@modernrelay/orbit-core 0.13.6 → 0.15.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { DIAGNOSTIC_SAMPLE_CAP, encodeStringTable, collectTransfers, deriveClusters, resolveClusterCenters, clusterCentroids, EnvelopeSequencer, RequestLedger } from './chunk-FG6TQANI.js';
-export { DEFAULT_CLUSTER_CENTER_RADIUS, DEFAULT_LAYOUT_SEED, DIAGNOSTIC_SAMPLE_CAP, acceptColumnar, clusterCentroids, collectTransfers, decodeStringTable, deriveClusters, encodeStringTable, generateClusterCenters, judgeEpoch, resolveClusterCenters } from './chunk-FG6TQANI.js';
+import { DIAGNOSTIC_SAMPLE_CAP, encodeStringTable, collectTransfers, deriveClusters, resolveClusterCenters, clusterCentroids, EnvelopeSequencer, RequestLedger } from './chunk-TDBIVBJ3.js';
+export { DEFAULT_CLUSTER_CENTER_RADIUS, DEFAULT_LAYOUT_SEED, DIAGNOSTIC_SAMPLE_CAP, acceptColumnar, clusterCentroids, collectTransfers, decodeStringTable, deriveClusters, encodeStringTable, generateClusterCenters, judgeEpoch, resolveClusterCenters } from './chunk-TDBIVBJ3.js';
 import { createStore } from 'zustand/vanilla';
 
 // src/errors.ts
@@ -123,6 +123,10 @@ function validateSnapshot(snapshot) {
       record(invalidEdge, typeof edge.id === "string" ? edge.id : `[${i}]`);
       continue;
     }
+    if (typeof edge.id === "string" && edge.id.includes("\0")) {
+      record(invalidEdge, `[${i}]`);
+      continue;
+    }
     if (!nodeIndex.has(source)) {
       record(danglingEdge, source);
       continue;
@@ -172,7 +176,7 @@ function validateSnapshot(snapshot) {
     "invalid-edge",
     "error",
     invalidEdge,
-    `${invalidEdge.count} edge row(s) dropped: missing or non-string source/target`
+    `${invalidEdge.count} edge row(s) dropped: missing or non-string source/target, or NUL-containing explicit id`
   );
   pushDiagnostic(
     diagnostics,
@@ -349,7 +353,7 @@ function validateGroupSpecs(specs, nodeIndex) {
       severity: "error",
       count,
       sampleIds: samples,
-      message: `groups rejected before scene rewrite (\xA716.3 acyclic/singly-parented): ${kinds} \u2014 the previous group configuration stays active`
+      message: `groups rejected before scene rewrite: ${kinds} \u2014 the previous group configuration stays active`
     }
   };
 }
@@ -419,7 +423,7 @@ function validateGroupBySpec(spec) {
     if (!expandOk) problems.push("semanticZoom.expandAbove must be a finite number");
     if (collapseOk && expandOk && !(sz.expandAbove > sz.collapseBelow)) {
       problems.push(
-        "semanticZoom.expandAbove must be strictly greater than collapseBelow (hysteresis, R-16.3-22)"
+        "semanticZoom.expandAbove must be strictly greater than collapseBelow to provide a hysteresis gap"
       );
     }
   }
@@ -429,7 +433,7 @@ function validateGroupBySpec(spec) {
     severity: "error",
     count: problems.length,
     sampleIds: [],
-    message: `groupBy rejected (\xA716.3/D4): ${problems.join("; ")} \u2014 the previous groupBy configuration stays active`
+    message: `groupBy rejected: ${problems.join("; ")} \u2014 the previous groupBy configuration stays active`
   };
 }
 function deriveGroupsByKey(nodes, by, isCollapsedKey) {
@@ -476,7 +480,7 @@ function deriveGroupsByKey(nodes, by, isCollapsedKey) {
       severity: "warning",
       count: errorCount,
       sampleIds: errorSamples,
-      message: "groupBy.by threw; the affected nodes derived as ungrouped (\xA716.3/\xA78)"
+      message: "groupBy.by threw; the affected nodes derived as ungrouped"
     }
   };
 }
@@ -701,27 +705,27 @@ var EMPTY_INDEX = /* @__PURE__ */ new Map();
 var Reconciler = class {
   datasetKey = null;
   hasScene = false;
-  // Previous scene, kept for the structural diff (§7.2).
+  // Previous scene, kept for the structural diff.
   prevIdByIndex = [];
   prevIndexById = EMPTY_INDEX;
   prevEdgeIdByIndex = [];
   prevLinks = new Uint32Array(0);
   /**
    * Declared node.x/y as of the previous reconcile, for nodes that declared
-   * them. Lets Priority 1 distinguish a CHANGED declaration (caller intent —
+   * them. Lets Priority 1 distinguish a CHANGED declaration (caller intent
    * wins over any cache) from an unchanged one (defers to live drift). Fresh
    * per pass, so departed ids drop and a re-add treats its declaration as new.
    */
   prevDeclared = /* @__PURE__ */ new Map();
   /**
-   * CPU position mirror for the CURRENT scene, indexed by slot (§7.1 posBuf).
+   * CPU position mirror for the CURRENT scene, indexed by slot.
    * Owned copy — never aliases a published scene's positions array, so
    * noteEnginePositions never mutates an already-published RenderScene.
    */
   livePositions = new Float32Array(0);
   /**
-   * Ids removed from the scene → last known finite position (§7.1/§7.3
-   * leave-and-return guarantee). Map insertion order doubles as LRU order;
+   * Ids removed from the scene → last known finite position, preserving the
+   * leave-and-return guarantee. Map insertion order doubles as LRU order;
    * invariant: never overlaps the current scene's id set.
    */
   departed = /* @__PURE__ */ new Map();
@@ -835,7 +839,7 @@ var Reconciler = class {
   }
   /**
    * Copy engine-read positions into the live cache for the CURRENT scene's
-   * slots (§7.1 per-event readback — simulation end, pre-structural-swap).
+   * slots.
    * Extra trailing floats are ignored; a short buffer updates a prefix.
    */
   noteEnginePositions(positions) {
@@ -1239,7 +1243,7 @@ function stageBatch(contribution, batch, tallies, nextOrder) {
   for (let i = 0; i < rawNodes.length; i++) {
     const row = rawNodes[i];
     const id = typeof row === "object" && row !== null ? row.id : void 0;
-    if (typeof id !== "string") {
+    if (typeof id !== "string" || id.includes("\0")) {
       recordRow(tallies.invalidNodes, `[${batch.sequence}:${i}]`);
       continue;
     }
@@ -1263,6 +1267,10 @@ function stageBatch(contribution, batch, tallies, nextOrder) {
       recordRow(tallies.invalidEdges, typeof edge.id === "string" ? edge.id : `[${batch.sequence}:${i}]`);
       continue;
     }
+    if (typeof edge.id === "string" && edge.id.includes("\0")) {
+      recordRow(tallies.invalidEdges, `[${batch.sequence}:${i}]`);
+      continue;
+    }
     const hasExplicitId = typeof edge.id === "string";
     let id;
     if (hasExplicitId) {
@@ -1391,7 +1399,7 @@ function mergeDiagnostics(merge) {
       severity: "info",
       count: merge.shadowedCount,
       sampleIds: merge.shadowedSamples,
-      message: `${merge.shadowedCount} overlay node row(s) shadowed by a same-id row admitted earlier (\xA77.5); rows retained`
+      message: `${merge.shadowedCount} overlay node row(s) shadowed by a same-id row admitted earlier; rows retained`
     });
   }
   if (merge.duplicateEdgeCount > 0) {
@@ -1415,7 +1423,7 @@ function sessionCommitDiagnostics(tallies, danglingCount, danglingSamples = [])
     "invalid-node",
     "error",
     tallies.invalidNodes,
-    `${tallies.invalidNodes.count} ingested node row(s) dropped: missing or non-string id`
+    `${tallies.invalidNodes.count} ingested node row(s) dropped: missing, non-string, or NUL-containing id`
   );
   push(
     "duplicate-node-id",
@@ -1427,7 +1435,7 @@ function sessionCommitDiagnostics(tallies, danglingCount, danglingSamples = [])
     "invalid-edge",
     "error",
     tallies.invalidEdges,
-    `${tallies.invalidEdges.count} ingested edge row(s) dropped: missing or non-string source/target`
+    `${tallies.invalidEdges.count} ingested edge row(s) dropped: missing or non-string source/target, or NUL-containing explicit id`
   );
   push(
     "duplicate-edge-id",
@@ -1441,7 +1449,7 @@ function sessionCommitDiagnostics(tallies, danglingCount, danglingSamples = [])
       severity: "warning",
       count: danglingCount,
       sampleIds: danglingSamples.slice(0, DIAGNOSTIC_SAMPLE_CAP),
-      message: `${danglingCount} ingested edge(s) still awaiting an endpoint at commit (pending-endpoint index; \xA77.5)`
+      message: `${danglingCount} ingested edge(s) still awaiting an endpoint at commit (the endpoint was not ingested before the session committed)`
     });
   }
   return out;
@@ -1571,7 +1579,7 @@ var IncrementalAlphaComposer = class {
   bufB = null;
   staleA = [];
   staleB = [];
-  /** Which buffer the NEXT nextBuffer() call returns (0 = A, 1 = B). */
+  /** Which buffer the NEXT nextBuffer call returns (0 = A, 1 = B). */
   next = 0;
   // --- seed key ---
   seededBase = null;
@@ -1674,7 +1682,7 @@ var PressureSampler = class {
   /**
    * Record one onFrame tick. `settled` marks a tick that arrived while the
    * scene was at rest (sim settled, no pending commit work) — the idle-
-   * wakeup counter, which reads 0 when the ADR-005 gated clock is honest.
+   * wakeup counter, which reads 0 when the gated activity clock is honest.
    */
   noteFrame(timeMs, settled) {
     this.frames += 1;
@@ -1844,7 +1852,7 @@ var DegradeController = class {
   /**
    * Resource-admission trigger: engage the NEXT not-yet-engaged step in the
    * declared order. Null when the order is exhausted — the caller must then
-   * REJECT before allocating (§17: never silently erase semantic styling).
+   * REJECT before allocating.
    */
   engageNextResourceStep(visible) {
     for (const step of this.limits.resourceDegradationOrder) {
@@ -2057,8 +2065,8 @@ var LinkPickIndex = class {
     while (!r.done) r = it.next();
   }
   /**
-   * Incremental build: yields whenever `now() − sliceStart ≥ budgetMs` so a
-   * scheduler can spread the work across idle frames (§17 long-task budget).
+   * Incremental build: yields whenever `now − sliceStart ≥ budgetMs` so a
+   * scheduler can spread the work across idle frames.
    * Pure generator — no rAF/timers here; the caller owns scheduling.
    *
    * The previous grid stays armed and queryable until the new one commits on
@@ -2222,7 +2230,7 @@ var LinkPickIndex = class {
    * Nearest link within `tolerance` (space units) of the space point
    * `(x, y)`, or null. Scans the candidate cells covering the tolerance
    * disc's bounding box (typically the 3×3 neighborhood; more when the
-   * tolerance exceeds the cell size), applies the optional §9.1 visibility
+   * tolerance exceeds the cell size), applies the optional visibility
    * mask per candidate, then runs the exact point→segment distance test.
    * Nearest wins; exact-distance ties break toward the LOWER link index.
    * Returns null while unbuilt/invalidated (picking disarmed).
@@ -2374,7 +2382,7 @@ var EdgePickingFacade = class {
     this.generation++;
     this.index.invalidate();
   }
-  /** §9.1 mask pass-through stub: applied per candidate at query time. */
+  /** mask pass-through stub: applied per candidate at query time. */
   setLinkVisibilityMask(mask) {
     this.mask = mask;
   }
@@ -2734,7 +2742,7 @@ function throwAborted2(signal, sourceId, targetId) {
   const reason = signal.reason;
   throw new OrbitOperationError(
     reason === void 0 ? { code: "aborted" } : { code: "aborted", cause: reason },
-    `local find('${sourceId}' \u2192 '${targetId}') aborted mid-scan (\xA716.2)`
+    `local find('${sourceId}' \u2192 '${targetId}') aborted mid-scan`
   );
 }
 function createLocalPathService(getBase) {
@@ -2919,7 +2927,7 @@ function throwAborted3(signal, query) {
   const reason = signal.reason;
   throw new OrbitOperationError(
     reason === void 0 ? { code: "aborted" } : { code: "aborted", cause: reason },
-    `local search('${query}') aborted mid-scan (\xA716.5)`
+    `local search('${query}') aborted mid-scan`
   );
 }
 function createLocalSearchService(getBase) {
@@ -2982,6 +2990,16 @@ function checkStringColumn(col, rows, where, isIds, out) {
     out.push({ where, problem: "not-a-string-column", detail: 'expected {kind:"string", dictionary, codes}' });
     return;
   }
+  for (let d = 0; d < col.dictionary.length; d++) {
+    if (typeof col.dictionary[d] !== "string") {
+      out.push({
+        where,
+        problem: "not-a-string-column",
+        detail: `dictionary entry ${d} is not a string`
+      });
+      return;
+    }
+  }
   if (col.codes.length !== rows) {
     const detached = col.codes.length === 0 && col.codes.buffer.byteLength === 0;
     out.push({
@@ -3230,10 +3248,12 @@ function detachColumnarBuffers(snapshot) {
   return detached;
 }
 
-// src/worker/lane.ts
-function defaultWorkerUrl() {
-  return new URL("./worker/entry.js", import.meta.url);
+// src/workerAsset.ts
+function createDefaultWorker() {
+  return new Worker(new URL("./worker/entry.js", import.meta.url), { type: "module" });
 }
+
+// src/worker/lane.ts
 function transportFromWorker(worker) {
   return {
     post: (envelope, transfers) => worker.postMessage(envelope, [...transfers]),
@@ -3275,10 +3295,7 @@ var WorkerLane = class {
       let transport = this.options.transport ?? null;
       if (transport === null) {
         const factory = this.options.factory;
-        const worker = factory !== void 0 && "create" in factory ? factory.create() : new Worker(
-          factory !== void 0 && "url" in factory ? factory.url : defaultWorkerUrl(),
-          { type: "module" }
-        );
+        const worker = factory !== void 0 && "create" in factory ? factory.create() : factory !== void 0 && "url" in factory ? new Worker(factory.url, { type: "module" }) : createDefaultWorker();
         transport = transportFromWorker(worker);
       }
       transport.onReply((reply) => this.settle(reply));
@@ -3291,8 +3308,8 @@ var WorkerLane = class {
     }
     return this.availableState;
   }
-  /** Async worker death (P1: a constructed-but-dead worker must strand
-   * NOTHING): every pending request rejects as 'worker-failed' so callers
+  /** A constructed-but-dead worker must strand NOTHING: every pending
+   * request rejects as 'worker-failed' so callers
    * run their main-lane fallback, the lane goes permanently unavailable,
    * and the unavailability callback fires (the instance one-shots it). */
   fail(reason) {
@@ -3348,7 +3365,7 @@ var WorkerLane = class {
   }
   /** Abort everything in flight (epoch advance / detach / dataset swap).
    * The ledger's controllers fire each pending promise's abort listener;
-   * the sweep below catches anything tracked before a listener attached —
+   * the sweep below catches anything tracked before a listener attached
    * rejects stay idempotent through the delete guard. */
   abortAll() {
     this.ledger.abortAll();
@@ -3817,7 +3834,7 @@ var MetricStore = class {
   /** Admitted async columns by metric name; NaN encodes null. */
   columns = /* @__PURE__ */ new Map();
   degreePasses = 0;
-  /** §17 telemetry: estimated bytes of metric storage held (S13-T07). */
+  /** telemetry: estimated bytes of metric storage held. */
   estimatedBytes() {
     let bytes = 0;
     for (const col of this.columns.values()) bytes += col.byteLength;
@@ -3848,10 +3865,10 @@ var MetricStore = class {
     }
   }
   /**
-   * Joins async metric columns against the accepted model (§12).
+   * Joins async metric columns against the accepted model.
    * Revision-gated PER COLUMN (I1): a column whose issue-time
    * `forModelRevision` stamp differs from `opts.modelRevision` is discarded
-   * (info diagnostic — a normal async race outcome, §9.2). A missing or
+   * (info diagnostic — a normal async race outcome). A missing or
    * mismatched stamp is never defaulted to the current revision — that
    * would make the gate self-satisfying.
    * Structural rejections ('index' length mismatch, missing/mismatched ids)
@@ -3869,7 +3886,7 @@ var MetricStore = class {
             "info",
             1,
             [column.metric],
-            `metric column '${column.metric}' discarded: computed for model revision ${String(column.forModelRevision)} but the update was issued at revision ${String(opts.modelRevision)} (\xA712/I1 revision-gated admission)`
+            `metric column '${column.metric}' discarded: computed for model revision ${String(column.forModelRevision)} but the update was issued at revision ${String(opts.modelRevision)}`
           )
         );
         continue;
@@ -3979,7 +3996,7 @@ var MetricStore = class {
   }
   /**
    * Raw column in accepted-base order, or null when unavailable. NaN encodes
-   * null (§12) — consumers exclude NaN slots from domains. Do NOT mutate:
+   * null — consumers exclude NaN slots from domains. Do NOT mutate:
    * this is the live cache, not a copy.
    */
   metricValues(metric) {
@@ -4025,7 +4042,7 @@ var MetricStore = class {
 };
 
 // src/capabilityPolicy.ts
-var CLUSTER_FORCE_DEGRADATION_REASON = "clusters requested but the engine capability record does not declare clusterForce; the cluster force is inert while membership, cluster labels, and centroids still work (\xA716.3/R-13-39)";
+var CLUSTER_FORCE_DEGRADATION_REASON = "clusters requested but the engine capability record does not declare clusterForce; the cluster force is inert while membership, cluster labels, and centroids still work";
 function degradation(feature, reason) {
   return Object.freeze({ feature, reason });
 }
@@ -4038,7 +4055,7 @@ function resolveEnginePolicy(capabilities, requested) {
     degradations.push(
       degradation(
         "edgeArrows",
-        "edgeArrows requested but the engine capability record does not declare edgeArrows; the prop is inert (\xA716.12)"
+        "edgeArrows requested but the engine capability record does not declare edgeArrows; the prop is inert"
       )
     );
   }
@@ -4046,7 +4063,7 @@ function resolveEnginePolicy(capabilities, requested) {
     degradations.push(
       degradation(
         "images",
-        "node images requested but the engine capability record does not declare pointImages; placeholder glyphs render and image refs are retained (\xA78/\xA713)"
+        "node images requested but the engine capability record does not declare pointImages; placeholder glyphs render and image refs are retained"
       )
     );
   }
@@ -4069,14 +4086,14 @@ function assertCapabilityMethodParity(engine) {
   const mismatches = [];
   const capabilities = engine.capabilities;
   if (capabilities === null || typeof capabilities !== "object") {
-    mismatches.push("engine.capabilities is missing or not an object (\xA713 static declaration)");
+    mismatches.push("engine.capabilities is missing or not an object");
     return mismatches;
   }
   const caps = capabilities;
   const getPositions = engine.getPositions;
   if (caps.trackedPositions === true && typeof getPositions !== "function") {
     mismatches.push(
-      "capabilities.trackedPositions is declared but engine.getPositions is absent (\xA713 tracked readback)"
+      "capabilities.trackedPositions is declared but engine.getPositions is absent"
     );
   }
   return mismatches;
@@ -4163,7 +4180,7 @@ var ImageAtlasPipeline = class {
   generation = null;
   flushScheduled = false;
   disposed = false;
-  /** D5/F11-06: evicted-entry bitmaps awaiting close — closed AFTER the
+  /** Evicted-entry bitmaps awaiting close — closed AFTER the
    * flush that carries their removeSlots, so the instance's recovery-replay
    * map (pruned synchronously in the batch callback) can never re-send a
    * closed bitmap. */
@@ -4397,7 +4414,7 @@ var ImageAtlasPipeline = class {
     return index;
   }
   /**
-   * I2 (roster-atomic resource mappings, F11-03): the SYNCHRONOUS point→slot
+   * Roster-atomic resource mappings: the SYNCHRONOUS point→slot
    * mapping for the last requested roster — a slot appears only when its ref
    * is resolved AND the engine has already received the bitmap (delivered);
    * pending, failed, evicted, and reused-but-undelivered refs are the −1
@@ -4477,12 +4494,12 @@ var SoftMask = class {
   edgeHideLane;
   edgeDimLane;
   sources = /* @__PURE__ */ new Set();
-  /** Dedicated internal source implementing the §9 node→edge cascade. */
+  /** Dedicated internal source implementing the node→edge cascade. */
   cascadeSource = null;
   overflowedFlag = false;
   /** Total memberships currently held across all sources and lanes. */
   totalHeld = 0;
-  /** §17 O(Δ) op counters (F10-02 gate instrumentation). */
+  /** O(Δ) op counters. */
   statsBox = {
     slotsVisited: 0,
     zeroCrossings: 0,
@@ -4505,12 +4522,12 @@ var SoftMask = class {
     return this.edgeCap;
   }
   /** One-time latch: some counter hit 0xFFFF and an increment was dropped.
-   * Counts may drift afterwards; the caller reports it (§9.1 overflow guard). */
+   * Counts may drift afterwards; the caller reports it. */
   get overflowed() {
     return this.overflowedFlag;
   }
   // Live counter columns (read-only views by convention — do not mutate;
-  // references are replaced on grow()).
+  // references are replaced on grow).
   get nodeHideFailures() {
     return this.nodeHideLane.counters;
   }
@@ -4525,7 +4542,7 @@ var SoftMask = class {
   }
   /**
    * Grows capacities for structure changes (existing slot state is
-   * preserved; new slots start fully visible). Capacities never shrink —
+   * preserved; new slots start fully visible). Capacities never shrink
    * a smaller value is a no-op for that dimension.
    */
   grow(nodeCapacity, edgeCapacity) {
@@ -4550,7 +4567,7 @@ var SoftMask = class {
       this.edgeCap = edgeCapacity;
     }
   }
-  /** Registers a new failure source. No cap on source count (§9.1). */
+  /** Registers a new failure source. No cap on source count. */
   acquire(name) {
     const state = {
       name,
@@ -4605,11 +4622,11 @@ var SoftMask = class {
     };
   }
   /**
-   * §9 edge cascade over the mask lane: recomputes, from the CURRENT node
+   * edge cascade over the mask lane: recomputes, from the CURRENT node
    * hide lane, the set of edges with at least one hidden endpoint, and feeds
    * it to the dedicated internal cascade source (edge hide lane only).
-   * `links` is the flat `[src0, tgt0, src1, tgt1, …]` node-slot pair buffer
-   * (§7.1 CSR input shape); edge slot i has endpoints at links[2i]/[2i+1].
+   * `links` is the flat `[src0, tgt0, src1, tgt1, …]` node-slot pair buffer;
+   * edge slot i has endpoints at links[2i]/[2i+1].
    * O(E) scan per call — typically once per drain — but only edges whose
    * cascade state changed produce counter deltas (and thus dirty entries).
    * Edges beyond `links.length / 2` are treated as having no hidden
@@ -4640,11 +4657,11 @@ var SoftMask = class {
       }
       if (hide[source] !== 0 || hide[target] !== 0) failing.push(i);
     }
-    this.cascadeSource ??= this.acquire("\xA79.1 node\u2192edge cascade");
+    this.cascadeSource ??= this.acquire("node\u2192edge cascade");
     this.cascadeSource.setEdgeFailures(failing);
   }
   /**
-   * O(incident-edges) delta form of the §9.1 cascade (F10-02): for each node
+   * O(incident-edges) delta form of the cascade: for each node
    * whose HIDE visibility crossed zero, recompute only its incident edges'
    * cascade state from the CURRENT node counters and apply the delta through
    * the same internal cascade source the full form uses — the two compose
@@ -4656,7 +4673,7 @@ var SoftMask = class {
   applyNodeCascadeToEdgesDelta(links, incidence, crossedNodes) {
     if (crossedNodes.length === 0) return;
     const hide = this.nodeHideLane.counters;
-    this.cascadeSource ??= this.acquire("\xA79.1 node\u2192edge cascade");
+    this.cascadeSource ??= this.acquire("node\u2192edge cascade");
     const nowFailing = [];
     const nowClear = [];
     for (let k = 0; k < crossedNodes.length; k++) {
@@ -4686,7 +4703,7 @@ var SoftMask = class {
       edgeVisibleCount: this.edgeHideLane.zeroCount
     };
   }
-  /** §17 telemetry: estimated bytes of mask storage held (S13-T07):
+  /** telemetry: estimated bytes of mask storage held:
    * four counter lanes (+pending trackers) and per-source flag columns. */
   estimatedBytes() {
     let bytes = 0;
@@ -4698,7 +4715,7 @@ var SoftMask = class {
     }
     return bytes;
   }
-  /** §17 O(Δ) op counters (live object — snapshot before comparing). */
+  /** O(Δ) op counters (live object — snapshot before comparing). */
   get stats() {
     return this.statsBox;
   }
@@ -4720,7 +4737,7 @@ var SoftMask = class {
   isEdgeVisible(index) {
     return this.edgeHideLane.counters[index] === 0;
   }
-  /** Dimmed iff visible AND dimFailures > 0 (§9.1). */
+  /** Dimmed iff visible AND dimFailures > 0. */
   isNodeDimmed(index) {
     return this.isNodeVisible(index) && (this.nodeDimLane.counters[index] ?? 0) > 0;
   }
@@ -4781,7 +4798,7 @@ var SoftMask = class {
     mem.holes = 0;
   }
   /**
-   * O(Δ) delta ops on one lane membership (F10-02). Adds and removes are
+   * O(Δ) delta ops on one lane membership. Adds and removes are
    * idempotent per slot (adding a member / removing a non-member is a
    * no-op); removed slots leave HOLES in `list` (compacted past 50%), so
    * replace/clear passes must honor the bit0 guard above. `crossings`, when
@@ -4882,7 +4899,7 @@ var SoftMask = class {
     this.applyMembership(this.edgeDimLane, state.edgeDim, null);
   }
   /** Debug balanced-increment assert: whenever no source holds any
-   * membership, every counter must read zero (skipped once overflowed —
+   * membership, every counter must read zero (skipped once overflowed
    * clamped increments legitimately drift the books). */
   assertBalancedIfIdle() {
     if (!DEBUG || this.overflowedFlag || this.totalHeld !== 0) return;
@@ -4904,7 +4921,7 @@ var SVG_MAX_ELEMENTS_DEFAULT = 5e4;
 var SvgBudgetError = class extends Error {
   constructor(elementCount, limit) {
     super(
-      `SVG export of ${elementCount} elements exceeds the ${limit}-element budget \u2014 filter/isolate first, or use the raster-hybrid fallback (\xA716.14)`
+      `SVG export of ${elementCount} elements exceeds the ${limit}-element budget \u2014 filter/isolate first, or use the raster-hybrid fallback`
     );
     this.elementCount = elementCount;
     this.limit = limit;
@@ -5026,6 +5043,7 @@ var isNum = (v) => typeof v === "number" && Number.isFinite(v);
 var isBool = (v) => typeof v === "boolean";
 var isObj = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var isStrArray = (v) => Array.isArray(v) && v.every(isStr);
+var isNumArray = (v) => Array.isArray(v) && v.every(isNum);
 function validateBrush(v, at, problems) {
   if (!isObj(v)) {
     problems.push(`${at}: not an object`);
@@ -5044,18 +5062,43 @@ function validateBrush(v, at, problems) {
   }
   problems.push(`${at}: unknown brush kind`);
 }
-function validateScale(v, at, problems) {
+function validateScale(v, at, valueKind, problems) {
   if (!isObj(v)) {
     problems.push(`${at}: not an object`);
     return;
   }
-  if (v["kind"] === "sequential" || v["kind"] === "diverging") {
+  const isValueArray = valueKind === "string" ? isStrArray : isNumArray;
+  const valueLabel = valueKind === "string" ? "string" : "finite number";
+  if (v["kind"] === "sequential") {
+    if (!isStr(v["metric"])) problems.push(`${at}: metric must be a string`);
+    if (!isValueArray(v["range"]) || v["range"].length !== 2) {
+      problems.push(`${at}: sequential range must be a [${valueLabel}, ${valueLabel}] tuple`);
+    }
+    if (v["domain"] !== void 0 && (!isNumArray(v["domain"]) || v["domain"].length !== 2)) {
+      problems.push(`${at}: sequential domain must be a [min, max] finite-number tuple`);
+    }
+    return;
+  }
+  if (v["kind"] === "diverging") {
     if (!isStr(v["metric"])) problems.push(`${at}: metric must be a string`);
-    if (!Array.isArray(v["range"])) problems.push(`${at}: range must be an array`);
+    if (!isValueArray(v["range"]) || v["range"].length !== 3) {
+      problems.push(
+        `${at}: diverging range must be a [${valueLabel}, ${valueLabel}, ${valueLabel}] tuple`
+      );
+    }
+    if (!isNum(v["mid"])) {
+      problems.push(`${at}: diverging mid must be a finite number`);
+    }
     return;
   }
   if (v["kind"] === "categorical") {
     if (!isStr(v["by"])) problems.push(`${at}: categorical 'by' must be a field string`);
+    if (v["domain"] !== void 0 && !isStrArray(v["domain"])) {
+      problems.push(`${at}: categorical domain must be a string[]`);
+    }
+    if (v["palette"] !== void 0 && !isValueArray(v["palette"])) {
+      problems.push(`${at}: categorical palette must be a ${valueLabel}[]`);
+    }
     return;
   }
   problems.push(`${at}: unknown scale kind`);
@@ -5180,10 +5223,10 @@ function validateViewState(raw) {
       problems.push("styling: must be an object");
     } else {
       if (styling["nodeColor"] !== void 0) {
-        validateScale(styling["nodeColor"], "styling.nodeColor", problems);
+        validateScale(styling["nodeColor"], "styling.nodeColor", "string", problems);
       }
       if (styling["nodeSize"] !== void 0) {
-        validateScale(styling["nodeSize"], "styling.nodeSize", problems);
+        validateScale(styling["nodeSize"], "styling.nodeSize", "number", problems);
       }
       for (const flag of ["showLinks", "edgeArrows"]) {
         if (styling[flag] !== void 0 && !isBool(styling[flag])) {
@@ -5264,7 +5307,7 @@ function upperBound(values, sorted, target) {
   return lo;
 }
 var TypedColumnCrossfilter = class {
-  /** Test instrumentation; see CrossfilterStats. Reset with resetStats(). */
+  /** Test instrumentation; see CrossfilterStats. Reset with resetStats. */
   stats = {
     slotsWalked: 0,
     fullSorts: 0,
@@ -5272,7 +5315,7 @@ var TypedColumnCrossfilter = class {
     binUpdates: 0,
     filteredRecomputes: 0
   };
-  /** Count of dims whose filtered layer is live-maintained (F10-02). */
+  /** Count of dims whose filtered layer is live-maintained. */
   liveDims = 0;
   dims = [];
   byKey = /* @__PURE__ */ new Map();
@@ -5298,7 +5341,7 @@ var TypedColumnCrossfilter = class {
     this.stats.binUpdates = 0;
     this.stats.filteredRecomputes = 0;
   }
-  /** §17 telemetry: estimated bytes of typed-column storage held (S13-T07).
+  /** telemetry: estimated bytes of typed-column storage held.
    * Documented components: per-dim value/permutation/bin/code/pass arrays,
    * the global failure counter, and the external mask. */
   estimatedBytes() {
@@ -5313,7 +5356,7 @@ var TypedColumnCrossfilter = class {
     }
     return bytes;
   }
-  /** F10-02 live-layer bookkeeping — the ONLY writer of `filteredLive`. */
+  /** live-layer bookkeeping — the ONLY writer of `filteredLive`. */
   setFilteredLive(dim, live) {
     if (dim.filteredLive === live) return;
     dim.filteredLive = live;
@@ -5376,8 +5419,8 @@ var TypedColumnCrossfilter = class {
   }
   /**
    * External node-mask predicate for the joint "filtered" second layer (the
-   * instance wires the §9.1 filter-prop node mask in). Affects summaries only,
-   * never selection visibility. Length must equal rowCount(). Notifies on
+   * instance wires the filter-prop node mask in). Affects summaries only,
+   * never selection visibility. Length must equal rowCount. Notifies on
    * observable change; does NOT advance selectionRevision.
    */
   setExternalMask(passSlots) {
@@ -5402,7 +5445,7 @@ var TypedColumnCrossfilter = class {
     this.notify();
   }
   /**
-   * Immutable summary. The filtered layer is recomputed lazily when dirty —
+   * Immutable summary. The filtered layer is recomputed lazily when dirty
    * O(rows) per dirty summarize (v0.7 tier; see module doc). Returned objects
    * are frozen and never mutated by later operations.
    */
@@ -5454,7 +5497,7 @@ var TypedColumnCrossfilter = class {
     return Object.freeze(domain !== void 0 ? { ...base, domain } : base);
   }
   /**
-   * Incrementally extend columns with new rows (S9-T09 subset): no full
+   * Incrementally extend columns with new rows: no full
    * rebuild, no full re-argsort — the pre-sorted old permutation merges with
    * the sorted new block. Brushes stay by key and are applied to the NEW slots
    * only; the returned delta covers only new slots. Keeps selectionRevision;
@@ -5708,16 +5751,16 @@ var TypedColumnCrossfilter = class {
     }
   }
   /**
-   * F10-02 inline maintenance of LIVE filtered layers, dispatched from the
+   * inline maintenance of LIVE filtered layers, dispatched from the
    * one place that knows the failCount transition. `boundary` is the
    * other-failures picture at the interesting side of the flip (after for
    * shown, before for hidden):
-   *  - 0 → the slot crossed the FULLY-VISIBLE boundary: every other live
-   *    layer counts it (own layers ignore the own-dim brush, so the brushed
-   *    dim's layer is provably unchanged by its own flip);
-   *  - 1 → exactly one OTHER dim still fails the slot: only that dim's
-   *    what-if-I-cleared-mine layer flips;
-   *  - ≥2 → no layer can change.
+   * - 0 → the slot crossed the FULLY-VISIBLE boundary: every other live
+   * layer counts it (own layers ignore the own-dim brush, so the brushed
+   * dim's layer is provably unchanged by its own flip);
+   * - 1 → exactly one OTHER dim still fails the slot: only that dim's
+   * what-if-I-cleared-mine layer flips;
+   * - ≥2 → no layer can change.
    * External-mask-excluded and hygiene-invalid slots contribute nothing
    * either way and are skipped.
    */
@@ -6022,7 +6065,7 @@ function assertSerializable(value, slice) {
     switch (typeof v) {
       case "function":
         throw new TypeError(
-          `history command for slice "${slice}" carries a function at ${path} \u2014 commands are value diffs, not closures (\xA716.14)`
+          `history command for slice "${slice}" carries a function at ${path} \u2014 commands are value diffs, not closures`
         );
       case "symbol":
       case "bigint":
@@ -6037,7 +6080,7 @@ function assertSerializable(value, slice) {
     if (v === null) return;
     if (v instanceof Map || v instanceof Set) {
       throw new TypeError(
-        `history command for slice "${slice}" carries a ${v instanceof Map ? "Map" : "Set"} at ${path} \u2014 convert to arrays/objects before recording (\xA716.14)`
+        `history command for slice "${slice}" carries a ${v instanceof Map ? "Map" : "Set"} at ${path} \u2014 convert to arrays/objects before recording`
       );
     }
     if (seen.has(v)) {
@@ -6059,7 +6102,7 @@ var HistoryKernel = class {
   debug;
   undoStack = [];
   redoStack = [];
-  /** Nested begin() joins the outer transaction (depth-counted). */
+  /** Nested begin joins the outer transaction (depth-counted). */
   txDepth = 0;
   txCommands = [];
   txLabel;
@@ -6125,7 +6168,7 @@ var HistoryKernel = class {
     }
     this.pushEntry({ label: void 0, commands: [command] }, null);
   }
-  /** Close a transaction; the outermost end() pushes one stack entry. */
+  /** Close a transaction; the outermost end pushes one stack entry. */
   end() {
     if (!this.enabled) return;
     if (this.txDepth === 0) throw new Error("HistoryKernel.end() without a matching begin()");
@@ -6395,7 +6438,7 @@ function createGraphInstance(opts) {
     if (accepted === null) {
       throw new OrbitOperationError(
         { code: "aborted", cause: "no accepted base" },
-        "expansion requires an accepted base dataset (\xA79.2)"
+        "expansion requires an accepted base dataset"
       );
     }
     return { accepted, adjacency: acceptedAdjacencyOf() };
@@ -6628,7 +6671,7 @@ function createGraphInstance(opts) {
               severity: "error",
               count: 1,
               sampleIds: [],
-              message: "columnar snapshot mutated while worker acceptance was pending \u2014 rejected whole (\xA75: source coordinates are immutable; publish a new sourceRevision)"
+              message: "columnar snapshot mutated while worker acceptance was pending \u2014 rejected whole (source coordinates are immutable; publish a new sourceRevision)"
             }
           ];
           publish({ diagnostics: composeDiagnostics() });
@@ -6662,7 +6705,7 @@ function createGraphInstance(opts) {
               severity: "error",
               count: 1,
               sampleIds: [],
-              message: "columnar snapshot mutated while worker acceptance was pending \u2014 rejected whole (\xA75: source coordinates are immutable; publish a new sourceRevision)"
+              message: "columnar snapshot mutated while worker acceptance was pending \u2014 rejected whole (source coordinates are immutable; publish a new sourceRevision)"
             }
           ];
           publish({ diagnostics: composeDiagnostics() });
@@ -6754,7 +6797,7 @@ function createGraphInstance(opts) {
       if (event.engaged && !capLabelsNudged) {
         capLabelsNudged = true;
         console.warn(
-          "orbit: cap-dom-labels engaged \u2014 DOM labels are hard-capped at the label budget above limits.domLabelNodes visible nodes (\xA717). A GPU label lane (labelStrategy 'sdf') is the planned scale path (S13-T05, deferred)."
+          "orbit: cap-dom-labels engaged \u2014 DOM labels are hard-capped at the label budget above limits.domLabelNodes visible nodes. A GPU label lane (labelStrategy 'sdf') is the planned scale path."
         );
       }
       scheduleViewportRerank();
@@ -7407,7 +7450,7 @@ function createGraphInstance(opts) {
           severity: "warning",
           count: errorCount,
           sampleIds: samples,
-          message: `filter predicate threw for ${errorCount} item(s); failing open \u2014 throwing predicates never hide data (\xA79.1)`
+          message: `filter predicate threw for ${errorCount} item(s); failing open \u2014 throwing predicates never hide data`
         }
       ];
     } else {
@@ -7918,7 +7961,7 @@ function createGraphInstance(opts) {
   }
   function requireCrossfilterEngine() {
     if (crossfilterEngine === null) {
-      throw new Error("crossfilter session is not available (set the crossfilter prop first, \xA716.6)");
+      throw new Error("crossfilter session is not available; set the crossfilter prop first");
     }
     return crossfilterEngine;
   }
@@ -7969,13 +8012,13 @@ function createGraphInstance(opts) {
     const eng = crossfilterEngine;
     if (eng === null) {
       throw new TypeError(
-        "playTimeline: the crossfilter prop must configure dimensions first (\xA716.6)"
+        "playTimeline: the crossfilter prop must configure dimensions first"
       );
     }
     const summary = eng.summarize(key);
     if (summary.kind === "categorical" || summary.domain === void 0) {
       throw new TypeError(
-        `playTimeline: dimension "${key}" must be numeric/temporal with a non-empty domain (\xA716.6)`
+        `playTimeline: dimension "${key}" must be numeric/temporal with a non-empty domain`
       );
     }
     const { min, max } = summary.domain;
@@ -7997,7 +8040,7 @@ function createGraphInstance(opts) {
       );
     }
     if (mode !== "sliding" && mode !== "cumulative") {
-      throw new TypeError(`playTimeline: unsupported mode "${String(mode)}" (\xA716.6)`);
+      throw new TypeError(`playTimeline: unsupported mode "${String(mode)}"`);
     }
     stopTimelineTimer();
     timelineSessionSeq += 1;
@@ -8193,7 +8236,7 @@ function createGraphInstance(opts) {
             simRestarted = true;
           }
         }
-        eng.commit(commit);
+        commitToEngine(eng, commit);
         revisions.appliedRender = eng.appliedRevision();
         const facade = session !== null ? session.edgePicking : null;
         if (facade !== null) {
@@ -8470,7 +8513,7 @@ function createGraphInstance(opts) {
           severity: "warning",
           count: overload,
           sampleIds: [],
-          message: `showLabelsFor exceeds tracked-label capacity; ${overload} forced label(s) omitted (\xA714)`
+          message: `showLabelsFor exceeds tracked-label capacity; ${overload} forced label(s) omitted`
         }
       ];
       diagsChanged = true;
@@ -8746,7 +8789,7 @@ function createGraphInstance(opts) {
           severity: "warning",
           count: state.streak,
           sampleIds: [],
-          message: `${channel} reprojected on ${state.streak} consecutive commits with identical sampled outputs \u2014 likely an inline lambda prop; hoist or memoize it (\xA78)`
+          message: `${channel} reprojected on ${state.streak} consecutive commits with identical sampled outputs \u2014 likely an inline lambda prop; hoist or memoize it`
         }
       ];
     }
@@ -9148,9 +9191,9 @@ function createGraphInstance(opts) {
       nodeIds: orderByAcceptedBase(full.nodeIds, nodeIndexBase()),
       edgeIds: orderByAcceptedBase(full.edgeIds, edgeIndexById),
       // Group namespace: the raw full-state form stays TOLERANT (deduped,
-      // not validated — pinned pre-S12 behavior); ids that stop naming a
+      // not validated — pinned legacy behavior); ids that stop naming a
       // resolved group prune through the ownership path whenever the groups
-      // RESOLUTION changes (§16.2/§16.3). selectGroups() is the validating
+      // RESOLUTION changes. selectGroups is the validating
       // mutator.
       groupIds: dedupeFirstOccurrence(full.groupIds)
     });
@@ -9429,7 +9472,7 @@ function createGraphInstance(opts) {
         if (DEV) {
           rejectGroupOp(
             "warning",
-            "groupNodes ignored: membership is derived and read-only under groupBy (\xA716.3) \u2014 change the groupBy accessor or remove it",
+            "groupNodes ignored: membership is derived and read-only under groupBy \u2014 change the groupBy accessor or remove it",
             spec.id
           );
         }
@@ -9452,7 +9495,7 @@ function createGraphInstance(opts) {
         if (DEV) {
           rejectGroupOp(
             "warning",
-            "ungroup ignored: membership is derived and read-only under groupBy (\xA716.3) \u2014 change the groupBy accessor or remove it",
+            "ungroup ignored: membership is derived and read-only under groupBy \u2014 change the groupBy accessor or remove it",
             groupId
           );
         }
@@ -9477,7 +9520,7 @@ function createGraphInstance(opts) {
           if (DEV) {
             rejectGroupOp(
               "warning",
-              "setGroupCollapsed ignored: groups and groupBy are both configured (\xA716.3 config error) \u2014 remove one",
+              "setGroupCollapsed ignored: groups and groupBy are both configured \u2014 remove one",
               groupId
             );
           }
@@ -9488,7 +9531,7 @@ function createGraphInstance(opts) {
           if (DEV) {
             rejectGroupOp(
               "warning",
-              `setGroupCollapsed ignored: no derived group '${groupId}' in the current derivation (\xA716.3)`,
+              `setGroupCollapsed ignored: no derived group '${groupId}' in the current derivation`,
               groupId
             );
           }
@@ -9702,7 +9745,7 @@ function createGraphInstance(opts) {
   function invalidateReplaceSessions(owner) {
     for (const s of [...openSessions]) {
       if (s === owner || s.purpose !== "replace") continue;
-      abortSessionInternal(s, "stale-base: the model changed outside the session (\xA77.5)", false);
+      abortSessionInternal(s, "stale-base: the model changed outside the session", false);
     }
   }
   function abortAllSessions(except, cause) {
@@ -9771,7 +9814,7 @@ function createGraphInstance(opts) {
     if (expansionHandles.size === 0 && expansionLedger.size === 0) return;
     const err = new OrbitOperationError(
       { code: "aborted", cause: "dataset-changed" },
-      "expansion aborted: the datasetKey changed (\xA75/\xA79.2)"
+      "expansion aborted: the datasetKey changed"
     );
     for (const [requestId, handle] of expansionHandles) {
       handle.abort(err);
@@ -9792,7 +9835,7 @@ function createGraphInstance(opts) {
       scopeExtraIds.clear();
       expansionOverlays.clear();
       abortExpansionsForDatasetSwap();
-      abortSearchFlight("dataset-changed", "search aborted: the datasetKey changed (\xA75/\xA716.5)");
+      abortSearchFlight("dataset-changed", "search aborted: the datasetKey changed");
       resetMaskState();
       historyKernel.clear();
       stopTimelineTimer();
@@ -9954,7 +9997,7 @@ function createGraphInstance(opts) {
     const labelRerank = recomputeCandidates();
     const patch = {
       revisions,
-      // Counts are ACCEPTED-MODEL counts; the scene may be scoped (§9.2).
+      // Counts are ACCEPTED-MODEL counts; the scene may be scoped.
       nodeCount: p.merged.nodes.length,
       edgeCount: p.merged.edges.length,
       diagnostics: composeDiagnostics()
@@ -10014,7 +10057,7 @@ function createGraphInstance(opts) {
       cancelFlushTimer(rec);
       return rejectOperation(
         { code: "overlay-id-conflict", overlayId: id },
-        `overlayId '${id}' is already reserved by an open or committed overlay for this dataset (\xA77.5)`
+        `overlayId '${id}' is already reserved by an open or committed overlay for this dataset`
       );
     }
     reservedOverlayIds.set(id, rec);
@@ -10086,14 +10129,14 @@ function createGraphInstance(opts) {
     if (rec.atomic && queuedBytes > rec.maxPendingBytes) {
       return rejectOperation(
         { code: "queue-overflow", queuedBytes, limit: rec.maxPendingBytes },
-        `append(): atomic session would queue ${queuedBytes} bytes, exceeding its non-drainable budget of ${rec.maxPendingBytes}; the append was rejected and the session remains open (\xA77.5)`
+        `append(): atomic session would queue ${queuedBytes} bytes, exceeding its non-drainable budget of ${rec.maxPendingBytes}; the append was rejected and the session remains open`
       );
     }
     const overflowLimit = rec.maxPendingBytes * INGEST_OVERFLOW_FACTOR;
     if (bytes > overflowLimit) {
       return rejectOperation(
         { code: "queue-overflow", queuedBytes: bytes, limit: overflowLimit },
-        `append(): batch of ${bytes} bytes exceeds the absolute cap of ${overflowLimit} (\xA77.5)`
+        `append(): batch of ${bytes} bytes exceeds the absolute cap of ${overflowLimit}`
       );
     }
     const counts = stageBatch(
@@ -10151,7 +10194,7 @@ function createGraphInstance(opts) {
       };
     }
     const datasetChanged = baseAccepted !== null && baseAccepted.datasetKey !== rec.datasetKey;
-    abortAllSessions(rec, "replaced: a replace session committed (\xA77.5)");
+    abortAllSessions(rec, "replaced: a replace session committed");
     const overlaysCleared = clearOverlayState();
     const newBase = baseFromContribution(rec.datasetKey, sourceRevision, c, []);
     const commitDiags = sessionCommitDiagnostics(rec.tallies, newBase.pendingEdges.length);
@@ -10249,7 +10292,7 @@ function createGraphInstance(opts) {
           code: "resource-limit",
           detail: { reason: err instanceof Error ? err.message : String(err) }
         },
-        `commit() failed; session rolled back (\xA77.5)`
+        `commit() failed; session rolled back`
       );
     }
     rec.state = "committed";
@@ -10273,16 +10316,16 @@ function createGraphInstance(opts) {
     }
     if (purpose === "replace") {
       if (opts2.sourceRevision === void 0) {
-        throw new TypeError("beginIngest: purpose:'replace' requires sourceRevision (\xA77.5)");
+        throw new TypeError("beginIngest: purpose:'replace' requires sourceRevision");
       }
       if (opts2.atomic === false) {
         throw new TypeError(
-          "beginIngest: replace sessions are always atomic \u2014 progressive replace frames would expose rows before their sourceRevision existed (\xA77.5)"
+          "beginIngest: replace sessions are always atomic \u2014 progressive replace frames would expose rows before their sourceRevision existed"
         );
       }
       if (baseSource === "declarative") {
         throw new TypeError(
-          "beginIngest: purpose:'replace' is unavailable while a declarative data source is active; keep applying snapshots via applyHostUpdate, or use an overlay session (\xA77.5/T16)"
+          "beginIngest: purpose:'replace' is unavailable while a declarative data source is active; keep applying snapshots via applyHostUpdate, or use an overlay session"
         );
       }
     }
@@ -10297,7 +10340,7 @@ function createGraphInstance(opts) {
       if (baseAccepted === null || baseAccepted.datasetKey !== opts2.datasetKey) {
         throw new OrbitOperationError(
           { code: "stale-revision", expected: currentModel, actual: opts2.baseModelRevision },
-          baseAccepted === null ? "beginIngest: overlay sessions require an accepted base dataset (\xA77.5 lineage)" : `beginIngest: overlay sessions must name the current datasetKey '${baseAccepted.datasetKey}', got '${opts2.datasetKey}' (\xA77.5 lineage)`
+          baseAccepted === null ? "beginIngest: overlay sessions require an accepted base dataset" : `beginIngest: overlay sessions must name the current datasetKey '${baseAccepted.datasetKey}', got '${opts2.datasetKey}'`
         );
       }
     }
@@ -10306,7 +10349,7 @@ function createGraphInstance(opts) {
       purpose,
       datasetKey: opts2.datasetKey,
       sourceRevision: opts2.sourceRevision ?? null,
-      // replace is always atomic; overlays default atomic:true (§7.5).
+      // replace is always atomic; overlays default atomic:true.
       atomic: purpose === "replace" ? true : opts2.atomic ?? true,
       overlayId,
       maxFlushLatencyMs: opts2.maxFlushLatencyMs ?? INGEST_MAX_FLUSH_LATENCY_MS_DEFAULT,
@@ -10419,11 +10462,11 @@ function createGraphInstance(opts) {
     pushServiceDiagnostic(
       "service-aborted",
       "info",
-      `expansion result for '${id}' discarded before admission: ${why} (\xA79.2)`
+      `expansion result for '${id}' discarded before admission: ${why}`
     );
     throw new OrbitOperationError(
       { code: "aborted", cause: why },
-      `expandNode('${id}') result discarded: ${why} (\xA79.2)`
+      `expandNode('${id}') result discarded: ${why}`
     );
   }
   async function mergeExpansionSession(id, ctx, at, batches, provenance) {
@@ -10644,14 +10687,14 @@ function createGraphInstance(opts) {
       expansionPromises.delete(id);
       const err = new OrbitOperationError(
         { code: "aborted", cause: "collapsed" },
-        `expandNode('${id}') aborted by retractExpansion() (\xA79.2/\xA716.3)`
+        `expandNode('${id}') aborted by retractExpansion()`
       );
       expansionHandles.get(requestId)?.abort(err);
       expansionRejectors.get(requestId)?.(err);
       pushServiceDiagnostic(
         "service-aborted",
         "info",
-        `pending expansion of '${id}' aborted by retractExpansion() (\xA79.2)`
+        `pending expansion of '${id}' aborted by retractExpansion()`
       );
       publish({ pendingExpansions: expansionLedger.ids() });
     }
@@ -10858,14 +10901,14 @@ function createGraphInstance(opts) {
     if (ctx.signal.aborted) {
       throw new OrbitOperationError(
         { code: "aborted", cause: "superseded" },
-        `search('${query}') was superseded before admission (\xA716.5)`
+        `search('${query}') was superseded before admission`
       );
     }
     const denial = acceptanceQueue.admit(() => searchAdmissible(ctx, at));
     if (denial !== null) {
       throw new OrbitOperationError(
         { code: "aborted", cause: denial },
-        `search('${query}') result discarded: ${denial} (\xA79.2/\xA716.5)`
+        `search('${query}') result discarded: ${denial}`
       );
     }
     if (accepted === null) return raw;
@@ -10896,7 +10939,7 @@ function createGraphInstance(opts) {
     const at = revisionSnapshot();
     const key = serviceCacheKey({
       serviceId: "search",
-      // `fields` is defensive insurance (F12-03): searchIndex is
+      // `fields` is defensive insurance: searchIndex is
       // construction-only (D7) so it cannot legitimately change, but keying
       // it here guarantees a cached result can never outlive the field
       // configuration it was computed under.
@@ -10910,7 +10953,7 @@ function createGraphInstance(opts) {
       searchFlight = null;
       const err = new OrbitOperationError(
         { code: "aborted", cause: "superseded" },
-        `search('${query}') superseded the older in-flight query (\xA716.5)`
+        `search('${query}') superseded the older in-flight query`
       );
       flight.handle.abort(err);
       flight.reject(err);
@@ -10976,7 +11019,7 @@ function createGraphInstance(opts) {
       searchFlight = null;
       const err = new OrbitOperationError(
         { code: "aborted", cause: "cleared" },
-        "search cleared while in flight (\xA716.5)"
+        "search cleared while in flight"
       );
       flight.handle.abort(err);
       flight.reject(err);
@@ -11043,7 +11086,7 @@ function createGraphInstance(opts) {
     if (denial !== null) {
       throw new OrbitOperationError(
         { code: "aborted", cause: "stale" },
-        `findPath('${sourceId}' \u2192 '${targetId}') discarded: ${denial} (\xA79.2)`
+        `findPath('${sourceId}' \u2192 '${targetId}') discarded: ${denial}`
       );
     }
     if (token !== pathSeq || result === null) return result;
@@ -11135,7 +11178,7 @@ function createGraphInstance(opts) {
         findings.push(`mode: unknown filter mode '${String(spec.mode)}'`);
       }
       if (findings.length > 0) {
-        throw new TypeError(`applyHostUpdate: invalid filter (\xA79.1): ${findings.join("; ")}`);
+        throw new TypeError(`applyHostUpdate: invalid filter: ${findings.join("; ")}`);
       }
     }
     const prev = store.getState();
@@ -11175,7 +11218,7 @@ function createGraphInstance(opts) {
               severity: "error",
               count: issues.length,
               sampleIds: issues.slice(0, DIAGNOSTIC_SAMPLE_CAP).map((i) => i.where),
-              message: `columnar snapshot rejected whole (\xA75.1): ${issues[0].where} \u2014 ${issues[0].detail}`
+              message: `columnar snapshot rejected whole: ${issues[0].where} \u2014 ${issues[0].detail}`
             }
           ];
           columnarRejected = true;
@@ -11196,14 +11239,14 @@ function createGraphInstance(opts) {
       const isReplay = baseAccepted !== null && baseAccepted.datasetKey === data.datasetKey && baseAccepted.sourceRevision === data.sourceRevision;
       if (!isReplay) {
         const nextAccepted = preAccepted ?? validateSnapshot(data);
-        abortAllSessions(null, "replaced: a declarative snapshot was applied (\xA77.5)");
+        abortAllSessions(null, "replaced: a declarative snapshot was applied");
         overlayIdsCleared = clearOverlayState();
         datasetKeyChanged = baseAccepted !== null && baseAccepted.datasetKey !== data.datasetKey;
         if (datasetKeyChanged) {
           reconciler = new Reconciler();
           engineDiags = [];
           abortExpansionsForDatasetSwap();
-          abortSearchFlight("dataset-changed", "search aborted: the datasetKey changed (\xA75/\xA716.5)");
+          abortSearchFlight("dataset-changed", "search aborted: the datasetKey changed");
           resetMaskState();
           historyKernel.clear();
           stopTimelineTimer();
@@ -11318,7 +11361,7 @@ function createGraphInstance(opts) {
             severity: "error",
             count: 1,
             sampleIds: [],
-            message: "groups and groupBy are mutually exclusive (\xA716.3 R-16.3-15): NEITHER applies until the host removes one"
+            message: "groups and groupBy are mutually exclusive: NEITHER applies until the host removes one"
           }
         ];
         groupsDiagsChanged = true;
@@ -11356,7 +11399,7 @@ function createGraphInstance(opts) {
               severity: "warning",
               count: 1,
               sampleIds: [],
-              message: "parallelEdgeGrouping is inoperative: the accepted edge list has no same-endpoint-pair parallels (ids synthesized from (type,source,target)-style dedupe already collapse them) \u2014 the toggle changed nothing (\xA716.3 R-16.3-24)"
+              message: "parallelEdgeGrouping is inoperative: the accepted edge list has no same-endpoint-pair parallels (ids synthesized from (type,source,target)-style dedupe already collapse them) \u2014 the toggle changed nothing"
             }
           ];
           parallelRejected = true;
@@ -11436,7 +11479,7 @@ function createGraphInstance(opts) {
             severity: "warning",
             count: update.metrics.length,
             sampleIds: update.metrics.slice(0, DIAGNOSTIC_SAMPLE_CAP).map((c) => c.metric),
-            message: "metric columns discarded: no accepted model to join against (\xA712)"
+            message: "metric columns discarded: no accepted model to join against"
           }
         ];
       } else {
@@ -11445,7 +11488,7 @@ function createGraphInstance(opts) {
           count: accepted.nodes.length,
           // I1: columns must be stamped with the revision current at ISSUE
           // time — never the post-update revision (that made the gate
-          // self-satisfying, F11-01).
+          // self-satisfying).
           modelRevision: issuedModelSeq
         });
         metricDiags = res.diagnostics;
@@ -11582,7 +11625,7 @@ function createGraphInstance(opts) {
             severity: "warning",
             count: 1,
             sampleIds: [],
-            message: "searchIndex is construction-only (\xA716.5/D7): pass it to createGraphInstance options (or key-remount <Graph>) \u2014 this update's searchIndex was ignored"
+            message: "searchIndex is construction-only: pass it to createGraphInstance options (or key-remount <Graph>) \u2014 this update's searchIndex was ignored"
           }
         ];
         searchIndexRejected = true;
@@ -12019,9 +12062,9 @@ function createGraphInstance(opts) {
         applyEmphasis(s.engine, node === null ? null : index);
         emit("nodeHover", { node });
       },
-      // §13 native-route edge events (§7.4 mapping). Host onLink* events are
+      // native-route edge events. Host onLink* events are
       // honored regardless of the committed route — an adapter that surfaces
-      // them despite declaring linkPicking:false is a harmless pass-through —
+      // them despite declaring linkPicking:false is a harmless pass-through
       // but only the 'native' route RELIES on them; the fallback route feeds
       // the same typed events through the pointer samplers.
       onLinkClick(linkIndex) {
@@ -12058,7 +12101,7 @@ function createGraphInstance(opts) {
         const prevented = emit("nodeDragEnd", { node, x, y });
         if (!prevented) writePin(node.id, [x, y]);
       },
-      // §14/§15: right-click / long-press → typed 'contextMenu' event. The
+      // Right-click or long-press → typed 'contextMenu' event. The
       // core adds NO built-in follow-up — components own the menu.
       onContextMenu(index, screen) {
         if (!active()) return;
@@ -12072,7 +12115,7 @@ function createGraphInstance(opts) {
         emit("contextMenu", { target: { kind: "node", node }, screen: screenPt });
       },
       /**
-       * §13/§17 overlay scheduler tick (adapter activity clock). Per tick:
+       * Overlay scheduler tick (adapter activity clock). Per tick:
        * (1) sim-hot degradation — while the simulation runs, ONE getPositions
        * readback refreshes the CPU cache at a capped >=500ms cadence (M0:
        * tracked readback stalls ~18ms, so the lane NEVER reads back per
@@ -12299,8 +12342,8 @@ function createGraphInstance(opts) {
       route,
       screenToSpace: (p) => eng.screenToSpace?.(p) ?? null,
       medianLinkWidthPx: () => medianLinkWidthPx(lastLinkWidths),
-      // S9-T18: the facade's per-candidate visibility mask reads the LIVE
-      // §9.1 mask — no re-arm needed on mask changes (§13 grid invariance).
+      // the facade's per-candidate visibility mask reads the LIVE
+      // mask — no re-arm needed on mask changes.
       linkVisible: (linkIndex) => maskEdgeVisibleAt(linkIndex)
     });
     const restartAlpha = layout === "force" ? 1 : null;
@@ -12405,7 +12448,7 @@ function createGraphInstance(opts) {
         if (g.requestAnimationFrame === wrapper) g.requestAnimationFrame = native;
         if (registrations > 0 && !destroyed) {
           console.warn(
-            `orbit: ${registrations} requestAnimationFrame registration(s) observed over 500ms while this instance is quiescent (\xA717/S13-T06 one-frame-loop). If no app-owned animation is running, a second frame loop is leaking.`
+            `orbit: ${registrations} requestAnimationFrame registration(s) observed over 500ms while this instance is quiescent. If no app-owned animation is running, a second frame loop is leaking.`
           );
         }
       }, 500);
@@ -12480,7 +12523,7 @@ function createGraphInstance(opts) {
   function warnViewStateDrop(channel, why) {
     if (!DEV || viewStateDropWarned.has(channel)) return;
     viewStateDropWarned.add(channel);
-    console.warn(`orbit: getViewState omitted ${channel} \u2014 ${why} (\xA716.14)`);
+    console.warn(`orbit: getViewState omitted ${channel} \u2014 ${why}`);
   }
   function serializableScaleOf(channel, value) {
     if (value === void 0) return void 0;
@@ -12489,33 +12532,34 @@ function createGraphInstance(opts) {
       return void 0;
     }
     if (!isScaleValue(value)) return void 0;
-    if (value.kind === "sequential") {
+    const scale = value;
+    if (scale.kind === "sequential") {
       return {
         kind: "sequential",
-        metric: value.metric,
-        range: value.range,
+        metric: scale.metric,
+        range: scale.range,
         // The numeric-array domain form is data; a DomainPolicy is app
         // behavior config and stays with the app.
-        ...Array.isArray(value.domain) ? { domain: value.domain } : {}
+        ...Array.isArray(scale.domain) ? { domain: scale.domain } : {}
       };
     }
-    if (value.kind === "diverging") {
+    if (scale.kind === "diverging") {
       return {
         kind: "diverging",
-        metric: value.metric,
-        range: value.range,
-        mid: value.mid
+        metric: scale.metric,
+        range: scale.range,
+        mid: scale.mid
       };
     }
-    if (typeof value.by !== "string") {
+    if (typeof scale.by !== "string") {
       warnViewStateDrop(channel, "a function-`by` categorical scale does not serialize");
       return void 0;
     }
     return {
       kind: "categorical",
-      by: value.by,
-      ...value.palette !== void 0 ? { palette: value.palette } : {},
-      ...value.domain !== void 0 ? { domain: value.domain } : {}
+      by: scale.by,
+      ...scale.palette !== void 0 ? { palette: scale.palette } : {},
+      ...scale.domain !== void 0 ? { domain: scale.domain } : {}
     };
   }
   function serializableThemeOf() {
@@ -12597,7 +12641,7 @@ function createGraphInstance(opts) {
       if (visible.length > limit) {
         throw new OrbitOperationError(
           { code: "export-materialization-too-large", rowCount: visible.length, limit },
-          `includePositions over ${limit} nodes \u2014 persist the layout through the export lane and reference it from dataRef (\xA716.14)`
+          `includePositions over ${limit} nodes \u2014 persist the layout through the export lane and reference it from dataRef`
         );
       }
       const pos = eng.getPositions();
@@ -12697,7 +12741,7 @@ function createGraphInstance(opts) {
             severity: "error",
             count: verdict.problems.length,
             sampleIds: [],
-            message: `setViewState rejected (${verdict.code}): ${verdict.problems.slice(0, 3).join("; ")} \u2014 nothing was applied (\xA716.14)`
+            message: `setViewState rejected (${verdict.code}): ${verdict.problems.slice(0, 3).join("; ")} \u2014 nothing was applied`
           }
         ];
         pendingDiagnosticsRefresh = true;
@@ -12835,7 +12879,7 @@ function createGraphInstance(opts) {
                   ...prevState.revisions,
                   render: prevState.revisions.render + 1
                 };
-                eng.commit({
+                commitToEngine(eng, {
                   revision: nextRevisions.render,
                   structure: {
                     pointCount: scene.count,
@@ -12843,6 +12887,7 @@ function createGraphInstance(opts) {
                     links: scene.links
                   }
                 });
+                nextRevisions.appliedRender = eng.appliedRevision();
                 eng.pause();
                 const patch = { revisions: nextRevisions };
                 if (prevState.simulationRunning) patch.simulationRunning = false;
@@ -12920,7 +12965,7 @@ function createGraphInstance(opts) {
       if (eng2 === null || eng2.captureScreenshot === void 0) {
         throw new OrbitOperationError(
           { code: "aborted", cause: "no screenshot capability" },
-          'exportImage("png") requires an engine with screenshot capture (\xA716.14)'
+          'exportImage("png") requires an engine with screenshot capture'
         );
       }
       const blob = await eng2.captureScreenshot();
@@ -12961,7 +13006,7 @@ function createGraphInstance(opts) {
     if (elementCount > limit && opts2?.fallback !== "raster-hybrid") {
       throw new OrbitOperationError(
         { code: "export-too-large", elementCount, limit },
-        `SVG export of ${elementCount} elements exceeds ${limit} \u2014 filter/isolate first, or pass { fallback: 'raster-hybrid' } (\xA716.14)`
+        `SVG export of ${elementCount} elements exceeds ${limit} \u2014 filter/isolate first, or pass { fallback: 'raster-hybrid' }`
       );
     }
     let minX = Infinity;
@@ -13092,7 +13137,7 @@ function createGraphInstance(opts) {
     if (rowCount > limit) {
       throw new OrbitOperationError(
         { code: "export-materialization-too-large", rowCount, limit },
-        `exportData would materialize ${rowCount} rows (limit ${limit}) \u2014 use exportDataStream (\xA716.14)`
+        `exportData would materialize ${rowCount} rows (limit ${limit}) \u2014 use exportDataStream`
       );
     }
     if (scope === "accepted") return { nodes: pin.accepted.nodes, edges: pin.accepted.edges };
@@ -13135,7 +13180,7 @@ function createGraphInstance(opts) {
     if (bound > limit) {
       throw new OrbitOperationError(
         { code: "export-materialization-too-large", rowCount: bound, limit },
-        `exportLayout would materialize ${bound} rows (limit ${limit}) \u2014 use exportLayoutStream (\xA716.14)`
+        `exportLayout would materialize ${bound} rows (limit ${limit}) \u2014 use exportLayoutStream`
       );
     }
     const out = /* @__PURE__ */ new Map();
@@ -13214,9 +13259,8 @@ function createGraphInstance(opts) {
       visibleNodeCount: st.visible.nodes,
       visibleEdgeCount: st.visible.edges,
       estimatedCpuBytes: estimateCpuBytes(),
-      // The acceptance queue is synchronous (depth is 0 outside a job, and a
-      // reader inside a job observes 1); async ingestion depth arrives with
-      // the worker lane (PR-E).
+      // The acceptance queue is synchronous: depth is 0 outside a job, and a
+      // reader inside a job observes 1.
       queueDepth: acceptanceQueue.active ? 1 : 0,
       modelRevision: st.revisions.model,
       scopeRevision: st.revisions.scope,
@@ -13440,7 +13484,7 @@ var OverviewController = class {
   getScene;
   getVisible;
   size;
-  /** Transform of the LAST rasterization; null until rasterize() succeeds. */
+  /** Transform of the LAST rasterization; null until rasterize succeeds. */
   frame = null;
   // --- throttle state (latched by shouldRefresh when it answers true) ---
   lastRefreshMs = null;
@@ -13455,9 +13499,9 @@ var OverviewController = class {
    * when it returns true, so each `true` accounts for exactly one refresh:
    *
    * - hot (`simulationRunning`): time-gated only (≤ 2 Hz) — the epoch is
-   *   ignored because positions change continuously without epoch advances;
+   * ignored because positions change continuously without epoch advances;
    * - idle: refresh only when the epoch ADVANCED since the last refresh,
-   *   time-gated at ≤ 1 Hz;
+   * time-gated at ≤ 1 Hz;
    * - idle + unchanged epoch: always false — zero work, forever.
    */
   shouldRefresh(nowMs2, simulationRunning, epoch) {
@@ -13475,7 +13519,7 @@ var OverviewController = class {
   /**
    * Rasterizes the current scene into a fresh `size²` RGBA dot field: 1 px
    * white dots whose alpha ACCUMULATES on overlap (heatmap-ish density),
-   * dimmed for mask-hidden points; NaN pairs (§7.3 tombstones) are skipped.
+   * dimmed for mask-hidden points; NaN pairs are skipped.
    * World bounds map into the thumbnail with a 5 % edge padding at a UNIFORM
    * scale (aspect preserved, centered on the short axis) and a downward pixel
    * y (see module header). Returns null when there is no scene or no point.