@astrale-os/kernel-core 0.9.0-beta.51 → 0.9.0-beta.53
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/authority/accept.js +4 -0
- package/dist/auth/authority/ownership.optimization.js +12 -0
- package/dist/graph/graph/model/codec.js +1 -1
- package/dist/graph/query/result/index.js +1 -1
- package/dist/schema/domain/domain.d.ts +424 -154
- package/dist/schema/identity/identity.d.ts +27 -9
- package/dist/schema/kernel/projection/index.d.ts +2 -2
- package/dist/schema/kernel/projection/index.js +1 -1
- package/dist/schema/kernel/projection/project.d.ts +3 -1
- package/dist/schema/kernel/projection/project.js +64 -36
- package/dist/schema/kernel/projection/types.d.ts +27 -1
- package/dist/schema/kernel/schema.d.ts +772 -484
- package/dist/schema/kernel/syscalls/contracts/can.d.ts +16 -4
- package/dist/schema/kernel/syscalls/contracts/can.js +11 -3
- package/dist/schema/kernel/syscalls/contracts/index.d.ts +1 -1
- package/dist/schema/kernel/syscalls/contracts/index.js +1 -1
- package/dist/schema/kernel/syscalls/declarations/can.d.ts +9 -0
- package/dist/schema/kernel/syscalls/declarations/can.js +1 -1
- package/dist/schema/kernel/syscalls/declarations/index.d.ts +9 -0
- package/dist/schema/kernel/syscalls/descriptors/identity.d.ts +9 -0
- package/package.json +2 -2
|
@@ -105,10 +105,19 @@ declare const KernelDefinitions: {
|
|
|
105
105
|
can: builder.Method<builder.CallableProjection<{
|
|
106
106
|
policy: string;
|
|
107
107
|
object: string;
|
|
108
|
+
} | {
|
|
109
|
+
checks: {
|
|
110
|
+
policy: string;
|
|
111
|
+
object: string;
|
|
112
|
+
}[];
|
|
108
113
|
}, {
|
|
109
114
|
readonly mode: 'value';
|
|
110
115
|
readonly value: {
|
|
111
116
|
allowed: boolean;
|
|
117
|
+
} | {
|
|
118
|
+
decisions: {
|
|
119
|
+
allowed: boolean;
|
|
120
|
+
}[];
|
|
112
121
|
};
|
|
113
122
|
}, "authenticated", true, false>>;
|
|
114
123
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -252,14 +261,6 @@ declare const KernelDefinitions: {
|
|
|
252
261
|
readonly mode: 'value';
|
|
253
262
|
readonly value: string;
|
|
254
263
|
}, "authenticated", true, false>>, "delegate", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
255
|
-
policy: string;
|
|
256
|
-
object: string;
|
|
257
|
-
}, {
|
|
258
|
-
readonly mode: 'value';
|
|
259
|
-
readonly value: {
|
|
260
|
-
allowed: boolean;
|
|
261
|
-
};
|
|
262
|
-
}, "authenticated", true, false>>, "can", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
263
264
|
audience?: string | undefined;
|
|
264
265
|
ttlSeconds: number;
|
|
265
266
|
grant?: unknown;
|
|
@@ -274,7 +275,24 @@ declare const KernelDefinitions: {
|
|
|
274
275
|
}, {
|
|
275
276
|
readonly mode: 'value';
|
|
276
277
|
readonly value: string;
|
|
277
|
-
}, "authorized", true, false>>, "impersonate", "self"
|
|
278
|
+
}, "authorized", true, false>>, "impersonate", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
279
|
+
policy: string;
|
|
280
|
+
object: string;
|
|
281
|
+
} | {
|
|
282
|
+
checks: {
|
|
283
|
+
policy: string;
|
|
284
|
+
object: string;
|
|
285
|
+
}[];
|
|
286
|
+
}, {
|
|
287
|
+
readonly mode: 'value';
|
|
288
|
+
readonly value: {
|
|
289
|
+
allowed: boolean;
|
|
290
|
+
} | {
|
|
291
|
+
decisions: {
|
|
292
|
+
allowed: boolean;
|
|
293
|
+
}[];
|
|
294
|
+
};
|
|
295
|
+
}, "authenticated", true, false>>, "can", "self">;
|
|
278
296
|
}>;
|
|
279
297
|
readonly Named: builder.NodeClass<{
|
|
280
298
|
readonly depth: 1;
|
|
@@ -471,10 +489,19 @@ declare const KernelDefinitions: {
|
|
|
471
489
|
can: builder.Method<builder.CallableProjection<{
|
|
472
490
|
policy: string;
|
|
473
491
|
object: string;
|
|
492
|
+
} | {
|
|
493
|
+
checks: {
|
|
494
|
+
policy: string;
|
|
495
|
+
object: string;
|
|
496
|
+
}[];
|
|
474
497
|
}, {
|
|
475
498
|
readonly mode: 'value';
|
|
476
499
|
readonly value: {
|
|
477
500
|
allowed: boolean;
|
|
501
|
+
} | {
|
|
502
|
+
decisions: {
|
|
503
|
+
allowed: boolean;
|
|
504
|
+
}[];
|
|
478
505
|
};
|
|
479
506
|
}, "authenticated", true, false>>;
|
|
480
507
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -606,10 +633,19 @@ declare const KernelDefinitions: {
|
|
|
606
633
|
can: builder.Method<builder.CallableProjection<{
|
|
607
634
|
policy: string;
|
|
608
635
|
object: string;
|
|
636
|
+
} | {
|
|
637
|
+
checks: {
|
|
638
|
+
policy: string;
|
|
639
|
+
object: string;
|
|
640
|
+
}[];
|
|
609
641
|
}, {
|
|
610
642
|
readonly mode: 'value';
|
|
611
643
|
readonly value: {
|
|
612
644
|
allowed: boolean;
|
|
645
|
+
} | {
|
|
646
|
+
decisions: {
|
|
647
|
+
allowed: boolean;
|
|
648
|
+
}[];
|
|
613
649
|
};
|
|
614
650
|
}, "authenticated", true, false>>;
|
|
615
651
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -749,14 +785,6 @@ declare const KernelDefinitions: {
|
|
|
749
785
|
readonly mode: 'value';
|
|
750
786
|
readonly value: string;
|
|
751
787
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
752
|
-
policy: string;
|
|
753
|
-
object: string;
|
|
754
|
-
}, {
|
|
755
|
-
readonly mode: 'value';
|
|
756
|
-
readonly value: {
|
|
757
|
-
allowed: boolean;
|
|
758
|
-
};
|
|
759
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
760
788
|
audience?: string | undefined;
|
|
761
789
|
ttlSeconds: number;
|
|
762
790
|
grant?: unknown;
|
|
@@ -771,7 +799,24 @@ declare const KernelDefinitions: {
|
|
|
771
799
|
}, {
|
|
772
800
|
readonly mode: 'value';
|
|
773
801
|
readonly value: string;
|
|
774
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
802
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
803
|
+
policy: string;
|
|
804
|
+
object: string;
|
|
805
|
+
} | {
|
|
806
|
+
checks: {
|
|
807
|
+
policy: string;
|
|
808
|
+
object: string;
|
|
809
|
+
}[];
|
|
810
|
+
}, {
|
|
811
|
+
readonly mode: 'value';
|
|
812
|
+
readonly value: {
|
|
813
|
+
allowed: boolean;
|
|
814
|
+
} | {
|
|
815
|
+
decisions: {
|
|
816
|
+
allowed: boolean;
|
|
817
|
+
}[];
|
|
818
|
+
};
|
|
819
|
+
}, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "frozen", builder.ClassOwnerProjection<"node", {
|
|
775
820
|
readonly abstract: true;
|
|
776
821
|
readonly depth: 1;
|
|
777
822
|
readonly properties: {
|
|
@@ -815,10 +860,19 @@ declare const KernelDefinitions: {
|
|
|
815
860
|
can: builder.Method<builder.CallableProjection<{
|
|
816
861
|
policy: string;
|
|
817
862
|
object: string;
|
|
863
|
+
} | {
|
|
864
|
+
checks: {
|
|
865
|
+
policy: string;
|
|
866
|
+
object: string;
|
|
867
|
+
}[];
|
|
818
868
|
}, {
|
|
819
869
|
readonly mode: 'value';
|
|
820
870
|
readonly value: {
|
|
821
871
|
allowed: boolean;
|
|
872
|
+
} | {
|
|
873
|
+
decisions: {
|
|
874
|
+
allowed: boolean;
|
|
875
|
+
}[];
|
|
822
876
|
};
|
|
823
877
|
}, "authenticated", true, false>>;
|
|
824
878
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -958,14 +1012,6 @@ declare const KernelDefinitions: {
|
|
|
958
1012
|
readonly mode: 'value';
|
|
959
1013
|
readonly value: string;
|
|
960
1014
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
961
|
-
policy: string;
|
|
962
|
-
object: string;
|
|
963
|
-
}, {
|
|
964
|
-
readonly mode: 'value';
|
|
965
|
-
readonly value: {
|
|
966
|
-
allowed: boolean;
|
|
967
|
-
};
|
|
968
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
969
1015
|
audience?: string | undefined;
|
|
970
1016
|
ttlSeconds: number;
|
|
971
1017
|
grant?: unknown;
|
|
@@ -980,7 +1026,24 @@ declare const KernelDefinitions: {
|
|
|
980
1026
|
}, {
|
|
981
1027
|
readonly mode: 'value';
|
|
982
1028
|
readonly value: string;
|
|
983
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
1029
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1030
|
+
policy: string;
|
|
1031
|
+
object: string;
|
|
1032
|
+
} | {
|
|
1033
|
+
checks: {
|
|
1034
|
+
policy: string;
|
|
1035
|
+
object: string;
|
|
1036
|
+
}[];
|
|
1037
|
+
}, {
|
|
1038
|
+
readonly mode: 'value';
|
|
1039
|
+
readonly value: {
|
|
1040
|
+
allowed: boolean;
|
|
1041
|
+
} | {
|
|
1042
|
+
decisions: {
|
|
1043
|
+
allowed: boolean;
|
|
1044
|
+
}[];
|
|
1045
|
+
};
|
|
1046
|
+
}, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "iss", builder.ClassOwnerProjection<"node", {
|
|
984
1047
|
readonly abstract: true;
|
|
985
1048
|
readonly depth: 1;
|
|
986
1049
|
readonly properties: {
|
|
@@ -1024,10 +1087,19 @@ declare const KernelDefinitions: {
|
|
|
1024
1087
|
can: builder.Method<builder.CallableProjection<{
|
|
1025
1088
|
policy: string;
|
|
1026
1089
|
object: string;
|
|
1090
|
+
} | {
|
|
1091
|
+
checks: {
|
|
1092
|
+
policy: string;
|
|
1093
|
+
object: string;
|
|
1094
|
+
}[];
|
|
1027
1095
|
}, {
|
|
1028
1096
|
readonly mode: 'value';
|
|
1029
1097
|
readonly value: {
|
|
1030
1098
|
allowed: boolean;
|
|
1099
|
+
} | {
|
|
1100
|
+
decisions: {
|
|
1101
|
+
allowed: boolean;
|
|
1102
|
+
}[];
|
|
1031
1103
|
};
|
|
1032
1104
|
}, "authenticated", true, false>>;
|
|
1033
1105
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -1167,14 +1239,6 @@ declare const KernelDefinitions: {
|
|
|
1167
1239
|
readonly mode: 'value';
|
|
1168
1240
|
readonly value: string;
|
|
1169
1241
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1170
|
-
policy: string;
|
|
1171
|
-
object: string;
|
|
1172
|
-
}, {
|
|
1173
|
-
readonly mode: 'value';
|
|
1174
|
-
readonly value: {
|
|
1175
|
-
allowed: boolean;
|
|
1176
|
-
};
|
|
1177
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1178
1242
|
audience?: string | undefined;
|
|
1179
1243
|
ttlSeconds: number;
|
|
1180
1244
|
grant?: unknown;
|
|
@@ -1189,7 +1253,24 @@ declare const KernelDefinitions: {
|
|
|
1189
1253
|
}, {
|
|
1190
1254
|
readonly mode: 'value';
|
|
1191
1255
|
readonly value: string;
|
|
1192
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
1256
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1257
|
+
policy: string;
|
|
1258
|
+
object: string;
|
|
1259
|
+
} | {
|
|
1260
|
+
checks: {
|
|
1261
|
+
policy: string;
|
|
1262
|
+
object: string;
|
|
1263
|
+
}[];
|
|
1264
|
+
}, {
|
|
1265
|
+
readonly mode: 'value';
|
|
1266
|
+
readonly value: {
|
|
1267
|
+
allowed: boolean;
|
|
1268
|
+
} | {
|
|
1269
|
+
decisions: {
|
|
1270
|
+
allowed: boolean;
|
|
1271
|
+
}[];
|
|
1272
|
+
};
|
|
1273
|
+
}, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "sub", builder.ClassOwnerProjection<"node", {
|
|
1193
1274
|
readonly abstract: true;
|
|
1194
1275
|
readonly depth: 1;
|
|
1195
1276
|
readonly properties: {
|
|
@@ -1233,10 +1314,19 @@ declare const KernelDefinitions: {
|
|
|
1233
1314
|
can: builder.Method<builder.CallableProjection<{
|
|
1234
1315
|
policy: string;
|
|
1235
1316
|
object: string;
|
|
1317
|
+
} | {
|
|
1318
|
+
checks: {
|
|
1319
|
+
policy: string;
|
|
1320
|
+
object: string;
|
|
1321
|
+
}[];
|
|
1236
1322
|
}, {
|
|
1237
1323
|
readonly mode: 'value';
|
|
1238
1324
|
readonly value: {
|
|
1239
1325
|
allowed: boolean;
|
|
1326
|
+
} | {
|
|
1327
|
+
decisions: {
|
|
1328
|
+
allowed: boolean;
|
|
1329
|
+
}[];
|
|
1240
1330
|
};
|
|
1241
1331
|
}, "authenticated", true, false>>;
|
|
1242
1332
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -1376,14 +1466,6 @@ declare const KernelDefinitions: {
|
|
|
1376
1466
|
readonly mode: 'value';
|
|
1377
1467
|
readonly value: string;
|
|
1378
1468
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1379
|
-
policy: string;
|
|
1380
|
-
object: string;
|
|
1381
|
-
}, {
|
|
1382
|
-
readonly mode: 'value';
|
|
1383
|
-
readonly value: {
|
|
1384
|
-
allowed: boolean;
|
|
1385
|
-
};
|
|
1386
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1387
1469
|
audience?: string | undefined;
|
|
1388
1470
|
ttlSeconds: number;
|
|
1389
1471
|
grant?: unknown;
|
|
@@ -1398,7 +1480,24 @@ declare const KernelDefinitions: {
|
|
|
1398
1480
|
}, {
|
|
1399
1481
|
readonly mode: 'value';
|
|
1400
1482
|
readonly value: string;
|
|
1401
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
1483
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1484
|
+
policy: string;
|
|
1485
|
+
object: string;
|
|
1486
|
+
} | {
|
|
1487
|
+
checks: {
|
|
1488
|
+
policy: string;
|
|
1489
|
+
object: string;
|
|
1490
|
+
}[];
|
|
1491
|
+
}, {
|
|
1492
|
+
readonly mode: 'value';
|
|
1493
|
+
readonly value: {
|
|
1494
|
+
allowed: boolean;
|
|
1495
|
+
} | {
|
|
1496
|
+
decisions: {
|
|
1497
|
+
allowed: boolean;
|
|
1498
|
+
}[];
|
|
1499
|
+
};
|
|
1500
|
+
}, "authenticated", true, false>>, "can", unknown>>, never>, never, builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
1402
1501
|
readonly mode: 'value';
|
|
1403
1502
|
readonly value: {
|
|
1404
1503
|
id: string;
|
|
@@ -1462,10 +1561,19 @@ declare const KernelDefinitions: {
|
|
|
1462
1561
|
can: builder.Method<builder.CallableProjection<{
|
|
1463
1562
|
policy: string;
|
|
1464
1563
|
object: string;
|
|
1564
|
+
} | {
|
|
1565
|
+
checks: {
|
|
1566
|
+
policy: string;
|
|
1567
|
+
object: string;
|
|
1568
|
+
}[];
|
|
1465
1569
|
}, {
|
|
1466
1570
|
readonly mode: 'value';
|
|
1467
1571
|
readonly value: {
|
|
1468
1572
|
allowed: boolean;
|
|
1573
|
+
} | {
|
|
1574
|
+
decisions: {
|
|
1575
|
+
allowed: boolean;
|
|
1576
|
+
}[];
|
|
1469
1577
|
};
|
|
1470
1578
|
}, "authenticated", true, false>>;
|
|
1471
1579
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -1605,14 +1713,6 @@ declare const KernelDefinitions: {
|
|
|
1605
1713
|
readonly mode: 'value';
|
|
1606
1714
|
readonly value: string;
|
|
1607
1715
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1608
|
-
policy: string;
|
|
1609
|
-
object: string;
|
|
1610
|
-
}, {
|
|
1611
|
-
readonly mode: 'value';
|
|
1612
|
-
readonly value: {
|
|
1613
|
-
allowed: boolean;
|
|
1614
|
-
};
|
|
1615
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1616
1716
|
audience?: string | undefined;
|
|
1617
1717
|
ttlSeconds: number;
|
|
1618
1718
|
grant?: unknown;
|
|
@@ -1627,7 +1727,24 @@ declare const KernelDefinitions: {
|
|
|
1627
1727
|
}, {
|
|
1628
1728
|
readonly mode: 'value';
|
|
1629
1729
|
readonly value: string;
|
|
1630
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
1730
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1731
|
+
policy: string;
|
|
1732
|
+
object: string;
|
|
1733
|
+
} | {
|
|
1734
|
+
checks: {
|
|
1735
|
+
policy: string;
|
|
1736
|
+
object: string;
|
|
1737
|
+
}[];
|
|
1738
|
+
}, {
|
|
1739
|
+
readonly mode: 'value';
|
|
1740
|
+
readonly value: {
|
|
1741
|
+
allowed: boolean;
|
|
1742
|
+
} | {
|
|
1743
|
+
decisions: {
|
|
1744
|
+
allowed: boolean;
|
|
1745
|
+
}[];
|
|
1746
|
+
};
|
|
1747
|
+
}, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1631
1748
|
iss: string;
|
|
1632
1749
|
sub: string;
|
|
1633
1750
|
}, {
|
|
@@ -1694,10 +1811,19 @@ declare const KernelDefinitions: {
|
|
|
1694
1811
|
can: builder.Method<builder.CallableProjection<{
|
|
1695
1812
|
policy: string;
|
|
1696
1813
|
object: string;
|
|
1814
|
+
} | {
|
|
1815
|
+
checks: {
|
|
1816
|
+
policy: string;
|
|
1817
|
+
object: string;
|
|
1818
|
+
}[];
|
|
1697
1819
|
}, {
|
|
1698
1820
|
readonly mode: 'value';
|
|
1699
1821
|
readonly value: {
|
|
1700
1822
|
allowed: boolean;
|
|
1823
|
+
} | {
|
|
1824
|
+
decisions: {
|
|
1825
|
+
allowed: boolean;
|
|
1826
|
+
}[];
|
|
1701
1827
|
};
|
|
1702
1828
|
}, "authenticated", true, false>>;
|
|
1703
1829
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -1837,14 +1963,6 @@ declare const KernelDefinitions: {
|
|
|
1837
1963
|
readonly mode: 'value';
|
|
1838
1964
|
readonly value: string;
|
|
1839
1965
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1840
|
-
policy: string;
|
|
1841
|
-
object: string;
|
|
1842
|
-
}, {
|
|
1843
|
-
readonly mode: 'value';
|
|
1844
|
-
readonly value: {
|
|
1845
|
-
allowed: boolean;
|
|
1846
|
-
};
|
|
1847
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1848
1966
|
audience?: string | undefined;
|
|
1849
1967
|
ttlSeconds: number;
|
|
1850
1968
|
grant?: unknown;
|
|
@@ -1859,7 +1977,24 @@ declare const KernelDefinitions: {
|
|
|
1859
1977
|
}, {
|
|
1860
1978
|
readonly mode: 'value';
|
|
1861
1979
|
readonly value: string;
|
|
1862
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
1980
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1981
|
+
policy: string;
|
|
1982
|
+
object: string;
|
|
1983
|
+
} | {
|
|
1984
|
+
checks: {
|
|
1985
|
+
policy: string;
|
|
1986
|
+
object: string;
|
|
1987
|
+
}[];
|
|
1988
|
+
}, {
|
|
1989
|
+
readonly mode: 'value';
|
|
1990
|
+
readonly value: {
|
|
1991
|
+
allowed: boolean;
|
|
1992
|
+
} | {
|
|
1993
|
+
decisions: {
|
|
1994
|
+
allowed: boolean;
|
|
1995
|
+
}[];
|
|
1996
|
+
};
|
|
1997
|
+
}, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
1863
1998
|
principal: string;
|
|
1864
1999
|
audience: string;
|
|
1865
2000
|
ttlSeconds: number;
|
|
@@ -1911,10 +2046,19 @@ declare const KernelDefinitions: {
|
|
|
1911
2046
|
can: builder.Method<builder.CallableProjection<{
|
|
1912
2047
|
policy: string;
|
|
1913
2048
|
object: string;
|
|
2049
|
+
} | {
|
|
2050
|
+
checks: {
|
|
2051
|
+
policy: string;
|
|
2052
|
+
object: string;
|
|
2053
|
+
}[];
|
|
1914
2054
|
}, {
|
|
1915
2055
|
readonly mode: 'value';
|
|
1916
2056
|
readonly value: {
|
|
1917
2057
|
allowed: boolean;
|
|
2058
|
+
} | {
|
|
2059
|
+
decisions: {
|
|
2060
|
+
allowed: boolean;
|
|
2061
|
+
}[];
|
|
1918
2062
|
};
|
|
1919
2063
|
}, "authenticated", true, false>>;
|
|
1920
2064
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -2054,14 +2198,6 @@ declare const KernelDefinitions: {
|
|
|
2054
2198
|
readonly mode: 'value';
|
|
2055
2199
|
readonly value: string;
|
|
2056
2200
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2057
|
-
policy: string;
|
|
2058
|
-
object: string;
|
|
2059
|
-
}, {
|
|
2060
|
-
readonly mode: 'value';
|
|
2061
|
-
readonly value: {
|
|
2062
|
-
allowed: boolean;
|
|
2063
|
-
};
|
|
2064
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2065
2201
|
audience?: string | undefined;
|
|
2066
2202
|
ttlSeconds: number;
|
|
2067
2203
|
grant?: unknown;
|
|
@@ -2076,15 +2212,31 @@ declare const KernelDefinitions: {
|
|
|
2076
2212
|
}, {
|
|
2077
2213
|
readonly mode: 'value';
|
|
2078
2214
|
readonly value: string;
|
|
2079
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
2215
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2080
2216
|
policy: string;
|
|
2081
2217
|
object: string;
|
|
2218
|
+
} | {
|
|
2219
|
+
checks: {
|
|
2220
|
+
policy: string;
|
|
2221
|
+
object: string;
|
|
2222
|
+
}[];
|
|
2082
2223
|
}, {
|
|
2083
2224
|
readonly mode: 'value';
|
|
2084
2225
|
readonly value: {
|
|
2085
2226
|
allowed: boolean;
|
|
2227
|
+
} | {
|
|
2228
|
+
decisions: {
|
|
2229
|
+
allowed: boolean;
|
|
2230
|
+
}[];
|
|
2086
2231
|
};
|
|
2087
|
-
}, "authenticated", true, false>>, "can", builder.
|
|
2232
|
+
}, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2233
|
+
audience?: string | undefined;
|
|
2234
|
+
ttlSeconds: number;
|
|
2235
|
+
grant?: unknown;
|
|
2236
|
+
}, {
|
|
2237
|
+
readonly mode: 'value';
|
|
2238
|
+
readonly value: string;
|
|
2239
|
+
}, "authenticated", true, false>>, "mint", builder.ClassOwnerProjection<"node", {
|
|
2088
2240
|
readonly abstract: true;
|
|
2089
2241
|
readonly depth: 1;
|
|
2090
2242
|
readonly properties: {
|
|
@@ -2128,10 +2280,19 @@ declare const KernelDefinitions: {
|
|
|
2128
2280
|
can: builder.Method<builder.CallableProjection<{
|
|
2129
2281
|
policy: string;
|
|
2130
2282
|
object: string;
|
|
2283
|
+
} | {
|
|
2284
|
+
checks: {
|
|
2285
|
+
policy: string;
|
|
2286
|
+
object: string;
|
|
2287
|
+
}[];
|
|
2131
2288
|
}, {
|
|
2132
2289
|
readonly mode: 'value';
|
|
2133
2290
|
readonly value: {
|
|
2134
2291
|
allowed: boolean;
|
|
2292
|
+
} | {
|
|
2293
|
+
decisions: {
|
|
2294
|
+
allowed: boolean;
|
|
2295
|
+
}[];
|
|
2135
2296
|
};
|
|
2136
2297
|
}, "authenticated", true, false>>;
|
|
2137
2298
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -2271,14 +2432,6 @@ declare const KernelDefinitions: {
|
|
|
2271
2432
|
readonly mode: 'value';
|
|
2272
2433
|
readonly value: string;
|
|
2273
2434
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2274
|
-
policy: string;
|
|
2275
|
-
object: string;
|
|
2276
|
-
}, {
|
|
2277
|
-
readonly mode: 'value';
|
|
2278
|
-
readonly value: {
|
|
2279
|
-
allowed: boolean;
|
|
2280
|
-
};
|
|
2281
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2282
2435
|
audience?: string | undefined;
|
|
2283
2436
|
ttlSeconds: number;
|
|
2284
2437
|
grant?: unknown;
|
|
@@ -2293,14 +2446,32 @@ declare const KernelDefinitions: {
|
|
|
2293
2446
|
}, {
|
|
2294
2447
|
readonly mode: 'value';
|
|
2295
2448
|
readonly value: string;
|
|
2296
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
2449
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2450
|
+
policy: string;
|
|
2451
|
+
object: string;
|
|
2452
|
+
} | {
|
|
2453
|
+
checks: {
|
|
2454
|
+
policy: string;
|
|
2455
|
+
object: string;
|
|
2456
|
+
}[];
|
|
2457
|
+
}, {
|
|
2458
|
+
readonly mode: 'value';
|
|
2459
|
+
readonly value: {
|
|
2460
|
+
allowed: boolean;
|
|
2461
|
+
} | {
|
|
2462
|
+
decisions: {
|
|
2463
|
+
allowed: boolean;
|
|
2464
|
+
}[];
|
|
2465
|
+
};
|
|
2466
|
+
}, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2297
2467
|
audience?: string | undefined;
|
|
2298
2468
|
ttlSeconds: number;
|
|
2299
2469
|
grant?: unknown;
|
|
2470
|
+
identity: string;
|
|
2300
2471
|
}, {
|
|
2301
2472
|
readonly mode: 'value';
|
|
2302
2473
|
readonly value: string;
|
|
2303
|
-
}, "
|
|
2474
|
+
}, "authorized", true, false>>, "impersonate", builder.ClassOwnerProjection<"node", {
|
|
2304
2475
|
readonly abstract: true;
|
|
2305
2476
|
readonly depth: 1;
|
|
2306
2477
|
readonly properties: {
|
|
@@ -2344,10 +2515,19 @@ declare const KernelDefinitions: {
|
|
|
2344
2515
|
can: builder.Method<builder.CallableProjection<{
|
|
2345
2516
|
policy: string;
|
|
2346
2517
|
object: string;
|
|
2518
|
+
} | {
|
|
2519
|
+
checks: {
|
|
2520
|
+
policy: string;
|
|
2521
|
+
object: string;
|
|
2522
|
+
}[];
|
|
2347
2523
|
}, {
|
|
2348
2524
|
readonly mode: 'value';
|
|
2349
2525
|
readonly value: {
|
|
2350
2526
|
allowed: boolean;
|
|
2527
|
+
} | {
|
|
2528
|
+
decisions: {
|
|
2529
|
+
allowed: boolean;
|
|
2530
|
+
}[];
|
|
2351
2531
|
};
|
|
2352
2532
|
}, "authenticated", true, false>>;
|
|
2353
2533
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -2487,14 +2667,6 @@ declare const KernelDefinitions: {
|
|
|
2487
2667
|
readonly mode: 'value';
|
|
2488
2668
|
readonly value: string;
|
|
2489
2669
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2490
|
-
policy: string;
|
|
2491
|
-
object: string;
|
|
2492
|
-
}, {
|
|
2493
|
-
readonly mode: 'value';
|
|
2494
|
-
readonly value: {
|
|
2495
|
-
allowed: boolean;
|
|
2496
|
-
};
|
|
2497
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2498
2670
|
audience?: string | undefined;
|
|
2499
2671
|
ttlSeconds: number;
|
|
2500
2672
|
grant?: unknown;
|
|
@@ -2509,16 +2681,42 @@ declare const KernelDefinitions: {
|
|
|
2509
2681
|
}, {
|
|
2510
2682
|
readonly mode: 'value';
|
|
2511
2683
|
readonly value: string;
|
|
2512
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
2513
|
-
|
|
2514
|
-
|
|
2515
|
-
|
|
2516
|
-
|
|
2517
|
-
|
|
2518
|
-
|
|
2519
|
-
|
|
2520
|
-
},
|
|
2521
|
-
readonly
|
|
2684
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2685
|
+
policy: string;
|
|
2686
|
+
object: string;
|
|
2687
|
+
} | {
|
|
2688
|
+
checks: {
|
|
2689
|
+
policy: string;
|
|
2690
|
+
object: string;
|
|
2691
|
+
}[];
|
|
2692
|
+
}, {
|
|
2693
|
+
readonly mode: 'value';
|
|
2694
|
+
readonly value: {
|
|
2695
|
+
allowed: boolean;
|
|
2696
|
+
} | {
|
|
2697
|
+
decisions: {
|
|
2698
|
+
allowed: boolean;
|
|
2699
|
+
}[];
|
|
2700
|
+
};
|
|
2701
|
+
}, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2702
|
+
policy: string;
|
|
2703
|
+
object: string;
|
|
2704
|
+
} | {
|
|
2705
|
+
checks: {
|
|
2706
|
+
policy: string;
|
|
2707
|
+
object: string;
|
|
2708
|
+
}[];
|
|
2709
|
+
}, {
|
|
2710
|
+
readonly mode: 'value';
|
|
2711
|
+
readonly value: {
|
|
2712
|
+
allowed: boolean;
|
|
2713
|
+
} | {
|
|
2714
|
+
decisions: {
|
|
2715
|
+
allowed: boolean;
|
|
2716
|
+
}[];
|
|
2717
|
+
};
|
|
2718
|
+
}, "authenticated", true, false>>, "can", builder.ClassOwnerProjection<"node", {
|
|
2719
|
+
readonly abstract: true;
|
|
2522
2720
|
readonly depth: 1;
|
|
2523
2721
|
readonly properties: {
|
|
2524
2722
|
readonly iss: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "iss", "self", never>;
|
|
@@ -2561,10 +2759,19 @@ declare const KernelDefinitions: {
|
|
|
2561
2759
|
can: builder.Method<builder.CallableProjection<{
|
|
2562
2760
|
policy: string;
|
|
2563
2761
|
object: string;
|
|
2762
|
+
} | {
|
|
2763
|
+
checks: {
|
|
2764
|
+
policy: string;
|
|
2765
|
+
object: string;
|
|
2766
|
+
}[];
|
|
2564
2767
|
}, {
|
|
2565
2768
|
readonly mode: 'value';
|
|
2566
2769
|
readonly value: {
|
|
2567
2770
|
allowed: boolean;
|
|
2771
|
+
} | {
|
|
2772
|
+
decisions: {
|
|
2773
|
+
allowed: boolean;
|
|
2774
|
+
}[];
|
|
2568
2775
|
};
|
|
2569
2776
|
}, "authenticated", true, false>>;
|
|
2570
2777
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -2704,14 +2911,6 @@ declare const KernelDefinitions: {
|
|
|
2704
2911
|
readonly mode: 'value';
|
|
2705
2912
|
readonly value: string;
|
|
2706
2913
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2707
|
-
policy: string;
|
|
2708
|
-
object: string;
|
|
2709
|
-
}, {
|
|
2710
|
-
readonly mode: 'value';
|
|
2711
|
-
readonly value: {
|
|
2712
|
-
allowed: boolean;
|
|
2713
|
-
};
|
|
2714
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2715
2914
|
audience?: string | undefined;
|
|
2716
2915
|
ttlSeconds: number;
|
|
2717
2916
|
grant?: unknown;
|
|
@@ -2726,7 +2925,24 @@ declare const KernelDefinitions: {
|
|
|
2726
2925
|
}, {
|
|
2727
2926
|
readonly mode: 'value';
|
|
2728
2927
|
readonly value: string;
|
|
2729
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
2928
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2929
|
+
policy: string;
|
|
2930
|
+
object: string;
|
|
2931
|
+
} | {
|
|
2932
|
+
checks: {
|
|
2933
|
+
policy: string;
|
|
2934
|
+
object: string;
|
|
2935
|
+
}[];
|
|
2936
|
+
}, {
|
|
2937
|
+
readonly mode: 'value';
|
|
2938
|
+
readonly value: {
|
|
2939
|
+
allowed: boolean;
|
|
2940
|
+
} | {
|
|
2941
|
+
decisions: {
|
|
2942
|
+
allowed: boolean;
|
|
2943
|
+
}[];
|
|
2944
|
+
};
|
|
2945
|
+
}, "authenticated", true, false>>, "can", unknown>>>>];
|
|
2730
2946
|
readonly properties: {
|
|
2731
2947
|
readonly origin: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "origin", "self", undefined>;
|
|
2732
2948
|
readonly dependencyContext: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "dependencyContext", "self", never>;
|
|
@@ -2800,10 +3016,19 @@ declare const KernelDefinitions: {
|
|
|
2800
3016
|
can: builder.Method<builder.CallableProjection<{
|
|
2801
3017
|
policy: string;
|
|
2802
3018
|
object: string;
|
|
3019
|
+
} | {
|
|
3020
|
+
checks: {
|
|
3021
|
+
policy: string;
|
|
3022
|
+
object: string;
|
|
3023
|
+
}[];
|
|
2803
3024
|
}, {
|
|
2804
3025
|
readonly mode: 'value';
|
|
2805
3026
|
readonly value: {
|
|
2806
3027
|
allowed: boolean;
|
|
3028
|
+
} | {
|
|
3029
|
+
decisions: {
|
|
3030
|
+
allowed: boolean;
|
|
3031
|
+
}[];
|
|
2807
3032
|
};
|
|
2808
3033
|
}, "authenticated", true, false>>;
|
|
2809
3034
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -2943,14 +3168,6 @@ declare const KernelDefinitions: {
|
|
|
2943
3168
|
readonly mode: 'value';
|
|
2944
3169
|
readonly value: string;
|
|
2945
3170
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2946
|
-
policy: string;
|
|
2947
|
-
object: string;
|
|
2948
|
-
}, {
|
|
2949
|
-
readonly mode: 'value';
|
|
2950
|
-
readonly value: {
|
|
2951
|
-
allowed: boolean;
|
|
2952
|
-
};
|
|
2953
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
2954
3171
|
audience?: string | undefined;
|
|
2955
3172
|
ttlSeconds: number;
|
|
2956
3173
|
grant?: unknown;
|
|
@@ -2965,7 +3182,24 @@ declare const KernelDefinitions: {
|
|
|
2965
3182
|
}, {
|
|
2966
3183
|
readonly mode: 'value';
|
|
2967
3184
|
readonly value: string;
|
|
2968
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
3185
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
3186
|
+
policy: string;
|
|
3187
|
+
object: string;
|
|
3188
|
+
} | {
|
|
3189
|
+
checks: {
|
|
3190
|
+
policy: string;
|
|
3191
|
+
object: string;
|
|
3192
|
+
}[];
|
|
3193
|
+
}, {
|
|
3194
|
+
readonly mode: 'value';
|
|
3195
|
+
readonly value: {
|
|
3196
|
+
allowed: boolean;
|
|
3197
|
+
} | {
|
|
3198
|
+
decisions: {
|
|
3199
|
+
allowed: boolean;
|
|
3200
|
+
}[];
|
|
3201
|
+
};
|
|
3202
|
+
}, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "frozen", builder.ClassOwnerProjection<"node", {
|
|
2969
3203
|
readonly abstract: true;
|
|
2970
3204
|
readonly depth: 1;
|
|
2971
3205
|
readonly properties: {
|
|
@@ -3009,10 +3243,19 @@ declare const KernelDefinitions: {
|
|
|
3009
3243
|
can: builder.Method<builder.CallableProjection<{
|
|
3010
3244
|
policy: string;
|
|
3011
3245
|
object: string;
|
|
3246
|
+
} | {
|
|
3247
|
+
checks: {
|
|
3248
|
+
policy: string;
|
|
3249
|
+
object: string;
|
|
3250
|
+
}[];
|
|
3012
3251
|
}, {
|
|
3013
3252
|
readonly mode: 'value';
|
|
3014
3253
|
readonly value: {
|
|
3015
3254
|
allowed: boolean;
|
|
3255
|
+
} | {
|
|
3256
|
+
decisions: {
|
|
3257
|
+
allowed: boolean;
|
|
3258
|
+
}[];
|
|
3016
3259
|
};
|
|
3017
3260
|
}, "authenticated", true, false>>;
|
|
3018
3261
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -3152,14 +3395,6 @@ declare const KernelDefinitions: {
|
|
|
3152
3395
|
readonly mode: 'value';
|
|
3153
3396
|
readonly value: string;
|
|
3154
3397
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
3155
|
-
policy: string;
|
|
3156
|
-
object: string;
|
|
3157
|
-
}, {
|
|
3158
|
-
readonly mode: 'value';
|
|
3159
|
-
readonly value: {
|
|
3160
|
-
allowed: boolean;
|
|
3161
|
-
};
|
|
3162
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
3163
3398
|
audience?: string | undefined;
|
|
3164
3399
|
ttlSeconds: number;
|
|
3165
3400
|
grant?: unknown;
|
|
@@ -3174,7 +3409,24 @@ declare const KernelDefinitions: {
|
|
|
3174
3409
|
}, {
|
|
3175
3410
|
readonly mode: 'value';
|
|
3176
3411
|
readonly value: string;
|
|
3177
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
3412
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
3413
|
+
policy: string;
|
|
3414
|
+
object: string;
|
|
3415
|
+
} | {
|
|
3416
|
+
checks: {
|
|
3417
|
+
policy: string;
|
|
3418
|
+
object: string;
|
|
3419
|
+
}[];
|
|
3420
|
+
}, {
|
|
3421
|
+
readonly mode: 'value';
|
|
3422
|
+
readonly value: {
|
|
3423
|
+
allowed: boolean;
|
|
3424
|
+
} | {
|
|
3425
|
+
decisions: {
|
|
3426
|
+
allowed: boolean;
|
|
3427
|
+
}[];
|
|
3428
|
+
};
|
|
3429
|
+
}, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "iss", builder.ClassOwnerProjection<"node", {
|
|
3178
3430
|
readonly abstract: true;
|
|
3179
3431
|
readonly depth: 1;
|
|
3180
3432
|
readonly properties: {
|
|
@@ -3218,10 +3470,19 @@ declare const KernelDefinitions: {
|
|
|
3218
3470
|
can: builder.Method<builder.CallableProjection<{
|
|
3219
3471
|
policy: string;
|
|
3220
3472
|
object: string;
|
|
3473
|
+
} | {
|
|
3474
|
+
checks: {
|
|
3475
|
+
policy: string;
|
|
3476
|
+
object: string;
|
|
3477
|
+
}[];
|
|
3221
3478
|
}, {
|
|
3222
3479
|
readonly mode: 'value';
|
|
3223
3480
|
readonly value: {
|
|
3224
3481
|
allowed: boolean;
|
|
3482
|
+
} | {
|
|
3483
|
+
decisions: {
|
|
3484
|
+
allowed: boolean;
|
|
3485
|
+
}[];
|
|
3225
3486
|
};
|
|
3226
3487
|
}, "authenticated", true, false>>;
|
|
3227
3488
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -3361,14 +3622,6 @@ declare const KernelDefinitions: {
|
|
|
3361
3622
|
readonly mode: 'value';
|
|
3362
3623
|
readonly value: string;
|
|
3363
3624
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
3364
|
-
policy: string;
|
|
3365
|
-
object: string;
|
|
3366
|
-
}, {
|
|
3367
|
-
readonly mode: 'value';
|
|
3368
|
-
readonly value: {
|
|
3369
|
-
allowed: boolean;
|
|
3370
|
-
};
|
|
3371
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
3372
3625
|
audience?: string | undefined;
|
|
3373
3626
|
ttlSeconds: number;
|
|
3374
3627
|
grant?: unknown;
|
|
@@ -3383,7 +3636,24 @@ declare const KernelDefinitions: {
|
|
|
3383
3636
|
}, {
|
|
3384
3637
|
readonly mode: 'value';
|
|
3385
3638
|
readonly value: string;
|
|
3386
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
3639
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
3640
|
+
policy: string;
|
|
3641
|
+
object: string;
|
|
3642
|
+
} | {
|
|
3643
|
+
checks: {
|
|
3644
|
+
policy: string;
|
|
3645
|
+
object: string;
|
|
3646
|
+
}[];
|
|
3647
|
+
}, {
|
|
3648
|
+
readonly mode: 'value';
|
|
3649
|
+
readonly value: {
|
|
3650
|
+
allowed: boolean;
|
|
3651
|
+
} | {
|
|
3652
|
+
decisions: {
|
|
3653
|
+
allowed: boolean;
|
|
3654
|
+
}[];
|
|
3655
|
+
};
|
|
3656
|
+
}, "authenticated", true, false>>, "can", unknown>>, never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "sub", builder.ClassOwnerProjection<"node", {
|
|
3387
3657
|
readonly abstract: true;
|
|
3388
3658
|
readonly depth: 1;
|
|
3389
3659
|
readonly properties: {
|
|
@@ -3427,10 +3697,19 @@ declare const KernelDefinitions: {
|
|
|
3427
3697
|
can: builder.Method<builder.CallableProjection<{
|
|
3428
3698
|
policy: string;
|
|
3429
3699
|
object: string;
|
|
3700
|
+
} | {
|
|
3701
|
+
checks: {
|
|
3702
|
+
policy: string;
|
|
3703
|
+
object: string;
|
|
3704
|
+
}[];
|
|
3430
3705
|
}, {
|
|
3431
3706
|
readonly mode: 'value';
|
|
3432
3707
|
readonly value: {
|
|
3433
3708
|
allowed: boolean;
|
|
3709
|
+
} | {
|
|
3710
|
+
decisions: {
|
|
3711
|
+
allowed: boolean;
|
|
3712
|
+
}[];
|
|
3434
3713
|
};
|
|
3435
3714
|
}, "authenticated", true, false>>;
|
|
3436
3715
|
whoami: builder.Method<builder.CallableProjection<Record<string, never>, {
|
|
@@ -3570,14 +3849,6 @@ declare const KernelDefinitions: {
|
|
|
3570
3849
|
readonly mode: 'value';
|
|
3571
3850
|
readonly value: string;
|
|
3572
3851
|
}, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
3573
|
-
policy: string;
|
|
3574
|
-
object: string;
|
|
3575
|
-
}, {
|
|
3576
|
-
readonly mode: 'value';
|
|
3577
|
-
readonly value: {
|
|
3578
|
-
allowed: boolean;
|
|
3579
|
-
};
|
|
3580
|
-
}, "authenticated", true, false>>, "can", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
3581
3852
|
audience?: string | undefined;
|
|
3582
3853
|
ttlSeconds: number;
|
|
3583
3854
|
grant?: unknown;
|
|
@@ -3592,7 +3863,24 @@ declare const KernelDefinitions: {
|
|
|
3592
3863
|
}, {
|
|
3593
3864
|
readonly mode: 'value';
|
|
3594
3865
|
readonly value: string;
|
|
3595
|
-
}, "authorized", true, false>>, "impersonate", unknown
|
|
3866
|
+
}, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
|
|
3867
|
+
policy: string;
|
|
3868
|
+
object: string;
|
|
3869
|
+
} | {
|
|
3870
|
+
checks: {
|
|
3871
|
+
policy: string;
|
|
3872
|
+
object: string;
|
|
3873
|
+
}[];
|
|
3874
|
+
}, {
|
|
3875
|
+
readonly mode: 'value';
|
|
3876
|
+
readonly value: {
|
|
3877
|
+
allowed: boolean;
|
|
3878
|
+
} | {
|
|
3879
|
+
decisions: {
|
|
3880
|
+
allowed: boolean;
|
|
3881
|
+
}[];
|
|
3882
|
+
};
|
|
3883
|
+
}, "authenticated", true, false>>, "can", unknown>>, never> | (builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "dependencyContext", "self", never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "origin", "self", undefined> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "schema", "self", never> | builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "schemaRevision", "self", never>);
|
|
3596
3884
|
readonly abstractInstanceMethods: never;
|
|
3597
3885
|
readonly abstractStaticMethods: never;
|
|
3598
3886
|
readonly effectiveInstanceMethods: never;
|
|
@@ -4911,6 +5199,31 @@ export declare const AuthorityRelations: Readonly<{
|
|
|
4911
5199
|
}>;
|
|
4912
5200
|
/** Exact authorized Kernel Functions for which pristine Root receives direct can_use authority. */
|
|
4913
5201
|
export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
|
|
5202
|
+
operation: string;
|
|
5203
|
+
domains: ({
|
|
5204
|
+
artifact: {
|
|
5205
|
+
digest: string;
|
|
5206
|
+
mediaType: string;
|
|
5207
|
+
size: number;
|
|
5208
|
+
};
|
|
5209
|
+
currentRevision?: string | null | undefined;
|
|
5210
|
+
} | {
|
|
5211
|
+
publication: {
|
|
5212
|
+
url: string;
|
|
5213
|
+
token?: string | undefined;
|
|
5214
|
+
etag?: string | undefined;
|
|
5215
|
+
};
|
|
5216
|
+
revision?: string | undefined;
|
|
5217
|
+
currentRevision?: string | null | undefined;
|
|
5218
|
+
})[];
|
|
5219
|
+
}, {
|
|
5220
|
+
readonly mode: 'binary';
|
|
5221
|
+
}, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
|
|
5222
|
+
readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"install"> & {
|
|
5223
|
+
readonly origin: "kernel.astrale.ai";
|
|
5224
|
+
};
|
|
5225
|
+
readonly key: "kernel.astrale.ai:function.install";
|
|
5226
|
+
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
|
|
4914
5227
|
invocation?: {
|
|
4915
5228
|
source: string;
|
|
4916
5229
|
id: string;
|
|
@@ -4942,279 +5255,26 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
|
|
|
4942
5255
|
readonly origin: "kernel.astrale.ai";
|
|
4943
5256
|
};
|
|
4944
5257
|
readonly key: "kernel.astrale.ai:function.journal";
|
|
4945
|
-
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
|
|
4946
|
-
idempotencyKey: string;
|
|
4947
|
-
identities: ({
|
|
4948
|
-
id: string;
|
|
4949
|
-
mode: "external";
|
|
4950
|
-
credential: string;
|
|
4951
|
-
} | {
|
|
4952
|
-
id: string;
|
|
4953
|
-
mode: "self";
|
|
4954
|
-
publicKey: unknown;
|
|
4955
|
-
credential: string;
|
|
4956
|
-
})[];
|
|
4957
|
-
}, {
|
|
4958
|
-
readonly mode: 'value';
|
|
4959
|
-
readonly value: {
|
|
4960
|
-
identities: {
|
|
4961
|
-
id: string;
|
|
4962
|
-
iss: string;
|
|
4963
|
-
sub: string;
|
|
4964
|
-
}[];
|
|
4965
|
-
};
|
|
4966
|
-
}, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
|
|
4967
|
-
readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"register"> & {
|
|
4968
|
-
readonly origin: "kernel.astrale.ai";
|
|
4969
|
-
};
|
|
4970
|
-
readonly key: "kernel.astrale.ai:function.register";
|
|
4971
5258
|
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
|
|
4972
5259
|
ast: {
|
|
4973
|
-
format: "astrale.graph.
|
|
4974
|
-
version: "
|
|
4975
|
-
|
|
5260
|
+
format: "astrale.graph.mutation";
|
|
5261
|
+
version: "v3";
|
|
5262
|
+
preconditions: ({
|
|
4976
5263
|
kind: "node";
|
|
4977
|
-
|
|
4978
|
-
|
|
4979
|
-
|
|
5264
|
+
node: string;
|
|
5265
|
+
class: string;
|
|
5266
|
+
props?: {
|
|
5267
|
+
equals: Record<string, unknown>;
|
|
5268
|
+
absent?: string[] | undefined;
|
|
4980
5269
|
} | {
|
|
4981
|
-
|
|
4982
|
-
|
|
4983
|
-
origin: string;
|
|
4984
|
-
kind: "class";
|
|
4985
|
-
name: string;
|
|
4986
|
-
};
|
|
4987
|
-
})[];
|
|
4988
|
-
binding: string;
|
|
5270
|
+
absent: string[];
|
|
5271
|
+
} | undefined;
|
|
4989
5272
|
} | {
|
|
4990
5273
|
kind: "edge";
|
|
4991
|
-
|
|
4992
|
-
kind: "class";
|
|
4993
|
-
class: {
|
|
4994
|
-
origin: string;
|
|
4995
|
-
kind: "class";
|
|
4996
|
-
name: string;
|
|
4997
|
-
};
|
|
4998
|
-
}[];
|
|
4999
|
-
bindings: {
|
|
5274
|
+
edge: {
|
|
5000
5275
|
source: string;
|
|
5001
|
-
edge: string;
|
|
5002
5276
|
target: string;
|
|
5003
|
-
|
|
5004
|
-
};
|
|
5005
|
-
steps: ({
|
|
5006
|
-
op: "filter";
|
|
5007
|
-
binding: string;
|
|
5008
|
-
predicate: {
|
|
5009
|
-
kind: "class.satisfies";
|
|
5010
|
-
class: {
|
|
5011
|
-
origin: string;
|
|
5012
|
-
kind: "class";
|
|
5013
|
-
name: string;
|
|
5014
|
-
};
|
|
5015
|
-
} | {
|
|
5016
|
-
kind: "class.equal";
|
|
5017
|
-
class: {
|
|
5018
|
-
origin: string;
|
|
5019
|
-
kind: "class";
|
|
5020
|
-
name: string;
|
|
5021
|
-
};
|
|
5022
|
-
} | {
|
|
5023
|
-
kind: "property.equal";
|
|
5024
|
-
property: string;
|
|
5025
|
-
value: unknown;
|
|
5026
|
-
} | {
|
|
5027
|
-
kind: "property.present";
|
|
5028
|
-
property: string;
|
|
5029
|
-
} | {
|
|
5030
|
-
kind: "identity.equal";
|
|
5031
|
-
identity: string | {
|
|
5032
|
-
source: string;
|
|
5033
|
-
target: string;
|
|
5034
|
-
class: string;
|
|
5035
|
-
};
|
|
5036
|
-
};
|
|
5037
|
-
} | {
|
|
5038
|
-
op: "expand";
|
|
5039
|
-
from: string;
|
|
5040
|
-
via: {
|
|
5041
|
-
origin: string;
|
|
5042
|
-
kind: "class";
|
|
5043
|
-
name: string;
|
|
5044
|
-
}[];
|
|
5045
|
-
direction: "incident" | "incoming" | "outgoing";
|
|
5046
|
-
bindings: {
|
|
5047
|
-
edge: string;
|
|
5048
|
-
node: string;
|
|
5049
|
-
};
|
|
5050
|
-
})[];
|
|
5051
|
-
select: {
|
|
5052
|
-
kind: "graph";
|
|
5053
|
-
binding: string;
|
|
5054
|
-
order?: {
|
|
5055
|
-
property: string;
|
|
5056
|
-
direction: "asc" | "desc";
|
|
5057
|
-
unranked: "first" | "last";
|
|
5058
|
-
} | undefined;
|
|
5059
|
-
} | {
|
|
5060
|
-
kind: "nodes";
|
|
5061
|
-
binding: string;
|
|
5062
|
-
projection: {
|
|
5063
|
-
kind: "reference" | "value";
|
|
5064
|
-
};
|
|
5065
|
-
order?: {
|
|
5066
|
-
property: string;
|
|
5067
|
-
direction: "asc" | "desc";
|
|
5068
|
-
unranked: "first" | "last";
|
|
5069
|
-
} | undefined;
|
|
5070
|
-
} | {
|
|
5071
|
-
kind: "edges";
|
|
5072
|
-
binding: string;
|
|
5073
|
-
projection: {
|
|
5074
|
-
edge: "reference" | "value";
|
|
5075
|
-
source: "reference" | "value";
|
|
5076
|
-
target: "reference" | "value";
|
|
5077
|
-
};
|
|
5078
|
-
order?: {
|
|
5079
|
-
property: string;
|
|
5080
|
-
direction: "asc" | "desc";
|
|
5081
|
-
unranked: "first" | "last";
|
|
5082
|
-
} | undefined;
|
|
5083
|
-
};
|
|
5084
|
-
};
|
|
5085
|
-
expected?: {
|
|
5086
|
-
origin: string;
|
|
5087
|
-
revision: string;
|
|
5088
|
-
}[] | undefined;
|
|
5089
|
-
page: {
|
|
5090
|
-
size: number;
|
|
5091
|
-
after?: string | undefined;
|
|
5092
|
-
};
|
|
5093
|
-
}, {
|
|
5094
|
-
readonly mode: 'value';
|
|
5095
|
-
readonly value: {
|
|
5096
|
-
result: {
|
|
5097
|
-
kind: "graph";
|
|
5098
|
-
graph: {
|
|
5099
|
-
nodes: {
|
|
5100
|
-
id: string;
|
|
5101
|
-
class: string;
|
|
5102
|
-
props: Record<string, unknown>;
|
|
5103
|
-
}[];
|
|
5104
|
-
edges: {
|
|
5105
|
-
source: string;
|
|
5106
|
-
target: string;
|
|
5107
|
-
class: string;
|
|
5108
|
-
slug?: import("../../graph/edge/index.js").EdgeSlug | undefined;
|
|
5109
|
-
props: Record<string, unknown>;
|
|
5110
|
-
}[];
|
|
5111
|
-
};
|
|
5112
|
-
selection: {
|
|
5113
|
-
kind: "node";
|
|
5114
|
-
ids: string[];
|
|
5115
|
-
} | {
|
|
5116
|
-
kind: "edge";
|
|
5117
|
-
keys: {
|
|
5118
|
-
source: string;
|
|
5119
|
-
target: string;
|
|
5120
|
-
class: string;
|
|
5121
|
-
}[];
|
|
5122
|
-
};
|
|
5123
|
-
} | {
|
|
5124
|
-
kind: "nodes";
|
|
5125
|
-
nodes: ({
|
|
5126
|
-
kind: "reference";
|
|
5127
|
-
value: {
|
|
5128
|
-
id: string;
|
|
5129
|
-
class: string;
|
|
5130
|
-
};
|
|
5131
|
-
} | {
|
|
5132
|
-
kind: "value";
|
|
5133
|
-
value: {
|
|
5134
|
-
id: string;
|
|
5135
|
-
class: string;
|
|
5136
|
-
props: Record<string, unknown>;
|
|
5137
|
-
};
|
|
5138
|
-
})[];
|
|
5139
|
-
} | {
|
|
5140
|
-
kind: "edges";
|
|
5141
|
-
edges: {
|
|
5142
|
-
edge: {
|
|
5143
|
-
kind: "reference";
|
|
5144
|
-
value: {
|
|
5145
|
-
source: string;
|
|
5146
|
-
target: string;
|
|
5147
|
-
class: string;
|
|
5148
|
-
};
|
|
5149
|
-
} | {
|
|
5150
|
-
kind: "value";
|
|
5151
|
-
value: {
|
|
5152
|
-
source: string;
|
|
5153
|
-
target: string;
|
|
5154
|
-
class: string;
|
|
5155
|
-
slug?: import("../../graph/edge/index.js").EdgeSlug | undefined;
|
|
5156
|
-
props: Record<string, unknown>;
|
|
5157
|
-
};
|
|
5158
|
-
};
|
|
5159
|
-
source: {
|
|
5160
|
-
kind: "reference";
|
|
5161
|
-
value: {
|
|
5162
|
-
id: string;
|
|
5163
|
-
class: string;
|
|
5164
|
-
};
|
|
5165
|
-
} | {
|
|
5166
|
-
kind: "value";
|
|
5167
|
-
value: {
|
|
5168
|
-
id: string;
|
|
5169
|
-
class: string;
|
|
5170
|
-
props: Record<string, unknown>;
|
|
5171
|
-
};
|
|
5172
|
-
};
|
|
5173
|
-
target: {
|
|
5174
|
-
kind: "reference";
|
|
5175
|
-
value: {
|
|
5176
|
-
id: string;
|
|
5177
|
-
class: string;
|
|
5178
|
-
};
|
|
5179
|
-
} | {
|
|
5180
|
-
kind: "value";
|
|
5181
|
-
value: {
|
|
5182
|
-
id: string;
|
|
5183
|
-
class: string;
|
|
5184
|
-
props: Record<string, unknown>;
|
|
5185
|
-
};
|
|
5186
|
-
};
|
|
5187
|
-
}[];
|
|
5188
|
-
};
|
|
5189
|
-
page: {
|
|
5190
|
-
next?: string | undefined;
|
|
5191
|
-
};
|
|
5192
|
-
};
|
|
5193
|
-
}, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
|
|
5194
|
-
readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"query"> & {
|
|
5195
|
-
readonly origin: "kernel.astrale.ai";
|
|
5196
|
-
};
|
|
5197
|
-
readonly key: "kernel.astrale.ai:function.query";
|
|
5198
|
-
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
|
|
5199
|
-
ast: {
|
|
5200
|
-
format: "astrale.graph.mutation";
|
|
5201
|
-
version: "v3";
|
|
5202
|
-
preconditions: ({
|
|
5203
|
-
kind: "node";
|
|
5204
|
-
node: string;
|
|
5205
|
-
class: string;
|
|
5206
|
-
props?: {
|
|
5207
|
-
equals: Record<string, unknown>;
|
|
5208
|
-
absent?: string[] | undefined;
|
|
5209
|
-
} | {
|
|
5210
|
-
absent: string[];
|
|
5211
|
-
} | undefined;
|
|
5212
|
-
} | {
|
|
5213
|
-
kind: "edge";
|
|
5214
|
-
edge: {
|
|
5215
|
-
source: string;
|
|
5216
|
-
target: string;
|
|
5217
|
-
class: string;
|
|
5277
|
+
class: string;
|
|
5218
5278
|
};
|
|
5219
5279
|
slug?: unknown;
|
|
5220
5280
|
props?: {
|
|
@@ -5425,51 +5485,279 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
|
|
|
5425
5485
|
};
|
|
5426
5486
|
readonly key: "kernel.astrale.ai:function.mutate";
|
|
5427
5487
|
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
|
|
5428
|
-
|
|
5429
|
-
|
|
5430
|
-
|
|
5431
|
-
|
|
5432
|
-
|
|
5433
|
-
|
|
5434
|
-
|
|
5435
|
-
|
|
5436
|
-
|
|
5437
|
-
|
|
5438
|
-
|
|
5439
|
-
token?: string | undefined;
|
|
5440
|
-
etag?: string | undefined;
|
|
5441
|
-
};
|
|
5442
|
-
revision?: string | undefined;
|
|
5443
|
-
currentRevision?: string | null | undefined;
|
|
5444
|
-
})[];
|
|
5445
|
-
}, {
|
|
5446
|
-
readonly mode: 'binary';
|
|
5447
|
-
}, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
|
|
5448
|
-
readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"install"> & {
|
|
5449
|
-
readonly origin: "kernel.astrale.ai";
|
|
5450
|
-
};
|
|
5451
|
-
readonly key: "kernel.astrale.ai:function.install";
|
|
5452
|
-
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
|
|
5453
|
-
operation: string;
|
|
5454
|
-
domains: string[];
|
|
5455
|
-
data: {
|
|
5456
|
-
mode: "destructive" | "safe";
|
|
5457
|
-
};
|
|
5458
|
-
}, {
|
|
5459
|
-
readonly mode: 'value';
|
|
5460
|
-
readonly value: {
|
|
5461
|
-
operation: string;
|
|
5462
|
-
transitions: {
|
|
5463
|
-
intent: {
|
|
5464
|
-
transition: string;
|
|
5465
|
-
operation: string;
|
|
5466
|
-
origin: string;
|
|
5467
|
-
previous: {
|
|
5488
|
+
ast: {
|
|
5489
|
+
format: "astrale.graph.query";
|
|
5490
|
+
version: "v6";
|
|
5491
|
+
source: {
|
|
5492
|
+
kind: "node";
|
|
5493
|
+
terms: ({
|
|
5494
|
+
kind: "path";
|
|
5495
|
+
path: string;
|
|
5496
|
+
} | {
|
|
5497
|
+
kind: "class";
|
|
5498
|
+
class: {
|
|
5468
5499
|
origin: string;
|
|
5469
|
-
|
|
5470
|
-
|
|
5471
|
-
}
|
|
5472
|
-
|
|
5500
|
+
kind: "class";
|
|
5501
|
+
name: string;
|
|
5502
|
+
};
|
|
5503
|
+
})[];
|
|
5504
|
+
binding: string;
|
|
5505
|
+
} | {
|
|
5506
|
+
kind: "edge";
|
|
5507
|
+
terms: {
|
|
5508
|
+
kind: "class";
|
|
5509
|
+
class: {
|
|
5510
|
+
origin: string;
|
|
5511
|
+
kind: "class";
|
|
5512
|
+
name: string;
|
|
5513
|
+
};
|
|
5514
|
+
}[];
|
|
5515
|
+
bindings: {
|
|
5516
|
+
source: string;
|
|
5517
|
+
edge: string;
|
|
5518
|
+
target: string;
|
|
5519
|
+
};
|
|
5520
|
+
};
|
|
5521
|
+
steps: ({
|
|
5522
|
+
op: "filter";
|
|
5523
|
+
binding: string;
|
|
5524
|
+
predicate: {
|
|
5525
|
+
kind: "class.satisfies";
|
|
5526
|
+
class: {
|
|
5527
|
+
origin: string;
|
|
5528
|
+
kind: "class";
|
|
5529
|
+
name: string;
|
|
5530
|
+
};
|
|
5531
|
+
} | {
|
|
5532
|
+
kind: "class.equal";
|
|
5533
|
+
class: {
|
|
5534
|
+
origin: string;
|
|
5535
|
+
kind: "class";
|
|
5536
|
+
name: string;
|
|
5537
|
+
};
|
|
5538
|
+
} | {
|
|
5539
|
+
kind: "property.equal";
|
|
5540
|
+
property: string;
|
|
5541
|
+
value: unknown;
|
|
5542
|
+
} | {
|
|
5543
|
+
kind: "property.present";
|
|
5544
|
+
property: string;
|
|
5545
|
+
} | {
|
|
5546
|
+
kind: "identity.equal";
|
|
5547
|
+
identity: string | {
|
|
5548
|
+
source: string;
|
|
5549
|
+
target: string;
|
|
5550
|
+
class: string;
|
|
5551
|
+
};
|
|
5552
|
+
};
|
|
5553
|
+
} | {
|
|
5554
|
+
op: "expand";
|
|
5555
|
+
from: string;
|
|
5556
|
+
via: {
|
|
5557
|
+
origin: string;
|
|
5558
|
+
kind: "class";
|
|
5559
|
+
name: string;
|
|
5560
|
+
}[];
|
|
5561
|
+
direction: "incident" | "incoming" | "outgoing";
|
|
5562
|
+
bindings: {
|
|
5563
|
+
edge: string;
|
|
5564
|
+
node: string;
|
|
5565
|
+
};
|
|
5566
|
+
})[];
|
|
5567
|
+
select: {
|
|
5568
|
+
kind: "graph";
|
|
5569
|
+
binding: string;
|
|
5570
|
+
order?: {
|
|
5571
|
+
property: string;
|
|
5572
|
+
direction: "asc" | "desc";
|
|
5573
|
+
unranked: "first" | "last";
|
|
5574
|
+
} | undefined;
|
|
5575
|
+
} | {
|
|
5576
|
+
kind: "nodes";
|
|
5577
|
+
binding: string;
|
|
5578
|
+
projection: {
|
|
5579
|
+
kind: "reference" | "value";
|
|
5580
|
+
};
|
|
5581
|
+
order?: {
|
|
5582
|
+
property: string;
|
|
5583
|
+
direction: "asc" | "desc";
|
|
5584
|
+
unranked: "first" | "last";
|
|
5585
|
+
} | undefined;
|
|
5586
|
+
} | {
|
|
5587
|
+
kind: "edges";
|
|
5588
|
+
binding: string;
|
|
5589
|
+
projection: {
|
|
5590
|
+
edge: "reference" | "value";
|
|
5591
|
+
source: "reference" | "value";
|
|
5592
|
+
target: "reference" | "value";
|
|
5593
|
+
};
|
|
5594
|
+
order?: {
|
|
5595
|
+
property: string;
|
|
5596
|
+
direction: "asc" | "desc";
|
|
5597
|
+
unranked: "first" | "last";
|
|
5598
|
+
} | undefined;
|
|
5599
|
+
};
|
|
5600
|
+
};
|
|
5601
|
+
expected?: {
|
|
5602
|
+
origin: string;
|
|
5603
|
+
revision: string;
|
|
5604
|
+
}[] | undefined;
|
|
5605
|
+
page: {
|
|
5606
|
+
size: number;
|
|
5607
|
+
after?: string | undefined;
|
|
5608
|
+
};
|
|
5609
|
+
}, {
|
|
5610
|
+
readonly mode: 'value';
|
|
5611
|
+
readonly value: {
|
|
5612
|
+
result: {
|
|
5613
|
+
kind: "graph";
|
|
5614
|
+
graph: {
|
|
5615
|
+
nodes: {
|
|
5616
|
+
id: string;
|
|
5617
|
+
class: string;
|
|
5618
|
+
props: Record<string, unknown>;
|
|
5619
|
+
}[];
|
|
5620
|
+
edges: {
|
|
5621
|
+
source: string;
|
|
5622
|
+
target: string;
|
|
5623
|
+
class: string;
|
|
5624
|
+
slug?: import("../../graph/edge/index.js").EdgeSlug | undefined;
|
|
5625
|
+
props: Record<string, unknown>;
|
|
5626
|
+
}[];
|
|
5627
|
+
};
|
|
5628
|
+
selection: {
|
|
5629
|
+
kind: "node";
|
|
5630
|
+
ids: string[];
|
|
5631
|
+
} | {
|
|
5632
|
+
kind: "edge";
|
|
5633
|
+
keys: {
|
|
5634
|
+
source: string;
|
|
5635
|
+
target: string;
|
|
5636
|
+
class: string;
|
|
5637
|
+
}[];
|
|
5638
|
+
};
|
|
5639
|
+
} | {
|
|
5640
|
+
kind: "nodes";
|
|
5641
|
+
nodes: ({
|
|
5642
|
+
kind: "reference";
|
|
5643
|
+
value: {
|
|
5644
|
+
id: string;
|
|
5645
|
+
class: string;
|
|
5646
|
+
};
|
|
5647
|
+
} | {
|
|
5648
|
+
kind: "value";
|
|
5649
|
+
value: {
|
|
5650
|
+
id: string;
|
|
5651
|
+
class: string;
|
|
5652
|
+
props: Record<string, unknown>;
|
|
5653
|
+
};
|
|
5654
|
+
})[];
|
|
5655
|
+
} | {
|
|
5656
|
+
kind: "edges";
|
|
5657
|
+
edges: {
|
|
5658
|
+
edge: {
|
|
5659
|
+
kind: "reference";
|
|
5660
|
+
value: {
|
|
5661
|
+
source: string;
|
|
5662
|
+
target: string;
|
|
5663
|
+
class: string;
|
|
5664
|
+
};
|
|
5665
|
+
} | {
|
|
5666
|
+
kind: "value";
|
|
5667
|
+
value: {
|
|
5668
|
+
source: string;
|
|
5669
|
+
target: string;
|
|
5670
|
+
class: string;
|
|
5671
|
+
slug?: import("../../graph/edge/index.js").EdgeSlug | undefined;
|
|
5672
|
+
props: Record<string, unknown>;
|
|
5673
|
+
};
|
|
5674
|
+
};
|
|
5675
|
+
source: {
|
|
5676
|
+
kind: "reference";
|
|
5677
|
+
value: {
|
|
5678
|
+
id: string;
|
|
5679
|
+
class: string;
|
|
5680
|
+
};
|
|
5681
|
+
} | {
|
|
5682
|
+
kind: "value";
|
|
5683
|
+
value: {
|
|
5684
|
+
id: string;
|
|
5685
|
+
class: string;
|
|
5686
|
+
props: Record<string, unknown>;
|
|
5687
|
+
};
|
|
5688
|
+
};
|
|
5689
|
+
target: {
|
|
5690
|
+
kind: "reference";
|
|
5691
|
+
value: {
|
|
5692
|
+
id: string;
|
|
5693
|
+
class: string;
|
|
5694
|
+
};
|
|
5695
|
+
} | {
|
|
5696
|
+
kind: "value";
|
|
5697
|
+
value: {
|
|
5698
|
+
id: string;
|
|
5699
|
+
class: string;
|
|
5700
|
+
props: Record<string, unknown>;
|
|
5701
|
+
};
|
|
5702
|
+
};
|
|
5703
|
+
}[];
|
|
5704
|
+
};
|
|
5705
|
+
page: {
|
|
5706
|
+
next?: string | undefined;
|
|
5707
|
+
};
|
|
5708
|
+
};
|
|
5709
|
+
}, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
|
|
5710
|
+
readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"query"> & {
|
|
5711
|
+
readonly origin: "kernel.astrale.ai";
|
|
5712
|
+
};
|
|
5713
|
+
readonly key: "kernel.astrale.ai:function.query";
|
|
5714
|
+
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
|
|
5715
|
+
idempotencyKey: string;
|
|
5716
|
+
identities: ({
|
|
5717
|
+
id: string;
|
|
5718
|
+
mode: "external";
|
|
5719
|
+
credential: string;
|
|
5720
|
+
} | {
|
|
5721
|
+
id: string;
|
|
5722
|
+
mode: "self";
|
|
5723
|
+
publicKey: unknown;
|
|
5724
|
+
credential: string;
|
|
5725
|
+
})[];
|
|
5726
|
+
}, {
|
|
5727
|
+
readonly mode: 'value';
|
|
5728
|
+
readonly value: {
|
|
5729
|
+
identities: {
|
|
5730
|
+
id: string;
|
|
5731
|
+
iss: string;
|
|
5732
|
+
sub: string;
|
|
5733
|
+
}[];
|
|
5734
|
+
};
|
|
5735
|
+
}, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
|
|
5736
|
+
readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"register"> & {
|
|
5737
|
+
readonly origin: "kernel.astrale.ai";
|
|
5738
|
+
};
|
|
5739
|
+
readonly key: "kernel.astrale.ai:function.register";
|
|
5740
|
+
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
|
|
5741
|
+
operation: string;
|
|
5742
|
+
domains: string[];
|
|
5743
|
+
data: {
|
|
5744
|
+
mode: "destructive" | "safe";
|
|
5745
|
+
};
|
|
5746
|
+
}, {
|
|
5747
|
+
readonly mode: 'value';
|
|
5748
|
+
readonly value: {
|
|
5749
|
+
operation: string;
|
|
5750
|
+
transitions: {
|
|
5751
|
+
intent: {
|
|
5752
|
+
transition: string;
|
|
5753
|
+
operation: string;
|
|
5754
|
+
origin: string;
|
|
5755
|
+
previous: {
|
|
5756
|
+
origin: string;
|
|
5757
|
+
revision: string;
|
|
5758
|
+
generation: string;
|
|
5759
|
+
} | null;
|
|
5760
|
+
generation: {
|
|
5473
5761
|
origin: string;
|
|
5474
5762
|
revision: string;
|
|
5475
5763
|
generation: string;
|
|
@@ -5495,30 +5783,15 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
|
|
|
5495
5783
|
};
|
|
5496
5784
|
readonly key: "kernel.astrale.ai:function.uninstall";
|
|
5497
5785
|
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
|
|
5498
|
-
|
|
5499
|
-
|
|
5786
|
+
audience?: string | undefined;
|
|
5787
|
+
ttlSeconds: number;
|
|
5788
|
+
grant?: unknown;
|
|
5789
|
+
identity: string;
|
|
5500
5790
|
}, {
|
|
5501
5791
|
readonly mode: 'value';
|
|
5502
|
-
readonly value:
|
|
5503
|
-
|
|
5504
|
-
|
|
5505
|
-
sub: string;
|
|
5506
|
-
frozen: boolean;
|
|
5507
|
-
requiredClaims: ({
|
|
5508
|
-
claim: string;
|
|
5509
|
-
op: "contains";
|
|
5510
|
-
value: unknown;
|
|
5511
|
-
} | {
|
|
5512
|
-
claim: string;
|
|
5513
|
-
op: "eq";
|
|
5514
|
-
value: unknown;
|
|
5515
|
-
} | {
|
|
5516
|
-
claim: string;
|
|
5517
|
-
op: "exists";
|
|
5518
|
-
})[];
|
|
5519
|
-
} | null;
|
|
5520
|
-
}, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.whois"> & {
|
|
5521
|
-
readonly name: "whois";
|
|
5792
|
+
readonly value: string;
|
|
5793
|
+
}, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.impersonate"> & {
|
|
5794
|
+
readonly name: "impersonate";
|
|
5522
5795
|
readonly executable: true;
|
|
5523
5796
|
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
|
|
5524
5797
|
target: string;
|
|
@@ -5563,15 +5836,30 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
|
|
|
5563
5836
|
readonly name: "resolve";
|
|
5564
5837
|
readonly executable: true;
|
|
5565
5838
|
}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
|
|
5566
|
-
|
|
5567
|
-
|
|
5568
|
-
grant?: unknown;
|
|
5569
|
-
identity: string;
|
|
5839
|
+
iss: string;
|
|
5840
|
+
sub: string;
|
|
5570
5841
|
}, {
|
|
5571
5842
|
readonly mode: 'value';
|
|
5572
|
-
readonly value:
|
|
5573
|
-
|
|
5574
|
-
|
|
5843
|
+
readonly value: {
|
|
5844
|
+
id: string;
|
|
5845
|
+
iss: string;
|
|
5846
|
+
sub: string;
|
|
5847
|
+
frozen: boolean;
|
|
5848
|
+
requiredClaims: ({
|
|
5849
|
+
claim: string;
|
|
5850
|
+
op: "contains";
|
|
5851
|
+
value: unknown;
|
|
5852
|
+
} | {
|
|
5853
|
+
claim: string;
|
|
5854
|
+
op: "eq";
|
|
5855
|
+
value: unknown;
|
|
5856
|
+
} | {
|
|
5857
|
+
claim: string;
|
|
5858
|
+
op: "exists";
|
|
5859
|
+
})[];
|
|
5860
|
+
} | null;
|
|
5861
|
+
}, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.whois"> & {
|
|
5862
|
+
readonly name: "whois";
|
|
5575
5863
|
readonly executable: true;
|
|
5576
5864
|
}))[];
|
|
5577
5865
|
export { AuthorityOperationOrder, AuthorityOperations, operationOf } from '../authority/index.js';
|