@astrale-os/kernel-server 0.5.0-beta.6 → 0.5.0-beta.61

package/dist/capture.d.ts

@@ -1,3 +1,2 @@
 /** Capture one receiver-bound method while preserving the capability's exact method type. */
 export declare function captureMethod<Receiver extends object, Name extends keyof Receiver>(input: Receiver, name: Name, invalidMessage: string): Receiver[Name];
-//# sourceMappingURL=capture.d.ts.map

package/dist/capture.js

@@ -7,4 +7,3 @@ export function captureMethod(input, name, invalidMessage) {
         throw new TypeError(invalidMessage);
     return method.bind(input);
 }
-//# sourceMappingURL=capture.js.map

package/dist/cors/cors.d.ts

@@ -19,4 +19,3 @@ export interface CorsPolicy {
 }
 /** Admit one immutable policy. `false` delegates the complete concern to an outer application. */
 export declare function prepareCors(input: CorsConfig | false | undefined): CorsPolicy;
-//# sourceMappingURL=cors.d.ts.map

package/dist/cors/cors.js

@@ -1,5 +1,6 @@
 /** Request-aware CORS admission shared by every Server-owned HTTP surface. */
 const TOKEN = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/u;
+const PREFLIGHT_MAX_AGE_SECONDS = 24 * 60 * 60;
 /** Admit one immutable policy. `false` delegates the complete concern to an outer application. */
 export function prepareCors(input) {
     if (input === false)
@@ -64,6 +65,7 @@ export function prepareCors(input) {
             const allowedHeaders = requestedHeaders.length > 0 ? requestedHeaders : [...routeHeaders];
             const output = new Headers(response(request));
             output.set('access-control-allow-methods', [...allowedMethods, 'OPTIONS'].join(', '));
+            output.set('access-control-max-age', String(PREFLIGHT_MAX_AGE_SECONDS));
             if (allowedHeaders.length > 0) {
                 output.set('access-control-allow-headers', allowedHeaders.join(', '));
             }
@@ -133,4 +135,3 @@ function appendVary(headers, value) {
     names.add(value);
     headers.set('vary', [...names].join(', '));
 }
-//# sourceMappingURL=cors.js.map

package/dist/cors/index.d.ts

@@ -1,3 +1,2 @@
 export { prepareCors, type CorsPolicy, type CorsRoute } from './cors.js';
 export type { CorsConfig } from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/cors/index.js

@@ -1,2 +1 @@
 export { prepareCors } from './cors.js';
-//# sourceMappingURL=index.js.map

package/dist/cors/types.d.ts

@@ -9,4 +9,3 @@ export interface CorsConfig {
     /** Emit Access-Control-Allow-Credentials; requires one explicit origin rather than `*`. */
     readonly credentials?: boolean;
 }
-//# sourceMappingURL=types.d.ts.map

package/dist/cors/types.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=types.js.map

package/dist/errors/availability.d.ts

@@ -8,4 +8,3 @@ export declare class IssuerKeysUnavailableError extends Error {
     readonly name = "IssuerKeysUnavailableError";
     constructor(message?: string, options?: ErrorOptions);
 }
-//# sourceMappingURL=availability.d.ts.map

package/dist/errors/availability.js

@@ -12,4 +12,3 @@ export class IssuerKeysUnavailableError extends Error {
         super(message, options);
     }
 }
-//# sourceMappingURL=availability.js.map

package/dist/errors/classify.d.ts

@@ -1,4 +1,3 @@
 import * as errors from '@astrale-os/kernel-protocol/errors';
 /** Convert only errors owned by an admitted Server or Protocol boundary into safe public data. */
 export declare function classifyError(input: unknown): errors.ErrorPayload;
-//# sourceMappingURL=classify.d.ts.map

package/dist/errors/classify.js

@@ -39,4 +39,3 @@ function reportInternal(input) {
         code: stableCode(input),
     });
 }
-//# sourceMappingURL=classify.js.map

package/dist/errors/index.d.ts

@@ -2,4 +2,3 @@ export { DeliveryUnavailableError, IssuerKeysUnavailableError } from './availabi
 export { classifyError } from './classify.js';
 export { RequestBodyInvalidError, RequestBodyTooLargeError } from './request-body.js';
 export { ResponseBodyTooLargeError } from './response-body.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/errors/index.js

@@ -2,4 +2,3 @@ export { DeliveryUnavailableError, IssuerKeysUnavailableError } from './availabi
 export { classifyError } from './classify.js';
 export { RequestBodyInvalidError, RequestBodyTooLargeError } from './request-body.js';
 export { ResponseBodyTooLargeError } from './response-body.js';
-//# sourceMappingURL=index.js.map

package/dist/errors/request-body.d.ts

@@ -5,4 +5,3 @@ export declare class RequestBodyTooLargeError extends Error {
 export declare class RequestBodyInvalidError extends Error {
     constructor(message: string);
 }
-//# sourceMappingURL=request-body.d.ts.map

package/dist/errors/request-body.js

@@ -12,4 +12,3 @@ export class RequestBodyInvalidError extends Error {
         this.name = 'RequestBodyInvalidError';
     }
 }
-//# sourceMappingURL=request-body.js.map

package/dist/errors/response-body.d.ts

@@ -2,4 +2,3 @@ export declare class ResponseBodyTooLargeError extends Error {
     readonly maximumBytes: number;
     constructor(maximumBytes: number);
 }
-//# sourceMappingURL=response-body.d.ts.map

package/dist/errors/response-body.js

@@ -6,4 +6,3 @@ export class ResponseBodyTooLargeError extends Error {
         this.name = 'ResponseBodyTooLargeError';
     }
 }
-//# sourceMappingURL=response-body.js.map

package/dist/index.d.ts

@@ -3,4 +3,3 @@ export { DeliveryUnavailableError, IssuerKeysUnavailableError } from './errors/i
 export { preparePublicationSnapshot } from './publication/index.js';
 export * as publication from './publication/index.js';
 export type { Application, ApplicationHost, CorsConfig, ExecutionControl, Handler, HandlerRequest, HandlerResult, HandlerStream, HealthProbe, InvocationContext, InvocationSource, RequestBackground, RequestEvidence, RequestSleep, Issuer, exchange, PreparedServer, PublicationSnapshot, PublicationSnapshotInput, PublicationSource, Server, ServerCloseOptions, ServerConfig, ServerLimits, ServerOptions, WebSocketAdapter, WebSocketHandlers, WebSocketLike, WebSocketUpgradeOptions, } from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -2,4 +2,3 @@ export { createServer, prepareServer } from './server.js';
 export { DeliveryUnavailableError, IssuerKeysUnavailableError } from './errors/index.js';
 export { preparePublicationSnapshot } from './publication/index.js';
 export * as publication from './publication/index.js';
-//# sourceMappingURL=index.js.map

package/dist/invocation/context.d.ts

@@ -1,7 +1,6 @@
-import type { invocation as protocol } from '@astrale-os/kernel-protocol';
+import type * as protocol from '@astrale-os/kernel-protocol/invocation';
 import type { ActiveOperation, ActiveOperations } from '../lifecycle/index.js';
 import type { ApplicationHost, InvocationContext } from './types.js';
 export declare function invocationContext(assigned: protocol.InvocationId, operation: ActiveOperation, active: ActiveOperations, host?: ApplicationHost, requestBody?: Uint8Array, idempotencyKey?: protocol.IdempotencyKey): InvocationContext;
 /** Default non-durable timer used when the application host supplies no timer capability. */
 export declare function defaultSleep(durationMs: number): Promise<void>;
-//# sourceMappingURL=context.d.ts.map

package/dist/invocation/context.js

@@ -58,4 +58,3 @@ function sleepDuration(input) {
     }
     return input;
 }
-//# sourceMappingURL=context.js.map

package/dist/invocation/identity.d.ts

@@ -1,5 +1,5 @@
 import type { IssuerId } from '@astrale-os/kernel-core/auth';
-import type { invocation as protocol } from '@astrale-os/kernel-protocol';
+import type * as protocol from '@astrale-os/kernel-protocol/invocation';
 /** Injected source-owned identity allocator captured before Server readiness. */
 export interface InvocationSource {
     readonly source: IssuerId;
@@ -7,4 +7,3 @@ export interface InvocationSource {
 }
 export type NextInvocationId = () => protocol.InvocationId;
 export declare function captureInvocationSource(input: InvocationSource): NextInvocationId;
-//# sourceMappingURL=identity.d.ts.map

package/dist/invocation/identity.js

@@ -1,5 +1,5 @@
 import { issuer } from '@astrale-os/kernel-core/auth';
-import { invocation as protocolInvocation } from '@astrale-os/kernel-protocol';
+import * as protocolInvocation from '@astrale-os/kernel-protocol/invocation';
 import { captureMethod } from '../capture.js';
 export function captureInvocationSource(input) {
     if (input === null || typeof input !== 'object') {
@@ -9,4 +9,3 @@ export function captureInvocationSource(input) {
     const next = captureMethod(input, 'next', 'Server Invocation source is invalid.');
     return () => protocolInvocation.acceptInvocationId({ source, id: next() });
 }
-//# sourceMappingURL=identity.js.map

package/dist/invocation/index.d.ts

@@ -2,4 +2,3 @@ export { defaultSleep, invocationContext } from './context.js';
 export { captureInvocationSource, type InvocationSource, type NextInvocationId, } from './identity.js';
 export { publicationRouteDecision, type PublicationRouteDecision } from './publication-route.js';
 export type { ApplicationHost, ExecutionControl, Handler, HandlerRequest, HandlerResult, HandlerStream, InvocationContext, RequestBackground, RequestEvidence, RequestSleep, } from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/invocation/index.js

@@ -1,4 +1,3 @@
 export { defaultSleep, invocationContext } from './context.js';
 export { captureInvocationSource, } from './identity.js';
 export { publicationRouteDecision } from './publication-route.js';
-//# sourceMappingURL=index.js.map

package/dist/invocation/publication-route.d.ts

@@ -2,13 +2,10 @@ import type { ErrorPayload } from '@astrale-os/kernel-protocol/errors';
 import type { Publication } from '@astrale-os/kernel-protocol/publication/publication';
 import type { PublicationRef } from '@astrale-os/kernel-protocol/publication/reference';
 export type PublicationRouteDecision = {
-    readonly kind: 'exact';
-} | {
-    readonly kind: 'same-schema';
+    readonly kind: 'admitted';
 } | {
     readonly kind: 'rejected';
     readonly error: ErrorPayload;
 };
 /** Compare untrusted installed routing evidence with the one captured serving Publication. */
 export declare function publicationRouteDecision(current: Publication, installed: PublicationRef): PublicationRouteDecision;
-//# sourceMappingURL=publication-route.d.ts.map

package/dist/invocation/publication-route.js

@@ -1,22 +1,13 @@
 import { CODES } from '@astrale-os/kernel-protocol/errors';
-import { SCHEMA_UPGRADE_REQUIRED, SERVICE_TRUST_REQUIRED, } from '@astrale-os/kernel-protocol/invocation/service-reason';
+import { SERVICE_TRUST_REQUIRED } from '@astrale-os/kernel-protocol/invocation/service-reason';
 import { compareReference } from '@astrale-os/kernel-protocol/publication/reference';
 /** Compare untrusted installed routing evidence with the one captured serving Publication. */
 export function publicationRouteDecision(current, installed) {
     switch (compareReference(current, installed)) {
         case 'exact':
-            return Object.freeze({ kind: 'exact' });
         case 'same-schema':
-            return Object.freeze({ kind: 'same-schema' });
         case 'schema-drift':
-            return rejected('Installed Domain schema requires an explicit upgrade.', Object.freeze({
-                code: SCHEMA_UPGRADE_REQUIRED,
-                details: Object.freeze({
-                    origin: installed.origin,
-                    installedRevision: installed.revision,
-                    candidateRevision: current.schema.revision,
-                }),
-            }));
+            return Object.freeze({ kind: 'admitted' });
         case 'identity-drift':
             return rejected('Installed Domain Service identity requires explicit trust.', Object.freeze({
                 code: SERVICE_TRUST_REQUIRED,
@@ -42,4 +33,3 @@ function rejected(message, data) {
         error: Object.freeze({ code: CODES.CONFLICT, message, data }),
     });
 }
-//# sourceMappingURL=publication-route.js.map

package/dist/invocation/types.d.ts

@@ -1,7 +1,7 @@
 import type { CredentialInput } from '@astrale-os/kernel-core/auth';
-import type { CallableResult } from '@astrale-os/kernel-core/domain';
+import type { CallableResult } from '@astrale-os/kernel-core/callable';
 import type { Value } from '@astrale-os/kernel-dsl/value';
-import type { invocation as protocol } from '@astrale-os/kernel-protocol';
+import type * as protocol from '@astrale-os/kernel-protocol/invocation';
 import type { PublicationSnapshot } from '../publication/index.js';
 /** Optional platform retention and timer adaptation for one Fetch invocation. */
 export interface ApplicationHost {
@@ -49,7 +49,7 @@ export interface HandlerRequest {
     readonly credential?: CredentialInput;
     /** Source-only effective delegation forwarded unchanged to Runtime. */
     readonly delegate?: protocol.Delegate;
-    /** Destination routing witness forwarded after exact or same-schema Server admission. */
+    /** Destination routing witness forwarded after same-origin, same-identity Server admission. */
     readonly via?: protocol.Via;
     /** Source-only local-target or remote-revision Schema Registration precondition. */
     readonly schema?: protocol.SchemaTarget;
@@ -60,4 +60,3 @@ export interface HandlerRequest {
 export interface Handler {
     dispatch(request: HandlerRequest): Promise<HandlerResult>;
 }
-//# sourceMappingURL=types.d.ts.map

package/dist/invocation/types.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=types.js.map

package/dist/issuer/exchange.d.ts

@@ -10,4 +10,3 @@ export interface Provider {
 }
 export declare function capture(input: Provider): Provider;
 export declare function mount(app: ServerRouter, issuer: string, provider: Provider, cors: CorsPolicy, active: ActiveOperations, timeoutMs: number): void;
-//# sourceMappingURL=exchange.d.ts.map

package/dist/issuer/exchange.js

@@ -60,6 +60,11 @@ export function mount(app, issuer, provider, cors, active, timeoutMs) {
                 }
                 throw cause;
             }
+            if (operation.timedOut) {
+                return respond(error('DEADLINE_EXCEEDED', 'Token-exchange deadline elapsed.'));
+            }
+            if (operation.signal.aborted)
+                throw operation.signal.reason;
             let output;
             try {
                 output = await provider.exchange(admitted, { signal: operation.signal });
@@ -68,6 +73,8 @@ export function mount(app, issuer, provider, cors, active, timeoutMs) {
                 if (operation.timedOut) {
                     return respond(error('DEADLINE_EXCEEDED', 'Token-exchange deadline elapsed.'));
                 }
+                if (operation.signal.aborted)
+                    throw operation.signal.reason;
                 if (cause instanceof errors.ProtocolError && PROVIDER_CODES.has(cause.payload.code)) {
                     return respond(exchangeProtocol.acceptErrorResponse({ error: cause.payload }));
                 }
@@ -76,6 +83,8 @@ export function mount(app, issuer, provider, cors, active, timeoutMs) {
             if (operation.timedOut) {
                 return respond(error('DEADLINE_EXCEEDED', 'Token-exchange deadline elapsed.'));
             }
+            if (operation.signal.aborted)
+                throw operation.signal.reason;
             const response = exchangeProtocol.acceptResponse(output);
             if (inspectCredential(response.token).claims.exp !== response.expiresAt) {
                 throw new TypeError('Token-exchange provider returned inconsistent expiry evidence.');
@@ -134,4 +143,3 @@ function json(value, status, request, cors, extra) {
     }
     return new Response(JSON.stringify(value), { status, headers });
 }
-//# sourceMappingURL=exchange.js.map

package/dist/issuer/index.d.ts

@@ -1,4 +1,3 @@
 export { admitIssuer, issuerRouteReservations, mountIssuer, type IssuerRouteReservation, } from './routes.js';
 export type * as exchange from './exchange.js';
 export type { Issuer } from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/issuer/index.js

@@ -1,2 +1 @@
 export { admitIssuer, issuerRouteReservations, mountIssuer, } from './routes.js';
-//# sourceMappingURL=index.js.map

package/dist/issuer/routes.d.ts

@@ -11,4 +11,3 @@ export declare function issuerRouteReservations(input: Issuer, tokenExchange?: b
 export declare function mountIssuer(app: ServerRouter, input: Issuer, cors: CorsPolicy, active: ActiveOperations, timeoutMs: number, tokenExchange?: Provider): void;
 /** Admit static discovery configuration before Runtime Boot performs any durable work. */
 export declare function admitIssuer(input: Issuer): Issuer;
-//# sourceMappingURL=routes.d.ts.map

package/dist/issuer/routes.js

@@ -147,4 +147,3 @@ export function admitIssuer(input) {
             }),
     });
 }
-//# sourceMappingURL=routes.js.map

package/dist/issuer/types.d.ts

@@ -9,4 +9,3 @@ export interface Issuer {
     /** Optional hosted-key discovery for issuers below `<issuer>/iss/:thumbprint`. */
     readonly loadIssuerPublicKeys?: (issuer: IssuerId, signal: AbortSignal) => Promise<readonly JsonWebKey[]>;
 }
-//# sourceMappingURL=types.d.ts.map

package/dist/issuer/types.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=types.js.map

package/dist/lifecycle/active.d.ts

@@ -26,6 +26,8 @@ export declare class ActiveOperations {
     private changed;
     constructor(maximumConcurrentOperations: number);
     get isAccepting(): boolean;
+    /** Whether a newly arriving operation can be admitted without semantic dispatch. */
+    get isAvailable(): boolean;
     begin(timeoutMs: number, externalSignal?: AbortSignal): ActiveOperation | undefined;
     attachSocket(socket: ActiveSocket): boolean;
     detachSocket(socket: ActiveSocket): void;
@@ -37,4 +39,3 @@ export declare class ActiveOperations {
     private closeSockets;
 }
 export {};
-//# sourceMappingURL=active.d.ts.map

package/dist/lifecycle/active.js

@@ -13,10 +13,13 @@ export class ActiveOperations {
     get isAccepting() {
         return this.accepting;
     }
+    /** Whether a newly arriving operation can be admitted without semantic dispatch. */
+    get isAvailable() {
+        return this.accepting && this.operations.size < this.maximumConcurrentOperations;
+    }
     begin(timeoutMs, externalSignal) {
-        if (!this.accepting || this.operations.size >= this.maximumConcurrentOperations) {
+        if (!this.isAvailable)
             return undefined;
-        }
         const operation = new Operation(Date.now() + timeoutMs, () => {
             this.operations.delete(operation);
             this.changed?.();
@@ -197,4 +200,3 @@ async function settleCancellation(cancel, reason) {
 function abortReason(signal) {
     return signal.reason instanceof Error ? signal.reason.message : 'operation cancelled';
 }
-//# sourceMappingURL=active.js.map

package/dist/lifecycle/index.d.ts

@@ -1,2 +1 @@
 export { ActiveOperations, type ActiveOperation, type ActiveSocket } from './active.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/lifecycle/index.js

@@ -1,2 +1 @@
 export { ActiveOperations } from './active.js';
-//# sourceMappingURL=index.js.map

package/dist/publication/delivery/handler.d.ts

@@ -7,4 +7,3 @@ export interface Limits {
 }
 /** Serve one delivery request against the exact Publication snapshot that selected its URL. */
 export declare function handleDelivery(request: Request, snapshot: PreparedPublicationSnapshot, provider: Provider | undefined, active: ActiveOperations, limits: Limits, cors: Readonly<Record<string, string>>): Promise<Response>;
-//# sourceMappingURL=handler.d.ts.map

package/dist/publication/delivery/handler.js

@@ -1,4 +1,5 @@
-import { codecs, publication as protocolPublication } from '@astrale-os/kernel-protocol';
+import * as codecs from '@astrale-os/kernel-protocol/codecs';
+import * as protocolPublication from '@astrale-os/kernel-protocol/publication';
 import { DeliveryUnavailableError } from '../../errors/index.js';
 import { RequestBodyInvalidError, RequestBodyTooLargeError } from '../../errors/index.js';
 import { readBoundedBody } from '../../transport/index.js';
@@ -124,4 +125,3 @@ function encodedSize(input) {
 function toBody(input) {
     return input.buffer.slice(input.byteOffset, input.byteOffset + input.byteLength);
 }
-//# sourceMappingURL=handler.js.map

package/dist/publication/delivery/index.d.ts

@@ -1,3 +1,2 @@
 export { handleDelivery, type Limits } from './handler.js';
 export type { Context, Provider } from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/publication/delivery/index.js

@@ -1,2 +1 @@
 export { handleDelivery } from './handler.js';
-//# sourceMappingURL=index.js.map

package/dist/publication/delivery/types.d.ts

@@ -1,4 +1,4 @@
-import type { publication } from '@astrale-os/kernel-protocol';
+import type * as publication from '@astrale-os/kernel-protocol/publication';
 export interface Context {
     /** Omitted for a public endpoint; otherwise the exact admitted retrieval credential. */
     readonly token?: publication.delivery.Token;
@@ -9,4 +9,3 @@ export interface Provider {
     /** Throw DeliveryUnavailableError only for an expected dependency outage. */
     create(request: publication.delivery.Request, context: Context): Promise<publication.delivery.Delivery>;
 }
-//# sourceMappingURL=types.d.ts.map

package/dist/publication/delivery/types.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=types.js.map

package/dist/publication/index.d.ts

@@ -1,4 +1,3 @@
 export { preparePublicationSnapshot, readPreparedPublicationSnapshot, type PreparedPublicationSnapshot, } from './snapshot.js';
 export type { PublicationSnapshot, PublicationSnapshotInput, PublicationSource } from './types.js';
 export * as delivery from './delivery/index.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/publication/index.js

@@ -1,3 +1,2 @@
 export { preparePublicationSnapshot, readPreparedPublicationSnapshot, } from './snapshot.js';
 export * as delivery from './delivery/index.js';
-//# sourceMappingURL=index.js.map

package/dist/publication/snapshot.d.ts

@@ -1,5 +1,6 @@
-import type { schema } from '@astrale-os/kernel-dsl/v1';
-import type { publication, routes } from '@astrale-os/kernel-protocol';
+import type { Domain } from '@astrale-os/kernel-dsl/v1';
+import type * as publication from '@astrale-os/kernel-protocol/publication';
+import type * as routes from '@astrale-os/kernel-protocol/routes';
 import type { PublicationSnapshot, PublicationSnapshotInput } from './types.js';
 export interface PreparedPublicationSnapshot {
     readonly snapshot: PublicationSnapshot;
@@ -7,10 +8,9 @@ export interface PreparedPublicationSnapshot {
     readonly publicationBytes: Uint8Array;
     readonly bundle: Uint8Array;
     readonly table: routes.Table;
-    readonly validator: schema.Validator;
+    readonly domain: Domain;
 }
 /** Admit and detach one revision-coherent serving snapshot before publication. */
 export declare function preparePublicationSnapshot(input: PublicationSnapshotInput): PublicationSnapshot;
 /** Internal proof that a PublicationSource returned a Server-prepared snapshot without cloning it. */
 export declare function readPreparedPublicationSnapshot(input: unknown): PreparedPublicationSnapshot | undefined;
-//# sourceMappingURL=snapshot.d.ts.map

package/dist/publication/snapshot.js

@@ -1,7 +1,7 @@
+import { bundleUrl } from '@astrale-os/kernel-protocol/publication';
 import { verifyBundleBytes } from '@astrale-os/kernel-protocol/publication/bundle-evidence';
 import { accept as acceptPublication, encode as encodePublication, } from '@astrale-os/kernel-protocol/publication/publication';
 import { admitTable } from './table.js';
-import { captureValidator } from './validator.js';
 const snapshots = new WeakMap();
 /** Admit and detach one revision-coherent serving snapshot before publication. */
 export function preparePublicationSnapshot(input) {
@@ -11,12 +11,20 @@ export function preparePublicationSnapshot(input) {
     const admittedPublication = acceptPublication(input.publication);
     const bundleBytes = new Uint8Array(input.bundle);
     verifyBundleBytes(admittedPublication, bundleBytes);
-    const validator = captureValidator(input.validator);
-    if (validator.origin !== admittedPublication.origin ||
-        validator.revision !== admittedPublication.schema.revision) {
-        throw new TypeError('Publication snapshot Validator identity differs from its Publication.');
+    const domain = input.domain;
+    if (domain.origin !== admittedPublication.origin ||
+        domain.revision !== admittedPublication.schema.revision) {
+        throw new TypeError('Publication snapshot Domain identity differs from its Publication.');
+    }
+    const table = admitTable(admittedPublication, input.table, domain);
+    const addressed = new URL(bundleUrl(admittedPublication.identity.issuer, admittedPublication.schema.bundle.ref));
+    const addressedDirectory = addressed.pathname.slice(0, addressed.pathname.lastIndexOf('/') + 1);
+    const servingBundle = new URL(admittedPublication.schema.bundle.href);
+    if (servingBundle.origin === addressed.origin &&
+        servingBundle.pathname.startsWith(addressedDirectory) &&
+        servingBundle.href !== addressed.href) {
+        throw new TypeError('Publication bundle URL differs from its artifact digest.');
     }
-    const table = admitTable(admittedPublication, input.table, validator);
     const publicationBytes = encodePublication(admittedPublication);
     const snapshot = Object.freeze({ publication: admittedPublication });
     const prepared = Object.freeze({
@@ -25,7 +33,7 @@ export function preparePublicationSnapshot(input) {
         publicationBytes,
         bundle: bundleBytes,
         table,
-        validator,
+        domain,
     });
     snapshots.set(snapshot, prepared);
     return snapshot;
@@ -36,4 +44,3 @@ export function readPreparedPublicationSnapshot(input) {
         return undefined;
     return snapshots.get(input);
 }
-//# sourceMappingURL=snapshot.js.map

package/dist/publication/table.d.ts

@@ -1,4 +1,4 @@
-import type { schema } from '@astrale-os/kernel-dsl/v1';
-import type { publication, routes } from '@astrale-os/kernel-protocol';
-export declare function admitTable(deployed: publication.Publication, input: routes.Table | undefined, validator: schema.Validator): routes.Table;
-//# sourceMappingURL=table.d.ts.map
+import type { Domain } from '@astrale-os/kernel-dsl/v1';
+import type * as publication from '@astrale-os/kernel-protocol/publication';
+import type * as routes from '@astrale-os/kernel-protocol/routes';
+export declare function admitTable(deployed: publication.Publication, input: routes.Table | undefined, domain: Domain): routes.Table;

package/dist/publication/table.js

@@ -1,7 +1,7 @@
 import { reference } from '@astrale-os/kernel-protocol/publication/reference';
 import { acceptTable } from '@astrale-os/kernel-protocol/routes/admission';
 import { verifyTable } from '@astrale-os/kernel-protocol/routes/evidence';
-export function admitTable(deployed, input, validator) {
+export function admitTable(deployed, input, domain) {
     if (input === undefined) {
         if (deployed.routes.length !== 0) {
             throw new TypeError('A Publication with native routes requires a Route Table.');
@@ -9,9 +9,8 @@ export function admitTable(deployed, input, validator) {
         return verifyTable(Object.freeze({
             publication: reference(deployed),
             entries: Object.freeze([]),
-        }), deployed, validator);
+        }), deployed, domain);
     }
     const table = acceptTable(input);
-    return verifyTable(table, deployed, validator);
+    return verifyTable(table, deployed, domain);
 }
-//# sourceMappingURL=table.js.map

package/dist/publication/types.d.ts

@@ -1,13 +1,13 @@
-import type { schema } from '@astrale-os/kernel-dsl/v1';
-import type { publication } from '@astrale-os/kernel-protocol';
-import type { routes } from '@astrale-os/kernel-protocol';
+import type { Domain } from '@astrale-os/kernel-dsl/v1';
+import type * as publication from '@astrale-os/kernel-protocol/publication';
+import type * as routes from '@astrale-os/kernel-protocol/routes';
 declare const PUBLICATION_SNAPSHOT: unique symbol;
 export interface PublicationSnapshotInput {
     readonly publication: publication.Publication;
     /** Exact artifact served at Publication.schema.bundle.href. */
     readonly bundle: Uint8Array;
     readonly table?: routes.Table;
-    readonly validator: schema.Validator;
+    readonly domain: Domain;
 }
 /** Immutable admitted serving identity; bundle and compiled routes remain Server-private. */
 export interface PublicationSnapshot {
@@ -20,4 +20,3 @@ export interface PublicationSource {
     current(): PublicationSnapshot | undefined;
 }
 export {};
-//# sourceMappingURL=types.d.ts.map

package/dist/publication/types.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=types.js.map

package/dist/routes/index.d.ts

@@ -1,2 +1 @@
 export { currentPublicationSnapshot, mountRoutes, type RouteLimits, type RouteReservation, } from './routes.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/routes/index.js

@@ -1,2 +1 @@
 export { currentPublicationSnapshot, mountRoutes, } from './routes.js';
-//# sourceMappingURL=index.js.map

package/dist/routes/routes.d.ts

@@ -17,10 +17,9 @@ export interface RouteReservation {
     readonly path: string;
     readonly methods: readonly string[];
 }
-export declare function mountRoutes(app: ServerRouter, source: PublicationSource, deliveryProvider: DeliveryProvider | undefined, handler: Handler, active: ActiveOperations, nextInvocation: NextInvocationId, limits: RouteLimits, cors: CorsPolicy, hostFor: (request: Request) => ApplicationHost | undefined, reservations: readonly RouteReservation[], externalIssuer?: string): void;
+export declare function mountRoutes(app: ServerRouter, source: PublicationSource, deliveryProvider: DeliveryProvider | undefined, handler: Handler, active: ActiveOperations, nextInvocation: NextInvocationId, limits: RouteLimits, cors: CorsPolicy, hostFor: (request: Request) => ApplicationHost | undefined, reservations: readonly RouteReservation[], externalIssuer?: string, publicOrigin?: string): void;
 export declare function currentPublicationSnapshot(source: PublicationSource, limits: Pick<RouteLimits, 'maximumPublicationBytes' | 'maximumBundleBytes'>, serving?: {
     readonly origin: string;
     readonly issuer?: string;
     readonly reservations: readonly RouteReservation[];
 }): PreparedPublicationSnapshot | undefined;
-//# sourceMappingURL=routes.d.ts.map