@astrale-os/kernel-core 0.9.0-beta.44 → 0.9.0-beta.46

package/dist/schema/kernel/schema.js

@@ -76,6 +76,7 @@ export const KernelRootFunctions = Object.freeze([
     K.functions.uninstall,
     K.functions.journal,
     K.classes.Identity.static.methods.whois,
+    K.classes.Identity.static.methods.impersonate,
     K.classes.View.static.methods.resolve,
 ].sort((left, right) => (left.key < right.key ? -1 : left.key > right.key ? 1 : 0)));
 export { AuthorityOperationOrder, AuthorityOperations, operationOf } from '../authority/index.js';

package/dist/schema/kernel/syscalls/contracts/impersonate.d.ts

@@ -0,0 +1,7 @@
+export declare const impersonateInput: import("zod").ZodObject<{
+    audience: import("zod").ZodOptional<import("zod").ZodString>;
+    ttlSeconds: import("zod").ZodNumber;
+    grant: import("zod").ZodOptional<import("zod").ZodUnknown>;
+    identity: import("zod").ZodString;
+}, import("zod/v4/core").$strict>;
+export declare const impersonateOutput: import("zod").ZodString;

package/dist/schema/kernel/syscalls/contracts/impersonate.js

@@ -0,0 +1,4 @@
+import { string } from 'zod';
+import { mintInput, mintOutput } from './mint.js';
+export const impersonateInput = mintInput.extend({ identity: string().min(1) });
+export const impersonateOutput = mintOutput;

package/dist/schema/kernel/syscalls/contracts/index.d.ts

@@ -4,6 +4,7 @@ export { delegateInput, delegateOutput } from './delegate.js';
 export { installInput, installReceipt, type DomainRequest, type InstallInput, type InstallReceipt, } from './install.js';
 export { introspectInput } from './introspect.js';
 export { journalInput, journalOutput } from './journal.js';
+export { impersonateInput, impersonateOutput } from './impersonate.js';
 export { mintInput, mintOutput } from './mint.js';
 export { mutateInput, mutateOutput } from './mutate.js';
 export { registerInput, registerOutput } from './register.js';

package/dist/schema/kernel/syscalls/contracts/index.js

@@ -4,6 +4,7 @@ export { delegateInput, delegateOutput } from './delegate.js';
 export { installInput, installReceipt, } from './install.js';
 export { introspectInput } from './introspect.js';
 export { journalInput, journalOutput } from './journal.js';
+export { impersonateInput, impersonateOutput } from './impersonate.js';
 export { mintInput, mintOutput } from './mint.js';
 export { mutateInput, mutateOutput } from './mutate.js';
 export { registerInput, registerOutput } from './register.js';

package/dist/schema/kernel/syscalls/declarations/impersonate.d.ts

@@ -0,0 +1,10 @@
+import { type builder } from '@astrale-os/kernel-dsl/v1';
+export declare const Impersonate: builder.Method<builder.CallableProjection<{
+    audience?: string | undefined;
+    ttlSeconds: number;
+    grant?: unknown;
+    identity: string;
+}, {
+    readonly mode: 'value';
+    readonly value: string;
+}, "authorized", true, false>>;

package/dist/schema/kernel/syscalls/declarations/impersonate.js

@@ -0,0 +1,12 @@
+import { method } from '@astrale-os/kernel-dsl/v1';
+import { impersonateInput, impersonateOutput } from '../contracts/index.js';
+import { usePolicy } from './use-policy.js';
+export const Impersonate = method({
+    description: 'Issue a Kernel credential bounded by the active target Identity authority.',
+    auth: 'authorized',
+    policy: usePolicy(() => Impersonate),
+    input: impersonateInput,
+    output: impersonateOutput,
+    static: true,
+    abstract: false,
+});

package/dist/schema/kernel/syscalls/declarations/index.d.ts

@@ -379,29 +379,6 @@ export declare const Functions: Readonly<{
                 };
             })[];
             operations: ({
-                op: "edge.update";
-                edge: {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-                slug: unknown;
-                props?: {
-                    set: Record<string, unknown>;
-                    unset: string[];
-                } | undefined;
-            } | {
-                op: "edge.update";
-                edge: {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-                props: {
-                    set: Record<string, unknown>;
-                    unset: string[];
-                };
-            } | {
                 op: "node.create";
                 as: string;
                 class: string;
@@ -429,6 +406,29 @@ export declare const Functions: Readonly<{
                 };
                 slug?: unknown;
                 props: Record<string, unknown>;
+            } | {
+                op: "edge.update";
+                edge: {
+                    source: string;
+                    target: string;
+                    class: string;
+                };
+                slug: unknown;
+                props?: {
+                    set: Record<string, unknown>;
+                    unset: string[];
+                } | undefined;
+            } | {
+                op: "edge.update";
+                edge: {
+                    source: string;
+                    target: string;
+                    class: string;
+                };
+                props: {
+                    set: Record<string, unknown>;
+                    unset: string[];
+                };
             } | {
                 op: "edge.delete";
                 edge: {
@@ -639,6 +639,15 @@ export declare const IdentityMethods: Readonly<{
         readonly mode: 'value';
         readonly value: string;
     }, "authenticated", true, false>>;
+    impersonate: builder.Method<builder.CallableProjection<{
+        audience?: string | undefined;
+        ttlSeconds: number;
+        grant?: unknown;
+        identity: string;
+    }, {
+        readonly mode: 'value';
+        readonly value: string;
+    }, "authorized", true, false>>;
 }>;
 export declare const FunctionMethods: Readonly<{
     admit: builder.Method<builder.CallableProjection<{

package/dist/schema/kernel/syscalls/declarations/index.js

@@ -1,6 +1,7 @@
 import { Admit } from './admit.js';
 import { Can } from './can.js';
 import { Delegate } from './delegate.js';
+import { Impersonate } from './impersonate.js';
 import { Install } from './install.js';
 import { Introspect } from './introspect.js';
 import { Journal } from './journal.js';
@@ -27,6 +28,7 @@ export const IdentityMethods = Object.freeze({
     whoami: Whoami,
     whois: Whois,
     mint: Mint,
+    impersonate: Impersonate,
 });
 export const FunctionMethods = Object.freeze({
     admit: Admit,

package/dist/schema/kernel/syscalls/descriptors/function.d.ts

@@ -18,6 +18,7 @@ declare const Admit: import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
     };
 }, true, false, "authenticated", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Function.method.admit"> & {
     readonly name: "admit";
+    readonly executable: true;
 };
 export declare const admit: MethodSyscall<ClassRef<'Function'> & {
     readonly origin: 'kernel.astrale.ai';

package/dist/schema/kernel/syscalls/descriptors/identity.d.ts

@@ -12,6 +12,7 @@ export declare const delegate: import("./model.js").MethodSyscall<Readonly<{
     readonly value: string;
 }, true, false, "authenticated", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.delegate"> & {
     readonly name: "delegate";
+    readonly executable: true;
 }>;
 export declare const can: import("./model.js").MethodSyscall<Readonly<{
     origin: 'kernel.astrale.ai';
@@ -27,6 +28,7 @@ export declare const can: import("./model.js").MethodSyscall<Readonly<{
     };
 }, true, false, "authenticated", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.can"> & {
     readonly name: "can";
+    readonly executable: true;
 }>;
 export declare const whoami: import("./model.js").MethodSyscall<Readonly<{
     origin: 'kernel.astrale.ai';
@@ -54,6 +56,7 @@ export declare const whoami: import("./model.js").MethodSyscall<Readonly<{
     };
 }, true, false, "authenticated", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.whoami"> & {
     readonly name: "whoami";
+    readonly executable: true;
 }>;
 export declare const whois: import("./model.js").MethodSyscall<Readonly<{
     origin: 'kernel.astrale.ai';
@@ -84,6 +87,23 @@ export declare const whois: import("./model.js").MethodSyscall<Readonly<{
     } | null;
 }, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.whois"> & {
     readonly name: "whois";
+    readonly executable: true;
+}>;
+export declare const impersonate: import("./model.js").MethodSyscall<Readonly<{
+    origin: 'kernel.astrale.ai';
+    kind: 'class';
+    name: 'Identity';
+}>, "impersonate", import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
+    audience?: string | undefined;
+    ttlSeconds: number;
+    grant?: unknown;
+    identity: string;
+}, {
+    readonly mode: 'value';
+    readonly value: string;
+}, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.impersonate"> & {
+    readonly name: "impersonate";
+    readonly executable: true;
 }>;
 export declare const mint: import("./model.js").MethodSyscall<Readonly<{
     origin: 'kernel.astrale.ai';
@@ -98,4 +118,5 @@ export declare const mint: import("./model.js").MethodSyscall<Readonly<{
     readonly value: string;
 }, true, false, "authenticated", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.mint"> & {
     readonly name: "mint";
+    readonly executable: true;
 }>;

package/dist/schema/kernel/syscalls/descriptors/identity.js

@@ -5,4 +5,5 @@ export const delegate = methodSyscall(references.delegate, K.classes.Identity.st
 export const can = methodSyscall(references.can, K.classes.Identity.static.methods.can);
 export const whoami = methodSyscall(references.whoami, K.classes.Identity.static.methods.whoami);
 export const whois = methodSyscall(references.whois, K.classes.Identity.static.methods.whois);
+export const impersonate = methodSyscall(references.impersonate, K.classes.Identity.static.methods.impersonate);
 export const mint = methodSyscall(references.mint, K.classes.Identity.static.methods.mint);

package/dist/schema/kernel/syscalls/descriptors/view.d.ts

@@ -37,6 +37,7 @@ export declare const resolve: import("./model.js").MethodSyscall<Readonly<{
     };
 }, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.View.method.resolve"> & {
     readonly name: "resolve";
+    readonly executable: true;
 }>;
 export type { ResolvedView, ViewResolution as Resolution };
 export declare const acceptResolution: typeof acceptViewResolution;

package/dist/schema/kernel/syscalls/references/identity.d.ts

@@ -43,3 +43,12 @@ export declare const mint: Readonly<{
     }>;
     name: "mint";
 }>;
+export declare const impersonate: Readonly<{
+    kind: 'method';
+    owner: Readonly<{
+        origin: 'kernel.astrale.ai';
+        kind: 'class';
+        name: 'Identity';
+    }>;
+    name: "impersonate";
+}>;

package/dist/schema/kernel/syscalls/references/identity.js

@@ -9,3 +9,4 @@ export const can = methodRef('can');
 export const whoami = methodRef('whoami');
 export const whois = methodRef('whois');
 export const mint = methodRef('mint');
+export const impersonate = methodRef('impersonate');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-core",
-  "version": "0.9.0-beta.44",
+  "version": "0.9.0-beta.46",
   "description": "Astrale Kernel Core - Types, Invariants, and Pure Logic",
   "license": "Apache-2.0",
   "repository": {
@@ -160,7 +160,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-dsl": "0.2.0-beta.32",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.33",
     "@noble/hashes": "2.3.0",
     "@types/json-schema": "^7.0.15",
     "dequal": "2.0.3"