@astrale-os/sdk 0.6.0-beta.29 → 0.6.0-beta.30

package/README.md

@@ -129,8 +129,8 @@ A Class rule judges the caller, which passes by owning the Class's installation
 never by a capability it holds. When a Domain acts for a caller, the Domain must also hold its own
 right on the Class (the capability its requirements declare, or ownership), whatever the rule; an
 Identity acting for itself delegates nothing and meets no such ceiling. A callable reads the same
-way, except that its principal always holds its right (`can_use` or ownership). `true` admits
-every Identity of the instance, never an anonymous request.
+way, with `can_use` (or ownership) as the right of its ceiling. `true` admits every Identity of the
+instance, never an anonymous request.
 
 | Declared | Caller is admitted when |
 | --- | --- |
@@ -190,6 +190,16 @@ describe capabilities for the Domain principal.
 Builds emit `requirements.capabilities.core`; the release declares those requirements for the
 Domain principal and local Core identities. Installation verifies the Release and its exact Bundle.
 
+### Durable schema installations
+
+The Client facade adopts Kernel `1.0.0-beta.6`. `schema.install()` and `schema.uninstall()`
+return an Execution id and its status; `result` is present only after successful completion.
+An install with `wait: false` returns without waiting for completion. Keep its `execution` id to
+continue observing it through `schema.installation.status()` or `schema.installation.result()`
+from a new Client session. Uninstalls have the corresponding `schema.uninstallation` methods.
+The Client decodes the Kernel’s `kind: execution` call result before reading the durable status.
+An admitted or pending Execution is not proof that the schema change completed.
+
 ### Prerequisites
 
 - Node.js 26.7.0 (default) or Node.js 24; published packages remain compatible with Node.js 22+
@@ -359,7 +369,7 @@ await session.graph.get('@order-id') // Kernel callable: the source credential
 
 | Credential presented | Principal | Kernel callable | Domain callable reached by Policy |
 | --- | --- | --- | --- |
-| Source credential (minted or key) | the identity | ✅ | ❌ `2004`, unless the identity holds `can_use` on it through a Group |
+| Source credential (minted or key) | the identity | ✅ | ✅ the identity acts for itself: the Policy alone decides |
 | Session with `exchange` | the declaring Domain, for Domain callables | ✅ with the source credential | ✅ Policy evaluated against the identity |
 | `session.exchange(issuer)` held by a second Session | that Domain | ✅ as that Domain | only what that Domain may use |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/sdk",
-  "version": "0.6.0-beta.29",
+  "version": "0.6.0-beta.30",
   "description": "Schema-first SDK for defining, composing, and deploying Astrale domains",
   "keywords": [
     "astrale",
@@ -257,11 +257,11 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@astrale-os/kernel-client": "1.0.0-beta.2",
-    "@astrale-os/kernel-core": "1.0.0-beta.2",
-    "@astrale-os/kernel-dsl": "1.0.0-beta.2",
-    "@astrale-os/kernel-protocol": "1.0.0-beta.2",
-    "@astrale-os/kernel-server": "1.0.0-beta.2",
+    "@astrale-os/kernel-client": "1.0.0-beta.6",
+    "@astrale-os/kernel-core": "1.0.0-beta.6",
+    "@astrale-os/kernel-dsl": "1.0.0-beta.3",
+    "@astrale-os/kernel-protocol": "1.0.0-beta.6",
+    "@astrale-os/kernel-server": "1.0.0-beta.6",
     "@lucide/icons": "1.34.0",
     "@typescript/native-preview": "7.0.0-dev.20260707.2",
     "cross-spawn": "7.0.6",