nervur 0.7.5 → 0.8.0

package/being.mjs

@@ -39,15 +39,53 @@ const Compartment = ({ memory, voice, address, root, classOf }) => {
   });
 };
 
+const offered = (modules, program, mine) =>
+  Object.freeze({
+    ...Object.fromEntries(
+      (program?.modules ?? [])
+        .map((one) => one.module)
+        .filter((name) => name !== 'memory' && modules[name] !== undefined)
+        .map((name) => [name, modules[name]]),
+    ),
+    memory: scoped(mine, program),
+  });
+
+const grantable = (program) =>
+  (program?.rights ?? [...STRUCTURAL, 'MEMBER']).filter((one) => !STRUCTURAL.includes(one));
+
+const referable = (mine, key, plain, program) => {
+  const rights = plain.rights ?? 'MEMBER';
+  if (!grantable(program).includes(rights)) {
+    return undefined;
+  }
+  if (key.startsWith('refs/pending/')) {
+    return { ...plain, rights };
+  }
+  const held = mine.read(key);
+  return {
+    ...plain,
+    nextPkHash: plain.nextPkHash ?? held?.nextPkHash ?? null,
+    rights,
+    seen: Math.max(plain.seen ?? 0, held?.seen ?? 0),
+  };
+};
+
 const scoped = (mine, program) =>
   Object.freeze({
     classOf: mine.classOf,
     list: mine.list,
     read: mine.read,
-    write: (key, plain) =>
-      key.startsWith('refs/') || key.startsWith('handles/') || program?.declares(key) !== undefined
+    write: (key, plain) => {
+      if (key.startsWith('refs/') && plain !== undefined) {
+        const guarded = referable(mine, key, plain, program);
+        return guarded === undefined ? undefined : mine.write(key, guarded);
+      }
+      return key.startsWith('refs/') ||
+        key.startsWith('handles/') ||
+        program?.declares(key) !== undefined
         ? mine.write(key, plain)
-        : undefined,
+        : undefined;
+    },
   });
 
 const rootFor = ({ memory, voice, address }) => {
@@ -213,7 +251,8 @@ const Being = ({ voice, address, deliver, modules, registry, vouched, watch }) =
         }
         const asked = await program.ask({
           context: {
-            modules: Object.freeze({ ...modules, memory: scoped(mine, program) }),
+            from: program.caller ? from : undefined,
+            modules: offered(modules, program, mine),
             port: Port({ voice, mine, deliver, rights }),
             registry,
             rights,
@@ -305,7 +344,7 @@ const Registry = ({
       if (written !== undefined && (brought === undefined || settings === undefined)) {
         return undefined;
       }
-      const allowed = written?.rights ?? [...STRUCTURAL, 'MEMBER'];
+      const allowed = grantable(written);
       if (refs.some((ref) => !allowed.includes(ref.rights ?? 'MEMBER'))) {
         return undefined;
       }

package/blueprint.mjs

@@ -247,6 +247,7 @@ const Blueprint = (source) => {
           resolvers: resolverSources(written.resolvers ?? {}),
         }),
       ),
+      caller: needs.caller === true,
       memory: Object.freeze(memory),
       modules,
       name: written.name,

package/ground.mjs

@@ -1,6 +1,6 @@
 import { ADMIN } from './admin.mjs';
 import { Being, Compartment, Registry, make, rootFor } from './being.mjs';
-import { coreClass } from './blueprint.mjs';
+import { Blueprint, coreClass } from './blueprint.mjs';
 import { Client } from './client.mjs';
 import { Contracts } from './contract.mjs';
 import { Memory, Paths, Wire } from './modules.mjs';
@@ -13,6 +13,22 @@ const GROUND = 'Ground';
 
 const FLOOR = ['blueprints', 'cells', 'contracts', 'keychain', 'paths', 'watch', 'wire'];
 
+const doorsOf = (source) => {
+  const written = Blueprint(source);
+  if (written === undefined) {
+    return undefined;
+  }
+  return [written.schema.getQueryType(), written.schema.getMutationType()]
+    .filter((one) => one !== undefined && one !== null)
+    .flatMap((one) => Object.keys(one.getFields()));
+};
+
+const redefines = (source) => {
+  const custom = doorsOf(source);
+  const standard = doorsOf(ADMIN);
+  return custom === undefined || custom.some((one) => standard.includes(one));
+};
+
 const install = ({ cells, keychain, program }) => {
   const memory = Memory(cells);
   const voice = Voice();
@@ -41,7 +57,11 @@ const Ground = (modules = {}) => {
     return undefined;
   }
 
-  const program = modules.blueprints?.ground() ?? ADMIN;
+  const extension = modules.blueprints?.ground();
+  if (extension !== undefined && redefines(extension)) {
+    return undefined;
+  }
+  const program = extension ?? ADMIN;
   if (cells.peek('ground/admin') === undefined) {
     install({ cells, keychain, program });
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nervur",
-  "version": "0.7.5",
+  "version": "0.8.0",
   "description": "A distributed system of sovereign beings — one door, one question: by whose authority.",
   "license": "Apache-2.0",
   "author": "Razvan Gherghina",

package/program.mjs

@@ -52,6 +52,7 @@ const Program = (source) => {
       return answered.errors === undefined ? { data: answered.data } : undefined;
     },
     bindings: blueprint.bindings,
+    caller: blueprint.caller,
     classOf: blueprint.classOf,
     config: blueprint.config,
     declares: blueprint.declares,