unoverse 0.1.172 → 0.1.174

package/operator/lib/db-verify.sh

@@ -108,6 +108,7 @@ cmd_db_verify() {
       dictionary_regions: [
         "region_id", "workflow_id", "depth", "name", "description", "name_locked",
         "locked_at", "locked_by", "stage", "stage_set_by", "needs_review",
+        "skills", "skills_set_by", "skills_set_at",
         "derived_from", "first_seen", "last_seen", "closed_at"
       ],
       dictionary_content_chunks: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "unoverse",
-  "version": "0.1.172",
+  "version": "0.1.174",
   "description": "The Unoverse front door — create a Studio project, a universe, or a client app, and launch Studio.",
   "license": "SEE LICENSE IN README.md",
   "type": "module",

package/vendor/base/lint/design/defs.mjs

@@ -1,5 +1,5 @@
 /**
- * Definition file formats: how an rx definition is named, found and parsed.
+ * Definition file formats: how a design definition is named, found and parsed.
  *
  * Mirrors the server's fsCache.ts, deliberately. A definition is `.yaml` or `.json`, and
  * the linter must agree with the loader about which file IS the definition, or it lints a

package/vendor/base/lint/design/file.mjs

@@ -34,7 +34,7 @@ function checkStateOrder(order, rootFolder, file, includeLayouts = false) {
   const onDisk = new Set([...stateNames, ...(includeLayouts ? dirNames("layouts") : [])]);
   for (const name of order)
     if (typeof name === "string" && !onDisk.has(name))
-      report("error", file, `stateOrder lists "${name}" but no states/${name}${includeLayouts ? ` or layouts/${name}` : ""} definition exists (docs/design/${includeLayouts ? "05" : "03"})`);
+      report("error", file, `stateOrder lists "${name}" but no states/${name}${includeLayouts ? ` or layouts/${name}` : ""} definition exists (docs.unoverse.ai/design/${includeLayouts ? "apps" : "components"})`);
   // Only STATES must appear in stateOrder to lock the picker order; the default layout is
   // legitimately omitted, so never warn on layouts.
   for (const name of stateNames)
@@ -239,7 +239,7 @@ function lintFile(file) {
             }
             for (const c of list)
               if (comps && !comps.has(String(c).toLowerCase()))
-                report("error", file, `preview."${state}" names unknown component "${c}". No match in rx/components/ or this org's components/ (org-privacy: another org's components are out of reach; lookup is case-insensitive)`);
+                report("error", file, `preview."${state}" names unknown component "${c}". No match in design/marketplace/components/ or this org's components/ (org-privacy: another org's components are out of reach; lookup is case-insensitive)`);
           }
         }
       }
@@ -488,6 +488,14 @@ function lintFile(file) {
           if (typeof arrival !== "string")
             report("error", file, `a faced component must declare its base state — a v2 state.view tree \`initial\`, or (legacy) manifest.defaultState / state.defaultState (docs.unoverse.ai/design/components)`);
         }
+        // A tree DECLARES its order, so an authored stateOrder beside one is a second source
+        // of truth that can silently disagree with it. Five docs call this form legacy and
+        // nothing enforced it, so a component kept running on one and never heard a word.
+        // The old check only fired when a states/ FOLDER existed, which a fragment-based
+        // component does not have (docs/doc-control §Guards: enforce rules as tests).
+        if (viewTree && json.stateOrder !== undefined)
+          report("error", file, `authored "stateOrder" beside a "state.view" tree. The tree declares the order: nest these as substates and delete the list (docs.unoverse.ai/design/state)`);
+
         if (stateFiles.length) {
           const order = Array.isArray(json.stateOrder) ? [...json.stateOrder].sort() : null;
           if (!order || !order.length)

package/vendor/base/lint/design/index.mjs

@@ -1,5 +1,5 @@
 /**
- * The rx definitions linter, as a LIBRARY. Rules in, findings out.
+ * The design definitions linter, as a LIBRARY. Rules in, findings out.
  *
  * Sibling of ../nodes/ and deliberately SEPARATE: this one knows the closed primitive set,
  * the closed style vocabulary, token-only values and Switch discriminants. Merging the two
@@ -9,7 +9,7 @@
  * `yaml` in. Worth keeping now that it sits beside a package that does have dependencies.
  *
  * THE WHOLE BODY IS INSIDE `lintDefinitions`, on purpose. It was a script whose top-level
- * constants derived from the rx root, and two bare blocks that RAN RULES at import time.
+ * constants derived from the design root, and two bare blocks that RAN RULES at import time.
  * As a library that is wrong twice: findings would accumulate between runs, and rules would
  * fire before anyone asked. Function scope makes both impossible rather than merely unlikely.
  *
@@ -26,7 +26,7 @@ import { makeTokensForFile } from "./tokens.mjs";
 
 /**
  * Lint every definition under `designRoot`. Prints nothing, exits nothing.
- * A missing rx folder is REPORTED rather than thrown, so callers get one shape of answer.
+ * A missing design/ folder is REPORTED rather than thrown, so callers get one shape of answer.
  *
  * `options.overlay` maps an absolute path to text that STANDS IN for what is on disk.
  * Studio's editor lints what the developer has typed before it is saved, and the only
@@ -44,19 +44,19 @@ export function lintDefinitions(designRoot, options = {}) {
   };
   const candidates = designRoot ? [resolve(designRoot)] : [resolve("apps/unoverse/design"), resolve("design")];
 
-  /** The monorepo's shapes: the design system at `rx/marketplace/`, or the legacy one
+  /** The monorepo's shapes: the design system at `design/marketplace/`, or the legacy one
    *  with `components/` and `atoms/` loose at the root. */
   const holdsDesignSystem = (p) =>
     existsSync(join(p, "marketplace")) || existsSync(join(p, "components")) || existsSync(join(p, "atoms"));
 
   /**
-   * A DEVELOPER'S rx/ HOLDS ONLY ORG FOLDERS, and looking for the monorepo's shapes there
-   * finds nothing. `rx/<org>/{components,styles,templates}` is what Studio scaffolds and
+   * A DEVELOPER'S design/ HOLDS ONLY ORG FOLDERS, and looking for the monorepo's shapes there
+   * finds nothing. `design/<org>/{components,styles,apps}` is what Studio scaffolds and
    * the only layout a developer ever has, because the design system is INSTALLED rather
-   * than authored (sync-starter.sh keeps `rx/marketplace` out of a project on purpose).
+   * than authored (sync-starter.sh keeps `design/marketplace` out of a project on purpose).
    *
    * So a project could not be linted, and since publishing lints first, it could not be
-   * published either: "no rx/ folder here", naming the rx/ folder it was standing in.
+   * published either: "no design/ folder here", naming the folder it was standing in.
    */
   const holdsOrgs = (p) => {
     if (!existsSync(p)) return false;
@@ -75,36 +75,36 @@ export function lintDefinitions(designRoot, options = {}) {
       });
   };
 
-  const RX = candidates.find((p) => holdsDesignSystem(p) || holdsOrgs(p));
-  if (!RX)
+  const DESIGN_ROOT = candidates.find((p) => holdsDesignSystem(p) || holdsOrgs(p));
+  if (!DESIGN_ROOT)
     return {
-      problems: [{ level: "error", file: candidates[0], msg: `no rx/ folder here (looked in: ${candidates.join(", ")})` }],
+      problems: [{ level: "error", file: candidates[0], msg: `no design/ folder here (looked in: ${candidates.join(", ")})` }],
       homes: [],
     };
 
 // ── tree layout ──
-// New layout: rx/marketplace/{atoms,components,styles} + one top-level folder per
-// org (rx/<org>/). Legacy layout: components/ + atoms/ at the root, orgs under rx/orgs/.
+// New layout: design/marketplace/{atoms,components,styles} + one top-level folder per
+// org (design/<org>/). Legacy layout: components/ + atoms/ at the root, orgs under design/orgs/.
 // The DESIGN SYSTEM is the primary lint target; org folders get the SAME generic
 // checks — nothing here may key on a specific org's name.
-// WHERE THE DESIGN SYSTEM ACTUALLY IS. `rx/marketplace/` exists in this monorepo and is
+// WHERE THE DESIGN SYSTEM ACTUALLY IS. `design/marketplace/` exists in this monorepo and is
   // deliberately absent from a developer's project (sync-starter.sh): the platform installs
   // @unoverse-platform/marketplace, whose `definitions/` bundle carries components, atoms
   // AND styles (bundle-defs.mjs). All three matter — the space-scale check reads
   // styles/base/spacing, so a fallback finding only components would build a PARTIAL scale
   // and reject valid steps, reporting false errors on correct work. Mirrors definitions.ts.
   const DS = (() => {
-    const onDisk = join(RX, "marketplace");
+    const onDisk = join(DESIGN_ROOT, "marketplace");
     if (existsSync(onDisk)) return onDisk;
-    const nodesHome = resolve(RX, "..", "nodes");
+    const nodesHome = resolve(DESIGN_ROOT, "..", "nodes");
     for (const c of [
       join(nodesHome, "marketplace", "definitions"),
-      join(resolve(RX, "..", "plugins"), "node_modules", "@unoverse-platform", "marketplace", "definitions"),
+      join(resolve(DESIGN_ROOT, "..", "plugins"), "node_modules", "@unoverse-platform", "marketplace", "definitions"),
     ])
       if (existsSync(c)) return c;
-    return RX; // none anywhere: shared refs will not resolve, and the findings will say so
+    return DESIGN_ROOT; // none anywhere: shared refs will not resolve, and the findings will say so
   })();
-const legacyOrgsDir = join(RX, "orgs");
+const legacyOrgsDir = join(DESIGN_ROOT, "orgs");
 const orgDirs = (() => {
   if (existsSync(legacyOrgsDir))
     return readdirSync(legacyOrgsDir)
@@ -112,16 +112,16 @@ const orgDirs = (() => {
       .map((e) => join(legacyOrgsDir, e))
       .filter((d) => statSync(d).isDirectory());
   // THE LEGACY LAYOUT, where the design system IS the root: `components/` and `atoms/`
-  // sit directly in rx/, so listing children here would lint "components" as an org.
+  // sit directly in design/, so listing children here would lint "components" as an org.
   //
-  // NOT `DS === RX`, which was the same test until the design system stopped being
-  // guaranteed. DS falls back to RX when no design system is found ANYWHERE, which is the
+  // NOT `DS === DESIGN_ROOT`, which was the same test until the design system stopped being
+  // guaranteed. DS falls back to DESIGN_ROOT when no design system is found ANYWHERE, which is the
   // ordinary state of a developer's project — so that test read "this is the legacy
   // layout" and returned no orgs, silently linting nothing at all.
-  if (existsSync(join(RX, "components")) || existsSync(join(RX, "atoms"))) return [];
-  return readdirSync(RX)
+  if (existsSync(join(DESIGN_ROOT, "components")) || existsSync(join(DESIGN_ROOT, "atoms"))) return [];
+  return readdirSync(DESIGN_ROOT)
     .filter((e) => !e.startsWith(".") && e !== "marketplace" && e !== "_schema")
-    .map((e) => join(RX, e))
+    .map((e) => join(DESIGN_ROOT, e))
     .filter((d) => statSync(d).isDirectory());
 })();
 
@@ -449,7 +449,7 @@ const refResolves = (ref, file) => {
  *
  * Ref lookup above is case-insensitive on purpose, and the marketplace is not: an item is
  * fetched as `items/<kind>/<key>.json` over HTTP, off a case-sensitive host. So a name that
- * disagrees with itself resolves forever in `rx/` and 404s the moment anyone installs it.
+ * disagrees with itself resolves forever in `design/` and 404s the moment anyone installs it.
  *
  * That is not hypothetical. 2026-08-06: twelve atoms were unreachable from every universe
  * because git held `Avatar.json` while the build wrote `avatar.json`. macOS is
@@ -457,7 +457,7 @@ const refResolves = (ref, file) => {
  * served what git held. The error surfaced as `could not fetch atom/avatar (HTTP 404)` in
  * the Installed view, months after the cause.
  *
- * Nothing in `rx/` could have caught it, because `rx/` was correct. What was missing was a
+ * Nothing in `design/` could have caught it, because `design/` was correct. What was missing was a
  * rule that the key agrees with itself EXACTLY, which is what this checks:
  *
  *   filename === `name:` === every Ref that points at it
@@ -494,7 +494,7 @@ const canonicalRef = (ref) => canonicalKeys.get(ref.toLowerCase()) ?? null;
  * That silence has cost real screens. `form-toggle` declares `on` and `description`; a
  * form wrote `props: { value: … }` and `with: { help: … }`, so the switch bound to nothing
  * and the sub-line simply never appeared. Everything rendered, nothing was wrong to look
- * at, and the control did not move. Nothing in rx/ could catch it because every node was
+ * at, and the control did not move. Nothing in design/ could catch it because every node was
  * structurally valid.
  *
  * So the keys are checked against the atom's own `props` block. Read lazily and cached:
@@ -591,7 +591,7 @@ for (const orgDir of orgDirs) {
       const name = (statSync(p).isDirectory() ? e : isDefFile(e) ? defName(e) : null)?.toLowerCase();
       if (!name) continue;
       if (out.has(name))
-        report("error", p, `component name "${name}" already exists at ${relative(RX, out.get(name))}. Names are UNIQUE within a home; rename one`);
+        report("error", p, `component name "${name}" already exists at ${relative(DESIGN_ROOT, out.get(name))}. Names are UNIQUE within a home; rename one`);
       else out.set(name, p);
     }
     return out;
@@ -601,7 +601,7 @@ for (const orgDir of orgDirs) {
     for (const [name, p] of namesIn(join(orgDir, "components"))) {
       const shadowed = marketplaceNames.get(name);
       if (shadowed)
-        report("error", p, `component name "${name}" shadows the marketplace component at ${relative(RX, shadowed)}. An org may never shadow a marketplace name (bare refs must stay unambiguous); rename the org component`);
+        report("error", p, `component name "${name}" shadows the marketplace component at ${relative(DESIGN_ROOT, shadowed)}. An org may never shadow a marketplace name (bare refs must stay unambiguous); rename the org component`);
     }
   }
 }
@@ -635,7 +635,7 @@ for (const orgDir of orgDirs) {
 // A component may run server-side code at a platform fire point, and the safety of that
 // rests on the manifest and the thing that runs agreeing. Both halves are checked here so
 // a bad declaration is caught in the terminal and at publish, not by silence at run time.
-// Mirrors server/tests/rx/lifecycle-declaration.test.ts (UNOVERSE_AUTHORING.md §3c).
+// Mirrors apps/unoverse/server/tests/design/lifecycle-declaration.test.ts (UNOVERSE_AUTHORING.md §3c).
 const KNOWN_LIFECYCLES = new Set(["onStart", "onEnterView"]);
 const PHASES_WITH_LAYOUTS = new Set(["onEnterView"]); // phases that fire per VIEW
 const PLATFORM_HANDLERS = new Set(["getDetail"]); // named handlers needing no file
@@ -648,7 +648,7 @@ const LATCH_KEYS = new Set(["title", "background", "color"]);
 // silently disable every rule after it.
 const credentialDefs = new Set();
 {
-  const nodesHome = resolve(RX, "..", "nodes");
+  const nodesHome = resolve(DESIGN_ROOT, "..", "nodes");
   try {
     for (const pkg of readdirSync(nodesHome)) {
       try {
@@ -658,7 +658,7 @@ const credentialDefs = new Set();
       }
     }
   } catch {
-    /* no nodes tree beside rx: the rule cannot judge, so it stays quiet */
+    /* no nodes tree beside design/: the rule cannot judge, so it stays quiet */
   }
 }
 
@@ -847,8 +847,8 @@ function appSizesForFile(file) {
   return appSizesCache.get(home);
 }
 
-// The universal component names (rx/components/*, case-insensitive) — for validating a
-// template manifest's `preview` map. null = the file is not under an rx tree.
+// The universal component names (design/marketplace/components/*, case-insensitive) — for
+// validating an app manifest's `preview` map. null = the file is not under a design tree.
 const componentNamesCache = new Map();
 // Components an ORG's template may reference: the marketplace tier + that org's OWN
 // components — never another org's (org-privacy). Cached per org.
@@ -873,7 +873,7 @@ function componentNamesForFile(file) {
   // The run context: everything the extracted rule modules close over. Built here so it
   // cannot outlive the run, and passed once rather than threaded as ten parameters.
   const ctx = {
-    RX, DS, orgDirs, report, spaceSteps, stepList, checkDimension, checkToken, checkCondition,
+    DESIGN_ROOT, DS, orgDirs, report, spaceSteps, stepList, checkDimension, checkToken, checkCondition,
     appSizesForFile, componentNamesForFile, refResolves, canonicalRef, declaredProps, atomsDirExists,
     isFixture, isHook, isManifest, isAppPath, defRoot, readText,
   };
@@ -881,7 +881,7 @@ function componentNamesForFile(file) {
   const lintFile = makeLintFile({ ...ctx, walkNode });
 
   for (const home of homes) for (const f of jsonFiles(home.dir)) lintFile(f);
-  return { problems, homes, designRoot: RX, designSystem: DS };
+  return { problems, homes, designRoot: DESIGN_ROOT, designSystem: DS };
 }
 
 /** True when anything would fail a build. Warnings and hints inform, errors stop. */

package/vendor/base/lint/design/tokens.mjs

@@ -18,7 +18,7 @@
  * the marketplace foundation's `base` + `semantic` first, then the org's ON TOP, per token
  * — an org omits a token to inherit it. Themes are UNIONED rather than resolved one at a
  * time, because a name that resolves under `dark` is legitimate work; per-theme parity is
- * a different rule with its own guard (server/tests/rx/theme-contract.test.ts).
+ * a different rule with its own guard (apps/unoverse/server/tests/design/theme-contract.test.ts).
  *
  * UNREADABLE IS NOT EMPTY. A developer's project has no design system on disk — it is
  * installed, not authored — so the foundation half cannot be read and only the org's own
@@ -88,7 +88,7 @@ function buildTokens(dsStyles, homeStyles) {
    *
    *  - across a home's own themes, because a name only `dark` defines is real work, not a
    *    typo (whether every theme defines every name is a DIFFERENT rule, guarded by
-   *    server/tests/rx/theme-contract.test.ts — this one must not double as a weaker copy);
+   *    apps/unoverse/server/tests/design/theme-contract.test.ts — this one must not double as a weaker copy);
    *  - the foundation's underneath, because the colour contract is the shared one every
    *    org is written against. An org that has no themes folder of its own would otherwise
    *    read as "no colours exist", and the rule would report every colour it uses.

package/vendor/base/lint/design/vocabulary.mjs

@@ -1,7 +1,7 @@
 /**
  * The CLOSED SETS. This file is the linter's ground truth.
  *
- * Mirrors rx/_schema/unoverse.schema.json and the server guards, and UNOVERSE_CONFORMANCE
+ * Mirrors apps/unoverse/design/_schema/unoverse.schema.json and the server guards, and UNOVERSE_CONFORMANCE
  * §5 makes keeping them equal a maintenance rule: "One source for each closed set... Keep
  * them equal or they disagree silently."
  *
@@ -10,12 +10,62 @@
  * without extending the schema and the SDK in the same change.
  */
 
-// ── ground truth (mirrors rx/_schema/unoverse.schema.json + server guards) ──
+// ── ground truth (mirrors design/_schema/unoverse.schema.json + server guards) ──
 export const PRIMITIVES = new Set([
   "Box", "Stack", "Row", "Column", "Each", "Switch", "ComponentSlot", "Timeline",
   "Text", "Image", "Button", "Input", "Select", "Markdown", "Skeleton", "Icon", "Ref", "Orb",
 ]);
 export const CONDITION_KEYS = new Set(["field", "eq", "ne", "in"]);
+
+/**
+ * WHAT EACH PRIMITIVE IS (UNOVERSE_CONFORMANCE §2a, UNOVERSE_PRIMITIVE_CONTRACT.md).
+ *
+ * Until 2026-08-23 nothing stated this. Every node shared one bag of 36 optional properties,
+ * so `{ type: "Image", bind: { value: photo } }` saved, linted, published and drew nothing —
+ * the silent class behind "the card streams its title but keeps its mock image".
+ *
+ * Merged from three sources: `core/types.ts` JSDoc (25 of 32 properties already named their
+ * owner in prose, where no tool could read it), the renderer (the only authority on which
+ * `bind` keys are consumed), and what shipped definitions actually use — types.ts was
+ * missing nine properties in live use, because YAML never meets a TypeScript interface.
+ *
+ * `packages/sdk/conformance/tools/build-primitive-schema.mjs` reads THIS to emit the JSON
+ * Schema halves, so the editor squiggle and the publish gate cannot disagree.
+ */
+export const UNIVERSAL_PROPS = new Set([
+  // read for every node before dispatch; `brief` rides the tree for the composer
+  "type", "style", "visibleWhen", "bind", "action", "analytics", "skeleton", "brief", "$include",
+]);
+
+export const PRIMITIVE_PROPS = {
+  Box: ["children", "autoScroll", "revealOnStick", "selection", "appWidth"],
+  Stack: ["children", "autoScroll", "revealOnStick", "appWidth"],
+  Row: ["children", "autoScroll", "revealOnStick", "appWidth"],
+  Column: ["children", "autoScroll", "revealOnStick", "appWidth"],
+  Text: ["value"],
+  Image: ["src", "alt"],
+  Markdown: ["value", "inheritLinkColor"],
+  Icon: ["icon", "name"],
+  Skeleton: ["variant"],
+  Orb: ["state", "size"],
+  Button: ["children", "value", "label", "icon", "disabledWhen"],
+  Input: ["placeholder", "inputType", "disabledWhen", "maxLength", "multiline", "rows",
+          "inputMode", "autoComplete", "advanceOnFill"],
+  Select: ["placeholder", "options", "disabledWhen"],
+  Each: ["template", "app", "items"],
+  Switch: ["on", "cases", "fallback"],
+  Ref: ["ref", "props", "with", "children", "name"],
+  ComponentSlot: ["select", "frame", "fallback", "pinned", "appWidth"],
+  Timeline: ["user", "assistant", "userData", "assistantData", "autoScroll"],
+};
+
+/** Which `bind` keys each primitive's view actually reads. Absent = the view reads the whole
+ *  bind object (Orb), so any key is legitimate. */
+export const PRIMITIVE_BINDS = {
+  Text: ["value"], Image: ["src", "alt"], Markdown: ["value"], Icon: ["name"],
+  Button: ["label"], Input: ["value", "placeholder"], Select: ["options", "value"],
+  Each: ["items"],
+};
 // the portable style vocabulary — every key the SDK interpreter maps (sdk/style.ts).
 // Each is a neutral intent every native renderer (iOS/Android/RN/Flutter) implements;
 // an unknown key is a typo or a web-ism that renders nowhere.

package/vendor/base/lint/design/walk.mjs

@@ -14,7 +14,7 @@
  */
 import { existsSync, statSync, readdirSync, readFileSync } from "node:fs";
 import { join, dirname, basename, relative, sep } from "node:path";
-import { PRIMITIVES, CONDITION_KEYS, STYLE_KEYS, RAW_VALUE, CHILD_NODE_KEYS, PARTIAL_DIRS, DIMENSION_KEYS } from "./vocabulary.mjs";
+import { PRIMITIVES, CONDITION_KEYS, STYLE_KEYS, RAW_VALUE, CHILD_NODE_KEYS, PARTIAL_DIRS, DIMENSION_KEYS, UNIVERSAL_PROPS, PRIMITIVE_PROPS, PRIMITIVE_BINDS } from "./vocabulary.mjs";
 import { isDefFile, defName, defPath, readDef } from "./defs.mjs";
 
 export function makeWalkNode(ctx) {
@@ -39,6 +39,26 @@ function walkNode(node, file, root, widthCap = null, isLayoutRoot = false) {
   else if (!PRIMITIVES.has(t))
     report("error", file, `unknown primitive "${t}". The set is closed; compose, don't invent (docs.unoverse.ai/design/sdui-and-mcp-apps)`);
 
+  // WHAT THIS PRIMITIVE IS (UNOVERSE_CONFORMANCE §2a). Before this existed, every node
+  // shared one bag of 36 optional properties, so a wrong field name was accepted by the
+  // schema AND the lint and only showed up as a blank on screen. A wrong name is never a
+  // judgment call, so this is an error rather than a warning.
+  else if (PRIMITIVE_PROPS[t]) {
+    const own = PRIMITIVE_PROPS[t];
+    for (const k of Object.keys(node))
+      if (!UNIVERSAL_PROPS.has(k) && !own.includes(k))
+        report("error", file, `${t} has no "${k}". It reads ${own.length ? own.map((o) => `"${o}"` ).join(", ") : "no properties of its own"} (docs.unoverse.ai/reference/primitives)`);
+
+    // `bind` maps a target onto a data field, and only some targets are read. Binding a
+    // target the view never looks at is the silent failure this whole rule exists for:
+    // the field streams in correctly and the element keeps drawing its preview default.
+    const reads = PRIMITIVE_BINDS[t];
+    if (reads && node.bind && typeof node.bind === "object" && !Array.isArray(node.bind))
+      for (const k of Object.keys(node.bind))
+        if (!reads.includes(k))
+          report("error", file, `${t} never reads "bind.${k}", so the value would arrive and render nothing. It reads ${reads.map((r) => `"bind.${r}"`).join(", ")} (docs.unoverse.ai/reference/primitives)`);
+  }
+
   if (t === "Switch") {
     if (typeof node.on !== "string" || !node.cases || typeof node.cases !== "object")
       report("error", file, `Switch needs "on" (the discriminant field) + "cases" (docs.unoverse.ai/design/state)`);
@@ -64,7 +84,7 @@ function walkNode(node, file, root, widthCap = null, isLayoutRoot = false) {
       report("error", file, `Ref "${node.ref}". No matching atom, shared component, or own-org component (bare, or "<org>/<name>" for the file's OWN org only — org-privacy); lookup is case-insensitive by name`);
     // RESOLVES IS NOT ENOUGH. Ref lookup ignores case; the marketplace fetches
     // items/<kind>/<key>.json off a case-sensitive host. A Ref that differs only in case
-    // renders forever in rx/ and 404s on install (index.mjs, canonicalRef).
+    // renders forever in design/ and 404s on install (index.mjs, canonicalRef).
     else if (canonicalRef) {
       const exact = canonicalRef(node.ref);
       if (exact && exact !== node.ref)