@astrale-domains/shell-schema 0.3.0

package/dist/application.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application.d.ts","sourceRoot":"","sources":["../application.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAIrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAMvB;;;;;GAKG;AACH,eAAO,MAAM,cAAc,6DAE1B,CAAA;AAED,gFAAgF;AAChF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAIpB,yEAAyE;QACzE,MAAM;QACN;;gCAEwB;QACxB,IAAI;;;QAGJ;;;;;;;;;;;;;;WAcG;QACH,OAAO;;;;;;;;QAQP;;;;;WAKG;QACH,SAAS;;;;;QAWT;;;;WAIG;QACH,UAAU;;;;QAGV;;;;;;;;;;;;;;;WAeG;QACH,IAAI;;;;;;;;;;;QAeJ;;;;;;;;;;;WAWG;QACH,cAAc;;;;;;;;;;;QAnGd,yEAAyE;;QAEzE;;gCAEwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyG1B,CAAA;AAEF;;;;;GAKG;AACH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAGd;;;;;;;WAOG;QACH,MAAM;;;QACN;;;;;;WAMG;QACH,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEV,CAAA;AAEF;;;2EAG2E;AAC3E,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAxBb;;;;;;;eAOG;YACH,MAAM;;;YACN;;;;;;eAMG;YACH,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAYR;;sDAE8C;QAC9C,OAAO;QACP,6EAA6E;QAC7E,WAAW;;;;QALX;;sDAE8C;;QAE9C,6EAA6E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAhC7E;;;;;;;eAOG;;;;YAEH;;;;;;eAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBL,CAAA;AAEF;;;;;GAKG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;EAGxB,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;EAGrB,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;EAA4E,CAAA;AAEjG;;;;;GAKG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;EAGtB,CAAA"}

package/dist/application.js

@@ -0,0 +1,200 @@
+import { edgeClass, KernelSchema, nodeClass, nodeInterface } from '@astrale-os/kernel-core';
+import { fn } from '@astrale-os/kernel-dsl';
+import { z } from 'zod';
+import { APPLICATION_ICON, ROLE_ICON } from './icons';
+import { iUser } from './identity';
+import { iSpace } from './space';
+/**
+ * The user-mintable delegation expression `app::open` / `app::getAccessToken`
+ * hand back — typed precisely as the kernel's `UnresolvedIdentityExpr` (so the
+ * `*Result` types infer it directly) and validated structurally as an object
+ * (the exact kernel validator isn't reachable from a worker bundle).
+ */
+export const delegationExpr = z.custom((v) => v !== null && typeof v === 'object');
+/** An installed application — an Identity living inside the Space it serves. */
+export const Application = nodeClass({
+    implements: [KernelSchema.interfaces.Identity],
+    icon: APPLICATION_ICON,
+    props: {
+        /** The app's source — the origin of the domain it was installed from. */
+        origin: z.string(),
+        /** The app's logo — an inline SVG string or a `data:` URL, lifted from the
+         *  target domain's `/meta` manifest at install time. Optional (a domain need
+         *  not declare one). */
+        logo: z.string().optional(),
+    },
+    methods: {
+        /**
+         * `Application.install(target, space)` — install an application INTO a space.
+         * `target` is the app's source — either a serving worker url (`https://…`,
+         * resolved to its declared origin via `/meta`) OR a bare origin. The target
+         * MUST be among the domains installed on this instance; otherwise the
+         * install is refused. The CALLER must hold EDIT on the space.
+         *
+         * Idempotent: re-installing the same origin into the same space adopts the
+         * existing app. Registers the target domain's declared ROLES (manifest
+         * `roles`) + the per-domain roles umbrella on first install, materializes
+         * the Application identity in the space's default `apps` folder (resolved via the
+         * `default_location` edge), links `installed_in` → space and `of_domain` →
+         * Domain, pins the `entrypoint` view when the manifest declares one, and
+         * assigns the caller the domain's DEFAULT roles.
+         */
+        install: fn({
+            static: true,
+            params: {
+                target: z.string().min(1),
+                space: z.string().min(1),
+            },
+            returns: z.object({ id: z.string(), path: z.string(), origin: z.string() }),
+        }),
+        /**
+         * `Application.available()` — the domains installed on this instance, enriched with
+         * each one's `/meta` manifest `logo` where reachable. The catalog a user picks
+         * from to `install` an app (labelled by `origin`). A domain whose `/meta` fails
+         * still appears (without `logo`).
+         */
+        available: fn({
+            static: true,
+            params: {},
+            returns: z.array(z.object({
+                origin: z.string(),
+                url: z.string().optional(),
+                logo: z.string().optional(),
+            })),
+        }),
+        /**
+         * `app::entrypoint()` — the app's entry View, resolved by walking the SEMANTIC
+         * `entrypoint` edge (Application → View), never by reconstructing a path. Returns the
+         * View ref (filtered by the caller's READ), or `null` when none is pinned.
+         */
+        entrypoint: fn({
+            returns: z.object({ id: z.string(), path: z.string() }).nullable(),
+        }),
+        /**
+         * `app::open()` — step 1 of the three-call app-opening protocol (caller
+         * gate: USE on the app). Resolves the entry view, mints the app's
+         * kernel-issued self bearer (`appCredential` — the app holds NO capability
+         * beyond its explicit node grants), and returns the READY-TO-MINT
+         * `delegation` expression:
+         *
+         *   union( scope(self, {nodes: [installed domains]}),
+         *          intersect( scope(self, {nodes: [/spaces]}),
+         *                     credential(appCredential) ) )
+         *
+         * The USER mints it verbatim (step 2 — the kernel's delegation mint is
+         * self-only): `@you::mintDelegationCredential({ delegation })`, then hands
+         * the envelope to `getAccessToken` (step 3) for the app token; refreshes
+         * loop on steps 2–3 (each `getAccessToken` returns the next expression).
+         */
+        open: fn({
+            returns: z.object({
+                view: z
+                    .object({
+                    id: z.string(),
+                    path: z.string(),
+                    url: z.string().optional(),
+                    handshake: z.string().optional(),
+                })
+                    .nullable(),
+                appCredential: z.string(),
+                delegation: delegationExpr,
+                expiresAt: z.number(),
+            }),
+        }),
+        /**
+         * `app::getAccessToken(delegation)` — exchange the USER-MINTED envelope
+         * (step 2) for the APP TOKEN, minted AS the app:
+         * `union(selfApp, delegatedUserToken)` — the app's own explicit grants
+         * plus the user-signed, pre-attenuated authority, nothing more (the
+         * attenuation lives inside the user's signature). Sub = the app; audience
+         * = the app's backend. Refused when the envelope's subject isn't the
+         * caller. REFRESH-CAPABLE: the result carries the NEXT ready-to-mint
+         * `delegation` expression (armed with the fresh `appCredential`), so
+         * refreshing loops on the user mint + this call alone — `open` is only
+         * needed once, for the view.
+         */
+        getAccessToken: fn({
+            params: { delegation: z.string().min(1) },
+            returns: z.object({
+                credential: z.string(),
+                expiresAt: z.number(),
+                delegation: delegationExpr,
+                appCredential: z.string(),
+            }),
+        }),
+    },
+});
+/**
+ * `Role` (interface) — a capability identity a DOMAIN declares (manifest
+ * `roles`) and a USER is assigned (`assign`). Holding a role composes its
+ * permissions onto the user via `extendIdentity` — the same mechanism as Group
+ * membership. The domain itself grants each role its resource permissions.
+ */
+export const iRole = nodeInterface({
+    extends: [KernelSchema.interfaces.Identity],
+    methods: {
+        /**
+         * `role::assign(user)` — assign this role to a user: records the semantic
+         * `has_role` edge AND extends the user's identity with the role
+         * (`extendIdentity`), so the role's permissions genuinely compose onto the
+         * user. Kernel-gated: the caller needs EDIT on the user and SHARE on the
+         * role (default roles carry a users-group SHARE grant — self-assignable).
+         * Idempotent.
+         */
+        assign: fn({ params: { user: z.string().min(1) }, returns: z.void() }),
+        /**
+         * `role::unassign(user)` — the idempotent inverse of `assign`: removes the
+         * `has_role` edge AND reverses the identity composition (`removeExtension`),
+         * so the role's permissions no longer compose onto the user. Same gate as
+         * `assign` (SHARE on the role + EDIT on the user unless self). Not assigned
+         * already ⇒ no-op.
+         */
+        unassign: fn({ params: { user: z.string().min(1) }, returns: z.void() }),
+    },
+});
+/** The DEFAULT `Role` — implements the `Role` interface. Role nodes live under
+ *  `/domains/<origin-slug>/roles`; the parent node of a domain's roles is
+ *  itself a Role — the ROLES UMBRELLA (`RolesIdentity`), extended with every
+ *  role of the domain so it embodies their union at authorization time. */
+export const Role = nodeClass({
+    implements: [iRole],
+    icon: ROLE_ICON,
+    props: {
+        /** Declared `default: true` — auto-assigned to the installing user; carries
+         *  a users-group SHARE grant (self-assignable). Registered from the
+         *  domain's manifest at first app install. */
+        default: z.boolean().optional(),
+        /** What holding this role means — from the domain's manifest declaration. */
+        description: z.string().optional(),
+    },
+});
+/**
+ * Where an app is installed: an Application instance lives in a SINGLE Space (at most one
+ * `installed_in` per app — you can't install one app instance in two spaces). A
+ * Space holds many apps; we mint a distinct Application instance per space even when two
+ * installs point at the same origin.
+ */
+export const installed_in = edgeClass({ as: 'app', types: [Application], cardinality: '0..1' }, { as: 'space', types: [iSpace] });
+/**
+ * The domain an Application or Role belongs to: an Application targets exactly one domain (a
+ * domain can back many apps); a Role is declared by exactly one domain. `0..1`
+ * is the safe write-time bound. For an Application it's MANDATORY —
+ * `Application.install` resolves the target origin's Domain node (which must exist, since
+ * the target is an installed domain) and links it.
+ */
+export const of_domain = edgeClass({ as: 'member', types: [Application, Role], cardinality: '0..1' }, { as: 'domain', types: [KernelSchema.classes.Domain] });
+/**
+ * A user's role membership — the semantic, queryable side of role assignment
+ * (the permission composition is done via `extendIdentity`). Typed on the
+ * INTERFACES so any implementer (a foreign `Agent` as user, a specialized role
+ * class) participates.
+ */
+export const has_role = edgeClass({ as: 'user', types: [iUser] }, { as: 'role', types: [iRole] });
+/**
+ * An app's entry surface — the View shown when the app opens, specific per app.
+ * At most one. Set by `Application.install` when the target domain's `/meta` manifest
+ * declares an `entrypoint` slug (resolved as `/:<origin>:view.<slug>`, then
+ * pinned to the resolved View node).
+ */
+export const entrypoint = edgeClass({ as: 'app', types: [Application], cardinality: '0..1' }, { as: 'view', types: [KernelSchema.classes.View] });
+//# sourceMappingURL=application.js.map

package/dist/application.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application.js","sourceRoot":"","sources":["../application.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAC3F,OAAO,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAEhC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,CAC3C,CAAA;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;IACnC,UAAU,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC;IAC9C,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE;QACL,yEAAyE;QACzE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB;;gCAEwB;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B;IACD,OAAO,EAAE;QACP;;;;;;;;;;;;;;WAcG;QACH,OAAO,EAAE,EAAE,CAAC;YACV,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE;gBACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;aACzB;YACD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;SAC5E,CAAC;QACF;;;;;WAKG;QACH,SAAS,EAAE,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,CAAC,CAAC,KAAK,CACd,CAAC,CAAC,MAAM,CAAC;gBACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;gBAClB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;gBAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;aAC5B,CAAC,CACH;SACF,CAAC;QACF;;;;WAIG;QACH,UAAU,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;SACnE,CAAC;QACF;;;;;;;;;;;;;;;WAeG;QACH,IAAI,EAAE,EAAE,CAAC;YACP,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;gBAChB,IAAI,EAAE,CAAC;qBACJ,MAAM,CAAC;oBACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;oBACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;oBAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;oBAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;iBACjC,CAAC;qBACD,QAAQ,EAAE;gBACb,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;gBACzB,UAAU,EAAE,cAAc;gBAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;aACtB,CAAC;SACH,CAAC;QACF;;;;;;;;;;;WAWG;QACH,cAAc,EAAE,EAAE,CAAC;YACjB,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACzC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;gBAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;gBACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;gBACrB,UAAU,EAAE,cAAc;gBAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;aAC1B,CAAC;SACH,CAAC;KACH;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,aAAa,CAAC;IACjC,OAAO,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC;IAC3C,OAAO,EAAE;QACP;;;;;;;WAOG;QACH,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACtE;;;;;;WAMG;QACH,QAAQ,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;KACzE;CACF,CAAC,CAAA;AAEF;;;2EAG2E;AAC3E,MAAM,CAAC,MAAM,IAAI,GAAG,SAAS,CAAC;IAC5B,UAAU,EAAE,CAAC,KAAK,CAAC;IACnB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE;QACL;;sDAE8C;QAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,6EAA6E;QAC7E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC;CACF,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CACnC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,MAAe,EAAE,EACjE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CACjC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAChC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,MAAe,EAAE,EAC1E,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CACvD,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;AAEjG;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CACjC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,MAAe,EAAE,EACjE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CACnD,CAAA"}

package/dist/icons.d.ts

@@ -0,0 +1,11 @@
+/** lucide `user` — a person. */
+export declare const USER_ICON: string;
+/** lucide `users` — an identity group (a team). */
+export declare const GROUP_ICON: string;
+/** lucide `layout-grid` — a per-user space (workspace surface). */
+export declare const SPACE_ICON: string;
+/** lucide `app-window` — an installed application. */
+export declare const APPLICATION_ICON: string;
+/** lucide `shield-check` — a role (a scoped grant of permissions). */
+export declare const ROLE_ICON: string;
+//# sourceMappingURL=icons.d.ts.map

package/dist/icons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"icons.d.ts","sourceRoot":"","sources":["../icons.ts"],"names":[],"mappings":"AAYA,gCAAgC;AAChC,eAAO,MAAM,SAAS,QAErB,CAAA;AAED,mDAAmD;AACnD,eAAO,MAAM,UAAU,QAEtB,CAAA;AAED,mEAAmE;AACnE,eAAO,MAAM,UAAU,QAEtB,CAAA;AAED,sDAAsD;AACtD,eAAO,MAAM,gBAAgB,QAE5B,CAAA;AAED,sEAAsE;AACtE,eAAO,MAAM,SAAS,QAErB,CAAA"}

package/dist/icons.js

@@ -0,0 +1,21 @@
+/**
+ * Class-level icons for the shell domain's node classes.
+ *
+ * Each is raw SVG markup passed to `nodeClass({ icon })`, materialized onto the
+ * class `self` node (the kernel `Iconable.icon` property) at install. Clients
+ * resolve an instance's icon through its class. Markup is lifted verbatim from
+ * lucide (ISC) icon node data; `stroke="currentColor"` so the glyph follows
+ * text color — the same convention the kernel's structural classes use.
+ */
+const svg = (body) => `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">${body}</svg>`;
+/** lucide `user` — a person. */
+export const USER_ICON = svg('<path d="M19 21v-2a4 4 0 0 0-4-4H9a4 4 0 0 0-4 4v2"/><circle cx="12" cy="7" r="4"/>');
+/** lucide `users` — an identity group (a team). */
+export const GROUP_ICON = svg('<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M22 21v-2a4 4 0 0 0-3-3.87"/><path d="M16 3.13a4 4 0 0 1 0 7.75"/>');
+/** lucide `layout-grid` — a per-user space (workspace surface). */
+export const SPACE_ICON = svg('<rect width="7" height="7" x="3" y="3" rx="1"/><rect width="7" height="7" x="14" y="3" rx="1"/><rect width="7" height="7" x="14" y="14" rx="1"/><rect width="7" height="7" x="3" y="14" rx="1"/>');
+/** lucide `app-window` — an installed application. */
+export const APPLICATION_ICON = svg('<rect x="2" y="4" width="20" height="16" rx="2"/><path d="M10 4v4"/><path d="M2 8h20"/><path d="M6 4v4"/>');
+/** lucide `shield-check` — a role (a scoped grant of permissions). */
+export const ROLE_ICON = svg('<path d="M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z"/><path d="m9 12 2 2 4-4"/>');
+//# sourceMappingURL=icons.js.map

package/dist/icons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"icons.js","sourceRoot":"","sources":["../icons.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,GAAG,GAAG,CAAC,IAAY,EAAU,EAAE,CACnC,iKAAiK,IAAI,QAAQ,CAAA;AAE/K,gCAAgC;AAChC,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAC1B,qFAAqF,CACtF,CAAA;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAC3B,+JAA+J,CAChK,CAAA;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,CAC3B,kMAAkM,CACnM,CAAA;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CACjC,2GAA2G,CAC5G,CAAA;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAC1B,yMAAyM,CAC1M,CAAA"}