@astrale-os/shell 0.1.1 → 0.3.0

package/dist/domain/intent/middleware/rate-limit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../../src/domain/intent/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEnD,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,MAAM,CAAA;AAE7D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,kBAAkB,KAAK,IAAI,CAAA;CAC/D,CAAA;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,gBAAgB,CA+B7E"}

package/dist/domain/intent/pipeline.d.ts

@@ -1,3 +0,0 @@
-import type { IntentMessage } from '../message/types';
-export type IntentMiddleware = (message: IntentMessage, next: () => Promise<void>) => Promise<void>;
-//# sourceMappingURL=pipeline.d.ts.map

package/dist/domain/intent/pipeline.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../../src/domain/intent/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAErD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA"}

package/dist/domain/intent/router.d.ts

@@ -1,6 +0,0 @@
-import type { IntentRegistry } from '../message/registries';
-import type { IntentMessage } from '../message/types';
-export interface IntentRouter {
-    dispatch<K extends keyof IntentRegistry>(message: IntentMessage<K>): Promise<void>;
-}
-//# sourceMappingURL=router.d.ts.map

package/dist/domain/intent/router.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../../src/domain/intent/router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAErD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,CAAC,SAAS,MAAM,cAAc,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnF"}

package/dist/domain/message/errors.d.ts

@@ -1,2 +0,0 @@
-export type ErrorCode = 'HANDSHAKE_TIMEOUT' | 'ORIGIN_MISMATCH' | 'WINDOW_UNAVAILABLE' | 'UNSUPPORTED_VERSION' | 'INTENT_NOT_ALLOWED' | 'DELIVERY_FAILED' | 'TOKEN_REFRESH_FAILED' | 'NO_VIEW_AVAILABLE';
-//# sourceMappingURL=errors.d.ts.map

package/dist/domain/message/errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/domain/message/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GACjB,mBAAmB,GACnB,iBAAiB,GACjB,oBAAoB,GACpB,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,GACjB,sBAAsB,GACtB,mBAAmB,CAAA"}

package/dist/domain/message/registries.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registries.d.ts","sourceRoot":"","sources":["../../../src/domain/message/registries.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE;QAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,QAAQ,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IACtF,KAAK,EAAE;QAAE,OAAO,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAA;IACxD,KAAK,EAAE;QAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAA;IACtD,SAAS,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAA;IAC7D,QAAQ,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAA;IAC5D,WAAW,EAAE;QAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAA;IAC5D,QAAQ,EAAE;QAAE,OAAO,EAAE;YAAE,KAAK,EAAE,OAAO,EAAE,CAAA;SAAE,CAAC;QAAC,QAAQ,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IACzE,OAAO,EAAE;QAAE,OAAO,EAAE;YAAE,IAAI,EAAE,OAAO,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAA;IAC7E;;;;;OAKG;IACH,SAAS,EAAE;QAAE,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAA;IAC1D;;;;;;;;;;;;;OAaG;IACH,aAAa,EAAE;QACb,OAAO,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QAC3E,QAAQ,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAC9C,CAAA;IACD;;;;;;OAMG;IACH,WAAW,EAAE;QAAE,OAAO,EAAE;YAAE,aAAa,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,OAAO,CAAA;SAAE,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,CAAA;CACrF;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE;QACT,IAAI,EAAE;YACJ,eAAe,EAAE,MAAM,CAAA;YACvB,cAAc,EAAE,MAAM,CAAA;YACtB,QAAQ,EAAE,MAAM,CAAA;YAChB,SAAS,EAAE,MAAM,CAAA;YACjB,UAAU,EAAE,MAAM,CAAA;YAClB,YAAY,CAAC,EAAE,MAAM,CAAA;YACrB,YAAY,CAAC,EAAE,MAAM,CAAA;SACtB,CAAA;KACF,CAAA;IACD,YAAY,EAAE;QAAE,IAAI,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;IAC5C,YAAY,EAAE;QAAE,IAAI,EAAE;YAAE,eAAe,EAAE,MAAM,CAAC;YAAC,cAAc,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAA;CAC5E"}

package/dist/domain/message/types.d.ts

@@ -1,30 +0,0 @@
-import type { ErrorCode } from './errors';
-import type { CtrlRegistry, IntentRegistry } from './registries';
-export type IntentEnvelope<K extends keyof IntentRegistry = keyof IntentRegistry> = {
-    readonly name: K;
-    readonly payload: IntentRegistry[K]['payload'];
-    readonly sender: {
-        readonly windowId: string;
-    };
-    readonly correlationId?: string;
-};
-export type IntentMessage<K extends keyof IntentRegistry = keyof IntentRegistry> = {
-    readonly type: 'intent';
-    readonly version: 1;
-    readonly envelope: IntentEnvelope<K>;
-};
-export type CtrlMessage<K extends keyof CtrlRegistry = keyof CtrlRegistry> = {
-    readonly type: 'ctrl';
-    readonly version: 1;
-    readonly action: K;
-    readonly data: CtrlRegistry[K]['data'];
-};
-export type ErrorMessage = {
-    readonly type: 'error';
-    readonly version: 1;
-    readonly code: ErrorCode;
-    readonly message: string;
-    readonly context?: unknown;
-};
-export type ShellMessage = IntentMessage | CtrlMessage | ErrorMessage;
-//# sourceMappingURL=types.d.ts.map

package/dist/domain/message/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/domain/message/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEhE,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,MAAM,cAAc,GAAG,MAAM,cAAc,IAAI;IAClF,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;IAChB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAC9C,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAChC,CAAA;AAED,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,MAAM,cAAc,GAAG,MAAM,cAAc,IAAI;IACjF,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,MAAM,YAAY,GAAG,MAAM,YAAY,IAAI;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAClB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;CACvC,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,WAAW,GAAG,YAAY,CAAA"}

package/dist/domain/window/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/domain/window/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAE3D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAA;IAC9B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;IAC7B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,cAAc,CAAC,CAAA;CACtD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC1C,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAA;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;CACzC"}

package/dist/domain/window/lifecycle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/domain/window/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAE3C,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAA;AAE1B,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAE9F;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,GAAG,gBAAgB,CAsBtF"}

package/dist/domain/window/window.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"window.d.ts","sourceRoot":"","sources":["../../../src/domain/window/window.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAA;AAElD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEpE,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC1C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IACvC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAA;CAC1C"}

package/dist/ports/kernel-client.d.ts

@@ -1,33 +0,0 @@
-export interface KernelClient {
-    call(path: string, params: unknown): Promise<unknown>;
-    /**
-     * Produce a credential usable by a child shell.
-     *
-     * v1: returns a fresh identity credential scoped to the current principal.
-     * Future (SDK v2): will accept `{ functionId }` to scope the delegation
-     * to a specific Function — tracked in `.dev/todo/shell-sdk-v2-delegation.md`.
-     */
-    mintDelegation(): Promise<string>;
-    /**
-     * Return the JWT this shell currently uses to authenticate `call`. Iframes
-     * use it to make their own authenticated HTTP requests to the kernel —
-     * e.g. when a third-party SDK like Vercel AI's `useChat` issues a raw
-     * `fetch()` that can't run through `call()`. Callers form the Authorization
-     * header themselves: `Authorization: \`Bearer ${shell.kernel.authToken()}\``.
-     *
-     * The value is the *current* token; the parent shell auto-refreshes it
-     * before expiry, so always read fresh on each request rather than caching.
-     */
-    authToken(): string;
-    /**
-     * URL of the kernel this shell talks to. Pair with `authToken()` when an
-     * iframe needs to make a raw `fetch()` from a third-party SDK (e.g.
-     * Vercel AI's `useChat`): the kernel-issued JWT's `aud` matches the
-     * kernel's own issuer, so requests must target the kernel directly. If
-     * a sandboxed iframe POSTs to its own `window.location.origin` (the
-     * worker hosting the iframe), the worker's audience check rejects the
-     * cred with "Credential audience mismatch".
-     */
-    readonly url: string;
-}
-//# sourceMappingURL=kernel-client.d.ts.map

package/dist/ports/kernel-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kernel-client.d.ts","sourceRoot":"","sources":["../../src/ports/kernel-client.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrD;;;;;;OAMG;IACH,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;IACjC;;;;;;;;;OASG;IACH,SAAS,IAAI,MAAM,CAAA;IACnB;;;;;;;;OAQG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB"}

package/dist/ports/shell-adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shell-adapter.d.ts","sourceRoot":"","sources":["../../src/ports/shell-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAE3D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,WAAW,CAAA;IACjD,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,MAAM,EAAE,YAAY,GAAG;QAAE,MAAM,EAAE,YAAY,CAAC;QAAC,OAAO,EAAE,MAAM,IAAI,CAAA;KAAE,CAAA;CAC3E"}

package/dist/ports/transport.d.ts

@@ -1,7 +0,0 @@
-import type { ShellMessage } from '../domain/message/types';
-export interface Transport {
-    send(message: ShellMessage): void;
-    onMessage(handler: (message: ShellMessage) => void): void;
-    close(): void;
-}
-//# sourceMappingURL=transport.d.ts.map

package/dist/ports/transport.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/ports/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAE3D,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IACjC,SAAS,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI,CAAA;IACzD,KAAK,IAAI,IAAI,CAAA;CACd"}

package/src/application/kernel-facade.ts

@@ -1,143 +0,0 @@
-import type { KernelClientAdapter } from '../adapters/kernel-client.adapter'
-import type { DelegationToken } from '../domain/identity/delegation'
-import type { KernelClient } from '../ports/kernel-client'
-
-import { identityMethod } from '../domain/identity/path'
-import { createSelfResolver, WHOAMI_PATH } from '../domain/identity/resolve-self'
-
-// ─── Base facade (standalone / user credential) ─────────────────────────────
-
-export type KernelFacadeConfig = {
-  adapter: KernelClientAdapter
-  credential?: string
-  getCredential?: () => string
-  /** Kernel URL — exposed to consumers via `KernelClient.url`. */
-  url: string
-  /**
-   * Explicit identity node to use as the mint subject. When omitted, the mint
-   * resolves the AUTHENTICATED caller via `whoami` (so a cookie-fronted GUI mints
-   * as the logged-in user, not the kernel root). Set this only to pin a subject.
-   */
-  mintIdentity?: string
-}
-
-export interface KernelFacadeController extends KernelClient {
-  dispose(): void
-}
-
-export function createKernelFacade(config: KernelFacadeConfig): KernelFacadeController {
-  const getCredential =
-    config.getCredential ??
-    (() => {
-      if (config.credential === undefined) {
-        throw new Error('KernelFacade requires credential or getCredential')
-      }
-      return config.credential
-    })
-  return buildCredentialFacade({
-    adapter: config.adapter,
-    getCredential,
-    url: config.url,
-    mintIdentity: config.mintIdentity,
-  })
-}
-
-// ─── Delegation facade (sandboxed mode) ─────────────────────────────────────
-
-export type DelegationKernelFacadeConfig = {
-  adapter: KernelClientAdapter
-  initialToken: DelegationToken
-  url: string
-  onTokenChange?: (token: DelegationToken) => void
-  mintIdentity?: string
-}
-
-export interface DelegationKernelFacadeController extends KernelFacadeController {
-  token(): DelegationToken
-  setToken(next: DelegationToken): void
-}
-
-export function createDelegationKernelFacade(
-  config: DelegationKernelFacadeConfig,
-): DelegationKernelFacadeController {
-  let token = config.initialToken
-  const base = buildCredentialFacade({
-    adapter: config.adapter,
-    getCredential: () => token.credential,
-    url: config.url,
-    mintIdentity: config.mintIdentity,
-  })
-
-  return {
-    ...base,
-    token() {
-      return token
-    },
-    setToken(next) {
-      if (next.credential === token.credential && next.expiresAt === token.expiresAt) return
-      token = next
-      config.onTokenChange?.(next)
-    },
-    // The delegation facade owns its adapter exclusively (created per child in
-    // `performChildInit`), so disposing it must tear the adapter down — unlike
-    // the standalone facade, where the caller owns the adapter's lifetime.
-    dispose() {
-      config.adapter.disconnect()
-    },
-  }
-}
-
-// ─── Shared facade builder ──────────────────────────────────────────────────
-
-type FacadeParams = {
-  adapter: KernelClientAdapter
-  getCredential: () => string
-  url: string
-  /** Explicit mint subject. When omitted, the authenticated caller is resolved via `whoami`. */
-  mintIdentity?: string
-}
-
-/**
- * v1 note: we mint a fresh identity credential (grant-bearing, directly
- * usable). Proper delegation composition (outer envelope via `Cred(...)`)
- * requires SDK v2 — tracked in `.dev/todo/shell-sdk-v2-delegation.md`.
- */
-function buildCredentialFacade(params: FacadeParams): KernelFacadeController {
-  const { adapter, getCredential, mintIdentity, url } = params
-  const resolveSelf = createSelfResolver()
-
-  return {
-    url,
-
-    call(path, callParams) {
-      return adapter.call(path, callParams, getCredential())
-    },
-
-    async mintDelegation() {
-      const subject =
-        mintIdentity ?? (await resolveSelf(() => adapter.call(WHOAMI_PATH, {}, getCredential())))
-      const result = await adapter.call(
-        identityMethod(subject, 'mintIdentityCredential'),
-        {},
-        getCredential(),
-      )
-      if (typeof result === 'string') return result
-      if (
-        result !== null &&
-        typeof result === 'object' &&
-        typeof (result as { credential?: unknown }).credential === 'string'
-      ) {
-        return (result as { credential: string }).credential
-      }
-      throw new Error('mintIdentityCredential returned an unexpected shape')
-    },
-
-    authToken() {
-      return getCredential()
-    },
-
-    dispose() {
-      // adapter lifetime is owned by the caller
-    },
-  }
-}