@astrale-os/sdk 0.4.18 → 0.5.0-beta.1

package/dist/method/single.d.ts

@@ -1,81 +0,0 @@
-/** Authoring helpers for one schema-bound remote method. */
-import type { AuthPolicy, RouteBinding } from '@astrale-os/kernel-api/routed';
-import type { MethodClassKeys, ClassMethodConfig, NonSealedMethodKeys, OwnMethodKeys } from '@astrale-os/kernel-core/domain';
-import type { Schema } from '@astrale-os/kernel-dsl';
-import type { TypedSelf } from '../dispatch/self.js';
-import type { DomainKernel, Kernel, KernelForAuth, RemoteAuthorizeContext, RemoteContext } from './context.js';
-/**
- * Remote method handler. `execute` is optional only for binding stubs; any
- * handler that the dispatcher actually reaches must provide it.
- */
-export type RemoteHandler<TParams, TResult, TSelf, TDeps, TAuth extends AuthPolicy = 'required', TKernel extends Kernel = Kernel> = {
-    /** The handler body. May be async or an async generator (for `output: 'stream'`). */
-    execute?: (ctx: RemoteContext<TParams, TSelf, TDeps, KernelForAuth<TAuth, TKernel>, TAuth>) => TResult | Promise<TResult> | AsyncGenerator<TResult>;
-    /**
-     * Optional REST binding — attaches a native HTTP route to this method.
-     * Uses the kernel's canonical `RouteBinding` type directly.
-     */
-    route?: RouteBinding;
-    /**
-     * Optional anchor URL — marks this method as anchored to a specific host.
-     * May contain `{name}` placeholders matching fields in the input schema.
-     * If absent, the method is ambient (mounts on whatever server loads the domain).
-     */
-    remoteUrl?: string;
-    /** Optional human-readable description. Appears in generated docs. */
-    description?: string;
-    /**
-     * Authentication policy. Defaults to `'required'` when absent. Captured as a
-     * literal type so it drives `ctx.auth` and {@link KernelForAuth} on the
-     * `execute`/`authorize` context: omit it (or set `'required'`) and both
-     * `ctx.auth` and `ctx.kernel` are non-null; `'optional'` widens them to
-     * `... | null`; `'public'` makes both `null`.
-     */
-    auth?: TAuth;
-    /**
-     * Optional business authorization after auth/_self resolution. Kernel
-     * has_perm checks remain authoritative; this is additive gating.
-     */
-    authorize?: (ctx: RemoteAuthorizeContext<TParams, TSelf, TDeps, KernelForAuth<TAuth, TKernel>, TAuth>) => void | Promise<void>;
-};
-export type AnyRemoteHandler = Omit<RemoteHandler<any, any, any, any, AuthPolicy, Kernel>, 'authorize' | 'execute'> & {
-    execute?: (ctx: any) => any;
-    authorize?: (ctx: any) => void | Promise<void>;
-};
-type _AssertTrueH<T extends true> = T;
-type _HandlerFitsBag<D> = D extends AnyRemoteHandler ? true : false;
-export type _MethodPolicyBagGuards = [
-    _AssertTrueH<_HandlerFitsBag<RemoteHandler<unknown, unknown, unknown, unknown, 'public'>>>,
-    _AssertTrueH<_HandlerFitsBag<RemoteHandler<unknown, unknown, unknown, unknown, 'optional'>>>,
-    _AssertTrueH<_HandlerFitsBag<RemoteHandler<unknown, unknown, unknown, unknown, 'required'>>>
-];
-/**
- * Fully typed method implementation — resolves params/result/self from the
- * schema, wraps in `RemoteHandler` with deps.
- */
-export type MethodImpl<S extends Schema, K extends MethodClassKeys<S> & string, M extends string, TDeps = unknown, TAuth extends AuthPolicy = 'required'> = ClassMethodConfig<S, K, M> extends {
-    params: infer P;
-    result: infer R;
-    self: unknown;
-    isStatic: infer St;
-} ? RemoteHandler<P, R, St extends true ? undefined : TypedSelf<S['classes'][K], S>, TDeps, TAuth, DomainKernel<S>> : never;
-/**
- * `MethodParams` / `MethodResult` — a handler types its `params` as
- * `MethodParams<typeof schema, 'Def', 'method'>` and its return as
- * `MethodResult<…>`, so it never re-declares (and can't drift from) the schema.
- * Resolved from whichever def — CLASS or INTERFACE — declares the method.
- */
-export type { MethodParams, MethodResult } from '@astrale-os/kernel-core/domain';
-type ImplementableMethodName<S extends Schema, K extends MethodClassKeys<S> & string> = (OwnMethodKeys<S, K> | NonSealedMethodKeys<S, K>) & string;
-/**
- * Identity helper for authoring one remote method with full schema-driven typing.
- *
- * Two-form calling convention:
- *  - `remoteMethod<TDeps>()` — curried form; captures deps type, returns a
- *     per-schema helper. Use when you want deps typed.
- *  - `remoteMethod(schema, className, methodName, impl)` — direct form with
- *     `unknown` deps.
- */
-export declare function remoteMethod<TDeps>(): <S extends Schema, K extends MethodClassKeys<S> & string, M extends ImplementableMethodName<S, K>, TAuth extends AuthPolicy = 'required'>(schema: S, className: K, methodName: M, impl: MethodImpl<S, K, M, TDeps, TAuth>) => MethodImpl<S, K, M, TDeps, TAuth>;
-export declare function remoteMethod<S extends Schema, K extends MethodClassKeys<S> & string, M extends ImplementableMethodName<S, K>, TAuth extends AuthPolicy = 'required'>(schema: S, className: K, methodName: M, impl: MethodImpl<S, K, M, unknown, TAuth>): MethodImpl<S, K, M, unknown, TAuth>;
-//# sourceMappingURL=single.d.ts.map

package/dist/method/single.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"single.d.ts","sourceRoot":"","sources":["../../src/method/single.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAE5D,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAC7E,OAAO,KAAK,EACV,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACd,MAAM,gCAAgC,CAAA;AACvC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAEpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,KAAK,EACV,YAAY,EACZ,MAAM,EACN,aAAa,EACb,sBAAsB,EACtB,aAAa,EACd,MAAM,cAAc,CAAA;AAErB;;;GAGG;AACH,MAAM,MAAM,aAAa,CACvB,OAAO,EACP,OAAO,EACP,KAAK,EACL,KAAK,EACL,KAAK,SAAS,UAAU,GAAG,UAAU,EACrC,OAAO,SAAS,MAAM,GAAG,MAAM,IAC7B;IACF,qFAAqF;IACrF,OAAO,CAAC,EAAE,CACR,GAAG,EAAE,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,KAC5E,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACzD;;;OAGG;IACH,KAAK,CAAC,EAAE,YAAY,CAAA;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,KAAK,CAAA;IACZ;;;OAGG;IACH,SAAS,CAAC,EAAE,CACV,GAAG,EAAE,sBAAsB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,KACrF,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1B,CAAA;AAKD,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,EACrD,WAAW,GAAG,SAAS,CACxB,GAAG;IACF,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,CAAA;IAC3B,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/C,CAAA;AAID,KAAK,YAAY,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAA;AACrC,KAAK,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS,gBAAgB,GAAG,IAAI,GAAG,KAAK,CAAA;AACnE,MAAM,MAAM,sBAAsB,GAAG;IACnC,YAAY,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1F,YAAY,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAC5F,YAAY,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;CAC7F,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,CACpB,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,EACrC,CAAC,SAAS,MAAM,EAChB,KAAK,GAAG,OAAO,EACf,KAAK,SAAS,UAAU,GAAG,UAAU,IAErC,iBAAiB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS;IACjC,MAAM,EAAE,MAAM,CAAC,CAAA;IACf,MAAM,EAAE,MAAM,CAAC,CAAA;IACf,IAAI,EAAE,OAAO,CAAA;IACb,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB,GACG,aAAa,CACX,CAAC,EACD,CAAC,EACD,EAAE,SAAS,IAAI,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAC3D,KAAK,EACL,KAAK,EACL,YAAY,CAAC,CAAC,CAAC,CAChB,GACD,KAAK,CAAA;AAEX;;;;;GAKG;AACH,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAEhF,KAAK,uBAAuB,CAAC,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CACpF,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,GACnB,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,CAC5B,GACC,MAAM,CAAA;AAER;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,KAAK,CACrC,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,EACrC,CAAC,SAAS,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,EACvC,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,MAAM,EAAE,CAAC,EACT,SAAS,EAAE,CAAC,EACZ,UAAU,EAAE,CAAC,EACb,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KACpC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;AACtC,wBAAgB,YAAY,CAC1B,CAAC,SAAS,MAAM,EAChB,CAAC,SAAS,eAAe,CAAC,CAAC,CAAC,GAAG,MAAM,EACrC,CAAC,SAAS,uBAAuB,CAAC,CAAC,EAAE,CAAC,CAAC,EACvC,KAAK,SAAS,UAAU,GAAG,UAAU,EAErC,MAAM,EAAE,CAAC,EACT,SAAS,EAAE,CAAC,EACZ,UAAU,EAAE,CAAC,EACb,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,GACxC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA"}

package/dist/method/single.js

@@ -1,8 +0,0 @@
-/** Authoring helpers for one schema-bound remote method. */
-export function remoteMethod(...args) {
-    if (args.length === 0) {
-        return (...innerArgs) => innerArgs[3];
-    }
-    return args[3];
-}
-//# sourceMappingURL=single.js.map

package/dist/method/single.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"single.js","sourceRoot":"","sources":["../../src/method/single.ts"],"names":[],"mappings":"AAAA,4DAA4D;AA+J5D,MAAM,UAAU,YAAY,CAAC,GAAG,IAAe;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,SAAoB,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,OAAO,IAAI,CAAC,CAAC,CAAC,CAAA;AAChB,CAAC"}

package/dist/server/auxiliary-routes.d.ts

@@ -1,48 +0,0 @@
-/**
- * Mount worker-side routes for `defineView` and `defineRemoteFunction` entries.
- *
- * Each entry's effective `FunctionBinding` is resolved once at boot (host
- * pattern, path, http verb) and a Hono route is registered that runs the
- * shared SDK auth pipeline (verify inbound credential, optionally enforce /
- * optional / public), Zod validation of input AND output (RemoteFunction
- * only — Views are transport-only), the author's `authorize` hook, and
- * finally `render` / `execute`.
- *
- * Bindings whose host is not a sub-domain of this worker's host are skipped
- * (the graph node was still materialized; the route lives elsewhere).
- */
-import type { Hono } from 'hono';
-import { type FunctionBinding } from '@astrale-os/kernel-api/routed';
-import { type CorsConfig } from '@astrale-os/kernel-server';
-import type { RemoteIdentityConfig } from '../auth/identity.js';
-import type { AnyRemoteFunctionDef } from '../define/remote-function.js';
-import type { ViewDef } from '../define/view.js';
-import type { AuxIdentityMap } from '../dispatch/identity.js';
-export type AuxiliaryRoutesConfig<TDeps> = {
-    app: Hono;
-    /** This worker's serving URL — used to filter bindings that point elsewhere. */
-    url: string;
-    views?: Record<string, ViewDef<TDeps>>;
-    viewBindings?: Record<string, FunctionBinding>;
-    remoteFunctions?: Record<string, AnyRemoteFunctionDef>;
-    remoteFunctionBindings?: Record<string, FunctionBinding>;
-    deps: TDeps;
-    /**
-     * Per-route identity configs (keyed by slug) — one entry per View and
-     * one per RemoteFunction. Build via `buildAuxIdentityMap(compiled, key, issuer)`
-     * from `sdk/src/dispatch/identity.ts`.
-     */
-    identities?: AuxIdentityMap;
-    /** Resolve an identity lazily. Service-hosted Functions use this to read the
-     * Function node registered during deploy and reuse the Service signing key. */
-    resolveIdentity?: (kind: 'view' | 'remoteFunction', slug: string) => RemoteIdentityConfig | Promise<RemoteIdentityConfig>;
-    /**
-     * CORS policy applied to every mounted route: per-route `app.options(...)`
-     * preflight and `Access-Control-Allow-*` headers on success + error
-     * responses. Required so callers (always `createRemoteServer`) keep the
-     * kernel-envelope and aux-route policies in sync.
-     */
-    cors: CorsConfig;
-};
-export declare function mountAuxiliaryRoutes<TDeps>(config: AuxiliaryRoutesConfig<TDeps>): void;
-//# sourceMappingURL=auxiliary-routes.d.ts.map

package/dist/server/auxiliary-routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auxiliary-routes.d.ts","sourceRoot":"","sources":["../../src/server/auxiliary-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAA;AAazC,OAAO,EAKL,KAAK,eAAe,EAErB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAA;AACxE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAU7D,MAAM,MAAM,qBAAqB,CAAC,KAAK,IAAI;IACzC,GAAG,EAAE,IAAI,CAAA;IACT,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IAC9C,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IACtD,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACxD,IAAI,EAAE,KAAK,CAAA;IACX;;;;OAIG;IACH,UAAU,CAAC,EAAE,cAAc,CAAA;IAC3B;mFAC+E;IAC/E,eAAe,CAAC,EAAE,CAChB,IAAI,EAAE,MAAM,GAAG,gBAAgB,EAC/B,IAAI,EAAE,MAAM,KACT,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACzD;;;;;OAKG;IACH,IAAI,EAAE,UAAU,CAAA;CACjB,CAAA;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,GAAG,IAAI,CAoItF"}

package/dist/server/auxiliary-routes.js

@@ -1,322 +0,0 @@
-/**
- * Mount worker-side routes for `defineView` and `defineRemoteFunction` entries.
- *
- * Each entry's effective `FunctionBinding` is resolved once at boot (host
- * pattern, path, http verb) and a Hono route is registered that runs the
- * shared SDK auth pipeline (verify inbound credential, optionally enforce /
- * optional / public), Zod validation of input AND output (RemoteFunction
- * only — Views are transport-only), the author's `authorize` hook, and
- * finally `render` / `execute`.
- *
- * Bindings whose host is not a sub-domain of this worker's host are skipped
- * (the graph node was still materialized; the route lives elsewhere).
- */
-import { decodeKernelRequest, isKernelErrorClassifiable, KERNEL_CONTENT_TYPE_JSON, KERNEL_CONTENT_TYPE_MSGPACK, KERNEL_ERROR_CODES, kernelErrorHttpStatus, resolveCodec, } from '@astrale-os/kernel-api';
-import { isSubdomainOf, matchHost, compileHostMatcher, parseUrlTemplate, } from '@astrale-os/kernel-api/routed';
-import { buildCorsHeaders, createCapabilityLifecycle, honoCapabilityHost, } from '@astrale-os/kernel-server';
-import { makeFunctionContext } from '../auth/function-context.js';
-import { makeDomainAuthority } from '../auth/issuer-mint.js';
-import { resolveInboundAuth } from '../auth/resolve.js';
-import { runAuthorize } from '../dispatch/authorize.js';
-import { SdkResultValidationError, SdkValidationError } from '../dispatch/errors.js';
-import { validateParams, validateResult } from '../dispatch/validate.js';
-import { createInlineStep } from '../step/index.js';
-export function mountAuxiliaryRoutes(config) {
-    const { app, url, views, viewBindings, remoteFunctions, remoteFunctionBindings, deps, identities, resolveIdentity, cors, } = config;
-    const workerHost = parseUrlTemplate(url).hostPattern;
-    const corsHeaders = buildCorsHeaders(cors);
-    if (views && viewBindings) {
-        for (const [slug, def] of Object.entries(views)) {
-            const binding = viewBindings[slug];
-            if (!binding || !def.render)
-                continue;
-            const identity = identityResolver('view', slug, identities?.views[slug], resolveIdentity);
-            mountEntry({
-                app,
-                binding,
-                workerHost,
-                defaultMethod: 'GET',
-                auth: def.auth,
-                identity,
-                corsHeaders,
-                // Views are transport-only (iframe HTML/redirect). SERVER-rendered
-                // views that read the graph use `ctx.fn.kernel()`: the view's own
-                // identity, with narrow grants.
-                run: async ({ c, params, auth, kernel, identity }) => {
-                    const inboundIss = auth?.credential?.verified?.iss;
-                    const kernelUrl = kernel?.default ?? inboundIss;
-                    const ctx = {
-                        c,
-                        params,
-                        auth,
-                        deps,
-                        env: { url },
-                        fn: makeFunctionContext(identity, deps, {
-                            ref: `view.${slug}`,
-                            ...(kernelUrl !== undefined ? { defaultKernelUrl: kernelUrl } : {}),
-                        }),
-                    };
-                    if (def.authorize)
-                        await runAuthorize(def.authorize, ctx);
-                    return def.render(ctx);
-                },
-            });
-        }
-    }
-    if (remoteFunctions && remoteFunctionBindings) {
-        for (const [slug, def] of Object.entries(remoteFunctions)) {
-            const binding = remoteFunctionBindings[slug];
-            if (!binding)
-                continue;
-            const identity = identityResolver('remoteFunction', slug, identities?.remoteFunctions[slug], resolveIdentity);
-            mountEntry({
-                app,
-                binding,
-                workerHost,
-                defaultMethod: 'POST',
-                auth: def.auth,
-                identity,
-                corsHeaders,
-                run: async ({ c, auth, kernel, identity }) => {
-                    const input = await readRemoteFunctionInput(c);
-                    const validation = validateParams(def.inputSchema, input.params);
-                    if (!validation.ok) {
-                        throw new SdkValidationError(validation.issues);
-                    }
-                    const inboundIss = auth?.credential?.verified?.iss;
-                    const kernelUrl = kernel?.default ?? inboundIss;
-                    const caller = auth && inboundIss
-                        ? {
-                            iss: inboundIss,
-                            url: kernelUrl ?? inboundIss,
-                        }
-                        : undefined;
-                    const ctx = {
-                        params: validation.data,
-                        c,
-                        auth,
-                        deps,
-                        env: { url },
-                        kernel,
-                        ...(caller !== undefined ? { caller } : {}),
-                        domain: makeDomainAuthority(identity),
-                        fn: makeFunctionContext(identity, deps, {
-                            ref: `function.${slug}`,
-                            ...(kernelUrl !== undefined ? { defaultKernelUrl: kernelUrl } : {}),
-                        }),
-                    };
-                    if (def.authorize)
-                        await runAuthorize(def.authorize, ctx);
-                    const lifecycle = createCapabilityLifecycle(honoCapabilityHost(c));
-                    const result = await (async () => {
-                        try {
-                            return await def.execute({
-                                ...ctx,
-                                step: createInlineStep({
-                                    scope: { kind: 'function', ref: `function.${slug}`, slug },
-                                }),
-                                defer: lifecycle.capabilities.defer,
-                                sleep: lifecycle.capabilities.sleep,
-                            });
-                        }
-                        finally {
-                            await lifecycle.settle();
-                        }
-                    })();
-                    const outValidation = validateResult(def.outputSchema, result);
-                    if (!outValidation.ok) {
-                        throw new SdkResultValidationError(outValidation.issues, `function.${slug}`);
-                    }
-                    return c.json({
-                        result: outValidation.data,
-                        ...(input.enveloped ? { id: input.id ?? null } : {}),
-                    });
-                },
-            });
-        }
-    }
-}
-// ── Internal ───────────────────────────────────────────────────────────────
-/**
- * Every materialized aux callable must have an identity in the install-time
- * `subs` claim — a missing one means the build pipeline passed a compiled
- * domain that doesn't include this callable to `buildAuxIdentityMap()`.
- */
-function requireAuxIdentity(kind, slug, identity) {
-    if (identity)
-        return identity;
-    throw new Error(`mountAuxiliaryRoutes: no identity registered for ${kind} "${slug}". ` +
-        `Pass a compiled domain that includes this ${kind} to buildAuxIdentityMap().`);
-}
-function identityResolver(kind, slug, identity, resolveIdentity) {
-    if (resolveIdentity)
-        return async () => resolveIdentity(kind, slug);
-    const label = kind === 'view' ? 'view' : 'remote function';
-    const required = requireAuxIdentity(label, slug, identity);
-    return async () => required;
-}
-const PLACEHOLDER_RE = /\{(\w+)([+*])?\}/g;
-function mountEntry(args) {
-    const { app, binding, workerHost, defaultMethod, run, auth, identity, corsHeaders } = args;
-    const remoteUrl = binding.remoteUrl;
-    if (!remoteUrl)
-        return;
-    const parsed = parseUrlTemplate(remoteUrl);
-    if (parsed.hostPattern && !isSubdomainOf(parsed.hostPattern, workerHost))
-        return;
-    const fullPath = joinPath(parsed.basePath, binding.route?.path ?? '');
-    const honoPath = toHonoPath(fullPath);
-    const httpMethod = binding.route?.method ?? defaultMethod;
-    // `route.method` can be any `HttpMethod` (PUT/PATCH/DELETE/*), but only GET
-    // and POST are wired below. Fail loudly at mount time rather than silently
-    // registering no handler (which would 404 the real request while the OPTIONS
-    // preflight still reports the route exists).
-    if (httpMethod !== 'GET' && httpMethod !== 'POST') {
-        throw new Error(`mountAuxiliaryRoutes: unsupported HTTP method "${httpMethod}" for route "${honoPath}". ` +
-            `Aux routes (views / remote functions) support only GET and POST.`);
-    }
-    // Local-dev requests target literal `localhost`, but bindings reference a
-    // logical host (`example.localhost`) — so only enforce a Host-header match
-    // when the binding has actual placeholders to extract.
-    const hostMatcher = parsed.hostPlaceholders.length > 0 ? compileHostMatcher(parsed.hostPattern) : null;
-    const pathParamNames = collectPlaceholderNames(fullPath);
-    const handler = async (c) => {
-        // Apply CORS to every response. `c.json(...)` / `c.body(...)` pick up the
-        // headers via the Hono context; raw `Response` objects — a View's `render`
-        // return, and `errorResponse` in the catch — do NOT, so the final returned
-        // Response is also passed through `applyCorsToResponse`.
-        applyCorsToContext(c, corsHeaders);
-        try {
-            let hostParams = {};
-            if (hostMatcher) {
-                const match = matchHost(hostMatcher, c.req.header('host') ?? '');
-                if (!match)
-                    return c.notFound();
-                hostParams = match;
-            }
-            const pathParams = {};
-            for (const name of pathParamNames) {
-                const value = c.req.param(name);
-                if (value !== undefined)
-                    pathParams[name] = decodeURIComponent(value);
-            }
-            const resolvedIdentity = await identity();
-            const { auth: resolvedAuth, kernel } = await resolveInboundAuth(stripBearerPrefix(c.req.header('authorization') ?? ''), auth, resolvedIdentity);
-            const response = await run({
-                c,
-                params: { ...hostParams, ...pathParams },
-                auth: resolvedAuth,
-                kernel,
-                identity: resolvedIdentity,
-            });
-            return applyCorsToResponse(response, corsHeaders);
-        }
-        catch (err) {
-            return applyCorsToResponse(errorResponse(err), corsHeaders);
-        }
-    };
-    if (httpMethod === 'GET')
-        app.get(honoPath, handler);
-    else if (httpMethod === 'POST')
-        app.post(honoPath, handler);
-    // Per-route preflight — mirrors `createKernelApp`'s per-route
-    // `app.options(...)` pattern (kernel/server/app/create.ts:112,145). Avoid
-    // a wildcard `app.options('*', ...)`: it would intercept the kernel
-    // envelope's own preflights mounted later on this same Hono instance.
-    app.options(honoPath, (c) => {
-        applyCorsToContext(c, corsHeaders);
-        return c.body(null, 204);
-    });
-}
-/**
- * A Function binding is reached in two legitimate ways:
- * - kernel-client follows a graph redirect and sends the canonical kernel envelope;
- * - an external webhook caller POSTs its raw JSON contract directly.
- *
- * The vendor content type is the discriminator. Shape-sniffing would break a valid
- * webhook whose own payload happens to contain `method` and `params` fields.
- */
-async function readRemoteFunctionInput(c) {
-    const contentType = c.req.header('content-type') ?? '';
-    const isJsonEnvelope = contentType.includes(KERNEL_CONTENT_TYPE_JSON);
-    const isMsgpackEnvelope = contentType.includes(KERNEL_CONTENT_TYPE_MSGPACK);
-    if (isJsonEnvelope || isMsgpackEnvelope) {
-        const bytes = new Uint8Array(await c.req.raw.clone().arrayBuffer());
-        const codec = resolveCodec(isMsgpackEnvelope ? 'msgpack' : 'json');
-        const request = decodeKernelRequest(codec.decode(bytes));
-        return { params: request.params, enveloped: true, id: request.id };
-    }
-    const params = await c.req.raw
-        .clone()
-        .json()
-        .catch(() => ({}));
-    return { params, enveloped: false };
-}
-function applyCorsToContext(c, headers) {
-    for (const [name, value] of Object.entries(headers))
-        c.header(name, value);
-}
-function applyCorsToResponse(response, headers) {
-    try {
-        for (const [name, value] of Object.entries(headers))
-            response.headers.set(name, value);
-        return response;
-    }
-    catch {
-        // Some Responses have immutable headers — notably `Response.redirect(...)`,
-        // which a View's `render` is documented to return. Rebuild with a mutable
-        // header copy so CORS still applies (status / body / location preserved).
-        const merged = new Headers(response.headers);
-        for (const [name, value] of Object.entries(headers))
-            merged.set(name, value);
-        return new Response(response.body, {
-            status: response.status,
-            statusText: response.statusText,
-            headers: merged,
-        });
-    }
-}
-function collectPlaceholderNames(path) {
-    return [...path.matchAll(PLACEHOLDER_RE)].map((m) => m[1]);
-}
-/**
- * Serialize an error as the canonical kernel error envelope
- * `{ error: { code, message, data } }` with the matching HTTP status. This is
- * the exact shape the routed client (`kernel-client` HttpRoutedTransport.
- * decodeError) parses — it routes on `error.code` and reads `error.data` for
- * field-level detail (a flat `{ error: '<string>' }` body silently degrades to
- * a generic INTERNAL_ERROR client-side). Every SDK error class (AuthMissingError,
- * SdkValidationError, SdkResultValidationError, AuthorizationDeniedError, …) plus
- * the kernel-core errors `resolveInboundAuth` rethrows all implement
- * `toKernelErrorPayload`, so one branch covers them; only a raw non-classifiable
- * Error falls back to 500.
- */
-function errorResponse(err) {
-    const payload = isKernelErrorClassifiable(err)
-        ? err.toKernelErrorPayload()
-        : {
-            code: KERNEL_ERROR_CODES.INTERNAL_ERROR,
-            message: err instanceof Error ? err.message : 'Internal error',
-        };
-    return Response.json({ error: payload }, { status: kernelErrorHttpStatus(payload.code) });
-}
-function joinPath(a, b) {
-    if (!b)
-        return a;
-    if (!a)
-        return b;
-    const left = a.endsWith('/') ? a.slice(0, -1) : a;
-    const right = b.startsWith('/') ? b : `/${b}`;
-    return `${left}${right}` || '/';
-}
-/** Convert `/foo/{id}` / `/{name+}` / `/{name*}` to Hono syntax. */
-function toHonoPath(path) {
-    return path
-        .replace(/\{(\w+)\+\}/g, ':$1{.+}')
-        .replace(/\{(\w+)\*\}/g, ':$1{.*}')
-        .replace(/\{(\w+)\}/g, ':$1');
-}
-function stripBearerPrefix(value) {
-    return value.trim().replace(/^Bearer\s+/i, '');
-}
-//# sourceMappingURL=auxiliary-routes.js.map

package/dist/server/auxiliary-routes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auxiliary-routes.js","sourceRoot":"","sources":["../../src/server/auxiliary-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,EACrB,YAAY,GAGb,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,gBAAgB,GAGjB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,kBAAkB,GAEnB,MAAM,2BAA2B,CAAA;AAOlC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACvD,OAAO,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AACpF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAgCnD,MAAM,UAAU,oBAAoB,CAAQ,MAAoC;IAC9E,MAAM,EACJ,GAAG,EACH,GAAG,EACH,KAAK,EACL,YAAY,EACZ,eAAe,EACf,sBAAsB,EACtB,IAAI,EACJ,UAAU,EACV,eAAe,EACf,IAAI,GACL,GAAG,MAAM,CAAA;IAEV,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,WAAW,CAAA;IACpD,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IAE1C,IAAI,KAAK,IAAI,YAAY,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YAClC,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM;gBAAE,SAAQ;YACrC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;YACzF,UAAU,CAAC;gBACT,GAAG;gBACH,OAAO;gBACP,UAAU;gBACV,aAAa,EAAE,KAAK;gBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ;gBACR,WAAW;gBACX,mEAAmE;gBACnE,kEAAkE;gBAClE,gCAAgC;gBAChC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;oBACnD,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAyB,CAAA;oBACxE,MAAM,SAAS,GAAG,MAAM,EAAE,OAAO,IAAI,UAAU,CAAA;oBAC/C,MAAM,GAAG,GAAG;wBACV,CAAC;wBACD,MAAM;wBACN,IAAI;wBACJ,IAAI;wBACJ,GAAG,EAAE,EAAE,GAAG,EAAE;wBACZ,EAAE,EAAE,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE;4BACtC,GAAG,EAAE,QAAQ,IAAI,EAAE;4BACnB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACpE,CAAC;qBACH,CAAA;oBACD,IAAI,GAAG,CAAC,SAAS;wBAAE,MAAM,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;oBACzD,OAAO,GAAG,CAAC,MAAO,CAAC,GAAG,CAAC,CAAA;gBACzB,CAAC;aACF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,IAAI,eAAe,IAAI,sBAAsB,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAC1D,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;YAC5C,IAAI,CAAC,OAAO;gBAAE,SAAQ;YACtB,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,gBAAgB,EAChB,IAAI,EACJ,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,EACjC,eAAe,CAChB,CAAA;YACD,UAAU,CAAC;gBACT,GAAG;gBACH,OAAO;gBACP,UAAU;gBACV,aAAa,EAAE,MAAM;gBACrB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ;gBACR,WAAW;gBACX,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;oBAC3C,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,CAAC,CAAC,CAAA;oBAC9C,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;oBAChE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;wBACnB,MAAM,IAAI,kBAAkB,CAAC,UAAU,CAAC,MAAsC,CAAC,CAAA;oBACjF,CAAC;oBACD,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAyB,CAAA;oBACxE,MAAM,SAAS,GAAG,MAAM,EAAE,OAAO,IAAI,UAAU,CAAA;oBAC/C,MAAM,MAAM,GACV,IAAI,IAAI,UAAU;wBAChB,CAAC,CAAC;4BACE,GAAG,EAAE,UAAU;4BACf,GAAG,EAAE,SAAS,IAAI,UAAU;yBAC7B;wBACH,CAAC,CAAC,SAAS,CAAA;oBACf,MAAM,GAAG,GAAG;wBACV,MAAM,EAAE,UAAU,CAAC,IAAI;wBACvB,CAAC;wBACD,IAAI;wBACJ,IAAI;wBACJ,GAAG,EAAE,EAAE,GAAG,EAAE;wBACZ,MAAM;wBACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3C,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC;wBACrC,EAAE,EAAE,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE;4BACtC,GAAG,EAAE,YAAY,IAAI,EAAE;4BACvB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACpE,CAAC;qBACH,CAAA;oBACD,IAAI,GAAG,CAAC,SAAS;wBAAE,MAAM,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;oBACzD,MAAM,SAAS,GAAG,yBAAyB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAA;oBAClE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;wBAC/B,IAAI,CAAC;4BACH,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC;gCACvB,GAAG,GAAG;gCACN,IAAI,EAAE,gBAAgB,CAAC;oCACrB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,IAAI,EAAE,EAAE,IAAI,EAAE;iCAC3D,CAAC;gCACF,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC,KAAK;gCACnC,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC,KAAK;6BACpC,CAAC,CAAA;wBACJ,CAAC;gCAAS,CAAC;4BACT,MAAM,SAAS,CAAC,MAAM,EAAE,CAAA;wBAC1B,CAAC;oBACH,CAAC,CAAC,EAAE,CAAA;oBACJ,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;oBAC9D,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;wBACtB,MAAM,IAAI,wBAAwB,CAChC,aAAa,CAAC,MAA4C,EAC1D,YAAY,IAAI,EAAE,CACnB,CAAA;oBACH,CAAC;oBACD,OAAO,CAAC,CAAC,IAAI,CAAC;wBACZ,MAAM,EAAE,aAAa,CAAC,IAAI;wBAC1B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACrD,CAAC,CAAA;gBACJ,CAAC;aACF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,kBAAkB,CACzB,IAAgC,EAChC,IAAY,EACZ,QAA0C;IAE1C,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC7B,MAAM,IAAI,KAAK,CACb,oDAAoD,IAAI,KAAK,IAAI,KAAK;QACpE,6CAA6C,IAAI,4BAA4B,CAChF,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,IAA+B,EAC/B,IAAY,EACZ,QAA0C,EAC1C,eAAkE;IAElE,IAAI,eAAe;QAAE,OAAO,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACnE,MAAM,KAAK,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAA;IAC1D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC1D,OAAO,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAA;AAC7B,CAAC;AAqBD,MAAM,cAAc,GAAG,mBAAmB,CAAA;AAE1C,SAAS,UAAU,CAAC,IAAoB;IACtC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IAE1F,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;IACnC,IAAI,CAAC,SAAS;QAAE,OAAM;IAEtB,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;IAC1C,IAAI,MAAM,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC;QAAE,OAAM;IAEhF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA;IACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,aAAa,CAAA;IACzD,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,6CAA6C;IAC7C,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,kDAAkD,UAAU,gBAAgB,QAAQ,KAAK;YACvF,kEAAkE,CACrE,CAAA;IACH,CAAC;IACD,0EAA0E;IAC1E,2EAA2E;IAC3E,uDAAuD;IACvD,MAAM,WAAW,GACf,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACpF,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAA;IAExD,MAAM,OAAO,GAAG,KAAK,EAAE,CAAU,EAAqB,EAAE;QACtD,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,yDAAyD;QACzD,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAClC,IAAI,CAAC;YACH,IAAI,UAAU,GAA2B,EAAE,CAAA;YAC3C,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;gBAChE,IAAI,CAAC,KAAK;oBAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;gBAC/B,UAAU,GAAG,KAAK,CAAA;YACpB,CAAC;YAED,MAAM,UAAU,GAA2B,EAAE,CAAA;YAC7C,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC/B,IAAI,KAAK,KAAK,SAAS;oBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAA;YACvE,CAAC;YAED,MAAM,gBAAgB,GAAG,MAAM,QAAQ,EAAE,CAAA;YACzC,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAC7D,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EACtD,IAAI,EACJ,gBAAgB,CACjB,CAAA;YAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC;gBACzB,CAAC;gBACD,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE,GAAG,UAAU,EAAE;gBACxC,IAAI,EAAE,YAAY;gBAClB,MAAM;gBACN,QAAQ,EAAE,gBAAgB;aAC3B,CAAC,CAAA;YACF,OAAO,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,mBAAmB,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC,CAAA;IAED,IAAI,UAAU,KAAK,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;SAC/C,IAAI,UAAU,KAAK,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IAE3D,8DAA8D;IAC9D,0EAA0E;IAC1E,oEAAoE;IACpE,sEAAsE;IACtE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,kBAAkB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;AACJ,CAAC;AAQD;;;;;;;GAOG;AACH,KAAK,UAAU,uBAAuB,CAAC,CAAU;IAC/C,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;IACtD,MAAM,cAAc,GAAG,WAAW,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAA;IACrE,MAAM,iBAAiB,GAAG,WAAW,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAA;IAE3E,IAAI,cAAc,IAAI,iBAAiB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;QACnE,MAAM,KAAK,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAClE,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACxD,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAA;IACpE,CAAC;IAED,MAAM,MAAM,GAAY,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG;SACpC,KAAK,EAAE;SACP,IAAI,EAAE;SACN,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACpB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAA;AACrC,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAU,EAAE,OAA+B;IACrE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAkB,EAAE,OAA+B;IAC9E,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACtF,OAAO,QAAQ,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC5E,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;YACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,MAAM;SAChB,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY;IAC3C,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAA;AAC7D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,aAAa,CAAC,GAAY;IACjC,MAAM,OAAO,GAAuB,yBAAyB,CAAC,GAAG,CAAC;QAChE,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAAE;QAC5B,CAAC,CAAC;YACE,IAAI,EAAE,kBAAkB,CAAC,cAAc;YACvC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;SAC/D,CAAA;IACL,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC3F,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IAChB,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAA;IAChB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjD,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAA;IAC7C,OAAO,GAAG,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAA;AACjC,CAAC;AAED,oEAAoE;AACpE,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI;SACR,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC;SAClC,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC;SAClC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;AAChD,CAAC"}

package/dist/server/config.d.ts

@@ -1,83 +0,0 @@
-/**
- * `RemoteServerConfig` — input shape for `createRemoteServer`.
- *
- * Identity is per-function: `iss` = the worker's serving URL (`config.url`),
- * `sub` = the function path, signed on each dispatch. No single `subject`.
- */
-import type { CorsConfig, WsAdapter } from '@astrale-os/kernel-server';
-import type { Context } from 'hono';
-import type { Hono } from 'hono';
-import type { RemoteDomain } from '../domain/define.js';
-export type RemoteServerConfig<TDeps> = {
-    /** Domain produced by `defineRemoteDomain(...)`. */
-    domain: RemoteDomain;
-    /** Dependency container passed to every handler as `ctx.deps`. */
-    deps: TDeps;
-    /**
-     * Server URL — the serving location AND the worker's JWT issuer identity
-     * (`iss`), decoupled from the addressing `origin` slug.
-     *
-     * The server's public key is published at `<url>/.well-known/jwks.json`
-     * so downstream verifiers can validate credentials signed by this server.
-     */
-    url: string;
-    /** Private key used to sign outbound credentials. Public form is exposed via JWKS. */
-    privateKey: JsonWebKey;
-    /** Allowed transports. `'http'` is mandatory. `'ws'` is opt-in. Defaults to `['http']`. */
-    transports?: readonly ('http' | 'ws')[];
-    /**
-     * Runtime-specific WS adapter (from `hono/bun`, `@hono/node-ws`, `hono/deno`).
-     * Required when `transports` includes `'ws'`.
-     */
-    ws?: WsAdapter;
-    /** CORS configuration. Defaults to `{ origin: '*' }`. */
-    cors?: CorsConfig;
-    /** Optional health endpoint path (defaults to `/health`; `false` disables). */
-    health?: string | false;
-    /** Pre-existing Hono app to attach to (for nesting the SDK under a parent router). */
-    app?: Hono;
-    /**
-     * Provenance stamped onto the auto-mounted `/meta` endpoint. Typically
-     * injected at build time by the bundler so downstream tooling can detect
-     * version drift between deployed server and expected schema.
-     */
-    meta?: {
-        sdkCommit?: string;
-        schemaHash?: string;
-        domainName?: string;
-    };
-    /**
-     * Typed colon-path to a callable the installing kernel calls ONCE as the
-     * system identity, immediately after the domain installs. Use it to seed
-     * nodes and self-grant. Must be a semantic domain path under this domain's
-     * own origin (`/:origin:class.X:seed` / `/:origin:interface.Ops:seed`) — the
-     * kernel's origin guard refuses absolute tree paths, which cannot prove
-     * their origin from the string alone. Returned verbatim in the install
-     * bundle (a routing hint — the signed `graph_hash` already constrains what
-     * the callable can be).
-     *
-     * Example: `/:crm.acme.dev:class.Note:seed`
-     */
-    postInstall?: string;
-    /**
-     * Cross-domain dependencies by origin. Returned in the install bundle; the
-     * kernel verifies each origin is already present on the instance before
-     * installing, and refuses with a clear error if one is missing.
-     */
-    requires?: readonly string[];
-    /**
-     * Optional private install hook. Throw to deny the install request.
-     * The public URL install contract still receives no caller kernel
-     * credential; private installs use the bearer token only.
-     */
-    install?: {
-        authorize?: (args: {
-            c: Context;
-            token?: string;
-            kernelIssuer: string;
-            nonce: string;
-            deps: TDeps;
-        }) => void | Promise<void>;
-    };
-};
-//# sourceMappingURL=config.d.ts.map

package/dist/server/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/server/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AACtE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAEvD,MAAM,MAAM,kBAAkB,CAAC,KAAK,IAAI;IACtC,oDAAoD;IACpD,MAAM,EAAE,YAAY,CAAA;IACpB,kEAAkE;IAClE,IAAI,EAAE,KAAK,CAAA;IACX;;;;;;OAMG;IACH,GAAG,EAAE,MAAM,CAAA;IACX,sFAAsF;IACtF,UAAU,EAAE,UAAU,CAAA;IACtB,2FAA2F;IAC3F,UAAU,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;IACvC;;;OAGG;IACH,EAAE,CAAC,EAAE,SAAS,CAAA;IACd,yDAAyD;IACzD,IAAI,CAAC,EAAE,UAAU,CAAA;IACjB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;IACvB,sFAAsF;IACtF,GAAG,CAAC,EAAE,IAAI,CAAA;IACV;;;;OAIG;IACH,IAAI,CAAC,EAAE;QACL,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;IACD;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC5B;;;;OAIG;IACH,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE;YACjB,CAAC,EAAE,OAAO,CAAA;YACV,KAAK,CAAC,EAAE,MAAM,CAAA;YACd,YAAY,EAAE,MAAM,CAAA;YACpB,KAAK,EAAE,MAAM,CAAA;YACb,IAAI,EAAE,KAAK,CAAA;SACZ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAC3B,CAAA;CACF,CAAA"}

package/dist/server/config.js

@@ -1,8 +0,0 @@
-/**
- * `RemoteServerConfig` — input shape for `createRemoteServer`.
- *
- * Identity is per-function: `iss` = the worker's serving URL (`config.url`),
- * `sub` = the function path, signed on each dispatch. No single `subject`.
- */
-export {};
-//# sourceMappingURL=config.js.map

package/dist/server/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/server/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/server/create.d.ts

@@ -1,8 +0,0 @@
-/**
- * Remote-domain server entry point. The worker serving URL is the issuer; each
- * method/view/function signs with its own semantic subject.
- */
-import type { RemoteServerConfig } from './config.js';
-import type { RemoteServer } from './handle.js';
-export declare function createRemoteServer<TDeps>(config: RemoteServerConfig<TDeps>): RemoteServer;
-//# sourceMappingURL=create.d.ts.map

package/dist/server/create.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/server/create.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAsB,MAAM,aAAa,CAAA;AAanE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,YAAY,CAsIzF"}