@astrale-domains/shell 0.1.0-beta.11 → 0.1.0-beta.13

package/dist/schema/user/class.d.ts

@@ -1,278 +1,18 @@
-export declare const User: import("@astrale-os/sdk/schema").NodeClass<{
-    readonly depth: 1;
-    readonly abstract: false;
-    readonly extends: readonly [import("@astrale-os/sdk/schema").ClassProjection<"node", import("@astrale-os/sdk/schema").NodeClassDefinition & {
-        readonly ref: import("@astrale-os/sdk/schema").ClassRef<"Identity"> & {
-            readonly origin: "kernel.astrale.ai";
-        };
-        readonly kind: 'node';
-        readonly abstract: true;
-    }, import("@astrale-os/sdk/schema").ClassRef & import("@astrale-os/sdk/schema").ClassRef<"Identity"> & {
-        readonly origin: "kernel.astrale.ai";
-    }, "kernel.astrale.ai:class.Identity", readonly [import("@astrale-os/sdk/schema").ClassProjection<"node", import("@astrale-os/sdk/schema").NodeClassDefinition & {
-        readonly ref: import("@astrale-os/sdk/schema").ClassRef<"Node"> & {
-            readonly origin: "kernel.astrale.ai";
-        };
-        readonly kind: 'node';
-        readonly abstract: true;
-    }, import("@astrale-os/sdk/schema").ClassRef & import("@astrale-os/sdk/schema").ClassRef<"Node"> & {
-        readonly origin: "kernel.astrale.ai";
-    }, "kernel.astrale.ai:class.Node", readonly import("@astrale-os/sdk/schema").AnyResolvedClass[], never, never, never, never, never, never>, ...never[]], import("@astrale-os/sdk/schema").PropertyProjection<({
-        claim: string;
-        op: "contains";
-        value: unknown;
-    } | {
-        claim: string;
-        op: "eq";
-        value: unknown;
-    } | {
-        claim: string;
-        op: "exists";
-    })[], false, "requiredClaims", "kernel.astrale.ai:class.Identity.property.requiredClaims"> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, false, "frozen", "kernel.astrale.ai:class.Identity.property.frozen"> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "iss", "kernel.astrale.ai:class.Identity.property.iss"> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "sub", "kernel.astrale.ai:class.Identity.property.sub">, import("@astrale-os/sdk/schema").MethodProjection<{
-        audience: string;
-        ttlSeconds: number;
-        attenuation: unknown;
-    }, {
-        readonly mode: 'value';
-        readonly value: string;
-    }, false, "default", "authenticated", "delegate", "kernel.astrale.ai:class.Identity.method.delegate">, import("@astrale-os/sdk/schema").MethodProjection<Record<string, never>, {
-        readonly mode: 'value';
-        readonly value: {
-            id: string;
-            issuer: string;
-            subject: string;
-            frozen: boolean;
-            requiredClaims: ({
-                claim: string;
-                op: "contains";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "eq";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "exists";
-            })[];
-        };
-    }, true, "default", "authenticated", "whoami", "kernel.astrale.ai:class.Identity.method.whoami"> | import("@astrale-os/sdk/schema").MethodProjection<{
-        policy: string;
-        object: string;
-    }, {
-        readonly mode: 'value';
-        readonly value: {
-            allowed: boolean;
-        };
-    }, true, "default", "authenticated", "can", "kernel.astrale.ai:class.Identity.method.can"> | import("@astrale-os/sdk/schema").MethodProjection<{
-        issuer: string;
-        subject: string;
-    }, {
-        readonly mode: 'value';
-        readonly value: {
-            id: string;
-            issuer: string;
-            subject: string;
-            frozen: boolean;
-            requiredClaims: ({
-                claim: string;
-                op: "contains";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "eq";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "exists";
-            })[];
-        } | null;
-    }, true, "default", "authorized", "whois", "kernel.astrale.ai:class.Identity.method.whois"> | import("@astrale-os/sdk/schema").MethodProjection<{
-        audience?: string | undefined;
-        ttlSeconds: number;
-        grant?: unknown;
-    }, {
-        readonly mode: 'value';
-        readonly value: string;
-    }, true, "default", "authorized", "mint", "kernel.astrale.ai:class.Identity.method.mint">, import("@astrale-os/sdk/schema").PropertyProjection<({
-        claim: string;
-        op: "contains";
-        value: unknown;
-    } | {
-        claim: string;
-        op: "eq";
-        value: unknown;
-    } | {
-        claim: string;
-        op: "exists";
-    })[], false, "requiredClaims", "kernel.astrale.ai:class.Identity.property.requiredClaims"> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, false, "frozen", "kernel.astrale.ai:class.Identity.property.frozen"> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "iss", "kernel.astrale.ai:class.Identity.property.iss"> | import("@astrale-os/sdk/schema").PropertyProjection<string | number | boolean | import("@astrale-os/sdk/schema").Array | import("@astrale-os/sdk/schema").Object | null, true, "sub", "kernel.astrale.ai:class.Identity.property.sub">, import("@astrale-os/sdk/schema").MethodProjection<{
-        audience: string;
-        ttlSeconds: number;
-        attenuation: unknown;
-    }, {
-        readonly mode: 'value';
-        readonly value: string;
-    }, false, "default", "authenticated", "delegate", "kernel.astrale.ai:class.Identity.method.delegate">, import("@astrale-os/sdk/schema").MethodProjection<Record<string, never>, {
-        readonly mode: 'value';
-        readonly value: {
-            id: string;
-            issuer: string;
-            subject: string;
-            frozen: boolean;
-            requiredClaims: ({
-                claim: string;
-                op: "contains";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "eq";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "exists";
-            })[];
-        };
-    }, true, "default", "authenticated", "whoami", "kernel.astrale.ai:class.Identity.method.whoami"> | import("@astrale-os/sdk/schema").MethodProjection<{
-        policy: string;
-        object: string;
-    }, {
-        readonly mode: 'value';
-        readonly value: {
-            allowed: boolean;
-        };
-    }, true, "default", "authenticated", "can", "kernel.astrale.ai:class.Identity.method.can"> | import("@astrale-os/sdk/schema").MethodProjection<{
-        issuer: string;
-        subject: string;
-    }, {
-        readonly mode: 'value';
-        readonly value: {
-            id: string;
-            issuer: string;
-            subject: string;
-            frozen: boolean;
-            requiredClaims: ({
-                claim: string;
-                op: "contains";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "eq";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "exists";
-            })[];
-        } | null;
-    }, true, "default", "authorized", "whois", "kernel.astrale.ai:class.Identity.method.whois"> | import("@astrale-os/sdk/schema").MethodProjection<{
-        audience?: string | undefined;
-        ttlSeconds: number;
-        grant?: unknown;
-    }, {
-        readonly mode: 'value';
-        readonly value: string;
-    }, true, "default", "authorized", "mint", "kernel.astrale.ai:class.Identity.method.mint">>];
+import { nodeClass, type Kernel } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { resolveHome } from './methods.js';
+declare const displayName: import("@astrale-os/sdk/schema").Property<z.ZodString, {
+    readonly required: false;
+}>;
+export interface UserConfig {
+    readonly description: string;
+    readonly extends: readonly [Kernel['classes']['Identity']];
     readonly properties: {
-        readonly displayName: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "displayName", "self">;
+        readonly displayName: typeof displayName;
     };
     readonly methods: {
-        readonly resolveHome: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-            readonly mode: 'value';
-            readonly value: {
-                userId: string;
-                personalSpaceId: string | null;
-            };
-        }, "authenticated", false, "default">>;
+        readonly resolveHome: typeof resolveHome;
     };
-    readonly effectiveProperties: import("@astrale-os/sdk/schema").AuthoredPropertyProjection<string, string, false, "displayName", "self"> | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, false> & {
-        readonly name: "frozen";
-        readonly key: "kernel.astrale.ai:class.Identity.property.frozen";
-    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
-        readonly name: "iss";
-        readonly key: "kernel.astrale.ai:class.Identity.property.iss";
-    }) | (import("@astrale-os/sdk/schema").ResolvedProperty<import("@astrale-os/sdk/schema").Value, true> & {
-        readonly name: "sub";
-        readonly key: "kernel.astrale.ai:class.Identity.property.sub";
-    });
-    readonly effectiveInstanceMethods: import("@astrale-os/sdk/schema").AuthoredMethodProjection<import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
-        readonly mode: 'value';
-        readonly value: {
-            userId: string;
-            personalSpaceId: string | null;
-        };
-    }, "authenticated", false, "default">>, "resolveHome", "self"> | (import("@astrale-os/sdk/schema").ResolvedMethod<{
-        audience: string;
-        ttlSeconds: number;
-        attenuation: unknown;
-    }, {
-        readonly mode: 'value';
-        readonly value: string;
-    }, false, "default", "authenticated", import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.delegate"> & {
-        readonly name: "delegate";
-    });
-    readonly effectiveStaticMethods: (import("@astrale-os/sdk/schema").ResolvedMethod<Record<string, never>, {
-        readonly mode: 'value';
-        readonly value: {
-            id: string;
-            issuer: string;
-            subject: string;
-            frozen: boolean;
-            requiredClaims: ({
-                claim: string;
-                op: "contains";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "eq";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "exists";
-            })[];
-        };
-    }, true, "default", "authenticated", import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.whoami"> & {
-        readonly name: "whoami";
-    }) | (import("@astrale-os/sdk/schema").ResolvedMethod<{
-        policy: string;
-        object: string;
-    }, {
-        readonly mode: 'value';
-        readonly value: {
-            allowed: boolean;
-        };
-    }, true, "default", "authenticated", import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.can"> & {
-        readonly name: "can";
-    }) | (import("@astrale-os/sdk/schema").ResolvedMethod<{
-        issuer: string;
-        subject: string;
-    }, {
-        readonly mode: 'value';
-        readonly value: {
-            id: string;
-            issuer: string;
-            subject: string;
-            frozen: boolean;
-            requiredClaims: ({
-                claim: string;
-                op: "contains";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "eq";
-                value: unknown;
-            } | {
-                claim: string;
-                op: "exists";
-            })[];
-        } | null;
-    }, true, "default", "authorized", import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.whois"> & {
-        readonly name: "whois";
-    }) | (import("@astrale-os/sdk/schema").ResolvedMethod<{
-        audience?: string | undefined;
-        ttlSeconds: number;
-        grant?: unknown;
-    }, {
-        readonly mode: 'value';
-        readonly value: string;
-    }, true, "default", "authorized", import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").PolicyCheckObject>, "kernel.astrale.ai:class.Identity.method.mint"> & {
-        readonly name: "mint";
-    });
-}>;
+}
+export declare const User: ReturnType<typeof nodeClass<UserConfig>>;
+export {};

package/dist/schema/user/class.js

@@ -1,11 +1,11 @@
 import { K, nodeClass, property } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
 import { resolveHome } from './methods.js';
-export const User = nodeClass({
+const displayName = property(z.string().min(1).max(160), { required: false });
+const config = {
     description: 'One externally identified person using Shell.',
     extends: [K.classes.Identity],
-    properties: {
-        displayName: property(z.string().min(1).max(160), { required: false }),
-    },
+    properties: { displayName },
     methods: { resolveHome },
-});
+};
+export const User = nodeClass(config);

package/dist/workflows/group/assign.d.ts

@@ -0,0 +1,3 @@
+import { type WorkflowDefinition } from '@astrale-os/sdk/workflow';
+import type { ShellSchema } from '#schema';
+export declare const assignGroupUserWorkflow: WorkflowDefinition<typeof ShellSchema, 'Group.assignUser'>;

package/dist/workflows/group/change.d.ts

@@ -0,0 +1,6 @@
+import type { WorkflowContext } from '@astrale-os/sdk/workflow';
+import type { S, Shell } from '#schema';
+type GroupCallable = typeof S.classes.Group.self.methods.assignUser | typeof S.classes.Group.self.methods.unassignUser;
+type GroupContext = WorkflowContext<GroupCallable, Shell>;
+export declare function changeMembership(context: GroupContext, present: boolean): Promise<Readonly<Record<never, never>>>;
+export {};

package/dist/workflows/group/index.d.ts

@@ -0,0 +1,3 @@
+export { assignGroupUserWorkflow } from './assign.js';
+export { changeMembership } from './change.js';
+export { unassignGroupUserWorkflow } from './unassign.js';

package/dist/workflows/group/unassign.d.ts

@@ -0,0 +1,3 @@
+import { type WorkflowDefinition } from '@astrale-os/sdk/workflow';
+import type { ShellSchema } from '#schema';
+export declare const unassignGroupUserWorkflow: WorkflowDefinition<typeof ShellSchema, 'Group.unassignUser'>;

package/dist/workflows/index.d.ts

@@ -0,0 +1,3 @@
+export * from '#workflows/group';
+export * from '#workflows/setup';
+export * from '#workflows/space';

package/dist/workflows/setup/admin.d.ts

@@ -0,0 +1,3 @@
+import { type WorkflowDefinition } from '@astrale-os/sdk/workflow';
+import type { ShellSchema } from '#schema';
+export declare const setupAdminWorkflow: WorkflowDefinition<typeof ShellSchema, 'setupAdmin'>;

package/dist/workflows/setup/index.d.ts

@@ -0,0 +1,5 @@
+export { setupAdminWorkflow } from './admin.js';
+export { setupMemberWorkflow } from './member.js';
+export { planUserSetup, type SetupConflictReason, type SetupPlan, type SetupRole } from './plan.js';
+export { provisioningRequest, provisioningResult } from './provision.js';
+export { runSetup } from './run.js';

package/dist/workflows/setup/member.d.ts

@@ -0,0 +1,3 @@
+import { type WorkflowDefinition } from '@astrale-os/sdk/workflow';
+import type { ShellSchema } from '#schema';
+export declare const setupMemberWorkflow: WorkflowDefinition<typeof ShellSchema, 'setupMember'>;

package/dist/workflows/setup/plan.d.ts

@@ -0,0 +1,18 @@
+import type { Node } from '@astrale-os/sdk/graph/node';
+import type { UserRepair } from '#mutations/user';
+import type { UserSetupObservation } from '#queries/user';
+import type { SetupUserInput, Shell } from '#schema';
+export type SetupRole = 'member' | 'admin';
+export type SetupPlan = {
+    readonly kind: 'conflict';
+    readonly reason: SetupConflictReason;
+    readonly message: string;
+} | {
+    readonly kind: 'unchanged';
+    readonly personalSpaceId: Node['id'];
+} | {
+    readonly kind: 'repair';
+    readonly repair: UserRepair;
+};
+export type SetupConflictReason = 'IDENTITY_CLASS_CONFLICT' | 'IDENTITY_FACT_CONFLICT' | 'MULTIPLE_DEFAULT_SPACES' | 'DEFAULT_SPACE_CLASS_CONFLICT' | 'AMBIGUOUS_PERSONAL_SPACE';
+export declare function planUserSetup(domain: Shell, input: SetupUserInput, role: SetupRole, observation: UserSetupObservation): SetupPlan;

package/dist/workflows/setup/provision.d.ts

@@ -0,0 +1,5 @@
+import type { ProvisionRequest, ProvisionResult } from '@astrale-os/sdk/auth';
+import type { SetupUserInput, SetupUserResult, Shell } from '#schema';
+import type { SetupRole } from './plan.js';
+export declare function provisioningRequest(domain: Shell, input: SetupUserInput, role: SetupRole): ProvisionRequest;
+export declare function provisioningResult(result: ProvisionResult): SetupUserResult;

package/dist/workflows/setup/run.d.ts

@@ -0,0 +1,7 @@
+import type { WorkflowContext } from '@astrale-os/sdk/workflow';
+import type { S, SetupUserResult, Shell } from '#schema';
+import { type SetupRole } from './plan.js';
+type SetupCallable = typeof S.functions.setupAdmin | typeof S.functions.setupMember;
+type SetupContext = WorkflowContext<SetupCallable, Shell>;
+export declare function runSetup(context: SetupContext, role: SetupRole): Promise<SetupUserResult>;
+export {};

package/dist/workflows/space/access.d.ts

@@ -0,0 +1,7 @@
+import type { WorkflowContext } from '@astrale-os/sdk/workflow';
+import type { S, Shell } from '#schema';
+export type DesiredSpaceAccess = 'member' | 'admin' | null;
+type SpaceAccessCallable = typeof S.classes.Space.self.methods.addUser | typeof S.classes.Space.self.methods.removeUser;
+type SpaceAccessContext = WorkflowContext<SpaceAccessCallable, Shell>;
+export declare function setUserAccess(context: SpaceAccessContext, desired: DesiredSpaceAccess): Promise<Readonly<Record<never, never>>>;
+export {};

package/dist/workflows/space/add.d.ts

@@ -0,0 +1,3 @@
+import { type WorkflowDefinition } from '@astrale-os/sdk/workflow';
+import type { ShellSchema } from '#schema';
+export declare const addSpaceUserWorkflow: WorkflowDefinition<typeof ShellSchema, 'Space.addUser'>;

package/dist/workflows/space/default.d.ts

@@ -0,0 +1,3 @@
+import { type WorkflowDefinition } from '@astrale-os/sdk/workflow';
+import type { ShellSchema } from '#schema';
+export declare const setDefaultSpaceWorkflow: WorkflowDefinition<typeof ShellSchema, 'Space.setDefault'>;

package/dist/workflows/space/default.js

@@ -1,6 +1,6 @@
 import { InvocationError } from '@astrale-os/sdk/execution';
 import { Path } from '@astrale-os/sdk/graph/path';
-import { defineWorkflow } from '@astrale-os/sdk/workflow';
+import { defineWorkflow, } from '@astrale-os/sdk/workflow';
 import { changeDefaultSpace } from '#mutations/space';
 import { observeHome } from '#queries/user';
 async function setDefault(context) {

package/dist/workflows/space/index.d.ts

@@ -0,0 +1,4 @@
+export { setUserAccess, type DesiredSpaceAccess } from './access.js';
+export { addSpaceUserWorkflow } from './add.js';
+export { setDefaultSpaceWorkflow } from './default.js';
+export { removeSpaceUserWorkflow } from './remove.js';

package/dist/workflows/space/remove.d.ts

@@ -0,0 +1,3 @@
+import { type WorkflowDefinition } from '@astrale-os/sdk/workflow';
+import type { ShellSchema } from '#schema';
+export declare const removeSpaceUserWorkflow: WorkflowDefinition<typeof ShellSchema, 'Space.removeUser'>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-domains/shell",
-  "version": "0.1.0-beta.11",
+  "version": "0.1.0-beta.13",
   "description": "Astrale Shell Domain schema and remote product implementation",
   "license": "Apache-2.0",
   "repository": {
@@ -47,22 +47,30 @@
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@astrale-os/sdk": "0.5.0-beta.41",
+    "@astrale-os/sdk": "0.5.0-beta.51",
     "@astrale/typescript-config": "npm:@jsr/astrale__typescript-config@~1.1.3",
+    "@types/node": "^22.0.0",
     "typescript": "7.0.2",
     "vitest": "4.1.10"
   },
   "peerDependencies": {
-    "@astrale-os/sdk": ">=0.5.0-beta.32 <1.0.0"
+    "@astrale-os/sdk": ">=0.5.0-beta.51 <1.0.0"
+  },
+  "devEngines": {
+    "runtime": {
+      "name": "node",
+      "version": ">=24 <25 || >=26 <27",
+      "onFail": "error"
+    }
   },
   "engines": {
-    "node": ">=24"
+    "node": ">=22"
   },
   "scripts": {
     "prebuild": "pnpm clean",
-    "build": "tsc --paths null && astrale-domain package",
+    "build": "tsc --project tsconfig.package.json --paths null && node scripts/verify-platform-package.mjs",
     "clean": "rm -rf dist",
-    "typecheck": "tsc --noEmit --paths null",
+    "typecheck": "tsc --noEmit --paths null && tsc --noEmit -p tsconfig.test.json",
     "test": "NODE_PATH=$PWD/node_modules vitest run --config vitest.config.ts",
     "test:file": "NODE_PATH=$PWD/node_modules vitest run --config vitest.config.ts"
   }