@ultrst-armada/kloks 1.4.0 → 1.4.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultrst-armada/kloks",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "private": false,
   "publishConfig": {
     "access": "public",
@@ -165,7 +165,7 @@
     "@types/better-sqlite3": "^7.6.0",
     "@types/node": "^22.0.0",
     "@types/react": "^19.0.0",
-    "@ultrst-armada/krnl": "^1.0.0",
+    "@ultrst-armada/krnl": "^1.0.2",
     "bcryptjs": "^2.4.3",
     "better-sqlite3": "^11.0.0",
     "react": "^19.0.1",

package/packages/audio-midi/dist/index.js

@@ -37,8 +37,7 @@ import {
   synthEngine
 } from "./chunk-3GRGELA4.js";
 
-// ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.0/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js
-import { WebSocketServer, WebSocket } from "ws";
+// ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.2/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js
 var ServiceStateStore = class {
   state;
   listeners = /* @__PURE__ */ new Set();

package/packages/audio-midi/package.json

@@ -28,6 +28,6 @@
     "@kloks/state-graph": "workspace:*"
   },
   "devDependencies": {
-    "@ultrst-armada/krnl": "^1.0.0"
+    "@ultrst-armada/krnl": "^1.0.2"
   }
 }

package/packages/backend/dist/{chunk-IPP4VURQ.js → chunk-7KNGX522.js}

@@ -1,5 +1,4 @@
-// ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.0/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js
-import { WebSocketServer, WebSocket } from "ws";
+// ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.2/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js
 var ServiceStateStore = class {
   state;
   listeners = /* @__PURE__ */ new Set();

package/packages/backend/dist/{chunk-CU7RZBMF.js → chunk-FO6WYLW4.js}

@@ -1,7 +1,7 @@
 import {
   createService,
   createServiceDefinition
-} from "./chunk-IPP4VURQ.js";
+} from "./chunk-7KNGX522.js";
 import {
   StorageAdapterFactory
 } from "./chunk-J2J24JVC.js";

package/packages/backend/dist/{chunk-BM4QMVPA.js → chunk-XTWHEZWS.js}

@@ -2,7 +2,7 @@ import {
   createService,
   createServiceDefinition,
   createServiceProxy
-} from "./chunk-IPP4VURQ.js";
+} from "./chunk-7KNGX522.js";
 
 // src/services/ServiceBoundary.ts
 function createLocalService(definition) {

package/packages/backend/dist/index.d.ts

@@ -1621,4 +1621,23 @@ declare function computeUsageWeightScore(account?: AccountEntity, deployment?: D
  */
 declare function getConnectedDeploymentNode(weightNodeId: string, nodes: GraphNode[], edges: GraphEdge[]): GraphNode | undefined;
 
-export { type AssetChannelType, type AssetDataType, type AssetFolderInfo, type AssetPoolItem, type AssetPoolScope, type B2AuthData, type BackendFacade, BaseDataProvider, BaseResourceFetcher, type CloudflareObservability, type CloudflareProjectItem, CloudflareResourceFetcher, type CloudflareUsageMetrics, type CredentialEntry, type CredentialManifest, type Deployment, type FunctionSet, FunctionalityTable, GRAPHS_ROOT, type IDataProvider, LEGACY_PROJECTS_ROOT, type OrchestrationFn, PROJECTS_ROOT, type ProjectMetadata, type PublicRouteRecord, type QueryFilter, ResourceFetcherRegistry, type Runtime, SAMPLES_GLOBAL_ROOT, SUPPORTED_AUDIO_EXTS, SUPPORTED_MIDI_EXTS, type ServerAudioSampleItem, type ServiceFacade, type ServiceRegistryRecord, type SortOrder, type SrklB2Account, SrklStorageService, type SyncFileResult, type UnifiedQueryResult, type UnifiedResourceMetricItem, type UnifiedResourceMetrics, VercelResourceFetcher, WORKSPACE_ASSETS_ROOT, WORKSPACE_ROOT, type WorkingWorkspaceConfig, type WorkspaceFolderResolution, type WorkspaceStorageConfig, b2DeleteFileVersion, b2DeleteFolder, buildProjectObservability, buildProjectsList, cleanDbUrl, computeDeploymentFinalWeight, computeUsageWeightScore, configureStarterProjectTemplate, createAssetSubfolder, createCredential, createGraphAssetFolder, createGraphAssetFolder as createGraphAssetSubfolder, createGraphPackage, createWavBuffer, createWorkspace, createWorkspaceGraph, decryptSecretFromBlob, deleteAssetFromGraph, deleteAssetFromPool, deleteCredential, deleteGlobalSample, deleteGraphPackage, deleteProject, deleteProjectSample, deleteRoute, deleteWorkspace, deleteWorkspaceFile, deleteWorkspaceFolder, deleteWorkspaceGraph, encryptSecretToBlob, ensureAssetPoolDirectories, ensureGlobalSamples, ensureGraphAssetDirectories, ensureProjectAssets, ensureProjectsRoot, ensureWorkspaceStructure, exportEncryptedCredentials, fetchCloudflareData, fetchVercelData, findUserWorkspace, findWorkspaceRecord, formatRelativeCreated, getAllRoutes, getAssetPoolLocationPath, getAssetPoolPublicUrl, getB2BucketId, getConnectedDeploymentNode, getConnectedWeightModifiers, getCredential, getDefaultWorkingWorkspaceDir, getExecutions, getGatewayConfig, getGraphPackageById, getPrimarySrklDeploymentUrl as getPrimarySrklCoreDeploymentUrl, getProjectById, getPublicRouteByPath, getPublicRoutes, getSrklAccounts as getSrklCoreAccounts, getSrklStatus, getUnifiedDbUrl, getUsers, getWeightModifierScore, getWorkingWorkspaceConfig, getWorkingWorkspaceDir, getWorkspaceFolderKey, getWorkspaceFolderPrefix, getWorkspaceGraph, getWorkspaceStorageDetails, getWorkspaces, importEncryptedCredentials, importGraphDependency, initGlobalSamplesDirectory, isB2Workspace, listAllGraphPackages, listAllProjects, listBackblazeBuckets, listCredentials, listGlobalSamples, listProjectSamples, listWorkspaceFiles, listWorkspaceGraphs, loadCredentialManifest, loadWorkspaceData, loginUser, matchGatewayIngress, matchGatewayIngressAsync, queryUnifiedDb, readWorkspaceFile, recordExecution, removeGraphDependency, renameAppInWorkspaceData, resolveDynamicRouteFromDb, resolveWorkspaceConnection, resolveWorkspaceDir, saveAssetToGraph, saveAssetToPool, saveCredentialManifest, saveGlobalSample, saveGraphPackage, saveProject, saveProjectSample, saveWorkspaceData, saveWorkspaceGraph, scanAssetPool, scanGraphAssets, seedDefaultAssets, seedStarterGraphAssets, serverPublicRoutes, setServerPublicRoutes, setWorkingWorkspaceConfig, srklListBackblazeBuckets as srklCoreListBackblazeBuckets, syncWorkspace, syncWorkspaceCreateToBucket, syncWorkspaceDataToBucket, syncWorkspaceDeleteToBucket, updateCredential, updateWorkspace, upsertRoute, validateServiceDefinition, writeWorkspaceFile };
+/**
+ * @file systemDatabaseUrl.ts
+ * @description Centralized SYSTEM_DATABASE_URL resolver adhering to SKIPO Invariant §16.
+ * Precedence: SYSTEM_DATABASE_URL_1 (primary) > SYSTEM_DATABASE_URL_2 (fallback #1) > SYSTEM_DATABASE_URL_3 (fallback #2).
+ * Strictly forbids fallback to generic DATABASE_URL.
+ */
+/**
+ * Resolves the active system database URL following the strict 1 -> 2 -> 3 precedence.
+ * Throws a deterministic descriptive error if no system database URL is configured.
+ *
+ * @param env - Environment record (defaults to process.env in Node runtime)
+ * @returns Validated system database connection string
+ */
+declare function resolveSystemDatabaseUrl(env?: Record<string, string | undefined>): string;
+/**
+ * Safe version that returns null instead of throwing if unconfigured.
+ */
+declare function tryResolveSystemDatabaseUrl(env?: Record<string, string | undefined>): string | null;
+
+export { type AssetChannelType, type AssetDataType, type AssetFolderInfo, type AssetPoolItem, type AssetPoolScope, type B2AuthData, type BackendFacade, BaseDataProvider, BaseResourceFetcher, type CloudflareObservability, type CloudflareProjectItem, CloudflareResourceFetcher, type CloudflareUsageMetrics, type CredentialEntry, type CredentialManifest, type Deployment, type FunctionSet, FunctionalityTable, GRAPHS_ROOT, type IDataProvider, LEGACY_PROJECTS_ROOT, type OrchestrationFn, PROJECTS_ROOT, type ProjectMetadata, type PublicRouteRecord, type QueryFilter, ResourceFetcherRegistry, type Runtime, SAMPLES_GLOBAL_ROOT, SUPPORTED_AUDIO_EXTS, SUPPORTED_MIDI_EXTS, type ServerAudioSampleItem, type ServiceFacade, type ServiceRegistryRecord, type SortOrder, type SrklB2Account, SrklStorageService, type SyncFileResult, type UnifiedQueryResult, type UnifiedResourceMetricItem, type UnifiedResourceMetrics, VercelResourceFetcher, WORKSPACE_ASSETS_ROOT, WORKSPACE_ROOT, type WorkingWorkspaceConfig, type WorkspaceFolderResolution, type WorkspaceStorageConfig, b2DeleteFileVersion, b2DeleteFolder, buildProjectObservability, buildProjectsList, cleanDbUrl, computeDeploymentFinalWeight, computeUsageWeightScore, configureStarterProjectTemplate, createAssetSubfolder, createCredential, createGraphAssetFolder, createGraphAssetFolder as createGraphAssetSubfolder, createGraphPackage, createWavBuffer, createWorkspace, createWorkspaceGraph, decryptSecretFromBlob, deleteAssetFromGraph, deleteAssetFromPool, deleteCredential, deleteGlobalSample, deleteGraphPackage, deleteProject, deleteProjectSample, deleteRoute, deleteWorkspace, deleteWorkspaceFile, deleteWorkspaceFolder, deleteWorkspaceGraph, encryptSecretToBlob, ensureAssetPoolDirectories, ensureGlobalSamples, ensureGraphAssetDirectories, ensureProjectAssets, ensureProjectsRoot, ensureWorkspaceStructure, exportEncryptedCredentials, fetchCloudflareData, fetchVercelData, findUserWorkspace, findWorkspaceRecord, formatRelativeCreated, getAllRoutes, getAssetPoolLocationPath, getAssetPoolPublicUrl, getB2BucketId, getConnectedDeploymentNode, getConnectedWeightModifiers, getCredential, getDefaultWorkingWorkspaceDir, getExecutions, getGatewayConfig, getGraphPackageById, getPrimarySrklDeploymentUrl as getPrimarySrklCoreDeploymentUrl, getProjectById, getPublicRouteByPath, getPublicRoutes, getSrklAccounts as getSrklCoreAccounts, getSrklStatus, getUnifiedDbUrl, getUsers, getWeightModifierScore, getWorkingWorkspaceConfig, getWorkingWorkspaceDir, getWorkspaceFolderKey, getWorkspaceFolderPrefix, getWorkspaceGraph, getWorkspaceStorageDetails, getWorkspaces, importEncryptedCredentials, importGraphDependency, initGlobalSamplesDirectory, isB2Workspace, listAllGraphPackages, listAllProjects, listBackblazeBuckets, listCredentials, listGlobalSamples, listProjectSamples, listWorkspaceFiles, listWorkspaceGraphs, loadCredentialManifest, loadWorkspaceData, loginUser, matchGatewayIngress, matchGatewayIngressAsync, queryUnifiedDb, readWorkspaceFile, recordExecution, removeGraphDependency, renameAppInWorkspaceData, resolveDynamicRouteFromDb, resolveSystemDatabaseUrl, resolveWorkspaceConnection, resolveWorkspaceDir, saveAssetToGraph, saveAssetToPool, saveCredentialManifest, saveGlobalSample, saveGraphPackage, saveProject, saveProjectSample, saveWorkspaceData, saveWorkspaceGraph, scanAssetPool, scanGraphAssets, seedDefaultAssets, seedStarterGraphAssets, serverPublicRoutes, setServerPublicRoutes, setWorkingWorkspaceConfig, srklListBackblazeBuckets as srklCoreListBackblazeBuckets, syncWorkspace, syncWorkspaceCreateToBucket, syncWorkspaceDataToBucket, syncWorkspaceDeleteToBucket, tryResolveSystemDatabaseUrl, updateCredential, updateWorkspace, upsertRoute, validateServiceDefinition, writeWorkspaceFile };

package/packages/backend/dist/index.js

@@ -11,7 +11,7 @@ import {
   nodeGraphPersistence,
   parseGraphJsonFile,
   validateGraphDocument
-} from "./chunk-BM4QMVPA.js";
+} from "./chunk-XTWHEZWS.js";
 import {
   CANONICAL_SRKL_URL,
   SrklClient,
@@ -94,8 +94,8 @@ import {
   StorageServiceFacade,
   WorkspaceServiceDefinition,
   WorkspaceServiceFacade
-} from "./chunk-CU7RZBMF.js";
-import "./chunk-IPP4VURQ.js";
+} from "./chunk-FO6WYLW4.js";
+import "./chunk-7KNGX522.js";
 import {
   BackblazeB2Adapter,
   BaseStorageAdapter,
@@ -121,11 +121,6 @@ import {
   withAuth,
   withCors
 } from "./chunk-TWCEVES2.js";
-import {
-  BackendProvider,
-  useBackend,
-  useBackendClient
-} from "./chunk-G3ZOSXUR.js";
 import {
   AdminGuard,
   BaseAccountProvider,
@@ -139,13 +134,10 @@ import {
   SessionManager
 } from "./chunk-25Y7AVTP.js";
 import {
-  AuditLogger,
-  ControlPlaneManager,
-  DatabaseClusterManager,
-  detectDatabaseEngine,
-  getSystemDatabaseUrls,
-  resolveSystemDatabaseClusterNodes
-} from "./chunk-RCCQ7IRM.js";
+  BackendProvider,
+  useBackend,
+  useBackendClient
+} from "./chunk-G3ZOSXUR.js";
 import {
   BackendRegistry,
   ConcurrencyConflictError,
@@ -168,6 +160,14 @@ import {
   WebSocketTransport,
   createBackendClient
 } from "./chunk-NIP22V2G.js";
+import {
+  AuditLogger,
+  ControlPlaneManager,
+  DatabaseClusterManager,
+  detectDatabaseEngine,
+  getSystemDatabaseUrls,
+  resolveSystemDatabaseClusterNodes
+} from "./chunk-RCCQ7IRM.js";
 import {
   JobDependencyGraph,
   ResultFlowBridge,
@@ -4323,6 +4323,21 @@ async function deleteWorkspaceGraph(workspaceIdOrSlug, graphIdOrName) {
   }
   return false;
 }
+
+// src/resolver/systemDatabaseUrl.ts
+function resolveSystemDatabaseUrl(env = typeof process !== "undefined" ? process.env : {}) {
+  const url = env["SYSTEM_DATABASE_URL_1"] && env["SYSTEM_DATABASE_URL_1"].trim() || env["SYSTEM_DATABASE_URL_2"] && env["SYSTEM_DATABASE_URL_2"].trim() || env["SYSTEM_DATABASE_URL_3"] && env["SYSTEM_DATABASE_URL_3"].trim();
+  if (!url) {
+    throw new Error(
+      "[SKIPO DATABASE_INVARIANT] Missing system database configuration.\n  Set SYSTEM_DATABASE_URL_1 (primary), SYSTEM_DATABASE_URL_2 (fallback #1),\n  or SYSTEM_DATABASE_URL_3 (fallback #2).\n  Generic DATABASE_URL is obsolete and strictly forbidden in this architecture."
+    );
+  }
+  return url;
+}
+function tryResolveSystemDatabaseUrl(env = typeof process !== "undefined" ? process.env : {}) {
+  const url = env["SYSTEM_DATABASE_URL_1"] && env["SYSTEM_DATABASE_URL_1"].trim() || env["SYSTEM_DATABASE_URL_2"] && env["SYSTEM_DATABASE_URL_2"].trim() || env["SYSTEM_DATABASE_URL_3"] && env["SYSTEM_DATABASE_URL_3"].trim();
+  return url || null;
+}
 export {
   AdminGuard,
   AuditLogger,
@@ -4533,6 +4548,7 @@ export {
   resolveBackblazeEndpoint,
   resolveDynamicRouteFromDb,
   resolveSystemDatabaseClusterNodes,
+  resolveSystemDatabaseUrl,
   resolveUserFromToken,
   resolveWorkspaceConnection,
   resolveWorkspaceDir,
@@ -4561,6 +4577,7 @@ export {
   syncWorkspaceCreateToBucket,
   syncWorkspaceDataToBucket,
   syncWorkspaceDeleteToBucket,
+  tryResolveSystemDatabaseUrl,
   updateCredential,
   updateWorkspace,
   upsertRoute,

package/packages/backend/dist/krnl-services.js

@@ -13,8 +13,8 @@ import {
   StorageServiceFacade,
   WorkspaceServiceDefinition,
   WorkspaceServiceFacade
-} from "./chunk-CU7RZBMF.js";
-import "./chunk-IPP4VURQ.js";
+} from "./chunk-FO6WYLW4.js";
+import "./chunk-7KNGX522.js";
 import "./chunk-J2J24JVC.js";
 import "./chunk-FZKBTF34.js";
 import "./chunk-25Y7AVTP.js";

package/packages/backend/dist/services/index.js

@@ -11,8 +11,8 @@ import {
   nodeGraphPersistence,
   parseGraphJsonFile,
   validateGraphDocument
-} from "../chunk-BM4QMVPA.js";
-import "../chunk-IPP4VURQ.js";
+} from "../chunk-XTWHEZWS.js";
+import "../chunk-7KNGX522.js";
 export {
   CompositeBackend,
   EndpointGenerator,

package/packages/backend/package.json

@@ -120,6 +120,6 @@
     }
   },
   "devDependencies": {
-    "@ultrst-armada/krnl": "^1.0.0"
+    "@ultrst-armada/krnl": "^1.0.2"
   }
 }

package/packages/client/package.json

@@ -36,6 +36,6 @@
     }
   },
   "devDependencies": {
-    "@ultrst-armada/krnl": "^1.0.0"
+    "@ultrst-armada/krnl": "^1.0.2"
   }
 }

package/packages/contracts/dist/index.d.ts

@@ -530,6 +530,51 @@ declare function createKloksSnapshot(version?: string, surface?: ExportSymbolEnt
  */
 declare function diffContractSnapshots(previous: ContractSnapshot, current: ContractSnapshot): ContractDiffResult;
 
+/**
+ * @file serviceUiSchema.ts
+ * @description Formal typed and versioned Service UI Schema contracts for the SKIPO ecosystem.
+ * Defines canonical composition from Service -> UI -> Page -> Section -> Component -> AssetRef.
+ */
+type UIRequirementMode = 'required' | 'optional' | 'none';
+interface AssetRef {
+    packageId: string;
+    packageVersion: string;
+    exportPath: string;
+    assetId: string;
+    assetVersion: string;
+}
+interface OperationBinding {
+    operationId: string;
+    uiPath: string;
+}
+interface ComponentDescriptor {
+    name: string;
+    assetRef: AssetRef;
+    description?: string;
+}
+interface SectionDescriptor {
+    name: string;
+    assetRef: AssetRef;
+    components: ComponentDescriptor[];
+    description?: string;
+}
+interface PageDescriptor {
+    name: string;
+    sections: SectionDescriptor[];
+    description?: string;
+}
+interface ServiceUISchema {
+    schemaId: string;
+    schemaVersion: string;
+    serviceId: string;
+    requirementMode: UIRequirementMode;
+    pages: PageDescriptor[];
+    sections: SectionDescriptor[];
+    components: ComponentDescriptor[];
+    assetRefs: AssetRef[];
+    operationBindings: OperationBinding[];
+}
+
 declare const KLOKS_CANONICAL_CONTRACT: {
     package: string;
     version: string;
@@ -549,4 +594,4 @@ declare const KLOKS_CANONICAL_CONTRACT: {
     validateCompatibility: (consumerSymbols?: string[]) => CompatibilityCheckResult;
 };
 
-export { type AudioBusConfig, AudioBusConfigSchema, type AudioHardwareState, AudioHardwareStateSchema, type BackendOperation, BackendOperationSchema, type CompatibilityCheckResult, type ContractDiffResult, type ContractSnapshot, ContractSnapshotSchema, type ExportSymbolEntry, type GraphEntityMetadata, GraphEntityMetadataSchema, KLOKS_CANONICAL_CONTRACT, KLOKS_PUBLIC_SURFACE, type MidiCommandType, MidiCommandTypeSchema, type MidiEventPayload, MidiEventPayloadSchema, type NodeDimensions2D, NodeDimensions2DSchema, type NodeHeaderStyle, NodeHeaderStyleSchema, type NodeScreenRect2D, NodeScreenRect2DSchema, type PublicContractDefinition, PublicContractDefinitionSchema, QWNSR_REQUIRED_SURFACE, type SocketDirection, SocketDirectionSchema, type SocketGeometryConfig, SocketGeometryConfigSchema, type SocketPosition2D, SocketPosition2DSchema, type SocketStyleConfig, SocketStyleConfigSchema, type WireAnimationConfig, WireAnimationConfigSchema, type WireCurveStyle, WireCurveStyleSchema, type WireEndpoint2D, WireEndpoint2DSchema, type WireVisualConfig, WireVisualConfigSchema, createKloksSnapshot, diffContractSnapshots, validateConsumerSurfaceCompatibility };
+export { type AssetRef, type AudioBusConfig, AudioBusConfigSchema, type AudioHardwareState, AudioHardwareStateSchema, type BackendOperation, BackendOperationSchema, type CompatibilityCheckResult, type ComponentDescriptor, type ContractDiffResult, type ContractSnapshot, ContractSnapshotSchema, type ExportSymbolEntry, type GraphEntityMetadata, GraphEntityMetadataSchema, KLOKS_CANONICAL_CONTRACT, KLOKS_PUBLIC_SURFACE, type MidiCommandType, MidiCommandTypeSchema, type MidiEventPayload, MidiEventPayloadSchema, type NodeDimensions2D, NodeDimensions2DSchema, type NodeHeaderStyle, NodeHeaderStyleSchema, type NodeScreenRect2D, NodeScreenRect2DSchema, type OperationBinding, type PageDescriptor, type PublicContractDefinition, PublicContractDefinitionSchema, QWNSR_REQUIRED_SURFACE, type SectionDescriptor, type ServiceUISchema, type SocketDirection, SocketDirectionSchema, type SocketGeometryConfig, SocketGeometryConfigSchema, type SocketPosition2D, SocketPosition2DSchema, type SocketStyleConfig, SocketStyleConfigSchema, type UIRequirementMode, type WireAnimationConfig, WireAnimationConfigSchema, type WireCurveStyle, WireCurveStyleSchema, type WireEndpoint2D, WireEndpoint2DSchema, type WireVisualConfig, WireVisualConfigSchema, createKloksSnapshot, diffContractSnapshots, validateConsumerSurfaceCompatibility };

package/packages/contracts/package.json

@@ -28,6 +28,6 @@
     "zod": "^3.24.1"
   },
   "devDependencies": {
-    "@ultrst-armada/krnl": "^1.0.0"
+    "@ultrst-armada/krnl": "^1.0.2"
   }
 }

package/packages/functions/dist/index.js

@@ -1,5 +1,4 @@
-// ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.0/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js
-import { WebSocketServer, WebSocket } from "ws";
+// ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.2/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js
 var ServiceStateStore = class {
   state;
   listeners = /* @__PURE__ */ new Set();

package/packages/functions/package.json

@@ -28,6 +28,6 @@
     "zod": "^3.24.1"
   },
   "devDependencies": {
-    "@ultrst-armada/krnl": "^1.0.0"
+    "@ultrst-armada/krnl": "^1.0.2"
   }
 }

package/packages/orchestrations/package.json

@@ -30,6 +30,6 @@
     "@kloks/backend": "workspace:*"
   },
   "devDependencies": {
-    "@ultrst-armada/krnl": "^1.0.0"
+    "@ultrst-armada/krnl": "^1.0.2"
   }
 }

package/packages/services/dist/index.d.ts

@@ -2,6 +2,8 @@ import * as _ultrst_armada_krnl from '@ultrst-armada/krnl';
 import { ServiceDefinition, IService, EndpointDescriptor, ProtocolAdapter } from '@ultrst-armada/krnl';
 import { AdminDatabaseClusterConfig, DatabaseConnectionEntry, UserStorageConnection, AuthState, UserAccount, UserRole, UserWorkspaceRecord } from '@ultrst-armada/kloks/state-graph';
 export { AuthState, UserAccount, UserRole, UserSession, UserStorageConnection, UserWorkspaceRecord } from '@ultrst-armada/kloks/state-graph';
+import * as _kloks_contracts from '@ultrst-armada/kloks/contracts';
+import { ServiceUISchema } from '@ultrst-armada/kloks/contracts';
 
 interface SystemEnvironmentStatus {
     databaseUrlConfigured: boolean;
@@ -20,7 +22,10 @@ interface SystemTelemetry {
     nodeVersion?: string;
     activeConnections: number;
 }
+
 declare class SystemDbService {
+    static readonly ui: ServiceUISchema;
+    readonly ui: ServiceUISchema;
     private envStatus;
     private telemetry;
     private cluster;
@@ -59,6 +64,8 @@ declare const systemDbService: SystemDbService;
 
 type StorageListener = () => void;
 declare class StorageService {
+    static readonly ui: ServiceUISchema;
+    readonly ui: ServiceUISchema;
     private connections;
     private clusterConfig;
     private listeners;
@@ -131,6 +138,8 @@ interface IAuthStore {
 }
 
 declare class AuthService {
+    static readonly ui: ServiceUISchema;
+    readonly ui: ServiceUISchema;
     users: Map<string, UserAccount>;
     currentUser: Omit<UserAccount, 'passwordHash'> | null;
     token: string | null;
@@ -243,6 +252,30 @@ declare function updateWorkspace(store: any, workspaceId: string, updates: Parti
 declare function deleteWorkspace(store: any, workspaceId: string): Promise<boolean>;
 declare function setActiveWorkspace(store: any, workspaceId: string): void;
 
+/**
+ * @file auth.ui.ts
+ * @description Typed and versioned Service UI Schema for AuthService.
+ * Declares REQUIRED UI mode, canonical FLOKS asset bindings, and operation mappings.
+ */
+
+declare const AuthServiceUISchema: ServiceUISchema;
+
+/**
+ * @file storage.ui.ts
+ * @description Typed and versioned Service UI Schema for StorageService.
+ * Declares OPTIONAL UI mode and canonical FLOKS WorkspaceTilesMenu asset bindings.
+ */
+
+declare const StorageServiceUISchema: ServiceUISchema;
+
+/**
+ * @file systemDb.ui.ts
+ * @description Typed and versioned Service UI Schema for SystemDbService.
+ * Declares NONE requirement mode — system database configuration has no required frontend UI component.
+ */
+
+declare const SystemDbServiceUISchema: ServiceUISchema;
+
 declare const AuthClientServiceDefinition: ServiceDefinition;
 declare const AuthClientServiceFacade: {
     id: string;
@@ -252,6 +285,7 @@ declare const AuthClientServiceFacade: {
     deployment: "local";
     definition: ServiceDefinition<Record<string, unknown>, Record<string, unknown>>;
     service: AuthService;
+    ui: _kloks_contracts.ServiceUISchema;
     createInstance: () => _ultrst_armada_krnl.ServiceInstance<Record<string, unknown>, Record<string, unknown>>;
     execute: <TIn = unknown, TOut = unknown>(op: string, input?: TIn) => Promise<TOut>;
 };
@@ -264,6 +298,7 @@ declare const StorageClientServiceFacade: {
     deployment: "local";
     definition: ServiceDefinition<Record<string, unknown>, Record<string, unknown>>;
     service: StorageService;
+    ui: _kloks_contracts.ServiceUISchema;
     createInstance: () => _ultrst_armada_krnl.ServiceInstance<Record<string, unknown>, Record<string, unknown>>;
     execute: <TIn = unknown, TOut = unknown>(op: string, input?: TIn) => Promise<TOut>;
 };
@@ -276,6 +311,7 @@ declare const SystemDbClientServiceFacade: {
     deployment: "local";
     definition: ServiceDefinition<Record<string, unknown>, Record<string, unknown>>;
     service: SystemDbService;
+    ui: _kloks_contracts.ServiceUISchema;
     createInstance: () => _ultrst_armada_krnl.ServiceInstance<Record<string, unknown>, Record<string, unknown>>;
     execute: <TIn = unknown, TOut = unknown>(op: string, input?: TIn) => Promise<TOut>;
 };
@@ -331,4 +367,4 @@ interface ProtocolExposureHandle {
 declare function exposeServiceD(adapter?: ProtocolAdapter, port?: number): Promise<ProtocolExposureHandle>;
 declare const ServiceDFacade: ServiceFacade;
 
-export { AuthClientServiceDefinition, AuthClientServiceFacade, type AuthListener, AuthService, CLEAN_DATABASE_CLUSTER, type CounterState, DEFAULT_CONNECTIONS, type IAuthStore, type MathInput, type ProtocolExposureHandle, STORAGE_KEY_CONNECTIONS, ServiceADefinition, ServiceAFacade, ServiceBDefinition, ServiceBFacade, ServiceCDefinition, ServiceCFacade, ServiceDDefinition, ServiceDFacade, type ServiceFacade, StorageClientServiceDefinition, StorageClientServiceFacade, StorageService, SystemDbClientServiceDefinition, SystemDbClientServiceFacade, SystemDbService, type SystemEnvironmentStatus, type SystemTelemetry, type TelemetryEvents, authService, clearSession, createServiceB, createServiceC, createWorkspace, deleteWorkspace, exposeServiceD, fetchWorkspaces, loadDatabase, loginAdmin, loginUser, persistDatabase, register, restoreSession, setActiveWorkspace, setSession, storageService, systemDbService, updateWorkspace, verifyPassword };
+export { AuthClientServiceDefinition, AuthClientServiceFacade, type AuthListener, AuthService, AuthServiceUISchema, CLEAN_DATABASE_CLUSTER, type CounterState, DEFAULT_CONNECTIONS, type IAuthStore, type MathInput, type ProtocolExposureHandle, STORAGE_KEY_CONNECTIONS, ServiceADefinition, ServiceAFacade, ServiceBDefinition, ServiceBFacade, ServiceCDefinition, ServiceCFacade, ServiceDDefinition, ServiceDFacade, type ServiceFacade, StorageClientServiceDefinition, StorageClientServiceFacade, StorageService, StorageServiceUISchema, SystemDbClientServiceDefinition, SystemDbClientServiceFacade, SystemDbService, SystemDbServiceUISchema, type SystemEnvironmentStatus, type SystemTelemetry, type TelemetryEvents, authService, clearSession, createServiceB, createServiceC, createWorkspace, deleteWorkspace, exposeServiceD, fetchWorkspaces, loadDatabase, loginAdmin, loginUser, persistDatabase, register, restoreSession, setActiveWorkspace, setSession, storageService, systemDbService, updateWorkspace, verifyPassword };

package/packages/services/dist/index.js

@@ -1,6 +1,5 @@
-// ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.0/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js
+// ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.2/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js
 import http from "http";
-import { WebSocketServer, WebSocket } from "ws";
 var ServiceStateStore = class {
   state;
   listeners = /* @__PURE__ */ new Set();
@@ -745,9 +744,132 @@ function setActiveWorkspace(store, workspaceId) {
   }
 }
 
+// src/client-services/authService/auth.ui.ts
+var AuthServiceUISchema = {
+  schemaId: "kloks.service.auth.ui",
+  schemaVersion: "1.0.0",
+  serviceId: "kloks.service.auth",
+  requirementMode: "required",
+  pages: [
+    {
+      name: "Auth.ui",
+      description: "Canonical authentication page wrapper",
+      sections: [
+        {
+          name: "Auth.ui.LoginSection",
+          description: "Login and registration section backed by canonical FLOKS AuthPage",
+          assetRef: {
+            packageId: "@ultrst-armada/floks",
+            packageVersion: "^1.2.3",
+            exportPath: "ui",
+            assetId: "AuthPage",
+            assetVersion: "1.0.0"
+          },
+          components: [
+            {
+              name: "Auth.ui.LoginSection.AuthPage",
+              assetRef: {
+                packageId: "@ultrst-armada/floks",
+                packageVersion: "^1.2.3",
+                exportPath: "ui",
+                assetId: "AuthPage",
+                assetVersion: "1.0.0"
+              }
+            },
+            {
+              name: "Auth.ui.LoginSection.LoginModal",
+              assetRef: {
+                packageId: "@ultrst-armada/floks",
+                packageVersion: "^1.2.3",
+                exportPath: "ui",
+                assetId: "LoginModal",
+                assetVersion: "1.0.0"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  sections: [
+    {
+      name: "Auth.ui.LoginSection",
+      assetRef: {
+        packageId: "@ultrst-armada/floks",
+        packageVersion: "^1.2.3",
+        exportPath: "ui",
+        assetId: "AuthPage",
+        assetVersion: "1.0.0"
+      },
+      components: [
+        {
+          name: "Auth.ui.LoginSection.AuthPage",
+          assetRef: {
+            packageId: "@ultrst-armada/floks",
+            packageVersion: "^1.2.3",
+            exportPath: "ui",
+            assetId: "AuthPage",
+            assetVersion: "1.0.0"
+          }
+        }
+      ]
+    }
+  ],
+  components: [
+    {
+      name: "AuthPage",
+      assetRef: {
+        packageId: "@ultrst-armada/floks",
+        packageVersion: "^1.2.3",
+        exportPath: "ui",
+        assetId: "AuthPage",
+        assetVersion: "1.0.0"
+      }
+    },
+    {
+      name: "LoginModal",
+      assetRef: {
+        packageId: "@ultrst-armada/floks",
+        packageVersion: "^1.2.3",
+        exportPath: "ui",
+        assetId: "LoginModal",
+        assetVersion: "1.0.0"
+      }
+    }
+  ],
+  assetRefs: [
+    {
+      packageId: "@ultrst-armada/floks",
+      packageVersion: "^1.2.3",
+      exportPath: "ui",
+      assetId: "AuthPage",
+      assetVersion: "1.0.0"
+    },
+    {
+      packageId: "@ultrst-armada/floks",
+      packageVersion: "^1.2.3",
+      exportPath: "ui",
+      assetId: "LoginModal",
+      assetVersion: "1.0.0"
+    }
+  ],
+  operationBindings: [
+    {
+      operationId: "AuthClientService.login",
+      uiPath: "Auth.ui.LoginSection"
+    },
+    {
+      operationId: "AuthClientService.register",
+      uiPath: "Auth.ui.LoginSection"
+    }
+  ]
+};
+
 // src/client-services/authService/authService.ts
 var STORAGE_KEY_USER2 = "docustack_user_account";
 var AuthService = class {
+  static ui = AuthServiceUISchema;
+  ui = AuthServiceUISchema;
   users = /* @__PURE__ */ new Map();
   currentUser = null;
   token = null;
@@ -881,8 +1003,23 @@ var AuthService = class {
 };
 var authService = new AuthService();
 
+// src/client-services/systemDb.ui.ts
+var SystemDbServiceUISchema = {
+  schemaId: "kloks.service.systemDb.ui",
+  schemaVersion: "1.0.0",
+  serviceId: "kloks.service.systemDb",
+  requirementMode: "none",
+  pages: [],
+  sections: [],
+  components: [],
+  assetRefs: [],
+  operationBindings: []
+};
+
 // src/client-services/systemDbService.ts
 var SystemDbService = class {
+  static ui = SystemDbServiceUISchema;
+  ui = SystemDbServiceUISchema;
   envStatus = {
     databaseUrlConfigured: false,
     databaseUrlMasked: null,
@@ -1048,8 +1185,100 @@ var CLEAN_DATABASE_CLUSTER = {
 };
 var DEFAULT_CONNECTIONS = [];
 
+// src/client-services/storageService/storage.ui.ts
+var StorageServiceUISchema = {
+  schemaId: "kloks.service.storage.ui",
+  schemaVersion: "1.0.0",
+  serviceId: "kloks.service.storage",
+  requirementMode: "optional",
+  pages: [
+    {
+      name: "Storage.ui",
+      description: "Workspace and storage connection page",
+      sections: [
+        {
+          name: "Storage.ui.TilesSection",
+          description: "Workspace isolation and storage tiles menu",
+          assetRef: {
+            packageId: "@ultrst-armada/floks",
+            packageVersion: "^1.2.3",
+            exportPath: "ui",
+            assetId: "WorkspaceTilesMenu",
+            assetVersion: "1.0.0"
+          },
+          components: [
+            {
+              name: "Storage.ui.TilesSection.WorkspaceTilesMenu",
+              assetRef: {
+                packageId: "@ultrst-armada/floks",
+                packageVersion: "^1.2.3",
+                exportPath: "ui",
+                assetId: "WorkspaceTilesMenu",
+                assetVersion: "1.0.0"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  sections: [
+    {
+      name: "Storage.ui.TilesSection",
+      assetRef: {
+        packageId: "@ultrst-armada/floks",
+        packageVersion: "^1.2.3",
+        exportPath: "ui",
+        assetId: "WorkspaceTilesMenu",
+        assetVersion: "1.0.0"
+      },
+      components: [
+        {
+          name: "Storage.ui.TilesSection.WorkspaceTilesMenu",
+          assetRef: {
+            packageId: "@ultrst-armada/floks",
+            packageVersion: "^1.2.3",
+            exportPath: "ui",
+            assetId: "WorkspaceTilesMenu",
+            assetVersion: "1.0.0"
+          }
+        }
+      ]
+    }
+  ],
+  components: [
+    {
+      name: "WorkspaceTilesMenu",
+      assetRef: {
+        packageId: "@ultrst-armada/floks",
+        packageVersion: "^1.2.3",
+        exportPath: "ui",
+        assetId: "WorkspaceTilesMenu",
+        assetVersion: "1.0.0"
+      }
+    }
+  ],
+  assetRefs: [
+    {
+      packageId: "@ultrst-armada/floks",
+      packageVersion: "^1.2.3",
+      exportPath: "ui",
+      assetId: "WorkspaceTilesMenu",
+      assetVersion: "1.0.0"
+    }
+  ],
+  operationBindings: [
+    {
+      operationId: "StorageClientService.getConnections",
+      uiPath: "Storage.ui.TilesSection"
+    }
+  ]
+};
+
 // src/client-services/storageService/storageService.ts
 var StorageService = class {
+  static ui = StorageServiceUISchema;
+  ui = StorageServiceUISchema;
   connections = [];
   clusterConfig = CLEAN_DATABASE_CLUSTER;
   listeners = /* @__PURE__ */ new Set();
@@ -1288,6 +1517,7 @@ var AuthClientServiceFacade = {
   deployment: "local",
   definition: AuthClientServiceDefinition,
   service: authService,
+  ui: AuthServiceUISchema,
   createInstance: () => createService(AuthClientServiceDefinition),
   execute: async (op, input) => {
     await authClientInstance.start();
@@ -1315,6 +1545,7 @@ var StorageClientServiceFacade = {
   deployment: "local",
   definition: StorageClientServiceDefinition,
   service: storageService,
+  ui: StorageServiceUISchema,
   createInstance: () => createService(StorageClientServiceDefinition),
   execute: async (op, input) => {
     await storageClientInstance.start();
@@ -1347,6 +1578,7 @@ var SystemDbClientServiceFacade = {
   deployment: "local",
   definition: SystemDbClientServiceDefinition,
   service: systemDbService,
+  ui: SystemDbServiceUISchema,
   createInstance: () => createService(SystemDbClientServiceDefinition),
   execute: async (op, input) => {
     await systemDbClientInstance.start();
@@ -1557,6 +1789,7 @@ export {
   AuthClientServiceDefinition,
   AuthClientServiceFacade,
   AuthService,
+  AuthServiceUISchema,
   CLEAN_DATABASE_CLUSTER,
   DEFAULT_CONNECTIONS,
   STORAGE_KEY_CONNECTIONS,
@@ -1571,9 +1804,11 @@ export {
   StorageClientServiceDefinition,
   StorageClientServiceFacade,
   StorageService,
+  StorageServiceUISchema,
   SystemDbClientServiceDefinition,
   SystemDbClientServiceFacade,
   SystemDbService,
+  SystemDbServiceUISchema,
   authService,
   clearSession,
   createServiceB,

package/packages/services/kloks.manifest.json

@@ -1,8 +1,69 @@
 {
   "$schema": "https://skipo.dev/schemas/kloks-manifest.v1.json",
   "package": "@kloks/services",
+  "packageType": "backend",
   "version": "1.0.0",
   "services": [
+    {
+      "id": "kloks.service.auth",
+      "name": "AuthClientService",
+      "version": "1.0.0",
+      "description": "Canonical user and workspace authentication service.",
+      "backend": {
+        "package": "@kloks/services",
+        "export": "AuthClientServiceFacade",
+        "facade": "AuthClientServiceFacade"
+      },
+      "ui": {
+        "requirementMode": "required",
+        "schema": "AuthServiceUISchema",
+        "page": "Auth.ui",
+        "section": "Auth.ui.LoginSection",
+        "component": "AuthPage",
+        "package": "@ultrst-armada/floks",
+        "export": "ui"
+      },
+      "modes": ["client", "backend"],
+      "targets": { "backend": ["BackendFacade.services"] }
+    },
+    {
+      "id": "kloks.service.storage",
+      "name": "StorageClientService",
+      "version": "1.0.0",
+      "description": "User storage connections and cluster persistence service.",
+      "backend": {
+        "package": "@kloks/services",
+        "export": "StorageClientServiceFacade",
+        "facade": "StorageClientServiceFacade"
+      },
+      "ui": {
+        "requirementMode": "optional",
+        "schema": "StorageServiceUISchema",
+        "page": "Storage.ui",
+        "section": "Storage.ui.TilesSection",
+        "component": "WorkspaceTilesMenu",
+        "package": "@ultrst-armada/floks",
+        "export": "ui"
+      },
+      "modes": ["client", "backend"],
+      "targets": { "backend": ["BackendFacade.services"] }
+    },
+    {
+      "id": "kloks.service.systemDb",
+      "name": "SystemDbClientService",
+      "version": "1.0.0",
+      "description": "System database environment and cluster health monitoring.",
+      "backend": {
+        "package": "@kloks/services",
+        "export": "SystemDbClientServiceFacade",
+        "facade": "SystemDbClientServiceFacade"
+      },
+      "ui": {
+        "requirementMode": "none"
+      },
+      "modes": ["client", "backend"],
+      "targets": { "backend": ["BackendFacade.services"] }
+    },
     {
       "id": "service-a",
       "name": "Canonical Service A (Pure)",

package/packages/services/package.json

@@ -20,14 +20,15 @@
     }
   },
   "scripts": {
-    "build": "tsup src/index.ts --format esm --dts --clean --external @kloks/state-graph --external ws",
+    "build": "tsup src/index.ts --format esm --dts --clean --external @kloks/state-graph --external @kloks/contracts --external ws",
     "typecheck": "tsc --noEmit",
     "clean": "rm -rf dist"
   },
   "dependencies": {
+    "@kloks/contracts": "workspace:*",
     "@kloks/state-graph": "workspace:*"
   },
   "devDependencies": {
-    "@ultrst-armada/krnl": "^1.0.0"
+    "@ultrst-armada/krnl": "^1.0.2"
   }
 }

package/packages/state-graph/dist/index.js

@@ -6,6 +6,22 @@ import {
   ViewHandle,
   instantiateSubgraph
 } from "./chunk-S22PMERU.js";
+import {
+  AttractionEngine,
+  GhostInferenceEngine,
+  GhostLayoutResolver,
+  GhostTracePathBuilder,
+  calculateSocketCoordinates,
+  getBeamPoints,
+  useMagneticTraces
+} from "./chunk-JXDJZSFW.js";
+import "./chunk-RHRXPY2U.js";
+import {
+  ConnectionRuleStore,
+  HandleTypeRegistry,
+  WireTypeRegistry,
+  initializeDefaultGraphRules
+} from "./chunk-TZOL3RN7.js";
 import {
   BullMQAdapter,
   CommandBus,
@@ -13,7 +29,16 @@ import {
   SkipoExecutionEngine,
   useCommand
 } from "./chunk-ZTHBPV24.js";
-import "./chunk-RHRXPY2U.js";
+import "./chunk-Q5I42UX7.js";
+import {
+  LifecycleCycleError,
+  LifecycleGraph,
+  SKIPO_STATE,
+  SkipoStateEngine,
+  useLifecycleScope,
+  useSkipoBind,
+  useSkipoState
+} from "./chunk-SHIBCPGQ.js";
 import {
   CommandApi,
   GhostStore,
@@ -28,21 +53,6 @@ import {
   CustomViewWindow,
   DEFAULT_GRAPH_SETTINGS
 } from "./chunk-KG6QYS26.js";
-import {
-  AttractionEngine,
-  GhostInferenceEngine,
-  GhostLayoutResolver,
-  GhostTracePathBuilder,
-  calculateSocketCoordinates,
-  getBeamPoints,
-  useMagneticTraces
-} from "./chunk-JXDJZSFW.js";
-import {
-  ConnectionRuleStore,
-  HandleTypeRegistry,
-  WireTypeRegistry,
-  initializeDefaultGraphRules
-} from "./chunk-TZOL3RN7.js";
 import {
   AutoSolidify,
   SpatialEngine,
@@ -56,20 +66,9 @@ import {
 import {
   CompatibilityMatrix
 } from "./chunk-ISFNY7EZ.js";
-import "./chunk-Q5I42UX7.js";
-import {
-  LifecycleCycleError,
-  LifecycleGraph,
-  SKIPO_STATE,
-  SkipoStateEngine,
-  useLifecycleScope,
-  useSkipoBind,
-  useSkipoState
-} from "./chunk-SHIBCPGQ.js";
 import "./chunk-3RG5ZIWI.js";
 
-// ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.0/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js
-import { WebSocketServer, WebSocket } from "ws";
+// ../../node_modules/.pnpm/@ultrst-armada+krnl@1.0.2/node_modules/@ultrst-armada/krnl/packages/core/dist/index.js
 var ServiceStateStore = class {
   state;
   listeners = /* @__PURE__ */ new Set();

package/packages/state-graph/package.json

@@ -68,6 +68,6 @@
     }
   },
   "devDependencies": {
-    "@ultrst-armada/krnl": "^1.0.0"
+    "@ultrst-armada/krnl": "^1.0.2"
   }
 }