@astrale-domains/shell 0.1.0-beta.4 → 0.1.0-beta.41

package/dist/queries/space/access.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../queries/space/access.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,CAAC,EAAE,MAAM,SAAS,CAAA;AAC3B,OAAO,EAAE,iBAAiB,EAAsB,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAAE,sBAAsB,EAAuB,MAAM,mBAAmB,CAAA;AAwB/E,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAW,CAAA;AACnF,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAW,CAAA;AACnF,MAAM,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,SAAS,CAAA;AAClE,MAAM,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAA;AAC9D,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,SAAS,CAAA;AAEpD,MAAM,kBAAkB,GAAG,WAAW,CAAmD;IACvF,EAAE,EAAE,iCAAiC;IACrC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACnB,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC5E,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,iBAAiB,CAAC;QACxB,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;KACjD,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,WAAW,CAAmD;IACjF,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACnB,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC5E,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,eAAe,CAAC;QACtB,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;KAClD,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,WAAW,CAAmD;IAChF,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACnB,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC5E,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,UAAU,CAAC;QACjB,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;KAC/C,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,WAAW,CAAmD;IAChF,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACnB,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC5E,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC;QAC7C,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;KAChD,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,eAAe,CAAC;QACrD,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;KACjD,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAC,SAAS,CAG3D;IACA,EAAE,EAAE,mCAAmC;IACvC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC1B,KAAK,CAAC,OAAO,CAAC;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC;QAC7D,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC;KAC1D,CAAC;CACL,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CAAC,SAAS,CAG9D;IACA,EAAE,EAAE,sCAAsC;IAC1C,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC1B,KAAK,CAAC,OAAO,CAAC;QACZ,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC;QACzE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC;QACtD,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC;QACzD,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC;KACrD,CAAC;CACL,CAAC,CAAA;AAEF,SAAS,mBAAmB,CAC1B,KAAiB,EACjB,KAAoB,EACpB,EAAE,GAAG,EAAgD;IAErD,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,cAAc,CAAC,CAAA;IAChE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;AAC3D,CAAC"}

package/dist/queries/space/default.d.ts

@@ -1,10 +0,0 @@
-import type { NodeId } from '@astrale-os/sdk/graph/node';
-import type { QueryNodeAST } from '@astrale-os/sdk/query';
-import { type GraphEndpoint } from '#utils/graph-endpoint';
-import { type NodeQueryGuard } from '#utils/query-page';
-export interface DefaultSpaceObservation {
-    readonly spaces: readonly NodeId[];
-    readonly guard: NodeQueryGuard;
-}
-export declare const observeDefaultSpaces: import("@astrale-os/sdk").PaginatedQueryDefinition<GraphEndpoint, DefaultSpaceObservation, QueryNodeAST>;
-//# sourceMappingURL=default.d.ts.map

package/dist/queries/space/default.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"default.d.ts","sourceRoot":"","sources":["../../../queries/space/default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAOzD,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAI/E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAC/B;AAED,eAAO,MAAM,oBAAoB,0GAkB/B,CAAA"}

package/dist/queries/space/default.js

@@ -1,25 +0,0 @@
-import { Query } from '@astrale-os/sdk/query';
-import { defineQuery } from '@astrale-os/sdk/query';
-import { S } from '#schema';
-import { graphEndpointPath } from '#utils/graph-endpoint';
-import { completeNodeQueryGuard } from '#utils/query-page';
-const SPACE = { origin: 'shell.astrale.ai', kind: 'class', name: 'Space' };
-export const observeDefaultSpaces = defineQuery({
-    id: 'shell.space.observe-defaults',
-    page: { size: 256 },
-    pagination: { maximumPages: 64 },
-    build: (user) => Query.from({ kind: 'node', paths: [graphEndpointPath(user)], binding: 'user' })
-        .expand({
-        via: [S.$.class('default_space').schemaRef],
-        direction: 'outgoing',
-        bindings: { edge: 'fallback', node: 'space' },
-    })
-        .filter({ satisfies: SPACE })
-        .select({ kind: 'nodes', projection: { kind: 'reference' } }),
-    project: nodeIds,
-});
-function nodeIds(pages, _user, { ast }) {
-    const guard = completeNodeQueryGuard(pages, ast, 'default Space');
-    return Object.freeze({ spaces: guard.equals.ids, guard });
-}
-//# sourceMappingURL=default.js.map

package/dist/queries/space/default.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"default.js","sourceRoot":"","sources":["../../../queries/space/default.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,CAAC,EAAE,MAAM,SAAS,CAAA;AAC3B,OAAO,EAAE,iBAAiB,EAAsB,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAAE,sBAAsB,EAAuB,MAAM,mBAAmB,CAAA;AAE/E,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAW,CAAA;AAOnF,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAI7C;IACA,EAAE,EAAE,8BAA8B;IAClC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACnB,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC5E,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC;QAC3C,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;KAC9C,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,OAAO;CACjB,CAAC,CAAA;AAEF,SAAS,OAAO,CACd,KAAiB,EACjB,KAAoB,EACpB,EAAE,GAAG,EAAgD;IAErD,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,CAAC,CAAA;IACjE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;AAC3D,CAAC"}

package/dist/queries/space/index.d.ts

@@ -1,3 +0,0 @@
-export { observeDirectSpaceAccess, observeEffectiveSpaceAccess, type DirectSpaceAccessObservation, type EffectiveSpaceAccessObservation, type SpaceAccessEvidence, type SpaceAccessSubject, } from './access.js';
-export { observeDefaultSpaces, type DefaultSpaceObservation } from './default.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/queries/space/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../queries/space/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,oBAAoB,EAAE,KAAK,uBAAuB,EAAE,MAAM,cAAc,CAAA"}

package/dist/queries/space/index.js

@@ -1,3 +0,0 @@
-export { observeDirectSpaceAccess, observeEffectiveSpaceAccess, } from './access.js';
-export { observeDefaultSpaces } from './default.js';
-//# sourceMappingURL=index.js.map

package/dist/queries/space/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../queries/space/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAK5B,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,oBAAoB,EAAgC,MAAM,cAAc,CAAA"}

package/dist/rules/application/association.d.ts

@@ -1,13 +0,0 @@
-import type { NodeId } from '@astrale-os/sdk/graph/node';
-import type { ApplicationAssociationObservation } from '#queries/application';
-export type ApplicationAssociationState = {
-    readonly kind: 'absent';
-} | {
-    readonly kind: 'present';
-    readonly application: NodeId;
-} | {
-    readonly kind: 'conflict';
-    readonly count: number;
-};
-export declare function classifyApplicationAssociation(observation: ApplicationAssociationObservation): ApplicationAssociationState;
-//# sourceMappingURL=association.d.ts.map

package/dist/rules/application/association.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"association.d.ts","sourceRoot":"","sources":["../../../rules/application/association.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAExD,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAA;AAE7E,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzD,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,iCAAiC,GAC7C,2BAA2B,CAO7B"}

package/dist/rules/application/association.js

@@ -1,10 +0,0 @@
-export function classifyApplicationAssociation(observation) {
-    const matches = [...new Set(observation.applications)];
-    if (matches.length === 0)
-        return Object.freeze({ kind: 'absent' });
-    if (matches.length === 1) {
-        return Object.freeze({ kind: 'present', application: matches[0] });
-    }
-    return Object.freeze({ kind: 'conflict', count: matches.length });
-}
-//# sourceMappingURL=association.js.map

package/dist/rules/application/association.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"association.js","sourceRoot":"","sources":["../../../rules/application/association.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,8BAA8B,CAC5C,WAA8C;IAE9C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAA;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;AACnE,CAAC"}

package/dist/rules/application/index.d.ts

@@ -1,4 +0,0 @@
-export { classifyApplicationAssociation, type ApplicationAssociationState } from './association.js';
-export { decideApplicationRemoval, type ApplicationRemovalDecision } from './removal.js';
-export { materializeInstallApplicationResult } from './result.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/rules/application/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../rules/application/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AACnG,OAAO,EAAE,wBAAwB,EAAE,KAAK,0BAA0B,EAAE,MAAM,cAAc,CAAA;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,aAAa,CAAA"}

package/dist/rules/application/index.js

@@ -1,4 +0,0 @@
-export { classifyApplicationAssociation } from './association.js';
-export { decideApplicationRemoval } from './removal.js';
-export { materializeInstallApplicationResult } from './result.js';
-//# sourceMappingURL=index.js.map

package/dist/rules/application/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../rules/application/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAoC,MAAM,kBAAkB,CAAA;AACnG,OAAO,EAAE,wBAAwB,EAAmC,MAAM,cAAc,CAAA;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,aAAa,CAAA"}

package/dist/rules/application/removal.d.ts

@@ -1,11 +0,0 @@
-import type { NodeId } from '@astrale-os/sdk/graph/node';
-export type ApplicationRemovalDecision = {
-    readonly kind: 'allowed';
-} | {
-    readonly kind: 'protected-shell-application';
-};
-export declare function decideApplicationRemoval(input: {
-    readonly application: NodeId;
-    readonly shellApplication: NodeId;
-}): ApplicationRemovalDecision;
-//# sourceMappingURL=removal.d.ts.map

package/dist/rules/application/removal.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"removal.d.ts","sourceRoot":"","sources":["../../../rules/application/removal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAExD,MAAM,MAAM,0BAA0B,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAA;CAAE,CAAA;AAEpD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC,GAAG,0BAA0B,CAI7B"}

package/dist/rules/application/removal.js

@@ -1,6 +0,0 @@
-export function decideApplicationRemoval(input) {
-    return input.application === input.shellApplication
-        ? Object.freeze({ kind: 'protected-shell-application' })
-        : Object.freeze({ kind: 'allowed' });
-}
-//# sourceMappingURL=removal.js.map

package/dist/rules/application/removal.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"removal.js","sourceRoot":"","sources":["../../../rules/application/removal.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACC,OAAO,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,gBAAgB;QACjD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;QACxD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;AACxC,CAAC"}

package/dist/rules/application/result.d.ts

@@ -1,8 +0,0 @@
-import type { NodeId } from '@astrale-os/sdk/graph/node';
-import type { InstallApplicationInput, InstallApplicationResult } from '#schema/application';
-export declare function materializeInstallApplicationResult(input: {
-    readonly application: NodeId;
-    readonly association: InstallApplicationInput;
-    readonly space: NodeId;
-}): InstallApplicationResult;
-//# sourceMappingURL=result.d.ts.map

package/dist/rules/application/result.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../../rules/application/result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAIxD,OAAO,KAAK,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAE5F,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,uBAAuB,CAAA;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GAAG,wBAAwB,CAc3B"}

package/dist/rules/application/result.js

@@ -1,17 +0,0 @@
-import { Path } from '@astrale-os/sdk/graph/path';
-export function materializeInstallApplicationResult(input) {
-    return Object.freeze({
-        application: Object.freeze({
-            id: input.application,
-            path: Path.id(input.application).raw,
-            class: 'Application',
-        }),
-        domain: Path.from(input.association.domain).raw,
-        space: Object.freeze({
-            id: input.space,
-            path: Path.from(input.association.space).raw,
-            class: 'Space',
-        }),
-    });
-}
-//# sourceMappingURL=result.js.map

package/dist/rules/application/result.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"result.js","sourceRoot":"","sources":["../../../rules/application/result.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AAIjD,MAAM,UAAU,mCAAmC,CAAC,KAInD;IACC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,EAAE,EAAE,KAAK,CAAC,WAAW;YACrB,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG;YACpC,KAAK,EAAE,aAAsB;SAC9B,CAAC;QACF,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG;QAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG;YAC5C,KAAK,EAAE,OAAgB;SACxB,CAAC;KACH,CAAC,CAAA;AACJ,CAAC"}

package/dist/rules/group/index.d.ts

@@ -1,2 +0,0 @@
-export { classifyGroupMembership, type GroupMembershipState } from './membership.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/rules/group/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../rules/group/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/rules/group/index.js

@@ -1,2 +0,0 @@
-export { classifyGroupMembership } from './membership.js';
-//# sourceMappingURL=index.js.map

package/dist/rules/group/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../rules/group/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAA6B,MAAM,iBAAiB,CAAA"}

package/dist/rules/group/membership.d.ts

@@ -1,5 +0,0 @@
-import type { NodeId } from '@astrale-os/sdk/graph/node';
-import type { GroupMembershipObservation } from '#queries/group';
-export type GroupMembershipState = 'absent' | 'complete' | 'local-only' | 'authority-only';
-export declare function classifyGroupMembership(group: NodeId, observation: GroupMembershipObservation): GroupMembershipState;
-//# sourceMappingURL=membership.d.ts.map

package/dist/rules/group/membership.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../../rules/group/membership.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAExD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAA;AAEhE,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,GAAG,gBAAgB,CAAA;AAE1F,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,0BAA0B,GACtC,oBAAoB,CAOtB"}

package/dist/rules/group/membership.js

@@ -1,12 +0,0 @@
-export function classifyGroupMembership(group, observation) {
-    const local = observation.local.groups.includes(group);
-    const authority = observation.authority.groups.includes(group);
-    if (local && authority)
-        return 'complete';
-    if (local)
-        return 'local-only';
-    if (authority)
-        return 'authority-only';
-    return 'absent';
-}
-//# sourceMappingURL=membership.js.map

package/dist/rules/group/membership.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"membership.js","sourceRoot":"","sources":["../../../rules/group/membership.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,WAAuC;IAEvC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACtD,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9D,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO,UAAU,CAAA;IACzC,IAAI,KAAK;QAAE,OAAO,YAAY,CAAA;IAC9B,IAAI,SAAS;QAAE,OAAO,gBAAgB,CAAA;IACtC,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/rules/index.d.ts

@@ -1,5 +0,0 @@
-export { classifyApplicationAssociation, decideApplicationRemoval, materializeInstallApplicationResult, type ApplicationAssociationState, type ApplicationRemovalDecision, } from '#rules/application';
-export { classifyGroupMembership, type GroupMembershipState } from '#rules/group';
-export { classifyDirectSpaceAccess, distinctDefaultSpaces, effectiveSpaceAccessGuard, hasEffectiveSpaceAccess, isOnlyDefaultSpace, type DirectSpaceAccessState, } from '#rules/space';
-export { decideSingleUserGrant, isSelfGrantedUser, type UserGrantDecision } from '#rules/user';
-//# sourceMappingURL=index.d.ts.map

package/dist/rules/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../rules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,mCAAmC,EACnC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,GAChC,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACjF,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,sBAAsB,GAC5B,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAA"}

package/dist/rules/index.js

@@ -1,5 +0,0 @@
-export { classifyApplicationAssociation, decideApplicationRemoval, materializeInstallApplicationResult, } from '#rules/application';
-export { classifyGroupMembership } from '#rules/group';
-export { classifyDirectSpaceAccess, distinctDefaultSpaces, effectiveSpaceAccessGuard, hasEffectiveSpaceAccess, isOnlyDefaultSpace, } from '#rules/space';
-export { decideSingleUserGrant, isSelfGrantedUser } from '#rules/user';
-//# sourceMappingURL=index.js.map

package/dist/rules/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../rules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,mCAAmC,GAGpC,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,uBAAuB,EAA6B,MAAM,cAAc,CAAA;AACjF,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,GAEnB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAA0B,MAAM,aAAa,CAAA"}

package/dist/rules/space/access.d.ts

@@ -1,8 +0,0 @@
-import type { NodeId } from '@astrale-os/sdk/graph/node';
-import type { DirectSpaceAccessObservation, EffectiveSpaceAccessObservation } from '#queries/space';
-import type { NodeQueryGuard } from '#utils/query-page';
-export type DirectSpaceAccessState = 'none' | 'member' | 'admin' | 'conflict';
-export declare function classifyDirectSpaceAccess(space: NodeId, observation: DirectSpaceAccessObservation): DirectSpaceAccessState;
-export declare function hasEffectiveSpaceAccess(space: NodeId, observation: EffectiveSpaceAccessObservation): boolean;
-export declare function effectiveSpaceAccessGuard(space: NodeId, observation: EffectiveSpaceAccessObservation): NodeQueryGuard | undefined;
-//# sourceMappingURL=access.d.ts.map

package/dist/rules/space/access.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../rules/space/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAExD,OAAO,KAAK,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,MAAM,gBAAgB,CAAA;AACnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAA;AAE7E,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,4BAA4B,GACxC,sBAAsB,CAOxB;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,+BAA+B,GAC3C,OAAO,CAET;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,+BAA+B,GAC3C,cAAc,GAAG,SAAS,CAE5B"}

package/dist/rules/space/access.js

@@ -1,18 +0,0 @@
-export function classifyDirectSpaceAccess(space, observation) {
-    const admin = observation.admin.spaces.includes(space);
-    const member = observation.member.spaces.includes(space);
-    if (admin && member)
-        return 'conflict';
-    if (admin)
-        return 'admin';
-    if (member)
-        return 'member';
-    return 'none';
-}
-export function hasEffectiveSpaceAccess(space, observation) {
-    return effectiveSpaceAccessGuard(space, observation) !== undefined;
-}
-export function effectiveSpaceAccessGuard(space, observation) {
-    return Object.values(observation).find((evidence) => evidence.spaces.includes(space))?.guard;
-}
-//# sourceMappingURL=access.js.map

package/dist/rules/space/access.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../rules/space/access.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,yBAAyB,CACvC,KAAa,EACb,WAAyC;IAEzC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACxD,IAAI,KAAK,IAAI,MAAM;QAAE,OAAO,UAAU,CAAA;IACtC,IAAI,KAAK;QAAE,OAAO,OAAO,CAAA;IACzB,IAAI,MAAM;QAAE,OAAO,QAAQ,CAAA;IAC3B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,WAA4C;IAE5C,OAAO,yBAAyB,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,SAAS,CAAA;AACpE,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAa,EACb,WAA4C;IAE5C,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAA;AAC9F,CAAC"}

package/dist/rules/space/default.d.ts

@@ -1,4 +0,0 @@
-import type { NodeId } from '@astrale-os/sdk/graph/node';
-export declare function distinctDefaultSpaces(spaces: readonly NodeId[]): readonly NodeId[];
-export declare function isOnlyDefaultSpace(spaces: readonly NodeId[], selected: NodeId): boolean;
-//# sourceMappingURL=default.d.ts.map

package/dist/rules/space/default.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"default.d.ts","sourceRoot":"","sources":["../../../rules/space/default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAExD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAElF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvF"}

package/dist/rules/space/default.js

@@ -1,7 +0,0 @@
-export function distinctDefaultSpaces(spaces) {
-    return Object.freeze([...new Set(spaces)]);
-}
-export function isOnlyDefaultSpace(spaces, selected) {
-    return spaces.length === 1 && spaces[0] === selected;
-}
-//# sourceMappingURL=default.js.map

package/dist/rules/space/default.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"default.js","sourceRoot":"","sources":["../../../rules/space/default.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,qBAAqB,CAAC,MAAyB;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAyB,EAAE,QAAgB;IAC5E,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAA;AACtD,CAAC"}

package/dist/rules/space/index.d.ts

@@ -1,3 +0,0 @@
-export { classifyDirectSpaceAccess, effectiveSpaceAccessGuard, hasEffectiveSpaceAccess, type DirectSpaceAccessState, } from './access.js';
-export { distinctDefaultSpaces, isOnlyDefaultSpace } from './default.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/rules/space/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../rules/space/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA"}

package/dist/rules/space/index.js

@@ -1,3 +0,0 @@
-export { classifyDirectSpaceAccess, effectiveSpaceAccessGuard, hasEffectiveSpaceAccess, } from './access.js';
-export { distinctDefaultSpaces, isOnlyDefaultSpace } from './default.js';
-//# sourceMappingURL=index.js.map

package/dist/rules/space/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../rules/space/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,GAExB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA"}

package/dist/rules/user/ensure.d.ts

@@ -1,21 +0,0 @@
-import type { IssuerId, ProvisionRequest, ProvisionResult, Subject } from '@astrale-os/sdk/auth';
-import { LocalBinding } from '@astrale-os/sdk/graph/model';
-import type { EnsureShellUserResult } from '#schema/user';
-export interface EnsureShellUserInput {
-    readonly operationId: string;
-    readonly identity: Readonly<{
-        readonly issuer: IssuerId;
-        readonly subject: Subject;
-    }>;
-    readonly personalSpaceName: string;
-}
-export interface ShellUserProvisioning {
-    readonly request: ProvisionRequest;
-    readonly userBinding: ReturnType<typeof LocalBinding>;
-    readonly personalSpaceBinding: ReturnType<typeof LocalBinding>;
-}
-/** Build the complete Shell-owned identity provisioning request without performing I/O. */
-export declare function buildShellUserProvisioning(input: EnsureShellUserInput): ShellUserProvisioning;
-/** Project one provision receipt into stable graph references owned by Shell's public contract. */
-export declare function projectShellUserProvisioning(provisioning: ShellUserProvisioning, result: ProvisionResult): EnsureShellUserResult;
-//# sourceMappingURL=ensure.d.ts.map

package/dist/rules/user/ensure.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ensure.d.ts","sourceRoot":"","sources":["../../../rules/user/ensure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAGhG,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAK1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAIzD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;QACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAC1B,CAAC,CAAA;IACF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAA;IAClC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAA;IACrD,QAAQ,CAAC,oBAAoB,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAA;CAC/D;AAED,2FAA2F;AAC3F,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,GAAG,qBAAqB,CAwC7F;AAED,mGAAmG;AACnG,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,qBAAqB,EACnC,MAAM,EAAE,eAAe,GACtB,qBAAqB,CAKvB"}

package/dist/rules/user/ensure.js

@@ -1,61 +0,0 @@
-import { ClassPath } from '@astrale-os/sdk/graph';
-import { LocalBinding } from '@astrale-os/sdk/graph/model';
-import { Path } from '@astrale-os/sdk/graph/path';
-import { MutationAST } from '@astrale-os/sdk/mutation';
-import { K } from '@astrale-os/sdk/schema/kernel';
-import { S } from '#schema';
-/** Build the complete Shell-owned identity provisioning request without performing I/O. */
-export function buildShellUserProvisioning(input) {
-    const user = LocalBinding('user');
-    const personalSpace = LocalBinding('personalSpace');
-    const mutation = MutationAST.build((builder) => {
-        const createdUser = builder.createNode({
-            as: user,
-            class: ClassPath.from(S.$.class('User')),
-            props: {},
-        });
-        const createdSpace = builder.createNode({
-            as: personalSpace,
-            class: ClassPath.from(S.$.class('Space')),
-            props: { [K.Named.$.property('name').key]: input.personalSpaceName },
-        });
-        builder.createEdge({
-            class: ClassPath.from(S.$.class('owns_space')),
-            source: createdUser,
-            target: createdSpace,
-        });
-        builder.createEdge({
-            class: ClassPath.from(S.$.class('default_space')),
-            source: createdUser,
-            target: createdSpace,
-        });
-    });
-    return Object.freeze({
-        request: Object.freeze({
-            idempotencyKey: input.operationId,
-            mutation,
-            identities: Object.freeze({
-                [user]: Object.freeze({
-                    issuer: input.identity.issuer,
-                    subject: input.identity.subject,
-                }),
-            }),
-        }),
-        userBinding: user,
-        personalSpaceBinding: personalSpace,
-    });
-}
-/** Project one provision receipt into stable graph references owned by Shell's public contract. */
-export function projectShellUserProvisioning(provisioning, result) {
-    return Object.freeze({
-        user: createdNode(result, provisioning.userBinding, 'User'),
-        personalSpace: createdNode(result, provisioning.personalSpaceBinding, 'personal Space'),
-    });
-}
-function createdNode(result, binding, label) {
-    const id = result.createdNodes[binding];
-    if (id === undefined)
-        throw new TypeError(`Shell provisioning omitted its ${label} identity.`);
-    return Path.id(id).raw;
-}
-//# sourceMappingURL=ensure.js.map

package/dist/rules/user/ensure.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ensure.js","sourceRoot":"","sources":["../../../rules/user/ensure.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC1D,OAAO,EAAE,IAAI,EAAiB,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,+BAA+B,CAAA;AAIjD,OAAO,EAAE,CAAC,EAAE,MAAM,SAAS,CAAA;AAiB3B,2FAA2F;AAC3F,MAAM,UAAU,0BAA0B,CAAC,KAA2B;IACpE,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACjC,MAAM,aAAa,GAAG,YAAY,CAAC,eAAe,CAAC,CAAA;IACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;YACrC,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxC,KAAK,EAAE,EAAE;SACV,CAAC,CAAA;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;YACtC,EAAE,EAAE,aAAa;YACjB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,iBAAiB,EAAE;SACrE,CAAC,CAAA;QACF,OAAO,CAAC,UAAU,CAAC;YACjB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAA;QACF,OAAO,CAAC,UAAU,CAAC;YACjB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACjD,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,cAAc,EAAE,KAAK,CAAC,WAAW;YACjC,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;gBACxB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;oBACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;oBAC7B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;iBAChC,CAAC;aACH,CAAC;SACH,CAAC;QACF,WAAW,EAAE,IAAI;QACjB,oBAAoB,EAAE,aAAa;KACpC,CAAC,CAAA;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,4BAA4B,CAC1C,YAAmC,EACnC,MAAuB;IAEvB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC;QAC3D,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;KACxF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,MAAuB,EACvB,OAAwC,EACxC,KAAa;IAEb,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IACvC,IAAI,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,KAAK,YAAY,CAAC,CAAA;IAC9F,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAA;AACxB,CAAC"}

package/dist/rules/user/grant.d.ts

@@ -1,13 +0,0 @@
-import type { IdentityId } from '@astrale-os/sdk/auth';
-import type { Caller } from '@astrale-os/sdk/domain';
-export type UserGrantDecision = {
-    readonly kind: 'accepted';
-    readonly user: IdentityId;
-} | {
-    readonly kind: 'unauthenticated';
-} | {
-    readonly kind: 'composed-grant';
-};
-export declare function decideSingleUserGrant(actor: Caller): UserGrantDecision;
-export declare function isSelfGrantedUser(actor: Caller, user: IdentityId): boolean;
-//# sourceMappingURL=grant.d.ts.map

package/dist/rules/user/grant.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../../rules/user/grant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAEpD,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAA;AAEvC,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAMtE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAE1E"}

package/dist/rules/user/grant.js

@@ -1,12 +0,0 @@
-export function decideSingleUserGrant(actor) {
-    if (actor.kind !== 'authenticated')
-        return Object.freeze({ kind: 'unauthenticated' });
-    const expression = actor.authority.expr;
-    return expression.kind === 'identity'
-        ? Object.freeze({ kind: 'accepted', user: expression.id })
-        : Object.freeze({ kind: 'composed-grant' });
-}
-export function isSelfGrantedUser(actor, user) {
-    return actor.kind === 'authenticated' && actor.principal === user;
-}
-//# sourceMappingURL=grant.js.map

package/dist/rules/user/grant.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"grant.js","sourceRoot":"","sources":["../../../rules/user/grant.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACrF,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAA;IACvC,OAAO,UAAU,CAAC,IAAI,KAAK,UAAU;QACnC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;QAC1D,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAgB;IAC/D,OAAO,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAA;AACnE,CAAC"}

package/dist/rules/user/index.d.ts

@@ -1,3 +0,0 @@
-export { decideSingleUserGrant, isSelfGrantedUser, type UserGrantDecision } from './grant.js';
-export { buildShellUserProvisioning, projectShellUserProvisioning, type EnsureShellUserInput, type ShellUserProvisioning, } from './ensure.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/rules/user/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../rules/user/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC7F,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAA"}

package/dist/rules/user/index.js

@@ -1,3 +0,0 @@
-export { decideSingleUserGrant, isSelfGrantedUser } from './grant.js';
-export { buildShellUserProvisioning, projectShellUserProvisioning, } from './ensure.js';
-//# sourceMappingURL=index.js.map

package/dist/rules/user/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../rules/user/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAA0B,MAAM,YAAY,CAAA;AAC7F,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAG7B,MAAM,aAAa,CAAA"}