@rahdar/plugin-sdk 2026.10.51 → 2026.10.57

package/types/kernel/approvals/columns.d.ts

@@ -3,7 +3,7 @@ import { type HeldDisplayRow, type HeldOperationSummary } from './api.ts';
 /** A value as the change table shows it: a secret says it is hidden, and an absent value says which absence. */
 export declare function valueText(value: string | null | undefined, absent: string): string;
 /**
- * Whether the rows only name what the request acts on (a queue, a user) rather than change values: every row
+ * Whether the rows only name what the request acts on (a subscription, a user) rather than change values: every row
  * lacks a current value. Those read as a list of facts; rows with a current value read as a change table.
  */
 export declare const namesTargets: (rows: readonly HeldDisplayRow[]) => boolean;

package/types/kernel/auth/api.d.ts

@@ -19,7 +19,7 @@ export declare const keys: {
 export declare const accessKeys: {
     all: readonly ["access"];
     of: (clusterId?: string) => readonly ["access", string];
-    resource: (clusterId: string, kind: string, name: string) => readonly ["access", "resource", string, string, string];
+    resource: (clusterId: string, type: string, name: string) => readonly ["access", "resource", string, string, string];
 };
 /**
  * What the signed-in user holds, globally or on one cluster, as the server's resolver decides it: through role
@@ -53,8 +53,8 @@ export declare function accessQuery(clusterId?: string): import("@tanstack/query
     teams: components["schemas"]["TeamMembership"][];
     createPatterns: components["schemas"]["CreatePatterns"];
 }, Error>;
-/** What the signed-in user may do with one queue or address: the actions they hold on it, as the server decides. */
-export declare function resourceAccessQuery(clusterId: string, kind: 'QUEUE' | 'ADDRESS', name: string): import("@tanstack/query-core").OmitKeyof<import("@tanstack/react-query").UseQueryOptions<{
+/** What the signed-in user may do with one subscription or destination: the actions they hold on it, as the server decides. */
+export declare function resourceAccessQuery(clusterId: string, type: 'SUBSCRIPTION' | 'DESTINATION', name: string): import("@tanstack/query-core").OmitKeyof<import("@tanstack/react-query").UseQueryOptions<{
     actions: string[];
 }, Error, {
     actions: string[];

package/types/kernel/auth/useCan.d.ts

@@ -1,10 +1,10 @@
 /**
- * A queue or address of a cluster, for a check on one resource. Pass the `allowedActions` a row already
+ * A subscription or destination of a cluster, for a check on one resource. Pass the `allowedActions` a row already
  * carries from the server to answer from it with no request.
  */
 export interface ResourceWhere {
     clusterId: string;
-    kind: 'queue' | 'address';
+    type: 'subscription' | 'destination';
     name: string;
     allowedActions?: AllowedActions;
 }
@@ -17,16 +17,16 @@ export type AllowedActions = readonly string[];
  * counted as the server counts them.
  *
  * <p>`can(permission)` is about the whole installation. `can(permission, clusterId)` is about one cluster, and
- * `can(permission, { clusterId, kind, name })` about one queue or address, with a team's or share's rights counted.
+ * `can(permission, { clusterId, type, name })` about one subscription or destination, with a team's or share's rights counted.
  * Each is fetched the first time it is asked. Until it arrives the control is offered, as it is while grants load:
  * blocking on an answer not yet known would lock out someone the server lets in. For a resource permission the
- * cluster answer counts grants only; what a team or share gives on some queue or address is in the summary's
- * `anywhere`, and on one named queue or address in its own answer, or in the row's `allowedActions`.
+ * cluster answer counts grants only; what a team or share gives on some subscription or address is in the summary's
+ * `anywhere`, and on one named subscription or destination in its own answer, or in the row's `allowedActions`.
  *
- * <p>`canAnywhere` is the page-level right: held on the cluster by a grant, or on some queue or address through a team
+ * <p>`canAnywhere` is the page-level right: held on the cluster by a grant, or on some subscription or address through a team
  * or a share. A control is hidden only when it is false. `canOn` is the right on one row the server sent, from the
  * row's `allowedActions`: false there is a control shown disabled, with its reason. `createPatterns` are the name
- * patterns a team or share lets the caller create queues and addresses under.
+ * patterns a team or share lets the caller create subscriptions and destinations under.
  */
 export declare function useCan(): {
     can: (permission: string, where?: string | ResourceWhere) => boolean;
@@ -36,7 +36,7 @@ export declare function useCan(): {
     canOn: (permission: string, resource: {
         allowedActions: AllowedActions;
     }) => boolean;
-    createPatterns: (clusterId: string, kind: "queue" | "address") => string[] | undefined;
+    createPatterns: (clusterId: string, type: "subscription" | "destination") => string[] | undefined;
     /** The teams the caller belongs to, with their role in each. */
     teams: {
         teamId: string;

package/types/kernel/feature.d.ts

@@ -5,9 +5,9 @@ import type { AnyRoute } from '@tanstack/react-router';
 import type { NavGroupId } from './nav/groups.ts';
 import type { SlotContributions } from './slots.ts';
 /** The extension contract version, shared with the backend's `Contract.VERSION` (ADR-0070). */
-export declare const CONTRACT = 15;
+export declare const CONTRACT = 17;
 /** The module ids the backend manifest reports. A frontend feature uses the same id as its backend module. */
-export declare const FEATURE_IDS: readonly ["security", "audit", "auditfeed", "settings", "lifecycle", "stream", "inbox", "approvals", "broker", "clusters", "governance", "scrape", "mcp", "queues", "resources", "messages", "routing", "metrics", "alerting", "events", "rr", "sql", "brokerconfig", "flow", "triage", "bulk", "transfer", "setupreview", "diagnostics", "apitokens", "plugins", "identity-local", "identity-oidc"];
+export declare const FEATURE_IDS: readonly ["security", "audit", "auditfeed", "settings", "lifecycle", "stream", "inbox", "approvals", "broker", "clusters", "governance", "scrape", "artemis", "mcp", "resources", "messages", "routing", "metrics", "alerting", "events", "rr", "sql", "brokerconfig", "flow", "triage", "bulk", "transfer", "setupreview", "diagnostics", "apitokens", "plugins", "identity-local", "identity-oidc"];
 export type FeatureId = (typeof FEATURE_IDS)[number];
 /**
  * An installed plugin's id, as its `plugin.json` declares it: lowercase kebab-case, vendor first,
@@ -36,6 +36,12 @@ export interface NavContribution {
     icon: Icon;
     /** The view's path below `/clusters/$clusterId/`. */
     path: string;
+    /**
+     * The id of the broker system the view is for (`artemis`). Without it the view applies to every system; with
+     * it, the navigation lists the view only for a cluster that runs that system, and its route is under
+     * `/clusters/$clusterId/<system>/`, which another system's cluster answers with the not-found page.
+     */
+    system?: string;
     /**
      * The permission the view reads with. Without it the entry stays visible and disabled,
      * and says why; the server enforces it regardless.

package/types/kernel/keyboard/useKeySequences.d.ts

@@ -1,12 +1,13 @@
 import { type NavContribution } from '../feature.ts';
 /**
  * The views that have a `g` letter: built-in views only — a plugin's letter is ignored, so a plugin
- * can never take a letter an operator already relies on (ADR-0109).
+ * can never take a letter an operator already relies on (ADR-0109). A system-only view has no letter on a
+ * cluster known to run another system; while the system is not known the letter is offered.
  */
 export declare function viewHotkeys(features: {
     id: string;
     nav?: NavContribution[];
-}[]): Map<string, NavContribution>;
+}[], systemId?: string): Map<string, NavContribution>;
 /**
  * The single-key shortcuts (ADR-0109), as one document listener mounted by the shell:
  * `g` then a view's letter goes to that view of the open cluster, `?` opens the list of shortcuts,

package/types/kernel/nav/currentView.d.ts

@@ -8,14 +8,15 @@ export interface CurrentView {
 }
 /**
  * Which cluster view an address is under (ADR-0109): the navigation entry whose path is the longest
- * prefix of the path after `/clusters/<id>/`, so a queue's message browser is under Queues and a
+ * prefix of the path after `/clusters/<id>/`, so a subscription's message browser is under Subscriptions and a
  * bulk run under Bulk runs. Null outside any cluster.
  */
 export declare function matchView(pathname: string, features: RahdarFeature[]): CurrentView | null;
 export declare function useCurrentView(): CurrentView | null;
 /**
  * The address of the same view on another cluster (ADR-0109): an operator comparing two clusters
- * stays on Queues. The view's search is not carried — its filter and its open resource name things
- * that may not exist there. Without a current view, the cluster's landing page.
+ * stays on Subscriptions. The view's search is not carried — its filter and its open resource name things
+ * that may not exist there. Without a current view, or when the view is for one system and the cluster runs
+ * another (`system`), the cluster's landing page.
  */
-export declare function sameViewOn(clusterId: string, view: CurrentView | null): string;
+export declare function sameViewOn(clusterId: string, view: CurrentView | null, system?: string): string;

package/types/kernel/registry.d.ts

@@ -7,6 +7,7 @@ export interface NavGroup {
 }
 /**
  * The features' views under the kernel's groups (ADR-0070): groups in their fixed order, views in
- * their declared order, and a group none of the features contributes to left out.
+ * their declared order, and a group none of the features contributes to left out. A system-only view is
+ * listed only for a cluster that runs that system (`systemId`).
  */
-export declare function navGroups(features: RahdarFeature[]): NavGroup[];
+export declare function navGroups(features: RahdarFeature[], systemId?: string): NavGroup[];

package/types/kernel/routing/roots.d.ts

@@ -1,12 +1,15 @@
 import { type ComponentType, type ReactElement } from 'react';
 import type { ModuleId } from '../feature.ts';
+import { type ResourceSearch } from './search.ts';
 /** The root every page renders inside: the shell. A feature's `routes.root` are its children. */
 export declare const rootRoute: import("@tanstack/react-router").RootRoute<import("@tanstack/router-core").Register, undefined, {}, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>;
 /** One cluster's layout. A feature's `routes.cluster` are its children. */
 export declare const clusterRoute: import("@tanstack/react-router").Route<unknown, import("@tanstack/react-router").RootRoute<import("@tanstack/router-core").Register, undefined, {}, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>, "clusters/$clusterId", "/clusters/$clusterId", string, "/clusters/$clusterId", undefined, import("@tanstack/router-core").ResolveParams<"clusters/$clusterId">, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>;
 export declare const pluginClusterFallback: import("@tanstack/react-router").Route<unknown, import("@tanstack/react-router").Route<unknown, import("@tanstack/react-router").RootRoute<import("@tanstack/router-core").Register, undefined, {}, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>, "clusters/$clusterId", "/clusters/$clusterId", string, "/clusters/$clusterId", undefined, import("@tanstack/router-core").ResolveParams<"clusters/$clusterId">, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>, "p/$pluginId/$", "/clusters/$clusterId/p/$pluginId/$", string, "/clusters/$clusterId/p/$pluginId/$", undefined, import("@tanstack/router-core").ResolveParams<"p/$pluginId/$">, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>;
 /** The shell's own pages, beside the cluster layout. */
-export declare const shellRoutes: (import("@tanstack/react-router").Route<unknown, import("@tanstack/react-router").RootRoute<import("@tanstack/router-core").Register, undefined, {}, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>, "/", "/", string, "/", undefined, import("@tanstack/router-core").ResolveParams<"/">, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined> | import("@tanstack/react-router").Route<unknown, import("@tanstack/react-router").RootRoute<import("@tanstack/router-core").Register, undefined, {}, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>, "login", "/login", string, "/login", undefined, import("@tanstack/router-core").ResolveParams<"login">, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined> | import("@tanstack/react-router").Route<unknown, import("@tanstack/react-router").RootRoute<import("@tanstack/router-core").Register, undefined, {}, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>, "admin", "/admin", string, "/admin", (raw: Record<string, unknown>) => {
+export declare const shellRoutes: (import("@tanstack/react-router").Route<unknown, import("@tanstack/react-router").RootRoute<import("@tanstack/router-core").Register, undefined, {}, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>, "/", "/", string, "/", (raw: Record<string, unknown>) => ResourceSearch & {
+    cluster?: string;
+}, import("@tanstack/router-core").ResolveParams<"/">, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined> | import("@tanstack/react-router").Route<unknown, import("@tanstack/react-router").RootRoute<import("@tanstack/router-core").Register, undefined, {}, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>, "login", "/login", string, "/login", undefined, import("@tanstack/router-core").ResolveParams<"login">, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined> | import("@tanstack/react-router").Route<unknown, import("@tanstack/react-router").RootRoute<import("@tanstack/router-core").Register, undefined, {}, import("@tanstack/router-core").AnyContext, import("@tanstack/router-core").AnyContext, {}, undefined, unknown, unknown, unknown, unknown, undefined>, "admin", "/admin", string, "/admin", (raw: Record<string, unknown>) => {
     tab?: string;
     plugin?: string;
     upload?: string;

package/types/kernel/routing/search.d.ts

@@ -0,0 +1,7 @@
+/** A listing's navigable state: filter, sort and page live in the URL, not in local state (non-negotiable #9). */
+export interface ResourceSearch {
+    q?: string;
+    sort?: string;
+    page?: number;
+}
+export declare function validateResourceSearch(raw: Record<string, unknown>): ResourceSearch;

package/types/kernel/shell/CommandPalette.d.ts

@@ -1,5 +1,5 @@
 /**
- * ⌘K navigation across the console: jump to a view, a recent place, a cluster, or a queue by name, or
+ * ⌘K navigation across the console: jump to a view, a recent place, a cluster, or a subscription by name, or
  * search a live view (ADR-0109). Mounted once in the root layout; the shortcut is registered by
  * {@link Spotlight}, and the header's Search button opens it too.
  *

package/types/kernel/shell/HomeView.d.ts

@@ -1,6 +1,2 @@
-/**
- * The landing page, with no cluster open: what the features contribute for it. The clusters feature
- * sends the operator to the first cluster, so the page is seen only while that is decided or while no
- * cluster is registered, which is what it is titled for.
- */
+/** The landing page, with no cluster open: the estate, which is what the features contribute for it. */
 export declare function HomeView(): import("react").JSX.Element;

package/types/kernel/shell/lastPlace.d.ts

@@ -6,7 +6,7 @@
 export interface LastPlace {
     clusterId: string;
     clusterName: string;
-    /** The view the operator was in, such as "Queues". */
+    /** The view the operator was in, such as "Subscriptions". */
     label: string;
     /** The address, and the search it was opened with. */
     to: string;

package/types/kernel/shell/useClusterSystem.d.ts

@@ -0,0 +1,11 @@
+import type { components } from '../api/schema.d.ts';
+type ClusterDetail = components['schemas']['ClusterDetail'];
+/**
+ * What the cluster says about its broker system: the system itself and the kinds it offers, each with the verbs
+ * it supports. It reads the cluster the clusters feature already keeps fresh, under the same key, so it adds
+ * no request of its own. `undefined` until the cluster has loaded, and for no cluster.
+ */
+export declare function useClusterKinds(clusterId: string | undefined): Pick<ClusterDetail, 'system' | 'kinds'> | undefined;
+/** The id of the system the cluster runs (`artemis`), which decides whether a system-only view is offered. */
+export declare function useClusterSystem(clusterId: string | undefined): string | undefined;
+export {};

package/types/kernel/slots.d.ts

@@ -1,9 +1,9 @@
 import type { ComponentType } from 'react';
-import type { ActionProps, ActionSection, AddressTarget, ClientTarget, ConnectionTarget, ConsumerTarget, DivertTarget, LinkProps, MessageTarget, ProducerTarget, QueueTarget, SessionTarget } from './actions/types.ts';
+import type { ActionProps, ActionSection, ChannelTarget, ClientTarget, ConnectionTarget, ConsumerTarget, DestinationTarget, LinkProps, MessageTarget, ProducerTarget, ResourceRef, RouteTarget, SubscriptionTarget } from './actions/types.ts';
 import type { HeldOperationDetail } from './approvals/api.ts';
 import type { MetricRange } from './time/ranges.ts';
-/** Queues picked by name, or every queue matching the queues screen's filter (`q`, blank for all). */
-export type QueueSelection = {
+/** Subscriptions picked by name, or every subscription matching the subscriptions screen's filter (`q`, blank for all). */
+export type SubscriptionSelection = {
     kind: 'names';
     names: string[];
 } | {
@@ -11,7 +11,7 @@ export type QueueSelection = {
     q: string;
     total: number;
 };
-/** Messages picked by id, every message matching the messages screen's selector, or the whole queue. */
+/** Messages picked by id, every message matching the messages screen's selector, or the whole subscription. */
 export type MessageSelection = {
     kind: 'ids';
     ids: number[];
@@ -34,7 +34,7 @@ export interface SlotProps {
         collapsed: boolean;
     };
     /** The landing page, when no cluster is open. */
-    'home.empty': object;
+    'home.estate': object;
     /** Above every view of a cluster: what identifies it, and what needs saying about its state. */
     'cluster.header': {
         clusterId: string;
@@ -43,20 +43,20 @@ export interface SlotProps {
     'cluster.registration.afterProbe': {
         contributions: Record<string, unknown>;
     };
-    /** In a queue's detail drawer, below its per-node breakdown. `onClose` closes the drawer before navigating. */
-    'queue.detail.panels': {
+    /** In a subscription's detail drawer, below its per-node breakdown. `onClose` closes the drawer before navigating. */
+    'subscription.detail.panels': {
         clusterId: string;
-        queueName: string;
+        subscription: ResourceRef;
         onClose: () => void;
     };
     /**
-     * Beside the queues screen's selection: what can be done to the selected queues. `count` is how
+     * Beside the subscriptions screen's selection: what can be done to the selected subscriptions. `count` is how
      * many are selected, and may be zero: an action then stays visible and disabled. `clear` empties
      * the selection.
      */
-    'queues.selection': {
+    'subscriptions.selection': {
         clusterId: string;
-        selection: QueueSelection;
+        selection: SubscriptionSelection;
         count: number;
         clear: () => void;
     };
@@ -67,7 +67,7 @@ export interface SlotProps {
      */
     'messages.selection': {
         clusterId: string;
-        queueName: string;
+        subscription: ResourceRef;
         node?: string;
         selection: MessageSelection;
         total: number | null;
@@ -77,10 +77,10 @@ export interface SlotProps {
     'metrics.panels': {
         clusterId: string;
     };
-    /** In the flow view's monitoring pane, when a queue is selected: its history over `range`, per node. */
+    /** In the flow view's monitoring pane, when a subscription is selected: its history over `range`, per node. */
     'flow.selection.panels': {
         clusterId: string;
-        queueName: string;
+        subscription: ResourceRef;
         range: MetricRange;
     };
     /** Inside a box on the topology graph, after its name. `nodeIds` are the broker endpoints the box stands for. */
@@ -92,8 +92,8 @@ export interface SlotProps {
     'settings.sections': {
         clusterId: string;
     };
-    /** A tab of a cluster's Routing page, after Diverts and Bridges, labelled with the contribution's title; its id is the tab's `?tab=`. */
-    'routing.tabs': {
+    /** A tab of a cluster's Routes page, after Routes, labelled with the contribution's title; its id is the tab's `?tab=`. */
+    'routes.tabs': {
         clusterId: string;
     };
     /**
@@ -120,19 +120,19 @@ export interface SlotProps {
         opened: boolean;
         onClose: () => void;
     };
-    'queue.actions': ActionProps<QueueTarget>;
-    'address.actions': ActionProps<AddressTarget>;
+    'subscription.actions': ActionProps<SubscriptionTarget>;
+    'destination.actions': ActionProps<DestinationTarget>;
     'connection.actions': ActionProps<ConnectionTarget>;
-    'session.actions': ActionProps<SessionTarget>;
+    'channel.actions': ActionProps<ChannelTarget>;
     'consumer.actions': ActionProps<ConsumerTarget>;
     'producer.actions': ActionProps<ProducerTarget>;
     'message.actions': ActionProps<MessageTarget>;
-    'divert.actions': ActionProps<DivertTarget>;
+    'route.actions': ActionProps<RouteTarget>;
     'client.actions': ActionProps<ClientTarget>;
-    'queue.link': LinkProps<QueueTarget>;
-    'address.link': LinkProps<AddressTarget>;
+    'subscription.link': LinkProps<SubscriptionTarget>;
+    'destination.link': LinkProps<DestinationTarget>;
     'connection.link': LinkProps<ConnectionTarget>;
-    'session.link': LinkProps<SessionTarget>;
+    'channel.link': LinkProps<ChannelTarget>;
 }
 export type SlotName = keyof SlotProps;
 /**
@@ -186,6 +186,11 @@ export interface SlotContribution<P> {
      * (listed under Plugins without one), and an `AdminGroupId`, required, for `admin.tabs`.
      */
     group?: string;
+    /**
+     * `routes.tabs` only: the id of the broker system the tab is for (`artemis`). The tab is listed only on a
+     * cluster that runs that system.
+     */
+    system?: string;
     /** `*.actions` only: the menu section the item is listed under. */
     section?: ActionSection;
     Component: ComponentType<P>;

package/types/sdk/index.d.ts

@@ -19,7 +19,7 @@ import { StatusBadge } from '../ui/StatusBadge.tsx';
 import { Toolbar } from '../ui/Toolbar.tsx';
 export { CONTRACT } from '../kernel/feature.ts';
 export type { NavContribution, PaletteSource, PluginId, RouteContributions, RahdarFeature, TopicHandler, } from '../kernel/feature.ts';
-export { ADMIN_GROUPS, SETTINGS_GROUPS, type AdminGroupId, type MessageSelection, type QueueSelection, type SettingsGroupId, type SlotContribution, type SlotContributions, type SlotEntry, type SlotName, type SlotProps, } from '../kernel/slots.ts';
+export { ADMIN_GROUPS, SETTINGS_GROUPS, type AdminGroupId, type MessageSelection, type SubscriptionSelection, type SettingsGroupId, type SlotContribution, type SlotContributions, type SlotEntry, type SlotName, type SlotProps, } from '../kernel/slots.ts';
 export { NAV_GROUPS, type NavGroupId } from '../kernel/nav/groups.ts';
 export { clusterRoute, rootRoute } from '../kernel/routing/roots.ts';
 export { ApiError, clusterKey, heldOperationsKey, OperationHeldError, request, type HeldOperation, } from '../kernel/api/request.ts';
@@ -37,7 +37,7 @@ export { StepUpPrompt } from '../kernel/auth/StepUp.tsx';
  */
 export { useUserStream } from '../kernel/stream/useUserStream.ts';
 export type { StreamStatus } from '../kernel/stream/useClusterStream.ts';
-export { ACTION_SECTIONS, type ActionHost, type ActionMode, type ActionProps, type ActionSection, type ActionTargets, type AddressTarget, type ClientTarget, type ConnectionTarget, type ConsumerTarget, type DivertTarget, type HostedDialogProps, type MessageTarget, type ProducerTarget, type QueueTarget, type SessionTarget, } from '../kernel/actions/types.ts';
+export { ACTION_SECTIONS, type ActionHost, type ActionMode, type ActionProps, type ActionSection, type ActionTargets, type ChannelTarget, type ClientTarget, type ConnectionTarget, type ConsumerTarget, type DestinationTarget, type HostedDialogProps, type MessageTarget, type ProducerTarget, type ResourceRef, type RouteTarget, type SubscriptionTarget, } from '../kernel/actions/types.ts';
 export { ActionMenuItem } from '../ui/ActionMenuItem.tsx';
 export { CapabilityGate } from '../ui/CapabilityGate.tsx';
 export { gateFor, type GateScope, type GateVerdict } from '../ui/capabilityGate.ts';

package/types/ui/ConfirmDialog.d.ts

@@ -6,7 +6,7 @@ import { type ReactNode } from 'react';
  * <ul>
  *   <li>With `tone="danger"` the action is confirmed by pressing and holding the button until it
  *       fills ({@link HoldToConfirm}), never by a click or by typing; use it for anything that removes
- *       or overwrites. The button names the action and its count, such as "Delete 37 queues".
+ *       or overwrites. The button names the action and its count, such as "Delete 37 subscriptions".
  *   <li>Focus enters the dialog on Cancel, Escape closes it, and focus returns to the control that
  *       opened it.
  *   <li>While `pending` the button is busy and cannot be pressed again, and the dialog stays
@@ -22,11 +22,11 @@ export declare function ConfirmDialog({ opened, onClose, title, consequence, con
 export type ConfirmDialogProps = Readonly<{
     opened: boolean;
     onClose: () => void;
-    /** The action as a plain line, such as "Delete queue". */
+    /** The action as a plain line, such as "Delete subscription". */
     title: string;
     /** What it affects: the resource, the nodes and how much data goes. */
     consequence: ReactNode;
-    /** The exact action, such as "Delete queue". */
+    /** The exact action, such as "Delete subscription". */
     confirmLabel: string;
     /**
      * The button that dismisses without acting; defaults to "Cancel". Name what is kept, such as "Keep

package/types/ui/DescriptionList.d.ts

@@ -12,7 +12,7 @@ export type DescriptionItem = Readonly<{
  * two term and value pairs side by side for a short list in a wide space. A `label` names the list
  * for assistive technology.
  *
- * `oneLine` is for terms and values that are names a broker supplies (a queue, an address, a role), in
+ * `oneLine` is for terms and values that are names a broker supplies (a subscription, an address, a role), in
  * a cell with a width of its own: each stays on one line, shortened in the middle when it does not fit
  * and named in full on hover and focus, and neither track shrinks below a readable width, so a long
  * name never squeezes its neighbour into a column of characters. A value that is not a string shortens

package/types/ui/EmptyState.d.ts

@@ -17,7 +17,7 @@ import { type ReactNode } from 'react';
 export declare function EmptyState(props: EmptyStateProps): import("react").JSX.Element;
 export type EmptyStateProps = Readonly<{
     kind: 'empty';
-    /** What is missing, such as "No queues". */
+    /** What is missing, such as "No subscriptions". */
     title: string;
     /** What the resource is and why there is none. */
     description: ReactNode;

package/types/ui/HoldToConfirm.d.ts

@@ -5,12 +5,12 @@
  * finger or a pen, or with Space or Enter on the keyboard; the hint under the button says so, and the
  * outcome is announced.
  *
- * <p>`label` is the action ("Delete 37 queues") and names the blast radius the button is for; the button
+ * <p>`label` is the action ("Delete 37 subscriptions") and names the blast radius the button is for; the button
  * reads exactly that, and the hint under it says to hold it. While `loading` it is busy and cannot be held again. Mouse and touch
  * presses are Mantine's `useLongPress`; it has no keyboard, which is handled here.
  */
 export declare function HoldToConfirm({ label, onConfirm, loading, disabled, describedBy, tone, }: Readonly<{
-    /** The exact action, such as "Delete queue ORDERS" or "Apply to 2 nodes". */
+    /** The exact action, such as "Delete subscription ORDERS" or "Apply to 2 nodes". */
     label: string;
     onConfirm: () => void;
     loading?: boolean;

package/types/ui/LoadingState.d.ts

@@ -5,7 +5,7 @@
  * `loading` props, which hold their own size.
  */
 export declare function LoadingState({ label, variant, blockSize, inlineSize, }: Readonly<{
-    /** What is loading, such as "Loading queues". Read aloud, not shown. */
+    /** What is loading, such as "Loading subscriptions". Read aloud, not shown. */
     label: string;
     /** `block` fills the width it is in; `inline` sits in a line of text. */
     variant?: 'block' | 'inline';

package/types/ui/NodeOutcomeSummary.d.ts

@@ -23,7 +23,7 @@ export declare function NodeOutcomeSummary({ outcome, destructive, alreadyLabel,
      */
     alreadyLabel?: string;
     /**
-     * What the counts are counting, and the verb for them. Defaults to the queue
+     * What the counts are counting, and the verb for them. Defaults to the subscription
      * delete's wording; a connection close affects consumers, not messages, and
      * saying "destroyed" there would overstate what happened.
      */

package/types/ui/Toolbar.d.ts

@@ -8,7 +8,7 @@ import { type ReactNode } from 'react';
  * controls that belong together; a toolbar of one or two is better as plain tab stops.
  */
 export declare function Toolbar({ label, start, end, arrowNavigation, }: Readonly<{
-    /** Names the toolbar for assistive technology, such as "Queue filters". */
+    /** Names the toolbar for assistive technology, such as "Subscription filters". */
     label: string;
     /** Controls that act on the view, on the start side. */
     start?: ReactNode;

package/types/ui/capabilityGate.d.ts

@@ -10,25 +10,26 @@ export type GateVerdict = {
 };
 /** What a permission is held on: one cluster, or Rahdar itself. */
 export type GateScope = 'cluster' | 'installation';
-/** What is known of a refusal on one queue or address: the permission, and who owns it, to say who can grant it. */
+/** What is known of a refusal on one subscription or destination: the permission, and who owns it, to say who can grant it. */
 export interface ResourceDenial {
     permission: string;
-    noun: 'queue' | 'address';
+    noun: 'subscription' | 'destination';
     /** The name of the team that owns the resource; none when no team does. */
     owner?: string | null;
 }
 /**
  * Whether a lifecycle control may act, and why not when it may not.
  *
- * <p>Two independent gates, in the order the operator can do something about:
+ * <p>Two independent gates, checked in this order (a kind that lacks the verb comes before both, in
+ * `useKindVerbRefusal`):
  *
  * <ul>
- *   <li><b>Permission</b> — the caller's own grants. The server is the
- *       enforcement point; this only explains, and never hides.
  *   <li><b>Capability</b> — whether the broker connection can write at all. Only
  *       a known refusal blocks. Since ADR-0049 D5 an unproven capability is
  *       reported as unknown, and blocking on the absence of evidence would stop
  *       an operator using a broker that works perfectly well.
+ *   <li><b>Permission</b> — the caller's own grants. The server is the
+ *       enforcement point; this only explains, and never hides.
  * </ul>
  *
  * <p>`scope` is what the permission is held on, so the reason names the right place: `cluster` for
@@ -38,6 +39,6 @@ export interface ResourceDenial {
 export declare function gateFor(permitted: boolean, permissionLabel: string, capability: CapabilityView | undefined, 
 /** True while the caller's grants are still being fetched. */
 loading?: boolean, scope?: GateScope, 
-/** Given for a control on one queue or address the caller can see: the reason then names the permission and whom to ask. */
+/** Given for a control on one subscription or destination the caller can see: the reason then names the permission and whom to ask. */
 denial?: ResourceDenial): GateVerdict;
 export {};

package/types/ui/notify.d.ts

@@ -14,7 +14,7 @@ export type ActionVerb = Readonly<{
 }>;
 type Notice = Readonly<{
     action: ActionVerb;
-    /** What the action acts on, such as `queue "orders"`. */
+    /** What the action acts on, such as `subscription "orders"`. */
     subject: string;
 }>;
 /** Settles a toast that {@link notify.pending} returned: it is replaced by the outcome. */

package/types/ui/table/DataTable.d.ts

@@ -12,7 +12,7 @@ interface DataTableBaseProps<T> {
     columns: Column<T>[];
     data: T[];
     rowKey: (row: T) => string;
-    /** What the table lists, as its accessible name: "Queues", "Connections". */
+    /** What the table lists, as its accessible name: "Subscriptions", "Connections". */
     label: string;
     /** Shown in place of the rows when there are none: an `EmptyState`. */
     empty: ReactNode;

package/types/ui/table/columns.d.ts

@@ -46,4 +46,13 @@ interface KindPreset {
     mono: boolean;
 }
 export declare const KIND_PRESETS: Record<ColumnKind, KindPreset>;
+/**
+ * The Kind column of a list of one role: what the row's system calls its kind ("Queue", "Divert"). It is
+ * `low` so a narrow table drops it first; the name still identifies the row.
+ */
+export declare function kindColumn<T extends {
+    kindLabel: string;
+}>(): Column<T>;
+/** The same column for rows that hold the label deeper, such as a dead-letter row's subscription. */
+export declare function kindColumn<T>(label: (row: T) => string): Column<T>;
 export {};

package/types/ui/table/index.d.ts

@@ -1,5 +1,5 @@
 export { DataTable, STATIC_ROW_LIMIT, type DataTableProps, type TableToolbar } from './DataTable.tsx';
-export { KIND_PRESETS, type Column, type ColumnKind, type ColumnPriority } from './columns.ts';
+export { KIND_PRESETS, kindColumn, type Column, type ColumnKind, type ColumnPriority } from './columns.ts';
 export { DENSITY_KEY, densityToggleLabel, useDensity, type Density } from './density.ts';
 export type { RowMenu, RowMenuContext } from './GridTable.tsx';
 export { MiddleTruncate } from './MiddleTruncate.tsx';