@abide/abide 0.116.3 → 0.117.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @abide/abide
 
+## 0.117.0
+
+### Minor Changes
+
+- 3bb5cc9: `abide dev`, `build`, `start`, `check`, `routes`, `compile`, `bundle`, `openapi`, `mcp` and the shell now refuse to run on a bun outside abide's `engines.bun`, naming the bun running and the range it needs (RULEBOOK 38.123)
+
+### Patch Changes
+
+- 3bb5cc9: a component whose markup reads a bare `busy()` or `ready()` is now built on the server after the turn, once the siblings after it have started their loads, so it paints the arm the browser chooses at hydration rather than one that is rebuilt (RULEBOOK 41.28, 41.31)
+- 3bb5cc9: the rulebook now states that the effects one turn wakes, a slot's own update among them, run in no guaranteed order (12.15) — a `watch` that post-processes what a sibling `{raw(...)}` slot renders cannot count on the slot having updated first
+- 3bb5cc9: markdown imported `with { type: 'text' }` into an app's `.ts` now checks as a `string` under `abide check`, as it already did in a `.abide` — no more hand-written `declare module '*.md'`
+- 3bb5cc9: the `bunfig.toml` `abide scaffold` writes now sets `[install] peer = false`, so a dependency's peer on `bun` (`bun-plugin-tailwind`'s) cannot install an older bun that shadows the system one inside `bun run` (RULEBOOK 38.122)
+- 3bb5cc9: the rulebook states three things that held but were never written down: a `raw` slot writes its markup unchecked (32.77), a fragment-only step moves `route.url` (30.33), and a `refresh` over `tags` reruns no synchronous derivation that carries none of them (13.20) — and the registry says `route.params` is `Params` outside a page or layout
+
+## 0.116.4
+
+### Patch Changes
+
+- f4acbfd: a handler whose args schema is derived from its type annotation (no `args` gate) now refuses bad args in process as it does over the wire — a direct call, a call from another handler or `app.run`, and every call under `mount` answer 422 `ValidationError` with the same `Issues` before the body runs, where before the body ran with the bad value
+- be88738: a reader that probed a handler before its first call wakes when the call starts — on a server and under `mount`, `disabled={save.busy()}` read before any call stayed enabled for the whole write, because the unreached answer (0.116.3) subscribed the reader to nothing. It now subscribes the reader to the first call in its scope, and still builds nothing and runs no handler (RULEBOOK 3.3, 13.19)
+
 ## 0.116.3
 
 ### Patch Changes

package/bin/abide.ts

@@ -41,12 +41,17 @@ import { executableName } from '#server/executableName.ts'
 import { iconAccent } from '#server/iconAccent.ts'
 import { namesUnder } from '#server/namesUnder.ts'
 import { DEFAULT_DOCUMENT, intoHead } from '#server/render.ts'
+import { runtimeRefusal } from '#server/runtimeRefusal.ts'
 import { pathsUnder, serveBuild } from '#server/serveBuild.ts'
 import { serveDev } from '#server/serveDev.ts'
 import { escapeText } from '#shared/escapeText.ts'
 import { ICON_ADDRESSES, LAUNCHER_PAGE } from '#shared/LAUNCHER_FILES.ts'
 import abidePackage from '../package.json' with { type: 'json' }
 
+// 38.123 — the bun this process runs on, held to abide's `engines.bun` before anything is built or
+// booted. A compiled app carries the bun `abide compile` ran on, which this held already.
+const RUNTIME_REFUSAL = runtimeRefusal(Bun.version, abidePackage.engines.bun)
+
 /** Where the app a command builds or serves is, and where its build goes — both absolute. */
 type AppDirectories = { root: string; out: string }
 
@@ -59,14 +64,18 @@ const DISK: Host = {
     version: abidePackage.version,
     // 38.100 — built in this process rather than a child, where nobody built it, and said on
     // stderr: the command's stdout is its own — `openapi`'s document, `mcp`'s messages.
-    app: ({ values }) =>
-        appOnDisk(directoriesOf(values), async (root, out) =>
+    app: ({ values }) => {
+        const handle = appOnDisk(directoriesOf(values), async (root, out) =>
             (await serveBuild(root, out, (root, out) =>
                 writeBuild({ root, out }, console.error),
             ))
                 ? out
                 : undefined,
-        ),
+        )
+        return RUNTIME_REFUSAL === undefined
+            ? handle
+            : { ...handle, boot: async () => RUNTIME_REFUSAL }
+    },
     source: {
         scaffold: scaffoldCommand,
         dev: inApp(dev),
@@ -645,6 +654,10 @@ function inApp<Answer>(
     body: (app: AppDirectories, given: Given) => Promise<Answer>,
 ): (given: Given) => Promise<Answer | number> {
     return async (given) => {
+        if (RUNTIME_REFUSAL !== undefined) {
+            console.error(`abide ${given.positionals[0]}: ${RUNTIME_REFUSAL}`)
+            return 1
+        }
         const app = directoriesOf(given.values)
         if (app === undefined) {
             console.error(

package/docs/REGISTRY.md

@@ -160,7 +160,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | --- | --- | --- | --- |
 | `Disposer` | `() => void` | What tears down the previous run. | 12.1 |
 | `Effect` | `() => void \| Disposer` | What runs on change. | 12.2, 12.8, 14.6 |
-| `watch` | `(effect: Effect) => () => void` | Begins a watch over whatever the effect reads. | 12.2, 12.4, 12.5, 12.6, 12.7, 12.10, 12.13 |
+| `watch` | `(effect: Effect) => () => void` | Begins a watch over whatever the effect reads. | 12.2, 12.4, 12.5, 12.6, 12.7, 12.10, 12.13, 12.15 |
 | `watch` | `(sources: Reactive<unknown, never, unknown, unknown> \| Reactive<unknown, never, unknown, unknown>[], effect: Effect) => () => void` | The narrowed form, over named sources. | 12.3 |
 | `flushSync` | `() => void` | Ends the turn: every `Effect` a write woke runs now. | 9.10, 12.11, 12.12 |
 
@@ -169,10 +169,10 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
 | `Selection` | `Reactive<any, any, any, any> \| Keyed<any, any, any, any> \| Rpc<any, any, any, any> \| { tags: string[] }` | What is being asked about. | 13.1, 13.8, 13.9, 13.13, 31.14 |
-| `busy` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether any entry in the selection has work in flight. | 13.2, 13.3, 13.5, 13.12, 46.11 |
-| `ready` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether every entry in the selection has a value to serve. | 13.3, 13.5, 13.11, 13.12 |
+| `busy` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether any entry in the selection has work in flight. | 13.2, 13.3, 13.5, 13.12, 41.28, 41.31, 46.11 |
+| `ready` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether every entry in the selection has a value to serve. | 13.3, 13.5, 13.11, 13.12, 41.28, 41.31 |
 | `synced` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether every entry in the selection holds what its producer made. | 13.12, 13.18 |
-| `refresh` | `(selection?: Selection, pattern?: Partial<Args>) => void` | Stale-while-revalidate over the selection. | 13.4, 13.7, 13.10, 13.12, 13.14, 13.15, 13.16, 13.17 |
+| `refresh` | `(selection?: Selection, pattern?: Partial<Args>) => void` | Stale-while-revalidate over the selection. | 13.4, 13.7, 13.10, 13.12, 13.14, 13.15, 13.16, 13.17, 13.20 |
 | `invalidate` | `(selection?: Selection, pattern?: Partial<Args>) => void` | Marks the selection stale. | 13.4, 13.6, 13.10, 13.12, 13.15, 13.17 |
 
 
@@ -380,8 +380,8 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `route.url` | `Reactive<URL>` | Where we are, fragment included. | 23.1, 23.2, 23.3, 23.4, 30.20, 30.21, 30.23, 19.16, 31.16 |
-| `route.params` | `Reactive<Params>` | The matched route's segments. | 23.1, 23.5, 23.9, 30.23, 31.16 |
+| `route.url` | `Reactive<URL>` | Where we are, fragment included. | 23.1, 23.2, 23.3, 23.4, 30.20, 30.21, 30.23, 30.33, 19.16, 31.16 |
+| `route.params` | `Reactive<Params>` | The matched route's segments — typed by its own route in a page or a layout, and `Params` in any other file. | 23.1, 23.5, 23.9, 30.23, 31.16 |
 | `Params` | `Record<string, string \| string[]>` | What a matched route's segments are. | 23.5 |
 | `route.name` | `Reactive<string>` | The resolution path, the same under any mount path. | 23.1, 23.6, 23.14, 31.16 |
 | `route.navigating` | `Reactive<boolean>` | Whether a navigation is in flight. | 23.1, 31.16 |
@@ -571,7 +571,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | 32.2, 32.24, 32.26, 32.30, 32.31, 32.70 |
+| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | 32.2, 32.24, 32.26, 32.30, 32.31, 32.70, 32.77 |
 | `Raw` | `class Raw { html: string }` | What `raw` hands back. | 32.24 |
 
 ### Control flow
@@ -629,7 +629,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
 | `Component` | `interface Component {}` | A component bound to its props. | 32.17, 34.16, 35.4 |
-| `render` | `(component: Component) => Promise<Uint8Array>` | What produces a document. | 29.10, 35.4, 35.5, 35.6, 35.15, 35.16, 41.1, 41.2, 41.3, 41.4, 41.9, 41.13, 41.16, 41.17, 41.18, 41.19, 41.20, 41.28, 35.11, 41.29, 41.30 |
+| `render` | `(component: Component) => Promise<Uint8Array>` | What produces a document. | 29.10, 35.4, 35.5, 35.6, 35.15, 35.16, 41.1, 41.2, 41.3, 41.4, 41.9, 41.13, 41.16, 41.17, 41.18, 41.19, 41.20, 41.28, 35.11, 41.29, 41.30, 41.31 |
 
 ## Sinks
 
@@ -849,20 +849,20 @@ rows a runner prints, and an adapter for an abide app.
 
 | Command | Meaning | Rules |
 | --- | --- | --- |
-| `abide scaffold <name>` | Writes a starter project. | 38.1, 38.42, 38.103, 38.104, 38.106, 38.112 |
+| `abide scaffold <name>` | Writes a starter project. | 38.1, 38.42, 38.103, 38.104, 38.106, 38.112, 38.122 |
 | `abide run <file> [args…]` | Runs a script under the abide runtime. | 38.2, 38.57 |
-| `abide check [dir…]` | The type-checker over a `.abide` tree. | 38.3, 38.31, 38.32, 38.33, 38.40, 38.105 |
-| `abide routes [--json]` | Every address the app answers, the file answering it, and where each hook is filed. | 38.108 |
-| `abide dev [--port <n>]` | Watches the project and keeps the app up. | 16.23, 16.56, 37.8, 37.9, 38.4, 38.14, 38.15, 38.16, 38.17, 38.19, 38.24, 38.25, 38.26, 38.28, 38.30, 38.35, 38.36, 38.37, 38.38, 38.41, 38.43, 38.58, 38.63, 38.64, 38.65, 38.94, 38.96, 38.97 |
-| `abide build` | Builds the client into content-hashed chunks and a manifest. | 38.43, 38.5, 38.18, 38.25, 38.26, 38.27, 38.30, 38.66, 38.94 |
-| `abide start [--port <n>]` | Boots the built app. | 37.8, 37.10, 37.11, 37.12, 38.6, 38.100, 38.20, 38.21, 38.22, 38.23, 38.25, 38.26, 38.27, 38.28, 38.29, 38.58, 38.67, 38.68, 38.95, 38.97, 38.110 |
-| `abide [--url <origin>] [--port <n>]` | The interactive shell — on the built app it boots, or on the running app `--url` names. | 37.8, 37.10, 37.11, 37.12, 38.6, 38.7, 38.53, 38.54, 38.55, 38.58, 38.59, 38.60, 38.62 |
+| `abide check [dir…]` | The type-checker over a `.abide` tree. | 38.3, 38.31, 38.32, 38.33, 38.40, 38.105, 38.123 |
+| `abide routes [--json]` | Every address the app answers, the file answering it, and where each hook is filed. | 38.108, 38.123 |
+| `abide dev [--port <n>]` | Watches the project and keeps the app up. | 16.23, 16.56, 37.8, 37.9, 38.4, 38.14, 38.15, 38.16, 38.17, 38.19, 38.24, 38.25, 38.26, 38.28, 38.30, 38.35, 38.36, 38.37, 38.38, 38.41, 38.43, 38.58, 38.63, 38.64, 38.65, 38.94, 38.96, 38.97, 38.123 |
+| `abide build` | Builds the client into content-hashed chunks and a manifest. | 38.43, 38.5, 38.18, 38.25, 38.26, 38.27, 38.30, 38.66, 38.94, 38.123 |
+| `abide start [--port <n>]` | Boots the built app. | 37.8, 37.10, 37.11, 37.12, 38.6, 38.100, 38.20, 38.21, 38.22, 38.23, 38.25, 38.26, 38.27, 38.28, 38.29, 38.58, 38.67, 38.68, 38.95, 38.97, 38.110, 38.123 |
+| `abide [--url <origin>] [--port <n>]` | The interactive shell — on the built app it boots, or on the running app `--url` names. | 37.8, 37.10, 37.11, 37.12, 38.6, 38.7, 38.53, 38.54, 38.55, 38.58, 38.59, 38.60, 38.62, 38.123 |
 | `abide call <address> [args]` | One call to one handler. | 38.8, 38.61, 38.110 |
-| `abide openapi [--url <origin>]` | The OpenAPI document printed rather than served. | 38.9, 38.25, 38.110, 38.111 |
-| `abide mcp [--url <origin>]` | The app's MCP server over stdio. | 38.9, 38.13, 38.25, 38.110 |
+| `abide openapi [--url <origin>]` | The OpenAPI document printed rather than served. | 38.9, 38.25, 38.110, 38.111, 38.123 |
+| `abide mcp [--url <origin>]` | The app's MCP server over stdio. | 38.9, 38.13, 38.25, 38.110, 38.123 |
 | `abide watch <address> [args]` | A live subscription to one of the app's followed `GET`s. | 38.69 |
-| `abide compile [--target] [--out] [--platforms]` | One standalone executable. | 37.8, 37.10, 37.11, 37.12, 38.10, 38.25, 38.26, 38.44, 38.45, 38.46, 38.47, 38.48, 38.49, 38.50, 38.51, 38.52, 38.56, 38.93, 38.97 |
-| `abide bundle [--out]` | A desktop app for the host platform, with a window on the app. | 38.10, 38.25, 38.26, 38.70, 38.71, 38.72, 38.73, 38.74, 38.75, 38.76, 38.77, 38.78, 38.79, 38.80, 38.81, 38.82, 38.83, 38.84, 38.85, 38.86, 38.87, 38.88, 38.89, 38.90, 38.91, 38.92, 38.101, 38.102 |
+| `abide compile [--target] [--out] [--platforms]` | One standalone executable. | 37.8, 37.10, 37.11, 37.12, 38.10, 38.25, 38.26, 38.44, 38.45, 38.46, 38.47, 38.48, 38.49, 38.50, 38.51, 38.52, 38.56, 38.93, 38.97, 38.123 |
+| `abide bundle [--out]` | A desktop app for the host platform, with a window on the app. | 38.10, 38.25, 38.26, 38.70, 38.71, 38.72, 38.73, 38.74, 38.75, 38.76, 38.77, 38.78, 38.79, 38.80, 38.81, 38.82, 38.83, 38.84, 38.85, 38.86, 38.87, 38.88, 38.89, 38.90, 38.91, 38.92, 38.101, 38.102, 38.123 |
 | `abide lsp` | The `.abide` language server, over stdio. | 38.11, 38.34, 38.39, 38.98, 38.116, 38.117, 38.118 |
 | `--help` · `-h` · `abide help` | Usage, generated from the command list. | 38.12, 38.113, 38.114 |
 | `--version` · `-v` | The version of abide, or of the app a compiled executable holds. | 38.115 |

package/docs/RULEBOOK.md

@@ -700,6 +700,9 @@ holding that arm or row is removed.
 `watch`, MUST stop reading its sources once that owner stops and nothing else reads it, and MUST
 answer a later read with what its body computes then.
 
+12.15 The `Effect` values one turn wakes, a slot's own update among them, MAY run in any order,
+save where a clause orders them.
+
 # 13. Selections
 
 13.1 A `Selection` MUST be one `Reactive`, one `Keyed`, one `Rpc`, or a set of `tags`.
@@ -754,7 +757,11 @@ mutation's `declare` built while its write is in flight.
 where every value it sweeps is.
 
 13.19 `busy`, `ready`, `synced`, `refresh` and `invalidate` over an `Rpc` no call has reached in the
-current scope MUST answer as over a `Selection` with no entries.
+current scope MUST answer as over a `Selection` with no entries, and reading `busy`, `ready` or
+`synced` there MUST subscribe the reader to the first call that reaches it in that scope.
+
+13.20 `refresh` over a set of `tags` MUST NOT rerun a synchronous derivation that carries none of
+them, which MUST recompute from the load it reads.
 
 # 14. Tracking
 
@@ -1818,6 +1825,9 @@ to `middleware`.
 30.32 A `navigate` that is not a history step, whose request gets no answer while `online` is false,
 MUST leave the page and the address where they stand, save where 45.12 holds.
 
+30.33 A history step under 30.20, and a `navigate` under 30.21, MUST move `route.url` to the address
+it steps to.
+
 # 31. Reading and writing by name
 
 31.1 Inside a `.abide` file a name bound to a `Reactive` MUST be read wherever 31.3 does not hold it.
@@ -2098,6 +2108,9 @@ element, written or spread, runs for the same event, wherever the two are writte
 32.76 A `bind:` whose operand is a path into a value that takes an optional step (`?.`) MUST be a
 build error.
 
+32.77 A slot holding a value branded by `raw` MUST write its markup as given, with no element or
+attribute in it removed and no URL in it scheme-checked.
+
 # 33. Props
 
 33.1 `props` MUST be callable from a `<script>` block only, and calling it from a `<script module>`
@@ -2765,6 +2778,12 @@ supplies, and `abide start` MUST NOT supply that secret.
 38.121 Under `mount`, a call the component's browser module makes to a private handler MUST be
 answered in the test's process by the handler the component's server module declares.
 
+38.122 The project `abide scaffold` writes MUST NOT install a dependency's peer dependencies.
+
+38.123 A command `abide` builds, checks or boots the app for MUST be refused where the bun running it
+is outside the range abide's `engines.bun` names, and the refusal MUST name that bun's version and
+the range.
+
 # 39. Head and view transitions
 
 39.1 A `<head>` element in a `.abide` file MUST contribute its children to the document head.
@@ -3030,13 +3049,18 @@ has answered or failed.
 adopts the page, however early its answer arrived.
 
 41.28 A `render` MUST let the turn's queued microtasks run between setting up a `<Name/>` whose setup
-made an `Rpc` call and building that component's markup.
+made an `Rpc` call, or whose markup reads a bare `busy` or `ready`, and building that component's
+markup.
 
 41.29 A `render` answering a request whose `sec-fetch-dest` is `empty` MUST NOT fill the seed buffer,
 save one whose `abide-keep` header names `open`.
 
 41.30 A `render` answering a request carrying `abide-keep` MUST write 41.20's script.
 
+41.31 On a server, a bare `busy` or `ready` MUST answer over the loads set up before its component's
+markup is built, and a load a component set up later, one only a pending value places, MAY have it
+choose another arm at hydration under 41.24.
+
 # 42. The app object
 
 42.1 `createApp` MUST build the route table and compose every `Middleware` rung, per 16.14.

package/docs/abide.md

@@ -773,7 +773,7 @@ A hole is `{}` around an expression, and it updates the one thing it names and n
 | You write | Where it lands |
 | --- | --- |
 | `{expr}` | a text node, escaped |
-| `{raw(...)}` | markup, unescaped: `raw` brands a string as a `Raw` |
+| `{raw(...)}` | markup, unescaped and unchecked (32.77): `raw` brands a string as a `Raw`, so hand it markup you wrote, never a model's reply or a fetched page as it came |
 | `name={expr}` | one attribute, whole |
 | `name="…{expr}…"` | one attribute, interpolated |
 | `class:name={cond}` | one class, there while the condition holds |
@@ -2996,7 +2996,7 @@ test('one file answers for every company, reading its id', async () => {
 | --- | --- |
 | `route.name` | the pattern that matched, `/companies/[id]` for every company, so a log line keys on the page rather than on each address |
 | `Params` | what the segments matched; a query string is never in it |
-| `RouteParams<P>` | the type `route.params` has in a page filed under `P`, so `id` is text and a key the route lacks is an error |
+| `RouteParams<P>` | the type `route.params` has in a page or layout filed under `P`, so `id` is text and a key the route lacks is an error. A component under `lib/` has no route of its own and reads the loose `Params`: pass it the value as a prop, or narrow it with `RouteParams<'/…'>` |
 
 ## A layout holds what the companies pages share
 
@@ -3888,7 +3888,7 @@ test('the server paints the density the cookie holds', async () => {
 
 `cookies()` is the request's cookies on the server and the document's in the browser, as a `CookieMap`. Reading a cookie by name follows it, so the list changes on the click. The server render reads the same cookie off the request, so a reload paints compact rather than flashing comfortable first.
 
-The principal cookie is `HttpOnly`, so script never sees the seal. Use `cookies()` for the ones that are yours: a density, a theme, a dismissed banner.
+`cookies()` reads and writes any cookie the request carries: a density, a theme, or another system's session cookie your server checks. The principal cookie is `HttpOnly`, so in the browser `cookies()` never sees the seal.
 
 ## A handler decides which fields a caller may read
 
@@ -7112,7 +7112,7 @@ Arrive here knowing which name you want. Each page is read off the registry: the
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `watch` | `(effect: Effect) => () => void` | Begins a watch over whatever the effect reads. | [12.2](/rulebook#12.2), [12.4](/rulebook#12.4), [12.5](/rulebook#12.5), [12.6](/rulebook#12.6), [12.7](/rulebook#12.7), [12.10](/rulebook#12.10), [12.13](/rulebook#12.13) |
+| `watch` | `(effect: Effect) => () => void` | Begins a watch over whatever the effect reads. | [12.2](/rulebook#12.2), [12.4](/rulebook#12.4), [12.5](/rulebook#12.5), [12.6](/rulebook#12.6), [12.7](/rulebook#12.7), [12.10](/rulebook#12.10), [12.13](/rulebook#12.13), [12.15](/rulebook#12.15) |
 | `watch` | `(sources: Reactive<unknown, never, unknown, unknown> \| Reactive<unknown, never, unknown, unknown>[], effect: Effect) => () => void` | The narrowed form, over named sources. | [12.3](/rulebook#12.3) |
 
 ## Taught in
@@ -7167,7 +7167,7 @@ Arrive here knowing which name you want. Each page is read off the registry: the
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `busy` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether any entry in the selection has work in flight. | [13.2](/rulebook#13.2), [13.3](/rulebook#13.3), [13.5](/rulebook#13.5), [13.12](/rulebook#13.12), [46.11](/rulebook#46.11) |
+| `busy` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether any entry in the selection has work in flight. | [13.2](/rulebook#13.2), [13.3](/rulebook#13.3), [13.5](/rulebook#13.5), [13.12](/rulebook#13.12), [41.28](/rulebook#41.28), [41.31](/rulebook#41.31), [46.11](/rulebook#46.11) |
 
 ## Taught in
 
@@ -7185,7 +7185,7 @@ Arrive here knowing which name you want. Each page is read off the registry: the
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `ready` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether every entry in the selection has a value to serve. | [13.3](/rulebook#13.3), [13.5](/rulebook#13.5), [13.11](/rulebook#13.11), [13.12](/rulebook#13.12) |
+| `ready` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether every entry in the selection has a value to serve. | [13.3](/rulebook#13.3), [13.5](/rulebook#13.5), [13.11](/rulebook#13.11), [13.12](/rulebook#13.12), [41.28](/rulebook#41.28), [41.31](/rulebook#41.31) |
 
 ## Taught in
 
@@ -7221,7 +7221,7 @@ Arrive here knowing which name you want. Each page is read off the registry: the
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `refresh` | `(selection?: Selection, pattern?: Partial<Args>) => void` | Stale-while-revalidate over the selection. | [13.4](/rulebook#13.4), [13.7](/rulebook#13.7), [13.10](/rulebook#13.10), [13.12](/rulebook#13.12), [13.14](/rulebook#13.14), [13.15](/rulebook#13.15), [13.16](/rulebook#13.16), [13.17](/rulebook#13.17) |
+| `refresh` | `(selection?: Selection, pattern?: Partial<Args>) => void` | Stale-while-revalidate over the selection. | [13.4](/rulebook#13.4), [13.7](/rulebook#13.7), [13.10](/rulebook#13.10), [13.12](/rulebook#13.12), [13.14](/rulebook#13.14), [13.15](/rulebook#13.15), [13.16](/rulebook#13.16), [13.17](/rulebook#13.17), [13.20](/rulebook#13.20) |
 
 ## Taught in
 
@@ -8196,8 +8196,8 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `route.url` | `Reactive<URL>` | Where we are, fragment included. | [23.1](/rulebook#23.1), [23.2](/rulebook#23.2), [23.3](/rulebook#23.3), [23.4](/rulebook#23.4), [30.20](/rulebook#30.20), [30.21](/rulebook#30.21), [30.23](/rulebook#30.23), [19.16](/rulebook#19.16), [31.16](/rulebook#31.16) |
-| `route.params` | `Reactive<Params>` | The matched route's segments. | [23.1](/rulebook#23.1), [23.5](/rulebook#23.5), [23.9](/rulebook#23.9), [30.23](/rulebook#30.23), [31.16](/rulebook#31.16) |
+| `route.url` | `Reactive<URL>` | Where we are, fragment included. | [23.1](/rulebook#23.1), [23.2](/rulebook#23.2), [23.3](/rulebook#23.3), [23.4](/rulebook#23.4), [30.20](/rulebook#30.20), [30.21](/rulebook#30.21), [30.23](/rulebook#30.23), [30.33](/rulebook#30.33), [19.16](/rulebook#19.16), [31.16](/rulebook#31.16) |
+| `route.params` | `Reactive<Params>` | The matched route's segments — typed by its own route in a page or a layout, and `Params` in any other file. | [23.1](/rulebook#23.1), [23.5](/rulebook#23.5), [23.9](/rulebook#23.9), [30.23](/rulebook#30.23), [31.16](/rulebook#31.16) |
 | `route.name` | `Reactive<string>` | The resolution path, the same under any mount path. | [23.1](/rulebook#23.1), [23.6](/rulebook#23.6), [23.14](/rulebook#23.14), [31.16](/rulebook#31.16) |
 | `route.navigating` | `Reactive<boolean>` | Whether a navigation is in flight. | [23.1](/rulebook#23.1), [31.16](/rulebook#31.16) |
 
@@ -8961,7 +8961,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | [32.2](/rulebook#32.2), [32.24](/rulebook#32.24), [32.26](/rulebook#32.26), [32.30](/rulebook#32.30), [32.31](/rulebook#32.31), [32.70](/rulebook#32.70) |
+| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | [32.2](/rulebook#32.2), [32.24](/rulebook#32.24), [32.26](/rulebook#32.26), [32.30](/rulebook#32.30), [32.31](/rulebook#32.31), [32.70](/rulebook#32.70), [32.77](/rulebook#32.77) |
 
 ## Taught in
 
@@ -9084,7 +9084,7 @@ Pages and routing: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `render` | `(component: Component) => Promise<Uint8Array>` | What produces a document. | [29.10](/rulebook#29.10), [35.4](/rulebook#35.4), [35.5](/rulebook#35.5), [35.6](/rulebook#35.6), [35.15](/rulebook#35.15), [35.16](/rulebook#35.16), [41.1](/rulebook#41.1), [41.2](/rulebook#41.2), [41.3](/rulebook#41.3), [41.4](/rulebook#41.4), [41.9](/rulebook#41.9), [41.13](/rulebook#41.13), [41.16](/rulebook#41.16), [41.17](/rulebook#41.17), [41.18](/rulebook#41.18), [41.19](/rulebook#41.19), [41.20](/rulebook#41.20), [41.28](/rulebook#41.28), [35.11](/rulebook#35.11), [41.29](/rulebook#41.29), [41.30](/rulebook#41.30) |
+| `render` | `(component: Component) => Promise<Uint8Array>` | What produces a document. | [29.10](/rulebook#29.10), [35.4](/rulebook#35.4), [35.5](/rulebook#35.5), [35.6](/rulebook#35.6), [35.15](/rulebook#35.15), [35.16](/rulebook#35.16), [41.1](/rulebook#41.1), [41.2](/rulebook#41.2), [41.3](/rulebook#41.3), [41.4](/rulebook#41.4), [41.9](/rulebook#41.9), [41.13](/rulebook#41.13), [41.16](/rulebook#41.16), [41.17](/rulebook#41.17), [41.18](/rulebook#41.18), [41.19](/rulebook#41.19), [41.20](/rulebook#41.20), [41.28](/rulebook#41.28), [35.11](/rulebook#35.11), [41.29](/rulebook#41.29), [41.30](/rulebook#41.30), [41.31](/rulebook#41.31) |
 
 ## Taught in
 
@@ -10375,20 +10375,20 @@ CLI: what is written in place rather than imported.
 
 | Command | Meaning | Rules |
 | --- | --- | --- |
-| `abide scaffold <name>` | Writes a starter project. | [38.1](/rulebook#38.1), [38.42](/rulebook#38.42), [38.103](/rulebook#38.103), [38.104](/rulebook#38.104), [38.106](/rulebook#38.106), [38.112](/rulebook#38.112) |
+| `abide scaffold <name>` | Writes a starter project. | [38.1](/rulebook#38.1), [38.42](/rulebook#38.42), [38.103](/rulebook#38.103), [38.104](/rulebook#38.104), [38.106](/rulebook#38.106), [38.112](/rulebook#38.112), [38.122](/rulebook#38.122) |
 | `abide run <file> [args…]` | Runs a script under the abide runtime. | [38.2](/rulebook#38.2), [38.57](/rulebook#38.57) |
-| `abide check [dir…]` | The type-checker over a `.abide` tree. | [38.3](/rulebook#38.3), [38.31](/rulebook#38.31), [38.32](/rulebook#38.32), [38.33](/rulebook#38.33), [38.40](/rulebook#38.40), [38.105](/rulebook#38.105) |
-| `abide routes [--json]` | Every address the app answers, the file answering it, and where each hook is filed. | [38.108](/rulebook#38.108) |
-| `abide dev [--port <n>]` | Watches the project and keeps the app up. | [16.23](/rulebook#16.23), [16.56](/rulebook#16.56), [37.8](/rulebook#37.8), [37.9](/rulebook#37.9), [38.4](/rulebook#38.4), [38.14](/rulebook#38.14), [38.15](/rulebook#38.15), [38.16](/rulebook#38.16), [38.17](/rulebook#38.17), [38.19](/rulebook#38.19), [38.24](/rulebook#38.24), [38.25](/rulebook#38.25), [38.26](/rulebook#38.26), [38.28](/rulebook#38.28), [38.30](/rulebook#38.30), [38.35](/rulebook#38.35), [38.36](/rulebook#38.36), [38.37](/rulebook#38.37), [38.38](/rulebook#38.38), [38.41](/rulebook#38.41), [38.43](/rulebook#38.43), [38.58](/rulebook#38.58), [38.63](/rulebook#38.63), [38.64](/rulebook#38.64), [38.65](/rulebook#38.65), [38.94](/rulebook#38.94), [38.96](/rulebook#38.96), [38.97](/rulebook#38.97) |
-| `abide build` | Builds the client into content-hashed chunks and a manifest. | [38.43](/rulebook#38.43), [38.5](/rulebook#38.5), [38.18](/rulebook#38.18), [38.25](/rulebook#38.25), [38.26](/rulebook#38.26), [38.27](/rulebook#38.27), [38.30](/rulebook#38.30), [38.66](/rulebook#38.66), [38.94](/rulebook#38.94) |
-| `abide start [--port <n>]` | Boots the built app. | [37.8](/rulebook#37.8), [37.10](/rulebook#37.10), [37.11](/rulebook#37.11), [37.12](/rulebook#37.12), [38.6](/rulebook#38.6), [38.100](/rulebook#38.100), [38.20](/rulebook#38.20), [38.21](/rulebook#38.21), [38.22](/rulebook#38.22), [38.23](/rulebook#38.23), [38.25](/rulebook#38.25), [38.26](/rulebook#38.26), [38.27](/rulebook#38.27), [38.28](/rulebook#38.28), [38.29](/rulebook#38.29), [38.58](/rulebook#38.58), [38.67](/rulebook#38.67), [38.68](/rulebook#38.68), [38.95](/rulebook#38.95), [38.97](/rulebook#38.97), [38.110](/rulebook#38.110) |
-| `abide [--url <origin>] [--port <n>]` | The interactive shell — on the built app it boots, or on the running app `--url` names. | [37.8](/rulebook#37.8), [37.10](/rulebook#37.10), [37.11](/rulebook#37.11), [37.12](/rulebook#37.12), [38.6](/rulebook#38.6), [38.7](/rulebook#38.7), [38.53](/rulebook#38.53), [38.54](/rulebook#38.54), [38.55](/rulebook#38.55), [38.58](/rulebook#38.58), [38.59](/rulebook#38.59), [38.60](/rulebook#38.60), [38.62](/rulebook#38.62) |
+| `abide check [dir…]` | The type-checker over a `.abide` tree. | [38.3](/rulebook#38.3), [38.31](/rulebook#38.31), [38.32](/rulebook#38.32), [38.33](/rulebook#38.33), [38.40](/rulebook#38.40), [38.105](/rulebook#38.105), [38.123](/rulebook#38.123) |
+| `abide routes [--json]` | Every address the app answers, the file answering it, and where each hook is filed. | [38.108](/rulebook#38.108), [38.123](/rulebook#38.123) |
+| `abide dev [--port <n>]` | Watches the project and keeps the app up. | [16.23](/rulebook#16.23), [16.56](/rulebook#16.56), [37.8](/rulebook#37.8), [37.9](/rulebook#37.9), [38.4](/rulebook#38.4), [38.14](/rulebook#38.14), [38.15](/rulebook#38.15), [38.16](/rulebook#38.16), [38.17](/rulebook#38.17), [38.19](/rulebook#38.19), [38.24](/rulebook#38.24), [38.25](/rulebook#38.25), [38.26](/rulebook#38.26), [38.28](/rulebook#38.28), [38.30](/rulebook#38.30), [38.35](/rulebook#38.35), [38.36](/rulebook#38.36), [38.37](/rulebook#38.37), [38.38](/rulebook#38.38), [38.41](/rulebook#38.41), [38.43](/rulebook#38.43), [38.58](/rulebook#38.58), [38.63](/rulebook#38.63), [38.64](/rulebook#38.64), [38.65](/rulebook#38.65), [38.94](/rulebook#38.94), [38.96](/rulebook#38.96), [38.97](/rulebook#38.97), [38.123](/rulebook#38.123) |
+| `abide build` | Builds the client into content-hashed chunks and a manifest. | [38.43](/rulebook#38.43), [38.5](/rulebook#38.5), [38.18](/rulebook#38.18), [38.25](/rulebook#38.25), [38.26](/rulebook#38.26), [38.27](/rulebook#38.27), [38.30](/rulebook#38.30), [38.66](/rulebook#38.66), [38.94](/rulebook#38.94), [38.123](/rulebook#38.123) |
+| `abide start [--port <n>]` | Boots the built app. | [37.8](/rulebook#37.8), [37.10](/rulebook#37.10), [37.11](/rulebook#37.11), [37.12](/rulebook#37.12), [38.6](/rulebook#38.6), [38.100](/rulebook#38.100), [38.20](/rulebook#38.20), [38.21](/rulebook#38.21), [38.22](/rulebook#38.22), [38.23](/rulebook#38.23), [38.25](/rulebook#38.25), [38.26](/rulebook#38.26), [38.27](/rulebook#38.27), [38.28](/rulebook#38.28), [38.29](/rulebook#38.29), [38.58](/rulebook#38.58), [38.67](/rulebook#38.67), [38.68](/rulebook#38.68), [38.95](/rulebook#38.95), [38.97](/rulebook#38.97), [38.110](/rulebook#38.110), [38.123](/rulebook#38.123) |
+| `abide [--url <origin>] [--port <n>]` | The interactive shell — on the built app it boots, or on the running app `--url` names. | [37.8](/rulebook#37.8), [37.10](/rulebook#37.10), [37.11](/rulebook#37.11), [37.12](/rulebook#37.12), [38.6](/rulebook#38.6), [38.7](/rulebook#38.7), [38.53](/rulebook#38.53), [38.54](/rulebook#38.54), [38.55](/rulebook#38.55), [38.58](/rulebook#38.58), [38.59](/rulebook#38.59), [38.60](/rulebook#38.60), [38.62](/rulebook#38.62), [38.123](/rulebook#38.123) |
 | `abide call <address> [args]` | One call to one handler. | [38.8](/rulebook#38.8), [38.61](/rulebook#38.61), [38.110](/rulebook#38.110) |
-| `abide openapi [--url <origin>]` | The OpenAPI document printed rather than served. | [38.9](/rulebook#38.9), [38.25](/rulebook#38.25), [38.110](/rulebook#38.110), [38.111](/rulebook#38.111) |
-| `abide mcp [--url <origin>]` | The app's MCP server over stdio. | [38.9](/rulebook#38.9), [38.13](/rulebook#38.13), [38.25](/rulebook#38.25), [38.110](/rulebook#38.110) |
+| `abide openapi [--url <origin>]` | The OpenAPI document printed rather than served. | [38.9](/rulebook#38.9), [38.25](/rulebook#38.25), [38.110](/rulebook#38.110), [38.111](/rulebook#38.111), [38.123](/rulebook#38.123) |
+| `abide mcp [--url <origin>]` | The app's MCP server over stdio. | [38.9](/rulebook#38.9), [38.13](/rulebook#38.13), [38.25](/rulebook#38.25), [38.110](/rulebook#38.110), [38.123](/rulebook#38.123) |
 | `abide watch <address> [args]` | A live subscription to one of the app's followed `GET`s. | [38.69](/rulebook#38.69) |
-| `abide compile [--target] [--out] [--platforms]` | One standalone executable. | [37.8](/rulebook#37.8), [37.10](/rulebook#37.10), [37.11](/rulebook#37.11), [37.12](/rulebook#37.12), [38.10](/rulebook#38.10), [38.25](/rulebook#38.25), [38.26](/rulebook#38.26), [38.44](/rulebook#38.44), [38.45](/rulebook#38.45), [38.46](/rulebook#38.46), [38.47](/rulebook#38.47), [38.48](/rulebook#38.48), [38.49](/rulebook#38.49), [38.50](/rulebook#38.50), [38.51](/rulebook#38.51), [38.52](/rulebook#38.52), [38.56](/rulebook#38.56), [38.93](/rulebook#38.93), [38.97](/rulebook#38.97) |
-| `abide bundle [--out]` | A desktop app for the host platform, with a window on the app. | [38.10](/rulebook#38.10), [38.25](/rulebook#38.25), [38.26](/rulebook#38.26), [38.70](/rulebook#38.70), [38.71](/rulebook#38.71), [38.72](/rulebook#38.72), [38.73](/rulebook#38.73), [38.74](/rulebook#38.74), [38.75](/rulebook#38.75), [38.76](/rulebook#38.76), [38.77](/rulebook#38.77), [38.78](/rulebook#38.78), [38.79](/rulebook#38.79), [38.80](/rulebook#38.80), [38.81](/rulebook#38.81), [38.82](/rulebook#38.82), [38.83](/rulebook#38.83), [38.84](/rulebook#38.84), [38.85](/rulebook#38.85), [38.86](/rulebook#38.86), [38.87](/rulebook#38.87), [38.88](/rulebook#38.88), [38.89](/rulebook#38.89), [38.90](/rulebook#38.90), [38.91](/rulebook#38.91), [38.92](/rulebook#38.92), [38.101](/rulebook#38.101), [38.102](/rulebook#38.102) |
+| `abide compile [--target] [--out] [--platforms]` | One standalone executable. | [37.8](/rulebook#37.8), [37.10](/rulebook#37.10), [37.11](/rulebook#37.11), [37.12](/rulebook#37.12), [38.10](/rulebook#38.10), [38.25](/rulebook#38.25), [38.26](/rulebook#38.26), [38.44](/rulebook#38.44), [38.45](/rulebook#38.45), [38.46](/rulebook#38.46), [38.47](/rulebook#38.47), [38.48](/rulebook#38.48), [38.49](/rulebook#38.49), [38.50](/rulebook#38.50), [38.51](/rulebook#38.51), [38.52](/rulebook#38.52), [38.56](/rulebook#38.56), [38.93](/rulebook#38.93), [38.97](/rulebook#38.97), [38.123](/rulebook#38.123) |
+| `abide bundle [--out]` | A desktop app for the host platform, with a window on the app. | [38.10](/rulebook#38.10), [38.25](/rulebook#38.25), [38.26](/rulebook#38.26), [38.70](/rulebook#38.70), [38.71](/rulebook#38.71), [38.72](/rulebook#38.72), [38.73](/rulebook#38.73), [38.74](/rulebook#38.74), [38.75](/rulebook#38.75), [38.76](/rulebook#38.76), [38.77](/rulebook#38.77), [38.78](/rulebook#38.78), [38.79](/rulebook#38.79), [38.80](/rulebook#38.80), [38.81](/rulebook#38.81), [38.82](/rulebook#38.82), [38.83](/rulebook#38.83), [38.84](/rulebook#38.84), [38.85](/rulebook#38.85), [38.86](/rulebook#38.86), [38.87](/rulebook#38.87), [38.88](/rulebook#38.88), [38.89](/rulebook#38.89), [38.90](/rulebook#38.90), [38.91](/rulebook#38.91), [38.92](/rulebook#38.92), [38.101](/rulebook#38.101), [38.102](/rulebook#38.102), [38.123](/rulebook#38.123) |
 | `abide lsp` | The `.abide` language server, over stdio. | [38.11](/rulebook#38.11), [38.34](/rulebook#38.34), [38.39](/rulebook#38.39), [38.98](/rulebook#38.98), [38.116](/rulebook#38.116), [38.117](/rulebook#38.117), [38.118](/rulebook#38.118) |
 | `--help` · `-h` · `abide help` | Usage, generated from the command list. | [38.12](/rulebook#38.12), [38.113](/rulebook#38.113), [38.114](/rulebook#38.114) |
 | `--version` · `-v` | The version of abide, or of the app a compiled executable holds. | [38.115](/rulebook#38.115) |

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@abide/abide",
-    "version": "0.116.3",
+    "version": "0.117.0",
     "type": "module",
     "description": "Isomorphic type-safe framework for reactive async interfaces for humans and machines",
     "license": "MIT",

package/src/compiler/TypeSession.ts

@@ -915,8 +915,9 @@ export class TypeSession {
             checked.push({ source, map, refusals: shadow.refusals })
         }
         // 34.6 — WHAT THE BUNDLER RESOLVES AND THE CHECKER CANNOT: a stylesheet imported for its
-        // effect. Declared in a file of its own at the app's root, which is a script, because a
-        // pattern module can only be declared outside a module.
+        // effect, and (34.21) markdown imported as text into a `.ts`, which bun's own types leave
+        // out where they declare `.txt`. Declared in a file of its own at the app's root, which is
+        // a script, because a pattern module can only be declared outside a module.
         this.register(
             `${this.canonical(within)}/${AMBIENT}`,
             AMBIENT_DECLARATIONS,
@@ -1484,6 +1485,10 @@ function routesDeclaration(addresses: readonly string[]): string {
     return `export {}\ndeclare module ${JSON.stringify(URL_SOURCE)} {\n    interface Routes {\n${keys}    }\n}\n`
 }
 const AMBIENT_DECLARATIONS = `declare module '*.css' {}
+declare module '*.md' {
+    const text: string
+    export default text
+}
 `
 
 /**

package/src/compiler/compileApp.ts

@@ -11,6 +11,7 @@ import { COMPONENT_QUERY } from '#server/MODULE_QUERIES.ts'
 import { ROUTES_TABLE, SERVER_TABLE } from '#server/TABLES.ts'
 import { VIRTUAL_DIRECTORY } from '#server/VIRTUAL_DIRECTORY.ts'
 import { CLIENT_ADDRESS } from '#shared/ADDRESSES.ts'
+import type { JsonValue } from '#shared/JsonValue.ts'
 import { ROUTING_SPECIFIER, WIRE_SPECIFIER } from '#shared/SPECIFIERS.ts'
 import {
     type AppLayout,
@@ -317,6 +318,7 @@ async function emitApp(
     refuseSharedRoutes(routes, mounts, refusals)
     refuseAddressCollision(routes, mounts, layout.published, refusals)
     const standIns = standInsOf(mounts)
+    const derived = derivedOf(mounts)
     // 37.1 — every module a server block or a handler file runs in, for the boot to import before
     // `onStart`.
     const servers: string[] = []
@@ -329,6 +331,7 @@ async function emitApp(
                 entry,
                 standIns.get(entry.relative),
                 entry.text,
+                derived.get(entry.relative),
             )
         } catch (thrown) {
             refusals.at(entry.path, thrown)
@@ -368,6 +371,7 @@ async function emitApp(
             handlers[mount.source] = {
                 scope: mount.scope,
                 client: standIns.get(mount.source) ?? '',
+                args: mount.args,
             }
     if (routes.length > 0) {
         tables[ROUTES_TABLE] = clientTable(routes, transitions)
@@ -624,6 +628,21 @@ function standInsOf(mounts: Mount[]): Map<string, string> {
     return standIns
 }
 
+/**
+ * 19.9 — the schema each private handler's annotation derives, by its binding, by source: what its
+ * server module holds it to (15.8). A handler file's is its face's (`HandlerFace`).
+ */
+function derivedOf(mounts: Mount[]): Map<string, Record<string, JsonValue>> {
+    const derived = new Map<string, Record<string, JsonValue>>()
+    for (const mount of mounts) {
+        if (!mount.private || mount.args === undefined) continue
+        const held = derived.get(mount.source) ?? {}
+        held[mount.name] = mount.args
+        derived.set(mount.source, held)
+    }
+    return derived
+}
+
 /**
  * One handler's wrapper, bound as `binding` writes it.
  *

package/src/compiler/emitComponent.ts

@@ -1,8 +1,9 @@
-import { SERVER_SPECIFIER } from '#shared/SPECIFIERS.ts'
+import type { JsonValue } from '#shared/JsonValue.ts'
+import { SERVER_SPECIFIER, SHARED_SPECIFIER } from '#shared/SPECIFIERS.ts'
 import { type CheckerAnswer, UNCHECKED } from './CheckerAnswer.ts'
 import { Cursor, placeTemplate } from './Cursor.ts'
 import { type LoweredChunk, Lowering, PROPS } from './Lowering.ts'
-import type { AbideFile } from './parseAbide.ts'
+import { type AbideFile, scriptBodies } from './parseAbide.ts'
 import { privateExports } from './projectShadow.ts'
 import {
     concat,
@@ -14,7 +15,7 @@ import {
     SERVER_LANE,
 } from './renderMarkup.ts'
 import { insideShare, SETTLED_AT, shareScope } from './shareScope.ts'
-import { splitImports, withoutProps } from './splitImports.ts'
+import { importStatements, splitImports, withoutProps } from './splitImports.ts'
 import type { TemplateNode } from './TemplateNode.ts'
 
 // The name the body is bound to while a component's head contributions land (`HEADS`).
@@ -40,7 +41,8 @@ const CALLS_BEFORE = '__callsBefore'
  * `settles` IS A PAGE OR A LAYOUT, which `render` builds a level at a time (41.19): its setup runs
  * at the call and its markup is built on the first read of `head` or `body`, so the calls the
  * setup started are given the turn to answer. Every other component answers the same way only where
- * its setup made a call (41.28), and builds where it is called otherwise.
+ * its setup made a call or its markup reads a bare `busy` or `ready` (41.28), and builds where it is
+ * called otherwise.
  */
 export function emitComponent(
     file: AbideFile,
@@ -50,6 +52,8 @@ export function emitComponent(
     route = '/',
     /** 38.97 — where given, every chunk the module is written around (`sourceMapOf`). */
     chunks?: LoweredChunk[],
+    /** 19.9 — the schema each private handler's annotation derives, by its binding. */
+    derived: Readonly<Record<string, JsonValue>> = {},
 ): string {
     // Only what the page actually uses. An emitted module carrying an import nothing calls is a
     // name the app's own tooling reports as unused, in a file nobody wrote.
@@ -91,7 +95,7 @@ export function emitComponent(
             : `${lowering.use('fileRoute')}(${JSON.stringify(route)})
 ${serverSetup.body}
 ${lowering.use('fileRoute')}(undefined)
-${privateExports(file.servers.join('\n'))}`
+${heldToAnnotations(lowering, derived)}${privateExports(file.servers.join('\n'))}`
     const setup = splitImports(lowering.scripts())
     const componentBody = setup.body
 
@@ -141,16 +145,22 @@ ${privateExports(file.servers.join('\n'))}`
     // made a call, and then answers as a page does, for `renderComponent` to build after the turn.
     // THE BUILD IS WRITTEN TWICE rather than always run through `__build`: the closure measured ~4%
     // a row on `bench:component`'s card under JSC, the second copy nothing but server module bytes.
-    // One with no setup cannot call, and is written once.
-    const waits = !settles && componentBody.trim() !== ''
-    const level = settles
-        ? deferred()
-        : waits
-          ? `    if (${lowering.use('callsInRender')}() !== ${CALLS_BEFORE}) {
+    // One with no setup cannot call, and is written once. One whose markup reads a bare `busy` or
+    // `ready` answers as a page does always: built where it is called, it would answer before the
+    // siblings after it had started a load, where the browser's answers once every setup has run.
+    const probes =
+        !settles &&
+        readsBareProbe(file, `${head}\n${declared}\n${body.join('\n')}`)
+    const waits = !settles && !probes && componentBody.trim() !== ''
+    const level =
+        settles || probes
+            ? deferred()
+            : waits
+              ? `    if (${lowering.use('callsInRender')}() !== ${CALLS_BEFORE}) {
 ${deferred()}
     }
 ${build}`
-          : build
+              : build
     return `${moduleImports(lowering, () => SERVER_SPECIFIER, [moduleSetup, serverSetup, setup])}
 ${moduleSetup.body === '' ? '' : `${moduleSetup.body}\n`}${serverBody}export default function Component(${lowering.takesProps() ? `${PROPS} = {}` : ''}) {
 ${waits ? `    const ${CALLS_BEFORE} = ${lowering.use('callsInRender')}()\n` : ''}${opened}${componentBody}
@@ -159,6 +169,44 @@ ${level}${closed}
 `
 }
 
+/**
+ * Whether `markup`, a component's emitted head and body, calls `busy` or `ready` with no argument,
+ * under any name the file's scripts import either by from `@abide/abide`. A member's (`s.busy()`)
+ * is not bare.
+ */
+function readsBareProbe(file: AbideFile, markup: string): boolean {
+    let names = ''
+    for (const script of scriptBodies(file))
+        for (const statement of importStatements(script))
+            if (statement.specifier === SHARED_SPECIFIER && !statement.typeOnly)
+                for (const binding of statement.bindings)
+                    if (
+                        !binding.typeOnly &&
+                        (binding.imported === 'busy' ||
+                            binding.imported === 'ready')
+                    )
+                        names += `${names === '' ? '' : '|'}${binding.local}`
+    return (
+        names !== '' &&
+        new RegExp(`(?<![\\w$.])(?:${names})\\(\\s*\\)`).test(markup)
+    )
+}
+
+/**
+ * 15.8, 19.9 — each private handler held to the schema its annotation derives, once its server block
+ * has built it: the module is what the server mounts and what a component under `mount` calls
+ * (38.121), so a call is held to it whoever makes it.
+ */
+function heldToAnnotations(
+    lowering: Lowering,
+    derived: Readonly<Record<string, JsonValue>>,
+): string {
+    let out = ''
+    for (const name in derived)
+        out += `${lowering.use('derivedArgs')}(${name}, ${JSON.stringify(derived[name])})\n`
+    return out
+}
+
 /**
  * An emitted module's imports: each framework name `lowering` used, from the specifier it ships
  * under, and the author's own from both script blocks, already pointed where they landed

package/src/compiler/emitSource.ts

@@ -1,4 +1,5 @@
 import { STYLE_QUERY } from '#server/MODULE_QUERIES.ts'
+import type { JsonValue } from '#shared/JsonValue.ts'
 import type { Placement } from '#server/placement.ts'
 import type { CheckerAnswer } from './CheckerAnswer.ts'
 import { emitClient } from './emitClient.ts'
@@ -35,6 +36,8 @@ export function emitSource(
     standIns = '',
     /** 38.97 — the `.abide`'s text, where the build wants each module's source map. */
     text?: string,
+    /** 19.9 — the schema each private handler it declares derives off its annotation, by name. */
+    derived?: Readonly<Record<string, JsonValue>>,
 ): {
     server: string
     client: string
@@ -109,6 +112,7 @@ export function emitSource(
         kind !== 'component',
         source.scope,
         serverChunks,
+        derived,
     )
     const name = relative.slice(relative.lastIndexOf('/') + 1)
     const browser = withStandIns(

package/src/compiler/scaffold.ts

@@ -35,15 +35,17 @@ const SOURCE_ALIAS = { '#src/*': ['./src/*', './src/*.ts'] }
  * 38.109, 38.119 — the starter's `bunfig.toml`: the harness's abide preload, which is a DOM a test
  * can mount into and measure, then abide's own — the app's `.abide` files imported as modules, with
  * nothing booted first. Its test root is `src`, so a browser test under `e2e` is playwright's alone.
+ * 38.122 — and no peer installed: `bun-plugin-tailwind` names `bun` as one, and an installed copy
+ * lands first on the PATH inside `bun run`, shadowing the bun that runs everything else.
  */
-export const TEST_PRELOAD =
-    '# 38.109, 38.119 — a DOM to mount into and measure, then the app\'s `.abide` files as modules.\n[test]\nroot = "src"\npreload = ["@abide/harness/abide/preload"]\n'
+export const BUNFIG =
+    '# 38.122 — a peer is not installed: an installed `bun` would shadow this one inside `bun run`.\n[install]\npeer = false\n\n# 38.109, 38.119 — a DOM to mount into and measure, then the app\'s `.abide` files as modules.\n[test]\nroot = "src"\npreload = ["@abide/harness/abide/preload"]\n'
 
 // WRITTEN, NOT COPIED, beside the manifests: a packer drops a `bunfig.toml` or a `.gitignore` from
 // the tarball (`bun pm pack` both, `npm pack` the second), so neither survives as a starter file.
 function filesFor(name: string): Record<string, string> {
     return {
-        'bunfig.toml': TEST_PRELOAD,
+        'bunfig.toml': BUNFIG,
         '.gitignore': 'node_modules\n.abide\n',
         'package.json': `${JSON.stringify(
             {

package/src/server/abideModules.ts

@@ -120,7 +120,8 @@ export function serveCompilation(root: string, compilation: Compilation): void {
     const real = realOrAsGiven(root)
     const handlerFiles = addCompilation(real, compilation, RUNTIME)
     installSourceMaps(serverMapsOf(compilation, real), real)
-    if (handlerFiles.length !== 0) Bun.plugin(handlerFilesPlugin(handlerFiles))
+    if (handlerFiles.length !== 0)
+        Bun.plugin(handlerFilesPlugin(handlerFiles, RUNTIME.handlers))
     if (registered) return
     registered = true
     Bun.plugin(modulesPlugin(RUNTIME))
@@ -132,7 +133,13 @@ export function serveCompilation(root: string, compilation: Compilation): void {
 // plugin per compilation because the filter is fixed at registration, and the runtime's `onLoad`
 // cannot fall through, so the filter names the handler files and nothing else. The face it names
 // is resolved by `modulesPlugin`, registered once.
-function handlerFilesPlugin(paths: string[]): Bun.BunPlugin {
+// 15.8, 19.9 — AND HOLDS ITS HANDLER TO THE SCHEMA ITS ANNOTATION DERIVES, once the face has built it:
+// this module is what every import of the file is answered with — the server's mount, a test's own
+// import, a component's under `mount` — so a call is held to it whoever makes it.
+function handlerFilesPlugin(
+    paths: string[],
+    faces: ReadonlyMap<string, HandlerFace>,
+): Bun.BunPlugin {
     return {
         name: 'abide-handler-files',
         setup(build) {
@@ -142,10 +149,18 @@ function handlerFilesPlugin(paths: string[]): Bun.BunPlugin {
                         `^(?:${paths.map(RegExp.escape).join('|')})$`,
                     ),
                 },
-                (args) => ({
-                    contents: `export { default } from ${JSON.stringify(`${args.path}${HANDLER_SUFFIX}`)}\n`,
-                    loader: 'js',
-                }),
+                (args) => {
+                    const face = JSON.stringify(`${args.path}${HANDLER_SUFFIX}`)
+                    const schema = faces.get(args.path)?.args
+                    return {
+                        contents:
+                            `export { default } from ${face}\n` +
+                            (schema === undefined
+                                ? ''
+                                : `import __handler from ${face}\nimport { derivedArgs as __derivedArgs } from '${SERVER_SPECIFIER}'\n__derivedArgs(__handler, ${JSON.stringify(schema)})\n`),
+                        loader: 'js',
+                    }
+                },
             )
         },
     }

package/src/server/answerRpc.ts

@@ -16,7 +16,7 @@ import type { Gated } from '#shared/reactive/argsContract.ts'
 import { deadlineOf, heldGenerationOf } from '#shared/reactive/index.ts'
 import type { Defaults } from '#shared/reactive/parameterDefaults.ts'
 import { notFound, refuse } from '#shared/refuse.ts'
-import type { Method, Rpc } from '#shared/rpc.ts'
+import type { HeldToAnnotation, Method, Rpc } from '#shared/rpc.ts'
 import { argsInURL } from '#shared/rpcRequest.ts'
 import { VERSION_HEADER } from '#shared/VERSION_HEADER.ts'
 import { versionInEtag } from '#shared/versionInEtag.ts'
@@ -118,20 +118,13 @@ export type Mounted = Mount & {
      * subscription to it both pass through (37.2, 18.26).
      */
     rungs: AppRung[]
-    handler: Rpc<unknown, unknown> & Gated<unknown>
+    handler: Rpc<unknown, unknown> & Gated<unknown> & HeldToAnnotation
     /**
      * The args' JSON Schema, probed once at mount.
      *
      * 19.7, 20.11 — a third-party schema converts itself on every probe.
      */
     argsDocument: Document | undefined
-    /**
-     * What the wire holds args to where the handler declares no `args` gate of its own.
-     *
-     * 19.9 — the annotation's schema. An in-process call already holds the type, so the handler
-     * never runs it.
-     */
-    wireArgs: JsonValue | undefined
 }
 
 /**
@@ -172,7 +165,6 @@ export function mountedOwn(
             result: undefined,
             handler: handler as Mounted['handler'],
             argsDocument: undefined,
-            wireArgs: undefined,
         },
     ]
 }
@@ -198,7 +190,7 @@ export async function mountHandlers(
     for (let at = 0; at < table.length; at += 1) {
         const mount = table[at] as Mount
         const exported = (modules[at] as Record<string, unknown>)[mount.export]
-        const handler = exported as Rpc<unknown, unknown> & Gated<unknown>
+        const handler = exported as Mounted['handler']
         const declared = argsDocumentOf(handler)
         // 16.9, 16.10 — the address `rpc.url` and `rpc.raw` build on, under the mount — and what a
         // page's render turns a call it made into the browser's request by (41.20).
@@ -210,7 +202,6 @@ export async function mountHandlers(
             rungs: rungsOver(mount.scope),
             handler,
             argsDocument: declared ?? (mount.args as Document | undefined),
-            wireArgs: declared === undefined ? mount.args : undefined,
         })
     }
     return { handlers }

package/src/server/argsFor.ts

@@ -2,9 +2,9 @@
 // off the wire: over http (16.2) and a `GET` followed over the socket mux (18.3). Each lane reads the
 // args off its own transport and answers a refusal in its own form.
 
+import { DERIVED_ARGS } from '#shared/DERIVED_ARGS.ts'
 import { normalized } from '#shared/reactive/argsContract.ts'
 import { validationError } from '#shared/refuse.ts'
-import { validateJson } from '#shared/validateJson.ts'
 import type { Mounted } from './answerRpc.ts'
 import { coerceArgs } from './coerceArgs.ts'
 
@@ -16,11 +16,10 @@ import { coerceArgs } from './coerceArgs.ts'
  * 19.7 — the text as the types the handler's `args` declares. 11.27 — then the defaults, ahead of
  * every key taken after it: the seed a render filed and the `global` entry standing were both filed
  * under them (11.29). 19.9 — THE WIRE HELD TO THE ANNOTATION, where no `args` schema is declared to
- * hold it. Args that did not come are held as an empty record: a schema is only derived where the
- * handler's args are a required record, so a required member missing is refused, not read off nothing.
+ * hold it — the check the handler carries (`derivedArgs`), which its in-process call makes too (15.8).
  */
 export function argsFor(
-    found: Pick<Mounted, 'handler' | 'argsDocument' | 'wireArgs'>,
+    found: Pick<Mounted, 'handler' | 'argsDocument'>,
     sent: unknown,
     query: string | undefined,
 ): unknown {
@@ -33,9 +32,7 @@ export function argsFor(
                   query,
               )
     const args = normalized(found.handler, coerced)
-    if (found.wireArgs !== undefined) {
-        const issues = validateJson(found.wireArgs, args ?? {})
-        if (issues !== null) throw validationError(issues)
-    }
+    const issues = found.handler[DERIVED_ARGS]?.(args) ?? null
+    if (issues !== null) throw validationError(issues)
     return args
 }

package/src/server/deferredBuilds.ts

@@ -1,4 +1,5 @@
-// 41.28 — A CHILD WHOSE SETUP MADE A CALL IS BUILT AS A PAGE IS: after the turn.
+// 41.28 — A CHILD WHOSE SETUP MADE A CALL IS BUILT AS A PAGE IS: after the turn — and so is one whose
+// markup reads a bare `busy` or `ready`, which the compiler writes to answer as a page does always.
 // A component is set up where its parent's markup invokes it, so its build cannot wait inline; it is
 // left as a marker in the parent's head and body, built once the turn has run, and written in where
 // its marker stands. A child whose setup made no call builds where it stands, as before, and pays a

package/src/server/derivedArgs.ts

@@ -0,0 +1,25 @@
+import { DERIVED_ARGS } from '#shared/DERIVED_ARGS.ts'
+import type { JsonValue } from '#shared/JsonValue.ts'
+import type { Gated } from '#shared/reactive/argsContract.ts'
+import type { HeldToAnnotation } from '#shared/rpc.ts'
+import { validateJson } from '#shared/validateJson.ts'
+import { argsDocumentOf } from './coerceArgs.ts'
+
+/**
+ * Holds `handler`'s args to `schema`, the one the build derived off its annotation, for every call
+ * of it from now on: in process and over the wire (15.8, 19.9).
+ *
+ * What the module a handler is loaded through calls once its handler is built — a handler file's
+ * face and a `<script server>`'s module — so the schema is there wherever the handler can be
+ * called, whether or not an app mounted it. Not where its `args` gate publishes a document of its
+ * own, which holds the args itself (19.7). Args that did not come are held as an empty record: a
+ * schema is only derived where the handler's args are a required record, so a required member
+ * missing is refused, not read off nothing.
+ */
+export function derivedArgs(
+    handler: HeldToAnnotation & Gated<unknown>,
+    schema: JsonValue,
+): void {
+    if (argsDocumentOf(handler) !== undefined) return
+    handler[DERIVED_ARGS] = (args) => validateJson(schema, args ?? {})
+}

package/src/server/faceOf.ts

@@ -3,6 +3,7 @@
 // adapter that hands bun's hooks to it, because bun decides which hook asks (an `onResolve` for a
 // specifier, an `onLoad` for a path), and this decides what the answer is.
 
+import type { JsonValue } from '#shared/JsonValue.ts'
 import { HANDLER_SUFFIX, SERVER_QUERY } from './MODULE_QUERIES.ts'
 
 // A VIRTUAL FACE'S PATH: its file's, with a suffix that is not a query. Both registries key a module
@@ -45,8 +46,15 @@ export type Asked =
     | 'abide'
     | 'handler'
 
-/** One handler file, as `Compilation.handlers` holds it. */
-export type HandlerFace = { scope: string; client: string }
+/**
+ * One handler file, as `Compilation.handlers` holds it — and 19.9's schema its default's annotation
+ * derives, which the module at the file's path holds it to (`derivedArgs`).
+ */
+export type HandlerFace = {
+    scope: string
+    client: string
+    args: JsonValue | undefined
+}
 
 /**
  * The face an import of `file` is answered with, asked `asked` from `importer` in `lane` — or

package/src/server/index.ts

@@ -52,6 +52,9 @@ export { type App, createApp } from './createApp.ts'
 // 41.28's run-time half: an emitted component reads it on either side of its setup, and one whose
 // setup made a call answers as a page does. Not an app's name.
 export { callsInRender } from './deferredBuilds.ts'
+// 19.9's run-time half: what the module a handler is loaded through calls to hold it to the schema
+// its annotation derives (15.8). Not an app's name.
+export { derivedArgs } from './derivedArgs.ts'
 // 37.1's run-time half: what a compiled server module calls around its `<script server>`, so the
 // hooks it makes are filed at its route.
 export {

package/src/server/renderComponent.ts

@@ -30,8 +30,9 @@ export function renderComponent(
     const rendered = (
         component as (props: Record<string, () => unknown>) => Rendered
     )(props)
-    // 41.28 — A CHILD WHOSE SETUP MADE A CALL ANSWERS AS A PAGE DOES, with a `scope` and its build
-    // left for the first read, and is built after the turn where a page is being built.
+    // 41.28 — A CHILD WHOSE SETUP MADE A CALL, OR WHOSE MARKUP READS A BARE PROBE, ANSWERS AS A PAGE
+    // DOES, with a `scope` and its build left for the first read, and is built after the turn where a
+    // page is being built.
     if ('scope' in rendered) {
         const marker = deferBuild(rendered, heads, callsFrom)
         if (marker !== undefined) return marker

package/src/server/runtimeRefusal.ts

@@ -0,0 +1,13 @@
+/**
+ * Why the bun at `version` cannot run abide, which asks for `range` — or `undefined` where it can.
+ *
+ * 38.123 — named in full, both versions and the way out, since an older bun fails later and
+ * somewhere unrelated, if at all.
+ */
+export function runtimeRefusal(
+    version: string,
+    range: string,
+): string | undefined {
+    if (Bun.semver.satisfies(version, range)) return undefined
+    return `this is bun ${version}, and abide needs bun ${range}. Run \`bun upgrade\`, or install a bun in that range. RULEBOOK 38.123.`
+}

package/src/shared/DERIVED_ARGS.ts

@@ -0,0 +1,6 @@
+/**
+ * The member of an `Rpc` holding its args to the schema its annotation derives (19.9): stamped by the
+ * module its handler is loaded through, on the server alone, and read by every call of it — in
+ * process and over the wire alike (15.8).
+ */
+export const DERIVED_ARGS: unique symbol = Symbol.for('abide.derivedArgs')

package/src/shared/reactive/scoped.ts

@@ -15,9 +15,10 @@
 import { contractOf, type Gated } from './argsContract.ts'
 import { CELL } from './CELL.ts'
 import { KEYED_BRAND } from './KEYED_BRAND.ts'
-import { brandedPrototype, MEMBER_KEYS } from './Reactive.ts'
+import { brandedPrototype, MEMBER_KEYS, signalMoved } from './Reactive.ts'
 import { SELECTION_MEMBERS } from './SELECTION_MEMBERS.ts'
 import { currentScope, runInScope, SCOPING } from './scoping.ts'
+import { newTracked, TRACKING, type Tracked, trackProbe } from './tracking.ts'
 
 const UNBUILT: unique symbol = Symbol('abide.unbuilt')
 
@@ -36,11 +37,18 @@ class Filed {
     home: unknown
     make: () => unknown
     global: boolean
+    /**
+     * 3.3, 13.19 — what a probe asked before the value was built here subscribes to, moved by the
+     * build: the home's. A scope files its own in `instances` under this one as its key, and drops
+     * it with the scope.
+     */
+    unbuilt: Tracked
 
     constructor(make: () => unknown, lazy: boolean, global: boolean) {
         this.make = make
         this.home = lazy ? UNBUILT : make()
         this.global = global
+        this.unbuilt = newTracked()
     }
 }
 
@@ -56,14 +64,21 @@ type Forwarder = { [FILED]: Filed }
 function instanceOf(filed: Filed): Record<PropertyKey, unknown> {
     const scope = filed.global ? undefined : currentScope()
     if (scope === undefined) {
-        if (filed.home === UNBUILT)
+        if (filed.home === UNBUILT) {
             filed.home = runInScope(undefined, () => filed.make(), undefined)
+            signalMoved(filed.unbuilt)
+        }
         return filed.home as Record<PropertyKey, unknown>
     }
     let instance = scope.instances.get(filed)
     if (instance === undefined) {
         instance = filed.make()
         scope.instances.set(filed, instance)
+        const asked = scope.instances.get(filed.unbuilt) as Tracked | undefined
+        if (asked !== undefined) {
+            scope.instances.delete(filed.unbuilt)
+            signalMoved(asked)
+        }
     }
     return instance as Record<PropertyKey, unknown>
 }
@@ -152,14 +167,33 @@ export function scoped(
 /**
  * Whether the value `value` forwards to is built for the scope that is current — always, for a
  * value that is no forwarder. Asking builds nothing, where `instanceOf` builds what it finds unbuilt.
+ *
+ * 3.3 — AND WHERE IT IS NOT, ASKING SUBSCRIBES THE READER TO ITS BUILD: a guard that probed before
+ * the first call has no cell to hear the call start from, so `disabled={save.busy()}` stayed
+ * enabled through the whole write. One signal per value per scope, never one per entry (13.3).
  */
 export function builtHere(value: unknown): boolean {
     const filed = (value as Partial<Forwarder> | null)?.[FILED]
     if (filed === undefined) return true
     const scope = filed.global ? undefined : currentScope()
-    return scope === undefined
-        ? filed.home !== UNBUILT
-        : scope.instances.has(filed)
+    if (
+        scope === undefined
+            ? filed.home !== UNBUILT
+            : scope.instances.has(filed)
+    )
+        return true
+    const reader = TRACKING.reader
+    if (reader === null) return false
+    let asked = filed.unbuilt
+    if (scope !== undefined) {
+        asked = scope.instances.get(filed.unbuilt) as Tracked
+        if (asked === undefined) {
+            asked = newTracked()
+            scope.instances.set(filed.unbuilt, asked)
+        }
+    }
+    trackProbe(asked, reader)
+    return false
 }
 
 /**

package/src/shared/rpc.ts

@@ -13,6 +13,7 @@
 // the call hands back a value whose body runs the onion once per args, per request, over the
 // handler's own.
 
+import { DERIVED_ARGS } from './DERIVED_ARGS.ts'
 import { type Failed, isFailedNamed } from './Failed.ts'
 import { GLOBAL_GETS } from './GLOBAL_GETS.ts'
 import { HandlerRoute } from './HandlerRoute.ts'
@@ -52,7 +53,7 @@ import { MUTATION } from './reactive/MUTATION.ts'
 import { dropAnswered } from './reactive/Reactive.ts'
 import { SELECTION_MEMBERS } from './reactive/SELECTION_MEMBERS.ts'
 import { builtHere, isForwarder } from './reactive/scoped.ts'
-import { checkArgs } from './refuse.ts'
+import { checkArgs, validationError } from './refuse.ts'
 import { rpcRequest } from './rpcRequest.ts'
 import type { Schema } from './Schema.ts'
 
@@ -162,6 +163,16 @@ type Derived<Member, Whole = Member> = Member extends
           : never
       : never
 
+/**
+ * 19.9 — the issues an `Rpc`'s args leave against the schema its annotation derives, `null` where
+ * they hold: `undefined` until the module its handler is loaded through stamps it (`derivedArgs`),
+ * and so in a browser always. A function rather than the schema, so this seam never carries the
+ * validator (19.13).
+ */
+export type HeldToAnnotation = {
+    [DERIVED_ARGS]: ((args: unknown) => Issues<unknown> | null) | undefined
+}
+
 /** Which generated surfaces carry a handler (20.1). */
 export type Clients = {
     ui?: boolean
@@ -440,6 +451,11 @@ export function declare(method: Method): Declare {
         }
         const call = (given?: unknown, options?: CallOptions): unknown => {
             const args = normalized(contract, given)
+            // 15.8, 19.9 — AND HELD TO ITS ANNOTATION, where the build derived a schema off it: a
+            // type an in-process caller wrote holds nothing at run time (`as never`, a value off
+            // JSON), so the call is refused as the wire refuses it rather than handed to the body.
+            const issues = rpc[DERIVED_ARGS]?.(args) ?? null
+            if (issues !== null) return reactive(() => validationError(issues))
             const route =
                 rpc.address === undefined ? undefined : routeAt(rpc.address)
             if (route?.segments !== undefined) {
@@ -469,7 +485,7 @@ export function declare(method: Method): Declare {
         // 13.19 — AND NOT YET BUILT, NONE OF THEM BUILDS IT: building an unkeyed value starts its body
         // (1.7), so `save.busy()` over a server's never-called `POST(async () => …)` ran the write and
         // reported it in flight. Until a call reaches it the handler has no entry, and answers as one
-        // with no entries does.
+        // with no entries does — the asking reader subscribed to the call that builds it (`builtHere`).
         const built = value as Record<
             (typeof SELECTION_MEMBERS)[number],
             (pattern?: unknown) => unknown
@@ -487,6 +503,7 @@ export function declare(method: Method): Declare {
             maxBodySize: options?.maxBodySize,
             clients: options?.clients ?? {},
             guarded: rungs.length > 0,
+            [DERIVED_ARGS]: undefined as HeldToAnnotation[typeof DERIVED_ARGS],
             isError: isFailedNamed,
             url(args?: Record<string, unknown>): string {
                 return rpcRequest(method, routeAt(addressOf(rpc)), args).url