@astrale-os/kernel-protocol 0.5.0-beta.70 → 0.5.0-beta.72

package/dist/index.d.ts

@@ -2,8 +2,6 @@ export * as artifact from './artifact/index.js';
 export * as invocation from './invocation/index.js';
 export * as codecs from './codecs/index.js';
 export * as errors from './errors/index.js';
-/** @deprecated Use `release`; Publication v2/v3 remains available under `release.legacy`. */
-export * as publication from './release/legacy/index.js';
 export * as release from './release/index.js';
 export * as schema from './schema/index.js';
 export * as routes from './routes/index.js';

package/dist/index.js

@@ -2,8 +2,6 @@ export * as artifact from './artifact/index.js';
 export * as invocation from './invocation/index.js';
 export * as codecs from './codecs/index.js';
 export * as errors from './errors/index.js';
-/** @deprecated Use `release`; Publication v2/v3 remains available under `release.legacy`. */
-export * as publication from './release/legacy/index.js';
 export * as release from './release/index.js';
 export * as schema from './schema/index.js';
 export * as routes from './routes/index.js';

package/dist/invocation/binding-codecs.d.ts

@@ -1,8 +1,9 @@
 import type { Codec } from '../codecs/codec.js';
-export type CodecProfile = 'json';
-export interface SupportedCodec {
+type CodecProfile = 'json';
+interface SupportedCodec {
     readonly codec: Codec;
     readonly profile: CodecProfile;
 }
 export declare function codecProfile(codec: Codec): CodecProfile | undefined;
 export declare function admitSupportedCodecs(supported: readonly Codec[]): readonly SupportedCodec[];
+export {};

package/dist/invocation/delegate.d.ts

@@ -1,15 +1,4 @@
-export declare namespace Delegate {
-    /** One wire leaf; Identity set algebra is not supported. */
-    type Expr = {
-        readonly kind: 'identity';
-        readonly self: true;
-    } | {
-        readonly kind: 'identity';
-        readonly credential: string;
-    };
-}
 export interface Delegate {
     readonly ttlSeconds: number;
-    readonly attenuation?: Delegate.Expr;
 }
 export declare function acceptDelegate(input: unknown): Delegate;

package/dist/invocation/delegate.js

@@ -1,6 +1,5 @@
-import { AuthValueError, grant } from '@astrale-os/kernel-core/auth';
 import { exactDataObject, exactFields, invalid, required } from './admission.js';
-const FIELDS = new Set(['ttlSeconds', 'attenuation']);
+const FIELDS = new Set(['ttlSeconds']);
 export function acceptDelegate(input) {
     const object = exactDataObject(input, 'delegate');
     exactFields(object, FIELDS, 'delegate');
@@ -8,22 +7,5 @@ export function acceptDelegate(input) {
     if (!Number.isSafeInteger(object.ttlSeconds) || object.ttlSeconds < 1) {
         invalid('delegate.ttlSeconds must be a positive safe integer');
     }
-    // Omission and `self` both carry the authenticated caller unchanged; nothing else is admitted.
-    let attenuation;
-    if (object.attenuation !== undefined) {
-        try {
-            attenuation = grant.acceptUnresolved({ v: 1, expr: object.attenuation }).expr;
-        }
-        catch (cause) {
-            if (cause instanceof AuthValueError)
-                invalid('delegate.attenuation must be self');
-            throw cause;
-        }
-        if (!('self' in attenuation))
-            invalid('delegate.attenuation must be self');
-    }
-    return Object.freeze({
-        ttlSeconds: object.ttlSeconds,
-        ...(attenuation === undefined ? {} : { attenuation: attenuation }),
-    });
+    return Object.freeze({ ttlSeconds: object.ttlSeconds });
 }

package/dist/invocation/http/index.d.ts

@@ -1,5 +1,5 @@
 export { BINARY_DELIVERY_FIELD, BINARY_HEADERS_FIELD, decodeBinaryHeaderNames, decodeInvocationId, encodeBinaryHeaderNames, encodeInvocationId, isApplicationBinaryHeader, MAXIMUM_INVOCATION_FIELD_BYTES, INVOCATION_FIELD, REQUEST_ID_FIELD, STREAMING_BINARY_DELIVERY, } from './binary.js';
 export { codecForContentType, negotiateResponseCodec } from './negotiation.js';
-export { BINARY_LENGTH_FIELD, BINARY_REQUEST_CONTENT_TYPE, decodeBinaryRequestEnvelope, encodeBinaryRequestEnvelope, MAXIMUM_REQUEST_ENVELOPE_BYTES, REQUEST_ENVELOPE_FIELD, } from './request.js';
+export { BINARY_LENGTH_FIELD, BINARY_REQUEST_CONTENT_TYPE, decodeBinaryLength, decodeBinaryRequestEnvelope, encodeBinaryRequestEnvelope, MAXIMUM_REQUEST_ENVELOPE_BYTES, REQUEST_ENVELOPE_FIELD, } from './request.js';
 export { encodeStreamFrame, LENGTH_PREFIX_V1, STREAM_FRAMING_FIELD } from './stream.js';
 export { BAGGAGE_FIELD, decodeTraceHeaders, encodeTraceHeaders, TRACEPARENT_FIELD, TRACESTATE_FIELD, } from './trace.js';

package/dist/invocation/http/index.js

@@ -1,5 +1,5 @@
 export { BINARY_DELIVERY_FIELD, BINARY_HEADERS_FIELD, decodeBinaryHeaderNames, decodeInvocationId, encodeBinaryHeaderNames, encodeInvocationId, isApplicationBinaryHeader, MAXIMUM_INVOCATION_FIELD_BYTES, INVOCATION_FIELD, REQUEST_ID_FIELD, STREAMING_BINARY_DELIVERY, } from './binary.js';
 export { codecForContentType, negotiateResponseCodec } from './negotiation.js';
-export { BINARY_LENGTH_FIELD, BINARY_REQUEST_CONTENT_TYPE, decodeBinaryRequestEnvelope, encodeBinaryRequestEnvelope, MAXIMUM_REQUEST_ENVELOPE_BYTES, REQUEST_ENVELOPE_FIELD, } from './request.js';
+export { BINARY_LENGTH_FIELD, BINARY_REQUEST_CONTENT_TYPE, decodeBinaryLength, decodeBinaryRequestEnvelope, encodeBinaryRequestEnvelope, MAXIMUM_REQUEST_ENVELOPE_BYTES, REQUEST_ENVELOPE_FIELD, } from './request.js';
 export { encodeStreamFrame, LENGTH_PREFIX_V1, STREAM_FRAMING_FIELD } from './stream.js';
 export { BAGGAGE_FIELD, decodeTraceHeaders, encodeTraceHeaders, TRACEPARENT_FIELD, TRACESTATE_FIELD, } from './trace.js';

package/dist/invocation/http/request.d.ts

@@ -3,6 +3,8 @@ export declare const REQUEST_ENVELOPE_FIELD: 'x-astrale-request';
 export declare const BINARY_LENGTH_FIELD: 'x-astrale-binary-length';
 export declare const BINARY_REQUEST_CONTENT_TYPE: 'application/octet-stream';
 export declare const MAXIMUM_REQUEST_ENVELOPE_BYTES = 8192;
+/** Decode one declared byte count: a canonical unsigned decimal within the safe integer range. */
+export declare function decodeBinaryLength(input: string): number | undefined;
 /** Encode one canonical V2 Request into the binary-request HTTP field. */
 export declare function encodeBinaryRequestEnvelope(input: Request): string;
 /** Decode one bounded base64url JSON V2 Request from the binary-request HTTP field. */

package/dist/invocation/http/request.js

@@ -7,6 +7,14 @@ export const BINARY_REQUEST_CONTENT_TYPE = 'application/octet-stream';
 export const MAXIMUM_REQUEST_ENVELOPE_BYTES = 8_192;
 const BASE64URL = /^[A-Za-z0-9_-]+$/u;
 const MAXIMUM_ENCODED_BYTES = Math.ceil(MAXIMUM_REQUEST_ENVELOPE_BYTES / 3) * 4;
+const DECIMAL = /^(?:0|[1-9][0-9]*)$/u;
+/** Decode one declared byte count: a canonical unsigned decimal within the safe integer range. */
+export function decodeBinaryLength(input) {
+    if (!DECIMAL.test(input))
+        return undefined;
+    const length = Number(input);
+    return Number.isSafeInteger(length) ? length : undefined;
+}
 /** Encode one canonical V2 Request into the binary-request HTTP field. */
 export function encodeBinaryRequestEnvelope(input) {
     const request = decodeRequest(input);

package/dist/invocation/index.d.ts

@@ -5,9 +5,6 @@ export { acceptIdempotencyKey, HTTP_IDEMPOTENCY_KEY, MAXIMUM_IDEMPOTENCY_KEY_LEN
 export { acceptInvocationId, InvocationError, MAXIMUM_INVOCATION_ID_LENGTH, sameInvocationId, type InvocationId, } from './identity.js';
 export * as http from './http/index.js';
 export { acceptDelegate, type Delegate } from './delegate.js';
-export type { PublicationBindingInput, PublicationVia } from './legacy/index.js';
-/** @deprecated The legacy routed witness every Kernel emits until the breaking release (AM-1). */
-export * as legacy from './legacy/index.js';
 export { decodeMiss, miss, type Miss } from './miss.js';
 export { acceptRoute, acceptRedirection, decodeRedirectResponse, remoteRoute, type RemoteBindingInput, type Redirection, type RedirectResponse, type Route, } from './redirect.js';
 export { decodeRequest, type Request } from './request.js';

package/dist/invocation/index.js

@@ -5,8 +5,6 @@ export { acceptIdempotencyKey, HTTP_IDEMPOTENCY_KEY, MAXIMUM_IDEMPOTENCY_KEY_LEN
 export { acceptInvocationId, InvocationError, MAXIMUM_INVOCATION_ID_LENGTH, sameInvocationId, } from './identity.js';
 export * as http from './http/index.js';
 export { acceptDelegate } from './delegate.js';
-/** @deprecated The legacy routed witness every Kernel emits until the breaking release (AM-1). */
-export * as legacy from './legacy/index.js';
 export { decodeMiss, miss } from './miss.js';
 export { acceptRoute, acceptRedirection, decodeRedirectResponse, remoteRoute, } from './redirect.js';
 export { decodeRequest } from './request.js';

package/dist/invocation/redirect.d.ts

@@ -4,17 +4,12 @@ import type { InvocationEndpoints } from '../release/bindings/invocation.js';
 import type { ReleaseDigest } from '../release/digest.js';
 import type { RequestId } from './correlation.js';
 import type { InvocationId } from './identity.js';
-import type { PublicationVia } from './legacy/via.js';
 import type { Via } from './routing.js';
 import type { Trace } from './trace.js';
 export interface Route {
     readonly endpoint: InvocationEndpoints;
-    /**
-     * Routed witness of the installed release. Its `PublicationVia` shape is deprecated (legacy
-     * pins and the v3 projection of v4 pins); successor: `Via`, emitted by the breaking release
-     * (AM-1).
-     */
-    readonly via: Via | PublicationVia;
+    /** Routed witness of the exact installed release. */
+    readonly via: Via;
 }
 export interface Redirection {
     readonly route: Route;
@@ -37,7 +32,7 @@ export interface RemoteBindingInput {
     readonly release: ReleaseDigest;
 }
 export declare function acceptRoute(input: unknown): Route;
-/** Project an installed release binding into a release `Via`; legacy emitters use `legacy.remoteRoute`. */
+/** Project one installed release binding into its routed witness. */
 export declare function remoteRoute(origin: Key.Origin, binding: RemoteBindingInput, issuer: IssuerId): Route;
 export declare function acceptRedirection(input: unknown): Redirection;
 export declare function decodeRedirectResponse(input: unknown): RedirectResponse;

package/dist/invocation/redirect.js

@@ -1,5 +1,5 @@
-import { acceptInvocationEndpoints } from '../release/legacy/bindings.js';
-import { PublicationError } from '../release/legacy/error.js';
+import { acceptInvocationEndpoints } from '../release/bindings/index.js';
+import { ReleaseError } from '../release/error.js';
 import { exactFields, invalid, invocation, portableObject, requestId, required, string, } from './admission.js';
 import { acceptVia } from './routing.js';
 import { admitTrace } from './trace.js';
@@ -15,13 +15,13 @@ export function acceptRoute(input) {
         return Object.freeze({ endpoint: acceptInvocationEndpoints(object.endpoint), via });
     }
     catch (cause) {
-        if (cause instanceof PublicationError) {
+        if (cause instanceof ReleaseError) {
             return invalid(`route is invalid: ${cause.message}`);
         }
         throw cause;
     }
 }
-/** Project an installed release binding into a release `Via`; legacy emitters use `legacy.remoteRoute`. */
+/** Project one installed release binding into its routed witness. */
 export function remoteRoute(origin, binding, issuer) {
     return acceptRoute({
         endpoint: binding.endpoint,

package/dist/invocation/routing.d.ts

@@ -3,7 +3,6 @@ import type { Revision } from '@astrale-os/kernel-dsl/v1/addressing';
 import type { Object as ValueObject } from '@astrale-os/kernel-dsl/value';
 import type { Sha256Digest } from '../release/digest.js';
 import type { ReleaseRef } from '../release/reference.js';
-import type { PublicationVia } from './legacy/via.js';
 /** Routed witness of one installed release: the Kernel routed this call to that exact release. */
 export interface Via {
     readonly kind: 'via';
@@ -14,15 +13,12 @@ export interface Refresh {
     readonly kind: 'refresh';
     readonly stale: Sha256Digest;
 }
-/** A received `Via` names exactly one of a `ReleaseRef` or a legacy `PublicationRef`. */
-export type Routing = Via | PublicationVia | Refresh;
+/** A received `Via` names one exact `ReleaseRef`. */
+export type Routing = Via | Refresh;
 export declare function acceptRouting(input: unknown): Routing;
-/** Admit one routed witness carrying exactly one of `release` or legacy `publication`. */
-export declare function acceptVia(object: ValueObject, label: string): Via | PublicationVia;
-/** Schema revision of the release or Publication the witness routed the call to. */
-export declare function routedRevision(via: Via | PublicationVia): Revision;
-/**
- * Digest designating what the witness routed the call to: the release digest of a `Via`, the
- * Publication ETag of a legacy `PublicationVia`.
- */
-export declare function routedDigest(via: Via | PublicationVia): Sha256Digest;
+/** Admit one routed witness carrying one exact `release`. */
+export declare function acceptVia(object: ValueObject, label: string): Via;
+/** Schema revision of the release the witness routed the call to. */
+export declare function routedRevision(via: Via): Revision;
+/** Digest of the release the witness routed this call to. */
+export declare function routedDigest(via: Via): Sha256Digest;

package/dist/invocation/routing.js

@@ -1,8 +1,7 @@
 import { ReleaseError } from '../release/error.js';
 import { acceptReference } from '../release/reference.js';
 import { digest, exactFields, invalid, issuerId, portableObject, required } from './admission.js';
-import { acceptPublicationReference } from './legacy/via.js';
-const VIA_FIELDS = new Set(['kind', 'release', 'publication', 'issuer']);
+const VIA_FIELDS = new Set(['kind', 'release', 'issuer']);
 const REFRESH_FIELDS = new Set(['kind', 'stale']);
 export function acceptRouting(input) {
     const object = portableObject(input, 'routing');
@@ -18,39 +17,25 @@ export function acceptRouting(input) {
     }
     return invalid('routing.kind must be "via" or "refresh"');
 }
-/** Admit one routed witness carrying exactly one of `release` or legacy `publication`. */
+/** Admit one routed witness carrying one exact `release`. */
 export function acceptVia(object, label) {
     exactFields(object, VIA_FIELDS, label);
     if (object.kind !== 'via')
         invalid(`${label}.kind must be "via"`);
-    const hasRelease = Object.hasOwn(object, 'release');
-    if (hasRelease === Object.hasOwn(object, 'publication')) {
-        invalid(`${label} must contain exactly one of release or publication`);
-    }
-    required(object, ['issuer'], label);
-    if (!hasRelease) {
-        return Object.freeze({
-            kind: 'via',
-            publication: acceptPublicationReference(object.publication, `${label}.publication`),
-            issuer: issuerId(object.issuer, `${label}.issuer`),
-        });
-    }
+    required(object, ['release', 'issuer'], label);
     return Object.freeze({
         kind: 'via',
         release: acceptReleaseReference(object.release, `${label}.release`),
         issuer: issuerId(object.issuer, `${label}.issuer`),
     });
 }
-/** Schema revision of the release or Publication the witness routed the call to. */
+/** Schema revision of the release the witness routed the call to. */
 export function routedRevision(via) {
-    return 'release' in via ? via.release.revision : via.publication.revision;
+    return via.release.revision;
 }
-/**
- * Digest designating what the witness routed the call to: the release digest of a `Via`, the
- * Publication ETag of a legacy `PublicationVia`.
- */
+/** Digest of the release the witness routed this call to. */
 export function routedDigest(via) {
-    return 'release' in via ? via.release.digest : via.publication.etag;
+    return via.release.digest;
 }
 function acceptReleaseReference(input, label) {
     try {

package/dist/invocation/stale-route.d.ts

@@ -1,4 +1,4 @@
-import type { Etag } from '../release/legacy/etag.js';
+import type { ReleaseDigest } from '../release/digest.js';
 import type { RequestId } from './correlation.js';
 import type { InvocationId } from './identity.js';
 /** Reserved pre-handler routing control; never an application ErrorResponse. */
@@ -6,7 +6,7 @@ export interface Stale {
     readonly kind: 'stale';
     readonly requestId: RequestId;
     readonly invocation: InvocationId;
-    readonly current: Etag;
+    readonly current: ReleaseDigest;
 }
 export declare function decodeStale(input: unknown): Stale;
-export declare function stale(requestId: RequestId, assigned: InvocationId, current: Etag): Stale;
+export declare function stale(requestId: RequestId, assigned: InvocationId, current: ReleaseDigest): Stale;

package/dist/release/bindings/index.d.ts

@@ -1,3 +1,3 @@
 export { admitCallableBinding, admitCallableKey, type CallableBinding } from './callable.js';
 export { acceptInvocationEndpoints, type InvocationEndpoints } from './invocation.js';
-export { admitViewBinding, type IframeRequirements, type ViewBinding } from './view.js';
+export { admitViewBinding, type ViewBinding } from './view.js';

package/dist/release/bindings/view.d.ts

@@ -4,13 +4,8 @@ export interface ViewBinding {
     readonly view: Key.View;
     readonly href: string;
     readonly handshake: 'shell' | 'none';
-    readonly iframe?: IframeRequirements;
     readonly host?: ViewHostRequirements;
 }
-export interface IframeRequirements {
-    readonly sandbox?: readonly string[];
-    readonly allow?: readonly string[];
-}
 export declare function admitViewBinding(input: unknown, origin: string): ViewBinding;
 /** Authoring-only normalization used before a release document is sealed. */
 export declare function canonicalizeViewBinding(input: unknown, origin: string): ViewBinding;

package/dist/release/bindings/view.js

@@ -2,7 +2,6 @@ import { acceptViewHostRequirements, } from '@astrale-os/kernel-core/schema/kern
 import { Key } from '@astrale-os/kernel-dsl/v1/addressing';
 import { fail } from '../error.js';
 import { absoluteHttpUrl, exact, record } from '../shape.js';
-const TOKEN = /^[a-z][a-z0-9-]*$/u;
 export function admitViewBinding(input, origin) {
     return readViewBinding(input, origin, false);
 }
@@ -12,7 +11,7 @@ export function canonicalizeViewBinding(input, origin) {
 }
 function readViewBinding(input, origin, canonicalize) {
     const value = record(input, 'RELEASE_VIEW_INVALID', 'Release View binding is invalid.');
-    exact(value, ['view', 'href', 'handshake', 'iframe', 'host'], 'RELEASE_VIEW_INVALID');
+    exact(value, ['view', 'href', 'handshake', 'host'], 'RELEASE_VIEW_INVALID');
     let view;
     try {
         view = Key(String(value.view));
@@ -29,7 +28,6 @@ function readViewBinding(input, origin, canonicalize) {
     if (value.handshake !== 'shell' && value.handshake !== 'none') {
         fail('RELEASE_VIEW_INVALID', 'View handshake is invalid.');
     }
-    const iframe = admitIframeRequirements(dataValue(value, 'iframe'), value.handshake, canonicalize);
     let host;
     try {
         host = acceptViewHostRequirements(dataValue(value, 'host'), value.handshake, canonicalize);
@@ -43,106 +41,14 @@ function readViewBinding(input, origin, canonicalize) {
         view,
         href: absoluteHttpUrl(value.href, true, 'RELEASE_VIEW_INVALID'),
         handshake: value.handshake,
-        ...(iframe === undefined ? {} : { iframe }),
         ...(host === undefined ? {} : { host }),
     });
 }
-function admitIframeRequirements(input, handshake, canonicalize) {
-    if (input === undefined)
-        return undefined;
-    const value = plainRecord(input);
-    exactOwnKeys(value, ['sandbox', 'allow']);
-    if (!canonicalize && (!Object.hasOwn(value, 'sandbox') || !Object.hasOwn(value, 'allow'))) {
-        invalid();
-    }
-    const sandbox = tokens(dataValue(value, 'sandbox'), canonicalize);
-    const allow = tokens(dataValue(value, 'allow'), canonicalize);
-    assertRelationships(sandbox);
-    const baselineSandbox = handshake === 'shell' ? ['allow-same-origin', 'allow-scripts'] : ['allow-scripts'];
-    const baselineAllow = handshake === 'shell' ? ['clipboard-write'] : [];
-    if (!canonicalize &&
-        (sandbox.some((token) => baselineSandbox.includes(token)) ||
-            allow.some((feature) => baselineAllow.includes(feature)))) {
-        invalid();
-    }
-    const canonicalSandbox = canonicalize
-        ? sandbox.filter((token) => !baselineSandbox.includes(token))
-        : sandbox;
-    const canonicalAllow = canonicalize
-        ? allow.filter((feature) => !baselineAllow.includes(feature))
-        : allow;
-    if (!canonicalize && canonicalSandbox.length === 0 && canonicalAllow.length === 0)
-        invalid();
-    if (canonicalSandbox.length === 0 && canonicalAllow.length === 0)
-        return undefined;
-    return Object.freeze({
-        sandbox: Object.freeze(canonicalSandbox),
-        allow: Object.freeze(canonicalAllow),
-    });
-}
-function plainRecord(input) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    const prototype = Object.getPrototypeOf(input);
-    if (prototype !== Object.prototype && prototype !== null)
-        invalid();
-    return input;
-}
-function exactOwnKeys(input, allowed) {
-    const keys = new Set(allowed);
-    if (Reflect.ownKeys(input).some((key) => typeof key !== 'string' || !keys.has(key)))
-        invalid();
-}
 function dataValue(input, key) {
     const descriptor = Object.getOwnPropertyDescriptor(input, key);
     if (descriptor === undefined)
         return undefined;
     if (!('value' in descriptor))
-        invalid();
+        fail('RELEASE_VIEW_INVALID', 'View requirements must be data fields.');
     return descriptor.value;
 }
-function tokens(input, canonicalize) {
-    if (input === undefined)
-        return [];
-    if (!Array.isArray(input))
-        invalid();
-    const descriptors = Object.getOwnPropertyDescriptors(input);
-    const values = [];
-    for (let index = 0; index < input.length; index += 1) {
-        const descriptor = descriptors[String(index)];
-        if (descriptor === undefined || !('value' in descriptor))
-            invalid();
-        if (typeof descriptor.value !== 'string' || !TOKEN.test(descriptor.value))
-            invalid();
-        values.push(descriptor.value);
-    }
-    for (const key of Reflect.ownKeys(descriptors)) {
-        if (key === 'length')
-            continue;
-        if (typeof key !== 'string' || !/^(0|[1-9][0-9]*)$/u.test(key) || Number(key) >= input.length) {
-            invalid();
-        }
-    }
-    if (canonicalize)
-        return [...new Set(values)].sort();
-    for (let index = 1; index < values.length; index += 1) {
-        if (values[index - 1] >= values[index])
-            invalid();
-    }
-    return values;
-}
-function assertRelationships(sandbox) {
-    const tokens = new Set(sandbox);
-    if (tokens.has('allow-popups-to-escape-sandbox') && !tokens.has('allow-popups'))
-        invalid();
-    if (tokens.has('allow-top-navigation') && tokens.has('allow-top-navigation-by-user-activation')) {
-        invalid();
-    }
-    if (tokens.has('allow-top-navigation-to-custom-protocols') &&
-        (tokens.has('allow-top-navigation') || tokens.has('allow-popups'))) {
-        invalid();
-    }
-}
-function invalid() {
-    return fail('RELEASE_VIEW_INVALID', 'View iframe requirements are invalid.');
-}

package/dist/release/bundle-admission.js

@@ -33,12 +33,6 @@ function validateInventory(release, bundle) {
     if (boundViews.size !== views.size || [...views].some((key) => !boundViews.has(key))) {
         fail('RELEASE_VIEW_INVALID', 'View bindings must exhaust the root Domain.');
     }
-    if (release.manifest?.entrypoint !== undefined &&
-        (release.manifest.entrypoint.origin !== root.origin ||
-            release.manifest.entrypoint.kind !== 'view' ||
-            root.views[release.manifest.entrypoint.name] === undefined)) {
-        fail('RELEASE_INVALID', 'Manifest entrypoint does not exist in the root schema.');
-    }
     for (const route of release.routes) {
         if (!callables.has(route.callable)) {
             fail('RELEASE_ROUTE_INVALID', `Route ${route.name} names an unknown callable.`);

package/dist/release/delivery/index.d.ts

@@ -1,7 +1,6 @@
 /**
  * Delivery v2: the challenge-bound envelope carrying the exact `DomainRelease` a Kernel fetched at
- * `release.json`, bound to its release digest. `acceptRequest` also admits the deprecated v1 request,
- * discriminated by its `version`.
+ * `release.json`, bound to its release digest. Only the version 2 request is admitted.
  */
 export { type Attestation } from './attestation.js';
 export { acceptClaims, type Claims } from './claims.js';

package/dist/release/delivery/index.js

@@ -1,7 +1,6 @@
 /**
  * Delivery v2: the challenge-bound envelope carrying the exact `DomainRelease` a Kernel fetched at
- * `release.json`, bound to its release digest. `acceptRequest` also admits the deprecated v1 request,
- * discriminated by its `version`.
+ * `release.json`, bound to its release digest. Only the version 2 request is admitted.
  */
 export {} from './attestation.js';
 export { acceptClaims } from './claims.js';

package/dist/release/delivery/request.d.ts

@@ -1,6 +1,5 @@
 import { type IssuerId } from '@astrale-os/kernel-core/auth/issuer';
 import type { ReleaseDigest } from '../digest.js';
-import { type Request as PublicationRequest } from '../legacy/delivery/request.js';
 /** Exact bearer credential admitted by a Delivery transport boundary; never inside a document. */
 export interface Token {
     readonly kind: 'bearer';
@@ -13,9 +12,5 @@ export interface Request {
     readonly nonce: string;
     readonly release: ReleaseDigest;
 }
-/**
- * Admit the exact request representation accepted by a Delivery transport boundary. The request's
- * own `version` selects the Delivery version: 2 names a release digest, and the deprecated 1 names
- * the ETag of a v2/v3 Publication fetched at `domain.json`.
- */
-export declare function acceptRequest(input: unknown): Request | PublicationRequest;
+/** Admit the exact version-two challenge at a Delivery transport boundary. */
+export declare function acceptRequest(input: unknown): Request;

package/dist/release/delivery/request.js

@@ -1,22 +1,13 @@
 import { AuthValueError } from '@astrale-os/kernel-core/auth/error';
 import { accept as acceptIssuer } from '@astrale-os/kernel-core/auth/issuer';
-import { acceptRequest as acceptPublicationRequest, } from '../legacy/delivery/request.js';
 import { fail } from './error.js';
 import { NONCE_MAX_LENGTH, NONCE_MIN_LENGTH } from './limits.js';
 const FIELDS = ['version', 'kernel', 'nonce', 'release'];
-/**
- * Admit the exact request representation accepted by a Delivery transport boundary. The request's
- * own `version` selects the Delivery version: 2 names a release digest, and the deprecated 1 names
- * the ETag of a v2/v3 Publication fetched at `domain.json`.
- */
+/** Admit the exact version-two challenge at a Delivery transport boundary. */
 export function acceptRequest(input) {
     if (input === null || typeof input !== 'object' || Array.isArray(input)) {
         fail('DELIVERY_REQUEST_INVALID', 'Expected a Delivery request.');
     }
-    const version = Object.getOwnPropertyDescriptor(input, 'version');
-    if (version !== undefined && 'value' in version && version.value === 1) {
-        return acceptPublicationRequest(input);
-    }
     const value = {};
     const fields = Reflect.ownKeys(input);
     if (fields.length !== FIELDS.length) {

package/dist/release/index.d.ts

@@ -13,9 +13,5 @@ export type { Manifest } from './manifest.js';
 export { ClassOperationOrder, admitRequirements, capabilityKeys, validateRequirements, type CapabilityAuthorityRequirements, type CoreCapabilityRequirement, type CapabilityRequirements, type ClassCapabilityRequirement, type ClassOperation, type NonEmpty, type Requirements, } from './requirements.js';
 export type { BodyPick, CredentialSource, HttpMethod, HttpRoute, HttpRouteDeclaration, RouteBody, RouteHeaders, SingleCredentialSource, } from './route.js';
 export type { Schema } from './schema.js';
-export { acceptInvocationEndpoints, type CallableBinding, type IframeRequirements, type InvocationEndpoints, type ViewBinding, } from './bindings/index.js';
+export { acceptInvocationEndpoints, type CallableBinding, type InvocationEndpoints, type ViewBinding, } from './bindings/index.js';
 export * as delivery from './delivery/index.js';
-/**
- * @deprecated Publication v2/v3 compatibility surface; use `DomainRelease` v4 from this module.
- */
-export * as legacy from './legacy/index.js';

package/dist/release/index.js

@@ -8,7 +8,3 @@ export { ReleaseError } from './error.js';
 export { ClassOperationOrder, admitRequirements, capabilityKeys, validateRequirements, } from './requirements.js';
 export { acceptInvocationEndpoints, } from './bindings/index.js';
 export * as delivery from './delivery/index.js';
-/**
- * @deprecated Publication v2/v3 compatibility surface; use `DomainRelease` v4 from this module.
- */
-export * as legacy from './legacy/index.js';

package/dist/release/manifest.d.ts

@@ -1,6 +1,6 @@
-import { type ViewRef } from '@astrale-os/kernel-dsl/v1/addressing';
 export interface Manifest {
     readonly logo?: string;
-    readonly entrypoint?: ViewRef;
 }
+/** The root Schema owns the Domain name and entrypoint in every release. */
+export declare function assertAuthoredManifest(input: unknown): void;
 export declare function admitManifest(input: unknown): Manifest | undefined;

package/dist/release/manifest.js

@@ -1,30 +1,22 @@
-import { acceptDefinitionRef } from '@astrale-os/kernel-dsl/v1/addressing';
 import { fail } from './error.js';
 import { exact, record } from './shape.js';
+/** The root Schema owns the Domain name and entrypoint in every release. */
+export function assertAuthoredManifest(input) {
+    if (input === null || typeof input !== 'object')
+        return;
+    for (const removed of ['title', 'entrypoint']) {
+        if (Object.hasOwn(input, removed)) {
+            fail('RELEASE_INVALID', `Manifest ${removed} is removed: the root schema declares the Domain name and entrypoint.`);
+        }
+    }
+}
 export function admitManifest(input) {
     if (input === undefined)
         return undefined;
     const value = record(input, 'RELEASE_INVALID', 'Manifest is invalid.');
-    exact(value, ['logo', 'entrypoint'], 'RELEASE_INVALID');
+    exact(value, ['logo'], 'RELEASE_INVALID');
     if (value.logo !== undefined && typeof value.logo !== 'string') {
         fail('RELEASE_INVALID', 'Manifest logo must be a string.');
     }
-    let entrypoint;
-    if (value.entrypoint !== undefined) {
-        let ref;
-        try {
-            ref = acceptDefinitionRef(value.entrypoint);
-        }
-        catch (cause) {
-            return fail('RELEASE_INVALID', 'Manifest entrypoint must be a root View reference.', cause);
-        }
-        if (ref.kind !== 'view') {
-            fail('RELEASE_INVALID', 'Manifest entrypoint must be a root View reference.');
-        }
-        entrypoint = ref;
-    }
-    return Object.freeze({
-        ...(value.logo === undefined ? {} : { logo: value.logo }),
-        ...(entrypoint === undefined ? {} : { entrypoint }),
-    });
+    return Object.freeze(value.logo === undefined ? {} : { logo: value.logo });
 }

package/dist/release/release.js

@@ -3,6 +3,7 @@ import { admitBuild } from './build.js';
 import { admitDigest, sha256Hex } from './digest.js';
 import { fail } from './error.js';
 import { servedUrl } from './issuer.js';
+import { assertAuthoredManifest } from './manifest.js';
 import { admitServedContent } from './served.js';
 import { deepFreeze, exact, record } from './shape.js';
 /** Path of the release a deployment serves beneath its serving issuer. */
@@ -41,6 +42,7 @@ export function digestOf(input) {
 export function seal(input) {
     const authored = record(input, 'RELEASE_INVALID', 'Expected release content.');
     exact(authored, CONTENT_FIELDS, 'RELEASE_INVALID');
+    assertAuthoredManifest(authored.manifest);
     const canonical = admitContent(admitContent(authored, 'canonicalize'), 'admit');
     return release(canonical, hash(canonical));
 }