@astrale-os/kernel-protocol 0.5.0-beta.27 → 0.5.0-beta.29

package/CHANGELOG.md

@@ -24,6 +24,35 @@
 * the first supported V2 release is a coordinated `1.0.0`, not a compatible continuation of the
   current `0.x` line; package and wire versions remain independent as specified in
   [the protocol architecture](./.spec/architecture.md)
+## [0.5.0-beta.29](https://github.com/astrale-os/kernel/compare/kernel-protocol-v0.5.0-beta.28...kernel-protocol-v0.5.0-beta.29) (2026-08-30)
+
+### ⚠ BREAKING CHANGES
+
+* **publication:** capability requirements use `authority` instead of `admin`; the legacy key is rejected
+
+
+### Features
+
+* **publication:** name authority requirements explicitly ([#560](https://github.com/astrale-os/kernel/issues/560))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @astrale-os/kernel-core bumped to 0.9.0-beta.28
+    * @astrale-os/kernel-dsl bumped to 0.2.0-beta.21
+
+## [0.5.0-beta.28](https://github.com/astrale-os/kernel/compare/kernel-protocol-v0.5.0-beta.27...kernel-protocol-v0.5.0-beta.28) (2026-08-30)
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @astrale-os/kernel-core bumped to 0.9.0-beta.27
+    * @astrale-os/kernel-dsl bumped to 0.2.0-beta.20
+
 ## [0.5.0-beta.27](https://github.com/astrale-os/kernel/compare/kernel-protocol-v0.5.0-beta.26...kernel-protocol-v0.5.0-beta.27) (2026-08-29)
 
 

package/dist/publication/index.d.ts

@@ -10,7 +10,7 @@ export { PublicationError, type PublicationErrorCode } from './error.js';
 export * as delivery from './delivery/index.js';
 export type { Authentication as DeliveryAuthentication, Endpoint as DeliveryEndpoint, } from './delivery-endpoint.js';
 export type { Manifest } from './manifest.js';
-export { ClassOperationOrder, admitRequirements, validateRequirements, type CapabilityAdminRequirements, type CapabilityRequirements, type ClassCapabilityRequirement, type ClassOperation, type NonEmpty, type PublicationRequirements, } from './requirements.js';
+export { ClassOperationOrder, admitRequirements, validateRequirements, type CapabilityAuthorityRequirements, type CapabilityRequirements, type ClassCapabilityRequirement, type ClassOperation, type NonEmpty, type PublicationRequirements, } from './requirements.js';
 export { acceptReference, compareReference, compareReferences, matchesReference, reference, type PublicationRef, type PublicationReferenceRelation, } from './reference.js';
 export type { BodyPick, CredentialSource, HttpMethod, HttpRoute, HttpRouteDeclaration, RouteBody, RouteHeaders, SingleCredentialSource, } from './route.js';
 export type { Schema } from './schema.js';

package/dist/publication/requirements.d.ts

@@ -8,14 +8,14 @@ export interface ClassCapabilityRequirement {
     readonly class: ClassRef;
     readonly operations: NonEmpty<ClassOperation>;
 }
-export interface CapabilityAdminRequirements {
+export interface CapabilityAuthorityRequirements {
     readonly grant?: NonEmpty<AuthorityOperation>;
     readonly revoke?: NonEmpty<AuthorityOperation>;
 }
 export interface CapabilityRequirements {
     readonly functions?: NonEmpty<SemanticKey.Callable>;
     readonly classes?: NonEmpty<ClassCapabilityRequirement>;
-    readonly admin?: CapabilityAdminRequirements;
+    readonly authority?: CapabilityAuthorityRequirements;
 }
 export interface PublicationRequirements {
     readonly capabilities: CapabilityRequirements;

package/dist/publication/requirements.js

@@ -15,7 +15,7 @@ export function admitRequirements(input) {
     const requirements = record(input, 'PUBLICATION_INVALID', 'Publication requirements are invalid.');
     exact(requirements, ['capabilities'], 'PUBLICATION_INVALID');
     const capabilities = record(requirements.capabilities, 'PUBLICATION_INVALID', 'Publication capability requirements are invalid.');
-    exact(capabilities, ['admin', 'classes', 'functions'], 'PUBLICATION_INVALID');
+    exact(capabilities, ['authority', 'classes', 'functions'], 'PUBLICATION_INVALID');
     const functions = capabilities.functions === undefined
         ? undefined
         : nonEmpty(capabilities.functions, 'Function capability requirements').map(admitCallable);
@@ -30,7 +30,9 @@ export function admitRequirements(input) {
         unique(classes.map((entry) => classKey(entry.class)), 'PUBLICATION_INVALID', 'Class capability requirement');
         canonical(classes, (left, right) => compare(classKey(left.class), classKey(right.class)), 'Class capability requirements');
     }
-    const admin = capabilities.admin === undefined ? undefined : admitAdminRequirements(capabilities.admin);
+    const authority = capabilities.authority === undefined
+        ? undefined
+        : admitAuthorityRequirements(capabilities.authority);
     return deepFreeze({
         capabilities: {
             ...(functions === undefined
@@ -39,7 +41,7 @@ export function admitRequirements(input) {
             ...(classes === undefined
                 ? {}
                 : { classes: Object.freeze(classes) }),
-            ...(admin === undefined ? {} : { admin }),
+            ...(authority === undefined ? {} : { authority }),
         },
     });
 }
@@ -101,14 +103,14 @@ function admitClassRequirement(input) {
         operations: Object.freeze(operations),
     });
 }
-function admitAdminRequirements(input) {
-    const admin = record(input, 'PUBLICATION_INVALID', 'Administrative capability requirements are invalid.');
-    exact(admin, ['grant', 'revoke'], 'PUBLICATION_INVALID');
-    if (admin.grant === undefined && admin.revoke === undefined) {
-        fail('PUBLICATION_INVALID', 'Administrative capability requirements cannot be empty.');
+function admitAuthorityRequirements(input) {
+    const authority = record(input, 'PUBLICATION_INVALID', 'Authority capability requirements are invalid.');
+    exact(authority, ['grant', 'revoke'], 'PUBLICATION_INVALID');
+    if (authority.grant === undefined && authority.revoke === undefined) {
+        fail('PUBLICATION_INVALID', 'Authority capability requirements cannot be empty.');
     }
-    const grant = admitAuthorityOperations(admin.grant, 'grant');
-    const revoke = admitAuthorityOperations(admin.revoke, 'revoke');
+    const grant = admitAuthorityOperations(authority.grant, 'grant');
+    const revoke = admitAuthorityOperations(authority.revoke, 'revoke');
     return Object.freeze({
         ...(grant === undefined ? {} : { grant }),
         ...(revoke === undefined ? {} : { revoke }),
@@ -117,9 +119,9 @@ function admitAdminRequirements(input) {
 function admitAuthorityOperations(input, kind) {
     if (input === undefined)
         return undefined;
-    const values = nonEmpty(input, `Administrative ${kind} operations`).map((entry) => admitOperation(entry, AuthorityOperationOrder, `Administrative ${kind} operation`));
-    unique(values, 'PUBLICATION_INVALID', `administrative ${kind} operation`);
-    canonical(values, ordered(AuthorityOperationOrder), `Administrative ${kind} operations`);
+    const values = nonEmpty(input, `Authority ${kind} operations`).map((entry) => admitOperation(entry, AuthorityOperationOrder, `Authority ${kind} operation`));
+    unique(values, 'PUBLICATION_INVALID', `authority ${kind} operation`);
+    canonical(values, ordered(AuthorityOperationOrder), `Authority ${kind} operations`);
     return Object.freeze(values);
 }
 function admitClassRef(input) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-protocol",
-  "version": "0.5.0-beta.27",
+  "version": "0.5.0-beta.29",
   "description": "Portable Astrale invocation, publication, installation, routing, and issuer protocols",
   "license": "Apache-2.0",
   "repository": {
@@ -133,8 +133,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-core": "0.9.0-beta.26",
-    "@astrale-os/kernel-dsl": "0.2.0-beta.19",
+    "@astrale-os/kernel-core": "0.9.0-beta.28",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.21",
     "@noble/hashes": "2.3.0"
   },
   "devDependencies": {