@astrale-os/shell 0.2.0 → 0.3.1

package/dist/window/mount/credential.js

@@ -1,4 +1,4 @@
-import { createTokenRefresher } from '../../kernel/delegation/refresh';
+import { createTokenRefresher } from '../../kernel/delegation/refresh.js';
 /** No-op refresher for windows with no token to refresh (plain mounts, no-refresh credentials). */
 export const NOOP_REFRESHER = {
     start: () => { },

package/dist/window/mount/handshake.js

@@ -1,4 +1,4 @@
-import { INIT_RESPONSE_TYPE, isInitRequest } from '../../message/init';
+import { INIT_RESPONSE_TYPE, isInitRequest } from '../../message/init.js';
 /** Parent-side handshake: wait for INIT_REQUEST, transfer a MessagePort, complete ctrl:handshake. */
 export function runParentHandshake(params) {
     const { iframe, expectedOrigin, timeoutMs } = params;

package/dist/window/mount/mount.d.ts

@@ -1,9 +1,9 @@
-import type { ChildrenChannelController } from '../../channel/children';
-import type { KernelClient } from '../../kernel/client';
-import type { ShellAdapter } from '../embed/adapter';
-import type { LifecycleController } from '../lifecycle/states';
-import type { Window } from '../window';
-import type { CloseResult, MountedWindow, MountParams } from './params';
+import type { ChildrenChannelController } from '../../channel/children.js';
+import type { KernelClient } from '../../kernel/client.js';
+import type { ShellAdapter } from '../embed/adapter.js';
+import type { LifecycleController } from '../lifecycle/states.js';
+import type { Window } from '../window.js';
+import type { CloseResult, MountedWindow, MountParams } from './params.js';
 export type MountControllerConfig = {
     adapter: ShellAdapter;
     kernel: KernelClient;

package/dist/window/mount/mount.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../../../src/window/mount/mount.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAEvC,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAWvE,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,YAAY,CAAA;IACrB,MAAM,EAAE,YAAY,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,yBAAyB,CAAA;IAC1C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,SAAS,EAAE,mBAAmB,CAAA;CAC/B,CAAA;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAClD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAC7F,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAuJpF"}
+{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../../../src/window/mount/mount.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAC1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAE1C,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAW1E,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,YAAY,CAAA;IACrB,MAAM,EAAE,YAAY,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,yBAAyB,CAAA;IAC1C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,SAAS,EAAE,mBAAmB,CAAA;CAC/B,CAAA;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAClD,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAC7F,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,eAAe,CAuJpF"}

package/dist/window/mount/mount.js

@@ -1,8 +1,8 @@
-import { createMessagePortTransport } from '../../channel/message-port';
-import { createCloser } from './close';
-import { credentialSource, wireTokenRefresher } from './credential';
-import { runParentHandshake } from './handshake';
-import { mountPlain } from './plain';
+import { createMessagePortTransport } from '../../channel/message-port.js';
+import { createCloser } from './close.js';
+import { credentialSource, wireTokenRefresher } from './credential.js';
+import { runParentHandshake } from './handshake.js';
+import { mountPlain } from './plain.js';
 const DEFAULT_HANDSHAKE_TIMEOUT = 5_000;
 const DEFAULT_DELEGATION_TTL = 3_600;
 export function createMountController(config) {

package/dist/window/mount/params.d.ts

@@ -1,5 +1,5 @@
-import type { SandboxProfile, WindowCapabilities } from '../capabilities';
-import type { Window } from '../window';
+import type { SandboxProfile, WindowCapabilities } from '../capabilities.js';
+import type { Window } from '../window.js';
 /**
  * A PRE-MINTED credential to hand the mounted iframe instead of the shell's
  * own delegation mint — the app-principal path. The caller composes it from

package/dist/window/mount/params.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../../src/window/mount/params.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACzE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAEvC;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACvE,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAA;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IACxC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAA;IACrC;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpB,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,iBAAiB,GAAG,WAAW,CAAA;KAAE,CAAA;IAC7D,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CAC5E,CAAA"}
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../../../src/window/mount/params.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAE1C;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,qDAAqD;IACrD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACvE,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAA;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAA;IACxC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAA;IACrC;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;CACtC,CAAA;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEpB,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,iBAAiB,GAAG,WAAW,CAAA;KAAE,CAAA;IAC7D,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CAC5E,CAAA"}

package/dist/window/mount/plain.d.ts

@@ -1,8 +1,8 @@
-import type { ShellAdapter } from '../embed/adapter';
-import type { LifecycleController } from '../lifecycle/states';
-import type { Window } from '../window';
-import type { Closer, MountEntry } from './close';
-import type { MountedWindow, MountParams } from './params';
+import type { ShellAdapter } from '../embed/adapter.js';
+import type { LifecycleController } from '../lifecycle/states.js';
+import type { Window } from '../window.js';
+import type { Closer, MountEntry } from './close.js';
+import type { MountedWindow, MountParams } from './params.js';
 export type PlainMountDeps = {
     adapter: ShellAdapter;
     windows: Map<string, Window>;

package/dist/window/mount/plain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plain.d.ts","sourceRoot":"","sources":["../../../src/window/mount/plain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAI1D,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,YAAY,CAAA;IACrB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,SAAS,EAAE,mBAAmB,CAAA;IAC9B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAChC,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,cAAc,EACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,CAAC,CAyCxB"}
+{"version":3,"file":"plain.d.ts","sourceRoot":"","sources":["../../../src/window/mount/plain.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAI7D,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,YAAY,CAAA;IACrB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,SAAS,EAAE,mBAAmB,CAAA;IAC9B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IAChC,KAAK,EAAE,MAAM,CAAA;CACd,CAAA;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,cAAc,EACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,CAAC,CAyCxB"}

package/dist/window/mount/plain.js

@@ -1,4 +1,4 @@
-import { NOOP_REFRESHER } from './credential';
+import { NOOP_REFRESHER } from './credential.js';
 /**
  * Plain-iframe mount path — for hosted views that don't speak the shell
  * protocol. No handshake, no transport, no delegation token, no refresher;

package/dist/window/window.d.ts

@@ -1,4 +1,4 @@
-import type { WindowCapabilities } from './capabilities';
+import type { WindowCapabilities } from './capabilities.js';
 export type WindowState = 'active' | 'hidden' | 'closing' | 'closed';
 export interface Window {
     readonly windowId: string;

package/dist/window/window.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"window.d.ts","sourceRoot":"","sources":["../../src/window/window.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAExD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEpE,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC1C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IACvC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAA;CAC1C"}
+{"version":3,"file":"window.d.ts","sourceRoot":"","sources":["../../src/window/window.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAE3D,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEpE,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,WAAW,GAAG,QAAQ,CAAA;IAC1C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IACvC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAA;CAC1C"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/shell",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "Astrale Shell SDK — parent/child/kernel communication",
   "license": "Apache-2.0",
   "repository": {
@@ -25,9 +25,12 @@
     "access": "public"
   },
   "dependencies": {
-    "@astrale-domains/workspace-schema": ">=0.2.0 <1.0.0",
-    "@astrale-os/kernel-client": ">=0.3.0 <1.0.0",
-    "@astrale-os/kernel-core": ">=0.4.1 <1.0.0"
+    "@astrale-domains/shell-schema": ">=0.3.1 <1.0.0",
+    "@astrale-os/kernel-client": ">=0.4.0 <1.0.0",
+    "@astrale-os/kernel-core": ">=0.7.1 <1.0.0",
+    "@astrale-os/kernel-dsl": ">=0.1.3 <1.0.0",
+    "jose": "^6.2.3",
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@typescript/native-preview": "latest",
@@ -41,6 +44,6 @@
     "typecheck": "tsgo --noEmit && tsgo --noEmit -p tsconfig.test.json",
     "test": "vitest run",
     "test:watch": "vitest",
-    "preinstall": "node .check-workspace.cjs"
+    "preinstall": "node -e \"try{require('./.check-workspace.cjs')}catch{}\""
   }
 }

package/src/application/apps.ts

@@ -1,13 +1,13 @@
 import type { BoundNode, DefOf, NodeRefInput } from '@astrale-os/kernel-client'
 
-import { D } from '@astrale-domains/workspace-schema'
+import { D } from '@astrale-domains/shell-schema'
 import { normalizeRef } from '@astrale-os/kernel-client'
 
-import type { KernelClient } from '../kernel/client'
-import type { AppSession } from './session/session'
-import type { ShellDomainView, ShellSchema } from './view'
+import type { KernelClient } from '../kernel/client.js'
+import type { AppSession } from './session/session.js'
+import type { ShellDomainView, ShellSchema } from './view.js'
 
-import { openAppSession } from './session/open'
+import { openAppSession } from './session/open.js'
 
 /** An installed `Application` node. */
 export type ApplicationNode = BoundNode<DefOf<ShellSchema, 'Application'>, ShellSchema>

package/src/application/namespaces.ts

@@ -4,15 +4,15 @@
  * exactly these. Pure closures over a lazy typed view — constructing this
  * touches no kernel (safe before a sandboxed shell's `init()`).
  */
-import type { KernelClient } from '../kernel/client'
-import type { AppsNamespace } from './apps'
-import type { SpacesNamespace } from './spaces'
-import type { UserNamespace } from './user'
+import type { KernelClient } from '../kernel/client.js'
+import type { AppsNamespace } from './apps.js'
+import type { SpacesNamespace } from './spaces.js'
+import type { UserNamespace } from './user.js'
 
-import { createAppsNamespace } from './apps'
-import { createSpacesNamespace } from './spaces'
-import { createUserNamespace } from './user'
-import { createShellDomainView } from './view'
+import { createAppsNamespace } from './apps.js'
+import { createSpacesNamespace } from './spaces.js'
+import { createUserNamespace } from './user.js'
+import { createShellDomainView } from './view.js'
 
 export interface OsNamespaces {
   readonly user: UserNamespace

package/src/application/session/open.ts

@@ -1,10 +1,10 @@
 import type { UnresolvedIdentityExpr } from '@astrale-os/kernel-core'
 
-import type { KernelClient } from '../../kernel/client'
-import type { MountCredential } from '../../window/mount/params'
-import type { AppSession, AppView } from './session'
+import type { KernelClient } from '../../kernel/client.js'
+import type { MountCredential } from '../../window/mount/params.js'
+import type { AppSession, AppView } from './session.js'
 
-import { createTokenCycle } from './token'
+import { createTokenCycle } from './token.js'
 
 /** The wire shape of `app::open`. */
 interface OpenResult {

package/src/application/session/session.ts

@@ -1,10 +1,10 @@
 /**
  * `AppSession` — the client half of the three-call app-opening protocol
  * (`app::open` → user-signed `auth.delegate` → `app::getAccessToken`). The
- * server contract lives in the workspace domain's `Application` methods
+ * server contract lives in the shell domain's `Application` methods
  * (`runtime/application/{open,get-access-token}`).
  */
-import type { MountCredential } from '../../window/mount/params'
+import type { MountCredential } from '../../window/mount/params.js'
 
 /** The entry view returned by `app::open`, described for mounting. */
 export interface AppView {

package/src/application/session/token.ts

@@ -1,9 +1,9 @@
 import type { UnresolvedIdentityExpr } from '@astrale-os/kernel-core'
 
-import type { KernelClient } from '../../kernel/client'
+import type { KernelClient } from '../../kernel/client.js'
 
-import { REFRESH_WINDOW_MS } from '../../kernel/delegation/token'
-import { AppSessionRefreshError } from './session'
+import { REFRESH_WINDOW_MS } from '../../kernel/delegation/token.js'
+import { AppSessionRefreshError } from './session.js'
 
 /** The wire shape of `app::getAccessToken`. */
 interface AccessTokenResult {

package/src/application/spaces.ts

@@ -2,8 +2,8 @@ import type { BoundNode, DefOf, NodeRefInput } from '@astrale-os/kernel-client'
 
 import { normalizeRef } from '@astrale-os/kernel-client'
 
-import type { KernelClient } from '../kernel/client'
-import type { ShellDomainView, ShellSchema } from './view'
+import type { KernelClient } from '../kernel/client.js'
+import type { ShellDomainView, ShellSchema } from './view.js'
 
 /** A workspace `Space` node. */
 export type SpaceNode = BoundNode<DefOf<ShellSchema, 'Space'>, ShellSchema>
@@ -17,7 +17,7 @@ export interface SpacesNamespace {
   create(opts?: { name?: string }): Promise<SpaceNode>
 }
 
-/** The spaces directory (mirrors the workspace domain's `SPACES_DIR`). */
+/** The spaces directory (mirrors the shell domain's `SPACES_DIR`). */
 const SPACES_DIR = '/spaces'
 
 export function createSpacesNamespace(kernel: KernelClient, v: ShellDomainView): SpacesNamespace {

package/src/application/user.ts

@@ -2,11 +2,11 @@ import type { BoundNode, DefOf, NodeRefInput } from '@astrale-os/kernel-client'
 
 import { normalizeRef } from '@astrale-os/kernel-client'
 
-import type { KernelClient } from '../kernel/client'
-import type { SpaceNode } from './spaces'
-import type { ShellDomainView, ShellSchema } from './view'
+import type { KernelClient } from '../kernel/client.js'
+import type { SpaceNode } from './spaces.js'
+import type { ShellDomainView, ShellSchema } from './view.js'
 
-import { asArray } from './view'
+import { asArray } from './view.js'
 
 /** Self as the shell-domain `User` — typed `firstName`/`lastName`/`email`. */
 export type UserNode = BoundNode<DefOf<ShellSchema, 'User'>, ShellSchema>

package/src/application/view.ts

@@ -1,15 +1,15 @@
 /**
  * The typed plane the OS namespaces speak: `kernel.withSchema(schema)` over the
- * workspace domain (`@astrale-domains/workspace-schema`). The bound view is built LAZILY
+ * shell domain (`@astrale-domains/shell-schema`). The bound view is built LAZILY
  * (first call) so the sandboxed shell's "init() first" kernel guard applies
  * uniformly — constructing namespaces touches no kernel.
  */
 import type { BoundNode, DefOf, SchemaBoundView } from '@astrale-os/kernel-client'
 import type { Node } from '@astrale-os/kernel-core'
 
-import { schema } from '@astrale-domains/workspace-schema'
+import { schema } from '@astrale-domains/shell-schema'
 
-import type { KernelClient } from '../kernel/client'
+import type { KernelClient } from '../kernel/client.js'
 
 export type ShellSchema = typeof schema
 

package/src/channel/children.ts

@@ -1,6 +1,6 @@
-import type { MessageOf, MessageType, ShellMessage } from '../message/message'
-import type { MessageObserver } from './observer'
-import type { Transport } from './transport'
+import type { MessageOf, MessageType, ShellMessage } from '../message/message.js'
+import type { MessageObserver } from './observer.js'
+import type { Transport } from './transport.js'
 
 /** Multiplexed channels down to child windows, keyed by windowId. */
 export interface ChildrenChannel {

package/src/channel/listeners.ts

@@ -1,4 +1,4 @@
-import type { MessageHandler, MessageOf, MessageType, ShellMessage } from '../message/message'
+import type { MessageHandler, MessageOf, MessageType, ShellMessage } from '../message/message.js'
 
 /** Per-message-type listener registry — the fan-out primitive channels share. */
 export interface MessageListeners {

package/src/channel/message-port.ts

@@ -1,5 +1,5 @@
-import type { ShellMessage } from '../message/message'
-import type { Transport } from './transport'
+import type { ShellMessage } from '../message/message.js'
+import type { Transport } from './transport.js'
 
 export type MessagePortTransportConfig = {
   port: MessagePort

package/src/channel/observer.ts

@@ -1,4 +1,4 @@
-import type { ShellMessage } from '../message/message'
+import type { ShellMessage } from '../message/message.js'
 
 export type MessageDirection = 'inbound' | 'outbound'
 

package/src/channel/parent.ts

@@ -1,8 +1,8 @@
-import type { MessageHandler, MessageOf, MessageType, ShellMessage } from '../message/message'
-import type { MessageObserver } from './observer'
-import type { Transport } from './transport'
+import type { MessageHandler, MessageOf, MessageType, ShellMessage } from '../message/message.js'
+import type { MessageObserver } from './observer.js'
+import type { Transport } from './transport.js'
 
-import { createMessageListeners } from './listeners'
+import { createMessageListeners } from './listeners.js'
 
 /** The child's single channel up to its parent shell. */
 export interface ParentChannel {

package/src/channel/transport.ts

@@ -1,4 +1,4 @@
-import type { ShellMessage } from '../message/message'
+import type { ShellMessage } from '../message/message.js'
 
 /** The pipe a channel rides: one peer, ordered delivery, no reply semantics. */
 export interface Transport {

package/src/index.ts

@@ -6,90 +6,90 @@ export type {
   ReplyOf,
   IntentEnvelope,
   IntentMessage,
-} from './message/intent'
-export type { CtrlRegistry, CtrlMessage } from './message/ctrl'
-export type { ErrorCode, ErrorMessage } from './message/error'
-export type { ShellMessage, MessageHandler } from './message/message'
+} from './message/intent.js'
+export type { CtrlRegistry, CtrlMessage } from './message/ctrl.js'
+export type { ErrorCode, ErrorMessage } from './message/error.js'
+export type { ShellMessage, MessageHandler } from './message/message.js'
 export {
   INIT_REQUEST_TYPE,
   INIT_RESPONSE_TYPE,
   isInitRequest,
   isInitResponse,
-} from './message/init'
-export type { InitRequestMessage, InitResponseMessage } from './message/init'
+} from './message/init.js'
+export type { InitRequestMessage, InitResponseMessage } from './message/init.js'
 
 // ─── kernel ─────────────────────────────────────────────────────────────────
-export type { KernelClient } from './kernel/client'
-export { createKernelClientAdapter } from './kernel/session'
-export type { KernelClientAdapter, CreateKernelClientAdapterOpts } from './kernel/session'
-export type { DelegationScope, DelegationToken, TokenState } from './kernel/delegation/token'
-export { stateOf, isExpired } from './kernel/delegation/token'
-export { createTokenRefresher } from './kernel/delegation/refresh'
-export type { TokenRefreshConfig, TokenRefresher } from './kernel/delegation/refresh'
+export type { KernelClient } from './kernel/client.js'
+export { createKernelClientAdapter } from './kernel/session.js'
+export type { KernelClientAdapter, CreateKernelClientAdapterOpts } from './kernel/session.js'
+export type { DelegationScope, DelegationToken, TokenState } from './kernel/delegation/token.js'
+export { stateOf, isExpired } from './kernel/delegation/token.js'
+export { createTokenRefresher } from './kernel/delegation/refresh.js'
+export type { TokenRefreshConfig, TokenRefresher } from './kernel/delegation/refresh.js'
 
 // ─── channel ────────────────────────────────────────────────────────────────
-export type { Transport } from './channel/transport'
-export { createMessagePortTransport } from './channel/message-port'
-export type { MessagePortTransportConfig } from './channel/message-port'
-export type { ParentChannel } from './channel/parent'
-export type { ChildrenChannel } from './channel/children'
-export type { MessageDirection, ObserverHandler } from './channel/observer'
+export type { Transport } from './channel/transport.js'
+export { createMessagePortTransport } from './channel/message-port.js'
+export type { MessagePortTransportConfig } from './channel/message-port.js'
+export type { ParentChannel } from './channel/parent.js'
+export type { ChildrenChannel } from './channel/children.js'
+export type { MessageDirection, ObserverHandler } from './channel/observer.js'
 
 // ─── window ─────────────────────────────────────────────────────────────────
-export type { Window, WindowState } from './window/window'
-export type { WindowConfig, WindowCapabilities, SandboxProfile } from './window/capabilities'
-export { transition as lifecycleTransition } from './window/lifecycle/transition'
-export type { LifecycleEvent, TransitionResult } from './window/lifecycle/transition'
-export type { ShellAdapter, WindowHandle } from './window/embed/adapter'
-export { createIframeShellAdapter } from './window/embed/iframe'
-export type { IframeShellAdapterConfig } from './window/embed/iframe'
+export type { Window, WindowState } from './window/window.js'
+export type { WindowConfig, WindowCapabilities, SandboxProfile } from './window/capabilities.js'
+export { transition as lifecycleTransition } from './window/lifecycle/transition.js'
+export type { LifecycleEvent, TransitionResult } from './window/lifecycle/transition.js'
+export type { ShellAdapter, WindowHandle } from './window/embed/adapter.js'
+export { createIframeShellAdapter } from './window/embed/iframe.js'
+export type { IframeShellAdapterConfig } from './window/embed/iframe.js'
 export type {
   MountParams,
   MountCredential,
   MountedWindow,
   CloseResult,
-} from './window/mount/params'
-export { runParentHandshake } from './window/mount/handshake'
-export type { HandshakeParams, HandshakeError, HandshakeResult } from './window/mount/handshake'
+} from './window/mount/params.js'
+export { runParentHandshake } from './window/mount/handshake.js'
+export type { HandshakeParams, HandshakeError, HandshakeResult } from './window/mount/handshake.js'
 
 // ─── intent ─────────────────────────────────────────────────────────────────
-export { createIntentPipeline } from './intent/pipeline'
-export type { IntentMiddleware, IntentPipeline } from './intent/pipeline'
-export type { IntentDecision, IntentOrigin, IntentPolicy, IntentContext } from './intent/policy'
-export { createIntentRouter } from './intent/router'
+export { createIntentPipeline } from './intent/pipeline.js'
+export type { IntentMiddleware, IntentPipeline } from './intent/pipeline.js'
+export type { IntentDecision, IntentOrigin, IntentPolicy, IntentContext } from './intent/policy.js'
+export { createIntentRouter } from './intent/router.js'
 export type {
   IntentRouter,
   IntentRouterController,
   IntentRouterConfig,
   LocalIntentHandler,
-} from './intent/router'
-export { requestIntent, replyToIntent } from './intent/request'
-export { loggingMiddleware } from './intent/middleware/logging'
-export type { LoggingConfig, LoggingEntry, LoggingSink } from './intent/middleware/logging'
-export { capabilitiesMiddleware } from './intent/middleware/capabilities'
+} from './intent/router.js'
+export { requestIntent, replyToIntent } from './intent/request.js'
+export { loggingMiddleware } from './intent/middleware/logging.js'
+export type { LoggingConfig, LoggingEntry, LoggingSink } from './intent/middleware/logging.js'
+export { capabilitiesMiddleware } from './intent/middleware/capabilities.js'
 export type {
   CapabilitiesConfig,
   CapabilityLookup,
   CapabilityViolation,
-} from './intent/middleware/capabilities'
-export { rateLimitMiddleware } from './intent/middleware/rate-limit'
-export type { RateLimitConfig, RateLimitViolation } from './intent/middleware/rate-limit'
+} from './intent/middleware/capabilities.js'
+export { rateLimitMiddleware } from './intent/middleware/rate-limit.js'
+export type { RateLimitConfig, RateLimitViolation } from './intent/middleware/rate-limit.js'
 
 // ─── application (OS plane: shell.user / .spaces / .apps) ───────────────────
-export { createOsNamespaces } from './application/namespaces'
-export type { OsNamespaces, CreateOsNamespacesDeps } from './application/namespaces'
-export type { UserNamespace, UserNode, RoleNode } from './application/user'
-export type { SpacesNamespace, SpaceNode } from './application/spaces'
-export type { AppsNamespace, ApplicationNode } from './application/apps'
-export { openAppSession } from './application/session/open'
-export type { OpenAppSessionDeps } from './application/session/open'
-export { AppSessionRefreshError } from './application/session/session'
-export type { AppSession, AppView, RefreshStep } from './application/session/session'
+export { createOsNamespaces } from './application/namespaces.js'
+export type { OsNamespaces, CreateOsNamespacesDeps } from './application/namespaces.js'
+export type { UserNamespace, UserNode, RoleNode } from './application/user.js'
+export type { SpacesNamespace, SpaceNode } from './application/spaces.js'
+export type { AppsNamespace, ApplicationNode } from './application/apps.js'
+export { openAppSession } from './application/session/open.js'
+export type { OpenAppSessionDeps } from './application/session/open.js'
+export { AppSessionRefreshError } from './application/session/session.js'
+export type { AppSession, AppView, RefreshStep } from './application/session/session.js'
 
 // ─── shell ──────────────────────────────────────────────────────────────────
-export { createShell } from './shell/create'
-export type { Shell } from './shell/shell'
-export type { ShellConfig, StandaloneConfig, SandboxedConfig } from './shell/config'
-export { requestAccess } from './shell/access'
-export { performChildInit } from './shell/sandboxed/boot'
-export type { ChildInitParams, ChildInitResult } from './shell/sandboxed/boot'
+export { createShell } from './shell/create.js'
+export type { Shell } from './shell/shell.js'
+export type { ShellConfig, StandaloneConfig, SandboxedConfig } from './shell/config.js'
+export { requestAccess } from './shell/access.js'
+export { performChildInit } from './shell/sandboxed/boot.js'
+export type { ChildInitParams, ChildInitResult } from './shell/sandboxed/boot.js'

package/src/intent/middleware/capabilities.ts

@@ -1,6 +1,6 @@
-import type { IntentMessage, IntentRegistry } from '../../message/intent'
-import type { WindowCapabilities } from '../../window/capabilities'
-import type { IntentMiddleware } from '../pipeline'
+import type { IntentMessage, IntentRegistry } from '../../message/intent.js'
+import type { WindowCapabilities } from '../../window/capabilities.js'
+import type { IntentMiddleware } from '../pipeline.js'
 
 export type CapabilityLookup = (sender: string) => WindowCapabilities | undefined
 

package/src/intent/middleware/logging.ts

@@ -1,5 +1,5 @@
-import type { IntentMessage } from '../../message/intent'
-import type { IntentMiddleware } from '../pipeline'
+import type { IntentMessage } from '../../message/intent.js'
+import type { IntentMiddleware } from '../pipeline.js'
 
 export type LoggingSink = (entry: LoggingEntry) => void
 

package/src/intent/middleware/rate-limit.ts

@@ -1,5 +1,5 @@
-import type { IntentMessage } from '../../message/intent'
-import type { IntentMiddleware } from '../pipeline'
+import type { IntentMessage } from '../../message/intent.js'
+import type { IntentMiddleware } from '../pipeline.js'
 
 export type RateLimitKey = (message: IntentMessage) => string
 

package/src/intent/pipeline.ts

@@ -1,4 +1,4 @@
-import type { IntentMessage } from '../message/intent'
+import type { IntentMessage } from '../message/intent.js'
 
 export type IntentMiddleware = (message: IntentMessage, next: () => Promise<void>) => Promise<void>
 

package/src/intent/policy.ts

@@ -1,5 +1,5 @@
-import type { IntentMessage, IntentRegistry } from '../message/intent'
-import type { Window } from '../window/window'
+import type { IntentMessage, IntentRegistry } from '../message/intent.js'
+import type { Window } from '../window/window.js'
 
 /**
  * Decision produced by a routing policy: where an inbound intent should go.

package/src/intent/request.ts

@@ -1,6 +1,6 @@
-import type { ChildrenChannel } from '../channel/children'
-import type { ParentChannel } from '../channel/parent'
-import type { IntentMessage, IntentRegistry, PayloadOf, ReplyOf } from '../message/intent'
+import type { ChildrenChannel } from '../channel/children.js'
+import type { ParentChannel } from '../channel/parent.js'
+import type { IntentMessage, IntentRegistry, PayloadOf, ReplyOf } from '../message/intent.js'
 
 /**
  * Request/reply over the otherwise fire-and-forget intent transport.

package/src/intent/router.ts

@@ -1,11 +1,11 @@
-import type { ChildrenChannelController } from '../channel/children'
-import type { ParentChannel } from '../channel/parent'
-import type { IntentMessage, IntentRegistry } from '../message/intent'
-import type { Window } from '../window/window'
-import type { IntentPipeline } from './pipeline'
-import type { IntentDecision, IntentOrigin, IntentPolicy } from './policy'
+import type { ChildrenChannelController } from '../channel/children.js'
+import type { ParentChannel } from '../channel/parent.js'
+import type { IntentMessage, IntentRegistry } from '../message/intent.js'
+import type { Window } from '../window/window.js'
+import type { IntentPipeline } from './pipeline.js'
+import type { IntentDecision, IntentOrigin, IntentPolicy } from './policy.js'
 
-import { defaultPolicy } from './policy'
+import { defaultPolicy } from './policy.js'
 
 /** Minimal dispatch-only router surface (no current in-package implementer). */
 export interface IntentRouter {

package/src/kernel/credential.ts

@@ -1,5 +1,5 @@
-import type { KernelClient } from './client'
-import type { KernelClientAdapter } from './session'
+import type { KernelClient } from './client.js'
+import type { KernelClientAdapter } from './session.js'
 
 export type KernelFacadeConfig = {
   adapter: KernelClientAdapter

package/src/kernel/delegated.ts

@@ -1,8 +1,8 @@
-import type { KernelFacadeController } from './credential'
-import type { DelegationToken } from './delegation/token'
-import type { KernelClientAdapter } from './session'
+import type { KernelFacadeController } from './credential.js'
+import type { DelegationToken } from './delegation/token.js'
+import type { KernelClientAdapter } from './session.js'
 
-import { buildCredentialFacade } from './credential'
+import { buildCredentialFacade } from './credential.js'
 
 export type DelegationKernelFacadeConfig = {
   adapter: KernelClientAdapter