@xemahq/ui-kernel 0.1.6 → 0.1.8

package/dist/session-kit/index.js

@@ -0,0 +1,37 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/enums"), exports);
+__exportStar(require("./lib/status-dot"), exports);
+__exportStar(require("./lib/portal-accent"), exports);
+__exportStar(require("./primitives/RiskPill"), exports);
+__exportStar(require("./primitives/ScopeDot"), exports);
+__exportStar(require("./primitives/PortalGlyph"), exports);
+__exportStar(require("./primitives/Avatar"), exports);
+__exportStar(require("./primitives/Segmented"), exports);
+__exportStar(require("./display/MD"), exports);
+__exportStar(require("./display/TypingDots"), exports);
+__exportStar(require("./display/TokenMeter"), exports);
+__exportStar(require("./display/ContextHeader"), exports);
+__exportStar(require("./display/MessageTurn"), exports);
+__exportStar(require("./display/ToolStrip"), exports);
+__exportStar(require("./display/ThinkingPanel"), exports);
+__exportStar(require("./display/FileDiffCard"), exports);
+__exportStar(require("./display/TodoChecklist"), exports);
+__exportStar(require("./combobox/Combobox"), exports);
+__exportStar(require("./combobox/use-click-outside"), exports);
+__exportStar(require("./approvals"), exports);
+//# sourceMappingURL=index.js.map

package/dist/session-kit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session-kit/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAeA,8CAA4B;AAC5B,mDAAiC;AACjC,sDAAoC;AAGpC,wDAAsC;AACtC,wDAAsC;AACtC,2DAAyC;AACzC,sDAAoC;AACpC,yDAAuC;AAGvC,+CAA6B;AAC7B,uDAAqC;AACrC,uDAAqC;AACrC,0DAAwC;AACxC,wDAAsC;AACtC,sDAAoC;AACpC,0DAAwC;AACxC,yDAAuC;AACvC,0DAAwC;AAGxC,sDAAoC;AACpC,+DAA6C;AAI7C,8CAA4B"}

package/dist/session-kit/lib/enums.d.ts

@@ -0,0 +1,34 @@
+export declare enum ToolStatus {
+    Pending = "pending",
+    Done = "done",
+    Error = "error"
+}
+export declare enum SessionDotState {
+    Pending = "pending",
+    Done = "done",
+    Error = "error",
+    Narration = "narration"
+}
+export declare enum SessionDotKind {
+    Solid = "solid",
+    Hollow = "hollow"
+}
+export declare enum TodoState {
+    Todo = "todo",
+    Active = "active",
+    Done = "done"
+}
+export declare enum BiomeScope {
+    System = "system",
+    Platform = "platform",
+    Community = "community"
+}
+export declare enum SessionSkin {
+    Minimal = "minimal",
+    Functional = "functional"
+}
+export declare enum TurnRole {
+    User = "user",
+    Agent = "agent"
+}
+//# sourceMappingURL=enums.d.ts.map

package/dist/session-kit/lib/enums.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.d.ts","sourceRoot":"","sources":["../../../src/session-kit/lib/enums.ts"],"names":[],"mappings":"AAYA,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,KAAK,UAAU;CAChB;AAOD,oBAAY,eAAe;IACzB,OAAO,YAAY;IACnB,IAAI,SAAS;IACb,KAAK,UAAU;IACf,SAAS,cAAc;CACxB;AAGD,oBAAY,cAAc;IAExB,KAAK,UAAU;IAEf,MAAM,WAAW;CAClB;AAGD,oBAAY,SAAS;IACnB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,IAAI,SAAS;CACd;AAGD,oBAAY,UAAU;IACpB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,SAAS,cAAc;CACxB;AAMD,oBAAY,WAAW;IACrB,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAGD,oBAAY,QAAQ;IAClB,IAAI,SAAS;IACb,KAAK,UAAU;CAChB"}

package/dist/session-kit/lib/enums.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TurnRole = exports.SessionSkin = exports.BiomeScope = exports.TodoState = exports.SessionDotKind = exports.SessionDotState = exports.ToolStatus = void 0;
+var ToolStatus;
+(function (ToolStatus) {
+    ToolStatus["Pending"] = "pending";
+    ToolStatus["Done"] = "done";
+    ToolStatus["Error"] = "error";
+})(ToolStatus || (exports.ToolStatus = ToolStatus = {}));
+var SessionDotState;
+(function (SessionDotState) {
+    SessionDotState["Pending"] = "pending";
+    SessionDotState["Done"] = "done";
+    SessionDotState["Error"] = "error";
+    SessionDotState["Narration"] = "narration";
+})(SessionDotState || (exports.SessionDotState = SessionDotState = {}));
+var SessionDotKind;
+(function (SessionDotKind) {
+    SessionDotKind["Solid"] = "solid";
+    SessionDotKind["Hollow"] = "hollow";
+})(SessionDotKind || (exports.SessionDotKind = SessionDotKind = {}));
+var TodoState;
+(function (TodoState) {
+    TodoState["Todo"] = "todo";
+    TodoState["Active"] = "active";
+    TodoState["Done"] = "done";
+})(TodoState || (exports.TodoState = TodoState = {}));
+var BiomeScope;
+(function (BiomeScope) {
+    BiomeScope["System"] = "system";
+    BiomeScope["Platform"] = "platform";
+    BiomeScope["Community"] = "community";
+})(BiomeScope || (exports.BiomeScope = BiomeScope = {}));
+var SessionSkin;
+(function (SessionSkin) {
+    SessionSkin["Minimal"] = "minimal";
+    SessionSkin["Functional"] = "functional";
+})(SessionSkin || (exports.SessionSkin = SessionSkin = {}));
+var TurnRole;
+(function (TurnRole) {
+    TurnRole["User"] = "user";
+    TurnRole["Agent"] = "agent";
+})(TurnRole || (exports.TurnRole = TurnRole = {}));
+//# sourceMappingURL=enums.js.map

package/dist/session-kit/lib/enums.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enums.js","sourceRoot":"","sources":["../../../src/session-kit/lib/enums.ts"],"names":[],"mappings":";;;AAYA,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,iCAAmB,CAAA;IACnB,2BAAa,CAAA;IACb,6BAAe,CAAA;AACjB,CAAC,EAJW,UAAU,0BAAV,UAAU,QAIrB;AAOD,IAAY,eAKX;AALD,WAAY,eAAe;IACzB,sCAAmB,CAAA;IACnB,gCAAa,CAAA;IACb,kCAAe,CAAA;IACf,0CAAuB,CAAA;AACzB,CAAC,EALW,eAAe,+BAAf,eAAe,QAK1B;AAGD,IAAY,cAKX;AALD,WAAY,cAAc;IAExB,iCAAe,CAAA;IAEf,mCAAiB,CAAA;AACnB,CAAC,EALW,cAAc,8BAAd,cAAc,QAKzB;AAGD,IAAY,SAIX;AAJD,WAAY,SAAS;IACnB,0BAAa,CAAA;IACb,8BAAiB,CAAA;IACjB,0BAAa,CAAA;AACf,CAAC,EAJW,SAAS,yBAAT,SAAS,QAIpB;AAGD,IAAY,UAIX;AAJD,WAAY,UAAU;IACpB,+BAAiB,CAAA;IACjB,mCAAqB,CAAA;IACrB,qCAAuB,CAAA;AACzB,CAAC,EAJW,UAAU,0BAAV,UAAU,QAIrB;AAMD,IAAY,WAGX;AAHD,WAAY,WAAW;IACrB,kCAAmB,CAAA;IACnB,wCAAyB,CAAA;AAC3B,CAAC,EAHW,WAAW,2BAAX,WAAW,QAGtB;AAGD,IAAY,QAGX;AAHD,WAAY,QAAQ;IAClB,yBAAa,CAAA;IACb,2BAAe,CAAA;AACjB,CAAC,EAHW,QAAQ,wBAAR,QAAQ,QAGnB"}

package/dist/session-kit/lib/portal-accent.d.ts

@@ -0,0 +1,3 @@
+export type PortalAccentVar = `var(--${string})`;
+export declare function portalAccent(accentVar: PortalAccentVar | undefined, alpha?: number): string;
+//# sourceMappingURL=portal-accent.d.ts.map

package/dist/session-kit/lib/portal-accent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal-accent.d.ts","sourceRoot":"","sources":["../../../src/session-kit/lib/portal-accent.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,eAAe,GAAG,SAAS,MAAM,GAAG,CAAC;AAWjD,wBAAgB,YAAY,CAC1B,SAAS,EAAE,eAAe,GAAG,SAAS,EACtC,KAAK,CAAC,EAAE,MAAM,GACb,MAAM,CAGR"}

package/dist/session-kit/lib/portal-accent.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.portalAccent = portalAccent;
+const PRIMARY = '--primary';
+function portalAccent(accentVar, alpha) {
+    const inner = accentVar ?? `var(${PRIMARY})`;
+    return alpha !== undefined ? `hsl(${inner} / ${alpha})` : `hsl(${inner})`;
+}
+//# sourceMappingURL=portal-accent.js.map

package/dist/session-kit/lib/portal-accent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal-accent.js","sourceRoot":"","sources":["../../../src/session-kit/lib/portal-accent.ts"],"names":[],"mappings":";;AAuBA,oCAMC;AAfD,MAAM,OAAO,GAAG,WAAW,CAAC;AAS5B,SAAgB,YAAY,CAC1B,SAAsC,EACtC,KAAc;IAEd,MAAM,KAAK,GAAG,SAAS,IAAI,OAAO,OAAO,GAAG,CAAC;IAC7C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC;AAC5E,CAAC"}

package/dist/session-kit/lib/status-dot.d.ts

@@ -0,0 +1,10 @@
+import { SessionDotKind, SessionDotState, ToolStatus } from './enums';
+export interface SessionDotStyle {
+    readonly color: string;
+    readonly kind: SessionDotKind;
+    readonly pulsing: boolean;
+}
+export declare const SESSION_DOT_STYLE: Record<SessionDotState, SessionDotStyle>;
+export declare function dotStateForTool(status: ToolStatus): SessionDotState;
+export declare function toolStatusColor(status: ToolStatus): string;
+//# sourceMappingURL=status-dot.d.ts.map

package/dist/session-kit/lib/status-dot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-dot.d.ts","sourceRoot":"","sources":["../../../src/session-kit/lib/status-dot.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEtE,MAAM,WAAW,eAAe;IAE9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAE9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAID,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,eAAe,EAAE,eAAe,CAqBtE,CAAC;AAGF,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,eAAe,CASnE;AAGD,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAE1D"}

package/dist/session-kit/lib/status-dot.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_DOT_STYLE = void 0;
+exports.dotStateForTool = dotStateForTool;
+exports.toolStatusColor = toolStatusColor;
+const enums_1 = require("./enums");
+const DANGER = 'hsl(var(--destructive, var(--danger)))';
+exports.SESSION_DOT_STYLE = {
+    [enums_1.SessionDotState.Pending]: {
+        color: 'hsl(var(--warning))',
+        kind: enums_1.SessionDotKind.Solid,
+        pulsing: true,
+    },
+    [enums_1.SessionDotState.Done]: {
+        color: 'hsl(var(--success))',
+        kind: enums_1.SessionDotKind.Solid,
+        pulsing: false,
+    },
+    [enums_1.SessionDotState.Error]: {
+        color: DANGER,
+        kind: enums_1.SessionDotKind.Solid,
+        pulsing: false,
+    },
+    [enums_1.SessionDotState.Narration]: {
+        color: 'hsl(var(--paper-elev))',
+        kind: enums_1.SessionDotKind.Hollow,
+        pulsing: false,
+    },
+};
+function dotStateForTool(status) {
+    switch (status) {
+        case enums_1.ToolStatus.Pending:
+            return enums_1.SessionDotState.Pending;
+        case enums_1.ToolStatus.Done:
+            return enums_1.SessionDotState.Done;
+        case enums_1.ToolStatus.Error:
+            return enums_1.SessionDotState.Error;
+    }
+}
+function toolStatusColor(status) {
+    return exports.SESSION_DOT_STYLE[dotStateForTool(status)].color;
+}
+//# sourceMappingURL=status-dot.js.map

package/dist/session-kit/lib/status-dot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-dot.js","sourceRoot":"","sources":["../../../src/session-kit/lib/status-dot.ts"],"names":[],"mappings":";;;AAqDA,0CASC;AAGD,0CAEC;AAnDD,mCAAsE;AAWtE,MAAM,MAAM,GAAG,wCAAwC,CAAC;AAE3C,QAAA,iBAAiB,GAA6C;IACzE,CAAC,uBAAe,CAAC,OAAO,CAAC,EAAE;QACzB,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,sBAAc,CAAC,KAAK;QAC1B,OAAO,EAAE,IAAI;KACd;IACD,CAAC,uBAAe,CAAC,IAAI,CAAC,EAAE;QACtB,KAAK,EAAE,qBAAqB;QAC5B,IAAI,EAAE,sBAAc,CAAC,KAAK;QAC1B,OAAO,EAAE,KAAK;KACf;IACD,CAAC,uBAAe,CAAC,KAAK,CAAC,EAAE;QACvB,KAAK,EAAE,MAAM;QACb,IAAI,EAAE,sBAAc,CAAC,KAAK;QAC1B,OAAO,EAAE,KAAK;KACf;IACD,CAAC,uBAAe,CAAC,SAAS,CAAC,EAAE;QAC3B,KAAK,EAAE,wBAAwB;QAC/B,IAAI,EAAE,sBAAc,CAAC,MAAM;QAC3B,OAAO,EAAE,KAAK;KACf;CACF,CAAC;AAGF,SAAgB,eAAe,CAAC,MAAkB;IAChD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,kBAAU,CAAC,OAAO;YACrB,OAAO,uBAAe,CAAC,OAAO,CAAC;QACjC,KAAK,kBAAU,CAAC,IAAI;YAClB,OAAO,uBAAe,CAAC,IAAI,CAAC;QAC9B,KAAK,kBAAU,CAAC,KAAK;YACnB,OAAO,uBAAe,CAAC,KAAK,CAAC;IACjC,CAAC;AACH,CAAC;AAGD,SAAgB,eAAe,CAAC,MAAkB;IAChD,OAAO,yBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1D,CAAC"}

package/dist/session-kit/primitives/Avatar.d.ts

@@ -0,0 +1,10 @@
+import type { CSSProperties, ReactElement } from 'react';
+export interface AvatarProps {
+    readonly initials: string;
+    readonly size?: number;
+    readonly color?: string;
+    readonly ink?: string;
+    readonly style?: CSSProperties;
+}
+export declare function Avatar({ initials, size, color, ink, style, }: AvatarProps): ReactElement;
+//# sourceMappingURL=Avatar.d.ts.map

package/dist/session-kit/primitives/Avatar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Avatar.d.ts","sourceRoot":"","sources":["../../../src/session-kit/primitives/Avatar.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAEzD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,MAAM,CAAC,EACrB,QAAQ,EACR,IAAS,EACT,KAAkD,EAClD,GAAkD,EAClD,KAAK,GACN,EAAE,WAAW,GAAG,YAAY,CAsB5B"}

package/dist/session-kit/primitives/Avatar.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Avatar = Avatar;
+const jsx_runtime_1 = require("react/jsx-runtime");
+function Avatar({ initials, size = 26, color = 'hsl(var(--accent-2, var(--accent-tint)))', ink = 'hsl(var(--primary-ink, var(--accent-ink)))', style, }) {
+    return ((0, jsx_runtime_1.jsx)("span", { className: "mono", style: {
+            width: size,
+            height: size,
+            borderRadius: '50%',
+            flexShrink: 0,
+            display: 'grid',
+            placeItems: 'center',
+            background: color,
+            color: ink,
+            fontSize: size * 0.4,
+            fontWeight: 600,
+            letterSpacing: '-0.02em',
+            ...style,
+        }, children: initials }));
+}
+//# sourceMappingURL=Avatar.js.map

package/dist/session-kit/primitives/Avatar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Avatar.js","sourceRoot":"","sources":["../../../src/session-kit/primitives/Avatar.tsx"],"names":[],"mappings":";;AAeA,wBA4BC;;AA5BD,SAAgB,MAAM,CAAC,EACrB,QAAQ,EACR,IAAI,GAAG,EAAE,EACT,KAAK,GAAG,0CAA0C,EAClD,GAAG,GAAG,4CAA4C,EAClD,KAAK,GACO;IACZ,OAAO,CACL,iCACE,SAAS,EAAC,MAAM,EAChB,KAAK,EAAE;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,IAAI,GAAG,GAAG;YACpB,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,SAAS;YACxB,GAAG,KAAK;SACT,YAEA,QAAQ,GACJ,CACR,CAAC;AACJ,CAAC"}

package/dist/session-kit/primitives/PortalGlyph.d.ts

@@ -0,0 +1,12 @@
+import { type PortalAccentVar } from '../lib/portal-accent';
+import type { CSSProperties, ReactElement, ReactNode } from 'react';
+export interface PortalGlyphProps {
+    readonly accentVar?: PortalAccentVar;
+    readonly icon: ReactNode;
+    readonly size?: number;
+    readonly radius?: number;
+    readonly active?: boolean;
+    readonly style?: CSSProperties;
+}
+export declare function PortalGlyph({ accentVar, icon, size, radius, active, style, }: PortalGlyphProps): ReactElement;
+//# sourceMappingURL=PortalGlyph.d.ts.map

package/dist/session-kit/primitives/PortalGlyph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PortalGlyph.d.ts","sourceRoot":"","sources":["../../../src/session-kit/primitives/PortalGlyph.tsx"],"names":[],"mappings":"AAMA,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE1E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAGpE,MAAM,WAAW,gBAAgB;IAE/B,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IAErC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,WAAW,CAAC,EAC1B,SAAS,EACT,IAAI,EACJ,IAAS,EACT,MAAU,EACV,MAAc,EACd,KAAK,GACN,EAAE,gBAAgB,GAAG,YAAY,CAoBjC"}

package/dist/session-kit/primitives/PortalGlyph.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PortalGlyph = PortalGlyph;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const portal_accent_1 = require("../lib/portal-accent");
+function PortalGlyph({ accentVar, icon, size = 34, radius = 9, active = false, style, }) {
+    return ((0, jsx_runtime_1.jsx)("span", { style: {
+            width: size,
+            height: size,
+            borderRadius: radius,
+            flexShrink: 0,
+            display: 'grid',
+            placeItems: 'center',
+            background: (0, portal_accent_1.portalAccent)(accentVar, 0.13),
+            color: (0, portal_accent_1.portalAccent)(accentVar),
+            border: `1px solid ${(0, portal_accent_1.portalAccent)(accentVar, active ? 0.5 : 0.22)}`,
+            boxShadow: active ? `0 0 0 1px ${(0, portal_accent_1.portalAccent)(accentVar, 0.25)}` : 'none',
+            ...style,
+        }, children: icon }));
+}
+//# sourceMappingURL=PortalGlyph.js.map

package/dist/session-kit/primitives/PortalGlyph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PortalGlyph.js","sourceRoot":"","sources":["../../../src/session-kit/primitives/PortalGlyph.tsx"],"names":[],"mappings":";;AAuBA,kCA2BC;;AA5CD,wDAA0E;AAiB1E,SAAgB,WAAW,CAAC,EAC1B,SAAS,EACT,IAAI,EACJ,IAAI,GAAG,EAAE,EACT,MAAM,GAAG,CAAC,EACV,MAAM,GAAG,KAAK,EACd,KAAK,GACY;IACjB,OAAO,CACL,iCACE,KAAK,EAAE;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,MAAM;YACpB,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAA,4BAAY,EAAC,SAAS,EAAE,IAAI,CAAC;YACzC,KAAK,EAAE,IAAA,4BAAY,EAAC,SAAS,CAAC;YAC9B,MAAM,EAAE,aAAa,IAAA,4BAAY,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;YACnE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,IAAA,4BAAY,EAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM;YACzE,GAAG,KAAK;SACT,YAEA,IAAI,GACA,CACR,CAAC;AACJ,CAAC"}

package/dist/session-kit/primitives/RiskPill.d.ts

@@ -0,0 +1,12 @@
+import { CapabilityRiskTier } from '@xemahq/kernel-contracts/capability';
+import type { CSSProperties, ReactElement, ReactNode } from 'react';
+export { CapabilityRiskTier };
+export type RiskPillSize = 'xs' | 'sm';
+export interface RiskPillProps {
+    readonly tier: CapabilityRiskTier;
+    readonly size?: RiskPillSize;
+    readonly criticalIcon?: ReactNode;
+    readonly style?: CSSProperties;
+}
+export declare function RiskPill({ tier, size, criticalIcon, style, }: RiskPillProps): ReactElement;
+//# sourceMappingURL=RiskPill.d.ts.map

package/dist/session-kit/primitives/RiskPill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RiskPill.d.ts","sourceRoot":"","sources":["../../../src/session-kit/primitives/RiskPill.tsx"],"names":[],"mappings":"AAYA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEpE,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAsC9B,MAAM,MAAM,YAAY,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAE7B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,QAAQ,CAAC,EACvB,IAAI,EACJ,IAAW,EACX,YAAY,EACZ,KAAK,GACN,EAAE,aAAa,GAAG,YAAY,CAyB9B"}

package/dist/session-kit/primitives/RiskPill.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CapabilityRiskTier = void 0;
+exports.RiskPill = RiskPill;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const capability_1 = require("@xemahq/kernel-contracts/capability");
+Object.defineProperty(exports, "CapabilityRiskTier", { enumerable: true, get: function () { return capability_1.CapabilityRiskTier; } });
+const DANGER = 'var(--destructive, var(--danger))';
+const RISK = {
+    [capability_1.CapabilityRiskTier.Low]: {
+        label: 'Low',
+        fg: 'hsl(var(--ink-3))',
+        bg: 'hsl(var(--muted))',
+        bd: 'hsl(var(--rule))',
+    },
+    [capability_1.CapabilityRiskTier.Medium]: {
+        label: 'Medium',
+        fg: 'hsl(var(--info))',
+        bg: 'hsl(var(--info) / 0.09)',
+        bd: 'hsl(var(--info) / 0.28)',
+    },
+    [capability_1.CapabilityRiskTier.High]: {
+        label: 'High',
+        fg: 'hsl(var(--warning))',
+        bg: 'hsl(var(--warning) / 0.1)',
+        bd: 'hsl(var(--warning) / 0.3)',
+    },
+    [capability_1.CapabilityRiskTier.Critical]: {
+        label: 'Critical',
+        fg: `hsl(${DANGER})`,
+        bg: `hsl(${DANGER} / 0.09)`,
+        bd: `hsl(${DANGER} / 0.32)`,
+    },
+};
+function RiskPill({ tier, size = 'sm', criticalIcon, style, }) {
+    const r = RISK[tier];
+    return ((0, jsx_runtime_1.jsxs)("span", { className: "mono", style: {
+            display: 'inline-flex',
+            alignItems: 'center',
+            gap: 4,
+            padding: size === 'xs' ? '1px 6px' : '2px 8px',
+            fontSize: size === 'xs' ? 9.5 : 10,
+            fontWeight: 600,
+            textTransform: 'uppercase',
+            letterSpacing: '0.06em',
+            color: r.fg,
+            background: r.bg,
+            border: `1px solid ${r.bd}`,
+            borderRadius: 5,
+            ...style,
+        }, children: [tier === capability_1.CapabilityRiskTier.Critical && criticalIcon, r.label] }));
+}
+//# sourceMappingURL=RiskPill.js.map

package/dist/session-kit/primitives/RiskPill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RiskPill.js","sourceRoot":"","sources":["../../../src/session-kit/primitives/RiskPill.tsx"],"names":[],"mappings":";;;AAgEA,4BA8BC;;AAlFD,oEAAyE;AAIhE,mGAJA,+BAAkB,OAIA;AAS3B,MAAM,MAAM,GAAG,mCAAmC,CAAC;AAEnD,MAAM,IAAI,GAA0C;IAClD,CAAC,+BAAkB,CAAC,GAAG,CAAC,EAAE;QACxB,KAAK,EAAE,KAAK;QACZ,EAAE,EAAE,mBAAmB;QACvB,EAAE,EAAE,mBAAmB;QACvB,EAAE,EAAE,kBAAkB;KACvB;IACD,CAAC,+BAAkB,CAAC,MAAM,CAAC,EAAE;QAC3B,KAAK,EAAE,QAAQ;QACf,EAAE,EAAE,kBAAkB;QACtB,EAAE,EAAE,yBAAyB;QAC7B,EAAE,EAAE,yBAAyB;KAC9B;IACD,CAAC,+BAAkB,CAAC,IAAI,CAAC,EAAE;QACzB,KAAK,EAAE,MAAM;QACb,EAAE,EAAE,qBAAqB;QACzB,EAAE,EAAE,2BAA2B;QAC/B,EAAE,EAAE,2BAA2B;KAChC;IACD,CAAC,+BAAkB,CAAC,QAAQ,CAAC,EAAE;QAC7B,KAAK,EAAE,UAAU;QACjB,EAAE,EAAE,OAAO,MAAM,GAAG;QACpB,EAAE,EAAE,OAAO,MAAM,UAAU;QAC3B,EAAE,EAAE,OAAO,MAAM,UAAU;KAC5B;CACF,CAAC;AAYF,SAAgB,QAAQ,CAAC,EACvB,IAAI,EACJ,IAAI,GAAG,IAAI,EACX,YAAY,EACZ,KAAK,GACS;IACd,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,CACL,kCACE,SAAS,EAAC,MAAM,EAChB,KAAK,EAAE;YACL,OAAO,EAAE,aAAa;YACtB,UAAU,EAAE,QAAQ;YACpB,GAAG,EAAE,CAAC;YACN,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC9C,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YAClC,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,WAAW;YAC1B,aAAa,EAAE,QAAQ;YACvB,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,UAAU,EAAE,CAAC,CAAC,EAAE;YAChB,MAAM,EAAE,aAAa,CAAC,CAAC,EAAE,EAAE;YAC3B,YAAY,EAAE,CAAC;YACf,GAAG,KAAK;SACT,aAEA,IAAI,KAAK,+BAAkB,CAAC,QAAQ,IAAI,YAAY,EACpD,CAAC,CAAC,KAAK,IACH,CACR,CAAC;AACJ,CAAC"}

package/dist/session-kit/primitives/ScopeDot.d.ts

@@ -0,0 +1,9 @@
+import { BiomeScope } from '../lib/enums';
+import type { CSSProperties, ReactElement } from 'react';
+export interface ScopeDotProps {
+    readonly scope: BiomeScope;
+    readonly size?: number;
+    readonly style?: CSSProperties;
+}
+export declare function ScopeDot({ scope, size, style, }: ScopeDotProps): ReactElement;
+//# sourceMappingURL=ScopeDot.d.ts.map

package/dist/session-kit/primitives/ScopeDot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScopeDot.d.ts","sourceRoot":"","sources":["../../../src/session-kit/primitives/ScopeDot.tsx"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAczD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,QAAQ,CAAC,EACvB,KAAK,EACL,IAAQ,EACR,KAAK,GACN,EAAE,aAAa,GAAG,YAAY,CAgB9B"}

package/dist/session-kit/primitives/ScopeDot.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScopeDot = ScopeDot;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const enums_1 = require("../lib/enums");
+const SCOPE = {
+    [enums_1.BiomeScope.System]: { color: 'hsl(var(--ink-4))', label: 'System' },
+    [enums_1.BiomeScope.Platform]: { color: 'hsl(var(--primary))', label: 'Platform' },
+    [enums_1.BiomeScope.Community]: { color: 'hsl(var(--p-people))', label: 'Community' },
+};
+function ScopeDot({ scope, size = 7, style, }) {
+    const s = SCOPE[scope];
+    return ((0, jsx_runtime_1.jsx)("span", { title: s.label, style: {
+            width: size,
+            height: size,
+            borderRadius: '50%',
+            background: s.color,
+            flexShrink: 0,
+            display: 'inline-block',
+            ...style,
+        } }));
+}
+//# sourceMappingURL=ScopeDot.js.map

package/dist/session-kit/primitives/ScopeDot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ScopeDot.js","sourceRoot":"","sources":["../../../src/session-kit/primitives/ScopeDot.tsx"],"names":[],"mappings":";;AA0BA,4BAoBC;;AA1CD,wCAA0C;AAU1C,MAAM,KAAK,GAAmC;IAC5C,CAAC,kBAAU,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,QAAQ,EAAE;IACpE,CAAC,kBAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,UAAU,EAAE;IAC1E,CAAC,kBAAU,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,WAAW,EAAE;CAC9E,CAAC;AAQF,SAAgB,QAAQ,CAAC,EACvB,KAAK,EACL,IAAI,GAAG,CAAC,EACR,KAAK,GACS;IACd,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,CACL,iCACE,KAAK,EAAE,CAAC,CAAC,KAAK,EACd,KAAK,EAAE;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,CAAC,CAAC,KAAK;YACnB,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,cAAc;YACvB,GAAG,KAAK;SACT,GACD,CACH,CAAC;AACJ,CAAC"}

package/dist/session-kit/primitives/Segmented.d.ts

@@ -0,0 +1,16 @@
+import type { CSSProperties, ReactElement, ReactNode } from 'react';
+export interface SegmentedOption<V extends string> {
+    readonly value: V;
+    readonly label: ReactNode;
+    readonly icon?: ReactNode;
+}
+export type SegmentedSize = 'sm' | 'md';
+export interface SegmentedProps<V extends string> {
+    readonly options: ReadonlyArray<SegmentedOption<V>>;
+    readonly value: V;
+    readonly onChange: (value: V) => void;
+    readonly size?: SegmentedSize;
+    readonly style?: CSSProperties;
+}
+export declare function Segmented<V extends string>({ options, value, onChange, size, style, }: SegmentedProps<V>): ReactElement;
+//# sourceMappingURL=Segmented.d.ts.map

package/dist/session-kit/primitives/Segmented.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Segmented.d.ts","sourceRoot":"","sources":["../../../src/session-kit/primitives/Segmented.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEpE,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,MAAM;IAC/C,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAE1B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;CAC3B;AAED,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,MAAM,WAAW,cAAc,CAAC,CAAC,SAAS,MAAM;IAC9C,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,SAAS,CAAC,CAAC,SAAS,MAAM,EAAE,EAC1C,OAAO,EACP,KAAK,EACL,QAAQ,EACR,IAAW,EACX,KAAK,GACN,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,YAAY,CAyClC"}

package/dist/session-kit/primitives/Segmented.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Segmented = Segmented;
+const jsx_runtime_1 = require("react/jsx-runtime");
+function Segmented({ options, value, onChange, size = 'sm', style, }) {
+    return ((0, jsx_runtime_1.jsx)("div", { style: {
+            display: 'inline-flex',
+            padding: 2,
+            gap: 2,
+            background: 'hsl(var(--paper-sunk))',
+            border: '1px solid hsl(var(--rule))',
+            borderRadius: 8,
+            ...style,
+        }, children: options.map((option) => {
+            const on = option.value === value;
+            return ((0, jsx_runtime_1.jsxs)("button", { type: "button", onClick: () => onChange(option.value), style: {
+                    display: 'inline-flex',
+                    alignItems: 'center',
+                    gap: 5,
+                    padding: size === 'sm' ? '4px 10px' : '6px 12px',
+                    fontSize: size === 'sm' ? 12 : 13,
+                    fontWeight: on ? 600 : 450,
+                    borderRadius: 6,
+                    color: on ? 'hsl(var(--ink))' : 'hsl(var(--ink-3))',
+                    background: on ? 'hsl(var(--paper-elev))' : 'transparent',
+                    boxShadow: on ? 'var(--shadow-2, var(--shadow-1))' : 'none',
+                    transition: 'background 140ms ease, color 140ms ease, box-shadow 140ms ease',
+                }, children: [option.icon, option.label] }, option.value));
+        }) }));
+}
+//# sourceMappingURL=Segmented.js.map

package/dist/session-kit/primitives/Segmented.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Segmented.js","sourceRoot":"","sources":["../../../src/session-kit/primitives/Segmented.tsx"],"names":[],"mappings":";;AAuBA,8BA+CC;;AA/CD,SAAgB,SAAS,CAAmB,EAC1C,OAAO,EACP,KAAK,EACL,QAAQ,EACR,IAAI,GAAG,IAAI,EACX,KAAK,GACa;IAClB,OAAO,CACL,gCACE,KAAK,EAAE;YACL,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,CAAC;YACV,GAAG,EAAE,CAAC;YACN,UAAU,EAAE,wBAAwB;YACpC,MAAM,EAAE,4BAA4B;YACpC,YAAY,EAAE,CAAC;YACf,GAAG,KAAK;SACT,YAEA,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACtB,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC;YAClC,OAAO,CACL,oCAEE,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EACrC,KAAK,EAAE;oBACL,OAAO,EAAE,aAAa;oBACtB,UAAU,EAAE,QAAQ;oBACpB,GAAG,EAAE,CAAC;oBACN,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;oBAChD,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;oBACjC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;oBAC1B,YAAY,EAAE,CAAC;oBACf,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB;oBACnD,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,aAAa;oBACzD,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,MAAM;oBAC3D,UAAU,EAAE,gEAAgE;iBAC7E,aAEA,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,KAAK,KAlBR,MAAM,CAAC,KAAK,CAmBV,CACV,CAAC;QACJ,CAAC,CAAC,GACE,CACP,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/ui-kernel",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Host-framework-agnostic UI kernel for the Xema OS. Defines the SystemBus orchestration contract (capability.invoke, cross-biome intents, command palette, xema:// deeplinks, window manager) AND the biome-host contract surface (FrontendBiome/FrontendBiomeFactory, HostBridge, the singleton biomeRegistry, session contributions) that every frontend biome composes against. No Vite, Next.js, or React-Router — React itself IS allowed as the shared component model (the contracts traffic in ReactNode/ComponentType and a React context). Concrete host adapters (router/auth/toast wiring) live in separate packages that consume this kernel. The SystemBus is pure orchestration: it never authorizes, the backend capability-router enforces all policy.",
   "keywords": [
     "xema",
@@ -35,7 +35,7 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@xemahq/kernel-contracts": "^0.2.0",
+    "@xemahq/kernel-contracts": "^0.8.0",
     "clsx": "^2.1.1",
     "tailwind-merge": "^2.5.4",
     "@xemahq/registry": "0.1.3"

package/src/lib/biome-host/create-biome-orval-config.ts

@@ -0,0 +1,76 @@
+/**
+ * Shared Orval-client wiring for frontend biomes.
+ *
+ * Every biome that calls a platform API through an Orval-generated client must
+ * configure that client with the SAME auth/header/401 behavior the host shell
+ * uses for its own clients. Hand-copying a `configureOrgDbClient`-style helper
+ * into each biome (as `org-databases` did across three hook files) duplicates
+ * the correlation-id + org-header + token logic and lets it drift from the
+ * host. This factory centralizes it: a biome builds one config from its
+ * `HostBridge` and feeds it straight into the client's `configureClient(...)`.
+ *
+ * Auth/refresh/redirect stay HOST-owned — this only READS the bridge's
+ * host-implemented methods (`getActorToken`, `ensureFreshToken`,
+ * `onUnauthorized`, `getOrgId`). It owns no auth state of its own.
+ */
+import type { HostBridge } from './host-bridge';
+
+/**
+ * The Orval client config shape every generated `configureClient(...)` accepts.
+ * Kept structural (not imported from a client package) so the kernel stays free
+ * of any concrete service-client dependency — biomes pass the result straight
+ * into their own client's `configureClient`, which validates the shape.
+ */
+export interface BiomeOrvalConfig {
+  readonly baseUrl: string;
+  readonly maxRetries: number;
+  getAuthToken(): Promise<string>;
+  getHeaders(): Promise<Record<string, string>>;
+  onUnauthorized(): Promise<void>;
+}
+
+export interface CreateBiomeOrvalConfigOptions {
+  /** Absolute base URL of the target service. */
+  readonly baseUrl: string;
+  /**
+   * Retry budget for the underlying fetch wrapper. Defaults to 1 — a single
+   * retry covers the `onUnauthorized` refresh-then-retry path without turning
+   * a hard failure into a retry storm.
+   */
+  readonly maxRetries?: number;
+}
+
+/**
+ * Build an Orval client config from a `HostBridge`. Wires:
+ *   - `getAuthToken` → `bridge.auth.ensureFreshToken()` (proactive refresh;
+ *     the host owns the refresh + login-redirect single-flight).
+ *   - `getHeaders` → a fresh `X-Correlation-Id` per call, plus `X-Org-Id` when
+ *     an org is selected. Per-call headers set by the caller still win in the
+ *     client's own header merge.
+ *   - `onUnauthorized` → `bridge.auth.onUnauthorized()` (host force-refresh +
+ *     redirect-on-failure).
+ *
+ * @example
+ *   configureClient(createBiomeOrvalConfig(bridge, { baseUrl: API_BASE_URL }));
+ */
+export function createBiomeOrvalConfig(
+  bridge: HostBridge,
+  opts: CreateBiomeOrvalConfigOptions,
+): BiomeOrvalConfig {
+  return {
+    baseUrl: opts.baseUrl,
+    maxRetries: opts.maxRetries ?? 1,
+    getAuthToken: () => bridge.auth.ensureFreshToken(),
+    getHeaders: async () => {
+      const headers: Record<string, string> = {
+        'X-Correlation-Id': crypto.randomUUID(),
+      };
+      const orgId = bridge.auth.getOrgId();
+      if (orgId) {
+        headers['X-Org-Id'] = orgId;
+      }
+      return headers;
+    },
+    onUnauthorized: () => bridge.auth.onUnauthorized(),
+  };
+}

package/src/lib/biome-host/frontend-biome.ts

@@ -33,13 +33,33 @@ export interface NavItemContribution {
   readonly weight?: number;
 }
 
+/**
+ * Access tier required to render a route. The host resolver enforces it
+ * declaratively — nav-hide is NOT a security boundary, a deeplink bypasses it.
+ * Precedence (least → most privileged): `member` < `org-admin` <
+ * `platform-admin`. Defaults to `member` when a route omits the field.
+ */
+export type RouteAccess = 'member' | 'org-admin' | 'platform-admin';
+
 export interface RouteContribution {
   /** React-router path. May include params. */
   readonly path: string;
   /** Element factory — host calls it inside the route tree. */
   readonly element: () => ReactNode;
-  /** Whether the route is project-scoped (mounted under /projects/:projectId). */
-  readonly projectScoped?: boolean;
+  /**
+   * Whether the route is project-scoped (mounted under /projects/:projectId)
+   * or org-scoped (mounted at the org root). REQUIRED — the host nav resolver
+   * partitions the rail strictly by this flag and drops any nav item whose
+   * route can't be matched (fail-loud). A silent default would re-introduce the
+   * "project pages showing at org level" class of bug, so every route MUST
+   * declare its scope explicitly.
+   */
+  readonly projectScoped: boolean;
+  /**
+   * Access tier required to render this route. The host resolver enforces it
+   * declaratively. Defaults to `'member'` when omitted.
+   */
+  readonly access?: RouteAccess;
 }
 
 /**