@astrale-os/kernel-core 0.9.0-beta.65 → 0.9.0-beta.66

package/dist/schema/kernel/schema.js

@@ -1,6 +1,6 @@
 import { defineSchema, schema } from '@astrale-os/kernel-dsl/v1';
 import { AuthorityOperations, CanCreate, CanDelete, CanGrant, CanRead, CanRevoke, CanTraverse, CanUse, CanUpdate, GovernedBy, Operation, Policy, } from '../authority/index.js';
-import { Execution, Function as FunctionClass, MethodOf, View, ViewFor, } from '../callables/index.js';
+import { Entrypoint, Execution, Function as FunctionClass, MethodOf, View, } from '../callables/index.js';
 import { OperationCore } from '../core/index.js';
 import { Class, Extends, InstanceOf } from '../definitions/index.js';
 import { Domain as DomainClass, OfDomain } from '../domain/index.js';
@@ -35,6 +35,7 @@ const KernelDefinitions = {
         can_use: CanUse,
         constrained_by: ConstrainedBy,
         created_by: CreatedBy,
+        entrypoint: Entrypoint,
         excluded_from: ExcludedFrom,
         extends: Extends,
         extends_with: ExtendsWith,
@@ -42,7 +43,6 @@ const KernelDefinitions = {
         instance_of: InstanceOf,
         method_of: MethodOf,
         of_domain: OfDomain,
-        view_for: ViewFor,
     },
     policies: { canUseSyscall: CanUseSyscall },
     functions: Functions,
@@ -52,6 +52,7 @@ const KernelCore = Object.freeze({
     edges: OperationCore.edges,
 });
 const KernelSchemaInput = {
+    name: 'Kernel',
     ...KernelDefinitions,
     core: KernelCore,
 };

package/dist/schema/kernel/syscalls/contracts/blob.d.ts

@@ -15,7 +15,17 @@ export declare const uploadOutput: import("zod").ZodObject<{
     }, import("zod/v4/core").$strict>;
     expiresAt: import("zod").ZodString;
 }, import("zod/v4/core").$strict>;
-export declare const downloadInput: import("zod").ZodObject<{
+/** Upper bound of one multi-slot download; a client splits larger slot lists. */
+export declare const MAXIMUM_DOWNLOAD_SLOTS = 256;
+/** Media type of a multi-slot download body: one length-prefixed part per slot, in slot order. */
+export declare const DOWNLOAD_PARTS_MEDIA_TYPE = "application/vnd.astrale.download-parts";
+/** One slot, the original contract, or an ordered slot list answered part by part. */
+export declare const downloadInput: import("zod").ZodUnion<readonly [import("zod").ZodObject<{
     node: import("zod").ZodString;
     property: import("zod").ZodString;
-}, import("zod/v4/core").$strict>;
+}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    slots: import("zod").ZodArray<import("zod").ZodObject<{
+        node: import("zod").ZodString;
+        property: import("zod").ZodString;
+    }, import("zod/v4/core").$strict>>;
+}, import("zod/v4/core").$strict>]>;

package/dist/schema/kernel/syscalls/contracts/blob.js

@@ -1,6 +1,6 @@
 import { patterns } from '@astrale-os/kernel-dsl/v1/addressing';
 import { fullMatch } from '@astrale-os/kernel-dsl/v1/value/full-match';
-import { strictObject, string } from 'zod';
+import { array, strictObject, string, union } from 'zod';
 import { artifactRef } from './installation.js';
 export const MAXIMUM_BLOB_BYTES = 104_857_600;
 export const blobSlot = strictObject({
@@ -13,4 +13,12 @@ export const uploadOutput = strictObject({
     ref: artifactRef,
     expiresAt: string().min(1),
 });
-export const downloadInput = blobSlot;
+/** Upper bound of one multi-slot download; a client splits larger slot lists. */
+export const MAXIMUM_DOWNLOAD_SLOTS = 256;
+/** Media type of a multi-slot download body: one length-prefixed part per slot, in slot order. */
+export const DOWNLOAD_PARTS_MEDIA_TYPE = 'application/vnd.astrale.download-parts';
+/** One slot, the original contract, or an ordered slot list answered part by part. */
+export const downloadInput = union([
+    blobSlot,
+    strictObject({ slots: array(blobSlot).min(1).max(MAXIMUM_DOWNLOAD_SLOTS) }),
+]);

package/dist/schema/kernel/syscalls/contracts/delegate.d.ts

@@ -2,9 +2,5 @@ export declare const delegateInput: import("zod").ZodObject<{
     principal: import("zod").ZodString;
     audience: import("zod").ZodString;
     ttlSeconds: import("zod").ZodNumber;
-    attenuation: import("zod").ZodOptional<import("zod").ZodObject<{
-        kind: import("zod").ZodLiteral<"identity">;
-        self: import("zod").ZodLiteral<true>;
-    }, import("zod/v4/core").$strict>>;
 }, import("zod/v4/core").$strict>;
 export declare const delegateOutput: import("zod").ZodString;

package/dist/schema/kernel/syscalls/contracts/delegate.js

@@ -1,11 +1,8 @@
 import { number, strictObject, string } from 'zod';
-import { selfAttenuation } from './legacy/delegate.js';
 const text = string().min(1);
 export const delegateInput = strictObject({
     principal: text,
     audience: text,
     ttlSeconds: number().int().min(1),
-    /** @deprecated Ignored; admitted only as the self expression published Clients send. */
-    attenuation: selfAttenuation.optional(),
 });
 export const delegateOutput = text;

package/dist/schema/kernel/syscalls/contracts/index.d.ts

@@ -1,5 +1,5 @@
 export { admitInput, admitOutput } from './admit.js';
-export { blobSlot, downloadInput, MAXIMUM_BLOB_BYTES, uploadInput, uploadOutput } from './blob.js';
+export { blobSlot, DOWNLOAD_PARTS_MEDIA_TYPE, downloadInput, MAXIMUM_BLOB_BYTES, MAXIMUM_DOWNLOAD_SLOTS, uploadInput, uploadOutput, } from './blob.js';
 export { MAXIMUM_CHECKS, canInput, canOutput } from './can.js';
 export { delegateInput, delegateOutput } from './delegate.js';
 export { executionCancelInput, executionDeleteInput, executionDeleteOutput, executionOutcome, executionResultInput, executionResumeInput, executionSignalInput, executionSignalOutput, executionStatus, executionStatusInput, } from './execution.js';

package/dist/schema/kernel/syscalls/contracts/index.js

@@ -1,5 +1,5 @@
 export { admitInput, admitOutput } from './admit.js';
-export { blobSlot, downloadInput, MAXIMUM_BLOB_BYTES, uploadInput, uploadOutput } from './blob.js';
+export { blobSlot, DOWNLOAD_PARTS_MEDIA_TYPE, downloadInput, MAXIMUM_BLOB_BYTES, MAXIMUM_DOWNLOAD_SLOTS, uploadInput, uploadOutput, } from './blob.js';
 export { MAXIMUM_CHECKS, canInput, canOutput } from './can.js';
 export { delegateInput, delegateOutput } from './delegate.js';
 export { executionCancelInput, executionDeleteInput, executionDeleteOutput, executionOutcome, executionResultInput, executionResumeInput, executionSignalInput, executionSignalOutput, executionStatus, executionStatusInput, } from './execution.js';

package/dist/schema/kernel/syscalls/contracts/install.d.ts

@@ -1,5 +1,4 @@
 import type { OperationId } from '../../../installation/operation-id.js';
-import type { PublicationRequest } from './legacy/install.js';
 export declare const domainRequest: import("zod").ZodUnion<readonly [import("zod").ZodObject<{
     artifact: import("zod").ZodObject<{
         digest: import("zod").ZodString;
@@ -25,14 +24,6 @@ export declare const domainRequest: import("zod").ZodUnion<readonly [import("zod
     }, import("zod/v4/core").$strict>>;
     revision: import("zod").ZodOptional<import("zod").ZodString>;
     currentRevision: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
-}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
-    publication: import("zod").ZodObject<{
-        url: import("zod").ZodString;
-        token: import("zod").ZodOptional<import("zod").ZodString>;
-        etag: import("zod").ZodOptional<import("zod").ZodString>;
-    }, import("zod/v4/core").$strict>;
-    revision: import("zod").ZodOptional<import("zod").ZodString>;
-    currentRevision: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
 }, import("zod/v4/core").$strict>]>;
 export declare const installInput: import("zod").ZodObject<{
     operation: import("zod").ZodString;
@@ -61,14 +52,6 @@ export declare const installInput: import("zod").ZodObject<{
         }, import("zod/v4/core").$strict>>;
         revision: import("zod").ZodOptional<import("zod").ZodString>;
         currentRevision: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
-    }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
-        publication: import("zod").ZodObject<{
-            url: import("zod").ZodString;
-            token: import("zod").ZodOptional<import("zod").ZodString>;
-            etag: import("zod").ZodOptional<import("zod").ZodString>;
-        }, import("zod/v4/core").$strict>;
-        revision: import("zod").ZodOptional<import("zod").ZodString>;
-        currentRevision: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
     }, import("zod/v4/core").$strict>]>>;
 }, import("zod/v4/core").$strict>;
 export declare const installReceipt: import("zod").ZodObject<{
@@ -176,12 +159,12 @@ export interface TransitionReceipt {
     readonly state: 'committed';
     readonly readiness?: ReadinessReceipt;
 }
-/** Installs the document served by the URL, preferring release.json over domain.json. */
+/** Installs the exact DomainRelease served by the URL. */
 export interface ReleaseRequest {
     readonly release: {
         readonly url: string;
         readonly token?: string;
-        /** Requires an exact release digest. Omit to accept any served document, including a legacy Publication. */
+        /** Requires an exact release digest. Omit to accept the served release. */
         readonly digest?: ReleaseDigest;
     };
     /**
@@ -195,7 +178,7 @@ export interface ReleaseRequest {
 export type DomainRequest = {
     readonly artifact: ArtifactRef;
     readonly currentRevision?: string | null;
-} | ReleaseRequest | PublicationRequest;
+} | ReleaseRequest;
 export interface InstallInput {
     readonly operation: OperationId;
     readonly domains: NonEmpty<DomainRequest>;

package/dist/schema/kernel/syscalls/contracts/install.js

@@ -1,6 +1,5 @@
 import { array, strictObject, union } from 'zod';
 import { artifactRef, installationDigest, installationText, issuerConsent, operationIdSchema, transitionReceipt, } from './installation.js';
-import { publicationRequest } from './legacy/install.js';
 export const domainRequest = union([
     strictObject({
         artifact: artifactRef,
@@ -16,7 +15,6 @@ export const domainRequest = union([
         revision: installationText.optional(),
         currentRevision: installationText.nullable().optional(),
     }),
-    publicationRequest,
 ]);
 export const installInput = strictObject({
     operation: operationIdSchema,

package/dist/schema/kernel/syscalls/contracts/installation.d.ts

@@ -7,17 +7,6 @@ export declare const artifactRef: import("zod").ZodObject<{
     mediaType: import("zod").ZodString;
     size: import("zod").ZodNumber;
 }, import("zod/v4/core").$strict>;
-export declare const dependencyReadinessEvidence: import("zod").ZodObject<{
-    origin: import("zod").ZodString;
-    generation: import("zod").ZodString;
-    readiness: import("zod").ZodString;
-    meaning: import("zod").ZodString;
-}, import("zod/v4/core").$strict>;
-export declare const domainGeneration: import("zod").ZodObject<{
-    origin: import("zod").ZodString;
-    revision: import("zod").ZodString;
-    generation: import("zod").ZodString;
-}, import("zod/v4/core").$strict>;
 export declare const issuerConsent: import("zod").ZodObject<{
     issuer: import("zod").ZodObject<{
         from: import("zod").ZodString;
@@ -28,31 +17,6 @@ export declare const issuerConsent: import("zod").ZodObject<{
         revoke: "revoke";
     }>>;
 }, import("zod/v4/core").$strict>;
-export declare const transitionIntent: import("zod").ZodObject<{
-    transition: import("zod").ZodString;
-    operation: import("zod").ZodString;
-    origin: import("zod").ZodString;
-    previous: import("zod").ZodNullable<import("zod").ZodObject<{
-        origin: import("zod").ZodString;
-        revision: import("zod").ZodString;
-        generation: import("zod").ZodString;
-    }, import("zod/v4/core").$strict>>;
-    generation: import("zod").ZodNullable<import("zod").ZodObject<{
-        origin: import("zod").ZodString;
-        revision: import("zod").ZodString;
-        generation: import("zod").ZodString;
-    }, import("zod/v4/core").$strict>>;
-    consent: import("zod").ZodOptional<import("zod").ZodObject<{
-        issuer: import("zod").ZodObject<{
-            from: import("zod").ZodString;
-            to: import("zod").ZodString;
-        }, import("zod/v4/core").$strict>;
-        previous: import("zod").ZodEnum<{
-            drain: "drain";
-            revoke: "revoke";
-        }>;
-    }, import("zod/v4/core").$strict>>;
-}, import("zod/v4/core").$strict>;
 export declare const readinessReceipt: import("zod").ZodObject<{
     generation: import("zod").ZodString;
     transition: import("zod").ZodString;

package/dist/schema/kernel/syscalls/contracts/installation.js

@@ -9,13 +9,13 @@ export const artifactRef = strictObject({
     mediaType: installationText,
     size: number().int().min(0).max(Number.MAX_SAFE_INTEGER),
 });
-export const dependencyReadinessEvidence = strictObject({
+const dependencyReadinessEvidence = strictObject({
     origin: installationText,
     generation: installationDigest,
     readiness: installationDigest,
     meaning: installationDigest,
 });
-export const domainGeneration = strictObject({
+const domainGeneration = strictObject({
     origin: installationText,
     revision: installationText,
     generation: installationDigest,
@@ -25,7 +25,7 @@ export const issuerConsent = strictObject({
     issuer: consentIssuers,
     previous: enumeration(['drain', 'revoke']).optional(),
 });
-export const transitionIntent = strictObject({
+const transitionIntent = strictObject({
     transition: installationText,
     operation: operationIdSchema,
     origin: installationText,

package/dist/schema/kernel/syscalls/contracts/view-resolve.d.ts

@@ -7,26 +7,15 @@ export declare const viewResolveOutput: import("zod").ZodObject<{
         key: import("zod").ZodString;
         declaration: import("zod").ZodObject<{
             description: import("zod").ZodOptional<import("zod").ZodString>;
-            target: import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
+            target: import("zod").ZodObject<{
                 kind: import("zod").ZodLiteral<"domain">;
-            }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
-                kind: import("zod").ZodLiteral<"definition">;
-                definitions: import("zod").ZodArray<import("zod").ZodObject<{
-                    origin: import("zod").ZodString;
-                    kind: import("zod").ZodLiteral<"class">;
-                    name: import("zod").ZodString;
-                }, import("zod/v4/core").$strict>>;
-            }, import("zod/v4/core").$strict>], "kind">;
+            }, import("zod/v4/core").$strict>;
         }, import("zod/v4/core").$strict>;
         href: import("zod").ZodString;
         handshake: import("zod").ZodEnum<{
             none: "none";
             shell: "shell";
         }>;
-        iframe: import("zod").ZodOptional<import("zod").ZodObject<{
-            sandbox: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
-            allow: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
-        }, import("zod/v4/core").$strict>>;
         host: import("zod").ZodOptional<import("zod").ZodObject<{
             navigation: import("zod").ZodObject<{
                 external: import("zod").ZodObject<{
@@ -35,7 +24,7 @@ export declare const viewResolveOutput: import("zod").ZodObject<{
             }, import("zod/v4/core").$strict>;
         }, import("zod/v4/core").$strict>>;
         issuer: import("zod").ZodString;
-        etag: import("zod").ZodString;
+        release: import("zod").ZodString;
         revision: import("zod").ZodString;
     }, import("zod/v4/core").$strict>>;
 }, import("zod/v4/core").$strict>;

package/dist/schema/kernel/syscalls/contracts/view-resolve.js

@@ -1,22 +1,8 @@
-import { patterns } from '@astrale-os/kernel-dsl/v1/addressing';
-import { fullMatch } from '@astrale-os/kernel-dsl/v1/value/full-match';
-import { array, discriminatedUnion, enum as enumeration, literal, strictObject, string } from 'zod';
+import { array, enum as enumeration, literal, strictObject, string } from 'zod';
 import { viewHostRequirements } from './view-host-requirements.js';
-const definition = strictObject({
-    origin: string().check(fullMatch(patterns.originFullMatch)),
-    kind: literal('class'),
-    name: string().check(fullMatch(patterns.memberNameFullMatch)),
-});
 const declaration = strictObject({
     description: string().optional(),
-    target: discriminatedUnion('kind', [
-        strictObject({ kind: literal('domain') }),
-        strictObject({ kind: literal('definition'), definitions: array(definition).min(1) }),
-    ]),
-});
-const iframeRequirements = strictObject({
-    sandbox: array(string()).optional(),
-    allow: array(string()).optional(),
+    target: strictObject({ kind: literal('domain') }),
 });
 export const viewResolveInput = strictObject({ target: string().min(1) });
 export const viewResolveOutput = strictObject({
@@ -26,10 +12,9 @@ export const viewResolveOutput = strictObject({
         declaration,
         href: string().min(1),
         handshake: enumeration(['shell', 'none']),
-        iframe: iframeRequirements.optional(),
         host: viewHostRequirements.optional(),
         issuer: string().min(1),
-        etag: string().min(1),
+        release: string().min(1),
         revision: string().min(1),
     })),
 });

package/dist/schema/kernel/syscalls/declarations/delegate.d.ts

@@ -3,10 +3,6 @@ export declare const Delegate: builder.Method<builder.CallableProjection<{
     principal: string;
     audience: string;
     ttlSeconds: number;
-    attenuation?: {
-        kind: "identity";
-        self: true;
-    } | undefined;
 }, {
     readonly mode: 'value';
     readonly value: string;

package/dist/schema/kernel/syscalls/declarations/download.d.ts

@@ -2,6 +2,11 @@ import { type builder } from '@astrale-os/kernel-dsl/v1';
 export declare const Download: builder.Function<builder.CallableProjection<{
     node: string;
     property: string;
+} | {
+    slots: {
+        node: string;
+        property: string;
+    }[];
 }, {
     readonly mode: 'binary';
 }, "authorized", false, false, undefined>>;

package/dist/schema/kernel/syscalls/declarations/index.d.ts

@@ -240,6 +240,11 @@ export declare const Functions: Readonly<{
     download: builder.Function<builder.CallableProjection<{
         node: string;
         property: string;
+    } | {
+        slots: {
+            node: string;
+            property: string;
+        }[];
     }, {
         readonly mode: 'binary';
     }, "authorized", false, false, undefined>>;
@@ -493,14 +498,6 @@ export declare const Functions: Readonly<{
     install: builder.Function<builder.CallableProjection<{
         operation: string;
         domains: ({
-            publication: {
-                url: string;
-                token?: string | undefined;
-                etag?: string | undefined;
-            };
-            revision?: string | undefined;
-            currentRevision?: string | null | undefined;
-        } | {
             artifact: {
                 digest: string;
                 mediaType: string;
@@ -616,10 +613,6 @@ export declare const IdentityMethods: Readonly<{
         principal: string;
         audience: string;
         ttlSeconds: number;
-        attenuation?: {
-            kind: "identity";
-            self: true;
-        } | undefined;
     }, {
         readonly mode: 'value';
         readonly value: string;
@@ -735,21 +728,10 @@ export declare const ViewMethods: Readonly<{
                     description?: string | undefined;
                     target: {
                         kind: "domain";
-                    } | {
-                        kind: "definition";
-                        definitions: {
-                            origin: string;
-                            kind: "class";
-                            name: string;
-                        }[];
                     };
                 };
                 href: string;
                 handshake: "none" | "shell";
-                iframe?: {
-                    sandbox?: string[] | undefined;
-                    allow?: string[] | undefined;
-                } | undefined;
                 host?: {
                     navigation: {
                         external: {
@@ -758,7 +740,7 @@ export declare const ViewMethods: Readonly<{
                     };
                 } | undefined;
                 issuer: string;
-                etag: string;
+                release: string;
                 revision: string;
             }[];
         };

package/dist/schema/kernel/syscalls/declarations/install.d.ts

@@ -2,14 +2,6 @@ import { type builder } from '@astrale-os/kernel-dsl/v1';
 export declare const Install: builder.Function<builder.CallableProjection<{
     operation: string;
     domains: ({
-        publication: {
-            url: string;
-            token?: string | undefined;
-            etag?: string | undefined;
-        };
-        revision?: string | undefined;
-        currentRevision?: string | null | undefined;
-    } | {
         artifact: {
             digest: string;
             mediaType: string;

package/dist/schema/kernel/syscalls/declarations/view-resolve.d.ts

@@ -11,21 +11,10 @@ export declare const ViewResolve: builder.Method<builder.CallableProjection<{
                 description?: string | undefined;
                 target: {
                     kind: "domain";
-                } | {
-                    kind: "definition";
-                    definitions: {
-                        origin: string;
-                        kind: "class";
-                        name: string;
-                    }[];
                 };
             };
             href: string;
             handshake: "none" | "shell";
-            iframe?: {
-                sandbox?: string[] | undefined;
-                allow?: string[] | undefined;
-            } | undefined;
             host?: {
                 navigation: {
                     external: {
@@ -34,7 +23,7 @@ export declare const ViewResolve: builder.Method<builder.CallableProjection<{
                 };
             } | undefined;
             issuer: string;
-            etag: string;
+            release: string;
             revision: string;
         }[];
     };

package/dist/schema/kernel/syscalls/descriptors/identity.d.ts

@@ -6,10 +6,6 @@ export declare const delegate: import("./model.js").MethodSyscall<Readonly<{
     principal: string;
     audience: string;
     ttlSeconds: number;
-    attenuation?: {
-        kind: "identity";
-        self: true;
-    } | undefined;
 }, {
     readonly mode: 'value';
     readonly value: string;

package/dist/schema/kernel/syscalls/descriptors/results/view-resolution.d.ts

@@ -8,23 +8,12 @@ export interface ResolvedView {
     readonly declaration: ViewDeclaration;
     readonly href: string;
     readonly handshake: 'shell' | 'none';
-    readonly iframe?: IframeRequirements;
     readonly host?: ViewHostRequirements;
     readonly issuer: IssuerId;
-    /**
-     * ETag of the v3 Publication that pins the View's Domain: its own for a legacy pin, the
-     * frozen projection's for a `DomainRelease` v4 pin.
-     *
-     * @deprecated Successor: `ResolvedView.release`, emitted by the breaking release (AM-1) as
-     * the release digest.
-     */
-    readonly etag: `sha256:${string}`;
+    /** Digest of the exact DomainRelease that owns this View. */
+    readonly release: `sha256:${string}`;
     readonly revision: Revision;
 }
-export interface IframeRequirements {
-    readonly sandbox?: readonly string[];
-    readonly allow?: readonly string[];
-}
 type ViewDeclaration = Omit<ViewDefinition, 'ref'>;
 export interface ViewResolution {
     readonly snapshot: `sha256:${string}`;