@astrale-os/kernel-core 0.9.0-beta.53 → 0.9.0-beta.55

package/dist/schema/kernel/schema.js

@@ -71,6 +71,8 @@ export const AuthorityRelations = Object.freeze({
 export const KernelRootFunctions = Object.freeze([
     K.functions.query,
     K.functions.mutate,
+    K.functions.upload,
+    K.functions.download,
     K.functions.register,
     K.functions.install,
     K.functions.uninstall,

package/dist/schema/kernel/syscalls/contracts/blob.d.ts

@@ -0,0 +1,21 @@
+export declare const MAXIMUM_BLOB_BYTES = 104857600;
+export declare const blobSlot: import("zod").ZodObject<{
+    node: import("zod").ZodString;
+    property: import("zod").ZodString;
+}, import("zod/v4/core").$strict>;
+export declare const uploadInput: import("zod").ZodObject<{
+    mediaType: import("zod").ZodString;
+}, import("zod/v4/core").$strict>;
+export declare const uploadOutput: import("zod").ZodObject<{
+    receipt: import("zod").ZodString;
+    ref: import("zod").ZodObject<{
+        digest: import("zod").ZodString;
+        mediaType: import("zod").ZodString;
+        size: import("zod").ZodNumber;
+    }, import("zod/v4/core").$strict>;
+    expiresAt: import("zod").ZodString;
+}, import("zod/v4/core").$strict>;
+export declare const downloadInput: import("zod").ZodObject<{
+    node: import("zod").ZodString;
+    property: import("zod").ZodString;
+}, import("zod/v4/core").$strict>;

package/dist/schema/kernel/syscalls/contracts/blob.js

@@ -0,0 +1,16 @@
+import { patterns } from '@astrale-os/kernel-dsl/v1/addressing';
+import { fullMatch } from '@astrale-os/kernel-dsl/v1/value/full-match';
+import { strictObject, string } from 'zod';
+import { artifactRef } from './installation.js';
+export const MAXIMUM_BLOB_BYTES = 104_857_600;
+export const blobSlot = strictObject({
+    node: string().check(fullMatch('[A-Za-z0-9._-]{1,255}')),
+    property: string().check(fullMatch(patterns.propertyKeyFullMatch)),
+});
+export const uploadInput = strictObject({ mediaType: string().min(1) });
+export const uploadOutput = strictObject({
+    receipt: string().min(1),
+    ref: artifactRef,
+    expiresAt: string().min(1),
+});
+export const downloadInput = blobSlot;

package/dist/schema/kernel/syscalls/contracts/delegate.d.ts

@@ -2,6 +2,6 @@ export declare const delegateInput: import("zod").ZodObject<{
     principal: import("zod").ZodString;
     audience: import("zod").ZodString;
     ttlSeconds: import("zod").ZodNumber;
-    attenuation: import("zod").ZodUnknown;
+    attenuation: import("zod").ZodOptional<import("zod").ZodUnknown>;
 }, import("zod/v4/core").$strict>;
 export declare const delegateOutput: import("zod").ZodString;

package/dist/schema/kernel/syscalls/contracts/delegate.js

@@ -4,6 +4,7 @@ export const delegateInput = strictObject({
     principal: text,
     audience: text,
     ttlSeconds: number().int().min(1),
-    attenuation: unknownSchema(),
+    /** Optional; absence means the self expression. */
+    attenuation: unknownSchema().optional(),
 });
 export const delegateOutput = text;

package/dist/schema/kernel/syscalls/contracts/index.d.ts

@@ -1,4 +1,5 @@
 export { admitInput, admitOutput } from './admit.js';
+export { blobSlot, downloadInput, MAXIMUM_BLOB_BYTES, uploadInput, uploadOutput } from './blob.js';
 export { MAXIMUM_CHECKS, canInput, canOutput } from './can.js';
 export { delegateInput, delegateOutput } from './delegate.js';
 export { installInput, installReceipt, type DomainRequest, type InstallInput, type InstallReceipt, } from './install.js';

package/dist/schema/kernel/syscalls/contracts/index.js

@@ -1,4 +1,5 @@
 export { admitInput, admitOutput } from './admit.js';
+export { blobSlot, downloadInput, MAXIMUM_BLOB_BYTES, uploadInput, uploadOutput } from './blob.js';
 export { MAXIMUM_CHECKS, canInput, canOutput } from './can.js';
 export { delegateInput, delegateOutput } from './delegate.js';
 export { installInput, installReceipt, } from './install.js';

package/dist/schema/kernel/syscalls/declarations/delegate.d.ts

@@ -3,7 +3,7 @@ export declare const Delegate: builder.Method<builder.CallableProjection<{
     principal: string;
     audience: string;
     ttlSeconds: number;
-    attenuation: unknown;
+    attenuation?: unknown;
 }, {
     readonly mode: 'value';
     readonly value: string;

package/dist/schema/kernel/syscalls/declarations/download.d.ts

@@ -0,0 +1,7 @@
+import { type builder } from '@astrale-os/kernel-dsl/v1';
+export declare const Download: builder.Function<builder.CallableProjection<{
+    node: string;
+    property: string;
+}, {
+    readonly mode: 'binary';
+}, "authorized", false, false>>;

package/dist/schema/kernel/syscalls/declarations/download.js

@@ -0,0 +1,10 @@
+import { func, output } from '@astrale-os/kernel-dsl/v1';
+import { downloadInput } from '../contracts/index.js';
+import { usePolicy } from './use-policy.js';
+export const Download = func({
+    description: 'Stream an application blob from an authorized Node property.',
+    auth: 'authorized',
+    policy: usePolicy(() => Download),
+    input: downloadInput,
+    output: output.binary(),
+});

package/dist/schema/kernel/syscalls/declarations/index.d.ts

@@ -223,6 +223,26 @@ export declare const Functions: Readonly<{
             };
         };
     }, "authorized", false, false>>;
+    upload: builder.Function<builder.CallableProjection<import("@astrale-os/kernel-dsl/v1").BinaryInputProjection<{
+        mediaType: string;
+    }>, {
+        readonly mode: 'value';
+        readonly value: {
+            receipt: string;
+            ref: {
+                digest: string;
+                mediaType: string;
+                size: number;
+            };
+            expiresAt: string;
+        };
+    }, "authorized", false, false>>;
+    download: builder.Function<builder.CallableProjection<{
+        node: string;
+        property: string;
+    }, {
+        readonly mode: 'binary';
+    }, "authorized", false, false>>;
     mutate: builder.Function<builder.CallableProjection<{
         ast: {
             format: "astrale.graph.mutation";
@@ -379,29 +399,6 @@ export declare const Functions: Readonly<{
                 };
             })[];
             operations: ({
-                op: "edge.update";
-                edge: {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-                slug: unknown;
-                props?: {
-                    set: Record<string, unknown>;
-                    unset: string[];
-                } | undefined;
-            } | {
-                op: "edge.update";
-                edge: {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-                props: {
-                    set: Record<string, unknown>;
-                    unset: string[];
-                };
-            } | {
                 op: "node.create";
                 as: string;
                 class: string;
@@ -429,6 +426,29 @@ export declare const Functions: Readonly<{
                 };
                 slug?: unknown;
                 props: Record<string, unknown>;
+            } | {
+                op: "edge.update";
+                edge: {
+                    source: string;
+                    target: string;
+                    class: string;
+                };
+                slug: unknown;
+                props?: {
+                    set: Record<string, unknown>;
+                    unset: string[];
+                } | undefined;
+            } | {
+                op: "edge.update";
+                edge: {
+                    source: string;
+                    target: string;
+                    class: string;
+                };
+                props: {
+                    set: Record<string, unknown>;
+                    unset: string[];
+                };
             } | {
                 op: "edge.delete";
                 edge: {
@@ -572,7 +592,7 @@ export declare const IdentityMethods: Readonly<{
         principal: string;
         audience: string;
         ttlSeconds: number;
-        attenuation: unknown;
+        attenuation?: unknown;
     }, {
         readonly mode: 'value';
         readonly value: string;

package/dist/schema/kernel/syscalls/declarations/index.js

@@ -1,6 +1,7 @@
 import { Admit } from './admit.js';
 import { Can } from './can.js';
 import { Delegate } from './delegate.js';
+import { Download } from './download.js';
 import { Impersonate } from './impersonate.js';
 import { Install } from './install.js';
 import { Introspect } from './introspect.js';
@@ -10,11 +11,14 @@ import { Mutate } from './mutate.js';
 import { Query } from './query.js';
 import { Register } from './register.js';
 import { Uninstall } from './uninstall.js';
+import { Upload } from './upload.js';
 import { ViewResolve } from './view-resolve.js';
 import { Whoami } from './whoami.js';
 import { Whois } from './whois.js';
 export const Functions = Object.freeze({
     query: Query,
+    upload: Upload,
+    download: Download,
     mutate: Mutate,
     register: Register,
     install: Install,

package/dist/schema/kernel/syscalls/declarations/upload.d.ts

@@ -0,0 +1,15 @@
+import { type builder } from '@astrale-os/kernel-dsl/v1';
+export declare const Upload: builder.Function<builder.CallableProjection<import("@astrale-os/kernel-dsl/v1").BinaryInputProjection<{
+    mediaType: string;
+}>, {
+    readonly mode: 'value';
+    readonly value: {
+        receipt: string;
+        ref: {
+            digest: string;
+            mediaType: string;
+            size: number;
+        };
+        expiresAt: string;
+    };
+}, "authorized", false, false>>;

package/dist/schema/kernel/syscalls/declarations/upload.js

@@ -0,0 +1,10 @@
+import { func, input } from '@astrale-os/kernel-dsl/v1';
+import { MAXIMUM_BLOB_BYTES, uploadInput, uploadOutput } from '../contracts/index.js';
+import { usePolicy } from './use-policy.js';
+export const Upload = func({
+    description: 'Store application bytes in an upload receipt.',
+    auth: 'authorized',
+    policy: usePolicy(() => Upload),
+    input: input.binary(uploadInput, { maximumBytes: MAXIMUM_BLOB_BYTES }),
+    output: uploadOutput,
+});

package/dist/schema/kernel/syscalls/descriptors/functions.d.ts

@@ -7,3 +7,5 @@ export declare const install: FunctionSyscall<'kernel.astrale.ai', 'install', ty
 export declare const introspect: FunctionSyscall<'kernel.astrale.ai', 'introspect', typeof K.functions.introspect>;
 export declare const uninstall: FunctionSyscall<'kernel.astrale.ai', 'uninstall', typeof K.functions.uninstall>;
 export declare const journal: FunctionSyscall<'kernel.astrale.ai', 'journal', typeof K.functions.journal>;
+export declare const upload: FunctionSyscall<'kernel.astrale.ai', 'upload', typeof K.functions.upload>;
+export declare const download: FunctionSyscall<'kernel.astrale.ai', 'download', typeof K.functions.download>;

package/dist/schema/kernel/syscalls/descriptors/functions.js

@@ -8,3 +8,5 @@ export const install = functionSyscall(references.install, K.functions.install);
 export const introspect = functionSyscall(references.introspect, K.functions.introspect);
 export const uninstall = functionSyscall(references.uninstall, K.functions.uninstall);
 export const journal = functionSyscall(references.journal, K.functions.journal);
+export const upload = functionSyscall(references.upload, K.functions.upload);
+export const download = functionSyscall(references.download, K.functions.download);

package/dist/schema/kernel/syscalls/descriptors/identity.d.ts

@@ -6,7 +6,7 @@ export declare const delegate: import("./model.js").MethodSyscall<Readonly<{
     principal: string;
     audience: string;
     ttlSeconds: number;
-    attenuation: unknown;
+    attenuation?: unknown;
 }, {
     readonly mode: 'value';
     readonly value: string;

package/dist/schema/kernel/syscalls/descriptors/index.d.ts

@@ -1,5 +1,5 @@
 export type { FunctionSyscall, MethodSyscall, Syscall, SyscallRef } from './model.js';
-export { install, introspect, journal, mutate, register, query, uninstall } from './functions.js';
+export { download, install, introspect, journal, mutate, register, query, uninstall, upload, } from './functions.js';
 export * as identity from './identity.js';
 export * as function from './function.js';
 export * as view from './view.js';

package/dist/schema/kernel/syscalls/descriptors/index.js

@@ -1,4 +1,4 @@
-export { install, introspect, journal, mutate, register, query, uninstall } from './functions.js';
+export { download, install, introspect, journal, mutate, register, query, uninstall, upload, } from './functions.js';
 export * as identity from './identity.js';
 export * as function from './function.js';
 export * as view from './view.js';

package/dist/schema/kernel/syscalls/index.d.ts

@@ -1,4 +1,4 @@
 export type { FunctionSyscall, MethodSyscall, Syscall, SyscallRef } from './descriptors/index.js';
 export * as references from './references/index.js';
-export { install, introspect, journal, mutate, register, query, uninstall, } from './descriptors/index.js';
+export { download, install, introspect, journal, mutate, register, query, uninstall, upload, } from './descriptors/index.js';
 export { function, identity, view } from './descriptors/index.js';

package/dist/schema/kernel/syscalls/index.js

@@ -1,3 +1,3 @@
 export * as references from './references/index.js';
-export { install, introspect, journal, mutate, register, query, uninstall, } from './descriptors/index.js';
+export { download, install, introspect, journal, mutate, register, query, uninstall, upload, } from './descriptors/index.js';
 export { function, identity, view } from './descriptors/index.js';

package/dist/schema/kernel/syscalls/references/functions.d.ts

@@ -33,3 +33,13 @@ export declare const journal: Readonly<{
     kind: 'function';
     name: "journal";
 }>;
+export declare const upload: Readonly<{
+    origin: 'kernel.astrale.ai';
+    kind: 'function';
+    name: "upload";
+}>;
+export declare const download: Readonly<{
+    origin: 'kernel.astrale.ai';
+    kind: 'function';
+    name: "download";
+}>;

package/dist/schema/kernel/syscalls/references/functions.js

@@ -10,3 +10,5 @@ export const install = functionRef('install');
 export const introspect = functionRef('introspect');
 export const uninstall = functionRef('uninstall');
 export const journal = functionRef('journal');
+export const upload = functionRef('upload');
+export const download = functionRef('download');

package/dist/schema/kernel/syscalls/references/index.d.ts

@@ -1,5 +1,5 @@
 export type { FunctionRef, SyscallRef } from './reference.js';
-export { install, introspect, journal, mutate, register, query, uninstall } from './functions.js';
+export { download, install, introspect, journal, mutate, register, query, uninstall, upload, } from './functions.js';
 export * as identity from './identity.js';
 export * as function from './function.js';
 export * as view from './view.js';

package/dist/schema/kernel/syscalls/references/index.js

@@ -1,4 +1,4 @@
-export { install, introspect, journal, mutate, register, query, uninstall } from './functions.js';
+export { download, install, introspect, journal, mutate, register, query, uninstall, upload, } from './functions.js';
 export * as identity from './identity.js';
 export * as function from './function.js';
 export * as view from './view.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/kernel-core",
-  "version": "0.9.0-beta.53",
+  "version": "0.9.0-beta.55",
   "description": "Astrale Kernel Core - Types, Invariants, and Pure Logic",
   "license": "Apache-2.0",
   "repository": {
@@ -160,7 +160,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-os/kernel-dsl": "0.2.0-beta.38",
+    "@astrale-os/kernel-dsl": "0.2.0-beta.40",
     "@noble/hashes": "2.3.0",
     "@types/json-schema": "^7.0.15",
     "dequal": "2.0.3"
@@ -170,7 +170,7 @@
     "@types/node": "^25.2.3",
     "tsx": "4.23.12",
     "typescript": "7.0.2",
-    "vitest": "^4.1.10",
+    "vitest": "^5.0.1",
     "zod": "4.4.3"
   },
   "peerDependencies": {