@astrale-os/kernel-dsl 1.0.0-beta.16 → 1.0.0-beta.18

package/dist/v1/compiled/admission/semantics/policy/parity.js

@@ -1,13 +1,13 @@
-import {} from '../../../../addressing/index.js';
+import { Key } from '../../../../addressing/index.js';
 import { branchesOf, targetMode, isConnected, } from '../../../../language/policy/analysis/branches.js';
 import { exceededLimits, measureChecks, policyMeasurer, } from '../../../../language/policy/analysis/budgets.js';
 import { neverAdmittedClasses, } from '../../../../language/policy/analysis/checks.js';
 import {} from '../../../../language/policy/analysis/typing.js';
-import { checksNameTheCaller, isClassRuleChecks, } from '../../../../language/policy/model/policy.js';
+import { CLASS_OPERATIONS, checksNameTheCaller, isClassRuleChecks, } from '../../../../language/policy/model/policy.js';
 import { normalizePolicyExpression } from '../../../../language/policy/normalization/normalize.js';
 import {} from '../../../model/schema.js';
 import { fail } from '../../diagnostic.js';
-import { isCompiledEdge } from '../context.js';
+import { isCompiledEdge, } from '../context.js';
 import { callableObjectContracts } from './contracts.js';
 import { compiledPolicyTyping } from './typing.js';
 /** Check Policy typing and expansion budgets against the entry’s own closure. */
@@ -46,26 +46,25 @@ export function validatePolicyParity(context, entry, entryIndex, policies, origi
         }
     }
     for (const [classIndex, definition] of entry.definitions.classes.entries()) {
-        for (const operation of ['read', 'traverse']) {
+        const edge = isCompiledEdge(definition) ? definition : undefined;
+        for (const operation of CLASS_OPERATIONS) {
             const policy = definition.policies[operation];
             if (typeof policy !== 'object')
                 continue;
             const path = `/closure/${entryIndex}/definitions/classes/${classIndex}/policies/${operation}`;
             if (isClassRuleChecks(policy)) {
-                // The wire admits rules only on a Node Class and only over `self` and `ref` objects.
-                validatePolicyChecks(context, typing, entry, policy, -1, definition.ref, path, 'class');
+                // The wire admits rules only over `self` and `ref` objects, and `ref` alone to create a Node.
+                validatePolicyChecks(context, typing, entry, policy, -1, definition.ref, path, 'class', edge);
                 continue;
             }
-            const label = operation === 'read' ? 'Read' : 'Traverse';
+            const label = `${operation[0].toUpperCase()}${operation.slice(1)}`;
             if (definition.kind === 'node') {
                 if (!typing.policyAccepts(policy.name, { kind: 'exact', ref: definition.ref })) {
                     fail(path, `${label} Policy is incompatible with its protected Node Class.`);
                 }
             }
-            else if (isCompiledEdge(definition)) {
-                if (!typing.policyAcceptsEdgeClass(policy.name, definition)) {
-                    fail(path, `${label} Policy is incompatible with an accepted Edge endpoint pair.`);
-                }
+            else if (edge !== undefined && !typing.policyAcceptsEdgeClass(policy.name, edge)) {
+                fail(path, `${label} Policy is incompatible with an accepted Edge endpoint pair.`);
             }
         }
         if (definition.kind === 'node') {
@@ -90,7 +89,7 @@ const SITE = {
     callable: { checks: 'Callable Policy checks', objects: 'the callable object contract' },
     class: { checks: 'Class rule checks', objects: 'the Class rule object contract' },
 };
-function validatePolicyChecks(context, typing, entry, expression, input, receiver, path, site) {
+function validatePolicyChecks(context, typing, entry, expression, input, receiver, path, site, edge) {
     if (!checksNameTheCaller(expression)) {
         fail(path, `${SITE[site].checks} must check a Policy on every branch: sameNode alone names no caller.`);
     }
@@ -99,13 +98,26 @@ function validatePolicyChecks(context, typing, entry, expression, input, receive
     }
     const leaves = new Map();
     const visit = (value, pointer) => {
-        if ('sameNode' in value)
+        if ('sameNode' in value) {
+            // `self` is an Edge in an Edge Class rule, and sameNode compares Nodes.
+            if (edge !== undefined &&
+                (value.sameNode.left.kind === 'self' || value.sameNode.right.kind === 'self'))
+                fail(pointer, 'sameNode compares Nodes: self is an Edge here.');
             return;
+        }
         if (!('check' in value)) {
             const children = 'allOf' in value ? value.allOf : value.anyOf;
             children.forEach((child, index) => visit(child, `${pointer}/${index}`));
             return;
         }
+        if (edge !== undefined && value.object.kind === 'self') {
+            // An Edge is checked as an Edge Class Policy is: over every concrete endpoint pair.
+            if (!typing.policyAcceptsEdgeClass(value.check.name, edge))
+                fail(pointer, 'Named Policy is incompatible with an accepted Edge endpoint pair.');
+            const name = Key.of(edge.ref);
+            leaves.set(value, { accepted: [name], admitted: new Set([name]) });
+            return;
+        }
         const contracts = callableObjectContracts(context, entry, input, receiver, value.object);
         if (contracts === undefined)
             return;

package/dist/v1/compiled/admission/wire/class.js

@@ -2,6 +2,7 @@ import {} from '@astrale-os/kernel-dsl/value';
 import { Key } from '../../../addressing/index.js';
 import { MEDIA_TYPE_PATTERN } from '../../../language/class/model/data.js';
 import { compareEdgeUniqueTuples, compareNodeUniqueTuples, edgeUniqueTuple, nodeUniqueTuple, } from '../../../language/class/unique.js';
+import { CLASS_OPERATIONS, isClassObservation } from '../../../language/policy/model/policy.js';
 import {} from '../../model/schema.js';
 import { invalid } from '../diagnostic.js';
 import { compiledCallable } from './callable.js';
@@ -63,26 +64,30 @@ export function compiledClass(input, values, path) {
 }
 function classPolicies(input, kind, path) {
     const value = object(input, 'Class Policies', path);
-    exact(value, [], 'Class Policies', path, ['read', 'traverse']);
-    if (value.read !== undefined)
-        classPolicy(value.read, kind, 'Class read Policy', `${path}/read`);
-    if (value.traverse !== undefined)
-        classPolicy(value.traverse, kind, 'Class traverse Policy', `${path}/traverse`);
+    exact(value, [], 'Class Policies', path, CLASS_OPERATIONS);
+    for (const operation of CLASS_OPERATIONS) {
+        const policy = value[operation];
+        if (policy === undefined)
+            continue;
+        const label = `Class ${operation} Policy`;
+        const slot = `${path}/${operation}`;
+        if (isRuleChecks(policy)) {
+            classRuleChecks(policy, slot, kind === 'node' && operation === 'create' ? 'create' : 'class');
+            continue;
+        }
+        // Each slot spells one constant, and a Node create rule has no Node for a named Policy alone.
+        if (policy === !isClassObservation(operation))
+            continue;
+        if (kind === 'node' && operation === 'create')
+            invalid(label, undefined, slot);
+        definitionRef(policy, 'policy', label, slot);
+    }
 }
-/**
- * Check one observation slot: `false`, the rule no caller satisfies, a named Policy, or, on a Node
- * Class only, Policy checks over the observed Node.
- */
-function classPolicy(input, kind, label, path) {
-    if (kind === 'node' &&
-        input !== null &&
+/** Policy checks, as opposed to a constant or a named Policy. */
+function isRuleChecks(input) {
+    return (input !== null &&
         typeof input === 'object' &&
-        ['check', 'sameNode', 'allOf', 'anyOf'].some((key) => Object.hasOwn(input, key))) {
-        classRuleChecks(input, path);
-        return;
-    }
-    if (input !== false)
-        definitionRef(input, 'policy', label, path);
+        ['check', 'sameNode', 'allOf', 'anyOf'].some((key) => Object.hasOwn(input, key)));
 }
 function edgeContract(value, path) {
     const constraintsPath = `${path}/constraints`;

package/dist/v1/compiled/admission/wire/policy.d.ts

@@ -4,7 +4,8 @@ export declare function compiledPolicy(input: JsonValue, path: string): never;
 /** Check one callable's caller rule: `true`, the rule every caller satisfies, or Policy checks. */
 export declare function callablePolicy(input: JsonValue | undefined, path: string): void;
 /**
- * Check one Node Class rule: Policy checks over `self` and `ref` objects only, in their one
- * spelling. A lone check of `self` is spelled as the Policy reference itself.
+ * Check one Class rule: Policy checks over `self` and `ref` objects only, or, in a Node create
+ * rule, `ref` objects only, in their one spelling. A lone check of `self` is spelled as the Policy
+ * reference itself.
  */
-export declare function classRuleChecks(input: JsonValue, path: string): void;
+export declare function classRuleChecks(input: JsonValue, path: string, site: 'class' | 'create'): void;

package/dist/v1/compiled/admission/wire/policy.js

@@ -130,17 +130,18 @@ export function callablePolicy(input, path) {
         policyCheck(input, 0, path);
 }
 /**
- * Check one Node Class rule: Policy checks over `self` and `ref` objects only, in their one
- * spelling. A lone check of `self` is spelled as the Policy reference itself.
+ * Check one Class rule: Policy checks over `self` and `ref` objects only, or, in a Node create
+ * rule, `ref` objects only, in their one spelling. A lone check of `self` is spelled as the Policy
+ * reference itself.
  */
-export function classRuleChecks(input, path) {
-    policyCheck(input, 0, path, 'class');
+export function classRuleChecks(input, path, site) {
+    policyCheck(input, 0, path, site);
     const rule = input;
     if (json.serialize(normalizeClassRule(rule)) !== json.serialize(rule))
         invalid('Class rule spelling', undefined, path);
 }
 /** What a site calls its checks in a refusal. */
-const SITE = { callable: 'Callable Policy', class: 'Class rule' };
+const SITE = { callable: 'Callable Policy', class: 'Class rule', create: 'Create rule' };
 /** Check the recursive Policy check wire grammar of one use site. */
 function policyCheck(input, depth, path, site = 'callable') {
     const name = SITE[site];
@@ -148,7 +149,7 @@ function policyCheck(input, depth, path, site = 'callable') {
         invalid(`${name} depth`, undefined, path);
     const value = object(input, name, path);
     if (Object.hasOwn(value, 'sameNode')) {
-        const equality = site === 'class' ? 'Class rule equality' : 'Callable equality';
+        const equality = site === 'callable' ? 'Callable equality' : `${name} equality`;
         exact(value, ['sameNode'], equality, path);
         const pair = object(value.sameNode, equality, `${path}/sameNode`);
         exact(pair, ['left', 'right'], `${equality} operands`, `${path}/sameNode`);
@@ -174,7 +175,7 @@ function policyCheck(input, depth, path, site = 'callable') {
 function policyCheckObject(input, objectPath, site) {
     const name = SITE[site];
     const target = object(input, `${name} object`, objectPath);
-    if (target.kind === 'self')
+    if (target.kind === 'self' && site !== 'create')
         exact(target, ['kind'], `${name} self`, objectPath);
     else if (target.kind === 'input' && site === 'callable') {
         exact(target, ['kind', 'field'], `${name} input`, objectPath);

package/dist/v1/compiled/loader/load.js

@@ -107,7 +107,7 @@ function programValidation(programs, properties, propertyOrdering, callables) {
             ...(callable.fields === undefined
                 ? {}
                 : { fields: Object.freeze(Object.keys(callable.fields)) }),
-            validateInput: (value) => validateValueProgram(input, value),
+            validateInput: (value, options) => validateValueProgram(input, value, [input.root], options),
             validateInputField(field, value) {
                 const nodes = callable.fields?.[field];
                 return nodes === undefined

package/dist/v1/domain/create.js

@@ -136,7 +136,7 @@ function createDefinitions(declarations, classesByKey, input) {
                 policy: definition.policy,
                 ...(inputFields === undefined ? {} : { inputFields }),
                 definition,
-                validateInput: (value) => input.validation.callableInput(key, value),
+                validateInput: (value, options) => input.validation.callableInput(key, value, options),
                 validateInputField: (field, value) => input.validation.callableInputField(key, field, value),
                 validateOutput: (value) => input.validation.callableOutput(key, value),
             });

package/dist/v1/domain/model/input.d.ts

@@ -1,3 +1,4 @@
+import type { Options } from '@astrale-os/kernel-dsl/value';
 import type { Key as AddressKey, PropertyKey, Revision } from '../../addressing/index.js';
 import type { DomainDependency, DomainDependencyMap } from '../../addressing/index.js';
 import type { CoreEdge } from '../../language/core/model/core.js';
@@ -27,7 +28,7 @@ export interface DomainValidation {
     propertyProgram(key: PropertyKey): ValueProgram;
     propertyOrdering(key: PropertyKey): OrderingKind | undefined;
     callableExists(key: AddressKey.Callable): boolean;
-    callableInput(key: AddressKey.Callable, input: unknown): readonly Diagnostic[];
+    callableInput(key: AddressKey.Callable, input: unknown, options?: Options): readonly Diagnostic[];
     callableFields(key: AddressKey.Callable): readonly string[] | undefined;
     callableInputField(key: AddressKey.Callable, field: string, input: unknown): readonly Diagnostic[];
     callableOutput(key: AddressKey.Callable, output: unknown): readonly Diagnostic[];

package/dist/v1/domain/projection/classes.js

@@ -80,7 +80,7 @@ export function createClasses(definitions, validation) {
                     executable: isMethodExecutable(definition, methodDefinition),
                     ...(inputFields === undefined ? {} : { inputFields }),
                     definition: methodDefinition,
-                    validateInput: (input) => validation.callableInput(methodKey, input),
+                    validateInput: (input, options) => validation.callableInput(methodKey, input, options),
                     validateInputField: (field, input) => validation.callableInputField(methodKey, field, input),
                     validateOutput: (output) => validation.callableOutput(methodKey, output),
                 });

package/dist/v1/domain/validation/create.d.ts

@@ -1,3 +1,4 @@
+import type { Options } from '@astrale-os/kernel-dsl/value';
 import type { Key, PropertyKey } from '../../addressing/index.js';
 import type { Diagnostic } from '../../language/validation/diagnostic.js';
 import type { ValueProgram } from '../../language/value/compile/model.js';
@@ -10,7 +11,7 @@ export interface PropertyValidation {
 }
 export interface CallableValidation {
     readonly fields?: readonly string[];
-    validateInput(input: unknown): readonly Diagnostic[];
+    validateInput(input: unknown, options?: Options): readonly Diagnostic[];
     validateInputField(field: string, input: unknown): readonly Diagnostic[];
     validateOutput(output: unknown): readonly Diagnostic[];
 }

package/dist/v1/domain/validation/create.js

@@ -21,7 +21,7 @@ export function createDomainValidation(properties, callables) {
         propertyProgram: (key) => propertyOf(key).program(),
         propertyOrdering: (key) => properties.get(key)?.ordering,
         callableExists: (key) => callables.has(key),
-        callableInput: (key, input) => callableOf(key).validateInput(input),
+        callableInput: (key, input, options) => callableOf(key).validateInput(input, options),
         callableFields: (key) => callables.get(key)?.fields,
         callableInputField: (key, field, input) => callableOf(key).validateInputField(field, input),
         callableOutput: (key, output) => callableOf(key).validateOutput(output),

package/dist/v1/index.d.ts

@@ -5,7 +5,7 @@ export { isBinaryInput } from './language/callable/model/callable.js';
 export type { EventOf, StateMachine, StateOf } from './language/state/index.js';
 export { PropertyValues } from './language/index.js';
 export * as metadata from './language/definition/metadata.js';
-export type { AnyResolvedClass, BoundMethodOf, BoundMethodShortcutsOf, CallableResultOf, CallableInputOf, CallableInputModeOf, CallableOutputOf, ClassSatisfactionKeysOf, ClassDefinition, CoreDefinition, CoreEdge, FunctionAuth, FunctionDefinition, Inheritance, BinaryInput, BinaryInputProjection, CallableInputContract, MethodDefinition, MethodOwnerKeyOf, CallablePolicy, ClassPolicy, ClassRuleChecks, ClassRuleObject, NodeClassPolicy, PolicyCheckExpression, PolicyDefinition, PropertyImmutability, PropertyInputOf, PropertyAccessOf, PropertyOutputOf, PropertyShortcutsOf, PropertyValuesOf, ResolvedClass, ResolvedCoreDefinition, ResolvedCoreEndpoint, ResolvedData, ResolvedFunction, ExecutableMethod, ResolvedMethod, ResolvedMethodCollection, ResolvedPolicy, ResolvedProperty, ResolvedView, MethodAccessOf, SelfMethodsOf, SelfPropertiesOf, SelfStaticMethodsOf, StaticMethodsOf, ViewDefinition, } from './language/index.js';
+export type { AnyResolvedClass, BoundMethodOf, BoundMethodShortcutsOf, CallableResultOf, CallableInputOf, CallableInputModeOf, CallableOutputOf, ClassSatisfactionKeysOf, ClassDefinition, CoreDefinition, CoreEdge, FunctionAuth, FunctionDefinition, Inheritance, BinaryInput, BinaryInputProjection, CallableInputContract, MethodDefinition, MethodOwnerKeyOf, CallablePolicy, ClassPolicy, ClassRuleChecks, ClassRuleObject, ClassWritePolicy, CreateRuleChecks, EdgeClassPolicy, EdgeClassWritePolicy, EdgeRuleChecks, NodeClassCreatePolicy, NodeClassPolicy, NodeClassWritePolicy, PolicyCheckExpression, PolicyDefinition, PropertyImmutability, PropertyInputOf, PropertyAccessOf, PropertyOutputOf, PropertyShortcutsOf, PropertyValuesOf, ResolvedClass, ResolvedCoreDefinition, ResolvedCoreEndpoint, ResolvedData, ResolvedFunction, ExecutableMethod, ResolvedMethod, ResolvedMethodCollection, ResolvedPolicy, ResolvedProperty, ResolvedView, MethodAccessOf, SelfMethodsOf, SelfPropertiesOf, SelfStaticMethodsOf, StaticMethodsOf, ViewDefinition, } from './language/index.js';
 export { acceptDefinitionRef, callableAddress, ClassKey, equalDefinitionRefs, isDefinitionRef, Key, MethodKey, PropertyKey, } from './addressing/index.js';
 export type { ClassRef, CoreRef, DefinitionBase, DefinitionKey, DefinitionRef, FunctionRef, MethodAddress, PolicyRef, Revision, ViewRef, } from './addressing/index.js';
 export type { Definition } from './language/index.js';

package/dist/v1/language/callable/resolved.d.ts

@@ -1,3 +1,4 @@
+import type { Options } from '@astrale-os/kernel-dsl/value';
 import type { DefinitionKey, FunctionRef, Key, MethodKey } from '../../addressing/index.js';
 import type { ResolvedClass } from '../class/resolved.js';
 import type { CallablePolicy } from '../policy/model/policy.js';
@@ -36,7 +37,11 @@ export interface ResolvedMethod<out Input = unknown, out Output = unknown, out S
         readonly static: Static;
         readonly abstract: Abstract;
     };
-    validateInput(input: unknown): readonly Diagnostic[];
+    /**
+     * The issues of `input` against the callable's input schema, `options` overriding the portable
+     * limits it is admitted under: those it crossed the wire under, for a call's input.
+     */
+    validateInput(input: unknown, options?: Options): readonly Diagnostic[];
     validateInputField(field: string, input: unknown): readonly Diagnostic[];
     validateOutput(output: unknown): readonly Diagnostic[];
     readonly __input?: Input;
@@ -62,7 +67,11 @@ export interface ResolvedFunction<out Input = unknown, out Output = unknown, out
     /** Present only when the callable input is a safely enumerable closed object. */
     readonly inputFields?: readonly string[];
     readonly definition: CallableDefinitionOf<FunctionDefinition, Auth, Policy>;
-    validateInput(input: unknown): readonly Diagnostic[];
+    /**
+     * The issues of `input` against the callable's input schema, `options` overriding the portable
+     * limits it is admitted under: those it crossed the wire under, for a call's input.
+     */
+    validateInput(input: unknown, options?: Options): readonly Diagnostic[];
     validateInputField(field: string, input: unknown): readonly Diagnostic[];
     validateOutput(output: unknown): readonly Diagnostic[];
     readonly __input?: Input;

package/dist/v1/language/class/model/class.d.ts

@@ -1,6 +1,6 @@
 import type { ClassRef, DefinitionBase, PropertyKey } from '../../../addressing/index.js';
 import type { MethodRecord } from '../../callable/model/callable.js';
-import type { ClassPolicy, NodeClassPolicy } from '../../policy/model/policy.js';
+import type { EdgeClassPolicy, EdgeClassWritePolicy, NodeClassCreatePolicy, NodeClassPolicy, NodeClassWritePolicy } from '../../policy/model/policy.js';
 import type { DataFacet } from './data.js';
 import type { EdgeContract } from './edge.js';
 import type { EdgePropertyDefinition, NodePropertyDefinition, PropertyFacet } from './property.js';
@@ -10,15 +10,27 @@ export type ClassKind = 'node' | 'edge';
  * on that Domain; `'internal'`, those of its Domain only; `'final'`, none.
  */
 export type Inheritance = 'open' | 'internal' | 'final';
-/** An absent observation rule admits every caller; a delegation is still scoped by its ceiling. */
+/**
+ * An absent observation rule admits every caller; a delegation is still scoped by its ceiling. An
+ * absent write rule admits only the Domain that declares the Class.
+ */
 export interface NodeClassPolicies {
     readonly read?: NodeClassPolicy;
     readonly traverse?: NodeClassPolicy;
+    readonly create?: NodeClassCreatePolicy;
+    readonly update?: NodeClassWritePolicy;
+    readonly delete?: NodeClassWritePolicy;
 }
-/** An absent observation rule admits every caller; a delegation is still scoped by its ceiling. */
+/**
+ * An absent observation rule admits every caller; a delegation is still scoped by its ceiling. An
+ * absent write rule admits only the Domain that declares the Class.
+ */
 export interface EdgeClassPolicies {
-    readonly read?: ClassPolicy;
-    readonly traverse?: ClassPolicy;
+    readonly read?: EdgeClassPolicy;
+    readonly traverse?: EdgeClassPolicy;
+    readonly create?: EdgeClassWritePolicy;
+    readonly update?: EdgeClassWritePolicy;
+    readonly delete?: EdgeClassWritePolicy;
 }
 /**
  * The Properties one key of a Node Class names, own or inherited, which no two Nodes of the Classes

package/dist/v1/language/freeze.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Freeze `value` and every object it reaches, in place. An object already frozen is taken as frozen
+ * through, so a value built from frozen parts is frozen without walking them again.
+ */
+export declare function deepFreeze<T>(value: T): Readonly<T>;

package/dist/v1/{schema/canonical → language}/freeze.js

@@ -1,3 +1,7 @@
+/**
+ * Freeze `value` and every object it reaches, in place. An object already frozen is taken as frozen
+ * through, so a value built from frozen parts is frozen without walking them again.
+ */
 export function deepFreeze(value) {
     if (value === null || typeof value !== 'object' || Object.isFrozen(value)) {
         return value;

package/dist/v1/language/policy/analysis/typing.d.ts

@@ -21,6 +21,7 @@ export type PolicyUseContract = {
 /** What Policy typing reads of the closure it types against: source or compiled admission. */
 export interface PolicyTypingScope {
     readonly normalized: ReadonlyMap<string, PolicyExpression>;
+    /** Each resolves, through `resolveClass`, to a Node Class. */
     readonly allNodeClasses: readonly ClassRef[];
     /** The concrete Classes of `allNodeClasses`, in its order. */
     readonly concreteNodeClasses: readonly ClassRef[];