npm - @astrale-os/kernel-core - Versions diffs - 0.9.0-beta.54 → 0.9.0-beta.55 - Mend

@astrale-os/kernel-core 0.9.0-beta.54 → 0.9.0-beta.55

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (50) hide show

package/dist/schema/kernel/schema.d.ts CHANGED Viewed

@@ -97,7 +97,7 @@ declare const KernelDefinitions: {
                     principal: string;
                     audience: string;
                     ttlSeconds: number;
-                    attenuation: unknown;
+                    attenuation?: unknown;
                 }, {
                     readonly mode: 'value';
                     readonly value: string;
@@ -230,14 +230,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -261,21 +268,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", "self"> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -481,7 +481,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -625,7 +625,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -754,14 +754,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+                identity: string;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -785,21 +792,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -852,7 +852,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -981,14 +981,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -1012,21 +1019,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -1079,7 +1079,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -1208,14 +1208,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -1239,21 +1246,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -1306,7 +1306,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -1435,14 +1435,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -1466,21 +1473,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -1553,7 +1553,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -1682,14 +1682,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+                identity: string;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -1713,21 +1720,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -1745,14 +1745,14 @@ declare const KernelDefinitions: {
                     }[];
                 };
             }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", builder.ClassOwnerProjection<"node", {
+            }, "authorized", true, false>>, "impersonate", builder.ClassOwnerProjection<"node", {
                 readonly abstract: true;
                 readonly depth: 1;
                 readonly properties: {
@@ -1788,7 +1788,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -1917,14 +1917,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -1948,21 +1955,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -1980,29 +1980,13 @@ declare const KernelDefinitions: {
                     }[];
                 };
             }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                iss: string;
-                sub: string;
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
             }, {
                 readonly mode: 'value';
-                readonly value: {
-                    id: string;
-                    iss: string;
-                    sub: string;
-                    frozen: boolean;
-                    requiredClaims: ({
-                        claim: string;
-                        op: "contains";
-                        value: unknown;
-                    } | {
-                        claim: string;
-                        op: "eq";
-                        value: unknown;
-                    } | {
-                        claim: string;
-                        op: "exists";
-                    })[];
-                } | null;
-            }, "authorized", true, false>>, "whois", builder.ClassOwnerProjection<"node", {
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", builder.ClassOwnerProjection<"node", {
                 readonly abstract: true;
                 readonly depth: 1;
                 readonly properties: {
@@ -2038,7 +2022,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -2167,14 +2151,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -2198,21 +2189,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -2230,13 +2214,29 @@ declare const KernelDefinitions: {
                     }[];
                 };
             }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
+                iss: string;
+                sub: string;
             }, {
                 readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", builder.ClassOwnerProjection<"node", {
+                readonly value: {
+                    id: string;
+                    iss: string;
+                    sub: string;
+                    frozen: boolean;
+                    requiredClaims: ({
+                        claim: string;
+                        op: "contains";
+                        value: unknown;
+                    } | {
+                        claim: string;
+                        op: "eq";
+                        value: unknown;
+                    } | {
+                        claim: string;
+                        op: "exists";
+                    })[];
+                } | null;
+            }, "authorized", true, false>>, "whois", builder.ClassOwnerProjection<"node", {
                 readonly abstract: true;
                 readonly depth: 1;
                 readonly properties: {
@@ -2272,7 +2272,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -2401,14 +2401,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+                identity: string;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -2432,21 +2439,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -2464,14 +2464,14 @@ declare const KernelDefinitions: {
                     }[];
                 };
             }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", builder.ClassOwnerProjection<"node", {
+            }, "authenticated", true, false>>, "delegate", builder.ClassOwnerProjection<"node", {
                 readonly abstract: true;
                 readonly depth: 1;
                 readonly properties: {
@@ -2507,7 +2507,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -2636,14 +2636,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -2667,21 +2674,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -2751,7 +2751,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -2880,14 +2880,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -2911,21 +2918,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -3008,7 +3008,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -3137,14 +3137,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -3168,21 +3175,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -3235,7 +3235,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -3364,14 +3364,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -3395,21 +3402,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -3462,7 +3462,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -3591,14 +3591,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -3622,21 +3629,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -3689,7 +3689,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -3818,14 +3818,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -3849,21 +3856,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -3939,7 +3939,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -4083,7 +4083,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -4212,14 +4212,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -4243,21 +4250,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -4310,7 +4310,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -4439,14 +4439,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -4470,21 +4477,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -4537,7 +4537,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -4666,14 +4666,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -4697,21 +4704,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -4764,7 +4764,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -4893,14 +4893,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -4924,21 +4931,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -5011,7 +5011,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -5140,14 +5140,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -5171,21 +5178,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -5203,14 +5203,14 @@ declare const KernelDefinitions: {
                     }[];
                 };
             }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", builder.ClassOwnerProjection<"node", {
+            }, "authorized", true, false>>, "impersonate", builder.ClassOwnerProjection<"node", {
                 readonly abstract: true;
                 readonly depth: 1;
                 readonly properties: {
@@ -5246,7 +5246,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -5375,14 +5375,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -5406,21 +5413,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -5438,29 +5438,13 @@ declare const KernelDefinitions: {
                     }[];
                 };
             }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                iss: string;
-                sub: string;
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
             }, {
                 readonly mode: 'value';
-                readonly value: {
-                    id: string;
-                    iss: string;
-                    sub: string;
-                    frozen: boolean;
-                    requiredClaims: ({
-                        claim: string;
-                        op: "contains";
-                        value: unknown;
-                    } | {
-                        claim: string;
-                        op: "eq";
-                        value: unknown;
-                    } | {
-                        claim: string;
-                        op: "exists";
-                    })[];
-                } | null;
-            }, "authorized", true, false>>, "whois", builder.ClassOwnerProjection<"node", {
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", builder.ClassOwnerProjection<"node", {
                 readonly abstract: true;
                 readonly depth: 1;
                 readonly properties: {
@@ -5496,7 +5480,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -5625,14 +5609,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -5656,21 +5647,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -5688,13 +5672,29 @@ declare const KernelDefinitions: {
                     }[];
                 };
             }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
+                iss: string;
+                sub: string;
             }, {
                 readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", builder.ClassOwnerProjection<"node", {
+                readonly value: {
+                    id: string;
+                    iss: string;
+                    sub: string;
+                    frozen: boolean;
+                    requiredClaims: ({
+                        claim: string;
+                        op: "contains";
+                        value: unknown;
+                    } | {
+                        claim: string;
+                        op: "eq";
+                        value: unknown;
+                    } | {
+                        claim: string;
+                        op: "exists";
+                    })[];
+                } | null;
+            }, "authorized", true, false>>, "whois", builder.ClassOwnerProjection<"node", {
                 readonly abstract: true;
                 readonly depth: 1;
                 readonly properties: {
@@ -5730,7 +5730,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -5859,14 +5859,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -5890,21 +5897,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -5922,14 +5922,14 @@ declare const KernelDefinitions: {
                     }[];
                 };
             }, "authenticated", true, false>>, "can", unknown>>> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", builder.ClassOwnerProjection<"node", {
+            }, "authenticated", true, false>>, "delegate", builder.ClassOwnerProjection<"node", {
                 readonly abstract: true;
                 readonly depth: 1;
                 readonly properties: {
@@ -5965,7 +5965,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -6094,14 +6094,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -6125,21 +6132,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -6209,7 +6209,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -6338,14 +6338,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -6369,21 +6376,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -6488,7 +6488,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -6617,14 +6617,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -6648,21 +6655,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -6722,7 +6722,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -6851,14 +6851,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+                identity: string;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -6882,21 +6889,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -6949,7 +6949,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -7078,14 +7078,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -7109,21 +7116,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -7176,7 +7176,7 @@ declare const KernelDefinitions: {
                         principal: string;
                         audience: string;
                         ttlSeconds: number;
-                        attenuation: unknown;
+                        attenuation?: unknown;
                     }, {
                         readonly mode: 'value';
                         readonly value: string;
@@ -7305,14 +7305,21 @@ declare const KernelDefinitions: {
                     })[];
                 };
             }, "authenticated", true, false>>, "whoami", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                principal: string;
-                audience: string;
+                audience?: string | undefined;
                 ttlSeconds: number;
-                attenuation: unknown;
+                grant?: unknown;
+                identity: string;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+                audience?: string | undefined;
+                ttlSeconds: number;
+                grant?: unknown;
+            }, {
+                readonly mode: 'value';
+                readonly value: string;
+            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 iss: string;
                 sub: string;
             }, {
@@ -7336,21 +7343,14 @@ declare const KernelDefinitions: {
                     })[];
                 } | null;
             }, "authorized", true, false>>, "whois", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
-                ttlSeconds: number;
-                grant?: unknown;
-            }, {
-                readonly mode: 'value';
-                readonly value: string;
-            }, "authenticated", true, false>>, "mint", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
-                audience?: string | undefined;
+                principal: string;
+                audience: string;
                 ttlSeconds: number;
-                grant?: unknown;
-                identity: string;
+                attenuation?: unknown;
             }, {
                 readonly mode: 'value';
                 readonly value: string;
-            }, "authorized", true, false>>, "impersonate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
+            }, "authenticated", true, false>>, "delegate", unknown> | builder.AuthoredMethodProjection<builder.Method<builder.CallableProjection<{
                 policy: string;
                 object: string;
             } | {
@@ -7996,6 +7996,26 @@ declare const KernelDefinitions: {
                 };
             };
         }, "authorized", false, false>>;
+        upload: builder.Function<builder.CallableProjection<import("@astrale-os/kernel-dsl/v1").BinaryInputProjection<{
+            mediaType: string;
+        }>, {
+            readonly mode: 'value';
+            readonly value: {
+                receipt: string;
+                ref: {
+                    digest: string;
+                    mediaType: string;
+                    size: number;
+                };
+                expiresAt: string;
+            };
+        }, "authorized", false, false>>;
+        download: builder.Function<builder.CallableProjection<{
+            node: string;
+            property: string;
+        }, {
+            readonly mode: 'binary';
+        }, "authorized", false, false>>;
         mutate: builder.Function<builder.CallableProjection<{
             ast: {
                 format: "astrale.graph.mutation";
@@ -8152,6 +8172,29 @@ declare const KernelDefinitions: {
                     };
                 })[];
                 operations: ({
+                    op: "edge.update";
+                    edge: {
+                        source: string;
+                        target: string;
+                        class: string;
+                    };
+                    slug: unknown;
+                    props?: {
+                        set: Record<string, unknown>;
+                        unset: string[];
+                    } | undefined;
+                } | {
+                    op: "edge.update";
+                    edge: {
+                        source: string;
+                        target: string;
+                        class: string;
+                    };
+                    props: {
+                        set: Record<string, unknown>;
+                        unset: string[];
+                    };
+                } | {
                     op: "node.create";
                     as: string;
                     class: string;
@@ -8179,29 +8222,6 @@ declare const KernelDefinitions: {
                     };
                     slug?: unknown;
                     props: Record<string, unknown>;
-                } | {
-                    op: "edge.update";
-                    edge: {
-                        source: string;
-                        target: string;
-                        class: string;
-                    };
-                    slug: unknown;
-                    props?: {
-                        set: Record<string, unknown>;
-                        unset: string[];
-                    } | undefined;
-                } | {
-                    op: "edge.update";
-                    edge: {
-                        source: string;
-                        target: string;
-                        class: string;
-                    };
-                    props: {
-                        set: Record<string, unknown>;
-                        unset: string[];
-                    };
                 } | {
                     op: "edge.delete";
                     edge: {
@@ -8626,290 +8646,72 @@ export declare const AuthorityRelations: Readonly<{
 }>;
 /** Exact authorized Kernel Functions for which pristine Root receives direct can_use authority. */
 export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
-    invocation?: {
-        source: string;
-        id: string;
-    } | undefined;
-    topics?: {
-        exact?: string[] | undefined;
-        prefixes?: string[] | undefined;
-    } | undefined;
-    principal?: string | undefined;
-    since?: string | undefined;
-    until?: string | undefined;
-    cursor?: string | undefined;
-    limit?: number | undefined;
+    node: string;
+    property: string;
 }, {
-    readonly mode: 'value';
-    readonly value: {
-        records: unknown[];
-        frontier: {
-            id: string;
-            first?: number | undefined;
-            committed: number;
-            durable: number;
-        };
-        cursor?: string | undefined;
-        gap?: unknown;
-    };
+    readonly mode: 'binary';
 }, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
-    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"journal"> & {
+    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"download"> & {
         readonly origin: "kernel.astrale.ai";
     };
-    readonly key: "kernel.astrale.ai:function.journal";
+    readonly key: "kernel.astrale.ai:function.download";
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
-    idempotencyKey: string;
-    identities: ({
-        id: string;
-        mode: "external";
-        credential: string;
+    operation: string;
+    domains: ({
+        artifact: {
+            digest: string;
+            mediaType: string;
+            size: number;
+        };
+        currentRevision?: string | null | undefined;
     } | {
-        id: string;
-        mode: "self";
-        publicKey: unknown;
-        credential: string;
+        publication: {
+            url: string;
+            token?: string | undefined;
+            etag?: string | undefined;
+        };
+        revision?: string | undefined;
+        currentRevision?: string | null | undefined;
     })[];
 }, {
-    readonly mode: 'value';
-    readonly value: {
-        identities: {
-            id: string;
-            iss: string;
-            sub: string;
-        }[];
-    };
+    readonly mode: 'binary';
 }, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
-    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"register"> & {
+    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"install"> & {
         readonly origin: "kernel.astrale.ai";
     };
-    readonly key: "kernel.astrale.ai:function.register";
+    readonly key: "kernel.astrale.ai:function.install";
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
-    ast: {
-        format: "astrale.graph.query";
-        version: "v6";
-        source: {
-            kind: "node";
-            terms: ({
-                kind: "path";
-                path: string;
-            } | {
-                kind: "class";
-                class: {
-                    origin: string;
-                    kind: "class";
-                    name: string;
-                };
-            })[];
-            binding: string;
-        } | {
-            kind: "edge";
-            terms: {
-                kind: "class";
-                class: {
-                    origin: string;
-                    kind: "class";
-                    name: string;
-                };
-            }[];
-            bindings: {
-                source: string;
-                edge: string;
-                target: string;
-            };
-        };
-        steps: ({
-            op: "filter";
-            binding: string;
-            predicate: {
-                kind: "class.satisfies";
-                class: {
-                    origin: string;
-                    kind: "class";
-                    name: string;
-                };
-            } | {
-                kind: "class.equal";
-                class: {
-                    origin: string;
-                    kind: "class";
-                    name: string;
-                };
-            } | {
-                kind: "property.equal";
-                property: string;
-                value: unknown;
-            } | {
-                kind: "property.present";
-                property: string;
-            } | {
-                kind: "identity.equal";
-                identity: string | {
-                    source: string;
-                    target: string;
-                    class: string;
-                };
-            };
-        } | {
-            op: "expand";
-            from: string;
-            via: {
-                origin: string;
-                kind: "class";
-                name: string;
-            }[];
-            direction: "incident" | "incoming" | "outgoing";
-            bindings: {
-                edge: string;
-                node: string;
-            };
-        })[];
-        select: {
-            kind: "graph";
-            binding: string;
-            order?: {
-                property: string;
-                direction: "asc" | "desc";
-                unranked: "first" | "last";
-            } | undefined;
-        } | {
-            kind: "nodes";
-            binding: string;
-            projection: {
-                kind: "reference" | "value";
-            };
-            order?: {
-                property: string;
-                direction: "asc" | "desc";
-                unranked: "first" | "last";
-            } | undefined;
-        } | {
-            kind: "edges";
-            binding: string;
-            projection: {
-                edge: "reference" | "value";
-                source: "reference" | "value";
-                target: "reference" | "value";
-            };
-            order?: {
-                property: string;
-                direction: "asc" | "desc";
-                unranked: "first" | "last";
-            } | undefined;
-        };
-    };
-    expected?: {
-        origin: string;
-        revision: string;
-    }[] | undefined;
-    page: {
-        size: number;
-        after?: string | undefined;
-    };
+    invocation?: {
+        source: string;
+        id: string;
+    } | undefined;
+    topics?: {
+        exact?: string[] | undefined;
+        prefixes?: string[] | undefined;
+    } | undefined;
+    principal?: string | undefined;
+    since?: string | undefined;
+    until?: string | undefined;
+    cursor?: string | undefined;
+    limit?: number | undefined;
 }, {
     readonly mode: 'value';
     readonly value: {
-        result: {
-            kind: "graph";
-            graph: {
-                nodes: {
-                    id: string;
-                    class: string;
-                    props: Record<string, unknown>;
-                }[];
-                edges: {
-                    source: string;
-                    target: string;
-                    class: string;
-                    slug?: import("../../graph/edge/index.js").EdgeSlug | undefined;
-                    props: Record<string, unknown>;
-                }[];
-            };
-            selection: {
-                kind: "node";
-                ids: string[];
-            } | {
-                kind: "edge";
-                keys: {
-                    source: string;
-                    target: string;
-                    class: string;
-                }[];
-            };
-        } | {
-            kind: "nodes";
-            nodes: ({
-                kind: "reference";
-                value: {
-                    id: string;
-                    class: string;
-                };
-            } | {
-                kind: "value";
-                value: {
-                    id: string;
-                    class: string;
-                    props: Record<string, unknown>;
-                };
-            })[];
-        } | {
-            kind: "edges";
-            edges: {
-                edge: {
-                    kind: "reference";
-                    value: {
-                        source: string;
-                        target: string;
-                        class: string;
-                    };
-                } | {
-                    kind: "value";
-                    value: {
-                        source: string;
-                        target: string;
-                        class: string;
-                        slug?: import("../../graph/edge/index.js").EdgeSlug | undefined;
-                        props: Record<string, unknown>;
-                    };
-                };
-                source: {
-                    kind: "reference";
-                    value: {
-                        id: string;
-                        class: string;
-                    };
-                } | {
-                    kind: "value";
-                    value: {
-                        id: string;
-                        class: string;
-                        props: Record<string, unknown>;
-                    };
-                };
-                target: {
-                    kind: "reference";
-                    value: {
-                        id: string;
-                        class: string;
-                    };
-                } | {
-                    kind: "value";
-                    value: {
-                        id: string;
-                        class: string;
-                        props: Record<string, unknown>;
-                    };
-                };
-            }[];
-        };
-        page: {
-            next?: string | undefined;
+        records: unknown[];
+        frontier: {
+            id: string;
+            first?: number | undefined;
+            committed: number;
+            durable: number;
         };
+        cursor?: string | undefined;
+        gap?: unknown;
     };
 }, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
-    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"query"> & {
+    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"journal"> & {
         readonly origin: "kernel.astrale.ai";
     };
-    readonly key: "kernel.astrale.ai:function.query";
+    readonly key: "kernel.astrale.ai:function.journal";
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
     ast: {
         format: "astrale.graph.mutation";
@@ -9066,6 +8868,29 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
             };
         })[];
         operations: ({
+            op: "edge.update";
+            edge: {
+                source: string;
+                target: string;
+                class: string;
+            };
+            slug: unknown;
+            props?: {
+                set: Record<string, unknown>;
+                unset: string[];
+            } | undefined;
+        } | {
+            op: "edge.update";
+            edge: {
+                source: string;
+                target: string;
+                class: string;
+            };
+            props: {
+                set: Record<string, unknown>;
+                unset: string[];
+            };
+        } | {
             op: "node.create";
             as: string;
             class: string;
@@ -9094,76 +8919,281 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
             slug?: unknown;
             props: Record<string, unknown>;
         } | {
-            op: "edge.update";
+            op: "edge.delete";
             edge: {
                 source: string;
                 target: string;
                 class: string;
             };
-            slug: unknown;
-            props?: {
-                set: Record<string, unknown>;
-                unset: string[];
+        })[];
+    };
+    expected?: {
+        origin: string;
+        revision: string;
+    }[] | undefined;
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        createdNodes: Record<string, string>;
+    };
+}, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
+    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"mutate"> & {
+        readonly origin: "kernel.astrale.ai";
+    };
+    readonly key: "kernel.astrale.ai:function.mutate";
+}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
+    ast: {
+        format: "astrale.graph.query";
+        version: "v6";
+        source: {
+            kind: "node";
+            terms: ({
+                kind: "path";
+                path: string;
+            } | {
+                kind: "class";
+                class: {
+                    origin: string;
+                    kind: "class";
+                    name: string;
+                };
+            })[];
+            binding: string;
+        } | {
+            kind: "edge";
+            terms: {
+                kind: "class";
+                class: {
+                    origin: string;
+                    kind: "class";
+                    name: string;
+                };
+            }[];
+            bindings: {
+                source: string;
+                edge: string;
+                target: string;
+            };
+        };
+        steps: ({
+            op: "filter";
+            binding: string;
+            predicate: {
+                kind: "class.satisfies";
+                class: {
+                    origin: string;
+                    kind: "class";
+                    name: string;
+                };
+            } | {
+                kind: "class.equal";
+                class: {
+                    origin: string;
+                    kind: "class";
+                    name: string;
+                };
+            } | {
+                kind: "property.equal";
+                property: string;
+                value: unknown;
+            } | {
+                kind: "property.present";
+                property: string;
+            } | {
+                kind: "identity.equal";
+                identity: string | {
+                    source: string;
+                    target: string;
+                    class: string;
+                };
+            };
+        } | {
+            op: "expand";
+            from: string;
+            via: {
+                origin: string;
+                kind: "class";
+                name: string;
+            }[];
+            direction: "incident" | "incoming" | "outgoing";
+            bindings: {
+                edge: string;
+                node: string;
+            };
+        })[];
+        select: {
+            kind: "graph";
+            binding: string;
+            order?: {
+                property: string;
+                direction: "asc" | "desc";
+                unranked: "first" | "last";
             } | undefined;
         } | {
-            op: "edge.update";
-            edge: {
-                source: string;
-                target: string;
-                class: string;
-            };
-            props: {
-                set: Record<string, unknown>;
-                unset: string[];
+            kind: "nodes";
+            binding: string;
+            projection: {
+                kind: "reference" | "value";
             };
+            order?: {
+                property: string;
+                direction: "asc" | "desc";
+                unranked: "first" | "last";
+            } | undefined;
         } | {
-            op: "edge.delete";
-            edge: {
-                source: string;
-                target: string;
-                class: string;
+            kind: "edges";
+            binding: string;
+            projection: {
+                edge: "reference" | "value";
+                source: "reference" | "value";
+                target: "reference" | "value";
             };
-        })[];
+            order?: {
+                property: string;
+                direction: "asc" | "desc";
+                unranked: "first" | "last";
+            } | undefined;
+        };
     };
     expected?: {
         origin: string;
         revision: string;
     }[] | undefined;
+    page: {
+        size: number;
+        after?: string | undefined;
+    };
 }, {
     readonly mode: 'value';
     readonly value: {
-        createdNodes: Record<string, string>;
+        result: {
+            kind: "graph";
+            graph: {
+                nodes: {
+                    id: string;
+                    class: string;
+                    props: Record<string, unknown>;
+                }[];
+                edges: {
+                    source: string;
+                    target: string;
+                    class: string;
+                    slug?: import("../../graph/edge/index.js").EdgeSlug | undefined;
+                    props: Record<string, unknown>;
+                }[];
+            };
+            selection: {
+                kind: "node";
+                ids: string[];
+            } | {
+                kind: "edge";
+                keys: {
+                    source: string;
+                    target: string;
+                    class: string;
+                }[];
+            };
+        } | {
+            kind: "nodes";
+            nodes: ({
+                kind: "reference";
+                value: {
+                    id: string;
+                    class: string;
+                };
+            } | {
+                kind: "value";
+                value: {
+                    id: string;
+                    class: string;
+                    props: Record<string, unknown>;
+                };
+            })[];
+        } | {
+            kind: "edges";
+            edges: {
+                edge: {
+                    kind: "reference";
+                    value: {
+                        source: string;
+                        target: string;
+                        class: string;
+                    };
+                } | {
+                    kind: "value";
+                    value: {
+                        source: string;
+                        target: string;
+                        class: string;
+                        slug?: import("../../graph/edge/index.js").EdgeSlug | undefined;
+                        props: Record<string, unknown>;
+                    };
+                };
+                source: {
+                    kind: "reference";
+                    value: {
+                        id: string;
+                        class: string;
+                    };
+                } | {
+                    kind: "value";
+                    value: {
+                        id: string;
+                        class: string;
+                        props: Record<string, unknown>;
+                    };
+                };
+                target: {
+                    kind: "reference";
+                    value: {
+                        id: string;
+                        class: string;
+                    };
+                } | {
+                    kind: "value";
+                    value: {
+                        id: string;
+                        class: string;
+                        props: Record<string, unknown>;
+                    };
+                };
+            }[];
+        };
+        page: {
+            next?: string | undefined;
+        };
     };
 }, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
-    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"mutate"> & {
+    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"query"> & {
         readonly origin: "kernel.astrale.ai";
     };
-    readonly key: "kernel.astrale.ai:function.mutate";
+    readonly key: "kernel.astrale.ai:function.query";
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
-    operation: string;
-    domains: ({
-        artifact: {
-            digest: string;
-            mediaType: string;
-            size: number;
-        };
-        currentRevision?: string | null | undefined;
+    idempotencyKey: string;
+    identities: ({
+        id: string;
+        mode: "external";
+        credential: string;
     } | {
-        publication: {
-            url: string;
-            token?: string | undefined;
-            etag?: string | undefined;
-        };
-        revision?: string | undefined;
-        currentRevision?: string | null | undefined;
+        id: string;
+        mode: "self";
+        publicKey: unknown;
+        credential: string;
     })[];
 }, {
-    readonly mode: 'binary';
+    readonly mode: 'value';
+    readonly value: {
+        identities: {
+            id: string;
+            iss: string;
+            sub: string;
+        }[];
+    };
 }, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
-    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"install"> & {
+    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"register"> & {
         readonly origin: "kernel.astrale.ai";
     };
-    readonly key: "kernel.astrale.ai:function.install";
+    readonly key: "kernel.astrale.ai:function.register";
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<{
     operation: string;
     domains: string[];
@@ -9209,6 +9239,24 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
         readonly origin: "kernel.astrale.ai";
     };
     readonly key: "kernel.astrale.ai:function.uninstall";
+}) | (import("@astrale-os/kernel-dsl/v1").ResolvedFunction<import("@astrale-os/kernel-dsl/v1").BinaryInputProjection<{
+    mediaType: string;
+}>, {
+    readonly mode: 'value';
+    readonly value: {
+        receipt: string;
+        ref: {
+            digest: string;
+            mediaType: string;
+            size: number;
+        };
+        expiresAt: string;
+    };
+}, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>> & {
+    readonly ref: import("@astrale-os/kernel-dsl/v1").FunctionRef<"upload"> & {
+        readonly origin: "kernel.astrale.ai";
+    };
+    readonly key: "kernel.astrale.ai:function.upload";
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
     audience?: string | undefined;
     ttlSeconds: number;
@@ -9220,6 +9268,32 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
 }, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.impersonate"> & {
     readonly name: "impersonate";
     readonly executable: true;
+}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
+    iss: string;
+    sub: string;
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        id: string;
+        iss: string;
+        sub: string;
+        frozen: boolean;
+        requiredClaims: ({
+            claim: string;
+            op: "contains";
+            value: unknown;
+        } | {
+            claim: string;
+            op: "eq";
+            value: unknown;
+        } | {
+            claim: string;
+            op: "exists";
+        })[];
+    } | null;
+}, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.whois"> & {
+    readonly name: "whois";
+    readonly executable: true;
 }) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
     target: string;
 }, {
@@ -9262,32 +9336,6 @@ export declare const KernelRootFunctions: readonly ((import("@astrale-os/kernel-
 }, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.View.method.resolve"> & {
     readonly name: "resolve";
     readonly executable: true;
-}) | (import("@astrale-os/kernel-dsl/v1").ResolvedMethod<{
-    iss: string;
-    sub: string;
-}, {
-    readonly mode: 'value';
-    readonly value: {
-        id: string;
-        iss: string;
-        sub: string;
-        frozen: boolean;
-        requiredClaims: ({
-            claim: string;
-            op: "contains";
-            value: unknown;
-        } | {
-            claim: string;
-            op: "eq";
-            value: unknown;
-        } | {
-            claim: string;
-            op: "exists";
-        })[];
-    } | null;
-}, true, false, "authorized", import("@astrale-os/kernel-dsl/v1").PolicyCheckExpression<import("@astrale-os/kernel-dsl/v1").PolicyRef, import("@astrale-os/kernel-dsl/v1/language").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.whois"> & {
-    readonly name: "whois";
-    readonly executable: true;
 }))[];
 export { AuthorityOperationOrder, AuthorityOperations, operationOf } from '../authority/index.js';
 export type { AuthorityOperation, AuthorityRelation } from '../authority/index.js';