@astrale-domains/shell 0.1.0-beta.49 → 0.1.0-beta.51

package/dist/runtime.js

@@ -2,7 +2,8 @@ import { defineRuntime } from '@astrale-os/sdk/runtime';
 import { listEntrypoints } from './functions/application/index.js';
 import { assignMember, unassignMember } from './functions/group/index.js';
 import { link, rename, unlink } from './functions/namespace/index.js';
-import { invite } from './functions/user/index.js';
+import { invite, recordProfile } from './functions/user/index.js';
+import { assignViews } from './functions/view-access/index.js';
 import { integrations } from './integrations/index.js';
 import { enrollmentProvider } from './providers/admin-enrollment/index.js';
 const initialize = (environment) => ({
@@ -16,6 +17,8 @@ const functions = [
     link,
     unlink,
     rename,
+    assignViews,
+    recordProfile,
 ];
 const runtime = defineRuntime()({
     integrations,

package/dist/schema/index.d.ts

@@ -4,3 +4,4 @@ export type { InvitationSummary } from './modules/user/index.js';
 export { Group, member_of_group, adminGroup, applicationsGroup, memberGroup, } from './modules/group/index.js';
 export { listEntrypoints, type EntrypointEntry } from './modules/application/index.js';
 export { Namespace, alias, viewsNamespace } from './modules/namespace/index.js';
+export { view_access, viewOnlyGroup, assignViews } from './modules/view-access/index.js';

package/dist/schema/index.js

@@ -3,3 +3,4 @@ export { User } from './modules/user/index.js';
 export { Group, member_of_group, adminGroup, applicationsGroup, memberGroup, } from './modules/group/index.js';
 export { listEntrypoints } from './modules/application/index.js';
 export { Namespace, alias, viewsNamespace } from './modules/namespace/index.js';
+export { view_access, viewOnlyGroup, assignViews } from './modules/view-access/index.js';

package/dist/schema/modules/user/classes/user.d.ts

@@ -8,6 +8,8 @@ export declare const User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
     readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
     readonly properties: {
         readonly creationKey: z.ZodOptional<z.ZodString>;
+        readonly claimedEmail: z.ZodOptional<z.ZodString>;
+        readonly claimedName: z.ZodOptional<z.ZodString>;
     };
     readonly methods: {
         readonly invite: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -21,5 +23,12 @@ export declare const User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
                 state: "accepted" | "cancelled" | "completed" | "expired" | "failed" | "pending" | "registered" | "registering";
             };
         }, "authorized", true, false, undefined, undefined>>;
+        readonly recordProfile: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            email?: string | undefined;
+            displayName?: string | undefined;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", false, false, undefined, undefined>>;
     };
 }>;

package/dist/schema/modules/user/classes/user.js

@@ -1,7 +1,8 @@
 import { K, classIcon, nodeClass } from '@astrale-os/sdk/schema';
 import { UserRound } from '@astrale-os/sdk/schema/icons';
 import { z } from 'zod';
-import { invite } from '../functions/index.js';
+import { invite, recordProfile } from '../functions/index.js';
+import { userDisplayName, userEmail } from '../types/index.js';
 // Correlation for Admin-owned creation; never an authentication credential.
 const creationKey = z.string().min(1).max(512).optional();
 export const User = nodeClass({
@@ -10,6 +11,11 @@ export const User = nodeClass({
     inheritance: 'open',
     policies: { read: true },
     extends: [K.classes.Identity],
-    properties: { creationKey },
-    methods: { invite },
+    properties: {
+        creationKey,
+        // Named apart from any profile a Domain extending User declares (`email`, `displayName`…).
+        claimedEmail: userEmail.optional(),
+        claimedName: userDisplayName.optional(),
+    },
+    methods: { invite, recordProfile },
 });

package/dist/schema/modules/user/functions/index.js

@@ -1 +1,2 @@
 export { invite } from './invite-user.js';
+export { recordProfile } from './record-profile.js';

package/dist/schema/modules/user/functions/record-profile.js

@@ -0,0 +1,14 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { isSelf } from '../../../policies/index.js';
+import { userDisplayName, userEmail } from '../types/index.js';
+export const recordProfile = method({
+    description: 'Record the email and display name this account signs in with; only the account itself may.',
+    auth: 'authorized',
+    input: z.strictObject({
+        email: userEmail.optional(),
+        displayName: userDisplayName.optional(),
+    }),
+    output: z.object({}),
+    policy: ({ check, self }) => check(isSelf, self),
+});

package/dist/schema/modules/user/types/index.d.ts

@@ -1 +1,2 @@
 export { invitationSummary, type InvitationSummary } from './invitation-summary.js';
+export { userEmail, userDisplayName } from './user-profile.js';

package/dist/schema/modules/user/types/index.js

@@ -1 +1,2 @@
 export { invitationSummary } from './invitation-summary.js';
+export { userEmail, userDisplayName } from './user-profile.js';

package/dist/schema/modules/user/types/user-profile.d.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+/**
+ * What an account says about itself, to be recognised in the directory: its sign-in email and its
+ * name. The account writes them, so they name it for display and decide nothing.
+ */
+export declare const userEmail: z.ZodString;
+export declare const userDisplayName: z.ZodString;

package/dist/schema/modules/user/types/user-profile.js

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+/**
+ * What an account says about itself, to be recognised in the directory: its sign-in email and its
+ * name. The account writes them, so they name it for display and decide nothing.
+ */
+export const userEmail = z.string().min(3).max(320);
+export const userDisplayName = z.string().min(1).max(200);

package/dist/schema/modules/view-access/classes/index.d.ts

@@ -0,0 +1 @@
+export { view_access } from './view-access.js';

package/dist/schema/modules/view-access/classes/index.js

@@ -0,0 +1 @@
+export { view_access } from './view-access.js';

package/dist/schema/modules/view-access/classes/view-access.d.ts

@@ -0,0 +1,22 @@
+/**
+ * One View given to an account or a group: the holder, and each member of a holding group, has this
+ * View among the ones it opens. It decides navigation, never data: the View's own Domain still
+ * guards everything it shows. Only instance administrators create or delete it. The target is a
+ * Class Shell does not own, so the Edge detaches with its View.
+ */
+export declare const view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+    readonly depth: 0;
+    readonly abstract: false;
+    readonly extends: readonly [];
+    readonly properties: never;
+    readonly source: {
+        readonly as: "holder";
+        readonly outgoing: "0..*";
+    };
+    readonly target: {
+        readonly as: "view";
+        readonly incoming: "0..*";
+    };
+    readonly constraints: Record<never, never>;
+    readonly effectiveProperties: never;
+}>;

package/dist/schema/modules/view-access/classes/view-access.js

@@ -0,0 +1,18 @@
+import { K, edgeClass } from '@astrale-os/sdk/schema';
+import { Group } from '../../group/index.js';
+import { User } from '../../user/index.js';
+/**
+ * One View given to an account or a group: the holder, and each member of a holding group, has this
+ * View among the ones it opens. It decides navigation, never data: the View's own Domain still
+ * guards everything it shows. Only instance administrators create or delete it. The target is a
+ * Class Shell does not own, so the Edge detaches with its View.
+ */
+export const view_access = edgeClass.directed({
+    policies: { read: true, traverse: true },
+    source: {
+        as: 'holder',
+        accepts: [() => User, () => Group],
+        outgoing: '0..*',
+    },
+    target: { as: 'view', accepts: [K.classes.View], incoming: '0..*' },
+});

package/dist/schema/modules/view-access/core/index.d.ts

@@ -0,0 +1 @@
+export { viewOnlyGroup } from './view-only-group.js';

package/dist/schema/modules/view-access/core/index.js

@@ -0,0 +1 @@
+export { viewOnlyGroup } from './view-only-group.js';

package/dist/schema/modules/view-access/core/view-only-group.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Its members open only the Views given to them, never the workspace. Administrators keep the
+ * workspace even when they are members.
+ */
+export declare const viewOnlyGroup: import("@astrale-os/sdk/schema").CoreNode;

package/dist/schema/modules/view-access/core/view-only-group.js

@@ -0,0 +1,10 @@
+import { K, core } from '@astrale-os/sdk/schema';
+import { Group } from '../../group/index.js';
+/**
+ * Its members open only the Views given to them, never the workspace. Administrators keep the
+ * workspace even when they are members.
+ */
+export const viewOnlyGroup = core.node(() => Group, {
+    [K.classes.Named.properties.name.key]: 'View only',
+    [K.classes.Descriptable.properties.description.key]: 'Open only the Views given to them, never the workspace.',
+});

package/dist/schema/modules/view-access/functions/assign-views.d.ts

@@ -0,0 +1,16 @@
+import { type Function as SchemaFunction } from '@astrale-os/sdk/schema';
+/**
+ * Give Views to identities and withdraw others, in one write. Each identity is a User or a Group;
+ * a View already given, or already withdrawn, stays as it is. Whether an identity opens the
+ * workspace is its `view-only` membership, which `Group.assignMember` changes.
+ */
+export declare const assignViews: SchemaFunction<import("@astrale-os/sdk/schema").CallableProjection<{
+    assignments: {
+        identity: string;
+        set?: string[] | undefined;
+        unset?: string[] | undefined;
+    }[];
+}, {
+    readonly mode: 'value';
+    readonly value: Record<string, never>;
+}, "authorized", false, false, undefined, undefined>>;

package/dist/schema/modules/view-access/functions/assign-views.js

@@ -0,0 +1,17 @@
+import { func } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { usesFunction } from '../../../policies/index.js';
+import { MAX_ASSIGNMENTS, viewAssignment } from '../types/index.js';
+/**
+ * Give Views to identities and withdraw others, in one write. Each identity is a User or a Group;
+ * a View already given, or already withdrawn, stays as it is. Whether an identity opens the
+ * workspace is its `view-only` membership, which `Group.assignMember` changes.
+ */
+export const assignViews = func({
+    description: 'Give and withdraw Views for each identity, in one write.',
+    auth: 'authorized',
+    input: z.strictObject({ assignments: z.array(viewAssignment).min(1).max(MAX_ASSIGNMENTS) }),
+    output: z.object({}),
+    // Holding can_use is enough: Core admin holds it, and may share it.
+    policy: ({ check, ref }) => check(usesFunction, ref(() => assignViews)),
+});

package/dist/schema/modules/view-access/functions/index.d.ts

@@ -0,0 +1 @@
+export { assignViews } from './assign-views.js';

package/dist/schema/modules/view-access/functions/index.js

@@ -0,0 +1 @@
+export { assignViews } from './assign-views.js';

package/dist/schema/modules/view-access/index.d.ts

@@ -0,0 +1,3 @@
+export { view_access } from './classes/index.js';
+export { viewOnlyGroup } from './core/index.js';
+export { assignViews } from './functions/index.js';

package/dist/schema/modules/view-access/index.js

@@ -0,0 +1,3 @@
+export { view_access } from './classes/index.js';
+export { viewOnlyGroup } from './core/index.js';
+export { assignViews } from './functions/index.js';

package/dist/schema/modules/view-access/types/index.js

@@ -0,0 +1 @@
+export { viewAssignment, MAX_ASSIGNED_VIEWS, MAX_ASSIGNMENTS } from './view-assignment.js';

package/dist/schema/modules/view-access/types/view-assignment.js

@@ -0,0 +1,16 @@
+import { z } from 'zod';
+/**
+ * Bounds that keep one call within the Kernel's Mutation limits: at most 1,600 Edge operations
+ * and 1,640 locators, under 2,048 each.
+ */
+export const MAX_ASSIGNED_VIEWS = 20;
+export const MAX_ASSIGNMENTS = 40;
+// A Path inside a list is not a callable Path input: each is an exact @NodeId the Action checks.
+const nodeId = z.string().min(2).max(512);
+const views = z.array(nodeId).max(MAX_ASSIGNED_VIEWS);
+/** The Views given to one User or Group (`set`) and withdrawn from it (`unset`), by @NodeId. */
+export const viewAssignment = z.strictObject({
+    identity: nodeId,
+    set: views.optional(),
+    unset: views.optional(),
+});

package/dist/schema/policies/index.js

@@ -1,3 +1,4 @@
 export { ownsClass } from './owns-class.js';
 export { administersShellClass } from './administers-shell-class.js';
 export { usesFunction } from './uses-function.js';
+export { isSelf } from './is-self.js';

package/dist/schema/policies/is-self.js

@@ -0,0 +1,5 @@
+import { policy } from '@astrale-os/sdk/schema';
+/** The subject is the object itself: an account acting on its own Node. */
+export const isSelf = policy({
+    match: ({ sameNode, subject, object }) => sameNode(subject, object),
+});

package/dist/schema/schema.d.ts

@@ -10,6 +10,8 @@ declare const classes: {
         readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
         readonly properties: {
             readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
+            readonly claimedEmail: import("zod").ZodOptional<import("zod").ZodString>;
+            readonly claimedName: import("zod").ZodOptional<import("zod").ZodString>;
         };
         readonly methods: {
             readonly invite: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -23,6 +25,13 @@ declare const classes: {
                     state: "accepted" | "cancelled" | "completed" | "expired" | "failed" | "pending" | "registered" | "registering";
                 };
             }, "authorized", true, false, undefined, undefined>>;
+            readonly recordProfile: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                email?: string | undefined;
+                displayName?: string | undefined;
+            }, {
+                readonly mode: 'value';
+                readonly value: Record<string, never>;
+            }, "authorized", false, false, undefined, undefined>>;
         };
     }>;
     readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
@@ -111,6 +120,22 @@ declare const classes: {
         readonly constraints: Record<never, never>;
         readonly effectiveProperties: never;
     }>;
+    readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+        readonly depth: 0;
+        readonly abstract: false;
+        readonly extends: readonly [];
+        readonly properties: never;
+        readonly source: {
+            readonly as: "holder";
+            readonly outgoing: "0..*";
+        };
+        readonly target: {
+            readonly as: "view";
+            readonly incoming: "0..*";
+        };
+        readonly constraints: Record<never, never>;
+        readonly effectiveProperties: never;
+    }>;
 };
 export type ShellClasses = typeof classes;
 declare const input: {
@@ -129,6 +154,8 @@ declare const input: {
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
+                readonly claimedEmail: import("zod").ZodOptional<import("zod").ZodString>;
+                readonly claimedName: import("zod").ZodOptional<import("zod").ZodString>;
             };
             readonly methods: {
                 readonly invite: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -142,6 +169,13 @@ declare const input: {
                         state: "accepted" | "cancelled" | "completed" | "expired" | "failed" | "pending" | "registered" | "registering";
                     };
                 }, "authorized", true, false, undefined, undefined>>;
+                readonly recordProfile: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    email?: string | undefined;
+                    displayName?: string | undefined;
+                }, {
+                    readonly mode: 'value';
+                    readonly value: Record<string, never>;
+                }, "authorized", false, false, undefined, undefined>>;
             };
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
@@ -230,6 +264,22 @@ declare const input: {
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
+        readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+            readonly depth: 0;
+            readonly abstract: false;
+            readonly extends: readonly [];
+            readonly properties: never;
+            readonly source: {
+                readonly as: "holder";
+                readonly outgoing: "0..*";
+            };
+            readonly target: {
+                readonly as: "view";
+                readonly incoming: "0..*";
+            };
+            readonly constraints: Record<never, never>;
+            readonly effectiveProperties: never;
+        }>;
     };
     readonly functions: {
         readonly listEntrypoints: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
@@ -242,12 +292,23 @@ declare const input: {
                 }[];
             };
         }, "authorized", false, false, undefined, undefined>>;
+        readonly assignViews: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<{
+            assignments: {
+                identity: string;
+                set?: string[] | undefined;
+                unset?: string[] | undefined;
+            }[];
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", false, false, undefined, undefined>>;
     };
     readonly policies: {
         readonly belongsToGroup: import("@astrale-os/sdk/schema").Policy;
         readonly ownsClass: import("@astrale-os/sdk/schema").Policy;
         readonly administersShellClass: import("@astrale-os/sdk/schema").Policy;
         readonly usesFunction: import("@astrale-os/sdk/schema").Policy;
+        readonly isSelf: import("@astrale-os/sdk/schema").Policy;
     };
     readonly views: {
         readonly application: import("@astrale-os/sdk/schema").View;
@@ -258,6 +319,7 @@ declare const input: {
             readonly applications: import("@astrale-os/sdk/schema").CoreNode;
             readonly member: import("@astrale-os/sdk/schema").CoreNode;
             readonly views: import("@astrale-os/sdk/schema").CoreNode;
+            readonly 'view-only': import("@astrale-os/sdk/schema").CoreNode;
         };
     };
 };
@@ -275,6 +337,8 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
+                readonly claimedEmail: import("zod").ZodOptional<import("zod").ZodString>;
+                readonly claimedName: import("zod").ZodOptional<import("zod").ZodString>;
             };
             readonly methods: {
                 readonly invite: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -288,6 +352,13 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
                         state: "accepted" | "cancelled" | "completed" | "expired" | "failed" | "pending" | "registered" | "registering";
                     };
                 }, "authorized", true, false, undefined, undefined>>;
+                readonly recordProfile: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    email?: string | undefined;
+                    displayName?: string | undefined;
+                }, {
+                    readonly mode: 'value';
+                    readonly value: Record<string, never>;
+                }, "authorized", false, false, undefined, undefined>>;
             };
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
@@ -376,6 +447,22 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
+        readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+            readonly depth: 0;
+            readonly abstract: false;
+            readonly extends: readonly [];
+            readonly properties: never;
+            readonly source: {
+                readonly as: "holder";
+                readonly outgoing: "0..*";
+            };
+            readonly target: {
+                readonly as: "view";
+                readonly incoming: "0..*";
+            };
+            readonly constraints: Record<never, never>;
+            readonly effectiveProperties: never;
+        }>;
     };
     readonly functions: {
         readonly listEntrypoints: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
@@ -388,12 +475,23 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
                 }[];
             };
         }, "authorized", false, false, undefined, undefined>>;
+        readonly assignViews: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<{
+            assignments: {
+                identity: string;
+                set?: string[] | undefined;
+                unset?: string[] | undefined;
+            }[];
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", false, false, undefined, undefined>>;
     };
     readonly policies: {
         readonly belongsToGroup: import("@astrale-os/sdk/schema").Policy;
         readonly ownsClass: import("@astrale-os/sdk/schema").Policy;
         readonly administersShellClass: import("@astrale-os/sdk/schema").Policy;
         readonly usesFunction: import("@astrale-os/sdk/schema").Policy;
+        readonly isSelf: import("@astrale-os/sdk/schema").Policy;
     };
     readonly views: {
         readonly application: import("@astrale-os/sdk/schema").View;
@@ -404,6 +502,7 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
             readonly applications: import("@astrale-os/sdk/schema").CoreNode;
             readonly member: import("@astrale-os/sdk/schema").CoreNode;
             readonly views: import("@astrale-os/sdk/schema").CoreNode;
+            readonly 'view-only': import("@astrale-os/sdk/schema").CoreNode;
         };
     };
 }, {
@@ -423,6 +522,8 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
             readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
             readonly properties: {
                 readonly creationKey: import("zod").ZodOptional<import("zod").ZodString>;
+                readonly claimedEmail: import("zod").ZodOptional<import("zod").ZodString>;
+                readonly claimedName: import("zod").ZodOptional<import("zod").ZodString>;
             };
             readonly methods: {
                 readonly invite: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
@@ -436,6 +537,13 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
                         state: "accepted" | "cancelled" | "completed" | "expired" | "failed" | "pending" | "registered" | "registering";
                     };
                 }, "authorized", true, false, undefined, undefined>>;
+                readonly recordProfile: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    email?: string | undefined;
+                    displayName?: string | undefined;
+                }, {
+                    readonly mode: 'value';
+                    readonly value: Record<string, never>;
+                }, "authorized", false, false, undefined, undefined>>;
             };
         }>;
         readonly Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
@@ -524,6 +632,22 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
+        readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+            readonly depth: 0;
+            readonly abstract: false;
+            readonly extends: readonly [];
+            readonly properties: never;
+            readonly source: {
+                readonly as: "holder";
+                readonly outgoing: "0..*";
+            };
+            readonly target: {
+                readonly as: "view";
+                readonly incoming: "0..*";
+            };
+            readonly constraints: Record<never, never>;
+            readonly effectiveProperties: never;
+        }>;
     };
     readonly functions: {
         readonly listEntrypoints: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
@@ -536,12 +660,23 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
                 }[];
             };
         }, "authorized", false, false, undefined, undefined>>;
+        readonly assignViews: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<{
+            assignments: {
+                identity: string;
+                set?: string[] | undefined;
+                unset?: string[] | undefined;
+            }[];
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", false, false, undefined, undefined>>;
     };
     readonly policies: {
         readonly belongsToGroup: import("@astrale-os/sdk/schema").Policy;
         readonly ownsClass: import("@astrale-os/sdk/schema").Policy;
         readonly administersShellClass: import("@astrale-os/sdk/schema").Policy;
         readonly usesFunction: import("@astrale-os/sdk/schema").Policy;
+        readonly isSelf: import("@astrale-os/sdk/schema").Policy;
     };
     readonly views: {
         readonly application: import("@astrale-os/sdk/schema").View;
@@ -552,6 +687,7 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
             readonly applications: import("@astrale-os/sdk/schema").CoreNode;
             readonly member: import("@astrale-os/sdk/schema").CoreNode;
             readonly views: import("@astrale-os/sdk/schema").CoreNode;
+            readonly 'view-only': import("@astrale-os/sdk/schema").CoreNode;
         };
     };
 }, {

package/dist/schema/schema.js

@@ -3,13 +3,14 @@ import { listEntrypoints } from './modules/application/index.js';
 import { Group, member_of_group, adminGroup, applicationsGroup, memberGroup, belongsToGroup, } from './modules/group/index.js';
 import { Namespace, alias, viewsNamespace } from './modules/namespace/index.js';
 import { User } from './modules/user/index.js';
-import { ownsClass, administersShellClass, usesFunction } from './policies/index.js';
+import { assignViews, view_access, viewOnlyGroup } from './modules/view-access/index.js';
+import { ownsClass, administersShellClass, usesFunction, isSelf } from './policies/index.js';
 import { applicationView } from './views/index.js';
 export const ORIGIN = 'shell.astrale.ai';
 const dependencies = { kernel: KernelSchema };
-const classes = { User, Group, member_of_group, Namespace, alias };
-const functions = { listEntrypoints };
-const policies = { belongsToGroup, ownsClass, administersShellClass, usesFunction };
+const classes = { User, Group, member_of_group, Namespace, alias, view_access };
+const functions = { listEntrypoints, assignViews };
+const policies = { belongsToGroup, ownsClass, administersShellClass, usesFunction, isSelf };
 const views = { application: applicationView };
 const core = {
     nodes: {
@@ -17,6 +18,7 @@ const core = {
         applications: applicationsGroup,
         member: memberGroup,
         views: viewsNamespace,
+        'view-only': viewOnlyGroup,
     },
 };
 const input = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-domains/shell",
-  "version": "0.1.0-beta.49",
+  "version": "0.1.0-beta.51",
   "description": "Astrale Shell Domain schema and remote product implementation",
   "license": "Apache-2.0",
   "repository": {
@@ -58,7 +58,7 @@
   },
   "devDependencies": {
     "@astrale-os/ox": "0.1.4",
-    "@astrale-os/sdk": "0.6.0-beta.37",
+    "@astrale-os/sdk": "0.6.0-beta.38",
     "@astrale-os/shell-react": "0.6.0-beta.8",
     "@astrale-os/ui": "1.0.0-beta.37",
     "@astrale/typescript-config": "npm:@jsr/astrale__typescript-config@~2.0.0",