@astrale-os/sdk 0.1.10 → 0.3.0

package/dist/config/define-domain.d.ts

@@ -1,7 +1,7 @@
 /**
  * `defineDomain` — the WORKER-SAFE definition of a domain: what the domain *is*
- * (its `schema`, `methods`, `deps`, `views`, standalone `functions`, `client`
- * SPA) plus its addressing identity (`origin`, `requires`, `postInstall`). It
+ * (its `schema`, `methods`, `deps`, `views`, standalone `functions`) plus its
+ * addressing identity (`origin`, `requires`, `postInstall`). It
  * deliberately carries NO deployment adapter — the adapter (`cloudflare(...)`,
  * `astrale(...)`) is node-only code (filesystem, wrangler) that must never enter
  * the worker bundle. The author wires this in a `domain.ts` the generated worker
@@ -11,25 +11,69 @@
  * The modules are wired EXPLICITLY here — imported and passed in — not
  * discovered from magic folder names. A renamed or mistyped module is a compile
  * error at this call site, never a silently-missing worker route. The adapter
- * reads this one definition for everything it codegens; there is no second
- * filesystem probe to drift from it. `defineDomain` itself builds no server and
- * boots no kernel — it validates and packages the declaration.
+ * reads this one definition for domain-side codegen; frontend source folders
+ * live in adapter env config. `defineDomain` itself builds no server and boots
+ * no kernel — it validates and packages the declaration.
  */
 import type { Schema } from '@astrale-os/kernel-dsl';
-import type { RemoteFunctionDef, ViewDef } from '../define';
+import type { AnyRemoteFunctionDef, ViewDef } from '../define';
 import type { SchemaMethodsImpl } from '../method';
 type AnyViewDef = ViewDef<any>;
-type AnyFunctionDef = RemoteFunctionDef<any, any, any>;
+type AnyFunctionDef = AnyRemoteFunctionDef;
 /**
- * The domain's client SPA binding. Its presence is the whole signal — there is
- * no `existsSync('client/')` probe. `dir` is the project-relative source folder
- * (e.g. `'client'`); the worker serves its built SPA under `/ui` via its Assets
- * binding. Always written out explicitly (`client: { dir: 'client' }`) — there
- * is no boolean shorthand, so the source folder is never implicit.
+ * Optional presentation metadata for the domain, served verbatim on the
+ * worker's `/meta` endpoint (see `../deploy/meta`) so a host UI can brand a
+ * freshly-installed domain. Both the block and every field are optional.
  */
-export type ClientBinding = {
-    dir: string;
-};
+export interface DomainManifest {
+    /** Domain logo — an inline SVG string or a `data:` URL (no extra validation). */
+    logo?: string;
+    /**
+     * Slug of one of THIS domain's own views to open first — the domain's entry
+     * surface. This is the SERVED form: a plain slug, stamped verbatim onto
+     * `/meta`. Authors don't write the slug directly — they pass the view OBJECT
+     * to `defineDomain` (see {@link DomainManifestConfig.entrypoint}), which
+     * resolves it to this slug. Pinned at app install to the `View` node at
+     * `/<origin>/views/<slug>` via the app's `entrypoint` edge.
+     */
+    entrypoint?: string;
+    /**
+     * The ROLES this domain declares — named capability identities a workspace
+     * registers when an app for this domain is installed, then assigns to users
+     * (`default: true` roles are auto-assigned to the installing user). The
+     * domain itself grants each role its resource permissions (typically in its
+     * `postInstall`); declaring a role here only names it. Slugs are validated
+     * (lowercase slug charset, unique) at `defineDomain`.
+     */
+    roles?: readonly DomainRoleDecl[];
+}
+/** One declared role of the domain (see {@link DomainManifest.roles}). */
+export interface DomainRoleDecl {
+    /** Stable role slug, unique within the domain (e.g. `"editor"`). */
+    slug: string;
+    /** Display name; defaults to the slug. */
+    name?: string;
+    /** What holding this role means — shown in permission UIs. */
+    description?: string;
+    /** Auto-assign this role to the user installing an app for this domain. */
+    default?: boolean;
+}
+/**
+ * The author-facing manifest accepted by {@link defineDomain} — identical to the
+ * served {@link DomainManifest} except `entrypoint` is the view OBJECT (a value
+ * of the `views` map) rather than its slug. `defineDomain` resolves it to the
+ * slug by identity, so a renamed or dropped view is a compile error at the
+ * reference site, never a stale string (the same guarantee `postInstall` gives
+ * for functions).
+ */
+export interface DomainManifestConfig extends Omit<DomainManifest, 'entrypoint'> {
+    /**
+     * The view to open first — the domain's entry surface. Pass the view OBJECT
+     * from this domain's own `views` map (e.g. `entrypoint: views.welcome`).
+     * Resolved to its slug here and served as {@link DomainManifest.entrypoint}.
+     */
+    entrypoint?: AnyViewDef;
+}
 export interface DefineDomainConfig<S extends Schema, TDeps, TEnv = unknown> {
     /** The domain schema (from `schema/`). Its `.domain` seeds the default origin. */
     schema: S;
@@ -65,11 +109,14 @@ export interface DefineDomainConfig<S extends Schema, TDeps, TEnv = unknown> {
      */
     functions?: Record<string, AnyFunctionDef>;
     /**
-     * The domain's client SPA, e.g. `{ dir: 'client' }`. Its presence enables it
-     * (no folder probing); `dir` is the project-relative source folder, built and
-     * served under `/ui`. Omit for a domain with no SPA.
+     * Optional presentation metadata stamped onto `/meta`. When `manifest.entrypoint`
+     * is set it MUST be a view from this domain's own `views` map — passed as the
+     * OBJECT (`entrypoint: views.welcome`), resolved to its slug here. A view that
+     * isn't in `views` is a compile error at the reference site, and the
+     * resolution throws loudly if it's somehow absent — so a typo can never dangle
+     * to a NOT_FOUND view path at install.
      */
-    client?: ClientBinding;
+    manifest?: DomainManifestConfig;
     /**
      * The domain's **addressing name** (the graph slug it mounts under, e.g.
      * `'crm.acme.dev'`). Defaults to `schema.domain`. Must be a name, never a
@@ -82,11 +129,25 @@ export interface DefineDomainConfig<S extends Schema, TDeps, TEnv = unknown> {
     /** Cross-domain deps, by origin. Verified present on the instance at install. */
     requires?: readonly string[];
     /**
-     * Astrale Path (usually an AbsolutePath to a `functions/` entry) the kernel
-     * calls once after install, as __SYSTEM__ — where the domain posts its own
-     * grants / seed.
+     * Where the Domain node physically lives in the graph TREE — an absolute tree
+     * path whose LAST segment is the origin (e.g. `'/domains/crm.acme.dev'`).
+     * Optional; defaults to `/domains/<origin>`. This moves ONLY the physical
+     * `has_parent` position: the domain's `installed_in` edge and EVERY typed
+     * address (`/:<origin>`, `/:<origin>:Class`, …) stay ROOT-mounted, so
+     * addressing is unchanged. A platform domain that must stay top-level sets its
+     * own origin path (e.g. `'/workspace.astrale.ai'`).
      */
-    postInstall?: string;
+    path?: string;
+    /**
+     * The function the kernel runs once after install, as __SYSTEM__ — where the
+     * domain seeds itself / posts its own grants. Reference it from the `functions`
+     * map: `postInstall: functions.seed`. The SDK derives its path by identity, so a
+     * typo or a renamed key is a compile error here, never a stale string. It is
+     * always a standalone function (a domain bootstrap belongs to the domain, not to
+     * a class) under THIS domain — you never write the origin, and the kernel
+     * resolves it relative to wherever the domain is installed.
+     */
+    postInstall?: AnyFunctionDef;
 }
 export interface DomainDefinition {
     schema: Schema;
@@ -99,13 +160,13 @@ export interface DomainDefinition {
     deps?: (env: any, url: string) => any;
     views?: Record<string, ViewDef>;
     functions?: Record<string, AnyFunctionDef>;
-    /** Normalized client binding (resolved `dir`), or absent when the domain has no SPA. */
-    client?: {
-        dir: string;
-    };
+    /** Presentation metadata for `/meta`, validated at definition time. */
+    manifest?: DomainManifest;
     origin: string;
     requires: readonly string[];
     postInstall?: string;
+    /** Physical tree path for the Domain node; default `/domains/<origin>`. */
+    path?: string;
 }
 export declare function defineDomain<S extends Schema, TDeps, TEnv = unknown>(config: DefineDomainConfig<S, TDeps, TEnv>): DomainDefinition;
 export {};

package/dist/config/define-domain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"define-domain.d.ts","sourceRoot":"","sources":["../../src/config/define-domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAIpD,OAAO,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAQlD,KAAK,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;AAC9B,KAAK,cAAc,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;AAGtD;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAE3C,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO;IACzE,kFAAkF;IAClF,MAAM,EAAE,CAAC,CAAA;IACT;;;;OAIG;IACH,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACpC;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,KAAK,KAAK,CAAA;IACxC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAClC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC1C;;;;OAIG;IACH,MAAM,CAAC,EAAE,aAAa,CAAA;IACtB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,iFAAiF;IACjF,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC5B;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IAEd,OAAO,EAAE,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvC;;;;OAIG;IAEH,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,KAAK,GAAG,CAAA;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC1C,wFAAwF;IACxF,MAAM,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,EAClE,MAAM,EAAE,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GACzC,gBAAgB,CAsDlB"}
+{"version":3,"file":"define-domain.d.ts","sourceRoot":"","sources":["../../src/config/define-domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAIpD,OAAO,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAQlD,KAAK,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;AAI9B,KAAK,cAAc,GAAG,oBAAoB,CAAA;AAE1C;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAA;CAClC;AAED,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAA;IACZ,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAqB,SAAQ,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC;IAC9E;;;;OAIG;IACH,UAAU,CAAC,EAAE,UAAU,CAAA;CACxB;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO;IACzE,kFAAkF;IAClF,MAAM,EAAE,CAAC,CAAA;IACT;;;;OAIG;IACH,OAAO,EAAE,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACpC;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,KAAK,KAAK,CAAA;IACxC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAClC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC1C;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAA;IAC/B;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,iFAAiF;IACjF,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC5B;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,cAAc,CAAA;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAA;IAEd,OAAO,EAAE,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACvC;;;;OAIG;IAEH,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,KAAK,GAAG,CAAA;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IAC1C,uEAAuE;IACvE,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,OAAO,EAClE,MAAM,EAAE,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GACzC,gBAAgB,CAmGlB"}

package/dist/config/define-domain.js

@@ -1,7 +1,7 @@
 /**
  * `defineDomain` — the WORKER-SAFE definition of a domain: what the domain *is*
- * (its `schema`, `methods`, `deps`, `views`, standalone `functions`, `client`
- * SPA) plus its addressing identity (`origin`, `requires`, `postInstall`). It
+ * (its `schema`, `methods`, `deps`, `views`, standalone `functions`) plus its
+ * addressing identity (`origin`, `requires`, `postInstall`). It
  * deliberately carries NO deployment adapter — the adapter (`cloudflare(...)`,
  * `astrale(...)`) is node-only code (filesystem, wrangler) that must never enter
  * the worker bundle. The author wires this in a `domain.ts` the generated worker
@@ -11,11 +11,11 @@
  * The modules are wired EXPLICITLY here — imported and passed in — not
  * discovered from magic folder names. A renamed or mistyped module is a compile
  * error at this call site, never a silently-missing worker route. The adapter
- * reads this one definition for everything it codegens; there is no second
- * filesystem probe to drift from it. `defineDomain` itself builds no server and
- * boots no kernel — it validates and packages the declaration.
+ * reads this one definition for domain-side codegen; frontend source folders
+ * live in adapter env config. `defineDomain` itself builds no server and boots
+ * no kernel — it validates and packages the declaration.
  */
-import { DomainOrigin, extractDomainSlug } from '@astrale-os/kernel-core/domain';
+import { DomainOrigin } from '@astrale-os/kernel-core/domain';
 export function defineDomain(config) {
     const rawOrigin = config.origin ?? schemaDomain(config.schema);
     if (!rawOrigin) {
@@ -46,50 +46,96 @@ export function defineDomain(config) {
         }
         catch {
             throw new Error(`defineDomain: invalid \`requires\` entry "${dep}". Use the dependency's origin slug ` +
-                '(lowercase FQDN-like, e.g. "dist.astrale.ai"), not a URL.');
+                '(lowercase FQDN-like, e.g. "example.astrale.ai"), not a URL.');
         }
     });
+    // `path`, when set, is the Domain's physical tree path. Validate the
+    // two invariants the serializer/kernel rely on, string-only (no AbsolutePath
+    // import — this module must stay worker-safe): it is absolute with at least one
+    // segment, and its LAST segment equals the origin (the kernel derives origin
+    // from the mount basename in a few places, e.g. has_parent slug + get-access-
+    // token origin recovery). Full structural parse happens at build time.
+    if (config.path !== undefined) {
+        const loc = config.path;
+        if (!loc.startsWith('/') || loc === '/') {
+            throw new Error(`defineDomain: \`path\` must be an absolute graph path with at least ` +
+                `one segment (e.g. "/domains/${origin}"), not "${loc}".`);
+        }
+        if (loc.split('/').pop() !== origin) {
+            throw new Error(`defineDomain: \`path\` last segment must equal the origin "${origin}" ` +
+                `(e.g. "/domains/${origin}" or "/${origin}"), got "${loc}".`);
+        }
+    }
+    // A `manifest.entrypoint` view is resolved to its slug below (in the return),
+    // where a view absent from `views` throws — see `resolveManifest`.
+    // Declared roles must carry valid, unique slugs — a role slug becomes a graph
+    // path segment and an identity subject, so the kernel's reserved separators
+    // (`/`, `:`, `@`) can never appear in one. Fail at authoring time.
+    if (config.manifest?.roles !== undefined) {
+        const seen = new Set();
+        for (const role of config.manifest.roles) {
+            if (!/^[a-z0-9][a-z0-9_-]*$/.test(role.slug)) {
+                throw new Error(`defineDomain: invalid \`manifest.roles\` slug "${role.slug}". ` +
+                    'Use a lowercase slug (letters, digits, "_", "-"), e.g. "editor".');
+            }
+            if (seen.has(role.slug)) {
+                throw new Error(`defineDomain: duplicate \`manifest.roles\` slug "${role.slug}".`);
+            }
+            seen.add(role.slug);
+        }
+    }
     return {
         schema: config.schema,
         methods: config.methods,
         ...(config.deps ? { deps: config.deps } : {}),
         ...(config.views ? { views: config.views } : {}),
         ...(config.functions ? { functions: config.functions } : {}),
-        ...(config.client ? { client: config.client } : {}),
+        ...(config.manifest ? { manifest: resolveManifest(config.manifest, config.views) } : {}),
         origin,
         requires,
-        ...(config.postInstall
-            ? { postInstall: normalizePostInstall(config.postInstall, origin) }
+        ...(config.path ? { path: config.path } : {}),
+        ...(config.postInstall !== undefined
+            ? { postInstall: normalizePostInstall(config.postInstall, origin, config.functions) }
             : {}),
     };
 }
 /**
- * Validate a `postInstall` hook path and align its leading origin segment with
- * the canonical (lowercased) origin. Only the typed colon forms are accepted
- * (`/:<origin>:class.X:seed`, `/:<origin>:interface.Ops:seed`) — mirroring the
- * kernel's own origin guard, which refuses absolute tree paths because they
- * cannot prove their origin from the string alone. The hook is often authored
- * as `` `/:${schema.domain}:…` `` where `schema.domain` keeps its source
- * casing, but the kernel stores graph nodes (and runs its guard) under the
- * lowercased origin — so the origin segment is re-stamped canonical. Rejects a
- * tree path or one pointing at a different domain (the kernel calls the hook
- * as __SYSTEM__ and refuses a foreign target).
+ * Lower the author-facing manifest (view OBJECT for `entrypoint`) to the served
+ * {@link DomainManifest} (slug for `entrypoint`). The entrypoint view is matched
+ * to its `views`-map key by IDENTITY — the same mechanism `normalizePostInstall`
+ * uses for functions — so a view absent from `views` (one from another domain,
+ * or dropped) throws here instead of dangling to a NOT_FOUND view path at install.
  */
-function normalizePostInstall(postInstall, origin) {
-    const slug = extractDomainSlug(postInstall);
-    if (slug === null) {
-        throw new Error(`defineDomain: \`postInstall\` must be a typed colon-path under "/:${origin}" ` +
-            `(e.g. "/:${origin}:class.Note:seed" or "/:${origin}:interface.Ops:seed"); ` +
-            `absolute tree paths are not accepted — got "${postInstall}".`);
+function resolveManifest(manifest, views) {
+    const { entrypoint, ...rest } = manifest;
+    if (entrypoint === undefined)
+        return rest;
+    const slug = views ? Object.entries(views).find(([, def]) => def === entrypoint)?.[0] : undefined;
+    if (slug === undefined) {
+        const viewKeys = Object.keys(views ?? {});
+        throw new Error("defineDomain: `manifest.entrypoint` must be one of this domain's own views " +
+            '(pass the view object, e.g. `entrypoint: views.welcome`). ' +
+            `Available views: ${viewKeys.length > 0 ? viewKeys.map((k) => `"${k}"`).join(', ') : '(none)'}.`);
     }
-    if (slug.toLowerCase() !== origin) {
-        throw new Error(`defineDomain: \`postInstall\` "${postInstall}" must resolve under the domain origin ` +
-            `"/${origin}" — the kernel calls it as __SYSTEM__ and refuses a hook pointing at another domain.`);
+    return { ...rest, entrypoint: slug };
+}
+/**
+ * Resolve a `postInstall` function reference to the colon-path the bundle carries.
+ * The slug is the `functions` map key the reference is registered under (found by
+ * identity), so a renamed key is a compile error at the reference site AND the
+ * derived path follows the rename. The origin is never the author's to supply
+ * (postInstall is always a standalone function of THIS domain) and the path is
+ * mount-agnostic — the kernel resolves it wherever the domain is installed.
+ */
+function normalizePostInstall(postInstall, origin, functions) {
+    const slug = functions
+        ? Object.entries(functions).find(([, def]) => def === postInstall)?.[0]
+        : undefined;
+    if (slug === undefined) {
+        throw new Error("defineDomain: `postInstall` must reference a function from this domain's `functions` map " +
+            '(e.g. `postInstall: functions.seed`).');
     }
-    // Re-stamp the origin segment with its canonical (lowercased) form.
-    return postInstall.startsWith('/:')
-        ? `/:${origin}${postInstall.slice(2 + slug.length)}`
-        : `/${origin}${postInstall.slice(1 + slug.length)}`;
+    return `/:${origin}:function.${slug}`;
 }
 function schemaDomain(schema) {
     const value = schema.domain;

package/dist/config/define-domain.js.map

@@ -1 +1 @@
-{"version":3,"file":"define-domain.js","sourceRoot":"","sources":["../../src/config/define-domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAA;AAuGhF,MAAM,UAAU,YAAY,CAC1B,MAA0C;IAE1C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,2DAA2D,CAC9D,CAAA;IACH,CAAC;IACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,0FAA0F,SAAS,KAAK;YACtG,8DAA8D,CACjE,CAAA;IACH,CAAC;IACD,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,qCAAqC,SAAS,oCAAoC;YAChF,wDAAwD,CAC3D,CAAA;IACH,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACnD,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,6CAA6C,GAAG,sCAAsC;gBACpF,2DAA2D,CAC9D,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAsC;QACtD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM;QACN,QAAQ;QACR,GAAG,CAAC,MAAM,CAAC,WAAW;YACpB,CAAC,CAAC,EAAE,WAAW,EAAE,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,oBAAoB,CAAC,WAAmB,EAAE,MAAc;IAC/D,MAAM,IAAI,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAA;IAC3C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,qEAAqE,MAAM,IAAI;YAC7E,YAAY,MAAM,2BAA2B,MAAM,yBAAyB;YAC5E,+CAA+C,WAAW,IAAI,CACjE,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,kCAAkC,WAAW,yCAAyC;YACpF,KAAK,MAAM,sFAAsF,CACpG,CAAA;IACH,CAAC;IACD,oEAAoE;IACpE,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;QACjC,CAAC,CAAC,KAAK,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE;QACpD,CAAC,CAAC,IAAI,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,KAAK,GAAI,MAA0C,CAAC,MAAM,CAAA;IAChE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1E,CAAC"}
+{"version":3,"file":"define-domain.js","sourceRoot":"","sources":["../../src/config/define-domain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AA4K7D,MAAM,UAAU,YAAY,CAC1B,MAA0C;IAE1C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,2DAA2D,CAC9D,CAAA;IACH,CAAC;IACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,0FAA0F,SAAS,KAAK;YACtG,8DAA8D,CACjE,CAAA;IACH,CAAC;IACD,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,qCAAqC,SAAS,oCAAoC;YAChF,wDAAwD,CAC3D,CAAA;IACH,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACnD,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,6CAA6C,GAAG,sCAAsC;gBACpF,8DAA8D,CACjE,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,qEAAqE;IACrE,6EAA6E;IAC7E,gFAAgF;IAChF,6EAA6E;IAC7E,8EAA8E;IAC9E,uEAAuE;IACvE,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAA;QACvB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,sEAAsE;gBACpE,+BAA+B,MAAM,YAAY,GAAG,IAAI,CAC3D,CAAA;QACH,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,8DAA8D,MAAM,IAAI;gBACtE,mBAAmB,MAAM,UAAU,MAAM,YAAY,GAAG,IAAI,CAC/D,CAAA;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,mEAAmE;IAEnE,8EAA8E;IAC9E,4EAA4E;IAC5E,mEAAmE;IACnE,IAAI,MAAM,CAAC,QAAQ,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;QAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACzC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CACb,kDAAkD,IAAI,CAAC,IAAI,KAAK;oBAC9D,kEAAkE,CACrE,CAAA;YACH,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,CAAC,IAAI,IAAI,CAAC,CAAA;YACpF,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAsC;QACtD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM;QACN,QAAQ;QACR,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE,WAAW,EAAE,oBAAoB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE;YACrF,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,QAA8B,EAC9B,KAA6C;IAE7C,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAA;IACxC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACjG,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;QACzC,MAAM,IAAI,KAAK,CACb,6EAA6E;YAC3E,4DAA4D;YAC5D,oBAAoB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CACnG,CAAA;IACH,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC3B,WAA2B,EAC3B,MAAc,EACd,SAAqD;IAErD,MAAM,IAAI,GAAG,SAAS;QACpB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2FAA2F;YACzF,uCAAuC,CAC1C,CAAA;IACH,CAAC;IACD,OAAO,KAAK,MAAM,aAAa,IAAI,EAAE,CAAA;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,KAAK,GAAI,MAA0C,CAAC,MAAM,CAAA;IAChE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1E,CAAC"}

package/dist/config/deploy.d.ts

@@ -9,7 +9,7 @@
  * is authored in `astrale.config.ts` — a Node-only module the CLI loads but the
  * worker never imports — so the adapter stays out of the bundle.
  *
- *   export const domain = defineDomain({ schema, methods, deps, views, client })
+ *   export const domain = defineDomain({ schema, methods, deps, views })
  *
  *   import { domain } from './domain'
  *   export default deploy(domain, cloudflare({ dev, prod }))

package/dist/config/deploy.js

@@ -9,7 +9,7 @@
  * is authored in `astrale.config.ts` — a Node-only module the CLI loads but the
  * worker never imports — so the adapter stays out of the bundle.
  *
- *   export const domain = defineDomain({ schema, methods, deps, views, client })
+ *   export const domain = defineDomain({ schema, methods, deps, views })
  *
  *   import { domain } from './domain'
  *   export default deploy(domain, cloudflare({ dev, prod }))

package/dist/config/index.d.ts

@@ -13,7 +13,7 @@
  * declaration.
  */
 export { defineDomain } from './define-domain';
-export type { ClientBinding, DefineDomainConfig, DomainDefinition } from './define-domain';
+export type { DefineDomainConfig, DomainDefinition, DomainManifest } from './define-domain';
 export { deploy } from './deploy';
 export type { DeployConfig } from './deploy';
 export { defineAdapter } from './adapter';

package/dist/config/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAE1F,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,YAAY,EACV,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,UAAU,EACV,QAAQ,EACR,WAAW,GACZ,MAAM,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAE3F,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACjC,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AACzC,YAAY,EACV,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,UAAU,EACV,QAAQ,EACR,WAAW,GACZ,MAAM,WAAW,CAAA"}

package/dist/define/remote-function.d.ts

@@ -1,25 +1,27 @@
 /**
  * Authoring a standalone remote function — a callable not bound to a class.
  * (The verb keeps the `defineRemoteFunction` name; the node it materializes is
- * the canonical kernel `Function` class, the former distribution `RemoteFunction`.)
+ * the canonical kernel `Function` class, replacing the former remote-function wrapper.)
  *
  * Each entry in `defineRemoteDomain({ remoteFunctions: { ... } })` becomes:
- *   - a graph node at `/${origin}/core/<functionsFolder>/<slug>`, materialized
- *     as the kernel `Function` class by `buildCorePath` so kernel discovery /
- *     `View.resolve` can list it. The `core/` anchor appears in the GRAPH path only.
+ *   - a graph node at `/${origin}/functions/<slug>` — a first-class domain MEMBER,
+ *     materialized as the kernel `Function` class and attached to the Domain via an
+ *     `of_domain` edge (slug `function.<slug>`), so it is addressable by the
+ *     semantic path `/:${origin}:function.<slug>` (the form a `postInstall` uses).
  *   - a Hono route on the worker at the path implied by `binding`
- *     (`/<functionsFolder>/<slug>` POST by default — no `core/` in the URL).
+ *     (`/<functionsFolder>/<slug>` POST by default — the route URL is decoupled
+ *     from the graph layout).
  *
- * The slug = the map key (single source of truth, no duplication).
- *
- * `ref` is auto-derived as `function.<slug>` if omitted — used as
- * `Function.ref` on the graph node and as the dispatch key.
+ * The slug = the map key (single source of truth, no duplication). The member
+ * ref (`function.<slug>`), the layout (`/<origin>/functions/<slug>`), and the
+ * `of_domain` edge slug are all DERIVED from it — there is nothing else to name.
  */
 import type { AuthPolicy, FunctionBinding } from '@astrale-os/kernel-api/routed';
 import type { FnMap } from '@astrale-os/kernel-client';
 import type { BoundClientSessionView } from '@astrale-os/kernel-client/session';
 import type { Context } from 'hono';
 import type { z } from 'zod';
+import type { DomainIssuer } from '../auth/issuer-mint';
 import type { CallRemoteFn } from '../dispatch/call-remote';
 import type { AuthForPolicy, KernelForAuth } from '../method/context';
 export type RemoteFunctionContext<TParams, TDeps = unknown, TKernel = BoundClientSessionView<FnMap> | null, TAuth extends AuthPolicy = AuthPolicy> = {
@@ -38,12 +40,20 @@ export type RemoteFunctionContext<TParams, TDeps = unknown, TKernel = BoundClien
     /**
      * `BoundClientSessionView` to the parent kernel, bound to the composed
      * credential `union(delegation, self)` — same shape as `RemoteContext.kernel`
-     * for `remoteMethod`. Nullability follows {@link KernelForAuth} of the
+     * for `remoteMethod`, including the typed graph read/write sugar flattened onto
+     * it (`kernel.get` / `kernel.children` / `kernel.query`,
+     * `kernel.createNode` / `kernel.mutate(patch)`, …) over the `function.get` /
+     * `function.mutate` syscalls. Nullability follows {@link KernelForAuth} of the
      * function's `auth`: non-null for the default `'required'`, `… | null` for
      * `'optional'`, `null` for `'public'` (use {@link RemoteFunctionContext.selfKernel}
      * there, after verifying the upstream).
      */
     kernel: TKernel;
+    /**
+     * Mint seam for identities THIS DOMAIN issues — same contract as
+     * {@link RemoteContext.issuer}.
+     */
+    issuer: DomainIssuer;
     /**
      * Call another worker's remote method, re-minting the credential for the
      * target's audience. Same contract as {@link RemoteContext.callRemote}: throws
@@ -63,12 +73,6 @@ export type RemoteFunctionContext<TParams, TDeps = unknown, TKernel = BoundClien
     selfKernel: (kernelUrl?: string) => Promise<BoundClientSessionView<FnMap>>;
 };
 export type RemoteFunctionDef<TParams = unknown, TResult = unknown, TDeps = unknown, TAuth extends AuthPolicy = 'required'> = {
-    /**
-     * Canonical callable identity. Auto-derived as `function.<slug>` (where
-     * `<slug>` is the map key) when omitted. Stored as `Function.ref` on the
-     * graph node and used by the kernel dispatcher to route the call.
-     */
-    ref?: string;
     /** Zod schema for the call's parameters. */
     inputSchema: z.ZodType<TParams>;
     /** Zod schema for the call's result. */
@@ -99,10 +103,21 @@ export type RemoteFunctionDef<TParams = unknown, TResult = unknown, TDeps = unkn
     /** Optional human-readable description. */
     description?: string;
 };
-export type AnyRemoteFunctionDef = RemoteFunctionDef<any, any, any, AuthPolicy>;
+export type AnyRemoteFunctionDef = Omit<RemoteFunctionDef<any, any, any, AuthPolicy>, 'authorize' | 'execute'> & {
+    authorize?: (ctx: any) => void | Promise<void>;
+    execute: (ctx: any) => any;
+};
+type _AssertTrue<T extends true> = T;
+type _FnFitsBag<D> = D extends AnyRemoteFunctionDef ? true : false;
+export type _AuthPolicyBagGuards = [
+    _AssertTrue<_FnFitsBag<RemoteFunctionDef<unknown, unknown, unknown, 'public'>>>,
+    _AssertTrue<_FnFitsBag<RemoteFunctionDef<unknown, unknown, unknown, 'optional'>>>,
+    _AssertTrue<_FnFitsBag<RemoteFunctionDef<unknown, unknown, unknown, 'required'>>>
+];
 /**
  * Identity helper for authoring a RemoteFunction. Returns its argument
  * unchanged — `defineRemoteDomain` consumes the typed shape.
  */
 export declare function defineRemoteFunction<TParams, TResult, TDeps = unknown, TAuth extends AuthPolicy = 'required'>(def: RemoteFunctionDef<TParams, TResult, TDeps, TAuth>): RemoteFunctionDef<TParams, TResult, TDeps, TAuth>;
+export {};
 //# sourceMappingURL=remote-function.d.ts.map

package/dist/define/remote-function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-function.d.ts","sourceRoot":"","sources":["../../src/define/remote-function.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAChF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC/E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAErE,MAAM,MAAM,qBAAqB,CAC/B,OAAO,EACP,KAAK,GAAG,OAAO,EACf,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG,IAAI,EAC9C,KAAK,SAAS,UAAU,GAAG,UAAU,IACnC;IACF,4DAA4D;IAC5D,MAAM,EAAE,OAAO,CAAA;IACf,sEAAsE;IACtE,CAAC,EAAE,OAAO,CAAA;IACV;;;;OAIG;IACH,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAA;IAC1B,6DAA6D;IAC7D,IAAI,EAAE,KAAK,CAAA;IACX;;;;;;;OAOG;IACH,MAAM,EAAE,OAAO,CAAA;IACf;;;;;OAKG;IACH,UAAU,EAAE,YAAY,CAAA;IACxB;;;;;;;;OAQG;IACH,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAA;CAC3E,CAAA;AAED,MAAM,MAAM,iBAAiB,CAC3B,OAAO,GAAG,OAAO,EACjB,OAAO,GAAG,OAAO,EACjB,KAAK,GAAG,OAAO,EACf,KAAK,SAAS,UAAU,GAAG,UAAU,IACnC;IACF;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/B,wCAAwC;IACxC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAChC;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ,yDAAyD;IACzD,SAAS,CAAC,EAAE,CACV,GAAG,EAAE,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KACpE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,uCAAuC;IACvC,OAAO,EAAE,CACP,GAAG,EAAE,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KACpE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/B,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAMD,MAAM,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAA;AAE/E;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EACP,OAAO,EACP,KAAK,GAAG,OAAO,EACf,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,GAAG,EAAE,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GACrD,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAEnD"}
+{"version":3,"file":"remote-function.d.ts","sourceRoot":"","sources":["../../src/define/remote-function.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAChF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC/E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAErE,MAAM,MAAM,qBAAqB,CAC/B,OAAO,EACP,KAAK,GAAG,OAAO,EACf,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG,IAAI,EAC9C,KAAK,SAAS,UAAU,GAAG,UAAU,IACnC;IACF,4DAA4D;IAC5D,MAAM,EAAE,OAAO,CAAA;IACf,sEAAsE;IACtE,CAAC,EAAE,OAAO,CAAA;IACV;;;;OAIG;IACH,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAA;IAC1B,6DAA6D;IAC7D,IAAI,EAAE,KAAK,CAAA;IACX;;;;;;;;;;OAUG;IACH,MAAM,EAAE,OAAO,CAAA;IACf;;;OAGG;IACH,MAAM,EAAE,YAAY,CAAA;IACpB;;;;;OAKG;IACH,UAAU,EAAE,YAAY,CAAA;IACxB;;;;;;;;OAQG;IACH,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAA;CAC3E,CAAA;AAED,MAAM,MAAM,iBAAiB,CAC3B,OAAO,GAAG,OAAO,EACjB,OAAO,GAAG,OAAO,EACjB,KAAK,GAAG,OAAO,EACf,KAAK,SAAS,UAAU,GAAG,UAAU,IACnC;IACF,4CAA4C;IAC5C,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/B,wCAAwC;IACxC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAChC;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ,yDAAyD;IACzD,SAAS,CAAC,EAAE,CACV,GAAG,EAAE,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KACpE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,uCAAuC;IACvC,OAAO,EAAE,CACP,GAAG,EAAE,qBAAqB,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KACpE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/B,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAcD,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,EAC5C,WAAW,GAAG,SAAS,CACxB,GAAG;IACF,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,CAAA;CAC3B,CAAA;AAOD,KAAK,WAAW,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAA;AACpC,KAAK,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,oBAAoB,GAAG,IAAI,GAAG,KAAK,CAAA;AAKlE,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/E,WAAW,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IACjF,WAAW,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;CAClF,CAAA;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EACP,OAAO,EACP,KAAK,GAAG,OAAO,EACf,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,GAAG,EAAE,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,GACrD,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAEnD"}

package/dist/define/remote-function.js

@@ -1,19 +1,20 @@
 /**
  * Authoring a standalone remote function — a callable not bound to a class.
  * (The verb keeps the `defineRemoteFunction` name; the node it materializes is
- * the canonical kernel `Function` class, the former distribution `RemoteFunction`.)
+ * the canonical kernel `Function` class, replacing the former remote-function wrapper.)
  *
  * Each entry in `defineRemoteDomain({ remoteFunctions: { ... } })` becomes:
- *   - a graph node at `/${origin}/core/<functionsFolder>/<slug>`, materialized
- *     as the kernel `Function` class by `buildCorePath` so kernel discovery /
- *     `View.resolve` can list it. The `core/` anchor appears in the GRAPH path only.
+ *   - a graph node at `/${origin}/functions/<slug>` — a first-class domain MEMBER,
+ *     materialized as the kernel `Function` class and attached to the Domain via an
+ *     `of_domain` edge (slug `function.<slug>`), so it is addressable by the
+ *     semantic path `/:${origin}:function.<slug>` (the form a `postInstall` uses).
  *   - a Hono route on the worker at the path implied by `binding`
- *     (`/<functionsFolder>/<slug>` POST by default — no `core/` in the URL).
+ *     (`/<functionsFolder>/<slug>` POST by default — the route URL is decoupled
+ *     from the graph layout).
  *
- * The slug = the map key (single source of truth, no duplication).
- *
- * `ref` is auto-derived as `function.<slug>` if omitted — used as
- * `Function.ref` on the graph node and as the dispatch key.
+ * The slug = the map key (single source of truth, no duplication). The member
+ * ref (`function.<slug>`), the layout (`/<origin>/functions/<slug>`), and the
+ * `of_domain` edge slug are all DERIVED from it — there is nothing else to name.
  */
 /**
  * Identity helper for authoring a RemoteFunction. Returns its argument

package/dist/define/remote-function.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-function.js","sourceRoot":"","sources":["../../src/define/remote-function.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA8GH;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAMlC,GAAsD;IAEtD,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"remote-function.js","sourceRoot":"","sources":["../../src/define/remote-function.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAgJH;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAMlC,GAAsD;IAEtD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/define/view.d.ts

@@ -2,14 +2,16 @@
  * Authoring a `View` — iframe-mountable callable served by the domain worker.
  *
  * Each entry in `defineRemoteDomain({ views: { ... } })` becomes both:
- *   - a graph node at `/${origin}/core/<viewsFolder>/<slug>` (auto-materialized
- *     by the SDK; the `core/` segment is the universal anchor injected by
- *     `buildCorePath`. `<slug>` is the map key, so it lives in exactly one place)
+ *   - a first-class domain MEMBER: a `View` node at `/${origin}/views/<slug>`
+ *     attached to the Domain via an `of_domain` edge (slug `view.<slug>`),
+ *     addressable as `/:${origin}:view.<slug>`. `<slug>` is the map key, so it
+ *     lives in exactly one place.
  *   - a Hono route on the worker at the path implied by `binding`
- *     (`/<viewsFolder>/<slug>` by default — note: no `core/` in the URL).
+ *     (`/<viewsFolder>/<slug>` by default).
  *
- * The `core/` segment appears in the GRAPH path only; the URL path that
- * lands in `Function.binding.remoteUrl` is `${url}/<viewsFolder>/<slug>`.
+ * The graph layout (`/<origin>/views/<slug>`) is a fixed kernel convention; the
+ * URL path that lands in `Function.binding.remoteUrl` is
+ * `${url}/<viewsFolder>/<slug>` — DECOUPLED from the graph layout.
  *
  * The author can override the URL via `binding` — host and/or path
  * placeholders are supported (the kernel's `route` mechanism does the

package/dist/define/view.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"view.d.ts","sourceRoot":"","sources":["../../src/define/view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAChF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAEnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEtD,MAAM,MAAM,iBAAiB,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,SAAS,UAAU,GAAG,UAAU,IAAI;IACtF,+DAA+D;IAC/D,CAAC,EAAE,OAAO,CAAA;IACV;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B;;;;OAIG;IACH,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAA;IAC1B,6DAA6D;IAC7D,IAAI,EAAE,KAAK,CAAA;IACX;;;;;;OAMG;IACH,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAA;CAC3E,CAAA;AAED,MAAM,MAAM,OAAO,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,SAAS,UAAU,GAAG,UAAU,IAAI;IAC5E;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IAC5B,uDAAuD;IACvD,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/E;;;;;OAKG;IACH,OAAO,CAAC,EAAE,YAAY,GAAG,YAAY,EAAE,CAAA;IACvC,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,SAAS,UAAU,GAAG,UAAU,EAC/E,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,GACzB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAEvB"}
+{"version":3,"file":"view.d.ts","sourceRoot":"","sources":["../../src/define/view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAChF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAEnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEtD,MAAM,MAAM,iBAAiB,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,SAAS,UAAU,GAAG,UAAU,IAAI;IACtF,+DAA+D;IAC/D,CAAC,EAAE,OAAO,CAAA;IACV;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B;;;;OAIG;IACH,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAA;IAC1B,6DAA6D;IAC7D,IAAI,EAAE,KAAK,CAAA;IACX;;;;;;OAMG;IACH,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAA;CAC3E,CAAA;AAED,MAAM,MAAM,OAAO,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,SAAS,UAAU,GAAG,UAAU,IAAI;IAC5E;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IAC5B,uDAAuD;IACvD,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/E;;;;;OAKG;IACH,OAAO,CAAC,EAAE,YAAY,GAAG,YAAY,EAAE,CAAA;IACvC,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,SAAS,UAAU,GAAG,UAAU,EAC/E,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,GACzB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAEvB"}

package/dist/define/view.js

@@ -2,14 +2,16 @@
  * Authoring a `View` — iframe-mountable callable served by the domain worker.
  *
  * Each entry in `defineRemoteDomain({ views: { ... } })` becomes both:
- *   - a graph node at `/${origin}/core/<viewsFolder>/<slug>` (auto-materialized
- *     by the SDK; the `core/` segment is the universal anchor injected by
- *     `buildCorePath`. `<slug>` is the map key, so it lives in exactly one place)
+ *   - a first-class domain MEMBER: a `View` node at `/${origin}/views/<slug>`
+ *     attached to the Domain via an `of_domain` edge (slug `view.<slug>`),
+ *     addressable as `/:${origin}:view.<slug>`. `<slug>` is the map key, so it
+ *     lives in exactly one place.
  *   - a Hono route on the worker at the path implied by `binding`
- *     (`/<viewsFolder>/<slug>` by default — note: no `core/` in the URL).
+ *     (`/<viewsFolder>/<slug>` by default).
  *
- * The `core/` segment appears in the GRAPH path only; the URL path that
- * lands in `Function.binding.remoteUrl` is `${url}/<viewsFolder>/<slug>`.
+ * The graph layout (`/<origin>/views/<slug>`) is a fixed kernel convention; the
+ * URL path that lands in `Function.binding.remoteUrl` is
+ * `${url}/<viewsFolder>/<slug>` — DECOUPLED from the graph layout.
  *
  * The author can override the URL via `binding` — host and/or path
  * placeholders are supported (the kernel's `route` mechanism does the

package/dist/define/view.js.map

@@ -1 +1 @@
-{"version":3,"file":"view.js","sourceRoot":"","sources":["../../src/define/view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAsFH;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,GAA0B;IAE1B,OAAO,GAAG,CAAA;AACZ,CAAC"}
+{"version":3,"file":"view.js","sourceRoot":"","sources":["../../src/define/view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAsFH;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,GAA0B;IAE1B,OAAO,GAAG,CAAA;AACZ,CAAC"}