@astrale-domains/shell 0.1.5 → 0.1.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (301) hide show
  1. package/README.md +73 -173
  2. package/dist/domain.d.ts +477 -31
  3. package/dist/domain.js +87 -78
  4. package/dist/functions/application/index.js +2 -1
  5. package/dist/functions/application/legacy/index.js +1 -0
  6. package/dist/functions/application/legacy/list-entrypoints.js +8 -0
  7. package/dist/functions/authority/capabilities.js +1 -0
  8. package/dist/functions/authority/composition.js +47 -0
  9. package/dist/functions/authority/index.js +2 -0
  10. package/dist/functions/authority/roles.js +98 -0
  11. package/dist/functions/directory/disconnect-directory.js +35 -0
  12. package/dist/functions/directory/index.js +1 -0
  13. package/dist/functions/group/change-group-membership.js +43 -9
  14. package/dist/functions/group/create-group.js +23 -0
  15. package/dist/functions/group/delete-group.js +33 -0
  16. package/dist/functions/group/deprovision-group.js +27 -0
  17. package/dist/functions/group/group-errors.js +43 -0
  18. package/dist/functions/group/group-membership-errors.js +2 -0
  19. package/dist/functions/group/group.js +51 -0
  20. package/dist/functions/group/index.js +8 -2
  21. package/dist/functions/group/legacy/index.js +1 -0
  22. package/dist/functions/group/legacy/membership.js +60 -0
  23. package/dist/functions/group/membership-laws.js +40 -0
  24. package/dist/functions/group/provision-group.js +33 -0
  25. package/dist/functions/group/update-group.js +55 -0
  26. package/dist/functions/invitation/index.js +2 -0
  27. package/dist/functions/invitation/invitation-errors.js +13 -0
  28. package/dist/functions/invitation/invitation-methods.js +41 -0
  29. package/dist/functions/invitation/send-invitation.js +81 -0
  30. package/dist/functions/user/account.js +35 -0
  31. package/dist/functions/user/create-user.js +45 -0
  32. package/dist/functions/user/deactivate-user.js +19 -0
  33. package/dist/functions/user/delete-user.js +34 -0
  34. package/dist/functions/user/deprovision-user.js +21 -0
  35. package/dist/functions/user/index.js +15 -1
  36. package/dist/functions/user/invite-errors.js +18 -0
  37. package/dist/functions/user/invite-user.js +42 -34
  38. package/dist/functions/user/legacy/claimed-account.js +11 -0
  39. package/dist/functions/user/legacy/index.js +4 -0
  40. package/dist/functions/user/legacy/invite.js +20 -0
  41. package/dist/functions/user/legacy/migrate-accounts.js +98 -0
  42. package/dist/functions/user/legacy/record-profile.js +19 -0
  43. package/dist/functions/user/protect-administrators.js +16 -0
  44. package/dist/functions/user/provision-user.js +70 -0
  45. package/dist/functions/user/reactivate-user.js +19 -0
  46. package/dist/functions/user/read-account.js +12 -0
  47. package/dist/functions/user/request-invitation.js +17 -0
  48. package/dist/functions/user/update-profile.js +22 -0
  49. package/dist/functions/user/update-user.js +68 -0
  50. package/dist/functions/user/user-errors.js +69 -0
  51. package/dist/functions/user/write-account.js +57 -0
  52. package/dist/functions/view-access/index.js +2 -1
  53. package/dist/functions/view-access/{assign-views.js → legacy/assign-views.js} +11 -7
  54. package/dist/functions/view-access/legacy/index.js +1 -0
  55. package/dist/functions/view-access/{view-access-errors.js → legacy/view-access-errors.js} +5 -1
  56. package/dist/index.d.ts +1 -1
  57. package/dist/index.js +3 -1
  58. package/dist/integrations/user-invitation/invite-user-request.d.ts +6 -0
  59. package/dist/legacy/index.js +1 -0
  60. package/dist/legacy/release.js +33 -0
  61. package/dist/mutations/composition/grant-role.js +13 -0
  62. package/dist/mutations/composition/index.js +1 -0
  63. package/dist/mutations/group/legacy/index.js +1 -0
  64. package/dist/mutations/group/legacy/membership-class.js +7 -0
  65. package/dist/mutations/group/set-group-membership.js +23 -14
  66. package/dist/mutations/identity/create-profile.js +37 -0
  67. package/dist/mutations/identity/delete-identity.js +28 -0
  68. package/dist/mutations/identity/index.js +4 -0
  69. package/dist/mutations/identity/write-account.js +109 -0
  70. package/dist/mutations/identity/write-group.js +72 -0
  71. package/dist/mutations/invitation/index.js +1 -0
  72. package/dist/mutations/invitation/write-invitation.js +62 -0
  73. package/dist/mutations/user/legacy/index.js +1 -0
  74. package/dist/mutations/user/{record-user-profile.js → legacy/record-user-profile.js} +5 -2
  75. package/dist/providers/admin-enrollment/create-admin-enrollment-provider.js +6 -3
  76. package/dist/providers/admin-enrollment/legacy/index.js +1 -0
  77. package/dist/providers/admin-enrollment/legacy/send-without-profile.js +16 -0
  78. package/dist/queries/application/legacy/index.js +1 -0
  79. package/dist/queries/application/legacy/read-installed-entrypoints.js +47 -0
  80. package/dist/queries/composition/index.js +2 -0
  81. package/dist/queries/composition/read-extensions.js +34 -0
  82. package/dist/queries/composition/read-role-nodes.js +41 -0
  83. package/dist/queries/group/index.js +1 -1
  84. package/dist/queries/group/legacy/index.js +2 -0
  85. package/dist/queries/group/legacy/read-core-groups.js +46 -0
  86. package/dist/queries/group/legacy/read-member-of-group.js +24 -0
  87. package/dist/queries/group/read-group-membership-endpoints.js +11 -0
  88. package/dist/queries/group/read-group-membership.js +6 -21
  89. package/dist/queries/identity/index.js +1 -0
  90. package/dist/queries/identity/read-identities.js +29 -0
  91. package/dist/queries/invitation/index.js +1 -0
  92. package/dist/queries/invitation/read-invitation.js +25 -0
  93. package/dist/queries/profile/index.js +1 -0
  94. package/dist/queries/profile/read-profile.js +15 -0
  95. package/dist/queries/role/index.js +1 -0
  96. package/dist/queries/role/read-role-node.js +13 -0
  97. package/dist/queries/user/legacy/index.js +1 -0
  98. package/dist/queries/user/legacy/read-user-profile.js +27 -0
  99. package/dist/runtime.d.ts +18203 -630
  100. package/dist/runtime.js +32 -7
  101. package/dist/schema/index.d.ts +7 -4
  102. package/dist/schema/index.js +8 -4
  103. package/dist/schema/legacy/index.js +1 -0
  104. package/dist/schema/legacy/schema.js +32 -0
  105. package/dist/schema/modules/application/legacy/entrypoint-entry.js +11 -0
  106. package/dist/schema/modules/application/legacy/functions/index.js +1 -0
  107. package/dist/schema/modules/application/legacy/functions/list-entrypoints.js +21 -0
  108. package/dist/schema/modules/application/legacy/index.js +2 -0
  109. package/dist/schema/modules/directory/functions/disconnect-directory.d.ts +13 -0
  110. package/dist/schema/modules/directory/functions/disconnect-directory.js +15 -0
  111. package/dist/schema/modules/directory/functions/index.d.ts +1 -0
  112. package/dist/schema/modules/directory/functions/index.js +1 -0
  113. package/dist/schema/modules/directory/index.d.ts +1 -0
  114. package/dist/schema/modules/directory/index.js +1 -0
  115. package/dist/schema/modules/group/classes/group-profile-link.d.ts +34 -0
  116. package/dist/schema/modules/group/classes/group-profile-link.js +21 -0
  117. package/dist/schema/modules/group/classes/group-profile.d.ts +15 -0
  118. package/dist/schema/modules/group/classes/group-profile.js +20 -0
  119. package/dist/schema/modules/group/classes/group.d.ts +73 -1
  120. package/dist/schema/modules/group/classes/group.js +28 -7
  121. package/dist/schema/modules/group/classes/index.d.ts +2 -1
  122. package/dist/schema/modules/group/classes/index.js +3 -1
  123. package/dist/schema/modules/group/functions/assign-member.js +17 -0
  124. package/dist/schema/modules/group/functions/create-group.js +20 -0
  125. package/dist/schema/modules/group/functions/delete-group.js +12 -0
  126. package/dist/schema/modules/group/functions/deprovision-group.js +14 -0
  127. package/dist/schema/modules/group/functions/index.js +7 -2
  128. package/dist/schema/modules/group/functions/provision-group.js +14 -0
  129. package/dist/schema/modules/group/functions/unassign-member.js +17 -0
  130. package/dist/schema/modules/group/functions/update-group.js +20 -0
  131. package/dist/schema/modules/group/index.d.ts +3 -3
  132. package/dist/schema/modules/group/index.js +4 -3
  133. package/dist/schema/modules/group/legacy/admission.d.ts +9 -0
  134. package/dist/schema/modules/group/legacy/admission.js +9 -0
  135. package/dist/schema/modules/group/legacy/classes/index.d.ts +1 -0
  136. package/dist/schema/modules/group/legacy/classes/index.js +1 -0
  137. package/dist/schema/modules/group/{classes → legacy/classes}/member-of-group.d.ts +10 -1
  138. package/dist/schema/modules/group/legacy/classes/member-of-group.js +32 -0
  139. package/dist/schema/modules/group/legacy/core-groups.d.ts +22 -0
  140. package/dist/schema/modules/group/legacy/core-groups.js +28 -0
  141. package/dist/schema/modules/group/legacy/index.d.ts +5 -0
  142. package/dist/schema/modules/group/legacy/index.js +6 -0
  143. package/dist/schema/modules/group/legacy/policies/belongs-to-group.d.ts +5 -0
  144. package/dist/schema/modules/group/legacy/policies/belongs-to-group.js +9 -0
  145. package/dist/schema/modules/group/legacy/policies/index.d.ts +2 -0
  146. package/dist/schema/modules/group/legacy/policies/index.js +2 -0
  147. package/dist/schema/modules/group/legacy/policies/owns-membership-group.d.ts +6 -0
  148. package/dist/schema/modules/group/legacy/policies/owns-membership-group.js +12 -0
  149. package/dist/schema/modules/group/legacy/relaxations.d.ts +21 -0
  150. package/dist/schema/modules/group/legacy/relaxations.js +27 -0
  151. package/dist/schema/modules/group/policies/describes-group-of-subject.d.ts +2 -0
  152. package/dist/schema/modules/group/policies/describes-group-of-subject.js +7 -0
  153. package/dist/schema/modules/group/policies/index.d.ts +2 -1
  154. package/dist/schema/modules/group/policies/index.js +2 -1
  155. package/dist/schema/modules/group/policies/is-group-profile-source.d.ts +2 -0
  156. package/dist/schema/modules/group/policies/is-group-profile-source.js +6 -0
  157. package/dist/schema/modules/group/types/group.js +10 -0
  158. package/dist/schema/modules/group/types/index.js +1 -0
  159. package/dist/schema/modules/invitation/classes/index.js +2 -0
  160. package/dist/schema/modules/invitation/classes/invitation-user.js +17 -0
  161. package/dist/schema/modules/invitation/classes/invitation.js +30 -0
  162. package/dist/schema/modules/invitation/functions/accept.js +16 -0
  163. package/dist/schema/modules/invitation/functions/cancel.js +12 -0
  164. package/dist/schema/modules/invitation/functions/index.js +4 -0
  165. package/dist/schema/modules/invitation/functions/resend.js +12 -0
  166. package/dist/schema/modules/invitation/functions/send.js +20 -0
  167. package/dist/schema/modules/invitation/index.js +2 -0
  168. package/dist/schema/modules/invitation/types/index.js +1 -0
  169. package/dist/schema/modules/invitation/types/invitation-status.js +5 -0
  170. package/dist/schema/modules/namespace/classes/alias.d.ts +2 -1
  171. package/dist/schema/modules/namespace/classes/alias.js +11 -2
  172. package/dist/schema/modules/namespace/functions/link.js +3 -2
  173. package/dist/schema/modules/namespace/functions/rename.js +3 -2
  174. package/dist/schema/modules/namespace/functions/unlink.js +3 -2
  175. package/dist/schema/modules/role/classes/index.d.ts +1 -0
  176. package/dist/schema/modules/role/classes/index.js +1 -0
  177. package/dist/schema/modules/role/classes/role.d.ts +16 -0
  178. package/dist/schema/modules/role/classes/role.js +19 -0
  179. package/dist/schema/modules/role/core/index.d.ts +1 -0
  180. package/dist/schema/modules/role/core/index.js +1 -0
  181. package/dist/schema/modules/role/core/roles.d.ts +37 -0
  182. package/dist/schema/modules/role/core/roles.js +30 -0
  183. package/dist/schema/modules/role/index.d.ts +2 -0
  184. package/dist/schema/modules/role/index.js +2 -0
  185. package/dist/schema/modules/user/classes/index.d.ts +2 -0
  186. package/dist/schema/modules/user/classes/index.js +3 -0
  187. package/dist/schema/modules/user/classes/user-profile-link.d.ts +35 -0
  188. package/dist/schema/modules/user/classes/user-profile-link.js +22 -0
  189. package/dist/schema/modules/user/classes/user-profile.d.ts +41 -0
  190. package/dist/schema/modules/user/classes/user-profile.js +30 -0
  191. package/dist/schema/modules/user/classes/user.d.ts +133 -8
  192. package/dist/schema/modules/user/classes/user.js +46 -15
  193. package/dist/schema/modules/user/functions/create-user.js +21 -0
  194. package/dist/schema/modules/user/functions/deactivate-user.js +12 -0
  195. package/dist/schema/modules/user/functions/delete-user.js +12 -0
  196. package/dist/schema/modules/user/functions/deprovision-user.js +14 -0
  197. package/dist/schema/modules/user/functions/index.js +8 -1
  198. package/dist/schema/modules/user/functions/invite-user.js +23 -4
  199. package/dist/schema/modules/user/functions/provision-user.js +25 -0
  200. package/dist/schema/modules/user/functions/reactivate-user.js +12 -0
  201. package/dist/schema/modules/user/functions/update-profile.js +16 -0
  202. package/dist/schema/modules/user/functions/update-user.js +22 -0
  203. package/dist/schema/modules/user/index.d.ts +2 -1
  204. package/dist/schema/modules/user/index.js +2 -1
  205. package/dist/schema/modules/user/legacy/account-properties.js +24 -0
  206. package/dist/schema/modules/user/legacy/functions/index.js +2 -0
  207. package/dist/schema/modules/user/legacy/functions/migrate-accounts.js +23 -0
  208. package/dist/schema/modules/user/legacy/functions/record-profile.js +18 -0
  209. package/dist/schema/modules/user/legacy/index.js +5 -0
  210. package/dist/schema/modules/user/legacy/invite.js +15 -0
  211. package/dist/schema/modules/user/legacy/relaxations.js +37 -0
  212. package/dist/schema/modules/user/policies/describes-subject.d.ts +2 -0
  213. package/dist/schema/modules/user/policies/describes-subject.js +7 -0
  214. package/dist/schema/modules/user/policies/index.d.ts +2 -0
  215. package/dist/schema/modules/user/policies/index.js +2 -0
  216. package/dist/schema/modules/user/policies/is-profile-source.d.ts +2 -0
  217. package/dist/schema/modules/user/policies/is-profile-source.js +6 -0
  218. package/dist/schema/modules/user/types/account.d.ts +12 -0
  219. package/dist/schema/modules/user/types/account.js +12 -0
  220. package/dist/schema/modules/user/types/index.d.ts +1 -1
  221. package/dist/schema/modules/user/types/index.js +1 -1
  222. package/dist/schema/modules/view-access/classes/view-access.d.ts +7 -11
  223. package/dist/schema/modules/view-access/classes/view-access.js +17 -12
  224. package/dist/schema/modules/view-access/index.d.ts +1 -2
  225. package/dist/schema/modules/view-access/index.js +1 -2
  226. package/dist/schema/modules/view-access/legacy/functions/assign-views.js +22 -0
  227. package/dist/schema/modules/view-access/legacy/functions/index.js +1 -0
  228. package/dist/schema/modules/view-access/legacy/index.js +2 -0
  229. package/dist/schema/modules/view-access/legacy/view-assignment.js +24 -0
  230. package/dist/schema/modules/view-access/policies/holds-view-access.d.ts +2 -0
  231. package/dist/schema/modules/view-access/policies/holds-view-access.js +5 -0
  232. package/dist/schema/modules/view-access/policies/index.d.ts +1 -0
  233. package/dist/schema/modules/view-access/policies/index.js +1 -0
  234. package/dist/schema/policies/has-role.d.ts +6 -0
  235. package/dist/schema/policies/has-role.js +9 -0
  236. package/dist/schema/policies/index.d.ts +1 -0
  237. package/dist/schema/policies/index.js +1 -4
  238. package/dist/schema/policies/legacy/administers-shell-class.js +21 -0
  239. package/dist/schema/policies/legacy/index.js +4 -0
  240. package/dist/schema/policies/legacy/is-self.js +9 -0
  241. package/dist/schema/policies/legacy/owns-class.js +12 -0
  242. package/dist/schema/policies/legacy/uses-function.js +9 -0
  243. package/dist/schema/schema.d.ts +1849 -118
  244. package/dist/schema/schema.js +35 -15
  245. package/dist/schema/types/attributes.js +15 -0
  246. package/dist/schema/types/index.js +1 -0
  247. package/dist/utils/attributes/attributes.js +12 -0
  248. package/dist/utils/attributes/index.js +1 -0
  249. package/dist/utils/index.js +3 -0
  250. package/dist/utils/same-json/index.js +1 -0
  251. package/dist/utils/same-json/same-json.js +9 -0
  252. package/package.json +4 -4
  253. package/dist/functions/application/list-entrypoints.js +0 -6
  254. package/dist/functions/user/record-profile.js +0 -18
  255. package/dist/mutations/user/index.js +0 -1
  256. package/dist/queries/application/index.js +0 -1
  257. package/dist/queries/application/read-installed-entrypoints.js +0 -28
  258. package/dist/queries/user/index.js +0 -1
  259. package/dist/queries/user/read-user-profile.js +0 -9
  260. package/dist/schema/modules/application/functions/index.d.ts +0 -1
  261. package/dist/schema/modules/application/functions/index.js +0 -1
  262. package/dist/schema/modules/application/functions/list-entrypoints.d.ts +0 -15
  263. package/dist/schema/modules/application/functions/list-entrypoints.js +0 -16
  264. package/dist/schema/modules/application/index.d.ts +0 -2
  265. package/dist/schema/modules/application/index.js +0 -2
  266. package/dist/schema/modules/application/types/entrypoint-entry.d.ts +0 -8
  267. package/dist/schema/modules/application/types/entrypoint-entry.js +0 -7
  268. package/dist/schema/modules/application/types/index.d.ts +0 -1
  269. package/dist/schema/modules/application/types/index.js +0 -1
  270. package/dist/schema/modules/group/classes/member-of-group.js +0 -12
  271. package/dist/schema/modules/group/core/administrators-group.d.ts +0 -1
  272. package/dist/schema/modules/group/core/administrators-group.js +0 -6
  273. package/dist/schema/modules/group/core/applications-group.d.ts +0 -1
  274. package/dist/schema/modules/group/core/applications-group.js +0 -6
  275. package/dist/schema/modules/group/core/index.d.ts +0 -3
  276. package/dist/schema/modules/group/core/index.js +0 -3
  277. package/dist/schema/modules/group/core/members-group.d.ts +0 -1
  278. package/dist/schema/modules/group/core/members-group.js +0 -6
  279. package/dist/schema/modules/group/functions/assign-member-to-group.js +0 -11
  280. package/dist/schema/modules/group/functions/unassign-member-from-group.js +0 -11
  281. package/dist/schema/modules/group/policies/belongs-to-group.d.ts +0 -1
  282. package/dist/schema/modules/group/policies/belongs-to-group.js +0 -5
  283. package/dist/schema/modules/user/functions/record-profile.js +0 -14
  284. package/dist/schema/modules/user/types/user-profile.d.ts +0 -7
  285. package/dist/schema/modules/user/types/user-profile.js +0 -7
  286. package/dist/schema/modules/view-access/core/index.d.ts +0 -1
  287. package/dist/schema/modules/view-access/core/index.js +0 -1
  288. package/dist/schema/modules/view-access/core/view-only-group.d.ts +0 -5
  289. package/dist/schema/modules/view-access/core/view-only-group.js +0 -10
  290. package/dist/schema/modules/view-access/functions/assign-views.d.ts +0 -16
  291. package/dist/schema/modules/view-access/functions/assign-views.js +0 -17
  292. package/dist/schema/modules/view-access/functions/index.d.ts +0 -1
  293. package/dist/schema/modules/view-access/functions/index.js +0 -1
  294. package/dist/schema/modules/view-access/types/index.js +0 -1
  295. package/dist/schema/modules/view-access/types/view-assignment.js +0 -16
  296. package/dist/schema/policies/administers-shell-class.js +0 -11
  297. package/dist/schema/policies/is-self.js +0 -5
  298. package/dist/schema/policies/owns-class.js +0 -7
  299. package/dist/schema/policies/uses-function.js +0 -5
  300. /package/dist/functions/group/{assign-member-to-group.js → assign-member.js} +0 -0
  301. /package/dist/functions/group/{unassign-member-from-group.js → unassign-member.js} +0 -0
@@ -0,0 +1,41 @@
1
+ import { defineQuery, Query, queryResult, } from '@astrale-os/sdk/query';
2
+ const CORE = 'core.';
3
+ /** Each Core Node of a Kernel Role Class, named by its `of_domain` locator. */
4
+ export const readRoleNodes = defineQuery()((domain) => {
5
+ const kernel = domain.dependencies.kernel.classes;
6
+ const member = kernel.of_domain.properties.member.key;
7
+ const origin = kernel.Domain.properties.origin.key;
8
+ return {
9
+ id: 'shell.composition.roles',
10
+ page: { size: 256 },
11
+ pagination: { maximumPages: 16 },
12
+ build: () => {
13
+ const locator = Query.from({ nodes: [kernel.Role] }).expand({
14
+ via: [kernel.of_domain],
15
+ direction: 'outgoing',
16
+ });
17
+ return locator.select({
18
+ kind: 'edges',
19
+ binding: locator.edge,
20
+ projection: { edge: 'value', source: 'reference', target: 'value' },
21
+ });
22
+ },
23
+ project(pages) {
24
+ const byKey = new Map();
25
+ for (const page of pages) {
26
+ for (const item of queryResult.edgeItems(page, 'Shell Roles')) {
27
+ if (item.edge.kind !== 'value' || item.source.kind !== 'reference')
28
+ continue;
29
+ if (item.target.kind !== 'value')
30
+ continue;
31
+ const key = item.edge.value.props[member];
32
+ const owner = item.target.value.props[origin];
33
+ if (typeof key !== 'string' || !key.startsWith(CORE) || typeof owner !== 'string')
34
+ continue;
35
+ byKey.set(`${owner}:${key.slice(CORE.length)}`, item.source.value.id);
36
+ }
37
+ }
38
+ return { byKey, ids: new Set(byKey.values()) };
39
+ },
40
+ };
41
+ });
@@ -1,2 +1,2 @@
1
1
  export { readGroupMembership, } from './read-group-membership.js';
2
- export { readGroupMembershipEndpoints } from './read-group-membership-endpoints.js';
2
+ export { readGroupMembershipEndpoints, } from './read-group-membership-endpoints.js';
@@ -0,0 +1,2 @@
1
+ export { legacyReadMemberOfGroup } from './read-member-of-group.js';
2
+ export { legacyReadCoreGroups } from './read-core-groups.js';
@@ -0,0 +1,46 @@
1
+ import { defineQuery, Query, queryResult, } from '@astrale-os/sdk/query';
2
+ const CORE = 'core.';
3
+ /**
4
+ * @deprecated Shell's own Core groups, each named by its `of_domain` locator (`core.<name>`)
5
+ * (L-SHELL-7): the legacy groups a membership write keeps `member_of_group` for. Replaced by the
6
+ * profile Roles. Removal: Shell major (delivery step 5) after 1Pact step 4.
7
+ */
8
+ export const legacyReadCoreGroups = defineQuery()((domain) => {
9
+ const kernel = domain.dependencies.kernel.classes;
10
+ const member = kernel.of_domain.properties.member.key;
11
+ const origin = kernel.Domain.properties.origin.key;
12
+ return {
13
+ id: 'shell.access.core-groups',
14
+ page: { size: 256 },
15
+ pagination: { maximumPages: 8 },
16
+ build: () => {
17
+ const locator = Query.from({ nodes: [domain.classes.Group] }).expand({
18
+ via: [kernel.of_domain],
19
+ direction: 'outgoing',
20
+ });
21
+ return locator.select({
22
+ kind: 'edges',
23
+ binding: locator.edge,
24
+ projection: { edge: 'value', source: 'reference', target: 'value' },
25
+ });
26
+ },
27
+ project(pages) {
28
+ const groups = {};
29
+ for (const page of pages) {
30
+ for (const item of queryResult.edgeItems(page, 'Shell Core groups')) {
31
+ if (item.edge.kind !== 'value' || item.source.kind !== 'reference')
32
+ continue;
33
+ if (item.target.kind !== 'value')
34
+ continue;
35
+ if (item.target.value.props[origin] !== domain.origin)
36
+ continue;
37
+ const key = item.edge.value.props[member];
38
+ if (typeof key === 'string' && key.startsWith(CORE)) {
39
+ groups[key.slice(CORE.length)] = item.source.value.id;
40
+ }
41
+ }
42
+ }
43
+ return groups;
44
+ },
45
+ };
46
+ });
@@ -0,0 +1,24 @@
1
+ import { Query, defineQuery, queryResult } from '@astrale-os/sdk/query';
2
+ /**
3
+ * @deprecated The legacy `member_of_group` Edge from the member to the group, kept whole as a guard
4
+ * (L-SHELL-8). Replaced by `readGroupMembership` (`extends_with`). Removal: Shell major (delivery
5
+ * step 5) after 1Pact step 4.
6
+ */
7
+ export const legacyReadMemberOfGroup = defineQuery()((domain) => ({
8
+ id: 'shell.group.membership.legacy',
9
+ build({ member, group }) {
10
+ const edges = Query.from({ edges: [domain.classes.member_of_group] });
11
+ return edges
12
+ .filter({ binding: edges.source, predicate: { kind: 'identity.equal', identity: member } })
13
+ .filter({ binding: edges.target, predicate: { kind: 'identity.equal', identity: group } })
14
+ .select({
15
+ kind: 'edges',
16
+ projection: { edge: 'reference', source: 'reference', target: 'reference' },
17
+ });
18
+ },
19
+ pagination: { maximumPages: 2 },
20
+ project(pages, _input, { ast, complete }) {
21
+ const present = pages.some((page) => queryResult.edgeItems(page, 'Shell legacy membership').length > 0);
22
+ return { present, guard: { query: ast, equals: complete } };
23
+ },
24
+ }));
@@ -1,5 +1,6 @@
1
1
  import { Path } from '@astrale-os/sdk/graph/path';
2
2
  import { defineQuery, Query, queryResult, } from '@astrale-os/sdk/query';
3
+ /** Both membership endpoints, kept whole as a guard: neither is replaced while Shell decides. */
3
4
  export const readGroupMembershipEndpoints = defineQuery()(() => ({
4
5
  id: 'shell.group.membership.endpoints',
5
6
  page: { size: 2 },
@@ -10,8 +11,18 @@ export const readGroupMembershipEndpoints = defineQuery()(() => ({
10
11
  }),
11
12
  project(pages, input, { ast, complete }) {
12
13
  const ids = queryResult.completeNodeIds(pages, 'Shell membership endpoints');
14
+ let groupClass;
15
+ for (const page of pages) {
16
+ if (page.kind !== 'nodes')
17
+ continue;
18
+ for (const item of page.nodes) {
19
+ if (item.kind === 'reference' && item.value.id === input.group)
20
+ groupClass = item.value.class;
21
+ }
22
+ }
13
23
  return {
14
24
  visible: ids.includes(input.member) && ids.includes(input.group),
25
+ ...(groupClass === undefined ? {} : { groupClass }),
15
26
  guard: { query: ast, equals: complete },
16
27
  };
17
28
  },
@@ -1,35 +1,20 @@
1
1
  import { Query, defineQuery, queryResult, } from '@astrale-os/sdk/query';
2
+ /** The `extends_with` Edge from the member to the group: the membership itself (G1). */
2
3
  export const readGroupMembership = defineQuery()((domain) => ({
3
4
  id: 'shell.group.membership.read',
4
5
  build({ member, group }) {
5
- const edges = Query.from({
6
- edges: [domain.classes.member_of_group, domain.dependencies.kernel.classes.extends_with],
7
- });
6
+ const edges = Query.from({ edges: [domain.dependencies.kernel.classes.extends_with] });
8
7
  return edges
9
8
  .filter({ binding: edges.source, predicate: { kind: 'identity.equal', identity: member } })
10
9
  .filter({ binding: edges.target, predicate: { kind: 'identity.equal', identity: group } })
11
10
  .select({
12
11
  kind: 'edges',
13
- projection: { edge: 'value', source: 'reference', target: 'reference' },
12
+ projection: { edge: 'reference', source: 'reference', target: 'reference' },
14
13
  });
15
14
  },
16
- pagination: { maximumPages: 4 },
15
+ pagination: { maximumPages: 2 },
17
16
  project(pages, _input, { ast, complete }) {
18
- let membership = false;
19
- let authority = false;
20
- for (const page of pages) {
21
- for (const item of queryResult.edgeItems(page, 'Shell group membership')) {
22
- if (item.edge.kind !== 'value')
23
- throw new TypeError('Expected an Edge value.');
24
- if (item.edge.value.class === domain.classes.member_of_group.key)
25
- membership = true;
26
- else if (item.edge.value.class === domain.dependencies.kernel.classes.extends_with.key) {
27
- authority = true;
28
- }
29
- else
30
- throw new TypeError('Unexpected Edge Class.');
31
- }
32
- }
33
- return { membership, authority, guard: { query: ast, equals: complete } };
17
+ const present = pages.some((page) => queryResult.edgeItems(page, 'Shell group membership').length > 0);
18
+ return { present, guard: { query: ast, equals: complete } };
34
19
  },
35
20
  }));
@@ -0,0 +1 @@
1
+ export { readIdentities } from './read-identities.js';
@@ -0,0 +1,29 @@
1
+ import { Path } from '@astrale-os/sdk/graph/path';
2
+ import { defineQuery, Query, queryResult, } from '@astrale-os/sdk/query';
3
+ /**
4
+ * The accounts or groups a selection names that Shell reads, as stored: a Class extent includes a
5
+ * foreign subclass, and a Node of another Class is left out.
6
+ */
7
+ export const readIdentities = defineQuery()((domain) => ({
8
+ id: 'shell.identities.read',
9
+ page: { size: 256 },
10
+ pagination: { maximumPages: 16 },
11
+ build(selection) {
12
+ const selected = domain.classes[selection.kind];
13
+ if ('ids' in selection) {
14
+ const [first, ...others] = selection.ids;
15
+ return Query.from({ nodes: [Path.id(first), ...others.map((id) => Path.id(id))] })
16
+ .filter({ class: selected })
17
+ .select({ kind: 'nodes', projection: { kind: 'value' } });
18
+ }
19
+ let query = Query.from({ nodes: [selected] });
20
+ for (const [name, value] of Object.entries(selection.where)) {
21
+ const property = selected.properties[name];
22
+ if (property === undefined)
23
+ throw new TypeError(`${selection.kind} has no ${name}.`);
24
+ query = query.filter({ predicate: { kind: 'property.equal', property: property.key, value } });
25
+ }
26
+ return query.select({ kind: 'nodes', projection: { kind: 'value' } });
27
+ },
28
+ project: (pages) => queryResult.completeNodeValues(pages, 'Shell identities'),
29
+ }));
@@ -0,0 +1 @@
1
+ export { readInvitation } from './read-invitation.js';
@@ -0,0 +1,25 @@
1
+ import { Path } from '@astrale-os/sdk/graph/path';
2
+ import { defineQuery, Query, queryResult, } from '@astrale-os/sdk/query';
3
+ /** One invitation, or undefined when there is none the reader reads. */
4
+ export const readInvitation = defineQuery()((domain) => ({
5
+ id: 'shell.invitation.read',
6
+ page: { size: 1 },
7
+ pagination: { maximumPages: 1 },
8
+ build: ({ invitation }) => Query.from({ nodes: [Path.id(invitation)] }).select({
9
+ kind: 'nodes',
10
+ projection: { kind: 'value' },
11
+ }),
12
+ project: (pages) => {
13
+ const node = queryResult.completeNodeValues(pages, 'Shell invitation')[0];
14
+ if (node === undefined)
15
+ return undefined;
16
+ const props = node.props;
17
+ const keys = domain.classes.Invitation.properties;
18
+ return {
19
+ id: node.id,
20
+ status: String(props[keys.status.key]),
21
+ execution: String(props[keys.execution.key]),
22
+ round: Number(props[keys.round.key] ?? 0),
23
+ };
24
+ },
25
+ }));
@@ -0,0 +1 @@
1
+ export { readProfile } from './read-profile.js';
@@ -0,0 +1,15 @@
1
+ import { Path } from '@astrale-os/sdk/graph/path';
2
+ import { defineQuery, Query, queryResult, } from '@astrale-os/sdk/query';
3
+ /** The profile Node of one account or group, or undefined for one stored before profiles. */
4
+ export const readProfile = defineQuery()((domain) => ({
5
+ id: 'shell.profile.read',
6
+ page: { size: 1 },
7
+ pagination: { maximumPages: 1 },
8
+ build: ({ kind, node }) => Query.from({ nodes: [Path.id(node)] })
9
+ .expand({
10
+ via: [kind === 'User' ? domain.classes.user_profile : domain.classes.group_profile],
11
+ direction: 'outgoing',
12
+ })
13
+ .select({ kind: 'nodes', projection: { kind: 'value' } }),
14
+ project: (pages) => queryResult.completeNodeValues(pages, 'Shell profile')[0]?.id,
15
+ }));
@@ -0,0 +1 @@
1
+ export { readRoleNode } from './read-role-node.js';
@@ -0,0 +1,13 @@
1
+ import { defineQuery, Query, queryResult, } from '@astrale-os/sdk/query';
2
+ /**
3
+ * Whether the reader reads one Role Node. A Shell Role reads by its holders and by Kernel
4
+ * `authority.reader` (R7), so read under a caller's authority it tells whether the Kernel finds the
5
+ * Role in that caller's live composition, at any depth; Root reads every Role.
6
+ */
7
+ export const readRoleNode = defineQuery()(() => ({
8
+ id: 'shell.role.read',
9
+ page: { size: 1 },
10
+ pagination: { maximumPages: 1 },
11
+ build: ({ role }) => Query.from({ nodes: [role] }).select({ kind: 'nodes', projection: { kind: 'value' } }),
12
+ project: (pages) => queryResult.completeNodeValues(pages, 'Shell Role').length === 1,
13
+ }));
@@ -0,0 +1 @@
1
+ export { legacyReadUserProfile } from './read-user-profile.js';
@@ -0,0 +1,27 @@
1
+ import { Path } from '@astrale-os/sdk/graph/path';
2
+ import { defineQuery, Query, queryResult, } from '@astrale-os/sdk/query';
3
+ /**
4
+ * @deprecated The email and display name one account recorded about itself (L-SHELL-5). Replaced
5
+ * by the account's `email` and `name`. Removal: Shell major (delivery step 5) after 1Pact step 4.
6
+ */
7
+ export const legacyReadUserProfile = defineQuery()((domain) => {
8
+ const { claimedEmail: email, claimedName: displayName } = domain.classes.User.properties;
9
+ return {
10
+ id: 'shell.user.profile',
11
+ page: { size: 1 },
12
+ pagination: { maximumPages: 1 },
13
+ build: ({ user }) => Query.from({ nodes: [Path.id(user)] }).select({
14
+ kind: 'nodes',
15
+ projection: { kind: 'value' },
16
+ }),
17
+ project(pages) {
18
+ const [node] = queryResult.completeNodeValues(pages, 'Shell user profile');
19
+ const text = (value) => (typeof value === 'string' ? value : undefined);
20
+ const recorded = {
21
+ email: text(node?.props[email.key]),
22
+ displayName: text(node?.props[displayName.key]),
23
+ };
24
+ return Object.fromEntries(Object.entries(recorded).filter(([, value]) => value !== undefined));
25
+ },
26
+ };
27
+ });