@astrale-os/kernel-client 0.6.0-beta.51 → 0.6.0-beta.53

package/dist/auth/auth.d.ts

@@ -1,13 +1,14 @@
-import type { Identity, Authentication, IdentityId, MintedCredential, ProvisionRequest, ProvisionResult } from '@astrale-os/kernel-core/auth';
+import type { Identity, Authentication, IdentityId, MintedCredential, RegisterResult } from '@astrale-os/kernel-core/auth';
 import type { PathLike } from '@astrale-os/kernel-core/path';
 import type { Input } from '../client/index.js';
 import type { RequestOptions } from '../transport/index.js';
 import type { PolicyDecisionInput } from './authorization.js';
 import type { DelegateOptions, MintOptions } from './credential.js';
 import type { WhoisInput } from './identity.js';
+import type { RegisterRequest } from './register.js';
 export type AuthCall = (target: PathLike, input: Input, options?: RequestOptions) => Promise<Input>;
 export interface AuthApi {
-    provision(input: ProvisionRequest, options?: RequestOptions): Promise<ProvisionResult>;
+    register(input: RegisterRequest, options?: RequestOptions): Promise<RegisterResult>;
     whoami(options?: RequestOptions): Promise<Identity & Authentication>;
     whois(input: WhoisInput, options?: RequestOptions): Promise<(Identity & Authentication) | null>;
     can(input: PolicyDecisionInput, options?: RequestOptions): Promise<boolean>;

package/dist/auth/auth.js

@@ -1,13 +1,13 @@
 import { authorizationApi } from './authorization.js';
 import { credentialApi } from './credential.js';
 import { identityApi } from './identity.js';
-import { provisionApi } from './provision.js';
+import { registerApi } from './register.js';
 /** Bind the current Core identity syscalls without recreating legacy grant-edge verbs. */
 export function createAuth(call) {
     if (typeof call !== 'function')
         throw new TypeError('Auth call capability is invalid.');
     return Object.freeze({
-        ...provisionApi(call),
+        ...registerApi(call),
         ...identityApi(call),
         ...authorizationApi(call),
         ...credentialApi(call),

package/dist/auth/index.d.ts

@@ -2,5 +2,5 @@ export { createAuth, type AuthApi, type AuthCall } from './auth.js';
 export { IDENTITY_CAN_PATH, type PolicyDecisionInput } from './authorization.js';
 export { IDENTITY_MINT_PATH, type DelegateOptions, type MintOptions } from './credential.js';
 export { IDENTITY_WHOAMI_PATH, IDENTITY_WHOIS_PATH, type WhoisInput } from './identity.js';
-export { IDENTITY_PROVISION_PATH } from './provision.js';
-export type { Identity, IdentityId, Subject, IssuerId, MintedCredential, ProvisionRequest, ProvisionResult, UnresolvedGrant, UnresolvedIdentityExpr, } from '@astrale-os/kernel-core/auth';
+export { IDENTITY_REGISTER_PATH, type RegisterIdentity, type RegisterRequest } from './register.js';
+export type { Identity, IdentityId, Subject, IssuerId, MintedCredential, RegisterResult, UnresolvedGrant, UnresolvedIdentityExpr, } from '@astrale-os/kernel-core/auth';

package/dist/auth/index.js

@@ -2,4 +2,4 @@ export { createAuth } from './auth.js';
 export { IDENTITY_CAN_PATH } from './authorization.js';
 export { IDENTITY_MINT_PATH } from './credential.js';
 export { IDENTITY_WHOAMI_PATH, IDENTITY_WHOIS_PATH } from './identity.js';
-export { IDENTITY_PROVISION_PATH } from './provision.js';
+export { IDENTITY_REGISTER_PATH } from './register.js';

package/dist/auth/register.d.ts

@@ -0,0 +1,24 @@
+import type { IdentityId, JsonWebKey, RegisterResult } from '@astrale-os/kernel-core/auth';
+import type { NodePath } from '@astrale-os/kernel-core/path';
+import type { RequestOptions } from '../transport/index.js';
+import type { AuthCall } from './auth.js';
+export declare const IDENTITY_REGISTER_PATH: NodePath;
+export type RegisterIdentity = {
+    readonly id: IdentityId;
+    readonly mode: 'external';
+    readonly credential: string;
+    readonly publicKey?: never;
+} | {
+    readonly id: IdentityId;
+    readonly mode: 'self';
+    readonly publicKey: JsonWebKey;
+    readonly credential: string;
+};
+/** JSON-safe client request; binary credential inputs remain Runtime-internal. */
+export interface RegisterRequest {
+    readonly idempotencyKey: string;
+    readonly identities: readonly [RegisterIdentity, ...RegisterIdentity[]];
+}
+export declare function registerApi(call: AuthCall): Readonly<{
+    register(input: RegisterRequest, options?: RequestOptions): Promise<RegisterResult>;
+}>;

package/dist/auth/register.js

@@ -0,0 +1,10 @@
+import { Path } from '@astrale-os/kernel-core/path';
+import { register } from '@astrale-os/kernel-core/schema/kernel/syscalls/references';
+export const IDENTITY_REGISTER_PATH = Path.project(register).raw;
+export function registerApi(call) {
+    return Object.freeze({
+        async register(input, options) {
+            return (await call(IDENTITY_REGISTER_PATH, input, options));
+        },
+    });
+}

package/dist/graph/graph.d.ts

@@ -13,6 +13,7 @@ export interface GraphQueryOptions extends RequestOptions {
     readonly expected?: readonly DomainDependency[];
     readonly page: QueryPageRequest;
 }
+/** idempotencyKey selects a durable principal-scoped Kernel receipt, not an invocation cache entry. */
 export interface GraphMutationOptions extends RequestOptions {
     readonly expected?: readonly DomainDependency[];
 }

package/dist/graph/mutation.js

@@ -7,13 +7,15 @@ const KERNEL_MUTATE_PATH = Path.project(mutate).raw;
 export async function mutateGraph(call, input, options) {
     const ast = typeof input === 'function' ? MutationAST.build(input) : admitMutation(input);
     const expected = options?.expected;
+    const idempotencyKey = options?.idempotencyKey;
     const request = options === undefined
         ? undefined
-        : (({ expected: _expected, ...rest }) => rest)(options);
+        : (({ expected: _expected, idempotencyKey: _key, ...rest }) => rest)(options);
     const capturedExpected = captureExpected(expected);
     const output = await call(invocation(KERNEL_MUTATE_PATH, Object.freeze({
         ast,
         ...(capturedExpected === undefined ? {} : { expected: capturedExpected }),
+        ...(idempotencyKey === undefined ? {} : { idempotencyKey }),
     })), request);
     return MutationResult.decode(output);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-client",
-  "version": "0.6.0-beta.51",
+  "version": "0.6.0-beta.53",
   "description": "Universal Client — protocol-first, transport-agnostic",
   "keywords": [
     "astrale",
@@ -65,14 +65,14 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-core": "0.9.0-beta.39",
+    "@astrale-os/kernel-core": "0.9.0-beta.41",
     "@astrale-os/kernel-dsl": "0.2.0-beta.30",
-    "@astrale-os/kernel-protocol": "0.5.0-beta.42",
+    "@astrale-os/kernel-protocol": "0.5.0-beta.44",
     "@tanstack/pacer": "0.20.1",
     "msgpackr": "^2.0.5"
   },
   "devDependencies": {
-    "@astrale-os/kernel-server": "0.5.0-beta.44",
+    "@astrale-os/kernel-server": "0.5.0-beta.46",
     "@astrale/typescript-config": "npm:@jsr/astrale__typescript-config@~1.1.0",
     "@types/node": "^22.0.0",
     "typescript": "7.0.2",

package/dist/auth/provision.d.ts

@@ -1,8 +0,0 @@
-import type { ProvisionRequest, ProvisionResult } from '@astrale-os/kernel-core/auth';
-import type { NodePath } from '@astrale-os/kernel-core/path';
-import type { RequestOptions } from '../transport/index.js';
-import type { AuthCall } from './auth.js';
-export declare const IDENTITY_PROVISION_PATH: NodePath;
-export declare function provisionApi(call: AuthCall): Readonly<{
-    provision(input: ProvisionRequest, options?: RequestOptions): Promise<ProvisionResult>;
-}>;

package/dist/auth/provision.js

@@ -1,10 +0,0 @@
-import { Path } from '@astrale-os/kernel-core/path';
-import { provision } from '@astrale-os/kernel-core/schema/kernel/syscalls/references';
-export const IDENTITY_PROVISION_PATH = Path.project(provision).raw;
-export function provisionApi(call) {
-    return Object.freeze({
-        async provision(input, options) {
-            return (await call(IDENTITY_PROVISION_PATH, input, options));
-        },
-    });
-}