@gregiteen/ssss-cli 0.8.0 → 0.9.0

package/README.md

@@ -4,7 +4,7 @@
 > Turn a running business into a single tradeable file — *a festival in a box.*
 
 [![conformance](https://img.shields.io/badge/conformance-fixtures%20%2B%20runtime%20%2B%20bundle-brightgreen)](conformance/)
-[![spec](https://img.shields.io/badge/spec-v0.7%20draft-blue)](docs/ssss-spec.md)
+[![spec](https://img.shields.io/badge/spec-v0.9%20draft-blue)](docs/ssss-spec.md)
 [![OKF](https://img.shields.io/badge/OKF-v0.1%20compatible-blue)](docs/ssss-spec.md)
 
 SSSS is the vendor-neutral standard and reference implementation shared by
@@ -16,8 +16,8 @@ SSSS is the vendor-neutral standard and reference implementation shared by
   `event` / `delete`) for mutating a vault, with idempotency replay and audit.
 - **The Workflow Runtime Contract** (§11.8) — workflows own triggers; daemons,
   crons, and webhooks derive idempotent event/task/run envelopes from the vault.
-- **Semantic projection and localization** (§11.9) — deterministic graph/search
-  records and hash-bound translation overlays, with private data excluded by default.
+- **Multilingual semantic runtime** (§11.9) — deterministic lexical evidence,
+  injected multilingual embeddings, and runtime rendering with symbolic controls fixed.
 - **Portability classification** (§5.5) — the keystone: every primitive is
   `structural`, `tenant_private`, or `resource_bound`, so a vault can be *sold*
   without leaking the operator's private data.
@@ -80,7 +80,6 @@ ssss import festival.ucw.json --vault ./new-tenant \
 | `ssss provision <bundle>` | Plan an install: params + link integrity → envelopes (§17). |
 | `ssss import <bundle>` | Replay a bundle/plan into a vault via the engine (idempotent). |
 | `ssss semantic <vault>` | Build or query a deterministic, privacy-safe semantic index (§11.9). |
-| `ssss localize <vault>` | Materialize approved translations as a derived projection outside the vault. |
 | `ssss autolink [dir]` | Generate OKF wiki-links across a vault. |
 | `ssss conformance` | Run the canonical conformance suite (§12). |
 | `ssss help [topic]` | Local docs: `runtime`, `portability`, `bundle`, `provisioning`, `leases`, … |
@@ -93,7 +92,7 @@ Run `ssss <command> --help` for flags, or `ssss help <topic>` for concepts.
 import { createEngine } from '@gregiteen/ssss-cli/engine';
 import { exportBundle, validateBundle, provisionBundle, importBundle } from '@gregiteen/ssss-cli/bundle';
 import { planWorkflowTrigger } from '@gregiteen/ssss-cli/runtime';
-import { buildSemanticIndex, searchSemanticIndex, materializeLocale } from '@gregiteen/ssss-cli/semantic';
+import { buildSemanticIndex, searchSemanticIndex, renderSemanticRecord } from '@gregiteen/ssss-cli/semantic';
 
 const bundle = exportBundle('./my-vault', { profile: 'sale', name: 'Festival in a Box' });
 const { valid, errors } = validateBundle(bundle);
@@ -119,9 +118,9 @@ const runtimePlan = planWorkflowTrigger({
   scheduledFor: '2026-07-02T14:00:00.000Z',
 });
 
-const index = buildSemanticIndex('./my-vault', { locale: 'es' });
+const index = buildSemanticIndex('./my-vault');
 const matches = searchSemanticIndex(index, 'política de reembolsos');
-materializeLocale('./my-vault', 'es', './derived/es');
+const rendered = await renderSemanticRecord(matches[0].document, { language: 'es', render: renderer });
 ```
 
 Exports: `@gregiteen/ssss-cli` / `@gregiteen/ssss-cli/engine` (Operation Contract engine),
@@ -129,9 +128,9 @@ Exports: `@gregiteen/ssss-cli` / `@gregiteen/ssss-cli/engine` (Operation Contrac
 `@gregiteen/ssss-cli/runtime`, `@gregiteen/ssss-cli/semantic`,
 `@gregiteen/ssss-cli/frontmatter`.
 
-Translations are structural overlay documents that target an exact source hash. Only
-`title`, `description`, and body are translated; types, ids, permissions, enums,
-relations, and other control fields remain sourced from the canonical document.
+Canonical content is authored once in any language. Multilingual embedding and render
+adapters handle cross-language retrieval and presentation at runtime; primitive IDs,
+field IDs, enum codes, permissions, paths, hashes, and relations never change.
 
 ## Portability — why a vault is safe to sell
 
@@ -158,13 +157,13 @@ npm test                    # == ssss conformance --engine
 ## Repository layout
 
 ```
-docs/ssss-spec.md          The normative specification (v0.7 draft).
+docs/ssss-spec.md          The normative specification (v0.9 draft).
 docs/help/                 Topic docs surfaced by `ssss help`.
 registry/core.json         15 document + 5 contract primitives; semantic, bundle & provisioning schemas.
 registry/extensions/       Application extension registries (e.g. festech).
 src/engine.mjs             Operation Contract engine (§6).
 src/runtime.mjs            Workflow trigger → event/task/run envelope planning (§11.8).
-src/semantic.mjs           Deterministic semantic index + localization projection (§11.9).
+src/semantic.mjs           Multilingual semantic retrieval + runtime rendering (§11.9).
 src/bundle.mjs             export / validate / provision / import (§16–§17).
 src/registry.mjs           Registry-driven type + portability resolution.
 src/frontmatter.mjs        Zero-dependency YAML frontmatter.

package/VERSION

@@ -1 +1 @@
-0.8.0
+0.9.0

package/conformance/README.md

@@ -33,7 +33,7 @@ The runner validates that the fixture file is well-formed and that every
 `expected_response` is internally consistent with the envelope rules. With
 `--engine`, it replays every fixture through the reference engine (`src/engine.mjs`),
 checks workflow runtime planning (`src/runtime.mjs`, spec §11.8), extension-registry
-collision/schema/symlink safety, semantic search and localization (`src/semantic.mjs`,
+collision/schema/symlink safety and multilingual semantic retrieval/rendering (`src/semantic.mjs`,
 §11.9), runs regression coverage for patch serialization and leases (§6/§7), and
 round-trips the
 reference bundle (validate → provision → import → re-import, spec §16/§17)

package/conformance/fixtures.json

@@ -747,66 +747,22 @@
     },
     {
       "id": "fixture-024",
-      "name": "Translation source — valid structural rule",
-      "description": "Creates the exact structural source used by the translation overlay fixtures.",
+      "name": "Multilingual source — valid Spanish structural rule",
+      "description": "Natural-language fields may be authored in any language while symbolic controls remain stable.",
       "request": {
         "type": "operation",
         "idempotency_key": "35353535-3535-3535-3535-353535353535",
         "path": "rules/translatable-refund-rule.md",
         "workspace_id": "TEST_WORKSPACE_ID",
         "actor": { "role": "system" },
-        "content": "---\ntype: rule\ntitle: \"Translatable Refund Rule\"\ndescription: \"Structural source used by the translation conformance fixture.\"\ntimestamp: \"2026-07-10T00:00:00Z\"\nname: \"Translatable Refund Rule\"\n---\nRefunds are available before the deadline.",
-        "intent": "Conformance fixture: create a structural translation source"
+        "content": "---\ntype: rule\ntitle: \"Política de reembolsos\"\ndescription: \"Explica cuándo están disponibles los reembolsos.\"\ntimestamp: \"2026-07-10T00:00:00Z\"\nname: refund-policy\nlanguage: es\n---\nLos reembolsos están disponibles antes de la fecha límite.",
+        "intent": "Conformance fixture: create a non-English structural source"
       },
       "expected_response": {
         "success": true,
         "type": "operation",
         "validation": { "valid": true, "type": "rule", "errors": [] }
       }
-    },
-    {
-      "id": "fixture-025",
-      "name": "Translation overlay — valid hash-bound Spanish projection",
-      "description": "A translation overlay with a safe source path, exact source hash, valid locale, and approved translatable fields must validate.",
-      "preconditions": ["fixture-024 must be committed first"],
-      "request": {
-        "type": "operation",
-        "idempotency_key": "36363636-3636-3636-3636-363636363636",
-        "path": "translations/es/rules/translatable-refund-rule.md",
-        "workspace_id": "TEST_WORKSPACE_ID",
-        "actor": { "role": "system" },
-        "content": "---\ntype: translation\ntitle: \"Spanish Refund Rule Translation\"\ndescription: \"Approved Spanish translation overlay conformance fixture.\"\ntimestamp: \"2026-07-10T00:00:00Z\"\ntranslation_id: translatable-refund-rule-es\nsource_path: rules/translatable-refund-rule.md\nsource_hash: sha256:bc61f36adc3aa1fa2c4da7a48841cb16bc56df0ec052f70d4ee8514a98dc6e62\nlocale: es\nstatus: approved\ntranslated_fields: [title, body]\ntranslated_title: Regla de reembolsos traducible\n---\nLos reembolsos están disponibles antes de la fecha límite.",
-        "intent": "Conformance fixture: valid translation primitive"
-      },
-      "expected_response": {
-        "success": true,
-        "type": "operation",
-        "validation": { "valid": true, "type": "translation", "errors": [] }
-      }
-    },
-    {
-      "id": "fixture-026",
-      "name": "Translation overlay — invalid locale is denied",
-      "description": "Registry pattern enforcement rejects non-BCP47 locale syntax before an invalid overlay can enter the vault.",
-      "preconditions": ["fixture-024 must be committed first"],
-      "request": {
-        "type": "operation",
-        "idempotency_key": "37373737-3737-3737-3737-373737373737",
-        "path": "translations/invalid/rules/translatable-refund-rule.md",
-        "workspace_id": "TEST_WORKSPACE_ID",
-        "actor": { "role": "system" },
-        "content": "---\ntype: translation\ntitle: \"Invalid Locale Translation\"\ndescription: \"Translation fixture that must be rejected.\"\ntimestamp: \"2026-07-10T00:00:00Z\"\ntranslation_id: invalid-locale-translation\nsource_path: rules/translatable-refund-rule.md\nsource_hash: sha256:bc61f36adc3aa1fa2c4da7a48841cb16bc56df0ec052f70d4ee8514a98dc6e62\nlocale: not_a_locale\nstatus: approved\ntranslated_fields: [title]\ntranslated_title: Invalid\n---\nInvalid.",
-        "intent": "Conformance fixture: invalid translation locale"
-      },
-      "expected_response": {
-        "success": false,
-        "validation": {
-          "valid": false,
-          "type": "translation",
-          "errors": ["Invalid format for field 'locale' on type 'translation'."]
-        }
-      },
-      "expected_http_status": 422
     }
   ],
   "error_codes": {

package/conformance/reference-bundle.ucw.json

@@ -4,7 +4,7 @@
     "description": "A complete music-festival operation as a tradeable SSSS bundle.",
     "version": "1.0.0",
     "exported_at": "1970-01-01T00:00:00.000Z",
-    "ssss_core_version": "0.7",
+    "ssss_core_version": "0.9",
     "required_extensions": [
       "festech"
     ],
@@ -15,7 +15,6 @@
       "page": 1,
       "security_role": 1,
       "rule": 1,
-      "translation": 1,
       "workflow": 1
     },
     "provisioning": [
@@ -86,10 +85,10 @@
         "description": "Satisfies the domain resource requirement field 'registrar'."
       }
     ],
-    "file_count": 18,
+    "file_count": 14,
     "provenance": {
-      "content_hash": "sha256:27c7c21826552f73dd14a56018454f4c19bda002029d5db42ecb14d77667b699",
-      "exporter": "@gregiteen/ssss-cli@0.8.0"
+      "content_hash": "sha256:7febd673938a3dc04c068e0bf08097a9783c09e612606d2df9a4db8dcb8907f5",
+      "exporter": "@gregiteen/ssss-cli@0.9.0"
     }
   },
   "files": [
@@ -141,22 +140,6 @@
       "path": "tasks/index.md",
       "content": "# Index — tasks\n\n- [Ticket 4821 Seat Change](./ticket-4821.md)\n"
     },
-    {
-      "path": "translations/es/index.md",
-      "content": "# Index — translations/es\n\n- [rules/](./rules/index.md)\n"
-    },
-    {
-      "path": "translations/es/rules/index.md",
-      "content": "# Index — translations/es/rules\n\n- [Spanish Refund Policy Translation](./refund-policy.md)\n"
-    },
-    {
-      "path": "translations/es/rules/refund-policy.md",
-      "content": "---\ntype: translation\ntitle: Spanish Refund Policy Translation\ndescription: Approved Spanish presentation overlay for the festival refund policy.\ntimestamp: 2026-07-10T00:00:00Z\ntranslation_id: refund-policy-es\nsource_path: rules/refund-policy.md\nsource_hash: sha256:a5f97ef9e2cc143d397f87a96c7fc20f4a3cd0515835c2ab659c9ac6db0d07e3\nlocale: es\nstatus: approved\ntranslated_fields: [title, description, body]\ntranslated_title: Política de reembolsos\ntranslated_description: Explica cuándo están disponibles los reembolsos para asistentes.\n---\nLos reembolsos están disponibles hasta catorce días antes del evento."
-    },
-    {
-      "path": "translations/index.md",
-      "content": "# Index — translations\n\n- [es/](./es/index.md)\n"
-    },
     {
       "path": "workflows/box-office.md",
       "content": "---\ntype: workflow\ntitle: Box Office\ndescription: Ticket-sales workflow for a music festival.\ntimestamp: 2026-07-02T00:00:00Z\nname: Box Office\nslug: box-office\n---\nSell tickets, then hand the buyer to [[concierge]] for questions."

package/docs/help/bundle.md

@@ -37,8 +37,8 @@ be silently edited. `primitive_inventory` is registry-driven (a count per `type`
 not a closed category enum.
 
 Bundle validation also applies registry patterns and document-reference rules.
-For example, a `translation` entry must name an included structural source and
-its `source_hash` must match that source's exact bytes.
+Primitive, extension, and migration dependencies must resolve against the effective
+registry before any file is committed.
 
 ## Parameters
 

package/docs/help/overview.md

@@ -5,7 +5,7 @@ and mutation contract for AI-agent state. A vault is a directory of Markdown fil
 with YAML frontmatter; every file declares a `type` defined in the registry.
 
 `@gregiteen/ssss-cli` is the reference implementation: a dependency-free Operation Contract
-engine, a registry-driven validator, semantic/localization projections, and the
+kernel, a registry-driven validator, multilingual semantic adapters, and the
 `.ucw` bundle/provisioning tooling.
 
 ## The pieces
@@ -16,7 +16,7 @@ engine, a registry-driven validator, semantic/localization projections, and the
 | Core registry | `registry/core.json` | The 15 document primitives + 5 contract primitives, plus semantic (§11.9), bundle (§16), and provisioning (§17) contracts. |
 | Engine | `src/engine.mjs` | The §6 Operation Contract pipeline (operation/patch/event/delete). |
 | Runtime | `src/runtime.mjs` | The §11.8 workflow trigger → event/task/run envelope planner. |
-| Semantic | `src/semantic.mjs` | Deterministic semantic graph/search projection and translation overlays (§11.9). |
+| Semantic | `src/semantic.mjs` | Lexical evidence, multilingual embeddings, privacy filters, and runtime rendering (§11.9). |
 | Bundle | `src/bundle.mjs` | export / validate / provision / import (§16–§17). |
 | Conformance | `conformance/` | Fixtures every host must pass. |
 
@@ -30,8 +30,8 @@ vault ──export──▶ .ucw bundle ──provision──▶ envelope plan
 ## Commands
 
 Run `ssss help <topic>` for any of:
-`runtime`, `semantic`, `localization`, `portability`, `bundle`, `provisioning`,
+`runtime`, `semantic`, `portability`, `bundle`, `provisioning`,
 `export`, `provision`, `import`, `conformance`, `autolink`.
 
 Run `ssss <command> --help` for: `export`, `validate`, `inspect`, `provision`,
-`import`, `semantic`, `localize`, `autolink`, `conformance`.
+`import`, `semantic`, `autolink`, `conformance`.

package/docs/help/semantic.md

@@ -6,8 +6,8 @@ Markdown. The projection is disposable: the vault remains the only source of tru
 ```bash
 ssss semantic ./vault
 ssss semantic ./vault --query "refund policy" --limit 5
-ssss semantic ./vault --locale es --query "política de reembolsos"
-ssss semantic ./vault --locale es --out ./derived/semantic-es.json
+ssss semantic ./vault --query "política de reembolsos"
+ssss semantic ./vault --out ./derived/semantic.json
 ```
 
 Records include stable identity, source path and hash, type, portability, surface
@@ -30,8 +30,9 @@ Symlinked vault entries and unsafe paths fail closed.
 ```js
 import { buildSemanticIndex, searchSemanticIndex } from '@gregiteen/ssss-cli/semantic';
 
-const index = buildSemanticIndex('./vault', { locale: 'es' });
+const index = buildSemanticIndex('./vault');
 const results = searchSemanticIndex(index, 'reembolsos', { limit: 10 });
 ```
 
-See also: `ssss help localization`.
+Hosts may inject a multilingual embedding adapter and runtime renderer. Presentation
+may change language and formatting, but never symbolic controls or authorization.

package/docs/ssss-spec.md

@@ -31,9 +31,9 @@ SSSS additionally defines the **Operation Contract**: a single, validated, idemp
 envelope through which all agent-generated mutations must flow. This makes
 AI-generated state changes deterministic, replayable, conflict-safe, and auditable.
 
-Its semantic projection contract turns the same canonical files into a deterministic
-searchable graph, while translation overlays localize natural-language surfaces
-without mutating symbolic control fields or private operational data.
+Its semantic runtime turns the same canonical files into a deterministic searchable
+graph, while multilingual embedding and render adapters localize presentation without
+mutating symbolic control fields or private operational data.
 
 Any tool, IDE, agent framework, daemon, or CLI that can read Markdown can
 interoperate with an SSSS vault. The only thing that distinguishes a memory engine,
@@ -195,7 +195,7 @@ primitive — it implements the subset its product requires — but any primitiv
 | `page` | capability | structural | A VFS-native sandboxed custom workspace page. |
 | `migration` | meta | structural | An SSSS schema migration state record. |
 | `release` | meta | structural | An SSSS system schema version release record. |
-| `translation` | localization | structural | A hash-bound, non-destructive localization overlay for a structural source document. |
+| `primitive` | meta | structural | A governed, versioned definition for a namespaced SSSS primitive. |
 
 The **Portability** column is the primitive's default portability class (§5.5); a host
 resolves it from `registry/core.json`. Extension registries assign their own primitives a
@@ -217,7 +217,7 @@ Document primitives are either:
 
 - **Replace-type** — the whole file represents current state; a write replaces it
   entirely (`memory`, `skill`, `assistant`, `workflow`, `model`, `task`,
-  `conflict`, `translation`).
+  `conflict`, `primitive`).
 - **Append-type** — the file is an ordered, append-only log; writes add records to
   the body and MUST NOT rewrite prior records (`conversation`, `run`).
 
@@ -561,48 +561,13 @@ released_at: 2026-05-16T12:00:00Z
 ---
 ```
 
-#### `translation`
+#### `primitive`
 
-A non-destructive localization overlay for one structural source document. A
-translation is itself `structural`, but it does not replace or fork the source. The
-source remains authoritative for identity, behavior, permissions, enums, links, and
-all other symbolic control fields.
-
-REQUIRED: `type`, `translation_id`, `source_path`, `source_hash`, `locale`, `status`
-(`draft|reviewed|approved`), and `translated_fields` (a subset of
-`title|description|body`). OPTIONAL: `translated_title`, `translated_description`,
-`translator`, `reviewed_at`. The Markdown body is the translated body when
-`translated_fields` includes `body`.
-
-`translation_id`, `source_path`, and `locale` are immutable after creation.
-`source_path` MUST be a safe, vault-relative path to an existing `structural`
-document whose type is not `translation`. `source_hash` MUST equal the source's
-current SHA-256 content hash, written as `sha256:<64 lowercase hex characters>`.
-A stale, missing, private, resource-bound, recursive, traversing, or symlinked source
-MUST be rejected.
-
-```markdown
----
-type: translation
-title: "Política de reembolsos — español"
-description: "Traducción al español de la política de reembolsos."
-timestamp: 2026-07-10T00:00:00Z
-translation_id: refund-policy-es
-source_path: rules/refund-policy.md
-source_hash: sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef
-locale: es
-status: approved
-translated_fields: [title, description, body]
-translated_title: "Política de reembolsos"
-translated_description: "Reglas de reembolso para compradores."
----
-
-Los reembolsos están disponibles dentro de los treinta días.
-```
-
-Draft and reviewed translations MAY be stored and previewed, but only approved,
-hash-current overlays are applied by default to canonical localized projections
-(§11.9).
+A governed definition for a namespaced primitive that can be authored in any human
+language without changing the core registry. REQUIRED: `type`, `primitive_id`,
+`namespace`, `version`, `name`, `mutation`, `portability`, `scopes`, and `fields`.
+Stable primitive, field, enum, capability, and action identifiers are symbolic and
+language-independent. Labels and descriptions are multilingual presentation data.
 
 ### 5.5 Portability Classification
 
@@ -1106,10 +1071,10 @@ for planning a workflow trigger into a `workflow_triggered` event envelope and a
 task `operation` envelope. Hosts MAY implement their own daemon, but SHOULD pass the
 runtime conformance checks to prove the same source-of-truth and idempotency rules.
 
-### 11.9 Semantic Projection & Localization Contract
+### 11.9 Multilingual Semantic Runtime Contract
 
 The semantic layer is a **derived projection** over validated vault documents. It
-MUST be deterministic for the same vault bytes, registry set, locale, and projection
+MUST be deterministic for the same vault bytes, registry set, adapter identity, and projection
 options. It MUST NOT become a second source of truth.
 
 Each projected record SHOULD expose a stable identity, source path and content hash,
@@ -1121,29 +1086,20 @@ available as a dependency-free interoperability baseline.
 
 The safe default projection contains only `structural` documents. It MUST exclude
 `tenant_private` and `resource_bound` documents unless the caller explicitly enables
-private indexing in an authorized context. A localized export MUST use the same safe
-default, so requesting a locale can never implicitly disclose conversations, runs,
-tasks, credentials, customer data, or bound resource values.
-
-When a locale is requested, the host MAY apply one eligible `translation` (§5.4) per
-source. Eligibility requires all of the following:
-
-1. The overlay locale normalizes to the requested locale.
-2. Its status is `approved`, unless a caller explicitly opts into draft preview.
-3. The source is an existing, non-symlinked `structural` document.
-4. `source_hash` exactly matches the current source bytes.
-5. There is no second eligible overlay for the same source and locale.
-
-An overlay may replace only `title`, `description`, and body. It MUST preserve `type`,
-paths, ids, enums, status, permissions, portability, relations, and every other
-symbolic field from the source. Stale hashes, duplicate overlays, traversal, symlink
-targets, recursive translations, and translations of non-structural sources MUST
-fail closed.
-
-A materialized locale is a disposable projection, not a translated vault. It MUST be
-written outside the source vault to a new or empty non-symlinked directory, preserve
-source-relative paths, and include enough projection metadata to identify its locale
-and source hashes. It may be deleted and rebuilt at any time.
+private indexing in an authorized context. Language selection MUST NOT widen scope or
+implicitly disclose conversations, runs, tasks, credentials, customer data, or bound
+resource values.
+
+A host MAY inject a multilingual embedding adapter. Every enriched record MUST carry
+the embedding model identity and vector dimension. Search SHOULD report lexical and
+semantic evidence separately before computing a hybrid score.
+
+A host MAY inject an LLM render adapter at presentation time. The render request MUST
+carry an invariant-control block. Rendering MAY change natural-language title,
+description, body, formatting, dates, and units, but MUST NOT change primitive IDs,
+field IDs, enum codes, actions, permissions, paths, versions, hashes, or relations.
+Canonical documents are authored once in any language; SSSS 0.9 neither requires nor
+materializes translation documents or localized vault trees.
 
 ---
 
@@ -1161,8 +1117,8 @@ Fixtures are distributed as a JSON document carrying:
 - `runtime_contract` — trigger vocabulary and daemon idempotency rules (§11.8).
 - registry-extension checks — schema shape, regex validity, symlink rejection, and
   core/sibling collision rejection.
-- semantic/localization checks — deterministic indexing, privacy defaults, graph
-  edges, exact source hashes, immutable overlay identity, and safe materialization
+- multilingual semantic checks — deterministic indexing, privacy defaults, graph
+  edges, embedding provenance, cross-language retrieval, and invariant rendering
   (§11.9).
 - `fixtures[]` — each with a `request`, an `expected_response`, and an
   OPTIONAL `expected_http_status`.
@@ -1172,7 +1128,7 @@ The conformance fixture set is the shared test contract between all SSSS
 implementations. A host MUST NOT claim SSSS conformance without passing the current
 fixture set. Hosts implementing workflow daemons SHOULD also run the reference
   runtime checks exposed by `@gregiteen/ssss-cli/runtime`. Hosts exposing semantic
-  search or localized projections MUST also pass the §11.9 checks.
+  search or runtime rendering MUST also pass the §11.9 checks.
 
 ---
 
@@ -1200,7 +1156,7 @@ opaque ID as the slug and keep the human-readable label in `title` / `name`.
 This document is versioned independently of any host and of the conformance
 fixture set.
 
-- The spec version is stated in the document header (currently **v0.7 — Draft**).
+- The spec version is stated in the document header (currently **v0.9 — Draft**).
 - Breaking changes to the file format, the type registry, or the Operation
   Contract increment the spec version.
 - Until **v1.0**, any version MAY introduce breaking changes.
@@ -1417,8 +1373,7 @@ cannot resolve a link MUST fail the provision rather than emit a dangling refere
 
 The following frontmatter keys are reserved by this spec across all primitives and
 MUST NOT be repurposed by hosts: `type`, `slug`, `schema_version`, `status`,
-`feedback`, `confidence`, `semantic_id`, `relations`, `locale`, `translation_id`,
-`source_path`, `source_hash`, and `translated_fields`.
+`feedback`, `confidence`, `semantic_id`, `relations`, and `language`.
 
 Hosts adding their own frontmatter fields SHOULD prefix them `x_` to remain
 forward-compatible with future spec revisions.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gregiteen/ssss-cli",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "CLI tools and the reference engine for the Structured Semantic Syntax System",
   "main": "src/engine.mjs",
   "exports": {
@@ -11,6 +11,23 @@
     "./frontmatter": "./src/frontmatter.mjs",
     "./bundle": "./src/bundle.mjs",
     "./semantic": "./src/semantic.mjs",
+    "./primitive": "./src/primitive.mjs",
+    "./validator": "./src/validator.mjs",
+    "./kernel": {
+      "types": "./types/kernel.d.ts",
+      "import": "./src/kernel.mjs",
+      "default": "./src/kernel.mjs"
+    },
+    "./vfs": "./src/vfs.mjs",
+    "./identity": "./src/authorization.mjs",
+    "./authorization": "./src/authorization.mjs",
+    "./leases": "./src/leases.mjs",
+    "./idempotency": "./src/idempotency.mjs",
+    "./events": "./src/events.mjs",
+    "./projections": "./src/projections.mjs",
+    "./ui": "./src/ui.mjs",
+    "./http": "./src/http.mjs",
+    "./guard": "./src/guard.mjs",
     "./conformance/fixtures.json": "./conformance/fixtures.json",
     "./conformance/reference-bundle.ucw.json": "./conformance/reference-bundle.ucw.json",
     "./registry/core.json": "./registry/core.json",
@@ -25,6 +42,7 @@
   },
   "files": [
     "src",
+    "types",
     "scripts",
     "registry",
     "conformance",
@@ -50,8 +68,9 @@
     "ucw",
     "provisioning",
     "semantic-search",
-    "localization",
-    "translation"
+    "multilingual",
+    "generative-ui",
+    "application-kernel"
   ],
   "author": "Greg Iteen",
   "license": "ISC",

package/registry/core.json

@@ -1,8 +1,8 @@
 {
   "$schema": "https://ssss.dev/registry/v1",
   "registry": "core",
-  "spec_version": "0.7",
-  "description": "The canonical SSSS core primitive registry. These 15 document primitives and 5 contract primitives are defined by the SSSS specification (docs/ssss-spec.md §5) and are owned by this standard. Every document primitive declares a portability class (§5.5); the registry also defines the workflow runtime contract (§11.8), semantic/localization contract (§11.9), `.ucw` bundle format (§16), and provisioning contract (§17). A conformant host MUST implement any core primitive it uses according to this registry. Applications extend the core with their own primitives via an extension registry; extensions MUST NOT redefine a core or sibling-extension type.",
+  "spec_version": "0.9",
+  "description": "The canonical SSSS core registry and semantic application-kernel contract. Core primitives are qualified as ssss:<name>; applications define namespaced primitives through layered extension registries without copying or redefining core behavior.",
   "conformance": "A host is core-conformant for a primitive if a file of that type validates exactly when all required_fields are present and non-empty, and (for append_only types) writes only append.",
 
   "document_primitives": {
@@ -137,33 +137,26 @@
       "required_fields": ["type", "release_id", "version", "schema_version", "summary", "released_at"],
       "spec_ref": "§5.4 release"
     },
-    "translation": {
-      "family": "localization",
-      "canonical_path": "translations/<locale>/<source-path>.md",
+    "primitive": {
+      "family": "meta",
+      "canonical_path": "primitives/<namespace>/<id>.md",
       "append_only": false,
       "portability": "structural",
-      "required_fields": ["type", "translation_id", "source_path", "source_hash", "locale", "status", "translated_fields"],
-      "optional_fields": ["translated_title", "translated_description", "translator", "reviewed_at"],
-      "immutable_fields": ["translation_id", "source_path", "locale"],
+      "required_fields": ["type", "primitive_id", "namespace", "version", "name", "mutation", "portability", "scopes", "fields"],
+      "optional_fields": ["language", "aliases", "path_template", "capabilities", "events", "projections", "ui", "migrations", "requires"],
+      "immutable_fields": ["primitive_id", "namespace"],
       "enums": {
-        "status": ["draft", "reviewed", "approved"],
-        "translated_fields": ["title", "description", "body"]
+        "mutation": ["replace", "append"],
+        "portability": ["structural", "tenant_private", "resource_bound"],
+        "scopes": ["system", "account", "workspace", "user"]
       },
       "patterns": {
-        "translation_id": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$",
-        "locale": "^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8})*$",
-        "source_hash": "^sha256:[a-f0-9]{64}$"
-      },
-      "references": {
-        "source_path": {
-          "must_exist": true,
-          "disallowed_types": ["translation"],
-          "allowed_portability": ["structural"],
-          "hash_field": "source_hash"
-        }
+        "primitive_id": "^[a-z][a-z0-9_-]{0,63}:[a-z][a-z0-9_-]{0,127}$",
+        "namespace": "^[a-z][a-z0-9_-]{0,63}$",
+        "language": "^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8})*$"
       },
-      "notes": "A non-destructive presentation overlay. Only title, description, and body may be translated; symbolic control fields remain byte-for-byte sourced from the referenced structural document.",
-      "spec_ref": "§5.4 translation"
+      "notes": "A governed, versioned definition for a repository, extension, workspace, or user primitive. Natural-language labels may use any language; stable field, enum, capability, and action identifiers are never translated.",
+      "spec_ref": "§5.4 primitive"
     }
   },
 
@@ -178,7 +171,7 @@
   "universal_frontmatter": {
     "required": ["type", "title", "description", "timestamp"],
     "recommended_okf": ["resource", "tags", "aliases"],
-    "recommended_semantic": ["semantic_id", "resource", "tags", "aliases", "relations", "locale"],
+    "recommended_semantic": ["semantic_id", "resource", "tags", "aliases", "relations", "language"],
     "spec_ref": "§4.2"
   },
 
@@ -253,13 +246,13 @@
     "identity_fields": ["semantic_id", "resource", "type", "path"],
     "surface_fields": ["title", "description", "name", "slug", "aliases", "tags"],
     "relation_fields": ["relations", "wiki_links", "markdown_links"],
-    "translatable_fields": ["title", "description", "body"],
-    "locale_pattern": "^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8})*$",
-    "safe_default": "Semantic indexes exclude tenant_private and resource_bound documents unless include_private is explicitly enabled. Translation overlays may reference structural sources only.",
+    "renderable_fields": ["title", "description", "body"],
+    "language_pattern": "^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{2,8})*$",
+    "safe_default": "Semantic adapters exclude tenant_private and resource_bound documents unless an authorized context explicitly includes them. Runtime rendering never changes symbolic controls.",
     "spec_ref": "§11.9"
   },
 
-  "reserved_keys": ["type", "slug", "schema_version", "status", "feedback", "confidence", "semantic_id", "locale", "translation_of", "translation_source_hash"],
+  "reserved_keys": ["type", "slug", "schema_version", "status", "feedback", "confidence", "semantic_id", "language", "relations"],
   "host_field_prefix": "x_",
   "spec_ref_reserved": "Appendix A"
 }