@astrale-os/sdk 0.4.19 → 0.5.0-beta.2

package/dist/index.js

@@ -1,48 +1,11 @@
-export { remoteMethod, remoteClassMethods, remoteInterfaceMethods } from './method/index.js';
-// ─── Domain configuration (astrale.config.ts) ────────────────────────────
-// The author-facing way to declare a standalone domain + how it deploys. The
-// runtime-domain COMPILER (`defineRemoteDomain`) is internal machinery — reach
-// it via the `@astrale-os/sdk/domain` subpath when hand-rolling a worker, or
-// (preferred) use `domainWorkerEntry` from `@astrale-os/sdk/server`.
-export { defineDomain, deploy, defineAdapter } from './config/index.js';
-// ─── Install graph (advanced) ────────────────────────────────────────────
-export { buildInstallGraph, buildInstallGraphHash } from './domain/index.js';
-// ─── Graph patching (advanced) ────────────────────────────────────────
-// Author-facing patch types, re-exported from kernel-core (the single source).
-// Build a `Patch` and feed it straight to `ctx.kernel.mutate(patch)` (it implements
-// `PatchData`); the graph sugar itself lives in `@astrale-os/kernel-client/graph`,
-// flattened onto `ctx.kernel`, and `function.mutate` validates every patch kernel-side
-// against kernel-core's `patchDataSchema` — no client-side re-validation needed.
-export { AbsolutePath, Patch, Path } from '@astrale-os/kernel-core';
-export { ClassPath } from '@astrale-os/kernel-core/domain';
-// ─── Declarative resource helpers ────────────────────────────────────────
-// Author Views (iframe-mountable) and RemoteFunctions (standalone callables)
-// at the domain definition site. Each `defineView` / `defineRemoteFunction`
-// entry is auto-materialized by `defineRemoteDomain` into a graph node (a
-// `View`, or the canonical kernel `Function` for standalone callables) under
-// the reserved views / functions folder, keyed by its map slug; the same
-// entry's `render` / `execute` (+ auth hooks) is mounted as a worker route by
-// `createRemoteServer`.
-export { defineView, defineRemoteFunction } from './define/index.js';
-// ─── Server ──────────────────────────────────────────────────────────────
-// `createRemoteServer` dynamically imports `@hono/node-server` via `./server/start`.
-// Exporting the server surface from the barrel poisons browser bundlers
-// (Vite/esbuild) that traverse every re-export and try to bundle the dynamic
-// chunk — which fails on Node built-ins. Consumers that need the server
-// runtime import from '@astrale-os/sdk/server' directly.
-// ─── Deploy ──────────────────────────────────────────────────────────────
-// `deployCheck` uses Node-only modules (`node:path`, `node:child_process`) at
-// module load time. Exporting it from the barrel poisons browser bundlers
-// (Vite/esbuild) that transitively load every re-export. Consumers that need it
-// import from './deploy' directly.
-export { MetaSchema } from './deploy/meta.js';
-// ─── Service-hosted Functions ───────────────────────────────────────────
-export { SERVICE_FUNCTIONS_PATH, ServiceFunctionDiscoveryRequestSchema, ServiceFunctionDiscoveryResponseSchema, ServiceFunctionManifestEntrySchema, ServiceFunctionManifestSchema, hashServiceFunctionManifest, signServiceFunctionManifest, verifyServiceFunctionManifest, } from './service/index.js';
-export { authenticateRequest, buildComposedGrant, makeFunctionContext, signCredential, } from './auth/index.js';
-export { AuthMissingError, AuthInvalidError } from './auth/index.js';
-export { assertPerm, requireOwnership, READ, EDIT, USE, SHARE, ALL } from './auth/index.js';
-export { selfGrant } from '@astrale-os/kernel-core';
-// ─── Dispatch (escape hatch for custom integrations) ─────────────────────
-export { SdkDispatcher } from './dispatch/index.js';
-export { AuthorizationDeniedError, MethodNotFoundError, SdkValidationError, SdkResultValidationError, } from './dispatch/index.js';
+/** Worker-safe schema-first SDK authoring surface. */
+export { defineDomain, implement } from './domain/index.js';
+export { defineCapability } from './capability/index.js';
+export { defineAdapter, deploy } from './deployment/provider/index.js';
+export { defineQuery, QueryPaginationError } from './query/index.js';
+export { defineMutation } from './mutation/index.js';
+export { defineStateMachine } from './state/index.js';
+export { compileFrontend, compileFrontendRoutes, externalFrontend, frontendArtifact, frontendManifest, frontendRoute, frontendViewBindings, generatedFrontend, prebuiltFrontend, viteFrontend, } from './view/index.js';
+export { bindWorkflow, defineWorkflow, withTriggers } from './workflow/index.js';
+export { err, ok } from './result/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAE5F,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,qEAAqE;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAevE,4EAA4E;AAC5E,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAE5E,yEAAyE;AACzE,+EAA+E;AAC/E,oFAAoF;AACpF,mFAAmF;AACnF,uFAAuF;AACvF,iFAAiF;AACjF,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAA;AAY1D,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAC9E,wBAAwB;AACxB,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAepE,4EAA4E;AAC5E,qFAAqF;AACrF,wEAAwE;AACxE,6EAA6E;AAC7E,wEAAwE;AACxE,yDAAyD;AAEzD,4EAA4E;AAC5E,8EAA8E;AAC9E,0EAA0E;AAC1E,gFAAgF;AAChF,mCAAmC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAG7C,2EAA2E;AAC3E,OAAO,EACL,sBAAsB,EACtB,qCAAqC,EACrC,sCAAsC,EACtC,kCAAkC,EAClC,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,oBAAoB,CAAA;AA6B3B,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AACpE,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,iBAAiB,CAAA;AAS3F,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAEnD,4EAA4E;AAC5E,OAAO,EAAE,aAAa,EAA4B,MAAM,qBAAqB,CAAA;AAC7E,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,qBAAqB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAqB3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAmBxD,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAA;AAYtE,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAgBpE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAGpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAGrD,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,YAAY,GACb,MAAM,iBAAiB,CAAA;AAsBxB,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAWhF,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/invocation/handler.d.ts

@@ -0,0 +1,51 @@
+import type { CredentialInput } from '@astrale-os/kernel-core/auth';
+import type { Domain } from '@astrale-os/kernel-core/domain';
+import type { schema } from '@astrale-os/kernel-dsl/v1';
+import type { Target } from '@astrale-os/kernel-ports/functions';
+import type { invocation, publication } from '@astrale-os/kernel-protocol';
+import type { PublicationSnapshot, Handler, InvocationContext } from '@astrale-os/kernel-server';
+import type { CapabilityProviders, CapabilityRequirements } from '../capability/index.js';
+import type { Deployment } from '../deployment/index.js';
+import type { AuthenticatedCaller, DomainApp, Kernel } from '../domain/index.js';
+import { type WorkflowRunner } from '../workflow/index.js';
+/** Exact remote-auth input for one already selected served deployment. */
+export interface InvocationAuthenticationInput<S extends schema.DomainSchema> {
+    readonly credential: CredentialInput;
+    readonly via: invocation.Via;
+    readonly publication: publication.Publication;
+    readonly domain: Domain<S>;
+    readonly context: InvocationContext;
+}
+/** Exact application-authenticated callback input forwarded before SDK handler selection. */
+export interface InvocationAdmissionInput<S extends schema.DomainSchema> {
+    readonly call: invocation.Call;
+    readonly credential?: string;
+    readonly via: invocation.Via;
+    readonly publication: publication.Publication;
+    readonly domain: Domain<S>;
+    readonly context: InvocationContext;
+}
+/** Correlated caller-bound capabilities established by the remote-auth owner. */
+export interface AuthenticatedInvocation<S extends schema.DomainSchema> {
+    readonly caller: AuthenticatedCaller;
+    readonly app: DomainApp<S>;
+    readonly kernel: Kernel;
+}
+/** Captured remote-auth and callback-admission capability; it owns no SDK dispatch state. */
+export interface InvocationAuthority<S extends schema.DomainSchema> {
+    admit(input: InvocationAdmissionInput<S>): Promise<Target>;
+    authenticate(input: InvocationAuthenticationInput<S>): Promise<AuthenticatedInvocation<S>>;
+}
+/** Resolve the exact SDK deployment associated with one Server-pinned snapshot. */
+export type DeploymentFor<S extends schema.DomainSchema, Environment, Deps> = (snapshot: PublicationSnapshot) => Deployment<S, Environment, Deps> | undefined;
+export interface CreateInvocationHandlerInput<S extends schema.DomainSchema, Environment, Deps, Requirements extends CapabilityRequirements = CapabilityRequirements> {
+    readonly deploymentFor: DeploymentFor<S, Environment, Deps>;
+    readonly deps: Deps;
+    readonly capabilities: Requirements;
+    readonly providers: CapabilityProviders<Requirements>;
+    readonly authority: InvocationAuthority<S>;
+    readonly workflowRunner?: WorkflowRunner;
+}
+/** Compose one Domain-backed Server Handler without exposing another dispatch API. */
+export declare function createInvocationHandler<const S extends schema.DomainSchema, Environment, Deps, Requirements extends CapabilityRequirements>(input: CreateInvocationHandlerInput<S, Environment, Deps, Requirements>): Handler;
+//# sourceMappingURL=handler.d.ts.map

package/dist/invocation/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../src/invocation/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAA;AAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAA;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAC1E,OAAO,KAAK,EACV,mBAAmB,EACnB,OAAO,EAEP,iBAAiB,EAClB,MAAM,2BAA2B,CAAA;AAalC,OAAO,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAA;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,KAAK,EAAmB,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAKjG,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAA;AAW7B,0EAA0E;AAC1E,MAAM,WAAW,6BAA6B,CAAC,CAAC,SAAS,MAAM,CAAC,YAAY;IAC1E,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAA;IACpC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,WAAW,CAAA;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CACpC;AAED,6FAA6F;AAC7F,MAAM,WAAW,wBAAwB,CAAC,CAAC,SAAS,MAAM,CAAC,YAAY;IACrE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAA;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,WAAW,CAAA;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;CACpC;AAED,iFAAiF;AACjF,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,MAAM,CAAC,YAAY;IACpE,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;IACpC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,6FAA6F;AAC7F,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,MAAM,CAAC,YAAY;IAChE,KAAK,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1D,YAAY,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAA;CAC3F;AAED,mFAAmF;AACnF,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,IAAI,CAC5E,QAAQ,EAAE,mBAAmB,KAC1B,UAAU,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,SAAS,CAAA;AAEjD,MAAM,WAAW,4BAA4B,CAC3C,CAAC,SAAS,MAAM,CAAC,YAAY,EAC7B,WAAW,EACX,IAAI,EACJ,YAAY,SAAS,sBAAsB,GAAG,sBAAsB;IAEpE,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,CAAA;IAC3D,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAA;IACnB,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAA;IACrD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAA;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAA;CACzC;AA2BD,sFAAsF;AACtF,wBAAgB,uBAAuB,CACrC,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,YAAY,EACnC,WAAW,EACX,IAAI,EACJ,YAAY,SAAS,sBAAsB,EAC3C,KAAK,EAAE,4BAA4B,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,OAAO,CA+DlF"}

package/dist/invocation/handler.js

@@ -0,0 +1,289 @@
+import { ResponseError } from '@astrale-os/kernel-client';
+import { grant } from '@astrale-os/kernel-core/auth';
+import { AuthenticationError } from '@astrale-os/kernel-ports/authentication';
+import { FunctionError } from '@astrale-os/kernel-ports/functions';
+import { errors, publication as publicationProtocol } from '@astrale-os/kernel-protocol';
+import { bindCapabilityProviders } from '../capability/client.js';
+import { bindMutations } from '../mutation/index.js';
+import { bindQueries } from '../query/index.js';
+import { createInlineWorkflowRunner, isTriggeredHandler, isWorkflowBinding, } from '../workflow/index.js';
+import { createInlineStep } from '../workflow/step/index.js';
+import { createReceiver } from './receiver.js';
+import { projectInvocationResult } from './result.js';
+import { isInstanceMethod, selectInvocation, validateInvocationInput, } from './selection.js';
+const AUTHENTICATED_FIELDS = new Set(['caller', 'app', 'kernel']);
+const CALLER_FIELDS = new Set(['kind', 'principal', 'authority', 'authentication']);
+const ANONYMOUS = Object.freeze({
+    caller: Object.freeze({ kind: 'anonymous' }),
+    app: null,
+    kernel: null,
+    query: null,
+    mutate: null,
+});
+/** Compose one Domain-backed Server Handler without exposing another dispatch API. */
+export function createInvocationHandler(input) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
+        throw new TypeError('Invocation Handler input must be an object.');
+    }
+    const fields = new Set([
+        'deploymentFor',
+        'deps',
+        'capabilities',
+        'providers',
+        'authority',
+        'workflowRunner',
+    ]);
+    const keys = Reflect.ownKeys(input);
+    if (!['deploymentFor', 'deps', 'capabilities', 'providers', 'authority'].every((key) => Object.hasOwn(input, key)) ||
+        keys.some((key) => !fields.has(key))) {
+        throw new TypeError('Invocation Handler input must contain deploymentFor, deps, capabilities, providers, authority, and only supported optional fields.');
+    }
+    const deploymentFor = input.deploymentFor;
+    const authority = input.authority;
+    const deps = input.deps;
+    const capabilityClients = bindCapabilityProviders(input.capabilities, input.providers);
+    const workflowRunner = input.workflowRunner ?? createInlineWorkflowRunner();
+    if (typeof deploymentFor !== 'function') {
+        throw new TypeError('Invocation deployment selector must be a function.');
+    }
+    const admitInput = authority?.admit;
+    const authenticateInput = authority?.authenticate;
+    if (authority === null ||
+        typeof authority !== 'object' ||
+        typeof admitInput !== 'function' ||
+        typeof authenticateInput !== 'function') {
+        throw new TypeError('Invocation authority capability is invalid.');
+    }
+    if (workflowRunner === null ||
+        typeof workflowRunner !== 'object' ||
+        typeof workflowRunner.run !== 'function') {
+        throw new TypeError('Invocation Workflow runner capability is invalid.');
+    }
+    const admit = admitInput.bind(authority);
+    const authenticate = authenticateInput.bind(authority);
+    return Object.freeze({
+        dispatch: (request) => dispatchInvocation(request, deploymentFor, deps, capabilityClients, admit, authenticate, workflowRunner),
+    });
+}
+async function dispatchInvocation(request, deploymentFor, deps, capabilityClients, admit, authenticate, workflowRunner) {
+    requireLive(request.context);
+    const snapshot = requireSnapshot(request);
+    const deployment = deploymentFor(snapshot);
+    if (deployment === undefined) {
+        throw new FunctionError('FUNCTION_BINDING_INVALID', 'No SDK deployment is associated with the pinned Publication snapshot.');
+    }
+    if (!publicationProtocol.matchesReference(snapshot.publication, publicationProtocol.reference(deployment.publication))) {
+        throw new FunctionError('FUNCTION_BINDING_INVALID', 'Pinned Publication snapshot does not match the selected SDK deployment.');
+    }
+    if (request.via === undefined) {
+        throw new FunctionError('FUNCTION_INVOCATION_INVALID', 'Remote invocation requires Via.');
+    }
+    if (request.credential !== undefined && typeof request.credential !== 'string') {
+        throw new AuthenticationError('INVALID_CREDENTIAL', 'Remote credential must be portable text.');
+    }
+    requireLive(request.context);
+    const target = await admit({
+        call: request.call,
+        ...(request.credential === undefined ? {} : { credential: request.credential }),
+        via: request.via,
+        publication: deployment.publication,
+        domain: deployment.definition.domain,
+        context: request.context,
+    });
+    let selected;
+    try {
+        selected = selectInvocation(deployment, target);
+    }
+    catch (cause) {
+        if (cause instanceof FunctionError && cause.code === 'FUNCTION_MISS') {
+            return Object.freeze({ kind: 'miss' });
+        }
+        throw cause;
+    }
+    validateInvocationInput(selected, request.call.input);
+    const authority = await authorityFor(selected.callable.definition.auth, request, deployment, authenticate);
+    requireLive(request.context);
+    const self = isInstanceMethod(selected.callable)
+        ? createReceiver(selected, authority.app, authority.kernel)
+        : undefined;
+    const capabilities = capabilityClients(capabilityOwner(request.context));
+    const context = Object.freeze({
+        input: request.call.input,
+        callable: selected.callable,
+        caller: authority.caller,
+        app: authority.app,
+        kernel: authority.kernel,
+        query: authority.query,
+        mutate: authority.mutate,
+        deps,
+        capabilities,
+        step: createInlineStep({ signal: request.context.execution.signal }),
+        signal: request.context.execution.signal,
+        deadline: request.context.execution.deadline,
+        ...(request.context.idempotencyKey === undefined
+            ? {}
+            : { idempotencyKey: request.context.idempotencyKey }),
+        background: request.context.background,
+        sleep: request.context.sleep,
+        ...(request.context.request === undefined ? {} : { request: request.context.request }),
+        ...(self === undefined ? {} : { self }),
+    });
+    const implementation = selected.handler;
+    let output;
+    try {
+        output = isWorkflowBinding(implementation)
+            ? await runWorkflow(implementation.workflow, request, selected.target.callable, selected.receiver, authority, workflowCapabilities(deps, capabilities), workflowRunner)
+            : await (isTriggeredHandler(implementation) ? implementation.handler : implementation)(context);
+    }
+    catch (cause) {
+        if (!(cause instanceof ResponseError))
+            throw cause;
+        throw new errors.ProtocolError({
+            code: cause.code,
+            message: cause.message,
+            ...(cause.data === undefined ? {} : { data: cause.data }),
+        });
+    }
+    return projectInvocationResult(selected, output);
+}
+function capabilityOwner(context) {
+    const callPrefix = context.idempotencyKey === undefined ? globalThis.crypto.randomUUID() : context.idempotencyKey;
+    let sequence = 0;
+    return Object.freeze({
+        invoke(call) {
+            requireLive(context);
+            sequence += 1;
+            return call.attempt({
+                callId: `${callPrefix}:${sequence}`,
+                signal: context.execution.signal,
+                deadline: context.execution.deadline,
+            });
+        },
+    });
+}
+function workflowCapabilities(deps, capabilities) {
+    const capabilityNames = Object.keys(capabilities);
+    if (capabilityNames.length === 0)
+        return deps;
+    if (deps === null || typeof deps !== 'object' || Array.isArray(deps)) {
+        throw new TypeError('Workflow dependencies must be an object when Capabilities are declared.');
+    }
+    for (const name of capabilityNames) {
+        if (Object.hasOwn(deps, name)) {
+            throw new TypeError(`Workflow dependency ${name} conflicts with a Capability requirement.`);
+        }
+    }
+    return Object.freeze(Object.assign(Object.create(null), deps, capabilities));
+}
+function runWorkflow(workflow, request, callable, receiver, authority, capabilities, runner) {
+    if (authority.query === null || authority.mutate === null) {
+        throw new AuthenticationError('NO_AUTH', 'Workflow invocation requires authentication.');
+    }
+    return runner.run(workflow, {
+        input: request.call.input,
+        capabilities,
+        query: authority.query,
+        mutate: authority.mutate,
+        execution: request.context.execution,
+        activation: {
+            kind: 'call',
+            callable,
+            principal: authority.caller.principal,
+            authority: authority.caller.authority,
+            ...(receiver === undefined ? {} : { receiver }),
+            ...(request.context.idempotencyKey === undefined
+                ? {}
+                : { idempotencyKey: request.context.idempotencyKey }),
+        },
+    });
+}
+async function authorityFor(mode, request, deployment, authenticate) {
+    if (mode === 'anonymous' && request.credential === undefined) {
+        return ANONYMOUS;
+    }
+    if (request.credential === undefined) {
+        throw new AuthenticationError('NO_AUTH', 'Authentication is required.');
+    }
+    requireLive(request.context);
+    const result = await authenticate({
+        credential: request.credential,
+        via: request.via,
+        publication: deployment.publication,
+        domain: deployment.definition.domain,
+        context: request.context,
+    });
+    requireLive(request.context);
+    return admitAuthenticatedInvocation(result, deployment.definition.domain, request.context.execution.signal);
+}
+function admitAuthenticatedInvocation(input, domain, signal) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
+        return invalidAuthority('Remote authentication result is invalid.');
+    }
+    if (Reflect.ownKeys(input).some((key) => !AUTHENTICATED_FIELDS.has(key))) {
+        return invalidAuthority('Remote authentication result contains an unknown field.');
+    }
+    const caller = input.caller;
+    const app = input.app;
+    const kernel = input.kernel;
+    const principal = caller?.principal;
+    let callerAuthority;
+    try {
+        callerAuthority = grant.accept(caller?.authority);
+    }
+    catch {
+        return invalidAuthority('Remote authentication result has invalid caller authority.');
+    }
+    const authentication = caller?.authentication;
+    if (caller === null ||
+        typeof caller !== 'object' ||
+        Array.isArray(caller) ||
+        Reflect.ownKeys(caller).some((key) => !CALLER_FIELDS.has(key)) ||
+        caller.kind !== 'authenticated' ||
+        typeof principal !== 'string' ||
+        authentication === null ||
+        typeof authentication !== 'object' ||
+        Array.isArray(authentication) ||
+        app === null ||
+        typeof app !== 'object' ||
+        typeof app.$ !== 'object' ||
+        typeof app.$.bind !== 'function' ||
+        typeof app.$.invoke !== 'function' ||
+        kernel === null ||
+        typeof kernel !== 'object') {
+        return invalidAuthority('Remote authentication result is incomplete.');
+    }
+    if (app.$.origin !== domain.$.origin || app.$.revision !== domain.$.revision) {
+        return invalidAuthority('Authenticated application binding targets a different Domain.');
+    }
+    return Object.freeze({
+        caller: Object.freeze({
+            kind: 'authenticated',
+            principal,
+            authority: callerAuthority,
+            authentication,
+        }),
+        app,
+        kernel,
+        query: bindQueries((ast, options) => kernel.query(ast, { signal, page: options.page }), {
+            bind: app.$.bind,
+        }),
+        mutate: bindMutations((ast) => kernel.mutate(ast, { signal })),
+    });
+}
+function invalidAuthority(message) {
+    throw new FunctionError('RESULT_CONTRACT_VIOLATION', message);
+}
+function requireSnapshot(request) {
+    if (request.publication !== undefined)
+        return request.publication;
+    throw new FunctionError('FUNCTION_BINDING_INVALID', 'SDK invocation requires a Server-pinned Publication snapshot.');
+}
+function requireLive(context) {
+    if (context.execution.signal.aborted) {
+        throw new FunctionError('FUNCTION_CANCELLED', 'Function invocation was cancelled.');
+    }
+    if (Date.now() >= context.execution.deadline) {
+        throw new FunctionError('FUNCTION_DEADLINE_EXCEEDED', 'Function invocation deadline was exceeded.');
+    }
+}
+//# sourceMappingURL=handler.js.map

package/dist/invocation/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../src/invocation/handler.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAA;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,oCAAoC,CAAA;AAClE,OAAO,EAAE,MAAM,EAAE,WAAW,IAAI,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAWxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,iBAAiB,GAElB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAEhB,uBAAuB,GACxB,MAAM,gBAAgB,CAAA;AAoEvB,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;AAC9E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAc,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAA;AAChG,MAAM,SAAS,GAAwB,MAAM,CAAC,MAAM,CAAC;IACnD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC5C,GAAG,EAAE,IAAI;IACT,MAAM,EAAE,IAAI;IACZ,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,IAAI;CACb,CAAC,CAAA;AAEF,sFAAsF;AACtF,MAAM,UAAU,uBAAuB,CAKrC,KAAuE;IACvE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAA;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAc;QAClC,eAAe;QACf,MAAM;QACN,cAAc;QACd,WAAW;QACX,WAAW;QACX,gBAAgB;KACjB,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACnC,IACE,CAAC,CAAC,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACjF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAC1B;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EACpC,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,oIAAoI,CACrI,CAAA;IACH,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;IACzC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAA;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;IACvB,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IACtF,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,0BAA0B,EAAE,CAAA;IAC3E,IAAI,OAAO,aAAa,KAAK,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAA;IAC3E,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,EAAE,KAAK,CAAA;IACnC,MAAM,iBAAiB,GAAG,SAAS,EAAE,YAAY,CAAA;IACjD,IACE,SAAS,KAAK,IAAI;QAClB,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAO,UAAU,KAAK,UAAU;QAChC,OAAO,iBAAiB,KAAK,UAAU,EACvC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAA;IACpE,CAAC;IACD,IACE,cAAc,KAAK,IAAI;QACvB,OAAO,cAAc,KAAK,QAAQ;QAClC,OAAO,cAAc,CAAC,GAAG,KAAK,UAAU,EACxC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACxC,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACtD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,CAAC,OAAuB,EAAE,EAAE,CACpC,kBAAkB,CAChB,OAAO,EACP,aAAa,EACb,IAAI,EACJ,iBAAiB,EACjB,KAAK,EACL,YAAY,EACZ,cAAc,CACf;KACJ,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAM/B,OAAuB,EACvB,aAAkD,EAClD,IAAU,EACV,iBAAwD,EACxD,KAAsC,EACtC,YAAoD,EACpD,cAA8B;IAE9B,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5B,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC1C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,aAAa,CACrB,0BAA0B,EAC1B,uEAAuE,CACxE,CAAA;IACH,CAAC;IACD,IACE,CAAC,mBAAmB,CAAC,gBAAgB,CACnC,QAAQ,CAAC,WAAW,EACpB,mBAAmB,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,CACtD,EACD,CAAC;QACD,MAAM,IAAI,aAAa,CACrB,0BAA0B,EAC1B,yEAAyE,CAC1E,CAAA;IACH,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,6BAA6B,EAAE,iCAAiC,CAAC,CAAA;IAC3F,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC/E,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,EAAE,0CAA0C,CAAC,CAAA;IACjG,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;QACzB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QAC/E,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,MAAM;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAA;IACF,IAAI,QAA+B,CAAA;IACnC,IAAI,CAAC;QACH,QAAQ,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACrE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAA;QACjD,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrD,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EACjC,OAAO,EACP,UAAU,EACV,YAAY,CACb,CAAA;IAED,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5B,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC;QAC3D,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,YAAY,GAAG,iBAAiB,CAAC,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IACxE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;QACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,IAAI;QACJ,YAAY;QACZ,IAAI,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACpE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM;QACxC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ;QAC5C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACvD,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU;QACtC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;QAC5B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACtF,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KACxC,CAAC,CAAA;IAEF,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAA;IACvC,IAAI,MAAM,CAAA;IACV,IAAI,CAAC;QACH,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC;YACxC,CAAC,CAAC,MAAM,WAAW,CACf,cAAc,CAAC,QAAQ,EACvB,OAAO,EACP,QAAQ,CAAC,MAAM,CAAC,QAAQ,EACxB,QAAQ,CAAC,QAAQ,EACjB,SAAS,EACT,oBAAoB,CAAC,IAAI,EAAE,YAAY,CAAC,EACxC,cAAc,CACf;YACH,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAClF,OAAO,CACR,CAAA;IACP,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC;YAAE,MAAM,KAAK,CAAA;QAClD,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC;YAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;SAC1D,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;AAClD,CAAC;AAED,SAAS,eAAe,CAAC,OAA0B;IACjD,MAAM,UAAU,GACd,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAA;IAChG,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAS,IAA+B;YAC5C,WAAW,CAAC,OAAO,CAAC,CAAA;YACpB,QAAQ,IAAI,CAAC,CAAA;YACb,OAAO,IAAI,CAAC,OAAO,CAAC;gBAClB,MAAM,EAAE,GAAG,UAAU,IAAI,QAAQ,EAAE;gBACnC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;gBAChC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ;aACrC,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAa,EACb,YAA+C;IAE/C,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACjD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,yEAAyE,CAAC,CAAA;IAChG,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CAAC,uBAAuB,IAAI,2CAA2C,CAAC,CAAA;QAC7F,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,WAAW,CAClB,QAA8C,EAC9C,OAAuB,EACvB,QAAqD,EACrD,QAA2C,EAC3C,SAAmE,EACnE,YAAqB,EACrB,MAAsB;IAEtB,IAAI,SAAS,CAAC,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,8CAA8C,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC1B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;QACzB,YAAY;QACZ,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;QACpC,UAAU,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ;YACR,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS;YACrC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS;YACrC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;SACxD;KACF,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAyB,EACzB,OAAuB,EACvB,UAA4C,EAC5C,YAAoD;IAEpD,IAAI,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,mBAAmB,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAA;IACzE,CAAC;IAED,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,GAAG,EAAE,OAAO,CAAC,GAAI;QACjB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,MAAM;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAA;IACF,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5B,OAAO,4BAA4B,CACjC,MAAM,EACN,UAAU,CAAC,UAAU,CAAC,MAAM,EAC5B,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CACjC,CAAA;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAiC,EACjC,MAAiB,EACjB,MAAmB;IAEnB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,gBAAgB,CAAC,0CAA0C,CAAC,CAAA;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzE,OAAO,gBAAgB,CAAC,yDAAyD,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;IACrB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3B,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,CAAA;IACnC,IAAI,eAAe,CAAA;IACnB,IAAI,CAAC;QACH,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gBAAgB,CAAC,4DAA4D,CAAC,CAAA;IACvF,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,EAAE,cAAc,CAAA;IAC7C,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACrB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAI,KAAK,eAAe;QAC/B,OAAO,SAAS,KAAK,QAAQ;QAC7B,cAAc,KAAK,IAAI;QACvB,OAAO,cAAc,KAAK,QAAQ;QAClC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC7B,GAAG,KAAK,IAAI;QACZ,OAAO,GAAG,KAAK,QAAQ;QACvB,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ;QACzB,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU;QAClC,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ,EAC1B,CAAC;QACD,OAAO,gBAAgB,CAAC,6CAA6C,CAAC,CAAA;IACxE,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7E,OAAO,gBAAgB,CAAC,+DAA+D,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,eAAe;YACrB,SAAS;YACT,SAAS,EAAE,eAAe;YAC1B,cAAc;SACf,CAAC;QACF,GAAG;QACH,MAAM;QACN,KAAK,EAAE,WAAW,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE;YACtF,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI;SACjB,CAAC;QACF,MAAM,EAAE,aAAa,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;KAC/D,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,IAAI,aAAa,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAA;AAC/D,CAAC;AAED,SAAS,eAAe,CAAC,OAAuB;IAC9C,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,WAAW,CAAA;IACjE,MAAM,IAAI,aAAa,CACrB,0BAA0B,EAC1B,+DAA+D,CAChE,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAA0B;IAC7C,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrC,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,oCAAoC,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,aAAa,CACrB,4BAA4B,EAC5B,4CAA4C,CAC7C,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/invocation/index.d.ts

@@ -0,0 +1,3 @@
+export { createInvocationHandler } from './handler.js';
+export type { AuthenticatedInvocation, CreateInvocationHandlerInput, DeploymentFor, InvocationAdmissionInput, InvocationAuthenticationInput, InvocationAuthority, } from './handler.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/invocation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/invocation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AACtD,YAAY,EACV,uBAAuB,EACvB,4BAA4B,EAC5B,aAAa,EACb,wBAAwB,EACxB,6BAA6B,EAC7B,mBAAmB,GACpB,MAAM,cAAc,CAAA"}

package/dist/invocation/index.js

@@ -0,0 +1,2 @@
+export { createInvocationHandler } from './handler.js';
+//# sourceMappingURL=index.js.map

package/dist/invocation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/invocation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA"}

package/dist/invocation/receiver.d.ts

@@ -0,0 +1,5 @@
+import type { schema } from '@astrale-os/kernel-dsl/v1';
+import type { DomainApp, Kernel, Receiver } from '../domain/index.js';
+import type { SelectedInvocation, SelectedReceiverDefinition } from './selection.js';
+export declare function createReceiver<S extends schema.DomainSchema>(selected: SelectedInvocation<S>, app: DomainApp<S> | null, kernel: Kernel | null): Receiver<SelectedReceiverDefinition<S>>;
+//# sourceMappingURL=receiver.d.ts.map

package/dist/invocation/receiver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receiver.d.ts","sourceRoot":"","sources":["../../src/invocation/receiver.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAIvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAA;AAEpF,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,YAAY,EAC1D,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAC/B,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,EACxB,MAAM,EAAE,MAAM,GAAG,IAAI,GACpB,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CA2CzC"}

package/dist/invocation/receiver.js

@@ -0,0 +1,70 @@
+import { AuthenticationError } from '@astrale-os/kernel-ports/authentication';
+export function createReceiver(selected, app, kernel) {
+    const path = selected.receiver;
+    const definition = selected.receiverDefinition;
+    if (path === undefined || definition === undefined) {
+        throw new TypeError('Instance invocation is missing its selected receiver.');
+    }
+    const getOrThrow = kernel?.getOrThrow.bind(kernel);
+    const bind = app?.$.bind.bind(app.$);
+    let cached;
+    const node = (options = {}) => {
+        if (options === null || typeof options !== 'object' || Array.isArray(options)) {
+            throw new TypeError('Receiver node options are invalid.');
+        }
+        if (Reflect.ownKeys(options).some((key) => key !== 'reload') ||
+            (options.reload !== undefined && typeof options.reload !== 'boolean')) {
+            throw new TypeError('Receiver reload option is invalid.');
+        }
+        if (options.reload === true)
+            cached = undefined;
+        if (cached !== undefined)
+            return cached;
+        if (bind === undefined || getOrThrow === undefined)
+            return Promise.reject(missingAuthority());
+        const pending = getOrThrow(path)
+            .then((value) => bind(definition, value))
+            .catch((cause) => {
+            if (cached === pending)
+                cached = undefined;
+            throw cause;
+        });
+        cached = pending;
+        return pending;
+    };
+    const call = receiverCalls(definition, path, app);
+    return Object.freeze({
+        path,
+        ...('id' in path ? { id: path.id } : {}),
+        node,
+        call,
+    });
+}
+function receiverCalls(definition, path, app) {
+    const invoke = app?.$.invoke.bind(app.$);
+    const grouped = new Map();
+    for (const method of definition.methods.values()) {
+        if (!('on' in method) || method.definition.inheritance === 'abstract')
+            continue;
+        const candidates = grouped.get(method.name);
+        if (candidates === undefined)
+            grouped.set(method.name, [method]);
+        else
+            candidates.push(method);
+    }
+    const calls = {};
+    for (const [name, candidates] of grouped) {
+        if (candidates.length !== 1)
+            continue;
+        const method = candidates[0];
+        calls[name] =
+            invoke === undefined
+                ? () => Promise.reject(missingAuthority())
+                : (input) => invoke(method, path, input);
+    }
+    return Object.freeze(calls);
+}
+function missingAuthority() {
+    return new AuthenticationError('NO_AUTH', 'Receiver operations require an authenticated caller-bound application.');
+}
+//# sourceMappingURL=receiver.js.map

package/dist/invocation/receiver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receiver.js","sourceRoot":"","sources":["../../src/invocation/receiver.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAK7E,MAAM,UAAU,cAAc,CAC5B,QAA+B,EAC/B,GAAwB,EACxB,MAAqB;IAErB,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAA;IAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,kBAAkB,CAAA;IAC9C,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAA;IAC9E,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAEpC,IAAI,MAA2E,CAAA;IAC/E,MAAM,IAAI,GAAG,CACX,OAAO,GAAkC,EAAE,EACc,EAAE;QAC3D,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAA;QAC3D,CAAC;QACD,IACE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ,CAAC;YACxD,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,EACrE,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;YAAE,MAAM,GAAG,SAAS,CAAA;QAC/C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QACvC,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAA;QAE7F,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC;aAC7B,IAAI,CAAC,CAAC,KAAW,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;aAC9C,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,MAAM,KAAK,OAAO;gBAAE,MAAM,GAAG,SAAS,CAAA;YAC1C,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACJ,MAAM,GAAG,OAAO,CAAA;QAChB,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,IAAI;QACJ,IAAI;KACL,CAA4C,CAAA;AAC/C,CAAC;AAED,SAAS,aAAa,CACpB,UAAyC,EACzC,IAAU,EACV,GAAwB;IAExB,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAA;IACnD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,KAAK,UAAU;YAAE,SAAQ;QAC/E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;;YAC3D,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC9B,CAAC;IAED,MAAM,KAAK,GAAyD,EAAE,CAAA;IACtE,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;QACzC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAE,CAAA;QAC7B,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC1C,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAe,EAAE,IAAI,EAAE,KAAc,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,mBAAmB,CAC5B,SAAS,EACT,wEAAwE,CACzE,CAAA;AACH,CAAC"}

package/dist/invocation/result.d.ts

@@ -0,0 +1,5 @@
+import type { schema } from '@astrale-os/kernel-dsl/v1';
+import type { Result } from '@astrale-os/kernel-ports/functions';
+import type { SelectedInvocation } from './selection.js';
+export declare function projectInvocationResult<S extends schema.DomainSchema>(selected: SelectedInvocation<S>, output: unknown): Result;
+//# sourceMappingURL=result.d.ts.map

package/dist/invocation/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/invocation/result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAEvD,OAAO,KAAK,EAAU,MAAM,EAAU,MAAM,oCAAoC,CAAA;AAKhF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAMxD,wBAAgB,uBAAuB,CAAC,CAAC,SAAS,MAAM,CAAC,YAAY,EACnE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAC/B,MAAM,EAAE,OAAO,GACd,MAAM,CASR"}