@astrale-os/sdk 0.1.1 → 0.1.3

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,aAAa,EACb,aAAa,EACb,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAGnF,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AACvF,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAUhE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAC3D,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAcpG,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,YAAY,EAAE,IAAI,EAAE,MAAM,eAAe,CAAA;AAGzC,YAAY,EACV,UAAU,EACV,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,UAAU,EACV,SAAS,EACT,UAAU,GACX,MAAM,+BAA+B,CAAA;AAGtC,YAAY,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAA;AACtE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAA;AAChF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAClF,YAAY,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,UAAU,EACV,UAAU,EACV,QAAQ,GACT,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAGnD,OAAO,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAA;AACpE,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,32 @@
+export { remoteMethod, remoteClassMethods, remoteInterfaceMethods } from './method';
+// ─── Domain ──────────────────────────────────────────────────────────────
+export { defineRemoteDomain, buildInstallGraph, buildInstallGraphHash } from './domain';
+// ─── Declarative resource helpers ────────────────────────────────────────
+// Author Views (iframe-mountable) and RemoteFunctions (standalone callables)
+// at the domain definition site. Each `defineView` / `defineRemoteFunction`
+// entry is auto-materialized by `defineRemoteDomain` into a graph node (a
+// `View`, or the canonical kernel `Function` for standalone callables) under
+// the reserved views / functions folder, keyed by its map slug; the same
+// entry's `render` / `execute` (+ auth hooks) is mounted as a worker route by
+// `createRemoteServer`.
+export { defineView, defineRemoteFunction } from './define';
+// ─── Server ──────────────────────────────────────────────────────────────
+// `createRemoteServer` dynamically imports `@hono/node-server` via `./server/start`.
+// Exporting the server surface from the barrel poisons browser bundlers
+// (Vite/esbuild) that traverse every re-export and try to bundle the dynamic
+// chunk — which fails on Node built-ins. Consumers that need the server
+// runtime import from '@astrale-os/sdk/server' directly.
+// ─── Deploy ──────────────────────────────────────────────────────────────
+// `deployCheck` and `hashSpecFile` use Node-only modules (`node:crypto`,
+// `node:fs`, `node:child_process`) at module load time. Exporting them from
+// the barrel poisons browser bundlers (Vite/esbuild) that transitively load
+// every re-export. Consumers that need them import from './deploy' directly.
+export { MetaSchema } from './deploy/meta';
+export { authenticateRequest, buildComposedGrant, signCredential } from './auth';
+export { AuthMissingError, AuthInvalidError } from './auth';
+export { assertPerm, requireOwnership, READ, EDIT, USE, SHARE, ALL } from './auth';
+export { selfGrant } from '@astrale-os/kernel-core';
+// ─── Dispatch (escape hatch for custom integrations) ─────────────────────
+export { SdkDispatcher } from './dispatch';
+export { AuthorizationDeniedError, MethodNotFoundError, SdkValidationError, SdkResultValidationError, } from './dispatch';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,UAAU,CAAA;AAEnF,4EAA4E;AAC5E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAGvF,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAC9E,wBAAwB;AACxB,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAG3D,4EAA4E;AAC5E,qFAAqF;AACrF,wEAAwE;AACxE,6EAA6E;AAC7E,wEAAwE;AACxE,yDAAyD;AAEzD,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAiB1C,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAA;AAChF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AASlF,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAEnD,4EAA4E;AAC5E,OAAO,EAAE,aAAa,EAA4B,MAAM,YAAY,CAAA;AACpE,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,YAAY,CAAA"}

package/dist/method/class.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Class-level method aggregation.
+ *
+ * Where `RemoteHandler` describes one method, the types here describe a
+ * whole class's worth of methods. `ClassMethodsImpl<S, K, TDeps>` enforces
+ * that every implementable method on class `K` is provided. The interface
+ * variant handles abstract definitions; the schema variant indexes by class
+ * name.
+ *
+ * `remoteClassMethods` is the identity helper an author calls when supplying
+ * a class's full method record — it gives full inference for the class
+ * methods at once, complementing `remoteMethod` (one method at a time).
+ */
+import type { DefForInterface, InterfaceMethodDefs, InterfaceMethodKeys, MethodClassKeys, NonSealedMethodKeys, OwnMethodKeys, ResolveParams, ResolveReturn, SealedKeys } from '@astrale-os/kernel-core/domain';
+import type { ImplementableOwnKeys, Schema } from '@astrale-os/kernel-dsl';
+import type { SelfResult } from '../dispatch/self';
+import type { MethodImpl, RemoteHandler } from './single';
+/** Per-class method implementations for a remote domain. */
+export type ClassMethodsImpl<S extends Schema, K extends MethodClassKeys<S> & string, TDeps = unknown> = {
+    [M in OwnMethodKeys<S, K>]: MethodImpl<S, K, M, TDeps>;
+} & {
+    [M in NonSealedMethodKeys<S, K>]: MethodImpl<S, K, M, TDeps>;
+} & {
+    [M in SealedKeys<S, K>]?: never;
+};
+/** Resolve interface method handler directly (InterfaceMethodKeys ≠ MethodKeys). */
+type InterfaceMethodHandler<S extends Schema, K extends string, M extends string, TDeps> = M extends keyof InterfaceMethodDefs<S, K> ? InterfaceMethodDefs<S, K>[M] extends {
+    readonly config: infer MC;
+} ? MC extends {
+    readonly static: true;
+} ? RemoteHandler<ResolveParams<MC>, ResolveReturn<MC>, undefined, TDeps> : RemoteHandler<ResolveParams<MC>, ResolveReturn<MC>, SelfResult, TDeps> : never : never;
+/** Per-interface method implementations. */
+export type InterfaceMethodsImpl<S extends Schema, K extends InterfaceMethodKeys<S> & string, TDeps = unknown> = {
+    [M in ImplementableOwnKeys<DefForInterface<S, K>> & string]: InterfaceMethodHandler<S, K, M, TDeps>;
+};
+/**
+ * Namespace-keyed full schema methods map, parameterized by deps.
+ * Handlers for classes and interfaces live under distinct `class` / `interface`
+ * slots, preventing name collisions between a class and an interface with the
+ * same name.
+ *
+ * `interface` is optional — schemas without non-abstract interface methods
+ * (or with no interfaces at all) do not need to provide it.
+ */
+export type SchemaMethodsImpl<S extends Schema, TDeps = unknown> = {
+    class: {
+        [K in MethodClassKeys<S> & string]: ClassMethodsImpl<S, K, TDeps>;
+    };
+    interface?: {
+        [K in InterfaceMethodKeys<S> & string]: InterfaceMethodsImpl<S, K, TDeps>;
+    };
+};
+type RejectSealedKeys<S extends Schema, K extends string, I> = keyof I & SealedKeys<S, K> extends never ? I : `Error: sealed methods must not be implemented by class '${K}': ${keyof I & SealedKeys<S, K> & string}`;
+/** Identity helper for authoring one class's remote methods with full schema typing. */
+export declare function remoteClassMethods<TDeps>(): <S extends Schema, K extends MethodClassKeys<S> & string, I extends ClassMethodsImpl<S, K, TDeps>>(schema: S, className: K, impl: I & RejectSealedKeys<S, K, I>) => I;
+export declare function remoteClassMethods<S extends Schema, K extends MethodClassKeys<S> & string, I extends ClassMethodsImpl<S, K>>(schema: S, className: K, impl: I & RejectSealedKeys<S, K, I>): I;
+/**
+ * Identity helper for authoring one interface's remote methods with full
+ * schema typing — the interface-hosted counterpart of `remoteClassMethods`.
+ *
+ * Methods declared on an interface (e.g. a static `createNote` on `NoteOps`)
+ * live under the `interface:` slot of `SchemaMethodsImpl`. Without this helper
+ * an author has to fall back to `any` (there is no other way to name the
+ * per-method handler type — `InterfaceMethodHandler` is internal). Returns the
+ * per-interface impl object the `interface: { <Name>: … }` slot expects.
+ */
+export declare function remoteInterfaceMethods<TDeps>(): <S extends Schema, K extends InterfaceMethodKeys<S> & string, I extends InterfaceMethodsImpl<S, K, TDeps>>(schema: S, interfaceName: K, impl: I) => I;
+export declare function remoteInterfaceMethods<S extends Schema, K extends InterfaceMethodKeys<S> & string, I extends InterfaceMethodsImpl<S, K>>(schema: S, interfaceName: K, impl: I): I;
+export {};
+//# sourceMappingURL=class.d.ts.map

package/dist/method/class.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"class.d.ts","sourceRoot":"","sources":["../../src/method/class.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,aAAa,EACb,UAAU,EACX,MAAM,gCAAgC,CAAA;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAE1E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAEzD,4DAA4D;AAC5D,MAAM,MAAM,gBAAgB,CAC1B,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,EACrC,KAAK,GAAG,OAAO,IACb;KACD,CAAC,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;CACvD,GAAG;KACD,CAAC,IAAI,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;CAC7D,GAAG;KACD,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK;CAChC,CAAA;AAED,oFAAoF;AACpF,KAAK,sBAAsB,CACzB,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,MAAM,EAChB,KAAK,IACH,CAAC,SAAS,MAAM,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,GACzC,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAChE,EAAE,SAAS;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GAClC,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,GAKrE,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,GACxE,KAAK,GACP,KAAK,CAAA;AAET,4CAA4C;AAC5C,MAAM,MAAM,oBAAoB,CAC9B,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,mBAAmB,CAAC,CAAC,CAAC,GAAG,MAAM,EACzC,KAAK,GAAG,OAAO,IACb;KACD,CAAC,IAAI,oBAAoB,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,sBAAsB,CACjF,CAAC,EACD,CAAC,EACD,CAAC,EACD,KAAK,CACN;CACF,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,GAAG,OAAO,IAAI;IACjE,KAAK,EAAE;SAAG,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;KAAE,CAAA;IAC5E,SAAS,CAAC,EAAE;SAAG,CAAC,IAAI,mBAAmB,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,oBAAoB,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;KAAE,CAAA;CAC1F,CAAA;AAED,KAAK,gBAAgB,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,MAAM,EAAE,CAAC,IAAI,MAAM,CAAC,GACpE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,KAAK,GAC5B,CAAC,GACD,2DAA2D,CAAC,MAAM,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,EAAE,CAAA;AAE3G,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,KAAK,KAAK,CAC3C,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,EACrC,CAAC,SAAS,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAEvC,MAAM,EAAE,CAAC,EACT,SAAS,EAAE,CAAC,EACZ,IAAI,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAChC,CAAC,CAAA;AACN,wBAAgB,kBAAkB,CAChC,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,EACrC,CAAC,SAAS,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC,EAChC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;AASlE;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,KAAK,CAC/C,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,mBAAmB,CAAC,CAAC,CAAC,GAAG,MAAM,EACzC,CAAC,SAAS,oBAAoB,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAE3C,MAAM,EAAE,CAAC,EACT,aAAa,EAAE,CAAC,EAChB,IAAI,EAAE,CAAC,KACJ,CAAC,CAAA;AACN,wBAAgB,sBAAsB,CACpC,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,mBAAmB,CAAC,CAAC,CAAC,GAAG,MAAM,EACzC,CAAC,SAAS,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,EACpC,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAA"}

package/dist/method/class.js

@@ -0,0 +1,26 @@
+/**
+ * Class-level method aggregation.
+ *
+ * Where `RemoteHandler` describes one method, the types here describe a
+ * whole class's worth of methods. `ClassMethodsImpl<S, K, TDeps>` enforces
+ * that every implementable method on class `K` is provided. The interface
+ * variant handles abstract definitions; the schema variant indexes by class
+ * name.
+ *
+ * `remoteClassMethods` is the identity helper an author calls when supplying
+ * a class's full method record — it gives full inference for the class
+ * methods at once, complementing `remoteMethod` (one method at a time).
+ */
+export function remoteClassMethods(...args) {
+    if (args.length === 0) {
+        return (...innerArgs) => innerArgs[2];
+    }
+    return args[2];
+}
+export function remoteInterfaceMethods(...args) {
+    if (args.length === 0) {
+        return (...innerArgs) => innerArgs[2];
+    }
+    return args[2];
+}
+//# sourceMappingURL=class.js.map

package/dist/method/class.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"class.js","sourceRoot":"","sources":["../../src/method/class.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAiGH,MAAM,UAAU,kBAAkB,CAAC,GAAG,IAAe;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,SAAoB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,OAAO,IAAI,CAAC,CAAC,CAAC,CAAA;AAChB,CAAC;AA0BD,MAAM,UAAU,sBAAsB,CAAC,GAAG,IAAe;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,SAAoB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,OAAO,IAAI,CAAC,CAAC,CAAC,CAAA;AAChB,CAAC"}

package/dist/method/context.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `RemoteContext` — what every remote method handler receives at runtime.
+ *
+ * Assembled by the dispatch pipeline before calling `execute`. Carries the
+ * validated params, the resolved auth context, the bound node instance (for
+ * non-static methods), the typed dependency container, and a
+ * `BoundClientSessionView` to call back into the parent kernel.
+ */
+import type { FnMap } from '@astrale-os/kernel-client';
+import type { BoundClientSessionView } from '@astrale-os/kernel-client/session';
+import type { AuthContext } from '@astrale-os/kernel-core';
+import type { CallRemoteFn } from '../dispatch/call-remote';
+export type RemoteContext<TParams, TSelf, TDeps> = {
+    /** Validated params (Zod-checked against the method's `inputSchema`). */
+    params: TParams;
+    /** Auth context resolved from the inbound delegation credential. `null` for public or unauthenticated optional methods. */
+    auth: AuthContext | null;
+    /** Bound node instance — `undefined` for static methods. */
+    self: TSelf;
+    /** Typed dependency container injected at server startup. */
+    deps: TDeps;
+    /** The worker's own serving URL */
+    url: string;
+    /**
+     * `BoundClientSessionView` to the parent kernel, bound to the composed
+     * credential `union(delegation, self)`. `null` when `auth: 'public'`, or
+     * `auth: 'optional'` with no inbound credential. Use for kernel syscalls +
+     * same-domain methods. For ANOTHER worker's remote method use
+     * {@link RemoteContext.callRemote} — `kernel.call` to a remote method fails
+     * the audience check.
+     */
+    kernel: BoundClientSessionView<FnMap> | null;
+    /**
+     * Call another worker's remote method (a Function with `binding.remoteUrl`),
+     * re-minting the credential for the target's audience so it isn't rejected at
+     * authentication. Throws on a public/unauthenticated request (no credential
+     * to mint from). The calling Function's identity must hold `USE` on
+     * `Identity.mintDelegationCredential` AND the target method's own grants —
+     * `callRemote` fixes the audience, not authorization.
+     */
+    callRemote: CallRemoteFn;
+};
+//# sourceMappingURL=context.d.ts.map

package/dist/method/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/method/context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC/E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAE1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAE3D,MAAM,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI;IACjD,yEAAyE;IACzE,MAAM,EAAE,OAAO,CAAA;IACf,2HAA2H;IAC3H,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;IACxB,4DAA4D;IAC5D,IAAI,EAAE,KAAK,CAAA;IACX,6DAA6D;IAC7D,IAAI,EAAE,KAAK,CAAA;IACX,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAA;IACX;;;;;;;OAOG;IACH,MAAM,EAAE,sBAAsB,CAAC,KAAK,CAAC,GAAG,IAAI,CAAA;IAC5C;;;;;;;OAOG;IACH,UAAU,EAAE,YAAY,CAAA;CACzB,CAAA"}

package/dist/method/context.js

@@ -0,0 +1,10 @@
+/**
+ * `RemoteContext` — what every remote method handler receives at runtime.
+ *
+ * Assembled by the dispatch pipeline before calling `execute`. Carries the
+ * validated params, the resolved auth context, the bound node instance (for
+ * non-static methods), the typed dependency container, and a
+ * `BoundClientSessionView` to call back into the parent kernel.
+ */
+export {};
+//# sourceMappingURL=context.js.map

package/dist/method/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/method/context.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/method/index.d.ts

@@ -0,0 +1,6 @@
+export type { RemoteContext } from './context';
+export type { RemoteHandler, AnyRemoteHandler, MethodImpl } from './single';
+export { remoteMethod } from './single';
+export type { ClassMethodsImpl, InterfaceMethodsImpl, SchemaMethodsImpl } from './class';
+export { remoteClassMethods, remoteInterfaceMethods } from './class';
+//# sourceMappingURL=index.d.ts.map

package/dist/method/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/method/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAC9C,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AACxF,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAA"}

package/dist/method/index.js

@@ -0,0 +1,3 @@
+export { remoteMethod } from './single';
+export { remoteClassMethods, remoteInterfaceMethods } from './class';
+//# sourceMappingURL=index.js.map

package/dist/method/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/method/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAEvC,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAA"}

package/dist/method/single.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Authoring a single remote method.
+ *
+ * `RemoteHandler` is the typed shape an author writes for ONE method:
+ * an `execute` body plus optional REST `route` (using the kernel's
+ * canonical `RouteBinding`) and optional anchor `remoteUrl`.
+ *
+ * `MethodImpl` resolves params/result/self from a schema for a given
+ * `(class, method)` pair. `remoteMethod` is the identity helper an author
+ * calls per method to get full inference without writing generics by hand.
+ */
+import type { AuthPolicy, RouteBinding } from '@astrale-os/kernel-api/routed';
+import type { MethodClassKeys, ClassMethodConfig, NonSealedMethodKeys, OwnMethodKeys } from '@astrale-os/kernel-core/domain';
+import type { Schema } from '@astrale-os/kernel-dsl';
+import type { SelfResult } from '../dispatch/self';
+import type { RemoteContext } from './context';
+/**
+ * Remote function handler — execute with full typed context.
+ *
+ * `execute` is **optional** at the type level: a handler may be a pure
+ * binding stub (only `remoteUrl` / `route` set) when authored as a spec-side
+ * declaration that never runs locally — the kernel resolver short-circuits
+ * via `binding.remoteUrl` before reaching the handler body. The worker-side
+ * declaration that actually serves the call MUST provide `execute`.
+ *
+ * Runtime guard: if dispatch routes to a handler that has no `execute`, the
+ * dispatcher throws — that's a programmer error indicating a stub leaked into
+ * a code path that was supposed to execute it.
+ */
+export type RemoteHandler<TParams, TResult, TSelf, TDeps> = {
+    /** The handler body. May be async or an async generator (for `output: 'stream'`). */
+    execute?: (ctx: RemoteContext<TParams, TSelf, TDeps>) => TResult | Promise<TResult> | AsyncGenerator<TResult>;
+    /**
+     * Optional REST binding — attaches a native HTTP route to this method.
+     * Uses the kernel's canonical `RouteBinding` type directly.
+     */
+    route?: RouteBinding;
+    /**
+     * Optional anchor URL — marks this method as anchored to a specific host.
+     * May contain `{name}` placeholders matching fields in the input schema.
+     * If absent, the method is ambient (mounts on whatever server loads the domain).
+     */
+    remoteUrl?: string;
+    /** Optional human-readable description. Appears in generated docs. */
+    description?: string;
+    /** Authentication policy. Defaults to `'required'` when absent. */
+    auth?: AuthPolicy;
+    /**
+     * Optional pre-execute authorization check. Runs after auth resolution and
+     * `_self` resolution, before `execute`. Throw any error to deny the call —
+     * the SDK wraps it as `AuthorizationDeniedError` (mapped to wire-level
+     * `PERMISSION_DENIED`).
+     *
+     * Use for fine-grained checks the kernel's bit-level perms can't express
+     * (e.g. "only the project lead can addMember"). For straight bit-level
+     * checks, prefer the helpers in `@astrale-os/sdk` (`assertPerm`,
+     * `requireOwnership`).
+     *
+     * The kernel still enforces `has_perm` independently — `authorize` is
+     * additive ergonomic gating on top, not a replacement.
+     */
+    authorize?: (ctx: RemoteContext<TParams, TSelf, TDeps>) => void | Promise<void>;
+};
+export type AnyRemoteHandler = RemoteHandler<any, any, any, any>;
+/**
+ * Fully typed method implementation — resolves params/result/self from the
+ * schema, wraps in `RemoteHandler` with deps.
+ */
+export type MethodImpl<S extends Schema, K extends MethodClassKeys<S> & string, M extends string, TDeps = unknown> = ClassMethodConfig<S, K, M> extends {
+    params: infer P;
+    result: infer R;
+    self: unknown;
+    isStatic: infer St;
+} ? RemoteHandler<P, R, St extends true ? undefined : SelfResult, TDeps> : never;
+type ImplementableMethodName<S extends Schema, K extends MethodClassKeys<S> & string> = (OwnMethodKeys<S, K> | NonSealedMethodKeys<S, K>) & string;
+/**
+ * Identity helper for authoring one remote method with full schema-driven typing.
+ *
+ * Two-form calling convention:
+ *  - `remoteMethod<TDeps>()` — curried form; captures deps type, returns a
+ *     per-schema helper. Use when you want deps typed.
+ *  - `remoteMethod(schema, className, methodName, impl)` — direct form with
+ *     `unknown` deps.
+ */
+export declare function remoteMethod<TDeps>(): <S extends Schema, K extends MethodClassKeys<S> & string, M extends ImplementableMethodName<S, K>>(schema: S, className: K, methodName: M, impl: MethodImpl<S, K, M, TDeps>) => MethodImpl<S, K, M, TDeps>;
+export declare function remoteMethod<S extends Schema, K extends MethodClassKeys<S> & string, M extends ImplementableMethodName<S, K>>(schema: S, className: K, methodName: M, impl: MethodImpl<S, K, M>): MethodImpl<S, K, M>;
+export {};
+//# sourceMappingURL=single.d.ts.map

package/dist/method/single.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"single.d.ts","sourceRoot":"","sources":["../../src/method/single.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAC7E,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACd,MAAM,gCAAgC,CAAA;AACvC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAEpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAE9C;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI;IAC1D,qFAAqF;IACrF,OAAO,CAAC,EAAE,CACR,GAAG,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KACtC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACzD;;;OAGG;IACH,KAAK,CAAC,EAAE,YAAY,CAAA;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,mEAAmE;IACnE,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAChF,CAAA;AAGD,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AAEhE;;;GAGG;AACH,MAAM,MAAM,UAAU,CACpB,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,EACrC,CAAC,SAAS,MAAM,EAChB,KAAK,GAAG,OAAO,IAEf,iBAAiB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS;IACjC,MAAM,EAAE,MAAM,CAAC,CAAA;IACf,MAAM,EAAE,MAAM,CAAC,CAAA;IACf,IAAI,EAAE,OAAO,CAAA;IACb,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB,GACG,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,IAAI,GAAG,SAAS,GAAG,UAAU,EAAE,KAAK,CAAC,GACpE,KAAK,CAAA;AAEX,KAAK,uBAAuB,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CACpF,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GACnB,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,CAC5B,GACC,MAAM,CAAA;AAER;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,KAAK,CACrC,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,EACrC,CAAC,SAAS,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,EAEvC,MAAM,EAAE,CAAC,EACT,SAAS,EAAE,CAAC,EACZ,UAAU,EAAE,CAAC,EACb,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAC7B,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;AAC/B,wBAAgB,YAAY,CAC1B,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,EACrC,CAAC,SAAS,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,EACvC,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA"}

package/dist/method/single.js

@@ -0,0 +1,18 @@
+/**
+ * Authoring a single remote method.
+ *
+ * `RemoteHandler` is the typed shape an author writes for ONE method:
+ * an `execute` body plus optional REST `route` (using the kernel's
+ * canonical `RouteBinding`) and optional anchor `remoteUrl`.
+ *
+ * `MethodImpl` resolves params/result/self from a schema for a given
+ * `(class, method)` pair. `remoteMethod` is the identity helper an author
+ * calls per method to get full inference without writing generics by hand.
+ */
+export function remoteMethod(...args) {
+    if (args.length === 0) {
+        return (...innerArgs) => innerArgs[3];
+    }
+    return args[3];
+}
+//# sourceMappingURL=single.js.map

package/dist/method/single.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"single.js","sourceRoot":"","sources":["../../src/method/single.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAoHH,MAAM,UAAU,YAAY,CAAC,GAAG,IAAe;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,SAAoB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,OAAO,IAAI,CAAC,CAAC,CAAC,CAAA;AAChB,CAAC"}

package/dist/server/auxiliary-routes.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Mount worker-side routes for `defineView` and `defineRemoteFunction` entries.
+ *
+ * Each entry's effective `FunctionBinding` is resolved once at boot (host
+ * pattern, path, http verb) and a Hono route is registered that runs the
+ * shared SDK auth pipeline (verify inbound credential, optionally enforce /
+ * optional / public), Zod validation of input AND output (RemoteFunction
+ * only — Views are transport-only), the author's `authorize` hook, and
+ * finally `render` / `execute`.
+ *
+ * Bindings whose host is not a sub-domain of this worker's host are skipped
+ * (the graph node was still materialized; the route lives elsewhere).
+ */
+import type { Hono } from 'hono';
+import { type FunctionBinding } from '@astrale-os/kernel-api/routed';
+import { type CorsConfig } from '@astrale-os/kernel-server';
+import type { AnyRemoteFunctionDef } from '../define/remote-function';
+import type { ViewDef } from '../define/view';
+import type { AuxIdentityMap } from '../dispatch/identity';
+export type AuxiliaryRoutesConfig<TDeps> = {
+    app: Hono;
+    /** This worker's serving URL — used to filter bindings that point elsewhere. */
+    url: string;
+    views?: Record<string, ViewDef<TDeps>>;
+    viewBindings?: Record<string, FunctionBinding>;
+    remoteFunctions?: Record<string, AnyRemoteFunctionDef>;
+    remoteFunctionBindings?: Record<string, FunctionBinding>;
+    deps: TDeps;
+    /**
+     * Per-route identity configs (keyed by slug) — one entry per View and
+     * one per RemoteFunction. Build via `buildAuxIdentityMap(compiled, key, issuer)`
+     * from `sdk/src/dispatch/identity.ts`.
+     */
+    identities: AuxIdentityMap;
+    /**
+     * CORS policy applied to every mounted route: per-route `app.options(...)`
+     * preflight and `Access-Control-Allow-*` headers on success + error
+     * responses. Required so callers (always `createRemoteServer`) keep the
+     * kernel-envelope and aux-route policies in sync.
+     */
+    cors: CorsConfig;
+};
+export declare function mountAuxiliaryRoutes<TDeps>(config: AuxiliaryRoutesConfig<TDeps>): void;
+//# sourceMappingURL=auxiliary-routes.d.ts.map

package/dist/server/auxiliary-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auxiliary-routes.d.ts","sourceRoot":"","sources":["../../src/server/auxiliary-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAA;AAQzC,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAG7E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAA;AAE7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAS1D,MAAM,MAAM,qBAAqB,CAAC,KAAK,IAAI;IACzC,GAAG,EAAE,IAAI,CAAA;IACT,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IACtD,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACxD,IAAI,EAAE,KAAK,CAAA;IACX;;;;OAIG;IACH,UAAU,EAAE,cAAc,CAAA;IAC1B;;;;;OAKG;IACH,IAAI,EAAE,UAAU,CAAA;CACjB,CAAA;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,GAAG,IAAI,CA4EtF"}