sh3-core 0.20.2 → 0.20.3

package/dist/documents/index.js

@@ -5,5 +5,5 @@ export { MemoryDocumentBackend, IndexedDBDocumentBackend } from './backends';
 export { HttpDocumentBackend } from './http-backend';
 export { createDocumentHandle } from './handle';
 export { documentChanges } from './notifications';
-export { getActiveScopeId, getTenantId, getDocumentBackend, __setActiveScope, __setTenantId, __setDocumentBackend, __setScopeResolver, } from './config';
+export { getActiveScopeId, getDocumentBackend, __setActiveScope, __setDocumentBackend, __setScopeResolver, } from './config';
 export { PERMISSION_SYNC_PEER, PERMISSION_SYNC_POLICY, } from './sync-types';

package/dist/documents/types.d.ts

@@ -192,6 +192,17 @@ export interface DocumentBackend {
      * Optional; only supported by HttpDocumentBackend in v1.
      */
     readBranch?(tenantId: string, shardId: string, path: string, origin: string): Promise<string | null>;
+    /**
+     * Server-side cross-scope transfer. When implemented, `transferBetweenScopes`
+     * delegates to this rather than doing client-side read+write, bypassing the
+     * per-shard app allowlist check. `srcPath` and `dstPath` are in the form
+     * `shardId/filePath`. Returns whether the destination document already existed.
+     */
+    xfer?(srcTenant: string, srcPath: string, dstTenant: string, dstPath: string, opts?: {
+        move?: boolean;
+    }): Promise<{
+        existed: boolean;
+    }>;
 }
 /**
  * Shard-facing document handle returned by `ctx.documents()`. Binds

package/dist/host-entry.d.ts

@@ -1,6 +1,6 @@
 export { registerShard, registerApp, bootstrap, __setBackend, setLocalOwner } from './host';
 export type { BootstrapConfig } from './host';
-export { __setActiveScope, __setTenantId, __setDocumentBackend } from './host';
+export { __setActiveScope, __setDocumentBackend } from './host';
 export type { Backend } from './state/types';
 export type { DocumentBackend } from './documents/types';
 export { HttpDocumentBackend } from './documents/http-backend';

package/dist/host-entry.js

@@ -6,7 +6,7 @@
  * should touch this path. Shards and apps must not import from here.
  */
 export { registerShard, registerApp, bootstrap, __setBackend, setLocalOwner } from './host';
-export { __setActiveScope, __setTenantId, __setDocumentBackend } from './host';
+export { __setActiveScope, __setDocumentBackend } from './host';
 export { HttpDocumentBackend } from './documents/http-backend';
 export { IndexedDBDocumentBackend, MemoryDocumentBackend } from './documents/backends';
 export { __setEnvServerUrl } from './env/index';

package/dist/host.d.ts

@@ -4,7 +4,7 @@ import { __setBackend } from './state/zones.svelte';
 import { setLocalOwner } from './auth/index';
 export { __setBackend };
 export { setLocalOwner };
-export { __setActiveScope, __setTenantId, __setDocumentBackend } from './documents/config';
+export { __setActiveScope, __setDocumentBackend } from './documents/config';
 export declare function registerShard(shard: Parameters<typeof registerShardInternal>[0]): void;
 export { registerApp };
 export interface BootstrapConfig {

package/dist/host.js

@@ -38,7 +38,7 @@ import { installWebEmitter } from './navigation/platform-web';
 import { returnToHome } from './apps/lifecycle';
 export { __setBackend };
 export { setLocalOwner };
-export { __setActiveScope, __setTenantId, __setDocumentBackend } from './documents/config';
+export { __setActiveScope, __setDocumentBackend } from './documents/config';
 import { getActiveScopeId } from './documents/config';
 export function registerShard(shard) {
     registerShardInternal(shard);

package/dist/layout/slotHostPool.svelte.js

@@ -75,7 +75,7 @@ function onViewRegistered(viewId, factory) {
             if (entry.handle !== undefined)
                 return; // already mounted by a race
             entry.handle = factory.mount(entry.host, ctx);
-            if (((_a = entry.handle) === null || _a === void 0 ? void 0 : _a.closable) || slotId.startsWith('float:')) {
+            if (((_a = entry.handle) === null || _a === void 0 ? void 0 : _a.closable) || slotId.startsWith('float:') || slotId.startsWith('standalone:')) {
                 closableState[slotId] = true;
             }
             if ((_b = entry.handle) === null || _b === void 0 ? void 0 : _b.onResize) {
@@ -179,7 +179,7 @@ function createHost(slotId, viewId, label, meta) {
             },
         };
         entry.handle = factory === null || factory === void 0 ? void 0 : factory.mount(host, ctx);
-        if (((_a = entry.handle) === null || _a === void 0 ? void 0 : _a.closable) || slotId.startsWith('float:')) {
+        if (((_a = entry.handle) === null || _a === void 0 ? void 0 : _a.closable) || slotId.startsWith('float:') || slotId.startsWith('standalone:')) {
             closableState[slotId] = true;
         }
         // The pool owns the ResizeObserver so its lifetime matches the

package/dist/overlays/FloatFrame.svelte

@@ -262,6 +262,7 @@
         title: entry.title,
         size: { w: entry.size.w, h: entry.size.h },
         activateShards: walkShardsForContent(entry.content),
+        projectId: sh3.getActiveScope().isProject ? sh3.getActiveScope().id : undefined,
       });
       floatManager.close(entry.id);
     } catch (err) {

package/dist/projects/session-state.svelte.d.ts

@@ -1,3 +1,6 @@
+export declare const PENDING_SCOPE_KEY = "sh3:pending-scope";
+export declare function readPendingScope(): string | null;
+export declare function switchProjectScope(projectId: string | null): void;
 export declare const sessionState: {
     activeProjectId: string | null;
 };

package/dist/projects/session-state.svelte.js

@@ -12,6 +12,31 @@
  */
 import { activeApp, breadcrumbApp } from '../apps/registry.svelte';
 import { unloadApp } from '../apps/lifecycle';
+export const PENDING_SCOPE_KEY = 'sh3:pending-scope';
+export function readPendingScope() {
+    if (typeof sessionStorage === 'undefined')
+        return null;
+    const raw = sessionStorage.getItem(PENDING_SCOPE_KEY);
+    if (!raw)
+        return null;
+    sessionStorage.removeItem(PENDING_SCOPE_KEY);
+    try {
+        const parsed = JSON.parse(raw);
+        return typeof parsed.projectId === 'string' ? parsed.projectId : null;
+    }
+    catch (_a) {
+        return null;
+    }
+}
+export function switchProjectScope(projectId) {
+    if (projectId !== null) {
+        sessionStorage.setItem(PENDING_SCOPE_KEY, JSON.stringify({ projectId }));
+    }
+    else {
+        sessionStorage.removeItem(PENDING_SCOPE_KEY);
+    }
+    window.location.reload();
+}
 export const sessionState = $state({
     activeProjectId: null,
 });

package/dist/projects/session-state.test.js

@@ -1,5 +1,5 @@
-import { describe, it, expect, beforeEach, vi } from 'vitest';
-import { sessionState, setActiveProjectId } from './session-state.svelte';
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { sessionState, setActiveProjectId, switchProjectScope, readPendingScope, PENDING_SCOPE_KEY, } from './session-state.svelte';
 import { breadcrumbApp, activeApp } from '../apps/registry.svelte';
 vi.mock('../apps/lifecycle', () => ({
     unloadApp: vi.fn(),
@@ -53,3 +53,44 @@ describe('sessionState.activeProjectId', () => {
         expect(lifecycle.unloadApp).not.toHaveBeenCalled();
     });
 });
+describe('readPendingScope', () => {
+    beforeEach(() => sessionStorage.clear());
+    it('returns null when nothing is stored', () => {
+        expect(readPendingScope()).toBeNull();
+    });
+    it('returns the stored projectId and clears the key', () => {
+        sessionStorage.setItem(PENDING_SCOPE_KEY, JSON.stringify({ projectId: 'proj-abc' }));
+        expect(readPendingScope()).toBe('proj-abc');
+        expect(sessionStorage.getItem(PENDING_SCOPE_KEY)).toBeNull();
+    });
+    it('returns null and clears a malformed entry', () => {
+        sessionStorage.setItem(PENDING_SCOPE_KEY, 'not-json');
+        expect(readPendingScope()).toBeNull();
+        expect(sessionStorage.getItem(PENDING_SCOPE_KEY)).toBeNull();
+    });
+    it('returns null if projectId field is not a string', () => {
+        sessionStorage.setItem(PENDING_SCOPE_KEY, JSON.stringify({ other: 42 }));
+        expect(readPendingScope()).toBeNull();
+    });
+});
+describe('switchProjectScope', () => {
+    let reloadSpy;
+    beforeEach(() => {
+        sessionStorage.clear();
+        reloadSpy = vi.fn();
+        vi.stubGlobal('location', { reload: reloadSpy });
+    });
+    afterEach(() => vi.unstubAllGlobals());
+    it('writes projectId to sessionStorage and reloads', () => {
+        switchProjectScope('proj-abc');
+        const raw = sessionStorage.getItem(PENDING_SCOPE_KEY);
+        expect(JSON.parse(raw)).toEqual({ projectId: 'proj-abc' });
+        expect(reloadSpy).toHaveBeenCalledOnce();
+    });
+    it('removes the key for null (personal scope) and reloads', () => {
+        sessionStorage.setItem(PENDING_SCOPE_KEY, JSON.stringify({ projectId: 'old' }));
+        switchProjectScope(null);
+        expect(sessionStorage.getItem(PENDING_SCOPE_KEY)).toBeNull();
+        expect(reloadSpy).toHaveBeenCalledOnce();
+    });
+});

package/dist/projects-shard/ProjectsSection.svelte

@@ -1,26 +1,13 @@
 <script lang="ts">
-  /*
-   * Projects section for Sh3Home.
-   *
-   * Renders the list of projects the current user is a member of as
-   * selectable cards. Selecting a project sets sessionState.activeProjectId
-   * (which then filters the apps grid via the appAllowlist) and binds any
-   * subsequently launched app's documents to the project scope.
-   */
-
   import { projectsState, openProjectManage } from './projectsShard.svelte';
-  import { sessionState, setActiveProjectId } from '../projects/session-state.svelte';
+  import { sessionState, switchProjectScope } from '../projects/session-state.svelte';
   import { isAdmin } from '../auth/auth.svelte';
   import HomeSection from '../sh3core-shard/HomeSection.svelte';
+  import Button from '../primitives/Button.svelte';
 
   const visible = $derived(projectsState.projects.length > 0);
   const activeId = $derived(sessionState.activeProjectId);
   const elevated = $derived(isAdmin());
-
-  function selectProject(id: string) {
-    setActiveProjectId(activeId === id ? null : id);
-  }
-
   function editProject(id: string, ev: MouseEvent) {
     ev.stopPropagation();
     const project = projectsState.projects.find((p) => p.id === id) ?? null;
@@ -28,7 +15,13 @@
   }
 </script>
 
-{#if visible}
+{#if activeId !== null}
+  <HomeSection title="Project" persistKey="project-active">
+    <div class="leave-project">
+      <Button onclick={() => switchProjectScope(null)}>Leave project</Button>
+    </div>
+  </HomeSection>
+{:else if visible}
   <HomeSection title="Projects" persistKey="projects">
     <div class="projects-grid">
       {#each projectsState.projects as project (project.id)}
@@ -36,8 +29,7 @@
           <button
             type="button"
             class="project-card"
-            class:active={activeId === project.id}
-            onclick={() => selectProject(project.id)}
+            onclick={() => switchProjectScope(project.id)}
             title={project.description ?? `${project.members.length} member${project.members.length === 1 ? '' : 's'}`}
           >
             <span class="project-name">{project.name}</span>
@@ -104,4 +96,8 @@
   }
   .project-name { font-weight: 600; font-size: 13px; }
   .project-meta { font-size: 11px; color: var(--sh3-fg-muted); }
+  .leave-project {
+    display: flex;
+    justify-content: flex-start;
+  }
 </style>

package/dist/runtime/runVerb-shell.test.js

@@ -11,7 +11,7 @@
  */
 import { describe, it, expect, beforeEach } from 'vitest';
 import { MemoryDocumentBackend } from '../documents/backends';
-import { __setDocumentBackend, __setTenantId } from '../documents/config';
+import { __setDocumentBackend, __setActiveScope } from '../documents/config';
 import { registerShard, activateShard, __resetShardRegistryForTest, } from '../shards/activate.svelte';
 import { __resetViewRegistryForTest } from '../shards/registry';
 import { __resetActionsRegistryForTest } from '../actions/registry';
@@ -25,7 +25,7 @@ describe('shell-shard programmatic verbs (integration)', () => {
         __resetActionsRegistryForTest();
         __resetAppRegistryForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-test');
+        __setActiveScope('tenant-test');
         registerShard(shellShard);
         await activateShard('shell');
     });

package/dist/runtime/runVerb.test.js

@@ -1,6 +1,6 @@
 import { describe, it, expect, beforeEach } from 'vitest';
 import { MemoryDocumentBackend } from '../documents/backends';
-import { __setDocumentBackend, __setTenantId } from '../documents/config';
+import { __setDocumentBackend, __setActiveScope } from '../documents/config';
 import { registerShard, activateShard, __resetShardRegistryForTest, } from '../shards/activate.svelte';
 import { __resetViewRegistryForTest } from '../shards/registry';
 import { runVerbProgrammatic } from './runVerb';
@@ -19,7 +19,7 @@ describe('runVerbProgrammatic', () => {
         __resetShardRegistryForTest();
         __resetViewRegistryForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-test');
+        __setActiveScope('tenant-test');
     });
     it('rejects on unknown shard', async () => {
         await expect(runVerbProgrammatic('missing', 'echo', [])).rejects.toThrow('unknown shard: missing');

package/dist/sh3core-shard/appActions.js

@@ -30,6 +30,7 @@ import AppInfoView from './AppInfoView.svelte';
 import { spawnSatellite } from '../sh3Api/window';
 import { activeApp, getActiveApp } from '../apps/registry.svelte';
 import { returnToHome } from '../apps/lifecycle';
+import { sessionState } from '../projects/session-state.svelte';
 const isTauri = typeof globalThis.__TAURI_INTERNALS__ !== 'undefined';
 export function computeAppActionDisabled(g) {
     return !g.admin || g.builtin;
@@ -111,7 +112,7 @@ async function runCheckUpdate(_ctx) {
     modalManager.open(AppUpdateAvailableModal, props);
 }
 function runPopOut(_ctx) {
-    var _a;
+    var _a, _b;
     const ref = readSelection();
     if (!ref)
         return;
@@ -122,10 +123,11 @@ function runPopOut(_ctx) {
         kind: 'app',
         appId: ref.appId,
         activateShards: (_a = manifest.requiredShards) !== null && _a !== void 0 ? _a : [],
+        projectId: (_b = sessionState.activeProjectId) !== null && _b !== void 0 ? _b : undefined,
     });
 }
 async function runPopOutCurrent(_ctx) {
-    var _a;
+    var _a, _b;
     const current = getActiveApp();
     if (!current)
         return;
@@ -136,6 +138,7 @@ async function runPopOutCurrent(_ctx) {
         kind: 'app',
         appId,
         activateShards: requiredShards,
+        projectId: (_b = sessionState.activeProjectId) !== null && _b !== void 0 ? _b : undefined,
     });
 }
 function runUninstall(_ctx) {

package/dist/shards/activate-browse.test.js

@@ -1,13 +1,13 @@
 import { describe, it, expect, beforeEach } from 'vitest';
 import { MemoryDocumentBackend } from '../documents/backends';
-import { __setDocumentBackend, __setTenantId } from '../documents/config';
+import { __setDocumentBackend, __setActiveScope } from '../documents/config';
 import { registerShard, activateShard, __resetShardRegistryForTest } from './activate.svelte';
 import { PERMISSION_DOCUMENTS_BROWSE, PERMISSION_DOCUMENTS_READ, PERMISSION_DOCUMENTS_WRITE, } from '../documents/types';
 describe('ctx.browse permission gating', () => {
     beforeEach(() => {
         __resetShardRegistryForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-a');
+        __setActiveScope('tenant-a');
     });
     it('is undefined when no documents permission is declared', async () => {
         let captured = null;

package/dist/shards/activate-contributions.test.js

@@ -1,6 +1,6 @@
 import { describe, it, expect, beforeEach, vi } from 'vitest';
 import { MemoryDocumentBackend } from '../documents/backends';
-import { __setDocumentBackend, __setTenantId } from '../documents/config';
+import { __setDocumentBackend, __setActiveScope } from '../documents/config';
 import { registerShard, activateShard, deactivateShard, __resetShardRegistryForTest, } from './activate.svelte';
 import { __resetContributionsForTest, list, listPoints } from '../contributions';
 describe('ctx.contributions', () => {
@@ -8,7 +8,7 @@ describe('ctx.contributions', () => {
         __resetShardRegistryForTest();
         __resetContributionsForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-a');
+        __setActiveScope('tenant-a');
     });
     it('is always present on ShardContext (no permission required)', async () => {
         let captured = null;

package/dist/shards/activate-error-isolation.test.js

@@ -1,12 +1,12 @@
 import { describe, it, expect, beforeEach } from 'vitest';
 import { MemoryDocumentBackend } from '../documents/backends';
-import { __setDocumentBackend, __setTenantId } from '../documents/config';
+import { __setDocumentBackend, __setActiveScope } from '../documents/config';
 import { registerShard, activateShard, registeredShards, activeShards, __resetShardRegistryForTest, erroredShards, } from './activate.svelte';
 describe('erroredShards map', () => {
     beforeEach(() => {
         __resetShardRegistryForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-a');
+        __setActiveScope('tenant-a');
     });
     it('is empty after reset', () => {
         expect(erroredShards.size).toBe(0);
@@ -21,7 +21,7 @@ describe('activateShard — unwind on activation failure', () => {
     beforeEach(() => {
         __resetShardRegistryForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-a');
+        __setActiveScope('tenant-a');
     });
     it('unwinds partial state and records the error when activate throws', async () => {
         const shard = {

package/dist/shards/activate-on-key-revoked.test.js

@@ -1,13 +1,13 @@
 import { describe, it, expect, beforeEach } from 'vitest';
 import { MemoryDocumentBackend } from '../documents/backends';
-import { __setDocumentBackend, __setTenantId } from '../documents/config';
+import { __setDocumentBackend, __setActiveScope } from '../documents/config';
 import { registerShard, activateShard, deactivateShard, __resetShardRegistryForTest } from './activate.svelte';
 import { emit } from '../keys/revocation-bus.svelte';
 describe('onKeyRevoked hook wiring', () => {
     beforeEach(() => {
         __resetShardRegistryForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-a');
+        __setActiveScope('tenant-a');
     });
     it('fires onKeyRevoked when the bus emits for the shard', async () => {
         const received = [];

package/dist/shards/activate-runtime.test.js

@@ -1,6 +1,6 @@
 import { describe, it, expect, beforeEach, vi } from 'vitest';
 import { MemoryDocumentBackend } from '../documents/backends';
-import { __setDocumentBackend, __setTenantId } from '../documents/config';
+import { __setDocumentBackend, __setActiveScope } from '../documents/config';
 import { registerShard, activateShard, __resetShardRegistryForTest, } from './activate.svelte';
 import { __resetViewRegistryForTest } from './registry';
 function programmaticVerb(name, summary, body) {
@@ -22,7 +22,7 @@ describe('ctx.listVerbs / ctx.runVerb (integration)', () => {
         __resetShardRegistryForTest();
         __resetViewRegistryForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-test');
+        __setActiveScope('tenant-test');
     });
     it('listVerbs returns every verb across active shards with shardId', async () => {
         registerShard({

package/dist/shards/activate.svelte.js

@@ -19,7 +19,7 @@
 import { sh3 } from '../sh3Runtime.svelte';
 import { registerView, unregisterView, registerVerb as fwRegisterVerb, unregisterVerb as fwUnregisterVerb } from './registry';
 import { makeSh3Api } from '../sh3Api/headless';
-import { createDocumentHandle, getTenantId, getDocumentBackend, getActiveScopeId } from '../documents';
+import { createDocumentHandle, getDocumentBackend, getActiveScopeId } from '../documents';
 import { fetchEnvState, putEnvState } from '../env/client';
 import { getEnvServerUrl } from '../env/index';
 import { apiFetch } from '../transport/apiFetch';
@@ -153,7 +153,7 @@ export async function activateShard(id, opts) {
     };
     const hasBrowse = (_a = shard.manifest.permissions) === null || _a === void 0 ? void 0 : _a.includes(PERMISSION_DOCUMENTS_BROWSE);
     const browseCap = hasBrowse
-        ? createBrowseCapability(() => getTenantId(), getDocumentBackend(), {
+        ? createBrowseCapability(getActiveScopeId, getDocumentBackend(), {
             canRead: (_c = (_b = shard.manifest.permissions) === null || _b === void 0 ? void 0 : _b.includes(PERMISSION_DOCUMENTS_READ)) !== null && _c !== void 0 ? _c : false,
             canWrite: (_e = (_d = shard.manifest.permissions) === null || _d === void 0 ? void 0 : _d.includes(PERMISSION_DOCUMENTS_WRITE)) !== null && _e !== void 0 ? _e : false,
         })
@@ -225,7 +225,7 @@ export async function activateShard(id, opts) {
             return checkIsAdmin();
         },
         get tenantId() {
-            return getTenantId();
+            return getActiveScopeId();
         },
         getScope: () => { var _a; return (_a = scopeResolver === null || scopeResolver === void 0 ? void 0 : scopeResolver()) !== null && _a !== void 0 ? _a : 'tenant'; },
         zones: ((_f = shard.manifest.permissions) === null || _f === void 0 ? void 0 : _f.includes(PERMISSION_STATE_MANAGE))
@@ -235,7 +235,7 @@ export async function activateShard(id, opts) {
         documentPicker: browseCap
             ? createDocumentPicker(() => browseCap.listDocuments())
             : createDocumentPicker(async () => {
-                const docs = await getDocumentBackend().list(getTenantId(), id);
+                const docs = await getDocumentBackend().list(getActiveScopeId(), id);
                 return docs.map(d => (Object.assign(Object.assign({}, d), { shardId: id })));
             }),
         keys: ((_g = shard.manifest.permissions) === null || _g === void 0 ? void 0 : _g.includes(PERMISSION_KEYS_MINT))

package/dist/shards/ctx-fetch.test.js

@@ -1,6 +1,6 @@
 import { describe, expect, it, vi, beforeEach, afterEach } from 'vitest';
 import { MemoryDocumentBackend } from '../documents/backends';
-import { __setDocumentBackend, __setTenantId } from '../documents/config';
+import { __setDocumentBackend, __setActiveScope } from '../documents/config';
 import { __setEnvServerUrl } from '../env/index';
 import { registerShard, activateShard, __resetShardRegistryForTest, } from './activate.svelte';
 import { __resetViewRegistryForTest } from './registry';
@@ -11,7 +11,7 @@ describe('ctx.fetch', () => {
         __resetShardRegistryForTest();
         __resetViewRegistryForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-test');
+        __setActiveScope('tenant-test');
         __setEnvServerUrl('https://example.com');
     });
     afterEach(() => {
@@ -69,7 +69,7 @@ describe('ctx.serverUrl', () => {
         __resetShardRegistryForTest();
         __resetViewRegistryForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-test');
+        __setActiveScope('tenant-test');
         __setEnvServerUrl('https://example.com');
     });
     afterEach(() => {
@@ -100,7 +100,7 @@ describe('ctx.resolveUrl', () => {
         __resetShardRegistryForTest();
         __resetViewRegistryForTest();
         __setDocumentBackend(new MemoryDocumentBackend());
-        __setTenantId('tenant-test');
+        __setActiveScope('tenant-test');
         __setEnvServerUrl('https://example.com');
     });
     afterEach(() => {

package/dist/shell-shard/verbs/xfer.js

@@ -3,7 +3,8 @@ export const xferVerb = {
     name: 'xfer',
     summary: [
         'Transfer docs across scopes. Usage: xfer [-R] [-C] <src> <dst>',
-        '  Scopes: @me | @project-<slug>  (e.g. @project-acme:notes/draft.md)',
+        '  Scopes: @me | @project-<slug>  (e.g. @me:notes/draft.md, @project-acme:notes/draft.md)',
+        '  Either side may be @me or @project-<slug>; bare paths resolve to the active scope.',
         '  -R  recursive (src is a folder prefix)',
         '  -C  copy only, do not delete source',
     ].join('\n'),
@@ -14,12 +15,10 @@ export const xferVerb = {
             ctx.scrollback.push({ kind: 'status', text: 'xfer: document capability not available', level: 'error', ts });
             return;
         }
-        const scope = ctx.sh3.getActiveScope();
-        if (!scope.isProject) {
-            ctx.scrollback.push({ kind: 'status', text: 'xfer: only available when a project scope is active', level: 'error', ts });
+        if (!ctx.docs.transferBetweenScopes) {
+            ctx.scrollback.push({ kind: 'status', text: 'xfer: write permission not granted', level: 'error', ts });
             return;
         }
-        // Parse flags
         let recursive = false;
         let copy = false;
         const positional = [];
@@ -38,16 +37,13 @@ export const xferVerb = {
             ctx.scrollback.push({ kind: 'status', text: 'usage: xfer [-R] [-C] <src> <dst>', level: 'error', ts });
             return;
         }
-        if (!ctx.docs.transferToScope) {
-            ctx.scrollback.push({ kind: 'status', text: 'xfer: write permission not granted', level: 'error', ts });
-            return;
-        }
         const srcParsed = parseScopePath(positional[0]);
         const dstParsed = parseScopePath(positional[1]);
         if (!srcParsed || !dstParsed) {
             ctx.scrollback.push({ kind: 'status', text: 'xfer: invalid path', level: 'error', ts });
             return;
         }
+        const scope = ctx.sh3.getActiveScope();
         let srcTenant;
         let dstTenant;
         try {
@@ -58,33 +54,23 @@ export const xferVerb = {
             ctx.scrollback.push({ kind: 'status', text: `xfer: ${e.message}`, level: 'error', ts });
             return;
         }
-        // transferToScope always reads from the active tenant; reject if src doesn't match.
-        if (srcTenant !== scope.id) {
-            ctx.scrollback.push({
-                kind: 'status',
-                text: 'xfer: source must be the active project scope in v1 — switch to the source scope first',
-                level: 'error',
-                ts,
-            });
-            return;
-        }
-        const opts = { delete: !copy, targetShardId: dstParsed.shardId };
+        const moveOpts = { delete: !copy };
         if (!recursive) {
             if (!srcParsed.path) {
                 ctx.scrollback.push({ kind: 'status', text: 'xfer: path required (use -R for folder recursion)', level: 'error', ts });
                 return;
             }
-            await ctx.docs.transferToScope(srcParsed.shardId, srcParsed.path, dstTenant, opts);
+            if (srcTenant === dstTenant && srcParsed.shardId === dstParsed.shardId && srcParsed.path === dstParsed.path) {
+                ctx.scrollback.push({ kind: 'status', text: 'xfer: source and destination are the same', level: 'error', ts });
+                return;
+            }
+            await ctx.docs.transferBetweenScopes(srcTenant, srcParsed.shardId, srcParsed.path, dstTenant, dstParsed.shardId, dstParsed.path, moveOpts);
             const verb = copy ? 'copied' : 'moved';
             ctx.scrollback.push({ kind: 'status', text: `xfer: ${verb} ${positional[0]} → ${positional[1]}`, level: 'info', ts });
             return;
         }
-        // Recursive: list all docs in srcTenant matching the prefix
-        // transferToScope uses getTenantId() (active scope) — to read from srcTenant
-        // we rely on the src scope being the active tenant or the capability seeing it.
-        // For v1 we use listDocuments (active tenant) and filter by shard + prefix.
         const prefix = srcParsed.path;
-        const allDocs = await ctx.docs.listDocuments();
+        const allDocs = await ctx.docs.listDocumentsIn(srcTenant);
         const matching = allDocs.filter((d) => d.shardId === srcParsed.shardId && (!prefix || d.path.startsWith(prefix)));
         if (matching.length === 0) {
             ctx.scrollback.push({ kind: 'status', text: `xfer: no documents found under ${positional[0]}`, level: 'info', ts });
@@ -92,7 +78,7 @@ export const xferVerb = {
         }
         let count = 0;
         for (const doc of matching) {
-            await ctx.docs.transferToScope(doc.shardId, doc.path, dstTenant, opts);
+            await ctx.docs.transferBetweenScopes(srcTenant, doc.shardId, doc.path, dstTenant, dstParsed.shardId, doc.path, moveOpts);
             count++;
         }
         const verb = copy ? 'copied' : 'moved';