@astrale-os/kernel-server 0.4.16 → 0.5.0-beta.1

package/dist/capture.d.ts

@@ -0,0 +1,3 @@
+/** Capture one receiver-bound method while preserving the capability's exact method type. */
+export declare function captureMethod<Receiver extends object, Name extends keyof Receiver>(input: Receiver, name: Name, invalidMessage: string): Receiver[Name];
+//# sourceMappingURL=capture.d.ts.map

package/dist/capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.d.ts","sourceRoot":"","sources":["../capture.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,QAAQ,SAAS,MAAM,EAAE,IAAI,SAAS,MAAM,QAAQ,EAChF,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,IAAI,EACV,cAAc,EAAE,MAAM,GACrB,QAAQ,CAAC,IAAI,CAAC,CAKhB"}

package/dist/capture.js

@@ -0,0 +1,10 @@
+/** Capture one receiver-bound method while preserving the capability's exact method type. */
+export function captureMethod(input, name, invalidMessage) {
+    if (input === null || typeof input !== 'object')
+        throw new TypeError(invalidMessage);
+    const method = input[name];
+    if (typeof method !== 'function')
+        throw new TypeError(invalidMessage);
+    return method.bind(input);
+}
+//# sourceMappingURL=capture.js.map

package/dist/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../capture.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,MAAM,UAAU,aAAa,CAC3B,KAAe,EACf,IAAU,EACV,cAAsB;IAEtB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,cAAc,CAAC,CAAA;IACpF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,cAAc,CAAC,CAAA;IACrE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAmB,CAAA;AAC7C,CAAC"}

package/dist/cors/cors.d.ts

@@ -0,0 +1,22 @@
+/** Request-aware CORS admission shared by every Server-owned HTTP surface. */
+import type { CorsConfig } from './types.js';
+export interface CorsRoute {
+    /** Methods that can actually select this route; OPTIONS is added by the policy. */
+    readonly methods: readonly string[];
+    /** Request headers owned by this route, in addition to the CORS safelist. */
+    readonly headers?: readonly string[];
+    /** A declared wildcard-header mapping may receive other caller-selected headers. */
+    readonly allowAnyHeaders?: boolean;
+}
+export interface CorsPolicy {
+    readonly enabled: boolean;
+    /** Apply the configured browser-origin rule without treating WebSocket as CORS. */
+    allowsBrowserOrigin(request: Request): boolean;
+    /** Headers for one ordinary response. Exposed names are additive and canonicalized. */
+    response(request: Request, exposedHeaders?: readonly string[]): Readonly<Record<string, string>>;
+    /** Validate and answer one route-aware browser preflight without semantic dispatch. */
+    preflight(request: Request, route: CorsRoute | undefined): Response;
+}
+/** Admit one immutable policy. `false` delegates the complete concern to an outer application. */
+export declare function prepareCors(input: CorsConfig | false | undefined): CorsPolicy;
+//# sourceMappingURL=cors.d.ts.map

package/dist/cors/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../cors/cors.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAI5C,MAAM,WAAW,SAAS;IACxB,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,oFAAoF;IACpF,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CACnC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,mFAAmF;IACnF,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAA;IAC9C,uFAAuF;IACvF,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAChG,uFAAuF;IACvF,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAA;CACpE;AAED,kGAAkG;AAClG,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,GAAG,UAAU,CA+E7E"}

package/dist/cors/cors.js

@@ -0,0 +1,136 @@
+/** Request-aware CORS admission shared by every Server-owned HTTP surface. */
+const TOKEN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u;
+/** Admit one immutable policy. `false` delegates the complete concern to an outer application. */
+export function prepareCors(input) {
+    if (input === false)
+        return DISABLED;
+    const config = input ?? { origin: '*' };
+    const origin = admitHeaderValue(config.origin, 'CORS origin');
+    const methods = config.methods === undefined ? undefined : methodSet(config.methods, 'CORS method');
+    const headers = config.headers === undefined ? undefined : tokenSet(config.headers, 'CORS header');
+    const exposedHeaders = tokenSet(config.exposedHeaders ?? [], 'CORS exposed header');
+    const credentials = config.credentials === true;
+    if (credentials && origin === '*') {
+        throw new TypeError('Credentialed CORS requires one explicit origin.');
+    }
+    const response = (request, dynamicExposed = []) => {
+        const requestOrigin = request.headers.get('origin');
+        if (requestOrigin !== null && origin !== '*' && requestOrigin !== origin)
+            return Object.freeze({});
+        const output = {
+            'access-control-allow-origin': origin,
+        };
+        if (credentials)
+            output['access-control-allow-credentials'] = 'true';
+        const exposed = new Set(exposedHeaders);
+        for (const name of dynamicExposed)
+            exposed.add(admitToken(name, 'CORS exposed header').toLowerCase());
+        if (exposed.size > 0)
+            output['access-control-expose-headers'] = [...exposed].join(', ');
+        if (origin !== '*')
+            output.vary = 'origin';
+        return Object.freeze(output);
+    };
+    return Object.freeze({
+        enabled: true,
+        allowsBrowserOrigin(request) {
+            const requestOrigin = request.headers.get('origin');
+            return requestOrigin === null || origin === '*' || requestOrigin === origin;
+        },
+        response,
+        preflight(request, route) {
+            const requestOrigin = request.headers.get('origin');
+            const requestedMethod = request.headers.get('access-control-request-method')?.toUpperCase();
+            if (requestOrigin === null || requestedMethod === undefined) {
+                return new Response(null, { status: 400, headers: response(request) });
+            }
+            if (origin !== '*' && requestOrigin !== origin)
+                return new Response(null, { status: 403 });
+            if (route === undefined) {
+                return new Response(null, { status: 404, headers: response(request) });
+            }
+            const routeMethods = methodSet(route.methods, 'CORS route method');
+            const methodAllowed = routeMethods.has(requestedMethod) && (methods?.has(requestedMethod) ?? true);
+            if (!methodAllowed) {
+                return new Response(null, { status: 405, headers: response(request) });
+            }
+            const requestedHeaders = parseRequestedHeaders(request.headers.get('access-control-request-headers'));
+            const routeHeaders = tokenSet(route.headers ?? [], 'CORS route header');
+            const headerAllowed = (name) => (route.allowAnyHeaders === true || routeHeaders.has(name)) && (headers?.has(name) ?? true);
+            if (requestedHeaders.some((name) => !headerAllowed(name))) {
+                return new Response(null, { status: 403, headers: response(request) });
+            }
+            const allowedMethods = [...routeMethods].filter((method) => methods?.has(method) ?? true);
+            const allowedHeaders = requestedHeaders.length > 0 ? requestedHeaders : [...routeHeaders];
+            const output = new Headers(response(request));
+            output.set('access-control-allow-methods', [...allowedMethods, 'OPTIONS'].join(', '));
+            if (allowedHeaders.length > 0) {
+                output.set('access-control-allow-headers', allowedHeaders.join(', '));
+            }
+            appendVary(output, 'access-control-request-method');
+            appendVary(output, 'access-control-request-headers');
+            return new Response(null, { status: 204, headers: output });
+        },
+    });
+}
+const DISABLED = Object.freeze({
+    enabled: false,
+    allowsBrowserOrigin: () => true,
+    response: () => Object.freeze({}),
+    preflight: () => new Response(null, { status: 405 }),
+});
+function parseRequestedHeaders(input) {
+    if (input === null || input.trim() === '')
+        return [];
+    const output = [];
+    const seen = new Set();
+    for (const raw of input.split(',')) {
+        const name = admitToken(raw.trim(), 'CORS requested header').toLowerCase();
+        if (!seen.has(name)) {
+            seen.add(name);
+            output.push(name);
+        }
+    }
+    return output;
+}
+function tokenSet(input, label) {
+    const output = new Set();
+    for (const value of input)
+        output.add(admitToken(value, label).toLowerCase());
+    return output;
+}
+function methodSet(input, label) {
+    const output = new Set();
+    for (const value of input)
+        output.add(admitToken(value, label).toUpperCase());
+    return output;
+}
+function admitHeaderValue(input, label) {
+    if (typeof input !== 'string' || input.length === 0 || hasControlCharacter(input)) {
+        throw new TypeError(`${label} must be a non-empty control-free string.`);
+    }
+    return input;
+}
+function hasControlCharacter(input) {
+    for (let index = 0; index < input.length; index += 1) {
+        const code = input.charCodeAt(index);
+        if (code <= 0x1f || code === 0x7f)
+            return true;
+    }
+    return false;
+}
+function admitToken(input, label) {
+    if (typeof input !== 'string' || !TOKEN.test(input))
+        throw new TypeError(`${label} must be an HTTP token.`);
+    return input;
+}
+function appendVary(headers, value) {
+    const current = headers.get('vary');
+    const names = new Set(current
+        ?.split(',')
+        .map((name) => name.trim().toLowerCase())
+        .filter(Boolean) ?? []);
+    names.add(value);
+    headers.set('vary', [...names].join(', '));
+}
+//# sourceMappingURL=cors.js.map

package/dist/cors/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../cors/cors.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAI9E,MAAM,KAAK,GAAG,gCAAgC,CAAA;AAqB9C,kGAAkG;AAClG,MAAM,UAAU,WAAW,CAAC,KAAqC;IAC/D,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAA;IACpC,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC7D,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IACrF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAClG,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,EAAE,qBAAqB,CAAC,CAAA;IACnF,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,IAAI,CAAA;IAC/C,IAAI,WAAW,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAA;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,CACf,OAAgB,EAChB,cAAc,GAAsB,EAAE,EACJ,EAAE;QACpC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACnD,IAAI,aAAa,KAAK,IAAI,IAAI,MAAM,KAAK,GAAG,IAAI,aAAa,KAAK,MAAM;YACtE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1B,MAAM,MAAM,GAA2B;YACrC,6BAA6B,EAAE,MAAM;SACtC,CAAA;QACD,IAAI,WAAW;YAAE,MAAM,CAAC,kCAAkC,CAAC,GAAG,MAAM,CAAA;QACpE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAA;QACvC,KAAK,MAAM,IAAI,IAAI,cAAc;YAC/B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;QACpE,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC;YAAE,MAAM,CAAC,+BAA+B,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvF,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAA;QAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC9B,CAAC,CAAA;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,IAAI;QACb,mBAAmB,CAAC,OAAgB;YAClC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACnD,OAAO,aAAa,KAAK,IAAI,IAAI,MAAM,KAAK,GAAG,IAAI,aAAa,KAAK,MAAM,CAAA;QAC7E,CAAC;QACD,QAAQ;QACR,SAAS,CAAC,OAAgB,EAAE,KAA4B;YACtD,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;YACnD,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE,WAAW,EAAE,CAAA;YAC3F,IAAI,aAAa,KAAK,IAAI,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC5D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACxE,CAAC;YACD,IAAI,MAAM,KAAK,GAAG,IAAI,aAAa,KAAK,MAAM;gBAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACxE,CAAC;YAED,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;YAClE,MAAM,aAAa,GACjB,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,CAAA;YAC9E,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACxE,CAAC;YAED,MAAM,gBAAgB,GAAG,qBAAqB,CAC5C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CACtD,CAAA;YACD,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAA;YACvE,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CACrC,CAAC,KAAK,CAAC,eAAe,KAAK,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAA;YAC5F,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC1D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACxE,CAAC;YAED,MAAM,cAAc,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAA;YACzF,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAA;YACzF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;YAC7C,MAAM,CAAC,GAAG,CAAC,8BAA8B,EAAE,CAAC,GAAG,cAAc,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YACrF,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,CAAC,8BAA8B,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YACvE,CAAC;YACD,UAAU,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAA;YACnD,UAAU,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAA;YACpD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;QAC7D,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,QAAQ,GAAe,MAAM,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,KAAK;IACd,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI;IAC/B,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACjC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;CACrD,CAAC,CAAA;AAEF,SAAS,qBAAqB,CAAC,KAAoB;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAA;IACpD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,uBAAuB,CAAC,CAAC,WAAW,EAAE,CAAA;QAC1E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACd,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACnB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB,EAAE,KAAa;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;IAC7E,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAwB,EAAE,KAAa;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;IAC7E,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAA;IAC1E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;IAChD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACjD,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAA;IACxD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,KAAa;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,OAAO;QACL,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SACxC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CACzB,CAAA;IACD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAChB,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;AAC5C,CAAC"}

package/dist/cors/index.d.ts

@@ -0,0 +1,3 @@
+export { prepareCors, type CorsPolicy, type CorsRoute } from './cors.js';
+export type { CorsConfig } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/cors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../cors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,WAAW,CAAA;AACxE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA"}

package/dist/cors/index.js

@@ -0,0 +1,2 @@
+export { prepareCors } from './cors.js';
+//# sourceMappingURL=index.js.map

package/dist/cors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../cors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAmC,MAAM,WAAW,CAAA"}

package/dist/cors/types.d.ts

@@ -0,0 +1,12 @@
+export interface CorsConfig {
+    readonly origin: string;
+    /** Optional global preflight ceiling; actual responses are narrowed to the matched route. */
+    readonly methods?: readonly string[];
+    /** Optional global preflight ceiling; route-owned request headers are still matched exactly. */
+    readonly headers?: readonly string[];
+    /** Additional response headers that browser JavaScript may observe. */
+    readonly exposedHeaders?: readonly string[];
+    /** Emit Access-Control-Allow-Credentials; requires one explicit origin rather than `*`. */
+    readonly credentials?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cors/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../cors/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,gGAAgG;IAChG,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,uEAAuE;IACvE,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C,2FAA2F;IAC3F,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAC/B"}

package/dist/cors/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/cors/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../cors/types.ts"],"names":[],"mappings":""}

package/dist/errors/availability.d.ts

@@ -0,0 +1,11 @@
+/** Expected loss of the external capability used to create an installation. */
+export declare class InstallationUnavailableError extends Error {
+    readonly name = "InstallationUnavailableError";
+    constructor(message?: string, options?: ErrorOptions);
+}
+/** Expected loss of the external capability used to load public issuer keys. */
+export declare class IssuerKeysUnavailableError extends Error {
+    readonly name = "IssuerKeysUnavailableError";
+    constructor(message?: string, options?: ErrorOptions);
+}
+//# sourceMappingURL=availability.d.ts.map

package/dist/errors/availability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"availability.d.ts","sourceRoot":"","sources":["../../errors/availability.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,SAAkB,IAAI,kCAAiC;IAEvD,YAAY,OAAO,SAAiC,EAAE,OAAO,CAAC,EAAE,YAAY,EAE3E;CACF;AAED,gFAAgF;AAChF,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,SAAkB,IAAI,gCAA+B;IAErD,YAAY,OAAO,SAAiC,EAAE,OAAO,CAAC,EAAE,YAAY,EAE3E;CACF"}

package/dist/errors/availability.js

@@ -0,0 +1,15 @@
+/** Expected loss of the external capability used to create an installation. */
+export class InstallationUnavailableError extends Error {
+    name = 'InstallationUnavailableError';
+    constructor(message = 'Installation is unavailable.', options) {
+        super(message, options);
+    }
+}
+/** Expected loss of the external capability used to load public issuer keys. */
+export class IssuerKeysUnavailableError extends Error {
+    name = 'IssuerKeysUnavailableError';
+    constructor(message = 'Issuer keys are unavailable.', options) {
+        super(message, options);
+    }
+}
+//# sourceMappingURL=availability.js.map

package/dist/errors/availability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"availability.js","sourceRoot":"","sources":["../../errors/availability.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACnC,IAAI,GAAG,8BAA8B,CAAA;IAEvD,YAAY,OAAO,GAAG,8BAA8B,EAAE,OAAsB;QAC1E,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACzB,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACjC,IAAI,GAAG,4BAA4B,CAAA;IAErD,YAAY,OAAO,GAAG,8BAA8B,EAAE,OAAsB;QAC1E,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACzB,CAAC;CACF"}

package/dist/errors/classify.d.ts

@@ -0,0 +1,4 @@
+import { errors } from '@astrale-os/kernel-protocol';
+/** Convert only errors owned by an admitted protocol boundary into safe public data. */
+export declare function classifyError(input: unknown): errors.ErrorPayload;
+//# sourceMappingURL=classify.d.ts.map

package/dist/errors/classify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.d.ts","sourceRoot":"","sources":["../../errors/classify.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAKpD,wFAAwF;AACxF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,YAAY,CAmBjE"}

package/dist/errors/classify.js

@@ -0,0 +1,254 @@
+import { PathError } from '@astrale-os/kernel-core/path';
+import { AuthenticationError } from '@astrale-os/kernel-ports/authentication';
+import { AuthorizationError } from '@astrale-os/kernel-ports/authorization';
+import { EventError } from '@astrale-os/kernel-ports/events';
+import { FunctionError } from '@astrale-os/kernel-ports/functions';
+import { NetworkError } from '@astrale-os/kernel-ports/network';
+import { ObservabilityError } from '@astrale-os/kernel-ports/observability';
+import { SchemaError } from '@astrale-os/kernel-ports/schema';
+import { errors } from '@astrale-os/kernel-protocol';
+import { RequestBodyTooLargeError } from './request-body.js';
+import { ResponseBodyTooLargeError } from './response-body.js';
+/** Convert only errors owned by an admitted protocol boundary into safe public data. */
+export function classifyError(input) {
+    if (input instanceof errors.ProtocolError)
+        return input.payload;
+    if (input instanceof RequestBodyTooLargeError) {
+        return publicError('LIMIT_EXCEEDED', 'Request body exceeds the configured limit.');
+    }
+    if (input instanceof ResponseBodyTooLargeError) {
+        return publicError('LIMIT_EXCEEDED', 'Response body exceeds the configured limit.');
+    }
+    if (input instanceof PathError) {
+        return publicError('VALIDATION_ERROR', 'Target Path is invalid.');
+    }
+    if (input instanceof FunctionError)
+        return classifyFunction(input);
+    if (input instanceof AuthenticationError)
+        return classifyAuthentication(input);
+    if (input instanceof AuthorizationError)
+        return classifyAuthorization(input);
+    if (input instanceof SchemaError)
+        return classifySchema(input);
+    if (input instanceof EventError)
+        return classifyEvent(input);
+    if (input instanceof ObservabilityError)
+        return classifyObservability(input);
+    if (input instanceof NetworkError)
+        return classifyNetwork(input);
+    return internal(input);
+}
+function classifyFunction(input) {
+    const reason = errors.reasonOf(input.reason);
+    switch (input.code) {
+        case 'FUNCTION_INVOCATION_INVALID':
+            return publicError('VALIDATION_ERROR', 'Function invocation is invalid.', input.code);
+        case 'FUNCTION_INPUT_INVALID':
+            return publicError('VALIDATION_ERROR', reasonMessage(reason, 'Function input is invalid.'), reason ?? input.code);
+        case 'FUNCTION_CONFLICT':
+            return publicError('CONFLICT', reasonMessage(reason, 'Function execution conflicts with current state.'), reason ?? input.code);
+        case 'FUNCTION_UNAVAILABLE':
+            return publicError('METHOD_NOT_FOUND', 'Callable was not found.');
+        case 'FUNCTION_DENIED':
+            return publicError('ACCESS_DENIED', 'Access denied.', reason);
+        case 'FUNCTION_MISS':
+            return publicError('METHOD_NOT_FOUND', 'Callable is not served by this application.', input.code);
+        case 'FUNCTION_BINDING_UNAVAILABLE':
+            return publicError('BACKEND_UNAVAILABLE', 'Callable execution is unavailable.');
+        case 'FUNCTION_EXECUTION_LIMIT':
+            return publicError('LIMIT_EXCEEDED', 'Function execution limit exceeded.', reason ?? input.code);
+        case 'FUNCTION_CANCELLED':
+            return publicError('CANCELLED', 'Function invocation was cancelled.', reason ?? input.code);
+        case 'FUNCTION_DEADLINE_EXCEEDED':
+            return publicError('DEADLINE_EXCEEDED', 'Function invocation deadline exceeded.', reason ?? input.code);
+        case 'FUNCTION_OUTCOME_UNKNOWN':
+            return publicError('OUTCOME_UNKNOWN', 'Function outcome is unknown; do not retry automatically.', reason ?? input.code);
+        case 'FUNCTION_OUTPUT_INVALID':
+        case 'FUNCTION_BINDING_INVALID':
+        case 'FUNCTION_REDIRECT_INVALID':
+        case 'FUNCTION_RESULT_MISMATCH':
+        case 'RESULT_CONTRACT_VIOLATION':
+            return internal(input);
+        case 'FUNCTION_EXECUTION_FAILED':
+            return reason === undefined
+                ? internal(input)
+                : publicError('BACKEND_UNAVAILABLE', reasonMessage(reason, 'Function execution is unavailable.'), reason);
+    }
+}
+function classifyAuthentication(input) {
+    switch (input.code) {
+        case 'NO_AUTH':
+            return publicError('AUTH_MISSING', 'Authentication is required.');
+        case 'INVALID_CREDENTIAL':
+        case 'INVALID_GRANT':
+        case 'IDENTITY_NOT_FOUND':
+        case 'ISSUER_INVALID':
+        case 'ISSUER_NOT_FOUND':
+            return publicError('AUTH_INVALID', 'Credential is invalid.');
+        case 'GRANT_BROADENING':
+        case 'PROVISION_DENIED':
+            return publicError('ACCESS_DENIED', 'Access denied.');
+        case 'PROVISION_INVALID':
+            return publicError('VALIDATION_ERROR', 'Identity provision request is invalid.', input.code);
+        case 'IDENTITY_CONFLICT':
+        case 'PROVISION_CONFLICT':
+        case 'CONFIGURATION_REVISION_CONFLICT':
+            return publicError('CONFLICT', 'Authentication state changed.', input.code);
+        case 'PROVISION_OUTCOME_UNKNOWN':
+            return publicError('OUTCOME_UNKNOWN', 'Identity provision outcome is unknown; do not retry automatically.', input.code);
+        case 'MINT_FAILED':
+        case 'AUTHENTICATION_BACKEND_FAILED':
+            return publicError('BACKEND_UNAVAILABLE', 'Authentication is unavailable.');
+    }
+}
+function classifyAuthorization(input) {
+    switch (input.code) {
+        case 'POLICY_NOT_FOUND':
+        case 'CAPABILITY_TARGET_INVALID':
+            return publicError('NOT_FOUND', 'Requested resource was not found.');
+        case 'POLICY_COMPILATION_FAILED':
+            return internal(input);
+        case 'POLICY_SNAPSHOT_MISMATCH':
+            return publicError('CONFLICT', 'Authorization basis changed.', input.code);
+        case 'POLICY_PLAN_TOO_COMPLEX':
+            return publicError('LIMIT_EXCEEDED', 'Authorization plan limit exceeded.', input.code);
+        case 'POLICY_EVALUATION_TIMEOUT':
+            return publicError('DEADLINE_EXCEEDED', 'Authorization evaluation deadline exceeded.', input.code);
+        case 'POLICY_BACKEND_ERROR':
+            return publicError('BACKEND_UNAVAILABLE', 'Authorization is unavailable.');
+        case 'AUTHORITY_DENIED':
+            return publicError('ACCESS_DENIED', 'Access denied.');
+        case 'RESULT_CONTRACT_VIOLATION':
+            return internal(input);
+    }
+}
+function classifySchema(input) {
+    if (input.outcome === 'unknown') {
+        return publicError('OUTCOME_UNKNOWN', 'Schema activation outcome is unknown; do not retry automatically.', input.code);
+    }
+    switch (input.code) {
+        case 'SCHEMA_NOT_FOUND':
+            return publicError('NOT_FOUND', 'Domain was not found.', input.code);
+        case 'SCHEMA_ARTIFACT_INVALID':
+        case 'SCHEMA_DEPENDENCY_MISSING':
+            return publicError('VALIDATION_ERROR', 'Domain schema is invalid.', input.code);
+        case 'SCHEMA_REVISION_CONFLICT':
+            return publicError('CONFLICT', 'Domain revision conflicts with current state.', input.code);
+        case 'SCHEMA_DEPENDENTS_PRESENT':
+            return publicError('CONFLICT', 'Domain has active dependents.', input.code);
+        case 'DATA_MIGRATION_REQUIRED':
+            return publicError('CONFLICT', 'Schema change requires an explicit data migration.', input.code);
+        case 'BACKEND_FEATURE_UNSUPPORTED':
+        case 'SCHEMA_UPGRADE_INCOMPATIBLE':
+            return publicError('UNSUPPORTED', 'Schema operation is not supported.', input.code);
+        case 'SCHEMA_BACKEND_FAILED':
+        case 'SCHEMA_ACTIVATION_FAILED':
+            return publicError('BACKEND_UNAVAILABLE', 'Schema backend is unavailable.', input.code);
+        case 'SCHEMA_INTEGRITY_ERROR':
+            return internal(input);
+    }
+}
+function classifyEvent(input) {
+    switch (input.code) {
+        case 'EVENT_INVALID':
+            return publicError('VALIDATION_ERROR', 'Event request is invalid.', input.code);
+        case 'EVENT_RETENTION_GAP':
+            return publicError('CONFLICT', 'Event retention frontier is no longer available.', input.code);
+        case 'SUBSCRIPTION_UNAVAILABLE':
+            return publicError('CONFLICT', 'Event subscription is unavailable.', input.code);
+        case 'EVENT_BACKEND_FAILED':
+            return publicError('BACKEND_UNAVAILABLE', 'Event transport is unavailable.');
+    }
+}
+function classifyObservability(input) {
+    switch (input.code) {
+        case 'OBSERVABILITY_INVALID':
+            return publicError('VALIDATION_ERROR', 'Journal request is invalid.', input.code);
+        case 'OBSERVABILITY_RETENTION_GAP':
+            return publicError('CONFLICT', 'Journal retention frontier is no longer available.', input.code);
+        case 'OBSERVABILITY_DURABILITY_FAILED':
+        case 'OBSERVABILITY_BACKEND_FAILED':
+            return publicError('BACKEND_UNAVAILABLE', 'Journal is unavailable.');
+    }
+}
+function classifyNetwork(input) {
+    switch (input.code) {
+        case 'NETWORK_INVALID':
+        case 'INVALID_URL':
+            return publicError('VALIDATION_ERROR', 'Network request is invalid.', input.code);
+        case 'UNSUPPORTED_PROTOCOL':
+        case 'UNSUPPORTED_FEATURE':
+            return publicError('UNSUPPORTED', 'Network operation is not supported.', input.code);
+        case 'HOST_POLICY_DENIED':
+            return publicError('ACCESS_DENIED', 'Network target is denied.');
+        case 'TIMEOUT':
+            return publicError('DEADLINE_EXCEEDED', 'Network operation deadline exceeded.', input.code);
+        case 'ABORTED':
+            return publicError('CANCELLED', 'Network operation was cancelled.', input.code);
+        case 'TOO_MANY_REDIRECTS':
+        case 'REQUEST_TOO_LARGE':
+        case 'RESPONSE_BODY_TOO_LARGE':
+            return publicError('LIMIT_EXCEEDED', 'Network operation limit exceeded.', input.code);
+        case 'NETWORK_BACKEND_CONTRACT':
+            return internal(input);
+        case 'DNS_ERROR':
+        case 'CONNECT_ERROR':
+        case 'TLS_ERROR':
+        case 'NETWORK_ERROR':
+            return publicError('BACKEND_UNAVAILABLE', 'Network transport is unavailable.');
+    }
+}
+function publicError(name, message, reason) {
+    const candidate = typeof reason === 'string'
+        ? Object.freeze({ code: reason, details: Object.freeze({}) })
+        : reason;
+    const admitted = errors.reasonOf(candidate);
+    return {
+        code: errors.CODES[name],
+        message,
+        ...(admitted === undefined ? {} : { data: admitted }),
+    };
+}
+function reasonMessage(reason, fallback) {
+    switch (reason?.code) {
+        case 'SCHEMA_NOT_FOUND':
+            return 'Domain was not found.';
+        case 'SCHEMA_ARTIFACT_INVALID':
+        case 'SCHEMA_DEPENDENCY_MISSING':
+            return 'Domain schema is invalid.';
+        case 'SCHEMA_REVISION_CONFLICT':
+            return 'Domain revision conflicts with current state.';
+        case 'SCHEMA_DEPENDENTS_PRESENT':
+            return 'Domain has active dependents.';
+        case 'DATA_MIGRATION_REQUIRED':
+            return 'Schema change requires an explicit data migration.';
+        case 'BACKEND_FEATURE_UNSUPPORTED':
+        case 'SCHEMA_UPGRADE_INCOMPATIBLE':
+            return 'Schema operation is not supported.';
+        case 'SCHEMA_BACKEND_FAILED':
+        case 'SCHEMA_ACTIVATION_FAILED':
+            return 'Schema backend is unavailable.';
+        default:
+            return fallback;
+    }
+}
+function internal(input) {
+    reportInternal(input);
+    return publicError('INTERNAL_ERROR', 'Internal application error.');
+}
+function stableCode(input) {
+    if (input !== null && typeof input === 'object' && 'code' in input) {
+        return typeof input.code === 'string' ? input.code : undefined;
+    }
+    return undefined;
+}
+function reportInternal(input) {
+    const error = input instanceof Error ? input : undefined;
+    // Never print the message, cause, input, credentials, query, or backend command.
+    // oxlint-disable-next-line no-console
+    console.error('[server] Internal dispatch failure', {
+        type: error?.constructor.name ?? typeof input,
+        code: stableCode(input),
+    });
+}
+//# sourceMappingURL=classify.js.map

package/dist/errors/classify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify.js","sourceRoot":"","sources":["../../errors/classify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAE9D,wFAAwF;AACxF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,YAAY,MAAM,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC,OAAO,CAAA;IAC/D,IAAI,KAAK,YAAY,wBAAwB,EAAE,CAAC;QAC9C,OAAO,WAAW,CAAC,gBAAgB,EAAE,4CAA4C,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;QAC/C,OAAO,WAAW,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,OAAO,WAAW,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,KAAK,YAAY,aAAa;QAAE,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAA;IAClE,IAAI,KAAK,YAAY,mBAAmB;QAAE,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC9E,IAAI,KAAK,YAAY,kBAAkB;QAAE,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAC5E,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAA;IAC9D,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAA;IAC5D,IAAI,KAAK,YAAY,kBAAkB;QAAE,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAC5E,IAAI,KAAK,YAAY,YAAY;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;IAChE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAoB;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,6BAA6B;YAChC,OAAO,WAAW,CAAC,kBAAkB,EAAE,iCAAiC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACvF,KAAK,wBAAwB;YAC3B,OAAO,WAAW,CAChB,kBAAkB,EAClB,aAAa,CAAC,MAAM,EAAE,4BAA4B,CAAC,EACnD,MAAM,IAAI,KAAK,CAAC,IAAI,CACrB,CAAA;QACH,KAAK,mBAAmB;YACtB,OAAO,WAAW,CAChB,UAAU,EACV,aAAa,CAAC,MAAM,EAAE,kDAAkD,CAAC,EACzE,MAAM,IAAI,KAAK,CAAC,IAAI,CACrB,CAAA;QACH,KAAK,sBAAsB;YACzB,OAAO,WAAW,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAA;QACnE,KAAK,iBAAiB;YACpB,OAAO,WAAW,CAAC,eAAe,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAA;QAC/D,KAAK,eAAe;YAClB,OAAO,WAAW,CAChB,kBAAkB,EAClB,6CAA6C,EAC7C,KAAK,CAAC,IAAI,CACX,CAAA;QACH,KAAK,8BAA8B;YACjC,OAAO,WAAW,CAAC,qBAAqB,EAAE,oCAAoC,CAAC,CAAA;QACjF,KAAK,0BAA0B;YAC7B,OAAO,WAAW,CAChB,gBAAgB,EAChB,oCAAoC,EACpC,MAAM,IAAI,KAAK,CAAC,IAAI,CACrB,CAAA;QACH,KAAK,oBAAoB;YACvB,OAAO,WAAW,CAAC,WAAW,EAAE,oCAAoC,EAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7F,KAAK,4BAA4B;YAC/B,OAAO,WAAW,CAChB,mBAAmB,EACnB,wCAAwC,EACxC,MAAM,IAAI,KAAK,CAAC,IAAI,CACrB,CAAA;QACH,KAAK,0BAA0B;YAC7B,OAAO,WAAW,CAChB,iBAAiB,EACjB,0DAA0D,EAC1D,MAAM,IAAI,KAAK,CAAC,IAAI,CACrB,CAAA;QACH,KAAK,yBAAyB,CAAC;QAC/B,KAAK,0BAA0B,CAAC;QAChC,KAAK,2BAA2B,CAAC;QACjC,KAAK,0BAA0B,CAAC;QAChC,KAAK,2BAA2B;YAC9B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;QACxB,KAAK,2BAA2B;YAC9B,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACjB,CAAC,CAAC,WAAW,CACT,qBAAqB,EACrB,aAAa,CAAC,MAAM,EAAE,oCAAoC,CAAC,EAC3D,MAAM,CACP,CAAA;IACT,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA0B;IACxD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC,cAAc,EAAE,6BAA6B,CAAC,CAAA;QACnE,KAAK,oBAAoB,CAAC;QAC1B,KAAK,eAAe,CAAC;QACrB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,gBAAgB,CAAC;QACtB,KAAK,kBAAkB;YACrB,OAAO,WAAW,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAA;QAC9D,KAAK,kBAAkB,CAAC;QACxB,KAAK,kBAAkB;YACrB,OAAO,WAAW,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;QACvD,KAAK,mBAAmB;YACtB,OAAO,WAAW,CAAC,kBAAkB,EAAE,wCAAwC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9F,KAAK,mBAAmB,CAAC;QACzB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,iCAAiC;YACpC,OAAO,WAAW,CAAC,UAAU,EAAE,+BAA+B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7E,KAAK,2BAA2B;YAC9B,OAAO,WAAW,CAChB,iBAAiB,EACjB,oEAAoE,EACpE,KAAK,CAAC,IAAI,CACX,CAAA;QACH,KAAK,aAAa,CAAC;QACnB,KAAK,+BAA+B;YAClC,OAAO,WAAW,CAAC,qBAAqB,EAAE,gCAAgC,CAAC,CAAA;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAyB;IACtD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,kBAAkB,CAAC;QACxB,KAAK,2BAA2B;YAC9B,OAAO,WAAW,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAA;QACtE,KAAK,2BAA2B;YAC9B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;QACxB,KAAK,0BAA0B;YAC7B,OAAO,WAAW,CAAC,UAAU,EAAE,8BAA8B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5E,KAAK,yBAAyB;YAC5B,OAAO,WAAW,CAAC,gBAAgB,EAAE,oCAAoC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACxF,KAAK,2BAA2B;YAC9B,OAAO,WAAW,CAChB,mBAAmB,EACnB,6CAA6C,EAC7C,KAAK,CAAC,IAAI,CACX,CAAA;QACH,KAAK,sBAAsB;YACzB,OAAO,WAAW,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,CAAA;QAC5E,KAAK,kBAAkB;YACrB,OAAO,WAAW,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAA;QACvD,KAAK,2BAA2B;YAC9B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAkB;IACxC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,WAAW,CAChB,iBAAiB,EACjB,mEAAmE,EACnE,KAAK,CAAC,IAAI,CACX,CAAA;IACH,CAAC;IACD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,kBAAkB;YACrB,OAAO,WAAW,CAAC,WAAW,EAAE,uBAAuB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACtE,KAAK,yBAAyB,CAAC;QAC/B,KAAK,2BAA2B;YAC9B,OAAO,WAAW,CAAC,kBAAkB,EAAE,2BAA2B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACjF,KAAK,0BAA0B;YAC7B,OAAO,WAAW,CAAC,UAAU,EAAE,+CAA+C,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7F,KAAK,2BAA2B;YAC9B,OAAO,WAAW,CAAC,UAAU,EAAE,+BAA+B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7E,KAAK,yBAAyB;YAC5B,OAAO,WAAW,CAChB,UAAU,EACV,oDAAoD,EACpD,KAAK,CAAC,IAAI,CACX,CAAA;QACH,KAAK,6BAA6B,CAAC;QACnC,KAAK,6BAA6B;YAChC,OAAO,WAAW,CAAC,aAAa,EAAE,oCAAoC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACrF,KAAK,uBAAuB,CAAC;QAC7B,KAAK,0BAA0B;YAC7B,OAAO,WAAW,CAAC,qBAAqB,EAAE,gCAAgC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACzF,KAAK,wBAAwB;YAC3B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,eAAe;YAClB,OAAO,WAAW,CAAC,kBAAkB,EAAE,2BAA2B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACjF,KAAK,qBAAqB;YACxB,OAAO,WAAW,CAAC,UAAU,EAAE,kDAAkD,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAChG,KAAK,0BAA0B;YAC7B,OAAO,WAAW,CAAC,UAAU,EAAE,oCAAoC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAClF,KAAK,sBAAsB;YACzB,OAAO,WAAW,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAA;IAChF,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAyB;IACtD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,uBAAuB;YAC1B,OAAO,WAAW,CAAC,kBAAkB,EAAE,6BAA6B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACnF,KAAK,6BAA6B;YAChC,OAAO,WAAW,CAChB,UAAU,EACV,oDAAoD,EACpD,KAAK,CAAC,IAAI,CACX,CAAA;QACH,KAAK,iCAAiC,CAAC;QACvC,KAAK,8BAA8B;YACjC,OAAO,WAAW,CAAC,qBAAqB,EAAE,yBAAyB,CAAC,CAAA;IACxE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAmB;IAC1C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iBAAiB,CAAC;QACvB,KAAK,aAAa;YAChB,OAAO,WAAW,CAAC,kBAAkB,EAAE,6BAA6B,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACnF,KAAK,sBAAsB,CAAC;QAC5B,KAAK,qBAAqB;YACxB,OAAO,WAAW,CAAC,aAAa,EAAE,qCAAqC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACtF,KAAK,oBAAoB;YACvB,OAAO,WAAW,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAA;QAClE,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC,mBAAmB,EAAE,sCAAsC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7F,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC,WAAW,EAAE,kCAAkC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACjF,KAAK,oBAAoB,CAAC;QAC1B,KAAK,mBAAmB,CAAC;QACzB,KAAK,yBAAyB;YAC5B,OAAO,WAAW,CAAC,gBAAgB,EAAE,mCAAmC,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACvF,KAAK,0BAA0B;YAC7B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;QACxB,KAAK,WAAW,CAAC;QACjB,KAAK,eAAe,CAAC;QACrB,KAAK,WAAW,CAAC;QACjB,KAAK,eAAe;YAClB,OAAO,WAAW,CAAC,qBAAqB,EAAE,mCAAmC,CAAC,CAAA;IAClF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,IAA+B,EAC/B,OAAe,EACf,MAAoC;IAEpC,MAAM,SAAS,GACb,OAAO,MAAM,KAAK,QAAQ;QACxB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7D,CAAC,CAAC,MAAM,CAAA;IACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;IAC3C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QACxB,OAAO;QACP,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;KACtD,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAsC,EAAE,QAAgB;IAC7E,QAAQ,MAAM,EAAE,IAAI,EAAE,CAAC;QACrB,KAAK,kBAAkB;YACrB,OAAO,uBAAuB,CAAA;QAChC,KAAK,yBAAyB,CAAC;QAC/B,KAAK,2BAA2B;YAC9B,OAAO,2BAA2B,CAAA;QACpC,KAAK,0BAA0B;YAC7B,OAAO,+CAA+C,CAAA;QACxD,KAAK,2BAA2B;YAC9B,OAAO,+BAA+B,CAAA;QACxC,KAAK,yBAAyB;YAC5B,OAAO,oDAAoD,CAAA;QAC7D,KAAK,6BAA6B,CAAC;QACnC,KAAK,6BAA6B;YAChC,OAAO,oCAAoC,CAAA;QAC7C,KAAK,uBAAuB,CAAC;QAC7B,KAAK,0BAA0B;YAC7B,OAAO,gCAAgC,CAAA;QACzC;YACE,OAAO,QAAQ,CAAA;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,cAAc,CAAC,KAAK,CAAC,CAAA;IACrB,OAAO,WAAW,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAA;AACrE,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QACnE,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAChE,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACxD,iFAAiF;IACjF,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE;QAClD,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,IAAI,OAAO,KAAK;QAC7C,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC;KACxB,CAAC,CAAA;AACJ,CAAC"}

package/dist/errors/index.d.ts

@@ -0,0 +1,5 @@
+export { InstallationUnavailableError, IssuerKeysUnavailableError } from './availability.js';
+export { classifyError } from './classify.js';
+export { RequestBodyInvalidError, RequestBodyTooLargeError } from './request-body.js';
+export { ResponseBodyTooLargeError } from './response-body.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/errors/index.js

@@ -0,0 +1,5 @@
+export { InstallationUnavailableError, IssuerKeysUnavailableError } from './availability.js';
+export { classifyError } from './classify.js';
+export { RequestBodyInvalidError, RequestBodyTooLargeError } from './request-body.js';
+export { ResponseBodyTooLargeError } from './response-body.js';
+//# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAC5F,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAA;AACrF,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/errors/request-body.d.ts

@@ -0,0 +1,8 @@
+export declare class RequestBodyTooLargeError extends Error {
+    readonly maximumBytes: number;
+    constructor(maximumBytes: number);
+}
+export declare class RequestBodyInvalidError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=request-body.d.ts.map

package/dist/errors/request-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-body.d.ts","sourceRoot":"","sources":["../../errors/request-body.ts"],"names":[],"mappings":"AAAA,qBAAa,wBAAyB,SAAQ,KAAK;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM;IAAzC,YAAqB,YAAY,EAAE,MAAM,EAGxC;CACF;AAED,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF"}

package/dist/errors/request-body.js

@@ -0,0 +1,15 @@
+export class RequestBodyTooLargeError extends Error {
+    maximumBytes;
+    constructor(maximumBytes) {
+        super(`Request body exceeds ${maximumBytes} bytes.`);
+        this.maximumBytes = maximumBytes;
+        this.name = 'RequestBodyTooLargeError';
+    }
+}
+export class RequestBodyInvalidError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RequestBodyInvalidError';
+    }
+}
+//# sourceMappingURL=request-body.js.map

package/dist/errors/request-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-body.js","sourceRoot":"","sources":["../../errors/request-body.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC5B,YAAY;IAAjC,YAAqB,YAAoB;QACvC,KAAK,CAAC,wBAAwB,YAAY,SAAS,CAAC,CAAA;4BADjC,YAAY;QAE/B,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;IACxC,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAA;IACvC,CAAC;CACF"}

package/dist/errors/response-body.d.ts

@@ -0,0 +1,5 @@
+export declare class ResponseBodyTooLargeError extends Error {
+    readonly maximumBytes: number;
+    constructor(maximumBytes: number);
+}
+//# sourceMappingURL=response-body.d.ts.map

package/dist/errors/response-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-body.d.ts","sourceRoot":"","sources":["../../errors/response-body.ts"],"names":[],"mappings":"AAAA,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM;IAAzC,YAAqB,YAAY,EAAE,MAAM,EAGxC;CACF"}