@astrale-os/kernel-dsl 0.2.0-beta.22 → 0.2.0-beta.24

package/dist/v1/builder/index.d.ts

@@ -17,7 +17,7 @@ export type { CoreEdge, CoreEndpoint, CoreInput, CoreNode } from './core/authori
 export type { AuthoredPropertyProjection, AuthoredMethodProjection, Class, ClassIdentityProjection, ClassOwnerProjection, ClassReferenceProjection, ClassReferenceInput as ClassReference, DirectedEdgeInput, DirectedEdgeClass, DirectedSourceInput, DirectedTargetInput, EdgeClassCommon, EdgeClassInput, EdgeClass, EdgeClassReferenceInput as EdgeClassReference, IncidentEndpointInput, NodeClass, NodeClassInput, NodeClassReferenceInput as NodeClassReference, UndirectedEdgeInput, UndirectedEdgeClass, } from './class/authoring.js';
 export type { PathAuthoring } from './value/path.js';
 export type { Lazy } from './schema/lazy.js';
-export type { MatchPolicyInput, Policy, PolicyBuilder as PolicyFactory, PolicyEdgeInput, PolicyExistsContext, PolicyInput, PolicyPatternContext, } from './policy/authoring.js';
+export type { MatchPolicyInput, Policy, PolicyBuilder as PolicyFactory, PolicyEdgeInput, PolicyExistsContext, PolicyInput, PolicyNodeBinder, PolicyPatternContext, } from './policy/authoring.js';
 export type { AutoOptions, AutoProperty, Property, PropertyFieldInput as PropertyField, PropertyOptions, ValueSchemaInput, } from './class/property.js';
 export type { CorePropertyInput } from './schema/projection.js';
 export type { ClassProjection, FunctionProjection, MethodProjection, PropertyProjection, } from './schema/projection.js';

package/dist/v1/builder/policy/authoring.d.ts

@@ -12,8 +12,13 @@ export interface PolicyEdgeInput {
         readonly max: number;
     };
 }
+export interface PolicyNodeBinder {
+    (): CanonicalPolicyPatternTerm;
+    (definition: Lazy<NodeClass>): CanonicalPolicyPatternTerm;
+    readonly exact: (definition: Lazy<NodeClass>) => CanonicalPolicyPatternTerm;
+}
 export interface PolicyExistsContext {
-    node(definition: Lazy<NodeClass>): CanonicalPolicyPatternTerm;
+    readonly node: PolicyNodeBinder;
 }
 export interface PolicyPatternContext {
     readonly subject: CanonicalPolicyPatternTerm;

package/dist/v1/builder/policy/authoring.js

@@ -49,16 +49,36 @@ export function createPatternContext(options) {
         },
         exists(build) {
             const nodes = [];
-            const where = build({
-                node(definition) {
-                    const variable = Object.freeze({ kind: 'variable', id: nextVariable++ });
-                    nodes.push({
-                        variable,
-                        class: options.resolveNodeClass(definition, `${options.pointer}/match/exists/nodes`),
-                    });
-                    return variable;
+            const bind = (selector, definition) => {
+                const variable = Object.freeze({ kind: 'variable', id: nextVariable++ });
+                if (selector === 'any') {
+                    nodes.push({ variable, selector: Object.freeze({ kind: 'any' }) });
+                }
+                else {
+                    const classRef = options.resolveNodeClass(definition, `${options.pointer}/match/exists/nodes`);
+                    nodes.push(selector === 'exact'
+                        ? { variable, class: classRef }
+                        : { variable, selector: Object.freeze({ kind: 'satisfies', class: classRef }) });
+                }
+                return variable;
+            };
+            const node = function (...args) {
+                if (args.length > 1 || (args.length === 1 && args[0] === undefined)) {
+                    fail('BUILDER_POLICY', `${options.pointer}/match/exists/nodes`, 'node(...) accepts either no arguments or one Node Class.');
+                }
+                return args.length === 0 ? bind('any') : bind('satisfies', args[0]);
+            };
+            Object.defineProperty(node, 'exact', {
+                enumerable: true,
+                value(definition) {
+                    if (arguments.length !== 1 || definition === undefined) {
+                        fail('BUILDER_POLICY', `${options.pointer}/match/exists/nodes`, 'node.exact(...) requires exactly one Node Class.');
+                    }
+                    return bind('exact', definition);
                 },
             });
+            Object.freeze(node);
+            const where = build({ node });
             if (nodes.length === 0) {
                 fail('BUILDER_POLICY_EMPTY_EXISTS', `${options.pointer}/match/exists/nodes`, 'exists(...) must declare at least one variable Node.');
             }

package/dist/v1/compiled/admission/accept.js

@@ -433,9 +433,26 @@ function policyPattern(input, depth, path) {
         for (const [index, node] of nodes.entries()) {
             const variablePath = `${nodesPath}/${index}`;
             const variable = object(node, 'Policy variable', variablePath);
-            exact(variable, ['variable', 'class'], 'Policy variable', variablePath);
             policyTerm(variable.variable, true, `${variablePath}/variable`);
-            definitionRef(variable.class, 'class', 'Policy variable Class', `${variablePath}/class`);
+            if (Object.hasOwn(variable, 'class')) {
+                exact(variable, ['variable', 'class'], 'Policy variable', variablePath);
+                definitionRef(variable.class, 'class', 'Policy variable Class', `${variablePath}/class`);
+            }
+            else {
+                exact(variable, ['variable', 'selector'], 'Policy variable', variablePath);
+                const selectorPath = `${variablePath}/selector`;
+                const selector = object(variable.selector, 'Policy variable selector', selectorPath);
+                if (selector.kind === 'any') {
+                    exact(selector, ['kind'], 'Policy variable selector', selectorPath);
+                }
+                else if (selector.kind === 'satisfies') {
+                    exact(selector, ['kind', 'class'], 'Policy variable selector', selectorPath);
+                    definitionRef(selector.class, 'class', 'Policy variable selector Class', `${selectorPath}/class`);
+                }
+                else {
+                    invalid('Policy variable selector kind', undefined, `${selectorPath}/kind`);
+                }
+            }
         }
         policyPattern(exists.where, depth + 1, `${existsPath}/where`);
         return;

package/dist/v1/compiled/admission/semantics.js

@@ -3,6 +3,7 @@ import { Key, PropertyKey as PropertyKeyValue } from '../../addressing/index.js'
 import { compareUnicode } from '../../addressing/ordering.js';
 import { branchesOf, branchProduct, capBranches, isConnected, targetMode, termKey, } from '../../language/policy/analysis/branches.js';
 import { BRANCH_OVERFLOW, MAX_BRANCHES, MAX_CHECK_DEPTH, MAX_CHECK_LEAVES, MAX_DOMAINS, MAX_EDGES, MAX_PATTERN_DEPTH, MAX_REPEAT, MAX_VARIABLES, measureChecks, } from '../../language/policy/analysis/budgets.js';
+import { policyVariableClass } from '../../language/policy/model/policy.js';
 import { normalizePolicyChecks, normalizePolicyExpression, } from '../../language/policy/normalization/normalize.js';
 import { validateValueProgram } from '../../language/value/evaluate/program.js';
 import { GRAPH_NODE_PATH_SCHEMA_ID } from '../../language/value/syntax/node-path/schema.js';
@@ -386,8 +387,9 @@ function validatePattern(context, expression, path, scope, declared) {
                 fail(`${path}/exists/nodes/${index}/variable/id`, 'Policy variable IDs must be globally unique and cannot shadow.');
             declared.add(id);
             nested.add(id);
-            if (context.classes.get(Key.of(node.class))?.value.kind !== 'node')
-                fail(`${path}/exists/nodes/${index}/class`, 'Policy variable Class must resolve to a Node Class.');
+            const classRef = policyVariableClass(node);
+            if (classRef !== undefined && context.classes.get(Key.of(classRef))?.value.kind !== 'node')
+                fail(`${path}/exists/nodes/${index}/${'class' in node ? 'class' : 'selector/class'}`, 'Policy variable Class must resolve to a Node Class.');
         }
         validatePattern(context, expression.exists.where, `${path}/exists/where`, nested, declared);
         return;
@@ -732,8 +734,14 @@ class CompiledPolicyTyping {
                 ? this.applyExact(candidates, contract.ref)
                 : uniqueCompiledCandidates(this.allNodeClasses.flatMap((ref) => this.applyExact(candidates, ref)));
         }
-        const exact = branch.variables.get(term);
-        return exact === undefined ? [] : this.applyExact(candidates, exact);
+        const selector = branch.variables.get(term);
+        if (selector === undefined)
+            return [];
+        if (selector.kind === 'exact')
+            return this.applyExact(candidates, selector.class);
+        if (selector.kind === 'any')
+            return candidates;
+        return this.applyRequirement(candidates, selector.class);
     }
     applyExact(candidates, exact) {
         return uniqueCompiledCandidates(candidates.flatMap((candidate) => {
@@ -751,6 +759,22 @@ class CompiledPolicyTyping {
                 .filter((ref) => candidate.requirements.every((required) => classSatisfiesAny(this.context, ref, [required])))
                 .map((ref) => ({ kind: 'exact', ref }))));
     }
+    applyRequirement(candidates, required) {
+        const result = [];
+        for (const candidate of candidates) {
+            if (candidate.kind === 'exact') {
+                if (classSatisfiesAny(this.context, candidate.ref, [required]))
+                    result.push(candidate);
+            }
+            else {
+                result.push({
+                    kind: 'open',
+                    requirements: uniqueClassRefs([...candidate.requirements, required]),
+                });
+            }
+        }
+        return uniqueCompiledCandidates(result);
+    }
     applyEndpoint(candidates, accepts) {
         const result = [];
         for (const candidate of candidates) {
@@ -873,7 +897,10 @@ function measureCompiledPattern(pattern, origin) {
             edgeCounts: child.edgeCounts,
             domains: new Set([
                 ...child.domains,
-                ...pattern.exists.nodes.map(({ class: ref }) => ref.origin),
+                ...pattern.exists.nodes.flatMap((node) => {
+                    const ref = policyVariableClass(node);
+                    return ref === undefined ? [] : [ref.origin];
+                }),
             ]),
         };
     }

package/dist/v1/language/index.d.ts

@@ -20,6 +20,7 @@ export type { Definition } from './definition.js';
 export type { ResolvedDefinition, ResolvedDefinitionOf } from './resolved.js';
 export type { Diagnostic, DiagnosticCode } from './validation/diagnostic.js';
 export type * from './policy/model/policy.js';
+export { policyVariableClass, policyVariableSelector } from './policy/model/policy.js';
 export type * from './policy/resolved.js';
 export type * from './view/model/view.js';
 export type * from './view/resolved.js';

package/dist/v1/language/index.js

@@ -1,2 +1,3 @@
 export { stateMachine } from './state/index.js';
 export { PropertyValues } from './class/property-values.js';
+export { policyVariableClass, policyVariableSelector } from './policy/model/policy.js';

package/dist/v1/language/policy/analysis/branches.d.ts

@@ -1,8 +1,7 @@
-import type { ClassRef } from '../../../addressing/index.js';
-import type { PolicyEdgePattern, PolicyPatternExpression, PolicyPatternTerm } from '../model/policy.js';
+import type { PolicyEdgePattern, PolicyPatternExpression, PolicyPatternTerm, PolicyVariableSelector } from '../model/policy.js';
 export interface PatternBranch {
     readonly edges: readonly PatternEdgeUse[];
-    readonly variables: ReadonlyMap<string, ClassRef>;
+    readonly variables: ReadonlyMap<string, PolicyVariableSelector>;
     readonly requiredVariables: ReadonlySet<string>;
     readonly namespace: string;
 }

package/dist/v1/language/policy/analysis/branches.js

@@ -1,3 +1,4 @@
+import { policyVariableSelector } from '../model/policy.js';
 import { BRANCH_OVERFLOW } from './budgets.js';
 export function branchesOf(pattern, namespace) {
     const variables = collectVariableClasses(pattern, namespace);
@@ -96,7 +97,7 @@ function collectVariableClasses(pattern, namespace) {
     const visit = (node) => {
         if ('exists' in node) {
             for (const variable of node.exists.nodes) {
-                result.set(variableKey(namespace, variable.variable.id), variable.class);
+                result.set(variableKey(namespace, variable.variable.id), policyVariableSelector(variable));
             }
             visit(node.exists.where);
         }

package/dist/v1/language/policy/index.d.ts

@@ -1,3 +1,4 @@
 export type * from './model/policy.js';
+export { policyVariableClass, policyVariableSelector } from './model/policy.js';
 export type * from './resolved.js';
 export * from './normalization/normalize.js';

package/dist/v1/language/policy/index.js

@@ -1 +1,2 @@
+export { policyVariableClass, policyVariableSelector } from './model/policy.js';
 export * from './normalization/normalize.js';

package/dist/v1/language/policy/model/policy.d.ts

@@ -11,13 +11,38 @@ export type PolicyPatternTerm = {
     readonly kind: 'variable';
     readonly id: number;
 };
-export interface PolicyVariable {
+export interface ExactPolicyVariable {
     readonly variable: {
         readonly kind: 'variable';
         readonly id: number;
     };
     readonly class: ClassRef;
 }
+export interface SelectedPolicyVariable {
+    readonly variable: {
+        readonly kind: 'variable';
+        readonly id: number;
+    };
+    readonly selector: {
+        readonly kind: 'any';
+    } | {
+        readonly kind: 'satisfies';
+        readonly class: ClassRef;
+    };
+}
+/**
+ * An existential Node binding. The class-bearing legacy form is deliberately retained as the
+ * canonical exact selector so persisted V1 DomainSchema documents keep their original meaning.
+ */
+export type PolicyVariable = ExactPolicyVariable | SelectedPolicyVariable;
+export type PolicyVariableSelector = {
+    readonly kind: 'exact';
+    readonly class: ClassRef;
+} | SelectedPolicyVariable['selector'];
+/** Resolve the semantic selector while preserving the legacy exact wire representation. */
+export declare function policyVariableSelector(variable: PolicyVariable): PolicyVariableSelector;
+/** Return the selector's referenced Class, when it has one. */
+export declare function policyVariableClass(variable: PolicyVariable): ClassRef | undefined;
 export interface PolicyRepeat {
     readonly min: number;
     readonly max: number;

package/dist/v1/language/policy/model/policy.js

@@ -1 +1,9 @@
-export {};
+/** Resolve the semantic selector while preserving the legacy exact wire representation. */
+export function policyVariableSelector(variable) {
+    return 'class' in variable ? { kind: 'exact', class: variable.class } : variable.selector;
+}
+/** Return the selector's referenced Class, when it has one. */
+export function policyVariableClass(variable) {
+    const selector = policyVariableSelector(variable);
+    return selector.kind === 'any' ? undefined : selector.class;
+}

package/dist/v1/language/policy/normalization/normalize.js

@@ -1,5 +1,6 @@
 import { json } from '@astrale-os/kernel-dsl/value';
 import { definitionRefIndex, compareDefinitionRefs } from '../../../addressing/ordering.js';
+import { policyVariableSelector } from '../model/policy.js';
 const textEncoder = new TextEncoder();
 export function normalizePolicyExpression(value) {
     if ('match' in value) {
@@ -101,7 +102,7 @@ function canonicalVariableIds(value) {
 function collectDeclarations(value, result) {
     if ('exists' in value) {
         for (const node of value.exists.nodes) {
-            result.set(node.variable.id, definitionRefIndex(node.class));
+            result.set(node.variable.id, selectorSignature(node));
         }
         collectDeclarations(value.exists.where, result);
         return;
@@ -186,10 +187,15 @@ function rewriteVariables(value, ids) {
     if ('exists' in value) {
         return {
             exists: {
-                nodes: value.exists.nodes.map((node) => ({
-                    variable: { kind: 'variable', id: ids.get(node.variable.id) ?? node.variable.id },
-                    class: node.class,
-                })),
+                nodes: value.exists.nodes.map((node) => {
+                    const variable = {
+                        kind: 'variable',
+                        id: ids.get(node.variable.id) ?? node.variable.id,
+                    };
+                    return 'class' in node
+                        ? { variable, class: node.class }
+                        : { variable, selector: node.selector };
+                }),
                 where: rewriteVariables(value.exists.where, ids),
             },
         };
@@ -198,6 +204,10 @@ function rewriteVariables(value, ids) {
         return { allOf: value.allOf.map((child) => rewriteVariables(child, ids)) };
     return { anyOf: value.anyOf.map((child) => rewriteVariables(child, ids)) };
 }
+function selectorSignature(node) {
+    const selector = policyVariableSelector(node);
+    return selector.kind === 'any' ? 'any' : `${selector.kind}:${definitionRefIndex(selector.class)}`;
+}
 function rewriteTerm(value, ids) {
     return value.kind === 'variable' ? { kind: 'variable', id: ids.get(value.id) ?? value.id } : value;
 }

package/dist/v1/language/state/machine.d.ts

@@ -1,8 +1,8 @@
 import { type ZodType } from 'zod';
 import type { EventName, StateName, StateTopology, TransitionRelation, ValidTransitionRelation } from './topology.js';
 export interface StateMachine<Transitions extends TransitionRelation = any, Initial extends StateName<Transitions> = StateName<Transitions>> extends StateTopology<Transitions, Initial> {
-    readonly stateSchema: ZodType<StateName<Transitions>>;
-    readonly eventSchema: ZodType<EventName<Transitions>>;
+    readonly stateSchema: ZodType<StateName<Transitions>, StateName<Transitions>>;
+    readonly eventSchema: ZodType<EventName<Transitions>, EventName<Transitions>>;
     eventsFrom<State extends StateName<Transitions>>(state: State): readonly EventName<Transitions, State>[];
     decide<State extends StateName<Transitions>, Event extends EventName<Transitions>>(state: State, event: Event): TransitionDecision<Transitions, State, Event>;
 }

package/dist/v1/schema/resolution/origins.js

@@ -1,4 +1,5 @@
 import { compareDefinitionRefs, definitionRefIndex } from '../../addressing/ordering.js';
+import { policyVariableClass } from '../../language/policy/model/policy.js';
 import { isValueObject as isJsonObject } from '../../language/value/model/object.js';
 import { walkSchema } from '../../language/value/syntax/walk.js';
 /** Collect only semantic refs, never strings or objects embedded as JSON data. */
@@ -83,7 +84,11 @@ function collectPolicyPatternRefs(expression, add) {
         return;
     }
     if ('exists' in expression) {
-        expression.exists.nodes.forEach((node) => add(node.class));
+        expression.exists.nodes.forEach((node) => {
+            const ref = policyVariableClass(node);
+            if (ref !== undefined)
+                add(ref);
+        });
         collectPolicyPatternRefs(expression.exists.where, add);
         return;
     }

package/dist/v1/schema/validation/domain.structure.js

@@ -102,10 +102,14 @@ const policyPatternNodeSchema = discriminatedUnion('kind', [
     policyPatternTargetSchema,
     policyPatternVariableSchema,
 ]);
-const policyVariableSchema = strictObject({
-    variable: policyPatternVariableSchema,
-    class: classRefSchema,
-});
+const policyVariableSelectorSchema = discriminatedUnion('kind', [
+    strictObject({ kind: literal('any') }),
+    strictObject({ kind: literal('satisfies'), class: classRefSchema }),
+]);
+const policyVariableSchema = union([
+    strictObject({ variable: policyPatternVariableSchema, class: classRefSchema }),
+    strictObject({ variable: policyPatternVariableSchema, selector: policyVariableSelectorSchema }),
+]);
 const policyRepeatSchema = strictObject({
     min: number().int().min(0).max(3),
     max: number().int().min(0).max(3),

package/dist/v1/schema/validation/policy/budgets.js

@@ -1,4 +1,5 @@
 import { BRANCH_OVERFLOW, MAX_BRANCHES, MAX_CHECK_DEPTH, MAX_CHECK_LEAVES, MAX_DOMAINS, MAX_EDGES, MAX_PATTERN_DEPTH, MAX_REPEAT, MAX_VARIABLES, measureChecks, } from '../../../language/policy/analysis/budgets.js';
+import { policyVariableClass } from '../../../language/policy/model/policy.js';
 import { escapePointer } from './context.js';
 export { BRANCH_OVERFLOW, MAX_BRANCHES, MAX_CHECK_DEPTH, MAX_CHECK_LEAVES, MAX_DOMAINS, MAX_EDGES, MAX_PATTERN_DEPTH, MAX_REPEAT, MAX_VARIABLES, measureChecks, };
 export function validatePolicyBudgets(context) {
@@ -59,7 +60,10 @@ function measurePattern(pattern, ownOrigin) {
             edgeCounts: child.edgeCounts,
             domains: new Set([
                 ...child.domains,
-                ...pattern.exists.nodes.map((node) => node.class.origin),
+                ...pattern.exists.nodes.flatMap((node) => {
+                    const ref = policyVariableClass(node);
+                    return ref === undefined ? [] : [ref.origin];
+                }),
             ]),
         };
     }

package/dist/v1/schema/validation/policy/references.js

@@ -1,4 +1,5 @@
 import { branchesOf, isConnected, targetMode } from '../../../language/policy/analysis/branches.js';
+import { policyVariableClass } from '../../../language/policy/model/policy.js';
 import { normalizePolicyExpression, normalizePolicyPattern, } from '../../../language/policy/normalization/normalize.js';
 import { MAX_REPEAT, MAX_VARIABLES } from './budgets.js';
 import { escapePointer } from './context.js';
@@ -71,13 +72,16 @@ function validatePatternNode(context, pattern, pointer, scope, declarations, use
                 context.add('PL_VARIABLE_SCOPE', `${declarationPointer}/variable/id`, `Variable ${id} is declared more than once; variable IDs are globally unique.`);
             }
             else {
-                declarations.set(id, { ref: node.class, pointer: declarationPointer });
+                declarations.set(id, { pointer: declarationPointer });
             }
             if (nested.has(id)) {
                 context.add('PL_VARIABLE_SCOPE', `${declarationPointer}/variable/id`, `Variable ${id} shadows an enclosing variable.`);
             }
             nested.add(id);
-            context.resolveNodeClass(node.class, `${declarationPointer}/class`);
+            const classRef = policyVariableClass(node);
+            if (classRef !== undefined) {
+                context.resolveNodeClass(classRef, `${declarationPointer}/${'class' in node ? 'class' : 'selector/class'}`);
+            }
         }
         validatePatternNode(context, pattern.exists.where, `${pointer}/exists/where`, nested, declarations, uses);
         return;

package/dist/v1/schema/validation/policy/typing.js

@@ -136,11 +136,14 @@ export class PolicyTyping {
             }
             return candidates;
         }
-        const exact = this.#exactInitial(term, branch);
-        return exact === undefined ? [] : this.#applyExact(candidates, exact);
-    }
-    #exactInitial(term, branch) {
-        return branch.variables.get(term);
+        const selector = branch.variables.get(term);
+        if (selector === undefined)
+            return [];
+        if (selector.kind === 'exact')
+            return this.#applyExact(candidates, selector.class);
+        if (selector.kind === 'any')
+            return candidates;
+        return this.#applyRequirement(candidates, selector.class);
     }
     #applyExact(candidates, exact) {
         const result = [];
@@ -162,6 +165,22 @@ export class PolicyTyping {
                 .filter((ref) => candidate.requirements.every((required) => this.context.classExtends(ref, required)))
                 .map((ref) => ({ kind: 'exact', ref }))));
     }
+    #applyRequirement(candidates, required) {
+        const result = [];
+        for (const candidate of candidates) {
+            if (candidate.kind === 'exact') {
+                if (this.context.classExtends(candidate.ref, required))
+                    result.push(candidate);
+            }
+            else {
+                result.push({
+                    kind: 'open',
+                    requirements: uniqueClasses([...candidate.requirements, required]),
+                });
+            }
+        }
+        return uniqueCandidates(result);
+    }
     #applyEndpoint(candidates, accepts) {
         const result = [];
         for (const candidate of candidates) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-dsl",
-  "version": "0.2.0-beta.22",
+  "version": "0.2.0-beta.24",
   "description": "Astrale Kernel DSL - Schema authoring, inference, and IR serialization",
   "license": "Apache-2.0",
   "repository": {

package/CHANGELOG.md

@@ -1,254 +0,0 @@
-# Changelog
-
-## [0.2.0-beta.22](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.21...kernel-dsl-v0.2.0-beta.22) (2026-08-31)
-
-
-### Features
-
-* **auth:** enforce two-gate Function authority ([#561](https://github.com/astrale-os/kernel/issues/561)) ([c681d4b](https://github.com/astrale-os/kernel/commit/c681d4b391520906b2cad9171cd251962b200faf))
-
-## [0.2.0-beta.21](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.20...kernel-dsl-v0.2.0-beta.21) (2026-08-30)
-
-
-### Documentation
-
-* **dsl:** correct edge policy consumer census ([#558](https://github.com/astrale-os/kernel/issues/558)) ([badb249](https://github.com/astrale-os/kernel/commit/badb2490419a6d6bd5022c138202056954cf38b6))
-
-## [0.2.0-beta.20](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.19...kernel-dsl-v0.2.0-beta.20) (2026-08-30)
-
-
-### Bug Fixes
-
-* **dsl:** admit endpoint-selective edge policies ([#557](https://github.com/astrale-os/kernel/issues/557)) ([117e8c8](https://github.com/astrale-os/kernel/commit/117e8c888b3911a44a43ffd29572356a8cb03790))
-
-
-### Performance Improvements
-
-* **core:** make Zod imports tree-shakeable ([#553](https://github.com/astrale-os/kernel/issues/553)) ([9f16257](https://github.com/astrale-os/kernel/commit/9f1625735e06331d67731a70be8f56378cd4c67c))
-
-## [0.2.0-beta.19](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.18...kernel-dsl-v0.2.0-beta.19) (2026-08-29)
-
-
-### Bug Fixes
-
-* **system:** clear specification diagnostic debt ([#539](https://github.com/astrale-os/kernel/issues/539)) ([2e88cf5](https://github.com/astrale-os/kernel/commit/2e88cf5a84c7026122f680249bbea20202b92ac6))
-
-## [0.2.0-beta.18](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.17...kernel-dsl-v0.2.0-beta.18) (2026-08-29)
-
-
-### Features
-
-* **dsl:** make StateProperty topology portable ([#534](https://github.com/astrale-os/kernel/issues/534)) ([f71cf87](https://github.com/astrale-os/kernel/commit/f71cf879e68475ffd002cafe6688be0649eb9c49))
-
-## [0.2.0-beta.17](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.16...kernel-dsl-v0.2.0-beta.17) (2026-08-29)
-
-
-### ⚠ BREAKING CHANGES
-
-* View declarations now contain only target and optional description. Legacy View.auth fields are rejected; callable authorization, View.resolve admission, Policies, and Shell handshakes remain independent.
-* **dsl:** make edge direction explicit
-
-### Features
-
-* add aliased domain dependency projection ([afb799b](https://github.com/astrale-os/kernel/commit/afb799b0d61fd6f7436fe659f558a6a62ef1e7a1))
-* add aliased Domain dependency projection ([9c4c4fb](https://github.com/astrale-os/kernel/commit/9c4c4fb4f942c0c5e3961faf4428ed299d42f847))
-* add compiled remote domain serving ([ac9e365](https://github.com/astrale-os/kernel/commit/ac9e36538982a91359712e4cbbc68353ea2cc1a2))
-* add compiled remote Domain serving ([6149628](https://github.com/astrale-os/kernel/commit/6149628820d1294981156ff5b50ceaa522ea0403))
-* **callable:** preserve native binary streams and status ([d14c6f1](https://github.com/astrale-os/kernel/commit/d14c6f13492c14a3363b2c4af59c738034752fa2))
-* **dsl:** authorize Edge value reads with policies ([#502](https://github.com/astrale-os/kernel/issues/502)) ([a27e129](https://github.com/astrale-os/kernel/commit/a27e129378ff64e69031a011cbfa21299998a35e))
-* **dsl:** make edge direction explicit ([3f05bf5](https://github.com/astrale-os/kernel/commit/3f05bf52ce5b20e9f549ec0fd98cb0e4e03de1ea))
-* remove Property visibility and cut DSL V2 ([#518](https://github.com/astrale-os/kernel/issues/518)) ([4d99e8f](https://github.com/astrale-os/kernel/commit/4d99e8f0837136cf6be257ab3a6df666b62e06b5))
-* remove View authentication declarations ([4a5bfe0](https://github.com/astrale-os/kernel/commit/4a5bfe016717267d31257748f95e7f646782f876))
-* **runtime:** implement auto property projection lifecycle ([#451](https://github.com/astrale-os/kernel/issues/451)) ([e0c484a](https://github.com/astrale-os/kernel/commit/e0c484a79f2d5314b6a54597c340bd09d3e4e566))
-* **schema:** split inspection and add convergence ([6afbd39](https://github.com/astrale-os/kernel/commit/6afbd39506b8a9e37225aded1c02f94ffa64e54b))
-
-
-### Bug Fixes
-
-* admit optional callable node paths ([#464](https://github.com/astrale-os/kernel/issues/464)) ([8f261d5](https://github.com/astrale-os/kernel/commit/8f261d54dfb489541d2976892c5cacadf688f1a1))
-* **api:** retain visibility-free DSL as V1 ([#526](https://github.com/astrale-os/kernel/issues/526)) ([e24c1ea](https://github.com/astrale-os/kernel/commit/e24c1ea257e8567d9bd33c6ada0de63bb346a496))
-* **boot:** point local host CLI at graph.query ([8341e10](https://github.com/astrale-os/kernel/commit/8341e1020cd32848ffb95de80e66936f17db3087))
-* **boot:** point local host CLI at graph.query ([70c656b](https://github.com/astrale-os/kernel/commit/70c656bc7162b477a97ace4b999f8e7f6bf3a988))
-* **ci:** enforce the official Kernel cohort ([#469](https://github.com/astrale-os/kernel/issues/469)) ([f6ea87a](https://github.com/astrale-os/kernel/commit/f6ea87a47f7b1f9c415e404dc1a09b480a2a3f5f))
-* **core:** preserve callable identity and runtime boundaries ([#394](https://github.com/astrale-os/kernel/issues/394)) ([ad67dad](https://github.com/astrale-os/kernel/commit/ad67dad84aef3c8b79f769009595ea1f1229026b))
-* **deps:** refresh the Kernel dependency cohort ([#393](https://github.com/astrale-os/kernel/issues/393)) ([883e7bb](https://github.com/astrale-os/kernel/commit/883e7bb7ce17eecb7dad1c94ad2089c576ba3746))
-* **dsl:** close runtime facade contracts ([ff99450](https://github.com/astrale-os/kernel/commit/ff99450ce3889013f57c39293e7022b32e186ca6))
-* **dsl:** close semantic qualification gaps ([4a48cd7](https://github.com/astrale-os/kernel/commit/4a48cd729bcaf839ceda880b26ade064d6505fe2))
-* **dsl:** expose runtime-clean load paths ([7dba075](https://github.com/astrale-os/kernel/commit/7dba075887e4796e5464d5a41ddb03212eed887f))
-* **dsl:** keep schema projections declaration-nameable ([#432](https://github.com/astrale-os/kernel/issues/432)) ([448d23d](https://github.com/astrale-os/kernel/commit/448d23d58fc2b564ef93be4a54dc8ebd385b5066))
-* **dsl:** make schema declarations portable ([55e13c0](https://github.com/astrale-os/kernel/commit/55e13c06896eb5d6cf195607aec10f176b585504))
-* **dsl:** make schema declarations portable ([90c04ac](https://github.com/astrale-os/kernel/commit/90c04acfa5af714c70a92dc90999675d53f159bc))
-* **dsl:** preserve generic resolved domain type ([46f306b](https://github.com/astrale-os/kernel/commit/46f306bc3d1c73c822608c777a82f4502591d3e2))
-* **dsl:** reject unknown authoring fields on edge endpoints ([0483aa9](https://github.com/astrale-os/kernel/commit/0483aa9d985459c873922262b6f60363ffb3902b))
-* **dsl:** reject unknown authoring fields on edge endpoints ([cb90dae](https://github.com/astrale-os/kernel/commit/cb90dae6e165166ddcfe5e31ee2780d36b07ea53))
-* **dsl:** reject unknown edge endpoint fields ([06a47ed](https://github.com/astrale-os/kernel/commit/06a47edf1bb1ba58d0ac7258e810ef2d20b30c69))
-* **dsl:** reject unknown edge endpoint fields ([2d83dbf](https://github.com/astrale-os/kernel/commit/2d83dbf25a3e3818f9db2519b15741d109750727))
-* **dsl:** trust exact generated build material ([#466](https://github.com/astrale-os/kernel/issues/466)) ([77f2686](https://github.com/astrale-os/kernel/commit/77f26862d8041928029c04da9f2b2521a101c17e))
-* **packages:** keep workspace guard private ([e0ba76c](https://github.com/astrale-os/kernel/commit/e0ba76c5ae163245e31115e2a72e0663db0f5320))
-* **packages:** keep workspace guard private ([d260a52](https://github.com/astrale-os/kernel/commit/d260a52329cde5ce4b0260c43a3bbf28cb78f408))
-* **packages:** keep workspace guard private ([a3e82ec](https://github.com/astrale-os/kernel/commit/a3e82ec671f07252a5966b4de988e275e4078b8c))
-* publish a TypeScript-compatible cohort ([#406](https://github.com/astrale-os/kernel/issues/406)) ([f1a0cd0](https://github.com/astrale-os/kernel/commit/f1a0cd09f2f0b4498f9fa8924b2e319cac6552b7))
-* **release:** add package repository metadata ([8238077](https://github.com/astrale-os/kernel/commit/8238077d47a96c0f7b50a1bae8769fe4faab45b7))
-* **release:** harden public package closure ([#397](https://github.com/astrale-os/kernel/issues/397)) ([5a5886f](https://github.com/astrale-os/kernel/commit/5a5886fe66c7b3ea0a014766a5df8c04fd93efeb))
-* **schema:** harden introspection evidence and caches ([9516eb5](https://github.com/astrale-os/kernel/commit/9516eb510242427296861ef9e730b01861e45463))
-* stabilize governed Kernel integration ([#347](https://github.com/astrale-os/kernel/issues/347)) ([6869e3f](https://github.com/astrale-os/kernel/commit/6869e3fc4de1e73ff701bb38383e89c934ddfdf2))
-* **system:** clear Codegraph diagnostic debt ([f7a8e1f](https://github.com/astrale-os/kernel/commit/f7a8e1f5c5694d9c3c45d95fde184f0d5f2c7343))
-* **system:** clear Codegraph diagnostic debt ([45f86a9](https://github.com/astrale-os/kernel/commit/45f86a9ce14a224efed0e07966a5df8d7a892078))
-* **system:** preserve erased domain and runtime facade contracts ([b525d47](https://github.com/astrale-os/kernel/commit/b525d4781d2d58776ec6b4bbe1e045a3c1accebb))
-* **system:** preserve public revision vocabulary ([5e990d0](https://github.com/astrale-os/kernel/commit/5e990d0b28578a040b80c508943552c46b8632ae))
-* **test:** preserve authored semantic contracts ([bedb8cd](https://github.com/astrale-os/kernel/commit/bedb8cd2d36f4a95cb8d219067df0d0e39100f08))
-
-
-### Documentation
-
-* **release:** align kernel beta changelogs ([ad59dbc](https://github.com/astrale-os/kernel/commit/ad59dbc8df458d8bd025692d594b0b4666cd2e1f))
-
-## [0.2.0-beta.16](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.15...kernel-dsl-v0.2.0-beta.16) (2026-08-29)
-
-
-### Features
-
-* remove Property visibility and cut DSL V2 ([#518](https://github.com/astrale-os/kernel/issues/518)) ([4d99e8f](https://github.com/astrale-os/kernel/commit/4d99e8f0837136cf6be257ab3a6df666b62e06b5))
-
-
-### Bug Fixes
-
-* **api:** retain visibility-free DSL as V1 ([#526](https://github.com/astrale-os/kernel/issues/526)) ([e24c1ea](https://github.com/astrale-os/kernel/commit/e24c1ea257e8567d9bd33c6ada0de63bb346a496))
-
-## [0.2.0-beta.15](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.14...kernel-dsl-v0.2.0-beta.15) (2026-08-27)
-
-
-### Features
-
-* **dsl:** authorize Edge value reads with policies ([#502](https://github.com/astrale-os/kernel/issues/502)) ([a27e129](https://github.com/astrale-os/kernel/commit/a27e129378ff64e69031a011cbfa21299998a35e))
-
-## [0.2.0-beta.14](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.13...kernel-dsl-v0.2.0-beta.14) (2026-08-26)
-
-
-### Bug Fixes
-
-* **ci:** enforce the official Kernel cohort ([#469](https://github.com/astrale-os/kernel/issues/469)) ([f6ea87a](https://github.com/astrale-os/kernel/commit/f6ea87a47f7b1f9c415e404dc1a09b480a2a3f5f))
-
-## [0.2.0-beta.13](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.12...kernel-dsl-v0.2.0-beta.13) (2026-08-26)
-
-
-### Features
-
-* **runtime:** implement auto property projection lifecycle ([#451](https://github.com/astrale-os/kernel/issues/451)) ([e0c484a](https://github.com/astrale-os/kernel/commit/e0c484a79f2d5314b6a54597c340bd09d3e4e566))
-
-
-### Bug Fixes
-
-* **dsl:** trust exact generated build material ([#466](https://github.com/astrale-os/kernel/issues/466)) ([77f2686](https://github.com/astrale-os/kernel/commit/77f26862d8041928029c04da9f2b2521a101c17e))
-
-## [0.2.0-beta.12](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.11...kernel-dsl-v0.2.0-beta.12) (2026-08-26)
-
-
-### Bug Fixes
-
-* admit optional callable node paths ([#464](https://github.com/astrale-os/kernel/issues/464)) ([8f261d5](https://github.com/astrale-os/kernel/commit/8f261d54dfb489541d2976892c5cacadf688f1a1))
-* **system:** clear Codegraph diagnostic debt ([f7a8e1f](https://github.com/astrale-os/kernel/commit/f7a8e1f5c5694d9c3c45d95fde184f0d5f2c7343))
-
-## [0.2.0-beta.11](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.10...kernel-dsl-v0.2.0-beta.11) (2026-08-25)
-
-
-### Features
-
-* **callable:** preserve native binary streams and status ([d14c6f1](https://github.com/astrale-os/kernel/commit/d14c6f13492c14a3363b2c4af59c738034752fa2))
-* **schema:** split inspection and add convergence ([6afbd39](https://github.com/astrale-os/kernel/commit/6afbd39506b8a9e37225aded1c02f94ffa64e54b))
-
-
-### Bug Fixes
-
-* **schema:** harden introspection evidence and caches ([9516eb5](https://github.com/astrale-os/kernel/commit/9516eb510242427296861ef9e730b01861e45463))
-
-## [0.2.0-beta.10](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.9...kernel-dsl-v0.2.0-beta.10) (2026-08-25)
-
-
-### Bug Fixes
-
-* **dsl:** keep schema projections declaration-nameable ([#432](https://github.com/astrale-os/kernel/issues/432)) ([448d23d](https://github.com/astrale-os/kernel/commit/448d23d58fc2b564ef93be4a54dc8ebd385b5066))
-
-## [0.2.0-beta.9](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.8...kernel-dsl-v0.2.0-beta.9) (2026-08-24)
-
-
-### Bug Fixes
-
-* **packages:** keep workspace guard private ([e0ba76c](https://github.com/astrale-os/kernel/commit/e0ba76c5ae163245e31115e2a72e0663db0f5320))
-* **packages:** keep workspace guard private ([d260a52](https://github.com/astrale-os/kernel/commit/d260a52329cde5ce4b0260c43a3bbf28cb78f408))
-* **packages:** keep workspace guard private ([a3e82ec](https://github.com/astrale-os/kernel/commit/a3e82ec671f07252a5966b4de988e275e4078b8c))
-
-## [0.2.0-beta.8](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.7...kernel-dsl-v0.2.0-beta.8) (2026-08-24)
-
-
-### Features
-
-* add aliased domain dependency projection ([afb799b](https://github.com/astrale-os/kernel/commit/afb799b0d61fd6f7436fe659f558a6a62ef1e7a1))
-* add aliased Domain dependency projection ([9c4c4fb](https://github.com/astrale-os/kernel/commit/9c4c4fb4f942c0c5e3961faf4428ed299d42f847))
-
-## [0.2.0-beta.7](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.6...kernel-dsl-v0.2.0-beta.7) (2026-08-24)
-
-
-### Bug Fixes
-
-* **dsl:** make schema declarations portable ([55e13c0](https://github.com/astrale-os/kernel/commit/55e13c06896eb5d6cf195607aec10f176b585504))
-* publish a TypeScript-compatible cohort ([#406](https://github.com/astrale-os/kernel/issues/406)) ([f1a0cd0](https://github.com/astrale-os/kernel/commit/f1a0cd09f2f0b4498f9fa8924b2e319cac6552b7))
-
-## [0.2.0-beta.6](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.5...kernel-dsl-v0.2.0-beta.6) (2026-08-23)
-
-
-### Bug Fixes
-
-* **core:** preserve callable identity and runtime boundaries ([#394](https://github.com/astrale-os/kernel/issues/394)) ([ad67dad](https://github.com/astrale-os/kernel/commit/ad67dad84aef3c8b79f769009595ea1f1229026b))
-* **deps:** refresh the Kernel dependency cohort ([#393](https://github.com/astrale-os/kernel/issues/393)) ([883e7bb](https://github.com/astrale-os/kernel/commit/883e7bb7ce17eecb7dad1c94ad2089c576ba3746))
-* **dsl:** close runtime facade contracts ([ff99450](https://github.com/astrale-os/kernel/commit/ff99450ce3889013f57c39293e7022b32e186ca6))
-* **dsl:** close semantic qualification gaps ([4a48cd7](https://github.com/astrale-os/kernel/commit/4a48cd729bcaf839ceda880b26ade064d6505fe2))
-* **dsl:** expose runtime-clean load paths ([7dba075](https://github.com/astrale-os/kernel/commit/7dba075887e4796e5464d5a41ddb03212eed887f))
-* **dsl:** preserve generic resolved domain type ([46f306b](https://github.com/astrale-os/kernel/commit/46f306bc3d1c73c822608c777a82f4502591d3e2))
-* **release:** harden public package closure ([#397](https://github.com/astrale-os/kernel/issues/397)) ([5a5886f](https://github.com/astrale-os/kernel/commit/5a5886fe66c7b3ea0a014766a5df8c04fd93efeb))
-* **system:** preserve erased domain and runtime facade contracts ([b525d47](https://github.com/astrale-os/kernel/commit/b525d4781d2d58776ec6b4bbe1e045a3c1accebb))
-* **system:** preserve public revision vocabulary ([5e990d0](https://github.com/astrale-os/kernel/commit/5e990d0b28578a040b80c508943552c46b8632ae))
-* **test:** preserve authored semantic contracts ([bedb8cd](https://github.com/astrale-os/kernel/commit/bedb8cd2d36f4a95cb8d219067df0d0e39100f08))
-
-## [0.2.0-beta.5](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.4...kernel-dsl-v0.2.0-beta.5) (2026-08-21)
-
-
-### ⚠ BREAKING CHANGES
-
-* View declarations now contain only target and optional description. Legacy View.auth fields are rejected; callable authorization, View.resolve admission, Policies, and Shell handshakes remain independent.
-
-### Features
-
-* remove View authentication declarations ([4a5bfe0](https://github.com/astrale-os/kernel/commit/4a5bfe016717267d31257748f95e7f646782f876))
-
-## [0.2.0-beta.4](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.2.0-beta.3...kernel-dsl-v0.2.0-beta.4) (2026-08-21)
-
-
-### Bug Fixes
-
-* **release:** add package repository metadata ([8238077](https://github.com/astrale-os/kernel/commit/8238077d47a96c0f7b50a1bae8769fe4faab45b7))
-
-## [0.1.5](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.1.4...kernel-dsl-v0.1.5) (2026-08-07)
-
-
-### Features
-
-* **dsl:** add non-breaking policy IR preview ([1202d29](https://github.com/astrale-os/kernel/commit/1202d294cc7f32bc8e3e29d7537d3604403d09a5))
-* **dsl:** align policy authoring with v1 ([514961f](https://github.com/astrale-os/kernel/commit/514961f9902d97e96535126b0a983764bb0f30ac))
-* **dsl:** align policy authoring with v1 ([d082d5e](https://github.com/astrale-os/kernel/commit/d082d5e923458c0eec4ee28358f1b41309067843))
-
-## [0.1.4](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.1.3...kernel-dsl-v0.1.4) (2026-07-10)
-
-
-### Bug Fixes
-
-* export ./package.json from all published packages ([9560a34](https://github.com/astrale-os/kernel/commit/9560a34379c68d475f09a863e9d1962b560d83a0))
-* export ./package.json from all published packages ([8633acb](https://github.com/astrale-os/kernel/commit/8633acba8953644805fc43840732bd16c3e19ab1))
-* export ./package.json in publishConfig.exports too — the map that ships ([85ba0a1](https://github.com/astrale-os/kernel/commit/85ba0a121466ed5ef33fced51d28c0d09a7c0ec4))
-
-## [0.1.3](https://github.com/astrale-os/kernel/compare/kernel-dsl-v0.1.2...kernel-dsl-v0.1.3) (2026-07-08)
-
-
-### Features
-
-* support top-level functions of the kernel domain ([db45b06](https://github.com/astrale-os/kernel/commit/db45b061d0a7562950277344778991592f0a19eb))