@almadar/shell-runtime 0.1.0 → 1.1.0

package/dist/client/EventTransport.d.ts

@@ -1,4 +1,4 @@
-import { OrbitalSchema, OrbitalEventRequest, OrbitalEventResponse, RowSetRef, RowQueryPage, EmittedEvent, ServerTopology } from '@almadar/core';
+import { OrbitalSchema, EventRequest, EventResponse, RowSetRef, RowQueryPage, EmittedEvent, ServerTopology } from '@almadar/core';
 
 /**
  * EventTransport — the client → orbital event transport port (plan P5,
@@ -11,8 +11,8 @@ import { OrbitalSchema, OrbitalEventRequest, OrbitalEventResponse, RowSetRef, Ro
  * be switched onto this port at the W5b build checkpoint (see the plan);
  * until then this file has no consumers outside this package.
  *
- * The wire shapes are `@almadar/core`'s existing `OrbitalEventRequest` /
- * `OrbitalEventResponse` — no shadow types.
+ * The wire shapes are `@almadar/core`'s existing `EventRequest` /
+ * `EventResponse` — no shadow types.
  *
  * @packageDocumentation
  */
@@ -48,7 +48,7 @@ interface EventTransport {
     register(schema: OrbitalSchema): Promise<EventTransportRegisterResult>;
     unregister(): Promise<void>;
     /** Play one event through the orbital named `orbitalName`. */
-    send(orbitalName: string, request: OrbitalEventRequest): Promise<OrbitalEventResponse>;
+    send(orbitalName: string, request: EventRequest): Promise<EventResponse>;
     /**
      * A row-set reference resolved by the host that holds the rows, for the viewer the transport is signed in as (the
      * host applies `@read`): the rows that still match, in the reference's order. Absent when the transport has no
@@ -78,7 +78,7 @@ interface EventTransport {
     subscribeHostDispatches?(onDispatch: HostDispatchListener, params?: Record<string, string>): () => void;
 }
 /** A dispatch the host ran on its own, with its result. */
-type HostDispatchListener = (orbitalName: string, request: OrbitalEventRequest, response: OrbitalEventResponse) => void;
+type HostDispatchListener = (orbitalName: string, request: EventRequest, response: EventResponse) => void;
 /**
  * Supplies the bearer token the hosting server authenticates with. Resolved
  * per request (tokens expire); `undefined` sends the request unauthenticated
@@ -86,6 +86,22 @@ type HostDispatchListener = (orbitalName: string, request: OrbitalEventRequest,
  * from `@almadar/ui`'s `providers/ServerBridge.tsx`.
  */
 type AccessTokenProvider = () => Promise<string | undefined>;
+/** The host freed this client's session after its live stream dropped: mount again with the frames the client holds (EXEC-DIST-9). */
+declare class SessionEndedError extends Error {
+    constructor(message: string);
+}
+/** The host answered a dispatch with a non-2xx status: a transport or auth failure, never an event response. */
+declare class TransportStatusError extends Error {
+    readonly status: number;
+    readonly bodyText: string;
+    /** The `{ error, code }` body when the answer carried one. */
+    readonly refusal: RefusalBody | undefined;
+    constructor(status: number, bodyText: string);
+}
+interface RefusalBody {
+    code?: string;
+    error?: string;
+}
 interface HttpTransportOptions {
     serverUrl: string;
     getAccessToken?: AccessTokenProvider;
@@ -108,7 +124,7 @@ declare function encodeJsonBody(value: object, compress: boolean): Promise<{
 /** HTTP transport — POSTs to a server speaking the canonical playground-runtime contract. */
 declare function createHttpTransport(options: HttpTransportOptions): EventTransport;
 /** Evaluates one event against an orbital with no wire in between — the unified `evaluateOrbitalEvent` (a separate, in-progress unit) is a valid `OrbitalEvaluator`. */
-type OrbitalEvaluator = (orbitalName: string, request: OrbitalEventRequest) => Promise<OrbitalEventResponse>;
+type OrbitalEvaluator = (orbitalName: string, request: EventRequest) => Promise<EventResponse>;
 interface InProcessTransportOptions {
     onRegister?: (schema: OrbitalSchema) => Promise<void> | void;
     onUnregister?: () => Promise<void> | void;
@@ -127,5 +143,5 @@ interface InProcessTransportOptions {
 /** In-process transport — the evaluator is INJECTED (e.g. the unified `evaluateOrbitalEvent`, owned elsewhere). */
 declare function createInProcessTransport(evaluate: OrbitalEvaluator, options?: InProcessTransportOptions): EventTransport;
 
-export { COMPRESSED_BODY_MIN_BYTES, createHttpTransport, createInProcessTransport, deriveCarriesCircuitState, encodeJsonBody };
+export { COMPRESSED_BODY_MIN_BYTES, SessionEndedError, TransportStatusError, createHttpTransport, createInProcessTransport, deriveCarriesCircuitState, encodeJsonBody };
 export type { AccessTokenProvider, EventTransport, EventTransportRegisterResult, HostDispatchListener, HttpTransportOptions, InProcessTransportOptions, OrbitalEvaluator, PushTarget };

package/dist/client/EventTransport.js

@@ -1,2 +1 @@
-export { COMPRESSED_BODY_MIN_BYTES, createHttpTransport, createInProcessTransport, deriveCarriesCircuitState, encodeJsonBody } from '../chunk-QELZ6TEJ.js';
-import '../chunk-MLKGABMK.js';
+export { COMPRESSED_BODY_MIN_BYTES, SessionEndedError, TransportStatusError, createHttpTransport, createInProcessTransport, deriveCarriesCircuitState, encodeJsonBody } from '../chunk-UD2CXYSJ.js';

package/dist/client/awaiting.js

@@ -1,2 +1 @@
 export { AwaitingRegistry } from '../chunk-HC6ERSAH.js';
-import '../chunk-MLKGABMK.js';

package/dist/client/channel-transport.d.ts

@@ -1,4 +1,4 @@
-import { OrbitalEventRequest, OrbitalEventResponse, EmittedEvent } from '@almadar/core';
+import { EventRequest, EventResponse, EmittedEvent } from '@almadar/core';
 import { PushTarget, EventTransport } from './EventTransport.js';
 
 /**
@@ -20,11 +20,11 @@ type ChannelMessage = {
     almadarChannel: 'send';
     id: number;
     orbitalName: string;
-    request: OrbitalEventRequest;
+    request: EventRequest;
 } | {
     almadarChannel: 'reply';
     id: number;
-    response: OrbitalEventResponse;
+    response: EventResponse;
 } | {
     almadarChannel: 'push';
     emitted: EmittedEvent;
@@ -32,8 +32,8 @@ type ChannelMessage = {
 } | {
     almadarChannel: 'dispatched';
     orbitalName: string;
-    request: OrbitalEventRequest;
-    response: OrbitalEventResponse;
+    request: EventRequest;
+    response: EventResponse;
 };
 interface TransportChannel {
     post(message: ChannelMessage): void;
@@ -51,7 +51,7 @@ interface ServedChannel {
     /** Push a host-side event to the view (e.g. one a declared input caused while no view was asking). */
     push(emitted: EmittedEvent, target: PushTarget): void;
     /** Send the view the result of a dispatch the host ran on its own. */
-    pushDispatch(orbitalName: string, request: OrbitalEventRequest, response: OrbitalEventResponse): void;
+    pushDispatch(orbitalName: string, request: EventRequest, response: EventResponse): void;
     stop(): void;
 }
 /** The host half: serve `transport` on `channel` for the program named `schemaName`. */

package/dist/client/channel-transport.js

@@ -1,2 +1 @@
 export { createChannelTransport, holdUntilServed, serveChannel } from '../chunk-SKLMWHQD.js';
-import '../chunk-MLKGABMK.js';

package/dist/client/circuit-store.d.ts

@@ -1,8 +1,8 @@
 import { AwaitingRegistry } from './awaiting.js';
 import { StateBook } from './state-book.js';
-import { EntityRow, EventPayload, TraitDefinition } from '@almadar/core';
+import { EntityRow, TraitDefinition } from '@almadar/core';
+import { FrameDelta } from '@almadar/core/kernel-wire';
 import { RollbackCause, TransitionObserver } from './trait-types.js';
-import '@almadar/core/kernel-wire';
 
 /**
  * CircuitStore — P2, `docs/Almadar_Runtime_Stateless_Stateful_PLAN.md` §4.2.
@@ -28,14 +28,25 @@ interface TraitSnapshot {
     state: string;
     frame: EntityRow | undefined;
 }
+/**
+ * What a frame delta did to the store: `applied`; `stale` (its version is behind the one painted: dropped, so an
+ * old repaint never overwrites a newer value); `gap` (it starts past the painted version: nothing applied, the
+ * caller asks the kernel for `framesSince(frameVersion)` and applies the snapshot).
+ */
+type FrameOutcome = 'applied' | 'stale' | 'gap';
 interface CircuitStore {
     /** Each trait's state as the kernel last reported it. */
     readonly states: StateBook;
     /** The entity-frame map (`(set @entity.X)` writes), keyed by
      *  `IndexedTrait.frameKey`. */
     readonly frames: Map<string, EntityRow>;
-    /** Embedded child → the payload its composer last composed it with (sticky `@callsitePayload`). */
-    readonly callsitePayloads: Map<string, EventPayload>;
+    /** The version of the kernel's frame record this store has painted. */
+    readonly frameVersion: number;
+    /**
+     * Paint the kernel's frame delta (EXEC-DIST-7): ops land only at the version they start from, and a snapshot
+     * (`from` 0 with a leading `clear`) always lands. The store merges nothing by its own rules.
+     */
+    applyFrames(delta: FrameDelta): FrameOutcome;
     /** Traits awaiting a server round trip (per-trait subscriptions; see `AwaitingRegistry`). */
     readonly awaiting: AwaitingRegistry;
     /**
@@ -73,4 +84,4 @@ interface CircuitStore {
 declare function createMemoryCircuitStore(traits?: readonly TraitDefinition[], observer?: TransitionObserver): CircuitStore;
 
 export { createMemoryCircuitStore };
-export type { CircuitStore, TraitSnapshot };
+export type { CircuitStore, FrameOutcome, TraitSnapshot };

package/dist/client/circuit-store.js

@@ -1,4 +1,3 @@
-export { createMemoryCircuitStore } from '../chunk-ODJCZ27I.js';
-import '../chunk-Q2H75UYT.js';
+export { createMemoryCircuitStore } from '../chunk-N7HYNKK6.js';
+import '../chunk-A2JJT4GA.js';
 import '../chunk-HC6ERSAH.js';
-import '../chunk-MLKGABMK.js';

package/dist/client/client-kernel.d.ts

@@ -1,4 +1,4 @@
-import { OrbitalEventResponse, OrbitalEventRequest, DispatchMode, MountSeed, TransitionRejection } from '@almadar/core';
+import { EventResponse, EventRequest, DispatchMode, EmittedEvent, MountSeed, TransitionRejection } from '@almadar/core';
 import { CircuitStore } from './circuit-store.js';
 import './awaiting.js';
 import './state-book.js';
@@ -12,7 +12,7 @@ import '@almadar/core/kernel-wire';
 
 /** One `ClientKernel.dispatch()` call's settled outcome. */
 interface ClientKernelOutcome {
-    response: OrbitalEventResponse;
+    response: EventResponse;
     mode: DispatchMode;
     /**
      * True when `onLocal` already received the local arm's response (the leg
@@ -20,21 +20,25 @@ interface ClientKernelOutcome {
      * added — the local ones were painted before the round trip.
      */
     localPainted?: boolean;
-    serverEffects?: Pick<OrbitalEventResponse, 'clientEffects' | 'clientEffectsByTrait'>;
+    serverEffects?: Pick<EventResponse, 'clientEffectsByTrait'>;
     /**
      * A tick-lane dispatch: what its post's fold added on top of the local run,
      * once the post settles (undefined when a newer firing superseded it). The
      * drain never waits on it; the caller paints it when it lands.
      */
-    tickSettled?: Promise<Pick<OrbitalEventResponse, 'clientEffects' | 'clientEffectsByTrait'> | undefined>;
+    tickSettled?: Promise<Pick<EventResponse, 'clientEffectsByTrait'> | undefined>;
 }
 /** Per-dispatch hooks: `onLocal` sees the locally-evaluated response before its server leg is sent. */
 interface ClientDispatchHooks {
-    onLocal?: (local: OrbitalEventResponse) => void;
+    onLocal?: (local: EventResponse) => void;
 }
 /** Mount hooks: `onLocal` sees each seed's local response before the mount leg is sent. */
 interface ClientMountHooks {
-    onLocal?: (trait: string, local: OrbitalEventResponse) => void;
+    onLocal?: (trait: string, local: EventResponse) => void;
+}
+/** What the kernel answered to an emit that entered from outside it: the cascade it ran, with its paint and its emits. */
+interface ClientEmitOutcome {
+    response: EventResponse;
 }
 /** One `ClientKernel.dispatchMount()` call's settled outcome. */
 interface ClientMountOutcome {
@@ -43,7 +47,7 @@ interface ClientMountOutcome {
         trait: string;
         event: string;
         mode: DispatchMode;
-        local: OrbitalEventResponse;
+        local: EventResponse;
     }>;
     /** Whether any mount leg was posted. */
     posted: boolean;
@@ -52,8 +56,8 @@ interface ClientMountOutcome {
     /** Per-trait effect failures the posted legs reported (`effect-failed`). */
     rejections: TransitionRejection[];
     /** What the posted legs added: the server's effects and the emits the client had not run. */
-    serverEffects: Pick<OrbitalEventResponse, 'clientEffects' | 'clientEffectsByTrait'>;
-    emittedEvents: OrbitalEventResponse['emittedEvents'];
+    serverEffects: Pick<EventResponse, 'clientEffectsByTrait'>;
+    emittedEvents: EventResponse['emittedEvents'];
 }
 interface ClientKernel {
     /**
@@ -78,25 +82,42 @@ interface ClientKernel {
      * out on a per-(event, trait) newest-wins lane outside the FIFO, with no
      * rollback, so a tick round trip never delays a command.
      */
-    dispatch(request: OrbitalEventRequest, hooks?: ClientDispatchHooks): Promise<ClientKernelOutcome>;
+    dispatch(request: EventRequest, hooks?: ClientDispatchHooks): Promise<ClientKernelOutcome>;
     /**
      * Dispatch a server-pushed live message of THIS client's own running
      * request (`PushTarget` `origin`). Outside the FIFO, because the request
      * producing it is the entry the FIFO is waiting on; progress dispatches run
      * one at a time, in push order, and never mark traits awaiting.
      */
-    dispatchProgress(request: OrbitalEventRequest): Promise<ClientKernelOutcome>;
+    dispatchProgress(request: EventRequest): Promise<ClientKernelOutcome>;
     /**
      * Show the result of a dispatch the host ran on its own (`EventTransport.subscribeHostDispatches`):
      * the host's states, rows and render land in this view. Nothing runs here and nothing is posted,
      * so the dispatch's effects happen once, on the host. Host dispatches fold one at a time, in order.
      */
-    foldHostDispatch(request: OrbitalEventRequest, response: OrbitalEventResponse): Promise<ClientKernelOutcome>;
+    foldHostDispatch(request: EventRequest, response: EventResponse): Promise<ClientKernelOutcome>;
+    /**
+     * Hand the kernel an emit that happened outside it (a bus emit with no dispatch behind it, a server push). The kernel
+     * decides who hears it: the emitter's own arm and every declared `listens` route (EXEC-DISP). Nothing is routed here.
+     */
+    deliverEmit(emitted: EmittedEvent): Promise<ClientEmitOutcome>;
+    /**
+     * Hand the kernel an emit another client made (a server push): it reaches its declared `listens` routes only, guards and
+     * payload mapping included. The emitter's own arm does not run here, and neither the emit's `dispatched` stamp nor the
+     * host's fan-out narrows who hears it.
+     */
+    deliverToListeners(emitted: EmittedEvent): Promise<ClientEmitOutcome>;
+    /**
+     * Hand the kernel the live message of this client's own running call, whose emitter already ran its own arm as that call's
+     * progress dispatch: it reaches its declared `listens` routes like `deliverToListeners`, except that a route back to the
+     * emitter under the emitted name is that arm again and does not run twice.
+     */
+    deliverOriginEmit(emitted: EmittedEvent): Promise<ClientEmitOutcome>;
     /**
      * Mount several traits in ONE FIFO entry: every seed's local arm runs and
      * paints, then one `mount` leg per owning orbital is posted and folded.
      */
-    dispatchMount(seeds: readonly MountSeed[], hooks?: ClientMountHooks, base?: Pick<OrbitalEventRequest, 'payload' | 'entityId' | 'clientId' | 'locale'>): Promise<ClientMountOutcome>;
+    dispatchMount(seeds: readonly MountSeed[], hooks?: ClientMountHooks, base?: Pick<EventRequest, 'payload' | 'entityId' | 'clientId' | 'locale' | 'route'>): Promise<ClientMountOutcome>;
     readonly store: CircuitStore;
 }
 /**
@@ -107,7 +128,7 @@ interface ClientKernel {
  * observer; a frame's aggregate response carries tick hops the kernel's tick observer already reported. `notify` wakes the store's subscribers after the fold; a frame folds several responses and notifies on the last only.
  */
 interface LocalFoldKernel {
-    foldLocalResponse(response: OrbitalEventResponse, traceHops: boolean, notify: boolean): Promise<void>;
+    foldLocalResponse(response: EventResponse, traceHops: boolean, notify: boolean): Promise<void>;
 }
 
-export type { ClientDispatchHooks, ClientKernel, ClientKernelOutcome, ClientMountHooks, ClientMountOutcome, LocalFoldKernel };
+export type { ClientDispatchHooks, ClientEmitOutcome, ClientKernel, ClientKernelOutcome, ClientMountHooks, ClientMountOutcome, LocalFoldKernel };

package/dist/client/declared-input-dispatch.d.ts

@@ -1,5 +1,22 @@
-import { OrbitalSchema, ExternalInputRequest, OrbitalEventRequest, OrbitalEventResponse } from '@almadar/core';
+import { ExternalInputRequest, EventRequest, EventResponse } from '@almadar/core';
+import { KernelEngine } from '../kernel/engine.js';
+import '@almadar/core/kernel-wire';
+import '../kernel/host.js';
+import '../effects/in-flight-calls.js';
+import '../service/service-provider.js';
+import '../kernel/program-effects.js';
+import '../kernel/secret-ports.js';
+import '../credentials/vault.js';
+import '../kernel/wire.js';
+import '../kernel/os-port.js';
 
-declare function dispatchDeclaredInput(schema: OrbitalSchema | null | undefined, orbitalName: string, request: ExternalInputRequest, send: (orbitalName: string, request: OrbitalEventRequest) => Promise<OrbitalEventResponse>): Promise<OrbitalEventResponse>;
+/**
+ * The dispatcher for declared external inputs. The server runtime and the in-process host (a
+ * browser extension's worker) both route outside-client inputs through it: the kernel says whether the
+ * input is declared, an undeclared one is refused identically everywhere and a declared one is an ordinary
+ * event addressed to its trait.
+ */
+
+declare function dispatchDeclaredInput(contract: Pick<KernelEngine, 'findExternalInput'>, orbitalName: string, request: ExternalInputRequest, send: (orbitalName: string, request: EventRequest) => Promise<EventResponse>): Promise<EventResponse>;
 
 export { dispatchDeclaredInput };

package/dist/client/declared-input-dispatch.js

@@ -1,2 +1 @@
-export { dispatchDeclaredInput } from '../chunk-DYOJGLIX.js';
-import '../chunk-MLKGABMK.js';
+export { dispatchDeclaredInput } from '../chunk-LKWYCYX5.js';

package/dist/client/inbound-dispatch.d.ts

@@ -1,5 +1,24 @@
-import { OrbitalSchema, InboundDelivery, OrbitalEventRequest, OrbitalEventResponse, InboundAnswer } from '@almadar/core';
+import { InboundDelivery, EventRequest, EventResponse, InboundAnswer } from '@almadar/core';
+import { KernelEngine } from '../kernel/engine.js';
+import '@almadar/core/kernel-wire';
+import '../kernel/host.js';
+import '../effects/in-flight-calls.js';
+import '../service/service-provider.js';
+import '../kernel/program-effects.js';
+import '../kernel/secret-ports.js';
+import '../credentials/vault.js';
+import '../kernel/wire.js';
+import '../kernel/os-port.js';
 
-declare function dispatchInbound(schema: OrbitalSchema | null | undefined, name: string, delivery: InboundDelivery, send: (orbitalName: string, request: OrbitalEventRequest) => Promise<OrbitalEventResponse>, credential: (name: string) => Promise<string | null | undefined>): Promise<InboundAnswer>;
+/**
+ * The dispatcher for inbound deliveries (EXEC-INBOUND-1). A host carries `{name, headers,
+ * rawBody}` from `/api/hooks/<name>`; the kernel decides whether the name is served, what payload the
+ * handler event is delivered with and what answer the handler's emit of its `answers` event is; this
+ * delivers the event through the host's own dispatch and writes what the kernel said.
+ */
+
+type InboundContract = Pick<KernelEngine, 'findInbound' | 'inboundPayload' | 'inboundAnswer' | 'credentialUnset' | 'dispatchFailed'>;
+declare function dispatchInbound(contract: InboundContract, name: string, delivery: InboundDelivery, send: (orbitalName: string, request: EventRequest) => Promise<EventResponse>, credential: (name: string) => Promise<string | null | undefined>): Promise<InboundAnswer>;
 
 export { dispatchInbound };
+export type { InboundContract };

package/dist/client/inbound-dispatch.js

@@ -1,2 +1 @@
-export { dispatchInbound } from '../chunk-2JU7Y4KU.js';
-import '../chunk-MLKGABMK.js';
+export { dispatchInbound } from '../chunk-P2N6K2IV.js';

package/dist/client/local-fold.d.ts

@@ -1,26 +1,33 @@
-import { OrbitalEventResponse } from '@almadar/core';
+import { EventResponse } from '@almadar/core';
+import { FrameDelta } from '@almadar/core/kernel-wire';
 import { LocalFoldKernel } from './client-kernel.js';
 import { CircuitStore } from './circuit-store.js';
 import { TransitionObserver } from './trait-types.js';
 import './awaiting.js';
 import './state-book.js';
-import '@almadar/core/kernel-wire';
 
 /**
  * The view's side of a dispatch the in-process kernel already ran: report its executed hops to the observer,
- * mirror its states, rows and sticky callsite payloads into the `CircuitStore`, then notify subscribers.
+ * paint its states, frame delta and sticky callsite payloads into the `CircuitStore`, then notify subscribers.
  * One implementation for every response the kernel produces (a dispatch, a mount seed, a posted leg's fold,
  * a tick frame).
  */
 
-declare function mirrorResponse(store: CircuitStore, frameKeyOf: (trait: string) => string | undefined, response: OrbitalEventResponse): void;
-declare function traceResponse(observer: TransitionObserver | undefined, response: OrbitalEventResponse): void;
+/** A snapshot of the kernel's frames for a painter at `since` (the kernel's `framesSince`). */
+type FramesSince = (since: number) => FrameDelta;
+/** Paint a response's states. Rows are the kernel's frame delta, painted by [`paintFrames`]. */
+declare function paintStates(store: CircuitStore, response: EventResponse): void;
+/** Paint the kernel's frame delta; on a version gap, ask the kernel for the snapshot and paint that. */
+declare function paintFrames(store: CircuitStore, delta: FrameDelta | undefined, framesSince: FramesSince): void;
+/** Paint a response the in-process kernel produced: its states, payloads and frames. */
+declare function paintResponse(store: CircuitStore, framesSince: FramesSince, response: EventResponse): void;
+declare function traceResponse(observer: TransitionObserver | undefined, response: EventResponse): void;
 interface LocalFoldOptions {
     store: CircuitStore;
-    frameKeyOf(trait: string): string | undefined;
+    framesSince: FramesSince;
     observer?: TransitionObserver;
 }
 declare function createLocalFold(opts: LocalFoldOptions): LocalFoldKernel;
 
-export { createLocalFold, mirrorResponse, traceResponse };
-export type { LocalFoldOptions };
+export { createLocalFold, paintFrames, paintResponse, paintStates, traceResponse };
+export type { FramesSince, LocalFoldOptions };

package/dist/client/local-fold.js

@@ -1,2 +1 @@
-export { createLocalFold, mirrorResponse, traceResponse } from '../chunk-QQRDUMB2.js';
-import '../chunk-MLKGABMK.js';
+export { createLocalFold, paintFrames, paintResponse, paintStates, traceResponse } from '../chunk-QCJWPXLH.js';

package/dist/client/render-sigils.js

@@ -1,2 +1 @@
 export { DEFAULT_THEME_KEY, appNavItems, inlineNavItems, sigilThemeKey } from '../chunk-UP6GGGAN.js';
-import '../chunk-MLKGABMK.js';

package/dist/client/state-book.d.ts

@@ -1,17 +1,17 @@
-import { TraitDefinition, EventId } from '@almadar/core';
+import { TraitDefinition } from '@almadar/core';
 import { TransitionObserver, TraitState, RollbackCause } from './trait-types.js';
 import '@almadar/core/kernel-wire';
 
+/**
+ * The client's record of each trait's state, as the kernel reports it. The kernel decides every transition;
+ * this book only holds the states its responses carry, so a render can read them synchronously.
+ *
+ * @packageDocumentation
+ */
+
 /** The state a trait starts in: the one marked initial, else the first declared. */
 declare function findInitialState(trait: TraitDefinition): string;
 declare function createInitialTraitState(trait: TraitDefinition): TraitState;
-/**
- * Every transition out of `currentState` on the event, in declaration order. An event id is compared with a
- * transition's own id when both carry one, so an arm still matches after its event was renamed.
- */
-declare function findMatchingTransitions(trait: TraitDefinition, currentState: string, eventKey: string, eventId?: EventId): TraitDefinition['transitions'];
-/** The first transition out of `currentState` on the event, ignoring guards. */
-declare function findTransition(trait: TraitDefinition, currentState: string, eventKey: string, eventId?: EventId): TraitDefinition['transitions'][0] | undefined;
 declare class StateBook {
     private readonly observer?;
     private readonly traits;
@@ -21,17 +21,10 @@ declare class StateBook {
     getState(traitName: string, entityId?: string): TraitState | undefined;
     /** Each trait's singleton-scope state. */
     getAllStates(): Map<string, TraitState>;
-    /** Whether the trait has an arm on the event from its current state. */
-    canHandleEvent(traitName: string, eventKey: string, entityId?: string, eventId?: EventId): boolean;
-    /**
-     * The lifecycle event an embedded child can be repainted with: the one it handles from its current state,
-     * provided every matching arm stays in that state and only renders.
-     */
-    repaintLifecycleEvent(traitName: string, entityId?: string): string | undefined;
     /** Record the state the kernel reports. No-op for a trait not on the page. */
     seedState(traitName: string, currentState: string, entityId?: string): void;
     /** Undo an optimistic commit, reporting the hop back to the observer. */
     rollbackState(traitName: string, toState: string, entityId: string | undefined, cause: RollbackCause): void;
 }
 
-export { StateBook, createInitialTraitState, findInitialState, findMatchingTransitions, findTransition };
+export { StateBook, createInitialTraitState, findInitialState };

package/dist/client/state-book.js

@@ -1,2 +1 @@
-export { StateBook, createInitialTraitState, findInitialState, findMatchingTransitions, findTransition } from '../chunk-Q2H75UYT.js';
-import '../chunk-MLKGABMK.js';
+export { StateBook, createInitialTraitState, findInitialState } from '../chunk-A2JJT4GA.js';

package/dist/client/trait-mount-error.js

@@ -1,2 +1 @@
 export { TraitMountError } from '../chunk-IOPUS6Q5.js';
-import '../chunk-MLKGABMK.js';

package/dist/credentials/env-vars.d.ts

@@ -1,3 +1,7 @@
+/** Env var holding the 64-char-hex AES-256 master key (Secret Manager in production). */
+declare const CREDENTIAL_MASTER_KEY_ENV = "ALMADAR_CREDENTIAL_MASTER_KEY";
+/** Env var holding the PREVIOUS master key during a rotation window: `rotate` re-encrypts every row under the current key, then the previous key is retired. */
+declare const CREDENTIAL_PREVIOUS_MASTER_KEY_ENV = "ALMADAR_CREDENTIAL_MASTER_KEY_PREVIOUS";
 /**
  * Bootstrap secrets that must NEVER enter store custody: the master key(s)
  * decrypt the store itself, so seeding them as rows (encrypted under
@@ -11,4 +15,4 @@ declare const STORE_BOOTSTRAP_ENV_VARS: ReadonlySet<string>;
  */
 declare function allCredentialEnvVars(): Set<string>;
 
-export { STORE_BOOTSTRAP_ENV_VARS, allCredentialEnvVars };
+export { CREDENTIAL_MASTER_KEY_ENV, CREDENTIAL_PREVIOUS_MASTER_KEY_ENV, STORE_BOOTSTRAP_ENV_VARS, allCredentialEnvVars };

package/dist/credentials/env-vars.js

@@ -1,3 +1 @@
-export { STORE_BOOTSTRAP_ENV_VARS, allCredentialEnvVars } from '../chunk-Q7JK4KY7.js';
-import '../chunk-NAECVIAR.js';
-import '../chunk-MLKGABMK.js';
+export { CREDENTIAL_MASTER_KEY_ENV, CREDENTIAL_PREVIOUS_MASTER_KEY_ENV, STORE_BOOTSTRAP_ENV_VARS, allCredentialEnvVars } from '../chunk-VNGXRYFF.js';

package/dist/credentials/scope.d.ts

@@ -1,5 +1,6 @@
-import { CredentialStore } from './store.js';
+import { CredentialVault } from './vault.js';
 import '@almadar/core';
+import '@almadar/core/kernel-wire';
 
 /** Whether integrations answer with mock data or call their real backends. */
 type CredentialMode = 'mock' | 'real';
@@ -12,15 +13,15 @@ interface CredentialModeControl {
 }
 /** The per-tenant credential scope: a Node host installs AsyncLocalStorage (`@almadar/shell-node`); a browser has none. */
 interface CredentialScopeStorage {
-    run<T>(store: CredentialStore, fn: () => T): T;
-    getStore(): CredentialStore | undefined;
+    run<T>(store: CredentialVault, fn: () => T): T;
+    getStore(): CredentialVault | undefined;
 }
 declare function installCredentialScopeStorage(storage: CredentialScopeStorage): void;
 /**
  * Run `fn` as one tenant of a multi-tenant host: every credential reference resolved inside it
  * (across awaits) comes from `store` alone, never from the host's env or installed store.
  */
-declare function runWithCredentialScope<T>(store: CredentialStore, fn: () => T): T;
+declare function runWithCredentialScope<T>(store: CredentialVault, fn: () => T): T;
 /** The host's mode switch, installed beside its credential store. */
 declare function installModeControl(control: CredentialModeControl): void;
 declare function getModeControl(): CredentialModeControl | null;
@@ -29,10 +30,10 @@ declare function getModeControl(): CredentialModeControl | null;
  * Called once at boot (playground / generated server) after the store is
  * constructed over the host's persistence adapter.
  */
-declare function installCredentialStore(store: CredentialStore): void;
+declare function installCredentialStore(store: CredentialVault): void;
 /** The installed store, for the credentials admin service. */
-declare function getInstalledCredentialStore(): CredentialStore | null;
-declare function getEffectiveCredentialStore(): CredentialStore | null;
+declare function getInstalledCredentialStore(): CredentialVault | null;
+declare function getEffectiveCredentialStore(): CredentialVault | null;
 /** Testing/reset hook. */
 declare function uninstallCredentialStore(): void;
 /** The env var selecting store-only resolution (the kernel rule `credential_admin::SOURCE_VAR`). */

package/dist/credentials/scope.js

@@ -1,2 +1 @@
 export { CREDENTIALS_SOURCE_ENV, credentialModeFromEnv, credentialsFromStoreOnly, getEffectiveCredentialStore, getInstalledCredentialStore, getModeControl, installCredentialScopeStorage, installCredentialStore, installModeControl, resolveCredentialRef, runWithCredentialScope, uninstallCredentialStore } from '../chunk-HLOUDLPI.js';
-import '../chunk-MLKGABMK.js';