@kvman/kernel 0.1.0

package/dist/extensions/manifests.js

@@ -0,0 +1,50 @@
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+import { extensionManifestSchema } from '@kvman/sdk';
+import { kernelProblem } from "../problems.js";
+function folderOf(name, source, folders) {
+    if (source === 'bundled') {
+        const folder = folders.bundled.get(name);
+        if (folder === undefined)
+            throw kernelProblem('EXTENSION_INVALID', `${name} is not a bundled extension.`, { extension: name });
+        return folder;
+    }
+    if (source.startsWith('npm:'))
+        return path.join(folders.home, 'extensions', `${name}@${source.slice('npm:'.length)}`, 'node_modules', name);
+    return path.resolve(folders.presetFolder, source.slice('path:'.length));
+}
+function readManifest(name, folder) {
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path.join(folder, 'package.json'), 'utf8'));
+    }
+    catch (error) {
+        const reason = error instanceof Error ? error.message : String(error);
+        throw kernelProblem('EXTENSION_INVALID', `${name}: its package.json can't be read (${reason}).`, { extension: name });
+    }
+    const result = extensionManifestSchema.safeParse(parsed);
+    if (!result.success) {
+        const issues = result.error.issues.map((issue) => `${issue.path.join('.') || 'package.json'}: ${issue.message}`).join('; ');
+        throw kernelProblem('EXTENSION_INVALID', `${name}: its manifest is invalid (${issues}).`, { extension: name });
+    }
+    if (result.data.name !== name) {
+        throw kernelProblem('EXTENSION_INVALID', `${name}: its package.json is named ${result.data.name}.`, { extension: name });
+    }
+    return result.data;
+}
+// A `path:` extension loads its TypeScript `kvman.source` when it names one; otherwise, and always for bundled and
+// npm extensions, it loads `main`.
+function entryOf(source, folder, manifest) {
+    const sourceEntry = manifest.kvman.source;
+    const entry = source.startsWith('path:') && sourceEntry !== undefined ? sourceEntry : manifest.main;
+    return path.resolve(folder, entry);
+}
+export function readExtension(name, source, folders) {
+    const folder = folderOf(name, source, folders);
+    const manifest = readManifest(name, folder);
+    return { name, source, folder, manifest, entryPath: entryOf(source, folder, manifest) };
+}
+export function readExtensions(preset, folders) {
+    return Object.entries(preset.extensions).map(([name, source]) => readExtension(name, source, folders));
+}
+//# sourceMappingURL=manifests.js.map

package/dist/extensions/manifests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifests.js","sourceRoot":"","sources":["../../src/extensions/manifests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAA6D,MAAM,YAAY,CAAC;AAChH,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAkB/C,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAuB,EAAE,OAAyB;IAChF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,aAAa,CAAC,mBAAmB,EAAE,GAAG,IAAI,8BAA8B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/H,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5I,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,MAAc;IAChD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,aAAa,CAAC,mBAAmB,EAAE,GAAG,IAAI,qCAAqC,MAAM,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5H,MAAM,aAAa,CAAC,mBAAmB,EAAE,GAAG,IAAI,8BAA8B,MAAM,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9B,MAAM,aAAa,CAAC,mBAAmB,EAAE,GAAG,IAAI,+BAA+B,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,mHAAmH;AACnH,mCAAmC;AACnC,SAAS,OAAO,CAAC,MAAuB,EAAE,MAAc,EAAE,QAA2B;IACnF,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IACpG,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAuB,EAAE,OAAyB;IAC5F,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,OAAyB;IACtE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACzG,CAAC"}

package/dist/extensions/npm-install.d.ts

@@ -0,0 +1,9 @@
+import type { Preset } from '@kvman/sdk';
+import type { KernelLogger } from '../logging/logger.ts';
+export type NpmCommand = {
+    command: string;
+    args: string[];
+};
+export declare function npmInstallCommand(platform: NodeJS.Platform, spec: string): NpmCommand;
+export declare function installMissing(preset: Preset, home: string, logger: KernelLogger, platform: NodeJS.Platform): void;
+//# sourceMappingURL=npm-install.d.ts.map

package/dist/extensions/npm-install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-install.d.ts","sourceRoot":"","sources":["../../src/extensions/npm-install.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAOzD,MAAM,MAAM,UAAU,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAG7D,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CAIrF;AAsBD,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,IAAI,CAOlH"}

package/dist/extensions/npm-install.js

@@ -0,0 +1,39 @@
+import { existsSync, mkdirSync, rmSync } from 'node:fs';
+import { spawnSync } from 'node:child_process';
+import path from 'node:path';
+import { kernelProblem } from "../problems.js";
+// Windows runs npm through `cmd.exe`, since `npm` is a `.cmd` script there, which Node won't spawn directly.
+export function npmInstallCommand(platform, spec) {
+    const args = ['install', '--ignore-scripts', '--omit=dev', '--legacy-peer-deps', '--prefix', '.', spec];
+    if (platform === 'win32')
+        return { command: 'cmd.exe', args: ['/d', '/s', '/c', 'npm', ...args] };
+    return { command: 'npm', args };
+}
+function npmExtensions(preset) {
+    return Object.entries(preset.extensions).flatMap(([name, source]) => (source.startsWith('npm:') ? [{ name, version: source.slice('npm:'.length) }] : []));
+}
+function lastLine(text) {
+    return text.trim().split('\n').at(-1)?.trim() ?? '';
+}
+function install(folder, name, version, platform) {
+    rmSync(folder, { recursive: true, force: true });
+    mkdirSync(folder, { recursive: true });
+    const { command, args } = npmInstallCommand(platform, `${name}@${version}`);
+    const result = spawnSync(command, args, { cwd: folder, encoding: 'utf8', windowsHide: true });
+    if (result.error === undefined && result.status === 0)
+        return;
+    rmSync(folder, { recursive: true, force: true });
+    const reason = result.error?.message ?? (lastLine(result.stderr) || `npm exited with code ${String(result.status)}`);
+    throw kernelProblem('EXTENSION_INVALID', `${name}@${version} couldn't be installed with npm (${reason}).`, { extension: name, version });
+}
+// Installs each `npm:` version that isn't installed yet; an installed one is left as it is.
+export function installMissing(preset, home, logger, platform) {
+    for (const { name, version } of npmExtensions(preset)) {
+        const folder = path.join(home, 'extensions', `${name}@${version}`);
+        if (existsSync(path.join(folder, 'node_modules', name, 'package.json')))
+            continue;
+        logger.info('Installing an npm extension.', { extension: name, version });
+        install(folder, name, version, platform);
+    }
+}
+//# sourceMappingURL=npm-install.js.map

package/dist/extensions/npm-install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-install.js","sourceRoot":"","sources":["../../src/extensions/npm-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAQ/C,6GAA6G;AAC7G,MAAM,UAAU,iBAAiB,CAAC,QAAyB,EAAE,IAAY;IACvE,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxG,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IAClG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5J,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,QAAyB;IACvF,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9D,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,wBAAwB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrH,MAAM,aAAa,CAAC,mBAAmB,EAAE,GAAG,IAAI,IAAI,OAAO,oCAAoC,MAAM,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC3I,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,IAAY,EAAE,MAAoB,EAAE,QAAyB;IAC1G,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;QACnE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;YAAE,SAAS;QAClF,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/extensions/trust.d.ts

@@ -0,0 +1,11 @@
+import type { Clock } from '../clock.ts';
+import type { Connection } from '../storage/database.ts';
+import type { ReadExtension } from './manifests.ts';
+export type ExtensionVersion = {
+    name: string;
+    version: string;
+    source: string;
+};
+export type TrustDecision = (versions: readonly ExtensionVersion[]) => Promise<boolean>;
+export declare function checkTrust(connection: Connection, clock: Clock, extensions: readonly ReadExtension[], decide: TrustDecision): Promise<void>;
+//# sourceMappingURL=trust.d.ts.map

package/dist/extensions/trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.ts","sourceRoot":"","sources":["../../src/extensions/trust.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAKpD,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAGjF,MAAM,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAaxF,wBAAsB,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,aAAa,EAAE,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAYjJ"}

package/dist/extensions/trust.js

@@ -0,0 +1,27 @@
+import { kernelProblem } from "../problems.js";
+function versionOf(extension) {
+    if (extension.source === 'bundled')
+        return undefined;
+    const source = extension.source.startsWith('path:') ? `path:${extension.folder}` : extension.source;
+    return { name: extension.name, version: extension.manifest.version, source };
+}
+function isAccepted(connection, version) {
+    const row = connection.prepare('SELECT name FROM accepted_extensions WHERE name = ? AND version = ? AND source = ?');
+    return row.get(version.name, version.version, version.source) !== undefined;
+}
+export async function checkTrust(connection, clock, extensions, decide) {
+    const unaccepted = extensions.flatMap((extension) => versionOf(extension) ?? []).filter((version) => !isAccepted(connection, version));
+    if (unaccepted.length === 0)
+        return;
+    if (!(await decide(unaccepted))) {
+        const listed = unaccepted.map((version) => `${version.name}@${version.version} (${version.source})`);
+        throw kernelProblem('EXTENSION_INVALID', `These extension versions weren't accepted: ${listed.join(', ')}.`, { versions: listed });
+    }
+    const acceptedAt = new Date(clock.now()).toISOString();
+    const insert = connection.prepare('INSERT INTO accepted_extensions (name, version, source, accepted_at) VALUES (?, ?, ?, ?) ON CONFLICT DO NOTHING');
+    connection.transaction(() => {
+        for (const version of unaccepted)
+            insert.run(version.name, version.version, version.source, acceptedAt);
+    })();
+}
+//# sourceMappingURL=trust.js.map

package/dist/extensions/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../../src/extensions/trust.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAY/C,SAAS,SAAS,CAAC,SAAwB;IACzC,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;IACpG,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,UAAU,CAAC,UAAsB,EAAE,OAAyB;IACnE,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAA6C,oFAAoF,CAAC,CAAC;IACjK,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,UAAsB,EAAE,KAAY,EAAE,UAAoC,EAAE,MAAqB;IAChI,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IACvI,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACrG,MAAM,aAAa,CAAC,mBAAmB,EAAE,8CAA8C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACrI,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,iHAAiH,CAAC,CAAC;IACrJ,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE;QAC1B,KAAK,MAAM,OAAO,IAAI,UAAU;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1G,CAAC,CAAC,EAAE,CAAC;AACP,CAAC"}

package/dist/files/file-access.d.ts

@@ -0,0 +1,6 @@
+import type { Caller, File } from '@kvman/sdk';
+import type { Files } from './files.ts';
+export declare function fileInWorkspace(files: Files, id: string, workspaceId: string): File;
+export declare function mayUnlink(owner: File['owner'], caller: Caller): boolean;
+export declare function unlinkAs(files: Files, id: string, workspaceId: string, caller: Caller): void;
+//# sourceMappingURL=file-access.d.ts.map

package/dist/files/file-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-access.d.ts","sourceRoot":"","sources":["../../src/files/file-access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAKxC,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAInF;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAGvE;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAI5F"}

package/dist/files/file-access.js

@@ -0,0 +1,21 @@
+import { kernelProblem } from "../problems.js";
+// Who may reach a file (plan 02 §2.7, ADR 0009, 24): any caller reads a file of its job's workspace; only the owner
+// unlinks it, except a user upload, which the user or any extension may unlink.
+export function fileInWorkspace(files, id, workspaceId) {
+    const file = files.get(id);
+    if (file.workspaceId !== workspaceId)
+        throw kernelProblem('NOT_FOUND', `There is no file ${id} in this workspace.`, { id });
+    return file;
+}
+export function mayUnlink(owner, caller) {
+    if (owner.kind === 'user')
+        return caller.kind === 'user' || caller.kind === 'extension';
+    return caller.kind === 'extension' && caller.name === owner.name;
+}
+export function unlinkAs(files, id, workspaceId, caller) {
+    const file = fileInWorkspace(files, id, workspaceId);
+    if (!mayUnlink(file.owner, caller))
+        throw kernelProblem('NOT_PUBLIC', `The file ${id} belongs to ${file.owner.kind === 'extension' ? file.owner.name : 'the user'}.`, { id });
+    files.unlink(id);
+}
+//# sourceMappingURL=file-access.js.map

package/dist/files/file-access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-access.js","sourceRoot":"","sources":["../../src/files/file-access.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAG/C,oHAAoH;AACpH,gFAAgF;AAEhF,MAAM,UAAU,eAAe,CAAC,KAAY,EAAE,EAAU,EAAE,WAAmB;IAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,IAAI,CAAC,WAAW,KAAK,WAAW;QAAE,MAAM,aAAa,CAAC,WAAW,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5H,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAoB,EAAE,MAAc;IAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC;IACxF,OAAO,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAY,EAAE,EAAU,EAAE,WAAmB,EAAE,MAAc;IACpF,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC;QAAE,MAAM,aAAa,CAAC,YAAY,EAAE,YAAY,EAAE,eAAe,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9K,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACnB,CAAC"}

package/dist/files/files.d.ts

@@ -0,0 +1,31 @@
+import { type File } from '@kvman/sdk';
+import { type Clock } from '../clock.ts';
+import type { IdGenerator } from '../ids.ts';
+import type { Connection } from '../storage/database.ts';
+export type FileOwner = File['owner'];
+export type NewFile = {
+    name: string;
+    data: Uint8Array | string;
+    type: string;
+    owner: FileOwner;
+    workspaceId: string;
+};
+export type AdoptedFile = Omit<NewFile, 'data'>;
+export type Files = {
+    write(file: NewFile): File;
+    get(id: string): File;
+    list(workspaceId: string, limit: number): File[];
+    read(id: string): Buffer;
+    path(id: string): string;
+    unlink(id: string): void;
+    temporaryPath(): string;
+    adopt(file: AdoptedFile, from: string): File;
+};
+export type FilesOptions = {
+    connection: Connection;
+    home: string;
+    ids: IdGenerator;
+    clock: Clock;
+};
+export declare function createFiles({ connection, home, ids, clock }: FilesOptions): Files;
+//# sourceMappingURL=files.d.ts.map

package/dist/files/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/files/files.ts"],"names":[],"mappings":"AAGA,OAAO,EAAc,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAW,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAKzD,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;AAEtC,MAAM,MAAM,OAAO,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvH,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAEhD,MAAM,MAAM,KAAK,GAAG;IAClB,KAAK,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAEzB,aAAa,IAAI,MAAM,CAAC;IAExB,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9C,CAAC;AAIF,MAAM,MAAM,YAAY,GAAG;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AAMpG,wBAAgB,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,YAAY,GAAG,KAAK,CAyDjF"}

package/dist/files/files.js

@@ -0,0 +1,73 @@
+import { randomUUID } from 'node:crypto';
+import { mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import path from 'node:path';
+import { fileSchema } from '@kvman/sdk';
+import { isoTime } from "../clock.js";
+import { fileLimitBytes } from "../limits.js";
+import { kernelProblem } from "../problems.js";
+import { validationFailed } from "../store/json-values.js";
+function sizeOf(data) {
+    return typeof data === 'string' ? Buffer.byteLength(data) : data.byteLength;
+}
+export function createFiles({ connection, home, ids, clock }) {
+    const folder = path.join(home, 'files');
+    const contentPath = (id) => path.join(folder, id);
+    const fileOfRow = (row) => {
+        const owner = JSON.parse(row.owner);
+        return fileSchema.parse({ id: row.id, name: row.name, type: row.type, size: row.size, owner, workspaceId: row.workspace_id, createdAt: row.created_at });
+    };
+    const get = (id) => {
+        const row = connection.prepare('SELECT * FROM files WHERE id = ?').get(id);
+        if (row === undefined)
+            throw kernelProblem('NOT_FOUND', `There is no file ${id}.`, { id });
+        return fileOfRow(row);
+    };
+    const rowOf = ({ name, type, owner, workspaceId }, size) => {
+        if (size > fileLimitBytes)
+            throw kernelProblem('TOO_LARGE', `A file is over the limit of ${fileLimitBytes} bytes.`, { limit: fileLimitBytes });
+        const parsed = fileSchema.safeParse({ id: ids(), name, type, size, owner, workspaceId, createdAt: isoTime(clock) });
+        if (!parsed.success)
+            throw validationFailed('The file', parsed.error);
+        return parsed.data;
+    };
+    // The content is in place at `files/<id>`; the row makes it a file, or the content goes.
+    const insert = (file) => {
+        try {
+            connection
+                .prepare('INSERT INTO files (id, name, type, size, owner, workspace_id, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)')
+                .run(file.id, file.name, file.type, file.size, JSON.stringify(file.owner), file.workspaceId, file.createdAt);
+        }
+        catch (error) {
+            rmSync(contentPath(file.id), { force: true });
+            throw error;
+        }
+        return file;
+    };
+    return {
+        write({ data, ...meta }) {
+            const file = rowOf(meta, sizeOf(data));
+            mkdirSync(folder, { recursive: true });
+            writeFileSync(contentPath(file.id), data, { flag: 'wx' });
+            return insert(file);
+        },
+        temporaryPath() {
+            mkdirSync(folder, { recursive: true });
+            return path.join(folder, `.upload-${randomUUID()}`);
+        },
+        adopt(meta, from) {
+            const file = rowOf(meta, statSync(from).size);
+            renameSync(from, contentPath(file.id));
+            return insert(file);
+        },
+        get,
+        list: (workspaceId, limit) => connection.prepare('SELECT * FROM files WHERE workspace_id = ? ORDER BY id DESC LIMIT ?').all(workspaceId, limit).map(fileOfRow),
+        read: (id) => readFileSync(contentPath(get(id).id)),
+        path: (id) => contentPath(get(id).id),
+        unlink(id) {
+            get(id);
+            connection.prepare('DELETE FROM files WHERE id = ?').run(id);
+            rmSync(contentPath(id), { force: true });
+        },
+    };
+}
+//# sourceMappingURL=files.js.map

package/dist/files/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/files/files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAa,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,OAAO,EAAc,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AA2B3D,SAAS,MAAM,CAAC,IAAyB;IACvC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAgB;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,CAAC,GAAY,EAAQ,EAAE;QACvC,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3J,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,EAAU,EAAQ,EAAE;QAC/B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAoB,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9F,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,aAAa,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3F,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAe,EAAE,IAAY,EAAQ,EAAE;QACpF,IAAI,IAAI,GAAG,cAAc;YAAE,MAAM,aAAa,CAAC,WAAW,EAAE,+BAA+B,cAAc,SAAS,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/I,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpH,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC;IACF,yFAAyF;IACzF,MAAM,MAAM,GAAG,CAAC,IAAU,EAAQ,EAAE;QAClC,IAAI,CAAC;YACH,UAAU;iBACP,OAAO,CAAC,wGAAwG,CAAC;iBACjH,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACjH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE;YACrB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACvC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,aAAa;YACX,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,UAAU,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,CAAC,IAAI,EAAE,IAAI;YACd,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9C,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACvC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,GAAG;QACH,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAC3B,UAAU,CAAC,OAAO,CAA4B,qEAAqE,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7J,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,EAAE;YACP,GAAG,CAAC,EAAE,CAAC,CAAC;YACR,UAAU,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7D,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/http/call-routes.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from 'hono';
+import type { Kernel } from '../kernel.ts';
+export declare function registerCallRoutes(app: Hono, kernel: Kernel): void;
+//# sourceMappingURL=call-routes.d.ts.map

package/dist/http/call-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-routes.d.ts","sourceRoot":"","sources":["../../src/http/call-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AA+D3C,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAGlE"}

package/dist/http/call-routes.js

@@ -0,0 +1,72 @@
+import { ProblemError } from '@kvman/sdk';
+import { kernelProblem } from "../problems.js";
+import { homeWorkspaceId } from "../workspaces/workspaces.js";
+import { answer, failure, problemOf } from "./envelope.js";
+import { parseCallBody, readCapped } from "./request-body.js";
+// `POST /api/commands/:name` and `POST /api/queries/:name` (plan 04 §4.1, ADR 0009, 40): public names only, as the
+// user. A sync call answers with its output and job id, and is cancelled when its client leaves.
+const user = { kind: 'user' };
+// A client that leaves cancels its sync call; a call that has just ended has nothing left to cancel.
+function cancelOnLeave(kernel, request, jobId) {
+    const leave = () => {
+        try {
+            kernel.cancel(jobId);
+        }
+        catch (error) {
+            if (!(error instanceof ProblemError && error.problem.code === 'NOT_FOUND'))
+                throw error;
+        }
+    };
+    request.signal.addEventListener('abort', leave, { once: true });
+    return () => request.signal.removeEventListener('abort', leave);
+}
+async function run(kernel, request, name, call) {
+    const options = { caller: user, workspaceId: call.workspaceId ?? homeWorkspaceId };
+    try {
+        kernel.web.workspace(options.workspaceId);
+    }
+    catch (error) {
+        return failure(problemOf(error));
+    }
+    if (call.async) {
+        try {
+            const jobId = await kernel.execAsync(name, call.input, options);
+            kernel.web.logger.debug('An HTTP call queued a job.', { name, jobId });
+            return answer({ jobId });
+        }
+        catch (error) {
+            return failure(problemOf(error));
+        }
+    }
+    const jobId = kernel.web.newJobId();
+    const stopWatching = cancelOnLeave(kernel, request, jobId);
+    try {
+        const output = kernel.exec(name, call.input, { ...options, jobId });
+        kernel.web.logger.debug('An HTTP call started a job.', { name, jobId });
+        return answer({ output: await output, jobId });
+    }
+    catch (error) {
+        return failure(problemOf(error), { jobId });
+    }
+    finally {
+        stopWatching();
+    }
+}
+async function handle(kernel, request, name, kind) {
+    const target = kernel.web.target(name);
+    if (target === undefined || target.kind !== kind)
+        return failure(kernelProblem('NOT_FOUND', `There is no ${kind} ${name}.`, { name }).problem);
+    if (!target.public)
+        return failure(kernelProblem('NOT_PUBLIC', `${name} is private to its extension.`, { name }).problem);
+    const body = parseCallBody(await readCapped(request, target.maxInputBytes), kind);
+    if (body.kind === 'not-json')
+        return failure(kernelProblem('VALIDATION_FAILED', 'The request body is not JSON.').problem, { status: 400 });
+    if (body.kind === 'invalid')
+        return failure(body.problem);
+    return run(kernel, request, name, body.call);
+}
+export function registerCallRoutes(app, kernel) {
+    app.post('/api/commands/:name', (c) => handle(kernel, c.req.raw, c.req.param('name'), 'command'));
+    app.post('/api/queries/:name', (c) => handle(kernel, c.req.raw, c.req.param('name'), 'query'));
+}
+//# sourceMappingURL=call-routes.js.map

package/dist/http/call-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-routes.js","sourceRoot":"","sources":["../../src/http/call-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAiB,MAAM,mBAAmB,CAAC;AAE7E,mHAAmH;AACnH,iGAAiG;AAEjG,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAW,CAAC;AAEvC,qGAAqG;AACrG,SAAS,aAAa,CAAC,MAAc,EAAE,OAAgB,EAAE,KAAa;IACpE,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,MAAc,EAAE,OAAgB,EAAE,IAAY,EAAE,IAAc;IAC/E,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,eAAe,EAAE,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,OAAO,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,YAAY,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,OAAgB,EAAE,IAAY,EAAE,IAAyB;IAC7F,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE,eAAe,IAAI,IAAI,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/I,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,GAAG,IAAI,+BAA+B,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1H,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,OAAO,CAAC,aAAa,CAAC,mBAAmB,EAAE,+BAA+B,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3I,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,MAAc;IAC1D,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAClG,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AACjG,CAAC"}

package/dist/http/envelope.d.ts

@@ -0,0 +1,8 @@
+import { type Problem } from '@kvman/sdk';
+export declare function answer(data: Record<string, unknown>): Response;
+export declare function failure(problem: Problem, options?: {
+    jobId?: string;
+    status?: number;
+}): Response;
+export declare function problemOf(error: unknown): Problem;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/http/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/http/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AAKxD,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,QAAQ,CAE9D;AAED,wBAAgB,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,QAAQ,CAGrG;AAGD,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGjD"}

package/dist/http/envelope.js

@@ -0,0 +1,17 @@
+import { ProblemError } from '@kvman/sdk';
+// Every JSON answer under /api is `{ ok: true, …data }` or `{ ok: false, problem, jobId? }`, with status 200 (plan 04
+// §4.1); a body that isn't JSON gets 400.
+export function answer(data) {
+    return Response.json({ ok: true, ...data });
+}
+export function failure(problem, options = {}) {
+    const body = options.jobId === undefined ? { ok: false, problem } : { ok: false, problem, jobId: options.jobId };
+    return Response.json(body, { status: options.status ?? 200 });
+}
+// The Problem a call failed with; anything else is a kernel fault and goes on up.
+export function problemOf(error) {
+    if (error instanceof ProblemError)
+        return error.problem;
+    throw error;
+}
+//# sourceMappingURL=envelope.js.map

package/dist/http/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/http/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAgB,MAAM,YAAY,CAAC;AAExD,sHAAsH;AACtH,0CAA0C;AAE1C,MAAM,UAAU,MAAM,CAAC,IAA6B;IAClD,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAgB,EAAE,UAA+C,EAAE;IACzF,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IACjH,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,KAAK,YAAY,YAAY;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACxD,MAAM,KAAK,CAAC;AACd,CAAC"}

package/dist/http/file-routes.d.ts

@@ -0,0 +1,5 @@
+import type { Hono } from 'hono';
+import type { Kernel } from '../kernel.ts';
+export declare function attachment(name: string): string;
+export declare function registerFileRoutes(app: Hono, kernel: Kernel): void;
+//# sourceMappingURL=file-routes.d.ts.map

package/dist/http/file-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-routes.d.ts","sourceRoot":"","sources":["../../src/http/file-routes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAmB3C,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAqBlE"}

package/dist/http/file-routes.js

@@ -0,0 +1,47 @@
+import { createReadStream } from 'node:fs';
+import { rm } from 'node:fs/promises';
+import { Readable } from 'node:stream';
+import { z } from '@kvman/sdk';
+import { fileLimitBytes } from "../limits.js";
+import { validationFailed } from "../store/json-values.js";
+import { answer } from "./envelope.js";
+import { writeCapped } from "./request-body.js";
+// Uploads and downloads (plan 04 §4.1, ADR 0009, 37–39): both name their workspace; an upload is the raw body; a
+// download is always an attachment, so a browser never renders a file on kvman's origin.
+const uploadSchema = z.object({ name: z.string().min(1), workspaceId: z.string().min(1) });
+const downloadSchema = z.object({ workspaceId: z.string().min(1) });
+function parsedQuery(schema, query) {
+    const parsed = schema.safeParse(query);
+    if (!parsed.success)
+        throw validationFailed('The query', parsed.error);
+    return parsed.data;
+}
+// `attachment` with the name as UTF-8, and an ASCII stand-in for clients that don't read `filename*`.
+export function attachment(name) {
+    const ascii = name.replace(/[^\x20-\x7e]|["\\]/g, '_');
+    return `attachment; filename="${ascii}"; filename*=UTF-8''${encodeURIComponent(name)}`;
+}
+export function registerFileRoutes(app, kernel) {
+    app.post('/api/files', async (c) => {
+        const { name, workspaceId } = parsedQuery(uploadSchema, c.req.query());
+        kernel.web.workspace(workspaceId);
+        const type = c.req.header('content-type') ?? 'application/octet-stream';
+        const upload = kernel.web.uploadPath();
+        await writeCapped(c.req.raw, fileLimitBytes, upload);
+        try {
+            return answer({ file: kernel.web.adopt({ name, type, owner: { kind: 'user' }, workspaceId }, upload) });
+        }
+        catch (error) {
+            await rm(upload, { force: true });
+            throw error;
+        }
+    });
+    app.get('/api/files/:id', (c) => {
+        const { workspaceId } = parsedQuery(downloadSchema, c.req.query());
+        const file = kernel.web.file(c.req.param('id'), workspaceId);
+        const headers = { 'Content-Type': file.type, 'Content-Length': String(file.size), 'Content-Disposition': attachment(file.name), 'X-Content-Type-Options': 'nosniff' };
+        return new Response(Readable.toWeb(createReadStream(kernel.web.filePath(file.id))), { headers });
+    });
+    app.get('/api/locales/:lang', (c) => answer({ catalog: kernel.catalog(c.req.param('lang')) }));
+}
+//# sourceMappingURL=file-routes.js.map

package/dist/http/file-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-routes.js","sourceRoot":"","sources":["../../src/http/file-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,iHAAiH;AACjH,yFAAyF;AAEzF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3F,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEpE,SAAS,WAAW,CAA0B,MAAa,EAAE,KAA6B;IACxF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,gBAAgB,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,yBAAyB,KAAK,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,MAAc;IAC1D,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,0BAA0B,CAAC;QACxE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE;QAC9B,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,qBAAqB,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC;QACtK,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjG,CAAC"}

package/dist/http/http-app.d.ts

@@ -0,0 +1,11 @@
+import { Hono } from 'hono';
+import type { Kernel } from '../kernel.ts';
+import type { KernelLogger } from '../logging/logger.ts';
+export type HttpAppOptions = {
+    kernel: Kernel;
+    port: () => number;
+    stopping: AbortSignal;
+    logger: KernelLogger;
+};
+export declare function createHttpApp({ kernel, port, stopping, logger }: HttpAppOptions): Hono;
+//# sourceMappingURL=http-app.d.ts.map

package/dist/http/http-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-app.d.ts","sourceRoot":"","sources":["../../src/http/http-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAYzD,MAAM,MAAM,cAAc,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,MAAM,CAAC;IAAC,QAAQ,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC;AAEjH,wBAAgB,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,cAAc,GAAG,IAAI,CAmBtF"}

package/dist/http/http-app.js

@@ -0,0 +1,31 @@
+import { Hono } from 'hono';
+import { ProblemError } from '@kvman/sdk';
+import { kernelProblem } from "../problems.js";
+import { registerCallRoutes } from "./call-routes.js";
+import { failure } from "./envelope.js";
+import { registerFileRoutes } from "./file-routes.js";
+import { registerJobRoutes } from "./job-routes.js";
+import { isOwnOrigin } from "./own-origin.js";
+import { registerWebRoutes } from "./web-routes.js";
+export function createHttpApp({ kernel, port, stopping, logger }) {
+    const app = new Hono();
+    app.use('*', async (c, next) => {
+        if (!isOwnOrigin(c.req.header('host'), c.req.header('origin'), port())) {
+            return failure(kernelProblem('FORBIDDEN_ORIGIN', "The request's Host or Origin isn't kvman's own.").problem);
+        }
+        await next();
+        return undefined;
+    });
+    registerCallRoutes(app, kernel);
+    registerJobRoutes(app, kernel, stopping);
+    registerFileRoutes(app, kernel);
+    registerWebRoutes(app, kernel);
+    app.onError((error) => {
+        if (error instanceof ProblemError)
+            return failure(error.problem);
+        logger.error('An HTTP request failed.', { error: error.message, stack: error.stack ?? '' });
+        return failure({ code: 'HANDLER_FAILED', message: 'The request failed.' });
+    });
+    return app;
+}
+//# sourceMappingURL=http-app.js.map

package/dist/http/http-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-app.js","sourceRoot":"","sources":["../../src/http/http-app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAOpD,MAAM,UAAU,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAkB;IAC9E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,OAAO,OAAO,CAAC,aAAa,CAAC,kBAAkB,EAAE,iDAAiD,CAAC,CAAC,OAAO,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,IAAI,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChC,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzC,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAChC,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACpB,IAAI,KAAK,YAAY,YAAY;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5F,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/http/http-server.d.ts

@@ -0,0 +1,9 @@
+import type { Kernel } from '../kernel.ts';
+export type HttpServer = {
+    port: number;
+    close(): Promise<void>;
+};
+export declare function startHttp(kernel: Kernel, options: {
+    port: number;
+}): Promise<HttpServer>;
+//# sourceMappingURL=http-server.d.ts.map

package/dist/http/http-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../src/http/http-server.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAQ3C,MAAM,MAAM,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC;AAqBlE,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAiB9F"}