@astrale-os/kernel-server 0.4.1

package/dist/plan/walk.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Domain walker — turns a list of MountableContract into a mount plan.
+ *
+ * For each contract, decide whether it mounts on THIS server:
+ * - ambient (no binding.remoteUrl) → always mount
+ * - anchored (binding.remoteUrl set) → match host pattern against host.url
+ *
+ * Then bucket by base URL to compute one kernel mount per unique (host+basePath).
+ * Collect route bindings and check for path collisions.
+ *
+ * See docs/protocol-redesign.md §6 ("Server").
+ */
+import type { MountableContract, RouteBinding } from '@astrale-os/kernel-api/routed';
+import { type ServerHost } from './host';
+export type MountedFunction = {
+    contract: MountableContract;
+    /**
+     * Base URL template for this function's kernel mount.
+     *
+     * Ambient functions share the server host URL. Anchored functions use
+     * their own `binding.remoteUrl` (verified to match the server host).
+     */
+    baseUrl: string;
+    /** Anchored functions only — the parsed base path from remoteUrl. */
+    basePath: string;
+};
+export type MountedRoute = {
+    contract: MountableContract;
+    route: RouteBinding;
+    /** Full path from base URL (host stripped) + route.path. */
+    fullPath: string;
+    /** Normalized pattern: `{name}` → `:p`, `{name+}` → `*` — used for collision detection. */
+    normalizedKey: string;
+};
+export type MountPlan = {
+    /** Kernel mounts keyed by their base path (relative to the server host URL). */
+    kernelMounts: Map<string, MountedFunction[]>;
+    /** Route mounts. */
+    routes: MountedRoute[];
+    /** Fully-qualified method name → mounted function (for dispatch lookup). */
+    methodIndex: Map<string, MountedFunction>;
+    /**
+     * Compiled Host header matcher when the server host URL contains placeholders.
+     * Used at request time to extract host params and merge into params.
+     */
+    hostMatcher: RegExp | null;
+    /** Names of host placeholders, in source order. */
+    hostPlaceholders: string[];
+};
+export declare function walkDomain(contracts: MountableContract[], host: ServerHost): MountPlan;
+//# sourceMappingURL=walk.d.ts.map

package/dist/plan/walk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.d.ts","sourceRoot":"","sources":["../../plan/walk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAIpF,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,QAAQ,CAAA;AAIzD,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,EAAE,iBAAiB,CAAA;IAC3B;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAA;IACf,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,KAAK,EAAE,YAAY,CAAA;IACnB,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAA;IAChB,2FAA2F;IAC3F,aAAa,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,gFAAgF;IAChF,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;IAC5C,oBAAoB;IACpB,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,4EAA4E;IAC5E,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACzC;;;OAGG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,mDAAmD;IACnD,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B,CAAA;AAID,wBAAgB,UAAU,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,UAAU,GAAG,SAAS,CAgGtF"}

package/dist/plan/walk.js

@@ -0,0 +1,110 @@
+/**
+ * Domain walker — turns a list of MountableContract into a mount plan.
+ *
+ * For each contract, decide whether it mounts on THIS server:
+ * - ambient (no binding.remoteUrl) → always mount
+ * - anchored (binding.remoteUrl set) → match host pattern against host.url
+ *
+ * Then bucket by base URL to compute one kernel mount per unique (host+basePath).
+ * Collect route bindings and check for path collisions.
+ *
+ * See docs/protocol-redesign.md §6 ("Server").
+ */
+import { isSubdomainOf, parseUrlTemplate } from '@astrale-os/kernel-api/routed';
+import { parseServerHost } from './host';
+// ─── Walk ────────────────────────────────────────────────────────────────────
+export function walkDomain(contracts, host) {
+    const parsed = parseServerHost(host);
+    const kernelMounts = new Map();
+    const routes = [];
+    const methodIndex = new Map();
+    const routeCollisionKeys = new Map();
+    for (const contract of contracts) {
+        const binding = contract.binding;
+        const remoteUrl = binding?.remoteUrl;
+        let basePath;
+        let baseUrl;
+        if (!remoteUrl) {
+            // Ambient — mounts at the server host URL.
+            basePath = parsed.basePath;
+            baseUrl = host.url;
+        }
+        else {
+            // Anchored — must match or be a subdomain of the server's host pattern.
+            const fnParsed = parseUrlTemplate(remoteUrl);
+            if (!isSubdomainOf(fnParsed.hostPattern, parsed.hostPattern)) {
+                // Not this server's responsibility — skip (debug log).
+                // oxlint-disable-next-line no-console
+                console.debug(`[server] Skipping ${contract.ref}: remoteUrl host "${fnParsed.hostPattern}" does not match server host "${parsed.hostPattern}"`);
+                continue;
+            }
+            basePath = stripTrailingSlash(fnParsed.basePath);
+            baseUrl = remoteUrl;
+        }
+        const mounted = { contract, baseUrl, basePath };
+        methodIndex.set(contract.ref, mounted);
+        // Add to the kernel mount bucket for this basePath.
+        const bucket = kernelMounts.get(basePath) ?? [];
+        bucket.push(mounted);
+        kernelMounts.set(basePath, bucket);
+        // Route binding?
+        if (binding?.route) {
+            const route = binding.route;
+            const fullPath = joinPath(basePath, route.path);
+            const normalizedPath = normalizePath(fullPath);
+            const normalizedKey = `${route.method} ${normalizedPath}`;
+            if (route.method === '*') {
+                // Wildcard: collides with ANY existing route on this path.
+                const wildcardKey = `* ${normalizedPath}`;
+                const existingWild = routeCollisionKeys.get(wildcardKey);
+                if (existingWild) {
+                    throw new Error(`Route collision: ${contract.ref} and ${existingWild} both mount at ${wildcardKey}`);
+                }
+                for (const m of ['GET', 'POST', 'PUT', 'PATCH', 'DELETE']) {
+                    const specificKey = `${m} ${normalizedPath}`;
+                    const existingSpecific = routeCollisionKeys.get(specificKey);
+                    if (existingSpecific) {
+                        throw new Error(`Route collision: ${contract.ref} (wildcard) and ${existingSpecific} both mount at ${specificKey}`);
+                    }
+                }
+                routeCollisionKeys.set(wildcardKey, contract.ref);
+            }
+            else {
+                // Specific method: check same method AND existing wildcard.
+                const existing = routeCollisionKeys.get(normalizedKey);
+                if (existing) {
+                    throw new Error(`Route collision: ${contract.ref} and ${existing} both mount at ${normalizedKey}`);
+                }
+                const existingWild = routeCollisionKeys.get(`* ${normalizedPath}`);
+                if (existingWild) {
+                    throw new Error(`Route collision: ${contract.ref} and ${existingWild} (wildcard) both mount at * ${normalizedPath}`);
+                }
+                routeCollisionKeys.set(normalizedKey, contract.ref);
+            }
+            routes.push({ contract, route, fullPath, normalizedKey });
+        }
+    }
+    return {
+        kernelMounts,
+        routes,
+        methodIndex,
+        hostMatcher: parsed.hostMatcher,
+        hostPlaceholders: parsed.hostPlaceholders,
+    };
+}
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+function stripTrailingSlash(p) {
+    if (p.length > 1 && p.endsWith('/'))
+        return p.slice(0, -1);
+    return p;
+}
+function joinPath(base, child) {
+    const b = stripTrailingSlash(base);
+    // child is guaranteed to start with '/'
+    return `${b}${child}` || '/';
+}
+/** Normalize a path template for collision detection. */
+function normalizePath(path) {
+    return path.replace(/\{[a-zA-Z_]\w*[+*]\}/g, '*').replace(/\{[a-zA-Z_]\w*\}/g, ':p');
+}
+//# sourceMappingURL=walk.js.map

package/dist/plan/walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.js","sourceRoot":"","sources":["../../plan/walk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAA;AAE/E,OAAO,EAAE,eAAe,EAAmB,MAAM,QAAQ,CAAA;AA0CzD,gFAAgF;AAEhF,MAAM,UAAU,UAAU,CAAC,SAA8B,EAAE,IAAgB;IACzE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAEpC,MAAM,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAA;IACzD,MAAM,MAAM,GAAmB,EAAE,CAAA;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2B,CAAA;IACtD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAA;IAEpD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAA;QAChC,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAA;QAEpC,IAAI,QAAgB,CAAA;QACpB,IAAI,OAAe,CAAA;QAEnB,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,2CAA2C;YAC3C,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;YAC1B,OAAO,GAAG,IAAI,CAAC,GAAG,CAAA;QACpB,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;YAC5C,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7D,uDAAuD;gBACvD,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CACX,qBAAqB,QAAQ,CAAC,GAAG,qBAAqB,QAAQ,CAAC,WAAW,iCAAiC,MAAM,CAAC,WAAW,GAAG,CACjI,CAAA;gBACD,SAAQ;YACV,CAAC;YACD,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAChD,OAAO,GAAG,SAAS,CAAA;QACrB,CAAC;QAED,MAAM,OAAO,GAAoB,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA;QAChE,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAEtC,oDAAoD;QACpD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpB,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAElC,iBAAiB;QACjB,IAAI,OAAO,EAAE,KAAK,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;YAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC/C,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;YAC9C,MAAM,aAAa,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,cAAc,EAAE,CAAA;YAEzD,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACzB,2DAA2D;gBAC3D,MAAM,WAAW,GAAG,KAAK,cAAc,EAAE,CAAA;gBACzC,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;gBACxD,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CACb,oBAAoB,QAAQ,CAAC,GAAG,QAAQ,YAAY,kBAAkB,WAAW,EAAE,CACpF,CAAA;gBACH,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,EAAE,CAAC;oBACnE,MAAM,WAAW,GAAG,GAAG,CAAC,IAAI,cAAc,EAAE,CAAA;oBAC5C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;oBAC5D,IAAI,gBAAgB,EAAE,CAAC;wBACrB,MAAM,IAAI,KAAK,CACb,oBAAoB,QAAQ,CAAC,GAAG,mBAAmB,gBAAgB,kBAAkB,WAAW,EAAE,CACnG,CAAA;oBACH,CAAC;gBACH,CAAC;gBACD,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;YACnD,CAAC;iBAAM,CAAC;gBACN,4DAA4D;gBAC5D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;gBACtD,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CACb,oBAAoB,QAAQ,CAAC,GAAG,QAAQ,QAAQ,kBAAkB,aAAa,EAAE,CAClF,CAAA;gBACH,CAAC;gBACD,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,cAAc,EAAE,CAAC,CAAA;gBAClE,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CACb,oBAAoB,QAAQ,CAAC,GAAG,QAAQ,YAAY,+BAA+B,cAAc,EAAE,CACpG,CAAA;gBACH,CAAC;gBACD,kBAAkB,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;YACrD,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY;QACZ,MAAM;QACN,WAAW;QACX,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAA;AACH,CAAC;AAED,gFAAgF;AAEhF,SAAS,kBAAkB,CAAC,CAAS;IACnC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC1D,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAa;IAC3C,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAClC,wCAAwC;IACxC,OAAO,GAAG,CAAC,GAAG,KAAK,EAAE,IAAI,GAAG,CAAA;AAC9B,CAAC;AAED,yDAAyD;AACzD,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAA;AACtF,CAAC"}

package/dist/render/binary.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Binary HTTP response — `BinaryResult` → `Response`.
+ *
+ * Tags binary responses with `x-binary-result: true` so kernel-client can
+ * distinguish them from accidental opaque blobs (the kernel envelope is
+ * bypassed for binary results).
+ *
+ * Header precedence (low → high, later wins):
+ *   CORS headers  <  `br.headers`  <  canonical `content-type` + `x-binary-result`
+ *
+ * This lets a handler pass through any framing-specific headers its body
+ * needs (e.g. `x-vercel-ai-ui-message-stream`, `x-accel-buffering`, a tuned
+ * `cache-control`) while guaranteeing the kernel's own invariants
+ * (`content-type` matches `br.contentType`, `x-binary-result` is always
+ * set) cannot be accidentally clobbered.
+ */
+import type { BinaryResult } from '@astrale-os/kernel-api';
+export declare function buildBinaryResponse(br: BinaryResult, corsHeaders: Record<string, string>): Response;
+//# sourceMappingURL=binary.d.ts.map

package/dist/render/binary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary.d.ts","sourceRoot":"","sources":["../../render/binary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAM1D,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAClC,QAAQ,CAcV"}

package/dist/render/binary.js

@@ -0,0 +1,33 @@
+/**
+ * Binary HTTP response — `BinaryResult` → `Response`.
+ *
+ * Tags binary responses with `x-binary-result: true` so kernel-client can
+ * distinguish them from accidental opaque blobs (the kernel envelope is
+ * bypassed for binary results).
+ *
+ * Header precedence (low → high, later wins):
+ *   CORS headers  <  `br.headers`  <  canonical `content-type` + `x-binary-result`
+ *
+ * This lets a handler pass through any framing-specific headers its body
+ * needs (e.g. `x-vercel-ai-ui-message-stream`, `x-accel-buffering`, a tuned
+ * `cache-control`) while guaranteeing the kernel's own invariants
+ * (`content-type` matches `br.contentType`, `x-binary-result` is always
+ * set) cannot be accidentally clobbered.
+ */
+import { BINARY_RESULT_HEADER } from '@astrale-os/kernel-api';
+import { toBody } from './body';
+export function buildBinaryResponse(br, corsHeaders) {
+    const body = br.body instanceof Uint8Array
+        ? toBody(br.body)
+        : br.body;
+    return new Response(body, {
+        status: br.status ?? 200,
+        headers: {
+            ...corsHeaders,
+            ...br.headers,
+            'content-type': br.contentType,
+            [BINARY_RESULT_HEADER]: 'true',
+        },
+    });
+}
+//# sourceMappingURL=binary.js.map

package/dist/render/binary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary.js","sourceRoot":"","sources":["../../render/binary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,MAAM,UAAU,mBAAmB,CACjC,EAAgB,EAChB,WAAmC;IAEnC,MAAM,IAAI,GACR,EAAE,CAAC,IAAI,YAAY,UAAU;QAC3B,CAAC,CAAE,MAAM,CAAC,EAAE,CAAC,IAAI,CAAiB;QAClC,CAAC,CAAE,EAAE,CAAC,IAAmC,CAAA;IAC7C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,EAAE,CAAC,MAAM,IAAI,GAAG;QACxB,OAAO,EAAE;YACP,GAAG,WAAW;YACd,GAAG,EAAE,CAAC,OAAO;YACb,cAAc,EAAE,EAAE,CAAC,WAAW;YAC9B,CAAC,oBAAoB,CAAC,EAAE,MAAM;SAC/B;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/render/body.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Convert codec output (string or Uint8Array) to a Response-compatible body.
+ *
+ * Text codecs (JSON) return strings — passed through.
+ * Binary codecs (MsgPack) return Uint8Array — narrowed to ArrayBuffer for
+ * tsgo's stricter `BodyInit` typing. The fast path avoids a copy when the
+ * Uint8Array is a full view of its backing buffer.
+ */
+export declare function toBody(data: string | Uint8Array): string | ArrayBuffer;
+//# sourceMappingURL=body.d.ts.map

package/dist/render/body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../render/body.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,WAAW,CAMtE"}

package/dist/render/body.js

@@ -0,0 +1,17 @@
+/**
+ * Convert codec output (string or Uint8Array) to a Response-compatible body.
+ *
+ * Text codecs (JSON) return strings — passed through.
+ * Binary codecs (MsgPack) return Uint8Array — narrowed to ArrayBuffer for
+ * tsgo's stricter `BodyInit` typing. The fast path avoids a copy when the
+ * Uint8Array is a full view of its backing buffer.
+ */
+export function toBody(data) {
+    if (typeof data === 'string')
+        return data;
+    if (data.byteOffset === 0 && data.byteLength === data.buffer.byteLength) {
+        return data.buffer;
+    }
+    return data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength);
+}
+//# sourceMappingURL=body.js.map

package/dist/render/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../../render/body.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,IAAyB;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACzC,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC,MAAqB,CAAA;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAgB,CAAA;AAC7F,CAAC"}

package/dist/render/index.d.ts

@@ -0,0 +1,3 @@
+export { toBody } from './body';
+export { buildBinaryResponse } from './binary';
+//# sourceMappingURL=index.d.ts.map

package/dist/render/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../render/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA"}

package/dist/render/index.js

@@ -0,0 +1,3 @@
+export { toBody } from './body';
+export { buildBinaryResponse } from './binary';
+//# sourceMappingURL=index.js.map

package/dist/render/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../render/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA"}

package/dist/routed/credential.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Credential extraction for route bindings.
+ *
+ * A route binding declares where to find the request credential — header,
+ * cookie, or query parameter — via its `route.credential` field. This module
+ * implements the lookup, including cookie splitting and URL decoding.
+ */
+import type { CredentialSource } from '@astrale-os/kernel-api';
+export declare function readCredential(req: Request, source: CredentialSource): string;
+//# sourceMappingURL=credential.d.ts.map

package/dist/routed/credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../../routed/credential.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAA0B,MAAM,wBAAwB,CAAA;AAEtF,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAS7E"}

package/dist/routed/credential.js

@@ -0,0 +1,55 @@
+/**
+ * Credential extraction for route bindings.
+ *
+ * A route binding declares where to find the request credential — header,
+ * cookie, or query parameter — via its `route.credential` field. This module
+ * implements the lookup, including cookie splitting and URL decoding.
+ */
+export function readCredential(req, source) {
+    if (Array.isArray(source)) {
+        for (const s of source) {
+            const value = readSingle(req, s);
+            if (value)
+                return value;
+        }
+        return '';
+    }
+    return readSingle(req, source);
+}
+function readSingle(req, source) {
+    switch (source.in) {
+        case 'header': {
+            const raw = req.headers.get(source.name ?? 'authorization') ?? '';
+            return stripBearerPrefix(raw);
+        }
+        case 'query':
+            return new URL(req.url).searchParams.get(source.name ?? 'credential') ?? '';
+        case 'cookie': {
+            const header = req.headers.get('cookie');
+            if (!header || !source.name)
+                return '';
+            const cookies = header.split(';').map((c) => c.trim());
+            for (const c of cookies) {
+                const [k, v] = c.split('=', 2);
+                if (k === source.name)
+                    return decodeURIComponent(v ?? '');
+            }
+            return '';
+        }
+    }
+}
+/**
+ * Strip an optional `Bearer ` (case-insensitive) prefix from an
+ * Authorization-header value. Other values pass through as-is —
+ * validation is the auth layer's responsibility, not extraction's.
+ *
+ * Header-source credentials are interpreted per RFC 7235: the header value is
+ * `<scheme> <credentials>`, so an optional leading `Bearer ` prefix is
+ * stripped. This keeps the reader HTTP-standard-compliant and lets route
+ * bindings interoperate with any client that sends `Authorization: Bearer
+ * <token>`
+ */
+function stripBearerPrefix(value) {
+    return value.trim().replace(/^Bearer\s+/i, '');
+}
+//# sourceMappingURL=credential.js.map

package/dist/routed/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../routed/credential.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,MAAwB;IACnE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAChC,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAA;QACzB,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,GAAY,EAAE,MAA8B;IAC9D,QAAQ,MAAM,CAAC,EAAE,EAAE,CAAC;QAClB,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,EAAE,CAAA;YACjE,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAA;QAC/B,CAAC;QACD,KAAK,OAAO;YACV,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,CAAA;QAC7E,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACxC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAA;YACtC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;YACtD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;gBAC9B,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI;oBAAE,OAAO,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;YAC3D,CAAC;YACD,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;AAChD,CAAC"}

package/dist/routed/handler.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Route binding HTTP handler — native HTTP shape (REST-like).
+ *
+ * One handler per mounted route. Decodes params from the request, dispatches
+ * via the kernel API, encodes the response per output mode:
+ *   - value  → JSON body, HTTP status from error code table on error
+ *   - stream → SSE with one event per yielded chunk (raw, NOT kernel envelope)
+ *   - binary → raw bytes with BinaryResult contentType + status
+ *
+ * Errors use the kernel envelope's `{ error: { code, message, data? } }` shape
+ * for consistency with kernel HTTP. The HTTP status comes from the error code
+ * table (`kernelErrorHttpStatus`).
+ */
+import type { KernelAPI, RouteBinding } from '@astrale-os/kernel-api';
+import type { AuthPolicy } from '@astrale-os/kernel-api/routed';
+import type { CorsConfig } from '../cors';
+export type RouteHandlerConfig = {
+    /** The full kernel method name to dispatch (e.g. `Task.read`). */
+    method: string;
+    route: RouteBinding;
+    kernel: KernelAPI;
+    cors: CorsConfig;
+    /**
+     * Optional host placeholder extractor — returned values are merged into
+     * params at the lowest priority (host < path < query < header < body).
+     * Return null to reject the request with 404.
+     */
+    hostParams?: (req: Request) => Record<string, string> | null;
+    /** Authentication policy from the method definition. Defaults to `'required'`. */
+    auth?: AuthPolicy;
+};
+/**
+ * Build a Hono-compatible handler for a single route binding.
+ */
+export declare function createRouteHandler(config: RouteHandlerConfig): (req: Request, pathParams: Record<string, string>) => Promise<Response>;
+//# sourceMappingURL=handler.d.ts.map

package/dist/routed/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../routed/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAiC,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACpG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAA;AAU/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AA0BzC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,YAAY,CAAA;IACnB,MAAM,EAAE,SAAS,CAAA;IACjB,IAAI,EAAE,UAAU,CAAA;IAChB;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;IAC5D,kFAAkF;IAClF,IAAI,CAAC,EAAE,UAAU,CAAA;CAClB,CAAA;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,kBAAkB,GACzB,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAuGzE"}

package/dist/routed/handler.js

@@ -0,0 +1,119 @@
+/**
+ * Route binding HTTP handler — native HTTP shape (REST-like).
+ *
+ * One handler per mounted route. Decodes params from the request, dispatches
+ * via the kernel API, encodes the response per output mode:
+ *   - value  → JSON body, HTTP status from error code table on error
+ *   - stream → SSE with one event per yielded chunk (raw, NOT kernel envelope)
+ *   - binary → raw bytes with BinaryResult contentType + status
+ *
+ * Errors use the kernel envelope's `{ error: { code, message, data? } }` shape
+ * for consistency with kernel HTTP. The HTTP status comes from the error code
+ * table (`kernelErrorHttpStatus`).
+ */
+import { KERNEL_ERROR_CODES, dispatch, isBinaryResult, jsonCodec, kernelErrorHttpStatus, } from '@astrale-os/kernel-api';
+import { buildCorsHeaders } from '../cors';
+import { buildBinaryResponse, toBody } from '../render';
+import { readCredential } from './credential';
+import { decodeRouteRequest } from './params';
+import { buildRouteStreamResponse } from './stream';
+// ─── Helpers ────────────────────────────────────────────────────────────────
+function errorResponse(error, corsHeaders) {
+    const status = kernelErrorHttpStatus(error.code);
+    const body = jsonCodec.encode({
+        error: error.data === undefined
+            ? { code: error.code, message: error.message }
+            : { code: error.code, message: error.message, data: error.data },
+    });
+    return new Response(toBody(body), {
+        status,
+        headers: { ...corsHeaders, 'content-type': 'application/json' },
+    });
+}
+/**
+ * Build a Hono-compatible handler for a single route binding.
+ */
+export function createRouteHandler(config) {
+    const corsHeaders = buildCorsHeaders(config.cors);
+    const hostParamsFn = config.hostParams;
+    return async (req, pathParams) => {
+        if (req.method === 'OPTIONS') {
+            return new Response(null, { status: 204, headers: corsHeaders });
+        }
+        // 0. Host params (lowest priority).
+        let hostParams = {};
+        if (hostParamsFn) {
+            const extracted = hostParamsFn(req);
+            if (extracted === null) {
+                return new Response('Host not recognised', { status: 404, headers: corsHeaders });
+            }
+            hostParams = extracted;
+        }
+        // 1. Decode params + self
+        let decoded;
+        try {
+            decoded = await decodeRouteRequest({
+                route: config.route,
+                pathParams,
+                hostParams,
+                request: req,
+            });
+        }
+        catch (err) {
+            return errorResponse({
+                code: KERNEL_ERROR_CODES.PARSE_ERROR,
+                message: err instanceof Error ? err.message : 'Parse error',
+            }, corsHeaders);
+        }
+        const params = decoded.params;
+        // 1b. Inject actual HTTP method for wildcard routes.
+        if (config.route.method === '*') {
+            params._method = req.method;
+        }
+        // 2. Resolve credential.
+        //    Configurable via route.credential. Defaults to Authorization header.
+        const credSource = config.route.credential ?? { in: 'header', name: 'authorization' };
+        const credential = readCredential(req, credSource);
+        // 3. Stream detection (Accept header opt-in)
+        const isStream = req.headers.get('accept')?.includes('text/event-stream') === true;
+        // 4. Dispatch
+        const requestId = crypto.randomUUID();
+        const result = await dispatch(config.method, params, credential, config.kernel, { id: requestId, isStream }, decoded.self);
+        // 5. Render
+        switch (result.kind) {
+            case 'ack':
+                return new Response(null, { status: 204, headers: corsHeaders });
+            case 'success': {
+                if (isBinaryResult(result.data)) {
+                    return buildBinaryResponse(result.data, corsHeaders);
+                }
+                const body = jsonCodec.encode(result.data);
+                return new Response(toBody(body), {
+                    status: 200,
+                    headers: { ...corsHeaders, 'content-type': 'application/json' },
+                });
+            }
+            case 'error':
+                return errorResponse(result.error, corsHeaders);
+            case 'redirect': {
+                const body = jsonCodec.encode({ redirect: result.redirection });
+                return new Response(toBody(body), {
+                    status: 307,
+                    headers: {
+                        ...corsHeaders,
+                        'content-type': 'application/json',
+                        location: result.redirection.url,
+                    },
+                });
+            }
+            case 'stream': {
+                const streamResult = await buildRouteStreamResponse(result.generator, corsHeaders);
+                if (streamResult.kind === 'error') {
+                    return errorResponse(streamResult.error, corsHeaders);
+                }
+                return streamResult.response;
+            }
+        }
+    };
+}
+//# sourceMappingURL=handler.js.map

package/dist/routed/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../routed/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,EACL,kBAAkB,EAClB,QAAQ,EACR,cAAc,EACd,SAAS,EACT,qBAAqB,GACtB,MAAM,wBAAwB,CAAA;AAI/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAA;AAEnD,+EAA+E;AAE/E,SAAS,aAAa,CAAC,KAAyB,EAAE,WAAmC;IACnF,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAChD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC;QAC5B,KAAK,EACH,KAAK,CAAC,IAAI,KAAK,SAAS;YACtB,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;YAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;KACrE,CAAC,CAAA;IACF,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QAChC,MAAM;QACN,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChE,CAAC,CAAA;AACJ,CAAC;AAoBD;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0B;IAE1B,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACjD,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAA;IAEtC,OAAO,KAAK,EAAE,GAAY,EAAE,UAAkC,EAAE,EAAE;QAChE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAClE,CAAC;QAED,oCAAoC;QACpC,IAAI,UAAU,GAA2B,EAAE,CAAA;QAC3C,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,IAAI,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;YACnF,CAAC;YACD,UAAU,GAAG,SAAS,CAAA;QACxB,CAAC;QAED,0BAA0B;QAC1B,IAAI,OAA2D,CAAA;QAC/D,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,kBAAkB,CAAC;gBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU;gBACV,UAAU;gBACV,OAAO,EAAE,GAAG;aACb,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,aAAa,CAClB;gBACE,IAAI,EAAE,kBAAkB,CAAC,WAAW;gBACpC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa;aAC5D,EACD,WAAW,CACZ,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;QAE7B,qDAAqD;QACrD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAChC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,MAAM,CAAA;QAC7B,CAAC;QAED,yBAAyB;QACzB,0EAA0E;QAC1E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,EAAE,QAAiB,EAAE,IAAI,EAAE,eAAe,EAAE,CAAA;QAC9F,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;QAElD,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,mBAAmB,CAAC,KAAK,IAAI,CAAA;QAElF,cAAc;QACd,MAAM,SAAS,GAAc,MAAM,CAAC,UAAU,EAAE,CAAA;QAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B,MAAM,CAAC,MAAM,EACb,MAAM,EACN,UAAU,EACV,MAAM,CAAC,MAAM,EACb,EAAE,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAC3B,OAAO,CAAC,IAAI,CACb,CAAA;QAED,YAAY;QACZ,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,KAAK;gBACR,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;YAElE,KAAK,SAAS,EAAE,CAAC;gBACf,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;gBACtD,CAAC;gBACD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBAC1C,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;oBAChC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChE,CAAC,CAAA;YACJ,CAAC;YAED,KAAK,OAAO;gBACV,OAAO,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;YAEjD,KAAK,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAA;gBAC/D,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;oBAChC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,GAAG,WAAW;wBACd,cAAc,EAAE,kBAAkB;wBAClC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG;qBACjC;iBACF,CAAC,CAAA;YACJ,CAAC;YAED,KAAK,QAAQ,EAAE,CAAC;gBACd,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;gBAClF,IAAI,YAAY,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAClC,OAAO,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;gBACvD,CAAC;gBACD,OAAO,YAAY,CAAC,QAAQ,CAAA;YAC9B,CAAC;QACH,CAAC;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/routed/index.d.ts

@@ -0,0 +1,5 @@
+export { createRouteHandler, type RouteHandlerConfig } from './handler';
+export { decodeRouteRequest, type DecodedRouteParams, type DecodeRouteInput } from './params';
+export { readCredential } from './credential';
+export { buildRouteStreamResponse, type StreamResponseResult } from './stream';
+//# sourceMappingURL=index.d.ts.map

package/dist/routed/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../routed/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACvE,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,wBAAwB,EAAE,KAAK,oBAAoB,EAAE,MAAM,UAAU,CAAA"}

package/dist/routed/index.js

@@ -0,0 +1,5 @@
+export { createRouteHandler } from './handler';
+export { decodeRouteRequest } from './params';
+export { readCredential } from './credential';
+export { buildRouteStreamResponse } from './stream';
+//# sourceMappingURL=index.js.map

package/dist/routed/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../routed/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA2B,MAAM,WAAW,CAAA;AACvE,OAAO,EAAE,kBAAkB,EAAkD,MAAM,UAAU,CAAA;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,wBAAwB,EAA6B,MAAM,UAAU,CAAA"}

package/dist/routed/params.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Route binding parameter decoder.
+ *
+ * Extracts params from all sources (host, path, query, header, body) per
+ * spec §3. Merge order: host < path < query < header < body — later wins.
+ * `route.self`, if set, is lifted to a separate top-level `self` channel
+ * AND removed from `params` — handlers read it via the `self` sibling in
+ * their execute context (`self.path.raw`), never from `params`. Leaving
+ * a copy in `params` would trip strict Zod validation of `inputSchema`
+ * (`route-self.ts` explicitly allows the placeholder to be absent from
+ * the schema, so the runtime must not smuggle it through anyway).
+ *
+ * Body modes:
+ *   - `'*'`     parse JSON body, merge top-level fields into params.
+ *   - `'raw'`   skip parsing; raw bytes at `params._body`.
+ *   - `Record`  parse JSON, pick mapped fields with wire-name remapping.
+ */
+import type { RouteBinding } from '@astrale-os/kernel-api';
+export type DecodedRouteParams = Record<string, unknown>;
+export type DecodedRoute = {
+    params: DecodedRouteParams;
+    /** Lifted from the placeholder declared by `route.self`. Sibling of params. */
+    self?: string;
+};
+export type DecodeRouteInput = {
+    route: RouteBinding;
+    /** Pre-extracted path params (from path matcher). */
+    pathParams: Record<string, string>;
+    /** Pre-extracted host params (from server-side host matcher). May be empty. */
+    hostParams?: Record<string, string>;
+    /** The raw request. */
+    request: Request;
+};
+/**
+ * Decode params from a route + request.
+ *
+ * Throws on body parse errors — the caller should map to PARSE_ERROR.
+ */
+export declare function decodeRouteRequest(input: DecodeRouteInput): Promise<DecodedRoute>;
+//# sourceMappingURL=params.d.ts.map

package/dist/routed/params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../routed/params.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAY,YAAY,EAAE,MAAM,wBAAwB,CAAA;AASpE,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAExD,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,kBAAkB,CAAA;IAC1B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,KAAK,EAAE,YAAY,CAAA;IACnB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACnC,uBAAuB;IACvB,OAAO,EAAE,OAAO,CAAA;CACjB,CAAA;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAqGvF"}