@astrale-os/sdk 0.4.18 → 0.5.0-beta.1

package/dist/server/service-entry.js

@@ -1,150 +0,0 @@
-import { K } from '@astrale-os/kernel-core';
-import { Hono } from 'hono';
-import { makeFunctionContext } from '../auth/function-context.js';
-import { buildFunctionSchemas, DEFAULT_FUNCTIONS_FOLDER } from '../domain/extend-functions.js';
-import { SERVICE_FUNCTIONS_PATH, ServiceFunctionDiscoveryRequestSchema, signServiceFunctionManifest, toServiceFunctionManifestEntries, } from '../service/functions.js';
-import { mountAuxiliaryRoutes } from './auxiliary-routes.js';
-import { createAppWorkerEntry } from './worker-entry.js';
-/** A Service worker with zero or more first-class kernel Functions.
- *
- * The function map is the only declaration: it drives both HTTP routes and the
- * signed deploy-time manifest. Function identities are read lazily from the
- * graph after Services has reconciled them, while every Function reuses the
- * Service's one private signing key. */
-export function serviceWorkerEntry(config) {
-    const functions = config.functions ?? {};
-    const functionsFolder = config.functionsFolder ?? DEFAULT_FUNCTIONS_FOLDER;
-    return createAppWorkerEntry({
-        buildApp: (url, env) => {
-            const app = new Hono();
-            const serviceIdentity = identityFromEnv(env);
-            const { schemas, bindings } = buildFunctionSchemas(functions, url, functionsFolder);
-            assertLocalBindings(url, bindings);
-            const resolveFunctionIdentity = createFunctionIdentityResolver(env, serviceIdentity);
-            app.get('/', (c) => c.json({ ok: true, kind: 'astrale-service' }));
-            app.post(SERVICE_FUNCTIONS_PATH, async (c) => {
-                const parsed = ServiceFunctionDiscoveryRequestSchema.safeParse(await c.req.json().catch(() => null));
-                if (!parsed.success) {
-                    return c.json({ error: 'Invalid service function discovery request' }, 400);
-                }
-                const response = await signServiceFunctionManifest({
-                    version: 1,
-                    service: {
-                        issuer: serviceIdentity.issuer,
-                        subject: serviceIdentity.subject,
-                    },
-                    functions: toServiceFunctionManifestEntries(schemas),
-                }, parsed.data, serviceIdentity);
-                return c.json(response);
-            });
-            mountAuxiliaryRoutes({
-                app,
-                url,
-                remoteFunctions: functions,
-                remoteFunctionBindings: bindings,
-                deps: env,
-                resolveIdentity: (kind, slug) => {
-                    if (kind !== 'remoteFunction') {
-                        throw new Error(`serviceWorkerEntry cannot resolve ${kind} identity ${slug}`);
-                    }
-                    return resolveFunctionIdentity(slug);
-                },
-                cors: config.cors ?? { origin: '*' },
-            });
-            return app;
-        },
-        resolveUrl: config.resolveUrl ?? ((_env, requestOrigin) => requestOrigin),
-        selfBinding: config.selfBinding,
-        routeSubrequest: config.routeSubrequest,
-    });
-}
-function identityFromEnv(env) {
-    return {
-        issuer: required(env, 'IDENTITY_ISS'),
-        subject: required(env, 'IDENTITY_SUB'),
-        privateKey: parsePrivateKey(required(env, 'IDENTITY_PRIVATE_KEY')),
-    };
-}
-function createFunctionIdentityResolver(env, serviceIdentity) {
-    const kernelUrl = required(env, 'ASTRALE_KERNEL_AUDIENCE');
-    let cachedAt = 0;
-    let identities = new Map();
-    const ttlMs = 60_000;
-    return async (slug) => {
-        if (Date.now() - cachedAt >= ttlMs || !identities.has(slug)) {
-            const kernel = await makeFunctionContext(serviceIdentity, env, {
-                ref: 'service',
-                defaultKernelUrl: kernelUrl,
-            }).kernel();
-            const service = await kernel.get(`@${serviceIdentity.subject}`);
-            if (!service)
-                throw new Error(`Service @${serviceIdentity.subject} is not readable`);
-            const folder = await kernel.get(`${service.path.raw}/functions`);
-            const nodes = folder
-                ? await (await kernel.children(folder.path, {
-                    classes: [K.$.c('Function').path.class],
-                    limit: 500,
-                })).all()
-                : [];
-            identities = readFunctionIdentities(nodes, serviceIdentity.issuer);
-            cachedAt = Date.now();
-        }
-        const identity = identities.get(slug);
-        if (!identity)
-            throw new Error(`Function identity function.${slug} is not registered`);
-        return hostedFunctionIdentity(identity, serviceIdentity);
-    };
-}
-/** Reuse only the Service's signing key. A hosted Function's inbound audience
- * defaults to its own issuer; the Service HTTP origin is merely transport. */
-export function hostedFunctionIdentity(identity, serviceIdentity) {
-    return { ...identity, privateKey: serviceIdentity.privateKey };
-}
-function readFunctionIdentities(nodes, serviceIssuer) {
-    const result = new Map();
-    for (const node of nodes) {
-        const ref = node.props[K.$.i('Function').ref.key];
-        const issuer = node.props[K.Identity.iss.key];
-        const subject = node.props[K.Identity.sub.key];
-        if (typeof ref !== 'string' ||
-            !ref.startsWith('function.') ||
-            typeof issuer !== 'string' ||
-            typeof subject !== 'string') {
-            continue;
-        }
-        if (issuer !== serviceIssuer) {
-            throw new Error(`Function ${ref} does not share its hosting Service issuer`);
-        }
-        result.set(ref.slice('function.'.length), { issuer, subject });
-    }
-    return result;
-}
-function assertLocalBindings(url, bindings) {
-    const origin = new URL(url).origin;
-    for (const [slug, binding] of Object.entries(bindings)) {
-        if (!binding.remoteUrl || new URL(binding.remoteUrl).origin !== origin) {
-            throw new Error(`serviceWorkerEntry function.${slug} must be hosted by this Service origin`);
-        }
-    }
-}
-function required(env, key) {
-    const value = env[key];
-    if (typeof value !== 'string' || value.length === 0) {
-        throw new Error(`Missing service variable ${String(key)}`);
-    }
-    return value;
-}
-function parsePrivateKey(value) {
-    let parsed;
-    try {
-        parsed = JSON.parse(value);
-    }
-    catch (error) {
-        throw new Error('IDENTITY_PRIVATE_KEY is not valid JSON', { cause: error });
-    }
-    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
-        throw new Error('IDENTITY_PRIVATE_KEY is not a JWK object');
-    }
-    return parsed;
-}
-//# sourceMappingURL=service-entry.js.map

package/dist/server/service-entry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"service-entry.js","sourceRoot":"","sources":["../../src/server/service-entry.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,yBAAyB,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAM3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAC9F,OAAO,EACL,sBAAsB,EACtB,qCAAqC,EACrC,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAkBxD;;;;;wCAKwC;AACxC,MAAM,UAAU,kBAAkB,CAChC,MAAsC;IAEtC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAA;IACxC,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,wBAAwB,CAAA;IAE1E,OAAO,oBAAoB,CAAO;QAChC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;YACtB,MAAM,eAAe,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;YAC5C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,oBAAoB,CAAC,SAAS,EAAE,GAAG,EAAE,eAAe,CAAC,CAAA;YACnF,mBAAmB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YAClC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;YAEpF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAA;YAClE,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC3C,MAAM,MAAM,GAAG,qCAAqC,CAAC,SAAS,CAC5D,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CACrC,CAAA;gBACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,EAAE,GAAG,CAAC,CAAA;gBAC7E,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAChD;oBACE,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE;wBACP,MAAM,EAAE,eAAe,CAAC,MAAM;wBAC9B,OAAO,EAAE,eAAe,CAAC,OAAO;qBACjC;oBACD,SAAS,EAAE,gCAAgC,CAAC,OAAO,CAAC;iBACrD,EACD,MAAM,CAAC,IAAI,EACX,eAAe,CAChB,CAAA;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACzB,CAAC,CAAC,CAAA;YAEF,oBAAoB,CAAC;gBACnB,GAAG;gBACH,GAAG;gBACH,eAAe,EAAE,SAAS;gBAC1B,sBAAsB,EAAE,QAAQ;gBAChC,IAAI,EAAE,GAAG;gBACT,eAAe,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;oBAC9B,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;wBAC9B,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,aAAa,IAAI,EAAE,CAAC,CAAA;oBAC/E,CAAC;oBACD,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAA;gBACtC,CAAC;gBACD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;aACrC,CAAC,CAAA;YACF,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,aAAa,CAAC;QACzE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;KACxC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,eAAe,CAAwC,GAAS;IACvE,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;QACrC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;QACtC,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;KACnE,CAAA;AACH,CAAC;AAED,SAAS,8BAA8B,CACrC,GAAS,EACT,eAAqC;IAErC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAA;IAC1D,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,UAAU,GAAG,IAAI,GAAG,EAA+C,CAAA;IACvE,MAAM,KAAK,GAAG,MAAM,CAAA;IAEpB,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,KAAK,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,eAAe,EAAE,GAAG,EAAE;gBAC7D,GAAG,EAAE,SAAS;gBACd,gBAAgB,EAAE,SAAS;aAC5B,CAAC,CAAC,MAAM,EAAE,CAAA;YACX,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/D,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,eAAe,CAAC,OAAO,kBAAkB,CAAC,CAAA;YACpF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAA;YAChE,MAAM,KAAK,GAAG,MAAM;gBAClB,CAAC,CAAC,MAAM,CACJ,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;oBACjC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;oBACvC,KAAK,EAAE,GAAG;iBACX,CAAC,CACH,CAAC,GAAG,EAAE;gBACT,CAAC,CAAC,EAAE,CAAA;YACN,UAAU,GAAG,sBAAsB,CAAC,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,CAAA;YAClE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACvB,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,oBAAoB,CAAC,CAAA;QACtF,OAAO,sBAAsB,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;IAC1D,CAAC,CAAA;AACH,CAAC;AAED;8EAC8E;AAC9E,MAAM,UAAU,sBAAsB,CACpC,QAA6C,EAC7C,eAAqC;IAErC,OAAO,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,eAAe,CAAC,UAAU,EAAE,CAAA;AAChE,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAsB,EACtB,aAAqB;IAErB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+C,CAAA;IACrE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC9C,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YAC5B,OAAO,MAAM,KAAK,QAAQ;YAC1B,OAAO,OAAO,KAAK,QAAQ,EAC3B,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,YAAY,GAAG,4CAA4C,CAAC,CAAA;QAC9E,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW,EAAE,QAAyC;IACjF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,wCAAwC,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAwC,GAAS,EAAE,GAAe;IACjF,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;IACtB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IACD,OAAO,MAAoB,CAAA;AAC7B,CAAC"}

package/dist/server/serving-url.d.ts

@@ -1,14 +0,0 @@
-/**
- * Canonicalize a worker's serving URL into its `iss` identity.
- *
- * Returns the full URL with trailing slash(es) stripped — the base path is
- * preserved (an issuer may carry a non-empty path, like `…/kernel/host`). This
- * is the single canonical form used for outbound signing, the JWKS issuer,
- * `/meta`, the install credential, and any `Identity.iss` a domain seeds, so the
- * value a worker SIGNS always matches the value the kernel LOOKS UP (the kernel
- * canonicalizes the verified `iss` the same way and does an exact-match lookup).
- *
- * Throws if `url` is not a parseable absolute URL.
- */
-export declare function canonicalizeServingUrl(url: string): string;
-//# sourceMappingURL=serving-url.d.ts.map

package/dist/server/serving-url.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"serving-url.d.ts","sourceRoot":"","sources":["../../src/server/serving-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAS1D"}

package/dist/server/serving-url.js

@@ -1,28 +0,0 @@
-/**
- * Canonicalize a worker's serving URL into its `iss` identity.
- *
- * Returns the full URL with trailing slash(es) stripped — the base path is
- * preserved (an issuer may carry a non-empty path, like `…/kernel/host`). This
- * is the single canonical form used for outbound signing, the JWKS issuer,
- * `/meta`, the install credential, and any `Identity.iss` a domain seeds, so the
- * value a worker SIGNS always matches the value the kernel LOOKS UP (the kernel
- * canonicalizes the verified `iss` the same way and does an exact-match lookup).
- *
- * Throws if `url` is not a parseable absolute URL.
- */
-// INVARIANT (cross-repo): issuer PRODUCERS must strip trailing path slashes
-// BEFORE a value becomes an iss. kernel-core's `normalizeIssuerId` only strips
-// a lone trailing slash on an EMPTY path, so `https://x/base/` and
-// `https://x/base` are distinct issuer identities to the kernel — this
-// function and the kernel's `installSourceBase` both pre-strip with the same
-// rule so the two sides can never mint diverging identities for one worker.
-export function canonicalizeServingUrl(url) {
-    try {
-        return new URL(url).href.replace(/\/+$/, '');
-    }
-    catch {
-        throw new Error(`canonicalizeServingUrl: expected a full URL (got "${url}") — ` +
-            'it is the worker serving URL and its JWT issuer identity.');
-    }
-}
-//# sourceMappingURL=serving-url.js.map

package/dist/server/serving-url.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"serving-url.js","sourceRoot":"","sources":["../../src/server/serving-url.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,4EAA4E;AAC5E,+EAA+E;AAC/E,mEAAmE;AACnE,uEAAuE;AACvE,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,qDAAqD,GAAG,OAAO;YAC7D,2DAA2D,CAC9D,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/server/start.d.ts

@@ -1,11 +0,0 @@
-/**
- * Node HTTP convenience starter.
- *
- * Dynamically imports `@hono/node-server` so the SDK stays runtime-agnostic
- * — only Node consumers actually pull in the dep. For Bun / Deno /
- * Cloudflare, consumers go through `server.app.fetch` directly.
- */
-import type { Hono } from 'hono';
-import type { RemoteServerHandle } from './handle.js';
-export declare function startNodeServer(app: Hono, port?: number): Promise<RemoteServerHandle>;
-//# sourceMappingURL=start.d.ts.map

package/dist/server/start.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/server/start.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAErD,wBAAsB,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,SAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA4BzF"}

package/dist/server/start.js

@@ -1,34 +0,0 @@
-/**
- * Node HTTP convenience starter.
- *
- * Dynamically imports `@hono/node-server` so the SDK stays runtime-agnostic
- * — only Node consumers actually pull in the dep. For Bun / Deno /
- * Cloudflare, consumers go through `server.app.fetch` directly.
- */
-export async function startNodeServer(app, port = 3000) {
-    // Opaque specifier: the `./server` barrel re-exports this module, so worker
-    // bundles (wrangler/esbuild) traverse it even though they never call it. A
-    // literal import() would make them resolve the optional peer and fail.
-    const nodeServerModule = '@hono/node-server';
-    const { serve } = (await import(nodeServerModule));
-    // oxlint-disable-next-line no-explicit-any
-    const server = serve({ fetch: app.fetch, port });
-    await new Promise((resolve, reject) => {
-        if (server.listening)
-            return resolve();
-        server.once('listening', () => resolve());
-        // Without this, a bind failure (e.g. EADDRINUSE on a busy port) emits
-        // `'error'` and never `'listening'`, leaving the Promise — and startup —
-        // hung forever with no diagnostic.
-        server.once('error', (err) => reject(err));
-    });
-    const address = server.address();
-    const actualPort = address?.port ?? port;
-    return {
-        port: actualPort,
-        close: () => new Promise((resolve, reject) => {
-            server.close((err) => (err ? reject(err) : resolve()));
-        }),
-    };
-}
-//# sourceMappingURL=start.js.map

package/dist/server/start.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"start.js","sourceRoot":"","sources":["../../src/server/start.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAS,EAAE,IAAI,GAAG,IAAI;IAC1D,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,gBAAgB,GAAG,mBAAmB,CAAA;IAC5C,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAgC,CAAA;IACjF,2CAA2C;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAQ,CAAA;IAEvD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO,OAAO,EAAE,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACzC,sEAAsE;QACtE,yEAAyE;QACzE,mCAAmC;QACnC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAA8C,CAAA;IAC5E,MAAM,UAAU,GAAG,OAAO,EAAE,IAAI,IAAI,IAAI,CAAA;IAExC,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAiB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACtE,CAAC,CAAC;KACL,CAAA;AACH,CAAC"}

package/dist/server/worker-entry.d.ts

@@ -1,157 +0,0 @@
-/**
- * `createWorkerEntry` — the shared worker `fetch` plumbing every Astrale domain
- * worker (and the cloudflare adapter's codegen) needs, so it lives in ONE place
- * instead of being copy-pasted per worker:
- *
- *   • resolve the serving URL (== `iss`), canonicalize it (so the value matches
- *     what `createRemoteServer` signs with and the kernel pins), and cache the
- *     built app per distinct URL;
- *   • optional subrequest routing: a `globalThis.fetch` override (installed ONLY
- *     when `selfBinding` and/or `routeSubrequest` is configured) redirects
- *     certain outbound fetches through a caller-supplied binding — `selfBinding`
- *     for same-host fetches (a Worker can't fetch its own hostname), and the
- *     vendor-neutral `routeSubrequest` for any caller policy (e.g. instance
- *     hostnames a same-zone Worker→Worker fetch would 522 on). The SDK names no
- *     backend or topology; the caller owns the predicate + the fetcher;
- *   • optional SPA hook (e.g. `/ui/*` served from an `ASSETS` binding).
- *
- * The worker's OWN JWKS (`<url>/.well-known/jwks.json`) is served as a normal
- * route by `createRemoteServer`; the verifier resolves a self-issued credential
- * from the in-memory key (see `auth/verify.ts`), so no self-fetch shim is needed.
- *
- * The worker file is then just schema + methods + a `build(url, env)` callback.
- */
-import type { ExecutionContext } from 'hono';
-import type { RemoteServerConfig } from './config.js';
-export type Fetcher = {
-    fetch(request: Request): Response | Promise<Response>;
-};
-export type WorkerApp = {
-    fetch(request: Request, env?: unknown, executionCtx?: ExecutionContext): Response | Promise<Response>;
-};
-/** A built app cached by its serving URL: `origin` for same-origin matching,
- * `app` for in-process self-dispatch. */
-type CachedApp = {
-    origin: string;
-    app: WorkerApp;
-};
-/**
- * Choose where an OUTBOUND subrequest to `u` is routed — or `null` to let the
- * real `fetch` handle it. Order matters and same-origin wins FIRST: a call to
- * this worker's OWN serving origin is a self-dispatch, not an edge fetch — and
- * the caller's `routeSubrequest` policy may itself match our own host (e.g. an
- * `isInstanceHost` predicate matches every `*.svc.astrale.ai`, ours included),
- * so it must never get first look at a same-origin call.
- *
- *   • same-origin + SELF binding present → the SELF fetcher: a fresh same-script
- *     invocation. The normal Cloudflare path — a Worker can't fetch its own
- *     hostname over the edge, so it re-enters itself through the binding.
- *   • same-origin + NO SELF binding → the cached app, dispatched IN-PROCESS. A
- *     Workers-for-Platforms dispatch-namespace tenant can't service-bind to
- *     itself (its script name is platform-renamed), so it has no SELF binding; an
- *     in-process dispatch reaches the same script with no edge hop and no binding.
- *     `App` and the SELF `Fetcher` share the `{ fetch(request) }` shape, so the
- *     caller drives both identically.
- *   • else, the caller's `routeSubrequest` policy matched → its fetcher.
- *   • else → `null`: passthrough to the real network fetch.
- *
- * Pure (no closure over instance state) so the routing decision is unit-testable
- * without standing up a real app.
- */
-export declare function selectSubrequestTarget<TDeps>(u: URL, ctx: {
-    self: Fetcher | null;
-    apps: Iterable<CachedApp>;
-    routeEnv: TDeps | null;
-    routeSubrequest?: (url: URL, env: TDeps) => Fetcher | null | undefined;
-}): {
-    fetch(request: Request): Response | Promise<Response>;
-} | null;
-export interface WorkerEntryConfig<TDeps> {
-    /**
-     * Build the `createRemoteServer` config for the resolved serving `url`. Called
-     * once per distinct URL (the resulting app is cached), with the same `env` the
-     * request carries — so it can read additional bindings (e.g. a base domain).
-     */
-    build: (url: string, env: TDeps) => RemoteServerConfig<TDeps>;
-    /**
-     * Resolve the raw serving URL from `env` (+ the per-request origin, for workers
-     * that fall back to the request host). Defaults to the `WORKER_URL` env var.
-     * The result is always canonicalized before use.
-     *
-     * The `requestOrigin` honors an `X-Forwarded-Proto: https` upgrade (see
-     * `clientOrigin`), so a dev worker behind a TLS-terminating proxy (cloudflared
-     * tunnel, reverse proxy) resolves its public `https://` origin, not the raw
-     * `http://` one workerd sees.
-     */
-    resolveUrl?: (env: TDeps, requestOrigin: string) => string;
-    /** Optional: the `SELF` service binding used to route same-host subrequests. */
-    selfBinding?: (env: TDeps) => Fetcher | null | undefined;
-    /**
-     * Optional, vendor-neutral: route an OUTBOUND subrequest through a
-     * caller-supplied fetcher instead of the network — for hosts a Worker can't
-     * reach directly over the edge (e.g. a platform router on the SAME zone:
-     * Cloudflare 522s a same-zone Worker→Worker public `fetch`). Return a `Fetcher`
-     * to route the request through, or null/undefined to fall through to the normal
-     * fetch. The SDK names no backend or topology — the CALLER owns BOTH the
-     * predicate (which hosts) and the fetcher (the binding). This generalizes
-     * `selfBinding` (same-origin → SELF) to any caller policy; both are honored.
-     */
-    routeSubrequest?: (url: URL, env: TDeps) => Fetcher | null | undefined;
-    /**
-     * Optional: handle a request before it reaches the kernel app — e.g. serve a
-     * SPA under `/ui/*` or a same-origin `/api/*` endpoint the view calls. Return
-     * a `Response` to short-circuit, or `undefined` to fall through to the domain
-     * dispatch.
-     */
-    before?: (env: TDeps, url: URL, request: Request) => Response | undefined | Promise<Response | undefined>;
-    /**
-     * Optional: transform the request on the fall-through path, just before it
-     * reaches the kernel app (e.g. rewrite the hostname for wildcard-subdomain
-     * routing). Not applied when `before` short-circuits.
-     */
-    rewriteRequest?: (env: TDeps, request: Request) => Request;
-}
-export interface AppWorkerEntryConfig<TDeps> extends Omit<WorkerEntryConfig<TDeps>, 'build'> {
-    buildApp: (url: string, env: TDeps) => WorkerApp;
-}
-export interface WorkerEntry<TDeps> {
-    fetch(request: Request, env: TDeps, executionCtx?: ExecutionContext): Response | Promise<Response>;
-}
-/**
- * The request origin as the CLIENT reached it — i.e. the origin a fallback
- * serving URL (and therefore the `iss`) may be derived from. Behind a
- * TLS-terminating proxy (a cloudflared tunnel in front of `wrangler dev`, any
- * reverse proxy) the worker sees plain HTTP, so `request.url` says `http://…`
- * while the public URL is `https://…`; the proxy advertises the original
- * scheme via `X-Forwarded-Proto`. Honoring it is restricted to the http→https
- * UPGRADE of the SAME host (never a downgrade, never a host change), so a
- * spoofed header can at worst derive an `iss` the kernel's JWKS check then
- * fails — it can never make this worker speak for another origin.
- */
-export declare function clientOrigin(url: URL, request: Request): string;
-/**
- * Build a `before` hook that serves a static-asset `binding` (e.g. a Workers
- * Assets binding) mounted under `base` (default `/ui`) — the runtime half of an
- * adapter env's client-asset config. Returns `undefined` for non-matching paths
- * (and when no binding is present) so the request falls through to domain dispatch.
- *
- * Asset URLs are rooted at `base` (a client bundler sets `base: '<base>/'`);
- * this hook strips that prefix before delegating to the binding, so
- * `<base>/x.js` resolves from the binding's root. When `devProxy` yields a URL
- * (local dev), requests are proxied there instead — the seam for a bundler's
- * HMR dev server. Whether unknown sub-paths fall back to `index.html` is the
- * binding's own concern (e.g. wrangler's `not_found_handling`), not baked in
- * here.
- *
- * Lives here, type-checked and testable, instead of being emitted as a string
- * by every adapter's worker codegen.
- */
-export declare function assets<TDeps>(opts: {
-    base?: string;
-    binding: (env: TDeps) => Fetcher | null | undefined;
-    devProxy?: (env: TDeps) => string | null | undefined;
-}): (env: TDeps, url: URL, request: Request) => Response | Promise<Response> | undefined;
-export declare function createWorkerEntry<TDeps>(config: WorkerEntryConfig<TDeps>): WorkerEntry<TDeps>;
-export declare function createAppWorkerEntry<TDeps>(config: AppWorkerEntryConfig<TDeps>): WorkerEntry<TDeps>;
-export {};
-//# sourceMappingURL=worker-entry.d.ts.map

package/dist/server/worker-entry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker-entry.d.ts","sourceRoot":"","sources":["../../src/server/worker-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,MAAM,CAAA;AAE5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAMrD,MAAM,MAAM,OAAO,GAAG;IAAE,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAAE,CAAA;AAC/E,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,CACH,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,OAAO,EACb,YAAY,CAAC,EAAE,gBAAgB,GAC9B,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAChC,CAAA;AAED;yCACyC;AACzC,KAAK,SAAS,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,SAAS,CAAA;CAAE,CAAA;AAEnD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAC1C,CAAC,EAAE,GAAG,EACN,GAAG,EAAE;IACH,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;IACpB,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;IACzB,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAA;IACtB,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,KAAK,OAAO,GAAG,IAAI,GAAG,SAAS,CAAA;CACvE,GACA;IAAE,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAAE,GAAG,IAAI,CAWlE;AAED,MAAM,WAAW,iBAAiB,CAAC,KAAK;IACtC;;;;OAIG;IACH,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,KAAK,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAC7D;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,KAAK,MAAM,CAAA;IAC1D,gFAAgF;IAChF,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,OAAO,GAAG,IAAI,GAAG,SAAS,CAAA;IACxD;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,KAAK,OAAO,GAAG,IAAI,GAAG,SAAS,CAAA;IACtE;;;;;OAKG;IACH,MAAM,CAAC,EAAE,CACP,GAAG,EAAE,KAAK,EACV,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,OAAO,KACb,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAA;IACzD;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAA;CAC3D;AAED,MAAM,WAAW,oBAAoB,CAAC,KAAK,CAAE,SAAQ,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAC1F,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,KAAK,SAAS,CAAA;CACjD;AAED,MAAM,WAAW,WAAW,CAAC,KAAK;IAChC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,EAAE,gBAAgB,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACnG;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAM/D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE;IAClC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,OAAO,GAAG,IAAI,GAAG,SAAS,CAAA;IACnD,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;CACrD,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,SAAS,CAiBvF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAK7F;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EACxC,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,GAClC,WAAW,CAAC,KAAK,CAAC,CAsEpB"}

package/dist/server/worker-entry.js

@@ -1,201 +0,0 @@
-/**
- * `createWorkerEntry` — the shared worker `fetch` plumbing every Astrale domain
- * worker (and the cloudflare adapter's codegen) needs, so it lives in ONE place
- * instead of being copy-pasted per worker:
- *
- *   • resolve the serving URL (== `iss`), canonicalize it (so the value matches
- *     what `createRemoteServer` signs with and the kernel pins), and cache the
- *     built app per distinct URL;
- *   • optional subrequest routing: a `globalThis.fetch` override (installed ONLY
- *     when `selfBinding` and/or `routeSubrequest` is configured) redirects
- *     certain outbound fetches through a caller-supplied binding — `selfBinding`
- *     for same-host fetches (a Worker can't fetch its own hostname), and the
- *     vendor-neutral `routeSubrequest` for any caller policy (e.g. instance
- *     hostnames a same-zone Worker→Worker fetch would 522 on). The SDK names no
- *     backend or topology; the caller owns the predicate + the fetcher;
- *   • optional SPA hook (e.g. `/ui/*` served from an `ASSETS` binding).
- *
- * The worker's OWN JWKS (`<url>/.well-known/jwks.json`) is served as a normal
- * route by `createRemoteServer`; the verifier resolves a self-issued credential
- * from the in-memory key (see `auth/verify.ts`), so no self-fetch shim is needed.
- *
- * The worker file is then just schema + methods + a `build(url, env)` callback.
- */
-import { createRemoteServer } from './create.js';
-import { requireEnv } from './require-env.js';
-import { canonicalizeServingUrl } from './serving-url.js';
-/**
- * Choose where an OUTBOUND subrequest to `u` is routed — or `null` to let the
- * real `fetch` handle it. Order matters and same-origin wins FIRST: a call to
- * this worker's OWN serving origin is a self-dispatch, not an edge fetch — and
- * the caller's `routeSubrequest` policy may itself match our own host (e.g. an
- * `isInstanceHost` predicate matches every `*.svc.astrale.ai`, ours included),
- * so it must never get first look at a same-origin call.
- *
- *   • same-origin + SELF binding present → the SELF fetcher: a fresh same-script
- *     invocation. The normal Cloudflare path — a Worker can't fetch its own
- *     hostname over the edge, so it re-enters itself through the binding.
- *   • same-origin + NO SELF binding → the cached app, dispatched IN-PROCESS. A
- *     Workers-for-Platforms dispatch-namespace tenant can't service-bind to
- *     itself (its script name is platform-renamed), so it has no SELF binding; an
- *     in-process dispatch reaches the same script with no edge hop and no binding.
- *     `App` and the SELF `Fetcher` share the `{ fetch(request) }` shape, so the
- *     caller drives both identically.
- *   • else, the caller's `routeSubrequest` policy matched → its fetcher.
- *   • else → `null`: passthrough to the real network fetch.
- *
- * Pure (no closure over instance state) so the routing decision is unit-testable
- * without standing up a real app.
- */
-export function selectSubrequestTarget(u, ctx) {
-    // Same-origin self-subrequest → the same script (SELF binding, else in-process).
-    for (const cached of ctx.apps) {
-        if (cached.origin === u.origin)
-            return ctx.self ?? cached.app;
-    }
-    // Caller policy (e.g. a platform router on the same zone) → its fetcher.
-    if (ctx.routeSubrequest && ctx.routeEnv) {
-        const via = ctx.routeSubrequest(u, ctx.routeEnv);
-        if (via)
-            return via;
-    }
-    return null;
-}
-/**
- * The request origin as the CLIENT reached it — i.e. the origin a fallback
- * serving URL (and therefore the `iss`) may be derived from. Behind a
- * TLS-terminating proxy (a cloudflared tunnel in front of `wrangler dev`, any
- * reverse proxy) the worker sees plain HTTP, so `request.url` says `http://…`
- * while the public URL is `https://…`; the proxy advertises the original
- * scheme via `X-Forwarded-Proto`. Honoring it is restricted to the http→https
- * UPGRADE of the SAME host (never a downgrade, never a host change), so a
- * spoofed header can at worst derive an `iss` the kernel's JWKS check then
- * fails — it can never make this worker speak for another origin.
- */
-export function clientOrigin(url, request) {
-    if (url.protocol !== 'http:')
-        return url.origin;
-    const forwarded = request.headers.get('x-forwarded-proto');
-    // Multiple proxies append: "https, http" — the first hop is the client-facing one.
-    const scheme = forwarded?.split(',')[0]?.trim().toLowerCase();
-    return scheme === 'https' ? `https://${url.host}` : url.origin;
-}
-/**
- * Build a `before` hook that serves a static-asset `binding` (e.g. a Workers
- * Assets binding) mounted under `base` (default `/ui`) — the runtime half of an
- * adapter env's client-asset config. Returns `undefined` for non-matching paths
- * (and when no binding is present) so the request falls through to domain dispatch.
- *
- * Asset URLs are rooted at `base` (a client bundler sets `base: '<base>/'`);
- * this hook strips that prefix before delegating to the binding, so
- * `<base>/x.js` resolves from the binding's root. When `devProxy` yields a URL
- * (local dev), requests are proxied there instead — the seam for a bundler's
- * HMR dev server. Whether unknown sub-paths fall back to `index.html` is the
- * binding's own concern (e.g. wrangler's `not_found_handling`), not baked in
- * here.
- *
- * Lives here, type-checked and testable, instead of being emitted as a string
- * by every adapter's worker codegen.
- */
-export function assets(opts) {
-    const base = (opts.base ?? '/ui').replace(/\/+$/, '');
-    const prefix = `${base}/`;
-    return (env, url, request) => {
-        const binding = opts.binding(env);
-        if (!binding)
-            return undefined;
-        if (url.pathname !== base && !url.pathname.startsWith(prefix))
-            return undefined;
-        const devUrl = opts.devProxy?.(env);
-        if (devUrl) {
-            const devBase = devUrl.replace(/\/+$/, '');
-            return fetch(new Request(`${devBase}${url.pathname}${url.search}`, request));
-        }
-        // `<base>` → `/`, `<base>/x` → `/x`: serve from the binding's root.
-        const stripped = url.pathname.slice(base.length) || '/';
-        const rewritten = new URL(stripped + url.search, url.origin);
-        return binding.fetch(new Request(rewritten, request));
-    };
-}
-export function createWorkerEntry(config) {
-    return createAppWorkerEntry({
-        ...config,
-        buildApp: (url, env) => createRemoteServer(config.build(url, env)).app,
-    });
-}
-export function createAppWorkerEntry(config) {
-    // Cache the built app per distinct resolved URL — plural and bounded. On the
-    // request-origin fallback the URL legitimately alternates for one worker
-    // (direct http hits vs https-upgraded tunnel hits, workers.dev + custom
-    // domain), and a single slot would tear down and rebuild the whole app on
-    // every alternation. The bound caps abuse via attacker-minted Host /
-    // X-Forwarded-Proto values on that same fallback path.
-    const MAX_CACHED_APPS = 4;
-    const apps = new Map();
-    let self = null;
-    let routeEnv = null;
-    function getApp(url, env) {
-        const cached = apps.get(url);
-        if (cached)
-            return cached.app;
-        const app = config.buildApp(url, env);
-        if (apps.size >= MAX_CACHED_APPS) {
-            const oldest = apps.keys().next().value;
-            if (oldest !== undefined)
-                apps.delete(oldest);
-        }
-        apps.set(url, { origin: new URL(url).origin, app });
-        return app;
-    }
-    // A Worker can't fetch its own hostname over the edge, nor — on Cloudflare — a
-    // same-zone hostname routed to another Worker (the `routeSubrequest` case).
-    // When either is configured, override `globalThis.fetch` to redirect those
-    // subrequests through the right target (see `selectSubrequestTarget`). Workers
-    // with neither selfBinding nor routeSubrequest get no global mutation. (A
-    // self-issued credential's JWKS is resolved in-memory by the verifier, not
-    // fetched — see `auth/verify.ts` — so no self-JWKS shim is needed.)
-    if (config.selfBinding || config.routeSubrequest) {
-        const originalFetch = globalThis.fetch;
-        globalThis.fetch = (async (input, init) => {
-            const href = typeof input === 'string' ? input : input instanceof URL ? input.href : input.url;
-            try {
-                const target = selectSubrequestTarget(new URL(href), {
-                    self,
-                    apps: apps.values(),
-                    routeEnv,
-                    routeSubrequest: config.routeSubrequest,
-                });
-                if (target)
-                    return target.fetch(new Request(input, init));
-            }
-            catch {
-                // non-absolute URL — fall through to the original fetch
-            }
-            return originalFetch(input, init);
-        });
-    }
-    return {
-        async fetch(request, env, executionCtx) {
-            if (config.selfBinding)
-                self ??= config.selfBinding(env) ?? null;
-            if (config.routeSubrequest)
-                routeEnv = env;
-            // Only parse the request URL when a hook actually needs it.
-            const requestUrl = config.before || config.resolveUrl ? new URL(request.url) : null;
-            if (config.before && requestUrl) {
-                // Await so an async `before` that resolves to `undefined` falls through
-                // (a returned Promise<undefined> would otherwise be sent as the response).
-                const handled = await config.before(env, requestUrl, request);
-                if (handled !== undefined)
-                    return handled;
-            }
-            const raw = config.resolveUrl
-                ? config.resolveUrl(env, clientOrigin(requestUrl, request))
-                : requireEnv(env, 'WORKER_URL', "the worker's public serving URL (its iss identity)");
-            const url = canonicalizeServingUrl(raw);
-            const dispatched = config.rewriteRequest ? config.rewriteRequest(env, request) : request;
-            return getApp(url, env).fetch(dispatched, env, executionCtx);
-        },
-    };
-}
-//# sourceMappingURL=worker-entry.js.map

package/dist/server/worker-entry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker-entry.js","sourceRoot":"","sources":["../../src/server/worker-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAMH,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAezD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,sBAAsB,CACpC,CAAM,EACN,GAKC;IAED,iFAAiF;IACjF,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAA;IAC/D,CAAC;IACD,yEAAyE;IACzE,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;QAChD,IAAI,GAAG;YAAE,OAAO,GAAG,CAAA;IACrB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AA4DD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,GAAQ,EAAE,OAAgB;IACrD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,MAAM,CAAA;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IAC1D,mFAAmF;IACnF,MAAM,MAAM,GAAG,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7D,OAAO,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAA;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,MAAM,CAAQ,IAI7B;IACC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,CAAA;IACzB,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAA;QAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAA;QACnC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;YAC1C,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,OAAO,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;QAC9E,CAAC;QACD,oEAAoE;QACpE,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAA;QACvD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5D,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;IACvD,CAAC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAQ,MAAgC;IACvE,OAAO,oBAAoB,CAAC;QAC1B,GAAG,MAAM;QACT,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAQ,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG;KAC9E,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAmC;IAEnC,6EAA6E;IAC7E,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,qEAAqE;IACrE,uDAAuD;IACvD,MAAM,eAAe,GAAG,CAAC,CAAA;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAA;IACzC,IAAI,IAAI,GAAmB,IAAI,CAAA;IAC/B,IAAI,QAAQ,GAAiB,IAAI,CAAA;IAEjC,SAAS,MAAM,CAAC,GAAW,EAAE,GAAU;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,CAAA;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACrC,IAAI,IAAI,CAAC,IAAI,IAAI,eAAe,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;YACvC,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QACnD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,+EAA+E;IAC/E,4EAA4E;IAC5E,2EAA2E;IAC3E,+EAA+E;IAC/E,0EAA0E;IAC1E,2EAA2E;IAC3E,oEAAoE;IACpE,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QACjD,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAA;QACtC,UAAU,CAAC,KAAK,GAAG,CAAC,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAE,EAAE;YACzE,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;YAC9F,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE;oBACnD,IAAI;oBACJ,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE;oBACnB,QAAQ;oBACR,eAAe,EAAE,MAAM,CAAC,eAAe;iBACxC,CAAC,CAAA;gBACF,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAA;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,wDAAwD;YAC1D,CAAC;YACD,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QACnC,CAAC,CAAiB,CAAA;IACpB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,GAAU,EAAE,YAA+B;YACvE,IAAI,MAAM,CAAC,WAAW;gBAAE,IAAI,KAAK,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,IAAI,CAAA;YAChE,IAAI,MAAM,CAAC,eAAe;gBAAE,QAAQ,GAAG,GAAG,CAAA;YAC1C,4DAA4D;YAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;YACnF,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;gBAChC,wEAAwE;gBACxE,2EAA2E;gBAC3E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;gBAC7D,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,OAAO,CAAA;YAC3C,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU;gBAC3B,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,UAAW,EAAE,OAAO,CAAC,CAAC;gBAC5D,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,oDAAoD,CAAC,CAAA;YACvF,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAA;YACvC,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YACxF,OAAO,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,YAAY,CAAC,CAAA;QAC9D,CAAC;KACF,CAAA;AACH,CAAC"}