@almadar/std 16.193.0 → 16.195.0

package/behaviors/lolo/infra/atoms/std-approval-gate.lolo

@@ -1,5 +1,5 @@
 app std-approval-gate "1.1.0"
-"std-approval-gate — generic approval gate / approver workflow. Use when a user voices that an action must be reviewed, approved, signed off, or authorized by a privileged role before it proceeds (admin approval, supervisor sign-off, manager approval, gatekeeper review, editor approval, senior editor approval, reviewer approval, publishing approval, draft approval, content review, submit drafts then editors review and approve or reject, needs approval before going live, requires sign-off before publish). Persists ApprovalRequest rows + surfaces the PENDING ones in a review queue showing what is being approved and who asked, with Approve / Deny actions — Deny captures a written reason. approverRoles is ENFORCED by the review transitions themselves: an APPROVE/DENY from a viewer whose role is not listed does not fire. On approval emits ApprovalGranted; on denial emits ApprovalDenied (with the reason). Hosts that replay the gated action MUST route a failed replay back via APPROVAL_REPLAY_FAILED so the request reopens instead of being silently consumed. Compose onto any orbital whose action you want to gate: the target orbital emits an external event, an ApprovalRequest row is created (stamp subjectLabel/subjectId/requestedBy so reviewers see what they are judging), and downstream effects wait on ApprovalGranted. Differs from std-mod-queue, which is content-moderation-specific."
+"std-approval-gate — generic approval gate / approver workflow. Use when a user voices that an action must be reviewed, approved, signed off, or authorized by a privileged role before it proceeds (admin approval, supervisor sign-off, manager approval, gatekeeper review, editor approval, senior editor approval, reviewer approval, publishing approval, draft approval, content review, submit drafts then editors review and approve or reject, needs approval before going live, requires sign-off before publish). Persists ApprovalRequest rows + surfaces the PENDING ones in a review queue showing what is being approved and who asked, with Approve / Deny actions — Deny captures a written reason. approverRoles is ENFORCED by the review transitions themselves: an APPROVE/DENY from a viewer whose role is not listed does not fire. blockSelfApproval additionally stops a reviewer approving their own request (four-eyes) — DENY stays allowed as self-withdrawal. On approval emits ApprovalGranted; on denial emits ApprovalDenied (with the reason). Hosts that replay the gated action MUST route a failed replay back via APPROVAL_REPLAY_FAILED so the request reopens instead of being silently consumed. Compose onto any orbital whose action you want to gate: the target orbital emits an external event, an ApprovalRequest row is created (stamp subjectLabel/subjectId/requestedBy so reviewers see what they are judging), and downstream effects wait on ApprovalGranted. Differs from std-mod-queue, which is content-moderation-specific."
 orbital ApprovalGateOrbital {
     uses Spinner from "std/behaviors/ui-spinner"
     uses Typography from "std/behaviors/ui-typography"
@@ -12,7 +12,7 @@ orbital ApprovalGateOrbital {
 
     type ApprovalRequestLoadFailed = Event { error : string, code : string } "Fired when the approval queue fails to load"
 
-    type ApprovalRequestReviewed = Event { row : ApprovalRequest } "Fired after a row's status persists (approve / deny)"
+    type ApprovalRequestReviewed = Event @entity "Fired after a row's status persists (approve / deny)"
 
     type ApprovalRequestReviewFailed = Event { error : string, code : string } "Fired when the persist fails"
 
@@ -227,8 +227,9 @@ orbital ApprovalGateOrbital {
       ;; The role guard IS the enforcement (both execution paths honor
       ;; transition guards, for the button and for a bus-delivered event
       ;; alike): empty approverRoles = ungated, otherwise the viewer's role
-      ;; must be listed or the decision does not fire.
-      APPROVE -> reviewing when (or ["=", (array/len @config.approverRoles), 0] (array/includes @config.approverRoles @user.role))
+      ;; must be listed or the decision does not fire. blockSelfApproval
+      ;; additionally blocks APPROVE when ?row.requestedBy is the viewer.
+      APPROVE -> reviewing when (and (or ["=", (array/len @config.approverRoles), 0] (array/includes @config.approverRoles @user.role)) (or ["=", @config.blockSelfApproval, false] ["!=", (object/get ?row requestedBy), @user.id]))
         (set @entity.id ?id)
         (set @entity.status approved)
         (set @entity.reviewer @user.id)
@@ -396,9 +397,7 @@ orbital ApprovalGateOrbital {
         @description "Indicates failure to load an approval request."
         @synonyms "load error, failed load, request failure"
         @tier "internal"
-      ApprovalRequestReviewed {
-        row : ApprovalRequest
-      }
+      ApprovalRequestReviewed
         @description "Signals that an approval request has been reviewed."
         @synonyms "reviewed, processed, examined"
         @tier "internal"
@@ -473,9 +472,7 @@ orbital ApprovalGateOrbital {
         @description "Indicates failure to load an approval request."
         @synonyms "load error, failed load, request failure"
         @tier "internal"
-      ApprovalRequestReviewed {
-        row : ApprovalRequest
-      }
+      ApprovalRequestReviewed
         @description "Indicates an approval request has been reviewed."
         @synonyms "reviewed, checked, processed"
         @tier "domain"
@@ -499,6 +496,11 @@ orbital ApprovalGateOrbital {
         @description "Roles eligible to decide. ENFORCED by the APPROVE/DENY transition guards: a viewer whose @user.role is not listed cannot fire a decision, from the button or from the bus. Empty = every signed-in viewer may decide (ungated)."
         @synonyms "approver, reviewer, authorized roles, sign-off roles, who approves"
         @tier "policy"
+      blockSelfApproval : boolean = false
+        @label "Block approving your own requests?"
+        @description "When on, a reviewer cannot APPROVE a request they submitted themselves (requestedBy = the viewer's id) — enforced by the APPROVE transition guard, from the button or from the bus. Requires hosts to stamp requestedBy at request creation. DENY stays allowed on your own request (denying your own request withdraws it). Off by default."
+        @synonyms "self approval, self-approval, four eyes, four-eyes, separation of duties, cannot approve own, no self sign-off, dual control"
+        @tier "policy"
       threshold : number = 0
         @label "Auto-approve below this value"
         @description "Requests whose gated value is below this threshold are auto-approved. v1.0 declarative only."

package/behaviors/lolo/infra/atoms/std-circuit-breaker.lolo

@@ -11,7 +11,7 @@ orbital ServiceNodeOrbital {
     uses Divider from "std/behaviors/ui-divider"
     uses SimpleGrid from "std/behaviors/ui-simple-grid"
 
-    type ServiceNodeLoaded = Event ServiceNode "Fired when ServiceNode finishes loading"
+    type ServiceNodeLoaded = Event { data : [ServiceNode] } "Fired when ServiceNode finishes loading"
 
     type ServiceNodeLoadFailed = Event { message : string } "Fired when ServiceNode fails to load"
 

package/behaviors/lolo/infra/atoms/std-cross-reference.lolo

@@ -9,9 +9,9 @@ orbital CrossReferenceOrbital {
 
     type FETCH_LINKS_FOR = Event { leftId : string } "Request the link set for a given leftId."
 
-    type LinkCreated = Event { row : @entity } "Fired after a junction row is persisted."
+    type LinkCreated = Event @entity "Fired after a junction row is persisted."
 
-    type LinkRemoved = Event { leftId : string, rightId : string } "Fired after a junction row is deleted."
+    type LinkRemoved = Event { id : string, deleted : boolean } "Fired after a junction row is deleted — persist delete emits the deleted row's id and a deleted flag, not the link's leftId/rightId."
 
     type LinksLoaded = Event { leftId : string, data : [ObjectSpec] } "Fired after junction rows for leftId are fetched."
 
@@ -50,10 +50,10 @@ orbital CrossReferenceOrbital {
     }
 
     emits {
-      LinkCreated -> external { row : @entity }
+      LinkCreated -> external
       LinkRemoved -> external {
-        leftId : string
-        rightId : string
+        id : string
+        deleted : boolean
       }
       LinksLoaded -> external {
         leftId : string

package/behaviors/lolo/infra/atoms/std-data-erasure.lolo

@@ -12,7 +12,7 @@ orbital DataErasureOrbital {
 
     type ErasureLoadFailed = Event { error : string, code : string } "Fired when the erasure queue fails to load."
 
-    type ErasureSaved = Event { row : ErasureRequest } "Fired after an ErasureRequest row persists."
+    type ErasureSaved = Event ErasureRequest "Fired after an ErasureRequest row persists."
 
     type ErasureSaveFailed = Event { error : string, code : string } "Fired when an ErasureRequest persist fails."
 
@@ -272,9 +272,7 @@ orbital DataErasureOrbital {
         @description "Indicates failure to load erasure request data."
         @synonyms "load error, failed load, data error"
         @tier "internal"
-      ErasureSaved {
-        row : ErasureRequest
-      }
+      ErasureSaved
         @description "Indicates a new erasure request has been successfully saved."
         @synonyms "created, added, persisted"
         @tier "domain"
@@ -363,9 +361,7 @@ orbital DataErasureOrbital {
         @description "Indicates a failure to load erasure request data."
         @synonyms "load error, failed load, data error"
         @tier "internal"
-      ErasureSaved {
-        row : ErasureRequest
-      }
+      ErasureSaved
         @description "A new erasure request has been successfully saved."
         @synonyms "created, added, persisted"
         @tier "domain"

package/behaviors/lolo/infra/atoms/std-mod-queue.lolo

@@ -12,7 +12,7 @@ orbital ModQueueItemOrbital {
 
     type ModQueueItemLoadFailed = Event { error : string, code : string } "Fired when the moderation queue collection fails to load"
 
-    type ModQueueItemReviewed = Event { row : ModQueueItem } "Fired after a queue row's status persists (approve / reject / escalate)"
+    type ModQueueItemReviewed = Event ModQueueItem "Fired after a queue row's status persists (approve / reject / escalate)"
 
     type ModQueueItemReviewFailed = Event { error : string, code : string } "Fired when a queue row's status update fails to persist"
 
@@ -259,9 +259,7 @@ orbital ModQueueItemOrbital {
         @description "Indicates failure to load moderation queue items."
         @synonyms "error, failure, problem, failed"
         @tier "internal"
-      ModQueueItemReviewed {
-        row : ModQueueItem
-      }
+      ModQueueItemReviewed
         @description "Signals a moderation queue item has been reviewed and a verdict recorded."
         @synonyms "reviewed, processed, judged, completed"
         @tier "domain"
@@ -318,9 +316,7 @@ orbital ModQueueItemOrbital {
         @description "Indicates failure to load a moderation queue item."
         @synonyms "error, failure, problem, issue"
         @tier "internal"
-      ModQueueItemReviewed {
-        row : ModQueueItem
-      }
+      ModQueueItemReviewed
         @description "A moderation queue item's review status has been updated."
         @synonyms "reviewed, updated, verdict, decision"
         @tier "domain"

package/behaviors/lolo/infra/atoms/std-notification-center.lolo

@@ -3,7 +3,7 @@ app std-notification-center "1.0.0"
 type NotifRow = { id : string, recipient : string, channel : string, message : string, severity : string, dispatched : boolean, error : string, recordedAt : number }
 type PushCreds = { endpoint : string, p256dh : string, auth : string }
 orbital NotificationCenterOrbital {
-    type PUSH_SUBSCRIBED = Event { result : PushCreds } "browser/push-subscribe resolved — the flat subscription credentials arrive in `result`."
+    type PUSH_SUBSCRIBED = Event { endpoint : string, p256dh : string, auth : string } "browser/push-subscribe resolved — the credentials arrive FLAT on the payload (?endpoint, ?p256dh, ?auth), not wrapped in a `result` field."
 
   entity NotificationPreference [persistent: notificationPreferences] {
     id : string!
@@ -54,10 +54,10 @@ orbital NotificationCenterOrbital {
       PUSH_SUBSCRIBED -> idle
         (set @entity.lastError "")
         (persist create PushSubscription {
-          auth: ?result.auth
+          auth: ?auth
           createdAt: @now
-          endpoint: ?result.endpoint
-          p256dh: ?result.p256dh
+          endpoint: ?endpoint
+          p256dh: ?p256dh
           userId: @user.id
         } { emit: { failure: PUSH_SAVE_FAILED, success: PUSH_SAVED } })
       PUSH_SAVED -> idle
@@ -72,9 +72,11 @@ orbital NotificationCenterOrbital {
 
     emits {
       PUSH_SUBSCRIBED {
-        result : PushCreds
+        endpoint : string
+        p256dh : string
+        auth : string
       }
-        @description "browser/push-subscribe resolved with the flat subscription credentials in `result`"
+        @description "browser/push-subscribe resolved; the subscription credentials arrive flat on the payload"
         @tier "secondary"
       PUSH_SUBSCRIBE_FAILED {
         error : string!

package/behaviors/lolo/infra/atoms/std-status-lifecycle.lolo

@@ -7,6 +7,8 @@ orbital StatusLifecycleOrbital {
 
     type StatusChanged = Event { entityId : string, status : string } "Re-emitted per record after a legal transition; rename to wire downstream reactions (notify, audit, archive)."
 
+    type StatusPersisted = Event StatusRecord "Internal: the status write landed; carries the persisted row flat."
+
     type StatusChangeFailed = Event { error : string, code : string } "Internal: persist of the new status failed."
 
   entity StatusRecord [persistent: status_records] {
@@ -27,7 +29,7 @@ orbital StatusLifecycleOrbital {
       ;; synchronous emit fired even when the write failed, so a denied
       ;; mutation still looked like a completed transition downstream.
       StatusPersisted -> idle when ["!=", (str/default ?id ""), ""]
-        (emit StatusChanged { entityId: ?id, status: (str/default (object/get ?row @config.statusField) "") })
+        (emit StatusChanged { entityId: ?id, status: (str/default (object/get @payload @config.statusField) "") })
       StatusChangeFailed -> idle
     }
 
@@ -36,10 +38,7 @@ orbital StatusLifecycleOrbital {
         entityId : string
         status : string
       }
-      StatusPersisted {
-        id : string
-        row : StatusRecord
-      }
+      StatusPersisted
       StatusChangeFailed -> external {
         error : string
         code : string
@@ -52,10 +51,7 @@ orbital StatusLifecycleOrbital {
         from : string
         to : string
       }
-      StatusPersisted {
-        id : string
-        row : StatusRecord
-      }
+      StatusPersisted
       StatusChangeFailed {
         error : string
         code : string

package/behaviors/lolo/ui/core/atoms/std-app-layout.lolo

@@ -2,7 +2,7 @@ app std-app-layout "1.4.1"
 "std-app-layout — dashboard-layout chrome (sidebar nav + top bar with search + topBarActions + notifications) wrapping a single contentTrait slot. Use for list-style apps (CMS / helpdesk / CRM) and account/settings pages: the chrome stays stable while the consumer's content trait renders the data, and the consumer can add domain icons (cart / profile / help) via topBarActions. Bind once per orbital — the consumer rebinds linkedEntity via `XAppLayout = AppShell.traits.AppLayout -> XEntity` so multiple orbitals in one file each get their own chrome without colliding on a shared atom entity."
 ;; @capabilities "settings page shell, preferences page, account settings layout, profile settings, admin console shell"
 type NavItem = { label : string!, href : string!, icon : string, badge : string, children : [json] }
-type ItemAction = { label : string!, event : string, navigatesTo : string, variant : string, icon : string }
+type ItemAction = { label : string!, event : event, navigatesTo : string, variant : string, icon : string }
 type NotificationSpec = { id : string, message : string, variant : string }
 orbital AppLayoutOrbital {
     type AppLayoutStateLoaded = Event { data : [AppLayoutData] }
@@ -119,7 +119,7 @@ orbital AppLayoutOrbital {
         @description "Top-level navigation links shown on the left rail."
         @synonyms "nav links, menu items, sidebar sections, navigation entries, pages"
         @tier "presentation"
-      searchEvent : string = SEARCH
+      searchEvent : event = SEARCH
         @label "Search event"
         @description "Event emitted when the user runs a global search"
         @tier "internal"
@@ -133,7 +133,7 @@ orbital AppLayoutOrbital {
         @description "Items shown in the notifications dropdown."
         @synonyms "alerts, messages, notices, notification items, bell items"
         @tier "presentation"
-      notificationClickEvent : string = NOTIFY_CLICK
+      notificationClickEvent : event = NOTIFY_CLICK
         @label "Notification click event"
         @description "Event emitted when the user picks a notification"
         @tier "internal"

package/behaviors/lolo/ui/core/atoms/std-app-search.lolo

@@ -1,7 +1,7 @@
 app std-app-search "1.0.0"
 "std-app-search — reusable global search: wraps a host content view and, on a SEARCH trigger, fetches the linked entity filtered by @config.searchField and renders the matching results, then CLEAR_SEARCH returns to the host view. Rebind to any entity; point @config.idleContent at the normal view and wire a trigger (e.g. AppLayout SEARCH) into SEARCH."
 type AppSearchFieldSpec = { name : string!, label : string, variant : h3 | h4 | body | caption | badge | small | progress, icon : string, format : date | currency | number | boolean | percent, event : string, href : string, payload : string, disabled : boolean, confirm : string, hidden : boolean }
-type AppSearchActionSpec = { label : string!, event : string!, variant : primary | secondary | ghost | danger, icon : string, href : string, payload : string, disabled : boolean, confirm : string, hidden : boolean }
+type AppSearchActionSpec = { label : string!, event : event!, variant : primary | secondary | ghost | danger, icon : string, href : string, payload : string, disabled : boolean, confirm : string, hidden : boolean }
 orbital AppSearchOrbital {
   type AppSearchLoaded = Event { data : [AppSearchTarget] } "Filtered search results loaded"
   type AppSearchFailed = Event { error : string } "Search fetch failed"

package/behaviors/lolo/ui/core/atoms/std-billable-hour.lolo

@@ -1,6 +1,6 @@
 app std-billable-hour "1.0.0"
 "std-billable-hour — generic billable-hour timesheet primitive for legal, agency, and consulting domains. Lists entries in `browsing`; opens entry detail in `viewing_single` with Invoice / Write Off actions."
-type ItemAction = { label : string!, event : string, navigatesTo : string, variant : string, icon : string }
+type ItemAction = { label : string!, event : event, navigatesTo : string, variant : string, icon : string }
 type ColumnSpec = { key : string!, field : string, header : string, width : string, align : string, className : string, weight : string, format : string, icon : string }
 orbital BillableHourOrbital {
   uses TableView from "std/behaviors/ui-table-view"

package/behaviors/lolo/ui/core/atoms/std-board.lolo

@@ -12,7 +12,9 @@ orbital BoardOrbital {
 
     type BoardItemsLoadFailed = Event { error : string, code : string } "Fired when the upstream fetch fails"
 
-    type BoardItemsSaved = Event { row : @entity } "Fired when a board item has been persisted"
+    type BoardItemsSaved = Event @entity "Fired when a board item has been persisted"
+
+    type BoardItemDeleted = Event { id : string, deleted : boolean } "Fired when a board item has been deleted — persist delete emits the id and a deleted flag, never the row, so this cannot share BoardItemsSaved's contract"
 
     type BoardItemsSaveFailed = Event { error : string, code : string } "Fired when a persist intent fails"
 
@@ -75,6 +77,16 @@ orbital BoardOrbital {
           title: "Refreshing board…"
           type: loading-state
         })
+      ;; Same refresh, different contract: a delete emits { id, deleted }, not
+      ;; the row, so it cannot ride BoardItemsSaved's payload.
+      BoardItemDeleted -> loading
+        (fetch BoardView {
+          emit: { failure: BoardItemsLoadFailed, success: BoardItemsLoaded }
+        })
+        (render-ui main {
+          title: "Refreshing board…"
+          type: loading-state
+        })
       BoardItemsSaveFailed -> error
         (set @entity.errorMessage ?error)
         (render-ui main {
@@ -277,7 +289,7 @@ orbital BoardOrbital {
         })
       DELETE_CARD -> loading
         (persist delete BoardView ?id {
-          emit: { failure: BoardItemsSaveFailed, success: BoardItemsSaved }
+          emit: { failure: BoardItemsSaveFailed, success: BoardItemDeleted }
         })
         (render-ui main {
           title: "Deleting item…"
@@ -378,10 +390,17 @@ orbital BoardOrbital {
         @description "Indicates a failure to load board items."
         @synonyms "error, failed, problem, loading failure"
         @tier "internal"
-      BoardItemsSaved { row : @entity }
+      BoardItemsSaved
         @description "Signals that board items have been successfully saved."
         @synonyms "saved, persisted, updated"
         @tier "domain"
+      BoardItemDeleted {
+        id : string
+        deleted : boolean
+      }
+        @description "Signals a board item has been deleted; carries the deleted row's id, not the row."
+        @synonyms "deleted, removed, discarded"
+        @tier "domain"
       BoardItemsSaveFailed {
         error : string
         code : string
@@ -482,10 +501,17 @@ orbital BoardOrbital {
         @description "Indicates a failure to load board items."
         @synonyms "error, failed, problem, loading issue"
         @tier "internal"
-      BoardItemsSaved { row : @entity }
+      BoardItemsSaved
         @description "Indicates board items have been successfully saved."
         @synonyms "saved, updated, persisted"
         @tier "presentation"
+      BoardItemDeleted {
+        id : string
+        deleted : boolean
+      }
+        @description "Indicates a board item has been deleted; carries the deleted row's id, not the row."
+        @synonyms "deleted, removed, discarded"
+        @tier "presentation"
       BoardItemsSaveFailed {
         error : string
         code : string

package/behaviors/lolo/ui/core/atoms/std-browse.lolo

@@ -1,7 +1,7 @@
 app std-browse "2.5.0"
 "std-browse as a Function — single primitive: data-grid. Owns the fetch + REFETCH (query/filter/page) state machine. Consumers configure fields/imageField/itemActions/cols/gap/variant; the atom renders the grid. Each `fields[]` entry accepts `{ name, label, variant }` plus optional `referenceEntity` + `displayField` to render a foreign-key column as the joined entity's display value (data-grid resolves @list[referenceEntity] at render time when both keys are present). `browseLook` (table default / dense / feed / gallery / master-detail / triage) selects one of six render bodies; dense/feed/gallery were folded in from std-browse-dense/-feed/-gallery (Phase 5.B); master-detail (split record view driven by the guarded VIEW/CLOSE self-transitions) and triage (inbox rows) were folded in 2026-07-26. Consumers retarget by setting browseLook."
 type FieldSpec = { name : string!, label : string, variant : h3 | h4 | body | caption | badge | small | progress, icon : string, format : date | currency | number | boolean | percent, key : string, header : string }
-type ItemAction = { label : string!, event : string, navigatesTo : string, variant : primary | secondary | ghost | danger, icon : string }
+type ItemAction = { label : string!, event : event, navigatesTo : string, variant : primary | secondary | ghost | danger, icon : string }
 type ColumnSpec = { key : string!, field : string, header : string, width : string, align : left | center | right, className : string, weight : normal | medium | semibold, format : badge | date | currency | number | percent | boolean, icon : string }
 type FilterSpec = { field : string!, label : string, options : [string] }
 orbital BrowseItemOrbital {
@@ -370,7 +370,7 @@ orbital BrowseItemOrbital {
         @description "Actions beyond this count collapse into a '⋯' overflow menu. Set 2–3 for dense tables."
         @synonyms "inline actions limit, overflow threshold, max buttons per row"
         @tier "presentation"
-      itemClickEvent : string = VIEW
+      itemClickEvent : event = VIEW
         @label "Which event does clicking a row fire?"
         @description "Row-click channel. Retarget when two browse lists coexist in one orbital and their VIEW payloads differ, so each gets its own typed channel."
         @synonyms "row click event, item click, open event, select event"

package/behaviors/lolo/ui/core/atoms/std-calendar.lolo

@@ -1,6 +1,6 @@
 app std-calendar "1.4.0"
 "std-calendar as a Function — owns the fetch + SELECT_DAY state machine; default bodyContent renders the month-grid + upcoming-events tree. `config.calendarLook` switches the body between the default month-grid ('month'), a day-grouped agenda list ('agenda-list'), and a 7-column week timeline ('week-timeline') while inheriting the same trait, state machine, emits, and listens."
-type ItemAction = { label : string!, event : string, navigatesTo : string, variant : primary | secondary | ghost | danger, icon : string }
+type ItemAction = { label : string!, event : event, navigatesTo : string, variant : primary | secondary | ghost | danger, icon : string }
 type FilterSpec = { field : string!, label : string, options : [string] }
 orbital CalendarEventOrbital {
     type CalendarEventLoaded = Event { data : [CalendarEvent] } "Fired when CalendarEvent finishes loading; payload.data holds the events"
@@ -234,7 +234,7 @@ orbital CalendarEventOrbital {
         @description "Row column holding the timestamp the calendar grid places each chip by. Rebound hosts point this at their own column (e.g. startTime, startsAt, dueAt); the chip's LABEL comes from titleBinding, not from here."
         @synonyms "start column, date column, when field, timestamp field"
         @tier "presentation"
-      onEventClick : string = ""
+      onEventClick : event = ""
         @label "On Event Click"
         @description "Event emitted when a calendar chip is clicked: UI:{onEventClick} with { event } carrying the clicked row. Empty means chips are not clickable."
         @synonyms "open event, event click, select event, chip click"

package/behaviors/lolo/ui/core/atoms/std-date-range.lolo

@@ -78,7 +78,7 @@ orbital DateRangeOrbital {
     }
 
     config {
-      event : string = DATE_RANGE_CHANGED
+      event : event = DATE_RANGE_CHANGED
         @label "Change event"
         @description "Event name emitted when the user picks a new range"
         @tier "internal"

package/behaviors/lolo/ui/core/atoms/std-detail-layout.lolo

@@ -18,9 +18,9 @@ orbital DetailLayoutOrbital {
           className: "w-full"
           children: [{
             type: stack
-            direction: horizontal
-            align: center
-            gap: sm
+            direction: vertical
+            align: start
+            gap: xs
             className: "w-full border-b border-border pb-3"
             children: [{
               type: button

package/behaviors/lolo/ui/core/atoms/std-event-log.lolo

@@ -14,7 +14,7 @@ orbital EventLogOrbital {
 
     type EventLogLoadFailed = Event { error : string, code : string } "Fired when fetch fails"
 
-    type EventLogSaved = Event { row : @entity } "Fired when an entry has been persisted"
+    type EventLogSaved = Event @entity "Fired when an entry has been persisted"
 
     type EventLogSaveFailed = Event { error : string, code : string } "Fired when persist fails"
 
@@ -500,7 +500,7 @@ orbital EventLogOrbital {
         @description "Indicates that loading the event log failed."
         @synonyms "error, failure, failed, problem"
         @tier "internal"
-      EventLogSaved { row : @entity }
+      EventLogSaved
         @description "Indicates a new event has been successfully logged."
         @synonyms "saved, added, created, recorded"
         @tier "domain"
@@ -547,7 +547,7 @@ orbital EventLogOrbital {
         @description "Indicates the event log failed to load."
         @synonyms "error, failure, failed, loading error"
         @tier "internal"
-      EventLogSaved { row : @entity }
+      EventLogSaved
         @description "Indicates a new event has been successfully recorded."
         @synonyms "saved, added, created, persisted"
         @tier "domain"

package/behaviors/lolo/ui/core/atoms/std-file-store.lolo

@@ -1,7 +1,7 @@
 app std-file-store "2.0.0"
 "std-file-store — the generic file/page tree primitive. A file-tree + config-driven data table over a hierarchical collection; opens a row in `viewing_single` with config-driven detail actions. Rebindable: pass `fields`/`itemActions`/`detailActions`/`tree` to retarget it at any hierarchical entity (files, wiki pages, note trees). Folds in the former std-page-tree via `reorderable` + a page field/action set."
 type FieldSpec = { name : string!, label : string, variant : "h3" | "h4" | "body" | "caption" | "badge" | "small" | "progress", icon : string, format : "date" | "currency" | "number" | "boolean" | "percent", key : string, header : string }
-type ItemAction = { label : string!, event : string!, variant : "primary" | "secondary" | "ghost" | "danger", icon : string }
+type ItemAction = { label : string!, event : event!, variant : "primary" | "secondary" | "ghost" | "danger", icon : string }
 type TreeNode = { name : string!, path : string!, type : "file" | "dir"!, children : [object] }
 orbital StoredFileOrbital {
     type StoredFileLoaded = Event { data : [StoredFile] } "Fired when the collection finishes loading"

package/behaviors/lolo/ui/core/atoms/std-filter.lolo

@@ -82,7 +82,7 @@ orbital FilterTargetOrbital {
         @description "Field, label, control type, and options for each filter input. numberrange renders a min/max slider pair (bounded by min/max/step) and emits one FILTER per side as `<field>_min` / `<field>_max`, mirroring daterange's `<field>_from` / `<field>_to` convention."
         @synonyms "numeric range, price range, min max, slider filter, range filter, threshold filter"
         @tier "presentation"
-      event : string = FILTER
+      event : event = FILTER
         @label "Filter event"
         @description "Event emitted when the user changes a filter selection"
         @tier "internal"

package/behaviors/lolo/ui/core/atoms/std-form-advanced.lolo

@@ -3,7 +3,7 @@ app std-form-advanced "1.2.0"
 type FieldSpec = { name : string!, label : string, variant : string, icon : string, format : string, key : string, header : string }
 type ValidationSpec = { field : string!, rule : string, message : string }
 orbital FormEntryOrbital {
-    type FormEntryLoaded = Event FormEntry "Fired when FormEntry finishes loading"
+    type FormEntryLoaded = Event { data : [FormEntry] } "Fired when FormEntry finishes loading"
 
     type FormEntryLoadFailed = Event { message : string } "Fired when FormEntry fails to load"
 

package/behaviors/lolo/ui/core/atoms/std-geosearch.lolo

@@ -112,7 +112,7 @@ orbital GeoSearchResultOrbital {
         @label "Default radius (km)"
         @description "Initial search radius around the chosen center"
         @tier "presentation"
-      event : string = GEO_SEARCH
+      event : event = GEO_SEARCH
         @label "Search event"
         @description "Event emitted when the user runs a geo search"
         @tier "internal"

package/behaviors/lolo/ui/core/atoms/std-graphs.lolo

@@ -128,7 +128,7 @@ orbital GraphItemOrbital {
         @description "Keep only the first N points after sorting (0 = all)"
         @synonyms "user phrases: 'top 5' -> 5; 'top 10' -> 10; 'first 3' -> 3; 'all' / 'no limit' -> 0; 'show all' -> 0"
         @tier "presentation"
-      drillEvent : string = ""
+      drillEvent : event = ""
         @label "Drill event"
         @description "Event emitted when a user clicks a chart point"
         @synonyms "click-through navigation event. user phrases: 'on click navigate to X' / 'drill into X' / 'when clicked open X' -> X event name"

package/behaviors/lolo/ui/core/atoms/std-image-upload-multi.lolo

@@ -9,7 +9,7 @@ orbital UploadedImageOrbital {
 
     type UploadedImageLoadFailed = Event { error : string, code : string } "Fired when the uploaded-image collection fails to load"
 
-    type UploadedImageCreated = Event { row : UploadedImage } "Fired after a new uploaded image persists successfully"
+    type UploadedImageCreated = Event UploadedImage "Fired after a new uploaded image persists successfully"
 
     type UploadedImageDeleted = Event { id : string! } "Fired after an uploaded image is removed"
 
@@ -225,9 +225,7 @@ orbital UploadedImageOrbital {
         @description "Indicates an image failed to load during the upload process."
         @synonyms "error, failure, problem, unsuccessful"
         @tier "internal"
-      UploadedImageCreated {
-        row : UploadedImage
-      }
+      UploadedImageCreated
         @description "A new image has been successfully uploaded."
         @synonyms "added, new, received"
         @tier "domain"
@@ -286,9 +284,7 @@ orbital UploadedImageOrbital {
         @description "Indicates an image failed to load during the upload process."
         @synonyms "error, failure, problem, unsuccessful"
         @tier "internal"
-      UploadedImageCreated {
-        row : UploadedImage
-      }
+      UploadedImageCreated
         @description "A new image has been successfully uploaded."
         @synonyms "added, received, new image"
         @tier "domain"

package/behaviors/lolo/ui/core/atoms/std-modal.lolo

@@ -154,7 +154,7 @@ orbital ModalRecordOrbital {
         @description "Per-field label/placeholder/hint overrides, keyed by field name. Types, options and required-ness stay entity-schema-driven (declare once on the entity); override only display copy the entity's @description doesn't fit."
         @synonyms "field labels, custom labels, help text overrides, placeholder text"
         @tier "presentation"
-      mode : string = create
+      mode : "create" | "edit" = create
         @label "Is this for creating or editing?"
         @description "create = blank form; edit = pre-filled from the selected row."
         @synonyms "form mode, create or edit, new or update, add or modify"

package/behaviors/lolo/ui/core/atoms/std-pagination.lolo

@@ -97,7 +97,7 @@ orbital PagedItemOrbital {
         @label "Page size"
         @description "Rows per page used to derive total page count"
         @tier "presentation"
-      event : string = PAGE
+      event : event = PAGE
         @label "Page-change event"
         @description "Event emitted when the user picks a new page"
         @tier "internal"

package/behaviors/lolo/ui/core/atoms/std-rating-review.lolo

@@ -12,7 +12,7 @@ orbital RatingReviewOrbital {
 
     type ReviewsLoadFailed = Event { error : string, code : string } "Fired when reviews fetch fails"
 
-    type ReviewSaved = Event { row : @entity } "Fired after a new review persists successfully"
+    type ReviewSaved = Event ReviewView "Fired after a new review persists successfully"
 
     type ReviewSaveFailed = Event { error : string, code : string } "Fired when persist fails"
 
@@ -1086,7 +1086,7 @@ orbital RatingReviewOrbital {
         @description "Indicates that loading reviews was unsuccessful."
         @synonyms "failed, error, problem, unsuccessful"
         @tier "internal"
-      ReviewSaved { row : @entity }
+      ReviewSaved
         @description "Indicates a review has been successfully saved."
         @synonyms "saved, persisted, updated"
         @tier "domain"
@@ -1149,7 +1149,7 @@ orbital RatingReviewOrbital {
         @description "Indicates that loading reviews was unsuccessful."
         @synonyms "failure, error, problem, unsuccessful"
         @tier "internal"
-      ReviewSaved { row : @entity }
+      ReviewSaved
         @description "Indicates a review has been successfully stored."
         @synonyms "saved, persisted, updated"
         @tier "presentation"
@@ -1456,7 +1456,7 @@ orbital RatingReviewOrbital {
         @description "Triggers a refresh of the review data and UI."
         @synonyms "refresh, reload, reset"
         @tier "internal"
-      ReviewSaved { row : @entity }
+      ReviewSaved
         @description "Indicates a review has been successfully stored."
         @synonyms "saved, persisted, updated"
         @tier "presentation"
@@ -1490,7 +1490,7 @@ orbital RatingReviewOrbital {
         @description "Triggers a refresh of the review data and UI."
         @synonyms "refresh, reload, reset"
         @tier "internal"
-      ReviewSaved { row : @entity }
+      ReviewSaved
         @description "Indicates a review has been successfully stored."
         @synonyms "saved, persisted, updated"
         @tier "presentation"