@astrale-os/kernel-core 0.9.0-beta.8 → 0.9.0-beta.9

package/dist/auth/attestation/admission.d.ts

@@ -1,4 +1,3 @@
 import type { Attestation } from './attestation.js';
 /** Admit a self-relative Attestation claim without establishing signer trust. */
 export declare function accept(input: unknown): Attestation;
-//# sourceMappingURL=admission.d.ts.map

package/dist/auth/attestation/admission.js

@@ -41,4 +41,3 @@ function exact(input, expected, path) {
 function invalid(path) {
     throw new AuthValueError('AUTH_ATTESTATION_INVALID', 'Expected a self Attestation', path);
 }
-//# sourceMappingURL=admission.js.map

package/dist/auth/attestation/attestation.d.ts

@@ -3,4 +3,3 @@ import type { SelfIdentityExpr } from '../expression/index.js';
 export interface Attestation {
     readonly expr: SelfIdentityExpr;
 }
-//# sourceMappingURL=attestation.d.ts.map

package/dist/auth/attestation/attestation.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=attestation.js.map

package/dist/auth/attestation/index.d.ts

@@ -1,3 +1,2 @@
 export { accept } from './admission.js';
 export type { Attestation } from './attestation.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/attestation/index.js

@@ -1,2 +1 @@
 export { accept } from './admission.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/authority/accept.d.ts

@@ -1,4 +1,3 @@
 import type { AuthorityPredicate } from './language/index.js';
 /** Re-admit one persisted or crossing canonical authority predicate. */
 export declare function accept(input: unknown): AuthorityPredicate;
-//# sourceMappingURL=accept.d.ts.map

package/dist/auth/authority/accept.js

@@ -35,4 +35,3 @@ function compare(left, right) {
 function invalid(path, message) {
     throw new AuthValueError('AUTHORITY_PREDICATE_INVALID', message, path);
 }
-//# sourceMappingURL=accept.js.map

package/dist/auth/authority/admission/admission.d.ts

@@ -8,4 +8,3 @@ export declare const limits: {
 };
 export declare const MAX_BOOLEAN_OPERANDS: 512;
 export declare function admitAuthorityExpr(input: portable.Value): AuthorityExpr;
-//# sourceMappingURL=admission.d.ts.map

package/dist/auth/authority/admission/admission.js

@@ -261,4 +261,3 @@ function compare(left, right) {
 function invalid(path, message) {
     throw new AuthValueError('AUTHORITY_PREDICATE_INVALID', message, path);
 }
-//# sourceMappingURL=admission.js.map

package/dist/auth/authority/admission/index.d.ts

@@ -1,2 +1 @@
 export { admitAuthorityExpr, limits } from './admission.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/authority/admission/index.js

@@ -1,2 +1 @@
 export { admitAuthorityExpr, limits } from './admission.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/authority/index.d.ts

@@ -3,4 +3,3 @@ export { limits } from './admission/index.js';
 export { canonicalize } from './normalization/index.js';
 export { AUTHORITY_PREDICATE_VERSION } from './language/index.js';
 export type { AuthorityExpr, AuthorityPredicate, ClassRef, Input, LocalDeclaration, Operation, Repeat, Requirement, Term, } from './language/index.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/authority/index.js

@@ -2,4 +2,3 @@ export { accept } from './accept.js';
 export { limits } from './admission/index.js';
 export { canonicalize } from './normalization/index.js';
 export { AUTHORITY_PREDICATE_VERSION } from './language/index.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/authority/language/index.d.ts

@@ -1,3 +1,2 @@
 export { AUTHORITY_PREDICATE_VERSION } from './predicate.js';
 export type { AuthorityExpr, AuthorityPredicate, ClassRef, Input, LocalDeclaration, Operation, Repeat, Requirement, Term, } from './predicate.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/authority/language/index.js

@@ -1,2 +1 @@
 export { AUTHORITY_PREDICATE_VERSION } from './predicate.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/authority/language/predicate.d.ts

@@ -84,4 +84,3 @@ export interface AuthorityPredicate {
     readonly version: typeof AUTHORITY_PREDICATE_VERSION;
     readonly predicate: AuthorityExpr;
 }
-//# sourceMappingURL=predicate.d.ts.map

package/dist/auth/authority/language/predicate.js

@@ -1,2 +1 @@
 export const AUTHORITY_PREDICATE_VERSION = 5;
-//# sourceMappingURL=predicate.js.map

package/dist/auth/authority/normalization/index.d.ts

@@ -1,2 +1 @@
 export { canonicalize, canonicalizeAdmitted } from './normalize.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/authority/normalization/index.js

@@ -1,2 +1 @@
 export { canonicalize, canonicalizeAdmitted } from './normalize.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/authority/normalization/normalize.d.ts

@@ -2,4 +2,3 @@ import type { AuthorityExpr, AuthorityPredicate } from '../language/index.js';
 /** Validate and canonicalize one authority expression into its versioned crossing envelope. */
 export declare function canonicalize(expr: AuthorityExpr): AuthorityPredicate;
 export declare function canonicalizeAdmitted(expr: AuthorityExpr): AuthorityPredicate;
-//# sourceMappingURL=normalize.d.ts.map

package/dist/auth/authority/normalization/normalize.js

@@ -133,4 +133,3 @@ function normalizeLocal(local) {
 function compare(left, right) {
     return left < right ? -1 : left > right ? 1 : 0;
 }
-//# sourceMappingURL=normalize.js.map

package/dist/auth/claims/admission/admission.d.ts

@@ -3,4 +3,3 @@ import type { ClaimConstraint } from '../language/index.js';
 export declare const MAX_REQUIRED_CLAIMS = 64;
 /** Admit one claim constraint within an owning boundary's error vocabulary. */
 export declare function admitConstraint(input: portable.Value, path: string, invalid: (path: string, message: string) => never): ClaimConstraint;
-//# sourceMappingURL=admission.d.ts.map

package/dist/auth/claims/admission/admission.js

@@ -41,4 +41,3 @@ function freezeValue(input) {
 function compare(left, right) {
     return left < right ? -1 : left > right ? 1 : 0;
 }
-//# sourceMappingURL=admission.js.map

package/dist/auth/claims/admission/index.d.ts

@@ -1,2 +1 @@
 export { admitConstraint, MAX_REQUIRED_CLAIMS } from './admission.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/claims/admission/index.js

@@ -1,2 +1 @@
 export { admitConstraint, MAX_REQUIRED_CLAIMS } from './admission.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/claims/evaluation/index.d.ts

@@ -1,3 +1,2 @@
 export { matches } from './match.js';
 export { verifyRequired } from './verify-required.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/claims/evaluation/index.js

@@ -1,3 +1,2 @@
 export { matches } from './match.js';
 export { verifyRequired } from './verify-required.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/claims/evaluation/match.d.ts

@@ -2,4 +2,3 @@ import * as portable from '@astrale-os/kernel-dsl/value';
 import type { ClaimConstraint } from '../language/index.js';
 /** Evaluate one claim constraint over already-parsed claims. */
 export declare function matches(constraint: ClaimConstraint, claims: portable.Object): boolean;
-//# sourceMappingURL=match.d.ts.map

package/dist/auth/claims/evaluation/match.js

@@ -14,4 +14,3 @@ export function matches(constraint, claims) {
 function equal(left, right) {
     return portable.json.serialize(left) === portable.json.serialize(right);
 }
-//# sourceMappingURL=match.js.map

package/dist/auth/claims/evaluation/verify-required.d.ts

@@ -2,4 +2,3 @@ import type * as portable from '@astrale-os/kernel-dsl/value';
 import type { ClaimConstraint } from '../language/index.js';
 /** Assert every required constraint, reporting the first mismatch. */
 export declare function verifyRequired(constraints: readonly ClaimConstraint[], claims: portable.Object): void;
-//# sourceMappingURL=verify-required.d.ts.map

package/dist/auth/claims/evaluation/verify-required.js

@@ -7,4 +7,3 @@ export function verifyRequired(constraints, claims) {
         }
     }
 }
-//# sourceMappingURL=verify-required.js.map

package/dist/auth/claims/index.d.ts

@@ -1,4 +1,3 @@
 export { MAX_REQUIRED_CLAIMS } from './admission/index.js';
 export { matches, verifyRequired } from './evaluation/index.js';
 export type { ClaimConstraint } from './language/index.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/claims/index.js

@@ -1,3 +1,2 @@
 export { MAX_REQUIRED_CLAIMS } from './admission/index.js';
 export { matches, verifyRequired } from './evaluation/index.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/claims/language/constraint.d.ts

@@ -11,4 +11,3 @@ export type ClaimConstraint = {
     readonly claim: string;
     readonly op: 'exists';
 };
-//# sourceMappingURL=constraint.d.ts.map

package/dist/auth/claims/language/constraint.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=constraint.js.map

package/dist/auth/claims/language/index.d.ts

@@ -1,2 +1 @@
 export type { ClaimConstraint } from './constraint.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/claims/language/index.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=index.js.map

package/dist/auth/context/context.d.ts

@@ -26,4 +26,3 @@ export interface AuthContext {
     readonly attestation?: Attestation;
     readonly delegation?: Delegation;
 }
-//# sourceMappingURL=context.d.ts.map

package/dist/auth/context/context.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=context.js.map

package/dist/auth/context/index.d.ts

@@ -1,2 +1 @@
 export type { AuthContext, Authenticated, CredentialContext } from './context.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/context/index.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=index.js.map

package/dist/auth/credential/evidence/evidence.d.ts

@@ -16,4 +16,3 @@ export interface AuthenticationEvidence {
 }
 /** Project trusted credential state without retaining bearer material or arbitrary claims. */
 export declare function evidence(context: CredentialContext): AuthenticationEvidence;
-//# sourceMappingURL=evidence.d.ts.map

package/dist/auth/credential/evidence/evidence.js

@@ -15,4 +15,3 @@ export function evidence(context) {
         ...(credential.exp === undefined ? {} : { expiresAt: credential.exp }),
     });
 }
-//# sourceMappingURL=evidence.js.map

package/dist/auth/credential/evidence/index.d.ts

@@ -1,3 +1,2 @@
 export { evidence } from './evidence.js';
 export type { AuthenticationEvidence } from './evidence.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/credential/evidence/index.js

@@ -1,2 +1 @@
 export { evidence } from './evidence.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/credential/index.d.ts

@@ -7,4 +7,3 @@ export type { CredentialInput, MintedCredential } from './input/index.js';
 export { acceptVerified, verifyAudience } from './verified/index.js';
 export type { VerifiedCredential } from './verified/index.js';
 export type { AuthContext, Authenticated, CredentialContext } from '../context/index.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/credential/index.js

@@ -2,4 +2,3 @@ export { evidence } from './evidence/index.js';
 export { inspect } from './inspection/index.js';
 export { snapshot } from './input/index.js';
 export { acceptVerified, verifyAudience } from './verified/index.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/credential/input/index.d.ts

@@ -1,3 +1,2 @@
 export { snapshot } from './input.js';
 export type { CredentialInput, MintedCredential } from './input.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/credential/input/index.js

@@ -1,2 +1 @@
 export { snapshot } from './input.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/credential/input/input.d.ts

@@ -8,4 +8,3 @@ export type MintedCredential = string & {
 /** Detach mutable credential bytes while retaining immutable credential text. */
 export declare function snapshot(input: CredentialInput): CredentialInput;
 export {};
-//# sourceMappingURL=input.d.ts.map

package/dist/auth/credential/input/input.js

@@ -6,4 +6,3 @@ export function snapshot(input) {
         throw new TypeError('Credential must be text or bytes.');
     return input.slice();
 }
-//# sourceMappingURL=input.js.map

package/dist/auth/credential/inspection/index.d.ts

@@ -1,3 +1,2 @@
 export { inspect } from './inspect.js';
 export type { AuthenticationMethod, CredentialAudience, UnverifiedCredential, } from './inspection.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/credential/inspection/index.js

@@ -1,2 +1 @@
 export { inspect } from './inspect.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/credential/inspection/inspect.d.ts

@@ -2,4 +2,3 @@ import type { CredentialInput } from '../input/index.js';
 import type { UnverifiedCredential } from './inspection.js';
 /** Inspect compact JWT syntax without establishing any cryptographic trust. */
 export declare function inspect(input: CredentialInput): UnverifiedCredential;
-//# sourceMappingURL=inspect.d.ts.map

package/dist/auth/credential/inspection/inspect.js

@@ -94,4 +94,3 @@ function freezeValue(input) {
 function invalid(path, message) {
     throw new AuthValueError('AUTH_CREDENTIAL_INVALID', message, path);
 }
-//# sourceMappingURL=inspect.js.map

package/dist/auth/credential/inspection/inspection.d.ts

@@ -10,4 +10,3 @@ export interface UnverifiedCredential {
     readonly kid?: string;
     readonly claims: value.Object;
 }
-//# sourceMappingURL=inspection.d.ts.map

package/dist/auth/credential/inspection/inspection.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=inspection.js.map

package/dist/auth/credential/verified/admission.d.ts

@@ -4,4 +4,3 @@ import type { VerifiedCredential } from './verified.js';
  * Signature verification and trusted-key selection remain Runtime responsibilities.
  */
 export declare function acceptVerified(input: unknown): VerifiedCredential;
-//# sourceMappingURL=admission.d.ts.map

package/dist/auth/credential/verified/admission.js

@@ -125,4 +125,3 @@ function isRecord(input) {
 function invalid(path, message) {
     throw new AuthValueError('AUTH_VERIFIED_CREDENTIAL_INVALID', message, path);
 }
-//# sourceMappingURL=admission.js.map

package/dist/auth/credential/verified/audience.d.ts

@@ -2,4 +2,3 @@ import type { IssuerId } from '../../issuer/index.js';
 import type { VerifiedCredential } from './verified.js';
 /** Assert the expected audience over an already verified credential. */
 export declare function verifyAudience(credential: VerifiedCredential, expectedAudience: IssuerId): void;
-//# sourceMappingURL=audience.d.ts.map

package/dist/auth/credential/verified/audience.js

@@ -17,4 +17,3 @@ function matches(candidate, expected) {
         return candidate === expected;
     }
 }
-//# sourceMappingURL=audience.js.map

package/dist/auth/credential/verified/index.d.ts

@@ -1,4 +1,3 @@
 export { acceptVerified } from './admission.js';
 export { verifyAudience } from './audience.js';
 export type { VerifiedCredential } from './verified.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/credential/verified/index.js

@@ -1,3 +1,2 @@
 export { acceptVerified } from './admission.js';
 export { verifyAudience } from './audience.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/credential/verified/verified.d.ts

@@ -15,4 +15,3 @@ export interface VerifiedCredential {
     readonly exp?: number;
     readonly claims: value.Object;
 }
-//# sourceMappingURL=verified.d.ts.map

package/dist/auth/credential/verified/verified.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=verified.js.map

package/dist/auth/delegation/admission.d.ts

@@ -1,4 +1,3 @@
 import type { Delegation } from './delegation.js';
 /** Admit a Delegation envelope; the nested credential remains unverified. */
 export declare function accept(input: unknown): Delegation;
-//# sourceMappingURL=admission.d.ts.map

package/dist/auth/delegation/admission.js

@@ -37,4 +37,3 @@ function snapshot(input, path) {
 function invalid(path) {
     throw new AuthValueError('AUTH_DELEGATION_INVALID', 'Expected bounded credential text or bytes', path);
 }
-//# sourceMappingURL=admission.js.map

package/dist/auth/delegation/delegation.d.ts

@@ -5,4 +5,3 @@ export type DelegationCredential = CredentialInput;
 export interface Delegation {
     readonly credential: DelegationCredential;
 }
-//# sourceMappingURL=delegation.d.ts.map

package/dist/auth/delegation/delegation.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=delegation.js.map

package/dist/auth/delegation/index.d.ts

@@ -1,3 +1,2 @@
 export { accept } from './admission.js';
 export type { Delegation, DelegationCredential } from './delegation.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/delegation/index.js

@@ -1,2 +1 @@
 export { accept } from './admission.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/error.d.ts

@@ -4,4 +4,3 @@ export declare class AuthValueError<Code extends string = string> extends TypeEr
     readonly path: string;
     constructor(code: Code, message: string, path?: string, options?: ErrorOptions);
 }
-//# sourceMappingURL=error.d.ts.map

package/dist/auth/error.js

@@ -9,4 +9,3 @@ export class AuthValueError extends TypeError {
         this.path = path;
     }
 }
-//# sourceMappingURL=error.js.map

package/dist/auth/expression/authoring/builder.d.ts

@@ -27,4 +27,3 @@ export declare function union<E extends BuiltExpr>(first: Expr<E>, second: Expr<
 export declare function intersect<E extends BuiltExpr>(first: Expr<E>, second: Expr<NoInfer<E>>, ...rest: Expr<NoInfer<E>>[]): Expr<E>;
 /** Exclude one expression from another expression of the same phase. */
 export declare function exclude<E extends BuiltExpr>(base: Expr<E>, excluded: Expr<NoInfer<E>>): Expr<E>;
-//# sourceMappingURL=builder.d.ts.map

package/dist/auth/expression/authoring/builder.js

@@ -85,4 +85,3 @@ function compose(kind, first, second, ...rest) {
 function expression(value) {
     return Object.freeze(new Expression(value));
 }
-//# sourceMappingURL=builder.js.map

package/dist/auth/expression/authoring/index.d.ts

@@ -1,3 +1,2 @@
 export type { BuiltExpr, Expr, ExprBuilder } from './builder.js';
 export { cred, exclude, identity, intersect, isExprBuilder, raw, self, union } from './builder.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/expression/authoring/index.js

@@ -1,2 +1 @@
 export { cred, exclude, identity, intersect, isExprBuilder, raw, self, union } from './builder.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/expression/index.d.ts

@@ -2,4 +2,3 @@ export type { BuiltExpr, Expr, ExprBuilder } from './authoring/index.js';
 export { cred, exclude, identity, intersect, isExprBuilder, raw, self, union, } from './authoring/index.js';
 export type { IdentityExpr, SelfIdentityExpr, UnresolvedIdentityExpr } from './language/index.js';
 export { canonicalize, raiseDenials } from './normalization/index.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/expression/index.js

@@ -1,3 +1,2 @@
 export { cred, exclude, identity, intersect, isExprBuilder, raw, self, union, } from './authoring/index.js';
 export { canonicalize, raiseDenials } from './normalization/index.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/expression/language/identity-expression.d.ts

@@ -35,4 +35,3 @@ export type UnresolvedIdentityExpr = SelfIdentityExpr | {
     readonly base: UnresolvedIdentityExpr;
     readonly excluded: readonly UnresolvedIdentityExpr[];
 };
-//# sourceMappingURL=identity-expression.d.ts.map

package/dist/auth/expression/language/identity-expression.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=identity-expression.js.map

package/dist/auth/expression/language/index.d.ts

@@ -1,2 +1 @@
 export type { IdentityExpr, SelfIdentityExpr, UnresolvedIdentityExpr, } from './identity-expression.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/expression/language/index.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=index.js.map

package/dist/auth/expression/normalization/canonicalize.d.ts

@@ -5,4 +5,3 @@ export declare const EXPRESSION_OPERAND_LIMIT = 64;
 /** Validate and canonicalize a resolved expression. */
 export declare function canonicalize(expr: IdentityExpr): IdentityExpr;
 export declare function admitResolvedExpression(input: portable.Value, path: string, depth: number): IdentityExpr;
-//# sourceMappingURL=canonicalize.d.ts.map

package/dist/auth/expression/normalization/canonicalize.js

@@ -100,4 +100,3 @@ function compare(left, right) {
 function invalid(path, message) {
     throw new AuthValueError('AUTH_GRANT_INVALID', message, path);
 }
-//# sourceMappingURL=canonicalize.js.map

package/dist/auth/expression/normalization/index.d.ts

@@ -1,3 +1,2 @@
 export { admitResolvedExpression, canonicalize, EXPRESSION_DEPTH_LIMIT, EXPRESSION_OPERAND_LIMIT, } from './canonicalize.js';
 export { raiseDenials } from './raise-denials.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/expression/normalization/index.js

@@ -1,3 +1,2 @@
 export { admitResolvedExpression, canonicalize, EXPRESSION_DEPTH_LIMIT, EXPRESSION_OPERAND_LIMIT, } from './canonicalize.js';
 export { raiseDenials } from './raise-denials.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/expression/normalization/raise-denials.d.ts

@@ -1,4 +1,3 @@
 import type { IdentityExpr } from '../language/index.js';
 /** Raise every positive-position exclusion into one Grant-wide veto. */
 export declare function raiseDenials(expr: IdentityExpr): IdentityExpr;
-//# sourceMappingURL=raise-denials.d.ts.map

package/dist/auth/expression/normalization/raise-denials.js

@@ -57,4 +57,3 @@ function collectDenials(expr, memo) {
     memo.set(expr, denials);
     return denials;
 }
-//# sourceMappingURL=raise-denials.js.map

package/dist/auth/grant/index.d.ts

@@ -2,4 +2,3 @@ export { accept, canonicalize, self } from './resolved/index.js';
 export type { Grant } from './resolved/index.js';
 export { acceptUnresolved, limits } from './unresolved/index.js';
 export type { UnresolvedGrant } from './unresolved/index.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/grant/index.js

@@ -1,3 +1,2 @@
 export { accept, canonicalize, self } from './resolved/index.js';
 export { acceptUnresolved, limits } from './unresolved/index.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/grant/resolved/admission.d.ts

@@ -3,4 +3,3 @@ import type { Grant } from './grant.js';
 export declare function accept(input: unknown): Grant;
 /** Re-canonicalize a trusted Grant value. */
 export declare function canonicalize(input: Grant): Grant;
-//# sourceMappingURL=admission.d.ts.map

package/dist/auth/grant/resolved/admission.js

@@ -39,4 +39,3 @@ function compare(left, right) {
 function invalid(path, message) {
     throw new AuthValueError('AUTH_GRANT_INVALID', message, path);
 }
-//# sourceMappingURL=admission.js.map

package/dist/auth/grant/resolved/grant.d.ts

@@ -3,4 +3,3 @@ import type { IdentityExpr } from '../../expression/language/index.js';
 export interface Grant {
     readonly expr: IdentityExpr;
 }
-//# sourceMappingURL=grant.d.ts.map

package/dist/auth/grant/resolved/grant.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=grant.js.map

package/dist/auth/grant/resolved/index.d.ts

@@ -1,4 +1,3 @@
 export { accept, canonicalize } from './admission.js';
 export { self } from './self.js';
 export type { Grant } from './grant.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/grant/resolved/index.js

@@ -1,3 +1,2 @@
 export { accept, canonicalize } from './admission.js';
 export { self } from './self.js';
-//# sourceMappingURL=index.js.map

package/dist/auth/grant/resolved/self.d.ts

@@ -1,4 +1,3 @@
 import type { IdentityId } from '../../identity/index.js';
 import type { Grant } from './grant.js';
 export declare function self(principal: IdentityId): Grant;
-//# sourceMappingURL=self.d.ts.map

package/dist/auth/grant/resolved/self.js

@@ -2,4 +2,3 @@ import { NodeId } from '../../../graph/node/index.js';
 export function self(principal) {
     return Object.freeze({ expr: Object.freeze({ kind: 'identity', id: NodeId(principal) }) });
 }
-//# sourceMappingURL=self.js.map

package/dist/auth/grant/unresolved/admission.d.ts

@@ -1,4 +1,3 @@
 import type { UnresolvedGrant } from './grant.js';
 /** Admit the exact bounded unresolved Grant wire language. */
 export declare function acceptUnresolved(input: unknown): UnresolvedGrant;
-//# sourceMappingURL=admission.d.ts.map

package/dist/auth/grant/unresolved/admission.js

@@ -134,4 +134,3 @@ function compare(left, right) {
 function invalid(path, message) {
     throw new AuthValueError('AUTH_GRANT_INVALID', message, path);
 }
-//# sourceMappingURL=admission.js.map

package/dist/auth/grant/unresolved/grant.d.ts

@@ -4,4 +4,3 @@ export interface UnresolvedGrant {
     readonly v: 1;
     readonly expr: UnresolvedIdentityExpr;
 }
-//# sourceMappingURL=grant.d.ts.map

package/dist/auth/grant/unresolved/grant.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=grant.js.map

package/dist/auth/grant/unresolved/index.d.ts

@@ -1,4 +1,3 @@
 export { acceptUnresolved } from './admission.js';
 export { limits } from './limits.js';
 export type { UnresolvedGrant } from './grant.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/grant/unresolved/index.js

@@ -1,3 +1,2 @@
 export { acceptUnresolved } from './admission.js';
 export { limits } from './limits.js';
-//# sourceMappingURL=index.js.map