@astrale-os/kernel-protocol 0.5.0-beta.69 → 0.5.0-beta.70

package/dist/invocation/delegate.d.ts

@@ -1,20 +1,11 @@
 export declare namespace Delegate {
+    /** One wire leaf; Identity set algebra is not supported. */
     type Expr = {
         readonly kind: 'identity';
         readonly self: true;
     } | {
         readonly kind: 'identity';
         readonly credential: string;
-    } | {
-        readonly kind: 'union';
-        readonly operands: readonly Expr[];
-    } | {
-        readonly kind: 'intersect';
-        readonly operands: readonly Expr[];
-    } | {
-        readonly kind: 'exclude';
-        readonly base: Expr;
-        readonly excluded: readonly Expr[];
     };
 }
 export interface Delegate {

package/dist/invocation/delegate.js

@@ -8,6 +8,7 @@ export function acceptDelegate(input) {
     if (!Number.isSafeInteger(object.ttlSeconds) || object.ttlSeconds < 1) {
         invalid('delegate.ttlSeconds must be a positive safe integer');
     }
+    // Omission and `self` both carry the authenticated caller unchanged; nothing else is admitted.
     let attenuation;
     if (object.attenuation !== undefined) {
         try {
@@ -15,29 +16,14 @@ export function acceptDelegate(input) {
         }
         catch (cause) {
             if (cause instanceof AuthValueError)
-                invalid('delegate.attenuation must be a valid expression');
+                invalid('delegate.attenuation must be self');
             throw cause;
         }
-        requireTextCredentials(attenuation);
+        if (!('self' in attenuation))
+            invalid('delegate.attenuation must be self');
     }
     return Object.freeze({
         ttlSeconds: object.ttlSeconds,
         ...(attenuation === undefined ? {} : { attenuation: attenuation }),
     });
 }
-function requireTextCredentials(input) {
-    if (input.kind === 'identity') {
-        if ('credential' in input && typeof input.credential !== 'string') {
-            invalid('delegate.attenuation credentials must be non-empty text');
-        }
-        return;
-    }
-    if (input.kind === 'exclude') {
-        requireTextCredentials(input.base);
-        for (const operand of input.excluded)
-            requireTextCredentials(operand);
-        return;
-    }
-    for (const operand of input.operands)
-        requireTextCredentials(operand);
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-protocol",
-  "version": "0.5.0-beta.69",
+  "version": "0.5.0-beta.70",
   "description": "Portable Astrale invocation, publication, installation, routing, and issuer protocols",
   "license": "Apache-2.0",
   "repository": {
@@ -173,8 +173,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-core": "0.9.0-beta.63",
-    "@astrale-os/kernel-dsl": "0.2.0-beta.45",
+    "@astrale-os/kernel-core": "0.9.0-beta.64",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.46",
     "@noble/hashes": "2.3.0"
   },
   "devDependencies": {