@almadar/core 10.129.0 → 11.0.1

package/dist/{effect-result-Bebwu9yT.d.ts → effect-result-1HpXgeBc.d.ts}

@@ -1,34 +1,37 @@
+import { O as OrbitalId, T as TraitId, b as EventId, N as NamespacedEffectName, c as EntityRow$1, S as ServerReportedEffect } from './effect-DZaXwSAz.js';
+import { J as JsonValue, a as JsonObject, E as EventPayloadValue$1 } from './expression-DirYKz-f.js';
 import { z } from 'zod';
-import { b as OrbitalId, T as TraitId, c as EventId, d as EntityRow, F as FieldValue, P as PatternConfig, N as NamespacedEffectName, e as ServerReportedEffect } from './effect-CiEVLsZz.js';
-import { J as JsonValue, a as JsonObject, E as EventPayload, b as EventPayloadValue } from './expression-D0Fs0riG.js';
 
+type FieldValue = JsonValue;
+type EventPayloadValue = JsonValue;
+type EventPayload = JsonObject;
+type EntityRow = {
+    id?: string;
+} & JsonObject;
 type Accepted = null;
-type AffordanceQuery = {
-    trait: string;
-    from: string;
-    event: string;
-};
-type AffordanceStep = {
-    trait: string;
-    from: string;
-    event: string;
-    /**
-     * The declared target; `from` when the trait declares no such transition (a dead affordance).
-     */
-    to: string;
-    declared: boolean;
-    navigates: boolean;
-    instanceId: string;
-    seedRowId?: string;
-    role?: RoleWire;
-    preamble?: Array<PreambleEvent>;
-    precondition?: Precondition;
-    coverageKey: string;
-};
 type AmbiguousTrait = {
     trait: string;
     orbitals: Array<string>;
 };
+type AnchoredExec = {
+    anchor: GrantAnchor;
+    path?: string;
+};
+type AnchoredFsGrant = {
+    anchor: GrantAnchor;
+    glob: string;
+    modes: Array<FsMode>;
+};
+type AnchoredGrants = {
+    fs?: Array<AnchoredFsGrant>;
+    exec?: Array<AnchoredExec>;
+    net?: Array<AnchoredNetGrant>;
+};
+type AnchoredNetGrant = {
+    host: NetPart;
+    port: NetPart;
+    kinds: Array<NetKind>;
+};
 type AppliedWire = {
     applied: Array<[string, string]>;
     response: EventResponse;
@@ -36,38 +39,23 @@ type AppliedWire = {
      * The legs the fold's own arms owe the host (a refetch after a browser-stored write), to post and fold in turn.
      */
     serverLegs: Array<RoutedLeg>;
+    /**
+     * Set when the response's frame delta started past the version this client holds: ask the host for
+     * `frames_since(since)` and fold the snapshot (EXEC-DIST-7).
+     */
+    resync?: FramesResync | null;
 };
-type ArmConflict = {
-    "kind": "earlier-arm-first";
-    arm: number;
-    to: string;
-} | {
-    "kind": "guard-unmet";
-} | {
-    "kind": "own-guard-passes";
-} | {
-    "kind": "guard-unevaluable";
-    arm: number;
-    message: string;
+type AssertionSpec = {
+    signingKey: string;
+    subject?: string | null;
+    audience: string;
+    ttlSeconds: number;
 };
 type AwaitingTrait = {
     trait: string;
     event: string;
     from: string;
 };
-type BeaconOutcomeWire = {
-    "via": "queue";
-} | {
-    "via": "fetch";
-    status: number;
-} | {
-    "via": "unavailable";
-    message: string;
-};
-type BindRowFrom = {
-    entity: string;
-    payloadField: string;
-};
 type BusEventSource = {
     orbital?: string;
     orbitalId?: OrbitalId;
@@ -88,6 +76,11 @@ type BusEventSource = {
      * other connected clients. On the wire, not an `@event.source` binding.
      */
     persistSuccess?: boolean;
+    /**
+     * The row of the emitting trait's entity that made the emit, when the trait's rows are addressed by a `per`
+     * listener (EXEC-STEP-1a). A listener with a `per` clause evaluates its own key; one without ignores this.
+     */
+    instanceKey?: string;
 };
 type CallRoutesWire = {
     success?: string;
@@ -117,11 +110,12 @@ type Claim = {
      */
     value: JsonValue;
 };
-type ClientEffect = ["render-ui", string, PatternConfig | null] | ["navigate", string] | ["navigate", string, {
+type ClientAuth = "body" | "basic" | "none";
+type ClientEffect = ["render-ui", string, JsonObject | null] | ["navigate", string] | ["navigate", string, {
     [key in string]: string;
 } | null] | ["navigate", string, {
     [key in string]: string;
-} | null, NavigateOptions] | ["navigate-back"];
+} | null, NavigateOptions] | ["navigate-back"] | ["host-ask", string, Array<JsonValue>] | ["host-ask", string, Array<JsonValue>, HostAskCompletion];
 type ClientEffectByTrait = {
     traitName: string;
     effect: ClientEffect;
@@ -143,134 +137,48 @@ type ClientEffectByTrait = {
      */
     repaint?: RepaintReason;
 };
-type ConfigVariant = {
-    /**
-     * `knob = value`.
-     */
-    label: string;
-    field: string;
-    /**
-     * The baseline defaults with `field` changed.
-     */
-    config: JsonObject;
-};
-type ContractEvents = {
-    /**
-     * False when no language data is installed: the table cannot be read, so nothing is planned.
-     */
-    available: boolean;
-    steps: Array<ContractStep>;
+type ConnectFailure = {
+    kind: ConnectFailureKind;
+    message: string;
 };
-type ContractStep = {
-    trait: string;
-    from: string;
-    event: string;
-    pattern: string;
-    coverageKey: string;
+type ConnectFailureKind = "unavailable" | "unsigned" | "denied" | "invalid_grant" | "invalid_client" | "transport" | "malformed" | "refused";
+type CredentialGrantWire = {
+    name: string;
+    principal?: string;
+    tokenEndpoint: string;
+    grant: string;
+    code: string;
+    redirectUri: string;
+    verifier?: string;
+    clientId: string;
+    clientSecret?: string;
+    clientAuth: ClientAuth;
+    scopes: Array<string>;
+    refreshCredential?: string;
+    assertion?: AssertionSpec;
+    jsonToken?: JsonTokenSpec;
 };
+type CredentialKind = "admin";
 type CredentialStanding = {
     connected: boolean;
     label?: string | null;
 };
-type Credit = {
-    index: number;
-    stateBefore: string;
-    stateAfter: string;
-};
-type CreditStep = {
-    trait: string;
-    from: string;
-    event: string;
-    arm?: number;
-    reply?: ReplyRoute;
-    fired: Array<FiredHop>;
-};
-type CrudChain = {
-    kind: CrudKind;
-    entity: string;
-    persistor: string;
-    sourceTrait: string;
-    openFrom: string;
-    openEvent: string;
-    openTo: string;
-    submitEvent: string;
-    successEvent: string;
-    rowDelta: number;
-    /**
-     * The event the rendered button carries when the open event reaches the overlay through a listener.
-     */
-    openAffordanceEvent: string;
-    /**
-     * The open transition renders into a portal slot or a self-overlay pattern.
-     */
-    opensOverlay: boolean;
-    requiresRowContext: boolean;
-    payloadRowShape: Array<RowShapeField>;
-    /**
-     * The payload the submit event carries, built from its declared schema.
-     */
-    submitPayload: JsonValue;
-    /**
-     * A minimal row of the linked entity: the values a form's fields are filled with.
-     */
-    entityRow: JsonValue;
-    /**
-     * The same row with every non-id value changed, so an edit has something to change.
-     */
-    editEntityRow: JsonValue;
-    /**
-     * Entity fields restricted to declared values: a changed value would leave the vocabulary, so a row-content
-     * assertion skips them.
-     */
-    enumFields: Array<string>;
-    viewer?: ViewerRequirement;
-    precondition?: Precondition;
-    /**
-     * Delete only: self-relation fields (restrict rule) a deletable row must not be referenced through.
-     */
-    avoidReferencedVia: Array<string>;
-    /**
-     * Delete only: fields of OTHER entities (restrict rule) that reference this entity.
-     */
-    avoidReferencedByOtherEntities: Array<InboundRelation>;
-    /**
-     * Delete only: when the entity can run out of unreferenced rows, the create to dispatch first.
-     */
-    deleteEstablishFallback?: EstablishFallback;
-    coverageKey: string;
-};
-type CrudKind = "create" | "edit" | "delete";
-type DataMutation = {
-    trait: string;
-    from: string;
-    event: string;
-    to: string;
-    payload: JsonValue;
-    entity: string;
-    kind: MutationKind;
-    rowDelta: number;
-    successEvent?: string;
-    viewer?: ViewerRequirement;
-    /**
-     * Update or delete whose own persist argument names the target row: the host binds a real row there.
-     */
-    bindRow?: PersistBinding;
-    avoidReferencedVia: Array<string>;
-    avoidReferencedByOtherEntities: Array<InboundRelation>;
-    rowEstablish?: RowEstablish;
-    precondition?: Precondition;
-    coverageKey: string;
-};
 type DeliverRefusal = {
     kind: DeliverRefusalKind;
     id: string;
 };
-type DeliverRefusalKind = "mailbox-full" | "hop-cap" | "unknown-instance" | "denied" | "down";
+type DeliverRefusalKind = "mailbox-full" | "hop-cap" | "unknown-instance" | "denied" | "down" | "payload-invalid" | "key-invalid";
 type DeliveryRecord = {
     event: string;
     payload?: EventPayload;
     source: BusEventSource;
 };
+type DesktopKind = "notify" | "speak" | "brightness" | "volume" | "power";
+type DevGrant = {
+    target: string;
+    kinds: Array<DevKind>;
+};
+type DevKind = "read" | "write" | "wait" | "ack";
 type DispatchLog = {
     prevEvents: Array<DeliveryRecord>;
     prevStates: Array<string>;
@@ -278,6 +186,11 @@ type DispatchLog = {
 type DispatchMode = "persistedAwaited" | "hybridClientOnly" | "runtimeOptimistic";
 type DispatchWire = {
     orbital: string;
+    /**
+     * The flight this dispatch holds while it owes the host a leg: its answers fold in flight order
+     * (`foldInOrder`) and the host ends it when the last is folded (`endFlight`). Absent when nothing is owed.
+     */
+    flight?: number | null;
     seed: SeedWire;
     response: EventResponse;
     serverLegs: Array<RoutedLeg>;
@@ -302,28 +215,6 @@ type EffectTraceWire = {
     error?: string;
     evalTrace?: Array<EvalStepWire>;
 };
-type EmitRowBinding = {
-    entity: string;
-    payloadField: string;
-    wholeRow: boolean;
-    /**
-     * A delete's restrict relations: the host binds a row nothing references.
-     */
-    avoidReferencedVia: Array<string>;
-    avoidReferencedByOtherEntities: Array<InboundRelation>;
-};
-type EmitStep = {
-    trait: string;
-    from: string;
-    event: string;
-    payload: JsonValue;
-    navigates: boolean;
-    coverageKey: string;
-    /**
-     * A listener persists an update or delete keyed by this emit's payload: the host binds a real row there.
-     */
-    bindRow?: EmitRowBinding;
-};
 type EmittedEffectWire = {
     event: string;
     payload?: JsonValue;
@@ -334,6 +225,10 @@ type EmittedEvent = {
     source?: BusEventSource;
 };
 type EnsuresVerdict = "held" | "broken" | "inconclusive";
+type Entered = {
+    seeds: Array<MountSeed>;
+    left: Array<Left>;
+};
 type EntityBinding = {
     kind: EntityBindingKind;
     /**
@@ -355,6 +250,16 @@ type EntityWriteWire = {
     field: string;
     value: JsonValue;
 };
+type EnvTail = {
+    name: string;
+    last4?: string;
+};
+type EnvTails = {
+    "kind": "held";
+    tails: Array<EnvTail>;
+} | {
+    "kind": "unsupported";
+};
 type Envelope = {
     id: string;
     from: InstanceRef;
@@ -364,12 +269,6 @@ type Envelope = {
     causalId: string;
     hop: number;
 };
-type EstablishFallback = {
-    event: string;
-    payload: JsonValue;
-    trait: string;
-    viewer?: ViewerRequirement;
-};
 type EvalContextWire = {
     entity?: JsonValue;
     payload?: JsonValue;
@@ -425,7 +324,6 @@ type EventRequest = {
     payload?: EventPayload;
     entityId?: string;
     targetTrait?: string;
-    user?: RawUserClaims;
     clientId?: string;
     /**
      * The viewer's locale (one of the program's declared `locales`); `None` → the first declared.
@@ -457,10 +355,20 @@ type EventRequest = {
      * with the shared `payload` (`bus.ts` `OrbitalEventRequest.mount`).
      */
     mount?: Array<MountSeed>;
+    /**
+     * The route a `mount` batch opens: the kernel delivers `$MOUNT { page, route, traits, entities }` to the traits that
+     * listen for it before the batch's seeds run (EXEC-SEED-7). Absent: a mount that opens no route delivers none.
+     */
+    route?: string;
     /**
      * Where this leg runs, set by the kernel on every leg it builds (EXEC-DIST-6).
      */
     residence?: LegResidence;
+    /**
+     * Not a dispatch: the client holds this version of the session's frames and asks what it is missing. The answer
+     * is a response carrying only `frames`, a snapshot unless the client is current (EXEC-DIST-7).
+     */
+    framesSince?: number;
 };
 type EventResponse = {
     success: boolean;
@@ -484,10 +392,10 @@ type EventResponse = {
     dataRefs?: {
         [key in string]: RowSetRef;
     };
-    entityByTrait?: {
-        [key in string]: EntityRow;
-    };
-    clientEffects?: Array<ClientEffect>;
+    /**
+     * What this response changes in the frames the client holds, against the kernel's view record (EXEC-DIST-7).
+     */
+    frames?: FrameDelta;
     clientEffectsByTrait?: Array<ClientEffectByTrait>;
     effectResults?: Array<ServerEffectResult$1>;
     /**
@@ -506,41 +414,55 @@ type EventResponse = {
     transitions?: Array<TransitionHop>;
     error?: string;
 };
-type Expectation = {
+type FfiGrant = {
+    library: string;
+    symbol: string;
+    signature: string;
+};
+type FiredTick = {
     trait: string;
-    from: string;
-    event: string;
-    toStates: Array<string>;
-    guarded: boolean;
-    arm?: number;
-    solved: boolean;
-    reply?: ReplyRoute;
-    payloadCase: PayloadCase;
-    guardCase?: GuardCase;
-    guardSteerable?: boolean;
-    acceptStates: Array<string>;
+    tick: string;
+};
+type FoldProgressWire = {
+    "status": "applied";
+    fold: AppliedWire;
+} | {
+    "status": "queued";
+    ticket: number;
+};
+type FoldedNextWire = {
+    "outcome": "applied";
+    ticket: number;
+    fold: AppliedWire;
+} | {
+    "outcome": "failed";
+    ticket: number;
+    error: string;
+};
+type FrameDelta = {
+    session?: string;
+    from: number;
+    to: number;
+    ops: Array<FrameOp>;
     /**
-     * The step's precondition is not shown to hold; a failure is then inconclusive.
+     * The session's bound identity (EXEC-IDENTITY-4), present when it changed since the last delta of this record (a
+     * snapshot always carries it); absent leaves the client's mirror as it is.
      */
-    preconditionGap?: UnprovenReason;
-};
-type FiredHop = {
-    trait: string;
-    from: string;
-    event: string;
-    to: string;
+    identity?: FrameIdentity;
     /**
-     * Position of the arm among the state's `from --event-->` arms.
+     * The session's bound theme (G-CROSS-395), present when it changed since the last delta of this record (a snapshot
+     * always carries it); absent leaves the client's mirror as it is.
      */
-    arm?: number;
-};
-type FiredTick = {
-    trait: string;
-    tick: string;
+    theme?: FrameTheme;
 };
 type FrameDispatch = {
     trait: string;
     orbital: string;
+    /**
+     * The flight this dispatch holds while it owes the host a leg: its answers fold in flight order
+     * (`foldInOrder`) and the host ends it when the last is folded (`endFlight`). Absent when nothing is owed.
+     */
+    flight?: number | null;
     seed: SeedWire;
     response: EventResponse;
     serverLegs: Array<RoutedLeg>;
@@ -557,9 +479,22 @@ type FrameDispatch = {
      */
     foldSeeded: Array<string>;
 };
-type FrameStatus = "pass" | "fail" | "inconclusive" | "gap";
+type FrameIdentity = {
+    user?: JsonValue;
+};
+type FrameOp = ["put", string, EntityRow] | ["set", {
+    [key in string]: EntityRow;
+}] | ["del", string] | ["clear"];
+type FrameTheme = {
+    key?: string;
+};
 type FrameWire = {
-    fired: Array<FiredTick>;
+    /**
+     * The fired ticks under the orbital that declares them: the one a `runTick` request is addressed to.
+     */
+    fired: {
+        [key in string]: Array<FiredTick>;
+    };
     response: EventResponse;
     dispatches: Array<FrameDispatch>;
     /**
@@ -569,13 +504,23 @@ type FrameWire = {
     droppedServerEffects: number;
     errors: Array<string>;
 };
-type GapReason = "not-reachable-without-network" | "delivered-only-by-remount";
+type FramesResync = {
+    session: string;
+    since: number;
+};
+type FsGrant = {
+    glob: string;
+    modes: Array<FsMode>;
+};
+type FsMode = "read" | "write" | "create" | "remove" | "meta";
+type GrantAnchor = "exe" | "exe-dir" | "cwd" | {
+    "env": string;
+};
 type GuardCapabilities = {
     leaves: Array<RowLeafKind>;
     combinators: Array<RowCombinator>;
     compareOps: Array<RowCompareOp>;
 };
-type GuardCase = "pass" | "fail";
 type GuardOutcomeWire = {
     "kind": "value";
     value: boolean;
@@ -596,45 +541,15 @@ type HopObservation = {
     entityBefore: JsonValue;
     entityAfter: JsonValue;
 };
-type HttpBody = {
-    "kind": "empty";
-} | {
-    "kind": "text";
-    text: string;
-} | {
-    "kind": "base64";
-    data: string;
-};
-type HttpFailureWire = {
-    "kind": "timedOut";
-} | {
-    "kind": "failed";
-    message: string;
-} | {
-    "kind": "refused";
-    message: string;
-};
-type HttpRequestWire = {
-    method: string;
-    url: string;
-    headers: Array<[string, string]>;
-    body: HttpBody;
-    timeoutMs?: number;
-};
-type HttpResponseWire = {
-    status: number;
-    headers: Array<[string, string]>;
-    body: HttpBody;
-};
-type InboundRelation = {
-    entity: string;
-    field: string;
-};
-type InitCredit = {
+type HostAskCompletion = {
     trait: string;
-    state: string;
-    coverageKey: string;
+    entityId?: string;
+    key?: string;
+    success?: string;
+    failure?: string;
+    onMessage?: string;
 };
+type IndexRealization = "runtime" | "deploy" | "none";
 type InstanceRef = {
     instance: string;
     orbital: string;
@@ -680,12 +595,6 @@ type IoAnswerWire = {
 } | {
     "kind": "substrate";
     result: Settled<JsonValue, SubstrateFailureWire>;
-} | {
-    "kind": "http";
-    result: Settled<HttpResponseWire, HttpFailureWire>;
-} | {
-    "kind": "httpBeacon";
-    result: Settled<BeaconOutcomeWire, HttpFailureWire>;
 } | {
     "kind": "pageFacts";
     result: Settled<PageFactsWire, string>;
@@ -713,6 +622,9 @@ type IoAnswerWire = {
 } | {
     "kind": "clock";
     result: Settled<number, string>;
+} | {
+    "kind": "sealed";
+    result: Settled<JsonValue, string>;
 } | {
     "kind": "os";
     result: Settled<JsonValue, OsError>;
@@ -722,9 +634,15 @@ type IoAnswerWire = {
 } | {
     "kind": "credentialForget";
     result: Settled<null, string>;
+} | {
+    "kind": "credentialConnect";
+    result: Settled<CredentialStanding, ConnectFailure>;
 } | {
     "kind": "credentialStoreList";
     result: Settled<StoreListing | null, string>;
+} | {
+    "kind": "credentialEnvTails";
+    result: Settled<EnvTails, string>;
 } | {
     "kind": "credentialStoreRead";
     result: Settled<string | null, string>;
@@ -743,9 +661,6 @@ type IoAnswerWire = {
 } | {
     "kind": "credentialModeWrite";
     result: Settled<string, string>;
-} | {
-    "kind": "oauth";
-    result: Settled<OAuthReply, string>;
 } | {
     "kind": "deliver";
     result: Settled<Accepted, DeliverRefusal>;
@@ -802,23 +717,6 @@ type IoRequestWire = {
     args: Array<JsonValue>;
     key?: string;
     site?: CallSiteWire;
-} | {
-    "kind": "http";
-    request: HttpRequestWire;
-    key?: string;
-    delayMs?: number;
-    site?: CallSiteWire;
-} | {
-    "kind": "httpStream";
-    request: HttpRequestWire;
-    key?: string;
-    framing: StreamFramingWire;
-    site?: CallSiteWire;
-} | {
-    "kind": "httpBeacon";
-    request: HttpRequestWire;
-    key?: string;
-    site?: CallSiteWire;
 } | {
     "kind": "pageFacts";
     fields: Array<PageFactFieldWire>;
@@ -850,26 +748,37 @@ type IoRequestWire = {
     name: string;
     value: string;
     principal?: string;
-} | {
-    "kind": "oauth";
-    ask: OAuthAsk;
-    principal?: string;
 } | {
     "kind": "deliver";
     envelope: Envelope;
     key?: string;
     site: CallSiteWire;
+} | {
+    "kind": "guest";
+    guest: string;
+    targets: Array<string>;
+    event: string;
+    payload: JsonValue;
+    grants: OsGrants;
+    key?: string;
+    site?: CallSiteWire;
 } | {
     "kind": "random";
     bytes: number;
 } | {
     "kind": "clock";
+} | {
+    "kind": "sealed";
+    op: string;
+    args: Array<JsonValue>;
 } | {
     "kind": "os";
     op: OsOp;
     args: Array<JsonValue>;
     key?: string;
     site?: CallSiteWire;
+    principal?: string;
+    orbital?: string;
 } | {
     "kind": "credentialStatus";
     name: string;
@@ -878,8 +787,14 @@ type IoRequestWire = {
     "kind": "credentialForget";
     name: string;
     principal?: string;
+} | {
+    "kind": "credentialConnect";
+    grant: CredentialGrantWire;
 } | {
     "kind": "credentialStoreList";
+} | {
+    "kind": "credentialEnvTails";
+    names: Array<string>;
 } | {
     "kind": "credentialStoreRead";
     name: string;
@@ -899,6 +814,26 @@ type IoRequestWire = {
     "kind": "credentialModeWrite";
     mode: string;
 };
+type JsonTokenSpec = {
+    clientIdField: string;
+    clientSecretField: string;
+    accessField: string;
+    refreshField?: string | null;
+    expiresInField?: string | null;
+    refreshEndpoint?: string | null;
+    refreshBodyField?: string | null;
+};
+type KernelGrant = {
+    target: string;
+    kinds: Array<KernelKind>;
+};
+type KernelKind = "call" | "reorder" | "read" | "spawn";
+type KvMode = "read" | "write";
+type Left = {
+    trait: string;
+    orbital: string;
+    leg: EventRequest;
+};
 type LegResidence = "browser" | "server";
 type LifecycleEvent = "INIT" | "LOAD" | "$MOUNT";
 type MachineRow = {
@@ -913,6 +848,11 @@ type MachineRow = {
     guarded: boolean;
     payload: Array<PayloadSlot>;
 };
+type MemGrant = {
+    target: string;
+    kinds: Array<MemKind>;
+};
+type MemKind = "create" | "free" | "atomic";
 type ModelFailureKindWire = "unconfigured" | "unavailable" | "failed";
 type ModelFailureWire = {
     kind: ModelFailureKindWire;
@@ -956,7 +896,6 @@ type MountWire = {
      */
     failed: MountFailure | null;
 };
-type MutationKind = "create" | "update" | "delete";
 type MutationOpWire = "create" | "update" | "delete";
 type MutationVerdictWire = {
     allowed: boolean;
@@ -965,173 +904,106 @@ type MutationVerdictWire = {
 type NavigateOptions = {
     crumb?: string;
 };
-type OAuthAsk = {
-    ask: "pendingPut";
-    state: string;
-    grant: OAuthPendingGrant;
-    ttlMs: number;
-} | {
-    ask: "pendingTake";
-    state: string;
-} | {
-    ask: "connectionAvailable";
-} | {
-    ask: "connectionSave";
-    provider: OAuthProvider;
-    grant: OAuthTokenGrant;
-} | {
-    ask: "connectionStatus";
-    provider: OAuthProvider;
-} | {
-    ask: "connectionRemove";
-    provider: OAuthProvider;
-} | {
-    ask: "subjectRemember";
-    accessToken: string;
-    subject: string;
-} | {
-    ask: "subjectLookup";
-    accessToken: string;
-} | {
-    ask: "subjectForget";
-    accessToken: string;
-} | {
-    ask: "metadataGet";
-    issuer: string;
-} | {
-    ask: "metadataPut";
-    issuer: string;
-    metadata: {
-        [key in string]: JsonValue;
-    };
-} | {
-    ask: "clock";
-} | {
-    ask: "mockTokenPut";
-    accessToken: string;
-    refreshToken: string;
-    expiresAtMs: number;
-    provider: OAuthProvider;
-} | {
-    ask: "mockTokenRefresh";
-    refreshToken: string;
-    newAccessToken: string;
-    expiresAtMs: number;
-} | {
-    ask: "mockTokenRevoke";
-    token: string;
-} | {
-    ask: "mockTokenCheck";
-    accessToken: string;
-} | {
-    ask: "consent";
-    authUrl: string;
-    state: string;
-    redirectUri: string;
-};
-type OAuthConnectionRow = {
-    provider: OAuthProvider;
-    connected: boolean;
-    account: string;
-    avatarUrl: string;
-    scope: Array<string>;
-    connectedAt: string;
-};
-type OAuthPendingGrant = {
-    provider: string;
-    redirectUri: string;
-    verifier: string;
-    subject: string | null;
-    scopes: Array<string>;
+type NetGrant = {
+    target: string;
+    kinds: Array<NetKind>;
 };
-type OAuthPendingTake = {
-    found: "missing";
+type NetKind = "tcp" | "udp" | "listen";
+type NetPart = {
+    "literal": string;
 } | {
-    found: "expired";
-} | {
-    found: "grant";
-    grant: OAuthPendingGrant;
+    "anchor": GrantAnchor;
 };
-type OAuthProvider = "google" | "github" | "auth0";
-type OAuthReply = {
-    reply: "done";
-} | {
-    reply: "flag";
-    value: boolean;
-} | {
-    reply: "taken";
-    taken: OAuthPendingTake;
-} | {
-    reply: "row";
-    row: OAuthConnectionRow;
-} | {
-    reply: "subject";
-    subject: string | null;
-} | {
-    reply: "metadata";
-    metadata: {
-        [key in string]: JsonValue;
-    } | null;
-} | {
-    reply: "millis";
-    value: number;
+type NextWire = {
+    "outcome": "started";
+    ticket: number;
+    progress: ServerProgressWire;
 } | {
-    reply: "mockToken";
-    state: "missing" | "expired" | "valid";
-    provider: OAuthProvider | null;
-} | {
-    reply: "code";
-    code: string | null;
+    "outcome": "failed";
+    ticket: number;
+    error: string;
 };
-type OAuthTokenGrant = {
-    accessToken: string;
-    refreshToken: string | null;
-    expiresIn: number;
-    tokenType: string;
-    scope: Array<string> | null;
-    subject: string | null;
-};
-type Observation = {
-    stateBefore: string;
-    stateAfter: string;
-    /**
-     * The arm the kernel selected among the `from --event-->` arms.
-     */
-    firedArm?: number;
-    effects: Array<ObservedEffect>;
-};
-type ObservedEffect = {
-    outcome: ObservedOutcome;
-    /**
-     * The declared `emit.failure` event the program routed this failure to.
-     */
-    routed?: string;
-};
-type ObservedOutcome = "executed" | "noop" | "delegated" | "failed";
-type OperatorValueKinds = {
-    operator: RowOperator;
-    valueKinds: Array<RowValueKind>;
+type OperatorValueKinds = {
+    operator: RowOperator;
+    valueKinds: Array<RowValueKind>;
 };
 type OsError = {
     kind: OsErrorKind;
     message: string;
 };
-type OsErrorKind = "denied" | "not-found" | "exists" | "invalid" | "io" | "timeout" | "unsupported" | "closed";
-type OsOp = "os/read-file" | "os/write-file" | "os/append-file" | "os/open" | "os/close" | "os/read" | "os/write" | "os/seek" | "os/truncate" | "os/fsync" | "os/copy" | "os/rename" | "os/remove" | "os/link" | "os/symlink" | "os/readlink" | "os/watch-files" | "os/mkdir" | "os/rmdir" | "os/list-dir" | "os/glob" | "os/mktemp" | "os/realpath" | "os/cwd" | "os/chdir" | "os/stat" | "os/lstat" | "os/access" | "os/exists" | "os/chmod" | "os/chown" | "os/utimes" | "os/spawn" | "os/wait" | "os/kill" | "os/pid" | "os/ppid" | "os/current-exe" | "os/watch-process" | "os/watch-signal" | "os/getenv" | "os/setenv" | "os/unsetenv" | "os/environ" | "os/watch-env" | "os/stdin-read" | "os/stdout-write" | "os/stderr-write" | "os/isatty" | "os/tty-size" | "os/tcp-connect" | "os/tcp-listen" | "os/send" | "os/recv" | "os/udp-bind" | "os/sendto" | "os/recvfrom" | "os/dns-resolve" | "os/shutdown" | "os/watch-port" | "os/clock-monotonic" | "os/uid" | "os/gid" | "os/username" | "os/group-of" | "os/watch-cron" | "os/cpu-usage" | "os/memory-info" | "os/uptime" | "os/load-avg" | "os/hostname" | "os/uname" | "os/disk-usage" | "os/mounts" | "os/disk-io" | "os/network-interfaces" | "os/network-stats" | "os/network-connected" | "os/default-gateway" | "os/battery-status" | "os/ac-power" | "os/thermal-zones" | "os/notify" | "os/speak" | "os/brightness-get" | "os/brightness-set" | "os/volume-get" | "os/volume-set" | "os/volume-mute" | "os/suspend" | "os/hibernate" | "os/mmio-read" | "os/mmio-write" | "os/irq-wait" | "os/irq-ack" | "kv/get" | "kv/put" | "kv/delete" | "kv/scan" | "kv/batch";
-type OwnerRequirement = {
-    sourceEntity: string;
-    sourceField: string;
-    useDefaultId?: boolean;
-    payloadOwnerField?: string;
+type OsErrorKind = "denied" | "not-found" | "exists" | "invalid" | "io" | "timeout" | "unsupported" | "closed" | "tls" | "borrowed";
+type OsGrantFinding = {
+    code: OsGrantFindingCode;
+    orbital?: string;
+    call?: string;
+    entry?: string;
+    site: string;
+    grant?: string;
+    app?: boolean;
+    argument?: number;
+    via?: OsGrantVia;
+};
+type OsGrantFindingCode = "missing" | "unused" | "entry-invalid" | "target-not-static";
+type OsGrantVia = "config" | "config-unresolvable" | "computed-path";
+type OsGrants = {
+    fs?: Array<FsGrant>;
+    exec?: Array<string>;
+    net?: Array<NetGrant>;
+    env?: Array<string>;
+    stdio?: Array<StdioKind>;
+    sys?: Array<SysKind>;
+    desktop?: Array<DesktopKind>;
+    dev?: Array<DevGrant>;
+    mem?: Array<MemGrant>;
+    kernel?: Array<KernelGrant>;
+    ffi?: Array<FfiGrant>;
+    /**
+     * `credentials: [admin]`: the raw credential-store operators, closed unless declared.
+     */
+    credentials?: Array<CredentialKind>;
+    /**
+     * `kv: { <store>: [read, write] }`: a store name, or a `*`/`?` glob over one, and the modes it grants.
+     */
+    kv?: {
+        [key in string]: Array<KvMode>;
+    };
+    anchored?: AnchoredGrants;
+};
+type OsGrantsReport = {
+    findings: Array<OsGrantFinding>;
+};
+type OsOp = "os/read-file" | "os/write-file" | "os/append-file" | "os/open" | "os/close" | "os/read" | "os/write" | "os/seek" | "os/truncate" | "os/fsync" | "os/copy" | "os/rename" | "os/remove" | "os/link" | "os/symlink" | "os/readlink" | "os/watch-files" | "os/mkdir" | "os/rmdir" | "os/list-dir" | "os/glob" | "os/mktemp" | "os/realpath" | "os/cwd" | "os/chdir" | "os/stat" | "os/lstat" | "os/access" | "os/exists" | "os/chmod" | "os/chown" | "os/utimes" | "os/spawn" | "os/wait" | "os/kill" | "os/pid" | "os/ppid" | "os/current-exe" | "os/watch-process" | "os/watch-signal" | "os/getenv" | "os/setenv" | "os/unsetenv" | "os/environ" | "os/watch-env" | "os/stdin-read" | "os/stdout-write" | "os/stderr-write" | "os/isatty" | "os/tty-size" | "os/tcp-connect" | "os/tcp-listen" | "os/tls-upgrade" | "os/send" | "os/recv" | "os/udp-bind" | "os/sendto" | "os/recvfrom" | "os/dns-resolve" | "os/shutdown" | "os/watch-port" | "os/fetch" | "os/clock-monotonic" | "os/uid" | "os/gid" | "os/username" | "os/group-of" | "os/watch-cron" | "os/cpu-usage" | "os/memory-info" | "os/uptime" | "os/load-avg" | "os/hostname" | "os/uname" | "os/disk-usage" | "os/mounts" | "os/disk-io" | "os/network-interfaces" | "os/network-stats" | "os/network-connected" | "os/default-gateway" | "os/battery-status" | "os/ac-power" | "os/thermal-zones" | "os/notify" | "os/speak" | "os/brightness-get" | "os/brightness-set" | "os/volume-get" | "os/volume-set" | "os/volume-mute" | "os/suspend" | "os/hibernate" | "os/mmio-read" | "os/mmio-write" | "os/irq-wait" | "os/irq-ack" | "kv/get" | "kv/put" | "kv/delete" | "kv/scan" | "kv/batch" | "mem/arena-new" | "mem/arena-drop" | "mem/alloc" | "mem/free" | "mem/borrow" | "mem/release" | "mem/write" | "mem/freeze" | "mem/atomic-load" | "mem/atomic-store" | "mem/atomic-add" | "mem/atomic-cas" | "kernel/queue-front" | "kernel/queue-back" | "ffi/call";
+type PageCircuit = {
+    route?: string;
+    page?: string;
+    notFound: boolean;
+    mounts: Array<MountSeed>;
+    embedded: Array<string>;
+    embeddedBy: Array<string>;
+    orbitalByTrait: {
+        [key in string]: string;
+    };
+    linkedEntityByTrait: {
+        [key in string]: string;
+    };
+    /**
+     * The traits the page binds: its own, then the ones it embeds.
+     */
+    traits: Array<string>;
+    /**
+     * The entities the page needs: each bound trait's linked entity and every entity reached through declared
+     * relation fields of those, transitively, sorted (EXEC-SEED-7).
+     */
+    entities: Array<string>;
 };
-type PageFactFieldWire = "hostname" | "referrer" | "screenWidth";
+type PageFactFieldWire = "hostname" | "referrer" | "screenWidth" | "href";
 type PageFactsWire = {
     available: boolean;
     hostname: string;
     referrer: string;
     screenWidth: number | null;
+    href: string;
 };
-type PayloadCase = "success" | "malformed" | "guard-fail";
 type PayloadSlot = {
     name: string;
     type: string;
@@ -1145,53 +1017,16 @@ type PayloadSlot = {
      */
     entity?: string;
 };
+type PendingAsk = {
+    trait: string;
+    operator: string;
+    args: Array<JsonValue>;
+    key: string;
+};
 type PendingRequestWire = {
     id: number;
     request: IoRequestWire;
 };
-type PersistBinding = {
-    payloadField: string;
-    wholeRow: boolean;
-};
-type PlanFailure = {
-    "kind": "invalid-program";
-    message: string;
-} | {
-    "kind": "invalid-input";
-    message: string;
-} | {
-    "kind": "unknown-trait";
-    name: string;
-    available: string;
-};
-type PlanOptions = {
-    /**
-     * Restrict the plan to these traits (either name spelling a trait carries after resolve).
-     */
-    traits?: Array<string>;
-    /**
-     * The bound viewer's id; shapes the seed row id and ownership-stamped payloads.
-     */
-    viewerId?: string;
-    /**
-     * Events the caller already covers; the contract plan skips them.
-     */
-    coveredEvents?: Array<string>;
-};
-type PlanOutcome = {
-    "outcome": "planned";
-    steps: Array<StepWire>;
-    configVariants: Array<TraitConfigVariants>;
-    initCredits: Array<InitCredit>;
-    emitSweep: Array<EmitStep>;
-    contractEvents: ContractEvents;
-    crudChains: Array<CrudChain>;
-    tickSteps: Array<TickStep>;
-    dataMutations: Array<DataMutation>;
-} | {
-    "outcome": "refused";
-    failure: PlanFailure;
-};
 type PlayedEffect = {
     type: string;
     args: Array<JsonValue>;
@@ -1224,6 +1059,17 @@ type PlayedGuard = {
     trace: Array<EvalStepWire>;
     error?: string;
 };
+type PlayedOutcome = {
+    orbital: string;
+    trait: string;
+    event: string;
+    from: string;
+    to: string;
+    arm?: number;
+    fired: boolean;
+    effects: Array<PlayedEffect>;
+    emitted: Array<PlayedEmit>;
+};
 type PlayedResult = {
     trait: string;
     event: string;
@@ -1248,6 +1094,19 @@ type PlayedResult = {
      * The slots the played trait filled, walked by the kernel's render probe; present when `options.render` asked.
      */
     rendered?: Array<RenderedSlot>;
+    /**
+     * Why the requested trait's step failed, when it did.
+     */
+    failure?: string;
+    /**
+     * The step's row after its effects.
+     */
+    entityAfter: EventPayload | null;
+    pendingAsks: Array<PendingAsk>;
+    /**
+     * Every trait the request's event moved, the requested one among them.
+     */
+    outcomes: Array<PlayedOutcome>;
 };
 type PlayedState = {
     before: string | null;
@@ -1260,50 +1119,24 @@ type PlayedStep = {
     event: string;
     payload: EventPayload;
     result: PlayedResult;
+    entity?: {
+        [key in string]: JsonValue;
+    };
+    config?: {
+        [key in string]: JsonValue;
+    };
+    now?: number;
+    settleMs?: number;
+    viewer?: {
+        [key in string]: JsonValue;
+    } | null;
+    credentials?: {
+        [key in string]: string;
+    };
 };
-type PreambleEvent = {
-    event: string;
-    payload: JsonValue;
-    /**
-     * The state the machine stands in when this hop is fired, and where the declared transition leads.
-     */
-    from: string;
-    to: string;
-    /**
-     * States the machine may settle in beyond `to`, because an effect-emitted event advances it on its own.
-     */
-    acceptStates?: Array<string>;
-    /**
-     * Firing the hop can change the route.
-     */
-    navigates: boolean;
-};
-type Precondition = {
-    "kind": "established";
-    trait: string;
-    event: string;
-    payload: JsonValue;
-    establishAtState: string;
-    bindRowFrom?: BindRowFrom;
-    role?: RoleWire;
-    /**
-     * Further unestablished guard fields this preamble does not cover.
-     */
-    unplannedFields: Array<string>;
-    proof: Proof;
-} | {
-    "kind": "same-trait-setter";
-    fields: Array<string>;
-    proof: Proof;
-} | {
-    "kind": "unreachable";
-    fields: Array<string>;
-};
-type Proof = {
-    "kind": "proven";
-} | {
-    "kind": "unproven";
-    reason: UnprovenReason;
+type ProgramSurface = {
+    traits: Array<TraitSurface>;
+    browserEntities: Array<string>;
 };
 type PropositionBindings = {
     entity: JsonValue;
@@ -1334,6 +1167,34 @@ type PropositionVerdict = {
     "verdict": "inconclusive";
     reason: string;
 };
+type ProveFinding = {
+    verdict: ProveVerdict;
+    reason: string;
+    counterexample?: JsonValue;
+    site: string;
+    proposition: ProvedProposition;
+};
+type ProveReport = {
+    findings: Array<ProveFinding>;
+};
+type ProveVerdict = "violated" | "unproved";
+type ProvedProposition = {
+    "kind": "row";
+    entity: string;
+    expr: JsonValue;
+} | {
+    "kind": "state";
+    trait: string;
+    state: string;
+    expr: JsonValue;
+} | {
+    "kind": "transition";
+    trait: string;
+    from: string;
+    event: string;
+    to: string;
+    expr: JsonValue;
+};
 type QueryCapabilities = {
     leaves: Array<RowLeafKind>;
     combinators: Array<RowCombinator>;
@@ -1347,6 +1208,10 @@ type QueryCapabilities = {
      * `nearest` is pushed down: the store ranks by cosine similarity itself (EXEC-FETCH-2).
      */
     nearest?: boolean;
+    /**
+     * How the driver realizes the entity's declared `@index` paths; absent is `none`.
+     */
+    indexes?: IndexRealization;
 };
 type RenderedNode = {
     /**
@@ -1385,13 +1250,18 @@ type RenderedSlot = {
      * The rendered tree in pre-order, each `@trait` embed's content visited once where it is embedded.
      */
     nodes: Array<RenderedNode>;
+    /**
+     * The slot's content exactly as the kernel resolved it for a host to paint (EXEC-STEP-4); present only when
+     * `options.renderProps` asked.
+     */
+    props?: JsonValue;
+    /**
+     * The slot's repaint failed to resolve and it keeps its last paint (G-ORBITAL-CORE-090); present only when
+     * `options.renderProps` asked and the failure happened.
+     */
+    fault?: SlotFault;
 };
 type RepaintReason = "rows-changed";
-type ReplayQuery = {
-    trait: string;
-    state: string;
-};
-type ReplyRoute = "other" | "failure";
 type ResolveProgressWire = {
     "status": "done";
     rows: Array<EntityRow>;
@@ -1408,10 +1278,6 @@ type ResolvedTheme = {
     mode: "light" | "dark";
     tokens: JsonObject;
 };
-type RoleWire = {
-    field: string;
-    value: string;
-};
 type RotateCounts = {
     rotated: number;
     alreadyCurrent: number;
@@ -1451,22 +1317,6 @@ type RowCommitWrite = {
 };
 type RowCompareOp = "==" | "!=" | "<" | "<=" | ">" | ">=";
 type RowDirection = "asc" | "desc";
-type RowEstablish = {
-    "kind": "established";
-    event: string;
-    payload: JsonValue;
-    viewer?: ViewerRequirement;
-    bindRowFrom?: BindRowFrom;
-    /**
-     * Dispatched before the replay path rather than inline with the step.
-     */
-    beforeReplay: boolean;
-} | {
-    "kind": "unreachable";
-    trait: string;
-    entity: string;
-    atState: string;
-};
 type RowIdPage = {
     ids: Array<string>;
     total: number;
@@ -1547,10 +1397,6 @@ type RowSetRef = {
     total: number;
     query: RowQuery;
 };
-type RowShapeField = {
-    name: string;
-    wholeRow: boolean;
-};
 type RowTotalMode = "exact" | "none";
 type RowValueKind = "string" | "number" | "boolean" | "date" | "null";
 type RowWriteBatch = {
@@ -1614,14 +1460,14 @@ type SeedWire = {
     trait: string;
     event: string;
 };
-type ServerEffectCode = "not-found" | "no-row-key" | "duplicate-id" | "denied";
-type ServerEffectKind = "set" | "persist" | "call-service" | "http" | "fetch" | "fetch-stream" | "ref" | "deref" | "swap" | "atomic" | "emit" | "substrate";
+type ServerEffectCode = "not-found" | "no-row-key" | "duplicate-id" | "denied" | "derived-failed";
+type ServerEffectKind = "set" | "persist" | "call-service" | "fetch" | "fetch-stream" | "emit" | "substrate";
 type ServerEffectResult$1 = {
     effect: ServerEffectKind;
     action?: string;
     entityType?: string;
     /**
-     * The namespaced operator (`memory/store`) — only on `ServerEffectKind::Substrate`.
+     * The namespaced operator (`llm/generate`) — only on `ServerEffectKind::Substrate`.
      */
     name?: NamespacedEffectName;
     data?: EntityRow | ServerBatchSummary | EventPayloadValue;
@@ -1637,7 +1483,7 @@ type ServerEffectResult$1 = {
      */
     code?: ServerEffectCode;
     /**
-     * What an `http` effect reached, `"<METHOD> <origin><path>"`; only on `ServerEffectKind::Http`.
+     * The event an `emit` effect targets; only on `ServerEffectKind::Emit`.
      */
     target?: string;
     /**
@@ -1652,12 +1498,19 @@ type ServerProgressWire = {
     "status": "await";
     flight: number;
     requests: Array<PendingRequestWire>;
+} | {
+    "status": "queued";
+    ticket: number;
 };
 type Settled<T, E> = {
     "ok": T;
 } | {
     "error": E;
 };
+type SlotFault = {
+    code: TransitionRejectionCode;
+    error: string;
+};
 type SnapshotWire = {
     states: JsonObject;
     ambiguousTraits: Array<AmbiguousTrait>;
@@ -1670,66 +1523,54 @@ type StatefulLegWire = {
     leg: EventRequest;
     awaiting: Array<AwaitingTrait>;
 };
-type StepWire = {
+type StdioKind = "in" | "out" | "err";
+type StepEmit = {
+    event: string;
+    payload: EventPayload | null;
+};
+type StepGuard = {
+    arm: number;
+    guard: JsonValue;
+    passed: boolean;
+    error?: string;
+};
+type StepOutcome = {
     trait: string;
-    linkedEntity?: string;
-    /**
-     * The instance the step fires on: the seed row id of the linked entity, or the verifier's fixed id.
-     */
-    instanceId: string;
-    /**
-     * The id of the row to seed before the step; absent when the step's own create makes that row.
-     */
-    seedRowId?: string;
-    /**
-     * The role a role-only persist policy needs the viewer to carry for this step.
-     */
-    role?: RoleWire;
-    from: string;
+    executed: boolean;
+    previousState: string;
+    newState: string;
+    emits: Array<StepEmit>;
+    firedArm: number | null;
+    guards: Array<StepGuard>;
+    effects: Array<PlayedEffect>;
+    failure: string | null;
+    orbital: string;
     event: string;
-    to: string;
-    toStates: Array<string>;
-    variant: Variant;
-    payload: JsonValue;
-    guarded: boolean;
-    arm?: number;
-    solved: boolean;
-    reply?: ReplyRoute;
-    /**
-     * The events (with payloads) that place a fresh machine in `from`; absent when `from` is unreachable.
-     * Each is a repositioning step: it moves the machine, it is not under test.
-     */
-    preamble?: Array<PreambleEvent>;
-    payloadCase: PayloadCase;
-    guardCase?: GuardCase;
-    /**
-     * The payload can steer the arm's guard; absent on an unguarded step.
-     */
-    guardSteerable?: boolean;
-    /**
-     * On a `guard-fail` step: the targets of the sibling arms that may fire in its place.
-     */
-    guardSiblingTargets: Array<string>;
-    /**
-     * Why the planned payload does not exercise this arm; the step is then unsolved.
-     */
-    armConflict?: ArmConflict;
-    /**
-     * What must be dispatched first for a guard reading `@entity` fields this trait does not set.
-     */
-    precondition?: Precondition;
-    /**
-     * States beyond `toStates` the machine may settle in, because an effect-emitted event advances it on its own.
-     */
-    acceptStates: Array<string>;
-    /**
-     * Firing the event can change the route, so the trait may unmount.
-     */
-    navigates: boolean;
-    /**
-     * `trait:from+event->to` plus `[payloadCase]` (`[guardCase]` without one); the boot INIT carries no suffix.
-     */
-    coverageKey: string;
+    ensures: Array<PlayedEnsures>;
+};
+type StepRefusal = {
+    success: false;
+    error: string;
+    trait: string | null;
+    outcomes: Array<StepOutcome>;
+};
+type StepReport = {
+    success: true;
+    steps: Array<StepResult>;
+    dispatchModes: {
+        [key in string]: DispatchMode;
+    };
+};
+type StepResult = {
+    outcomes: Array<StepOutcome>;
+    states: {
+        [key in string]: string;
+    };
+    entities: {
+        [key in string]: JsonValue;
+    };
+    entityAfter: EventPayload | null;
+    pendingAsks: Array<PendingAsk>;
 };
 type StoreListing = {
     enabled: boolean;
@@ -1738,12 +1579,37 @@ type StoreListing = {
 type StoredName = {
     service: string;
     name: string;
+    last4?: string;
 };
-type StreamFramingWire = "sse" | "jsonLines";
 type SubstrateFailureWire = {
     message: string;
     errors: Array<JsonValue>;
 };
+type SurfaceEmit = {
+    event: string;
+    eventId?: string;
+};
+type SurfaceListen = {
+    event: string;
+    source?: SurfaceListenSource;
+};
+type SurfaceListenSource = {
+    orbital: string;
+    trait: string;
+};
+type SurfaceTick = {
+    name: string;
+    whileVisible: boolean;
+    runsInBackground: boolean;
+};
+type SurfaceTransition = {
+    from: string;
+    to: string;
+    event: string;
+    guard?: JsonValue;
+    awaitRender?: JsonValue;
+};
+type SysKind = "cpu" | "memory" | "disk" | "network" | "power-state" | "identity" | "self-signal";
 type TabAction = "click" | "focus" | "type";
 type TabApply = {
     elementId: string;
@@ -1835,32 +1701,12 @@ type TabStyle = {
     property: string;
     value: string;
 };
-type TickStep = {
-    trait: string;
-    from: string;
-    /**
-     * The tick's name, fired as the step's event.
-     */
-    event: string;
-    waitMs: number;
-    /**
-     * A tick's effects may move the trait anywhere in its declared topology: any declared state is a landing.
-     */
-    acceptStates: Array<string>;
-    coverageKey: string;
-};
 type TraceEffectsWire = {
     effects: Array<EffectTraceWire>;
     emitted: Array<EmittedEffectWire>;
     writes: Array<EntityWriteWire>;
     entity: JsonValue;
 };
-type TraitConfigVariants = {
-    trait: string;
-    baseline: JsonObject;
-    variants: Array<ConfigVariant>;
-    noDeclaredValues: Array<string>;
-};
 type TraitFrom = {
     trait: string;
     from: string;
@@ -1881,45 +1727,27 @@ type TraitSnapshot = {
     state: string;
     entity: JsonValue;
 };
-type TransientFinding = {
-    "kind": "no-entering-persist";
-    event: string;
-} | {
-    "kind": "no-denying-viewer";
-    entity: string;
-    operation: string;
-};
-type TransientOutcome = {
-    "outcome": "not-transient";
-} | {
-    "outcome": "probe";
-    step: TransientProbe;
-} | {
-    "outcome": "finding";
-    finding: TransientFinding;
-};
-type TransientProbe = {
-    trait: string;
-    from: string;
-    event: string;
-    to: string;
-    payload: JsonValue;
-    acceptStates: Array<string>;
-    role: RoleWire;
-    /**
-     * The nominal failure arm the cascade is expected to prove.
-     */
-    verifiesPortalFor: TransientQuery;
-    instanceId: string;
-    seedRowId?: string;
-    preamble?: Array<PreambleEvent>;
-    coverageKey: string;
-};
-type TransientQuery = {
-    trait: string;
-    from: string;
-    event: string;
-    to: string;
+type TraitSurface = {
+    name: string;
+    orbital: string;
+    orbitalId?: string;
+    traitId?: string;
+    entity?: string;
+    shared: boolean;
+    browser: boolean;
+    frameKey: string;
+    ticks: Array<SurfaceTick>;
+    states: Array<string>;
+    initial?: string;
+    events: Array<string>;
+    emits: Array<SurfaceEmit>;
+    listens: Array<SurfaceListen>;
+    transitions: Array<SurfaceTransition>;
+    /**
+     * The trait paints a `guest-view` (G-CROSS-400): a host hands it every event raised in its scope, and the kernel
+     * routes one a painted guest control carries or ignores it.
+     */
+    paintsGuestViews: boolean;
 };
 type TransitionHop = {
     trait: string;
@@ -1948,67 +1776,59 @@ type TransitionRejection = {
     event?: string;
     statesDeclaringEvent?: Array<string>;
     transition?: string;
-    guard?: unknown;
+    guard?: JsonValue;
     /**
      * `effect-failed`: the failure's message.
      */
     error?: string;
+    /**
+     * `repaint-failed`: the slot whose repaint failed.
+     */
+    slot?: string;
 };
-type TransitionRejectionCode = "no-matching-transition" | "guard-rejected" | "no-dispatchable-traits" | "not-an-external-input" | "inbound-only-event" | "effect-failed";
-type UnprovenReason = "setter-value-unresolved" | "setter-not-on-replay-path" | "multiple-preconditions-unplanned" | "unreachable";
-type Variant = "auto-init" | "success";
-type VerdictReason = {
-    "kind": "reached";
-} | {
-    "kind": "held-under-guard";
-} | {
-    "kind": "not-driven";
-} | {
-    "kind": "preamble-missed";
-    actual: string;
-} | {
-    "kind": "arm-unsolved";
-} | {
-    "kind": "guard-rejected";
-} | {
-    "kind": "guard-accepted";
-} | {
-    "kind": "guard-unsteerable";
-} | {
-    "kind": "payload-validator-not-run";
-} | {
-    "kind": "arm-not-fired";
-    fired: number | null;
-} | {
-    "kind": "wrong-state";
-    actual: string;
-} | {
-    "kind": "effect-failed";
-} | {
-    "kind": "mutation-landed";
-} | {
-    "kind": "mutation-refused";
-    outcome: string;
-    error: string | null;
-} | {
-    "kind": "success-not-emitted";
-    expected: string;
-    emitted: Array<string>;
-} | {
-    "kind": "row-delta-mismatch";
-    expected: number;
-    actual: number | null;
-} | {
-    "kind": "precondition-unproven";
-    reason: UnprovenReason;
-} | {
-    "kind": "produced-by-effect";
-    failed: string;
+type TransitionRejectionCode = "no-matching-transition" | "guard-rejected" | "no-dispatchable-traits" | "not-an-external-input" | "inbound-only-event" | "effect-failed" | "locale-not-declared" | "client-circuit-state-refused" | "repaint-failed";
+type ValidationJsonError = {
+    code: string;
+    path: string;
+    message: string;
+    suggestion?: string;
+    fixGuidance?: string;
+    expectedShape?: string;
+    validValues?: Array<string>;
+    line?: number;
+    column?: number;
+    endLine?: number;
+    endColumn?: number;
+    approximate: boolean;
+    needsInstall?: boolean;
+    entity?: string;
+    field?: string;
+};
+type ValidationJsonOutput = {
+    success: boolean;
+    valid: boolean;
+    errors?: Array<ValidationJsonError>;
+    warnings?: Array<ValidationJsonWarning>;
+    stats?: ValidationStats;
+};
+type ValidationJsonWarning = {
+    code: string;
+    path: string;
+    message: string;
+    suggestion?: string;
+    line?: number;
+    column?: number;
+    endLine?: number;
+    endColumn?: number;
+    approximate: boolean;
+    entity?: string;
+    field?: string;
 };
-type VerdictWire = {
-    status: FrameStatus;
-    gap?: GapReason;
-    reason: VerdictReason;
+type ValidationStats = {
+    orbitals: number;
+    entities: number;
+    traits: number;
+    pages: number;
 };
 type Viewer = {
     /**
@@ -2027,10 +1847,6 @@ type Viewer = {
     permissions?: Array<string>;
     claims: Array<Claim>;
 };
-type ViewerRequirement = {
-    role?: RoleWire;
-    owner?: OwnerRequirement;
-};
 type WriteCapabilities = {
     guards: GuardCapabilities;
     conditional: boolean;
@@ -2044,110 +1860,99 @@ type WriteCapabilities = {
      */
     commitRows?: boolean;
 };
-/** The check of a kernel response at the host boundary: every field of `EventResponse` and of the wire types nested in it. */
+/** The check of a kernel `AppliedWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isAppliedWire(value: JsonValue): value is JsonValue & AppliedWire;
+/** The `AppliedWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeAppliedWire(value: JsonValue): AppliedWire;
+/** The check of a kernel `DispatchWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isDispatchWire(value: JsonValue): value is JsonValue & DispatchWire;
+/** The `DispatchWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeDispatchWire(value: JsonValue): DispatchWire;
+/** The check of a kernel `Entered` at the host boundary: every field, and every wire type nested in it. */
+declare function isEntered(value: JsonValue): value is JsonValue & Entered;
+/** The `Entered` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeEntered(value: JsonValue): Entered;
+/** The check of a kernel `EventRequest` at the host boundary: every field, and every wire type nested in it. */
+declare function isEventRequest(value: JsonValue): value is JsonValue & EventRequest;
+/** The `EventRequest` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeEventRequest(value: JsonValue): EventRequest;
+/** The check of a kernel `EventResponse` at the host boundary: every field, and every wire type nested in it. */
 declare function isEventResponse(value: JsonValue): value is JsonValue & EventResponse;
-
-/**
- * Authenticated user context — what `@user.x` resolves against.
- *
- * The canonical shape for the `user` binding root, shared by both execution
- * paths: the JS interpreter resolves `@user.id` through
- * `EvaluationContext.user`, and the compiled shell emits `user?.id` against the
- * `UserContext` its `@app/shared` re-exports from here.
- *
- * `id` is the field the behavior library reads for ownership scoping and `role`
- * the field it reads for capability gating. Auth providers that name the subject
- * `uid` must normalize at their boundary — {@link normalizeUserContext} does that.
- *
- * @packageDocumentation
- */
-
-/**
- * What a host's auth provider has resolved the viewer to be — from session
- * resolution only, never from an interactive sign-in action: `pending` until
- * the session is known; `anonymous` / `authenticated` once it is; `failed`
- * when connecting or resolving the session failed; `unavailable` when the host
- * has no sign-in configured. An `access: authenticated` page mounts only on
- * `authenticated`.
- */
-type ViewerAuthority = 'pending' | 'anonymous' | 'authenticated' | 'failed' | 'unavailable';
-/**
- * The `@user` binding: a {@link Viewer} held flat. Its named fields are the viewer's; each claim is a key holding its
- * JSON value, readable as `@user.<claim>`. The Rust twin of the conversion is `orbital_core_base::viewer`
- * (`Viewer::from_user` / `Viewer::to_user`).
- */
-interface UserContext extends Omit<Viewer, 'claims'> {
-    [key: string]: FieldValue | undefined;
-}
-/** Zod twin of the generated {@link Viewer}: the record a `.lolo` program names as `Viewer`. */
-declare const ViewerSchema: z.ZodType<Viewer>;
-/**
- * The identity of an unauthenticated viewer. A resolvable object rather than
- * `undefined` so a role predicate evaluates to a definite `false` instead of
- * comparing against nothing.
- */
-declare const ANONYMOUS_USER: UserContext;
-/** Provider-shaped identity claims, before normalization. */
-interface RawUserClaims {
-    id?: string;
-    uid?: string;
-    email?: string | null;
-    name?: string | null;
-    displayName?: string | null;
-    /** Absent or `null` when the token carries none, as the kernel's `Viewer.role` (`Option`). */
-    role?: string | null;
-    permissions?: string[] | null;
-    [key: string]: FieldValue | undefined;
-}
-/** Zod twin of `RawUserClaims` — the wire shape of `OrbitalEventRequest.user`. */
-declare const RawUserClaimsSchema: z.ZodType<RawUserClaims>;
-/**
- * Normalize provider claims into a {@link UserContext}.
- *
- * Firebase (and most OIDC providers) name the subject `uid` and the display name
- * `displayName`, while every `.lolo` behavior reads `@user.id` / `@user.name`.
- * Without this normalization `@user.id` is `undefined` against a fully
- * authenticated request and every ownership filter silently matches no rows.
- * `uid` is preserved so `@user.uid` keeps working.
- *
- * Returns `undefined` for absent or subject-less claims so callers can
- * distinguish "no auth ran" from "anonymous"; use {@link ANONYMOUS_USER} where a
- * definite identity is required.
- */
-declare function normalizeUserContext(claims: RawUserClaims | null | undefined): UserContext | undefined;
-/**
- * Turn a row of an app's `[identity]` entity into a viewer.
- *
- * There is no separate persona shape: an identity row IS the persona
- * (`Almadar_LOLO_Identity.md` §4.3), so this only guards the one field the
- * behavior library requires — a non-empty string `id` — and passes every other
- * declared field through as a `@user.<field>` claim. Rows without a usable id
- * yield `undefined` rather than a persona nobody can own rows as.
- */
-declare function personaFromIdentityRow(row: Record<string, FieldValue | undefined>): UserContext | undefined;
-/** Look a persona up in a roster by id, or by role when no id matches. */
-declare function findPersonaInRoster(roster: readonly UserContext[], idOrRole: string): UserContext | undefined;
-/**
- * Resolve a persona spec — a bare id/role (`Person Id 3`, `moderator`) or a full
- * JSON `UserContext` — into a viewer. This is the `ALMADAR_PERSONA` contract,
- * shared by every host that presents an app as somebody.
- *
- * The roster is the app's OWN declared personas — the seeded rows of its
- * `[identity]` entity (`Almadar_LOLO_Identity.md` §4.3) — supplied by the host
- * that has them in hand (the runtime's live store on the interpreter path, the
- * schema-derived seed rows on the compiled path). There is no global roster:
- * an app without an `[identity]` entity resolves only JSON-form specs.
- *
- * Throws on anything unresolvable rather than returning `undefined`: "no persona"
- * and "persona silently ignored" look identical on screen, so a bad spec must
- * fail at boot instead of rendering as nobody.
- */
-declare function resolvePersonaSpec(spec: string, roster: readonly UserContext[]): UserContext;
+/** The `EventResponse` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeEventResponse(value: JsonValue): EventResponse;
+/** The check of a kernel `FiredTick` at the host boundary: every field, and every wire type nested in it. */
+declare function isFiredTick(value: JsonValue): value is JsonValue & FiredTick;
+/** The `FiredTick` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeFiredTick(value: JsonValue): FiredTick;
+/** The check of a kernel `FoldProgressWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isFoldProgressWire(value: JsonValue): value is JsonValue & FoldProgressWire;
+/** The `FoldProgressWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeFoldProgressWire(value: JsonValue): FoldProgressWire;
+/** The check of a kernel `FoldedNextWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isFoldedNextWire(value: JsonValue): value is JsonValue & FoldedNextWire;
+/** The `FoldedNextWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeFoldedNextWire(value: JsonValue): FoldedNextWire;
+/** The check of a kernel `FrameWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isFrameWire(value: JsonValue): value is JsonValue & FrameWire;
+/** The `FrameWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeFrameWire(value: JsonValue): FrameWire;
+/** The check of a kernel `IoReplyWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isIoReplyWire(value: JsonValue): value is JsonValue & IoReplyWire;
+/** The `IoReplyWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeIoReplyWire(value: JsonValue): IoReplyWire;
+/** The check of a kernel `IoRequestWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isIoRequestWire(value: JsonValue): value is JsonValue & IoRequestWire;
+/** The `IoRequestWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeIoRequestWire(value: JsonValue): IoRequestWire;
+/** The check of a kernel `MountWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isMountWire(value: JsonValue): value is JsonValue & MountWire;
+/** The `MountWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeMountWire(value: JsonValue): MountWire;
+/** The check of a kernel `NextWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isNextWire(value: JsonValue): value is JsonValue & NextWire;
+/** The `NextWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeNextWire(value: JsonValue): NextWire;
+/** The check of a kernel `OsGrantsReport` at the host boundary: every field, and every wire type nested in it. */
+declare function isOsGrantsReport(value: JsonValue): value is JsonValue & OsGrantsReport;
+/** The `OsGrantsReport` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeOsGrantsReport(value: JsonValue): OsGrantsReport;
+/** The check of a kernel `PlayedStep` at the host boundary: every field, and every wire type nested in it. */
+declare function isPlayedStep(value: JsonValue): value is JsonValue & PlayedStep;
+/** The `PlayedStep` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodePlayedStep(value: JsonValue): PlayedStep;
+/** The check of a kernel `ProveReport` at the host boundary: every field, and every wire type nested in it. */
+declare function isProveReport(value: JsonValue): value is JsonValue & ProveReport;
+/** The `ProveReport` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeProveReport(value: JsonValue): ProveReport;
+/** The check of a kernel `ResolveProgressWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isResolveProgressWire(value: JsonValue): value is JsonValue & ResolveProgressWire;
+/** The `ResolveProgressWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeResolveProgressWire(value: JsonValue): ResolveProgressWire;
+/** The check of a kernel `ServerProgressWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isServerProgressWire(value: JsonValue): value is JsonValue & ServerProgressWire;
+/** The `ServerProgressWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeServerProgressWire(value: JsonValue): ServerProgressWire;
+/** The check of a kernel `SnapshotWire` at the host boundary: every field, and every wire type nested in it. */
+declare function isSnapshotWire(value: JsonValue): value is JsonValue & SnapshotWire;
+/** The `SnapshotWire` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeSnapshotWire(value: JsonValue): SnapshotWire;
+/** The check of a kernel `StepRefusal` at the host boundary: every field, and every wire type nested in it. */
+declare function isStepRefusal(value: JsonValue): value is JsonValue & StepRefusal;
+/** The `StepRefusal` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeStepRefusal(value: JsonValue): StepRefusal;
+/** The check of a kernel `StepReport` at the host boundary: every field, and every wire type nested in it. */
+declare function isStepReport(value: JsonValue): value is JsonValue & StepReport;
+/** The `StepReport` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeStepReport(value: JsonValue): StepReport;
+/** The check of a kernel `ValidationJsonOutput` at the host boundary: every field, and every wire type nested in it. */
+declare function isValidationJsonOutput(value: JsonValue): value is JsonValue & ValidationJsonOutput;
+/** The `ValidationJsonOutput` the host received, as serde reads it: integers in range, defaults filled in, unknown fields dropped (or refused where the type denies them); a throw names the first path that is not one. */
+declare function decodeValidationJsonOutput(value: JsonValue): ValidationJsonOutput;
 
 /**
  * Server-side effect result — the wire shape a server-executed effect
  * (`SERVER_REPORTED_EFFECTS` in `effect.ts`) reports back to the client,
- * closing the circuit on `OrbitalEventResponse.effectResults`.
+ * closing the circuit on `EventResponse.effectResults`.
  *
  * Promoted from `@almadar/runtime`'s `ServerEffectHandlers.ts` (the JS
  * interpreter's own definition, canonical per `CLAUDE.md`'s "converge on
@@ -2162,14 +1967,14 @@ declare function resolvePersonaSpec(spec: string, roster: readonly UserContext[]
  * runtime's `EffectResult`. Callers who want telemetry pass an array that
  * the factory appends to; otherwise it's unused.
  */
-interface ServerBatchSummary {
-    operations: EntityRow[];
+type ServerBatchSummary = {
+    operations: EntityRow$1[];
     completedCount: number;
     totalCount: number;
-}
+};
 /** Zod twin of `ServerBatchSummary`. */
 declare const ServerBatchSummarySchema: z.ZodType<ServerBatchSummary>;
-interface ServerEffectResult {
+type ServerEffectResult = {
     /**
      * The reported effect's head (`SERVER_REPORTED_EFFECTS`, derived from the
      * effect union in `effect.ts`), or `"substrate"` — the one wire grouping
@@ -2179,10 +1984,10 @@ interface ServerEffectResult {
     effect: ServerReportedEffect | "substrate";
     action?: string;
     entityType?: string;
-    /** The invoked namespaced operator (e.g. `"memory/store"`), set only on `effect: "substrate"`. */
+    /** The invoked namespaced operator (e.g. `"llm/generate"`), set only on `effect: "substrate"`. */
     name?: NamespacedEffectName;
     /** Entity row for CRUD/set/swap, the batch summary for `persist batch`, the raw service/substrate result. */
-    data?: EntityRow | ServerBatchSummary | EventPayloadValue;
+    data?: EntityRow$1 | ServerBatchSummary | EventPayloadValue$1;
     success: boolean;
     /**
      * Set when a persist failed because an access policy rejected it or the
@@ -2192,15 +1997,15 @@ interface ServerEffectResult {
      */
     denied?: true;
     error?: string;
-    /** Coded failure reason for a persist that resolved no target row (`not-found`, `no-row-key`), created on a taken id (`duplicate-id`), or was refused by a declared policy (`denied`, EXEC-STEP-8). */
-    code?: "not-found" | "no-row-key" | "duplicate-id" | "denied";
+    /** Coded failure reason for a persist that resolved no target row (`not-found`, `no-row-key`), created on a taken id (`duplicate-id`), or was refused by a declared policy (`denied`), or a `@derived` field could not be computed (`derived-failed`, EXEC-STEP-8). */
+    code?: "not-found" | "no-row-key" | "duplicate-id" | "denied" | "derived-failed";
     /** What the effect addressed: an `http` effect's `<METHOD> <origin><path>`, an `emit` entry's event name. */
     target?: string;
     /** The declared `emit.failure` event the program routed this effect's failure to; absent when it declares none. */
     routed?: string;
-}
+};
 /** Zod twin of `ServerEffectResult`. */
 declare const ServerEffectResultSchema: z.ZodType<ServerEffectResult>;
 
-export { ANONYMOUS_USER as A, isEventResponse as cD, RawUserClaimsSchema as o, ServerBatchSummarySchema as q, ServerEffectResultSchema as r, ViewerSchema as t, findPersonaInRoster as u, normalizeUserContext as v, personaFromIdentityRow as w, resolvePersonaSpec as x };
-export type { ClientEffectByTrait as $, Accepted as B, Claim as C, AffordanceQuery as D, EvalContextWire as E, AffordanceStep as F, GuardOutcomeWire as G, HopObservation as H, AmbiguousTrait as I, AppliedWire as J, ArmConflict as K, AwaitingTrait as L, MutationOpWire as M, BeaconOutcomeWire as N, BindRowFrom as O, PayloadSlot as P, BusEventSource as Q, RepaintReason as R, ServerEffectResult as S, TraceEffectsWire as T, UserContext as U, Viewer as V, CallRoutesWire as W, CallSiteWire as X, CallerWire as Y, CanvasTheme as Z, ClientEffect as _, RawUserClaims as a, OAuthConnectionRow as a$, ConfigVariant as a0, ContractEvents as a1, ContractStep as a2, CredentialStanding as a3, Credit as a4, CreditStep as a5, CrudChain as a6, CrudKind as a7, DataMutation as a8, DeliverRefusal as a9, FrameWire as aA, GapReason as aB, GuardCapabilities as aC, GuardCase as aD, HopEffect as aE, HopEffectStatus as aF, HttpBody as aG, HttpFailureWire as aH, HttpRequestWire as aI, HttpResponseWire as aJ, InboundRelation as aK, InitCredit as aL, InstanceRef as aM, IoAnswerWire as aN, IoReplyWire as aO, IoRequestWire as aP, LegResidence as aQ, LifecycleEvent as aR, ModelFailureKindWire as aS, ModelFailureWire as aT, MountFailure as aU, MountLegWire as aV, MountSeed as aW, MountWire as aX, MutationKind as aY, NavigateOptions as aZ, OAuthAsk as a_, DeliverRefusalKind as aa, DeliveryRecord as ab, DispatchLog as ac, DispatchMode as ad, DispatchWire as ae, EffectStatusWire as af, EffectTraceWire as ag, EmitRowBinding as ah, EmitStep as ai, EmittedEffectWire as aj, EmittedEvent as ak, EnsuresVerdict as al, EntityBinding as am, EntityBindingKind as an, EntityWriteWire as ao, Envelope as ap, EstablishFallback as aq, EvalStepKind as ar, EvalStepWire as as, EventRequest as at, EventResponse as au, Expectation as av, FiredHop as aw, FiredTick as ax, FrameDispatch as ay, FrameStatus as az, EvalOutcomeWire as b, RunTick as b$, OAuthPendingGrant as b0, OAuthPendingTake as b1, OAuthProvider as b2, OAuthReply as b3, OAuthTokenGrant as b4, Observation as b5, ObservedEffect as b6, ObservedOutcome as b7, OperatorValueKinds as b8, OsError as b9, RoleWire as bA, RotateCounts as bB, RoutedLeg as bC, RowCombinator as bD, RowCommit as bE, RowCommitWrite as bF, RowCompareOp as bG, RowDirection as bH, RowEstablish as bI, RowIdPage as bJ, RowLeafKind as bK, RowNearest as bL, RowOperator as bM, RowOrder as bN, RowOrderableFields as bO, RowPage as bP, RowPredicate as bQ, RowProjection as bR, RowQuery as bS, RowSetRef as bT, RowShapeField as bU, RowTotalMode as bV, RowValueKind as bW, RowWriteBatch as bX, RowWriteFailureMode as bY, RowWriteOp as bZ, RowWriteOutcome as b_, OsErrorKind as ba, OsOp as bb, OwnerRequirement as bc, PageFactFieldWire as bd, PageFactsWire as be, PayloadCase as bf, PendingRequestWire as bg, PersistBinding as bh, PlanFailure as bi, PlanOptions as bj, PlanOutcome as bk, PlayedEnsures as bl, PreambleEvent as bm, Precondition as bn, Proof as bo, PropositionBindings as bp, PropositionObservation as bq, PropositionVerdict as br, QueryCapabilities as bs, RenderedNode as bt, RenderedSlot as bu, ReplayQuery as bv, ReplyRoute as bw, ResolveProgressWire as bx, ResolvedMotion as by, ResolvedTheme as bz, EvalTracedWire as c, SeedWire as c0, ServerEffectCode as c1, ServerEffectKind as c2, ServerEffectResult$1 as c3, ServerProgressWire as c4, Settled as c5, SnapshotWire as c6, StatefulLegWire as c7, StepWire as c8, StoreListing as c9, VerdictWire as cA, ViewerRequirement as cB, WriteCapabilities as cC, StoredName as ca, StreamFramingWire as cb, SubstrateFailureWire as cc, TabAction as cd, TabApply as ce, TabCommand as cf, TabDelivery as cg, TabFailure as ch, TabField as ci, TabImageFormat as cj, TabStyle as ck, TickStep as cl, TraitConfigVariants as cm, TraitFrom as cn, TraitRef as co, TraitSnapshot as cp, TransientFinding as cq, TransientOutcome as cr, TransientProbe as cs, TransientQuery as ct, TransitionHop as cu, TransitionRejection as cv, TransitionRejectionCode as cw, UnprovenReason as cx, Variant as cy, VerdictReason as cz, MutationVerdictWire as d, RowBindingWire as e, GuardVerdict as f, MachineRow as g, PlayedEffect as h, PlayedEffectStatus as i, PlayedEmit as j, PlayedGuard as k, PlayedResult as l, PlayedState as m, PlayedStep as n, ServerBatchSummary as p, ViewerAuthority as s, TabAsk as y, TabFailureKind as z };
+export { ServerEffectResultSchema as B, isDispatchWire as c$, decodeAppliedWire as cE, decodeDispatchWire as cF, decodeEntered as cG, decodeEventRequest as cH, decodeEventResponse as cI, decodeFiredTick as cJ, decodeFoldProgressWire as cK, decodeFoldedNextWire as cL, decodeFrameWire as cM, decodeIoReplyWire as cN, decodeIoRequestWire as cO, decodeMountWire as cP, decodeNextWire as cQ, decodeOsGrantsReport as cR, decodePlayedStep as cS, decodeProveReport as cT, decodeResolveProgressWire as cU, decodeServerProgressWire as cV, decodeSnapshotWire as cW, decodeStepRefusal as cX, decodeStepReport as cY, decodeValidationJsonOutput as cZ, isAppliedWire as c_, isEntered as d0, isEventRequest as d1, isEventResponse as d2, isFiredTick as d3, isFoldProgressWire as d4, isFoldedNextWire as d5, isFrameWire as d6, isIoReplyWire as d7, isIoRequestWire as d8, isMountWire as d9, isNextWire as da, isOsGrantsReport as db, isPlayedStep as dc, isProveReport as dd, isResolveProgressWire as de, isServerProgressWire as df, isSnapshotWire as dg, isStepRefusal as dh, isStepReport as di, isValidationJsonOutput as dj, ServerBatchSummarySchema as y };
+export type { AnchoredExec as $, AnchoredGrants as A, Claim as C, DesktopKind as D, EventRequest as E, FsGrant as F, GuardOutcomeWire as G, HostAskCompletion as H, StdioKind as I, SysKind as J, KvMode as K, TransitionHop as L, MutationOpWire as M, NetGrant as N, OsGrants as O, PayloadSlot as P, TransitionRejection as Q, RowBindingWire as R, ServerBatchSummary as S, TraceEffectsWire as T, TransitionRejectionCode as U, Viewer as V, HopObservation as W, TabAsk as X, TabFailureKind as Y, Accepted as Z, AmbiguousTrait as _, EventResponse as a, MemGrant as a$, AnchoredFsGrant as a0, AnchoredNetGrant as a1, AppliedWire as a2, AssertionSpec as a3, BusEventSource as a4, CallRoutesWire as a5, CallSiteWire as a6, CallerWire as a7, CanvasTheme as a8, ClientAuth as a9, EvalStepWire as aA, EventPayload as aB, EventPayloadValue as aC, FfiGrant as aD, FieldValue as aE, FiredTick as aF, FoldProgressWire as aG, FoldedNextWire as aH, FrameDelta as aI, FrameDispatch as aJ, FrameIdentity as aK, FrameOp as aL, FrameTheme as aM, FrameWire as aN, FramesResync as aO, GuardCapabilities as aP, IndexRealization as aQ, InstanceRef as aR, IoAnswerWire as aS, IoReplyWire as aT, IoRequestWire as aU, JsonTokenSpec as aV, KernelGrant as aW, KernelKind as aX, Left as aY, LegResidence as aZ, LifecycleEvent as a_, ClientEffect as aa, ConnectFailure as ab, ConnectFailureKind as ac, CredentialGrantWire as ad, CredentialKind as ae, CredentialStanding as af, DeliverRefusal as ag, DeliverRefusalKind as ah, DeliveryRecord as ai, DispatchLog as aj, DispatchMode as ak, DispatchWire as al, EffectStatusWire as am, EffectTraceWire as an, EmittedEffectWire as ao, EmittedEvent as ap, EnsuresVerdict as aq, Entered as ar, EntityBinding as as, EntityBindingKind as at, EntityRow as au, EntityWriteWire as av, EnvTail as aw, EnvTails as ax, Envelope as ay, EvalStepKind as az, EvalContextWire as b, RunTick as b$, MemKind as b0, ModelFailureKindWire as b1, ModelFailureWire as b2, MountFailure as b3, MountLegWire as b4, MountSeed as b5, MountWire as b6, NavigateOptions as b7, NextWire as b8, OperatorValueKinds as b9, ResolveProgressWire as bA, ResolvedMotion as bB, ResolvedTheme as bC, RotateCounts as bD, RoutedLeg as bE, RowCombinator as bF, RowCommit as bG, RowCommitWrite as bH, RowCompareOp as bI, RowDirection as bJ, RowIdPage as bK, RowLeafKind as bL, RowNearest as bM, RowOperator as bN, RowOrder as bO, RowOrderableFields as bP, RowPage as bQ, RowPredicate as bR, RowProjection as bS, RowQuery as bT, RowSetRef as bU, RowTotalMode as bV, RowValueKind as bW, RowWriteBatch as bX, RowWriteFailureMode as bY, RowWriteOp as bZ, RowWriteOutcome as b_, OsError as ba, OsErrorKind as bb, OsGrantFinding as bc, OsGrantFindingCode as bd, OsGrantVia as be, OsGrantsReport as bf, OsOp as bg, PageCircuit as bh, PageFactFieldWire as bi, PageFactsWire as bj, PendingAsk as bk, PendingRequestWire as bl, PlayedEnsures as bm, PlayedOutcome as bn, ProgramSurface as bo, PropositionBindings as bp, PropositionObservation as bq, PropositionVerdict as br, ProveFinding as bs, ProveReport as bt, ProveVerdict as bu, ProvedProposition as bv, QueryCapabilities as bw, RenderedNode as bx, RenderedSlot as by, RepaintReason as bz, EvalOutcomeWire as c, SeedWire as c0, ServerEffectCode as c1, ServerEffectKind as c2, ServerEffectResult$1 as c3, ServerProgressWire as c4, Settled as c5, SlotFault as c6, SnapshotWire as c7, StatefulLegWire as c8, StepEmit as c9, ValidationJsonOutput as cA, ValidationJsonWarning as cB, ValidationStats as cC, WriteCapabilities as cD, StepGuard as ca, StepOutcome as cb, StepRefusal as cc, StepReport as cd, StepResult as ce, StoreListing as cf, StoredName as cg, SubstrateFailureWire as ch, SurfaceEmit as ci, SurfaceListen as cj, SurfaceListenSource as ck, SurfaceTick as cl, SurfaceTransition as cm, TabAction as cn, TabApply as co, TabCommand as cp, TabDelivery as cq, TabFailure as cr, TabField as cs, TabImageFormat as ct, TabStyle as cu, TraitFrom as cv, TraitRef as cw, TraitSnapshot as cx, TraitSurface as cy, ValidationJsonError as cz, EvalTracedWire as d, MutationVerdictWire as e, AwaitingTrait as f, ClientEffectByTrait as g, DevGrant as h, DevKind as i, FsMode as j, GrantAnchor as k, GuardVerdict as l, HopEffect as m, HopEffectStatus as n, MachineRow as o, NetKind as p, NetPart as q, PlayedEffect as r, PlayedEffectStatus as s, PlayedEmit as t, PlayedGuard as u, PlayedResult as v, PlayedState as w, PlayedStep as x, ServerEffectResult as z };