@astrale-domains/shell-schema 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (21) hide show
  1. package/dist/application.d.ts +1758 -0
  2. package/dist/application.d.ts.map +1 -0
  3. package/dist/application.js +200 -0
  4. package/dist/application.js.map +1 -0
  5. package/dist/icons.d.ts +11 -0
  6. package/dist/icons.d.ts.map +1 -0
  7. package/dist/icons.js +21 -0
  8. package/dist/icons.js.map +1 -0
  9. package/dist/identity.d.ts +2581 -0
  10. package/dist/identity.d.ts.map +1 -0
  11. package/dist/identity.js +134 -0
  12. package/dist/identity.js.map +1 -0
  13. package/dist/index.d.ts +4477 -0
  14. package/dist/index.d.ts.map +1 -0
  15. package/dist/index.js +57 -0
  16. package/dist/index.js.map +1 -0
  17. package/dist/space.d.ts +458 -0
  18. package/dist/space.d.ts.map +1 -0
  19. package/dist/space.js +95 -0
  20. package/dist/space.js.map +1 -0
  21. package/package.json +46 -0
package/dist/identity.d.ts ADDED
@@ -0,0 +1,2581 @@
1
+ import { z } from 'zod';
2
+ /**
3
+ * `User` (interface) — a workspace principal: an Identity that owns a Space + apps
4
+ * and can join groups. SOURCE of `belongs_to`, so anything
5
+ * implementing it (the default `User` class, a foreign `Agent`) participates in
6
+ * the workspace uniformly. `switchSpace` is hosted here (not on the class) so
7
+ * every implementer inherits it.
8
+ */
9
+ export declare const iUser: import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
10
+ readonly extends: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
11
+ readonly props: {
12
+ iss: import("zod").ZodString;
13
+ sub: import("zod").ZodString;
14
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
15
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
16
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
17
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
18
+ }, import("zod/v4/core").$strip>>;
19
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
20
+ claim: import("zod").ZodString;
21
+ op: import("zod").ZodLiteral<"eq">;
22
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
23
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
24
+ claim: import("zod").ZodString;
25
+ op: import("zod").ZodLiteral<"contains">;
26
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
27
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
28
+ claim: import("zod").ZodString;
29
+ op: import("zod").ZodLiteral<"exists">;
30
+ }, import("zod/v4/core").$strip>], "op">>>;
31
+ };
32
+ readonly methods: {
33
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
34
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
35
+ }, import("zod").ZodVoid, "sealed", boolean>;
36
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
37
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
38
+ }, import("zod").ZodVoid, "sealed", boolean>;
39
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
40
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
41
+ }, import("zod").ZodVoid, "sealed", boolean>;
42
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
43
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
44
+ }, import("zod").ZodVoid, "sealed", boolean>;
45
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
46
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
47
+ }, import("zod").ZodVoid, "sealed", boolean>;
48
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
49
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
50
+ }, import("zod").ZodVoid, "sealed", boolean>;
51
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
52
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
53
+ readonly perms: import("zod").ZodNumber;
54
+ }, import("zod").ZodVoid, "sealed", boolean>;
55
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
56
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
57
+ readonly perms: import("zod").ZodNumber;
58
+ }, import("zod").ZodVoid, "sealed", boolean>;
59
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
60
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
61
+ readonly perms: import("zod").ZodNumber;
62
+ }, import("zod").ZodBoolean, "sealed", boolean>;
63
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
64
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
65
+ publicKey: import("zod").ZodObject<{
66
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
67
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
68
+ }, import("zod/v4/core").$strip>;
69
+ credential: import("zod").ZodString;
70
+ }, import("zod/v4/core").$strip>>;
71
+ }, import("zod").ZodObject<{
72
+ iss: import("zod").ZodString;
73
+ sub: import("zod").ZodString;
74
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
75
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
76
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
77
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
78
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
79
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
80
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
81
+ }, import("zod").ZodString, "sealed", boolean>;
82
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
83
+ readonly issuer: import("zod").ZodString;
84
+ readonly subject: import("zod").ZodString;
85
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
86
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
87
+ };
88
+ }, "props"> & {
89
+ readonly properties: {
90
+ iss: import("zod").ZodString;
91
+ sub: import("zod").ZodString;
92
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
93
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
94
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
95
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
96
+ }, import("zod/v4/core").$strip>>;
97
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
98
+ claim: import("zod").ZodString;
99
+ op: import("zod").ZodLiteral<"eq">;
100
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
101
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
102
+ claim: import("zod").ZodString;
103
+ op: import("zod").ZodLiteral<"contains">;
104
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
105
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
106
+ claim: import("zod").ZodString;
107
+ op: import("zod").ZodLiteral<"exists">;
108
+ }, import("zod/v4/core").$strip>], "op">>>;
109
+ };
110
+ } & {
111
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
112
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
113
+ readonly properties: {
114
+ createdAt: import("zod").ZodISODateTime;
115
+ updatedAt: import("zod").ZodISODateTime;
116
+ };
117
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
118
+ readonly properties: {
119
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
120
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
121
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
122
+ defaults: "defaults";
123
+ error: "error";
124
+ merge: "merge";
125
+ replace: "replace";
126
+ skip: "skip";
127
+ }>>;
128
+ };
129
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
130
+ readonly properties: {
131
+ name: import("zod").ZodString;
132
+ };
133
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
134
+ readonly properties: {
135
+ description: import("zod").ZodOptional<import("zod").ZodString>;
136
+ };
137
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
138
+ readonly properties: {
139
+ status: import("zod").ZodEnum<{
140
+ active: "active";
141
+ creating: "creating";
142
+ deleting: "deleting";
143
+ error: "error";
144
+ updating: "updating";
145
+ }>;
146
+ };
147
+ }>];
148
+ readonly methods: {
149
+ move: import("@astrale-os/kernel-dsl").FnDef<{
150
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
151
+ }, import("zod").ZodVoid, "sealed", boolean>;
152
+ };
153
+ }>];
154
+ }>];
155
+ readonly methods: {
156
+ /**
157
+ * `user::switchSpace(space)` — make `space` the user's active space: repoints
158
+ * the `selected_space` edge to it (remove + recreate — edge identity includes
159
+ * the target). `space` is any address (path or `@id`) resolving to a Space the
160
+ * caller can READ. Caller gate mirrors `role::assign`'s user side: EDIT on the
161
+ * user (normally themselves). Idempotent — already selected ⇒ no-op.
162
+ */
163
+ switchSpace: import("@astrale-os/kernel-dsl").FnDef<{
164
+ readonly space: z.ZodString;
165
+ }, z.ZodVoid, import("@astrale-os/kernel-dsl").MethodInheritance, boolean>;
166
+ };
167
+ }, "props"> & {
168
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
169
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
170
+ readonly properties: {
171
+ createdAt: z.ZodISODateTime;
172
+ updatedAt: z.ZodISODateTime;
173
+ };
174
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
175
+ readonly properties: {
176
+ externalId: z.ZodOptional<z.ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
177
+ updatedAt: z.ZodOptional<z.ZodISODateTime>;
178
+ onConflict: z.ZodOptional<z.ZodEnum<{
179
+ defaults: "defaults";
180
+ error: "error";
181
+ merge: "merge";
182
+ replace: "replace";
183
+ skip: "skip";
184
+ }>>;
185
+ };
186
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
187
+ readonly properties: {
188
+ name: z.ZodString;
189
+ };
190
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
191
+ readonly properties: {
192
+ description: z.ZodOptional<z.ZodString>;
193
+ };
194
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
195
+ readonly properties: {
196
+ status: z.ZodEnum<{
197
+ active: "active";
198
+ creating: "creating";
199
+ deleting: "deleting";
200
+ error: "error";
201
+ updating: "updating";
202
+ }>;
203
+ };
204
+ }>];
205
+ readonly methods: {
206
+ move: import("@astrale-os/kernel-dsl").FnDef<{
207
+ readonly to: z.ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, z.core.$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
208
+ }, z.ZodVoid, "sealed", boolean>;
209
+ };
210
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
211
+ readonly props: {
212
+ iss: import("zod").ZodString;
213
+ sub: import("zod").ZodString;
214
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
215
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
216
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
217
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
218
+ }, import("zod/v4/core").$strip>>;
219
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
220
+ claim: import("zod").ZodString;
221
+ op: import("zod").ZodLiteral<"eq">;
222
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
223
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
224
+ claim: import("zod").ZodString;
225
+ op: import("zod").ZodLiteral<"contains">;
226
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
227
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
228
+ claim: import("zod").ZodString;
229
+ op: import("zod").ZodLiteral<"exists">;
230
+ }, import("zod/v4/core").$strip>], "op">>>;
231
+ };
232
+ readonly methods: {
233
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
234
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
235
+ }, import("zod").ZodVoid, "sealed", boolean>;
236
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
237
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
238
+ }, import("zod").ZodVoid, "sealed", boolean>;
239
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
240
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
241
+ }, import("zod").ZodVoid, "sealed", boolean>;
242
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
243
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
244
+ }, import("zod").ZodVoid, "sealed", boolean>;
245
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
246
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
247
+ }, import("zod").ZodVoid, "sealed", boolean>;
248
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
249
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
250
+ }, import("zod").ZodVoid, "sealed", boolean>;
251
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
252
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
253
+ readonly perms: import("zod").ZodNumber;
254
+ }, import("zod").ZodVoid, "sealed", boolean>;
255
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
256
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
257
+ readonly perms: import("zod").ZodNumber;
258
+ }, import("zod").ZodVoid, "sealed", boolean>;
259
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
260
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
261
+ readonly perms: import("zod").ZodNumber;
262
+ }, import("zod").ZodBoolean, "sealed", boolean>;
263
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
264
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
265
+ publicKey: import("zod").ZodObject<{
266
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
267
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
268
+ }, import("zod/v4/core").$strip>;
269
+ credential: import("zod").ZodString;
270
+ }, import("zod/v4/core").$strip>>;
271
+ }, import("zod").ZodObject<{
272
+ iss: import("zod").ZodString;
273
+ sub: import("zod").ZodString;
274
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
275
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
276
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
277
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
278
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
279
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
280
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
281
+ }, import("zod").ZodString, "sealed", boolean>;
282
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
283
+ readonly issuer: import("zod").ZodString;
284
+ readonly subject: import("zod").ZodString;
285
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
286
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
287
+ };
288
+ }, "props"> & {
289
+ readonly properties: {
290
+ iss: import("zod").ZodString;
291
+ sub: import("zod").ZodString;
292
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
293
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
294
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
295
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
296
+ }, import("zod/v4/core").$strip>>;
297
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
298
+ claim: import("zod").ZodString;
299
+ op: import("zod").ZodLiteral<"eq">;
300
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
301
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
302
+ claim: import("zod").ZodString;
303
+ op: import("zod").ZodLiteral<"contains">;
304
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
305
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
306
+ claim: import("zod").ZodString;
307
+ op: import("zod").ZodLiteral<"exists">;
308
+ }, import("zod/v4/core").$strip>], "op">>>;
309
+ };
310
+ } & {
311
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
312
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
313
+ readonly properties: {
314
+ createdAt: import("zod").ZodISODateTime;
315
+ updatedAt: import("zod").ZodISODateTime;
316
+ };
317
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
318
+ readonly properties: {
319
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
320
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
321
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
322
+ defaults: "defaults";
323
+ error: "error";
324
+ merge: "merge";
325
+ replace: "replace";
326
+ skip: "skip";
327
+ }>>;
328
+ };
329
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
330
+ readonly properties: {
331
+ name: import("zod").ZodString;
332
+ };
333
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
334
+ readonly properties: {
335
+ description: import("zod").ZodOptional<import("zod").ZodString>;
336
+ };
337
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
338
+ readonly properties: {
339
+ status: import("zod").ZodEnum<{
340
+ active: "active";
341
+ creating: "creating";
342
+ deleting: "deleting";
343
+ error: "error";
344
+ updating: "updating";
345
+ }>;
346
+ };
347
+ }>];
348
+ readonly methods: {
349
+ move: import("@astrale-os/kernel-dsl").FnDef<{
350
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
351
+ }, import("zod").ZodVoid, "sealed", boolean>;
352
+ };
353
+ }>];
354
+ }>];
355
+ }>;
356
+ /** The DEFAULT `User` — a human principal implementing the `User` interface; adds
357
+ * the human props + `init`. */
358
+ export declare const User: import("@astrale-os/kernel-dsl").NodeClassDef<Omit<{
359
+ readonly implements: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
360
+ readonly extends: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
361
+ readonly props: {
362
+ iss: import("zod").ZodString;
363
+ sub: import("zod").ZodString;
364
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
365
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
366
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
367
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
368
+ }, import("zod/v4/core").$strip>>;
369
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
370
+ claim: import("zod").ZodString;
371
+ op: import("zod").ZodLiteral<"eq">;
372
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
373
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
374
+ claim: import("zod").ZodString;
375
+ op: import("zod").ZodLiteral<"contains">;
376
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
377
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
378
+ claim: import("zod").ZodString;
379
+ op: import("zod").ZodLiteral<"exists">;
380
+ }, import("zod/v4/core").$strip>], "op">>>;
381
+ };
382
+ readonly methods: {
383
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
384
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
385
+ }, import("zod").ZodVoid, "sealed", boolean>;
386
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
387
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
388
+ }, import("zod").ZodVoid, "sealed", boolean>;
389
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
390
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
391
+ }, import("zod").ZodVoid, "sealed", boolean>;
392
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
393
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
394
+ }, import("zod").ZodVoid, "sealed", boolean>;
395
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
396
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
397
+ }, import("zod").ZodVoid, "sealed", boolean>;
398
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
399
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
400
+ }, import("zod").ZodVoid, "sealed", boolean>;
401
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
402
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
403
+ readonly perms: import("zod").ZodNumber;
404
+ }, import("zod").ZodVoid, "sealed", boolean>;
405
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
406
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
407
+ readonly perms: import("zod").ZodNumber;
408
+ }, import("zod").ZodVoid, "sealed", boolean>;
409
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
410
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
411
+ readonly perms: import("zod").ZodNumber;
412
+ }, import("zod").ZodBoolean, "sealed", boolean>;
413
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
414
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
415
+ publicKey: import("zod").ZodObject<{
416
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
417
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
418
+ }, import("zod/v4/core").$strip>;
419
+ credential: import("zod").ZodString;
420
+ }, import("zod/v4/core").$strip>>;
421
+ }, import("zod").ZodObject<{
422
+ iss: import("zod").ZodString;
423
+ sub: import("zod").ZodString;
424
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
425
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
426
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
427
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
428
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
429
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
430
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
431
+ }, import("zod").ZodString, "sealed", boolean>;
432
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
433
+ readonly issuer: import("zod").ZodString;
434
+ readonly subject: import("zod").ZodString;
435
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
436
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
437
+ };
438
+ }, "props"> & {
439
+ readonly properties: {
440
+ iss: import("zod").ZodString;
441
+ sub: import("zod").ZodString;
442
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
443
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
444
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
445
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
446
+ }, import("zod/v4/core").$strip>>;
447
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
448
+ claim: import("zod").ZodString;
449
+ op: import("zod").ZodLiteral<"eq">;
450
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
451
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
452
+ claim: import("zod").ZodString;
453
+ op: import("zod").ZodLiteral<"contains">;
454
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
455
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
456
+ claim: import("zod").ZodString;
457
+ op: import("zod").ZodLiteral<"exists">;
458
+ }, import("zod/v4/core").$strip>], "op">>>;
459
+ };
460
+ } & {
461
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
462
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
463
+ readonly properties: {
464
+ createdAt: import("zod").ZodISODateTime;
465
+ updatedAt: import("zod").ZodISODateTime;
466
+ };
467
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
468
+ readonly properties: {
469
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
470
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
471
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
472
+ defaults: "defaults";
473
+ error: "error";
474
+ merge: "merge";
475
+ replace: "replace";
476
+ skip: "skip";
477
+ }>>;
478
+ };
479
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
480
+ readonly properties: {
481
+ name: import("zod").ZodString;
482
+ };
483
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
484
+ readonly properties: {
485
+ description: import("zod").ZodOptional<import("zod").ZodString>;
486
+ };
487
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
488
+ readonly properties: {
489
+ status: import("zod").ZodEnum<{
490
+ active: "active";
491
+ creating: "creating";
492
+ deleting: "deleting";
493
+ error: "error";
494
+ updating: "updating";
495
+ }>;
496
+ };
497
+ }>];
498
+ readonly methods: {
499
+ move: import("@astrale-os/kernel-dsl").FnDef<{
500
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
501
+ }, import("zod").ZodVoid, "sealed", boolean>;
502
+ };
503
+ }>];
504
+ }>];
505
+ readonly methods: {
506
+ /**
507
+ * `user::switchSpace(space)` — make `space` the user's active space: repoints
508
+ * the `selected_space` edge to it (remove + recreate — edge identity includes
509
+ * the target). `space` is any address (path or `@id`) resolving to a Space the
510
+ * caller can READ. Caller gate mirrors `role::assign`'s user side: EDIT on the
511
+ * user (normally themselves). Idempotent — already selected ⇒ no-op.
512
+ */
513
+ switchSpace: import("@astrale-os/kernel-dsl").FnDef<{
514
+ readonly space: z.ZodString;
515
+ }, z.ZodVoid, import("@astrale-os/kernel-dsl").MethodInheritance, boolean>;
516
+ };
517
+ }, "props"> & {
518
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
519
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
520
+ readonly properties: {
521
+ createdAt: z.ZodISODateTime;
522
+ updatedAt: z.ZodISODateTime;
523
+ };
524
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
525
+ readonly properties: {
526
+ externalId: z.ZodOptional<z.ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
527
+ updatedAt: z.ZodOptional<z.ZodISODateTime>;
528
+ onConflict: z.ZodOptional<z.ZodEnum<{
529
+ defaults: "defaults";
530
+ error: "error";
531
+ merge: "merge";
532
+ replace: "replace";
533
+ skip: "skip";
534
+ }>>;
535
+ };
536
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
537
+ readonly properties: {
538
+ name: z.ZodString;
539
+ };
540
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
541
+ readonly properties: {
542
+ description: z.ZodOptional<z.ZodString>;
543
+ };
544
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
545
+ readonly properties: {
546
+ status: z.ZodEnum<{
547
+ active: "active";
548
+ creating: "creating";
549
+ deleting: "deleting";
550
+ error: "error";
551
+ updating: "updating";
552
+ }>;
553
+ };
554
+ }>];
555
+ readonly methods: {
556
+ move: import("@astrale-os/kernel-dsl").FnDef<{
557
+ readonly to: z.ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, z.core.$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
558
+ }, z.ZodVoid, "sealed", boolean>;
559
+ };
560
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
561
+ readonly props: {
562
+ iss: import("zod").ZodString;
563
+ sub: import("zod").ZodString;
564
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
565
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
566
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
567
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
568
+ }, import("zod/v4/core").$strip>>;
569
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
570
+ claim: import("zod").ZodString;
571
+ op: import("zod").ZodLiteral<"eq">;
572
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
573
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
574
+ claim: import("zod").ZodString;
575
+ op: import("zod").ZodLiteral<"contains">;
576
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
577
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
578
+ claim: import("zod").ZodString;
579
+ op: import("zod").ZodLiteral<"exists">;
580
+ }, import("zod/v4/core").$strip>], "op">>>;
581
+ };
582
+ readonly methods: {
583
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
584
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
585
+ }, import("zod").ZodVoid, "sealed", boolean>;
586
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
587
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
588
+ }, import("zod").ZodVoid, "sealed", boolean>;
589
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
590
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
591
+ }, import("zod").ZodVoid, "sealed", boolean>;
592
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
593
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
594
+ }, import("zod").ZodVoid, "sealed", boolean>;
595
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
596
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
597
+ }, import("zod").ZodVoid, "sealed", boolean>;
598
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
599
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
600
+ }, import("zod").ZodVoid, "sealed", boolean>;
601
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
602
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
603
+ readonly perms: import("zod").ZodNumber;
604
+ }, import("zod").ZodVoid, "sealed", boolean>;
605
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
606
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
607
+ readonly perms: import("zod").ZodNumber;
608
+ }, import("zod").ZodVoid, "sealed", boolean>;
609
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
610
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
611
+ readonly perms: import("zod").ZodNumber;
612
+ }, import("zod").ZodBoolean, "sealed", boolean>;
613
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
614
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
615
+ publicKey: import("zod").ZodObject<{
616
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
617
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
618
+ }, import("zod/v4/core").$strip>;
619
+ credential: import("zod").ZodString;
620
+ }, import("zod/v4/core").$strip>>;
621
+ }, import("zod").ZodObject<{
622
+ iss: import("zod").ZodString;
623
+ sub: import("zod").ZodString;
624
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
625
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
626
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
627
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
628
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
629
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
630
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
631
+ }, import("zod").ZodString, "sealed", boolean>;
632
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
633
+ readonly issuer: import("zod").ZodString;
634
+ readonly subject: import("zod").ZodString;
635
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
636
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
637
+ };
638
+ }, "props"> & {
639
+ readonly properties: {
640
+ iss: import("zod").ZodString;
641
+ sub: import("zod").ZodString;
642
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
643
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
644
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
645
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
646
+ }, import("zod/v4/core").$strip>>;
647
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
648
+ claim: import("zod").ZodString;
649
+ op: import("zod").ZodLiteral<"eq">;
650
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
651
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
652
+ claim: import("zod").ZodString;
653
+ op: import("zod").ZodLiteral<"contains">;
654
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
655
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
656
+ claim: import("zod").ZodString;
657
+ op: import("zod").ZodLiteral<"exists">;
658
+ }, import("zod/v4/core").$strip>], "op">>>;
659
+ };
660
+ } & {
661
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
662
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
663
+ readonly properties: {
664
+ createdAt: import("zod").ZodISODateTime;
665
+ updatedAt: import("zod").ZodISODateTime;
666
+ };
667
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
668
+ readonly properties: {
669
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
670
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
671
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
672
+ defaults: "defaults";
673
+ error: "error";
674
+ merge: "merge";
675
+ replace: "replace";
676
+ skip: "skip";
677
+ }>>;
678
+ };
679
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
680
+ readonly properties: {
681
+ name: import("zod").ZodString;
682
+ };
683
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
684
+ readonly properties: {
685
+ description: import("zod").ZodOptional<import("zod").ZodString>;
686
+ };
687
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
688
+ readonly properties: {
689
+ status: import("zod").ZodEnum<{
690
+ active: "active";
691
+ creating: "creating";
692
+ deleting: "deleting";
693
+ error: "error";
694
+ updating: "updating";
695
+ }>;
696
+ };
697
+ }>];
698
+ readonly methods: {
699
+ move: import("@astrale-os/kernel-dsl").FnDef<{
700
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
701
+ }, import("zod").ZodVoid, "sealed", boolean>;
702
+ };
703
+ }>];
704
+ }>];
705
+ }>];
706
+ readonly icon: string;
707
+ readonly props: {
708
+ firstName: z.ZodString;
709
+ lastName: z.ZodString;
710
+ /** Email, when the identity provider supplies one (the WorkOS `email` claim).
711
+ * Optional — a managed identity or a name-only IdP may not carry one. */
712
+ email: z.ZodOptional<z.ZodString>;
713
+ };
714
+ readonly methods: {
715
+ /**
716
+ * `User.init(firstName?, lastName?, email?, iss?, sub?, admin?, ownerToken?, publicKey?)` — the
717
+ * SINGLE user-creation entry, serving BOTH the kernel auto-provisioning dispatch and manual
718
+ * creation. Creates ONLY the User identity node (no Space/grants — workspace furniture is a
719
+ * separate get-or-create concern) and RETURNS the kernel `Identity` shape, which the
720
+ * provisioning dispatch consumes directly as the caller's identity. Idempotent: a repeat call
721
+ * for the same `(iss, sub)` returns the existing User.
722
+ *
723
+ * Identity binding precedence:
724
+ * 1. explicit `(iss, sub)` — the AUTO-PROVISIONING path; the instance provisioning policy maps
725
+ * an unprovisioned caller's JWT claims (`iss`/`sub`/`given_name`/`family_name`/`email`) to
726
+ * these params and the kernel calls this as `__SYSTEM__` on first contact. (Names default
727
+ * when the IdP omits them; `email` is stored when present and used as the display fallback.)
728
+ * 2. `ownerToken` — manual/admin binding: decode the IdP JWT (no signature check) so the token
729
+ * holder authenticates AS this user. A `publicKey` is rejected (the kernel verifier can't
730
+ * resolve a worker-pinned key) — OIDC discovery only.
731
+ * 3. neither — managed identity (kernel-issued `iss`, `sub=user:<name-slug>`).
732
+ *
733
+ * `admin: true` additionally extends the user with the admin group (must exist — the `seed` function).
734
+ * Not used by the provisioning path (the policy handles owner→root elevation).
735
+ */
736
+ init: import("@astrale-os/kernel-dsl").FnDef<{
737
+ readonly firstName: z.ZodOptional<z.ZodString>;
738
+ readonly lastName: z.ZodOptional<z.ZodString>;
739
+ readonly email: z.ZodOptional<z.ZodString>;
740
+ readonly iss: z.ZodOptional<z.ZodString>;
741
+ readonly sub: z.ZodOptional<z.ZodString>;
742
+ readonly admin: z.ZodOptional<z.ZodBoolean>;
743
+ readonly ownerToken: z.ZodOptional<z.ZodString>;
744
+ readonly publicKey: z.ZodOptional<z.ZodObject<{
745
+ jwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
746
+ }, z.core.$strip>>;
747
+ }, z.ZodObject<{
748
+ id: z.ZodString;
749
+ props: z.ZodObject<{
750
+ iss: z.ZodString;
751
+ sub: z.ZodString;
752
+ frozen: z.ZodBoolean;
753
+ }, z.core.$strip>;
754
+ }, z.core.$strip>, import("@astrale-os/kernel-dsl").MethodInheritance, true>;
755
+ };
756
+ }, "props"> & {
757
+ readonly properties: {
758
+ readonly firstName: z.ZodString;
759
+ readonly lastName: z.ZodString;
760
+ /** Email, when the identity provider supplies one (the WorkOS `email` claim).
761
+ * Optional — a managed identity or a name-only IdP may not carry one. */
762
+ readonly email: z.ZodOptional<z.ZodString>;
763
+ };
764
+ } & {
765
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
766
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
767
+ readonly properties: {
768
+ createdAt: z.ZodISODateTime;
769
+ updatedAt: z.ZodISODateTime;
770
+ };
771
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
772
+ readonly properties: {
773
+ externalId: z.ZodOptional<z.ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
774
+ updatedAt: z.ZodOptional<z.ZodISODateTime>;
775
+ onConflict: z.ZodOptional<z.ZodEnum<{
776
+ defaults: "defaults";
777
+ error: "error";
778
+ merge: "merge";
779
+ replace: "replace";
780
+ skip: "skip";
781
+ }>>;
782
+ };
783
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
784
+ readonly properties: {
785
+ name: z.ZodString;
786
+ };
787
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
788
+ readonly properties: {
789
+ description: z.ZodOptional<z.ZodString>;
790
+ };
791
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
792
+ readonly properties: {
793
+ status: z.ZodEnum<{
794
+ active: "active";
795
+ creating: "creating";
796
+ deleting: "deleting";
797
+ error: "error";
798
+ updating: "updating";
799
+ }>;
800
+ };
801
+ }>];
802
+ readonly methods: {
803
+ move: import("@astrale-os/kernel-dsl").FnDef<{
804
+ readonly to: z.ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, z.core.$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
805
+ }, z.ZodVoid, "sealed", boolean>;
806
+ };
807
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
808
+ readonly extends: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
809
+ readonly props: {
810
+ iss: import("zod").ZodString;
811
+ sub: import("zod").ZodString;
812
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
813
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
814
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
815
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
816
+ }, import("zod/v4/core").$strip>>;
817
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
818
+ claim: import("zod").ZodString;
819
+ op: import("zod").ZodLiteral<"eq">;
820
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
821
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
822
+ claim: import("zod").ZodString;
823
+ op: import("zod").ZodLiteral<"contains">;
824
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
825
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
826
+ claim: import("zod").ZodString;
827
+ op: import("zod").ZodLiteral<"exists">;
828
+ }, import("zod/v4/core").$strip>], "op">>>;
829
+ };
830
+ readonly methods: {
831
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
832
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
833
+ }, import("zod").ZodVoid, "sealed", boolean>;
834
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
835
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
836
+ }, import("zod").ZodVoid, "sealed", boolean>;
837
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
838
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
839
+ }, import("zod").ZodVoid, "sealed", boolean>;
840
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
841
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
842
+ }, import("zod").ZodVoid, "sealed", boolean>;
843
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
844
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
845
+ }, import("zod").ZodVoid, "sealed", boolean>;
846
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
847
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
848
+ }, import("zod").ZodVoid, "sealed", boolean>;
849
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
850
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
851
+ readonly perms: import("zod").ZodNumber;
852
+ }, import("zod").ZodVoid, "sealed", boolean>;
853
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
854
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
855
+ readonly perms: import("zod").ZodNumber;
856
+ }, import("zod").ZodVoid, "sealed", boolean>;
857
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
858
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
859
+ readonly perms: import("zod").ZodNumber;
860
+ }, import("zod").ZodBoolean, "sealed", boolean>;
861
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
862
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
863
+ publicKey: import("zod").ZodObject<{
864
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
865
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
866
+ }, import("zod/v4/core").$strip>;
867
+ credential: import("zod").ZodString;
868
+ }, import("zod/v4/core").$strip>>;
869
+ }, import("zod").ZodObject<{
870
+ iss: import("zod").ZodString;
871
+ sub: import("zod").ZodString;
872
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
873
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
874
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
875
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
876
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
877
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
878
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
879
+ }, import("zod").ZodString, "sealed", boolean>;
880
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
881
+ readonly issuer: import("zod").ZodString;
882
+ readonly subject: import("zod").ZodString;
883
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
884
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
885
+ };
886
+ }, "props"> & {
887
+ readonly properties: {
888
+ iss: import("zod").ZodString;
889
+ sub: import("zod").ZodString;
890
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
891
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
892
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
893
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
894
+ }, import("zod/v4/core").$strip>>;
895
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
896
+ claim: import("zod").ZodString;
897
+ op: import("zod").ZodLiteral<"eq">;
898
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
899
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
900
+ claim: import("zod").ZodString;
901
+ op: import("zod").ZodLiteral<"contains">;
902
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
903
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
904
+ claim: import("zod").ZodString;
905
+ op: import("zod").ZodLiteral<"exists">;
906
+ }, import("zod/v4/core").$strip>], "op">>>;
907
+ };
908
+ } & {
909
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
910
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
911
+ readonly properties: {
912
+ createdAt: import("zod").ZodISODateTime;
913
+ updatedAt: import("zod").ZodISODateTime;
914
+ };
915
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
916
+ readonly properties: {
917
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
918
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
919
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
920
+ defaults: "defaults";
921
+ error: "error";
922
+ merge: "merge";
923
+ replace: "replace";
924
+ skip: "skip";
925
+ }>>;
926
+ };
927
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
928
+ readonly properties: {
929
+ name: import("zod").ZodString;
930
+ };
931
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
932
+ readonly properties: {
933
+ description: import("zod").ZodOptional<import("zod").ZodString>;
934
+ };
935
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
936
+ readonly properties: {
937
+ status: import("zod").ZodEnum<{
938
+ active: "active";
939
+ creating: "creating";
940
+ deleting: "deleting";
941
+ error: "error";
942
+ updating: "updating";
943
+ }>;
944
+ };
945
+ }>];
946
+ readonly methods: {
947
+ move: import("@astrale-os/kernel-dsl").FnDef<{
948
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
949
+ }, import("zod").ZodVoid, "sealed", boolean>;
950
+ };
951
+ }>];
952
+ }>];
953
+ readonly methods: {
954
+ /**
955
+ * `user::switchSpace(space)` — make `space` the user's active space: repoints
956
+ * the `selected_space` edge to it (remove + recreate — edge identity includes
957
+ * the target). `space` is any address (path or `@id`) resolving to a Space the
958
+ * caller can READ. Caller gate mirrors `role::assign`'s user side: EDIT on the
959
+ * user (normally themselves). Idempotent — already selected ⇒ no-op.
960
+ */
961
+ switchSpace: import("@astrale-os/kernel-dsl").FnDef<{
962
+ readonly space: z.ZodString;
963
+ }, z.ZodVoid, import("@astrale-os/kernel-dsl").MethodInheritance, boolean>;
964
+ };
965
+ }, "props"> & {
966
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
967
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
968
+ readonly properties: {
969
+ createdAt: z.ZodISODateTime;
970
+ updatedAt: z.ZodISODateTime;
971
+ };
972
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
973
+ readonly properties: {
974
+ externalId: z.ZodOptional<z.ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
975
+ updatedAt: z.ZodOptional<z.ZodISODateTime>;
976
+ onConflict: z.ZodOptional<z.ZodEnum<{
977
+ defaults: "defaults";
978
+ error: "error";
979
+ merge: "merge";
980
+ replace: "replace";
981
+ skip: "skip";
982
+ }>>;
983
+ };
984
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
985
+ readonly properties: {
986
+ name: z.ZodString;
987
+ };
988
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
989
+ readonly properties: {
990
+ description: z.ZodOptional<z.ZodString>;
991
+ };
992
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
993
+ readonly properties: {
994
+ status: z.ZodEnum<{
995
+ active: "active";
996
+ creating: "creating";
997
+ deleting: "deleting";
998
+ error: "error";
999
+ updating: "updating";
1000
+ }>;
1001
+ };
1002
+ }>];
1003
+ readonly methods: {
1004
+ move: import("@astrale-os/kernel-dsl").FnDef<{
1005
+ readonly to: z.ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, z.core.$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
1006
+ }, z.ZodVoid, "sealed", boolean>;
1007
+ };
1008
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
1009
+ readonly props: {
1010
+ iss: import("zod").ZodString;
1011
+ sub: import("zod").ZodString;
1012
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
1013
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
1014
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1015
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1016
+ }, import("zod/v4/core").$strip>>;
1017
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
1018
+ claim: import("zod").ZodString;
1019
+ op: import("zod").ZodLiteral<"eq">;
1020
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1021
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1022
+ claim: import("zod").ZodString;
1023
+ op: import("zod").ZodLiteral<"contains">;
1024
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1025
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1026
+ claim: import("zod").ZodString;
1027
+ op: import("zod").ZodLiteral<"exists">;
1028
+ }, import("zod/v4/core").$strip>], "op">>>;
1029
+ };
1030
+ readonly methods: {
1031
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1032
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1033
+ }, import("zod").ZodVoid, "sealed", boolean>;
1034
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1035
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1036
+ }, import("zod").ZodVoid, "sealed", boolean>;
1037
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1038
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1039
+ }, import("zod").ZodVoid, "sealed", boolean>;
1040
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
1041
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1042
+ }, import("zod").ZodVoid, "sealed", boolean>;
1043
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
1044
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1045
+ }, import("zod").ZodVoid, "sealed", boolean>;
1046
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
1047
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1048
+ }, import("zod").ZodVoid, "sealed", boolean>;
1049
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
1050
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1051
+ readonly perms: import("zod").ZodNumber;
1052
+ }, import("zod").ZodVoid, "sealed", boolean>;
1053
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
1054
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1055
+ readonly perms: import("zod").ZodNumber;
1056
+ }, import("zod").ZodVoid, "sealed", boolean>;
1057
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
1058
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1059
+ readonly perms: import("zod").ZodNumber;
1060
+ }, import("zod").ZodBoolean, "sealed", boolean>;
1061
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1062
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
1063
+ publicKey: import("zod").ZodObject<{
1064
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1065
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1066
+ }, import("zod/v4/core").$strip>;
1067
+ credential: import("zod").ZodString;
1068
+ }, import("zod/v4/core").$strip>>;
1069
+ }, import("zod").ZodObject<{
1070
+ iss: import("zod").ZodString;
1071
+ sub: import("zod").ZodString;
1072
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
1073
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
1074
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
1075
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
1076
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
1077
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
1078
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
1079
+ }, import("zod").ZodString, "sealed", boolean>;
1080
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1081
+ readonly issuer: import("zod").ZodString;
1082
+ readonly subject: import("zod").ZodString;
1083
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
1084
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
1085
+ };
1086
+ }, "props"> & {
1087
+ readonly properties: {
1088
+ iss: import("zod").ZodString;
1089
+ sub: import("zod").ZodString;
1090
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
1091
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
1092
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1093
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1094
+ }, import("zod/v4/core").$strip>>;
1095
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
1096
+ claim: import("zod").ZodString;
1097
+ op: import("zod").ZodLiteral<"eq">;
1098
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1099
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1100
+ claim: import("zod").ZodString;
1101
+ op: import("zod").ZodLiteral<"contains">;
1102
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1103
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1104
+ claim: import("zod").ZodString;
1105
+ op: import("zod").ZodLiteral<"exists">;
1106
+ }, import("zod/v4/core").$strip>], "op">>>;
1107
+ };
1108
+ } & {
1109
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1110
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1111
+ readonly properties: {
1112
+ createdAt: import("zod").ZodISODateTime;
1113
+ updatedAt: import("zod").ZodISODateTime;
1114
+ };
1115
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1116
+ readonly properties: {
1117
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
1118
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
1119
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
1120
+ defaults: "defaults";
1121
+ error: "error";
1122
+ merge: "merge";
1123
+ replace: "replace";
1124
+ skip: "skip";
1125
+ }>>;
1126
+ };
1127
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1128
+ readonly properties: {
1129
+ name: import("zod").ZodString;
1130
+ };
1131
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1132
+ readonly properties: {
1133
+ description: import("zod").ZodOptional<import("zod").ZodString>;
1134
+ };
1135
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1136
+ readonly properties: {
1137
+ status: import("zod").ZodEnum<{
1138
+ active: "active";
1139
+ creating: "creating";
1140
+ deleting: "deleting";
1141
+ error: "error";
1142
+ updating: "updating";
1143
+ }>;
1144
+ };
1145
+ }>];
1146
+ readonly methods: {
1147
+ move: import("@astrale-os/kernel-dsl").FnDef<{
1148
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
1149
+ }, import("zod").ZodVoid, "sealed", boolean>;
1150
+ };
1151
+ }>];
1152
+ }>];
1153
+ }>];
1154
+ }>;
1155
+ /**
1156
+ * `Group` (interface) — an identity that is also a container; principals join it
1157
+ * via `assign`, which composes the group's permissions onto the member.
1158
+ */
1159
+ export declare const iGroup: import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
1160
+ readonly extends: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
1161
+ readonly props: {
1162
+ iss: import("zod").ZodString;
1163
+ sub: import("zod").ZodString;
1164
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
1165
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
1166
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1167
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1168
+ }, import("zod/v4/core").$strip>>;
1169
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
1170
+ claim: import("zod").ZodString;
1171
+ op: import("zod").ZodLiteral<"eq">;
1172
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1173
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1174
+ claim: import("zod").ZodString;
1175
+ op: import("zod").ZodLiteral<"contains">;
1176
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1177
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1178
+ claim: import("zod").ZodString;
1179
+ op: import("zod").ZodLiteral<"exists">;
1180
+ }, import("zod/v4/core").$strip>], "op">>>;
1181
+ };
1182
+ readonly methods: {
1183
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1184
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1185
+ }, import("zod").ZodVoid, "sealed", boolean>;
1186
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1187
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1188
+ }, import("zod").ZodVoid, "sealed", boolean>;
1189
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1190
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1191
+ }, import("zod").ZodVoid, "sealed", boolean>;
1192
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
1193
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1194
+ }, import("zod").ZodVoid, "sealed", boolean>;
1195
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
1196
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1197
+ }, import("zod").ZodVoid, "sealed", boolean>;
1198
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
1199
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1200
+ }, import("zod").ZodVoid, "sealed", boolean>;
1201
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
1202
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1203
+ readonly perms: import("zod").ZodNumber;
1204
+ }, import("zod").ZodVoid, "sealed", boolean>;
1205
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
1206
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1207
+ readonly perms: import("zod").ZodNumber;
1208
+ }, import("zod").ZodVoid, "sealed", boolean>;
1209
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
1210
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1211
+ readonly perms: import("zod").ZodNumber;
1212
+ }, import("zod").ZodBoolean, "sealed", boolean>;
1213
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1214
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
1215
+ publicKey: import("zod").ZodObject<{
1216
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1217
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1218
+ }, import("zod/v4/core").$strip>;
1219
+ credential: import("zod").ZodString;
1220
+ }, import("zod/v4/core").$strip>>;
1221
+ }, import("zod").ZodObject<{
1222
+ iss: import("zod").ZodString;
1223
+ sub: import("zod").ZodString;
1224
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
1225
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
1226
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
1227
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
1228
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
1229
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
1230
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
1231
+ }, import("zod").ZodString, "sealed", boolean>;
1232
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1233
+ readonly issuer: import("zod").ZodString;
1234
+ readonly subject: import("zod").ZodString;
1235
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
1236
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
1237
+ };
1238
+ }, "props"> & {
1239
+ readonly properties: {
1240
+ iss: import("zod").ZodString;
1241
+ sub: import("zod").ZodString;
1242
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
1243
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
1244
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1245
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1246
+ }, import("zod/v4/core").$strip>>;
1247
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
1248
+ claim: import("zod").ZodString;
1249
+ op: import("zod").ZodLiteral<"eq">;
1250
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1251
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1252
+ claim: import("zod").ZodString;
1253
+ op: import("zod").ZodLiteral<"contains">;
1254
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1255
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1256
+ claim: import("zod").ZodString;
1257
+ op: import("zod").ZodLiteral<"exists">;
1258
+ }, import("zod/v4/core").$strip>], "op">>>;
1259
+ };
1260
+ } & {
1261
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1262
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1263
+ readonly properties: {
1264
+ createdAt: import("zod").ZodISODateTime;
1265
+ updatedAt: import("zod").ZodISODateTime;
1266
+ };
1267
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1268
+ readonly properties: {
1269
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
1270
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
1271
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
1272
+ defaults: "defaults";
1273
+ error: "error";
1274
+ merge: "merge";
1275
+ replace: "replace";
1276
+ skip: "skip";
1277
+ }>>;
1278
+ };
1279
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1280
+ readonly properties: {
1281
+ name: import("zod").ZodString;
1282
+ };
1283
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1284
+ readonly properties: {
1285
+ description: import("zod").ZodOptional<import("zod").ZodString>;
1286
+ };
1287
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1288
+ readonly properties: {
1289
+ status: import("zod").ZodEnum<{
1290
+ active: "active";
1291
+ creating: "creating";
1292
+ deleting: "deleting";
1293
+ error: "error";
1294
+ updating: "updating";
1295
+ }>;
1296
+ };
1297
+ }>];
1298
+ readonly methods: {
1299
+ move: import("@astrale-os/kernel-dsl").FnDef<{
1300
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
1301
+ }, import("zod").ZodVoid, "sealed", boolean>;
1302
+ };
1303
+ }>];
1304
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
1305
+ readonly methods: {};
1306
+ }, "props"> & {
1307
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1308
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1309
+ readonly properties: {
1310
+ createdAt: import("zod").ZodISODateTime;
1311
+ updatedAt: import("zod").ZodISODateTime;
1312
+ };
1313
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1314
+ readonly properties: {
1315
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
1316
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
1317
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
1318
+ defaults: "defaults";
1319
+ error: "error";
1320
+ merge: "merge";
1321
+ replace: "replace";
1322
+ skip: "skip";
1323
+ }>>;
1324
+ };
1325
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1326
+ readonly properties: {
1327
+ name: import("zod").ZodString;
1328
+ };
1329
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1330
+ readonly properties: {
1331
+ description: import("zod").ZodOptional<import("zod").ZodString>;
1332
+ };
1333
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1334
+ readonly properties: {
1335
+ status: import("zod").ZodEnum<{
1336
+ active: "active";
1337
+ creating: "creating";
1338
+ deleting: "deleting";
1339
+ error: "error";
1340
+ updating: "updating";
1341
+ }>;
1342
+ };
1343
+ }>];
1344
+ readonly methods: {
1345
+ move: import("@astrale-os/kernel-dsl").FnDef<{
1346
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
1347
+ }, import("zod").ZodVoid, "sealed", boolean>;
1348
+ };
1349
+ }>];
1350
+ }>];
1351
+ readonly methods: {
1352
+ /**
1353
+ * `group::assign(user)` — add a principal to this group: records the semantic
1354
+ * `belongs_to` edge AND extends the principal's identity with the group
1355
+ * (`extendIdentity`), so membership genuinely composes the group's permissions
1356
+ * (the `admin`-group mechanism). Group grants are set with `grantPerm`
1357
+ * separately. Idempotent.
1358
+ */
1359
+ assign: import("@astrale-os/kernel-dsl").FnDef<{
1360
+ readonly user: z.ZodString;
1361
+ }, z.ZodVoid, import("@astrale-os/kernel-dsl").MethodInheritance, boolean>;
1362
+ /**
1363
+ * `group::unassign(user)` — the idempotent inverse of `assign`: removes the
1364
+ * `belongs_to` edge AND reverses the identity composition (`removeExtension`),
1365
+ * so the group's permissions no longer compose onto the user. Same gate as
1366
+ * `assign` (SHARE on the group + EDIT on the user unless self). Not a member
1367
+ * already ⇒ no-op.
1368
+ */
1369
+ unassign: import("@astrale-os/kernel-dsl").FnDef<{
1370
+ readonly user: z.ZodString;
1371
+ }, z.ZodVoid, import("@astrale-os/kernel-dsl").MethodInheritance, boolean>;
1372
+ };
1373
+ }, "props"> & {
1374
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1375
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1376
+ readonly properties: {
1377
+ createdAt: z.ZodISODateTime;
1378
+ updatedAt: z.ZodISODateTime;
1379
+ };
1380
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1381
+ readonly properties: {
1382
+ externalId: z.ZodOptional<z.ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
1383
+ updatedAt: z.ZodOptional<z.ZodISODateTime>;
1384
+ onConflict: z.ZodOptional<z.ZodEnum<{
1385
+ defaults: "defaults";
1386
+ error: "error";
1387
+ merge: "merge";
1388
+ replace: "replace";
1389
+ skip: "skip";
1390
+ }>>;
1391
+ };
1392
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1393
+ readonly properties: {
1394
+ name: z.ZodString;
1395
+ };
1396
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1397
+ readonly properties: {
1398
+ description: z.ZodOptional<z.ZodString>;
1399
+ };
1400
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1401
+ readonly properties: {
1402
+ status: z.ZodEnum<{
1403
+ active: "active";
1404
+ creating: "creating";
1405
+ deleting: "deleting";
1406
+ error: "error";
1407
+ updating: "updating";
1408
+ }>;
1409
+ };
1410
+ }>];
1411
+ readonly methods: {
1412
+ move: import("@astrale-os/kernel-dsl").FnDef<{
1413
+ readonly to: z.ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, z.core.$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
1414
+ }, z.ZodVoid, "sealed", boolean>;
1415
+ };
1416
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
1417
+ readonly props: {
1418
+ iss: import("zod").ZodString;
1419
+ sub: import("zod").ZodString;
1420
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
1421
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
1422
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1423
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1424
+ }, import("zod/v4/core").$strip>>;
1425
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
1426
+ claim: import("zod").ZodString;
1427
+ op: import("zod").ZodLiteral<"eq">;
1428
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1429
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1430
+ claim: import("zod").ZodString;
1431
+ op: import("zod").ZodLiteral<"contains">;
1432
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1433
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1434
+ claim: import("zod").ZodString;
1435
+ op: import("zod").ZodLiteral<"exists">;
1436
+ }, import("zod/v4/core").$strip>], "op">>>;
1437
+ };
1438
+ readonly methods: {
1439
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1440
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1441
+ }, import("zod").ZodVoid, "sealed", boolean>;
1442
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1443
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1444
+ }, import("zod").ZodVoid, "sealed", boolean>;
1445
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1446
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1447
+ }, import("zod").ZodVoid, "sealed", boolean>;
1448
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
1449
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1450
+ }, import("zod").ZodVoid, "sealed", boolean>;
1451
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
1452
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1453
+ }, import("zod").ZodVoid, "sealed", boolean>;
1454
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
1455
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1456
+ }, import("zod").ZodVoid, "sealed", boolean>;
1457
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
1458
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1459
+ readonly perms: import("zod").ZodNumber;
1460
+ }, import("zod").ZodVoid, "sealed", boolean>;
1461
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
1462
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1463
+ readonly perms: import("zod").ZodNumber;
1464
+ }, import("zod").ZodVoid, "sealed", boolean>;
1465
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
1466
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1467
+ readonly perms: import("zod").ZodNumber;
1468
+ }, import("zod").ZodBoolean, "sealed", boolean>;
1469
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1470
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
1471
+ publicKey: import("zod").ZodObject<{
1472
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1473
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1474
+ }, import("zod/v4/core").$strip>;
1475
+ credential: import("zod").ZodString;
1476
+ }, import("zod/v4/core").$strip>>;
1477
+ }, import("zod").ZodObject<{
1478
+ iss: import("zod").ZodString;
1479
+ sub: import("zod").ZodString;
1480
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
1481
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
1482
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
1483
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
1484
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
1485
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
1486
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
1487
+ }, import("zod").ZodString, "sealed", boolean>;
1488
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1489
+ readonly issuer: import("zod").ZodString;
1490
+ readonly subject: import("zod").ZodString;
1491
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
1492
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
1493
+ };
1494
+ }, "props"> & {
1495
+ readonly properties: {
1496
+ iss: import("zod").ZodString;
1497
+ sub: import("zod").ZodString;
1498
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
1499
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
1500
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1501
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1502
+ }, import("zod/v4/core").$strip>>;
1503
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
1504
+ claim: import("zod").ZodString;
1505
+ op: import("zod").ZodLiteral<"eq">;
1506
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1507
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1508
+ claim: import("zod").ZodString;
1509
+ op: import("zod").ZodLiteral<"contains">;
1510
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1511
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1512
+ claim: import("zod").ZodString;
1513
+ op: import("zod").ZodLiteral<"exists">;
1514
+ }, import("zod/v4/core").$strip>], "op">>>;
1515
+ };
1516
+ } & {
1517
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1518
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1519
+ readonly properties: {
1520
+ createdAt: import("zod").ZodISODateTime;
1521
+ updatedAt: import("zod").ZodISODateTime;
1522
+ };
1523
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1524
+ readonly properties: {
1525
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
1526
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
1527
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
1528
+ defaults: "defaults";
1529
+ error: "error";
1530
+ merge: "merge";
1531
+ replace: "replace";
1532
+ skip: "skip";
1533
+ }>>;
1534
+ };
1535
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1536
+ readonly properties: {
1537
+ name: import("zod").ZodString;
1538
+ };
1539
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1540
+ readonly properties: {
1541
+ description: import("zod").ZodOptional<import("zod").ZodString>;
1542
+ };
1543
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1544
+ readonly properties: {
1545
+ status: import("zod").ZodEnum<{
1546
+ active: "active";
1547
+ creating: "creating";
1548
+ deleting: "deleting";
1549
+ error: "error";
1550
+ updating: "updating";
1551
+ }>;
1552
+ };
1553
+ }>];
1554
+ readonly methods: {
1555
+ move: import("@astrale-os/kernel-dsl").FnDef<{
1556
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
1557
+ }, import("zod").ZodVoid, "sealed", boolean>;
1558
+ };
1559
+ }>];
1560
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
1561
+ readonly methods: {};
1562
+ }, "props"> & {
1563
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1564
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1565
+ readonly properties: {
1566
+ createdAt: import("zod").ZodISODateTime;
1567
+ updatedAt: import("zod").ZodISODateTime;
1568
+ };
1569
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1570
+ readonly properties: {
1571
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
1572
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
1573
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
1574
+ defaults: "defaults";
1575
+ error: "error";
1576
+ merge: "merge";
1577
+ replace: "replace";
1578
+ skip: "skip";
1579
+ }>>;
1580
+ };
1581
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1582
+ readonly properties: {
1583
+ name: import("zod").ZodString;
1584
+ };
1585
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1586
+ readonly properties: {
1587
+ description: import("zod").ZodOptional<import("zod").ZodString>;
1588
+ };
1589
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1590
+ readonly properties: {
1591
+ status: import("zod").ZodEnum<{
1592
+ active: "active";
1593
+ creating: "creating";
1594
+ deleting: "deleting";
1595
+ error: "error";
1596
+ updating: "updating";
1597
+ }>;
1598
+ };
1599
+ }>];
1600
+ readonly methods: {
1601
+ move: import("@astrale-os/kernel-dsl").FnDef<{
1602
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
1603
+ }, import("zod").ZodVoid, "sealed", boolean>;
1604
+ };
1605
+ }>];
1606
+ }>];
1607
+ }>;
1608
+ /** The DEFAULT `Group` — implements the `Group` interface (Identity + Container). */
1609
+ export declare const Group: import("@astrale-os/kernel-dsl").NodeClassDef<Omit<{
1610
+ readonly implements: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
1611
+ readonly extends: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
1612
+ readonly props: {
1613
+ iss: import("zod").ZodString;
1614
+ sub: import("zod").ZodString;
1615
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
1616
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
1617
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1618
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1619
+ }, import("zod/v4/core").$strip>>;
1620
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
1621
+ claim: import("zod").ZodString;
1622
+ op: import("zod").ZodLiteral<"eq">;
1623
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1624
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1625
+ claim: import("zod").ZodString;
1626
+ op: import("zod").ZodLiteral<"contains">;
1627
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1628
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1629
+ claim: import("zod").ZodString;
1630
+ op: import("zod").ZodLiteral<"exists">;
1631
+ }, import("zod/v4/core").$strip>], "op">>>;
1632
+ };
1633
+ readonly methods: {
1634
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1635
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1636
+ }, import("zod").ZodVoid, "sealed", boolean>;
1637
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1638
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1639
+ }, import("zod").ZodVoid, "sealed", boolean>;
1640
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1641
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1642
+ }, import("zod").ZodVoid, "sealed", boolean>;
1643
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
1644
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1645
+ }, import("zod").ZodVoid, "sealed", boolean>;
1646
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
1647
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1648
+ }, import("zod").ZodVoid, "sealed", boolean>;
1649
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
1650
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1651
+ }, import("zod").ZodVoid, "sealed", boolean>;
1652
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
1653
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1654
+ readonly perms: import("zod").ZodNumber;
1655
+ }, import("zod").ZodVoid, "sealed", boolean>;
1656
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
1657
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1658
+ readonly perms: import("zod").ZodNumber;
1659
+ }, import("zod").ZodVoid, "sealed", boolean>;
1660
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
1661
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1662
+ readonly perms: import("zod").ZodNumber;
1663
+ }, import("zod").ZodBoolean, "sealed", boolean>;
1664
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1665
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
1666
+ publicKey: import("zod").ZodObject<{
1667
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1668
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1669
+ }, import("zod/v4/core").$strip>;
1670
+ credential: import("zod").ZodString;
1671
+ }, import("zod/v4/core").$strip>>;
1672
+ }, import("zod").ZodObject<{
1673
+ iss: import("zod").ZodString;
1674
+ sub: import("zod").ZodString;
1675
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
1676
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
1677
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
1678
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
1679
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
1680
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
1681
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
1682
+ }, import("zod").ZodString, "sealed", boolean>;
1683
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1684
+ readonly issuer: import("zod").ZodString;
1685
+ readonly subject: import("zod").ZodString;
1686
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
1687
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
1688
+ };
1689
+ }, "props"> & {
1690
+ readonly properties: {
1691
+ iss: import("zod").ZodString;
1692
+ sub: import("zod").ZodString;
1693
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
1694
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
1695
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1696
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1697
+ }, import("zod/v4/core").$strip>>;
1698
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
1699
+ claim: import("zod").ZodString;
1700
+ op: import("zod").ZodLiteral<"eq">;
1701
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1702
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1703
+ claim: import("zod").ZodString;
1704
+ op: import("zod").ZodLiteral<"contains">;
1705
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1706
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1707
+ claim: import("zod").ZodString;
1708
+ op: import("zod").ZodLiteral<"exists">;
1709
+ }, import("zod/v4/core").$strip>], "op">>>;
1710
+ };
1711
+ } & {
1712
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1713
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1714
+ readonly properties: {
1715
+ createdAt: import("zod").ZodISODateTime;
1716
+ updatedAt: import("zod").ZodISODateTime;
1717
+ };
1718
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1719
+ readonly properties: {
1720
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
1721
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
1722
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
1723
+ defaults: "defaults";
1724
+ error: "error";
1725
+ merge: "merge";
1726
+ replace: "replace";
1727
+ skip: "skip";
1728
+ }>>;
1729
+ };
1730
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1731
+ readonly properties: {
1732
+ name: import("zod").ZodString;
1733
+ };
1734
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1735
+ readonly properties: {
1736
+ description: import("zod").ZodOptional<import("zod").ZodString>;
1737
+ };
1738
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1739
+ readonly properties: {
1740
+ status: import("zod").ZodEnum<{
1741
+ active: "active";
1742
+ creating: "creating";
1743
+ deleting: "deleting";
1744
+ error: "error";
1745
+ updating: "updating";
1746
+ }>;
1747
+ };
1748
+ }>];
1749
+ readonly methods: {
1750
+ move: import("@astrale-os/kernel-dsl").FnDef<{
1751
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
1752
+ }, import("zod").ZodVoid, "sealed", boolean>;
1753
+ };
1754
+ }>];
1755
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
1756
+ readonly methods: {};
1757
+ }, "props"> & {
1758
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1759
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1760
+ readonly properties: {
1761
+ createdAt: import("zod").ZodISODateTime;
1762
+ updatedAt: import("zod").ZodISODateTime;
1763
+ };
1764
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1765
+ readonly properties: {
1766
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
1767
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
1768
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
1769
+ defaults: "defaults";
1770
+ error: "error";
1771
+ merge: "merge";
1772
+ replace: "replace";
1773
+ skip: "skip";
1774
+ }>>;
1775
+ };
1776
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1777
+ readonly properties: {
1778
+ name: import("zod").ZodString;
1779
+ };
1780
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1781
+ readonly properties: {
1782
+ description: import("zod").ZodOptional<import("zod").ZodString>;
1783
+ };
1784
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1785
+ readonly properties: {
1786
+ status: import("zod").ZodEnum<{
1787
+ active: "active";
1788
+ creating: "creating";
1789
+ deleting: "deleting";
1790
+ error: "error";
1791
+ updating: "updating";
1792
+ }>;
1793
+ };
1794
+ }>];
1795
+ readonly methods: {
1796
+ move: import("@astrale-os/kernel-dsl").FnDef<{
1797
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
1798
+ }, import("zod").ZodVoid, "sealed", boolean>;
1799
+ };
1800
+ }>];
1801
+ }>];
1802
+ readonly methods: {
1803
+ /**
1804
+ * `group::assign(user)` — add a principal to this group: records the semantic
1805
+ * `belongs_to` edge AND extends the principal's identity with the group
1806
+ * (`extendIdentity`), so membership genuinely composes the group's permissions
1807
+ * (the `admin`-group mechanism). Group grants are set with `grantPerm`
1808
+ * separately. Idempotent.
1809
+ */
1810
+ assign: import("@astrale-os/kernel-dsl").FnDef<{
1811
+ readonly user: z.ZodString;
1812
+ }, z.ZodVoid, import("@astrale-os/kernel-dsl").MethodInheritance, boolean>;
1813
+ /**
1814
+ * `group::unassign(user)` — the idempotent inverse of `assign`: removes the
1815
+ * `belongs_to` edge AND reverses the identity composition (`removeExtension`),
1816
+ * so the group's permissions no longer compose onto the user. Same gate as
1817
+ * `assign` (SHARE on the group + EDIT on the user unless self). Not a member
1818
+ * already ⇒ no-op.
1819
+ */
1820
+ unassign: import("@astrale-os/kernel-dsl").FnDef<{
1821
+ readonly user: z.ZodString;
1822
+ }, z.ZodVoid, import("@astrale-os/kernel-dsl").MethodInheritance, boolean>;
1823
+ };
1824
+ }, "props"> & {
1825
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1826
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1827
+ readonly properties: {
1828
+ createdAt: z.ZodISODateTime;
1829
+ updatedAt: z.ZodISODateTime;
1830
+ };
1831
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1832
+ readonly properties: {
1833
+ externalId: z.ZodOptional<z.ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
1834
+ updatedAt: z.ZodOptional<z.ZodISODateTime>;
1835
+ onConflict: z.ZodOptional<z.ZodEnum<{
1836
+ defaults: "defaults";
1837
+ error: "error";
1838
+ merge: "merge";
1839
+ replace: "replace";
1840
+ skip: "skip";
1841
+ }>>;
1842
+ };
1843
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1844
+ readonly properties: {
1845
+ name: z.ZodString;
1846
+ };
1847
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1848
+ readonly properties: {
1849
+ description: z.ZodOptional<z.ZodString>;
1850
+ };
1851
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1852
+ readonly properties: {
1853
+ status: z.ZodEnum<{
1854
+ active: "active";
1855
+ creating: "creating";
1856
+ deleting: "deleting";
1857
+ error: "error";
1858
+ updating: "updating";
1859
+ }>;
1860
+ };
1861
+ }>];
1862
+ readonly methods: {
1863
+ move: import("@astrale-os/kernel-dsl").FnDef<{
1864
+ readonly to: z.ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, z.core.$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
1865
+ }, z.ZodVoid, "sealed", boolean>;
1866
+ };
1867
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
1868
+ readonly props: {
1869
+ iss: import("zod").ZodString;
1870
+ sub: import("zod").ZodString;
1871
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
1872
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
1873
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1874
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1875
+ }, import("zod/v4/core").$strip>>;
1876
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
1877
+ claim: import("zod").ZodString;
1878
+ op: import("zod").ZodLiteral<"eq">;
1879
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1880
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1881
+ claim: import("zod").ZodString;
1882
+ op: import("zod").ZodLiteral<"contains">;
1883
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1884
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1885
+ claim: import("zod").ZodString;
1886
+ op: import("zod").ZodLiteral<"exists">;
1887
+ }, import("zod/v4/core").$strip>], "op">>>;
1888
+ };
1889
+ readonly methods: {
1890
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1891
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1892
+ }, import("zod").ZodVoid, "sealed", boolean>;
1893
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1894
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1895
+ }, import("zod").ZodVoid, "sealed", boolean>;
1896
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1897
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1898
+ }, import("zod").ZodVoid, "sealed", boolean>;
1899
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
1900
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1901
+ }, import("zod").ZodVoid, "sealed", boolean>;
1902
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
1903
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1904
+ }, import("zod").ZodVoid, "sealed", boolean>;
1905
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
1906
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1907
+ }, import("zod").ZodVoid, "sealed", boolean>;
1908
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
1909
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1910
+ readonly perms: import("zod").ZodNumber;
1911
+ }, import("zod").ZodVoid, "sealed", boolean>;
1912
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
1913
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1914
+ readonly perms: import("zod").ZodNumber;
1915
+ }, import("zod").ZodVoid, "sealed", boolean>;
1916
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
1917
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
1918
+ readonly perms: import("zod").ZodNumber;
1919
+ }, import("zod").ZodBoolean, "sealed", boolean>;
1920
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1921
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
1922
+ publicKey: import("zod").ZodObject<{
1923
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1924
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1925
+ }, import("zod/v4/core").$strip>;
1926
+ credential: import("zod").ZodString;
1927
+ }, import("zod/v4/core").$strip>>;
1928
+ }, import("zod").ZodObject<{
1929
+ iss: import("zod").ZodString;
1930
+ sub: import("zod").ZodString;
1931
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
1932
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
1933
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
1934
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
1935
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
1936
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
1937
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
1938
+ }, import("zod").ZodString, "sealed", boolean>;
1939
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
1940
+ readonly issuer: import("zod").ZodString;
1941
+ readonly subject: import("zod").ZodString;
1942
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
1943
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
1944
+ };
1945
+ }, "props"> & {
1946
+ readonly properties: {
1947
+ iss: import("zod").ZodString;
1948
+ sub: import("zod").ZodString;
1949
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
1950
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
1951
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
1952
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
1953
+ }, import("zod/v4/core").$strip>>;
1954
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
1955
+ claim: import("zod").ZodString;
1956
+ op: import("zod").ZodLiteral<"eq">;
1957
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1958
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1959
+ claim: import("zod").ZodString;
1960
+ op: import("zod").ZodLiteral<"contains">;
1961
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
1962
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
1963
+ claim: import("zod").ZodString;
1964
+ op: import("zod").ZodLiteral<"exists">;
1965
+ }, import("zod/v4/core").$strip>], "op">>>;
1966
+ };
1967
+ } & {
1968
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1969
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1970
+ readonly properties: {
1971
+ createdAt: import("zod").ZodISODateTime;
1972
+ updatedAt: import("zod").ZodISODateTime;
1973
+ };
1974
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1975
+ readonly properties: {
1976
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
1977
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
1978
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
1979
+ defaults: "defaults";
1980
+ error: "error";
1981
+ merge: "merge";
1982
+ replace: "replace";
1983
+ skip: "skip";
1984
+ }>>;
1985
+ };
1986
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1987
+ readonly properties: {
1988
+ name: import("zod").ZodString;
1989
+ };
1990
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1991
+ readonly properties: {
1992
+ description: import("zod").ZodOptional<import("zod").ZodString>;
1993
+ };
1994
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
1995
+ readonly properties: {
1996
+ status: import("zod").ZodEnum<{
1997
+ active: "active";
1998
+ creating: "creating";
1999
+ deleting: "deleting";
2000
+ error: "error";
2001
+ updating: "updating";
2002
+ }>;
2003
+ };
2004
+ }>];
2005
+ readonly methods: {
2006
+ move: import("@astrale-os/kernel-dsl").FnDef<{
2007
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
2008
+ }, import("zod").ZodVoid, "sealed", boolean>;
2009
+ };
2010
+ }>];
2011
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
2012
+ readonly methods: {};
2013
+ }, "props"> & {
2014
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2015
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2016
+ readonly properties: {
2017
+ createdAt: import("zod").ZodISODateTime;
2018
+ updatedAt: import("zod").ZodISODateTime;
2019
+ };
2020
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2021
+ readonly properties: {
2022
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
2023
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
2024
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
2025
+ defaults: "defaults";
2026
+ error: "error";
2027
+ merge: "merge";
2028
+ replace: "replace";
2029
+ skip: "skip";
2030
+ }>>;
2031
+ };
2032
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2033
+ readonly properties: {
2034
+ name: import("zod").ZodString;
2035
+ };
2036
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2037
+ readonly properties: {
2038
+ description: import("zod").ZodOptional<import("zod").ZodString>;
2039
+ };
2040
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2041
+ readonly properties: {
2042
+ status: import("zod").ZodEnum<{
2043
+ active: "active";
2044
+ creating: "creating";
2045
+ deleting: "deleting";
2046
+ error: "error";
2047
+ updating: "updating";
2048
+ }>;
2049
+ };
2050
+ }>];
2051
+ readonly methods: {
2052
+ move: import("@astrale-os/kernel-dsl").FnDef<{
2053
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
2054
+ }, import("zod").ZodVoid, "sealed", boolean>;
2055
+ };
2056
+ }>];
2057
+ }>];
2058
+ }>];
2059
+ readonly icon: string;
2060
+ }, "props"> & {
2061
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2062
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2063
+ readonly properties: {
2064
+ createdAt: z.ZodISODateTime;
2065
+ updatedAt: z.ZodISODateTime;
2066
+ };
2067
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2068
+ readonly properties: {
2069
+ externalId: z.ZodOptional<z.ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
2070
+ updatedAt: z.ZodOptional<z.ZodISODateTime>;
2071
+ onConflict: z.ZodOptional<z.ZodEnum<{
2072
+ defaults: "defaults";
2073
+ error: "error";
2074
+ merge: "merge";
2075
+ replace: "replace";
2076
+ skip: "skip";
2077
+ }>>;
2078
+ };
2079
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2080
+ readonly properties: {
2081
+ name: z.ZodString;
2082
+ };
2083
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2084
+ readonly properties: {
2085
+ description: z.ZodOptional<z.ZodString>;
2086
+ };
2087
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2088
+ readonly properties: {
2089
+ status: z.ZodEnum<{
2090
+ active: "active";
2091
+ creating: "creating";
2092
+ deleting: "deleting";
2093
+ error: "error";
2094
+ updating: "updating";
2095
+ }>;
2096
+ };
2097
+ }>];
2098
+ readonly methods: {
2099
+ move: import("@astrale-os/kernel-dsl").FnDef<{
2100
+ readonly to: z.ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, z.core.$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
2101
+ }, z.ZodVoid, "sealed", boolean>;
2102
+ };
2103
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
2104
+ readonly extends: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
2105
+ readonly props: {
2106
+ iss: import("zod").ZodString;
2107
+ sub: import("zod").ZodString;
2108
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
2109
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
2110
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
2111
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
2112
+ }, import("zod/v4/core").$strip>>;
2113
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
2114
+ claim: import("zod").ZodString;
2115
+ op: import("zod").ZodLiteral<"eq">;
2116
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
2117
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
2118
+ claim: import("zod").ZodString;
2119
+ op: import("zod").ZodLiteral<"contains">;
2120
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
2121
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
2122
+ claim: import("zod").ZodString;
2123
+ op: import("zod").ZodLiteral<"exists">;
2124
+ }, import("zod/v4/core").$strip>], "op">>>;
2125
+ };
2126
+ readonly methods: {
2127
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
2128
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2129
+ }, import("zod").ZodVoid, "sealed", boolean>;
2130
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
2131
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2132
+ }, import("zod").ZodVoid, "sealed", boolean>;
2133
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
2134
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2135
+ }, import("zod").ZodVoid, "sealed", boolean>;
2136
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
2137
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2138
+ }, import("zod").ZodVoid, "sealed", boolean>;
2139
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
2140
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2141
+ }, import("zod").ZodVoid, "sealed", boolean>;
2142
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
2143
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2144
+ }, import("zod").ZodVoid, "sealed", boolean>;
2145
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
2146
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2147
+ readonly perms: import("zod").ZodNumber;
2148
+ }, import("zod").ZodVoid, "sealed", boolean>;
2149
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
2150
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2151
+ readonly perms: import("zod").ZodNumber;
2152
+ }, import("zod").ZodVoid, "sealed", boolean>;
2153
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
2154
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2155
+ readonly perms: import("zod").ZodNumber;
2156
+ }, import("zod").ZodBoolean, "sealed", boolean>;
2157
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
2158
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
2159
+ publicKey: import("zod").ZodObject<{
2160
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
2161
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
2162
+ }, import("zod/v4/core").$strip>;
2163
+ credential: import("zod").ZodString;
2164
+ }, import("zod/v4/core").$strip>>;
2165
+ }, import("zod").ZodObject<{
2166
+ iss: import("zod").ZodString;
2167
+ sub: import("zod").ZodString;
2168
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
2169
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
2170
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
2171
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
2172
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
2173
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
2174
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
2175
+ }, import("zod").ZodString, "sealed", boolean>;
2176
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
2177
+ readonly issuer: import("zod").ZodString;
2178
+ readonly subject: import("zod").ZodString;
2179
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
2180
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
2181
+ };
2182
+ }, "props"> & {
2183
+ readonly properties: {
2184
+ iss: import("zod").ZodString;
2185
+ sub: import("zod").ZodString;
2186
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
2187
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
2188
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
2189
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
2190
+ }, import("zod/v4/core").$strip>>;
2191
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
2192
+ claim: import("zod").ZodString;
2193
+ op: import("zod").ZodLiteral<"eq">;
2194
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
2195
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
2196
+ claim: import("zod").ZodString;
2197
+ op: import("zod").ZodLiteral<"contains">;
2198
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
2199
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
2200
+ claim: import("zod").ZodString;
2201
+ op: import("zod").ZodLiteral<"exists">;
2202
+ }, import("zod/v4/core").$strip>], "op">>>;
2203
+ };
2204
+ } & {
2205
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2206
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2207
+ readonly properties: {
2208
+ createdAt: import("zod").ZodISODateTime;
2209
+ updatedAt: import("zod").ZodISODateTime;
2210
+ };
2211
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2212
+ readonly properties: {
2213
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
2214
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
2215
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
2216
+ defaults: "defaults";
2217
+ error: "error";
2218
+ merge: "merge";
2219
+ replace: "replace";
2220
+ skip: "skip";
2221
+ }>>;
2222
+ };
2223
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2224
+ readonly properties: {
2225
+ name: import("zod").ZodString;
2226
+ };
2227
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2228
+ readonly properties: {
2229
+ description: import("zod").ZodOptional<import("zod").ZodString>;
2230
+ };
2231
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2232
+ readonly properties: {
2233
+ status: import("zod").ZodEnum<{
2234
+ active: "active";
2235
+ creating: "creating";
2236
+ deleting: "deleting";
2237
+ error: "error";
2238
+ updating: "updating";
2239
+ }>;
2240
+ };
2241
+ }>];
2242
+ readonly methods: {
2243
+ move: import("@astrale-os/kernel-dsl").FnDef<{
2244
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
2245
+ }, import("zod").ZodVoid, "sealed", boolean>;
2246
+ };
2247
+ }>];
2248
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
2249
+ readonly methods: {};
2250
+ }, "props"> & {
2251
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2252
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2253
+ readonly properties: {
2254
+ createdAt: import("zod").ZodISODateTime;
2255
+ updatedAt: import("zod").ZodISODateTime;
2256
+ };
2257
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2258
+ readonly properties: {
2259
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
2260
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
2261
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
2262
+ defaults: "defaults";
2263
+ error: "error";
2264
+ merge: "merge";
2265
+ replace: "replace";
2266
+ skip: "skip";
2267
+ }>>;
2268
+ };
2269
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2270
+ readonly properties: {
2271
+ name: import("zod").ZodString;
2272
+ };
2273
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2274
+ readonly properties: {
2275
+ description: import("zod").ZodOptional<import("zod").ZodString>;
2276
+ };
2277
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2278
+ readonly properties: {
2279
+ status: import("zod").ZodEnum<{
2280
+ active: "active";
2281
+ creating: "creating";
2282
+ deleting: "deleting";
2283
+ error: "error";
2284
+ updating: "updating";
2285
+ }>;
2286
+ };
2287
+ }>];
2288
+ readonly methods: {
2289
+ move: import("@astrale-os/kernel-dsl").FnDef<{
2290
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
2291
+ }, import("zod").ZodVoid, "sealed", boolean>;
2292
+ };
2293
+ }>];
2294
+ }>];
2295
+ readonly methods: {
2296
+ /**
2297
+ * `group::assign(user)` — add a principal to this group: records the semantic
2298
+ * `belongs_to` edge AND extends the principal's identity with the group
2299
+ * (`extendIdentity`), so membership genuinely composes the group's permissions
2300
+ * (the `admin`-group mechanism). Group grants are set with `grantPerm`
2301
+ * separately. Idempotent.
2302
+ */
2303
+ assign: import("@astrale-os/kernel-dsl").FnDef<{
2304
+ readonly user: z.ZodString;
2305
+ }, z.ZodVoid, import("@astrale-os/kernel-dsl").MethodInheritance, boolean>;
2306
+ /**
2307
+ * `group::unassign(user)` — the idempotent inverse of `assign`: removes the
2308
+ * `belongs_to` edge AND reverses the identity composition (`removeExtension`),
2309
+ * so the group's permissions no longer compose onto the user. Same gate as
2310
+ * `assign` (SHARE on the group + EDIT on the user unless self). Not a member
2311
+ * already ⇒ no-op.
2312
+ */
2313
+ unassign: import("@astrale-os/kernel-dsl").FnDef<{
2314
+ readonly user: z.ZodString;
2315
+ }, z.ZodVoid, import("@astrale-os/kernel-dsl").MethodInheritance, boolean>;
2316
+ };
2317
+ }, "props"> & {
2318
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2319
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2320
+ readonly properties: {
2321
+ createdAt: z.ZodISODateTime;
2322
+ updatedAt: z.ZodISODateTime;
2323
+ };
2324
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2325
+ readonly properties: {
2326
+ externalId: z.ZodOptional<z.ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
2327
+ updatedAt: z.ZodOptional<z.ZodISODateTime>;
2328
+ onConflict: z.ZodOptional<z.ZodEnum<{
2329
+ defaults: "defaults";
2330
+ error: "error";
2331
+ merge: "merge";
2332
+ replace: "replace";
2333
+ skip: "skip";
2334
+ }>>;
2335
+ };
2336
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2337
+ readonly properties: {
2338
+ name: z.ZodString;
2339
+ };
2340
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2341
+ readonly properties: {
2342
+ description: z.ZodOptional<z.ZodString>;
2343
+ };
2344
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2345
+ readonly properties: {
2346
+ status: z.ZodEnum<{
2347
+ active: "active";
2348
+ creating: "creating";
2349
+ deleting: "deleting";
2350
+ error: "error";
2351
+ updating: "updating";
2352
+ }>;
2353
+ };
2354
+ }>];
2355
+ readonly methods: {
2356
+ move: import("@astrale-os/kernel-dsl").FnDef<{
2357
+ readonly to: z.ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, z.core.$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
2358
+ }, z.ZodVoid, "sealed", boolean>;
2359
+ };
2360
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
2361
+ readonly props: {
2362
+ iss: import("zod").ZodString;
2363
+ sub: import("zod").ZodString;
2364
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
2365
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
2366
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
2367
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
2368
+ }, import("zod/v4/core").$strip>>;
2369
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
2370
+ claim: import("zod").ZodString;
2371
+ op: import("zod").ZodLiteral<"eq">;
2372
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
2373
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
2374
+ claim: import("zod").ZodString;
2375
+ op: import("zod").ZodLiteral<"contains">;
2376
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
2377
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
2378
+ claim: import("zod").ZodString;
2379
+ op: import("zod").ZodLiteral<"exists">;
2380
+ }, import("zod/v4/core").$strip>], "op">>>;
2381
+ };
2382
+ readonly methods: {
2383
+ extendIdentity: import("@astrale-os/kernel-dsl").FnDef<{
2384
+ readonly with: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2385
+ }, import("zod").ZodVoid, "sealed", boolean>;
2386
+ constrainIdentity: import("@astrale-os/kernel-dsl").FnDef<{
2387
+ readonly by: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2388
+ }, import("zod").ZodVoid, "sealed", boolean>;
2389
+ excludeIdentity: import("@astrale-os/kernel-dsl").FnDef<{
2390
+ readonly without: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2391
+ }, import("zod").ZodVoid, "sealed", boolean>;
2392
+ removeExtension: import("@astrale-os/kernel-dsl").FnDef<{
2393
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2394
+ }, import("zod").ZodVoid, "sealed", boolean>;
2395
+ removeConstraint: import("@astrale-os/kernel-dsl").FnDef<{
2396
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2397
+ }, import("zod").ZodVoid, "sealed", boolean>;
2398
+ removeExclusion: import("@astrale-os/kernel-dsl").FnDef<{
2399
+ readonly identity: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2400
+ }, import("zod").ZodVoid, "sealed", boolean>;
2401
+ grantPerm: import("@astrale-os/kernel-dsl").FnDef<{
2402
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2403
+ readonly perms: import("zod").ZodNumber;
2404
+ }, import("zod").ZodVoid, "sealed", boolean>;
2405
+ revokePerm: import("@astrale-os/kernel-dsl").FnDef<{
2406
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2407
+ readonly perms: import("zod").ZodNumber;
2408
+ }, import("zod").ZodVoid, "sealed", boolean>;
2409
+ checkPerm: import("@astrale-os/kernel-dsl").FnDef<{
2410
+ readonly node: import("zod").ZodType<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").Path, string | import("@astrale-os/kernel-core").Path>>;
2411
+ readonly perms: import("zod").ZodNumber;
2412
+ }, import("zod").ZodBoolean, "sealed", boolean>;
2413
+ registerIdentity: import("@astrale-os/kernel-dsl").FnDef<{
2414
+ readonly signingKey: import("zod").ZodOptional<import("zod").ZodObject<{
2415
+ publicKey: import("zod").ZodObject<{
2416
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
2417
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
2418
+ }, import("zod/v4/core").$strip>;
2419
+ credential: import("zod").ZodString;
2420
+ }, import("zod/v4/core").$strip>>;
2421
+ }, import("zod").ZodObject<{
2422
+ iss: import("zod").ZodString;
2423
+ sub: import("zod").ZodString;
2424
+ }, import("zod/v4/core").$strip>, "sealed", boolean>;
2425
+ mintIdentityCredential: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodString, "sealed", boolean>;
2426
+ mintDelegationCredential: import("@astrale-os/kernel-dsl").FnDef<{
2427
+ readonly audience: import("zod").ZodOptional<import("zod").ZodString>;
2428
+ readonly delegation: import("zod").ZodCustom<import("@astrale-os/kernel-core").UnresolvedIdentityExpr, import("@astrale-os/kernel-core").UnresolvedIdentityExpr>;
2429
+ readonly attestation: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").SelfIdentityExpr, import("@astrale-os/kernel-core").SelfIdentityExpr>>;
2430
+ readonly ttl: import("zod").ZodOptional<import("zod").ZodNumber>;
2431
+ }, import("zod").ZodString, "sealed", boolean>;
2432
+ findIdentity: import("@astrale-os/kernel-dsl").FnDef<{
2433
+ readonly issuer: import("zod").ZodString;
2434
+ readonly subject: import("zod").ZodString;
2435
+ }, import("zod").ZodNullable<import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>>, "sealed", true>;
2436
+ whoami: import("@astrale-os/kernel-dsl").FnDef<{}, import("zod").ZodCustom<import("@astrale-os/kernel-core").Node, import("@astrale-os/kernel-core").Node>, "sealed", true>;
2437
+ };
2438
+ }, "props"> & {
2439
+ readonly properties: {
2440
+ iss: import("zod").ZodString;
2441
+ sub: import("zod").ZodString;
2442
+ frozen: import("zod").ZodOptional<import("zod").ZodBoolean>;
2443
+ publicKey: import("zod").ZodOptional<import("zod").ZodObject<{
2444
+ jwk: import("zod").ZodOptional<import("zod").ZodCustom<import("jose").JWK, import("jose").JWK>>;
2445
+ jwksUri: import("zod").ZodOptional<import("zod").ZodURL>;
2446
+ }, import("zod/v4/core").$strip>>;
2447
+ requiredClaims: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
2448
+ claim: import("zod").ZodString;
2449
+ op: import("zod").ZodLiteral<"eq">;
2450
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
2451
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
2452
+ claim: import("zod").ZodString;
2453
+ op: import("zod").ZodLiteral<"contains">;
2454
+ value: import("zod").ZodType<import("@astrale-os/kernel-core").JsonValue, unknown, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").JsonValue, unknown>>;
2455
+ }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
2456
+ claim: import("zod").ZodString;
2457
+ op: import("zod").ZodLiteral<"exists">;
2458
+ }, import("zod/v4/core").$strip>], "op">>>;
2459
+ };
2460
+ } & {
2461
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2462
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2463
+ readonly properties: {
2464
+ createdAt: import("zod").ZodISODateTime;
2465
+ updatedAt: import("zod").ZodISODateTime;
2466
+ };
2467
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2468
+ readonly properties: {
2469
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
2470
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
2471
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
2472
+ defaults: "defaults";
2473
+ error: "error";
2474
+ merge: "merge";
2475
+ replace: "replace";
2476
+ skip: "skip";
2477
+ }>>;
2478
+ };
2479
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2480
+ readonly properties: {
2481
+ name: import("zod").ZodString;
2482
+ };
2483
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2484
+ readonly properties: {
2485
+ description: import("zod").ZodOptional<import("zod").ZodString>;
2486
+ };
2487
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2488
+ readonly properties: {
2489
+ status: import("zod").ZodEnum<{
2490
+ active: "active";
2491
+ creating: "creating";
2492
+ deleting: "deleting";
2493
+ error: "error";
2494
+ updating: "updating";
2495
+ }>;
2496
+ };
2497
+ }>];
2498
+ readonly methods: {
2499
+ move: import("@astrale-os/kernel-dsl").FnDef<{
2500
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
2501
+ }, import("zod").ZodVoid, "sealed", boolean>;
2502
+ };
2503
+ }>];
2504
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<Omit<{
2505
+ readonly methods: {};
2506
+ }, "props"> & {
2507
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2508
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2509
+ readonly properties: {
2510
+ createdAt: import("zod").ZodISODateTime;
2511
+ updatedAt: import("zod").ZodISODateTime;
2512
+ };
2513
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2514
+ readonly properties: {
2515
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
2516
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
2517
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
2518
+ defaults: "defaults";
2519
+ error: "error";
2520
+ merge: "merge";
2521
+ replace: "replace";
2522
+ skip: "skip";
2523
+ }>>;
2524
+ };
2525
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2526
+ readonly properties: {
2527
+ name: import("zod").ZodString;
2528
+ };
2529
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2530
+ readonly properties: {
2531
+ description: import("zod").ZodOptional<import("zod").ZodString>;
2532
+ };
2533
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2534
+ readonly properties: {
2535
+ status: import("zod").ZodEnum<{
2536
+ active: "active";
2537
+ creating: "creating";
2538
+ deleting: "deleting";
2539
+ error: "error";
2540
+ updating: "updating";
2541
+ }>;
2542
+ };
2543
+ }>];
2544
+ readonly methods: {
2545
+ move: import("@astrale-os/kernel-dsl").FnDef<{
2546
+ readonly to: import("zod").ZodType<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath, import("zod/v4/core").$ZodTypeInternals<import("@astrale-os/kernel-core").AbsolutePath, string | import("@astrale-os/kernel-core").AbsolutePath>>;
2547
+ }, import("zod").ZodVoid, "sealed", boolean>;
2548
+ };
2549
+ }>];
2550
+ }>];
2551
+ }>];
2552
+ }>;
2553
+ /** A user's membership in a group — the semantic, queryable side of group
2554
+ * membership (the permission composition is done via `extendIdentity`). */
2555
+ export declare const belongs_to: import("@astrale-os/kernel-dsl").EdgeClassDef<import("@astrale-os/kernel-dsl").EndpointConfig<string, readonly any[], import("@astrale-os/kernel-dsl").Cardinality>, import("@astrale-os/kernel-dsl").EndpointConfig<string, readonly any[], import("@astrale-os/kernel-dsl").Cardinality>, Omit<Record<never, never>, "props"> & {
2556
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2557
+ readonly inherits: readonly [import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2558
+ readonly properties: {
2559
+ slug: import("zod").ZodOptional<import("zod").ZodPipe<import("zod").ZodString, import("zod").ZodTransform<import("@astrale-os/kernel-core").Slug, string>>>;
2560
+ };
2561
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2562
+ readonly properties: {
2563
+ createdAt: import("zod").ZodISODateTime;
2564
+ updatedAt: import("zod").ZodISODateTime;
2565
+ };
2566
+ }>, import("@astrale-os/kernel-dsl").NodeInterfaceDef<{
2567
+ readonly properties: {
2568
+ externalId: import("zod").ZodOptional<import("zod").ZodCustom<import("@astrale-os/kernel-core").ExternalId, import("@astrale-os/kernel-core").ExternalId>>;
2569
+ updatedAt: import("zod").ZodOptional<import("zod").ZodISODateTime>;
2570
+ onConflict: import("zod").ZodOptional<import("zod").ZodEnum<{
2571
+ defaults: "defaults";
2572
+ error: "error";
2573
+ merge: "merge";
2574
+ replace: "replace";
2575
+ skip: "skip";
2576
+ }>>;
2577
+ };
2578
+ }>];
2579
+ }>];
2580
+ }>;
2581
+ //# sourceMappingURL=identity.d.ts.map