@astrale-domains/shell 0.1.0-beta.4

package/dist/workflows/group/assign-user.js

@@ -0,0 +1,32 @@
+import { defineWorkflow } from '@astrale-os/sdk/workflow';
+import { assignGroupMembership } from '#mutations/group';
+import { observeGroupMembership } from '#queries/group';
+import { classifyGroupMembership } from '#rules/group';
+import { groupMembershipConflict } from './errors.js';
+export const assignGroupUserWorkflow = defineWorkflow({
+    id: 'shell.group.assign-user',
+    async run({ mutate, query, step }, { group, input }) {
+        const membership = { group, user: input.user };
+        const observation = await step.run('observe-membership', () => query(observeGroupMembership, membership));
+        const state = classifyGroupMembership(group, observation);
+        if (state === 'complete')
+            return Object.freeze({});
+        const assigned = await step.run('assign-membership', () => mutate(assignGroupMembership, {
+            ...membership,
+            guards: { authority: observation.authority.guard, local: observation.local.guard },
+            state,
+        }));
+        if (!assigned.ok) {
+            if (assigned.error.outcomeKnown) {
+                return groupMembershipConflict('assignment', assigned.error.code);
+            }
+            const recovered = await step.run('recover-membership', () => query(observeGroupMembership, membership));
+            if (classifyGroupMembership(group, recovered) !== 'complete') {
+                return groupMembershipConflict('assignment', assigned.error.code);
+            }
+            return Object.freeze({});
+        }
+        return assigned.value;
+    },
+});
+//# sourceMappingURL=assign-user.js.map

package/dist/workflows/group/assign-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-user.js","sourceRoot":"","sources":["../../../workflows/group/assign-user.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAIzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAEtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAOrD,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAA8C;IACjG,EAAE,EAAE,yBAAyB;IAC7B,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;QACjD,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;QAC9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAC5D,KAAK,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAC1C,CAAA;QACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;QACzD,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,EAAE,CACxD,MAAM,CAAC,qBAAqB,EAAE;YAC5B,GAAG,UAAU;YACb,MAAM,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE;YAClF,KAAK;SACN,CAAC,CACH,CAAA;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;gBAChC,OAAO,uBAAuB,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACnE,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAC1D,KAAK,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAC1C,CAAA;YACD,IAAI,uBAAuB,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC7D,OAAO,uBAAuB,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACnE,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1B,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAA;IACvB,CAAC;CACF,CAAC,CAAA"}

package/dist/workflows/group/ensure-administrator.d.ts

@@ -0,0 +1,4 @@
+import type { PathLike } from '@astrale-os/sdk/graph/path';
+/** Assign one existing User to Shell's administrator Group without Kernel authority edges. */
+export declare const ensureAdministratorWorkflow: import("@astrale-os/sdk").WorkflowDefinition<PathLike, Readonly<Record<never, never>>, {}>;
+//# sourceMappingURL=ensure-administrator.d.ts.map

package/dist/workflows/group/ensure-administrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-administrator.d.ts","sourceRoot":"","sources":["../../../workflows/group/ensure-administrator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAS1D,8FAA8F;AAC9F,eAAO,MAAM,2BAA2B,4FA6BvC,CAAA"}

package/dist/workflows/group/ensure-administrator.js

@@ -0,0 +1,26 @@
+import { defineWorkflow } from '@astrale-os/sdk/workflow';
+import { assignLocalGroupMembership } from '#mutations/group';
+import { observeGroupMembership, resolveShellAdministratorGroup } from '#queries/group';
+import { groupMembershipConflict } from './errors.js';
+/** Assign one existing User to Shell's administrator Group without Kernel authority edges. */
+export const ensureAdministratorWorkflow = defineWorkflow({
+    id: 'shell.group.ensure-administrator',
+    async run({ mutate, query, step }, user) {
+        const group = await step.run('resolve-administrator-group', () => query(resolveShellAdministratorGroup, undefined));
+        const observed = await step.run('observe-administrator-membership', () => query(observeGroupMembership, { group, user }));
+        if (observed.local.groups.includes(group))
+            return Object.freeze({});
+        const assigned = await step.run('assign-administrator-membership', () => mutate(assignLocalGroupMembership, { group, guard: observed.local.guard, user }));
+        if (assigned.ok)
+            return assigned.value;
+        if (assigned.error.outcomeKnown) {
+            return groupMembershipConflict('assignment', assigned.error.code);
+        }
+        const recovered = await step.run('recover-administrator-membership', () => query(observeGroupMembership, { group, user }));
+        if (!recovered.local.groups.includes(group)) {
+            return groupMembershipConflict('assignment', assigned.error.code);
+        }
+        return Object.freeze({});
+    },
+});
+//# sourceMappingURL=ensure-administrator.js.map

package/dist/workflows/group/ensure-administrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-administrator.js","sourceRoot":"","sources":["../../../workflows/group/ensure-administrator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAEzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,sBAAsB,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAA;AAEvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAErD,8FAA8F;AAC9F,MAAM,CAAC,MAAM,2BAA2B,GAAG,cAAc,CACvD;IACE,EAAE,EAAE,kCAAkC;IACtC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAC/D,KAAK,CAAC,8BAA8B,EAAE,SAAS,CAAC,CACjD,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kCAAkC,EAAE,GAAG,EAAE,CACvE,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAC/C,CAAA;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAEnE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,iCAAiC,EAAE,GAAG,EAAE,CACtE,MAAM,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CACjF,CAAA;QACD,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAA;QACtC,IAAI,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YAChC,OAAO,uBAAuB,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnE,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,kCAAkC,EAAE,GAAG,EAAE,CACxE,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAC/C,CAAA;QACD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5C,OAAO,uBAAuB,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnE,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC1B,CAAC;CACF,CACF,CAAA"}

package/dist/workflows/group/errors.d.ts

@@ -0,0 +1,2 @@
+export declare function groupMembershipConflict(operation: 'assignment' | 'removal', code: string): never;
+//# sourceMappingURL=errors.d.ts.map

package/dist/workflows/group/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../workflows/group/errors.ts"],"names":[],"mappings":"AAEA,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,YAAY,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,CAIhG"}

package/dist/workflows/group/errors.js

@@ -0,0 +1,7 @@
+import { InvocationError } from '@astrale-os/sdk';
+export function groupMembershipConflict(operation, code) {
+    throw new InvocationError('CONFLICT', `Group membership ${operation} was rejected.`, {
+        reason: { code: 'GROUP_MEMBERSHIP_REJECTED', details: { operation, rejection: code } },
+    });
+}
+//# sourceMappingURL=errors.js.map

package/dist/workflows/group/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../workflows/group/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjD,MAAM,UAAU,uBAAuB,CAAC,SAAmC,EAAE,IAAY;IACvF,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,oBAAoB,SAAS,gBAAgB,EAAE;QACnF,MAAM,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;KACvF,CAAC,CAAA;AACJ,CAAC"}

package/dist/workflows/group/index.d.ts

@@ -0,0 +1,4 @@
+export { assignGroupUserWorkflow, type AssignGroupUserInput } from './assign-user.js';
+export { ensureAdministratorWorkflow } from './ensure-administrator.js';
+export { unassignGroupUserWorkflow, type UnassignGroupUserInput } from './unassign-user.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/workflows/group/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../workflows/group/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAA;AACvE,OAAO,EAAE,yBAAyB,EAAE,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/workflows/group/index.js

@@ -0,0 +1,4 @@
+export { assignGroupUserWorkflow } from './assign-user.js';
+export { ensureAdministratorWorkflow } from './ensure-administrator.js';
+export { unassignGroupUserWorkflow } from './unassign-user.js';
+//# sourceMappingURL=index.js.map

package/dist/workflows/group/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../workflows/group/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAA6B,MAAM,kBAAkB,CAAA;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAA;AACvE,OAAO,EAAE,yBAAyB,EAA+B,MAAM,oBAAoB,CAAA"}

package/dist/workflows/group/unassign-user.d.ts

@@ -0,0 +1,8 @@
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+import type { GroupMembershipInput, GroupMembershipResult } from '#schema/group';
+export interface UnassignGroupUserInput {
+    readonly group: NodeId;
+    readonly input: GroupMembershipInput;
+}
+export declare const unassignGroupUserWorkflow: import("@astrale-os/sdk").WorkflowDefinition<UnassignGroupUserInput, GroupMembershipResult, {}>;
+//# sourceMappingURL=unassign-user.d.ts.map

package/dist/workflows/group/unassign-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unassign-user.d.ts","sourceRoot":"","sources":["../../../workflows/group/unassign-user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAIxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAQhF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAA;CACrC;AAED,eAAO,MAAM,yBAAyB,iGAiCpC,CAAA"}

package/dist/workflows/group/unassign-user.js

@@ -0,0 +1,32 @@
+import { defineWorkflow } from '@astrale-os/sdk/workflow';
+import { unassignGroupMembership } from '#mutations/group';
+import { observeGroupMembership } from '#queries/group';
+import { classifyGroupMembership } from '#rules/group';
+import { groupMembershipConflict } from './errors.js';
+export const unassignGroupUserWorkflow = defineWorkflow({
+    id: 'shell.group.unassign-user',
+    async run({ mutate, query, step }, { group, input }) {
+        const membership = { group, user: input.user };
+        const observation = await step.run('observe-membership', () => query(observeGroupMembership, membership));
+        const state = classifyGroupMembership(group, observation);
+        if (state === 'absent')
+            return Object.freeze({});
+        const unassigned = await step.run('unassign-membership', () => mutate(unassignGroupMembership, {
+            ...membership,
+            guards: { authority: observation.authority.guard, local: observation.local.guard },
+            state,
+        }));
+        if (!unassigned.ok) {
+            if (unassigned.error.outcomeKnown) {
+                return groupMembershipConflict('removal', unassigned.error.code);
+            }
+            const recovered = await step.run('recover-membership', () => query(observeGroupMembership, membership));
+            if (classifyGroupMembership(group, recovered) !== 'absent') {
+                return groupMembershipConflict('removal', unassigned.error.code);
+            }
+            return Object.freeze({});
+        }
+        return unassigned.value;
+    },
+});
+//# sourceMappingURL=unassign-user.js.map

package/dist/workflows/group/unassign-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unassign-user.js","sourceRoot":"","sources":["../../../workflows/group/unassign-user.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAIzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAA;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAEtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAOrD,MAAM,CAAC,MAAM,yBAAyB,GAAG,cAAc,CAGrD;IACA,EAAE,EAAE,2BAA2B;IAC/B,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;QACjD,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;QAC9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAC5D,KAAK,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAC1C,CAAA;QACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;QACzD,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAChD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAC5D,MAAM,CAAC,uBAAuB,EAAE;YAC9B,GAAG,UAAU;YACb,MAAM,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE;YAClF,KAAK;SACN,CAAC,CACH,CAAA;QACD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;gBAClC,OAAO,uBAAuB,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAClE,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAC1D,KAAK,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAC1C,CAAA;YACD,IAAI,uBAAuB,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC3D,OAAO,uBAAuB,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAClE,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1B,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,CAAA;IACzB,CAAC;CACF,CAAC,CAAA"}

package/dist/workflows/index.d.ts

@@ -0,0 +1,4 @@
+export { installApplicationWorkflow, uninstallApplicationWorkflow } from '#workflows/application';
+export { assignGroupUserWorkflow, ensureAdministratorWorkflow, unassignGroupUserWorkflow, type AssignGroupUserInput, type UnassignGroupUserInput, } from '#workflows/group';
+export { addSpaceUserWorkflow, removeSpaceUserWorkflow, setDefaultSpaceWorkflow, type AddSpaceUserInput, type RemoveSpaceUserInput, type SetDefaultSpaceWorkflowInput, } from '#workflows/space';
+//# sourceMappingURL=index.d.ts.map

package/dist/workflows/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../workflows/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAA;AACjG,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EACzB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,GAClC,MAAM,kBAAkB,CAAA"}

package/dist/workflows/index.js

@@ -0,0 +1,4 @@
+export { installApplicationWorkflow, uninstallApplicationWorkflow } from '#workflows/application';
+export { assignGroupUserWorkflow, ensureAdministratorWorkflow, unassignGroupUserWorkflow, } from '#workflows/group';
+export { addSpaceUserWorkflow, removeSpaceUserWorkflow, setDefaultSpaceWorkflow, } from '#workflows/space';
+//# sourceMappingURL=index.js.map

package/dist/workflows/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../workflows/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAA;AACjG,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,GAG1B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,GAIxB,MAAM,kBAAkB,CAAA"}

package/dist/workflows/space/add-user.d.ts

@@ -0,0 +1,8 @@
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+import type { SpaceUserAccessInput, SpaceUserAccessResult } from '#schema/space';
+export interface AddSpaceUserInput {
+    readonly space: NodeId;
+    readonly input: SpaceUserAccessInput;
+}
+export declare const addSpaceUserWorkflow: import("@astrale-os/sdk").WorkflowDefinition<AddSpaceUserInput, SpaceUserAccessResult, {}>;
+//# sourceMappingURL=add-user.d.ts.map

package/dist/workflows/space/add-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-user.d.ts","sourceRoot":"","sources":["../../../workflows/space/add-user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAIxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAQhF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAA;CACrC;AAED,eAAO,MAAM,oBAAoB,4FAgC/B,CAAA"}

package/dist/workflows/space/add-user.js

@@ -0,0 +1,34 @@
+import { defineWorkflow } from '@astrale-os/sdk/workflow';
+import { setSpaceUserAccess } from '#mutations/space';
+import { observeDirectSpaceAccess } from '#queries/space';
+import { classifyDirectSpaceAccess } from '#rules/space';
+import { spaceChangeConflict } from './errors.js';
+export const addSpaceUserWorkflow = defineWorkflow({
+    id: 'shell.space.add-user',
+    async run({ mutate, query, step }, { space, input }) {
+        const user = { kind: 'path', value: input.user };
+        const observation = await step.run('observe-direct-access', () => query(observeDirectSpaceAccess, { space, user }));
+        const state = classifyDirectSpaceAccess(space, observation);
+        if (state === input.access)
+            return Object.freeze({});
+        const changed = await step.run('set-direct-access', () => mutate(setSpaceUserAccess, {
+            space,
+            user,
+            access: input.access,
+            guards: { admin: observation.admin.guard, member: observation.member.guard },
+            state,
+        }));
+        if (!changed.ok) {
+            if (changed.error.outcomeKnown) {
+                return spaceChangeConflict('Space access change was rejected.', changed.error.code);
+            }
+            const recovered = await step.run('recover-direct-access', () => query(observeDirectSpaceAccess, { space, user }));
+            if (classifyDirectSpaceAccess(space, recovered) !== input.access) {
+                return spaceChangeConflict('Space access change outcome is unknown.', changed.error.code);
+            }
+            return Object.freeze({});
+        }
+        return changed.value;
+    },
+});
+//# sourceMappingURL=add-user.js.map

package/dist/workflows/space/add-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-user.js","sourceRoot":"","sources":["../../../workflows/space/add-user.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAIzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAOjD,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAA2C;IAC3F,EAAE,EAAE,sBAAsB;IAC1B,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;QACjD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;QACzD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC/D,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CACjD,CAAA;QACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,EAAE,CACvD,MAAM,CAAC,kBAAkB,EAAE;YACzB,KAAK;YACL,IAAI;YACJ,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE;YAC5E,KAAK;SACN,CAAC,CACH,CAAA;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;gBAC/B,OAAO,mBAAmB,CAAC,mCAAmC,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACrF,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC7D,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CACjD,CAAA;YACD,IAAI,yBAAyB,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjE,OAAO,mBAAmB,CAAC,yCAAyC,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC3F,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1B,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAA;IACtB,CAAC;CACF,CAAC,CAAA"}

package/dist/workflows/space/errors.d.ts

@@ -0,0 +1,3 @@
+export declare function inaccessibleDefaultSpace(): never;
+export declare function spaceChangeConflict(message: string, code: string): never;
+//# sourceMappingURL=errors.d.ts.map

package/dist/workflows/space/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../workflows/space/errors.ts"],"names":[],"mappings":"AAEA,wBAAgB,wBAAwB,IAAI,KAAK,CAMhD;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,CAIxE"}

package/dist/workflows/space/errors.js

@@ -0,0 +1,10 @@
+import { InvocationError } from '@astrale-os/sdk';
+export function inaccessibleDefaultSpace() {
+    throw new InvocationError('CONFLICT', 'A User cannot select an inaccessible Space as persisted default.', { reason: { code: 'DEFAULT_SPACE_INACCESSIBLE', details: {} } });
+}
+export function spaceChangeConflict(message, code) {
+    throw new InvocationError('CONFLICT', message, {
+        reason: { code: 'SPACE_CHANGE_REJECTED', details: { rejection: code } },
+    });
+}
+//# sourceMappingURL=errors.js.map

package/dist/workflows/space/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../workflows/space/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAEjD,MAAM,UAAU,wBAAwB;IACtC,MAAM,IAAI,eAAe,CACvB,UAAU,EACV,kEAAkE,EAClE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAChE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,IAAY;IAC/D,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,OAAO,EAAE;QAC7C,MAAM,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;KACxE,CAAC,CAAA;AACJ,CAAC"}

package/dist/workflows/space/index.d.ts

@@ -0,0 +1,4 @@
+export { addSpaceUserWorkflow, type AddSpaceUserInput } from './add-user.js';
+export { removeSpaceUserWorkflow, type RemoveSpaceUserInput } from './remove-user.js';
+export { setDefaultSpaceWorkflow, type SetDefaultSpaceWorkflowInput } from './set-default.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/workflows/space/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../workflows/space/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACrF,OAAO,EAAE,uBAAuB,EAAE,KAAK,4BAA4B,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/workflows/space/index.js

@@ -0,0 +1,4 @@
+export { addSpaceUserWorkflow } from './add-user.js';
+export { removeSpaceUserWorkflow } from './remove-user.js';
+export { setDefaultSpaceWorkflow } from './set-default.js';
+//# sourceMappingURL=index.js.map

package/dist/workflows/space/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../workflows/space/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAA0B,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,uBAAuB,EAA6B,MAAM,kBAAkB,CAAA;AACrF,OAAO,EAAE,uBAAuB,EAAqC,MAAM,kBAAkB,CAAA"}

package/dist/workflows/space/remove-user.d.ts

@@ -0,0 +1,8 @@
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+import type { SpaceUserInput, SpaceUserResult } from '#schema/space';
+export interface RemoveSpaceUserInput {
+    readonly space: NodeId;
+    readonly input: SpaceUserInput;
+}
+export declare const removeSpaceUserWorkflow: import("@astrale-os/sdk").WorkflowDefinition<RemoveSpaceUserInput, SpaceUserResult, {}>;
+//# sourceMappingURL=remove-user.d.ts.map

package/dist/workflows/space/remove-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-user.d.ts","sourceRoot":"","sources":["../../../workflows/space/remove-user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAIxD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAgBpE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAC/B;AAED,eAAO,MAAM,uBAAuB,yFAuElC,CAAA"}

package/dist/workflows/space/remove-user.js

@@ -0,0 +1,62 @@
+import { defineWorkflow } from '@astrale-os/sdk/workflow';
+import { clearDefaultSpace, removeSpaceUserAccess } from '#mutations/space';
+import { observeDefaultSpaces, observeDirectSpaceAccess, observeEffectiveSpaceAccess, } from '#queries/space';
+import { classifyDirectSpaceAccess, distinctDefaultSpaces, hasEffectiveSpaceAccess, } from '#rules/space';
+import { spaceChangeConflict } from './errors.js';
+export const removeSpaceUserWorkflow = defineWorkflow({
+    id: 'shell.space.remove-user',
+    async run({ mutate, query, step }, { space, input }) {
+        const user = { kind: 'path', value: input.user };
+        const observation = await step.run('observe-direct-access', () => query(observeDirectSpaceAccess, { space, user }));
+        const state = classifyDirectSpaceAccess(space, observation);
+        if (state !== 'none') {
+            const removed = await step.run('remove-direct-access', () => mutate(removeSpaceUserAccess, {
+                space,
+                user,
+                guards: { admin: observation.admin.guard, member: observation.member.guard },
+                state,
+            }));
+            if (!removed.ok) {
+                if (removed.error.outcomeKnown) {
+                    return spaceChangeConflict('Space access removal was rejected.', removed.error.code);
+                }
+                const recovered = await step.run('recover-direct-access', () => query(observeDirectSpaceAccess, { space, user }));
+                if (classifyDirectSpaceAccess(space, recovered) !== 'none') {
+                    return spaceChangeConflict('Space access removal outcome is unknown.', removed.error.code);
+                }
+            }
+        }
+        const effective = await step.run('observe-remaining-access', () => query(observeEffectiveSpaceAccess, { space, user }));
+        if (hasEffectiveSpaceAccess(space, effective))
+            return Object.freeze({});
+        const defaultObservation = await step.run('observe-user-defaults', () => query(observeDefaultSpaces, user));
+        const defaults = distinctDefaultSpaces(defaultObservation.spaces);
+        if (!defaults.includes(space))
+            return Object.freeze({});
+        const cleared = await step.run('clear-inaccessible-default', () => mutate(clearDefaultSpace, {
+            space,
+            user,
+            guards: {
+                access: [
+                    effective.administers.guard,
+                    effective.group.guard,
+                    effective.member.guard,
+                    effective.owns.guard,
+                ],
+                defaults: defaultObservation.guard,
+            },
+        }));
+        if (!cleared.ok) {
+            if (cleared.error.outcomeKnown) {
+                return spaceChangeConflict('Inaccessible default Space cleanup failed.', cleared.error.code);
+            }
+            const recovered = distinctDefaultSpaces((await step.run('recover-default-cleanup', () => query(observeDefaultSpaces, user))).spaces);
+            if (recovered.includes(space)) {
+                return spaceChangeConflict('Inaccessible default Space cleanup outcome is unknown.', cleared.error.code);
+            }
+            return Object.freeze({});
+        }
+        return cleared.value;
+    },
+});
+//# sourceMappingURL=remove-user.js.map

package/dist/workflows/space/remove-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-user.js","sourceRoot":"","sources":["../../../workflows/space/remove-user.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAIzD,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAC3E,OAAO,EACL,oBAAoB,EACpB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAOjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAwC;IAC3F,EAAE,EAAE,yBAAyB;IAC7B,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;QACjD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;QACzD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC/D,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CACjD,CAAA;QACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;QAC3D,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAC1D,MAAM,CAAC,qBAAqB,EAAE;gBAC5B,KAAK;gBACL,IAAI;gBACJ,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,EAAE;gBAC5E,KAAK;aACN,CAAC,CACH,CAAA;YACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;oBAC/B,OAAO,mBAAmB,CAAC,oCAAoC,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBACtF,CAAC;gBACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC7D,KAAK,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CACjD,CAAA;gBACD,IAAI,yBAAyB,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,MAAM,EAAE,CAAC;oBAC3D,OAAO,mBAAmB,CAAC,0CAA0C,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC5F,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAChE,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CACpD,CAAA;QACD,IAAI,uBAAuB,CAAC,KAAK,EAAE,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACvE,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,GAAG,EAAE,CACtE,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAClC,CAAA;QACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;QACjE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAChE,MAAM,CAAC,iBAAiB,EAAE;YACxB,KAAK;YACL,IAAI;YACJ,MAAM,EAAE;gBACN,MAAM,EAAE;oBACN,SAAS,CAAC,WAAW,CAAC,KAAK;oBAC3B,SAAS,CAAC,KAAK,CAAC,KAAK;oBACrB,SAAS,CAAC,MAAM,CAAC,KAAK;oBACtB,SAAS,CAAC,IAAI,CAAC,KAAK;iBACrB;gBACD,QAAQ,EAAE,kBAAkB,CAAC,KAAK;aACnC;SACF,CAAC,CACH,CAAA;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;gBAC/B,OAAO,mBAAmB,CAAC,4CAA4C,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC9F,CAAC;YACD,MAAM,SAAS,GAAG,qBAAqB,CACrC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAC5F,CAAA;YACD,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,mBAAmB,CACxB,wDAAwD,EACxD,OAAO,CAAC,KAAK,CAAC,IAAI,CACnB,CAAA;YACH,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1B,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAA;IACtB,CAAC;CACF,CAAC,CAAA"}

package/dist/workflows/space/set-default.d.ts

@@ -0,0 +1,9 @@
+import type { Caller } from '@astrale-os/sdk/domain';
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+import type { SetDefaultSpaceResult } from '#schema/space';
+export interface SetDefaultSpaceWorkflowInput {
+    readonly actor: Caller;
+    readonly space: NodeId;
+}
+export declare const setDefaultSpaceWorkflow: import("@astrale-os/sdk").WorkflowDefinition<SetDefaultSpaceWorkflowInput, SetDefaultSpaceResult, {}>;
+//# sourceMappingURL=set-default.d.ts.map

package/dist/workflows/space/set-default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-default.d.ts","sourceRoot":"","sources":["../../../workflows/space/set-default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AACpD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAKxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AAS1D,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,eAAO,MAAM,uBAAuB,uGAgDlC,CAAA"}

package/dist/workflows/space/set-default.js

@@ -0,0 +1,43 @@
+import { InvocationError } from '@astrale-os/sdk';
+import { defineWorkflow } from '@astrale-os/sdk/workflow';
+import { setDefaultSpace } from '#mutations/space';
+import { observeDefaultSpaces, observeEffectiveSpaceAccess } from '#queries/space';
+import { distinctDefaultSpaces, effectiveSpaceAccessGuard, isOnlyDefaultSpace } from '#rules/space';
+import { decideSingleUserGrant } from '#rules/user';
+import { inaccessibleDefaultSpace, spaceChangeConflict } from './errors.js';
+export const setDefaultSpaceWorkflow = defineWorkflow({
+    id: 'shell.space.set-default',
+    async run({ mutate, query, step }, { actor, space }) {
+        const grant = decideSingleUserGrant(actor);
+        if (grant.kind !== 'accepted') {
+            throw new InvocationError('VALIDATION_ERROR', 'Default Space selection requires a Grant containing exactly one User identity.', { reason: { code: 'DEFAULT_SPACE_CALLER_INVALID', details: {} } });
+        }
+        const user = { kind: 'id', value: grant.user };
+        const access = await step.run('observe-effective-access', () => query(observeEffectiveSpaceAccess, { space, user }));
+        const accessGuard = effectiveSpaceAccessGuard(space, access);
+        if (accessGuard === undefined)
+            return inaccessibleDefaultSpace();
+        const defaults = await step.run('observe-default-spaces', () => query(observeDefaultSpaces, user));
+        const existing = distinctDefaultSpaces(defaults.spaces);
+        if (isOnlyDefaultSpace(existing, space))
+            return Object.freeze({});
+        const changed = await step.run('set-default-space', () => mutate(setDefaultSpace, {
+            existing,
+            guards: { access: accessGuard, defaults: defaults.guard },
+            space,
+            user,
+        }));
+        if (!changed.ok) {
+            if (changed.error.outcomeKnown) {
+                return spaceChangeConflict('Default Space change was rejected.', changed.error.code);
+            }
+            const recovered = distinctDefaultSpaces((await step.run('recover-default-space', () => query(observeDefaultSpaces, user))).spaces);
+            if (!isOnlyDefaultSpace(recovered, space)) {
+                return spaceChangeConflict('Default Space change outcome is unknown.', changed.error.code);
+            }
+            return Object.freeze({});
+        }
+        return changed.value;
+    },
+});
+//# sourceMappingURL=set-default.js.map

package/dist/workflows/space/set-default.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-default.js","sourceRoot":"","sources":["../../../workflows/space/set-default.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAA;AAIzD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,oBAAoB,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAA;AAClF,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AAEnD,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAO3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAGnD;IACA,EAAE,EAAE,yBAAyB;IAC7B,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE;QACjD,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,gFAAgF,EAChF,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAClE,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC7D,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CACpD,CAAA;QACD,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QAC5D,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,wBAAwB,EAAE,CAAA;QAEhE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAC7D,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAClC,CAAA;QACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACvD,IAAI,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACjE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,EAAE,CACvD,MAAM,CAAC,eAAe,EAAE;YACtB,QAAQ;YACR,MAAM,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE;YACzD,KAAK;YACL,IAAI;SACL,CAAC,CACH,CAAA;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;gBAC/B,OAAO,mBAAmB,CAAC,oCAAoC,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACtF,CAAC;YACD,MAAM,SAAS,GAAG,qBAAqB,CACrC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAC1F,CAAA;YACD,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC1C,OAAO,mBAAmB,CAAC,0CAA0C,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5F,CAAC;YACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1B,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAA;IACtB,CAAC;CACF,CAAC,CAAA"}

package/package.json

@@ -0,0 +1,80 @@
+{
+  "name": "@astrale-domains/shell",
+  "version": "0.1.0-beta.4",
+  "description": "Astrale Shell Domain schema and remote product implementation",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/astrale-os/shell.git",
+    "directory": "domain"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "imports": {
+    "#capabilities": "./dist/capabilities/index.js",
+    "#capabilities/*": "./dist/capabilities/*/index.js",
+    "#functions": "./dist/functions/index.js",
+    "#functions/*": "./dist/functions/*/index.js",
+    "#integrations": "./dist/integrations/index.js",
+    "#integrations/*": "./dist/integrations/*/index.js",
+    "#migrations": "./dist/migrations/index.js",
+    "#migrations/*": "./dist/migrations/*/index.js",
+    "#mutations": "./dist/mutations/index.js",
+    "#mutations/*": "./dist/mutations/*/index.js",
+    "#queries": "./dist/queries/index.js",
+    "#queries/*": "./dist/queries/*/index.js",
+    "#rules": "./dist/rules/index.js",
+    "#rules/*": "./dist/rules/*/index.js",
+    "#schema": "./dist/schema/index.js",
+    "#schema/*": "./dist/schema/*/index.js",
+    "#scripts": "./dist/scripts/index.js",
+    "#scripts/*": "./dist/scripts/*/index.js",
+    "#states": "./dist/states/index.js",
+    "#states/*": "./dist/states/*/index.js",
+    "#tests": "./dist/tests/index.js",
+    "#tests/*": "./dist/tests/*/index.js",
+    "#ui": "./dist/ui/index.js",
+    "#ui/*": "./dist/ui/*/index.js",
+    "#utils": "./dist/utils/index.js",
+    "#utils/*": "./dist/utils/*/index.js",
+    "#views": "./dist/views/index.js",
+    "#views/*": "./dist/views/*/index.js",
+    "#workflows": "./dist/workflows/index.js",
+    "#workflows/*": "./dist/workflows/*/index.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "dependencies": {
+    "@astrale-os/sdk": ">=0.5.0-beta.13 <1.0.0",
+    "zod": "4.4.3"
+  },
+  "devDependencies": {
+    "@astrale/typescript-config": "npm:@jsr/astrale__typescript-config@~1.1.0",
+    "@typescript/native-preview": "latest",
+    "typescript": "~6.0.1-rc",
+    "vitest": "^4.0.18"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "scripts": {
+    "build": "tsgo --paths null",
+    "clean": "rm -rf dist",
+    "typecheck": "tsgo --noEmit --paths null",
+    "test": "vitest run --config vitest.config.ts",
+    "test:file": "vitest run --config vitest.config.ts"
+  }
+}