@astrale-domains/shell 0.1.0-beta.4

package/dist/queries/space/access.js

@@ -0,0 +1,93 @@
+import { Query } from '@astrale-os/sdk/query';
+import { defineQuery } from '@astrale-os/sdk/query';
+import { S } from '#schema';
+import { graphEndpointPath } from '#utils/graph-endpoint';
+import { completeNodeQueryGuard } from '#utils/query-page';
+const SPACE = { origin: 'shell.astrale.ai', kind: 'class', name: 'Space' };
+const GROUP = { origin: 'shell.astrale.ai', kind: 'class', name: 'Group' };
+const ADMINISTERS_SPACE = S.$.class('administers_space').schemaRef;
+const MEMBER_OF_SPACE = S.$.class('member_of_space').schemaRef;
+const OWNS_SPACE = S.$.class('owns_space').schemaRef;
+const administeredSpaces = defineQuery({
+    id: 'shell.space.administered-spaces',
+    page: { size: 256 },
+    pagination: { maximumPages: 64 },
+    build: (user) => Query.from({ kind: 'node', paths: [graphEndpointPath(user)], binding: 'user' })
+        .expand({
+        via: [ADMINISTERS_SPACE],
+        direction: 'outgoing',
+        bindings: { edge: 'adminAccess', node: 'space' },
+    })
+        .filter({ satisfies: SPACE })
+        .select({ kind: 'nodes', projection: { kind: 'reference' } }),
+    project: spaceAccessEvidence,
+});
+const memberSpaces = defineQuery({
+    id: 'shell.space.member-spaces',
+    page: { size: 256 },
+    pagination: { maximumPages: 64 },
+    build: (user) => Query.from({ kind: 'node', paths: [graphEndpointPath(user)], binding: 'user' })
+        .expand({
+        via: [MEMBER_OF_SPACE],
+        direction: 'outgoing',
+        bindings: { edge: 'memberAccess', node: 'space' },
+    })
+        .filter({ satisfies: SPACE })
+        .select({ kind: 'nodes', projection: { kind: 'reference' } }),
+    project: spaceAccessEvidence,
+});
+const ownedSpaces = defineQuery({
+    id: 'shell.space.owned-spaces',
+    page: { size: 256 },
+    pagination: { maximumPages: 64 },
+    build: (user) => Query.from({ kind: 'node', paths: [graphEndpointPath(user)], binding: 'user' })
+        .expand({
+        via: [OWNS_SPACE],
+        direction: 'outgoing',
+        bindings: { edge: 'ownership', node: 'space' },
+    })
+        .filter({ satisfies: SPACE })
+        .select({ kind: 'nodes', projection: { kind: 'reference' } }),
+    project: spaceAccessEvidence,
+});
+const groupSpaces = defineQuery({
+    id: 'shell.space.group-spaces',
+    page: { size: 256 },
+    pagination: { maximumPages: 64 },
+    build: (user) => Query.from({ kind: 'node', paths: [graphEndpointPath(user)], binding: 'user' })
+        .expand({
+        via: [S.$.class('member_of_group').schemaRef],
+        direction: 'outgoing',
+        bindings: { edge: 'membership', node: 'group' },
+    })
+        .filter({ satisfies: GROUP })
+        .expand({
+        via: [OWNS_SPACE, ADMINISTERS_SPACE, MEMBER_OF_SPACE],
+        direction: 'outgoing',
+        bindings: { edge: 'groupAccess', node: 'space' },
+    })
+        .filter({ satisfies: SPACE })
+        .select({ kind: 'nodes', projection: { kind: 'reference' } }),
+    project: spaceAccessEvidence,
+});
+export const observeDirectSpaceAccess = defineQuery.composite({
+    id: 'shell.space.observe-direct-access',
+    compose: (query, subject) => query.combine({
+        admin: query.query('admin', administeredSpaces, subject.user),
+        member: query.query('member', memberSpaces, subject.user),
+    }),
+});
+export const observeEffectiveSpaceAccess = defineQuery.composite({
+    id: 'shell.space.observe-effective-access',
+    compose: (query, subject) => query.combine({
+        administers: query.query('administers', administeredSpaces, subject.user),
+        group: query.query('group', groupSpaces, subject.user),
+        member: query.query('member', memberSpaces, subject.user),
+        owns: query.query('owns', ownedSpaces, subject.user),
+    }),
+});
+function spaceAccessEvidence(pages, _user, { ast }) {
+    const guard = completeNodeQueryGuard(pages, ast, 'Space access');
+    return Object.freeze({ spaces: guard.equals.ids, guard });
+}
+//# sourceMappingURL=access.js.map

package/dist/queries/space/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../queries/space/access.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,CAAC,EAAE,MAAM,SAAS,CAAA;AAC3B,OAAO,EAAE,iBAAiB,EAAsB,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAAE,sBAAsB,EAAuB,MAAM,mBAAmB,CAAA;AAwB/E,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAW,CAAA;AACnF,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAW,CAAA;AACnF,MAAM,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,SAAS,CAAA;AAClE,MAAM,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAA;AAC9D,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,SAAS,CAAA;AAEpD,MAAM,kBAAkB,GAAG,WAAW,CAAmD;IACvF,EAAE,EAAE,iCAAiC;IACrC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACnB,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC5E,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,iBAAiB,CAAC;QACxB,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;KACjD,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,WAAW,CAAmD;IACjF,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACnB,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC5E,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,eAAe,CAAC;QACtB,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE;KAClD,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,WAAW,CAAmD;IAChF,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACnB,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC5E,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,UAAU,CAAC;QACjB,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;KAC/C,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,WAAW,CAAmD;IAChF,EAAE,EAAE,0BAA0B;IAC9B,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACnB,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC5E,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC;QAC7C,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;KAChD,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,eAAe,CAAC;QACrD,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;KACjD,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,mBAAmB;CAC7B,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAC,SAAS,CAG3D;IACA,EAAE,EAAE,mCAAmC;IACvC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC1B,KAAK,CAAC,OAAO,CAAC;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC;QAC7D,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC;KAC1D,CAAC;CACL,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,WAAW,CAAC,SAAS,CAG9D;IACA,EAAE,EAAE,sCAAsC;IAC1C,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC1B,KAAK,CAAC,OAAO,CAAC;QACZ,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,kBAAkB,EAAE,OAAO,CAAC,IAAI,CAAC;QACzE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC;QACtD,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC;QACzD,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC;KACrD,CAAC;CACL,CAAC,CAAA;AAEF,SAAS,mBAAmB,CAC1B,KAAiB,EACjB,KAAoB,EACpB,EAAE,GAAG,EAAgD;IAErD,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,cAAc,CAAC,CAAA;IAChE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;AAC3D,CAAC"}

package/dist/queries/space/default.d.ts

@@ -0,0 +1,10 @@
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+import type { QueryNodeAST } from '@astrale-os/sdk/query';
+import { type GraphEndpoint } from '#utils/graph-endpoint';
+import { type NodeQueryGuard } from '#utils/query-page';
+export interface DefaultSpaceObservation {
+    readonly spaces: readonly NodeId[];
+    readonly guard: NodeQueryGuard;
+}
+export declare const observeDefaultSpaces: import("@astrale-os/sdk").PaginatedQueryDefinition<GraphEndpoint, DefaultSpaceObservation, QueryNodeAST>;
+//# sourceMappingURL=default.d.ts.map

package/dist/queries/space/default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.d.ts","sourceRoot":"","sources":["../../../queries/space/default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAOzD,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAA0B,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAI/E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAA;CAC/B;AAED,eAAO,MAAM,oBAAoB,0GAkB/B,CAAA"}

package/dist/queries/space/default.js

@@ -0,0 +1,25 @@
+import { Query } from '@astrale-os/sdk/query';
+import { defineQuery } from '@astrale-os/sdk/query';
+import { S } from '#schema';
+import { graphEndpointPath } from '#utils/graph-endpoint';
+import { completeNodeQueryGuard } from '#utils/query-page';
+const SPACE = { origin: 'shell.astrale.ai', kind: 'class', name: 'Space' };
+export const observeDefaultSpaces = defineQuery({
+    id: 'shell.space.observe-defaults',
+    page: { size: 256 },
+    pagination: { maximumPages: 64 },
+    build: (user) => Query.from({ kind: 'node', paths: [graphEndpointPath(user)], binding: 'user' })
+        .expand({
+        via: [S.$.class('default_space').schemaRef],
+        direction: 'outgoing',
+        bindings: { edge: 'fallback', node: 'space' },
+    })
+        .filter({ satisfies: SPACE })
+        .select({ kind: 'nodes', projection: { kind: 'reference' } }),
+    project: nodeIds,
+});
+function nodeIds(pages, _user, { ast }) {
+    const guard = completeNodeQueryGuard(pages, ast, 'default Space');
+    return Object.freeze({ spaces: guard.equals.ids, guard });
+}
+//# sourceMappingURL=default.js.map

package/dist/queries/space/default.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.js","sourceRoot":"","sources":["../../../queries/space/default.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAEnD,OAAO,EAAE,CAAC,EAAE,MAAM,SAAS,CAAA;AAC3B,OAAO,EAAE,iBAAiB,EAAsB,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAAE,sBAAsB,EAAuB,MAAM,mBAAmB,CAAA;AAE/E,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAW,CAAA;AAOnF,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAI7C;IACA,EAAE,EAAE,8BAA8B;IAClC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;IACnB,UAAU,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;IAChC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC5E,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC;QAC3C,SAAS,EAAE,UAAU;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE;KAC9C,CAAC;SACD,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;SAC5B,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,OAAO;CACjB,CAAC,CAAA;AAEF,SAAS,OAAO,CACd,KAAiB,EACjB,KAAoB,EACpB,EAAE,GAAG,EAAgD;IAErD,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,eAAe,CAAC,CAAA;IACjE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;AAC3D,CAAC"}

package/dist/queries/space/index.d.ts

@@ -0,0 +1,3 @@
+export { observeDirectSpaceAccess, observeEffectiveSpaceAccess, type DirectSpaceAccessObservation, type EffectiveSpaceAccessObservation, type SpaceAccessEvidence, type SpaceAccessSubject, } from './access.js';
+export { observeDefaultSpaces, type DefaultSpaceObservation } from './default.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/queries/space/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../queries/space/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,KAAK,4BAA4B,EACjC,KAAK,+BAA+B,EACpC,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,oBAAoB,EAAE,KAAK,uBAAuB,EAAE,MAAM,cAAc,CAAA"}

package/dist/queries/space/index.js

@@ -0,0 +1,3 @@
+export { observeDirectSpaceAccess, observeEffectiveSpaceAccess, } from './access.js';
+export { observeDefaultSpaces } from './default.js';
+//# sourceMappingURL=index.js.map

package/dist/queries/space/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../queries/space/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAK5B,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,oBAAoB,EAAgC,MAAM,cAAc,CAAA"}

package/dist/rules/application/association.d.ts

@@ -0,0 +1,13 @@
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+import type { ApplicationAssociationObservation } from '#queries/application';
+export type ApplicationAssociationState = {
+    readonly kind: 'absent';
+} | {
+    readonly kind: 'present';
+    readonly application: NodeId;
+} | {
+    readonly kind: 'conflict';
+    readonly count: number;
+};
+export declare function classifyApplicationAssociation(observation: ApplicationAssociationObservation): ApplicationAssociationState;
+//# sourceMappingURL=association.d.ts.map

package/dist/rules/application/association.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"association.d.ts","sourceRoot":"","sources":["../../../rules/application/association.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAExD,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAA;AAE7E,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzD,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,iCAAiC,GAC7C,2BAA2B,CAO7B"}

package/dist/rules/application/association.js

@@ -0,0 +1,10 @@
+export function classifyApplicationAssociation(observation) {
+    const matches = [...new Set(observation.applications)];
+    if (matches.length === 0)
+        return Object.freeze({ kind: 'absent' });
+    if (matches.length === 1) {
+        return Object.freeze({ kind: 'present', application: matches[0] });
+    }
+    return Object.freeze({ kind: 'conflict', count: matches.length });
+}
+//# sourceMappingURL=association.js.map

package/dist/rules/application/association.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"association.js","sourceRoot":"","sources":["../../../rules/application/association.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,8BAA8B,CAC5C,WAA8C;IAE9C,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAA;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;AACnE,CAAC"}

package/dist/rules/application/index.d.ts

@@ -0,0 +1,4 @@
+export { classifyApplicationAssociation, type ApplicationAssociationState } from './association.js';
+export { decideApplicationRemoval, type ApplicationRemovalDecision } from './removal.js';
+export { materializeInstallApplicationResult } from './result.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/rules/application/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../rules/application/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AACnG,OAAO,EAAE,wBAAwB,EAAE,KAAK,0BAA0B,EAAE,MAAM,cAAc,CAAA;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,aAAa,CAAA"}

package/dist/rules/application/index.js

@@ -0,0 +1,4 @@
+export { classifyApplicationAssociation } from './association.js';
+export { decideApplicationRemoval } from './removal.js';
+export { materializeInstallApplicationResult } from './result.js';
+//# sourceMappingURL=index.js.map

package/dist/rules/application/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../rules/application/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAoC,MAAM,kBAAkB,CAAA;AACnG,OAAO,EAAE,wBAAwB,EAAmC,MAAM,cAAc,CAAA;AACxF,OAAO,EAAE,mCAAmC,EAAE,MAAM,aAAa,CAAA"}

package/dist/rules/application/removal.d.ts

@@ -0,0 +1,11 @@
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+export type ApplicationRemovalDecision = {
+    readonly kind: 'allowed';
+} | {
+    readonly kind: 'protected-shell-application';
+};
+export declare function decideApplicationRemoval(input: {
+    readonly application: NodeId;
+    readonly shellApplication: NodeId;
+}): ApplicationRemovalDecision;
+//# sourceMappingURL=removal.d.ts.map

package/dist/rules/application/removal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removal.d.ts","sourceRoot":"","sources":["../../../rules/application/removal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAExD,MAAM,MAAM,0BAA0B,GAClC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAA;CAAE,CAAA;AAEpD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC,GAAG,0BAA0B,CAI7B"}

package/dist/rules/application/removal.js

@@ -0,0 +1,6 @@
+export function decideApplicationRemoval(input) {
+    return input.application === input.shellApplication
+        ? Object.freeze({ kind: 'protected-shell-application' })
+        : Object.freeze({ kind: 'allowed' });
+}
+//# sourceMappingURL=removal.js.map

package/dist/rules/application/removal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"removal.js","sourceRoot":"","sources":["../../../rules/application/removal.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACC,OAAO,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,gBAAgB;QACjD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;QACxD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;AACxC,CAAC"}

package/dist/rules/application/result.d.ts

@@ -0,0 +1,8 @@
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+import type { InstallApplicationInput, InstallApplicationResult } from '#schema/application';
+export declare function materializeInstallApplicationResult(input: {
+    readonly application: NodeId;
+    readonly association: InstallApplicationInput;
+    readonly space: NodeId;
+}): InstallApplicationResult;
+//# sourceMappingURL=result.d.ts.map

package/dist/rules/application/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../../rules/application/result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAIxD,OAAO,KAAK,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAE5F,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,uBAAuB,CAAA;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,GAAG,wBAAwB,CAc3B"}

package/dist/rules/application/result.js

@@ -0,0 +1,17 @@
+import { Path } from '@astrale-os/sdk/graph/path';
+export function materializeInstallApplicationResult(input) {
+    return Object.freeze({
+        application: Object.freeze({
+            id: input.application,
+            path: Path.id(input.application).raw,
+            class: 'Application',
+        }),
+        domain: Path.from(input.association.domain).raw,
+        space: Object.freeze({
+            id: input.space,
+            path: Path.from(input.association.space).raw,
+            class: 'Space',
+        }),
+    });
+}
+//# sourceMappingURL=result.js.map

package/dist/rules/application/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../../rules/application/result.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAA;AAIjD,MAAM,UAAU,mCAAmC,CAAC,KAInD;IACC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,EAAE,EAAE,KAAK,CAAC,WAAW;YACrB,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG;YACpC,KAAK,EAAE,aAAsB;SAC9B,CAAC;QACF,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG;QAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG;YAC5C,KAAK,EAAE,OAAgB;SACxB,CAAC;KACH,CAAC,CAAA;AACJ,CAAC"}

package/dist/rules/group/index.d.ts

@@ -0,0 +1,2 @@
+export { classifyGroupMembership, type GroupMembershipState } from './membership.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/rules/group/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../rules/group/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/rules/group/index.js

@@ -0,0 +1,2 @@
+export { classifyGroupMembership } from './membership.js';
+//# sourceMappingURL=index.js.map

package/dist/rules/group/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../rules/group/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAA6B,MAAM,iBAAiB,CAAA"}

package/dist/rules/group/membership.d.ts

@@ -0,0 +1,5 @@
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+import type { GroupMembershipObservation } from '#queries/group';
+export type GroupMembershipState = 'absent' | 'complete' | 'local-only' | 'authority-only';
+export declare function classifyGroupMembership(group: NodeId, observation: GroupMembershipObservation): GroupMembershipState;
+//# sourceMappingURL=membership.d.ts.map

package/dist/rules/group/membership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../../rules/group/membership.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAExD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAA;AAEhE,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,GAAG,gBAAgB,CAAA;AAE1F,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,0BAA0B,GACtC,oBAAoB,CAOtB"}

package/dist/rules/group/membership.js

@@ -0,0 +1,12 @@
+export function classifyGroupMembership(group, observation) {
+    const local = observation.local.groups.includes(group);
+    const authority = observation.authority.groups.includes(group);
+    if (local && authority)
+        return 'complete';
+    if (local)
+        return 'local-only';
+    if (authority)
+        return 'authority-only';
+    return 'absent';
+}
+//# sourceMappingURL=membership.js.map

package/dist/rules/group/membership.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.js","sourceRoot":"","sources":["../../../rules/group/membership.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,WAAuC;IAEvC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACtD,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9D,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO,UAAU,CAAA;IACzC,IAAI,KAAK;QAAE,OAAO,YAAY,CAAA;IAC9B,IAAI,SAAS;QAAE,OAAO,gBAAgB,CAAA;IACtC,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/rules/index.d.ts

@@ -0,0 +1,5 @@
+export { classifyApplicationAssociation, decideApplicationRemoval, materializeInstallApplicationResult, type ApplicationAssociationState, type ApplicationRemovalDecision, } from '#rules/application';
+export { classifyGroupMembership, type GroupMembershipState } from '#rules/group';
+export { classifyDirectSpaceAccess, distinctDefaultSpaces, effectiveSpaceAccessGuard, hasEffectiveSpaceAccess, isOnlyDefaultSpace, type DirectSpaceAccessState, } from '#rules/space';
+export { decideSingleUserGrant, isSelfGrantedUser, type UserGrantDecision } from '#rules/user';
+//# sourceMappingURL=index.d.ts.map

package/dist/rules/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../rules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,mCAAmC,EACnC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,GAChC,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,uBAAuB,EAAE,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACjF,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,sBAAsB,GAC5B,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAA"}

package/dist/rules/index.js

@@ -0,0 +1,5 @@
+export { classifyApplicationAssociation, decideApplicationRemoval, materializeInstallApplicationResult, } from '#rules/application';
+export { classifyGroupMembership } from '#rules/group';
+export { classifyDirectSpaceAccess, distinctDefaultSpaces, effectiveSpaceAccessGuard, hasEffectiveSpaceAccess, isOnlyDefaultSpace, } from '#rules/space';
+export { decideSingleUserGrant, isSelfGrantedUser } from '#rules/user';
+//# sourceMappingURL=index.js.map

package/dist/rules/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../rules/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,mCAAmC,GAGpC,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,uBAAuB,EAA6B,MAAM,cAAc,CAAA;AACjF,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,GAEnB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAA0B,MAAM,aAAa,CAAA"}

package/dist/rules/space/access.d.ts

@@ -0,0 +1,8 @@
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+import type { DirectSpaceAccessObservation, EffectiveSpaceAccessObservation } from '#queries/space';
+import type { NodeQueryGuard } from '#utils/query-page';
+export type DirectSpaceAccessState = 'none' | 'member' | 'admin' | 'conflict';
+export declare function classifyDirectSpaceAccess(space: NodeId, observation: DirectSpaceAccessObservation): DirectSpaceAccessState;
+export declare function hasEffectiveSpaceAccess(space: NodeId, observation: EffectiveSpaceAccessObservation): boolean;
+export declare function effectiveSpaceAccessGuard(space: NodeId, observation: EffectiveSpaceAccessObservation): NodeQueryGuard | undefined;
+//# sourceMappingURL=access.d.ts.map

package/dist/rules/space/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../../../rules/space/access.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAExD,OAAO,KAAK,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,MAAM,gBAAgB,CAAA;AACnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAEvD,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAA;AAE7E,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,4BAA4B,GACxC,sBAAsB,CAOxB;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,+BAA+B,GAC3C,OAAO,CAET;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,+BAA+B,GAC3C,cAAc,GAAG,SAAS,CAE5B"}

package/dist/rules/space/access.js

@@ -0,0 +1,18 @@
+export function classifyDirectSpaceAccess(space, observation) {
+    const admin = observation.admin.spaces.includes(space);
+    const member = observation.member.spaces.includes(space);
+    if (admin && member)
+        return 'conflict';
+    if (admin)
+        return 'admin';
+    if (member)
+        return 'member';
+    return 'none';
+}
+export function hasEffectiveSpaceAccess(space, observation) {
+    return effectiveSpaceAccessGuard(space, observation) !== undefined;
+}
+export function effectiveSpaceAccessGuard(space, observation) {
+    return Object.values(observation).find((evidence) => evidence.spaces.includes(space))?.guard;
+}
+//# sourceMappingURL=access.js.map

package/dist/rules/space/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../../rules/space/access.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,yBAAyB,CACvC,KAAa,EACb,WAAyC;IAEzC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACxD,IAAI,KAAK,IAAI,MAAM;QAAE,OAAO,UAAU,CAAA;IACtC,IAAI,KAAK;QAAE,OAAO,OAAO,CAAA;IACzB,IAAI,MAAM;QAAE,OAAO,QAAQ,CAAA;IAC3B,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,WAA4C;IAE5C,OAAO,yBAAyB,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,SAAS,CAAA;AACpE,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAa,EACb,WAA4C;IAE5C,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAA;AAC9F,CAAC"}

package/dist/rules/space/default.d.ts

@@ -0,0 +1,4 @@
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+export declare function distinctDefaultSpaces(spaces: readonly NodeId[]): readonly NodeId[];
+export declare function isOnlyDefaultSpace(spaces: readonly NodeId[], selected: NodeId): boolean;
+//# sourceMappingURL=default.d.ts.map

package/dist/rules/space/default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.d.ts","sourceRoot":"","sources":["../../../rules/space/default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AAExD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,MAAM,EAAE,CAElF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvF"}

package/dist/rules/space/default.js

@@ -0,0 +1,7 @@
+export function distinctDefaultSpaces(spaces) {
+    return Object.freeze([...new Set(spaces)]);
+}
+export function isOnlyDefaultSpace(spaces, selected) {
+    return spaces.length === 1 && spaces[0] === selected;
+}
+//# sourceMappingURL=default.js.map

package/dist/rules/space/default.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.js","sourceRoot":"","sources":["../../../rules/space/default.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,qBAAqB,CAAC,MAAyB;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAyB,EAAE,QAAgB;IAC5E,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAA;AACtD,CAAC"}

package/dist/rules/space/index.d.ts

@@ -0,0 +1,3 @@
+export { classifyDirectSpaceAccess, effectiveSpaceAccessGuard, hasEffectiveSpaceAccess, type DirectSpaceAccessState, } from './access.js';
+export { distinctDefaultSpaces, isOnlyDefaultSpace } from './default.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/rules/space/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../rules/space/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA"}

package/dist/rules/space/index.js

@@ -0,0 +1,3 @@
+export { classifyDirectSpaceAccess, effectiveSpaceAccessGuard, hasEffectiveSpaceAccess, } from './access.js';
+export { distinctDefaultSpaces, isOnlyDefaultSpace } from './default.js';
+//# sourceMappingURL=index.js.map

package/dist/rules/space/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../rules/space/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,GAExB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA"}

package/dist/rules/user/ensure.d.ts

@@ -0,0 +1,21 @@
+import type { IssuerId, ProvisionRequest, ProvisionResult, Subject } from '@astrale-os/sdk/auth';
+import { LocalBinding } from '@astrale-os/sdk/graph/model';
+import type { EnsureShellUserResult } from '#schema/user';
+export interface EnsureShellUserInput {
+    readonly operationId: string;
+    readonly identity: Readonly<{
+        readonly issuer: IssuerId;
+        readonly subject: Subject;
+    }>;
+    readonly personalSpaceName: string;
+}
+export interface ShellUserProvisioning {
+    readonly request: ProvisionRequest;
+    readonly userBinding: ReturnType<typeof LocalBinding>;
+    readonly personalSpaceBinding: ReturnType<typeof LocalBinding>;
+}
+/** Build the complete Shell-owned identity provisioning request without performing I/O. */
+export declare function buildShellUserProvisioning(input: EnsureShellUserInput): ShellUserProvisioning;
+/** Project one provision receipt into stable graph references owned by Shell's public contract. */
+export declare function projectShellUserProvisioning(provisioning: ShellUserProvisioning, result: ProvisionResult): EnsureShellUserResult;
+//# sourceMappingURL=ensure.d.ts.map

package/dist/rules/user/ensure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure.d.ts","sourceRoot":"","sources":["../../../rules/user/ensure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAGhG,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAK1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAIzD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;QACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAC1B,CAAC,CAAA;IACF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAA;IAClC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAA;IACrD,QAAQ,CAAC,oBAAoB,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAA;CAC/D;AAED,2FAA2F;AAC3F,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,GAAG,qBAAqB,CAwC7F;AAED,mGAAmG;AACnG,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,qBAAqB,EACnC,MAAM,EAAE,eAAe,GACtB,qBAAqB,CAKvB"}

package/dist/rules/user/ensure.js

@@ -0,0 +1,61 @@
+import { ClassPath } from '@astrale-os/sdk/graph';
+import { LocalBinding } from '@astrale-os/sdk/graph/model';
+import { Path } from '@astrale-os/sdk/graph/path';
+import { MutationAST } from '@astrale-os/sdk/mutation';
+import { K } from '@astrale-os/sdk/schema/kernel';
+import { S } from '#schema';
+/** Build the complete Shell-owned identity provisioning request without performing I/O. */
+export function buildShellUserProvisioning(input) {
+    const user = LocalBinding('user');
+    const personalSpace = LocalBinding('personalSpace');
+    const mutation = MutationAST.build((builder) => {
+        const createdUser = builder.createNode({
+            as: user,
+            class: ClassPath.from(S.$.class('User')),
+            props: {},
+        });
+        const createdSpace = builder.createNode({
+            as: personalSpace,
+            class: ClassPath.from(S.$.class('Space')),
+            props: { [K.Named.$.property('name').key]: input.personalSpaceName },
+        });
+        builder.createEdge({
+            class: ClassPath.from(S.$.class('owns_space')),
+            source: createdUser,
+            target: createdSpace,
+        });
+        builder.createEdge({
+            class: ClassPath.from(S.$.class('default_space')),
+            source: createdUser,
+            target: createdSpace,
+        });
+    });
+    return Object.freeze({
+        request: Object.freeze({
+            idempotencyKey: input.operationId,
+            mutation,
+            identities: Object.freeze({
+                [user]: Object.freeze({
+                    issuer: input.identity.issuer,
+                    subject: input.identity.subject,
+                }),
+            }),
+        }),
+        userBinding: user,
+        personalSpaceBinding: personalSpace,
+    });
+}
+/** Project one provision receipt into stable graph references owned by Shell's public contract. */
+export function projectShellUserProvisioning(provisioning, result) {
+    return Object.freeze({
+        user: createdNode(result, provisioning.userBinding, 'User'),
+        personalSpace: createdNode(result, provisioning.personalSpaceBinding, 'personal Space'),
+    });
+}
+function createdNode(result, binding, label) {
+    const id = result.createdNodes[binding];
+    if (id === undefined)
+        throw new TypeError(`Shell provisioning omitted its ${label} identity.`);
+    return Path.id(id).raw;
+}
+//# sourceMappingURL=ensure.js.map

package/dist/rules/user/ensure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure.js","sourceRoot":"","sources":["../../../rules/user/ensure.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAC1D,OAAO,EAAE,IAAI,EAAiB,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,+BAA+B,CAAA;AAIjD,OAAO,EAAE,CAAC,EAAE,MAAM,SAAS,CAAA;AAiB3B,2FAA2F;AAC3F,MAAM,UAAU,0BAA0B,CAAC,KAA2B;IACpE,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACjC,MAAM,aAAa,GAAG,YAAY,CAAC,eAAe,CAAC,CAAA;IACnD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;YACrC,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxC,KAAK,EAAE,EAAE;SACV,CAAC,CAAA;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;YACtC,EAAE,EAAE,aAAa;YACjB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,iBAAiB,EAAE;SACrE,CAAC,CAAA;QACF,OAAO,CAAC,UAAU,CAAC;YACjB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAA;QACF,OAAO,CAAC,UAAU,CAAC;YACjB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACjD,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,cAAc,EAAE,KAAK,CAAC,WAAW;YACjC,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;gBACxB,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;oBACpB,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;oBAC7B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;iBAChC,CAAC;aACH,CAAC;SACH,CAAC;QACF,WAAW,EAAE,IAAI;QACjB,oBAAoB,EAAE,aAAa;KACpC,CAAC,CAAA;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,4BAA4B,CAC1C,YAAmC,EACnC,MAAuB;IAEvB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC;QAC3D,aAAa,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;KACxF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,MAAuB,EACvB,OAAwC,EACxC,KAAa;IAEb,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;IACvC,IAAI,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,KAAK,YAAY,CAAC,CAAA;IAC9F,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAA;AACxB,CAAC"}

package/dist/rules/user/grant.d.ts

@@ -0,0 +1,13 @@
+import type { IdentityId } from '@astrale-os/sdk/auth';
+import type { Caller } from '@astrale-os/sdk/domain';
+export type UserGrantDecision = {
+    readonly kind: 'accepted';
+    readonly user: IdentityId;
+} | {
+    readonly kind: 'unauthenticated';
+} | {
+    readonly kind: 'composed-grant';
+};
+export declare function decideSingleUserGrant(actor: Caller): UserGrantDecision;
+export declare function isSelfGrantedUser(actor: Caller, user: IdentityId): boolean;
+//# sourceMappingURL=grant.d.ts.map

package/dist/rules/user/grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.d.ts","sourceRoot":"","sources":["../../../rules/user/grant.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAEpD,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,CAAA;AAEvC,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAMtE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAE1E"}

package/dist/rules/user/grant.js

@@ -0,0 +1,12 @@
+export function decideSingleUserGrant(actor) {
+    if (actor.kind !== 'authenticated')
+        return Object.freeze({ kind: 'unauthenticated' });
+    const expression = actor.authority.expr;
+    return expression.kind === 'identity'
+        ? Object.freeze({ kind: 'accepted', user: expression.id })
+        : Object.freeze({ kind: 'composed-grant' });
+}
+export function isSelfGrantedUser(actor, user) {
+    return actor.kind === 'authenticated' && actor.principal === user;
+}
+//# sourceMappingURL=grant.js.map

package/dist/rules/user/grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant.js","sourceRoot":"","sources":["../../../rules/user/grant.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAA;IACrF,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAA;IACvC,OAAO,UAAU,CAAC,IAAI,KAAK,UAAU;QACnC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;QAC1D,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAgB;IAC/D,OAAO,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAA;AACnE,CAAC"}

package/dist/rules/user/index.d.ts

@@ -0,0 +1,3 @@
+export { decideSingleUserGrant, isSelfGrantedUser, type UserGrantDecision } from './grant.js';
+export { buildShellUserProvisioning, projectShellUserProvisioning, type EnsureShellUserInput, type ShellUserProvisioning, } from './ensure.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/rules/user/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../rules/user/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC7F,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAA"}

package/dist/rules/user/index.js

@@ -0,0 +1,3 @@
+export { decideSingleUserGrant, isSelfGrantedUser } from './grant.js';
+export { buildShellUserProvisioning, projectShellUserProvisioning, } from './ensure.js';
+//# sourceMappingURL=index.js.map

package/dist/rules/user/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../rules/user/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAA0B,MAAM,YAAY,CAAA;AAC7F,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAG7B,MAAM,aAAa,CAAA"}