@abide/abide 0.121.1 → 0.123.0

package/ABIDE.md

@@ -57,6 +57,10 @@ affected code saying what it did, and tell the user.
   scripts, the CLI and MCP alike.
 - A `.abide` cannot export. A `<script server>` in one holds that file's private handlers
   (`const save = POST(…)`), callable by that file alone, and its hooks (`onStart`, `middleware`, …).
+- A rung shared between handlers or layouts is typed `Middleware` and nothing else:
+  `export const signedIn: Middleware = async (next) => (await principal.authenticated) ? next() : refuse(401)`
+  fits a handler's `middleware: […]` and a layout's `middleware(…)` alike (RULEBOOK 37.14). No
+  `<Ctx, Result>` of its own, and no `as` on a `refuse`.
 - A directory holds addresses, tests, benches, `.d.ts` declarations and two fenced directories
   alone: `lib/` for components and modules, and `public/` for files served as they are. Anything
   else beside the pages is a build error.

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @abide/abide
 
+## 0.123.0
+
+### Minor Changes
+
+- 0e5f83e: an unfinished conversation's log line says why — aborted, failed with the throw, or stopped (RULEBOOK 44.31) ([`042aea3`](https://github.com/briancray/abide/commit/042aea3150ae0fd29959bbe1346d1595b86617bc))
+- 0e5f83e: Breaking: a member the value's type declares is the value's, and a read prop holds a Reactive where one is due (RULEBOOK 31.5, 31.6, 33.27) ([`50b1151`](https://github.com/briancray/abide/commit/50b1151d46389185df0b61d0dd82241566446275))
+
+## 0.122.0
+
+### Minor Changes
+
+- a2144de: `Middleware` is one type for a rung shared between handlers and layouts: `const signedIn: Middleware = async (next) => …` fits a handler's `middleware: […]` and a layout's `middleware(…)` alike, with no `<Ctx, Result>` of its own. `Middleware<Response>` is a rung that answers with a `Response` of its own, and `Middleware<never, { args: () => unknown }>` one that reads a handler's args. A `refuse(…)` a layout's rung returns is now answered in its lane — the nearest error page over a page, Problem Details over a handler, and by what the request accepts before routing — and the rung outside it is handed that `Response` (RULEBOOK 37.14, 37.15). BREAKING: `Middleware<Ctx, Result>` written with a context type first no longer reads that way; annotate `next` instead, or use the forms above.
+
+### Patch Changes
+
+- 44e9f1d: ABIDE.md names the one-word Middleware form for a shared rung (RULEBOOK 37.14) ([`0699004`](https://github.com/briancray/abide/commit/0699004266bf8174263d1820cee2e9946eeee8a3))
+
 ## 0.121.1
 
 ### Patch Changes

package/docs/REGISTRY.md

@@ -168,7 +168,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `Selection` | `Reactive<any, any, any, any> \| Keyed<any, any, any, any> \| Rpc<any, any, any, any> \| { tags: string[] }` | What is being asked about. | 13.1, 13.8, 13.9, 13.13, 31.14 |
+| `Selection` | `Reactive<any, any, any, any> \| Keyed<any, any, any, any> \| Rpc<any, any, any, any> \| { tags: string[] }` | What is being asked about. | 13.1, 13.8, 13.9, 13.13, 31.13 |
 | `busy` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether any entry in the selection has work in flight. | 13.2, 13.3, 13.5, 13.12, 41.28, 41.31, 46.11 |
 | `ready` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether every entry in the selection has a value to serve. | 13.3, 13.5, 13.11, 13.12, 41.28, 41.31 |
 | `synced` | `(selection?: Selection, pattern?: Partial<Args>) => boolean` | Whether every entry in the selection holds what its producer made. | 13.12, 13.18 |
@@ -218,7 +218,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | `Value` | `unknown` | What the addressed `Reactive` holds. | 16.3, 16.30 |
 | `Produced` | `unknown` | What it yields, per the unit rule. | 1.2, 16.3 |
 | `Args` | `Record<string, JsonValue> \| undefined` | The arguments, in the body on a mutation and in the URL on a `GET` or `DELETE`. | 11.24, 16.18, 19.15 |
-| `Middleware` | `<Ctx, Result>(next: (ctx?: Ctx) => Promise<Result>, ctx: Ctx) => Result \| Promise<Result>` | One rung of `middleware`. | 16.14, 16.15, 16.16, 16.21 |
+| `Middleware` | `Middleware<Answer = never, Extra extends object = object> = <Given extends { request: Request } & Extra, Result>(next: (ctx?: Given) => Promise<Result>, ctx: Given) => Result \| Answer \| Failed<string, unknown> \| Promise<Result \| Answer \| Failed<string, unknown>>` | One rung, written once for every lane whose context carries `Extra`. | 16.14, 16.15, 16.16, 16.21, 37.14, 37.15 |
 | `GET` | `<Value, Args, Failures, RungFailures, Produced = Value>(handler: Reactive<Value, Value, Failures, Produced> \| Keyed<Value, Args, Value, Failures, Produced>, options?: RpcOptions<Args, RungFailures>) => Rpc<Value, Args, Failures \| RungFailures, Produced>` | Declares a read any surface may call. | 16.1, 16.2, 16.5, 16.6, 16.30, 16.31, 16.32, 16.68, 16.76, 16.34, 16.35, 16.36, 16.37, 16.39, 16.44, 16.45, 16.46, 16.47, 16.75, 16.50, 16.51, 16.52, 16.64, 18.1, 18.3, 18.6, 18.8, 18.10, 18.12, 18.21, 18.24, 18.27 |
 | `GET` | `<Value, Args, Failures, RungFailures, Produced = Value>(handler: (args?: Args) => Value, options?: RpcOptions<Args, RungFailures> & ReactiveOptions<Value, Value, Failures, Args>) => Rpc<Value, Args, Failures \| RungFailures, Produced>` | The plain-function overload, whose `ReactiveOptions` (`ttl`, `global`, `debounce` and the rest) build the value it becomes beside its address. | 16.1, 16.6, 16.7 |
 | `GET` | `<Value, Failures, RungFailures>(handler: Value \| PromiseLike<Value>, options?: RpcOptions<undefined, RungFailures> & ReactiveOptions<Value, Value, Failures>) => Rpc<Value, undefined, Failures \| RungFailures>` | The value overload, for what the handler owns outright, whose `ReactiveOptions` build the value it becomes. | 16.1, 16.6, 16.7 |
@@ -240,7 +240,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
 | `description` | `string` | The human description carried onto every generated surface. | 16.28 |
-| `middleware` | `Middleware<{ request: Request; args: () => Args }, Value \| Failures>[]` | The rungs run per call. | 16.11, 16.12, 16.16, 16.17, 16.18, 16.19, 16.20 |
+| `middleware` | `((next: (ctx?: { request: Request; args: () => Args }) => Promise<unknown>, ctx: { request: Request; args: () => Args }) => unknown)[]` | The rungs run per call. | 16.11, 16.12, 16.16, 16.17, 16.18, 16.19, 16.20 |
 | `timeout` | `number` | How long the call may go without progress. | 16.22, 16.58, 16.59, 16.60, 16.61, 16.77 |
 | `clients` | `Clients` | Which surfaces carry this handler. | 16.37, 20.3 |
 | `crossOrigin` | `boolean \| string[]` | Whether other origins may call it, or follow it over the mux. | 16.24, 18.2, 21.19 |
@@ -349,9 +349,9 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | 44.5, 44.13, 44.17, 44.18, 44.19, 44.24, 44.25, 44.27, 44.30, 44.33 |
+| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | 44.5, 44.13, 44.17, 44.18, 44.19, 44.24, 44.25, 44.27, 44.30, 44.33, 44.45, 44.46 |
 | `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max'; maxBudgetUsd?: number; betas?: string[]; disallowedTools?: string[]; tools?: string[] }` | The Claude Code options a site may set for a turn, and the built-in tools it asks the visitor for. | 44.16, 44.29 |
-| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; link: string; expires: number }` | The command and the link that pair a bridge with this browser, granting the built-in tools it is given. | 44.14, 44.32, 44.33, 44.40, 44.41, 44.42, 44.43 |
+| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; link: string; expires: number }` | The command and the link that pair a bridge with this browser, granting the built-in tools it is given. | 44.14, 44.32, 44.33, 44.40, 44.41, 44.42, 44.43, 44.44 |
 | `claudeCode.bridge` | `(options?: { tools?: string[] }) => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | 44.20, 44.22, 44.32, 44.33, 44.34, 44.40 |
 | `BridgeStatus` | `{ paired: boolean; command: string \| undefined; link: string \| undefined }` | Whether a bridge is paired, and the command and the link that pair one where none is. | 44.20, 44.40 |
 | `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | 36.7, 44.14, 44.15, 44.19, 44.23, 44.26, 16.57, 16.78 |
@@ -380,11 +380,11 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `route.url` | `Reactive<URL>` | Where we are, fragment included. | 23.1, 23.2, 23.3, 23.4, 30.20, 30.21, 30.23, 30.33, 19.16, 31.16 |
-| `route.params` | `Reactive<Params>` | The matched route's segments — typed by its own route in a page or a layout, and `Params` in any other file. | 23.1, 23.5, 23.9, 30.23, 31.16 |
+| `route.url` | `Reactive<URL>` | Where we are, fragment included. | 23.1, 23.2, 23.3, 23.4, 30.20, 30.21, 30.23, 30.33, 19.16, 31.15 |
+| `route.params` | `Reactive<Params>` | The matched route's segments — typed by its own route in a page or a layout, and `Params` in any other file. | 23.1, 23.5, 23.9, 30.23, 31.15 |
 | `Params` | `Record<string, string \| string[]>` | What a matched route's segments are. | 23.5 |
-| `route.name` | `Reactive<string>` | The resolution path, the same under any mount path. | 23.1, 23.6, 23.14, 31.16 |
-| `route.navigating` | `Reactive<boolean>` | Whether a navigation is in flight. | 23.1, 31.16 |
+| `route.name` | `Reactive<string>` | The resolution path, the same under any mount path. | 23.1, 23.6, 23.14, 31.15 |
+| `route.navigating` | `Reactive<boolean>` | Whether a navigation is in flight. | 23.1, 31.15 |
 
 ## `online`
 
@@ -499,7 +499,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `csp` | `(sources?: Record<string, string[]>) => Middleware` | The rung that sets `content-security-policy`. | 29.1, 29.2, 29.5, 29.6, 29.7, 29.8 |
+| `csp` | `(sources?: Record<string, string[]>) => (next: (ctx?: { request: Request }) => Promise<Response>, ctx: { request: Request }) => Promise<Response>` | The rung that sets `content-security-policy`. | 29.1, 29.2, 29.5, 29.6, 29.7, 29.8 |
 | `csp.nonce` | `() => string` | This response's nonce, for the app's own inline script. | 29.3, 29.4, 29.9, 29.11 |
 
 ## `url`
@@ -533,12 +533,12 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | `foo` wherever the declared type of its position is not a `Reactive` | a live read | 31.1, 31.2, 31.10 |
 | `const x: Reactive<…> = foo` / a `Reactive<…>`-typed parameter, return or `bind:` operand | the `Reactive` | 31.3 |
 | `await foo` | the settling of the `Reactive`, which is its value | 1.4, 2.7, 31.3 |
-| `refresh(foo)` / a `Selection`-typed parameter | the `Reactive` | 31.14 |
+| `refresh(foo)` / a `Selection`-typed parameter | the `Reactive` | 31.13 |
 | `foo = bar` | a write | 31.4, 11.61 |
-| `foo.bar = v` | a write through a path | 31.8, 31.15 |
+| `foo.bar = v` | a write through a path | 31.8, 31.14 |
 | `foo.push(v)` | the same | 31.8, 31.9 |
 | `const [a, b] = foo` / `...foo` | one read of the value | 31.12 |
-| `foo.bar` | the value's `bar`, or the `Reactive`'s own `bar` where it declares one | 31.5, 31.13 |
+| `foo.bar` | the value's `bar`, or the `Reactive`'s own `bar` where it declares one the value does not | 31.5 |
 | `foo.bar(…)` | the `Reactive` API where `bar` is a member | 31.6 |
 | `foo()` / `foo.set(v)` | the explicit forms | 31.7, 31.11 |
 
@@ -596,7 +596,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `props` | `<Props>() => { [K in keyof Props]: Props[K] }` | One live accessor per prop the component declares. | 33.1, 33.2, 33.3, 33.4, 33.5, 33.6, 33.7, 33.8, 33.9, 33.10, 33.11, 33.14, 33.15, 33.20, 33.22, 33.25 |
+| `props` | `<Props>() => { [K in keyof Props]: Props[K] }` | One live accessor per prop the component declares. | 33.1, 33.2, 33.3, 33.4, 33.5, 33.6, 33.7, 33.8, 33.9, 33.10, 33.11, 33.14, 33.15, 33.20, 33.22, 33.25, 33.27 |
 | `Attributes<Tag>` | `Attributes<Tag extends keyof HTMLElementTagNameMap \| keyof SVGElementTagNameMap>` | The attributes an HTML or SVG element takes, typed as a component's props. | 33.23, 33.24, 33.26 |
 | `children` | always accepted | What a caller passes between the tags. | 33.16, 32.18 |
 
@@ -702,7 +702,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `middleware` | `(...rungs: Middleware<{ request: Request }, Response>[]) => () => void` | The per-request lane at the calling file's route. | 18.26, 37.2, 37.3, 37.13 |
+| `middleware` | `(...rungs: ((next: (ctx?: { request: Request }) => Promise<Response>, ctx: { request: Request }) => Response \| Failed<string, unknown> \| Promise<Response \| Failed<string, unknown>>)[]) => () => void` | The per-request lane at the calling file's route. | 18.26, 37.2, 37.3, 37.13, 37.14, 37.15 |
 | `onStart` | `(fn: (start: () => Promise<void>) => void \| Promise<void>) => () => void` | Wraps the boot. | 37.4, 37.6, 37.13 |
 | `onStop` | `(fn: (stop: () => Promise<void>) => void \| Promise<void>) => () => void` | Mirrors it for teardown. | 37.4, 37.6, 37.13 |
 | `onError` | `(fn: (error: unknown) => unknown) => () => void` | Runs on an unexpected error at the calling file's route. | 37.5, 37.8, 37.13 |

package/docs/RULEBOOK.md

@@ -1871,16 +1871,17 @@ the routes 30.9 ranks after that route.
 
 31.3 A name MUST hold the `Reactive` only where the declared type of its position is a `Reactive`: an
 annotated binding, an annotated return, a `Reactive`-typed parameter, a `bind:` operand, an `await`
-operand — or where 31.14 holds it.
+operand — or where 31.13 holds it.
 
 31.4 Assignment to such a name MUST be a write, and the assigned value MAY be settled, a load, or a
 `Reactive`.
 
 31.5 A property access on such a name MUST reach the value, except a member declared on the
-`Reactive` type, which MUST reach that member bound to the `Reactive`.
+`Reactive` type that the value's type does not declare, which MUST reach that member bound to the
+`Reactive`.
 
-31.6 A call on such a name MUST reach the `Reactive` API where the member is declared on the
-`Reactive` type, and the value's method otherwise.
+31.6 A call on such a name MUST reach the `Reactive` API where 31.5 reaches the `Reactive`'s
+member, and the value's method otherwise.
 
 31.7 `s` and `s.set` MUST keep compiling inside a `.abide` file.
 
@@ -1896,17 +1897,14 @@ the member name.
 
 31.12 A destructuring pattern or a spread over such a name MUST read it once.
 
-31.13 The compiler MUST warn where 31.5 reaches a `Reactive` member the value's type also declares,
-naming the explicit read.
-
-31.14 A name MUST hold the `Reactive` where the declared type of its position is a `Selection`, or a
+31.13 A name MUST hold the `Reactive` where the declared type of its position is a `Selection`, or a
 type parameter constrained by one.
 
-31.15 A write through a member path that reaches a value which is not plain data — an array, or an
+31.14 A write through a member path that reaches a value which is not plain data — an array, or an
 object whose prototype is `Object.prototype` or `null` — MUST assign on that value itself, MUST NOT
 copy it or any level above it, and MUST NOT wake a reader.
 
-31.16 `route.url`, `route.params`, `route.name` and `route.navigating` MUST each be read and written
+31.15 `route.url`, `route.params`, `route.name` and `route.navigating` MUST each be read and written
 as a name bound to a `Reactive` is, per 31.1 to 31.7.
 
 # 32. Templating
@@ -2219,6 +2217,10 @@ that element as its `currentTarget`.
 included, under the names SVG spells them, and a tag both HTML and SVG name MUST be typed as the HTML
 element.
 
+33.27 A name `props` binds MUST hold a `Reactive` wherever 31.3 or 31.13 has a name hold its
+`Reactive` or 31.5 has it reach its `Reactive`'s member, and that `Reactive`'s probes MUST answer for
+every `Reactive` the caller's expression read.
+
 # 34. Script and style blocks
 
 34.1 A `<script>` block MUST be per-instance component setup.
@@ -2454,6 +2456,13 @@ through `App.stop`, and the process MUST then exit with 0.
 37.13 A lifecycle hook called in a module of the app's own that is neither a `.abide` nor a handler
 file MUST be a build error naming the module and the hook.
 
+37.14 A `Failed` a `middleware` rung returns MUST be answered in the lane the rung is filed over: by
+the nearest `error.abide` per 35.2 over a page, as 15.21 states over a handler, and as 15.22 paints
+a 405 for a rung filed at the root route.
+
+37.15 A `middleware` rung outside one that returned a `Failed` MUST be handed 37.14's answer from
+`next`, and MUST NOT be handed the `Failed`.
+
 # 38. Commands
 
 ## The commands
@@ -3348,8 +3357,8 @@ run no turn for 30 seconds.
 44.23 A post to `/__abide/bridge` carrying a line that is not JSON MUST be refused 400, and none of
 its lines MUST be relayed.
 
-44.24 A bridge MUST answer an MCP request its Claude Code made with a failure where the report
-carrying it was not taken by `/__abide/bridge`, or where no reply arrived within 120 seconds.
+44.24 A bridge MUST answer an MCP request its Claude Code made with a failure where
+`/__abide/bridge` sent no reply within 120 seconds.
 
 44.25 A bridge whose stream from `/__abide/bridge` ends unasked MUST redial it with its pairing's
 token, each wait twice the last, until it is refused or 60 seconds have passed.
@@ -3372,7 +3381,9 @@ before it exits.
 
 44.31 A conversation MUST write one `debug` line on `abide:assistant` when its events end, naming
 its stop reason, the transcript's length, the tool calls it made, its usage and how long it took,
-and naming it `unfinished` where it ended without a `done`.
+and naming it `unfinished` where it ended without a `done`, followed by why — `aborted` where the
+request's signal aborted, else `failed` where its provider threw, with the throw's message ending the
+line, else `stopped` where its caller stopped reading.
 
 44.32 A command `claudeCode.bridgeCommand` or `claudeCode.bridge` mints with `tools` MUST grant
 those built-in tools after its `--` as `--tools`, and one minted without `tools` MUST carry no `--`.
@@ -3409,12 +3420,23 @@ a link in the `abide-bridge` scheme naming the same site, code, bridge release a
 whose release is a version alone, and MUST run the release it names.
 
 44.42 A bridge opening an `abide-bridge` link MUST ask the visitor before it pairs, every time, naming
-the site, the built-in tools and the bridge release the link asks for.
+the site, the built-in tools and the bridge release the link asks for, and the options and the names
+of the variables `abide-bridge install` kept (44.44).
 
 44.43 `abide-bridge install` MUST write the app that opens links under the visitor's own Application
 Support and register it there, and `abide-bridge uninstall` MUST unregister it and remove all
 install wrote.
 
+44.44 `abide-bridge install` MUST keep the Claude Code options after its `--` and each `--env
+NAME=VALUE` it is given, and a bridge opening an `abide-bridge` link MUST run Claude Code with those
+options ahead of the link's built-in tools and with those variables set, and a link MUST NOT set either.
+
+44.45 A bridge MUST say that `/__abide/bridge` did not take a report once, and not again until a
+report is taken, and MUST NOT say it while it redials per 44.25.
+
+44.46 A bridge MUST end a turn once `/__abide/bridge` did not take a report carrying it, and MUST
+report that turn failed.
+
 # 45. Offline
 
 45.1 Where `ABIDE_OFFLINE` is on, a page `abide build` built MUST register the worker

package/docs/abide.md

@@ -625,7 +625,7 @@ test('typing writes the value, and the value fills the field', async () => {
 | `const [a, b] = foo` / `...foo` | one read, taken apart |
 | `foo = bar` | a write |
 | `foo.bar` | the value's `bar` |
-| `foo.bar(…)` | the value's method, or a member of the `Reactive` such as `busy` |
+| `foo.bar(…)` | the value's method where it has one, and otherwise a member of the `Reactive` such as `busy` |
 | `foo()` / `foo.set(v)` | the explicit read and write |
 | `await foo` | the value, once it has settled |
 | `refresh(foo)` / a `Selection`-typed parameter | the `Reactive` itself |
@@ -4227,24 +4227,28 @@ async function exportAll() {
 ```
 
 ```ts src/account/exportContacts.handler.ts
-import { principal, refuse } from '@abide/abide'
 import { POST } from '@abide/abide/server'
 
 import { CONTACTS } from '../contacts/lib/CONTACTS.server.ts'
+import { adminsOnly } from './lib/adminsOnly.ts'
 
 export default POST(async () => CONTACTS, {
     description: 'Every contact, for an admin to export.',
-    middleware: [
-        // Runs before the handler, on every call, in process or not.
-        async (next, ctx) => {
-            const { role } = await principal.resolved
-            if (role !== 'admin') return refuse(403, 'Admins only.')
-            return next(ctx)
-        },
-    ],
+    // Runs before the handler, on every call, in process or not.
+    middleware: [adminsOnly],
 })
 ```
 
+```ts src/account/lib/adminsOnly.ts
+import { type Middleware, principal, refuse } from '@abide/abide'
+
+// One rung for a handler's `middleware` and a layout's alike.
+export const adminsOnly: Middleware = async (next) => {
+    const { role } = await principal.resolved
+    return role === 'admin' ? next() : refuse(403, 'Admins only.')
+}
+```
+
 ```ts src/account/lib/ExportContacts.test.ts
 import { expect, test } from 'bun:test'
 
@@ -4278,22 +4282,18 @@ test('sales and a signed-out caller are refused 403', async () => {
 })
 ```
 
-A rung is a `Middleware`: it is handed `next` and the call's context, and either returns `next(ctx)` or answers in the handler's place. Returning `refuse(403, …)` refuses, and neither the handler nor any rung after it runs. A throw escapes every rung rather than unwinding through them.
+A rung is a `Middleware`: it is handed `next` and the call's context, and either returns `next()` or answers in the handler's place. Returning `refuse(403, …)` refuses, and neither the handler nor any rung after it runs. A throw escapes every rung rather than unwinding through them.
 
 The rung sits on the handler, so it runs on every call: from a browser, from another handler, and from a page rendering on the server. It reads arguments through `ctx.args()`, which parses the body on its first call. So a rung that never asks refuses a signed-out caller before their body is parsed or checked.
 
-To guard a whole section, call `middleware(…)` in its `layout.abide`, such as `src/account/admin/layout.abide`. That rung runs over every page and handler below it, and it has the request and nothing else:
+To guard a whole section, call `middleware(…)` in its `layout.abide`, such as `src/account/admin/layout.abide`. That rung runs over every page and handler below it, and it has the request and nothing else. The same `adminsOnly` fits there, and its refusal is painted by the section's `error.abide` over a page and answered as Problem Details over a handler:
 
 ```abide abide
 <script server>
-import { principal } from '@abide/abide'
 import { middleware } from '@abide/abide/server'
+import { adminsOnly } from '#src/account/lib/adminsOnly.ts'
 
-middleware(async (next) => {
-    const { role } = await principal.resolved
-    if (role !== 'admin') return new Response('Admins only.', { status: 403 })
-    return next()
-})
+middleware(adminsOnly)
 </script>
 
 <slot/>
@@ -7482,7 +7482,7 @@ Arrive here knowing which name you want. Each page is read off the registry: the
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `Selection` | `Reactive<any, any, any, any> \| Keyed<any, any, any, any> \| Rpc<any, any, any, any> \| { tags: string[] }` | What is being asked about. | [13.1](/rulebook#13.1), [13.8](/rulebook#13.8), [13.9](/rulebook#13.9), [13.13](/rulebook#13.13), [31.14](/rulebook#31.14) |
+| `Selection` | `Reactive<any, any, any, any> \| Keyed<any, any, any, any> \| Rpc<any, any, any, any> \| { tags: string[] }` | What is being asked about. | [13.1](/rulebook#13.1), [13.8](/rulebook#13.8), [13.9](/rulebook#13.9), [13.13](/rulebook#13.13), [31.13](/rulebook#31.13) |
 
 ## Taught in
 
@@ -7776,7 +7776,7 @@ Reactive primitives: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `Middleware` | `<Ctx, Result>(next: (ctx?: Ctx) => Promise<Result>, ctx: Ctx) => Result \| Promise<Result>` | One rung of `middleware`. | [16.14](/rulebook#16.14), [16.15](/rulebook#16.15), [16.16](/rulebook#16.16), [16.21](/rulebook#16.21) |
+| `Middleware` | `Middleware<Answer = never, Extra extends object = object> = <Given extends { request: Request } & Extra, Result>(next: (ctx?: Given) => Promise<Result>, ctx: Given) => Result \| Answer \| Failed<string, unknown> \| Promise<Result \| Answer \| Failed<string, unknown>>` | One rung, written once for every lane whose context carries `Extra`. | [16.14](/rulebook#16.14), [16.15](/rulebook#16.15), [16.16](/rulebook#16.16), [16.21](/rulebook#16.21), [37.14](/rulebook#37.14), [37.15](/rulebook#37.15) |
 
 ## Taught in
 
@@ -7851,7 +7851,7 @@ Reactive primitives: what is written in place rather than imported.
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
 | `description` | `string` | The human description carried onto every generated surface. | [16.28](/rulebook#16.28) |
-| `middleware` | `Middleware<{ request: Request; args: () => Args }, Value \| Failures>[]` | The rungs run per call. | [16.11](/rulebook#16.11), [16.12](/rulebook#16.12), [16.16](/rulebook#16.16), [16.17](/rulebook#16.17), [16.18](/rulebook#16.18), [16.19](/rulebook#16.19), [16.20](/rulebook#16.20) |
+| `middleware` | `((next: (ctx?: { request: Request; args: () => Args }) => Promise<unknown>, ctx: { request: Request; args: () => Args }) => unknown)[]` | The rungs run per call. | [16.11](/rulebook#16.11), [16.12](/rulebook#16.12), [16.16](/rulebook#16.16), [16.17](/rulebook#16.17), [16.18](/rulebook#16.18), [16.19](/rulebook#16.19), [16.20](/rulebook#16.20) |
 | `timeout` | `number` | How long the call may go without progress. | [16.22](/rulebook#16.22), [16.58](/rulebook#16.58), [16.59](/rulebook#16.59), [16.60](/rulebook#16.60), [16.61](/rulebook#16.61), [16.77](/rulebook#16.77) |
 | `clients` | `Clients` | Which surfaces carry this handler. | [16.37](/rulebook#16.37), [20.3](/rulebook#20.3) |
 | `crossOrigin` | `boolean \| string[]` | Whether other origins may call it, or follow it over the mux. | [16.24](/rulebook#16.24), [18.2](/rulebook#18.2), [21.19](/rulebook#21.19) |
@@ -8418,8 +8418,8 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | [44.5](/rulebook#44.5), [44.13](/rulebook#44.13), [44.17](/rulebook#44.17), [44.18](/rulebook#44.18), [44.19](/rulebook#44.19), [44.24](/rulebook#44.24), [44.25](/rulebook#44.25), [44.27](/rulebook#44.27), [44.30](/rulebook#44.30), [44.33](/rulebook#44.33) |
-| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; link: string; expires: number }` | The command and the link that pair a bridge with this browser, granting the built-in tools it is given. | [44.14](/rulebook#44.14), [44.32](/rulebook#44.32), [44.33](/rulebook#44.33), [44.40](/rulebook#44.40), [44.41](/rulebook#44.41), [44.42](/rulebook#44.42), [44.43](/rulebook#44.43) |
+| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | [44.5](/rulebook#44.5), [44.13](/rulebook#44.13), [44.17](/rulebook#44.17), [44.18](/rulebook#44.18), [44.19](/rulebook#44.19), [44.24](/rulebook#44.24), [44.25](/rulebook#44.25), [44.27](/rulebook#44.27), [44.30](/rulebook#44.30), [44.33](/rulebook#44.33), [44.45](/rulebook#44.45), [44.46](/rulebook#44.46) |
+| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; link: string; expires: number }` | The command and the link that pair a bridge with this browser, granting the built-in tools it is given. | [44.14](/rulebook#44.14), [44.32](/rulebook#44.32), [44.33](/rulebook#44.33), [44.40](/rulebook#44.40), [44.41](/rulebook#44.41), [44.42](/rulebook#44.42), [44.43](/rulebook#44.43), [44.44](/rulebook#44.44) |
 | `claudeCode.bridge` | `(options?: { tools?: string[] }) => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | [44.20](/rulebook#44.20), [44.22](/rulebook#44.22), [44.32](/rulebook#44.32), [44.33](/rulebook#44.33), [44.34](/rulebook#44.34), [44.40](/rulebook#44.40) |
 | `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | [36.7](/rulebook#36.7), [44.14](/rulebook#44.14), [44.15](/rulebook#44.15), [44.19](/rulebook#44.19), [44.23](/rulebook#44.23), [44.26](/rulebook#44.26), [16.57](/rulebook#16.57), [16.78](/rulebook#16.78) |
 
@@ -8529,10 +8529,10 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `route.url` | `Reactive<URL>` | Where we are, fragment included. | [23.1](/rulebook#23.1), [23.2](/rulebook#23.2), [23.3](/rulebook#23.3), [23.4](/rulebook#23.4), [30.20](/rulebook#30.20), [30.21](/rulebook#30.21), [30.23](/rulebook#30.23), [30.33](/rulebook#30.33), [19.16](/rulebook#19.16), [31.16](/rulebook#31.16) |
-| `route.params` | `Reactive<Params>` | The matched route's segments — typed by its own route in a page or a layout, and `Params` in any other file. | [23.1](/rulebook#23.1), [23.5](/rulebook#23.5), [23.9](/rulebook#23.9), [30.23](/rulebook#30.23), [31.16](/rulebook#31.16) |
-| `route.name` | `Reactive<string>` | The resolution path, the same under any mount path. | [23.1](/rulebook#23.1), [23.6](/rulebook#23.6), [23.14](/rulebook#23.14), [31.16](/rulebook#31.16) |
-| `route.navigating` | `Reactive<boolean>` | Whether a navigation is in flight. | [23.1](/rulebook#23.1), [31.16](/rulebook#31.16) |
+| `route.url` | `Reactive<URL>` | Where we are, fragment included. | [23.1](/rulebook#23.1), [23.2](/rulebook#23.2), [23.3](/rulebook#23.3), [23.4](/rulebook#23.4), [30.20](/rulebook#30.20), [30.21](/rulebook#30.21), [30.23](/rulebook#30.23), [30.33](/rulebook#30.33), [19.16](/rulebook#19.16), [31.15](/rulebook#31.15) |
+| `route.params` | `Reactive<Params>` | The matched route's segments — typed by its own route in a page or a layout, and `Params` in any other file. | [23.1](/rulebook#23.1), [23.5](/rulebook#23.5), [23.9](/rulebook#23.9), [30.23](/rulebook#30.23), [31.15](/rulebook#31.15) |
+| `route.name` | `Reactive<string>` | The resolution path, the same under any mount path. | [23.1](/rulebook#23.1), [23.6](/rulebook#23.6), [23.14](/rulebook#23.14), [31.15](/rulebook#31.15) |
+| `route.navigating` | `Reactive<boolean>` | Whether a navigation is in flight. | [23.1](/rulebook#23.1), [31.15](/rulebook#31.15) |
 
 ## Taught in
 
@@ -8977,7 +8977,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `csp` | `(sources?: Record<string, string[]>) => Middleware` | The rung that sets `content-security-policy`. | [29.1](/rulebook#29.1), [29.2](/rulebook#29.2), [29.5](/rulebook#29.5), [29.6](/rulebook#29.6), [29.7](/rulebook#29.7), [29.8](/rulebook#29.8) |
+| `csp` | `(sources?: Record<string, string[]>) => (next: (ctx?: { request: Request }) => Promise<Response>, ctx: { request: Request }) => Promise<Response>` | The rung that sets `content-security-policy`. | [29.1](/rulebook#29.1), [29.2](/rulebook#29.2), [29.5](/rulebook#29.5), [29.6](/rulebook#29.6), [29.7](/rulebook#29.7), [29.8](/rulebook#29.8) |
 | `csp.nonce` | `() => string` | This response's nonce, for the app's own inline script. | [29.3](/rulebook#29.3), [29.4](/rulebook#29.4), [29.9](/rulebook#29.9), [29.11](/rulebook#29.11) |
 
 ## Taught in
@@ -9215,12 +9215,12 @@ Generated surfaces: what is written in place rather than imported.
 | `foo` wherever the declared type of its position is not a `Reactive` | a live read | [31.1](/rulebook#31.1), [31.2](/rulebook#31.2), [31.10](/rulebook#31.10) |
 | `const x: Reactive<…> = foo` / a `Reactive<…>`-typed parameter, return or `bind:` operand | the `Reactive` | [31.3](/rulebook#31.3) |
 | `await foo` | the settling of the `Reactive`, which is its value | [1.4](/rulebook#1.4), [2.7](/rulebook#2.7), [31.3](/rulebook#31.3) |
-| `refresh(foo)` / a `Selection`-typed parameter | the `Reactive` | [31.14](/rulebook#31.14) |
+| `refresh(foo)` / a `Selection`-typed parameter | the `Reactive` | [31.13](/rulebook#31.13) |
 | `foo = bar` | a write | [31.4](/rulebook#31.4), [11.61](/rulebook#11.61) |
-| `foo.bar = v` | a write through a path | [31.8](/rulebook#31.8), [31.15](/rulebook#31.15) |
+| `foo.bar = v` | a write through a path | [31.8](/rulebook#31.8), [31.14](/rulebook#31.14) |
 | `foo.push(v)` | the same | [31.8](/rulebook#31.8), [31.9](/rulebook#31.9) |
 | `const [a, b] = foo` / `...foo` | one read of the value | [31.12](/rulebook#31.12) |
-| `foo.bar` | the value's `bar`, or the `Reactive`'s own `bar` where it declares one | [31.5](/rulebook#31.5), [31.13](/rulebook#31.13) |
+| `foo.bar` | the value's `bar`, or the `Reactive`'s own `bar` where it declares one the value does not | [31.5](/rulebook#31.5) |
 | `foo.bar(…)` | the `Reactive` API where `bar` is a member | [31.6](/rulebook#31.6) |
 | `foo()` / `foo.set(v)` | the explicit forms | [31.7](/rulebook#31.7), [31.11](/rulebook#31.11) |
 
@@ -9330,7 +9330,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `props` | `<Props>() => { [K in keyof Props]: Props[K] }` | One live accessor per prop the component declares. | [33.1](/rulebook#33.1), [33.2](/rulebook#33.2), [33.3](/rulebook#33.3), [33.4](/rulebook#33.4), [33.5](/rulebook#33.5), [33.6](/rulebook#33.6), [33.7](/rulebook#33.7), [33.8](/rulebook#33.8), [33.9](/rulebook#33.9), [33.10](/rulebook#33.10), [33.11](/rulebook#33.11), [33.14](/rulebook#33.14), [33.15](/rulebook#33.15), [33.20](/rulebook#33.20), [33.22](/rulebook#33.22), [33.25](/rulebook#33.25) |
+| `props` | `<Props>() => { [K in keyof Props]: Props[K] }` | One live accessor per prop the component declares. | [33.1](/rulebook#33.1), [33.2](/rulebook#33.2), [33.3](/rulebook#33.3), [33.4](/rulebook#33.4), [33.5](/rulebook#33.5), [33.6](/rulebook#33.6), [33.7](/rulebook#33.7), [33.8](/rulebook#33.8), [33.9](/rulebook#33.9), [33.10](/rulebook#33.10), [33.11](/rulebook#33.11), [33.14](/rulebook#33.14), [33.15](/rulebook#33.15), [33.20](/rulebook#33.20), [33.22](/rulebook#33.22), [33.25](/rulebook#33.25), [33.27](/rulebook#33.27) |
 | `children` | always accepted | What a caller passes between the tags. | [33.16](/rulebook#33.16), [32.18](/rulebook#32.18) |
 
 ## Taught in
@@ -9511,7 +9511,7 @@ Configuration: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `middleware` | `(...rungs: Middleware<{ request: Request }, Response>[]) => () => void` | The per-request lane at the calling file's route. | [18.26](/rulebook#18.26), [37.2](/rulebook#37.2), [37.3](/rulebook#37.3), [37.13](/rulebook#37.13) |
+| `middleware` | `(...rungs: ((next: (ctx?: { request: Request }) => Promise<Response>, ctx: { request: Request }) => Response \| Failed<string, unknown> \| Promise<Response \| Failed<string, unknown>>)[]) => () => void` | The per-request lane at the calling file's route. | [18.26](/rulebook#18.26), [37.2](/rulebook#37.2), [37.3](/rulebook#37.3), [37.13](/rulebook#37.13), [37.14](/rulebook#37.14), [37.15](/rulebook#37.15) |
 
 ## Taught in
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@abide/abide",
-    "version": "0.121.1",
+    "version": "0.123.0",
     "type": "module",
     "description": "Isomorphic type-safe framework for reactive async interfaces for humans and machines",
     "license": "MIT",

package/src/compiler/Lowering.ts

@@ -686,7 +686,8 @@ export class Lowering {
     /**
      * The read's name as emitted: `name()` for a written prop, whose cell its accessor hands back.
      *
-     * 33.6 — a written prop's cell is reached through its accessor.
+     * 33.6 — a written prop's cell is reached through its accessor. 33.27 — a read prop where a
+     * `Reactive` is due, a cell over its accessor.
      */
     private nameOf(read: Read): string {
         const spelled = this.projection.text.slice(read.start, read.end)
@@ -694,6 +695,7 @@ export class Lowering {
         // reads the one `route` every page shares.
         if (this.routed !== undefined && read.routeParams)
             return `(${spelled} as unknown as () => __RouteParams<${JSON.stringify(this.routed.route)}, ${JSON.stringify(this.routed.kind)}>)`
+        if (read.held) return `${this.use('heldProp')}(${spelled})`
         return read.through ? `${spelled}()` : spelled
     }
 
@@ -734,7 +736,7 @@ export class Lowering {
         const name = this.nameOf(read)
         switch (read.shape) {
             case 'asWritten':
-                return read.through ? name : undefined
+                return read.through || read.held ? name : undefined
             // 31.5 — the member BOUND to the `Reactive`, arguments and all.
             case 'member':
                 return this.checking

package/src/compiler/REACTIVE_MEMBERS.ts

@@ -8,9 +8,8 @@
  * `Reactive` itself, which reaches that. Without the list every `n.foo` reads as the API and the
  * value's own members are unreachable, which is what `regions.join is not a function` was.
  *
- * 31.9 wants the same question answered from the TYPE rather than from the name, which is a
- * checker query this does not make yet. A value whose own type declares `set` or `peek` therefore
- * resolves to the `Reactive`'s, and 31.13 asks for a warning naming exactly that case.
+ * The list names the candidates; the value's TYPE decides (`declaresMember` in `readsIn`): a value
+ * whose own type declares `set` or `error` keeps its own, so a `Map`'s `set` is the map's.
  *
  * WHICH IS WHY A NAME THE `Reactive` DOES NOT DECLARE MUST NOT BE HERE: it takes a member the
  * value really has and resolves it to nothing. This list is exactly `MEMBERS` in

package/src/compiler/SHARED_NAMES.ts

@@ -29,6 +29,8 @@ export const SHARED_NAMES: ReadonlySet<string> = new Set([
     // 32.6, 33.6, 33.7 — a component's `bind:`, and the cell a child writing that prop builds.
     'boundProp',
     'propCell',
+    // 33.27 — a read prop where its position holds the `Reactive`.
+    'heldProp',
     'propCells',
     // 33.20 — a default answering where the caller's accessor reads `undefined`.
     'propOr',

package/src/compiler/TypeSession.ts

@@ -625,7 +625,7 @@ export class TypeSession {
      * shadow is asked is `readsIn`'s.
      *
      * WHAT IT HAS TO SAY THAT IS NOT A TYPE ERROR comes back beside the reads: the compiler's own
-     * warnings (14.14 to 14.17, 31.13, 32.14), each on the `.abide` line where the source's text
+     * warnings (14.14 to 14.17, 32.14), each on the `.abide` line where the source's text
      * was handed in.
      */
     async readsFor(

package/src/compiler/classifyRead.ts

@@ -52,8 +52,7 @@ export type Read = {
      * that brackets a binding element's initializer, which together make a default an accessor;
      * `absent`, which gives a binding with no default an accessor of `undefined` (33.4); and
      * `restMember`, a member of the rest element, which calls that key's accessor (33.15), beside
-     * `restWhole`, the rest element handed on as one value (33.22). The
-     * pair and `absent` are INSERTIONS — zero-width, so what stands between the pair goes on being
+     * `restWhole`, the rest element handed on as one value (33.22). The pair and `absent` are INSERTIONS — zero-width, so what stands between the pair goes on being
      * lowered by the same walk, and a default reading a `Reactive` still reads it.
      */
     shape:
@@ -96,6 +95,12 @@ export type Read = {
      * pair, that the default is one too.
      */
     through: boolean
+    /**
+     * 33.27 — the name is a prop the child only reads, standing where a `Reactive` is due.
+     *
+     * So the `Reactive` every rewrite reaches is a cell over its accessor, `heldProp(name)`.
+     */
+    held: boolean
     /** 32.32 — the name is bound to a `reactive(…)` whose options declare `by`. */
     byValue: boolean
     /** 14.8 — the name is declared by a branch-local `<script>`, inside the body it scopes. */
@@ -136,6 +141,7 @@ export function newRead(
         path: [],
         value: undefined,
         through: false,
+        held: false,
         byValue: false,
         local: false,
         keys: [],
@@ -235,7 +241,10 @@ export function classifyPropRead(node: Node): Read | undefined {
  * `undefined` for an occurrence that is not a read at all: the declaration itself, an import or
  * export specifier, and a `typeof n` in a type.
  */
-export function classifyRead(node: Node): Read | undefined {
+export function classifyRead(
+    node: Node,
+    valueMember = false,
+): Read | undefined {
     const parent = node.parent
     if (isNotARead(parent)) return undefined
     if (
@@ -278,7 +287,12 @@ export function classifyRead(node: Node): Read | undefined {
         if (isPropertyAccessExpression(up) && up.expression === top) {
             // 31.5 — the `Reactive`'s own member is the API, and no path. Called, it stays as
             // written; REFERENCED, it is handed over bound, so `promise.then(n.set)` writes `n`.
-            if (top === node && REACTIVE_MEMBERS.has(up.name.text)) {
+            // `valueMember` where the value's own type declares one of that name (31.5).
+            if (
+                top === node &&
+                !valueMember &&
+                REACTIVE_MEMBERS.has(up.name.text)
+            ) {
                 const outer = up.parent
                 if (
                     (isCallExpression(outer) && outer.expression === up) ||

package/src/compiler/projectShadow.ts

@@ -697,6 +697,7 @@ declare function ${BOUND}<Value>(value: ${REACTIVE}<Value, any, any, any>): Valu
 declare function ${BOUND}<Value>(value: { get(): Value; set(value: Value): unknown }): Value
 declare function __restValues<Accessors>(record: Accessors): { [Key in keyof Accessors]: NonNullable<Accessors[Key]> extends () => infer Value ? Value : never }
 declare function __propCell<Value>(read: () => Value): () => ${REACTIVE}<Value>
+declare function __heldProp<Value>(read: () => Value): ${REACTIVE}<Value, Value, any, any>
 declare function __raw(value: unknown): unknown
 declare function __writePath<Root>(root: Root, path: readonly PropertyKey[], value: unknown): Root
 declare type __RouteParams<Pattern extends string, Kind extends string> = Kind extends 'layout' ? ${ROUTE_PARAMS}<Pattern> & { [name: string]: string | string[] | undefined } : ${ROUTE_PARAMS}<Pattern>

package/src/compiler/reactiveTypes.ts

@@ -111,7 +111,7 @@ export type Abide = {
     route: string | undefined
     reactive: CheckedSymbol | undefined
     /**
-     * 31.14 — abide's `Selection` alias, which a position may be typed as rather than as a `Reactive`.
+     * 31.13 — abide's `Selection` alias, which a position may be typed as rather than as a `Reactive`.
      */
     selection: CheckedSymbol | undefined
     props: string | undefined
@@ -185,7 +185,7 @@ export async function isReactiveType(
 /**
  * Whether a type is abide's `Selection`, or a type parameter constrained by one.
  *
- * 31.14 — A POSITION TYPED AS A `Selection`, or as a type parameter constrained by one (the free
+ * 31.13 — A POSITION TYPED AS A `Selection`, or as a type parameter constrained by one (the free
  * `refresh`, `invalidate`, `busy` and `ready` take `Chosen extends Selection`). A value is never a
  * selection of itself, so a read there hands `refresh` the invoice rather than the thing to reload.
  */