Remove __pycache__ .pyc files accidentally included in the projector commit

audio-surface.el / image-surface.el: own-core additive-synthesis WAV and
raster-PNG renderers (integer-only DSP, since EL has no floats), rendered
from learned engram signatures via a pluggable surface-profile
abstraction (surface-profile.el). audio-demo.el / image-demo.el are
drivers. NOTE: demo files hardcode absolute paths to this worktree's own
directory — will need a path fixup before landing.

elp/projector/ is a Python package the author's own README marks as
"STAGING/PROOF-OF-SHAPE — not the deliverable", superseded by the native
.el surface-profile work above; kept as a validated architecture proof.
Generated output (elp/faculty/{out,sig}, elp/projector/out,
__pycache__) intentionally excluded.

.gitea/workflows/ci-dev.yaml

@@ -214,9 +214,18 @@ jobs:
         env:
           GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}
         run: |
+          # Fail loudly: previously this step had no `set -e`, so an auth or
+          # upload failure was swallowed (step exited 0 on the trailing echo)
+          # and the SDK silently never published. Surface failures now.
+          set -euo pipefail
+          if [ -z "${GCP_SA_KEY:-}" ]; then
+            echo "FATAL: GCP_SA_KEY secret is empty — cannot authenticate to publish" >&2
+            exit 1
+          fi
           echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
           gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
           gcloud config set project neuron-785695
+          echo "Publishing as active account: $(gcloud config get-value account 2>/dev/null)"
 
           VERSION="${GITHUB_SHA:0:8}"
 
@@ -268,6 +277,12 @@ jobs:
         # Patches ci-base:dev in-place: pulls the existing image (which has all
         # system deps — Node, Go, gcloud, Docker CLI, etc.) and overlays the freshly
         # built El SDK on top. Keeps the full ci-base rebuild fast and incremental.
+        #
+        # continue-on-error: this is a CI-cache optimization, NOT the release
+        # artifact. It runs Docker (pull/build/push ~600MB) on the host-mode GCE
+        # runner where DinD/Docker availability is fragile. A failure here must
+        # never block or redden the job — the SDK publish above is the deliverable.
+        continue-on-error: true
         if: github.event_name == 'push'
         env:
           GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}

.gitea/workflows/ci-stage.yaml

@@ -212,12 +212,21 @@ jobs:
         env:
           GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}
         run: |
+          # Fail loudly: previously this step had no `set -e`, so an auth or
+          # upload failure was swallowed (step exited 0 on the trailing echo)
+          # and the SDK silently never published. Surface failures now.
+          set -euo pipefail
+          if [ -z "${GCP_SA_KEY:-}" ]; then
+            echo "FATAL: GCP_SA_KEY secret is empty — cannot authenticate to publish" >&2
+            exit 1
+          fi
           echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
           apt-get install -y -qq apt-transport-https ca-certificates curl
           echo "deb [trusted=yes] https://packages.cloud.google.com/apt cloud-sdk main" > /etc/apt/sources.list.d/google-cloud-sdk.list
           apt-get update -qq && apt-get install -y google-cloud-cli
           gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
           gcloud config set project neuron-785695
+          echo "Publishing as active account: $(gcloud config get-value account 2>/dev/null)"
 
           VERSION="${GITHUB_SHA:0:8}"
 
@@ -253,6 +262,12 @@ jobs:
         # Patches ci-base:stage in-place: pulls the existing image (which has all
         # system deps — Node, Go, gcloud, Docker CLI, etc.) and overlays the freshly
         # built El SDK on top. Keeps the full ci-base rebuild fast and incremental.
+        #
+        # continue-on-error: this is a CI-cache optimization, NOT the release
+        # artifact. It runs Docker (pull/build/push ~600MB) on the host-mode GCE
+        # runner where DinD/Docker availability is fragile. A failure here must
+        # never block or redden the job — the SDK publish above is the deliverable.
+        continue-on-error: true
         if: github.event_name == 'push'
         env:
           GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}

.gitea/workflows/sdk-release.yaml

@@ -288,12 +288,21 @@ jobs:
         env:
           GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}
         run: |
+          # Fail loudly: previously this step had no `set -e`, so an auth or
+          # upload failure was swallowed (step exited 0 on the trailing echo)
+          # and the SDK silently never published. Surface failures now.
+          set -euo pipefail
+          if [ -z "${GCP_SA_KEY:-}" ]; then
+            echo "FATAL: GCP_SA_KEY secret is empty — cannot authenticate to publish" >&2
+            exit 1
+          fi
           echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
           apt-get install -y -qq apt-transport-https ca-certificates curl
           echo "deb [trusted=yes] https://packages.cloud.google.com/apt cloud-sdk main" > /etc/apt/sources.list.d/google-cloud-sdk.list
           apt-get update -qq && apt-get install -y google-cloud-cli
           gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
           gcloud config set project neuron-785695
+          echo "Publishing as active account: $(gcloud config get-value account 2>/dev/null)"
 
           VERSION="${GITHUB_SHA:0:8}"
 
@@ -345,6 +354,12 @@ jobs:
         # Patches ci-base:latest in-place: pulls the existing image (which has all
         # system deps — Node, Go, gcloud, Docker CLI, etc.) and overlays the freshly
         # built El SDK on top. Keeps the full ci-base rebuild fast and incremental.
+        #
+        # continue-on-error: this is a CI-cache optimization, NOT the release
+        # artifact. It runs Docker (pull/build/push ~600MB) on the host-mode GCE
+        # runner where DinD/Docker availability is fragile. A failure here must
+        # never block or redden the job — the SDK publish above is the deliverable.
+        continue-on-error: true
         if: github.event_name == 'push'
         env:
           GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}

elp/projector/README.md

@@ -0,0 +1,91 @@
+> **STATUS: STAGING / PROOF-OF-SHAPE — not the deliverable.** This Python package
+> proved the architecture end-to-end against the proven realizer faculty (faithful
+> md/docx/midi from real geometry: 0 ungrounded claims, SACRED polarity). Per Will's
+> steer, the DELIVERABLE is NATIVE: the seam lives on the existing EL realizer as
+> **surface-as-profile** — see `../src/surface-profile.el` and
+> `../tests/examples/surface-profile-demo.el` (compiles + runs through elc → C →
+> binary). The concepts below (one geometry-carrying frame; surface = a pluggable
+> profile; plan/realize; deterministic-from-meaning) are exactly what the native
+> module implements. Keep this package as the validated proof; build native.
+
+# Efferent Multimodal Projector
+
+**geometry → any surface, faithfully.** Neuron's own document-generation faculty:
+the efferent twin of the ingest organ. Ingest is afferent (world → geometry);
+this is efferent (geometry → an arbitrary-format document / any modality).
+
+Built against the **proven** realizer faculty (neuron-talk sidecar `:8756`,
+artifact `art-7affa557`). The live soul (`:8742` / `:7770`) is contacted **only**
+through the read-only, GET-only `engram_client` — never mutated.
+
+## The pipeline (surface-agnostic)
+
+```
+geometry region + surface/format spec
+    → PLAN     (manifold → document skeleton/DAG; the geometry IS the outline)   plan.py
+    → REALIZE  (proven realizer, scaled sentence → passage, each section faithful) realize.py
+    → COHERE   (document-level flow / transitions, not stitched sentences)        cohere.py
+    → EMIT     (pluggable SurfaceProjector → the target surface)          projectors/
+```
+
+**The surface is a PARAMETER.** `pipeline.build_ir(...)` builds ONE
+surface-neutral `DocumentIR` (`document_ir.py`); `pipeline.emit(doc, surface)`
+projects it to whichever surface you name. Markdown, docx, and MIDI are the same
+IR emitted three ways.
+
+## The pivot: a geometry-carrying IR
+
+`DocumentIR` is **not** a text tree. Every `Block` carries BOTH:
+- `.sentences` — realized faithful text (what **text** projectors read),
+- `.provenance` — the source geometry: `subj_id / relation / obj / polarity /
+  confidence / importance / salience / node_id` (what **music / image / video**
+  projectors read).
+
+That single decision is what makes the projector multimodal: text renders the
+words; music/image decode the geometry. A claim with no provenance cannot exist
+in the IR — faithfulness is structural.
+
+## The one shared seam
+
+`projectors/base.py` — `SurfaceProjector.project(frame: DocumentIR) -> bytes`
+(+ `surface / media_type / ext / modality / profile`). Register with
+`register()`. Adding a surface changes nothing upstream.
+
+`TwoStageProjector` blesses the peer plan/realize decomposition:
+`spec = plan(frame)`, `bytes = realize(spec)`, `project = realize∘plan`; the
+`profile` is the pluggable per-surface knob (text lang-profile, music
+instr/mode-profile). `projectors/midi.py` is the reference two-stage impl.
+
+## Surfaces
+
+| surface | modality | status | emitter |
+|---|---|---|---|
+| `markdown` | text | landed | own (str) |
+| `docx` | text | landed | own minimal OOXML (stdlib `zipfile`+XML, no lib) |
+| `midi` | audio | landed (symbolic-music proof) | own minimal SMF (stdlib `struct`, no lib) |
+| `audio` (WAV) | audio | peer agent (additive synth) | conforms to `TwoStageProjector` |
+| `image` | image | documented seam | `projectors/seams.py` |
+| `video` | video | documented seam (image×sound×time) | `projectors/seams.py` |
+
+Music maps: relation → scale degree (same relation → same pitch), **polarity →
+major/minor third (SACRED negation is audible)**, confidence → duration,
+importance → velocity, section → register. Deterministic projection from meaning
+— nothing invented.
+
+## Faithfulness
+
+`provenance.py` audits the IR: **zero** ungrounded claims, SACRED polarity
+preserved (negations reported, never dropped), COHERE introduces no new geometry
+(connectives are marked). `trace_table()` emits the geometry → section → claim
+table.
+
+## Run
+
+```bash
+PY=~/Desktop/lang-realizers/venv/bin/python
+PYTHONPATH=~/Desktop/neuron-talk:~/Desktop/lang-realizers $PY generate.py
+# writes ./out/{neuron-self,engram-temporal}.{md,docx,mid} + *.audit.json + *.provenance.md
+```
+
+Requires the proven realizer env (spaCy + the neuron-talk/lang-realizers engine)
+and the read-only engram at `:8742`.

elp/projector/cohere.py

@@ -0,0 +1,79 @@
+"""cohere.py — COHERE stage: document-level flow, not stitched sentences.
+
+Fidelity is REALIZE's job; FLOW is this stage's. The hard part beyond sentence
+fidelity is that a document must read as one thing. We add connective tissue at
+the passage level:
+
+  * an opening abstract that names what the document covers (built ONLY from the
+    section headings that already exist — it introduces no new claim),
+  * a short transition lead into each section after the first, drawn from a
+    fixed set of discourse connectives ("Beyond that,", "Relatedly,", ...) that
+    carry no propositional content,
+  * ordering so the highest-grounded section leads.
+
+CRITICAL: every connective is marked ``kind="connective"`` in its provenance, so
+the faithfulness audit can prove COHERE introduced ZERO new geometry claims. A
+transition is discourse glue, never a fact.
+"""
+from __future__ import annotations
+
+from document_ir import Block, DocumentIR, Provenance
+
+# discourse connectives — pure flow, no propositional content
+_TRANSITIONS = [
+    "Beyond that,", "Relatedly,", "In the same region,", "From there,",
+    "Alongside this,", "Further,", "Turning to the next facet,",
+]
+
+
+def _connective_prov() -> Provenance:
+    return Provenance(subj_id=None, subject=None, relation="", obj=None,
+                      polarity="aff", confidence=1.0, node_id=None,
+                      kind="connective")
+
+
+def _abstract_block(doc: DocumentIR) -> Block:
+    """A grounded opening: names the sections, asserts nothing new."""
+    headings = [s.heading for s in doc.sections]
+    if not headings:
+        return Block(role="lead")
+    if len(headings) == 1:
+        body = f"This document, generated from Neuron's geometry, covers {headings[0]}."
+    else:
+        listed = ", ".join(headings[:-1]) + f", and {headings[-1]}"
+        body = ("This document is projected directly from Neuron's meaning-geometry. "
+                f"It traces {listed}.")
+    b = Block(role="lead")
+    b.sentences.append(body)
+    b.provenance.append(_connective_prov())
+    return b
+
+
+def cohere_document(doc: DocumentIR, *, add_abstract: bool = True,
+                    add_transitions: bool = True) -> DocumentIR:
+    """Order sections by grounding, add abstract + transitions (flow only)."""
+    # order: strongest-grounded section (mean confidence x #claims) first,
+    # but keep an explicitly-first section if the plan pinned one via level 1.
+    def _score(sec):
+        provs = [p for p in sec.all_provenance() if p.kind == "fact"]
+        if not provs:
+            return 0.0
+        mean_conf = sum(p.confidence for p in provs) / len(provs)
+        return mean_conf * len(provs)
+
+    doc.sections.sort(key=_score, reverse=True)
+
+    if add_transitions:
+        for i, sec in enumerate(doc.sections):
+            if i == 0 or not sec.blocks:
+                continue
+            lead = _TRANSITIONS[(i - 1) % len(_TRANSITIONS)]
+            first = sec.blocks[0]
+            if first.sentences:
+                # prepend the connective to the first sentence (flow, no new claim)
+                first.sentences[0] = f"{lead} {first.sentences[0][0].lower()}{first.sentences[0][1:]}"
+
+    if add_abstract:
+        doc.meta["abstract"] = _abstract_block(doc)
+
+    return doc

elp/projector/document_ir.py

@@ -0,0 +1,111 @@
+"""document_ir.py — the surface-neutral, GEOMETRY-CARRYING document intermediate.
+
+This is the pivot of the whole efferent projector. A DocumentIR is NOT a text
+tree. It is a projection of a meaning-geometry region that carries, at every
+leaf, BOTH:
+
+  * the realized surface text  (``Block.sentences``)   — what a TEXT projector reads,
+  * the source geometry        (``Block.provenance``)  — what a MUSIC / IMAGE /
+                                                          VIDEO projector reads.
+
+Because the IR holds the geometry, not just the words, the SAME
+plan -> realize -> cohere pipeline drives every surface. A markdown projector
+renders the sentences; a music projector reads the provenance edges (salience,
+importance, polarity, relation) and maps them onto a symbolic-music surface;
+an image/video projector (documented seam) would read the same geometry.
+
+Nothing in this module invents content. Every :class:`Provenance` points at a
+real engram node id and a real relation. That is the faithfulness contract made
+structural: a claim with no provenance cannot exist in the IR.
+"""
+from __future__ import annotations
+
+from dataclasses import dataclass, field
+from typing import Any
+
+
+# --------------------------------------------------------------------------- #
+#  Provenance — the geometry an emitted claim traces to. FAITHFULNESS is here.
+# --------------------------------------------------------------------------- #
+@dataclass
+class Provenance:
+    """One geometry edge behind one realized claim.
+
+    ``kind`` distinguishes a FACT (a structural edge asserted by the geometry,
+    spoken as fact) from an INTERPRETATION (something attributed, spoken with
+    attribution) — the facts-as-facts + interpretations-attributed discipline
+    (memory 80927e26). ``polarity`` is SACRED: a negated edge stays negated.
+    """
+    subj_id: str | None          # source engram node id of the subject
+    subject: str | None          # normalized subject surface
+    relation: str                # predicate lemma (e.g. "use", "contain", "be")
+    obj: str | None              # normalized object / complement surface
+    polarity: str = "aff"        # "aff" | "neg"  (SACRED — never silently flipped)
+    confidence: float = 0.0      # extraction confidence in [0,1]
+    node_id: str | None = None   # engram node the claim was extracted from
+    kind: str = "fact"           # "fact" | "interpretation"
+    importance: float = 0.0      # source node importance (drives music/emphasis)
+    salience: float = 0.0        # source node salience
+
+    def trace(self) -> str:
+        arrow = "-->" if self.polarity == "aff" else "--NOT-->"
+        return (f"[{(self.node_id or '?')[:8]}] {self.subject!r} {arrow}"
+                f"{self.relation} {self.obj!r} (conf {self.confidence:.2f})")
+
+
+@dataclass
+class Block:
+    """A passage: one or more faithful sentences + the geometry they trace to.
+
+    ``sentences`` and ``provenance`` are index-aligned where possible: sentence
+    ``i`` was realized from ``provenance[i]``. A COHERE transition sentence with
+    no new geometry carries a provenance whose ``kind == "connective"`` so the
+    audit can see it introduced no new claim.
+    """
+    sentences: list[str] = field(default_factory=list)
+    provenance: list[Provenance] = field(default_factory=list)
+    role: str = "body"           # "body" | "lead" | "transition"
+
+    def text(self) -> str:
+        return " ".join(s.rstrip(". ") + "." for s in self.sentences if s.strip())
+
+
+@dataclass
+class Section:
+    heading: str
+    level: int = 2               # markdown heading level / outline depth
+    blocks: list[Block] = field(default_factory=list)
+    seed_ids: list[str] = field(default_factory=list)   # geometry nodes of section
+    summary: str = ""            # one-line grounded gloss (for pptx bullets / TOC)
+
+    def all_provenance(self) -> list[Provenance]:
+        out: list[Provenance] = []
+        for b in self.blocks:
+            out.extend(b.provenance)
+        return out
+
+
+@dataclass
+class DocumentIR:
+    """The surface-neutral document. Built ONCE, projected to ANY surface."""
+    title: str
+    subtitle: str = ""
+    sections: list[Section] = field(default_factory=list)
+    seed_id: str | None = None            # the geometry region root
+    format_spec: dict[str, Any] = field(default_factory=dict)  # requested shape
+    meta: dict[str, Any] = field(default_factory=dict)
+
+    # -- geometry facets (what non-text projectors consume) ----------------- #
+    def all_provenance(self) -> list[Provenance]:
+        out: list[Provenance] = []
+        for s in self.sections:
+            out.extend(s.all_provenance())
+        return out
+
+    def claim_count(self) -> int:
+        return sum(1 for p in self.all_provenance() if p.kind in ("fact", "interpretation"))
+
+    def ungrounded_count(self) -> int:
+        """Claims with no traceable node — MUST be zero for a faithful doc."""
+        return sum(1 for p in self.all_provenance()
+                   if p.kind in ("fact", "interpretation") and not p.node_id)

elp/projector/generate.py

@@ -0,0 +1,81 @@
+"""generate.py — drive the projector: one geometry region -> many surfaces.
+
+Proves the thesis with REAL output: builds ONE surface-neutral DocumentIR from
+Neuron's OWN self-geometry (read-only against the live soul via the proven
+faculty), then EMITS it to Markdown, docx, and MIDI — the same plan/realize/
+cohere, three surfaces. Writes the files + the faithfulness audit to ./out/.
+"""
+from __future__ import annotations
+
+import json
+import os
+import sys
+
+_HERE = os.path.dirname(os.path.abspath(__file__))
+sys.path.insert(0, _HERE)
+
+import pipeline  # noqa: E402
+import provenance  # noqa: E402
+from geometry import load_self_region  # noqa: E402
+
+OUT = os.path.join(_HERE, "out")
+
+
+def _emit_all(doc, stem):
+    """Emit one IR to every text/audio surface + audit + provenance."""
+    for surface in ("markdown", "docx", "midi"):
+        data = pipeline.emit(doc, surface)
+        proj = pipeline.get_projector(surface)
+        path = os.path.join(OUT, f"{stem}.{proj.ext}")
+        with open(path, "wb") as f:
+            f.write(data)
+        print(f"  emitted {surface:9s} -> {os.path.basename(path)} ({len(data)} bytes)")
+    a = provenance.audit(doc)
+    with open(os.path.join(OUT, f"{stem}.audit.json"), "w") as f:
+        json.dump(a, f, indent=2)
+    with open(os.path.join(OUT, f"{stem}.provenance.md"), "w") as f:
+        f.write(provenance.trace_table(doc))
+    print("  audit:", {k: a[k] for k in ("claims", "ungrounded_claims",
+          "negations_preserved", "distinct_source_nodes", "faithful")})
+    return a
+
+
+def main():
+    os.makedirs(OUT, exist_ok=True)
+    print("surfaces registered:", pipeline.available_surfaces())
+
+    # ---- Document 1: Neuron's self-description (marquee) ------------------- #
+    print("\n[1] Neuron self-description")
+    region = load_self_region(max_nodes=9)
+    print("   self region:", region)
+    doc1 = pipeline.build_ir(
+        None, region=region,
+        title="Neuron: A Self-Description from Its Own Geometry",
+        subtitle="Projected efferently from the engram — every claim traces a node.",
+        format_spec={"genre": "self-description", "register": "expository"},
+        max_sections=5, conf_floor=0.6)
+    print(f"   IR: {len(doc1.sections)} sections, {doc1.claim_count()} claims, "
+          f"ungrounded={doc1.ungrounded_count()}")
+    _emit_all(doc1, "neuron-self")
+
+    # ---- Document 2: a coherent, clean whitepaper-style section ------------ #
+    print("\n[2] Whitepaper-style section (coherent clean region)")
+    doc2, _ = pipeline.project(
+        ["chronoception", "time", "awareness", "engram", "temporal"],
+        surface="markdown",
+        title="Temporal Awareness in the Engram",
+        subtitle="A section projected from the geometry of chronoception.",
+        format_spec={"genre": "whitepaper-section", "register": "technical"},
+        max_sections=4)
+    print(f"   IR: {len(doc2.sections)} sections, {doc2.claim_count()} claims, "
+          f"ungrounded={doc2.ungrounded_count()}")
+    _emit_all(doc2, "engram-temporal")
+
+    # echo both markdowns so they are visible in the run log
+    for stem, doc in (("neuron-self", doc1), ("engram-temporal", doc2)):
+        print(f"\n===== GENERATED MARKDOWN — {stem} =====\n")
+        print(pipeline.emit(doc, "markdown").decode())
+
+
+if __name__ == "__main__":
+    main()

elp/projector/geometry.py

@@ -0,0 +1,129 @@
+"""geometry.py — READ-ONLY loader for a meaning-geometry region.
+
+The efferent projector never writes to the soul. This module reaches the
+geometry through the PROVEN, read-only neuron-talk faculty (``engram_client``,
+GET-only, which physically refuses non-GET methods) against the running sidecar
+soul. The live daemon :8742 / :7770 is contacted ONLY through that read-only
+client — never mutated.
+
+A "region" is a seed node plus a bounded neighborhood: the manifold that will
+become the document's skeleton. We pool a few single-term lexical searches
+(the engram search is a single-term matcher) and, when available, walk one hop
+of reified neighbors, then rank by self/importance signal.
+"""
+from __future__ import annotations
+
+import os
+import sys
+
+# Wire in the proven faculty (own-the-core: we reuse it, we do not fork it).
+_NT = os.path.expanduser("~/Desktop/neuron-talk")
+_LR = os.path.expanduser("~/Desktop/lang-realizers")
+for _p in (_NT, _LR):
+    if _p not in sys.path:
+        sys.path.insert(0, _p)
+
+from engram_client import ReadOnlyEngramClient  # noqa: E402
+
+
+class Region:
+    """A geometry region: ranked nodes + the reified edges among them."""
+
+    def __init__(self, seed: str, nodes: list[dict], edges: list[dict]):
+        self.seed = seed
+        self.nodes = nodes                 # ranked engram node dicts
+        self.edges = edges                 # [{src, dst, edge, ...}]
+        self.by_id = {n["id"]: n for n in nodes if n.get("id")}
+
+    def __repr__(self):
+        return f"<Region seed={self.seed!r} nodes={len(self.nodes)} edges={len(self.edges)}>"
+
+
+def _prose_quality(content: str) -> float:
+    """Reward clean expository prose; penalize shouty banner-dense nodes.
+
+    A high ALLCAPS-word ratio or very short content signals a banner/telegraphic
+    memory node that extracts into garbage. Clean declarative prose scores high.
+    """
+    if not content or not content.strip():
+        return 0.0
+    words = content.split()
+    if len(words) < 8:
+        return 0.1
+    caps = sum(1 for w in words if len(w) > 2 and w.strip(".,:;'\"-").isupper())
+    caps_ratio = caps / max(1, len(words))
+    # sentences with lowercase interior words read as prose
+    lower = sum(1 for w in words if w[:1].islower())
+    lower_ratio = lower / max(1, len(words))
+    return max(0.0, 1.2 * lower_ratio - 2.0 * caps_ratio)
+
+
+def _relevance(content: str, terms: list[str]) -> float:
+    """Topical relevance to the seed terms — keeps a region ON-THEME so a clean
+    but off-topic node cannot hijack the document."""
+    if not terms:
+        return 0.0
+    low = (content or "").lower()
+    hits = sum(1 for t in terms if t.lower() in low)
+    return hits / max(1, len(terms))
+
+
+def _node_rank(n: dict, terms: list[str] | None = None) -> float:
+    return (float(n.get("importance") or 0.0) * 2.0
+            + float(n.get("salience") or 0.0)
+            + 1.5 * _prose_quality(n.get("content") or "")
+            + 2.0 * _relevance(n.get("content") or "", terms or [])
+            + (0.5 if (n.get("content") or "").strip() else 0.0))
+
+
+def load_region(seed_terms: list[str] | str, *, client: ReadOnlyEngramClient | None = None,
+                max_nodes: int = 10, per_term: int = 20, hop: bool = True) -> Region:
+    """Pull a bounded geometry region around ``seed_terms`` (read-only).
+
+    ``seed_terms`` may be a single string or several probe terms; results are
+    pooled and de-duplicated. When ``hop`` and the reified neighbor endpoint is
+    live, one hop of neighbors is folded in so the region is a real
+    neighborhood, not just a keyword hit list.
+    """
+    client = client or ReadOnlyEngramClient()
+    if isinstance(seed_terms, str):
+        seed_terms = [seed_terms]
+
+    pool: dict[str, dict] = {}
+    for term in seed_terms:
+        for n in client.search(term, limit=per_term):
+            if isinstance(n, dict) and n.get("id"):
+                pool.setdefault(n["id"], n)
+
+    ranked = sorted(pool.values(), key=lambda n: _node_rank(n, seed_terms),
+                    reverse=True)
+    nodes = ranked[:max_nodes]
+
+    edges: list[dict] = []
+    if hop and nodes:
+        present = {n["id"] for n in nodes}
+        for n in list(nodes):
+            try:
+                for nb in client.neighbors(n["id"]):
+                    node = nb.get("node") if isinstance(nb, dict) else None
+                    edge = nb.get("edge") if isinstance(nb, dict) else None
+                    if node and node.get("id"):
+                        edges.append({"src": n["id"], "dst": node["id"],
+                                      "edge": edge})
+                        # fold a strong neighbor into the region (bounded)
+                        if (node["id"] not in present and len(nodes) < max_nodes + 6
+                                and _node_rank(node, seed_terms) > 0.4):
+                            present.add(node["id"])
+                            nodes.append(node)
+            except Exception:  # noqa: BLE001 — read-only best-effort; never fatal
+                continue
+
+    return Region(seed=", ".join(seed_terms), nodes=nodes, edges=edges)
+
+
+def load_self_region(client: ReadOnlyEngramClient | None = None,
+                     max_nodes: int = 10) -> Region:
+    """The self/identity region — Neuron's own geometry, for self-description."""
+    return load_region(["self", "identity", "Neuron", "values", "memory",
+                        "imprint", "consciousness"],
+                       client=client, max_nodes=max_nodes)

elp/projector/pipeline.py

@@ -0,0 +1,67 @@
+"""pipeline.py — the Efferent Multimodal Projector, top level.
+
+    geometry region + surface/format spec
+        -> PLAN     (manifold -> document skeleton/DAG)
+        -> REALIZE  (proven realizer, sentence -> passage, each section faithful)
+        -> COHERE   (document-level flow / transitions, not stitched sentences)
+        -> EMIT     (pluggable SurfaceProjector -> the target surface)
+
+THE SURFACE IS A PARAMETER. ``project(...)`` builds the geometry-carrying
+DocumentIR once, then hands it to whichever surface projector the caller named.
+Markdown, docx, and midi (music) are all the SAME IR emitted differently. That
+is the efferent multimodal projector: geometry -> any surface.
+"""
+from __future__ import annotations
+
+import os
+import sys
+
+_HERE = os.path.dirname(os.path.abspath(__file__))
+sys.path.insert(0, _HERE)
+sys.path.insert(0, os.path.join(_HERE, "projectors"))
+
+from cohere import cohere_document  # noqa: E402
+from document_ir import DocumentIR  # noqa: E402
+from geometry import Region, load_region  # noqa: E402
+from plan import plan_document  # noqa: E402
+from realize import realize_document  # noqa: E402
+
+# registering the projectors (import for side-effect: each self-registers)
+import projectors.markdown  # noqa: E402,F401
+import projectors.docx  # noqa: E402,F401
+import projectors.midi  # noqa: E402,F401
+import projectors.seams  # noqa: E402,F401
+from projectors.base import available_surfaces, get_projector  # noqa: E402
+
+
+def build_ir(seed_terms, *, title: str, subtitle: str = "",
+             format_spec: dict | None = None,
+             region: Region | None = None,
+             max_sections: int = 8, conf_floor: float = 0.55) -> DocumentIR:
+    """geometry -> PLAN -> REALIZE -> COHERE = the surface-neutral DocumentIR."""
+    region = region or load_region(seed_terms)
+    doc = plan_document(region, title=title, subtitle=subtitle,
+                        format_spec=format_spec or {},
+                        conf_floor=conf_floor, max_sections=max_sections)
+    doc = realize_document(doc)
+    doc = cohere_document(doc)
+    return doc
+
+
+def emit(doc: DocumentIR, surface: str) -> bytes:
+    """EMIT: project the built IR onto one surface (surface = a parameter)."""
+    return get_projector(surface).project(doc)
+
+
+def project(seed_terms, *, surface: str, title: str, subtitle: str = "",
+            format_spec: dict | None = None, region: Region | None = None,
+            max_sections: int = 8) -> tuple[DocumentIR, bytes]:
+    """The full efferent projection: geometry + surface -> (IR, bytes)."""
+    doc = build_ir(seed_terms, title=title, subtitle=subtitle,
+                   format_spec=format_spec, region=region,
+                   max_sections=max_sections)
+    return doc, emit(doc, surface)
+
+
+__all__ = ["build_ir", "emit", "project", "available_surfaces",
+           "get_projector", "load_region", "DocumentIR"]

elp/projector/plan.py

@@ -0,0 +1,192 @@
+"""plan.py — PLAN stage: geometry region -> document skeleton (a DAG/outline).
+
+The manifold becomes the skeleton. We extract faithful propositions from the
+region's nodes (the proven neuron-talk extractor, SACRED polarity preserved),
+apply a quality floor, then GROUP them into sections. Grouping is by source
+node — each engram node is one coherent topic, so one salient node becomes one
+section. The section ORDER is the node ranking (importance/salience): the
+geometry decides the outline, not a template.
+
+Output: a DocumentIR whose sections carry seed node ids and empty blocks. REALIZE
+fills the blocks; the plan owns the structure.
+"""
+from __future__ import annotations
+
+import os
+import re
+import sys
+
+_NT = os.path.expanduser("~/Desktop/neuron-talk")
+_LR = os.path.expanduser("~/Desktop/lang-realizers")
+for _p in (_NT, _LR):
+    if _p not in sys.path:
+        sys.path.insert(0, _p)
+
+import propositions  # noqa: E402  (the proven, faithful extractor)
+
+from document_ir import DocumentIR, Section  # noqa: E402
+from geometry import Region  # noqa: E402
+
+
+# --------------------------------------------------------------------------- #
+#  Proposition quality — keep only clean, well-grounded claims.
+# --------------------------------------------------------------------------- #
+_JUNK_RE = re.compile(r"[.][a-z]{1,3}\b|[^A-Za-z0-9 '\-]")  # ".o", stray symbols
+
+
+def _has_banner_token(s: str) -> bool:
+    """True if any word is an ALLCAPS banner token (DHARMA, ENGRAM, MEASURED)."""
+    for w in (s or "").split():
+        core = w.strip(".,:;'\"-")
+        if len(core) > 2 and core.isupper():
+            return True
+    return False
+
+
+def _clean_prop(p, floor: float) -> bool:
+    if p.confidence < floor:
+        return False
+    if not p.subject or not (p.object or (p.obj_np is not None)):
+        return False
+    subj = (p.subject or "").strip()
+    obj = (p.object or "").strip()
+    if len(subj) < 2:
+        return False
+    # banner-derived shouty fragments read as garbage in prose
+    if _has_banner_token(subj) or _has_banner_token(obj):
+        return False
+    if propositions._is_shouty(p.sentence or ""):
+        return False
+    # junk tokens: file-extension fragments (".o"), stray non-word symbols
+    if _JUNK_RE.search(subj) or _JUNK_RE.search(obj):
+        return False
+    # a proposition whose object repeats the subject is usually a parse artifact
+    if obj and subj.lower() == obj.lower():
+        return False
+    # a bare copula with no real complement ("X is it") reads as noise
+    if p.predicate == "be" and obj.lower() in ("it", "no", "nothing", "empty", ""):
+        return False
+    return True
+
+
+def _dedup(props):
+    """Drop duplicate claims. Two axes: (a) identical (pred,obj,polarity), and
+    (b) same (subject,predicate) — which collapses a mis-split compound like
+    "detection is post-hoc eval" -> "Detection is post/hoc/eval" into one claim
+    (keep the highest-confidence surface)."""
+    props = sorted(props, key=lambda p: p.confidence, reverse=True)
+    seen_po, seen_sp, out = set(), set(), []
+    for p in props:
+        subj = (p.subject or "").lower()
+        po = (p.predicate, (p.object or "").lower(), p.polarity)
+        sp = (subj, p.predicate, p.polarity)
+        if po in seen_po or sp in seen_sp:
+            continue
+        seen_po.add(po)
+        seen_sp.add(sp)
+        out.append(p)
+    return out
+
+
+# --------------------------------------------------------------------------- #
+#  Heading derivation — a clean human heading from a node.
+# --------------------------------------------------------------------------- #
+_HEADING_RE = re.compile(r"^\s*#{1,4}\s+(.{2,70})\s*$", re.M)
+# node-type / system labels that are NOT topical headings
+_NONTOPIC_LABEL = re.compile(r"^(memory|node|knowledge|doc|session)[:/]", re.I)
+
+
+def _titlecase_banner(s: str) -> str:
+    """A shouty banner ("CHRONOCEPTION — SCALE-INVARIANCE") makes a fine title
+    once Title-cased. Keep short acronyms uppercase."""
+    def fix(w):
+        core = w.strip("—-:,.")
+        if len(core) <= 3 and core.isupper():
+            return w  # acronym
+        return w.capitalize()
+    return " ".join(fix(w) for w in s.split())
+
+
+def _clean_heading(text: str) -> str | None:
+    """First line only, no markdown, capped, banner Title-cased. None if unusable."""
+    if not text:
+        return None
+    line = text.strip().splitlines()[0]
+    line = re.sub(r"^#+\s*", "", line).strip().strip("#").strip()
+    # cut at a natural break so a long banner heading stays a heading, not a para
+    for sep in (" — ", " – ", ": ", ". "):
+        if sep in line and len(line) > 48:
+            line = line.split(sep)[0].strip()
+            break
+    if not (3 <= len(line) <= 64):
+        return None
+    if propositions._is_shouty(line):
+        line = _titlecase_banner(line)
+    return line or None
+
+
+def _heading_for(node: dict, fallback: str) -> str:
+    label = (node.get("label") or "").strip()
+    content = node.get("content") or ""
+    candidates: list[str] = []
+    # a node-type label ("memory:remembered") is never a topic — skip it
+    if label and not _NONTOPIC_LABEL.match(label):
+        candidates.append(label)
+    m = _HEADING_RE.search(content)
+    if m:
+        candidates.append(m.group(1))
+    # the leading banner/first sentence of the content is often the real title
+    first = re.split(r"(?<=[.\n])", content.strip(), maxsplit=1)[0] if content.strip() else ""
+    candidates.append(first)
+    for c in candidates:
+        h = _clean_heading(c)
+        if h:
+            return h
+    return fallback
+
+
+def plan_document(region: Region, *, title: str, subtitle: str = "",
+                  format_spec: dict | None = None,
+                  conf_floor: float = 0.55,
+                  max_sections: int = 8,
+                  max_claims_per_section: int = 6) -> DocumentIR:
+    """Region -> DocumentIR skeleton. The geometry dictates the outline."""
+    format_spec = format_spec or {}
+    doc = DocumentIR(title=title, subtitle=subtitle,
+                     seed_id=region.nodes[0]["id"] if region.nodes else None,
+                     format_spec=format_spec)
+
+    made = 0
+    seen_headings: set[str] = set()
+    for node in region.nodes:
+        if made >= max_sections:
+            break
+        props = propositions.extract(node.get("content") or "",
+                                     node_id=node.get("id"),
+                                     node_importance=float(node.get("importance") or 0.0),
+                                     max_sentences=10)
+        props = [p for p in props if _clean_prop(p, conf_floor)]
+        props = _dedup(props)
+        props.sort(key=lambda p: p.confidence, reverse=True)
+        props = props[:max_claims_per_section]
+        if not props:
+            continue
+        heading = _heading_for(node, fallback=f"Region {made + 1}")
+        # cross-section dedup: a topic appears once. Distinguish by top claim
+        # subject, else drop the collision so the outline stays clean.
+        if heading.lower() in seen_headings:
+            subj = (props[0].subject or "").strip().title()
+            alt = f"{heading}: {subj}" if subj and subj.lower() not in heading.lower() else None
+            if alt and alt.lower() not in seen_headings and len(alt) <= 64:
+                heading = alt
+            else:
+                continue
+        seen_headings.add(heading.lower())
+        sec = Section(heading=heading, level=2, seed_ids=[node["id"]])
+        # stash the planned propositions on the section for REALIZE
+        sec.__dict__["_planned_props"] = props
+        sec.__dict__["_node"] = node
+        doc.sections.append(sec)
+        made += 1
+
+    return doc

elp/projector/projectors/base.py

@@ -0,0 +1,106 @@
+"""base.py — the SurfaceProjector interface + registry.
+
+THE key abstraction of the efferent projector: a projector is a pure function
+from the surface-neutral, geometry-carrying DocumentIR to bytes on a target
+SURFACE. The surface is a PARAMETER. Adding a surface = registering one more
+projector; nothing upstream (plan/realize/cohere) changes.
+
+    DocumentIR  --project-->  bytes            (per surface)
+
+A TEXT projector reads ``block.sentences``. A NON-TEXT projector (music, image,
+video) reads ``block.provenance`` — the geometry the IR carries — and decodes it
+onto its surface. Both consume the SAME IR. That symmetry is the whole design:
+the realizer generalizes into a multimodal projector, geometry -> any surface.
+"""
+from __future__ import annotations
+
+from typing import Protocol, runtime_checkable
+
+import sys
+import os
+sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+from document_ir import DocumentIR  # noqa: E402
+
+
+@runtime_checkable
+class SurfaceProjector(Protocol):
+    """Geometry-document -> one surface. Implementations MUST be pure & faithful.
+
+    THE ONE SHARED SEAM. Every surface — text, music, image, video — conforms to
+    this single contract:
+
+        project(frame: DocumentIR) -> bytes
+
+    where ``frame`` is the geometry-carrying meaning-geometry (the SemFrame at
+    document scale; a single utterance is the degenerate one-section frame).
+
+    RECOMMENDED INTERNAL SHAPE (the peer music/text decomposition, blessed here
+    so all surfaces share it): a projector may split ``project`` into
+
+        spec    = self.plan(frame)      # meaning-geometry -> surface-specific spec
+        bytes   = self.realize(spec)    # spec -> surface, via this projector's PROFILE
+
+    ``project`` is then ``realize(plan(frame))``. The PROFILE (a text lang-profile,
+    a music instr/mode-profile, an image layout-profile) is a property of the
+    projector instance — the pluggable knob. See :class:`TwoStageProjector`.
+
+    A TEXT projector's plan reads ``frame`` sentences; a MUSIC/IMAGE projector's
+    plan reads ``frame.all_provenance()`` — the geometry — and derives its spec
+    (pitch/harmony/rhythm, or layout) FROM the meaning, deterministically. Same
+    frame, different profile.
+    """
+
+    surface: str          # "markdown" | "docx" | "midi" | "audio" | "image" | "video"
+    media_type: str       # MIME type of the emitted bytes
+    ext: str              # file extension (no dot)
+    modality: str         # "text" | "audio" | "image" | "video"
+    profile: object       # the pluggable per-surface profile (may be None)
+
+    def project(self, doc: DocumentIR) -> bytes:
+        """Emit the document on this surface. Returns raw bytes."""
+        ...
+
+
+class TwoStageProjector:
+    """Optional base for the peer plan()/realize() decomposition.
+
+    Subclasses implement ``plan(frame) -> spec`` and ``realize(spec) -> bytes``;
+    ``project`` is their composition. This is exactly the peer music interface
+    (spec = plan(frame, profile); surface = realize(spec, profile)) expressed so
+    that it still satisfies the single ``SurfaceProjector.project`` seam. Text,
+    music, and image projectors can all subclass this and remain interchangeable.
+    """
+
+    surface: str = ""
+    media_type: str = ""
+    ext: str = ""
+    modality: str = ""
+    profile: object = None
+
+    def plan(self, doc: DocumentIR):  # -> spec
+        raise NotImplementedError
+
+    def realize(self, spec) -> bytes:
+        raise NotImplementedError
+
+    def project(self, doc: DocumentIR) -> bytes:
+        return self.realize(self.plan(doc))
+
+
+_REGISTRY: dict[str, SurfaceProjector] = {}
+
+
+def register(projector: SurfaceProjector) -> SurfaceProjector:
+    _REGISTRY[projector.surface] = projector
+    return projector
+
+
+def get_projector(surface: str) -> SurfaceProjector:
+    if surface not in _REGISTRY:
+        raise KeyError(f"no projector registered for surface {surface!r}; "
+                       f"have {sorted(_REGISTRY)}")
+    return _REGISTRY[surface]
+
+
+def available_surfaces() -> list[str]:
+    return sorted(_REGISTRY)

elp/projector/projectors/docx.py

@@ -0,0 +1,113 @@
+"""docx.py — the .docx surface projector: an OWN minimal OOXML emitter.
+
+Own-the-core: a .docx is just a ZIP of a few XML parts (WordprocessingML). We
+emit it with the standard library only — ``zipfile`` + string XML — no
+python-docx, no external dependency. This proves a "richer structured format"
+surface without importing anyone else's toolkit.
+
+Parts emitted (the minimal valid set + a styles part for real headings):
+    [Content_Types].xml
+    _rels/.rels
+    word/_rels/document.xml.rels
+    word/styles.xml          (Title / Heading1 / Heading2 / Normal)
+    word/document.xml        (the content)
+
+Like the markdown projector it reads only the IR's realized sentences; it
+invents nothing. The surface differs, the faithful content does not.
+"""
+from __future__ import annotations
+
+import io
+import os
+import sys
+import zipfile
+from xml.sax.saxutils import escape
+
+sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+from document_ir import DocumentIR  # noqa: E402
+from projectors.base import register  # noqa: E402
+
+_CONTENT_TYPES = """<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<Types xmlns="http://schemas.openxmlformats.org/package/2006/content-types">
+  <Default Extension="rels" ContentType="application/vnd.openxmlformats-package.relationships+xml"/>
+  <Default Extension="xml" ContentType="application/xml"/>
+  <Override PartName="/word/document.xml" ContentType="application/vnd.openxmlformats-officedocument.wordprocessingml.document.main+xml"/>
+  <Override PartName="/word/styles.xml" ContentType="application/vnd.openxmlformats-officedocument.wordprocessingml.styles+xml"/>
+</Types>"""
+
+_RELS = """<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
+  <Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument" Target="word/document.xml"/>
+</Relationships>"""
+
+_DOC_RELS = """<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<Relationships xmlns="http://schemas.openxmlformats.org/package/2006/relationships">
+  <Relationship Id="rId1" Type="http://schemas.openxmlformats.org/officeDocument/2006/relationships/styles" Target="styles.xml"/>
+</Relationships>"""
+
+_W = "http://schemas.openxmlformats.org/wordprocessingml/2006/main"
+
+_STYLES = f"""<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<w:styles xmlns:w="{_W}">
+  <w:style w:type="paragraph" w:default="1" w:styleId="Normal"><w:name w:val="Normal"/>
+    <w:rPr><w:sz w:val="22"/></w:rPr></w:style>
+  <w:style w:type="paragraph" w:styleId="Title"><w:name w:val="Title"/>
+    <w:pPr><w:spacing w:after="240"/></w:pPr>
+    <w:rPr><w:b/><w:sz w:val="52"/></w:rPr></w:style>
+  <w:style w:type="paragraph" w:styleId="Subtitle"><w:name w:val="Subtitle"/>
+    <w:rPr><w:i/><w:sz w:val="28"/><w:color w:val="555555"/></w:rPr></w:style>
+  <w:style w:type="paragraph" w:styleId="Heading1"><w:name w:val="heading 1"/>
+    <w:pPr><w:spacing w:before="240" w:after="120"/><w:outlineLvl w:val="0"/></w:pPr>
+    <w:rPr><w:b/><w:sz w:val="34"/></w:rPr></w:style>
+  <w:style w:type="paragraph" w:styleId="Heading2"><w:name w:val="heading 2"/>
+    <w:pPr><w:spacing w:before="200" w:after="100"/><w:outlineLvl w:val="1"/></w:pPr>
+    <w:rPr><w:b/><w:sz w:val="28"/></w:rPr></w:style>
+</w:styles>"""
+
+
+def _para(text: str, style: str | None = None) -> str:
+    ppr = f"<w:pPr><w:pStyle w:val=\"{style}\"/></w:pPr>" if style else ""
+    return (f"<w:p>{ppr}<w:r><w:t xml:space=\"preserve\">"
+            f"{escape(text)}</w:t></w:r></w:p>")
+
+
+class DocxProjector:
+    surface = "docx"
+    media_type = ("application/vnd.openxmlformats-officedocument."
+                  "wordprocessingml.document")
+    ext = "docx"
+    modality = "text"
+
+    def _document_xml(self, doc: DocumentIR) -> str:
+        body: list[str] = [_para(doc.title, "Title")]
+        if doc.subtitle:
+            body.append(_para(doc.subtitle, "Subtitle"))
+        abstract = doc.meta.get("abstract")
+        if abstract is not None and abstract.sentences:
+            body.append(_para(abstract.text()))
+        for sec in doc.sections:
+            style = "Heading1" if sec.level <= 1 else "Heading2"
+            body.append(_para(sec.heading, style))
+            for block in sec.blocks:
+                t = block.text()
+                if t:
+                    body.append(_para(t))
+        return (f"<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"yes\"?>"
+                f"<w:document xmlns:w=\"{_W}\"><w:body>"
+                + "".join(body)
+                + "<w:sectPr><w:pgSz w:w=\"12240\" w:h=\"15840\"/>"
+                  "<w:pgMar w:top=\"1440\" w:right=\"1440\" w:bottom=\"1440\" "
+                  "w:left=\"1440\"/></w:sectPr></w:body></w:document>")
+
+    def project(self, doc: DocumentIR) -> bytes:
+        buf = io.BytesIO()
+        with zipfile.ZipFile(buf, "w", zipfile.ZIP_DEFLATED) as z:
+            z.writestr("[Content_Types].xml", _CONTENT_TYPES)
+            z.writestr("_rels/.rels", _RELS)
+            z.writestr("word/_rels/document.xml.rels", _DOC_RELS)
+            z.writestr("word/styles.xml", _STYLES)
+            z.writestr("word/document.xml", self._document_xml(doc))
+        return buf.getvalue()
+
+
+register(DocxProjector())

elp/projector/projectors/markdown.py

@@ -0,0 +1,45 @@
+"""markdown.py — the Markdown surface projector (text facet).
+
+The most tractable surface, and the reference implementation: reads the IR's
+realized sentences and lays them out as Markdown. Introduces no content — it is
+pure typography over the faithful text the realizer produced.
+"""
+from __future__ import annotations
+
+import os
+import sys
+
+sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+from document_ir import DocumentIR  # noqa: E402
+from projectors.base import register  # noqa: E402
+
+
+class MarkdownProjector:
+    surface = "markdown"
+    media_type = "text/markdown"
+    ext = "md"
+    modality = "text"
+
+    def render_str(self, doc: DocumentIR) -> str:
+        lines: list[str] = [f"# {doc.title}"]
+        if doc.subtitle:
+            lines.append(f"\n*{doc.subtitle}*")
+        abstract = doc.meta.get("abstract")
+        if abstract is not None and abstract.sentences:
+            lines.append("")
+            lines.append(abstract.text())
+        for sec in doc.sections:
+            lines.append("")
+            lines.append(f"{'#' * max(2, sec.level)} {sec.heading}")
+            for block in sec.blocks:
+                body = block.text()
+                if body:
+                    lines.append("")
+                    lines.append(body)
+        return "\n".join(lines) + "\n"
+
+    def project(self, doc: DocumentIR) -> bytes:
+        return self.render_str(doc).encode("utf-8")
+
+
+register(MarkdownProjector())

elp/projector/projectors/midi.py

@@ -0,0 +1,133 @@
+"""midi.py — the MUSIC surface projector: geometry -> symbolic music (MIDI).
+
+The first NON-TEXT surface, and the proof of the general shape. "Music is
+language and it is math" (Will): symbolic music is tractable and geometry-native,
+so it is the natural efferent twin to try first after text.
+
+CRUCIALLY this projector does NOT read the realized sentences. It reads the IR's
+GEOMETRY facet — ``block.provenance`` — and DECODES each edge onto a musical
+surface. That is the whole thesis of the multimodal projector: the same
+geometry-carrying IR drives text AND music; a text projector reads the words, a
+music projector reads the meaning-geometry. The mapping is deterministic and
+faithful to the geometry's structure:
+
+    relation lemma  -> scale degree      (same relation -> same pitch class;
+                                          meaning has a consistent sonic form)
+    polarity        -> mode              (aff = major third above; neg = minor
+                                          third / lowered — SACRED polarity is
+                                          audible, a negated edge sounds negated)
+    confidence      -> note duration     (stronger grounding rings longer)
+    importance      -> velocity          (more important source = louder)
+    section         -> phrase + register shift (structure becomes musical form)
+
+Own-the-core: a Standard MIDI File is a header chunk + a track chunk of
+delta-timed events. We emit the raw bytes with ``struct`` — no external MIDI
+library. Format 0, one track.
+"""
+from __future__ import annotations
+
+import io
+import os
+import struct
+import sys
+
+sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+from document_ir import DocumentIR, Provenance  # noqa: E402
+from projectors.base import TwoStageProjector, register  # noqa: E402
+
+_TICKS = 480                      # ticks per quarter note
+_C_MAJOR = [0, 2, 4, 5, 7, 9, 11]  # semitone offsets of a diatonic scale
+
+
+def _vlq(n: int) -> bytes:
+    """MIDI variable-length quantity encoding of a delta time."""
+    if n == 0:
+        return b"\x00"
+    out = bytearray()
+    out.append(n & 0x7F)
+    n >>= 7
+    while n:
+        out.insert(0, (n & 0x7F) | 0x80)
+        n >>= 7
+    return bytes(out)
+
+
+def _degree_for(relation: str) -> int:
+    """Stable scale degree for a relation lemma (same relation -> same pitch)."""
+    if not relation:
+        return 0
+    return sum(ord(c) for c in relation.lower()) % len(_C_MAJOR)
+
+
+def _note_for(p: Provenance, base: int) -> tuple[int, int, int]:
+    """(pitch, velocity, duration_ticks) for one geometry edge."""
+    root = base + _C_MAJOR[_degree_for(p.relation)]
+    # polarity -> mode: affirmed edges take the bright major third, negated edges
+    # take the darker minor third. The negation is AUDIBLE and never dropped.
+    third = 4 if p.polarity == "aff" else 3
+    pitch = max(24, min(96, root + (third if p.confidence >= 0.5 else 0)))
+    velocity = int(56 + 60 * min(1.0, max(0.0, p.importance)))
+    velocity = max(40, min(120, velocity))
+    # confidence -> duration: quarter .. dotted-half
+    dur = int(_TICKS * (0.5 + 1.5 * min(1.0, max(0.0, p.confidence))))
+    return pitch, velocity, dur
+
+
+# a mode-profile: the pluggable musical knob (the peer's mode_profile). Scale +
+# tempo. Swapping this profile re-voices the SAME geometry — surface as parameter.
+_DEFAULT_PROFILE = {"scale": _C_MAJOR, "tempo_us": 500000,
+                    "registers": [60, 55, 64, 50, 67, 48], "program": 0}
+
+
+class MidiProjector(TwoStageProjector):
+    """geometry -> symbolic music, in the shared two-stage shape.
+
+    ``plan(frame)``  -> a music_spec: an ordered list of note dicts derived
+                        deterministically from the frame's provenance geometry
+                        (the peer's ``plan(frame, profile) -> spec``).
+    ``realize(spec)`` -> Standard MIDI File bytes (the peer's
+                        ``realize(spec, profile) -> surface``; here the surface
+                        is symbolic MIDI, the minimal audio proof — a richer
+                        additive-synth audio projector conforms identically).
+    """
+
+    surface = "midi"
+    media_type = "audio/midi"
+    ext = "mid"
+    modality = "audio"
+
+    def __init__(self, profile: dict | None = None):
+        self.profile = profile or _DEFAULT_PROFILE
+
+    # -- stage 1: meaning-geometry -> music_spec (reads the GEOMETRY facet) -- #
+    def plan(self, doc: DocumentIR) -> list[dict]:
+        registers = self.profile["registers"]
+        spec: list[dict] = []
+        for si, sec in enumerate(doc.sections):
+            base = registers[si % len(registers)]
+            provs = [p for p in sec.all_provenance()
+                     if p.kind in ("fact", "interpretation")]
+            for i, p in enumerate(provs):
+                pitch, vel, dur = _note_for(p, base)
+                spec.append({"pitch": pitch, "velocity": vel, "dur": dur,
+                             "rest_before": (_TICKS // 2) if (si > 0 and i == 0) else 0,
+                             "relation": p.relation, "polarity": p.polarity})
+        return spec
+
+    # -- stage 2: music_spec -> MIDI bytes (own-core, no library) ------------ #
+    def realize(self, spec: list[dict]) -> bytes:
+        ev = bytearray()
+        ev += _vlq(0) + b"\xFF\x51\x03" + struct.pack(">I", self.profile["tempo_us"])[1:]
+        ev += _vlq(0) + bytes([0xC0, self.profile["program"] & 0x7F])
+        for note in spec:
+            ev += _vlq(note["rest_before"]) + bytes([0x90, note["pitch"], note["velocity"]])
+            ev += _vlq(note["dur"]) + bytes([0x80, note["pitch"], 0])
+        ev += _vlq(0) + b"\xFF\x2F\x00"
+        track = bytes(ev)
+        buf = io.BytesIO()
+        buf.write(b"MThd" + struct.pack(">IHHH", 6, 0, 1, _TICKS))
+        buf.write(b"MTrk" + struct.pack(">I", len(track)) + track)
+        return buf.getvalue()
+
+
+register(MidiProjector())

elp/projector/projectors/seams.py

@@ -0,0 +1,60 @@
+"""seams.py — documented efferent seams for IMAGE and VIDEO surfaces.
+
+These are NOT implemented (per the build rails: architect, do not overbuild).
+They are registered as first-class seams so the interface PROVES it accepts
+future non-text projectors without any upstream change. Each documents exactly
+what its decoder would read from the geometry-carrying IR, making the multimodal
+generalization concrete rather than hand-wavy.
+
+The symmetry that guarantees these are possible, not moonshots: they are the
+efferent twins of multimodal INGEST. If meaning can HOLD an image (ingest as
+first-class geometry), meaning can PROJECT one back. Video = image x sound x
+TIME, and the engram already stores time (chronoception). So video falls out of
+an image projector + the music projector + the stored temporal ordering.
+"""
+from __future__ import annotations
+
+import os
+import sys
+
+sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+from document_ir import DocumentIR  # noqa: E402
+from projectors.base import register  # noqa: E402
+
+
+class _Seam:
+    """A registered-but-unimplemented projector. Names its decoder contract."""
+
+    def project(self, doc: DocumentIR) -> bytes:  # pragma: no cover - seam
+        raise NotImplementedError(
+            f"{self.surface!r} projector is a documented seam, not yet built. "
+            f"Decoder contract: {self.decoder_contract}")
+
+
+class ImageProjector(_Seam):
+    surface = "image"
+    media_type = "image/png"
+    ext = "png"
+    modality = "image"
+    decoder_contract = (
+        "reads block.provenance as a spatial layout — nodes become regions, edges "
+        "become adjacencies; salience/importance drive size/contrast; polarity "
+        "drives figure/ground. The efferent twin of image ingest (a geometry->raster "
+        "decoder, learned or engineered), exactly mirroring the embedder that turned "
+        "the image INTO geometry.")
+
+
+class VideoProjector(_Seam):
+    surface = "video"
+    media_type = "video/mp4"
+    ext = "mp4"
+    modality = "video"
+    decoder_contract = (
+        "image x sound x TIME. Composes the image projector (per-keyframe geometry "
+        "layout) with the midi/music projector (score) along the geometry's stored "
+        "temporal ordering (chronoception). Needs no new principle once image + music "
+        "exist — only a muxer.")
+
+
+register(ImageProjector())
+register(VideoProjector())

elp/projector/provenance.py

@@ -0,0 +1,63 @@
+"""provenance.py — the faithfulness audit + geometry->section trace.
+
+A document projected from geometry is only worth anything if every claim traces
+back. This module walks the DocumentIR and proves the discipline held:
+
+  * ZERO ungrounded claims (every fact/interpretation has a real node id),
+  * every emitted sentence maps to a geometry edge (or is a marked connective),
+  * SACRED polarity survived (negations are reported, never silently dropped),
+  * COHERE introduced no new geometry (connectives carry no claim).
+
+It emits both a machine verdict and a human-readable geometry->section table.
+"""
+from __future__ import annotations
+
+from document_ir import DocumentIR
+
+
+def audit(doc: DocumentIR) -> dict:
+    provs = doc.all_provenance()
+    facts = [p for p in provs if p.kind in ("fact", "interpretation")]
+    connectives = [p for p in provs if p.kind == "connective"]
+    ungrounded = [p for p in facts if not p.node_id]
+    negations = [p for p in facts if p.polarity == "neg"]
+    node_ids = sorted({p.node_id for p in facts if p.node_id})
+    return {
+        "claims": len(facts),
+        "connectives": len(connectives),
+        "ungrounded_claims": len(ungrounded),
+        "negations_preserved": len(negations),
+        "distinct_source_nodes": len(node_ids),
+        "faithful": len(ungrounded) == 0,
+        "source_nodes": node_ids,
+    }
+
+
+def trace_table(doc: DocumentIR) -> str:
+    """Human-readable geometry -> section -> claim provenance table."""
+    lines = ["# Provenance — every claim traces geometry", ""]
+    lines.append(f"**Document:** {doc.title}")
+    a = audit(doc)
+    lines.append(f"**Claims:** {a['claims']}  ·  **Ungrounded:** "
+                 f"{a['ungrounded_claims']}  ·  **Negations preserved:** "
+                 f"{a['negations_preserved']}  ·  **Source nodes:** "
+                 f"{a['distinct_source_nodes']}  ·  **Faithful:** "
+                 f"{'YES' if a['faithful'] else 'NO'}")
+    lines.append("")
+    for si, sec in enumerate(doc.sections, 1):
+        lines.append(f"## {si}. {sec.heading}")
+        lines.append(f"_seed nodes: {', '.join(i[:8] for i in sec.seed_ids)}_")
+        lines.append("")
+        lines.append("| # | realized claim | traces geometry edge |")
+        lines.append("|---|----------------|----------------------|")
+        n = 0
+        for block in sec.blocks:
+            for sent, prov in zip(block.sentences, block.provenance):
+                if prov.kind == "connective":
+                    continue
+                n += 1
+                edge = prov.trace().replace("|", "\\|")
+                s = sent.replace("|", "\\|")
+                lines.append(f"| {n} | {s} | {edge} |")
+        lines.append("")
+    return "\n".join(lines) + "\n"

elp/projector/realize.py

@@ -0,0 +1,112 @@
+"""realize.py — REALIZE stage: fill each planned section with faithful passages.
+
+Scales the PROVEN realizer from a single assertion to a passage. For each
+planned proposition we build a realizer-ready clause (the proven
+``_prop_to_clause`` mapping) and run it through the proven engine
+(``engine.realize``), which is a deterministic grammar with the SACRED negation
+contract — it never invents. Each realized sentence is paired with a
+:class:`Provenance` that pins it to the exact geometry edge it came from.
+
+"Passage, not a list of sentences": within a section we lightly vary sentence
+openings and group related claims, but we add NO content the geometry did not
+assert. The only non-geometry words are function words the grammar already owns
+(articles, "and", conjunction of same-subject claims). Document-level flow is
+COHERE's job; this stage owns intra-section fluency + fidelity.
+"""
+from __future__ import annotations
+
+import os
+import sys
+
+_NT = os.path.expanduser("~/Desktop/neuron-talk")
+_LR = os.path.expanduser("~/Desktop/lang-realizers")
+for _p in (_NT, _LR):
+    if _p not in sys.path:
+        sys.path.insert(0, _p)
+
+import engine  # noqa: E402  (the proven no-LLM realizer)
+from dialogue import _prop_to_clause  # noqa: E402  (proven prop -> clause)
+
+from document_ir import Block, DocumentIR, Provenance, Section  # noqa: E402
+
+
+def _provenance_from(p, kind: str = "fact") -> Provenance:
+    return Provenance(
+        subj_id=p.source_node_id, subject=p.subject, relation=p.predicate,
+        obj=p.object, polarity=p.polarity, confidence=round(float(p.confidence), 3),
+        node_id=p.source_node_id, kind=kind,
+        importance=float(getattr(p, "node_importance", 0.0) or 0.0),
+        salience=0.0,
+    )
+
+
+import re as _re
+
+# a well-formed declarative opens with a determiner, a proper noun, "I", or a
+# capitalized head — not a mis-parsed object pronoun or a copula fragment.
+_BAD_OPENERS = _re.compile(r"^(Me |It is I|There is|This is it|That is it)\b")
+_VACUOUS = _re.compile(r"^\w+ (is|are|was|were) (it|no|nothing|empty|those|this|that)\.?$",
+                       _re.I)
+
+
+def _good_sentence(text: str) -> bool:
+    """Fluency gate — drops degenerate realizations. NEVER loosens faithfulness;
+    it only refuses to SPEAK a claim whose surface came out malformed."""
+    words = text.rstrip(".").split()
+    if len(words) < 3:
+        return False
+    if _BAD_OPENERS.search(text):
+        return False
+    if _VACUOUS.match(text):
+        return False
+    # a sentence that is mostly one-letter/two-letter tokens is a parse artifact
+    short = sum(1 for w in words if len(w.strip(".,'")) <= 2)
+    if short > len(words) / 2:
+        return False
+    return True
+
+
+def _realize_prop(p, lang: str = "en") -> tuple[str, Provenance] | None:
+    """One proposition -> (faithful sentence, provenance) or None if it drops."""
+    clause = _prop_to_clause(p)
+    text = engine.realize(clause, lang)
+    if not text or not text.strip():
+        return None
+    text = text.strip()
+    if not text.endswith((".", "!", "?")):
+        text += "."
+    # capitalize first character (proper nouns / "I" already handled by grammar)
+    text = text[0].upper() + text[1:]
+    if not _good_sentence(text):
+        return None
+    return text, _provenance_from(p)
+
+
+def realize_document(doc: DocumentIR, lang: str = "en") -> DocumentIR:
+    """Fill every planned section's blocks with faithful, realized passages."""
+    for sec in doc.sections:
+        planned = sec.__dict__.get("_planned_props", [])
+        block = Block(role="body")
+        summary_bits: list[str] = []
+        for p in planned:
+            r = _realize_prop(p, lang)
+            if r is None:
+                continue
+            text, prov = r
+            block.sentences.append(text)
+            block.provenance.append(prov)
+            if len(summary_bits) < 1:
+                # a short grounded gloss for TOC / pptx bullets
+                obj = (prov.obj or "").strip().rstrip(".")
+                if obj:
+                    summary_bits.append(obj)
+        if block.sentences:
+            sec.blocks.append(block)
+            sec.summary = summary_bits[0] if summary_bits else ""
+        # drop the transient planning payload; the IR is now self-contained
+        sec.__dict__.pop("_planned_props", None)
+        sec.__dict__.pop("_node", None)
+
+    # prune sections that realized to nothing
+    doc.sections = [s for s in doc.sections if s.blocks]
+    return doc

elp/src/audio-demo.el

@@ -0,0 +1,73 @@
+// audio-demo.el - Drive the native audio surface: render a tone per instrument
+// from its LEARNED signature, then render a small meaning-phrase "piece".
+// Entry point: top-level statement calls main() (same convention as the
+// examples' top-level println(run_test())).
+
+fn micros_to_str(xs: [Int]) -> String {
+    let n: Int = native_list_len(xs)
+    let out: String = ""
+    let i: Int = 0
+    while i < n {
+        if i > 0 { let out: String = out + "," }
+        let out: String = out + int_to_str(native_list_get(xs, i))
+        let i: Int = i + 1
+    }
+    return out
+}
+
+// Render a 1.0s A4 (midi 69) tone from a signature file, print the parsed
+// partials (proving the numbers came from the engram .sig), write the WAV.
+fn render_tone(name: String, sigpath: String, outpath: String, table: [Int]) -> Int {
+    let lines: [String] = sig_load(sigpath)
+    let partials: [Int] = parse_micros(sig_field(lines, "partials"))
+    println("[" + name + "] partials_n=" + sig_field(lines, "partials_n") + "  parsed_partials_micro(scale 1e6)=" + micros_to_str(partials))
+    println("[" + name + "] raw partials line from .sig = " + sig_field(lines, "partials"))
+    let freq: Int = freq_of_midi(69)
+    let note: [Int] = synth_from_sig(lines, freq, 1000, 900, 44100, table)
+    let n: Int = native_list_len(note)
+    let ok: Int = wav_write(outpath, note, n, 44100)
+    println("[" + name + "] rendered " + int_to_str(n) + " samples -> " + outpath + " (write_ok=" + int_to_str(ok) + ")")
+    return n
+}
+
+fn run_demo() -> Int {
+    let table: [Int] = sin_table()
+    fs_mkdir("/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out")
+
+    println("=== TONES: render A4 (midi 69) from each learned signature ===")
+    render_tone("flute",    "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/sig/flute.sig",    "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out/tone-flute.wav", table)
+    render_tone("clarinet", "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/sig/clarinet.sig", "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out/tone-clarinet.wav", table)
+    render_tone("violin",   "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/sig/violin.sig",   "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out/tone-violin.wav", table)
+    render_tone("piano",    "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/sig/piano.sig",    "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out/tone-piano.wav", table)
+    render_tone("organ",    "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/sig/organ.sig",    "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out/tone-organ.wav", table)
+
+    println("")
+    println("=== PIECE: a 6-frame meaning phrase (incl. a NEG frame) ===")
+    let frames: [[String]] = native_list_empty()
+    let frames: [[String]] = native_list_append(frames, audio_frame("agent",    "aff", "0.9", "0.8", "0", "s1"))
+    let frames: [[String]] = native_list_append(frames, audio_frame("theme",    "aff", "0.7", "0.6", "0", "s2"))
+    let frames: [[String]] = native_list_append(frames, audio_frame("cause",    "aff", "0.8", "0.9", "1", "s3"))
+    let frames: [[String]] = native_list_append(frames, audio_frame("negation", "neg", "0.85", "0.7", "0", "s4"))
+    let frames: [[String]] = native_list_append(frames, audio_frame("goal",     "aff", "0.6", "0.5", "1", "s5"))
+    let frames: [[String]] = native_list_append(frames, audio_frame("result",   "aff", "0.95", "1.0", "0", "s6"))
+
+    // Print the plan so the NEG frame's minor third (+3) vs major (+4) is visible.
+    let nf: Int = native_list_len(frames)
+    let fi: Int = 0
+    while fi < nf {
+        let frame: [String] = native_list_get(frames, fi)
+        let plan: [Int] = plan_note(frame)
+        let pol: String = surface_get(frame, "polarity")
+        let third_name: String = "major(+4)"
+        if str_eq(pol, "neg") { let third_name: String = "MINOR(+3)" }
+        println("frame " + int_to_str(fi) + " relation=" + surface_get(frame, "relation") + " polarity=" + pol + " -> midi=" + int_to_str(native_list_get(plan, 0)) + " dur_ms=" + int_to_str(native_list_get(plan, 1)) + " amp_pm=" + int_to_str(native_list_get(plan, 2)) + " third=" + third_name)
+        let fi: Int = fi + 1
+    }
+
+    let piano_lines: [String] = sig_load("/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/sig/piano.sig")
+    let total: Int = realize_audio(frames, piano_lines, "/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out/piece.wav", 44100, table)
+    println("PIECE rendered " + int_to_str(total) + " samples -> /Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out/piece.wav")
+    return total
+}
+
+println("audio-demo main returned samples=" + int_to_str(run_demo()))

elp/src/audio-surface.el

@@ -0,0 +1,400 @@
+// audio-surface.el - Native own-core additive-synthesis audio surface.
+//
+// The AUDIO efferent seam, native, no Python and no library. This renders real
+// PCM .wav bytes from instrument SIGNATURES read from engram-sourced .sig data
+// files (elp/faculty/sig/*.sig) - the partial amplitudes are NEVER literals in
+// this source; they are parsed from the learned signature at run time. That is
+// the whole proof: render-from-learned-signatures.
+//
+// EL has no float arithmetic operator (codegen emits raw int64 ops for + - * /
+// on the shared 64-bit slot) and no float-arithmetic natives - so ALL synthesis
+// math here is own-core INTEGER fixed-point. Angles use a quarter-wave sine
+// table (scale 10000) from a fixed-point Taylor series; amplitudes are parsed to
+// micro (scale 1e6) straight from the .sig text; frequencies are milliHz ints.
+//
+// Pipeline mirrors the two-stage projector (midi.py): plan_note(frame) reads a
+// frame's meaning-geometry slot-map and derives (pitch, duration, amplitude);
+// realize_audio SUPERPOSES the signature's partials (the compose op) and
+// serialises RIFF/WAVE. Same frame -> midi OR audio.
+
+// -- integer decimal + string helpers -----------------------------------------
+
+fn str_to_int_el(s: String) -> Int {
+    let n: Int = str_len(s)
+    let i: Int = 0
+    let v: Int = 0
+    let neg: Bool = false
+    while i < n {
+        let c: Int = str_char_code(s, i)
+        if c == 45 { let neg: Bool = true }
+        if c >= 48 {
+            if c < 58 {
+                let v: Int = v * 10 + (c - 48)
+            }
+        }
+        let i: Int = i + 1
+    }
+    if neg { return 0 - v }
+    return v
+}
+
+fn parse_micro(s: String) -> Int {
+    let dot: Int = str_index_of(s, ".")
+    if dot < 0 {
+        return str_to_int_el(s) * 1000000
+    }
+    let n: Int = str_len(s)
+    let ipart: String = str_slice(s, 0, dot)
+    let fpart: String = str_slice(s, dot + 1, n)
+    let iv: Int = str_to_int_el(ipart)
+    let fv: Int = 0
+    let scale: Int = 100000
+    let fn2: Int = str_len(fpart)
+    let i: Int = 0
+    while i < 6 {
+        let d: Int = 0
+        if i < fn2 {
+            let d: Int = str_char_code(fpart, i) - 48
+        }
+        let fv: Int = fv + d * scale
+        let scale: Int = scale / 10
+        let i: Int = i + 1
+    }
+    return iv * 1000000 + fv
+}
+
+// -- signature (engram data file) loader ---------------------------------------
+
+fn sig_load(path: String) -> [String] {
+    let text: String = fs_read(path)
+    return str_split(text, "\n")
+}
+
+fn sig_field(lines: [String], key: String) -> String {
+    let pref: String = key + ": "
+    let n: Int = native_list_len(lines)
+    let plen: Int = str_len(pref)
+    let i: Int = 0
+    while i < n {
+        let ln: String = native_list_get(lines, i)
+        if str_starts_with(ln, pref) {
+            return str_slice(ln, plen, str_len(ln))
+        }
+        let i: Int = i + 1
+    }
+    return ""
+}
+
+fn parse_micros(csv: String) -> [Int] {
+    let parts: [String] = str_split(csv, ",")
+    let n: Int = native_list_len(parts)
+    let out: [Int] = native_list_empty()
+    let i: Int = 0
+    while i < n {
+        let out: [Int] = native_list_append(out, parse_micro(native_list_get(parts, i)))
+        let i: Int = i + 1
+    }
+    return out
+}
+
+// -- fixed-point sine (own-core, quarter-wave Taylor table, scale 10000) --------
+
+fn sin_table() -> [Int] {
+    let HP: Int = 1570796
+    let t: [Int] = native_list_empty()
+    let q: Int = 0
+    while q < 257 {
+        let x: Int = q * HP / 256
+        let x2: Int = x * x / 1000000
+        let x3: Int = x2 * x / 1000000
+        let x5: Int = x3 * x2 / 1000000
+        let x7: Int = x5 * x2 / 1000000
+        let x9: Int = x7 * x2 / 1000000
+        let s: Int = x - x3 / 6 + x5 / 120 - x7 / 5040 + x9 / 362880
+        let t: [Int] = native_list_append(t, s / 100)
+        let q: Int = q + 1
+    }
+    return t
+}
+
+fn sin_lookup(t: [Int], phase: Int) -> Int {
+    let p: Int = phase % 1024
+    if p < 0 { let p: Int = p + 1024 }
+    let quad: Int = p / 256
+    let r: Int = p % 256
+    if quad == 0 { return native_list_get(t, r) }
+    if quad == 1 { return native_list_get(t, 256 - r) }
+    if quad == 2 { return 0 - native_list_get(t, r) }
+    return 0 - native_list_get(t, 256 - r)
+}
+
+fn isqrt_int(n: Int) -> Int {
+    if n <= 0 { return 0 }
+    let x: Int = n
+    let y: Int = (x + 1) / 2
+    while y < x {
+        let x: Int = y
+        let y: Int = (x + n / x) / 2
+    }
+    return x
+}
+
+// freq_of_midi: equal-tempered frequency in milliHz. 440000 mHz at midi 69.
+fn freq_of_midi(m: Int) -> Int {
+    let f: Int = 440000
+    if m > 69 {
+        let k: Int = m - 69
+        let i: Int = 0
+        while i < k {
+            let f: Int = f * 1059463 / 1000000
+            let i: Int = i + 1
+        }
+        return f
+    }
+    if m < 69 {
+        let k: Int = 69 - m
+        let i: Int = 0
+        while i < k {
+            let f: Int = f * 1000000 / 1059463
+            let i: Int = i + 1
+        }
+        return f
+    }
+    return f
+}
+
+// -- envelope (ADSR), scale 1000 -----------------------------------------------
+
+fn adsr_env(i: Int, total: Int, atk_n: Int, dec_n: Int, sus_pm: Int, rel_n: Int) -> Int {
+    if i < atk_n {
+        if atk_n == 0 { return 1000 }
+        return 1000 * i / atk_n
+    }
+    if i < atk_n + dec_n {
+        if dec_n == 0 { return sus_pm }
+        return 1000 - (1000 - sus_pm) * (i - atk_n) / dec_n
+    }
+    let rel_start: Int = total - rel_n
+    if i < rel_start {
+        return sus_pm
+    }
+    if rel_n == 0 { return 0 }
+    let left: Int = total - i
+    return sus_pm * left / rel_n
+}
+
+// -- note synthesis: SUPERPOSE the learned partials -> [Int] samples -----------
+fn note_samples(freq_mHz: Int, dur_ms: Int, rate: Int, partials: [Int], sumP: Int, b_micro: Int, vib_rate: Int, vib_cents: Int, atk_ms: Int, dec_ms: Int, sus_pm: Int, rel_ms: Int, amp_pm: Int, table: [Int]) -> [Int] {
+    let total: Int = dur_ms * rate / 1000
+    let atk_n: Int = atk_ms * rate / 1000
+    let dec_n: Int = dec_ms * rate / 1000
+    let rel_n: Int = rel_ms * rate / 1000
+    let np: Int = native_list_len(partials)
+    let half_mhz: Int = rate * 1000 / 2
+    let out: [Int] = native_list_empty()
+    let i: Int = 0
+    while i < total {
+        let acc: Int = 0
+        let k: Int = 0
+        while k < np {
+            let harm: Int = k + 1
+            let amp_k: Int = native_list_get(partials, k)
+            let factor: Int = 1000000
+            if b_micro > 0 {
+                let val: Int = 1000000 + b_micro * harm * harm
+                let factor: Int = isqrt_int(val * 1000000)
+            }
+            let fn_mhz: Int = freq_mHz * harm
+            let fn_mhz: Int = fn_mhz * factor / 1000000
+            if vib_cents > 0 {
+                if vib_rate > 0 {
+                    let vphase: Int = i * vib_rate * 1024 / rate
+                    let vs: Int = sin_lookup(table, vphase)
+                    let vibf: Int = 1000000 + (vib_cents * vs * 833) / 10000
+                    let fn_mhz: Int = fn_mhz * vibf / 1000000
+                }
+            }
+            if fn_mhz <= half_mhz {
+                let phase: Int = i * fn_mhz * 1024 / (rate * 1000)
+                let sv: Int = sin_lookup(table, phase)
+                let acc: Int = acc + sv * amp_k / 1000000
+            }
+            let k: Int = k + 1
+        }
+        let env: Int = adsr_env(i, total, atk_n, dec_n, sus_pm, rel_n)
+        let s16: Int = acc * 2800000 / sumP
+        let s16: Int = s16 * env / 1000
+        let s16: Int = s16 * amp_pm / 1000
+        if s16 > 32767 { let s16: Int = 32767 }
+        if s16 < 0 - 32767 { let s16: Int = 0 - 32767 }
+        let out: [Int] = native_list_append(out, s16)
+        let i: Int = i + 1
+    }
+    return out
+}
+
+fn synth_from_sig(lines: [String], freq_mHz: Int, dur_ms: Int, amp_pm: Int, rate: Int, table: [Int]) -> [Int] {
+    let partials: [Int] = parse_micros(sig_field(lines, "partials"))
+    let np: Int = native_list_len(partials)
+    let sumP: Int = 0
+    let j: Int = 0
+    while j < np {
+        let pj: Int = native_list_get(partials, j)
+        let sumP: Int = sumP + pj
+        let j: Int = j + 1
+    }
+    if sumP <= 0 { let sumP: Int = 1000000 }
+    let adsr: [String] = str_split(sig_field(lines, "adsr"), ",")
+    let atk_ms: Int = parse_micro(native_list_get(adsr, 0)) / 1000
+    let dec_ms: Int = parse_micro(native_list_get(adsr, 1)) / 1000
+    let sus_pm: Int = parse_micro(native_list_get(adsr, 2)) / 1000
+    let rel_ms: Int = parse_micro(native_list_get(adsr, 3)) / 1000
+    let b_micro: Int = parse_micro(sig_field(lines, "inharmonicity_B"))
+    let vib_rate: Int = str_to_int_el(sig_field(lines, "vibrato_rate_hz"))
+    let vib_cents: Int = str_to_int_el(sig_field(lines, "vibrato_depth_cents"))
+    return note_samples(freq_mHz, dur_ms, rate, partials, sumP, b_micro, vib_rate, vib_cents, atk_ms, dec_ms, sus_pm, rel_ms, amp_pm, table)
+}
+
+// -- byte-buffer helpers (own-core, no library) --------------------------------
+
+fn put_tag(buf: String, pos: Int, s: String) -> String {
+    let n: Int = str_len(s)
+    let i: Int = 0
+    while i < n {
+        let buf: String = __str_set_char(buf, pos + i, str_char_code(s, i))
+        let i: Int = i + 1
+    }
+    return buf
+}
+
+fn put_u32le(buf: String, pos: Int, v: Int) -> String {
+    let buf: String = __str_set_char(buf, pos, v % 256)
+    let buf: String = __str_set_char(buf, pos + 1, (v / 256) % 256)
+    let buf: String = __str_set_char(buf, pos + 2, (v / 65536) % 256)
+    let buf: String = __str_set_char(buf, pos + 3, (v / 16777216) % 256)
+    return buf
+}
+
+fn put_u16le(buf: String, pos: Int, v: Int) -> String {
+    let buf: String = __str_set_char(buf, pos, v % 256)
+    let buf: String = __str_set_char(buf, pos + 1, (v / 256) % 256)
+    return buf
+}
+
+// -- WAV serializer: own-core RIFF/WAVE, PCM mono 16-bit -----------------------
+
+fn wav_write(path: String, samples: [Int], n: Int, rate: Int) -> Int {
+    let data_len: Int = n * 2
+    let total: Int = 44 + data_len
+    let buf: String = __str_alloc(total)
+    let buf: String = put_tag(buf, 0, "RIFF")
+    let buf: String = put_u32le(buf, 4, 36 + data_len)
+    let buf: String = put_tag(buf, 8, "WAVE")
+    let buf: String = put_tag(buf, 12, "fmt ")
+    let buf: String = put_u32le(buf, 16, 16)
+    let buf: String = put_u16le(buf, 20, 1)
+    let buf: String = put_u16le(buf, 22, 1)
+    let buf: String = put_u32le(buf, 24, rate)
+    let buf: String = put_u32le(buf, 28, rate * 2)
+    let buf: String = put_u16le(buf, 32, 2)
+    let buf: String = put_u16le(buf, 34, 16)
+    let buf: String = put_tag(buf, 36, "data")
+    let buf: String = put_u32le(buf, 40, data_len)
+    let i: Int = 0
+    while i < n {
+        let v: Int = native_list_get(samples, i)
+        if v < 0 { let v: Int = v + 65536 }
+        let buf: String = __str_set_char(buf, 44 + i * 2, v % 256)
+        let buf: String = __str_set_char(buf, 44 + i * 2 + 1, (v / 256) % 256)
+        let i: Int = i + 1
+    }
+    let ok: Int = fs_write_bytes(path, buf, total)
+    return ok
+}
+
+// -- plan: frame slot-map -> note atom (pitch, duration, amplitude) ------------
+
+fn audio_frame(relation: String, polarity: String, confidence: String, importance: String, salience: String, subj_id: String) -> [String] {
+    let f: [String] = native_list_empty()
+    let f: [String] = native_list_append(f, "relation")
+    let f: [String] = native_list_append(f, relation)
+    let f: [String] = native_list_append(f, "polarity")
+    let f: [String] = native_list_append(f, polarity)
+    let f: [String] = native_list_append(f, "confidence")
+    let f: [String] = native_list_append(f, confidence)
+    let f: [String] = native_list_append(f, "importance")
+    let f: [String] = native_list_append(f, importance)
+    let f: [String] = native_list_append(f, "salience")
+    let f: [String] = native_list_append(f, salience)
+    let f: [String] = native_list_append(f, "subj_id")
+    let f: [String] = native_list_append(f, subj_id)
+    return f
+}
+
+fn degree_offset(deg: Int) -> Int {
+    if deg == 0 { return 0 }
+    if deg == 1 { return 2 }
+    if deg == 2 { return 4 }
+    if deg == 3 { return 5 }
+    if deg == 4 { return 7 }
+    if deg == 5 { return 9 }
+    return 11
+}
+
+// returns [midi, dur_ms, amp_pm]
+fn plan_note(frame: [String]) -> [Int] {
+    let relation: String = surface_get(frame, "relation")
+    let polarity: String = surface_get(frame, "polarity")
+    let confidence: String = surface_get(frame, "confidence")
+    let importance: String = surface_get(frame, "importance")
+    let salience: String = surface_get(frame, "salience")
+    let rn: Int = str_len(relation)
+    let csum: Int = 0
+    let i: Int = 0
+    while i < rn {
+        let cc: Int = str_char_code(relation, i)
+        let csum: Int = csum + cc
+        let i: Int = i + 1
+    }
+    let deg: Int = csum % 7
+    let third: Int = 4
+    if str_eq(polarity, "neg") { let third: Int = 3 }
+    let sal_oct: Int = str_to_int_el(salience)
+    let doff: Int = degree_offset(deg)
+    let midi: Int = 60 + sal_oct * 12 + doff + third
+    let conf_micro: Int = parse_micro(confidence)
+    let dur_ms: Int = 200 + conf_micro / 1000
+    let imp_micro: Int = parse_micro(importance)
+    let amp_pm: Int = 400 + imp_micro / 2000
+    let out: [Int] = native_list_empty()
+    let out: [Int] = native_list_append(out, midi)
+    let out: [Int] = native_list_append(out, dur_ms)
+    let out: [Int] = native_list_append(out, amp_pm)
+    return out
+}
+
+fn realize_audio(frames: [[String]], sig_lines: [String], path: String, rate: Int, table: [Int]) -> Int {
+    let nf: Int = native_list_len(frames)
+    let all: [Int] = native_list_empty()
+    let count: Int = 0
+    let fi: Int = 0
+    while fi < nf {
+        let frame: [String] = native_list_get(frames, fi)
+        let plan: [Int] = plan_note(frame)
+        let midi: Int = native_list_get(plan, 0)
+        let dur_ms: Int = native_list_get(plan, 1)
+        let amp_pm: Int = native_list_get(plan, 2)
+        let freq: Int = freq_of_midi(midi)
+        let note: [Int] = synth_from_sig(sig_lines, freq, dur_ms, amp_pm, rate, table)
+        let nn: Int = native_list_len(note)
+        let j: Int = 0
+        while j < nn {
+            let all: [Int] = native_list_append(all, native_list_get(note, j))
+            let j: Int = j + 1
+        }
+        let count: Int = count + nn
+        let fi: Int = fi + 1
+    }
+    let ok: Int = wav_write(path, all, count, rate)
+    return count
+}

elp/src/elp.elh

@@ -1,7 +1,7 @@
 // auto-generated by elc --emit-header — do not edit
 extern fn sem_get(json: String, key: String) -> String
-extern fn generate_frame(frame: Any) -> String
-extern fn generate_frame_lang(frame: Any, lang_code: String) -> String
-extern fn build_form_from_json(semantic_form_json: String, lang_code: String) -> Any
+extern fn generate_frame(frame: [String]) -> String
+extern fn generate_frame_lang(frame: [String], lang_code: String) -> String
+extern fn build_form_from_json(semantic_form_json: String, lang_code: String) -> [String]
 extern fn generate(semantic_form_json: String) -> String
 extern fn generate_lang(semantic_form_json: String, lang_code: String) -> String

elp/src/grammar.elh

@@ -1,22 +1,22 @@
-// auto-generated by elc --emit-header - do not edit
-extern fn slots_get(slots: Any, key: String) -> String
-extern fn slots_set(slots: Any, key: String, val: String) -> Any
-extern fn make_slots(k0: String, v0: String) -> Any
-extern fn make_slots2(k0: String, v0: String, k1: String, v1: String) -> Any
-extern fn make_slots3(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String) -> Any
-extern fn make_slots4(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String, k3: String, v3: String) -> Any
-extern fn make_slots5(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String, k3: String, v3: String, k4: String, v4: String) -> Any
-extern fn rule_id(rule: Any) -> String
-extern fn rule_lhs(rule: Any) -> String
-extern fn rule_rhs_len(rule: Any) -> Int
-extern fn rule_rhs(rule: Any, idx: Int) -> String
-extern fn make_rule(id: String, lhs: String, r0: String) -> Any
-extern fn make_rule2(id: String, lhs: String, r0: String, r1: String) -> Any
-extern fn make_rule3(id: String, lhs: String, r0: String, r1: String, r2: String) -> Any
-extern fn make_rule4(id: String, lhs: String, r0: String, r1: String, r2: String, r3: String) -> Any
-extern fn build_rules() -> Any
-extern fn get_rules() -> Any
-extern fn find_rule(rule_id_str: String) -> Any
+// auto-generated by elc --emit-header — do not edit
+extern fn slots_get(slots: [String], key: String) -> String
+extern fn slots_set(slots: [String], key: String, val: String) -> [String]
+extern fn make_slots(k0: String, v0: String) -> [String]
+extern fn make_slots2(k0: String, v0: String, k1: String, v1: String) -> [String]
+extern fn make_slots3(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String) -> [String]
+extern fn make_slots4(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String, k3: String, v3: String) -> [String]
+extern fn make_slots5(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String, k3: String, v3: String, k4: String, v4: String) -> [String]
+extern fn rule_id(rule: [String]) -> String
+extern fn rule_lhs(rule: [String]) -> String
+extern fn rule_rhs_len(rule: [String]) -> Int
+extern fn rule_rhs(rule: [String], idx: Int) -> String
+extern fn make_rule(id: String, lhs: String, r0: String) -> [String]
+extern fn make_rule2(id: String, lhs: String, r0: String, r1: String) -> [String]
+extern fn make_rule3(id: String, lhs: String, r0: String, r1: String, r2: String) -> [String]
+extern fn make_rule4(id: String, lhs: String, r0: String, r1: String, r2: String, r3: String) -> [String]
+extern fn build_rules() -> [[String]]
+extern fn get_rules() -> [[String]]
+extern fn find_rule(rule_id_str: String) -> [String]
 extern fn make_leaf(label: String, word: String) -> String
 extern fn make_node1(label: String, child0: String) -> String
 extern fn make_node2(label: String, child0: String, child1: String) -> String
@@ -24,15 +24,15 @@ extern fn make_node3(label: String, child0: String, child1: String, child2: Stri
 extern fn make_node4(label: String, child0: String, child1: String, child2: String, child3: String) -> String
 extern fn nlg_is_ws(c: String) -> Bool
 extern fn skip_ws(s: String, pos: Int) -> Int
-extern fn scan_token(s: String, start: Int) -> Any
+extern fn scan_token(s: String, start: Int) -> [String]
 extern fn render_tree(tree: String) -> String
-extern fn gram_word_order(profile: Any) -> String
-extern fn gram_order_constituents(subj: String, verb: String, obj: String, profile: Any) -> String
-extern fn gram_build_vp(verb: String, aux: String, profile: Any) -> String
-extern fn gram_question_strategy(profile: Any) -> String
+extern fn gram_word_order(profile: [String]) -> String
+extern fn gram_order_constituents(subj: String, verb: String, obj: String, profile: [String]) -> String
+extern fn gram_build_vp(verb: String, aux: String, profile: [String]) -> String
+extern fn gram_question_strategy(profile: [String]) -> String
 extern fn is_pronoun(word: String) -> Bool
-extern fn build_np(referent: String, slots: Any) -> String
+extern fn build_np(referent: String, slots: [String]) -> String
 extern fn build_pp(loc: String) -> String
-extern fn build_vp_body(slots: Any) -> String
-extern fn build_vp_from_slots(slots: Any) -> String
-extern fn generate_tree(rule_id_str: String, slots: Any) -> String
+extern fn build_vp_body(slots: [String]) -> String
+extern fn build_vp_from_slots(slots: [String]) -> String
+extern fn generate_tree(rule_id_str: String, slots: [String]) -> String

elp/src/image-demo.el

@@ -0,0 +1,65 @@
+// image-demo.el - Drive the native PNG surface: plan a scene from a small
+// meaning phrase (incl. a NEG frame) and emit a byte-valid 64x64 PNG whose
+// palette is read from elp/faculty/sig/scene.basis.
+
+fn img_frame(relation: String, polarity: String, confidence: String, importance: String, salience: String, subj_id: String) -> [String] {
+    let f: [String] = native_list_empty()
+    let f: [String] = native_list_append(f, "relation")
+    let f: [String] = native_list_append(f, relation)
+    let f: [String] = native_list_append(f, "polarity")
+    let f: [String] = native_list_append(f, polarity)
+    let f: [String] = native_list_append(f, "confidence")
+    let f: [String] = native_list_append(f, confidence)
+    let f: [String] = native_list_append(f, "importance")
+    let f: [String] = native_list_append(f, importance)
+    let f: [String] = native_list_append(f, "salience")
+    let f: [String] = native_list_append(f, salience)
+    let f: [String] = native_list_append(f, "subj_id")
+    let f: [String] = native_list_append(f, subj_id)
+    return f
+}
+
+fn rgb_str(c: [Int]) -> String {
+    return int_to_str(native_list_get(c, 0)) + "," + int_to_str(native_list_get(c, 1)) + "," + int_to_str(native_list_get(c, 2))
+}
+
+fn run_image() -> Int {
+    fs_mkdir("/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out")
+    let table: [Int] = crc_table()
+    println("crc_table[1]=" + int_to_str(native_list_get(table, 1)) + " (expect 1996959894 / 0x77073096)")
+
+    let basis: [String] = basis_load("/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/sig/scene.basis")
+    let warm: [Int] = parse_rgb(basis_field(basis, "warm"))
+    let cool: [Int] = parse_rgb(basis_field(basis, "cool"))
+    let bg: [Int] = parse_rgb(basis_field(basis, "bg"))
+    println("basis warm=" + rgb_str(warm) + " cool=" + rgb_str(cool) + " bg=" + rgb_str(bg) + "  (read from scene.basis)")
+
+    let frames: [[String]] = native_list_empty()
+    let frames: [[String]] = native_list_append(frames, img_frame("agent",    "aff", "0.9", "0.8", "0", "s1"))
+    let frames: [[String]] = native_list_append(frames, img_frame("theme",    "aff", "0.7", "0.6", "1", "s2"))
+    let frames: [[String]] = native_list_append(frames, img_frame("cause",    "aff", "0.8", "0.9", "0", "s3"))
+    let frames: [[String]] = native_list_append(frames, img_frame("negation", "neg", "0.85", "0.7", "1", "s4"))
+    let frames: [[String]] = native_list_append(frames, img_frame("goal",     "aff", "0.6", "0.5", "0", "s5"))
+    let frames: [[String]] = native_list_append(frames, img_frame("result",   "aff", "0.95", "1.0", "1", "s6"))
+
+    let shapes: [[Int]] = plan_scene(frames, warm, cool)
+    let ns: Int = native_list_len(shapes)
+    println("planned " + int_to_str(ns) + " shapes:")
+    let si: Int = 0
+    while si < ns {
+        let sh: [Int] = native_list_get(shapes, si)
+        let pol: String = surface_get(native_list_get(frames, si), "polarity")
+        println("  shape " + int_to_str(si) + " type=" + int_to_str(native_list_get(sh, 0)) + " x=" + int_to_str(native_list_get(sh, 1)) + " y=" + int_to_str(native_list_get(sh, 2)) + " size=" + int_to_str(native_list_get(sh, 3)) + " rgb=" + int_to_str(native_list_get(sh, 4)) + "," + int_to_str(native_list_get(sh, 5)) + "," + int_to_str(native_list_get(sh, 6)) + " polarity=" + pol)
+        let si: Int = si + 1
+    }
+
+    let raw: [Int] = rasterize(64, 64, shapes, bg)
+    println("rasterized raw (filtered scanlines) bytes=" + int_to_str(native_list_len(raw)) + " (expect 12352)")
+    let png: [Int] = png_build(64, 64, raw, table)
+    let plen: Int = native_list_len(png)
+    let ok: Int = png_write("/Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out/scene.png", png)
+    println("PNG bytes=" + int_to_str(plen) + " -> /Users/will/Development/neuron-technologies/foundation/el/.claude/worktrees/agent-aaf04b0a9714c4070/elp/faculty/out/scene.png (write_ok=" + int_to_str(ok) + ")")
+    return plen
+}
+
+println("image-demo returned png_bytes=" + int_to_str(run_image()))

elp/src/image-surface.el

@@ -0,0 +1,412 @@
+// image-surface.el - Native own-core raster PNG surface (the image efferent
+// twin of audio). Renders a 64x64 RGB scene deterministically from a frame's
+// meaning-geometry, then serialises a byte-valid PNG entirely own-core:
+// 8-byte magic, IHDR, IDAT (zlib STORED/uncompressed DEFLATE + Adler32), IEND,
+// with a per-chunk CRC32 computed via software xor32 (EL has no bitwise ops).
+//
+// The RGB palette basis is read from elp/faculty/sig/scene.basis (data, not
+// literals) - the same read-from-learned discipline as the audio signatures.
+// Integer-only throughout; pixels are composed functionally (painter's order)
+// so no list mutation is needed.
+
+// -- small int/parse helpers (self-contained) ----------------------------------
+
+fn i_str_to_int(s: String) -> Int {
+    let n: Int = str_len(s)
+    let i: Int = 0
+    let v: Int = 0
+    while i < n {
+        let c: Int = str_char_code(s, i)
+        if c >= 48 {
+            if c < 58 {
+                let v: Int = v * 10 + (c - 48)
+            }
+        }
+        let i: Int = i + 1
+    }
+    return v
+}
+
+fn basis_load(path: String) -> [String] {
+    return str_split(fs_read(path), "\n")
+}
+
+fn basis_field(lines: [String], key: String) -> String {
+    let pref: String = key + ": "
+    let n: Int = native_list_len(lines)
+    let plen: Int = str_len(pref)
+    let i: Int = 0
+    while i < n {
+        let ln: String = native_list_get(lines, i)
+        if str_starts_with(ln, pref) {
+            return str_slice(ln, plen, str_len(ln))
+        }
+        let i: Int = i + 1
+    }
+    return ""
+}
+
+fn parse_rgb(csv: String) -> [Int] {
+    let parts: [String] = str_split(csv, ",")
+    let out: [Int] = native_list_empty()
+    let n: Int = native_list_len(parts)
+    let i: Int = 0
+    while i < n {
+        let v: Int = i_str_to_int(native_list_get(parts, i))
+        let out: [Int] = native_list_append(out, v)
+        let i: Int = i + 1
+    }
+    return out
+}
+
+// -- software 32-bit XOR (no bitwise ops in EL) --------------------------------
+
+fn xor32(a: Int, b: Int) -> Int {
+    let r: Int = 0
+    let bit: Int = 1
+    let i: Int = 0
+    while i < 32 {
+        let abit: Int = (a / bit) % 2
+        let bbit: Int = (b / bit) % 2
+        if abit != bbit {
+            let add: Int = bit
+            let r: Int = r + add
+        }
+        let bit: Int = bit * 2
+        let i: Int = i + 1
+    }
+    return r
+}
+
+// -- CRC32 (table-driven, table built with xor32) ------------------------------
+
+fn crc_table() -> [Int] {
+    let t: [Int] = native_list_empty()
+    let n: Int = 0
+    while n < 256 {
+        let c: Int = n
+        let k: Int = 0
+        while k < 8 {
+            if c % 2 == 1 {
+                let h: Int = c / 2
+                let c: Int = xor32(h, 3988292384)
+            } else {
+                let c: Int = c / 2
+            }
+            let k: Int = k + 1
+        }
+        let t: [Int] = native_list_append(t, c)
+        let n: Int = n + 1
+    }
+    return t
+}
+
+fn crc32_of(bytes: [Int], table: [Int]) -> Int {
+    let crc: Int = 4294967295
+    let n: Int = native_list_len(bytes)
+    let i: Int = 0
+    while i < n {
+        let b: Int = native_list_get(bytes, i)
+        let lo: Int = crc % 256
+        let idx: Int = xor32(lo, b) % 256
+        let tv: Int = native_list_get(table, idx)
+        let hi: Int = crc / 256
+        let crc: Int = xor32(hi, tv)
+        let i: Int = i + 1
+    }
+    return xor32(crc, 4294967295)
+}
+
+// -- Adler32 (for the zlib trailer) --------------------------------------------
+
+fn adler32_of(bytes: [Int]) -> Int {
+    let a: Int = 1
+    let b: Int = 0
+    let n: Int = native_list_len(bytes)
+    let i: Int = 0
+    while i < n {
+        let byte: Int = native_list_get(bytes, i)
+        let a: Int = (a + byte) % 65521
+        let b: Int = (b + a) % 65521
+        let i: Int = i + 1
+    }
+    return b * 65536 + a
+}
+
+// -- byte-list append helpers --------------------------------------------------
+
+fn app_u32be(dst: [Int], v: Int) -> [Int] {
+    let dst: [Int] = native_list_append(dst, (v / 16777216) % 256)
+    let dst: [Int] = native_list_append(dst, (v / 65536) % 256)
+    let dst: [Int] = native_list_append(dst, (v / 256) % 256)
+    let dst: [Int] = native_list_append(dst, v % 256)
+    return dst
+}
+
+fn app_tag(dst: [Int], s: String) -> [Int] {
+    let n: Int = str_len(s)
+    let i: Int = 0
+    while i < n {
+        let dst: [Int] = native_list_append(dst, str_char_code(s, i))
+        let i: Int = i + 1
+    }
+    return dst
+}
+
+fn app_all(dst: [Int], src: [Int]) -> [Int] {
+    let n: Int = native_list_len(src)
+    let i: Int = 0
+    while i < n {
+        let dst: [Int] = native_list_append(dst, native_list_get(src, i))
+        let i: Int = i + 1
+    }
+    return dst
+}
+
+// -- plan: frame meaning-geometry -> shape atoms -------------------------------
+// shape = [type, x, y, size, r, g, b]  (type 0=rect 1=disc 2=triangle)
+
+fn charsum(s: String) -> Int {
+    let n: Int = str_len(s)
+    let i: Int = 0
+    let acc: Int = 0
+    while i < n {
+        let c: Int = str_char_code(s, i)
+        let acc: Int = acc + c
+        let i: Int = i + 1
+    }
+    return acc
+}
+
+fn micro_of(s: String) -> Int {
+    let dot: Int = str_index_of(s, ".")
+    if dot < 0 { return i_str_to_int(s) * 1000000 }
+    let n: Int = str_len(s)
+    let fp: String = str_slice(s, dot + 1, n)
+    let ip: String = str_slice(s, 0, dot)
+    let iv: Int = i_str_to_int(ip)
+    let fv: Int = 0
+    let scale: Int = 100000
+    let fl: Int = str_len(fp)
+    let i: Int = 0
+    while i < 6 {
+        let d: Int = 0
+        if i < fl { let d: Int = str_char_code(fp, i) - 48 }
+        let fv: Int = fv + d * scale
+        let scale: Int = scale / 10
+        let i: Int = i + 1
+    }
+    return iv * 1000000 + fv
+}
+
+fn plan_scene(frames: [[String]], warm: [Int], cool: [Int]) -> [[Int]] {
+    let shapes: [[Int]] = native_list_empty()
+    let nf: Int = native_list_len(frames)
+    let fi: Int = 0
+    while fi < nf {
+        let fr: [String] = native_list_get(frames, fi)
+        let relation: String = surface_get(fr, "relation")
+        let polarity: String = surface_get(fr, "polarity")
+        let confidence: String = surface_get(fr, "confidence")
+        let importance: String = surface_get(fr, "importance")
+        let salience: String = surface_get(fr, "salience")
+        // relation -> shape type
+        let stype: Int = charsum(relation) % 3
+        // confidence -> size (8..22)
+        let cmi: Int = micro_of(confidence)
+        let size: Int = 8 + cmi / 71428
+        // salience -> y
+        let sal: Int = i_str_to_int(salience)
+        let y: Int = 6 + sal * 26
+        // subj_id/index -> x
+        let x: Int = 4 + (fi * 10) % 48
+        // polarity -> warm/cool base color
+        let br: Int = native_list_get(warm, 0)
+        let bg2: Int = native_list_get(warm, 1)
+        let bb: Int = native_list_get(warm, 2)
+        if str_eq(polarity, "neg") {
+            let br: Int = native_list_get(cool, 0)
+            let bg2: Int = native_list_get(cool, 1)
+            let bb: Int = native_list_get(cool, 2)
+        }
+        // importance -> brightness (500..1000 permille)
+        let imi: Int = micro_of(importance)
+        let bpm: Int = 500 + imi / 2000
+        let r: Int = br * bpm / 1000
+        let g: Int = bg2 * bpm / 1000
+        let b: Int = bb * bpm / 1000
+        let sh: [Int] = native_list_empty()
+        let sh: [Int] = native_list_append(sh, stype)
+        let sh: [Int] = native_list_append(sh, x)
+        let sh: [Int] = native_list_append(sh, y)
+        let sh: [Int] = native_list_append(sh, size)
+        let sh: [Int] = native_list_append(sh, r)
+        let sh: [Int] = native_list_append(sh, g)
+        let sh: [Int] = native_list_append(sh, b)
+        let shapes: [[Int]] = native_list_append(shapes, sh)
+        let fi: Int = fi + 1
+    }
+    return shapes
+}
+
+// covers: is (px,py) inside this shape?
+fn covers(sh: [Int], px: Int, py: Int) -> Bool {
+    let stype: Int = native_list_get(sh, 0)
+    let sx: Int = native_list_get(sh, 1)
+    let sy: Int = native_list_get(sh, 2)
+    let size: Int = native_list_get(sh, 3)
+    let cx: Int = sx + size / 2
+    if stype == 0 {
+        if px >= sx {
+            if px < sx + size {
+                if py >= sy {
+                    if py < sy + size {
+                        return true
+                    }
+                }
+            }
+        }
+        return false
+    }
+    if stype == 1 {
+        let rad: Int = size / 2
+        let dx: Int = px - cx
+        let dy: Int = py - (sy + rad)
+        if dx * dx + dy * dy <= rad * rad {
+            return true
+        }
+        return false
+    }
+    // triangle: apex at top (sy), base at sy+size
+    if py >= sy {
+        if py < sy + size {
+            let dyv: Int = py - sy
+            let halfw: Int = dyv / 2
+            let dxv: Int = px - cx
+            let adx: Int = dxv
+            if adx < 0 { let adx: Int = 0 - dxv }
+            if adx <= halfw {
+                return true
+            }
+        }
+    }
+    return false
+}
+
+// pixel_color: painter's algorithm - last covering shape wins. Returns [r,g,b].
+fn pixel_color(px: Int, py: Int, shapes: [[Int]], bg: [Int]) -> [Int] {
+    let r: Int = native_list_get(bg, 0)
+    let g: Int = native_list_get(bg, 1)
+    let b: Int = native_list_get(bg, 2)
+    let n: Int = native_list_len(shapes)
+    let i: Int = 0
+    while i < n {
+        let sh: [Int] = native_list_get(shapes, i)
+        if covers(sh, px, py) {
+            let r: Int = native_list_get(sh, 4)
+            let g: Int = native_list_get(sh, 5)
+            let b: Int = native_list_get(sh, 6)
+        }
+        let i: Int = i + 1
+    }
+    let out: [Int] = native_list_empty()
+    let out: [Int] = native_list_append(out, r)
+    let out: [Int] = native_list_append(out, g)
+    let out: [Int] = native_list_append(out, b)
+    return out
+}
+
+// rasterize: build the raw (filtered) scanline byte stream, filter byte 0 / row.
+fn rasterize(w: Int, h: Int, shapes: [[Int]], bg: [Int]) -> [Int] {
+    let raw: [Int] = native_list_empty()
+    let y: Int = 0
+    while y < h {
+        let raw: [Int] = native_list_append(raw, 0)
+        let x: Int = 0
+        while x < w {
+            let col: [Int] = pixel_color(x, y, shapes, bg)
+            let raw: [Int] = native_list_append(raw, native_list_get(col, 0))
+            let raw: [Int] = native_list_append(raw, native_list_get(col, 1))
+            let raw: [Int] = native_list_append(raw, native_list_get(col, 2))
+            let x: Int = x + 1
+        }
+        let y: Int = y + 1
+    }
+    return raw
+}
+
+// zlib stream with a single STORED (uncompressed) DEFLATE block + Adler32.
+fn zlib_store(raw: [Int]) -> [Int] {
+    let z: [Int] = native_list_empty()
+    let z: [Int] = native_list_append(z, 120)
+    let z: [Int] = native_list_append(z, 1)
+    let z: [Int] = native_list_append(z, 1)
+    let len: Int = native_list_len(raw)
+    let nlen: Int = 65535 - len
+    let z: [Int] = native_list_append(z, len % 256)
+    let z: [Int] = native_list_append(z, (len / 256) % 256)
+    let z: [Int] = native_list_append(z, nlen % 256)
+    let z: [Int] = native_list_append(z, (nlen / 256) % 256)
+    let z: [Int] = app_all(z, raw)
+    let ad: Int = adler32_of(raw)
+    let z: [Int] = app_u32be(z, ad)
+    return z
+}
+
+// append a full PNG chunk: length + (type+data) + crc32(type+data).
+fn app_chunk(png: [Int], type_and_data: [Int], table: [Int]) -> [Int] {
+    let total: Int = native_list_len(type_and_data)
+    let dlen: Int = total - 4
+    let png: [Int] = app_u32be(png, dlen)
+    let png: [Int] = app_all(png, type_and_data)
+    let crc: Int = crc32_of(type_and_data, table)
+    let png: [Int] = app_u32be(png, crc)
+    return png
+}
+
+fn png_build(w: Int, h: Int, raw: [Int], table: [Int]) -> [Int] {
+    let png: [Int] = native_list_empty()
+    // 8-byte signature
+    let png: [Int] = native_list_append(png, 137)
+    let png: [Int] = native_list_append(png, 80)
+    let png: [Int] = native_list_append(png, 78)
+    let png: [Int] = native_list_append(png, 71)
+    let png: [Int] = native_list_append(png, 13)
+    let png: [Int] = native_list_append(png, 10)
+    let png: [Int] = native_list_append(png, 26)
+    let png: [Int] = native_list_append(png, 10)
+    // IHDR
+    let ihdr: [Int] = native_list_empty()
+    let ihdr: [Int] = app_tag(ihdr, "IHDR")
+    let ihdr: [Int] = app_u32be(ihdr, w)
+    let ihdr: [Int] = app_u32be(ihdr, h)
+    let ihdr: [Int] = native_list_append(ihdr, 8)
+    let ihdr: [Int] = native_list_append(ihdr, 2)
+    let ihdr: [Int] = native_list_append(ihdr, 0)
+    let ihdr: [Int] = native_list_append(ihdr, 0)
+    let ihdr: [Int] = native_list_append(ihdr, 0)
+    let png: [Int] = app_chunk(png, ihdr, table)
+    // IDAT
+    let z: [Int] = zlib_store(raw)
+    let idat: [Int] = native_list_empty()
+    let idat: [Int] = app_tag(idat, "IDAT")
+    let idat: [Int] = app_all(idat, z)
+    let png: [Int] = app_chunk(png, idat, table)
+    // IEND
+    let iend: [Int] = native_list_empty()
+    let iend: [Int] = app_tag(iend, "IEND")
+    let png: [Int] = app_chunk(png, iend, table)
+    return png
+}
+
+fn png_write(path: String, png: [Int]) -> Int {
+    let n: Int = native_list_len(png)
+    let buf: String = __str_alloc(n)
+    let i: Int = 0
+    while i < n {
+        let buf: String = __str_set_char(buf, i, native_list_get(png, i))
+        let i: Int = i + 1
+    }
+    let ok: Int = fs_write_bytes(path, buf, n)
+    return ok
+}

elp/src/realizer.elh

@@ -1,10 +1,10 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn agent_person(agent: String) -> String
 extern fn agent_number(agent: String) -> String
 extern fn realize_np(referent: String, number: String) -> String
-extern fn realize_vp_lang(base_verb: String, tense: String, aspect: String, person: String, number: String, profile: Any) -> Any
-extern fn realize_question_lang(predicate: String, tense: String, aspect: String, person: String, number: String, agent: String, patient: String, location: String, profile: Any) -> String
+extern fn realize_vp_lang(base_verb: String, tense: String, aspect: String, person: String, number: String, profile: [String]) -> [String]
+extern fn realize_question_lang(predicate: String, tense: String, aspect: String, person: String, number: String, agent: String, patient: String, location: String, profile: [String]) -> String
 extern fn capitalize_first(s: String) -> String
 extern fn add_punct(s: String, intent: String) -> String
-extern fn realize_lang(form: Any, profile: Any) -> String
-extern fn realize(form: Any) -> String
+extern fn realize_lang(form: [String], profile: [String]) -> String
+extern fn realize(form: [String]) -> String

elp/src/semantics.elh

@@ -1,18 +1,18 @@
-// auto-generated by elc --emit-header - do not edit
-extern fn sem_frame(intent: String, subject: String, obj: String, modifiers: String) -> Any
-extern fn sem_frame_lang(intent: String, subject: String, obj: String, modifiers: String, lang_code: String) -> Any
-extern fn sem_frame_simple(intent: String, subject: String) -> Any
-extern fn sem_frame_obj(intent: String, subject: String, obj: String) -> Any
-extern fn sem_intent(frame: Any) -> String
-extern fn sem_subject(frame: Any) -> String
-extern fn sem_object(frame: Any) -> String
-extern fn sem_modifiers(frame: Any) -> String
-extern fn sem_lang(frame: Any) -> String
+// auto-generated by elc --emit-header — do not edit
+extern fn sem_frame(intent: String, subject: String, obj: String, modifiers: String) -> [String]
+extern fn sem_frame_lang(intent: String, subject: String, obj: String, modifiers: String, lang_code: String) -> [String]
+extern fn sem_frame_simple(intent: String, subject: String) -> [String]
+extern fn sem_frame_obj(intent: String, subject: String, obj: String) -> [String]
+extern fn sem_intent(frame: [String]) -> String
+extern fn sem_subject(frame: [String]) -> String
+extern fn sem_object(frame: [String]) -> String
+extern fn sem_modifiers(frame: [String]) -> String
+extern fn sem_lang(frame: [String]) -> String
 extern fn sem_first_modifier(mods: String) -> String
 extern fn sem_intent_to_realize(intent: String) -> String
-extern fn sem_to_spec(frame: Any) -> Any
-extern fn sem_to_spec_full(frame: Any, verb: String, tense: String, aspect: String) -> Any
+extern fn sem_to_spec(frame: [String]) -> [String]
+extern fn sem_to_spec_full(frame: [String], verb: String, tense: String, aspect: String) -> [String]
 extern fn sem_realize_greet(subject: String) -> String
-extern fn sem_realize(frame: Any) -> String
-extern fn sem_realize_full(frame: Any, verb: String, tense: String, aspect: String) -> String
-extern fn sem_realize_lang(frame: Any, lang_code: String) -> String
+extern fn sem_realize(frame: [String]) -> String
+extern fn sem_realize_full(frame: [String], verb: String, tense: String, aspect: String) -> String
+extern fn sem_realize_lang(frame: [String], lang_code: String) -> String

elp/src/surface-profile.el

@@ -0,0 +1,153 @@
+// surface-profile.el - Surface profile data and accessors.
+//
+// THE NATIVE EFFERENT SEAM: surface = a pluggable PROFILE, using the exact same
+// slot-map mechanism as language-profile.el. A language profile tells the
+// realizer HOW to shape a natural-language surface (word order, morphology); a
+// SURFACE profile tells the realizer WHICH surface to project meaning onto
+// (markdown, docx, html, plain, or a non-text medium like symbolic music).
+//
+// The generalization is exact: realize_lang(form, profile) already renders a
+// SemForm parameterized by a [String] profile read via lang_get. Surface is one
+// more axis of that same profile vector. One frame (sem_frame), one plan step
+// (sem_to_spec), one render (realize) — the surface is DATA, not a code path,
+// precisely as language is data. Adding a surface means adding a profile, no
+// engine change. This is the multimodal projector, native: geometry -> any
+// surface, the efferent twin of ingest.
+//
+// Surface slot keys:
+//   surface     - "markdown" | "docx" | "html" | "plain" | "midi" | "image"
+//   modality    - "text" | "audio" | "image" | "video"
+//   media_type  - MIME type of the emitted surface
+//   head_open   - string prepended to a heading   (e.g. "## " for markdown)
+//   head_close  - string appended  to a heading   (e.g. "" for markdown, "</h2>" for html)
+//   emph_open   - string opening emphasis          (e.g. "*")
+//   emph_close  - string closing emphasis          (e.g. "*")
+//   item_mark   - list-item marker                 (e.g. "- ")
+//   para_sep    - paragraph separator              (e.g. "\n\n")
+//
+// For a TEXT modality the render composes these markers around the surface that
+// the EXISTING realizer produces (realize_lang / sem_realize). For a non-text
+// modality (audio/image) the profile declares modality + media_type and the
+// render dispatches to the medium projector, which reads the SAME frame's
+// geometry (its intent/affect/structure) and projects it onto sound or pixels —
+// deterministic-from-meaning, nothing invented. That dispatch point is where a
+// music profile or image profile conforms, native, no parallel layer.
+
+// -- Constructor -------------------------------------------------------------
+
+fn surface_profile(surface: String, modality: String, media_type: String, head_open: String, head_close: String, emph_open: String, emph_close: String, item_mark: String, para_sep: String) -> [String] {
+    let r: [String] = native_list_empty()
+    let r = native_list_append(r, "surface")
+    let r = native_list_append(r, surface)
+    let r = native_list_append(r, "modality")
+    let r = native_list_append(r, modality)
+    let r = native_list_append(r, "media_type")
+    let r = native_list_append(r, media_type)
+    let r = native_list_append(r, "head_open")
+    let r = native_list_append(r, head_open)
+    let r = native_list_append(r, "head_close")
+    let r = native_list_append(r, head_close)
+    let r = native_list_append(r, "emph_open")
+    let r = native_list_append(r, emph_open)
+    let r = native_list_append(r, "emph_close")
+    let r = native_list_append(r, emph_close)
+    let r = native_list_append(r, "item_mark")
+    let r = native_list_append(r, item_mark)
+    let r = native_list_append(r, "para_sep")
+    let r = native_list_append(r, para_sep)
+    return r
+}
+
+// -- Accessor (same convention as lang_get; standalone so this is a leaf) -----
+
+fn surface_get(profile: [String], key: String) -> String {
+    let n: Int = native_list_len(profile)
+    let i: Int = 0
+    while i < n - 1 {
+        let k: String = native_list_get(profile, i)
+        if str_eq(k, key) {
+            return native_list_get(profile, i + 1)
+        }
+        let i = i + 2
+    }
+    return ""
+}
+
+fn surface_is_text(profile: [String]) -> Bool {
+    return str_eq(surface_get(profile, "modality"), "text")
+}
+
+// -- Built-in TEXT surface profiles ------------------------------------------
+
+// Markdown: headings with "## ", emphasis with "*", "- " list items.
+fn surface_profile_markdown() -> [String] {
+    return surface_profile("markdown", "text", "text/markdown", "## ", "", "*", "*", "- ", "\n\n")
+}
+
+// Plain text: no markup at all — headings become bare uppercase-free lines.
+fn surface_profile_plain() -> [String] {
+    return surface_profile("plain", "text", "text/plain", "", "", "", "", "  - ", "\n\n")
+}
+
+// HTML: block-level heading/emphasis tags.
+fn surface_profile_html() -> [String] {
+    return surface_profile("html", "text", "text/html", "<h2>", "</h2>", "<em>", "</em>", "<li>", "\n")
+}
+
+// docx: WordprocessingML is structural, not inline-markup; the head/emph slots
+// carry the run/style intent that the OOXML emitter maps to <w:pStyle>. Declared
+// here so docx is a first-class surface on the same seam.
+fn surface_profile_docx() -> [String] {
+    return surface_profile("docx", "text", "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "Heading2:", "", "b:", "", "bullet:", "\n")
+}
+
+// -- Built-in NON-TEXT surface profiles (the multimodal seam) ----------------
+
+// Symbolic music (MIDI): modality=audio. The render dispatches to the music
+// projector, which reads the SAME frame's intent/affect and projects it to
+// pitch/rhythm — deterministic-from-meaning. head/emph slots are empty because
+// the medium is not textual; media_type names the surface. A music profile
+// (scale/mode/instrument) is layered onto this by the audio agent, native.
+fn surface_profile_midi() -> [String] {
+    return surface_profile("midi", "audio", "audio/midi", "", "", "", "", "", "")
+}
+
+// Synthesized audio (WAV): modality=audio, peer to midi. The richer audio
+// surface — the render SUPERPOSES ingested tonal primitives (sine at f0*n per an
+// ingested instrument signature) into PCM, own-core, exactly as midi writes an
+// SMF via struct. A music profile (scale/mode/instrument/adsr) layers onto this
+// as its own [String] slot-map read by the same getter. Same frame -> midi OR
+// audio, interchangeable; this is the audio agent's native conforming point.
+fn surface_profile_audio() -> [String] {
+    return surface_profile("audio", "audio", "audio/wav", "", "", "", "", "", "")
+}
+
+// Image (raster): modality=image. Documented seam — the render dispatches to the
+// image projector, the efferent twin of image ingest, reading the same frame.
+fn surface_profile_image() -> [String] {
+    return surface_profile("image", "image", "image/png", "", "", "", "", "", "")
+}
+
+// -- Composition helpers: wrap realized TEXT with the surface's markers -------
+//
+// These take text the EXISTING realizer already produced and shape it for the
+// surface. They add NO content — pure surface typography over faithful text,
+// exactly as the language profile adds no content, only linguistic form.
+
+fn surface_heading(profile: [String], text: String) -> String {
+    let o: String = surface_get(profile, "head_open")
+    let c: String = surface_get(profile, "head_close")
+    return o + text + c
+}
+
+fn surface_emph(profile: [String], text: String) -> String {
+    let o: String = surface_get(profile, "emph_open")
+    let c: String = surface_get(profile, "emph_close")
+    return o + text + c
+}
+
+// A section: a heading + a paragraph separator + the (already realized) body.
+fn surface_section(profile: [String], heading: String, body: String) -> String {
+    let sep: String = surface_get(profile, "para_sep")
+    return surface_heading(profile, heading) + sep + body
+}

elp/tests/examples/surface-profile-demo.el

@@ -0,0 +1,26 @@
+// surface-profile-demo.el - ONE SemFrame, realized ONCE, projected to THREE
+// surfaces via surface profiles. Proves surface-as-profile natively: the frame
+// and the realized sentence are identical; only the surface PROFILE differs.
+
+fn demo() -> String {
+    // 1. The shared frame (meaning-geometry): assert(Neuron, contain, the memory).
+    let frame: [String] = sem_frame("assert", "Neuron", "the memory", "")
+
+    // 2. REALIZE once via the EXISTING native realizer (language = a profile).
+    let sentence: String = sem_realize(frame)
+
+    // 3. PROJECT the same realized sentence onto three surfaces (surface = a
+    //    profile). Same frame, same sentence, different surface — one render.
+    let heading: String = "Memory"
+    let md: String   = surface_section(surface_profile_markdown(), heading, sentence)
+    let html: String = surface_section(surface_profile_html(), heading, sentence)
+    let plain: String = surface_section(surface_profile_plain(), heading, sentence)
+
+    // 4. Report the non-text seam: a surface profile can declare an audio/image
+    //    medium; the render dispatches to the medium projector on the SAME frame.
+    let midi_media: String = surface_get(surface_profile_midi(), "media_type")
+
+    return "MD=[" + md + "] HTML=[" + html + "] PLAIN=[" + plain + "] MIDI_MEDIA=" + midi_media
+}
+
+println(demo())

engram/.gitea/workflows/ci-dev.yaml

@@ -81,7 +81,7 @@ jobs:
       # Link to produce the engram binary
       - name: Link engram binary
         run: |
-          cc -std=c11 -O2 \
+          cc -std=c11 -O2 -DHAVE_CURL \
             -I /usr/local/lib/el \
             -o dist/engram \
             dist/engram.c \

engram/.gitea/workflows/ci-stage.yaml

@@ -88,7 +88,7 @@ jobs:
       # Link to produce the engram binary
       - name: Link engram binary
         run: |
-          cc -std=c11 -O2 \
+          cc -std=c11 -O2 -DHAVE_CURL \
             -I /usr/local/lib/el \
             -o dist/engram \
             dist/engram.c \

engram/.gitea/workflows/engram-release.yaml

@@ -62,7 +62,7 @@ jobs:
       # Link to produce the engram binary
       - name: Link engram binary
         run: |
-          cc -std=c11 -O2 \
+          cc -std=c11 -O2 -DHAVE_CURL \
             -I /usr/local/lib/el \
             -o dist/engram \
             dist/engram.c \

engram/dist/engram.c

@@ -10,6 +10,7 @@ el_val_t query_param(el_val_t path, el_val_t key);
 el_val_t query_int(el_val_t path, el_val_t key, el_val_t default_val);
 el_val_t extract_id(el_val_t path, el_val_t prefix);
 el_val_t route_stats(el_val_t method, el_val_t path, el_val_t body);
+el_val_t persist_canonical(void);
 el_val_t route_create_node(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_get_node(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_scan_nodes(el_val_t method, el_val_t path, el_val_t body);
@@ -23,13 +24,20 @@ el_val_t route_forget(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_save(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_load(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_health(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_sync(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_load_merge(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_emit_ise(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_capture_knowledge(el_val_t method, el_val_t path, el_val_t body);
 el_val_t check_auth_ok(el_val_t method, el_val_t body);
 el_val_t handle_request(el_val_t method, el_val_t path, el_val_t body);
 
+el_val_t bind_raw;
 el_val_t bind_str;
 el_val_t port;
+el_val_t data_dir_raw;
 el_val_t data_dir;
 el_val_t snapshot_path;
+el_val_t boot_snap;
 
 el_val_t parse_port(el_val_t bind) {
   el_val_t colon = str_index_of(bind, EL_STR(":"));
@@ -108,17 +116,22 @@ el_val_t route_stats(el_val_t method, el_val_t path, el_val_t body) {
   return 0;
 }
 
+el_val_t persist_canonical(void) {
+  el_val_t dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  el_val_t dir = ({ el_val_t _if_result_1 = 0; if (str_eq(dir_raw, EL_STR(""))) { _if_result_1 = (EL_STR("/tmp/engram")); } else { _if_result_1 = (dir_raw); } _if_result_1; });
+  engram_save(el_str_concat(dir, EL_STR("/snapshot.json")));
+  return 1;
+  return 0;
+}
+
 el_val_t route_create_node(el_val_t method, el_val_t path, el_val_t body) {
   el_val_t content = json_get_string(body, EL_STR("content"));
-  el_val_t node_type = json_get_string(body, EL_STR("node_type"));
-  if (str_eq(node_type, EL_STR(""))) {
-    node_type = EL_STR("Memory");
-  }
-  el_val_t salience = json_get_float(body, EL_STR("salience"));
-  if (str_eq(salience, el_from_float(0.0))) {
-    salience = el_from_float(0.5);
-  }
+  el_val_t nt_raw = json_get_string(body, EL_STR("node_type"));
+  el_val_t node_type = ({ el_val_t _if_result_2 = 0; if (str_eq(nt_raw, EL_STR(""))) { _if_result_2 = (EL_STR("Memory")); } else { _if_result_2 = (nt_raw); } _if_result_2; });
+  el_val_t sal_raw = json_get_float(body, EL_STR("salience"));
+  el_val_t salience = ({ el_val_t _if_result_3 = 0; if ((sal_raw == el_from_float(0.0))) { _if_result_3 = (el_from_float(0.5)); } else { _if_result_3 = (sal_raw); } _if_result_3; });
   el_val_t id = engram_node(content, node_type, salience);
+  el_val_t saved = persist_canonical();
   return el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"id\":\""), id), EL_STR("\",\"content\":\"")), content), EL_STR("\",\"node_type\":\"")), node_type), EL_STR("\"}"));
   return 0;
 }
@@ -144,11 +157,9 @@ el_val_t route_scan_nodes(el_val_t method, el_val_t path, el_val_t body) {
 }
 
 el_val_t route_scan_edges(el_val_t method, el_val_t path, el_val_t body) {
-  el_val_t dir = env(EL_STR("ENGRAM_DATA_DIR"));
-  if (str_eq(dir, EL_STR(""))) {
-    dir = EL_STR("/tmp/engram");
-  }
-  el_val_t snap_path = el_str_concat(dir, EL_STR("/snapshot.json"));
+  el_val_t dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  el_val_t dir = ({ el_val_t _if_result_4 = 0; if (str_eq(dir_raw, EL_STR(""))) { _if_result_4 = (EL_STR("/tmp/engram")); } else { _if_result_4 = (dir_raw); } _if_result_4; });
+  el_val_t snap_path = el_str_concat(dir, EL_STR("/.scan-export.json"));
   engram_save(snap_path);
   el_val_t snap = fs_read(snap_path);
   if (str_eq(snap, EL_STR(""))) {
@@ -163,36 +174,22 @@ el_val_t route_scan_edges(el_val_t method, el_val_t path, el_val_t body) {
 }
 
 el_val_t route_search(el_val_t method, el_val_t path, el_val_t body) {
-  el_val_t q = EL_STR("");
-  if (str_eq(method, EL_STR("GET"))) {
-    q = query_param(path, EL_STR("q"));
-  } else {
-    q = json_get_string(body, EL_STR("query"));
-  }
-  el_val_t limit = query_int(path, EL_STR("limit"), 20);
-  if (limit == 0) {
-    limit = json_get_int(body, EL_STR("limit"));
-  }
-  if (limit == 0) {
-    limit = 20;
-  }
+  el_val_t q = ({ el_val_t _if_result_5 = 0; if (str_eq(method, EL_STR("GET"))) { _if_result_5 = (query_param(path, EL_STR("q"))); } else { _if_result_5 = (json_get_string(body, EL_STR("query"))); } _if_result_5; });
+  el_val_t lim_url = query_int(path, EL_STR("limit"), 0);
+  el_val_t lim_body = json_get_int(body, EL_STR("limit"));
+  el_val_t lim_either = ({ el_val_t _if_result_6 = 0; if ((lim_url > 0)) { _if_result_6 = (lim_url); } else { _if_result_6 = (lim_body); } _if_result_6; });
+  el_val_t limit = ({ el_val_t _if_result_7 = 0; if ((lim_either > 0)) { _if_result_7 = (lim_either); } else { _if_result_7 = (20); } _if_result_7; });
   return engram_search_json(q, limit);
   return 0;
 }
 
 el_val_t route_activate(el_val_t method, el_val_t path, el_val_t body) {
-  el_val_t q = EL_STR("");
-  el_val_t depth = 3;
-  if (str_eq(method, EL_STR("GET"))) {
-    q = query_param(path, EL_STR("q"));
-    depth = query_int(path, EL_STR("depth"), 3);
-  } else {
-    q = json_get_string(body, EL_STR("query"));
-    el_val_t bd = json_get_int(body, EL_STR("depth"));
-    if (bd > 0) {
-      depth = bd;
-    }
+  el_val_t q = ({ el_val_t _if_result_8 = 0; if (str_eq(method, EL_STR("GET"))) { _if_result_8 = (query_param(path, EL_STR("q"))); } else { _if_result_8 = (json_get_string(body, EL_STR("query"))); } _if_result_8; });
+  if (str_eq(q, EL_STR(""))) {
+    return err_json(EL_STR("missing query"));
   }
+  el_val_t d_raw = ({ el_val_t _if_result_9 = 0; if (str_eq(method, EL_STR("GET"))) { _if_result_9 = (query_int(path, EL_STR("depth"), 3)); } else { _if_result_9 = (json_get_int(body, EL_STR("depth"))); } _if_result_9; });
+  el_val_t depth = ({ el_val_t _if_result_10 = 0; if ((d_raw > 0)) { _if_result_10 = (d_raw); } else { _if_result_10 = (3); } _if_result_10; });
   return el_str_concat(el_str_concat(EL_STR("{\"results\":"), engram_activate_json(q, depth)), EL_STR("}"));
   return 0;
 }
@@ -200,15 +197,12 @@ el_val_t route_activate(el_val_t method, el_val_t path, el_val_t body) {
 el_val_t route_create_edge(el_val_t method, el_val_t path, el_val_t body) {
   el_val_t from_id = json_get_string(body, EL_STR("from_id"));
   el_val_t to_id = json_get_string(body, EL_STR("to_id"));
-  el_val_t relation = json_get_string(body, EL_STR("relation"));
-  if (str_eq(relation, EL_STR(""))) {
-    relation = EL_STR("associates");
-  }
-  el_val_t weight = json_get_float(body, EL_STR("weight"));
-  if (str_eq(weight, el_from_float(0.0))) {
-    weight = el_from_float(0.5);
-  }
+  el_val_t rel_raw = json_get_string(body, EL_STR("relation"));
+  el_val_t relation = ({ el_val_t _if_result_11 = 0; if (str_eq(rel_raw, EL_STR(""))) { _if_result_11 = (EL_STR("associates")); } else { _if_result_11 = (rel_raw); } _if_result_11; });
+  el_val_t w_raw = json_get_float(body, EL_STR("weight"));
+  el_val_t weight = ({ el_val_t _if_result_12 = 0; if ((w_raw == el_from_float(0.0))) { _if_result_12 = (el_from_float(0.5)); } else { _if_result_12 = (w_raw); } _if_result_12; });
   engram_connect(from_id, to_id, weight, relation);
+  el_val_t saved = persist_canonical();
   return el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"from_id\":\""), from_id), EL_STR("\",\"to_id\":\"")), to_id), EL_STR("\",\"relation\":\"")), relation), EL_STR("\"}"));
   return 0;
 }
@@ -229,6 +223,7 @@ el_val_t route_strengthen(el_val_t method, el_val_t path, el_val_t body) {
     return err_json(EL_STR("missing node_id"));
   }
   engram_strengthen(id);
+  el_val_t saved = persist_canonical();
   return ok_json();
   return 0;
 }
@@ -239,33 +234,26 @@ el_val_t route_forget(el_val_t method, el_val_t path, el_val_t body) {
     return err_json(EL_STR("missing id"));
   }
   engram_forget(id);
+  el_val_t saved = persist_canonical();
   return ok_json();
   return 0;
 }
 
 el_val_t route_save(el_val_t method, el_val_t path, el_val_t body) {
-  el_val_t p = json_get_string(body, EL_STR("path"));
-  if (str_eq(p, EL_STR(""))) {
-    el_val_t dir = env(EL_STR("ENGRAM_DATA_DIR"));
-    if (str_eq(dir, EL_STR(""))) {
-      dir = EL_STR("/tmp/engram");
-    }
-    p = el_str_concat(dir, EL_STR("/snapshot.json"));
-  }
+  el_val_t p_raw = json_get_string(body, EL_STR("path"));
+  el_val_t dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  el_val_t dir = ({ el_val_t _if_result_13 = 0; if (str_eq(dir_raw, EL_STR(""))) { _if_result_13 = (EL_STR("/tmp/engram")); } else { _if_result_13 = (dir_raw); } _if_result_13; });
+  el_val_t p = ({ el_val_t _if_result_14 = 0; if (str_eq(p_raw, EL_STR(""))) { _if_result_14 = (el_str_concat(dir, EL_STR("/snapshot.json"))); } else { _if_result_14 = (p_raw); } _if_result_14; });
   engram_save(p);
   return el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"path\":\""), p), EL_STR("\"}"));
   return 0;
 }
 
 el_val_t route_load(el_val_t method, el_val_t path, el_val_t body) {
-  el_val_t p = json_get_string(body, EL_STR("path"));
-  if (str_eq(p, EL_STR(""))) {
-    el_val_t dir = env(EL_STR("ENGRAM_DATA_DIR"));
-    if (str_eq(dir, EL_STR(""))) {
-      dir = EL_STR("/tmp/engram");
-    }
-    p = el_str_concat(dir, EL_STR("/snapshot.json"));
-  }
+  el_val_t p_raw = json_get_string(body, EL_STR("path"));
+  el_val_t dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  el_val_t dir = ({ el_val_t _if_result_15 = 0; if (str_eq(dir_raw, EL_STR(""))) { _if_result_15 = (EL_STR("/tmp/engram")); } else { _if_result_15 = (dir_raw); } _if_result_15; });
+  el_val_t p = ({ el_val_t _if_result_16 = 0; if (str_eq(p_raw, EL_STR(""))) { _if_result_16 = (el_str_concat(dir, EL_STR("/snapshot.json"))); } else { _if_result_16 = (p_raw); } _if_result_16; });
   engram_load(p);
   return ok_json();
   return 0;
@@ -276,6 +264,84 @@ el_val_t route_health(el_val_t method, el_val_t path, el_val_t body) {
   return 0;
 }
 
+el_val_t route_sync(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  el_val_t dir = ({ el_val_t _if_result_17 = 0; if (str_eq(dir_raw, EL_STR(""))) { _if_result_17 = (EL_STR("/tmp/engram")); } else { _if_result_17 = (dir_raw); } _if_result_17; });
+  el_val_t snap_path = el_str_concat(dir, EL_STR("/.sync-export.json"));
+  engram_save(snap_path);
+  el_val_t snap = fs_read(snap_path);
+  if (str_eq(snap, EL_STR(""))) {
+    return EL_STR("{\"nodes\":[],\"edges\":[]}");
+  }
+  return snap;
+  return 0;
+}
+
+el_val_t route_load_merge(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t p = json_get_string(body, EL_STR("path"));
+  if (str_eq(p, EL_STR(""))) {
+    return err_json(EL_STR("path is required"));
+  }
+  if (str_eq(fs_read(p), EL_STR(""))) {
+    return err_json(EL_STR("file missing or empty"));
+  }
+  el_val_t before_n = engram_node_count();
+  el_val_t before_e = engram_edge_count();
+  engram_load_merge(p);
+  el_val_t added_n = (engram_node_count() - before_n);
+  el_val_t added_e = (engram_edge_count() - before_e);
+  el_val_t saved = persist_canonical();
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"nodes_added\":"), int_to_str(added_n)), EL_STR(",\"edges_added\":")), int_to_str(added_e)), EL_STR(",\"node_count\":")), int_to_str(engram_node_count())), EL_STR("}"));
+  return 0;
+}
+
+el_val_t route_emit_ise(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t content = json_get_string(body, EL_STR("content"));
+  if (str_eq(content, EL_STR(""))) {
+    return err_json(EL_STR("missing content"));
+  }
+  el_val_t sal = el_from_float(0.3);
+  el_val_t imp = el_from_float(0.3);
+  el_val_t conf = el_from_float(0.8);
+  el_val_t id = engram_node_full(content, EL_STR("InternalStateEvent"), EL_STR("state-event"), sal, imp, conf, EL_STR("Episodic"), EL_STR("[\"internal-state\",\"InternalStateEvent\"]"));
+  el_val_t ret_raw = env(EL_STR("ENGRAM_ISE_RETENTION_MS"));
+  el_val_t ret_ms = ({ el_val_t _if_result_18 = 0; if (str_eq(ret_raw, EL_STR(""))) { _if_result_18 = (172800000); } else { _if_result_18 = (str_to_int(ret_raw)); } _if_result_18; });
+  el_val_t pruned = engram_prune_telemetry(ret_ms);
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"id\":\""), id), EL_STR("\",\"pruned\":")), int_to_str(pruned)), EL_STR("}"));
+  return 0;
+}
+
+el_val_t route_capture_knowledge(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t content = json_get_string(body, EL_STR("content"));
+  if (str_eq(content, EL_STR(""))) {
+    return err_json(EL_STR("missing content"));
+  }
+  el_val_t title = json_get_string(body, EL_STR("title"));
+  el_val_t label = ({ el_val_t _if_result_19 = 0; if (str_eq(title, EL_STR(""))) { _if_result_19 = (str_slice(content, 0, 60)); } else { _if_result_19 = (title); } _if_result_19; });
+  el_val_t category_raw = json_get_string(body, EL_STR("category"));
+  el_val_t category = ({ el_val_t _if_result_20 = 0; if (str_eq(category_raw, EL_STR(""))) { _if_result_20 = (EL_STR("other")); } else { _if_result_20 = (category_raw); } _if_result_20; });
+  el_val_t ktier_raw = json_get_string(body, EL_STR("tier"));
+  el_val_t ktier = ({ el_val_t _if_result_21 = 0; if (str_eq(ktier_raw, EL_STR(""))) { _if_result_21 = (EL_STR("note")); } else { _if_result_21 = (ktier_raw); } _if_result_21; });
+  el_val_t project = json_get_string(body, EL_STR("project"));
+  el_val_t tags_raw = json_get_raw(body, EL_STR("tags"));
+  el_val_t tags_base = ({ el_val_t _if_result_22 = 0; if (str_eq(tags_raw, EL_STR(""))) { _if_result_22 = (EL_STR("[]")); } else { _if_result_22 = (tags_raw); } _if_result_22; });
+  el_val_t base_len = str_len(tags_base);
+  el_val_t head = str_slice(tags_base, 0, (base_len - 1));
+  el_val_t sep = ({ el_val_t _if_result_23 = 0; if (str_eq(head, EL_STR("["))) { _if_result_23 = (EL_STR("")); } else { _if_result_23 = (EL_STR(",")); } _if_result_23; });
+  el_val_t safe_cat = str_replace(category, EL_STR("\""), EL_STR("'"));
+  el_val_t safe_tier = str_replace(ktier, EL_STR("\""), EL_STR("'"));
+  el_val_t safe_proj = str_replace(project, EL_STR("\""), EL_STR("'"));
+  el_val_t proj_tag = ({ el_val_t _if_result_24 = 0; if (str_eq(safe_proj, EL_STR(""))) { _if_result_24 = (EL_STR("")); } else { _if_result_24 = (el_str_concat(el_str_concat(EL_STR(",\"project:"), safe_proj), EL_STR("\""))); } _if_result_24; });
+  el_val_t tags = el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(head, sep), EL_STR("\"category:")), safe_cat), EL_STR("\",\"tier:")), safe_tier), EL_STR("\"")), proj_tag), EL_STR("]"));
+  el_val_t sal = el_from_float(0.5);
+  el_val_t imp = el_from_float(0.5);
+  el_val_t conf = el_from_float(0.9);
+  el_val_t id = engram_node_full(content, EL_STR("Knowledge"), label, sal, imp, conf, EL_STR("Semantic"), tags);
+  el_val_t saved = persist_canonical();
+  return el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"id\":\""), id), EL_STR("\"}"));
+  return 0;
+}
+
 el_val_t check_auth_ok(el_val_t method, el_val_t body) {
   el_val_t key = env(EL_STR("ENGRAM_API_KEY"));
   if (str_eq(key, EL_STR(""))) {
@@ -299,9 +365,15 @@ el_val_t handle_request(el_val_t method, el_val_t path, el_val_t body) {
       return route_health(method, path, body);
     }
   }
+  if (str_eq(method, EL_STR("POST")) && str_eq(clean, EL_STR("/api/neuron/state-events"))) {
+    return route_emit_ise(method, path, body);
+  }
   if (!check_auth_ok(method, body)) {
     return err_json(EL_STR("unauthorized"));
   }
+  if (str_eq(method, EL_STR("POST")) && str_eq(clean, EL_STR("/api/neuron/knowledge/capture"))) {
+    return route_capture_knowledge(method, path, body);
+  }
   if (str_eq(method, EL_STR("GET")) && (str_eq(clean, EL_STR("/api/stats")) || str_eq(clean, EL_STR("/stats")))) {
     return route_stats(method, path, body);
   }
@@ -347,23 +419,34 @@ el_val_t handle_request(el_val_t method, el_val_t path, el_val_t body) {
   if (str_eq(method, EL_STR("POST")) && (str_eq(clean, EL_STR("/api/load")) || str_eq(clean, EL_STR("/load")))) {
     return route_load(method, path, body);
   }
+  if (str_eq(method, EL_STR("POST")) && (str_eq(clean, EL_STR("/api/load-merge")) || str_eq(clean, EL_STR("/load-merge")))) {
+    return route_load_merge(method, path, body);
+  }
+  if (str_eq(method, EL_STR("GET")) && str_eq(clean, EL_STR("/api/sync"))) {
+    return route_sync(method, path, body);
+  }
   return el_str_concat(el_str_concat(EL_STR("{\"error\":\"not found\",\"path\":\""), clean), EL_STR("\"}"));
   return 0;
 }
 
 int main(int _argc, char** _argv) {
   el_runtime_init_args(_argc, _argv);
-  bind_str = env(EL_STR("ENGRAM_BIND"));
-  if (str_eq(bind_str, EL_STR(""))) {
-    bind_str = EL_STR(":8742");
-  }
+  bind_raw = env(EL_STR("ENGRAM_BIND"));
+  bind_str = ({ el_val_t _if_result_25 = 0; if (str_eq(bind_raw, EL_STR(""))) { _if_result_25 = (EL_STR(":8742")); } else { _if_result_25 = (bind_raw); } _if_result_25; });
   port = parse_port(bind_str);
-  data_dir = env(EL_STR("ENGRAM_DATA_DIR"));
-  if (str_eq(data_dir, EL_STR(""))) {
-    data_dir = EL_STR("/tmp/engram");
-  }
+  data_dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  data_dir = ({ el_val_t _if_result_26 = 0; if (str_eq(data_dir_raw, EL_STR(""))) { _if_result_26 = (EL_STR("/tmp/engram")); } else { _if_result_26 = (data_dir_raw); } _if_result_26; });
   snapshot_path = el_str_concat(data_dir, EL_STR("/snapshot.json"));
   engram_load(snapshot_path);
+  boot_snap = fs_read(snapshot_path);
+  if (!str_eq(boot_snap, EL_STR(""))) {
+    if (engram_node_count() == 0) {
+      println(EL_STR("[engram] WARNING: snapshot.json is non-empty but load produced 0 nodes \xe2\x80\x94 preserving copy at snapshot.failed-load.json"));
+      fs_write(el_str_concat(data_dir, EL_STR("/snapshot.failed-load.json")), boot_snap);
+    } else {
+      fs_write(el_str_concat(data_dir, EL_STR("/snapshot.boot-backup.json")), boot_snap);
+    }
+  }
   println(EL_STR("[engram] runtime-native graph engine"));
   println(el_str_concat(EL_STR("[engram] data_dir="), data_dir));
   println(el_str_concat(EL_STR("[engram] node_count="), int_to_str(engram_node_count())));

engram/src/server.el

@@ -76,13 +76,43 @@ fn route_stats(method: String, path: String, body: String) -> String {
     engram_stats_json()
 }
 
+// (2026-07-18 self-review) Scoping sweep: `let` inside an if-block creates an
+// inner scope only — it does NOT mutate the outer binding (documented with
+// evidence in awareness.el, 2026-05-25). Every default/reassignment below used
+// that broken pattern, so defaults never applied: nodes were created with
+// node_type="" and salience=0.0, /api/search and /api/activate ALWAYS ran with
+// q="" regardless of input, edges defaulted to relation=""/weight=0.0, and
+// save/load with no "path" hit engram_save(""). Rewritten to the
+// `let x = if cond { a } else { b }` expression form (the pattern the newer
+// routes route_emit_ise/route_capture_knowledge already use correctly).
+// persist_canonical — save the canonical snapshot after a durable write.
+//
+// WHY (2026-07-22 self-review): the 2026-07-21 fix correctly stopped READ
+// routes from writing the canonical snapshot.json — but nothing was left
+// that saved it on WRITE. Every mutation (node create, edge create,
+// knowledge capture, forget, merge) lived only in RAM until someone POSTed
+// /api/save manually; a process restart silently discarded everything since
+// the last manual save. Observed live: two engram restarts during the
+// 2026-07-22 review reverted the store to a ~17h-old snapshot, destroying
+// same-day writes. Reads must never write the canonical; writes must always
+// persist it. ISE telemetry is deliberately excluded (48h-pruned, loss-
+// tolerant, ~2/min — snapshotting the whole store per heartbeat is waste;
+// any durable write that follows persists the pruning too).
+fn persist_canonical() -> Int {
+    let dir_raw: String = env("ENGRAM_DATA_DIR")
+    let dir: String = if str_eq(dir_raw, "") { "/tmp/engram" } else { dir_raw }
+    engram_save(dir + "/snapshot.json")
+    return 1
+}
+
 fn route_create_node(method: String, path: String, body: String) -> String {
     let content: String = json_get_string(body, "content")
-    let node_type: String = json_get_string(body, "node_type")
-    if str_eq(node_type, "") { let node_type = "Memory" }
-    let salience: Float = json_get_float(body, "salience")
-    if salience == 0.0 { let salience = 0.5 }
+    let nt_raw: String = json_get_string(body, "node_type")
+    let node_type: String = if str_eq(nt_raw, "") { "Memory" } else { nt_raw }
+    let sal_raw: Float = json_get_float(body, "salience")
+    let salience: Float = if sal_raw == 0.0 { 0.5 } else { sal_raw }
     let id: String = engram_node(content, node_type, salience)
+    let saved: Int = persist_canonical()
     "{\"id\":\"" + id + "\",\"content\":\"" + content + "\",\"node_type\":\"" + node_type + "\"}"
 }
 
@@ -103,13 +133,14 @@ fn route_scan_nodes(method: String, path: String, body: String) -> String {
 }
 
 // route_scan_edges — bulk export of all edges as a JSON array. Implemented
-// via engram_save → fs_read of the canonical on-disk snapshot, which the
-// runtime keeps in lockstep with the in-memory graph. Live against the
-// running graph, not a stale export.
+// via engram_save → fs_read of a SCRATCH export path. (2026-07-21 self-review:
+// previously this saved over the canonical snapshot.json on every GET — if the
+// process ever booted with a partial/empty store, the first read request
+// clobbered the good snapshot. Read routes must never write the canonical path.)
 fn route_scan_edges(method: String, path: String, body: String) -> String {
-    let dir: String = env("ENGRAM_DATA_DIR")
-    if str_eq(dir, "") { let dir = "/tmp/engram" }
-    let snap_path: String = dir + "/snapshot.json"
+    let dir_raw: String = env("ENGRAM_DATA_DIR")
+    let dir: String = if str_eq(dir_raw, "") { "/tmp/engram" } else { dir_raw }
+    let snap_path: String = dir + "/.scan-export.json"
     engram_save(snap_path)
     let snap: String = fs_read(snap_path)
     if str_eq(snap, "") { return "[]" }
@@ -122,40 +153,34 @@ fn route_scan_edges(method: String, path: String, body: String) -> String {
 }
 
 fn route_search(method: String, path: String, body: String) -> String {
-    let q: String = ""
-    if str_eq(method, "GET") {
-        let q = query_param(path, "q")
-    } else {
-        let q = json_get_string(body, "query")
-    }
-    let limit: Int = query_int(path, "limit", 20)
-    if limit == 0 { let limit = json_get_int(body, "limit") }
-    if limit == 0 { let limit = 20 }
+    let q: String = if str_eq(method, "GET") { query_param(path, "q") } else { json_get_string(body, "query") }
+    let lim_url: Int = query_int(path, "limit", 0)
+    let lim_body: Int = json_get_int(body, "limit")
+    let lim_either: Int = if lim_url > 0 { lim_url } else { lim_body }
+    let limit: Int = if lim_either > 0 { lim_either } else { 20 }
     return engram_search_json(q, limit)
 }
 
 fn route_activate(method: String, path: String, body: String) -> String {
-    let q: String = ""
-    let depth: Int = 3
-    if str_eq(method, "GET") {
-        let q = query_param(path, "q")
-        let depth = query_int(path, "depth", 3)
-    } else {
-        let q = json_get_string(body, "query")
-        let bd: Int = json_get_int(body, "depth")
-        if bd > 0 { let depth = bd }
-    }
+    let q: String = if str_eq(method, "GET") { query_param(path, "q") } else { json_get_string(body, "query") }
+    // Guard: engram_activate with an empty query matches zero seeds, which
+    // zeroes ALL carried working-memory weights (documented in awareness.el
+    // perceive()). Never let an empty activation through to wipe WM.
+    if str_eq(q, "") { return err_json("missing query") }
+    let d_raw: Int = if str_eq(method, "GET") { query_int(path, "depth", 3) } else { json_get_int(body, "depth") }
+    let depth: Int = if d_raw > 0 { d_raw } else { 3 }
     return "{\"results\":" + engram_activate_json(q, depth) + "}"
 }
 
 fn route_create_edge(method: String, path: String, body: String) -> String {
     let from_id: String = json_get_string(body, "from_id")
     let to_id: String = json_get_string(body, "to_id")
-    let relation: String = json_get_string(body, "relation")
-    if str_eq(relation, "") { let relation = "associates" }
-    let weight: Float = json_get_float(body, "weight")
-    if weight == 0.0 { let weight = 0.5 }
+    let rel_raw: String = json_get_string(body, "relation")
+    let relation: String = if str_eq(rel_raw, "") { "associates" } else { rel_raw }
+    let w_raw: Float = json_get_float(body, "weight")
+    let weight: Float = if w_raw == 0.0 { 0.5 } else { w_raw }
     engram_connect(from_id, to_id, weight, relation)
+    let saved: Int = persist_canonical()
     "{\"ok\":true,\"from_id\":\"" + from_id + "\",\"to_id\":\"" + to_id + "\",\"relation\":\"" + relation + "\"}"
 }
 
@@ -170,6 +195,7 @@ fn route_strengthen(method: String, path: String, body: String) -> String {
     let id: String = json_get_string(body, "node_id")
     if str_eq(id, "") { return err_json("missing node_id") }
     engram_strengthen(id)
+    let saved: Int = persist_canonical()
     ok_json()
 }
 
@@ -177,27 +203,24 @@ fn route_forget(method: String, path: String, body: String) -> String {
     let id: String = extract_id(path, "/api/nodes/")
     if str_eq(id, "") { return err_json("missing id") }
     engram_forget(id)
+    let saved: Int = persist_canonical()
     ok_json()
 }
 
 fn route_save(method: String, path: String, body: String) -> String {
-    let p: String = json_get_string(body, "path")
-    if str_eq(p, "") {
-        let dir: String = env("ENGRAM_DATA_DIR")
-        if str_eq(dir, "") { let dir = "/tmp/engram" }
-        let p = dir + "/snapshot.json"
-    }
+    let p_raw: String = json_get_string(body, "path")
+    let dir_raw: String = env("ENGRAM_DATA_DIR")
+    let dir: String = if str_eq(dir_raw, "") { "/tmp/engram" } else { dir_raw }
+    let p: String = if str_eq(p_raw, "") { dir + "/snapshot.json" } else { p_raw }
     engram_save(p)
     "{\"ok\":true,\"path\":\"" + p + "\"}"
 }
 
 fn route_load(method: String, path: String, body: String) -> String {
-    let p: String = json_get_string(body, "path")
-    if str_eq(p, "") {
-        let dir: String = env("ENGRAM_DATA_DIR")
-        if str_eq(dir, "") { let dir = "/tmp/engram" }
-        let p = dir + "/snapshot.json"
-    }
+    let p_raw: String = json_get_string(body, "path")
+    let dir_raw: String = env("ENGRAM_DATA_DIR")
+    let dir: String = if str_eq(dir_raw, "") { "/tmp/engram" } else { dir_raw }
+    let p: String = if str_eq(p_raw, "") { dir + "/snapshot.json" } else { p_raw }
     engram_load(p)
     ok_json()
 }
@@ -206,6 +229,148 @@ fn route_health(method: String, path: String, body: String) -> String {
     "{\"status\":\"ok\",\"engine\":\"engram-runtime-native\"}"
 }
 
+// route_sync — return a snapshot of non-ISE/non-Working nodes for the soul daemon
+// to merge into its in-process graph via engram_load_merge.
+//
+// The soul calls GET /api/sync every SOUL_REFRESH_MS (default 10 min) to pull
+// new Knowledge/Memory/BacklogItem nodes from the authoritative HTTP Engram into
+// its in-process working store. Previously this returned 404 "not found", causing
+// the soul to write the error JSON to a temp file and attempt an empty merge.
+//
+// Strategy: save the current snapshot to disk, read it back, return the full
+// snapshot JSON. The soul's engram_load_merge handles large files gracefully
+// (it skips nodes already present by ID). Auth-exempt: same-host internal call.
+// (2026-06-27 self-review: added this route to fix silent 10-min sync failures)
+fn route_sync(method: String, path: String, body: String) -> String {
+    let dir_raw: String = env("ENGRAM_DATA_DIR")
+    let dir: String = if str_eq(dir_raw, "") { "/tmp/engram" } else { dir_raw }
+    // 2026-07-21 self-review: export to a scratch path, never the canonical
+    // snapshot.json — read routes must not be able to clobber the good snapshot.
+    let snap_path: String = dir + "/.sync-export.json"
+    engram_save(snap_path)
+    let snap: String = fs_read(snap_path)
+    if str_eq(snap, "") { return "{\"nodes\":[],\"edges\":[]}" }
+    return snap
+}
+
+// route_load_merge — POST /api/load-merge {"path": "..."} — merge a snapshot
+// file into the live store WITHOUT resetting it (engram_load_merge skips nodes
+// already present by id). Added 2026-07-21 self-review to restore the 244 kn-
+// identity Knowledge nodes lost from the snapshot lineage between 05-13 and
+// 07-13. Requires an explicit path: refuses to run without one so it can never
+// be triggered accidentally against a default.
+fn route_load_merge(method: String, path: String, body: String) -> String {
+    let p: String = json_get_string(body, "path")
+    if str_eq(p, "") { return err_json("path is required") }
+    if str_eq(fs_read(p), "") { return err_json("file missing or empty") }
+    let before_n: Int = engram_node_count()
+    let before_e: Int = engram_edge_count()
+    engram_load_merge(p)
+    let added_n: Int = engram_node_count() - before_n
+    let added_e: Int = engram_edge_count() - before_e
+    let saved: Int = persist_canonical()
+    "{\"ok\":true,\"nodes_added\":" + int_to_str(added_n) + ",\"edges_added\":" + int_to_str(added_e) + ",\"node_count\":" + int_to_str(engram_node_count()) + "}"
+}
+
+// route_emit_ise — write an InternalStateEvent node from the soul daemon.
+//
+// Endpoint: POST /api/neuron/state-events
+// Body:     {"content": "<json-string>"}
+//
+// Auth: exempt (internal endpoint, soul daemon on same host, no _auth needed).
+// The soul's ise_post() sends {"content":"..."} without _auth; enforcing auth
+// here would silently drop all heartbeat/curiosity ISEs. Unauthenticated POST
+// to this endpoint is acceptable: ISE writes are observability-only, append-only,
+// and come from a trusted process on localhost.
+//
+// Salience/importance set to match engram_node_full ISE defaults used by the
+// in-process fallback path in awareness.el (salience=0.3, importance=0.3,
+// confidence=0.8, tier=Episodic).
+// (2026-06-26 self-review: added this route after discovering ise_post was
+// silently failing — the soul posts here but the endpoint didn't exist.)
+//
+// Retention (2026-07-16 self-review): an earlier comment here claimed ISEs
+// got temporal_decay_rate=1.617 — that was never implemented (engram_node_full
+// hardcodes 0.0), and per-node decay only dampens activation anyway; it never
+// removes nodes. By 2026-07-16 ISEs were 75% of the store (10,175 of 13,522
+// nodes, ~4,300/day, unbounded). ISEs are already WM-excluded in
+// engram_activate, so the fix is retention, not decay: every insert calls
+// engram_prune_telemetry(), a single O(nodes+edges) compaction pass that
+// removes ISEs older than ENGRAM_ISE_RETENTION_MS (default 48h), protecting
+// "session-start" labels and self_review events as durable history. At
+// ~3 ISEs/min this bounds telemetry at ~8.6k nodes instead of growing forever.
+fn route_emit_ise(method: String, path: String, body: String) -> String {
+    let content: String = json_get_string(body, "content")
+    if str_eq(content, "") { return err_json("missing content") }
+    let sal: Float = 0.3
+    let imp: Float = 0.3
+    let conf: Float = 0.8
+    let id: String = engram_node_full(
+        content, "InternalStateEvent", "state-event",
+        sal, imp, conf,
+        "Episodic", "[\"internal-state\",\"InternalStateEvent\"]"
+    )
+    let ret_raw: String = env("ENGRAM_ISE_RETENTION_MS")
+    let ret_ms: Int = if str_eq(ret_raw, "") { 172800000 } else { str_to_int(ret_raw) }
+    let pruned: Int = engram_prune_telemetry(ret_ms)
+    "{\"ok\":true,\"id\":\"" + id + "\",\"pruned\":" + int_to_str(pruned) + "}"
+}
+
+// ── Knowledge capture ─────────────────────────────────────────────────────────
+//
+// route_capture_knowledge — direct Knowledge-node capture over HTTP.
+//
+// Endpoint: POST /api/neuron/knowledge/capture   (auth required: "_auth" in body)
+// Body:     {"content": "...", "title": "...", "category": "...",
+//            "tier": "note|lesson|canonical", "tags": [...], "project": "...",
+//            "_auth": "<key>"}
+//
+// WHY (2026-07-15 self-review): the world-ingestor integrator was designed
+// against this endpoint (its MCP-unavailable fallback), but the route never
+// existed — every direct push 404'd, and because the auth gate ran before
+// routing, the failure surfaced as {"error":"unauthorized"} and was
+// misdiagnosed for two weeks while world knowledge silently dropped.
+// POST /api/nodes was no substitute: it discards label/tags/tier, which
+// makes captured knowledge invisible to tag-scoped search and curiosity.
+//
+// The incoming knowledge tier (note/lesson/canonical) is preserved as a
+// "tier:<x>" tag rather than mapped onto Engram's cognitive tiers — Knowledge
+// nodes land in Semantic (stable reference), and the epistemic tier stays
+// queryable without inventing a lossy mapping.
+fn route_capture_knowledge(method: String, path: String, body: String) -> String {
+    let content: String = json_get_string(body, "content")
+    if str_eq(content, "") { return err_json("missing content") }
+    let title: String = json_get_string(body, "title")
+    let label: String = if str_eq(title, "") { str_slice(content, 0, 60) } else { title }
+    let category_raw: String = json_get_string(body, "category")
+    let category: String = if str_eq(category_raw, "") { "other" } else { category_raw }
+    let ktier_raw: String = json_get_string(body, "tier")
+    let ktier: String = if str_eq(ktier_raw, "") { "note" } else { ktier_raw }
+    let project: String = json_get_string(body, "project")
+    let tags_raw: String = json_get_raw(body, "tags")
+    let tags_base: String = if str_eq(tags_raw, "") { "[]" } else { tags_raw }
+    // Merge category/tier/project markers into the tag array. Search matches
+    // against the tags string, so these make captures findable by facet.
+    let base_len: Int = str_len(tags_base)
+    let head: String = str_slice(tags_base, 0, base_len - 1)
+    let sep: String = if str_eq(head, "[") { "" } else { "," }
+    let safe_cat: String = str_replace(category, "\"", "'")
+    let safe_tier: String = str_replace(ktier, "\"", "'")
+    let safe_proj: String = str_replace(project, "\"", "'")
+    let proj_tag: String = if str_eq(safe_proj, "") { "" } else { ",\"project:" + safe_proj + "\"" }
+    let tags: String = head + sep + "\"category:" + safe_cat + "\",\"tier:" + safe_tier + "\"" + proj_tag + "]"
+    let sal: Float = 0.5
+    let imp: Float = 0.5
+    let conf: Float = 0.9
+    let id: String = engram_node_full(
+        content, "Knowledge", label,
+        sal, imp, conf,
+        "Semantic", tags
+    )
+    let saved: Int = persist_canonical()
+    "{\"ok\":true,\"id\":\"" + id + "\"}"
+}
+
 // ── Auth ──────────────────────────────────────────────────────────────────────
 
 fn check_auth_ok(method: String, body: String) -> Bool {
@@ -232,11 +397,22 @@ fn handle_request(method: String, path: String, body: String) -> String {
         }
     }
 
+    // ISE posting is auth-exempt (internal soul daemon, same host, no _auth key)
+    if str_eq(method, "POST") && str_eq(clean, "/api/neuron/state-events") {
+        return route_emit_ise(method, path, body)
+    }
+
     // Auth (when ENGRAM_API_KEY is set)
     if !check_auth_ok(method, body) {
         return err_json("unauthorized")
     }
 
+    // Knowledge capture (auth enforced above; the world-ingestor integrator
+    // and any headless session without MCP push knowledge through this)
+    if str_eq(method, "POST") && str_eq(clean, "/api/neuron/knowledge/capture") {
+        return route_capture_knowledge(method, path, body)
+    }
+
     // Stats
     if str_eq(method, "GET") && (str_eq(clean, "/api/stats") || str_eq(clean, "/stats")) {
         return route_stats(method, path, body)
@@ -293,22 +469,45 @@ fn handle_request(method: String, path: String, body: String) -> String {
     if str_eq(method, "POST") && (str_eq(clean, "/api/load") || str_eq(clean, "/load")) {
         return route_load(method, path, body)
     }
+    if str_eq(method, "POST") && (str_eq(clean, "/api/load-merge") || str_eq(clean, "/load-merge")) {
+        return route_load_merge(method, path, body)
+    }
+
+    // Sync — soul daemon periodic pull of non-ISE knowledge into in-process graph
+    if str_eq(method, "GET") && str_eq(clean, "/api/sync") {
+        return route_sync(method, path, body)
+    }
 
     "{\"error\":\"not found\",\"path\":\"" + clean + "\"}"
 }
 
 // ── Entry ─────────────────────────────────────────────────────────────────────
 
-let bind_str: String = env("ENGRAM_BIND")
-if str_eq(bind_str, "") { let bind_str = ":8742" }
+let bind_raw: String = env("ENGRAM_BIND")
+let bind_str: String = if str_eq(bind_raw, "") { ":8742" } else { bind_raw }
 let port: Int = parse_port(bind_str)
 
 // On startup, try to load any existing snapshot (best effort).
-let data_dir: String = env("ENGRAM_DATA_DIR")
-if str_eq(data_dir, "") { let data_dir = "/tmp/engram" }
+let data_dir_raw: String = env("ENGRAM_DATA_DIR")
+let data_dir: String = if str_eq(data_dir_raw, "") { "/tmp/engram" } else { data_dir_raw }
 let snapshot_path: String = data_dir + "/snapshot.json"
 engram_load(snapshot_path)
 
+// 2026-07-21 self-review boot guard: if the snapshot file has content but the
+// load produced 0 nodes, something is wrong (corrupt file / parse failure).
+// Preserve the evidence and warn loudly — and since read routes no longer write
+// the canonical path, a bad boot can no longer clobber the good snapshot.
+let boot_snap: String = fs_read(snapshot_path)
+if !str_eq(boot_snap, "") {
+    if engram_node_count() == 0 {
+        println("[engram] WARNING: snapshot.json is non-empty but load produced 0 nodes — preserving copy at snapshot.failed-load.json")
+        fs_write(data_dir + "/snapshot.failed-load.json", boot_snap)
+    } else {
+        // Good load: keep a boot-time backup of the snapshot as loaded.
+        fs_write(data_dir + "/snapshot.boot-backup.json", boot_snap)
+    }
+}
+
 println("[engram] runtime-native graph engine")
 println("[engram] data_dir=" + data_dir)
 println("[engram] node_count=" + int_to_str(engram_node_count()))

epm/src/install.el

@@ -17,6 +17,16 @@
 //   4. Append dep to order after all its transitive deps
 //   5. Deduplicate: skip already-ordered vessels
 
+// ── Cross-module forward declarations ─────────────────────────────────────────
+// Defined in sibling epm modules; resolved at link time. The `extern fn` decls
+// give elc the C prototypes so generated install.c compiles cleanly under strict
+// compilers (gcc>=14 / clang) that reject implicit function declarations.
+extern fn manifest_name(src: String) -> String                        // manifest.el
+extern fn manifest_deps(src: String) -> String                        // manifest.el
+extern fn registry_token() -> String                                  // registry.el
+extern fn registry_find(name: String, version: String) -> String     // registry.el
+extern fn registry_latest_version(name: String) -> String            // registry.el
+
 // ── Install paths ─────────────────────────────────────────────────────────────
 
 // packages_dir returns the root directory for installed vessels.

epm/src/registry.el

@@ -14,6 +14,15 @@
 //   EPM_REGISTRY_ORG — org name that hosts vessel repos (default: neuron-technologies)
 //   EPM_TOKEN      — Gitea personal access token (required for publish)
 
+// ── Cross-module forward declarations ─────────────────────────────────────────
+// These symbols are defined in sibling epm modules or the El runtime and are
+// resolved at link time. The `extern fn` decls give elc the C prototype so the
+// generated registry.c compiles cleanly under strict compilers (gcc>=14 / clang)
+// that reject implicit function declarations. Signature arity must match the
+// definition; return/param types are informational (all lower to el_val_t).
+extern fn config(key: String) -> String          // El runtime builtin
+extern fn read_installed() -> String              // install.el
+
 // ── Config helpers ────────────────────────────────────────────────────────────
 
 // registry_api_url returns the Gitea API base URL with no trailing slash.

epm/src/update.el

@@ -6,6 +6,15 @@
 // Depends on: registry.el (registry_latest_version, registry_find),
 //             install.el  (read_installed, install_vessel, installed_version)
 
+// ── Cross-module forward declarations ─────────────────────────────────────────
+// Defined in sibling epm modules; resolved at link time. The `extern fn` decls
+// give elc the C prototypes so generated update.c compiles cleanly under strict
+// compilers (gcc>=14 / clang) that reject implicit function declarations.
+extern fn read_installed() -> String                                  // install.el
+extern fn installed_version(name: String) -> String                   // install.el
+extern fn install_vessel(name: String, version: String) -> Bool      // install.el
+extern fn registry_latest_version(name: String) -> String            // registry.el
+
 // ── Semver helpers ────────────────────────────────────────────────────────────
 
 // semver_part extracts the Nth dot-separated component from a semver string.

lang/el-compiler/runtime/ElBridge.java

@@ -0,0 +1,711 @@
+/*
+ * ElBridge.java — Android Java companion to el_android.c.
+ *
+ * All public methods are static. The C JNI layer calls these to create views,
+ * set properties, and manage the widget tree. Views are identified by integer
+ * slot indices matching the C-side handle values.
+ *
+ * Threading: every method that touches a View dispatches to the UI thread
+ * using Activity.runOnUiThread(Runnable) and blocks with a CountDownLatch
+ * until the UI thread completes the operation. This mirrors the AppKit
+ * dispatch_sync(main_queue, ^{}) pattern in el_appkit.m.
+ *
+ * Callbacks: Java sets listeners on views that call back into C via:
+ *   nativeOnClick(int slot)
+ *   nativeOnChange(int slot, String text)
+ *   nativeOnSubmit(int slot, String text)
+ * These are declared native and implemented in el_android.c.
+ *
+ * Usage (in your Activity.onCreate):
+ *   System.loadLibrary("elruntime");
+ *   ElBridge.init(this);
+ *
+ * The native library calls __native_init() which calls nativeRegisterActivity
+ * via the C side; alternatively call ElBridge.init(this) directly from Java.
+ *
+ * Compile requirements:
+ *   Android minSdkVersion 21 (Lollipop) or higher.
+ *   No third-party dependencies — uses only android.* framework classes.
+ *   For image loading from arbitrary file paths, BitmapFactory is used.
+ *   To replace with Glide/Picasso, edit createImageView only.
+ */
+
+package com.neuron.el;
+
+import android.app.Activity;
+import android.content.Context;
+import android.graphics.Bitmap;
+import android.graphics.BitmapFactory;
+import android.graphics.Color;
+import android.graphics.Typeface;
+import android.graphics.drawable.GradientDrawable;
+import android.os.Handler;
+import android.os.Looper;
+import android.text.Editable;
+import android.text.InputType;
+import android.text.TextWatcher;
+import android.view.Gravity;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.Button;
+import android.widget.EditText;
+import android.widget.FrameLayout;
+import android.widget.ImageView;
+import android.widget.LinearLayout;
+import android.widget.ScrollView;
+import android.widget.TextView;
+
+import java.util.concurrent.CountDownLatch;
+
+public class ElBridge {
+
+    /* ── Native callbacks (implemented in el_android.c) ─────────────────── */
+
+    public static native void nativeOnClick(int slot);
+    public static native void nativeOnChange(int slot, String text);
+    public static native void nativeOnSubmit(int slot, String text);
+    public static native void nativeRegisterActivity(Activity activity);
+
+    /* ── State ───────────────────────────────────────────────────────────── */
+
+    private static final int MAX_SLOTS = 4096;
+
+    private static Activity   sActivity;
+    private static Handler    sUiHandler;
+    private static View[]     sViews    = new View[MAX_SLOTS];
+    private static int        sNextSlot = 1;   /* slot 0 reserved / null */
+
+    /* ── Init ────────────────────────────────────────────────────────────── */
+
+    /**
+     * Must be called from the Activity before any widget operations.
+     * Typically called from Activity.onCreate after System.loadLibrary.
+     */
+    public static void init(Activity activity) {
+        sActivity  = activity;
+        sUiHandler = new Handler(Looper.getMainLooper());
+        nativeRegisterActivity(activity);
+    }
+
+    /* ── Slot management ─────────────────────────────────────────────────── */
+
+    private static int allocSlot(View v) {
+        /* Find a free slot starting from sNextSlot, wrap around. */
+        for (int i = 0; i < MAX_SLOTS - 1; i++) {
+            int idx = ((sNextSlot - 1 + i) % (MAX_SLOTS - 1)) + 1;
+            if (sViews[idx] == null) {
+                sViews[idx] = v;
+                sNextSlot = (idx % (MAX_SLOTS - 1)) + 1;
+                return idx;
+            }
+        }
+        android.util.Log.e("ElBridge", "allocSlot: slot table full");
+        return -1;
+    }
+
+    private static View getView(int slot) {
+        if (slot <= 0 || slot >= MAX_SLOTS) return null;
+        return sViews[slot];
+    }
+
+    /* ── UI-thread dispatch helper ───────────────────────────────────────── */
+
+    /*
+     * Dispatch r on the UI thread and block until it completes.
+     * Safe to call from the UI thread itself (runs inline without posting).
+     */
+    private static void runSync(final Runnable r) {
+        if (Looper.myLooper() == Looper.getMainLooper()) {
+            r.run();
+        } else {
+            final CountDownLatch latch = new CountDownLatch(1);
+            sUiHandler.post(new Runnable() {
+                @Override public void run() {
+                    try { r.run(); } finally { latch.countDown(); }
+                }
+            });
+            try { latch.await(); } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+            }
+        }
+    }
+
+    /* ── Integer slot returning runSync helper ───────────────────────────── */
+
+    private interface IntSupplier { int get(); }
+
+    private static int runSyncInt(final IntSupplier s) {
+        final int[] result = { -1 };
+        runSync(new Runnable() {
+            @Override public void run() { result[0] = s.get(); }
+        });
+        return result[0];
+    }
+
+    /* ── Context accessor ────────────────────────────────────────────────── */
+
+    private static Context ctx() { return sActivity; }
+
+    /* ── View creation ───────────────────────────────────────────────────── */
+
+    /**
+     * Create a LinearLayout.
+     * @param orientation 1=VERTICAL, 0=HORIZONTAL
+     * @param spacing     gap between children in dp; applied as bottom/right margin
+     */
+    public static int createLinearLayout(final int orientation, final int spacing) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                LinearLayout ll = new LinearLayout(ctx());
+                ll.setOrientation(orientation == 1
+                        ? LinearLayout.VERTICAL
+                        : LinearLayout.HORIZONTAL);
+                ll.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                /* Spacing is stored so addChild can apply margins. */
+                ll.setTag(R_TAG_SPACING, spacing);
+                return allocSlot(ll);
+            }
+        });
+    }
+
+    /** Create a FrameLayout (ZStack equivalent). */
+    public static int createFrameLayout() {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                FrameLayout fl = new FrameLayout(ctx());
+                fl.setLayoutParams(new FrameLayout.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(fl);
+            }
+        });
+    }
+
+    /** Create a ScrollView. */
+    public static int createScrollView() {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                ScrollView sv = new ScrollView(ctx());
+                sv.setLayoutParams(new ScrollView.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.MATCH_PARENT));
+                sv.setFillViewport(true);
+                return allocSlot(sv);
+            }
+        });
+    }
+
+    /** Create a TextView with initial text. */
+    public static int createTextView(final String text) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                TextView tv = new TextView(ctx());
+                tv.setText(text != null ? text : "");
+                tv.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(tv);
+            }
+        });
+    }
+
+    /** Create a Button with a label. */
+    public static int createButton(final String label) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                Button btn = new Button(ctx());
+                btn.setText(label != null ? label : "");
+                btn.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(btn);
+            }
+        });
+    }
+
+    /**
+     * Create an EditText.
+     * @param placeholder hint text
+     * @param singleLine  true = single-line text field; false = multi-line text area
+     */
+    public static int createEditText(final String placeholder, final boolean singleLine) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                EditText et = new EditText(ctx());
+                et.setHint(placeholder != null ? placeholder : "");
+                if (singleLine) {
+                    et.setInputType(InputType.TYPE_CLASS_TEXT
+                            | InputType.TYPE_TEXT_FLAG_NO_SUGGESTIONS);
+                    et.setMaxLines(1);
+                    et.setSingleLine(true);
+                } else {
+                    et.setInputType(InputType.TYPE_CLASS_TEXT
+                            | InputType.TYPE_TEXT_FLAG_MULTI_LINE);
+                    et.setMinLines(3);
+                    et.setSingleLine(false);
+                    et.setGravity(Gravity.TOP | Gravity.START);
+                }
+                et.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(et);
+            }
+        });
+    }
+
+    /**
+     * Create an ImageView, loading from a file path via BitmapFactory.
+     * If path is null/empty the ImageView is created with no image.
+     */
+    public static int createImageView(final String path) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                ImageView iv = new ImageView(ctx());
+                iv.setScaleType(ImageView.ScaleType.FIT_CENTER);
+                iv.setAdjustViewBounds(true);
+                if (path != null && !path.isEmpty()) {
+                    Bitmap bmp = BitmapFactory.decodeFile(path);
+                    if (bmp != null) {
+                        iv.setImageBitmap(bmp);
+                    } else {
+                        android.util.Log.w("ElBridge",
+                                "createImageView: failed to decode " + path);
+                    }
+                }
+                iv.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(iv);
+            }
+        });
+    }
+
+    /* ── Window operations ───────────────────────────────────────────────── */
+
+    /** Set the Activity's content view to the view at slot. */
+    public static void setContentView(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null && sActivity != null) {
+                    sActivity.setContentView(v);
+                }
+            }
+        });
+    }
+
+    /** Set the Activity title. */
+    public static void setTitle(final String title) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                if (sActivity != null) {
+                    sActivity.setTitle(title != null ? title : "");
+                }
+            }
+        });
+    }
+
+    /* ── Tree operations ─────────────────────────────────────────────────── */
+
+    /**
+     * Add child view to parent view.
+     * LinearLayout: child added as arranged child with spacing margin.
+     * ScrollView: child replaces current document view.
+     * FrameLayout / other ViewGroup: plain addView.
+     */
+    public static void addChild(final int parentSlot, final int childSlot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View parent = getView(parentSlot);
+                View child  = getView(childSlot);
+                if (parent == null || child == null) return;
+
+                /* Remove child from existing parent first. */
+                if (child.getParent() instanceof ViewGroup) {
+                    ((ViewGroup) child.getParent()).removeView(child);
+                }
+
+                if (parent instanceof LinearLayout) {
+                    LinearLayout ll = (LinearLayout) parent;
+                    Object tag = ll.getTag(R_TAG_SPACING);
+                    int spacing = (tag instanceof Integer) ? (Integer) tag : 0;
+                    LinearLayout.LayoutParams lp;
+                    Object existingLp = child.getLayoutParams();
+                    if (existingLp instanceof LinearLayout.LayoutParams) {
+                        lp = (LinearLayout.LayoutParams) existingLp;
+                    } else {
+                        lp = new LinearLayout.LayoutParams(
+                                ViewGroup.LayoutParams.WRAP_CONTENT,
+                                ViewGroup.LayoutParams.WRAP_CONTENT);
+                    }
+                    /* Apply spacing as margin on the leading/top edge (after first child). */
+                    if (ll.getChildCount() > 0 && spacing > 0) {
+                        int px = dpToPx(spacing);
+                        if (ll.getOrientation() == LinearLayout.VERTICAL) {
+                            lp.topMargin = px;
+                        } else {
+                            lp.leftMargin = px;
+                        }
+                    }
+                    child.setLayoutParams(lp);
+                    ll.addView(child);
+                } else if (parent instanceof ScrollView) {
+                    ScrollView sv = (ScrollView) parent;
+                    sv.removeAllViews();
+                    sv.addView(child);
+                } else if (parent instanceof ViewGroup) {
+                    ((ViewGroup) parent).addView(child);
+                }
+            }
+        });
+    }
+
+    /** Remove child from its parent. */
+    public static void removeChild(final int parentSlot, final int childSlot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View parent = getView(parentSlot);
+                View child  = getView(childSlot);
+                if (parent instanceof ViewGroup && child != null) {
+                    ((ViewGroup) parent).removeView(child);
+                }
+            }
+        });
+    }
+
+    /** Remove the view from its parent and release the slot. */
+    public static void destroyView(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                if (v.getParent() instanceof ViewGroup) {
+                    ((ViewGroup) v.getParent()).removeView(v);
+                }
+                sViews[slot] = null;
+            }
+        });
+    }
+
+    /* ── Property setters ────────────────────────────────────────────────── */
+
+    public static void setText(final int slot, final String text) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                String s = text != null ? text : "";
+                if (v instanceof EditText) {
+                    ((EditText) v).setText(s);
+                } else if (v instanceof Button) {
+                    ((Button) v).setText(s);
+                } else if (v instanceof TextView) {
+                    ((TextView) v).setText(s);
+                }
+            }
+        });
+    }
+
+    public static String getText(final int slot) {
+        final String[] result = { "" };
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v instanceof TextView) {
+                    CharSequence cs = ((TextView) v).getText();
+                    result[0] = cs != null ? cs.toString() : "";
+                }
+            }
+        });
+        return result[0];
+    }
+
+    /** Set foreground text color. Components in [0,1]. */
+    public static void setTextColor(final int slot, final float r, final float g,
+                                     final float b, final float a) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v instanceof TextView) {
+                    ((TextView) v).setTextColor(floatToArgb(r, g, b, a));
+                }
+            }
+        });
+    }
+
+    /** Set background color using a GradientDrawable so corner radius is preserved. */
+    public static void setBackgroundColor(final int slot, final float r, final float g,
+                                           final float b, final float a) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ensureGradientBackground(v);
+                GradientDrawable gd = (GradientDrawable) v.getBackground();
+                gd.setColor(floatToArgb(r, g, b, a));
+            }
+        });
+    }
+
+    /**
+     * Set font family and size.
+     * family: "system" or null → system default; otherwise tries to load by name.
+     * bold: if true uses Typeface.BOLD.
+     */
+    public static void setFont(final int slot, final String family,
+                                final int sizeSp, final boolean bold) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (!(v instanceof TextView)) return;
+                TextView tv = (TextView) v;
+                Typeface tf;
+                if (family != null && !family.isEmpty()
+                        && !family.equals("system")) {
+                    Typeface base = Typeface.create(family,
+                            bold ? Typeface.BOLD : Typeface.NORMAL);
+                    tf = (base != null) ? base
+                            : Typeface.defaultFromStyle(bold ? Typeface.BOLD : Typeface.NORMAL);
+                } else {
+                    tf = Typeface.defaultFromStyle(bold ? Typeface.BOLD : Typeface.NORMAL);
+                }
+                tv.setTypeface(tf);
+                tv.setTextSize(android.util.TypedValue.COMPLEX_UNIT_SP, sizeSp);
+            }
+        });
+    }
+
+    /** Set padding in dp. */
+    public static void setPadding(final int slot, final int top, final int right,
+                                   final int bottom, final int left) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null) {
+                    v.setPadding(dpToPx(left), dpToPx(top), dpToPx(right), dpToPx(bottom));
+                }
+            }
+        });
+    }
+
+    /** Set explicit width in dp. Passes MATCH_PARENT for negative values. */
+    public static void setWidth(final int slot, final int widthDp) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ViewGroup.LayoutParams lp = v.getLayoutParams();
+                if (lp == null) lp = new ViewGroup.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT);
+                lp.width = widthDp < 0
+                        ? ViewGroup.LayoutParams.MATCH_PARENT
+                        : dpToPx(widthDp);
+                v.setLayoutParams(lp);
+            }
+        });
+    }
+
+    /** Set explicit height in dp. */
+    public static void setHeight(final int slot, final int heightDp) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ViewGroup.LayoutParams lp = v.getLayoutParams();
+                if (lp == null) lp = new ViewGroup.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT);
+                lp.height = heightDp < 0
+                        ? ViewGroup.LayoutParams.MATCH_PARENT
+                        : dpToPx(heightDp);
+                v.setLayoutParams(lp);
+            }
+        });
+    }
+
+    /**
+     * Set flex weight on a child of a LinearLayout.
+     * flex > 0 → weight = flex, width/height = 0dp (expand).
+     * flex == 0 → weight = 0, wrap_content (shrink to content).
+     */
+    public static void setFlex(final int slot, final int flex) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ViewGroup.LayoutParams lp = v.getLayoutParams();
+                if (lp instanceof LinearLayout.LayoutParams) {
+                    LinearLayout.LayoutParams llp = (LinearLayout.LayoutParams) lp;
+                    if (flex > 0) {
+                        llp.weight = (float) flex;
+                        /* Determine orientation from parent to set 0dp on the right axis. */
+                        if (v.getParent() instanceof LinearLayout) {
+                            LinearLayout parent = (LinearLayout) v.getParent();
+                            if (parent.getOrientation() == LinearLayout.VERTICAL) {
+                                llp.height = 0;
+                            } else {
+                                llp.width = 0;
+                            }
+                        }
+                    } else {
+                        llp.weight = 0f;
+                    }
+                    v.setLayoutParams(llp);
+                }
+            }
+        });
+    }
+
+    /** Set corner radius in dp using a GradientDrawable background. */
+    public static void setCornerRadius(final int slot, final float radiusDp) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ensureGradientBackground(v);
+                GradientDrawable gd = (GradientDrawable) v.getBackground();
+                gd.setCornerRadius(dpToPxF(radiusDp));
+            }
+        });
+    }
+
+    public static void setEnabled(final int slot, final boolean enabled) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null) v.setEnabled(enabled);
+            }
+        });
+    }
+
+    /**
+     * Show or hide a view.
+     * @param visible true = VISIBLE, false = GONE (matches AppKit setHidden semantics)
+     */
+    public static void setVisibility(final int slot, final boolean visible) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null) v.setVisibility(visible ? View.VISIBLE : View.GONE);
+            }
+        });
+    }
+
+    /* ── Event listener registration ─────────────────────────────────────── */
+
+    /** Register an OnClickListener that calls back into C nativeOnClick. */
+    public static void setOnClickListener(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                final int capturedSlot = slot;
+                v.setOnClickListener(new View.OnClickListener() {
+                    @Override public void onClick(View view) {
+                        nativeOnClick(capturedSlot);
+                    }
+                });
+            }
+        });
+    }
+
+    /**
+     * Register a TextWatcher on an EditText that calls back nativeOnChange
+     * for every text change.
+     */
+    public static void setOnChangeListener(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (!(v instanceof EditText)) return;
+                final int capturedSlot = slot;
+                ((EditText) v).addTextChangedListener(new TextWatcher() {
+                    @Override public void beforeTextChanged(CharSequence s, int start,
+                                                             int count, int after) {}
+                    @Override public void onTextChanged(CharSequence s, int start,
+                                                         int before, int count) {}
+                    @Override public void afterTextChanged(Editable s) {
+                        nativeOnChange(capturedSlot, s != null ? s.toString() : "");
+                    }
+                });
+            }
+        });
+    }
+
+    /**
+     * Register an OnEditorActionListener on a single-line EditText that calls
+     * nativeOnSubmit when the user presses the action/enter key.
+     */
+    public static void setOnSubmitListener(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (!(v instanceof EditText)) return;
+                final int capturedSlot = slot;
+                ((EditText) v).setOnEditorActionListener(
+                        new TextView.OnEditorActionListener() {
+                    @Override
+                    public boolean onEditorAction(TextView tv, int actionId,
+                                                   android.view.KeyEvent event) {
+                        nativeOnSubmit(capturedSlot,
+                                tv.getText() != null ? tv.getText().toString() : "");
+                        return true;
+                    }
+                });
+            }
+        });
+    }
+
+    /* ── Internal helpers ─────────────────────────────────────────────────── */
+
+    /*
+     * Tag key used to stash the spacing value on LinearLayouts so addChild
+     * can apply the correct margin between children.
+     * We use a stable integer resource-id-like value; because we do not have
+     * a resources file here we use View.generateViewId() lazily.
+     */
+    private static int sSpacingTagKey = 0;
+
+    private static int R_TAG_SPACING;
+    static {
+        R_TAG_SPACING = View.generateViewId();
+    }
+
+    /** Convert dp to pixels using the Activity's display metrics. */
+    private static int dpToPx(float dp) {
+        if (sActivity == null) return (int) dp;
+        float density = sActivity.getResources().getDisplayMetrics().density;
+        return Math.round(dp * density);
+    }
+
+    private static float dpToPxF(float dp) {
+        if (sActivity == null) return dp;
+        float density = sActivity.getResources().getDisplayMetrics().density;
+        return dp * density;
+    }
+
+    /** Convert RGBA float components (0–1) to an Android ARGB int. */
+    private static int floatToArgb(float r, float g, float b, float a) {
+        int ai = Math.round(a * 255f);
+        int ri = Math.round(r * 255f);
+        int gi = Math.round(g * 255f);
+        int bi = Math.round(b * 255f);
+        return Color.argb(ai, ri, gi, bi);
+    }
+
+    /**
+     * Ensure the view has a GradientDrawable background so that both color
+     * and corner radius can be set independently.  If the current background
+     * is already a GradientDrawable it is reused; otherwise a new transparent
+     * one is installed.
+     */
+    private static void ensureGradientBackground(View v) {
+        if (!(v.getBackground() instanceof GradientDrawable)) {
+            GradientDrawable gd = new GradientDrawable();
+            gd.setColor(Color.TRANSPARENT);
+            v.setBackground(gd);
+        }
+    }
+}

lang/el-compiler/runtime/PLATFORM_BRIDGE_SPEC.md

@@ -0,0 +1,554 @@
+# Platform Bridge Specification — el-native
+
+This document is the authoritative reference for anyone implementing a new platform bridge for the el-native widget system. Read it top to bottom before writing a single line of code.
+
+---
+
+## What a Platform Bridge Is
+
+The el compiler (`elc`) emits C code. That C code calls `__`-prefixed functions for everything OS-related: printing, file I/O, threading, and — when building a native UI app — widget creation and event handling. These `__` functions are the *OS boundary*.
+
+For native UI, the bridge is the translation layer between that fixed C API and whatever platform toolkit you are targeting. The bridge owns:
+
+1. A **slot table** of up to 4096 widget objects, indexed by `int64_t` handle.
+2. Implementations of all 33 `__*` widget functions declared in `el_native_target.h`.
+3. Callback dispatch from platform events back into El function symbols resolved via `dlsym` (or a platform equivalent).
+
+The thin wrappers in `el_seed.c` (`#ifdef EL_TARGET_*` blocks) marshal between `el_val_t` and native C types, then call through to the bridge. The bridge itself never touches `el_val_t` — it works only with plain C types (`int64_t`, `const char*`, `int`, `float`).
+
+**Existing bridges:**
+
+| File | Platform | Toolkit | Language |
+|------|----------|---------|----------|
+| `el_appkit.m` | macOS | AppKit | ObjC (MRC) |
+| `el_gtk4.c` | Linux | GTK4 | C |
+| `el_win32.c` | Windows | Win32/ComCtl | C |
+| `el_uikit.m` | iOS | UIKit | ObjC (MRC) |
+| `el_android.c` + `ElBridge.java` | Android | View/JNI | C + Java |
+| `el_sdl2.c` | Embedded Linux / Pi | SDL2 | C |
+| `el_lvgl.c` | Microcontrollers | LVGL | C |
+
+---
+
+## The Slot System
+
+Every widget — window, button, label, container, image — is stored in a static array:
+
+```c
+#define EL_<PLATFORM>_MAX_WIDGETS 4096
+
+typedef struct {
+    ElWidgetKind  kind;
+    /* platform-specific object reference (pointer, handle, ID...) */
+    /* callback names */
+    char*         cb_click;
+    char*         cb_change;
+} ElWidget;
+
+static ElWidget _el_widgets[EL_<PLATFORM>_MAX_WIDGETS];
+```
+
+Rules:
+- **Slot 0 is never valid.** Scan starts at index 1. This ensures 0 is never a valid handle.
+- **Handle = slot index.** An `int64_t` value returned to El code is a direct index into `_el_widgets[]`.
+- **-1 = invalid.** All create functions return -1 on failure (table full, platform API error).
+- **Slot is FREE until allocated, FREE again after destroy.** Use an `ElWidgetKind` enum where `0 = EL_WIDGET_FREE` to track liveness.
+- **4096 slots is the system-wide maximum.** This is intentional and sufficient for any realistic UI. Do not increase it without a compelling reason.
+
+### Slot allocation and release pattern
+
+```c
+static int64_t el_widget_alloc(ElWidgetKind kind, /* platform object ref */) {
+    for (int i = 1; i < EL_<PLATFORM>_MAX_WIDGETS; i++) {
+        if (_el_widgets[i].kind == EL_WIDGET_FREE) {
+            _el_widgets[i].kind     = kind;
+            /* store platform object ref — retain/addref if needed */
+            _el_widgets[i].cb_click  = NULL;
+            _el_widgets[i].cb_change = NULL;
+            return (int64_t)i;
+        }
+    }
+    return -1; /* table full */
+}
+
+static ElWidget* el_widget_get(int64_t handle) {
+    if (handle <= 0 || handle >= EL_<PLATFORM>_MAX_WIDGETS) return NULL;
+    if (_el_widgets[handle].kind == EL_WIDGET_FREE) return NULL;
+    return &_el_widgets[handle];
+}
+
+static void el_widget_free(int64_t handle) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    /* release platform object ref */
+    w->kind = EL_WIDGET_FREE;
+    free(w->cb_click);  w->cb_click  = NULL;
+    free(w->cb_change); w->cb_change = NULL;
+}
+```
+
+**NULL handle guard:** `el_widget_get` must return `NULL` for any handle that is 0, negative, out of range, or points to a `FREE` slot. Every `__` function that takes a handle must null-check the result of `el_widget_get` before doing anything. Failing to do so causes crashes or corruption when El code passes an uninitialized handle.
+
+---
+
+## The 33 Required Functions
+
+Every bridge must implement all 33 functions listed below. They are grouped by category. The signatures shown are from `el_native_target.h` and from `el_seed.c`'s wrapper layer; the bridge itself uses plain C types (the wrappers do the `el_val_t` ↔ C-type conversion).
+
+### Internal C signatures (what the bridge implements)
+
+These are what your `.c` / `.m` file defines. The `el_seed.c` wrappers call these.
+
+#### Lifecycle (2 functions)
+
+```c
+void el_<platform>_init(void);
+```
+**Purpose:** Initialize the platform UI toolkit. Must be idempotent (safe to call more than once). Called once from `__native_init` before any widget creation.  
+**Edge cases:** On platforms where the toolkit must be initialized before a display connection is established (X11, Wayland), this is where that happens. On Android, this is a no-op because ElBridge.java calls init from Java.
+
+```c
+void el_<platform>_run_loop(void);
+```
+**Purpose:** Start the platform event loop. On most platforms this **never returns**. Exceptions: Android (the loop is Java-managed — this must be a no-op) and headless test builds.  
+**Edge cases:** Must be called from the main thread. On iOS/UIKit, calls `UIApplicationMain` which never returns; El code must set `el_main_entry_fn` before calling this.
+
+#### Window (3 functions)
+
+```c
+int64_t el_<platform>_window_create(const char* title, int w, int h, int mw, int mh);
+```
+**Purpose:** Create a top-level window. `w`/`h` = initial size in logical pixels. `mw`/`mh` = minimum size (0 = no minimum).  
+**Returns:** Slot handle, or -1 on failure.  
+**Edge cases:** NULL or empty `title` must be handled gracefully (use `""`). On mobile (iOS, Android), the concept of a "window" maps to the root view controller / activity root view — create that here.
+
+```c
+void el_<platform>_window_show(int64_t handle);
+```
+**Purpose:** Make the window visible. On some platforms windows are hidden at creation; this makes them appear.  
+**Edge cases:** NULL handle → return silently. Calling on an already-visible window is a no-op.
+
+```c
+void el_<platform>_window_set_title(int64_t handle, const char* title);
+```
+**Purpose:** Update the window's title bar text at runtime.  
+**Edge cases:** NULL handle or NULL title → no-op.
+
+#### Layout containers (4 functions)
+
+```c
+int64_t el_<platform>_vstack_create(int spacing);
+int64_t el_<platform>_hstack_create(int spacing);
+```
+**Purpose:** Create a vertical/horizontal linear container. `spacing` = gap between children in logical pixels.  
+**Returns:** Slot handle, or -1.  
+**Edge cases:** spacing = 0 is valid and common.
+
+```c
+int64_t el_<platform>_zstack_create(void);
+```
+**Purpose:** Create a z-axis layered container (children overlap, no stacking direction). Used for overlays.  
+**Returns:** Slot handle, or -1.
+
+```c
+int64_t el_<platform>_scroll_create(void);
+```
+**Purpose:** Create a scrollable container. Scrolls vertically by default. Only the first child added is the scrollable content.  
+**Returns:** Slot handle, or -1.
+
+#### Leaf widgets (5 functions)
+
+```c
+int64_t el_<platform>_label_create(const char* text);
+```
+**Purpose:** Create a non-editable text label.  
+**Edge cases:** NULL/empty text → label with empty string, not a crash.
+
+```c
+int64_t el_<platform>_button_create(const char* label);
+```
+**Purpose:** Create a clickable button. The `label` is the button's visible text.  
+**Edge cases:** The button must wire up an action target at creation time so that click callbacks registered later via `el_<platform>_widget_on_click` will fire. On platforms with target-action (AppKit, UIKit), allocate the delegate object here.
+
+```c
+int64_t el_<platform>_text_field_create(const char* placeholder);
+```
+**Purpose:** Create a single-line text input. `placeholder` is the hint text shown when empty.  
+**Edge cases:** NULL placeholder → no hint text displayed.
+
+```c
+int64_t el_<platform>_text_area_create(const char* placeholder);
+```
+**Purpose:** Create a multi-line text input (scrollable).  
+**Edge cases:** Same as text_field_create. On AppKit, this wraps NSTextView inside NSScrollView — the slot's `obj` points to the scroll view, not the text view.
+
+```c
+int64_t el_<platform>_image_create(const char* path_or_name);
+```
+**Purpose:** Create an image widget. `path_or_name` can be a filesystem path or a platform resource name. Try path first, fall back to named resource.  
+**Edge cases:** Non-existent path → create an empty image widget (do not crash). NULL → same.
+
+#### Widget properties (12 functions)
+
+```c
+void el_<platform>_widget_set_text(int64_t handle, const char* text);
+```
+**Purpose:** Update the text content of a label, button, text field, text area, or window title. Must dispatch on `kind` to use the correct API.  
+**Edge cases:** NULL handle → no-op. NULL text → treat as `""`.
+
+```c
+const char* el_<platform>_widget_get_text(int64_t handle);
+```
+**Purpose:** Return the current text of a widget. Returns a `const char*` that the `el_seed.c` wrapper wraps into an `el_val_t` string.  
+**Edge cases:** NULL handle → return `""` (never NULL). The caller in `el_seed.c` handles the `strdup` lifetime issue — see the AppKit reference implementation notes.
+
+```c
+void el_<platform>_widget_set_color(int64_t h, float r, float g, float b, float a);
+void el_<platform>_widget_set_bg_color(int64_t h, float r, float g, float b, float a);
+```
+**Purpose:** Set foreground (text) color and background color respectively. All channels are normalized floats [0.0, 1.0].  
+**Edge cases:** For containers, `set_color` may be a no-op (no text); `set_bg_color` should set the layer/surface background. On platforms without alpha compositing, clamp alpha to 0 or 1.
+
+```c
+void el_<platform>_widget_set_font(int64_t h, const char* family, int size, int bold);
+```
+**Purpose:** Set the font on a text-bearing widget. `family` = font family name or `"system"` for the platform default. `size` = point size. `bold` = 0 or 1.  
+**Edge cases:** If `family` is not found, fall back to the system font. Non-text widgets (containers, images) → no-op.
+
+```c
+void el_<platform>_widget_set_padding(int64_t h, int top, int right, int bottom, int left);
+```
+**Purpose:** Set internal padding/insets for a container or text area.  
+**Edge cases:** On platforms where padding is per-view (not per-container), map to the nearest equivalent (margin, insets, text container inset). For leaf widgets other than text areas, this may be a partial no-op.
+
+```c
+void el_<platform>_widget_set_width(int64_t h, int width);
+void el_<platform>_widget_set_height(int64_t h, int height);
+```
+**Purpose:** Apply a fixed-size constraint. `width`/`height` in logical pixels.  
+**Edge cases:** On platforms with Auto Layout or constraint systems, add a fixed-size constraint. Do not apply to windows (size is set at creation). Calling multiple times should override the previous constraint, not add another.
+
+```c
+void el_<platform>_widget_set_flex(int64_t h, int flex);
+```
+**Purpose:** Set the flex/expansion factor. `flex > 0` → the widget expands to fill available space. `flex == 0` → hugs content size.  
+**Edge cases:** Maps to content-hugging priority (AppKit), `GtkWidget::hexpand`/`vexpand` (GTK4), or layout weight (Android). For windows → no-op.
+
+```c
+void el_<platform>_widget_set_corner_radius(int64_t h, int radius);
+```
+**Purpose:** Apply rounded corners to the widget's visual layer.  
+**Edge cases:** Requires backing layer / GPU surface. On platforms without layer compositing (Win32 without DX), this may be a no-op or require manual painting. Radius in logical pixels.
+
+```c
+void el_<platform>_widget_set_disabled(int64_t h, int disabled);
+```
+**Purpose:** Enable or disable user interaction. `disabled = 1` → greyed out, non-interactive.  
+**Edge cases:** Only meaningful for interactive widgets (button, text field). For containers/labels → no-op.
+
+```c
+void el_<platform>_widget_set_hidden(int64_t h, int hidden);
+```
+**Purpose:** Show or hide the widget. `hidden = 1` → invisible but still in layout.  
+**Edge cases:** For windows, map to `orderOut`/`hide` or equivalent. For views, use `setHidden`/`gtk_widget_set_visible` or equivalent.
+
+#### Tree management (3 functions)
+
+```c
+void el_<platform>_widget_add_child(int64_t parent, int64_t child);
+```
+**Purpose:** Attach a child widget to a parent container. Dispatch on parent kind:
+- Window → add to root content view/container
+- VStack/HStack → add as arranged/linear child
+- ZStack → add as overlapping subview
+- Scroll → set as document/content view (first child only)
+- Other → add as plain subview
+
+**Edge cases:** NULL parent or child handle → no-op. Attempting to add a window as a child → no-op. Adding the same child twice is platform-defined behavior (tolerate it).
+
+```c
+void el_<platform>_widget_remove_child(int64_t parent, int64_t child);
+```
+**Purpose:** Detach child from its parent. The child slot remains allocated; the widget is not destroyed.  
+**Edge cases:** NULL handles → no-op. Child not currently attached → no-op.
+
+```c
+void el_<platform>_widget_destroy(int64_t handle);
+```
+**Purpose:** Destroy a widget: remove from superview/parent, release the platform object, release callback strings, mark slot as FREE.  
+**Edge cases:** For windows, close the window. Free any delegate/target objects stored in side tables. After destroy, the handle is invalid — El code must not use it again (this is the caller's responsibility, not enforced here).
+
+#### Event registration (3 functions)
+
+```c
+void el_<platform>_widget_on_click(int64_t h, const char* fn_name);
+void el_<platform>_widget_on_change(int64_t h, const char* fn_name);
+void el_<platform>_widget_on_submit(int64_t h, const char* fn_name);
+```
+**Purpose:** Register an El callback function by symbol name.
+- `on_click` → button press
+- `on_change` → text field value change (keystroke-level)
+- `on_submit` → text field Enter key (text field only; stored in `cb_click` slot in AppKit)
+
+The implementation stores `strdup(fn_name)` in the widget's `cb_click` or `cb_change` field. The platform event handler calls `el_<platform>_invoke_cb` (see callback ABI section).  
+**Edge cases:** NULL or empty `fn_name` → clear the callback (`free` + set NULL). Calling on a non-interactive widget (label, image) → no-op or store silently (harmless).
+
+#### Manifest reader (1 function)
+
+```c
+/* Note: __manifest_read is implemented in el_seed.c, not in the bridge. */
+/* Bridges do NOT need to implement this. */
+```
+
+`__manifest_read` is handled entirely in the platform-independent section of `el_seed.c`. It reads a JSON/EL manifest file from the path in the `EL_MANIFEST` environment variable. Bridge authors do not need to implement this.
+
+---
+
+## The Callback ABI
+
+When a platform event fires (button clicked, text changed), the bridge must call back into the El runtime. The mechanism:
+
+```c
+typedef void (*ElCb2)(int64_t handle, int64_t data);
+
+static void el_<platform>_invoke_cb(const char* fn_name, int64_t handle, const char* data) {
+    if (!fn_name || !*fn_name) return;
+    void* sym = dlsym(RTLD_DEFAULT, fn_name);
+    if (!sym) return;
+    ElCb2 fn = (ElCb2)sym;
+    fn(handle, (int64_t)(uintptr_t)(data ? data : ""));
+}
+```
+
+The El callback signature (in El source):
+```
+fn handler(handle: Int, data: String) -> Void
+```
+
+Which compiles to:
+```c
+void handler(int64_t handle, int64_t data)
+```
+
+Where `data` is a `const char*` cast to `int64_t` (the el `String` representation). For click events, `data` is `""`. For change/submit events, `data` is the current widget text.
+
+**On platforms without `dlsym`** (Windows, some embedded systems): use `GetProcAddress(GetModuleHandle(NULL), fn_name)` on Windows, or maintain a manual symbol registration table for embedded targets where dynamic linking is unavailable.
+
+**Thread safety for callbacks:** Callbacks fired from a background thread must be marshalled to the UI thread before calling into El code. El code may call `__widget_set_text` or other UI functions synchronously from within the callback — those must run on the UI thread.
+
+---
+
+## Thread Safety Contract
+
+**All platform UI operations must execute on the main/UI thread.** This is a hard requirement on every platform (AppKit, UIKit, GTK4, Win32, Android View, SDL2 main thread rule).
+
+The reference pattern (AppKit):
+```c
+static void el_appkit_sync_main(void (^block)(void)) {
+    if ([NSThread isMainThread]) {
+        block();
+    } else {
+        dispatch_sync(dispatch_get_main_queue(), block);
+    }
+}
+```
+
+For other platforms:
+- **GTK4:** `g_main_context_invoke` or `g_idle_add` + semaphore for synchronous dispatch
+- **Win32:** `SendMessage(hwnd, WM_APP, ...)` or `PostMessage` + wait
+- **Android:** `Activity.runOnUiThread`
+- **SDL2:** All ops must be called from the thread that initialized SDL (the main thread)
+- **LVGL:** `lv_lock()` / `lv_unlock()` for thread-safe access
+
+El program flow is: `main()` → build UI (on main thread) → `__native_run_loop()`. Because UI is built before the run loop starts, most widget creation calls are already on the main thread. The sync dispatch wrapper exists to handle callbacks that arrive on worker threads (e.g., network callbacks that update UI).
+
+---
+
+## Integration Pattern
+
+### In `el_native_target.h`
+
+Add an `#ifdef EL_TARGET_<PLATFORM>` block declaring all 33 `__*` functions with their `el_val_t` signatures (identical to the existing blocks for MACOS, LINUX, etc.):
+
+```c
+#ifdef EL_TARGET_<PLATFORM>
+
+void      __native_init(void);
+void      __native_run_loop(void);
+
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_<PLATFORM> */
+```
+
+### In `el_seed.c`
+
+Add an `#ifdef EL_TARGET_<PLATFORM>` block containing:
+1. `extern` declarations of all `el_<platform>_*` functions (your bridge's C API)
+2. Thin wrapper functions that marshal `el_val_t` ↔ C types and call through
+
+The wrapper pattern (copy from the `EL_TARGET_MACOS` block and substitute the platform name):
+
+```c
+#ifdef EL_TARGET_<PLATFORM>
+
+/* Forward declarations — implemented in el_<platform>.c */
+extern void    el_<platform>_init(void);
+extern void    el_<platform>_run_loop(void);
+extern int64_t el_<platform>_window_create(const char* title, int w, int h, int mw, int mh);
+/* ... all others ... */
+
+/* Wrappers */
+void __native_init(void)     { el_<platform>_init(); }
+void __native_run_loop(void) { el_<platform>_run_loop(); }
+
+el_val_t __window_create(el_val_t title, el_val_t width, el_val_t height,
+                          el_val_t min_width, el_val_t min_height) {
+    return (el_val_t)el_<platform>_window_create(
+        EL_CSTR(title),
+        (int)(int64_t)width, (int)(int64_t)height,
+        (int)(int64_t)min_width, (int)(int64_t)min_height);
+}
+
+void __window_show(el_val_t h)                  { el_<platform>_window_show((int64_t)h); }
+void __window_set_title(el_val_t h, el_val_t t) { el_<platform>_window_set_title((int64_t)h, EL_CSTR(t)); }
+
+/* ... continue for all 33 functions ... */
+
+#endif /* EL_TARGET_<PLATFORM> */
+```
+
+Key marshalling rules:
+- `el_val_t` → `int64_t` handle: `(int64_t)h`
+- `el_val_t` → `int`: `(int)(int64_t)value`
+- `el_val_t` → `const char*`: `EL_CSTR(value)`
+- `el_val_t` → `float`: `(float)el_to_float(value)` (for color channels)
+- `int64_t` handle → `el_val_t`: `(el_val_t)handle`
+- `const char*` → `el_val_t`: `EL_STR(str)` — but read the get_text note below
+
+**`__widget_get_text` note:** The bridge returns `const char*`. The `el_seed.c` wrapper wraps it with `EL_STR(s)`. The returned pointer must remain valid until the El program is done with it. The AppKit implementation returns a `strdup`'d string — the caller (seed wrapper) stores it without tracking it in the arena. This is a known lifetime edge; be consistent with the platform's existing pattern.
+
+---
+
+## How el Strings Work
+
+Inside El compiled C code, strings are `el_val_t` values where the value is the `uintptr_t` cast of a `const char*`:
+
+```c
+#define EL_STR(s)  ((el_val_t)(uintptr_t)(s))
+#define EL_CSTR(v) ((const char*)(uintptr_t)(v))
+```
+
+To construct a string result in `el_seed.c`:
+```c
+static char* s = strdup("hello");
+return EL_STR(s);
+```
+
+To read a string argument passed from El:
+```c
+const char* text = EL_CSTR(some_el_val_t_argument);
+```
+
+The `EL_STR` / `EL_CSTR` macros are defined in `el_seed.h` and are available in `el_seed.c`. Bridge files (`el_<platform>.c`) do not use these macros — they only deal in `const char*` at their API boundary.
+
+---
+
+## Known Gotchas
+
+### Duplicate symbols with `el_runtime.c`
+
+`el_runtime.c` defines many of the same `__`-prefixed symbols as `el_seed.c`. When linking both (required for the native-hello example), the linker will reject duplicate definitions. The build system uses `nmedit` (macOS) to hide the `el_runtime.c` copies of symbols that `el_seed.c` already defines, keeping `el_seed.c` canonical.
+
+If you are writing a build script for a new platform and see duplicate symbol link errors involving `__println`, `__print`, `__str_len`, etc., apply the same nmedit / `objcopy --weaken-symbol` / `strip --strip-symbol` trick from the macOS build to your platform's object file handling.
+
+### The `nmedit` trick on macOS
+
+```bash
+# Build a keep-list: symbols defined in el_seed.o but also in el_runtime.o
+nm el_seed.o   | awk '/^[0-9a-f]+ T _/{print $3}' | sort > .seed_T.txt
+nm el_runtime.o | awk '/^[0-9a-f]+ T _/{print $3}' | sort > .rt_T.txt
+# Keep only symbols unique to el_runtime.o
+comm -23 .rt_T.txt .seed_T.txt > .rt_keep.txt
+nmedit -s .rt_keep.txt el_runtime.o
+```
+
+On Linux, use `objcopy` with `--weaken-symbol` for each duplicate, or link `el_seed.o` before `el_runtime.o` and use `--allow-multiple-definition` if your use case permits it.
+
+### ObjC bridges must use MRC, not ARC
+
+Bridges that use Objective-C (AppKit, UIKit) **must** compile without ARC (`-fno-objc-arc`). The reason: the widget table stores `id` values in a plain C struct. ARC cannot insert retain/release through C struct boundaries, and will reject explicit `[obj retain]` / `[obj release]` calls in ARC mode. Use:
+
+```bash
+clang -ObjC -fno-objc-arc -framework Cocoa -c el_appkit.m
+```
+
+### Widget table struct — don't put `id` fields in C structs under ARC
+
+If you ever add ARC-managed object fields to the `ElWidget` struct, you will get a compile error. Keep the struct C-only (pointers as `void*` if you must, cast when using) or compile as MRC.
+
+### The `el_seed.c` `__manifest_read` is platform-independent
+
+`__manifest_read` is already implemented in `el_seed.c` (in the section compiled unconditionally). You do not implement it in your bridge. You do need to declare it in the `el_native_target.h` block for your platform (matching the other platforms), but `el_seed.c` already has the implementation.
+
+---
+
+## Completion Checklist
+
+Before declaring your bridge ready for integration:
+
+- [ ] All 33 `__*` functions implemented (including `__manifest_read` declaration, implementation is in seed)
+- [ ] Slot table with 4096 entries, scan starting at index 1
+- [ ] `el_widget_get` returns NULL for handle 0, negative, out-of-range, and FREE slots
+- [ ] All functions null-check `el_widget_get` result before use
+- [ ] `el_<platform>_init` is idempotent
+- [ ] `el_<platform>_run_loop` either never returns or is documented as a no-op (Android)
+- [ ] Callback dispatch via `dlsym` (or platform equivalent) implemented
+- [ ] All UI operations dispatched to the main/UI thread
+- [ ] `el_native_target.h` updated with `#ifdef EL_TARGET_<PLATFORM>` block
+- [ ] `el_seed.c` updated with `#ifdef EL_TARGET_<PLATFORM>` extern + wrapper block
+- [ ] Bridge compiles cleanly with no warnings: `cc -DEL_TARGET_<PLATFORM> -Wall -Wextra -c el_<platform>.c`
+- [ ] Bridge links cleanly with `el_seed.o` and `el_runtime.o` (duplicate symbol check)
+- [ ] `detect-platforms` script updated with detection logic for the new platform
+- [ ] Basic smoke test: create window → add label → show window → run loop

lang/el-compiler/runtime/detect-platforms

@@ -0,0 +1,208 @@
+#!/usr/bin/env bash
+# detect-platforms — probe available platform bridge dependencies
+#
+# Reports which el-native platform bridges can be built on this machine,
+# with install instructions for anything that is missing.
+#
+# Usage: ./detect-platforms
+#        ./build.sh platforms   (from native-hello)
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+# ── Helpers ───────────────────────────────────────────────────────────────────
+
+PASS="[+]"
+FAIL="[ ]"
+
+_ok()   { printf "  ${PASS} %-22s %s\n" "$1" "$2"; }
+_miss() { printf "  ${FAIL} %-22s %s\n" "$1" "$2"; }
+
+# ── Header ────────────────────────────────────────────────────────────────────
+
+echo ""
+echo "==> el-native platform detection"
+echo ""
+echo "  Checking build dependencies for each platform bridge..."
+echo ""
+
+AVAILABLE=0
+MISSING=0
+
+# ── macOS / AppKit ────────────────────────────────────────────────────────────
+
+if [[ "$(uname)" == "Darwin" ]]; then
+    if xcrun --find clang &>/dev/null && xcrun --find xcodebuild &>/dev/null 2>/dev/null || \
+       xcrun --find cc &>/dev/null; then
+        CLT_INFO="Xcode CLT $(xcode-select -p 2>/dev/null | sed 's|/Developer||' || echo '')"
+        _ok "macOS/AppKit" "-DEL_TARGET_MACOS  ${CLT_INFO}"
+        AVAILABLE=$((AVAILABLE + 1))
+    else
+        _miss "macOS/AppKit" "-DEL_TARGET_MACOS  (Xcode CLT missing — xcode-select --install)"
+        MISSING=$((MISSING + 1))
+    fi
+else
+    _miss "macOS/AppKit" "-DEL_TARGET_MACOS  (not on macOS)"
+fi
+
+# ── iOS / UIKit ───────────────────────────────────────────────────────────────
+
+if [[ "$(uname)" == "Darwin" ]]; then
+    if xcrun --sdk iphoneos --show-sdk-path &>/dev/null 2>&1; then
+        SDK_VER=$(xcrun --sdk iphoneos --show-sdk-version 2>/dev/null || echo "")
+        _ok "iOS/UIKit" "-DEL_TARGET_IOS  SDK ${SDK_VER} (requires Xcode.app)"
+        AVAILABLE=$((AVAILABLE + 1))
+    else
+        _miss "iOS/UIKit" "-DEL_TARGET_IOS  (iOS SDK not found — install Xcode.app)"
+        MISSING=$((MISSING + 1))
+    fi
+else
+    _miss "iOS/UIKit" "-DEL_TARGET_IOS  (not on macOS — requires Xcode)"
+fi
+
+# ── Linux / GTK4 ──────────────────────────────────────────────────────────────
+
+if pkg-config --exists gtk4 2>/dev/null; then
+    GTK_VER=$(pkg-config --modversion gtk4 2>/dev/null)
+    _ok "Linux/GTK4" "-DEL_TARGET_LINUX  gtk4 ${GTK_VER}"
+    AVAILABLE=$((AVAILABLE + 1))
+else
+    _miss "Linux/GTK4" "-DEL_TARGET_LINUX  (gtk4 not found)"
+    echo "                             Install: apt install libgtk-4-dev"
+    echo "                                   or: dnf install gtk4-devel"
+    echo "                                   or: brew install gtk4"
+    MISSING=$((MISSING + 1))
+fi
+
+# ── SDL2 / Embedded Linux / Pi ────────────────────────────────────────────────
+
+SDL2_OK=0
+if pkg-config --exists sdl2 2>/dev/null; then
+    SDL2_VER=$(pkg-config --modversion sdl2 2>/dev/null)
+    # Also check for SDL2_ttf (needed for text rendering)
+    if pkg-config --exists SDL2_ttf 2>/dev/null; then
+        TTF_VER=$(pkg-config --modversion SDL2_ttf 2>/dev/null)
+        _ok "SDL2/Embedded" "-DEL_TARGET_SDL2  sdl2 ${SDL2_VER}, SDL2_ttf ${TTF_VER}"
+    else
+        _ok "SDL2/Embedded" "-DEL_TARGET_SDL2  sdl2 ${SDL2_VER} (SDL2_ttf missing — needed for text)"
+        echo "                             Install: apt install libsdl2-ttf-dev"
+    fi
+    SDL2_OK=1
+    AVAILABLE=$((AVAILABLE + 1))
+elif command -v sdl2-config &>/dev/null; then
+    SDL2_VER=$(sdl2-config --version 2>/dev/null || echo "")
+    _ok "SDL2/Embedded" "-DEL_TARGET_SDL2  sdl2 ${SDL2_VER} (via sdl2-config)"
+    SDL2_OK=1
+    AVAILABLE=$((AVAILABLE + 1))
+fi
+
+if [[ $SDL2_OK -eq 0 ]]; then
+    _miss "SDL2/Embedded" "-DEL_TARGET_SDL2  (sdl2 not found)"
+    echo "                             Install: apt install libsdl2-dev libsdl2-ttf-dev libsdl2-image-dev"
+    echo "                                   or: brew install sdl2 sdl2_ttf sdl2_image"
+    MISSING=$((MISSING + 1))
+fi
+
+# ── LVGL / Microcontrollers ───────────────────────────────────────────────────
+
+LVGL_OK=0
+LVGL_WHERE=""
+
+if [ -f "${SCRIPT_DIR}/lvgl/lvgl.h" ]; then
+    LVGL_WHERE="./lvgl/lvgl.h"
+    LVGL_OK=1
+elif [ -f "${SCRIPT_DIR}/../lvgl/lvgl.h" ]; then
+    LVGL_WHERE="adjacent lvgl/"
+    LVGL_OK=1
+elif [ -f "/usr/include/lvgl/lvgl.h" ]; then
+    LVGL_WHERE="/usr/include/lvgl"
+    LVGL_OK=1
+elif [ -f "/usr/local/include/lvgl/lvgl.h" ]; then
+    LVGL_WHERE="/usr/local/include/lvgl"
+    LVGL_OK=1
+elif pkg-config --exists lvgl 2>/dev/null; then
+    LVGL_WHERE="pkg-config ($(pkg-config --modversion lvgl 2>/dev/null))"
+    LVGL_OK=1
+fi
+
+if [[ $LVGL_OK -eq 1 ]]; then
+    _ok "LVGL/MCU" "-DEL_TARGET_LVGL  ${LVGL_WHERE}"
+    AVAILABLE=$((AVAILABLE + 1))
+else
+    _miss "LVGL/MCU" "-DEL_TARGET_LVGL  (lvgl.h not found)"
+    echo "                             Install: git clone https://github.com/lvgl/lvgl"
+    echo "                                      (place lvgl/ next to el-compiler/runtime/)"
+    MISSING=$((MISSING + 1))
+fi
+
+# ── Android / JNI ─────────────────────────────────────────────────────────────
+
+ANDROID_OK=0
+ANDROID_WHERE=""
+
+if [ -n "${ANDROID_NDK_HOME:-}" ] && [ -d "${ANDROID_NDK_HOME}" ]; then
+    NDK_VER=""
+    if [ -f "${ANDROID_NDK_HOME}/source.properties" ]; then
+        NDK_VER=$(grep "Pkg.Revision" "${ANDROID_NDK_HOME}/source.properties" \
+                  2>/dev/null | cut -d= -f2 | tr -d ' ' || echo "")
+    fi
+    ANDROID_WHERE="NDK ${NDK_VER:-(version unknown)} at \$ANDROID_NDK_HOME"
+    ANDROID_OK=1
+elif command -v ndk-build &>/dev/null; then
+    ANDROID_WHERE="ndk-build in PATH"
+    ANDROID_OK=1
+elif [ -n "${ANDROID_HOME:-}" ] && [ -d "${ANDROID_HOME}/ndk" ]; then
+    ANDROID_WHERE="NDK via \$ANDROID_HOME/ndk"
+    ANDROID_OK=1
+fi
+
+if [[ $ANDROID_OK -eq 1 ]]; then
+    _ok "Android/JNI" "-DEL_TARGET_ANDROID  ${ANDROID_WHERE}"
+    AVAILABLE=$((AVAILABLE + 1))
+else
+    _miss "Android/JNI" "-DEL_TARGET_ANDROID  (ANDROID_NDK_HOME not set)"
+    echo "                             Install: https://developer.android.com/studio/releases/ndk"
+    echo "                             Then: export ANDROID_NDK_HOME=/path/to/ndk"
+    MISSING=$((MISSING + 1))
+fi
+
+# ── Windows / Win32 (cross or native) ─────────────────────────────────────────
+
+WIN32_OK=0
+WIN32_WHERE=""
+
+if [[ "$(uname)" == MINGW* ]] || [[ "$(uname)" == CYGWIN* ]] || \
+   [[ "$(uname)" == MSYS* ]]; then
+    WIN32_WHERE="native Windows ($(uname))"
+    WIN32_OK=1
+elif command -v x86_64-w64-mingw32-gcc &>/dev/null; then
+    MINGW_VER=$(x86_64-w64-mingw32-gcc --version 2>/dev/null | head -1 || echo "")
+    WIN32_WHERE="mingw cross-compiler — ${MINGW_VER}"
+    WIN32_OK=1
+elif command -v i686-w64-mingw32-gcc &>/dev/null; then
+    WIN32_WHERE="mingw 32-bit cross-compiler"
+    WIN32_OK=1
+fi
+
+if [[ $WIN32_OK -eq 1 ]]; then
+    _ok "Windows/Win32" "-DEL_TARGET_WIN32  ${WIN32_WHERE}"
+    AVAILABLE=$((AVAILABLE + 1))
+else
+    _miss "Windows/Win32" "-DEL_TARGET_WIN32  (mingw cross-compiler not found)"
+    echo "                             Install: brew install mingw-w64"
+    echo "                                   or: apt install gcc-mingw-w64"
+    MISSING=$((MISSING + 1))
+fi
+
+# ── Summary ───────────────────────────────────────────────────────────────────
+
+echo ""
+echo "  ${AVAILABLE} platform(s) available, ${MISSING} unavailable on this machine."
+echo ""
+
+if [[ -x "${SCRIPT_DIR}/new-platform" ]]; then
+    echo "  Scaffold a new bridge:  ${SCRIPT_DIR}/new-platform <name>"
+fi
+echo "  Bridge contract:        ${SCRIPT_DIR}/PLATFORM_BRIDGE_SPEC.md"
+echo ""

lang/el-compiler/runtime/el_android.c

@@ -0,0 +1,949 @@
+/*
+ * el_android.c — Android JNI backend for the el native widget system.
+ *
+ * This file implements the Android widget layer that el_seed.c calls through
+ * to when EL_TARGET_ANDROID is defined.  It is the exact Android counterpart
+ * to el_appkit.m and presents the same C API surface.
+ *
+ * Architecture:
+ *   el program (el code)
+ *       → __widget_* C builtins in el_seed.c
+ *           → el_android_* C-callable functions declared here
+ *               → ElBridge static methods in Java via JNI
+ *                   → android.view.View subclasses on the UI thread
+ *
+ * Widget handles: every widget (window root, view, control) is assigned an
+ * int64_t slot index into view_slots[].  The el program holds these as opaque
+ * Int values.  Slot 0 is never valid (null handle = -1 convention).
+ *
+ * Threading: Android requires all UI operations to run on the main (UI) thread.
+ * Every JNI call that mutates a View is dispatched through
+ * Activity.runOnUiThread(Runnable) if the current thread is not the UI thread.
+ * el_android_run_loop is a no-op — Android lifecycle is driven by the Activity.
+ *
+ * Callback mechanism: when a widget fires an event Java calls
+ *   nativeOnClick / nativeOnChange / nativeOnSubmit
+ * The C side looks up the registered El function name for that slot, then:
+ *   dlsym(RTLD_DEFAULT, fn_name)(widget_handle, event_data_string)
+ * This matches the __thread_create pattern in el_seed.c exactly.
+ *
+ * Compile / link (as part of libelruntime.so):
+ *   Compiled by the Android Gradle NDK build system with -DEL_TARGET_ANDROID.
+ *   Link flags: -landroid -llog -ldl
+ *
+ * Java companion: ElBridge.java in the same directory must be compiled into
+ * the Android application's APK (package com.neuron.el).
+ */
+
+#ifdef EL_TARGET_ANDROID
+
+#include <jni.h>
+#include <android/log.h>
+#include <stdint.h>
+#include <stdlib.h>
+#include <string.h>
+#include <dlfcn.h>
+#include "el_runtime.h"
+
+/* ── Logging ─────────────────────────────────────────────────────────────── */
+
+#define EL_TAG "ElAndroid"
+#define EL_LOGI(...) __android_log_print(ANDROID_LOG_INFO,  EL_TAG, __VA_ARGS__)
+#define EL_LOGW(...) __android_log_print(ANDROID_LOG_WARN,  EL_TAG, __VA_ARGS__)
+#define EL_LOGE(...) __android_log_print(ANDROID_LOG_ERROR, EL_TAG, __VA_ARGS__)
+
+/* ── JNI global state ────────────────────────────────────────────────────── */
+
+static JavaVM  *g_jvm          = NULL;
+static jobject  g_activity     = NULL;   /* global ref to Activity */
+static jclass   g_bridge_class = NULL;   /* global ref to ElBridge class */
+
+/* Cached method IDs on ElBridge — filled in el_android_init(). */
+static jmethodID g_mid_createLinearLayout  = NULL;
+static jmethodID g_mid_createFrameLayout   = NULL;
+static jmethodID g_mid_createScrollView    = NULL;
+static jmethodID g_mid_createTextView      = NULL;
+static jmethodID g_mid_createButton        = NULL;
+static jmethodID g_mid_createEditText      = NULL;
+static jmethodID g_mid_createImageView     = NULL;
+static jmethodID g_mid_setContentView      = NULL;
+static jmethodID g_mid_setTitle            = NULL;
+static jmethodID g_mid_addChild            = NULL;
+static jmethodID g_mid_removeChild         = NULL;
+static jmethodID g_mid_destroyView         = NULL;
+static jmethodID g_mid_setText             = NULL;
+static jmethodID g_mid_getText             = NULL;
+static jmethodID g_mid_setTextColor        = NULL;
+static jmethodID g_mid_setBackgroundColor  = NULL;
+static jmethodID g_mid_setFont             = NULL;
+static jmethodID g_mid_setPadding          = NULL;
+static jmethodID g_mid_setWidth            = NULL;
+static jmethodID g_mid_setHeight           = NULL;
+static jmethodID g_mid_setFlex             = NULL;
+static jmethodID g_mid_setCornerRadius     = NULL;
+static jmethodID g_mid_setEnabled          = NULL;
+static jmethodID g_mid_setVisibility       = NULL;
+static jmethodID g_mid_setOnClickListener  = NULL;
+static jmethodID g_mid_setOnChangeListener = NULL;
+static jmethodID g_mid_setOnSubmitListener = NULL;
+static jmethodID g_mid_runOnUiThread       = NULL;  /* Activity.runOnUiThread */
+
+/* ── Widget table ─────────────────────────────────────────────────────────── */
+
+#define EL_ANDROID_MAX_WIDGETS 4096
+
+typedef enum {
+    EL_WIDGET_FREE      = 0,
+    EL_WIDGET_WINDOW    = 1,
+    EL_WIDGET_VSTACK    = 2,
+    EL_WIDGET_HSTACK    = 3,
+    EL_WIDGET_ZSTACK    = 4,
+    EL_WIDGET_SCROLL    = 5,
+    EL_WIDGET_LABEL     = 6,
+    EL_WIDGET_BUTTON    = 7,
+    EL_WIDGET_TEXTFIELD = 8,
+    EL_WIDGET_TEXTAREA  = 9,
+    EL_WIDGET_IMAGE     = 10,
+} ElWidgetKind;
+
+typedef struct {
+    ElWidgetKind kind;
+    jint         slot;       /* Java-side slot index (matches C index) */
+    char        *cb_click;   /* El function name for click / submit events */
+    char        *cb_change;  /* El function name for value-change events */
+} ElWidget;
+
+static ElWidget _el_widgets[EL_ANDROID_MAX_WIDGETS];
+
+static int64_t el_widget_alloc(ElWidgetKind kind, jint slot) {
+    for (int i = 1; i < EL_ANDROID_MAX_WIDGETS; i++) {
+        if (_el_widgets[i].kind == EL_WIDGET_FREE) {
+            _el_widgets[i].kind      = kind;
+            _el_widgets[i].slot      = slot;
+            _el_widgets[i].cb_click  = NULL;
+            _el_widgets[i].cb_change = NULL;
+            return (int64_t)i;
+        }
+    }
+    EL_LOGE("el_widget_alloc: slot table full");
+    return -1;
+}
+
+static ElWidget *el_widget_get(int64_t handle) {
+    if (handle <= 0 || handle >= EL_ANDROID_MAX_WIDGETS) return NULL;
+    if (_el_widgets[handle].kind == EL_WIDGET_FREE)       return NULL;
+    return &_el_widgets[handle];
+}
+
+static void el_widget_free(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    w->kind = EL_WIDGET_FREE;
+    w->slot = -1;
+    free(w->cb_click);  w->cb_click  = NULL;
+    free(w->cb_change); w->cb_change = NULL;
+}
+
+/* ── JNI environment helpers ─────────────────────────────────────────────── */
+
+/*
+ * Obtain a JNIEnv for the calling thread.  Attaches the thread to the JVM if
+ * needed (detaches in el_jni_detach_if_attached — call in pairs).
+ */
+static int g_was_attached = 0;  /* thread-local would be cleaner but this is
+                                   safe for single-threaded el programs */
+
+static JNIEnv *el_jni_env(void) {
+    if (!g_jvm) return NULL;
+    JNIEnv *env = NULL;
+    jint rc = (*g_jvm)->GetEnv(g_jvm, (void **)&env, JNI_VERSION_1_6);
+    if (rc == JNI_OK)      { g_was_attached = 0; return env; }
+    if (rc == JNI_EDETACHED) {
+        if ((*g_jvm)->AttachCurrentThread(g_jvm, &env, NULL) == JNI_OK) {
+            g_was_attached = 1;
+            return env;
+        }
+    }
+    EL_LOGE("el_jni_env: failed to obtain JNIEnv");
+    return NULL;
+}
+
+static void el_jni_detach_if_attached(void) {
+    if (g_was_attached && g_jvm) {
+        (*g_jvm)->DetachCurrentThread(g_jvm);
+        g_was_attached = 0;
+    }
+}
+
+/* ── UI-thread dispatch ──────────────────────────────────────────────────── */
+/*
+ * Most ElBridge static methods already dispatch to the UI thread internally
+ * (they call Activity.runOnUiThread).  The helper below is available for
+ * cases where the caller needs to be sure the call has completed before
+ * returning (ElBridge methods marked "sync" use a CountDownLatch internally).
+ *
+ * For the current implementation we call ElBridge methods directly; ElBridge
+ * itself marshals to the UI thread via Activity.runOnUiThread + latch.
+ * This keeps the C side simple and mirrors the AppKit dispatch_sync pattern.
+ */
+
+/* ── JNI_OnLoad ──────────────────────────────────────────────────────────── */
+
+JNIEXPORT jint JNICALL JNI_OnLoad(JavaVM *vm, void *reserved) {
+    (void)reserved;
+    g_jvm = vm;
+    EL_LOGI("JNI_OnLoad: el Android bridge loaded");
+    return JNI_VERSION_1_6;
+}
+
+/* ── el_android_init ─────────────────────────────────────────────────────── */
+/*
+ * Called from __native_init().  The Activity must have already called
+ * ElBridge.registerActivity(activity) from Java before this runs, which sets
+ * g_activity via the nativeRegisterActivity JNI method below.
+ *
+ * Caches all method IDs used later so individual widget calls avoid repeated
+ * FindClass / GetStaticMethodID lookups.
+ */
+void el_android_init(void) {
+    static int done = 0;
+    if (done) return;
+    done = 1;
+
+    JNIEnv *env = el_jni_env();
+    if (!env) { EL_LOGE("el_android_init: no JNIEnv"); return; }
+
+    jclass cls = (*env)->FindClass(env, "com/neuron/el/ElBridge");
+    if (!cls) { EL_LOGE("el_android_init: ElBridge class not found"); return; }
+    g_bridge_class = (*env)->NewGlobalRef(env, cls);
+    (*env)->DeleteLocalRef(env, cls);
+
+#define CACHE_STATIC(var, name, sig) \
+    var = (*env)->GetStaticMethodID(env, g_bridge_class, name, sig); \
+    if (!var) EL_LOGW("el_android_init: method not found: %s %s", name, sig)
+
+    CACHE_STATIC(g_mid_createLinearLayout,  "createLinearLayout",  "(II)I");
+    CACHE_STATIC(g_mid_createFrameLayout,   "createFrameLayout",   "()I");
+    CACHE_STATIC(g_mid_createScrollView,    "createScrollView",     "()I");
+    CACHE_STATIC(g_mid_createTextView,      "createTextView",       "(Ljava/lang/String;)I");
+    CACHE_STATIC(g_mid_createButton,        "createButton",         "(Ljava/lang/String;)I");
+    CACHE_STATIC(g_mid_createEditText,      "createEditText",       "(Ljava/lang/String;Z)I");
+    CACHE_STATIC(g_mid_createImageView,     "createImageView",      "(Ljava/lang/String;)I");
+    CACHE_STATIC(g_mid_setContentView,      "setContentView",       "(I)V");
+    CACHE_STATIC(g_mid_setTitle,            "setTitle",             "(Ljava/lang/String;)V");
+    CACHE_STATIC(g_mid_addChild,            "addChild",             "(II)V");
+    CACHE_STATIC(g_mid_removeChild,         "removeChild",          "(II)V");
+    CACHE_STATIC(g_mid_destroyView,         "destroyView",          "(I)V");
+    CACHE_STATIC(g_mid_setText,             "setText",              "(ILjava/lang/String;)V");
+    CACHE_STATIC(g_mid_getText,             "getText",              "(I)Ljava/lang/String;");
+    CACHE_STATIC(g_mid_setTextColor,        "setTextColor",         "(IFFFF)V");
+    CACHE_STATIC(g_mid_setBackgroundColor,  "setBackgroundColor",   "(IFFFF)V");
+    CACHE_STATIC(g_mid_setFont,             "setFont",              "(ILjava/lang/String;IZ)V");
+    CACHE_STATIC(g_mid_setPadding,          "setPadding",           "(IIIII)V");
+    CACHE_STATIC(g_mid_setWidth,            "setWidth",             "(II)V");
+    CACHE_STATIC(g_mid_setHeight,           "setHeight",            "(II)V");
+    CACHE_STATIC(g_mid_setFlex,             "setFlex",              "(II)V");
+    CACHE_STATIC(g_mid_setCornerRadius,     "setCornerRadius",      "(IF)V");
+    CACHE_STATIC(g_mid_setEnabled,          "setEnabled",           "(IZ)V");
+    CACHE_STATIC(g_mid_setVisibility,       "setVisibility",        "(IZ)V");
+    CACHE_STATIC(g_mid_setOnClickListener,  "setOnClickListener",   "(I)V");
+    CACHE_STATIC(g_mid_setOnChangeListener, "setOnChangeListener",  "(I)V");
+    CACHE_STATIC(g_mid_setOnSubmitListener, "setOnSubmitListener",  "(I)V");
+#undef CACHE_STATIC
+
+    el_jni_detach_if_attached();
+    EL_LOGI("el_android_init: complete");
+}
+
+/* ── JNI: Activity registration ─────────────────────────────────────────── */
+
+/*
+ * Called from Java: ElBridge.registerActivity(activity) calls back here.
+ * Stores a global reference to the Activity so C code can dispatch to it.
+ */
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeRegisterActivity(JNIEnv *env, jclass cls,
+                                                    jobject activity) {
+    (void)cls;
+    if (g_activity) {
+        (*env)->DeleteGlobalRef(env, g_activity);
+        g_activity = NULL;
+    }
+    if (activity) {
+        g_activity = (*env)->NewGlobalRef(env, activity);
+        EL_LOGI("nativeRegisterActivity: activity registered");
+    }
+}
+
+/* ── El callback invocation ──────────────────────────────────────────────── */
+/*
+ * Invoke an El callback by symbol name.
+ * Signature matches AppKit: fn(handle: Int, data: String) -> Void
+ *   compiled to: void fn(el_val_t handle, el_val_t data)
+ */
+typedef void (*ElCb2)(int64_t handle, int64_t data);
+
+static void el_android_invoke_cb(const char *fn_name, int64_t handle,
+                                  const char *data) {
+    if (!fn_name || !*fn_name) return;
+    void *sym = dlsym(RTLD_DEFAULT, fn_name);
+    if (!sym) { EL_LOGW("invoke_cb: symbol not found: %s", fn_name); return; }
+    ElCb2 fn = (ElCb2)sym;
+    fn(handle, (int64_t)(uintptr_t)(data ? data : ""));
+}
+
+/* ── JNI: callbacks from Java → C ───────────────────────────────────────── */
+
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeOnClick(JNIEnv *env, jclass cls, jint slot) {
+    (void)env; (void)cls;
+    int64_t handle = (int64_t)slot;
+    ElWidget *w = el_widget_get(handle);
+    if (w && w->cb_click) {
+        el_android_invoke_cb(w->cb_click, handle, "");
+    }
+}
+
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeOnChange(JNIEnv *env, jclass cls,
+                                            jint slot, jstring text) {
+    (void)cls;
+    int64_t handle = (int64_t)slot;
+    ElWidget *w = el_widget_get(handle);
+    if (w && w->cb_change) {
+        const char *ctext = text ? (*env)->GetStringUTFChars(env, text, NULL) : "";
+        el_android_invoke_cb(w->cb_change, handle, ctext);
+        if (text) (*env)->ReleaseStringUTFChars(env, text, ctext);
+    }
+}
+
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeOnSubmit(JNIEnv *env, jclass cls,
+                                            jint slot, jstring text) {
+    (void)cls;
+    int64_t handle = (int64_t)slot;
+    ElWidget *w = el_widget_get(handle);
+    if (w && w->cb_click) {   /* submit stored in cb_click, same as AppKit */
+        const char *ctext = text ? (*env)->GetStringUTFChars(env, text, NULL) : "";
+        el_android_invoke_cb(w->cb_click, handle, ctext);
+        if (text) (*env)->ReleaseStringUTFChars(env, text, ctext);
+    }
+}
+
+/* ── Helper: jstring from C string ──────────────────────────────────────── */
+
+static jstring el_jstr(JNIEnv *env, const char *s) {
+    return (*env)->NewStringUTF(env, s ? s : "");
+}
+
+/* ── Window ──────────────────────────────────────────────────────────────── */
+
+/*
+ * el_android_window_create — on Android a "window" is the root LinearLayout
+ * set as the Activity's content view.  We create a vertical LinearLayout and
+ * store it.  el_android_window_show calls setContentView on the Activity.
+ */
+int64_t el_android_window_create(const char *title, int width, int height,
+                                  int min_width, int min_height) {
+    (void)width; (void)height; (void)min_width; (void)min_height;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+
+    /* VERTICAL LinearLayout with no spacing (spacing added via margins in Java) */
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createLinearLayout,
+                                            (jint)1 /* VERTICAL */, (jint)0);
+    if ((*env)->ExceptionCheck(env)) {
+        (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1;
+    }
+
+    /* Set activity title */
+    if (g_mid_setTitle && title) {
+        jstring jtitle = el_jstr(env, title);
+        (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setTitle, jtitle);
+        (*env)->DeleteLocalRef(env, jtitle);
+    }
+
+    int64_t handle = el_widget_alloc(EL_WIDGET_WINDOW, (int)slot);
+    el_jni_detach_if_attached();
+    return handle;
+}
+
+void el_android_window_show(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w || w->kind != EL_WIDGET_WINDOW) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setContentView,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_window_set_title(int64_t handle, const char *title) {
+    (void)handle;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    jstring jtitle = el_jstr(env, title);
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setTitle, jtitle);
+    (*env)->DeleteLocalRef(env, jtitle);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Layout containers ───────────────────────────────────────────────────── */
+
+int64_t el_android_vstack_create(int spacing) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createLinearLayout,
+                                            (jint)1 /* VERTICAL */, (jint)spacing);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_VSTACK, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_hstack_create(int spacing) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createLinearLayout,
+                                            (jint)0 /* HORIZONTAL */, (jint)spacing);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_HSTACK, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_zstack_create(void) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createFrameLayout);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_ZSTACK, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_scroll_create(void) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createScrollView);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_SCROLL, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+/* ── Widget factories ─────────────────────────────────────────────────────── */
+
+int64_t el_android_label_create(const char *text) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jt = el_jstr(env, text);
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createTextView, jt);
+    (*env)->DeleteLocalRef(env, jt);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_LABEL, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_button_create(const char *label) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jl = el_jstr(env, label);
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createButton, jl);
+    (*env)->DeleteLocalRef(env, jl);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_BUTTON, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_text_field_create(const char *placeholder) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jp = el_jstr(env, placeholder);
+    /* singleLine = true */
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createEditText, jp, (jboolean)JNI_TRUE);
+    (*env)->DeleteLocalRef(env, jp);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_TEXTFIELD, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_text_area_create(const char *placeholder) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jp = el_jstr(env, placeholder);
+    /* singleLine = false → multiline EditText */
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createEditText, jp, (jboolean)JNI_FALSE);
+    (*env)->DeleteLocalRef(env, jp);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_TEXTAREA, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_image_create(const char *path) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jp = el_jstr(env, path);
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createImageView, jp);
+    (*env)->DeleteLocalRef(env, jp);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_IMAGE, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+/* ── Widget property setters ─────────────────────────────────────────────── */
+
+void el_android_widget_set_text(int64_t handle, const char *text) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    jstring jt = el_jstr(env, text);
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setText,
+                                 (jint)w->slot, jt);
+    (*env)->DeleteLocalRef(env, jt);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+const char *el_android_widget_get_text(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return "";
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return "";
+    jstring js = (jstring)(*env)->CallStaticObjectMethod(env, g_bridge_class,
+                                                          g_mid_getText,
+                                                          (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return ""; }
+    const char *result = "";
+    if (js) {
+        const char *cstr = (*env)->GetStringUTFChars(env, js, NULL);
+        result = cstr ? strdup(cstr) : "";
+        if (cstr) (*env)->ReleaseStringUTFChars(env, js, cstr);
+        (*env)->DeleteLocalRef(env, js);
+    }
+    el_jni_detach_if_attached();
+    return result;
+}
+
+void el_android_widget_set_color(int64_t handle, float r, float g, float b, float a) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setTextColor,
+                                 (jint)w->slot, (jfloat)r, (jfloat)g,
+                                 (jfloat)b, (jfloat)a);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_bg_color(int64_t handle, float r, float g, float b, float a) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setBackgroundColor,
+                                 (jint)w->slot, (jfloat)r, (jfloat)g,
+                                 (jfloat)b, (jfloat)a);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_font(int64_t handle, const char *family, int size, int bold) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    jstring jfam = el_jstr(env, family);
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setFont,
+                                 (jint)w->slot, jfam, (jint)size,
+                                 (jboolean)(bold ? JNI_TRUE : JNI_FALSE));
+    (*env)->DeleteLocalRef(env, jfam);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_padding(int64_t handle, int top, int right, int bottom, int left) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setPadding,
+                                 (jint)w->slot, (jint)top, (jint)right,
+                                 (jint)bottom, (jint)left);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_width(int64_t handle, int width) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setWidth,
+                                 (jint)w->slot, (jint)width);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_height(int64_t handle, int height) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setHeight,
+                                 (jint)w->slot, (jint)height);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_flex(int64_t handle, int flex) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setFlex,
+                                 (jint)w->slot, (jint)flex);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_corner_radius(int64_t handle, int radius) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setCornerRadius,
+                                 (jint)w->slot, (jfloat)radius);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_disabled(int64_t handle, int disabled) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setEnabled,
+                                 (jint)w->slot,
+                                 (jboolean)(disabled ? JNI_FALSE : JNI_TRUE));
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_hidden(int64_t handle, int hidden) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    /* visible=true means NOT hidden */
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setVisibility,
+                                 (jint)w->slot,
+                                 (jboolean)(hidden ? JNI_FALSE : JNI_TRUE));
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Child management ─────────────────────────────────────────────────────── */
+
+void el_android_widget_add_child(int64_t parent, int64_t child) {
+    ElWidget *pw = el_widget_get(parent);
+    ElWidget *cw = el_widget_get(child);
+    if (!pw || !cw) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_addChild,
+                                 (jint)pw->slot, (jint)cw->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_remove_child(int64_t parent, int64_t child) {
+    ElWidget *pw = el_widget_get(parent);
+    ElWidget *cw = el_widget_get(child);
+    if (!pw || !cw) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_removeChild,
+                                 (jint)pw->slot, (jint)cw->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Event registration ───────────────────────────────────────────────────── */
+
+void el_android_widget_on_click(int64_t handle, const char *fn_name) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_click);
+    w->cb_click = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+    if (!w->cb_click) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setOnClickListener,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_on_change(int64_t handle, const char *fn_name) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_change);
+    w->cb_change = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+    if (!w->cb_change) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setOnChangeListener,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_on_submit(int64_t handle, const char *fn_name) {
+    /* Submit stored in cb_click, same as AppKit. */
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_click);
+    w->cb_click = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+    if (!w->cb_click) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setOnSubmitListener,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Widget destroy ───────────────────────────────────────────────────────── */
+
+void el_android_widget_destroy(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (env && g_bridge_class) {
+        (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_destroyView,
+                                     (jint)w->slot);
+        if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    }
+    el_widget_free(handle);
+    el_jni_detach_if_attached();
+}
+
+/* ── Manifest reader ─────────────────────────────────────────────────────── */
+/*
+ * __manifest_read: parse the app{} block from a manifest file.
+ * Returns the raw file contents as an el_val_t (const char* cast).
+ * The caller (el program) parses the returned string.
+ * Reads from the filesystem; for APK assets use the AssetManager path instead.
+ */
+static char *el_read_file(const char *path) {
+    if (!path || !*path) return NULL;
+    FILE *f = fopen(path, "rb");
+    if (!f) return NULL;
+    fseek(f, 0, SEEK_END);
+    long len = ftell(f);
+    fseek(f, 0, SEEK_SET);
+    if (len <= 0) { fclose(f); return NULL; }
+    char *buf = (char *)malloc((size_t)len + 1);
+    if (!buf) { fclose(f); return NULL; }
+    fread(buf, 1, (size_t)len, f);
+    buf[len] = '\0';
+    fclose(f);
+    return buf;
+}
+
+el_val_t el_android_manifest_read(const char *path) {
+    char *contents = el_read_file(path);
+    if (!contents) return (el_val_t)(uintptr_t)"";
+    return (el_val_t)(uintptr_t)contents;  /* caller owns allocation */
+}
+
+/* ── __widget_* C API (called from el_seed.c) ────────────────────────────── */
+/*
+ * These are the functions declared in el_native_target.h under EL_TARGET_ANDROID.
+ * They forward to the el_android_* internal functions above.
+ *
+ * The el_val_t / int64_t ABI matches the AppKit functions exactly:
+ *   - Integer params passed as int64_t, extracted with (int)
+ *   - String params passed as int64_t, extracted with (const char*)(uintptr_t)
+ *   - Float params (r,g,b,a) passed as int64_t bit-cast from double; extracted
+ *     with el_to_float / bit-cast union
+ */
+
+static inline float el_val_to_float(el_val_t v) {
+    union { double d; int64_t i; } u;
+    u.i = v;
+    return (float)u.d;
+}
+
+void __native_init(void) {
+    el_android_init();
+}
+
+void __native_run_loop(void) {
+    /* No-op on Android — lifecycle is driven by the Activity. */
+}
+
+el_val_t __window_create(el_val_t title, el_val_t width, el_val_t height,
+                          el_val_t min_width, el_val_t min_height) {
+    return (el_val_t)el_android_window_create(
+        (const char *)(uintptr_t)title,
+        (int)width, (int)height, (int)min_width, (int)min_height);
+}
+
+void __window_show(el_val_t handle) {
+    el_android_window_show((int64_t)handle);
+}
+
+void __window_set_title(el_val_t handle, el_val_t title) {
+    el_android_window_set_title((int64_t)handle,
+                                (const char *)(uintptr_t)title);
+}
+
+el_val_t __vstack_create(el_val_t spacing) {
+    return (el_val_t)el_android_vstack_create((int)spacing);
+}
+
+el_val_t __hstack_create(el_val_t spacing) {
+    return (el_val_t)el_android_hstack_create((int)spacing);
+}
+
+el_val_t __zstack_create(void) {
+    return (el_val_t)el_android_zstack_create();
+}
+
+el_val_t __scroll_create(void) {
+    return (el_val_t)el_android_scroll_create();
+}
+
+el_val_t __label_create(el_val_t text) {
+    return (el_val_t)el_android_label_create((const char *)(uintptr_t)text);
+}
+
+el_val_t __button_create(el_val_t label) {
+    return (el_val_t)el_android_button_create((const char *)(uintptr_t)label);
+}
+
+el_val_t __text_field_create(el_val_t placeholder) {
+    return (el_val_t)el_android_text_field_create((const char *)(uintptr_t)placeholder);
+}
+
+el_val_t __text_area_create(el_val_t placeholder) {
+    return (el_val_t)el_android_text_area_create((const char *)(uintptr_t)placeholder);
+}
+
+el_val_t __image_create(el_val_t path_or_name) {
+    return (el_val_t)el_android_image_create((const char *)(uintptr_t)path_or_name);
+}
+
+void __widget_set_text(el_val_t handle, el_val_t text) {
+    el_android_widget_set_text((int64_t)handle,
+                               (const char *)(uintptr_t)text);
+}
+
+el_val_t __widget_get_text(el_val_t handle) {
+    return (el_val_t)(uintptr_t)el_android_widget_get_text((int64_t)handle);
+}
+
+void __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                         el_val_t b, el_val_t a) {
+    el_android_widget_set_color((int64_t)handle,
+                                el_val_to_float(r), el_val_to_float(g),
+                                el_val_to_float(b), el_val_to_float(a));
+}
+
+void __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                            el_val_t b, el_val_t a) {
+    el_android_widget_set_bg_color((int64_t)handle,
+                                   el_val_to_float(r), el_val_to_float(g),
+                                   el_val_to_float(b), el_val_to_float(a));
+}
+
+void __widget_set_font(el_val_t handle, el_val_t family,
+                        el_val_t size, el_val_t bold) {
+    el_android_widget_set_font((int64_t)handle,
+                               (const char *)(uintptr_t)family,
+                               (int)size, (int)bold);
+}
+
+void __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                           el_val_t bottom, el_val_t left) {
+    el_android_widget_set_padding((int64_t)handle,
+                                  (int)top, (int)right, (int)bottom, (int)left);
+}
+
+void __widget_set_width(el_val_t handle, el_val_t width) {
+    el_android_widget_set_width((int64_t)handle, (int)width);
+}
+
+void __widget_set_height(el_val_t handle, el_val_t height) {
+    el_android_widget_set_height((int64_t)handle, (int)height);
+}
+
+void __widget_set_flex(el_val_t handle, el_val_t flex) {
+    el_android_widget_set_flex((int64_t)handle, (int)flex);
+}
+
+void __widget_set_corner_radius(el_val_t handle, el_val_t radius) {
+    el_android_widget_set_corner_radius((int64_t)handle, (int)radius);
+}
+
+void __widget_set_disabled(el_val_t handle, el_val_t disabled) {
+    el_android_widget_set_disabled((int64_t)handle, (int)disabled);
+}
+
+void __widget_set_hidden(el_val_t handle, el_val_t hidden) {
+    el_android_widget_set_hidden((int64_t)handle, (int)hidden);
+}
+
+void __widget_add_child(el_val_t parent, el_val_t child) {
+    el_android_widget_add_child((int64_t)parent, (int64_t)child);
+}
+
+void __widget_remove_child(el_val_t parent, el_val_t child) {
+    el_android_widget_remove_child((int64_t)parent, (int64_t)child);
+}
+
+void __widget_destroy(el_val_t handle) {
+    el_android_widget_destroy((int64_t)handle);
+}
+
+void __widget_on_click(el_val_t handle, el_val_t fn_name) {
+    el_android_widget_on_click((int64_t)handle,
+                               (const char *)(uintptr_t)fn_name);
+}
+
+void __widget_on_change(el_val_t handle, el_val_t fn_name) {
+    el_android_widget_on_change((int64_t)handle,
+                                (const char *)(uintptr_t)fn_name);
+}
+
+void __widget_on_submit(el_val_t handle, el_val_t fn_name) {
+    el_android_widget_on_submit((int64_t)handle,
+                                (const char *)(uintptr_t)fn_name);
+}
+
+el_val_t __manifest_read(el_val_t path) {
+    return el_android_manifest_read((const char *)(uintptr_t)path);
+}
+
+#endif /* EL_TARGET_ANDROID */

lang/el-compiler/runtime/el_lvgl.c

@@ -0,0 +1,844 @@
+/*
+ * el_lvgl.c — LVGL v9 backend for the el native widget system.
+ *
+ * This file implements the microcontroller/embedded widget layer that el_seed.c
+ * calls through to when EL_TARGET_LVGL is defined.
+ *
+ * Architecture:
+ *   el program (el code)
+ *       → __widget_* C builtins in el_seed.c
+ *           → el_lvgl_* C functions defined here
+ *               → lv_obj_t widgets via LVGL v9
+ *
+ * Target platforms: ESP32, STM32, industrial panels, any system with 256KB+
+ * RAM and an LVGL-compatible display driver. No OS required.
+ *
+ * Widget handles: every widget is assigned an int64_t slot index into
+ * g_widgets[]. The el program holds these as opaque Int values.
+ * Slot 0 is reserved; -1 = invalid handle.
+ *
+ * Window model: on embedded there is one screen. __window_create configures
+ * lv_scr_act() as the root container. __window_show is a no-op (the screen
+ * is always visible). __native_run_loop calls lv_task_handler() in a tight
+ * loop — on RTOS this runs inside a dedicated task; on bare metal it IS the
+ * main loop. The host application is responsible for initialising the display
+ * driver and calling lv_tick_inc() before calling __native_run_loop.
+ *
+ * Callback dispatch:
+ *   When EL_LVGL_NO_DLSYM is NOT defined (hosted Linux, testing):
+ *     dlsym(RTLD_DEFAULT, fn_name) resolves the El function symbol at runtime.
+ *   When EL_LVGL_NO_DLSYM IS defined (bare-metal ESP32/STM32):
+ *     The caller must provide:
+ *       el_val_t el_lvgl_dispatch(const char *fn, el_val_t a, el_val_t b);
+ *     which maps function names to function pointers via a compile-time table.
+ *
+ * Font mapping: LVGL v9 ships Montserrat in discrete sizes. __widget_set_font
+ * maps the requested point size to the nearest available Montserrat variant.
+ * Bold is approximated by stepping up two sizes (no separate bold face in the
+ * default LVGL font set). Define EL_LVGL_CUSTOM_FONT to override font_select().
+ *
+ * Compile (hosted test build):
+ *   gcc -DEL_TARGET_LVGL -I./lvgl el_lvgl.c -c -o el_lvgl.o
+ *   # Then link with lvgl.a / lvgl source tree.
+ *
+ * Compile (bare-metal, no dynamic linker):
+ *   arm-none-eabi-gcc -DEL_TARGET_LVGL -DEL_LVGL_NO_DLSYM \
+ *       -I./lvgl el_lvgl.c -c -o el_lvgl.o
+ */
+
+#ifdef EL_TARGET_LVGL
+
+#include "lvgl/lvgl.h"
+#include <stdint.h>
+#include <string.h>
+#include <stdlib.h>
+#include <stdio.h>
+
+#ifndef EL_LVGL_NO_DLSYM
+#include <dlfcn.h>
+#endif
+
+#include "el_runtime.h"
+
+/* ── Callback dispatch macro ─────────────────────────────────────────────── */
+
+#ifdef EL_LVGL_NO_DLSYM
+/*
+ * Bare-metal path. The application provides this function:
+ *   el_val_t el_lvgl_dispatch(const char *fn, el_val_t a, el_val_t b);
+ * It maps string names → function pointers, typically via a switch on a hash
+ * or a sorted table of {name, fn_ptr} pairs generated by elc.
+ */
+extern el_val_t el_lvgl_dispatch(const char *fn, el_val_t a, el_val_t b);
+#define EL_LVGL_CALL(fn_name, a, b)  el_lvgl_dispatch((fn_name), (a), (b))
+#else
+/*
+ * Hosted path. dlsym resolves the El symbol at call time.
+ * We use a compound-statement expression (GCC/Clang extension) to avoid
+ * executing dlsym more than once per call.
+ */
+#define EL_LVGL_CALL(fn_name, a, b) \
+    ({ \
+        typedef el_val_t (*_el_fn_t)(el_val_t, el_val_t); \
+        _el_fn_t _fn = (_el_fn_t)(uintptr_t)dlsym(RTLD_DEFAULT, (fn_name)); \
+        _fn ? _fn((a), (b)) : (el_val_t)0; \
+    })
+#endif
+
+/* ── Widget table ─────────────────────────────────────────────────────────── */
+
+#define EL_LVGL_MAX_WIDGETS 4096
+
+/*
+ * Widget kinds — mirrors AppKit/GTK4 backends so future tooling can stay
+ * consistent across all targets.
+ */
+typedef enum {
+    EL_LVGL_FREE      = 0,
+    EL_LVGL_WINDOW    = 1,
+    EL_LVGL_VSTACK    = 2,
+    EL_LVGL_HSTACK    = 3,
+    EL_LVGL_ZSTACK    = 4,
+    EL_LVGL_SCROLL    = 5,
+    EL_LVGL_LABEL     = 6,
+    EL_LVGL_BUTTON    = 7,  /* lv_btn_create; inner label at slot_btn_label */
+    EL_LVGL_TEXTFIELD = 8,  /* lv_textarea, one-line */
+    EL_LVGL_TEXTAREA  = 9,  /* lv_textarea, multiline */
+    EL_LVGL_IMAGE     = 10,
+    EL_LVGL_DIVIDER   = 11,
+    EL_LVGL_SPACER    = 12,
+} ElLvglKind;
+
+/*
+ * Per-slot state. Callback names are stored inline (256 bytes each) to avoid
+ * heap allocation on targets with no malloc or fragmented heaps.
+ */
+typedef struct {
+    ElLvglKind  kind;
+    lv_obj_t   *obj;           /* primary LVGL object */
+    lv_obj_t   *btn_label;     /* for EL_LVGL_BUTTON: inner lv_label child */
+    char        cb_click[256];
+    char        cb_change[256];
+    char        cb_submit[256];
+} ElLvglWidget;
+
+static ElLvglWidget g_widgets[EL_LVGL_MAX_WIDGETS];
+
+/* ── Slot helpers ─────────────────────────────────────────────────────────── */
+
+static int64_t lvgl_slot_alloc(ElLvglKind kind, lv_obj_t *obj) {
+    for (int i = 1; i < EL_LVGL_MAX_WIDGETS; i++) {
+        if (g_widgets[i].kind == EL_LVGL_FREE) {
+            g_widgets[i].kind      = kind;
+            g_widgets[i].obj       = obj;
+            g_widgets[i].btn_label = NULL;
+            g_widgets[i].cb_click[0]  = '\0';
+            g_widgets[i].cb_change[0] = '\0';
+            g_widgets[i].cb_submit[0] = '\0';
+            return (int64_t)i;
+        }
+    }
+    return -1; /* table full */
+}
+
+static ElLvglWidget *lvgl_slot_get(int64_t handle) {
+    if (handle <= 0 || handle >= EL_LVGL_MAX_WIDGETS) return NULL;
+    if (g_widgets[handle].kind == EL_LVGL_FREE)        return NULL;
+    return &g_widgets[handle];
+}
+
+static void lvgl_slot_free(int64_t handle) {
+    if (handle <= 0 || handle >= EL_LVGL_MAX_WIDGETS) return;
+    ElLvglWidget *w = &g_widgets[handle];
+    w->kind      = EL_LVGL_FREE;
+    w->obj       = NULL;
+    w->btn_label = NULL;
+    w->cb_click[0]  = '\0';
+    w->cb_change[0] = '\0';
+    w->cb_submit[0] = '\0';
+}
+
+/* ── Font selection ───────────────────────────────────────────────────────── */
+/*
+ * LVGL ships Montserrat in the following sizes (subset enabled by lv_conf.h):
+ *   8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40 42 44 46 48
+ *
+ * We map the requested size to the nearest available size. Bold is
+ * approximated by stepping up two sizes (no separate bold face in the default
+ * font set). Define EL_LVGL_CUSTOM_FONT to replace this function entirely.
+ */
+#ifndef EL_LVGL_CUSTOM_FONT
+
+static const lv_font_t *font_select(int size, int bold) {
+    /* Step up two sizes for bold approximation. */
+    if (bold) size += 4;
+
+    /* Clamp to available range. */
+    if (size <  8) size =  8;
+    if (size > 48) size = 48;
+
+    /* Round to nearest even size >= 8. */
+    if (size % 2 != 0) size++;
+
+    switch (size) {
+#if LV_FONT_MONTSERRAT_8
+        case  8:  return &lv_font_montserrat_8;
+#endif
+#if LV_FONT_MONTSERRAT_10
+        case 10:  return &lv_font_montserrat_10;
+#endif
+#if LV_FONT_MONTSERRAT_12
+        case 12:  return &lv_font_montserrat_12;
+#endif
+#if LV_FONT_MONTSERRAT_14
+        case 14:  return &lv_font_montserrat_14;
+#endif
+#if LV_FONT_MONTSERRAT_16
+        case 16:  return &lv_font_montserrat_16;
+#endif
+#if LV_FONT_MONTSERRAT_18
+        case 18:  return &lv_font_montserrat_18;
+#endif
+#if LV_FONT_MONTSERRAT_20
+        case 20:  return &lv_font_montserrat_20;
+#endif
+#if LV_FONT_MONTSERRAT_22
+        case 22:  return &lv_font_montserrat_22;
+#endif
+#if LV_FONT_MONTSERRAT_24
+        case 24:  return &lv_font_montserrat_24;
+#endif
+#if LV_FONT_MONTSERRAT_26
+        case 26:  return &lv_font_montserrat_26;
+#endif
+#if LV_FONT_MONTSERRAT_28
+        case 28:  return &lv_font_montserrat_28;
+#endif
+#if LV_FONT_MONTSERRAT_30
+        case 30:  return &lv_font_montserrat_30;
+#endif
+#if LV_FONT_MONTSERRAT_32
+        case 32:  return &lv_font_montserrat_32;
+#endif
+#if LV_FONT_MONTSERRAT_34
+        case 34:  return &lv_font_montserrat_34;
+#endif
+#if LV_FONT_MONTSERRAT_36
+        case 36:  return &lv_font_montserrat_36;
+#endif
+#if LV_FONT_MONTSERRAT_38
+        case 38:  return &lv_font_montserrat_38;
+#endif
+#if LV_FONT_MONTSERRAT_40
+        case 40:  return &lv_font_montserrat_40;
+#endif
+#if LV_FONT_MONTSERRAT_42
+        case 42:  return &lv_font_montserrat_42;
+#endif
+#if LV_FONT_MONTSERRAT_44
+        case 44:  return &lv_font_montserrat_44;
+#endif
+#if LV_FONT_MONTSERRAT_46
+        case 46:  return &lv_font_montserrat_46;
+#endif
+#if LV_FONT_MONTSERRAT_48
+        case 48:  return &lv_font_montserrat_48;
+#endif
+        default:
+            /*
+             * Requested size is not compiled in. Fall back to the default
+             * theme font, which is guaranteed to be present.
+             */
+            return LV_FONT_DEFAULT;
+    }
+}
+
+#endif /* EL_LVGL_CUSTOM_FONT */
+
+/* ── Event callback ───────────────────────────────────────────────────────── */
+
+/*
+ * Single LVGL event callback used for all widget events. The user_data is
+ * the slot index cast to (void*) via intptr_t — avoids heap allocation.
+ *
+ * Three event codes are handled:
+ *   LV_EVENT_CLICKED      → cb_click  (buttons, any tappable widget)
+ *   LV_EVENT_VALUE_CHANGED → cb_change (textarea, checkbox, etc.)
+ *   LV_EVENT_READY        → cb_submit  (Enter pressed in textarea one-line mode)
+ */
+static void el_lvgl_event_cb(lv_event_t *e) {
+    lv_event_code_t code = lv_event_get_code(e);
+    intptr_t        slot = (intptr_t)lv_event_get_user_data(e);
+    ElLvglWidget   *w    = lvgl_slot_get((int64_t)slot);
+    if (!w) return;
+
+    if (code == LV_EVENT_CLICKED && w->cb_click[0]) {
+        EL_LVGL_CALL(w->cb_click, (el_val_t)slot, (el_val_t)0);
+    }
+
+    if (code == LV_EVENT_VALUE_CHANGED && w->cb_change[0]) {
+        /*
+         * Retrieve current text for textarea/textfield widgets so the handler
+         * receives the updated value as its second argument.
+         */
+        const char *txt = "";
+        lv_obj_t   *target = lv_event_get_target(e);
+        if (w->kind == EL_LVGL_TEXTFIELD || w->kind == EL_LVGL_TEXTAREA) {
+            txt = lv_textarea_get_text(target);
+            if (!txt) txt = "";
+        }
+        EL_LVGL_CALL(w->cb_change, (el_val_t)slot,
+                     (el_val_t)(uintptr_t)txt);
+    }
+
+    if (code == LV_EVENT_READY && w->cb_submit[0]) {
+        /* LV_EVENT_READY fires when Enter is pressed in a one-line textarea. */
+        EL_LVGL_CALL(w->cb_submit, (el_val_t)slot, (el_val_t)0);
+    }
+}
+
+/* ── Initialisation ───────────────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_init — call lv_init(). The host must have already initialised the
+ * display driver and input driver before this, or immediately after. Idempotent.
+ */
+void el_lvgl_init(void) {
+    static int done = 0;
+    if (done) return;
+    done = 1;
+    lv_init();
+}
+
+/*
+ * el_lvgl_run_loop — drive lv_task_handler() indefinitely.
+ *
+ * On RTOS: this function should run inside a dedicated FreeRTOS/Zephyr task.
+ * On bare metal: call this as the last statement of main().
+ *
+ * The 5 ms delay between handler calls matches the LVGL documentation
+ * recommendation for a ~200 Hz refresh budget.
+ *
+ * On hosted Linux (EL_LVGL_SDL or similar), usleep(5000) is used. On RTOS
+ * targets define EL_LVGL_RTOS_DELAY(ms) to map to vTaskDelay/k_sleep/etc.
+ */
+void el_lvgl_run_loop(void) {
+    for (;;) {
+        lv_task_handler();
+#if defined(EL_LVGL_RTOS_DELAY)
+        EL_LVGL_RTOS_DELAY(5);
+#elif defined(__linux__) || defined(__APPLE__)
+        {
+            /* Hosted test build — usleep available. */
+#include <unistd.h>
+            usleep(5000);
+        }
+#endif
+        /* Bare-metal without a delay macro: the HAL tick increment loop
+         * is the caller's responsibility. No sleep needed if lv_tick_inc()
+         * is driven from a hardware timer ISR. */
+    }
+}
+
+/* ── Window ───────────────────────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_window_create — configure lv_scr_act() as a vertical flex container
+ * and return a slot handle wrapping it. The title is stored for informational
+ * purposes (e.g., a status bar widget the host might create). Width/height
+ * are ignored on embedded targets because the screen size is fixed by the
+ * display driver; they are accepted for API compatibility with other backends.
+ */
+int64_t el_lvgl_window_create(const char *title, int width, int height,
+                               int min_width, int min_height) {
+    (void)width; (void)height; (void)min_width; (void)min_height;
+
+    lv_obj_t *scr = lv_scr_act();
+
+    /* Configure the active screen as a vertical flex container so that
+     * widgets added via __widget_add_child stack naturally. */
+    lv_obj_set_flex_flow(scr, LV_FLEX_FLOW_COLUMN);
+    lv_obj_set_size(scr, LV_PCT(100), LV_PCT(100));
+
+    /* Store the window title in a user-data string on the screen object
+     * so host code can retrieve it if it wants to render a title bar. */
+    if (title && *title) {
+        /* lv_obj_set_user_data stores a void* — we cast the string pointer.
+         * The string must outlive the screen object; for literals this is
+         * always true. For dynamic titles use el_lvgl_window_set_title. */
+        lv_obj_set_user_data(scr, (void *)(uintptr_t)title);
+    }
+
+    /* Allocate a slot for the screen object. */
+    int64_t h = lvgl_slot_alloc(EL_LVGL_WINDOW, scr);
+    return h;
+}
+
+/*
+ * el_lvgl_window_show — no-op on embedded. The screen is always visible.
+ */
+void el_lvgl_window_show(int64_t handle) {
+    (void)handle;
+    /* On multi-screen setups, load the screen: */
+    /* ElLvglWidget *w = lvgl_slot_get(handle);
+     * if (w) lv_scr_load(w->obj); */
+}
+
+/*
+ * el_lvgl_window_set_title — update the user_data pointer on the screen object.
+ * On embedded, "title" is typically only used by a custom host title bar.
+ */
+void el_lvgl_window_set_title(int64_t handle, const char *title) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w || w->kind != EL_LVGL_WINDOW) return;
+    lv_obj_set_user_data(w->obj, (void *)(uintptr_t)(title ? title : ""));
+}
+
+/* ── Layout containers ────────────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_vstack_create — vertical flex column with inter-item gap = spacing.
+ */
+int64_t el_lvgl_vstack_create(int spacing) {
+    lv_obj_t *obj = lv_obj_create(lv_scr_act());
+    lv_obj_set_flex_flow(obj, LV_FLEX_FLOW_COLUMN);
+    lv_obj_set_style_pad_row(obj, (lv_coord_t)spacing, 0);
+    lv_obj_set_size(obj, LV_SIZE_CONTENT, LV_SIZE_CONTENT);
+    /* Remove default LVGL border and background so containers are transparent
+     * by default, matching the AppKit/GTK4 backends. */
+    lv_obj_set_style_border_width(obj, 0, 0);
+    lv_obj_set_style_bg_opa(obj, LV_OPA_TRANSP, 0);
+    lv_obj_set_style_pad_all(obj, 0, 0);
+    return lvgl_slot_alloc(EL_LVGL_VSTACK, obj);
+}
+
+/*
+ * el_lvgl_hstack_create — horizontal flex row with inter-item gap = spacing.
+ */
+int64_t el_lvgl_hstack_create(int spacing) {
+    lv_obj_t *obj = lv_obj_create(lv_scr_act());
+    lv_obj_set_flex_flow(obj, LV_FLEX_FLOW_ROW);
+    lv_obj_set_style_pad_column(obj, (lv_coord_t)spacing, 0);
+    lv_obj_set_size(obj, LV_SIZE_CONTENT, LV_SIZE_CONTENT);
+    lv_obj_set_style_border_width(obj, 0, 0);
+    lv_obj_set_style_bg_opa(obj, LV_OPA_TRANSP, 0);
+    lv_obj_set_style_pad_all(obj, 0, 0);
+    return lvgl_slot_alloc(EL_LVGL_HSTACK, obj);
+}
+
+/*
+ * el_lvgl_zstack_create — plain container, children positioned absolutely.
+ * No flex flow is set; callers use lv_obj_set_pos() on children directly,
+ * or rely on their natural 0,0 origin.
+ */
+int64_t el_lvgl_zstack_create(void) {
+    lv_obj_t *obj = lv_obj_create(lv_scr_act());
+    lv_obj_set_size(obj, LV_SIZE_CONTENT, LV_SIZE_CONTENT);
+    lv_obj_set_style_border_width(obj, 0, 0);
+    lv_obj_set_style_bg_opa(obj, LV_OPA_TRANSP, 0);
+    lv_obj_set_style_pad_all(obj, 0, 0);
+    return lvgl_slot_alloc(EL_LVGL_ZSTACK, obj);
+}
+
+/*
+ * el_lvgl_scroll_create — vertically scrollable container.
+ */
+int64_t el_lvgl_scroll_create(void) {
+    lv_obj_t *obj = lv_obj_create(lv_scr_act());
+    lv_obj_set_scroll_dir(obj, LV_DIR_VER);
+    lv_obj_set_flex_flow(obj, LV_FLEX_FLOW_COLUMN);
+    lv_obj_set_size(obj, LV_PCT(100), LV_SIZE_CONTENT);
+    lv_obj_set_style_border_width(obj, 0, 0);
+    lv_obj_set_style_pad_all(obj, 0, 0);
+    return lvgl_slot_alloc(EL_LVGL_SCROLL, obj);
+}
+
+/* ── Widget factories ─────────────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_label_create — static text label.
+ */
+int64_t el_lvgl_label_create(const char *text) {
+    lv_obj_t *obj = lv_label_create(lv_scr_act());
+    lv_label_set_text(obj, text ? text : "");
+    return lvgl_slot_alloc(EL_LVGL_LABEL, obj);
+}
+
+/*
+ * el_lvgl_button_create — pressable button with a child label.
+ *
+ * LVGL buttons are containers; text is placed in an inner lv_label child.
+ * We store the child label pointer in btn_label so set_text / get_text can
+ * reach it without searching the object tree at runtime.
+ */
+int64_t el_lvgl_button_create(const char *label) {
+    lv_obj_t *btn = lv_btn_create(lv_scr_act());
+    lv_obj_t *lbl = lv_label_create(btn);
+    lv_label_set_text(lbl, label ? label : "");
+    lv_obj_center(lbl);
+
+    int64_t h = lvgl_slot_alloc(EL_LVGL_BUTTON, btn);
+    if (h >= 0) {
+        g_widgets[h].btn_label = lbl;
+        /* Register click callback immediately so button responds when a
+         * callback name is registered later via __widget_on_click. */
+        lv_obj_add_event_cb(btn, el_lvgl_event_cb, LV_EVENT_CLICKED,
+                            (void *)(intptr_t)h);
+    }
+    return h;
+}
+
+/*
+ * el_lvgl_text_field_create — single-line text input.
+ */
+int64_t el_lvgl_text_field_create(const char *placeholder) {
+    lv_obj_t *obj = lv_textarea_create(lv_scr_act());
+    lv_textarea_set_one_line(obj, true);
+    if (placeholder && *placeholder) {
+        lv_textarea_set_placeholder_text(obj, placeholder);
+    }
+    int64_t h = lvgl_slot_alloc(EL_LVGL_TEXTFIELD, obj);
+    if (h >= 0) {
+        lv_obj_add_event_cb(obj, el_lvgl_event_cb, LV_EVENT_VALUE_CHANGED,
+                            (void *)(intptr_t)h);
+        lv_obj_add_event_cb(obj, el_lvgl_event_cb, LV_EVENT_READY,
+                            (void *)(intptr_t)h);
+    }
+    return h;
+}
+
+/*
+ * el_lvgl_text_area_create — multi-line text input.
+ */
+int64_t el_lvgl_text_area_create(const char *placeholder) {
+    lv_obj_t *obj = lv_textarea_create(lv_scr_act());
+    lv_textarea_set_one_line(obj, false);
+    if (placeholder && *placeholder) {
+        lv_textarea_set_placeholder_text(obj, placeholder);
+    }
+    int64_t h = lvgl_slot_alloc(EL_LVGL_TEXTAREA, obj);
+    if (h >= 0) {
+        lv_obj_add_event_cb(obj, el_lvgl_event_cb, LV_EVENT_VALUE_CHANGED,
+                            (void *)(intptr_t)h);
+    }
+    return h;
+}
+
+/*
+ * el_lvgl_image_create — image widget.
+ *
+ * On hosted Linux (SDL backend), path is a filesystem path.
+ * On embedded with SPIFFS/LittleFS, path is a SPIFFS URI: "S:/image.bin".
+ * LVGL image decoders are registered separately by the host application.
+ */
+int64_t el_lvgl_image_create(const char *path_or_name) {
+    lv_obj_t *obj = lv_img_create(lv_scr_act());
+    if (path_or_name && *path_or_name) {
+        lv_img_set_src(obj, path_or_name);
+    }
+    return lvgl_slot_alloc(EL_LVGL_IMAGE, obj);
+}
+
+/* ── Widget property setters ─────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_widget_set_text — update visible text.
+ *
+ * Dispatch per kind:
+ *   LABEL     → lv_label_set_text
+ *   BUTTON    → lv_label_set_text on inner btn_label child
+ *   TEXTFIELD / TEXTAREA → lv_textarea_set_text
+ *   WINDOW    → lv_obj_set_user_data (stores title string)
+ */
+void el_lvgl_widget_set_text(int64_t handle, const char *text) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    const char *t = text ? text : "";
+    switch (w->kind) {
+        case EL_LVGL_LABEL:
+            lv_label_set_text(w->obj, t);
+            break;
+        case EL_LVGL_BUTTON:
+            if (w->btn_label) lv_label_set_text(w->btn_label, t);
+            break;
+        case EL_LVGL_TEXTFIELD:
+        case EL_LVGL_TEXTAREA:
+            lv_textarea_set_text(w->obj, t);
+            break;
+        case EL_LVGL_WINDOW:
+            lv_obj_set_user_data(w->obj, (void *)(uintptr_t)t);
+            break;
+        default:
+            break;
+    }
+}
+
+/*
+ * el_lvgl_widget_get_text — retrieve visible text.
+ *
+ * Returns a pointer into LVGL's internal storage — valid until the next LVGL
+ * operation that modifies the widget. Callers that need to hold the value
+ * across LVGL calls must strdup() it.
+ */
+const char *el_lvgl_widget_get_text(int64_t handle) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return "";
+    switch (w->kind) {
+        case EL_LVGL_LABEL:
+            return lv_label_get_text(w->obj);
+        case EL_LVGL_BUTTON:
+            return w->btn_label ? lv_label_get_text(w->btn_label) : "";
+        case EL_LVGL_TEXTFIELD:
+        case EL_LVGL_TEXTAREA:
+            return lv_textarea_get_text(w->obj);
+        default:
+            return "";
+    }
+}
+
+/*
+ * el_lvgl_widget_set_color — foreground (text) colour.
+ *
+ * r/g/b are 0.0–1.0 floats bit-cast as el_val_t (see el_runtime.h).
+ * LVGL lv_color_make takes uint8_t 0–255 components.
+ */
+void el_lvgl_widget_set_color(int64_t handle,
+                               float r, float g, float b, float a) {
+    (void)a; /* LVGL text colour has no per-glyph alpha channel */
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_color_t c = lv_color_make(
+        (uint8_t)(r * 255.0f + 0.5f),
+        (uint8_t)(g * 255.0f + 0.5f),
+        (uint8_t)(b * 255.0f + 0.5f));
+    lv_obj_set_style_text_color(w->obj, c, 0);
+    if (w->kind == EL_LVGL_BUTTON && w->btn_label) {
+        lv_obj_set_style_text_color(w->btn_label, c, 0);
+    }
+}
+
+/*
+ * el_lvgl_widget_set_bg_color — background fill colour + opacity.
+ */
+void el_lvgl_widget_set_bg_color(int64_t handle,
+                                  float r, float g, float b, float a) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_color_t c = lv_color_make(
+        (uint8_t)(r * 255.0f + 0.5f),
+        (uint8_t)(g * 255.0f + 0.5f),
+        (uint8_t)(b * 255.0f + 0.5f));
+    lv_opa_t opa = (lv_opa_t)(a * 255.0f + 0.5f);
+    lv_obj_set_style_bg_color(w->obj, c, 0);
+    lv_obj_set_style_bg_opa(w->obj, opa, 0);
+}
+
+/*
+ * el_lvgl_widget_set_font — apply font to text-bearing widget.
+ *
+ * The `family` parameter is accepted for API compatibility but LVGL uses
+ * compiled-in fonts only. Only the size and bold flag have effect unless
+ * EL_LVGL_CUSTOM_FONT is defined by the host.
+ */
+void el_lvgl_widget_set_font(int64_t handle,
+                              const char *family, int size, int bold) {
+    (void)family; /* ignored; LVGL uses compiled-in Montserrat fonts */
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    const lv_font_t *font = font_select(size, bold);
+    if (!font) return;
+    lv_obj_set_style_text_font(w->obj, font, 0);
+    if (w->kind == EL_LVGL_BUTTON && w->btn_label) {
+        lv_obj_set_style_text_font(w->btn_label, font, 0);
+    }
+}
+
+/*
+ * el_lvgl_widget_set_padding — set per-side padding (top/right/bottom/left).
+ */
+void el_lvgl_widget_set_padding(int64_t handle,
+                                 int top, int right, int bottom, int left) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_set_style_pad_top(w->obj,    (lv_coord_t)top,    0);
+    lv_obj_set_style_pad_right(w->obj,  (lv_coord_t)right,  0);
+    lv_obj_set_style_pad_bottom(w->obj, (lv_coord_t)bottom, 0);
+    lv_obj_set_style_pad_left(w->obj,   (lv_coord_t)left,   0);
+}
+
+/*
+ * el_lvgl_widget_set_width — set explicit pixel width.
+ */
+void el_lvgl_widget_set_width(int64_t handle, int width) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_set_width(w->obj, (lv_coord_t)width);
+}
+
+/*
+ * el_lvgl_widget_set_height — set explicit pixel height.
+ */
+void el_lvgl_widget_set_height(int64_t handle, int height) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_set_height(w->obj, (lv_coord_t)height);
+}
+
+/*
+ * el_lvgl_widget_set_flex — set flex grow factor.
+ *
+ * flex > 0 → lv_obj_set_flex_grow(obj, flex): object expands to fill
+ *             remaining space proportional to its grow factor.
+ * flex == 0 → lv_obj_set_flex_grow(obj, 0): object uses natural size.
+ */
+void el_lvgl_widget_set_flex(int64_t handle, int flex) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_set_flex_grow(w->obj, (uint8_t)(flex > 0 ? flex : 0));
+}
+
+/*
+ * el_lvgl_widget_set_corner_radius — set border radius.
+ */
+void el_lvgl_widget_set_corner_radius(int64_t handle, int radius) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_set_style_radius(w->obj, (lv_coord_t)radius, 0);
+}
+
+/*
+ * el_lvgl_widget_set_disabled — enable/disable interactive state.
+ *
+ * LV_STATE_DISABLED greys out the widget and prevents input events.
+ */
+void el_lvgl_widget_set_disabled(int64_t handle, int disabled) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    if (disabled) {
+        lv_obj_add_state(w->obj, LV_STATE_DISABLED);
+    } else {
+        lv_obj_clear_state(w->obj, LV_STATE_DISABLED);
+    }
+}
+
+/*
+ * el_lvgl_widget_set_hidden — show/hide widget.
+ *
+ * LV_OBJ_FLAG_HIDDEN hides the widget and removes it from layout flow.
+ */
+void el_lvgl_widget_set_hidden(int64_t handle, int hidden) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    if (hidden) {
+        lv_obj_add_flag(w->obj, LV_OBJ_FLAG_HIDDEN);
+    } else {
+        lv_obj_clear_flag(w->obj, LV_OBJ_FLAG_HIDDEN);
+    }
+}
+
+/* ── Tree operations ──────────────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_widget_add_child — attach child widget to parent.
+ *
+ * lv_obj_set_parent() reparents the child object inside the LVGL tree.
+ * For WINDOW parents we use the screen object itself as the parent, since
+ * lv_scr_act() IS the root container.
+ */
+void el_lvgl_widget_add_child(int64_t parent, int64_t child) {
+    ElLvglWidget *pw = lvgl_slot_get(parent);
+    ElLvglWidget *cw = lvgl_slot_get(child);
+    if (!pw || !cw) return;
+    lv_obj_set_parent(cw->obj, pw->obj);
+}
+
+/*
+ * el_lvgl_widget_remove_child — detach child from its current parent.
+ *
+ * LVGL has no explicit "remove from parent without deleting" operation.
+ * We reparent the child back to the active screen (making it a root-level
+ * floating widget) and then hide it. The widget still occupies a slot and
+ * can be re-attached or destroyed later.
+ */
+void el_lvgl_widget_remove_child(int64_t parent, int64_t child) {
+    (void)parent;
+    ElLvglWidget *cw = lvgl_slot_get(child);
+    if (!cw) return;
+    /* Move to screen root and hide. */
+    lv_obj_set_parent(cw->obj, lv_scr_act());
+    lv_obj_add_flag(cw->obj, LV_OBJ_FLAG_HIDDEN);
+}
+
+/*
+ * el_lvgl_widget_destroy — delete widget and its children from the LVGL tree,
+ * then free the slot.
+ *
+ * lv_obj_del() recursively deletes the object and all children. After this
+ * call the handle is invalid and must not be used.
+ */
+void el_lvgl_widget_destroy(int64_t handle) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_del(w->obj);
+    lvgl_slot_free(handle);
+}
+
+/* ── Event registration ───────────────────────────────────────────────────── */
+
+/*
+ * Event registration stores the El function name in the widget slot. The
+ * actual lv_obj_add_event_cb() call is made here (or was made in the factory
+ * for buttons/textfields where we know the relevant event codes upfront).
+ *
+ * For widgets that did not register their event callback in the factory (e.g.
+ * labels receiving a click handler), we add the LVGL event binding now.
+ */
+
+void el_lvgl_widget_on_click(int64_t handle, const char *fn_name) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    strncpy(w->cb_click, fn_name ? fn_name : "", 255);
+    w->cb_click[255] = '\0';
+    /*
+     * Buttons already have LV_EVENT_CLICKED registered in the factory.
+     * For other widget kinds (labels, containers used as tap targets), add
+     * the click flag and register the callback.
+     */
+    if (w->kind != EL_LVGL_BUTTON) {
+        lv_obj_add_flag(w->obj, LV_OBJ_FLAG_CLICKABLE);
+        lv_obj_add_event_cb(w->obj, el_lvgl_event_cb, LV_EVENT_CLICKED,
+                            (void *)(intptr_t)handle);
+    }
+}
+
+void el_lvgl_widget_on_change(int64_t handle, const char *fn_name) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    strncpy(w->cb_change, fn_name ? fn_name : "", 255);
+    w->cb_change[255] = '\0';
+    /*
+     * Textfield/textarea factories already register VALUE_CHANGED.
+     * For other kinds (e.g. a custom toggle), add the binding now.
+     */
+    if (w->kind != EL_LVGL_TEXTFIELD && w->kind != EL_LVGL_TEXTAREA) {
+        lv_obj_add_event_cb(w->obj, el_lvgl_event_cb, LV_EVENT_VALUE_CHANGED,
+                            (void *)(intptr_t)handle);
+    }
+}
+
+void el_lvgl_widget_on_submit(int64_t handle, const char *fn_name) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    strncpy(w->cb_submit, fn_name ? fn_name : "", 255);
+    w->cb_submit[255] = '\0';
+    /*
+     * LV_EVENT_READY fires when Enter is pressed in a one-line textarea.
+     * Textfield factories already register READY. For other kinds, add it.
+     */
+    if (w->kind != EL_LVGL_TEXTFIELD) {
+        lv_obj_add_event_cb(w->obj, el_lvgl_event_cb, LV_EVENT_READY,
+                            (void *)(intptr_t)handle);
+    }
+}
+
+#endif /* EL_TARGET_LVGL */

lang/el-compiler/runtime/el_native_target.h

@@ -0,0 +1,574 @@
+/*
+ * el_native_target.h — Native widget declarations for el programs targeting
+ * native desktop UI (AppKit / GTK4 / Win32).
+ *
+ * This header is designed to be included AFTER el_runtime.h without conflict:
+ *   - It does NOT redefine el_to_float, el_from_float, or any el_runtime.h
+ *     static inlines.
+ *   - It does NOT redeclare __println, __print, or other functions whose
+ *     return types differ between el_seed.h and el_runtime.h.
+ *   - It adds: native widget builtins + float arithmetic helpers that the
+ *     current el_runtime.h omits but elc still emits calls to.
+ *
+ * Usage:
+ *   Inject via -include at compile time, OR #include it after el_runtime.h.
+ *
+ *   clang -DEL_TARGET_MACOS -include el_native_target.h -c my_app.c ...
+ */
+
+#pragma once
+
+#include <stdint.h>
+#include <stdlib.h>
+
+/* el_val_t must already be defined by el_runtime.h or el_seed.h. */
+#ifndef EL_VAL_T_DEFINED
+typedef int64_t el_val_t;
+#endif
+
+/* ── Float arithmetic helpers ───────────────────────────────────────────────
+ * elc emits calls to float_div / float_mul etc. for Float-typed expressions.
+ * These were in el_runtime.c through v1.0.0-20260501 but are missing from the
+ * current el_runtime.h. Redeclared here as static inline to avoid link deps.
+ * Only defined if not already declared (old runtimes that still have them). */
+
+#ifndef EL_FLOAT_OPS_DEFINED
+#define EL_FLOAT_OPS_DEFINED
+
+/* el_to_float / el_from_float — bit-cast between el_val_t and double.
+ * Defined as static inline in both el_runtime.h and el_seed.h; we do NOT
+ * redefine them here. We rely on one of those headers being included first. */
+
+static inline el_val_t float_div(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b;
+    ur.d = (ub.d != 0.0) ? (ua.d / ub.d) : 0.0;
+    return ur.i;
+}
+
+static inline el_val_t float_mul(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d * ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_add(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d + ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_sub(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d - ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_lt(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d < ub.d);
+}
+
+static inline el_val_t float_gt(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d > ub.d);
+}
+
+static inline el_val_t float_lte(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d <= ub.d);
+}
+
+static inline el_val_t float_gte(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d >= ub.d);
+}
+
+static inline el_val_t float_eq(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d == ub.d);
+}
+
+#endif /* EL_FLOAT_OPS_DEFINED */
+
+/* ── Native widget system (macOS AppKit) ────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_MACOS and linked with el_appkit.m.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid. */
+
+#ifdef EL_TARGET_MACOS
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+void      __widget_set_data(el_val_t handle, el_val_t data_str);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_MACOS */
+
+/* ── Native widget system (Linux GTK4) ──────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_LINUX and linked with el_gtk4.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ * All functions have the same signatures as EL_TARGET_MACOS above. */
+
+#ifdef EL_TARGET_LINUX
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader — same JSON output as EL_TARGET_MACOS */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_LINUX */
+
+/* ── Native widget system (Windows Win32) ───────────────────────────────────
+ * Available when compiled with -DEL_TARGET_WIN32 and linked with el_win32.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ * Link: el_win32.obj comctl32.lib user32.lib gdi32.lib */
+
+#ifdef EL_TARGET_WIN32
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_WIN32 */
+
+/* ── Native widget system (iOS UIKit) ───────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_IOS and linked with el_uikit.m.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * iOS lifecycle note: UIApplicationMain never returns. The el program must
+ * store its UI-build logic in a void(*)(void) function pointer, assign it to
+ * el_main_entry_fn, then call __native_run_loop. ElAppDelegate invokes
+ * el_main_entry_fn inside didFinishLaunchingWithOptions.
+ * Call el_uikit_set_args(argc, argv) from main() before __native_run_loop. */
+
+#ifdef EL_TARGET_IOS
+
+/* Lifecycle entry-function hook — set before calling __native_run_loop. */
+extern void (*el_main_entry_fn)(void);
+
+/* Forward argc/argv from main() to UIApplicationMain. */
+void      el_uikit_set_args(int argc, char** argv);
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_IOS */
+
+/* ── Native widget system (Android JNI) ─────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_ANDROID and linked with
+ * libelruntime.so (which includes el_android.c compiled by the NDK build).
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Java companion: ElBridge.java (package com.neuron.el) must be compiled into
+ * the APK. The Activity must call ElBridge.init(this) before any widget ops.
+ *
+ * Link flags (in Android.mk or CMakeLists.txt):
+ *   -landroid -llog -ldl */
+
+#ifdef EL_TARGET_ANDROID
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);   /* no-op on Android */
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_ANDROID */
+
+/* ── Native widget system (LVGL v9 — embedded / microcontroller) ─────────────
+ * Available when compiled with -DEL_TARGET_LVGL and linked with el_lvgl.c
+ * and the LVGL library (lvgl.a or lvgl source tree).
+ *
+ * Target platforms: ESP32, STM32, industrial panels. Any system with 256KB+
+ * RAM and an LVGL-compatible display driver. No OS required.
+ *
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Bare-metal / no dynamic linker:
+ *   Compile with -DEL_LVGL_NO_DLSYM and provide:
+ *     el_val_t el_lvgl_dispatch(const char *fn, el_val_t a, el_val_t b);
+ *
+ * Compile:
+ *   gcc -DEL_TARGET_LVGL -I./lvgl el_lvgl.c -c -o el_lvgl.o
+ *   # Then link with lvgl.a. */
+
+#ifdef EL_TARGET_LVGL
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader — same JSON output as all other native targets */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_LVGL */
+
+/* ── Native widget system (SDL2 — embedded / Pi) ────────────────────────────
+ * Available when compiled with -DEL_TARGET_SDL2 and linked with el_sdl2.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Target: Raspberry Pi Zero, embedded Linux, any system with a framebuffer
+ * and SDL2 available. No GTK, no desktop environment required.
+ *
+ * Compile:
+ *   gcc -DEL_TARGET_SDL2 $(sdl2-config --cflags) -c el_sdl2.c -o el_sdl2.o
+ * Link:
+ *   $(sdl2-config --libs) -lSDL2_ttf -lSDL2_image -ldl */
+
+#ifdef EL_TARGET_SDL2
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_SDL2 */

lang/el-compiler/runtime/el_platform_win.h

@@ -75,6 +75,7 @@ static inline void* el_win_dlsym(void* handle, const char* name) {
 #include <direct.h>            /* _mkdir */
 #define mkdir(path, mode) _mkdir(path)     /* POSIX mkdir(path,mode) → _mkdir(path) */
 #define timegm _mkgmtime                   /* UTC tm → time_t */
+#define fsync(fd) _commit(fd)              /* no fsync() on Windows; _commit() (<io.h>) is the equiv */
 
 /* setenv/unsetenv: not in the Windows CRT; map to _putenv_s / SetEnvironmentVariable. */
 static inline int setenv(const char* name, const char* value, int overwrite) {

lang/el-compiler/runtime/el_runtime.h

@@ -632,6 +632,7 @@ el_val_t  engram_load(el_val_t path);
  * can pass results straight through without round-tripping ElList/ElMap
  * through json_stringify. */
 el_val_t  engram_get_node_json(el_val_t id);
+el_val_t  engram_get_node_by_label(el_val_t label);
 el_val_t  engram_search_json(el_val_t query, el_val_t limit);
 el_val_t  engram_scan_nodes_json(el_val_t limit, el_val_t offset);
 el_val_t  engram_scan_nodes_by_type_json(el_val_t node_type, el_val_t limit, el_val_t offset);

lang/el-compiler/runtime/el_seed.c

@@ -1072,6 +1072,7 @@ el_val_t __engram_save(el_val_t path)                       { return engram_save
 el_val_t __engram_load(el_val_t path)                       { return engram_load(path); }
 
 el_val_t __engram_get_node_json(el_val_t id)               { return engram_get_node_json(id); }
+el_val_t __engram_get_node_by_label(el_val_t label)        { return engram_get_node_by_label(label); }
 
 el_val_t __engram_search_json(el_val_t query, el_val_t limit) {
     return engram_search_json(query, limit);

lang/el-compiler/runtime/el_seed.h

@@ -226,6 +226,7 @@ el_val_t  __engram_activate(el_val_t query, el_val_t depth);
 el_val_t  __engram_save(el_val_t path);
 el_val_t  __engram_load(el_val_t path);
 el_val_t  __engram_get_node_json(el_val_t id);
+el_val_t  __engram_get_node_by_label(el_val_t label);
 el_val_t  __engram_search_json(el_val_t query, el_val_t limit);
 el_val_t  __engram_scan_nodes_json(el_val_t limit, el_val_t offset);
 el_val_t  __engram_scan_nodes_by_type_json(el_val_t node_type, el_val_t limit, el_val_t offset);

lang/el-compiler/runtime/new-platform

@@ -0,0 +1,711 @@
+#!/usr/bin/env bash
+# new-platform — scaffold a new el-native platform bridge
+#
+# Usage: ./new-platform <platform-name>
+#
+# Example:
+#   ./new-platform myplatform
+#
+# Creates el_myplatform.c with all 33 required __* functions stubbed out,
+# the ElWidget slot table, and the dlsym callback dispatcher.
+#
+# After running, follow the printed instructions to wire the bridge into
+# el_native_target.h and el_seed.c.
+#
+# See PLATFORM_BRIDGE_SPEC.md for the full bridge contract.
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+# ── Argument validation ───────────────────────────────────────────────────────
+
+if [[ $# -lt 1 ]]; then
+    echo "Usage: $0 <platform-name>" >&2
+    echo "" >&2
+    echo "  <platform-name>  lowercase identifier, e.g. myrtos, wayland, qt6" >&2
+    echo "" >&2
+    echo "This creates el_<platform-name>.c in the current directory." >&2
+    exit 1
+fi
+
+PLATFORM_LOWER="${1,,}"   # force lowercase
+PLATFORM_UPPER="${PLATFORM_LOWER^^}"   # force uppercase
+
+# Validate: letters, digits, underscores only
+if [[ ! "${PLATFORM_LOWER}" =~ ^[a-z][a-z0-9_]*$ ]]; then
+    echo "Error: platform name must start with a letter and contain only a-z, 0-9, _" >&2
+    exit 1
+fi
+
+OUTPUT_FILE="${SCRIPT_DIR}/el_${PLATFORM_LOWER}.c"
+
+if [[ -f "${OUTPUT_FILE}" ]]; then
+    echo "Error: ${OUTPUT_FILE} already exists." >&2
+    echo "  Remove it first if you want to regenerate it." >&2
+    exit 1
+fi
+
+# ── Generate the bridge file ──────────────────────────────────────────────────
+
+cat > "${OUTPUT_FILE}" << BRIDGE_FILE
+/*
+ * el_${PLATFORM_LOWER}.c — el-native platform bridge for ${PLATFORM_UPPER}.
+ *
+ * Generated by new-platform. Replace the TODO stubs with real implementations.
+ * See PLATFORM_BRIDGE_SPEC.md for the full contract.
+ *
+ * ── Slot system ──────────────────────────────────────────────────────────────
+ * Every widget (window, button, label, container, image) is stored in a static
+ * array of ElWidget structs. The el program holds an int64_t "handle" which is
+ * a direct index into that array. Rules:
+ *   - Slot 0 is NEVER valid. Scans start at index 1.
+ *   - Handle -1 means "invalid" / "create failed".
+ *   - Maximum 4096 concurrent widgets.
+ *   - el_widget_get() returns NULL for 0, negative, out-of-range, or FREE slots.
+ *
+ * ── Callback ABI ─────────────────────────────────────────────────────────────
+ * When a platform event fires (click, text change), call el_${PLATFORM_LOWER}_invoke_cb:
+ *
+ *   el_${PLATFORM_LOWER}_invoke_cb(w->cb_click, slot_index, "");
+ *
+ * The El callback signature:
+ *   fn handler(handle: Int, data: String) -> Void
+ * compiles to:
+ *   void handler(int64_t handle, int64_t data)
+ * where data is a const char* cast to int64_t (el String representation).
+ *
+ * ── Thread safety ────────────────────────────────────────────────────────────
+ * ALL platform UI calls must run on the main/UI thread. If your platform
+ * delivers events on background threads (e.g., from a network callback that
+ * updates a label), marshal to the main thread before calling any widget op.
+ *
+ * ── Compile ──────────────────────────────────────────────────────────────────
+ *   cc -DEL_TARGET_${PLATFORM_UPPER} \\
+ *      \$(pkg-config --cflags <your-toolkit>) \\
+ *      -c el_${PLATFORM_LOWER}.c -o el_${PLATFORM_LOWER}.o
+ *
+ * ── Link ─────────────────────────────────────────────────────────────────────
+ *   cc el_${PLATFORM_LOWER}.o el_seed.o el_runtime.o -o myapp \\
+ *      \$(pkg-config --libs <your-toolkit>) -ldl -lpthread
+ */
+
+#ifdef EL_TARGET_${PLATFORM_UPPER}
+
+/* ── TODO: add platform-specific includes here ──────────────────────────────
+ * Examples:
+ *   #include <gtk/gtk.h>              // GTK4
+ *   #include <SDL2/SDL.h>             // SDL2
+ *   #include "lvgl/lvgl.h"            // LVGL
+ *   #include <windows.h>              // Win32
+ */
+
+#include <stdint.h>
+#include <stdlib.h>
+#include <string.h>
+#include <stdio.h>
+#include <dlfcn.h>   /* dlsym — replace with GetProcAddress on Windows */
+
+/* ── Widget table ─────────────────────────────────────────────────────────── */
+
+#define EL_${PLATFORM_UPPER}_MAX_WIDGETS 4096
+
+typedef enum {
+    EL_WIDGET_FREE      = 0,
+    EL_WIDGET_WINDOW    = 1,
+    EL_WIDGET_VSTACK    = 2,
+    EL_WIDGET_HSTACK    = 3,
+    EL_WIDGET_ZSTACK    = 4,
+    EL_WIDGET_SCROLL    = 5,
+    EL_WIDGET_LABEL     = 6,
+    EL_WIDGET_BUTTON    = 7,
+    EL_WIDGET_TEXTFIELD = 8,
+    EL_WIDGET_TEXTAREA  = 9,
+    EL_WIDGET_IMAGE     = 10,
+} ElWidgetKind;
+
+typedef struct {
+    ElWidgetKind  kind;
+
+    /* TODO: add your platform's native widget reference here.
+     * Examples:
+     *   GtkWidget*   widget;     // GTK4
+     *   SDL_Rect     rect;       // SDL2 (no object, just geometry)
+     *   lv_obj_t*    obj;        // LVGL
+     *   HWND         hwnd;       // Win32
+     *   void*        native;     // generic pointer
+     */
+    void*         native;   /* platform widget reference — replace as needed */
+
+    /* Text content (cached for platforms that don't provide a get-text API) */
+    char*         text;
+
+    /* Foreground / background color (RGBA, 0.0-1.0) */
+    float         fg_r, fg_g, fg_b, fg_a;
+    float         bg_r, bg_g, bg_b, bg_a;
+
+    /* Geometry */
+    int           width;    /* 0 = not set */
+    int           height;   /* 0 = not set */
+    int           flex;     /* 0 = hug content, >0 = expand */
+
+    /* Padding (top, right, bottom, left) */
+    int           pad_top, pad_right, pad_bottom, pad_left;
+
+    /* Corner radius */
+    int           corner_radius;
+
+    /* State */
+    int           disabled; /* 0 = enabled, 1 = disabled */
+    int           hidden;   /* 0 = visible, 1 = hidden */
+
+    /* Event callbacks — El function name resolved at event time via dlsym */
+    char*         cb_click;    /* on_click / on_submit */
+    char*         cb_change;   /* on_change */
+} ElWidget;
+
+static ElWidget _el_widgets[EL_${PLATFORM_UPPER}_MAX_WIDGETS];
+
+/* ── Slot management ──────────────────────────────────────────────────────── */
+
+static int64_t el_widget_alloc(ElWidgetKind kind, void* native) {
+    for (int i = 1; i < EL_${PLATFORM_UPPER}_MAX_WIDGETS; i++) {
+        if (_el_widgets[i].kind == EL_WIDGET_FREE) {
+            memset(&_el_widgets[i], 0, sizeof(ElWidget));
+            _el_widgets[i].kind   = kind;
+            _el_widgets[i].native = native;
+            return (int64_t)i;
+        }
+    }
+    fprintf(stderr, "el_${PLATFORM_LOWER}: widget table full (max %d)\n",
+            EL_${PLATFORM_UPPER}_MAX_WIDGETS);
+    return -1;
+}
+
+static ElWidget* el_widget_get(int64_t handle) {
+    if (handle <= 0 || handle >= EL_${PLATFORM_UPPER}_MAX_WIDGETS) return NULL;
+    if (_el_widgets[handle].kind == EL_WIDGET_FREE)               return NULL;
+    return &_el_widgets[handle];
+}
+
+static void el_widget_free(int64_t handle) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    /* TODO: release w->native (toolkit-specific) */
+    free(w->text);
+    free(w->cb_click);
+    free(w->cb_change);
+    memset(w, 0, sizeof(ElWidget)); /* sets kind = EL_WIDGET_FREE (0) */
+}
+
+/* ── Callback dispatcher ─────────────────────────────────────────────────── */
+/*
+ * Invoke an El function by symbol name. The El function must have the
+ * compiled signature:  void fn(int64_t handle, int64_t data)
+ * where data is a const char* cast to int64_t (el String representation).
+ *
+ * On platforms without dlsym (e.g., Windows), replace with:
+ *   GetProcAddress(GetModuleHandle(NULL), fn_name)
+ * On embedded targets without dynamic linking, maintain a manual symbol table.
+ */
+typedef void (*ElCb2)(int64_t handle, int64_t data);
+
+static void el_${PLATFORM_LOWER}_invoke_cb(const char* fn_name,
+                                            int64_t handle,
+                                            const char* data) {
+    if (!fn_name || !*fn_name) return;
+    void* sym = dlsym(RTLD_DEFAULT, fn_name);
+    if (!sym) {
+        fprintf(stderr, "el_${PLATFORM_LOWER}: callback symbol not found: %s\n", fn_name);
+        return;
+    }
+    ElCb2 fn = (ElCb2)sym;
+    fn(handle, (int64_t)(uintptr_t)(data ? data : ""));
+}
+
+/* ── Lifecycle ────────────────────────────────────────────────────────────── */
+
+/*
+ * el_${PLATFORM_LOWER}_init — initialize the platform toolkit.
+ * Must be idempotent (safe to call more than once).
+ * Called once from __native_init before any widget creation.
+ */
+void el_${PLATFORM_LOWER}_init(void) {
+    static int done = 0;
+    if (done) return;
+    done = 1;
+
+    /* TODO: initialize your platform toolkit here.
+     * Examples:
+     *   gtk_init(NULL, NULL);            // GTK4
+     *   SDL_Init(SDL_INIT_VIDEO);        // SDL2
+     *   lv_init();                       // LVGL
+     */
+}
+
+/*
+ * el_${PLATFORM_LOWER}_run_loop — start the platform event loop.
+ * On most platforms this NEVER returns. Exceptions: Android (no-op).
+ * Must be called from the main thread.
+ */
+void el_${PLATFORM_LOWER}_run_loop(void) {
+    /* TODO: start the platform event/render loop.
+     * Examples:
+     *   gtk_main();                      // GTK4
+     *   while (1) { SDL_PollEvent(...); render(); SDL_Delay(16); }  // SDL2
+     *   while (1) { lv_task_handler(); usleep(5000); }              // LVGL
+     */
+}
+
+/* ── Window ───────────────────────────────────────────────────────────────── */
+
+int64_t el_${PLATFORM_LOWER}_window_create(const char* title, int w, int h,
+                                            int mw, int mh) {
+    /* TODO: create a top-level window.
+     * title may be NULL — treat as "".
+     * mw/mh are minimum dimensions (0 = no minimum).
+     * Return slot handle on success, -1 on failure.
+     */
+    (void)title; (void)w; (void)h; (void)mw; (void)mh;
+    return -1; /* TODO: implement */
+}
+
+void el_${PLATFORM_LOWER}_window_show(int64_t handle) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    /* TODO: make the window visible. */
+}
+
+void el_${PLATFORM_LOWER}_window_set_title(int64_t handle, const char* title) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    /* TODO: update the window title. title may be NULL — treat as "". */
+    (void)title;
+}
+
+/* ── Layout containers ────────────────────────────────────────────────────── */
+
+int64_t el_${PLATFORM_LOWER}_vstack_create(int spacing) {
+    /* TODO: create a vertical linear container with the given spacing (px). */
+    (void)spacing;
+    return -1; /* TODO: implement */
+}
+
+int64_t el_${PLATFORM_LOWER}_hstack_create(int spacing) {
+    /* TODO: create a horizontal linear container with the given spacing (px). */
+    (void)spacing;
+    return -1; /* TODO: implement */
+}
+
+int64_t el_${PLATFORM_LOWER}_zstack_create(void) {
+    /* TODO: create a z-axis overlay container (children overlap). */
+    return -1; /* TODO: implement */
+}
+
+int64_t el_${PLATFORM_LOWER}_scroll_create(void) {
+    /* TODO: create a scrollable container (vertical scroll, first child = content). */
+    return -1; /* TODO: implement */
+}
+
+/* ── Leaf widgets ─────────────────────────────────────────────────────────── */
+
+int64_t el_${PLATFORM_LOWER}_label_create(const char* text) {
+    /* TODO: create a non-editable text label. text may be NULL — treat as "". */
+    (void)text;
+    return -1; /* TODO: implement */
+}
+
+int64_t el_${PLATFORM_LOWER}_button_create(const char* label) {
+    /* TODO: create a clickable button with the given label text.
+     * Wire up the platform event handler so on_click callbacks fire later. */
+    (void)label;
+    return -1; /* TODO: implement */
+}
+
+int64_t el_${PLATFORM_LOWER}_text_field_create(const char* placeholder) {
+    /* TODO: create a single-line text input. placeholder may be NULL. */
+    (void)placeholder;
+    return -1; /* TODO: implement */
+}
+
+int64_t el_${PLATFORM_LOWER}_text_area_create(const char* placeholder) {
+    /* TODO: create a multi-line text input (scrollable). placeholder may be NULL. */
+    (void)placeholder;
+    return -1; /* TODO: implement */
+}
+
+int64_t el_${PLATFORM_LOWER}_image_create(const char* path_or_name) {
+    /* TODO: create an image widget.
+     * Try path_or_name as a filesystem path first, then as a named resource.
+     * If neither resolves, create an empty image widget (do not crash). */
+    (void)path_or_name;
+    return -1; /* TODO: implement */
+}
+
+/* ── Widget property setters ─────────────────────────────────────────────── */
+
+void el_${PLATFORM_LOWER}_widget_set_text(int64_t handle, const char* text) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    /* TODO: update text on label, button, text field, text area, or window title.
+     * Dispatch on w->kind. text may be NULL — treat as "".
+     * Cache in w->text if the platform has no get-text API. */
+    free(w->text);
+    w->text = strdup(text ? text : "");
+}
+
+const char* el_${PLATFORM_LOWER}_widget_get_text(int64_t handle) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return "";
+    /* TODO: return the current text of the widget.
+     * If the platform provides a get-text API, use it.
+     * Otherwise return w->text (populated by set_text).
+     * NEVER return NULL — return "" on failure. */
+    return w->text ? w->text : "";
+}
+
+void el_${PLATFORM_LOWER}_widget_set_color(int64_t handle,
+                                            float r, float g, float b, float a) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    w->fg_r = r; w->fg_g = g; w->fg_b = b; w->fg_a = a;
+    /* TODO: apply foreground (text) color to the platform widget. */
+}
+
+void el_${PLATFORM_LOWER}_widget_set_bg_color(int64_t handle,
+                                               float r, float g, float b, float a) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    w->bg_r = r; w->bg_g = g; w->bg_b = b; w->bg_a = a;
+    /* TODO: apply background color to the platform widget. */
+}
+
+void el_${PLATFORM_LOWER}_widget_set_font(int64_t handle,
+                                           const char* family, int size, int bold) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    /* TODO: set font on text-bearing widgets (label, button, text field, text area).
+     * family may be "system" — use the platform default font in that case.
+     * Fall back to system font if family is not found. */
+    (void)family; (void)size; (void)bold;
+}
+
+void el_${PLATFORM_LOWER}_widget_set_padding(int64_t handle,
+                                              int top, int right,
+                                              int bottom, int left) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    w->pad_top = top; w->pad_right = right;
+    w->pad_bottom = bottom; w->pad_left = left;
+    /* TODO: apply padding/insets to the platform container or text widget. */
+}
+
+void el_${PLATFORM_LOWER}_widget_set_width(int64_t handle, int width) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    w->width = width;
+    /* TODO: apply a fixed-width constraint to the platform widget. */
+}
+
+void el_${PLATFORM_LOWER}_widget_set_height(int64_t handle, int height) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    w->height = height;
+    /* TODO: apply a fixed-height constraint to the platform widget. */
+}
+
+void el_${PLATFORM_LOWER}_widget_set_flex(int64_t handle, int flex) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    w->flex = flex;
+    /* TODO: set the flex/expand factor.
+     * flex > 0 → widget expands to fill available space.
+     * flex == 0 → widget hugs content size.
+     * Maps to: content hugging priority (AppKit), hexpand/vexpand (GTK4),
+     *          layout_weight (Android), stretch factor (SDL2 manual layout). */
+}
+
+void el_${PLATFORM_LOWER}_widget_set_corner_radius(int64_t handle, int radius) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    w->corner_radius = radius;
+    /* TODO: apply rounded corners (requires GPU layer / backing surface on most platforms). */
+}
+
+void el_${PLATFORM_LOWER}_widget_set_disabled(int64_t handle, int disabled) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    w->disabled = disabled;
+    /* TODO: enable or disable the widget (buttons, text fields). No-op for containers/labels. */
+}
+
+void el_${PLATFORM_LOWER}_widget_set_hidden(int64_t handle, int hidden) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    w->hidden = hidden;
+    /* TODO: show or hide the widget.
+     * hidden=1 → invisible but still occupies layout space (visibility:hidden semantics).
+     * For windows: minimize or hide. */
+}
+
+/* ── Tree management ─────────────────────────────────────────────────────── */
+
+void el_${PLATFORM_LOWER}_widget_add_child(int64_t parent, int64_t child) {
+    ElWidget* pw = el_widget_get(parent);
+    ElWidget* cw = el_widget_get(child);
+    if (!pw || !cw) return;
+
+    /* TODO: attach child to parent. Dispatch on pw->kind:
+     *   EL_WIDGET_WINDOW  → add to root content view/container
+     *   EL_WIDGET_VSTACK  → add as vertical child
+     *   EL_WIDGET_HSTACK  → add as horizontal child
+     *   EL_WIDGET_ZSTACK  → add as overlapping subview
+     *   EL_WIDGET_SCROLL  → set as the scrollable content view (first child only)
+     *   default           → add as plain subview
+     * Do NOT add a window widget as a child. */
+    (void)pw; (void)cw;
+}
+
+void el_${PLATFORM_LOWER}_widget_remove_child(int64_t parent, int64_t child) {
+    ElWidget* pw = el_widget_get(parent);
+    ElWidget* cw = el_widget_get(child);
+    if (!pw || !cw) return;
+    /* TODO: detach child from parent. The child slot remains allocated (not destroyed). */
+    (void)pw; (void)cw;
+}
+
+void el_${PLATFORM_LOWER}_widget_destroy(int64_t handle) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    /* TODO: remove the widget from its parent/superview.
+     * For windows: close the window.
+     * Free any platform delegate/target objects stored in side tables.
+     * Then free the slot: */
+    el_widget_free(handle);
+}
+
+/* ── Event registration ───────────────────────────────────────────────────── */
+
+void el_${PLATFORM_LOWER}_widget_on_click(int64_t handle, const char* fn_name) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_click);
+    w->cb_click = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+}
+
+void el_${PLATFORM_LOWER}_widget_on_change(int64_t handle, const char* fn_name) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_change);
+    w->cb_change = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+}
+
+void el_${PLATFORM_LOWER}_widget_on_submit(int64_t handle, const char* fn_name) {
+    /* Submit (Enter key in text field) reuses the cb_click slot, matching AppKit convention. */
+    el_${PLATFORM_LOWER}_widget_on_click(handle, fn_name);
+}
+
+/* ── Example event handler (adapt to your platform's callback mechanism) ─── */
+/*
+ * When a button is clicked in your platform event loop, call:
+ *
+ *   ElWidget* w = el_widget_get(slot_index);
+ *   if (w && w->cb_click) {
+ *       el_${PLATFORM_LOWER}_invoke_cb(w->cb_click, slot_index, "");
+ *   }
+ *
+ * When a text field changes:
+ *
+ *   ElWidget* w = el_widget_get(slot_index);
+ *   if (w && w->cb_change) {
+ *       el_${PLATFORM_LOWER}_invoke_cb(w->cb_change, slot_index, current_text);
+ *   }
+ */
+
+#endif /* EL_TARGET_${PLATFORM_UPPER} */
+BRIDGE_FILE
+
+chmod 644 "${OUTPUT_FILE}"
+
+# ── Print next-steps instructions ────────────────────────────────────────────
+
+UPPER="${PLATFORM_UPPER}"
+LOWER="${PLATFORM_LOWER}"
+
+cat << INSTRUCTIONS
+
+Created: el_${LOWER}.c
+
+Next steps:
+  ────────────────────────────────────────────────────────────────────────────
+  1. Add to el_native_target.h  (inside a new #ifdef EL_TARGET_${UPPER} block):
+
+     #ifdef EL_TARGET_${UPPER}
+
+     void      __native_init(void);
+     void      __native_run_loop(void);
+
+     el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                                el_val_t min_width, el_val_t min_height);
+     void      __window_show(el_val_t handle);
+     void      __window_set_title(el_val_t handle, el_val_t title);
+
+     el_val_t  __vstack_create(el_val_t spacing);
+     el_val_t  __hstack_create(el_val_t spacing);
+     el_val_t  __zstack_create(void);
+     el_val_t  __scroll_create(void);
+
+     el_val_t  __label_create(el_val_t text);
+     el_val_t  __button_create(el_val_t label);
+     el_val_t  __text_field_create(el_val_t placeholder);
+     el_val_t  __text_area_create(el_val_t placeholder);
+     el_val_t  __image_create(el_val_t path_or_name);
+
+     void      __widget_set_text(el_val_t handle, el_val_t text);
+     el_val_t  __widget_get_text(el_val_t handle);
+     void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                                   el_val_t b, el_val_t a);
+     void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                      el_val_t b, el_val_t a);
+     void      __widget_set_font(el_val_t handle, el_val_t family,
+                                  el_val_t size, el_val_t bold);
+     void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                     el_val_t bottom, el_val_t left);
+     void      __widget_set_width(el_val_t handle, el_val_t width);
+     void      __widget_set_height(el_val_t handle, el_val_t height);
+     void      __widget_set_flex(el_val_t handle, el_val_t flex);
+     void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+     void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+     void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+     void      __widget_add_child(el_val_t parent, el_val_t child);
+     void      __widget_remove_child(el_val_t parent, el_val_t child);
+     void      __widget_destroy(el_val_t handle);
+
+     void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+     void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+     void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+     el_val_t  __manifest_read(el_val_t path);
+
+     #endif /* EL_TARGET_${UPPER} */
+
+  ────────────────────────────────────────────────────────────────────────────
+  2. Add to el_seed.c  (copy the EL_TARGET_MACOS block as a template and
+     substitute el_appkit_ → el_${LOWER}_):
+
+     #ifdef EL_TARGET_${UPPER}
+
+     /* Forward declarations — implemented in el_${LOWER}.c */
+     extern void    el_${LOWER}_init(void);
+     extern void    el_${LOWER}_run_loop(void);
+     extern int64_t el_${LOWER}_window_create(const char* title, int w, int h, int mw, int mh);
+     extern void    el_${LOWER}_window_show(int64_t handle);
+     extern void    el_${LOWER}_window_set_title(int64_t handle, const char* title);
+     extern int64_t el_${LOWER}_vstack_create(int spacing);
+     extern int64_t el_${LOWER}_hstack_create(int spacing);
+     extern int64_t el_${LOWER}_zstack_create(void);
+     extern int64_t el_${LOWER}_scroll_create(void);
+     extern int64_t el_${LOWER}_label_create(const char* text);
+     extern int64_t el_${LOWER}_button_create(const char* label);
+     extern int64_t el_${LOWER}_text_field_create(const char* placeholder);
+     extern int64_t el_${LOWER}_text_area_create(const char* placeholder);
+     extern int64_t el_${LOWER}_image_create(const char* path_or_name);
+     extern void    el_${LOWER}_widget_set_text(int64_t handle, const char* text);
+     extern const char* el_${LOWER}_widget_get_text(int64_t handle);
+     extern void    el_${LOWER}_widget_set_color(int64_t h, float r, float g, float b, float a);
+     extern void    el_${LOWER}_widget_set_bg_color(int64_t h, float r, float g, float b, float a);
+     extern void    el_${LOWER}_widget_set_font(int64_t h, const char* family, int size, int bold);
+     extern void    el_${LOWER}_widget_set_padding(int64_t h, int top, int right, int bottom, int left);
+     extern void    el_${LOWER}_widget_set_width(int64_t h, int width);
+     extern void    el_${LOWER}_widget_set_height(int64_t h, int height);
+     extern void    el_${LOWER}_widget_set_flex(int64_t h, int flex);
+     extern void    el_${LOWER}_widget_set_corner_radius(int64_t h, int radius);
+     extern void    el_${LOWER}_widget_set_disabled(int64_t h, int disabled);
+     extern void    el_${LOWER}_widget_set_hidden(int64_t h, int hidden);
+     extern void    el_${LOWER}_widget_add_child(int64_t parent, int64_t child);
+     extern void    el_${LOWER}_widget_remove_child(int64_t parent, int64_t child);
+     extern void    el_${LOWER}_widget_destroy(int64_t handle);
+     extern void    el_${LOWER}_widget_on_click(int64_t h, const char* fn_name);
+     extern void    el_${LOWER}_widget_on_change(int64_t h, const char* fn_name);
+     extern void    el_${LOWER}_widget_on_submit(int64_t h, const char* fn_name);
+
+     void __native_init(void)     { el_${LOWER}_init(); }
+     void __native_run_loop(void) { el_${LOWER}_run_loop(); }
+
+     el_val_t __window_create(el_val_t title, el_val_t width, el_val_t height,
+                               el_val_t min_width, el_val_t min_height) {
+         return (el_val_t)el_${LOWER}_window_create(
+             EL_CSTR(title),
+             (int)(int64_t)width, (int)(int64_t)height,
+             (int)(int64_t)min_width, (int)(int64_t)min_height);
+     }
+     void __window_show(el_val_t h)                  { el_${LOWER}_window_show((int64_t)h); }
+     void __window_set_title(el_val_t h, el_val_t t) { el_${LOWER}_window_set_title((int64_t)h, EL_CSTR(t)); }
+
+     el_val_t __vstack_create(el_val_t s)  { return (el_val_t)el_${LOWER}_vstack_create((int)(int64_t)s); }
+     el_val_t __hstack_create(el_val_t s)  { return (el_val_t)el_${LOWER}_hstack_create((int)(int64_t)s); }
+     el_val_t __zstack_create(void)         { return (el_val_t)el_${LOWER}_zstack_create(); }
+     el_val_t __scroll_create(void)         { return (el_val_t)el_${LOWER}_scroll_create(); }
+
+     el_val_t __label_create(el_val_t t)             { return (el_val_t)el_${LOWER}_label_create(EL_CSTR(t)); }
+     el_val_t __button_create(el_val_t l)             { return (el_val_t)el_${LOWER}_button_create(EL_CSTR(l)); }
+     el_val_t __text_field_create(el_val_t p)         { return (el_val_t)el_${LOWER}_text_field_create(EL_CSTR(p)); }
+     el_val_t __text_area_create(el_val_t p)          { return (el_val_t)el_${LOWER}_text_area_create(EL_CSTR(p)); }
+     el_val_t __image_create(el_val_t p)              { return (el_val_t)el_${LOWER}_image_create(EL_CSTR(p)); }
+
+     void __widget_set_text(el_val_t h, el_val_t t)  { el_${LOWER}_widget_set_text((int64_t)h, EL_CSTR(t)); }
+     el_val_t __widget_get_text(el_val_t h) {
+         const char* s = el_${LOWER}_widget_get_text((int64_t)h);
+         return EL_STR(s ? s : "");
+     }
+     void __widget_set_color(el_val_t h, el_val_t r, el_val_t g, el_val_t b, el_val_t a) {
+         el_${LOWER}_widget_set_color((int64_t)h,
+             (float)el_to_float(r), (float)el_to_float(g),
+             (float)el_to_float(b), (float)el_to_float(a));
+     }
+     void __widget_set_bg_color(el_val_t h, el_val_t r, el_val_t g, el_val_t b, el_val_t a) {
+         el_${LOWER}_widget_set_bg_color((int64_t)h,
+             (float)el_to_float(r), (float)el_to_float(g),
+             (float)el_to_float(b), (float)el_to_float(a));
+     }
+     void __widget_set_font(el_val_t h, el_val_t family, el_val_t size, el_val_t bold) {
+         el_${LOWER}_widget_set_font((int64_t)h, EL_CSTR(family),
+             (int)(int64_t)size, (int)(int64_t)bold);
+     }
+     void __widget_set_padding(el_val_t h, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left) {
+         el_${LOWER}_widget_set_padding((int64_t)h,
+             (int)(int64_t)top, (int)(int64_t)right,
+             (int)(int64_t)bottom, (int)(int64_t)left);
+     }
+     void __widget_set_width(el_val_t h, el_val_t w)          { el_${LOWER}_widget_set_width((int64_t)h, (int)(int64_t)w); }
+     void __widget_set_height(el_val_t h, el_val_t ht)        { el_${LOWER}_widget_set_height((int64_t)h, (int)(int64_t)ht); }
+     void __widget_set_flex(el_val_t h, el_val_t f)           { el_${LOWER}_widget_set_flex((int64_t)h, (int)(int64_t)f); }
+     void __widget_set_corner_radius(el_val_t h, el_val_t r)  { el_${LOWER}_widget_set_corner_radius((int64_t)h, (int)(int64_t)r); }
+     void __widget_set_disabled(el_val_t h, el_val_t d)       { el_${LOWER}_widget_set_disabled((int64_t)h, (int)(int64_t)d); }
+     void __widget_set_hidden(el_val_t h, el_val_t hid)       { el_${LOWER}_widget_set_hidden((int64_t)h, (int)(int64_t)hid); }
+     void __widget_add_child(el_val_t p, el_val_t c)          { el_${LOWER}_widget_add_child((int64_t)p, (int64_t)c); }
+     void __widget_remove_child(el_val_t p, el_val_t c)       { el_${LOWER}_widget_remove_child((int64_t)p, (int64_t)c); }
+     void __widget_destroy(el_val_t h)                         { el_${LOWER}_widget_destroy((int64_t)h); }
+     void __widget_on_click(el_val_t h, el_val_t fn)          { el_${LOWER}_widget_on_click((int64_t)h, EL_CSTR(fn)); }
+     void __widget_on_change(el_val_t h, el_val_t fn)         { el_${LOWER}_widget_on_change((int64_t)h, EL_CSTR(fn)); }
+     void __widget_on_submit(el_val_t h, el_val_t fn)         { el_${LOWER}_widget_on_submit((int64_t)h, EL_CSTR(fn)); }
+
+     #endif /* EL_TARGET_${UPPER} */
+
+  ────────────────────────────────────────────────────────────────────────────
+  3. Implement each TODO in el_${LOWER}.c.
+
+  4. Compile:
+       cc -DEL_TARGET_${UPPER} -Wall \\
+          \$(pkg-config --cflags <your-toolkit> 2>/dev/null) \\
+          -c el_${LOWER}.c -o el_${LOWER}.o
+
+  5. Link:
+       cc el_${LOWER}.o el_seed.o el_runtime.o -o myapp \\
+          \$(pkg-config --libs <your-toolkit> 2>/dev/null) \\
+          -ldl -lpthread
+
+  See PLATFORM_BRIDGE_SPEC.md for the full bridge contract and gotchas.
+INSTRUCTIONS

lang/el-compiler/src/codegen.el

@@ -2670,6 +2670,7 @@ fn builtin_arity(name: String) -> Int {
     if str_eq(name, "engram_save") { return 1 }
     if str_eq(name, "engram_load") { return 1 }
     if str_eq(name, "engram_get_node_json") { return 1 }
+    if str_eq(name, "engram_get_node_by_label") { return 1 }
     if str_eq(name, "engram_search_json") { return 2 }
     if str_eq(name, "engram_scan_nodes_json") { return 2 }
     if str_eq(name, "engram_neighbors_json") { return 3 }

lang/el-compiler/src/parser.el

@@ -23,10 +23,29 @@ fn tok_at(tokens: [Any], pos: Int) -> Map<String, Any> {
 }
 
 fn tok_kind(tokens: [Any], pos: Int) -> String {
+    // Out-of-range reads must report the Eof sentinel so every `== "Eof"`
+    // termination guard in the parser fires. Without this, reading past the
+    // single trailing Eof token returns runtime null (el_list_get OOB -> 0),
+    // which matches no delimiter, letting inner parse loops append AST nodes
+    // forever on malformed input -> unbounded allocation -> OOM.
+    let n: Int = native_list_len(tokens) / 2
+    if pos < 0 {
+        return "Eof"
+    }
+    if pos >= n {
+        return "Eof"
+    }
     native_list_get(tokens, pos * 2)
 }
 
 fn tok_value(tokens: [Any], pos: Int) -> String {
+    let n: Int = native_list_len(tokens) / 2
+    if pos < 0 {
+        return ""
+    }
+    if pos >= n {
+        return ""
+    }
     native_list_get(tokens, pos * 2 + 1)
 }
 
@@ -35,7 +54,12 @@ fn expect(tokens: [Any], pos: Int, kind: String) -> Int {
     if k == kind {
         return pos + 1
     }
-    // On mismatch just advance; error recovery is best-effort
+    // On mismatch, error recovery is best-effort. But never step PAST the Eof
+    // sentinel: once at Eof a mismatch means the input ended early, and
+    // advancing would run the cursor off the token list.
+    if k == "Eof" {
+        return pos
+    }
     pos + 1
 }
 

lang/releases/v1.0.0-20260501/el_platform_win.h

@@ -0,0 +1,186 @@
+#ifndef EL_PLATFORM_WIN_H
+#define EL_PLATFORM_WIN_H
+/*
+ * el_platform_win.h — Windows OS-boundary shim for el_runtime.c.
+ *
+ * Branch: feat/windows-el-runtime. Included ONLY when _WIN32 is defined; the POSIX build is
+ * untouched. Goal: let el_runtime.c (a BSD-sockets / dlfcn / fork host) compile and link with
+ * mingw-w64 into a native neuron.exe, with no behavioural change to the Linux/macOS build.
+ *
+ * What it maps:
+ *   - sockets  : winsock2 (same call names: socket/bind/listen/accept/recv/send/setsockopt).
+ *                Sockets close with closesocket() (see el_closesocket), and the stack must be
+ *                started once with WSAStartup — done automatically via a load-time constructor.
+ *   - dlsym    : el_runtime.c uses dlsym(RTLD_DEFAULT, name) to resolve callback/tool symbols
+ *                exported by the main module. Windows equivalent: GetProcAddress on the process
+ *                module. Link the soul with -Wl,--export-all-symbols so the symbols are findable.
+ *   - popen    : mapped to _popen/_pclose.
+ *   - threads  : UNCHANGED. mingw-w64 ships winpthreads, so <pthread.h> + -lpthread just work.
+ */
+
+#ifndef WIN32_LEAN_AND_MEAN
+#define WIN32_LEAN_AND_MEAN
+#endif
+#include <winsock2.h>
+#include <ws2tcpip.h>
+#include <windows.h>
+#include <io.h>
+#include <process.h>
+
+/* Portable headers mingw-w64 provides (verified present). */
+#include <stdarg.h>
+#include <stdint.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <strings.h>   /* strcasecmp */
+#include <ctype.h>
+#include <math.h>
+#include <time.h>
+#include <sys/time.h>  /* mingw-w64 provides gettimeofday here */
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <fcntl.h>
+#include <dirent.h>
+#include <errno.h>
+#include <pthread.h>
+
+/* ── socket close ─────────────────────────────────────────────────────────── */
+/* Winsock closes sockets with closesocket(), not close() (close() is for file fds). The POSIX
+   build defines the same helper as close() so the call sites are identical across platforms. */
+static inline int el_closesocket(SOCKET s) { return closesocket(s); }
+
+/* ── setsockopt optval type ───────────────────────────────────────────────── */
+/* Winsock's setsockopt takes optval as (const char*); POSIX takes (const void*), so el_runtime.c
+   passes &int directly. GCC 14+ makes that an error under -Wincompatible-pointer-types. Wrap it so
+   the runtime's POSIX-style call sites compile unchanged (defined before the macro so the wrapper
+   itself resolves to the real winsock setsockopt). */
+static inline int el_setsockopt(SOCKET s, int level, int optname, const void* optval, int optlen) {
+    return setsockopt(s, level, optname, (const char*)optval, optlen);
+}
+#define setsockopt(s, l, o, v, n) el_setsockopt((s), (l), (o), (v), (int)(n))
+
+/* ── winsock init (once, at load) ─────────────────────────────────────────── */
+static void el__win_net_init(void) {
+    static int inited = 0;
+    if (!inited) { WSADATA w; WSAStartup(MAKEWORD(2, 2), &w); inited = 1; }
+}
+__attribute__((constructor)) static void el__win_ctor(void) { el__win_net_init(); }
+
+/* ── dlsym → GetProcAddress ───────────────────────────────────────────────── */
+#ifndef RTLD_DEFAULT
+#define RTLD_DEFAULT ((void*)0)
+#endif
+static inline void* el_win_dlsym(void* handle, const char* name) {
+    (void)handle;
+    return (void*)(uintptr_t)GetProcAddress(GetModuleHandleA(NULL), name);
+}
+#define dlsym(h, n) el_win_dlsym((h), (n))
+
+/* ── popen / pclose ───────────────────────────────────────────────────────── */
+#define popen  _popen
+#define pclose _pclose
+
+/* ── misc POSIX → Win32 shims ─────────────────────────────────────────────── */
+#include <direct.h>            /* _mkdir */
+#define mkdir(path, mode) _mkdir(path)     /* POSIX mkdir(path,mode) → _mkdir(path) */
+#define timegm _mkgmtime                   /* UTC tm → time_t */
+
+/* setenv/unsetenv: not in the Windows CRT; map to _putenv_s / SetEnvironmentVariable. */
+static inline int setenv(const char* name, const char* value, int overwrite) {
+    (void)overwrite;
+    return _putenv_s(name, value ? value : "");
+}
+static inline int unsetenv(const char* name) {
+    /* _putenv_s(name, "") sets VAR="" rather than removing it.
+     * SetEnvironmentVariableA(name, NULL) truly deletes it from the Win32
+     * env block; then we sync the CRT cache with _putenv("NAME=").       */
+    SetEnvironmentVariableA(name, NULL);
+    size_t len = strlen(name);
+    char *buf = (char*)malloc(len + 2);
+    if (!buf) return -1;
+    memcpy(buf, name, len);
+    buf[len] = '=';
+    buf[len + 1] = '\0';
+    _putenv(buf);
+    free(buf);
+    return 0;
+}
+
+/* nanosleep — not available in MSVC/UCRT; approximate with Sleep(). */
+static inline int el_nanosleep(const struct timespec *req, struct timespec *rem) {
+    (void)rem;
+    DWORD ms = (DWORD)((req->tv_sec * 1000ULL) + (req->tv_nsec / 1000000ULL));
+    Sleep(ms ? ms : 1);
+    return 0;
+}
+#define nanosleep(req, rem) el_nanosleep((req), (rem))
+
+/* localtime_r/gmtime_r: Windows offers localtime_s/gmtime_s with reversed arg order. */
+static inline struct tm* localtime_r(const time_t* t, struct tm* out) {
+    return localtime_s(out, t) == 0 ? out : (struct tm*)0;
+}
+static inline struct tm* gmtime_r(const time_t* t, struct tm* out) {
+    return gmtime_s(out, t) == 0 ? out : (struct tm*)0;
+}
+
+/* ── libcurl: degradable stubs for the curl-less Windows build ─────────────── */
+/* The curl-less validation build (WITH_CURL=0) links no libcurl. el_runtime.c uses libcurl
+ * unconditionally for its HTTP client / LLM layer; these stubs let it compile and link so the
+ * runtime, HTTP *server*, graph and memory work natively on Windows. Live outbound HTTP/LLM calls
+ * degrade to a runtime error (curl_easy_perform returns an error) — matching the documented
+ * curl-less contract. When HAVE_CURL is defined (WITH_CURL=1) the real <curl/curl.h> is used and
+ * this whole block is compiled out. POSIX never sees this header, so the POSIX build is untouched. */
+#ifndef HAVE_CURL
+
+typedef void CURL;
+typedef int  CURLcode;
+
+#define CURLE_OK                    0
+#define CURLE_HTTP_RETURNED_ERROR   22
+#define CURL_ERROR_SIZE             256
+
+/* Option ids: values are irrelevant to the no-op setopt below; kept distinct for readability. */
+#define CURLOPT_URL              10002
+#define CURLOPT_WRITEFUNCTION    20011
+#define CURLOPT_WRITEDATA        10001
+#define CURLOPT_POSTFIELDS       10015
+#define CURLOPT_POSTFIELDSIZE      120
+#define CURLOPT_POST                47
+#define CURLOPT_HTTPHEADER       10023
+#define CURLOPT_TIMEOUT_MS         155
+#define CURLOPT_NOSIGNAL            99
+#define CURLOPT_USERAGENT        10018
+#define CURLOPT_FOLLOWLOCATION      52
+#define CURLOPT_ERRORBUFFER      10010
+#define CURLOPT_CUSTOMREQUEST    10036
+#define CURLOPT_FAILONERROR         45
+
+struct curl_slist { char* data; struct curl_slist* next; };
+
+static inline struct curl_slist* curl_slist_append(struct curl_slist* list, const char* s) {
+    struct curl_slist* node = (struct curl_slist*)malloc(sizeof(struct curl_slist));
+    if (!node) return list;
+    node->data = s ? strdup(s) : NULL;
+    node->next = NULL;
+    if (!list) return node;
+    struct curl_slist* p = list;
+    while (p->next) p = p->next;
+    p->next = node;
+    return list;
+}
+static inline void curl_slist_free_all(struct curl_slist* list) {
+    while (list) { struct curl_slist* n = list->next; free(list->data); free(list); list = n; }
+}
+
+static inline CURL* curl_easy_init(void) { return (CURL*)malloc(1); }
+static inline CURLcode curl_easy_setopt(CURL* h, int opt, ...) { (void)h; (void)opt; return CURLE_OK; }
+static inline CURLcode curl_easy_perform(CURL* h) { (void)h; return 7 /* CURLE_COULDNT_CONNECT */; }
+static inline void curl_easy_cleanup(CURL* h) { free(h); }
+static inline const char* curl_easy_strerror(CURLcode c) {
+    (void)c; return "libcurl not built in (curl-less build)";
+}
+
+#endif /* !HAVE_CURL */
+
+#endif /* EL_PLATFORM_WIN_H */

lang/releases/v1.0.0-20260501/el_runtime.h

@@ -601,6 +601,13 @@ el_val_t  engram_neighbors_json(el_val_t node_id, el_val_t max_depth, el_val_t d
 el_val_t  engram_activate_json(el_val_t query, el_val_t depth);
 el_val_t  engram_stats_json(void);
 el_val_t  engram_list_layers_json(void);
+/* Working memory introspection — count, mean weight, and top-N snapshot.
+ * Ported from el-compiler/runtime on 2026-06-30 self-review. */
+el_val_t  engram_wm_count(void);
+el_val_t  engram_wm_avg_weight(void);
+el_val_t  engram_wm_top_json(el_val_t n);
+/* Merge-load: add nodes/edges from a snapshot without resetting the store. */
+el_val_t  engram_load_merge(el_val_t path);
 /* engram_compile_layered_json — produce a prompt-ready text block split
  * into "[LAYER 0 — STRUCTURAL]" (non-suppressible layers, sacred fire)
  * and "[ENGRAM CONTEXT]" (standard suppressible layers). Returns "" if
@@ -751,6 +758,18 @@ el_val_t trace_span_start(el_val_t name);
 el_val_t trace_span_end(el_val_t span_handle);
 el_val_t emit_event(el_val_t name, el_val_t duration_ms);
 
+/* ── Runtime symbols required by the soul modules ──────────────────────────── */
+/* All implemented in el_runtime.c but omitted from this release header; the soul dist modules
+ * reference them directly, so the public header must export them. Declarations only — mirrors the
+ * mainline el_runtime.h and is platform-independent (no behavioural change to the POSIX build). */
+typedef el_val_t (*http_handler_fn)(el_val_t method, el_val_t path, el_val_t body);
+typedef el_val_t (*http_handler4_fn)(el_val_t method, el_val_t path, el_val_t body, el_val_t headers);
+el_val_t  el_arena_push(void);
+el_val_t  el_arena_pop(el_val_t mark);
+void      http_serve_async(el_val_t port, el_val_t handler);
+el_val_t  engram_get_node_by_label(el_val_t label);
+el_val_t  engram_prune_telemetry(el_val_t older_than_ms);
+
 #ifdef __cplusplus
 }
 #endif

ui/examples/native-hello-android/.gitignore

@@ -0,0 +1,6 @@
+local.properties
+.gradle/
+build/
+app/build/
+*.iml
+.idea/

ui/examples/native-hello-android/app/build.gradle

@@ -0,0 +1,55 @@
+plugins {
+    id 'com.android.application'
+}
+
+android {
+    namespace 'com.neuron.el'
+    compileSdk 34
+
+    defaultConfig {
+        applicationId "com.neuron.el"
+        minSdk 21
+        targetSdk 34
+        versionCode 1
+        versionName "1.0"
+
+        externalNativeBuild {
+            cmake {
+                cppFlags ""
+                arguments "-DANDROID_STL=c++_shared"
+            }
+        }
+
+        ndk {
+            // Build for the two most relevant ABIs. Add x86/x86_64 for emulator.
+            abiFilters "arm64-v8a", "armeabi-v7a", "x86_64"
+        }
+    }
+
+    externalNativeBuild {
+        cmake {
+            path "src/main/jni/CMakeLists.txt"
+            version "3.22.1"
+        }
+    }
+
+    buildTypes {
+        release {
+            minifyEnabled false
+            proguardFiles getDefaultProguardFile('proguard-android-optimize.txt'), 'proguard-rules.pro'
+        }
+        debug {
+            jniDebuggable true
+        }
+    }
+
+    compileOptions {
+        sourceCompatibility JavaVersion.VERSION_1_8
+        targetCompatibility JavaVersion.VERSION_1_8
+    }
+}
+
+dependencies {
+    // No third-party dependencies — el-native uses only android.* framework classes.
+    implementation 'androidx.appcompat:appcompat:1.6.1'
+}

ui/examples/native-hello-android/app/proguard-rules.pro

@@ -0,0 +1,4 @@
+# Add project specific ProGuard rules here.
+# Keep ElBridge and MainActivity so JNI symbol names stay intact.
+-keep class com.neuron.el.ElBridge { *; }
+-keep class com.neuron.el.MainActivity { *; }

ui/examples/native-hello-android/app/src/main/AndroidManifest.xml

@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+
+    <application
+        android:name=".ElApp"
+        android:label="el-native"
+        android:theme="@style/Theme.AppCompat.Light.NoActionBar"
+        android:allowBackup="false"
+        android:supportsRtl="true">
+
+        <activity
+            android:name=".MainActivity"
+            android:exported="true"
+            android:configChanges="orientation|screenSize|keyboardHidden">
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN" />
+                <category android:name="android.intent.category.LAUNCHER" />
+            </intent-filter>
+        </activity>
+
+    </application>
+
+</manifest>

ui/examples/native-hello-android/app/src/main/java/com/neuron/el/ElApp.java

@@ -0,0 +1,18 @@
+package com.neuron.el;
+
+import android.app.Application;
+
+/**
+ * ElApp — Application subclass for native-hello-android.
+ *
+ * Currently minimal: exists as an anchor for future app-level initialisation
+ * (crash reporting, global state, etc.).  Listed in AndroidManifest.xml as
+ * android:name=".ElApp".
+ */
+public class ElApp extends Application {
+
+    @Override
+    public void onCreate() {
+        super.onCreate();
+    }
+}

ui/examples/native-hello-android/app/src/main/java/com/neuron/el/ElBridge.java

@@ -0,0 +1,711 @@
+/*
+ * ElBridge.java — Android Java companion to el_android.c.
+ *
+ * All public methods are static. The C JNI layer calls these to create views,
+ * set properties, and manage the widget tree. Views are identified by integer
+ * slot indices matching the C-side handle values.
+ *
+ * Threading: every method that touches a View dispatches to the UI thread
+ * using Activity.runOnUiThread(Runnable) and blocks with a CountDownLatch
+ * until the UI thread completes the operation. This mirrors the AppKit
+ * dispatch_sync(main_queue, ^{}) pattern in el_appkit.m.
+ *
+ * Callbacks: Java sets listeners on views that call back into C via:
+ *   nativeOnClick(int slot)
+ *   nativeOnChange(int slot, String text)
+ *   nativeOnSubmit(int slot, String text)
+ * These are declared native and implemented in el_android.c.
+ *
+ * Usage (in your Activity.onCreate):
+ *   System.loadLibrary("elruntime");
+ *   ElBridge.init(this);
+ *
+ * The native library calls __native_init() which calls nativeRegisterActivity
+ * via the C side; alternatively call ElBridge.init(this) directly from Java.
+ *
+ * Compile requirements:
+ *   Android minSdkVersion 21 (Lollipop) or higher.
+ *   No third-party dependencies — uses only android.* framework classes.
+ *   For image loading from arbitrary file paths, BitmapFactory is used.
+ *   To replace with Glide/Picasso, edit createImageView only.
+ */
+
+package com.neuron.el;
+
+import android.app.Activity;
+import android.content.Context;
+import android.graphics.Bitmap;
+import android.graphics.BitmapFactory;
+import android.graphics.Color;
+import android.graphics.Typeface;
+import android.graphics.drawable.GradientDrawable;
+import android.os.Handler;
+import android.os.Looper;
+import android.text.Editable;
+import android.text.InputType;
+import android.text.TextWatcher;
+import android.view.Gravity;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.Button;
+import android.widget.EditText;
+import android.widget.FrameLayout;
+import android.widget.ImageView;
+import android.widget.LinearLayout;
+import android.widget.ScrollView;
+import android.widget.TextView;
+
+import java.util.concurrent.CountDownLatch;
+
+public class ElBridge {
+
+    /* ── Native callbacks (implemented in el_android.c) ─────────────────── */
+
+    public static native void nativeOnClick(int slot);
+    public static native void nativeOnChange(int slot, String text);
+    public static native void nativeOnSubmit(int slot, String text);
+    public static native void nativeRegisterActivity(Activity activity);
+
+    /* ── State ───────────────────────────────────────────────────────────── */
+
+    private static final int MAX_SLOTS = 4096;
+
+    private static Activity   sActivity;
+    private static Handler    sUiHandler;
+    private static View[]     sViews    = new View[MAX_SLOTS];
+    private static int        sNextSlot = 1;   /* slot 0 reserved / null */
+
+    /* ── Init ────────────────────────────────────────────────────────────── */
+
+    /**
+     * Must be called from the Activity before any widget operations.
+     * Typically called from Activity.onCreate after System.loadLibrary.
+     */
+    public static void init(Activity activity) {
+        sActivity  = activity;
+        sUiHandler = new Handler(Looper.getMainLooper());
+        nativeRegisterActivity(activity);
+    }
+
+    /* ── Slot management ─────────────────────────────────────────────────── */
+
+    private static int allocSlot(View v) {
+        /* Find a free slot starting from sNextSlot, wrap around. */
+        for (int i = 0; i < MAX_SLOTS - 1; i++) {
+            int idx = ((sNextSlot - 1 + i) % (MAX_SLOTS - 1)) + 1;
+            if (sViews[idx] == null) {
+                sViews[idx] = v;
+                sNextSlot = (idx % (MAX_SLOTS - 1)) + 1;
+                return idx;
+            }
+        }
+        android.util.Log.e("ElBridge", "allocSlot: slot table full");
+        return -1;
+    }
+
+    private static View getView(int slot) {
+        if (slot <= 0 || slot >= MAX_SLOTS) return null;
+        return sViews[slot];
+    }
+
+    /* ── UI-thread dispatch helper ───────────────────────────────────────── */
+
+    /*
+     * Dispatch r on the UI thread and block until it completes.
+     * Safe to call from the UI thread itself (runs inline without posting).
+     */
+    private static void runSync(final Runnable r) {
+        if (Looper.myLooper() == Looper.getMainLooper()) {
+            r.run();
+        } else {
+            final CountDownLatch latch = new CountDownLatch(1);
+            sUiHandler.post(new Runnable() {
+                @Override public void run() {
+                    try { r.run(); } finally { latch.countDown(); }
+                }
+            });
+            try { latch.await(); } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+            }
+        }
+    }
+
+    /* ── Integer slot returning runSync helper ───────────────────────────── */
+
+    private interface IntSupplier { int get(); }
+
+    private static int runSyncInt(final IntSupplier s) {
+        final int[] result = { -1 };
+        runSync(new Runnable() {
+            @Override public void run() { result[0] = s.get(); }
+        });
+        return result[0];
+    }
+
+    /* ── Context accessor ────────────────────────────────────────────────── */
+
+    private static Context ctx() { return sActivity; }
+
+    /* ── View creation ───────────────────────────────────────────────────── */
+
+    /**
+     * Create a LinearLayout.
+     * @param orientation 1=VERTICAL, 0=HORIZONTAL
+     * @param spacing     gap between children in dp; applied as bottom/right margin
+     */
+    public static int createLinearLayout(final int orientation, final int spacing) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                LinearLayout ll = new LinearLayout(ctx());
+                ll.setOrientation(orientation == 1
+                        ? LinearLayout.VERTICAL
+                        : LinearLayout.HORIZONTAL);
+                ll.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                /* Spacing is stored so addChild can apply margins. */
+                ll.setTag(R_TAG_SPACING, spacing);
+                return allocSlot(ll);
+            }
+        });
+    }
+
+    /** Create a FrameLayout (ZStack equivalent). */
+    public static int createFrameLayout() {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                FrameLayout fl = new FrameLayout(ctx());
+                fl.setLayoutParams(new FrameLayout.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(fl);
+            }
+        });
+    }
+
+    /** Create a ScrollView. */
+    public static int createScrollView() {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                ScrollView sv = new ScrollView(ctx());
+                sv.setLayoutParams(new ScrollView.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.MATCH_PARENT));
+                sv.setFillViewport(true);
+                return allocSlot(sv);
+            }
+        });
+    }
+
+    /** Create a TextView with initial text. */
+    public static int createTextView(final String text) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                TextView tv = new TextView(ctx());
+                tv.setText(text != null ? text : "");
+                tv.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(tv);
+            }
+        });
+    }
+
+    /** Create a Button with a label. */
+    public static int createButton(final String label) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                Button btn = new Button(ctx());
+                btn.setText(label != null ? label : "");
+                btn.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(btn);
+            }
+        });
+    }
+
+    /**
+     * Create an EditText.
+     * @param placeholder hint text
+     * @param singleLine  true = single-line text field; false = multi-line text area
+     */
+    public static int createEditText(final String placeholder, final boolean singleLine) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                EditText et = new EditText(ctx());
+                et.setHint(placeholder != null ? placeholder : "");
+                if (singleLine) {
+                    et.setInputType(InputType.TYPE_CLASS_TEXT
+                            | InputType.TYPE_TEXT_FLAG_NO_SUGGESTIONS);
+                    et.setMaxLines(1);
+                    et.setSingleLine(true);
+                } else {
+                    et.setInputType(InputType.TYPE_CLASS_TEXT
+                            | InputType.TYPE_TEXT_FLAG_MULTI_LINE);
+                    et.setMinLines(3);
+                    et.setSingleLine(false);
+                    et.setGravity(Gravity.TOP | Gravity.START);
+                }
+                et.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(et);
+            }
+        });
+    }
+
+    /**
+     * Create an ImageView, loading from a file path via BitmapFactory.
+     * If path is null/empty the ImageView is created with no image.
+     */
+    public static int createImageView(final String path) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                ImageView iv = new ImageView(ctx());
+                iv.setScaleType(ImageView.ScaleType.FIT_CENTER);
+                iv.setAdjustViewBounds(true);
+                if (path != null && !path.isEmpty()) {
+                    Bitmap bmp = BitmapFactory.decodeFile(path);
+                    if (bmp != null) {
+                        iv.setImageBitmap(bmp);
+                    } else {
+                        android.util.Log.w("ElBridge",
+                                "createImageView: failed to decode " + path);
+                    }
+                }
+                iv.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(iv);
+            }
+        });
+    }
+
+    /* ── Window operations ───────────────────────────────────────────────── */
+
+    /** Set the Activity's content view to the view at slot. */
+    public static void setContentView(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null && sActivity != null) {
+                    sActivity.setContentView(v);
+                }
+            }
+        });
+    }
+
+    /** Set the Activity title. */
+    public static void setTitle(final String title) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                if (sActivity != null) {
+                    sActivity.setTitle(title != null ? title : "");
+                }
+            }
+        });
+    }
+
+    /* ── Tree operations ─────────────────────────────────────────────────── */
+
+    /**
+     * Add child view to parent view.
+     * LinearLayout: child added as arranged child with spacing margin.
+     * ScrollView: child replaces current document view.
+     * FrameLayout / other ViewGroup: plain addView.
+     */
+    public static void addChild(final int parentSlot, final int childSlot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View parent = getView(parentSlot);
+                View child  = getView(childSlot);
+                if (parent == null || child == null) return;
+
+                /* Remove child from existing parent first. */
+                if (child.getParent() instanceof ViewGroup) {
+                    ((ViewGroup) child.getParent()).removeView(child);
+                }
+
+                if (parent instanceof LinearLayout) {
+                    LinearLayout ll = (LinearLayout) parent;
+                    Object tag = ll.getTag(R_TAG_SPACING);
+                    int spacing = (tag instanceof Integer) ? (Integer) tag : 0;
+                    LinearLayout.LayoutParams lp;
+                    Object existingLp = child.getLayoutParams();
+                    if (existingLp instanceof LinearLayout.LayoutParams) {
+                        lp = (LinearLayout.LayoutParams) existingLp;
+                    } else {
+                        lp = new LinearLayout.LayoutParams(
+                                ViewGroup.LayoutParams.WRAP_CONTENT,
+                                ViewGroup.LayoutParams.WRAP_CONTENT);
+                    }
+                    /* Apply spacing as margin on the leading/top edge (after first child). */
+                    if (ll.getChildCount() > 0 && spacing > 0) {
+                        int px = dpToPx(spacing);
+                        if (ll.getOrientation() == LinearLayout.VERTICAL) {
+                            lp.topMargin = px;
+                        } else {
+                            lp.leftMargin = px;
+                        }
+                    }
+                    child.setLayoutParams(lp);
+                    ll.addView(child);
+                } else if (parent instanceof ScrollView) {
+                    ScrollView sv = (ScrollView) parent;
+                    sv.removeAllViews();
+                    sv.addView(child);
+                } else if (parent instanceof ViewGroup) {
+                    ((ViewGroup) parent).addView(child);
+                }
+            }
+        });
+    }
+
+    /** Remove child from its parent. */
+    public static void removeChild(final int parentSlot, final int childSlot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View parent = getView(parentSlot);
+                View child  = getView(childSlot);
+                if (parent instanceof ViewGroup && child != null) {
+                    ((ViewGroup) parent).removeView(child);
+                }
+            }
+        });
+    }
+
+    /** Remove the view from its parent and release the slot. */
+    public static void destroyView(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                if (v.getParent() instanceof ViewGroup) {
+                    ((ViewGroup) v.getParent()).removeView(v);
+                }
+                sViews[slot] = null;
+            }
+        });
+    }
+
+    /* ── Property setters ────────────────────────────────────────────────── */
+
+    public static void setText(final int slot, final String text) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                String s = text != null ? text : "";
+                if (v instanceof EditText) {
+                    ((EditText) v).setText(s);
+                } else if (v instanceof Button) {
+                    ((Button) v).setText(s);
+                } else if (v instanceof TextView) {
+                    ((TextView) v).setText(s);
+                }
+            }
+        });
+    }
+
+    public static String getText(final int slot) {
+        final String[] result = { "" };
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v instanceof TextView) {
+                    CharSequence cs = ((TextView) v).getText();
+                    result[0] = cs != null ? cs.toString() : "";
+                }
+            }
+        });
+        return result[0];
+    }
+
+    /** Set foreground text color. Components in [0,1]. */
+    public static void setTextColor(final int slot, final float r, final float g,
+                                     final float b, final float a) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v instanceof TextView) {
+                    ((TextView) v).setTextColor(floatToArgb(r, g, b, a));
+                }
+            }
+        });
+    }
+
+    /** Set background color using a GradientDrawable so corner radius is preserved. */
+    public static void setBackgroundColor(final int slot, final float r, final float g,
+                                           final float b, final float a) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ensureGradientBackground(v);
+                GradientDrawable gd = (GradientDrawable) v.getBackground();
+                gd.setColor(floatToArgb(r, g, b, a));
+            }
+        });
+    }
+
+    /**
+     * Set font family and size.
+     * family: "system" or null → system default; otherwise tries to load by name.
+     * bold: if true uses Typeface.BOLD.
+     */
+    public static void setFont(final int slot, final String family,
+                                final int sizeSp, final boolean bold) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (!(v instanceof TextView)) return;
+                TextView tv = (TextView) v;
+                Typeface tf;
+                if (family != null && !family.isEmpty()
+                        && !family.equals("system")) {
+                    Typeface base = Typeface.create(family,
+                            bold ? Typeface.BOLD : Typeface.NORMAL);
+                    tf = (base != null) ? base
+                            : Typeface.defaultFromStyle(bold ? Typeface.BOLD : Typeface.NORMAL);
+                } else {
+                    tf = Typeface.defaultFromStyle(bold ? Typeface.BOLD : Typeface.NORMAL);
+                }
+                tv.setTypeface(tf);
+                tv.setTextSize(android.util.TypedValue.COMPLEX_UNIT_SP, sizeSp);
+            }
+        });
+    }
+
+    /** Set padding in dp. */
+    public static void setPadding(final int slot, final int top, final int right,
+                                   final int bottom, final int left) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null) {
+                    v.setPadding(dpToPx(left), dpToPx(top), dpToPx(right), dpToPx(bottom));
+                }
+            }
+        });
+    }
+
+    /** Set explicit width in dp. Passes MATCH_PARENT for negative values. */
+    public static void setWidth(final int slot, final int widthDp) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ViewGroup.LayoutParams lp = v.getLayoutParams();
+                if (lp == null) lp = new ViewGroup.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT);
+                lp.width = widthDp < 0
+                        ? ViewGroup.LayoutParams.MATCH_PARENT
+                        : dpToPx(widthDp);
+                v.setLayoutParams(lp);
+            }
+        });
+    }
+
+    /** Set explicit height in dp. */
+    public static void setHeight(final int slot, final int heightDp) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ViewGroup.LayoutParams lp = v.getLayoutParams();
+                if (lp == null) lp = new ViewGroup.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT);
+                lp.height = heightDp < 0
+                        ? ViewGroup.LayoutParams.MATCH_PARENT
+                        : dpToPx(heightDp);
+                v.setLayoutParams(lp);
+            }
+        });
+    }
+
+    /**
+     * Set flex weight on a child of a LinearLayout.
+     * flex > 0 → weight = flex, width/height = 0dp (expand).
+     * flex == 0 → weight = 0, wrap_content (shrink to content).
+     */
+    public static void setFlex(final int slot, final int flex) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ViewGroup.LayoutParams lp = v.getLayoutParams();
+                if (lp instanceof LinearLayout.LayoutParams) {
+                    LinearLayout.LayoutParams llp = (LinearLayout.LayoutParams) lp;
+                    if (flex > 0) {
+                        llp.weight = (float) flex;
+                        /* Determine orientation from parent to set 0dp on the right axis. */
+                        if (v.getParent() instanceof LinearLayout) {
+                            LinearLayout parent = (LinearLayout) v.getParent();
+                            if (parent.getOrientation() == LinearLayout.VERTICAL) {
+                                llp.height = 0;
+                            } else {
+                                llp.width = 0;
+                            }
+                        }
+                    } else {
+                        llp.weight = 0f;
+                    }
+                    v.setLayoutParams(llp);
+                }
+            }
+        });
+    }
+
+    /** Set corner radius in dp using a GradientDrawable background. */
+    public static void setCornerRadius(final int slot, final float radiusDp) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ensureGradientBackground(v);
+                GradientDrawable gd = (GradientDrawable) v.getBackground();
+                gd.setCornerRadius(dpToPxF(radiusDp));
+            }
+        });
+    }
+
+    public static void setEnabled(final int slot, final boolean enabled) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null) v.setEnabled(enabled);
+            }
+        });
+    }
+
+    /**
+     * Show or hide a view.
+     * @param visible true = VISIBLE, false = GONE (matches AppKit setHidden semantics)
+     */
+    public static void setVisibility(final int slot, final boolean visible) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null) v.setVisibility(visible ? View.VISIBLE : View.GONE);
+            }
+        });
+    }
+
+    /* ── Event listener registration ─────────────────────────────────────── */
+
+    /** Register an OnClickListener that calls back into C nativeOnClick. */
+    public static void setOnClickListener(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                final int capturedSlot = slot;
+                v.setOnClickListener(new View.OnClickListener() {
+                    @Override public void onClick(View view) {
+                        nativeOnClick(capturedSlot);
+                    }
+                });
+            }
+        });
+    }
+
+    /**
+     * Register a TextWatcher on an EditText that calls back nativeOnChange
+     * for every text change.
+     */
+    public static void setOnChangeListener(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (!(v instanceof EditText)) return;
+                final int capturedSlot = slot;
+                ((EditText) v).addTextChangedListener(new TextWatcher() {
+                    @Override public void beforeTextChanged(CharSequence s, int start,
+                                                             int count, int after) {}
+                    @Override public void onTextChanged(CharSequence s, int start,
+                                                         int before, int count) {}
+                    @Override public void afterTextChanged(Editable s) {
+                        nativeOnChange(capturedSlot, s != null ? s.toString() : "");
+                    }
+                });
+            }
+        });
+    }
+
+    /**
+     * Register an OnEditorActionListener on a single-line EditText that calls
+     * nativeOnSubmit when the user presses the action/enter key.
+     */
+    public static void setOnSubmitListener(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (!(v instanceof EditText)) return;
+                final int capturedSlot = slot;
+                ((EditText) v).setOnEditorActionListener(
+                        new TextView.OnEditorActionListener() {
+                    @Override
+                    public boolean onEditorAction(TextView tv, int actionId,
+                                                   android.view.KeyEvent event) {
+                        nativeOnSubmit(capturedSlot,
+                                tv.getText() != null ? tv.getText().toString() : "");
+                        return true;
+                    }
+                });
+            }
+        });
+    }
+
+    /* ── Internal helpers ─────────────────────────────────────────────────── */
+
+    /*
+     * Tag key used to stash the spacing value on LinearLayouts so addChild
+     * can apply the correct margin between children.
+     * We use a stable integer resource-id-like value; because we do not have
+     * a resources file here we use View.generateViewId() lazily.
+     */
+    private static int sSpacingTagKey = 0;
+
+    private static int R_TAG_SPACING;
+    static {
+        R_TAG_SPACING = View.generateViewId();
+    }
+
+    /** Convert dp to pixels using the Activity's display metrics. */
+    private static int dpToPx(float dp) {
+        if (sActivity == null) return (int) dp;
+        float density = sActivity.getResources().getDisplayMetrics().density;
+        return Math.round(dp * density);
+    }
+
+    private static float dpToPxF(float dp) {
+        if (sActivity == null) return dp;
+        float density = sActivity.getResources().getDisplayMetrics().density;
+        return dp * density;
+    }
+
+    /** Convert RGBA float components (0–1) to an Android ARGB int. */
+    private static int floatToArgb(float r, float g, float b, float a) {
+        int ai = Math.round(a * 255f);
+        int ri = Math.round(r * 255f);
+        int gi = Math.round(g * 255f);
+        int bi = Math.round(b * 255f);
+        return Color.argb(ai, ri, gi, bi);
+    }
+
+    /**
+     * Ensure the view has a GradientDrawable background so that both color
+     * and corner radius can be set independently.  If the current background
+     * is already a GradientDrawable it is reused; otherwise a new transparent
+     * one is installed.
+     */
+    private static void ensureGradientBackground(View v) {
+        if (!(v.getBackground() instanceof GradientDrawable)) {
+            GradientDrawable gd = new GradientDrawable();
+            gd.setColor(Color.TRANSPARENT);
+            v.setBackground(gd);
+        }
+    }
+}

ui/examples/native-hello-android/app/src/main/java/com/neuron/el/MainActivity.java

@@ -0,0 +1,38 @@
+package com.neuron.el;
+
+import android.app.Activity;
+import android.os.Bundle;
+
+/**
+ * MainActivity — entry point for native-hello-android.
+ *
+ * Loads the el native shared library, initialises ElBridge with the Activity
+ * reference (required before any widget operations), then hands control to the
+ * compiled el program via nativeMain().
+ *
+ * The el boot sequence (native_init → window_from_manifest → app_build →
+ * window_show) runs inside nativeMain. __native_run_loop is a no-op on Android;
+ * the Activity lifecycle owns the UI thread after onCreate returns.
+ */
+public class MainActivity extends Activity {
+
+    static {
+        System.loadLibrary("elnative");
+    }
+
+    @Override
+    protected void onCreate(Bundle savedInstanceState) {
+        super.onCreate(savedInstanceState);
+        // Register this Activity with the bridge BEFORE nativeMain so that
+        // el_android_init can look up ElBridge methods and __native_init works.
+        ElBridge.init(this);
+        // Run the compiled el program.
+        nativeMain();
+    }
+
+    /**
+     * Implemented in el_android.c as Java_com_neuron_el_MainActivity_nativeMain.
+     * Calls the el program's main(), which runs the full boot sequence.
+     */
+    private native void nativeMain();
+}

ui/examples/native-hello-android/app/src/main/jni/CMakeLists.txt

@@ -0,0 +1,57 @@
+cmake_minimum_required(VERSION 3.22.1)
+project("elnative")
+
+#
+# CMakeLists.txt for native-hello-android
+#
+# Sources:
+#   el_android.c        — Android JNI widget bridge
+#   el_seed.c           — OS-boundary __-prefixed primitives
+#   el_runtime.c        — High-level el builtins (str_len, json_*, etc.)
+#   el_native_vessel.c  — el-native vessel (compiled from vessels/el-native/src/main.el)
+#   native_hello.c      — App entry point (compiled from examples/native-hello/src/main.el)
+#
+# el_runtime.c and el_seed.c both define __-prefixed symbols. On Android the
+# linker accepts duplicate weak symbols; the shared library loads one copy.
+# The EL_TARGET_ANDROID guard in el_android.c ensures only the Android widget
+# backend is compiled in.
+#
+
+add_library(
+    elnative
+    SHARED
+
+    # native_hello.c listed first so its main() takes precedence over the
+    # vessel's main() when --allow-multiple-definition is in effect.
+    native_hello.c
+    el_native_vessel.c
+    el_android.c
+    el_seed.c
+    el_runtime.c
+)
+
+# EL_TARGET_ANDROID activates the Android JNI widget backend in el_android.c
+# and the corresponding guards in el_seed.c / el_native_target.h.
+target_compile_definitions(elnative PRIVATE
+    EL_TARGET_ANDROID
+)
+
+target_include_directories(elnative PRIVATE
+    ${CMAKE_CURRENT_SOURCE_DIR}
+)
+
+# el_runtime.c and el_seed.c both define __-prefixed OS-boundary symbols.
+# el_runtime.c's copies are weaker definitions; allow-multiple-definition lets
+# the linker pick one copy silently (el_seed.c listed later = its copy wins
+# in the Android linker's right-to-left resolution order).
+target_link_options(elnative PRIVATE
+    "-Wl,--allow-multiple-definition"
+)
+
+find_library(log-lib log)
+find_library(android-lib android)
+
+target_link_libraries(elnative
+    ${log-lib}
+    ${android-lib}
+)

ui/examples/native-hello-android/app/src/main/jni/el_android.c

@@ -0,0 +1,964 @@
+/*
+ * el_android.c — Android JNI backend for the el native widget system.
+ *
+ * This file implements the Android widget layer that el_seed.c calls through
+ * to when EL_TARGET_ANDROID is defined.  It is the exact Android counterpart
+ * to el_appkit.m and presents the same C API surface.
+ *
+ * Architecture:
+ *   el program (el code)
+ *       → __widget_* C builtins in el_seed.c
+ *           → el_android_* C-callable functions declared here
+ *               → ElBridge static methods in Java via JNI
+ *                   → android.view.View subclasses on the UI thread
+ *
+ * Widget handles: every widget (window root, view, control) is assigned an
+ * int64_t slot index into view_slots[].  The el program holds these as opaque
+ * Int values.  Slot 0 is never valid (null handle = -1 convention).
+ *
+ * Threading: Android requires all UI operations to run on the main (UI) thread.
+ * Every JNI call that mutates a View is dispatched through
+ * Activity.runOnUiThread(Runnable) if the current thread is not the UI thread.
+ * el_android_run_loop is a no-op — Android lifecycle is driven by the Activity.
+ *
+ * Callback mechanism: when a widget fires an event Java calls
+ *   nativeOnClick / nativeOnChange / nativeOnSubmit
+ * The C side looks up the registered El function name for that slot, then:
+ *   dlsym(RTLD_DEFAULT, fn_name)(widget_handle, event_data_string)
+ * This matches the __thread_create pattern in el_seed.c exactly.
+ *
+ * Compile / link (as part of libelruntime.so):
+ *   Compiled by the Android Gradle NDK build system with -DEL_TARGET_ANDROID.
+ *   Link flags: -landroid -llog -ldl
+ *
+ * Java companion: ElBridge.java in the same directory must be compiled into
+ * the Android application's APK (package com.neuron.el).
+ */
+
+#ifdef EL_TARGET_ANDROID
+
+#include <jni.h>
+#include <android/log.h>
+#include <stdint.h>
+#include <stdlib.h>
+#include <string.h>
+#include <dlfcn.h>
+#include "el_runtime.h"
+
+/* ── Logging ─────────────────────────────────────────────────────────────── */
+
+#define EL_TAG "ElAndroid"
+#define EL_LOGI(...) __android_log_print(ANDROID_LOG_INFO,  EL_TAG, __VA_ARGS__)
+#define EL_LOGW(...) __android_log_print(ANDROID_LOG_WARN,  EL_TAG, __VA_ARGS__)
+#define EL_LOGE(...) __android_log_print(ANDROID_LOG_ERROR, EL_TAG, __VA_ARGS__)
+
+/* ── JNI global state ────────────────────────────────────────────────────── */
+
+static JavaVM  *g_jvm          = NULL;
+static jobject  g_activity     = NULL;   /* global ref to Activity */
+static jclass   g_bridge_class = NULL;   /* global ref to ElBridge class */
+
+/* Cached method IDs on ElBridge — filled in el_android_init(). */
+static jmethodID g_mid_createLinearLayout  = NULL;
+static jmethodID g_mid_createFrameLayout   = NULL;
+static jmethodID g_mid_createScrollView    = NULL;
+static jmethodID g_mid_createTextView      = NULL;
+static jmethodID g_mid_createButton        = NULL;
+static jmethodID g_mid_createEditText      = NULL;
+static jmethodID g_mid_createImageView     = NULL;
+static jmethodID g_mid_setContentView      = NULL;
+static jmethodID g_mid_setTitle            = NULL;
+static jmethodID g_mid_addChild            = NULL;
+static jmethodID g_mid_removeChild         = NULL;
+static jmethodID g_mid_destroyView         = NULL;
+static jmethodID g_mid_setText             = NULL;
+static jmethodID g_mid_getText             = NULL;
+static jmethodID g_mid_setTextColor        = NULL;
+static jmethodID g_mid_setBackgroundColor  = NULL;
+static jmethodID g_mid_setFont             = NULL;
+static jmethodID g_mid_setPadding          = NULL;
+static jmethodID g_mid_setWidth            = NULL;
+static jmethodID g_mid_setHeight           = NULL;
+static jmethodID g_mid_setFlex             = NULL;
+static jmethodID g_mid_setCornerRadius     = NULL;
+static jmethodID g_mid_setEnabled          = NULL;
+static jmethodID g_mid_setVisibility       = NULL;
+static jmethodID g_mid_setOnClickListener  = NULL;
+static jmethodID g_mid_setOnChangeListener = NULL;
+static jmethodID g_mid_setOnSubmitListener = NULL;
+static jmethodID g_mid_runOnUiThread       = NULL;  /* Activity.runOnUiThread */
+
+/* ── Widget table ─────────────────────────────────────────────────────────── */
+
+#define EL_ANDROID_MAX_WIDGETS 4096
+
+typedef enum {
+    EL_WIDGET_FREE      = 0,
+    EL_WIDGET_WINDOW    = 1,
+    EL_WIDGET_VSTACK    = 2,
+    EL_WIDGET_HSTACK    = 3,
+    EL_WIDGET_ZSTACK    = 4,
+    EL_WIDGET_SCROLL    = 5,
+    EL_WIDGET_LABEL     = 6,
+    EL_WIDGET_BUTTON    = 7,
+    EL_WIDGET_TEXTFIELD = 8,
+    EL_WIDGET_TEXTAREA  = 9,
+    EL_WIDGET_IMAGE     = 10,
+} ElWidgetKind;
+
+typedef struct {
+    ElWidgetKind kind;
+    jint         slot;       /* Java-side slot index (matches C index) */
+    char        *cb_click;   /* El function name for click / submit events */
+    char        *cb_change;  /* El function name for value-change events */
+} ElWidget;
+
+static ElWidget _el_widgets[EL_ANDROID_MAX_WIDGETS];
+
+static int64_t el_widget_alloc(ElWidgetKind kind, jint slot) {
+    for (int i = 1; i < EL_ANDROID_MAX_WIDGETS; i++) {
+        if (_el_widgets[i].kind == EL_WIDGET_FREE) {
+            _el_widgets[i].kind      = kind;
+            _el_widgets[i].slot      = slot;
+            _el_widgets[i].cb_click  = NULL;
+            _el_widgets[i].cb_change = NULL;
+            return (int64_t)i;
+        }
+    }
+    EL_LOGE("el_widget_alloc: slot table full");
+    return -1;
+}
+
+static ElWidget *el_widget_get(int64_t handle) {
+    if (handle <= 0 || handle >= EL_ANDROID_MAX_WIDGETS) return NULL;
+    if (_el_widgets[handle].kind == EL_WIDGET_FREE)       return NULL;
+    return &_el_widgets[handle];
+}
+
+static void el_widget_free(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    w->kind = EL_WIDGET_FREE;
+    w->slot = -1;
+    free(w->cb_click);  w->cb_click  = NULL;
+    free(w->cb_change); w->cb_change = NULL;
+}
+
+/* ── JNI environment helpers ─────────────────────────────────────────────── */
+
+/*
+ * Obtain a JNIEnv for the calling thread.  Attaches the thread to the JVM if
+ * needed (detaches in el_jni_detach_if_attached — call in pairs).
+ */
+static int g_was_attached = 0;  /* thread-local would be cleaner but this is
+                                   safe for single-threaded el programs */
+
+static JNIEnv *el_jni_env(void) {
+    if (!g_jvm) return NULL;
+    JNIEnv *env = NULL;
+    jint rc = (*g_jvm)->GetEnv(g_jvm, (void **)&env, JNI_VERSION_1_6);
+    if (rc == JNI_OK)      { g_was_attached = 0; return env; }
+    if (rc == JNI_EDETACHED) {
+        if ((*g_jvm)->AttachCurrentThread(g_jvm, &env, NULL) == JNI_OK) {
+            g_was_attached = 1;
+            return env;
+        }
+    }
+    EL_LOGE("el_jni_env: failed to obtain JNIEnv");
+    return NULL;
+}
+
+static void el_jni_detach_if_attached(void) {
+    if (g_was_attached && g_jvm) {
+        (*g_jvm)->DetachCurrentThread(g_jvm);
+        g_was_attached = 0;
+    }
+}
+
+/* ── UI-thread dispatch ──────────────────────────────────────────────────── */
+/*
+ * Most ElBridge static methods already dispatch to the UI thread internally
+ * (they call Activity.runOnUiThread).  The helper below is available for
+ * cases where the caller needs to be sure the call has completed before
+ * returning (ElBridge methods marked "sync" use a CountDownLatch internally).
+ *
+ * For the current implementation we call ElBridge methods directly; ElBridge
+ * itself marshals to the UI thread via Activity.runOnUiThread + latch.
+ * This keeps the C side simple and mirrors the AppKit dispatch_sync pattern.
+ */
+
+/* ── JNI_OnLoad ──────────────────────────────────────────────────────────── */
+
+JNIEXPORT jint JNICALL JNI_OnLoad(JavaVM *vm, void *reserved) {
+    (void)reserved;
+    g_jvm = vm;
+    EL_LOGI("JNI_OnLoad: el Android bridge loaded");
+    return JNI_VERSION_1_6;
+}
+
+/* ── el_android_init ─────────────────────────────────────────────────────── */
+/*
+ * Called from __native_init().  The Activity must have already called
+ * ElBridge.registerActivity(activity) from Java before this runs, which sets
+ * g_activity via the nativeRegisterActivity JNI method below.
+ *
+ * Caches all method IDs used later so individual widget calls avoid repeated
+ * FindClass / GetStaticMethodID lookups.
+ */
+void el_android_init(void) {
+    static int done = 0;
+    if (done) return;
+    done = 1;
+
+    JNIEnv *env = el_jni_env();
+    if (!env) { EL_LOGE("el_android_init: no JNIEnv"); return; }
+
+    jclass cls = (*env)->FindClass(env, "com/neuron/el/ElBridge");
+    if (!cls) { EL_LOGE("el_android_init: ElBridge class not found"); return; }
+    g_bridge_class = (*env)->NewGlobalRef(env, cls);
+    (*env)->DeleteLocalRef(env, cls);
+
+#define CACHE_STATIC(var, name, sig) \
+    var = (*env)->GetStaticMethodID(env, g_bridge_class, name, sig); \
+    if (!var) EL_LOGW("el_android_init: method not found: %s %s", name, sig)
+
+    CACHE_STATIC(g_mid_createLinearLayout,  "createLinearLayout",  "(II)I");
+    CACHE_STATIC(g_mid_createFrameLayout,   "createFrameLayout",   "()I");
+    CACHE_STATIC(g_mid_createScrollView,    "createScrollView",     "()I");
+    CACHE_STATIC(g_mid_createTextView,      "createTextView",       "(Ljava/lang/String;)I");
+    CACHE_STATIC(g_mid_createButton,        "createButton",         "(Ljava/lang/String;)I");
+    CACHE_STATIC(g_mid_createEditText,      "createEditText",       "(Ljava/lang/String;Z)I");
+    CACHE_STATIC(g_mid_createImageView,     "createImageView",      "(Ljava/lang/String;)I");
+    CACHE_STATIC(g_mid_setContentView,      "setContentView",       "(I)V");
+    CACHE_STATIC(g_mid_setTitle,            "setTitle",             "(Ljava/lang/String;)V");
+    CACHE_STATIC(g_mid_addChild,            "addChild",             "(II)V");
+    CACHE_STATIC(g_mid_removeChild,         "removeChild",          "(II)V");
+    CACHE_STATIC(g_mid_destroyView,         "destroyView",          "(I)V");
+    CACHE_STATIC(g_mid_setText,             "setText",              "(ILjava/lang/String;)V");
+    CACHE_STATIC(g_mid_getText,             "getText",              "(I)Ljava/lang/String;");
+    CACHE_STATIC(g_mid_setTextColor,        "setTextColor",         "(IFFFF)V");
+    CACHE_STATIC(g_mid_setBackgroundColor,  "setBackgroundColor",   "(IFFFF)V");
+    CACHE_STATIC(g_mid_setFont,             "setFont",              "(ILjava/lang/String;IZ)V");
+    CACHE_STATIC(g_mid_setPadding,          "setPadding",           "(IIIII)V");
+    CACHE_STATIC(g_mid_setWidth,            "setWidth",             "(II)V");
+    CACHE_STATIC(g_mid_setHeight,           "setHeight",            "(II)V");
+    CACHE_STATIC(g_mid_setFlex,             "setFlex",              "(II)V");
+    CACHE_STATIC(g_mid_setCornerRadius,     "setCornerRadius",      "(IF)V");
+    CACHE_STATIC(g_mid_setEnabled,          "setEnabled",           "(IZ)V");
+    CACHE_STATIC(g_mid_setVisibility,       "setVisibility",        "(IZ)V");
+    CACHE_STATIC(g_mid_setOnClickListener,  "setOnClickListener",   "(I)V");
+    CACHE_STATIC(g_mid_setOnChangeListener, "setOnChangeListener",  "(I)V");
+    CACHE_STATIC(g_mid_setOnSubmitListener, "setOnSubmitListener",  "(I)V");
+#undef CACHE_STATIC
+
+    el_jni_detach_if_attached();
+    EL_LOGI("el_android_init: complete");
+}
+
+/* ── JNI: Activity registration ─────────────────────────────────────────── */
+
+/*
+ * Called from Java: ElBridge.registerActivity(activity) calls back here.
+ * Stores a global reference to the Activity so C code can dispatch to it.
+ */
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeRegisterActivity(JNIEnv *env, jclass cls,
+                                                    jobject activity) {
+    (void)cls;
+    if (g_activity) {
+        (*env)->DeleteGlobalRef(env, g_activity);
+        g_activity = NULL;
+    }
+    if (activity) {
+        g_activity = (*env)->NewGlobalRef(env, activity);
+        EL_LOGI("nativeRegisterActivity: activity registered");
+    }
+}
+
+/* ── El callback invocation ──────────────────────────────────────────────── */
+/*
+ * Invoke an El callback by symbol name.
+ * Signature matches AppKit: fn(handle: Int, data: String) -> Void
+ *   compiled to: void fn(el_val_t handle, el_val_t data)
+ */
+typedef void (*ElCb2)(int64_t handle, int64_t data);
+
+static void el_android_invoke_cb(const char *fn_name, int64_t handle,
+                                  const char *data) {
+    if (!fn_name || !*fn_name) return;
+    void *sym = dlsym(RTLD_DEFAULT, fn_name);
+    if (!sym) { EL_LOGW("invoke_cb: symbol not found: %s", fn_name); return; }
+    ElCb2 fn = (ElCb2)sym;
+    fn(handle, (int64_t)(uintptr_t)(data ? data : ""));
+}
+
+/* ── JNI: callbacks from Java → C ───────────────────────────────────────── */
+
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeOnClick(JNIEnv *env, jclass cls, jint slot) {
+    (void)env; (void)cls;
+    int64_t handle = (int64_t)slot;
+    ElWidget *w = el_widget_get(handle);
+    if (w && w->cb_click) {
+        el_android_invoke_cb(w->cb_click, handle, "");
+    }
+}
+
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeOnChange(JNIEnv *env, jclass cls,
+                                            jint slot, jstring text) {
+    (void)cls;
+    int64_t handle = (int64_t)slot;
+    ElWidget *w = el_widget_get(handle);
+    if (w && w->cb_change) {
+        const char *ctext = text ? (*env)->GetStringUTFChars(env, text, NULL) : "";
+        el_android_invoke_cb(w->cb_change, handle, ctext);
+        if (text) (*env)->ReleaseStringUTFChars(env, text, ctext);
+    }
+}
+
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeOnSubmit(JNIEnv *env, jclass cls,
+                                            jint slot, jstring text) {
+    (void)cls;
+    int64_t handle = (int64_t)slot;
+    ElWidget *w = el_widget_get(handle);
+    if (w && w->cb_click) {   /* submit stored in cb_click, same as AppKit */
+        const char *ctext = text ? (*env)->GetStringUTFChars(env, text, NULL) : "";
+        el_android_invoke_cb(w->cb_click, handle, ctext);
+        if (text) (*env)->ReleaseStringUTFChars(env, text, ctext);
+    }
+}
+
+/* ── Helper: jstring from C string ──────────────────────────────────────── */
+
+static jstring el_jstr(JNIEnv *env, const char *s) {
+    return (*env)->NewStringUTF(env, s ? s : "");
+}
+
+/* ── Window ──────────────────────────────────────────────────────────────── */
+
+/*
+ * el_android_window_create — on Android a "window" is the root LinearLayout
+ * set as the Activity's content view.  We create a vertical LinearLayout and
+ * store it.  el_android_window_show calls setContentView on the Activity.
+ */
+int64_t el_android_window_create(const char *title, int width, int height,
+                                  int min_width, int min_height) {
+    (void)width; (void)height; (void)min_width; (void)min_height;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+
+    /* VERTICAL LinearLayout with no spacing (spacing added via margins in Java) */
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createLinearLayout,
+                                            (jint)1 /* VERTICAL */, (jint)0);
+    if ((*env)->ExceptionCheck(env)) {
+        (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1;
+    }
+
+    /* Set activity title */
+    if (g_mid_setTitle && title) {
+        jstring jtitle = el_jstr(env, title);
+        (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setTitle, jtitle);
+        (*env)->DeleteLocalRef(env, jtitle);
+    }
+
+    int64_t handle = el_widget_alloc(EL_WIDGET_WINDOW, (int)slot);
+    el_jni_detach_if_attached();
+    return handle;
+}
+
+void el_android_window_show(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w || w->kind != EL_WIDGET_WINDOW) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setContentView,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_window_set_title(int64_t handle, const char *title) {
+    (void)handle;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    jstring jtitle = el_jstr(env, title);
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setTitle, jtitle);
+    (*env)->DeleteLocalRef(env, jtitle);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Layout containers ───────────────────────────────────────────────────── */
+
+int64_t el_android_vstack_create(int spacing) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createLinearLayout,
+                                            (jint)1 /* VERTICAL */, (jint)spacing);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_VSTACK, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_hstack_create(int spacing) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createLinearLayout,
+                                            (jint)0 /* HORIZONTAL */, (jint)spacing);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_HSTACK, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_zstack_create(void) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createFrameLayout);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_ZSTACK, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_scroll_create(void) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createScrollView);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_SCROLL, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+/* ── Widget factories ─────────────────────────────────────────────────────── */
+
+int64_t el_android_label_create(const char *text) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jt = el_jstr(env, text);
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createTextView, jt);
+    (*env)->DeleteLocalRef(env, jt);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_LABEL, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_button_create(const char *label) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jl = el_jstr(env, label);
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createButton, jl);
+    (*env)->DeleteLocalRef(env, jl);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_BUTTON, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_text_field_create(const char *placeholder) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jp = el_jstr(env, placeholder);
+    /* singleLine = true */
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createEditText, jp, (jboolean)JNI_TRUE);
+    (*env)->DeleteLocalRef(env, jp);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_TEXTFIELD, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_text_area_create(const char *placeholder) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jp = el_jstr(env, placeholder);
+    /* singleLine = false → multiline EditText */
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createEditText, jp, (jboolean)JNI_FALSE);
+    (*env)->DeleteLocalRef(env, jp);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_TEXTAREA, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_image_create(const char *path) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jp = el_jstr(env, path);
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createImageView, jp);
+    (*env)->DeleteLocalRef(env, jp);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_IMAGE, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+/* ── Widget property setters ─────────────────────────────────────────────── */
+
+void el_android_widget_set_text(int64_t handle, const char *text) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    jstring jt = el_jstr(env, text);
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setText,
+                                 (jint)w->slot, jt);
+    (*env)->DeleteLocalRef(env, jt);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+const char *el_android_widget_get_text(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return "";
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return "";
+    jstring js = (jstring)(*env)->CallStaticObjectMethod(env, g_bridge_class,
+                                                          g_mid_getText,
+                                                          (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return ""; }
+    const char *result = "";
+    if (js) {
+        const char *cstr = (*env)->GetStringUTFChars(env, js, NULL);
+        result = cstr ? strdup(cstr) : "";
+        if (cstr) (*env)->ReleaseStringUTFChars(env, js, cstr);
+        (*env)->DeleteLocalRef(env, js);
+    }
+    el_jni_detach_if_attached();
+    return result;
+}
+
+void el_android_widget_set_color(int64_t handle, float r, float g, float b, float a) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setTextColor,
+                                 (jint)w->slot, (jfloat)r, (jfloat)g,
+                                 (jfloat)b, (jfloat)a);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_bg_color(int64_t handle, float r, float g, float b, float a) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setBackgroundColor,
+                                 (jint)w->slot, (jfloat)r, (jfloat)g,
+                                 (jfloat)b, (jfloat)a);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_font(int64_t handle, const char *family, int size, int bold) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    jstring jfam = el_jstr(env, family);
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setFont,
+                                 (jint)w->slot, jfam, (jint)size,
+                                 (jboolean)(bold ? JNI_TRUE : JNI_FALSE));
+    (*env)->DeleteLocalRef(env, jfam);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_padding(int64_t handle, int top, int right, int bottom, int left) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setPadding,
+                                 (jint)w->slot, (jint)top, (jint)right,
+                                 (jint)bottom, (jint)left);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_width(int64_t handle, int width) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setWidth,
+                                 (jint)w->slot, (jint)width);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_height(int64_t handle, int height) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setHeight,
+                                 (jint)w->slot, (jint)height);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_flex(int64_t handle, int flex) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setFlex,
+                                 (jint)w->slot, (jint)flex);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_corner_radius(int64_t handle, int radius) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setCornerRadius,
+                                 (jint)w->slot, (jfloat)radius);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_disabled(int64_t handle, int disabled) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setEnabled,
+                                 (jint)w->slot,
+                                 (jboolean)(disabled ? JNI_FALSE : JNI_TRUE));
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_hidden(int64_t handle, int hidden) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    /* visible=true means NOT hidden */
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setVisibility,
+                                 (jint)w->slot,
+                                 (jboolean)(hidden ? JNI_FALSE : JNI_TRUE));
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Child management ─────────────────────────────────────────────────────── */
+
+void el_android_widget_add_child(int64_t parent, int64_t child) {
+    ElWidget *pw = el_widget_get(parent);
+    ElWidget *cw = el_widget_get(child);
+    if (!pw || !cw) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_addChild,
+                                 (jint)pw->slot, (jint)cw->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_remove_child(int64_t parent, int64_t child) {
+    ElWidget *pw = el_widget_get(parent);
+    ElWidget *cw = el_widget_get(child);
+    if (!pw || !cw) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_removeChild,
+                                 (jint)pw->slot, (jint)cw->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Event registration ───────────────────────────────────────────────────── */
+
+void el_android_widget_on_click(int64_t handle, const char *fn_name) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_click);
+    w->cb_click = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+    if (!w->cb_click) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setOnClickListener,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_on_change(int64_t handle, const char *fn_name) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_change);
+    w->cb_change = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+    if (!w->cb_change) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setOnChangeListener,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_on_submit(int64_t handle, const char *fn_name) {
+    /* Submit stored in cb_click, same as AppKit. */
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_click);
+    w->cb_click = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+    if (!w->cb_click) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setOnSubmitListener,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Widget destroy ───────────────────────────────────────────────────────── */
+
+void el_android_widget_destroy(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (env && g_bridge_class) {
+        (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_destroyView,
+                                     (jint)w->slot);
+        if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    }
+    el_widget_free(handle);
+    el_jni_detach_if_attached();
+}
+
+/* ── Manifest reader ─────────────────────────────────────────────────────── */
+/*
+ * __manifest_read: parse the app{} block from a manifest file.
+ * Returns the raw file contents as an el_val_t (const char* cast).
+ * The caller (el program) parses the returned string.
+ * Reads from the filesystem; for APK assets use the AssetManager path instead.
+ */
+static char *el_read_file(const char *path) {
+    if (!path || !*path) return NULL;
+    FILE *f = fopen(path, "rb");
+    if (!f) return NULL;
+    fseek(f, 0, SEEK_END);
+    long len = ftell(f);
+    fseek(f, 0, SEEK_SET);
+    if (len <= 0) { fclose(f); return NULL; }
+    char *buf = (char *)malloc((size_t)len + 1);
+    if (!buf) { fclose(f); return NULL; }
+    fread(buf, 1, (size_t)len, f);
+    buf[len] = '\0';
+    fclose(f);
+    return buf;
+}
+
+el_val_t el_android_manifest_read(const char *path) {
+    char *contents = el_read_file(path);
+    if (!contents) return (el_val_t)(uintptr_t)"";
+    return (el_val_t)(uintptr_t)contents;  /* caller owns allocation */
+}
+
+/* ── __widget_* C API (called from el_seed.c) ────────────────────────────── */
+/*
+ * These are the functions declared in el_native_target.h under EL_TARGET_ANDROID.
+ * They forward to the el_android_* internal functions above.
+ *
+ * The el_val_t / int64_t ABI matches the AppKit functions exactly:
+ *   - Integer params passed as int64_t, extracted with (int)
+ *   - String params passed as int64_t, extracted with (const char*)(uintptr_t)
+ *   - Float params (r,g,b,a) passed as int64_t bit-cast from double; extracted
+ *     with el_to_float / bit-cast union
+ */
+
+static inline float el_val_to_float(el_val_t v) {
+    union { double d; int64_t i; } u;
+    u.i = v;
+    return (float)u.d;
+}
+
+void __native_init(void) {
+    el_android_init();
+}
+
+void __native_run_loop(void) {
+    /* No-op on Android — lifecycle is driven by the Activity. */
+}
+
+el_val_t __window_create(el_val_t title, el_val_t width, el_val_t height,
+                          el_val_t min_width, el_val_t min_height) {
+    return (el_val_t)el_android_window_create(
+        (const char *)(uintptr_t)title,
+        (int)width, (int)height, (int)min_width, (int)min_height);
+}
+
+void __window_show(el_val_t handle) {
+    el_android_window_show((int64_t)handle);
+}
+
+void __window_set_title(el_val_t handle, el_val_t title) {
+    el_android_window_set_title((int64_t)handle,
+                                (const char *)(uintptr_t)title);
+}
+
+el_val_t __vstack_create(el_val_t spacing) {
+    return (el_val_t)el_android_vstack_create((int)spacing);
+}
+
+el_val_t __hstack_create(el_val_t spacing) {
+    return (el_val_t)el_android_hstack_create((int)spacing);
+}
+
+el_val_t __zstack_create(void) {
+    return (el_val_t)el_android_zstack_create();
+}
+
+el_val_t __scroll_create(void) {
+    return (el_val_t)el_android_scroll_create();
+}
+
+el_val_t __label_create(el_val_t text) {
+    return (el_val_t)el_android_label_create((const char *)(uintptr_t)text);
+}
+
+el_val_t __button_create(el_val_t label) {
+    return (el_val_t)el_android_button_create((const char *)(uintptr_t)label);
+}
+
+el_val_t __text_field_create(el_val_t placeholder) {
+    return (el_val_t)el_android_text_field_create((const char *)(uintptr_t)placeholder);
+}
+
+el_val_t __text_area_create(el_val_t placeholder) {
+    return (el_val_t)el_android_text_area_create((const char *)(uintptr_t)placeholder);
+}
+
+el_val_t __image_create(el_val_t path_or_name) {
+    return (el_val_t)el_android_image_create((const char *)(uintptr_t)path_or_name);
+}
+
+void __widget_set_text(el_val_t handle, el_val_t text) {
+    el_android_widget_set_text((int64_t)handle,
+                               (const char *)(uintptr_t)text);
+}
+
+el_val_t __widget_get_text(el_val_t handle) {
+    return (el_val_t)(uintptr_t)el_android_widget_get_text((int64_t)handle);
+}
+
+void __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                         el_val_t b, el_val_t a) {
+    el_android_widget_set_color((int64_t)handle,
+                                el_val_to_float(r), el_val_to_float(g),
+                                el_val_to_float(b), el_val_to_float(a));
+}
+
+void __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                            el_val_t b, el_val_t a) {
+    el_android_widget_set_bg_color((int64_t)handle,
+                                   el_val_to_float(r), el_val_to_float(g),
+                                   el_val_to_float(b), el_val_to_float(a));
+}
+
+void __widget_set_font(el_val_t handle, el_val_t family,
+                        el_val_t size, el_val_t bold) {
+    el_android_widget_set_font((int64_t)handle,
+                               (const char *)(uintptr_t)family,
+                               (int)size, (int)bold);
+}
+
+void __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                           el_val_t bottom, el_val_t left) {
+    el_android_widget_set_padding((int64_t)handle,
+                                  (int)top, (int)right, (int)bottom, (int)left);
+}
+
+void __widget_set_width(el_val_t handle, el_val_t width) {
+    el_android_widget_set_width((int64_t)handle, (int)width);
+}
+
+void __widget_set_height(el_val_t handle, el_val_t height) {
+    el_android_widget_set_height((int64_t)handle, (int)height);
+}
+
+void __widget_set_flex(el_val_t handle, el_val_t flex) {
+    el_android_widget_set_flex((int64_t)handle, (int)flex);
+}
+
+void __widget_set_corner_radius(el_val_t handle, el_val_t radius) {
+    el_android_widget_set_corner_radius((int64_t)handle, (int)radius);
+}
+
+void __widget_set_disabled(el_val_t handle, el_val_t disabled) {
+    el_android_widget_set_disabled((int64_t)handle, (int)disabled);
+}
+
+void __widget_set_hidden(el_val_t handle, el_val_t hidden) {
+    el_android_widget_set_hidden((int64_t)handle, (int)hidden);
+}
+
+void __widget_add_child(el_val_t parent, el_val_t child) {
+    el_android_widget_add_child((int64_t)parent, (int64_t)child);
+}
+
+void __widget_remove_child(el_val_t parent, el_val_t child) {
+    el_android_widget_remove_child((int64_t)parent, (int64_t)child);
+}
+
+void __widget_destroy(el_val_t handle) {
+    el_android_widget_destroy((int64_t)handle);
+}
+
+void __widget_on_click(el_val_t handle, el_val_t fn_name) {
+    el_android_widget_on_click((int64_t)handle,
+                               (const char *)(uintptr_t)fn_name);
+}
+
+void __widget_on_change(el_val_t handle, el_val_t fn_name) {
+    el_android_widget_on_change((int64_t)handle,
+                                (const char *)(uintptr_t)fn_name);
+}
+
+void __widget_on_submit(el_val_t handle, el_val_t fn_name) {
+    el_android_widget_on_submit((int64_t)handle,
+                                (const char *)(uintptr_t)fn_name);
+}
+
+el_val_t __manifest_read(el_val_t path) {
+    return el_android_manifest_read((const char *)(uintptr_t)path);
+}
+
+/* ── MainActivity JNI entry point ─────────────────────────────────────────── */
+/*
+ * Java_com_neuron_el_MainActivity_nativeMain — invoked from MainActivity.onCreate
+ * after ElBridge.init(this).  Calls the el program's compiled main() which runs
+ * the boot sequence: native_init → window_from_manifest → app_build → window_show.
+ * __native_run_loop is a no-op on Android; the Activity lifecycle drives the UI.
+ */
+JNIEXPORT void JNICALL
+Java_com_neuron_el_MainActivity_nativeMain(JNIEnv *env, jobject obj) {
+    (void)env; (void)obj;
+    extern int main(int argc, char **argv);
+    char *argv[] = {"el-app", NULL};
+    main(1, argv);
+}
+
+#endif /* EL_TARGET_ANDROID */

ui/examples/native-hello-android/app/src/main/jni/el_native_target.h

@@ -0,0 +1,573 @@
+/*
+ * el_native_target.h — Native widget declarations for el programs targeting
+ * native desktop UI (AppKit / GTK4 / Win32).
+ *
+ * This header is designed to be included AFTER el_runtime.h without conflict:
+ *   - It does NOT redefine el_to_float, el_from_float, or any el_runtime.h
+ *     static inlines.
+ *   - It does NOT redeclare __println, __print, or other functions whose
+ *     return types differ between el_seed.h and el_runtime.h.
+ *   - It adds: native widget builtins + float arithmetic helpers that the
+ *     current el_runtime.h omits but elc still emits calls to.
+ *
+ * Usage:
+ *   Inject via -include at compile time, OR #include it after el_runtime.h.
+ *
+ *   clang -DEL_TARGET_MACOS -include el_native_target.h -c my_app.c ...
+ */
+
+#pragma once
+
+#include <stdint.h>
+#include <stdlib.h>
+
+/* el_val_t must already be defined by el_runtime.h or el_seed.h. */
+#ifndef EL_VAL_T_DEFINED
+typedef int64_t el_val_t;
+#endif
+
+/* ── Float arithmetic helpers ───────────────────────────────────────────────
+ * elc emits calls to float_div / float_mul etc. for Float-typed expressions.
+ * These were in el_runtime.c through v1.0.0-20260501 but are missing from the
+ * current el_runtime.h. Redeclared here as static inline to avoid link deps.
+ * Only defined if not already declared (old runtimes that still have them). */
+
+#ifndef EL_FLOAT_OPS_DEFINED
+#define EL_FLOAT_OPS_DEFINED
+
+/* el_to_float / el_from_float — bit-cast between el_val_t and double.
+ * Defined as static inline in both el_runtime.h and el_seed.h; we do NOT
+ * redefine them here. We rely on one of those headers being included first. */
+
+static inline el_val_t float_div(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b;
+    ur.d = (ub.d != 0.0) ? (ua.d / ub.d) : 0.0;
+    return ur.i;
+}
+
+static inline el_val_t float_mul(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d * ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_add(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d + ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_sub(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d - ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_lt(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d < ub.d);
+}
+
+static inline el_val_t float_gt(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d > ub.d);
+}
+
+static inline el_val_t float_lte(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d <= ub.d);
+}
+
+static inline el_val_t float_gte(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d >= ub.d);
+}
+
+static inline el_val_t float_eq(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d == ub.d);
+}
+
+#endif /* EL_FLOAT_OPS_DEFINED */
+
+/* ── Native widget system (macOS AppKit) ────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_MACOS and linked with el_appkit.m.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid. */
+
+#ifdef EL_TARGET_MACOS
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_MACOS */
+
+/* ── Native widget system (Linux GTK4) ──────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_LINUX and linked with el_gtk4.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ * All functions have the same signatures as EL_TARGET_MACOS above. */
+
+#ifdef EL_TARGET_LINUX
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader — same JSON output as EL_TARGET_MACOS */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_LINUX */
+
+/* ── Native widget system (Windows Win32) ───────────────────────────────────
+ * Available when compiled with -DEL_TARGET_WIN32 and linked with el_win32.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ * Link: el_win32.obj comctl32.lib user32.lib gdi32.lib */
+
+#ifdef EL_TARGET_WIN32
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_WIN32 */
+
+/* ── Native widget system (iOS UIKit) ───────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_IOS and linked with el_uikit.m.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * iOS lifecycle note: UIApplicationMain never returns. The el program must
+ * store its UI-build logic in a void(*)(void) function pointer, assign it to
+ * el_main_entry_fn, then call __native_run_loop. ElAppDelegate invokes
+ * el_main_entry_fn inside didFinishLaunchingWithOptions.
+ * Call el_uikit_set_args(argc, argv) from main() before __native_run_loop. */
+
+#ifdef EL_TARGET_IOS
+
+/* Lifecycle entry-function hook — set before calling __native_run_loop. */
+extern void (*el_main_entry_fn)(void);
+
+/* Forward argc/argv from main() to UIApplicationMain. */
+void      el_uikit_set_args(int argc, char** argv);
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_IOS */
+
+/* ── Native widget system (Android JNI) ─────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_ANDROID and linked with
+ * libelruntime.so (which includes el_android.c compiled by the NDK build).
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Java companion: ElBridge.java (package com.neuron.el) must be compiled into
+ * the APK. The Activity must call ElBridge.init(this) before any widget ops.
+ *
+ * Link flags (in Android.mk or CMakeLists.txt):
+ *   -landroid -llog -ldl */
+
+#ifdef EL_TARGET_ANDROID
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);   /* no-op on Android */
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_ANDROID */
+
+/* ── Native widget system (LVGL v9 — embedded / microcontroller) ─────────────
+ * Available when compiled with -DEL_TARGET_LVGL and linked with el_lvgl.c
+ * and the LVGL library (lvgl.a or lvgl source tree).
+ *
+ * Target platforms: ESP32, STM32, industrial panels. Any system with 256KB+
+ * RAM and an LVGL-compatible display driver. No OS required.
+ *
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Bare-metal / no dynamic linker:
+ *   Compile with -DEL_LVGL_NO_DLSYM and provide:
+ *     el_val_t el_lvgl_dispatch(const char *fn, el_val_t a, el_val_t b);
+ *
+ * Compile:
+ *   gcc -DEL_TARGET_LVGL -I./lvgl el_lvgl.c -c -o el_lvgl.o
+ *   # Then link with lvgl.a. */
+
+#ifdef EL_TARGET_LVGL
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader — same JSON output as all other native targets */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_LVGL */
+
+/* ── Native widget system (SDL2 — embedded / Pi) ────────────────────────────
+ * Available when compiled with -DEL_TARGET_SDL2 and linked with el_sdl2.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Target: Raspberry Pi Zero, embedded Linux, any system with a framebuffer
+ * and SDL2 available. No GTK, no desktop environment required.
+ *
+ * Compile:
+ *   gcc -DEL_TARGET_SDL2 $(sdl2-config --cflags) -c el_sdl2.c -o el_sdl2.o
+ * Link:
+ *   $(sdl2-config --libs) -lSDL2_ttf -lSDL2_image -ldl */
+
+#ifdef EL_TARGET_SDL2
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_SDL2 */

ui/examples/native-hello-android/app/src/main/jni/el_native_vessel.c

@@ -0,0 +1,459 @@
+#include <stdint.h>
+#include <stdlib.h>
+#include "el_runtime.h"
+
+el_val_t native_init(void);
+el_val_t native_run_loop(void);
+el_val_t manifest_read(el_val_t path);
+el_val_t manifest_title(el_val_t m);
+el_val_t manifest_width(el_val_t m);
+el_val_t manifest_height(el_val_t m);
+el_val_t manifest_min_width(el_val_t m);
+el_val_t manifest_min_height(el_val_t m);
+el_val_t window_create(el_val_t title, el_val_t width, el_val_t height, el_val_t min_width, el_val_t min_height);
+el_val_t window_from_manifest(el_val_t manifest_path);
+el_val_t window_show(el_val_t handle);
+el_val_t window_set_title(el_val_t handle, el_val_t title);
+el_val_t vstack(el_val_t spacing);
+el_val_t vstack_tight(void);
+el_val_t hstack(el_val_t spacing);
+el_val_t zstack(void);
+el_val_t scroll(void);
+el_val_t label(el_val_t text);
+el_val_t button(el_val_t label);
+el_val_t text_field(el_val_t placeholder);
+el_val_t text_area(el_val_t placeholder);
+el_val_t image(el_val_t path_or_name);
+el_val_t widget_set_text(el_val_t handle, el_val_t text);
+el_val_t widget_get_text(el_val_t handle);
+el_val_t widget_set_color(el_val_t handle, el_val_t r, el_val_t g, el_val_t b, el_val_t a);
+el_val_t widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g, el_val_t b, el_val_t a);
+el_val_t widget_set_font(el_val_t handle, el_val_t family, el_val_t size, el_val_t bold);
+el_val_t widget_set_padding(el_val_t handle, el_val_t top, el_val_t right, el_val_t bottom, el_val_t left);
+el_val_t widget_set_padding_all(el_val_t handle, el_val_t p);
+el_val_t widget_set_padding_xy(el_val_t handle, el_val_t px, el_val_t py);
+el_val_t widget_set_width(el_val_t handle, el_val_t width);
+el_val_t widget_set_height(el_val_t handle, el_val_t height);
+el_val_t widget_set_flex(el_val_t handle, el_val_t flex);
+el_val_t widget_set_corner_radius(el_val_t handle, el_val_t radius);
+el_val_t widget_set_disabled(el_val_t handle, el_val_t disabled);
+el_val_t widget_set_hidden(el_val_t handle, el_val_t hidden);
+el_val_t widget_add_child(el_val_t parent, el_val_t child);
+el_val_t widget_remove_child(el_val_t parent, el_val_t child);
+el_val_t widget_destroy(el_val_t handle);
+el_val_t widget_on_click(el_val_t handle, el_val_t fn_name);
+el_val_t widget_on_change(el_val_t handle, el_val_t fn_name);
+el_val_t widget_on_submit(el_val_t handle, el_val_t fn_name);
+el_val_t hex_channel(el_val_t s, el_val_t offset);
+el_val_t hex_nibble(el_val_t c);
+el_val_t color_hex_r(el_val_t hex);
+el_val_t color_hex_g(el_val_t hex);
+el_val_t color_hex_b(el_val_t hex);
+el_val_t color_hex_a(el_val_t hex);
+el_val_t widget_set_color_hex(el_val_t handle, el_val_t hex);
+el_val_t widget_set_bg_color_hex(el_val_t handle, el_val_t hex);
+el_val_t style_surface(el_val_t handle);
+el_val_t style_button_primary(el_val_t handle);
+el_val_t style_label_body(el_val_t handle);
+el_val_t style_label_heading(el_val_t handle);
+el_val_t style_label_muted(el_val_t handle);
+
+el_val_t TOKEN_PRIMARY;
+el_val_t TOKEN_ON_PRIMARY;
+el_val_t TOKEN_BACKGROUND;
+el_val_t TOKEN_ON_BG;
+el_val_t TOKEN_SURFACE;
+el_val_t TOKEN_ON_SURFACE;
+el_val_t TOKEN_OUTLINE;
+el_val_t TOKEN_ERROR;
+
+el_val_t native_init(void) {
+  __native_init();
+  return 0;
+}
+
+el_val_t native_run_loop(void) {
+  __native_run_loop();
+  return 0;
+}
+
+el_val_t manifest_read(el_val_t path) {
+  return __manifest_read(path);
+  return 0;
+}
+
+el_val_t manifest_title(el_val_t m) {
+  return json_get_string(m, EL_STR("title"));
+  return 0;
+}
+
+el_val_t manifest_width(el_val_t m) {
+  return json_get_int(m, EL_STR("width"));
+  return 0;
+}
+
+el_val_t manifest_height(el_val_t m) {
+  return json_get_int(m, EL_STR("height"));
+  return 0;
+}
+
+el_val_t manifest_min_width(el_val_t m) {
+  return json_get_int(m, EL_STR("min_width"));
+  return 0;
+}
+
+el_val_t manifest_min_height(el_val_t m) {
+  return json_get_int(m, EL_STR("min_height"));
+  return 0;
+}
+
+el_val_t window_create(el_val_t title, el_val_t width, el_val_t height, el_val_t min_width, el_val_t min_height) {
+  return __window_create(title, width, height, min_width, min_height);
+  return 0;
+}
+
+el_val_t window_from_manifest(el_val_t manifest_path) {
+  el_val_t m = manifest_read(manifest_path);
+  el_val_t title = manifest_title(m);
+  el_val_t w = manifest_width(m);
+  el_val_t h = manifest_height(m);
+  el_val_t mw = manifest_min_width(m);
+  el_val_t mh = manifest_min_height(m);
+  el_val_t safe_w = ({ el_val_t _if_result_1 = 0; if ((w > 0)) { _if_result_1 = (w); } else { _if_result_1 = (1200); } _if_result_1; });
+  el_val_t safe_h = ({ el_val_t _if_result_2 = 0; if ((h > 0)) { _if_result_2 = (h); } else { _if_result_2 = (800); } _if_result_2; });
+  el_val_t safe_mw = ({ el_val_t _if_result_3 = 0; if ((mw > 0)) { _if_result_3 = (mw); } else { _if_result_3 = (600); } _if_result_3; });
+  el_val_t safe_mh = ({ el_val_t _if_result_4 = 0; if ((mh > 0)) { _if_result_4 = (mh); } else { _if_result_4 = (400); } _if_result_4; });
+  el_val_t safe_t = ({ el_val_t _if_result_5 = 0; if ((str_len(title) > 0)) { _if_result_5 = (title); } else { _if_result_5 = (EL_STR("App")); } _if_result_5; });
+  return window_create(safe_t, safe_w, safe_h, safe_mw, safe_mh);
+  return 0;
+}
+
+el_val_t window_show(el_val_t handle) {
+  __window_show(handle);
+  return 0;
+}
+
+el_val_t window_set_title(el_val_t handle, el_val_t title) {
+  __window_set_title(handle, title);
+  return 0;
+}
+
+el_val_t vstack(el_val_t spacing) {
+  return __vstack_create(spacing);
+  return 0;
+}
+
+el_val_t vstack_tight(void) {
+  return __vstack_create(0);
+  return 0;
+}
+
+el_val_t hstack(el_val_t spacing) {
+  return __hstack_create(spacing);
+  return 0;
+}
+
+el_val_t zstack(void) {
+  return __zstack_create();
+  return 0;
+}
+
+el_val_t scroll(void) {
+  return __scroll_create();
+  return 0;
+}
+
+el_val_t label(el_val_t text) {
+  return __label_create(text);
+  return 0;
+}
+
+el_val_t button(el_val_t label) {
+  return __button_create(label);
+  return 0;
+}
+
+el_val_t text_field(el_val_t placeholder) {
+  return __text_field_create(placeholder);
+  return 0;
+}
+
+el_val_t text_area(el_val_t placeholder) {
+  return __text_area_create(placeholder);
+  return 0;
+}
+
+el_val_t image(el_val_t path_or_name) {
+  return __image_create(path_or_name);
+  return 0;
+}
+
+el_val_t widget_set_text(el_val_t handle, el_val_t text) {
+  __widget_set_text(handle, text);
+  return 0;
+}
+
+el_val_t widget_get_text(el_val_t handle) {
+  return __widget_get_text(handle);
+  return 0;
+}
+
+el_val_t widget_set_color(el_val_t handle, el_val_t r, el_val_t g, el_val_t b, el_val_t a) {
+  __widget_set_color(handle, r, g, b, a);
+  return 0;
+}
+
+el_val_t widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g, el_val_t b, el_val_t a) {
+  __widget_set_bg_color(handle, r, g, b, a);
+  return 0;
+}
+
+el_val_t widget_set_font(el_val_t handle, el_val_t family, el_val_t size, el_val_t bold) {
+  el_val_t bold_int = ({ el_val_t _if_result_6 = 0; if (bold) { _if_result_6 = (1); } else { _if_result_6 = (0); } _if_result_6; });
+  __widget_set_font(handle, family, size, bold_int);
+  return 0;
+}
+
+el_val_t widget_set_padding(el_val_t handle, el_val_t top, el_val_t right, el_val_t bottom, el_val_t left) {
+  __widget_set_padding(handle, top, right, bottom, left);
+  return 0;
+}
+
+el_val_t widget_set_padding_all(el_val_t handle, el_val_t p) {
+  __widget_set_padding(handle, p, p, p, p);
+  return 0;
+}
+
+el_val_t widget_set_padding_xy(el_val_t handle, el_val_t px, el_val_t py) {
+  __widget_set_padding(handle, py, px, py, px);
+  return 0;
+}
+
+el_val_t widget_set_width(el_val_t handle, el_val_t width) {
+  __widget_set_width(handle, width);
+  return 0;
+}
+
+el_val_t widget_set_height(el_val_t handle, el_val_t height) {
+  __widget_set_height(handle, height);
+  return 0;
+}
+
+el_val_t widget_set_flex(el_val_t handle, el_val_t flex) {
+  __widget_set_flex(handle, flex);
+  return 0;
+}
+
+el_val_t widget_set_corner_radius(el_val_t handle, el_val_t radius) {
+  __widget_set_corner_radius(handle, radius);
+  return 0;
+}
+
+el_val_t widget_set_disabled(el_val_t handle, el_val_t disabled) {
+  el_val_t d = ({ el_val_t _if_result_7 = 0; if (disabled) { _if_result_7 = (1); } else { _if_result_7 = (0); } _if_result_7; });
+  __widget_set_disabled(handle, d);
+  return 0;
+}
+
+el_val_t widget_set_hidden(el_val_t handle, el_val_t hidden) {
+  el_val_t h = ({ el_val_t _if_result_8 = 0; if (hidden) { _if_result_8 = (1); } else { _if_result_8 = (0); } _if_result_8; });
+  __widget_set_hidden(handle, h);
+  return 0;
+}
+
+el_val_t widget_add_child(el_val_t parent, el_val_t child) {
+  __widget_add_child(parent, child);
+  return 0;
+}
+
+el_val_t widget_remove_child(el_val_t parent, el_val_t child) {
+  __widget_remove_child(parent, child);
+  return 0;
+}
+
+el_val_t widget_destroy(el_val_t handle) {
+  __widget_destroy(handle);
+  return 0;
+}
+
+el_val_t widget_on_click(el_val_t handle, el_val_t fn_name) {
+  __widget_on_click(handle, fn_name);
+  return 0;
+}
+
+el_val_t widget_on_change(el_val_t handle, el_val_t fn_name) {
+  __widget_on_change(handle, fn_name);
+  return 0;
+}
+
+el_val_t widget_on_submit(el_val_t handle, el_val_t fn_name) {
+  __widget_on_submit(handle, fn_name);
+  return 0;
+}
+
+el_val_t hex_channel(el_val_t s, el_val_t offset) {
+  el_val_t hi = str_slice(s, offset, (offset + 1));
+  el_val_t lo = str_slice(s, (offset + 1), (offset + 2));
+  el_val_t h = hex_nibble(hi);
+  el_val_t l = hex_nibble(lo);
+  return ((h * 16) + l);
+  return 0;
+}
+
+el_val_t hex_nibble(el_val_t c) {
+  if (str_eq(c, EL_STR("0"))) {
+    return 0;
+  }
+  if (str_eq(c, EL_STR("1"))) {
+    return 1;
+  }
+  if (str_eq(c, EL_STR("2"))) {
+    return 2;
+  }
+  if (str_eq(c, EL_STR("3"))) {
+    return 3;
+  }
+  if (str_eq(c, EL_STR("4"))) {
+    return 4;
+  }
+  if (str_eq(c, EL_STR("5"))) {
+    return 5;
+  }
+  if (str_eq(c, EL_STR("6"))) {
+    return 6;
+  }
+  if (str_eq(c, EL_STR("7"))) {
+    return 7;
+  }
+  if (str_eq(c, EL_STR("8"))) {
+    return 8;
+  }
+  if (str_eq(c, EL_STR("9"))) {
+    return 9;
+  }
+  if (str_eq(c, EL_STR("a"))) {
+    return 10;
+  }
+  if (str_eq(c, EL_STR("b"))) {
+    return 11;
+  }
+  if (str_eq(c, EL_STR("c"))) {
+    return 12;
+  }
+  if (str_eq(c, EL_STR("d"))) {
+    return 13;
+  }
+  if (str_eq(c, EL_STR("e"))) {
+    return 14;
+  }
+  if (str_eq(c, EL_STR("f"))) {
+    return 15;
+  }
+  if (str_eq(c, EL_STR("A"))) {
+    return 10;
+  }
+  if (str_eq(c, EL_STR("B"))) {
+    return 11;
+  }
+  if (str_eq(c, EL_STR("C"))) {
+    return 12;
+  }
+  if (str_eq(c, EL_STR("D"))) {
+    return 13;
+  }
+  if (str_eq(c, EL_STR("E"))) {
+    return 14;
+  }
+  if (str_eq(c, EL_STR("F"))) {
+    return 15;
+  }
+  return 0;
+  return 0;
+}
+
+el_val_t color_hex_r(el_val_t hex) {
+  el_val_t s = ({ el_val_t _if_result_9 = 0; if (str_starts_with(hex, EL_STR("#"))) { _if_result_9 = (str_slice(hex, 1, str_len(hex))); } else { _if_result_9 = (hex); } _if_result_9; });
+  el_val_t v = hex_channel(s, 0);
+  return float_div(int_to_float(v), el_from_float(255.0));
+  return 0;
+}
+
+el_val_t color_hex_g(el_val_t hex) {
+  el_val_t s = ({ el_val_t _if_result_10 = 0; if (str_starts_with(hex, EL_STR("#"))) { _if_result_10 = (str_slice(hex, 1, str_len(hex))); } else { _if_result_10 = (hex); } _if_result_10; });
+  el_val_t v = hex_channel(s, 2);
+  return float_div(int_to_float(v), el_from_float(255.0));
+  return 0;
+}
+
+el_val_t color_hex_b(el_val_t hex) {
+  el_val_t s = ({ el_val_t _if_result_11 = 0; if (str_starts_with(hex, EL_STR("#"))) { _if_result_11 = (str_slice(hex, 1, str_len(hex))); } else { _if_result_11 = (hex); } _if_result_11; });
+  el_val_t v = hex_channel(s, 4);
+  return float_div(int_to_float(v), el_from_float(255.0));
+  return 0;
+}
+
+el_val_t color_hex_a(el_val_t hex) {
+  el_val_t s = ({ el_val_t _if_result_12 = 0; if (str_starts_with(hex, EL_STR("#"))) { _if_result_12 = (str_slice(hex, 1, str_len(hex))); } else { _if_result_12 = (hex); } _if_result_12; });
+  if (str_len(s) < 8) {
+    return el_from_float(1.0);
+  }
+  el_val_t v = hex_channel(s, 6);
+  return float_div(int_to_float(v), el_from_float(255.0));
+  return 0;
+}
+
+el_val_t widget_set_color_hex(el_val_t handle, el_val_t hex) {
+  widget_set_color(handle, color_hex_r(hex), color_hex_g(hex), color_hex_b(hex), color_hex_a(hex));
+  return 0;
+}
+
+el_val_t widget_set_bg_color_hex(el_val_t handle, el_val_t hex) {
+  widget_set_bg_color(handle, color_hex_r(hex), color_hex_g(hex), color_hex_b(hex), color_hex_a(hex));
+  return 0;
+}
+
+el_val_t style_surface(el_val_t handle) {
+  widget_set_bg_color_hex(handle, TOKEN_SURFACE);
+  widget_set_corner_radius(handle, 8);
+  return 0;
+}
+
+el_val_t style_button_primary(el_val_t handle) {
+  widget_set_bg_color_hex(handle, TOKEN_PRIMARY);
+  widget_set_color_hex(handle, TOKEN_ON_PRIMARY);
+  widget_set_corner_radius(handle, 8);
+  widget_set_padding_xy(handle, 16, 8);
+  return 0;
+}
+
+el_val_t style_label_body(el_val_t handle) {
+  widget_set_color_hex(handle, TOKEN_ON_BG);
+  widget_set_font(handle, EL_STR("system"), 14, 0);
+  return 0;
+}
+
+el_val_t style_label_heading(el_val_t handle) {
+  widget_set_color_hex(handle, TOKEN_ON_BG);
+  widget_set_font(handle, EL_STR("system"), 20, 1);
+  return 0;
+}
+
+el_val_t style_label_muted(el_val_t handle) {
+  widget_set_color_hex(handle, TOKEN_OUTLINE);
+  widget_set_font(handle, EL_STR("system"), 12, 0);
+  return 0;
+}
+
+int el_vessel_main(int _argc, char** _argv) {
+  el_runtime_init_args(_argc, _argv);
+  TOKEN_PRIMARY = EL_STR("#60a5fa");
+  TOKEN_ON_PRIMARY = EL_STR("#0f172a");
+  TOKEN_BACKGROUND = EL_STR("#0f172a");
+  TOKEN_ON_BG = EL_STR("#f8fafc");
+  TOKEN_SURFACE = EL_STR("#1e293b");
+  TOKEN_ON_SURFACE = EL_STR("#f8fafc");
+  TOKEN_OUTLINE = EL_STR("#475569");
+  TOKEN_ERROR = EL_STR("#f87171");
+  return 0;
+}
+

ui/examples/native-hello-android/app/src/main/jni/el_runtime.h

@@ -0,0 +1,883 @@
+/*
+ * el_runtime.h — El language C runtime header
+ *
+ * Declares all built-in functions available to compiled El programs.
+ * Include this in every generated .c file.
+ *
+ * Value model:
+ *   All El values are represented as el_val_t (= int64_t).
+ *   On 64-bit systems a pointer fits in int64_t.
+ *   String values are cast: (el_val_t)(uintptr_t)"hello"
+ *   Integer values are stored directly.
+ *   This lets arithmetic work naturally while still passing strings around.
+ *
+ * Type conventions (El -> C):
+ *   String  -> el_val_t  (holds const char* via uintptr_t cast)
+ *   Int     -> el_val_t
+ *   Bool    -> el_val_t  (0 = false, nonzero = true)
+ *   Any     -> el_val_t
+ *   Void    -> void
+ *
+ * Macros for convenience:
+ *   EL_STR(s)    cast string literal to el_val_t
+ *   EL_CSTR(v)   cast el_val_t back to const char*
+ *   EL_INT(v)    identity — el_val_t is already int64_t
+ *   EL_NULL      null / zero value
+ *   EL_FALSE     boolean false (0)
+ *   EL_TRUE      boolean true (1)
+ *
+ * Link requirements:
+ *   -lcurl     — required for the HTTP client (http_get, http_post, llm_*).
+ *   -lpthread  — required for the HTTP server (one detached thread per
+ *                connection, capped at 64 concurrent).
+ *   -loqs      — optional; required only when liboqs is installed and the
+ *                pq_* / sha3_256_hex entry points are needed. Detected at
+ *                compile time via __has_include(<oqs/oqs.h>).
+ *   -lcrypto   — optional; pulled in alongside -loqs. Used for X25519 in
+ *                pq_hybrid_* and HKDF-SHA256 derivation.
+ *
+ * Canonical compile command:
+ *   cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
+ *      -o <out> <prog>.c el-compiler/runtime/el_runtime.c
+ *
+ * With liboqs (post-quantum stack):
+ *   cc -std=c11 -I el-compiler/runtime -lcurl -lpthread -loqs -lcrypto \
+ *      -o <out> <prog>.c el-compiler/runtime/el_runtime.c
+ */
+
+#pragma once
+
+#include <stdint.h>
+#include <stdlib.h>
+
+typedef int64_t el_val_t;
+
+#define EL_STR(s)  ((el_val_t)(uintptr_t)(s))
+#define EL_CSTR(v) ((const char*)(uintptr_t)(v))
+#define EL_INT(v)  (v)
+#define EL_NULL    ((el_val_t)0)
+#define EL_FALSE   ((el_val_t)0)
+#define EL_TRUE    ((el_val_t)1)
+
+/* Float values share the el_val_t (int64) slot via a bit-cast.
+ * The codegen emits Float literals as `el_from_float(<dbl>)` so the
+ * underlying bits represent the IEEE 754 double. Float-aware builtins
+ * (math, format, json) round-trip via these helpers. */
+static inline double el_to_float(el_val_t v) {
+    union { int64_t i; double f; } u;
+    u.i = (int64_t)v;
+    return u.f;
+}
+
+static inline el_val_t el_from_float(double f) {
+    union { double f; int64_t i; } u;
+    u.f = f;
+    return (el_val_t)u.i;
+}
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* ── I/O ──────────────────────────────────────────────────────────────────── */
+
+el_val_t  println(el_val_t s);
+el_val_t  print(el_val_t s);
+el_val_t  readline(void);
+
+/* ── String builtins ─────────────────────────────────────────────────────── */
+
+el_val_t  el_str_concat(el_val_t a, el_val_t b);
+el_val_t  str_eq(el_val_t a, el_val_t b);
+el_val_t  str_starts_with(el_val_t s, el_val_t prefix);
+el_val_t  str_ends_with(el_val_t s, el_val_t suffix);
+el_val_t  str_len(el_val_t s);
+el_val_t  str_concat(el_val_t a, el_val_t b);
+el_val_t  int_to_str(el_val_t n);
+el_val_t  str_to_int(el_val_t s);
+el_val_t  native_str_to_int(el_val_t s);
+el_val_t  str_slice(el_val_t s, el_val_t start, el_val_t end);
+el_val_t  str_contains(el_val_t s, el_val_t sub);
+el_val_t  str_replace(el_val_t s, el_val_t from, el_val_t to);
+el_val_t  str_to_upper(el_val_t s);
+el_val_t  str_to_lower(el_val_t s);
+el_val_t  str_trim(el_val_t s);
+
+/* ── Math ────────────────────────────────────────────────────────────────── */
+
+el_val_t  el_abs(el_val_t n);
+el_val_t  el_max(el_val_t a, el_val_t b);
+el_val_t  el_min(el_val_t a, el_val_t b);
+
+/* ── Refcount (ARC) ──────────────────────────────────────────────────────────
+ * Lists and Maps carry a refcount. Strings and ints do not — el_retain and
+ * el_release are safe no-ops on non-refcounted values (they sniff a magic
+ * header at offset 0 and only act if the magic matches).
+ *
+ * Codegen emits these at let-binding shadowing, function entry (params), and
+ * function exit (locals other than the returned value). The refcount lets
+ * el_list_append and el_map_set mutate in place when uniquely owned (cheap)
+ * and copy-on-write when shared (preserves persistent semantics across
+ * accumulator patterns in the compiler itself).                              */
+
+void      el_retain(el_val_t v);
+void      el_release(el_val_t v);
+
+/* ── Scoped arena (CLI use) ───────────────────────────────────────────────── */
+el_val_t  el_arena_push(void);
+el_val_t  el_arena_pop(el_val_t mark);
+
+/* ── List ────────────────────────────────────────────────────────────────── */
+
+el_val_t  el_list_new(el_val_t count, ...);
+el_val_t  el_list_len(el_val_t list);
+el_val_t  el_list_get(el_val_t list, el_val_t index);
+el_val_t  el_list_append(el_val_t list, el_val_t elem);
+el_val_t  el_list_empty(void);
+el_val_t  el_list_clone(el_val_t list);
+
+/* ── Map ─────────────────────────────────────────────────────────────────── */
+
+el_val_t  el_map_new(el_val_t pair_count, ...);
+el_val_t  el_get_field(el_val_t map, el_val_t key);
+el_val_t  el_map_get(el_val_t map, el_val_t key);
+el_val_t  el_map_set(el_val_t map, el_val_t key, el_val_t value);
+
+/* ── HTTP ─────────────────────────────────────────────────────────────────── */
+
+el_val_t  http_get(el_val_t url);
+el_val_t  http_post(el_val_t url, el_val_t body);
+el_val_t  http_post_json(el_val_t url, el_val_t json_body);
+el_val_t  http_get_with_headers(el_val_t url, el_val_t headers_map);
+el_val_t  http_post_with_headers(el_val_t url, el_val_t body, el_val_t headers_map);
+el_val_t  http_post_json_with_headers(el_val_t url, el_val_t headers_map, el_val_t json_body);
+el_val_t  http_post_form_auth(el_val_t url, el_val_t form_body, el_val_t auth_header);
+el_val_t  http_delete(el_val_t url);
+el_val_t  http_serve(el_val_t port, el_val_t handler);
+el_val_t  http_set_handler(el_val_t name);
+
+/* HTTP server v2 ─────────────────────────────────────────────────────────────
+ * Same dispatch model as http_serve, but the handler signature is widened:
+ *
+ *     el_val_t handler(method, path, headers_map, body)
+ *
+ * `headers_map` is an ElMap from lowercased header name → header value (both
+ * Strings). Repeated headers are joined with ", " per RFC 7230.
+ *
+ * Response value: the handler may return either
+ *   (a) a plain body string — same auto-content-type / 200-OK behaviour as
+ *       http_serve (3-arg) — or
+ *   (b) a response envelope built with `http_response(status, headers_json,
+ *       body)`. The runtime detects the envelope discriminator
+ *       `"el_http_response":1` at the start of the returned string and
+ *       unpacks status / headers / body before sending.
+ *
+ * The 3-arg http_serve(port, handler) remains supported unchanged for
+ * existing handlers (e.g. products/web/server.el): it dispatches with
+ * (method, path, body), hardcodes 200 OK, and auto-detects content type. */
+el_val_t  http_serve_v2(el_val_t port, el_val_t handler);
+el_val_t  http_set_handler_v2(el_val_t name);
+
+/* Build an HTTP response envelope. `headers_json` should be a JSON object
+ * literal like `{"WWW-Authenticate":"Basic"}` (or "" / "{}" for none). The
+ * returned string carries the discriminator `{"el_http_response":1,...}`
+ * which the runtime's send-path detects and unpacks. Detection happens
+ * uniformly inside http_send_response, so a 3-arg handler may also return
+ * an envelope. The 3-arg variant remains documented as a fixed 200-OK
+ * auto-content-type contract for legacy handlers that return plain bodies. */
+el_val_t  http_response(el_val_t status, el_val_t headers_json, el_val_t body);
+
+/* SSE connection fd — set by http_worker_v2 before calling the El handler,
+ * cleared afterwards. Defined in el_seed.c; called from el_runtime.c.
+ * The getter is exposed as __http_conn_fd() to El programs. */
+void      el_seed_set_http_conn_fd(int fd);
+
+/* HTTP timeout — every libcurl request honors EL_HTTP_TIMEOUT_MS (default
+ * 60000ms). Read lazily on first use, so setting the env var any time before
+ * the first http_* call is sufficient.                                    */
+
+/* Streaming variants — write the response body straight to a file via
+ * libcurl's CURLOPT_WRITEFUNCTION = fwrite. These bypass the el_val_t string
+ * wrapper entirely, so binary payloads (audio/mpeg, image/png, etc.) survive
+ * embedded NUL bytes that would truncate a strlen()-based code path.
+ *
+ * Both honor EL_HTTP_TIMEOUT_MS, follow redirects, and accept the same
+ * `headers_map` shape as http_post_with_headers (ElMap of String→String).
+ *
+ * Return value: 1 on success (file fully written), 0 on any failure
+ * (network, file open, partial write). On failure the output file is removed
+ * so callers cannot mistake a partially-written file for a valid one. */
+el_val_t  http_post_to_file(el_val_t url, el_val_t body, el_val_t headers_map, el_val_t output_path);
+el_val_t  http_get_to_file(el_val_t url, el_val_t headers_map, el_val_t output_path);
+
+/* ── URL encoding ────────────────────────────────────────────────────────── */
+
+el_val_t  url_encode(el_val_t s);   /* RFC 3986 unreserved set */
+el_val_t  url_decode(el_val_t s);   /* '+' → space, %XX → byte  */
+
+/* ── HTML allowlist sanitizer ────────────────────────────────────────────────
+ * el_html_sanitize(input_html, allowlist_json) — strict allowlist HTML
+ * cleaner. State-machine parser; tag/attribute names compared case-
+ * insensitively against the allowlist; `<a href>` / `<… src>` URL schemes
+ * validated (http, https, mailto, fragment-only, or relative); whole-
+ * subtree drop for script / style / iframe / object / embed / form; HTML-
+ * escapes free text outside dropped subtrees.
+ *
+ * The allowlist is JSON of the form
+ *     {"p":[],"a":["href","title"],"strong":[],...}
+ * where each value is the array of attribute names allowed for that tag. */
+el_val_t  el_html_sanitize(el_val_t input_html, el_val_t allowlist_json);
+el_val_t  html_raw(el_val_t s);
+el_val_t  html_escape(el_val_t s);
+
+/* ── Filesystem ──────────────────────────────────────────────────────────── */
+
+el_val_t  fs_read(el_val_t path);
+el_val_t  fs_write(el_val_t path, el_val_t content);
+el_val_t  fs_list(el_val_t path);
+el_val_t  fs_list_json(el_val_t path);
+el_val_t  fs_exists(el_val_t path);
+el_val_t  fs_mkdir(el_val_t path);   /* mkdir -p, mode 0755                */
+
+/* Length-explicit binary write. `length` is an Int (el_val_t holding the
+ * byte count). The caller knows the length from context — typically because
+ * `bytes` came from base64_decode (which produces a magic-tagged binary
+ * buffer with embedded NULs possible) and the caller already tracks the
+ * decoded length, OR because the bytes came from a fixed-size source
+ * (sha256_bytes = 32, hmac_sha256_bytes = 32). Bypasses strlen entirely.
+ *
+ * Returns 1 on success, 0 on failure (invalid path, can't open, partial
+ * write, negative length). On partial-write failure, the file is removed
+ * so callers cannot read back a truncated artefact. */
+el_val_t  fs_write_bytes(el_val_t path, el_val_t bytes, el_val_t length);
+
+/* ── JSON ────────────────────────────────────────────────────────────────── */
+
+el_val_t  json_get(el_val_t json, el_val_t key);
+el_val_t  json_parse(el_val_t s);
+el_val_t  json_stringify(el_val_t v);
+el_val_t  json_get_string(el_val_t json_str, el_val_t key);
+el_val_t  json_get_int(el_val_t json_str, el_val_t key);
+el_val_t  json_get_float(el_val_t json_str, el_val_t key);
+el_val_t  json_get_bool(el_val_t json_str, el_val_t key);
+el_val_t  json_get_raw(el_val_t json_str, el_val_t key);
+el_val_t  json_set(el_val_t json_str, el_val_t key, el_val_t value);
+el_val_t  json_array_len(el_val_t json_str);
+el_val_t  json_array_get(el_val_t json_str, el_val_t index);
+el_val_t  json_array_get_string(el_val_t json_str, el_val_t index);
+el_val_t  json_escape_string(el_val_t sv);
+el_val_t  json_build_object(el_val_t kvs);
+el_val_t  json_build_array(el_val_t items);
+
+/* ── Time ────────────────────────────────────────────────────────────────── */
+
+el_val_t  time_now(void);
+el_val_t  time_now_utc(void);
+el_val_t  sleep_secs(el_val_t secs);
+el_val_t  sleep_ms(el_val_t ms);
+el_val_t  time_format(el_val_t ts, el_val_t fmt);
+el_val_t  time_to_parts(el_val_t ts);
+el_val_t  time_from_parts(el_val_t secs, el_val_t ns, el_val_t tz);
+el_val_t  time_add(el_val_t ts, el_val_t n, el_val_t unit);
+el_val_t  time_diff(el_val_t ts1, el_val_t ts2, el_val_t unit);
+el_val_t  now_ns(void);
+
+/* ── Instant + Duration: first-class temporal types ──────────────────────────
+ * Both types share the el_val_t (int64) slot. Instants are nanoseconds
+ * since the Unix epoch; Durations are signed nanoseconds. Type discipline
+ * is enforced at codegen-time: BinOps on names registered as Instant or
+ * Duration route through the typed wrappers below; mismatches like
+ * Instant+Instant become #error at the C compiler.
+ *
+ * Postfix literals — `30.seconds`, `1.hour`, `500.millis`, `30.nanos` — are
+ * recognised by the parser as DurationLit AST nodes and lowered to literal
+ * int64 nanoseconds at codegen time. The runtime never sees the units. */
+
+el_val_t  el_now_instant(void);
+el_val_t  now(void);
+el_val_t  unix_seconds(el_val_t n);
+el_val_t  unix_millis(el_val_t n);
+el_val_t  instant_from_iso8601(el_val_t s);
+
+el_val_t  el_duration_from_nanos(el_val_t ns);
+el_val_t  duration_seconds(el_val_t n);
+el_val_t  duration_millis(el_val_t n);
+el_val_t  duration_nanos(el_val_t n);
+
+el_val_t  el_instant_add_dur(el_val_t inst, el_val_t dur);
+el_val_t  el_instant_sub_dur(el_val_t inst, el_val_t dur);
+el_val_t  el_instant_diff(el_val_t a, el_val_t b);
+el_val_t  el_duration_add(el_val_t a, el_val_t b);
+el_val_t  el_duration_sub(el_val_t a, el_val_t b);
+el_val_t  el_duration_scale(el_val_t dur, el_val_t scalar);
+el_val_t  el_duration_div(el_val_t dur, el_val_t scalar);
+
+el_val_t  el_instant_lt(el_val_t a, el_val_t b);
+el_val_t  el_instant_le(el_val_t a, el_val_t b);
+el_val_t  el_instant_gt(el_val_t a, el_val_t b);
+el_val_t  el_instant_ge(el_val_t a, el_val_t b);
+el_val_t  el_instant_eq(el_val_t a, el_val_t b);
+el_val_t  el_instant_ne(el_val_t a, el_val_t b);
+el_val_t  el_duration_lt(el_val_t a, el_val_t b);
+el_val_t  el_duration_le(el_val_t a, el_val_t b);
+el_val_t  el_duration_gt(el_val_t a, el_val_t b);
+el_val_t  el_duration_ge(el_val_t a, el_val_t b);
+el_val_t  el_duration_eq(el_val_t a, el_val_t b);
+el_val_t  el_duration_ne(el_val_t a, el_val_t b);
+
+el_val_t  instant_to_unix_seconds(el_val_t i);
+el_val_t  instant_to_unix_millis(el_val_t i);
+el_val_t  instant_to_iso8601(el_val_t i);
+el_val_t  duration_to_seconds(el_val_t d);
+el_val_t  duration_to_millis(el_val_t d);
+el_val_t  duration_to_nanos(el_val_t d);
+
+el_val_t  el_sleep_duration(el_val_t dur);
+el_val_t  unix_timestamp(void);
+
+el_val_t  ttl_cache_set(el_val_t key, el_val_t value);
+el_val_t  ttl_cache_get(el_val_t key, el_val_t max_age);
+el_val_t  ttl_cache_age(el_val_t key);
+
+/* ── Calendar + CalendarTime + Rhythm + LocalDate/Time/DateTime ─────────────
+ * Phase 1.5 of the time system. Calendar is pluggable: EarthCalendar (IANA
+ * zones, Gregorian, DST) is the user-facing default; MarsCalendar,
+ * CycleCalendar(period), NoCycleCalendar, RelativeCalendar handle non-Earth
+ * domains.
+ *
+ * A Calendar interprets an Instant under a particular cycle convention and
+ * produces a CalendarTime. CalendarTime carries the underlying Instant and
+ * a back-pointer to its Calendar; arithmetic and formatting consult the
+ * Calendar to convert ns since epoch into year/month/day/hour/minute/second
+ * (or sol/phase, or cycle/phase, depending on kind).
+ *
+ * Storage convention: Calendar / CalendarTime / Rhythm / LocalDate /
+ * LocalDateTime are heap-allocated structs whose pointers are cast into
+ * el_val_t. A 24-bit magic header at offset 0 lets the runtime identify
+ * the kind safely. LocalTime is small enough to live in the int64 slot
+ * directly (nanos since midnight, signed).                                  */
+
+/* Zone — opaque IANA zone or fixed offset, used by EarthCalendar.
+ * `zone_id` is either an IANA name ("America/New_York", "UTC") or a fixed
+ * offset string ("+05:30", "-08:00"). The runtime resolves it via tzset()
+ * on first use of the owning EarthCalendar.                                  */
+el_val_t  zone(el_val_t id);
+el_val_t  zone_utc(void);
+el_val_t  zone_local(void);
+el_val_t  zone_offset(el_val_t hours, el_val_t minutes);
+
+/* Calendar constructors. Each returns an el_val_t pointer to a heap-
+ * allocated, magic-tagged Calendar struct. Calendars are interned by
+ * (kind, zone_id, period_ns, epoch_ns) so identical constructors return
+ * the same pointer — equality is reference equality.                        */
+el_val_t  earth_calendar(el_val_t z);
+el_val_t  earth_calendar_default(void);
+el_val_t  mars_calendar(void);
+el_val_t  cycle_calendar(el_val_t period_dur);
+el_val_t  no_cycle_calendar(void);
+el_val_t  relative_calendar(el_val_t epoch_inst);
+
+/* CalendarTime constructors and methods. Returns a heap-allocated struct
+ * whose pointer fits in el_val_t. */
+el_val_t  now_in(el_val_t cal);
+el_val_t  in_calendar(el_val_t inst, el_val_t cal);
+el_val_t  cal_format(el_val_t ct, el_val_t pattern);
+el_val_t  cal_to_instant(el_val_t ct);
+el_val_t  cal_cycle_phase(el_val_t ct);
+el_val_t  cal_in(el_val_t ct, el_val_t cal);
+
+/* LocalDate / LocalTime / LocalDateTime — calendar-agnostic value types.
+ * LocalTime carries nanoseconds since midnight as a signed int64 directly
+ * in the el_val_t slot (no allocation). LocalDate / LocalDateTime are
+ * heap-allocated structs with magic headers. */
+el_val_t  local_date(el_val_t y, el_val_t m, el_val_t d);
+el_val_t  local_time(el_val_t h, el_val_t m, el_val_t s, el_val_t ns);
+el_val_t  local_datetime(el_val_t date, el_val_t time);
+el_val_t  zoned(el_val_t date, el_val_t time, el_val_t cal);
+
+el_val_t  local_date_year(el_val_t ld);
+el_val_t  local_date_month(el_val_t ld);
+el_val_t  local_date_day(el_val_t ld);
+el_val_t  local_time_hour(el_val_t lt);
+el_val_t  local_time_minute(el_val_t lt);
+el_val_t  local_time_second(el_val_t lt);
+el_val_t  local_time_nanos(el_val_t lt);
+
+el_val_t  el_local_date_add_dur(el_val_t ld, el_val_t dur);
+el_val_t  el_local_time_add_dur(el_val_t lt, el_val_t dur);
+el_val_t  el_local_date_lt(el_val_t a, el_val_t b);
+el_val_t  el_local_date_eq(el_val_t a, el_val_t b);
+
+/* Rhythm — pluggable recurrence AST. Returns a heap-allocated struct
+ * pointer in el_val_t; rhythms are immutable so callers may share them. */
+el_val_t  rhythm_cycle_start(void);
+el_val_t  rhythm_cycle_phase(el_val_t phase);
+el_val_t  rhythm_duration(el_val_t d);
+el_val_t  rhythm_session_start(void);
+el_val_t  rhythm_event(el_val_t name);
+el_val_t  rhythm_and(el_val_t a, el_val_t b);
+el_val_t  rhythm_or(el_val_t a, el_val_t b);
+el_val_t  rhythm_weekday(el_val_t day);
+el_val_t  rhythm_weekly_at(el_val_t day, el_val_t hour, el_val_t minute);
+el_val_t  rhythm_next_after(el_val_t r, el_val_t after, el_val_t cal);
+el_val_t  rhythm_matches(el_val_t r, el_val_t ct);
+
+/* ── UUID ────────────────────────────────────────────────────────────────── */
+
+el_val_t  uuid_new(void);
+el_val_t  uuid_v4(void);
+
+/* ── Environment ─────────────────────────────────────────────────────────── */
+
+el_val_t  env(el_val_t key);
+
+/* ── In-process state K/V ────────────────────────────────────────────────── */
+
+el_val_t  state_set(el_val_t key, el_val_t value);
+el_val_t  state_get(el_val_t key);
+el_val_t  state_del(el_val_t key);
+el_val_t  state_keys(void);
+el_val_t  state_has(el_val_t key);
+el_val_t  state_get_or(el_val_t key, el_val_t default_val);
+
+/* ── Float formatting ────────────────────────────────────────────────────── */
+
+el_val_t  float_to_str(el_val_t f);
+el_val_t  int_to_float(el_val_t n);
+el_val_t  float_to_int(el_val_t f);
+el_val_t  format_float(el_val_t f, el_val_t decimals);
+el_val_t  decimal_round(el_val_t f, el_val_t decimals);
+el_val_t  str_to_float(el_val_t s);
+
+/* ── Math (Float-aware) ──────────────────────────────────────────────────── */
+
+el_val_t  math_sqrt(el_val_t f);
+el_val_t  math_log(el_val_t f);
+el_val_t  math_ln(el_val_t f);
+el_val_t  math_sin(el_val_t f);
+el_val_t  math_cos(el_val_t f);
+el_val_t  math_pi(void);
+
+/* ── String additions ────────────────────────────────────────────────────── */
+
+el_val_t  str_index_of(el_val_t s, el_val_t sub);
+el_val_t  str_split(el_val_t s, el_val_t sep);
+el_val_t  str_char_at(el_val_t s, el_val_t i);
+el_val_t  str_char_code(el_val_t s, el_val_t i);
+el_val_t  str_pad_left(el_val_t s, el_val_t width, el_val_t pad);
+el_val_t  str_pad_right(el_val_t s, el_val_t width, el_val_t pad);
+el_val_t  str_format(el_val_t fmt, el_val_t data);
+el_val_t  str_lower(el_val_t s);
+el_val_t  str_upper(el_val_t s);
+
+/* ── Text-processing primitives (Phase 1: byte/codepoint, ASCII char classes)
+ * Phase 2 (filed): Unicode-grapheme awareness, NFC/NFD normalization, regex.
+ * is_* predicates: empty input returns false; multi-char requires ALL bytes
+ * to match. ASCII ranges only in Phase 1. */
+
+/* Counting */
+el_val_t  str_count(el_val_t s, el_val_t sub);              /* non-overlapping */
+el_val_t  str_count_chars(el_val_t s);                      /* codepoint count */
+el_val_t  str_count_bytes(el_val_t s);                      /* alias of str_len */
+el_val_t  str_count_lines(el_val_t s);
+el_val_t  str_count_words(el_val_t s);
+el_val_t  str_count_letters(el_val_t s);                    /* ASCII [A-Za-z] */
+el_val_t  str_count_digits(el_val_t s);                     /* ASCII [0-9] */
+
+/* Find / position */
+el_val_t  str_index_of_all(el_val_t s, el_val_t sub);       /* [Int] of byte offsets */
+el_val_t  str_last_index_of(el_val_t s, el_val_t sub);
+el_val_t  str_find_chars(el_val_t s, el_val_t any_of);      /* first idx of any ch */
+
+/* Transform */
+el_val_t  str_repeat(el_val_t s, el_val_t n);
+el_val_t  str_reverse(el_val_t s);                          /* by codepoint */
+el_val_t  str_strip_prefix(el_val_t s, el_val_t prefix);
+el_val_t  str_strip_suffix(el_val_t s, el_val_t suffix);
+el_val_t  str_strip_chars(el_val_t s, el_val_t chars);
+el_val_t  str_lstrip(el_val_t s);
+el_val_t  str_rstrip(el_val_t s);
+
+/* Char classification (Bool) */
+el_val_t  is_letter(el_val_t s);
+el_val_t  is_digit(el_val_t s);
+el_val_t  is_alphanumeric(el_val_t s);
+el_val_t  is_whitespace(el_val_t s);
+el_val_t  is_punctuation(el_val_t s);
+el_val_t  is_uppercase(el_val_t s);
+el_val_t  is_lowercase(el_val_t s);
+
+/* Split / join */
+el_val_t  str_split_lines(el_val_t s);
+el_val_t  str_split_chars(el_val_t s);                      /* alias of native_string_chars */
+el_val_t  str_split_n(el_val_t s, el_val_t sep, el_val_t n);
+el_val_t  str_join(el_val_t list, el_val_t sep);            /* alias of list_join */
+
+/* ── List additions ──────────────────────────────────────────────────────── */
+
+el_val_t  list_push(el_val_t list, el_val_t elem);
+el_val_t  list_push_front(el_val_t list, el_val_t elem);
+el_val_t  list_join(el_val_t list, el_val_t sep);
+el_val_t  list_range(el_val_t start, el_val_t end);
+
+/* ── Bool helpers ────────────────────────────────────────────────────────── */
+
+el_val_t  bool_to_str(el_val_t b);
+
+/* ── Numeric parsing ─────────────────────────────────────────────────────── */
+
+el_val_t  parse_int(el_val_t s, el_val_t default_val);
+
+/* ── Process ─────────────────────────────────────────────────────────────── */
+
+el_val_t  exit_program(el_val_t code);
+el_val_t  getpid_now(void);
+
+/* Self-terminating memory guard. Reads ELC_MAX_MEM_MB (default 512) and
+ * exits with code 1 if resident memory exceeds the limit. Call periodically
+ * during long compilation loops (e.g. after each function is compiled).
+ * Returns 0 when memory is within bounds.                                   */
+el_val_t  el_mem_check(void);
+
+/* ── CGI identity ─────────────────────────────────────────────────────────────
+ * Called at the start of main() in CGI programs (those with a `cgi {}` block).
+ * Records the program's DHARMA identity before any other code executes.      */
+
+void      el_cgi_init(el_val_t name, el_val_t dharma_id, el_val_t principal,
+                      el_val_t network, el_val_t engram);
+
+/* ── DHARMA network builtins ─────────────────────────────────────────────────
+ * Available to CGI programs (declared with a `cgi {}` block).
+ *
+ * Peers are addressed by `dharma_id` of the form
+ *     "<registry-id>@<transport-url>"   e.g. "ntn-genesis@http://localhost:7770"
+ * If the @<url> portion is omitted, transport defaults to
+ * "http://localhost:7770" (the local CGI daemon assumption).
+ *
+ * Wire protocol (all peers expose):
+ *   POST <url>/dharma/recv      { channel, from, content } → response body
+ *   POST <url>/dharma/event     { type, payload, source, timestamp }
+ *   POST <url>/api/activate     { query }                 → list of nodes
+ *
+ * Hosting application's responsibility: an El program with a `cgi {}` block
+ * runs http_serve() with its own request handler; that handler should route
+ * "/dharma/event" requests by calling el_runtime_dharma_event_arrive() so
+ * incoming events feed dharma_field() queues. The runtime itself does not
+ * intercept any /dharma path.                                                */
+
+el_val_t  dharma_connect(el_val_t cgi_id);
+el_val_t  dharma_send(el_val_t channel, el_val_t content);
+el_val_t  dharma_activate(el_val_t query);
+void      dharma_emit(el_val_t event_type, el_val_t payload);
+el_val_t  dharma_field(el_val_t event_type);
+void      dharma_strengthen(el_val_t cgi_id, el_val_t weight);
+el_val_t  dharma_relationship(el_val_t cgi_id);
+el_val_t  dharma_peers(void);
+
+/* Public C API: called by an El program's HTTP handler when a /dharma/event
+ * request arrives. Pushes onto the per-event-type queue and signals any
+ * pending dharma_field() blockers. All three arguments must be NUL-terminated
+ * C strings (or NULL — then treated as empty).                               */
+void      el_runtime_dharma_event_arrive(const char* event_type,
+                                         const char* payload,
+                                         const char* source);
+
+/* ── Engram local graph primitives ───────────────────────────────────────────
+ * Operate on the CGI's local Engram knowledge graph.
+ * `engram_activate` queries the local graph only; `dharma_activate` is
+ * network-wide across all connected CGI graphs.                              */
+
+el_val_t  engram_node(el_val_t content, el_val_t node_type, el_val_t salience);
+el_val_t  engram_node_full(el_val_t content, el_val_t node_type, el_val_t label,
+                           el_val_t salience, el_val_t importance, el_val_t confidence,
+                           el_val_t tier, el_val_t tags);
+/* Layered consciousness — see el_runtime.c for the layered architecture
+ * design notes (search "Layered consciousness architecture"). The five
+ * canonical layers (safety / core-identity / domain-knowledge / imprint /
+ * suit) are seeded automatically; engram_add_layer extends the registry
+ * with imprint or suit overlays at runtime. Nodes default to layer 1
+ * (core-identity) when created via engram_node / engram_node_full. */
+el_val_t  engram_node_layered(el_val_t content, el_val_t node_type, el_val_t label,
+                              el_val_t salience, el_val_t certainty, el_val_t confidence,
+                              el_val_t status, el_val_t tags, el_val_t layer_id);
+el_val_t  engram_add_layer(el_val_t name, el_val_t priority, el_val_t suppressible,
+                           el_val_t transparent, el_val_t injectable);
+el_val_t  engram_remove_layer(el_val_t layer_id);
+el_val_t  engram_list_layers(void);
+el_val_t  engram_get_node(el_val_t id);
+void      engram_strengthen(el_val_t node_id);
+void      engram_forget(el_val_t node_id);
+el_val_t  engram_node_count(void);
+el_val_t  engram_search(el_val_t query, el_val_t limit);
+el_val_t  engram_scan_nodes(el_val_t limit, el_val_t offset);
+void      engram_connect(el_val_t from_id, el_val_t to_id, el_val_t weight, el_val_t relation);
+el_val_t  engram_edge_between(el_val_t from_id, el_val_t to_id);
+el_val_t  engram_neighbors(el_val_t node_id);
+el_val_t  engram_neighbors_filtered(el_val_t node_id, el_val_t max_depth, el_val_t direction);
+el_val_t  engram_edge_count(void);
+/* Three-pass activation: background fan-out → working-memory promotion →
+ * Layer 0 override. See "Three-pass activation" in el_runtime.c. */
+el_val_t  engram_activate(el_val_t query, el_val_t depth);
+el_val_t  engram_save(el_val_t path);
+el_val_t  engram_load(el_val_t path);
+
+/* JSON-string accessors — return pre-serialized JSON so HTTP handlers
+ * can pass results straight through without round-tripping ElList/ElMap
+ * through json_stringify. */
+el_val_t  engram_get_node_json(el_val_t id);
+el_val_t  engram_search_json(el_val_t query, el_val_t limit);
+el_val_t  engram_scan_nodes_json(el_val_t limit, el_val_t offset);
+el_val_t  engram_scan_nodes_by_type_json(el_val_t node_type, el_val_t limit, el_val_t offset);
+el_val_t  engram_neighbors_json(el_val_t node_id, el_val_t max_depth, el_val_t direction);
+el_val_t  engram_activate_json(el_val_t query, el_val_t depth);
+el_val_t  engram_stats_json(void);
+el_val_t  engram_list_layers_json(void);
+/* engram_compile_layered_json — produce a prompt-ready text block split
+ * into "[LAYER 0 — STRUCTURAL]" (non-suppressible layers, sacred fire)
+ * and "[ENGRAM CONTEXT]" (standard suppressible layers). Returns "" if
+ * no nodes promoted to working memory. */
+el_val_t  engram_compile_layered_json(el_val_t intent, el_val_t depth);
+
+/* ── LLM (Anthropic API client) ─────────────────────────────────────────────
+ * All functions call https://api.anthropic.com/v1/messages with the API key
+ * from env ANTHROPIC_API_KEY. Default model when empty: claude-sonnet-4-5. */
+
+el_val_t  llm_call(el_val_t model, el_val_t prompt);
+el_val_t  llm_call_system(el_val_t model, el_val_t system_prompt, el_val_t user_prompt);
+el_val_t  llm_call_agentic(el_val_t model, el_val_t system, el_val_t user, el_val_t tools);
+el_val_t  llm_vision(el_val_t model, el_val_t system, el_val_t prompt, el_val_t image_url_or_b64);
+el_val_t  llm_models(void);
+
+/* Register a tool handler by name. The handler is looked up via dlsym
+ * (mirroring http_set_handler), so any El `fn <name>(input)` compiles to
+ * a global C symbol that this function can locate at runtime.
+ * Handler signature: `el_val_t handler(el_val_t input_json)` — receives
+ * the tool input as a JSON-string el_val_t and returns a JSON-string
+ * el_val_t result. Used by llm_call_agentic.                                 */
+void      llm_register_tool(el_val_t name, el_val_t handler_fn_name);
+
+/* ── args() ─────────────────────────────────────────────────────────────────
+ * Provides access to command-line arguments passed to the program.
+ * Populated by el_runtime_init_args() before main() runs.           */
+
+el_val_t  args(void);
+void      el_runtime_init_args(int argc, char** argv);
+
+/* ── Crypto primitives ─────────────────────────────────────────────────────
+ * SHA-256, HMAC-SHA-256, and base64 (standard + URL-safe).
+ * Self-contained — no OpenSSL/libcrypto dependency. The implementations are
+ * adapted from public-domain reference code (Brad Conte / RFC 4648).
+ *
+ * Bytes-returning variants (sha256_bytes, hmac_sha256_bytes) return a string
+ * value whose contents are raw binary; callers usually feed these into
+ * base64_encode. Note that el_val_t strings are NUL-terminated by convention,
+ * so the binary payload may contain embedded NULs — pass it directly into
+ * base64_encode (which uses an explicit length) rather than treating it as
+ * a printable C string.
+ *
+ * The "base64" variants emit/accept RFC 4648 standard alphabet with padding.
+ * The "base64url" variants use URL-safe alphabet (`-`/`_`) with no padding,
+ * as used in JWTs.                                                           */
+
+el_val_t  sha256_hex(el_val_t input);
+el_val_t  sha256_bytes(el_val_t input);
+el_val_t  hmac_sha256_hex(el_val_t key, el_val_t message);
+el_val_t  hmac_sha256_bytes(el_val_t key, el_val_t message);
+el_val_t  base64_encode(el_val_t input);
+el_val_t  base64_decode(el_val_t input);
+el_val_t  base64url_encode(el_val_t input);
+el_val_t  base64url_decode(el_val_t input);
+
+/* Length-aware variants (internal — exposed for the rare caller that already
+ * has a known-length binary buffer and doesn't want to round-trip through
+ * a NUL-terminated el_val_t string). Sha256_bytes and hmac_sha256_bytes feed
+ * these implicitly. */
+el_val_t  el_sha256_bytes_n(const unsigned char* data, size_t len);
+el_val_t  el_base64_encode_n(const unsigned char* data, size_t len, int url_safe);
+
+/* ── Post-quantum primitives (liboqs-backed) ────────────────────────────────
+ * All inputs/outputs hex-encoded. Algorithm choices:
+ *   Signature: CRYSTALS-Dilithium-3   (NIST level 3, balanced)
+ *   KEM:       CRYSTALS-Kyber-768     (NIST level 3)
+ *   Hash:      SHA3-256 (Keccak)      (PQ-aware protocols favour SHA3 over SHA2)
+ *
+ * If liboqs is not linked (detected via __has_include(<oqs/oqs.h>) at compile
+ * time), the pq_* entry points return a JSON-shaped error string so callers
+ * fail loudly rather than silently fall back to classical schemes:
+ *   {"error":"liboqs not linked, post-quantum primitives unavailable"}
+ *
+ * The hybrid handshake pairs X25519 with Kyber-768 per NIST PQ guidance and
+ * CNSA 2.0. Combined shared secret is HKDF-SHA256(x25519_ss || kyber_ss).
+ * Even if Kyber falls, X25519 holds; if X25519 falls under quantum attack,
+ * Kyber holds. SHA3-256 also remains usable independent of liboqs (the
+ * Keccak permutation is PQ-OK as a primitive). */
+
+el_val_t  pq_keygen_signature(void);
+el_val_t  pq_sign(el_val_t secret_key_hex, el_val_t message);
+el_val_t  pq_verify(el_val_t public_key_hex, el_val_t message, el_val_t signature_hex);
+
+el_val_t  pq_kem_keygen(void);
+el_val_t  pq_kem_encaps(el_val_t public_key_hex);
+el_val_t  pq_kem_decaps(el_val_t secret_key_hex, el_val_t ciphertext_hex);
+
+el_val_t  pq_hybrid_keygen(void);
+el_val_t  pq_hybrid_handshake(el_val_t remote_pub_combined);
+
+el_val_t  sha3_256_hex(el_val_t input);
+
+/* ── AEAD: AES-256-GCM (libcrypto-backed) ───────────────────────────────────
+ * Symmetric authenticated encryption used to wrap envelopes after a KEM
+ * handshake. Caller MUST supply a 32-byte key (64 hex chars) — typically the
+ * Kyber-768 / hybrid shared_secret, optionally normalized via SHA3-256.
+ *
+ * aead_encrypt returns a JSON map {"nonce":"...","ciphertext":"..."} where
+ * ciphertext is the AES-256-GCM output with the 16-byte auth tag appended.
+ * Nonce is a fresh 12-byte CSPRNG draw — callers never pick the nonce, which
+ * structurally rules out the GCM nonce-reuse footgun.
+ *
+ * aead_decrypt returns the plaintext String, or "" on any failure (including
+ * auth-tag mismatch). Callers MUST check for "" before trusting the result. */
+el_val_t  aead_encrypt(el_val_t key_hex, el_val_t plaintext);
+el_val_t  aead_decrypt(el_val_t key_hex, el_val_t nonce_hex, el_val_t ciphertext_hex);
+
+/* ── Native VM builtin aliases (for compiled El source) ─────────────────────
+ * These match the El VM's native_* builtins so that El source compiled
+ * to C can call the same names without modification.                */
+
+el_val_t  native_list_get(el_val_t list, el_val_t index);
+el_val_t  native_list_len(el_val_t list);
+el_val_t  native_list_append(el_val_t list, el_val_t elem);
+el_val_t  native_list_empty(void);
+el_val_t  native_list_clone(el_val_t list);
+el_val_t  native_string_chars(el_val_t s);
+el_val_t  native_int_to_str(el_val_t n);
+
+/* ── Method-call shorthand aliases ──────────────────────────────────────────
+ * The El method-call convention `obj.method(args)` compiles to
+ * `method(obj, args)`.  These aliases expose the runtime functions under
+ * the short names that result from method calls in El source.
+ *
+ * Example: `myList.append(x)` → `append(myList, x)` (calls this alias)
+ *          `myList.len()`     → `len(myList)`         (calls this alias)  */
+
+el_val_t  append(el_val_t list, el_val_t elem);   /* el_list_append */
+el_val_t  len(el_val_t list);                      /* el_list_len    */
+el_val_t  get(el_val_t list, el_val_t index);      /* el_list_get    */
+el_val_t  map_get(el_val_t map, el_val_t key);     /* el_map_get     */
+el_val_t  map_set(el_val_t map, el_val_t key, el_val_t value); /* el_map_set */
+
+/* ── OTLP/HTTP Observability ─────────────────────────────────────────────── */
+/* See bottom of el_runtime.c for the implementation.
+ * Configured by env vars OTLP_ENDPOINT, OTEL_SERVICE_NAME, OTEL_SERVICE_VERSION.
+ * No-op when OTLP_ENDPOINT is unset. Drop-on-failure semantics. */
+/* ── Subprocess execution ────────────────────────────────────────────────── */
+el_val_t exec_command(el_val_t cmd);   /* run shell command, return exit code */
+el_val_t exec_capture(el_val_t cmd);   /* run shell command, capture stdout   */
+el_val_t exec(el_val_t cmd);           /* exec(cmd) → stdout String (30s timeout) */
+el_val_t exec_bg(el_val_t cmd);        /* exec_bg(cmd) → PID String (non-blocking) */
+
+/* ── Stdout redirection (used by compiler JS pipeline) ───────────────────── */
+el_val_t stdout_to_file(el_val_t path); /* redirect process stdout to a file  */
+el_val_t stdout_restore(void);          /* restore process stdout to terminal  */
+
+el_val_t emit_log(el_val_t level, el_val_t msg, el_val_t fields_json);
+el_val_t emit_metric(el_val_t name, el_val_t value, el_val_t tags_json);
+el_val_t trace_span_start(el_val_t name);
+el_val_t trace_span_end(el_val_t span_handle);
+el_val_t emit_event(el_val_t name, el_val_t duration_ms);
+
+el_val_t __thread_create(el_val_t fn_name_v, el_val_t arg_v);
+el_val_t __thread_join(el_val_t tid_v);
+
+/* ── __ prefixed aliases (self-hosting compiler ABI) ─────────────────────────
+ * The El self-hosting compiler emits calls to __-prefixed names. These are
+ * forwarding wrappers around the existing el_runtime functions above.        */
+
+/* I/O */
+el_val_t  __println(el_val_t s);
+el_val_t  __print(el_val_t s);
+el_val_t  __readline(void);
+
+/* String */
+el_val_t  __int_to_str(el_val_t n);
+el_val_t  __str_to_int(el_val_t s);
+el_val_t  __float_to_str(el_val_t f);
+el_val_t  __str_to_float(el_val_t s);
+el_val_t  __str_len(el_val_t s);
+el_val_t  __str_char_at(el_val_t s, el_val_t i);
+el_val_t  __str_cmp(el_val_t a, el_val_t b);
+el_val_t  __str_ncmp(el_val_t a, el_val_t b, el_val_t n);
+el_val_t  __str_concat_raw(el_val_t a, el_val_t b);
+el_val_t  __str_slice_raw(el_val_t s, el_val_t start, el_val_t end);
+el_val_t  __str_alloc(el_val_t n);
+el_val_t  __str_set_char(el_val_t s, el_val_t i, el_val_t c);
+
+/* URL encoding */
+el_val_t  __url_encode(el_val_t s);
+el_val_t  __url_decode(el_val_t s);
+
+/* Environment */
+el_val_t  __env_get(el_val_t key);
+
+/* Subprocess */
+el_val_t  __exec(el_val_t cmd);
+el_val_t  __exec_bg(el_val_t cmd);
+
+/* Process */
+el_val_t  __exit_program(el_val_t code);
+
+/* Filesystem */
+el_val_t  __fs_exists(el_val_t path);
+el_val_t  __fs_mkdir(el_val_t path);
+el_val_t  __fs_read(el_val_t path);
+el_val_t  __fs_write(el_val_t path, el_val_t content);
+el_val_t  __fs_write_bytes(el_val_t path, el_val_t bytes, el_val_t n);
+el_val_t  __fs_list_raw(el_val_t path);
+
+/* HTTP server */
+el_val_t  __http_response(el_val_t status, el_val_t headers_json, el_val_t body);
+el_val_t  __http_serve(el_val_t port, el_val_t handler);
+el_val_t  __http_serve_v2(el_val_t port, el_val_t handler);
+
+/* HTTP conn fd / SSE (weak; overridden by el_seed.c when linked together) */
+el_val_t  __http_conn_fd(void);
+el_val_t  __http_sse_open(el_val_t conn_id);
+el_val_t  __http_sse_send(el_val_t conn_id, el_val_t data);
+el_val_t  __http_sse_close(el_val_t conn_id);
+
+/* HTTP client (requires HAVE_CURL; stubs provided for no-curl builds) */
+el_val_t  __http_do(el_val_t method, el_val_t url, el_val_t body,
+                    el_val_t headers_map, el_val_t timeout_ms);
+el_val_t  __http_do_map(el_val_t method, el_val_t url, el_val_t body,
+                        el_val_t headers_json, el_val_t timeout_ms);
+el_val_t  __http_do_map_to_file(el_val_t method, el_val_t url, el_val_t body,
+                                el_val_t headers_json, el_val_t output_path);
+
+/* JSON */
+el_val_t  __json_array_get(el_val_t json, el_val_t index);
+el_val_t  __json_array_get_string(el_val_t json, el_val_t index);
+el_val_t  __json_array_len(el_val_t json);
+el_val_t  __json_get(el_val_t json, el_val_t key);
+el_val_t  __json_get_raw(el_val_t json, el_val_t key);
+el_val_t  __json_set(el_val_t json, el_val_t key, el_val_t value);
+el_val_t  __json_parse_map(el_val_t json_str);
+el_val_t  __json_stringify_val(el_val_t val);
+
+/* Hashing */
+el_val_t  __sha256_hex(el_val_t s);
+
+/* State K/V */
+el_val_t  __state_del(el_val_t key);
+el_val_t  __state_get(el_val_t key);
+el_val_t  __state_keys(void);
+el_val_t  __state_set(el_val_t key, el_val_t val);
+
+/* UUID */
+el_val_t  __uuid_v4(void);
+
+/* Args */
+el_val_t  __args_json(void);
+
+#ifdef __cplusplus
+}
+#endif

ui/examples/native-hello-android/app/src/main/jni/native_hello.c

@@ -0,0 +1,123 @@
+#include <stdint.h>
+#include <stdlib.h>
+#include "el_runtime.h"
+
+el_val_t on_greet_click(el_val_t widget, el_val_t data);
+el_val_t on_counter_click(el_val_t widget, el_val_t data);
+el_val_t on_name_change(el_val_t widget, el_val_t data);
+el_val_t app_build(el_val_t window);
+
+el_val_t g_window;
+el_val_t g_label;
+el_val_t g_input;
+el_val_t g_button;
+el_val_t g_counter;
+el_val_t g_counter_lbl;
+el_val_t manifest_env;
+el_val_t manifest_path;
+el_val_t win;
+el_val_t g_window;
+
+el_val_t on_greet_click(el_val_t widget, el_val_t data) {
+  el_val_t name = widget_get_text(g_input);
+  el_val_t greeting = ({ el_val_t _if_result_1 = 0; if ((str_len(name) > 0)) { _if_result_1 = (el_str_concat(el_str_concat(EL_STR("Hello, "), name), EL_STR("!"))); } else { _if_result_1 = (EL_STR("Hello, World!")); } _if_result_1; });
+  widget_set_text(g_label, greeting);
+  return 0;
+}
+
+el_val_t on_counter_click(el_val_t widget, el_val_t data) {
+  el_val_t g_counter = (g_counter + 1);
+  widget_set_text(g_counter_lbl, el_str_concat(EL_STR("Clicks: "), int_to_str(g_counter)));
+  return 0;
+}
+
+el_val_t on_name_change(el_val_t widget, el_val_t data) {
+  el_val_t has_text = (str_len(data) > 0);
+  widget_set_disabled(g_button, !has_text);
+  return 0;
+}
+
+el_val_t app_build(el_val_t window) {
+  el_val_t root = vstack(0);
+  widget_set_padding_all(root, 24);
+  widget_set_bg_color_hex(root, EL_STR("#0f172a"));
+  widget_set_flex(root, 1);
+  el_val_t title = label(EL_STR("el-native \xe2\x80\x94 native widget demo"));
+  style_label_heading(title);
+  widget_add_child(root, title);
+  el_val_t gap1 = label(EL_STR(""));
+  widget_set_height(gap1, 16);
+  widget_add_child(root, gap1);
+  el_val_t subtitle = label(EL_STR("AppKit controls from el code, no ObjC in the app layer."));
+  style_label_muted(subtitle);
+  widget_add_child(root, subtitle);
+  el_val_t gap2 = label(EL_STR(""));
+  widget_set_height(gap2, 24);
+  widget_add_child(root, gap2);
+  el_val_t input_row = hstack(8);
+  el_val_t name_label = label(EL_STR("Name:"));
+  style_label_body(name_label);
+  widget_set_width(name_label, 60);
+  el_val_t input = text_field(EL_STR("Enter your name\xe2\x80\xa6"));
+  style_label_body(input);
+  widget_set_flex(input, 1);
+  widget_on_change(input, EL_STR("on_name_change"));
+  el_val_t g_input = input;
+  el_val_t greet_btn = button(EL_STR("Greet"));
+  style_button_primary(greet_btn);
+  widget_set_disabled(greet_btn, 1);
+  widget_on_click(greet_btn, EL_STR("on_greet_click"));
+  el_val_t g_button = greet_btn;
+  widget_add_child(input_row, name_label);
+  widget_add_child(input_row, input);
+  widget_add_child(input_row, greet_btn);
+  widget_add_child(root, input_row);
+  el_val_t gap3 = label(EL_STR(""));
+  widget_set_height(gap3, 12);
+  widget_add_child(root, gap3);
+  el_val_t greeting = label(EL_STR("Waiting for name\xe2\x80\xa6"));
+  style_label_body(greeting);
+  widget_set_color_hex(greeting, EL_STR("#60a5fa"));
+  widget_set_font(greeting, EL_STR("system"), 16, 1);
+  el_val_t g_label = greeting;
+  widget_add_child(root, greeting);
+  el_val_t gap4 = label(EL_STR(""));
+  widget_set_height(gap4, 24);
+  widget_add_child(root, gap4);
+  el_val_t counter_row = hstack(12);
+  el_val_t counter_lbl = label(EL_STR("Clicks: 0"));
+  style_label_body(counter_lbl);
+  el_val_t g_counter_lbl = counter_lbl;
+  el_val_t counter_btn = button(EL_STR("Click me"));
+  style_button_primary(counter_btn);
+  widget_on_click(counter_btn, EL_STR("on_counter_click"));
+  widget_add_child(counter_row, counter_lbl);
+  widget_add_child(counter_row, counter_btn);
+  widget_add_child(root, counter_row);
+  widget_add_child(window, root);
+  return 0;
+}
+
+int main(int _argc, char** _argv) {
+  el_runtime_init_args(_argc, _argv);
+  g_window = (-1);
+  g_label = (-1);
+  g_input = (-1);
+  g_button = (-1);
+  g_counter = 0;
+  g_counter_lbl = (-1);
+  native_init();
+  manifest_env = env(EL_STR("EL_MANIFEST"));
+  manifest_path = ({ el_val_t _if_result_2 = 0; if ((str_len(manifest_env) > 0)) { _if_result_2 = (manifest_env); } else { _if_result_2 = (EL_STR("manifest.el")); } _if_result_2; });
+  win = window_from_manifest(manifest_path);
+  g_window = win;
+  if (win < 0) {
+    println(EL_STR("Error: failed to create window. Is EL_TARGET_MACOS defined?"));
+    exit_program(1);
+  }
+  app_build(win);
+  window_show(win);
+  native_run_loop();
+  return 0;
+}
+

ui/examples/native-hello-android/app/src/main/res/layout/activity_main.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  activity_main.xml — placeholder layout.
+
+  The el program sets the content view programmatically via ElBridge.setContentView
+  (called from __window_show → el_android_window_show). This layout is not used
+  at runtime but satisfies Gradle's res/ validation checks.
+-->
+<LinearLayout
+    xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:orientation="vertical" />

ui/examples/native-hello-android/app/src/main/res/values/strings.xml

@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <string name="app_name">el-native</string>
+</resources>

ui/examples/native-hello-android/build.gradle

@@ -0,0 +1,4 @@
+// Top-level build file — configuration for all sub-projects/modules.
+plugins {
+    id 'com.android.application' version '8.2.2' apply false
+}

ui/examples/native-hello-android/build.sh

@@ -0,0 +1,83 @@
+#!/usr/bin/env bash
+# build.sh — Build native-hello-android.
+#
+# Usage:
+#   ./build.sh           # regenerate C sources + ./gradlew assembleDebug
+#   ./build.sh gen       # regenerate C sources only
+#   ./build.sh gradle    # run ./gradlew assembleDebug (skip elc step)
+#   ./build.sh clean     # clean Gradle build outputs
+#
+# Requirements:
+#   - Android SDK with NDK and CMake installed
+#   - local.properties present (copy from local.properties.template and edit sdk.dir)
+#   - Java 11+ on PATH (for Gradle)
+#   - elc at ../../../lang/dist/platform/elc
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EL_LANG_ROOT="${SCRIPT_DIR}/../../../lang"
+EL_UI_ROOT="${SCRIPT_DIR}/../.."
+EL_RUNTIME="${EL_LANG_ROOT}/el-compiler/runtime"
+EL_NATIVE_VESSEL="${EL_UI_ROOT}/vessels/el-native/src/main.el"
+EL_APP_ENTRY="${EL_UI_ROOT}/examples/native-hello/src/main.el"
+EL_MANIFEST="${EL_UI_ROOT}/examples/native-hello/manifest.el"
+JNI_DIR="${SCRIPT_DIR}/app/src/main/jni"
+
+# Locate elc.
+if command -v elc &>/dev/null; then
+    ELC="elc"
+elif [ -x "${EL_LANG_ROOT}/dist/platform/elc" ]; then
+    ELC="${EL_LANG_ROOT}/dist/platform/elc"
+else
+    echo "Error: elc not found. Add it to PATH or place it at:"
+    echo "  ${EL_LANG_ROOT}/dist/platform/elc"
+    exit 1
+fi
+
+gen() {
+    echo "==> Generating native_hello.c..."
+    EL_MANIFEST="${EL_MANIFEST}" \
+        "${ELC}" "${EL_APP_ENTRY}" \
+        > "${JNI_DIR}/native_hello.c"
+
+    echo "==> Generating el_native_vessel.c..."
+    "${ELC}" "${EL_NATIVE_VESSEL}" \
+        > "${JNI_DIR}/el_native_vessel.c"
+    # Rename the vessel's main() to avoid symbol collision with native_hello.c's main().
+    # The Android JNI entry point (nativeMain) calls native_hello.c's main() explicitly.
+    sed -i '' 's/^int main(int _argc, char\*\* _argv) {/int el_vessel_main(int _argc, char** _argv) {/' \
+        "${JNI_DIR}/el_native_vessel.c" 2>/dev/null || \
+    sed -i 's/^int main(int _argc, char\*\* _argv) {/int el_vessel_main(int _argc, char** _argv) {/' \
+        "${JNI_DIR}/el_native_vessel.c"
+
+    echo "==> C source generation complete."
+}
+
+gradle_build() {
+    echo "==> Running ./gradlew assembleDebug..."
+    cd "${SCRIPT_DIR}"
+    ./gradlew assembleDebug
+
+    APK_PATH="${SCRIPT_DIR}/app/build/outputs/apk/debug/app-debug.apk"
+    if [ -f "${APK_PATH}" ]; then
+        echo "==> Build complete."
+        echo "    APK: ${APK_PATH}"
+    else
+        echo "==> Build complete (APK path may differ — check app/build/outputs/apk/)."
+    fi
+}
+
+clean() {
+    echo "==> Cleaning..."
+    cd "${SCRIPT_DIR}"
+    ./gradlew clean
+    echo "==> Clean complete."
+}
+
+case "${1:-all}" in
+    gen)    gen ;;
+    gradle) gradle_build ;;
+    clean)  clean ;;
+    all|*)  gen && gradle_build ;;
+esac

ui/examples/native-hello-android/gradle.properties

@@ -0,0 +1,3 @@
+org.gradle.jvmargs=-Xmx2048m -Dfile.encoding=UTF-8
+android.useAndroidX=true
+android.enableJetifier=false

ui/examples/native-hello-android/gradle/wrapper/gradle-wrapper.properties

@@ -0,0 +1,6 @@
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.2-bin.zip
+networkTimeout=10000
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists

ui/examples/native-hello-android/gradlew

@@ -0,0 +1,122 @@
+#!/bin/sh
+#
+# Copyright © 2015-2021 the original authors.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Gradle start up script for POSIX generated by "gradle init".
+#
+
+# Attempt to set APP_HOME
+# Resolve links: $0 may be a link
+app_path=$0
+
+# Need this for daisy-chained symlinks.
+while
+    APP_HOME=${app_path%"${app_path##*/}"}  # leaves a trailing /; empty if no leading path
+    [ -h "$app_path" ]
+do
+    ls=$( ls -ld "$app_path" )
+    link=${ls#*' -> '}
+    case $link in             #(
+      /*)   app_path=$link ;; #(
+      # Make relative path absolute, based on the path of the symlink:
+      *)    app_path=$APP_HOME$link ;;
+    esac
+done
+
+APP_HOME=$( cd "${APP_HOME:-./}" && pwd -P ) || exit
+
+APP_NAME="Gradle"
+APP_BASE_NAME=${0##*/}
+
+# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script.
+DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"'
+
+# Use the maximum available, or set MAX_FD != -1 to use that value.
+MAX_FD=maximum
+
+warn () {
+    echo "$*"
+} >&2
+
+die () {
+    echo
+    echo "$*"
+    echo
+    exit 1
+} >&2
+
+# OS specific support (must be 'true' or 'false').
+cygwin=false
+msys=false
+darwin=false
+nonstop=false
+case "$( uname )" in              #(
+  CYGWIN* )         cygwin=true  ;; #(
+  Darwin* )         darwin=true  ;; #(
+  MSYS* | MINGW* )  msys=true    ;; #(
+  NONSTOP* )        nonstop=true ;;
+esac
+
+CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar
+
+# Determine the Java command to use to start the JVM.
+if [ -n "$JAVA_HOME" ] ; then
+    if [ -x "$JAVA_HOME/jre/sh/java" ] ; then
+        # IBM's JDK on AIX uses strange locations for the executables
+        JAVACMD=$JAVA_HOME/jre/sh/java
+    else
+        JAVACMD=$JAVA_HOME/bin/java
+    fi
+    if [ ! -x "$JAVACMD" ] ; then
+        die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+    fi
+else
+    JAVACMD=java
+    if ! command -v java >/dev/null 2>&1
+    then
+        die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
+
+Please set the JAVA_HOME variable in your environment to match the
+location of your Java installation."
+    fi
+fi
+
+# Increase the maximum file descriptors if we can.
+if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then
+    case $MAX_FD in #(
+      max*)
+        # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked.
+        # shellcheck disable=SC2039,SC3045
+        MAX_FD=$( ulimit -H -n ) ||
+            warn "Could not query maximum file descriptor limit"
+        ;;
+    esac
+    case $MAX_FD in  #(
+      '' | soft) :;; #(
+      *)
+        # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked.
+        # shellcheck disable=SC2039,SC3045
+        ulimit -n "$MAX_FD" ||
+            warn "Could not set maximum file descriptor limit to $MAX_FD"
+    esac
+fi
+
+# Collect all arguments for the java command, following the shell quoting and substitution rules
+eval set -- $DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS "\"-Dorg.gradle.appname=$APP_BASE_NAME\"" -classpath "\"$CLASSPATH\"" org.gradle.wrapper.GradleWrapperMain "$@"
+
+exec "$JAVACMD" "$@"

ui/examples/native-hello-android/local.properties.template

@@ -0,0 +1,7 @@
+# local.properties — machine-local SDK/NDK paths. DO NOT commit. Copy to local.properties.
+#
+# Generate: Android Studio creates this automatically, or set manually:
+#   sdk.dir=/Users/<you>/Library/Android/sdk
+#   ndk.dir=/Users/<you>/Library/Android/sdk/ndk/<version>
+
+sdk.dir=/Users/will/Library/Android/sdk

ui/examples/native-hello-android/settings.gradle

@@ -0,0 +1,17 @@
+pluginManagement {
+    repositories {
+        google()
+        mavenCentral()
+        gradlePluginPortal()
+    }
+}
+dependencyResolutionManagement {
+    repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
+    repositories {
+        google()
+        mavenCentral()
+    }
+}
+
+rootProject.name = "native-hello-android"
+include ':app'

ui/examples/native-hello-ios/.gitignore

@@ -0,0 +1,4 @@
+build/
+*.xcuserstate
+xcuserdata/
+NativeHello.xcodeproj/xcuserdata/

ui/examples/native-hello-ios/NativeHello.xcodeproj/project.pbxproj

@@ -0,0 +1,377 @@
+// !$*UTF8*$!
+{
+	archiveVersion = 1;
+	classes = {
+	};
+	objectVersion = 56;
+	objects = {
+
+/* Begin PBXBuildFile section */
+		4C6D9832BE495DD69A8573D9 /* main.m in Sources */ = {isa = PBXBuildFile; fileRef = 8FFDE02477855A55BC5F02CE /* main.m */; };
+		396FD073065B58F39358D798 /* el_uikit.m in Sources */ = {isa = PBXBuildFile; fileRef = 606F96EC1EDC54CD99E7D722 /* el_uikit.m */; settings = {COMPILER_FLAGS = "-fno-objc-arc"; }; };
+		92BBC3E2AA055FCE840BF779 /* el_seed.c in Sources */ = {isa = PBXBuildFile; fileRef = 618FBE18EAA850D9B493A20F /* el_seed.c */; };
+		136C7763096C5037A69077AD /* el_runtime.c in Sources */ = {isa = PBXBuildFile; fileRef = A8CCF8316D83597CBB332064 /* el_runtime.c */; };
+		25136DF2A63F507EA5C7EF99 /* el_native_vessel.c in Sources */ = {isa = PBXBuildFile; fileRef = 3373ABFFE7FB5EFA9343AD02 /* el_native_vessel.c */; };
+		C05D581DBD4E52F6B7F7303E /* native_hello.c in Sources */ = {isa = PBXBuildFile; fileRef = EDA408C749EB5F3CA1E5EEC2 /* native_hello.c */; };
+		C3D9A9987F0050EB859D9218 /* UIKit.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = FF42D2E0FA0655149E573F7C /* UIKit.framework */; };
+/* End PBXBuildFile section */
+
+/* Begin PBXFileReference section */
+		8FFDE02477855A55BC5F02CE /* main.m */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.objc; path = main.m; sourceTree = "<group>"; };
+		606F96EC1EDC54CD99E7D722 /* el_uikit.m */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.objc; path = el_uikit.m; sourceTree = "<group>"; };
+		618FBE18EAA850D9B493A20F /* el_seed.c */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.c; path = el_seed.c; sourceTree = "<group>"; };
+		A8CCF8316D83597CBB332064 /* el_runtime.c */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.c; path = el_runtime.c; sourceTree = "<group>"; };
+		530AA788858357FBA923217E /* el_runtime.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = el_runtime.h; sourceTree = "<group>"; };
+		E1A7B02609E95D1686523B80 /* el_native_target.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = el_native_target.h; sourceTree = "<group>"; };
+		3373ABFFE7FB5EFA9343AD02 /* el_native_vessel.c */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.c; path = el_native_vessel.c; sourceTree = "<group>"; };
+		EDA408C749EB5F3CA1E5EEC2 /* native_hello.c */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.c; path = native_hello.c; sourceTree = "<group>"; };
+		08B6475D8C7952F48EF46B10 /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist.xml; path = Info.plist; sourceTree = "<group>"; };
+		FF42D2E0FA0655149E573F7C /* UIKit.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = UIKit.framework; path = System/Library/Frameworks/UIKit.framework; sourceTree = SDKROOT; };
+		BDC23A5F3FCD5D1098144064 /* NativeHello.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = NativeHello.app; sourceTree = BUILT_PRODUCTS_DIR; };
+/* End PBXFileReference section */
+
+/* Begin PBXFrameworksBuildPhase section */
+		5673C72A848C5FFF94E7CF8F /* Frameworks */ = {
+			isa = PBXFrameworksBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				C3D9A9987F0050EB859D9218 /* UIKit.framework in Frameworks */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXFrameworksBuildPhase section */
+
+/* Begin PBXGroup section */
+		05039DD2316A5B41A35E094E /* root */ = {
+			isa = PBXGroup;
+			children = (
+				EBC5644CBC315AFDA6A6A59E /* NativeHello */,
+				D1E4BC2FC3925E6FAFCD38F6 /* Frameworks */,
+				177F2C27230B527E80CEAED5 /* Products */,
+			);
+			sourceTree = "<group>";
+		};
+		177F2C27230B527E80CEAED5 /* Products */ = {
+			isa = PBXGroup;
+			children = (
+				BDC23A5F3FCD5D1098144064 /* NativeHello.app */,
+			);
+			name = Products;
+			sourceTree = "<group>";
+		};
+		EBC5644CBC315AFDA6A6A59E /* NativeHello */ = {
+			isa = PBXGroup;
+			children = (
+				8FFDE02477855A55BC5F02CE /* main.m */,
+				606F96EC1EDC54CD99E7D722 /* el_uikit.m */,
+				618FBE18EAA850D9B493A20F /* el_seed.c */,
+				A8CCF8316D83597CBB332064 /* el_runtime.c */,
+				530AA788858357FBA923217E /* el_runtime.h */,
+				E1A7B02609E95D1686523B80 /* el_native_target.h */,
+				3373ABFFE7FB5EFA9343AD02 /* el_native_vessel.c */,
+				EDA408C749EB5F3CA1E5EEC2 /* native_hello.c */,
+				08B6475D8C7952F48EF46B10 /* Info.plist */,
+			);
+			path = NativeHello;
+			sourceTree = "<group>";
+		};
+		D1E4BC2FC3925E6FAFCD38F6 /* Frameworks */ = {
+			isa = PBXGroup;
+			children = (
+				FF42D2E0FA0655149E573F7C /* UIKit.framework */,
+			);
+			name = Frameworks;
+			sourceTree = "<group>";
+		};
+/* End PBXGroup section */
+
+/* Begin PBXNativeTarget section */
+		F1275C1CDFD05A40B9D6C717 /* NativeHello */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = 07AFC970D6B05512B39EDE6A /* Build configuration list for PBXNativeTarget "NativeHello" */;
+			buildPhases = (
+				DF29C8DEE5CB5F1C83967F1F /* Sources */,
+				5673C72A848C5FFF94E7CF8F /* Frameworks */,
+				D6D57F9604C45AAEA747645E /* Resources */,
+			);
+			buildRules = (
+			);
+			dependencies = (
+			);
+			name = NativeHello;
+			productName = NativeHello;
+			productReference = BDC23A5F3FCD5D1098144064 /* NativeHello.app */;
+			productType = "com.apple.product-type.application";
+		};
+/* End PBXNativeTarget section */
+
+/* Begin PBXProject section */
+		D8A823993D3254C7B6541F91 /* Project object */ = {
+			isa = PBXProject;
+			attributes = {
+				BuildIndependentTargetsInParallel = 1;
+				LastUpgradeCheck = 1500;
+				TargetAttributes = {
+					F1275C1CDFD05A40B9D6C717 = {
+						CreatedOnToolsVersion = 15.0;
+					};
+				};
+			};
+			buildConfigurationList = 3DAB235BBB945E0CBB3EF554 /* Build configuration list for PBXProject "NativeHello" */;
+			compatibilityVersion = "Xcode 14.0";
+			developmentRegion = en;
+			hasScannedForEncodings = 0;
+			knownRegions = (
+				en,
+				Base,
+			);
+			mainGroup = 05039DD2316A5B41A35E094E;
+			productRefGroup = 177F2C27230B527E80CEAED5 /* Products */;
+			projectDirPath = "";
+			projectRoot = "";
+			targets = (
+				F1275C1CDFD05A40B9D6C717 /* NativeHello */,
+			);
+		};
+/* End PBXProject section */
+
+/* Begin PBXResourcesBuildPhase section */
+		D6D57F9604C45AAEA747645E /* Resources */ = {
+			isa = PBXResourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXResourcesBuildPhase section */
+
+/* Begin PBXSourcesBuildPhase section */
+		DF29C8DEE5CB5F1C83967F1F /* Sources */ = {
+			isa = PBXSourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				4C6D9832BE495DD69A8573D9 /* main.m in Sources */,
+				396FD073065B58F39358D798 /* el_uikit.m in Sources */,
+				92BBC3E2AA055FCE840BF779 /* el_seed.c in Sources */,
+				136C7763096C5037A69077AD /* el_runtime.c in Sources */,
+				25136DF2A63F507EA5C7EF99 /* el_native_vessel.c in Sources */,
+				C05D581DBD4E52F6B7F7303E /* native_hello.c in Sources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXSourcesBuildPhase section */
+
+/* Begin XCBuildConfiguration section */
+		071FC6E313815E66BB76FC93 /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++20";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = NO;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_EXCEPTION = YES;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = dwarf;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				ENABLE_TESTABILITY = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_DYNAMIC_NO_PIC = NO;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_OPTIMIZATION_LEVEL = 0;
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"DEBUG=1",
+					"$(inherited)",
+				);
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.0;
+				MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE;
+				MTL_FAST_MATH = YES;
+				ONLY_ACTIVE_ARCH = YES;
+				SDKROOT = iphoneos;
+				SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG;
+			};
+			name = Debug;
+		};
+		64E467FC48E757C0BDE1DFF6 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++20";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = NO;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_EXCEPTION = YES;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
+				ENABLE_NS_ASSERTIONS = NO;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.0;
+				MTL_FAST_MATH = YES;
+				SDKROOT = iphoneos;
+				VALIDATE_PRODUCT = YES;
+			};
+			name = Release;
+		};
+		5DAFA921569F54D081B65492 /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = AccentColor;
+				CODE_SIGN_STYLE = Automatic;
+				CURRENT_PROJECT_VERSION = 1;
+				DEVELOPMENT_TEAM = "";
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"EL_TARGET_IOS=1",
+					"DEBUG=1",
+					"$(inherited)",
+				);
+				HEADER_SEARCH_PATHS = (
+					"$(SRCROOT)/NativeHello",
+					"$(inherited)",
+				);
+				INFOPLIST_FILE = NativeHello/Info.plist;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.0;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+				);
+				MARKETING_VERSION = 1.0;
+				OTHER_CFLAGS = (
+					"-DEL_TARGET_IOS",
+					"$(inherited)",
+				);
+				OTHER_LDFLAGS = (
+					"-ldl",
+					"$(inherited)",
+				);
+				PRODUCT_BUNDLE_IDENTIFIER = ai.neurontechnologies.el.nativehello;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				SWIFT_EMIT_LOC_STRINGS = YES;
+				TARGETED_DEVICE_FAMILY = "1,2";
+			};
+			name = Debug;
+		};
+		81898B3044815511B8C31D64 /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = AccentColor;
+				CODE_SIGN_STYLE = Automatic;
+				CURRENT_PROJECT_VERSION = 1;
+				DEVELOPMENT_TEAM = "";
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"EL_TARGET_IOS=1",
+					"$(inherited)",
+				);
+				HEADER_SEARCH_PATHS = (
+					"$(SRCROOT)/NativeHello",
+					"$(inherited)",
+				);
+				INFOPLIST_FILE = NativeHello/Info.plist;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.0;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+				);
+				MARKETING_VERSION = 1.0;
+				OTHER_CFLAGS = (
+					"-DEL_TARGET_IOS",
+					"$(inherited)",
+				);
+				OTHER_LDFLAGS = (
+					"-ldl",
+					"$(inherited)",
+				);
+				PRODUCT_BUNDLE_IDENTIFIER = ai.neurontechnologies.el.nativehello;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				SWIFT_EMIT_LOC_STRINGS = YES;
+				TARGETED_DEVICE_FAMILY = "1,2";
+			};
+			name = Release;
+		};
+/* End XCBuildConfiguration section */
+
+/* Begin XCConfigurationList section */
+		3DAB235BBB945E0CBB3EF554 /* Build configuration list for PBXProject "NativeHello" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				071FC6E313815E66BB76FC93 /* Debug */,
+				64E467FC48E757C0BDE1DFF6 /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+		07AFC970D6B05512B39EDE6A /* Build configuration list for PBXNativeTarget "NativeHello" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				5DAFA921569F54D081B65492 /* Debug */,
+				81898B3044815511B8C31D64 /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+/* End XCConfigurationList section */
+
+	};
+	rootObject = D8A823993D3254C7B6541F91 /* Project object */;
+}

ui/examples/native-hello-ios/NativeHello.xcodeproj/xcshareddata/xcschemes/NativeHello.xcscheme

@@ -0,0 +1,78 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Scheme
+   LastUpgradeVersion = "1500"
+   version = "1.7">
+   <BuildAction
+      parallelizeBuildables = "YES"
+      buildImplicitDependencies = "YES">
+      <BuildActionEntries>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "YES"
+            buildForProfiling = "YES"
+            buildForArchiving = "YES"
+            buildForAnalyzing = "YES">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "F1275C1CDFD05A40B9D6C717"
+               BuildableName = "NativeHello.app"
+               BlueprintName = "NativeHello"
+               ReferencedContainer = "container:NativeHello.xcodeproj">
+            </BuildableReference>
+         </BuildActionEntry>
+      </BuildActionEntries>
+   </BuildAction>
+   <TestAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      shouldUseLaunchSchemeArgsEnv = "YES">
+      <Testables>
+      </Testables>
+   </TestAction>
+   <LaunchAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      launchStyle = "0"
+      useCustomWorkingDirectory = "NO"
+      ignoresPersistentStateOnLaunch = "NO"
+      debugDocumentVersioning = "YES"
+      debugServiceExtension = "internal"
+      allowLocationSimulation = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "F1275C1CDFD05A40B9D6C717"
+            BuildableName = "NativeHello.app"
+            BlueprintName = "NativeHello"
+            ReferencedContainer = "container:NativeHello.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </LaunchAction>
+   <ProfileAction
+      buildConfiguration = "Release"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      savedToolIdentifier = ""
+      useCustomWorkingDirectory = "NO"
+      debugDocumentVersioning = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "F1275C1CDFD05A40B9D6C717"
+            BuildableName = "NativeHello.app"
+            BlueprintName = "NativeHello"
+            ReferencedContainer = "container:NativeHello.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </ProfileAction>
+   <AnalyzeAction
+      buildConfiguration = "Debug">
+   </AnalyzeAction>
+   <ArchiveAction
+      buildConfiguration = "Release"
+      revealArchiveInOrganizer = "YES">
+   </ArchiveAction>
+</Scheme>

ui/examples/native-hello-ios/NativeHello/Info.plist

@@ -0,0 +1,38 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>CFBundleDevelopmentRegion</key>
+    <string>$(DEVELOPMENT_LANGUAGE)</string>
+    <key>CFBundleExecutable</key>
+    <string>$(EXECUTABLE_NAME)</string>
+    <key>CFBundleIdentifier</key>
+    <string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+    <key>CFBundleInfoDictionaryVersion</key>
+    <string>6.0</string>
+    <key>CFBundleName</key>
+    <string>$(PRODUCT_NAME)</string>
+    <key>CFBundlePackageType</key>
+    <string>$(PRODUCT_BUNDLE_PACKAGE_TYPE)</string>
+    <key>CFBundleShortVersionString</key>
+    <string>1.0</string>
+    <key>CFBundleVersion</key>
+    <string>1</string>
+    <key>LSRequiresIPhoneOS</key>
+    <true/>
+    <key>UIApplicationSceneManifest</key>
+    <dict/>
+    <key>UILaunchScreen</key>
+    <dict/>
+    <key>UIRequiredDeviceCapabilities</key>
+    <array>
+        <string>armv7</string>
+    </array>
+    <key>UISupportedInterfaceOrientations</key>
+    <array>
+        <string>UIInterfaceOrientationPortrait</string>
+        <string>UIInterfaceOrientationLandscapeLeft</string>
+        <string>UIInterfaceOrientationLandscapeRight</string>
+    </array>
+</dict>
+</plist>

ui/examples/native-hello-ios/NativeHello/el_native_target.h

@@ -0,0 +1,573 @@
+/*
+ * el_native_target.h — Native widget declarations for el programs targeting
+ * native desktop UI (AppKit / GTK4 / Win32).
+ *
+ * This header is designed to be included AFTER el_runtime.h without conflict:
+ *   - It does NOT redefine el_to_float, el_from_float, or any el_runtime.h
+ *     static inlines.
+ *   - It does NOT redeclare __println, __print, or other functions whose
+ *     return types differ between el_seed.h and el_runtime.h.
+ *   - It adds: native widget builtins + float arithmetic helpers that the
+ *     current el_runtime.h omits but elc still emits calls to.
+ *
+ * Usage:
+ *   Inject via -include at compile time, OR #include it after el_runtime.h.
+ *
+ *   clang -DEL_TARGET_MACOS -include el_native_target.h -c my_app.c ...
+ */
+
+#pragma once
+
+#include <stdint.h>
+#include <stdlib.h>
+
+/* el_val_t must already be defined by el_runtime.h or el_seed.h. */
+#ifndef EL_VAL_T_DEFINED
+typedef int64_t el_val_t;
+#endif
+
+/* ── Float arithmetic helpers ───────────────────────────────────────────────
+ * elc emits calls to float_div / float_mul etc. for Float-typed expressions.
+ * These were in el_runtime.c through v1.0.0-20260501 but are missing from the
+ * current el_runtime.h. Redeclared here as static inline to avoid link deps.
+ * Only defined if not already declared (old runtimes that still have them). */
+
+#ifndef EL_FLOAT_OPS_DEFINED
+#define EL_FLOAT_OPS_DEFINED
+
+/* el_to_float / el_from_float — bit-cast between el_val_t and double.
+ * Defined as static inline in both el_runtime.h and el_seed.h; we do NOT
+ * redefine them here. We rely on one of those headers being included first. */
+
+static inline el_val_t float_div(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b;
+    ur.d = (ub.d != 0.0) ? (ua.d / ub.d) : 0.0;
+    return ur.i;
+}
+
+static inline el_val_t float_mul(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d * ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_add(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d + ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_sub(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d - ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_lt(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d < ub.d);
+}
+
+static inline el_val_t float_gt(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d > ub.d);
+}
+
+static inline el_val_t float_lte(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d <= ub.d);
+}
+
+static inline el_val_t float_gte(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d >= ub.d);
+}
+
+static inline el_val_t float_eq(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d == ub.d);
+}
+
+#endif /* EL_FLOAT_OPS_DEFINED */
+
+/* ── Native widget system (macOS AppKit) ────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_MACOS and linked with el_appkit.m.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid. */
+
+#ifdef EL_TARGET_MACOS
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_MACOS */
+
+/* ── Native widget system (Linux GTK4) ──────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_LINUX and linked with el_gtk4.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ * All functions have the same signatures as EL_TARGET_MACOS above. */
+
+#ifdef EL_TARGET_LINUX
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader — same JSON output as EL_TARGET_MACOS */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_LINUX */
+
+/* ── Native widget system (Windows Win32) ───────────────────────────────────
+ * Available when compiled with -DEL_TARGET_WIN32 and linked with el_win32.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ * Link: el_win32.obj comctl32.lib user32.lib gdi32.lib */
+
+#ifdef EL_TARGET_WIN32
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_WIN32 */
+
+/* ── Native widget system (iOS UIKit) ───────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_IOS and linked with el_uikit.m.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * iOS lifecycle note: UIApplicationMain never returns. The el program must
+ * store its UI-build logic in a void(*)(void) function pointer, assign it to
+ * el_main_entry_fn, then call __native_run_loop. ElAppDelegate invokes
+ * el_main_entry_fn inside didFinishLaunchingWithOptions.
+ * Call el_uikit_set_args(argc, argv) from main() before __native_run_loop. */
+
+#ifdef EL_TARGET_IOS
+
+/* Lifecycle entry-function hook — set before calling __native_run_loop. */
+extern void (*el_main_entry_fn)(void);
+
+/* Forward argc/argv from main() to UIApplicationMain. */
+void      el_uikit_set_args(int argc, char** argv);
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_IOS */
+
+/* ── Native widget system (Android JNI) ─────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_ANDROID and linked with
+ * libelruntime.so (which includes el_android.c compiled by the NDK build).
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Java companion: ElBridge.java (package com.neuron.el) must be compiled into
+ * the APK. The Activity must call ElBridge.init(this) before any widget ops.
+ *
+ * Link flags (in Android.mk or CMakeLists.txt):
+ *   -landroid -llog -ldl */
+
+#ifdef EL_TARGET_ANDROID
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);   /* no-op on Android */
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_ANDROID */
+
+/* ── Native widget system (LVGL v9 — embedded / microcontroller) ─────────────
+ * Available when compiled with -DEL_TARGET_LVGL and linked with el_lvgl.c
+ * and the LVGL library (lvgl.a or lvgl source tree).
+ *
+ * Target platforms: ESP32, STM32, industrial panels. Any system with 256KB+
+ * RAM and an LVGL-compatible display driver. No OS required.
+ *
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Bare-metal / no dynamic linker:
+ *   Compile with -DEL_LVGL_NO_DLSYM and provide:
+ *     el_val_t el_lvgl_dispatch(const char *fn, el_val_t a, el_val_t b);
+ *
+ * Compile:
+ *   gcc -DEL_TARGET_LVGL -I./lvgl el_lvgl.c -c -o el_lvgl.o
+ *   # Then link with lvgl.a. */
+
+#ifdef EL_TARGET_LVGL
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader — same JSON output as all other native targets */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_LVGL */
+
+/* ── Native widget system (SDL2 — embedded / Pi) ────────────────────────────
+ * Available when compiled with -DEL_TARGET_SDL2 and linked with el_sdl2.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Target: Raspberry Pi Zero, embedded Linux, any system with a framebuffer
+ * and SDL2 available. No GTK, no desktop environment required.
+ *
+ * Compile:
+ *   gcc -DEL_TARGET_SDL2 $(sdl2-config --cflags) -c el_sdl2.c -o el_sdl2.o
+ * Link:
+ *   $(sdl2-config --libs) -lSDL2_ttf -lSDL2_image -ldl */
+
+#ifdef EL_TARGET_SDL2
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_SDL2 */

ui/examples/native-hello-ios/NativeHello/el_native_vessel.c

@@ -0,0 +1,459 @@
+#include <stdint.h>
+#include <stdlib.h>
+#include "el_runtime.h"
+
+el_val_t native_init(void);
+el_val_t native_run_loop(void);
+el_val_t manifest_read(el_val_t path);
+el_val_t manifest_title(el_val_t m);
+el_val_t manifest_width(el_val_t m);
+el_val_t manifest_height(el_val_t m);
+el_val_t manifest_min_width(el_val_t m);
+el_val_t manifest_min_height(el_val_t m);
+el_val_t window_create(el_val_t title, el_val_t width, el_val_t height, el_val_t min_width, el_val_t min_height);
+el_val_t window_from_manifest(el_val_t manifest_path);
+el_val_t window_show(el_val_t handle);
+el_val_t window_set_title(el_val_t handle, el_val_t title);
+el_val_t vstack(el_val_t spacing);
+el_val_t vstack_tight(void);
+el_val_t hstack(el_val_t spacing);
+el_val_t zstack(void);
+el_val_t scroll(void);
+el_val_t label(el_val_t text);
+el_val_t button(el_val_t label);
+el_val_t text_field(el_val_t placeholder);
+el_val_t text_area(el_val_t placeholder);
+el_val_t image(el_val_t path_or_name);
+el_val_t widget_set_text(el_val_t handle, el_val_t text);
+el_val_t widget_get_text(el_val_t handle);
+el_val_t widget_set_color(el_val_t handle, el_val_t r, el_val_t g, el_val_t b, el_val_t a);
+el_val_t widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g, el_val_t b, el_val_t a);
+el_val_t widget_set_font(el_val_t handle, el_val_t family, el_val_t size, el_val_t bold);
+el_val_t widget_set_padding(el_val_t handle, el_val_t top, el_val_t right, el_val_t bottom, el_val_t left);
+el_val_t widget_set_padding_all(el_val_t handle, el_val_t p);
+el_val_t widget_set_padding_xy(el_val_t handle, el_val_t px, el_val_t py);
+el_val_t widget_set_width(el_val_t handle, el_val_t width);
+el_val_t widget_set_height(el_val_t handle, el_val_t height);
+el_val_t widget_set_flex(el_val_t handle, el_val_t flex);
+el_val_t widget_set_corner_radius(el_val_t handle, el_val_t radius);
+el_val_t widget_set_disabled(el_val_t handle, el_val_t disabled);
+el_val_t widget_set_hidden(el_val_t handle, el_val_t hidden);
+el_val_t widget_add_child(el_val_t parent, el_val_t child);
+el_val_t widget_remove_child(el_val_t parent, el_val_t child);
+el_val_t widget_destroy(el_val_t handle);
+el_val_t widget_on_click(el_val_t handle, el_val_t fn_name);
+el_val_t widget_on_change(el_val_t handle, el_val_t fn_name);
+el_val_t widget_on_submit(el_val_t handle, el_val_t fn_name);
+el_val_t hex_channel(el_val_t s, el_val_t offset);
+el_val_t hex_nibble(el_val_t c);
+el_val_t color_hex_r(el_val_t hex);
+el_val_t color_hex_g(el_val_t hex);
+el_val_t color_hex_b(el_val_t hex);
+el_val_t color_hex_a(el_val_t hex);
+el_val_t widget_set_color_hex(el_val_t handle, el_val_t hex);
+el_val_t widget_set_bg_color_hex(el_val_t handle, el_val_t hex);
+el_val_t style_surface(el_val_t handle);
+el_val_t style_button_primary(el_val_t handle);
+el_val_t style_label_body(el_val_t handle);
+el_val_t style_label_heading(el_val_t handle);
+el_val_t style_label_muted(el_val_t handle);
+
+el_val_t TOKEN_PRIMARY;
+el_val_t TOKEN_ON_PRIMARY;
+el_val_t TOKEN_BACKGROUND;
+el_val_t TOKEN_ON_BG;
+el_val_t TOKEN_SURFACE;
+el_val_t TOKEN_ON_SURFACE;
+el_val_t TOKEN_OUTLINE;
+el_val_t TOKEN_ERROR;
+
+el_val_t native_init(void) {
+  __native_init();
+  return 0;
+}
+
+el_val_t native_run_loop(void) {
+  __native_run_loop();
+  return 0;
+}
+
+el_val_t manifest_read(el_val_t path) {
+  return __manifest_read(path);
+  return 0;
+}
+
+el_val_t manifest_title(el_val_t m) {
+  return json_get_string(m, EL_STR("title"));
+  return 0;
+}
+
+el_val_t manifest_width(el_val_t m) {
+  return json_get_int(m, EL_STR("width"));
+  return 0;
+}
+
+el_val_t manifest_height(el_val_t m) {
+  return json_get_int(m, EL_STR("height"));
+  return 0;
+}
+
+el_val_t manifest_min_width(el_val_t m) {
+  return json_get_int(m, EL_STR("min_width"));
+  return 0;
+}
+
+el_val_t manifest_min_height(el_val_t m) {
+  return json_get_int(m, EL_STR("min_height"));
+  return 0;
+}
+
+el_val_t window_create(el_val_t title, el_val_t width, el_val_t height, el_val_t min_width, el_val_t min_height) {
+  return __window_create(title, width, height, min_width, min_height);
+  return 0;
+}
+
+el_val_t window_from_manifest(el_val_t manifest_path) {
+  el_val_t m = manifest_read(manifest_path);
+  el_val_t title = manifest_title(m);
+  el_val_t w = manifest_width(m);
+  el_val_t h = manifest_height(m);
+  el_val_t mw = manifest_min_width(m);
+  el_val_t mh = manifest_min_height(m);
+  el_val_t safe_w = ({ el_val_t _if_result_1 = 0; if ((w > 0)) { _if_result_1 = (w); } else { _if_result_1 = (1200); } _if_result_1; });
+  el_val_t safe_h = ({ el_val_t _if_result_2 = 0; if ((h > 0)) { _if_result_2 = (h); } else { _if_result_2 = (800); } _if_result_2; });
+  el_val_t safe_mw = ({ el_val_t _if_result_3 = 0; if ((mw > 0)) { _if_result_3 = (mw); } else { _if_result_3 = (600); } _if_result_3; });
+  el_val_t safe_mh = ({ el_val_t _if_result_4 = 0; if ((mh > 0)) { _if_result_4 = (mh); } else { _if_result_4 = (400); } _if_result_4; });
+  el_val_t safe_t = ({ el_val_t _if_result_5 = 0; if ((str_len(title) > 0)) { _if_result_5 = (title); } else { _if_result_5 = (EL_STR("App")); } _if_result_5; });
+  return window_create(safe_t, safe_w, safe_h, safe_mw, safe_mh);
+  return 0;
+}
+
+el_val_t window_show(el_val_t handle) {
+  __window_show(handle);
+  return 0;
+}
+
+el_val_t window_set_title(el_val_t handle, el_val_t title) {
+  __window_set_title(handle, title);
+  return 0;
+}
+
+el_val_t vstack(el_val_t spacing) {
+  return __vstack_create(spacing);
+  return 0;
+}
+
+el_val_t vstack_tight(void) {
+  return __vstack_create(0);
+  return 0;
+}
+
+el_val_t hstack(el_val_t spacing) {
+  return __hstack_create(spacing);
+  return 0;
+}
+
+el_val_t zstack(void) {
+  return __zstack_create();
+  return 0;
+}
+
+el_val_t scroll(void) {
+  return __scroll_create();
+  return 0;
+}
+
+el_val_t label(el_val_t text) {
+  return __label_create(text);
+  return 0;
+}
+
+el_val_t button(el_val_t label) {
+  return __button_create(label);
+  return 0;
+}
+
+el_val_t text_field(el_val_t placeholder) {
+  return __text_field_create(placeholder);
+  return 0;
+}
+
+el_val_t text_area(el_val_t placeholder) {
+  return __text_area_create(placeholder);
+  return 0;
+}
+
+el_val_t image(el_val_t path_or_name) {
+  return __image_create(path_or_name);
+  return 0;
+}
+
+el_val_t widget_set_text(el_val_t handle, el_val_t text) {
+  __widget_set_text(handle, text);
+  return 0;
+}
+
+el_val_t widget_get_text(el_val_t handle) {
+  return __widget_get_text(handle);
+  return 0;
+}
+
+el_val_t widget_set_color(el_val_t handle, el_val_t r, el_val_t g, el_val_t b, el_val_t a) {
+  __widget_set_color(handle, r, g, b, a);
+  return 0;
+}
+
+el_val_t widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g, el_val_t b, el_val_t a) {
+  __widget_set_bg_color(handle, r, g, b, a);
+  return 0;
+}
+
+el_val_t widget_set_font(el_val_t handle, el_val_t family, el_val_t size, el_val_t bold) {
+  el_val_t bold_int = ({ el_val_t _if_result_6 = 0; if (bold) { _if_result_6 = (1); } else { _if_result_6 = (0); } _if_result_6; });
+  __widget_set_font(handle, family, size, bold_int);
+  return 0;
+}
+
+el_val_t widget_set_padding(el_val_t handle, el_val_t top, el_val_t right, el_val_t bottom, el_val_t left) {
+  __widget_set_padding(handle, top, right, bottom, left);
+  return 0;
+}
+
+el_val_t widget_set_padding_all(el_val_t handle, el_val_t p) {
+  __widget_set_padding(handle, p, p, p, p);
+  return 0;
+}
+
+el_val_t widget_set_padding_xy(el_val_t handle, el_val_t px, el_val_t py) {
+  __widget_set_padding(handle, py, px, py, px);
+  return 0;
+}
+
+el_val_t widget_set_width(el_val_t handle, el_val_t width) {
+  __widget_set_width(handle, width);
+  return 0;
+}
+
+el_val_t widget_set_height(el_val_t handle, el_val_t height) {
+  __widget_set_height(handle, height);
+  return 0;
+}
+
+el_val_t widget_set_flex(el_val_t handle, el_val_t flex) {
+  __widget_set_flex(handle, flex);
+  return 0;
+}
+
+el_val_t widget_set_corner_radius(el_val_t handle, el_val_t radius) {
+  __widget_set_corner_radius(handle, radius);
+  return 0;
+}
+
+el_val_t widget_set_disabled(el_val_t handle, el_val_t disabled) {
+  el_val_t d = ({ el_val_t _if_result_7 = 0; if (disabled) { _if_result_7 = (1); } else { _if_result_7 = (0); } _if_result_7; });
+  __widget_set_disabled(handle, d);
+  return 0;
+}
+
+el_val_t widget_set_hidden(el_val_t handle, el_val_t hidden) {
+  el_val_t h = ({ el_val_t _if_result_8 = 0; if (hidden) { _if_result_8 = (1); } else { _if_result_8 = (0); } _if_result_8; });
+  __widget_set_hidden(handle, h);
+  return 0;
+}
+
+el_val_t widget_add_child(el_val_t parent, el_val_t child) {
+  __widget_add_child(parent, child);
+  return 0;
+}
+
+el_val_t widget_remove_child(el_val_t parent, el_val_t child) {
+  __widget_remove_child(parent, child);
+  return 0;
+}
+
+el_val_t widget_destroy(el_val_t handle) {
+  __widget_destroy(handle);
+  return 0;
+}
+
+el_val_t widget_on_click(el_val_t handle, el_val_t fn_name) {
+  __widget_on_click(handle, fn_name);
+  return 0;
+}
+
+el_val_t widget_on_change(el_val_t handle, el_val_t fn_name) {
+  __widget_on_change(handle, fn_name);
+  return 0;
+}
+
+el_val_t widget_on_submit(el_val_t handle, el_val_t fn_name) {
+  __widget_on_submit(handle, fn_name);
+  return 0;
+}
+
+el_val_t hex_channel(el_val_t s, el_val_t offset) {
+  el_val_t hi = str_slice(s, offset, (offset + 1));
+  el_val_t lo = str_slice(s, (offset + 1), (offset + 2));
+  el_val_t h = hex_nibble(hi);
+  el_val_t l = hex_nibble(lo);
+  return ((h * 16) + l);
+  return 0;
+}
+
+el_val_t hex_nibble(el_val_t c) {
+  if (str_eq(c, EL_STR("0"))) {
+    return 0;
+  }
+  if (str_eq(c, EL_STR("1"))) {
+    return 1;
+  }
+  if (str_eq(c, EL_STR("2"))) {
+    return 2;
+  }
+  if (str_eq(c, EL_STR("3"))) {
+    return 3;
+  }
+  if (str_eq(c, EL_STR("4"))) {
+    return 4;
+  }
+  if (str_eq(c, EL_STR("5"))) {
+    return 5;
+  }
+  if (str_eq(c, EL_STR("6"))) {
+    return 6;
+  }
+  if (str_eq(c, EL_STR("7"))) {
+    return 7;
+  }
+  if (str_eq(c, EL_STR("8"))) {
+    return 8;
+  }
+  if (str_eq(c, EL_STR("9"))) {
+    return 9;
+  }
+  if (str_eq(c, EL_STR("a"))) {
+    return 10;
+  }
+  if (str_eq(c, EL_STR("b"))) {
+    return 11;
+  }
+  if (str_eq(c, EL_STR("c"))) {
+    return 12;
+  }
+  if (str_eq(c, EL_STR("d"))) {
+    return 13;
+  }
+  if (str_eq(c, EL_STR("e"))) {
+    return 14;
+  }
+  if (str_eq(c, EL_STR("f"))) {
+    return 15;
+  }
+  if (str_eq(c, EL_STR("A"))) {
+    return 10;
+  }
+  if (str_eq(c, EL_STR("B"))) {
+    return 11;
+  }
+  if (str_eq(c, EL_STR("C"))) {
+    return 12;
+  }
+  if (str_eq(c, EL_STR("D"))) {
+    return 13;
+  }
+  if (str_eq(c, EL_STR("E"))) {
+    return 14;
+  }
+  if (str_eq(c, EL_STR("F"))) {
+    return 15;
+  }
+  return 0;
+  return 0;
+}
+
+el_val_t color_hex_r(el_val_t hex) {
+  el_val_t s = ({ el_val_t _if_result_9 = 0; if (str_starts_with(hex, EL_STR("#"))) { _if_result_9 = (str_slice(hex, 1, str_len(hex))); } else { _if_result_9 = (hex); } _if_result_9; });
+  el_val_t v = hex_channel(s, 0);
+  return float_div(int_to_float(v), el_from_float(255.0));
+  return 0;
+}
+
+el_val_t color_hex_g(el_val_t hex) {
+  el_val_t s = ({ el_val_t _if_result_10 = 0; if (str_starts_with(hex, EL_STR("#"))) { _if_result_10 = (str_slice(hex, 1, str_len(hex))); } else { _if_result_10 = (hex); } _if_result_10; });
+  el_val_t v = hex_channel(s, 2);
+  return float_div(int_to_float(v), el_from_float(255.0));
+  return 0;
+}
+
+el_val_t color_hex_b(el_val_t hex) {
+  el_val_t s = ({ el_val_t _if_result_11 = 0; if (str_starts_with(hex, EL_STR("#"))) { _if_result_11 = (str_slice(hex, 1, str_len(hex))); } else { _if_result_11 = (hex); } _if_result_11; });
+  el_val_t v = hex_channel(s, 4);
+  return float_div(int_to_float(v), el_from_float(255.0));
+  return 0;
+}
+
+el_val_t color_hex_a(el_val_t hex) {
+  el_val_t s = ({ el_val_t _if_result_12 = 0; if (str_starts_with(hex, EL_STR("#"))) { _if_result_12 = (str_slice(hex, 1, str_len(hex))); } else { _if_result_12 = (hex); } _if_result_12; });
+  if (str_len(s) < 8) {
+    return el_from_float(1.0);
+  }
+  el_val_t v = hex_channel(s, 6);
+  return float_div(int_to_float(v), el_from_float(255.0));
+  return 0;
+}
+
+el_val_t widget_set_color_hex(el_val_t handle, el_val_t hex) {
+  widget_set_color(handle, color_hex_r(hex), color_hex_g(hex), color_hex_b(hex), color_hex_a(hex));
+  return 0;
+}
+
+el_val_t widget_set_bg_color_hex(el_val_t handle, el_val_t hex) {
+  widget_set_bg_color(handle, color_hex_r(hex), color_hex_g(hex), color_hex_b(hex), color_hex_a(hex));
+  return 0;
+}
+
+el_val_t style_surface(el_val_t handle) {
+  widget_set_bg_color_hex(handle, TOKEN_SURFACE);
+  widget_set_corner_radius(handle, 8);
+  return 0;
+}
+
+el_val_t style_button_primary(el_val_t handle) {
+  widget_set_bg_color_hex(handle, TOKEN_PRIMARY);
+  widget_set_color_hex(handle, TOKEN_ON_PRIMARY);
+  widget_set_corner_radius(handle, 8);
+  widget_set_padding_xy(handle, 16, 8);
+  return 0;
+}
+
+el_val_t style_label_body(el_val_t handle) {
+  widget_set_color_hex(handle, TOKEN_ON_BG);
+  widget_set_font(handle, EL_STR("system"), 14, 0);
+  return 0;
+}
+
+el_val_t style_label_heading(el_val_t handle) {
+  widget_set_color_hex(handle, TOKEN_ON_BG);
+  widget_set_font(handle, EL_STR("system"), 20, 1);
+  return 0;
+}
+
+el_val_t style_label_muted(el_val_t handle) {
+  widget_set_color_hex(handle, TOKEN_OUTLINE);
+  widget_set_font(handle, EL_STR("system"), 12, 0);
+  return 0;
+}
+
+int el_vessel_main(int _argc, char** _argv) {
+  el_runtime_init_args(_argc, _argv);
+  TOKEN_PRIMARY = EL_STR("#60a5fa");
+  TOKEN_ON_PRIMARY = EL_STR("#0f172a");
+  TOKEN_BACKGROUND = EL_STR("#0f172a");
+  TOKEN_ON_BG = EL_STR("#f8fafc");
+  TOKEN_SURFACE = EL_STR("#1e293b");
+  TOKEN_ON_SURFACE = EL_STR("#f8fafc");
+  TOKEN_OUTLINE = EL_STR("#475569");
+  TOKEN_ERROR = EL_STR("#f87171");
+  return 0;
+}
+

ui/examples/native-hello-ios/NativeHello/el_runtime.h

@@ -0,0 +1,883 @@
+/*
+ * el_runtime.h — El language C runtime header
+ *
+ * Declares all built-in functions available to compiled El programs.
+ * Include this in every generated .c file.
+ *
+ * Value model:
+ *   All El values are represented as el_val_t (= int64_t).
+ *   On 64-bit systems a pointer fits in int64_t.
+ *   String values are cast: (el_val_t)(uintptr_t)"hello"
+ *   Integer values are stored directly.
+ *   This lets arithmetic work naturally while still passing strings around.
+ *
+ * Type conventions (El -> C):
+ *   String  -> el_val_t  (holds const char* via uintptr_t cast)
+ *   Int     -> el_val_t
+ *   Bool    -> el_val_t  (0 = false, nonzero = true)
+ *   Any     -> el_val_t
+ *   Void    -> void
+ *
+ * Macros for convenience:
+ *   EL_STR(s)    cast string literal to el_val_t
+ *   EL_CSTR(v)   cast el_val_t back to const char*
+ *   EL_INT(v)    identity — el_val_t is already int64_t
+ *   EL_NULL      null / zero value
+ *   EL_FALSE     boolean false (0)
+ *   EL_TRUE      boolean true (1)
+ *
+ * Link requirements:
+ *   -lcurl     — required for the HTTP client (http_get, http_post, llm_*).
+ *   -lpthread  — required for the HTTP server (one detached thread per
+ *                connection, capped at 64 concurrent).
+ *   -loqs      — optional; required only when liboqs is installed and the
+ *                pq_* / sha3_256_hex entry points are needed. Detected at
+ *                compile time via __has_include(<oqs/oqs.h>).
+ *   -lcrypto   — optional; pulled in alongside -loqs. Used for X25519 in
+ *                pq_hybrid_* and HKDF-SHA256 derivation.
+ *
+ * Canonical compile command:
+ *   cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
+ *      -o <out> <prog>.c el-compiler/runtime/el_runtime.c
+ *
+ * With liboqs (post-quantum stack):
+ *   cc -std=c11 -I el-compiler/runtime -lcurl -lpthread -loqs -lcrypto \
+ *      -o <out> <prog>.c el-compiler/runtime/el_runtime.c
+ */
+
+#pragma once
+
+#include <stdint.h>
+#include <stdlib.h>
+
+typedef int64_t el_val_t;
+
+#define EL_STR(s)  ((el_val_t)(uintptr_t)(s))
+#define EL_CSTR(v) ((const char*)(uintptr_t)(v))
+#define EL_INT(v)  (v)
+#define EL_NULL    ((el_val_t)0)
+#define EL_FALSE   ((el_val_t)0)
+#define EL_TRUE    ((el_val_t)1)
+
+/* Float values share the el_val_t (int64) slot via a bit-cast.
+ * The codegen emits Float literals as `el_from_float(<dbl>)` so the
+ * underlying bits represent the IEEE 754 double. Float-aware builtins
+ * (math, format, json) round-trip via these helpers. */
+static inline double el_to_float(el_val_t v) {
+    union { int64_t i; double f; } u;
+    u.i = (int64_t)v;
+    return u.f;
+}
+
+static inline el_val_t el_from_float(double f) {
+    union { double f; int64_t i; } u;
+    u.f = f;
+    return (el_val_t)u.i;
+}
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* ── I/O ──────────────────────────────────────────────────────────────────── */
+
+el_val_t  println(el_val_t s);
+el_val_t  print(el_val_t s);
+el_val_t  readline(void);
+
+/* ── String builtins ─────────────────────────────────────────────────────── */
+
+el_val_t  el_str_concat(el_val_t a, el_val_t b);
+el_val_t  str_eq(el_val_t a, el_val_t b);
+el_val_t  str_starts_with(el_val_t s, el_val_t prefix);
+el_val_t  str_ends_with(el_val_t s, el_val_t suffix);
+el_val_t  str_len(el_val_t s);
+el_val_t  str_concat(el_val_t a, el_val_t b);
+el_val_t  int_to_str(el_val_t n);
+el_val_t  str_to_int(el_val_t s);
+el_val_t  native_str_to_int(el_val_t s);
+el_val_t  str_slice(el_val_t s, el_val_t start, el_val_t end);
+el_val_t  str_contains(el_val_t s, el_val_t sub);
+el_val_t  str_replace(el_val_t s, el_val_t from, el_val_t to);
+el_val_t  str_to_upper(el_val_t s);
+el_val_t  str_to_lower(el_val_t s);
+el_val_t  str_trim(el_val_t s);
+
+/* ── Math ────────────────────────────────────────────────────────────────── */
+
+el_val_t  el_abs(el_val_t n);
+el_val_t  el_max(el_val_t a, el_val_t b);
+el_val_t  el_min(el_val_t a, el_val_t b);
+
+/* ── Refcount (ARC) ──────────────────────────────────────────────────────────
+ * Lists and Maps carry a refcount. Strings and ints do not — el_retain and
+ * el_release are safe no-ops on non-refcounted values (they sniff a magic
+ * header at offset 0 and only act if the magic matches).
+ *
+ * Codegen emits these at let-binding shadowing, function entry (params), and
+ * function exit (locals other than the returned value). The refcount lets
+ * el_list_append and el_map_set mutate in place when uniquely owned (cheap)
+ * and copy-on-write when shared (preserves persistent semantics across
+ * accumulator patterns in the compiler itself).                              */
+
+void      el_retain(el_val_t v);
+void      el_release(el_val_t v);
+
+/* ── Scoped arena (CLI use) ───────────────────────────────────────────────── */
+el_val_t  el_arena_push(void);
+el_val_t  el_arena_pop(el_val_t mark);
+
+/* ── List ────────────────────────────────────────────────────────────────── */
+
+el_val_t  el_list_new(el_val_t count, ...);
+el_val_t  el_list_len(el_val_t list);
+el_val_t  el_list_get(el_val_t list, el_val_t index);
+el_val_t  el_list_append(el_val_t list, el_val_t elem);
+el_val_t  el_list_empty(void);
+el_val_t  el_list_clone(el_val_t list);
+
+/* ── Map ─────────────────────────────────────────────────────────────────── */
+
+el_val_t  el_map_new(el_val_t pair_count, ...);
+el_val_t  el_get_field(el_val_t map, el_val_t key);
+el_val_t  el_map_get(el_val_t map, el_val_t key);
+el_val_t  el_map_set(el_val_t map, el_val_t key, el_val_t value);
+
+/* ── HTTP ─────────────────────────────────────────────────────────────────── */
+
+el_val_t  http_get(el_val_t url);
+el_val_t  http_post(el_val_t url, el_val_t body);
+el_val_t  http_post_json(el_val_t url, el_val_t json_body);
+el_val_t  http_get_with_headers(el_val_t url, el_val_t headers_map);
+el_val_t  http_post_with_headers(el_val_t url, el_val_t body, el_val_t headers_map);
+el_val_t  http_post_json_with_headers(el_val_t url, el_val_t headers_map, el_val_t json_body);
+el_val_t  http_post_form_auth(el_val_t url, el_val_t form_body, el_val_t auth_header);
+el_val_t  http_delete(el_val_t url);
+el_val_t  http_serve(el_val_t port, el_val_t handler);
+el_val_t  http_set_handler(el_val_t name);
+
+/* HTTP server v2 ─────────────────────────────────────────────────────────────
+ * Same dispatch model as http_serve, but the handler signature is widened:
+ *
+ *     el_val_t handler(method, path, headers_map, body)
+ *
+ * `headers_map` is an ElMap from lowercased header name → header value (both
+ * Strings). Repeated headers are joined with ", " per RFC 7230.
+ *
+ * Response value: the handler may return either
+ *   (a) a plain body string — same auto-content-type / 200-OK behaviour as
+ *       http_serve (3-arg) — or
+ *   (b) a response envelope built with `http_response(status, headers_json,
+ *       body)`. The runtime detects the envelope discriminator
+ *       `"el_http_response":1` at the start of the returned string and
+ *       unpacks status / headers / body before sending.
+ *
+ * The 3-arg http_serve(port, handler) remains supported unchanged for
+ * existing handlers (e.g. products/web/server.el): it dispatches with
+ * (method, path, body), hardcodes 200 OK, and auto-detects content type. */
+el_val_t  http_serve_v2(el_val_t port, el_val_t handler);
+el_val_t  http_set_handler_v2(el_val_t name);
+
+/* Build an HTTP response envelope. `headers_json` should be a JSON object
+ * literal like `{"WWW-Authenticate":"Basic"}` (or "" / "{}" for none). The
+ * returned string carries the discriminator `{"el_http_response":1,...}`
+ * which the runtime's send-path detects and unpacks. Detection happens
+ * uniformly inside http_send_response, so a 3-arg handler may also return
+ * an envelope. The 3-arg variant remains documented as a fixed 200-OK
+ * auto-content-type contract for legacy handlers that return plain bodies. */
+el_val_t  http_response(el_val_t status, el_val_t headers_json, el_val_t body);
+
+/* SSE connection fd — set by http_worker_v2 before calling the El handler,
+ * cleared afterwards. Defined in el_seed.c; called from el_runtime.c.
+ * The getter is exposed as __http_conn_fd() to El programs. */
+void      el_seed_set_http_conn_fd(int fd);
+
+/* HTTP timeout — every libcurl request honors EL_HTTP_TIMEOUT_MS (default
+ * 60000ms). Read lazily on first use, so setting the env var any time before
+ * the first http_* call is sufficient.                                    */
+
+/* Streaming variants — write the response body straight to a file via
+ * libcurl's CURLOPT_WRITEFUNCTION = fwrite. These bypass the el_val_t string
+ * wrapper entirely, so binary payloads (audio/mpeg, image/png, etc.) survive
+ * embedded NUL bytes that would truncate a strlen()-based code path.
+ *
+ * Both honor EL_HTTP_TIMEOUT_MS, follow redirects, and accept the same
+ * `headers_map` shape as http_post_with_headers (ElMap of String→String).
+ *
+ * Return value: 1 on success (file fully written), 0 on any failure
+ * (network, file open, partial write). On failure the output file is removed
+ * so callers cannot mistake a partially-written file for a valid one. */
+el_val_t  http_post_to_file(el_val_t url, el_val_t body, el_val_t headers_map, el_val_t output_path);
+el_val_t  http_get_to_file(el_val_t url, el_val_t headers_map, el_val_t output_path);
+
+/* ── URL encoding ────────────────────────────────────────────────────────── */
+
+el_val_t  url_encode(el_val_t s);   /* RFC 3986 unreserved set */
+el_val_t  url_decode(el_val_t s);   /* '+' → space, %XX → byte  */
+
+/* ── HTML allowlist sanitizer ────────────────────────────────────────────────
+ * el_html_sanitize(input_html, allowlist_json) — strict allowlist HTML
+ * cleaner. State-machine parser; tag/attribute names compared case-
+ * insensitively against the allowlist; `<a href>` / `<… src>` URL schemes
+ * validated (http, https, mailto, fragment-only, or relative); whole-
+ * subtree drop for script / style / iframe / object / embed / form; HTML-
+ * escapes free text outside dropped subtrees.
+ *
+ * The allowlist is JSON of the form
+ *     {"p":[],"a":["href","title"],"strong":[],...}
+ * where each value is the array of attribute names allowed for that tag. */
+el_val_t  el_html_sanitize(el_val_t input_html, el_val_t allowlist_json);
+el_val_t  html_raw(el_val_t s);
+el_val_t  html_escape(el_val_t s);
+
+/* ── Filesystem ──────────────────────────────────────────────────────────── */
+
+el_val_t  fs_read(el_val_t path);
+el_val_t  fs_write(el_val_t path, el_val_t content);
+el_val_t  fs_list(el_val_t path);
+el_val_t  fs_list_json(el_val_t path);
+el_val_t  fs_exists(el_val_t path);
+el_val_t  fs_mkdir(el_val_t path);   /* mkdir -p, mode 0755                */
+
+/* Length-explicit binary write. `length` is an Int (el_val_t holding the
+ * byte count). The caller knows the length from context — typically because
+ * `bytes` came from base64_decode (which produces a magic-tagged binary
+ * buffer with embedded NULs possible) and the caller already tracks the
+ * decoded length, OR because the bytes came from a fixed-size source
+ * (sha256_bytes = 32, hmac_sha256_bytes = 32). Bypasses strlen entirely.
+ *
+ * Returns 1 on success, 0 on failure (invalid path, can't open, partial
+ * write, negative length). On partial-write failure, the file is removed
+ * so callers cannot read back a truncated artefact. */
+el_val_t  fs_write_bytes(el_val_t path, el_val_t bytes, el_val_t length);
+
+/* ── JSON ────────────────────────────────────────────────────────────────── */
+
+el_val_t  json_get(el_val_t json, el_val_t key);
+el_val_t  json_parse(el_val_t s);
+el_val_t  json_stringify(el_val_t v);
+el_val_t  json_get_string(el_val_t json_str, el_val_t key);
+el_val_t  json_get_int(el_val_t json_str, el_val_t key);
+el_val_t  json_get_float(el_val_t json_str, el_val_t key);
+el_val_t  json_get_bool(el_val_t json_str, el_val_t key);
+el_val_t  json_get_raw(el_val_t json_str, el_val_t key);
+el_val_t  json_set(el_val_t json_str, el_val_t key, el_val_t value);
+el_val_t  json_array_len(el_val_t json_str);
+el_val_t  json_array_get(el_val_t json_str, el_val_t index);
+el_val_t  json_array_get_string(el_val_t json_str, el_val_t index);
+el_val_t  json_escape_string(el_val_t sv);
+el_val_t  json_build_object(el_val_t kvs);
+el_val_t  json_build_array(el_val_t items);
+
+/* ── Time ────────────────────────────────────────────────────────────────── */
+
+el_val_t  time_now(void);
+el_val_t  time_now_utc(void);
+el_val_t  sleep_secs(el_val_t secs);
+el_val_t  sleep_ms(el_val_t ms);
+el_val_t  time_format(el_val_t ts, el_val_t fmt);
+el_val_t  time_to_parts(el_val_t ts);
+el_val_t  time_from_parts(el_val_t secs, el_val_t ns, el_val_t tz);
+el_val_t  time_add(el_val_t ts, el_val_t n, el_val_t unit);
+el_val_t  time_diff(el_val_t ts1, el_val_t ts2, el_val_t unit);
+el_val_t  now_ns(void);
+
+/* ── Instant + Duration: first-class temporal types ──────────────────────────
+ * Both types share the el_val_t (int64) slot. Instants are nanoseconds
+ * since the Unix epoch; Durations are signed nanoseconds. Type discipline
+ * is enforced at codegen-time: BinOps on names registered as Instant or
+ * Duration route through the typed wrappers below; mismatches like
+ * Instant+Instant become #error at the C compiler.
+ *
+ * Postfix literals — `30.seconds`, `1.hour`, `500.millis`, `30.nanos` — are
+ * recognised by the parser as DurationLit AST nodes and lowered to literal
+ * int64 nanoseconds at codegen time. The runtime never sees the units. */
+
+el_val_t  el_now_instant(void);
+el_val_t  now(void);
+el_val_t  unix_seconds(el_val_t n);
+el_val_t  unix_millis(el_val_t n);
+el_val_t  instant_from_iso8601(el_val_t s);
+
+el_val_t  el_duration_from_nanos(el_val_t ns);
+el_val_t  duration_seconds(el_val_t n);
+el_val_t  duration_millis(el_val_t n);
+el_val_t  duration_nanos(el_val_t n);
+
+el_val_t  el_instant_add_dur(el_val_t inst, el_val_t dur);
+el_val_t  el_instant_sub_dur(el_val_t inst, el_val_t dur);
+el_val_t  el_instant_diff(el_val_t a, el_val_t b);
+el_val_t  el_duration_add(el_val_t a, el_val_t b);
+el_val_t  el_duration_sub(el_val_t a, el_val_t b);
+el_val_t  el_duration_scale(el_val_t dur, el_val_t scalar);
+el_val_t  el_duration_div(el_val_t dur, el_val_t scalar);
+
+el_val_t  el_instant_lt(el_val_t a, el_val_t b);
+el_val_t  el_instant_le(el_val_t a, el_val_t b);
+el_val_t  el_instant_gt(el_val_t a, el_val_t b);
+el_val_t  el_instant_ge(el_val_t a, el_val_t b);
+el_val_t  el_instant_eq(el_val_t a, el_val_t b);
+el_val_t  el_instant_ne(el_val_t a, el_val_t b);
+el_val_t  el_duration_lt(el_val_t a, el_val_t b);
+el_val_t  el_duration_le(el_val_t a, el_val_t b);
+el_val_t  el_duration_gt(el_val_t a, el_val_t b);
+el_val_t  el_duration_ge(el_val_t a, el_val_t b);
+el_val_t  el_duration_eq(el_val_t a, el_val_t b);
+el_val_t  el_duration_ne(el_val_t a, el_val_t b);
+
+el_val_t  instant_to_unix_seconds(el_val_t i);
+el_val_t  instant_to_unix_millis(el_val_t i);
+el_val_t  instant_to_iso8601(el_val_t i);
+el_val_t  duration_to_seconds(el_val_t d);
+el_val_t  duration_to_millis(el_val_t d);
+el_val_t  duration_to_nanos(el_val_t d);
+
+el_val_t  el_sleep_duration(el_val_t dur);
+el_val_t  unix_timestamp(void);
+
+el_val_t  ttl_cache_set(el_val_t key, el_val_t value);
+el_val_t  ttl_cache_get(el_val_t key, el_val_t max_age);
+el_val_t  ttl_cache_age(el_val_t key);
+
+/* ── Calendar + CalendarTime + Rhythm + LocalDate/Time/DateTime ─────────────
+ * Phase 1.5 of the time system. Calendar is pluggable: EarthCalendar (IANA
+ * zones, Gregorian, DST) is the user-facing default; MarsCalendar,
+ * CycleCalendar(period), NoCycleCalendar, RelativeCalendar handle non-Earth
+ * domains.
+ *
+ * A Calendar interprets an Instant under a particular cycle convention and
+ * produces a CalendarTime. CalendarTime carries the underlying Instant and
+ * a back-pointer to its Calendar; arithmetic and formatting consult the
+ * Calendar to convert ns since epoch into year/month/day/hour/minute/second
+ * (or sol/phase, or cycle/phase, depending on kind).
+ *
+ * Storage convention: Calendar / CalendarTime / Rhythm / LocalDate /
+ * LocalDateTime are heap-allocated structs whose pointers are cast into
+ * el_val_t. A 24-bit magic header at offset 0 lets the runtime identify
+ * the kind safely. LocalTime is small enough to live in the int64 slot
+ * directly (nanos since midnight, signed).                                  */
+
+/* Zone — opaque IANA zone or fixed offset, used by EarthCalendar.
+ * `zone_id` is either an IANA name ("America/New_York", "UTC") or a fixed
+ * offset string ("+05:30", "-08:00"). The runtime resolves it via tzset()
+ * on first use of the owning EarthCalendar.                                  */
+el_val_t  zone(el_val_t id);
+el_val_t  zone_utc(void);
+el_val_t  zone_local(void);
+el_val_t  zone_offset(el_val_t hours, el_val_t minutes);
+
+/* Calendar constructors. Each returns an el_val_t pointer to a heap-
+ * allocated, magic-tagged Calendar struct. Calendars are interned by
+ * (kind, zone_id, period_ns, epoch_ns) so identical constructors return
+ * the same pointer — equality is reference equality.                        */
+el_val_t  earth_calendar(el_val_t z);
+el_val_t  earth_calendar_default(void);
+el_val_t  mars_calendar(void);
+el_val_t  cycle_calendar(el_val_t period_dur);
+el_val_t  no_cycle_calendar(void);
+el_val_t  relative_calendar(el_val_t epoch_inst);
+
+/* CalendarTime constructors and methods. Returns a heap-allocated struct
+ * whose pointer fits in el_val_t. */
+el_val_t  now_in(el_val_t cal);
+el_val_t  in_calendar(el_val_t inst, el_val_t cal);
+el_val_t  cal_format(el_val_t ct, el_val_t pattern);
+el_val_t  cal_to_instant(el_val_t ct);
+el_val_t  cal_cycle_phase(el_val_t ct);
+el_val_t  cal_in(el_val_t ct, el_val_t cal);
+
+/* LocalDate / LocalTime / LocalDateTime — calendar-agnostic value types.
+ * LocalTime carries nanoseconds since midnight as a signed int64 directly
+ * in the el_val_t slot (no allocation). LocalDate / LocalDateTime are
+ * heap-allocated structs with magic headers. */
+el_val_t  local_date(el_val_t y, el_val_t m, el_val_t d);
+el_val_t  local_time(el_val_t h, el_val_t m, el_val_t s, el_val_t ns);
+el_val_t  local_datetime(el_val_t date, el_val_t time);
+el_val_t  zoned(el_val_t date, el_val_t time, el_val_t cal);
+
+el_val_t  local_date_year(el_val_t ld);
+el_val_t  local_date_month(el_val_t ld);
+el_val_t  local_date_day(el_val_t ld);
+el_val_t  local_time_hour(el_val_t lt);
+el_val_t  local_time_minute(el_val_t lt);
+el_val_t  local_time_second(el_val_t lt);
+el_val_t  local_time_nanos(el_val_t lt);
+
+el_val_t  el_local_date_add_dur(el_val_t ld, el_val_t dur);
+el_val_t  el_local_time_add_dur(el_val_t lt, el_val_t dur);
+el_val_t  el_local_date_lt(el_val_t a, el_val_t b);
+el_val_t  el_local_date_eq(el_val_t a, el_val_t b);
+
+/* Rhythm — pluggable recurrence AST. Returns a heap-allocated struct
+ * pointer in el_val_t; rhythms are immutable so callers may share them. */
+el_val_t  rhythm_cycle_start(void);
+el_val_t  rhythm_cycle_phase(el_val_t phase);
+el_val_t  rhythm_duration(el_val_t d);
+el_val_t  rhythm_session_start(void);
+el_val_t  rhythm_event(el_val_t name);
+el_val_t  rhythm_and(el_val_t a, el_val_t b);
+el_val_t  rhythm_or(el_val_t a, el_val_t b);
+el_val_t  rhythm_weekday(el_val_t day);
+el_val_t  rhythm_weekly_at(el_val_t day, el_val_t hour, el_val_t minute);
+el_val_t  rhythm_next_after(el_val_t r, el_val_t after, el_val_t cal);
+el_val_t  rhythm_matches(el_val_t r, el_val_t ct);
+
+/* ── UUID ────────────────────────────────────────────────────────────────── */
+
+el_val_t  uuid_new(void);
+el_val_t  uuid_v4(void);
+
+/* ── Environment ─────────────────────────────────────────────────────────── */
+
+el_val_t  env(el_val_t key);
+
+/* ── In-process state K/V ────────────────────────────────────────────────── */
+
+el_val_t  state_set(el_val_t key, el_val_t value);
+el_val_t  state_get(el_val_t key);
+el_val_t  state_del(el_val_t key);
+el_val_t  state_keys(void);
+el_val_t  state_has(el_val_t key);
+el_val_t  state_get_or(el_val_t key, el_val_t default_val);
+
+/* ── Float formatting ────────────────────────────────────────────────────── */
+
+el_val_t  float_to_str(el_val_t f);
+el_val_t  int_to_float(el_val_t n);
+el_val_t  float_to_int(el_val_t f);
+el_val_t  format_float(el_val_t f, el_val_t decimals);
+el_val_t  decimal_round(el_val_t f, el_val_t decimals);
+el_val_t  str_to_float(el_val_t s);
+
+/* ── Math (Float-aware) ──────────────────────────────────────────────────── */
+
+el_val_t  math_sqrt(el_val_t f);
+el_val_t  math_log(el_val_t f);
+el_val_t  math_ln(el_val_t f);
+el_val_t  math_sin(el_val_t f);
+el_val_t  math_cos(el_val_t f);
+el_val_t  math_pi(void);
+
+/* ── String additions ────────────────────────────────────────────────────── */
+
+el_val_t  str_index_of(el_val_t s, el_val_t sub);
+el_val_t  str_split(el_val_t s, el_val_t sep);
+el_val_t  str_char_at(el_val_t s, el_val_t i);
+el_val_t  str_char_code(el_val_t s, el_val_t i);
+el_val_t  str_pad_left(el_val_t s, el_val_t width, el_val_t pad);
+el_val_t  str_pad_right(el_val_t s, el_val_t width, el_val_t pad);
+el_val_t  str_format(el_val_t fmt, el_val_t data);
+el_val_t  str_lower(el_val_t s);
+el_val_t  str_upper(el_val_t s);
+
+/* ── Text-processing primitives (Phase 1: byte/codepoint, ASCII char classes)
+ * Phase 2 (filed): Unicode-grapheme awareness, NFC/NFD normalization, regex.
+ * is_* predicates: empty input returns false; multi-char requires ALL bytes
+ * to match. ASCII ranges only in Phase 1. */
+
+/* Counting */
+el_val_t  str_count(el_val_t s, el_val_t sub);              /* non-overlapping */
+el_val_t  str_count_chars(el_val_t s);                      /* codepoint count */
+el_val_t  str_count_bytes(el_val_t s);                      /* alias of str_len */
+el_val_t  str_count_lines(el_val_t s);
+el_val_t  str_count_words(el_val_t s);
+el_val_t  str_count_letters(el_val_t s);                    /* ASCII [A-Za-z] */
+el_val_t  str_count_digits(el_val_t s);                     /* ASCII [0-9] */
+
+/* Find / position */
+el_val_t  str_index_of_all(el_val_t s, el_val_t sub);       /* [Int] of byte offsets */
+el_val_t  str_last_index_of(el_val_t s, el_val_t sub);
+el_val_t  str_find_chars(el_val_t s, el_val_t any_of);      /* first idx of any ch */
+
+/* Transform */
+el_val_t  str_repeat(el_val_t s, el_val_t n);
+el_val_t  str_reverse(el_val_t s);                          /* by codepoint */
+el_val_t  str_strip_prefix(el_val_t s, el_val_t prefix);
+el_val_t  str_strip_suffix(el_val_t s, el_val_t suffix);
+el_val_t  str_strip_chars(el_val_t s, el_val_t chars);
+el_val_t  str_lstrip(el_val_t s);
+el_val_t  str_rstrip(el_val_t s);
+
+/* Char classification (Bool) */
+el_val_t  is_letter(el_val_t s);
+el_val_t  is_digit(el_val_t s);
+el_val_t  is_alphanumeric(el_val_t s);
+el_val_t  is_whitespace(el_val_t s);
+el_val_t  is_punctuation(el_val_t s);
+el_val_t  is_uppercase(el_val_t s);
+el_val_t  is_lowercase(el_val_t s);
+
+/* Split / join */
+el_val_t  str_split_lines(el_val_t s);
+el_val_t  str_split_chars(el_val_t s);                      /* alias of native_string_chars */
+el_val_t  str_split_n(el_val_t s, el_val_t sep, el_val_t n);
+el_val_t  str_join(el_val_t list, el_val_t sep);            /* alias of list_join */
+
+/* ── List additions ──────────────────────────────────────────────────────── */
+
+el_val_t  list_push(el_val_t list, el_val_t elem);
+el_val_t  list_push_front(el_val_t list, el_val_t elem);
+el_val_t  list_join(el_val_t list, el_val_t sep);
+el_val_t  list_range(el_val_t start, el_val_t end);
+
+/* ── Bool helpers ────────────────────────────────────────────────────────── */
+
+el_val_t  bool_to_str(el_val_t b);
+
+/* ── Numeric parsing ─────────────────────────────────────────────────────── */
+
+el_val_t  parse_int(el_val_t s, el_val_t default_val);
+
+/* ── Process ─────────────────────────────────────────────────────────────── */
+
+el_val_t  exit_program(el_val_t code);
+el_val_t  getpid_now(void);
+
+/* Self-terminating memory guard. Reads ELC_MAX_MEM_MB (default 512) and
+ * exits with code 1 if resident memory exceeds the limit. Call periodically
+ * during long compilation loops (e.g. after each function is compiled).
+ * Returns 0 when memory is within bounds.                                   */
+el_val_t  el_mem_check(void);
+
+/* ── CGI identity ─────────────────────────────────────────────────────────────
+ * Called at the start of main() in CGI programs (those with a `cgi {}` block).
+ * Records the program's DHARMA identity before any other code executes.      */
+
+void      el_cgi_init(el_val_t name, el_val_t dharma_id, el_val_t principal,
+                      el_val_t network, el_val_t engram);
+
+/* ── DHARMA network builtins ─────────────────────────────────────────────────
+ * Available to CGI programs (declared with a `cgi {}` block).
+ *
+ * Peers are addressed by `dharma_id` of the form
+ *     "<registry-id>@<transport-url>"   e.g. "ntn-genesis@http://localhost:7770"
+ * If the @<url> portion is omitted, transport defaults to
+ * "http://localhost:7770" (the local CGI daemon assumption).
+ *
+ * Wire protocol (all peers expose):
+ *   POST <url>/dharma/recv      { channel, from, content } → response body
+ *   POST <url>/dharma/event     { type, payload, source, timestamp }
+ *   POST <url>/api/activate     { query }                 → list of nodes
+ *
+ * Hosting application's responsibility: an El program with a `cgi {}` block
+ * runs http_serve() with its own request handler; that handler should route
+ * "/dharma/event" requests by calling el_runtime_dharma_event_arrive() so
+ * incoming events feed dharma_field() queues. The runtime itself does not
+ * intercept any /dharma path.                                                */
+
+el_val_t  dharma_connect(el_val_t cgi_id);
+el_val_t  dharma_send(el_val_t channel, el_val_t content);
+el_val_t  dharma_activate(el_val_t query);
+void      dharma_emit(el_val_t event_type, el_val_t payload);
+el_val_t  dharma_field(el_val_t event_type);
+void      dharma_strengthen(el_val_t cgi_id, el_val_t weight);
+el_val_t  dharma_relationship(el_val_t cgi_id);
+el_val_t  dharma_peers(void);
+
+/* Public C API: called by an El program's HTTP handler when a /dharma/event
+ * request arrives. Pushes onto the per-event-type queue and signals any
+ * pending dharma_field() blockers. All three arguments must be NUL-terminated
+ * C strings (or NULL — then treated as empty).                               */
+void      el_runtime_dharma_event_arrive(const char* event_type,
+                                         const char* payload,
+                                         const char* source);
+
+/* ── Engram local graph primitives ───────────────────────────────────────────
+ * Operate on the CGI's local Engram knowledge graph.
+ * `engram_activate` queries the local graph only; `dharma_activate` is
+ * network-wide across all connected CGI graphs.                              */
+
+el_val_t  engram_node(el_val_t content, el_val_t node_type, el_val_t salience);
+el_val_t  engram_node_full(el_val_t content, el_val_t node_type, el_val_t label,
+                           el_val_t salience, el_val_t importance, el_val_t confidence,
+                           el_val_t tier, el_val_t tags);
+/* Layered consciousness — see el_runtime.c for the layered architecture
+ * design notes (search "Layered consciousness architecture"). The five
+ * canonical layers (safety / core-identity / domain-knowledge / imprint /
+ * suit) are seeded automatically; engram_add_layer extends the registry
+ * with imprint or suit overlays at runtime. Nodes default to layer 1
+ * (core-identity) when created via engram_node / engram_node_full. */
+el_val_t  engram_node_layered(el_val_t content, el_val_t node_type, el_val_t label,
+                              el_val_t salience, el_val_t certainty, el_val_t confidence,
+                              el_val_t status, el_val_t tags, el_val_t layer_id);
+el_val_t  engram_add_layer(el_val_t name, el_val_t priority, el_val_t suppressible,
+                           el_val_t transparent, el_val_t injectable);
+el_val_t  engram_remove_layer(el_val_t layer_id);
+el_val_t  engram_list_layers(void);
+el_val_t  engram_get_node(el_val_t id);
+void      engram_strengthen(el_val_t node_id);
+void      engram_forget(el_val_t node_id);
+el_val_t  engram_node_count(void);
+el_val_t  engram_search(el_val_t query, el_val_t limit);
+el_val_t  engram_scan_nodes(el_val_t limit, el_val_t offset);
+void      engram_connect(el_val_t from_id, el_val_t to_id, el_val_t weight, el_val_t relation);
+el_val_t  engram_edge_between(el_val_t from_id, el_val_t to_id);
+el_val_t  engram_neighbors(el_val_t node_id);
+el_val_t  engram_neighbors_filtered(el_val_t node_id, el_val_t max_depth, el_val_t direction);
+el_val_t  engram_edge_count(void);
+/* Three-pass activation: background fan-out → working-memory promotion →
+ * Layer 0 override. See "Three-pass activation" in el_runtime.c. */
+el_val_t  engram_activate(el_val_t query, el_val_t depth);
+el_val_t  engram_save(el_val_t path);
+el_val_t  engram_load(el_val_t path);
+
+/* JSON-string accessors — return pre-serialized JSON so HTTP handlers
+ * can pass results straight through without round-tripping ElList/ElMap
+ * through json_stringify. */
+el_val_t  engram_get_node_json(el_val_t id);
+el_val_t  engram_search_json(el_val_t query, el_val_t limit);
+el_val_t  engram_scan_nodes_json(el_val_t limit, el_val_t offset);
+el_val_t  engram_scan_nodes_by_type_json(el_val_t node_type, el_val_t limit, el_val_t offset);
+el_val_t  engram_neighbors_json(el_val_t node_id, el_val_t max_depth, el_val_t direction);
+el_val_t  engram_activate_json(el_val_t query, el_val_t depth);
+el_val_t  engram_stats_json(void);
+el_val_t  engram_list_layers_json(void);
+/* engram_compile_layered_json — produce a prompt-ready text block split
+ * into "[LAYER 0 — STRUCTURAL]" (non-suppressible layers, sacred fire)
+ * and "[ENGRAM CONTEXT]" (standard suppressible layers). Returns "" if
+ * no nodes promoted to working memory. */
+el_val_t  engram_compile_layered_json(el_val_t intent, el_val_t depth);
+
+/* ── LLM (Anthropic API client) ─────────────────────────────────────────────
+ * All functions call https://api.anthropic.com/v1/messages with the API key
+ * from env ANTHROPIC_API_KEY. Default model when empty: claude-sonnet-4-5. */
+
+el_val_t  llm_call(el_val_t model, el_val_t prompt);
+el_val_t  llm_call_system(el_val_t model, el_val_t system_prompt, el_val_t user_prompt);
+el_val_t  llm_call_agentic(el_val_t model, el_val_t system, el_val_t user, el_val_t tools);
+el_val_t  llm_vision(el_val_t model, el_val_t system, el_val_t prompt, el_val_t image_url_or_b64);
+el_val_t  llm_models(void);
+
+/* Register a tool handler by name. The handler is looked up via dlsym
+ * (mirroring http_set_handler), so any El `fn <name>(input)` compiles to
+ * a global C symbol that this function can locate at runtime.
+ * Handler signature: `el_val_t handler(el_val_t input_json)` — receives
+ * the tool input as a JSON-string el_val_t and returns a JSON-string
+ * el_val_t result. Used by llm_call_agentic.                                 */
+void      llm_register_tool(el_val_t name, el_val_t handler_fn_name);
+
+/* ── args() ─────────────────────────────────────────────────────────────────
+ * Provides access to command-line arguments passed to the program.
+ * Populated by el_runtime_init_args() before main() runs.           */
+
+el_val_t  args(void);
+void      el_runtime_init_args(int argc, char** argv);
+
+/* ── Crypto primitives ─────────────────────────────────────────────────────
+ * SHA-256, HMAC-SHA-256, and base64 (standard + URL-safe).
+ * Self-contained — no OpenSSL/libcrypto dependency. The implementations are
+ * adapted from public-domain reference code (Brad Conte / RFC 4648).
+ *
+ * Bytes-returning variants (sha256_bytes, hmac_sha256_bytes) return a string
+ * value whose contents are raw binary; callers usually feed these into
+ * base64_encode. Note that el_val_t strings are NUL-terminated by convention,
+ * so the binary payload may contain embedded NULs — pass it directly into
+ * base64_encode (which uses an explicit length) rather than treating it as
+ * a printable C string.
+ *
+ * The "base64" variants emit/accept RFC 4648 standard alphabet with padding.
+ * The "base64url" variants use URL-safe alphabet (`-`/`_`) with no padding,
+ * as used in JWTs.                                                           */
+
+el_val_t  sha256_hex(el_val_t input);
+el_val_t  sha256_bytes(el_val_t input);
+el_val_t  hmac_sha256_hex(el_val_t key, el_val_t message);
+el_val_t  hmac_sha256_bytes(el_val_t key, el_val_t message);
+el_val_t  base64_encode(el_val_t input);
+el_val_t  base64_decode(el_val_t input);
+el_val_t  base64url_encode(el_val_t input);
+el_val_t  base64url_decode(el_val_t input);
+
+/* Length-aware variants (internal — exposed for the rare caller that already
+ * has a known-length binary buffer and doesn't want to round-trip through
+ * a NUL-terminated el_val_t string). Sha256_bytes and hmac_sha256_bytes feed
+ * these implicitly. */
+el_val_t  el_sha256_bytes_n(const unsigned char* data, size_t len);
+el_val_t  el_base64_encode_n(const unsigned char* data, size_t len, int url_safe);
+
+/* ── Post-quantum primitives (liboqs-backed) ────────────────────────────────
+ * All inputs/outputs hex-encoded. Algorithm choices:
+ *   Signature: CRYSTALS-Dilithium-3   (NIST level 3, balanced)
+ *   KEM:       CRYSTALS-Kyber-768     (NIST level 3)
+ *   Hash:      SHA3-256 (Keccak)      (PQ-aware protocols favour SHA3 over SHA2)
+ *
+ * If liboqs is not linked (detected via __has_include(<oqs/oqs.h>) at compile
+ * time), the pq_* entry points return a JSON-shaped error string so callers
+ * fail loudly rather than silently fall back to classical schemes:
+ *   {"error":"liboqs not linked, post-quantum primitives unavailable"}
+ *
+ * The hybrid handshake pairs X25519 with Kyber-768 per NIST PQ guidance and
+ * CNSA 2.0. Combined shared secret is HKDF-SHA256(x25519_ss || kyber_ss).
+ * Even if Kyber falls, X25519 holds; if X25519 falls under quantum attack,
+ * Kyber holds. SHA3-256 also remains usable independent of liboqs (the
+ * Keccak permutation is PQ-OK as a primitive). */
+
+el_val_t  pq_keygen_signature(void);
+el_val_t  pq_sign(el_val_t secret_key_hex, el_val_t message);
+el_val_t  pq_verify(el_val_t public_key_hex, el_val_t message, el_val_t signature_hex);
+
+el_val_t  pq_kem_keygen(void);
+el_val_t  pq_kem_encaps(el_val_t public_key_hex);
+el_val_t  pq_kem_decaps(el_val_t secret_key_hex, el_val_t ciphertext_hex);
+
+el_val_t  pq_hybrid_keygen(void);
+el_val_t  pq_hybrid_handshake(el_val_t remote_pub_combined);
+
+el_val_t  sha3_256_hex(el_val_t input);
+
+/* ── AEAD: AES-256-GCM (libcrypto-backed) ───────────────────────────────────
+ * Symmetric authenticated encryption used to wrap envelopes after a KEM
+ * handshake. Caller MUST supply a 32-byte key (64 hex chars) — typically the
+ * Kyber-768 / hybrid shared_secret, optionally normalized via SHA3-256.
+ *
+ * aead_encrypt returns a JSON map {"nonce":"...","ciphertext":"..."} where
+ * ciphertext is the AES-256-GCM output with the 16-byte auth tag appended.
+ * Nonce is a fresh 12-byte CSPRNG draw — callers never pick the nonce, which
+ * structurally rules out the GCM nonce-reuse footgun.
+ *
+ * aead_decrypt returns the plaintext String, or "" on any failure (including
+ * auth-tag mismatch). Callers MUST check for "" before trusting the result. */
+el_val_t  aead_encrypt(el_val_t key_hex, el_val_t plaintext);
+el_val_t  aead_decrypt(el_val_t key_hex, el_val_t nonce_hex, el_val_t ciphertext_hex);
+
+/* ── Native VM builtin aliases (for compiled El source) ─────────────────────
+ * These match the El VM's native_* builtins so that El source compiled
+ * to C can call the same names without modification.                */
+
+el_val_t  native_list_get(el_val_t list, el_val_t index);
+el_val_t  native_list_len(el_val_t list);
+el_val_t  native_list_append(el_val_t list, el_val_t elem);
+el_val_t  native_list_empty(void);
+el_val_t  native_list_clone(el_val_t list);
+el_val_t  native_string_chars(el_val_t s);
+el_val_t  native_int_to_str(el_val_t n);
+
+/* ── Method-call shorthand aliases ──────────────────────────────────────────
+ * The El method-call convention `obj.method(args)` compiles to
+ * `method(obj, args)`.  These aliases expose the runtime functions under
+ * the short names that result from method calls in El source.
+ *
+ * Example: `myList.append(x)` → `append(myList, x)` (calls this alias)
+ *          `myList.len()`     → `len(myList)`         (calls this alias)  */
+
+el_val_t  append(el_val_t list, el_val_t elem);   /* el_list_append */
+el_val_t  len(el_val_t list);                      /* el_list_len    */
+el_val_t  get(el_val_t list, el_val_t index);      /* el_list_get    */
+el_val_t  map_get(el_val_t map, el_val_t key);     /* el_map_get     */
+el_val_t  map_set(el_val_t map, el_val_t key, el_val_t value); /* el_map_set */
+
+/* ── OTLP/HTTP Observability ─────────────────────────────────────────────── */
+/* See bottom of el_runtime.c for the implementation.
+ * Configured by env vars OTLP_ENDPOINT, OTEL_SERVICE_NAME, OTEL_SERVICE_VERSION.
+ * No-op when OTLP_ENDPOINT is unset. Drop-on-failure semantics. */
+/* ── Subprocess execution ────────────────────────────────────────────────── */
+el_val_t exec_command(el_val_t cmd);   /* run shell command, return exit code */
+el_val_t exec_capture(el_val_t cmd);   /* run shell command, capture stdout   */
+el_val_t exec(el_val_t cmd);           /* exec(cmd) → stdout String (30s timeout) */
+el_val_t exec_bg(el_val_t cmd);        /* exec_bg(cmd) → PID String (non-blocking) */
+
+/* ── Stdout redirection (used by compiler JS pipeline) ───────────────────── */
+el_val_t stdout_to_file(el_val_t path); /* redirect process stdout to a file  */
+el_val_t stdout_restore(void);          /* restore process stdout to terminal  */
+
+el_val_t emit_log(el_val_t level, el_val_t msg, el_val_t fields_json);
+el_val_t emit_metric(el_val_t name, el_val_t value, el_val_t tags_json);
+el_val_t trace_span_start(el_val_t name);
+el_val_t trace_span_end(el_val_t span_handle);
+el_val_t emit_event(el_val_t name, el_val_t duration_ms);
+
+el_val_t __thread_create(el_val_t fn_name_v, el_val_t arg_v);
+el_val_t __thread_join(el_val_t tid_v);
+
+/* ── __ prefixed aliases (self-hosting compiler ABI) ─────────────────────────
+ * The El self-hosting compiler emits calls to __-prefixed names. These are
+ * forwarding wrappers around the existing el_runtime functions above.        */
+
+/* I/O */
+el_val_t  __println(el_val_t s);
+el_val_t  __print(el_val_t s);
+el_val_t  __readline(void);
+
+/* String */
+el_val_t  __int_to_str(el_val_t n);
+el_val_t  __str_to_int(el_val_t s);
+el_val_t  __float_to_str(el_val_t f);
+el_val_t  __str_to_float(el_val_t s);
+el_val_t  __str_len(el_val_t s);
+el_val_t  __str_char_at(el_val_t s, el_val_t i);
+el_val_t  __str_cmp(el_val_t a, el_val_t b);
+el_val_t  __str_ncmp(el_val_t a, el_val_t b, el_val_t n);
+el_val_t  __str_concat_raw(el_val_t a, el_val_t b);
+el_val_t  __str_slice_raw(el_val_t s, el_val_t start, el_val_t end);
+el_val_t  __str_alloc(el_val_t n);
+el_val_t  __str_set_char(el_val_t s, el_val_t i, el_val_t c);
+
+/* URL encoding */
+el_val_t  __url_encode(el_val_t s);
+el_val_t  __url_decode(el_val_t s);
+
+/* Environment */
+el_val_t  __env_get(el_val_t key);
+
+/* Subprocess */
+el_val_t  __exec(el_val_t cmd);
+el_val_t  __exec_bg(el_val_t cmd);
+
+/* Process */
+el_val_t  __exit_program(el_val_t code);
+
+/* Filesystem */
+el_val_t  __fs_exists(el_val_t path);
+el_val_t  __fs_mkdir(el_val_t path);
+el_val_t  __fs_read(el_val_t path);
+el_val_t  __fs_write(el_val_t path, el_val_t content);
+el_val_t  __fs_write_bytes(el_val_t path, el_val_t bytes, el_val_t n);
+el_val_t  __fs_list_raw(el_val_t path);
+
+/* HTTP server */
+el_val_t  __http_response(el_val_t status, el_val_t headers_json, el_val_t body);
+el_val_t  __http_serve(el_val_t port, el_val_t handler);
+el_val_t  __http_serve_v2(el_val_t port, el_val_t handler);
+
+/* HTTP conn fd / SSE (weak; overridden by el_seed.c when linked together) */
+el_val_t  __http_conn_fd(void);
+el_val_t  __http_sse_open(el_val_t conn_id);
+el_val_t  __http_sse_send(el_val_t conn_id, el_val_t data);
+el_val_t  __http_sse_close(el_val_t conn_id);
+
+/* HTTP client (requires HAVE_CURL; stubs provided for no-curl builds) */
+el_val_t  __http_do(el_val_t method, el_val_t url, el_val_t body,
+                    el_val_t headers_map, el_val_t timeout_ms);
+el_val_t  __http_do_map(el_val_t method, el_val_t url, el_val_t body,
+                        el_val_t headers_json, el_val_t timeout_ms);
+el_val_t  __http_do_map_to_file(el_val_t method, el_val_t url, el_val_t body,
+                                el_val_t headers_json, el_val_t output_path);
+
+/* JSON */
+el_val_t  __json_array_get(el_val_t json, el_val_t index);
+el_val_t  __json_array_get_string(el_val_t json, el_val_t index);
+el_val_t  __json_array_len(el_val_t json);
+el_val_t  __json_get(el_val_t json, el_val_t key);
+el_val_t  __json_get_raw(el_val_t json, el_val_t key);
+el_val_t  __json_set(el_val_t json, el_val_t key, el_val_t value);
+el_val_t  __json_parse_map(el_val_t json_str);
+el_val_t  __json_stringify_val(el_val_t val);
+
+/* Hashing */
+el_val_t  __sha256_hex(el_val_t s);
+
+/* State K/V */
+el_val_t  __state_del(el_val_t key);
+el_val_t  __state_get(el_val_t key);
+el_val_t  __state_keys(void);
+el_val_t  __state_set(el_val_t key, el_val_t val);
+
+/* UUID */
+el_val_t  __uuid_v4(void);
+
+/* Args */
+el_val_t  __args_json(void);
+
+#ifdef __cplusplus
+}
+#endif

ui/examples/native-hello-ios/NativeHello/main.m

@@ -0,0 +1,48 @@
+/*
+ * main.m — entry point for native-hello-ios.
+ *
+ * iOS UIKit lifecycle:
+ *   UIApplicationMain never returns. The compiled el program's boot body
+ *   (native_init → window_from_manifest → app_build → window_show) must
+ *   run inside applicationDidFinishLaunchingWithOptions on the main thread.
+ *
+ * How it works:
+ *   1. el_uikit_set_args() forwards argc/argv to UIApplicationMain.
+ *   2. el_main_entry_fn is set to el_app_boot (defined below) before
+ *      UIApplicationMain is entered.
+ *   3. ElAppDelegate.didFinishLaunchingWithOptions calls el_main_entry_fn(),
+ *      which runs the el program's widget setup at the correct lifecycle point.
+ *   4. __native_run_loop() inside the compiled el main is a no-op on iOS —
+ *      UIApplicationMain already owns the run loop.
+ *
+ * The generated native_hello.c exports el_app_main() (renamed from main by
+ * the gen step in build.sh). We call it from el_app_boot so it runs after
+ * UIApplicationMain sets up the application object.
+ *
+ * Compile with -fno-objc-arc (required by el_uikit.m).
+ */
+
+#import <UIKit/UIKit.h>
+
+/* From el_uikit.m */
+void el_uikit_set_args(int argc, char **argv);
+extern void (*el_main_entry_fn)(void);
+
+/* Forward declaration of the renamed compiled el main. */
+int el_app_main(int argc, char **argv);
+
+/* Boot function registered as el_main_entry_fn. Called by ElAppDelegate
+ * inside didFinishLaunchingWithOptions on the main thread. */
+static void el_app_boot(void) {
+    char *argv[] = {"el-app", NULL};
+    el_app_main(1, argv);
+}
+
+int main(int argc, char *argv[]) {
+    el_uikit_set_args(argc, argv);
+    /* Register the boot function so ElAppDelegate can call it. */
+    el_main_entry_fn = el_app_boot;
+    @autoreleasepool {
+        return UIApplicationMain(argc, argv, nil, @"ElAppDelegate");
+    }
+}

ui/examples/native-hello-ios/NativeHello/native_hello.c

@@ -0,0 +1,123 @@
+#include <stdint.h>
+#include <stdlib.h>
+#include "el_runtime.h"
+
+el_val_t on_greet_click(el_val_t widget, el_val_t data);
+el_val_t on_counter_click(el_val_t widget, el_val_t data);
+el_val_t on_name_change(el_val_t widget, el_val_t data);
+el_val_t app_build(el_val_t window);
+
+el_val_t g_window;
+el_val_t g_label;
+el_val_t g_input;
+el_val_t g_button;
+el_val_t g_counter;
+el_val_t g_counter_lbl;
+el_val_t manifest_env;
+el_val_t manifest_path;
+el_val_t win;
+el_val_t g_window;
+
+el_val_t on_greet_click(el_val_t widget, el_val_t data) {
+  el_val_t name = widget_get_text(g_input);
+  el_val_t greeting = ({ el_val_t _if_result_1 = 0; if ((str_len(name) > 0)) { _if_result_1 = (el_str_concat(el_str_concat(EL_STR("Hello, "), name), EL_STR("!"))); } else { _if_result_1 = (EL_STR("Hello, World!")); } _if_result_1; });
+  widget_set_text(g_label, greeting);
+  return 0;
+}
+
+el_val_t on_counter_click(el_val_t widget, el_val_t data) {
+  el_val_t g_counter = (g_counter + 1);
+  widget_set_text(g_counter_lbl, el_str_concat(EL_STR("Clicks: "), int_to_str(g_counter)));
+  return 0;
+}
+
+el_val_t on_name_change(el_val_t widget, el_val_t data) {
+  el_val_t has_text = (str_len(data) > 0);
+  widget_set_disabled(g_button, !has_text);
+  return 0;
+}
+
+el_val_t app_build(el_val_t window) {
+  el_val_t root = vstack(0);
+  widget_set_padding_all(root, 24);
+  widget_set_bg_color_hex(root, EL_STR("#0f172a"));
+  widget_set_flex(root, 1);
+  el_val_t title = label(EL_STR("el-native \xe2\x80\x94 native widget demo"));
+  style_label_heading(title);
+  widget_add_child(root, title);
+  el_val_t gap1 = label(EL_STR(""));
+  widget_set_height(gap1, 16);
+  widget_add_child(root, gap1);
+  el_val_t subtitle = label(EL_STR("AppKit controls from el code, no ObjC in the app layer."));
+  style_label_muted(subtitle);
+  widget_add_child(root, subtitle);
+  el_val_t gap2 = label(EL_STR(""));
+  widget_set_height(gap2, 24);
+  widget_add_child(root, gap2);
+  el_val_t input_row = hstack(8);
+  el_val_t name_label = label(EL_STR("Name:"));
+  style_label_body(name_label);
+  widget_set_width(name_label, 60);
+  el_val_t input = text_field(EL_STR("Enter your name\xe2\x80\xa6"));
+  style_label_body(input);
+  widget_set_flex(input, 1);
+  widget_on_change(input, EL_STR("on_name_change"));
+  el_val_t g_input = input;
+  el_val_t greet_btn = button(EL_STR("Greet"));
+  style_button_primary(greet_btn);
+  widget_set_disabled(greet_btn, 1);
+  widget_on_click(greet_btn, EL_STR("on_greet_click"));
+  el_val_t g_button = greet_btn;
+  widget_add_child(input_row, name_label);
+  widget_add_child(input_row, input);
+  widget_add_child(input_row, greet_btn);
+  widget_add_child(root, input_row);
+  el_val_t gap3 = label(EL_STR(""));
+  widget_set_height(gap3, 12);
+  widget_add_child(root, gap3);
+  el_val_t greeting = label(EL_STR("Waiting for name\xe2\x80\xa6"));
+  style_label_body(greeting);
+  widget_set_color_hex(greeting, EL_STR("#60a5fa"));
+  widget_set_font(greeting, EL_STR("system"), 16, 1);
+  el_val_t g_label = greeting;
+  widget_add_child(root, greeting);
+  el_val_t gap4 = label(EL_STR(""));
+  widget_set_height(gap4, 24);
+  widget_add_child(root, gap4);
+  el_val_t counter_row = hstack(12);
+  el_val_t counter_lbl = label(EL_STR("Clicks: 0"));
+  style_label_body(counter_lbl);
+  el_val_t g_counter_lbl = counter_lbl;
+  el_val_t counter_btn = button(EL_STR("Click me"));
+  style_button_primary(counter_btn);
+  widget_on_click(counter_btn, EL_STR("on_counter_click"));
+  widget_add_child(counter_row, counter_lbl);
+  widget_add_child(counter_row, counter_btn);
+  widget_add_child(root, counter_row);
+  widget_add_child(window, root);
+  return 0;
+}
+
+int el_app_main(int _argc, char** _argv) {
+  el_runtime_init_args(_argc, _argv);
+  g_window = (-1);
+  g_label = (-1);
+  g_input = (-1);
+  g_button = (-1);
+  g_counter = 0;
+  g_counter_lbl = (-1);
+  native_init();
+  manifest_env = env(EL_STR("EL_MANIFEST"));
+  manifest_path = ({ el_val_t _if_result_2 = 0; if ((str_len(manifest_env) > 0)) { _if_result_2 = (manifest_env); } else { _if_result_2 = (EL_STR("manifest.el")); } _if_result_2; });
+  win = window_from_manifest(manifest_path);
+  g_window = win;
+  if (win < 0) {
+    println(EL_STR("Error: failed to create window. Is EL_TARGET_MACOS defined?"));
+    exit_program(1);
+  }
+  app_build(win);
+  window_show(win);
+  native_run_loop();
+  return 0;
+}
+

ui/examples/native-hello-ios/build.sh

@@ -0,0 +1,136 @@
+#!/usr/bin/env bash
+# build.sh — Build and install native-hello-ios to the iOS Simulator.
+#
+# Usage:
+#   ./build.sh           # gen C sources + xcodebuild for simulator
+#   ./build.sh gen       # regenerate C sources only
+#   ./build.sh build     # xcodebuild only (skip elc step)
+#   ./build.sh install   # gen + build + boot simulator + install + launch
+#   ./build.sh clean     # remove build/ directory
+#
+# Requirements:
+#   - Xcode with iOS Simulator SDK installed
+#   - elc at ../../../lang/dist/platform/elc (or in PATH)
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+EL_LANG_ROOT="${SCRIPT_DIR}/../../../lang"
+EL_UI_ROOT="${SCRIPT_DIR}/../.."
+EL_RUNTIME="${EL_LANG_ROOT}/el-compiler/runtime"
+EL_NATIVE_VESSEL="${EL_UI_ROOT}/vessels/el-native/src/main.el"
+EL_APP_ENTRY="${EL_UI_ROOT}/examples/native-hello/src/main.el"
+EL_MANIFEST="${EL_UI_ROOT}/examples/native-hello/manifest.el"
+SOURCES_DIR="${SCRIPT_DIR}/NativeHello"
+BUILD_DIR="${SCRIPT_DIR}/build"
+
+# Locate elc.
+if command -v elc &>/dev/null; then
+    ELC="elc"
+elif [ -x "${EL_LANG_ROOT}/dist/platform/elc" ]; then
+    ELC="${EL_LANG_ROOT}/dist/platform/elc"
+else
+    echo "Error: elc not found. Add it to PATH or place it at:"
+    echo "  ${EL_LANG_ROOT}/dist/platform/elc"
+    exit 1
+fi
+
+gen() {
+    echo "==> Generating native_hello.c..."
+    EL_MANIFEST="${EL_MANIFEST}" \
+        "${ELC}" "${EL_APP_ENTRY}" \
+        > "${SOURCES_DIR}/native_hello.c"
+    # Rename the compiled el main() to el_app_main so it doesn't conflict with
+    # main.m's main(). main.m's main() is the real entry point for UIApplicationMain.
+    # Use a simple sed substitution on the exact signature elc emits.
+    sed -i '' 's/^int main(int _argc, char\*\* _argv) {/int el_app_main(int _argc, char** _argv) {/' \
+        "${SOURCES_DIR}/native_hello.c"
+
+    echo "==> Generating el_native_vessel.c..."
+    "${ELC}" "${EL_NATIVE_VESSEL}" \
+        > "${SOURCES_DIR}/el_native_vessel.c"
+    # Rename vessel main() similarly.
+    sed -i '' 's/^int main(int _argc, char\*\* _argv) {/int el_vessel_main(int _argc, char** _argv) {/' \
+        "${SOURCES_DIR}/el_native_vessel.c"
+
+    echo "==> Copying runtime files..."
+    cp "${EL_RUNTIME}/el_uikit.m"         "${SOURCES_DIR}/"
+    cp "${EL_RUNTIME}/el_seed.c"          "${SOURCES_DIR}/"
+    cp "${EL_RUNTIME}/el_runtime.c"       "${SOURCES_DIR}/"
+    cp "${EL_RUNTIME}/el_runtime.h"       "${SOURCES_DIR}/"
+    cp "${EL_RUNTIME}/el_native_target.h" "${SOURCES_DIR}/"
+
+    echo "==> Source generation complete."
+}
+
+xcode_build() {
+    echo "==> Building with xcodebuild (iphonesimulator)..."
+    xcodebuild \
+        -project "${SCRIPT_DIR}/NativeHello.xcodeproj" \
+        -scheme NativeHello \
+        -sdk iphonesimulator \
+        -configuration Debug \
+        -derivedDataPath "${BUILD_DIR}" \
+        CLANG_ENABLE_OBJC_ARC=NO \
+        OTHER_CFLAGS="-DEL_TARGET_IOS" \
+        OTHER_LDFLAGS="-ldl" \
+        build
+
+    APP_PATH=$(find "${BUILD_DIR}" -name "NativeHello.app" -maxdepth 6 | head -1)
+    if [ -n "${APP_PATH}" ]; then
+        echo "==> Build complete."
+        echo "    App bundle: ${APP_PATH}"
+    else
+        echo "==> Build complete (app bundle in ${BUILD_DIR})."
+    fi
+}
+
+install_and_launch() {
+    gen
+    xcode_build
+
+    APP_PATH=$(find "${BUILD_DIR}" -name "NativeHello.app" -maxdepth 6 | head -1)
+    if [ -z "${APP_PATH}" ]; then
+        echo "Error: could not find NativeHello.app in ${BUILD_DIR}"
+        exit 1
+    fi
+
+    # Boot the default simulator if not already booted.
+    SIM_UDID=$(xcrun simctl list devices available --json \
+        | python3 -c "
+import json,sys
+d=json.load(sys.stdin)['devices']
+for runtime,devs in d.items():
+    for dev in devs:
+        if 'iPhone' in dev['name'] and dev['isAvailable']:
+            print(dev['udid'])
+            exit()
+")
+    if [ -z "${SIM_UDID}" ]; then
+        echo "Error: no available iPhone simulator found."
+        exit 1
+    fi
+    echo "==> Using simulator: ${SIM_UDID}"
+    xcrun simctl boot "${SIM_UDID}" 2>/dev/null || true
+    open -a Simulator
+
+    echo "==> Installing app..."
+    xcrun simctl install "${SIM_UDID}" "${APP_PATH}"
+
+    echo "==> Launching app..."
+    xcrun simctl launch "${SIM_UDID}" "ai.neurontechnologies.el.nativehello"
+}
+
+clean() {
+    echo "==> Cleaning..."
+    rm -rf "${BUILD_DIR}"
+    echo "==> Clean complete."
+}
+
+case "${1:-all}" in
+    gen)     gen ;;
+    build)   xcode_build ;;
+    install) install_and_launch ;;
+    clean)   clean ;;
+    all|*)   gen && xcode_build ;;
+esac

ui/examples/native-hello/Dockerfile.linux-gtk4

@@ -0,0 +1,88 @@
+FROM ubuntu:22.04
+
+RUN apt-get update && apt-get install -y \
+    build-essential \
+    libgtk-4-dev \
+    pkg-config \
+    libcurl4-openssl-dev \
+    binutils \
+    file \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /build
+
+# All sources arrive in /build — runtime/ subdirectory contains the el runtime,
+# top-level contains elc-generated app/vessel C files.
+COPY runtime/ runtime/
+COPY el_native_vessel.c el_native_vessel.h native_hello.c ./
+
+# Compile el_gtk4.c
+RUN gcc -DEL_TARGET_LINUX $(pkg-config --cflags gtk4) \
+    -std=c11 -I/build/runtime \
+    -c /build/runtime/el_gtk4.c -o /build/el_gtk4.o && \
+    echo "el_gtk4.c compiled OK"
+
+# Compile el_seed.c
+RUN gcc -DEL_TARGET_LINUX $(pkg-config --cflags gtk4) \
+    -std=c11 -I/build/runtime \
+    -c /build/runtime/el_seed.c -o /build/el_seed.o && \
+    echo "el_seed.c compiled OK"
+
+# Compile el_runtime.c
+RUN gcc -std=c11 -I/build/runtime \
+    -c /build/runtime/el_runtime.c -o /build/el_runtime.o && \
+    echo "el_runtime.c compiled OK"
+
+# Patch el_runtime.o: hide __-prefixed symbols that el_seed.o also defines.
+# This is the Linux objcopy equivalent of macOS nmedit -s.
+# el_seed.o is canonical for all __ symbols; el_runtime.o provides high-level
+# builtins (str_len, json_get_string, etc.) that el_seed.o does NOT export.
+RUN nm /build/el_seed.o   | awk '/[0-9a-f]+ T /{print $3}' | sort > /build/.seed_T.txt && \
+    nm /build/el_runtime.o | awk '/[0-9a-f]+ T /{print $3}' | sort > /build/.rt_T.txt && \
+    comm -12 /build/.seed_T.txt /build/.rt_T.txt > /build/.dups.txt && \
+    if [ -s /build/.dups.txt ]; then \
+        ARGS=$(awk '{printf "--localize-symbol=%s ", $1}' /build/.dups.txt); \
+        eval "objcopy $ARGS /build/el_runtime.o"; \
+        echo "Patched $(wc -l < /build/.dups.txt) duplicate symbols in el_runtime.o"; \
+    else \
+        echo "No duplicate symbols found"; \
+    fi
+
+# Compile vessel
+RUN gcc -DEL_TARGET_LINUX -std=c11 -I/build/runtime \
+    -include /build/runtime/el_native_target.h \
+    -c /build/el_native_vessel.c -o /build/el_native_vessel.o && \
+    echo "vessel compiled OK"
+
+# Compile app (before patching vessel, so we know which symbols to localise)
+RUN gcc -DEL_TARGET_LINUX -std=c11 -I/build/runtime \
+    -include /build/runtime/el_native_target.h \
+    -include /build/el_native_vessel.h \
+    -c /build/native_hello.c -o /build/native_hello.o && \
+    echo "app compiled OK"
+
+# Patch el_native_vessel.o:
+#   1. Localise main() so it doesn't conflict with the app's main.
+#   2. Localise any T/B symbols the app also defines (elc emits shared globals
+#      like TOKEN_PRIMARY in every translation unit; GNU ld rejects duplicates
+#      unlike macOS ld which picks the first one silently).
+RUN nm /build/native_hello.o     | awk '/[0-9a-f]+ [TBb] /{print $3}' | sort > /build/.app_syms.txt && \
+    nm /build/el_native_vessel.o | awk '/[0-9a-f]+ [TBb] /{print $3}' | sort > /build/.vessel_syms.txt && \
+    comm -12 /build/.app_syms.txt /build/.vessel_syms.txt > /build/.vessel_dups.txt && \
+    echo "main" >> /build/.vessel_dups.txt && \
+    sort -u /build/.vessel_dups.txt -o /build/.vessel_dups.txt && \
+    ARGS=$(awk '{printf "--localize-symbol=%s ", $1}' /build/.vessel_dups.txt) && \
+    eval "objcopy $ARGS /build/el_native_vessel.o" && \
+    echo "Patched $(wc -l < /build/.vessel_dups.txt) symbols in el_native_vessel.o"
+
+# Link — add -lm for math functions (exp, log, etc.) used by el_runtime.c
+RUN gcc \
+    /build/native_hello.o \
+    /build/el_native_vessel.o \
+    /build/el_gtk4.o \
+    /build/el_runtime.o \
+    /build/el_seed.o \
+    $(pkg-config --libs gtk4) -ldl -lpthread -lcurl -lm \
+    -o /build/native-hello-linux && \
+    echo "==> Linked: native-hello-linux" && \
+    file /build/native-hello-linux

ui/examples/native-hello/Dockerfile.pi

@@ -0,0 +1,99 @@
+FROM --platform=linux/arm64 ubuntu:22.04
+
+# GTK4 + SDL2 for Raspberry Pi (ARM64 / aarch64)
+# Targets Pi 3 / 4 / 5 running 64-bit Raspberry Pi OS or Ubuntu 22.04.
+#
+# GTK4 requires a desktop environment / Wayland compositor at runtime.
+# SDL2 works on bare framebuffer or KMS/DRM without a full desktop.
+#
+# Usage:
+#   docker build --platform linux/arm64 \
+#       -f Dockerfile.pi --tag el-native-pi-arm64 ./build-docker/
+#   docker create --name pi-extract el-native-pi-arm64
+#   docker cp pi-extract:/build/native-hello-linux-pi ./build/native-hello-pi-arm64
+#   docker rm pi-extract
+#
+# The GTK4 build is the default. SDL2 is available as an alternative
+# for headless / bare-metal Pi deployments.
+
+RUN apt-get update && apt-get install -y \
+    build-essential \
+    libgtk-4-dev \
+    libsdl2-dev \
+    libsdl2-ttf-dev \
+    libsdl2-image-dev \
+    pkg-config \
+    libcurl4-openssl-dev \
+    binutils \
+    file \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /build
+
+# All sources arrive in /build
+COPY runtime/ runtime/
+COPY el_native_vessel.c el_native_vessel.h native_hello.c ./
+
+# ── GTK4 build ────────────────────────────────────────────────────────────────
+
+# Compile el_gtk4.c
+RUN gcc -DEL_TARGET_LINUX $(pkg-config --cflags gtk4) \
+    -std=c11 -I/build/runtime \
+    -c /build/runtime/el_gtk4.c -o /build/el_gtk4.o && \
+    echo "el_gtk4.c compiled OK"
+
+# Compile el_seed.c
+RUN gcc -DEL_TARGET_LINUX $(pkg-config --cflags gtk4) \
+    -std=c11 -I/build/runtime \
+    -c /build/runtime/el_seed.c -o /build/el_seed.o && \
+    echo "el_seed.c compiled OK"
+
+# Compile el_runtime.c
+RUN gcc -std=c11 -I/build/runtime \
+    -c /build/runtime/el_runtime.c -o /build/el_runtime.o && \
+    echo "el_runtime.c compiled OK"
+
+# Patch el_runtime.o: localise __-prefixed duplicate symbols (el_seed.o is canonical)
+RUN nm /build/el_seed.o    | awk '/[0-9a-f]+ T /{print $3}' | sort > /build/.seed_T.txt && \
+    nm /build/el_runtime.o | awk '/[0-9a-f]+ T /{print $3}' | sort > /build/.rt_T.txt && \
+    comm -12 /build/.seed_T.txt /build/.rt_T.txt > /build/.dups.txt && \
+    if [ -s /build/.dups.txt ]; then \
+        ARGS=$(awk '{printf "--localize-symbol=%s ", $1}' /build/.dups.txt); \
+        eval "objcopy $ARGS /build/el_runtime.o"; \
+        echo "Patched $(wc -l < /build/.dups.txt) duplicate symbols in el_runtime.o"; \
+    fi
+
+# Compile vessel
+RUN gcc -DEL_TARGET_LINUX -std=c11 -I/build/runtime \
+    -include /build/runtime/el_native_target.h \
+    -c /build/el_native_vessel.c -o /build/el_native_vessel.o && \
+    echo "vessel compiled OK"
+
+# Compile app
+RUN gcc -DEL_TARGET_LINUX -std=c11 -I/build/runtime \
+    -include /build/runtime/el_native_target.h \
+    -include /build/el_native_vessel.h \
+    -c /build/native_hello.c -o /build/native_hello.o && \
+    echo "app compiled OK"
+
+# Patch el_native_vessel.o: localise shared globals (main + TOKEN_* etc.)
+RUN nm /build/native_hello.o     | awk '/[0-9a-f]+ [TBb] /{print $3}' | sort > /build/.app_syms.txt && \
+    nm /build/el_native_vessel.o | awk '/[0-9a-f]+ [TBb] /{print $3}' | sort > /build/.vessel_syms.txt && \
+    comm -12 /build/.app_syms.txt /build/.vessel_syms.txt > /build/.vessel_dups.txt && \
+    echo "main" >> /build/.vessel_dups.txt && \
+    sort -u /build/.vessel_dups.txt -o /build/.vessel_dups.txt && \
+    ARGS=$(awk '{printf "--localize-symbol=%s ", $1}' /build/.vessel_dups.txt) && \
+    eval "objcopy $ARGS /build/el_native_vessel.o" && \
+    echo "Patched $(wc -l < /build/.vessel_dups.txt) symbols in el_native_vessel.o"
+
+# Link (GTK4)
+RUN gcc \
+    /build/native_hello.o \
+    /build/el_native_vessel.o \
+    /build/el_gtk4.o \
+    /build/el_runtime.o \
+    /build/el_seed.o \
+    $(pkg-config --libs gtk4) -ldl -lpthread -lcurl -lm \
+    -o /build/native-hello-linux-pi && \
+    echo "==> Linked: native-hello-linux-pi (GTK4)" && \
+    file /build/native-hello-linux-pi