@astrale-os/sdk 0.1.1 → 0.1.2

package/dist/server/worker-entry.js

@@ -0,0 +1,79 @@
+/**
+ * `createWorkerEntry` — the shared worker `fetch` plumbing every Astrale domain
+ * worker (and the cloudflare adapter's codegen) needs, so it lives in ONE place
+ * instead of being copy-pasted per worker:
+ *
+ *   • resolve the serving URL (== `iss`), canonicalize it (so the value matches
+ *     what `createRemoteServer` signs with and the kernel pins), and cache the
+ *     built app per distinct URL;
+ *   • optional self-binding routing: when a `SELF` service binding is provided,
+ *     route same-host subrequests (e.g. `ctx.callRemote` back into this domain)
+ *     through it — Cloudflare forbids a Worker fetching its own hostname. This is
+ *     the ONLY reason a `globalThis.fetch` override is installed, and only when a
+ *     `selfBinding` is configured;
+ *   • optional SPA hook (e.g. `/ui/*` served from an `ASSETS` binding).
+ *
+ * The worker's OWN JWKS (`<url>/.well-known/jwks.json`) is served as a normal
+ * route by `createRemoteServer`; the verifier resolves a self-issued credential
+ * from the in-memory key (see `auth/verify.ts`), so no self-fetch shim is needed.
+ *
+ * The worker file is then just schema + methods + a `build(url, env)` callback.
+ */
+import { createRemoteServer } from './create';
+import { requireEnv } from './require-env';
+import { canonicalizeServingUrl } from './serving-url';
+export function createWorkerEntry(config) {
+    let cache = null;
+    let self = null;
+    function getApp(url, env) {
+        if (cache && cache.url === url)
+            return cache.app;
+        const { app } = createRemoteServer(config.build(url, env));
+        cache = { url, origin: new URL(url).origin, app };
+        return app;
+    }
+    // A Worker can't fetch its own hostname. When a SELF service binding is
+    // configured, route same-host subrequests (e.g. `ctx.callRemote` back into
+    // this domain) through it. This is the only reason to override
+    // `globalThis.fetch` — workers without a `selfBinding` get no global mutation.
+    // (A self-issued credential's JWKS is resolved in-memory by the verifier, not
+    // fetched — see `auth/verify.ts` — so no self-JWKS interception is needed.)
+    if (config.selfBinding) {
+        const originalFetch = globalThis.fetch;
+        globalThis.fetch = (async (input, init) => {
+            if (cache && self) {
+                const href = typeof input === 'string' ? input : input instanceof URL ? input.href : input.url;
+                try {
+                    if (new URL(href).origin === cache.origin)
+                        return self.fetch(new Request(input, init));
+                }
+                catch {
+                    // non-absolute URL — fall through to the original fetch
+                }
+            }
+            return originalFetch(input, init);
+        });
+    }
+    return {
+        async fetch(request, env) {
+            if (config.selfBinding)
+                self ??= config.selfBinding(env) ?? null;
+            // Only parse the request URL when a hook actually needs it.
+            const requestUrl = config.before || config.resolveUrl ? new URL(request.url) : null;
+            if (config.before && requestUrl) {
+                // Await so an async `before` that resolves to `undefined` falls through
+                // (a returned Promise<undefined> would otherwise be sent as the response).
+                const handled = await config.before(env, requestUrl, request);
+                if (handled !== undefined)
+                    return handled;
+            }
+            const raw = config.resolveUrl
+                ? config.resolveUrl(env, requestUrl.origin)
+                : requireEnv(env, 'WORKER_URL', "the worker's public serving URL (its iss identity)");
+            const url = canonicalizeServingUrl(raw);
+            const dispatched = config.rewriteRequest ? config.rewriteRequest(env, request) : request;
+            return getApp(url, env).fetch(dispatched);
+        },
+    };
+}
+//# sourceMappingURL=worker-entry.js.map

package/dist/server/worker-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-entry.js","sourceRoot":"","sources":["../../src/server/worker-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AA2CtD,MAAM,UAAU,iBAAiB,CAAQ,MAAgC;IACvE,IAAI,KAAK,GAAqD,IAAI,CAAA;IAClE,IAAI,IAAI,GAAmB,IAAI,CAAA;IAE/B,SAAS,MAAM,CAAC,GAAW,EAAE,GAAU;QACrC,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC,GAAG,CAAA;QAChD,MAAM,EAAE,GAAG,EAAE,GAAG,kBAAkB,CAAQ,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACjE,KAAK,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAA;QACjD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,+DAA+D;IAC/D,+EAA+E;IAC/E,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAA;QACtC,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;YACzE,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;gBACnF,IAAI,CAAC;oBACH,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;wBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;gBACxF,CAAC;gBAAC,MAAM,CAAC;oBACP,wDAAwD;gBAC1D,CAAC;YACH,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACnC,CAAC,CAAiB,CAAA;IACpB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,GAAU;YACtC,IAAI,MAAM,CAAC,WAAW;gBAAE,IAAI,KAAK,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;YAChE,4DAA4D;YAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACnF,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;gBAChC,wEAAwE;gBACxE,2EAA2E;gBAC3E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;gBAC7D,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,OAAO,CAAA;YAC3C,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU;gBAC3B,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,UAAW,CAAC,MAAM,CAAC;gBAC5C,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,oDAAoD,CAAC,CAAA;YACvF,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAA;YACvC,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YACxF,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QAC3C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/server/worker-meta.d.ts

@@ -0,0 +1,6 @@
+export declare function workerMeta(domainName: string): {
+    sdkCommit?: string;
+    schemaHash?: string;
+    domainName: string;
+};
+//# sourceMappingURL=worker-meta.d.ts.map

package/dist/server/worker-meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-meta.d.ts","sourceRoot":"","sources":["../../src/server/worker-meta.ts"],"names":[],"mappings":"AAYA,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;CACnB,CAQA"}

package/dist/server/worker-meta.js

@@ -0,0 +1,10 @@
+export function workerMeta(domainName) {
+    const sdkCommit = typeof SDK_COMMIT === 'string' ? SDK_COMMIT : undefined;
+    const schemaHash = typeof SCHEMA_HASH === 'string' ? SCHEMA_HASH : undefined;
+    return {
+        ...(sdkCommit ? { sdkCommit } : {}),
+        ...(schemaHash ? { schemaHash } : {}),
+        domainName,
+    };
+}
+//# sourceMappingURL=worker-meta.js.map

package/dist/server/worker-meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-meta.js","sourceRoot":"","sources":["../../src/server/worker-meta.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,UAAU,CAAC,UAAkB;IAK3C,MAAM,SAAS,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAA;IACzE,MAAM,UAAU,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5E,OAAO;QACL,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,UAAU;KACX,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/sdk",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Astrale Remote Domain SDK - Define and deploy domains as standalone Hono servers",
   "keywords": [
     "astrale",