@astrale-os/kernel-core 0.9.0-beta.59 → 0.9.0-beta.60

package/dist/auth/authority/admission/admission.d.ts

@@ -5,6 +5,7 @@ export declare const limits: {
     readonly operandsPerExpression: 512;
     readonly localsPerExpression: 64;
     readonly classesPerLocal: 1024;
+    readonly classesPerRelation: 1024;
     readonly repeatMaximum: 16;
 };
 export declare const MAX_BOOLEAN_OPERANDS: 512;

package/dist/auth/authority/admission/admission.js

@@ -8,6 +8,7 @@ export const limits = Object.freeze({
     operandsPerExpression: 512,
     localsPerExpression: 64,
     classesPerLocal: 1024,
+    classesPerRelation: 1024,
     repeatMaximum: 16,
 });
 export const MAX_BOOLEAN_OPERANDS = limits.operandsPerExpression;
@@ -61,12 +62,12 @@ function admit(input, path, locals, subjectBound, depth) {
         case 'related': {
             const hasRepeat = Object.hasOwn(value, 'repeat');
             exact(value, hasRepeat
-                ? ['class', 'op', 'repeat', 'source', 'target']
-                : ['class', 'op', 'source', 'target'], path);
+                ? ['classes', 'op', 'repeat', 'source', 'target']
+                : ['classes', 'op', 'source', 'target'], path);
             return {
                 op: 'related',
                 source: term(value.source, `${path}/source`, locals, subjectBound),
-                class: edgeClassRef(value.class, `${path}/class`),
+                classes: array(value.classes, `${path}/classes`, 1, limits.classesPerRelation).map((entry, index) => edgeClassRef(entry, `${path}/classes/${index}`)),
                 target: term(value.target, `${path}/target`, locals, subjectBound),
                 ...(hasRepeat ? { repeat: repeat(value.repeat, `${path}/repeat`) } : {}),
             };

package/dist/auth/authority/language/predicate.d.ts

@@ -1,7 +1,7 @@
 import type { ClassRef, CoreRef, FunctionRef, PolicyRef, ViewRef, Key } from '@astrale-os/kernel-dsl/v1/addressing';
 import type { NodeId } from '../../../graph/node/index.js';
 import type { Grant } from '../../grant/index.js';
-export declare const AUTHORITY_PREDICATE_VERSION: 8;
+export declare const AUTHORITY_PREDICATE_VERSION: 9;
 export type Operation = 'create' | 'read' | 'traverse' | 'update' | 'delete';
 export type Input = 'object' | 'source' | 'target';
 export type { ClassRef } from '@astrale-os/kernel-dsl/v1/addressing';
@@ -70,9 +70,10 @@ export type AuthorityExpr = {
     readonly grant: Grant;
     readonly where: AuthorityExpr;
 } | {
+    /** One concrete Class relation extent, reused at every bounded hop. */
     readonly op: 'related';
     readonly source: Term;
-    readonly class: ClassRef;
+    readonly classes: readonly [ClassRef, ...ClassRef[]];
     readonly target: Term;
     readonly repeat?: Repeat;
 } | {

package/dist/auth/authority/language/predicate.js

@@ -1 +1 @@
-export const AUTHORITY_PREDICATE_VERSION = 8;
+export const AUTHORITY_PREDICATE_VERSION = 9;

package/dist/auth/authority/normalization/normalize.js

@@ -60,7 +60,7 @@ function normalize(expr, path, locals, subjectBound) {
             return Object.freeze({
                 op: 'related',
                 source: normalizeTerm(expr.source),
-                class: Object.freeze({ ...expr.class }),
+                classes: normalizeClasses(expr.classes),
                 target: normalizeTerm(expr.target),
                 ...(expr.repeat === undefined ? {} : { repeat: Object.freeze({ ...expr.repeat }) }),
             });
@@ -144,12 +144,11 @@ function normalizeTerm(term) {
 function normalizeLocal(local) {
     if (local.kind === 'any')
         return Object.freeze({ id: local.id, kind: 'any' });
-    const classes = new Map(local.classes.map((ref) => [classKey(ref), Object.freeze({ ...ref })]));
-    return Object.freeze({
-        id: local.id,
-        kind: 'classes',
-        classes: Object.freeze([...classes.entries()].sort(([left], [right]) => compare(left, right)).map(([, ref]) => ref)),
-    });
+    return Object.freeze({ id: local.id, kind: 'classes', classes: normalizeClasses(local.classes) });
+}
+function normalizeClasses(input) {
+    const classes = new Map(input.map((ref) => [classKey(ref), Object.freeze({ ...ref })]));
+    return Object.freeze([...classes.entries()].sort(([left], [right]) => compare(left, right)).map(([, ref]) => ref));
 }
 function classKey(ref) {
     return `${ref.origin}:${ref.kind}.${ref.name}`;

package/dist/schema/kernel/schema.d.ts

@@ -8944,24 +8944,16 @@ export declare const AuthorityRelations: Readonly<{
     };
 }>;
 /** Exact authorized Kernel Functions for which pristine Root receives direct can_use authority. */
-export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-dsl/v1").ResolvedFunction<import("@astrale-os/kernel-dsl/v1").BinaryInputProjection<{
-    mediaType: string;
-}>, {
-    readonly mode: 'value';
-    readonly value: {
-        receipt: string;
-        ref: {
-            digest: string;
-            mediaType: string;
-            size: number;
-        };
-        expiresAt: string;
-    };
+export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
+    node: string;
+    property: string;
+}, {
+    readonly mode: 'binary';
 }, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
-    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"upload"> & {
+    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"download"> & {
         readonly origin: "kernel.astrale.ai";
     };
-    readonly key: "kernel.astrale.ai:function.upload";
+    readonly key: "kernel.astrale.ai:function.download";
     readonly execution: undefined;
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
     operation: string;
@@ -8989,6 +8981,39 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
     };
     readonly key: "kernel.astrale.ai:function.install";
     readonly execution: undefined;
+}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
+    invocation?: {
+        source: string;
+        id: string;
+    } | undefined;
+    topics?: {
+        exact?: string[] | undefined;
+        prefixes?: string[] | undefined;
+    } | undefined;
+    principal?: string | undefined;
+    since?: string | undefined;
+    until?: string | undefined;
+    cursor?: string | undefined;
+    limit?: number | undefined;
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        records: unknown[];
+        frontier: {
+            id: string;
+            first?: number | undefined;
+            committed: number;
+            durable: number;
+        };
+        cursor?: string | undefined;
+        gap?: unknown;
+    };
+}, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
+    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"journal"> & {
+        readonly origin: "kernel.astrale.ai";
+    };
+    readonly key: "kernel.astrale.ai:function.journal";
+    readonly execution: undefined;
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
     ast: {
         format: "astrale.graph.mutation";
@@ -9447,17 +9472,6 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
     };
     readonly key: "kernel.astrale.ai:function.query";
     readonly execution: undefined;
-}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
-    node: string;
-    property: string;
-}, {
-    readonly mode: 'binary';
-}, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
-    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"download"> & {
-        readonly origin: "kernel.astrale.ai";
-    };
-    readonly key: "kernel.astrale.ai:function.download";
-    readonly execution: undefined;
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
     idempotencyKey: string;
     identities: ({
@@ -9531,38 +9545,36 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
     };
     readonly key: "kernel.astrale.ai:function.uninstall";
     readonly execution: undefined;
-}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
-    invocation?: {
-        source: string;
-        id: string;
-    } | undefined;
-    topics?: {
-        exact?: string[] | undefined;
-        prefixes?: string[] | undefined;
-    } | undefined;
-    principal?: string | undefined;
-    since?: string | undefined;
-    until?: string | undefined;
-    cursor?: string | undefined;
-    limit?: number | undefined;
-}, {
+}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<import("@astrale-os/kernel-dsl/v1").BinaryInputProjection<{
+    mediaType: string;
+}>, {
     readonly mode: 'value';
     readonly value: {
-        records: unknown[];
-        frontier: {
-            id: string;
-            first?: number | undefined;
-            committed: number;
-            durable: number;
+        receipt: string;
+        ref: {
+            digest: string;
+            mediaType: string;
+            size: number;
         };
-        cursor?: string | undefined;
-        gap?: unknown;
+        expiresAt: string;
     };
 }, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
-    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"journal"> & {
+    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"upload"> & {
         readonly origin: "kernel.astrale.ai";
     };
-    readonly key: "kernel.astrale.ai:function.journal";
+    readonly key: "kernel.astrale.ai:function.upload";
+    readonly execution: undefined;
+}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
+    audience?: string | undefined;
+    ttlSeconds: number;
+    grant?: unknown;
+    identity: string;
+}, {
+    readonly mode: 'value';
+    readonly value: string;
+}, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.impersonate"> & {
+    readonly name: "impersonate";
+    readonly executable: true;
     readonly execution: undefined;
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
     iss: string;
@@ -9591,18 +9603,6 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
     readonly name: "whois";
     readonly executable: true;
     readonly execution: undefined;
-}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
-    audience?: string | undefined;
-    ttlSeconds: number;
-    grant?: unknown;
-    identity: string;
-}, {
-    readonly mode: 'value';
-    readonly value: string;
-}, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.impersonate"> & {
-    readonly name: "impersonate";
-    readonly executable: true;
-    readonly execution: undefined;
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
     target: string;
 }, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-core",
-  "version": "0.9.0-beta.59",
+  "version": "0.9.0-beta.60",
   "description": "Astrale Kernel Core - Types, Invariants, and Pure Logic",
   "license": "Apache-2.0",
   "repository": {