@astrale-os/shell 0.1.0 → 0.2.0

package/dist/application/view.js

@@ -0,0 +1,18 @@
+import { schema } from '@astrale-domains/workspace-schema';
+export function createShellDomainView(kernel) {
+    let bound = null;
+    const view = () => (bound ??= kernel.withSchema(schema));
+    return {
+        view,
+        bindAs(type, node) {
+            const v = view();
+            return v.bindAny(node).is(type) ? v.bind(type, node) : null;
+        },
+    };
+}
+/** Normalize a typed traversal result (single | array | null) to an array. */
+export function asArray(result) {
+    if (result === null)
+        return [];
+    return Array.isArray(result) ? [...result] : [result];
+}

package/dist/{application/channels/children-channel.d.ts → channel/children.d.ts}

@@ -1,7 +1,7 @@
-import type { ShellMessage } from '../../domain/message/types';
-import type { Transport } from '../../ports/transport';
+import type { MessageOf, MessageType, ShellMessage } from '../message/message';
 import type { MessageObserver } from './observer';
-import type { MessageOf, MessageType } from './types';
+import type { Transport } from './transport';
+/** Multiplexed channels down to child windows, keyed by windowId. */
 export interface ChildrenChannel {
     send(windowId: string, message: ShellMessage): void;
     on<T extends MessageType>(type: T, handler: (windowId: string, message: MessageOf<T>) => void): () => void;
@@ -18,4 +18,4 @@ export type ChildrenChannelConfig = {
     onDeliveryFailed?: (windowId: string, message: ShellMessage) => void;
 };
 export declare function createChildrenChannel(config: ChildrenChannelConfig): ChildrenChannelController;
-//# sourceMappingURL=children-channel.d.ts.map
+//# sourceMappingURL=children.d.ts.map

package/dist/channel/children.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"children.d.ts","sourceRoot":"","sources":["../../src/channel/children.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE5C,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IACnD,EAAE,CAAC,CAAC,SAAS,WAAW,EACtB,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,GACzD,MAAM,IAAI,CAAA;IACb,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;IAC9B,OAAO,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;CACzD;AAED,MAAM,WAAW,yBAA0B,SAAQ,eAAe;IAChE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI,CAAA;IACpD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,eAAe,CAAA;IACzB,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,KAAK,IAAI,CAAA;CACrE,CAAA;AAID,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,yBAAyB,CAmF9F"}

package/dist/channel/listeners.d.ts

@@ -0,0 +1,8 @@
+import type { MessageHandler, MessageOf, MessageType, ShellMessage } from '../message/message';
+/** Per-message-type listener registry — the fan-out primitive channels share. */
+export interface MessageListeners {
+    on<T extends MessageType>(type: T, handler: MessageHandler<MessageOf<T>>): () => void;
+    dispatch(message: ShellMessage): void;
+}
+export declare function createMessageListeners(): MessageListeners;
+//# sourceMappingURL=listeners.d.ts.map

package/dist/channel/listeners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listeners.d.ts","sourceRoot":"","sources":["../../src/channel/listeners.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAE9F,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,CAAC,SAAS,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAA;IACrF,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;CACtC;AAED,wBAAgB,sBAAsB,IAAI,gBAAgB,CA2BzD"}

package/dist/{adapters/message-port.transport.d.ts → channel/message-port.d.ts}

@@ -1,7 +1,7 @@
-import type { Transport } from '../ports/transport';
+import type { Transport } from './transport';
 export type MessagePortTransportConfig = {
     port: MessagePort;
     onClose?: () => void;
 };
 export declare function createMessagePortTransport(config: MessagePortTransportConfig): Transport;
-//# sourceMappingURL=message-port.transport.d.ts.map
+//# sourceMappingURL=message-port.d.ts.map

package/dist/channel/message-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-port.d.ts","sourceRoot":"","sources":["../../src/channel/message-port.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE5C,MAAM,MAAM,0BAA0B,GAAG;IACvC,IAAI,EAAE,WAAW,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;CACrB,CAAA;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,GAAG,SAAS,CAyCxF"}

package/dist/{application/channels → channel}/observer.d.ts

@@ -1,6 +1,7 @@
-import type { ShellMessage } from '../../domain/message/types';
+import type { ShellMessage } from '../message/message';
 export type MessageDirection = 'inbound' | 'outbound';
 export type ObserverHandler = (message: ShellMessage, direction: MessageDirection) => void;
+/** Tap on every message crossing this shell, in both directions (`shell.onMessage`). */
 export interface MessageObserver {
     notify(direction: MessageDirection, message: ShellMessage): void;
     subscribe(handler: ObserverHandler): () => void;

package/dist/channel/observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer.d.ts","sourceRoot":"","sources":["../../src/channel/observer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,CAAA;AAErD,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,KAAK,IAAI,CAAA;AAE1F,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IAChE,SAAS,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,IAAI,CAAA;CAChD;AAED,wBAAgB,qBAAqB,IAAI,eAAe,CAqBvD"}

package/dist/{application/channels/parent-channel.d.ts → channel/parent.d.ts}

@@ -1,7 +1,7 @@
-import type { ShellMessage } from '../../domain/message/types';
-import type { Transport } from '../../ports/transport';
+import type { MessageHandler, MessageOf, MessageType, ShellMessage } from '../message/message';
 import type { MessageObserver } from './observer';
-import type { MessageHandler, MessageOf, MessageType } from './types';
+import type { Transport } from './transport';
+/** The child's single channel up to its parent shell. */
 export interface ParentChannel {
     send(message: ShellMessage): void;
     on<T extends MessageType>(type: T, handler: MessageHandler<MessageOf<T>>): () => void;
@@ -14,4 +14,4 @@ export type ParentChannelConfig = {
     observer: MessageObserver;
 };
 export declare function createParentChannel(config: ParentChannelConfig): ParentChannelController;
-//# sourceMappingURL=parent-channel.d.ts.map
+//# sourceMappingURL=parent.d.ts.map

package/dist/channel/parent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parent.d.ts","sourceRoot":"","sources":["../../src/channel/parent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAI5C,yDAAyD;AACzD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IACjC,EAAE,CAAC,CAAC,SAAS,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAA;CACtF;AAED,MAAM,WAAW,uBAAwB,SAAQ,aAAa;IAC5D,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,SAAS,CAAA;IACpB,QAAQ,EAAE,eAAe,CAAA;CAC1B,CAAA;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,uBAAuB,CAqBxF"}

package/dist/{application/channels/parent-channel.js → channel/parent.js}

@@ -1,4 +1,4 @@
-import { createMessageListeners } from './types';
+import { createMessageListeners } from './listeners';
 export function createParentChannel(config) {
     const { transport, observer } = config;
     const listeners = createMessageListeners();

package/dist/channel/transport.d.ts

@@ -0,0 +1,8 @@
+import type { ShellMessage } from '../message/message';
+/** The pipe a channel rides: one peer, ordered delivery, no reply semantics. */
+export interface Transport {
+    send(message: ShellMessage): void;
+    onMessage(handler: (message: ShellMessage) => void): void;
+    close(): void;
+}
+//# sourceMappingURL=transport.d.ts.map

package/dist/channel/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/channel/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEtD,gFAAgF;AAChF,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;IACjC,SAAS,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI,CAAA;IACzD,KAAK,IAAI,IAAI,CAAA;CACd"}

package/dist/index.d.ts

@@ -1,42 +1,57 @@
-export type { ErrorCode } from './domain/message/errors';
-export type { IntentRegistry, CtrlRegistry, ViewRef } from './domain/message/registries';
-export type { ShellMessage, IntentMessage, IntentEnvelope, CtrlMessage, ErrorMessage, } from './domain/message/types';
-export type { WindowConfig, WindowCapabilities, SandboxProfile } from './domain/window/config';
-export type { Window, WindowState } from './domain/window/window';
-export { transition as lifecycleTransition } from './domain/window/lifecycle';
-export type { LifecycleEvent, TransitionResult } from './domain/window/lifecycle';
-export type { IntentMiddleware } from './domain/intent/pipeline';
-export type { IntentRouter } from './domain/intent/router';
-export { loggingMiddleware } from './domain/intent/middleware/logging';
-export type { LoggingConfig, LoggingEntry, LoggingSink } from './domain/intent/middleware/logging';
-export { capabilitiesMiddleware } from './domain/intent/middleware/capabilities';
-export type { CapabilitiesConfig, CapabilityLookup, CapabilityViolation, } from './domain/intent/middleware/capabilities';
-export { rateLimitMiddleware } from './domain/intent/middleware/rate-limit';
-export type { RateLimitConfig, RateLimitViolation } from './domain/intent/middleware/rate-limit';
-export type { DelegationScope, DelegationToken, TokenState } from './domain/identity/delegation';
-export { stateOf, isExpired } from './domain/identity/delegation';
-export type { Transport } from './ports/transport';
-export type { ShellAdapter, WindowHandle } from './ports/shell-adapter';
-export type { KernelClient } from './ports/kernel-client';
-export { createKernelClientAdapter } from './adapters/kernel-client.adapter';
-export type { KernelClientAdapter, CreateKernelClientAdapterOpts, } from './adapters/kernel-client.adapter';
-export { createMessagePortTransport } from './adapters/message-port.transport';
-export type { MessagePortTransportConfig } from './adapters/message-port.transport';
-export { createIframeShellAdapter } from './adapters/iframe.shell-adapter';
-export type { IframeShellAdapterConfig } from './adapters/iframe.shell-adapter';
-export type { Shell, ShellConfig, StandaloneConfig, SandboxedConfig, MountParams, MountedWindow, CloseResult, ParentChannel, ChildrenChannel, MessageDirection, MessageHandler, ObserverHandler, } from './application/shell';
-export { createShell } from './application/shell';
-export { runParentHandshake } from './application/windowing/handshake';
-export type { HandshakeParams, HandshakeError, HandshakeResult, } from './application/windowing/handshake';
-export { performChildInit } from './application/windowing/child-init';
-export type { ChildInitParams, ChildInitResult } from './application/windowing/child-init';
-export { createTokenRefresher } from './application/windowing/token-refresh';
-export type { TokenRefreshConfig, TokenRefresher } from './application/windowing/token-refresh';
-export { createIntentPipeline } from './application/intent/pipeline-runner';
-export type { IntentPipeline } from './application/intent/pipeline-runner';
-export { createIntentRouter } from './application/intent/router';
-export type { IntentRouterController, IntentRouterConfig, IntentDecision, IntentOrigin, IntentPolicy, IntentContext, LocalIntentHandler, } from './application/intent/router';
-export { requestIntent, replyToIntent, requestAccess } from './application/intent/request';
-export { INIT_REQUEST_TYPE, INIT_RESPONSE_TYPE, isInitRequest, isInitResponse, } from './application/windowing/protocol';
-export type { InitRequestMessage, InitResponseMessage } from './application/windowing/protocol';
+export type { IntentRegistry, ViewRef, PayloadOf, ReplyOf, IntentEnvelope, IntentMessage, } from './message/intent';
+export type { CtrlRegistry, CtrlMessage } from './message/ctrl';
+export type { ErrorCode, ErrorMessage } from './message/error';
+export type { ShellMessage, MessageHandler } from './message/message';
+export { INIT_REQUEST_TYPE, INIT_RESPONSE_TYPE, isInitRequest, isInitResponse, } from './message/init';
+export type { InitRequestMessage, InitResponseMessage } from './message/init';
+export type { KernelClient } from './kernel/client';
+export { createKernelClientAdapter } from './kernel/session';
+export type { KernelClientAdapter, CreateKernelClientAdapterOpts } from './kernel/session';
+export type { DelegationScope, DelegationToken, TokenState } from './kernel/delegation/token';
+export { stateOf, isExpired } from './kernel/delegation/token';
+export { createTokenRefresher } from './kernel/delegation/refresh';
+export type { TokenRefreshConfig, TokenRefresher } from './kernel/delegation/refresh';
+export type { Transport } from './channel/transport';
+export { createMessagePortTransport } from './channel/message-port';
+export type { MessagePortTransportConfig } from './channel/message-port';
+export type { ParentChannel } from './channel/parent';
+export type { ChildrenChannel } from './channel/children';
+export type { MessageDirection, ObserverHandler } from './channel/observer';
+export type { Window, WindowState } from './window/window';
+export type { WindowConfig, WindowCapabilities, SandboxProfile } from './window/capabilities';
+export { transition as lifecycleTransition } from './window/lifecycle/transition';
+export type { LifecycleEvent, TransitionResult } from './window/lifecycle/transition';
+export type { ShellAdapter, WindowHandle } from './window/embed/adapter';
+export { createIframeShellAdapter } from './window/embed/iframe';
+export type { IframeShellAdapterConfig } from './window/embed/iframe';
+export type { MountParams, MountCredential, MountedWindow, CloseResult, } from './window/mount/params';
+export { runParentHandshake } from './window/mount/handshake';
+export type { HandshakeParams, HandshakeError, HandshakeResult } from './window/mount/handshake';
+export { createIntentPipeline } from './intent/pipeline';
+export type { IntentMiddleware, IntentPipeline } from './intent/pipeline';
+export type { IntentDecision, IntentOrigin, IntentPolicy, IntentContext } from './intent/policy';
+export { createIntentRouter } from './intent/router';
+export type { IntentRouter, IntentRouterController, IntentRouterConfig, LocalIntentHandler, } from './intent/router';
+export { requestIntent, replyToIntent } from './intent/request';
+export { loggingMiddleware } from './intent/middleware/logging';
+export type { LoggingConfig, LoggingEntry, LoggingSink } from './intent/middleware/logging';
+export { capabilitiesMiddleware } from './intent/middleware/capabilities';
+export type { CapabilitiesConfig, CapabilityLookup, CapabilityViolation, } from './intent/middleware/capabilities';
+export { rateLimitMiddleware } from './intent/middleware/rate-limit';
+export type { RateLimitConfig, RateLimitViolation } from './intent/middleware/rate-limit';
+export { createOsNamespaces } from './application/namespaces';
+export type { OsNamespaces, CreateOsNamespacesDeps } from './application/namespaces';
+export type { UserNamespace, UserNode, RoleNode } from './application/user';
+export type { SpacesNamespace, SpaceNode } from './application/spaces';
+export type { AppsNamespace, ApplicationNode } from './application/apps';
+export { openAppSession } from './application/session/open';
+export type { OpenAppSessionDeps } from './application/session/open';
+export { AppSessionRefreshError } from './application/session/session';
+export type { AppSession, AppView, RefreshStep } from './application/session/session';
+export { createShell } from './shell/create';
+export type { Shell } from './shell/shell';
+export type { ShellConfig, StandaloneConfig, SandboxedConfig } from './shell/config';
+export { requestAccess } from './shell/access';
+export { performChildInit } from './shell/sandboxed/boot';
+export type { ChildInitParams, ChildInitResult } from './shell/sandboxed/boot';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACxD,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AACxF,YAAY,EACV,YAAY,EACZ,aAAa,EACb,cAAc,EACd,WAAW,EACX,YAAY,GACb,MAAM,wBAAwB,CAAA;AAG/B,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC9F,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,UAAU,IAAI,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAC7E,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAGjF,YAAY,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAChE,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAA;AACtE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAA;AAChF,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,yCAAyC,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAA;AAC3E,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAA;AAGhG,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAA;AAChG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAGjE,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAClD,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AACvE,YAAY,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAGzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AAC5E,YAAY,EACV,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAA;AAC9E,YAAY,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAA;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,YAAY,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAG/E,YAAY,EACV,KAAK,EACL,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,aAAa,EACb,WAAW,EACX,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,eAAe,GAChB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAGjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAA;AACtE,YAAY,EACV,eAAe,EACf,cAAc,EACd,eAAe,GAChB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAA;AACrE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAA;AAC1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAA;AAC5E,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAG/F,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAA;AAC3E,YAAY,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAChE,YAAY,EACV,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,kBAAkB,GACnB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAG1F,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,cAAc,GACf,MAAM,kCAAkC,CAAA;AACzC,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,cAAc,EACd,OAAO,EACP,SAAS,EACT,OAAO,EACP,cAAc,EACd,aAAa,GACd,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC/D,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9D,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACrE,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,cAAc,GACf,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AAG7E,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,YAAY,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAA;AAC1F,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC7F,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAClE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAGrF,YAAY,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AACnE,YAAY,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACzD,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AAG3E,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC1D,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAC7F,OAAO,EAAE,UAAU,IAAI,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACjF,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAA;AACrF,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,YAAY,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AACrE,YAAY,EACV,WAAW,EACX,eAAe,EACf,aAAa,EACb,WAAW,GACZ,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC7D,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAGhG,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACzE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,YAAY,EACV,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAC3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAA;AACzE,YAAY,EACV,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AACpE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAA;AAGzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAC7D,YAAY,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AACpF,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC3E,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACtE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AACtE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAGrF,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,YAAY,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AAC1C,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA"}

package/dist/index.js

@@ -1,20 +1,23 @@
-export { transition as lifecycleTransition } from './domain/window/lifecycle';
-export { loggingMiddleware } from './domain/intent/middleware/logging';
-export { capabilitiesMiddleware } from './domain/intent/middleware/capabilities';
-export { rateLimitMiddleware } from './domain/intent/middleware/rate-limit';
-export { stateOf, isExpired } from './domain/identity/delegation';
-// ─── adapters ───────────────────────────────────────────────────────────────
-export { createKernelClientAdapter } from './adapters/kernel-client.adapter';
-export { createMessagePortTransport } from './adapters/message-port.transport';
-export { createIframeShellAdapter } from './adapters/iframe.shell-adapter';
-export { createShell } from './application/shell';
-// ─── application/windowing (advanced / testing) ─────────────────────────────
-export { runParentHandshake } from './application/windowing/handshake';
-export { performChildInit } from './application/windowing/child-init';
-export { createTokenRefresher } from './application/windowing/token-refresh';
-// ─── application/intent (advanced / testing) ────────────────────────────────
-export { createIntentPipeline } from './application/intent/pipeline-runner';
-export { createIntentRouter } from './application/intent/router';
-export { requestIntent, replyToIntent, requestAccess } from './application/intent/request';
-// ─── Init-request protocol (shared with host pages) ─────────────────────────
-export { INIT_REQUEST_TYPE, INIT_RESPONSE_TYPE, isInitRequest, isInitResponse, } from './application/windowing/protocol';
+export { INIT_REQUEST_TYPE, INIT_RESPONSE_TYPE, isInitRequest, isInitResponse, } from './message/init';
+export { createKernelClientAdapter } from './kernel/session';
+export { stateOf, isExpired } from './kernel/delegation/token';
+export { createTokenRefresher } from './kernel/delegation/refresh';
+export { createMessagePortTransport } from './channel/message-port';
+export { transition as lifecycleTransition } from './window/lifecycle/transition';
+export { createIframeShellAdapter } from './window/embed/iframe';
+export { runParentHandshake } from './window/mount/handshake';
+// ─── intent ─────────────────────────────────────────────────────────────────
+export { createIntentPipeline } from './intent/pipeline';
+export { createIntentRouter } from './intent/router';
+export { requestIntent, replyToIntent } from './intent/request';
+export { loggingMiddleware } from './intent/middleware/logging';
+export { capabilitiesMiddleware } from './intent/middleware/capabilities';
+export { rateLimitMiddleware } from './intent/middleware/rate-limit';
+// ─── application (OS plane: shell.user / .spaces / .apps) ───────────────────
+export { createOsNamespaces } from './application/namespaces';
+export { openAppSession } from './application/session/open';
+export { AppSessionRefreshError } from './application/session/session';
+// ─── shell ──────────────────────────────────────────────────────────────────
+export { createShell } from './shell/create';
+export { requestAccess } from './shell/access';
+export { performChildInit } from './shell/sandboxed/boot';

package/dist/{domain/intent → intent}/middleware/capabilities.d.ts

@@ -1,5 +1,5 @@
-import type { IntentRegistry } from '../../message/registries';
-import type { WindowCapabilities } from '../../window/config';
+import type { IntentRegistry } from '../../message/intent';
+import type { WindowCapabilities } from '../../window/capabilities';
 import type { IntentMiddleware } from '../pipeline';
 export type CapabilityLookup = (sender: string) => WindowCapabilities | undefined;
 export type CapabilityViolation = {

package/dist/intent/middleware/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../../src/intent/middleware/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEnD,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,kBAAkB,GAAG,SAAS,CAAA;AAEjF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,cAAc,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IAEjC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,mBAAmB,KAAK,IAAI,CAAA;IAE/D;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAE5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC/B,CAAA;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,GAAG,gBAAgB,CAkBnF"}

package/dist/intent/middleware/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../../../src/intent/middleware/logging.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEnD,MAAM,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;AAEvD,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAG,KAAK,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAA;CAC5B,CAAA;AAED,wBAAgB,iBAAiB,CAAC,MAAM,GAAE,aAAkB,GAAG,gBAAgB,CAQ9E"}

package/dist/{domain/intent → intent}/middleware/rate-limit.d.ts

@@ -1,4 +1,4 @@
-import type { IntentMessage } from '../../message/types';
+import type { IntentMessage } from '../../message/intent';
 import type { IntentMiddleware } from '../pipeline';
 export type RateLimitKey = (message: IntentMessage) => string;
 export type RateLimitViolation = {

package/dist/intent/middleware/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/intent/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEnD,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,MAAM,CAAA;AAE7D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,GAAG,CAAC,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,kBAAkB,KAAK,IAAI,CAAA;CAC/D,CAAA;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,gBAAgB,CA+B7E"}

package/dist/{application/intent/pipeline-runner.d.ts → intent/pipeline.d.ts}

@@ -1,5 +1,5 @@
-import type { IntentMiddleware } from '../../domain/intent/pipeline';
-import type { IntentMessage } from '../../domain/message/types';
+import type { IntentMessage } from '../message/intent';
+export type IntentMiddleware = (message: IntentMessage, next: () => Promise<void>) => Promise<void>;
 export interface IntentPipeline {
     use(middleware: IntentMiddleware): void;
     run(message: IntentMessage, terminate: () => Promise<void>): Promise<void>;
@@ -9,4 +9,4 @@ export interface IntentPipeline {
  * or wrap the call to `next`. `terminate` is the innermost handler (router).
  */
 export declare function createIntentPipeline(): IntentPipeline;
-//# sourceMappingURL=pipeline-runner.d.ts.map
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/intent/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/intent/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEtD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;AAEnG,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAA;IACvC,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3E;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,cAAc,CAuBrD"}

package/dist/intent/policy.d.ts

@@ -0,0 +1,40 @@
+import type { IntentMessage, IntentRegistry } from '../message/intent';
+import type { Window } from '../window/window';
+/**
+ * Decision produced by a routing policy: where an inbound intent should go.
+ *
+ *  - `local`: the shell (entry point or sandboxed parent) handles it itself.
+ *  - `parent`: forward upstream (only valid for sandboxed children).
+ *  - `child`: forward to a specific child window.
+ *  - `drop`: discard silently (e.g., handled fully by a middleware).
+ */
+export type IntentDecision<K extends keyof IntentRegistry = keyof IntentRegistry> = {
+    kind: 'local';
+    message: IntentMessage<K>;
+} | {
+    kind: 'parent';
+    message: IntentMessage<K>;
+} | {
+    kind: 'child';
+    windowId: string;
+    message: IntentMessage<K>;
+} | {
+    kind: 'drop';
+};
+export type IntentOrigin = 'parent' | 'child' | 'self';
+export type IntentPolicy = (message: IntentMessage, ctx: IntentContext) => IntentDecision | Promise<IntentDecision>;
+export interface IntentContext {
+    readonly selfWindowId: string;
+    readonly origin: IntentOrigin;
+    readonly windows: ReadonlyMap<string, Window>;
+    readonly hasParent: boolean;
+}
+/**
+ * Default policy:
+ *  - intent arrives from a child → handle locally
+ *  - intent arrives from the parent → handle locally
+ *  - intent initiated locally (self) → send up to parent if we have one,
+ *    otherwise keep it local
+ */
+export declare function defaultPolicy(): IntentPolicy;
+//# sourceMappingURL=policy.d.ts.map

package/dist/intent/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/intent/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAE9C;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,MAAM,cAAc,GAAG,MAAM,cAAc,IAC5E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpB,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAA;AAEtD,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,aAAa,KACf,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;AAE7C,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,IAAI,YAAY,CAO5C"}

package/dist/intent/policy.js

@@ -0,0 +1,15 @@
+/**
+ * Default policy:
+ *  - intent arrives from a child → handle locally
+ *  - intent arrives from the parent → handle locally
+ *  - intent initiated locally (self) → send up to parent if we have one,
+ *    otherwise keep it local
+ */
+export function defaultPolicy() {
+    return (message, ctx) => {
+        if (ctx.origin === 'self') {
+            return ctx.hasParent ? { kind: 'parent', message } : { kind: 'local', message };
+        }
+        return { kind: 'local', message };
+    };
+}

package/dist/{application/intent → intent}/request.d.ts

@@ -1,8 +1,6 @@
-import type { IntentRegistry } from '../../domain/message/registries';
-import type { IntentMessage } from '../../domain/message/types';
-import type { ChildrenChannel } from '../channels/children-channel';
-import type { ParentChannel } from '../channels/parent-channel';
-import type { Shell } from '../shell';
+import type { ChildrenChannel } from '../channel/children';
+import type { ParentChannel } from '../channel/parent';
+import type { IntentMessage, IntentRegistry, PayloadOf, ReplyOf } from '../message/intent';
 /**
  * Request/reply over the otherwise fire-and-forget intent transport.
  *
@@ -16,19 +14,12 @@ import type { Shell } from '../shell';
  * the parent always replies on every path. A dead parent means the view is
  * gone too, so a never-resolving promise cannot strand a live view.
  */
-export declare function requestIntent<K extends keyof IntentRegistry>(parent: ParentChannel, name: K, payload: IntentRegistry[K]['payload']): Promise<IntentRegistry[K]['response']>;
+export declare function requestIntent<K extends keyof IntentRegistry>(parent: ParentChannel, name: K, payload: PayloadOf<K>): Promise<ReplyOf<K>>;
 /**
  * Parent-side counterpart to `requestIntent`: deliver `result` back to the
  * originating child window, keyed by the request's `correlationId`. No-op for
  * a request that carried no `correlationId` (a fire-and-forget intent), or if
  * the child window has since detached (best-effort, drops silently).
  */
-export declare function replyToIntent<K extends keyof IntentRegistry>(children: ChildrenChannel, windowId: string, request: IntentMessage<K>, result: IntentRegistry[K]['response']): void;
-/**
- * View SDK convenience: ask the user (via the root shell) to grant `perms` on
- * `node` to `identity`. Resolves with the bitmask actually granted (0 if the
- * user declined or there was no parent to ask). The view typically passes its
- * own identity (from `whoami`) as `identity`.
- */
-export declare function requestAccess(shell: Shell, opts: IntentRegistry['requestAccess']['payload']): Promise<IntentRegistry['requestAccess']['response']>;
+export declare function replyToIntent<K extends keyof IntentRegistry>(children: ChildrenChannel, windowId: string, request: IntentMessage<K>, result: ReplyOf<K>): void;
 //# sourceMappingURL=request.d.ts.map

package/dist/intent/request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/intent/request.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAE1F;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,cAAc,EAC1D,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,GACpB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAoBrB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,MAAM,cAAc,EAC1D,QAAQ,EAAE,eAAe,EACzB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,EACzB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GACjB,IAAI,CAYN"}

package/dist/{application/intent → intent}/request.js

@@ -1,4 +1,3 @@
-import { NO_PERMS } from '@astrale-os/kernel-core/permissions';
 /**
  * Request/reply over the otherwise fire-and-forget intent transport.
  *
@@ -24,11 +23,15 @@ export function requestIntent(parent, name, payload) {
             off();
             resolve(reply.result);
         });
-        parent.send({
+        // `PayloadOf<K>` is a deferred conditional TS can't reconcile with the
+        // `ShellMessage` union across a generic `K`; the payload is exact, so assert
+        // the concrete message shape.
+        const message = {
             type: 'intent',
             version: 1,
             envelope: { name, payload, sender: { windowId: 'self' }, correlationId },
-        });
+        };
+        parent.send(message);
     });
 }
 /**
@@ -51,20 +54,3 @@ export function replyToIntent(children, windowId, request, result) {
         },
     });
 }
-/**
- * View SDK convenience: ask the user (via the root shell) to grant `perms` on
- * `node` to `identity`. Resolves with the bitmask actually granted (0 if the
- * user declined or there was no parent to ask). The view typically passes its
- * own identity (from `whoami`) as `identity`.
- */
-export function requestAccess(shell, opts) {
-    if (!shell.parent)
-        return Promise.resolve({ granted: false, perms: NO_PERMS });
-    // A sandboxed shell's `parent` is a proxy that throws until `init()` resolves;
-    // honour the documented "no parent to ask" fallback instead of surfacing that
-    // opaque rejection to the caller.
-    return requestIntent(shell.parent, 'requestAccess', opts).catch(() => ({
-        granted: false,
-        perms: NO_PERMS,
-    }));
-}

package/dist/intent/router.d.ts

@@ -0,0 +1,31 @@
+import type { ChildrenChannelController } from '../channel/children';
+import type { ParentChannel } from '../channel/parent';
+import type { IntentMessage, IntentRegistry } from '../message/intent';
+import type { Window } from '../window/window';
+import type { IntentPipeline } from './pipeline';
+import type { IntentOrigin, IntentPolicy } from './policy';
+/** Minimal dispatch-only router surface (no current in-package implementer). */
+export interface IntentRouter {
+    dispatch<K extends keyof IntentRegistry>(message: IntentMessage<K>): Promise<void>;
+}
+export type LocalIntentHandler<K extends keyof IntentRegistry = keyof IntentRegistry> = (message: IntentMessage<K>) => void | Promise<void>;
+export interface IntentRouterController {
+    /**
+     * Route an inbound intent. `senderWindowId`, when provided, is the trusted
+     * windowId the channel authenticated; it overrides the (forgeable)
+     * `envelope.sender.windowId` before the pipeline runs.
+     */
+    handleInbound(origin: IntentOrigin, message: IntentMessage, senderWindowId?: string): Promise<void>;
+    dispatchLocal(message: IntentMessage): Promise<void>;
+    setPolicy(policy: IntentPolicy): void;
+    onLocal<K extends keyof IntentRegistry>(name: K, handler: LocalIntentHandler<K>): () => void;
+}
+export type IntentRouterConfig = {
+    selfWindowId: string;
+    pipeline: IntentPipeline;
+    parent: ParentChannel | null;
+    children: ChildrenChannelController;
+    windows: ReadonlyMap<string, Window>;
+};
+export declare function createIntentRouter(config: IntentRouterConfig): IntentRouterController;
+//# sourceMappingURL=router.d.ts.map

package/dist/intent/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/intent/router.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,KAAK,EAAkB,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAI1E,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,CAAC,SAAS,MAAM,cAAc,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnF;AAED,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,MAAM,cAAc,GAAG,MAAM,cAAc,IAAI,CACtF,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,KACtB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;AAEzB,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,aAAa,CACX,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,aAAa,EACtB,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAAA;IACrC,OAAO,CAAC,CAAC,SAAS,MAAM,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAA;CAC7F;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,cAAc,CAAA;IACxB,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;IAC5B,QAAQ,EAAE,yBAAyB,CAAA;IACnC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACrC,CAAA;AAOD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,sBAAsB,CA4ErF"}

package/dist/{application/intent → intent}/router.js

@@ -1,18 +1,4 @@
-/**
- * Default policy:
- *  - intent arrives from a child → handle locally
- *  - intent arrives from the parent → handle locally
- *  - intent initiated locally (self) → send up to parent if we have one,
- *    otherwise keep it local
- */
-function defaultPolicy() {
-    return (message, ctx) => {
-        if (ctx.origin === 'self') {
-            return ctx.hasParent ? { kind: 'parent', message } : { kind: 'local', message };
-        }
-        return { kind: 'local', message };
-    };
-}
+import { defaultPolicy } from './policy';
 /** Return a copy of `message` with a trusted `sender.windowId`. */
 function withSender(message, windowId) {
     return { ...message, envelope: { ...message.envelope, sender: { windowId } } };

package/dist/kernel/client.d.ts

@@ -0,0 +1,33 @@
+import type { FnMap } from '@astrale-os/kernel-client';
+import type { BoundClientSessionView } from '@astrale-os/kernel-client/session';
+/**
+ * The shell's kernel handle — the kernel-client `BoundClientSessionView` bound
+ * to this shell's credential. The bound view IS the surface: the graph sugar
+ * (`.get/.node/.children/.query/.mutate/…` over the two kernel doors), dispatch
+ * (`.call/.stream/.as/…`) and the `auth` control plane
+ * (`.auth.mint/.credential/.whoami/…`). The extras below are the deprecated
+ * iframe ABI, kept working until Views adopt `.auth.*`.
+ */
+export type KernelClient = BoundClientSessionView<FnMap> & {
+    /**
+     * @deprecated iframe ABI — use `shell.kernel.auth.mint()`. Despite the name,
+     * mints an *identity* credential for the current principal (v1 misnomer).
+     */
+    mintDelegation(): Promise<string>;
+    /**
+     * @deprecated iframe ABI — use `shell.kernel.auth.credential()`. The current
+     * JWT for a raw `fetch()`; auto-refreshed, so read fresh per request.
+     */
+    authToken(): string;
+    /**
+     * Kernel envelope endpoint this shell talks to. In same-origin GUI shells this
+     * may be the resolved `/api/` route; direct instance/dev shells usually pass a
+     * full instance endpoint such as `https://example.eu.astrale.ai/api/`.
+     *
+     * Worker REST routes are different audiences. Do not assume `url` is the right
+     * target for a raw stream just because the source credential came from the
+     * kernel.
+     */
+    readonly url: string;
+};
+//# sourceMappingURL=client.d.ts.map