Add new features to ensure we do not lose functionality from what was offered in the sharing Pane

Prompt: Many prompts to get this correct. This will most likely change a bit as well once we decide for sure if this is the correct approach

Co-authored-by: GPT-5.6 Luna <gpt-5.6-luna@openai.com>

Author: SharonStrats

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "solid-logic",
-  "version": "6.0.1-1",
+  "version": "6.0.1-2",
   "description": "Core business logic of SolidOS",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",

package.json

@@ -6,8 +6,8 @@ const authn = solidLogicSingleton.authn
 const authSession = solidLogicSingleton.authn.authSession
 const store = solidLogicSingleton.store
 
-export { ACL_LINK, ACCESS_ROLES, PUBLIC_ACCESS_ROLES, Authenticated, Public } from './acl/aclLogic'
-export type { AccessRole, PublicAccessRole } from './acl/aclLogic'
+export { ACL_LINK, ACCESS_ROLES, PUBLIC_ACCESS_ROLES, Authenticated, Public, classifyContainerAccessScope, analyzeContainerAccessScope, classifyAuthorizationScope, filterAuthorizationsByContainerScope } from './acl/aclLogic'
+export type { AccessRole, ContainerAccessScope, ContainerAccessScopeAnalysis, PublicAccessRole } from './acl/aclLogic'
 export { offlineTestID, appContext } from './authn/authUtil'
 export { performServerSideLogout } from './authn/serverLogout'
 export { reloadOnIdentityReplaced } from './authSession/identityState'

src/acl/aclLogic.ts

@@ -2,7 +2,7 @@ import type { SessionWithLegacyEvents } from './authSession/authSession'
 import type { ACLContext, AccessMode, AccessSubject, Authorization, PatchPlan } from '@dokieli/web-access-control'
 import { LiveStore, NamedNode, Statement } from 'rdflib'
 import type { AccessControlSubject } from './acl/accessControlSubjects'
-import type { AccessRole, PublicAccessRole } from './acl/aclLogic'
+import type { AccessRole, ContainerAccessScope, PublicAccessRole } from './acl/aclLogic'
 
 export type AppDetails = {
     noun: string
@@ -84,14 +84,20 @@ export interface AclLogic {
     findAclDocUrl: (url: NamedNode) => Promise<string | undefined>,
     findEffectiveAcl: (resourceURL: string | NamedNode) => Promise<ACLContext>,
     findAccessGrants: (resourceURL: string | NamedNode) => Promise<Authorization[]>,
+    classifyContainerScope: (context: ACLContext) => ContainerAccessScope,
+    isProtectedResource: (resourceURL: string | NamedNode) => boolean,
     classifyAccessControlSubject: (principle: string) => Promise<AccessControlSubject | undefined>,
     roleFromModes: (modes: Iterable<AccessMode>) => AccessRole,
     modesFromRole: (role: AccessRole) => AccessMode[],
     publicRoleFromModes: (modes: Iterable<AccessMode>) => PublicAccessRole,
     modesFromPublicRole: (role: PublicAccessRole) => AccessMode[],
     planGrant: (resourceURL: string | NamedNode, subject: AccessSubject, modes: AccessMode[]) => Promise<PatchPlan>,
+    planGrantContainer: (containerURL: string | NamedNode, subject: AccessSubject, modes: AccessMode[]) => Promise<PatchPlan>,
+    planGrantContainerContents: (containerURL: string | NamedNode, subject: AccessSubject, modes: AccessMode[]) => Promise<PatchPlan>,
+    planRevokeContainerContents: (containerURL: string | NamedNode, subject: AccessSubject) => Promise<PatchPlan>,
     planRevoke: (resourceURL: string | NamedNode, subject: AccessSubject) => Promise<PatchPlan>,
     planPublicRead: (resourceURL: string | NamedNode, enabled: boolean) => Promise<PatchPlan>,
+    resetToDefault: (resourceURL: string | NamedNode) => Promise<Response>,
     applyPlan: (plan: PatchPlan) => Promise<Response>,
     setACLUserPublic: (docURI: string, me: NamedNode,
         options: {