sh3-core 0.13.1 → 0.13.3

package/dist/app-appearance/appearanceShard.svelte.js

@@ -0,0 +1,61 @@
+/*
+ * `__app-appearance__` shard — owns the user-zone for per-app overrides
+ * and registers the `app.customize` element-scope action. The state
+ * itself lives in appearanceState.svelte.ts (so unit tests don't have
+ * to boot a real ShardContext). This file binds the zone on activate
+ * and unbinds on deactivate, and contributes the action.
+ */
+import { VERSION } from '../version';
+import { listRegisteredApps } from '../api';
+import { getSelection } from '../actions/selection.svelte';
+import { modalManager } from '../overlays/modal';
+import AppAppearanceModal from './AppAppearanceModal.svelte';
+import { __bindZone, __unbindZone, } from './appearanceState.svelte';
+function readSelection() {
+    const sel = getSelection();
+    if (!sel || sel.type !== 'app')
+        return null;
+    return sel.ref;
+}
+function runCustomize(_ctx) {
+    var _a;
+    const ref = readSelection();
+    if (!ref)
+        return;
+    const m = listRegisteredApps().find((x) => x.id === ref.appId);
+    const props = {
+        appId: ref.appId,
+        appLabel: (_a = m === null || m === void 0 ? void 0 : m.label) !== null && _a !== void 0 ? _a : ref.appId,
+    };
+    modalManager.open(AppAppearanceModal, props);
+}
+export const appearanceShard = {
+    manifest: {
+        id: '__app-appearance__',
+        label: 'App Appearance',
+        version: VERSION,
+        views: [],
+    },
+    activate(ctx) {
+        const zone = ctx.state({
+            user: { overrides: {} },
+        });
+        __bindZone(zone);
+        const customize = {
+            id: 'app.customize',
+            label: 'Customize…',
+            scope: { element: 'app' },
+            contextItem: true,
+            group: 'appearance',
+            run: runCustomize,
+        };
+        ctx.actions.register(customize);
+    },
+    autostart() {
+        // Self-start so the `app.customize` action is registered before the
+        // user right-clicks a home card. No imperative work required.
+    },
+    deactivate() {
+        __unbindZone();
+    },
+};

package/dist/app-appearance/appearanceState.svelte.d.ts

@@ -0,0 +1,15 @@
+import type { StateZones } from '../state/zones.svelte';
+import type { AppAppearance } from './types';
+export interface AppearanceZoneSchema {
+    user: {
+        overrides: Record<string, AppAppearance>;
+    };
+}
+/** Bind the shard's zone to this module. Called by the shard's activate. */
+export declare function __bindZone(s: StateZones<AppearanceZoneSchema>): void;
+/** Unbind the zone (deactivate). */
+export declare function __unbindZone(): void;
+export declare function getAppearance(appId: string): AppAppearance | undefined;
+export declare function setAppearance(appId: string, value: AppAppearance | undefined): void;
+/** Test-only: replace the bound zone with a memory shim. */
+export declare function __resetForTests(): void;

package/dist/app-appearance/appearanceState.svelte.js

@@ -0,0 +1,59 @@
+/*
+ * Per-user-per-browser visual overrides for apps. The store + helpers
+ * live separately from the shard so the state can be unit-tested without
+ * booting the shard system, and so the AppAppearanceModal can import
+ * get/set without creating an import cycle through the shard's modal
+ * import.
+ *
+ * EXPLICITLY TEMPORARY. A future ADR is expected to add icon/color
+ * fields to the app manifest itself.
+ */
+let zoneState = null;
+/** Bind the shard's zone to this module. Called by the shard's activate. */
+export function __bindZone(s) {
+    zoneState = s;
+}
+/** Unbind the zone (deactivate). */
+export function __unbindZone() {
+    zoneState = null;
+}
+function isEmpty(v) {
+    return v.icon === undefined && v.color === undefined && v.label === undefined;
+}
+export function getAppearance(appId) {
+    const map = zoneState === null || zoneState === void 0 ? void 0 : zoneState.user.overrides;
+    if (!map)
+        return undefined;
+    const v = map[appId];
+    if (!v)
+        return undefined;
+    if (isEmpty(v))
+        return undefined;
+    return v;
+}
+export function setAppearance(appId, value) {
+    if (!zoneState)
+        return;
+    const map = zoneState.user.overrides;
+    const next = Object.assign({}, map);
+    if (value === undefined || isEmpty(value)) {
+        delete next[appId];
+    }
+    else {
+        next[appId] = value;
+    }
+    zoneState.user.overrides = next;
+}
+/** Test-only: replace the bound zone with a memory shim. */
+export function __resetForTests() {
+    zoneState = {
+        ephemeral: {},
+        session: {},
+        workspace: {},
+        user: { overrides: {} },
+    };
+}
+// Initialise the memory shim at module load so tests can call set/get
+// without first invoking activate. Production replaces this via
+// __bindZone() inside appearanceShard.activate().
+__resetForTests();

package/dist/app-appearance/appearanceState.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/app-appearance/appearanceState.test.js

@@ -0,0 +1,30 @@
+import { describe, it, expect, beforeEach } from 'vitest';
+import { setAppearance, getAppearance, __resetForTests } from './appearanceState.svelte';
+describe('appearanceShard get/set', () => {
+    beforeEach(() => __resetForTests());
+    it('returns undefined for an unset app', () => {
+        expect(getAppearance('foo')).toBeUndefined();
+    });
+    it('round-trips an icon override', () => {
+        setAppearance('foo', { icon: 'house' });
+        expect(getAppearance('foo')).toEqual({ icon: 'house' });
+    });
+    it('round-trips a color override', () => {
+        setAppearance('foo', { color: '#ff0000' });
+        expect(getAppearance('foo')).toEqual({ color: '#ff0000' });
+    });
+    it('round-trips a label override', () => {
+        setAppearance('foo', { label: 'My Label' });
+        expect(getAppearance('foo')).toEqual({ label: 'My Label' });
+    });
+    it('clears the entry when all fields are undefined', () => {
+        setAppearance('foo', { icon: 'house', color: '#ff0000', label: 'X' });
+        setAppearance('foo', { icon: undefined, color: undefined, label: undefined });
+        expect(getAppearance('foo')).toBeUndefined();
+    });
+    it('clears the entry when given undefined directly', () => {
+        setAppearance('foo', { icon: 'house' });
+        setAppearance('foo', undefined);
+        expect(getAppearance('foo')).toBeUndefined();
+    });
+});

package/dist/app-appearance/index.d.ts

@@ -0,0 +1,3 @@
+export { appearanceShard } from './appearanceShard.svelte';
+export { getAppearance, setAppearance } from './appearanceState.svelte';
+export type { AppAppearance } from './types';

package/dist/app-appearance/index.js

@@ -0,0 +1,2 @@
+export { appearanceShard } from './appearanceShard.svelte';
+export { getAppearance, setAppearance } from './appearanceState.svelte';

package/dist/app-appearance/types.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Per-app per-user-per-browser visual override. Stored in the user zone
+ * of the __app-appearance__ shard. Every field is optional — an empty
+ * AppAppearance object is treated as "no override" and removed from the
+ * map by setAppearance().
+ */
+export interface AppAppearance {
+    icon?: string;
+    color?: string;
+    label?: string;
+}

package/dist/app-appearance/types.js

@@ -0,0 +1 @@
+export {};

package/dist/apps/lifecycle.js

@@ -22,6 +22,8 @@ import { clearSelectionUnconditional } from '../actions/selection.svelte';
 import { loadUserBindings } from '../actions/bindings-store';
 import { toastManager } from '../overlays/toast';
 import { clearAppNavEntries } from '../navigation/back-stack';
+import { getActiveScopeId } from '../documents/config';
+import { sessionState } from '../projects/session-state.svelte';
 // ---------- last-active-app user zone ------------------------------------
 /**
  * Framework-reserved user-zone slot storing which app to boot into on
@@ -54,13 +56,19 @@ export function clearLastApp() {
 }
 // ---------- app-context state factories ----------------------------------
 const appContexts = new Map();
-function getOrCreateAppContext(appId) {
+function resolveLaunchScope() {
+    var _a;
+    return (_a = sessionState.activeProjectId) !== null && _a !== void 0 ? _a : getActiveScopeId();
+}
+function getOrCreateAppContext(appId, scopeId) {
     var _a;
     let ctx = appContexts.get(appId);
     if (!ctx) {
         const app = getRegisteredApp(appId);
+        const scope = scopeId !== null && scopeId !== void 0 ? scopeId : resolveLaunchScope();
         ctx = {
-            state: (schema) => createStateZones(`__app__:${appId}`, schema),
+            scopeId: scope,
+            state: (schema) => createStateZones(`__app__:${appId}:scope:${scope}`, schema),
             zones: ((_a = app === null || app === void 0 ? void 0 : app.manifest.permissions) === null || _a === void 0 ? void 0 : _a.includes(PERMISSION_STATE_MANAGE))
                 ? createZoneManager()
                 : undefined,

package/dist/apps/types.d.ts

@@ -74,6 +74,13 @@ export interface AppManifest {
      * When absent, the canonical fallback is used. See MenuContainer.
      */
     menus?: MenuContainer[];
+    /**
+     * Optional default home-card icon — a lucide icon id from the bundled
+     * sprite (see `src/assets/icons.svg`). User-set per-browser overrides
+     * (via the home-card Customize action) take precedence; if neither is
+     * set the framework falls back to `box`.
+     */
+    icon?: string;
 }
 /**
  * Context object passed to `App.activate`. Provides app-scoped state zones
@@ -82,10 +89,17 @@ export interface AppManifest {
  */
 export interface AppContext {
     /**
-     * App-scoped state zones. The shardId underneath is the app id, so
-     * `state({ workspace: { x: 0 } }).workspace.x = 1` persists to
-     * `sh3:workspace:<appId>` with no collision risk against any shard
-     * of the same name.
+     * The scope (personal or project) this app instance is bound to for its
+     * lifetime. Set at launch from `session.activeProjectId`, falling back to
+     * the user's personal scope. The app's document handles are bound to this
+     * scope and cannot reach across scopes — exiting a scope unloads the app.
+     */
+    scopeId: string;
+    /**
+     * App-scoped state zones. The shardId underneath is the app id plus the
+     * scope, so `state({ workspace: { x: 0 } }).workspace.x = 1` persists to
+     * `sh3:workspace:__app__:<appId>:scope:<scopeId>` with no collision risk
+     * against any shard of the same name and no leakage between scopes.
      */
     state<T extends ZoneSchema>(schema: T): StateZones<T>;
     /**

package/dist/apps/workspace-rekey.d.ts

@@ -0,0 +1 @@
+export declare function migrateLegacyWorkspaceKeys(personalScopeId: string): void;

package/dist/apps/workspace-rekey.js

@@ -0,0 +1,35 @@
+/*
+ * Workspace state-zone key migration.
+ *
+ * Per ADR-002 amendment (2026-05-04), the workspace zone is keyed by
+ * `(scopeId, appId)`. Pre-existing localStorage entries written under
+ * the old `sh3:workspace:__app__:<appId>` prefix are rewritten to
+ * `sh3:workspace:__app__:<appId>:scope:<personalScopeId>` on first
+ * boot after upgrade. Idempotent — re-running on already-migrated
+ * entries is a no-op.
+ *
+ * Only entries whose shardId starts with the framework `__app__:`
+ * marker are migrated; bare shard keys are left alone.
+ */
+const APP_PREFIX = 'sh3:workspace:__app__:';
+const SCOPE_MARKER = ':scope:';
+export function migrateLegacyWorkspaceKeys(personalScopeId) {
+    if (typeof localStorage === 'undefined')
+        return;
+    const toMove = [];
+    for (let i = 0; i < localStorage.length; i++) {
+        const key = localStorage.key(i);
+        if (!key || !key.startsWith(APP_PREFIX))
+            continue;
+        if (key.includes(SCOPE_MARKER))
+            continue;
+        toMove.push([key, `${key}${SCOPE_MARKER}${personalScopeId}`]);
+    }
+    for (const [oldKey, newKey] of toMove) {
+        const value = localStorage.getItem(oldKey);
+        if (value !== null) {
+            localStorage.setItem(newKey, value);
+            localStorage.removeItem(oldKey);
+        }
+    }
+}

package/dist/apps/workspace-rekey.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/apps/workspace-rekey.test.js

@@ -0,0 +1,23 @@
+import { describe, it, expect, beforeEach } from 'vitest';
+import { migrateLegacyWorkspaceKeys } from './workspace-rekey';
+describe('migrateLegacyWorkspaceKeys', () => {
+    beforeEach(() => localStorage.clear());
+    it('rewrites legacy app keys to scope-suffixed keys', () => {
+        localStorage.setItem('sh3:workspace:__app__:notes', JSON.stringify({ x: 1 }));
+        localStorage.setItem('sh3:workspace:__app__:files', JSON.stringify({ y: 2 }));
+        migrateLegacyWorkspaceKeys('user-1');
+        expect(localStorage.getItem('sh3:workspace:__app__:notes')).toBeNull();
+        expect(localStorage.getItem('sh3:workspace:__app__:notes:scope:user-1')).toBe(JSON.stringify({ x: 1 }));
+        expect(localStorage.getItem('sh3:workspace:__app__:files:scope:user-1')).toBe(JSON.stringify({ y: 2 }));
+    });
+    it('is idempotent', () => {
+        localStorage.setItem('sh3:workspace:__app__:notes:scope:user-1', JSON.stringify({ x: 1 }));
+        migrateLegacyWorkspaceKeys('user-1');
+        expect(localStorage.getItem('sh3:workspace:__app__:notes:scope:user-1')).toBe(JSON.stringify({ x: 1 }));
+    });
+    it('does not touch non-app workspace keys', () => {
+        localStorage.setItem('sh3:workspace:my-shard', JSON.stringify({ z: 3 }));
+        migrateLegacyWorkspaceKeys('user-1');
+        expect(localStorage.getItem('sh3:workspace:my-shard')).toBe(JSON.stringify({ z: 3 }));
+    });
+});

package/dist/assets/iconIds.generated.d.ts

@@ -0,0 +1,2 @@
+export declare const ICON_IDS: readonly ["activity", "align-horizontal-justify-center", "align-horizontal-justify-end", "align-horizontal-justify-start", "app-window", "archive", "archive-restore", "axis-3d", "box", "brick-wall", "bug", "building-2", "cable", "calendar", "camera", "check", "chevron-down", "chevron-right", "circle-check", "circle-dot", "circle-minus", "circle-x", "clipboard", "clipboard-paste", "clock", "compass", "component", "copy", "cpu", "crop", "crosshair", "crown", "dollar-sign", "download", "droplet", "eraser", "euro", "external-link", "eye", "eye-off", "file", "file-archive", "file-diff", "file-plus", "file-text", "flame", "flip-horizontal-2", "flip-vertical-2", "folder", "folder-open", "folder-plus", "folder-tree", "gallery-vertical-end", "gamepad-2", "gauge", "gem", "git-branch", "git-commit-horizontal", "git-merge", "globe", "grid-2x2", "grid-3x3", "group", "hard-drive", "heart", "history", "house", "image", "info", "joystick", "key", "layers", "layout-dashboard", "layout-grid", "layout-list", "layout-panel-left", "layout-panel-top", "layout-template", "lightbulb", "link", "list-ordered", "list-tree", "lock", "log-out", "magnet", "mail", "map", "maximize", "minimize", "moon", "mouse-pointer", "move", "move-3d", "music", "navigation", "network", "notebook-pen", "palette", "pause", "pencil", "pipette", "play", "plus", "pointer", "pound-sterling", "receipt", "redo-2", "refresh-cw", "rocket", "rotate-3d", "rotate-ccw", "rotate-cw", "ruler", "save", "scissors", "scroll-text", "search", "send", "server", "settings", "shield", "skull", "sliders-horizontal", "snowflake", "sparkles", "square", "square-terminal", "star", "sun", "sword", "table-properties", "target", "texture", "timer", "trash-2", "triangle-alert", "type", "undo-2", "ungroup", "unity", "upload", "user", "users", "video", "volume-2", "wand-sparkles", "wind", "x", "zap", "zoom-in", "zoom-out"];
+export type IconId = (typeof ICON_IDS)[number];

package/dist/assets/iconIds.generated.js

@@ -0,0 +1,154 @@
+// GENERATED — do not edit. See scripts/sync-icon-ids.ts
+export const ICON_IDS = [
+    'activity',
+    'align-horizontal-justify-center',
+    'align-horizontal-justify-end',
+    'align-horizontal-justify-start',
+    'app-window',
+    'archive',
+    'archive-restore',
+    'axis-3d',
+    'box',
+    'brick-wall',
+    'bug',
+    'building-2',
+    'cable',
+    'calendar',
+    'camera',
+    'check',
+    'chevron-down',
+    'chevron-right',
+    'circle-check',
+    'circle-dot',
+    'circle-minus',
+    'circle-x',
+    'clipboard',
+    'clipboard-paste',
+    'clock',
+    'compass',
+    'component',
+    'copy',
+    'cpu',
+    'crop',
+    'crosshair',
+    'crown',
+    'dollar-sign',
+    'download',
+    'droplet',
+    'eraser',
+    'euro',
+    'external-link',
+    'eye',
+    'eye-off',
+    'file',
+    'file-archive',
+    'file-diff',
+    'file-plus',
+    'file-text',
+    'flame',
+    'flip-horizontal-2',
+    'flip-vertical-2',
+    'folder',
+    'folder-open',
+    'folder-plus',
+    'folder-tree',
+    'gallery-vertical-end',
+    'gamepad-2',
+    'gauge',
+    'gem',
+    'git-branch',
+    'git-commit-horizontal',
+    'git-merge',
+    'globe',
+    'grid-2x2',
+    'grid-3x3',
+    'group',
+    'hard-drive',
+    'heart',
+    'history',
+    'house',
+    'image',
+    'info',
+    'joystick',
+    'key',
+    'layers',
+    'layout-dashboard',
+    'layout-grid',
+    'layout-list',
+    'layout-panel-left',
+    'layout-panel-top',
+    'layout-template',
+    'lightbulb',
+    'link',
+    'list-ordered',
+    'list-tree',
+    'lock',
+    'log-out',
+    'magnet',
+    'mail',
+    'map',
+    'maximize',
+    'minimize',
+    'moon',
+    'mouse-pointer',
+    'move',
+    'move-3d',
+    'music',
+    'navigation',
+    'network',
+    'notebook-pen',
+    'palette',
+    'pause',
+    'pencil',
+    'pipette',
+    'play',
+    'plus',
+    'pointer',
+    'pound-sterling',
+    'receipt',
+    'redo-2',
+    'refresh-cw',
+    'rocket',
+    'rotate-3d',
+    'rotate-ccw',
+    'rotate-cw',
+    'ruler',
+    'save',
+    'scissors',
+    'scroll-text',
+    'search',
+    'send',
+    'server',
+    'settings',
+    'shield',
+    'skull',
+    'sliders-horizontal',
+    'snowflake',
+    'sparkles',
+    'square',
+    'square-terminal',
+    'star',
+    'sun',
+    'sword',
+    'table-properties',
+    'target',
+    'texture',
+    'timer',
+    'trash-2',
+    'triangle-alert',
+    'type',
+    'undo-2',
+    'ungroup',
+    'unity',
+    'upload',
+    'user',
+    'users',
+    'video',
+    'volume-2',
+    'wand-sparkles',
+    'wind',
+    'x',
+    'zap',
+    'zoom-in',
+    'zoom-out',
+];

package/dist/auth/admin-users.svelte.d.ts

@@ -0,0 +1,9 @@
+import type { AuthUser } from './types';
+export declare const usersAdminState: {
+    users: AuthUser[];
+    loading: boolean;
+    error: string | null;
+};
+export declare function refreshAdminUsers(): Promise<void>;
+/** Test-only reset. Clears state and any in-flight promise. */
+export declare function __resetAdminUsersForTest(): void;

package/dist/auth/admin-users.svelte.js

@@ -0,0 +1,42 @@
+/*
+ * Shared admin-users cache.
+ *
+ * Wraps a single GET /api/admin/users behind a $state slot so multiple
+ * admin-form components (e.g., UserPicker instances inside ProjectManage,
+ * a future invite-user dialog, etc.) share one fetch without prop-drilling
+ * the user list. Concurrent calls reuse the in-flight promise; subsequent
+ * calls after completion fetch fresh data.
+ */
+export const usersAdminState = $state({ users: [], loading: false, error: null });
+let inflight = null;
+export function refreshAdminUsers() {
+    if (inflight)
+        return inflight;
+    usersAdminState.loading = true;
+    usersAdminState.error = null;
+    inflight = (async () => {
+        try {
+            const res = await fetch('/api/admin/users', { credentials: 'include' });
+            if (!res.ok) {
+                usersAdminState.error = `GET /api/admin/users failed: ${res.status}`;
+                return;
+            }
+            usersAdminState.users = (await res.json());
+        }
+        catch (e) {
+            usersAdminState.error = e.message;
+        }
+        finally {
+            usersAdminState.loading = false;
+            inflight = null;
+        }
+    })();
+    return inflight;
+}
+/** Test-only reset. Clears state and any in-flight promise. */
+export function __resetAdminUsersForTest() {
+    usersAdminState.users = [];
+    usersAdminState.loading = false;
+    usersAdminState.error = null;
+    inflight = null;
+}

package/dist/auth/admin-users.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/auth/admin-users.test.js

@@ -0,0 +1,52 @@
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+import { usersAdminState, refreshAdminUsers, __resetAdminUsersForTest, } from './admin-users.svelte';
+beforeEach(() => {
+    __resetAdminUsersForTest();
+    vi.stubGlobal('fetch', vi.fn());
+});
+describe('refreshAdminUsers', () => {
+    it('GETs /api/admin/users and populates the state', async () => {
+        globalThis.fetch.mockResolvedValue({
+            ok: true,
+            json: async () => [
+                { id: 'u-1', username: 'alice', displayName: 'Alice', role: 'user', createdAt: '', updatedAt: '' },
+                { id: 'u-2', username: 'bob', displayName: 'Bob', role: 'admin', createdAt: '', updatedAt: '' },
+            ],
+        });
+        await refreshAdminUsers();
+        expect(globalThis.fetch).toHaveBeenCalledWith('/api/admin/users', expect.objectContaining({ credentials: 'include' }));
+        expect(usersAdminState.users).toHaveLength(2);
+        expect(usersAdminState.users[0].username).toBe('alice');
+        expect(usersAdminState.loading).toBe(false);
+        expect(usersAdminState.error).toBeNull();
+    });
+    it('sets error and clears loading on non-ok response', async () => {
+        globalThis.fetch.mockResolvedValue({ ok: false, status: 403 });
+        await refreshAdminUsers();
+        expect(usersAdminState.users).toEqual([]);
+        expect(usersAdminState.loading).toBe(false);
+        expect(usersAdminState.error).toMatch(/403/);
+    });
+    it('sets error and clears loading on network throw', async () => {
+        globalThis.fetch.mockRejectedValue(new Error('network down'));
+        await refreshAdminUsers();
+        expect(usersAdminState.error).toBe('network down');
+        expect(usersAdminState.loading).toBe(false);
+    });
+    it('concurrent calls share one in-flight promise', async () => {
+        let resolveFetch = null;
+        globalThis.fetch.mockImplementation(() => new Promise((res) => { resolveFetch = res; }));
+        const a = refreshAdminUsers();
+        const b = refreshAdminUsers();
+        expect(globalThis.fetch).toHaveBeenCalledTimes(1);
+        resolveFetch({ ok: true, json: async () => [] });
+        await Promise.all([a, b]);
+        expect(globalThis.fetch).toHaveBeenCalledTimes(1);
+    });
+    it('a follow-up call after completion fetches again', async () => {
+        globalThis.fetch.mockResolvedValue({ ok: true, json: async () => [] });
+        await refreshAdminUsers();
+        await refreshAdminUsers();
+        expect(globalThis.fetch).toHaveBeenCalledTimes(2);
+    });
+});

package/dist/createShell.js

@@ -12,7 +12,7 @@ import { registerShard, registerApp, bootstrap, __setBackend, setLocalOwner, } f
 import { resolvePlatform } from './platform/index';
 import { hydrateTokenOverrides } from './theme';
 import { __setEnvServerUrl } from './env/index';
-import { __setTenantId } from './documents/config';
+import { __setActiveScope } from './documents/config';
 import { initFromBoot } from './auth/index';
 import SignInWall from './auth/SignInWall.svelte';
 import { loadBundleModule } from './registry/loader';
@@ -54,13 +54,13 @@ export async function createShell(config) {
     }
     // 4. Auth decision point
     if (platform.localOwner) {
-        // Local-owner (Tauri/dev): no auth, no sign-in, tenant is 'local'.
+        // Local-owner (Tauri/dev): no auth, no sign-in, scope is 'local'.
         // setLocalOwner() already called above — admin is assumed.
-        __setTenantId('local');
+        __setActiveScope('local');
     }
     else if (bootConfig) {
         initFromBoot(sUrl, bootConfig);
-        __setTenantId(bootConfig.tenantId);
+        __setActiveScope(bootConfig.tenantId);
         const { auth, session } = bootConfig;
         // Hard gate: no session, auth required, no guest allowed → sign-in wall
         if (!session && auth.required && !auth.guestAllowed) {
@@ -70,7 +70,7 @@ export async function createShell(config) {
             if (res.ok) {
                 bootConfig = await res.json();
                 initFromBoot(sUrl, bootConfig);
-                __setTenantId(bootConfig.tenantId);
+                __setActiveScope(bootConfig.tenantId);
             }
         }
     }

package/dist/documents/config.d.ts

@@ -1,7 +1,11 @@
 import type { DocumentBackend } from './types';
+export declare function getActiveScopeId(): string;
+/** @deprecated use getActiveScopeId — kept until callers migrate. */
 export declare function getTenantId(): string;
 export declare function getDocumentBackend(): DocumentBackend;
-/** Host-only. Set the tenant id before bootstrap(). */
+/** Host-only. Set the active scope id before bootstrap(). */
+export declare function __setActiveScope(id: string): void;
+/** @deprecated use __setActiveScope — kept until callers migrate. */
 export declare function __setTenantId(id: string): void;
 /** Host-only. Swap the document backend before bootstrap(). */
 export declare function __setDocumentBackend(b: DocumentBackend): void;