@astrale-os/kernel-server 0.5.0-beta.22 → 0.5.0-beta.25

package/CHANGELOG.md

@@ -21,6 +21,115 @@
 * the first supported V2 release is a coordinated `1.0.0`; see
   [the API migration contract](../api/.spec/MIGRATION.md)
 
+## [0.5.0-beta.25](https://github.com/astrale-os/kernel/compare/kernel-server-v0.5.0-beta.24...kernel-server-v0.5.0-beta.25) (2026-08-29)
+
+
+### Features
+
+* add compiled remote domain serving ([ac9e365](https://github.com/astrale-os/kernel/commit/ac9e36538982a91359712e4cbbc68353ea2cc1a2))
+* add compiled remote Domain serving ([6149628](https://github.com/astrale-os/kernel/commit/6149628820d1294981156ff5b50ceaa522ea0403))
+* add source-qualified Invocation identity ([#331](https://github.com/astrale-os/kernel/issues/331)) ([ac87f3c](https://github.com/astrale-os/kernel/commit/ac87f3c67907290f43b21ca1efe2c3b51541c73d))
+* **api:** ratify token exchange lifecycle ([#519](https://github.com/astrale-os/kernel/issues/519)) ([33831ff](https://github.com/astrale-os/kernel/commit/33831ffac82dc96f5d71488d6f410d1710b85ca0))
+* **authentication:** support live trust replacement ([844b90e](https://github.com/astrale-os/kernel/commit/844b90edcceda1edf6da5991b31d7ce68ebcabc5))
+* **callable:** preserve native binary streams and status ([d14c6f1](https://github.com/astrale-os/kernel/commit/d14c6f13492c14a3363b2c4af59c738034752fa2))
+* **errors:** expose rich manager failure reasons ([b7531f5](https://github.com/astrale-os/kernel/commit/b7531f5f6cbc268eec01d4040f8128b35388ba53))
+* **invocation:** preserve same-schema remote domain calls ([1c54830](https://github.com/astrale-os/kernel/commit/1c54830829c0e49612f354f5c4b8d4a12cc7e22c))
+* remove Property visibility and cut DSL V2 ([#518](https://github.com/astrale-os/kernel/issues/518)) ([4d99e8f](https://github.com/astrale-os/kernel/commit/4d99e8f0837136cf6be257ab3a6df666b62e06b5))
+* **runtime:** expose actionable failure details ([d602442](https://github.com/astrale-os/kernel/commit/d6024422d765806ba58f1f9cc97d7f572b4fd705))
+* **runtime:** expose actionable failure details ([72498e0](https://github.com/astrale-os/kernel/commit/72498e0898a014c79d78a3ddf6035de0d4b2c43e))
+* **runtime:** expose rich Host Manager failure reasons ([15eb8a7](https://github.com/astrale-os/kernel/commit/15eb8a793704665ed3f5ea1900f3d60cb37cd281))
+* **runtime:** preserve remote Domain calls across same-schema deployments ([40c237b](https://github.com/astrale-os/kernel/commit/40c237bc4877068ba94b53a29d916e7c8f633f1e))
+* **runtime:** support buffered and streaming binary ([fcd73f9](https://github.com/astrale-os/kernel/commit/fcd73f99c75963257b595449b1a0e0e4e234a05d))
+* **runtime:** support live Authentication Trust replacement ([db66131](https://github.com/astrale-os/kernel/commit/db661317c75c5c29232ce9b4747acb1c9171fe00))
+
+
+### Bug Fixes
+
+* align the official kernel package cohort ([#371](https://github.com/astrale-os/kernel/issues/371)) ([30fda63](https://github.com/astrale-os/kernel/commit/30fda63157bbaf756af2d46efed4e2fc5bc17d4b))
+* **api:** finish binary delivery taxonomy ([#462](https://github.com/astrale-os/kernel/issues/462)) ([2fce294](https://github.com/astrale-os/kernel/commit/2fce29427449280e2629d07817780b121f6c6b79))
+* **api:** retain visibility-free DSL as V1 ([#526](https://github.com/astrale-os/kernel/issues/526)) ([e24c1ea](https://github.com/astrale-os/kernel/commit/e24c1ea257e8567d9bd33c6ada0de63bb346a496))
+* **core:** preserve callable identity and runtime boundaries ([#394](https://github.com/astrale-os/kernel/issues/394)) ([ad67dad](https://github.com/astrale-os/kernel/commit/ad67dad84aef3c8b79f769009595ea1f1229026b))
+* **deps:** refresh the Kernel dependency cohort ([#393](https://github.com/astrale-os/kernel/issues/393)) ([883e7bb](https://github.com/astrale-os/kernel/commit/883e7bb7ce17eecb7dad1c94ad2089c576ba3746))
+* **host:** recover interrupted command generations ([6f8170d](https://github.com/astrale-os/kernel/commit/6f8170dac62c1b0c1354e479130abb536f6388c8))
+* **packages:** keep workspace guard private ([e0ba76c](https://github.com/astrale-os/kernel/commit/e0ba76c5ae163245e31115e2a72e0663db0f5320))
+* **packages:** keep workspace guard private ([d260a52](https://github.com/astrale-os/kernel/commit/d260a52329cde5ce4b0260c43a3bbf28cb78f408))
+* **packages:** keep workspace guard private ([a3e82ec](https://github.com/astrale-os/kernel/commit/a3e82ec671f07252a5966b4de988e275e4078b8c))
+* **packages:** preserve compatible beta dependency floors ([2731605](https://github.com/astrale-os/kernel/commit/273160597ad0350b78f3a9e82d563a3e39f0bbe1))
+* **packages:** preserve compatible beta dependency floors ([9075acd](https://github.com/astrale-os/kernel/commit/9075acd455cb711ef185902c6a454d7bcd9f5791))
+* **protocol:** enforce publication media type ([#493](https://github.com/astrale-os/kernel/issues/493)) ([9b79abf](https://github.com/astrale-os/kernel/commit/9b79abfa0885e7b7b3ca514d59de3610ecef320f))
+* publish a TypeScript-compatible cohort ([#406](https://github.com/astrale-os/kernel/issues/406)) ([f1a0cd0](https://github.com/astrale-os/kernel/commit/f1a0cd09f2f0b4498f9fa8924b2e319cac6552b7))
+* **release:** add package repository metadata ([8238077](https://github.com/astrale-os/kernel/commit/8238077d47a96c0f7b50a1bae8769fe4faab45b7))
+* **release:** align the published beta cohort ([8f2dc4a](https://github.com/astrale-os/kernel/commit/8f2dc4a7156aeee4dc9034624d2ffa2b3583d5b8))
+* **release:** harden public package closure ([#397](https://github.com/astrale-os/kernel/issues/397)) ([5a5886f](https://github.com/astrale-os/kernel/commit/5a5886fe66c7b3ea0a014766a5df8c04fd93efeb))
+* **release:** publish exact Kernel cohort edges ([04629b8](https://github.com/astrale-os/kernel/commit/04629b89515aa665ede2f9fe058888bad45ab896))
+* **release:** publish exact Kernel cohort edges ([14f2c52](https://github.com/astrale-os/kernel/commit/14f2c52329874fdad43114a964521599c8313eab))
+* **runtime:** clarify Domain transition Foundation without narrowing behavior ([bce2184](https://github.com/astrale-os/kernel/commit/bce21848e645d2570cf056d56cc0d4489c656d14))
+* **runtime:** close domain transition foundation drift ([310f95f](https://github.com/astrale-os/kernel/commit/310f95fadfb1a85fb19ac52b69a58427d22a5788))
+* **runtime:** qualify local Domain production journey ([d35b1be](https://github.com/astrale-os/kernel/commit/d35b1be05b2463eb51a6d93f8ea1811fd489a7ab))
+* **runtime:** qualify local Domain production journey ([396351a](https://github.com/astrale-os/kernel/commit/396351ae2fcfe67ef49f624e4ef0214bad2448c3))
+* **server:** preserve compatible remote schema continuity ([#508](https://github.com/astrale-os/kernel/issues/508)) ([306a275](https://github.com/astrale-os/kernel/commit/306a275dd7253810085f5b8c86cef15fffd95089))
+* **server:** project invocation capacity through health ([bb09c78](https://github.com/astrale-os/kernel/commit/bb09c78203c45d9e1cde416ac5ebe28e1123092c))
+* **system:** clear Codegraph diagnostic debt ([f7a8e1f](https://github.com/astrale-os/kernel/commit/f7a8e1f5c5694d9c3c45d95fde184f0d5f2c7343))
+* **system:** clear Codegraph diagnostic debt ([45f86a9](https://github.com/astrale-os/kernel/commit/45f86a9ce14a224efed0e07966a5df8d7a892078))
+
+
+### Performance Improvements
+
+* **operations:** release only the Host production closure ([3f9d61a](https://github.com/astrale-os/kernel/commit/3f9d61afe6b4f19f4dfd0bd5e454e38f951aaf2a))
+* **server:** cache successful CORS preflights ([#514](https://github.com/astrale-os/kernel/issues/514)) ([a9a3d7c](https://github.com/astrale-os/kernel/commit/a9a3d7ccb4c6e5ca763e5d0798a3c905f5936b28))
+
+
+### Documentation
+
+* **api:** finish buffered and streaming binary vocabulary ([af00cda](https://github.com/astrale-os/kernel/commit/af00cda06b1744b5120cdd3ea3bc39ca58efcceb))
+* **api:** finish buffered and streaming binary vocabulary ([11a28be](https://github.com/astrale-os/kernel/commit/11a28bec361ead8c0ae32e55f545c63042bb1539))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @astrale-os/kernel-core bumped to 0.9.0-beta.22
+    * @astrale-os/kernel-dsl bumped to 0.2.0-beta.17
+    * @astrale-os/kernel-protocol bumped to 0.5.0-beta.23
+
+## [0.5.0-beta.24](https://github.com/astrale-os/kernel/compare/kernel-server-v0.5.0-beta.23...kernel-server-v0.5.0-beta.24) (2026-08-29)
+
+
+### Features
+
+* **api:** ratify token exchange lifecycle ([#519](https://github.com/astrale-os/kernel/issues/519)) ([33831ff](https://github.com/astrale-os/kernel/commit/33831ffac82dc96f5d71488d6f410d1710b85ca0))
+* remove Property visibility and cut DSL V2 ([#518](https://github.com/astrale-os/kernel/issues/518)) ([4d99e8f](https://github.com/astrale-os/kernel/commit/4d99e8f0837136cf6be257ab3a6df666b62e06b5))
+
+
+### Bug Fixes
+
+* **api:** retain visibility-free DSL as V1 ([#526](https://github.com/astrale-os/kernel/issues/526)) ([e24c1ea](https://github.com/astrale-os/kernel/commit/e24c1ea257e8567d9bd33c6ada0de63bb346a496))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @astrale-os/kernel-core bumped to 0.9.0-beta.21
+    * @astrale-os/kernel-dsl bumped to 0.2.0-beta.16
+    * @astrale-os/kernel-protocol bumped to 0.5.0-beta.22
+
+## [0.5.0-beta.23](https://github.com/astrale-os/kernel/compare/kernel-server-v0.5.0-beta.22...kernel-server-v0.5.0-beta.23) (2026-08-28)
+
+
+### Performance Improvements
+
+* **server:** cache successful CORS preflights ([#514](https://github.com/astrale-os/kernel/issues/514)) ([a9a3d7c](https://github.com/astrale-os/kernel/commit/a9a3d7ccb4c6e5ca763e5d0798a3c905f5936b28))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @astrale-os/kernel-core bumped to 0.9.0-beta.20
+    * @astrale-os/kernel-protocol bumped to 0.5.0-beta.21
+
 ## [0.5.0-beta.22](https://github.com/astrale-os/kernel/compare/kernel-server-v0.5.0-beta.21...kernel-server-v0.5.0-beta.22) (2026-08-27)
 
 

package/dist/cors/cors.js

@@ -1,5 +1,6 @@
 /** Request-aware CORS admission shared by every Server-owned HTTP surface. */
 const TOKEN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u;
+const PREFLIGHT_MAX_AGE_SECONDS = 24 * 60 * 60;
 /** Admit one immutable policy. `false` delegates the complete concern to an outer application. */
 export function prepareCors(input) {
     if (input === false)
@@ -64,6 +65,7 @@ export function prepareCors(input) {
             const allowedHeaders = requestedHeaders.length > 0 ? requestedHeaders : [...routeHeaders];
             const output = new Headers(response(request));
             output.set('access-control-allow-methods', [...allowedMethods, 'OPTIONS'].join(', '));
+            output.set('access-control-max-age', String(PREFLIGHT_MAX_AGE_SECONDS));
             if (allowedHeaders.length > 0) {
                 output.set('access-control-allow-headers', allowedHeaders.join(', '));
             }

package/dist/issuer/exchange.js

@@ -60,6 +60,11 @@ export function mount(app, issuer, provider, cors, active, timeoutMs) {
                 }
                 throw cause;
             }
+            if (operation.timedOut) {
+                return respond(error('DEADLINE_EXCEEDED', 'Token-exchange deadline elapsed.'));
+            }
+            if (operation.signal.aborted)
+                throw operation.signal.reason;
             let output;
             try {
                 output = await provider.exchange(admitted, { signal: operation.signal });
@@ -68,6 +73,8 @@ export function mount(app, issuer, provider, cors, active, timeoutMs) {
                 if (operation.timedOut) {
                     return respond(error('DEADLINE_EXCEEDED', 'Token-exchange deadline elapsed.'));
                 }
+                if (operation.signal.aborted)
+                    throw operation.signal.reason;
                 if (cause instanceof errors.ProtocolError && PROVIDER_CODES.has(cause.payload.code)) {
                     return respond(exchangeProtocol.acceptErrorResponse({ error: cause.payload }));
                 }
@@ -76,6 +83,8 @@ export function mount(app, issuer, provider, cors, active, timeoutMs) {
             if (operation.timedOut) {
                 return respond(error('DEADLINE_EXCEEDED', 'Token-exchange deadline elapsed.'));
             }
+            if (operation.signal.aborted)
+                throw operation.signal.reason;
             const response = exchangeProtocol.acceptResponse(output);
             if (inspectCredential(response.token).claims.exp !== response.expiresAt) {
                 throw new TypeError('Token-exchange provider returned inconsistent expiry evidence.');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-server",
-  "version": "0.5.0-beta.22",
+  "version": "0.5.0-beta.25",
   "description": "Portable HTTP and WebSocket boundary for Astrale invocation, publication, installation, and issuer protocols",
   "license": "Apache-2.0",
   "repository": {
@@ -33,9 +33,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-core": "0.9.0-beta.19",
-    "@astrale-os/kernel-dsl": "0.2.0-beta.15",
-    "@astrale-os/kernel-protocol": "0.5.0-beta.20",
+    "@astrale-os/kernel-core": "0.9.0-beta.22",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.17",
+    "@astrale-os/kernel-protocol": "0.5.0-beta.23",
     "hono": "^4.6.20",
     "msgpackr": "^2.0.5"
   },