@astrale-os/kernel-core 0.9.0-beta.47 → 0.9.0-beta.49

package/dist/auth/authority/canonical.d.ts

@@ -0,0 +1,2 @@
+/** Canonical form, not an authorization decision. Crossing values still require admission. */
+export declare function isCanonical(input: unknown): boolean;

package/dist/auth/authority/canonical.js

@@ -0,0 +1,15 @@
+import * as portable from '@astrale-os/kernel-dsl/value';
+import { accept } from './accept.js';
+import { ownsCanonical } from './ownership.optimization.js';
+/** Canonical form, not an authorization decision. Crossing values still require admission. */
+export function isCanonical(input) {
+    if (ownsCanonical(input))
+        return true;
+    try {
+        const canonical = accept(input);
+        return portable.json.serialize(canonical) === portable.json.serialize(input);
+    }
+    catch {
+        return false;
+    }
+}

package/dist/auth/authority/index.d.ts

@@ -1,4 +1,5 @@
 export { accept } from './accept.js';
+export { isCanonical } from './canonical.js';
 export { limits } from './admission/index.js';
 export { canonicalize } from './normalization/index.js';
 export { AUTHORITY_PREDICATE_VERSION } from './language/index.js';

package/dist/auth/authority/index.js

@@ -1,4 +1,5 @@
 export { accept } from './accept.js';
+export { isCanonical } from './canonical.js';
 export { limits } from './admission/index.js';
 export { canonicalize } from './normalization/index.js';
 export { AUTHORITY_PREDICATE_VERSION } from './language/index.js';

package/dist/auth/authority/normalization/normalize.js

@@ -4,16 +4,17 @@ import { AuthValueError } from '../../error.js';
 import { canonicalize as canonicalizeGrant } from '../../grant/index.js';
 import { admitAuthorityExpr, limits } from '../admission/index.js';
 import { AUTHORITY_PREDICATE_VERSION } from '../language/index.js';
+import { ownCanonical } from '../ownership.optimization.js';
 /** Validate and canonicalize one authority expression into its versioned crossing envelope. */
 export function canonicalize(expr) {
     const admitted = admitAuthorityExpr(portable.accept(expr));
     return canonicalizeAdmitted(admitted);
 }
 export function canonicalizeAdmitted(expr) {
-    return Object.freeze({
+    return ownCanonical(Object.freeze({
         version: AUTHORITY_PREDICATE_VERSION,
         predicate: normalize(expr, '/predicate', new Set(), false),
-    });
+    }));
 }
 function normalize(expr, path, locals, subjectBound) {
     switch (expr.op) {

package/dist/auth/authority/ownership.optimization.d.ts

@@ -0,0 +1,4 @@
+import type { AuthorityPredicate } from './language/index.js';
+/** Called only by the owner after detachment, admission and immutable normalization. */
+export declare function ownCanonical(predicate: AuthorityPredicate): AuthorityPredicate;
+export declare function ownsCanonical(input: unknown): boolean;

package/dist/auth/authority/ownership.optimization.js

@@ -0,0 +1,10 @@
+// Static construction provenance only. No evaluated authority or graph facts live here.
+const canonical = new WeakSet();
+/** Called only by the owner after detachment, admission and immutable normalization. */
+export function ownCanonical(predicate) {
+    canonical.add(predicate);
+    return predicate;
+}
+export function ownsCanonical(input) {
+    return input !== null && typeof input === 'object' && canonical.has(input);
+}

package/dist/schema/kernel/schema.d.ts

@@ -5503,6 +5503,32 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
 }, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.impersonate"> & {
     readonly name: "impersonate";
     readonly executable: true;
+}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
+    iss: string;
+    sub: string;
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        id: string;
+        iss: string;
+        sub: string;
+        frozen: boolean;
+        requiredClaims: ({
+            claim: string;
+            op: "contains";
+            value: unknown;
+        } | {
+            claim: string;
+            op: "eq";
+            value: unknown;
+        } | {
+            claim: string;
+            op: "exists";
+        })[];
+    } | null;
+}, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.whois"> & {
+    readonly name: "whois";
+    readonly executable: true;
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
     target: string;
 }, {
@@ -5545,32 +5571,6 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
 }, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.View.method.resolve"> & {
     readonly name: "resolve";
     readonly executable: true;
-}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
-    iss: string;
-    sub: string;
-}, {
-    readonly mode: 'value';
-    readonly value: {
-        id: string;
-        iss: string;
-        sub: string;
-        frozen: boolean;
-        requiredClaims: ({
-            claim: string;
-            op: "contains";
-            value: unknown;
-        } | {
-            claim: string;
-            op: "eq";
-            value: unknown;
-        } | {
-            claim: string;
-            op: "exists";
-        })[];
-    } | null;
-}, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.whois"> & {
-    readonly name: "whois";
-    readonly executable: true;
 }))[];
 export { AuthorityOperationOrder, AuthorityOperations, operationOf } from '../authority/index.js';
 export type { AuthorityOperation, AuthorityRelation } from '../authority/index.js';

package/dist/schema/kernel/syscalls/declarations/index.d.ts

@@ -379,6 +379,29 @@ export declare const Functions: Readonly<{
                 };
             })[];
             operations: ({
+                op: "edge.update";
+                edge: {
+                    source: string;
+                    target: string;
+                    class: string;
+                };
+                slug: unknown;
+                props?: {
+                    set: Record<string, unknown>;
+                    unset: string[];
+                } | undefined;
+            } | {
+                op: "edge.update";
+                edge: {
+                    source: string;
+                    target: string;
+                    class: string;
+                };
+                props: {
+                    set: Record<string, unknown>;
+                    unset: string[];
+                };
+            } | {
                 op: "node.create";
                 as: string;
                 class: string;
@@ -406,29 +429,6 @@ export declare const Functions: Readonly<{
                 };
                 slug?: unknown;
                 props: Record<string, unknown>;
-            } | {
-                op: "edge.update";
-                edge: {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-                slug: unknown;
-                props?: {
-                    set: Record<string, unknown>;
-                    unset: string[];
-                } | undefined;
-            } | {
-                op: "edge.update";
-                edge: {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-                props: {
-                    set: Record<string, unknown>;
-                    unset: string[];
-                };
             } | {
                 op: "edge.delete";
                 edge: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-core",
-  "version": "0.9.0-beta.47",
+  "version": "0.9.0-beta.49",
   "description": "Astrale Kernel Core - Types, Invariants, and Pure Logic",
   "license": "Apache-2.0",
   "repository": {
@@ -160,7 +160,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-dsl": "0.2.0-beta.33",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.34",
     "@noble/hashes": "2.3.0",
     "@types/json-schema": "^7.0.15",
     "dequal": "2.0.3"