sh3-core 0.19.6 → 0.20.2

package/dist/projects-shard/ProjectManage.svelte.test.js

@@ -0,0 +1,320 @@
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { mount, unmount, tick } from 'svelte';
+import ProjectManage from './ProjectManage.svelte';
+import { __resetAdminUsersForTest } from '../auth/admin-users.svelte';
+let host;
+let cmp = null;
+let originalFetch;
+function makeProject(overrides = {}) {
+    return Object.assign({ id: 'acme-1234', name: 'Acme', description: '', members: ['user-1'], appAllowlist: [], createdBy: 'user-1', createdAt: 0, updatedAt: 0 }, overrides);
+}
+beforeEach(() => {
+    __resetAdminUsersForTest();
+    host = document.createElement('div');
+    document.body.appendChild(host);
+    originalFetch = globalThis.fetch;
+    globalThis.fetch = vi.fn(async (input) => {
+        const url = String(input);
+        if (url.endsWith('/api/admin/mounts'))
+            return new Response('[]', { status: 200 });
+        if (url.includes('/api/admin/tenants/'))
+            return new Response('[]', { status: 200 });
+        if (url.endsWith('/api/admin/users'))
+            return new Response('[]', { status: 200 });
+        return new Response('null', { status: 200 });
+    });
+});
+afterEach(() => {
+    if (cmp) {
+        unmount(cmp);
+        cmp = null;
+    }
+    host.remove();
+    globalThis.fetch = originalFetch;
+});
+describe('ProjectManage tabs', () => {
+    it('renders three tabs: Apps, Users, Mounts', async () => {
+        cmp = mount(ProjectManage, {
+            target: host,
+            props: { project: makeProject(), onClose: () => { } },
+        });
+        await tick();
+        const labels = Array.from(host.querySelectorAll('[role="tab"]')).map((el) => { var _a, _b; return (_b = (_a = el.textContent) === null || _a === void 0 ? void 0 : _a.trim()) !== null && _b !== void 0 ? _b : ''; });
+        expect(labels).toEqual(['Apps', 'Users', 'Mounts']);
+    });
+});
+describe('ProjectManage mount fetch', () => {
+    it('on edit open, fetches /api/admin/mounts and the project attachments', async () => {
+        const calls = [];
+        globalThis.fetch = vi.fn(async (input) => {
+            const url = String(input);
+            calls.push(url);
+            if (url.endsWith('/api/admin/users'))
+                return new Response('[]', { status: 200 });
+            if (url.endsWith('/api/admin/mounts')) {
+                return new Response(JSON.stringify([
+                    { id: 'assets', label: 'Assets', status: 'resolved' },
+                    { id: 'pkgs', label: 'Packages', status: 'unresolved' },
+                ]), { status: 200 });
+            }
+            if (url.endsWith('/api/admin/tenants/acme-1234/attachments')) {
+                return new Response(JSON.stringify([{ mountId: 'assets', tenantId: 'acme-1234', attachedAt: '' }]), { status: 200 });
+            }
+            return new Response('null', { status: 200 });
+        });
+        cmp = mount(ProjectManage, {
+            target: host,
+            props: { project: makeProject({ id: 'acme-1234' }), onClose: () => { } },
+        });
+        await tick();
+        await new Promise((r) => setTimeout(r, 0));
+        expect(calls).toContain('/api/admin/mounts');
+        expect(calls).toContain('/api/admin/tenants/acme-1234/attachments');
+    });
+    it('on create (no project), does NOT fetch tenant attachments', async () => {
+        const calls = [];
+        globalThis.fetch = vi.fn(async (input) => {
+            const url = String(input);
+            calls.push(url);
+            if (url.endsWith('/api/admin/users'))
+                return new Response('[]', { status: 200 });
+            if (url.endsWith('/api/admin/mounts'))
+                return new Response('[]', { status: 200 });
+            return new Response('null', { status: 200 });
+        });
+        cmp = mount(ProjectManage, {
+            target: host,
+            props: { project: null, onClose: () => { } },
+        });
+        await tick();
+        await new Promise((r) => setTimeout(r, 0));
+        expect(calls).toContain('/api/admin/mounts');
+        expect(calls.some((c) => c.includes('/api/admin/tenants/'))).toBe(false);
+    });
+});
+describe('ProjectManage mount list', () => {
+    it('renders one checkbox per mount with attached state seeded from server', async () => {
+        globalThis.fetch = vi.fn(async (input) => {
+            const url = String(input);
+            if (url.endsWith('/api/admin/users'))
+                return new Response('[]', { status: 200 });
+            if (url.endsWith('/api/admin/mounts')) {
+                return new Response(JSON.stringify([
+                    { id: 'assets', label: 'Assets', status: 'resolved' },
+                    { id: 'pkgs', label: 'Packages', status: 'resolved' },
+                ]), { status: 200 });
+            }
+            if (url.endsWith('/api/admin/tenants/acme-1234/attachments')) {
+                return new Response(JSON.stringify([
+                    { mountId: 'assets', tenantId: 'acme-1234', attachedAt: '' },
+                ]), { status: 200 });
+            }
+            return new Response('null', { status: 200 });
+        });
+        cmp = mount(ProjectManage, {
+            target: host,
+            props: { project: makeProject({ id: 'acme-1234' }), onClose: () => { } },
+        });
+        await tick();
+        await new Promise((r) => setTimeout(r, 0));
+        await tick();
+        const tabs = host.querySelectorAll('[role="tab"]');
+        tabs[2].click();
+        await tick();
+        const rows = host.querySelectorAll('[data-mount-row]');
+        expect(rows.length).toBe(2);
+        const assetsCb = host.querySelector('[data-mount-row="assets"] input[type="checkbox"]');
+        const pkgsCb = host.querySelector('[data-mount-row="pkgs"] input[type="checkbox"]');
+        expect(assetsCb.checked).toBe(true);
+        expect(pkgsCb.checked).toBe(false);
+    });
+    it('toggling a checkbox mutates mountAttached', async () => {
+        globalThis.fetch = vi.fn(async (input) => {
+            const url = String(input);
+            if (url.endsWith('/api/admin/users'))
+                return new Response('[]', { status: 200 });
+            if (url.endsWith('/api/admin/mounts')) {
+                return new Response(JSON.stringify([
+                    { id: 'assets', label: 'Assets', status: 'resolved' },
+                ]), { status: 200 });
+            }
+            if (url.includes('/api/admin/tenants/'))
+                return new Response('[]', { status: 200 });
+            return new Response('null', { status: 200 });
+        });
+        cmp = mount(ProjectManage, {
+            target: host,
+            props: { project: makeProject({ id: 'acme-1234' }), onClose: () => { } },
+        });
+        await tick();
+        await new Promise((r) => setTimeout(r, 0));
+        await tick();
+        const tabs = host.querySelectorAll('[role="tab"]');
+        tabs[2].click();
+        await tick();
+        const cb = host.querySelector('[data-mount-row="assets"] input[type="checkbox"]');
+        expect(cb.checked).toBe(false);
+        cb.click();
+        await tick();
+        expect(cb.checked).toBe(true);
+    });
+});
+describe('ProjectManage dirty indicators', () => {
+    it('shows the dirty dot on the Mounts tab after toggling a checkbox', async () => {
+        globalThis.fetch = vi.fn(async (input) => {
+            const url = String(input);
+            if (url.endsWith('/api/admin/users'))
+                return new Response('[]', { status: 200 });
+            if (url.endsWith('/api/admin/mounts')) {
+                return new Response(JSON.stringify([
+                    { id: 'assets', label: 'Assets', status: 'resolved' },
+                ]), { status: 200 });
+            }
+            if (url.includes('/api/admin/tenants/'))
+                return new Response('[]', { status: 200 });
+            return new Response('null', { status: 200 });
+        });
+        cmp = mount(ProjectManage, {
+            target: host,
+            props: { project: makeProject({ id: 'acme-1234' }), onClose: () => { } },
+        });
+        await tick();
+        await new Promise((r) => setTimeout(r, 0));
+        await tick();
+        const tabs = host.querySelectorAll('[role="tab"]');
+        expect(host.querySelectorAll('.tab-dirty').length).toBe(0);
+        tabs[2].click();
+        await tick();
+        const cb = host.querySelector('[data-mount-row="assets"] input[type="checkbox"]');
+        cb.click();
+        await tick();
+        const dirtyDot = tabs[2].querySelector('.tab-dirty');
+        expect(dirtyDot).not.toBeNull();
+        expect(tabs[0].querySelector('.tab-dirty')).toBeNull();
+        expect(tabs[1].querySelector('.tab-dirty')).toBeNull();
+    });
+});
+describe('ProjectManage save mount diff', () => {
+    it('on edit save, fires POST for added mounts and DELETE for removed mounts', async () => {
+        const calls = [];
+        globalThis.fetch = vi.fn(async (input, init) => {
+            var _a;
+            const url = String(input);
+            const method = ((_a = init === null || init === void 0 ? void 0 : init.method) !== null && _a !== void 0 ? _a : 'GET').toUpperCase();
+            const body = (init === null || init === void 0 ? void 0 : init.body) ? JSON.parse(init.body) : undefined;
+            calls.push({ method, url, body });
+            if (url.endsWith('/api/admin/users'))
+                return new Response('[]', { status: 200 });
+            if (method === 'GET' && url.endsWith('/api/admin/mounts')) {
+                return new Response(JSON.stringify([
+                    { id: 'assets', label: 'Assets', status: 'resolved' },
+                    { id: 'pkgs', label: 'Packages', status: 'resolved' },
+                ]), { status: 200 });
+            }
+            if (method === 'GET' && url.endsWith('/api/admin/tenants/acme-1234/attachments')) {
+                return new Response(JSON.stringify([
+                    { mountId: 'assets', tenantId: 'acme-1234', attachedAt: '' },
+                ]), { status: 200 });
+            }
+            if (method === 'PATCH' && url === '/api/projects/acme-1234') {
+                return new Response(JSON.stringify({ id: 'acme-1234', name: 'Acme', members: ['user-1'], appAllowlist: [], createdBy: 'user-1', createdAt: 0, updatedAt: 1 }), { status: 200 });
+            }
+            if (url === '/api/admin/mount-attachments') {
+                return new Response('{}', { status: method === 'DELETE' ? 204 : 201 });
+            }
+            if (method === 'GET' && url === '/api/projects') {
+                return new Response(JSON.stringify({ projects: [] }), { status: 200 });
+            }
+            return new Response('null', { status: 200 });
+        });
+        cmp = mount(ProjectManage, {
+            target: host,
+            props: { project: makeProject({ id: 'acme-1234' }), onClose: () => { } },
+        });
+        await tick();
+        await new Promise((r) => setTimeout(r, 0));
+        await tick();
+        const tabs = host.querySelectorAll('[role="tab"]');
+        tabs[2].click();
+        await tick();
+        host.querySelector('[data-mount-row="assets"] input').click();
+        await tick();
+        host.querySelector('[data-mount-row="pkgs"] input').click();
+        await tick();
+        const saveBtn = Array.from(host.querySelectorAll('button.primary'))[0];
+        saveBtn.click();
+        await tick();
+        await new Promise((r) => setTimeout(r, 0));
+        await tick();
+        const patchIdx = calls.findIndex((c) => c.method === 'PATCH' && c.url === '/api/projects/acme-1234');
+        const attachCalls = calls.filter((c) => c.url === '/api/admin/mount-attachments');
+        expect(patchIdx).toBeGreaterThanOrEqual(0);
+        expect(attachCalls.length).toBe(2);
+        const post = attachCalls.find((c) => c.method === 'POST');
+        const del = attachCalls.find((c) => c.method === 'DELETE');
+        expect(post === null || post === void 0 ? void 0 : post.body).toEqual({ mountId: 'pkgs', tenantId: 'acme-1234' });
+        expect(del === null || del === void 0 ? void 0 : del.body).toEqual({ mountId: 'assets', tenantId: 'acme-1234' });
+    });
+    it('on save with no mount diff, fires zero attachment calls', async () => {
+        const calls = [];
+        globalThis.fetch = vi.fn(async (input, init) => {
+            var _a;
+            const url = String(input);
+            const method = ((_a = init === null || init === void 0 ? void 0 : init.method) !== null && _a !== void 0 ? _a : 'GET').toUpperCase();
+            calls.push({ method, url });
+            if (url.endsWith('/api/admin/users'))
+                return new Response('[]', { status: 200 });
+            if (method === 'GET' && url.endsWith('/api/admin/mounts')) {
+                return new Response(JSON.stringify([{ id: 'assets', label: 'Assets', status: 'resolved' }]), { status: 200 });
+            }
+            if (method === 'GET' && url.endsWith('/api/admin/tenants/acme-1234/attachments')) {
+                return new Response(JSON.stringify([{ mountId: 'assets', tenantId: 'acme-1234', attachedAt: '' }]), { status: 200 });
+            }
+            if (method === 'PATCH' && url === '/api/projects/acme-1234') {
+                return new Response(JSON.stringify({ id: 'acme-1234', name: 'Acme', members: ['user-1'], appAllowlist: [], createdBy: 'user-1', createdAt: 0, updatedAt: 1 }), { status: 200 });
+            }
+            if (method === 'GET' && url === '/api/projects') {
+                return new Response(JSON.stringify({ projects: [] }), { status: 200 });
+            }
+            return new Response('null', { status: 200 });
+        });
+        cmp = mount(ProjectManage, {
+            target: host,
+            props: { project: makeProject({ id: 'acme-1234' }), onClose: () => { } },
+        });
+        await tick();
+        await new Promise((r) => setTimeout(r, 0));
+        await tick();
+        const saveBtn = host.querySelector('button.primary');
+        saveBtn.click();
+        await tick();
+        await new Promise((r) => setTimeout(r, 0));
+        await tick();
+        expect(calls.some((c) => c.url === '/api/admin/mount-attachments')).toBe(false);
+    });
+});
+describe('ProjectManage mount empty state', () => {
+    it('shows the empty message when no mounts are configured', async () => {
+        globalThis.fetch = vi.fn(async (input) => {
+            const url = String(input);
+            if (url.endsWith('/api/admin/users'))
+                return new Response('[]', { status: 200 });
+            if (url.endsWith('/api/admin/mounts'))
+                return new Response('[]', { status: 200 });
+            if (url.includes('/api/admin/tenants/'))
+                return new Response('[]', { status: 200 });
+            return new Response('null', { status: 200 });
+        });
+        cmp = mount(ProjectManage, {
+            target: host,
+            props: { project: makeProject({ id: 'acme-1234' }), onClose: () => { } },
+        });
+        await tick();
+        await new Promise((r) => setTimeout(r, 0));
+        await tick();
+        const tabs = host.querySelectorAll('[role="tab"]');
+        tabs[2].click();
+        await tick();
+        expect(host.textContent).toContain('No mounts configured. Create mounts first.');
+    });
+});

package/dist/projects-shard/ProjectsSection.svelte

@@ -11,6 +11,7 @@
   import { projectsState, openProjectManage } from './projectsShard.svelte';
   import { sessionState, setActiveProjectId } from '../projects/session-state.svelte';
   import { isAdmin } from '../auth/auth.svelte';
+  import HomeSection from '../sh3core-shard/HomeSection.svelte';
 
   const visible = $derived(projectsState.projects.length > 0);
   const activeId = $derived(sessionState.activeProjectId);
@@ -28,8 +29,7 @@
 </script>
 
 {#if visible}
-  <section class="projects-section">
-    <h2 class="projects-heading">Projects</h2>
+  <HomeSection title="Projects" persistKey="projects">
     <div class="projects-grid">
       {#each projectsState.projects as project (project.id)}
         <div class="project-card-wrap">
@@ -55,23 +55,10 @@
         </div>
       {/each}
     </div>
-  </section>
+  </HomeSection>
 {/if}
 
 <style>
-  .projects-section {
-    width: 100%;
-    max-width: 720px;
-    margin-bottom: 28px;
-  }
-  .projects-heading {
-    font-size: 13px;
-    font-weight: 600;
-    text-transform: uppercase;
-    letter-spacing: 0.06em;
-    color: var(--sh3-fg-subtle);
-    margin: 0 0 12px;
-  }
   .projects-grid {
     display: grid;
     grid-template-columns: repeat(auto-fill, minmax(160px, 1fr));

package/dist/projects-shard/projectsApi.js

@@ -4,9 +4,10 @@
  * Returns plain JSON objects; the shard layer is responsible for keeping
  * a reactive copy and for converting these to actions / views.
  */
+import { apiFetch } from '../transport/apiFetch';
 async function jsonFetch(url, init) {
     var _a;
-    const res = await fetch(url, Object.assign({ credentials: 'include' }, init));
+    const res = await apiFetch(url, init);
     if (!res.ok)
         throw new Error(`${(_a = init === null || init === void 0 ? void 0 : init.method) !== null && _a !== void 0 ? _a : 'GET'} ${url} failed: ${res.status}`);
     return res.json();

package/dist/registry/permission-descriptions.js

@@ -27,6 +27,10 @@ export const PERMISSION_DESCRIPTIONS = {
         title: 'Sync documents with peers',
         description: 'Participate in cross-peer document synchronization.',
     },
+    'documents:mount': {
+        title: 'Manage document mounts',
+        description: 'Define and manage filesystem mount points that feed into the document API.',
+    },
     'sync:peer': {
         title: 'Act as a sync peer',
         description: 'Exchange document updates with remote peers.',

package/dist/server-shard/types.d.ts

@@ -95,6 +95,27 @@ export interface ServerShardContext {
      * Absent => 'primary' behavior at the store.
      */
     setPeerRole(tenant: string, role: 'primary' | 'replica'): void;
+    /**
+     * Translate an SH3 document path to a real filesystem path on the host.
+     *
+     * Symmetric with `documents(tenant)` — the same `(shardId, path)` pair
+     * resolves through both APIs. Use this when a server shard needs to
+     * hand the path to a native consumer (spawn, fs.watch, streaming I/O)
+     * rather than read bytes via `documents().read()`.
+     *
+     * - `shardId === 'mounts'` resolves through the host's MountedPathResolver
+     *   and surfaces the real on-disk path of the mount. Throws on unknown,
+     *   unattached, or otherwise unresolvable mounts.
+     * - Any other `shardId` returns `<dataDir>/docs/<tenant>/<shardId>/<path>`,
+     *   the canonical native-doc location. The file may or may not exist —
+     *   use `documents(tenant).exists` to check.
+     *
+     * Note: once a shard takes the fs path and does its own I/O, the doc store
+     * loses its grip on conflict bookkeeping for those operations. Safe for
+     * mount-backed assets (read-mostly, outside the sync envelope); use with
+     * care for native shard docs that participate in Mode A/B sync.
+     */
+    resolveFsPath(tenant: string, shardId: string, path: string): string;
 }
 /**
  * The interface a server shard bundle must default-export.

package/dist/sh3Api/headless.js

@@ -31,6 +31,8 @@ import { listFields as listFieldsImpl, getField as getFieldImpl, setField as set
 import { attachDecoration as attachDecorationImpl } from '../fields/decoration';
 import { onChange as onContributionsChange } from '../contributions';
 import { FIELD_POINT_ID, WALKER_SHARD_ID } from '../fields/types';
+import { getActiveScopeId, getPersonalScopeId } from '../documents/config';
+import { projectsState } from '../projects-shard/projectsShard.svelte';
 const KNOWN_ZONES = ['ephemeral', 'session', 'workspace', 'user'];
 function collectTabEntries(node) {
     if (node.type === 'tabs') {
@@ -317,6 +319,14 @@ export function makeSh3Api(opts) {
             return listViewsImpl();
         },
         fields,
+        getActiveScope() {
+            const id = getActiveScopeId();
+            const personalId = getPersonalScopeId();
+            return { id, isProject: id !== personalId, personalId };
+        },
+        listProjects() {
+            return projectsState.projects.map((p) => ({ id: p.id, name: p.name }));
+        },
     };
 }
 /** @deprecated Renamed to makeSh3Api(opts?). Kept for one minor cycle. */

package/dist/sh3core-shard/HomeSection.svelte

@@ -0,0 +1,107 @@
+<script lang="ts">
+  /*
+   * Collapsible section wrapper used by Sh3Home and section components.
+   * Title row is a button that toggles the content; expanded state is
+   * persisted to localStorage under `sh3:home-section:<persistKey>` so it
+   * survives reloads. Heading chrome (typography, spacing, max-width) is
+   * centralised here so individual sections only supply their grid/content.
+   */
+
+  import type { Snippet } from 'svelte';
+  import iconsUrl from '../assets/icons.svg';
+
+  interface Props {
+    title: string;
+    persistKey: string;
+    defaultExpanded?: boolean;
+    children: Snippet;
+  }
+
+  const { title, persistKey, defaultExpanded = true, children }: Props = $props();
+
+  const storageKey = $derived(`sh3:home-section:${persistKey}`);
+  const sectionId = $derived(`sh3-home-section-${persistKey}`);
+
+  function readInitial(): boolean {
+    if (typeof localStorage === 'undefined') return defaultExpanded;
+    const raw = localStorage.getItem(`sh3:home-section:${persistKey}`);
+    if (raw === '1') return true;
+    if (raw === '0') return false;
+    return defaultExpanded;
+  }
+
+  let expanded = $state(readInitial());
+
+  function toggle(): void {
+    expanded = !expanded;
+    if (typeof localStorage !== 'undefined') {
+      localStorage.setItem(storageKey, expanded ? '1' : '0');
+    }
+  }
+</script>
+
+<section class="home-section">
+  <button
+    type="button"
+    class="home-section-header"
+    aria-expanded={expanded}
+    aria-controls={sectionId}
+    onclick={toggle}
+  >
+    <svg class="home-section-chevron" class:open={expanded} aria-hidden="true">
+      <use href="{iconsUrl}#chevron-right" />
+    </svg>
+    <span class="home-section-title">{title}</span>
+  </button>
+  {#if expanded}
+    <div id={sectionId} class="home-section-body">
+      {@render children()}
+    </div>
+  {/if}
+</section>
+
+<style>
+  .home-section {
+    width: 100%;
+    max-width: 720px;
+    margin-bottom: 28px;
+  }
+  .home-section-header {
+    display: flex;
+    align-items: center;
+    gap: 6px;
+    width: 100%;
+    margin: 0 0 12px;
+    padding: 0;
+    background: transparent;
+    border: none;
+    color: var(--sh3-fg-subtle);
+    font: inherit;
+    font-size: 13px;
+    font-weight: 600;
+    text-transform: uppercase;
+    letter-spacing: 0.06em;
+    text-align: left;
+    cursor: pointer;
+  }
+  .home-section-header:hover {
+    color: var(--sh3-fg);
+  }
+  .home-section-header:focus-visible {
+    outline: 2px solid var(--sh3-accent);
+    outline-offset: 2px;
+    border-radius: 2px;
+  }
+  .home-section-chevron {
+    width: 12px;
+    height: 12px;
+    flex-shrink: 0;
+    transition: transform 120ms ease;
+  }
+  .home-section-chevron.open {
+    transform: rotate(90deg);
+  }
+  .home-section-title {
+    flex: 1;
+  }
+</style>

package/dist/sh3core-shard/HomeSection.svelte.d.ts

@@ -0,0 +1,10 @@
+import type { Snippet } from 'svelte';
+interface Props {
+    title: string;
+    persistKey: string;
+    defaultExpanded?: boolean;
+    children: Snippet;
+}
+declare const HomeSection: import("svelte").Component<Props, {}, "">;
+type HomeSection = ReturnType<typeof HomeSection>;
+export default HomeSection;

package/dist/sh3core-shard/Sh3Home.svelte

@@ -9,6 +9,7 @@
 
   import { listRegisteredApps, launchApp, isAdmin, VERSION } from '../api';
   import Sh3Title from './Sh3Title.svelte';
+  import HomeSection from './HomeSection.svelte';
   import ProjectsSection from '../projects-shard/ProjectsSection.svelte';
   import LayoutsSection from '../layouts-shard/LayoutsSection.svelte';
   import { sessionState } from '../projects/session-state.svelte';
@@ -56,7 +57,7 @@
     apps.filter((m) => !m.admin && matches(m, filter) && inAllowlist(m.id)),
   );
   const adminApps = $derived(apps.filter((m) => m.admin && matches(m, filter)));
-  const totalVisible = $derived(userApps.length + (elevated ? adminApps.length : 0));
+  const totalVisible = $derived(userApps.length + (elevated && !activeProject ? adminApps.length : 0));
 </script>
 
 <div class="sh3-home">
@@ -83,11 +84,8 @@
 
   <ProjectsSection />
 
-  <LayoutsSection />
-
   {#if userApps.length > 0}
-    <section class="sh3-home-section">
-      <h2 class="sh3-home-section-title">Apps</h2>
+    <HomeSection title="Apps" persistKey="apps">
       <div class="sh3-home-grid">
         {#each userApps as manifest (manifest.id)}
           {@const appearance = getAppearance(manifest.id)}
@@ -107,12 +105,13 @@
           </button>
         {/each}
       </div>
-    </section>
+    </HomeSection>
   {/if}
 
-  {#if elevated && adminApps.length > 0}
-    <section class="sh3-home-section">
-      <h2 class="sh3-home-section-title">Admin</h2>
+  <LayoutsSection />
+
+  {#if elevated && !activeProject && adminApps.length > 0}
+    <HomeSection title="Admin" persistKey="admin">
       <div class="sh3-home-grid">
         {#each adminApps as manifest (manifest.id)}
           {@const appearance = getAppearance(manifest.id)}
@@ -132,7 +131,7 @@
           </button>
         {/each}
       </div>
-    </section>
+    </HomeSection>
   {/if}
 
   {#if totalVisible === 0}
@@ -233,19 +232,6 @@
     color: var(--sh3-fg-muted);
     font-style: italic;
   }
-  .sh3-home-section {
-    width: 100%;
-    max-width: 720px;
-    margin-bottom: 28px;
-  }
-  .sh3-home-section-title {
-    font-size: 13px;
-    font-weight: 600;
-    text-transform: uppercase;
-    letter-spacing: 0.06em;
-    color: var(--sh3-fg-subtle);
-    margin: 0 0 12px;
-  }
   .sh3-home-grid {
     display: grid;
     grid-template-columns: repeat(auto-fill, minmax(84px, 1fr));

package/dist/shards/activate.svelte.d.ts

@@ -22,6 +22,10 @@ export interface ShardErrorEntry {
     timestamp: number;
 }
 export declare const erroredShards: Map<string, ShardErrorEntry>;
+/** Host-only. Register a callback that resolves whether the current scope
+ *  is a personal tenant or an active project. Wired by createShell after
+ *  bootstrap. Avoids circular dependencies with session-state. */
+export declare function __setScopeResolver(resolver: (() => 'tenant' | 'project') | null): void;
 /**
  * Register (or re-register) a shard with the framework so it can later be
  * activated. Records the shard in `registeredShards` but does not run