@astrale-os/shell 0.1.1 → 0.2.0

package/src/window/mount/plain.ts

@@ -0,0 +1,68 @@
+import type { ShellAdapter } from '../embed/adapter'
+import type { LifecycleController } from '../lifecycle/states'
+import type { Window } from '../window'
+import type { Closer, MountEntry } from './close'
+import type { MountedWindow, MountParams } from './params'
+
+import { NOOP_REFRESHER } from './credential'
+
+export type PlainMountDeps = {
+  adapter: ShellAdapter
+  windows: Map<string, Window>
+  lifecycle: LifecycleController
+  entries: Map<string, MountEntry>
+  close: Closer
+}
+
+/**
+ * Plain-iframe mount path — for hosted views that don't speak the shell
+ * protocol. No handshake, no transport, no delegation token, no refresher;
+ * the iframe just renders. `close()` skips the ack request (no channel) and
+ * falls straight to dispose.
+ */
+export async function mountPlain(
+  deps: PlainMountDeps,
+  windowId: string,
+  params: MountParams,
+): Promise<MountedWindow> {
+  const { adapter, windows, lifecycle, entries, close } = deps
+
+  const { handle, dispose: disposeHandle } = adapter.mount({
+    functionId: params.functionId,
+    isolation: 'sandboxed',
+    capabilities: params.capabilities,
+    sandbox: params.sandbox,
+  })
+  if (!(handle.element instanceof HTMLIFrameElement)) {
+    disposeHandle()
+    throw new Error('Shell adapter did not produce an HTMLIFrameElement')
+  }
+  params.host.appendChild(handle.element)
+  handle.element.src = params.url
+
+  windows.set(windowId, {
+    windowId,
+    functionId: params.functionId,
+    targetNodeId: params.targetNodeId,
+    isolation: 'sandboxed',
+    state: 'active',
+    delegationToken: null,
+    capabilities: params.capabilities,
+  })
+  lifecycle.register(windowId, 'active')
+  entries.set(windowId, {
+    handle,
+    dispose: disposeHandle,
+    refresher: NOOP_REFRESHER,
+    plain: true,
+  })
+
+  return {
+    windowId,
+    get window() {
+      return windows.get(windowId)!
+    },
+    handle: { element: handle.element },
+    close: (opts) => close(windowId, opts),
+  }
+}

package/src/{domain/window → window}/window.ts

@@ -1,4 +1,4 @@
-import type { WindowCapabilities } from './config'
+import type { WindowCapabilities } from './capabilities'
 
 export type WindowState = 'active' | 'hidden' | 'closing' | 'closed'
 

package/dist/adapters/iframe.shell-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"iframe.shell-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/iframe.shell-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAgB,MAAM,wBAAwB,CAAA;AAExE,MAAM,MAAM,wBAAwB,GAAG;IACrC;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B,CAAA;AAUD,wBAAgB,wBAAwB,CAAC,MAAM,GAAE,wBAA6B,GAAG,YAAY,CAsC5F"}

package/dist/adapters/kernel-client.adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kernel-client.adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/kernel-client.adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,eAAe,EAEpB,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAA;AASlC;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,CACF,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,eAAe,EAC3B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,IAAI,CAAA;IACrC,UAAU,IAAI,IAAI,CAAA;IAClB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;IACzB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,eAAe,CAAA;IACrC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CACrB,CAAA;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,6BAA6B,GAClC,mBAAmB,CAgErB"}

package/dist/adapters/message-port.transport.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"message-port.transport.d.ts","sourceRoot":"","sources":["../../src/adapters/message-port.transport.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAEnD,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,WAAW,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB,CAAA;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAyCxF"}

package/dist/application/channels/children-channel.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"children-channel.d.ts","sourceRoot":"","sources":["../../../src/application/channels/children-channel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAErD,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IACnD,EAAE,CAAC,CAAC,SAAS,WAAW,EACtB,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,GACzD,MAAM,IAAI,CAAA;IACb,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;IAC9B,OAAO,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;CACzD;AAED,MAAM,WAAW,yBAA0B,SAAQ,eAAe;IAChE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI,CAAA;IACpD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,eAAe,CAAA;IACzB,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,CAAA;CACrE,CAAA;AAID,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,yBAAyB,CAmF9F"}

package/dist/application/channels/observer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"observer.d.ts","sourceRoot":"","sources":["../../../src/application/channels/observer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAE9D,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,CAAA;AAErD,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,KAAK,IAAI,CAAA;AAE1F,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IAChE,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,IAAI,CAAA;CAChD;AAED,wBAAgB,qBAAqB,IAAI,eAAe,CAqBvD"}

package/dist/application/channels/parent-channel.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"parent-channel.d.ts","sourceRoot":"","sources":["../../../src/application/channels/parent-channel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AAIrE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IACjC,EAAE,CAAC,CAAC,SAAS,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAA;CACtF;AAED,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,SAAS,CAAA;IACpB,QAAQ,EAAE,eAAe,CAAA;CAC1B,CAAA;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,uBAAuB,CAqBxF"}

package/dist/application/channels/types.d.ts

@@ -1,12 +0,0 @@
-import type { ShellMessage } from '../../domain/message/types';
-export type MessageHandler<M extends ShellMessage = ShellMessage> = (message: M) => void;
-export type MessageType = ShellMessage['type'];
-export type MessageOf<T extends MessageType> = Extract<ShellMessage, {
-    type: T;
-}>;
-export interface MessageListeners {
-    on<T extends MessageType>(type: T, handler: MessageHandler<MessageOf<T>>): () => void;
-    dispatch(message: ShellMessage): void;
-}
-export declare function createMessageListeners(): MessageListeners;
-//# sourceMappingURL=types.d.ts.map

package/dist/application/channels/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/application/channels/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAA;AAE9D,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,YAAY,GAAG,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,CAAA;AAExF,MAAM,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;AAE9C,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC,CAAA;AAEjF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,CAAC,SAAS,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAA;IACrF,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;CACtC;AAED,wBAAgB,sBAAsB,IAAI,gBAAgB,CA2BzD"}

package/dist/application/intent/pipeline-runner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pipeline-runner.d.ts","sourceRoot":"","sources":["../../../src/application/intent/pipeline-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE/D,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAA;IACvC,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,CAuBrD"}

package/dist/application/intent/request.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../../src/application/intent/request.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAErC;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,cAAc,EAC1D,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GACpC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAgBxC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,cAAc,EAC1D,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GACpC,IAAI,CAYN;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC,GAC/C,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,UAAU,CAAC,CAAC,CAStD"}

package/dist/application/intent/router.d.ts

@@ -1,56 +0,0 @@
-import type { IntentRegistry } from '../../domain/message/registries';
-import type { IntentMessage } from '../../domain/message/types';
-import type { Window } from '../../domain/window/window';
-import type { ChildrenChannelController } from '../channels/children-channel';
-import type { ParentChannel } from '../channels/parent-channel';
-import type { IntentPipeline } from './pipeline-runner';
-/**
- * Decision produced by a routing policy: where an inbound intent should go.
- *
- *  - `local`: the shell (entry point or sandboxed parent) handles it itself.
- *  - `parent`: forward upstream (only valid for sandboxed children).
- *  - `child`: forward to a specific child window.
- *  - `drop`: discard silently (e.g., handled fully by a middleware).
- */
-export type IntentDecision<K extends keyof IntentRegistry = keyof IntentRegistry> = {
-    kind: 'local';
-    message: IntentMessage<K>;
-} | {
-    kind: 'parent';
-    message: IntentMessage<K>;
-} | {
-    kind: 'child';
-    windowId: string;
-    message: IntentMessage<K>;
-} | {
-    kind: 'drop';
-};
-export type IntentOrigin = 'parent' | 'child' | 'self';
-export type IntentPolicy = (message: IntentMessage, ctx: IntentContext) => IntentDecision | Promise<IntentDecision>;
-export interface IntentContext {
-    readonly selfWindowId: string;
-    readonly origin: IntentOrigin;
-    readonly windows: ReadonlyMap<string, Window>;
-    readonly hasParent: boolean;
-}
-export type LocalIntentHandler<K extends keyof IntentRegistry = keyof IntentRegistry> = (message: IntentMessage<K>) => void | Promise<void>;
-export interface IntentRouterController {
-    /**
-     * Route an inbound intent. `senderWindowId`, when provided, is the trusted
-     * windowId the channel authenticated; it overrides the (forgeable)
-     * `envelope.sender.windowId` before the pipeline runs.
-     */
-    handleInbound(origin: IntentOrigin, message: IntentMessage, senderWindowId?: string): Promise<void>;
-    dispatchLocal(message: IntentMessage): Promise<void>;
-    setPolicy(policy: IntentPolicy): void;
-    onLocal<K extends keyof IntentRegistry>(name: K, handler: LocalIntentHandler<K>): () => void;
-}
-export type IntentRouterConfig = {
-    selfWindowId: string;
-    pipeline: IntentPipeline;
-    parent: ParentChannel | null;
-    children: ChildrenChannelController;
-    windows: ReadonlyMap<string, Window>;
-};
-export declare function createIntentRouter(config: IntentRouterConfig): IntentRouterController;
-//# sourceMappingURL=router.d.ts.map

package/dist/application/intent/router.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../src/application/intent/router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AACxD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAA;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,MAAM,cAAc,GAAG,MAAM,cAAc,IAC5E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpB,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAA;AAEtD,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,aAAa,KACf,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;AAE7C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,MAAM,cAAc,GAAG,MAAM,cAAc,IAAI,CACtF,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAEzB,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,aAAa,CACX,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,aAAa,EACtB,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAA;IACrC,OAAO,CAAC,CAAC,SAAS,MAAM,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAA;CAC7F;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,cAAc,CAAA;IACxB,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC5B,QAAQ,EAAE,yBAAyB,CAAA;IACnC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACrC,CAAA;AAuBD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,sBAAsB,CA4ErF"}

package/dist/application/kernel-facade.d.ts

@@ -1,33 +0,0 @@
-import type { KernelClientAdapter } from '../adapters/kernel-client.adapter';
-import type { DelegationToken } from '../domain/identity/delegation';
-import type { KernelClient } from '../ports/kernel-client';
-export type KernelFacadeConfig = {
-    adapter: KernelClientAdapter;
-    credential?: string;
-    getCredential?: () => string;
-    /** Kernel URL — exposed to consumers via `KernelClient.url`. */
-    url: string;
-    /**
-     * Explicit identity node to use as the mint subject. When omitted, the mint
-     * resolves the AUTHENTICATED caller via `whoami` (so a cookie-fronted GUI mints
-     * as the logged-in user, not the kernel root). Set this only to pin a subject.
-     */
-    mintIdentity?: string;
-};
-export interface KernelFacadeController extends KernelClient {
-    dispose(): void;
-}
-export declare function createKernelFacade(config: KernelFacadeConfig): KernelFacadeController;
-export type DelegationKernelFacadeConfig = {
-    adapter: KernelClientAdapter;
-    initialToken: DelegationToken;
-    url: string;
-    onTokenChange?: (token: DelegationToken) => void;
-    mintIdentity?: string;
-};
-export interface DelegationKernelFacadeController extends KernelFacadeController {
-    token(): DelegationToken;
-    setToken(next: DelegationToken): void;
-}
-export declare function createDelegationKernelFacade(config: DelegationKernelFacadeConfig): DelegationKernelFacadeController;
-//# sourceMappingURL=kernel-facade.d.ts.map

package/dist/application/kernel-facade.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kernel-facade.d.ts","sourceRoot":"","sources":["../../src/application/kernel-facade.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAO1D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,mBAAmB,CAAA;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,MAAM,CAAA;IAC5B,gEAAgE;IAChE,GAAG,EAAE,MAAM,CAAA;IACX;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,WAAW,sBAAuB,SAAQ,YAAY;IAC1D,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,sBAAsB,CAerF;AAID,MAAM,MAAM,4BAA4B,GAAG;IACzC,OAAO,EAAE,mBAAmB,CAAA;IAC5B,YAAY,EAAE,eAAe,CAAA;IAC7B,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAA;IAChD,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,WAAW,gCAAiC,SAAQ,sBAAsB;IAC9E,KAAK,IAAI,eAAe,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAAA;CACtC;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,4BAA4B,GACnC,gCAAgC,CA0BlC"}

package/dist/application/kernel-facade.js

@@ -1,77 +0,0 @@
-import { identityMethod } from '../domain/identity/path';
-import { createSelfResolver, WHOAMI_PATH } from '../domain/identity/resolve-self';
-export function createKernelFacade(config) {
-    const getCredential = config.getCredential ??
-        (() => {
-            if (config.credential === undefined) {
-                throw new Error('KernelFacade requires credential or getCredential');
-            }
-            return config.credential;
-        });
-    return buildCredentialFacade({
-        adapter: config.adapter,
-        getCredential,
-        url: config.url,
-        mintIdentity: config.mintIdentity,
-    });
-}
-export function createDelegationKernelFacade(config) {
-    let token = config.initialToken;
-    const base = buildCredentialFacade({
-        adapter: config.adapter,
-        getCredential: () => token.credential,
-        url: config.url,
-        mintIdentity: config.mintIdentity,
-    });
-    return {
-        ...base,
-        token() {
-            return token;
-        },
-        setToken(next) {
-            if (next.credential === token.credential && next.expiresAt === token.expiresAt)
-                return;
-            token = next;
-            config.onTokenChange?.(next);
-        },
-        // The delegation facade owns its adapter exclusively (created per child in
-        // `performChildInit`), so disposing it must tear the adapter down — unlike
-        // the standalone facade, where the caller owns the adapter's lifetime.
-        dispose() {
-            config.adapter.disconnect();
-        },
-    };
-}
-/**
- * v1 note: we mint a fresh identity credential (grant-bearing, directly
- * usable). Proper delegation composition (outer envelope via `Cred(...)`)
- * requires SDK v2 — tracked in `.dev/todo/shell-sdk-v2-delegation.md`.
- */
-function buildCredentialFacade(params) {
-    const { adapter, getCredential, mintIdentity, url } = params;
-    const resolveSelf = createSelfResolver();
-    return {
-        url,
-        call(path, callParams) {
-            return adapter.call(path, callParams, getCredential());
-        },
-        async mintDelegation() {
-            const subject = mintIdentity ?? (await resolveSelf(() => adapter.call(WHOAMI_PATH, {}, getCredential())));
-            const result = await adapter.call(identityMethod(subject, 'mintIdentityCredential'), {}, getCredential());
-            if (typeof result === 'string')
-                return result;
-            if (result !== null &&
-                typeof result === 'object' &&
-                typeof result.credential === 'string') {
-                return result.credential;
-            }
-            throw new Error('mintIdentityCredential returned an unexpected shape');
-        },
-        authToken() {
-            return getCredential();
-        },
-        dispose() {
-            // adapter lifetime is owned by the caller
-        },
-    };
-}

package/dist/application/shell.d.ts

@@ -1,100 +0,0 @@
-import type { FunctionSchema } from '@astrale-os/kernel-client';
-import type { IntentMiddleware } from '../domain/intent/pipeline';
-import type { IntentRegistry } from '../domain/message/registries';
-import type { WindowCapabilities, SandboxProfile } from '../domain/window/config';
-import type { Window } from '../domain/window/window';
-import type { KernelClient } from '../ports/kernel-client';
-import type { ShellAdapter } from '../ports/shell-adapter';
-import type { ChildrenChannel } from './channels/children-channel';
-import type { ObserverHandler } from './channels/observer';
-import type { ParentChannel } from './channels/parent-channel';
-import type { LocalIntentHandler } from './intent/router';
-export type { MessageDirection, ObserverHandler } from './channels/observer';
-export type { ParentChannel } from './channels/parent-channel';
-export type { ChildrenChannel } from './channels/children-channel';
-export type { MessageHandler } from './channels/types';
-export type MountParams = {
-    readonly host: HTMLElement;
-    readonly url: string;
-    readonly functionId: string;
-    readonly capabilities: WindowCapabilities;
-    readonly targetNodeId?: string;
-    /** See `WindowConfig.sandbox` — `null` opts the iframe out of the attribute. */
-    readonly sandbox?: SandboxProfile | null;
-    readonly handshakeTimeoutMs?: number;
-    readonly delegationTtlSeconds?: number;
-    /**
-     * `'shell'` (default) runs the parent-side handshake, opening a MessagePort
-     * transport with delegation tokens and an intent channel. `'none'` mounts a
-     * plain iframe with no transport — used for hosted views that don't speak
-     * the shell protocol (`BlaxelComputer.deployFunction(kind:'view')`), so they
-     * render immediately instead of paying the 5 s handshake timeout. In `'none'`
-     * mode `capabilities` / `targetNodeId` / `delegationTtlSeconds` are inert
-     * (no channel to deliver them).
-     */
-    readonly handshake?: 'shell' | 'none';
-};
-export type CloseResult = {
-    kind: 'closed';
-} | {
-    kind: 'refused';
-    reason?: string;
-} | {
-    kind: 'noop';
-};
-export type MountedWindow = {
-    readonly windowId: string;
-    readonly window: Window;
-    readonly handle: {
-        element: HTMLIFrameElement | HTMLElement;
-    };
-    close(opts?: {
-        force?: boolean;
-        timeoutMs?: number;
-    }): Promise<CloseResult>;
-};
-export interface Shell {
-    readonly parent: ParentChannel | null;
-    readonly children: ChildrenChannel;
-    readonly kernel: KernelClient;
-    readonly windows: ReadonlyMap<string, Window>;
-    readonly targetNodeId?: string;
-    use(middleware: IntentMiddleware): Shell;
-    onMessage(handler: ObserverHandler): () => void;
-    onIntent<K extends keyof IntentRegistry>(name: K, handler: LocalIntentHandler<K>): () => void;
-    mount(params: MountParams): Promise<MountedWindow>;
-    close(windowId: string, opts?: {
-        force?: boolean;
-        timeoutMs?: number;
-    }): Promise<CloseResult>;
-    init(): Promise<Shell>;
-    dispose(): Promise<void>;
-}
-export type StandaloneConfig = {
-    readonly mode: 'standalone';
-    readonly kernelUrl: string;
-    readonly credential?: string;
-    readonly getCredential?: () => string;
-    readonly mintIdentity?: string;
-    readonly schema?: FunctionSchema[];
-    readonly adapter?: ShellAdapter;
-    readonly windowId?: string;
-    /**
-     * Optional wire-layer `fetch` shim for the kernel transport. A cookie-fronted
-     * SPA passes a wrapper adding `credentials:'include'` + refresh-on-401 and an
-     * empty `credential`, so a router unseals the cookie into a Bearer (the SPA
-     * holds no token). Omit it (the default) for token-based callers — including
-     * every sandboxed child view, which authenticates with a delegation token.
-     */
-    readonly fetch?: typeof fetch;
-};
-export type SandboxedConfig = {
-    readonly mode: 'sandboxed';
-    readonly schema?: FunctionSchema[];
-    readonly parentWindow?: WindowProxy;
-    readonly initTimeoutMs?: number;
-    readonly adapter?: ShellAdapter;
-};
-export type ShellConfig = StandaloneConfig | SandboxedConfig;
-export declare function createShell(config: ShellConfig): Shell;
-//# sourceMappingURL=shell.d.ts.map

package/dist/application/shell.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/application/shell.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAE/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AACjF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,eAAe,EAA6B,MAAM,6BAA6B,CAAA;AAC7F,OAAO,KAAK,EAAmB,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC3E,OAAO,KAAK,EAAE,aAAa,EAA2B,MAAM,2BAA2B,CAAA;AAEvF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAiBzD,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC5E,YAAY,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC9D,YAAY,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAClE,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAItD,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAA;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IACxC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpB,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,iBAAiB,GAAG,WAAW,CAAA;KAAE,CAAA;IAC7D,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CAC5E,CAAA;AAID,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAE9B,GAAG,CAAC,UAAU,EAAE,gBAAgB,GAAG,KAAK,CAAA;IACxC,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,IAAI,CAAA;IAC/C,QAAQ,CAAC,CAAC,SAAS,MAAM,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAA;IAE7F,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAClD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAE7F,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;IACtB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAID,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAA;IACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAA;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CAC9B,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,CAAA;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAA;CAChC,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,gBAAgB,GAAG,eAAe,CAAA;AAQ5D,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,KAAK,CAEtD"}