@astrale-os/kernel-dsl 1.0.0-beta.14 → 1.0.0-beta.16

package/dist/v1/schema/rule.js

@@ -1,4 +1,5 @@
 import { defaultLimits } from '@astrale-os/kernel-dsl/value';
+import { limits } from '../language/limits.js';
 import { deepFreeze } from './canonical/freeze.js';
 const ANY = ['{/path*}'];
 const CHECKS = [
@@ -8,6 +9,7 @@ const CHECKS = [
 ];
 const DEPENDENCIES = ['/dependencies/{alias}', '/dependencies'];
 const count = (value) => value.toLocaleString('en-US');
+const { dependency, policy } = limits;
 const at = (field) => [
     `/functions/{function}${field}`,
     `/classes/{class}/methods/{method}${field}`,
@@ -36,7 +38,8 @@ export const RULES = deepFreeze({
     },
     DV_CALLABLE_IO: {
         stage: 'rule',
-        positions: [...at('/input/mode'), ...at('/output/mode')],
+        // A Method takes a value input only: its input has no mode.
+        positions: ['/functions/{function}/input/mode', ...at('/output/mode')],
         statement: 'A durable Function or Method takes a value input and returns a value output.',
     },
     DV_CLASS_ABSTRACT: {
@@ -68,7 +71,7 @@ export const RULES = deepFreeze({
     DV_CORE_EDGE_CONSTRAINTS: {
         stage: 'context',
         positions: ['/core/edges', '/core/edges/{index}', '/core/nodes/{slug}'],
-        statement: 'The Core Edges of a Schema hold the noSelf and acyclic constraints of their Classes, and every Core Node, and every Definition a Core Edge names, the Edge counts of the endpoints that accept it, a Definition its maximum only.',
+        statement: 'The Core Edges of a Schema hold the noSelf and acyclic constraints of their Classes, and every Core Node, and every Definition a Core Edge names, the Edge counts of the concrete Edge Classes whose endpoints accept it, each over its own Edges, a Definition its maximum only.',
     },
     DV_CORE_EDGE_KEY: {
         stage: 'rule',
@@ -128,7 +131,8 @@ export const RULES = deepFreeze({
     DV_DEPENDENCY_LIMITS: {
         stage: 'context',
         positions: ['/dependencies', '/dependencies/{alias}'],
-        statement: 'A Domain has at most 32 direct dependencies, a closure of at most 256 Domains and a dependency depth of at most 32.',
+        statement: `A Domain has at most ${dependency.direct} direct dependencies, a closure of at most ${dependency.closure} Domains and a dependency depth of at most ${dependency.depth}.`,
+        limits: ['dependency.direct', 'dependency.closure', 'dependency.depth'],
     },
     DV_DEPENDENCY_REVISION_COHERENCE: {
         stage: 'context',
@@ -182,6 +186,7 @@ export const RULES = deepFreeze({
         stage: 'structure',
         positions: ANY,
         statement: `The document is portable JSON: as text, UTF-8 that parses, within ${count(defaultLimits.maxBytes)} bytes, with no byte-order mark and no repeated member name; as a value, null, booleans, finite numbers other than negative zero, strings, arrays and plain objects, with no string or member name that holds U+0000 or a lone surrogate or exceeds ${count(defaultLimits.maxStringBytes)} bytes of UTF-8, at most ${count(defaultLimits.maxDepth)} nested arrays and objects, and at most ${count(defaultLimits.maxMembers)} members and items in all.`,
+        conditions: ['#/$defs/portable-string/not'],
     },
     DV_METHOD_ABSTRACT: {
         stage: 'rule',
@@ -244,11 +249,21 @@ export const RULES = deepFreeze({
             ...at('/output/item{/path*}'),
         ],
         statement: 'Every embedded value schema is in the value language: its diagnostic names the refusal in `valueCode`, and the schema of an automatic or State Property is not a blob.',
+        conditions: ['#/$defs/node-property-definition/allOf/0/if'],
     },
     PL_BUDGET: {
         stage: 'rule',
         positions: ['/policies/{policy}', ...CHECKS],
-        statement: 'A Policy stays within its budgets once expanded: pattern depth 4, 8 normalized branches, 6 Edge predicates a branch and 4 referenced Domains; and checks within depth 4, 8 branches and 8 leaves.',
+        statement: `A Policy stays within its budgets once expanded: pattern depth ${policy.patternDepth}, ${policy.normalizedBranches} normalized branches, ${policy.edgePredicates} Edge predicates a branch and ${policy.referencedDomains} referenced Domains; and checks within depth ${policy.checkDepth}, ${policy.checkBranches} branches and ${policy.checkLeaves} leaves.`,
+        limits: [
+            'policy.patternDepth',
+            'policy.normalizedBranches',
+            'policy.edgePredicates',
+            'policy.referencedDomains',
+            'policy.checkDepth',
+            'policy.checkBranches',
+            'policy.checkLeaves',
+        ],
     },
     PL_COMPOSITION: {
         stage: 'rule',
@@ -295,16 +310,19 @@ export const RULES = deepFreeze({
         stage: 'structure',
         positions: ['/functions/{function}/input'],
         statement: 'A Function input in binary mode is a binary input: it declares its metadata and maximumBytes.',
+        conditions: ['#/$defs/function-definition/properties/input/anyOf/1/not'],
     },
     STRUCTURE_CALLABLE_POLICY_AUTH: {
         stage: 'structure',
         positions: at('/policy'),
         statement: 'Only an authorized Function or Method declares a Policy.',
+        conditions: ['#/$defs/function-definition/if', '#/$defs/method-definition/if'],
     },
     STRUCTURE_DEPENDENCY_ALIAS: {
         stage: 'structure',
         positions: ['/dependencies/{alias}'],
         statement: 'A dependency alias is neither prototype nor constructor.',
+        conditions: ['#/$defs/dependency-alias/not'],
     },
     STRUCTURE_DOMAIN_NAME: {
         stage: 'structure',
@@ -326,6 +344,7 @@ export const RULES = deepFreeze({
         stage: 'structure',
         positions: ['/classes/{class}/properties/{property}/schema/x-astrale-value-kind'],
         statement: 'The schema of an Edge Property is not a blob: only a Node holds Blob contents.',
+        conditions: ['#/$defs/edge-property-definition/properties/schema/not'],
     },
     STRUCTURE_EDGE_ORIENTATION: {
         stage: 'structure',
@@ -336,6 +355,7 @@ export const RULES = deepFreeze({
         ],
         statement: 'A directed Edge Class has source and target endpoints and an undirected one two incident endpoints, and only a directed one declares unique tuples or is acyclic.',
         enforces: 'No Edges of an acyclic Class form a directed cycle.',
+        conditions: ['#/$defs/edge-class/if'],
     },
     STRUCTURE_FORMAT: {
         stage: 'structure',
@@ -351,6 +371,7 @@ export const RULES = deepFreeze({
         stage: 'structure',
         positions: ANY,
         statement: 'A string, list or number is no greater than the bound of its position.',
+        limits: ['policy.variablesPerExists', 'policy.repetition'],
     },
     STRUCTURE_MINIMUM: {
         stage: 'structure',
@@ -371,6 +392,10 @@ export const RULES = deepFreeze({
         stage: 'structure',
         positions: ANY,
         statement: 'No object of the document has a member named __proto__, except the transitions of a State.',
+        conditions: [
+            '#/$defs/json-value/anyOf/5/propertyNames/not',
+            '#/$defs/value-schema/anyOf/1/propertyNames/not',
+        ],
     },
     STRUCTURE_REQUIRED: {
         stage: 'structure',

package/dist/v1/schema/validation/callable.d.ts

@@ -1,7 +1,37 @@
+import type { ClassRef } from '../../addressing/index.js';
+import type { CallableDefinition } from '../../language/callable/model/callable.js';
+import type { ValueSchemaRegistry } from '../../language/value/reference/registry.js';
 import type { SchemaDiagnostic } from '../diagnostic.js';
 import type { DomainSchemaIR } from '../model/schema.js';
 /**
- * Validate the ref of every local Function, and the execution modifier and admission age of every
- * local Function and Node Method.
+ * One callable contract a Domain schema declares: where it is written, and the Node Class that
+ * receives its call, which its Policy names `self`. A contract is validated by the same rules
+ * wherever it is: in a Domain schema, at its declaration, or on the Node of a Function instance,
+ * which carries it (`acceptCallable`).
  */
-export declare function validateCallables(schema: DomainSchemaIR): readonly SchemaDiagnostic[];
+export interface DeclaredContract {
+    readonly contract: CallableDefinition;
+    /** Its declaration's JSON Pointer, which its diagnostics point within. */
+    readonly pointer: string;
+    /** The owner of an instance Method; a Function and a static Method have none. */
+    readonly receiver?: ClassRef;
+    /** The Node Class and name of a Method; absent for a Function. */
+    readonly method?: {
+        readonly owner: ClassRef;
+        readonly name: string;
+    };
+}
+/** Every callable contract one Domain schema declares: each Function, then each Node Method. */
+export declare function declaredContracts(schema: DomainSchemaIR): readonly DeclaredContract[];
+/**
+ * Validate the ref of every Function declaration, then the value schemas, execution modifier and
+ * admission age of every declared contract.
+ */
+export declare function validateContracts(schema: DomainSchemaIR, registry: ValueSchemaRegistry): readonly SchemaDiagnostic[];
+/**
+ * Validate one callable contract written at `pointer`, except its Policy (`validateContractPolicy`):
+ * its value schemas against the owner registry, its execution modifier and its admission age.
+ */
+export declare function validateContract(contract: CallableDefinition, pointer: string, registry: ValueSchemaRegistry, diagnostics: SchemaDiagnostic[]): void;
+/** Validate the execution modifier and admission age of one callable contract at `pointer`. */
+export declare function validateCallableModifiers(declaration: CallableDefinition, pointer: string, diagnostics: SchemaDiagnostic[]): void;

package/dist/v1/schema/validation/callable.js

@@ -4,32 +4,66 @@ import { isAdmissionMaxAge, MAXIMUM_ADMISSION_AGE_SECONDS, } from '../../languag
 import { isBinaryInput } from '../../language/callable/model/callable.js';
 import { escapePointerToken } from '../../language/value/syntax/pointer.js';
 import { diagnostic } from '../diagnostic.js';
-/**
- * Validate the ref of every local Function, and the execution modifier and admission age of every
- * local Function and Node Method.
- */
-export function validateCallables(schema) {
-    const diagnostics = [];
+import { validateCallable } from './value.js';
+/** Every callable contract one Domain schema declares: each Function, then each Node Method. */
+export function declaredContracts(schema) {
+    const contracts = [];
     for (const [name, declaration] of Object.entries(schema.functions)) {
-        const pointer = `/functions/${escapePointerToken(name)}`;
-        const ref = { origin: schema.origin, kind: 'function', name };
-        if (!equalDefinitionRefs(declaration.ref, ref)) {
-            diagnostics.push(diagnostic('DV_REF_RESOLVES', `${pointer}/ref`, `Function ref must be exactly ${Key.of(ref)}.`, Key.of(declaration.ref)));
-        }
-        validateExecution(declaration, pointer, diagnostics);
-        validateAdmission(declaration, pointer, diagnostics);
+        contracts.push({ contract: declaration, pointer: `/functions/${escapePointerToken(name)}` });
     }
     for (const [name, declaration] of Object.entries(schema.classes)) {
         if (declaration.kind !== 'node')
             continue;
+        const owner = { origin: schema.origin, kind: 'class', name };
         for (const [method, value] of Object.entries(declaration.methods)) {
             const pointer = `/classes/${escapePointerToken(name)}/methods/${escapePointerToken(method)}`;
-            validateExecution(value, pointer, diagnostics);
-            validateAdmission(value, pointer, diagnostics);
+            contracts.push({
+                contract: value,
+                pointer,
+                ...(value.static ? {} : { receiver: owner }),
+                method: { owner, name: method },
+            });
         }
     }
+    return contracts;
+}
+/**
+ * Validate the ref of every Function declaration, then the value schemas, execution modifier and
+ * admission age of every declared contract.
+ */
+export function validateContracts(schema, registry) {
+    const diagnostics = [];
+    for (const [name, declaration] of Object.entries(schema.functions)) {
+        validateFunctionRef(schema.origin, name, declaration.ref, diagnostics);
+    }
+    for (const { contract, pointer } of declaredContracts(schema)) {
+        validateContract(contract, pointer, registry, diagnostics);
+    }
     return Object.freeze(diagnostics);
 }
+/**
+ * A Function declaration names itself by its ref: its own key in its own Domain. The ref belongs to
+ * the declaration, not to its contract, which a Node carries without one.
+ */
+function validateFunctionRef(origin, name, declared, diagnostics) {
+    const ref = { origin, kind: 'function', name };
+    if (equalDefinitionRefs(declared, ref))
+        return;
+    diagnostics.push(diagnostic('DV_REF_RESOLVES', `/functions/${escapePointerToken(name)}/ref`, `Function ref must be exactly ${Key.of(ref)}.`, Key.of(declared)));
+}
+/**
+ * Validate one callable contract written at `pointer`, except its Policy (`validateContractPolicy`):
+ * its value schemas against the owner registry, its execution modifier and its admission age.
+ */
+export function validateContract(contract, pointer, registry, diagnostics) {
+    validateCallable(contract, pointer, registry, diagnostics);
+    validateCallableModifiers(contract, pointer, diagnostics);
+}
+/** Validate the execution modifier and admission age of one callable contract at `pointer`. */
+export function validateCallableModifiers(declaration, pointer, diagnostics) {
+    validateExecution(declaration, pointer, diagnostics);
+    validateAdmission(declaration, pointer, diagnostics);
+}
 /**
  * An admission age is a whole number of seconds within the language ceiling. It has no zero
  * spelling: an absent admission age is the one canonical form of a call admitted afresh.

package/dist/v1/schema/validation/class.d.ts

@@ -1,10 +1,14 @@
 import type { ClassRef } from '../../addressing/index.js';
 import type { ClassDefinition } from '../../language/class/model/class.js';
+import type { ValueSchemaRegistry } from '../../language/value/reference/registry.js';
 import type { DefinitionAnalysisResult } from '../analysis/class.js';
 import type { SchemaDiagnostic } from '../diagnostic.js';
 import type { DomainResolutionContext } from '../resolution/context.js';
-/** Validate the semantic contracts owned by Class declarations. */
-export declare function validateDefinitions(environment: DomainResolutionContext, analysis: DefinitionAnalysisResult): readonly SchemaDiagnostic[];
+/**
+ * Validate the semantic contracts owned by Class declarations. `registry` is the candidate's value
+ * registry; each dependency's is built at most once, so the Classes share them.
+ */
+export declare function validateDefinitions(environment: DomainResolutionContext, analysis: DefinitionAnalysisResult, registry: ValueSchemaRegistry): readonly SchemaDiagnostic[];
 /** Whether `child` safely refines its parent Edge contract `parent`. */
 export declare function edgeContractRefines(environment: DomainResolutionContext, child: Extract<ClassDefinition, {
     readonly kind: 'edge';

package/dist/v1/schema/validation/class.js

@@ -10,13 +10,24 @@ import { isBlobValueSchema } from '../../language/value/model/blob.js';
 import { classifyOrdering } from '../../language/value/ordering.js';
 import { escapePointerToken } from '../../language/value/syntax/pointer.js';
 import { diagnostic } from '../diagnostic.js';
-import { createDomainValueSchemaRegistry, createValueSchemaRegistry, } from '../resolution/value.registry.js';
+import { createDomainValueSchemaRegistry } from '../resolution/value.registry.js';
 const formatDefinitionRef = Key.of;
-/** Validate the semantic contracts owned by Class declarations. */
-export function validateDefinitions(environment, analysis) {
+/**
+ * Validate the semantic contracts owned by Class declarations. `registry` is the candidate's value
+ * registry; each dependency's is built at most once, so the Classes share them.
+ */
+export function validateDefinitions(environment, analysis, registry) {
     const diagnostics = [...analysis.diagnostics];
     const schema = environment.candidate;
     let scope;
+    const registries = new Map([[schema.origin, registry]]);
+    const registryOf = (origin) => {
+        if (!registries.has(origin)) {
+            const dependency = environment.dependencies.get(origin);
+            registries.set(origin, dependency === undefined ? undefined : createDomainValueSchemaRegistry(dependency));
+        }
+        return registries.get(origin);
+    };
     for (const [name, declaration] of Object.entries(schema.classes)) {
         const ref = { origin: schema.origin, kind: 'class', name };
         const pointer = `/classes/${escapePointerToken(name)}`;
@@ -27,7 +38,7 @@ export function validateDefinitions(environment, analysis) {
             (declaration.policies.read !== undefined || declaration.policies.traverse !== undefined)) {
             diagnostics.push(diagnostic('DV_CLASS_ABSTRACT', `${pointer}/policies`, 'Abstract Classes cannot declare observation Policies.'));
         }
-        validateFacet(environment, declaration, pointer, diagnostics);
+        validateFacet(registry, declaration, pointer, diagnostics);
         validateParents(environment, ref, declaration.kind, declaration.extends, diagnostics);
         if (declaration.kind === 'edge') {
             validateEdgeContract(environment, ref, declaration, pointer, diagnostics);
@@ -35,12 +46,11 @@ export function validateDefinitions(environment, analysis) {
             validateEdgeLifetimes(scope, ref, declaration, pointer, diagnostics);
             validateEdgeClassComposition(environment, ref, declaration, pointer, diagnostics);
         }
-        validateUniqueProperties(environment, analysis, ref, declaration, pointer, diagnostics);
+        validateUniqueProperties(registryOf, analysis, ref, declaration, pointer, diagnostics);
     }
     return Object.freeze(diagnostics);
 }
-function validateFacet(environment, declaration, pointer, diagnostics) {
-    const valueRegistry = createValueSchemaRegistry(environment);
+function validateFacet(valueRegistry, declaration, pointer, diagnostics) {
     for (const [name, property] of Object.entries(declaration.properties)) {
         const propertyPointer = `${pointer}/properties/${escapePointerToken(name)}`;
         // The structure refuses a blob on an Edge Property and a State Property on an Edge Class.
@@ -147,7 +157,7 @@ function validateEdgeContract(environment, owner, declaration, pointer, diagnost
  * inherit without redefinition, so the key reads one meaning on every descendant it covers. A Node
  * tuple names Properties only; an Edge tuple names them as `{ property }` beside its other fields.
  */
-function validateUniqueProperties(environment, analysis, owner, declaration, pointer, diagnostics) {
+function validateUniqueProperties(registryOf, analysis, owner, declaration, pointer, diagnostics) {
     if (declaration.kind === 'edge' && declaration.orientation !== 'directed')
         return;
     if (declaration.unique === undefined)
@@ -156,20 +166,6 @@ function validateUniqueProperties(environment, analysis, owner, declaration, poi
     if (properties === undefined)
         return;
     const code = declaration.kind === 'node' ? 'DV_NODE_UNIQUE' : 'DV_EDGE_UNIQUE';
-    const registries = new Map();
-    const registryOf = (origin) => {
-        if (!registries.has(origin)) {
-            const schema = environment.dependencies.get(origin);
-            const registry = origin === environment.candidate.origin
-                ? createValueSchemaRegistry(environment)
-                : schema === undefined
-                    ? undefined
-                    : createDomainValueSchemaRegistry(schema);
-            if (registry !== undefined)
-                registries.set(origin, registry);
-        }
-        return registries.get(origin);
-    };
     const check = (key, at) => {
         const property = properties.get(key);
         if (property === undefined) {

package/dist/v1/schema/validation/core.js

@@ -3,7 +3,7 @@ import { Key } from '../../addressing/key.js';
 import { compareUnicode, definitionRefIndex } from '../../addressing/ordering.js';
 import { isMethodExecutable } from '../../language/callable/executable.js';
 import { coveringEdgeUniqueTuples, coveringNodeUniqueTuples, edgeUniqueKeys, nodeUniqueKeys, } from '../../language/class/unique.js';
-import { checkCoreEdgeSet, checkHeldKeys, coreEndpointsSatisfy, } from '../../language/core/facts.js';
+import { checkCoreEdgeSet, checkHeldKeys, coreEndpointsSatisfy, DOMAIN_ENDPOINT_CLASS, } from '../../language/core/facts.js';
 import { policyObjectKey, policyObjectOrigin, projectedMemberClass, } from '../../language/policy/model/policy.js';
 import { validateJsonInstance } from '../../language/value/evaluate/validate.js';
 import { escapePointerToken } from '../../language/value/syntax/pointer.js';
@@ -83,7 +83,9 @@ function resolveCoreEdges(environment, analysis, registry, nodesByRef, diagnosti
             continue;
         const endpointsSatisfy = coreEndpointsSatisfy(declaration, source, target, (endpoint, accepts) => endpointSatisfies(environment, endpoint, accepts));
         if (!endpointsSatisfy) {
-            diagnostics.push(diagnostic('DV_CORE_EDGE_CLASS', pointer, `Core Edge endpoints do not satisfy ${formatDefinitionRef(edge.class)}.`, formatDefinitionRef(edge.class)));
+            diagnostics.push(diagnostic('DV_CORE_EDGE_CLASS', pointer, `Core Edge endpoints do not satisfy ${formatDefinitionRef(edge.class)}.${source.kind === 'domain' || target.kind === 'domain'
+                ? ` The owning Domain is a ${formatDefinitionRef(DOMAIN_ENDPOINT_CLASS)} Node: the endpoint that names it must accept that Class or one it extends.`
+                : ''}`, formatDefinitionRef(edge.class)));
             continue;
         }
         edges.push({ source, target, declaration, value: edge, pointer });
@@ -92,7 +94,7 @@ function resolveCoreEdges(environment, analysis, registry, nodesByRef, diagnosti
 }
 function resolveCoreEndpoint(environment, ref, pointer, nodesByRef, diagnostics) {
     if (ref.kind === 'domain')
-        return { kind: 'domain', ref, key: 'domain' };
+        return { kind: 'domain', ref, key: 'domain', classRef: DOMAIN_ENDPOINT_CLASS };
     const undeclared = () => {
         const key = policyObjectKey(ref);
         diagnostics.push(diagnostic('DV_CORE_REF', pointer, `Core endpoint ${key} does not name a declared local Definition.`, key));
@@ -122,10 +124,14 @@ function declaresProjectedMember(environment, ref) {
         return Object.hasOwn(candidate.policies, ref.name);
     return Object.hasOwn(candidate.views, ref.name);
 }
+/**
+ * A Core Node is admitted by its own authored Class, a projected member by the Kernel declaration
+ * Class it projects as, and the owning Domain by the Kernel `Domain` Class of its Node: the write
+ * that projects the Edge binds exactly that Node, so an Edge Class that does not accept it can
+ * never be installed (DV-CORE-EDGE-CLASS).
+ */
 function endpointSatisfies(environment, endpoint, accepts) {
-    // The owning Domain is a graph-projection identity, not a Definition declared by this DSL.
-    // Its concrete Class contract is therefore admitted by the projection compiler.
-    return endpoint.kind === 'domain' || classSatisfies(environment, endpoint.classRef, accepts);
+    return classSatisfies(environment, endpoint.classRef, accepts);
 }
 function validateCreationProperties(definition, properties, registry, code, pointer, diagnostics) {
     const schema = {
@@ -181,11 +187,11 @@ function validateCoreEdgeSet(environment, edges, nodesByRef, diagnostics) {
         report: (issue) => diagnostics.push(coreEdgeDiagnostic(issue)),
     });
 }
-/** A projected member's degree is reported at the Edge that names it. */
+/** A projected member's degree, and the owning Domain's, is reported at the Edge that names it. */
 function factEndpoint(endpoint, pointer) {
-    return endpoint.kind === 'member'
-        ? { key: endpoint.key, member: { class: endpoint.classRef, pointer } }
-        : endpoint;
+    return endpoint.kind === 'core'
+        ? endpoint
+        : { key: endpoint.key, member: { class: endpoint.classRef, pointer } };
 }
 function coreEdgeDiagnostic(issue) {
     switch (issue.kind) {

package/dist/v1/schema/validation/domain.js

@@ -2,7 +2,7 @@ import { orderAndDeduplicate } from '../../language/validation/diagnostic.js';
 import { analyzeDefinitions } from '../analysis/class.js';
 import { buildDomainResolutionContext } from '../resolution/context.js';
 import { createValueSchemaRegistry } from '../resolution/value.registry.js';
-import { validateCallables } from './callable.js';
+import { validateContracts } from './callable.js';
 import { validateDefinitions } from './class.js';
 import { validateCore } from './core.js';
 import { validatePolicies } from './policy/validate.js';
@@ -15,8 +15,8 @@ export function validateDomainSchemaSemantics(schema, lookup) {
     const diagnostics = [
         ...context.diagnostics,
         ...validateEmbeddedValueSchemas(schema, registry),
-        ...validateDefinitions(context, analysis),
-        ...validateCallables(schema),
+        ...validateDefinitions(context, analysis, registry),
+        ...validateContracts(schema, registry),
         ...validatePolicies(context, analysis),
         ...validateViews(context),
         ...validateCore(context, analysis, registry),

package/dist/v1/schema/validation/domain.route.d.ts

@@ -1,4 +1,9 @@
-import type { Value as JsonValue } from '@astrale-os/kernel-dsl/value';
+import { type Value as JsonValue } from '@astrale-os/kernel-dsl/value';
 import type { DomainSchemaIR } from '../model/schema.js';
+/**
+ * Read an unknown value as a Domain Schema document of its exact language contract: portable JSON
+ * (`DV_JSON_VALUE`), then the structure of its format and version. Throws `SchemaError`.
+ */
+export declare function structureDomainSchema(input: unknown): DomainSchemaIR;
 /** Select the exact Domain language contract before entering its structural grammar. */
 export declare function routeDomainSchema(input: JsonValue): DomainSchemaIR;

package/dist/v1/schema/validation/domain.route.js

@@ -1,9 +1,27 @@
+import { accept as acceptJsonValue, BoundaryError as JsonBoundaryError, } from '@astrale-os/kernel-dsl/value';
 import { SchemaError, diagnostic } from '../diagnostic.js';
 import { DOMAIN_FORMAT, DOMAIN_VERSION } from '../model/format.js';
 import { parseDomainSchemaStructure } from './domain.structure.js';
 const decoders = new Map([
     [DOMAIN_FORMAT, new Map([[DOMAIN_VERSION, parseDomainSchemaStructure]])],
 ]);
+/**
+ * Read an unknown value as a Domain Schema document of its exact language contract: portable JSON
+ * (`DV_JSON_VALUE`), then the structure of its format and version. Throws `SchemaError`.
+ */
+export function structureDomainSchema(input) {
+    let admitted;
+    try {
+        admitted = acceptJsonValue(input);
+    }
+    catch (error) {
+        if (error instanceof JsonBoundaryError) {
+            throw new SchemaError([diagnostic('DV_JSON_VALUE', error.pointer, error.message)]);
+        }
+        throw error;
+    }
+    return routeDomainSchema(admitted);
+}
 /** Select the exact Domain language contract before entering its structural grammar. */
 export function routeDomainSchema(input) {
     if (!isJsonObject(input))

package/dist/v1/schema/validation/domain.structure.d.ts

@@ -1,7 +1,7 @@
 import type { Value as JsonValue } from '@astrale-os/kernel-dsl/value';
 import { type ZodArray, type ZodType, type core as zodCore } from 'zod';
 import type { PolicyRef } from '../../addressing/index.js';
-import type { FunctionAuth } from '../../language/callable/model/callable.js';
+import type { CallableDefinition, FunctionAuth } from '../../language/callable/model/callable.js';
 import type { PolicyCheckExpression, PolicyPatternExpression } from '../../language/policy/model/policy.js';
 import type { DomainSchemaIR } from '../model/schema.js';
 /**
@@ -3641,16 +3641,16 @@ export declare const domainSchemaStructure: import("zod").ZodObject<{
                 name: string;
             };
         }>, unknown>>]>>;
-        ref: import("zod").ZodObject<{
-            origin: import("zod").ZodString;
-            kind: import("zod").ZodLiteral<"function">;
-            name: import("zod").ZodString;
-        }, zodCore.$strict>;
         input: import("zod").ZodUnion<readonly [import("zod").ZodObject<{
             mode: import("zod").ZodLiteral<"binary">;
             metadata: import("zod").ZodUnion<readonly [import("zod").ZodBoolean, import("zod").ZodRecord<import("zod").ZodString, ZodType<JsonValue, unknown, zodCore.$ZodTypeInternals<JsonValue, unknown>>>]>;
             maximumBytes: import("zod").ZodNumber;
         }, zodCore.$strict>, import("zod").ZodUnion<readonly [import("zod").ZodBoolean, import("zod").ZodRecord<import("zod").ZodString, ZodType<JsonValue, unknown, zodCore.$ZodTypeInternals<JsonValue, unknown>>>]>]>;
+        ref: import("zod").ZodObject<{
+            origin: import("zod").ZodString;
+            kind: import("zod").ZodLiteral<"function">;
+            name: import("zod").ZodString;
+        }, zodCore.$strict>;
     }, zodCore.$strict> & ZodType<{
         description?: string | undefined;
         output: {
@@ -3706,16 +3706,16 @@ export declare const domainSchemaStructure: import("zod").ZodObject<{
                 name: string;
             };
         }> | undefined;
-        ref: {
-            origin: string;
-            kind: "function";
-            name: string;
-        };
         input: boolean | Record<string, JsonValue> | {
             mode: "binary";
             metadata: boolean | Record<string, JsonValue>;
             maximumBytes: number;
         };
+        ref: {
+            origin: string;
+            kind: "function";
+            name: string;
+        };
     } & AuthorizedPolicy, {
         description?: string | undefined;
         output: {
@@ -3735,16 +3735,16 @@ export declare const domainSchemaStructure: import("zod").ZodObject<{
         } | undefined;
         auth: "anonymous" | "authenticated" | "authorized";
         policy?: unknown;
-        ref: {
-            origin: string;
-            kind: "function";
-            name: string;
-        };
         input: boolean | Record<string, unknown> | {
             mode: "binary";
             metadata: boolean | Record<string, unknown>;
             maximumBytes: number;
         };
+        ref: {
+            origin: string;
+            kind: "function";
+            name: string;
+        };
     }, zodCore.$ZodTypeInternals<{
         description?: string | undefined;
         output: {
@@ -3800,16 +3800,16 @@ export declare const domainSchemaStructure: import("zod").ZodObject<{
                 name: string;
             };
         }> | undefined;
-        ref: {
-            origin: string;
-            kind: "function";
-            name: string;
-        };
         input: boolean | Record<string, JsonValue> | {
             mode: "binary";
             metadata: boolean | Record<string, JsonValue>;
             maximumBytes: number;
         };
+        ref: {
+            origin: string;
+            kind: "function";
+            name: string;
+        };
     } & AuthorizedPolicy, {
         description?: string | undefined;
         output: {
@@ -3829,16 +3829,16 @@ export declare const domainSchemaStructure: import("zod").ZodObject<{
         } | undefined;
         auth: "anonymous" | "authenticated" | "authorized";
         policy?: unknown;
-        ref: {
-            origin: string;
-            kind: "function";
-            name: string;
-        };
         input: boolean | Record<string, unknown> | {
             mode: "binary";
             metadata: boolean | Record<string, unknown>;
             maximumBytes: number;
         };
+        ref: {
+            origin: string;
+            kind: "function";
+            name: string;
+        };
     }>>>;
     policies: import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodObject<{
         ref: import("zod").ZodObject<{
@@ -4017,4 +4017,6 @@ export declare const domainSchemaStructure: import("zod").ZodObject<{
     }, zodCore.$strict>;
 }, zodCore.$strict>;
 export declare function parseDomainSchemaStructure(input: unknown): DomainSchemaIR;
+/** Parse the structure of one callable contract: a Function declaration without its ref. */
+export declare function parseCallableContract(input: unknown): CallableDefinition;
 export {};