@almadar/shell-runtime 0.1.0 → 1.0.0

package/dist/index.d.ts

@@ -1,60 +1,43 @@
-export { AccessTokenProvider, COMPRESSED_BODY_MIN_BYTES, EventTransport, EventTransportRegisterResult, HostDispatchListener, HttpTransportOptions, InProcessTransportOptions, OrbitalEvaluator, PushTarget, createHttpTransport, createInProcessTransport, deriveCarriesCircuitState, encodeJsonBody } from './client/EventTransport.js';
-export { ServerBridge, ServerBridgeConfig, ServerBridgeState, createServerBridge } from './client/ServerBridge.js';
+export { AccessTokenProvider, COMPRESSED_BODY_MIN_BYTES, EventTransport, EventTransportRegisterResult, HostDispatchListener, HttpTransportOptions, InProcessTransportOptions, OrbitalEvaluator, PushTarget, SessionEndedError, TransportStatusError, createHttpTransport, createInProcessTransport, deriveCarriesCircuitState, encodeJsonBody } from './client/EventTransport.js';
 export { AwaitingRegistry } from './client/awaiting.js';
 export { ChannelMessage, ChannelTransportOptions, ServedChannel, TransportChannel, createChannelTransport, holdUntilServed, serveChannel } from './client/channel-transport.js';
-export { CircuitStore, TraitSnapshot, createMemoryCircuitStore } from './client/circuit-store.js';
-export { ClientDispatchHooks, ClientKernel, ClientKernelOutcome, ClientMountHooks, ClientMountOutcome, LocalFoldKernel } from './client/client-kernel.js';
+export { CircuitStore, FrameOutcome, TraitSnapshot, createMemoryCircuitStore } from './client/circuit-store.js';
+export { ClientDispatchHooks, ClientEmitOutcome, ClientKernel, ClientKernelOutcome, ClientMountHooks, ClientMountOutcome, LocalFoldKernel } from './client/client-kernel.js';
 export { dispatchDeclaredInput } from './client/declared-input-dispatch.js';
-export { dispatchInbound } from './client/inbound-dispatch.js';
-export { LocalFoldOptions, createLocalFold, mirrorResponse, traceResponse } from './client/local-fold.js';
+export { InboundContract, dispatchInbound } from './client/inbound-dispatch.js';
+export { FramesSince, LocalFoldOptions, createLocalFold, paintFrames, paintResponse, paintStates, traceResponse } from './client/local-fold.js';
 export { DEFAULT_THEME_KEY, appNavItems, inlineNavItems, sigilThemeKey } from './client/render-sigils.js';
-export { StateBook, createInitialTraitState, findInitialState, findMatchingTransitions, findTransition } from './client/state-book.js';
+export { StateBook, createInitialTraitState, findInitialState } from './client/state-book.js';
 export { TraitMountError } from './client/trait-mount-error.js';
 export { RollbackCause, TraitState, TransitionObserver } from './client/trait-types.js';
-export { STORE_BOOTSTRAP_ENV_VARS, allCredentialEnvVars } from './credentials/env-vars.js';
+export { CREDENTIAL_MASTER_KEY_ENV, CREDENTIAL_PREVIOUS_MASTER_KEY_ENV, STORE_BOOTSTRAP_ENV_VARS, allCredentialEnvVars } from './credentials/env-vars.js';
 export { CREDENTIALS_SOURCE_ENV, CredentialMode, CredentialModeControl, CredentialScopeStorage, credentialModeFromEnv, credentialsFromStoreOnly, getEffectiveCredentialStore, getInstalledCredentialStore, getModeControl, installCredentialScopeStorage, installCredentialStore, installModeControl, resolveCredentialRef, runWithCredentialScope, uninstallCredentialStore } from './credentials/scope.js';
-export { CredentialSeedKernel, DeclaredCredential, seedCredentialStore } from './credentials/seed.js';
-export { CREDENTIAL_ENTITY_TYPE, CREDENTIAL_MASTER_KEY_ENV, CREDENTIAL_PREVIOUS_MASTER_KEY_ENV, CredentialEntry, CredentialPersistence, CredentialStore, DERIVED_ENTITY_TYPE, DerivedPersistence } from './credentials/store.js';
+export { CredentialEntry, CredentialExchangeError, CredentialListing, CredentialRotation, CredentialRowsPort, CredentialVault, CredentialVaultKernel, CredentialVaultModule, TokenEndpointPost, TokenReply, TokenRequest } from './credentials/vault.js';
 export { InFlightCalls, KeyedCallLease, KeyedCallOutcome, untilAborted } from './effects/in-flight-calls.js';
 export { NO_ON_DEVICE_EMBEDDER, NO_ON_DEVICE_MODEL, OnDeviceModelFailure, embedOnDevice, promptOnDevice } from './effects/on-device-model.js';
 export { EventBus, createEventBus } from './events/EventBus.js';
 export { StampEmitIdentity, stampEmitSource } from './events/emit-stamp.js';
-export { BeaconDelivery, BeaconDeliveryPorts, BeaconFetchInit, deliverBeacon } from './kernel/beacon.js';
-export { decodeHttpBody, decodeHttpRequest, decodeHttpResponse, decodeOAuthAsk, decodeProgress, decodeRequest, decodeResolveProgress } from './kernel/decode.js';
-export { KernelEngine, KernelEvaluation, evaluateOnKernel, kernelRequest } from './kernel/engine.js';
-export { FrameApplied, FrameDispatch, FramePostPort, TickEffects, applyFrame, decodeFrame, isFrameWire } from './kernel/frame-applier.js';
-export { DeferredCallOutcome, KernelAnswerScope, KernelCallService, KernelHostPorts, SubstrateStreamSource, answerRequest, declareCapabilities, writeRows } from './kernel/host.js';
-export { BeaconSettled, BrowserHttpPortsOptions, CredentialAdminPort, Exchange, HttpEffectFailure, HttpKernel, HttpOutcome, HttpPorts, HttpPortsOptions, HttpRunOptions, HttpSecrets, HttpSecretsHost, HttpUnavailableError, NetPort, OAuthAuthorizeKernel, OAuthPort, PinnedFetch, PinnedInit, PinnedResponse, RANDOM_BYTES_MAX, RandomSource, ResolvedHost, StreamFrame, StreamFramingWire, base64Standard, base64Url, checkOAuthReply, createBrowserHttpPorts, createCredentialAdminPort, createHttpPorts, createHttpSecrets, credentialForgetPayload, credentialStatusPayload, installNetPort, isOAuthCode, isOAuthReason, randomBytesPayload, runHttpCall, sendBeaconRequest, sendHttp, streamHttp, systemRandom, unavailableFailure, userCredentialKey } from './kernel/http.js';
-export { DispatchLane, LaneGuard, LaneHeldByParkedDispatch, LaneTurn } from './kernel/lane.js';
-export { OAuthEffectFailure, oauthAuthorizePayload, oauthConnectionPayload } from './kernel/oauth-effects.js';
-export { OAuthConsentRequest, OAuthPortOptions, PENDING_GRACE_MS, createOAuthPort } from './kernel/oauth-port.js';
-export { AnchoredPath, OsAnchorProblem, OsAnchors, OsCompletionEvent, OsCompletionMatchers, OsCompletionPort, OsDesktopKind, OsFsMode, OsGrantKernel, OsGrantMatchers, OsGrantPort, OsHostPort, OsNetKind, OsRequirement, OsStdioKind, OsSysKind, anchoredGrants, expandAnchor, kernelOsCompletions, kernelOsGrants } from './kernel/os-port.js';
-export { CascadeOutcome, PROGRAM_EFFECTS, PlayedStep, ProgramEffectName, ProgramEffectOutcome, ProgramValidationReport, StepRequest, isProgramEffect } from './kernel/program-effects.js';
-export { KernelModule, KernelServerClass, KernelServerHandle } from './kernel/wire.js';
-export { HttpImportChain, HttpLoader, createHttpLoader } from './loader/http-loader.js';
+export { decodeDueTicks, decodeNext, decodeProgress, decodeResolveProgress } from './kernel/decode.js';
+export { KernelEngine, KernelEvaluation, ProgramlessContract, evaluateOnKernel, kernelRequest } from './kernel/engine.js';
+export { FrameApplied, FrameDispatch, FramePostPort, TickEffects, applyFrame, decodeFrame } from './kernel/frame-applier.js';
+export { DeferredCallOutcome, EventRequestParser, HostAskError, HostAskFailureKind, HostAskOutcome, HostAskReturn, HostAudioAsk, HostConsentAnswer, HostConsentRequest, HostSignInAnswer, HostSignInRequest, KernelAnswerScope, KernelCallService, KernelHostActions, KernelHostPorts, SubstrateStreamSource, answerRequest, completeTls, consentFromRedirect, declareCapabilities, finishTls, hostAskReturn, kernelEventRequestParser, parseConsentRequest, parseSignInRequest, performHostAnswer, performHostAsk, writeRows } from './kernel/host.js';
+export { CredentialAdminPort, CredentialConnectPort, EnvTailsPort, RANDOM_BYTES_MAX, RandomSource, SecretPorts, SecretPortsOptions, SecretStore, SecretStoreHost, base64Standard, base64Url, createBrowserSecretPorts, createCredentialAdminPort, createCredentialConnectPort, createSecretPorts, createSecretStore, credentialForgetPayload, credentialStatusPayload, envTailsOf, randomBytesPayload, systemRandom, userCredentialKey } from './kernel/secret-ports.js';
+export { LaneHeldByParkedDispatch } from './kernel/lane.js';
+export { AnchoredPath, OsAnchorProblem, OsAnchors, OsCompletionEvent, OsCompletionMatchers, OsCompletionPort, OsDesktopKind, OsFsMode, OsGrantKernel, OsGrantMatchers, OsGrantPort, OsHostPort, OsNetKind, OsRequirement, OsStdioKind, OsSysKind, OsTlsKernel, OsTlsPort, OsTlsStep, anchoredGrants, expandAnchor, kernelOsCompletions, kernelOsGrants, kernelOsTls } from './kernel/os-port.js';
+export { createFetchOsHost } from './kernel/os-fetch-port.js';
+export { PROGRAM_EFFECTS, ProgramEffectName, ProgramEffectOutcome, ProgramValidationReport, StepRequest, isProgramEffect } from './kernel/program-effects.js';
+export { FiredByOrbital, KernelModule, KernelServerClass, KernelServerHandle } from './kernel/wire.js';
 export { loadLazyPage } from './loader/lazy-page.js';
-export { BaseLoaderOptions, HttpLoaderOptions, ImportChainLike, LoadResult, LoadedOrbital, LoadedSchema, SchemaLoader } from './loader/schema-loader.js';
-export { ComposeBehaviorsInput, ComposeBehaviorsResult, composeBehaviors } from './runtime/effects/composition/compose-behaviors.js';
-export { EventWiringEntry, applyEventWiring } from './runtime/effects/composition/event-wiring.js';
-export { i as composition } from './index-hT1xCdTq.js';
-export { LayoutStrategy, detectLayoutStrategy } from './runtime/effects/composition/layout-strategy.js';
-export { PipeStep, pipeBehaviors } from './runtime/effects/composition/pipe.js';
-export { MockSeedHost, MockSeedViewer, MockSeeded, bindDeclaredCollections, restampMockOwner, seedMockStore } from './runtime/entities/mockStoreSeed.js';
-export { MockSeedEngine, MockSeedRun, SeedConfig, SeedOwnerCell, SeedOwnerChange, SeedOwnerJournal, SeedRestamp, SeededDataset, StdMockSeed, declaredSeedConfig, readSeededStores } from './runtime/entities/std-mock-seed.js';
-export { BrowserSeedHost, seedBrowserStore } from './runtime/entities/seedBrowserStore.js';
+export { FetchSchemaLoader } from './loader/fetch-loader.js';
+export { BaseLoaderOptions, ImportChainLike, LoadResult, LoadedOrbital, LoadedSchema, SchemaLoader } from './loader/schema-loader.js';
+export { bindDeclaredCollections } from './runtime/entities/declaredCollections.js';
 export { LocalKernelOptions, LocalStoreTransportOptions, createLocalStoreTransport, localStorePersistence, openLocalKernel, resolveLocalRows } from './runtime/evaluation/local-store-transport.js';
 export { ResidenceTransportOptions, createResidenceTransport } from './runtime/evaluation/residence-transport.js';
 export { routeByEntity } from './runtime/evaluation/routed-persistence.js';
-export { ListenSourceDescriptor, RouteSourceMeta, buildSourceMatcher, eventRouteKey, parseListenSource } from './runtime/events/identity/routing.js';
-export { TickHandle, TickScheduler, createTickScheduler } from './runtime/time/TickScheduler.js';
-export { CronFields, cronMatches, cronMinuteKey, isValidCronExpression, parseCron, parseCronField } from './runtime/time/cron.js';
-export { isValidDurationString, parseDurationString } from './runtime/time/duration.js';
-export { ParsedOrbitalTraits, parseOrbitalTraits } from './runtime/traits/OrbitalTraitParsing.js';
-export { CollectedListenerTarget, collectListenerTargets } from './runtime/traits/listen-targets.js';
-export { buildTraitIndex } from './runtime/traits/trait-index.js';
-export { BindingContext, BrowserFileMeta, BrowserFilePickerOptions, BrowserGeolocationOptions, BrowserGeolocationPosition, ConfigContext, Effect, EffectContext, EffectHandlers, EffectResult, EvaluationContextExtensions, EventListener, ExecutionEnvironment, HANDLER_MANIFEST, HttpEffectReport, IEventBus, PatternProps, PersistBatchSummary, RuntimeConfig, RuntimeEvent, RuntimePatternValue, RuntimeRenderPattern, TransitionResult, Unsubscribe, isEffectTuple } from './runtime/types.js';
+export { eventRouteKey } from './runtime/events/identity/routing.js';
+export { BindingContext, Effect, EffectHandlers, EffectResult, EvaluationContextExtensions, EventListener, IEventBus, PatternProps, RuntimeEvent, Unsubscribe } from './runtime/types.js';
 export { CallServiceHandler, ServiceMessageRoute, defaultCallService } from './service/default-call-service.js';
 export { ServiceCallContext, ServiceCallError, ServiceCallErrorCode, ServiceProvider, callRegisteredService, registerServiceProvider, registeredServices, unregisterServiceProvider } from './service/service-provider.js';
 export { NativeMemoryPersistenceAdapter, NativeMemoryWriteError } from './persistence/native-memory.js';
-export { CallRoutesWire, CallSiteWire, CallerWire, HttpBody, HttpFailureWire, HttpRequestWire, HttpResponseWire, IoAnswerWire, IoReplyWire, IoRequestWire, PendingRequestWire, ResolveProgressWire, ServerProgressWire, Settled, SubstrateFailureWire } from '@almadar/core/kernel-wire';
-export { EntityRow, EventPayload, FetchResult, HttpCall, ServiceParams } from '@almadar/core';
+export { CallRoutesWire, CallSiteWire, CallerWire, IoAnswerWire, IoReplyWire, IoRequestWire, NextWire, PendingRequestWire, PlayedStep, ResolveProgressWire, ServerProgressWire, Settled, SubstrateFailureWire, decodeIoRequestWire as decodeRequest } from '@almadar/core/kernel-wire';
+export { EntityRow, EventPayload, FetchResult, ServiceParams } from '@almadar/core';

package/dist/index.js

@@ -1,59 +1,41 @@
-export { HANDLER_MANIFEST, isEffectTuple } from './chunk-WNPNNYXY.js';
-export { TickScheduler, createTickScheduler } from './chunk-CQP5XAX6.js';
-export { cronMatches, cronMinuteKey, isValidCronExpression, parseCron, parseCronField } from './chunk-CROS2GEX.js';
-export { isValidDurationString, parseDurationString } from './chunk-46RWK2B5.js';
-export { collectListenerTargets } from './chunk-XB5GYODW.js';
-export { buildSourceMatcher, eventRouteKey, parseListenSource } from './chunk-IHQLE5M7.js';
-export { composition_exports as composition } from './chunk-5D63EMO5.js';
-export { pipeBehaviors } from './chunk-FQ6IZMIU.js';
-export { bindDeclaredCollections, restampMockOwner, seedMockStore } from './chunk-JFWFDUTR.js';
-export { seedBrowserStore } from './chunk-T775TUCD.js';
-export { StdMockSeed, declaredSeedConfig, readSeededStores } from './chunk-HMK6YMQS.js';
-export { createLocalStoreTransport, localStorePersistence, openLocalKernel, resolveLocalRows } from './chunk-VNMG7NKY.js';
+import './chunk-ELBLT2HZ.js';
+export { NativeMemoryPersistenceAdapter, NativeMemoryWriteError } from './chunk-7SDV3QWR.js';
+export { bindDeclaredCollections } from './chunk-BAS26HBN.js';
+export { createLocalStoreTransport, localStorePersistence, openLocalKernel, resolveLocalRows } from './chunk-MU335ZA4.js';
 export { defaultCallService } from './chunk-4SEK5ER2.js';
 export { ServiceCallError, callRegisteredService, registerServiceProvider, registeredServices, unregisterServiceProvider } from './chunk-UBN5JJKZ.js';
+export { createResidenceTransport } from './chunk-V4EMDPCO.js';
 export { routeByEntity } from './chunk-O57GKTYU.js';
-export { buildTraitIndex } from './chunk-CPSQXEJ6.js';
-export { parseOrbitalTraits } from './chunk-SAS5KKCR.js';
-export { createResidenceTransport } from './chunk-UJHOUZAL.js';
+export { eventRouteKey } from './chunk-BY5G4225.js';
+import './chunk-LYFIQPXX.js';
+export { createFetchOsHost } from './chunk-625EP7W2.js';
+export { anchoredGrants, expandAnchor, kernelOsCompletions, kernelOsGrants, kernelOsTls } from './chunk-BOVU4TCQ.js';
 import './chunk-EZZYLTWY.js';
-export { HttpImportChain, HttpLoader, createHttpLoader } from './chunk-YL2SO5TP.js';
+export { FetchSchemaLoader } from './chunk-57SBCUSM.js';
 export { loadLazyPage } from './chunk-XXWNMJI6.js';
-import './chunk-ELBLT2HZ.js';
-export { NativeMemoryPersistenceAdapter, NativeMemoryWriteError } from './chunk-7SDV3QWR.js';
-export { composeBehaviors } from './chunk-ZCQUUJIF.js';
-export { detectLayoutStrategy } from './chunk-EV56K4GB.js';
-export { applyEventWiring } from './chunk-MHYSHSRG.js';
-export { KernelEngine, evaluateOnKernel, kernelRequest } from './chunk-D4XJTBLB.js';
-export { applyFrame, decodeFrame, isFrameWire } from './chunk-4J2QEIUV.js';
-export { answerRequest, declareCapabilities, writeRows } from './chunk-NATGCIVM.js';
-export { PROGRAM_EFFECTS, isProgramEffect } from './chunk-HNOAZWFH.js';
-export { DispatchLane, LaneHeldByParkedDispatch } from './chunk-53IPZXDP.js';
-export { OAuthEffectFailure, oauthAuthorizePayload, oauthConnectionPayload } from './chunk-ZAQSS47X.js';
-export { HttpEffectFailure, HttpUnavailableError, RANDOM_BYTES_MAX, base64Standard, base64Url, checkOAuthReply, createBrowserHttpPorts, createCredentialAdminPort, createHttpPorts, createHttpSecrets, credentialForgetPayload, credentialStatusPayload, installNetPort, isOAuthCode, isOAuthReason, randomBytesPayload, runHttpCall, sendBeaconRequest, sendHttp, streamHttp, systemRandom, unavailableFailure, userCredentialKey } from './chunk-YO4LWS3I.js';
-export { PENDING_GRACE_MS, createOAuthPort } from './chunk-4ZICQ5PM.js';
-export { anchoredGrants, expandAnchor, kernelOsCompletions, kernelOsGrants } from './chunk-REPX5QPI.js';
-export { InFlightCalls, untilAborted } from './chunk-MZKIL5IN.js';
-export { NO_ON_DEVICE_EMBEDDER, NO_ON_DEVICE_MODEL, OnDeviceModelFailure, embedOnDevice, promptOnDevice } from './chunk-FWA5K7Q2.js';
 export { EventBus, createEventBus } from './chunk-SOQDEPME.js';
 export { stampEmitSource } from './chunk-64IH2SMY.js';
-export { deliverBeacon } from './chunk-VMOBW7RK.js';
-export { decodeHttpBody, decodeHttpRequest, decodeHttpResponse, decodeOAuthAsk, decodeProgress, decodeRequest, decodeResolveProgress } from './chunk-RBUMDYFS.js';
-export { createLocalFold, mirrorResponse, traceResponse } from './chunk-QQRDUMB2.js';
+export { KernelEngine, evaluateOnKernel, kernelRequest } from './chunk-I3TKINSO.js';
+export { LaneHeldByParkedDispatch } from './chunk-NU6LVKGS.js';
+export { decodeDueTicks, decodeNext, decodeProgress, decodeIoRequestWire as decodeRequest, decodeResolveProgress } from './chunk-X6W44WHO.js';
+export { applyFrame, decodeFrame } from './chunk-NTFQ36UN.js';
+export { HostAskError, answerRequest, completeTls, consentFromRedirect, declareCapabilities, finishTls, hostAskReturn, kernelEventRequestParser, parseConsentRequest, parseSignInRequest, performHostAnswer, performHostAsk, writeRows } from './chunk-7WB6VWRK.js';
+export { PROGRAM_EFFECTS, isProgramEffect } from './chunk-WGCWJOT2.js';
+export { RANDOM_BYTES_MAX, base64Standard, base64Url, createBrowserSecretPorts, createCredentialAdminPort, createCredentialConnectPort, createSecretPorts, createSecretStore, credentialForgetPayload, credentialStatusPayload, envTailsOf, randomBytesPayload, systemRandom, userCredentialKey } from './chunk-ZUSM4VW4.js';
+export { NO_ON_DEVICE_EMBEDDER, NO_ON_DEVICE_MODEL, OnDeviceModelFailure, embedOnDevice, promptOnDevice } from './chunk-FWA5K7Q2.js';
 export { DEFAULT_THEME_KEY, appNavItems, inlineNavItems, sigilThemeKey } from './chunk-UP6GGGAN.js';
 export { TraitMountError } from './chunk-IOPUS6Q5.js';
 import './chunk-P53CKOME.js';
-export { STORE_BOOTSTRAP_ENV_VARS, allCredentialEnvVars } from './chunk-Q7JK4KY7.js';
-export { CREDENTIAL_ENTITY_TYPE, CREDENTIAL_MASTER_KEY_ENV, CREDENTIAL_PREVIOUS_MASTER_KEY_ENV, CredentialStore, DERIVED_ENTITY_TYPE } from './chunk-NAECVIAR.js';
+export { CREDENTIAL_MASTER_KEY_ENV, CREDENTIAL_PREVIOUS_MASTER_KEY_ENV, STORE_BOOTSTRAP_ENV_VARS, allCredentialEnvVars } from './chunk-VNGXRYFF.js';
 export { CREDENTIALS_SOURCE_ENV, credentialModeFromEnv, credentialsFromStoreOnly, getEffectiveCredentialStore, getInstalledCredentialStore, getModeControl, installCredentialScopeStorage, installCredentialStore, installModeControl, resolveCredentialRef, runWithCredentialScope, uninstallCredentialStore } from './chunk-HLOUDLPI.js';
-export { seedCredentialStore } from './chunk-SWPDU752.js';
-export { ServerBridge, createServerBridge } from './chunk-D5USD2EX.js';
-export { COMPRESSED_BODY_MIN_BYTES, createHttpTransport, createInProcessTransport, deriveCarriesCircuitState, encodeJsonBody } from './chunk-QELZ6TEJ.js';
+export { CredentialExchangeError, CredentialVault } from './chunk-DFDNHVDW.js';
+export { InFlightCalls, untilAborted } from './chunk-MZKIL5IN.js';
+export { COMPRESSED_BODY_MIN_BYTES, SessionEndedError, TransportStatusError, createHttpTransport, createInProcessTransport, deriveCarriesCircuitState, encodeJsonBody } from './chunk-UD2CXYSJ.js';
 export { createChannelTransport, holdUntilServed, serveChannel } from './chunk-SKLMWHQD.js';
-export { createMemoryCircuitStore } from './chunk-ODJCZ27I.js';
-export { StateBook, createInitialTraitState, findInitialState, findMatchingTransitions, findTransition } from './chunk-Q2H75UYT.js';
+export { createMemoryCircuitStore } from './chunk-N7HYNKK6.js';
+export { StateBook, createInitialTraitState, findInitialState } from './chunk-A2JJT4GA.js';
 export { AwaitingRegistry } from './chunk-HC6ERSAH.js';
 import './chunk-LZIOTBFX.js';
-export { dispatchDeclaredInput } from './chunk-DYOJGLIX.js';
-export { dispatchInbound } from './chunk-2JU7Y4KU.js';
-import './chunk-MLKGABMK.js';
+export { dispatchDeclaredInput } from './chunk-LKWYCYX5.js';
+export { dispatchInbound } from './chunk-P2N6K2IV.js';
+export { createLocalFold, paintFrames, paintResponse, paintStates, traceResponse } from './chunk-QCJWPXLH.js';

package/dist/kernel/decode.d.ts

@@ -1,15 +1,13 @@
-import { HttpBody, HttpRequestWire, HttpResponseWire, OAuthAsk, ServerProgressWire, IoRequestWire, ResolveProgressWire } from '@almadar/core/kernel-wire';
-import { JsonValue } from '@almadar/core';
+import { NextWire, ServerProgressWire, ResolveProgressWire } from '@almadar/core/kernel-wire';
+export { decodeIoRequestWire as decodeRequest } from '@almadar/core/kernel-wire';
+import { FiredByOrbital } from './wire.js';
+import '@almadar/core';
 
-/** Decoders for what the kernel hands back as JSON: narrowed by checks, never cast. */
+/** Decoders for what the kernel hands back as JSON: the generated decoders of `@almadar/core/kernel-wire`, which throw naming the failing path. */
 
-declare function decodeHttpBody(value: JsonValue): HttpBody;
-declare function decodeHttpRequest(value: JsonValue): HttpRequestWire;
-declare function decodeHttpResponse(value: JsonValue): HttpResponseWire;
-declare function decodeRequest(value: JsonValue): IoRequestWire;
 declare function decodeProgress(json: string): ServerProgressWire;
+declare function decodeNext(json: string): NextWire | null;
 declare function decodeResolveProgress(json: string): ResolveProgressWire;
-/** The driver's `oauth` ask, decoded against the closed ask set before it reaches the host's store. */
-declare function decodeOAuthAsk(value: JsonValue | undefined): OAuthAsk;
+declare function decodeDueTicks(json: string): FiredByOrbital;
 
-export { decodeHttpBody, decodeHttpRequest, decodeHttpResponse, decodeOAuthAsk, decodeProgress, decodeRequest, decodeResolveProgress };
+export { decodeDueTicks, decodeNext, decodeProgress, decodeResolveProgress };

package/dist/kernel/decode.js

@@ -1,2 +1 @@
-export { decodeHttpBody, decodeHttpRequest, decodeHttpResponse, decodeOAuthAsk, decodeProgress, decodeRequest, decodeResolveProgress } from '../chunk-RBUMDYFS.js';
-import '../chunk-MLKGABMK.js';
+export { decodeDueTicks, decodeNext, decodeProgress, decodeIoRequestWire as decodeRequest, decodeResolveProgress } from '../chunk-X6W44WHO.js';

package/dist/kernel/engine.d.ts

@@ -1,14 +1,12 @@
-import { OrbitalSchema, MessageCatalogs, MountSeed, RowSetRef, RowQueryPage, OrbitalEventRequest, OrbitalEventResponse, EventStreamItem, UserContext } from '@almadar/core';
+import { OrbitalSchema, ExternalInput, InboundRoute, InboundAnswer, InboundDelivery, EventPayload, EventRequest, LiveBroadcastItem, MountSeed, PayloadField, JsonSchema, PayloadIssue, EntityRow, UserContext, RowSetRef, RowQueryPage, EventResponse, EventStreamItem, JsonValue } from '@almadar/core';
+import { ProgramSurface } from '@almadar/core/kernel-wire';
 import { KernelHostPorts, KernelAnswerScope } from './host.js';
-import { KernelModule, KernelServerHandle } from './wire.js';
+import { KernelModule, KernelServerHandle, FiredByOrbital } from './wire.js';
 import '../effects/in-flight-calls.js';
 import '../service/service-provider.js';
 import './program-effects.js';
-import './http.js';
-import './beacon.js';
-import '../credentials/store.js';
-import './decode.js';
-import '@almadar/core/kernel-wire';
+import './secret-ports.js';
+import '../credentials/vault.js';
 import './os-port.js';
 
 /**
@@ -17,20 +15,41 @@ import './os-port.js';
  * and nothing else. The continuation of a stopped dispatch never leaves the wasm instance.
  */
 
+type ContractAsk = <T>(schema: {
+    parse(input: ReturnType<typeof JSON.parse>): T;
+}, query: object) => T;
+declare function contractAnswers(ask: ContractAsk): {
+    findExternalInput(orbital: string, trait: string, event: string): ExternalInput | undefined;
+    findInbound(name: string): {
+        route: InboundRoute;
+    } | {
+        answer: InboundAnswer;
+    };
+    inboundPayload(route: InboundRoute, delivery: InboundDelivery, credential: string | null | undefined): EventPayload;
+    inboundAnswer(route: InboundRoute, emitted: readonly {
+        event: string;
+        payload?: EventPayload;
+    }[], error: string | undefined): InboundAnswer;
+    credentialUnset(credential: string): InboundAnswer;
+    dispatchFailed(message: string): InboundAnswer;
+};
+/** The declared-contract answers of a host holding no program: the kernel's own answers on an empty kernel. */
+type ProgramlessContract = ReturnType<typeof contractAnswers>;
 declare class KernelEngine {
     private readonly kernel;
     private readonly schemaJson;
     private readonly ports;
     private readonly entityTypes;
     private readonly preserveProgramContext;
+    private readonly lazyDir?;
     private handle;
-    private readonly lane;
-    private tickMount;
-    private messages;
-    constructor(kernel: KernelModule, schemaJson: string, ports: KernelHostPorts, entityTypes?: readonly string[], forkedFrom?: KernelServerHandle, providedHandle?: KernelServerHandle, preserveProgramContext?: boolean);
+    private readonly turns;
+    private tickRelayIntervalMs;
+    private stateful;
+    constructor(kernel: KernelModule, schemaJson: string, ports: KernelHostPorts, entityTypes?: readonly string[], forkedFrom?: KernelServerHandle, providedHandle?: KernelServerHandle, preserveProgramContext?: boolean, lazyDir?: string | undefined);
     /**
      * A kernel on the same program, registered once, holding none of this one's session: every trait at its initial
-     * state, no rows the kernel held, its locales and mounted ticks kept. A stateless host serves each request a
+     * state, no rows the kernel held, its mounted ticks kept. A stateless host serves each request a
      * fork (EXEC-DIST-5), `ports` answering it.
      */
     fork(ports?: KernelHostPorts): KernelEngine;
@@ -38,57 +57,139 @@ declare class KernelEngine {
     /** A server over the host's ports. */
     private openServer;
     private declare;
-    static open(kernel: KernelModule, schema: OrbitalSchema, ports: KernelHostPorts): KernelEngine;
+    /** The contract answers for a host with no program registered yet: the kernel's, asked with no program. */
+    static withoutProgram(kernel: KernelModule): ProgramlessContract;
+    static open(kernel: KernelModule, schema: OrbitalSchema, ports: KernelHostPorts, lazyDir?: string): KernelEngine;
     /** A fresh kernel on the same program: every trait back at its initial state. */
     reset(): void;
     private managedProgram;
     /** The program whose declared credentials this kernel's credential effects manage beside its own (a console's app). */
     setManagedProgram(program: OrbitalSchema): void;
-    /** The program's declared locales and merged catalogs (a lazy page's behavior contributes its namespaced keys). */
-    setMessages(locales: readonly string[], catalogs: MessageCatalogs): void;
-    /** The traits some client has mounted: a tick that is not `[background]` fires only for these. */
-    setTickMount(traits: string[]): void;
+    /** `client` mounted `traits` of `orbital`: their mount-scoped ticks fire while any client holds them. A request derives this itself; this is for a mount made outside a request. */
+    mountClient(client: string, orbital: string, traits: readonly string[]): void;
+    unmountClient(client: string, orbital: string, traits: readonly string[]): void;
+    /** `client` is gone: everything it mounted is released. */
+    releaseClient(client: string): void;
+    /** This host holds the circuit state: the kernel takes a client's copy of it only on a delegated leg and refuses any other request carrying one. */
+    setStateful(): void;
+    /** Whether the program declares any tick: the host runs its timer only then. */
+    declaresTicks(): boolean;
+    /** Queue a tick-stamped dispatch for the coalesced peer relay; the ms after which to flush when it opened a window. */
+    relayTick(orbital: string, request: EventRequest): number | undefined;
+    /** The relay window's length in ms; the kernel's default is 50. */
+    setTickRelayInterval(intervalMs: number): void;
+    /** Every item queued since the window opened, in first-arrival order; the window closes. */
+    flushTickRelay(): LiveBroadcastItem[];
+    /** One pass of the kernel's tick clock: the ticks due at monotonic `nowMs` that this server runs (`[background]` ticks, and those of a mounted trait), keyed by the orbital each `runTick` request is addressed to. */
+    tickPass(nowMs: number): FiredByOrbital;
+    /** Stop the kernel's tick clock; its phase is kept. */
+    tickPause(): void;
+    /** Restart the kernel's tick clock; the paused span is never counted. */
+    tickResume(): void;
+    tickPaused(): boolean;
     /** What this host mounts when it starts: the kernel's boot mounts for the side it serves (EXEC-ENDPOINT-3). */
     bootMounts(side: 'server' | 'process'): MountSeed[];
     /** What mounts when a client opens `routePath` (EXEC-ENDPOINT-3). */
     routeMounts(routePath: string): MountSeed[];
-    /** Mock-seed the `[runtime]` entities the kernel holds itself, owner columns stamped with `viewerId`. */
-    seedRuntimeMock(viewerId: string | undefined): void;
     dispose(): void;
-    liveItemDelivered(item: object, viewer: object | null, clientId?: string): boolean;
-    /** `OsGrants::allows` over the grants of the program this kernel runs. */
-    osAllows(requirementJson: string): boolean;
+    private readonly answers;
+    private contract;
+    /** Every external input the program declares: what an outside client may send which trait. */
+    externalInputs(): ExternalInput[];
+    /** What the kernel holds of every trait of the program, in name order, and the browser-stored entities. */
+    programSurface(): ProgramSurface;
+    /** The entities a provider acting as the caller may read. */
+    readableEntities(): string[];
+    /** The declared input of `trait.event` in `orbital`, when there is one. */
+    findExternalInput(orbital: string, trait: string, event: string): ExternalInput | undefined;
+    /** The declared input a `listens`-addressed event names from `caller`'s position (`EVENT`, `Trait.EVENT`, `Orbital.Trait.EVENT`), when there is one. */
+    findInputByAddress(address: string, caller: {
+        orbital: string;
+        trait: string;
+    }): ExternalInput | undefined;
+    /** A declared payload as the JSON Schema of one object: what a tool-calling model fills. */
+    payloadJsonSchema(fields: readonly PayloadField[]): JsonSchema;
+    /** The ways `value` misses the declared payload `fields`. */
+    payloadIssues(fields: readonly PayloadField[], value: EventPayload): PayloadIssue[];
+    /** The route a hook name is delivered to, or the answer to write for a hook the program does not serve. */
+    findInbound(name: string): {
+        route: InboundRoute;
+    } | {
+        answer: InboundAnswer;
+    };
+    /** The trait that handles `event` as an inbound hook in `orbital`, with the refusal message, when a client-facing request names it. */
+    inboundOnly(orbital: string, trait: string | undefined, event: string): {
+        trait: string;
+        message: string;
+    } | undefined;
+    /** The payload an inbound event is delivered with. */
+    inboundPayload(route: InboundRoute, delivery: InboundDelivery, credential: string | null | undefined): EventPayload;
+    /** The HTTP answer a finished dispatch produced for `route`. */
+    inboundAnswer(route: InboundRoute, emitted: readonly {
+        event: string;
+        payload?: EventPayload;
+    }[], error: string | undefined): InboundAnswer;
+    /** The answer for a route whose credential the host holds no value for. */
+    credentialUnset(credential: string): InboundAnswer;
+    /** The answer for a delivery whose dispatch failed. */
+    dispatchFailed(message: string): InboundAnswer;
+    /** The name of the program's `[identity]` entity, when it declares one. */
+    identityEntity(): string | undefined;
+    /** The orbital that declares `entity` inline. */
+    entityOwnerOrbital(entity: string): string | undefined;
+    /** `rows` of `entity` as `user` reads them: narrowed by the entity's declared `@read`, which the kernel evaluates with `@user` bound to the viewer. */
+    readRows(entity: string, rows: readonly EntityRow[], user: UserContext | undefined): EntityRow[];
+    liveItemDelivered(item: object, clientId?: string): boolean;
+    /** `OsGrants::allows` over the grants of `orbital` in the program this kernel runs (the app level alone with no orbital). */
+    osAllows(requirementJson: string, orbital?: string): boolean;
+    /** Whether `url`'s origin is declared in the program's `egress` (the kernel's rule). */
+    egressAllows(url: string): boolean;
     /** Place the program's anchored grants and arguments under the host's anchors. */
     setOsAnchors(anchorsJson: string): string;
     /** An `os/` call's arguments with its anchored parts resolved under the host's anchors. */
     osResolveArgs(op: string, argsJson: string): string;
+    tlsComplete(key: string, outcomeJson: string): string;
+    /** A live stream of `client`'s session opened (EXEC-DIST-9); the id closes it. */
+    openSessionStream(client: string): number;
+    /** The live stream `id` dropped: the kernel frees the session once its streams have all dropped and it is quiet. */
+    closeSessionStream(id: number): boolean;
     /** The current state of a trait instance, `''` when it has none. */
     stateOf(traitName: string, entityId?: string): string;
     /**
-     * `reference` resolved for `scope.user` against the host-answered store (EXEC-RENDER-3): the rows that still
-     * match its query and the viewer's `@read` in the reference's order, a missing or hidden row omitted, and `total`
+     * `reference` resolved for the identity `scope.originClientId`'s session bound (the anonymous viewer with none) against the host-answered store (EXEC-RENDER-3): the rows that still
+     * match its query and that identity's `@read` in the reference's order, a missing or hidden row omitted, and `total`
      * re-counted (a `total: none` reference is not re-counted: the total is the resolved window). Each read the
      * kernel makes is answered here, as in `evaluate`.
      */
     resolveRows(reference: RowSetRef, scope: KernelAnswerScope): Promise<RowQueryPage>;
-    /** Run `request` against `orbital`: start it, answer every request the kernel asks for, resume until done. */
-    evaluate(orbital: string, request: OrbitalEventRequest, scope: KernelAnswerScope): Promise<OrbitalEventResponse>;
+    /**
+     * Run `request` against `orbital`. The kernel orders every start and every resumption (EXEC-CONC-2): while another
+     * dispatch holds the lane it answers `queued` and runs the work itself once the lane frees; this host only answers
+     * what each dispatch asks.
+     */
+    evaluate(orbital: string, request: EventRequest, scope: KernelAnswerScope): Promise<EventResponse>;
+    /** The kernel's answer to a start or resume, once it has run: at once, or when the kernel takes it from its queue. */
+    private ran;
+    private running;
+    /** Run each piece of queued work that can run now, in the kernel's order, handing each to the dispatch it continues. */
+    private runQueued;
 }
 /** What `evaluateOrbitalEvent` needs to run a request on the kernel instead of the JS composition. */
 interface KernelEvaluation {
     engine: KernelEngine;
     /** The orbital the request is addressed to. */
     orbital: string;
-    outsideEventQueue?: <T>(work: () => Promise<T>) => Promise<T>;
     onStream?: (item: EventStreamItem) => void;
 }
 /**
- * The request as the kernel takes it: the viewer and locale the host resolved, the `_targetTrait` sidecar
+ * The request as the kernel takes it: the locale the host resolved, the `_targetTrait` sidecar
  * promoted to `targetTrait`, and the `_activeTraits` sidecar dropped (the kernel's mounted set is explicit,
  * not carried per request).
  */
-declare function kernelRequest(request: OrbitalEventRequest, user: UserContext | undefined, locale: string | undefined): OrbitalEventRequest;
-declare function evaluateOnKernel(kernel: KernelEvaluation, request: OrbitalEventRequest, user: UserContext | undefined, locale: string | undefined): Promise<OrbitalEventResponse>;
+declare function kernelRequest(request: EventRequest & {
+    user?: JsonValue;
+}, locale: string | undefined): EventRequest;
+declare function evaluateOnKernel(kernel: KernelEvaluation, request: EventRequest, locale: string | undefined): Promise<EventResponse>;
 
 export { KernelEngine, evaluateOnKernel, kernelRequest };
-export type { KernelEvaluation };
+export type { KernelEvaluation, ProgramlessContract };

package/dist/kernel/engine.js

@@ -1,11 +1,9 @@
-export { KernelEngine, evaluateOnKernel, kernelRequest } from '../chunk-D4XJTBLB.js';
-import '../chunk-NATGCIVM.js';
-import '../chunk-HNOAZWFH.js';
-import '../chunk-53IPZXDP.js';
-import '../chunk-YO4LWS3I.js';
-import '../chunk-MZKIL5IN.js';
+export { KernelEngine, evaluateOnKernel, kernelRequest } from '../chunk-I3TKINSO.js';
+import '../chunk-NU6LVKGS.js';
+import '../chunk-X6W44WHO.js';
+import '../chunk-7WB6VWRK.js';
+import '../chunk-WGCWJOT2.js';
+import '../chunk-ZUSM4VW4.js';
 import '../chunk-FWA5K7Q2.js';
-import '../chunk-VMOBW7RK.js';
-import '../chunk-RBUMDYFS.js';
 import '../chunk-HLOUDLPI.js';
-import '../chunk-MLKGABMK.js';
+import '../chunk-MZKIL5IN.js';

package/dist/kernel/frame-applier.d.ts

@@ -1,5 +1,5 @@
-import { FiredTick, FrameWire, RoutedLeg } from '@almadar/core/kernel-wire';
-import { OrbitalEventResponse, JsonValue } from '@almadar/core';
+import { FrameWire, RoutedLeg } from '@almadar/core/kernel-wire';
+import { EventResponse } from '@almadar/core';
 import { ClientKernelOutcome, LocalFoldKernel } from '../client/client-kernel.js';
 import '../client/circuit-store.js';
 import '../client/awaiting.js';
@@ -16,20 +16,21 @@ import '../client/trait-types.js';
  * never delays the next frame.
  */
 
-declare function isFrameWire(value: JsonValue): value is JsonValue & FrameWire;
 /** `frame()`'s JSON; `undefined` (no tick due) decodes to `undefined`. */
 declare function decodeFrame(json: string | undefined): FrameWire | undefined;
-type TickEffects = Pick<OrbitalEventResponse, 'clientEffects' | 'clientEffectsByTrait'>;
+type TickEffects = Pick<EventResponse, 'clientEffectsByTrait'>;
 type FrameDispatch = FrameWire['dispatches'][number];
 /** The host transport's side of a frame: posts what a fired tick owes and folds the answer back through the kernel. */
 interface FramePostPort {
     /** Posts one dispatch's server legs (or stateful leg); resolves to what the server's fold added. */
     postDispatch(dispatch: FrameDispatch): Promise<TickEffects>;
     /** Sends a leg the kernel routed to the browser store; `frameResponse` is the frame's aggregate response. */
-    sendBrowserLeg(leg: RoutedLeg, frameResponse: OrbitalEventResponse): Promise<TickEffects>;
+    sendBrowserLeg(leg: RoutedLeg, frameResponse: EventResponse): Promise<TickEffects>;
 }
 interface FrameApplied {
-    fired: FiredTick[];
+    fired: FrameWire['fired'];
+    /** How many ticks fired, across every orbital. */
+    firedCount: number;
     folded: number;
     browserLegs: number;
     droppedServerEffects: number;
@@ -39,5 +40,5 @@ interface FrameApplied {
 }
 declare function applyFrame(json: string | undefined, kernel: LocalFoldKernel, post: FramePostPort | undefined): Promise<FrameApplied>;
 
-export { applyFrame, decodeFrame, isFrameWire };
+export { applyFrame, decodeFrame };
 export type { FrameApplied, FrameDispatch, FramePostPort, TickEffects };

package/dist/kernel/frame-applier.js

@@ -1,2 +1 @@
-export { applyFrame, decodeFrame, isFrameWire } from '../chunk-4J2QEIUV.js';
-import '../chunk-MLKGABMK.js';
+export { applyFrame, decodeFrame } from '../chunk-NTFQ36UN.js';