceptInvocationEndpoints, } from './bindings/index.js';

package/dist/publication/manifest.d.ts

@@ -1,6 +0,0 @@
-import { type ViewRef } from '@astrale-os/kernel-dsl/v1/addressing';
-export interface Manifest {
-    readonly logo?: string;
-    readonly entrypoint?: ViewRef;
-}
-export declare function admitManifest(input: unknown): Manifest | undefined;

package/dist/publication/manifest.js

@@ -1,30 +0,0 @@
-import { acceptDefinitionRef } from '@astrale-os/kernel-dsl/v1/addressing';
-import { exact, record } from './content.js';
-import { fail } from './error.js';
-export function admitManifest(input) {
-    if (input === undefined)
-        return undefined;
-    const value = record(input, 'PUBLICATION_INVALID', 'Manifest is invalid.');
-    exact(value, ['logo', 'entrypoint'], 'PUBLICATION_INVALID');
-    if (value.logo !== undefined && typeof value.logo !== 'string') {
-        fail('PUBLICATION_INVALID', 'Manifest logo must be a string.');
-    }
-    let entrypoint;
-    if (value.entrypoint !== undefined) {
-        let ref;
-        try {
-            ref = acceptDefinitionRef(value.entrypoint);
-        }
-        catch (cause) {
-            return fail('PUBLICATION_INVALID', 'Manifest entrypoint must be a root View reference.', cause);
-        }
-        if (ref.kind !== 'view') {
-            fail('PUBLICATION_INVALID', 'Manifest entrypoint must be a root View reference.');
-        }
-        entrypoint = ref;
-    }
-    return Object.freeze({
-        ...(value.logo === undefined ? {} : { logo: value.logo }),
-        ...(entrypoint === undefined ? {} : { entrypoint }),
-    });
-}

package/dist/publication/publication.d.ts

@@ -1,36 +0,0 @@
-import { type IssuerId } from '@astrale-os/kernel-core/auth/issuer';
-import { Key } from '@astrale-os/kernel-dsl/v1/addressing';
-import type { CallableBinding, ViewBinding } from './bindings/index.js';
-import type { Content } from './content.js';
-import type { Endpoint as DeliveryEndpoint } from './delivery-endpoint.js';
-import type { Etag } from './etag.js';
-import type { Manifest } from './manifest.js';
-import type { PublicationRequirements } from './requirements.js';
-import type { HttpRoute } from './route.js';
-import type { Schema } from './schema.js';
-export declare const PATH: '/.well-known/astrale/domain.json';
-export declare const MEDIA_TYPE: 'application/vnd.astrale.domain-publication+json;v=2';
-/** Resolve the canonical Publication URL beneath one exact HTTP(S) serving issuer. */
-export declare function url(input: string): string;
-export interface Publication {
-    readonly format: 'astrale.domain.publication';
-    readonly version: 2;
-    readonly origin: Key.Origin;
-    readonly identity: {
-        readonly issuer: IssuerId;
-        readonly subject: string;
-    };
-    readonly etag: Etag;
-    readonly schema: Schema;
-    readonly requirements: PublicationRequirements;
-    readonly manifest?: Manifest;
-    readonly bindings: {
-        readonly callables: readonly CallableBinding[];
-        readonly views: readonly ViewBinding[];
-    };
-    readonly routes: readonly HttpRoute[];
-    readonly delivery?: DeliveryEndpoint;
-}
-export declare function seal(input: Content): Publication;
-export declare function accept(input: unknown): Publication;
-export declare function encode(input: Publication): Uint8Array;