@astrale-os/kernel-client 0.6.0-beta.22 → 0.6.0-beta.23

package/dist/auth/auth.d.ts

@@ -1,4 +1,4 @@
-import type { Identity, IdentityId, MintedCredential, ProvisionRequest, ProvisionResult } from '@astrale-os/kernel-core/auth';
+import type { Identity, Authentication, IdentityId, MintedCredential, ProvisionRequest, ProvisionResult } from '@astrale-os/kernel-core/auth';
 import type { PathLike } from '@astrale-os/kernel-core/path';
 import type { Input } from '../client/index.js';
 import type { RequestOptions } from '../transport/index.js';
@@ -8,8 +8,8 @@ import type { WhoisInput } from './identity.js';
 export type AuthCall = (target: PathLike, input: Input, options?: RequestOptions) => Promise<Input>;
 export interface AuthApi {
     provision(input: ProvisionRequest, options?: RequestOptions): Promise<ProvisionResult>;
-    whoami(options?: RequestOptions): Promise<Identity>;
-    whois(input: WhoisInput, options?: RequestOptions): Promise<Identity | null>;
+    whoami(options?: RequestOptions): Promise<Identity & Authentication>;
+    whois(input: WhoisInput, options?: RequestOptions): Promise<(Identity & Authentication) | null>;
     can(input: PolicyDecisionInput, options?: RequestOptions): Promise<boolean>;
     mint(input: MintOptions, options?: RequestOptions): Promise<MintedCredential>;
     delegate(identity: IdentityId, input: DelegateOptions, options?: RequestOptions): Promise<MintedCredential>;

package/dist/auth/identity.d.ts

@@ -1,14 +1,12 @@
-import type { Identity, IssuerId, Subject } from '@astrale-os/kernel-core/auth';
+import type { Authentication, Identity } from '@astrale-os/kernel-core/auth';
 import type { NodePath } from '@astrale-os/kernel-core/path';
 import type { RequestOptions } from '../transport/index.js';
 import type { AuthCall } from './auth.js';
-export interface WhoisInput {
-    readonly issuer: IssuerId;
-    readonly subject: Subject;
+export type WhoisInput = Authentication;
+export interface IdentityApi {
+    whoami(options?: RequestOptions): Promise<Identity & Authentication>;
+    whois(input: WhoisInput, options?: RequestOptions): Promise<(Identity & Authentication) | null>;
 }
 export declare const IDENTITY_WHOAMI_PATH: NodePath;
 export declare const IDENTITY_WHOIS_PATH: NodePath;
-export declare function identityApi(call: AuthCall): Readonly<{
-    whoami(options?: RequestOptions): Promise<Identity>;
-    whois(input: WhoisInput, options?: RequestOptions): Promise<Identity | null>;
-}>;
+export declare function identityApi(call: AuthCall): IdentityApi;

package/dist/session/bound.d.ts

@@ -1,7 +1,9 @@
 import type { IssuerId } from '@astrale-os/kernel-core/auth';
+import type { SchemaApi } from '../schema/index.js';
 import type { SessionControlOptions } from './context/index.js';
 import type { CallableReference, InputOfReference, OutputOfReference } from './reference.js';
 import type { SessionRequestOptions } from './routing/index.js';
+import type { ClientSession } from './session.js';
 import type { ViewCatalog } from './views/index.js';
 import { type AuthApi } from '../auth/index.js';
 import { type Binary, type Call, type Input, type Result, type Stream } from '../client/index.js';
@@ -9,12 +11,13 @@ import { type GraphApi } from '../graph/index.js';
 /** Exact live Session surface captured by one credential-bound Kernel view. */
 export interface BoundSessionSource {
     readonly kernel: IssuerId;
+    readonly schema: SchemaApi;
     dispatch(call: Call, options?: SessionRequestOptions): Promise<Result>;
     call(call: Call, options?: SessionRequestOptions): Promise<Input>;
     invoke<const Reference extends CallableReference>(reference: Reference, input: InputOfReference<Reference>, options?: SessionRequestOptions): Promise<OutputOfReference<Reference>>;
     stream(call: Call, options?: SessionRequestOptions): Promise<Stream>;
     binary(call: Call, options?: SessionRequestOptions): Promise<Binary>;
-    viewsFor(target: Parameters<import('./session.js').ClientSession['viewsFor']>[0], options?: SessionControlOptions): Promise<ViewCatalog>;
+    viewsFor(target: Parameters<ClientSession['viewsFor']>[0], options?: SessionControlOptions): Promise<ViewCatalog>;
 }
 export interface BoundSessionControls {
     readonly signal: AbortSignal;
@@ -30,6 +33,7 @@ export interface BoundSessionControls {
 export interface BoundClientSession extends GraphApi {
     readonly kernel: IssuerId;
     readonly auth: AuthApi;
+    readonly schema: SchemaApi;
     dispatch(call: Call, options?: SessionRequestOptions): Promise<Result>;
     call(call: Call, options?: SessionRequestOptions): Promise<Input>;
     invoke<const Reference extends CallableReference>(reference: Reference, input: InputOfReference<Reference>, options?: SessionRequestOptions): Promise<OutputOfReference<Reference>>;

package/dist/session/bound.js

@@ -12,18 +12,25 @@ export function bindSession(source, controls) {
     const streamSource = capture(source, 'stream');
     const binarySource = capture(source, 'binary');
     const viewsForSource = capture(source, 'viewsFor');
+    const schemaSource = captureSchema(source.schema);
     const dispatch = (input, options) => dispatchSource(input, requestOptions(options, admittedControls));
     const call = (input, options) => callSource(input, requestOptions(options, admittedControls));
     const invoke = (reference, input, options) => invokeSource(reference, input, requestOptions(options, admittedControls));
     const stream = (input, options) => streamSource(input, requestOptions(options, admittedControls));
     const binary = (input, options) => binarySource(input, requestOptions(options, admittedControls));
     const viewsFor = (target, options) => viewsForSource(target, controlOptions(options, admittedControls));
+    const install = (request, options) => schemaSource.install(request, controlOptions(options, admittedControls));
+    const uninstall = (request, options) => schemaSource.uninstall(request, controlOptions(options, admittedControls));
+    const inspect = (origin, options) => schemaSource.inspect(origin, controlOptions(options, admittedControls));
+    const bundle = (origin, options) => schemaSource.bundle(origin, controlOptions(options, admittedControls));
+    const schema = Object.freeze({ install, uninstall, inspect, bundle });
     const graph = createGraph(call);
     const auth = createAuth((target, input, options) => call(createCall(target, input), options));
     return Object.freeze({
         ...graph,
         kernel: source.kernel,
         auth,
+        schema,
         dispatch,
         call,
         invoke,
@@ -67,6 +74,16 @@ function capture(source, key) {
         invalid();
     return value.bind(source);
 }
+function captureSchema(input) {
+    if (input === null || typeof input !== 'object')
+        invalid();
+    return Object.freeze({
+        install: capture(input, 'install'),
+        uninstall: capture(input, 'uninstall'),
+        inspect: capture(input, 'inspect'),
+        bundle: capture(input, 'bundle'),
+    });
+}
 function invalid() {
     throw new TypeError('Bound ClientSession source is invalid.');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-client",
-  "version": "0.6.0-beta.22",
+  "version": "0.6.0-beta.23",
   "description": "Universal Client — protocol-first, transport-agnostic",
   "keywords": [
     "astrale",
@@ -67,16 +67,16 @@
   "dependencies": {
     "@tanstack/pacer": "0.20.1",
     "msgpackr": "^2.0.5",
-    "@astrale-os/kernel-core": "0.9.0-beta.17",
     "@astrale-os/kernel-dsl": "0.2.0-beta.14",
-    "@astrale-os/kernel-protocol": "0.5.0-beta.17"
+    "@astrale-os/kernel-core": "0.9.0-beta.18",
+    "@astrale-os/kernel-protocol": "0.5.0-beta.18"
   },
   "devDependencies": {
     "@astrale/typescript-config": "npm:@jsr/astrale__typescript-config@~1.1.0",
     "@types/node": "^22.0.0",
     "typescript": "7.0.2",
     "vitest": "^4.1.10",
-    "@astrale-os/kernel-server": "0.5.0-beta.18"
+    "@astrale-os/kernel-server": "0.5.0-beta.19"
   },
   "scripts": {
     "build": "tsc",