@xemahq/ui-kernel 0.1.6 → 0.1.7

package/dist/session-kit/primitives/Avatar.d.ts

@@ -0,0 +1,10 @@
+import type { CSSProperties, ReactElement } from 'react';
+export interface AvatarProps {
+    readonly initials: string;
+    readonly size?: number;
+    readonly color?: string;
+    readonly ink?: string;
+    readonly style?: CSSProperties;
+}
+export declare function Avatar({ initials, size, color, ink, style, }: AvatarProps): ReactElement;
+//# sourceMappingURL=Avatar.d.ts.map

package/dist/session-kit/primitives/Avatar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Avatar.d.ts","sourceRoot":"","sources":["../../../src/session-kit/primitives/Avatar.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAEzD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,MAAM,CAAC,EACrB,QAAQ,EACR,IAAS,EACT,KAAkD,EAClD,GAAkD,EAClD,KAAK,GACN,EAAE,WAAW,GAAG,YAAY,CAsB5B"}

package/dist/session-kit/primitives/Avatar.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Avatar = Avatar;
+const jsx_runtime_1 = require("react/jsx-runtime");
+function Avatar({ initials, size = 26, color = 'hsl(var(--accent-2, var(--accent-tint)))', ink = 'hsl(var(--primary-ink, var(--accent-ink)))', style, }) {
+    return ((0, jsx_runtime_1.jsx)("span", { className: "mono", style: {
+            width: size,
+            height: size,
+            borderRadius: '50%',
+            flexShrink: 0,
+            display: 'grid',
+            placeItems: 'center',
+            background: color,
+            color: ink,
+            fontSize: size * 0.4,
+            fontWeight: 600,
+            letterSpacing: '-0.02em',
+            ...style,
+        }, children: initials }));
+}
+//# sourceMappingURL=Avatar.js.map

package/dist/session-kit/primitives/Avatar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Avatar.js","sourceRoot":"","sources":["../../../src/session-kit/primitives/Avatar.tsx"],"names":[],"mappings":";;AAeA,wBA4BC;;AA5BD,SAAgB,MAAM,CAAC,EACrB,QAAQ,EACR,IAAI,GAAG,EAAE,EACT,KAAK,GAAG,0CAA0C,EAClD,GAAG,GAAG,4CAA4C,EAClD,KAAK,GACO;IACZ,OAAO,CACL,iCACE,SAAS,EAAC,MAAM,EAChB,KAAK,EAAE;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,IAAI,GAAG,GAAG;YACpB,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,SAAS;YACxB,GAAG,KAAK;SACT,YAEA,QAAQ,GACJ,CACR,CAAC;AACJ,CAAC"}

package/dist/session-kit/primitives/PortalGlyph.d.ts

@@ -0,0 +1,12 @@
+import { type PortalAccentVar } from '../lib/portal-accent';
+import type { CSSProperties, ReactElement, ReactNode } from 'react';
+export interface PortalGlyphProps {
+    readonly accentVar?: PortalAccentVar;
+    readonly icon: ReactNode;
+    readonly size?: number;
+    readonly radius?: number;
+    readonly active?: boolean;
+    readonly style?: CSSProperties;
+}
+export declare function PortalGlyph({ accentVar, icon, size, radius, active, style, }: PortalGlyphProps): ReactElement;
+//# sourceMappingURL=PortalGlyph.d.ts.map

package/dist/session-kit/primitives/PortalGlyph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PortalGlyph.d.ts","sourceRoot":"","sources":["../../../src/session-kit/primitives/PortalGlyph.tsx"],"names":[],"mappings":"AAMA,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE1E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAGpE,MAAM,WAAW,gBAAgB;IAE/B,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IAErC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,WAAW,CAAC,EAC1B,SAAS,EACT,IAAI,EACJ,IAAS,EACT,MAAU,EACV,MAAc,EACd,KAAK,GACN,EAAE,gBAAgB,GAAG,YAAY,CAoBjC"}

package/dist/session-kit/primitives/PortalGlyph.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PortalGlyph = PortalGlyph;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const portal_accent_1 = require("../lib/portal-accent");
+function PortalGlyph({ accentVar, icon, size = 34, radius = 9, active = false, style, }) {
+    return ((0, jsx_runtime_1.jsx)("span", { style: {
+            width: size,
+            height: size,
+            borderRadius: radius,
+            flexShrink: 0,
+            display: 'grid',
+            placeItems: 'center',
+            background: (0, portal_accent_1.portalAccent)(accentVar, 0.13),
+            color: (0, portal_accent_1.portalAccent)(accentVar),
+            border: `1px solid ${(0, portal_accent_1.portalAccent)(accentVar, active ? 0.5 : 0.22)}`,
+            boxShadow: active ? `0 0 0 1px ${(0, portal_accent_1.portalAccent)(accentVar, 0.25)}` : 'none',
+            ...style,
+        }, children: icon }));
+}
+//# sourceMappingURL=PortalGlyph.js.map

package/dist/session-kit/primitives/PortalGlyph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PortalGlyph.js","sourceRoot":"","sources":["../../../src/session-kit/primitives/PortalGlyph.tsx"],"names":[],"mappings":";;AAuBA,kCA2BC;;AA5CD,wDAA0E;AAiB1E,SAAgB,WAAW,CAAC,EAC1B,SAAS,EACT,IAAI,EACJ,IAAI,GAAG,EAAE,EACT,MAAM,GAAG,CAAC,EACV,MAAM,GAAG,KAAK,EACd,KAAK,GACY;IACjB,OAAO,CACL,iCACE,KAAK,EAAE;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAA,4BAAY,EAAC,SAAS,EAAE,IAAI,CAAC;YACzC,KAAK,EAAE,IAAA,4BAAY,EAAC,SAAS,CAAC;YAC9B,MAAM,EAAE,aAAa,IAAA,4BAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;YACnE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,IAAA,4BAAY,EAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM;YACzE,GAAG,KAAK;SACT,YAEA,IAAI,GACA,CACR,CAAC;AACJ,CAAC"}

package/dist/session-kit/primitives/RiskPill.d.ts

@@ -0,0 +1,12 @@
+import { CapabilityRiskTier } from '@xemahq/kernel-contracts/capability';
+import type { CSSProperties, ReactElement, ReactNode } from 'react';
+export { CapabilityRiskTier };
+export type RiskPillSize = 'xs' | 'sm';
+export interface RiskPillProps {
+    readonly tier: CapabilityRiskTier;
+    readonly size?: RiskPillSize;
+    readonly criticalIcon?: ReactNode;
+    readonly style?: CSSProperties;
+}
+export declare function RiskPill({ tier, size, criticalIcon, style, }: RiskPillProps): ReactElement;
+//# sourceMappingURL=RiskPill.d.ts.map

package/dist/session-kit/primitives/RiskPill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RiskPill.d.ts","sourceRoot":"","sources":["../../../src/session-kit/primitives/RiskPill.tsx"],"names":[],"mappings":"AAYA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEpE,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAsC9B,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAE7B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,QAAQ,CAAC,EACvB,IAAI,EACJ,IAAW,EACX,YAAY,EACZ,KAAK,GACN,EAAE,aAAa,GAAG,YAAY,CAyB9B"}

package/dist/session-kit/primitives/RiskPill.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CapabilityRiskTier = void 0;
+exports.RiskPill = RiskPill;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const capability_1 = require("@xemahq/kernel-contracts/capability");
+Object.defineProperty(exports, "CapabilityRiskTier", { enumerable: true, get: function () { return capability_1.CapabilityRiskTier; } });
+const DANGER = 'var(--destructive, var(--danger))';
+const RISK = {
+    [capability_1.CapabilityRiskTier.Low]: {
+        label: 'Low',
+        fg: 'hsl(var(--ink-3))',
+        bg: 'hsl(var(--muted))',
+        bd: 'hsl(var(--rule))',
+    },
+    [capability_1.CapabilityRiskTier.Medium]: {
+        label: 'Medium',
+        fg: 'hsl(var(--info))',
+        bg: 'hsl(var(--info) / 0.09)',
+        bd: 'hsl(var(--info) / 0.28)',
+    },
+    [capability_1.CapabilityRiskTier.High]: {
+        label: 'High',
+        fg: 'hsl(var(--warning))',
+        bg: 'hsl(var(--warning) / 0.1)',
+        bd: 'hsl(var(--warning) / 0.3)',
+    },
+    [capability_1.CapabilityRiskTier.Critical]: {
+        label: 'Critical',
+        fg: `hsl(${DANGER})`,
+        bg: `hsl(${DANGER} / 0.09)`,
+        bd: `hsl(${DANGER} / 0.32)`,
+    },
+};
+function RiskPill({ tier, size = 'sm', criticalIcon, style, }) {
+    const r = RISK[tier];
+    return ((0, jsx_runtime_1.jsxs)("span", { className: "mono", style: {
+            display: 'inline-flex',
+            alignItems: 'center',
+            gap: 4,
+            padding: size === 'xs' ? '1px 6px' : '2px 8px',
+            fontSize: size === 'xs' ? 9.5 : 10,
+            fontWeight: 600,
+            textTransform: 'uppercase',
+            letterSpacing: '0.06em',
+            color: r.fg,
+            background: r.bg,
+            border: `1px solid ${r.bd}`,
+            borderRadius: 5,
+            ...style,
+        }, children: [tier === capability_1.CapabilityRiskTier.Critical && criticalIcon, r.label] }));
+}
+//# sourceMappingURL=RiskPill.js.map

package/dist/session-kit/primitives/RiskPill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RiskPill.js","sourceRoot":"","sources":["../../../src/session-kit/primitives/RiskPill.tsx"],"names":[],"mappings":";;;AAgEA,4BA8BC;;AAlFD,oEAAyE;AAIhE,mGAJA,+BAAkB,OAIA;AAS3B,MAAM,MAAM,GAAG,mCAAmC,CAAC;AAEnD,MAAM,IAAI,GAA0C;IAClD,CAAC,+BAAkB,CAAC,GAAG,CAAC,EAAE;QACxB,KAAK,EAAE,KAAK;QACZ,EAAE,EAAE,mBAAmB;QACvB,EAAE,EAAE,mBAAmB;QACvB,EAAE,EAAE,kBAAkB;KACvB;IACD,CAAC,+BAAkB,CAAC,MAAM,CAAC,EAAE;QAC3B,KAAK,EAAE,QAAQ;QACf,EAAE,EAAE,kBAAkB;QACtB,EAAE,EAAE,yBAAyB;QAC7B,EAAE,EAAE,yBAAyB;KAC9B;IACD,CAAC,+BAAkB,CAAC,IAAI,CAAC,EAAE;QACzB,KAAK,EAAE,MAAM;QACb,EAAE,EAAE,qBAAqB;QACzB,EAAE,EAAE,2BAA2B;QAC/B,EAAE,EAAE,2BAA2B;KAChC;IACD,CAAC,+BAAkB,CAAC,QAAQ,CAAC,EAAE;QAC7B,KAAK,EAAE,UAAU;QACjB,EAAE,EAAE,OAAO,MAAM,GAAG;QACpB,EAAE,EAAE,OAAO,MAAM,UAAU;QAC3B,EAAE,EAAE,OAAO,MAAM,UAAU;KAC5B;CACF,CAAC;AAYF,SAAgB,QAAQ,CAAC,EACvB,IAAI,EACJ,IAAI,GAAG,IAAI,EACX,YAAY,EACZ,KAAK,GACS;IACd,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,CACL,kCACE,SAAS,EAAC,MAAM,EAChB,KAAK,EAAE;YACL,OAAO,EAAE,aAAa;YACtB,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,CAAC;YACN,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC9C,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YAClC,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,WAAW;YAC1B,aAAa,EAAE,QAAQ;YACvB,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,UAAU,EAAE,CAAC,CAAC,EAAE;YAChB,MAAM,EAAE,aAAa,CAAC,CAAC,EAAE,EAAE;YAC3B,YAAY,EAAE,CAAC;YACf,GAAG,KAAK;SACT,aAEA,IAAI,KAAK,+BAAkB,CAAC,QAAQ,IAAI,YAAY,EACpD,CAAC,CAAC,KAAK,IACH,CACR,CAAC;AACJ,CAAC"}

package/dist/session-kit/primitives/ScopeDot.d.ts

@@ -0,0 +1,9 @@
+import { BiomeScope } from '../lib/enums';
+import type { CSSProperties, ReactElement } from 'react';
+export interface ScopeDotProps {
+    readonly scope: BiomeScope;
+    readonly size?: number;
+    readonly style?: CSSProperties;
+}
+export declare function ScopeDot({ scope, size, style, }: ScopeDotProps): ReactElement;
+//# sourceMappingURL=ScopeDot.d.ts.map

package/dist/session-kit/primitives/ScopeDot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScopeDot.d.ts","sourceRoot":"","sources":["../../../src/session-kit/primitives/ScopeDot.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAczD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,QAAQ,CAAC,EACvB,KAAK,EACL,IAAQ,EACR,KAAK,GACN,EAAE,aAAa,GAAG,YAAY,CAgB9B"}

package/dist/session-kit/primitives/ScopeDot.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeDot = ScopeDot;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const enums_1 = require("../lib/enums");
+const SCOPE = {
+    [enums_1.BiomeScope.System]: { color: 'hsl(var(--ink-4))', label: 'System' },
+    [enums_1.BiomeScope.Platform]: { color: 'hsl(var(--primary))', label: 'Platform' },
+    [enums_1.BiomeScope.Community]: { color: 'hsl(var(--p-people))', label: 'Community' },
+};
+function ScopeDot({ scope, size = 7, style, }) {
+    const s = SCOPE[scope];
+    return ((0, jsx_runtime_1.jsx)("span", { title: s.label, style: {
+            width: size,
+            height: size,
+            borderRadius: '50%',
+            background: s.color,
+            flexShrink: 0,
+            display: 'inline-block',
+            ...style,
+        } }));
+}
+//# sourceMappingURL=ScopeDot.js.map

package/dist/session-kit/primitives/ScopeDot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScopeDot.js","sourceRoot":"","sources":["../../../src/session-kit/primitives/ScopeDot.tsx"],"names":[],"mappings":";;AA0BA,4BAoBC;;AA1CD,wCAA0C;AAU1C,MAAM,KAAK,GAAmC;IAC5C,CAAC,kBAAU,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,QAAQ,EAAE;IACpE,CAAC,kBAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,UAAU,EAAE;IAC1E,CAAC,kBAAU,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,WAAW,EAAE;CAC9E,CAAC;AAQF,SAAgB,QAAQ,CAAC,EACvB,KAAK,EACL,IAAI,GAAG,CAAC,EACR,KAAK,GACS;IACd,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,CACL,iCACE,KAAK,EAAE,CAAC,CAAC,KAAK,EACd,KAAK,EAAE;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,CAAC,CAAC,KAAK;YACnB,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,cAAc;YACvB,GAAG,KAAK;SACT,GACD,CACH,CAAC;AACJ,CAAC"}

package/dist/session-kit/primitives/Segmented.d.ts

@@ -0,0 +1,16 @@
+import type { CSSProperties, ReactElement, ReactNode } from 'react';
+export interface SegmentedOption<V extends string> {
+    readonly value: V;
+    readonly label: ReactNode;
+    readonly icon?: ReactNode;
+}
+export type SegmentedSize = 'sm' | 'md';
+export interface SegmentedProps<V extends string> {
+    readonly options: ReadonlyArray<SegmentedOption<V>>;
+    readonly value: V;
+    readonly onChange: (value: V) => void;
+    readonly size?: SegmentedSize;
+    readonly style?: CSSProperties;
+}
+export declare function Segmented<V extends string>({ options, value, onChange, size, style, }: SegmentedProps<V>): ReactElement;
+//# sourceMappingURL=Segmented.d.ts.map

package/dist/session-kit/primitives/Segmented.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Segmented.d.ts","sourceRoot":"","sources":["../../../src/session-kit/primitives/Segmented.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEpE,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,MAAM;IAC/C,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAE1B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AAED,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,MAAM;IAC9C,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,SAAS,CAAC,CAAC,SAAS,MAAM,EAAE,EAC1C,OAAO,EACP,KAAK,EACL,QAAQ,EACR,IAAW,EACX,KAAK,GACN,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,YAAY,CAyClC"}

package/dist/session-kit/primitives/Segmented.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Segmented = Segmented;
+const jsx_runtime_1 = require("react/jsx-runtime");
+function Segmented({ options, value, onChange, size = 'sm', style, }) {
+    return ((0, jsx_runtime_1.jsx)("div", { style: {
+            display: 'inline-flex',
+            padding: 2,
+            gap: 2,
+            background: 'hsl(var(--paper-sunk))',
+            border: '1px solid hsl(var(--rule))',
+            borderRadius: 8,
+            ...style,
+        }, children: options.map((option) => {
+            const on = option.value === value;
+            return ((0, jsx_runtime_1.jsxs)("button", { type: "button", onClick: () => onChange(option.value), style: {
+                    display: 'inline-flex',
+                    alignItems: 'center',
+                    gap: 5,
+                    padding: size === 'sm' ? '4px 10px' : '6px 12px',
+                    fontSize: size === 'sm' ? 12 : 13,
+                    fontWeight: on ? 600 : 450,
+                    borderRadius: 6,
+                    color: on ? 'hsl(var(--ink))' : 'hsl(var(--ink-3))',
+                    background: on ? 'hsl(var(--paper-elev))' : 'transparent',
+                    boxShadow: on ? 'var(--shadow-2, var(--shadow-1))' : 'none',
+                    transition: 'background 140ms ease, color 140ms ease, box-shadow 140ms ease',
+                }, children: [option.icon, option.label] }, option.value));
+        }) }));
+}
+//# sourceMappingURL=Segmented.js.map

package/dist/session-kit/primitives/Segmented.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Segmented.js","sourceRoot":"","sources":["../../../src/session-kit/primitives/Segmented.tsx"],"names":[],"mappings":";;AAuBA,8BA+CC;;AA/CD,SAAgB,SAAS,CAAmB,EAC1C,OAAO,EACP,KAAK,EACL,QAAQ,EACR,IAAI,GAAG,IAAI,EACX,KAAK,GACa;IAClB,OAAO,CACL,gCACE,KAAK,EAAE;YACL,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,CAAC;YACV,GAAG,EAAE,CAAC;YACN,UAAU,EAAE,wBAAwB;YACpC,MAAM,EAAE,4BAA4B;YACpC,YAAY,EAAE,CAAC;YACf,GAAG,KAAK;SACT,YAEA,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACtB,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC;YAClC,OAAO,CACL,oCAEE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EACrC,KAAK,EAAE;oBACL,OAAO,EAAE,aAAa;oBACtB,UAAU,EAAE,QAAQ;oBACpB,GAAG,EAAE,CAAC;oBACN,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;oBAChD,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;oBACjC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;oBAC1B,YAAY,EAAE,CAAC;oBACf,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB;oBACnD,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,aAAa;oBACzD,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,MAAM;oBAC3D,UAAU,EAAE,gEAAgE;iBAC7E,aAEA,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,KAAK,KAlBR,MAAM,CAAC,KAAK,CAmBV,CACV,CAAC;QACJ,CAAC,CAAC,GACE,CACP,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/ui-kernel",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "description": "Host-framework-agnostic UI kernel for the Xema OS. Defines the SystemBus orchestration contract (capability.invoke, cross-biome intents, command palette, xema:// deeplinks, window manager) AND the biome-host contract surface (FrontendBiome/FrontendBiomeFactory, HostBridge, the singleton biomeRegistry, session contributions) that every frontend biome composes against. No Vite, Next.js, or React-Router — React itself IS allowed as the shared component model (the contracts traffic in ReactNode/ComponentType and a React context). Concrete host adapters (router/auth/toast wiring) live in separate packages that consume this kernel. The SystemBus is pure orchestration: it never authorizes, the backend capability-router enforces all policy.",
   "keywords": [
     "xema",
@@ -35,7 +35,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@xemahq/kernel-contracts": "^0.2.0",
+    "@xemahq/kernel-contracts": "^0.3.0",
     "clsx": "^2.1.1",
     "tailwind-merge": "^2.5.4",
     "@xemahq/registry": "0.1.3"

package/src/lib/biome-host/create-biome-orval-config.ts

@@ -0,0 +1,76 @@
+/**
+ * Shared Orval-client wiring for frontend biomes.
+ *
+ * Every biome that calls a platform API through an Orval-generated client must
+ * configure that client with the SAME auth/header/401 behavior the host shell
+ * uses for its own clients. Hand-copying a `configureOrgDbClient`-style helper
+ * into each biome (as `org-databases` did across three hook files) duplicates
+ * the correlation-id + org-header + token logic and lets it drift from the
+ * host. This factory centralizes it: a biome builds one config from its
+ * `HostBridge` and feeds it straight into the client's `configureClient(...)`.
+ *
+ * Auth/refresh/redirect stay HOST-owned — this only READS the bridge's
+ * host-implemented methods (`getActorToken`, `ensureFreshToken`,
+ * `onUnauthorized`, `getOrgId`). It owns no auth state of its own.
+ */
+import type { HostBridge } from './host-bridge';
+
+/**
+ * The Orval client config shape every generated `configureClient(...)` accepts.
+ * Kept structural (not imported from a client package) so the kernel stays free
+ * of any concrete service-client dependency — biomes pass the result straight
+ * into their own client's `configureClient`, which validates the shape.
+ */
+export interface BiomeOrvalConfig {
+  readonly baseUrl: string;
+  readonly maxRetries: number;
+  getAuthToken(): Promise<string>;
+  getHeaders(): Promise<Record<string, string>>;
+  onUnauthorized(): Promise<void>;
+}
+
+export interface CreateBiomeOrvalConfigOptions {
+  /** Absolute base URL of the target service. */
+  readonly baseUrl: string;
+  /**
+   * Retry budget for the underlying fetch wrapper. Defaults to 1 — a single
+   * retry covers the `onUnauthorized` refresh-then-retry path without turning
+   * a hard failure into a retry storm.
+   */
+  readonly maxRetries?: number;
+}
+
+/**
+ * Build an Orval client config from a `HostBridge`. Wires:
+ *   - `getAuthToken` → `bridge.auth.ensureFreshToken()` (proactive refresh;
+ *     the host owns the refresh + login-redirect single-flight).
+ *   - `getHeaders` → a fresh `X-Correlation-Id` per call, plus `X-Org-Id` when
+ *     an org is selected. Per-call headers set by the caller still win in the
+ *     client's own header merge.
+ *   - `onUnauthorized` → `bridge.auth.onUnauthorized()` (host force-refresh +
+ *     redirect-on-failure).
+ *
+ * @example
+ *   configureClient(createBiomeOrvalConfig(bridge, { baseUrl: API_BASE_URL }));
+ */
+export function createBiomeOrvalConfig(
+  bridge: HostBridge,
+  opts: CreateBiomeOrvalConfigOptions,
+): BiomeOrvalConfig {
+  return {
+    baseUrl: opts.baseUrl,
+    maxRetries: opts.maxRetries ?? 1,
+    getAuthToken: () => bridge.auth.ensureFreshToken(),
+    getHeaders: async () => {
+      const headers: Record<string, string> = {
+        'X-Correlation-Id': crypto.randomUUID(),
+      };
+      const orgId = bridge.auth.getOrgId();
+      if (orgId) {
+        headers['X-Org-Id'] = orgId;
+      }
+      return headers;
+    },
+    onUnauthorized: () => bridge.auth.onUnauthorized(),
+  };
+}

package/src/lib/biome-host/host-bridge.ts

@@ -58,6 +58,28 @@ export interface HostBridgeAuth {
   getProjectId(): string | null;
   /** Returns the current actor's user id (subject), or null. */
   getUserId(): string | null;
+  /**
+   * Proactively refresh the actor token if it is within `minValiditySeconds`
+   * of expiry, then return a guaranteed-valid bearer. The refresh + any
+   * redirect-on-failure stays HOST-owned (the host owns the auth client and
+   * the single-flight login guard) — biomes only reach it through this method
+   * so an Orval client's `getAuthToken` can be wired against the SAME refresh
+   * path the host uses, instead of each biome re-implementing token freshness.
+   *
+   * @param minValiditySeconds Refresh when fewer than this many seconds of
+   *   validity remain. Defaults to a host-chosen safe window.
+   * @returns A valid bearer token string. Implementations that cannot produce
+   *   one (session expired) trigger the host login redirect and reject.
+   */
+  ensureFreshToken(minValiditySeconds?: number): Promise<string>;
+  /**
+   * Handle a 401 from a downstream API call: force-refresh the token and, if
+   * that fails, redirect to login. HOST-owned for the same reason as
+   * {@link HostBridgeAuth.ensureFreshToken} — there is ONE login-redirect
+   * single-flight guard and one refresh-dedup path in the host; biomes funnel
+   * 401 recovery through here rather than forking that logic.
+   */
+  onUnauthorized(): Promise<void>;
 }
 
 export interface HostBridgeToast {

package/src/lib/biome-host/host-sources.ts

@@ -25,6 +25,19 @@ export interface AuthSource {
   getProjectId(): string | null;
   /** Subject (user) id of the actor, or null when unauthenticated. */
   getUserId(): string | null;
+  /**
+   * Proactively refresh the token if it is within `minValiditySeconds` of
+   * expiry and return a valid bearer. Backed by the host's auth client
+   * (keycloak-js `updateToken`, …) and its single-flight login redirect.
+   * Mirrors {@link HostBridgeAuth.ensureFreshToken} — the bridge delegates
+   * straight through to this source.
+   */
+  ensureFreshToken(minValiditySeconds?: number): Promise<string>;
+  /**
+   * Force-refresh on a 401 and redirect to login on failure. Backed by the
+   * host's auth-guard. Mirrors {@link HostBridgeAuth.onUnauthorized}.
+   */
+  onUnauthorized(): Promise<void>;
 }
 
 /**

package/src/lib/biome-host/index.ts

@@ -14,6 +14,7 @@
  */
 export * from './frontend-biome';
 export * from './host-bridge';
+export * from './create-biome-orval-config';
 export * from './biome-registry';
 export * from './session-contributions';
 export * from './session-profiles';

package/src/session-kit/approvals/ApprovalButton.tsx

@@ -0,0 +1,89 @@
+/**
+ * Minimal action button used by the approval surfaces (card / sticky bar /
+ * Center). The kit carries no button primitive, so this is a small,
+ * inline-styled control matching the design's `Btn` (ghost / soft /
+ * primary, with an optional accent override for critical-tier approve).
+ *
+ * Kept inside the approvals folder because it is only the approval
+ * actions — it is NOT a general-purpose kit button.
+ */
+import type { CSSProperties, ReactElement, ReactNode } from 'react';
+
+export type ApprovalButtonVariant = 'ghost' | 'soft' | 'primary';
+export type ApprovalButtonSize = 'xs' | 'sm';
+
+export interface ApprovalButtonProps {
+  readonly variant?: ApprovalButtonVariant;
+  readonly size?: ApprovalButtonSize;
+  /** Accent for the `primary` variant background (e.g. portal/risk accent). */
+  readonly accent?: string;
+  readonly icon?: ReactNode;
+  readonly disabled?: boolean;
+  readonly onClick?: () => void;
+  readonly children: ReactNode;
+}
+
+const PAD: Record<ApprovalButtonSize, string> = {
+  xs: '3px 9px',
+  sm: '5px 11px',
+};
+
+const FONT: Record<ApprovalButtonSize, number> = { xs: 12, sm: 12.5 };
+
+export function ApprovalButton({
+  variant = 'ghost',
+  size = 'sm',
+  accent = 'hsl(var(--primary))',
+  icon,
+  disabled = false,
+  onClick,
+  children,
+}: ApprovalButtonProps): ReactElement {
+  const base: CSSProperties = {
+    display: 'inline-flex',
+    alignItems: 'center',
+    gap: 5,
+    padding: PAD[size],
+    fontSize: FONT[size],
+    fontWeight: 550,
+    borderRadius: 7,
+    cursor: disabled ? 'not-allowed' : 'pointer',
+    opacity: disabled ? 0.5 : 1,
+    whiteSpace: 'nowrap',
+    lineHeight: 1.2,
+  };
+  const variantStyle = resolveVariantStyle(variant, accent);
+  return (
+    <button
+      type="button"
+      disabled={disabled}
+      onClick={onClick}
+      style={{ ...base, ...variantStyle }}
+    >
+      {icon}
+      {children}
+    </button>
+  );
+}
+
+function resolveVariantStyle(
+  variant: ApprovalButtonVariant,
+  accent: string,
+): CSSProperties {
+  switch (variant) {
+    case 'primary':
+      return { background: accent, color: '#fff', border: '1px solid transparent' };
+    case 'soft':
+      return {
+        background: 'hsl(var(--muted))',
+        color: 'hsl(var(--ink))',
+        border: '1px solid hsl(var(--rule))',
+      };
+    case 'ghost':
+      return {
+        background: 'transparent',
+        color: 'hsl(var(--ink-2))',
+        border: '1px solid transparent',
+      };
+  }
+}