sh3-core 0.13.1 → 0.13.2

package/dist/BrandSlot.svelte

@@ -1,19 +1,24 @@
 <script lang="ts">
   /*
-   * BrandSlot — top-bar context indicator. Three states:
-   *   - 'brand'      → renders <span>SH3</span>
-   *   - 'app'        → renders <span>{label}</span>
-   *   - 'breadcrumb' → renders SH3 + separator + <button>{label}</button>
+   * BrandSlot — top-bar context indicator. Mode resolves from the
+   * (activeAppId, breadcrumbAppId, activeProjectId) triple:
    *
-   * State derives from (activeAppId, breadcrumbAppId). Click on the
-   * breadcrumb's app button re-launches the app (existing handler).
+   *   brand              → SH3
+   *   app                → [App Name]
+   *   breadcrumb         → SH3 › [App Name]    (clickable app)
+   *   project-home       → SH3 › [Project]     (clickable SH3 → exit project)
+   *   project-app        → [Project] › [App]   (no SH3 — use home button to exit)
+   *   project-breadcrumb → SH3 › [Project] › [App]  (clickable SH3, project, app)
    */
   import { getLiveDispatcherState } from './actions/state.svelte';
-  import { launchApp } from './apps/lifecycle';
+  import { launchApp, returnToHome } from './apps/lifecycle';
   import { getBreadcrumbAppId, getRegisteredApp } from './apps/registry.svelte';
+  import { sessionState, setActiveProjectId } from './projects/session-state.svelte';
+  import { projectsState } from './projects-shard/projectsShard.svelte';
 
   const activeAppId = $derived(getLiveDispatcherState().activeAppId);
   const breadcrumbId = $derived(getBreadcrumbAppId());
+  const projectId = $derived(sessionState.activeProjectId);
 
   const activeLabel = $derived(
     activeAppId ? getRegisteredApp(activeAppId)?.manifest.label ?? activeAppId : null,
@@ -21,16 +26,34 @@
   const breadcrumbLabel = $derived(
     breadcrumbId ? getRegisteredApp(breadcrumbId)?.manifest.label ?? breadcrumbId : null,
   );
+  const projectLabel = $derived(
+    projectId ? projectsState.projects.find((p) => p.id === projectId)?.name ?? projectId : null,
+  );
+
+  type Mode = 'brand' | 'app' | 'breadcrumb' | 'project-home' | 'project-app' | 'project-breadcrumb';
 
-  const mode: 'brand' | 'app' | 'breadcrumb' = $derived.by(() => {
+  const mode: Mode = $derived.by(() => {
+    if (projectId) {
+      if (activeAppId) return 'project-app';
+      if (breadcrumbId) return 'project-breadcrumb';
+      return 'project-home';
+    }
     if (activeAppId) return 'app';
     if (breadcrumbId) return 'breadcrumb';
     return 'brand';
   });
 
-  function reopen() {
+  function reopenApp() {
     if (breadcrumbId) void launchApp(breadcrumbId);
   }
+
+  function exitProject() {
+    setActiveProjectId(null);
+  }
+
+  function reenterProjectHome() {
+    if (activeAppId) void returnToHome();
+  }
 </script>
 
 <div class="sh3-brand-slot">
@@ -38,12 +61,24 @@
     <span class="sh3-brand">SH3</span>
   {:else if mode === 'app'}
     <span class="sh3-brand sh3-brand-app">{activeLabel}</span>
-  {:else}
+  {:else if mode === 'breadcrumb'}
     <span class="sh3-brand">SH3</span>
     <span class="sh3-brand-sep" aria-hidden="true">›</span>
-    <button type="button" class="sh3-brand-crumb" onclick={reopen}>
-      {breadcrumbLabel}
-    </button>
+    <button type="button" class="sh3-brand-crumb" onclick={reopenApp}>{breadcrumbLabel}</button>
+  {:else if mode === 'project-home'}
+    <button type="button" class="sh3-brand sh3-brand-clickable" onclick={exitProject} title="Exit project">SH3</button>
+    <span class="sh3-brand-sep" aria-hidden="true">›</span>
+    <span class="sh3-brand-project">{projectLabel}</span>
+  {:else if mode === 'project-app'}
+    <span class="sh3-brand sh3-brand-project">{projectLabel}</span>
+    <span class="sh3-brand-sep" aria-hidden="true">›</span>
+    <span class="sh3-brand sh3-brand-app">{activeLabel}</span>
+  {:else if mode === 'project-breadcrumb'}
+    <button type="button" class="sh3-brand sh3-brand-clickable" onclick={exitProject} title="Exit project">SH3</button>
+    <span class="sh3-brand-sep" aria-hidden="true">›</span>
+    <button type="button" class="sh3-brand-crumb" onclick={reenterProjectHome}>{projectLabel}</button>
+    <span class="sh3-brand-sep" aria-hidden="true">›</span>
+    <button type="button" class="sh3-brand-crumb" onclick={reopenApp}>{breadcrumbLabel}</button>
   {/if}
 </div>
 
@@ -61,6 +96,9 @@
   .sh3-brand-app {
     color: var(--shell-fg);
   }
+  .sh3-brand-project {
+    color: var(--shell-fg);
+  }
   .sh3-brand-sep {
     color: var(--shell-fg-muted);
     margin: 0 4px;
@@ -77,4 +115,15 @@
   .sh3-brand-crumb:hover {
     background: var(--shell-bg-elevated);
   }
+  .sh3-brand-clickable {
+    background: transparent;
+    border: 0;
+    font: inherit;
+    cursor: pointer;
+    padding: 2px 6px;
+    border-radius: var(--shell-radius-sm, 3px);
+  }
+  .sh3-brand-clickable:hover {
+    background: var(--shell-bg-elevated);
+  }
 </style>

package/dist/__test__/setup-dom.js

@@ -1,4 +1,9 @@
 import '@testing-library/jest-dom/vitest';
+import { afterEach } from 'vitest';
+import { cleanup } from '@testing-library/svelte';
+// @testing-library/svelte v5 only auto-registers cleanup when vitest
+// globals are enabled. We use globals: false, so wire it manually.
+afterEach(() => cleanup());
 /**
  * happy-dom creates per-window Comment subclasses (via WindowContextClassExtender)
  * but actually instantiates nodes from the base CommentImplementation class. This

package/dist/api.d.ts

@@ -55,6 +55,7 @@ export declare const FRAMEWORK_SHARD_IDS: readonly string[];
 export { setTokenOverrides, clearTokenOverrides, getTokenOverrides, } from './theme';
 export { default as Button } from './primitives/Button.svelte';
 export { provideIcons, getIconSprite, type ButtonVariant } from './primitives/icon-context';
+export { default as Collapsible } from './primitives/Collapsible.svelte';
 export { default as Field } from './primitives/widgets/Field.svelte';
 export { default as Textarea } from './primitives/widgets/Textarea.svelte';
 export { default as NumberInput } from './primitives/widgets/NumberInput.svelte';
@@ -69,3 +70,5 @@ export { default as FilePicker } from './primitives/widgets/FilePicker.svelte';
 export type { FilePickerValue } from './primitives/widgets/FilePicker';
 export { default as Select } from './primitives/widgets/Select.svelte';
 export type { SelectOption } from './primitives/widgets/Select';
+export { default as AppPicker } from './primitives/widgets/AppPicker.svelte';
+export { default as UserPicker } from './primitives/widgets/UserPicker.svelte';

package/dist/api.js

@@ -73,6 +73,7 @@ export { setTokenOverrides, clearTokenOverrides, getTokenOverrides, } from './th
 // `import { Button } from 'sh3-core'` against the runtime shim in loader.ts.
 export { default as Button } from './primitives/Button.svelte';
 export { provideIcons, getIconSprite } from './primitives/icon-context';
+export { default as Collapsible } from './primitives/Collapsible.svelte';
 // Controllable widget primitives (ADR-022).
 export { default as Field } from './primitives/widgets/Field.svelte';
 export { default as Textarea } from './primitives/widgets/Textarea.svelte';
@@ -85,3 +86,5 @@ export { default as SliderGroup } from './primitives/widgets/SliderGroup.svelte'
 export { default as ColorSwatch } from './primitives/widgets/ColorSwatch.svelte';
 export { default as FilePicker } from './primitives/widgets/FilePicker.svelte';
 export { default as Select } from './primitives/widgets/Select.svelte';
+export { default as AppPicker } from './primitives/widgets/AppPicker.svelte';
+export { default as UserPicker } from './primitives/widgets/UserPicker.svelte';

package/dist/apps/lifecycle.js

@@ -22,6 +22,8 @@ import { clearSelectionUnconditional } from '../actions/selection.svelte';
 import { loadUserBindings } from '../actions/bindings-store';
 import { toastManager } from '../overlays/toast';
 import { clearAppNavEntries } from '../navigation/back-stack';
+import { getActiveScopeId } from '../documents/config';
+import { sessionState } from '../projects/session-state.svelte';
 // ---------- last-active-app user zone ------------------------------------
 /**
  * Framework-reserved user-zone slot storing which app to boot into on
@@ -54,13 +56,19 @@ export function clearLastApp() {
 }
 // ---------- app-context state factories ----------------------------------
 const appContexts = new Map();
-function getOrCreateAppContext(appId) {
+function resolveLaunchScope() {
+    var _a;
+    return (_a = sessionState.activeProjectId) !== null && _a !== void 0 ? _a : getActiveScopeId();
+}
+function getOrCreateAppContext(appId, scopeId) {
     var _a;
     let ctx = appContexts.get(appId);
     if (!ctx) {
         const app = getRegisteredApp(appId);
+        const scope = scopeId !== null && scopeId !== void 0 ? scopeId : resolveLaunchScope();
         ctx = {
-            state: (schema) => createStateZones(`__app__:${appId}`, schema),
+            scopeId: scope,
+            state: (schema) => createStateZones(`__app__:${appId}:scope:${scope}`, schema),
             zones: ((_a = app === null || app === void 0 ? void 0 : app.manifest.permissions) === null || _a === void 0 ? void 0 : _a.includes(PERMISSION_STATE_MANAGE))
                 ? createZoneManager()
                 : undefined,

package/dist/apps/types.d.ts

@@ -82,10 +82,17 @@ export interface AppManifest {
  */
 export interface AppContext {
     /**
-     * App-scoped state zones. The shardId underneath is the app id, so
-     * `state({ workspace: { x: 0 } }).workspace.x = 1` persists to
-     * `sh3:workspace:<appId>` with no collision risk against any shard
-     * of the same name.
+     * The scope (personal or project) this app instance is bound to for its
+     * lifetime. Set at launch from `session.activeProjectId`, falling back to
+     * the user's personal scope. The app's document handles are bound to this
+     * scope and cannot reach across scopes — exiting a scope unloads the app.
+     */
+    scopeId: string;
+    /**
+     * App-scoped state zones. The shardId underneath is the app id plus the
+     * scope, so `state({ workspace: { x: 0 } }).workspace.x = 1` persists to
+     * `sh3:workspace:__app__:<appId>:scope:<scopeId>` with no collision risk
+     * against any shard of the same name and no leakage between scopes.
      */
     state<T extends ZoneSchema>(schema: T): StateZones<T>;
     /**

package/dist/apps/workspace-rekey.d.ts

@@ -0,0 +1 @@
+export declare function migrateLegacyWorkspaceKeys(personalScopeId: string): void;

package/dist/apps/workspace-rekey.js

@@ -0,0 +1,35 @@
+/*
+ * Workspace state-zone key migration.
+ *
+ * Per ADR-002 amendment (2026-05-04), the workspace zone is keyed by
+ * `(scopeId, appId)`. Pre-existing localStorage entries written under
+ * the old `sh3:workspace:__app__:<appId>` prefix are rewritten to
+ * `sh3:workspace:__app__:<appId>:scope:<personalScopeId>` on first
+ * boot after upgrade. Idempotent — re-running on already-migrated
+ * entries is a no-op.
+ *
+ * Only entries whose shardId starts with the framework `__app__:`
+ * marker are migrated; bare shard keys are left alone.
+ */
+const APP_PREFIX = 'sh3:workspace:__app__:';
+const SCOPE_MARKER = ':scope:';
+export function migrateLegacyWorkspaceKeys(personalScopeId) {
+    if (typeof localStorage === 'undefined')
+        return;
+    const toMove = [];
+    for (let i = 0; i < localStorage.length; i++) {
+        const key = localStorage.key(i);
+        if (!key || !key.startsWith(APP_PREFIX))
+            continue;
+        if (key.includes(SCOPE_MARKER))
+            continue;
+        toMove.push([key, `${key}${SCOPE_MARKER}${personalScopeId}`]);
+    }
+    for (const [oldKey, newKey] of toMove) {
+        const value = localStorage.getItem(oldKey);
+        if (value !== null) {
+            localStorage.setItem(newKey, value);
+            localStorage.removeItem(oldKey);
+        }
+    }
+}

package/dist/apps/workspace-rekey.test.js

@@ -0,0 +1,23 @@
+import { describe, it, expect, beforeEach } from 'vitest';
+import { migrateLegacyWorkspaceKeys } from './workspace-rekey';
+describe('migrateLegacyWorkspaceKeys', () => {
+    beforeEach(() => localStorage.clear());
+    it('rewrites legacy app keys to scope-suffixed keys', () => {
+        localStorage.setItem('sh3:workspace:__app__:notes', JSON.stringify({ x: 1 }));
+        localStorage.setItem('sh3:workspace:__app__:files', JSON.stringify({ y: 2 }));
+        migrateLegacyWorkspaceKeys('user-1');
+        expect(localStorage.getItem('sh3:workspace:__app__:notes')).toBeNull();
+        expect(localStorage.getItem('sh3:workspace:__app__:notes:scope:user-1')).toBe(JSON.stringify({ x: 1 }));
+        expect(localStorage.getItem('sh3:workspace:__app__:files:scope:user-1')).toBe(JSON.stringify({ y: 2 }));
+    });
+    it('is idempotent', () => {
+        localStorage.setItem('sh3:workspace:__app__:notes:scope:user-1', JSON.stringify({ x: 1 }));
+        migrateLegacyWorkspaceKeys('user-1');
+        expect(localStorage.getItem('sh3:workspace:__app__:notes:scope:user-1')).toBe(JSON.stringify({ x: 1 }));
+    });
+    it('does not touch non-app workspace keys', () => {
+        localStorage.setItem('sh3:workspace:my-shard', JSON.stringify({ z: 3 }));
+        migrateLegacyWorkspaceKeys('user-1');
+        expect(localStorage.getItem('sh3:workspace:my-shard')).toBe(JSON.stringify({ z: 3 }));
+    });
+});

package/dist/auth/admin-users.svelte.d.ts

@@ -0,0 +1,9 @@
+import type { AuthUser } from './types';
+export declare const usersAdminState: {
+    users: AuthUser[];
+    loading: boolean;
+    error: string | null;
+};
+export declare function refreshAdminUsers(): Promise<void>;
+/** Test-only reset. Clears state and any in-flight promise. */
+export declare function __resetAdminUsersForTest(): void;

package/dist/auth/admin-users.svelte.js

@@ -0,0 +1,42 @@
+/*
+ * Shared admin-users cache.
+ *
+ * Wraps a single GET /api/admin/users behind a $state slot so multiple
+ * admin-form components (e.g., UserPicker instances inside ProjectManage,
+ * a future invite-user dialog, etc.) share one fetch without prop-drilling
+ * the user list. Concurrent calls reuse the in-flight promise; subsequent
+ * calls after completion fetch fresh data.
+ */
+export const usersAdminState = $state({ users: [], loading: false, error: null });
+let inflight = null;
+export function refreshAdminUsers() {
+    if (inflight)
+        return inflight;
+    usersAdminState.loading = true;
+    usersAdminState.error = null;
+    inflight = (async () => {
+        try {
+            const res = await fetch('/api/admin/users', { credentials: 'include' });
+            if (!res.ok) {
+                usersAdminState.error = `GET /api/admin/users failed: ${res.status}`;
+                return;
+            }
+            usersAdminState.users = (await res.json());
+        }
+        catch (e) {
+            usersAdminState.error = e.message;
+        }
+        finally {
+            usersAdminState.loading = false;
+            inflight = null;
+        }
+    })();
+    return inflight;
+}
+/** Test-only reset. Clears state and any in-flight promise. */
+export function __resetAdminUsersForTest() {
+    usersAdminState.users = [];
+    usersAdminState.loading = false;
+    usersAdminState.error = null;
+    inflight = null;
+}

package/dist/auth/admin-users.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/auth/admin-users.test.js

@@ -0,0 +1,52 @@
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+import { usersAdminState, refreshAdminUsers, __resetAdminUsersForTest, } from './admin-users.svelte';
+beforeEach(() => {
+    __resetAdminUsersForTest();
+    vi.stubGlobal('fetch', vi.fn());
+});
+describe('refreshAdminUsers', () => {
+    it('GETs /api/admin/users and populates the state', async () => {
+        globalThis.fetch.mockResolvedValue({
+            ok: true,
+            json: async () => [
+                { id: 'u-1', username: 'alice', displayName: 'Alice', role: 'user', createdAt: '', updatedAt: '' },
+                { id: 'u-2', username: 'bob', displayName: 'Bob', role: 'admin', createdAt: '', updatedAt: '' },
+            ],
+        });
+        await refreshAdminUsers();
+        expect(globalThis.fetch).toHaveBeenCalledWith('/api/admin/users', expect.objectContaining({ credentials: 'include' }));
+        expect(usersAdminState.users).toHaveLength(2);
+        expect(usersAdminState.users[0].username).toBe('alice');
+        expect(usersAdminState.loading).toBe(false);
+        expect(usersAdminState.error).toBeNull();
+    });
+    it('sets error and clears loading on non-ok response', async () => {
+        globalThis.fetch.mockResolvedValue({ ok: false, status: 403 });
+        await refreshAdminUsers();
+        expect(usersAdminState.users).toEqual([]);
+        expect(usersAdminState.loading).toBe(false);
+        expect(usersAdminState.error).toMatch(/403/);
+    });
+    it('sets error and clears loading on network throw', async () => {
+        globalThis.fetch.mockRejectedValue(new Error('network down'));
+        await refreshAdminUsers();
+        expect(usersAdminState.error).toBe('network down');
+        expect(usersAdminState.loading).toBe(false);
+    });
+    it('concurrent calls share one in-flight promise', async () => {
+        let resolveFetch = null;
+        globalThis.fetch.mockImplementation(() => new Promise((res) => { resolveFetch = res; }));
+        const a = refreshAdminUsers();
+        const b = refreshAdminUsers();
+        expect(globalThis.fetch).toHaveBeenCalledTimes(1);
+        resolveFetch({ ok: true, json: async () => [] });
+        await Promise.all([a, b]);
+        expect(globalThis.fetch).toHaveBeenCalledTimes(1);
+    });
+    it('a follow-up call after completion fetches again', async () => {
+        globalThis.fetch.mockResolvedValue({ ok: true, json: async () => [] });
+        await refreshAdminUsers();
+        await refreshAdminUsers();
+        expect(globalThis.fetch).toHaveBeenCalledTimes(2);
+    });
+});

package/dist/createShell.js

@@ -12,7 +12,7 @@ import { registerShard, registerApp, bootstrap, __setBackend, setLocalOwner, } f
 import { resolvePlatform } from './platform/index';
 import { hydrateTokenOverrides } from './theme';
 import { __setEnvServerUrl } from './env/index';
-import { __setTenantId } from './documents/config';
+import { __setActiveScope } from './documents/config';
 import { initFromBoot } from './auth/index';
 import SignInWall from './auth/SignInWall.svelte';
 import { loadBundleModule } from './registry/loader';
@@ -54,13 +54,13 @@ export async function createShell(config) {
     }
     // 4. Auth decision point
     if (platform.localOwner) {
-        // Local-owner (Tauri/dev): no auth, no sign-in, tenant is 'local'.
+        // Local-owner (Tauri/dev): no auth, no sign-in, scope is 'local'.
         // setLocalOwner() already called above — admin is assumed.
-        __setTenantId('local');
+        __setActiveScope('local');
     }
     else if (bootConfig) {
         initFromBoot(sUrl, bootConfig);
-        __setTenantId(bootConfig.tenantId);
+        __setActiveScope(bootConfig.tenantId);
         const { auth, session } = bootConfig;
         // Hard gate: no session, auth required, no guest allowed → sign-in wall
         if (!session && auth.required && !auth.guestAllowed) {
@@ -70,7 +70,7 @@ export async function createShell(config) {
             if (res.ok) {
                 bootConfig = await res.json();
                 initFromBoot(sUrl, bootConfig);
-                __setTenantId(bootConfig.tenantId);
+                __setActiveScope(bootConfig.tenantId);
             }
         }
     }

package/dist/documents/config.d.ts

@@ -1,7 +1,11 @@
 import type { DocumentBackend } from './types';
+export declare function getActiveScopeId(): string;
+/** @deprecated use getActiveScopeId — kept until callers migrate. */
 export declare function getTenantId(): string;
 export declare function getDocumentBackend(): DocumentBackend;
-/** Host-only. Set the tenant id before bootstrap(). */
+/** Host-only. Set the active scope id before bootstrap(). */
+export declare function __setActiveScope(id: string): void;
+/** @deprecated use __setActiveScope — kept until callers migrate. */
 export declare function __setTenantId(id: string): void;
 /** Host-only. Swap the document backend before bootstrap(). */
 export declare function __setDocumentBackend(b: DocumentBackend): void;

package/dist/documents/config.js

@@ -2,24 +2,32 @@
  * Document zone configuration — module-level singletons.
  *
  * Mirrors the __setBackend pattern in state/zones.svelte.ts. The host
- * calls __setTenantId and __setDocumentBackend before bootstrap() to
- * configure multi-tenancy and swap backends (e.g. Tauri FS).
+ * calls __setActiveScope and __setDocumentBackend before bootstrap() to
+ * configure multi-scope routing and swap backends (e.g. Tauri FS).
  *
- * Defaults: tenantId='local' (single-user self-hosted), backend=IndexedDB.
+ * Defaults: scopeId='local' (single-user self-hosted), backend=IndexedDB.
  */
 import { IndexedDBDocumentBackend } from './backends';
-const DEFAULT_TENANT = 'local';
-let tenantId = DEFAULT_TENANT;
+const DEFAULT_SCOPE = 'local';
+let scopeId = DEFAULT_SCOPE;
 let backend = new IndexedDBDocumentBackend();
+export function getActiveScopeId() {
+    return scopeId;
+}
+/** @deprecated use getActiveScopeId — kept until callers migrate. */
 export function getTenantId() {
-    return tenantId;
+    return scopeId;
 }
 export function getDocumentBackend() {
     return backend;
 }
-/** Host-only. Set the tenant id before bootstrap(). */
+/** Host-only. Set the active scope id before bootstrap(). */
+export function __setActiveScope(id) {
+    scopeId = id;
+}
+/** @deprecated use __setActiveScope — kept until callers migrate. */
 export function __setTenantId(id) {
-    tenantId = id;
+    __setActiveScope(id);
 }
 /** Host-only. Swap the document backend before bootstrap(). */
 export function __setDocumentBackend(b) {

package/dist/documents/index.d.ts

@@ -3,6 +3,6 @@ export { MemoryDocumentBackend, IndexedDBDocumentBackend } from './backends';
 export { HttpDocumentBackend } from './http-backend';
 export { createDocumentHandle } from './handle';
 export { documentChanges } from './notifications';
-export { getTenantId, getDocumentBackend, __setTenantId, __setDocumentBackend, } from './config';
+export { getActiveScopeId, getTenantId, getDocumentBackend, __setActiveScope, __setTenantId, __setDocumentBackend, } from './config';
 export type { SyncPolicy, SyncPolicyRule, DocStatus, ConflictFile, ConflictBranch, } from './sync-types';
 export { PERMISSION_SYNC_PEER, PERMISSION_SYNC_POLICY, } from './sync-types';

package/dist/documents/index.js

@@ -5,5 +5,5 @@ export { MemoryDocumentBackend, IndexedDBDocumentBackend } from './backends';
 export { HttpDocumentBackend } from './http-backend';
 export { createDocumentHandle } from './handle';
 export { documentChanges } from './notifications';
-export { getTenantId, getDocumentBackend, __setTenantId, __setDocumentBackend, } from './config';
+export { getActiveScopeId, getTenantId, getDocumentBackend, __setActiveScope, __setTenantId, __setDocumentBackend, } from './config';
 export { PERMISSION_SYNC_PEER, PERMISSION_SYNC_POLICY, } from './sync-types';

package/dist/host-entry.d.ts

@@ -1,6 +1,6 @@
 export { registerShard, registerApp, bootstrap, __setBackend, setLocalOwner } from './host';
 export type { BootstrapConfig } from './host';
-export { __setTenantId, __setDocumentBackend } from './host';
+export { __setActiveScope, __setTenantId, __setDocumentBackend } from './host';
 export type { Backend } from './state/types';
 export type { DocumentBackend } from './documents/types';
 export { HttpDocumentBackend } from './documents/http-backend';

package/dist/host-entry.js

@@ -6,7 +6,7 @@
  * should touch this path. Shards and apps must not import from here.
  */
 export { registerShard, registerApp, bootstrap, __setBackend, setLocalOwner } from './host';
-export { __setTenantId, __setDocumentBackend } from './host';
+export { __setActiveScope, __setTenantId, __setDocumentBackend } from './host';
 export { HttpDocumentBackend } from './documents/http-backend';
 export { __setEnvServerUrl } from './env/index';
 // Install API (host-only).

package/dist/host.d.ts

@@ -4,7 +4,7 @@ import { __setBackend } from './state/zones.svelte';
 import { setLocalOwner } from './auth/index';
 export { __setBackend };
 export { setLocalOwner };
-export { __setTenantId, __setDocumentBackend } from './documents/config';
+export { __setActiveScope, __setTenantId, __setDocumentBackend } from './documents/config';
 export declare function registerShard(shard: Parameters<typeof registerShardInternal>[0]): void;
 export { registerApp };
 export interface BootstrapConfig {

package/dist/host.js

@@ -22,6 +22,7 @@ import { launchApp, readLastApp, clearLastApp } from './apps/lifecycle';
 import { sh3coreShard } from './sh3core-shard/sh3coreShard.svelte';
 import { shellShard } from './shell-shard/shellShard.svelte';
 import { storeShard } from './app/store/storeShard.svelte';
+import { projectsShard } from './projects-shard/projectsShard.svelte';
 import { __setBackend, backends } from './state/zones.svelte';
 import { loadInstalledPackages } from './registry/installer';
 import { setLocalOwner } from './auth/index';
@@ -34,7 +35,7 @@ import { installWebEmitter } from './navigation/platform-web';
 import { returnToHome } from './apps/lifecycle';
 export { __setBackend };
 export { setLocalOwner };
-export { __setTenantId, __setDocumentBackend } from './documents/config';
+export { __setActiveScope, __setTenantId, __setDocumentBackend } from './documents/config';
 export function registerShard(shard) {
     registerShardInternal(shard);
 }
@@ -58,10 +59,15 @@ export async function bootstrap(config) {
     // already in place when shards activate.
     if (typeof globalThis.localStorage !== 'undefined') {
         runShellRenameMigration(createWorkspaceZoneAdapter(), globalThis.localStorage);
+        // Per ADR-002 amendment, app workspace state is keyed by (scopeId, appId).
+        // Rewrite legacy unkeyed entries to the personal scope namespace.
+        const { migrateLegacyWorkspaceKeys } = await import('./apps/workspace-rekey');
+        const { getActiveScopeId } = await import('./documents/config');
+        migrateLegacyWorkspaceKeys(getActiveScopeId());
     }
     const exShards = new Set(config === null || config === void 0 ? void 0 : config.excludeShards);
     // 1. Framework-owned shards
-    const frameworkShards = [sh3coreShard, shellShard, storeShard, adminShard];
+    const frameworkShards = [sh3coreShard, shellShard, storeShard, adminShard, projectsShard];
     for (const shard of frameworkShards) {
         if (!exShards.has(shard.manifest.id)) {
             registerShardInternal(shard);