@hyperscale0/hsx 2.1.0 → 2.2.0

package/docs/llms.txt

@@ -1,8 +1,8 @@
-<!-- Generated by scripts/docs/build.ts for HSX 2.1.0. Do not edit. -->
+<!-- Generated by scripts/docs/build.ts for HSX 2.2.0. Do not edit. -->
 
 # HSX documentation
 
-> Repository guide and generated compiler reference for HSX 2.1.0.
+> Repository guide and generated compiler reference for HSX 2.2.0.
 
 ## Guide
 
@@ -35,7 +35,6 @@
 [pooled_split](reference/std/pooled_split.md): Standard-library module.
 [premium_forward](reference/std/premium_forward.md): Standard-library module.
 [reconciled_payout](reference/std/reconciled_payout.md): Standard-library module.
-[recurring_collection](reference/std/recurring_collection.md): Standard-library module.
 [rotating_pool](reference/std/rotating_pool.md): Standard-library module.
 [scheduled](reference/std/scheduled.md): Standard-library module.
 [security_deposit](reference/std/security_deposit.md): Standard-library module.

package/docs/piece-plans.md

@@ -0,0 +1,120 @@
+# Compose actions over a piece plan
+
+Use `piece_plan` to declare a finite partition and `piece_stage` to select a
+stage of that plan. Use `calls` and `action_library` to share the transfer
+body. These are ordinary clauses; they do not add another HSX grammar or a
+public operation for each private leaf.
+
+The clause shapes are defined by the selected UDL vocabulary. HSX checks them
+in [`typecheck.ts`](../src/typecheck.ts) and preserves them in
+[`emit.ts`](../src/emit.ts). The round-trip and private-module examples in
+[`general-language.spec.ts`](../test/general-language.spec.ts) exercise this
+path. The [UDL output reference](reference/udl-output.md) describes the emitted ABI.
+
+## Worked sale example
+
+This excerpt uses the sale settlement's `price` plan and funding call. It
+belongs inside an instrument that declares the referenced immutable fields,
+its lifecycle, its partition and its escrow-account capture. It is not a
+standalone program. The three money fields partition `price` exactly. For
+example, SAR minor-unit amounts `245000`, `3750` and `1250` sum to `250000`.
+The separate service fee is outside that partition.
+
+```hsx
+piece_plan: {
+  id: "price";
+  total: "price";
+  pieces: [
+    { id: "seller"; amount: "piece1Amount";
+      release_to: "sellerAccountId"; refund_to: "buyerAccountId"; },
+    { id: "platform_fee"; amount: "piece2Amount";
+      release_to: "platformAccountId"; refund_to: "buyerAccountId"; },
+    { id: "seller_cancel_fee"; amount: "piece3Amount";
+      release_to: "platformAccountId"; refund_to: "sellerAccountId"; }
+  ];
+  fund_order: ["seller", "platform_fee", "seller_cancel_fee"];
+  release_order: ["platform_fee", "seller_cancel_fee"];
+  refund_order: ["platform_fee", "seller_cancel_fee"];
+  unfund_order: ["seller_cancel_fee", "platform_fee", "seller"];
+};
+action_library: {
+  settlement_piece: {
+    actionOrder: ["move"];
+    actions: {
+      move: {
+        parameters: {
+          piece: { kind: "piece"; };
+          source: { kind: "account"; };
+          destination: { kind: "account"; };
+        };
+        principal: "api_key";
+        approval: "inherit";
+        recovery: "local";
+        order: ["transfer"];
+        calls: [];
+        leaves: [{
+          id: "transfer";
+          operation: "internal_transfer.create";
+          bind: {
+            amount: "$piece.amount";
+            currency: "$piece.currency";
+            sourceAccountId: "$source";
+            destinationAccountId: "$destination";
+          };
+          effects: [{ kind: "moves"; signature: "moves.transfer.internal"; }];
+          evidence: "transferId";
+        }];
+      };
+    };
+  };
+};
+action fund_piece {
+  public: none;
+  piece_stage: { plan: "price"; stage: "fund"; };
+  calls: [{
+    id: "move_piece";
+    action: "settlement_piece.move";
+    bind: {
+      piece: "$piece";
+      source: "$fields.buyerAccountId";
+      destination: "$instance.refs.escrowAccountId";
+    };
+  }];
+  steps: [];
+  summary: "Fund a piece of a sale settlement";
+}
+```
+
+The compiler derives `pieceId` from `fund_order`; callers cannot override the
+piece amount or destination. The call binds the buyer and captured escrow
+account into the one transfer leaf. The stage itself adds no movement.
+`public: none` leaves program exposure explicit. Canonical UDL keeps the plan,
+library, calls and action order, while resolved plans carry the expanded leaves
+and their origin paths. An ordinary exported module value can supply the same
+library without publishing another instrument.
+
+For the cancellation path, the same private action binds its destination to
+`$piece.refund_to`. `platform_fee` returns to the buyer; `seller_cancel_fee`
+pays the seller. Unfund instead binds the buyer for every funded piece, in
+reverse order. Handover, cancellation and service-fee collection remain
+separate declared actions; a piece plan does not combine their decisions.
+
+## Refusals to understand
+
+UDL diagnostics retain their codes through HSX diagnostic provenance.
+[`diagnostics.ts`](../src/diagnostics.ts) owns the HSX mapping, and
+[`general-language.spec.ts`](../test/general-language.spec.ts) checks that fatal
+UDL codes survive it.
+
+| UDL code  | Meaning for this example                                                              | Repair                                                                    |
+| --------- | ------------------------------------------------------------------------------------- | ------------------------------------------------------------------------- |
+| `UDL4001` | The money graph loses or creates value on a lifecycle path, including partial funding | Balance the funded amount on every exit and drain held value              |
+| `UDL5013` | A stage names an invalid plan/order or lacks the required call form                   | Name `price`, use declared unique piece IDs and declare the stage's calls |
+| `UDL2010` | Private calls cycle, name an unresolved action, violate order or exceed bounds        | Keep the graph finite and its order lists exact                           |
+
+The partition itself has `UDL4002` diagnostics for incompatible immutable
+fields, amount partition or currency. A stage does not exempt its transfer
+from the independent money proof. Calls across different principals,
+independent approval or external recovery boundaries are refused; model those
+as separate actions. The [diagnostic reference](reference/diagnostics.md) lists the HSX refusal
+codes and their repairs.

package/docs/reference/cli.md

@@ -1,14 +1,14 @@
-<!-- Generated by scripts/docs/build.ts for HSX 2.1.0. Do not edit. -->
+<!-- Generated by scripts/docs/build.ts for HSX 2.2.0. Do not edit. -->
 
 # CLI
 
 ```text
-hsx 2.1.0, the HSX compiler
+hsx 2.2.0, the HSX compiler
 
 Usage:
-  hsx check <file.hsx> [--strict]
-  hsx build <file.hsx> [--out <file.json>] [--strict]
-  hsx cost <file.hsx> [--json] [--out <file.json>] [--strict]
+  hsx check <file.hsx> [--catalog <catalog.udl>] [--strict]
+  hsx build <file.hsx> [--catalog <catalog.udl>] [--out <file.json>] [--strict]
+  hsx cost <file.hsx> [--catalog <catalog.udl>] [--json] [--out <file.json>] [--strict]
   hsx explain <HSX####>
   hsx format <file.hsx>
   hsx lsp
@@ -24,6 +24,7 @@ Commands:
   lsp     Run the language server over stdin and stdout.
 
 Options:
+  --catalog <file>  Read the published instrument catalogue as canonical UDL JSON.
   --json        Print the cost manifest as JSON instead of a table.
   --out <file>  Write build or cost JSON to this path instead of stdout.
   --strict      Treat warning-severity diagnostics as failures.

package/docs/reference/diagnostics.md

@@ -1,4 +1,4 @@
-<!-- Generated by scripts/docs/build.ts for HSX 2.1.0. Do not edit. -->
+<!-- Generated by scripts/docs/build.ts for HSX 2.2.0. Do not edit. -->
 
 # Diagnostics
 
@@ -39,7 +39,7 @@ instrument probe {
     agent_description: "Create a probe instance.";
     steps: [];
   }
-
+  
 }
 program second "Second"
 ```
@@ -70,7 +70,7 @@ instrument probe {
     agent_description: "Create a probe instance.";
     steps: [];
   }
-
+  
 }
 instrument probe { fields {}; lifecycle { states created; initial created; }; action create { steps: []; }; }
 ```
@@ -122,7 +122,7 @@ instrument probe {
     agent_description: "Create a probe instance.";
     steps: [];
   }
-
+  
 }
 subject vehicle { title: "Vehicle"; }
 ```
@@ -340,7 +340,7 @@ instrument probe {
     agent_description: "Create a probe instance.";
     steps: [];
   }
-
+  
 }
 const fee: money<SAR> = USD 1.00
 ```
@@ -361,7 +361,7 @@ instrument probe {
     agent_description: "Create a probe instance.";
     steps: [];
   }
-
+  
 }
 const fee: money<SAR> = SAR 1.001
 ```
@@ -481,7 +481,7 @@ instrument probe {
     agent_description: "Create a probe instance.";
     steps: [];
   }
-
+  
 }
 ```
 
@@ -517,7 +517,7 @@ instrument probe {
     agent_description: "Create a probe instance.";
     steps: [];
   }
-
+  
 }
 ```
 
@@ -537,7 +537,7 @@ instrument probe {
     agent_description: "Create a probe instance.";
     steps: [];
   }
-
+  
 }
 ```
 

package/docs/reference/grammar.md

@@ -1,4 +1,4 @@
-<!-- Generated by scripts/docs/build.ts for HSX 2.1.0. Do not edit. -->
+<!-- Generated by scripts/docs/build.ts for HSX 2.2.0. Do not edit. -->
 
 # Grammar vocabulary
 
@@ -14,7 +14,7 @@ The parser is hand-written. This page records the exported lexer vocabulary, the
 
 ## Typed clause spellings
 
-`action library`, `agent description`, `calls`, `capture input`, `commit`, `quote`, `decided amount`, `deadline`, `decision`, `computes distribute`, `description`, `due`, `earnable`, `event name`, `examples`, `input`, `moves`, `payout`, `piece plan`, `piece stage`, `port`, `principal`, `public action`, `reconcile`, `computes remainder`, `requires aggregate`, `requires checks`, `requires drained`, `requires exposure`, `requires refs`, `sandbox failure point`, `sets at`, `computes signed_sum`, `steps`, `summary`, `updates`, `notify`, `agent description`, `aggregate invariants`, `caller parked states`, `description`, `dials`, `distinct parties`, `computes derived`, `computes fees`, `id prefix`, `journeys`, `nav`, `partitions`, `subject`, `summary`, `surface visibility`, `template id`, `title`, `update`
+`funding`, `receipt distribution`, `requires allocation`, `allocation`, `contributions`, `allocate`, `contribution stage`, `date order`, `unique`, `transitions refs`, `action library`, `agent description`, `calls`, `requires input`, `engine owned`, `capture engine`, `capture input`, `commit`, `quote`, `decided amount`, `deadline`, `decision`, `computes distribute`, `description`, `due`, `earnable`, `event name`, `examples`, `input`, `moves`, `payout`, `piece plan`, `piece stage`, `port`, `principal`, `public action`, `reconcile`, `computes remainder`, `requires aggregate`, `requires checks`, `requires drained`, `requires exposure`, `requires refs`, `sandbox failure point`, `sets at`, `computes signed_sum`, `steps`, `summary`, `updates`, `notify`, `agent description`, `aggregate invariants`, `caller parked states`, `description`, `dials`, `distinct parties`, `computes derived`, `computes fees`, `id prefix`, `nav`, `partitions`, `subject`, `summary`, `surface visibility`, `template binding`, `template id`, `title`, `update`, `request authority`
 
 ## Standard-library modules
 
@@ -29,7 +29,6 @@ The parser is hand-written. This page records the exported lexer vocabulary, the
 - `pooled_split`
 - `premium_forward`
 - `reconciled_payout`
-- `recurring_collection`
 - `rotating_pool`
 - `scheduled`
 - `security_deposit`

package/docs/reference/std/advance.md

@@ -1,4 +1,4 @@
-<!-- Generated by scripts/docs/build.ts for HSX 2.1.0. Do not edit. -->
+<!-- Generated by scripts/docs/build.ts for HSX 2.2.0. Do not edit. -->
 
 # advance
 
@@ -10,14 +10,91 @@ Source: [`std/money_flows/advance.hsx`](../../../std/money_flows/advance.hsx)
 
 ## Parameters
 
-- `funder: party`
-- `to: party`
-- `amount: money<C>`
-- `fee: optional<percent>`
-- `count: optional<integer>`
-- `every: optional<text>`
-- `first_due: optional<date>`
-- `against: optional<ref>`
+| Parameter | Type | Required | Meaning |
+| --- | --- | --- | --- |
+| `funder` | `party` | Yes | The party providing the upfront capital. |
+| `to` | `party` | Yes | The party receiving the advance and responsible for repayment. |
+| `amount` | `money<C>` | Yes | Total advanced principal in minor units of currency `C`. |
+| `fee` | `optional<percent>` | No | Optional markup percentage fee charged on the advance (basis points precision). |
+| `count` | `optional<integer>` | No | Optional number of scheduled installment repayments. |
+| `every` | `optional<text>` | No | Optional recurrence duration between installments (e.g. `"P30D"`). |
+| `first_due` | `optional<date>` | No | Optional date for the first installment repayment. |
+| `against` | `optional<ref>` | No | Optional reference to a hold instrument whose release will be carved to repay the advance. |
+| `repayment_source` | `optional<party>` | No | Optional party repaying when distinct from the capital recipient. |
+| `profit_to` | `optional<party>` | No | Optional recipient of profit, separated from principal repayments. |
+| `dated` | `optional<boolean>` | No | Require an explicit signed date for each repayment instead of duration offsets. |
+
+Required means required by the template signature. A selected mode may also need parameters marked optional; the guidance below describes those combinations.
+
+## Module guidance
+
+Upfront capital disbursement repaid by carving future held payment releases or over scheduled installments.
+
+### Purpose
+
+`advance` provides working capital, merchant cash advances, or contractor pre-funding from a funder to a recipient.
+Repayment occurs either automatically by intercepting (carving) releases from a linked escrow hold (`against`),
+or over calendar-anchored installment repayments (`count`, `every`, `first_due`).
+
+### Selection guidance
+
+- vs `credit_facility`: `advance` disburses a single upfront lump-sum principal that is repaid over time.
+  `credit_facility` establishes a reusable revolving credit line with multiple draws up to a limit,
+  where repayments restore available borrowing capacity.
+- vs `conditional_disbursement`: `advance` expects repayment of the advanced principal plus optional fees.
+  `conditional_disbursement` disburses non-repayable grants, claims, or milestone payments against external evidence.
+- vs `held_payment`: `held_payment` holds customer funds in escrow until delivery. An `advance` can carve repayments
+  directly out of a `held_payment`'s release using `against`.
+
+### Parameters
+
+- `funder`: The party providing the upfront capital.
+- `to`: The party receiving the advance and responsible for repayment.
+- `amount`: Total advanced principal in minor units of currency `C`.
+- `fee`: Optional markup percentage fee charged on the advance (basis points precision).
+- `count`: Optional number of scheduled installment repayments.
+- `every`: Optional recurrence duration between installments (e.g. `"P30D"`).
+- `first_due`: Optional date for the first installment repayment.
+- `repayment_source`: Optional party repaying when distinct from the capital recipient.
+- `profit_to`: Optional recipient of profit, separated from principal repayments.
+- `dated`: Require an explicit signed date for each repayment instead of duration offsets.
+- `against`: Optional reference to a hold instrument whose release will be carved to repay the advance.
+
+### Decision ports
+
+None. Repayment is driven by linked hold releases or scheduled calendar dates.
+
+### Example
+
+```hsx
+program advance_example "Advance example"
+import { advance } from "std/money_flows"
+party funder: business
+party recipient: business
+settlement advance_payment = advance {
+  funder: funder
+  to: recipient
+  amount: principal: money(SAR)
+  fee: 2.5%
+  count: 2
+  every: P30D
+  first_due: firstDueAt
+}
+```
+
+## Declared clauses
+
+- `agent description`
+- `description`
+- `due`
+- `id prefix`
+- `moves`
+- `partitions`
+- `steps`
+- `summary`
+- `title`
+
+This inventory covers all branches and nested instruments in the module. The selected parameters determine which clauses and actions the compiler emits. Indexed action names expand over the declared finite list.
 
 ## Decision ports
 
@@ -25,11 +102,11 @@ None.
 
 ## Actions and clauses
 
-| Action                | Clauses lowered                                  |
-| --------------------- | ------------------------------------------------ |
-| `create`              | `agent description`, `moves`, `steps`, `summary` |
-| `disburse`            | `agent description`, `moves`, `steps`, `summary` |
-| `settle`              | `agent description`, `moves`, `steps`, `summary` |
-| `create`              | `agent description`, `moves`, `steps`, `summary` |
-| `disburse`            | `agent description`, `moves`, `steps`, `summary` |
-| `collect_repayment_1` | `due`, `moves`, `steps`, `summary`               |
+| Action | Clauses lowered |
+| --- | --- |
+| `create` | `agent description`, `moves`, `steps`, `summary` |
+| `disburse` | `agent description`, `moves`, `steps`, `summary` |
+| `settle` | `agent description`, `moves`, `steps`, `summary` |
+| `create` | `agent description`, `moves`, `steps`, `summary` |
+| `disburse` | `agent description`, `moves`, `steps`, `summary` |
+| `collect_repayment_[i]` | `agent description`, `due`, `moves`, `steps`, `summary` |

package/docs/reference/std/cancellable_booking.md

@@ -1,4 +1,4 @@
-<!-- Generated by scripts/docs/build.ts for HSX 2.1.0. Do not edit. -->
+<!-- Generated by scripts/docs/build.ts for HSX 2.2.0. Do not edit. -->
 
 # cancellable_booking
 
@@ -10,14 +10,124 @@ Source: [`std/money_flows/cancellable_booking.hsx`](../../../std/money_flows/can
 
 ## Parameters
 
-- `guest: party`
-- `host: party`
-- `amount: money<C>`
-- `starts_at: date`
-- `late_penalty_bps: integer`
-- `late_within: text`
-- `early_penalty_bps: integer`
-- `offer_life: text`
+| Parameter | Type | Required | Meaning |
+| --- | --- | --- | --- |
+| `guest` | `optional<party>` | No | The booking customer paying the fee and receiving refunds. |
+| `host` | `optional<party>` | No | The service provider receiving the payout or retained cancellation penalty. |
+| `amount` | `optional<money<C>>` | No | Total booking price in minor units of currency `C`. |
+| `starts_at` | `optional<date>` | No | Stored ISO 8601 date when the booking begins. |
+| `late_penalty_bps` | `optional<integer>` | No | Penalty in basis points applied when cancelling within the late window. |
+| `late_within` | `optional<text>` | No | ISO 8601 duration defining the late window before `starts_at` (e.g. `"P2D"` for 2 days). |
+| `early_penalty_bps` | `optional<integer>` | No | Penalty in basis points applied when cancelling before the late window. |
+| `offer_life` | `optional<text>` | No | ISO 8601 duration defining how long a quoted cancellation offer remains valid (e.g. `"PT30M"`). |
+| `cancel_bands` | `optional<list<block>>` | No | Supply cancel_bands to select deposit/balance custody instead of quoted cancellation. |
+| `price_value` | `optional<text>` | No | price_value and supplier_cost fix the price; deposit_bps derives the deposit. |
+| `supplier_cost` | `optional<text>` | No | price_value and supplier_cost fix the price; deposit_bps derives the deposit. |
+| `departure` | `optional<text>` | No | balance_before and confirmation_window are positive fixed durations relative to departure. |
+| `balance_before` | `optional<text>` | No | balance_before and confirmation_window are positive fixed durations relative to departure. |
+| `confirmation_window` | `optional<text>` | No | balance_before and confirmation_window are positive fixed durations relative to departure. |
+| `unpaid_band` | `optional<integer>` | No | The unpaid_band index selects a retained deposit policy. |
+| `acceptance` | `optional<block>` | No | acceptance optionally supplies an aggregate gate. |
+| `deposit_bps` | `optional<integer>` | No | price_value and supplier_cost fix the price; deposit_bps derives the deposit. |
+| `tax_bps` | `optional<integer>` | No | tax_bps applies to margin after the supplier share. |
+| `authority_type` | `optional<text>` | No | authority_type and supplier_role bind release to a consumed confirmation decision. |
+| `supplier_role` | `optional<text>` | No | authority_type and supplier_role bind release to a consumed confirmation decision. |
+
+Required means required by the template signature. A selected mode may also need parameters marked optional; the guidance below describes those combinations.
+
+## Module guidance
+
+Time-anchored reservation holding booking funds in escrow with dynamically quoted cancellation penalties.
+
+### Purpose
+
+`cancellable_booking` holds booking fees in escrow from a guest for a host until a scheduled start date.
+It fits hospitality, travel reservations, studio rentals, event tickets, and appointments where guests
+can cancel prior to start, but cancellation penalties depend on how close to the start date cancellation occurs.
+
+### Selection guidance
+
+- vs `held_payment`: Both hold money in escrow and both quote a cancellation before it is spent.
+  `cancellable_booking` prices the penalty against the time left before `starts_at`, so the charge moves
+  as the start approaches; `held_payment` has no start date and quotes one flat charge.
+  Choose `cancellable_booking` whenever cancellation fees are time-sensitive.
+- vs `security_deposit`: `security_deposit` holds funds to cover damages claimed by the holder.
+  `cancellable_booking` holds the service fee itself and releases to the host upon `starts_at` or refunds net of penalty.
+
+### Parameters
+
+- `guest`: The booking customer paying the fee and receiving refunds.
+- `host`: The service provider receiving the payout or retained cancellation penalty.
+- `amount`: Total booking price in minor units of currency `C`.
+- `starts_at`: Stored ISO 8601 date when the booking begins.
+- `late_penalty_bps`: Penalty in basis points applied when cancelling within the late window.
+- `late_within`: ISO 8601 duration defining the late window before `starts_at` (e.g. `"P2D"` for 2 days).
+- `early_penalty_bps`: Penalty in basis points applied when cancelling before the late window.
+- `offer_life`: ISO 8601 duration defining how long a quoted cancellation offer remains valid (e.g. `"PT30M"`).
+
+### Decision ports
+
+None. Action transitions are driven by guest API calls (`take`, `cancel`, `confirm`) and scheduled completion (`complete` due at `starts_at`).
+
+### Example
+
+```hsx
+program studio_booking "Studio booking"
+import { cancellable_booking } from "std/money_flows"
+party guest: person
+party studio: business
+settlement studio_session = cancellable_booking {
+  guest: guest
+  host: studio
+  amount: sessionPrice: money(SAR)
+  starts_at: startsAt
+  late_penalty_bps: 5000
+  late_within: "P2D"
+  early_penalty_bps: 1000
+  offer_life: "PT30M"
+}
+```
+
+### Finite cancellation bands
+
+Supply cancel_bands to select deposit/balance custody instead of quoted cancellation.
+Each band has name, refund (full, balance or none), starts_at after the first band,
+and supplier_bps when money is retained. The unpaid_band index selects a retained
+deposit policy. Omit it to return the deposit; a full-refund band also returns it. price_value and supplier_cost fix the price; deposit_bps derives
+the deposit. balance_before and confirmation_window are positive fixed durations
+relative to departure. tax_bps applies to margin after the supplier share.
+authority_type and supplier_role bind release to a consumed confirmation decision.
+acceptance optionally supplies an aggregate gate. All actions are private until
+expose selects them. Ordered band starts and deadlines prevent a late sweep from
+extending an earlier band's cancellation rights. Full timeout refund returns price.
+Seven derivations suffice for three bands; larger finite policies use up to the
+UDL bound of 64 derived amounts. shift_date(date, duration, "before") subtracts a
+fixed duration; omitting the direction adds it. Invalid dates or durations refuse.
+
+## Declared clauses
+
+- `agent description`
+- `caller parked states`
+- `commit`
+- `deadline`
+- `description`
+- `distinct parties`
+- `due`
+- `id prefix`
+- `input`
+- `moves`
+- `partitions`
+- `port`
+- `quote`
+- `requires drained`
+- `sandbox failure point`
+- `steps`
+- `summary`
+- `title`
+- `unique`
+- `updates`
+
+This inventory covers all branches and nested instruments in the module. The selected parameters determine which clauses and actions the compiler emits. Indexed action names expand over the declared finite list.
 
 ## Decision ports
 
@@ -25,11 +135,22 @@ None.
 
 ## Actions and clauses
 
-| Action     | Clauses lowered                                                           |
-| ---------- | ------------------------------------------------------------------------- |
-| `create`   | `agent description`, `moves`, `steps`, `summary`                          |
-| `take`     | `agent description`, `moves`, `sandbox failure point`, `steps`, `summary` |
-| `complete` | `due`, `moves`, `steps`, `summary`                                        |
-| `cancel`   | `agent description`, `moves`, `quote`, `steps`, `summary`                 |
-| `confirm`  | `agent description`, `commit`, `moves`, `steps`, `summary`                |
-| `retain`   | `agent description`, `moves`, `steps`, `summary`                          |
+| Action | Clauses lowered |
+| --- | --- |
+| `create` | `agent description`, `moves`, `steps`, `summary` |
+| `take` | `agent description`, `moves`, `sandbox failure point`, `steps`, `summary` |
+| `complete` | `due`, `moves`, `steps`, `summary` |
+| `cancel` | `agent description`, `moves`, `quote`, `steps`, `summary` |
+| `confirm` | `agent description`, `commit`, `moves`, `steps`, `summary` |
+| `retain` | `agent description`, `moves`, `steps`, `summary` |
+| `create` | `agent description`, `deadline`, `steps`, `unique` |
+| `deposit` | `agent description`, `deadline`, `moves`, `port`, `steps` |
+| `expire` | `agent description`, `due`, `requires drained`, `steps` |
+| `[balance_action]` | `agent description`, `deadline`, `moves`, `port`, `steps` |
+| `[open_action]` | `agent description`, `due`, `steps` |
+| `[cancel_action]` | `agent description`, `deadline`, `moves`, `port`, `steps` |
+| `cancel_unpaid` | `agent description`, `due`, `moves`, `steps` |
+| `await_confirmation` | `agent description`, `due`, `steps` |
+| `confirm` | `agent description`, `deadline`, `input`, `steps`, `updates` |
+| `release` | `agent description`, `moves`, `steps` |
+| `refund_unconfirmed` | `agent description`, `due`, `moves`, `steps` |