@astrale-os/kernel-core 0.9.0-beta.50 → 0.9.0-beta.52

package/dist/schema/kernel/syscalls/contracts/can.d.ts

@@ -1,7 +1,19 @@
-export declare const canInput: import("zod").ZodObject<{
+/** Upper bound of one Identity.can batch; a client splits larger check sets. */
+export declare const MAXIMUM_CHECKS = 256;
+/** One check, the original contract, or an ordered batch answered check by check. */
+export declare const canInput: import("zod").ZodUnion<readonly [import("zod").ZodObject<{
     policy: import("zod").ZodString;
     object: import("zod").ZodString;
-}, import("zod/v4/core").$strict>;
-export declare const canOutput: import("zod").ZodObject<{
+}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    checks: import("zod").ZodArray<import("zod").ZodObject<{
+        policy: import("zod").ZodString;
+        object: import("zod").ZodString;
+    }, import("zod/v4/core").$strict>>;
+}, import("zod/v4/core").$strict>]>;
+export declare const canOutput: import("zod").ZodUnion<readonly [import("zod").ZodObject<{
     allowed: import("zod").ZodBoolean;
-}, import("zod/v4/core").$strict>;
+}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
+    decisions: import("zod").ZodArray<import("zod").ZodObject<{
+        allowed: import("zod").ZodBoolean;
+    }, import("zod/v4/core").$strict>>;
+}, import("zod/v4/core").$strict>]>;

package/dist/schema/kernel/syscalls/contracts/can.js

@@ -1,4 +1,12 @@
-import { boolean, strictObject, string } from 'zod';
+import { array, boolean, strictObject, string, union } from 'zod';
+/** Upper bound of one Identity.can batch; a client splits larger check sets. */
+export const MAXIMUM_CHECKS = 256;
 const text = string().min(1);
-export const canInput = strictObject({ policy: text, object: text });
-export const canOutput = strictObject({ allowed: boolean() });
+const check = strictObject({ policy: text, object: text });
+const decision = strictObject({ allowed: boolean() });
+/** One check, the original contract, or an ordered batch answered check by check. */
+export const canInput = union([
+    check,
+    strictObject({ checks: array(check).min(1).max(MAXIMUM_CHECKS) }),
+]);
+export const canOutput = union([decision, strictObject({ decisions: array(decision) })]);

package/dist/schema/kernel/syscalls/contracts/index.d.ts

@@ -1,5 +1,5 @@
 export { admitInput, admitOutput } from './admit.js';
-export { canInput, canOutput } from './can.js';
+export { MAXIMUM_CHECKS, canInput, canOutput } from './can.js';
 export { delegateInput, delegateOutput } from './delegate.js';
 export { installInput, installReceipt, type DomainRequest, type InstallInput, type InstallReceipt, } from './install.js';
 export { introspectInput } from './introspect.js';

package/dist/schema/kernel/syscalls/contracts/index.js

@@ -1,5 +1,5 @@
 export { admitInput, admitOutput } from './admit.js';
-export { canInput, canOutput } from './can.js';
+export { MAXIMUM_CHECKS, canInput, canOutput } from './can.js';
 export { delegateInput, delegateOutput } from './delegate.js';
 export { installInput, installReceipt, } from './install.js';
 export { introspectInput } from './introspect.js';

package/dist/schema/kernel/syscalls/declarations/can.d.ts

@@ -2,9 +2,18 @@ import { type builder } from '@astrale-os/kernel-dsl/v1';
 export declare const Can: builder.Method<builder.CallableProjection<{
     policy: string;
     object: string;
+} | {
+    checks: {
+        policy: string;
+        object: string;
+    }[];
 }, {
     readonly mode: 'value';
     readonly value: {
         allowed: boolean;
+    } | {
+        decisions: {
+            allowed: boolean;
+        }[];
     };
 }, "authenticated", true, false>>;

package/dist/schema/kernel/syscalls/declarations/can.js

@@ -1,7 +1,7 @@
 import { method } from '@astrale-os/kernel-dsl/v1';
 import { canInput, canOutput } from '../contracts/index.js';
 export const Can = method({
-    description: 'Determine whether the current authenticated Identity satisfies one installed Policy for one object.',
+    description: 'Determine whether the current authenticated Identity satisfies one installed Policy for one object, or each of an ordered batch of at most 256 Policy and object checks.',
     auth: 'authenticated',
     input: canInput,
     output: canOutput,

package/dist/schema/kernel/syscalls/declarations/index.d.ts

@@ -580,10 +580,19 @@ export declare const IdentityMethods: Readonly<{
     can: builder.Method<builder.CallableProjection<{
         policy: string;
         object: string;
+    } | {
+        checks: {
+            policy: string;
+            object: string;
+        }[];
     }, {
         readonly mode: 'value';
         readonly value: {
             allowed: boolean;
+        } | {
+            decisions: {
+                allowed: boolean;
+            }[];
         };
     }, "authenticated", true, false>>;
     whoami: builder.Method<builder.CallableProjection<Record<string, never>, {

package/dist/schema/kernel/syscalls/descriptors/identity.d.ts

@@ -21,10 +21,19 @@ export declare const can: import("./model.js").MethodSyscall<Readonly<{
 }>, "can", import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
     policy: string;
     object: string;
+} | {
+    checks: {
+        policy: string;
+        object: string;
+    }[];
 }, {
     readonly mode: 'value';
     readonly value: {
         allowed: boolean;
+    } | {
+        decisions: {
+            allowed: boolean;
+        }[];
     };
 }, true, false, "authenticated", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.can"> & {
     readonly name: "can";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-core",
-  "version": "0.9.0-beta.50",
+  "version": "0.9.0-beta.52",
   "description": "Astrale Kernel Core - Types, Invariants, and Pure Logic",
   "license": "Apache-2.0",
   "repository": {
@@ -160,7 +160,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-dsl": "0.2.0-beta.35",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.37",
     "@noble/hashes": "2.3.0",
     "@types/json-schema": "^7.0.15",
     "dequal": "2.0.3"