@astrale-os/kernel-server 0.4.17 → 0.5.0-beta.2

package/dist/server.d.ts

@@ -0,0 +1,5 @@
+import type { Server, ServerConfig, ServerOptions, PreparedServer } from './types.js';
+export declare function createServer(config: ServerConfig): Server;
+/** Validate all static transport configuration before a Host starts Runtime recovery/bootstrap. */
+export declare function prepareServer(options: ServerOptions): PreparedServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../server.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,MAAM,EACN,YAAY,EACZ,aAAa,EACb,cAAc,EAGf,MAAM,YAAY,CAAA;AAUnB,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAGzD;AAED,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,CAKpE"}

package/dist/server.js

@@ -0,0 +1,260 @@
+import { publication as protocolPublication } from '@astrale-os/kernel-protocol';
+import { captureMethod } from './capture.js';
+import { prepareCors } from './cors/index.js';
+import { capture as captureExchangeProvider } from './issuer/exchange.js';
+import { admitIssuer, issuerRouteReservations, mountIssuer } from './issuer/index.js';
+import { ActiveOperations } from './lifecycle/index.js';
+import { currentPublicationSnapshot, mountRoutes } from './routes/index.js';
+import { createHttpHandler, createServerRouter, handleWebSocketUpgrade } from './transport/index.js';
+export function createServer(config) {
+    const { handler, ...options } = config;
+    return prepareServer(options).create(handler);
+}
+/** Validate all static transport configuration before a Host starts Runtime recovery/bootstrap. */
+export function prepareServer(options) {
+    const prepared = admitOptions(options);
+    return Object.freeze({
+        create: (handler) => createPreparedServer(handler, prepared),
+    });
+}
+function createPreparedServer(input, config) {
+    const handler = captureHandler(input);
+    const active = new ActiveOperations(config.limits.maximumConcurrentOperations);
+    const app = createServerRouter();
+    const hosts = new WeakMap();
+    const externalIssuer = config.issuer?.issuer;
+    const externalOrigin = externalIssuer === undefined ? undefined : new URL(externalIssuer).origin;
+    const handleHttp = createHttpHandler({
+        handler,
+        active,
+        ...config.limits,
+        cors: config.cors,
+        websocket: config.websocket !== undefined,
+        ...(config.publication === undefined
+            ? {}
+            : {
+                currentPublication: (request) => currentPublicationSnapshot(config.publication, config.limits, {
+                    origin: externalOrigin ?? new URL(request.url).origin,
+                    ...(externalIssuer === undefined ? {} : { issuer: externalIssuer }),
+                    reservations: config.routeReservations,
+                })?.snapshot,
+            }),
+    });
+    if (config.websocket !== undefined) {
+        app.get(config.path, (context) => handleWebSocketUpgrade({
+            request: context.req.raw,
+            adapter: config.websocket,
+            handler,
+            active,
+            ...config.limits,
+            cors: config.cors,
+            ...(config.publication === undefined
+                ? {}
+                : {
+                    currentPublication: () => currentPublicationSnapshot(config.publication, config.limits, {
+                        origin: externalOrigin ?? new URL(context.req.raw.url).origin,
+                        ...(externalIssuer === undefined ? {} : { issuer: externalIssuer }),
+                        reservations: config.routeReservations,
+                    })?.snapshot,
+                }),
+            host: hosts.get(context.req.raw),
+        }));
+    }
+    app.all(config.path, (context) => handleHttp(context.req.raw, hosts.get(context.req.raw)));
+    if (config.health !== undefined) {
+        app.get(config.health.path, (context) => {
+            const ready = active.isAccepting && config.health.probe.check();
+            return context.json({ status: ready ? 'ready' : 'not-ready' }, ready ? 200 : 503, {
+                ...config.cors.response(context.req.raw),
+                'cache-control': 'no-store',
+            });
+        });
+        if (config.cors.enabled) {
+            app.options(config.health.path, (context) => config.cors.preflight(context.req.raw, { methods: ['GET'] }));
+        }
+    }
+    if (config.issuer !== undefined) {
+        mountIssuer(app, config.issuer, config.cors, active, config.limits.invocationTimeoutMs, config.tokenExchange);
+    }
+    if (config.publication !== undefined) {
+        mountRoutes(app, config.publication, config.delivery, handler, active, config.limits, config.cors, (request) => hosts.get(request), config.routeReservations, externalIssuer);
+    }
+    app.onError((_error, context) => new Response('{"error":"Internal server error."}', {
+        status: 500,
+        headers: {
+            ...config.cors.response(context.req.raw),
+            'content-type': 'application/json',
+        },
+    }));
+    return Object.freeze({
+        app: Object.freeze({
+            async fetch(request, host) {
+                const admitted = host === undefined ? undefined : captureApplicationHost(host);
+                if (admitted !== undefined)
+                    hosts.set(request, admitted);
+                try {
+                    return await app.fetch(request);
+                }
+                finally {
+                    hosts.delete(request);
+                }
+            },
+        }),
+        drain() {
+            active.drain();
+        },
+        close(options) {
+            if (!Number.isFinite(options.deadline)) {
+                return Promise.reject(new TypeError('Server close deadline must be finite.'));
+            }
+            return active.close(options.deadline);
+        },
+    });
+}
+function captureApplicationHost(input) {
+    const waitUntil = captureMethod(input, 'waitUntil', 'Application host is invalid.');
+    const sleep = input.sleep === undefined
+        ? undefined
+        : captureMethod(input, 'sleep', 'Application host is invalid.');
+    return Object.freeze({
+        waitUntil,
+        ...(sleep === undefined ? {} : { sleep }),
+    });
+}
+function captureHandler(input) {
+    const dispatch = captureMethod(input, 'dispatch', 'Server handler is invalid.');
+    return Object.freeze({ dispatch });
+}
+function admitOptions(config) {
+    const limits = admitLimits(config.limits);
+    const path = admitRoute(config.path ?? '/', 'invocation path');
+    const issuer = config.issuer === undefined ? undefined : admitIssuer(config.issuer);
+    const tokenExchange = config.tokenExchange === undefined ? undefined : captureExchangeProvider(config.tokenExchange);
+    if (tokenExchange !== undefined && issuer === undefined) {
+        throw new TypeError('Token exchange requires issuer configuration.');
+    }
+    const health = config.health === undefined || config.health === false
+        ? undefined
+        : Object.freeze({
+            path: admitRoute(config.health.path ?? '/health', 'Health path'),
+            probe: captureHealthProbe(config.health.probe),
+        });
+    const websocket = config.websocket === undefined ? undefined : captureWebSocket(config.websocket);
+    const publication = config.publication === undefined ? undefined : capturePublicationSource(config.publication);
+    const delivery = config.delivery === undefined ? undefined : captureDeliveryProvider(config.delivery);
+    if (delivery !== undefined && publication === undefined) {
+        throw new TypeError('Publication Delivery requires a Publication source.');
+    }
+    const publicationPath = publication === undefined
+        ? undefined
+        : issuer === undefined
+            ? protocolPublicationPath()
+            : protocolPublicationPath(issuer.issuer);
+    if (health?.path === path)
+        throw new TypeError('Health and invocation paths must be distinct.');
+    if (publicationPath === path) {
+        throw new TypeError('Publication and invocation paths must be distinct.');
+    }
+    if (health !== undefined && publicationPath === health.path) {
+        throw new TypeError('Health and Publication paths must be distinct.');
+    }
+    if (issuer !== undefined) {
+        const issuerReservations = issuerRouteReservations(issuer, tokenExchange !== undefined);
+        const issuerPaths = issuerReservations.map(({ path }) => path);
+        if (health !== undefined && issuerPaths.includes(health.path)) {
+            throw new TypeError('Health and issuer paths must be distinct.');
+        }
+        if (websocket !== undefined && issuerPaths.includes(path)) {
+            throw new TypeError('WebSocket invocation and issuer paths must be distinct.');
+        }
+        if (websocket === undefined &&
+            issuerReservations.some((reservation) => reservation.path === path && reservation.methods.includes('POST'))) {
+            throw new TypeError('Invocation and token-exchange paths must be distinct.');
+        }
+    }
+    return Object.freeze({
+        limits,
+        path,
+        cors: prepareCors(config.cors),
+        ...(health === undefined ? {} : { health }),
+        ...(issuer === undefined ? {} : { issuer }),
+        ...(tokenExchange === undefined ? {} : { tokenExchange }),
+        ...(publication === undefined ? {} : { publication }),
+        ...(delivery === undefined ? {} : { delivery }),
+        routeReservations: routeReservations(path, health?.path, issuer, websocket !== undefined, tokenExchange !== undefined, publicationPath),
+        ...(websocket === undefined ? {} : { websocket }),
+    });
+}
+function routeReservations(invocationPath, healthPath, issuer, websocket, tokenExchange, publicationPath) {
+    const reservations = [
+        Object.freeze({
+            path: invocationPath,
+            methods: Object.freeze(websocket ? ['GET', 'POST'] : ['POST']),
+        }),
+    ];
+    if (healthPath !== undefined) {
+        reservations.push(Object.freeze({ path: healthPath, methods: Object.freeze(['GET']) }));
+    }
+    if (issuer !== undefined) {
+        reservations.push(...issuerRouteReservations(issuer, tokenExchange));
+    }
+    if (publicationPath !== undefined) {
+        reservations.push(Object.freeze({ path: publicationPath, methods: Object.freeze(['GET']) }));
+    }
+    return Object.freeze(reservations);
+}
+function protocolPublicationPath(issuer) {
+    if (issuer === undefined)
+        return protocolPublication.PATH;
+    return new URL(protocolPublication.url(issuer)).pathname;
+}
+function captureHealthProbe(probe) {
+    const check = captureMethod(probe, 'check', 'Health probe is invalid.');
+    return Object.freeze({ check });
+}
+function captureWebSocket(adapter) {
+    const upgrade = captureMethod(adapter, 'upgrade', 'WebSocket adapter is invalid.');
+    return Object.freeze({ upgrade });
+}
+function capturePublicationSource(input) {
+    const current = captureMethod(input, 'current', 'Publication source is invalid.');
+    return Object.freeze({ current });
+}
+function captureDeliveryProvider(input) {
+    const create = captureMethod(input, 'create', 'Publication Delivery provider is invalid.');
+    return Object.freeze({ create });
+}
+function admitLimits(limits) {
+    if (!Number.isSafeInteger(limits.maximumRequestBytes) || limits.maximumRequestBytes <= 0) {
+        throw new TypeError('maximumRequestBytes must be a positive safe integer.');
+    }
+    if (!Number.isSafeInteger(limits.invocationTimeoutMs) || limits.invocationTimeoutMs <= 0) {
+        throw new TypeError('invocationTimeoutMs must be a positive safe integer.');
+    }
+    if (limits.invocationTimeoutMs > 2_147_483_647) {
+        throw new TypeError('invocationTimeoutMs exceeds the platform timer range.');
+    }
+    return Object.freeze({
+        maximumRequestBytes: limits.maximumRequestBytes,
+        maximumResponseBytes: admitOptionalLimit(limits.maximumResponseBytes, 16 * 1024 * 1024, 'maximumResponseBytes'),
+        maximumConcurrentOperations: admitOptionalLimit(limits.maximumConcurrentOperations, 1_024, 'maximumConcurrentOperations'),
+        maximumPublicationBytes: admitOptionalLimit(limits.maximumPublicationBytes, limits.maximumRequestBytes, 'maximumPublicationBytes'),
+        maximumBundleBytes: admitOptionalLimit(limits.maximumBundleBytes, 16 * 1024 * 1024, 'maximumBundleBytes'),
+        maximumDeliveryBytes: admitOptionalLimit(limits.maximumDeliveryBytes, limits.maximumRequestBytes, 'maximumDeliveryBytes'),
+        invocationTimeoutMs: limits.invocationTimeoutMs,
+    });
+}
+function admitOptionalLimit(input, fallback, label) {
+    const value = input ?? fallback;
+    if (!Number.isSafeInteger(value) || value <= 0) {
+        throw new TypeError(`${label} must be a positive safe integer.`);
+    }
+    return value;
+}
+function admitRoute(path, label) {
+    if (!path.startsWith('/') || path.includes('?') || path.includes('#')) {
+        throw new TypeError(`${label} must be an absolute path without query or fragment.`);
+    }
+    return path;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,IAAI,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAWhF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,EAAE,WAAW,EAAmB,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,OAAO,IAAI,uBAAuB,EAAE,MAAM,sBAAsB,CAAA;AACzE,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvD,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAyB,MAAM,mBAAmB,CAAA;AAClG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAEpG,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAA;IACtC,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AAC/C,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,OAAsB;IAClD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,CAAC,OAAgC,EAAE,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC;KACtF,CAAC,CAAA;AACJ,CAAC;AAiBD,SAAS,oBAAoB,CAC3B,KAA8B,EAC9B,MAA6B;IAE7B,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAA;IAC9E,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAA;IAChC,MAAM,KAAK,GAAG,IAAI,OAAO,EAA4B,CAAA;IACrD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAA;IAC5C,MAAM,cAAc,GAAG,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,CAAA;IAChG,MAAM,UAAU,GAAG,iBAAiB,CAAC;QACnC,OAAO;QACP,MAAM;QACN,GAAG,MAAM,CAAC,MAAM;QAChB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,SAAS;QACzC,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,kBAAkB,EAAE,CAAC,OAAgB,EAAE,EAAE,CACvC,0BAA0B,CAAC,MAAM,CAAC,WAAY,EAAE,MAAM,CAAC,MAAM,EAAE;oBAC7D,MAAM,EAAE,cAAc,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM;oBACrD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;oBACnE,YAAY,EAAE,MAAM,CAAC,iBAAiB;iBACvC,CAAC,EAAE,QAAQ;aACf,CAAC;KACP,CAAC,CAAA;IAEF,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAC/B,sBAAsB,CAAC;YACrB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG;YACxB,OAAO,EAAE,MAAM,CAAC,SAAU;YAC1B,OAAO;YACP,MAAM;YACN,GAAG,MAAM,CAAC,MAAM;YAChB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;gBAClC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,kBAAkB,EAAE,GAAG,EAAE,CACvB,0BAA0B,CAAC,MAAM,CAAC,WAAY,EAAE,MAAM,CAAC,MAAM,EAAE;wBAC7D,MAAM,EAAE,cAAc,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;wBAC7D,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;wBACnE,YAAY,EAAE,MAAM,CAAC,iBAAiB;qBACvC,CAAC,EAAE,QAAQ;iBACf,CAAC;YACN,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;SACjC,CAAC,CACH,CAAA;IACH,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAE1F,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAA;YAChE,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;gBAChF,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBACxC,eAAe,EAAE,UAAU;aAC5B,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAC1C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAC7D,CAAA;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,WAAW,CACT,GAAG,EACH,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,MAAM,EACN,MAAM,CAAC,MAAM,CAAC,mBAAmB,EACjC,MAAM,CAAC,aAAa,CACrB,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,WAAW,CACT,GAAG,EACH,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,QAAQ,EACf,OAAO,EACP,MAAM,EACN,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAC/B,MAAM,CAAC,iBAAiB,EACxB,cAAc,CACf,CAAA;IACH,CAAC;IAED,GAAG,CAAC,OAAO,CACT,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAClB,IAAI,QAAQ,CAAC,oCAAoC,EAAE;QACjD,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YACxC,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC,CACL,CAAA;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;YACjB,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,IAAsB;gBAClD,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAA;gBAC9E,IAAI,QAAQ,KAAK,SAAS;oBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;gBACxD,IAAI,CAAC;oBACH,OAAO,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACjC,CAAC;wBAAS,CAAC;oBACT,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;gBACvB,CAAC;YACH,CAAC;SACF,CAAC;QACF,KAAK;YACH,MAAM,CAAC,KAAK,EAAE,CAAA;QAChB,CAAC;QACD,KAAK,CAAC,OAA2B;YAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC,CAAA;YAC/E,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACvC,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAsB;IACpD,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,8BAA8B,CAAC,CAAA;IACnF,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,KAAK,SAAS;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,8BAA8B,CAAC,CAAA;IACnE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS;QACT,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B;IACpD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,4BAA4B,CAAC,CAAA;IAC/E,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACzC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAE,iBAAiB,CAAC,CAAA;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACnF,MAAM,aAAa,GACjB,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;IAChG,IAAI,aAAa,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAA;IACtE,CAAC;IACD,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK;QACpD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE,aAAa,CAAC;YAChE,KAAK,EAAE,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/C,CAAC,CAAA;IACR,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACjG,MAAM,WAAW,GACf,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC7F,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACtF,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,eAAe,GACnB,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,KAAK,SAAS;YACpB,CAAC,CAAC,uBAAuB,EAAE;YAC3B,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC9C,IAAI,MAAM,EAAE,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAA;IAC/F,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAA;IAC3E,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,eAAe,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,MAAM,EAAE,aAAa,KAAK,SAAS,CAAC,CAAA;QACvF,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;QAC9D,IAAI,MAAM,KAAK,SAAS,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAA;QAClE,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAA;QAChF,CAAC;QACD,IACE,SAAS,KAAK,SAAS;YACvB,kBAAkB,CAAC,IAAI,CACrB,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CACnF,EACD,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,IAAI;QACJ,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;QAC9B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;QACzD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,iBAAiB,EAAE,iBAAiB,CAClC,IAAI,EACJ,MAAM,EAAE,IAAI,EACZ,MAAM,EACN,SAAS,KAAK,SAAS,EACvB,aAAa,KAAK,SAAS,EAC3B,eAAe,CAChB;QACD,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KAClD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,cAAsB,EACtB,UAA8B,EAC9B,MAAwD,EACxD,SAAkB,EAClB,aAAsB,EACtB,eAAmC;IAEnC,MAAM,YAAY,GAAuB;QACvC,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;SAC/D,CAAC;KACH,CAAA;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,YAAY,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC9F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAe;IAC9C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,mBAAmB,CAAC,IAAI,CAAA;IACzD,OAAO,IAAI,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC1D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA4B;IACtD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,0BAA0B,CAAC,CAAA;IACvE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgD;IACxE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,+BAA+B,CAAC,CAAA;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAgD;IAChF,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,gCAAgC,CAAC,CAAA;IACjF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA6C;IAC5E,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,2CAA2C,CAAC,CAAA;IAC1F,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,WAAW,CAAC,MAA8B;IASjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,GAAG,aAAa,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,oBAAoB,EAAE,kBAAkB,CACtC,MAAM,CAAC,oBAAoB,EAC3B,EAAE,GAAG,IAAI,GAAG,IAAI,EAChB,sBAAsB,CACvB;QACD,2BAA2B,EAAE,kBAAkB,CAC7C,MAAM,CAAC,2BAA2B,EAClC,KAAK,EACL,6BAA6B,CAC9B;QACD,uBAAuB,EAAE,kBAAkB,CACzC,MAAM,CAAC,uBAAuB,EAC9B,MAAM,CAAC,mBAAmB,EAC1B,yBAAyB,CAC1B;QACD,kBAAkB,EAAE,kBAAkB,CACpC,MAAM,CAAC,kBAAkB,EACzB,EAAE,GAAG,IAAI,GAAG,IAAI,EAChB,oBAAoB,CACrB;QACD,oBAAoB,EAAE,kBAAkB,CACtC,MAAM,CAAC,oBAAoB,EAC3B,MAAM,CAAC,mBAAmB,EAC1B,sBAAsB,CACvB;QACD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAyB,EAAE,QAAgB,EAAE,KAAa;IACpF,MAAM,KAAK,GAAG,KAAK,IAAI,QAAQ,CAAA;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa;IAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,sDAAsD,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/transport/body.d.ts

@@ -0,0 +1,5 @@
+export { RequestBodyInvalidError, RequestBodyTooLargeError } from '../errors/index.js';
+/** Read a request body while enforcing the limit before retaining excess bytes. */
+export declare function readBoundedBody(request: Request, maximumBytes: number, signal: AbortSignal): Promise<Uint8Array>;
+export declare function byteLength(input: string | Uint8Array): number;
+//# sourceMappingURL=body.d.ts.map

package/dist/transport/body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../../transport/body.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAEtF,mFAAmF;AACnF,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,UAAU,CAAC,CA0CrB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAE7D"}

package/dist/transport/body.js

@@ -0,0 +1,51 @@
+import { RequestBodyInvalidError, RequestBodyTooLargeError } from '../errors/index.js';
+export { RequestBodyInvalidError, RequestBodyTooLargeError } from '../errors/index.js';
+/** Read a request body while enforcing the limit before retaining excess bytes. */
+export async function readBoundedBody(request, maximumBytes, signal) {
+    const declared = request.headers.get('content-length');
+    if (declared !== null) {
+        const length = Number(declared);
+        if (!Number.isSafeInteger(length) || length < 0) {
+            throw new RequestBodyInvalidError('Content-Length is invalid.');
+        }
+        if (length > maximumBytes)
+            throw new RequestBodyTooLargeError(maximumBytes);
+    }
+    const reader = request.body?.getReader();
+    if (reader === undefined)
+        return new Uint8Array();
+    const chunks = [];
+    let total = 0;
+    const abort = () => void reader.cancel(signal.reason).catch(() => undefined);
+    signal.addEventListener('abort', abort, { once: true });
+    try {
+        while (true) {
+            if (signal.aborted)
+                throw signal.reason;
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            total += value.byteLength;
+            if (total > maximumBytes) {
+                await reader.cancel('request body too large').catch(() => undefined);
+                throw new RequestBodyTooLargeError(maximumBytes);
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        signal.removeEventListener('abort', abort);
+        reader.releaseLock();
+    }
+    const body = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        body.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return body;
+}
+export function byteLength(input) {
+    return typeof input === 'string' ? new TextEncoder().encode(input).byteLength : input.byteLength;
+}
+//# sourceMappingURL=body.js.map

package/dist/transport/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../../transport/body.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAEtF,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAEtF,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAgB,EAChB,YAAoB,EACpB,MAAmB;IAEnB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACtD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,uBAAuB,CAAC,4BAA4B,CAAC,CAAA;QACjE,CAAC;QACD,IAAI,MAAM,GAAG,YAAY;YAAE,MAAM,IAAI,wBAAwB,CAAC,YAAY,CAAC,CAAA;IAC7E,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,CAAA;IACxC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,UAAU,EAAE,CAAA;IAEjD,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC5E,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvD,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAA;YACvC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAC3C,IAAI,IAAI;gBAAE,MAAK;YACf,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;YACzB,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;gBACzB,MAAM,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACpE,MAAM,IAAI,wBAAwB,CAAC,YAAY,CAAC,CAAA;YAClD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC1C,MAAM,CAAC,WAAW,EAAE,CAAA;IACtB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACvB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAA;IAC5B,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAA0B;IACnD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAA;AAClG,CAAC"}

package/dist/transport/codecs.d.ts

@@ -0,0 +1,5 @@
+import { codecs } from '@astrale-os/kernel-protocol';
+export type LoadedCodec = codecs.Codec;
+/** Load the built-in Server representation set before pure Protocol binding selection. */
+export declare function loadCodecs(): Promise<readonly [codecs.Codec, codecs.Codec]>;
+//# sourceMappingURL=codecs.d.ts.map

package/dist/transport/codecs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codecs.d.ts","sourceRoot":"","sources":["../../transport/codecs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEpD,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAA;AAEtC,0FAA0F;AAC1F,wBAAsB,UAAU,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAEjF"}

package/dist/transport/codecs.js

@@ -0,0 +1,6 @@
+import { codecs } from '@astrale-os/kernel-protocol';
+/** Load the built-in Server representation set before pure Protocol binding selection. */
+export async function loadCodecs() {
+    return Object.freeze([codecs.json, await codecs.loadMsgpack()]);
+}
+//# sourceMappingURL=codecs.js.map

package/dist/transport/codecs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codecs.js","sourceRoot":"","sources":["../../transport/codecs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAIpD,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,MAAM,CAAC,WAAW,EAAE,CAAU,CAAC,CAAA;AAC1E,CAAC"}

package/dist/transport/credential.d.ts

@@ -0,0 +1,11 @@
+import { errors } from '@astrale-os/kernel-protocol';
+export type CredentialResult = {
+    readonly ok: true;
+    readonly credential: string | undefined;
+} | {
+    readonly ok: false;
+    readonly error: errors.ErrorPayload;
+};
+/** Resolve exactly zero or one untrusted credential channel without authenticating it. */
+export declare function resolveCredential(envelope: string | undefined, authorization: string | null): CredentialResult;
+//# sourceMappingURL=credential.d.ts.map

package/dist/transport/credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../../transport/credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEpD,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAA;CAAE,CAAA;AAE/D,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,GAC3B,gBAAgB,CAkBlB"}

package/dist/transport/credential.js

@@ -0,0 +1,29 @@
+import { errors } from '@astrale-os/kernel-protocol';
+/** Resolve exactly zero or one untrusted credential channel without authenticating it. */
+export function resolveCredential(envelope, authorization) {
+    if (envelope !== undefined && authorization !== null) {
+        return failure('Credential must be supplied in either the envelope or Authorization, not both.');
+    }
+    if (envelope !== undefined)
+        return { ok: true, credential: envelope };
+    if (authorization === null)
+        return { ok: true, credential: undefined };
+    const match = /^Bearer[ \t]+([^\s]+)$/i.exec(authorization.trim());
+    if (match === null) {
+        return {
+            ok: false,
+            error: {
+                code: errors.CODES.AUTH_INVALID,
+                message: 'Authorization must use one Bearer credential.',
+            },
+        };
+    }
+    return { ok: true, credential: match[1] };
+}
+function failure(message) {
+    return {
+        ok: false,
+        error: { code: errors.CODES.INVALID_REQUEST, message },
+    };
+}
+//# sourceMappingURL=credential.js.map

package/dist/transport/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../transport/credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAMpD,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAC/B,QAA4B,EAC5B,aAA4B;IAE5B,IAAI,QAAQ,KAAK,SAAS,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QACrD,OAAO,OAAO,CAAC,gFAAgF,CAAC,CAAA;IAClG,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;IACrE,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAA;IAEtE,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAA;IAClE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;gBAC/B,OAAO,EAAE,+CAA+C;aACzD;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAA;AAC5C,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,EAAE;KACvD,CAAA;AACH,CAAC"}

package/dist/transport/http/handler.d.ts

@@ -0,0 +1,16 @@
+import type { CorsPolicy } from '../../cors/index.js';
+import type { ActiveOperations } from '../../lifecycle/index.js';
+import type { PublicationSnapshot } from '../../publication/index.js';
+import { type ApplicationHost, type Handler } from '../../invocation/index.js';
+export interface HttpHandlerConfig {
+    readonly handler: Handler;
+    readonly active: ActiveOperations;
+    readonly maximumRequestBytes: number;
+    readonly maximumResponseBytes: number;
+    readonly invocationTimeoutMs: number;
+    readonly cors: CorsPolicy;
+    readonly websocket: boolean;
+    readonly currentPublication?: (request: Request) => PublicationSnapshot | undefined;
+}
+export declare function createHttpHandler(config: HttpHandlerConfig): (request: Request, host?: ApplicationHost) => Promise<Response>;
+//# sourceMappingURL=handler.d.ts.map

package/dist/transport/http/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../transport/http/handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAOrE,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,OAAO,EACb,MAAM,2BAA2B,CAAA;AAMlC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,mBAAmB,GAAG,SAAS,CAAA;CACpF;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,aAClC,OAAO,SAAS,eAAe,KAAG,OAAO,CAAC,QAAQ,CAAC,CAyO3E"}

package/dist/transport/http/handler.js

@@ -0,0 +1,177 @@
+import { codecs, errors, invocation as protocol } from '@astrale-os/kernel-protocol';
+import { classifyError, RequestBodyInvalidError, RequestBodyTooLargeError, } from '../../errors/index.js';
+import { invocationContext, publicationRouteDecision, } from '../../invocation/index.js';
+import { readBoundedBody } from '../body.js';
+import { loadCodecs } from '../codecs.js';
+import { resolveCredential } from '../credential.js';
+import { renderHttpError, renderHttpResult } from './render.js';
+export function createHttpHandler(config) {
+    return async (request, host) => {
+        const cors = (exposedHeaders) => config.cors.response(request, exposedHeaders);
+        const renderError = (id, error, codec, options = {}) => renderHttpError(id, error, codec, cors, {
+            ...options,
+            maximumResponseBytes: config.maximumResponseBytes,
+        });
+        const allow = [
+            ...(config.websocket ? ['GET'] : []),
+            'POST',
+            ...(config.cors.enabled ? ['OPTIONS'] : []),
+        ];
+        if (request.method === 'OPTIONS' && config.cors.enabled) {
+            return noStore(config.cors.preflight(request, {
+                methods: ['POST'],
+                headers: [
+                    'authorization',
+                    'content-type',
+                    protocol.http.TRACEPARENT_FIELD,
+                    protocol.http.TRACESTATE_FIELD,
+                ],
+            }));
+        }
+        if (request.method !== 'POST') {
+            return new Response(null, {
+                status: 405,
+                headers: { ...cors(), allow: allow.join(', '), 'cache-control': 'no-store' },
+            });
+        }
+        const operation = config.active.begin(config.invocationTimeoutMs, request.signal);
+        if (operation === undefined) {
+            return renderError(null, {
+                code: errors.CODES.BACKEND_UNAVAILABLE,
+                message: 'server is unavailable.',
+            }, codecs.json, { status: 503, negotiated: false });
+        }
+        let handedOff = false;
+        try {
+            const supported = await loadCodecs();
+            const contentType = request.headers.get('content-type');
+            const incoming = contentType === null || contentType.trim() === ''
+                ? codecs.json
+                : protocol.http.codecForContentType(contentType, supported);
+            if (incoming === undefined) {
+                return renderError(null, {
+                    code: errors.CODES.UNSUPPORTED,
+                    message: 'Unsupported request Content-Type.',
+                }, codecs.json, { status: 415, negotiated: false });
+            }
+            const outgoing = protocol.http.negotiateResponseCodec(request.headers.get('accept'), incoming, supported);
+            if (outgoing === undefined) {
+                return renderError(null, {
+                    code: errors.CODES.UNSUPPORTED,
+                    message: 'No acceptable response codec is available.',
+                }, incoming, { status: 406 });
+            }
+            let body;
+            try {
+                body = await readBoundedBody(request, config.maximumRequestBytes, operation.signal);
+            }
+            catch (input) {
+                const payload = input instanceof RequestBodyTooLargeError
+                    ? classifyError(input)
+                    : input instanceof RequestBodyInvalidError
+                        ? { code: errors.CODES.PARSE_ERROR, message: 'Request body is invalid.' }
+                        : operation.timedOut
+                            ? {
+                                code: errors.CODES.DEADLINE_EXCEEDED,
+                                message: 'Invocation deadline exceeded.',
+                            }
+                            : operation.signal.aborted
+                                ? { code: errors.CODES.CANCELLED, message: 'Invocation was cancelled.' }
+                                : undefined;
+                if (payload === undefined)
+                    throw input;
+                return renderError(null, payload, outgoing, {
+                    status: input instanceof RequestBodyTooLargeError ? 413 : errors.httpStatusOf(payload),
+                });
+            }
+            let decoded;
+            try {
+                decoded = incoming.decode(body);
+            }
+            catch (input) {
+                if (!(input instanceof codecs.DecodeError))
+                    throw input;
+                return renderError(null, { code: errors.CODES.PARSE_ERROR, message: 'Request body is invalid.' }, outgoing);
+            }
+            let invocation;
+            try {
+                invocation = protocol.decodeRequest(decoded);
+            }
+            catch (input) {
+                return renderError(null, classifyError(input), outgoing);
+            }
+            const publication = config.currentPublication?.(request);
+            if (config.currentPublication !== undefined && publication === undefined) {
+                return renderError(invocation.id, {
+                    code: errors.CODES.BACKEND_UNAVAILABLE,
+                    message: 'Publication is unavailable.',
+                }, outgoing, { status: 503 });
+            }
+            if (invocation.routing?.kind === 'via') {
+                if (publication === undefined) {
+                    return renderError(invocation.id, {
+                        code: errors.CODES.INVALID_REQUEST,
+                        message: 'Publication routing requires a Publication-backed destination.',
+                    }, outgoing);
+                }
+                const decision = publicationRouteDecision(publication.publication, invocation.routing.publication);
+                if (decision.kind === 'rejected') {
+                    return renderError(invocation.id, decision.error, outgoing);
+                }
+            }
+            const credential = resolveCredential(invocation.credential, request.headers.get('authorization'));
+            if (!credential.ok) {
+                return renderError(invocation.id, credential.error, outgoing);
+            }
+            const trace = protocol.http.decodeTraceHeaders(request.headers.get(protocol.http.TRACEPARENT_FIELD), request.headers.get(protocol.http.TRACESTATE_FIELD));
+            try {
+                const result = await config.handler.dispatch(Object.freeze({
+                    call: invocation.call,
+                    ...(trace === undefined ? {} : { trace }),
+                    ...(credential.credential === undefined ? {} : { credential: credential.credential }),
+                    ...(invocation.delegate === undefined ? {} : { delegate: invocation.delegate }),
+                    ...(invocation.routing?.kind === 'via' ? { via: invocation.routing } : {}),
+                    ...(invocation.schema === undefined ? {} : { schema: invocation.schema }),
+                    ...(publication === undefined ? {} : { publication }),
+                    context: invocationContext(operation, config.active, host, undefined, invocation.idempotencyKey),
+                }));
+                const response = renderHttpResult(result, {
+                    id: invocation.id,
+                    codec: outgoing,
+                    cors,
+                    operation,
+                    maximumResponseBytes: config.maximumResponseBytes,
+                });
+                handedOff = result.kind === 'stream';
+                return response;
+            }
+            catch (input) {
+                if (operation.timedOut) {
+                    return renderError(invocation.id, {
+                        code: errors.CODES.DEADLINE_EXCEEDED,
+                        message: 'Invocation deadline exceeded.',
+                    }, outgoing, { status: 504 });
+                }
+                if (operation.signal.aborted) {
+                    return renderError(invocation.id, { code: errors.CODES.CANCELLED, message: 'Invocation was cancelled.' }, outgoing, { status: 408 });
+                }
+                return renderError(invocation.id, classifyError(input), outgoing);
+            }
+        }
+        catch (input) {
+            return renderError(null, classifyError(input), codecs.json, {
+                negotiated: false,
+            });
+        }
+        finally {
+            if (!handedOff)
+                operation.settle();
+        }
+    };
+}
+function noStore(response) {
+    const headers = new Headers(response.headers);
+    headers.set('cache-control', 'no-store');
+    return new Response(response.body, { status: response.status, headers });
+}
+//# sourceMappingURL=handler.js.map