@astrale-os/kernel-core 0.9.0-beta.9 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/authority/accept.js +4 -0
- package/dist/auth/authority/admission/admission.d.ts +4 -1
- package/dist/auth/authority/admission/admission.js +46 -147
- package/dist/auth/authority/admission/index.d.ts +1 -1
- package/dist/auth/authority/admission/index.js +1 -1
- package/dist/auth/authority/admission/references.d.ts +13 -0
- package/dist/auth/authority/admission/references.js +38 -0
- package/dist/auth/authority/admission/term.d.ts +6 -0
- package/dist/auth/authority/admission/term.js +60 -0
- package/dist/auth/authority/admission/wire.d.ts +8 -0
- package/dist/auth/authority/admission/wire.js +33 -0
- package/dist/auth/authority/canonical.d.ts +2 -0
- package/dist/auth/authority/canonical.js +15 -0
- package/dist/auth/authority/index.d.ts +9 -2
- package/dist/auth/authority/index.js +6 -1
- package/dist/auth/authority/language/index.d.ts +3 -1
- package/dist/auth/authority/language/index.js +1 -0
- package/dist/auth/authority/language/predicate.d.ts +31 -16
- package/dist/auth/authority/language/predicate.js +1 -1
- package/dist/auth/authority/language/program.d.ts +21 -0
- package/dist/auth/authority/language/program.js +2 -0
- package/dist/auth/authority/normalization/index.d.ts +1 -1
- package/dist/auth/authority/normalization/index.js +1 -1
- package/dist/auth/authority/normalization/normalize.d.ts +2 -0
- package/dist/auth/authority/normalization/normalize.js +38 -16
- package/dist/auth/authority/ownership.optimization.d.ts +8 -0
- package/dist/auth/authority/ownership.optimization.js +83 -0
- package/dist/auth/authority/prepare-binder-body.d.ts +4 -0
- package/dist/auth/authority/prepare-binder-body.js +31 -0
- package/dist/auth/authority/program.d.ts +28 -0
- package/dist/auth/authority/program.js +191 -0
- package/dist/auth/authority/semantics/class-authority.d.ts +8 -0
- package/dist/auth/authority/semantics/class-authority.js +26 -0
- package/dist/auth/authority/semantics/composition.d.ts +46 -0
- package/dist/auth/authority/semantics/composition.js +150 -0
- package/dist/auth/authority/semantics/failure.d.ts +21 -0
- package/dist/auth/authority/semantics/failure.js +10 -0
- package/dist/auth/authority/semantics/index.d.ts +13 -0
- package/dist/auth/authority/semantics/index.js +6 -0
- package/dist/auth/authority/semantics/interpret.d.ts +41 -0
- package/dist/auth/authority/semantics/interpret.js +388 -0
- package/dist/auth/authority/semantics/residual.d.ts +32 -0
- package/dist/auth/authority/semantics/residual.js +166 -0
- package/dist/auth/authority/semantics/snapshot.d.ts +40 -0
- package/dist/auth/authority/semantics/terms.d.ts +22 -0
- package/dist/auth/authority/semantics/terms.js +96 -0
- package/dist/auth/authority/semantics/vocabulary.d.ts +19 -0
- package/dist/auth/context/context.d.ts +4 -3
- package/dist/auth/expression/authoring/builder.d.ts +2 -11
- package/dist/auth/expression/authoring/builder.js +1 -45
- package/dist/auth/expression/authoring/index.d.ts +1 -1
- package/dist/auth/expression/authoring/index.js +1 -1
- package/dist/auth/expression/index.d.ts +1 -2
- package/dist/auth/expression/index.js +1 -2
- package/dist/auth/expression/language/identity-expression.d.ts +2 -22
- package/dist/auth/grant/index.d.ts +1 -1
- package/dist/auth/grant/index.js +1 -1
- package/dist/auth/grant/resolved/admission.d.ts +4 -3
- package/dist/auth/grant/resolved/admission.js +23 -13
- package/dist/auth/grant/resolved/grant.d.ts +1 -1
- package/dist/auth/grant/resolved/index.d.ts +1 -1
- package/dist/auth/grant/resolved/index.js +1 -1
- package/dist/auth/grant/unresolved/admission.d.ts +4 -1
- package/dist/auth/grant/unresolved/admission.js +27 -67
- package/dist/auth/grant/unresolved/limits.d.ts +2 -4
- package/dist/auth/grant/unresolved/limits.js +1 -5
- package/dist/auth/identity/admission.js +11 -3
- package/dist/auth/identity/identity.d.ts +15 -3
- package/dist/auth/identity/index.d.ts +1 -1
- package/dist/auth/index.d.ts +4 -4
- package/dist/auth/index.js +1 -1
- package/dist/auth/jwk/index.d.ts +1 -1
- package/dist/auth/jwk/index.js +1 -1
- package/dist/auth/jwk/thumbprint.d.ts +2 -0
- package/dist/auth/jwk/thumbprint.js +12 -6
- package/dist/auth/register/fingerprint/fingerprint.d.ts +25 -0
- package/dist/auth/register/fingerprint/fingerprint.js +31 -0
- package/dist/auth/register/fingerprint/index.d.ts +2 -0
- package/dist/auth/register/index.d.ts +5 -0
- package/dist/auth/register/request/admission.d.ts +3 -0
- package/dist/auth/register/request/admission.js +103 -0
- package/dist/auth/register/request/index.d.ts +3 -0
- package/dist/auth/register/request/limits.d.ts +6 -0
- package/dist/auth/register/request/limits.js +6 -0
- package/dist/auth/register/request/request.d.ts +19 -0
- package/dist/auth/{provision → register}/request/self-issuer.d.ts +1 -1
- package/dist/auth/{provision → register}/request/self-issuer.js +1 -1
- package/dist/auth/register/result/index.d.ts +1 -0
- package/dist/auth/register/result/result.d.ts +10 -0
- package/dist/auth/register/result/result.js +1 -0
- package/dist/callable/contract/body.d.ts +10 -0
- package/dist/callable/contract/body.js +7 -0
- package/dist/callable/contract/index.d.ts +2 -1
- package/dist/callable/contract/index.js +1 -1
- package/dist/callable/contract/output.d.ts +18 -2
- package/dist/callable/index.d.ts +3 -2
- package/dist/callable/index.js +2 -1
- package/dist/callable/invocation/call.d.ts +16 -2
- package/dist/callable/invocation/call.js +41 -1
- package/dist/callable/invocation/index.d.ts +1 -1
- package/dist/callable/invocation/index.js +1 -1
- package/dist/callable/invocation/result.d.ts +10 -3
- package/dist/dns-label.d.ts +1 -2
- package/dist/dns-label.js +2 -3
- package/dist/graph/graph/graph.d.ts +1 -5
- package/dist/graph/graph/graph.js +3 -27
- package/dist/graph/graph/index.d.ts +2 -4
- package/dist/graph/graph/index.js +2 -3
- package/dist/graph/graph/model/codec.js +4 -4
- package/dist/graph/graph/model/index.d.ts +1 -1
- package/dist/graph/graph/model/index.js +1 -1
- package/dist/graph/graph/model/model.d.ts +7 -7
- package/dist/graph/graph/model/model.js +6 -6
- package/dist/graph/graph/model/wire.d.ts +58 -78
- package/dist/graph/graph/model/wire.js +18 -19
- package/dist/graph/mutate/authoring/builder.d.ts +2 -2
- package/dist/graph/mutate/authoring/builder.js +2 -2
- package/dist/graph/mutate/authoring/create.js +13 -5
- package/dist/graph/mutate/index.d.ts +1 -1
- package/dist/graph/mutate/language/codec.js +3 -3
- package/dist/graph/mutate/language/model.d.ts +4 -4
- package/dist/graph/mutate/language/wire.d.ts +226 -215
- package/dist/graph/mutate/language/wire.js +42 -47
- package/dist/graph/mutate/result/index.d.ts +4 -3
- package/dist/graph/mutate/result/index.js +8 -6
- package/dist/graph/mutate/result/wire.d.ts +4 -4
- package/dist/graph/mutate/result/wire.js +7 -4
- package/dist/graph/node/identity/id.d.ts +0 -4
- package/dist/graph/node/identity/id.js +0 -5
- package/dist/graph/node/identity/order.js +20 -0
- package/dist/graph/path/authoring/path.d.ts +8 -5
- package/dist/graph/path/authoring/path.js +21 -3
- package/dist/graph/path/language/model.d.ts +8 -3
- package/dist/graph/path/language/syntax.js +23 -8
- package/dist/graph/query/authoring/builder.js +37 -5
- package/dist/graph/query/authoring/model.d.ts +20 -1
- package/dist/graph/query/index.d.ts +4 -2
- package/dist/graph/query/index.js +1 -0
- package/dist/graph/query/language/codec.js +18 -3
- package/dist/graph/query/language/fingerprint.js +8 -0
- package/dist/graph/query/language/model.d.ts +22 -4
- package/dist/graph/query/language/wire.d.ts +124 -114
- package/dist/graph/query/language/wire.js +54 -47
- package/dist/graph/query/order/index.d.ts +53 -0
- package/dist/graph/query/order/index.js +79 -0
- package/dist/graph/query/reference/evaluate.d.ts +1 -0
- package/dist/graph/query/reference/evaluate.js +39 -52
- package/dist/graph/query/result/index.js +1 -1
- package/dist/graph/query/result/wire.d.ts +93 -94
- package/dist/graph/query/result/wire.js +20 -20
- package/dist/graph/reconcile/condition/model.d.ts +2 -2
- package/dist/graph/reconcile/condition/references.d.ts +0 -1
- package/dist/graph/reconcile/condition/references.js +4 -4
- package/dist/graph/reconcile/correspondence.d.ts +9 -8
- package/dist/graph/reconcile/evidence.d.ts +2 -2
- package/dist/graph/reconcile/mutation/assess.d.ts +2 -1
- package/dist/graph/reconcile/observation.d.ts +4 -3
- package/dist/graph/reconcile/planning/canonical.d.ts +6 -0
- package/dist/graph/reconcile/planning/canonical.js +28 -0
- package/dist/graph/reconcile/planning/context.d.ts +3 -3
- package/dist/graph/reconcile/planning/model.d.ts +8 -4
- package/dist/graph/reconcile/planning/plan.js +2 -1
- package/dist/schema/authority/authority-relation.js +3 -0
- package/dist/schema/authority/claims.d.ts +24 -25
- package/dist/schema/authority/claims.js +8 -8
- package/dist/schema/authority/governed-by.d.ts +16 -91
- package/dist/schema/authority/governed-by.js +1 -1
- package/dist/schema/authority/operation-node.d.ts +27 -13
- package/dist/schema/authority/operations.d.ts +8 -168
- package/dist/schema/authority/policy.d.ts +27 -15
- package/dist/schema/authority/vocabulary.d.ts +3 -0
- package/dist/schema/authority/vocabulary.js +25 -0
- package/dist/schema/callables/entrypoint.d.ts +32 -0
- package/dist/schema/callables/entrypoint.js +12 -0
- package/dist/schema/callables/execution.d.ts +569 -0
- package/dist/schema/callables/execution.js +32 -0
- package/dist/schema/callables/function.d.ts +3400 -55
- package/dist/schema/callables/function.js +6 -4
- package/dist/schema/callables/index.d.ts +2 -1
- package/dist/schema/callables/index.js +2 -1
- package/dist/schema/callables/method-of.d.ts +18 -143
- package/dist/schema/callables/method-of.js +2 -2
- package/dist/schema/callables/view.d.ts +83 -51
- package/dist/schema/definitions/class.d.ts +45 -33
- package/dist/schema/definitions/extends.d.ts +16 -110
- package/dist/schema/definitions/instance-of.d.ts +17 -69
- package/dist/schema/domain/domain.d.ts +3343 -148
- package/dist/schema/domain/domain.js +6 -3
- package/dist/schema/domain/of-domain.d.ts +18 -192
- package/dist/schema/domain/of-domain.js +1 -1
- package/dist/schema/identity/composition.d.ts +5 -0
- package/dist/schema/identity/composition.js +5 -0
- package/dist/schema/identity/identity.d.ts +225 -122
- package/dist/schema/identity/identity.js +3 -4
- package/dist/schema/index.d.ts +1 -0
- package/dist/schema/index.js +1 -0
- package/dist/schema/installation/operation-id.d.ts +1 -2
- package/dist/schema/installation/operation-id.js +2 -4
- package/dist/schema/introspection/index.d.ts +1 -1
- package/dist/schema/introspection/language.d.ts +12 -28
- package/dist/schema/kernel/projection/callables.js +2 -3
- package/dist/schema/kernel/projection/core.d.ts +7 -0
- package/dist/schema/kernel/projection/core.js +51 -0
- package/dist/schema/kernel/projection/definitions.d.ts +13 -0
- package/dist/schema/kernel/projection/definitions.js +71 -0
- package/dist/schema/kernel/projection/index.d.ts +3 -3
- package/dist/schema/kernel/projection/index.js +2 -2
- package/dist/schema/kernel/projection/methods.d.ts +5 -0
- package/dist/schema/kernel/projection/methods.js +41 -0
- package/dist/schema/kernel/projection/part.d.ts +34 -0
- package/dist/schema/kernel/projection/part.js +42 -0
- package/dist/schema/kernel/projection/paths.d.ts +6 -0
- package/dist/schema/kernel/projection/{keys.js → paths.js} +12 -14
- package/dist/schema/kernel/projection/project.d.ts +4 -2
- package/dist/schema/kernel/projection/project.js +33 -258
- package/dist/schema/kernel/projection/properties.d.ts +11 -0
- package/dist/schema/kernel/projection/properties.js +36 -0
- package/dist/schema/kernel/projection/relations.d.ts +7 -0
- package/dist/schema/kernel/projection/relations.js +61 -0
- package/dist/schema/kernel/projection/types.d.ts +28 -2
- package/dist/schema/kernel/schema.d.ts +9008 -4939
- package/dist/schema/kernel/schema.js +12 -8
- package/dist/schema/kernel/syscalls/contracts/admit.d.ts +15 -12
- package/dist/schema/kernel/syscalls/contracts/admit.js +16 -9
- package/dist/schema/kernel/syscalls/contracts/blob.d.ts +31 -0
- package/dist/schema/kernel/syscalls/contracts/blob.js +24 -0
- package/dist/schema/kernel/syscalls/contracts/can.d.ts +19 -8
- package/dist/schema/kernel/syscalls/contracts/can.js +12 -4
- package/dist/schema/kernel/syscalls/contracts/delegate.d.ts +6 -7
- package/dist/schema/kernel/syscalls/contracts/delegate.js +5 -5
- package/dist/schema/kernel/syscalls/contracts/execution.d.ts +300 -0
- package/dist/schema/kernel/syscalls/contracts/execution.js +116 -0
- package/dist/schema/kernel/syscalls/contracts/expected.d.ts +5 -0
- package/dist/schema/kernel/syscalls/contracts/expected.js +9 -0
- package/dist/schema/kernel/syscalls/contracts/identity.d.ts +18 -19
- package/dist/schema/kernel/syscalls/contracts/identity.js +6 -7
- package/dist/schema/kernel/syscalls/contracts/impersonate.d.ts +6 -0
- package/dist/schema/kernel/syscalls/contracts/impersonate.js +4 -0
- package/dist/schema/kernel/syscalls/contracts/index.d.ts +6 -3
- package/dist/schema/kernel/syscalls/contracts/index.js +6 -3
- package/dist/schema/kernel/syscalls/contracts/install.d.ts +309 -217
- package/dist/schema/kernel/syscalls/contracts/install.js +68 -26
- package/dist/schema/kernel/syscalls/contracts/installation.d.ts +70 -351
- package/dist/schema/kernel/syscalls/contracts/installation.js +29 -67
- package/dist/schema/kernel/syscalls/contracts/introspect.d.ts +11 -15
- package/dist/schema/kernel/syscalls/contracts/introspect.js +8 -15
- package/dist/schema/kernel/syscalls/contracts/journal.d.ts +26 -27
- package/dist/schema/kernel/syscalls/contracts/journal.js +15 -15
- package/dist/schema/kernel/syscalls/contracts/mint.d.ts +5 -7
- package/dist/schema/kernel/syscalls/contracts/mint.js +4 -5
- package/dist/schema/kernel/syscalls/contracts/mutate.d.ts +243 -224
- package/dist/schema/kernel/syscalls/contracts/mutate.js +7 -1
- package/dist/schema/kernel/syscalls/contracts/query.d.ts +239 -222
- package/dist/schema/kernel/syscalls/contracts/query.js +17 -15
- package/dist/schema/kernel/syscalls/contracts/register.d.ts +20 -0
- package/dist/schema/kernel/syscalls/contracts/register.js +24 -0
- package/dist/schema/kernel/syscalls/contracts/uninstall.d.ts +55 -148
- package/dist/schema/kernel/syscalls/contracts/uninstall.js +7 -5
- package/dist/schema/kernel/syscalls/contracts/view-host-requirements.d.ts +17 -0
- package/dist/schema/kernel/syscalls/contracts/view-host-requirements.js +40 -0
- package/dist/schema/kernel/syscalls/contracts/view-resolve.d.ts +27 -28
- package/dist/schema/kernel/syscalls/contracts/view-resolve.js +16 -24
- package/dist/schema/kernel/syscalls/contracts/whoami.d.ts +19 -20
- package/dist/schema/kernel/syscalls/contracts/whoami.js +2 -2
- package/dist/schema/kernel/syscalls/contracts/whois.d.ts +22 -23
- package/dist/schema/kernel/syscalls/contracts/whois.js +3 -3
- package/dist/schema/kernel/syscalls/declarations/admit.d.ts +18 -18
- package/dist/schema/kernel/syscalls/declarations/admit.js +3 -3
- package/dist/schema/kernel/syscalls/declarations/can.d.ts +19 -14
- package/dist/schema/kernel/syscalls/declarations/can.js +4 -4
- package/dist/schema/kernel/syscalls/declarations/delegate.d.ts +9 -12
- package/dist/schema/kernel/syscalls/declarations/delegate.js +4 -4
- package/dist/schema/kernel/syscalls/declarations/download.d.ts +12 -0
- package/dist/schema/kernel/syscalls/declarations/download.js +10 -0
- package/dist/schema/kernel/syscalls/declarations/execution.d.ts +255 -0
- package/dist/schema/kernel/syscalls/declarations/execution.js +52 -0
- package/dist/schema/kernel/syscalls/declarations/impersonate.d.ts +9 -0
- package/dist/schema/kernel/syscalls/declarations/impersonate.js +12 -0
- package/dist/schema/kernel/syscalls/declarations/index.d.ts +1079 -1323
- package/dist/schema/kernel/syscalls/declarations/index.js +18 -2
- package/dist/schema/kernel/syscalls/declarations/install.d.ts +85 -172
- package/dist/schema/kernel/syscalls/declarations/install.js +7 -3
- package/dist/schema/kernel/syscalls/declarations/introspect.d.ts +8 -19
- package/dist/schema/kernel/syscalls/declarations/introspect.js +3 -4
- package/dist/schema/kernel/syscalls/declarations/journal.d.ts +29 -31
- package/dist/schema/kernel/syscalls/declarations/journal.js +4 -2
- package/dist/schema/kernel/syscalls/declarations/mint.d.ts +8 -13
- package/dist/schema/kernel/syscalls/declarations/mint.js +5 -5
- package/dist/schema/kernel/syscalls/declarations/mutate.d.ts +239 -256
- package/dist/schema/kernel/syscalls/declarations/mutate.js +4 -2
- package/dist/schema/kernel/syscalls/declarations/query.d.ts +236 -260
- package/dist/schema/kernel/syscalls/declarations/query.js +4 -2
- package/dist/schema/kernel/syscalls/declarations/register.d.ts +23 -0
- package/dist/schema/kernel/syscalls/declarations/register.js +10 -0
- package/dist/schema/kernel/syscalls/declarations/uninstall.d.ts +51 -153
- package/dist/schema/kernel/syscalls/declarations/uninstall.js +6 -2
- package/dist/schema/kernel/syscalls/declarations/upload.d.ts +15 -0
- package/dist/schema/kernel/syscalls/declarations/upload.js +10 -0
- package/dist/schema/kernel/syscalls/declarations/use-policy.d.ts +4 -0
- package/dist/schema/kernel/syscalls/declarations/use-policy.js +9 -0
- package/dist/schema/kernel/syscalls/declarations/view-resolve.d.ts +30 -37
- package/dist/schema/kernel/syscalls/declarations/view-resolve.js +5 -3
- package/dist/schema/kernel/syscalls/declarations/whoami.d.ts +22 -26
- package/dist/schema/kernel/syscalls/declarations/whoami.js +3 -3
- package/dist/schema/kernel/syscalls/declarations/whois.d.ts +25 -29
- package/dist/schema/kernel/syscalls/declarations/whois.js +5 -3
- package/dist/schema/kernel/syscalls/descriptors/execution.d.ts +303 -0
- package/dist/schema/kernel/syscalls/descriptors/execution.js +11 -0
- package/dist/schema/kernel/syscalls/descriptors/function.d.ts +8 -2
- package/dist/schema/kernel/syscalls/descriptors/functions.d.ts +3 -1
- package/dist/schema/kernel/syscalls/descriptors/functions.js +3 -1
- package/dist/schema/kernel/syscalls/descriptors/identity.d.ts +47 -13
- package/dist/schema/kernel/syscalls/descriptors/identity.js +2 -1
- package/dist/schema/kernel/syscalls/descriptors/index.d.ts +2 -1
- package/dist/schema/kernel/syscalls/descriptors/index.js +2 -1
- package/dist/schema/kernel/syscalls/descriptors/results/view-resolution.d.ts +5 -2
- package/dist/schema/kernel/syscalls/descriptors/results/view-resolution.js +8 -38
- package/dist/schema/kernel/syscalls/descriptors/view.d.ts +11 -9
- package/dist/schema/kernel/syscalls/index.d.ts +2 -2
- package/dist/schema/kernel/syscalls/index.js +2 -2
- package/dist/schema/kernel/syscalls/references/execution.d.ts +55 -0
- package/dist/schema/kernel/syscalls/references/execution.js +13 -0
- package/dist/schema/kernel/syscalls/references/functions.d.ts +12 -2
- package/dist/schema/kernel/syscalls/references/functions.js +3 -1
- package/dist/schema/kernel/syscalls/references/identity.d.ts +9 -0
- package/dist/schema/kernel/syscalls/references/identity.js +1 -0
- package/dist/schema/kernel/syscalls/references/index.d.ts +2 -1
- package/dist/schema/kernel/syscalls/references/index.js +2 -1
- package/dist/schema/meta/created-by.d.ts +32 -0
- package/dist/schema/meta/created-by.js +17 -0
- package/dist/schema/meta/descriptable.d.ts +13 -11
- package/dist/schema/meta/edge.d.ts +5 -9
- package/dist/schema/meta/iconable.d.ts +13 -11
- package/dist/schema/meta/index.d.ts +1 -0
- package/dist/schema/meta/index.js +1 -0
- package/dist/schema/meta/named.d.ts +13 -9
- package/dist/schema/meta/node.d.ts +9 -1
- package/dist/schema/meta/remotable.d.ts +15 -22
- package/dist/schema/meta/statused.d.ts +13 -7
- package/dist/schema/meta/timestamped.d.ts +14 -12
- package/package.json +9 -7
- package/dist/auth/expression/normalization/canonicalize.d.ts +0 -7
- package/dist/auth/expression/normalization/canonicalize.js +0 -102
- package/dist/auth/expression/normalization/index.d.ts +0 -2
- package/dist/auth/expression/normalization/index.js +0 -2
- package/dist/auth/expression/normalization/raise-denials.d.ts +0 -3
- package/dist/auth/expression/normalization/raise-denials.js +0 -59
- package/dist/auth/provision/fingerprint/fingerprint.d.ts +0 -9
- package/dist/auth/provision/fingerprint/fingerprint.js +0 -33
- package/dist/auth/provision/fingerprint/index.d.ts +0 -2
- package/dist/auth/provision/index.d.ts +0 -5
- package/dist/auth/provision/request/admission.d.ts +0 -3
- package/dist/auth/provision/request/admission.js +0 -125
- package/dist/auth/provision/request/index.d.ts +0 -3
- package/dist/auth/provision/request/request.d.ts +0 -29
- package/dist/auth/provision/result/index.d.ts +0 -1
- package/dist/auth/provision/result/result.d.ts +0 -12
- package/dist/graph/graph/navigation/error.d.ts +0 -12
- package/dist/graph/graph/navigation/error.js +0 -20
- package/dist/graph/graph/navigation/index.d.ts +0 -2
- package/dist/graph/graph/navigation/index.js +0 -1
- package/dist/graph/graph/navigation/model.d.ts +0 -15
- package/dist/schema/callables/view-for.d.ts +0 -296
- package/dist/schema/callables/view-for.js +0 -12
- package/dist/schema/kernel/projection/keys.d.ts +0 -3
- package/dist/schema/kernel/projection/path.d.ts +0 -2
- package/dist/schema/kernel/projection/path.js +0 -140
- package/dist/schema/kernel/syscalls/contracts/provision.d.ts +0 -292
- package/dist/schema/kernel/syscalls/contracts/provision.js +0 -19
- package/dist/schema/kernel/syscalls/declarations/define.d.ts +0 -5
- package/dist/schema/kernel/syscalls/declarations/define.js +0 -7
- package/dist/schema/kernel/syscalls/declarations/provision.d.ts +0 -296
- package/dist/schema/kernel/syscalls/declarations/provision.js +0 -8
- /package/dist/auth/{provision/request/request.js → authority/semantics/snapshot.js} +0 -0
- /package/dist/auth/{provision/result/index.js → authority/semantics/vocabulary.js} +0 -0
- /package/dist/auth/{provision → register}/fingerprint/index.js +0 -0
- /package/dist/auth/{provision → register}/index.js +0 -0
- /package/dist/auth/{provision → register}/request/index.js +0 -0
- /package/dist/auth/{provision/result/result.js → register/request/request.js} +0 -0
- /package/dist/{graph/graph/navigation/model.js → auth/register/result/index.js} +0 -0
|
@@ -2,15 +2,15 @@ import { type CorrespondenceEntry } from '#graph/reconcile/correspondence';
|
|
|
2
2
|
import { type ObservationEvidence, type ObservationRequirement } from '#graph/reconcile/evidence';
|
|
3
3
|
import { type Observation } from '#graph/reconcile/observation';
|
|
4
4
|
import type { Edge } from '../../edge/index.js';
|
|
5
|
-
import type {
|
|
5
|
+
import type { LocalAlias } from '../../graph/index.js';
|
|
6
6
|
import type { Node, NodeId } from '../../node/index.js';
|
|
7
7
|
import type { Effect, PlanningBlocker, PlanningConflict, Premise } from './model.js';
|
|
8
8
|
import { type DesiredProperties } from '../../properties/index.js';
|
|
9
9
|
export interface PlanningContext {
|
|
10
10
|
readonly nodes: ReadonlyMap<NodeId, Node>;
|
|
11
11
|
readonly edges: ReadonlyMap<string, Edge>;
|
|
12
|
-
readonly correspondence: ReadonlyMap<
|
|
13
|
-
readonly created: Set<
|
|
12
|
+
readonly correspondence: ReadonlyMap<LocalAlias, CorrespondenceEntry>;
|
|
13
|
+
readonly created: Set<LocalAlias>;
|
|
14
14
|
readonly evidence: readonly ObservationEvidence[];
|
|
15
15
|
readonly premises: Premise[];
|
|
16
16
|
readonly effects: Effect[];
|
|
@@ -3,12 +3,12 @@ import type { CorrespondenceConflict } from '#graph/reconcile/correspondence';
|
|
|
3
3
|
import type { ObservationRequirement, QueryObservation } from '#graph/reconcile/evidence';
|
|
4
4
|
import type { ObservationConflict } from '#graph/reconcile/observation';
|
|
5
5
|
import type { EdgeKey, EdgeSlug } from '../../edge/index.js';
|
|
6
|
-
import type {
|
|
6
|
+
import type { LocalAlias } from '../../graph/index.js';
|
|
7
7
|
import type { NodeId } from '../../node/index.js';
|
|
8
8
|
import type { Delta, DesiredProperties, Properties } from '../../properties/index.js';
|
|
9
9
|
import type { DesiredFingerprint, DesiredSelection, Expectation, ReconcileConflict } from '../condition/index.js';
|
|
10
10
|
export type ResolvedNodeRef = NodeId | {
|
|
11
|
-
readonly created:
|
|
11
|
+
readonly created: LocalAlias;
|
|
12
12
|
};
|
|
13
13
|
export interface ResolvedEdgeRef {
|
|
14
14
|
readonly source: ResolvedNodeRef;
|
|
@@ -35,7 +35,7 @@ export interface QueryPremise {
|
|
|
35
35
|
}
|
|
36
36
|
export type Effect = {
|
|
37
37
|
readonly op: 'node.create';
|
|
38
|
-
readonly as:
|
|
38
|
+
readonly as: LocalAlias;
|
|
39
39
|
readonly class: ClassKey;
|
|
40
40
|
readonly properties: Properties;
|
|
41
41
|
} | {
|
|
@@ -63,7 +63,7 @@ export type Effect = {
|
|
|
63
63
|
};
|
|
64
64
|
export type PlanningConflict = ReconcileConflict | CorrespondenceConflict | ObservationConflict | {
|
|
65
65
|
readonly kind: 'desired-binding-uncreated';
|
|
66
|
-
readonly desired:
|
|
66
|
+
readonly desired: LocalAlias;
|
|
67
67
|
} | {
|
|
68
68
|
readonly kind: 'node-class-observed';
|
|
69
69
|
readonly node: NodeId;
|
|
@@ -72,6 +72,10 @@ export type PlanningConflict = ReconcileConflict | CorrespondenceConflict | Obse
|
|
|
72
72
|
} | {
|
|
73
73
|
readonly kind: 'node-identity-absent';
|
|
74
74
|
readonly node: NodeId;
|
|
75
|
+
} | {
|
|
76
|
+
/** One effect target reached through aliasing refs with different desired content. */
|
|
77
|
+
readonly kind: 'desired-target-contradictory';
|
|
78
|
+
readonly effects: readonly Effect[];
|
|
75
79
|
};
|
|
76
80
|
export type PlanningBlocker = {
|
|
77
81
|
readonly kind: 'selection-unsatisfied';
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
import { fingerprint } from '../condition/index.js';
|
|
2
|
-
import { canonicalBlockers, canonicalConflicts, canonicalEffects, canonicalPremises, canonicalRequirements, createPlan, } from './canonical.js';
|
|
2
|
+
import { canonicalBlockers, canonicalConflicts, canonicalEffects, canonicalPremises, canonicalRequirements, contradictoryEffects, createPlan, } from './canonical.js';
|
|
3
3
|
import { createPlanningContext } from './context.js';
|
|
4
4
|
import { planEdge } from './edge.js';
|
|
5
5
|
import { planNode } from './node.js';
|
|
@@ -13,6 +13,7 @@ export function plan(input) {
|
|
|
13
13
|
planEdge(edge, context);
|
|
14
14
|
for (const selection of input.desired.selections)
|
|
15
15
|
planSelection(selection, context);
|
|
16
|
+
context.conflicts.push(...contradictoryEffects(context.effects));
|
|
16
17
|
if (context.conflicts.length > 0) {
|
|
17
18
|
return Object.freeze({
|
|
18
19
|
kind: 'conflict',
|
|
@@ -12,5 +12,8 @@ export function authorityRelation(target, role, description) {
|
|
|
12
12
|
target: { as: role, accepts: [target], incoming: '0..*' },
|
|
13
13
|
description,
|
|
14
14
|
extends: [Edge],
|
|
15
|
+
// The installed authority map is observed through Identity.can, never read wholesale: only the
|
|
16
|
+
// Kernel Domain and Root read its Edges.
|
|
17
|
+
policies: { read: false, traverse: false },
|
|
15
18
|
});
|
|
16
19
|
}
|
|
@@ -1,27 +1,26 @@
|
|
|
1
|
-
import { z } from 'zod';
|
|
2
1
|
/** Exact reusable schema for one ClaimConstraint in a graph or callable contract. */
|
|
3
|
-
export declare const claimConstraintSchema:
|
|
4
|
-
claim:
|
|
5
|
-
op:
|
|
6
|
-
value:
|
|
7
|
-
},
|
|
8
|
-
claim:
|
|
9
|
-
op:
|
|
10
|
-
value:
|
|
11
|
-
},
|
|
12
|
-
claim:
|
|
13
|
-
op:
|
|
14
|
-
},
|
|
2
|
+
export declare const claimConstraintSchema: import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
|
|
3
|
+
claim: import("zod").ZodString;
|
|
4
|
+
op: import("zod").ZodLiteral<"contains">;
|
|
5
|
+
value: import("zod").ZodNonOptional<import("zod").ZodUnknown>;
|
|
6
|
+
}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
|
|
7
|
+
claim: import("zod").ZodString;
|
|
8
|
+
op: import("zod").ZodLiteral<"eq">;
|
|
9
|
+
value: import("zod").ZodNonOptional<import("zod").ZodUnknown>;
|
|
10
|
+
}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
|
|
11
|
+
claim: import("zod").ZodString;
|
|
12
|
+
op: import("zod").ZodLiteral<"exists">;
|
|
13
|
+
}, import("zod/v4/core").$strict>], "op">;
|
|
15
14
|
/** Exact reusable bounded schema for an Identity's required ClaimConstraints. */
|
|
16
|
-
export declare const requiredClaimsSchema:
|
|
17
|
-
claim:
|
|
18
|
-
op:
|
|
19
|
-
value:
|
|
20
|
-
},
|
|
21
|
-
claim:
|
|
22
|
-
op:
|
|
23
|
-
value:
|
|
24
|
-
},
|
|
25
|
-
claim:
|
|
26
|
-
op:
|
|
27
|
-
},
|
|
15
|
+
export declare const requiredClaimsSchema: import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
|
|
16
|
+
claim: import("zod").ZodString;
|
|
17
|
+
op: import("zod").ZodLiteral<"contains">;
|
|
18
|
+
value: import("zod").ZodNonOptional<import("zod").ZodUnknown>;
|
|
19
|
+
}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
|
|
20
|
+
claim: import("zod").ZodString;
|
|
21
|
+
op: import("zod").ZodLiteral<"eq">;
|
|
22
|
+
value: import("zod").ZodNonOptional<import("zod").ZodUnknown>;
|
|
23
|
+
}, import("zod/v4/core").$strict>, import("zod").ZodObject<{
|
|
24
|
+
claim: import("zod").ZodString;
|
|
25
|
+
op: import("zod").ZodLiteral<"exists">;
|
|
26
|
+
}, import("zod/v4/core").$strict>], "op">>;
|
|
@@ -1,12 +1,12 @@
|
|
|
1
|
-
import {
|
|
1
|
+
import { array, discriminatedUnion, literal, strictObject, string, unknown as unknownSchema, } from 'zod';
|
|
2
2
|
import { claims } from '#auth';
|
|
3
|
-
const claim =
|
|
4
|
-
const portableValue =
|
|
3
|
+
const claim = string().min(1);
|
|
4
|
+
const portableValue = unknownSchema().nonoptional();
|
|
5
5
|
/** Exact reusable schema for one ClaimConstraint in a graph or callable contract. */
|
|
6
|
-
export const claimConstraintSchema =
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
6
|
+
export const claimConstraintSchema = discriminatedUnion('op', [
|
|
7
|
+
strictObject({ claim, op: literal('contains'), value: portableValue }),
|
|
8
|
+
strictObject({ claim, op: literal('eq'), value: portableValue }),
|
|
9
|
+
strictObject({ claim, op: literal('exists') }),
|
|
10
10
|
]);
|
|
11
11
|
/** Exact reusable bounded schema for an Identity's required ClaimConstraints. */
|
|
12
|
-
export const requiredClaimsSchema =
|
|
12
|
+
export const requiredClaimsSchema = array(claimConstraintSchema).max(claims.MAX_REQUIRED_CLAIMS);
|
|
@@ -1,109 +1,34 @@
|
|
|
1
1
|
import { type builder } from '@astrale-os/kernel-dsl/v1';
|
|
2
2
|
export declare const GovernedBy: builder.DirectedEdgeClass<{
|
|
3
|
+
readonly depth: 1;
|
|
3
4
|
readonly abstract: false;
|
|
4
|
-
readonly
|
|
5
|
-
readonly as: "class";
|
|
6
|
-
readonly accepts: readonly [builder.NodeClass<{
|
|
7
|
-
readonly abstract: false;
|
|
8
|
-
readonly description: "The installed graph projection of a Node Class or Edge Class declaration.";
|
|
9
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
10
|
-
readonly abstract: true;
|
|
11
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
12
|
-
readonly abstract: true;
|
|
13
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
14
|
-
}>];
|
|
15
|
-
readonly description: "Optional human-facing description metadata with no identity or authority semantics.";
|
|
16
|
-
readonly properties: {
|
|
17
|
-
description: builder.Property<Readonly<{
|
|
18
|
-
readonly type: 'string';
|
|
19
|
-
readonly minLength: 1;
|
|
20
|
-
readonly maxLength: 1000;
|
|
21
|
-
}>, {
|
|
22
|
-
readonly required: false;
|
|
23
|
-
}>;
|
|
24
|
-
};
|
|
25
|
-
}>, builder.NodeClass<{
|
|
26
|
-
readonly abstract: true;
|
|
27
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
28
|
-
readonly abstract: true;
|
|
29
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
30
|
-
}>];
|
|
31
|
-
readonly description: "Optional bounded presentation icon metadata.";
|
|
32
|
-
readonly properties: {
|
|
33
|
-
icon: builder.Property<Readonly<{
|
|
34
|
-
readonly type: 'string';
|
|
35
|
-
readonly minLength: 1;
|
|
36
|
-
readonly maxLength: 8000;
|
|
37
|
-
}>, {
|
|
38
|
-
readonly required: false;
|
|
39
|
-
}>;
|
|
40
|
-
};
|
|
41
|
-
}>];
|
|
42
|
-
readonly properties: {
|
|
43
|
-
readonly kind: {
|
|
44
|
-
readonly enum: readonly ["node", "edge"];
|
|
45
|
-
};
|
|
46
|
-
readonly abstract: {
|
|
47
|
-
readonly type: "boolean";
|
|
48
|
-
};
|
|
49
|
-
};
|
|
50
|
-
}>];
|
|
51
|
-
readonly outgoing: "0..*";
|
|
52
|
-
};
|
|
53
|
-
readonly target: {
|
|
54
|
-
readonly as: "policy";
|
|
55
|
-
readonly accepts: readonly [builder.NodeClass<{
|
|
56
|
-
readonly abstract: false;
|
|
57
|
-
readonly description: "The installed graph projection of one named closed Policy declaration owned by a Domain.";
|
|
58
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
59
|
-
readonly abstract: true;
|
|
60
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
61
|
-
readonly abstract: true;
|
|
62
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
63
|
-
}>];
|
|
64
|
-
readonly description: "Optional human-facing description metadata with no identity or authority semantics.";
|
|
65
|
-
readonly properties: {
|
|
66
|
-
description: builder.Property<Readonly<{
|
|
67
|
-
readonly type: 'string';
|
|
68
|
-
readonly minLength: 1;
|
|
69
|
-
readonly maxLength: 1000;
|
|
70
|
-
}>, {
|
|
71
|
-
readonly required: false;
|
|
72
|
-
}>;
|
|
73
|
-
};
|
|
74
|
-
}>];
|
|
75
|
-
}>];
|
|
76
|
-
readonly incoming: "0..*";
|
|
77
|
-
};
|
|
78
|
-
readonly description: "The protected projection of one Class read or traverse Policy assignment.";
|
|
79
|
-
readonly extends: readonly [builder.DirectedEdgeClass<{
|
|
5
|
+
readonly extends: readonly [builder.ClassReferenceProjection<"edge", {
|
|
80
6
|
readonly abstract: true;
|
|
7
|
+
readonly depth: 0;
|
|
8
|
+
readonly properties: never;
|
|
81
9
|
readonly source: {
|
|
82
10
|
readonly as: "source";
|
|
83
|
-
readonly accepts: readonly [builder.NodeClass<{
|
|
84
|
-
readonly abstract: true;
|
|
85
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
86
|
-
}>];
|
|
87
11
|
readonly outgoing: "0..*";
|
|
88
12
|
};
|
|
89
13
|
readonly target: {
|
|
90
14
|
readonly as: "target";
|
|
91
|
-
readonly accepts: readonly [builder.NodeClass<{
|
|
92
|
-
readonly abstract: true;
|
|
93
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
94
|
-
}>];
|
|
95
15
|
readonly incoming: "0..*";
|
|
96
16
|
};
|
|
97
|
-
readonly
|
|
98
|
-
}>];
|
|
17
|
+
readonly constraints: Record<never, never>;
|
|
18
|
+
}, never, never, never>];
|
|
99
19
|
readonly properties: {
|
|
100
|
-
operations: builder.
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
20
|
+
readonly operations: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "operations", "self", never>;
|
|
21
|
+
};
|
|
22
|
+
readonly source: {
|
|
23
|
+
readonly as: "class";
|
|
24
|
+
readonly outgoing: "0..*";
|
|
25
|
+
};
|
|
26
|
+
readonly target: {
|
|
27
|
+
readonly as: "policy";
|
|
28
|
+
readonly incoming: "0..*";
|
|
105
29
|
};
|
|
106
30
|
readonly constraints: {
|
|
107
31
|
readonly noSelf: true;
|
|
108
32
|
};
|
|
33
|
+
readonly effectiveProperties: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "operations", "self", never>;
|
|
109
34
|
}>;
|
|
@@ -9,7 +9,7 @@ export const GovernedBy = edgeClass.directed({
|
|
|
9
9
|
description: 'The protected projection of one Class read or traverse Policy assignment.',
|
|
10
10
|
extends: [Edge],
|
|
11
11
|
properties: {
|
|
12
|
-
operations: property({ enum: [['read'], ['traverse'], ['read', 'traverse']] }, {
|
|
12
|
+
operations: property({ enum: [['read'], ['traverse'], ['read', 'traverse']] }, {}),
|
|
13
13
|
},
|
|
14
14
|
constraints: { noSelf: true },
|
|
15
15
|
});
|
|
@@ -1,20 +1,34 @@
|
|
|
1
1
|
import { type builder } from '@astrale-os/kernel-dsl/v1';
|
|
2
2
|
export declare const Operation: builder.NodeClass<{
|
|
3
|
+
readonly depth: 2;
|
|
3
4
|
readonly abstract: false;
|
|
4
|
-
readonly
|
|
5
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
5
|
+
readonly extends: readonly [builder.ClassReferenceProjection<"node", {
|
|
6
6
|
readonly abstract: true;
|
|
7
|
-
readonly
|
|
8
|
-
readonly abstract: true;
|
|
9
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
10
|
-
}>];
|
|
11
|
-
readonly description: "Stable human-facing name metadata that never acts as a locator.";
|
|
7
|
+
readonly depth: 1;
|
|
12
8
|
readonly properties: {
|
|
13
|
-
readonly name:
|
|
14
|
-
readonly type: "string";
|
|
15
|
-
readonly minLength: 1;
|
|
16
|
-
readonly maxLength: 100;
|
|
17
|
-
};
|
|
9
|
+
readonly name: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", "self", undefined>;
|
|
18
10
|
};
|
|
19
|
-
|
|
11
|
+
readonly methods: Readonly<Record<never, never>>;
|
|
12
|
+
}, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", builder.ClassOwnerProjection<"node", {
|
|
13
|
+
readonly abstract: true;
|
|
14
|
+
readonly depth: 1;
|
|
15
|
+
readonly properties: {
|
|
16
|
+
readonly name: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", "self", undefined>;
|
|
17
|
+
};
|
|
18
|
+
readonly methods: Readonly<Record<never, never>>;
|
|
19
|
+
}, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", unknown, undefined>, never, never>, undefined>, never, never>];
|
|
20
|
+
readonly properties: never;
|
|
21
|
+
readonly methods: Readonly<Record<never, never>>;
|
|
22
|
+
readonly effectiveProperties: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", builder.ClassOwnerProjection<"node", {
|
|
23
|
+
readonly abstract: true;
|
|
24
|
+
readonly depth: 1;
|
|
25
|
+
readonly properties: {
|
|
26
|
+
readonly name: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", "self", undefined>;
|
|
27
|
+
};
|
|
28
|
+
readonly methods: Readonly<Record<never, never>>;
|
|
29
|
+
}, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", unknown, undefined>, never, never>, undefined>;
|
|
30
|
+
readonly abstractInstanceMethods: never;
|
|
31
|
+
readonly abstractStaticMethods: never;
|
|
32
|
+
readonly effectiveInstanceMethods: never;
|
|
33
|
+
readonly effectiveStaticMethods: never;
|
|
20
34
|
}>;
|
|
@@ -10,174 +10,14 @@ import { CanUse } from './can-use.js';
|
|
|
10
10
|
import { AuthorityOperationOrder, type AuthorityOperation } from './operation.js';
|
|
11
11
|
export { AuthorityOperationOrder, type AuthorityOperation };
|
|
12
12
|
export declare const AuthorityOperations: Readonly<{
|
|
13
|
-
create: builder.CoreNode
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
}>];
|
|
22
|
-
readonly description: "Stable human-facing name metadata that never acts as a locator.";
|
|
23
|
-
readonly properties: {
|
|
24
|
-
readonly name: {
|
|
25
|
-
readonly type: "string";
|
|
26
|
-
readonly minLength: 1;
|
|
27
|
-
readonly maxLength: 100;
|
|
28
|
-
};
|
|
29
|
-
};
|
|
30
|
-
}>];
|
|
31
|
-
}>, {
|
|
32
|
-
readonly name: "create";
|
|
33
|
-
}>;
|
|
34
|
-
read: builder.CoreNode<builder.NodeClass<{
|
|
35
|
-
readonly abstract: false;
|
|
36
|
-
readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
|
|
37
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
38
|
-
readonly abstract: true;
|
|
39
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
40
|
-
readonly abstract: true;
|
|
41
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
42
|
-
}>];
|
|
43
|
-
readonly description: "Stable human-facing name metadata that never acts as a locator.";
|
|
44
|
-
readonly properties: {
|
|
45
|
-
readonly name: {
|
|
46
|
-
readonly type: "string";
|
|
47
|
-
readonly minLength: 1;
|
|
48
|
-
readonly maxLength: 100;
|
|
49
|
-
};
|
|
50
|
-
};
|
|
51
|
-
}>];
|
|
52
|
-
}>, {
|
|
53
|
-
readonly name: "read";
|
|
54
|
-
}>;
|
|
55
|
-
update: builder.CoreNode<builder.NodeClass<{
|
|
56
|
-
readonly abstract: false;
|
|
57
|
-
readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
|
|
58
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
59
|
-
readonly abstract: true;
|
|
60
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
61
|
-
readonly abstract: true;
|
|
62
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
63
|
-
}>];
|
|
64
|
-
readonly description: "Stable human-facing name metadata that never acts as a locator.";
|
|
65
|
-
readonly properties: {
|
|
66
|
-
readonly name: {
|
|
67
|
-
readonly type: "string";
|
|
68
|
-
readonly minLength: 1;
|
|
69
|
-
readonly maxLength: 100;
|
|
70
|
-
};
|
|
71
|
-
};
|
|
72
|
-
}>];
|
|
73
|
-
}>, {
|
|
74
|
-
readonly name: "update";
|
|
75
|
-
}>;
|
|
76
|
-
delete: builder.CoreNode<builder.NodeClass<{
|
|
77
|
-
readonly abstract: false;
|
|
78
|
-
readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
|
|
79
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
80
|
-
readonly abstract: true;
|
|
81
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
82
|
-
readonly abstract: true;
|
|
83
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
84
|
-
}>];
|
|
85
|
-
readonly description: "Stable human-facing name metadata that never acts as a locator.";
|
|
86
|
-
readonly properties: {
|
|
87
|
-
readonly name: {
|
|
88
|
-
readonly type: "string";
|
|
89
|
-
readonly minLength: 1;
|
|
90
|
-
readonly maxLength: 100;
|
|
91
|
-
};
|
|
92
|
-
};
|
|
93
|
-
}>];
|
|
94
|
-
}>, {
|
|
95
|
-
readonly name: "delete";
|
|
96
|
-
}>;
|
|
97
|
-
traverse: builder.CoreNode<builder.NodeClass<{
|
|
98
|
-
readonly abstract: false;
|
|
99
|
-
readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
|
|
100
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
101
|
-
readonly abstract: true;
|
|
102
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
103
|
-
readonly abstract: true;
|
|
104
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
105
|
-
}>];
|
|
106
|
-
readonly description: "Stable human-facing name metadata that never acts as a locator.";
|
|
107
|
-
readonly properties: {
|
|
108
|
-
readonly name: {
|
|
109
|
-
readonly type: "string";
|
|
110
|
-
readonly minLength: 1;
|
|
111
|
-
readonly maxLength: 100;
|
|
112
|
-
};
|
|
113
|
-
};
|
|
114
|
-
}>];
|
|
115
|
-
}>, {
|
|
116
|
-
readonly name: "traverse";
|
|
117
|
-
}>;
|
|
118
|
-
use: builder.CoreNode<builder.NodeClass<{
|
|
119
|
-
readonly abstract: false;
|
|
120
|
-
readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
|
|
121
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
122
|
-
readonly abstract: true;
|
|
123
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
124
|
-
readonly abstract: true;
|
|
125
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
126
|
-
}>];
|
|
127
|
-
readonly description: "Stable human-facing name metadata that never acts as a locator.";
|
|
128
|
-
readonly properties: {
|
|
129
|
-
readonly name: {
|
|
130
|
-
readonly type: "string";
|
|
131
|
-
readonly minLength: 1;
|
|
132
|
-
readonly maxLength: 100;
|
|
133
|
-
};
|
|
134
|
-
};
|
|
135
|
-
}>];
|
|
136
|
-
}>, {
|
|
137
|
-
readonly name: "use";
|
|
138
|
-
}>;
|
|
139
|
-
grant: builder.CoreNode<builder.NodeClass<{
|
|
140
|
-
readonly abstract: false;
|
|
141
|
-
readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
|
|
142
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
143
|
-
readonly abstract: true;
|
|
144
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
145
|
-
readonly abstract: true;
|
|
146
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
147
|
-
}>];
|
|
148
|
-
readonly description: "Stable human-facing name metadata that never acts as a locator.";
|
|
149
|
-
readonly properties: {
|
|
150
|
-
readonly name: {
|
|
151
|
-
readonly type: "string";
|
|
152
|
-
readonly minLength: 1;
|
|
153
|
-
readonly maxLength: 100;
|
|
154
|
-
};
|
|
155
|
-
};
|
|
156
|
-
}>];
|
|
157
|
-
}>, {
|
|
158
|
-
readonly name: "grant";
|
|
159
|
-
}>;
|
|
160
|
-
revoke: builder.CoreNode<builder.NodeClass<{
|
|
161
|
-
readonly abstract: false;
|
|
162
|
-
readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
|
|
163
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
164
|
-
readonly abstract: true;
|
|
165
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
166
|
-
readonly abstract: true;
|
|
167
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
168
|
-
}>];
|
|
169
|
-
readonly description: "Stable human-facing name metadata that never acts as a locator.";
|
|
170
|
-
readonly properties: {
|
|
171
|
-
readonly name: {
|
|
172
|
-
readonly type: "string";
|
|
173
|
-
readonly minLength: 1;
|
|
174
|
-
readonly maxLength: 100;
|
|
175
|
-
};
|
|
176
|
-
};
|
|
177
|
-
}>];
|
|
178
|
-
}>, {
|
|
179
|
-
readonly name: "revoke";
|
|
180
|
-
}>;
|
|
13
|
+
create: builder.CoreNode;
|
|
14
|
+
read: builder.CoreNode;
|
|
15
|
+
update: builder.CoreNode;
|
|
16
|
+
delete: builder.CoreNode;
|
|
17
|
+
traverse: builder.CoreNode;
|
|
18
|
+
use: builder.CoreNode;
|
|
19
|
+
grant: builder.CoreNode;
|
|
20
|
+
revoke: builder.CoreNode;
|
|
181
21
|
}>;
|
|
182
22
|
export type AuthorityRelation = typeof CanCreate | typeof CanRead | typeof CanUpdate | typeof CanDelete | typeof CanTraverse | typeof CanUse | typeof CanGrant | typeof CanRevoke;
|
|
183
23
|
export declare function operationOf(relation: AuthorityRelation): AuthorityOperation;
|
|
@@ -1,22 +1,34 @@
|
|
|
1
1
|
import { type builder } from '@astrale-os/kernel-dsl/v1';
|
|
2
2
|
export declare const Policy: builder.NodeClass<{
|
|
3
|
+
readonly depth: 2;
|
|
3
4
|
readonly abstract: false;
|
|
4
|
-
readonly
|
|
5
|
-
readonly extends: readonly [builder.NodeClass<{
|
|
5
|
+
readonly extends: readonly [builder.ClassReferenceProjection<"node", {
|
|
6
6
|
readonly abstract: true;
|
|
7
|
-
readonly
|
|
8
|
-
readonly abstract: true;
|
|
9
|
-
readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
|
|
10
|
-
}>];
|
|
11
|
-
readonly description: "Optional human-facing description metadata with no identity or authority semantics.";
|
|
7
|
+
readonly depth: 1;
|
|
12
8
|
readonly properties: {
|
|
13
|
-
description: builder.
|
|
14
|
-
readonly type: 'string';
|
|
15
|
-
readonly minLength: 1;
|
|
16
|
-
readonly maxLength: 1000;
|
|
17
|
-
}>, {
|
|
18
|
-
readonly required: false;
|
|
19
|
-
}>;
|
|
9
|
+
readonly description: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", "self", never>;
|
|
20
10
|
};
|
|
21
|
-
|
|
11
|
+
readonly methods: Readonly<Record<never, never>>;
|
|
12
|
+
}, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", builder.ClassOwnerProjection<"node", {
|
|
13
|
+
readonly abstract: true;
|
|
14
|
+
readonly depth: 1;
|
|
15
|
+
readonly properties: {
|
|
16
|
+
readonly description: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", "self", never>;
|
|
17
|
+
};
|
|
18
|
+
readonly methods: Readonly<Record<never, never>>;
|
|
19
|
+
}, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", unknown, never>, never, never>, never>, never, never>];
|
|
20
|
+
readonly properties: never;
|
|
21
|
+
readonly methods: Readonly<Record<never, never>>;
|
|
22
|
+
readonly effectiveProperties: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", builder.ClassOwnerProjection<"node", {
|
|
23
|
+
readonly abstract: true;
|
|
24
|
+
readonly depth: 1;
|
|
25
|
+
readonly properties: {
|
|
26
|
+
readonly description: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", "self", never>;
|
|
27
|
+
};
|
|
28
|
+
readonly methods: Readonly<Record<never, never>>;
|
|
29
|
+
}, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", unknown, never>, never, never>, never>;
|
|
30
|
+
readonly abstractInstanceMethods: never;
|
|
31
|
+
readonly abstractStaticMethods: never;
|
|
32
|
+
readonly effectiveInstanceMethods: never;
|
|
33
|
+
readonly effectiveStaticMethods: never;
|
|
22
34
|
}>;
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
import { K } from '../kernel/schema.js';
|
|
2
|
+
/** The Kernel instance of the authority vocabulary; Core Auth interprets authority through it. */
|
|
3
|
+
export const authorityVocabulary = Object.freeze({
|
|
4
|
+
identity: ref(K.classes.Identity.ref),
|
|
5
|
+
composition: Object.freeze({
|
|
6
|
+
extension: ref(K.classes.extends_with.ref),
|
|
7
|
+
constraint: ref(K.classes.constrained_by.ref),
|
|
8
|
+
exclusion: ref(K.classes.excluded_from.ref),
|
|
9
|
+
}),
|
|
10
|
+
capabilities: Object.freeze({
|
|
11
|
+
create: ref(K.classes.can_create.ref),
|
|
12
|
+
read: ref(K.classes.can_read.ref),
|
|
13
|
+
traverse: ref(K.classes.can_traverse.ref),
|
|
14
|
+
update: ref(K.classes.can_update.ref),
|
|
15
|
+
delete: ref(K.classes.can_delete.ref),
|
|
16
|
+
}),
|
|
17
|
+
instanceOf: ref(K.classes.instance_of.ref),
|
|
18
|
+
});
|
|
19
|
+
function ref(value) {
|
|
20
|
+
return Object.freeze({
|
|
21
|
+
origin: value.origin,
|
|
22
|
+
kind: 'class',
|
|
23
|
+
name: value.name,
|
|
24
|
+
});
|
|
25
|
+
}
|
|
@@ -0,0 +1,32 @@
|
|
|
1
|
+
import { type builder } from '@astrale-os/kernel-dsl/v1';
|
|
2
|
+
export declare const Entrypoint: builder.DirectedEdgeClass<{
|
|
3
|
+
readonly depth: 1;
|
|
4
|
+
readonly abstract: false;
|
|
5
|
+
readonly extends: readonly [builder.ClassReferenceProjection<"edge", {
|
|
6
|
+
readonly abstract: true;
|
|
7
|
+
readonly depth: 0;
|
|
8
|
+
readonly properties: never;
|
|
9
|
+
readonly source: {
|
|
10
|
+
readonly as: "source";
|
|
11
|
+
readonly outgoing: "0..*";
|
|
12
|
+
};
|
|
13
|
+
readonly target: {
|
|
14
|
+
readonly as: "target";
|
|
15
|
+
readonly incoming: "0..*";
|
|
16
|
+
};
|
|
17
|
+
readonly constraints: Record<never, never>;
|
|
18
|
+
}, never, never, never>];
|
|
19
|
+
readonly properties: never;
|
|
20
|
+
readonly source: {
|
|
21
|
+
readonly as: "view";
|
|
22
|
+
readonly outgoing: "0..1";
|
|
23
|
+
};
|
|
24
|
+
readonly target: {
|
|
25
|
+
readonly as: "domain";
|
|
26
|
+
readonly incoming: "0..1";
|
|
27
|
+
};
|
|
28
|
+
readonly constraints: {
|
|
29
|
+
readonly noSelf: true;
|
|
30
|
+
};
|
|
31
|
+
readonly effectiveProperties: never;
|
|
32
|
+
}>;
|