@astrale-domains/shell 0.1.0-beta.4 → 0.1.0-beta.7

package/dist/schema/space/methods.js

@@ -1,31 +1,30 @@
-import { fn, path } from '@astrale-os/sdk/schema';
+import { method, path } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
-import { iUser } from '#schema/user';
+import { User } from '#schema/user';
 import { belongsToSpace, mayAdministerSpace } from './policies.js';
 const emptyObject = {
     type: 'object',
     properties: {},
     additionalProperties: false,
 };
-export const spaceAddUser = fn({
+export const spaceAddUser = method({
     description: 'Set one User direct member or admin access.',
-    input: z.strictObject({ user: path(iUser), access: z.enum(['member', 'admin']) }),
+    input: z.strictObject({ user: path(User), access: z.enum(['member', 'admin']) }),
     output: emptyObject,
     auth: 'authorized',
     policy: ({ check, self }) => check(mayAdministerSpace, self),
 });
-export const spaceRemoveUser = fn({
+export const spaceRemoveUser = method({
     description: 'Remove one User direct access.',
-    input: z.strictObject({ user: path(iUser) }),
+    input: z.strictObject({ user: path(User) }),
     output: emptyObject,
     auth: 'authorized',
     policy: ({ check, self }) => check(mayAdministerSpace, self),
 });
-export const spaceSetDefault = fn({
+export const spaceSetDefault = method({
     description: 'Set this accessible Space as the granted User fallback.',
     input: emptyObject,
     output: emptyObject,
     auth: 'authorized',
     policy: ({ check, self }) => check(belongsToSpace, self),
 });
-//# sourceMappingURL=methods.js.map

package/dist/schema/space/policies.d.ts

@@ -1,5 +1,4 @@
-import { type builder } from '@astrale-os/sdk/schema';
+import type { builder } from '@astrale-os/sdk/schema';
 export declare const ownsSpace: builder.Policy;
 export declare const mayAdministerSpace: builder.Policy;
 export declare const belongsToSpace: builder.Policy;
-//# sourceMappingURL=policies.d.ts.map

package/dist/schema/space/policies.js

@@ -1,15 +1,21 @@
-import { definePolicy } from '@astrale-os/sdk/schema';
+import { policy } from '@astrale-os/sdk/schema';
+import { Group, member_of_group } from '#schema/group';
 import { administers_space, member_of_space, owns_space } from './relationships.js';
-export const ownsSpace = definePolicy({
-    description: 'The effective User Grant owns this Space.',
-    match: ({ edge, object, subject }) => edge({ source: subject, class: owns_space, target: object }),
+export const ownsSpace = policy({
+    description: 'The effective User Grant directly or transitively owns this Space.',
+    match: ({ allOf, anyOf, edge, exists, object, subject }) => anyOf(edge({ source: subject, class: owns_space, target: object }), groupSpaceBranch({ allOf, edge, exists, object, subject }, owns_space)),
 });
-export const mayAdministerSpace = definePolicy({
-    description: 'The effective User Grant owns or directly administers this Space.',
-    match: ({ anyOf, edge, object, subject }) => anyOf(edge({ source: subject, class: owns_space, target: object }), edge({ source: subject, class: administers_space, target: object })),
+export const mayAdministerSpace = policy({
+    description: 'The effective User Grant directly or transitively administers this Space.',
+    match: ({ allOf, anyOf, edge, exists, object, subject }) => anyOf(edge({ source: subject, class: owns_space, target: object }), edge({ source: subject, class: administers_space, target: object }), groupSpaceBranch({ allOf, edge, exists, object, subject }, owns_space), groupSpaceBranch({ allOf, edge, exists, object, subject }, administers_space)),
 });
-export const belongsToSpace = definePolicy({
-    description: 'The effective User Grant owns, administers, or belongs to this Space.',
-    match: ({ anyOf, edge, object, subject }) => anyOf(edge({ source: subject, class: owns_space, target: object }), edge({ source: subject, class: administers_space, target: object }), edge({ source: subject, class: member_of_space, target: object })),
+export const belongsToSpace = policy({
+    description: 'The effective User Grant has direct or Group-derived access to this Space.',
+    match: ({ allOf, anyOf, edge, exists, object, subject }) => anyOf(edge({ source: subject, class: owns_space, target: object }), edge({ source: subject, class: administers_space, target: object }), edge({ source: subject, class: member_of_space, target: object }), groupSpaceBranch({ allOf, edge, exists, object, subject }, owns_space), groupSpaceBranch({ allOf, edge, exists, object, subject }, administers_space), groupSpaceBranch({ allOf, edge, exists, object, subject }, member_of_space)),
 });
-//# sourceMappingURL=policies.js.map
+function groupSpaceBranch(context, access) {
+    return context.exists(({ node }) => {
+        const group = node(Group);
+        return context.allOf(context.edge({ source: context.subject, class: member_of_group, target: group }), context.edge({ source: group, class: access, target: context.object }));
+    });
+}