@gregiteen/ssss-cli 0.8.0 → 0.9.1

package/CHANGELOG.md

@@ -7,6 +7,57 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.9.1] - 2026-09-24
+### Fixed
+- `JsonlEventStore.append` no longer re-reads and re-parses the whole
+  `<workspace>.jsonl` log on every append to reject a duplicate `event_id`.
+  Each store instance reads a log once on its first append, keeps a set of the
+  event ids it has seen, and re-reads only when the log's stat (size, mtime,
+  ctime, inode) shows another instance or process has changed it. A batch of N
+  appends is now one log read instead of N. Replaying 3,250 appends in fresh
+  instances of 400 against a 7,915-event, 9.6 MB log dropped from ~280 s to
+  ~1.7 s. Duplicate rejection, symlink refusal (now also enforced with
+  `O_NOFOLLOW` where the platform has it), 0600 log mode, and replay order are
+  unchanged.
+- `MemoryEventStore.append` checks for duplicates against a set of ids instead
+  of scanning every stored event.
+- The SBOM generator derives the package tarball URL from `package.json`
+  instead of a hardcoded 0.9.0 URL.
+
+### Added
+- 0.9 conformance checks for the JSONL event store: duplicates rejected from
+  the same instance, another instance, and another process; one log read for
+  200 appends; rebuild after a foreign append; replay order and cursor resume;
+  0600 mode; symlink refusal.
+
+## [0.9.0] - 2026-07-10
+### Added
+- Shared application kernel (`kernel.execute`) with verified-principal injection,
+  canonical request hashing, idempotent replay/conflict, resource prepare/finalize/
+  reconcile hooks, and TypeScript command contracts under `@gregiteen/ssss-cli/kernel`.
+- Host adapter contracts and dual reference implementations for VFS, identity/
+  capability authorization, leases, idempotency, events, projections, semantic
+  retrieval/rendering, and generative UI manifests.
+- Runtime primitive authoring (`ssss:primitive` meta-schema), layered registry
+  composition, aliases, dependency ranges, policy floors, and registry integrity locks.
+- CLI surfaces: `ssss primitive`, `ssss registry`, `ssss adapter conformance`, and
+  `ssss migrate 0.8-to-0.9` dry-run diagnostics with backup manifests.
+- Bundle `manifest.dependencies` for primitives, extensions, migrations, and
+  integrity digests aligned with provenance.
+- Dedicated 0.9 conformance suite covering adapters, kernel leases, projection
+  rebuild/drift isolation, UI adversarial cases, and CLI smoke paths.
+
+### Changed
+- Core registry/spec version is now `0.9`. Canonical documents are authored once;
+  multilingual presentation uses embedding/render adapters instead of stored
+  translation trees.
+- The reference engine is a compatibility façade over the shared kernel; hosts must
+  inject adapters rather than re-implement mutation stages.
+
+### Removed
+- The `translation` document primitive and required localized-vault materialization
+  workflow from the 0.9 core surface.
+
 ## [0.8.0] - 2026-07-10
 ### Changed
 - Core registry/spec version is now `0.7`. Registry `patterns`,
@@ -128,14 +179,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **The `.ucw` bundle format (spec §16, registry `bundle`)** — the canonical transportable
   package of a vault: a manifest plus path-sorted files, content-hashed for integrity. The
   manifest declares `ssss_core_version`, `required_extensions`, `export_profile`,
-  `primitive_inventory` (registry-driven, replacing ultrachat's closed `categories` enum),
+  `primitive_inventory` (registry-driven, replacing the legacy closed `categories` enum),
   `provisioning[]`, `parameters[]`, and `provenance{content_hash, exporter, signature?}`.
-  Harvested from ultrachat's `WorkspaceVfsPackageService` and generalized to be portability-
+  Harvested from the legacy `WorkspaceVfsPackageService` and generalized to be portability-
   and registry-driven.
 - **The provisioning contract (spec §17, registry `provisioning`)** — three deterministic,
   idempotent verbs: `export` (pure, profile-filtered), `provision` (params + link-integrity
   + id-remap → replayable envelope plan), `import` (engine replay, idempotent via
-  idempotency_key). Adopts ultrachat's `WorkspaceProvisioningStep.mode`/`system` and
+  idempotency_key). Adopts the legacy `WorkspaceProvisioningStep.mode`/`system` and
   `WorkspaceGraphEdge.relation` as the canonical binding/dependency vocabularies, plus
   `installMode` composition and structural-only `migration`+`patch` upgrades.
 - **Reference engine for bundles (`src/bundle.mjs`)** — dependency-free `exportBundle`,
@@ -166,7 +217,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   real resource bound at provision). Export profiles `backup | template | sale` are filters
   over these classes; `template`/`sale` exports MUST drop all `tenant_private` primitives.
   Files MAY override their type default with `x_portability`. Lifted and generalized from
-  ultrachat's ad-hoc export filter in `WorkspaceVfsPackageService`.
+  the legacy ad-hoc export filter in `WorkspaceVfsPackageService`.
 - **`delete` envelope (spec §6.2)** — promoted from festech's `SsssOperationService` into
   the canonical Operation Contract as the fourth envelope type. Removes a replace-type file,
   rejects append-type targets, and emits a deletion event for audit. Idempotent.

package/README.md

@@ -1,31 +1,22 @@
 # SSSS — Structured Semantic Syntax System
 
 > A database-free, Markdown-first schema and mutation contract for AI-agent state.
-> Turn a running business into a single tradeable file — *a festival in a box.*
+> Turn an autonomous agent ecosystem into a single portable, tradeable bundle.
 
 [![conformance](https://img.shields.io/badge/conformance-fixtures%20%2B%20runtime%20%2B%20bundle-brightgreen)](conformance/)
-[![spec](https://img.shields.io/badge/spec-v0.7%20draft-blue)](docs/ssss-spec.md)
+[![spec](https://img.shields.io/badge/spec-v0.9-blue)](docs/ssss-spec.md)
 [![OKF](https://img.shields.io/badge/OKF-v0.1%20compatible-blue)](docs/ssss-spec.md)
 
-SSSS is the vendor-neutral standard and reference implementation shared by
-[festech.live](https://festech.live), **ultrachat**, and **total-recall**. It defines:
-
-- **Document primitives** — typed Markdown files with YAML frontmatter (`workflow`,
-  `rule`, `page`, `assistant`, …), validated against a registry, not hand-written code.
-- **The Operation Contract** (§6) — four envelope types (`operation` / `patch` /
-  `event` / `delete`) for mutating a vault, with idempotency replay and audit.
-- **The Workflow Runtime Contract** (§11.8) — workflows own triggers; daemons,
-  crons, and webhooks derive idempotent event/task/run envelopes from the vault.
-- **Semantic projection and localization** (§11.9) — deterministic graph/search
-  records and hash-bound translation overlays, with private data excluded by default.
-- **Portability classification** (§5.5) — the keystone: every primitive is
-  `structural`, `tenant_private`, or `resource_bound`, so a vault can be *sold*
-  without leaking the operator's private data.
-- **The `.ucw` bundle format** (§16) and **provisioning contract** (§17) — package a
-  vault, then `export → provision → import` it into a fresh tenant, deterministically.
-
-This package, `@gregiteen/ssss-cli`, is **dependency-free**: a host needs neither Zod nor a YAML
-library to be conformant. The reference engine *is* the validator.
+SSSS is a vendor-neutral standard and reference implementation for portable AI memory and state. It defines:
+
+- **Document primitives** — typed Markdown files with YAML frontmatter (`workflow`, `rule`, `page`, `assistant`, …), validated against a registry, not hand-written code.
+- **The Operation Contract** (§6) — four envelope types (`operation` / `patch` / `event` / `delete`) for mutating a vault, with idempotency replay and audit.
+- **The Workflow Runtime Contract** (§11.8) — workflows own triggers; daemons, crons, and webhooks derive idempotent event/task/run envelopes from the vault.
+- **Multilingual semantic runtime** (§11.9) — deterministic lexical evidence, injected multilingual embeddings, and runtime rendering with symbolic controls fixed.
+- **Portability classification** (§5.5) — the keystone: every primitive is `structural`, `tenant_private`, or `resource_bound`, so a vault can be *sold* or *shared* without leaking private data.
+- **The `.ucw` bundle format** (§16) and **provisioning contract** (§17) — package a vault, then `export → provision → import` it into a fresh environment, deterministically.
+
+This package, `@gregiteen/ssss-cli`, is **dependency-free**: a host needs neither Zod nor a YAML library to be conformant. The reference engine *is* the validator.
 
 ## Install
 
@@ -41,10 +32,9 @@ Requires Node 18+. No runtime dependencies.
 
 ```bash
 ssss new my-app --install                # scaffold + install + run the conformance test
-ssss new my-app --with-total-recall      # also wire the Total Recall memory OS
 ```
 
-Scaffolds a starter `vault/`, a dependency-free conformance test, and a `CLAUDE.md`.
+Scaffolds a starter `vault/`, a dependency-free conformance test, and instructions.
 See `ssss help scaffold`.
 
 ## Quick start — the lifecycle
@@ -56,83 +46,53 @@ vault ──export──▶ .ucw bundle ──provision──▶ envelope plan
 
 ```bash
 # 1. Package a vault as a sellable bundle (drops tenant-private data)
-ssss export ./my-vault --profile sale --out festival.ucw.json
+ssss export ./my-vault --profile sale --out bundle.ucw.json
 
 # 2. Inspect / verify it
-ssss inspect  festival.ucw.json --files
-ssss validate festival.ucw.json
+ssss inspect  bundle.ucw.json --files
+ssss validate bundle.ucw.json
 
 # 3. Stand up a fresh tenant from it
-ssss import festival.ucw.json --vault ./new-tenant \
-  --param business_name="Acme Fest" --param domain=acme.live
+ssss import bundle.ucw.json --vault ./new-tenant \
+  --param company_name="Acme Corp" --param domain=acme.com
 
 # Re-running import commits nothing — it is idempotent.
 ```
 
+## 0.9 application kernel
+
+SSSS 0.9 provides a shared mutation kernel and host adapter contracts for any system using SSSS:
+
+```bash
+ssss primitive create --namespace acme --name "New Item" --language en
+ssss registry compose --extension ./acme-extension.json
+ssss adapter conformance
+ssss migrate 0.8-to-0.9 ./vault
+```
+
+Library subpaths: `@gregiteen/ssss-cli/kernel`, `/vfs`, `/identity`, `/leases`, `/events`, `/projections`, `/semantic`, `/ui`.
+
 ## Commands
 
 | Command | Purpose |
 |---------|---------|
-| `ssss new <dir>` | Scaffold a new SSSS project (`--with-total-recall`, `--install`). |
+| `ssss new <dir>` | Scaffold a new SSSS project (`--install`). |
+| `ssss primitive <verb>` | Create, validate, inspect, or migrate primitive definitions. |
+| `ssss registry <verb>` | Compose, lock, or verify an effective registry. |
+| `ssss adapter conformance` | Run machine-readable VFS/lease/idempotency contract suites. |
+| `ssss migrate 0.8-to-0.9` | Dry-run migration diagnostics with backup manifest. |
 | `ssss export <vault>` | Package a vault into a `.ucw` bundle (§16). Pure & deterministic. |
 | `ssss validate <bundle>` | Check a bundle against the schema + portability rules. |
 | `ssss inspect <bundle>` | Human-readable summary (manifest, inventory, params, steps). |
 | `ssss provision <bundle>` | Plan an install: params + link integrity → envelopes (§17). |
 | `ssss import <bundle>` | Replay a bundle/plan into a vault via the engine (idempotent). |
 | `ssss semantic <vault>` | Build or query a deterministic, privacy-safe semantic index (§11.9). |
-| `ssss localize <vault>` | Materialize approved translations as a derived projection outside the vault. |
 | `ssss autolink [dir]` | Generate OKF wiki-links across a vault. |
 | `ssss conformance` | Run the canonical conformance suite (§12). |
 | `ssss help [topic]` | Local docs: `runtime`, `portability`, `bundle`, `provisioning`, `leases`, … |
 
 Run `ssss <command> --help` for flags, or `ssss help <topic>` for concepts.
 
-## Use as a library
-
-```js
-import { createEngine } from '@gregiteen/ssss-cli/engine';
-import { exportBundle, validateBundle, provisionBundle, importBundle } from '@gregiteen/ssss-cli/bundle';
-import { planWorkflowTrigger } from '@gregiteen/ssss-cli/runtime';
-import { buildSemanticIndex, searchSemanticIndex, materializeLocale } from '@gregiteen/ssss-cli/semantic';
-
-const bundle = exportBundle('./my-vault', { profile: 'sale', name: 'Festival in a Box' });
-const { valid, errors } = validateBundle(bundle);
-
-const engine = createEngine();
-const plan = provisionBundle(bundle, { parameters: { domain: 'acme.live' }, workspaceId: 'ws-1' });
-importBundle(plan.plan, './new-tenant', engine);
-
-const workflowContent = `---
-type: workflow
-name: "Daily Digest"
----
-
-1. Gather messages.
-2. Summarize.
-3. Send digest.
-`;
-const runtimePlan = planWorkflowTrigger({
-  workflowPath: 'workflows/daily-digest/WORKFLOW.md',
-  workflowContent,
-  workspaceId: 'ws-1',
-  trigger: { type: 'cron', id: 'daily-0800', cron: '0 8 * * *' },
-  scheduledFor: '2026-07-02T14:00:00.000Z',
-});
-
-const index = buildSemanticIndex('./my-vault', { locale: 'es' });
-const matches = searchSemanticIndex(index, 'política de reembolsos');
-materializeLocale('./my-vault', 'es', './derived/es');
-```
-
-Exports: `@gregiteen/ssss-cli` / `@gregiteen/ssss-cli/engine` (Operation Contract engine),
-`@gregiteen/ssss-cli/bundle` (export/provision/import), `@gregiteen/ssss-cli/registry`,
-`@gregiteen/ssss-cli/runtime`, `@gregiteen/ssss-cli/semantic`,
-`@gregiteen/ssss-cli/frontmatter`.
-
-Translations are structural overlay documents that target an exact source hash. Only
-`title`, `description`, and body are translated; types, ids, permissions, enums,
-relations, and other control fields remain sourced from the canonical document.
-
 ## Portability — why a vault is safe to sell
 
 | Class | Meaning | In a `sale` export? |
@@ -141,13 +101,11 @@ relations, and other control fields remain sourced from the canonical document.
 | `resource_bound` | Needs a real resource bound at provision (`domain`, `phone_number`). | ✅ shipped (as a parameter/step) |
 | `tenant_private` | The operator's private data (`task`, customer records). | ❌ **dropped** |
 
-`template` and `sale` exports MUST drop every `tenant_private` file. The reference
-bundle proves it — see `ssss help portability`.
+`template` and `sale` exports MUST drop every `tenant_private` file. The reference bundle proves it — see `ssss help portability`.
 
 ## Conformance
 
-A host MUST NOT claim SSSS conformance without passing the suite in
-[`conformance/`](conformance/):
+A host MUST NOT claim SSSS conformance without passing the suite in `conformance/`:
 
 ```bash
 ssss conformance            # structural + registry validation
@@ -158,13 +116,13 @@ npm test                    # == ssss conformance --engine
 ## Repository layout
 
 ```
-docs/ssss-spec.md          The normative specification (v0.7 draft).
+docs/ssss-spec.md          The normative specification (v0.9).
 docs/help/                 Topic docs surfaced by `ssss help`.
 registry/core.json         15 document + 5 contract primitives; semantic, bundle & provisioning schemas.
-registry/extensions/       Application extension registries (e.g. festech).
+registry/extensions/       Application extension registries.
 src/engine.mjs             Operation Contract engine (§6).
 src/runtime.mjs            Workflow trigger → event/task/run envelope planning (§11.8).
-src/semantic.mjs           Deterministic semantic index + localization projection (§11.9).
+src/semantic.mjs           Multilingual semantic retrieval + runtime rendering (§11.9).
 src/bundle.mjs             export / validate / provision / import (§16–§17).
 src/registry.mjs           Registry-driven type + portability resolution.
 src/frontmatter.mjs        Zero-dependency YAML frontmatter.
@@ -175,4 +133,4 @@ skills/ssss/               Packaged SSSS system skill and dependency-free valida
 
 ## License
 
-ISC © Greg Iteen. See [LICENSE](LICENSE).
+ISC © Greg Iteen. See [LICENSE](./LICENSE).

package/VERSION

@@ -1 +1 @@
-0.8.0
+0.9.1

package/conformance/README.md

@@ -33,7 +33,7 @@ The runner validates that the fixture file is well-formed and that every
 `expected_response` is internally consistent with the envelope rules. With
 `--engine`, it replays every fixture through the reference engine (`src/engine.mjs`),
 checks workflow runtime planning (`src/runtime.mjs`, spec §11.8), extension-registry
-collision/schema/symlink safety, semantic search and localization (`src/semantic.mjs`,
+collision/schema/symlink safety and multilingual semantic retrieval/rendering (`src/semantic.mjs`,
 §11.9), runs regression coverage for patch serialization and leases (§6/§7), and
 round-trips the
 reference bundle (validate → provision → import → re-import, spec §16/§17)

package/conformance/fixtures.json

@@ -747,66 +747,22 @@
     },
     {
       "id": "fixture-024",
-      "name": "Translation source — valid structural rule",
-      "description": "Creates the exact structural source used by the translation overlay fixtures.",
+      "name": "Multilingual source — valid Spanish structural rule",
+      "description": "Natural-language fields may be authored in any language while symbolic controls remain stable.",
       "request": {
         "type": "operation",
         "idempotency_key": "35353535-3535-3535-3535-353535353535",
         "path": "rules/translatable-refund-rule.md",
         "workspace_id": "TEST_WORKSPACE_ID",
         "actor": { "role": "system" },
-        "content": "---\ntype: rule\ntitle: \"Translatable Refund Rule\"\ndescription: \"Structural source used by the translation conformance fixture.\"\ntimestamp: \"2026-07-10T00:00:00Z\"\nname: \"Translatable Refund Rule\"\n---\nRefunds are available before the deadline.",
-        "intent": "Conformance fixture: create a structural translation source"
+        "content": "---\ntype: rule\ntitle: \"Política de reembolsos\"\ndescription: \"Explica cuándo están disponibles los reembolsos.\"\ntimestamp: \"2026-07-10T00:00:00Z\"\nname: refund-policy\nlanguage: es\n---\nLos reembolsos están disponibles antes de la fecha límite.",
+        "intent": "Conformance fixture: create a non-English structural source"
       },
       "expected_response": {
         "success": true,
         "type": "operation",
         "validation": { "valid": true, "type": "rule", "errors": [] }
       }
-    },
-    {
-      "id": "fixture-025",
-      "name": "Translation overlay — valid hash-bound Spanish projection",
-      "description": "A translation overlay with a safe source path, exact source hash, valid locale, and approved translatable fields must validate.",
-      "preconditions": ["fixture-024 must be committed first"],
-      "request": {
-        "type": "operation",
-        "idempotency_key": "36363636-3636-3636-3636-363636363636",
-        "path": "translations/es/rules/translatable-refund-rule.md",
-        "workspace_id": "TEST_WORKSPACE_ID",
-        "actor": { "role": "system" },
-        "content": "---\ntype: translation\ntitle: \"Spanish Refund Rule Translation\"\ndescription: \"Approved Spanish translation overlay conformance fixture.\"\ntimestamp: \"2026-07-10T00:00:00Z\"\ntranslation_id: translatable-refund-rule-es\nsource_path: rules/translatable-refund-rule.md\nsource_hash: sha256:bc61f36adc3aa1fa2c4da7a48841cb16bc56df0ec052f70d4ee8514a98dc6e62\nlocale: es\nstatus: approved\ntranslated_fields: [title, body]\ntranslated_title: Regla de reembolsos traducible\n---\nLos reembolsos están disponibles antes de la fecha límite.",
-        "intent": "Conformance fixture: valid translation primitive"
-      },
-      "expected_response": {
-        "success": true,
-        "type": "operation",
-        "validation": { "valid": true, "type": "translation", "errors": [] }
-      }
-    },
-    {
-      "id": "fixture-026",
-      "name": "Translation overlay — invalid locale is denied",
-      "description": "Registry pattern enforcement rejects non-BCP47 locale syntax before an invalid overlay can enter the vault.",
-      "preconditions": ["fixture-024 must be committed first"],
-      "request": {
-        "type": "operation",
-        "idempotency_key": "37373737-3737-3737-3737-373737373737",
-        "path": "translations/invalid/rules/translatable-refund-rule.md",
-        "workspace_id": "TEST_WORKSPACE_ID",
-        "actor": { "role": "system" },
-        "content": "---\ntype: translation\ntitle: \"Invalid Locale Translation\"\ndescription: \"Translation fixture that must be rejected.\"\ntimestamp: \"2026-07-10T00:00:00Z\"\ntranslation_id: invalid-locale-translation\nsource_path: rules/translatable-refund-rule.md\nsource_hash: sha256:bc61f36adc3aa1fa2c4da7a48841cb16bc56df0ec052f70d4ee8514a98dc6e62\nlocale: not_a_locale\nstatus: approved\ntranslated_fields: [title]\ntranslated_title: Invalid\n---\nInvalid.",
-        "intent": "Conformance fixture: invalid translation locale"
-      },
-      "expected_response": {
-        "success": false,
-        "validation": {
-          "valid": false,
-          "type": "translation",
-          "errors": ["Invalid format for field 'locale' on type 'translation'."]
-        }
-      },
-      "expected_http_status": 422
     }
   ],
   "error_codes": {

package/conformance/reference-bundle.ucw.json

@@ -4,7 +4,7 @@
     "description": "A complete music-festival operation as a tradeable SSSS bundle.",
     "version": "1.0.0",
     "exported_at": "1970-01-01T00:00:00.000Z",
-    "ssss_core_version": "0.7",
+    "ssss_core_version": "0.9",
     "required_extensions": [
       "festech"
     ],
@@ -15,9 +15,26 @@
       "page": 1,
       "security_role": 1,
       "rule": 1,
-      "translation": 1,
       "workflow": 1
     },
+    "dependencies": {
+      "primitives": [
+        "assistant",
+        "domain",
+        "page",
+        "rule",
+        "security_role",
+        "workflow"
+      ],
+      "extensions": [
+        "festech"
+      ],
+      "migrations": [],
+      "integrity": {
+        "content_hash": "sha256:7febd673938a3dc04c068e0bf08097a9783c09e612606d2df9a4db8dcb8907f5",
+        "ssss_core_version": "0.9"
+      }
+    },
     "provisioning": [
       {
         "id": "ws",
@@ -86,10 +103,10 @@
         "description": "Satisfies the domain resource requirement field 'registrar'."
       }
     ],
-    "file_count": 18,
+    "file_count": 14,
     "provenance": {
-      "content_hash": "sha256:27c7c21826552f73dd14a56018454f4c19bda002029d5db42ecb14d77667b699",
-      "exporter": "@gregiteen/ssss-cli@0.8.0"
+      "content_hash": "sha256:7febd673938a3dc04c068e0bf08097a9783c09e612606d2df9a4db8dcb8907f5",
+      "exporter": "@gregiteen/ssss-cli@0.9.1"
     }
   },
   "files": [
@@ -141,22 +158,6 @@
       "path": "tasks/index.md",
       "content": "# Index — tasks\n\n- [Ticket 4821 Seat Change](./ticket-4821.md)\n"
     },
-    {
-      "path": "translations/es/index.md",
-      "content": "# Index — translations/es\n\n- [rules/](./rules/index.md)\n"
-    },
-    {
-      "path": "translations/es/rules/index.md",
-      "content": "# Index — translations/es/rules\n\n- [Spanish Refund Policy Translation](./refund-policy.md)\n"
-    },
-    {
-      "path": "translations/es/rules/refund-policy.md",
-      "content": "---\ntype: translation\ntitle: Spanish Refund Policy Translation\ndescription: Approved Spanish presentation overlay for the festival refund policy.\ntimestamp: 2026-07-10T00:00:00Z\ntranslation_id: refund-policy-es\nsource_path: rules/refund-policy.md\nsource_hash: sha256:a5f97ef9e2cc143d397f87a96c7fc20f4a3cd0515835c2ab659c9ac6db0d07e3\nlocale: es\nstatus: approved\ntranslated_fields: [title, description, body]\ntranslated_title: Política de reembolsos\ntranslated_description: Explica cuándo están disponibles los reembolsos para asistentes.\n---\nLos reembolsos están disponibles hasta catorce días antes del evento."
-    },
-    {
-      "path": "translations/index.md",
-      "content": "# Index — translations\n\n- [es/](./es/index.md)\n"
-    },
     {
       "path": "workflows/box-office.md",
       "content": "---\ntype: workflow\ntitle: Box Office\ndescription: Ticket-sales workflow for a music festival.\ntimestamp: 2026-07-02T00:00:00Z\nname: Box Office\nslug: box-office\n---\nSell tickets, then hand the buyer to [[concierge]] for questions."

package/docs/help/bundle.md

@@ -37,8 +37,8 @@ be silently edited. `primitive_inventory` is registry-driven (a count per `type`
 not a closed category enum.
 
 Bundle validation also applies registry patterns and document-reference rules.
-For example, a `translation` entry must name an included structural source and
-its `source_hash` must match that source's exact bytes.
+Primitive, extension, and migration dependencies must resolve against the effective
+registry before any file is committed.
 
 ## Parameters
 

package/docs/help/overview.md

@@ -5,7 +5,7 @@ and mutation contract for AI-agent state. A vault is a directory of Markdown fil
 with YAML frontmatter; every file declares a `type` defined in the registry.
 
 `@gregiteen/ssss-cli` is the reference implementation: a dependency-free Operation Contract
-engine, a registry-driven validator, semantic/localization projections, and the
+kernel, a registry-driven validator, multilingual semantic adapters, and the
 `.ucw` bundle/provisioning tooling.
 
 ## The pieces
@@ -13,10 +13,12 @@ engine, a registry-driven validator, semantic/localization projections, and the
 | Piece | Where | What it is |
 |-------|-------|------------|
 | Spec | `docs/ssss-spec.md` | The normative standard. |
-| Core registry | `registry/core.json` | The 15 document primitives + 5 contract primitives, plus semantic (§11.9), bundle (§16), and provisioning (§17) contracts. |
-| Engine | `src/engine.mjs` | The §6 Operation Contract pipeline (operation/patch/event/delete). |
+| Core registry | `registry/core.json` | Document primitives + contracts for semantic (§11.9), bundle (§16), and provisioning (§17). |
+| Kernel | `src/kernel.mjs` | Shared 0.9 mutation authority (`kernel.execute`) used by hosts and the reference engine. |
+| Engine | `src/engine.mjs` | Compatibility façade over the kernel for the §6 Operation Contract. |
 | Runtime | `src/runtime.mjs` | The §11.8 workflow trigger → event/task/run envelope planner. |
-| Semantic | `src/semantic.mjs` | Deterministic semantic graph/search projection and translation overlays (§11.9). |
+| Semantic | `src/semantic.mjs` | Lexical evidence, multilingual embeddings, privacy filters, and runtime rendering (§11.9). |
+| Adapters | `src/vfs.mjs`, `leases.mjs`, `events.mjs`, … | Host-injectable storage/security/projection contracts. |
 | Bundle | `src/bundle.mjs` | export / validate / provision / import (§16–§17). |
 | Conformance | `conformance/` | Fixtures every host must pass. |
 
@@ -30,8 +32,9 @@ vault ──export──▶ .ucw bundle ──provision──▶ envelope plan
 ## Commands
 
 Run `ssss help <topic>` for any of:
-`runtime`, `semantic`, `localization`, `portability`, `bundle`, `provisioning`,
+`runtime`, `semantic`, `portability`, `bundle`, `provisioning`,
 `export`, `provision`, `import`, `conformance`, `autolink`.
 
 Run `ssss <command> --help` for: `export`, `validate`, `inspect`, `provision`,
-`import`, `semantic`, `localize`, `autolink`, `conformance`.
+`import`, `semantic`, `primitive`, `registry`, `adapter`, `migrate`,
+`autolink`, `conformance`.

package/docs/help/semantic.md

@@ -6,8 +6,8 @@ Markdown. The projection is disposable: the vault remains the only source of tru
 ```bash
 ssss semantic ./vault
 ssss semantic ./vault --query "refund policy" --limit 5
-ssss semantic ./vault --locale es --query "política de reembolsos"
-ssss semantic ./vault --locale es --out ./derived/semantic-es.json
+ssss semantic ./vault --query "política de reembolsos"
+ssss semantic ./vault --out ./derived/semantic.json
 ```
 
 Records include stable identity, source path and hash, type, portability, surface
@@ -30,8 +30,9 @@ Symlinked vault entries and unsafe paths fail closed.
 ```js
 import { buildSemanticIndex, searchSemanticIndex } from '@gregiteen/ssss-cli/semantic';
 
-const index = buildSemanticIndex('./vault', { locale: 'es' });
+const index = buildSemanticIndex('./vault');
 const results = searchSemanticIndex(index, 'reembolsos', { limit: 10 });
 ```
 
-See also: `ssss help localization`.
+Hosts may inject a multilingual embedding adapter and runtime renderer. Presentation
+may change language and formatting, but never symbolic controls or authorization.