@astrale-os/kernel-core 0.9.0-beta.64 → 0.9.0-beta.65

package/dist/schema/kernel/syscalls/contracts/delegate.d.ts

@@ -2,6 +2,9 @@ export declare const delegateInput: import("zod").ZodObject<{
     principal: import("zod").ZodString;
     audience: import("zod").ZodString;
     ttlSeconds: import("zod").ZodNumber;
-    attenuation: import("zod").ZodOptional<import("zod").ZodUnknown>;
+    attenuation: import("zod").ZodOptional<import("zod").ZodObject<{
+        kind: import("zod").ZodLiteral<"identity">;
+        self: import("zod").ZodLiteral<true>;
+    }, import("zod/v4/core").$strict>>;
 }, import("zod/v4/core").$strict>;
 export declare const delegateOutput: import("zod").ZodString;

package/dist/schema/kernel/syscalls/contracts/delegate.js

@@ -1,10 +1,11 @@
-import { number, strictObject, string, unknown as unknownSchema } from 'zod';
+import { number, strictObject, string } from 'zod';
+import { selfAttenuation } from './legacy/delegate.js';
 const text = string().min(1);
 export const delegateInput = strictObject({
     principal: text,
     audience: text,
     ttlSeconds: number().int().min(1),
-    /** Optional; absence means the self expression. */
-    attenuation: unknownSchema().optional(),
+    /** @deprecated Ignored; admitted only as the self expression published Clients send. */
+    attenuation: selfAttenuation.optional(),
 });
 export const delegateOutput = text;

package/dist/schema/kernel/syscalls/contracts/impersonate.d.ts

@@ -1,7 +1,6 @@
 export declare const impersonateInput: import("zod").ZodObject<{
     audience: import("zod").ZodOptional<import("zod").ZodString>;
     ttlSeconds: import("zod").ZodNumber;
-    grant: import("zod").ZodOptional<import("zod").ZodUnknown>;
     identity: import("zod").ZodString;
 }, import("zod/v4/core").$strict>;
 export declare const impersonateOutput: import("zod").ZodString;

package/dist/schema/kernel/syscalls/contracts/legacy/delegate.d.ts

@@ -0,0 +1,5 @@
+/** @deprecated The only `attenuation` value `Identity.delegate` still admits, and ignores. */
+export declare const selfAttenuation: import("zod").ZodObject<{
+    kind: import("zod").ZodLiteral<"identity">;
+    self: import("zod").ZodLiteral<true>;
+}, import("zod/v4/core").$strict>;

package/dist/schema/kernel/syscalls/contracts/legacy/delegate.js

@@ -0,0 +1,25 @@
+/**
+ * `Identity.delegate` keeps admitting the one `attenuation` value published Clients send: the self
+ * expression `{ kind: 'identity', self: true }`. It names the caller the delegation preserves
+ * anyway, so it carries no meaning: the handler ignores it and issues exactly the credential the
+ * same input without the field yields. Every other value, `null` included, stays refused.
+ *
+ * @deprecated Omit `attenuation`; a delegation always preserves the authenticated caller (ADR-3).
+ *
+ * Short-term consumers: `@astrale-os/kernel-client` 0.6.0-beta.77 to beta.85, whose Domain token
+ * exchange always sends it (`client/session/exchange/exchange.ts`, `SELF_ATTENUATION`), so the
+ * Console, the GUI, the Admin upgrade executor and the CLI through 1.0.0-beta.126 (exchange and
+ * `astrale token`). The 1Pact Host runs Kernel 0.12.0-beta.117, which requires the field, so a
+ * Client that serves both Kernels sends it.
+ *
+ * Removal, in a separate breaking release, once every consumer runs a Client that omits the field
+ * and the 0.12.0-beta.117 consumer Host is retired: delete this file and the `attenuation` member
+ * of `../delegate.ts`, then make the self vectors of TEST-REJECTS-AUTHORITY-EXPRESSIONS-IN-ISSUANCE-INPUTS
+ * and of the SYS-6 dispatch test expect refusal again.
+ */
+import { literal, strictObject } from 'zod';
+/** @deprecated The only `attenuation` value `Identity.delegate` still admits, and ignores. */
+export const selfAttenuation = strictObject({
+    kind: literal('identity'),
+    self: literal(true),
+}).meta({ deprecated: true });

package/dist/schema/kernel/syscalls/contracts/mint.d.ts

@@ -1,6 +1,5 @@
 export declare const mintInput: import("zod").ZodObject<{
     audience: import("zod").ZodOptional<import("zod").ZodString>;
     ttlSeconds: import("zod").ZodNumber;
-    grant: import("zod").ZodOptional<import("zod").ZodUnknown>;
 }, import("zod/v4/core").$strict>;
 export declare const mintOutput: import("zod").ZodString;

package/dist/schema/kernel/syscalls/contracts/mint.js

@@ -1,8 +1,7 @@
-import { number, strictObject, string, unknown as unknownSchema } from 'zod';
+import { number, strictObject, string } from 'zod';
 const text = string().min(1);
 export const mintInput = strictObject({
     audience: text.optional(),
     ttlSeconds: number().int().min(1),
-    grant: unknownSchema().optional(),
 });
 export const mintOutput = text;

package/dist/schema/kernel/syscalls/declarations/delegate.d.ts

@@ -3,7 +3,10 @@ export declare const Delegate: builder.Method<builder.CallableProjection<{
     principal: string;
     audience: string;
     ttlSeconds: number;
-    attenuation?: unknown;
+    attenuation?: {
+        kind: "identity";
+        self: true;
+    } | undefined;
 }, {
     readonly mode: 'value';
     readonly value: string;

package/dist/schema/kernel/syscalls/declarations/impersonate.d.ts

@@ -2,7 +2,6 @@ import { type builder } from '@astrale-os/kernel-dsl/v1';
 export declare const Impersonate: builder.Method<builder.CallableProjection<{
     audience?: string | undefined;
     ttlSeconds: number;
-    grant?: unknown;
     identity: string;
 }, {
     readonly mode: 'value';

package/dist/schema/kernel/syscalls/declarations/index.d.ts

@@ -616,7 +616,10 @@ export declare const IdentityMethods: Readonly<{
         principal: string;
         audience: string;
         ttlSeconds: number;
-        attenuation?: unknown;
+        attenuation?: {
+            kind: "identity";
+            self: true;
+        } | undefined;
     }, {
         readonly mode: 'value';
         readonly value: string;
@@ -687,7 +690,6 @@ export declare const IdentityMethods: Readonly<{
     mint: builder.Method<builder.CallableProjection<{
         audience?: string | undefined;
         ttlSeconds: number;
-        grant?: unknown;
     }, {
         readonly mode: 'value';
         readonly value: string;
@@ -695,7 +697,6 @@ export declare const IdentityMethods: Readonly<{
     impersonate: builder.Method<builder.CallableProjection<{
         audience?: string | undefined;
         ttlSeconds: number;
-        grant?: unknown;
         identity: string;
     }, {
         readonly mode: 'value';

package/dist/schema/kernel/syscalls/declarations/mint.d.ts

@@ -2,7 +2,6 @@ import { type builder } from '@astrale-os/kernel-dsl/v1';
 export declare const Mint: builder.Method<builder.CallableProjection<{
     audience?: string | undefined;
     ttlSeconds: number;
-    grant?: unknown;
 }, {
     readonly mode: 'value';
     readonly value: string;

package/dist/schema/kernel/syscalls/descriptors/identity.d.ts

@@ -6,7 +6,10 @@ export declare const delegate: import("./model.js").MethodSyscall<Readonly<{
     principal: string;
     audience: string;
     ttlSeconds: number;
-    attenuation?: unknown;
+    attenuation?: {
+        kind: "identity";
+        self: true;
+    } | undefined;
 }, {
     readonly mode: 'value';
     readonly value: string;
@@ -109,7 +112,6 @@ export declare const impersonate: import("./model.js").MethodSyscall<Readonly<{
 }>, "impersonate", import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
     audience?: string | undefined;
     ttlSeconds: number;
-    grant?: unknown;
     identity: string;
 }, {
     readonly mode: 'value';
@@ -126,7 +128,6 @@ export declare const mint: import("./model.js").MethodSyscall<Readonly<{
 }>, "mint", import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
     audience?: string | undefined;
     ttlSeconds: number;
-    grant?: unknown;
 }, {
     readonly mode: 'value';
     readonly value: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-core",
-  "version": "0.9.0-beta.64",
+  "version": "0.9.0-beta.65",
   "description": "Astrale Kernel Core - Types, Invariants, and Pure Logic",
   "license": "Apache-2.0",
   "repository": {
@@ -160,7 +160,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-dsl": "0.2.0-beta.46",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.47",
     "@noble/hashes": "2.3.0",
     "@types/json-schema": "^7.0.15",
     "dequal": "2.0.3"