@astrale-domains/shell 0.1.0-beta.41 → 0.1.0-beta.43

package/README.md

@@ -23,10 +23,13 @@ not listed. Shell requires `read` on Kernel `Domain` and `of_domain`, and `trave
 and `View`. Its `usesFunction` Policy admits any caller whose composed profile holds `can_use`
 on the Function, so holding the capability is enough.
 
-The Core `applications` Group carries `can_use` on listEntrypoints and View.resolve. Administrators
-hold both directly (a Core Edge cannot author Kernel `extends_with`); members do not.
-Share them dynamically with `Group.assignMember({ member: user, group: applications })`, which
-composes the profile through `extends_with`; `unassignMember` withdraws it.
+The workspace opens only once listEntrypoints answers, so every profile that admits a person to
+the workspace holds it. Administrators and members hold both listEntrypoints and View.resolve
+directly (a Core Edge cannot author Kernel `extends_with`): an invited person, whom Admin assigns
+to Core member, can open the workspace. The Core `applications` Group carries the same two
+capabilities for Identities outside Members. Share them dynamically with
+`Group.assignMember({ member: identity, group: applications })`, which composes the profile through
+`extends_with`; `unassignMember` withdraws it.
 
 User extends Kernel.Identity and owns only optional creationKey correlation.
 Concrete business classes may declare their own displayName/email; Shell never reads or writes them.
@@ -71,8 +74,8 @@ same transaction as both membership edges. The target Group's manager authorizes
 the child Group's managers can subsequently change the population that inherits it.
 
 `unassignMember` removes only that direct pair. Another membership path can preserve effective
-access. Queries of `member_of_group` continue to return direct facts; Grant evaluation expands
-identity composition for Policies. Shell must be able to traverse both concrete endpoint Classes,
+access. Queries of `member_of_group` continue to return direct facts; Policy evaluation expands
+the caller's identity composition. Shell must be able to traverse both concrete endpoint Classes,
 including a foreign Group used as the member.
 
 Membership methods converge both edges, including an observed partial membership.
@@ -80,7 +83,7 @@ After an uncertain mutation response they re-read the pair; an unconfirmed outco
 explicitly unconfirmed. This is not a global repair scan or an exactly-once guarantee.
 
 A Team class extending Group can carry a business permission edge to Project. Membership
-composition lets an Employee's expanded grant include Team; the protected Project Policy is
+composition lets an Employee, as caller, inherit Team's authority; the protected Project Policy is
 still evaluated by Kernel. Removing composition removes that authority path. Installed
 Kernel E2E evidence, not a handler test, qualifies this behavior.
 
@@ -89,7 +92,8 @@ Kernel E2E evidence, not a handler test, qualifies this behavior.
 The Shell principal requests all Kernel root functions, the required extends_with operations,
 and the declared grant/revoke authority. Core admin receives the full declared Shell profile,
 including invite, assignMember and unassignMember so humans inheriting admin can call those methods.
-Core member receives Introspect, Query, Mutate and View.resolve, not blanket class-read grants.
+Core member receives Download, Introspect, Query, Mutate, View.resolve and listEntrypoints, not
+blanket class-read grants.
 The Domain definition's requirements, including Core Identity capabilities in requirements.core, are owned by domain.ts and materialized by installation,
 never by invitation handlers.
 

package/dist/domain.d.ts

@@ -7,6 +7,9 @@ declare const frontend: import("@astrale-os/sdk/view").Frontend<import("@astrale
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -27,6 +30,9 @@ declare const frontend: import("@astrale-os/sdk/view").Frontend<import("@astrale
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{

package/dist/domain.js

@@ -60,10 +60,12 @@ const domainRequirements = requirements({
                 K.functions.query,
                 K.functions.mutate,
                 K.classes.View.static.methods.resolve,
+                // The workspace opens only on this catalogue: an invited member must be able to read it.
+                S.functions.listEntrypoints,
             ],
         },
         {
-            // Shared dynamically: Group.assignMember(user, applications) composes this profile.
+            // For Identities outside Members: Group.assignMember(identity, applications) composes it.
             subject: S.core.nodes.applications,
             functions: [S.functions.listEntrypoints, K.classes.View.static.methods.resolve],
         },

package/dist/runtime.d.ts

@@ -18,6 +18,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -38,6 +41,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -137,6 +143,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -157,6 +166,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -254,6 +266,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -274,6 +289,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -371,6 +389,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -391,6 +412,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{

package/dist/schema/modules/application/functions/list-entrypoints.js

@@ -11,6 +11,6 @@ export const listEntrypoints = func({
     auth: 'authorized',
     input: z.strictObject({}),
     output: z.object({ entrypoints: z.array(entrypointEntry) }),
-    // Holding can_use is enough: membership of the Applications Group shares it dynamically.
+    // Holding can_use is enough: Core admin and member hold it; the Applications Group shares it.
     policy: ({ check, ref }) => check(usesFunction, ref(() => listEntrypoints)),
 });

package/dist/schema/modules/group/classes/group.d.ts

@@ -1,5 +1,8 @@
 export declare const Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
     readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+    readonly policies: {
+        readonly read: true;
+    };
     readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
     readonly methods: {
         readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{

package/dist/schema/modules/group/classes/group.js

@@ -3,6 +3,7 @@ import { UsersRound } from '@astrale-os/sdk/schema/icons';
 import { assignMember, unassignMember } from '../functions/index.js';
 export const Group = nodeClass({
     icon: classIcon.lucide(UsersRound),
+    policies: { read: true },
     extends: [K.classes.Identity, K.classes.Named, K.classes.Descriptable],
     methods: { assignMember, unassignMember },
 });

package/dist/schema/modules/group/classes/member-of-group.js

@@ -2,6 +2,7 @@ import { edgeClass } from '@astrale-os/sdk/schema';
 import { User } from '../../user/index.js';
 import { Group } from './group.js';
 export const member_of_group = edgeClass.directed({
+    policies: { read: true },
     source: {
         as: 'member',
         accepts: [() => User, () => Group],

package/dist/schema/modules/user/classes/user.d.ts

@@ -1,6 +1,9 @@
 import { z } from 'zod';
 export declare const User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
     readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+    readonly policies: {
+        readonly read: true;
+    };
     readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
     readonly properties: {
         readonly creationKey: z.ZodOptional<z.ZodString>;

package/dist/schema/modules/user/classes/user.js

@@ -6,6 +6,7 @@ import { invite } from '../functions/index.js';
 const creationKey = z.string().min(1).max(512).optional();
 export const User = nodeClass({
     icon: classIcon.lucide(UserRound),
+    policies: { read: true },
     extends: [K.classes.Identity],
     properties: { creationKey },
     methods: { invite },

package/dist/schema/schema.d.ts

@@ -3,6 +3,9 @@ export declare const ORIGIN: 'shell.astrale.ai';
 declare const classes: {
     readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
         readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+        readonly policies: {
+            readonly read: true;
+        };
         readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
         readonly properties: {
             readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -23,6 +26,9 @@ declare const classes: {
     }>;
     readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
         readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+        readonly policies: {
+            readonly read: true;
+        };
         readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
         readonly methods: {
             readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -68,6 +74,9 @@ declare const input: {
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -88,6 +97,9 @@ declare const input: {
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -159,6 +171,9 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -179,6 +194,9 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -252,6 +270,9 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -272,6 +293,9 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-domains/shell",
-  "version": "0.1.0-beta.41",
+  "version": "0.1.0-beta.43",
   "description": "Astrale Shell Domain schema and remote product implementation",
   "license": "Apache-2.0",
   "repository": {
@@ -58,8 +58,8 @@
   },
   "devDependencies": {
     "@astrale-os/ox": "0.1.4",
-    "@astrale-os/sdk": "0.6.0-beta.25",
-    "@astrale-os/shell-react": ">=0.6.0-beta.1 <1.0.0",
+    "@astrale-os/sdk": "0.6.0-beta.28",
+    "@astrale-os/shell-react": ">=0.6.0-beta.2 <1.0.0",
     "@astrale-os/ui": "1.0.0-beta.32",
     "@astrale/typescript-config": "npm:@jsr/astrale__typescript-config@~2.0.0",
     "@testing-library/dom": "10.4.1",
@@ -76,7 +76,7 @@
     "vitest": "5.0.1"
   },
   "peerDependencies": {
-    "@astrale-os/sdk": ">=0.6.0-beta.25 <1.0.0"
+    "@astrale-os/sdk": ">=0.6.0-beta.28 <1.0.0"
   },
   "devEngines": {
     "runtime": {