@astrale-domains/shell 0.1.7 → 0.1.8

package/dist/runtime.js

@@ -2,7 +2,7 @@ import { defineRuntime } from '@astrale-os/sdk/runtime';
 // L-SHELL-11: the legacy handler of listEntrypoints, through its owner's facade.
 import { legacyListEntrypoints } from './functions/application/index.js';
 import { disconnectDirectory } from './functions/directory/index.js';
-import { assignMember, create as createGroup, deprovision as deprovisionGroup, provision as provisionGroup, remove as deleteGroup, unassignMember, update as updateGroup, } from './functions/group/index.js';
+import { assignMember, assignMembers, create as createGroup, deprovision as deprovisionGroup, provision as provisionGroup, remove as deleteGroup, unassignMember, unassignMembers, update as updateGroup, } from './functions/group/index.js';
 import { accept as acceptInvitation, cancel as cancelInvitation, resend as resendInvitation, send as sendInvitation, } from './functions/invitation/index.js';
 import { link, rename, unlink } from './functions/namespace/index.js';
 import { create as createUser, deactivate, deprovision as deprovisionUser, invite, 
@@ -30,6 +30,8 @@ const functions = [
     deleteGroup,
     assignMember,
     unassignMember,
+    assignMembers,
+    unassignMembers,
     provisionGroup,
     deprovisionGroup,
     disconnectDirectory,

package/dist/schema/modules/application/legacy/functions/list-entrypoints.js

@@ -1,7 +1,7 @@
 import { func } from '@astrale-os/sdk/schema';
 import { z } from 'zod';
 import { legacyApplicationsGroup } from '../../../group/legacy/index.js';
-import { profileRoles } from '../../../role/index.js';
+import { atomicRoles } from '../../../role/index.js';
 import { hasRole } from '../../../../policies/index.js';
 import { legacyEntrypointEntry } from '../entrypoint-entry.js';
 /**
@@ -9,13 +9,14 @@ import { legacyEntrypointEntry } from '../entrypoint-entry.js';
  * Shell's own authority (L-SHELL-11). Replaced by the visitor's own Query (V2). Removal: Shell major
  * (delivery step 5) after 1Pact step 4.
  *
- * Its legacy `can_use` holders keep it (AM5): Administrators and Members through `workspace.member`,
- * which the release makes them hold (AM3), and the Applications group itself.
+ * Whoever opens the OS view lists its applications: holders of `os.viewer`, which `workspace.member`
+ * holds through the release, so its legacy `can_use` holders keep it (AM5): Administrators and
+ * Members through their profiles (AM3), and the Applications group itself.
  */
 export const legacyListEntrypoints = func({
     description: 'List the entrypoint View and name of every installed Domain that declares one.',
     auth: 'authorized',
     input: z.strictObject({}),
     output: z.object({ entrypoints: z.array(legacyEntrypointEntry) }),
-    policy: ({ anyOf, check, ref }) => anyOf(check(hasRole, ref(profileRoles['workspace.member'])), check(hasRole, ref(legacyApplicationsGroup))),
+    policy: ({ anyOf, check, ref }) => anyOf(check(hasRole, ref(atomicRoles['os.viewer'])), check(hasRole, ref(legacyApplicationsGroup))),
 });

package/dist/schema/modules/group/classes/group-profile-link.d.ts

@@ -14,7 +14,7 @@ export declare const group_profile: import("@astrale-os/sdk/schema").DirectedEdg
             readonly abstract: false;
             readonly depth: 1;
             readonly properties: "attributes" | "description" | "directory" | "externalId" | "frozen" | "icon" | "iss" | "name" | "sub";
-            readonly methods: "assignMember" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "update";
+            readonly methods: "assignMember" | "assignMembers" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "unassignMembers" | "update";
         }[];
         readonly outgoing: "0..1";
     };

package/dist/schema/modules/group/classes/group.d.ts

@@ -74,6 +74,20 @@ export declare const Group: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly mode: 'value';
             readonly value: Record<string, never>;
         }, "authorized", true, false, undefined, undefined>>;
+        readonly assignMembers: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            members: string[];
+            group: string;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", true, false, undefined, undefined>>;
+        readonly unassignMembers: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+            members: string[];
+            group: string;
+        }, {
+            readonly mode: 'value';
+            readonly value: Record<string, never>;
+        }, "authorized", true, false, undefined, undefined>>;
         readonly provision: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             directory: string;
             externalId: string;

package/dist/schema/modules/group/classes/group.js

@@ -1,7 +1,7 @@
 import { classIcon, nodeClass, property } from '@astrale-os/sdk/schema';
 import { UsersRound } from '@astrale-os/sdk/schema/icons';
 import { attributesProperty } from '../../../types/index.js';
-import { assignMember, create, deprovision, provision, remove, unassignMember, update, } from '../functions/index.js';
+import { assignMember, assignMembers, create, deprovision, provision, remove, unassignMember, unassignMembers, update, } from '../functions/index.js';
 // Seams L-SHELL-1, L-SHELL-2: the relaxations existing groups and extending Domains still need.
 import { LEGACY_GROUP_EXTENDS, LEGACY_GROUP_INHERITANCE, LEGACY_GROUP_READ, } from '../legacy/index.js';
 const text = { type: 'string', minLength: 1, maxLength: 200 };
@@ -28,5 +28,15 @@ export const Group = nodeClass({
         read: LEGACY_GROUP_READ,
         traverse: true,
     },
-    methods: { create, update, delete: remove, assignMember, unassignMember, provision, deprovision },
+    methods: {
+        create,
+        update,
+        delete: remove,
+        assignMember,
+        unassignMember,
+        assignMembers,
+        unassignMembers,
+        provision,
+        deprovision,
+    },
 });

package/dist/schema/modules/group/functions/assign-members.js

@@ -0,0 +1,17 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+import { legacyMembershipOwnerAdmission } from '../legacy/index.js';
+import { groupMembersInput } from '../types/index.js';
+/** Make several accounts or groups members of this group in one call (G1-G3 checked once). */
+export const assignMembers = method({
+    static: true,
+    description: 'Make several accounts or groups members of a group.',
+    auth: 'authorized',
+    input: groupMembersInput,
+    output: z.object({}),
+    policy: (context) => context.anyOf(context.check(hasRole, context.ref(atomicRoles['group.writer'])), context.check(hasRole, context.ref(atomicRoles['directory.provisioner'])), 
+    // Seam L-SHELL-9: a Domain that extends Group manages the members of its own groups.
+    legacyMembershipOwnerAdmission(context, context.input.group)),
+});

package/dist/schema/modules/group/functions/index.js

@@ -3,5 +3,7 @@ export { update } from './update-group.js';
 export { remove } from './delete-group.js';
 export { assignMember } from './assign-member.js';
 export { unassignMember } from './unassign-member.js';
+export { assignMembers } from './assign-members.js';
+export { unassignMembers } from './unassign-members.js';
 export { provision } from './provision-group.js';
 export { deprovision } from './deprovision-group.js';

package/dist/schema/modules/group/functions/unassign-members.js

@@ -0,0 +1,17 @@
+import { method } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { atomicRoles } from '../../role/index.js';
+import { hasRole } from '../../../policies/index.js';
+import { legacyMembershipOwnerAdmission } from '../legacy/index.js';
+import { groupMembersInput } from '../types/index.js';
+/** Withdraw several direct members from a group in one call (G2, G3 checked once). */
+export const unassignMembers = method({
+    static: true,
+    description: 'Withdraw several accounts or groups from a group.',
+    auth: 'authorized',
+    input: groupMembersInput,
+    output: z.object({}),
+    policy: (context) => context.anyOf(context.check(hasRole, context.ref(atomicRoles['group.writer'])), context.check(hasRole, context.ref(atomicRoles['directory.provisioner'])), 
+    // Seam L-SHELL-9: a Domain that extends Group manages the members of its own groups.
+    legacyMembershipOwnerAdmission(context, context.input.group)),
+});

package/dist/schema/modules/group/types/group-membership-input.js

@@ -6,3 +6,11 @@ export const groupMembershipInput = z.object({
     member: path(() => User, () => Group),
     group: path(() => Group),
 });
+/**
+ * Several accounts or groups to add to or withdraw from one group, in one call. A Path is not
+ * allowed inside a list, so each member is an exact @NodeId the Action checks.
+ */
+export const groupMembersInput = z.object({
+    members: z.array(z.string().min(2).max(512)).min(1).max(100),
+    group: path(() => Group),
+});

package/dist/schema/modules/group/types/index.js

@@ -1,2 +1,2 @@
-export { groupMembershipInput } from './group-membership-input.js';
+export { groupMembersInput, groupMembershipInput } from './group-membership-input.js';
 export { directoryId, externalId, groupDescription, groupIcon, groupName, nodeReference, } from './group.js';

package/dist/schema/modules/invitation/classes/invitation.js

@@ -5,8 +5,8 @@ import { hasRole } from '../../../policies/index.js';
 import { accept, cancel, resend, send } from '../functions/index.js';
 import { INVITATION_STATUSES } from '../types/index.js';
 /**
- * One invitation of an account, kept by the durable run of `Invitation.send` that it names. The
- * email stays on the account's profile. Only Shell writes it; `user.writer` reads it, so the pending
+ * One invitation of an account, kept by the durable run of `Invitation.send` that it names. An
+ * account has at most one pending invitation. Only Shell writes it; `user.writer` reads it, so the pending
  * invitations are one Query on `status`.
  */
 export const Invitation = nodeClass({
@@ -21,6 +21,8 @@ export const Invitation = nodeClass({
         // The durable run that keeps it, and the number of events it has received (resends).
         execution: property({ type: 'string', minLength: 1, maxLength: 200 }),
         round: property({ type: 'integer', minimum: 0 }),
+        // The email it was sent to, in lower case: a new invitation to the same email resends this one.
+        email: property({ type: 'string', minLength: 3, maxLength: 320 }, { required: false }),
     },
     policies: {
         read: ({ check, ref }) => check(hasRole, ref(atomicRoles['user.writer'])),

package/dist/schema/modules/role/core/roles.d.ts

@@ -19,6 +19,7 @@ export declare const atomicRoles: {
     readonly 'user-profile.reader': import("@astrale-os/sdk/schema").CoreNode;
     readonly 'user-profile.self-writer': import("@astrale-os/sdk/schema").CoreNode;
     readonly 'group-profile.reader': import("@astrale-os/sdk/schema").CoreNode;
+    readonly 'os.viewer': import("@astrale-os/sdk/schema").CoreNode;
 };
 export declare const shellRoles: {
     readonly 'workspace.member': import("@astrale-os/sdk/schema").CoreNode;
@@ -31,6 +32,7 @@ export declare const shellRoles: {
     readonly 'user-profile.reader': import("@astrale-os/sdk/schema").CoreNode;
     readonly 'user-profile.self-writer': import("@astrale-os/sdk/schema").CoreNode;
     readonly 'group-profile.reader': import("@astrale-os/sdk/schema").CoreNode;
+    readonly 'os.viewer': import("@astrale-os/sdk/schema").CoreNode;
 };
 /** The profile a person is given, by its name. */
 export type ProfileName = 'member' | 'admin';

package/dist/schema/modules/role/core/roles.js

@@ -25,6 +25,7 @@ export const atomicRoles = {
     'user-profile.reader': role('user-profile.reader', 'May read the name, email and image of every person.'),
     'user-profile.self-writer': role('user-profile.self-writer', 'May change its own name and image, never its email.'),
     'group-profile.reader': role('group-profile.reader', 'May read the name, description and image of every group.'),
+    'os.viewer': role('os.viewer', 'Opens the OS view and lists its applications.'),
 };
 export const shellRoles = { ...profileRoles, ...atomicRoles };
 export const PROFILE_NAMES = ['member', 'admin'];

package/dist/schema/schema.d.ts

@@ -322,6 +322,20 @@ declare const classes: {
                 readonly mode: 'value';
                 readonly value: Record<string, never>;
             }, "authorized", true, false, undefined, undefined>>;
+            readonly assignMembers: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                members: string[];
+                group: string;
+            }, {
+                readonly mode: 'value';
+                readonly value: Record<string, never>;
+            }, "authorized", true, false, undefined, undefined>>;
+            readonly unassignMembers: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                members: string[];
+                group: string;
+            }, {
+                readonly mode: 'value';
+                readonly value: Record<string, never>;
+            }, "authorized", true, false, undefined, undefined>>;
             readonly provision: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                 directory: string;
                 externalId: string;
@@ -365,7 +379,7 @@ declare const classes: {
                 readonly abstract: false;
                 readonly depth: 1;
                 readonly properties: "attributes" | "description" | "directory" | "externalId" | "frozen" | "icon" | "iss" | "name" | "sub";
-                readonly methods: "assignMember" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "update";
+                readonly methods: "assignMember" | "assignMembers" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "unassignMembers" | "update";
             }[];
             readonly outgoing: "0..1";
         };
@@ -423,6 +437,13 @@ declare const classes: {
                 readonly description?: string;
                 readonly immutable?: import("@astrale-os/sdk/schema").PropertyImmutability;
             }>;
+            email: import("@astrale-os/sdk/schema").AuthoredProperty<{
+                readonly type: "string";
+                readonly minLength: 3;
+                readonly maxLength: 320;
+            }, {
+                readonly required: false;
+            }>;
         };
         readonly policies: {
             readonly read: ({ check, ref }: import("@astrale-os/sdk/schema").ClassRuleContext) => import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").ClassRuleObject>;
@@ -467,7 +488,7 @@ declare const classes: {
                 readonly kind: 'node';
                 readonly abstract: false;
                 readonly depth: 0;
-                readonly properties: "execution" | "expiresAt" | "round" | "status";
+                readonly properties: "email" | "execution" | "expiresAt" | "round" | "status";
                 readonly methods: "accept" | "cancel" | "resend" | "send";
             }[];
             readonly outgoing: "0..1";
@@ -905,6 +926,20 @@ declare const input: {
                     readonly mode: 'value';
                     readonly value: Record<string, never>;
                 }, "authorized", true, false, undefined, undefined>>;
+                readonly assignMembers: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    members: string[];
+                    group: string;
+                }, {
+                    readonly mode: 'value';
+                    readonly value: Record<string, never>;
+                }, "authorized", true, false, undefined, undefined>>;
+                readonly unassignMembers: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    members: string[];
+                    group: string;
+                }, {
+                    readonly mode: 'value';
+                    readonly value: Record<string, never>;
+                }, "authorized", true, false, undefined, undefined>>;
                 readonly provision: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     directory: string;
                     externalId: string;
@@ -948,7 +983,7 @@ declare const input: {
                     readonly abstract: false;
                     readonly depth: 1;
                     readonly properties: "attributes" | "description" | "directory" | "externalId" | "frozen" | "icon" | "iss" | "name" | "sub";
-                    readonly methods: "assignMember" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "update";
+                    readonly methods: "assignMember" | "assignMembers" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "unassignMembers" | "update";
                 }[];
                 readonly outgoing: "0..1";
             };
@@ -1006,6 +1041,13 @@ declare const input: {
                     readonly description?: string;
                     readonly immutable?: import("@astrale-os/sdk/schema").PropertyImmutability;
                 }>;
+                email: import("@astrale-os/sdk/schema").AuthoredProperty<{
+                    readonly type: "string";
+                    readonly minLength: 3;
+                    readonly maxLength: 320;
+                }, {
+                    readonly required: false;
+                }>;
             };
             readonly policies: {
                 readonly read: ({ check, ref }: import("@astrale-os/sdk/schema").ClassRuleContext) => import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").ClassRuleObject>;
@@ -1050,7 +1092,7 @@ declare const input: {
                     readonly kind: 'node';
                     readonly abstract: false;
                     readonly depth: 0;
-                    readonly properties: "execution" | "expiresAt" | "round" | "status";
+                    readonly properties: "email" | "execution" | "expiresAt" | "round" | "status";
                     readonly methods: "accept" | "cancel" | "resend" | "send";
                 }[];
                 readonly outgoing: "0..1";
@@ -1230,6 +1272,7 @@ declare const input: {
             readonly 'user-profile.reader': import("@astrale-os/sdk/schema").CoreNode;
             readonly 'user-profile.self-writer': import("@astrale-os/sdk/schema").CoreNode;
             readonly 'group-profile.reader': import("@astrale-os/sdk/schema").CoreNode;
+            readonly 'os.viewer': import("@astrale-os/sdk/schema").CoreNode;
             readonly admin: import("@astrale-os/sdk/schema").CoreNode;
             readonly member: import("@astrale-os/sdk/schema").CoreNode;
             readonly applications: import("@astrale-os/sdk/schema").CoreNode;
@@ -1564,6 +1607,20 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
                     readonly mode: 'value';
                     readonly value: Record<string, never>;
                 }, "authorized", true, false, undefined, undefined>>;
+                readonly assignMembers: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    members: string[];
+                    group: string;
+                }, {
+                    readonly mode: 'value';
+                    readonly value: Record<string, never>;
+                }, "authorized", true, false, undefined, undefined>>;
+                readonly unassignMembers: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    members: string[];
+                    group: string;
+                }, {
+                    readonly mode: 'value';
+                    readonly value: Record<string, never>;
+                }, "authorized", true, false, undefined, undefined>>;
                 readonly provision: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     directory: string;
                     externalId: string;
@@ -1607,7 +1664,7 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
                     readonly abstract: false;
                     readonly depth: 1;
                     readonly properties: "attributes" | "description" | "directory" | "externalId" | "frozen" | "icon" | "iss" | "name" | "sub";
-                    readonly methods: "assignMember" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "update";
+                    readonly methods: "assignMember" | "assignMembers" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "unassignMembers" | "update";
                 }[];
                 readonly outgoing: "0..1";
             };
@@ -1665,6 +1722,13 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
                     readonly description?: string;
                     readonly immutable?: import("@astrale-os/sdk/schema").PropertyImmutability;
                 }>;
+                email: import("@astrale-os/sdk/schema").AuthoredProperty<{
+                    readonly type: "string";
+                    readonly minLength: 3;
+                    readonly maxLength: 320;
+                }, {
+                    readonly required: false;
+                }>;
             };
             readonly policies: {
                 readonly read: ({ check, ref }: import("@astrale-os/sdk/schema").ClassRuleContext) => import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").ClassRuleObject>;
@@ -1709,7 +1773,7 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
                     readonly kind: 'node';
                     readonly abstract: false;
                     readonly depth: 0;
-                    readonly properties: "execution" | "expiresAt" | "round" | "status";
+                    readonly properties: "email" | "execution" | "expiresAt" | "round" | "status";
                     readonly methods: "accept" | "cancel" | "resend" | "send";
                 }[];
                 readonly outgoing: "0..1";
@@ -1889,6 +1953,7 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
             readonly 'user-profile.reader': import("@astrale-os/sdk/schema").CoreNode;
             readonly 'user-profile.self-writer': import("@astrale-os/sdk/schema").CoreNode;
             readonly 'group-profile.reader': import("@astrale-os/sdk/schema").CoreNode;
+            readonly 'os.viewer': import("@astrale-os/sdk/schema").CoreNode;
             readonly admin: import("@astrale-os/sdk/schema").CoreNode;
             readonly member: import("@astrale-os/sdk/schema").CoreNode;
             readonly applications: import("@astrale-os/sdk/schema").CoreNode;
@@ -2225,6 +2290,20 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
                     readonly mode: 'value';
                     readonly value: Record<string, never>;
                 }, "authorized", true, false, undefined, undefined>>;
+                readonly assignMembers: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    members: string[];
+                    group: string;
+                }, {
+                    readonly mode: 'value';
+                    readonly value: Record<string, never>;
+                }, "authorized", true, false, undefined, undefined>>;
+                readonly unassignMembers: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
+                    members: string[];
+                    group: string;
+                }, {
+                    readonly mode: 'value';
+                    readonly value: Record<string, never>;
+                }, "authorized", true, false, undefined, undefined>>;
                 readonly provision: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     directory: string;
                     externalId: string;
@@ -2268,7 +2347,7 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
                     readonly abstract: false;
                     readonly depth: 1;
                     readonly properties: "attributes" | "description" | "directory" | "externalId" | "frozen" | "icon" | "iss" | "name" | "sub";
-                    readonly methods: "assignMember" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "update";
+                    readonly methods: "assignMember" | "assignMembers" | "create" | "delete" | "deprovision" | "provision" | "unassignMember" | "unassignMembers" | "update";
                 }[];
                 readonly outgoing: "0..1";
             };
@@ -2326,6 +2405,13 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
                     readonly description?: string;
                     readonly immutable?: import("@astrale-os/sdk/schema").PropertyImmutability;
                 }>;
+                email: import("@astrale-os/sdk/schema").AuthoredProperty<{
+                    readonly type: "string";
+                    readonly minLength: 3;
+                    readonly maxLength: 320;
+                }, {
+                    readonly required: false;
+                }>;
             };
             readonly policies: {
                 readonly read: ({ check, ref }: import("@astrale-os/sdk/schema").ClassRuleContext) => import("@astrale-os/sdk/schema").PolicyCheckExpression<import("@astrale-os/sdk/schema").PolicyRef, import("@astrale-os/sdk/schema").ClassRuleObject>;
@@ -2370,7 +2456,7 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
                     readonly kind: 'node';
                     readonly abstract: false;
                     readonly depth: 0;
-                    readonly properties: "execution" | "expiresAt" | "round" | "status";
+                    readonly properties: "email" | "execution" | "expiresAt" | "round" | "status";
                     readonly methods: "accept" | "cancel" | "resend" | "send";
                 }[];
                 readonly outgoing: "0..1";
@@ -2550,6 +2636,7 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
             readonly 'user-profile.reader': import("@astrale-os/sdk/schema").CoreNode;
             readonly 'user-profile.self-writer': import("@astrale-os/sdk/schema").CoreNode;
             readonly 'group-profile.reader': import("@astrale-os/sdk/schema").CoreNode;
+            readonly 'os.viewer': import("@astrale-os/sdk/schema").CoreNode;
             readonly admin: import("@astrale-os/sdk/schema").CoreNode;
             readonly member: import("@astrale-os/sdk/schema").CoreNode;
             readonly applications: import("@astrale-os/sdk/schema").CoreNode;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-domains/shell",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Astrale Shell Domain schema and remote product implementation",
   "license": "Apache-2.0",
   "repository": {
@@ -58,7 +58,7 @@
   },
   "devDependencies": {
     "@astrale-os/ox": "0.1.4",
-    "@astrale-os/sdk": "0.6.0-beta.60",
+    "@astrale-os/sdk": "0.6.0-beta.61",
     "@astrale-os/shell-react": "0.6.0-beta.11",
     "@astrale-os/ui": "1.0.0-beta.37",
     "@astrale/typescript-config": "npm:@jsr/astrale__typescript-config@~2.0.0",