@astrale-os/kernel-dsl 0.2.0-beta.14 → 0.2.0-beta.17

package/CHANGELOG.md

@@ -0,0 +1,214 @@
+# Changelog
+
+## [0.2.0-beta.17](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.16...kernel-dsl-v0.2.0-beta.17) (2026-08-29)
+
+
+### ⚠ BREAKING CHANGES
+
+* View declarations now contain only target and optional description. Legacy View.auth fields are rejected; callable authorization, View.resolve admission, Policies, and Shell handshakes remain independent.
+* **dsl:** make edge direction explicit
+
+### Features
+
+* add aliased domain dependency projection ([afb799b](https://github.com/astrale-os/kernel/commit/afb799b0d61fd6f7436fe659f558a6a62ef1e7a1))
+* add aliased Domain dependency projection ([9c4c4fb](https://github.com/astrale-os/kernel/commit/9c4c4fb4f942c0c5e3961faf4428ed299d42f847))
+* add compiled remote domain serving ([ac9e365](https://github.com/astrale-os/kernel/commit/ac9e36538982a91359712e4cbbc68353ea2cc1a2))
+* add compiled remote Domain serving ([6149628](https://github.com/astrale-os/kernel/commit/6149628820d1294981156ff5b50ceaa522ea0403))
+* **callable:** preserve native binary streams and status ([d14c6f1](https://github.com/astrale-os/kernel/commit/d14c6f13492c14a3363b2c4af59c738034752fa2))
+* **dsl:** authorize Edge value reads with policies ([#502](https://github.com/astrale-os/kernel/issues/502)) ([a27e129](https://github.com/astrale-os/kernel/commit/a27e129378ff64e69031a011cbfa21299998a35e))
+* **dsl:** make edge direction explicit ([3f05bf5](https://github.com/astrale-os/kernel/commit/3f05bf52ce5b20e9f549ec0fd98cb0e4e03de1ea))
+* remove Property visibility and cut DSL V2 ([#518](https://github.com/astrale-os/kernel/issues/518)) ([4d99e8f](https://github.com/astrale-os/kernel/commit/4d99e8f0837136cf6be257ab3a6df666b62e06b5))
+* remove View authentication declarations ([4a5bfe0](https://github.com/astrale-os/kernel/commit/4a5bfe016717267d31257748f95e7f646782f876))
+* **runtime:** implement auto property projection lifecycle ([#451](https://github.com/astrale-os/kernel/issues/451)) ([e0c484a](https://github.com/astrale-os/kernel/commit/e0c484a79f2d5314b6a54597c340bd09d3e4e566))
+* **schema:** split inspection and add convergence ([6afbd39](https://github.com/astrale-os/kernel/commit/6afbd39506b8a9e37225aded1c02f94ffa64e54b))
+
+
+### Bug Fixes
+
+* admit optional callable node paths ([#464](https://github.com/astrale-os/kernel/issues/464)) ([8f261d5](https://github.com/astrale-os/kernel/commit/8f261d54dfb489541d2976892c5cacadf688f1a1))
+* **api:** retain visibility-free DSL as V1 ([#526](https://github.com/astrale-os/kernel/issues/526)) ([e24c1ea](https://github.com/astrale-os/kernel/commit/e24c1ea257e8567d9bd33c6ada0de63bb346a496))
+* **boot:** point local host CLI at graph.query ([8341e10](https://github.com/astrale-os/kernel/commit/8341e1020cd32848ffb95de80e66936f17db3087))
+* **boot:** point local host CLI at graph.query ([70c656b](https://github.com/astrale-os/kernel/commit/70c656bc7162b477a97ace4b999f8e7f6bf3a988))
+* **ci:** enforce the official Kernel cohort ([#469](https://github.com/astrale-os/kernel/issues/469)) ([f6ea87a](https://github.com/astrale-os/kernel/commit/f6ea87a47f7b1f9c415e404dc1a09b480a2a3f5f))
+* **core:** preserve callable identity and runtime boundaries ([#394](https://github.com/astrale-os/kernel/issues/394)) ([ad67dad](https://github.com/astrale-os/kernel/commit/ad67dad84aef3c8b79f769009595ea1f1229026b))
+* **deps:** refresh the Kernel dependency cohort ([#393](https://github.com/astrale-os/kernel/issues/393)) ([883e7bb](https://github.com/astrale-os/kernel/commit/883e7bb7ce17eecb7dad1c94ad2089c576ba3746))
+* **dsl:** close runtime facade contracts ([ff99450](https://github.com/astrale-os/kernel/commit/ff99450ce3889013f57c39293e7022b32e186ca6))
+* **dsl:** close semantic qualification gaps ([4a48cd7](https://github.com/astrale-os/kernel/commit/4a48cd729bcaf839ceda880b26ade064d6505fe2))
+* **dsl:** expose runtime-clean load paths ([7dba075](https://github.com/astrale-os/kernel/commit/7dba075887e4796e5464d5a41ddb03212eed887f))
+* **dsl:** keep schema projections declaration-nameable ([#432](https://github.com/astrale-os/kernel/issues/432)) ([448d23d](https://github.com/astrale-os/kernel/commit/448d23d58fc2b564ef93be4a54dc8ebd385b5066))
+* **dsl:** make schema declarations portable ([55e13c0](https://github.com/astrale-os/kernel/commit/55e13c06896eb5d6cf195607aec10f176b585504))
+* **dsl:** make schema declarations portable ([90c04ac](https://github.com/astrale-os/kernel/commit/90c04acfa5af714c70a92dc90999675d53f159bc))
+* **dsl:** preserve generic resolved domain type ([46f306b](https://github.com/astrale-os/kernel/commit/46f306bc3d1c73c822608c777a82f4502591d3e2))
+* **dsl:** reject unknown authoring fields on edge endpoints ([0483aa9](https://github.com/astrale-os/kernel/commit/0483aa9d985459c873922262b6f60363ffb3902b))
+* **dsl:** reject unknown authoring fields on edge endpoints ([cb90dae](https://github.com/astrale-os/kernel/commit/cb90dae6e165166ddcfe5e31ee2780d36b07ea53))
+* **dsl:** reject unknown edge endpoint fields ([06a47ed](https://github.com/astrale-os/kernel/commit/06a47edf1bb1ba58d0ac7258e810ef2d20b30c69))
+* **dsl:** reject unknown edge endpoint fields ([2d83dbf](https://github.com/astrale-os/kernel/commit/2d83dbf25a3e3818f9db2519b15741d109750727))
+* **dsl:** trust exact generated build material ([#466](https://github.com/astrale-os/kernel/issues/466)) ([77f2686](https://github.com/astrale-os/kernel/commit/77f26862d8041928029c04da9f2b2521a101c17e))
+* **packages:** keep workspace guard private ([e0ba76c](https://github.com/astrale-os/kernel/commit/e0ba76c5ae163245e31115e2a72e0663db0f5320))
+* **packages:** keep workspace guard private ([d260a52](https://github.com/astrale-os/kernel/commit/d260a52329cde5ce4b0260c43a3bbf28cb78f408))
+* **packages:** keep workspace guard private ([a3e82ec](https://github.com/astrale-os/kernel/commit/a3e82ec671f07252a5966b4de988e275e4078b8c))
+* publish a TypeScript-compatible cohort ([#406](https://github.com/astrale-os/kernel/issues/406)) ([f1a0cd0](https://github.com/astrale-os/kernel/commit/f1a0cd09f2f0b4498f9fa8924b2e319cac6552b7))
+* **release:** add package repository metadata ([8238077](https://github.com/astrale-os/kernel/commit/8238077d47a96c0f7b50a1bae8769fe4faab45b7))
+* **release:** harden public package closure ([#397](https://github.com/astrale-os/kernel/issues/397)) ([5a5886f](https://github.com/astrale-os/kernel/commit/5a5886fe66c7b3ea0a014766a5df8c04fd93efeb))
+* **schema:** harden introspection evidence and caches ([9516eb5](https://github.com/astrale-os/kernel/commit/9516eb510242427296861ef9e730b01861e45463))
+* stabilize governed Kernel integration ([#347](https://github.com/astrale-os/kernel/issues/347)) ([6869e3f](https://github.com/astrale-os/kernel/commit/6869e3fc4de1e73ff701bb38383e89c934ddfdf2))
+* **system:** clear Codegraph diagnostic debt ([f7a8e1f](https://github.com/astrale-os/kernel/commit/f7a8e1f5c5694d9c3c45d95fde184f0d5f2c7343))
+* **system:** clear Codegraph diagnostic debt ([45f86a9](https://github.com/astrale-os/kernel/commit/45f86a9ce14a224efed0e07966a5df8d7a892078))
+* **system:** preserve erased domain and runtime facade contracts ([b525d47](https://github.com/astrale-os/kernel/commit/b525d4781d2d58776ec6b4bbe1e045a3c1accebb))
+* **system:** preserve public revision vocabulary ([5e990d0](https://github.com/astrale-os/kernel/commit/5e990d0b28578a040b80c508943552c46b8632ae))
+* **test:** preserve authored semantic contracts ([bedb8cd](https://github.com/astrale-os/kernel/commit/bedb8cd2d36f4a95cb8d219067df0d0e39100f08))
+
+
+### Documentation
+
+* **release:** align kernel beta changelogs ([ad59dbc](https://github.com/astrale-os/kernel/commit/ad59dbc8df458d8bd025692d594b0b4666cd2e1f))
+
+## [0.2.0-beta.16](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.15...kernel-dsl-v0.2.0-beta.16) (2026-08-29)
+
+
+### Features
+
+* remove Property visibility and cut DSL V2 ([#518](https://github.com/astrale-os/kernel/issues/518)) ([4d99e8f](https://github.com/astrale-os/kernel/commit/4d99e8f0837136cf6be257ab3a6df666b62e06b5))
+
+
+### Bug Fixes
+
+* **api:** retain visibility-free DSL as V1 ([#526](https://github.com/astrale-os/kernel/issues/526)) ([e24c1ea](https://github.com/astrale-os/kernel/commit/e24c1ea257e8567d9bd33c6ada0de63bb346a496))
+
+## [0.2.0-beta.15](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.14...kernel-dsl-v0.2.0-beta.15) (2026-08-27)
+
+
+### Features
+
+* **dsl:** authorize Edge value reads with policies ([#502](https://github.com/astrale-os/kernel/issues/502)) ([a27e129](https://github.com/astrale-os/kernel/commit/a27e129378ff64e69031a011cbfa21299998a35e))
+
+## [0.2.0-beta.14](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.13...kernel-dsl-v0.2.0-beta.14) (2026-08-26)
+
+
+### Bug Fixes
+
+* **ci:** enforce the official Kernel cohort ([#469](https://github.com/astrale-os/kernel/issues/469)) ([f6ea87a](https://github.com/astrale-os/kernel/commit/f6ea87a47f7b1f9c415e404dc1a09b480a2a3f5f))
+
+## [0.2.0-beta.13](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.12...kernel-dsl-v0.2.0-beta.13) (2026-08-26)
+
+
+### Features
+
+* **runtime:** implement auto property projection lifecycle ([#451](https://github.com/astrale-os/kernel/issues/451)) ([e0c484a](https://github.com/astrale-os/kernel/commit/e0c484a79f2d5314b6a54597c340bd09d3e4e566))
+
+
+### Bug Fixes
+
+* **dsl:** trust exact generated build material ([#466](https://github.com/astrale-os/kernel/issues/466)) ([77f2686](https://github.com/astrale-os/kernel/commit/77f26862d8041928029c04da9f2b2521a101c17e))
+
+## [0.2.0-beta.12](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.11...kernel-dsl-v0.2.0-beta.12) (2026-08-26)
+
+
+### Bug Fixes
+
+* admit optional callable node paths ([#464](https://github.com/astrale-os/kernel/issues/464)) ([8f261d5](https://github.com/astrale-os/kernel/commit/8f261d54dfb489541d2976892c5cacadf688f1a1))
+* **system:** clear Codegraph diagnostic debt ([f7a8e1f](https://github.com/astrale-os/kernel/commit/f7a8e1f5c5694d9c3c45d95fde184f0d5f2c7343))
+
+## [0.2.0-beta.11](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.10...kernel-dsl-v0.2.0-beta.11) (2026-08-25)
+
+
+### Features
+
+* **callable:** preserve native binary streams and status ([d14c6f1](https://github.com/astrale-os/kernel/commit/d14c6f13492c14a3363b2c4af59c738034752fa2))
+* **schema:** split inspection and add convergence ([6afbd39](https://github.com/astrale-os/kernel/commit/6afbd39506b8a9e37225aded1c02f94ffa64e54b))
+
+
+### Bug Fixes
+
+* **schema:** harden introspection evidence and caches ([9516eb5](https://github.com/astrale-os/kernel/commit/9516eb510242427296861ef9e730b01861e45463))
+
+## [0.2.0-beta.10](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.9...kernel-dsl-v0.2.0-beta.10) (2026-08-25)
+
+
+### Bug Fixes
+
+* **dsl:** keep schema projections declaration-nameable ([#432](https://github.com/astrale-os/kernel/issues/432)) ([448d23d](https://github.com/astrale-os/kernel/commit/448d23d58fc2b564ef93be4a54dc8ebd385b5066))
+
+## [0.2.0-beta.9](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.8...kernel-dsl-v0.2.0-beta.9) (2026-08-24)
+
+
+### Bug Fixes
+
+* **packages:** keep workspace guard private ([e0ba76c](https://github.com/astrale-os/kernel/commit/e0ba76c5ae163245e31115e2a72e0663db0f5320))
+* **packages:** keep workspace guard private ([d260a52](https://github.com/astrale-os/kernel/commit/d260a52329cde5ce4b0260c43a3bbf28cb78f408))
+* **packages:** keep workspace guard private ([a3e82ec](https://github.com/astrale-os/kernel/commit/a3e82ec671f07252a5966b4de988e275e4078b8c))
+
+## [0.2.0-beta.8](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.7...kernel-dsl-v0.2.0-beta.8) (2026-08-24)
+
+
+### Features
+
+* add aliased domain dependency projection ([afb799b](https://github.com/astrale-os/kernel/commit/afb799b0d61fd6f7436fe659f558a6a62ef1e7a1))
+* add aliased Domain dependency projection ([9c4c4fb](https://github.com/astrale-os/kernel/commit/9c4c4fb4f942c0c5e3961faf4428ed299d42f847))
+
+## [0.2.0-beta.7](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.6...kernel-dsl-v0.2.0-beta.7) (2026-08-24)
+
+
+### Bug Fixes
+
+* **dsl:** make schema declarations portable ([55e13c0](https://github.com/astrale-os/kernel/commit/55e13c06896eb5d6cf195607aec10f176b585504))
+* publish a TypeScript-compatible cohort ([#406](https://github.com/astrale-os/kernel/issues/406)) ([f1a0cd0](https://github.com/astrale-os/kernel/commit/f1a0cd09f2f0b4498f9fa8924b2e319cac6552b7))
+
+## [0.2.0-beta.6](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.5...kernel-dsl-v0.2.0-beta.6) (2026-08-23)
+
+
+### Bug Fixes
+
+* **core:** preserve callable identity and runtime boundaries ([#394](https://github.com/astrale-os/kernel/issues/394)) ([ad67dad](https://github.com/astrale-os/kernel/commit/ad67dad84aef3c8b79f769009595ea1f1229026b))
+* **deps:** refresh the Kernel dependency cohort ([#393](https://github.com/astrale-os/kernel/issues/393)) ([883e7bb](https://github.com/astrale-os/kernel/commit/883e7bb7ce17eecb7dad1c94ad2089c576ba3746))
+* **dsl:** close runtime facade contracts ([ff99450](https://github.com/astrale-os/kernel/commit/ff99450ce3889013f57c39293e7022b32e186ca6))
+* **dsl:** close semantic qualification gaps ([4a48cd7](https://github.com/astrale-os/kernel/commit/4a48cd729bcaf839ceda880b26ade064d6505fe2))
+* **dsl:** expose runtime-clean load paths ([7dba075](https://github.com/astrale-os/kernel/commit/7dba075887e4796e5464d5a41ddb03212eed887f))
+* **dsl:** preserve generic resolved domain type ([46f306b](https://github.com/astrale-os/kernel/commit/46f306bc3d1c73c822608c777a82f4502591d3e2))
+* **release:** harden public package closure ([#397](https://github.com/astrale-os/kernel/issues/397)) ([5a5886f](https://github.com/astrale-os/kernel/commit/5a5886fe66c7b3ea0a014766a5df8c04fd93efeb))
+* **system:** preserve erased domain and runtime facade contracts ([b525d47](https://github.com/astrale-os/kernel/commit/b525d4781d2d58776ec6b4bbe1e045a3c1accebb))
+* **system:** preserve public revision vocabulary ([5e990d0](https://github.com/astrale-os/kernel/commit/5e990d0b28578a040b80c508943552c46b8632ae))
+* **test:** preserve authored semantic contracts ([bedb8cd](https://github.com/astrale-os/kernel/commit/bedb8cd2d36f4a95cb8d219067df0d0e39100f08))
+
+## [0.2.0-beta.5](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.4...kernel-dsl-v0.2.0-beta.5) (2026-08-21)
+
+
+### ⚠ BREAKING CHANGES
+
+* View declarations now contain only target and optional description. Legacy View.auth fields are rejected; callable authorization, View.resolve admission, Policies, and Shell handshakes remain independent.
+
+### Features
+
+* remove View authentication declarations ([4a5bfe0](https://github.com/astrale-os/kernel/commit/4a5bfe016717267d31257748f95e7f646782f876))
+
+## [0.2.0-beta.4](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.3...kernel-dsl-v0.2.0-beta.4) (2026-08-21)
+
+
+### Bug Fixes
+
+* **release:** add package repository metadata ([8238077](https://github.com/astrale-os/kernel/commit/8238077d47a96c0f7b50a1bae8769fe4faab45b7))
+
+## [0.1.5](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.1.4...kernel-dsl-v0.1.5) (2026-08-07)
+
+
+### Features
+
+* **dsl:** add non-breaking policy IR preview ([1202d29](https://github.com/astrale-os/kernel/commit/1202d294cc7f32bc8e3e29d7537d3604403d09a5))
+* **dsl:** align policy authoring with v1 ([514961f](https://github.com/astrale-os/kernel/commit/514961f9902d97e96535126b0a983764bb0f30ac))
+* **dsl:** align policy authoring with v1 ([d082d5e](https://github.com/astrale-os/kernel/commit/d082d5e923458c0eec4ee28358f1b41309067843))
+
+## [0.1.4](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.1.3...kernel-dsl-v0.1.4) (2026-07-10)
+
+
+### Bug Fixes
+
+* export ./package.json from all published packages ([9560a34](https://github.com/astrale-os/kernel/commit/9560a34379c68d475f09a863e9d1962b560d83a0))
+* export ./package.json from all published packages ([8633acb](https://github.com/astrale-os/kernel/commit/8633acba8953644805fc43840732bd16c3e19ab1))
+* export ./package.json in publishConfig.exports too — the map that ships ([85ba0a1](https://github.com/astrale-os/kernel/commit/85ba0a121466ed5ef33fced51d28c0d09a7c0ec4))
+
+## [0.1.3](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.1.2...kernel-dsl-v0.1.3) (2026-07-08)
+
+
+### Features
+
+* support top-level functions of the kernel domain ([db45b06](https://github.com/astrale-os/kernel/commit/db45b061d0a7562950277344778991592f0a19eb))

package/dist/v1/builder/class/authoring.d.ts

@@ -53,6 +53,7 @@ export interface EdgeClassOptions {
     readonly extends?: readonly EdgeClassReferenceInput[];
     readonly properties?: PropertyRecordInput;
     readonly policies?: {
+        readonly read?: Lazy<Policy>;
         readonly traverse?: Lazy<Policy>;
     };
     readonly constraints?: {

package/dist/v1/builder/class/authoring.js

@@ -114,7 +114,7 @@ function validateEdgeClassOptions(value) {
         'constraints',
     ]);
     if (value.policies !== undefined)
-        assertKnownKeys(value.policies, ['traverse']);
+        assertKnownKeys(value.policies, ['read', 'traverse']);
     if (value.constraints !== undefined)
         assertKnownKeys(value.constraints, ['noSelf', 'acyclic']);
 }
@@ -128,7 +128,7 @@ function validateUndirectedEdgeClassOptions(value) {
         'constraints',
     ]);
     if (value.policies !== undefined)
-        assertKnownKeys(value.policies, ['traverse']);
+        assertKnownKeys(value.policies, ['read', 'traverse']);
     if (value.constraints !== undefined)
         assertKnownKeys(value.constraints, ['noSelf']);
 }

package/dist/v1/builder/class/property.d.ts

@@ -6,7 +6,6 @@ declare const PROPERTY_INPUT: unique symbol;
 declare const AUTO_INPUT: unique symbol;
 export type ValueSchemaInput = z.ZodType | JsonSchema;
 export interface PropertyOptions {
-    readonly visibility?: 'public' | 'private';
     readonly required?: boolean;
     readonly description?: string;
 }

package/dist/v1/builder/class/property.js

@@ -10,14 +10,11 @@ export function autoPropertyAuthoringInput(value) {
 }
 export function property(schema, options) {
     const admitted = options ?? {};
-    assertKnownKeys(admitted, ['visibility', 'required', 'description']);
+    assertKnownKeys(admitted, ['required', 'description']);
     return authoringValue('property', {
         [PROPERTY_INPUT]: {
             schema,
-            options: {
-                ...admitted,
-                visibility: admitted.visibility ?? 'public',
-            },
+            options: admitted,
         },
     });
 }

package/dist/v1/builder/lowering/class.js

@@ -76,11 +76,16 @@ export class V1DefinitionCompiler {
             extends: this.parents(input.extends, 'edge', `${pointer}/extends`),
             properties: facet,
             ...contract,
-            policies: input.policies?.traverse === undefined
-                ? {}
-                : {
-                    traverse: this.policies.ref(input.policies.traverse, `${pointer}/policies/traverse`),
-                },
+            policies: {
+                ...(input.policies?.read === undefined
+                    ? {}
+                    : { read: this.policies.ref(input.policies.read, `${pointer}/policies/read`) }),
+                ...(input.policies?.traverse === undefined
+                    ? {}
+                    : {
+                        traverse: this.policies.ref(input.policies.traverse, `${pointer}/policies/traverse`),
+                    }),
+            },
         };
     }
     endpointBase(value, pointer) {

package/dist/v1/builder/lowering/value/compile.js

@@ -36,7 +36,6 @@ export class BuilderValueSchemas {
             compiled[name] = {
                 schema: canonicalizeValueSchema(schema, 'property-facet', this.registry),
                 required: authoredInput?.options.required ?? isRequired(schemaInput),
-                visibility: authoredInput?.options.visibility ?? 'public',
                 ...(autoInput === undefined ? {} : { auto: autoInput.options }),
                 ...(authoredInput?.options.description === undefined
                     ? {}

package/dist/v1/compiled/admission/accept.js

@@ -166,7 +166,7 @@ function compiledClass(input, values, path) {
         if (value.data !== undefined)
             dataDefinition(value.data, `${path}/data`);
         boundedString(value.icon, 1, 8000, 'Class icon', `${path}/icon`);
-        classPolicies(value.policies, true, `${path}/policies`);
+        classPolicies(value.policies, `${path}/policies`);
         const methodsPath = `${path}/methods`;
         const methods = array(value.methods, 'Class methods', methodsPath);
         for (const [index, method] of methods.entries())
@@ -174,7 +174,7 @@ function compiledClass(input, values, path) {
         unique(methods.map((method, index) => string(object(method, 'Compiled Method', `${methodsPath}/${index}`).name, 'Method name', `${methodsPath}/${index}/name`)), 'Class Methods', methodsPath);
     }
     else {
-        classPolicies(value.policies, false, `${path}/policies`);
+        classPolicies(value.policies, `${path}/policies`);
         edgeContract(value, path);
     }
     return value;
@@ -187,16 +187,13 @@ function compiledFunction(input, values, path) {
 }
 function compiledProperty(input, values, path) {
     const value = object(input, 'Compiled Property', path);
-    exact(value, ['name', 'required', 'visibility', 'value'], 'Compiled Property', path, [
+    exact(value, ['name', 'required', 'value'], 'Compiled Property', path, [
         'auto',
         'description',
         'ordering',
     ]);
     memberName(value.name, 'Property name', `${path}/name`);
     boolean(value.required, 'Property required', `${path}/required`);
-    if (value.visibility !== 'public' && value.visibility !== 'private') {
-        invalid('Property visibility', undefined, `${path}/visibility`);
-    }
     description(value.description, 'Property description', `${path}/description`);
     if (value.auto !== undefined)
         propertyAuto(value.auto, `${path}/auto`);
@@ -313,9 +310,9 @@ function propertyAuto(input, path) {
     if (value.set !== 'instant')
         invalid('Property auto setter', undefined, `${path}/set`);
 }
-function classPolicies(input, node, path) {
+function classPolicies(input, path) {
     const value = object(input, 'Class Policies', path);
-    exact(value, [], 'Class Policies', path, node ? ['read', 'traverse'] : ['traverse']);
+    exact(value, [], 'Class Policies', path, ['read', 'traverse']);
     if (value.read !== undefined)
         definitionRef(value.read, 'policy', 'Class read Policy', `${path}/read`);
     if (value.traverse !== undefined)

package/dist/v1/compiled/admission/semantics.js

@@ -248,7 +248,29 @@ function edgeRefines(context, child, parent) {
         return false;
     const refine = (a, b) => endpointRefines(context, child.endpoints[a], parent.endpoints[b]) &&
         countRefines(child.endpoints[a].incident, parent.endpoints[b].incident);
-    return (refine(0, 0) && refine(1, 1)) || (refine(0, 1) && refine(1, 0));
+    const direct = refine(0, 0) && refine(1, 1);
+    if (direct)
+        return true;
+    const reverse = refine(0, 1) && refine(1, 0);
+    return reverse && !hasEffectiveEdgePolicy(context, parent, new Set());
+}
+function hasEffectiveEdgePolicy(context, declaration, visited) {
+    if (declaration.policies.read !== undefined || declaration.policies.traverse !== undefined) {
+        return true;
+    }
+    for (const parentRef of declaration.extends) {
+        const key = Key.of(parentRef);
+        if (visited.has(key))
+            continue;
+        visited.add(key);
+        const parent = context.classes.get(key)?.value;
+        if (parent !== undefined &&
+            isCompiledEdge(parent) &&
+            hasEffectiveEdgePolicy(context, parent, visited)) {
+            return true;
+        }
+    }
+    return false;
 }
 function endpointRefines(context, child, parent) {
     return child.accepts.every((accepted) => classSatisfiesAny(context, accepted, parent.accepts));
@@ -502,16 +524,15 @@ function validatePolicyParity(context, entry, entryIndex, policies) {
         }
     }
     for (const [classIndex, definition] of entry.definitions.classes.entries()) {
-        if (definition.kind === 'node' && definition.policies.read !== undefined) {
-            if (!typing.policyAccepts(definition.policies.read.name, { kind: 'exact', ref: definition.ref })) {
-                fail(`/closure/${entryIndex}/definitions/classes/${classIndex}/policies/read`, 'Read Policy is incompatible with its protected Node Class.');
-            }
-        }
-        const traverse = definition.policies.traverse;
-        if (traverse !== undefined) {
+        for (const operation of ['read', 'traverse']) {
+            const policy = definition.policies[operation];
+            if (policy === undefined)
+                continue;
+            const path = `/closure/${entryIndex}/definitions/classes/${classIndex}/policies/${operation}`;
+            const label = operation === 'read' ? 'Read' : 'Traverse';
             if (definition.kind === 'node') {
-                if (!typing.policyAccepts(traverse.name, { kind: 'exact', ref: definition.ref })) {
-                    fail(`/closure/${entryIndex}/definitions/classes/${classIndex}/policies/traverse`, 'Traverse Policy is incompatible with its protected Node Class.');
+                if (!typing.policyAccepts(policy.name, { kind: 'exact', ref: definition.ref })) {
+                    fail(path, `${label} Policy is incompatible with its protected Node Class.`);
                 }
             }
             else if (isCompiledEdge(definition)) {
@@ -520,8 +541,8 @@ function validatePolicyParity(context, entry, entryIndex, policies) {
                     : definition.endpoints;
                 const sources = typing.concreteEndpointClasses(endpoints[0].accepts);
                 const targets = typing.concreteEndpointClasses(endpoints[1].accepts);
-                if (sources.some((source) => targets.some((target) => !typing.policyAcceptsEdge(traverse.name, { kind: 'exact', ref: source }, { kind: 'exact', ref: target })))) {
-                    fail(`/closure/${entryIndex}/definitions/classes/${classIndex}/policies/traverse`, 'Traverse Policy is incompatible with an accepted Edge endpoint pair.');
+                if (sources.some((source) => targets.some((target) => !typing.policyAcceptsEdge(policy.name, { kind: 'exact', ref: source }, { kind: 'exact', ref: target })))) {
+                    fail(path, `${label} Policy is incompatible with an accepted Edge endpoint pair.`);
                 }
             }
         }

package/dist/v1/compiled/compiler/compile.js

@@ -37,7 +37,6 @@ function compileEntry(schema, lookup) {
         return {
             name,
             required: property.required,
-            visibility: property.visibility,
             ...(property.auto === undefined ? {} : { auto: property.auto }),
             ...(property.description === undefined ? {} : { description: property.description }),
             ...(ordering === undefined ? {} : { ordering }),

package/dist/v1/domain/projection/classes.js

@@ -25,12 +25,10 @@ export function createClasses(definitions, validation) {
         }
         const shell = {};
         const policies = Object.freeze({
-            read: Object.freeze(definition.kind === 'node'
-                ? uniquePolicyRefs([
-                    ...parents.flatMap((parent) => parent.kind === 'node' ? [...parent.policies.read] : []),
-                    ...(definition.policies.read === undefined ? [] : [definition.policies.read]),
-                ])
-                : []),
+            read: Object.freeze(uniquePolicyRefs([
+                ...parents.flatMap((parent) => [...parent.policies.read]),
+                ...(definition.policies.read === undefined ? [] : [definition.policies.read]),
+            ])),
             traverse: Object.freeze(uniquePolicyRefs([
                 ...parents.flatMap((parent) => [...parent.policies.traverse]),
                 ...(definition.policies.traverse === undefined ? [] : [definition.policies.traverse]),

package/dist/v1/language/class/model/class.d.ts

@@ -9,6 +9,7 @@ export interface NodeClassPolicies {
     readonly traverse?: PolicyRef;
 }
 export interface EdgeClassPolicies {
+    readonly read?: PolicyRef;
     readonly traverse?: PolicyRef;
 }
 export interface NodeClassDefinition extends DefinitionBase<ClassRef>, PropertyFacet, DataFacet {

package/dist/v1/language/class/model/property.d.ts

@@ -1,4 +1,3 @@
-export type PropertyVisibility = 'public' | 'private';
 export type AutoEvent = 'create' | 'update';
 export type AutoSet = 'instant';
 export interface PropertyAuto {
@@ -8,7 +7,6 @@ export interface PropertyAuto {
 export interface PropertyDefinition {
     readonly schema: import('../../value/model/schema.js').JsonSchema;
     readonly required: boolean;
-    readonly visibility: PropertyVisibility;
     readonly auto?: PropertyAuto;
     readonly description?: string;
 }

package/dist/v1/language/class/resolved.d.ts

@@ -23,8 +23,9 @@ export interface ResolvedData {
     readonly owner: ResolvedClass<'node'>;
     readonly definition: DataDefinition;
 }
-export interface ResolvedClassPolicies<Kind extends ClassKind = ClassKind> {
-    readonly read: Kind extends 'node' ? readonly PolicyRef[] : readonly [];
+export interface ResolvedClassPolicies {
+    /** Effective read Policies for this Node or Edge Class. */
+    readonly read: readonly PolicyRef[];
     readonly traverse: readonly PolicyRef[];
 }
 export type ResolvedPropertyCollection<ByKey extends Readonly<Record<PropertyKey, ResolvedProperty<unknown>>> = Readonly<Record<PropertyKey, ResolvedProperty<unknown>>>, ByName extends Readonly<Record<string, ResolvedProperty<unknown>>> = Readonly<Record<never, never>>> = Readonly<ByName> & Iterable<ByKey[keyof ByKey]> & {
@@ -45,7 +46,7 @@ export interface ResolvedClass<Kind extends ClassKind = ClassKind, Properties ex
     readonly definition: Definition;
     readonly extends: Parents & readonly ResolvedClass<Kind>[];
     /** Effective inherited Policy conjunction, deduplicated by exact Policy ref. */
-    readonly policies: ResolvedClassPolicies<Kind>;
+    readonly policies: ResolvedClassPolicies;
     readonly data: Kind extends 'node' ? ResolvedData | undefined : undefined;
     readonly properties: Properties;
     readonly methods: Kind extends 'node' ? InstanceMethods : ResolvedMethodCollection<Record<never, never>>;

package/dist/v1/schema/analysis/class.d.ts

@@ -13,7 +13,6 @@ export interface EffectiveField {
     readonly name: string;
     readonly schema: JsonSchema;
     readonly required: boolean;
-    readonly visibility: 'public' | 'private';
     readonly auto?: PropertyAuto;
 }
 export interface EffectiveMethod {

package/dist/v1/schema/analysis/class.js

@@ -62,7 +62,6 @@ function ownFields(owner, declaration) {
             name,
             schema: property.schema,
             required: property.required,
-            visibility: property.visibility,
             ...(property.auto === undefined ? {} : { auto: property.auto }),
         });
     }

package/dist/v1/schema/compatibility/meaning.js

@@ -371,7 +371,6 @@ function propertyMeaning(field) {
         name: field.name,
         schema: semanticValueSchema(field.schema),
         required: field.required,
-        visibility: field.visibility,
     };
 }
 function methodMeaning(method) {

package/dist/v1/schema/normalization/domain.js

@@ -123,7 +123,6 @@ function canonicalizeProperty(value) {
     return {
         schema: canonicalizeValueSchema(value.schema, 'property-facet'),
         required: value.required,
-        visibility: value.visibility,
         ...(value.auto === undefined
             ? {}
             : {

package/dist/v1/schema/resolution/origins.js

@@ -40,17 +40,15 @@ export function collectDomainDefinitionRefs(schema) {
 export function collectClassRefs(declaration, add) {
     declaration.extends.forEach(add);
     Object.values(declaration.properties).forEach((property) => collectValueDefinitionRefs(property.schema, add));
+    if (declaration.policies.read !== undefined)
+        add(declaration.policies.read);
+    if (declaration.policies.traverse !== undefined)
+        add(declaration.policies.traverse);
     if (declaration.kind === 'edge') {
         collectEndpointRefs(declaration, add);
-        if (declaration.policies.traverse !== undefined)
-            add(declaration.policies.traverse);
         return;
     }
     Object.values(declaration.methods).forEach((method) => collectCallableRefs(method, add));
-    if (declaration.policies.read !== undefined)
-        add(declaration.policies.read);
-    if (declaration.policies.traverse !== undefined)
-        add(declaration.policies.traverse);
 }
 function collectEndpointRefs(declaration, add) {
     const endpoints = declaration.orientation === 'directed'

package/dist/v1/schema/validation/class.js

@@ -130,7 +130,30 @@ function edgeContractRefines(environment, child, parent) {
         return false;
     const refines = (childIndex, parentIndex) => endpointRefines(environment, child.endpoints[childIndex], parent.endpoints[parentIndex]) &&
         countRefines(child.endpoints[childIndex].incident, parent.endpoints[parentIndex].incident);
-    return (refines(0, 0) && refines(1, 1)) || (refines(0, 1) && refines(1, 0));
+    const direct = refines(0, 0) && refines(1, 1);
+    if (direct)
+        return true;
+    const reverse = refines(0, 1) && refines(1, 0);
+    return reverse && !hasEffectiveEdgePolicy(environment, parent, new Set());
+}
+function hasEffectiveEdgePolicy(environment, declaration, visited) {
+    if (declaration.policies.read !== undefined || declaration.policies.traverse !== undefined) {
+        return true;
+    }
+    for (const parentRef of declaration.extends) {
+        const key = definitionRefIndex(parentRef);
+        if (visited.has(key))
+            continue;
+        visited.add(key);
+        const parent = environment.resolveAny(parentRef);
+        if (parent !== undefined &&
+            parent.ref.kind === 'class' &&
+            parent.declaration.kind === 'edge' &&
+            hasEffectiveEdgePolicy(environment, parent.declaration, visited)) {
+            return true;
+        }
+    }
+    return false;
 }
 function endpointRefines(environment, child, parent) {
     return child.accepts.every((accepted) => classSatisfies(environment, accepted, parent.accepts));

package/dist/v1/schema/validation/domain.structure.js

@@ -37,7 +37,6 @@ const dataDeclarationSchema = z.strictObject({
 const propertyDefinitionSchema = z.strictObject({
     schema: jsonSchemaSchema,
     required: z.boolean(),
-    visibility: z.enum(['public', 'private']),
     auto: z
         .strictObject({
         on: uniqueArray(z.enum(['create', 'update'])).min(1),
@@ -203,6 +202,7 @@ const nodeClassPoliciesSchema = z.strictObject({
     traverse: policyRefSchema.optional(),
 });
 const edgeClassPoliciesSchema = z.strictObject({
+    read: policyRefSchema.optional(),
     traverse: policyRefSchema.optional(),
 });
 const nodeClassSchema = z.strictObject({

package/dist/v1/schema/validation/policy/uses.js

@@ -12,29 +12,17 @@ const PROJECTION_FUNCTION = nodeClassRef('Function');
 const PROJECTION_POLICY = nodeClassRef('Policy');
 const PROJECTION_VIEW = nodeClassRef('View');
 export function validateReadUses(context, typing) {
-    for (const [name, declaration] of Object.entries(context.environment.candidate.classes)) {
-        if (declaration.kind !== 'node' || declaration.policies.read === undefined) {
-            continue;
-        }
-        const pointer = `/classes/${escapePointer(name)}/policies/read`;
-        const ref = declaration.policies.read;
-        if (!context.resolvePolicy(ref, pointer))
-            continue;
-        const object = {
-            kind: 'exact',
-            ref: { origin: context.environment.candidate.origin, kind: 'class', name },
-        };
-        if (!typing.policyAccepts(ref.name, object)) {
-            context.add('PL_USE', pointer, `${formatDefinitionRef(ref)} is not valid for every normalized branch of protected Class ${name}.`, formatDefinitionRef(ref));
-        }
-    }
+    validateClassPolicyUses(context, typing, 'read');
 }
 export function validateTraverseUses(context, typing) {
+    validateClassPolicyUses(context, typing, 'traverse');
+}
+function validateClassPolicyUses(context, typing, operation) {
     for (const [name, declaration] of Object.entries(context.environment.candidate.classes)) {
-        const ref = declaration.policies.traverse;
+        const ref = declaration.policies[operation];
         if (ref === undefined)
             continue;
-        const pointer = `/classes/${escapePointer(name)}/policies/traverse`;
+        const pointer = `/classes/${escapePointer(name)}/policies/${operation}`;
         if (!context.resolvePolicy(ref, pointer))
             continue;
         if (declaration.kind === 'node') {
@@ -42,9 +30,9 @@ export function validateTraverseUses(context, typing) {
                 kind: 'exact',
                 ref: { origin: context.environment.candidate.origin, kind: 'class', name },
             };
-            if (!typing.policyAccepts(ref.name, object)) {
-                context.add('PL_USE', pointer, `${formatDefinitionRef(ref)} is not valid for every normalized branch of traversed Node Class ${name}.`, formatDefinitionRef(ref));
-            }
+            if (typing.policyAccepts(ref.name, object))
+                continue;
+            context.add('PL_USE', pointer, `${formatDefinitionRef(ref)} is not valid for every normalized branch of ${operation} Node Class ${name}.`, formatDefinitionRef(ref));
             continue;
         }
         const endpoints = declaration.orientation === 'directed'
@@ -52,19 +40,9 @@ export function validateTraverseUses(context, typing) {
             : declaration.endpoints;
         const sources = typing.concreteEndpointClasses(endpoints[0].accepts);
         const targets = typing.concreteEndpointClasses(endpoints[1].accepts);
-        let accepted = true;
-        for (const source of sources) {
-            for (const target of targets) {
-                if (!typing.policyAcceptsEdge(ref.name, { kind: 'exact', ref: source }, { kind: 'exact', ref: target })) {
-                    accepted = false;
-                    break;
-                }
-            }
-            if (!accepted)
-                break;
-        }
+        const accepted = sources.every((source) => targets.every((target) => typing.policyAcceptsEdge(ref.name, { kind: 'exact', ref: source }, { kind: 'exact', ref: target })));
         if (!accepted) {
-            context.add('PL_USE', pointer, `${formatDefinitionRef(ref)} is not valid for every concrete source/target pair of traversed Edge Class ${name}.`, formatDefinitionRef(ref));
+            context.add('PL_USE', pointer, `${formatDefinitionRef(ref)} is not valid for every concrete source/target pair of ${operation} Edge Class ${name}.`, formatDefinitionRef(ref));
         }
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-dsl",
-  "version": "0.2.0-beta.14",
+  "version": "0.2.0-beta.17",
   "description": "Astrale Kernel DSL - Schema authoring, inference, and IR serialization",
   "license": "Apache-2.0",
   "repository": {