ReadonlyauthgetUserPubkey lets the identity service name a read-only account, which has no signer.
ReadonlybridgesOptional ReadonlycommonSocial actions for applets (NAP-COMMON); without them the common domain is not offered.
ReadonlyconsentGates the outbox service's publishes, which kehto signs without naming the window.
ReadonlyeventReadonlyhostOptional ReadonlyidentityIdentity lookups; defaults to the applesauce-backed providers.
ReadonlymessagingReadonlypoolOptional ReadonlyprofilesNames conversation participants for applets; without it they are listed by key alone.
ReadonlyresolveMaps a live window to its verified identity, or null.
Optional ReadonlythemeReadonlytiersOptional ReadonlyuploaderUploads for applets (NAP-UPLOAD); without it the upload domain is not offered.
What the services need from the rest of the shell.