@astrale-os/shell-react 0.2.9 → 0.2.10-beta.3

package/dist/application/apps/app-host.d.ts

@@ -1,8 +1,6 @@
-import type { NodeRefInput } from '@astrale-os/kernel-client';
-import type { ApplicationNode, AppSession, IntentRegistry } from '@astrale-os/shell';
+import type { ApplicationNode, AppSession, HostCapabilities, NodeTarget, ResolvedView } from '@astrale-os/shell';
 import type { CSSProperties, ReactNode } from 'react';
 import type { SandboxPolicy, ViewHostHandle } from '../../window/host.js';
-import type { ViewDescriptor } from '../../window/lifecycle/mount.js';
 import type { WindowState } from '../../window/lifecycle/states.js';
 /** The states `AppHost`'s fallback answers — the frame's, plus the two OS phases. */
 export type AppHostFallbackState = WindowState | {
@@ -11,19 +9,10 @@ export type AppHostFallbackState = WindowState | {
     readonly phase: 'no-view';
 };
 export interface AppHostProps {
-    app: ApplicationNode | NodeRefInput;
+    app: ApplicationNode | NodeTarget;
     /** Override the entry View while keeping the application's delegated session alive. */
-    view?: NodeRefInput | ViewDescriptor;
-    /**
-     * Default target node delivered to the app's view as `targetNodeId` (API §12.2).
-     * Container-anchored apps need one — the dock passes the current space. A deeper
-     * fix (an install-time app data container + `app::open` returning a default
-     * target) is a tracked domain-modeling question; until then the host supplies it.
-     */
-    node?: NodeRefInput;
-    capabilities?: {
-        intents: readonly (keyof IntentRegistry)[];
-    };
+    view?: ResolvedView;
+    capabilities?: HostCapabilities;
     sandbox?: SandboxPolicy;
     fallback?: (state: AppHostFallbackState) => ReactNode;
     onSession?: (session: AppSession) => void;

package/dist/application/apps/app-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-host.d.ts","sourceRoot":"","sources":["../../../src/application/apps/app-host.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACpF,OAAO,KAAK,EAAE,aAAa,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AAWnE,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAMnE,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAA;AAEjC,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,eAAe,GAAG,YAAY,CAAA;IACnC,uFAAuF;IACvF,IAAI,CAAC,EAAE,YAAY,GAAG,cAAc,CAAA;IACpC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,YAAY,CAAC,EAAE;QAAE,OAAO,EAAE,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAA;KAAE,CAAA;IAC7D,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,SAAS,CAAA;IACrD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAA;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB;AAED,eAAO,MAAM,OAAO,yGAqEnB,CAAA"}
+{"version":3,"file":"app-host.d.ts","sourceRoot":"","sources":["../../../src/application/apps/app-host.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,YAAY,EACb,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,aAAa,EAAgB,SAAS,EAAE,MAAM,OAAO,CAAA;AAWnE,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AAMnE,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,CAAA;AAEjC,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,eAAe,GAAG,UAAU,CAAA;IACjC,uFAAuF;IACvF,IAAI,CAAC,EAAE,YAAY,CAAA;IACnB,YAAY,CAAC,EAAE,gBAAgB,CAAA;IAC/B,OAAO,CAAC,EAAE,aAAa,CAAA;IACvB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,SAAS,CAAA;IACrD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAA;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB;AAED,eAAO,MAAM,OAAO,yGAoEnB,CAAA"}

package/dist/application/apps/app-host.js

@@ -56,5 +56,5 @@ export const AppHost = forwardRef(function AppHost(props, ref) {
     const view = props.view ?? session.view;
     if (view === null)
         return box(fallback?.({ phase: 'no-view' }) ?? null);
-    return (_jsx(ViewHost, { ref: ref, view: view, node: props.node, credential: session.credential, capabilities: props.capabilities ?? { intents: [] }, sandbox: props.sandbox, fallback: fallback ? (s) => fallback(s) : undefined, className: className, style: style }));
+    return (_jsx(ViewHost, { ref: ref, view: view, credential: session.credential, capabilities: props.capabilities, sandbox: props.sandbox, fallback: fallback ? (s) => fallback(s) : undefined, className: className, style: style }));
 });

package/dist/application/apps/apps.hook.d.ts

@@ -1,12 +1,15 @@
-import type { NodeRefInput } from '@astrale-os/kernel-client';
-import type { ApplicationNode, SpaceNode } from '@astrale-os/shell';
+import type { ApplicationNode, NodeTarget, SpaceNode } from '@astrale-os/shell';
 import type { ReadState } from '../../graph/memory/read/envelope.js';
 export interface AppsResult extends ReadState {
     readonly apps: readonly ApplicationNode[];
 }
-export declare function useApps(space?: SpaceNode | NodeRefInput | null): AppsResult;
+export declare function useApps(space?: SpaceNode | NodeTarget | null): AppsResult;
 /** An `@id` ref for a bound node, else the normalized ref of a raw subject. */
-export declare function toRef(x: NodeRefInput | {
+export declare function toRef(x: NodeTarget | {
+    readonly id: string;
+}): NodeTarget;
+/** Stable dependency identity for one Shell node target. */
+export declare function targetKey(x: NodeTarget | {
     readonly id: string;
 }): string;
 //# sourceMappingURL=apps.hook.d.ts.map

package/dist/application/apps/apps.hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apps.hook.d.ts","sourceRoot":"","sources":["../../../src/application/apps/apps.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAYnE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAWpE,MAAM,WAAW,UAAW,SAAQ,SAAS;IAC3C,QAAQ,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,CAAA;CAC1C;AAED,wBAAgB,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,IAAI,GAAG,UAAU,CA0C3E;AAOD,+EAA+E;AAC/E,wBAAgB,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEvE"}
+{"version":3,"file":"apps.hook.d.ts","sourceRoot":"","sources":["../../../src/application/apps/apps.hook.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAY/E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAWpE,MAAM,WAAW,UAAW,SAAQ,SAAS;IAC3C,QAAQ,CAAC,IAAI,EAAE,SAAS,eAAe,EAAE,CAAA;CAC1C;AAED,wBAAgB,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,IAAI,GAAG,UAAU,CA0CzE;AAOD,+EAA+E;AAC/E,wBAAgB,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAEzE;AAED,4DAA4D;AAC5D,wBAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAIzE"}

package/dist/application/apps/apps.hook.js

@@ -1,4 +1,4 @@
-import { normalizeRef } from '@astrale-os/kernel-client';
+import { Path } from '@astrale-os/sdk/graph/path';
 /**
  * useApps(space?) (API §12.2) — the apps installed in a space (`installed_in`
  * in-edges). No arg targets the CURRENT space (shared store, so a switch anywhere
@@ -47,5 +47,13 @@ function hasId(x) {
 }
 /** An `@id` ref for a bound node, else the normalized ref of a raw subject. */
 export function toRef(x) {
-    return hasId(x) ? `@${x.id}` : normalizeRef(x);
+    return hasId(x) ? x.id : x;
+}
+/** Stable dependency identity for one Shell node target. */
+export function targetKey(x) {
+    if (hasId(x))
+        return `id:${x.id}`;
+    if (typeof x === 'string')
+        return `text:${x}`;
+    return `path:${Path.from(x).raw}`;
 }

package/dist/application/apps/domains.hook.d.ts

@@ -3,5 +3,5 @@ import type { ReadState } from '../../graph/memory/read/envelope.js';
 export interface DomainsResult extends ReadState {
     readonly domains: readonly DomainSearchResult[];
 }
-export declare function useDomains(): DomainsResult;
+export declare function useInstalledDomains(): DomainsResult;
 //# sourceMappingURL=domains.hook.d.ts.map

package/dist/application/apps/domains.hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domains.hook.d.ts","sourceRoot":"","sources":["../../../src/application/apps/domains.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAI3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAQpE,MAAM,WAAW,aAAc,SAAQ,SAAS;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAChD;AAED,wBAAgB,UAAU,IAAI,aAAa,CAoB1C"}
+{"version":3,"file":"domains.hook.d.ts","sourceRoot":"","sources":["../../../src/application/apps/domains.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAI3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAQpE,MAAM,WAAW,aAAc,SAAQ,SAAS;IAC9C,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAChD;AAED,wBAAgB,mBAAmB,IAAI,aAAa,CAoBnD"}

package/dist/application/apps/domains.hook.js

@@ -3,7 +3,7 @@ import { useAsyncResource } from '../../graph/async.js';
 import { useShell } from '../../session/shell.hook.js';
 import { isOsPlaneAvailable } from '../user/user.store.js';
 const NO_DOMAINS = [];
-export function useDomains() {
+export function useInstalledDomains() {
     const shell = useShell();
     const available = isOsPlaneAvailable(shell);
     const result = useAsyncResource(available ? () => shell.apps.searchDomains() : null, NO_DOMAINS, [shell, available]);

package/dist/application/apps/open-app.hook.d.ts

@@ -3,8 +3,7 @@
  * app-open protocol lives in the shell package). Resolves to the session; disposal
  * is the caller's (AppHost disposes it with the window).
  */
-import type { NodeRefInput } from '@astrale-os/kernel-client';
-import type { ApplicationNode, AppSession } from '@astrale-os/shell';
+import type { ApplicationNode, AppSession, NodeTarget } from '@astrale-os/shell';
 import type { Action } from '../../graph/action.js';
-export declare function useOpenApp(): Action<[ApplicationNode | NodeRefInput], AppSession>;
+export declare function useOpenApp(): Action<[ApplicationNode | NodeTarget], AppSession>;
 //# sourceMappingURL=open-app.hook.d.ts.map

package/dist/application/apps/open-app.hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"open-app.hook.d.ts","sourceRoot":"","sources":["../../../src/application/apps/open-app.hook.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAMnD,wBAAgB,UAAU,IAAI,MAAM,CAAC,CAAC,eAAe,GAAG,YAAY,CAAC,EAAE,UAAU,CAAC,CAGjF"}
+{"version":3,"file":"open-app.hook.d.ts","sourceRoot":"","sources":["../../../src/application/apps/open-app.hook.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAEhF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAMnD,wBAAgB,UAAU,IAAI,MAAM,CAAC,CAAC,eAAe,GAAG,UAAU,CAAC,EAAE,UAAU,CAAC,CAG/E"}

package/dist/application/index.d.ts

@@ -7,14 +7,12 @@ export { useSpace } from './spaces/space.hook.js';
 export type { SpaceResult } from './spaces/space.hook.js';
 export { useApps } from './apps/apps.hook.js';
 export type { AppsResult } from './apps/apps.hook.js';
-export { useDomains } from './apps/domains.hook.js';
+export { useInstalledDomains } from './apps/domains.hook.js';
 export type { DomainsResult } from './apps/domains.hook.js';
 export { useOpenApp } from './apps/open-app.hook.js';
 export { AppHost } from './apps/app-host.js';
 export type { AppHostFallbackState, AppHostProps } from './apps/app-host.js';
 export { AppLogo } from './apps/app-logo.js';
 export type { AppLogoProps } from './apps/app-logo.js';
-export { useRoles } from './roles.hook.js';
-export type { RolesResult } from './roles.hook.js';
-export type { ApplicationNode, AppSession, DomainSearchResult, RoleNode, SpaceNode, UserNode, } from '@astrale-os/shell';
+export type { ApplicationNode, AppSession, DomainSearchResult, NodeTarget, ResolvedView, SpaceNode, UserNode, } from '@astrale-os/shell';
 //# sourceMappingURL=index.d.ts.map

package/dist/application/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/application/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACjD,YAAY,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAGlD,YAAY,EACV,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,QAAQ,EACR,SAAS,EACT,QAAQ,GACT,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/application/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AACxE,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AACjD,YAAY,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,YAAY,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC5C,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,YAAY,EACV,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,SAAS,EACT,QAAQ,GACT,MAAM,mBAAmB,CAAA"}

package/dist/application/index.js

@@ -1,14 +1,13 @@
 // application — API §12.2. The OS-plane hooks over the shell package's
 // `shell.user/spaces/apps` namespaces + the window module: useUser, useSpaces,
-// useCurrentSpace, useSpace, useApps, useDomains, useRoles, useOpenApp,
+// useCurrentSpace, useSpace, useApps, useInstalledDomains, useOpenApp,
 // AppHost, AppLogo.
 export { useUser } from './user/user.hook.js';
 export { useSpaces } from './spaces/spaces.hook.js';
 export { useCurrentSpace } from './spaces/current-space.hook.js';
 export { useSpace } from './spaces/space.hook.js';
 export { useApps } from './apps/apps.hook.js';
-export { useDomains } from './apps/domains.hook.js';
+export { useInstalledDomains } from './apps/domains.hook.js';
 export { useOpenApp } from './apps/open-app.hook.js';
 export { AppHost } from './apps/app-host.js';
 export { AppLogo } from './apps/app-logo.js';
-export { useRoles } from './roles.hook.js';

package/dist/application/spaces/space.hook.d.ts

@@ -1,5 +1,5 @@
-import type { NodeRefInput } from '@astrale-os/kernel-client';
+import type { NodeTarget } from '@astrale-os/shell';
 import type { CurrentSpaceResult } from './current-space.hook.js';
 export type SpaceResult = CurrentSpaceResult;
-export declare function useSpace(ref: NodeRefInput | null | undefined): SpaceResult;
+export declare function useSpace(ref: NodeTarget | null | undefined): SpaceResult;
 //# sourceMappingURL=space.hook.d.ts.map

package/dist/application/spaces/space.hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"space.hook.d.ts","sourceRoot":"","sources":["../../../src/application/spaces/space.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAU7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAOjE,MAAM,MAAM,WAAW,GAAG,kBAAkB,CAAA;AAE5C,wBAAgB,QAAQ,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,CAqB1E"}
+{"version":3,"file":"space.hook.d.ts","sourceRoot":"","sources":["../../../src/application/spaces/space.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,mBAAmB,CAAA;AAQ9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAQjE,MAAM,MAAM,WAAW,GAAG,kBAAkB,CAAA;AAE5C,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,CAqBxE"}

package/dist/application/spaces/space.hook.js

@@ -1,4 +1,3 @@
-import { normalizeRef } from '@astrale-os/kernel-client';
 /**
  * useSpace(ref) (API §12.2) — a single space by ref; `null`/`undefined` (or an
  * unavailable OS plane) is idle (§1.3). One-shot today (§12 flag).
@@ -7,12 +6,13 @@ import { useMemo } from 'react';
 import { useAsyncResource } from '../../graph/async.js';
 import { isIdleInput } from '../../graph/memory/read/idle.js';
 import { useShell } from '../../session/shell.hook.js';
+import { targetKey } from '../apps/apps.hook.js';
 import { isOsPlaneAvailable } from '../user/user.store.js';
 export function useSpace(ref) {
     const shell = useShell();
     const idle = isIdleInput(ref) || !isOsPlaneAvailable(shell);
     // The inline guard (not the stored `idle`) narrows `ref` to non-null below.
-    const key = idle ? null : normalizeRef(ref);
+    const key = idle ? null : targetKey(ref);
     const res = useAsyncResource(idle ? null : () => shell.spaces.get(ref), null, [shell, key]);
     return useMemo(() => ({
         space: idle ? null : res.data,

package/dist/application/spaces/spaces.hook.d.ts

@@ -1,5 +1,4 @@
-import type { NodeRefInput } from '@astrale-os/kernel-client';
-import type { SpaceNode } from '@astrale-os/shell';
+import type { NodeTarget, SpaceNode } from '@astrale-os/shell';
 import type { Action } from '../../graph/action.js';
 import type { ReadState } from '../../graph/memory/read/envelope.js';
 export interface SpacesResult extends ReadState {
@@ -8,7 +7,7 @@ export interface SpacesResult extends ReadState {
     /** The `selected_space` target — optimistically ahead during a `switch`. */
     readonly selected: SpaceNode | null;
     /** `user::switchSpace` with a manual optimistic overlay (§1.6). */
-    readonly switch: Action<[NodeRefInput], void>;
+    readonly switch: Action<[NodeTarget], void>;
 }
 export declare function useSpaces(): SpacesResult;
 //# sourceMappingURL=spaces.hook.d.ts.map

package/dist/application/spaces/spaces.hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spaces.hook.d.ts","sourceRoot":"","sources":["../../../src/application/spaces/spaces.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAYlD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAUpE,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAA;IACrC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAA;IACnC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAA;CAC9C;AAED,wBAAgB,SAAS,IAAI,YAAY,CA4DxC"}
+{"version":3,"file":"spaces.hook.d.ts","sourceRoot":"","sources":["../../../src/application/spaces/spaces.hook.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAY9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAUpE,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,SAAS,SAAS,EAAE,CAAA;IACrC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,IAAI,CAAA;IACnC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAA;CAC5C;AAED,wBAAgB,SAAS,IAAI,YAAY,CA4DxC"}

package/dist/application/spaces/spaces.hook.js

@@ -1,4 +1,4 @@
-import { normalizeRef } from '@astrale-os/kernel-client';
+import { Path } from '@astrale-os/sdk/graph/path';
 /**
  * useSpaces (API §12.2) — the spaces list, the selected space, and a `switch`
  * Action that repoints the `selected_space` edge. Reads the SAME per-Shell
@@ -77,6 +77,13 @@ function hasId(x) {
 function refIdOf(x) {
     if (hasId(x))
         return x.id;
-    const raw = normalizeRef(x);
-    return raw.startsWith('@') ? raw.slice(1) : null;
+    if (typeof x === 'string' && !x.startsWith('@') && !x.startsWith('/'))
+        return x;
+    try {
+        const path = Path.from(x);
+        return path.ast.anchor.kind === 'id' && path.ast.steps.length === 0 ? path.ast.anchor.id : null;
+    }
+    catch {
+        return null;
+    }
 }

package/dist/auth/act-as.context.d.ts

@@ -1,40 +1,23 @@
-import type { CredentialInput, FnMap } from '@astrale-os/kernel-client';
-import type { BoundClientSessionView } from '@astrale-os/kernel-client/session';
+import type { Identity } from '@astrale-os/kernel-client/auth';
+import type { KernelClient } from '@astrale-os/shell';
 import type { ReactElement, ReactNode } from 'react';
-import type { SelfNode } from '../session/session.context.js';
-/** A bound session view — the kernel surface `session.as(cred)` yields. */
-export type SessionView = BoundClientSessionView<FnMap>;
-/** A whoami-shaped identity/graph node (kernel-client does not yet re-export `Node` — G8). */
-export type NodeValue = SelfNode;
-/** The root scope key — the memory's own default scope (`createMemory` default). */
-export declare const ROOT_SCOPE = "default";
-/**
- * The principal a subtree acts as (API §4). `scope` is the memory isolation key
- * (§5.4): the graph plane scopes its memory by `memory.forScope(scope)` so an
- * <ActAs> subtree never shares cached results with another principal.
- */
+export type NodeValue = Identity;
+export type SessionView = KernelClient;
 export interface IdentityBinding {
-    readonly kernel: SessionView;
-    readonly self: SelfNode;
-    readonly scope: string;
+    readonly kernel: KernelClient;
+    readonly self: Identity;
 }
 export declare const IdentityContext: import("react").Context<IdentityBinding | null>;
-/**
- * The principal this subtree dispatches as. An <ActAs> value wins; otherwise the
- * root binding off ShellContext. Throws outside a provider, or when the bound
- * kernel resolved no identity (a bare prebuilt Shell with no auth surface).
- */
 export declare function useIdentityBinding(): IdentityBinding;
 export interface ActAsProps {
-    /** The principal to act as. A thunk is resolved by the kernel per dispatch. */
-    credential: CredentialInput | (() => CredentialInput);
-    children: ReactNode;
+    /**
+     * A separately authenticated Kernel capability. Raw credentials are deliberately not accepted;
+     * construct the delegated Client Session at the trust boundary that owns credential resolution.
+     */
+    readonly client: KernelClient;
+    readonly fallback?: ReactNode;
+    readonly children: ReactNode;
 }
-/**
- * A subtree that dispatches as another principal: rebinds the kernel (session.as),
- * resolves whoami, and provides a fresh identity binding with a DISTINCT memory
- * scope (`as:<id>`). Nestable — it rebinds from the current effective principal. A
- * brief nested boot holds the subtree (renders null) until whoami resolves.
- */
-export declare function ActAs({ credential, children }: ActAsProps): ReactElement | null;
+/** Bind a subtree to an explicitly supplied authenticated Kernel capability. */
+export declare function ActAs({ client, fallback, children }: ActAsProps): ReactElement | null;
 //# sourceMappingURL=act-as.context.d.ts.map

package/dist/auth/act-as.context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"act-as.context.d.ts","sourceRoot":"","sources":["../../src/auth/act-as.context.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,2BAA2B,CAAA;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAA;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAWpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAA;AAI7D,2EAA2E;AAC3E,MAAM,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;AAEvD,8FAA8F;AAC9F,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAA;AAEhC,oFAAoF;AACpF,eAAO,MAAM,UAAU,YAAY,CAAA;AAEnC;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AACD,eAAO,MAAM,eAAe,iDAA8C,CAAA;AAG1E;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,eAAe,CAiBpD;AAED,MAAM,WAAW,UAAU;IACzB,+EAA+E;IAC/E,UAAU,EAAE,eAAe,GAAG,CAAC,MAAM,eAAe,CAAC,CAAA;IACrD,QAAQ,EAAE,SAAS,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,UAAU,GAAG,YAAY,GAAG,IAAI,CAkC/E"}
+{"version":3,"file":"act-as.context.d.ts","sourceRoot":"","sources":["../../src/auth/act-as.context.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAA;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAA;AAMpD,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAA;AAChC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAA;AAEtC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CACxB;AAED,eAAO,MAAM,eAAe,iDAA8C,CAAA;AAG1E,wBAAgB,kBAAkB,IAAI,eAAe,CAOpD;AAED,MAAM,WAAW,UAAU;IACzB;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAA;CAC7B;AAED,gFAAgF;AAChF,wBAAgB,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,UAAU,GAAG,YAAY,GAAG,IAAI,CA8BrF"}

package/dist/auth/act-as.context.js

@@ -1,84 +1,40 @@
-import { jsx as _jsx } from "react/jsx-runtime";
-/**
- * The acting-principal binding (API §4). `IdentityContext` seats the effective
- * principal a subtree dispatches as — its bound kernel view + whoami + memory
- * scope; `useIdentityBinding` resolves it (an `<ActAs>` override, else the root
- * off ShellContext). `<ActAs>` rebinds a subtree to another principal with a
- * DISTINCT memory scope so results never leak across principals (§5.4).
- */
+import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
 import { createContext, useContext, useEffect, useMemo, useState } from 'react';
 import { ShellContext } from '../session/session.context.js';
-/** The root scope key — the memory's own default scope (`createMemory` default). */
-export const ROOT_SCOPE = 'default';
 export const IdentityContext = createContext(null);
 IdentityContext.displayName = 'AstraleIdentityContext';
-/**
- * The principal this subtree dispatches as. An <ActAs> value wins; otherwise the
- * root binding off ShellContext. Throws outside a provider, or when the bound
- * kernel resolved no identity (a bare prebuilt Shell with no auth surface).
- */
 export function useIdentityBinding() {
     const override = useContext(IdentityContext);
     if (override !== null)
         return override;
     const runtime = useContext(ShellContext);
-    if (runtime === null) {
+    if (runtime === null)
         throw new Error('identity hooks must be used within a <ShellProvider>');
-    }
-    if (runtime.self === null) {
-        throw new Error('identity hooks require an identity: this shell exposed no auth surface, so whoami ' +
-            'resolved nothing at boot');
-    }
-    // The root binding reads stable fields (self, shell.kernel), so a fresh object
-    // per render is inert — consumers key off `kernel`/`self`, both stable.
-    return { kernel: runtime.shell.kernel, self: runtime.self, scope: ROOT_SCOPE };
+    if (runtime.self === null)
+        throw new Error('the active Shell has no authenticated identity');
+    return { kernel: runtime.shell.kernel, self: runtime.self };
 }
-/**
- * A subtree that dispatches as another principal: rebinds the kernel (session.as),
- * resolves whoami, and provides a fresh identity binding with a DISTINCT memory
- * scope (`as:<id>`). Nestable — it rebinds from the current effective principal. A
- * brief nested boot holds the subtree (renders null) until whoami resolves.
- */
-export function ActAs({ credential, children }) {
-    const parent = useIdentityBinding();
-    // Key the rebind on a STABLE credential identity (like `configIdentity` does),
-    // so an inline object credential (`credential={{ … }}`) does not re-mint the
-    // session view — and re-run whoami, unmounting the subtree — every parent
-    // render. A thunk still keys by reference: pass a stable thunk to avoid churn.
-    const credKey = credentialIdentity(credential);
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-    const kernel = useMemo(() => parent.kernel.as(credential), [parent.kernel, credKey]);
-    const [self, setSelf] = useState(null);
+/** Bind a subtree to an explicitly supplied authenticated Kernel capability. */
+export function ActAs({ client, fallback, children }) {
+    const [state, setState] = useState({ status: 'pending' });
     useEffect(() => {
-        let alive = true;
-        setSelf(null);
-        void kernel.auth.whoami().then((node) => {
-            if (alive)
-                setSelf(node);
-        }, () => {
-            /* held (null) subtree on resolve failure — transport errors surface via the provider */
+        let active = true;
+        setState({ status: 'pending' });
+        void client.auth.whoami().then((self) => {
+            if (active)
+                setState({ status: 'ready', self });
+        }, (error) => {
+            if (active)
+                setState({ status: 'failed', error });
         });
         return () => {
-            alive = false;
+            active = false;
         };
-    }, [kernel]);
-    const value = useMemo(() => (self === null ? null : { kernel, self, scope: `as:${self.id}` }), [kernel, self]);
+    }, [client]);
+    const value = useMemo(() => (state.status === 'ready' ? { kernel: client, self: state.self } : null), [client, state]);
+    if (state.status === 'failed')
+        throw state.error;
     if (value === null)
-        return null;
+        return fallback === undefined ? null : _jsx(_Fragment, { children: fallback });
     return _jsx(IdentityContext.Provider, { value: value, children: children });
 }
-/**
- * A stable identity for a credential: the thunk by reference, a string as itself,
- * and an object by a serialized form — so an equal inline object does not churn
- * the memo (worst case a serialize failure falls back to reference identity).
- */
-function credentialIdentity(credential) {
-    if (typeof credential === 'function' || typeof credential === 'string')
-        return credential;
-    try {
-        return `cred:${JSON.stringify(credential)}`;
-    }
-    catch {
-        return credential;
-    }
-}

package/dist/auth/auth.hook.d.ts

@@ -1,3 +1,4 @@
 import type { AuthApi } from '@astrale-os/kernel-client/auth';
+/** The exact Client Auth capability for the effective subtree principal. */
 export declare function useAuth(): AuthApi;
 //# sourceMappingURL=auth.hook.d.ts.map

package/dist/auth/auth.hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.hook.d.ts","sourceRoot":"","sources":["../../src/auth/auth.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAA;AAkB7D,wBAAgB,OAAO,IAAI,OAAO,CAGjC"}
+{"version":3,"file":"auth.hook.d.ts","sourceRoot":"","sources":["../../src/auth/auth.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAA;AAI7D,4EAA4E;AAC5E,wBAAgB,OAAO,IAAI,OAAO,CAEjC"}

package/dist/auth/auth.hook.js

@@ -1,25 +1,5 @@
-/**
- * useAuth (API §4) — the imperative AuthApi of the effective principal
- * (whoami/credential/mint/delegate/check/grant/revoke/bind/unbind). Grant and
- * revoke additionally nudge the principal's useCan ledger on success, delivering
- * the Tier-0 local re-check (SPEC §11.3). DEVIATION: API §4 describes a pure
- * passthrough; the wrap is the only way to surface a local grant/revoke today,
- * since permissions dispatch as identity methods rather than graph patches.
- * Cross-client liveness still awaits the watch tiers (G7).
- */
-import { useMemo } from 'react';
 import { useIdentityBinding } from './act-as.context.js';
-import { ledgerFor } from './can.hook.js';
+/** The exact Client Auth capability for the effective subtree principal. */
 export function useAuth() {
-    const { kernel } = useIdentityBinding();
-    return useMemo(() => withLedgerNudge(kernel), [kernel]);
-}
-/** Wrap grant/revoke so a successful local change re-checks the principal's cells. */
-function withLedgerNudge(kernel) {
-    const auth = kernel.auth;
-    const ledger = ledgerFor(kernel);
-    const invalidate = () => ledger.invalidateAll();
-    const grant = ((arg) => Promise.resolve(auth.grant(arg)).then(invalidate));
-    const revoke = ((arg) => Promise.resolve(auth.revoke(arg)).then(invalidate));
-    return { ...auth, grant, revoke };
+    return useIdentityBinding().kernel.auth;
 }

package/dist/auth/can.hook.d.ts

@@ -1,40 +1,12 @@
-import type { AuthApi, Perms } from '@astrale-os/kernel-client/auth';
-import type { PathLike, Ref } from '@astrale-os/kernel-client/graph';
-import type { NodeValue, SessionView } from './act-as.context.js';
-/** A node value carries the id/class/path triple (mirrors the memory's `isNodeValue`). */
-export declare function isNodeValue(x: unknown): x is NodeValue;
-/** Normalize a `useCan` subject to a dispatchable `Ref` plus a stable dedup key. */
-export declare function toRef(on: NodeValue | PathLike): {
-    ref: Ref;
-    key: string;
+import type { NodeId } from '@astrale-os/sdk/graph/node';
+import type { PathLike } from '@astrale-os/sdk/graph/path';
+import type { schema } from '@astrale-os/sdk/schema';
+export type PolicyObject = NodeId | {
+    readonly id: NodeId;
 };
-/** One deduped check — its last-known value plus the subscribers watching it. */
-declare class CheckCell {
-    private readonly auth;
-    private readonly perms;
-    private readonly on;
-    value: boolean | undefined;
-    private inFlight;
-    private readonly listeners;
-    constructor(auth: AuthApi, perms: Perms, on: Ref);
-    subscribe: (onChange: () => void) => (() => void);
-    getSnapshot: () => boolean | undefined;
-    /** Run the check once when the value is unknown and nothing is in flight. */
-    ensure(): void;
-    /** Force a re-check (local grant/revoke on this principal). */
-    invalidate(): void;
-    private run;
-}
-/** Per-principal cell registry — dedup across the whole tree for one kernel handle. */
-export declare class CheckLedger {
-    private readonly auth;
-    private readonly cells;
-    constructor(auth: AuthApi);
-    cell(key: string, perms: Perms, on: Ref): CheckCell;
-    /** Re-check every observed cell — conservative Tier-0 sweep after a local grant/revoke. */
-    invalidateAll(): void;
-}
-export declare function ledgerFor(kernel: SessionView): CheckLedger;
-export declare function useCan(perms: Perms, on: NodeValue | PathLike | null | undefined): boolean | undefined;
-export {};
+/**
+ * Evaluate one declared Kernel policy for one exact graph object. This is a UI affordance; the
+ * invoked callable remains the authorization enforcement point.
+ */
+export declare function useCan(policy: PathLike | schema.PolicyRef | null | undefined, object: PolicyObject | null | undefined): boolean | undefined;
 //# sourceMappingURL=can.hook.d.ts.map

package/dist/auth/can.hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"can.hook.d.ts","sourceRoot":"","sources":["../../src/auth/can.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAA;AACpE,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,iCAAiC,CAAA;AAapE,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAOjE,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,SAAS,CAEtD;AAED,oFAAoF;AACpF,wBAAgB,KAAK,CAAC,EAAE,EAAE,SAAS,GAAG,QAAQ,GAAG;IAAE,GAAG,EAAE,GAAG,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAGzE;AAID,iFAAiF;AACjF,cAAM,SAAS;IAMX,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,EAAE;IAPrB,KAAK,EAAE,OAAO,GAAG,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAElD,YACmB,IAAI,EAAE,OAAO,EACb,KAAK,EAAE,KAAK,EACZ,EAAE,EAAE,GAAG,EACtB;IAEJ,SAAS,aAAc,MAAM,IAAI,KAAG,CAAC,MAAM,IAAI,CAAC,CAI/C;IAED,WAAW,QAAO,OAAO,GAAG,SAAS,CAAc;IAEnD,6EAA6E;IAC7E,MAAM,IAAI,IAAI,CAGb;IAED,+DAA+D;IAC/D,UAAU,IAAI,IAAI,CAMjB;IAED,OAAO,CAAC,GAAG;CAkBZ;AAED,uFAAuF;AACvF,qBAAa,WAAW;IAGV,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,YAA6B,IAAI,EAAE,OAAO,EAAI;IAE9C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,GAAG,SAAS,CAOlD;IAED,2FAA2F;IAC3F,aAAa,IAAI,IAAI,CAEpB;CACF;AAMD,wBAAgB,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAO1D;AAID,wBAAgB,MAAM,CACpB,KAAK,EAAE,KAAK,EACZ,EAAE,EAAE,SAAS,GAAG,QAAQ,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,GAAG,SAAS,CAoBrB"}
+{"version":3,"file":"can.hook.d.ts","sourceRoot":"","sources":["../../src/auth/can.hook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAA;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAOpD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAE3D;;;GAGG;AACH,wBAAgB,MAAM,CACpB,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,GAAG,SAAS,EACtD,MAAM,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GACtC,OAAO,GAAG,SAAS,CA2BrB"}