@astrale-domains/shell 0.1.0-beta.42 → 0.1.0-beta.43

package/README.md

@@ -74,8 +74,8 @@ same transaction as both membership edges. The target Group's manager authorizes
 the child Group's managers can subsequently change the population that inherits it.
 
 `unassignMember` removes only that direct pair. Another membership path can preserve effective
-access. Queries of `member_of_group` continue to return direct facts; Grant evaluation expands
-identity composition for Policies. Shell must be able to traverse both concrete endpoint Classes,
+access. Queries of `member_of_group` continue to return direct facts; Policy evaluation expands
+the caller's identity composition. Shell must be able to traverse both concrete endpoint Classes,
 including a foreign Group used as the member.
 
 Membership methods converge both edges, including an observed partial membership.
@@ -83,7 +83,7 @@ After an uncertain mutation response they re-read the pair; an unconfirmed outco
 explicitly unconfirmed. This is not a global repair scan or an exactly-once guarantee.
 
 A Team class extending Group can carry a business permission edge to Project. Membership
-composition lets an Employee's expanded grant include Team; the protected Project Policy is
+composition lets an Employee, as caller, inherit Team's authority; the protected Project Policy is
 still evaluated by Kernel. Removing composition removes that authority path. Installed
 Kernel E2E evidence, not a handler test, qualifies this behavior.
 

package/dist/domain.d.ts

@@ -7,6 +7,9 @@ declare const frontend: import("@astrale-os/sdk/view").Frontend<import("@astrale
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -27,6 +30,9 @@ declare const frontend: import("@astrale-os/sdk/view").Frontend<import("@astrale
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{

package/dist/runtime.d.ts

@@ -18,6 +18,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -38,6 +41,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -137,6 +143,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -157,6 +166,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -254,6 +266,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -274,6 +289,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -371,6 +389,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -391,6 +412,9 @@ declare const functions: readonly [import("@astrale-os/sdk/workflow").WorkflowDe
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{

package/dist/schema/modules/group/classes/group.d.ts

@@ -1,5 +1,8 @@
 export declare const Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
     readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+    readonly policies: {
+        readonly read: true;
+    };
     readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
     readonly methods: {
         readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{

package/dist/schema/modules/group/classes/group.js

@@ -3,6 +3,7 @@ import { UsersRound } from '@astrale-os/sdk/schema/icons';
 import { assignMember, unassignMember } from '../functions/index.js';
 export const Group = nodeClass({
     icon: classIcon.lucide(UsersRound),
+    policies: { read: true },
     extends: [K.classes.Identity, K.classes.Named, K.classes.Descriptable],
     methods: { assignMember, unassignMember },
 });

package/dist/schema/modules/group/classes/member-of-group.js

@@ -2,6 +2,7 @@ import { edgeClass } from '@astrale-os/sdk/schema';
 import { User } from '../../user/index.js';
 import { Group } from './group.js';
 export const member_of_group = edgeClass.directed({
+    policies: { read: true },
     source: {
         as: 'member',
         accepts: [() => User, () => Group],

package/dist/schema/modules/user/classes/user.d.ts

@@ -1,6 +1,9 @@
 import { z } from 'zod';
 export declare const User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
     readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+    readonly policies: {
+        readonly read: true;
+    };
     readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
     readonly properties: {
         readonly creationKey: z.ZodOptional<z.ZodString>;

package/dist/schema/modules/user/classes/user.js

@@ -6,6 +6,7 @@ import { invite } from '../functions/index.js';
 const creationKey = z.string().min(1).max(512).optional();
 export const User = nodeClass({
     icon: classIcon.lucide(UserRound),
+    policies: { read: true },
     extends: [K.classes.Identity],
     properties: { creationKey },
     methods: { invite },

package/dist/schema/schema.d.ts

@@ -3,6 +3,9 @@ export declare const ORIGIN: 'shell.astrale.ai';
 declare const classes: {
     readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
         readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+        readonly policies: {
+            readonly read: true;
+        };
         readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
         readonly properties: {
             readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -23,6 +26,9 @@ declare const classes: {
     }>;
     readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
         readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+        readonly policies: {
+            readonly read: true;
+        };
         readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
         readonly methods: {
             readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -68,6 +74,9 @@ declare const input: {
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -88,6 +97,9 @@ declare const input: {
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -159,6 +171,9 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -179,6 +194,9 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -252,6 +270,9 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
     readonly classes: {
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
@@ -272,6 +293,9 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+            readonly policies: {
+                readonly read: true;
+            };
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
             readonly methods: {
                 readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-domains/shell",
-  "version": "0.1.0-beta.42",
+  "version": "0.1.0-beta.43",
   "description": "Astrale Shell Domain schema and remote product implementation",
   "license": "Apache-2.0",
   "repository": {