@astrale-os/kernel-core 0.9.0-beta.22 → 0.9.0-beta.24

package/CHANGELOG.md

@@ -6,6 +6,20 @@
 
 * remove endpoint, route, serving issuer, Publication ETag, and View placement properties from the
   Function and UI schema; graph projection now contains declaration meaning only
+## [0.9.0-beta.24](https://github.com/astrale-os/kernel/compare/kernel-core-v0.9.0-beta.23...kernel-core-v0.9.0-beta.24) (2026-08-29)
+
+
+### Performance Improvements
+
+* **runtime:** optimize Query execution without regressions ([#507](https://github.com/astrale-os/kernel/issues/507)) ([6101c8f](https://github.com/astrale-os/kernel/commit/6101c8f9d5deae99a821b3b373b50ee953510600))
+
+## [0.9.0-beta.23](https://github.com/astrale-os/kernel/compare/kernel-core-v0.9.0-beta.22...kernel-core-v0.9.0-beta.23) (2026-08-29)
+
+
+### Features
+
+* **api:** carry view iframe requirements ([#531](https://github.com/astrale-os/kernel/issues/531)) ([4eedb0b](https://github.com/astrale-os/kernel/commit/4eedb0b3430f5f642942e913cf1c5806e09b7cf1))
+
 ## [0.9.0-beta.22](https://github.com/astrale-os/kernel/compare/kernel-core-v0.9.0-beta.21...kernel-core-v0.9.0-beta.22) (2026-08-29)
 
 

package/dist/graph/query/reference/evaluate.d.ts

@@ -29,6 +29,7 @@ export interface QueryReferenceContext {
     closeClass(classRef: ClassRef): QueryReferenceClassClosure | undefined;
     closeProperty(property: PropertyKeyValue): QueryReferenceProperty | undefined;
     orientation(edge: ClassKey): EdgeOrientation | undefined;
+    admitEdge(edge: Edge, source: Node, target: Node): boolean;
     traverseNode(node: Node): boolean;
     traverseEdge(edge: Edge): boolean;
     readNode(node: Node): boolean;

package/dist/graph/query/reference/evaluate.js

@@ -611,6 +611,15 @@ class Admission {
         const cached = this.#edges.get(key);
         if (cached !== undefined)
             return cached;
+        const source = requireNode(this.context, edge.source, path);
+        const target = requireNode(this.context, edge.target, path);
+        const admitted = call(path, 'Logical Edge fact admission failed', () => this.context.admitEdge(edge, source, target));
+        if (typeof admitted !== 'boolean')
+            invalid(path, 'Logical Edge fact admission must return boolean');
+        if (!admitted) {
+            this.#edges.set(key, false);
+            return false;
+        }
         const explicit = call(path, 'Edge traversal admission failed', () => this.context.traverseEdge(edge));
         if (typeof explicit !== 'boolean')
             invalid(path, 'Edge traversal admission must return boolean');
@@ -648,6 +657,7 @@ function acceptContext(input) {
         'closeClass',
         'closeProperty',
         'orientation',
+        'admitEdge',
         'traverseNode',
         'traverseEdge',
         'readNode',
@@ -671,6 +681,7 @@ function acceptContext(input) {
         closeClass: input.closeClass.bind(input),
         closeProperty: input.closeProperty.bind(input),
         orientation: input.orientation.bind(input),
+        admitEdge: input.admitEdge.bind(input),
         traverseNode: input.traverseNode.bind(input),
         traverseEdge: input.traverseEdge.bind(input),
         readNode: input.readNode.bind(input),

package/dist/schema/callables/view.d.ts

@@ -42,6 +42,10 @@ export declare const View: builder.NodeClass<{
                     };
                     href: string;
                     handshake: "none" | "shell";
+                    iframe?: {
+                        sandbox?: string[] | undefined;
+                        allow?: string[] | undefined;
+                    } | undefined;
                     issuer: string;
                     etag: string;
                     revision: string;
@@ -81,6 +85,10 @@ export declare const View: builder.NodeClass<{
                 };
                 href: string;
                 handshake: "none" | "shell";
+                iframe?: {
+                    sandbox?: string[] | undefined;
+                    allow?: string[] | undefined;
+                } | undefined;
                 issuer: string;
                 etag: string;
                 revision: string;

package/dist/schema/kernel/schema.d.ts

@@ -4269,6 +4269,10 @@ declare const KernelDefinitions: {
                             };
                             href: string;
                             handshake: "none" | "shell";
+                            iframe?: {
+                                sandbox?: string[] | undefined;
+                                allow?: string[] | undefined;
+                            } | undefined;
                             issuer: string;
                             etag: string;
                             revision: string;
@@ -4308,6 +4312,10 @@ declare const KernelDefinitions: {
                         };
                         href: string;
                         handshake: "none" | "shell";
+                        iframe?: {
+                            sandbox?: string[] | undefined;
+                            allow?: string[] | undefined;
+                        } | undefined;
                         issuer: string;
                         etag: string;
                         revision: string;
@@ -6451,15 +6459,6 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
         readonly origin: "kernel.astrale.ai";
     };
     readonly key: "kernel.astrale.ai:function.uninstall";
-}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
-    audience?: string | undefined;
-    ttlSeconds: number;
-    grant?: unknown;
-}, {
-    readonly mode: 'value';
-    readonly value: string;
-}, true, "default", "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.mint"> & {
-    readonly name: "mint";
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
     iss: string;
     sub: string;
@@ -6508,6 +6507,10 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
             };
             href: string;
             handshake: "none" | "shell";
+            iframe?: {
+                sandbox?: string[] | undefined;
+                allow?: string[] | undefined;
+            } | undefined;
             issuer: string;
             etag: string;
             revision: string;
@@ -6515,6 +6518,15 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
     };
 }, true, "sealed", "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.View.method.resolve"> & {
     readonly name: "resolve";
+}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
+    audience?: string | undefined;
+    ttlSeconds: number;
+    grant?: unknown;
+}, {
+    readonly mode: 'value';
+    readonly value: string;
+}, true, "default", "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.mint"> & {
+    readonly name: "mint";
 }))[];
 export { AuthorityOperationOrder, AuthorityOperations, operationOf } from '../authority/index.js';
 export type { AuthorityOperation, AuthorityRelation } from '../authority/index.js';

package/dist/schema/kernel/syscalls/contracts/view-resolve.d.ts

@@ -24,6 +24,10 @@ export declare const viewResolveOutput: z.ZodObject<{
             none: "none";
             shell: "shell";
         }>;
+        iframe: z.ZodOptional<z.ZodObject<{
+            sandbox: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
         issuer: z.ZodString;
         etag: z.ZodString;
         revision: z.ZodString;

package/dist/schema/kernel/syscalls/contracts/view-resolve.js

@@ -13,6 +13,10 @@ const declaration = z.strictObject({
         z.strictObject({ kind: z.literal('definition'), definitions: z.array(definition).min(1) }),
     ]),
 });
+const iframeRequirements = z.strictObject({
+    sandbox: z.array(z.string()).optional(),
+    allow: z.array(z.string()).optional(),
+});
 export const viewResolveInput = z.strictObject({ target: z.string().min(1) });
 export const viewResolveOutput = z.strictObject({
     snapshot: z.string().min(1),
@@ -21,6 +25,7 @@ export const viewResolveOutput = z.strictObject({
         declaration,
         href: z.string().min(1),
         handshake: z.enum(['shell', 'none']),
+        iframe: iframeRequirements.optional(),
         issuer: z.string().min(1),
         etag: z.string().min(1),
         revision: z.string().min(1),

package/dist/schema/kernel/syscalls/declarations/index.d.ts

@@ -922,6 +922,10 @@ export declare const ViewMethods: Readonly<{
                 };
                 href: string;
                 handshake: "none" | "shell";
+                iframe?: {
+                    sandbox?: string[] | undefined;
+                    allow?: string[] | undefined;
+                } | undefined;
                 issuer: string;
                 etag: string;
                 revision: string;

package/dist/schema/kernel/syscalls/declarations/view-resolve.d.ts

@@ -22,6 +22,10 @@ export declare const ViewResolve: builder.Method<builder.CallableProjection<{
             };
             href: string;
             handshake: "none" | "shell";
+            iframe?: {
+                sandbox?: string[] | undefined;
+                allow?: string[] | undefined;
+            } | undefined;
             issuer: string;
             etag: string;
             revision: string;

package/dist/schema/kernel/syscalls/descriptors/results/view-resolution.d.ts

@@ -6,10 +6,15 @@ export interface ResolvedView {
     readonly declaration: ViewDeclaration;
     readonly href: string;
     readonly handshake: 'shell' | 'none';
+    readonly iframe?: IframeRequirements;
     readonly issuer: IssuerId;
     readonly etag: `sha256:${string}`;
     readonly revision: Revision;
 }
+export interface IframeRequirements {
+    readonly sandbox?: readonly string[];
+    readonly allow?: readonly string[];
+}
 type ViewDeclaration = Omit<ViewDefinition, 'ref'>;
 export interface ViewResolution {
     readonly snapshot: `sha256:${string}`;

package/dist/schema/kernel/syscalls/descriptors/results/view-resolution.js

@@ -23,11 +23,13 @@ export function acceptViewResolution(input) {
         if (!issuer.is(view.issuer))
             invalid(`Resolved View ${index} issuer is not canonical.`);
         const declaration = acceptDeclaration(view.declaration, index);
+        const iframe = acceptIframeRequirements(view.iframe, view.handshake, index);
         return Object.freeze({
             key,
             declaration,
             href: view.href,
             handshake: view.handshake,
+            ...(iframe === undefined ? {} : { iframe }),
             issuer: view.issuer,
             etag: digest(view.etag, `Resolved View ${index} ETag`),
             revision: digest(view.revision, `Resolved View ${index} revision`),
@@ -43,6 +45,85 @@ export function acceptViewResolution(input) {
         views: Object.freeze(views),
     });
 }
+const IFRAME_TOKEN = /^[a-z][a-z0-9-]*$/u;
+function acceptIframeRequirements(input, handshake, viewIndex) {
+    if (input === undefined)
+        return undefined;
+    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
+        invalid(`Resolved View ${viewIndex} iframe requirements are invalid.`);
+    }
+    const prototype = Object.getPrototypeOf(input);
+    if (prototype !== Object.prototype && prototype !== null) {
+        invalid(`Resolved View ${viewIndex} iframe requirements are invalid.`);
+    }
+    const value = input;
+    if (Reflect.ownKeys(value).some((key) => key !== 'sandbox' && key !== 'allow')) {
+        invalid(`Resolved View ${viewIndex} iframe requirements contain unknown fields.`);
+    }
+    const sandbox = acceptTokens(dataValue(value, 'sandbox', viewIndex), viewIndex, 'sandbox');
+    const allow = acceptTokens(dataValue(value, 'allow', viewIndex), viewIndex, 'allow');
+    const baselineSandbox = new Set(handshake === 'shell' ? ['allow-same-origin', 'allow-scripts'] : ['allow-scripts']);
+    const baselineAllow = new Set(handshake === 'shell' ? ['clipboard-write'] : []);
+    if (sandbox.some((token) => baselineSandbox.has(token)) ||
+        allow.some((token) => baselineAllow.has(token))) {
+        invalid(`Resolved View ${viewIndex} iframe requirements repeat a fixed handshake baseline.`);
+    }
+    const tokens = new Set(sandbox);
+    if (tokens.has('allow-popups-to-escape-sandbox') && !tokens.has('allow-popups')) {
+        invalid(`Resolved View ${viewIndex} popup escape requires popup authority.`);
+    }
+    if (tokens.has('allow-top-navigation') && tokens.has('allow-top-navigation-by-user-activation')) {
+        invalid(`Resolved View ${viewIndex} iframe navigation requirements are redundant.`);
+    }
+    if (tokens.has('allow-top-navigation-to-custom-protocols') &&
+        (tokens.has('allow-top-navigation') || tokens.has('allow-popups'))) {
+        invalid(`Resolved View ${viewIndex} custom-protocol requirements are redundant.`);
+    }
+    if (sandbox.length === 0 && allow.length === 0) {
+        invalid(`Resolved View ${viewIndex} empty iframe requirements must be omitted.`);
+    }
+    return Object.freeze({ sandbox: Object.freeze(sandbox), allow: Object.freeze(allow) });
+}
+function dataValue(input, key, viewIndex) {
+    const descriptor = Object.getOwnPropertyDescriptor(input, key);
+    if (descriptor === undefined)
+        return undefined;
+    if (!('value' in descriptor)) {
+        invalid(`Resolved View ${viewIndex} iframe requirements are invalid.`);
+    }
+    return descriptor.value;
+}
+function acceptTokens(input, viewIndex, field) {
+    if (input === undefined)
+        return [];
+    if (!Array.isArray(input))
+        invalid(`Resolved View ${viewIndex} iframe ${field} is invalid.`);
+    const descriptors = Object.getOwnPropertyDescriptors(input);
+    const values = [];
+    for (let index = 0; index < input.length; index += 1) {
+        const descriptor = descriptors[String(index)];
+        if (descriptor === undefined ||
+            !('value' in descriptor) ||
+            typeof descriptor.value !== 'string' ||
+            !IFRAME_TOKEN.test(descriptor.value)) {
+            invalid(`Resolved View ${viewIndex} iframe ${field} contains an invalid token.`);
+        }
+        values.push(descriptor.value);
+    }
+    for (const key of Reflect.ownKeys(descriptors)) {
+        if (key === 'length')
+            continue;
+        if (typeof key !== 'string' || !/^(0|[1-9][0-9]*)$/u.test(key) || Number(key) >= input.length) {
+            invalid(`Resolved View ${viewIndex} iframe ${field} is invalid.`);
+        }
+    }
+    for (let index = 1; index < values.length; index += 1) {
+        if (values[index - 1] >= values[index]) {
+            invalid(`Resolved View ${viewIndex} iframe ${field} is not in strict canonical order.`);
+        }
+    }
+    return values;
+}
 function acceptDeclaration(input, viewIndex) {
     if (input.target.kind === 'domain') {
         return Object.freeze({

package/dist/schema/kernel/syscalls/descriptors/view.d.ts

@@ -26,6 +26,10 @@ export declare const resolve: import("./model.js").MethodSyscall<Readonly<{
             };
             href: string;
             handshake: "none" | "shell";
+            iframe?: {
+                sandbox?: string[] | undefined;
+                allow?: string[] | undefined;
+            } | undefined;
             issuer: string;
             etag: string;
             revision: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-core",
-  "version": "0.9.0-beta.22",
+  "version": "0.9.0-beta.24",
   "description": "Astrale Kernel Core - Types, Invariants, and Pure Logic",
   "license": "Apache-2.0",
   "repository": {