@astrale-os/kernel-dsl 1.0.0-beta.1 → 1.0.0-beta.3

package/dist/v1/compiled/admission/semantics/policy/parity.js

@@ -57,8 +57,6 @@ export function validatePolicyParity(context, entry, entryIndex, policies, origi
             const path = `/closure/${entryIndex}/definitions/classes/${classIndex}/policies/${operation}`;
             if (isClassRuleChecks(policy)) {
                 // The wire admits rules only on a Node Class and only over `self` and `ref` objects.
-                if (!checksNameTheCaller(policy))
-                    fail(path, 'Every branch of a Class rule must check a Policy: sameNode alone names no caller.');
                 validatePolicyChecks(context, typing, entry, policy, -1, definition.ref, path, 'class');
                 continue;
             }
@@ -102,6 +100,9 @@ const SITE = {
     class: { checks: 'Class rule checks', objects: 'the Class rule object contract' },
 };
 function validatePolicyChecks(context, typing, entry, expression, input, receiver, path, site) {
+    if (!checksNameTheCaller(expression)) {
+        fail(path, `${SITE[site].checks} must check a Policy on every branch: sameNode alone names no caller.`);
+    }
     const measure = measureChecks(expression);
     if (measure.depth > MAX_CHECK_DEPTH ||
         measure.branches > MAX_BRANCHES ||

package/dist/v1/language/class/model/class.d.ts

@@ -5,12 +5,12 @@ import type { DataFacet } from './data.js';
 import type { EdgeContract } from './edge.js';
 import type { PropertyFacet } from './property.js';
 export type ClassKind = 'node' | 'edge';
-/** An absent observation Policy admits every caller under the principal's Class capability. */
+/** An absent observation rule admits every caller; a delegation is still scoped by its ceiling. */
 export interface NodeClassPolicies {
     readonly read?: NodeClassPolicy;
     readonly traverse?: NodeClassPolicy;
 }
-/** An absent observation Policy admits every caller under the principal's Class capability. */
+/** An absent observation rule admits every caller; a delegation is still scoped by its ceiling. */
 export interface EdgeClassPolicies {
     readonly read?: ClassPolicy;
     readonly traverse?: ClassPolicy;

package/dist/v1/schema/validation/policy/uses.js

@@ -28,11 +28,6 @@ function validateClassPolicyUses(context, typing, operation) {
             continue;
         const pointer = `/classes/${escapePointer(name)}/policies/${operation}`;
         if (isClassRuleChecks(ref)) {
-            // A rule lifts the Class ceiling the way a named Policy does, so, as a Policy connects its
-            // subject, each way the rule holds must pass through a check of the caller.
-            if (!checksNameTheCaller(ref)) {
-                context.add('PL_CONNECTIVITY', pointer, `Every branch of the ${operation} rule of Node Class ${name} must check a Policy: sameNode alone names no caller.`);
-            }
             // Structure admits Policy checks only on a Node Class: `self` is the observed exact Class.
             validateChecks(context, typing, ref, {
                 site: 'class',
@@ -107,6 +102,11 @@ function validateDeclaredMethods(context, typing, namespace, name, methods, rece
     }
 }
 function validateChecks(validation, typing, expression, context) {
+    // Checks decide the caller the way a named Policy does, so, as a Policy connects its subject,
+    // each way they hold must pass through a check of the caller.
+    if (!checksNameTheCaller(expression)) {
+        validation.add('PL_CONNECTIVITY', context.pointer, `${SITE[context.site].checks} must check a Policy on every branch: sameNode alone names no caller.`);
+    }
     const normalized = normalizePolicyChecks(expression);
     const measure = measureChecks(normalized);
     if (measure.depth > MAX_CHECK_DEPTH ||

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-dsl",
-  "version": "1.0.0-beta.1",
+  "version": "1.0.0-beta.3",
   "description": "Astrale Kernel DSL - Schema authoring, inference, and IR serialization",
   "license": "Apache-2.0",
   "repository": {