@astrale-os/kernel-server 0.4.16 → 0.5.0-beta.1

package/dist/cors.js

@@ -1,17 +0,0 @@
-/**
- * CORS configuration and header builder.
- *
- * Cross-cutting helper consumed by every protocol handler. The shape mirrors
- * the standard `Access-Control-*` headers; multi-origin matching belongs in
- * framework-level middleware (e.g. Hono's `cors()`), not here.
- */
-export function buildCorsHeaders(cors) {
-    const origin = cors.origin;
-    return {
-        'access-control-allow-origin': origin,
-        'access-control-allow-methods': (cors.methods ?? ['POST', 'OPTIONS']).join(', '),
-        'access-control-allow-headers': (cors.headers ?? ['content-type', 'authorization']).join(', '),
-        'access-control-expose-headers': 'x-binary-result',
-    };
-}
-//# sourceMappingURL=cors.js.map

package/dist/cors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cors.js","sourceRoot":"","sources":["../cors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC1B,OAAO;QACL,6BAA6B,EAAE,MAAM;QACrC,8BAA8B,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAChF,8BAA8B,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9F,+BAA+B,EAAE,iBAAiB;KACnD,CAAA;AACH,CAAC"}

package/dist/envelope/batch.d.ts

@@ -1,13 +0,0 @@
-/**
- * Kernel envelope batch processing.
- *
- * A batch is an array of kernel envelope requests delivered in a single HTTP
- * POST. Each is dispatched independently and the encoded responses are
- * collected into an array. Notifications are dropped from the response;
- * streams and binary results are rejected (those need their own connection).
- */
-import type { CapabilityHost } from '../capabilities/index.js';
-import type { Dispatcher } from '../invocation/index.js';
-import { type CodecEntry } from './codec.js';
-export declare function handleBatch(raw: unknown[], dispatcher: Dispatcher, codecEntry: CodecEntry, req: Request, corsHeaders: Record<string, string>, host?: CapabilityHost): Promise<Response>;
-//# sourceMappingURL=batch.d.ts.map

package/dist/envelope/batch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../../envelope/batch.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAIxD,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AAG5C,wBAAsB,WAAW,CAC/B,GAAG,EAAE,OAAO,EAAE,EACd,UAAU,EAAE,UAAU,EACtB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,OAAO,EACZ,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,IAAI,CAAC,EAAE,cAAc,GACpB,OAAO,CAAC,QAAQ,CAAC,CAuFnB"}

package/dist/envelope/batch.js

@@ -1,96 +0,0 @@
-/**
- * Kernel envelope batch processing.
- *
- * A batch is an array of kernel envelope requests delivered in a single HTTP
- * POST. Each is dispatched independently and the encoded responses are
- * collected into an array. Notifications are dropped from the response;
- * streams and binary results are rejected (those need their own connection).
- */
-import { KERNEL_ERROR_CODES, decodeKernelRequest, encodeKernelError, encodeKernelRedirect, encodeKernelResponse, isBinaryResult, } from '@astrale-os/kernel-api';
-import { dispatchInvocation } from '../invocation/index.js';
-import { toBody } from '../render/index.js';
-import {} from './codec.js';
-import { extractCredential } from './credential.js';
-export async function handleBatch(raw, dispatcher, codecEntry, req, corsHeaders, host) {
-    if (raw.length === 0) {
-        return errorResponse(codecEntry, { code: KERNEL_ERROR_CODES.INVALID_REQUEST, message: 'Empty batch' }, corsHeaders, 400);
-    }
-    const auth = await extractCredential(req);
-    const results = Array.from({ length: raw.length }, () => null);
-    await Promise.all(raw.map(async (item, i) => {
-        let request;
-        try {
-            request = decodeKernelRequest(item);
-        }
-        catch (e) {
-            results[i] = encodeKernelError(null, {
-                code: KERNEL_ERROR_CODES.INVALID_REQUEST,
-                message: e instanceof Error ? e.message : 'Invalid request',
-            });
-            return;
-        }
-        const isAck = request.id === undefined;
-        let cred;
-        if (request.creds !== undefined) {
-            cred = request.creds;
-        }
-        else if (!auth.ok) {
-            results[i] = encodeKernelError(request.id ?? null, {
-                code: KERNEL_ERROR_CODES.AUTH_INVALID,
-                message: `Unsupported Authorization scheme: ${auth.scheme}`,
-            });
-            return;
-        }
-        else {
-            cred = auth.credential;
-        }
-        const res = await dispatchInvocation(dispatcher, {
-            path: request.method,
-            credential: cred,
-            params: request.params,
-            ...(request.self === undefined ? {} : { self: request.self }),
-        }, isAck ? { ack: true } : { id: request.id }, host);
-        if (res.kind === 'ack')
-            return;
-        if (res.kind === 'stream') {
-            results[i] = encodeKernelError(request.id, {
-                code: KERNEL_ERROR_CODES.INVALID_REQUEST,
-                message: 'Streaming is not supported inside a batch',
-            });
-            return;
-        }
-        if (res.kind === 'redirect') {
-            results[i] = encodeKernelRedirect(res.id, res.redirection);
-            return;
-        }
-        if (res.kind === 'success') {
-            if (isBinaryResult(res.data)) {
-                results[i] = encodeKernelError(res.id, {
-                    code: KERNEL_ERROR_CODES.INVALID_REQUEST,
-                    message: 'Binary result is not supported inside a batch',
-                });
-                return;
-            }
-            results[i] = encodeKernelResponse(res.id, res.data);
-            return;
-        }
-        results[i] = encodeKernelError(res.id, res.error);
-    }));
-    const encoded = results.filter((r) => r !== null);
-    if (encoded.length === 0) {
-        return new Response(null, { status: 204, headers: corsHeaders });
-    }
-    const bytes = codecEntry.codec.encode(encoded);
-    return new Response(toBody(bytes), {
-        status: 200,
-        headers: { ...corsHeaders, 'content-type': codecEntry.kernelType },
-    });
-}
-function errorResponse(codecEntry, error, corsHeaders, httpStatus) {
-    const bytes = codecEntry.codec.encode(encodeKernelError(null, error));
-    return new Response(toBody(bytes), {
-        status: httpStatus,
-        headers: { ...corsHeaders, 'content-type': codecEntry.kernelType },
-    });
-}
-//# sourceMappingURL=batch.js.map

package/dist/envelope/batch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"batch.js","sourceRoot":"","sources":["../../envelope/batch.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,cAAc,GACf,MAAM,wBAAwB,CAAA;AAK/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC3C,OAAO,EAAmB,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAEnD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAc,EACd,UAAsB,EACtB,UAAsB,EACtB,GAAY,EACZ,WAAmC,EACnC,IAAqB;IAErB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,aAAa,CAClB,UAAU,EACV,EAAE,IAAI,EAAE,kBAAkB,CAAC,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,EACpE,WAAW,EACX,GAAG,CACJ,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAA;IACzC,MAAM,OAAO,GAAuB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAElF,MAAM,OAAO,CAAC,GAAG,CACf,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,IAAI,OAA+C,CAAA;QACnD,IAAI,CAAC;YACH,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE;gBACnC,IAAI,EAAE,kBAAkB,CAAC,eAAe;gBACxC,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB;aAC5D,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAA;QACtC,IAAI,IAAY,CAAA;QAChB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAA;QACtB,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,EAAE,IAAI,IAAI,EAAE;gBACjD,IAAI,EAAE,kBAAkB,CAAC,YAAY;gBACrC,OAAO,EAAE,qCAAqC,IAAI,CAAC,MAAM,EAAE;aAC5D,CAAC,CAAA;YACF,OAAM;QACR,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC,UAAU,CAAA;QACxB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAClC,UAAU,EACV;YACE,IAAI,EAAE,OAAO,CAAC,MAAM;YACpB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SAC9D,EACD,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAG,EAAE,EAC3C,IAAI,CACL,CAAA;QAED,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK;YAAE,OAAM;QAC9B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,EAAG,EAAE;gBAC1C,IAAI,EAAE,kBAAkB,CAAC,eAAe;gBACxC,OAAO,EAAE,2CAA2C;aACrD,CAAC,CAAA;YACF,OAAM;QACR,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;YAC1D,OAAM;QACR,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE;oBACrC,IAAI,EAAE,kBAAkB,CAAC,eAAe;oBACxC,OAAO,EAAE,+CAA+C;iBACzD,CAAC,CAAA;gBACF,OAAM;YACR,CAAC;YACD,OAAO,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;YACnD,OAAM;QACR,CAAC;QACD,OAAO,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IACnD,CAAC,CAAC,CACH,CAAA;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACjC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,UAAU,EAAE;KACnE,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,UAAsB,EACtB,KAAyB,EACzB,WAAmC,EACnC,UAAkB;IAElB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IACrE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACjC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,UAAU,EAAE;KACnE,CAAC,CAAA;AACJ,CAAC"}

package/dist/envelope/codec.d.ts

@@ -1,26 +0,0 @@
-/**
- * Built-in kernel codecs and content-type negotiation.
- *
- * The kernel envelope speaks two codecs: JSON (text) and MsgPack (binary).
- * HTTP transports negotiate via `Content-Type` / `Accept`; WS transports
- * pick a codec at upgrade time via the `?codec=` query parameter.
- */
-import type { Codec } from '@astrale-os/kernel-api';
-export type CodecEntry = {
-    name: 'json' | 'msgpack';
-    codec: Codec;
-    kernelType: string;
-};
-export declare const DEFAULT_KERNEL_CODEC: {
-    readonly name: 'json';
-    readonly codec: Codec;
-    readonly kernelType: "application/vnd.astrale.kernel+json";
-};
-export declare const BUILTIN_KERNEL_CODECS: CodecEntry[];
-/** Pick the request codec from a Content-Type header. JSON is the default. */
-export declare function resolveRequestCodec(contentType: string | null): CodecEntry | null;
-/** Pick the response codec from an Accept header, defaulting to the request codec. */
-export declare function resolveResponseCodec(accept: string | null, requestCodec: CodecEntry): CodecEntry;
-/** Pick the WS frame codec from the upgrade request's `?codec=` query parameter. */
-export declare function negotiateWsCodec(req: Request): Codec | null;
-//# sourceMappingURL=codec.d.ts.map

package/dist/envelope/codec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../envelope/codec.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AASnD,MAAM,MAAM,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAA;AACvF,eAAO,MAAM,oBAAoB;aAC/B,IAAI,EAAE,MAAM;aACZ,KAAK;aACL,UAAU;CACF,CAAA;AAEV,eAAO,MAAM,qBAAqB,EAAE,UAAU,EAG7C,CAAA;AAED,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,GAAG,IAAI,CASjF;AAED,sFAAsF;AACtF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,YAAY,EAAE,UAAU,GAAG,UAAU,CAShG;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,GAAG,IAAI,CAO3D"}

package/dist/envelope/codec.js

@@ -1,52 +0,0 @@
-/**
- * Built-in kernel codecs and content-type negotiation.
- *
- * The kernel envelope speaks two codecs: JSON (text) and MsgPack (binary).
- * HTTP transports negotiate via `Content-Type` / `Accept`; WS transports
- * pick a codec at upgrade time via the `?codec=` query parameter.
- */
-import { KERNEL_CONTENT_TYPE_JSON, KERNEL_CONTENT_TYPE_MSGPACK, jsonCodec, msgpackCodec, } from '@astrale-os/kernel-api';
-export const DEFAULT_KERNEL_CODEC = {
-    name: 'json',
-    codec: jsonCodec,
-    kernelType: KERNEL_CONTENT_TYPE_JSON,
-};
-export const BUILTIN_KERNEL_CODECS = [
-    DEFAULT_KERNEL_CODEC,
-    { name: 'msgpack', codec: msgpackCodec, kernelType: KERNEL_CONTENT_TYPE_MSGPACK },
-];
-/** Pick the request codec from a Content-Type header. JSON is the default. */
-export function resolveRequestCodec(contentType) {
-    if (!contentType)
-        return BUILTIN_KERNEL_CODECS[0]; // default to JSON for convenience
-    const lower = contentType.toLowerCase();
-    for (const entry of BUILTIN_KERNEL_CODECS) {
-        if (lower.includes(entry.kernelType) || lower.includes(entry.codec.contentType)) {
-            return entry;
-        }
-    }
-    return null;
-}
-/** Pick the response codec from an Accept header, defaulting to the request codec. */
-export function resolveResponseCodec(accept, requestCodec) {
-    if (!accept || accept === '*/*' || accept.includes('text/event-stream'))
-        return requestCodec;
-    const lower = accept.toLowerCase();
-    for (const entry of BUILTIN_KERNEL_CODECS) {
-        if (lower.includes(entry.kernelType) || lower.includes(entry.codec.contentType)) {
-            return entry;
-        }
-    }
-    return requestCodec;
-}
-/** Pick the WS frame codec from the upgrade request's `?codec=` query parameter. */
-export function negotiateWsCodec(req) {
-    const url = new URL(req.url);
-    const requested = url.searchParams.get('codec') ?? DEFAULT_KERNEL_CODEC.name;
-    for (const entry of BUILTIN_KERNEL_CODECS) {
-        if (entry.name === requested)
-            return entry.codec;
-    }
-    return null;
-}
-//# sourceMappingURL=codec.js.map

package/dist/envelope/codec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../envelope/codec.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,SAAS,EACT,YAAY,GACb,MAAM,wBAAwB,CAAA;AAG/B,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,SAAS;IAChB,UAAU,EAAE,wBAAwB;CAC5B,CAAA;AAEV,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,oBAAoB;IACpB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,2BAA2B,EAAE;CAClF,CAAA;AAED,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,WAA0B;IAC5D,IAAI,CAAC,WAAW;QAAE,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAA,CAAC,kCAAkC;IACpF,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAA;IACvC,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,MAAqB,EAAE,YAAwB;IAClF,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAAE,OAAO,YAAY,CAAA;IAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;IAClC,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAA;IAC5E,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,KAAK,CAAA;IAClD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/envelope/credential.d.ts

@@ -1,20 +0,0 @@
-/**
- * HTTP `Authorization` header → bare kernel credential, at the transport edge.
- *
- * The core types credentials by content and is transport-agnostic; the canonical channel is the
- * envelope `creds` field (forwarded as-is). This only normalizes the HTTP fallback: per RFC 7235
- * (`auth-scheme [ 1*SP credentials ]`) we strip a known scheme so `dispatch` gets the same bare
- * credential whatever the transport. `SCHEMES` is the extension point — a request-bound scheme like
- * DPoP would verify its proof here before forwarding the token.
- */
-/** Outcome of reading the credential from `Authorization`. */
-export type AuthExtraction = {
-    readonly ok: true;
-    readonly credential: string;
-} | {
-    readonly ok: false;
-    readonly scheme: string;
-};
-/** Extract the bare credential from a request's `Authorization` header. Absent → `{ ok, credential: '' }`. */
-export declare function extractCredential(req: Request): Promise<AuthExtraction>;
-//# sourceMappingURL=credential.d.ts.map

package/dist/envelope/credential.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../../envelope/credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,8DAA8D;AAC9D,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAcnD,8GAA8G;AAC9G,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAa7E"}

package/dist/envelope/credential.js

@@ -1,32 +0,0 @@
-/**
- * HTTP `Authorization` header → bare kernel credential, at the transport edge.
- *
- * The core types credentials by content and is transport-agnostic; the canonical channel is the
- * envelope `creds` field (forwarded as-is). This only normalizes the HTTP fallback: per RFC 7235
- * (`auth-scheme [ 1*SP credentials ]`) we strip a known scheme so `dispatch` gets the same bare
- * credential whatever the transport. `SCHEMES` is the extension point — a request-bound scheme like
- * DPoP would verify its proof here before forwarding the token.
- */
-/** Supported schemes (lowercased → handler). Add `dpop` etc. here; the core never learns the scheme. */
-const SCHEMES = {
-    bearer: (credentials) => credentials, // RFC 6750: the credentials ARE the token
-    // dpop: async (credentials, req) => ((await verifyDpopProof(req, credentials)) ? credentials : null),
-};
-/** `auth-scheme` is a `token` (no whitespace); credentials follow after `1*SP`. */
-const SCHEME_SPLIT = /^(\S+)[ \t]+([\s\S]+)$/;
-/** Extract the bare credential from a request's `Authorization` header. Absent → `{ ok, credential: '' }`. */
-export async function extractCredential(req) {
-    const header = req.headers.get('authorization')?.trim();
-    if (!header)
-        return { ok: true, credential: '' };
-    const match = SCHEME_SPLIT.exec(header);
-    if (!match)
-        return { ok: true, credential: header }; // bare token (legacy/shell convention)
-    const scheme = match[1].toLowerCase();
-    const handler = SCHEMES[scheme];
-    if (!handler)
-        return { ok: false, scheme };
-    const credential = await handler(match[2].trim(), req);
-    return credential === null ? { ok: false, scheme } : { ok: true, credential };
-}
-//# sourceMappingURL=credential.js.map

package/dist/envelope/credential.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../envelope/credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,wGAAwG;AACxG,MAAM,OAAO,GAA4C;IACvD,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,0CAA0C;IAChF,sGAAsG;CACvG,CAAA;AAED,mFAAmF;AACnF,MAAM,YAAY,GAAG,wBAAwB,CAAA;AAE7C,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAY;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,EAAE,CAAA;IACvD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;IAEhD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA,CAAC,uCAAuC;IAE3F,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAA;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC/B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAE1C,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;IACvD,OAAO,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AAC/E,CAAC"}

package/dist/envelope/http.d.ts

@@ -1,31 +0,0 @@
-/**
- * Kernel envelope HTTP dispatcher — POST / (universal RPC envelope).
- *
- * Speaks the kernel envelope directly. Hardcodes JSON + MsgPack codecs.
- * Resolves codec from `Content-Type` (request) and `Accept` (response).
- * Routes single requests, batches, acks, streams, and binary results.
- *
- * The dispatcher is built once with `(cors, options)` and then invoked per
- * request with `(req, dispatcher)`. Single-instance servers bind once at startup;
- * multi-instance servers reuse the same HTTP handler across all dispatchers with
- * zero per-request allocation.
- */
-import type { CapabilityHost } from '../capabilities/index.js';
-import type { CorsConfig } from '../cors.js';
-import type { Dispatcher } from '../invocation/index.js';
-export type KernelDispatcherOptions = {
-    /**
-     * Optional function to extract host placeholder values from the incoming
-     * request. Returned values are merged into params at the lowest priority.
-     * Return null to reject the request with 404.
-     */
-    hostParams?: (req: Request) => Record<string, string> | null;
-};
-/**
- * Build a kernel-envelope HTTP dispatcher. Call once at startup; the returned
- * function takes `(req, dispatcher)` and produces a Response. The dispatcher
- * is supplied per request so a single HTTP handler can serve many instances
- * (multi-instance hosting).
- */
-export declare function createKernelDispatcher(cors: CorsConfig, options?: KernelDispatcherOptions): (req: Request, dispatcher: Dispatcher, host?: CapabilityHost) => Promise<Response>;
-//# sourceMappingURL=http.d.ts.map

package/dist/envelope/http.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../envelope/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAcH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAWxD,MAAM,MAAM,uBAAuB,GAAG;IACpC;;;;OAIG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAA;CAC7D,CAAA;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE,uBAA4B,GACpC,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,cAAc,KAAK,OAAO,CAAC,QAAQ,CAAC,CAwIpF"}

package/dist/envelope/http.js

@@ -1,132 +0,0 @@
-/**
- * Kernel envelope HTTP dispatcher — POST / (universal RPC envelope).
- *
- * Speaks the kernel envelope directly. Hardcodes JSON + MsgPack codecs.
- * Resolves codec from `Content-Type` (request) and `Accept` (response).
- * Routes single requests, batches, acks, streams, and binary results.
- *
- * The dispatcher is built once with `(cors, options)` and then invoked per
- * request with `(req, dispatcher)`. Single-instance servers bind once at startup;
- * multi-instance servers reuse the same HTTP handler across all dispatchers with
- * zero per-request allocation.
- */
-import { KERNEL_ERROR_CODES, decodeKernelRequest, encodeKernelError, encodeKernelRedirect, encodeKernelResponse, isBatch, isBinaryResult, } from '@astrale-os/kernel-api';
-import { buildCorsHeaders } from '../cors.js';
-import { dispatchInvocation } from '../invocation/index.js';
-import { buildBinaryResponse, toBody } from '../render/index.js';
-import { handleBatch } from './batch.js';
-import { resolveRequestCodec, resolveResponseCodec } from './codec.js';
-import { extractCredential } from './credential.js';
-import { buildKernelStreamResponse } from './sse.js';
-/**
- * Build a kernel-envelope HTTP dispatcher. Call once at startup; the returned
- * function takes `(req, dispatcher)` and produces a Response. The dispatcher
- * is supplied per request so a single HTTP handler can serve many instances
- * (multi-instance hosting).
- */
-export function createKernelDispatcher(cors, options = {}) {
-    const corsHeaders = buildCorsHeaders(cors);
-    const hostParamsFn = options.hostParams;
-    return async (req, dispatcher, host) => {
-        if (req.method === 'OPTIONS') {
-            return new Response(null, { status: 204, headers: corsHeaders });
-        }
-        if (req.method !== 'POST') {
-            return new Response(null, { status: 405, headers: corsHeaders });
-        }
-        // 1. Resolve request codec
-        const requestCodec = resolveRequestCodec(req.headers.get('content-type'));
-        if (!requestCodec) {
-            return new Response(JSON.stringify({ error: `Unsupported Content-Type: ${req.headers.get('content-type')}` }), { status: 415, headers: { ...corsHeaders, 'content-type': 'application/json' } });
-        }
-        // 2. Decode body
-        let raw;
-        try {
-            const bytes = new Uint8Array(await req.arrayBuffer());
-            raw = requestCodec.codec.decode(bytes);
-        }
-        catch {
-            return errorResponse(requestCodec, null, { code: KERNEL_ERROR_CODES.PARSE_ERROR, message: 'Parse error: invalid encoding' }, corsHeaders);
-        }
-        // 3. Resolve response codec (honor Accept)
-        const responseCodec = resolveResponseCodec(req.headers.get('accept'), requestCodec);
-        // 4. Batch?
-        if (isBatch(raw)) {
-            return handleBatch(raw, dispatcher, responseCodec, req, corsHeaders, host);
-        }
-        // 5. Decode envelope
-        let request;
-        try {
-            request = decodeKernelRequest(raw);
-        }
-        catch (e) {
-            return errorResponse(responseCodec, null, {
-                code: KERNEL_ERROR_CODES.INVALID_REQUEST,
-                message: e instanceof Error ? e.message : 'Invalid request',
-            }, corsHeaders);
-        }
-        // 5b. Host params (multi-tenant placeholders) — merged at lowest priority.
-        let hostParams = {};
-        if (hostParamsFn) {
-            const extracted = hostParamsFn(req);
-            if (extracted === null) {
-                return new Response('Host not recognised', { status: 404, headers: corsHeaders });
-            }
-            hostParams = extracted;
-        }
-        // 6. Credential — `creds` (envelope) is the canonical raw channel; the `Authorization` header is
-        //    the fallback, scheme-stripped at the edge (see ./authorization). The core gets a bare token.
-        let cred = request.creds;
-        if (cred === undefined) {
-            const auth = await extractCredential(req);
-            if (!auth.ok) {
-                return errorResponse(responseCodec, request.id ?? null, {
-                    code: KERNEL_ERROR_CODES.AUTH_INVALID,
-                    message: `Unsupported Authorization scheme: ${auth.scheme}`,
-                }, corsHeaders);
-            }
-            cred = auth.credential;
-        }
-        // 7. Dispatch — host params merged at lowest priority (body wins).
-        const mergedParams = {
-            ...hostParams,
-            ...request.params,
-        };
-        const isAck = request.id === undefined;
-        const result = await dispatchInvocation(dispatcher, {
-            path: request.method,
-            credential: cred,
-            params: mergedParams,
-            ...(request.self === undefined ? {} : { self: request.self }),
-        }, isAck ? { ack: true } : { id: request.id }, host);
-        // 8. Render result
-        switch (result.kind) {
-            case 'ack':
-                return new Response(null, { status: 204, headers: corsHeaders });
-            case 'success': {
-                if (isBinaryResult(result.data)) {
-                    return buildBinaryResponse(result.data, corsHeaders);
-                }
-                return writeEnvelope(responseCodec, encodeKernelResponse(result.id, result.data), corsHeaders);
-            }
-            case 'error':
-                return writeEnvelope(responseCodec, encodeKernelError(result.id, result.error), corsHeaders);
-            case 'redirect':
-                return writeEnvelope(responseCodec, encodeKernelRedirect(result.id, result.redirection), corsHeaders);
-            case 'stream':
-                return buildKernelStreamResponse(result.id, result.generator, corsHeaders);
-        }
-    };
-}
-// ─── Local helpers ──────────────────────────────────────────────────────────
-function writeEnvelope(codecEntry, payload, corsHeaders, status = 200) {
-    const bytes = codecEntry.codec.encode(payload);
-    return new Response(toBody(bytes), {
-        status,
-        headers: { ...corsHeaders, 'content-type': codecEntry.kernelType },
-    });
-}
-function errorResponse(codecEntry, id, error, corsHeaders, httpStatus = 200) {
-    return writeEnvelope(codecEntry, encodeKernelError(id ?? null, error), corsHeaders, httpStatus);
-}
-//# sourceMappingURL=http.js.map

package/dist/envelope/http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../envelope/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,OAAO,EACP,cAAc,GACf,MAAM,wBAAwB,CAAA;AAO/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAA;AAWpD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAgB,EAChB,OAAO,GAA4B,EAAE;IAErC,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAA;IAEvC,OAAO,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;QACrC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAClE,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAClE,CAAC;QAED,2BAA2B;QAC3B,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAA;QACzE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,EACzF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjF,CAAA;QACH,CAAC;QAED,iBAAiB;QACjB,IAAI,GAAY,CAAA;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAA;YACrD,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAClB,YAAY,EACZ,IAAI,EACJ,EAAE,IAAI,EAAE,kBAAkB,CAAC,WAAW,EAAE,OAAO,EAAE,+BAA+B,EAAE,EAClF,WAAW,CACZ,CAAA;QACH,CAAC;QAED,2CAA2C;QAC3C,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAA;QAEnF,YAAY;QACZ,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;QAC5E,CAAC;QAED,qBAAqB;QACrB,IAAI,OAA+C,CAAA;QACnD,IAAI,CAAC;YACH,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;QACpC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,aAAa,CAClB,aAAa,EACb,IAAI,EACJ;gBACE,IAAI,EAAE,kBAAkB,CAAC,eAAe;gBACxC,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB;aAC5D,EACD,WAAW,CACZ,CAAA;QACH,CAAC;QAED,2EAA2E;QAC3E,IAAI,UAAU,GAA2B,EAAE,CAAA;QAC3C,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;YACnC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,IAAI,QAAQ,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;YACnF,CAAC;YACD,UAAU,GAAG,SAAS,CAAA;QACxB,CAAC;QAED,iGAAiG;QACjG,kGAAkG;QAClG,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,CAAA;QACxB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAA;YACzC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO,aAAa,CAClB,aAAa,EACb,OAAO,CAAC,EAAE,IAAI,IAAI,EAClB;oBACE,IAAI,EAAE,kBAAkB,CAAC,YAAY;oBACrC,OAAO,EAAE,qCAAqC,IAAI,CAAC,MAAM,EAAE;iBAC5D,EACD,WAAW,CACZ,CAAA;YACH,CAAC;YACD,IAAI,GAAG,IAAI,CAAC,UAAU,CAAA;QACxB,CAAC;QAED,mEAAmE;QACnE,MAAM,YAAY,GAA4B;YAC5C,GAAG,UAAU;YACb,GAAI,OAAO,CAAC,MAAkC;SAC/C,CAAA;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,KAAK,SAAS,CAAA;QACtC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,UAAU,EACV;YACE,IAAI,EAAE,OAAO,CAAC,MAAM;YACpB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,YAAY;YACpB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;SAC9D,EACD,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAG,EAAE,EAC3C,IAAI,CACL,CAAA;QAED,mBAAmB;QACnB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,KAAK;gBACR,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;YAElE,KAAK,SAAS,EAAE,CAAC;gBACf,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;gBACtD,CAAC;gBACD,OAAO,aAAa,CAClB,aAAa,EACb,oBAAoB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAC5C,WAAW,CACZ,CAAA;YACH,CAAC;YAED,KAAK,OAAO;gBACV,OAAO,aAAa,CAAC,aAAa,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAA;YAE9F,KAAK,UAAU;gBACb,OAAO,aAAa,CAClB,aAAa,EACb,oBAAoB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,EACnD,WAAW,CACZ,CAAA;YAEH,KAAK,QAAQ;gBACX,OAAO,yBAAyB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,+EAA+E;AAE/E,SAAS,aAAa,CACpB,UAAsB,EACtB,OAAgB,EAChB,WAAmC,EACnC,MAAM,GAAG,GAAG;IAEZ,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9C,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACjC,MAAM;QACN,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,UAAU,EAAE;KACnE,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,UAAsB,EACtB,EAAa,EACb,KAAyB,EACzB,WAAmC,EACnC,UAAU,GAAG,GAAG;IAEhB,OAAO,aAAa,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,IAAI,IAAI,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,CAAA;AACjG,CAAC"}

package/dist/envelope/sse.d.ts

@@ -1,11 +0,0 @@
-/**
- * SSE response framed with kernel stream events.
- *
- * Each chunk is wrapped in `{stream:{id,index,data}}` (kernel envelope stream
- * frames). On a clean end the response emits a `{stream:{id,end:true}}` frame;
- * on error a `{stream:{id,error}}` frame. Setup failures from the first
- * iteration become a 500 response.
- */
-import type { RequestId } from '@astrale-os/kernel-api';
-export declare function buildKernelStreamResponse(id: RequestId, generator: AsyncGenerator<unknown>, corsHeaders: Record<string, string>): Promise<Response>;
-//# sourceMappingURL=sse.d.ts.map

package/dist/envelope/sse.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../envelope/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AASvD,wBAAsB,yBAAyB,CAC7C,EAAE,EAAE,SAAS,EACb,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,EAClC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAClC,OAAO,CAAC,QAAQ,CAAC,CAoEnB"}

package/dist/envelope/sse.js

@@ -1,73 +0,0 @@
-/**
- * SSE response framed with kernel stream events.
- *
- * Each chunk is wrapped in `{stream:{id,index,data}}` (kernel envelope stream
- * frames). On a clean end the response emits a `{stream:{id,end:true}}` frame;
- * on error a `{stream:{id,error}}` frame. Setup failures from the first
- * iteration become a 500 response.
- */
-import { classifyError, encodeStreamChunk, encodeStreamEnd, encodeStreamError, } from '@astrale-os/kernel-api';
-export async function buildKernelStreamResponse(id, generator, corsHeaders) {
-    // Eagerly pull the first chunk so setup failures become proper HTTP errors.
-    let first;
-    try {
-        first = await generator.next();
-    }
-    catch (err) {
-        const error = classifyError(err);
-        const frame = encodeStreamError(id, error);
-        return new Response(`data: ${JSON.stringify(frame)}\n\n`, {
-            status: 500,
-            headers: {
-                ...corsHeaders,
-                'content-type': 'text/event-stream',
-                'cache-control': 'no-cache',
-            },
-        });
-    }
-    const encoder = new TextEncoder();
-    let cancelled = false;
-    const stream = new ReadableStream({
-        async start(controller) {
-            try {
-                let index = 0;
-                if (!first.done) {
-                    controller.enqueue(encoder.encode(`data: ${JSON.stringify(encodeStreamChunk(id, index++, first.value))}\n\n`));
-                }
-                for await (const chunk of generator) {
-                    if (cancelled)
-                        break;
-                    controller.enqueue(encoder.encode(`data: ${JSON.stringify(encodeStreamChunk(id, index++, chunk))}\n\n`));
-                }
-                if (!cancelled) {
-                    controller.enqueue(encoder.encode(`data: ${JSON.stringify(encodeStreamEnd(id))}\n\n`));
-                }
-                controller.close();
-            }
-            catch (err) {
-                try {
-                    const error = classifyError(err);
-                    controller.enqueue(encoder.encode(`data: ${JSON.stringify(encodeStreamError(id, error))}\n\n`));
-                }
-                catch {
-                    // swallow
-                }
-                controller.close();
-            }
-        },
-        cancel() {
-            cancelled = true;
-            generator.return(undefined).catch(() => { });
-        },
-    });
-    return new Response(stream, {
-        status: 200,
-        headers: {
-            ...corsHeaders,
-            'content-type': 'text/event-stream',
-            'cache-control': 'no-cache',
-            connection: 'keep-alive',
-        },
-    });
-}
-//# sourceMappingURL=sse.js.map

package/dist/envelope/sse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sse.js","sourceRoot":"","sources":["../../envelope/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAClB,MAAM,wBAAwB,CAAA;AAE/B,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,EAAa,EACb,SAAkC,EAClC,WAAmC;IAEnC,4EAA4E;IAC5E,IAAI,KAA8B,CAAA;IAClC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;QAChC,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QAC1C,OAAO,IAAI,QAAQ,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE;YACxD,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,GAAG,WAAW;gBACd,cAAc,EAAE,mBAAmB;gBACnC,eAAe,EAAE,UAAU;aAC5B;SACF,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC;QAChC,KAAK,CAAC,KAAK,CAAC,UAAU;YACpB,IAAI,CAAC;gBACH,IAAI,KAAK,GAAG,CAAC,CAAA;gBACb,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBAChB,UAAU,CAAC,OAAO,CAChB,OAAO,CAAC,MAAM,CACZ,SAAS,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAC3E,CACF,CAAA;gBACH,CAAC;gBACD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;oBACpC,IAAI,SAAS;wBAAE,MAAK;oBACpB,UAAU,CAAC,OAAO,CAChB,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CACrF,CAAA;gBACH,CAAC;gBACD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;gBACxF,CAAC;gBACD,UAAU,CAAC,KAAK,EAAE,CAAA;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;oBAChC,UAAU,CAAC,OAAO,CAChB,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,CAC5E,CAAA;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,UAAU;gBACZ,CAAC;gBACD,UAAU,CAAC,KAAK,EAAE,CAAA;YACpB,CAAC;QACH,CAAC;QACD,MAAM;YACJ,SAAS,GAAG,IAAI,CAAA;YAChB,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC7C,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;QAC1B,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,GAAG,WAAW;YACd,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;SACzB;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/envelope/ws.d.ts

@@ -1,35 +0,0 @@
-/**
- * Kernel envelope WS connection — universal RPC envelope over WebSockets.
- *
- * Each frame is a kernel envelope. Codec is fixed for the lifetime of the
- * connection (negotiated at upgrade via `?codec=`). Stream responses use
- * kernel stream framing (`{stream:{id,index,data}}`). Per-message credentials
- * live in the top-level `creds` field.
- *
- * Binary output mode is partially supported: small Uint8Array bodies are
- * delivered as a single stream chunk + end frame; ReadableStream bodies are
- * marked TODO and rejected with INTERNAL_ERROR for now.
- */
-import type { Codec } from '@astrale-os/kernel-api';
-import type { CapabilityHost } from '../capabilities/index.js';
-import type { Dispatcher } from '../invocation/index.js';
-export interface WebSocketLike {
-    send(data: string | Uint8Array): void;
-    close(code?: number, reason?: string): void;
-    readonly readyState: number;
-}
-export declare class KernelWsConnection {
-    private readonly ws;
-    private readonly codec;
-    private readonly dispatcher;
-    private readonly host?;
-    constructor(ws: WebSocketLike, codec: Codec, dispatcher: Dispatcher, host?: CapabilityHost | undefined);
-    start(): void;
-    handleMessage(data: string | ArrayBuffer | Uint8Array): void;
-    private processMessage;
-    private sendStream;
-    private sendFrame;
-    handleClose(): void;
-    handleError(error: Error): void;
-}
-//# sourceMappingURL=ws.d.ts.map

package/dist/envelope/ws.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ws.d.ts","sourceRoot":"","sources":["../../envelope/ws.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAiC,MAAM,wBAAwB,CAAA;AAelF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAMxD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAA;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAMD,qBAAa,kBAAkB;IAE3B,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAJxB,YACmB,EAAE,EAAE,aAAa,EACjB,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,UAAU,EACtB,IAAI,CAAC,EAAE,cAAc,YAAA,EACpC;IAEJ,KAAK,IAAI,IAAI,CAEZ;IAED,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,IAAI,CAK3D;YAEa,cAAc;YA6Fd,UAAU;IAcxB,OAAO,CAAC,SAAS;IAKjB,WAAW,IAAI,IAAI,CAElB;IAED,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAG9B;CACF"}