mirror of
https://github.com/zap-proto/go.git
synced 2026-10-30 15:05:00 +00:00
zeekay
a1bf2bfa1e
zapgen — interface (RPC) support: - Parse `interface` decls (brace + whitespace forms, one parser) with 1-based auto-assigned method ordinals; methods take ≤1 struct request and (after `returns`) ≤1 struct response, matching the spec README grammar. - desugar: `interface` opens a whitespace block; method lines pass through verbatim (no @N). Block headers now honored only at file scope, so a struct field NAMED `interface`/`struct` stays a field (H4 preserved). - emit: per interface a 1-based ordinal table, a typed Client over a Channel seam, and an abstract Handler + Dispatch<Iface> ordinal router, all over the new runtime call envelope. Method names exported. - New `rpc` package: the ZAP call envelope (BuildRequest/ParseRequest, BuildResponse/ParseResponse, Call, Response, status codes), byte-compatible with the other runtimes' transport envelopes (Version2 header + router msgType flags). Adds zap.NewBuilderV2. - examples/echo: generated service + end-to-end client↔dispatch↔handler test covering request/response, void, no-request, bare, handler-error, and unknown-ordinal paths. Golden fixtures for the interface codegen. cap — reconcile to SPEC v1.1: - B3 signature scope: sign SPEC §3 canonical bytes (Capability[0..164) || canonical(Caveats), Kind:u32||len:u32||Value), via Cap.CanonicalBytes — one definition shared by signer and verifier; excludes Sig and heap indirection so caps verify cross-language. CapID = Hash32(Canonical||Sig). - B2 delegation gate: define cross-cutting Permission bits (PermAttenuate 1<<32, PermAudit, PermRoot); enforce SPEC §2.3 step 3d in VerifyChain and at mint time in Attenuate (refuse a cap the verifier would reject). - B4/B6: VerifyRevocation is scheme-aware (dispatches on the tag byte); verifySig fails closed on SchemeReserved/unknown instead of falling back to ed25519. Verifier.VerifyRevocation added for PQ revocations. - spec_test.go covers all four. Rebrand finish + docs: - Zero capnp/Cap'n Proto and zero hanzo/avalabs/capnproto.org tokens in zap-native source (zap.go doc neutralized; cap doc-comment brand refs generalized). LLM.md refreshed: zapgen shipped (not "forthcoming"), rpc package, interface DSL, cap signature scope. Ignore the agents example binary. go build ./... and go test ./... -count=1 pass; race-clean on changed pkgs.
26 lines
1.1 KiB
Go
26 lines
1.1 KiB
Go
// Copyright (C) 2025, Lux Industries Inc. All rights reserved.
|
|
// See the file LICENSE for licensing terms.
|
|
|
|
package cap
|
|
|
|
// Permission bits for Capability.Permissions (u64). Per
|
|
// capabilities_kinds.md "Permission bits": each CapKind owns the bottom
|
|
// 32 bits (their meaning is per-kind — verifiers MUST dispatch on
|
|
// CapKind first), and the top 32 bits are cross-cutting and identical
|
|
// across every CapKind.
|
|
//
|
|
// Only the cross-cutting bits are normative wire-wide and therefore
|
|
// defined here; the per-kind low bits are owned by each consumer
|
|
// (IAM/KMS/ATS/Bridge) and declared in capabilities_kinds.md.
|
|
const (
|
|
// PermAttenuate (bit 1<<32) — the holder may mint child caps whose
|
|
// permissions are a subset of this cap's. SPEC §2.3 step 3d: a parent
|
|
// MUST carry this bit (or be CapKindDelegate) for the verifier to
|
|
// accept any attenuation off it.
|
|
PermAttenuate uint64 = 1 << 32
|
|
// PermAudit (bit 1<<33) — the holder may read the audit trail for Target.
|
|
PermAudit uint64 = 1 << 33
|
|
// PermRoot (bit 1<<63) — root-of-trust marker, set on root caps only.
|
|
PermRoot uint64 = 1 << 63
|
|
)
|