@astrale-os/sdk 0.4.18 → 0.5.0-beta.1

package/dist/define/view.d.ts

@@ -1,104 +0,0 @@
-/**
- * Authoring a `View` — iframe-mountable callable served by the domain worker.
- *
- * Each entry in `defineRemoteDomain({ views: { ... } })` becomes both:
- *   - a first-class domain MEMBER: a `View` node at `/${origin}/views/<slug>`
- *     attached to the Domain via an `of_domain` edge (slug `view.<slug>`),
- *     addressable as `/:${origin}:view.<slug>`. `<slug>` is the map key, so it
- *     lives in exactly one place.
- *   - a Hono route on the worker at the path implied by `binding`
- *     (`/<viewsFolder>/<slug>` by default).
- *
- * The graph layout (`/<origin>/views/<slug>`) is a fixed kernel convention; the
- * URL path that lands in `Function.binding.remoteUrl` is
- * `${url}/<viewsFolder>/<slug>` — DECOUPLED from the graph layout.
- *
- * The author can override the URL via `binding` — host and/or path
- * placeholders are supported (the kernel's `route` mechanism does the
- * substitution + Hono matching, same as for methods). When `render` is
- * omitted, no worker route is mounted — useful for Views whose iframe
- * lives at an external host.
- */
-import type { AuthPolicy, FunctionBinding } from '@astrale-os/kernel-api/routed';
-import type { EdgeEndpoint } from '@astrale-os/kernel-dsl';
-import type { Context } from 'hono';
-import type { FunctionContextApi } from '../auth/function-context.js';
-import type { AuthForPolicy } from '../method/context.js';
-import type { RemoteEnv } from '../method/context.js';
-export type ViewRenderContext<TDeps = unknown, TAuth extends AuthPolicy = AuthPolicy> = {
-    /** Hono request context — read params, headers, query, etc. */
-    c: Context;
-    /**
-     * Placeholders extracted from the request URL (host + path placeholders
-     * declared in `binding.remoteUrl` / `binding.route.path`). Empty when
-     * the binding has no placeholders.
-     */
-    params: Record<string, string>;
-    /**
-     * Resolved auth context. Its nullability follows the View's `auth` policy:
-     * non-null for `'required'`, `... | null` for `'optional'`, and `null` for
-     * `'public'`.
-     */
-    auth: AuthForPolicy<TAuth>;
-    /** Typed dependency container injected at server startup. */
-    deps: TDeps;
-    /** Local serving metadata. */
-    env: RemoteEnv;
-    /** View function identity tools. Use `fn.kernel()` for server-rendered graph reads. */
-    fn: FunctionContextApi;
-};
-export type ViewDef<TDeps = unknown, TAuth extends AuthPolicy = AuthPolicy> = {
-    /**
-     * Override the binding (URL + route shape). When absent, SDK defaults to
-     * `{ remoteUrl: ${url}/<viewsFolder>/<slug> }`. The HTTP verb (GET for
-     * views) is applied by the worker route mounter at mount time — it is NOT
-     * stored on the binding.
-     *
-     * Use this to bind to a custom host (e.g. `https://{tenant}.example.com`)
-     * or REST-style path. Host + path placeholders both supported.
-     */
-    binding?: FunctionBinding;
-    /**
-     * Worker-relative path the View's iframe is served from (e.g. `'/ui/note'`),
-     * for Views backed by the client SPA instead of a `render`. The spec producer
-     * resolves it against the serving url (`binding.remoteUrl = ${url}${mount}`)
-     * at materialize time — so the dev never hardcodes a URL. Mutually exclusive
-     * with `render`; takes precedence over `binding`.
-     */
-    mount?: string;
-    /**
-     * Shell handshake mode for the mounted iframe. Omit for the common case:
-     * SPA-mounted views (`mount`) use the shell handshake; inline `render` views
-     * default to `'none'` because they do not include the shell client.
-     */
-    handshake?: 'shell' | 'none';
-    /** Authentication policy. Defaults to `'required'`. */
-    auth?: TAuth;
-    /**
-     * Optional pre-render authorization. Runs after auth resolution; throw to
-     * deny. SDK wraps as 403.
-     */
-    authorize?: (ctx: ViewRenderContext<TDeps, TAuth>) => void | Promise<void>;
-    /**
-     * Render the iframe response. May return a redirect, a proxy, or inline
-     * HTML. When omitted, no worker route is mounted — the binding URL
-     * points elsewhere (CDN, external service).
-     */
-    render?: (ctx: ViewRenderContext<TDeps, TAuth>) => Response | Promise<Response>;
-    /**
-     * Optional target(s) the View attaches to via `view_for` edge(s). Typically
-     * `selfOf(SomeClass)` to bind to a class meta-node, or a `CorePath`
-     * pointing at a specific instance. Pass an array to attach the same View
-     * to multiple targets (one `view_for` edge is materialized per entry).
-     */
-    viewFor?: EdgeEndpoint | EdgeEndpoint[];
-    /** Optional human-readable description. */
-    description?: string;
-};
-/**
- * Identity helper for authoring a View. Returns its argument unchanged —
- * `defineRemoteDomain` consumes the typed shape and the author retains
- * full type inference on `render` / `authorize`.
- */
-export declare function defineView<TDeps = unknown, TAuth extends AuthPolicy = 'required'>(def: ViewDef<TDeps, TAuth>): ViewDef<TDeps, TAuth>;
-//# sourceMappingURL=view.d.ts.map

package/dist/define/view.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"view.d.ts","sourceRoot":"","sources":["../../src/define/view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAEnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAErD,MAAM,MAAM,iBAAiB,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,SAAS,UAAU,GAAG,UAAU,IAAI;IACtF,+DAA+D;IAC/D,CAAC,EAAE,OAAO,CAAA;IACV;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B;;;;OAIG;IACH,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAA;IAC1B,6DAA6D;IAC7D,IAAI,EAAE,KAAK,CAAA;IACX,8BAA8B;IAC9B,GAAG,EAAE,SAAS,CAAA;IACd,uFAAuF;IACvF,EAAE,EAAE,kBAAkB,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,OAAO,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,SAAS,UAAU,GAAG,UAAU,IAAI;IAC5E;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;IAC5B,uDAAuD;IACvD,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/E;;;;;OAKG;IACH,OAAO,CAAC,EAAE,YAAY,GAAG,YAAY,EAAE,CAAA;IACvC,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,SAAS,UAAU,GAAG,UAAU,EAC/E,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,GACzB,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAEvB"}

package/dist/define/view.js

@@ -1,30 +0,0 @@
-/**
- * Authoring a `View` — iframe-mountable callable served by the domain worker.
- *
- * Each entry in `defineRemoteDomain({ views: { ... } })` becomes both:
- *   - a first-class domain MEMBER: a `View` node at `/${origin}/views/<slug>`
- *     attached to the Domain via an `of_domain` edge (slug `view.<slug>`),
- *     addressable as `/:${origin}:view.<slug>`. `<slug>` is the map key, so it
- *     lives in exactly one place.
- *   - a Hono route on the worker at the path implied by `binding`
- *     (`/<viewsFolder>/<slug>` by default).
- *
- * The graph layout (`/<origin>/views/<slug>`) is a fixed kernel convention; the
- * URL path that lands in `Function.binding.remoteUrl` is
- * `${url}/<viewsFolder>/<slug>` — DECOUPLED from the graph layout.
- *
- * The author can override the URL via `binding` — host and/or path
- * placeholders are supported (the kernel's `route` mechanism does the
- * substitution + Hono matching, same as for methods). When `render` is
- * omitted, no worker route is mounted — useful for Views whose iframe
- * lives at an external host.
- */
-/**
- * Identity helper for authoring a View. Returns its argument unchanged —
- * `defineRemoteDomain` consumes the typed shape and the author retains
- * full type inference on `render` / `authorize`.
- */
-export function defineView(def) {
-    return def;
-}
-//# sourceMappingURL=view.js.map

package/dist/define/view.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"view.js","sourceRoot":"","sources":["../../src/define/view.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAkFH;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,GAA0B;IAE1B,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/deploy/check.d.ts

@@ -1,30 +0,0 @@
-import type { Meta } from './meta.js';
-export type DeployCheckOptions = {
-    /** Deployed worker URL (e.g. `https://example.astrale.ai`). */
-    url: string;
-    /**
-     * Expected `meta.schemaHash` — the hash of the domain's install graph (via
-     * `buildInstallGraphHash(domain, url)`). REQUIRED to verify schema drift: when
-     * the worker advertises a `schemaHash` but this is absent, the check fails
-     * loudly rather than silently "passing" an unverified deploy. Per-domain
-     * deploy scripts compute it (`buildInstallGraphHash(...)`) and pass it.
-     */
-    expectedSchemaHash?: string;
-    /**
-     * Path to the SDK repo used to read `sdkCommit`. If omitted and
-     * `workspaceRoot` is provided, defaults to `<workspaceRoot>/sdk`.
-     */
-    sdkRepoPath?: string;
-    /** Astrale workspace root — enables auto-resolution of `sdkRepoPath` (`<root>/sdk`). */
-    workspaceRoot?: string;
-    /** Sink for progress output. Defaults to `console.log`. */
-    log?: (line: string) => void;
-};
-/**
- * Validate a deployed worker against local state by fetching `/meta` and
- * verifying sdkCommit / schemaHash / JWKS reachability.
- *
- * Throws on any mismatch. Returns `Meta` on success.
- */
-export declare function deployCheck(opts: DeployCheckOptions): Promise<Meta>;
-//# sourceMappingURL=check.d.ts.map

package/dist/deploy/check.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/deploy/check.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIrC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAA;IACX;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,wFAAwF;IACxF,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,2DAA2D;IAC3D,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC7B,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBzE"}

package/dist/deploy/check.js

@@ -1,82 +0,0 @@
-import { spawnSync } from 'node:child_process';
-import { join } from 'node:path';
-import { MetaSchema } from './meta.js';
-/**
- * Validate a deployed worker against local state by fetching `/meta` and
- * verifying sdkCommit / schemaHash / JWKS reachability.
- *
- * Throws on any mismatch. Returns `Meta` on success.
- */
-export async function deployCheck(opts) {
-    // oxlint-disable-next-line no-console
-    const log = opts.log ?? ((line) => console.log(line));
-    const base = opts.url.replace(/\/+$/, '');
-    log(`# deploy:check ${base}`);
-    const meta = await fetchMeta(base);
-    log(`  meta: ${JSON.stringify(meta)}`);
-    // `meta.iss` is required + non-empty by `MetaSchema`, enforced in `fetchMeta`.
-    await Promise.all([
-        checkSdkCommit(meta, opts, log),
-        checkSchemaHash(meta, opts, log),
-        checkJwks(meta.iss, log),
-    ]);
-    return meta;
-}
-async function fetchMeta(base) {
-    const res = await fetch(`${base}/meta`);
-    if (!res.ok)
-        throw new Error(`GET ${base}/meta → ${res.status}`);
-    return MetaSchema.parse(await res.json());
-}
-async function checkSdkCommit(meta, opts, log) {
-    if (!meta.sdkCommit) {
-        log('  ! meta.sdkCommit absent — skipping sdkCommit check');
-        return;
-    }
-    const sdkRepo = opts.sdkRepoPath ?? (opts.workspaceRoot ? join(opts.workspaceRoot, 'sdk') : undefined);
-    if (!sdkRepo) {
-        log(`  ! no sdkRepoPath / workspaceRoot — skipping sdkCommit check`);
-        return;
-    }
-    const localSha = gitHead(sdkRepo);
-    if (!localSha) {
-        log(`  ! could not read git HEAD from ${sdkRepo} — skipping sdkCommit check`);
-        return;
-    }
-    if (!localSha.startsWith(meta.sdkCommit) && !meta.sdkCommit.startsWith(localSha)) {
-        throw new Error(`sdkCommit mismatch: deployed=${meta.sdkCommit} local=${localSha} (${sdkRepo})`);
-    }
-    log(`  ✓ sdkCommit ${meta.sdkCommit} matches local HEAD`);
-}
-async function checkSchemaHash(meta, opts, log) {
-    if (!meta.schemaHash)
-        return;
-    // Fail loud: the worker advertises a schemaHash, so a missing expected value
-    // means we CANNOT verify drift — never silently "pass" an unverified deploy.
-    if (!opts.expectedSchemaHash) {
-        throw new Error(`worker advertises schemaHash=${meta.schemaHash} but no expectedSchemaHash was provided — ` +
-            `cannot verify schema drift (pass expectedSchemaHash, e.g. buildInstallGraphHash(domain, url))`);
-    }
-    if (meta.schemaHash !== opts.expectedSchemaHash) {
-        throw new Error(`schemaHash mismatch: deployed=${meta.schemaHash} local=${opts.expectedSchemaHash}`);
-    }
-    log(`  ✓ schemaHash ${meta.schemaHash} matches local`);
-}
-async function checkJwks(iss, log) {
-    const jwksUrl = `${iss.replace(/\/+$/, '')}/.well-known/jwks.json`;
-    const res = await fetch(jwksUrl);
-    if (!res.ok)
-        throw new Error(`GET ${jwksUrl} → ${res.status}`);
-    const body = (await res.json());
-    const keys = body.keys ?? [];
-    if (keys.length === 0)
-        throw new Error(`${jwksUrl} returned no keys`);
-    log(`  ✓ JWKS resolves (${keys.length} key${keys.length === 1 ? '' : 's'})`);
-}
-function gitHead(repoPath) {
-    const r = spawnSync('git', ['-C', repoPath, 'rev-parse', 'HEAD'], { encoding: 'utf-8' });
-    if (r.status !== 0)
-        return null;
-    return r.stdout.trim();
-}
-//# sourceMappingURL=check.js.map

package/dist/deploy/check.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/deploy/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIhC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAwBtC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAwB;IACxD,sCAAsC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAEzC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAA;IAE7B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAA;IAClC,GAAG,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACtC,+EAA+E;IAE/E,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC;QAC/B,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC;QAChC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;KACzB,CAAC,CAAA;IAEF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,CAAA;IACvC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAChE,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAC3C,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAU,EACV,IAAwB,EACxB,GAA2B;IAE3B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,GAAG,CAAC,sDAAsD,CAAC,CAAA;QAC3D,OAAM;IACR,CAAC;IACD,MAAM,OAAO,GACX,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACxF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,GAAG,CAAC,+DAA+D,CAAC,CAAA;QACpE,OAAM;IACR,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,oCAAoC,OAAO,6BAA6B,CAAC,CAAA;QAC7E,OAAM;IACR,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,SAAS,UAAU,QAAQ,KAAK,OAAO,GAAG,CAAC,CAAA;IAClG,CAAC;IACD,GAAG,CAAC,iBAAiB,IAAI,CAAC,SAAS,qBAAqB,CAAC,CAAA;AAC3D,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAU,EACV,IAAwB,EACxB,GAA2B;IAE3B,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAM;IAC5B,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,UAAU,4CAA4C;YACzF,+FAA+F,CAClG,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,CAAC,UAAU,UAAU,IAAI,CAAC,kBAAkB,EAAE,CACpF,CAAA;IACH,CAAC;IACD,GAAG,CAAC,kBAAkB,IAAI,CAAC,UAAU,gBAAgB,CAAC,CAAA;AACxD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,GAA2B;IAC/D,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB,CAAA;IAClE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9D,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuC,CAAA;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAA;IAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,mBAAmB,CAAC,CAAA;IACrE,GAAG,CAAC,sBAAsB,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB;IAC/B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;IACxF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/B,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/deploy/index.d.ts

@@ -1,3 +0,0 @@
-export { MetaSchema, type Meta } from './meta.js';
-export { deployCheck, type DeployCheckOptions } from './check.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/deploy/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/deploy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,MAAM,WAAW,CAAA;AACjD,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAA"}

package/dist/deploy/index.js

@@ -1,3 +0,0 @@
-export { MetaSchema } from './meta.js';
-export { deployCheck } from './check.js';
-//# sourceMappingURL=index.js.map

package/dist/deploy/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/deploy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAa,MAAM,WAAW,CAAA;AACjD,OAAO,EAAE,WAAW,EAA2B,MAAM,YAAY,CAAA"}

package/dist/deploy/meta.d.ts

@@ -1,29 +0,0 @@
-/**
- * `/meta` payload — the contract between `createRemoteServer` (producer)
- * and `deployCheck` (verifier). Both sides parse through `MetaSchema`, so
- * a new field added here flows to both paths and drift is caught at the
- * boundary rather than silently skipped.
- *
- * Scope: **domain workers only**. Kernels rely on OIDC discovery
- * (`/.well-known/openid-configuration`) + JWKS — they have no `/meta`.
- */
-import { z } from 'zod';
-export declare const MetaSchema: z.ZodObject<{
-    version: z.ZodDefault<z.ZodNumber>;
-    iss: z.ZodString;
-    sdkCommit: z.ZodOptional<z.ZodString>;
-    schemaHash: z.ZodOptional<z.ZodString>;
-    domainName: z.ZodOptional<z.ZodString>;
-    manifest: z.ZodOptional<z.ZodObject<{
-        logo: z.ZodOptional<z.ZodString>;
-        entrypoint: z.ZodOptional<z.ZodString>;
-        roles: z.ZodOptional<z.ZodArray<z.ZodObject<{
-            slug: z.ZodString;
-            name: z.ZodOptional<z.ZodString>;
-            description: z.ZodOptional<z.ZodString>;
-            default: z.ZodOptional<z.ZodBoolean>;
-        }, z.core.$strip>>>;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
-export type Meta = z.infer<typeof MetaSchema>;
-//# sourceMappingURL=meta.d.ts.map

package/dist/deploy/meta.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../../src/deploy/meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;iBAmCrB,CAAA;AAEF,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAA"}

package/dist/deploy/meta.js

@@ -1,45 +0,0 @@
-/**
- * `/meta` payload — the contract between `createRemoteServer` (producer)
- * and `deployCheck` (verifier). Both sides parse through `MetaSchema`, so
- * a new field added here flows to both paths and drift is caught at the
- * boundary rather than silently skipped.
- *
- * Scope: **domain workers only**. Kernels rely on OIDC discovery
- * (`/.well-known/openid-configuration`) + JWKS — they have no `/meta`.
- */
-import { z } from 'zod';
-export const MetaSchema = z.object({
-    // The version of the meta payload. Incremented on any change to the payload
-    version: z.number().int().min(1).default(1),
-    /** Base URL where JWKS is published. Always stamped by `createRemoteServer`
-     *  and required by `deployCheck` to verify JWKS reachability. */
-    iss: z.string().min(1),
-    /** Short git SHA of the SDK used to build the worker. */
-    sdkCommit: z.string().optional(),
-    /** Deterministic hash of the compiled spec (`sha256:<hex>`). */
-    schemaHash: z.string().optional(),
-    /** Local directory name under `kernel/domains/<...>/` — used to auto-resolve the local spec. */
-    domainName: z.string().optional(),
-    /**
-     * Optional presentation metadata declared on the domain (`defineDomain`):
-     * `logo` (inline SVG / `data:` URL), `entrypoint` (a view slug — the domain's
-     * entry surface), and the domain's declared `roles` (registered by a workspace
-     * at app install). Served verbatim so a host UI can brand a freshly-installed
-     * domain.
-     */
-    manifest: z
-        .object({
-        logo: z.string().optional(),
-        entrypoint: z.string().optional(),
-        roles: z
-            .array(z.object({
-            slug: z.string().min(1),
-            name: z.string().optional(),
-            description: z.string().optional(),
-            default: z.boolean().optional(),
-        }))
-            .optional(),
-    })
-        .optional(),
-});
-//# sourceMappingURL=meta.js.map

package/dist/deploy/meta.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"meta.js","sourceRoot":"","sources":["../../src/deploy/meta.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,4EAA4E;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C;qEACiE;IACjE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,yDAAyD;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,gEAAgE;IAChE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,gGAAgG;IAChG,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC;;;;;;OAMG;IACH,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACjC,KAAK,EAAE,CAAC;aACL,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;YACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAClC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SAChC,CAAC,CACH;aACA,QAAQ,EAAE;KACd,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAA"}

package/dist/dispatch/authorize.d.ts

@@ -1,14 +0,0 @@
-/**
- * Shared `authorize`-hook runner.
- *
- * Both the method dispatcher (`dispatcher.ts`) and the worker-side aux routes
- * (`server/auxiliary-routes.ts`) let an author deny a call by throwing from an
- * `authorize` hook. They MUST agree on the wire semantics: an already-typed
- * `AuthorizationDeniedError` passes through unchanged (so callers can attach
- * hints), and any other thrown error is wrapped into `AuthorizationDeniedError`
- * (→ `PERMISSION_DENIED` / HTTP 403). Centralised here so the two call sites
- * cannot drift — previously the aux routes awaited `authorize` directly, so a
- * plain `Error` thrown to deny leaked out as a 500 instead of a 403.
- */
-export declare function runAuthorize<C>(hook: (ctx: C) => void | Promise<void>, ctx: C): Promise<void>;
-//# sourceMappingURL=authorize.d.ts.map

package/dist/dispatch/authorize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../src/dispatch/authorize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,wBAAsB,YAAY,CAAC,CAAC,EAClC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EACtC,GAAG,EAAE,CAAC,GACL,OAAO,CAAC,IAAI,CAAC,CAUf"}

package/dist/dispatch/authorize.js

@@ -1,24 +0,0 @@
-/**
- * Shared `authorize`-hook runner.
- *
- * Both the method dispatcher (`dispatcher.ts`) and the worker-side aux routes
- * (`server/auxiliary-routes.ts`) let an author deny a call by throwing from an
- * `authorize` hook. They MUST agree on the wire semantics: an already-typed
- * `AuthorizationDeniedError` passes through unchanged (so callers can attach
- * hints), and any other thrown error is wrapped into `AuthorizationDeniedError`
- * (→ `PERMISSION_DENIED` / HTTP 403). Centralised here so the two call sites
- * cannot drift — previously the aux routes awaited `authorize` directly, so a
- * plain `Error` thrown to deny leaked out as a 500 instead of a 403.
- */
-import { AuthorizationDeniedError } from './errors.js';
-export async function runAuthorize(hook, ctx) {
-    try {
-        await hook(ctx);
-    }
-    catch (err) {
-        if (err instanceof AuthorizationDeniedError)
-            throw err;
-        throw new AuthorizationDeniedError(err instanceof Error ? err.message : 'Authorization denied', err);
-    }
-}
-//# sourceMappingURL=authorize.js.map

package/dist/dispatch/authorize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../src/dispatch/authorize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAEtD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAsC,EACtC,GAAM;IAEN,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,wBAAwB;YAAE,MAAM,GAAG,CAAA;QACtD,MAAM,IAAI,wBAAwB,CAChC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,EAC3D,GAAG,CACJ,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/dispatch/dispatcher.d.ts

@@ -1,59 +0,0 @@
-/**
- * `SdkDispatcher` — implements direct KernelAPI calls and hosted invocations
- * through the same SDK execution pipeline.
- *
- * Built once at server startup from the domain's `CompiledDomain` plus a typed
- * deps container and a private JWK. Per-method identity configs are
- * pre-resolved into a Map so dispatch is O(1) per call.
- *
- * Pipeline per call:
- *   resolve method → authenticate → validate → resolve self → execute
- */
-import type { AuthedKernelAPI, DispatchResult, KernelAPI } from '@astrale-os/kernel-api';
-import type { CredentialInput, Path } from '@astrale-os/kernel-core';
-import type { CompiledDomain } from '@astrale-os/kernel-core/domain';
-import type { Invocation, Capabilities, Dispatcher } from '@astrale-os/kernel-server';
-import type { MethodIndex } from './resolve.js';
-export type SdkDispatcherConfig<TDeps> = {
-    /** The compiled domain — source of the method layout and origin-addressed subs. */
-    compiled: CompiledDomain;
-    /** Pre-built method map: ref → BoundMethod. */
-    methods: MethodIndex;
-    /** Dependency container injected into every handler. */
-    deps: TDeps;
-    /** Private key for signing outbound per-function credentials. */
-    privateKey: JsonWebKey;
-    /**
-     * The worker's identity (`iss`) for outbound per-function credentials — its
-     * serving URL (e.g. `https://crm.test.com`), DECOUPLED from the domain's
-     * addressing `origin`. Matches the `iss` the kernel pins on each node at
-     * install (the URL it fetched the domain at).
-     */
-    issuer: string;
-    /** The worker's serving URL (`config.url`) — exposed to handlers as `ctx.env.url`. */
-    url: string;
-};
-export declare class SdkDispatcher<TDeps = unknown> implements KernelAPI, Dispatcher {
-    private readonly methods;
-    private readonly deps;
-    private readonly identities;
-    private readonly issuer;
-    private readonly url;
-    private readonly privateKey;
-    /** Built once from the compiled domain — drives typed self and handler kernel binding. */
-    private readonly binder;
-    constructor(config: SdkDispatcherConfig<TDeps>);
-    call(path: Path | string, credential: CredentialInput, params: unknown, self?: string): Promise<unknown>;
-    stream(path: Path | string, credential: CredentialInput, params: unknown, self?: string): Promise<AsyncGenerator<unknown>>;
-    /**
-     * SDK dispatch never redirects — the SDK server IS the remote destination.
-     * Every call resolves locally; we just classify the return as value or stream
-     * and hand it back to the invocation host.
-     */
-    dispatch(path: Path | string, credential: CredentialInput, params: unknown, self?: string): Promise<DispatchResult>;
-    invoke(invocation: Invocation, caps: Capabilities): Promise<DispatchResult>;
-    as(credential: CredentialInput): AuthedKernelAPI;
-    private run;
-    private identityFor;
-}
-//# sourceMappingURL=dispatcher.d.ts.map

package/dist/dispatch/dispatcher.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dispatcher.d.ts","sourceRoot":"","sources":["../../src/dispatch/dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAGxF,OAAO,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAA;AACpE,OAAO,KAAK,EAAe,cAAc,EAAE,MAAM,gCAAgC,CAAA;AACjF,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAOrF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAc/C,MAAM,MAAM,mBAAmB,CAAC,KAAK,IAAI;IACvC,mFAAmF;IACnF,QAAQ,EAAE,cAAc,CAAA;IACxB,+CAA+C;IAC/C,OAAO,EAAE,WAAW,CAAA;IACpB,wDAAwD;IACxD,IAAI,EAAE,KAAK,CAAA;IACX,iEAAiE;IACjE,UAAU,EAAE,UAAU,CAAA;IACtB;;;;;OAKG;IACH,MAAM,EAAE,MAAM,CAAA;IACd,sFAAsF;IACtF,GAAG,EAAE,MAAM,CAAA;CACZ,CAAA;AAED,qBAAa,aAAa,CAAC,KAAK,GAAG,OAAO,CAAE,YAAW,SAAS,EAAE,UAAU;IAC1E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0D;IACrF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAQ;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAC5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAY;IACvC,0FAA0F;IAC1F,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2C;IAElE,YAAY,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAa7C;IAEK,IAAI,CACR,IAAI,EAAE,IAAI,GAAG,MAAM,EACnB,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,OAAO,EACf,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAUlB;IAEK,MAAM,CACV,IAAI,EAAE,IAAI,GAAG,MAAM,EACnB,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,OAAO,EACf,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAMlC;IAED;;;;OAIG;IACG,QAAQ,CACZ,IAAI,EAAE,IAAI,GAAG,MAAM,EACnB,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,OAAO,EACf,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,cAAc,CAAC,CAOzB;IAEK,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAKhF;IAED,EAAE,CAAC,UAAU,EAAE,eAAe,GAAG,eAAe,CAK/C;YAEa,GAAG;IA+GjB,OAAO,CAAC,WAAW;CAapB"}