@modernrelay/orbit-core 0.13.5 → 0.14.0

package/dist/index.js

@@ -1,7 +1,5 @@
-import { deriveClusters, resolveClusterCenters, clusterCentroids } from './chunk-XAR262L3.js';
-export { DEFAULT_CLUSTER_CENTER_RADIUS, DEFAULT_LAYOUT_SEED, clusterCentroids, deriveClusters, generateClusterCenters, resolveClusterCenters } from './chunk-XAR262L3.js';
-import { DIAGNOSTIC_SAMPLE_CAP, encodeStringTable, collectTransfers, EnvelopeSequencer, RequestLedger } from './chunk-NIJX5NVJ.js';
-export { DIAGNOSTIC_SAMPLE_CAP, acceptColumnar, collectTransfers, decodeStringTable, encodeStringTable, judgeEpoch } from './chunk-NIJX5NVJ.js';
+import { DIAGNOSTIC_SAMPLE_CAP, encodeStringTable, collectTransfers, deriveClusters, resolveClusterCenters, clusterCentroids, EnvelopeSequencer, RequestLedger } from './chunk-KRCG2JFN.js';
+export { DEFAULT_CLUSTER_CENTER_RADIUS, DEFAULT_LAYOUT_SEED, DIAGNOSTIC_SAMPLE_CAP, acceptColumnar, clusterCentroids, collectTransfers, decodeStringTable, deriveClusters, encodeStringTable, generateClusterCenters, judgeEpoch, resolveClusterCenters } from './chunk-KRCG2JFN.js';
 import { createStore } from 'zustand/vanilla';
 
 // src/errors.ts
@@ -98,6 +96,10 @@ function validateSnapshot(snapshot) {
       record(invalidNode, `[${i}]`);
       continue;
     }
+    if (id.includes("\0")) {
+      record(invalidNode, `[${i}]`);
+      continue;
+    }
     if (nodeIndex.has(id)) {
       record(duplicateNode, id);
       continue;
@@ -156,7 +158,7 @@ function validateSnapshot(snapshot) {
     "invalid-node",
     "error",
     invalidNode,
-    `${invalidNode.count} node row(s) dropped: missing or non-string id`
+    `${invalidNode.count} node row(s) dropped: missing, non-string, or NUL-containing id`
   );
   pushDiagnostic(
     diagnostics,
@@ -347,7 +349,7 @@ function validateGroupSpecs(specs, nodeIndex) {
       severity: "error",
       count,
       sampleIds: samples,
-      message: `groups rejected before scene rewrite (\xA716.3 acyclic/singly-parented): ${kinds} \u2014 the previous group configuration stays active`
+      message: `groups rejected before scene rewrite: ${kinds} \u2014 the previous group configuration stays active`
     }
   };
 }
@@ -417,7 +419,7 @@ function validateGroupBySpec(spec) {
     if (!expandOk) problems.push("semanticZoom.expandAbove must be a finite number");
     if (collapseOk && expandOk && !(sz.expandAbove > sz.collapseBelow)) {
       problems.push(
-        "semanticZoom.expandAbove must be strictly greater than collapseBelow (hysteresis, R-16.3-22)"
+        "semanticZoom.expandAbove must be strictly greater than collapseBelow to provide a hysteresis gap"
       );
     }
   }
@@ -427,7 +429,7 @@ function validateGroupBySpec(spec) {
     severity: "error",
     count: problems.length,
     sampleIds: [],
-    message: `groupBy rejected (\xA716.3/D4): ${problems.join("; ")} \u2014 the previous groupBy configuration stays active`
+    message: `groupBy rejected: ${problems.join("; ")} \u2014 the previous groupBy configuration stays active`
   };
 }
 function deriveGroupsByKey(nodes, by, isCollapsedKey) {
@@ -474,7 +476,7 @@ function deriveGroupsByKey(nodes, by, isCollapsedKey) {
       severity: "warning",
       count: errorCount,
       sampleIds: errorSamples,
-      message: "groupBy.by threw; the affected nodes derived as ungrouped (\xA716.3/\xA78)"
+      message: "groupBy.by threw; the affected nodes derived as ungrouped"
     }
   };
 }
@@ -699,27 +701,27 @@ var EMPTY_INDEX = /* @__PURE__ */ new Map();
 var Reconciler = class {
   datasetKey = null;
   hasScene = false;
-  // Previous scene, kept for the structural diff (§7.2).
+  // Previous scene, kept for the structural diff.
   prevIdByIndex = [];
   prevIndexById = EMPTY_INDEX;
   prevEdgeIdByIndex = [];
   prevLinks = new Uint32Array(0);
   /**
    * Declared node.x/y as of the previous reconcile, for nodes that declared
-   * them. Lets Priority 1 distinguish a CHANGED declaration (caller intent —
+   * them. Lets Priority 1 distinguish a CHANGED declaration (caller intent
    * wins over any cache) from an unchanged one (defers to live drift). Fresh
    * per pass, so departed ids drop and a re-add treats its declaration as new.
    */
   prevDeclared = /* @__PURE__ */ new Map();
   /**
-   * CPU position mirror for the CURRENT scene, indexed by slot (§7.1 posBuf).
+   * CPU position mirror for the CURRENT scene, indexed by slot.
    * Owned copy — never aliases a published scene's positions array, so
    * noteEnginePositions never mutates an already-published RenderScene.
    */
   livePositions = new Float32Array(0);
   /**
-   * Ids removed from the scene → last known finite position (§7.1/§7.3
-   * leave-and-return guarantee). Map insertion order doubles as LRU order;
+   * Ids removed from the scene → last known finite position, preserving the
+   * leave-and-return guarantee. Map insertion order doubles as LRU order;
    * invariant: never overlaps the current scene's id set.
    */
   departed = /* @__PURE__ */ new Map();
@@ -833,7 +835,7 @@ var Reconciler = class {
   }
   /**
    * Copy engine-read positions into the live cache for the CURRENT scene's
-   * slots (§7.1 per-event readback — simulation end, pre-structural-swap).
+   * slots.
    * Extra trailing floats are ignored; a short buffer updates a prefix.
    */
   noteEnginePositions(positions) {
@@ -1389,7 +1391,7 @@ function mergeDiagnostics(merge) {
       severity: "info",
       count: merge.shadowedCount,
       sampleIds: merge.shadowedSamples,
-      message: `${merge.shadowedCount} overlay node row(s) shadowed by a same-id row admitted earlier (\xA77.5); rows retained`
+      message: `${merge.shadowedCount} overlay node row(s) shadowed by a same-id row admitted earlier; rows retained`
     });
   }
   if (merge.duplicateEdgeCount > 0) {
@@ -1439,7 +1441,7 @@ function sessionCommitDiagnostics(tallies, danglingCount, danglingSamples = [])
       severity: "warning",
       count: danglingCount,
       sampleIds: danglingSamples.slice(0, DIAGNOSTIC_SAMPLE_CAP),
-      message: `${danglingCount} ingested edge(s) still awaiting an endpoint at commit (pending-endpoint index; \xA77.5)`
+      message: `${danglingCount} ingested edge(s) still awaiting an endpoint at commit (the endpoint was not ingested before the session committed)`
     });
   }
   return out;
@@ -1569,7 +1571,7 @@ var IncrementalAlphaComposer = class {
   bufB = null;
   staleA = [];
   staleB = [];
-  /** Which buffer the NEXT nextBuffer() call returns (0 = A, 1 = B). */
+  /** Which buffer the NEXT nextBuffer call returns (0 = A, 1 = B). */
   next = 0;
   // --- seed key ---
   seededBase = null;
@@ -1672,7 +1674,7 @@ var PressureSampler = class {
   /**
    * Record one onFrame tick. `settled` marks a tick that arrived while the
    * scene was at rest (sim settled, no pending commit work) — the idle-
-   * wakeup counter, which reads 0 when the ADR-005 gated clock is honest.
+   * wakeup counter, which reads 0 when the gated activity clock is honest.
    */
   noteFrame(timeMs, settled) {
     this.frames += 1;
@@ -1842,7 +1844,7 @@ var DegradeController = class {
   /**
    * Resource-admission trigger: engage the NEXT not-yet-engaged step in the
    * declared order. Null when the order is exhausted — the caller must then
-   * REJECT before allocating (§17: never silently erase semantic styling).
+   * REJECT before allocating.
    */
   engageNextResourceStep(visible) {
     for (const step of this.limits.resourceDegradationOrder) {
@@ -2055,8 +2057,8 @@ var LinkPickIndex = class {
     while (!r.done) r = it.next();
   }
   /**
-   * Incremental build: yields whenever `now() − sliceStart ≥ budgetMs` so a
-   * scheduler can spread the work across idle frames (§17 long-task budget).
+   * Incremental build: yields whenever `now − sliceStart ≥ budgetMs` so a
+   * scheduler can spread the work across idle frames.
    * Pure generator — no rAF/timers here; the caller owns scheduling.
    *
    * The previous grid stays armed and queryable until the new one commits on
@@ -2220,7 +2222,7 @@ var LinkPickIndex = class {
    * Nearest link within `tolerance` (space units) of the space point
    * `(x, y)`, or null. Scans the candidate cells covering the tolerance
    * disc's bounding box (typically the 3×3 neighborhood; more when the
-   * tolerance exceeds the cell size), applies the optional §9.1 visibility
+   * tolerance exceeds the cell size), applies the optional visibility
    * mask per candidate, then runs the exact point→segment distance test.
    * Nearest wins; exact-distance ties break toward the LOWER link index.
    * Returns null while unbuilt/invalidated (picking disarmed).
@@ -2372,7 +2374,7 @@ var EdgePickingFacade = class {
     this.generation++;
     this.index.invalidate();
   }
-  /** §9.1 mask pass-through stub: applied per candidate at query time. */
+  /** mask pass-through stub: applied per candidate at query time. */
   setLinkVisibilityMask(mask) {
     this.mask = mask;
   }
@@ -2732,7 +2734,7 @@ function throwAborted2(signal, sourceId, targetId) {
   const reason = signal.reason;
   throw new OrbitOperationError(
     reason === void 0 ? { code: "aborted" } : { code: "aborted", cause: reason },
-    `local find('${sourceId}' \u2192 '${targetId}') aborted mid-scan (\xA716.2)`
+    `local find('${sourceId}' \u2192 '${targetId}') aborted mid-scan`
   );
 }
 function createLocalPathService(getBase) {
@@ -2917,7 +2919,7 @@ function throwAborted3(signal, query) {
   const reason = signal.reason;
   throw new OrbitOperationError(
     reason === void 0 ? { code: "aborted" } : { code: "aborted", cause: reason },
-    `local search('${query}') aborted mid-scan (\xA716.5)`
+    `local search('${query}') aborted mid-scan`
   );
 }
 function createLocalSearchService(getBase) {
@@ -2972,6 +2974,10 @@ function isColumnarSnapshot(input) {
 }
 var isTypedLength = (arr, n) => arr !== void 0 && arr.length === n;
 function checkStringColumn(col, rows, where, isIds, out) {
+  if (col === null || typeof col !== "object") {
+    out.push({ where, problem: "not-a-string-column", detail: "column missing or not an object" });
+    return;
+  }
   if (col.kind !== "string" || !Array.isArray(col.dictionary) || !(col.codes instanceof Uint32Array)) {
     out.push({ where, problem: "not-a-string-column", detail: 'expected {kind:"string", dictionary, codes}' });
     return;
@@ -3014,6 +3020,10 @@ function checkStringColumn(col, rows, where, isIds, out) {
   }
 }
 function checkColumn(col, rows, where, out) {
+  if (col === null || typeof col !== "object") {
+    out.push({ where, problem: "bad-column-kind", detail: "column missing or not an object" });
+    return;
+  }
   switch (col.kind) {
     case "string":
       checkStringColumn(col, rows, where, false, out);
@@ -3058,6 +3068,14 @@ function validateColumnarStructure(snapshot) {
     issues.push({ where: "edges.length", problem: "bad-length", detail: String(edgeRows) });
     return issues;
   }
+  if (snapshot.nodes === null || typeof snapshot.nodes !== "object") {
+    issues.push({ where: "nodes", problem: "bad-length", detail: "nodes lane missing" });
+    return issues;
+  }
+  if (snapshot.edges === null || typeof snapshot.edges !== "object") {
+    issues.push({ where: "edges", problem: "bad-length", detail: "edges lane missing" });
+    return issues;
+  }
   checkStringColumn(snapshot.nodes.ids, nodeRows, "nodes.ids", true, issues);
   for (const [name, col] of Object.entries(snapshot.nodes.columns ?? {})) {
     checkColumn(col, nodeRows, `nodes.${name}`, issues);
@@ -3273,8 +3291,8 @@ var WorkerLane = class {
     }
     return this.availableState;
   }
-  /** Async worker death (P1: a constructed-but-dead worker must strand
-   * NOTHING): every pending request rejects as 'worker-failed' so callers
+  /** A constructed-but-dead worker must strand NOTHING: every pending
+   * request rejects as 'worker-failed' so callers
    * run their main-lane fallback, the lane goes permanently unavailable,
    * and the unavailability callback fires (the instance one-shots it). */
   fail(reason) {
@@ -3330,7 +3348,7 @@ var WorkerLane = class {
   }
   /** Abort everything in flight (epoch advance / detach / dataset swap).
    * The ledger's controllers fire each pending promise's abort listener;
-   * the sweep below catches anything tracked before a listener attached —
+   * the sweep below catches anything tracked before a listener attached
    * rejects stay idempotent through the delete guard. */
   abortAll() {
     this.ledger.abortAll();
@@ -3799,7 +3817,7 @@ var MetricStore = class {
   /** Admitted async columns by metric name; NaN encodes null. */
   columns = /* @__PURE__ */ new Map();
   degreePasses = 0;
-  /** §17 telemetry: estimated bytes of metric storage held (S13-T07). */
+  /** telemetry: estimated bytes of metric storage held. */
   estimatedBytes() {
     let bytes = 0;
     for (const col of this.columns.values()) bytes += col.byteLength;
@@ -3830,10 +3848,10 @@ var MetricStore = class {
     }
   }
   /**
-   * Joins async metric columns against the accepted model (§12).
+   * Joins async metric columns against the accepted model.
    * Revision-gated PER COLUMN (I1): a column whose issue-time
    * `forModelRevision` stamp differs from `opts.modelRevision` is discarded
-   * (info diagnostic — a normal async race outcome, §9.2). A missing or
+   * (info diagnostic — a normal async race outcome). A missing or
    * mismatched stamp is never defaulted to the current revision — that
    * would make the gate self-satisfying.
    * Structural rejections ('index' length mismatch, missing/mismatched ids)
@@ -3851,7 +3869,7 @@ var MetricStore = class {
             "info",
             1,
             [column.metric],
-            `metric column '${column.metric}' discarded: computed for model revision ${String(column.forModelRevision)} but the update was issued at revision ${String(opts.modelRevision)} (\xA712/I1 revision-gated admission)`
+            `metric column '${column.metric}' discarded: computed for model revision ${String(column.forModelRevision)} but the update was issued at revision ${String(opts.modelRevision)}`
           )
         );
         continue;
@@ -3961,7 +3979,7 @@ var MetricStore = class {
   }
   /**
    * Raw column in accepted-base order, or null when unavailable. NaN encodes
-   * null (§12) — consumers exclude NaN slots from domains. Do NOT mutate:
+   * null — consumers exclude NaN slots from domains. Do NOT mutate:
    * this is the live cache, not a copy.
    */
   metricValues(metric) {
@@ -4007,7 +4025,7 @@ var MetricStore = class {
 };
 
 // src/capabilityPolicy.ts
-var CLUSTER_FORCE_DEGRADATION_REASON = "clusters requested but the engine capability record does not declare clusterForce; the cluster force is inert while membership, cluster labels, and centroids still work (\xA716.3/R-13-39)";
+var CLUSTER_FORCE_DEGRADATION_REASON = "clusters requested but the engine capability record does not declare clusterForce; the cluster force is inert while membership, cluster labels, and centroids still work";
 function degradation(feature, reason) {
   return Object.freeze({ feature, reason });
 }
@@ -4020,7 +4038,7 @@ function resolveEnginePolicy(capabilities, requested) {
     degradations.push(
       degradation(
         "edgeArrows",
-        "edgeArrows requested but the engine capability record does not declare edgeArrows; the prop is inert (\xA716.12)"
+        "edgeArrows requested but the engine capability record does not declare edgeArrows; the prop is inert"
       )
     );
   }
@@ -4028,7 +4046,7 @@ function resolveEnginePolicy(capabilities, requested) {
     degradations.push(
       degradation(
         "images",
-        "node images requested but the engine capability record does not declare pointImages; placeholder glyphs render and image refs are retained (\xA78/\xA713)"
+        "node images requested but the engine capability record does not declare pointImages; placeholder glyphs render and image refs are retained"
       )
     );
   }
@@ -4051,14 +4069,14 @@ function assertCapabilityMethodParity(engine) {
   const mismatches = [];
   const capabilities = engine.capabilities;
   if (capabilities === null || typeof capabilities !== "object") {
-    mismatches.push("engine.capabilities is missing or not an object (\xA713 static declaration)");
+    mismatches.push("engine.capabilities is missing or not an object");
     return mismatches;
   }
   const caps = capabilities;
   const getPositions = engine.getPositions;
   if (caps.trackedPositions === true && typeof getPositions !== "function") {
     mismatches.push(
-      "capabilities.trackedPositions is declared but engine.getPositions is absent (\xA713 tracked readback)"
+      "capabilities.trackedPositions is declared but engine.getPositions is absent"
     );
   }
   return mismatches;
@@ -4145,7 +4163,7 @@ var ImageAtlasPipeline = class {
   generation = null;
   flushScheduled = false;
   disposed = false;
-  /** D5/F11-06: evicted-entry bitmaps awaiting close — closed AFTER the
+  /** Evicted-entry bitmaps awaiting close — closed AFTER the
    * flush that carries their removeSlots, so the instance's recovery-replay
    * map (pruned synchronously in the batch callback) can never re-send a
    * closed bitmap. */
@@ -4379,7 +4397,7 @@ var ImageAtlasPipeline = class {
     return index;
   }
   /**
-   * I2 (roster-atomic resource mappings, F11-03): the SYNCHRONOUS point→slot
+   * Roster-atomic resource mappings: the SYNCHRONOUS point→slot
    * mapping for the last requested roster — a slot appears only when its ref
    * is resolved AND the engine has already received the bitmap (delivered);
    * pending, failed, evicted, and reused-but-undelivered refs are the −1
@@ -4459,12 +4477,12 @@ var SoftMask = class {
   edgeHideLane;
   edgeDimLane;
   sources = /* @__PURE__ */ new Set();
-  /** Dedicated internal source implementing the §9 node→edge cascade. */
+  /** Dedicated internal source implementing the node→edge cascade. */
   cascadeSource = null;
   overflowedFlag = false;
   /** Total memberships currently held across all sources and lanes. */
   totalHeld = 0;
-  /** §17 O(Δ) op counters (F10-02 gate instrumentation). */
+  /** O(Δ) op counters. */
   statsBox = {
     slotsVisited: 0,
     zeroCrossings: 0,
@@ -4487,12 +4505,12 @@ var SoftMask = class {
     return this.edgeCap;
   }
   /** One-time latch: some counter hit 0xFFFF and an increment was dropped.
-   * Counts may drift afterwards; the caller reports it (§9.1 overflow guard). */
+   * Counts may drift afterwards; the caller reports it. */
   get overflowed() {
     return this.overflowedFlag;
   }
   // Live counter columns (read-only views by convention — do not mutate;
-  // references are replaced on grow()).
+  // references are replaced on grow).
   get nodeHideFailures() {
     return this.nodeHideLane.counters;
   }
@@ -4507,7 +4525,7 @@ var SoftMask = class {
   }
   /**
    * Grows capacities for structure changes (existing slot state is
-   * preserved; new slots start fully visible). Capacities never shrink —
+   * preserved; new slots start fully visible). Capacities never shrink
    * a smaller value is a no-op for that dimension.
    */
   grow(nodeCapacity, edgeCapacity) {
@@ -4532,7 +4550,7 @@ var SoftMask = class {
       this.edgeCap = edgeCapacity;
     }
   }
-  /** Registers a new failure source. No cap on source count (§9.1). */
+  /** Registers a new failure source. No cap on source count. */
   acquire(name) {
     const state = {
       name,
@@ -4587,11 +4605,11 @@ var SoftMask = class {
     };
   }
   /**
-   * §9 edge cascade over the mask lane: recomputes, from the CURRENT node
+   * edge cascade over the mask lane: recomputes, from the CURRENT node
    * hide lane, the set of edges with at least one hidden endpoint, and feeds
    * it to the dedicated internal cascade source (edge hide lane only).
-   * `links` is the flat `[src0, tgt0, src1, tgt1, …]` node-slot pair buffer
-   * (§7.1 CSR input shape); edge slot i has endpoints at links[2i]/[2i+1].
+   * `links` is the flat `[src0, tgt0, src1, tgt1, …]` node-slot pair buffer;
+   * edge slot i has endpoints at links[2i]/[2i+1].
    * O(E) scan per call — typically once per drain — but only edges whose
    * cascade state changed produce counter deltas (and thus dirty entries).
    * Edges beyond `links.length / 2` are treated as having no hidden
@@ -4622,11 +4640,11 @@ var SoftMask = class {
       }
       if (hide[source] !== 0 || hide[target] !== 0) failing.push(i);
     }
-    this.cascadeSource ??= this.acquire("\xA79.1 node\u2192edge cascade");
+    this.cascadeSource ??= this.acquire("node\u2192edge cascade");
     this.cascadeSource.setEdgeFailures(failing);
   }
   /**
-   * O(incident-edges) delta form of the §9.1 cascade (F10-02): for each node
+   * O(incident-edges) delta form of the cascade: for each node
    * whose HIDE visibility crossed zero, recompute only its incident edges'
    * cascade state from the CURRENT node counters and apply the delta through
    * the same internal cascade source the full form uses — the two compose
@@ -4638,7 +4656,7 @@ var SoftMask = class {
   applyNodeCascadeToEdgesDelta(links, incidence, crossedNodes) {
     if (crossedNodes.length === 0) return;
     const hide = this.nodeHideLane.counters;
-    this.cascadeSource ??= this.acquire("\xA79.1 node\u2192edge cascade");
+    this.cascadeSource ??= this.acquire("node\u2192edge cascade");
     const nowFailing = [];
     const nowClear = [];
     for (let k = 0; k < crossedNodes.length; k++) {
@@ -4668,7 +4686,7 @@ var SoftMask = class {
       edgeVisibleCount: this.edgeHideLane.zeroCount
     };
   }
-  /** §17 telemetry: estimated bytes of mask storage held (S13-T07):
+  /** telemetry: estimated bytes of mask storage held:
    * four counter lanes (+pending trackers) and per-source flag columns. */
   estimatedBytes() {
     let bytes = 0;
@@ -4680,7 +4698,7 @@ var SoftMask = class {
     }
     return bytes;
   }
-  /** §17 O(Δ) op counters (live object — snapshot before comparing). */
+  /** O(Δ) op counters (live object — snapshot before comparing). */
   get stats() {
     return this.statsBox;
   }
@@ -4702,7 +4720,7 @@ var SoftMask = class {
   isEdgeVisible(index) {
     return this.edgeHideLane.counters[index] === 0;
   }
-  /** Dimmed iff visible AND dimFailures > 0 (§9.1). */
+  /** Dimmed iff visible AND dimFailures > 0. */
   isNodeDimmed(index) {
     return this.isNodeVisible(index) && (this.nodeDimLane.counters[index] ?? 0) > 0;
   }
@@ -4763,7 +4781,7 @@ var SoftMask = class {
     mem.holes = 0;
   }
   /**
-   * O(Δ) delta ops on one lane membership (F10-02). Adds and removes are
+   * O(Δ) delta ops on one lane membership. Adds and removes are
    * idempotent per slot (adding a member / removing a non-member is a
    * no-op); removed slots leave HOLES in `list` (compacted past 50%), so
    * replace/clear passes must honor the bit0 guard above. `crossings`, when
@@ -4864,7 +4882,7 @@ var SoftMask = class {
     this.applyMembership(this.edgeDimLane, state.edgeDim, null);
   }
   /** Debug balanced-increment assert: whenever no source holds any
-   * membership, every counter must read zero (skipped once overflowed —
+   * membership, every counter must read zero (skipped once overflowed
    * clamped increments legitimately drift the books). */
   assertBalancedIfIdle() {
     if (!DEBUG || this.overflowedFlag || this.totalHeld !== 0) return;
@@ -4886,7 +4904,7 @@ var SVG_MAX_ELEMENTS_DEFAULT = 5e4;
 var SvgBudgetError = class extends Error {
   constructor(elementCount, limit) {
     super(
-      `SVG export of ${elementCount} elements exceeds the ${limit}-element budget \u2014 filter/isolate first, or use the raster-hybrid fallback (\xA716.14)`
+      `SVG export of ${elementCount} elements exceeds the ${limit}-element budget \u2014 filter/isolate first, or use the raster-hybrid fallback`
     );
     this.elementCount = elementCount;
     this.limit = limit;
@@ -5246,7 +5264,7 @@ function upperBound(values, sorted, target) {
   return lo;
 }
 var TypedColumnCrossfilter = class {
-  /** Test instrumentation; see CrossfilterStats. Reset with resetStats(). */
+  /** Test instrumentation; see CrossfilterStats. Reset with resetStats. */
   stats = {
     slotsWalked: 0,
     fullSorts: 0,
@@ -5254,7 +5272,7 @@ var TypedColumnCrossfilter = class {
     binUpdates: 0,
     filteredRecomputes: 0
   };
-  /** Count of dims whose filtered layer is live-maintained (F10-02). */
+  /** Count of dims whose filtered layer is live-maintained. */
   liveDims = 0;
   dims = [];
   byKey = /* @__PURE__ */ new Map();
@@ -5280,7 +5298,7 @@ var TypedColumnCrossfilter = class {
     this.stats.binUpdates = 0;
     this.stats.filteredRecomputes = 0;
   }
-  /** §17 telemetry: estimated bytes of typed-column storage held (S13-T07).
+  /** telemetry: estimated bytes of typed-column storage held.
    * Documented components: per-dim value/permutation/bin/code/pass arrays,
    * the global failure counter, and the external mask. */
   estimatedBytes() {
@@ -5295,7 +5313,7 @@ var TypedColumnCrossfilter = class {
     }
     return bytes;
   }
-  /** F10-02 live-layer bookkeeping — the ONLY writer of `filteredLive`. */
+  /** live-layer bookkeeping — the ONLY writer of `filteredLive`. */
   setFilteredLive(dim, live) {
     if (dim.filteredLive === live) return;
     dim.filteredLive = live;
@@ -5358,8 +5376,8 @@ var TypedColumnCrossfilter = class {
   }
   /**
    * External node-mask predicate for the joint "filtered" second layer (the
-   * instance wires the §9.1 filter-prop node mask in). Affects summaries only,
-   * never selection visibility. Length must equal rowCount(). Notifies on
+   * instance wires the filter-prop node mask in). Affects summaries only,
+   * never selection visibility. Length must equal rowCount. Notifies on
    * observable change; does NOT advance selectionRevision.
    */
   setExternalMask(passSlots) {
@@ -5384,7 +5402,7 @@ var TypedColumnCrossfilter = class {
     this.notify();
   }
   /**
-   * Immutable summary. The filtered layer is recomputed lazily when dirty —
+   * Immutable summary. The filtered layer is recomputed lazily when dirty
    * O(rows) per dirty summarize (v0.7 tier; see module doc). Returned objects
    * are frozen and never mutated by later operations.
    */
@@ -5436,7 +5454,7 @@ var TypedColumnCrossfilter = class {
     return Object.freeze(domain !== void 0 ? { ...base, domain } : base);
   }
   /**
-   * Incrementally extend columns with new rows (S9-T09 subset): no full
+   * Incrementally extend columns with new rows: no full
    * rebuild, no full re-argsort — the pre-sorted old permutation merges with
    * the sorted new block. Brushes stay by key and are applied to the NEW slots
    * only; the returned delta covers only new slots. Keeps selectionRevision;
@@ -5690,16 +5708,16 @@ var TypedColumnCrossfilter = class {
     }
   }
   /**
-   * F10-02 inline maintenance of LIVE filtered layers, dispatched from the
+   * inline maintenance of LIVE filtered layers, dispatched from the
    * one place that knows the failCount transition. `boundary` is the
    * other-failures picture at the interesting side of the flip (after for
    * shown, before for hidden):
-   *  - 0 → the slot crossed the FULLY-VISIBLE boundary: every other live
-   *    layer counts it (own layers ignore the own-dim brush, so the brushed
-   *    dim's layer is provably unchanged by its own flip);
-   *  - 1 → exactly one OTHER dim still fails the slot: only that dim's
-   *    what-if-I-cleared-mine layer flips;
-   *  - ≥2 → no layer can change.
+   * - 0 → the slot crossed the FULLY-VISIBLE boundary: every other live
+   * layer counts it (own layers ignore the own-dim brush, so the brushed
+   * dim's layer is provably unchanged by its own flip);
+   * - 1 → exactly one OTHER dim still fails the slot: only that dim's
+   * what-if-I-cleared-mine layer flips;
+   * - ≥2 → no layer can change.
    * External-mask-excluded and hygiene-invalid slots contribute nothing
    * either way and are skipped.
    */
@@ -6004,7 +6022,7 @@ function assertSerializable(value, slice) {
     switch (typeof v) {
       case "function":
         throw new TypeError(
-          `history command for slice "${slice}" carries a function at ${path} \u2014 commands are value diffs, not closures (\xA716.14)`
+          `history command for slice "${slice}" carries a function at ${path} \u2014 commands are value diffs, not closures`
         );
       case "symbol":
       case "bigint":
@@ -6019,7 +6037,7 @@ function assertSerializable(value, slice) {
     if (v === null) return;
     if (v instanceof Map || v instanceof Set) {
       throw new TypeError(
-        `history command for slice "${slice}" carries a ${v instanceof Map ? "Map" : "Set"} at ${path} \u2014 convert to arrays/objects before recording (\xA716.14)`
+        `history command for slice "${slice}" carries a ${v instanceof Map ? "Map" : "Set"} at ${path} \u2014 convert to arrays/objects before recording`
       );
     }
     if (seen.has(v)) {
@@ -6041,7 +6059,7 @@ var HistoryKernel = class {
   debug;
   undoStack = [];
   redoStack = [];
-  /** Nested begin() joins the outer transaction (depth-counted). */
+  /** Nested begin joins the outer transaction (depth-counted). */
   txDepth = 0;
   txCommands = [];
   txLabel;
@@ -6107,7 +6125,7 @@ var HistoryKernel = class {
     }
     this.pushEntry({ label: void 0, commands: [command] }, null);
   }
-  /** Close a transaction; the outermost end() pushes one stack entry. */
+  /** Close a transaction; the outermost end pushes one stack entry. */
   end() {
     if (!this.enabled) return;
     if (this.txDepth === 0) throw new Error("HistoryKernel.end() without a matching begin()");
@@ -6377,7 +6395,7 @@ function createGraphInstance(opts) {
     if (accepted === null) {
       throw new OrbitOperationError(
         { code: "aborted", cause: "no accepted base" },
-        "expansion requires an accepted base dataset (\xA79.2)"
+        "expansion requires an accepted base dataset"
       );
     }
     return { accepted, adjacency: acceptedAdjacencyOf() };
@@ -6610,7 +6628,7 @@ function createGraphInstance(opts) {
               severity: "error",
               count: 1,
               sampleIds: [],
-              message: "columnar snapshot mutated while worker acceptance was pending \u2014 rejected whole (\xA75: source coordinates are immutable; publish a new sourceRevision)"
+              message: "columnar snapshot mutated while worker acceptance was pending \u2014 rejected whole (source coordinates are immutable; publish a new sourceRevision)"
             }
           ];
           publish({ diagnostics: composeDiagnostics() });
@@ -6637,6 +6655,19 @@ function createGraphInstance(opts) {
       if (message !== "worker-unavailable" && message !== "worker-failed") return;
       acceptanceQueue.admit(() => {
         if (destroyed || token !== pendingDeriveToken) return;
+        if (validateColumnarStructure(columnar).length > 0) {
+          columnarDiags = [
+            {
+              code: "invalid-columnar-snapshot",
+              severity: "error",
+              count: 1,
+              sampleIds: [],
+              message: "columnar snapshot mutated while worker acceptance was pending \u2014 rejected whole (source coordinates are immutable; publish a new sourceRevision)"
+            }
+          ];
+          publish({ diagnostics: composeDiagnostics() });
+          return;
+        }
         applyHostUpdateInner({
           data: materializeColumnarSnapshot(columnar),
           ...deferredMetrics !== void 0 ? { metrics: deferredMetrics } : {}
@@ -6723,7 +6754,7 @@ function createGraphInstance(opts) {
       if (event.engaged && !capLabelsNudged) {
         capLabelsNudged = true;
         console.warn(
-          "orbit: cap-dom-labels engaged \u2014 DOM labels are hard-capped at the label budget above limits.domLabelNodes visible nodes (\xA717). A GPU label lane (labelStrategy 'sdf') is the planned scale path (S13-T05, deferred)."
+          "orbit: cap-dom-labels engaged \u2014 DOM labels are hard-capped at the label budget above limits.domLabelNodes visible nodes. A GPU label lane (labelStrategy 'sdf') is the planned scale path."
         );
       }
       scheduleViewportRerank();
@@ -7376,7 +7407,7 @@ function createGraphInstance(opts) {
           severity: "warning",
           count: errorCount,
           sampleIds: samples,
-          message: `filter predicate threw for ${errorCount} item(s); failing open \u2014 throwing predicates never hide data (\xA79.1)`
+          message: `filter predicate threw for ${errorCount} item(s); failing open \u2014 throwing predicates never hide data`
         }
       ];
     } else {
@@ -7887,7 +7918,7 @@ function createGraphInstance(opts) {
   }
   function requireCrossfilterEngine() {
     if (crossfilterEngine === null) {
-      throw new Error("crossfilter session is not available (set the crossfilter prop first, \xA716.6)");
+      throw new Error("crossfilter session is not available; set the crossfilter prop first");
     }
     return crossfilterEngine;
   }
@@ -7938,13 +7969,13 @@ function createGraphInstance(opts) {
     const eng = crossfilterEngine;
     if (eng === null) {
       throw new TypeError(
-        "playTimeline: the crossfilter prop must configure dimensions first (\xA716.6)"
+        "playTimeline: the crossfilter prop must configure dimensions first"
       );
     }
     const summary = eng.summarize(key);
     if (summary.kind === "categorical" || summary.domain === void 0) {
       throw new TypeError(
-        `playTimeline: dimension "${key}" must be numeric/temporal with a non-empty domain (\xA716.6)`
+        `playTimeline: dimension "${key}" must be numeric/temporal with a non-empty domain`
       );
     }
     const { min, max } = summary.domain;
@@ -7966,7 +7997,7 @@ function createGraphInstance(opts) {
       );
     }
     if (mode !== "sliding" && mode !== "cumulative") {
-      throw new TypeError(`playTimeline: unsupported mode "${String(mode)}" (\xA716.6)`);
+      throw new TypeError(`playTimeline: unsupported mode "${String(mode)}"`);
     }
     stopTimelineTimer();
     timelineSessionSeq += 1;
@@ -8439,7 +8470,7 @@ function createGraphInstance(opts) {
           severity: "warning",
           count: overload,
           sampleIds: [],
-          message: `showLabelsFor exceeds tracked-label capacity; ${overload} forced label(s) omitted (\xA714)`
+          message: `showLabelsFor exceeds tracked-label capacity; ${overload} forced label(s) omitted`
         }
       ];
       diagsChanged = true;
@@ -8715,7 +8746,7 @@ function createGraphInstance(opts) {
           severity: "warning",
           count: state.streak,
           sampleIds: [],
-          message: `${channel} reprojected on ${state.streak} consecutive commits with identical sampled outputs \u2014 likely an inline lambda prop; hoist or memoize it (\xA78)`
+          message: `${channel} reprojected on ${state.streak} consecutive commits with identical sampled outputs \u2014 likely an inline lambda prop; hoist or memoize it`
         }
       ];
     }
@@ -9117,9 +9148,9 @@ function createGraphInstance(opts) {
       nodeIds: orderByAcceptedBase(full.nodeIds, nodeIndexBase()),
       edgeIds: orderByAcceptedBase(full.edgeIds, edgeIndexById),
       // Group namespace: the raw full-state form stays TOLERANT (deduped,
-      // not validated — pinned pre-S12 behavior); ids that stop naming a
+      // not validated — pinned legacy behavior); ids that stop naming a
       // resolved group prune through the ownership path whenever the groups
-      // RESOLUTION changes (§16.2/§16.3). selectGroups() is the validating
+      // RESOLUTION changes. selectGroups is the validating
       // mutator.
       groupIds: dedupeFirstOccurrence(full.groupIds)
     });
@@ -9398,7 +9429,7 @@ function createGraphInstance(opts) {
         if (DEV) {
           rejectGroupOp(
             "warning",
-            "groupNodes ignored: membership is derived and read-only under groupBy (\xA716.3) \u2014 change the groupBy accessor or remove it",
+            "groupNodes ignored: membership is derived and read-only under groupBy \u2014 change the groupBy accessor or remove it",
             spec.id
           );
         }
@@ -9421,7 +9452,7 @@ function createGraphInstance(opts) {
         if (DEV) {
           rejectGroupOp(
             "warning",
-            "ungroup ignored: membership is derived and read-only under groupBy (\xA716.3) \u2014 change the groupBy accessor or remove it",
+            "ungroup ignored: membership is derived and read-only under groupBy \u2014 change the groupBy accessor or remove it",
             groupId
           );
         }
@@ -9446,7 +9477,7 @@ function createGraphInstance(opts) {
           if (DEV) {
             rejectGroupOp(
               "warning",
-              "setGroupCollapsed ignored: groups and groupBy are both configured (\xA716.3 config error) \u2014 remove one",
+              "setGroupCollapsed ignored: groups and groupBy are both configured \u2014 remove one",
               groupId
             );
           }
@@ -9457,7 +9488,7 @@ function createGraphInstance(opts) {
           if (DEV) {
             rejectGroupOp(
               "warning",
-              `setGroupCollapsed ignored: no derived group '${groupId}' in the current derivation (\xA716.3)`,
+              `setGroupCollapsed ignored: no derived group '${groupId}' in the current derivation`,
               groupId
             );
           }
@@ -9671,7 +9702,7 @@ function createGraphInstance(opts) {
   function invalidateReplaceSessions(owner) {
     for (const s of [...openSessions]) {
       if (s === owner || s.purpose !== "replace") continue;
-      abortSessionInternal(s, "stale-base: the model changed outside the session (\xA77.5)", false);
+      abortSessionInternal(s, "stale-base: the model changed outside the session", false);
     }
   }
   function abortAllSessions(except, cause) {
@@ -9740,7 +9771,7 @@ function createGraphInstance(opts) {
     if (expansionHandles.size === 0 && expansionLedger.size === 0) return;
     const err = new OrbitOperationError(
       { code: "aborted", cause: "dataset-changed" },
-      "expansion aborted: the datasetKey changed (\xA75/\xA79.2)"
+      "expansion aborted: the datasetKey changed"
     );
     for (const [requestId, handle] of expansionHandles) {
       handle.abort(err);
@@ -9761,7 +9792,7 @@ function createGraphInstance(opts) {
       scopeExtraIds.clear();
       expansionOverlays.clear();
       abortExpansionsForDatasetSwap();
-      abortSearchFlight("dataset-changed", "search aborted: the datasetKey changed (\xA75/\xA716.5)");
+      abortSearchFlight("dataset-changed", "search aborted: the datasetKey changed");
       resetMaskState();
       historyKernel.clear();
       stopTimelineTimer();
@@ -9923,7 +9954,7 @@ function createGraphInstance(opts) {
     const labelRerank = recomputeCandidates();
     const patch = {
       revisions,
-      // Counts are ACCEPTED-MODEL counts; the scene may be scoped (§9.2).
+      // Counts are ACCEPTED-MODEL counts; the scene may be scoped.
       nodeCount: p.merged.nodes.length,
       edgeCount: p.merged.edges.length,
       diagnostics: composeDiagnostics()
@@ -9983,7 +10014,7 @@ function createGraphInstance(opts) {
       cancelFlushTimer(rec);
       return rejectOperation(
         { code: "overlay-id-conflict", overlayId: id },
-        `overlayId '${id}' is already reserved by an open or committed overlay for this dataset (\xA77.5)`
+        `overlayId '${id}' is already reserved by an open or committed overlay for this dataset`
       );
     }
     reservedOverlayIds.set(id, rec);
@@ -10055,14 +10086,14 @@ function createGraphInstance(opts) {
     if (rec.atomic && queuedBytes > rec.maxPendingBytes) {
       return rejectOperation(
         { code: "queue-overflow", queuedBytes, limit: rec.maxPendingBytes },
-        `append(): atomic session would queue ${queuedBytes} bytes, exceeding its non-drainable budget of ${rec.maxPendingBytes}; the append was rejected and the session remains open (\xA77.5)`
+        `append(): atomic session would queue ${queuedBytes} bytes, exceeding its non-drainable budget of ${rec.maxPendingBytes}; the append was rejected and the session remains open`
       );
     }
     const overflowLimit = rec.maxPendingBytes * INGEST_OVERFLOW_FACTOR;
     if (bytes > overflowLimit) {
       return rejectOperation(
         { code: "queue-overflow", queuedBytes: bytes, limit: overflowLimit },
-        `append(): batch of ${bytes} bytes exceeds the absolute cap of ${overflowLimit} (\xA77.5)`
+        `append(): batch of ${bytes} bytes exceeds the absolute cap of ${overflowLimit}`
       );
     }
     const counts = stageBatch(
@@ -10120,7 +10151,7 @@ function createGraphInstance(opts) {
       };
     }
     const datasetChanged = baseAccepted !== null && baseAccepted.datasetKey !== rec.datasetKey;
-    abortAllSessions(rec, "replaced: a replace session committed (\xA77.5)");
+    abortAllSessions(rec, "replaced: a replace session committed");
     const overlaysCleared = clearOverlayState();
     const newBase = baseFromContribution(rec.datasetKey, sourceRevision, c, []);
     const commitDiags = sessionCommitDiagnostics(rec.tallies, newBase.pendingEdges.length);
@@ -10218,7 +10249,7 @@ function createGraphInstance(opts) {
           code: "resource-limit",
           detail: { reason: err instanceof Error ? err.message : String(err) }
         },
-        `commit() failed; session rolled back (\xA77.5)`
+        `commit() failed; session rolled back`
       );
     }
     rec.state = "committed";
@@ -10242,16 +10273,16 @@ function createGraphInstance(opts) {
     }
     if (purpose === "replace") {
       if (opts2.sourceRevision === void 0) {
-        throw new TypeError("beginIngest: purpose:'replace' requires sourceRevision (\xA77.5)");
+        throw new TypeError("beginIngest: purpose:'replace' requires sourceRevision");
       }
       if (opts2.atomic === false) {
         throw new TypeError(
-          "beginIngest: replace sessions are always atomic \u2014 progressive replace frames would expose rows before their sourceRevision existed (\xA77.5)"
+          "beginIngest: replace sessions are always atomic \u2014 progressive replace frames would expose rows before their sourceRevision existed"
         );
       }
       if (baseSource === "declarative") {
         throw new TypeError(
-          "beginIngest: purpose:'replace' is unavailable while a declarative data source is active; keep applying snapshots via applyHostUpdate, or use an overlay session (\xA77.5/T16)"
+          "beginIngest: purpose:'replace' is unavailable while a declarative data source is active; keep applying snapshots via applyHostUpdate, or use an overlay session"
         );
       }
     }
@@ -10266,7 +10297,7 @@ function createGraphInstance(opts) {
       if (baseAccepted === null || baseAccepted.datasetKey !== opts2.datasetKey) {
         throw new OrbitOperationError(
           { code: "stale-revision", expected: currentModel, actual: opts2.baseModelRevision },
-          baseAccepted === null ? "beginIngest: overlay sessions require an accepted base dataset (\xA77.5 lineage)" : `beginIngest: overlay sessions must name the current datasetKey '${baseAccepted.datasetKey}', got '${opts2.datasetKey}' (\xA77.5 lineage)`
+          baseAccepted === null ? "beginIngest: overlay sessions require an accepted base dataset" : `beginIngest: overlay sessions must name the current datasetKey '${baseAccepted.datasetKey}', got '${opts2.datasetKey}'`
         );
       }
     }
@@ -10275,7 +10306,7 @@ function createGraphInstance(opts) {
       purpose,
       datasetKey: opts2.datasetKey,
       sourceRevision: opts2.sourceRevision ?? null,
-      // replace is always atomic; overlays default atomic:true (§7.5).
+      // replace is always atomic; overlays default atomic:true.
       atomic: purpose === "replace" ? true : opts2.atomic ?? true,
       overlayId,
       maxFlushLatencyMs: opts2.maxFlushLatencyMs ?? INGEST_MAX_FLUSH_LATENCY_MS_DEFAULT,
@@ -10388,11 +10419,11 @@ function createGraphInstance(opts) {
     pushServiceDiagnostic(
       "service-aborted",
       "info",
-      `expansion result for '${id}' discarded before admission: ${why} (\xA79.2)`
+      `expansion result for '${id}' discarded before admission: ${why}`
     );
     throw new OrbitOperationError(
       { code: "aborted", cause: why },
-      `expandNode('${id}') result discarded: ${why} (\xA79.2)`
+      `expandNode('${id}') result discarded: ${why}`
     );
   }
   async function mergeExpansionSession(id, ctx, at, batches, provenance) {
@@ -10613,14 +10644,14 @@ function createGraphInstance(opts) {
       expansionPromises.delete(id);
       const err = new OrbitOperationError(
         { code: "aborted", cause: "collapsed" },
-        `expandNode('${id}') aborted by retractExpansion() (\xA79.2/\xA716.3)`
+        `expandNode('${id}') aborted by retractExpansion()`
       );
       expansionHandles.get(requestId)?.abort(err);
       expansionRejectors.get(requestId)?.(err);
       pushServiceDiagnostic(
         "service-aborted",
         "info",
-        `pending expansion of '${id}' aborted by retractExpansion() (\xA79.2)`
+        `pending expansion of '${id}' aborted by retractExpansion()`
       );
       publish({ pendingExpansions: expansionLedger.ids() });
     }
@@ -10827,14 +10858,14 @@ function createGraphInstance(opts) {
     if (ctx.signal.aborted) {
       throw new OrbitOperationError(
         { code: "aborted", cause: "superseded" },
-        `search('${query}') was superseded before admission (\xA716.5)`
+        `search('${query}') was superseded before admission`
       );
     }
     const denial = acceptanceQueue.admit(() => searchAdmissible(ctx, at));
     if (denial !== null) {
       throw new OrbitOperationError(
         { code: "aborted", cause: denial },
-        `search('${query}') result discarded: ${denial} (\xA79.2/\xA716.5)`
+        `search('${query}') result discarded: ${denial}`
       );
     }
     if (accepted === null) return raw;
@@ -10865,7 +10896,7 @@ function createGraphInstance(opts) {
     const at = revisionSnapshot();
     const key = serviceCacheKey({
       serviceId: "search",
-      // `fields` is defensive insurance (F12-03): searchIndex is
+      // `fields` is defensive insurance: searchIndex is
       // construction-only (D7) so it cannot legitimately change, but keying
       // it here guarantees a cached result can never outlive the field
       // configuration it was computed under.
@@ -10879,7 +10910,7 @@ function createGraphInstance(opts) {
       searchFlight = null;
       const err = new OrbitOperationError(
         { code: "aborted", cause: "superseded" },
-        `search('${query}') superseded the older in-flight query (\xA716.5)`
+        `search('${query}') superseded the older in-flight query`
       );
       flight.handle.abort(err);
       flight.reject(err);
@@ -10945,7 +10976,7 @@ function createGraphInstance(opts) {
       searchFlight = null;
       const err = new OrbitOperationError(
         { code: "aborted", cause: "cleared" },
-        "search cleared while in flight (\xA716.5)"
+        "search cleared while in flight"
       );
       flight.handle.abort(err);
       flight.reject(err);
@@ -11012,7 +11043,7 @@ function createGraphInstance(opts) {
     if (denial !== null) {
       throw new OrbitOperationError(
         { code: "aborted", cause: "stale" },
-        `findPath('${sourceId}' \u2192 '${targetId}') discarded: ${denial} (\xA79.2)`
+        `findPath('${sourceId}' \u2192 '${targetId}') discarded: ${denial}`
       );
     }
     if (token !== pathSeq || result === null) return result;
@@ -11104,7 +11135,7 @@ function createGraphInstance(opts) {
         findings.push(`mode: unknown filter mode '${String(spec.mode)}'`);
       }
       if (findings.length > 0) {
-        throw new TypeError(`applyHostUpdate: invalid filter (\xA79.1): ${findings.join("; ")}`);
+        throw new TypeError(`applyHostUpdate: invalid filter: ${findings.join("; ")}`);
       }
     }
     const prev = store.getState();
@@ -11144,7 +11175,7 @@ function createGraphInstance(opts) {
               severity: "error",
               count: issues.length,
               sampleIds: issues.slice(0, DIAGNOSTIC_SAMPLE_CAP).map((i) => i.where),
-              message: `columnar snapshot rejected whole (\xA75.1): ${issues[0].where} \u2014 ${issues[0].detail}`
+              message: `columnar snapshot rejected whole: ${issues[0].where} \u2014 ${issues[0].detail}`
             }
           ];
           columnarRejected = true;
@@ -11165,14 +11196,14 @@ function createGraphInstance(opts) {
       const isReplay = baseAccepted !== null && baseAccepted.datasetKey === data.datasetKey && baseAccepted.sourceRevision === data.sourceRevision;
       if (!isReplay) {
         const nextAccepted = preAccepted ?? validateSnapshot(data);
-        abortAllSessions(null, "replaced: a declarative snapshot was applied (\xA77.5)");
+        abortAllSessions(null, "replaced: a declarative snapshot was applied");
         overlayIdsCleared = clearOverlayState();
         datasetKeyChanged = baseAccepted !== null && baseAccepted.datasetKey !== data.datasetKey;
         if (datasetKeyChanged) {
           reconciler = new Reconciler();
           engineDiags = [];
           abortExpansionsForDatasetSwap();
-          abortSearchFlight("dataset-changed", "search aborted: the datasetKey changed (\xA75/\xA716.5)");
+          abortSearchFlight("dataset-changed", "search aborted: the datasetKey changed");
           resetMaskState();
           historyKernel.clear();
           stopTimelineTimer();
@@ -11287,7 +11318,7 @@ function createGraphInstance(opts) {
             severity: "error",
             count: 1,
             sampleIds: [],
-            message: "groups and groupBy are mutually exclusive (\xA716.3 R-16.3-15): NEITHER applies until the host removes one"
+            message: "groups and groupBy are mutually exclusive: NEITHER applies until the host removes one"
           }
         ];
         groupsDiagsChanged = true;
@@ -11325,7 +11356,7 @@ function createGraphInstance(opts) {
               severity: "warning",
               count: 1,
               sampleIds: [],
-              message: "parallelEdgeGrouping is inoperative: the accepted edge list has no same-endpoint-pair parallels (ids synthesized from (type,source,target)-style dedupe already collapse them) \u2014 the toggle changed nothing (\xA716.3 R-16.3-24)"
+              message: "parallelEdgeGrouping is inoperative: the accepted edge list has no same-endpoint-pair parallels (ids synthesized from (type,source,target)-style dedupe already collapse them) \u2014 the toggle changed nothing"
             }
           ];
           parallelRejected = true;
@@ -11405,7 +11436,7 @@ function createGraphInstance(opts) {
             severity: "warning",
             count: update.metrics.length,
             sampleIds: update.metrics.slice(0, DIAGNOSTIC_SAMPLE_CAP).map((c) => c.metric),
-            message: "metric columns discarded: no accepted model to join against (\xA712)"
+            message: "metric columns discarded: no accepted model to join against"
           }
         ];
       } else {
@@ -11414,7 +11445,7 @@ function createGraphInstance(opts) {
           count: accepted.nodes.length,
           // I1: columns must be stamped with the revision current at ISSUE
           // time — never the post-update revision (that made the gate
-          // self-satisfying, F11-01).
+          // self-satisfying).
           modelRevision: issuedModelSeq
         });
         metricDiags = res.diagnostics;
@@ -11551,7 +11582,7 @@ function createGraphInstance(opts) {
             severity: "warning",
             count: 1,
             sampleIds: [],
-            message: "searchIndex is construction-only (\xA716.5/D7): pass it to createGraphInstance options (or key-remount <Graph>) \u2014 this update's searchIndex was ignored"
+            message: "searchIndex is construction-only: pass it to createGraphInstance options (or key-remount <Graph>) \u2014 this update's searchIndex was ignored"
           }
         ];
         searchIndexRejected = true;
@@ -11988,9 +12019,9 @@ function createGraphInstance(opts) {
         applyEmphasis(s.engine, node === null ? null : index);
         emit("nodeHover", { node });
       },
-      // §13 native-route edge events (§7.4 mapping). Host onLink* events are
+      // native-route edge events. Host onLink* events are
       // honored regardless of the committed route — an adapter that surfaces
-      // them despite declaring linkPicking:false is a harmless pass-through —
+      // them despite declaring linkPicking:false is a harmless pass-through
       // but only the 'native' route RELIES on them; the fallback route feeds
       // the same typed events through the pointer samplers.
       onLinkClick(linkIndex) {
@@ -12027,7 +12058,7 @@ function createGraphInstance(opts) {
         const prevented = emit("nodeDragEnd", { node, x, y });
         if (!prevented) writePin(node.id, [x, y]);
       },
-      // §14/§15: right-click / long-press → typed 'contextMenu' event. The
+      // Right-click or long-press → typed 'contextMenu' event. The
       // core adds NO built-in follow-up — components own the menu.
       onContextMenu(index, screen) {
         if (!active()) return;
@@ -12041,7 +12072,7 @@ function createGraphInstance(opts) {
         emit("contextMenu", { target: { kind: "node", node }, screen: screenPt });
       },
       /**
-       * §13/§17 overlay scheduler tick (adapter activity clock). Per tick:
+       * Overlay scheduler tick (adapter activity clock). Per tick:
        * (1) sim-hot degradation — while the simulation runs, ONE getPositions
        * readback refreshes the CPU cache at a capped >=500ms cadence (M0:
        * tracked readback stalls ~18ms, so the lane NEVER reads back per
@@ -12268,13 +12299,14 @@ function createGraphInstance(opts) {
       route,
       screenToSpace: (p) => eng.screenToSpace?.(p) ?? null,
       medianLinkWidthPx: () => medianLinkWidthPx(lastLinkWidths),
-      // S9-T18: the facade's per-candidate visibility mask reads the LIVE
-      // §9.1 mask — no re-arm needed on mask changes (§13 grid invariance).
+      // the facade's per-candidate visibility mask reads the LIVE
+      // mask — no re-arm needed on mask changes.
       linkVisible: (linkIndex) => maskEdgeVisibleAt(linkIndex)
     });
     const restartAlpha = layout === "force" ? 1 : null;
     const committed = buildAndCommitFullReplay(s, restartAlpha);
     const restarted = committed && accepted !== null && restartAlpha !== null;
+    if (layout === "fixed") eng.pause();
     publish({
       status: "ready",
       revisions: { ...store.getState().revisions, appliedRender: eng.appliedRevision() },
@@ -12373,7 +12405,7 @@ function createGraphInstance(opts) {
         if (g.requestAnimationFrame === wrapper) g.requestAnimationFrame = native;
         if (registrations > 0 && !destroyed) {
           console.warn(
-            `orbit: ${registrations} requestAnimationFrame registration(s) observed over 500ms while this instance is quiescent (\xA717/S13-T06 one-frame-loop). If no app-owned animation is running, a second frame loop is leaking.`
+            `orbit: ${registrations} requestAnimationFrame registration(s) observed over 500ms while this instance is quiescent. If no app-owned animation is running, a second frame loop is leaking.`
           );
         }
       }, 500);
@@ -12448,7 +12480,7 @@ function createGraphInstance(opts) {
   function warnViewStateDrop(channel, why) {
     if (!DEV || viewStateDropWarned.has(channel)) return;
     viewStateDropWarned.add(channel);
-    console.warn(`orbit: getViewState omitted ${channel} \u2014 ${why} (\xA716.14)`);
+    console.warn(`orbit: getViewState omitted ${channel} \u2014 ${why}`);
   }
   function serializableScaleOf(channel, value) {
     if (value === void 0) return void 0;
@@ -12565,7 +12597,7 @@ function createGraphInstance(opts) {
       if (visible.length > limit) {
         throw new OrbitOperationError(
           { code: "export-materialization-too-large", rowCount: visible.length, limit },
-          `includePositions over ${limit} nodes \u2014 persist the layout through the export lane and reference it from dataRef (\xA716.14)`
+          `includePositions over ${limit} nodes \u2014 persist the layout through the export lane and reference it from dataRef`
         );
       }
       const pos = eng.getPositions();
@@ -12665,7 +12697,7 @@ function createGraphInstance(opts) {
             severity: "error",
             count: verdict.problems.length,
             sampleIds: [],
-            message: `setViewState rejected (${verdict.code}): ${verdict.problems.slice(0, 3).join("; ")} \u2014 nothing was applied (\xA716.14)`
+            message: `setViewState rejected (${verdict.code}): ${verdict.problems.slice(0, 3).join("; ")} \u2014 nothing was applied`
           }
         ];
         pendingDiagnosticsRefresh = true;
@@ -12765,6 +12797,9 @@ function createGraphInstance(opts) {
           } else if (wantsManualGroups && !groupsControlled) {
             commitManualGroups(manualGroups.length > 0 ? manualGroups : null);
           }
+          if (state.layout.kind !== layout) {
+            applyHostUpdateInner({ layout: state.layout.kind });
+          }
           if (state.styling !== void 0 && !needsHost) {
             const patch = {};
             if (state.styling.showLinks !== void 0) patch.showLinks = state.styling.showLinks;
@@ -12885,7 +12920,7 @@ function createGraphInstance(opts) {
       if (eng2 === null || eng2.captureScreenshot === void 0) {
         throw new OrbitOperationError(
           { code: "aborted", cause: "no screenshot capability" },
-          'exportImage("png") requires an engine with screenshot capture (\xA716.14)'
+          'exportImage("png") requires an engine with screenshot capture'
         );
       }
       const blob = await eng2.captureScreenshot();
@@ -12926,7 +12961,7 @@ function createGraphInstance(opts) {
     if (elementCount > limit && opts2?.fallback !== "raster-hybrid") {
       throw new OrbitOperationError(
         { code: "export-too-large", elementCount, limit },
-        `SVG export of ${elementCount} elements exceeds ${limit} \u2014 filter/isolate first, or pass { fallback: 'raster-hybrid' } (\xA716.14)`
+        `SVG export of ${elementCount} elements exceeds ${limit} \u2014 filter/isolate first, or pass { fallback: 'raster-hybrid' }`
       );
     }
     let minX = Infinity;
@@ -13027,14 +13062,17 @@ function createGraphInstance(opts) {
   }
   function captureExportPin() {
     if (accepted === null) return null;
-    return { accepted, scene, mask: softMask };
+    let visibleIds = null;
+    if (scene !== null) {
+      const slots = visibleSlotsOf(scene, softMask);
+      const ids = /* @__PURE__ */ new Set();
+      for (const i of slots) ids.add(scene.idByIndex[i]);
+      visibleIds = ids;
+    }
+    return { accepted, scene, visibleIds };
   }
   function pinnedVisibleIds(pin) {
-    if (pin.scene === null) return null;
-    const slots = visibleSlotsOf(pin.scene, pin.mask);
-    const ids = /* @__PURE__ */ new Set();
-    for (const i of slots) ids.add(pin.scene.idByIndex[i]);
-    return ids;
+    return pin.visibleIds;
   }
   function pinnedRowCount(pin, scope) {
     if (scope === "accepted") return pin.accepted.nodes.length + pin.accepted.edges.length;
@@ -13054,7 +13092,7 @@ function createGraphInstance(opts) {
     if (rowCount > limit) {
       throw new OrbitOperationError(
         { code: "export-materialization-too-large", rowCount, limit },
-        `exportData would materialize ${rowCount} rows (limit ${limit}) \u2014 use exportDataStream (\xA716.14)`
+        `exportData would materialize ${rowCount} rows (limit ${limit}) \u2014 use exportDataStream`
       );
     }
     if (scope === "accepted") return { nodes: pin.accepted.nodes, edges: pin.accepted.edges };
@@ -13097,7 +13135,7 @@ function createGraphInstance(opts) {
     if (bound > limit) {
       throw new OrbitOperationError(
         { code: "export-materialization-too-large", rowCount: bound, limit },
-        `exportLayout would materialize ${bound} rows (limit ${limit}) \u2014 use exportLayoutStream (\xA716.14)`
+        `exportLayout would materialize ${bound} rows (limit ${limit}) \u2014 use exportLayoutStream`
       );
     }
     const out = /* @__PURE__ */ new Map();
@@ -13176,9 +13214,8 @@ function createGraphInstance(opts) {
       visibleNodeCount: st.visible.nodes,
       visibleEdgeCount: st.visible.edges,
       estimatedCpuBytes: estimateCpuBytes(),
-      // The acceptance queue is synchronous (depth is 0 outside a job, and a
-      // reader inside a job observes 1); async ingestion depth arrives with
-      // the worker lane (PR-E).
+      // The acceptance queue is synchronous: depth is 0 outside a job, and a
+      // reader inside a job observes 1.
       queueDepth: acceptanceQueue.active ? 1 : 0,
       modelRevision: st.revisions.model,
       scopeRevision: st.revisions.scope,
@@ -13402,7 +13439,7 @@ var OverviewController = class {
   getScene;
   getVisible;
   size;
-  /** Transform of the LAST rasterization; null until rasterize() succeeds. */
+  /** Transform of the LAST rasterization; null until rasterize succeeds. */
   frame = null;
   // --- throttle state (latched by shouldRefresh when it answers true) ---
   lastRefreshMs = null;
@@ -13417,9 +13454,9 @@ var OverviewController = class {
    * when it returns true, so each `true` accounts for exactly one refresh:
    *
    * - hot (`simulationRunning`): time-gated only (≤ 2 Hz) — the epoch is
-   *   ignored because positions change continuously without epoch advances;
+   * ignored because positions change continuously without epoch advances;
    * - idle: refresh only when the epoch ADVANCED since the last refresh,
-   *   time-gated at ≤ 1 Hz;
+   * time-gated at ≤ 1 Hz;
    * - idle + unchanged epoch: always false — zero work, forever.
    */
   shouldRefresh(nowMs2, simulationRunning, epoch) {
@@ -13437,7 +13474,7 @@ var OverviewController = class {
   /**
    * Rasterizes the current scene into a fresh `size²` RGBA dot field: 1 px
    * white dots whose alpha ACCUMULATES on overlap (heatmap-ish density),
-   * dimmed for mask-hidden points; NaN pairs (§7.3 tombstones) are skipped.
+   * dimmed for mask-hidden points; NaN pairs are skipped.
    * World bounds map into the thumbnail with a 5 % edge padding at a UNIFORM
    * scale (aspect preserved, centered on the short axis) and a downward pixel
    * y (see module header). Returns null when there is no scene or no point.