@astrale-os/kernel-core 0.9.0-beta.9 → 1.0.0-beta.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (378) hide show
  1. package/dist/auth/authority/accept.js +4 -0
  2. package/dist/auth/authority/admission/admission.d.ts +4 -1
  3. package/dist/auth/authority/admission/admission.js +46 -147
  4. package/dist/auth/authority/admission/index.d.ts +1 -1
  5. package/dist/auth/authority/admission/index.js +1 -1
  6. package/dist/auth/authority/admission/references.d.ts +13 -0
  7. package/dist/auth/authority/admission/references.js +38 -0
  8. package/dist/auth/authority/admission/term.d.ts +6 -0
  9. package/dist/auth/authority/admission/term.js +60 -0
  10. package/dist/auth/authority/admission/wire.d.ts +8 -0
  11. package/dist/auth/authority/admission/wire.js +33 -0
  12. package/dist/auth/authority/canonical.d.ts +2 -0
  13. package/dist/auth/authority/canonical.js +15 -0
  14. package/dist/auth/authority/index.d.ts +9 -2
  15. package/dist/auth/authority/index.js +6 -1
  16. package/dist/auth/authority/language/index.d.ts +3 -1
  17. package/dist/auth/authority/language/index.js +1 -0
  18. package/dist/auth/authority/language/predicate.d.ts +31 -16
  19. package/dist/auth/authority/language/predicate.js +1 -1
  20. package/dist/auth/authority/language/program.d.ts +21 -0
  21. package/dist/auth/authority/language/program.js +2 -0
  22. package/dist/auth/authority/normalization/index.d.ts +1 -1
  23. package/dist/auth/authority/normalization/index.js +1 -1
  24. package/dist/auth/authority/normalization/normalize.d.ts +2 -0
  25. package/dist/auth/authority/normalization/normalize.js +38 -16
  26. package/dist/auth/authority/ownership.optimization.d.ts +8 -0
  27. package/dist/auth/authority/ownership.optimization.js +83 -0
  28. package/dist/auth/authority/prepare-binder-body.d.ts +4 -0
  29. package/dist/auth/authority/prepare-binder-body.js +31 -0
  30. package/dist/auth/authority/program.d.ts +28 -0
  31. package/dist/auth/authority/program.js +191 -0
  32. package/dist/auth/authority/semantics/class-authority.d.ts +8 -0
  33. package/dist/auth/authority/semantics/class-authority.js +26 -0
  34. package/dist/auth/authority/semantics/composition.d.ts +39 -0
  35. package/dist/auth/authority/semantics/composition.js +112 -0
  36. package/dist/auth/authority/semantics/failure.d.ts +21 -0
  37. package/dist/auth/authority/semantics/failure.js +10 -0
  38. package/dist/auth/authority/semantics/index.d.ts +11 -0
  39. package/dist/auth/authority/semantics/index.js +5 -0
  40. package/dist/auth/authority/semantics/interpret.d.ts +41 -0
  41. package/dist/auth/authority/semantics/interpret.js +388 -0
  42. package/dist/auth/authority/semantics/snapshot.d.ts +40 -0
  43. package/dist/auth/authority/semantics/terms.d.ts +20 -0
  44. package/dist/auth/authority/semantics/terms.js +96 -0
  45. package/dist/auth/authority/semantics/vocabulary.d.ts +19 -0
  46. package/dist/auth/context/context.d.ts +4 -3
  47. package/dist/auth/expression/authoring/builder.d.ts +2 -11
  48. package/dist/auth/expression/authoring/builder.js +1 -45
  49. package/dist/auth/expression/authoring/index.d.ts +1 -1
  50. package/dist/auth/expression/authoring/index.js +1 -1
  51. package/dist/auth/expression/index.d.ts +1 -2
  52. package/dist/auth/expression/index.js +1 -2
  53. package/dist/auth/expression/language/identity-expression.d.ts +2 -22
  54. package/dist/auth/grant/index.d.ts +1 -1
  55. package/dist/auth/grant/index.js +1 -1
  56. package/dist/auth/grant/resolved/admission.d.ts +4 -3
  57. package/dist/auth/grant/resolved/admission.js +23 -13
  58. package/dist/auth/grant/resolved/grant.d.ts +1 -1
  59. package/dist/auth/grant/resolved/index.d.ts +1 -1
  60. package/dist/auth/grant/resolved/index.js +1 -1
  61. package/dist/auth/grant/unresolved/admission.d.ts +4 -1
  62. package/dist/auth/grant/unresolved/admission.js +27 -67
  63. package/dist/auth/grant/unresolved/limits.d.ts +2 -4
  64. package/dist/auth/grant/unresolved/limits.js +1 -5
  65. package/dist/auth/identity/admission.js +11 -3
  66. package/dist/auth/identity/identity.d.ts +15 -3
  67. package/dist/auth/identity/index.d.ts +1 -1
  68. package/dist/auth/index.d.ts +4 -4
  69. package/dist/auth/index.js +1 -1
  70. package/dist/auth/jwk/index.d.ts +1 -1
  71. package/dist/auth/jwk/index.js +1 -1
  72. package/dist/auth/jwk/thumbprint.d.ts +2 -0
  73. package/dist/auth/jwk/thumbprint.js +12 -6
  74. package/dist/auth/register/fingerprint/fingerprint.d.ts +25 -0
  75. package/dist/auth/register/fingerprint/fingerprint.js +31 -0
  76. package/dist/auth/register/fingerprint/index.d.ts +2 -0
  77. package/dist/auth/register/index.d.ts +5 -0
  78. package/dist/auth/register/request/admission.d.ts +3 -0
  79. package/dist/auth/register/request/admission.js +103 -0
  80. package/dist/auth/register/request/index.d.ts +3 -0
  81. package/dist/auth/register/request/limits.d.ts +6 -0
  82. package/dist/auth/register/request/limits.js +6 -0
  83. package/dist/auth/register/request/request.d.ts +19 -0
  84. package/dist/auth/{provision → register}/request/self-issuer.d.ts +1 -1
  85. package/dist/auth/{provision → register}/request/self-issuer.js +1 -1
  86. package/dist/auth/register/result/index.d.ts +1 -0
  87. package/dist/auth/register/result/result.d.ts +10 -0
  88. package/dist/auth/register/result/result.js +1 -0
  89. package/dist/callable/contract/body.d.ts +10 -0
  90. package/dist/callable/contract/body.js +7 -0
  91. package/dist/callable/contract/index.d.ts +2 -1
  92. package/dist/callable/contract/index.js +1 -1
  93. package/dist/callable/contract/output.d.ts +18 -2
  94. package/dist/callable/index.d.ts +3 -2
  95. package/dist/callable/index.js +2 -1
  96. package/dist/callable/invocation/call.d.ts +16 -2
  97. package/dist/callable/invocation/call.js +41 -1
  98. package/dist/callable/invocation/index.d.ts +1 -1
  99. package/dist/callable/invocation/index.js +1 -1
  100. package/dist/callable/invocation/result.d.ts +2 -2
  101. package/dist/dns-label.d.ts +1 -2
  102. package/dist/dns-label.js +2 -3
  103. package/dist/graph/graph/graph.d.ts +1 -5
  104. package/dist/graph/graph/graph.js +3 -27
  105. package/dist/graph/graph/index.d.ts +2 -4
  106. package/dist/graph/graph/index.js +2 -3
  107. package/dist/graph/graph/model/codec.js +4 -4
  108. package/dist/graph/graph/model/index.d.ts +1 -1
  109. package/dist/graph/graph/model/index.js +1 -1
  110. package/dist/graph/graph/model/model.d.ts +7 -7
  111. package/dist/graph/graph/model/model.js +6 -6
  112. package/dist/graph/graph/model/wire.d.ts +58 -78
  113. package/dist/graph/graph/model/wire.js +18 -19
  114. package/dist/graph/mutate/authoring/builder.d.ts +2 -2
  115. package/dist/graph/mutate/authoring/builder.js +2 -2
  116. package/dist/graph/mutate/authoring/create.js +13 -5
  117. package/dist/graph/mutate/index.d.ts +1 -1
  118. package/dist/graph/mutate/language/codec.js +3 -3
  119. package/dist/graph/mutate/language/model.d.ts +4 -4
  120. package/dist/graph/mutate/language/wire.d.ts +226 -215
  121. package/dist/graph/mutate/language/wire.js +42 -47
  122. package/dist/graph/mutate/result/index.d.ts +4 -3
  123. package/dist/graph/mutate/result/index.js +8 -6
  124. package/dist/graph/mutate/result/wire.d.ts +4 -4
  125. package/dist/graph/mutate/result/wire.js +7 -4
  126. package/dist/graph/node/identity/id.d.ts +0 -4
  127. package/dist/graph/node/identity/id.js +0 -5
  128. package/dist/graph/node/identity/order.js +20 -0
  129. package/dist/graph/path/authoring/path.d.ts +8 -5
  130. package/dist/graph/path/authoring/path.js +21 -3
  131. package/dist/graph/path/language/model.d.ts +8 -3
  132. package/dist/graph/path/language/syntax.js +23 -8
  133. package/dist/graph/query/authoring/builder.js +37 -5
  134. package/dist/graph/query/authoring/model.d.ts +20 -1
  135. package/dist/graph/query/index.d.ts +4 -2
  136. package/dist/graph/query/index.js +1 -0
  137. package/dist/graph/query/language/codec.js +18 -3
  138. package/dist/graph/query/language/fingerprint.js +8 -0
  139. package/dist/graph/query/language/model.d.ts +22 -4
  140. package/dist/graph/query/language/wire.d.ts +124 -114
  141. package/dist/graph/query/language/wire.js +54 -47
  142. package/dist/graph/query/order/index.d.ts +53 -0
  143. package/dist/graph/query/order/index.js +79 -0
  144. package/dist/graph/query/reference/evaluate.d.ts +1 -0
  145. package/dist/graph/query/reference/evaluate.js +39 -52
  146. package/dist/graph/query/result/index.js +1 -1
  147. package/dist/graph/query/result/wire.d.ts +93 -94
  148. package/dist/graph/query/result/wire.js +20 -20
  149. package/dist/graph/reconcile/condition/model.d.ts +2 -2
  150. package/dist/graph/reconcile/condition/references.d.ts +0 -1
  151. package/dist/graph/reconcile/condition/references.js +4 -4
  152. package/dist/graph/reconcile/correspondence.d.ts +9 -8
  153. package/dist/graph/reconcile/evidence.d.ts +2 -2
  154. package/dist/graph/reconcile/mutation/assess.d.ts +2 -1
  155. package/dist/graph/reconcile/observation.d.ts +4 -3
  156. package/dist/graph/reconcile/planning/canonical.d.ts +6 -0
  157. package/dist/graph/reconcile/planning/canonical.js +28 -0
  158. package/dist/graph/reconcile/planning/context.d.ts +3 -3
  159. package/dist/graph/reconcile/planning/model.d.ts +8 -4
  160. package/dist/graph/reconcile/planning/plan.js +2 -1
  161. package/dist/schema/authority/authority-relation.js +3 -0
  162. package/dist/schema/authority/claims.d.ts +24 -25
  163. package/dist/schema/authority/claims.js +8 -8
  164. package/dist/schema/authority/governed-by.d.ts +16 -91
  165. package/dist/schema/authority/governed-by.js +1 -1
  166. package/dist/schema/authority/operation-node.d.ts +27 -13
  167. package/dist/schema/authority/operations.d.ts +8 -168
  168. package/dist/schema/authority/policy.d.ts +27 -15
  169. package/dist/schema/authority/vocabulary.d.ts +3 -0
  170. package/dist/schema/authority/vocabulary.js +25 -0
  171. package/dist/schema/callables/entrypoint.d.ts +32 -0
  172. package/dist/schema/callables/entrypoint.js +12 -0
  173. package/dist/schema/callables/execution.d.ts +269 -0
  174. package/dist/schema/callables/execution.js +32 -0
  175. package/dist/schema/callables/function.d.ts +3400 -55
  176. package/dist/schema/callables/function.js +4 -3
  177. package/dist/schema/callables/index.d.ts +2 -1
  178. package/dist/schema/callables/index.js +2 -1
  179. package/dist/schema/callables/method-of.d.ts +18 -143
  180. package/dist/schema/callables/method-of.js +2 -2
  181. package/dist/schema/callables/view.d.ts +83 -51
  182. package/dist/schema/definitions/class.d.ts +45 -33
  183. package/dist/schema/definitions/extends.d.ts +16 -110
  184. package/dist/schema/definitions/instance-of.d.ts +17 -69
  185. package/dist/schema/domain/domain.d.ts +3343 -148
  186. package/dist/schema/domain/domain.js +6 -3
  187. package/dist/schema/domain/of-domain.d.ts +18 -192
  188. package/dist/schema/domain/of-domain.js +1 -1
  189. package/dist/schema/identity/composition.d.ts +5 -0
  190. package/dist/schema/identity/composition.js +5 -0
  191. package/dist/schema/identity/identity.d.ts +225 -122
  192. package/dist/schema/identity/identity.js +3 -4
  193. package/dist/schema/index.d.ts +1 -0
  194. package/dist/schema/index.js +1 -0
  195. package/dist/schema/installation/operation-id.d.ts +1 -2
  196. package/dist/schema/installation/operation-id.js +2 -4
  197. package/dist/schema/introspection/index.d.ts +1 -1
  198. package/dist/schema/introspection/language.d.ts +12 -28
  199. package/dist/schema/kernel/projection/callables.js +2 -3
  200. package/dist/schema/kernel/projection/core.d.ts +7 -0
  201. package/dist/schema/kernel/projection/core.js +51 -0
  202. package/dist/schema/kernel/projection/definitions.d.ts +13 -0
  203. package/dist/schema/kernel/projection/definitions.js +71 -0
  204. package/dist/schema/kernel/projection/index.d.ts +3 -3
  205. package/dist/schema/kernel/projection/index.js +2 -2
  206. package/dist/schema/kernel/projection/methods.d.ts +5 -0
  207. package/dist/schema/kernel/projection/methods.js +41 -0
  208. package/dist/schema/kernel/projection/part.d.ts +34 -0
  209. package/dist/schema/kernel/projection/part.js +42 -0
  210. package/dist/schema/kernel/projection/paths.d.ts +6 -0
  211. package/dist/schema/kernel/projection/{keys.js → paths.js} +12 -14
  212. package/dist/schema/kernel/projection/project.d.ts +4 -2
  213. package/dist/schema/kernel/projection/project.js +33 -258
  214. package/dist/schema/kernel/projection/properties.d.ts +11 -0
  215. package/dist/schema/kernel/projection/properties.js +36 -0
  216. package/dist/schema/kernel/projection/relations.d.ts +7 -0
  217. package/dist/schema/kernel/projection/relations.js +61 -0
  218. package/dist/schema/kernel/projection/types.d.ts +28 -2
  219. package/dist/schema/kernel/schema.d.ts +8737 -5086
  220. package/dist/schema/kernel/schema.js +12 -8
  221. package/dist/schema/kernel/syscalls/contracts/admit.d.ts +15 -12
  222. package/dist/schema/kernel/syscalls/contracts/admit.js +16 -9
  223. package/dist/schema/kernel/syscalls/contracts/blob.d.ts +31 -0
  224. package/dist/schema/kernel/syscalls/contracts/blob.js +24 -0
  225. package/dist/schema/kernel/syscalls/contracts/can.d.ts +19 -8
  226. package/dist/schema/kernel/syscalls/contracts/can.js +12 -4
  227. package/dist/schema/kernel/syscalls/contracts/delegate.d.ts +6 -7
  228. package/dist/schema/kernel/syscalls/contracts/delegate.js +5 -5
  229. package/dist/schema/kernel/syscalls/contracts/execution.d.ts +60 -0
  230. package/dist/schema/kernel/syscalls/contracts/execution.js +46 -0
  231. package/dist/schema/kernel/syscalls/contracts/expected.d.ts +5 -0
  232. package/dist/schema/kernel/syscalls/contracts/expected.js +9 -0
  233. package/dist/schema/kernel/syscalls/contracts/identity.d.ts +18 -19
  234. package/dist/schema/kernel/syscalls/contracts/identity.js +6 -7
  235. package/dist/schema/kernel/syscalls/contracts/impersonate.d.ts +6 -0
  236. package/dist/schema/kernel/syscalls/contracts/impersonate.js +4 -0
  237. package/dist/schema/kernel/syscalls/contracts/index.d.ts +6 -3
  238. package/dist/schema/kernel/syscalls/contracts/index.js +6 -3
  239. package/dist/schema/kernel/syscalls/contracts/install.d.ts +149 -217
  240. package/dist/schema/kernel/syscalls/contracts/install.js +22 -26
  241. package/dist/schema/kernel/syscalls/contracts/installation.d.ts +65 -351
  242. package/dist/schema/kernel/syscalls/contracts/installation.js +29 -67
  243. package/dist/schema/kernel/syscalls/contracts/introspect.d.ts +11 -15
  244. package/dist/schema/kernel/syscalls/contracts/introspect.js +8 -15
  245. package/dist/schema/kernel/syscalls/contracts/journal.d.ts +26 -27
  246. package/dist/schema/kernel/syscalls/contracts/journal.js +15 -15
  247. package/dist/schema/kernel/syscalls/contracts/mint.d.ts +5 -7
  248. package/dist/schema/kernel/syscalls/contracts/mint.js +4 -5
  249. package/dist/schema/kernel/syscalls/contracts/mutate.d.ts +243 -224
  250. package/dist/schema/kernel/syscalls/contracts/mutate.js +7 -1
  251. package/dist/schema/kernel/syscalls/contracts/query.d.ts +232 -222
  252. package/dist/schema/kernel/syscalls/contracts/query.js +10 -15
  253. package/dist/schema/kernel/syscalls/contracts/register.d.ts +20 -0
  254. package/dist/schema/kernel/syscalls/contracts/register.js +24 -0
  255. package/dist/schema/kernel/syscalls/contracts/uninstall.d.ts +54 -148
  256. package/dist/schema/kernel/syscalls/contracts/uninstall.js +6 -5
  257. package/dist/schema/kernel/syscalls/contracts/view-host-requirements.d.ts +17 -0
  258. package/dist/schema/kernel/syscalls/contracts/view-host-requirements.js +40 -0
  259. package/dist/schema/kernel/syscalls/contracts/view-resolve.d.ts +27 -28
  260. package/dist/schema/kernel/syscalls/contracts/view-resolve.js +16 -24
  261. package/dist/schema/kernel/syscalls/contracts/whoami.d.ts +19 -20
  262. package/dist/schema/kernel/syscalls/contracts/whoami.js +2 -2
  263. package/dist/schema/kernel/syscalls/contracts/whois.d.ts +22 -23
  264. package/dist/schema/kernel/syscalls/contracts/whois.js +3 -3
  265. package/dist/schema/kernel/syscalls/declarations/admit.d.ts +18 -18
  266. package/dist/schema/kernel/syscalls/declarations/admit.js +3 -3
  267. package/dist/schema/kernel/syscalls/declarations/can.d.ts +19 -14
  268. package/dist/schema/kernel/syscalls/declarations/can.js +4 -4
  269. package/dist/schema/kernel/syscalls/declarations/delegate.d.ts +9 -12
  270. package/dist/schema/kernel/syscalls/declarations/delegate.js +4 -4
  271. package/dist/schema/kernel/syscalls/declarations/download.d.ts +12 -0
  272. package/dist/schema/kernel/syscalls/declarations/download.js +10 -0
  273. package/dist/schema/kernel/syscalls/declarations/execution.d.ts +105 -0
  274. package/dist/schema/kernel/syscalls/declarations/execution.js +52 -0
  275. package/dist/schema/kernel/syscalls/declarations/impersonate.d.ts +9 -0
  276. package/dist/schema/kernel/syscalls/declarations/impersonate.js +12 -0
  277. package/dist/schema/kernel/syscalls/declarations/index.d.ts +870 -1323
  278. package/dist/schema/kernel/syscalls/declarations/index.js +18 -2
  279. package/dist/schema/kernel/syscalls/declarations/install.d.ts +29 -172
  280. package/dist/schema/kernel/syscalls/declarations/install.js +7 -5
  281. package/dist/schema/kernel/syscalls/declarations/introspect.d.ts +8 -19
  282. package/dist/schema/kernel/syscalls/declarations/introspect.js +3 -4
  283. package/dist/schema/kernel/syscalls/declarations/journal.d.ts +29 -31
  284. package/dist/schema/kernel/syscalls/declarations/journal.js +4 -2
  285. package/dist/schema/kernel/syscalls/declarations/mint.d.ts +8 -13
  286. package/dist/schema/kernel/syscalls/declarations/mint.js +5 -5
  287. package/dist/schema/kernel/syscalls/declarations/mutate.d.ts +239 -256
  288. package/dist/schema/kernel/syscalls/declarations/mutate.js +4 -2
  289. package/dist/schema/kernel/syscalls/declarations/query.d.ts +235 -260
  290. package/dist/schema/kernel/syscalls/declarations/query.js +4 -2
  291. package/dist/schema/kernel/syscalls/declarations/register.d.ts +23 -0
  292. package/dist/schema/kernel/syscalls/declarations/register.js +10 -0
  293. package/dist/schema/kernel/syscalls/declarations/uninstall.d.ts +49 -153
  294. package/dist/schema/kernel/syscalls/declarations/uninstall.js +4 -2
  295. package/dist/schema/kernel/syscalls/declarations/upload.d.ts +15 -0
  296. package/dist/schema/kernel/syscalls/declarations/upload.js +10 -0
  297. package/dist/schema/kernel/syscalls/declarations/use-policy.d.ts +4 -0
  298. package/dist/schema/kernel/syscalls/declarations/use-policy.js +9 -0
  299. package/dist/schema/kernel/syscalls/declarations/view-resolve.d.ts +30 -37
  300. package/dist/schema/kernel/syscalls/declarations/view-resolve.js +5 -3
  301. package/dist/schema/kernel/syscalls/declarations/whoami.d.ts +22 -26
  302. package/dist/schema/kernel/syscalls/declarations/whoami.js +3 -3
  303. package/dist/schema/kernel/syscalls/declarations/whois.d.ts +25 -29
  304. package/dist/schema/kernel/syscalls/declarations/whois.js +5 -3
  305. package/dist/schema/kernel/syscalls/descriptors/execution.d.ts +153 -0
  306. package/dist/schema/kernel/syscalls/descriptors/execution.js +11 -0
  307. package/dist/schema/kernel/syscalls/descriptors/function.d.ts +8 -2
  308. package/dist/schema/kernel/syscalls/descriptors/functions.d.ts +3 -1
  309. package/dist/schema/kernel/syscalls/descriptors/functions.js +3 -1
  310. package/dist/schema/kernel/syscalls/descriptors/identity.d.ts +47 -13
  311. package/dist/schema/kernel/syscalls/descriptors/identity.js +2 -1
  312. package/dist/schema/kernel/syscalls/descriptors/index.d.ts +2 -1
  313. package/dist/schema/kernel/syscalls/descriptors/index.js +2 -1
  314. package/dist/schema/kernel/syscalls/descriptors/results/view-resolution.d.ts +5 -2
  315. package/dist/schema/kernel/syscalls/descriptors/results/view-resolution.js +8 -38
  316. package/dist/schema/kernel/syscalls/descriptors/view.d.ts +11 -9
  317. package/dist/schema/kernel/syscalls/index.d.ts +2 -2
  318. package/dist/schema/kernel/syscalls/index.js +2 -2
  319. package/dist/schema/kernel/syscalls/references/execution.d.ts +55 -0
  320. package/dist/schema/kernel/syscalls/references/execution.js +13 -0
  321. package/dist/schema/kernel/syscalls/references/functions.d.ts +12 -2
  322. package/dist/schema/kernel/syscalls/references/functions.js +3 -1
  323. package/dist/schema/kernel/syscalls/references/identity.d.ts +9 -0
  324. package/dist/schema/kernel/syscalls/references/identity.js +1 -0
  325. package/dist/schema/kernel/syscalls/references/index.d.ts +2 -1
  326. package/dist/schema/kernel/syscalls/references/index.js +2 -1
  327. package/dist/schema/meta/created-by.d.ts +32 -0
  328. package/dist/schema/meta/created-by.js +17 -0
  329. package/dist/schema/meta/descriptable.d.ts +13 -11
  330. package/dist/schema/meta/edge.d.ts +5 -9
  331. package/dist/schema/meta/iconable.d.ts +13 -11
  332. package/dist/schema/meta/index.d.ts +1 -0
  333. package/dist/schema/meta/index.js +1 -0
  334. package/dist/schema/meta/named.d.ts +13 -9
  335. package/dist/schema/meta/node.d.ts +9 -1
  336. package/dist/schema/meta/remotable.d.ts +15 -22
  337. package/dist/schema/meta/statused.d.ts +13 -7
  338. package/dist/schema/meta/timestamped.d.ts +14 -12
  339. package/package.json +9 -7
  340. package/dist/auth/expression/normalization/canonicalize.d.ts +0 -7
  341. package/dist/auth/expression/normalization/canonicalize.js +0 -102
  342. package/dist/auth/expression/normalization/index.d.ts +0 -2
  343. package/dist/auth/expression/normalization/index.js +0 -2
  344. package/dist/auth/expression/normalization/raise-denials.d.ts +0 -3
  345. package/dist/auth/expression/normalization/raise-denials.js +0 -59
  346. package/dist/auth/provision/fingerprint/fingerprint.d.ts +0 -9
  347. package/dist/auth/provision/fingerprint/fingerprint.js +0 -33
  348. package/dist/auth/provision/fingerprint/index.d.ts +0 -2
  349. package/dist/auth/provision/index.d.ts +0 -5
  350. package/dist/auth/provision/request/admission.d.ts +0 -3
  351. package/dist/auth/provision/request/admission.js +0 -125
  352. package/dist/auth/provision/request/index.d.ts +0 -3
  353. package/dist/auth/provision/request/request.d.ts +0 -29
  354. package/dist/auth/provision/result/index.d.ts +0 -1
  355. package/dist/auth/provision/result/result.d.ts +0 -12
  356. package/dist/graph/graph/navigation/error.d.ts +0 -12
  357. package/dist/graph/graph/navigation/error.js +0 -20
  358. package/dist/graph/graph/navigation/index.d.ts +0 -2
  359. package/dist/graph/graph/navigation/index.js +0 -1
  360. package/dist/graph/graph/navigation/model.d.ts +0 -15
  361. package/dist/schema/callables/view-for.d.ts +0 -296
  362. package/dist/schema/callables/view-for.js +0 -12
  363. package/dist/schema/kernel/projection/keys.d.ts +0 -3
  364. package/dist/schema/kernel/projection/path.d.ts +0 -2
  365. package/dist/schema/kernel/projection/path.js +0 -140
  366. package/dist/schema/kernel/syscalls/contracts/provision.d.ts +0 -292
  367. package/dist/schema/kernel/syscalls/contracts/provision.js +0 -19
  368. package/dist/schema/kernel/syscalls/declarations/define.d.ts +0 -5
  369. package/dist/schema/kernel/syscalls/declarations/define.js +0 -7
  370. package/dist/schema/kernel/syscalls/declarations/provision.d.ts +0 -296
  371. package/dist/schema/kernel/syscalls/declarations/provision.js +0 -8
  372. /package/dist/auth/{provision/request/request.js → authority/semantics/snapshot.js} +0 -0
  373. /package/dist/auth/{provision/result/index.js → authority/semantics/vocabulary.js} +0 -0
  374. /package/dist/auth/{provision → register}/fingerprint/index.js +0 -0
  375. /package/dist/auth/{provision → register}/index.js +0 -0
  376. /package/dist/auth/{provision → register}/request/index.js +0 -0
  377. /package/dist/auth/{provision/result/result.js → register/request/request.js} +0 -0
  378. /package/dist/{graph/graph/navigation/model.js → auth/register/result/index.js} +0 -0
@@ -2,15 +2,15 @@ import { type CorrespondenceEntry } from '#graph/reconcile/correspondence';
2
2
  import { type ObservationEvidence, type ObservationRequirement } from '#graph/reconcile/evidence';
3
3
  import { type Observation } from '#graph/reconcile/observation';
4
4
  import type { Edge } from '../../edge/index.js';
5
- import type { LocalBinding } from '../../graph/index.js';
5
+ import type { LocalAlias } from '../../graph/index.js';
6
6
  import type { Node, NodeId } from '../../node/index.js';
7
7
  import type { Effect, PlanningBlocker, PlanningConflict, Premise } from './model.js';
8
8
  import { type DesiredProperties } from '../../properties/index.js';
9
9
  export interface PlanningContext {
10
10
  readonly nodes: ReadonlyMap<NodeId, Node>;
11
11
  readonly edges: ReadonlyMap<string, Edge>;
12
- readonly correspondence: ReadonlyMap<LocalBinding, CorrespondenceEntry>;
13
- readonly created: Set<LocalBinding>;
12
+ readonly correspondence: ReadonlyMap<LocalAlias, CorrespondenceEntry>;
13
+ readonly created: Set<LocalAlias>;
14
14
  readonly evidence: readonly ObservationEvidence[];
15
15
  readonly premises: Premise[];
16
16
  readonly effects: Effect[];
@@ -3,12 +3,12 @@ import type { CorrespondenceConflict } from '#graph/reconcile/correspondence';
3
3
  import type { ObservationRequirement, QueryObservation } from '#graph/reconcile/evidence';
4
4
  import type { ObservationConflict } from '#graph/reconcile/observation';
5
5
  import type { EdgeKey, EdgeSlug } from '../../edge/index.js';
6
- import type { LocalBinding } from '../../graph/index.js';
6
+ import type { LocalAlias } from '../../graph/index.js';
7
7
  import type { NodeId } from '../../node/index.js';
8
8
  import type { Delta, DesiredProperties, Properties } from '../../properties/index.js';
9
9
  import type { DesiredFingerprint, DesiredSelection, Expectation, ReconcileConflict } from '../condition/index.js';
10
10
  export type ResolvedNodeRef = NodeId | {
11
- readonly created: LocalBinding;
11
+ readonly created: LocalAlias;
12
12
  };
13
13
  export interface ResolvedEdgeRef {
14
14
  readonly source: ResolvedNodeRef;
@@ -35,7 +35,7 @@ export interface QueryPremise {
35
35
  }
36
36
  export type Effect = {
37
37
  readonly op: 'node.create';
38
- readonly as: LocalBinding;
38
+ readonly as: LocalAlias;
39
39
  readonly class: ClassKey;
40
40
  readonly properties: Properties;
41
41
  } | {
@@ -63,7 +63,7 @@ export type Effect = {
63
63
  };
64
64
  export type PlanningConflict = ReconcileConflict | CorrespondenceConflict | ObservationConflict | {
65
65
  readonly kind: 'desired-binding-uncreated';
66
- readonly desired: LocalBinding;
66
+ readonly desired: LocalAlias;
67
67
  } | {
68
68
  readonly kind: 'node-class-observed';
69
69
  readonly node: NodeId;
@@ -72,6 +72,10 @@ export type PlanningConflict = ReconcileConflict | CorrespondenceConflict | Obse
72
72
  } | {
73
73
  readonly kind: 'node-identity-absent';
74
74
  readonly node: NodeId;
75
+ } | {
76
+ /** One effect target reached through aliasing refs with different desired content. */
77
+ readonly kind: 'desired-target-contradictory';
78
+ readonly effects: readonly Effect[];
75
79
  };
76
80
  export type PlanningBlocker = {
77
81
  readonly kind: 'selection-unsatisfied';
@@ -1,5 +1,5 @@
1
1
  import { fingerprint } from '../condition/index.js';
2
- import { canonicalBlockers, canonicalConflicts, canonicalEffects, canonicalPremises, canonicalRequirements, createPlan, } from './canonical.js';
2
+ import { canonicalBlockers, canonicalConflicts, canonicalEffects, canonicalPremises, canonicalRequirements, contradictoryEffects, createPlan, } from './canonical.js';
3
3
  import { createPlanningContext } from './context.js';
4
4
  import { planEdge } from './edge.js';
5
5
  import { planNode } from './node.js';
@@ -13,6 +13,7 @@ export function plan(input) {
13
13
  planEdge(edge, context);
14
14
  for (const selection of input.desired.selections)
15
15
  planSelection(selection, context);
16
+ context.conflicts.push(...contradictoryEffects(context.effects));
16
17
  if (context.conflicts.length > 0) {
17
18
  return Object.freeze({
18
19
  kind: 'conflict',
@@ -12,5 +12,8 @@ export function authorityRelation(target, role, description) {
12
12
  target: { as: role, accepts: [target], incoming: '0..*' },
13
13
  description,
14
14
  extends: [Edge],
15
+ // The installed authority map is observed through Identity.can, never read wholesale: only the
16
+ // Kernel Domain and Root read its Edges.
17
+ policies: { read: false, traverse: false },
15
18
  });
16
19
  }
@@ -1,27 +1,26 @@
1
- import { z } from 'zod';
2
1
  /** Exact reusable schema for one ClaimConstraint in a graph or callable contract. */
3
- export declare const claimConstraintSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
4
- claim: z.ZodString;
5
- op: z.ZodLiteral<"contains">;
6
- value: z.ZodNonOptional<z.ZodUnknown>;
7
- }, z.core.$strict>, z.ZodObject<{
8
- claim: z.ZodString;
9
- op: z.ZodLiteral<"eq">;
10
- value: z.ZodNonOptional<z.ZodUnknown>;
11
- }, z.core.$strict>, z.ZodObject<{
12
- claim: z.ZodString;
13
- op: z.ZodLiteral<"exists">;
14
- }, z.core.$strict>], "op">;
2
+ export declare const claimConstraintSchema: import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
3
+ claim: import("zod").ZodString;
4
+ op: import("zod").ZodLiteral<"contains">;
5
+ value: import("zod").ZodNonOptional<import("zod").ZodUnknown>;
6
+ }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
7
+ claim: import("zod").ZodString;
8
+ op: import("zod").ZodLiteral<"eq">;
9
+ value: import("zod").ZodNonOptional<import("zod").ZodUnknown>;
10
+ }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
11
+ claim: import("zod").ZodString;
12
+ op: import("zod").ZodLiteral<"exists">;
13
+ }, import("zod/v4/core").$strict>], "op">;
15
14
  /** Exact reusable bounded schema for an Identity's required ClaimConstraints. */
16
- export declare const requiredClaimsSchema: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
17
- claim: z.ZodString;
18
- op: z.ZodLiteral<"contains">;
19
- value: z.ZodNonOptional<z.ZodUnknown>;
20
- }, z.core.$strict>, z.ZodObject<{
21
- claim: z.ZodString;
22
- op: z.ZodLiteral<"eq">;
23
- value: z.ZodNonOptional<z.ZodUnknown>;
24
- }, z.core.$strict>, z.ZodObject<{
25
- claim: z.ZodString;
26
- op: z.ZodLiteral<"exists">;
27
- }, z.core.$strict>], "op">>;
15
+ export declare const requiredClaimsSchema: import("zod").ZodArray<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
16
+ claim: import("zod").ZodString;
17
+ op: import("zod").ZodLiteral<"contains">;
18
+ value: import("zod").ZodNonOptional<import("zod").ZodUnknown>;
19
+ }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
20
+ claim: import("zod").ZodString;
21
+ op: import("zod").ZodLiteral<"eq">;
22
+ value: import("zod").ZodNonOptional<import("zod").ZodUnknown>;
23
+ }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
24
+ claim: import("zod").ZodString;
25
+ op: import("zod").ZodLiteral<"exists">;
26
+ }, import("zod/v4/core").$strict>], "op">>;
@@ -1,12 +1,12 @@
1
- import { z } from 'zod';
1
+ import { array, discriminatedUnion, literal, strictObject, string, unknown as unknownSchema, } from 'zod';
2
2
  import { claims } from '#auth';
3
- const claim = z.string().min(1);
4
- const portableValue = z.unknown().nonoptional();
3
+ const claim = string().min(1);
4
+ const portableValue = unknownSchema().nonoptional();
5
5
  /** Exact reusable schema for one ClaimConstraint in a graph or callable contract. */
6
- export const claimConstraintSchema = z.discriminatedUnion('op', [
7
- z.strictObject({ claim, op: z.literal('contains'), value: portableValue }),
8
- z.strictObject({ claim, op: z.literal('eq'), value: portableValue }),
9
- z.strictObject({ claim, op: z.literal('exists') }),
6
+ export const claimConstraintSchema = discriminatedUnion('op', [
7
+ strictObject({ claim, op: literal('contains'), value: portableValue }),
8
+ strictObject({ claim, op: literal('eq'), value: portableValue }),
9
+ strictObject({ claim, op: literal('exists') }),
10
10
  ]);
11
11
  /** Exact reusable bounded schema for an Identity's required ClaimConstraints. */
12
- export const requiredClaimsSchema = z.array(claimConstraintSchema).max(claims.MAX_REQUIRED_CLAIMS);
12
+ export const requiredClaimsSchema = array(claimConstraintSchema).max(claims.MAX_REQUIRED_CLAIMS);
@@ -1,109 +1,34 @@
1
1
  import { type builder } from '@astrale-os/kernel-dsl/v1';
2
2
  export declare const GovernedBy: builder.DirectedEdgeClass<{
3
+ readonly depth: 1;
3
4
  readonly abstract: false;
4
- readonly source: {
5
- readonly as: "class";
6
- readonly accepts: readonly [builder.NodeClass<{
7
- readonly abstract: false;
8
- readonly description: "The installed graph projection of a Node Class or Edge Class declaration.";
9
- readonly extends: readonly [builder.NodeClass<{
10
- readonly abstract: true;
11
- readonly extends: readonly [builder.NodeClass<{
12
- readonly abstract: true;
13
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
14
- }>];
15
- readonly description: "Optional human-facing description metadata with no identity or authority semantics.";
16
- readonly properties: {
17
- description: builder.Property<Readonly<{
18
- readonly type: 'string';
19
- readonly minLength: 1;
20
- readonly maxLength: 1000;
21
- }>, {
22
- readonly required: false;
23
- }>;
24
- };
25
- }>, builder.NodeClass<{
26
- readonly abstract: true;
27
- readonly extends: readonly [builder.NodeClass<{
28
- readonly abstract: true;
29
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
30
- }>];
31
- readonly description: "Optional bounded presentation icon metadata.";
32
- readonly properties: {
33
- icon: builder.Property<Readonly<{
34
- readonly type: 'string';
35
- readonly minLength: 1;
36
- readonly maxLength: 8000;
37
- }>, {
38
- readonly required: false;
39
- }>;
40
- };
41
- }>];
42
- readonly properties: {
43
- readonly kind: {
44
- readonly enum: readonly ["node", "edge"];
45
- };
46
- readonly abstract: {
47
- readonly type: "boolean";
48
- };
49
- };
50
- }>];
51
- readonly outgoing: "0..*";
52
- };
53
- readonly target: {
54
- readonly as: "policy";
55
- readonly accepts: readonly [builder.NodeClass<{
56
- readonly abstract: false;
57
- readonly description: "The installed graph projection of one named closed Policy declaration owned by a Domain.";
58
- readonly extends: readonly [builder.NodeClass<{
59
- readonly abstract: true;
60
- readonly extends: readonly [builder.NodeClass<{
61
- readonly abstract: true;
62
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
63
- }>];
64
- readonly description: "Optional human-facing description metadata with no identity or authority semantics.";
65
- readonly properties: {
66
- description: builder.Property<Readonly<{
67
- readonly type: 'string';
68
- readonly minLength: 1;
69
- readonly maxLength: 1000;
70
- }>, {
71
- readonly required: false;
72
- }>;
73
- };
74
- }>];
75
- }>];
76
- readonly incoming: "0..*";
77
- };
78
- readonly description: "The protected projection of one Class read or traverse Policy assignment.";
79
- readonly extends: readonly [builder.DirectedEdgeClass<{
5
+ readonly extends: readonly [builder.ClassReferenceProjection<"edge", {
80
6
  readonly abstract: true;
7
+ readonly depth: 0;
8
+ readonly properties: never;
81
9
  readonly source: {
82
10
  readonly as: "source";
83
- readonly accepts: readonly [builder.NodeClass<{
84
- readonly abstract: true;
85
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
86
- }>];
87
11
  readonly outgoing: "0..*";
88
12
  };
89
13
  readonly target: {
90
14
  readonly as: "target";
91
- readonly accepts: readonly [builder.NodeClass<{
92
- readonly abstract: true;
93
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
94
- }>];
95
15
  readonly incoming: "0..*";
96
16
  };
97
- readonly description: "Explicit kernel marker for Edge definitions; it carries no structural fields.";
98
- }>];
17
+ readonly constraints: Record<never, never>;
18
+ }, never, never, never>];
99
19
  readonly properties: {
100
- operations: builder.Property<{
101
- readonly enum: readonly [readonly ["read"], readonly ["traverse"], readonly ["read", "traverse"]];
102
- }, {
103
- readonly visibility: "private";
104
- }>;
20
+ readonly operations: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "operations", "self", never>;
21
+ };
22
+ readonly source: {
23
+ readonly as: "class";
24
+ readonly outgoing: "0..*";
25
+ };
26
+ readonly target: {
27
+ readonly as: "policy";
28
+ readonly incoming: "0..*";
105
29
  };
106
30
  readonly constraints: {
107
31
  readonly noSelf: true;
108
32
  };
33
+ readonly effectiveProperties: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "operations", "self", never>;
109
34
  }>;
@@ -9,7 +9,7 @@ export const GovernedBy = edgeClass.directed({
9
9
  description: 'The protected projection of one Class read or traverse Policy assignment.',
10
10
  extends: [Edge],
11
11
  properties: {
12
- operations: property({ enum: [['read'], ['traverse'], ['read', 'traverse']] }, { visibility: 'private' }),
12
+ operations: property({ enum: [['read'], ['traverse'], ['read', 'traverse']] }, {}),
13
13
  },
14
14
  constraints: { noSelf: true },
15
15
  });
@@ -1,20 +1,34 @@
1
1
  import { type builder } from '@astrale-os/kernel-dsl/v1';
2
2
  export declare const Operation: builder.NodeClass<{
3
+ readonly depth: 2;
3
4
  readonly abstract: false;
4
- readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
5
- readonly extends: readonly [builder.NodeClass<{
5
+ readonly extends: readonly [builder.ClassReferenceProjection<"node", {
6
6
  readonly abstract: true;
7
- readonly extends: readonly [builder.NodeClass<{
8
- readonly abstract: true;
9
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
10
- }>];
11
- readonly description: "Stable human-facing name metadata that never acts as a locator.";
7
+ readonly depth: 1;
12
8
  readonly properties: {
13
- readonly name: {
14
- readonly type: "string";
15
- readonly minLength: 1;
16
- readonly maxLength: 100;
17
- };
9
+ readonly name: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", "self", undefined>;
18
10
  };
19
- }>];
11
+ readonly methods: Readonly<Record<never, never>>;
12
+ }, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", builder.ClassOwnerProjection<"node", {
13
+ readonly abstract: true;
14
+ readonly depth: 1;
15
+ readonly properties: {
16
+ readonly name: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", "self", undefined>;
17
+ };
18
+ readonly methods: Readonly<Record<never, never>>;
19
+ }, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", unknown, undefined>, never, never>, undefined>, never, never>];
20
+ readonly properties: never;
21
+ readonly methods: Readonly<Record<never, never>>;
22
+ readonly effectiveProperties: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", builder.ClassOwnerProjection<"node", {
23
+ readonly abstract: true;
24
+ readonly depth: 1;
25
+ readonly properties: {
26
+ readonly name: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", "self", undefined>;
27
+ };
28
+ readonly methods: Readonly<Record<never, never>>;
29
+ }, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, true, "name", unknown, undefined>, never, never>, undefined>;
30
+ readonly abstractInstanceMethods: never;
31
+ readonly abstractStaticMethods: never;
32
+ readonly effectiveInstanceMethods: never;
33
+ readonly effectiveStaticMethods: never;
20
34
  }>;
@@ -10,174 +10,14 @@ import { CanUse } from './can-use.js';
10
10
  import { AuthorityOperationOrder, type AuthorityOperation } from './operation.js';
11
11
  export { AuthorityOperationOrder, type AuthorityOperation };
12
12
  export declare const AuthorityOperations: Readonly<{
13
- create: builder.CoreNode<builder.NodeClass<{
14
- readonly abstract: false;
15
- readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
16
- readonly extends: readonly [builder.NodeClass<{
17
- readonly abstract: true;
18
- readonly extends: readonly [builder.NodeClass<{
19
- readonly abstract: true;
20
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
21
- }>];
22
- readonly description: "Stable human-facing name metadata that never acts as a locator.";
23
- readonly properties: {
24
- readonly name: {
25
- readonly type: "string";
26
- readonly minLength: 1;
27
- readonly maxLength: 100;
28
- };
29
- };
30
- }>];
31
- }>, {
32
- readonly name: "create";
33
- }>;
34
- read: builder.CoreNode<builder.NodeClass<{
35
- readonly abstract: false;
36
- readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
37
- readonly extends: readonly [builder.NodeClass<{
38
- readonly abstract: true;
39
- readonly extends: readonly [builder.NodeClass<{
40
- readonly abstract: true;
41
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
42
- }>];
43
- readonly description: "Stable human-facing name metadata that never acts as a locator.";
44
- readonly properties: {
45
- readonly name: {
46
- readonly type: "string";
47
- readonly minLength: 1;
48
- readonly maxLength: 100;
49
- };
50
- };
51
- }>];
52
- }>, {
53
- readonly name: "read";
54
- }>;
55
- update: builder.CoreNode<builder.NodeClass<{
56
- readonly abstract: false;
57
- readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
58
- readonly extends: readonly [builder.NodeClass<{
59
- readonly abstract: true;
60
- readonly extends: readonly [builder.NodeClass<{
61
- readonly abstract: true;
62
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
63
- }>];
64
- readonly description: "Stable human-facing name metadata that never acts as a locator.";
65
- readonly properties: {
66
- readonly name: {
67
- readonly type: "string";
68
- readonly minLength: 1;
69
- readonly maxLength: 100;
70
- };
71
- };
72
- }>];
73
- }>, {
74
- readonly name: "update";
75
- }>;
76
- delete: builder.CoreNode<builder.NodeClass<{
77
- readonly abstract: false;
78
- readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
79
- readonly extends: readonly [builder.NodeClass<{
80
- readonly abstract: true;
81
- readonly extends: readonly [builder.NodeClass<{
82
- readonly abstract: true;
83
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
84
- }>];
85
- readonly description: "Stable human-facing name metadata that never acts as a locator.";
86
- readonly properties: {
87
- readonly name: {
88
- readonly type: "string";
89
- readonly minLength: 1;
90
- readonly maxLength: 100;
91
- };
92
- };
93
- }>];
94
- }>, {
95
- readonly name: "delete";
96
- }>;
97
- traverse: builder.CoreNode<builder.NodeClass<{
98
- readonly abstract: false;
99
- readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
100
- readonly extends: readonly [builder.NodeClass<{
101
- readonly abstract: true;
102
- readonly extends: readonly [builder.NodeClass<{
103
- readonly abstract: true;
104
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
105
- }>];
106
- readonly description: "Stable human-facing name metadata that never acts as a locator.";
107
- readonly properties: {
108
- readonly name: {
109
- readonly type: "string";
110
- readonly minLength: 1;
111
- readonly maxLength: 100;
112
- };
113
- };
114
- }>];
115
- }>, {
116
- readonly name: "traverse";
117
- }>;
118
- use: builder.CoreNode<builder.NodeClass<{
119
- readonly abstract: false;
120
- readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
121
- readonly extends: readonly [builder.NodeClass<{
122
- readonly abstract: true;
123
- readonly extends: readonly [builder.NodeClass<{
124
- readonly abstract: true;
125
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
126
- }>];
127
- readonly description: "Stable human-facing name metadata that never acts as a locator.";
128
- readonly properties: {
129
- readonly name: {
130
- readonly type: "string";
131
- readonly minLength: 1;
132
- readonly maxLength: 100;
133
- };
134
- };
135
- }>];
136
- }>, {
137
- readonly name: "use";
138
- }>;
139
- grant: builder.CoreNode<builder.NodeClass<{
140
- readonly abstract: false;
141
- readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
142
- readonly extends: readonly [builder.NodeClass<{
143
- readonly abstract: true;
144
- readonly extends: readonly [builder.NodeClass<{
145
- readonly abstract: true;
146
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
147
- }>];
148
- readonly description: "Stable human-facing name metadata that never acts as a locator.";
149
- readonly properties: {
150
- readonly name: {
151
- readonly type: "string";
152
- readonly minLength: 1;
153
- readonly maxLength: 100;
154
- };
155
- };
156
- }>];
157
- }>, {
158
- readonly name: "grant";
159
- }>;
160
- revoke: builder.CoreNode<builder.NodeClass<{
161
- readonly abstract: false;
162
- readonly description: "One closed authority relation operation administered by can_grant and can_revoke.";
163
- readonly extends: readonly [builder.NodeClass<{
164
- readonly abstract: true;
165
- readonly extends: readonly [builder.NodeClass<{
166
- readonly abstract: true;
167
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
168
- }>];
169
- readonly description: "Stable human-facing name metadata that never acts as a locator.";
170
- readonly properties: {
171
- readonly name: {
172
- readonly type: "string";
173
- readonly minLength: 1;
174
- readonly maxLength: 100;
175
- };
176
- };
177
- }>];
178
- }>, {
179
- readonly name: "revoke";
180
- }>;
13
+ create: builder.CoreNode;
14
+ read: builder.CoreNode;
15
+ update: builder.CoreNode;
16
+ delete: builder.CoreNode;
17
+ traverse: builder.CoreNode;
18
+ use: builder.CoreNode;
19
+ grant: builder.CoreNode;
20
+ revoke: builder.CoreNode;
181
21
  }>;
182
22
  export type AuthorityRelation = typeof CanCreate | typeof CanRead | typeof CanUpdate | typeof CanDelete | typeof CanTraverse | typeof CanUse | typeof CanGrant | typeof CanRevoke;
183
23
  export declare function operationOf(relation: AuthorityRelation): AuthorityOperation;
@@ -1,22 +1,34 @@
1
1
  import { type builder } from '@astrale-os/kernel-dsl/v1';
2
2
  export declare const Policy: builder.NodeClass<{
3
+ readonly depth: 2;
3
4
  readonly abstract: false;
4
- readonly description: "The installed graph projection of one named closed Policy declaration owned by a Domain.";
5
- readonly extends: readonly [builder.NodeClass<{
5
+ readonly extends: readonly [builder.ClassReferenceProjection<"node", {
6
6
  readonly abstract: true;
7
- readonly extends: readonly [builder.NodeClass<{
8
- readonly abstract: true;
9
- readonly description: "The abstract universal kernel Node Class extended by every Kernel Node Class.";
10
- }>];
11
- readonly description: "Optional human-facing description metadata with no identity or authority semantics.";
7
+ readonly depth: 1;
12
8
  readonly properties: {
13
- description: builder.Property<Readonly<{
14
- readonly type: 'string';
15
- readonly minLength: 1;
16
- readonly maxLength: 1000;
17
- }>, {
18
- readonly required: false;
19
- }>;
9
+ readonly description: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", "self", never>;
20
10
  };
21
- }>];
11
+ readonly methods: Readonly<Record<never, never>>;
12
+ }, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", builder.ClassOwnerProjection<"node", {
13
+ readonly abstract: true;
14
+ readonly depth: 1;
15
+ readonly properties: {
16
+ readonly description: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", "self", never>;
17
+ };
18
+ readonly methods: Readonly<Record<never, never>>;
19
+ }, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", unknown, never>, never, never>, never>, never, never>];
20
+ readonly properties: never;
21
+ readonly methods: Readonly<Record<never, never>>;
22
+ readonly effectiveProperties: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", builder.ClassOwnerProjection<"node", {
23
+ readonly abstract: true;
24
+ readonly depth: 1;
25
+ readonly properties: {
26
+ readonly description: builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", "self", never>;
27
+ };
28
+ readonly methods: Readonly<Record<never, never>>;
29
+ }, builder.AuthoredPropertyProjection<import("@astrale-os/kernel-dsl/value").Value, import("@astrale-os/kernel-dsl/value").Value, false, "description", unknown, never>, never, never>, never>;
30
+ readonly abstractInstanceMethods: never;
31
+ readonly abstractStaticMethods: never;
32
+ readonly effectiveInstanceMethods: never;
33
+ readonly effectiveStaticMethods: never;
22
34
  }>;
@@ -0,0 +1,3 @@
1
+ import type { authority } from '../../auth/index.js';
2
+ /** The Kernel instance of the authority vocabulary; Core Auth interprets authority through it. */
3
+ export declare const authorityVocabulary: authority.AuthorityVocabulary;
@@ -0,0 +1,25 @@
1
+ import { K } from '../kernel/schema.js';
2
+ /** The Kernel instance of the authority vocabulary; Core Auth interprets authority through it. */
3
+ export const authorityVocabulary = Object.freeze({
4
+ identity: ref(K.classes.Identity.ref),
5
+ composition: Object.freeze({
6
+ extension: ref(K.classes.extends_with.ref),
7
+ constraint: ref(K.classes.constrained_by.ref),
8
+ exclusion: ref(K.classes.excluded_from.ref),
9
+ }),
10
+ capabilities: Object.freeze({
11
+ create: ref(K.classes.can_create.ref),
12
+ read: ref(K.classes.can_read.ref),
13
+ traverse: ref(K.classes.can_traverse.ref),
14
+ update: ref(K.classes.can_update.ref),
15
+ delete: ref(K.classes.can_delete.ref),
16
+ }),
17
+ instanceOf: ref(K.classes.instance_of.ref),
18
+ });
19
+ function ref(value) {
20
+ return Object.freeze({
21
+ origin: value.origin,
22
+ kind: 'class',
23
+ name: value.name,
24
+ });
25
+ }
@@ -0,0 +1,32 @@
1
+ import { type builder } from '@astrale-os/kernel-dsl/v1';
2
+ export declare const Entrypoint: builder.DirectedEdgeClass<{
3
+ readonly depth: 1;
4
+ readonly abstract: false;
5
+ readonly extends: readonly [builder.ClassReferenceProjection<"edge", {
6
+ readonly abstract: true;
7
+ readonly depth: 0;
8
+ readonly properties: never;
9
+ readonly source: {
10
+ readonly as: "source";
11
+ readonly outgoing: "0..*";
12
+ };
13
+ readonly target: {
14
+ readonly as: "target";
15
+ readonly incoming: "0..*";
16
+ };
17
+ readonly constraints: Record<never, never>;
18
+ }, never, never, never>];
19
+ readonly properties: never;
20
+ readonly source: {
21
+ readonly as: "view";
22
+ readonly outgoing: "0..1";
23
+ };
24
+ readonly target: {
25
+ readonly as: "domain";
26
+ readonly incoming: "0..1";
27
+ };
28
+ readonly constraints: {
29
+ readonly noSelf: true;
30
+ };
31
+ readonly effectiveProperties: never;
32
+ }>;