@astrale-os/sdk 0.6.0-beta.2 → 0.6.0-beta.21

package/dist/tooling/cli/development/source-watch.d.ts

@@ -1,14 +0,0 @@
-export interface SourceWatch {
-    update(sources: ReadonlySet<string>): void;
-    stop(): Promise<void>;
-}
-/** Observe only the admitted authored module closure and declared secrets. */
-export declare function watchSources(input: {
-    readonly projectDir: string;
-    readonly configPath: string;
-    readonly sources: ReadonlySet<string>;
-    readonly onInvalidate: () => void;
-    readonly onRestartRequired: () => void;
-    readonly onError: (cause: unknown) => void;
-    readonly debounceMs?: number;
-}): SourceWatch;

package/dist/tooling/cli/development/source-watch.js

@@ -1,140 +0,0 @@
-import { statSync, watch } from 'node:fs';
-import { resolve } from 'node:path';
-/** Observe only the admitted authored module closure and declared secrets. */
-export function watchSources(input) {
-    let sources = canonicalSources(input.sources);
-    let closed = false;
-    let timer;
-    let dirty = false;
-    let restart = false;
-    const config = resolve(input.configPath);
-    let configFingerprint = fingerprint(config);
-    let sourceFingerprints = fingerprints(sources);
-    const directoryWatchers = new Map();
-    const watcher = watch(input.projectDir, { recursive: true }, () => {
-        if (closed)
-            return;
-        let changed = false;
-        try {
-            const nextConfig = fingerprint(config);
-            if (nextConfig !== configFingerprint) {
-                configFingerprint = nextConfig;
-                restart = true;
-                changed = true;
-            }
-            for (const path of sources) {
-                const next = fingerprint(path);
-                if (next === sourceFingerprints.get(path))
-                    continue;
-                sourceFingerprints.set(path, next);
-                dirty = true;
-                changed = true;
-            }
-        }
-        catch (cause) {
-            input.onError(cause);
-            return;
-        }
-        if (!changed)
-            return;
-        schedule();
-    });
-    watcher.on('error', input.onError);
-    syncDirectoryWatchers();
-    function schedule() {
-        if (timer !== undefined)
-            clearTimeout(timer);
-        timer = setTimeout(flush, input.debounceMs ?? 80);
-    }
-    function syncDirectoryWatchers() {
-        const directories = new Set([...sourceFingerprints]
-            .filter(([, value]) => value.startsWith('directory:'))
-            .map(([path]) => path));
-        for (const [path, owned] of directoryWatchers) {
-            if (directories.has(path))
-                continue;
-            owned.off('error', input.onError);
-            owned.close();
-            directoryWatchers.delete(path);
-        }
-        for (const path of directories) {
-            if (directoryWatchers.has(path))
-                continue;
-            const owned = watch(path, () => {
-                if (closed)
-                    return;
-                dirty = true;
-                schedule();
-            });
-            owned.on('error', input.onError);
-            directoryWatchers.set(path, owned);
-        }
-    }
-    function flush() {
-        timer = undefined;
-        if (closed)
-            return;
-        if (restart)
-            input.onRestartRequired();
-        else if (dirty)
-            input.onInvalidate();
-        restart = false;
-        dirty = false;
-    }
-    return Object.freeze({
-        update(next) {
-            const nextSources = canonicalSources(next);
-            const nextFingerprints = fingerprints(nextSources);
-            // A completed build does not prove it consumed the current file contents.
-            // Retain edits that raced its commit, even if the OS event is still queued.
-            let changed = false;
-            for (const [path, value] of nextFingerprints) {
-                if (sourceFingerprints.has(path) && sourceFingerprints.get(path) !== value) {
-                    dirty = true;
-                    changed = true;
-                }
-            }
-            sources = nextSources;
-            sourceFingerprints = nextFingerprints;
-            syncDirectoryWatchers();
-            if (changed)
-                schedule();
-        },
-        async stop() {
-            if (closed)
-                return;
-            closed = true;
-            if (timer !== undefined)
-                clearTimeout(timer);
-            watcher.off('error', input.onError);
-            watcher.close();
-            for (const owned of directoryWatchers.values()) {
-                owned.off('error', input.onError);
-                owned.close();
-            }
-            directoryWatchers.clear();
-        },
-    });
-}
-function canonicalSources(input) {
-    return new Set([...input].map((path) => resolve(path)));
-}
-function fingerprints(paths) {
-    return new Map([...paths].map((path) => [path, fingerprint(path)]));
-}
-function fingerprint(path) {
-    try {
-        const value = statSync(path, { bigint: true });
-        return `${value.isDirectory() ? 'directory' : 'file'}:${value.size}:${value.mtimeNs}:${value.ctimeNs}`;
-    }
-    catch (cause) {
-        if (errorCode(cause) === 'ENOENT')
-            return 'missing';
-        throw cause;
-    }
-}
-function errorCode(input) {
-    return input !== null && typeof input === 'object' && 'code' in input
-        ? String(Reflect.get(input, 'code'))
-        : undefined;
-}

package/dist/tooling/cli/development/sources.d.ts

@@ -1,7 +0,0 @@
-/** Own the canonical project-local files and directories that invalidate a candidate. */
-export declare class DevelopmentSources {
-    #private;
-    constructor(projectDir: string);
-    record: (path: string) => void;
-    snapshot(): ReadonlySet<string>;
-}

package/dist/tooling/cli/development/sources.js

@@ -1,48 +0,0 @@
-import { realpathSync } from 'node:fs';
-import { isAbsolute, relative, resolve, sep } from 'node:path';
-/** Own the canonical project-local files and directories that invalidate a candidate. */
-export class DevelopmentSources {
-    #declaredProjectDir;
-    #projectDir;
-    #sources = new Set();
-    constructor(projectDir) {
-        this.#declaredProjectDir = resolve(projectDir);
-        try {
-            this.#projectDir = realpathSync.native(this.#declaredProjectDir);
-        }
-        catch {
-            this.#projectDir = this.#declaredProjectDir;
-        }
-    }
-    record = (path) => {
-        if (typeof path !== 'string' || path.length === 0 || path.includes('\0')) {
-            throw new TypeError('An adapter reported an invalid preparation source path.');
-        }
-        const declared = isAbsolute(path) ? resolve(path) : resolve(this.#declaredProjectDir, path);
-        let absolute;
-        try {
-            absolute = realpathSync.native(declared);
-        }
-        catch (cause) {
-            if (errorCode(cause) !== 'ENOENT')
-                throw cause;
-            absolute = declared.startsWith(`${this.#declaredProjectDir}${sep}`)
-                ? resolve(this.#projectDir, relative(this.#declaredProjectDir, declared))
-                : declared;
-        }
-        if (!absolute.startsWith(`${this.#projectDir}${sep}`))
-            return;
-        const topLevel = relative(this.#projectDir, absolute).split(sep)[0];
-        if (topLevel === '.astrale' || topLevel === '.git' || topLevel === 'node_modules')
-            return;
-        this.#sources.add(absolute);
-    };
-    snapshot() {
-        return new Set(this.#sources);
-    }
-}
-function errorCode(input) {
-    return input !== null && typeof input === 'object' && 'code' in input
-        ? String(Reflect.get(input, 'code'))
-        : undefined;
-}

package/dist/tooling/cli/development/target-lock.d.ts

@@ -1,16 +0,0 @@
-import type { DevelopmentLease } from './lease.js';
-export declare class DevelopmentTargetLockError extends Error {
-    readonly code: 'DEVELOPMENT_TARGET_LOCKED' | 'DEVELOPMENT_TARGET_LOCK_LOST';
-    readonly name = "DevelopmentTargetLockError";
-    constructor(code: 'DEVELOPMENT_TARGET_LOCKED' | 'DEVELOPMENT_TARGET_LOCK_LOST', message: string, options?: ErrorOptions);
-}
-/** Exclude local sessions targeting one installed Domain across separate checkouts. */
-export declare function acquireDevelopmentTargetLock(input: {
-    readonly issuer: string;
-    readonly origin: string;
-}, dependencies?: {
-    readonly root?: string;
-    readonly pid?: number;
-    readonly sessionId?: string;
-    readonly processAlive?: (pid: number) => boolean;
-}): Promise<DevelopmentLease>;

package/dist/tooling/cli/development/target-lock.js

@@ -1,68 +0,0 @@
-import { createHash } from 'node:crypto';
-import { mkdir, rmdir } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { acquireDevelopmentLease, DevelopmentLeaseError } from './lease.js';
-export class DevelopmentTargetLockError extends Error {
-    code;
-    name = 'DevelopmentTargetLockError';
-    constructor(code, message, options) {
-        super(message, options);
-        this.code = code;
-    }
-}
-/** Exclude local sessions targeting one installed Domain across separate checkouts. */
-export async function acquireDevelopmentTargetLock(input, dependencies = {}) {
-    const coordinate = `${input.issuer}#${input.origin}`;
-    const root = dependencies.root ?? join(tmpdir(), 'astrale-domain-development-targets');
-    const key = createHash('sha256')
-        .update(input.issuer)
-        .update('\0')
-        .update(input.origin)
-        .digest('hex');
-    const directory = join(root, key);
-    await mkdir(root, { recursive: true, mode: 0o700 });
-    let lease;
-    try {
-        lease = await acquireDevelopmentLease({
-            directory,
-            coordinate,
-            ...(dependencies.pid === undefined ? {} : { pid: dependencies.pid }),
-            ...(dependencies.sessionId === undefined ? {} : { sessionId: dependencies.sessionId }),
-            ...(dependencies.processAlive === undefined
-                ? {}
-                : { processAlive: dependencies.processAlive }),
-        });
-    }
-    catch (cause) {
-        if (cause instanceof DevelopmentLeaseError) {
-            throw new DevelopmentTargetLockError('DEVELOPMENT_TARGET_LOCKED', cause.message, { cause });
-        }
-        throw cause;
-    }
-    return Object.freeze({
-        ...lease,
-        async release() {
-            try {
-                await lease.release();
-            }
-            catch (cause) {
-                if (cause instanceof DevelopmentLeaseError) {
-                    throw new DevelopmentTargetLockError('DEVELOPMENT_TARGET_LOCK_LOST', cause.message, {
-                        cause,
-                    });
-                }
-                throw cause;
-            }
-            await rmdir(directory).catch(ignoreNonEmpty);
-            await rmdir(root).catch(ignoreNonEmpty);
-        },
-    });
-}
-function ignoreNonEmpty(cause) {
-    const code = cause !== null && typeof cause === 'object' && 'code' in cause
-        ? String(Reflect.get(cause, 'code'))
-        : undefined;
-    if (!['ENOENT', 'ENOTEMPTY', 'EEXIST'].includes(code ?? ''))
-        throw cause;
-}

package/dist/tooling/cli/development/view.d.ts

@@ -1,28 +0,0 @@
-import type { Release } from '../../../deployment/release/index.js';
-import type { AstraleProcessResult } from '../astrale/process.js';
-export interface DevelopmentViewDependencies {
-    run(input: {
-        readonly executable: string;
-        readonly args: readonly string[];
-        readonly projectDir: string;
-        readonly signal: AbortSignal;
-        readonly timeoutMs: number;
-    }): Promise<AstraleProcessResult>;
-}
-/** Keep one browser tab alive across successful remote deployments. */
-export declare class DevelopmentView {
-    #private;
-    constructor(input: {
-        readonly executable: string;
-        readonly projectDir: string;
-        readonly instance: string;
-        readonly identity?: string;
-        readonly credential?: string;
-        readonly dependencies?: DevelopmentViewDependencies;
-    });
-    /** Require in-place refresh before publishing anything that depends on this CLI feature. */
-    prepare(signal: AbortSignal): Promise<void>;
-    /** Called after each committed deployment; the development loop owns candidate deduplication. */
-    refresh(release: Release, signal: AbortSignal): Promise<string | undefined>;
-    close(signal: AbortSignal): Promise<void>;
-}

package/dist/tooling/cli/development/view.js

@@ -1,151 +0,0 @@
-import { astraleAuthorityArguments } from '../astrale/authority.js';
-import { runAstrale } from '../astrale/process.js';
-/** Keep one browser tab alive across successful remote deployments. */
-export class DevelopmentView {
-    #executable;
-    #projectDir;
-    #instance;
-    #authority;
-    #dependencies;
-    #current;
-    #prepared = false;
-    constructor(input) {
-        this.#executable = input.executable;
-        this.#projectDir = input.projectDir;
-        this.#instance = input.instance;
-        this.#authority = astraleAuthorityArguments({
-            ...(input.identity === undefined ? {} : { identity: input.identity }),
-            ...(input.credential === undefined ? {} : { credential: input.credential }),
-        });
-        this.#dependencies = input.dependencies ?? { run: runAstrale };
-    }
-    /** Require in-place refresh before publishing anything that depends on this CLI feature. */
-    async prepare(signal) {
-        if (this.#prepared)
-            return;
-        const result = await this.#dependencies.run({
-            executable: this.#executable,
-            projectDir: this.#projectDir,
-            signal,
-            timeoutMs: 10_000,
-            args: ['view', '--help'],
-        });
-        if (result.code !== 0 || !result.stdout.includes('--refresh <id>')) {
-            throw new Error('This Astrale CLI cannot refresh development Views. Run astrale update before pnpm dev.');
-        }
-        this.#prepared = true;
-    }
-    /** Called after each committed deployment; the development loop owns candidate deduplication. */
-    async refresh(release, signal) {
-        const frontend = release.build.frontend;
-        if (frontend === undefined) {
-            await this.close(AbortSignal.timeout(30_000));
-            return undefined;
-        }
-        const path = `/:${frontend.entrypoint.origin}:view.${frontend.entrypoint.name}`;
-        const previous = this.#current;
-        if (previous?.path === path) {
-            const refreshed = await this.#dependencies.run({
-                executable: this.#executable,
-                projectDir: this.#projectDir,
-                signal,
-                timeoutMs: 60_000,
-                args: ['--ci', '--no-prompt', 'view', '--refresh', previous.id, '--json'],
-            });
-            if (refreshed.code !== 0)
-                throw new Error('Astrale CLI could not refresh the development View.');
-            return previous.pageUrl;
-        }
-        const next = await this.#open(path, signal);
-        if (previous !== undefined) {
-            try {
-                await this.#close(previous.id, AbortSignal.timeout(30_000));
-            }
-            catch (cause) {
-                try {
-                    await this.#close(next.id, AbortSignal.timeout(30_000));
-                }
-                catch (rollback) {
-                    throw new AggregateError([cause, rollback], 'Astrale View replacement and rollback cleanup failed.');
-                }
-                throw cause;
-            }
-        }
-        this.#current = next;
-        return next.pageUrl;
-    }
-    async close(signal) {
-        const current = this.#current;
-        if (current === undefined)
-            return;
-        await this.#close(current.id, signal);
-        if (this.#current === current) {
-            this.#current = undefined;
-        }
-    }
-    async #open(path, signal) {
-        const result = await this.#dependencies.run({
-            executable: this.#executable,
-            projectDir: this.#projectDir,
-            signal,
-            timeoutMs: 60_000,
-            args: [
-                '--ci',
-                '--no-prompt',
-                'view',
-                path,
-                '--browser',
-                '--instance',
-                this.#instance,
-                '--json',
-                ...this.#authority,
-            ],
-        });
-        if (result.code !== 0)
-            throw new Error('Astrale CLI could not open the development View.');
-        return { ...decodeOpenedView(result.stdout), path };
-    }
-    async #close(id, signal) {
-        const result = await this.#dependencies.run({
-            executable: this.#executable,
-            projectDir: this.#projectDir,
-            signal,
-            timeoutMs: 30_000,
-            args: ['--ci', '--no-prompt', 'view', '--close', id, '--json'],
-        });
-        if (result.code !== 0)
-            throw new Error('Astrale CLI could not close the development View.');
-    }
-}
-function decodeOpenedView(input) {
-    let value;
-    try {
-        value = JSON.parse(input);
-    }
-    catch (cause) {
-        throw new TypeError('Astrale View output is invalid.', { cause });
-    }
-    const session = record(value) ? value.session : undefined;
-    const id = record(session) ? session.id : undefined;
-    const pageUrl = record(session) ? session.pageUrl : undefined;
-    if (typeof id !== 'string' || id.length === 0 || !webUrl(pageUrl)) {
-        throw new TypeError('Astrale View output is invalid.');
-    }
-    return Object.freeze({ id, pageUrl });
-}
-function webUrl(input) {
-    if (typeof input !== 'string' || input.length === 0 || input.length > 2_048)
-        return false;
-    try {
-        const value = new URL(input);
-        return ((value.protocol === 'http:' || value.protocol === 'https:') &&
-            value.username === '' &&
-            value.password === '');
-    }
-    catch {
-        return false;
-    }
-}
-function record(input) {
-    return input !== null && typeof input === 'object' && !Array.isArray(input);
-}

package/dist/tooling/cli/environment-release.d.ts

@@ -1,21 +0,0 @@
-import type { Adapter, InstallationTarget, ReadyDeployResult } from '../../deployment/adapter/index.js';
-import type { InstallationEvidence } from './installation/index.js';
-import { writeDeploymentEvidence } from './evidence.js';
-import { reconcileInstallation } from './installation/index.js';
-export interface EnvironmentReleaseDependencies {
-    readonly writeEvidence: typeof writeDeploymentEvidence;
-    readonly reconcileInstallation: typeof reconcileInstallation;
-}
-/** Retain verified provider evidence and reconcile one optional durable Kernel installation. */
-export declare function reconcileEnvironmentRelease(input: {
-    readonly projectDir: string;
-    readonly environment: string;
-    readonly adapter: Adapter<object>;
-    readonly deployment: ReadyDeployResult;
-    readonly installation?: InstallationTarget;
-    readonly deployOnly: boolean;
-    readonly identity?: string;
-    readonly credential?: string;
-    readonly installationExecutable?: string;
-    readonly signal: AbortSignal;
-}, dependencies?: EnvironmentReleaseDependencies): Promise<InstallationEvidence | undefined>;

package/dist/tooling/cli/environment-release.js

@@ -1,46 +0,0 @@
-import { writeDeploymentEvidence } from './evidence.js';
-import { reconcileInstallation } from './installation/index.js';
-/** Retain verified provider evidence and reconcile one optional durable Kernel installation. */
-export async function reconcileEnvironmentRelease(input, dependencies = {
-    writeEvidence: writeDeploymentEvidence,
-    reconcileInstallation,
-}) {
-    try {
-        await dependencies.writeEvidence({
-            projectDir: input.projectDir,
-            environment: input.environment,
-            adapter: input.adapter,
-            deployment: input.deployment,
-        });
-    }
-    catch (cause) {
-        throw new TypeError(`Domain ${input.deployment.release.publication.origin} remains deployed, but its local evidence could not be saved. Kernel installation was not attempted.`, { cause });
-    }
-    if (input.installation === undefined || input.deployOnly)
-        return undefined;
-    if (input.installationExecutable === undefined) {
-        throw new TypeError('A compatible Astrale CLI must be pinned before deploying an installed Environment.');
-    }
-    const installation = await dependencies.reconcileInstallation({
-        projectDir: input.projectDir,
-        target: input.installation,
-        executable: input.installationExecutable,
-        ...(input.identity === undefined ? {} : { identity: input.identity }),
-        ...(input.credential === undefined ? {} : { credential: input.credential }),
-        release: input.deployment.release,
-        signal: input.signal,
-    });
-    try {
-        await dependencies.writeEvidence({
-            projectDir: input.projectDir,
-            environment: input.environment,
-            adapter: input.adapter,
-            deployment: input.deployment,
-            installation,
-        });
-    }
-    catch (cause) {
-        throw new TypeError(`Domain ${installation.origin} remains installed on ${installation.instance}, but its local evidence could not be saved. The installation was not rolled back.`, { cause });
-    }
-    return installation;
-}

package/dist/tooling/cli/evidence.d.ts

@@ -1,11 +0,0 @@
-import type { Adapter, ReadyDeployResult } from '../../deployment/adapter/index.js';
-import type { InstallationEvidence } from './installation/index.js';
-export declare const DEPLOYMENT_EVIDENCE_VERSION: 1;
-/** Persist one non-secret, non-authoritative continuity observation atomically. */
-export declare function writeDeploymentEvidence(input: {
-    readonly projectDir: string;
-    readonly environment: string;
-    readonly adapter: Adapter<object>;
-    readonly deployment: ReadyDeployResult;
-    readonly installation?: InstallationEvidence;
-}): Promise<string>;

package/dist/tooling/cli/evidence.js

@@ -1,53 +0,0 @@
-import { randomUUID } from 'node:crypto';
-import { mkdir, rename, unlink, writeFile } from 'node:fs/promises';
-import { join } from 'node:path';
-export const DEPLOYMENT_EVIDENCE_VERSION = 1;
-/** Persist one non-secret, non-authoritative continuity observation atomically. */
-export async function writeDeploymentEvidence(input) {
-    const directory = join(input.projectDir, '.astrale', 'environments', input.environment);
-    const path = join(directory, 'deployment.json');
-    await mkdir(directory, { recursive: true });
-    const provider = input.deployment.progress.provider.evidence;
-    const value = Object.freeze({
-        version: DEPLOYMENT_EVIDENCE_VERSION,
-        environment: input.environment,
-        adapter: Object.freeze({ name: input.adapter.name, version: input.adapter.version }),
-        deployment: Object.freeze({
-            provider: provider.provider,
-            id: provider.deployment,
-            artifact: provider.artifact,
-            issuer: input.deployment.release.addressing.issuer,
-            publicUrl: input.deployment.release.addressing.publicUrl,
-            origin: input.deployment.release.publication.origin,
-            revision: input.deployment.release.publication.schema.revision,
-            etag: input.deployment.release.publication.etag,
-            readiness: 'ready',
-            ...(provider.preflight === undefined ? {} : { preflight: provider.preflight }),
-        }),
-        ...(input.installation === undefined
-            ? {}
-            : {
-                installation: Object.freeze({
-                    instance: input.installation.instance,
-                    origin: input.installation.origin,
-                    issuer: input.installation.issuer,
-                    revision: input.installation.revision,
-                    etag: input.installation.etag,
-                    generation: input.installation.generation,
-                    status: input.installation.status,
-                }),
-            }),
-    });
-    const staging = join(directory, `.deployment-${randomUUID()}.json`);
-    await writeFile(staging, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600, flag: 'wx' });
-    try {
-        await rename(staging, path);
-    }
-    finally {
-        await unlink(staging).catch((cause) => {
-            if (cause.code !== 'ENOENT')
-                throw cause;
-        });
-    }
-    return path;
-}

package/dist/tooling/cli/installation/index.d.ts

@@ -1,2 +0,0 @@
-export { reconcileInstallation } from './reconcile.js';
-export type { AstraleCommandResult, InstallationDependencies, InstallationEvidence, } from './reconcile.js';

package/dist/tooling/cli/installation/index.js

@@ -1 +0,0 @@
-export { reconcileInstallation } from './reconcile.js';

package/dist/tooling/cli/installation/observation.d.ts

@@ -1,10 +0,0 @@
-export interface InstallationObservation {
-    readonly origin: string;
-    readonly revision: string;
-    readonly issuer: string;
-    readonly generation: string;
-    readonly etag: string;
-}
-/** Admit exact installed Release evidence returned by Kernel introspection. */
-export declare function decodeInstallationObservation(input: string): InstallationObservation;
-export declare function canonicalIssuer(input: string): string;

package/dist/tooling/cli/installation/observation.js

@@ -1,44 +0,0 @@
-/** Admit exact installed Release evidence returned by Kernel introspection. */
-export function decodeInstallationObservation(input) {
-    let decoded;
-    try {
-        decoded = JSON.parse(input);
-    }
-    catch (cause) {
-        throw new TypeError('Astrale introspection did not return one JSON value.', { cause });
-    }
-    const root = record(decoded);
-    const publication = record(root.publication);
-    const identity = record(publication.identity);
-    if (typeof root.origin !== 'string' ||
-        typeof root.revision !== 'string' ||
-        typeof root.generation !== 'string' ||
-        !/^sha256:[0-9a-f]{64}$/u.test(root.generation) ||
-        publication.origin !== root.origin ||
-        publication.revision !== root.revision ||
-        typeof identity.issuer !== 'string' ||
-        typeof publication.etag !== 'string' ||
-        !/^sha256:[0-9a-f]{64}$/u.test(publication.etag)) {
-        throw new TypeError('Astrale introspection returned invalid installed Domain evidence.');
-    }
-    return Object.freeze({
-        origin: root.origin,
-        revision: root.revision,
-        issuer: canonicalIssuer(identity.issuer),
-        generation: root.generation,
-        etag: publication.etag,
-    });
-}
-export function canonicalIssuer(input) {
-    const url = new URL(input);
-    if (url.href !== url.origin && url.href !== `${url.origin}/`) {
-        throw new TypeError('Release issuer must be one canonical origin.');
-    }
-    return url.origin;
-}
-function record(input) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
-        throw new TypeError('Astrale introspection returned invalid installed Domain evidence.');
-    }
-    return input;
-}