@astrale-os/kernel-core 0.9.0-beta.50 → 0.9.0-beta.52

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (19) hide show
  1. package/dist/graph/graph/model/codec.js +1 -1
  2. package/dist/graph/query/result/index.js +1 -1
  3. package/dist/schema/domain/domain.d.ts +424 -154
  4. package/dist/schema/identity/identity.d.ts +27 -9
  5. package/dist/schema/kernel/projection/index.d.ts +2 -2
  6. package/dist/schema/kernel/projection/index.js +1 -1
  7. package/dist/schema/kernel/projection/project.d.ts +3 -1
  8. package/dist/schema/kernel/projection/project.js +53 -32
  9. package/dist/schema/kernel/projection/types.d.ts +27 -1
  10. package/dist/schema/kernel/schema.d.ts +431 -143
  11. package/dist/schema/kernel/syscalls/contracts/can.d.ts +16 -4
  12. package/dist/schema/kernel/syscalls/contracts/can.js +11 -3
  13. package/dist/schema/kernel/syscalls/contracts/index.d.ts +1 -1
  14. package/dist/schema/kernel/syscalls/contracts/index.js +1 -1
  15. package/dist/schema/kernel/syscalls/declarations/can.d.ts +9 -0
  16. package/dist/schema/kernel/syscalls/declarations/can.js +1 -1
  17. package/dist/schema/kernel/syscalls/declarations/index.d.ts +9 -0
  18. package/dist/schema/kernel/syscalls/descriptors/identity.d.ts +9 -0
  19. package/package.json +2 -2
package/dist/schema/kernel/schema.d.ts CHANGED
@@ -105,10 +105,19 @@ declare const KernelDefinitions: {
105
105
  can: builder.Method<builder.CallableProjection<{
106
106
  policy: string;
107
107
  object: string;
108
+ } | {
109
+ checks: {
110
+ policy: string;
111
+ object: string;
112
+ }[];
108
113
  }, {
109
114
  readonly mode: 'value';
110
115
  readonly value: {
111
116
  allowed: boolean;
117
+ } | {
118
+ decisions: {
119
+ allowed: boolean;
120
+ }[];
112
121
  };
113
122
  }, "authenticated", true, false>>;
114
123
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -252,14 +261,6 @@ declare const KernelDefinitions: {
252
261
  readonly mode: 'value';
253
262
  readonly value: string;
254
263
  }, "authenticated", true, false>>, "delegate", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
255
- policy: string;
256
- object: string;
257
- }, {
258
- readonly mode: 'value';
259
- readonly value: {
260
- allowed: boolean;
261
- };
262
- }, "authenticated", true, false>>, "can", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
263
264
  audience?: string | undefined;
264
265
  ttlSeconds: number;
265
266
  grant?: unknown;
@@ -274,7 +275,24 @@ declare const KernelDefinitions: {
274
275
  }, {
275
276
  readonly mode: 'value';
276
277
  readonly value: string;
277
- }, "authorized", true, false>>, "impersonate", "self">;
278
+ }, "authorized", true, false>>, "impersonate", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
279
+ policy: string;
280
+ object: string;
281
+ } | {
282
+ checks: {
283
+ policy: string;
284
+ object: string;
285
+ }[];
286
+ }, {
287
+ readonly mode: 'value';
288
+ readonly value: {
289
+ allowed: boolean;
290
+ } | {
291
+ decisions: {
292
+ allowed: boolean;
293
+ }[];
294
+ };
295
+ }, "authenticated", true, false>>, "can", "self">;
278
296
  }>;
279
297
  readonly Named: builder.NodeClass<{
280
298
  readonly depth: 1;
@@ -471,10 +489,19 @@ declare const KernelDefinitions: {
471
489
  can: builder.Method<builder.CallableProjection<{
472
490
  policy: string;
473
491
  object: string;
492
+ } | {
493
+ checks: {
494
+ policy: string;
495
+ object: string;
496
+ }[];
474
497
  }, {
475
498
  readonly mode: 'value';
476
499
  readonly value: {
477
500
  allowed: boolean;
501
+ } | {
502
+ decisions: {
503
+ allowed: boolean;
504
+ }[];
478
505
  };
479
506
  }, "authenticated", true, false>>;
480
507
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -606,10 +633,19 @@ declare const KernelDefinitions: {
606
633
  can: builder.Method<builder.CallableProjection<{
607
634
  policy: string;
608
635
  object: string;
636
+ } | {
637
+ checks: {
638
+ policy: string;
639
+ object: string;
640
+ }[];
609
641
  }, {
610
642
  readonly mode: 'value';
611
643
  readonly value: {
612
644
  allowed: boolean;
645
+ } | {
646
+ decisions: {
647
+ allowed: boolean;
648
+ }[];
613
649
  };
614
650
  }, "authenticated", true, false>>;
615
651
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -749,14 +785,6 @@ declare const KernelDefinitions: {
749
785
  readonly mode: 'value';
750
786
  readonly value: string;
751
787
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
752
- policy: string;
753
- object: string;
754
- }, {
755
- readonly mode: 'value';
756
- readonly value: {
757
- allowed: boolean;
758
- };
759
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
760
788
  audience?: string | undefined;
761
789
  ttlSeconds: number;
762
790
  grant?: unknown;
@@ -771,7 +799,24 @@ declare const KernelDefinitions: {
771
799
  }, {
772
800
  readonly mode: 'value';
773
801
  readonly value: string;
774
- }, "authorized", true, false>>, "impersonate", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "frozen", builder.ClassOwnerProjection<"node", {
802
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
803
+ policy: string;
804
+ object: string;
805
+ } | {
806
+ checks: {
807
+ policy: string;
808
+ object: string;
809
+ }[];
810
+ }, {
811
+ readonly mode: 'value';
812
+ readonly value: {
813
+ allowed: boolean;
814
+ } | {
815
+ decisions: {
816
+ allowed: boolean;
817
+ }[];
818
+ };
819
+ }, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "frozen", builder.ClassOwnerProjection<"node", {
775
820
  readonly abstract: true;
776
821
  readonly depth: 1;
777
822
  readonly properties: {
@@ -815,10 +860,19 @@ declare const KernelDefinitions: {
815
860
  can: builder.Method<builder.CallableProjection<{
816
861
  policy: string;
817
862
  object: string;
863
+ } | {
864
+ checks: {
865
+ policy: string;
866
+ object: string;
867
+ }[];
818
868
  }, {
819
869
  readonly mode: 'value';
820
870
  readonly value: {
821
871
  allowed: boolean;
872
+ } | {
873
+ decisions: {
874
+ allowed: boolean;
875
+ }[];
822
876
  };
823
877
  }, "authenticated", true, false>>;
824
878
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -958,14 +1012,6 @@ declare const KernelDefinitions: {
958
1012
  readonly mode: 'value';
959
1013
  readonly value: string;
960
1014
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
961
- policy: string;
962
- object: string;
963
- }, {
964
- readonly mode: 'value';
965
- readonly value: {
966
- allowed: boolean;
967
- };
968
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
969
1015
  audience?: string | undefined;
970
1016
  ttlSeconds: number;
971
1017
  grant?: unknown;
@@ -980,7 +1026,24 @@ declare const KernelDefinitions: {
980
1026
  }, {
981
1027
  readonly mode: 'value';
982
1028
  readonly value: string;
983
- }, "authorized", true, false>>, "impersonate", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "iss", builder.ClassOwnerProjection<"node", {
1029
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1030
+ policy: string;
1031
+ object: string;
1032
+ } | {
1033
+ checks: {
1034
+ policy: string;
1035
+ object: string;
1036
+ }[];
1037
+ }, {
1038
+ readonly mode: 'value';
1039
+ readonly value: {
1040
+ allowed: boolean;
1041
+ } | {
1042
+ decisions: {
1043
+ allowed: boolean;
1044
+ }[];
1045
+ };
1046
+ }, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "iss", builder.ClassOwnerProjection<"node", {
984
1047
  readonly abstract: true;
985
1048
  readonly depth: 1;
986
1049
  readonly properties: {
@@ -1024,10 +1087,19 @@ declare const KernelDefinitions: {
1024
1087
  can: builder.Method<builder.CallableProjection<{
1025
1088
  policy: string;
1026
1089
  object: string;
1090
+ } | {
1091
+ checks: {
1092
+ policy: string;
1093
+ object: string;
1094
+ }[];
1027
1095
  }, {
1028
1096
  readonly mode: 'value';
1029
1097
  readonly value: {
1030
1098
  allowed: boolean;
1099
+ } | {
1100
+ decisions: {
1101
+ allowed: boolean;
1102
+ }[];
1031
1103
  };
1032
1104
  }, "authenticated", true, false>>;
1033
1105
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -1167,14 +1239,6 @@ declare const KernelDefinitions: {
1167
1239
  readonly mode: 'value';
1168
1240
  readonly value: string;
1169
1241
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1170
- policy: string;
1171
- object: string;
1172
- }, {
1173
- readonly mode: 'value';
1174
- readonly value: {
1175
- allowed: boolean;
1176
- };
1177
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1178
1242
  audience?: string | undefined;
1179
1243
  ttlSeconds: number;
1180
1244
  grant?: unknown;
@@ -1189,7 +1253,24 @@ declare const KernelDefinitions: {
1189
1253
  }, {
1190
1254
  readonly mode: 'value';
1191
1255
  readonly value: string;
1192
- }, "authorized", true, false>>, "impersonate", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "sub", builder.ClassOwnerProjection<"node", {
1256
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1257
+ policy: string;
1258
+ object: string;
1259
+ } | {
1260
+ checks: {
1261
+ policy: string;
1262
+ object: string;
1263
+ }[];
1264
+ }, {
1265
+ readonly mode: 'value';
1266
+ readonly value: {
1267
+ allowed: boolean;
1268
+ } | {
1269
+ decisions: {
1270
+ allowed: boolean;
1271
+ }[];
1272
+ };
1273
+ }, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "sub", builder.ClassOwnerProjection<"node", {
1193
1274
  readonly abstract: true;
1194
1275
  readonly depth: 1;
1195
1276
  readonly properties: {
@@ -1233,10 +1314,19 @@ declare const KernelDefinitions: {
1233
1314
  can: builder.Method<builder.CallableProjection<{
1234
1315
  policy: string;
1235
1316
  object: string;
1317
+ } | {
1318
+ checks: {
1319
+ policy: string;
1320
+ object: string;
1321
+ }[];
1236
1322
  }, {
1237
1323
  readonly mode: 'value';
1238
1324
  readonly value: {
1239
1325
  allowed: boolean;
1326
+ } | {
1327
+ decisions: {
1328
+ allowed: boolean;
1329
+ }[];
1240
1330
  };
1241
1331
  }, "authenticated", true, false>>;
1242
1332
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -1376,14 +1466,6 @@ declare const KernelDefinitions: {
1376
1466
  readonly mode: 'value';
1377
1467
  readonly value: string;
1378
1468
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1379
- policy: string;
1380
- object: string;
1381
- }, {
1382
- readonly mode: 'value';
1383
- readonly value: {
1384
- allowed: boolean;
1385
- };
1386
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1387
1469
  audience?: string | undefined;
1388
1470
  ttlSeconds: number;
1389
1471
  grant?: unknown;
@@ -1398,7 +1480,24 @@ declare const KernelDefinitions: {
1398
1480
  }, {
1399
1481
  readonly mode: 'value';
1400
1482
  readonly value: string;
1401
- }, "authorized", true, false>>, "impersonate", unknown>>, never>, never, builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<Record<string, never>, {
1483
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1484
+ policy: string;
1485
+ object: string;
1486
+ } | {
1487
+ checks: {
1488
+ policy: string;
1489
+ object: string;
1490
+ }[];
1491
+ }, {
1492
+ readonly mode: 'value';
1493
+ readonly value: {
1494
+ allowed: boolean;
1495
+ } | {
1496
+ decisions: {
1497
+ allowed: boolean;
1498
+ }[];
1499
+ };
1500
+ }, "authenticated", true, false>>, "can", unknown>>, never>, never, builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<Record<string, never>, {
1402
1501
  readonly mode: 'value';
1403
1502
  readonly value: {
1404
1503
  id: string;
@@ -1462,10 +1561,19 @@ declare const KernelDefinitions: {
1462
1561
  can: builder.Method<builder.CallableProjection<{
1463
1562
  policy: string;
1464
1563
  object: string;
1564
+ } | {
1565
+ checks: {
1566
+ policy: string;
1567
+ object: string;
1568
+ }[];
1465
1569
  }, {
1466
1570
  readonly mode: 'value';
1467
1571
  readonly value: {
1468
1572
  allowed: boolean;
1573
+ } | {
1574
+ decisions: {
1575
+ allowed: boolean;
1576
+ }[];
1469
1577
  };
1470
1578
  }, "authenticated", true, false>>;
1471
1579
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -1605,14 +1713,6 @@ declare const KernelDefinitions: {
1605
1713
  readonly mode: 'value';
1606
1714
  readonly value: string;
1607
1715
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1608
- policy: string;
1609
- object: string;
1610
- }, {
1611
- readonly mode: 'value';
1612
- readonly value: {
1613
- allowed: boolean;
1614
- };
1615
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1616
1716
  audience?: string | undefined;
1617
1717
  ttlSeconds: number;
1618
1718
  grant?: unknown;
@@ -1627,7 +1727,24 @@ declare const KernelDefinitions: {
1627
1727
  }, {
1628
1728
  readonly mode: 'value';
1629
1729
  readonly value: string;
1630
- }, "authorized", true, false>>, "impersonate", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1730
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1731
+ policy: string;
1732
+ object: string;
1733
+ } | {
1734
+ checks: {
1735
+ policy: string;
1736
+ object: string;
1737
+ }[];
1738
+ }, {
1739
+ readonly mode: 'value';
1740
+ readonly value: {
1741
+ allowed: boolean;
1742
+ } | {
1743
+ decisions: {
1744
+ allowed: boolean;
1745
+ }[];
1746
+ };
1747
+ }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1631
1748
  iss: string;
1632
1749
  sub: string;
1633
1750
  }, {
@@ -1694,10 +1811,19 @@ declare const KernelDefinitions: {
1694
1811
  can: builder.Method<builder.CallableProjection<{
1695
1812
  policy: string;
1696
1813
  object: string;
1814
+ } | {
1815
+ checks: {
1816
+ policy: string;
1817
+ object: string;
1818
+ }[];
1697
1819
  }, {
1698
1820
  readonly mode: 'value';
1699
1821
  readonly value: {
1700
1822
  allowed: boolean;
1823
+ } | {
1824
+ decisions: {
1825
+ allowed: boolean;
1826
+ }[];
1701
1827
  };
1702
1828
  }, "authenticated", true, false>>;
1703
1829
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -1837,14 +1963,6 @@ declare const KernelDefinitions: {
1837
1963
  readonly mode: 'value';
1838
1964
  readonly value: string;
1839
1965
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1840
- policy: string;
1841
- object: string;
1842
- }, {
1843
- readonly mode: 'value';
1844
- readonly value: {
1845
- allowed: boolean;
1846
- };
1847
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1848
1966
  audience?: string | undefined;
1849
1967
  ttlSeconds: number;
1850
1968
  grant?: unknown;
@@ -1859,7 +1977,24 @@ declare const KernelDefinitions: {
1859
1977
  }, {
1860
1978
  readonly mode: 'value';
1861
1979
  readonly value: string;
1862
- }, "authorized", true, false>>, "impersonate", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1980
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1981
+ policy: string;
1982
+ object: string;
1983
+ } | {
1984
+ checks: {
1985
+ policy: string;
1986
+ object: string;
1987
+ }[];
1988
+ }, {
1989
+ readonly mode: 'value';
1990
+ readonly value: {
1991
+ allowed: boolean;
1992
+ } | {
1993
+ decisions: {
1994
+ allowed: boolean;
1995
+ }[];
1996
+ };
1997
+ }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
1863
1998
  principal: string;
1864
1999
  audience: string;
1865
2000
  ttlSeconds: number;
@@ -1911,10 +2046,19 @@ declare const KernelDefinitions: {
1911
2046
  can: builder.Method<builder.CallableProjection<{
1912
2047
  policy: string;
1913
2048
  object: string;
2049
+ } | {
2050
+ checks: {
2051
+ policy: string;
2052
+ object: string;
2053
+ }[];
1914
2054
  }, {
1915
2055
  readonly mode: 'value';
1916
2056
  readonly value: {
1917
2057
  allowed: boolean;
2058
+ } | {
2059
+ decisions: {
2060
+ allowed: boolean;
2061
+ }[];
1918
2062
  };
1919
2063
  }, "authenticated", true, false>>;
1920
2064
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -2054,14 +2198,6 @@ declare const KernelDefinitions: {
2054
2198
  readonly mode: 'value';
2055
2199
  readonly value: string;
2056
2200
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2057
- policy: string;
2058
- object: string;
2059
- }, {
2060
- readonly mode: 'value';
2061
- readonly value: {
2062
- allowed: boolean;
2063
- };
2064
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2065
2201
  audience?: string | undefined;
2066
2202
  ttlSeconds: number;
2067
2203
  grant?: unknown;
@@ -2076,15 +2212,31 @@ declare const KernelDefinitions: {
2076
2212
  }, {
2077
2213
  readonly mode: 'value';
2078
2214
  readonly value: string;
2079
- }, "authorized", true, false>>, "impersonate", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2215
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2080
2216
  policy: string;
2081
2217
  object: string;
2218
+ } | {
2219
+ checks: {
2220
+ policy: string;
2221
+ object: string;
2222
+ }[];
2082
2223
  }, {
2083
2224
  readonly mode: 'value';
2084
2225
  readonly value: {
2085
2226
  allowed: boolean;
2227
+ } | {
2228
+ decisions: {
2229
+ allowed: boolean;
2230
+ }[];
2086
2231
  };
2087
- }, "authenticated", true, false>>, "can", builder.ClassOwnerProjection<"node", {
2232
+ }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2233
+ audience?: string | undefined;
2234
+ ttlSeconds: number;
2235
+ grant?: unknown;
2236
+ }, {
2237
+ readonly mode: 'value';
2238
+ readonly value: string;
2239
+ }, "authenticated", true, false>>, "mint", builder.ClassOwnerProjection<"node", {
2088
2240
  readonly abstract: true;
2089
2241
  readonly depth: 1;
2090
2242
  readonly properties: {
@@ -2128,10 +2280,19 @@ declare const KernelDefinitions: {
2128
2280
  can: builder.Method<builder.CallableProjection<{
2129
2281
  policy: string;
2130
2282
  object: string;
2283
+ } | {
2284
+ checks: {
2285
+ policy: string;
2286
+ object: string;
2287
+ }[];
2131
2288
  }, {
2132
2289
  readonly mode: 'value';
2133
2290
  readonly value: {
2134
2291
  allowed: boolean;
2292
+ } | {
2293
+ decisions: {
2294
+ allowed: boolean;
2295
+ }[];
2135
2296
  };
2136
2297
  }, "authenticated", true, false>>;
2137
2298
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -2271,14 +2432,6 @@ declare const KernelDefinitions: {
2271
2432
  readonly mode: 'value';
2272
2433
  readonly value: string;
2273
2434
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2274
- policy: string;
2275
- object: string;
2276
- }, {
2277
- readonly mode: 'value';
2278
- readonly value: {
2279
- allowed: boolean;
2280
- };
2281
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2282
2435
  audience?: string | undefined;
2283
2436
  ttlSeconds: number;
2284
2437
  grant?: unknown;
@@ -2293,14 +2446,32 @@ declare const KernelDefinitions: {
2293
2446
  }, {
2294
2447
  readonly mode: 'value';
2295
2448
  readonly value: string;
2296
- }, "authorized", true, false>>, "impersonate", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2449
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2450
+ policy: string;
2451
+ object: string;
2452
+ } | {
2453
+ checks: {
2454
+ policy: string;
2455
+ object: string;
2456
+ }[];
2457
+ }, {
2458
+ readonly mode: 'value';
2459
+ readonly value: {
2460
+ allowed: boolean;
2461
+ } | {
2462
+ decisions: {
2463
+ allowed: boolean;
2464
+ }[];
2465
+ };
2466
+ }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2297
2467
  audience?: string | undefined;
2298
2468
  ttlSeconds: number;
2299
2469
  grant?: unknown;
2470
+ identity: string;
2300
2471
  }, {
2301
2472
  readonly mode: 'value';
2302
2473
  readonly value: string;
2303
- }, "authenticated", true, false>>, "mint", builder.ClassOwnerProjection<"node", {
2474
+ }, "authorized", true, false>>, "impersonate", builder.ClassOwnerProjection<"node", {
2304
2475
  readonly abstract: true;
2305
2476
  readonly depth: 1;
2306
2477
  readonly properties: {
@@ -2344,10 +2515,19 @@ declare const KernelDefinitions: {
2344
2515
  can: builder.Method<builder.CallableProjection<{
2345
2516
  policy: string;
2346
2517
  object: string;
2518
+ } | {
2519
+ checks: {
2520
+ policy: string;
2521
+ object: string;
2522
+ }[];
2347
2523
  }, {
2348
2524
  readonly mode: 'value';
2349
2525
  readonly value: {
2350
2526
  allowed: boolean;
2527
+ } | {
2528
+ decisions: {
2529
+ allowed: boolean;
2530
+ }[];
2351
2531
  };
2352
2532
  }, "authenticated", true, false>>;
2353
2533
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -2487,14 +2667,6 @@ declare const KernelDefinitions: {
2487
2667
  readonly mode: 'value';
2488
2668
  readonly value: string;
2489
2669
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2490
- policy: string;
2491
- object: string;
2492
- }, {
2493
- readonly mode: 'value';
2494
- readonly value: {
2495
- allowed: boolean;
2496
- };
2497
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2498
2670
  audience?: string | undefined;
2499
2671
  ttlSeconds: number;
2500
2672
  grant?: unknown;
@@ -2509,15 +2681,41 @@ declare const KernelDefinitions: {
2509
2681
  }, {
2510
2682
  readonly mode: 'value';
2511
2683
  readonly value: string;
2512
- }, "authorized", true, false>>, "impersonate", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2513
- audience?: string | undefined;
2514
- ttlSeconds: number;
2515
- grant?: unknown;
2516
- identity: string;
2684
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2685
+ policy: string;
2686
+ object: string;
2687
+ } | {
2688
+ checks: {
2689
+ policy: string;
2690
+ object: string;
2691
+ }[];
2517
2692
  }, {
2518
2693
  readonly mode: 'value';
2519
- readonly value: string;
2520
- }, "authorized", true, false>>, "impersonate", builder.ClassOwnerProjection<"node", {
2694
+ readonly value: {
2695
+ allowed: boolean;
2696
+ } | {
2697
+ decisions: {
2698
+ allowed: boolean;
2699
+ }[];
2700
+ };
2701
+ }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2702
+ policy: string;
2703
+ object: string;
2704
+ } | {
2705
+ checks: {
2706
+ policy: string;
2707
+ object: string;
2708
+ }[];
2709
+ }, {
2710
+ readonly mode: 'value';
2711
+ readonly value: {
2712
+ allowed: boolean;
2713
+ } | {
2714
+ decisions: {
2715
+ allowed: boolean;
2716
+ }[];
2717
+ };
2718
+ }, "authenticated", true, false>>, "can", builder.ClassOwnerProjection<"node", {
2521
2719
  readonly abstract: true;
2522
2720
  readonly depth: 1;
2523
2721
  readonly properties: {
@@ -2561,10 +2759,19 @@ declare const KernelDefinitions: {
2561
2759
  can: builder.Method<builder.CallableProjection<{
2562
2760
  policy: string;
2563
2761
  object: string;
2762
+ } | {
2763
+ checks: {
2764
+ policy: string;
2765
+ object: string;
2766
+ }[];
2564
2767
  }, {
2565
2768
  readonly mode: 'value';
2566
2769
  readonly value: {
2567
2770
  allowed: boolean;
2771
+ } | {
2772
+ decisions: {
2773
+ allowed: boolean;
2774
+ }[];
2568
2775
  };
2569
2776
  }, "authenticated", true, false>>;
2570
2777
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -2704,14 +2911,6 @@ declare const KernelDefinitions: {
2704
2911
  readonly mode: 'value';
2705
2912
  readonly value: string;
2706
2913
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2707
- policy: string;
2708
- object: string;
2709
- }, {
2710
- readonly mode: 'value';
2711
- readonly value: {
2712
- allowed: boolean;
2713
- };
2714
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2715
2914
  audience?: string | undefined;
2716
2915
  ttlSeconds: number;
2717
2916
  grant?: unknown;
@@ -2726,7 +2925,24 @@ declare const KernelDefinitions: {
2726
2925
  }, {
2727
2926
  readonly mode: 'value';
2728
2927
  readonly value: string;
2729
- }, "authorized", true, false>>, "impersonate", unknown>>>>];
2928
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2929
+ policy: string;
2930
+ object: string;
2931
+ } | {
2932
+ checks: {
2933
+ policy: string;
2934
+ object: string;
2935
+ }[];
2936
+ }, {
2937
+ readonly mode: 'value';
2938
+ readonly value: {
2939
+ allowed: boolean;
2940
+ } | {
2941
+ decisions: {
2942
+ allowed: boolean;
2943
+ }[];
2944
+ };
2945
+ }, "authenticated", true, false>>, "can", unknown>>>>];
2730
2946
  readonly properties: {
2731
2947
  readonly origin: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "origin", "self", undefined>;
2732
2948
  readonly dependencyContext: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "dependencyContext", "self", never>;
@@ -2800,10 +3016,19 @@ declare const KernelDefinitions: {
2800
3016
  can: builder.Method<builder.CallableProjection<{
2801
3017
  policy: string;
2802
3018
  object: string;
3019
+ } | {
3020
+ checks: {
3021
+ policy: string;
3022
+ object: string;
3023
+ }[];
2803
3024
  }, {
2804
3025
  readonly mode: 'value';
2805
3026
  readonly value: {
2806
3027
  allowed: boolean;
3028
+ } | {
3029
+ decisions: {
3030
+ allowed: boolean;
3031
+ }[];
2807
3032
  };
2808
3033
  }, "authenticated", true, false>>;
2809
3034
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -2943,14 +3168,6 @@ declare const KernelDefinitions: {
2943
3168
  readonly mode: 'value';
2944
3169
  readonly value: string;
2945
3170
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2946
- policy: string;
2947
- object: string;
2948
- }, {
2949
- readonly mode: 'value';
2950
- readonly value: {
2951
- allowed: boolean;
2952
- };
2953
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
2954
3171
  audience?: string | undefined;
2955
3172
  ttlSeconds: number;
2956
3173
  grant?: unknown;
@@ -2965,7 +3182,24 @@ declare const KernelDefinitions: {
2965
3182
  }, {
2966
3183
  readonly mode: 'value';
2967
3184
  readonly value: string;
2968
- }, "authorized", true, false>>, "impersonate", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "frozen", builder.ClassOwnerProjection<"node", {
3185
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
3186
+ policy: string;
3187
+ object: string;
3188
+ } | {
3189
+ checks: {
3190
+ policy: string;
3191
+ object: string;
3192
+ }[];
3193
+ }, {
3194
+ readonly mode: 'value';
3195
+ readonly value: {
3196
+ allowed: boolean;
3197
+ } | {
3198
+ decisions: {
3199
+ allowed: boolean;
3200
+ }[];
3201
+ };
3202
+ }, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "frozen", builder.ClassOwnerProjection<"node", {
2969
3203
  readonly abstract: true;
2970
3204
  readonly depth: 1;
2971
3205
  readonly properties: {
@@ -3009,10 +3243,19 @@ declare const KernelDefinitions: {
3009
3243
  can: builder.Method<builder.CallableProjection<{
3010
3244
  policy: string;
3011
3245
  object: string;
3246
+ } | {
3247
+ checks: {
3248
+ policy: string;
3249
+ object: string;
3250
+ }[];
3012
3251
  }, {
3013
3252
  readonly mode: 'value';
3014
3253
  readonly value: {
3015
3254
  allowed: boolean;
3255
+ } | {
3256
+ decisions: {
3257
+ allowed: boolean;
3258
+ }[];
3016
3259
  };
3017
3260
  }, "authenticated", true, false>>;
3018
3261
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -3152,14 +3395,6 @@ declare const KernelDefinitions: {
3152
3395
  readonly mode: 'value';
3153
3396
  readonly value: string;
3154
3397
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
3155
- policy: string;
3156
- object: string;
3157
- }, {
3158
- readonly mode: 'value';
3159
- readonly value: {
3160
- allowed: boolean;
3161
- };
3162
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
3163
3398
  audience?: string | undefined;
3164
3399
  ttlSeconds: number;
3165
3400
  grant?: unknown;
@@ -3174,7 +3409,24 @@ declare const KernelDefinitions: {
3174
3409
  }, {
3175
3410
  readonly mode: 'value';
3176
3411
  readonly value: string;
3177
- }, "authorized", true, false>>, "impersonate", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "iss", builder.ClassOwnerProjection<"node", {
3412
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
3413
+ policy: string;
3414
+ object: string;
3415
+ } | {
3416
+ checks: {
3417
+ policy: string;
3418
+ object: string;
3419
+ }[];
3420
+ }, {
3421
+ readonly mode: 'value';
3422
+ readonly value: {
3423
+ allowed: boolean;
3424
+ } | {
3425
+ decisions: {
3426
+ allowed: boolean;
3427
+ }[];
3428
+ };
3429
+ }, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "iss", builder.ClassOwnerProjection<"node", {
3178
3430
  readonly abstract: true;
3179
3431
  readonly depth: 1;
3180
3432
  readonly properties: {
@@ -3218,10 +3470,19 @@ declare const KernelDefinitions: {
3218
3470
  can: builder.Method<builder.CallableProjection<{
3219
3471
  policy: string;
3220
3472
  object: string;
3473
+ } | {
3474
+ checks: {
3475
+ policy: string;
3476
+ object: string;
3477
+ }[];
3221
3478
  }, {
3222
3479
  readonly mode: 'value';
3223
3480
  readonly value: {
3224
3481
  allowed: boolean;
3482
+ } | {
3483
+ decisions: {
3484
+ allowed: boolean;
3485
+ }[];
3225
3486
  };
3226
3487
  }, "authenticated", true, false>>;
3227
3488
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -3361,14 +3622,6 @@ declare const KernelDefinitions: {
3361
3622
  readonly mode: 'value';
3362
3623
  readonly value: string;
3363
3624
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
3364
- policy: string;
3365
- object: string;
3366
- }, {
3367
- readonly mode: 'value';
3368
- readonly value: {
3369
- allowed: boolean;
3370
- };
3371
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
3372
3625
  audience?: string | undefined;
3373
3626
  ttlSeconds: number;
3374
3627
  grant?: unknown;
@@ -3383,7 +3636,24 @@ declare const KernelDefinitions: {
3383
3636
  }, {
3384
3637
  readonly mode: 'value';
3385
3638
  readonly value: string;
3386
- }, "authorized", true, false>>, "impersonate", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "sub", builder.ClassOwnerProjection<"node", {
3639
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
3640
+ policy: string;
3641
+ object: string;
3642
+ } | {
3643
+ checks: {
3644
+ policy: string;
3645
+ object: string;
3646
+ }[];
3647
+ }, {
3648
+ readonly mode: 'value';
3649
+ readonly value: {
3650
+ allowed: boolean;
3651
+ } | {
3652
+ decisions: {
3653
+ allowed: boolean;
3654
+ }[];
3655
+ };
3656
+ }, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "sub", builder.ClassOwnerProjection<"node", {
3387
3657
  readonly abstract: true;
3388
3658
  readonly depth: 1;
3389
3659
  readonly properties: {
@@ -3427,10 +3697,19 @@ declare const KernelDefinitions: {
3427
3697
  can: builder.Method<builder.CallableProjection<{
3428
3698
  policy: string;
3429
3699
  object: string;
3700
+ } | {
3701
+ checks: {
3702
+ policy: string;
3703
+ object: string;
3704
+ }[];
3430
3705
  }, {
3431
3706
  readonly mode: 'value';
3432
3707
  readonly value: {
3433
3708
  allowed: boolean;
3709
+ } | {
3710
+ decisions: {
3711
+ allowed: boolean;
3712
+ }[];
3434
3713
  };
3435
3714
  }, "authenticated", true, false>>;
3436
3715
  whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
@@ -3570,14 +3849,6 @@ declare const KernelDefinitions: {
3570
3849
  readonly mode: 'value';
3571
3850
  readonly value: string;
3572
3851
  }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
3573
- policy: string;
3574
- object: string;
3575
- }, {
3576
- readonly mode: 'value';
3577
- readonly value: {
3578
- allowed: boolean;
3579
- };
3580
- }, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
3581
3852
  audience?: string | undefined;
3582
3853
  ttlSeconds: number;
3583
3854
  grant?: unknown;
@@ -3592,7 +3863,24 @@ declare const KernelDefinitions: {
3592
3863
  }, {
3593
3864
  readonly mode: 'value';
3594
3865
  readonly value: string;
3595
- }, "authorized", true, false>>, "impersonate", unknown>>, never> | (builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "dependencyContext", "self", never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "origin", "self", undefined> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "schema", "self", never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "schemaRevision", "self", never>);
3866
+ }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
3867
+ policy: string;
3868
+ object: string;
3869
+ } | {
3870
+ checks: {
3871
+ policy: string;
3872
+ object: string;
3873
+ }[];
3874
+ }, {
3875
+ readonly mode: 'value';
3876
+ readonly value: {
3877
+ allowed: boolean;
3878
+ } | {
3879
+ decisions: {
3880
+ allowed: boolean;
3881
+ }[];
3882
+ };
3883
+ }, "authenticated", true, false>>, "can", unknown>>, never> | (builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "dependencyContext", "self", never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "origin", "self", undefined> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "schema", "self", never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "schemaRevision", "self", never>);
3596
3884
  readonly abstractInstanceMethods: never;
3597
3885
  readonly abstractStaticMethods: never;
3598
3886
  readonly effectiveInstanceMethods: never;