@astrale-domains/shell 0.1.6 → 0.1.7

package/dist/runtime.js

@@ -1,24 +1,49 @@
 import { defineRuntime } from '@astrale-os/sdk/runtime';
-import { listEntrypoints } from './functions/application/index.js';
-import { assignMember, unassignMember } from './functions/group/index.js';
+// L-SHELL-11: the legacy handler of listEntrypoints, through its owner's facade.
+import { legacyListEntrypoints } from './functions/application/index.js';
+import { disconnectDirectory } from './functions/directory/index.js';
+import { assignMember, create as createGroup, deprovision as deprovisionGroup, provision as provisionGroup, remove as deleteGroup, unassignMember, update as updateGroup, } from './functions/group/index.js';
+import { accept as acceptInvitation, cancel as cancelInvitation, resend as resendInvitation, send as sendInvitation, } from './functions/invitation/index.js';
 import { link, rename, unlink } from './functions/namespace/index.js';
-import { invite, recordProfile } from './functions/user/index.js';
-import { assignViews } from './functions/view-access/index.js';
+import { create as createUser, deactivate, deprovision as deprovisionUser, invite, 
+// L-SHELL-5, L-SHELL-14: legacy handlers, through their owner's facade.
+legacyMigrateAccounts, legacyRecordProfile, provision as provisionUser, reactivate, remove as deleteUser, update as updateUser, updateProfile, } from './functions/user/index.js';
+// L-SHELL-12: the legacy handler of assignViews, through its owner's facade.
+import { legacyAssignViews } from './functions/view-access/index.js';
 import { integrations } from './integrations/index.js';
 import { enrollmentProvider } from './providers/admin-enrollment/index.js';
 const initialize = (environment) => ({
     providers: { enrollment: enrollmentProvider(environment) },
 });
 const functions = [
+    createUser,
     invite,
+    updateUser,
+    updateProfile,
+    deactivate,
+    reactivate,
+    deleteUser,
+    provisionUser,
+    deprovisionUser,
+    createGroup,
+    updateGroup,
+    deleteGroup,
     assignMember,
     unassignMember,
-    listEntrypoints,
+    provisionGroup,
+    deprovisionGroup,
+    disconnectDirectory,
+    sendInvitation,
+    resendInvitation,
+    cancelInvitation,
+    acceptInvitation,
     link,
     unlink,
     rename,
-    assignViews,
-    recordProfile,
+    legacyRecordProfile,
+    legacyListEntrypoints,
+    legacyAssignViews,
+    legacyMigrateAccounts,
 ];
 const runtime = defineRuntime()({
     integrations,

package/dist/schema/index.d.ts

@@ -1,7 +1,10 @@
-export { ShellSchema, S, type Shell, type ShellClasses, type ShellSchemaInput } from './schema.js';
+export { ShellSchema, S, ORIGIN, type Shell, type ShellClasses, type ShellSchemaInput, } from './schema.js';
 export { User } from './modules/user/index.js';
 export type { InvitationSummary } from './modules/user/index.js';
-export { Group, member_of_group, adminGroup, applicationsGroup, memberGroup, } from './modules/group/index.js';
-export { listEntrypoints, type EntrypointEntry } from './modules/application/index.js';
+export { Group } from './modules/group/index.js';
+export { Role, atomicRoles, profileRoles, shellRoles, PROFILE_NAMES, type ProfileName, } from './modules/role/index.js';
+export { hasRole } from './policies/index.js';
+export { disconnectDirectory } from './modules/directory/index.js';
 export { Namespace, alias, viewsNamespace } from './modules/namespace/index.js';
-export { view_access, viewOnlyGroup, assignViews } from './modules/view-access/index.js';
+export { view_access, holdsViewAccess } from './modules/view-access/index.js';
+export { legacyMemberOfGroup as member_of_group, legacyAdministratorsGroup as adminGroup, legacyMembersGroup as memberGroup, } from './modules/group/index.js';

package/dist/schema/index.js

@@ -1,6 +1,10 @@
-export { ShellSchema, S } from './schema.js';
+export { ShellSchema, S, ORIGIN, } from './schema.js';
 export { User } from './modules/user/index.js';
-export { Group, member_of_group, adminGroup, applicationsGroup, memberGroup, } from './modules/group/index.js';
-export { listEntrypoints } from './modules/application/index.js';
+export { Group } from './modules/group/index.js';
+export { Role, atomicRoles, profileRoles, shellRoles, PROFILE_NAMES, } from './modules/role/index.js';
+export { hasRole } from './policies/index.js';
+export { disconnectDirectory } from './modules/directory/index.js';
 export { Namespace, alias, viewsNamespace } from './modules/namespace/index.js';
-export { view_access, viewOnlyGroup, assignViews } from './modules/view-access/index.js';
+export { view_access, holdsViewAccess } from './modules/view-access/index.js';
+// Seam L-SHELL-16: the package root's former names of the legacy Edge Class and Core groups.
+export { legacyMemberOfGroup as member_of_group, legacyAdministratorsGroup as adminGroup, legacyMembersGroup as memberGroup, } from './modules/group/index.js';

package/dist/schema/legacy/index.js

@@ -0,0 +1 @@
+export { legacyShellSchema } from './schema.js';

package/dist/schema/legacy/schema.js

@@ -0,0 +1,32 @@
+import { legacyListEntrypoints } from '../modules/application/legacy/index.js';
+import { legacyAdministratorsGroup, legacyApplicationsGroup, legacyBelongsToGroup, legacyMemberOfGroup, legacyMembersGroup, legacyOwnsMembershipGroup, legacyViewOnlyGroup, } from '../modules/group/legacy/index.js';
+import { legacyMigrateAccounts } from '../modules/user/legacy/index.js';
+import { legacyAssignViews } from '../modules/view-access/legacy/index.js';
+import { legacyAdministersShellClass, legacyIsSelf, legacyOwnsClass, legacyUsesFunction, } from '../policies/legacy/index.js';
+/**
+ * @deprecated The declarations the Shell keeps for legacy readers and callers, under their stored
+ * names so their keys stay (L-SHELL-7). Each item has its own row: L-SHELL-8, L-SHELL-10,
+ * L-SHELL-11, L-SHELL-12, L-SHELL-14. Replaced by the target Schema alone. Removal: Shell major (delivery step 5) after 1Pact step 4.
+ */
+export const legacyShellSchema = {
+    classes: { member_of_group: legacyMemberOfGroup },
+    functions: {
+        listEntrypoints: legacyListEntrypoints,
+        assignViews: legacyAssignViews,
+        legacyMigrateAccounts,
+    },
+    policies: {
+        belongsToGroup: legacyBelongsToGroup,
+        ownsClass: legacyOwnsClass,
+        administersShellClass: legacyAdministersShellClass,
+        usesFunction: legacyUsesFunction,
+        isSelf: legacyIsSelf,
+        legacyOwnsMembershipGroup,
+    },
+    core: {
+        admin: legacyAdministratorsGroup,
+        member: legacyMembersGroup,
+        applications: legacyApplicationsGroup,
+        'view-only': legacyViewOnlyGroup,
+    },
+};

package/dist/schema/modules/application/legacy/entrypoint-entry.js

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+/**
+ * @deprecated One installed Domain entrypoint: the Domain origin, its display name, and its View key
+ * (L-SHELL-11). Replaced by the visitor's own Query of Domains and Views. Removal: Shell major
+ * (delivery step 5) after 1Pact step 4.
+ */
+export const legacyEntrypointEntry = z.object({
+    origin: z.string().min(1),
+    name: z.string().min(1),
+    view: z.string().min(1),
+});

package/dist/schema/modules/application/legacy/functions/index.js

@@ -0,0 +1 @@
+export { legacyListEntrypoints } from './list-entrypoints.js';

package/dist/schema/modules/application/legacy/functions/list-entrypoints.js

@@ -0,0 +1,21 @@
+import { func } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { legacyApplicationsGroup } from '../../../group/legacy/index.js';
+import { profileRoles } from '../../../role/index.js';
+import { hasRole } from '../../../../policies/index.js';
+import { legacyEntrypointEntry } from '../entrypoint-entry.js';
+/**
+ * @deprecated The entrypoint View and name of every installed Domain that declares one, read with
+ * Shell's own authority (L-SHELL-11). Replaced by the visitor's own Query (V2). Removal: Shell major
+ * (delivery step 5) after 1Pact step 4.
+ *
+ * Its legacy `can_use` holders keep it (AM5): Administrators and Members through `workspace.member`,
+ * which the release makes them hold (AM3), and the Applications group itself.
+ */
+export const legacyListEntrypoints = func({
+    description: 'List the entrypoint View and name of every installed Domain that declares one.',
+    auth: 'authorized',
+    input: z.strictObject({}),
+    output: z.object({ entrypoints: z.array(legacyEntrypointEntry) }),
+    policy: ({ anyOf, check, ref }) => anyOf(check(hasRole, ref(profileRoles['workspace.member'])), check(hasRole, ref(legacyApplicationsGroup))),
+});

package/dist/schema/modules/application/legacy/index.js

@@ -0,0 +1,2 @@
+export { legacyListEntrypoints } from './functions/index.js';
+export { legacyEntrypointEntry } from './entrypoint-entry.js';

package/dist/schema/modules/directory/functions/disconnect-directory.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The directory is disconnected: its accounts and groups become local. `directory`, `externalId`
+ * are erased; an account its directory had frozen stays frozen.
+ */
+export declare const disconnectDirectory: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<{
+    directory: string;
+}, {
+    readonly mode: 'value';
+    readonly value: {
+        users: number;
+        groups: number;
+    };
+}, "authorized", false, false, undefined, undefined>>;

package/dist/schema/modules/directory/functions/disconnect-directory.js

@@ -0,0 +1,15 @@
+import { func } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+/**
+ * The directory is disconnected: its accounts and groups become local. `directory`, `externalId`
+ * are erased; an account its directory had frozen stays frozen.
+ */
+export const disconnectDirectory = func({
+    description: 'Make the accounts and groups of a disconnected directory local.',
+    auth: 'authorized',
+    input: z.strictObject({ directory: z.string().min(1).max(200) }),
+    output: z.object({ users: z.number().int().min(0), groups: z.number().int().min(0) }),
+    policy: ({ check, ref }) => check(hasRole, ref(atomicRoles['directory.provisioner'])),
+});

package/dist/schema/modules/directory/functions/index.d.ts

@@ -0,0 +1 @@
+export { disconnectDirectory } from './disconnect-directory.js';

package/dist/schema/modules/directory/functions/index.js

@@ -0,0 +1 @@
+export { disconnectDirectory } from './disconnect-directory.js';

package/dist/schema/modules/directory/index.d.ts

@@ -0,0 +1 @@
+export { disconnectDirectory } from './functions/index.js';

package/dist/schema/modules/directory/index.js

@@ -0,0 +1 @@
+export { disconnectDirectory } from './functions/index.js';

package/dist/schema/modules/group/classes/group-profile-link.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The profile of one group, one each way. `0..1` on both ends, as for accounts; groups stored
+ * before profiles get theirs from `legacyMigrateAccounts`. Shell deletes both together.
+ */
+export declare const group_profile: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+    readonly depth: 0;
+    readonly abstract: false;
+    readonly extends: readonly [];
+    readonly properties: never;
+    readonly source: {
+        readonly as: "group";
+        readonly accepts: readonly {
+            readonly kind: 'node';
+            readonly abstract: false;
+            readonly depth: 1;
+            readonly properties: "attributes" | "description" | "directory" | "externalId" | "frozen" | "icon" | "iss" | "name" | "sub";
+            readonly methods: "assignMember" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "update";
+        }[];
+        readonly outgoing: "0..1";
+    };
+    readonly target: {
+        readonly as: "profile";
+        readonly accepts: readonly {
+            readonly kind: 'node';
+            readonly abstract: false;
+            readonly depth: 1;
+            readonly properties: "description" | "name";
+            readonly methods: never;
+        }[];
+        readonly incoming: "0..1";
+    };
+    readonly constraints: Record<never, never>;
+    readonly effectiveProperties: never;
+}>;

package/dist/schema/modules/group/classes/group-profile-link.js

@@ -0,0 +1,21 @@
+import { edgeClass } from '@astrale-os/sdk/schema';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+import { isGroupProfileSource } from '../policies/index.js';
+import { GroupProfile } from './group-profile.js';
+import { Group } from './group.js';
+/**
+ * The profile of one group, one each way. `0..1` on both ends, as for accounts; groups stored
+ * before profiles get theirs from `legacyMigrateAccounts`. Shell deletes both together.
+ */
+export const group_profile = edgeClass.directed({
+    inheritance: 'final',
+    abstract: false,
+    description: 'The profile of this group.',
+    source: { as: 'group', accepts: [Group], outgoing: '0..1', onDelete: 'detach' },
+    target: { as: 'profile', accepts: [GroupProfile], incoming: '0..1', onDelete: 'detach' },
+    policies: {
+        read: ({ anyOf, check, ref, self }) => anyOf(check(hasRole, ref(atomicRoles['group-profile.reader'])), check(hasRole, ref(atomicRoles['group.writer'])), check(isGroupProfileSource, self)),
+        traverse: true,
+    },
+});

package/dist/schema/modules/group/classes/group-profile.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The shared part of a group: its name and description. Only Shell writes it, through its methods.
+ * It reads by `group-profile.reader`, `group.writer`, or the group's members.
+ */
+export declare const GroupProfile: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
+    readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
+    readonly inheritance: "final";
+    readonly abstract: false;
+    readonly description: "What others see of a group: name and description.";
+    readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
+    readonly policies: {
+        readonly read: ({ anyOf, check, ref, self }: import("@astrale-os/sdk/schema").ClassRuleContext) => import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").ClassRuleObject>;
+        readonly traverse: true;
+    };
+}>;

package/dist/schema/modules/group/classes/group-profile.js

@@ -0,0 +1,20 @@
+import { K, classIcon, nodeClass } from '@astrale-os/sdk/schema';
+import { UsersRound } from '@astrale-os/sdk/schema/icons';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+import { describesGroupOfSubject } from '../policies/index.js';
+/**
+ * The shared part of a group: its name and description. Only Shell writes it, through its methods.
+ * It reads by `group-profile.reader`, `group.writer`, or the group's members.
+ */
+export const GroupProfile = nodeClass({
+    icon: classIcon.lucide(UsersRound),
+    inheritance: 'final',
+    abstract: false,
+    description: 'What others see of a group: name and description.',
+    extends: [K.classes.Named, K.classes.Descriptable],
+    policies: {
+        read: ({ anyOf, check, ref, self }) => anyOf(check(hasRole, ref(atomicRoles['group-profile.reader'])), check(hasRole, ref(atomicRoles['group.writer'])), check(describesGroupOfSubject, self)),
+        traverse: true,
+    },
+});

package/dist/schema/modules/group/classes/group.d.ts

@@ -1,11 +1,65 @@
+/**
+ * A set of accounts and groups: its members hold what it holds, through Kernel `extends_with`
+ * (G1). A group reads by `group.reader` or by its members (G5); only Shell writes it.
+ */
 export declare const Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
     readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
     readonly inheritance: "open";
+    readonly abstract: false;
+    readonly description: "A set of accounts and groups; its members hold what it holds.";
+    readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">, import("@astrale-os/sdk/schema").KernelClass<"Iconable">];
+    readonly properties: {
+        directory: import("@astrale-os/sdk/schema").AuthoredProperty<{
+            readonly type: 'string';
+            readonly minLength: 1;
+            readonly maxLength: 200;
+        }, {
+            readonly required: false;
+        }>;
+        externalId: import("@astrale-os/sdk/schema").AuthoredProperty<{
+            readonly type: 'string';
+            readonly minLength: 1;
+            readonly maxLength: 200;
+        }, {
+            readonly required: false;
+        }>;
+        attributes: import("@astrale-os/sdk/schema").AuthoredProperty<{
+            readonly type: "object";
+            readonly additionalProperties: true;
+            readonly maxProperties: 64;
+        }, {
+            readonly required: false;
+        }>;
+    };
     readonly policies: {
         readonly read: true;
+        readonly traverse: true;
     };
-    readonly extends: readonly [import("@astrale-os/sdk/schema").KernelClass<"Identity">, import("@astrale-os/sdk/schema").KernelClass<"Named">, import("@astrale-os/sdk/schema").KernelClass<"Descriptable">];
     readonly methods: {
+        readonly create: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            name: string;
+            description?: string | undefined;
+            icon?: string | null | undefined;
+            attributes?: Record<string, unknown> | undefined;
+        }, {
+            readonly mode: 'value';
+            readonly value: {
+                group: string;
+            };
+        }, "authorized", true, false, undefined, undefined>>;
+        readonly update: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            name?: string | undefined;
+            description?: string | null | undefined;
+            icon?: string | null | undefined;
+            attributes?: Record<string, unknown> | null | undefined;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", false, false, undefined, undefined>>;
+        readonly delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", false, false, undefined, undefined>>;
         readonly assignMember: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             member: string;
             group: string;
@@ -20,5 +74,23 @@ export declare const Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly mode: 'value';
             readonly value: Record<string, never>;
         }, "authorized", true, false, undefined, undefined>>;
+        readonly provision: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            directory: string;
+            externalId: string;
+            name: string;
+        }, {
+            readonly mode: 'value';
+            readonly value: {
+                group: string;
+                created: boolean;
+            };
+        }, "authorized", true, false, undefined, undefined>>;
+        readonly deprovision: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            directory: string;
+            externalId: string;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", true, false, undefined, undefined>>;
     };
 }>;

package/dist/schema/modules/group/classes/group.js

@@ -1,11 +1,32 @@
-import { K, classIcon, nodeClass } from '@astrale-os/sdk/schema';
+import { classIcon, nodeClass, property } from '@astrale-os/sdk/schema';
 import { UsersRound } from '@astrale-os/sdk/schema/icons';
-import { assignMember, unassignMember } from '../functions/index.js';
+import { attributesProperty } from '../../../types/index.js';
+import { assignMember, create, deprovision, provision, remove, unassignMember, update, } from '../functions/index.js';
+// Seams L-SHELL-1, L-SHELL-2: the relaxations existing groups and extending Domains still need.
+import { LEGACY_GROUP_EXTENDS, LEGACY_GROUP_INHERITANCE, LEGACY_GROUP_READ, } from '../legacy/index.js';
+const text = { type: 'string', minLength: 1, maxLength: 200 };
+/**
+ * A set of accounts and groups: its members hold what it holds, through Kernel `extends_with`
+ * (G1). A group reads by `group.reader` or by its members (G5); only Shell writes it.
+ */
 export const Group = nodeClass({
     icon: classIcon.lucide(UsersRound),
-    // Domains that depend on Shell extend it with the groups they own.
-    inheritance: 'open',
-    policies: { read: true },
-    extends: [K.classes.Identity, K.classes.Named, K.classes.Descriptable],
-    methods: { assignMember, unassignMember },
+    inheritance: LEGACY_GROUP_INHERITANCE,
+    abstract: false,
+    description: 'A set of accounts and groups; its members hold what it holds.',
+    extends: LEGACY_GROUP_EXTENDS,
+    properties: {
+        // The WorkOS directory that provides the group, and its id there. Absent: a local group.
+        directory: property(text, { required: false }),
+        externalId: property(text, { required: false }),
+        // Free JSON a Domain or an admin attaches to the group (AM11).
+        attributes: attributesProperty(),
+    },
+    // L-SHELL-19: no unique constraint and an open read, as Domains built against the released
+    // Shell expect.
+    policies: {
+        read: LEGACY_GROUP_READ,
+        traverse: true,
+    },
+    methods: { create, update, delete: remove, assignMember, unassignMember, provision, deprovision },
 });

package/dist/schema/modules/group/classes/index.d.ts

@@ -1,2 +1,3 @@
 export { Group } from './group.js';
-export { member_of_group } from './member-of-group.js';
+export { group_profile } from './group-profile-link.js';
+export { GroupProfile } from './group-profile.js';

package/dist/schema/modules/group/classes/index.js

@@ -1,2 +1,4 @@
 export { Group } from './group.js';
-export { member_of_group } from './member-of-group.js';
+// The link first: it loads the profile, whose read rule names a policy over the link.
+export { group_profile } from './group-profile-link.js';
+export { GroupProfile } from './group-profile.js';

package/dist/schema/modules/group/functions/assign-member.js

@@ -0,0 +1,17 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+import { legacyMembershipOwnerAdmission } from '../legacy/index.js';
+import { groupMembershipInput } from '../types/index.js';
+/** Make an account or a group a member of this group: it holds what the group holds (G1–G3). */
+export const assignMember = method({
+    static: true,
+    description: 'Make an account or a group a member of a group.',
+    auth: 'authorized',
+    input: groupMembershipInput,
+    output: z.object({}),
+    policy: (context) => context.anyOf(context.check(hasRole, context.ref(atomicRoles['group.writer'])), context.check(hasRole, context.ref(atomicRoles['directory.provisioner'])), 
+    // Seam L-SHELL-9: a Domain that extends Group manages the members of its own groups.
+    legacyMembershipOwnerAdmission(context, context.input.group)),
+});

package/dist/schema/modules/group/functions/create-group.js

@@ -0,0 +1,20 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+import { attributesInput } from '../../../types/index.js';
+import { groupDescription, groupIcon, groupName, nodeReference } from '../types/index.js';
+/** Create a local group. An empty group holds nothing: creating one grants no right. */
+export const create = method({
+    static: true,
+    description: 'Create a local group.',
+    auth: 'authorized',
+    input: z.strictObject({
+        name: groupName,
+        description: groupDescription.optional(),
+        icon: groupIcon.optional(),
+        attributes: attributesInput.optional(),
+    }),
+    output: z.object({ group: nodeReference }),
+    policy: ({ check, ref }) => check(hasRole, ref(atomicRoles['group.writer'])),
+});

package/dist/schema/modules/group/functions/delete-group.js

@@ -0,0 +1,12 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+/** Withdraw this group's memberships, incoming and outgoing, and delete it (G2, G3, G4). */
+export const remove = method({
+    description: "Withdraw this group's memberships and delete it.",
+    auth: 'authorized',
+    input: z.strictObject({}),
+    output: z.object({}),
+    policy: ({ check, ref }) => check(hasRole, ref(atomicRoles['group.writer'])),
+});

package/dist/schema/modules/group/functions/deprovision-group.js

@@ -0,0 +1,14 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+import { directoryId, externalId } from '../types/index.js';
+/** Delete the group a directory deleted, with its memberships (G4). */
+export const deprovision = method({
+    static: true,
+    description: 'Delete the group a directory deleted, with its memberships.',
+    auth: 'authorized',
+    input: z.strictObject({ directory: directoryId, externalId }),
+    output: z.object({}),
+    policy: ({ check, ref }) => check(hasRole, ref(atomicRoles['directory.provisioner'])),
+});

package/dist/schema/modules/group/functions/index.js

@@ -1,2 +1,7 @@
-export { assignMember } from './assign-member-to-group.js';
-export { unassignMember } from './unassign-member-from-group.js';
+export { create } from './create-group.js';
+export { update } from './update-group.js';
+export { remove } from './delete-group.js';
+export { assignMember } from './assign-member.js';
+export { unassignMember } from './unassign-member.js';
+export { provision } from './provision-group.js';
+export { deprovision } from './deprovision-group.js';

package/dist/schema/modules/group/functions/provision-group.js

@@ -0,0 +1,14 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+import { directoryId, externalId, groupName, nodeReference } from '../types/index.js';
+/** Create or rename the group a directory provides; replaying it changes nothing (A3). */
+export const provision = method({
+    static: true,
+    description: 'Create or rename the group a directory provides.',
+    auth: 'authorized',
+    input: z.strictObject({ directory: directoryId, externalId, name: groupName }),
+    output: z.object({ group: nodeReference, created: z.boolean() }),
+    policy: ({ check, ref }) => check(hasRole, ref(atomicRoles['directory.provisioner'])),
+});

package/dist/schema/modules/group/functions/unassign-member.js

@@ -0,0 +1,17 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+import { legacyMembershipOwnerAdmission } from '../legacy/index.js';
+import { groupMembershipInput } from '../types/index.js';
+/** Withdraw one direct member from a group (G2, G3). */
+export const unassignMember = method({
+    static: true,
+    description: 'Withdraw an account or a group from a group.',
+    auth: 'authorized',
+    input: groupMembershipInput,
+    output: z.object({}),
+    policy: (context) => context.anyOf(context.check(hasRole, context.ref(atomicRoles['group.writer'])), context.check(hasRole, context.ref(atomicRoles['directory.provisioner'])), 
+    // Seam L-SHELL-9: a Domain that extends Group manages the members of its own groups.
+    legacyMembershipOwnerAdmission(context, context.input.group)),
+});

package/dist/schema/modules/group/functions/update-group.js

@@ -0,0 +1,20 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+import { attributesInput } from '../../../types/index.js';
+import { groupDescription, groupIcon, groupName } from '../types/index.js';
+/** Rename this group, describe it, or change its icon or its attributes (G2, AM11). */
+export const update = method({
+    description: 'Rename this group, describe it, or change its icon or its attributes.',
+    auth: 'authorized',
+    input: z.strictObject({
+        name: groupName.optional(),
+        description: groupDescription.nullable().optional(),
+        icon: groupIcon.optional(),
+        // Replaces them all; `null` erases them (AM11).
+        attributes: attributesInput.nullable().optional(),
+    }),
+    output: z.object({}),
+    policy: ({ check, ref }) => check(hasRole, ref(atomicRoles['group.writer'])),
+});

package/dist/schema/modules/group/index.d.ts

@@ -1,3 +1,3 @@
-export { Group, member_of_group } from './classes/index.js';
-export { adminGroup, applicationsGroup, memberGroup } from './core/index.js';
-export { belongsToGroup } from './policies/index.js';
+export { Group, GroupProfile, group_profile } from './classes/index.js';
+export { describesGroupOfSubject, isGroupProfileSource } from './policies/index.js';
+export { legacyAdministratorsGroup, legacyMemberOfGroup, legacyMembersGroup, } from './legacy/index.js';

package/dist/schema/modules/group/index.js

@@ -1,3 +1,4 @@
-export { Group, member_of_group } from './classes/index.js';
-export { adminGroup, applicationsGroup, memberGroup } from './core/index.js';
-export { belongsToGroup } from './policies/index.js';
+export { Group, GroupProfile, group_profile } from './classes/index.js';
+export { describesGroupOfSubject, isGroupProfileSource } from './policies/index.js';
+// Seam L-SHELL-16: the package root's former names, reached through this module's facade.
+export { legacyAdministratorsGroup, legacyMemberOfGroup, legacyMembersGroup, } from './legacy/index.js';

package/dist/schema/modules/group/legacy/admission.d.ts

@@ -0,0 +1,9 @@
+import type { CallablePolicyContext } from '@astrale-os/sdk/schema';
+type PolicyObject = CallablePolicyContext['input'][string];
+/**
+ * @deprecated The owner of a Group subclass changes the members of its own groups (L-SHELL-9).
+ * Replaced by `group.writer`, or by the Domain's own Identity and Roles (P5, P6). Removal: Shell
+ * major (delivery step 5) after 1Pact step 4.
+ */
+export declare function legacyMembershipOwnerAdmission(context: CallablePolicyContext, group: PolicyObject): import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").PolicyCheckObject>;
+export {};