@consciousclouds/operator-shell 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,77 @@
+/**
+ * @consciousclouds/operator-shell — the operator-console shell archetype
+ * (Layer 4 of the Frontend Platform).
+ *
+ * Frame + header + sidebar + nav engine + icon registry + OperatorFlavor
+ * types + permission-guard seam + the Workspace Framework (the main region's
+ * typed workspace seam: registry + host, fail-closed) + the Chief region
+ * (panel chrome over
+ * @consciousclouds/assistant-surface; transport injected via a TurnAdapter
+ * typed against the conductor-sdk event vocabulary). Mechanism only: no BFF
+ * route, no gateway URL, no personality default, no credential logic — the
+ * product injects meaning through Flavor, Brand, TurnAdapter, and the
+ * permission resolver. See docs/design/operator-platform-contracts.md and
+ * docs/design/frontend-platform-doctrine.md.
+ */
+export { OperatorShell } from "./frame/OperatorShell.js";
+export type { OperatorShellProps } from "./frame/OperatorShell.js";
+export { OperatorHeader } from "./header/OperatorHeader.js";
+export type { OperatorHeaderProps } from "./header/OperatorHeader.js";
+export { OperatorProfileMenu } from "./header/OperatorProfileMenu.js";
+export { ThemeToggle } from "./header/ThemeToggle.js";
+export { EnvironmentSwitcher } from "./header/EnvironmentSwitcher.js";
+export type { EnvironmentSwitcherProps } from "./header/EnvironmentSwitcher.js";
+export { OperatorSidebar } from "./sidebar/OperatorSidebar.js";
+export type { OperatorSidebarProps } from "./sidebar/OperatorSidebar.js";
+export { deriveGatedNavGroups, flavorRoutes, isNavItemActive, isRouteInConsole, } from "./nav/routes.js";
+export type { GatedNavGroup, GatedNavItem } from "./nav/routes.js";
+export { OPERATOR_ICONS, SHIPPED_ICON_FAMILY, UNKNOWN_ICON, resolveIcon, resolveIconFamily, } from "./icons/registry.js";
+export type { IconRegistry, ShippedIconFamily } from "./icons/registry.js";
+export { CommandPalette } from "./palette/CommandPalette.js";
+export type { CommandPaletteProps } from "./palette/CommandPalette.js";
+export { derivePaletteGroups } from "./palette/commands.js";
+export type { PaletteAction, PaletteCommand, PaletteGroup } from "./palette/commands.js";
+export { isSearchResult, permittedSearchSources, querySearchSources, } from "./palette/search-sources.js";
+export type { SearchResult, SearchResultAction, SearchResultGroup, SearchSource, } from "./palette/search-sources.js";
+export { useSearchResults } from "./palette/use-search-results.js";
+export type { OperatorCommandGroup, OperatorCommandItem, OperatorFlavor, OperatorFlavorChief, OperatorFlavorInspector, OperatorFlavorProduct, OperatorFlavorWorkspace, OperatorNavGroup, OperatorNavItem, } from "./flavor/types.js";
+export { InspectorProvider, useInspector } from "./inspector/InspectorProvider.js";
+export type { InspectorProviderProps } from "./inspector/InspectorProvider.js";
+export { resolveInspectorView } from "./inspector/types.js";
+export type { InspectorApi, InspectorOpenRequest, InspectorView, InspectorViewProps, InspectorViewRegistry, } from "./inspector/types.js";
+export { ChiefRegion } from "./chief/ChiefRegion.js";
+export type { ChiefRegionProps } from "./chief/ChiefRegion.js";
+export { ChiefPanel } from "./chief/ChiefPanel.js";
+export type { ChiefPanelProps } from "./chief/ChiefPanel.js";
+export { ChiefDrawer } from "./chief/ChiefDrawer.js";
+export type { ChiefDrawerProps } from "./chief/ChiefDrawer.js";
+export { ChiefSession } from "./chief/ChiefSession.js";
+export type { ChiefSessionProps } from "./chief/ChiefSession.js";
+export { useChiefTurn } from "./chief/use-chief-turn.js";
+export type { ChiefTurnMeta, ChiefTurnSession, UseChiefTurnOptions, } from "./chief/use-chief-turn.js";
+export { CHIEF_SHORTCUT_KEY, CHIEF_SHORTCUT_LABEL, isChiefShortcut, useChiefShortcut, } from "./chief/use-chief-shortcut.js";
+export { directiveToHref } from "./chief/directive.js";
+export type { TurnAdapter, TurnAdapterHandle, TurnAdapterRequest, } from "./chief/turn-adapter.js";
+export { WorkspaceHost, WorkspaceUnavailable } from "./workspace/WorkspaceHost.js";
+export type { WorkspaceHostProps } from "./workspace/WorkspaceHost.js";
+export { createWorkspaceRegistry } from "./workspace/registry.js";
+export type { WorkspaceRegistry } from "./workspace/registry.js";
+export { WORKSPACE_TYPE_IDS, isWorkspaceTypeId } from "./workspace/types.js";
+export type { AnyWorkspaceType, WorkspaceComponentProps, WorkspaceType, WorkspaceTypeId, } from "./workspace/types.js";
+export { CanvasWorkspace, canvasWorkspaceType } from "./workspace/CanvasWorkspace.js";
+export type { CanvasWorkspaceInput, CanvasWorkspaceSlots, } from "./workspace/CanvasWorkspace.js";
+export { DashboardWorkspace, dashboardWorkspaceType, } from "./workspace/DashboardWorkspace.js";
+export type { DashboardWorkspaceInput, DashboardWorkspaceSection, DashboardWorkspaceSlots, DashboardWorkspaceStat, } from "./workspace/DashboardWorkspace.js";
+export { TableWorkspace, tableWorkspaceType } from "./workspace/TableWorkspace.js";
+export type { TableWorkspaceInput, TableWorkspaceSlots, } from "./workspace/TableWorkspace.js";
+export { FormWorkspace, formWorkspaceType } from "./workspace/FormWorkspace.js";
+export type { FormWorkspaceField, FormWorkspaceInput, FormWorkspaceSection, FormWorkspaceSlots, } from "./workspace/FormWorkspace.js";
+export { GraphWorkspace, graphWorkspaceType } from "./workspace/GraphWorkspace.js";
+export type { GraphWorkspaceEdge, GraphWorkspaceInput, GraphWorkspaceKind, GraphWorkspaceNode, GraphWorkspaceNodeAttribute, GraphWorkspaceSlots, } from "./workspace/GraphWorkspace.js";
+export { allowAllPermissions, collectPermissionRefs, evaluatePermissions, gateStatus, isPermitted, toGateStatus, unknownPermissions, } from "./guard/permissions.js";
+export type { PermissionDecision, PermissionEvaluation, PermissionGateStatus, PermissionResolver, SyncPermissionResolver, } from "./guard/permissions.js";
+export { PermissionProvider, usePermission, usePermissionDecisions, } from "./guard/PermissionProvider.js";
+export type { PermissionProviderProps } from "./guard/PermissionProvider.js";
+export { RouteGuard } from "./guard/RouteGuard.js";
+export type { RouteGuardProps } from "./guard/RouteGuard.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAGnE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAQtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,YAAY,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAGhF,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,YAAY,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAUnE,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAO3E,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,YAAY,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAWzF,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,GACb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAMnE,YAAY,EACV,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,gBAAgB,EAChB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACnF,YAAY,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,YAAY,EACV,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAW9B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAOnC,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EACV,WAAW,EACX,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AAKjC,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACnF,YAAY,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,YAAY,EACV,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACtF,YAAY,EACV,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,gCAAgC,CAAC;AAKxC,OAAO,EACL,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,mCAAmC,CAAC;AAC3C,YAAY,EACV,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mCAAmC,CAAC;AAK3C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnF,YAAY,EACV,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AAKvC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAChF,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,8BAA8B,CAAC;AAMtC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnF,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AAWvC,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,YAAY,EACZ,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -0,0 +1,129 @@
+/**
+ * @consciousclouds/operator-shell — the operator-console shell archetype
+ * (Layer 4 of the Frontend Platform).
+ *
+ * Frame + header + sidebar + nav engine + icon registry + OperatorFlavor
+ * types + permission-guard seam + the Workspace Framework (the main region's
+ * typed workspace seam: registry + host, fail-closed) + the Chief region
+ * (panel chrome over
+ * @consciousclouds/assistant-surface; transport injected via a TurnAdapter
+ * typed against the conductor-sdk event vocabulary). Mechanism only: no BFF
+ * route, no gateway URL, no personality default, no credential logic — the
+ * product injects meaning through Flavor, Brand, TurnAdapter, and the
+ * permission resolver. See docs/design/operator-platform-contracts.md and
+ * docs/design/frontend-platform-doctrine.md.
+ */
+// The frame
+export { OperatorShell } from "./frame/OperatorShell.js";
+// Header chrome (exported for composition; the frame mounts them by default)
+export { OperatorHeader } from "./header/OperatorHeader.js";
+export { OperatorProfileMenu } from "./header/OperatorProfileMenu.js";
+export { ThemeToggle } from "./header/ThemeToggle.js";
+// Environment switcher — header chrome over the published
+// @consciousclouds/frontend-runtime context (consumed as-is): the PRODUCT
+// mounts RuntimeProvider with its targets (URLs/transport stay product code —
+// membrane); the shell renders labels + connection state from useRuntime.
+// No provider ⇒ no chrome (fail-closed); one environment ⇒ an honest
+// single-entry indicator; >1 named targets ⇒ a dropdown over switchTo.
+export { EnvironmentSwitcher } from "./header/EnvironmentSwitcher.js";
+// Sidebar / nav engine
+export { OperatorSidebar } from "./sidebar/OperatorSidebar.js";
+export { deriveGatedNavGroups, flavorRoutes, isNavItemActive, isRouteInConsole, } from "./nav/routes.js";
+// Icon Platform — the string-name → icon resolution seam (icons/registry.ts
+// holds the full contract): the Flavor declares inert string names; the
+// product extends the vocabulary via the `icons` shell prop (extensions may
+// override built-ins); unknown names fail closed to the deterministic
+// UNKNOWN_ICON (own-property lookup — prototype names are unknown too). The
+// Brand's inert `iconFamily` declaration is read by the frame and resolved
+// through resolveIconFamily — the shell ships ONE family (lucide, per the
+// license allowlist), so unshipped declarations read-and-default to it.
+export { OPERATOR_ICONS, SHIPPED_ICON_FAMILY, UNKNOWN_ICON, resolveIcon, resolveIconFamily, } from "./icons/registry.js";
+// Command palette — the shell-owned ⌘K palette (registry `command`/cmdk via
+// @consciousclouds/ui): route commands auto-derived from flavor.nav, inert
+// flavor.commands references, product-injected `runCommand` execution, and
+// the SAME fail-closed permission gate as the sidebar (derivePaletteGroups
+// is the pure, provable derivation).
+export { CommandPalette } from "./palette/CommandPalette.js";
+export { derivePaletteGroups } from "./palette/commands.js";
+// Search sources — the doctrine skeleton's Search experience as a typed
+// injection: the product injects `SearchSource` values through the shell's
+// `searchSources` prop (product code — `query` runs the product's own reads;
+// no transport here), the palette renders their results alongside the
+// command groups under the SAME fail-closed permission snapshot, and an
+// erroring/in-flight/absent source contributes NOTHING
+// (querySearchSources + useSearchResults are the provable core; a result's
+// action navigates or opens the inspector by entity kind — which keeps its
+// own fail-closed gate).
+export { isSearchResult, permittedSearchSources, querySearchSources, } from "./palette/search-sources.js";
+export { useSearchResults } from "./palette/use-search-results.js";
+// Inspector — the shell-owned detail panel (open/close/focus over the sheet
+// primitive, keyed by entity kind): the Flavor DECLARES entity-kind
+// references (`flavor.inspector.entityKinds`, inert), the product INJECTS
+// the views (`inspectorViews` shell prop), pages open it via `useInspector`.
+// Undeclared or view-less kinds fail closed — no panel, no crash
+// (resolveInspectorView is the pure, provable gate).
+export { InspectorProvider, useInspector } from "./inspector/InspectorProvider.js";
+export { resolveInspectorView } from "./inspector/types.js";
+// The AI Region — Chief's home in the shell. ChiefRegion resolves
+// `flavor.chief.placement` ('rail' | 'drawer') to a presentation; BOTH
+// presentations run the identical turn flow (useChiefTurn over the injected
+// TurnAdapter — P1-1 — with the conductor event vocabulary and the
+// routed-directive guard) and render the identical body (ChiefSession).
+// Rail = the always-open inflow panel; drawer = the same content behind the
+// sheet primitive with assistant-surface's open/close lifecycle. Below the
+// xl breakpoint the rail placement falls back to the drawer (the rail is
+// CSS-hidden there — Chief stays reachable).
+export { ChiefRegion } from "./chief/ChiefRegion.js";
+export { ChiefPanel } from "./chief/ChiefPanel.js";
+export { ChiefDrawer } from "./chief/ChiefDrawer.js";
+export { ChiefSession } from "./chief/ChiefSession.js";
+export { useChiefTurn } from "./chief/use-chief-turn.js";
+// Chief invocation parity — the shell-owned Chief keybinding (⌘J / Ctrl+J),
+// the AI Region's ⌘K twin: rail focuses the composer, drawer (declared or the
+// below-xl fallback) toggles through assistant-surface's open/close
+// lifecycle; exactly one presentation mounts, so exactly one listener.
+// `isChiefShortcut` is the pure, provable match rule (shift/alt refuse —
+// ⌘⇧J stays the browser's).
+export { CHIEF_SHORTCUT_KEY, CHIEF_SHORTCUT_LABEL, isChiefShortcut, useChiefShortcut, } from "./chief/use-chief-shortcut.js";
+export { directiveToHref } from "./chief/directive.js";
+// Workspace Framework — the main-region seam (frame-free subtree; a typed
+// workspace-type contract + immutable registry + host that fails closed on
+// unknown types). The nine V1 type ids are declared in WORKSPACE_TYPE_IDS.
+export { WorkspaceHost, WorkspaceUnavailable } from "./workspace/WorkspaceHost.js";
+export { createWorkspaceRegistry } from "./workspace/registry.js";
+export { WORKSPACE_TYPE_IDS, isWorkspaceTypeId } from "./workspace/types.js";
+// Canvas workspace type — the first-class canvas workspace: hosting state
+// machine (error → loading → empty → ready) over the published
+// @consciousclouds/canvas-runtime CanvasRenderer (consumed, never rebuilt);
+// the product injects the ComponentMap + loading/error/empty slot content.
+export { CanvasWorkspace, canvasWorkspaceType } from "./workspace/CanvasWorkspace.js";
+// Dashboard workspace type — stat/overview widget-slot composition of the
+// graduated workspace components (StatCard grid + titled ReactNode widget
+// sections); same fail-closed state machine, every value product-supplied.
+export { DashboardWorkspace, dashboardWorkspaceType, } from "./workspace/DashboardWorkspace.js";
+// Table workspace type — tabular exploration hosting the graduated
+// InteractiveDataTable composite (sorting · pagination · loading · empty),
+// with a fail-closed error state layered above it.
+export { TableWorkspace, tableWorkspaceType } from "./workspace/TableWorkspace.js";
+// Form workspace type — structured input over the presentational forms set
+// (Field vocabulary); controls, validation judgment, and submission
+// transport stay product-owned. Ships as mechanism (no CCU write surface yet).
+export { FormWorkspace, formWorkspaceType } from "./workspace/FormWorkspace.js";
+// Graph workspace type — entity-relationship exploration over a typed
+// nodes/edges contract, rendered as adjacency-style traversal composed from
+// registry primitives (no visualization dependency — react-flow/d3 sit
+// outside the license allowlist). Dangling edge endpoints fail closed.
+export { GraphWorkspace, graphWorkspaceType } from "./workspace/GraphWorkspace.js";
+// Permission-guard seam (§5) — the shell owns the fail-closed gating
+// BEHAVIOR (loading / denied / redirect states), the product injects the
+// RESOLUTION (sync or async: `PermissionResolver` may return a
+// Promise<PermissionDecision>; while it's in flight nav shows a skeleton,
+// the palette hides the entry, RouteGuard shows its loading state — and a
+// rejection/throw is DENIED). The frame mounts PermissionProvider with the
+// injected resolver so pages gate through usePermission / RouteGuard without
+// ever holding the resolver themselves. `evaluatePermissions` / `gateStatus`
+// are the pure, provable core.
+export { allowAllPermissions, collectPermissionRefs, evaluatePermissions, gateStatus, isPermitted, toGateStatus, unknownPermissions, } from "./guard/permissions.js";
+export { PermissionProvider, usePermission, usePermissionDecisions, } from "./guard/PermissionProvider.js";
+export { RouteGuard } from "./guard/RouteGuard.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,YAAY;AACZ,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGzD,6EAA6E;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,0DAA0D;AAC1D,0EAA0E;AAC1E,8EAA8E;AAC9E,0EAA0E;AAC1E,qEAAqE;AACrE,uEAAuE;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAGtE,uBAAuB;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAGzB,4EAA4E;AAC5E,wEAAwE;AACxE,4EAA4E;AAC5E,sEAAsE;AACtE,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,wEAAwE;AACxE,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,WAAW,EACX,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAG7B,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,qCAAqC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAG5D,wEAAwE;AACxE,2EAA2E;AAC3E,6EAA6E;AAC7E,sEAAsE;AACtE,wEAAwE;AACxE,uDAAuD;AACvD,2EAA2E;AAC3E,2EAA2E;AAC3E,yBAAyB;AACzB,OAAO,EACL,cAAc,EACd,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,6BAA6B,CAAC;AAOrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAkBnE,4EAA4E;AAC5E,oEAAoE;AACpE,0EAA0E;AAC1E,6EAA6E;AAC7E,iEAAiE;AACjE,qDAAqD;AACrD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAS5D,kEAAkE;AAClE,uEAAuE;AACvE,4EAA4E;AAC5E,mEAAmE;AACnE,wEAAwE;AACxE,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,6CAA6C;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAMzD,4EAA4E;AAC5E,8EAA8E;AAC9E,oEAAoE;AACpE,uEAAuE;AACvE,yEAAyE;AACzE,4BAA4B;AAC5B,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAOvD,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAQ7E,0EAA0E;AAC1E,+DAA+D;AAC/D,4EAA4E;AAC5E,2EAA2E;AAC3E,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAMtF,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,OAAO,EACL,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,mCAAmC,CAAC;AAQ3C,mEAAmE;AACnE,2EAA2E;AAC3E,mDAAmD;AACnD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAMnF,2EAA2E;AAC3E,oEAAoE;AACpE,+EAA+E;AAC/E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAQhF,sEAAsE;AACtE,4EAA4E;AAC5E,uEAAuE;AACvE,uEAAuE;AACvE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAUnF,qEAAqE;AACrE,yEAAyE;AACzE,+DAA+D;AAC/D,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,+BAA+B;AAC/B,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,YAAY,EACZ,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/inspector/InspectorProvider.d.ts

@@ -0,0 +1,41 @@
+/**
+ * InspectorProvider — the shell-owned detail panel (the Inspector region of
+ * the operator experience). Owns the open/close/focus lifecycle over the
+ * registry `sheet` primitive (Radix Dialog: focus trap, focus restore,
+ * Esc-to-close, overlay dismiss) and mounts the product's registered view
+ * for the opened entity kind.
+ *
+ * The provider is MECHANISM only: it resolves `kind` against the Flavor's
+ * declared entity-kind references and the product-injected view registry
+ * (see types.ts) and renders the resolved component with the mount contract
+ * (`kind` / `entity` / `close`). It interprets nothing about the entity.
+ *
+ * FAIL-CLOSED twice over:
+ *   - `open()` on an undeclared or view-less kind returns false and renders
+ *     nothing — no panel, no crash.
+ *   - `useInspector()` outside a provider returns an inert API (`open` →
+ *     false) instead of throwing, so a component composed outside the shell
+ *     degrades to "no inspector here".
+ */
+import * as React from "react";
+import type { InspectorApi, InspectorViewRegistry } from "./types.js";
+/**
+ * The shell-owned inspector handle. Safe anywhere: outside an
+ * InspectorProvider it returns the inert fail-closed API.
+ */
+export declare function useInspector(): InspectorApi;
+export interface InspectorProviderProps {
+    /**
+     * The Flavor's declared entity-kind REFERENCES (inert strings) — the frame
+     * passes `flavor.inspector.entityKinds`. Undeclared kinds never open.
+     */
+    entityKinds?: readonly string[];
+    /**
+     * The product-injected view registry keyed by those references (components
+     * are product code — they can't live in a Flavor).
+     */
+    views?: InspectorViewRegistry;
+    children: React.ReactNode;
+}
+export declare function InspectorProvider({ entityKinds, views, children, }: InspectorProviderProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=InspectorProvider.d.ts.map

package/dist/inspector/InspectorProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InspectorProvider.d.ts","sourceRoot":"","sources":["../../src/inspector/InspectorProvider.tsx"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAU/B,OAAO,KAAK,EACV,YAAY,EAEZ,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAapB;;;GAGG;AACH,wBAAgB,YAAY,IAAI,YAAY,CAE3C;AAED,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC;;;OAGG;IACH,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;CAC3B;AAED,wBAAgB,iBAAiB,CAAC,EAChC,WAAW,EACX,KAAK,EACL,QAAQ,GACT,EAAE,sBAAsB,2CA6DxB"}

package/dist/inspector/InspectorProvider.js

@@ -0,0 +1,63 @@
+"use client";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+/**
+ * InspectorProvider — the shell-owned detail panel (the Inspector region of
+ * the operator experience). Owns the open/close/focus lifecycle over the
+ * registry `sheet` primitive (Radix Dialog: focus trap, focus restore,
+ * Esc-to-close, overlay dismiss) and mounts the product's registered view
+ * for the opened entity kind.
+ *
+ * The provider is MECHANISM only: it resolves `kind` against the Flavor's
+ * declared entity-kind references and the product-injected view registry
+ * (see types.ts) and renders the resolved component with the mount contract
+ * (`kind` / `entity` / `close`). It interprets nothing about the entity.
+ *
+ * FAIL-CLOSED twice over:
+ *   - `open()` on an undeclared or view-less kind returns false and renders
+ *     nothing — no panel, no crash.
+ *   - `useInspector()` outside a provider returns an inert API (`open` →
+ *     false) instead of throwing, so a component composed outside the shell
+ *     degrades to "no inspector here".
+ */
+import * as React from "react";
+import { Sheet, SheetContent, SheetDescription, SheetHeader, SheetTitle, } from "@consciousclouds/ui";
+import { resolveInspectorView } from "./types.js";
+/** The inert outside-a-provider API: nothing opens, nothing throws. */
+const NO_INSPECTOR = {
+    open: () => false,
+    close: () => { },
+    isOpen: false,
+    canInspect: () => false,
+};
+const InspectorContext = React.createContext(NO_INSPECTOR);
+/**
+ * The shell-owned inspector handle. Safe anywhere: outside an
+ * InspectorProvider it returns the inert fail-closed API.
+ */
+export function useInspector() {
+    return React.useContext(InspectorContext);
+}
+export function InspectorProvider({ entityKinds, views, children, }) {
+    const [open, setOpen] = React.useState(false);
+    // The last accepted request stays mounted through the close animation.
+    const [request, setRequest] = React.useState(null);
+    const declared = React.useMemo(() => entityKinds ?? [], [entityKinds]);
+    const api = React.useMemo(() => ({
+        open: (req) => {
+            // The one fail-closed gate: Flavor-declared AND product-injected.
+            if (resolveInspectorView(req.kind, declared, views) == null)
+                return false;
+            setRequest(req);
+            setOpen(true);
+            return true;
+        },
+        close: () => setOpen(false),
+        isOpen: open,
+        canInspect: (kind) => resolveInspectorView(kind, declared, views) != null,
+    }), [declared, views, open]);
+    // Re-resolve at render (never a captured component): pulling a view out of
+    // the registry closes an already-open panel's content path too.
+    const View = request ? resolveInspectorView(request.kind, declared, views) : null;
+    return (_jsxs(InspectorContext.Provider, { value: api, children: [children, _jsx(Sheet, { open: open && View != null, onOpenChange: setOpen, children: _jsx(SheetContent, { side: "right", className: "w-full gap-0 overflow-y-auto sm:max-w-md", "data-inspector-kind": request?.kind, children: request && View ? (_jsxs(_Fragment, { children: [_jsxs(SheetHeader, { className: "border-b", children: [_jsx(SheetTitle, { children: request.title ?? request.kind }), request.description ? (_jsx(SheetDescription, { children: request.description })) : (_jsx(SheetDescription, { className: "sr-only", children: "Detail inspector" }))] }), _jsx("div", { className: "flex-1 p-4", children: _jsx(View, { kind: request.kind, entity: request.entity, close: () => setOpen(false) }) })] })) : null }) })] }));
+}
+//# sourceMappingURL=InspectorProvider.js.map

package/dist/inspector/InspectorProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InspectorProvider.js","sourceRoot":"","sources":["../../src/inspector/InspectorProvider.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAE/B,OAAO,EACL,KAAK,EACL,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,UAAU,GACX,MAAM,qBAAqB,CAAC;AAO7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,uEAAuE;AACvE,MAAM,YAAY,GAAiB;IACjC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK;IACjB,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,MAAM,EAAE,KAAK;IACb,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;CACxB,CAAC;AAEF,MAAM,gBAAgB,GAAG,KAAK,CAAC,aAAa,CAAe,YAAY,CAAC,CAAC;AAEzE;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;AAC5C,CAAC;AAgBD,MAAM,UAAU,iBAAiB,CAAC,EAChC,WAAW,EACX,KAAK,EACL,QAAQ,GACe;IACvB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,uEAAuE;IACvE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC,QAAQ,CAA8B,IAAI,CAAC,CAAC;IAEhF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAEvE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CACvB,GAAG,EAAE,CAAC,CAAC;QACL,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE;YACZ,kEAAkE;YAClE,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC1E,UAAU,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,IAAI;KAC1E,CAAC,EACF,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CACxB,CAAC;IAEF,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAElF,OAAO,CACL,MAAC,gBAAgB,CAAC,QAAQ,IAAC,KAAK,EAAE,GAAG,aAClC,QAAQ,EACT,KAAC,KAAK,IAAC,IAAI,EAAE,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE,YAAY,EAAE,OAAO,YACtD,KAAC,YAAY,IACX,IAAI,EAAC,OAAO,EACZ,SAAS,EAAC,0CAA0C,yBAC/B,OAAO,EAAE,IAAI,YAEjC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CACjB,8BACE,MAAC,WAAW,IAAC,SAAS,EAAC,UAAU,aAC/B,KAAC,UAAU,cAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,GAAc,EACvD,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CACrB,KAAC,gBAAgB,cAAE,OAAO,CAAC,WAAW,GAAoB,CAC3D,CAAC,CAAC,CAAC,CACF,KAAC,gBAAgB,IAAC,SAAS,EAAC,SAAS,iCAElB,CACpB,IACW,EACd,cAAK,SAAS,EAAC,YAAY,YACzB,KAAC,IAAI,IACH,IAAI,EAAE,OAAO,CAAC,IAAI,EAClB,MAAM,EAAE,OAAO,CAAC,MAAM,EACtB,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAC3B,GACE,IACL,CACJ,CAAC,CAAC,CAAC,IAAI,GACK,GACT,IACkB,CAC7B,CAAC;AACJ,CAAC"}

package/dist/inspector/types.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Inspector — the type contract (the shell's detail-panel seam), per the
+ * Operator Platform contract skeleton (frontend-platform-doctrine.md):
+ * "Inspector / detail — the platform owns inspector-panel behavior and
+ * open/close; the product fills the detail views registered for its
+ * entities."
+ *
+ * The split, verbatim from the membrane:
+ *   - The SHELL owns the panel — open/close/focus lifecycle over the sheet
+ *     primitive, keyed by ENTITY KIND.
+ *   - The FLAVOR declares inspector REFERENCES — the entity-kind ids this
+ *     surface may inspect (inert strings; components can't live in a Flavor,
+ *     Declarative-Flavor law).
+ *   - The PRODUCT injects the view components through a shell-prop registry
+ *     keyed by those references (the same injection pattern as icons, the
+ *     permission resolver, and `runCommand`).
+ *
+ * FAIL-CLOSED: opening a kind the Flavor never declared, or one no injected
+ * view resolves, does nothing — no panel, no crash (the inspector dual of
+ * the WorkspaceHost's unavailable state and the palette's hidden
+ * runner-less commands).
+ *
+ * The inspector presents ALREADY-RESOLVED data: the opener hands it the
+ * entity (from a read the page already holds). The shell never fetches — a
+ * detail view that needs more data fetches on the product's side of the
+ * membrane.
+ */
+import type * as React from "react";
+/**
+ * The mount contract — what every registered inspector view receives from
+ * the shell when its entity kind is opened.
+ */
+export interface InspectorViewProps<TEntity = unknown> {
+    /** The entity-kind reference this view was registered under. */
+    kind: string;
+    /**
+     * The already-resolved entity the opener supplied — opaque to the shell,
+     * typed by the product's view (meaning belongs to the product).
+     */
+    entity: TEntity;
+    /** Imperative close handle (the shell also closes on Esc / the ✕ / overlay). */
+    close: () => void;
+}
+/** A registered inspector view component (entity typing erased at the registry boundary). */
+export type InspectorView = React.ComponentType<InspectorViewProps<any>>;
+/**
+ * The product's view registry, injected as a shell prop and keyed by the
+ * Flavor's entity-kind references. Components live HERE (product code) —
+ * never in the Flavor.
+ */
+export type InspectorViewRegistry = Record<string, InspectorView>;
+/** What an opener passes to `useInspector().open(…)`. */
+export interface InspectorOpenRequest<TEntity = unknown> {
+    /**
+     * The entity-kind reference — must be declared by the Flavor AND have an
+     * injected view, or the request fails closed (returns false, no panel).
+     */
+    kind: string;
+    /** The already-resolved entity the view will present. */
+    entity: TEntity;
+    /** Panel title (a11y-required; defaults to the kind reference). */
+    title?: string;
+    /** Optional one-line description rendered under the title. */
+    description?: string;
+}
+/** The shell-owned inspector API pages reach through `useInspector()`. */
+export interface InspectorApi {
+    /**
+     * Open the inspector on an entity. Fail-closed: returns `true` and opens
+     * only when the kind is Flavor-declared and a view is injected; otherwise
+     * returns `false` and nothing renders.
+     */
+    open: (request: InspectorOpenRequest) => boolean;
+    /** Close the panel (idempotent). */
+    close: () => void;
+    /** Is the panel currently open? */
+    isOpen: boolean;
+    /**
+     * Would `open` succeed for this kind? Lets a page decide whether to draw
+     * an inspect affordance at all (same fail-closed derivation as `open`).
+     */
+    canInspect: (kind: string) => boolean;
+}
+/**
+ * The one fail-closed resolution both `open` and `canInspect` share: a kind
+ * inspects only when the Flavor DECLARED it (the inert reference) and the
+ * product INJECTED a view for it (the implementation). Pure and exported so
+ * the gate is provable without a DOM.
+ */
+export declare function resolveInspectorView(kind: string, declaredKinds: readonly string[], views: InspectorViewRegistry | undefined): InspectorView | null;
+//# sourceMappingURL=types.d.ts.map

package/dist/inspector/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/inspector/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,KAAK,KAAK,MAAM,OAAO,CAAC;AAEpC;;;GAGG;AACH,MAAM,WAAW,kBAAkB,CAAC,OAAO,GAAG,OAAO;IACnD,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,gFAAgF;IAChF,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,6FAA6F;AAE7F,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;AAEzE;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAElE,yDAAyD;AACzD,MAAM,WAAW,oBAAoB,CAAC,OAAO,GAAG,OAAO;IACrD;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,MAAM,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,IAAI,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC;IACjD,oCAAoC;IACpC,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,mCAAmC;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACvC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,KAAK,EAAE,qBAAqB,GAAG,SAAS,GACvC,aAAa,GAAG,IAAI,CAItB"}

package/dist/inspector/types.js

@@ -0,0 +1,40 @@
+/**
+ * Inspector — the type contract (the shell's detail-panel seam), per the
+ * Operator Platform contract skeleton (frontend-platform-doctrine.md):
+ * "Inspector / detail — the platform owns inspector-panel behavior and
+ * open/close; the product fills the detail views registered for its
+ * entities."
+ *
+ * The split, verbatim from the membrane:
+ *   - The SHELL owns the panel — open/close/focus lifecycle over the sheet
+ *     primitive, keyed by ENTITY KIND.
+ *   - The FLAVOR declares inspector REFERENCES — the entity-kind ids this
+ *     surface may inspect (inert strings; components can't live in a Flavor,
+ *     Declarative-Flavor law).
+ *   - The PRODUCT injects the view components through a shell-prop registry
+ *     keyed by those references (the same injection pattern as icons, the
+ *     permission resolver, and `runCommand`).
+ *
+ * FAIL-CLOSED: opening a kind the Flavor never declared, or one no injected
+ * view resolves, does nothing — no panel, no crash (the inspector dual of
+ * the WorkspaceHost's unavailable state and the palette's hidden
+ * runner-less commands).
+ *
+ * The inspector presents ALREADY-RESOLVED data: the opener hands it the
+ * entity (from a read the page already holds). The shell never fetches — a
+ * detail view that needs more data fetches on the product's side of the
+ * membrane.
+ */
+/**
+ * The one fail-closed resolution both `open` and `canInspect` share: a kind
+ * inspects only when the Flavor DECLARED it (the inert reference) and the
+ * product INJECTED a view for it (the implementation). Pure and exported so
+ * the gate is provable without a DOM.
+ */
+export function resolveInspectorView(kind, declaredKinds, views) {
+    if (!declaredKinds.includes(kind))
+        return null;
+    const view = views?.[kind];
+    return view ?? null;
+}
+//# sourceMappingURL=types.js.map

package/dist/inspector/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/inspector/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAiEH;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,aAAgC,EAChC,KAAwC;IAExC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,IAAI,IAAI,IAAI,CAAC;AACtB,CAAC"}

package/dist/nav/routes.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The nav engine's pure route logic. The Flavor declares routes; everything
+ * the shell decides about them (active state, the Chief in-console set) is
+ * DERIVED here — no hardcoded route lists anywhere in the shell.
+ */
+import type { OperatorNavGroup, OperatorNavItem } from "../flavor/types.js";
+import type { PermissionGateStatus } from "../guard/permissions.js";
+/**
+ * The set of console route hrefs derived from the Flavor's nav — the source
+ * of truth for what this console serves (replaces the reference shell's
+ * hardcoded IN_CONSOLE_ROUTES).
+ */
+export declare function flavorRoutes(nav: OperatorNavGroup[]): Set<string>;
+/** Whether an href (query string ignored) is part of the console's route set. */
+export declare function isRouteInConsole(routes: Set<string>, href: string): boolean;
+/**
+ * Active-state rule, carried over from the reference shell verbatim:
+ * `/` matches exactly; any other href matches by prefix.
+ */
+export declare function isNavItemActive(href: string, pathname: string): boolean;
+/** A nav item paired with what its gate shows right now (denied never appears). */
+export interface GatedNavItem {
+    item: OperatorNavItem;
+    status: Extract<PermissionGateStatus, "allowed" | "loading">;
+}
+/** A nav group after gating; groups whose items all vanished are dropped. */
+export interface GatedNavGroup {
+    group: OperatorNavGroup;
+    items: GatedNavItem[];
+}
+/**
+ * The sidebar's pure gating derivation (contracts §5), provable without a
+ * DOM: each item reads the live decisions map through `gateStatus` —
+ * `denied`/unknown items DO NOT EXIST in the output (hidden, never
+ * disabled), `loading` items keep their slot (the sidebar renders a
+ * skeleton), and a group left with nothing vanishes with its label.
+ */
+export declare function deriveGatedNavGroups(nav: OperatorNavGroup[], decisions: Readonly<Record<string, PermissionGateStatus>>): GatedNavGroup[];
+//# sourceMappingURL=routes.d.ts.map

package/dist/nav/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/nav/routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAGpE;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAEjE;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC,oBAAoB,EAAE,SAAS,GAAG,SAAS,CAAC,CAAC;CAC9D;AAED,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,gBAAgB,EAAE,EACvB,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,GACxD,aAAa,EAAE,CAYjB"}

package/dist/nav/routes.js

@@ -0,0 +1,46 @@
+/**
+ * The nav engine's pure route logic. The Flavor declares routes; everything
+ * the shell decides about them (active state, the Chief in-console set) is
+ * DERIVED here — no hardcoded route lists anywhere in the shell.
+ */
+import { gateStatus } from "../guard/permissions.js";
+/**
+ * The set of console route hrefs derived from the Flavor's nav — the source
+ * of truth for what this console serves (replaces the reference shell's
+ * hardcoded IN_CONSOLE_ROUTES).
+ */
+export function flavorRoutes(nav) {
+    return new Set(nav.flatMap((group) => group.items.map((item) => item.href)));
+}
+/** Whether an href (query string ignored) is part of the console's route set. */
+export function isRouteInConsole(routes, href) {
+    return routes.has(href.split("?")[0] ?? href);
+}
+/**
+ * Active-state rule, carried over from the reference shell verbatim:
+ * `/` matches exactly; any other href matches by prefix.
+ */
+export function isNavItemActive(href, pathname) {
+    return href === "/" ? pathname === "/" : pathname.startsWith(href);
+}
+/**
+ * The sidebar's pure gating derivation (contracts §5), provable without a
+ * DOM: each item reads the live decisions map through `gateStatus` —
+ * `denied`/unknown items DO NOT EXIST in the output (hidden, never
+ * disabled), `loading` items keep their slot (the sidebar renders a
+ * skeleton), and a group left with nothing vanishes with its label.
+ */
+export function deriveGatedNavGroups(nav, decisions) {
+    return nav
+        .map((group) => ({
+        group,
+        items: group.items
+            .map((item) => {
+            const status = gateStatus(item.requiredPermission, decisions);
+            return status === "denied" ? null : { item, status };
+        })
+            .filter((entry) => entry !== null),
+    }))
+        .filter(({ items }) => items.length > 0);
+}
+//# sourceMappingURL=routes.js.map

package/dist/nav/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/nav/routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAuB;IAClD,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,MAAmB,EAAE,IAAY;IAChE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,QAAgB;IAC5D,OAAO,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAcD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAuB,EACvB,SAAyD;IAEzD,OAAO,GAAG;SACP,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,KAAK;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;aACf,GAAG,CAAC,CAAC,IAAI,EAAuB,EAAE;YACjC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YAC9D,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACvD,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,KAAK,EAAyB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;KAC5D,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/palette/CommandPalette.d.ts

@@ -0,0 +1,40 @@
+import type { OperatorFlavor } from "../flavor/types.js";
+import type { PermissionResolver } from "../guard/permissions.js";
+import type { IconRegistry } from "../icons/registry.js";
+import type { SearchSource } from "./search-sources.js";
+export interface CommandPaletteProps {
+    /** The surface manifest — nav derives the route commands; `commands` adds references. */
+    flavor: OperatorFlavor;
+    /**
+     * The product's permission resolution (§5), sync or async — the palette
+     * gates exactly like the sidebar (an in-flight async decision is DENIED
+     * here until it resolves; fail-closed while loading).
+     */
+    resolvePermission: PermissionResolver;
+    /** Product icon-vocabulary extensions for the registry. */
+    icons?: IconRegistry;
+    /**
+     * The resolved icon family (the frame reads the Brand's inert
+     * `iconFamily` declaration and resolves it via `resolveIconFamily`).
+     * Absent ⇒ the shipped family — same deterministic default.
+     */
+    iconFamily?: string;
+    /**
+     * Product-injected executor for `command`-reference entries. Without it,
+     * those entries are hidden (fail-closed) — `href` entries still navigate.
+     */
+    runCommand?: (commandRef: string) => void;
+    /**
+     * Product-injected searchable sources (search-sources.ts) — the Search
+     * experience's injection slot. Absent ⇒ the palette is commands-only.
+     * Pass a STABLE array (module const / memo): identity is the re-query key.
+     */
+    searchSources?: readonly SearchSource[];
+    /** Controlled open state (the frame owns it; ⌘K toggles through onOpenChange). */
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    /** Input placeholder copy. */
+    placeholder?: string;
+}
+export declare function CommandPalette({ flavor, resolvePermission, icons, iconFamily, runCommand, searchSources, open, onOpenChange, placeholder, }: CommandPaletteProps): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=CommandPalette.d.ts.map

package/dist/palette/CommandPalette.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandPalette.d.ts","sourceRoot":"","sources":["../../src/palette/CommandPalette.tsx"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAA0B,MAAM,yBAAyB,CAAC;AAG1F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAKzD,OAAO,KAAK,EAAsB,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAG5E,MAAM,WAAW,mBAAmB;IAClC,yFAAyF;IACzF,MAAM,EAAE,cAAc,CAAC;IACvB;;;;OAIG;IACH,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,2DAA2D;IAC3D,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C;;;;OAIG;IACH,aAAa,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,kFAAkF;IAClF,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACtC,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,cAAc,CAAC,EAC7B,MAAM,EACN,iBAAiB,EACjB,KAAK,EACL,UAAU,EACV,UAAU,EACV,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,WAAyC,GAC1C,EAAE,mBAAmB,2CAwHrB"}