@astrale-domains/shell 0.1.0-beta.9 → 0.1.1

package/dist/runtime.js

@@ -1,18 +1,28 @@
 import { defineRuntime } from '@astrale-os/sdk/runtime';
-import { resolveHomeAction } from './actions/index.js';
-import { addSpaceUserWorkflow, assignGroupUserWorkflow, removeSpaceUserWorkflow, setDefaultSpaceWorkflow, setupAdminWorkflow, setupMemberWorkflow, unassignGroupUserWorkflow, } from './workflows/index.js';
+import { listEntrypoints } from './functions/application/index.js';
+import { assignMember, unassignMember } from './functions/group/index.js';
+import { link, rename, unlink } from './functions/namespace/index.js';
+import { invite, recordProfile } from './functions/user/index.js';
+import { assignViews } from './functions/view-access/index.js';
+import { integrations } from './integrations/index.js';
+import { enrollmentProvider } from './providers/admin-enrollment/index.js';
+const initialize = (environment) => ({
+    providers: { enrollment: enrollmentProvider(environment) },
+});
+const functions = [
+    invite,
+    assignMember,
+    unassignMember,
+    listEntrypoints,
+    link,
+    unlink,
+    rename,
+    assignViews,
+    recordProfile,
+];
 const runtime = defineRuntime()({
-    integrations: {},
-    initialize: () => ({ providers: {} }),
-    actions: [resolveHomeAction],
-    workflows: [
-        setupAdminWorkflow,
-        setupMemberWorkflow,
-        assignGroupUserWorkflow,
-        unassignGroupUserWorkflow,
-        addSpaceUserWorkflow,
-        removeSpaceUserWorkflow,
-        setDefaultSpaceWorkflow,
-    ],
+    integrations,
+    initialize,
+    functions,
 });
 export default runtime;

package/dist/schema/index.d.ts

@@ -1,6 +1,7 @@
-export { ORIGIN, S, ShellCore, ShellSchema, type GroupMembershipInput, type GroupMembershipResult, type ResolveHomeResult, type SetDefaultSpaceInput, type SetDefaultSpaceResult, type SetupUserInput, type SetupUserResult, type Shell, type SpaceUserAccess, type SpaceUserAccessInput, type SpaceUserAccessResult, type SpaceUserInput, type SpaceUserResult, } from '#schema/domain';
-export { Group, adminGroup, groupAssignUser, groupCore, groupUnassignUser, groupView, maySetupUsers, memberGroup, member_of_group, } from '#schema/group';
-export { homeView } from '#schema/home';
-export { setupAdmin, setupMember } from '#schema/setup';
-export { Space, administers_space, belongsToSpace, default_space, defaultSpace, mayAdministerSpace, member_of_space, owns_space, ownsSpace, spaceAddUser, spaceCore, spaceRemoveUser, spaceSetDefault, spaceView, } from '#schema/space';
-export { User, resolveHome, userView } from '#schema/user';
+export { ShellSchema, S, type Shell, type ShellClasses, type ShellSchemaInput } from './schema.js';
+export { User } from './modules/user/index.js';
+export type { InvitationSummary } from './modules/user/index.js';
+export { Group, member_of_group, adminGroup, applicationsGroup, memberGroup, } from './modules/group/index.js';
+export { listEntrypoints, type EntrypointEntry } from './modules/application/index.js';
+export { Namespace, alias, viewsNamespace } from './modules/namespace/index.js';
+export { view_access, viewOnlyGroup, assignViews } from './modules/view-access/index.js';

package/dist/schema/index.js

@@ -1,6 +1,6 @@
-export { ORIGIN, S, ShellCore, ShellSchema, } from '#schema/domain';
-export { Group, adminGroup, groupAssignUser, groupCore, groupUnassignUser, groupView, maySetupUsers, memberGroup, member_of_group, } from '#schema/group';
-export { homeView } from '#schema/home';
-export { setupAdmin, setupMember } from '#schema/setup';
-export { Space, administers_space, belongsToSpace, default_space, defaultSpace, mayAdministerSpace, member_of_space, owns_space, ownsSpace, spaceAddUser, spaceCore, spaceRemoveUser, spaceSetDefault, spaceView, } from '#schema/space';
-export { User, resolveHome, userView } from '#schema/user';
+export { ShellSchema, S } from './schema.js';
+export { User } from './modules/user/index.js';
+export { Group, member_of_group, adminGroup, applicationsGroup, memberGroup, } from './modules/group/index.js';
+export { listEntrypoints } from './modules/application/index.js';
+export { Namespace, alias, viewsNamespace } from './modules/namespace/index.js';
+export { view_access, viewOnlyGroup, assignViews } from './modules/view-access/index.js';

package/dist/schema/modules/application/functions/index.d.ts

@@ -0,0 +1 @@
+export { listEntrypoints } from './list-entrypoints.js';

package/dist/schema/modules/application/functions/index.js

@@ -0,0 +1 @@
+export { listEntrypoints } from './list-entrypoints.js';

package/dist/schema/modules/application/functions/list-entrypoints.d.ts

@@ -0,0 +1,15 @@
+import { type Function as SchemaFunction } from '@astrale-os/sdk/schema';
+/**
+ * The entrypoint View of every installed Domain that declares one, with its Domain name. Shell
+ * reads the Kernel `entrypoint` Edges with its own authority; a Domain without one is not listed.
+ */
+export declare const listEntrypoints: SchemaFunction<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+    readonly mode: 'value';
+    readonly value: {
+        entrypoints: {
+            origin: string;
+            name: string;
+            view: string;
+        }[];
+    };
+}, "authorized", false, false, undefined, undefined>>;

package/dist/schema/modules/application/functions/list-entrypoints.js

@@ -0,0 +1,16 @@
+import { func } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { usesFunction } from '../../../policies/index.js';
+import { entrypointEntry } from '../types/index.js';
+/**
+ * The entrypoint View of every installed Domain that declares one, with its Domain name. Shell
+ * reads the Kernel `entrypoint` Edges with its own authority; a Domain without one is not listed.
+ */
+export const listEntrypoints = func({
+    description: 'List the entrypoint View and name of every installed Domain that declares one.',
+    auth: 'authorized',
+    input: z.strictObject({}),
+    output: z.object({ entrypoints: z.array(entrypointEntry) }),
+    // Holding can_use is enough: Core admin and member hold it; the Applications Group shares it.
+    policy: ({ check, ref }) => check(usesFunction, ref(() => listEntrypoints)),
+});

package/dist/schema/modules/application/index.d.ts

@@ -0,0 +1,2 @@
+export { listEntrypoints } from './functions/index.js';
+export { entrypointEntry, type EntrypointEntry } from './types/index.js';

package/dist/schema/modules/application/index.js

@@ -0,0 +1,2 @@
+export { listEntrypoints } from './functions/index.js';
+export { entrypointEntry } from './types/index.js';

package/dist/schema/modules/application/types/entrypoint-entry.d.ts

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+/** One installed Domain entrypoint: the Domain origin, its display name, and its View key. */
+export declare const entrypointEntry: z.ZodObject<{
+    origin: z.ZodString;
+    name: z.ZodString;
+    view: z.ZodString;
+}, z.core.$strip>;
+export type EntrypointEntry = z.infer<typeof entrypointEntry>;

package/dist/schema/modules/application/types/entrypoint-entry.js

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+/** One installed Domain entrypoint: the Domain origin, its display name, and its View key. */
+export const entrypointEntry = z.object({
+    origin: z.string().min(1),
+    name: z.string().min(1),
+    view: z.string().min(1),
+});

package/dist/schema/modules/application/types/index.d.ts

@@ -0,0 +1 @@
+export { entrypointEntry, type EntrypointEntry } from './entrypoint-entry.js';

package/dist/schema/modules/application/types/index.js

@@ -0,0 +1 @@
+export { entrypointEntry } from './entrypoint-entry.js';

package/dist/schema/modules/group/classes/group.d.ts

@@ -0,0 +1,24 @@
+export declare const Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
+    readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+    readonly inheritance: "open";
+    readonly policies: {
+        readonly read: true;
+    };
+    readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
+    readonly methods: {
+        readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            member: string;
+            group: string;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", true, false, undefined, undefined>>;
+        readonly unassignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            member: string;
+            group: string;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", true, false, undefined, undefined>>;
+    };
+}>;

package/dist/schema/modules/group/classes/group.js

@@ -0,0 +1,11 @@
+import { K, classIcon, nodeClass } from '@astrale-os/sdk/schema';
+import { UsersRound } from '@astrale-os/sdk/schema/icons';
+import { assignMember, unassignMember } from '../functions/index.js';
+export const Group = nodeClass({
+    icon: classIcon.lucide(UsersRound),
+    // Domains that depend on Shell extend it with the groups they own.
+    inheritance: 'open',
+    policies: { read: true },
+    extends: [K.classes.Identity, K.classes.Named, K.classes.Descriptable],
+    methods: { assignMember, unassignMember },
+});

package/dist/schema/modules/group/classes/index.d.ts

@@ -0,0 +1,2 @@
+export { Group } from './group.js';
+export { member_of_group } from './member-of-group.js';

package/dist/schema/modules/group/classes/index.js

@@ -0,0 +1,2 @@
+export { Group } from './group.js';
+export { member_of_group } from './member-of-group.js';

package/dist/schema/modules/group/classes/member-of-group.d.ts

@@ -0,0 +1,30 @@
+export declare const member_of_group: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+    readonly depth: 0;
+    readonly abstract: false;
+    readonly extends: readonly [];
+    readonly properties: never;
+    readonly source: {
+        readonly as: "member";
+        readonly accepts: readonly (() => {
+            readonly kind: 'node';
+            readonly abstract: never;
+            readonly depth: never;
+            readonly properties: never;
+            readonly methods: never;
+        })[];
+        readonly outgoing: "0..*";
+    };
+    readonly target: {
+        readonly as: "group";
+        readonly accepts: readonly (() => {
+            readonly kind: 'node';
+            readonly abstract: never;
+            readonly depth: never;
+            readonly properties: never;
+            readonly methods: never;
+        })[];
+        readonly incoming: "0..*";
+    };
+    readonly constraints: Record<never, never>;
+    readonly effectiveProperties: never;
+}>;

package/dist/schema/modules/group/classes/member-of-group.js

@@ -0,0 +1,12 @@
+import { edgeClass } from '@astrale-os/sdk/schema';
+import { User } from '../../user/index.js';
+import { Group } from './group.js';
+export const member_of_group = edgeClass.directed({
+    policies: { read: true },
+    source: {
+        as: 'member',
+        accepts: [() => User, () => Group],
+        outgoing: '0..*',
+    },
+    target: { as: 'group', accepts: [() => Group], incoming: '0..*' },
+});

package/dist/schema/modules/group/core/administrators-group.d.ts

@@ -0,0 +1 @@
+export declare const adminGroup: import("@astrale-os/sdk/schema").CoreNode;

package/dist/schema/modules/group/core/administrators-group.js

@@ -0,0 +1,6 @@
+import { K, core } from '@astrale-os/sdk/schema';
+import { Group } from '../classes/group.js';
+export const adminGroup = core.node(() => Group, {
+    [K.classes.Named.properties.name.key]: 'Administrators',
+    [K.classes.Descriptable.properties.description.key]: 'Instance administrators.',
+});

package/dist/schema/modules/group/core/applications-group.d.ts

@@ -0,0 +1 @@
+export declare const applicationsGroup: import("@astrale-os/sdk/schema").CoreNode;

package/dist/schema/modules/group/core/applications-group.js

@@ -0,0 +1,6 @@
+import { K, core } from '@astrale-os/sdk/schema';
+import { Group } from '../classes/group.js';
+export const applicationsGroup = core.node(() => Group, {
+    [K.classes.Named.properties.name.key]: 'Applications',
+    [K.classes.Descriptable.properties.description.key]: 'May list the installed applications they can open.',
+});

package/dist/schema/modules/group/core/index.d.ts

@@ -0,0 +1,3 @@
+export { adminGroup } from './administrators-group.js';
+export { applicationsGroup } from './applications-group.js';
+export { memberGroup } from './members-group.js';

package/dist/schema/modules/group/core/index.js

@@ -0,0 +1,3 @@
+export { adminGroup } from './administrators-group.js';
+export { applicationsGroup } from './applications-group.js';
+export { memberGroup } from './members-group.js';

package/dist/schema/modules/group/core/members-group.d.ts

@@ -0,0 +1 @@
+export declare const memberGroup: import("@astrale-os/sdk/schema").CoreNode;

package/dist/schema/modules/group/core/members-group.js

@@ -0,0 +1,6 @@
+import { K, core } from '@astrale-os/sdk/schema';
+import { Group } from '../classes/group.js';
+export const memberGroup = core.node(() => Group, {
+    [K.classes.Named.properties.name.key]: 'Members',
+    [K.classes.Descriptable.properties.description.key]: 'Instance members.',
+});

package/dist/schema/modules/group/functions/assign-member-to-group.js

@@ -0,0 +1,11 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { ownsClass, administersShellClass } from '../../../policies/index.js';
+import { groupMembershipInput } from '../types/index.js';
+export const assignMember = method({
+    static: true,
+    auth: 'authorized',
+    input: groupMembershipInput,
+    output: z.object({}),
+    policy: ({ anyOf, check, input }) => anyOf(check(administersShellClass, input.group), check(ownsClass, input.group)),
+});

package/dist/schema/modules/group/functions/index.js

@@ -0,0 +1,2 @@
+export { assignMember } from './assign-member-to-group.js';
+export { unassignMember } from './unassign-member-from-group.js';

package/dist/schema/modules/group/functions/unassign-member-from-group.js

@@ -0,0 +1,11 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { ownsClass, administersShellClass } from '../../../policies/index.js';
+import { groupMembershipInput } from '../types/index.js';
+export const unassignMember = method({
+    static: true,
+    auth: 'authorized',
+    input: groupMembershipInput,
+    output: z.object({}),
+    policy: ({ anyOf, check, input }) => anyOf(check(administersShellClass, input.group), check(ownsClass, input.group)),
+});

package/dist/schema/modules/group/index.d.ts

@@ -0,0 +1,3 @@
+export { Group, member_of_group } from './classes/index.js';
+export { adminGroup, applicationsGroup, memberGroup } from './core/index.js';
+export { belongsToGroup } from './policies/index.js';

package/dist/schema/modules/group/index.js

@@ -0,0 +1,3 @@
+export { Group, member_of_group } from './classes/index.js';
+export { adminGroup, applicationsGroup, memberGroup } from './core/index.js';
+export { belongsToGroup } from './policies/index.js';

package/dist/schema/modules/group/policies/belongs-to-group.d.ts

@@ -0,0 +1 @@
+export declare const belongsToGroup: import("@astrale-os/sdk/schema").Policy;

package/dist/schema/modules/group/policies/belongs-to-group.js

@@ -0,0 +1,5 @@
+import { policy } from '@astrale-os/sdk/schema';
+import { member_of_group } from '../classes/member-of-group.js';
+export const belongsToGroup = policy({
+    match: ({ edge, subject, object }) => edge({ source: subject, class: () => member_of_group, target: object }),
+});

package/dist/schema/modules/group/policies/index.d.ts

@@ -0,0 +1 @@
+export { belongsToGroup } from './belongs-to-group.js';

package/dist/schema/modules/group/policies/index.js

@@ -0,0 +1 @@
+export { belongsToGroup } from './belongs-to-group.js';

package/dist/schema/modules/group/types/group-membership-input.js

@@ -0,0 +1,8 @@
+import { path } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { User } from '../../user/index.js';
+import { Group } from '../classes/group.js';
+export const groupMembershipInput = z.object({
+    member: path(() => User, () => Group),
+    group: path(() => Group),
+});

package/dist/schema/modules/group/types/index.js

@@ -0,0 +1 @@
+export { groupMembershipInput } from './group-membership-input.js';

package/dist/schema/modules/namespace/classes/alias.d.ts

@@ -0,0 +1,31 @@
+/**
+ * One name in a Namespace: the Edge slug is the name, the target any Node. The Kernel key keeps a
+ * name to one Node for every author; Edge identity keeps a Node to one alias per Namespace. The
+ * target accepts a Class Shell does not own, so the alias detaches with its Node.
+ */
+export declare const alias: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+    readonly depth: 0;
+    readonly abstract: false;
+    readonly extends: readonly [];
+    readonly properties: never;
+    readonly source: {
+        readonly as: "namespace";
+        readonly accepts: readonly (() => {
+            readonly kind: 'node';
+            readonly abstract: never;
+            readonly depth: never;
+            readonly properties: never;
+            readonly methods: never;
+        })[];
+        readonly outgoing: "0..*";
+    };
+    readonly target: {
+        readonly as: "node";
+        readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"Node"> & {
+            readonly origin: "kernel.astrale.ai";
+        })[];
+        readonly incoming: "0..*";
+    };
+    readonly constraints: Record<never, never>;
+    readonly effectiveProperties: never;
+}>;

package/dist/schema/modules/namespace/classes/alias.js

@@ -0,0 +1,13 @@
+import { K, edgeClass } from '@astrale-os/sdk/schema';
+import { Namespace } from './namespace.js';
+/**
+ * One name in a Namespace: the Edge slug is the name, the target any Node. The Kernel key keeps a
+ * name to one Node for every author; Edge identity keeps a Node to one alias per Namespace. The
+ * target accepts a Class Shell does not own, so the alias detaches with its Node.
+ */
+export const alias = edgeClass.directed({
+    policies: { read: true, traverse: true },
+    source: { as: 'namespace', accepts: [() => Namespace], outgoing: '0..*' },
+    target: { as: 'node', accepts: [K.classes.Node], incoming: '0..*' },
+    unique: [['source', 'slug']],
+});

package/dist/schema/modules/namespace/classes/index.d.ts

@@ -0,0 +1,2 @@
+export { Namespace } from './namespace.js';
+export { alias } from './alias.js';

package/dist/schema/modules/namespace/classes/index.js

@@ -0,0 +1,2 @@
+export { Namespace } from './namespace.js';
+export { alias } from './alias.js';

package/dist/schema/modules/namespace/classes/namespace.d.ts

@@ -0,0 +1,31 @@
+/** A scope of names chosen by the instance: each `alias` Edge slug names one Node, once. */
+export declare const Namespace: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
+    readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+    readonly policies: {
+        readonly read: true;
+        readonly traverse: true;
+    };
+    readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
+    readonly methods: {
+        readonly link: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            name: string;
+            target: string;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", false, false, undefined, undefined>>;
+        readonly unlink: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            name: string;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", false, false, undefined, undefined>>;
+        readonly rename: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            name: string;
+            to: string;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", false, false, undefined, undefined>>;
+    };
+}>;

package/dist/schema/modules/namespace/classes/namespace.js

@@ -0,0 +1,10 @@
+import { K, classIcon, nodeClass } from '@astrale-os/sdk/schema';
+import { Signpost } from '@astrale-os/sdk/schema/icons';
+import { link, rename, unlink } from '../functions/index.js';
+/** A scope of names chosen by the instance: each `alias` Edge slug names one Node, once. */
+export const Namespace = nodeClass({
+    icon: classIcon.lucide(Signpost),
+    policies: { read: true, traverse: true },
+    extends: [K.classes.Named, K.classes.Descriptable],
+    methods: { link, unlink, rename },
+});

package/dist/schema/modules/namespace/core/index.d.ts

@@ -0,0 +1 @@
+export { viewsNamespace } from './views-namespace.js';

package/dist/schema/modules/namespace/core/index.js

@@ -0,0 +1 @@
+export { viewsNamespace } from './views-namespace.js';

package/dist/schema/modules/namespace/core/views-namespace.d.ts

@@ -0,0 +1,2 @@
+/** `/:shell.astrale.ai:core.views`: the names a visitor opens at `https://<instance>/v/<name>`. */
+export declare const viewsNamespace: import("@astrale-os/sdk/schema").CoreNode;

package/dist/schema/modules/namespace/core/views-namespace.js

@@ -0,0 +1,7 @@
+import { K, core } from '@astrale-os/sdk/schema';
+import { Namespace } from '../classes/namespace.js';
+/** `/:shell.astrale.ai:core.views`: the names a visitor opens at `https://<instance>/v/<name>`. */
+export const viewsNamespace = core.node(() => Namespace, {
+    [K.classes.Named.properties.name.key]: 'Views',
+    [K.classes.Descriptable.properties.description.key]: 'Aliases opened at /v/<name> on this instance.',
+});

package/dist/schema/modules/namespace/functions/index.js

@@ -0,0 +1,3 @@
+export { link } from './link.js';
+export { unlink } from './unlink.js';
+export { rename } from './rename.js';

package/dist/schema/modules/namespace/functions/link.js

@@ -0,0 +1,11 @@
+import { K, method, path } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { ownsClass, administersShellClass } from '../../../policies/index.js';
+import { namespaceName } from '../types/index.js';
+export const link = method({
+    description: 'Give one Node an alias in this Namespace.',
+    auth: 'authorized',
+    input: z.strictObject({ name: namespaceName, target: path(K.classes.Node) }),
+    output: z.object({}),
+    policy: ({ anyOf, check, self }) => anyOf(check(administersShellClass, self), check(ownsClass, self)),
+});

package/dist/schema/modules/namespace/functions/rename.js

@@ -0,0 +1,11 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { ownsClass, administersShellClass } from '../../../policies/index.js';
+import { namespaceName } from '../types/index.js';
+export const rename = method({
+    description: 'Rename one alias of this Namespace; the Node it names stays the same.',
+    auth: 'authorized',
+    input: z.strictObject({ name: namespaceName, to: namespaceName }),
+    output: z.object({}),
+    policy: ({ anyOf, check, self }) => anyOf(check(administersShellClass, self), check(ownsClass, self)),
+});

package/dist/schema/modules/namespace/functions/unlink.js

@@ -0,0 +1,11 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { ownsClass, administersShellClass } from '../../../policies/index.js';
+import { namespaceName } from '../types/index.js';
+export const unlink = method({
+    description: 'Remove one alias from this Namespace.',
+    auth: 'authorized',
+    input: z.strictObject({ name: namespaceName }),
+    output: z.object({}),
+    policy: ({ anyOf, check, self }) => anyOf(check(administersShellClass, self), check(ownsClass, self)),
+});

package/dist/schema/modules/namespace/index.d.ts

@@ -0,0 +1,2 @@
+export { Namespace, alias } from './classes/index.js';
+export { viewsNamespace } from './core/index.js';

package/dist/schema/modules/namespace/index.js

@@ -0,0 +1,2 @@
+export { Namespace, alias } from './classes/index.js';
+export { viewsNamespace } from './core/index.js';

package/dist/schema/modules/namespace/types/index.js

@@ -0,0 +1 @@
+export { namespaceName } from './namespace-name.js';

package/dist/schema/modules/namespace/types/namespace-name.js

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+/**
+ * A name as written after `/v/`. Portable value patterns match substrings only, so the exact
+ * grammar, a lower-case Edge slug, is the Namespace Actions' rule and its one refusal
+ * `INVALID_NAME`.
+ */
+export const namespaceName = z.string();

package/dist/schema/modules/user/classes/index.d.ts

@@ -0,0 +1 @@
+export { User } from './user.js';

package/dist/schema/modules/user/classes/index.js

@@ -0,0 +1 @@
+export { User } from './user.js';

package/dist/schema/modules/user/classes/user.d.ts

@@ -0,0 +1,34 @@
+import { z } from 'zod';
+export declare const User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
+    readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+    readonly inheritance: "open";
+    readonly policies: {
+        readonly read: true;
+    };
+    readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">];
+    readonly properties: {
+        readonly creationKey: z.ZodOptional<z.ZodString>;
+        readonly claimedEmail: z.ZodOptional<z.ZodString>;
+        readonly claimedName: z.ZodOptional<z.ZodString>;
+    };
+    readonly methods: {
+        readonly invite: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            user: string;
+            email: string;
+        }, {
+            readonly mode: 'value';
+            readonly value: {
+                invitationId: string;
+                user: string;
+                state: "accepted" | "cancelled" | "completed" | "expired" | "failed" | "pending" | "registered" | "registering";
+            };
+        }, "authorized", true, false, undefined, undefined>>;
+        readonly recordProfile: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            email?: string | undefined;
+            displayName?: string | undefined;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", false, false, undefined, undefined>>;
+    };
+}>;

package/dist/schema/modules/user/classes/user.js

@@ -0,0 +1,21 @@
+import { K, classIcon, nodeClass } from '@astrale-os/sdk/schema';
+import { UserRound } from '@astrale-os/sdk/schema/icons';
+import { z } from 'zod';
+import { invite, recordProfile } from '../functions/index.js';
+import { userDisplayName, userEmail } from '../types/index.js';
+// Correlation for Admin-owned creation; never an authentication credential.
+const creationKey = z.string().min(1).max(512).optional();
+export const User = nodeClass({
+    icon: classIcon.lucide(UserRound),
+    // Domains that depend on Shell extend it with the accounts they own.
+    inheritance: 'open',
+    policies: { read: true },
+    extends: [K.classes.Identity],
+    properties: {
+        creationKey,
+        // Named apart from any profile a Domain extending User declares (`email`, `displayName`…).
+        claimedEmail: userEmail.optional(),
+        claimedName: userDisplayName.optional(),
+    },
+    methods: { invite, recordProfile },
+});

package/dist/schema/modules/user/functions/index.js

@@ -0,0 +1,2 @@
+export { invite } from './invite-user.js';
+export { recordProfile } from './record-profile.js';