sh3-core 0.19.6 → 0.20.1

package/dist/projects-shard/ProjectsSection.svelte

@@ -11,6 +11,7 @@
   import { projectsState, openProjectManage } from './projectsShard.svelte';
   import { sessionState, setActiveProjectId } from '../projects/session-state.svelte';
   import { isAdmin } from '../auth/auth.svelte';
+  import HomeSection from '../sh3core-shard/HomeSection.svelte';
 
   const visible = $derived(projectsState.projects.length > 0);
   const activeId = $derived(sessionState.activeProjectId);
@@ -28,8 +29,7 @@
 </script>
 
 {#if visible}
-  <section class="projects-section">
-    <h2 class="projects-heading">Projects</h2>
+  <HomeSection title="Projects" persistKey="projects">
     <div class="projects-grid">
       {#each projectsState.projects as project (project.id)}
         <div class="project-card-wrap">
@@ -55,23 +55,10 @@
         </div>
       {/each}
     </div>
-  </section>
+  </HomeSection>
 {/if}
 
 <style>
-  .projects-section {
-    width: 100%;
-    max-width: 720px;
-    margin-bottom: 28px;
-  }
-  .projects-heading {
-    font-size: 13px;
-    font-weight: 600;
-    text-transform: uppercase;
-    letter-spacing: 0.06em;
-    color: var(--sh3-fg-subtle);
-    margin: 0 0 12px;
-  }
   .projects-grid {
     display: grid;
     grid-template-columns: repeat(auto-fill, minmax(160px, 1fr));

package/dist/projects-shard/projectsApi.js

@@ -4,9 +4,10 @@
  * Returns plain JSON objects; the shard layer is responsible for keeping
  * a reactive copy and for converting these to actions / views.
  */
+import { apiFetch } from '../transport/apiFetch';
 async function jsonFetch(url, init) {
     var _a;
-    const res = await fetch(url, Object.assign({ credentials: 'include' }, init));
+    const res = await apiFetch(url, init);
     if (!res.ok)
         throw new Error(`${(_a = init === null || init === void 0 ? void 0 : init.method) !== null && _a !== void 0 ? _a : 'GET'} ${url} failed: ${res.status}`);
     return res.json();

package/dist/registry/permission-descriptions.js

@@ -27,6 +27,10 @@ export const PERMISSION_DESCRIPTIONS = {
         title: 'Sync documents with peers',
         description: 'Participate in cross-peer document synchronization.',
     },
+    'documents:mount': {
+        title: 'Manage document mounts',
+        description: 'Define and manage filesystem mount points that feed into the document API.',
+    },
     'sync:peer': {
         title: 'Act as a sync peer',
         description: 'Exchange document updates with remote peers.',

package/dist/server-shard/types.d.ts

@@ -95,6 +95,27 @@ export interface ServerShardContext {
      * Absent => 'primary' behavior at the store.
      */
     setPeerRole(tenant: string, role: 'primary' | 'replica'): void;
+    /**
+     * Translate an SH3 document path to a real filesystem path on the host.
+     *
+     * Symmetric with `documents(tenant)` — the same `(shardId, path)` pair
+     * resolves through both APIs. Use this when a server shard needs to
+     * hand the path to a native consumer (spawn, fs.watch, streaming I/O)
+     * rather than read bytes via `documents().read()`.
+     *
+     * - `shardId === 'mounts'` resolves through the host's MountedPathResolver
+     *   and surfaces the real on-disk path of the mount. Throws on unknown,
+     *   unattached, or otherwise unresolvable mounts.
+     * - Any other `shardId` returns `<dataDir>/docs/<tenant>/<shardId>/<path>`,
+     *   the canonical native-doc location. The file may or may not exist —
+     *   use `documents(tenant).exists` to check.
+     *
+     * Note: once a shard takes the fs path and does its own I/O, the doc store
+     * loses its grip on conflict bookkeeping for those operations. Safe for
+     * mount-backed assets (read-mostly, outside the sync envelope); use with
+     * care for native shard docs that participate in Mode A/B sync.
+     */
+    resolveFsPath(tenant: string, shardId: string, path: string): string;
 }
 /**
  * The interface a server shard bundle must default-export.

package/dist/sh3core-shard/HomeSection.svelte

@@ -0,0 +1,107 @@
+<script lang="ts">
+  /*
+   * Collapsible section wrapper used by Sh3Home and section components.
+   * Title row is a button that toggles the content; expanded state is
+   * persisted to localStorage under `sh3:home-section:<persistKey>` so it
+   * survives reloads. Heading chrome (typography, spacing, max-width) is
+   * centralised here so individual sections only supply their grid/content.
+   */
+
+  import type { Snippet } from 'svelte';
+  import iconsUrl from '../assets/icons.svg';
+
+  interface Props {
+    title: string;
+    persistKey: string;
+    defaultExpanded?: boolean;
+    children: Snippet;
+  }
+
+  const { title, persistKey, defaultExpanded = true, children }: Props = $props();
+
+  const storageKey = $derived(`sh3:home-section:${persistKey}`);
+  const sectionId = $derived(`sh3-home-section-${persistKey}`);
+
+  function readInitial(): boolean {
+    if (typeof localStorage === 'undefined') return defaultExpanded;
+    const raw = localStorage.getItem(`sh3:home-section:${persistKey}`);
+    if (raw === '1') return true;
+    if (raw === '0') return false;
+    return defaultExpanded;
+  }
+
+  let expanded = $state(readInitial());
+
+  function toggle(): void {
+    expanded = !expanded;
+    if (typeof localStorage !== 'undefined') {
+      localStorage.setItem(storageKey, expanded ? '1' : '0');
+    }
+  }
+</script>
+
+<section class="home-section">
+  <button
+    type="button"
+    class="home-section-header"
+    aria-expanded={expanded}
+    aria-controls={sectionId}
+    onclick={toggle}
+  >
+    <svg class="home-section-chevron" class:open={expanded} aria-hidden="true">
+      <use href="{iconsUrl}#chevron-right" />
+    </svg>
+    <span class="home-section-title">{title}</span>
+  </button>
+  {#if expanded}
+    <div id={sectionId} class="home-section-body">
+      {@render children()}
+    </div>
+  {/if}
+</section>
+
+<style>
+  .home-section {
+    width: 100%;
+    max-width: 720px;
+    margin-bottom: 28px;
+  }
+  .home-section-header {
+    display: flex;
+    align-items: center;
+    gap: 6px;
+    width: 100%;
+    margin: 0 0 12px;
+    padding: 0;
+    background: transparent;
+    border: none;
+    color: var(--sh3-fg-subtle);
+    font: inherit;
+    font-size: 13px;
+    font-weight: 600;
+    text-transform: uppercase;
+    letter-spacing: 0.06em;
+    text-align: left;
+    cursor: pointer;
+  }
+  .home-section-header:hover {
+    color: var(--sh3-fg);
+  }
+  .home-section-header:focus-visible {
+    outline: 2px solid var(--sh3-accent);
+    outline-offset: 2px;
+    border-radius: 2px;
+  }
+  .home-section-chevron {
+    width: 12px;
+    height: 12px;
+    flex-shrink: 0;
+    transition: transform 120ms ease;
+  }
+  .home-section-chevron.open {
+    transform: rotate(90deg);
+  }
+  .home-section-title {
+    flex: 1;
+  }
+</style>

package/dist/sh3core-shard/HomeSection.svelte.d.ts

@@ -0,0 +1,10 @@
+import type { Snippet } from 'svelte';
+interface Props {
+    title: string;
+    persistKey: string;
+    defaultExpanded?: boolean;
+    children: Snippet;
+}
+declare const HomeSection: import("svelte").Component<Props, {}, "">;
+type HomeSection = ReturnType<typeof HomeSection>;
+export default HomeSection;

package/dist/sh3core-shard/Sh3Home.svelte

@@ -9,6 +9,7 @@
 
   import { listRegisteredApps, launchApp, isAdmin, VERSION } from '../api';
   import Sh3Title from './Sh3Title.svelte';
+  import HomeSection from './HomeSection.svelte';
   import ProjectsSection from '../projects-shard/ProjectsSection.svelte';
   import LayoutsSection from '../layouts-shard/LayoutsSection.svelte';
   import { sessionState } from '../projects/session-state.svelte';
@@ -56,7 +57,7 @@
     apps.filter((m) => !m.admin && matches(m, filter) && inAllowlist(m.id)),
   );
   const adminApps = $derived(apps.filter((m) => m.admin && matches(m, filter)));
-  const totalVisible = $derived(userApps.length + (elevated ? adminApps.length : 0));
+  const totalVisible = $derived(userApps.length + (elevated && !activeProject ? adminApps.length : 0));
 </script>
 
 <div class="sh3-home">
@@ -83,11 +84,8 @@
 
   <ProjectsSection />
 
-  <LayoutsSection />
-
   {#if userApps.length > 0}
-    <section class="sh3-home-section">
-      <h2 class="sh3-home-section-title">Apps</h2>
+    <HomeSection title="Apps" persistKey="apps">
       <div class="sh3-home-grid">
         {#each userApps as manifest (manifest.id)}
           {@const appearance = getAppearance(manifest.id)}
@@ -107,12 +105,13 @@
           </button>
         {/each}
       </div>
-    </section>
+    </HomeSection>
   {/if}
 
-  {#if elevated && adminApps.length > 0}
-    <section class="sh3-home-section">
-      <h2 class="sh3-home-section-title">Admin</h2>
+  <LayoutsSection />
+
+  {#if elevated && !activeProject && adminApps.length > 0}
+    <HomeSection title="Admin" persistKey="admin">
       <div class="sh3-home-grid">
         {#each adminApps as manifest (manifest.id)}
           {@const appearance = getAppearance(manifest.id)}
@@ -132,7 +131,7 @@
           </button>
         {/each}
       </div>
-    </section>
+    </HomeSection>
   {/if}
 
   {#if totalVisible === 0}
@@ -233,19 +232,6 @@
     color: var(--sh3-fg-muted);
     font-style: italic;
   }
-  .sh3-home-section {
-    width: 100%;
-    max-width: 720px;
-    margin-bottom: 28px;
-  }
-  .sh3-home-section-title {
-    font-size: 13px;
-    font-weight: 600;
-    text-transform: uppercase;
-    letter-spacing: 0.06em;
-    color: var(--sh3-fg-subtle);
-    margin: 0 0 12px;
-  }
   .sh3-home-grid {
     display: grid;
     grid-template-columns: repeat(auto-fill, minmax(84px, 1fr));

package/dist/shards/activate.svelte.d.ts

@@ -22,6 +22,10 @@ export interface ShardErrorEntry {
     timestamp: number;
 }
 export declare const erroredShards: Map<string, ShardErrorEntry>;
+/** Host-only. Register a callback that resolves whether the current scope
+ *  is a personal tenant or an active project. Wired by createShell after
+ *  bootstrap. Avoids circular dependencies with session-state. */
+export declare function __setScopeResolver(resolver: (() => 'tenant' | 'project') | null): void;
 /**
  * Register (or re-register) a shard with the framework so it can later be
  * activated. Records the shard in `registeredShards` but does not run

package/dist/shards/activate.svelte.js

@@ -52,6 +52,13 @@ export const registeredShards = $state(new Map());
 const active = new Map();
 export const activeShards = $state(new Map());
 export const erroredShards = $state(new Map());
+let scopeResolver = null;
+/** Host-only. Register a callback that resolves whether the current scope
+ *  is a personal tenant or an active project. Wired by createShell after
+ *  bootstrap. Avoids circular dependencies with session-state. */
+export function __setScopeResolver(resolver) {
+    scopeResolver = resolver;
+}
 /**
  * Register (or re-register) a shard with the framework so it can later be
  * activated. Records the shard in `registeredShards` but does not run
@@ -146,7 +153,7 @@ export async function activateShard(id, opts) {
     };
     const hasBrowse = (_a = shard.manifest.permissions) === null || _a === void 0 ? void 0 : _a.includes(PERMISSION_DOCUMENTS_BROWSE);
     const browseCap = hasBrowse
-        ? createBrowseCapability(getTenantId(), getDocumentBackend(), {
+        ? createBrowseCapability(() => getTenantId(), getDocumentBackend(), {
             canRead: (_c = (_b = shard.manifest.permissions) === null || _b === void 0 ? void 0 : _b.includes(PERMISSION_DOCUMENTS_READ)) !== null && _c !== void 0 ? _c : false,
             canWrite: (_e = (_d = shard.manifest.permissions) === null || _d === void 0 ? void 0 : _d.includes(PERMISSION_DOCUMENTS_WRITE)) !== null && _e !== void 0 ? _e : false,
         })
@@ -220,6 +227,7 @@ export async function activateShard(id, opts) {
         get tenantId() {
             return getTenantId();
         },
+        getScope: () => { var _a; return (_a = scopeResolver === null || scopeResolver === void 0 ? void 0 : scopeResolver()) !== null && _a !== void 0 ? _a : 'tenant'; },
         zones: ((_f = shard.manifest.permissions) === null || _f === void 0 ? void 0 : _f.includes(PERMISSION_STATE_MANAGE))
             ? createZoneManager()
             : undefined,

package/dist/shards/types.d.ts

@@ -274,6 +274,13 @@ export interface ShardContext {
      * serialize into persistent storage.
      */
     tenantId: string;
+    /**
+     * Whether this shard is running in a 'tenant' (personal) or 'project'
+     * scope. Shards that need to scope their behavior differently per context
+     * can read this at any time — it is reactive through the session state.
+     * Returns 'tenant' when no project is active, 'project' otherwise.
+     */
+    getScope(): 'tenant' | 'project';
     /**
      * Cross-shard zone management API. Only present when the shard's
      * manifest declares the `'state:manage'` permission. Check with

package/dist/shell-shard/tenant-fs-client.js

@@ -8,6 +8,7 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
 var _TenantFsClient_instances, _TenantFsClient_get;
+import { apiFetch } from '../transport/apiFetch';
 export class TenantFsClient {
     constructor(base = '') {
         _TenantFsClient_instances.add(this);
@@ -29,7 +30,7 @@ export class TenantFsClient {
 }
 _TenantFsClient_instances = new WeakSet(), _TenantFsClient_get = async function _TenantFsClient_get(route, path) {
     const url = `${this.base}${route}?path=${encodeURIComponent(path)}`;
-    const res = await fetch(url, { credentials: 'include' });
+    const res = await apiFetch(url);
     if (!res.ok) {
         let msg = `HTTP ${res.status}`;
         try {

package/dist/transport/apiFetch.js

@@ -43,7 +43,7 @@ async function getTauriFetch() {
     }
     return tauriFetch;
 }
-export async function apiFetch(url, init) {
+export function apiFetch(url, init) {
     var _a;
     // Inject Authorization: Bearer <session-token> if a session is active
     // and the caller didn't already supply one. Cookies don't survive the
@@ -58,8 +58,15 @@ export async function apiFetch(url, init) {
             finalInit = Object.assign(Object.assign({}, finalInit), { headers });
         }
     }
-    const tf = await getTauriFetch();
-    if (tf)
-        return tf(url, finalInit);
-    return fetch(url, Object.assign({ credentials: 'include' }, finalInit));
+    // Fast path: outside the Tauri webview, fire fetch synchronously so
+    // call-timing assertions in tests still hold and web builds skip the
+    // dynamic-import probe entirely.
+    if (!inTauriRuntime()) {
+        return fetch(url, Object.assign({ credentials: 'include' }, finalInit));
+    }
+    return getTauriFetch().then((tf) => {
+        if (tf)
+            return tf(url, finalInit);
+        return fetch(url, Object.assign({ credentials: 'include' }, finalInit));
+    });
 }

package/dist/version.d.ts

@@ -1,2 +1,2 @@
 /** Auto-generated from package.json — do not edit manually. */
-export declare const VERSION = "0.19.6";
+export declare const VERSION = "0.20.1";

package/dist/version.js

@@ -1,2 +1,2 @@
 /** Auto-generated from package.json — do not edit manually. */
-export const VERSION = '0.19.6';
+export const VERSION = '0.20.1';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sh3-core",
-  "version": "0.19.6",
+  "version": "0.20.1",
   "type": "module",
   "files": [
     "dist"