@almadar/runtime 6.71.0 → 6.73.0

package/dist/{chunk-ZJ62H3ES.js → chunk-ZWAOJT6R.js}

@@ -1,4 +1,4 @@
-import { createMinimalContext, resolveBinding, evaluate } from '@almadar/evaluator';
+import { resolveBinding, evaluate, createMinimalContext } from '@almadar/evaluator';
 export { createMinimalContext } from '@almadar/evaluator';
 import { isKnownStdOperator } from '@almadar/std/registry';
 import { containsEntityBinding, containsPayloadBinding, RENDER_BINDING_MARKER } from '@almadar/core';
@@ -10,33 +10,6 @@ setNamespaceLevel("almadar:runtime:bindings", "WARN");
 var deferLog = createLogger("almadar:runtime:defer");
 var renderLog = createLogger("almadar:runtime:render-ui");
 var CLIENT_ONLY_BINDING_ROOTS = /* @__PURE__ */ new Set(["trait"]);
-var CALLSITE_PAYLOAD_PREFIX = "@callsitePayload.";
-function payloadValueToConfigValue(v) {
-  if (v === null || v === void 0) return null;
-  if (typeof v === "string" || typeof v === "number" || typeof v === "boolean") return v;
-  if (v instanceof Date) return v.toISOString();
-  if (Array.isArray(v)) return v.map(payloadValueToConfigValue);
-  if (typeof v === "object") {
-    const obj = {};
-    for (const [k, val] of Object.entries(v)) obj[k] = payloadValueToConfigValue(val);
-    return obj;
-  }
-  return String(v);
-}
-function resolveCallSitePayloadCaptures(config, payload) {
-  let ctx;
-  const out = {};
-  for (const [key, value] of Object.entries(config)) {
-    if (typeof value === "string" && value.startsWith(CALLSITE_PAYLOAD_PREFIX)) {
-      const field = value.slice(CALLSITE_PAYLOAD_PREFIX.length);
-      if (!ctx) ctx = createMinimalContext({}, payload ?? {}, "idle");
-      out[key] = payloadValueToConfigValue(resolveBinding(`@payload.${field}`, ctx));
-    } else {
-      out[key] = value;
-    }
-  }
-  return out;
-}
 function isClientOnlyBinding(value) {
   if (!value.startsWith("@")) return false;
   const afterAt = value.slice(1);
@@ -330,6 +303,9 @@ function createContextFromBindings(bindings, strictBindings, contextExtensions)
   if (bindings.currentTheme) {
     ctx.currentTheme = bindings.currentTheme;
   }
+  if (bindings.callsitePayload) {
+    ctx.callsitePayload = bindings.callsitePayload;
+  }
   if (bindings.locals) {
     ctx.locals = bindings.locals;
   }
@@ -379,4 +355,4 @@ function checkMutationAccess(row, policy, bindings) {
   }
 }
 
-export { CALLSITE_PAYLOAD_PREFIX, accessDeniedMessage, applyRowAccess, checkMutationAccess, containsBindings, createContextFromBindings, deferEntityBindings, extractBindings, interpolateProps, interpolateValue, resolveCallSitePayloadCaptures };
+export { accessDeniedMessage, applyRowAccess, checkMutationAccess, containsBindings, createContextFromBindings, deferEntityBindings, extractBindings, interpolateProps, interpolateValue };

package/dist/createOsHandlers.d.ts

@@ -1,4 +1,4 @@
-import { E as EffectHandlers } from './types-BaD_ox7e.js';
+import { E as EffectHandlers } from './types-CWaIuEQn.js';
 import { EventPayload } from '@almadar/core';
 
 /**

package/dist/entityAccess.js

@@ -1,2 +1,2 @@
-export { accessDeniedMessage, applyRowAccess, checkMutationAccess } from './chunk-ZJ62H3ES.js';
+export { accessDeniedMessage, applyRowAccess, checkMutationAccess } from './chunk-ZWAOJT6R.js';
 import './chunk-MLKGABMK.js';

package/dist/{external-loader-YUUADLAP.js → external-loader-CISUEINQ.js}

@@ -155,6 +155,7 @@ var ExternalOrbitalLoader = class {
       data: {
         orbital,
         orbitals: schema.orbitals,
+        ...schema.config ? { schemaConfig: schema.config } : {},
         sourcePath: schemaResult.data.sourcePath,
         importPath
       }

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { g as RuntimePatternValue, B as BindingContext, f as EvaluationContextExtensions, P as PatternProps, E as EffectHandlers, h as EffectContext, i as ExecutionEnvironment, j as EffectResult, S as ServiceCallContext, T as TraitDefinition } from './types-BaD_ox7e.js';
-export { k as BrowserFileMeta, l as BrowserFilePickerOptions, m as BrowserGeolocationOptions, n as BrowserGeolocationPosition, C as ConfigContext, o as Effect, a as EventListener, H as HANDLER_MANIFEST, I as IEventBus, b as RuntimeConfig, R as RuntimeEvent, d as TraitState, c as TransitionObserver, e as TransitionResult, U as Unsubscribe } from './types-BaD_ox7e.js';
-import { U as UnifiedLoaderOptions, S as SchemaLoader, I as ImportChainLike, L as LoadResult, a as LoadedSchema, b as LoadedOrbital, P as PersistenceAdapter } from './OrbitalServerRuntime-DnDJhpLS.js';
-export { E as EntitySharingMap, c as EventBus, d as EventNamespaceMap, e as InMemoryPersistence, O as OrbitalEventRequest, f as OrbitalEventResponse, g as OrbitalServerRuntimeConfig, h as PreprocessOptions, i as PreprocessResult, j as PreprocessedSchema, k as ProcessEventOptions, R as RegisteredOrbital, l as RuntimeOrbital, m as RuntimeOrbitalSchema, n as RuntimeTrait, o as StateMachineManager, p as collectDeclaredConfigDefaults, q as collectDeclaredEntityDefaults, r as createInitialTraitState, s as findInitialState, t as findTransition, u as getIsolatedCollectionName, v as getNamespacedEvent, w as isBrowser, x as isElectron, y as isNamespacedEvent, z as isNode, A as normalizeEventKey, B as parseNamespacedEvent, C as preprocessSchema, D as processEvent } from './OrbitalServerRuntime-DnDJhpLS.js';
+import { h as RuntimePatternValue, B as BindingContext, f as EvaluationContextExtensions, P as PatternProps, E as EffectHandlers, g as EffectContext, i as ExecutionEnvironment, j as EffectResult, T as TraitDefinition } from './types-CWaIuEQn.js';
+export { k as BrowserFileMeta, l as BrowserFilePickerOptions, m as BrowserGeolocationOptions, n as BrowserGeolocationPosition, C as ConfigContext, o as Effect, a as EventListener, H as HANDLER_MANIFEST, I as IEventBus, b as RuntimeConfig, R as RuntimeEvent, d as TraitState, c as TransitionObserver, e as TransitionResult, U as Unsubscribe } from './types-CWaIuEQn.js';
+import { U as UnifiedLoaderOptions, S as SchemaLoader, I as ImportChainLike, L as LoadResult, a as LoadedSchema, b as LoadedOrbital, P as PersistenceAdapter } from './OrbitalServerRuntime-BiEntWd-.js';
+export { C as CreateServerEffectHandlersOptions, E as EntitySharingMap, c as EventBus, d as EventNamespaceMap, e as InMemoryPersistence, f as LIFECYCLE_EVENTS, O as OrbitalEventRequest, g as OrbitalEventResponse, h as OrbitalServerRuntimeConfig, i as PreprocessOptions, j as PreprocessResult, k as PreprocessedSchema, l as ProcessEventOptions, R as RegisteredOrbital, m as RuntimeOrbital, n as RuntimeOrbitalSchema, o as RuntimeTrait, p as ServerEffectResult, q as StateMachineManager, r as collectDeclaredConfigDefaults, s as collectDeclaredEntityDefaults, t as createInitialTraitState, u as createServerEffectHandlers, v as findInitialState, w as findTransition, x as getIsolatedCollectionName, y as getNamespacedEvent, z as isBrowser, A as isElectron, B as isNamespacedEvent, D as isNode, F as normalizeEventKey, G as parseNamespacedEvent, H as preprocessSchema, J as processEvent } from './OrbitalServerRuntime-BiEntWd-.js';
 import { EvaluationContext, SExpressionEvaluator } from '@almadar/evaluator';
 export { EvaluationContext, createMinimalContext } from '@almadar/evaluator';
-import { RenderBindingMarker, SExpr, RuntimeValue, TraitConfigObject, EventPayload, PatternConfig, EntityId, EntityField, EntityRow, EntityPersistence, ServiceParams, EntityAccessPolicies, PayloadField, OrbitalDefinition, OrbitalSchema } from '@almadar/core';
+import { RenderBindingMarker, SExpr, RuntimeValue, EventPayload, PatternConfig, EntityId, EntityField, EntityRow, EntityPersistence, PayloadField, OrbitalDefinition, OrbitalSchema } from '@almadar/core';
 export { EntityField, normalizeCallSiteConfigToValues } from '@almadar/core';
 export { AccessBindings, applyRowAccess, checkMutationAccess } from './entityAccess.js';
 export { ServerBridgeConfig, ServerBridgeState } from './ServerBridge.js';
@@ -268,23 +268,6 @@ declare function isValidDurationString(interval: string): boolean;
  * @packageDocumentation
  */
 
-/**
- * Call-site payload capture grammar. Mirrors the Rust orbital-core
- * `CALLSITE_PAYLOAD_PREFIX` (`@callsitePayload.`). A composed trait's call-site
- * config value of this form is a snapshot of the COMPOSING effect's triggering
- * event payload, captured at the call site — deliberately distinct from
- * `@payload.` so it is never evaluated in the child's own INIT scope.
- */
-declare const CALLSITE_PAYLOAD_PREFIX = "@callsitePayload.";
-/**
- * Resolve call-site payload captures in a child trait's call-site config
- * against the COMPOSING effect's triggering event payload. Each value of the
- * form `@callsitePayload.<field>` becomes the literal read from `payload`
- * (snapshot semantics — the child sees a plain value, never a payload ref).
- * Non-capture entries pass through untouched. Returns a new object; the input
- * is not mutated.
- */
-declare function resolveCallSitePayloadCaptures(config: TraitConfigObject, payload: EventPayload | undefined): TraitConfigObject;
 /**
  * Interpolate binding references in props.
  *
@@ -481,6 +464,14 @@ declare class EffectExecutor {
      * substrate-op args. Returns `[positionalArgs, emitConfig]`.
      */
     private splitSubstrateEmit;
+    /**
+     * Dispatches one effect. Returns `void` for the ordinary case (the
+     * caller only cares whether it threw). A `persist` that resolves
+     * without throwing — the store DENIED the write, signalled by return
+     * value rather than an exception, per the "close the circuit" doctrine
+     * — reports that outcome here so `executeWithResults` can record it as
+     * `status: 'failed'` instead of the default `'executed'`.
+     */
     private dispatch;
     private logUnsupported;
 }
@@ -839,115 +830,6 @@ declare class MockPersistenceAdapter implements PersistenceAdapter {
  */
 declare function createMockPersistence(config?: MockPersistenceConfig): MockPersistenceAdapter;
 
-/**
- * ServerEffectHandlers — reusable factory for the server-side effect layer.
- *
- * Mirrors the handlers built inline in
- * `OrbitalServerRuntime.executeEffects` so both the real server runtime
- * AND the in-browser mock runtime (`@almadar/ui` OrbPreview autoMock) can
- * share the same `fetch` / `persist` / `set` / `ref` / `deref` / `swap!` /
- * `atomic` / `callService` semantics against a `PersistenceAdapter`.
- *
- * Browser-safe: only imports core + this package's browser-safe modules.
- * Does NOT import express/Node, so it is reachable from `@almadar/ui`.
- *
- * @packageDocumentation
- */
-
-/**
- * Minimal event-bus contract the server handlers need. Narrower than the
- * full `IEventBus` so clients with a React-context bus (only `emit` is
- * relevant for effect dispatch) can hand it in without adapter code.
- */
-interface ServerEffectEventBus {
-    emit(event: string, payload?: EventPayload, source?: {
-        orbital?: string;
-        trait?: string;
-    }): void;
-}
-/**
- * Result entry recorded for each effect invocation. Mirrors the server
- * runtime's `EffectResult`. Callers who want telemetry pass an array that
- * the factory appends to; otherwise it's unused.
- */
-interface ServerEffectResult {
-    effect: "set" | "persist" | "call-service" | "fetch" | "ref" | "deref" | "swap" | "atomic";
-    action?: string;
-    entityType?: string;
-    data?: unknown;
-    success: boolean;
-    error?: string;
-}
-interface CreateServerEffectHandlersOptions {
-    /** Persistent store backing `fetch` / `persist` / `ref` / `deref` / `swap`. */
-    persistence: PersistenceAdapter;
-    /** Event bus that `emit` delegates to. Only `.emit()` is required. */
-    eventBus: ServerEffectEventBus;
-    /** The trait's linked entity type (used as the default for persist/set). */
-    entityType: string;
-    /** Current entity row id (used by `set`, `persist update/delete` fallback). */
-    entityId?: string;
-    /**
-     * Binding object passed to inner `atomic` evaluator. When absent, atomic
-     * effects still run but have no access to `@entity` / `@payload` bindings.
-     */
-    bindings?: BindingContext;
-    /** Effect context passed to the inner `atomic` executor. */
-    context?: EffectContext;
-    /** Per-event result sink. Optional — telemetry only. */
-    effectResults?: ServerEffectResult[];
-    /**
-     * Per-event fetched-data cache. `fetch` writes here so downstream UI
-     * renderers can resolve `@entity` bindings from the latest load without
-     * a separate round-trip.
-     */
-    fetchedData?: Record<string, EntityRow[]>;
-    /** Per-event emit log. Optional — telemetry only. */
-    emittedEvents?: Array<{
-        event: string;
-        payload?: EventPayload;
-    }>;
-    /** Source stamp applied to all emits. */
-    source?: {
-        orbital?: string;
-        trait?: string;
-    };
-    /** Consumer-supplied `call-service` handler. When absent, calls warn and return null. */
-    callService?: (service: string, action: string, params?: ServiceParams, context?: ServiceCallContext) => Promise<EventPayload | null>;
-    /**
-     * The declared `@read`/`@create`/`@update`/`@delete` directives, keyed by
-     * entity name. Build it with `entityAccessTable(schema)` from `@almadar/core`.
-     *
-     * Optional: a caller that holds no schema (the client offline-preview path)
-     * passes nothing and gets today's unrestricted behavior. A preview is not a
-     * security boundary — the generated server is, and that one always has the
-     * policies compiled in.
-     */
-    entityAccess?: ReadonlyMap<string, EntityAccessPolicies>;
-    /** Verbose logging. */
-    debug?: boolean;
-}
-/**
- * Build the full server-side effect handler set bound to a persistence
- * adapter. The returned object satisfies `EffectHandlers` and can be
- * handed directly to `EffectExecutor`.
- *
- * Scope: one handler object per transition — capture `entityId`,
- * `bindings`, `context`, and the sink arrays at build time. For a new
- * transition, call this factory again.
- *
- * Intentionally does NOT implement:
- * - `renderUI` / `notify` / `navigate` — these are client-side, provided
- *   by `createClientEffectHandlers`. A mock runtime merges both handler
- *   sets.
- * - `os/watch-*` observers — these are a no-op outside the server.
- * - Schema-aware relation cardinality / on-delete cascades — those live
- *   in `OrbitalServerRuntime` and depend on the full registered schema.
- *   Clients that need them can wrap the persist handler with their own
- *   validation.
- */
-declare function createServerEffectHandlers(opts: CreateServerEffectHandlersOptions): EffectHandlers;
-
 /**
  * PayloadValidator - Cross-Trait Payload Shape Validation (RCG-10)
  *
@@ -1222,4 +1104,4 @@ declare namespace index {
   export { type index_ComposeBehaviorsInput as ComposeBehaviorsInput, type index_ComposeBehaviorsResult as ComposeBehaviorsResult, type index_EventWiringEntry as EventWiringEntry, type index_LayoutStrategy as LayoutStrategy, type index_PipeStep as PipeStep, index_applyEventWiring as applyEventWiring, index_composeBehaviors as composeBehaviors, index_detectLayoutStrategy as detectLayoutStrategy, index_pipeBehaviors as pipeBehaviors };
 }
 
-export { BindingContext, CALLSITE_PAYLOAD_PREFIX, type ClientEventBus, type ComposeBehaviorsInput, type ComposeBehaviorsResult, type CreateClientEffectHandlersOptions, type CreateServerEffectHandlersOptions, type CronFields, type DeferredPatternValue, EffectContext, EffectExecutor, type EffectExecutorOptions, EffectHandlers, EffectResult, type EntitySchema, type EventWiringEntry, ExecutionEnvironment, ImportChainLike, type LayoutStrategy, LoadResult, LoadedOrbital, LoadedSchema, MockPersistenceAdapter, type MockPersistenceConfig, type PayloadMismatch, type PayloadValidationFailure, PersistenceAdapter, type PipeStep, SchemaLoader, type ServerEffectResult, type SlotSetter, type TickHandle, TickScheduler, TraitDefinition, UnifiedLoaderOptions, applyEventWiring, buildEmitsFromTraits, composeBehaviors, index as composition, containsBindings, createClientEffectHandlers, createContextFromBindings, createMockPersistence, createServerEffectHandlers, createTestExecutor, createTickScheduler, createUnifiedLoader, cronMatches, cronMinuteKey, deferEntityBindings, detectLayoutStrategy, extractBindings, formatPayloadValidationError, interpolateProps, interpolateValue, isValidCronExpression, isValidDurationString, parseCron, parseCronField, parseDurationString, pipeBehaviors, resolveCallSitePayloadCaptures, validateEventPayload, validatePayloadShapes };
+export { BindingContext, type ClientEventBus, type ComposeBehaviorsInput, type ComposeBehaviorsResult, type CreateClientEffectHandlersOptions, type CronFields, type DeferredPatternValue, EffectContext, EffectExecutor, type EffectExecutorOptions, EffectHandlers, EffectResult, type EntitySchema, type EventWiringEntry, ExecutionEnvironment, ImportChainLike, type LayoutStrategy, LoadResult, LoadedOrbital, LoadedSchema, MockPersistenceAdapter, type MockPersistenceConfig, type PayloadMismatch, type PayloadValidationFailure, PersistenceAdapter, type PipeStep, SchemaLoader, type SlotSetter, type TickHandle, TickScheduler, TraitDefinition, UnifiedLoaderOptions, applyEventWiring, buildEmitsFromTraits, composeBehaviors, index as composition, containsBindings, createClientEffectHandlers, createContextFromBindings, createMockPersistence, createTestExecutor, createTickScheduler, createUnifiedLoader, cronMatches, cronMinuteKey, deferEntityBindings, detectLayoutStrategy, extractBindings, formatPayloadValidationError, interpolateProps, interpolateValue, isValidCronExpression, isValidDurationString, parseCron, parseCronField, parseDurationString, pipeBehaviors, validateEventPayload, validatePayloadShapes };

package/dist/index.js

@@ -1,8 +1,8 @@
-import { EffectExecutor } from './chunk-PAEMYGKV.js';
-export { EffectExecutor, EventBus, HANDLER_MANIFEST, InMemoryPersistence, MockPersistenceAdapter, StateMachineManager, TickScheduler, buildEmitsFromTraits, collectDeclaredConfigDefaults, collectDeclaredEntityDefaults, createInitialTraitState, createMockPersistence, createTestExecutor, createTickScheduler, createUnifiedLoader, findInitialState, findTransition, formatPayloadValidationError, getIsolatedCollectionName, getNamespacedEvent, isBrowser, isElectron, isNamespacedEvent, isNode, isValidDurationString, normalizeCallSiteConfigToValues, normalizeEventKey, parseDurationString, parseNamespacedEvent, preprocessSchema, processEvent, validateEventPayload, validatePayloadShapes } from './chunk-PAEMYGKV.js';
+import { EffectExecutor } from './chunk-H7HQQVQJ.js';
+export { EffectExecutor, EventBus, HANDLER_MANIFEST, InMemoryPersistence, LIFECYCLE_EVENTS, MockPersistenceAdapter, StateMachineManager, TickScheduler, buildEmitsFromTraits, collectDeclaredConfigDefaults, collectDeclaredEntityDefaults, createInitialTraitState, createMockPersistence, createTestExecutor, createTickScheduler, createUnifiedLoader, findInitialState, findTransition, formatPayloadValidationError, getIsolatedCollectionName, getNamespacedEvent, isBrowser, isElectron, isNamespacedEvent, isNode, isValidDurationString, normalizeCallSiteConfigToValues, normalizeEventKey, parseDurationString, parseNamespacedEvent, preprocessSchema, processEvent, validateEventPayload, validatePayloadShapes } from './chunk-H7HQQVQJ.js';
 export { cronMatches, cronMinuteKey, isValidCronExpression, parseCron, parseCronField } from './chunk-OU3ITB5S.js';
-import { createContextFromBindings, applyRowAccess, checkMutationAccess, accessDeniedMessage } from './chunk-ZJ62H3ES.js';
-export { CALLSITE_PAYLOAD_PREFIX, applyRowAccess, checkMutationAccess, containsBindings, createContextFromBindings, createMinimalContext, deferEntityBindings, extractBindings, interpolateProps, interpolateValue, resolveCallSitePayloadCaptures } from './chunk-ZJ62H3ES.js';
+import { createContextFromBindings, applyRowAccess, checkMutationAccess, accessDeniedMessage } from './chunk-ZWAOJT6R.js';
+export { applyRowAccess, checkMutationAccess, containsBindings, createContextFromBindings, createMinimalContext, deferEntityBindings, extractBindings, interpolateProps, interpolateValue } from './chunk-ZWAOJT6R.js';
 import './chunk-T4VDAB4C.js';
 export { PERF_NAMESPACE, RendererContractViolationError, adjustSchemaForMockData, aggregateSlotContent, assertIsMultiSourceSlotManager, assertIsSlotManager, bindEventBus, bindTraitStateGetter, buildMockData, buildOrbitalsByTrait, clearPerf, createSlotSetter, ensureVerificationApi, getOrbitalVerification, perfEnd, perfGauge, perfStart, perfStore, perfTime, perfTimeAsync, prepareSchemaForPreview, pushPerfEntry, validateSlotContent, wrapCallbackForEvent } from './chunk-F5W3YZGJ.js';
 export { collectEmbeddedTraits, collectTraitRefsFromResolvedTrait } from './chunk-SCRAHWOC.js';
@@ -283,10 +283,10 @@ function createServerEffectHandlers(opts) {
                   createData
                 );
                 batchResults.push({
+                  ...createData,
                   action: "create",
                   entityType: opEntityType,
-                  id: newId,
-                  ...createData
+                  id: newId
                 });
                 completed.push({
                   action: "create",
@@ -301,10 +301,10 @@ function createServerEffectHandlers(opts) {
                 await persistence.update(opEntityType, updateId, updateData);
                 const updated = await persistence.getById(opEntityType, updateId);
                 batchResults.push({
+                  ...updated || updateData,
                   action: "update",
                   entityType: opEntityType,
-                  id: updateId,
-                  ...updated || updateData
+                  id: updateId
                 });
                 completed.push({
                   action: "update",
@@ -358,15 +358,17 @@ function createServerEffectHandlers(opts) {
       const type = targetEntityType || entityType;
       let resultData;
       const sizeBefore = (await persistence.list(type)).length;
+      let deniedReason;
       try {
         const mutationPolicy = entityAccess?.get(type)?.[action];
         switch (action) {
           case "create": {
             if (!checkMutationAccess(data ?? {}, mutationPolicy, accessBindings(type))) {
+              deniedReason = "access-denied";
               throw new Error(accessDeniedMessage("create", type));
             }
             const { id } = await persistence.create(type, data ?? {});
-            resultData = { id, ...data ?? {} };
+            resultData = { ...data ?? {}, id };
             break;
           }
           case "update": {
@@ -376,15 +378,17 @@ function createServerEffectHandlers(opts) {
               if (mutationPolicy !== void 0) {
                 const existing = await persistence.getById(type, idOrFallback);
                 if (!existing || !checkMutationAccess(existing, mutationPolicy, accessBindings(type))) {
+                  deniedReason = "access-denied";
                   throw new Error(accessDeniedMessage("update", type));
                 }
               }
               await persistence.update(type, idOrFallback, row);
               const updated = await persistence.getById(type, idOrFallback);
-              resultData = updated ?? { id: idOrFallback, ...row };
+              resultData = updated ?? { ...row, id: idOrFallback };
             } else {
               effectLog.error("persist:no-row-key", { action, entityType: type });
               if (NO_ROW_KEY_IS_FATAL) {
+                deniedReason = "no-row-key";
                 throw new Error(
                   `persist ${action} ${type} resolved no row key \u2014 the id was neither on the row being written nor on the request. Bind it before the write, e.g. (set @entity.id ?row.id) on the transition that selects it.`
                 );
@@ -400,6 +404,7 @@ function createServerEffectHandlers(opts) {
               if (mutationPolicy !== void 0) {
                 const existing = await persistence.getById(type, deleteId);
                 if (!existing || !checkMutationAccess(existing, mutationPolicy, accessBindings(type))) {
+                  deniedReason = "access-denied";
                   throw new Error(accessDeniedMessage("delete", type));
                 }
               }
@@ -408,6 +413,7 @@ function createServerEffectHandlers(opts) {
             } else {
               effectLog.error("persist:no-row-key", { action, entityType: type });
               if (NO_ROW_KEY_IS_FATAL) {
+                deniedReason = "no-row-key";
                 throw new Error(
                   `persist ${action} ${type} resolved no row key \u2014 the id was neither on the row being written nor on the request. Bind it before the write, e.g. (set @entity.id ?row.id) on the transition that selects it.`
                 );
@@ -416,6 +422,17 @@ function createServerEffectHandlers(opts) {
             break;
           }
         }
+        if (resultData === void 0 && (action === "update" || action === "delete")) {
+          record({
+            effect: "persist",
+            action,
+            entityType: type,
+            success: false,
+            denied: true,
+            error: `persist ${action} ${type} resolved no row key`
+          });
+          return void 0;
+        }
         const sizeAfter = (await persistence.list(type)).length;
         effectLog.debug("persist:store-mutate", {
           action,
@@ -443,6 +460,7 @@ function createServerEffectHandlers(opts) {
           effect: "persist",
           action,
           entityType: type,
+          ...deniedReason !== void 0 ? { denied: true } : {},
           success: false,
           error: err instanceof Error ? err.message : String(err)
         });

package/dist/{types-BaD_ox7e.d.ts → types-CWaIuEQn.d.ts}

@@ -157,11 +157,31 @@ interface EffectHandlers {
      * envelope carries. Without it a `*_CREATED` listener sees no id (the
      * compiled path emits the created row), so anything routing on the new
      * row's identity — navigating to the page just created — worked in one
-     * execution path only. Implementations that have no row to hand back
-     * (batch, a denied write, a no-op stub) return undefined and the
-     * envelope falls back to the submitted data.
+     * execution path only.
+     *
+     * `create`/`update`/`delete` (batch is separate — see `PersistBatchSummary`)
+     * return `undefined` ONLY to signal the write was DENIED or otherwise
+     * failed (a policy rejection, a missing row key, a no-op stub) — never
+     * a genuine success with nothing to report, since every real success
+     * branch sets a row. The caller (`EffectExecutor`'s `persist` case)
+     * treats `undefined` as a failure: it skips the declared `success`
+     * emit entirely rather than falling back to the submitted data, which
+     * previously made a denied delete indistinguishable from a completed
+     * one.
      */
     persist: (action: 'create' | 'update' | 'delete' | 'batch', entityType: string, data?: EntityRow) => Promise<EntityRow | undefined>;
+    /**
+     * Bridge mode: the SERVER executes every persist of this dispatch and
+     * returns the real outcome in its response (`effectResults`), so the
+     * client's `persist` member is a placeholder that must never be read as
+     * a denial. When `true`, `EffectExecutor` skips the persist locally —
+     * no `persist:denied` error, no client-side `failure` emit (which fired
+     * the declared failure event in the browser while the server had
+     * succeeded), no `success` emit either (the server's cascade carries it).
+     * Set by `@almadar/ui`'s `createClientEffectHandlers` when no live
+     * client entity is supplied; absent everywhere a handler really writes.
+     */
+    persistDelegated?: true;
     /** Set a field value on an entity */
     set: (entityId: string, field: string, value: FieldValue) => void;
     /** Call an external service. `context` carries the caller's identity
@@ -383,6 +403,16 @@ interface BindingContext {
      * `let`-bound locals.
      */
     locals?: Map<string, RuntimeValue>;
+    /**
+     * The composing effect's triggering payload, for a trait embedded via
+     * `@trait.X` inline into a parent's render-ui. Set when re-running an
+     * embedded child's lifecycle transition under its embedder's payload
+     * (see `OrbitalServerRuntime.executeEffects` / the client's
+     * `useTraitStateMachine`), so `@callsitePayload.<field>` resolves on the
+     * child's evaluation context — mirrors the compiled path's
+     * `CALLSITE_PAYLOAD_PREFIX` capture.
+     */
+    callsitePayload?: EventPayload;
     /** Additional custom bindings */
     [key: string]: unknown;
 }
@@ -512,4 +542,4 @@ interface TransitionObserver {
  */
 declare const HANDLER_MANIFEST: Record<ExecutionEnvironment, string[]>;
 
-export { type BindingContext as B, type ConfigContext as C, type EffectHandlers as E, HANDLER_MANIFEST as H, type IEventBus as I, type PatternProps as P, type RuntimeEvent as R, type ServiceCallContext as S, type TraitDefinition as T, type Unsubscribe as U, type EventListener as a, type RuntimeConfig as b, type TransitionObserver as c, type TraitState as d, type TransitionResult as e, type EvaluationContextExtensions as f, type RuntimePatternValue as g, type EffectContext as h, type ExecutionEnvironment as i, type EffectResult as j, type BrowserFileMeta as k, type BrowserFilePickerOptions as l, type BrowserGeolocationOptions as m, type BrowserGeolocationPosition as n, type Effect as o };
+export { type BindingContext as B, type ConfigContext as C, type EffectHandlers as E, HANDLER_MANIFEST as H, type IEventBus as I, type PatternProps as P, type RuntimeEvent as R, type ServiceCallContext as S, type TraitDefinition as T, type Unsubscribe as U, type EventListener as a, type RuntimeConfig as b, type TransitionObserver as c, type TraitState as d, type TransitionResult as e, type EvaluationContextExtensions as f, type EffectContext as g, type RuntimePatternValue as h, type ExecutionEnvironment as i, type EffectResult as j, type BrowserFileMeta as k, type BrowserFilePickerOptions as l, type BrowserGeolocationOptions as m, type BrowserGeolocationPosition as n, type Effect as o };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@almadar/runtime",
-  "version": "6.71.0",
+  "version": "6.73.0",
   "description": "Interpreted runtime for Almadar orbital applications (OrbitalServerRuntime)",
   "type": "module",
   "main": "./dist/index.js",
@@ -57,11 +57,11 @@
     "access": "public"
   },
   "dependencies": {
-    "@almadar/core": "^10.84.0",
-    "@almadar/evaluator": "^2.44.0",
+    "@almadar/core": "^10.88.0",
+    "@almadar/evaluator": "^2.45.0",
     "@almadar/logger": "^1.12.0",
-    "@almadar/server": "^2.39.0",
-    "@almadar/std": "^16.204.0"
+    "@almadar/server": "^2.40.0",
+    "@almadar/std": "^16.209.0"
   },
   "peerDependencies": {
     "express": "^5.0.0"
@@ -72,7 +72,7 @@
     }
   },
   "devDependencies": {
-    "@almadar/eslint-plugin": "^2.17.0",
+    "@almadar/eslint-plugin": "^2.18.0",
     "@types/express": "^5.0.0",
     "@types/node": "^20.0.0",
     "@typescript-eslint/parser": "8.65.0",
@@ -102,7 +102,7 @@
     "build": "tsup",
     "build:watch": "tsup --watch",
     "lint": "eslint src/",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --noEmit -p tsconfig.typecheck.json",
     "test": "vitest --run"
   }
 }