sh3-core 0.19.6 → 0.20.2

package/dist/app/admin/AuthSettingsView.svelte

@@ -4,6 +4,7 @@
    */
 
   import type { GlobalSettings } from '../../auth/types';
+  import { apiFetch } from '../../transport/apiFetch';
 
   let settings = $state<GlobalSettings | null>(null);
   let loading = $state(true);
@@ -13,7 +14,7 @@
   async function fetchSettings() {
     loading = true;
     try {
-      const res = await fetch('/api/admin/settings', { credentials: 'include' });
+      const res = await apiFetch('/api/admin/settings');
       if (!res.ok) throw new Error('Failed to fetch settings');
       settings = await res.json();
     } catch (err) {
@@ -28,10 +29,9 @@
     saving = true;
     error = null;
     try {
-      const res = await fetch('/api/admin/settings', {
+      const res = await apiFetch('/api/admin/settings', {
         method: 'PUT',
         headers: { 'Content-Type': 'application/json' },
-        credentials: 'include',
         body: JSON.stringify(settings),
       });
       if (!res.ok) throw new Error('Failed to save settings');
@@ -53,12 +53,6 @@
     <p class="admin-muted">Loading...</p>
   {:else if settings}
     <div class="admin-auth-fields">
-      <label class="admin-toggle">
-        <input type="checkbox" bind:checked={settings.auth.required} />
-        <span>Require sign-in</span>
-        <span class="admin-hint">When enabled, unauthenticated visitors see a sign-in wall.</span>
-      </label>
-
       <label class="admin-toggle">
         <input type="checkbox" bind:checked={settings.auth.guestAllowed} />
         <span>Allow guest browsing</span>

package/dist/app/admin/MountsView.svelte

@@ -0,0 +1,276 @@
+<script lang="ts">
+  import { apiFetch } from '../../transport/apiFetch';
+
+  interface MountEntry {
+    id: string;
+    label?: string;
+    path: string;
+    status: 'resolved' | 'unresolved' | 'error';
+    attachmentCount: number;
+    createdAt: string;
+    updatedAt: string;
+  }
+
+  let mounts = $state<MountEntry[]>([]);
+  let loading = $state(true);
+  let error = $state<string | null>(null);
+
+  // Create form
+  let showCreate = $state(false);
+  let newId = $state('');
+  let newLabel = $state('');
+  let newPath = $state('');
+  let createError = $state<string | null>(null);
+  let createWarning = $state<string | null>(null);
+
+  // Edit state
+  let editingId = $state<string | null>(null);
+  let editLabel = $state('');
+  let editPath = $state('');
+
+  // Browse state
+  let browsingId = $state<string | null>(null);
+  let browseEntries = $state<{ name: string; kind: string; size?: number }[]>([]);
+  let browseError = $state<string | null>(null);
+
+  // Delete confirmation
+  let deletingId = $state<string | null>(null);
+
+  async function fetchMounts() {
+    loading = true;
+    error = null;
+    try {
+      const res = await apiFetch('/api/admin/mounts');
+      if (!res.ok) throw new Error('Failed to fetch mounts');
+      mounts = await res.json();
+    } catch (err) {
+      error = err instanceof Error ? err.message : 'Failed to load mounts';
+    } finally {
+      loading = false;
+    }
+  }
+
+  async function createMount() {
+    createError = null;
+    createWarning = null;
+    try {
+      const res = await apiFetch('/api/admin/mounts', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ id: newId, label: newLabel || undefined, path: newPath }),
+      });
+      const body = await res.json();
+      if (!res.ok) {
+        createError = body.error || 'Failed to create mount';
+        return;
+      }
+      if (body.warning) createWarning = body.warning;
+      newId = '';
+      newLabel = '';
+      newPath = '';
+      showCreate = false;
+      createWarning = null;
+      await fetchMounts();
+    } catch {
+      createError = 'Network error';
+    }
+  }
+
+  function startEdit(mount: MountEntry) {
+    editingId = mount.id;
+    editLabel = mount.label || '';
+    editPath = mount.path;
+  }
+
+  async function saveEdit() {
+    if (!editingId) return;
+    try {
+      const res = await apiFetch(`/api/admin/mounts/${editingId}`, {
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ label: editLabel || undefined, path: editPath }),
+      });
+      if (!res.ok) return;
+      editingId = null;
+      await fetchMounts();
+    } catch { /* ignore */ }
+  }
+
+  async function deleteMount(id: string) {
+    try {
+      await apiFetch(`/api/admin/mounts/${id}`, { method: 'DELETE' });
+      deletingId = null;
+      await fetchMounts();
+    } catch { /* ignore */ }
+  }
+
+  async function toggleBrowse(id: string) {
+    if (browsingId === id) {
+      browsingId = null;
+      return;
+    }
+    browsingId = id;
+    browseError = null;
+    browseEntries = [];
+    try {
+      const res = await apiFetch(`/api/admin/mounts/${id}/browse`);
+      if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        browseError = body.error || 'Failed to browse';
+        return;
+      }
+      browseEntries = await res.json();
+    } catch {
+      browseError = 'Network error';
+    }
+  }
+
+  function statusColor(status: string): string {
+    return status === 'resolved' ? '#4caf50' : status === 'unresolved' ? '#ff9800' : '#f44336';
+  }
+
+  fetchMounts();
+</script>
+
+<svelte:window onkeydown={(e) => { if (e.key === 'Escape' && deletingId) deletingId = null; }} />
+
+<div class="admin-mounts">
+  <div class="admin-section-header">
+    <h2>Mounts</h2>
+    <button type="button" class="admin-btn" onclick={() => { showCreate = !showCreate; }}>
+      {showCreate ? 'Cancel' : 'New mount'}
+    </button>
+  </div>
+
+  {#if showCreate}
+    <form class="admin-create-form" onsubmit={(e) => { e.preventDefault(); createMount(); }}>
+      <input class="admin-input" type="text" placeholder="Mount ID (slug, e.g. game-assets)" bind:value={newId} />
+      <input class="admin-input" type="text" placeholder="Label (optional)" bind:value={newLabel} />
+      <input class="admin-input" type="text" placeholder="Absolute path on server" bind:value={newPath} />
+      <button type="submit" class="admin-btn" disabled={!newId.trim() || !newPath.trim()}>Create</button>
+      {#if createWarning}<div class="admin-warning">{createWarning}</div>{/if}
+      {#if createError}<div class="admin-error">{createError}</div>{/if}
+    </form>
+  {/if}
+
+  {#if loading}
+    <p class="admin-muted">Loading...</p>
+  {:else if error}
+    <p class="admin-error">{error}</p>
+  {:else}
+    <ul class="admin-mount-list">
+      {#each mounts as mount (mount.id)}
+        <li class="admin-mount-item">
+          <div class="admin-mount-main">
+            {#if editingId === mount.id}
+              <form class="admin-edit-form" onsubmit={(e) => { e.preventDefault(); saveEdit(); }}>
+                <input class="admin-input" type="text" bind:value={editLabel} placeholder="Label" />
+                <input class="admin-input" type="text" bind:value={editPath} placeholder="Path" />
+                <div class="admin-edit-actions">
+                  <button type="submit" class="admin-btn">Save</button>
+                  <button type="button" class="admin-btn-secondary" onclick={() => { editingId = null; }}>Cancel</button>
+                </div>
+              </form>
+            {:else}
+              <div class="admin-mount-info">
+                <div class="admin-mount-top">
+                  <span class="admin-status-dot" style="background: {statusColor(mount.status)}" title={mount.status}></span>
+                  <span class="admin-mount-name">{mount.label || mount.id}</span>
+                  <span class="admin-mount-id">{mount.id}</span>
+                </div>
+                <span class="admin-mount-path" title={mount.path}>{mount.path}</span>
+                <span class="admin-mount-meta">{mount.attachmentCount} tenant(s) attached</span>
+              </div>
+              <div class="admin-mount-actions">
+                <button type="button" class="admin-btn-secondary" onclick={() => toggleBrowse(mount.id)}>
+                  {browsingId === mount.id ? 'Close' : 'Browse'}
+                </button>
+                <button type="button" class="admin-btn-secondary" onclick={() => startEdit(mount)}>Edit</button>
+                <button type="button" class="admin-btn-danger" onclick={() => { deletingId = mount.id; }}>Delete</button>
+              </div>
+            {/if}
+          </div>
+
+          {#if browsingId === mount.id}
+            <div class="admin-mount-browse">
+              {#if browseError}
+                <p class="admin-error">{browseError}</p>
+              {:else if browseEntries.length === 0}
+                <p class="admin-muted">Empty directory</p>
+              {:else}
+                <ul class="admin-browse-list">
+                  {#each browseEntries as entry (entry.name)}
+                    <li class="admin-browse-item">
+                      <span class="admin-browse-kind">{entry.kind === 'directory' ? '[_]' : '[ ]'}</span>
+                      <span>{entry.name}</span>
+                      {#if entry.size !== undefined}
+                        <span class="admin-browse-size">{entry.size} B</span>
+                      {/if}
+                    </li>
+                  {/each}
+                </ul>
+              {/if}
+            </div>
+          {/if}
+        </li>
+      {/each}
+    </ul>
+  {/if}
+
+  {#if deletingId}
+    <div class="admin-modal-root">
+      <button
+        type="button"
+        class="admin-modal-backdrop"
+        aria-label="Close dialog"
+        onclick={() => { deletingId = null; }}
+      ></button>
+      <div class="admin-modal" role="dialog" aria-modal="true" aria-labelledby="delete-mount-title">
+        <h3 id="delete-mount-title">Delete Mount</h3>
+        <p>This will remove the mount and all its tenant attachments. This cannot be undone.</p>
+        <div class="admin-modal-actions">
+          <button type="button" class="admin-btn-danger" onclick={() => deleteMount(deletingId!)}>Delete</button>
+          <button type="button" class="admin-btn-secondary" onclick={() => { deletingId = null; }}>Cancel</button>
+        </div>
+      </div>
+    </div>
+  {/if}
+</div>
+
+<style>
+  .admin-mounts { padding: 24px; font-family: system-ui, sans-serif; color: var(--sh3-fg); }
+  .admin-section-header { display: flex; justify-content: space-between; align-items: center; margin-bottom: 16px; }
+  .admin-section-header h2 { margin: 0; font-size: 18px; }
+  .admin-create-form, .admin-edit-form { display: flex; flex-direction: column; gap: 8px; margin-bottom: 16px; max-width: 500px; }
+  .admin-input { padding: 8px 12px; background: var(--sh3-bg, #1a1a2e); color: var(--sh3-fg); border: 1px solid var(--sh3-border, #3a3a5c); border-radius: var(--sh3-radius, 6px); font-size: 13px; }
+  .admin-btn { font-weight: 600; font-size: 13px; }
+  .admin-btn:disabled { opacity: 0.6; cursor: not-allowed; }
+  .admin-btn-secondary { background: transparent; color: var(--sh3-fg-subtle); border: 1px solid var(--sh3-border); font-size: 12px; }
+  .admin-btn-danger { background: transparent; color: var(--sh3-error, #d32f2f); border: 1px solid var(--sh3-error, #d32f2f); font-size: 12px; }
+  .admin-mount-list { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 8px; }
+  .admin-mount-item { padding: 12px 16px; background: var(--sh3-bg-elevated, #252540); border: 1px solid var(--sh3-border, #3a3a5c); border-radius: var(--sh3-radius, 6px); }
+  .admin-mount-main { display: flex; justify-content: space-between; align-items: flex-start; }
+  .admin-mount-info { display: flex; flex-direction: column; gap: 4px; flex: 1; }
+  .admin-mount-top { display: flex; align-items: center; gap: 8px; }
+  .admin-status-dot { width: 8px; height: 8px; border-radius: 50%; flex-shrink: 0; }
+  .admin-mount-name { font-weight: 600; }
+  .admin-mount-id { font-size: 11px; color: var(--sh3-fg-subtle); font-family: monospace; }
+  .admin-mount-path { font-size: 12px; font-family: monospace; color: var(--sh3-fg-subtle); word-break: break-all; }
+  .admin-mount-meta { font-size: 11px; color: var(--sh3-fg-muted); }
+  .admin-mount-actions { display: flex; gap: 6px; flex-shrink: 0; margin-left: 16px; }
+  .admin-edit-actions { display: flex; gap: 6px; }
+  .admin-mount-browse { margin-top: 12px; padding: 12px; background: var(--sh3-bg, #1a1a2e); border-radius: var(--sh3-radius, 6px); max-height: 200px; overflow-y: auto; }
+  .admin-browse-list { list-style: none; margin: 0; padding: 0; display: flex; flex-direction: column; gap: 2px; }
+  .admin-browse-item { display: flex; gap: 8px; font-size: 12px; font-family: monospace; }
+  .admin-browse-kind { color: var(--sh3-fg-subtle); width: 24px; }
+  .admin-browse-size { color: var(--sh3-fg-muted); margin-left: auto; }
+  .admin-modal-root { position: fixed; inset: 0; display: flex; align-items: center; justify-content: center; z-index: 100; }
+  .admin-modal-backdrop { position: absolute; inset: 0; background: rgba(0,0,0,0.6); border: none; padding: 0; margin: 0; cursor: pointer; }
+  .admin-modal { position: relative; background: var(--sh3-bg-elevated, #252540); border: 1px solid var(--sh3-border, #3a3a5c); border-radius: var(--sh3-radius, 8px); padding: 24px; max-width: 400px; width: 100%; }
+  .admin-modal h3 { margin: 0 0 8px; }
+  .admin-modal p { margin: 0 0 16px; font-size: 13px; color: var(--sh3-fg-subtle); }
+  .admin-modal-actions { display: flex; gap: 8px; justify-content: flex-end; }
+  .admin-error { color: var(--sh3-error, #d32f2f); font-size: 13px; }
+  .admin-warning { color: #ff9800; font-size: 13px; }
+  .admin-muted { color: var(--sh3-fg-muted); font-style: italic; }
+</style>

package/dist/app/admin/MountsView.svelte.d.ts

@@ -0,0 +1,3 @@
+declare const MountsView: import("svelte").Component<Record<string, never>, {}, "">;
+type MountsView = ReturnType<typeof MountsView>;
+export default MountsView;

package/dist/app/admin/SystemView.svelte

@@ -3,6 +3,8 @@
    * Admin System view — server status, restart, and package-bundle cache policy.
    */
 
+  import { apiFetch } from '../../transport/apiFetch';
+
   const SNAP_POINTS: Array<{ value: number; label: string }> = [
     { value: 0, label: 'Off (no-store)' },
     { value: 5, label: '5s (dev)' },
@@ -35,7 +37,7 @@
 
   async function fetchVersion() {
     try {
-      const res = await fetch('/api/version');
+      const res = await apiFetch('/api/version');
       if (res.ok) {
         const body = await res.json();
         version = body.version;
@@ -45,7 +47,7 @@
 
   async function fetchSettings() {
     try {
-      const res = await fetch('/api/admin/settings', { credentials: 'include' });
+      const res = await apiFetch('/api/admin/settings');
       if (res.ok) {
         const body = await res.json();
         const age = body.packages?.cacheMaxAge ?? 31536000;
@@ -59,9 +61,8 @@
     savingCache = true;
     cacheError = null;
     try {
-      const res = await fetch('/api/admin/settings', {
+      const res = await apiFetch('/api/admin/settings', {
         method: 'PUT',
-        credentials: 'include',
         headers: { 'Content-Type': 'application/json' },
         body: JSON.stringify({ packages: { cacheMaxAge } }),
       });
@@ -84,9 +85,8 @@
     restarting = true;
     restartError = null;
     try {
-      const res = await fetch('/api/admin/restart', {
+      const res = await apiFetch('/api/admin/restart', {
         method: 'POST',
-        credentials: 'include',
       });
       if (!res.ok) {
         const body = await res.json().catch(() => ({}));

package/dist/app/admin/UsersView.svelte

@@ -4,6 +4,7 @@
    */
 
   import type { AuthUser } from '../../auth/types';
+  import { apiFetch } from '../../transport/apiFetch';
 
   let users = $state<AuthUser[]>([]);
   let loading = $state(true);
@@ -23,11 +24,54 @@
   let editRole = $state<'admin' | 'user'>('user');
   let editPassword = $state('');
 
+  // Mount attachment state
+  let mountModalUser = $state<AuthUser | null>(null);
+  let allMounts = $state<{ id: string; label?: string; status: string }[]>([]);
+  let attachedMountIds = $state<Set<string>>(new Set());
+  let mountLoading = $state(false);
+
+  async function openMountModal(user: AuthUser) {
+    mountModalUser = user;
+    mountLoading = true;
+    try {
+      const [mountsRes, attRes] = await Promise.all([
+        apiFetch('/api/admin/mounts'),
+        apiFetch(`/api/admin/tenants/${user.id}/attachments`),
+      ]);
+      allMounts = mountsRes.ok ? await mountsRes.json() : [];
+      const atts: { mountId: string }[] = attRes.ok ? await attRes.json() : [];
+      attachedMountIds = new Set(atts.map(a => a.mountId));
+    } catch { /* ignore */ }
+    mountLoading = false;
+  }
+
+  async function toggleMountAttachment(mountId: string) {
+    if (!mountModalUser) return;
+    const wasAttached = attachedMountIds.has(mountId);
+    try {
+      if (wasAttached) {
+        await apiFetch('/api/admin/mount-attachments', {
+          method: 'DELETE',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ mountId, tenantId: mountModalUser.id }),
+        });
+        attachedMountIds = new Set([...attachedMountIds].filter(id => id !== mountId));
+      } else {
+        await apiFetch('/api/admin/mount-attachments', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ mountId, tenantId: mountModalUser.id }),
+        });
+        attachedMountIds = new Set([...attachedMountIds, mountId]);
+      }
+    } catch { /* ignore */ }
+  }
+
   async function fetchUsers() {
     loading = true;
     error = null;
     try {
-      const res = await fetch('/api/admin/users', { credentials: 'include' });
+      const res = await apiFetch('/api/admin/users');
       if (!res.ok) throw new Error('Failed to fetch users');
       users = await res.json();
     } catch (err) {
@@ -40,10 +84,9 @@
   async function createUser() {
     createError = null;
     try {
-      const res = await fetch('/api/admin/users', {
+      const res = await apiFetch('/api/admin/users', {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
-        credentials: 'include',
         body: JSON.stringify({
           username: newUsername,
           displayName: newDisplayName || newUsername,
@@ -82,10 +125,9 @@
     };
     if (editPassword.trim()) patch.password = editPassword;
     try {
-      const res = await fetch(`/api/admin/users/${editingId}`, {
+      const res = await apiFetch(`/api/admin/users/${editingId}`, {
         method: 'PUT',
         headers: { 'Content-Type': 'application/json' },
-        credentials: 'include',
         body: JSON.stringify(patch),
       });
       if (!res.ok) return;
@@ -96,9 +138,8 @@
 
   async function deleteUser(id: string) {
     try {
-      await fetch(`/api/admin/users/${id}`, {
+      await apiFetch(`/api/admin/users/${id}`, {
         method: 'DELETE',
-        credentials: 'include',
       });
       await fetchUsers();
     } catch { /* ignore */ }
@@ -107,6 +148,8 @@
   fetchUsers();
 </script>
 
+<svelte:window onkeydown={(e) => { if (e.key === 'Escape' && mountModalUser) mountModalUser = null; }} />
+
 <div class="admin-users">
   <div class="admin-users-header">
     <h2>Users</h2>
@@ -156,6 +199,7 @@
               <span class="admin-user-meta">{user.username} · {user.role}</span>
             </div>
             <div class="admin-user-actions">
+              <button type="button" class="admin-btn-secondary" onclick={() => openMountModal(user)}>Mounts</button>
               <button type="button" class="admin-btn-secondary" onclick={() => startEdit(user)}>Edit</button>
               <button type="button" class="admin-btn-danger" onclick={() => deleteUser(user.id)}>Delete</button>
             </div>
@@ -164,6 +208,46 @@
       {/each}
     </ul>
   {/if}
+
+  {#if mountModalUser}
+    <div class="admin-modal-root">
+      <button
+        type="button"
+        class="admin-modal-backdrop"
+        aria-label="Close dialog"
+        onclick={() => { mountModalUser = null; }}
+      ></button>
+      <div class="admin-modal" role="dialog" aria-modal="true" aria-labelledby="mount-modal-title">
+        <h3 id="mount-modal-title">Mount Attachments for {mountModalUser.displayName}</h3>
+        {#if mountLoading}
+          <p class="admin-muted">Loading...</p>
+        {:else if allMounts.length === 0}
+          <p class="admin-muted">No mounts configured. Create mounts first.</p>
+        {:else}
+          <ul class="admin-mount-checklist">
+            {#each allMounts as mount (mount.id)}
+              <li class="admin-mount-checklist-item">
+                <label class="admin-checklist-label">
+                  <input
+                    class="sh3-base-check"
+                    type="checkbox"
+                    checked={attachedMountIds.has(mount.id)}
+                    onchange={() => toggleMountAttachment(mount.id)}
+                  />
+                  <span class="admin-status-dot" style="background: {mount.status === 'resolved' ? '#4caf50' : mount.status === 'unresolved' ? '#ff9800' : '#f44336'}"></span>
+                  <span>{mount.label || mount.id}</span>
+                  <span class="admin-mount-id">{mount.id}</span>
+                </label>
+              </li>
+            {/each}
+          </ul>
+        {/if}
+        <div class="admin-modal-actions">
+          <button type="button" class="admin-btn" onclick={() => { mountModalUser = null; }}>Close</button>
+        </div>
+      </div>
+    </div>
+  {/if}
 </div>
 
 <style>
@@ -185,4 +269,16 @@
   .admin-edit-actions { display: flex; gap: 6px; }
   .admin-error { color: var(--sh3-error, #d32f2f); font-size: 13px; }
   .admin-muted { color: var(--sh3-fg-muted); font-style: italic; }
+  .admin-mount-checklist { list-style: none; margin: 0 0 16px; padding: 0; display: flex; flex-direction: column; gap: 4px; }
+  .admin-mount-checklist-item { padding: 8px 0; border-bottom: 1px solid var(--sh3-border, #3a3a5c); }
+  .admin-checklist-label { display: flex; align-items: center; gap: 8px; cursor: pointer; font-size: 13px; }
+  .admin-checklist-label input[type="checkbox"] { cursor: pointer; }
+  .admin-status-dot { width: 8px; height: 8px; border-radius: 50%; flex-shrink: 0; }
+  .admin-modal-root { position: fixed; inset: 0; display: flex; align-items: center; justify-content: center; z-index: 100; }
+  .admin-modal-backdrop { position: absolute; inset: 0; background: rgba(0,0,0,0.6); border: none; padding: 0; margin: 0; cursor: pointer; }
+  .admin-modal { position: relative; background: var(--sh3-bg-elevated, #252540); border: 1px solid var(--sh3-border, #3a3a5c); border-radius: var(--sh3-radius, 8px); padding: 24px; max-width: 400px; width: 100%; }
+  .admin-modal h3 { margin: 0 0 8px; }
+  .admin-modal p { margin: 0 0 16px; font-size: 13px; color: var(--sh3-fg-subtle); }
+  .admin-modal-actions { display: flex; gap: 8px; justify-content: flex-end; }
+  .admin-mount-id { font-size: 11px; color: var(--sh3-fg-subtle); font-family: monospace; margin-left: auto; }
 </style>

package/dist/app/admin/adminApp.js

@@ -21,6 +21,7 @@ export const adminApp = {
             { slotId: 'admin.auth', viewId: 'sh3-admin:auth', label: 'Auth' },
             { slotId: 'admin.system', viewId: 'sh3-admin:system', label: 'System' },
             { slotId: 'admin.keys', viewId: 'sh3-admin:keys', label: 'Keys' },
+            { slotId: 'admin.mounts', viewId: 'sh3-admin:mounts', label: 'Mounts' },
         ],
     },
 };

package/dist/app/admin/adminShard.svelte.js

@@ -15,6 +15,7 @@ import UsersView from './UsersView.svelte';
 import AuthSettingsView from './AuthSettingsView.svelte';
 import SystemView from './SystemView.svelte';
 import ApiKeysView from './ApiKeysView.svelte';
+import MountsView from './MountsView.svelte';
 import { VERSION } from '../../version';
 /** Module-level server URL, set during activate. */
 export let adminServerUrl = '';
@@ -23,11 +24,13 @@ export const adminShard = {
         id: 'sh3-admin',
         label: 'Admin',
         version: VERSION,
+        permissions: ['documents:mount'],
         views: [
             { id: 'sh3-admin:users', label: 'Users' },
             { id: 'sh3-admin:auth', label: 'Auth Settings' },
             { id: 'sh3-admin:system', label: 'System' },
             { id: 'sh3-admin:keys', label: 'API Keys' },
+            { id: 'sh3-admin:mounts', label: 'Mounts' },
         ],
     },
     activate(ctx) {
@@ -55,9 +58,16 @@ export const adminShard = {
                 return { unmount() { unmount(instance); } };
             },
         };
+        const mountsFactory = {
+            mount(container, _context) {
+                const instance = mount(MountsView, { target: container });
+                return { unmount() { unmount(instance); } };
+            },
+        };
         ctx.registerView('sh3-admin:users', usersFactory);
         ctx.registerView('sh3-admin:auth', authFactory);
         ctx.registerView('sh3-admin:system', systemFactory);
         ctx.registerView('sh3-admin:keys', keysFactory);
+        ctx.registerView('sh3-admin:mounts', mountsFactory);
     },
 };

package/dist/apps/lifecycle.js

@@ -69,6 +69,7 @@ function getOrCreateAppContext(appId, scopeId, args) {
         const scope = scopeId !== null && scopeId !== void 0 ? scopeId : resolveLaunchScope();
         ctx = {
             scopeId: scope,
+            getScope: () => sessionState.activeProjectId ? 'project' : 'tenant',
             args: args !== null && args !== void 0 ? args : {},
             state: (schema) => createStateZones(`__app__:${appId}:scope:${scope}`, schema),
             zones: ((_a = app === null || app === void 0 ? void 0 : app.manifest.permissions) === null || _a === void 0 ? void 0 : _a.includes(PERMISSION_STATE_MANAGE))

package/dist/apps/types.d.ts

@@ -96,6 +96,13 @@ export interface AppContext {
      * scope and cannot reach across scopes — exiting a scope unloads the app.
      */
     scopeId: string;
+    /**
+     * Whether this app instance is running in a 'tenant' (personal) or 'project'
+     * scope. Determined at launch time from session state; the app's document
+     * handles and state zones are bound to this scope for their lifetime.
+     * Returns 'tenant' when no project is active, 'project' otherwise.
+     */
+    getScope(): 'tenant' | 'project';
     /**
      * Arguments supplied by the caller at launch time via `LaunchAppOptions.args`.
      * Defaults to `{}` when the app is launched without explicit args.

package/dist/assets/iconIds.generated.d.ts

@@ -1,2 +1,2 @@
-export declare const ICON_IDS: readonly ["activity", "align-horizontal-justify-center", "align-horizontal-justify-end", "align-horizontal-justify-start", "app-window", "archive", "archive-restore", "axis-3d", "box", "brick-wall", "bug", "building-2", "cable", "calendar", "camera", "check", "chevron-down", "chevron-right", "circle-check", "circle-dot", "circle-minus", "circle-x", "clipboard", "clipboard-paste", "clock", "command", "compass", "component", "copy", "cpu", "crop", "crosshair", "crown", "dollar-sign", "download", "droplet", "ellipsis-vertical", "eraser", "euro", "external-link", "eye", "eye-off", "file", "file-archive", "file-diff", "file-plus", "file-text", "flame", "flip-horizontal-2", "flip-vertical-2", "folder", "folder-open", "folder-plus", "folder-tree", "gallery-vertical-end", "gamepad-2", "gauge", "gem", "git-branch", "git-commit-horizontal", "git-merge", "globe", "grid-2x2", "grid-3x3", "group", "hard-drive", "heart", "history", "house", "image", "info", "joystick", "key", "layers", "layout-dashboard", "layout-grid", "layout-list", "layout-panel-left", "layout-panel-top", "layout-template", "lightbulb", "link", "list-ordered", "list-tree", "lock", "log-out", "magnet", "mail", "map", "maximize", "menu", "minimize", "moon", "mouse-pointer", "move", "move-3d", "music", "navigation", "network", "notebook-pen", "palette", "panel-right", "panel-top", "pause", "pencil", "pipette", "play", "plus", "pointer", "pound-sterling", "receipt", "redo-2", "refresh-cw", "rocket", "rotate-3d", "rotate-ccw", "rotate-cw", "ruler", "save", "scissors", "scroll-text", "search", "send", "server", "settings", "shield", "skull", "sliders-horizontal", "snowflake", "sparkles", "square", "square-terminal", "star", "sun", "sword", "table-properties", "target", "texture", "timer", "trash-2", "triangle-alert", "type", "undo-2", "ungroup", "unity", "upload", "user", "users", "video", "volume-2", "wand-sparkles", "wind", "x", "zap", "zoom-in", "zoom-out"];
+export declare const ICON_IDS: readonly ["activity", "align-horizontal-justify-center", "align-horizontal-justify-end", "align-horizontal-justify-start", "app-window", "archive", "archive-restore", "axis-3d", "box", "brick-wall", "bug", "building-2", "cable", "calendar", "camera", "check", "chevron-down", "chevron-left", "chevron-right", "circle-check", "circle-dot", "circle-minus", "circle-x", "clipboard", "clipboard-paste", "clock", "command", "compass", "component", "copy", "cpu", "crop", "crosshair", "crown", "dollar-sign", "download", "droplet", "ellipsis-vertical", "eraser", "euro", "external-link", "eye", "eye-off", "file", "file-archive", "file-diff", "file-plus", "file-text", "flame", "flip-horizontal-2", "flip-vertical-2", "folder", "folder-open", "folder-plus", "folder-tree", "gallery-vertical-end", "gamepad-2", "gauge", "gem", "git-branch", "git-commit-horizontal", "git-merge", "globe", "grid-2x2", "grid-3x3", "group", "hard-drive", "heart", "history", "house", "image", "info", "joystick", "key", "layers", "layout-dashboard", "layout-grid", "layout-list", "layout-panel-left", "layout-panel-top", "layout-template", "lightbulb", "link", "list-ordered", "list-tree", "lock", "log-out", "magnet", "mail", "map", "maximize", "menu", "minimize", "moon", "mouse-pointer", "move", "move-3d", "music", "navigation", "network", "notebook-pen", "palette", "panel-right", "panel-top", "pause", "pencil", "pipette", "play", "plus", "pointer", "pound-sterling", "receipt", "redo-2", "refresh-cw", "rocket", "rotate-3d", "rotate-ccw", "rotate-cw", "ruler", "save", "scissors", "scroll-text", "search", "send", "server", "settings", "shield", "skull", "sliders-horizontal", "snowflake", "sparkles", "square", "square-terminal", "star", "sun", "sword", "table-properties", "target", "texture", "timer", "trash-2", "triangle-alert", "type", "undo-2", "ungroup", "unity", "upload", "user", "users", "video", "volume-2", "wand-sparkles", "wind", "x", "zap", "zoom-in", "zoom-out"];
 export type IconId = (typeof ICON_IDS)[number];

package/dist/assets/iconIds.generated.js

@@ -17,6 +17,7 @@ export const ICON_IDS = [
     'camera',
     'check',
     'chevron-down',
+    'chevron-left',
     'chevron-right',
     'circle-check',
     'circle-dot',

package/dist/assets/icons.svg

@@ -1159,4 +1159,9 @@
     <circle cx="12" cy="19" r="1" />
   </symbol>
 
+  <!-- lucide/chevron-left -->
+  <symbol id="chevron-left" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+    <path d="m15 18-6-6 6-6" />
+  </symbol>
+
 </svg>