@astrale-domains/shell 0.1.8 → 0.1.9

package/dist/runtime.js

@@ -8,8 +8,8 @@ import { link, rename, unlink } from './functions/namespace/index.js';
 import { create as createUser, deactivate, deprovision as deprovisionUser, invite, 
 // L-SHELL-5, L-SHELL-14: legacy handlers, through their owner's facade.
 legacyMigrateAccounts, legacyRecordProfile, provision as provisionUser, reactivate, remove as deleteUser, update as updateUser, updateProfile, } from './functions/user/index.js';
-// L-SHELL-12: the legacy handler of assignViews, through its owner's facade.
-import { legacyAssignViews } from './functions/view-access/index.js';
+// L-SHELL-12, L-SHELL-20: the legacy handlers of assignViews and the view_access migration.
+import { legacyAssignViews, legacyMigrateViewAccess } from './functions/view-access/index.js';
 import { integrations } from './integrations/index.js';
 import { enrollmentProvider } from './providers/admin-enrollment/index.js';
 const initialize = (environment) => ({
@@ -46,6 +46,7 @@ const functions = [
     legacyListEntrypoints,
     legacyAssignViews,
     legacyMigrateAccounts,
+    legacyMigrateViewAccess,
 ];
 const runtime = defineRuntime()({
     integrations,

package/dist/schema/index.d.ts

@@ -6,5 +6,5 @@ export { Role, atomicRoles, profileRoles, shellRoles, PROFILE_NAMES, type Profil
 export { hasRole } from './policies/index.js';
 export { disconnectDirectory } from './modules/directory/index.js';
 export { Namespace, alias, viewsNamespace } from './modules/namespace/index.js';
-export { view_access, holdsViewAccess } from './modules/view-access/index.js';
+export { legacyViewAccess as view_access, legacyHoldsViewAccess as holdsViewAccess, } from './modules/view-access/index.js';
 export { legacyMemberOfGroup as member_of_group, legacyAdministratorsGroup as adminGroup, legacyMembersGroup as memberGroup, } from './modules/group/index.js';

package/dist/schema/index.js

@@ -5,6 +5,7 @@ export { Role, atomicRoles, profileRoles, shellRoles, PROFILE_NAMES, } from './m
 export { hasRole } from './policies/index.js';
 export { disconnectDirectory } from './modules/directory/index.js';
 export { Namespace, alias, viewsNamespace } from './modules/namespace/index.js';
-export { view_access, holdsViewAccess } from './modules/view-access/index.js';
+// Seam L-SHELL-20: the package root's former names of the Shell's own view_access.
+export { legacyViewAccess as view_access, legacyHoldsViewAccess as holdsViewAccess, } from './modules/view-access/index.js';
 // Seam L-SHELL-16: the package root's former names of the legacy Edge Class and Core groups.
 export { legacyMemberOfGroup as member_of_group, legacyAdministratorsGroup as adminGroup, legacyMembersGroup as memberGroup, } from './modules/group/index.js';

package/dist/schema/legacy/schema.js

@@ -1,19 +1,20 @@
 import { legacyListEntrypoints } from '../modules/application/legacy/index.js';
 import { legacyAdministratorsGroup, legacyApplicationsGroup, legacyBelongsToGroup, legacyMemberOfGroup, legacyMembersGroup, legacyOwnsMembershipGroup, legacyViewOnlyGroup, } from '../modules/group/legacy/index.js';
 import { legacyMigrateAccounts } from '../modules/user/legacy/index.js';
-import { legacyAssignViews } from '../modules/view-access/legacy/index.js';
+import { legacyAssignViews, legacyHoldsViewAccess, legacyMigrateViewAccess, legacyViewAccess, } from '../modules/view-access/legacy/index.js';
 import { legacyAdministersShellClass, legacyIsSelf, legacyOwnsClass, legacyUsesFunction, } from '../policies/legacy/index.js';
 /**
  * @deprecated The declarations the Shell keeps for legacy readers and callers, under their stored
  * names so their keys stay (L-SHELL-7). Each item has its own row: L-SHELL-8, L-SHELL-10,
- * L-SHELL-11, L-SHELL-12, L-SHELL-14. Replaced by the target Schema alone. Removal: Shell major (delivery step 5) after 1Pact step 4.
+ * L-SHELL-11, L-SHELL-12, L-SHELL-14, L-SHELL-20. Replaced by the target Schema alone. Removal: Shell major (delivery step 5) after 1Pact step 4.
  */
 export const legacyShellSchema = {
-    classes: { member_of_group: legacyMemberOfGroup },
+    classes: { member_of_group: legacyMemberOfGroup, view_access: legacyViewAccess },
     functions: {
         listEntrypoints: legacyListEntrypoints,
         assignViews: legacyAssignViews,
         legacyMigrateAccounts,
+        legacyMigrateViewAccess,
     },
     policies: {
         belongsToGroup: legacyBelongsToGroup,
@@ -22,6 +23,7 @@ export const legacyShellSchema = {
         usesFunction: legacyUsesFunction,
         isSelf: legacyIsSelf,
         legacyOwnsMembershipGroup,
+        holdsViewAccess: legacyHoldsViewAccess,
     },
     core: {
         admin: legacyAdministratorsGroup,

package/dist/schema/modules/view-access/index.d.ts

@@ -1,2 +1 @@
-export { view_access } from './classes/index.js';
-export { holdsViewAccess } from './policies/index.js';
+export { legacyHoldsViewAccess, legacyViewAccess } from './legacy/index.js';

package/dist/schema/modules/view-access/index.js

@@ -1,2 +1,2 @@
-export { view_access } from './classes/index.js';
-export { holdsViewAccess } from './policies/index.js';
+// Seam L-SHELL-20: the package root's former names, reached through this module's facade.
+export { legacyHoldsViewAccess, legacyViewAccess } from './legacy/index.js';

package/dist/schema/modules/view-access/legacy/classes/index.d.ts

@@ -0,0 +1 @@
+export { legacyViewAccess } from './view-access.js';

package/dist/schema/modules/view-access/legacy/classes/index.js

@@ -0,0 +1 @@
+export { legacyViewAccess } from './view-access.js';

package/dist/schema/modules/view-access/{classes → legacy/classes}/view-access.d.ts

@@ -1,10 +1,12 @@
 /**
- * A View an Identity lands on without `member`: an account, a group or a Role, and each of their
- * members. It decides navigation, never data: the View's own Domain still guards everything it
- * shows (V1). Only an admin writes it; an admin or its holders read it. Each end detaches with its
- * Node.
+ * @deprecated The Shell's own `view_access` (L-SHELL-20): a View an Identity landed on without
+ * `member`. The Kernel enforces only its own `view_access` (kernel-host 1.0.0-beta.45), so nothing
+ * writes this one any more; it stays declared so stored Edges remain valid until
+ * `legacyMigrateViewAccess` copies them to the Kernel's and deletes them. Replaced by Kernel
+ * `view_access`, which `view.manager` writes. Removal: Shell major (delivery step 5), once the
+ * migration ran on every instance.
  */
-export declare const view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+export declare const legacyViewAccess: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
     readonly depth: 0;
     readonly abstract: false;
     readonly extends: readonly [];

package/dist/schema/modules/view-access/legacy/classes/view-access.js

@@ -0,0 +1,25 @@
+import { K, edgeClass } from '@astrale-os/sdk/schema';
+import { profileRoles } from '../../../role/index.js';
+import { hasRole } from '../../../../policies/index.js';
+import { legacyHoldsViewAccess } from '../policies/holds-view-access.js';
+/**
+ * @deprecated The Shell's own `view_access` (L-SHELL-20): a View an Identity landed on without
+ * `member`. The Kernel enforces only its own `view_access` (kernel-host 1.0.0-beta.45), so nothing
+ * writes this one any more; it stays declared so stored Edges remain valid until
+ * `legacyMigrateViewAccess` copies them to the Kernel's and deletes them. Replaced by Kernel
+ * `view_access`, which `view.manager` writes. Removal: Shell major (delivery step 5), once the
+ * migration ran on every instance.
+ */
+export const legacyViewAccess = edgeClass.directed({
+    inheritance: 'final',
+    abstract: false,
+    description: 'A View this Identity lands on without member.',
+    source: { as: 'audience', accepts: [K.classes.Identity], outgoing: '0..*', onDelete: 'detach' },
+    target: { as: 'view', accepts: [K.classes.View], incoming: '0..*', onDelete: 'detach' },
+    policies: {
+        read: ({ anyOf, check, ref, self }) => anyOf(check(hasRole, ref(profileRoles['workspace.admin'])), check(legacyHoldsViewAccess, self)),
+        traverse: true,
+        create: false,
+        delete: ({ check, ref }) => check(hasRole, ref(profileRoles['workspace.admin'])),
+    },
+});

package/dist/schema/modules/view-access/legacy/functions/assign-views.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @deprecated Give and withdraw Views for each identity, in one write (L-SHELL-12). Replaced by a
+ * Mutation on `view_access`, which only `workspace.admin` holders may write. Removal: Shell major
+ * (delivery step 5) after 1Pact step 4.
+ *
+ * Its legacy `can_use` holders, the Administrators group, hold `workspace.admin` through the release
+ * (AM5), which now admits them.
+ */
+export declare const legacyAssignViews: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<{
+    assignments: {
+        identity: string;
+        set?: string[] | undefined;
+        unset?: string[] | undefined;
+    }[];
+}, {
+    readonly mode: 'value';
+    readonly value: Record<string, never>;
+}, "authorized", false, false, undefined, undefined>>;

package/dist/schema/modules/view-access/legacy/functions/index.d.ts

@@ -0,0 +1,2 @@
+export { legacyAssignViews } from './assign-views.js';
+export { legacyMigrateViewAccess } from './migrate-view-access.js';

package/dist/schema/modules/view-access/legacy/functions/index.js

@@ -1 +1,2 @@
 export { legacyAssignViews } from './assign-views.js';
+export { legacyMigrateViewAccess } from './migrate-view-access.js';

package/dist/schema/modules/view-access/legacy/functions/migrate-view-access.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @deprecated Copy every Shell `view_access` Edge to the Kernel's `view_access`, the one the
+ * Kernel enforces, and delete the Shell's; running it again changes nothing (L-SHELL-20). Replaced
+ * by nothing: Views are given through the Kernel's Edge. Removal: Shell major (delivery step 5),
+ * once every instance has run it.
+ */
+export declare const legacyMigrateViewAccess: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+    readonly mode: 'value';
+    readonly value: {
+        copied: number;
+        removed: number;
+    };
+}, "authorized", false, false, undefined, undefined>>;

package/dist/schema/modules/view-access/legacy/functions/migrate-view-access.js

@@ -0,0 +1,22 @@
+import { func } from '@astrale-os/sdk/schema';
+import { z } from 'zod';
+import { profileRoles } from '../../../role/index.js';
+import { hasRole } from '../../../../policies/index.js';
+/**
+ * @deprecated Copy every Shell `view_access` Edge to the Kernel's `view_access`, the one the
+ * Kernel enforces, and delete the Shell's; running it again changes nothing (L-SHELL-20). Replaced
+ * by nothing: Views are given through the Kernel's Edge. Removal: Shell major (delivery step 5),
+ * once every instance has run it.
+ */
+export const legacyMigrateViewAccess = func({
+    description: "Move the Views given through the Shell's view_access to the Kernel's.",
+    auth: 'authorized',
+    input: z.strictObject({}),
+    output: z.object({
+        /** Kernel Edges created: the Shell Edges whose Kernel Edge did not exist yet. */
+        copied: z.number().int().min(0),
+        /** Shell Edges deleted, all of them once the copy landed. */
+        removed: z.number().int().min(0),
+    }),
+    policy: ({ check, ref }) => check(hasRole, ref(profileRoles['workspace.admin'])),
+});

package/dist/schema/modules/view-access/legacy/index.d.ts

@@ -0,0 +1,4 @@
+export { legacyViewAccess } from './classes/index.js';
+export { legacyHoldsViewAccess } from './policies/index.js';
+export { legacyAssignViews, legacyMigrateViewAccess } from './functions/index.js';
+export { LEGACY_MAX_ASSIGNED_VIEWS, LEGACY_MAX_ASSIGNMENTS, legacyViewAssignment, } from './view-assignment.js';

package/dist/schema/modules/view-access/legacy/index.js

@@ -1,2 +1,4 @@
-export { legacyAssignViews } from './functions/index.js';
+export { legacyViewAccess } from './classes/index.js';
+export { legacyHoldsViewAccess } from './policies/index.js';
+export { legacyAssignViews, legacyMigrateViewAccess } from './functions/index.js';
 export { LEGACY_MAX_ASSIGNED_VIEWS, LEGACY_MAX_ASSIGNMENTS, legacyViewAssignment, } from './view-assignment.js';

package/dist/schema/modules/view-access/legacy/policies/holds-view-access.d.ts

@@ -0,0 +1,5 @@
+/**
+ * @deprecated The subject is the Shell `view_access` Edge's audience, or extends it (L-SHELL-20).
+ * Replaced by the Kernel's `holdsViewAccess`. Removal: with `legacyViewAccess`.
+ */
+export declare const legacyHoldsViewAccess: import("@astrale-os/sdk/schema").Policy;

package/dist/schema/modules/view-access/legacy/policies/holds-view-access.js

@@ -0,0 +1,8 @@
+import { policy } from '@astrale-os/sdk/schema';
+/**
+ * @deprecated The subject is the Shell `view_access` Edge's audience, or extends it (L-SHELL-20).
+ * Replaced by the Kernel's `holdsViewAccess`. Removal: with `legacyViewAccess`.
+ */
+export const legacyHoldsViewAccess = policy({
+    match: ({ sameNode, subject, source }) => sameNode(subject, source),
+});

package/dist/schema/modules/view-access/legacy/policies/index.d.ts

@@ -0,0 +1 @@
+export { legacyHoldsViewAccess } from './holds-view-access.js';

package/dist/schema/modules/view-access/legacy/policies/index.js

@@ -0,0 +1 @@
+export { legacyHoldsViewAccess } from './holds-view-access.js';

package/dist/schema/modules/view-access/legacy/view-assignment.d.ts

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+/**
+ * @deprecated Bounds of one `assignViews` call within the Kernel's Mutation limits (L-SHELL-12).
+ * Replaced by a Mutation on `view_access`. Removal: Shell major (delivery step 5) after 1Pact step 4.
+ */
+export declare const LEGACY_MAX_ASSIGNED_VIEWS = 20;
+/**
+ * @deprecated At most 40 identities in one `assignViews` call (L-SHELL-12). Replaced by a Mutation
+ * on `view_access`. Removal: Shell major (delivery step 5) after 1Pact step 4.
+ */
+export declare const LEGACY_MAX_ASSIGNMENTS = 40;
+/**
+ * @deprecated The Views given to one identity (`set`) and withdrawn from it (`unset`), by @NodeId
+ * (L-SHELL-12). Replaced by a Mutation on `view_access`. Removal: Shell major (delivery step 5)
+ * after 1Pact step 4.
+ */
+export declare const legacyViewAssignment: z.ZodObject<{
+    identity: z.ZodString;
+    set: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    unset: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;

package/dist/schema/schema.d.ts

@@ -31,6 +31,28 @@ declare const classes: {
         readonly constraints: Record<never, never>;
         readonly effectiveProperties: never;
     }>;
+    readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+        readonly depth: 0;
+        readonly abstract: false;
+        readonly extends: readonly [];
+        readonly properties: never;
+        readonly source: {
+            readonly as: "audience";
+            readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"Identity"> & {
+                readonly origin: "kernel.astrale.ai";
+            })[];
+            readonly outgoing: "0..*";
+        };
+        readonly target: {
+            readonly as: "view";
+            readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"View"> & {
+                readonly origin: "kernel.astrale.ai";
+            })[];
+            readonly incoming: "0..*";
+        };
+        readonly constraints: Record<never, never>;
+        readonly effectiveProperties: never;
+    }>;
     readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
         readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
         readonly inheritance: "open";
@@ -574,28 +596,6 @@ declare const classes: {
         readonly constraints: Record<never, never>;
         readonly effectiveProperties: never;
     }>;
-    readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
-        readonly depth: 0;
-        readonly abstract: false;
-        readonly extends: readonly [];
-        readonly properties: never;
-        readonly source: {
-            readonly as: "audience";
-            readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"Identity"> & {
-                readonly origin: "kernel.astrale.ai";
-            })[];
-            readonly outgoing: "0..*";
-        };
-        readonly target: {
-            readonly as: "view";
-            readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"View"> & {
-                readonly origin: "kernel.astrale.ai";
-            })[];
-            readonly incoming: "0..*";
-        };
-        readonly constraints: Record<never, never>;
-        readonly effectiveProperties: never;
-    }>;
 };
 export type ShellClasses = typeof classes;
 declare const input: {
@@ -635,6 +635,28 @@ declare const input: {
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
+        readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+            readonly depth: 0;
+            readonly abstract: false;
+            readonly extends: readonly [];
+            readonly properties: never;
+            readonly source: {
+                readonly as: "audience";
+                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"Identity"> & {
+                    readonly origin: "kernel.astrale.ai";
+                })[];
+                readonly outgoing: "0..*";
+            };
+            readonly target: {
+                readonly as: "view";
+                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"View"> & {
+                    readonly origin: "kernel.astrale.ai";
+                })[];
+                readonly incoming: "0..*";
+            };
+            readonly constraints: Record<never, never>;
+            readonly effectiveProperties: never;
+        }>;
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
             readonly inheritance: "open";
@@ -1178,28 +1200,6 @@ declare const input: {
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
-        readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
-            readonly depth: 0;
-            readonly abstract: false;
-            readonly extends: readonly [];
-            readonly properties: never;
-            readonly source: {
-                readonly as: "audience";
-                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"Identity"> & {
-                    readonly origin: "kernel.astrale.ai";
-                })[];
-                readonly outgoing: "0..*";
-            };
-            readonly target: {
-                readonly as: "view";
-                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"View"> & {
-                    readonly origin: "kernel.astrale.ai";
-                })[];
-                readonly incoming: "0..*";
-            };
-            readonly constraints: Record<never, never>;
-            readonly effectiveProperties: never;
-        }>;
     };
     readonly functions: {
         readonly listEntrypoints: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
@@ -1233,6 +1233,13 @@ declare const input: {
                 profiles: number;
             };
         }, "authorized", false, false, undefined, undefined>>;
+        readonly legacyMigrateViewAccess: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+            readonly mode: 'value';
+            readonly value: {
+                copied: number;
+                removed: number;
+            };
+        }, "authorized", false, false, undefined, undefined>>;
         readonly disconnectDirectory: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<{
             directory: string;
         }, {
@@ -1250,8 +1257,8 @@ declare const input: {
         readonly usesFunction: import("@astrale-os/sdk/schema").Policy;
         readonly isSelf: import("@astrale-os/sdk/schema").Policy;
         readonly legacyOwnsMembershipGroup: import("@astrale-os/sdk/schema").Policy;
-        readonly hasRole: import("@astrale-os/sdk/schema").Policy;
         readonly holdsViewAccess: import("@astrale-os/sdk/schema").Policy;
+        readonly hasRole: import("@astrale-os/sdk/schema").Policy;
         readonly describesSubject: import("@astrale-os/sdk/schema").Policy;
         readonly isProfileSource: import("@astrale-os/sdk/schema").Policy;
         readonly describesGroupOfSubject: import("@astrale-os/sdk/schema").Policy;
@@ -1316,6 +1323,28 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
+        readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+            readonly depth: 0;
+            readonly abstract: false;
+            readonly extends: readonly [];
+            readonly properties: never;
+            readonly source: {
+                readonly as: "audience";
+                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"Identity"> & {
+                    readonly origin: "kernel.astrale.ai";
+                })[];
+                readonly outgoing: "0..*";
+            };
+            readonly target: {
+                readonly as: "view";
+                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"View"> & {
+                    readonly origin: "kernel.astrale.ai";
+                })[];
+                readonly incoming: "0..*";
+            };
+            readonly constraints: Record<never, never>;
+            readonly effectiveProperties: never;
+        }>;
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
             readonly inheritance: "open";
@@ -1859,28 +1888,6 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
-        readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
-            readonly depth: 0;
-            readonly abstract: false;
-            readonly extends: readonly [];
-            readonly properties: never;
-            readonly source: {
-                readonly as: "audience";
-                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"Identity"> & {
-                    readonly origin: "kernel.astrale.ai";
-                })[];
-                readonly outgoing: "0..*";
-            };
-            readonly target: {
-                readonly as: "view";
-                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"View"> & {
-                    readonly origin: "kernel.astrale.ai";
-                })[];
-                readonly incoming: "0..*";
-            };
-            readonly constraints: Record<never, never>;
-            readonly effectiveProperties: never;
-        }>;
     };
     readonly functions: {
         readonly listEntrypoints: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
@@ -1914,6 +1921,13 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
                 profiles: number;
             };
         }, "authorized", false, false, undefined, undefined>>;
+        readonly legacyMigrateViewAccess: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+            readonly mode: 'value';
+            readonly value: {
+                copied: number;
+                removed: number;
+            };
+        }, "authorized", false, false, undefined, undefined>>;
         readonly disconnectDirectory: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<{
             directory: string;
         }, {
@@ -1931,8 +1945,8 @@ export declare const ShellSchema: import("@astrale-os/sdk/schema").AuthoredSchem
         readonly usesFunction: import("@astrale-os/sdk/schema").Policy;
         readonly isSelf: import("@astrale-os/sdk/schema").Policy;
         readonly legacyOwnsMembershipGroup: import("@astrale-os/sdk/schema").Policy;
-        readonly hasRole: import("@astrale-os/sdk/schema").Policy;
         readonly holdsViewAccess: import("@astrale-os/sdk/schema").Policy;
+        readonly hasRole: import("@astrale-os/sdk/schema").Policy;
         readonly describesSubject: import("@astrale-os/sdk/schema").Policy;
         readonly isProfileSource: import("@astrale-os/sdk/schema").Policy;
         readonly describesGroupOfSubject: import("@astrale-os/sdk/schema").Policy;
@@ -1999,6 +2013,28 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
+        readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
+            readonly depth: 0;
+            readonly abstract: false;
+            readonly extends: readonly [];
+            readonly properties: never;
+            readonly source: {
+                readonly as: "audience";
+                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"Identity"> & {
+                    readonly origin: "kernel.astrale.ai";
+                })[];
+                readonly outgoing: "0..*";
+            };
+            readonly target: {
+                readonly as: "view";
+                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"View"> & {
+                    readonly origin: "kernel.astrale.ai";
+                })[];
+                readonly incoming: "0..*";
+            };
+            readonly constraints: Record<never, never>;
+            readonly effectiveProperties: never;
+        }>;
         readonly User: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
             readonly icon: import("@astrale-os/sdk/schema").ClassIcon;
             readonly inheritance: "open";
@@ -2542,28 +2578,6 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
             readonly constraints: Record<never, never>;
             readonly effectiveProperties: never;
         }>;
-        readonly view_access: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
-            readonly depth: 0;
-            readonly abstract: false;
-            readonly extends: readonly [];
-            readonly properties: never;
-            readonly source: {
-                readonly as: "audience";
-                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"Identity"> & {
-                    readonly origin: "kernel.astrale.ai";
-                })[];
-                readonly outgoing: "0..*";
-            };
-            readonly target: {
-                readonly as: "view";
-                readonly accepts: readonly (import("@astrale-os/sdk/schema").ClassRef<"View"> & {
-                    readonly origin: "kernel.astrale.ai";
-                })[];
-                readonly incoming: "0..*";
-            };
-            readonly constraints: Record<never, never>;
-            readonly effectiveProperties: never;
-        }>;
     };
     readonly functions: {
         readonly listEntrypoints: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
@@ -2597,6 +2611,13 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
                 profiles: number;
             };
         }, "authorized", false, false, undefined, undefined>>;
+        readonly legacyMigrateViewAccess: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
+            readonly mode: 'value';
+            readonly value: {
+                copied: number;
+                removed: number;
+            };
+        }, "authorized", false, false, undefined, undefined>>;
         readonly disconnectDirectory: import("@astrale-os/sdk/schema").Function<import("@astrale-os/sdk/schema").CallableProjection<{
             directory: string;
         }, {
@@ -2614,8 +2635,8 @@ export declare const S: schema.ResolvedDomainOf<import("@astrale-os/sdk/schema")
         readonly usesFunction: import("@astrale-os/sdk/schema").Policy;
         readonly isSelf: import("@astrale-os/sdk/schema").Policy;
         readonly legacyOwnsMembershipGroup: import("@astrale-os/sdk/schema").Policy;
-        readonly hasRole: import("@astrale-os/sdk/schema").Policy;
         readonly holdsViewAccess: import("@astrale-os/sdk/schema").Policy;
+        readonly hasRole: import("@astrale-os/sdk/schema").Policy;
         readonly describesSubject: import("@astrale-os/sdk/schema").Policy;
         readonly isProfileSource: import("@astrale-os/sdk/schema").Policy;
         readonly describesGroupOfSubject: import("@astrale-os/sdk/schema").Policy;

package/dist/schema/schema.js

@@ -1,5 +1,5 @@
 import { defineSchema, KernelSchema, schema } from '@astrale-os/sdk/schema';
-// Seam L-SHELL-7…14: the legacy declarations, under their stored names.
+// Seam L-SHELL-7…20: the legacy declarations, under their stored names.
 import { legacyShellSchema } from './legacy/index.js';
 import { disconnectDirectory } from './modules/directory/index.js';
 import { Group, GroupProfile, describesGroupOfSubject, group_profile, isGroupProfileSource, } from './modules/group/index.js';
@@ -7,7 +7,6 @@ import { Invitation, invitation_user } from './modules/invitation/index.js';
 import { Namespace, alias, viewsNamespace } from './modules/namespace/index.js';
 import { Role, shellRoles } from './modules/role/index.js';
 import { User, UserProfile, describesSubject, isProfileSource, user_profile, } from './modules/user/index.js';
-import { holdsViewAccess, view_access } from './modules/view-access/index.js';
 import { hasRole } from './policies/index.js';
 import { applicationView } from './views/index.js';
 export const ORIGIN = 'shell.astrale.ai';
@@ -24,13 +23,11 @@ const classes = {
     Role,
     Namespace,
     alias,
-    view_access,
     ...legacyShellSchema.classes,
 };
 const functions = { disconnectDirectory, ...legacyShellSchema.functions };
 const policies = {
     hasRole,
-    holdsViewAccess,
     describesSubject,
     isProfileSource,
     describesGroupOfSubject,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-domains/shell",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "description": "Astrale Shell Domain schema and remote product implementation",
   "license": "Apache-2.0",
   "repository": {

package/dist/schema/modules/view-access/classes/index.d.ts

@@ -1 +0,0 @@
-export { view_access } from './view-access.js';

package/dist/schema/modules/view-access/classes/index.js

@@ -1 +0,0 @@
-export { view_access } from './view-access.js';

package/dist/schema/modules/view-access/classes/view-access.js

@@ -1,23 +0,0 @@
-import { K, edgeClass } from '@astrale-os/sdk/schema';
-import { profileRoles } from '../../role/index.js';
-import { hasRole } from '../../../policies/index.js';
-import { holdsViewAccess } from '../policies/index.js';
-/**
- * A View an Identity lands on without `member`: an account, a group or a Role, and each of their
- * members. It decides navigation, never data: the View's own Domain still guards everything it
- * shows (V1). Only an admin writes it; an admin or its holders read it. Each end detaches with its
- * Node.
- */
-export const view_access = edgeClass.directed({
-    inheritance: 'final',
-    abstract: false,
-    description: 'A View this Identity lands on without member.',
-    source: { as: 'audience', accepts: [K.classes.Identity], outgoing: '0..*', onDelete: 'detach' },
-    target: { as: 'view', accepts: [K.classes.View], incoming: '0..*', onDelete: 'detach' },
-    policies: {
-        read: ({ anyOf, check, ref, self }) => anyOf(check(hasRole, ref(profileRoles['workspace.admin'])), check(holdsViewAccess, self)),
-        traverse: true,
-        create: ({ check, ref }) => check(hasRole, ref(profileRoles['workspace.admin'])),
-        delete: ({ check, ref }) => check(hasRole, ref(profileRoles['workspace.admin'])),
-    },
-});

package/dist/schema/modules/view-access/policies/holds-view-access.d.ts

@@ -1,2 +0,0 @@
-/** The subject is the Edge's audience, or extends it: a group's members hold its Views. */
-export declare const holdsViewAccess: import("@astrale-os/sdk/schema").Policy;