@astrale-os/kernel-core 0.9.0-beta.65 → 0.9.0-beta.67

package/dist/schema/kernel/syscalls/descriptors/identity.d.ts

@@ -6,10 +6,6 @@ export declare const delegate: import("./model.js").MethodSyscall<Readonly<{
     principal: string;
     audience: string;
     ttlSeconds: number;
-    attenuation?: {
-        kind: "identity";
-        self: true;
-    } | undefined;
 }, {
     readonly mode: 'value';
     readonly value: string;

package/dist/schema/kernel/syscalls/descriptors/results/view-resolution.d.ts

@@ -8,23 +8,12 @@ export interface ResolvedView {
     readonly declaration: ViewDeclaration;
     readonly href: string;
     readonly handshake: 'shell' | 'none';
-    readonly iframe?: IframeRequirements;
     readonly host?: ViewHostRequirements;
     readonly issuer: IssuerId;
-    /**
-     * ETag of the v3 Publication that pins the View's Domain: its own for a legacy pin, the
-     * frozen projection's for a `DomainRelease` v4 pin.
-     *
-     * @deprecated Successor: `ResolvedView.release`, emitted by the breaking release (AM-1) as
-     * the release digest.
-     */
-    readonly etag: `sha256:${string}`;
+    /** Digest of the exact DomainRelease that owns this View. */
+    readonly release: `sha256:${string}`;
     readonly revision: Revision;
 }
-export interface IframeRequirements {
-    readonly sandbox?: readonly string[];
-    readonly allow?: readonly string[];
-}
 type ViewDeclaration = Omit<ViewDefinition, 'ref'>;
 export interface ViewResolution {
     readonly snapshot: `sha256:${string}`;

package/dist/schema/kernel/syscalls/descriptors/results/view-resolution.js

@@ -1,4 +1,4 @@
-import { Key, patterns } from '@astrale-os/kernel-dsl/v1/addressing';
+import { Key } from '@astrale-os/kernel-dsl/v1/addressing';
 import * as portable from '@astrale-os/kernel-dsl/value';
 import { issuer } from '../../../../../auth/index.js';
 import { viewResolveOutput } from '../../contracts/index.js';
@@ -25,17 +25,15 @@ export function acceptViewResolution(input) {
         if (!issuer.is(view.issuer))
             invalid(`Resolved View ${index} issuer is not canonical.`);
         const declaration = acceptDeclaration(view.declaration, index);
-        const iframe = acceptIframeRequirements(view.iframe, view.handshake, index);
         const host = acceptViewHostRequirements(view.host, view.handshake);
         return Object.freeze({
             key,
             declaration,
             href: view.href,
             handshake: view.handshake,
-            ...(iframe === undefined ? {} : { iframe }),
             ...(host === undefined ? {} : { host }),
             issuer: view.issuer,
-            etag: digest(view.etag, `Resolved View ${index} ETag`),
+            release: digest(view.release, `Resolved View ${index} release`),
             revision: digest(view.revision, `Resolved View ${index} revision`),
         });
     });
@@ -49,130 +47,17 @@ export function acceptViewResolution(input) {
         views: Object.freeze(views),
     });
 }
-const IFRAME_TOKEN = /^[a-z][a-z0-9-]*$/u;
-function acceptIframeRequirements(input, handshake, viewIndex) {
-    if (input === undefined)
-        return undefined;
-    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
-        invalid(`Resolved View ${viewIndex} iframe requirements are invalid.`);
-    }
-    const prototype = Object.getPrototypeOf(input);
-    if (prototype !== Object.prototype && prototype !== null) {
-        invalid(`Resolved View ${viewIndex} iframe requirements are invalid.`);
-    }
-    const value = input;
-    if (Reflect.ownKeys(value).some((key) => key !== 'sandbox' && key !== 'allow')) {
-        invalid(`Resolved View ${viewIndex} iframe requirements contain unknown fields.`);
-    }
-    const sandbox = acceptTokens(dataValue(value, 'sandbox', viewIndex), viewIndex, 'sandbox');
-    const allow = acceptTokens(dataValue(value, 'allow', viewIndex), viewIndex, 'allow');
-    const baselineSandbox = new Set(handshake === 'shell' ? ['allow-same-origin', 'allow-scripts'] : ['allow-scripts']);
-    const baselineAllow = new Set(handshake === 'shell' ? ['clipboard-write'] : []);
-    if (sandbox.some((token) => baselineSandbox.has(token)) ||
-        allow.some((token) => baselineAllow.has(token))) {
-        invalid(`Resolved View ${viewIndex} iframe requirements repeat a fixed handshake baseline.`);
-    }
-    const tokens = new Set(sandbox);
-    if (tokens.has('allow-popups-to-escape-sandbox') && !tokens.has('allow-popups')) {
-        invalid(`Resolved View ${viewIndex} popup escape requires popup authority.`);
-    }
-    if (tokens.has('allow-top-navigation') && tokens.has('allow-top-navigation-by-user-activation')) {
-        invalid(`Resolved View ${viewIndex} iframe navigation requirements are redundant.`);
-    }
-    if (tokens.has('allow-top-navigation-to-custom-protocols') &&
-        (tokens.has('allow-top-navigation') || tokens.has('allow-popups'))) {
-        invalid(`Resolved View ${viewIndex} custom-protocol requirements are redundant.`);
-    }
-    if (sandbox.length === 0 && allow.length === 0) {
-        invalid(`Resolved View ${viewIndex} empty iframe requirements must be omitted.`);
-    }
-    return Object.freeze({ sandbox: Object.freeze(sandbox), allow: Object.freeze(allow) });
-}
-function dataValue(input, key, viewIndex) {
-    const descriptor = Object.getOwnPropertyDescriptor(input, key);
-    if (descriptor === undefined)
-        return undefined;
-    if (!('value' in descriptor)) {
-        invalid(`Resolved View ${viewIndex} iframe requirements are invalid.`);
-    }
-    return descriptor.value;
-}
-function acceptTokens(input, viewIndex, field) {
-    if (input === undefined)
-        return [];
-    if (!Array.isArray(input))
-        invalid(`Resolved View ${viewIndex} iframe ${field} is invalid.`);
-    const descriptors = Object.getOwnPropertyDescriptors(input);
-    const values = [];
-    for (let index = 0; index < input.length; index += 1) {
-        const descriptor = descriptors[String(index)];
-        if (descriptor === undefined ||
-            !('value' in descriptor) ||
-            typeof descriptor.value !== 'string' ||
-            !IFRAME_TOKEN.test(descriptor.value)) {
-            invalid(`Resolved View ${viewIndex} iframe ${field} contains an invalid token.`);
-        }
-        values.push(descriptor.value);
-    }
-    for (const key of Reflect.ownKeys(descriptors)) {
-        if (key === 'length')
-            continue;
-        if (typeof key !== 'string' || !/^(0|[1-9][0-9]*)$/u.test(key) || Number(key) >= input.length) {
-            invalid(`Resolved View ${viewIndex} iframe ${field} is invalid.`);
-        }
-    }
-    for (let index = 1; index < values.length; index += 1) {
-        if (values[index - 1] >= values[index]) {
-            invalid(`Resolved View ${viewIndex} iframe ${field} is not in strict canonical order.`);
-        }
-    }
-    return values;
-}
-function acceptDeclaration(input, viewIndex) {
-    if (input.target.kind === 'domain') {
-        return Object.freeze({
-            ...(input.description === undefined ? {} : { description: input.description }),
-            target: Object.freeze({ kind: 'domain' }),
-        });
-    }
-    const definitions = input.target.definitions.map((definition, definitionIndex) => {
-        if (!patterns.origin.test(definition.origin) ||
-            definition.kind !== 'class' ||
-            !patterns.memberName.test(definition.name)) {
-            invalid(`Resolved View ${viewIndex} target definition ${definitionIndex} is invalid.`);
-        }
-        return Object.freeze({
-            origin: definition.origin,
-            kind: definition.kind,
-            name: definition.name,
-        });
-    });
-    for (let index = 1; index < definitions.length; index++) {
-        if (compareDefinitionRefs(definitions[index - 1], definitions[index]) >= 0) {
-            invalid(`Resolved View ${viewIndex} target definitions are not in strict canonical order.`);
-        }
-    }
+function acceptDeclaration(input, _viewIndex) {
     return Object.freeze({
         ...(input.description === undefined ? {} : { description: input.description }),
-        target: Object.freeze({
-            kind: 'definition',
-            definitions: Object.freeze(definitions),
-        }),
+        target: Object.freeze({ kind: 'domain' }),
     });
 }
-function compareDefinitionRefs(left, right) {
-    return (compare(left.origin, right.origin) ||
-        compare(left.kind, right.kind) ||
-        compare(left.name, right.name));
-}
 function digest(input, label) {
     if (!/^sha256:[0-9a-f]{64}$/u.test(input))
         invalid(`${label} is invalid.`);
     return input;
 }
-function compare(left, right) {
-    return left < right ? -1 : left > right ? 1 : 0;
-}
 function invalid(message) {
     throw new TypeError(message);
 }

package/dist/schema/kernel/syscalls/descriptors/view.d.ts

@@ -15,21 +15,10 @@ export declare const resolve: import("./model.js").MethodSyscall<Readonly<{
                 description?: string | undefined;
                 target: {
                     kind: "domain";
-                } | {
-                    kind: "definition";
-                    definitions: {
-                        origin: string;
-                        kind: "class";
-                        name: string;
-                    }[];
                 };
             };
             href: string;
             handshake: "none" | "shell";
-            iframe?: {
-                sandbox?: string[] | undefined;
-                allow?: string[] | undefined;
-            } | undefined;
             host?: {
                 navigation: {
                     external: {
@@ -38,7 +27,7 @@ export declare const resolve: import("./model.js").MethodSyscall<Readonly<{
                 };
             } | undefined;
             issuer: string;
-            etag: string;
+            release: string;
             revision: string;
         }[];
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-core",
-  "version": "0.9.0-beta.65",
+  "version": "0.9.0-beta.67",
   "description": "Astrale Kernel Core - Types, Invariants, and Pure Logic",
   "license": "Apache-2.0",
   "repository": {
@@ -160,7 +160,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-dsl": "0.2.0-beta.47",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.49",
     "@noble/hashes": "2.3.0",
     "@types/json-schema": "^7.0.15",
     "dequal": "2.0.3"

package/dist/schema/callables/view-for.js

@@ -1,12 +0,0 @@
-import { edgeClass } from '@astrale-os/kernel-dsl/v1';
-import { Class } from '../definitions/index.js';
-import { Domain } from '../domain/index.js';
-import { Edge } from '../meta/index.js';
-import { View } from './view.js';
-export const ViewFor = edgeClass.directed({
-    abstract: false,
-    source: { as: 'view', accepts: [View], outgoing: '1..*' },
-    target: { as: 'target', accepts: [Class, Domain], incoming: '0..*' },
-    description: 'A View declaration targets one Domain or a non-empty set of Classes.',
-    extends: [Edge],
-});

package/dist/schema/kernel/projection/keys.d.ts

@@ -1,3 +0,0 @@
-import type { Domain } from '@astrale-os/kernel-dsl/v1';
-export declare function managedKeys(domain: Domain): readonly string[];
-export declare function coreKeys(domain: Domain): readonly string[];

package/dist/schema/kernel/syscalls/contracts/legacy/delegate.d.ts

@@ -1,5 +0,0 @@
-/** @deprecated The only `attenuation` value `Identity.delegate` still admits, and ignores. */
-export declare const selfAttenuation: import("zod").ZodObject<{
-    kind: import("zod").ZodLiteral<"identity">;
-    self: import("zod").ZodLiteral<true>;
-}, import("zod/v4/core").$strict>;

package/dist/schema/kernel/syscalls/contracts/legacy/delegate.js

@@ -1,25 +0,0 @@
-/**
- * `Identity.delegate` keeps admitting the one `attenuation` value published Clients send: the self
- * expression `{ kind: 'identity', self: true }`. It names the caller the delegation preserves
- * anyway, so it carries no meaning: the handler ignores it and issues exactly the credential the
- * same input without the field yields. Every other value, `null` included, stays refused.
- *
- * @deprecated Omit `attenuation`; a delegation always preserves the authenticated caller (ADR-3).
- *
- * Short-term consumers: `@astrale-os/kernel-client` 0.6.0-beta.77 to beta.85, whose Domain token
- * exchange always sends it (`client/session/exchange/exchange.ts`, `SELF_ATTENUATION`), so the
- * Console, the GUI, the Admin upgrade executor and the CLI through 1.0.0-beta.126 (exchange and
- * `astrale token`). The 1Pact Host runs Kernel 0.12.0-beta.117, which requires the field, so a
- * Client that serves both Kernels sends it.
- *
- * Removal, in a separate breaking release, once every consumer runs a Client that omits the field
- * and the 0.12.0-beta.117 consumer Host is retired: delete this file and the `attenuation` member
- * of `../delegate.ts`, then make the self vectors of TEST-REJECTS-AUTHORITY-EXPRESSIONS-IN-ISSUANCE-INPUTS
- * and of the SYS-6 dispatch test expect refusal again.
- */
-import { literal, strictObject } from 'zod';
-/** @deprecated The only `attenuation` value `Identity.delegate` still admits, and ignores. */
-export const selfAttenuation = strictObject({
-    kind: literal('identity'),
-    self: literal(true),
-}).meta({ deprecated: true });

package/dist/schema/kernel/syscalls/contracts/legacy/install.d.ts

@@ -1,22 +0,0 @@
-import type { InstallationDigest } from '../install.js';
-/** @deprecated Successor: the `release` request of `../install.ts`. */
-export declare const publicationRequest: import("zod").ZodObject<{
-    publication: import("zod").ZodObject<{
-        url: import("zod").ZodString;
-        token: import("zod").ZodOptional<import("zod").ZodString>;
-        etag: import("zod").ZodOptional<import("zod").ZodString>;
-    }, import("zod/v4/core").$strict>;
-    revision: import("zod").ZodOptional<import("zod").ZodString>;
-    currentRevision: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
-}, import("zod/v4/core").$strict>;
-/** @deprecated Use `ReleaseRequest` to guard the release digest. */
-export interface PublicationRequest {
-    readonly publication: {
-        readonly url: string;
-        readonly token?: string;
-        /** ETag of the v3 document the source serves: its own, or the projection of a v4 release. */
-        readonly etag?: InstallationDigest;
-    };
-    readonly revision?: string;
-    readonly currentRevision?: string | null;
-}

package/dist/schema/kernel/syscalls/contracts/legacy/install.js

@@ -1,31 +0,0 @@
-/**
- * The `publication` Domain request of `schema.install` keeps its v3 meaning: `etag` guards the
- * ETag of the v3 document the source serves, including the frozen projection of a v4 release.
- *
- * @deprecated Use the `release` request of `../install.ts`, whose `digest` is the release digest.
- *
- * Short-term consumers: the Admin instance gateway and the CLI until they send `release`, the SDK
- * e2e controller, and this repository's own callers (`__e2e__`, `host/e2e`,
- * `host/qualification/falkor`) and tests. The 1Pact Host runs its own Kernel .117 and does not
- * depend on this module.
- *
- * Removal, in a separate breaking release, once the Admin gateway and the CLI send `release` to
- * every Kernel that accepts it and the SDK e2e controller has moved: move this repository's callers
- * and tests first, then delete this folder, the `publication` branch of `domainRequest`, Runtime
- * `PublicationDomainInput` with the `publication` branch of `installDomain`,
- * `DesiredInstallation.targetEtag`, `InstallRoot.targetEtag` and
- * `CUTOVER_PUBLICATION_ETAG_CONFLICT`. The legacy fingerprint keys stay frozen: retained operations
- * store their digests.
- */
-import { strictObject } from 'zod';
-import { installationText } from '../installation.js';
-/** @deprecated Successor: the `release` request of `../install.ts`. */
-export const publicationRequest = strictObject({
-    publication: strictObject({
-        url: installationText,
-        token: installationText.optional(),
-        etag: installationText.optional(),
-    }),
-    revision: installationText.optional(),
-    currentRevision: installationText.nullable().optional(),
-});