@astrale-os/kernel-core 0.9.0-beta.39 → 0.9.0-beta.40

package/dist/schema/kernel/syscalls/declarations/index.d.ts

@@ -448,273 +448,26 @@ export declare const Functions: Readonly<{
             createdNodes: Record<string, string>;
         };
     }, "authorized", false, "default">>;
-    provision: builder.Function<builder.CallableProjection<{
+    register: builder.Function<builder.CallableProjection<{
         idempotencyKey: string;
-        mutation?: {
-            format: "astrale.graph.mutation";
-            version: "v3";
-            preconditions: ({
-                kind: "node";
-                node: string;
-                class: string;
-                props?: {
-                    equals: Record<string, unknown>;
-                    absent?: string[] | undefined;
-                } | {
-                    absent: string[];
-                } | undefined;
-            } | {
-                kind: "edge";
-                edge: {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-                slug?: unknown;
-                props?: {
-                    equals: Record<string, unknown>;
-                    absent?: string[] | undefined;
-                } | {
-                    absent: string[];
-                } | undefined;
-            } | {
-                kind: "query";
-                query: {
-                    format: "astrale.graph.query";
-                    version: "v6";
-                    source: {
-                        kind: "node";
-                        terms: ({
-                            kind: "path";
-                            path: string;
-                        } | {
-                            kind: "class";
-                            class: {
-                                origin: string;
-                                kind: "class";
-                                name: string;
-                            };
-                        })[];
-                        binding: string;
-                    } | {
-                        kind: "edge";
-                        terms: {
-                            kind: "class";
-                            class: {
-                                origin: string;
-                                kind: "class";
-                                name: string;
-                            };
-                        }[];
-                        bindings: {
-                            source: string;
-                            edge: string;
-                            target: string;
-                        };
-                    };
-                    steps: ({
-                        op: "filter";
-                        binding: string;
-                        predicate: {
-                            kind: "class.satisfies";
-                            class: {
-                                origin: string;
-                                kind: "class";
-                                name: string;
-                            };
-                        } | {
-                            kind: "class.equal";
-                            class: {
-                                origin: string;
-                                kind: "class";
-                                name: string;
-                            };
-                        } | {
-                            kind: "property.equal";
-                            property: string;
-                            value: unknown;
-                        } | {
-                            kind: "property.present";
-                            property: string;
-                        } | {
-                            kind: "identity.equal";
-                            identity: string | {
-                                source: string;
-                                target: string;
-                                class: string;
-                            };
-                        };
-                    } | {
-                        op: "expand";
-                        from: string;
-                        via: {
-                            origin: string;
-                            kind: "class";
-                            name: string;
-                        }[];
-                        direction: "incident" | "incoming" | "outgoing";
-                        bindings: {
-                            edge: string;
-                            node: string;
-                        };
-                    })[];
-                    select: {
-                        kind: "graph";
-                        binding: string;
-                        order?: {
-                            property: string;
-                            direction: "asc" | "desc";
-                            unranked: "first" | "last";
-                        } | undefined;
-                    } | {
-                        kind: "nodes";
-                        binding: string;
-                        projection: {
-                            kind: "reference" | "value";
-                        };
-                        order?: {
-                            property: string;
-                            direction: "asc" | "desc";
-                            unranked: "first" | "last";
-                        } | undefined;
-                    } | {
-                        kind: "edges";
-                        binding: string;
-                        projection: {
-                            edge: "reference" | "value";
-                            source: "reference" | "value";
-                            target: "reference" | "value";
-                        };
-                        order?: {
-                            property: string;
-                            direction: "asc" | "desc";
-                            unranked: "first" | "last";
-                        } | undefined;
-                    };
-                };
-                equals: {
-                    kind: "node";
-                    ids: string[];
-                } | {
-                    kind: "edge";
-                    keys: {
-                        source: string;
-                        target: string;
-                        class: string;
-                    }[];
-                };
-            })[];
-            operations: ({
-                op: "node.create";
-                as: string;
-                class: string;
-                props: Record<string, unknown>;
-            } | {
-                op: "node.update";
-                node: string;
-                class: string;
-                props: {
-                    set: Record<string, unknown>;
-                    unset: string[];
-                };
-            } | {
-                op: "node.delete";
-                node: string;
-                class: string;
-            } | {
-                op: "edge.create";
-                class: string;
-                source: string | {
-                    created: string;
-                };
-                target: string | {
-                    created: string;
-                };
-                slug?: unknown;
-                props: Record<string, unknown>;
-            } | {
-                op: "edge.update";
-                edge: {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-                slug: unknown;
-                props?: {
-                    set: Record<string, unknown>;
-                    unset: string[];
-                } | undefined;
-            } | {
-                op: "edge.update";
-                edge: {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-                props: {
-                    set: Record<string, unknown>;
-                    unset: string[];
-                };
-            } | {
-                op: "edge.delete";
-                edge: {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-            })[];
-        } | undefined;
         identities: ({
-            identity: {
-                created: string;
-            };
-            authentication?: {
-                iss: string;
-                sub: string;
-            } | {
-                credentials: {
-                    publicKey: unknown;
-                    proof: string;
-                };
-            } | undefined;
-            requiredClaims?: ({
-                claim: string;
-                op: "contains";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "eq";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "exists";
-            })[] | undefined;
+            id: string;
+            mode: "external";
+            credential: string;
         } | {
-            identity: {
-                id: string;
-                class: string;
-            };
-            authentication: {
-                iss: string;
-                sub: string;
-            } | {
-                credentials: {
-                    publicKey: unknown;
-                    proof: string;
-                };
-            };
+            id: string;
+            mode: "self";
+            publicKey: unknown;
+            credential: string;
         })[];
     }, {
         readonly mode: 'value';
         readonly value: {
-            createdNodes: Record<string, string>;
-            identities: ({
-                id: string;
-            } | {
+            identities: {
                 id: string;
                 iss: string;
                 sub: string;
-            })[];
+            }[];
         };
     }, "authorized", false, "default">>;
     install: builder.Function<builder.CallableProjection<{

package/dist/schema/kernel/syscalls/declarations/index.js

@@ -6,8 +6,8 @@ import { Introspect } from './introspect.js';
 import { Journal } from './journal.js';
 import { Mint } from './mint.js';
 import { Mutate } from './mutate.js';
-import { Provision } from './provision.js';
 import { Query } from './query.js';
+import { Register } from './register.js';
 import { Uninstall } from './uninstall.js';
 import { ViewResolve } from './view-resolve.js';
 import { Whoami } from './whoami.js';
@@ -15,7 +15,7 @@ import { Whois } from './whois.js';
 export const Functions = Object.freeze({
     query: Query,
     mutate: Mutate,
-    provision: Provision,
+    register: Register,
     install: Install,
     introspect: Introspect,
     uninstall: Uninstall,

package/dist/schema/kernel/syscalls/declarations/register.d.ts

@@ -0,0 +1,23 @@
+import { type builder } from '@astrale-os/kernel-dsl/v1';
+export declare const Register: builder.Function<builder.CallableProjection<{
+    idempotencyKey: string;
+    identities: ({
+        id: string;
+        mode: "external";
+        credential: string;
+    } | {
+        id: string;
+        mode: "self";
+        publicKey: unknown;
+        credential: string;
+    })[];
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        identities: {
+            id: string;
+            iss: string;
+            sub: string;
+        }[];
+    };
+}, "authorized", false, "default">>;

package/dist/schema/kernel/syscalls/declarations/register.js

@@ -0,0 +1,8 @@
+import { func } from '@astrale-os/kernel-dsl/v1';
+import { registerInput, registerOutput } from '../contracts/index.js';
+export const Register = func({
+    description: 'Atomically establish credential-evidenced, write-once Authentication on existing Identity-bearing Nodes.',
+    auth: 'authorized',
+    input: registerInput,
+    output: registerOutput,
+});

package/dist/schema/kernel/syscalls/descriptors/functions.d.ts

@@ -2,7 +2,7 @@ import { K } from '../../index.js';
 import { type FunctionSyscall } from './model.js';
 export declare const query: FunctionSyscall<'kernel.astrale.ai', 'query', typeof K.functions.query>;
 export declare const mutate: FunctionSyscall<'kernel.astrale.ai', 'mutate', typeof K.functions.mutate>;
-export declare const provision: FunctionSyscall<'kernel.astrale.ai', 'provision', typeof K.functions.provision>;
+export declare const register: FunctionSyscall<'kernel.astrale.ai', 'register', typeof K.functions.register>;
 export declare const install: FunctionSyscall<'kernel.astrale.ai', 'install', typeof K.functions.install>;
 export declare const introspect: FunctionSyscall<'kernel.astrale.ai', 'introspect', typeof K.functions.introspect>;
 export declare const uninstall: FunctionSyscall<'kernel.astrale.ai', 'uninstall', typeof K.functions.uninstall>;

package/dist/schema/kernel/syscalls/descriptors/functions.js

@@ -3,7 +3,7 @@ import * as references from '../references/functions.js';
 import { functionSyscall } from './model.js';
 export const query = functionSyscall(references.query, K.functions.query);
 export const mutate = functionSyscall(references.mutate, K.functions.mutate);
-export const provision = functionSyscall(references.provision, K.functions.provision);
+export const register = functionSyscall(references.register, K.functions.register);
 export const install = functionSyscall(references.install, K.functions.install);
 export const introspect = functionSyscall(references.introspect, K.functions.introspect);
 export const uninstall = functionSyscall(references.uninstall, K.functions.uninstall);

package/dist/schema/kernel/syscalls/descriptors/index.d.ts

@@ -1,5 +1,5 @@
 export type { FunctionSyscall, MethodSyscall, Syscall, SyscallRef } from './model.js';
-export { install, introspect, journal, mutate, provision, query, uninstall } from './functions.js';
+export { install, introspect, journal, mutate, register, query, uninstall } from './functions.js';
 export * as identity from './identity.js';
 export * as function from './function.js';
 export * as view from './view.js';

package/dist/schema/kernel/syscalls/descriptors/index.js

@@ -1,4 +1,4 @@
-export { install, introspect, journal, mutate, provision, query, uninstall } from './functions.js';
+export { install, introspect, journal, mutate, register, query, uninstall } from './functions.js';
 export * as identity from './identity.js';
 export * as function from './function.js';
 export * as view from './view.js';

package/dist/schema/kernel/syscalls/index.d.ts

@@ -1,4 +1,4 @@
 export type { FunctionSyscall, MethodSyscall, Syscall, SyscallRef } from './descriptors/index.js';
 export * as references from './references/index.js';
-export { install, introspect, journal, mutate, provision, query, uninstall, } from './descriptors/index.js';
+export { install, introspect, journal, mutate, register, query, uninstall, } from './descriptors/index.js';
 export { function, identity, view } from './descriptors/index.js';

package/dist/schema/kernel/syscalls/index.js

@@ -1,3 +1,3 @@
 export * as references from './references/index.js';
-export { install, introspect, journal, mutate, provision, query, uninstall, } from './descriptors/index.js';
+export { install, introspect, journal, mutate, register, query, uninstall, } from './descriptors/index.js';
 export { function, identity, view } from './descriptors/index.js';

package/dist/schema/kernel/syscalls/references/functions.d.ts

@@ -8,10 +8,10 @@ export declare const mutate: Readonly<{
     kind: 'function';
     name: "mutate";
 }>;
-export declare const provision: Readonly<{
+export declare const register: Readonly<{
     origin: 'kernel.astrale.ai';
     kind: 'function';
-    name: "provision";
+    name: "register";
 }>;
 export declare const install: Readonly<{
     origin: 'kernel.astrale.ai';

package/dist/schema/kernel/syscalls/references/functions.js

@@ -5,7 +5,7 @@ const functionRef = (name) => Object.freeze({
 });
 export const query = functionRef('query');
 export const mutate = functionRef('mutate');
-export const provision = functionRef('provision');
+export const register = functionRef('register');
 export const install = functionRef('install');
 export const introspect = functionRef('introspect');
 export const uninstall = functionRef('uninstall');

package/dist/schema/kernel/syscalls/references/index.d.ts

@@ -1,5 +1,5 @@
 export type { FunctionRef, SyscallRef } from './reference.js';
-export { install, introspect, journal, mutate, provision, query, uninstall } from './functions.js';
+export { install, introspect, journal, mutate, register, query, uninstall } from './functions.js';
 export * as identity from './identity.js';
 export * as function from './function.js';
 export * as view from './view.js';

package/dist/schema/kernel/syscalls/references/index.js

@@ -1,4 +1,4 @@
-export { install, introspect, journal, mutate, provision, query, uninstall } from './functions.js';
+export { install, introspect, journal, mutate, register, query, uninstall } from './functions.js';
 export * as identity from './identity.js';
 export * as function from './function.js';
 export * as view from './view.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-core",
-  "version": "0.9.0-beta.39",
+  "version": "0.9.0-beta.40",
   "description": "Astrale Kernel Core - Types, Invariants, and Pure Logic",
   "license": "Apache-2.0",
   "repository": {

package/dist/auth/provision/fingerprint/fingerprint.d.ts

@@ -1,9 +0,0 @@
-import type { ProvisionRequest } from '../index.js';
-declare const PROVISION_FINGERPRINT: unique symbol;
-/** Digest of the semantic request. Self-proof bytes are deliberately excluded. */
-export type ProvisionFingerprint = `sha256:${string}` & {
-    readonly [PROVISION_FINGERPRINT]: true;
-};
-/** Compute a deterministic semantic request digest without retaining bearer proof bytes. */
-export declare function fingerprint(request: ProvisionRequest): Promise<ProvisionFingerprint>;
-export {};

package/dist/auth/provision/fingerprint/fingerprint.js

@@ -1,30 +0,0 @@
-import * as portable from '@astrale-os/kernel-dsl/value';
-import { MutationAST } from '../../../graph/mutate/index.js';
-/** Compute a deterministic semantic request digest without retaining bearer proof bytes. */
-export async function fingerprint(request) {
-    const encoded = portable.json.encode(portable.accept(basis(request)));
-    const digest = await crypto.subtle.digest('SHA-256', Uint8Array.from(encoded).buffer);
-    return `sha256:${hex(new Uint8Array(digest))}`;
-}
-function basis(request) {
-    return {
-        version: 1,
-        idempotencyKey: request.idempotencyKey,
-        mutation: request.mutation === undefined ? null : MutationAST.encode(request.mutation),
-        identities: request.identities.map((identity) => ({
-            identity: identity.identity,
-            ...(identity.authentication === undefined
-                ? {}
-                : { authentication: fingerprintAuthentication(identity.authentication) }),
-            ...('requiredClaims' in identity ? { requiredClaims: identity.requiredClaims ?? [] } : {}),
-        })),
-    };
-}
-function fingerprintAuthentication(input) {
-    return 'credentials' in input
-        ? { credentials: { publicKey: input.credentials.publicKey } }
-        : input;
-}
-function hex(input) {
-    return [...input].map((value) => value.toString(16).padStart(2, '0')).join('');
-}

package/dist/auth/provision/fingerprint/index.d.ts

@@ -1,2 +0,0 @@
-export { fingerprint } from './fingerprint.js';
-export type { ProvisionFingerprint } from './fingerprint.js';

package/dist/auth/provision/index.d.ts

@@ -1,5 +0,0 @@
-export { fingerprint } from './fingerprint/index.js';
-export type { ProvisionFingerprint } from './fingerprint/index.js';
-export { accept, isSelfIssuer, selfIssuer } from './request/index.js';
-export type { AuthenticationProvision, IdentityProvision, ProvisionRequest, RequiredClaims, } from './request/index.js';
-export type { ProvisionedIdentity, ProvisionResult } from './result/index.js';

package/dist/auth/provision/request/admission.d.ts

@@ -1,3 +0,0 @@
-import type { ProvisionRequest } from './request.js';
-/** Admit unknown input into the exact immutable Provision request language. */
-export declare function accept(input: unknown): ProvisionRequest;