engram: WAL persistence + integrity hardening + single canonical runtime

Establish lang/runtime/ as the ONE canonical el runtime (from the active
runtime that carries hebb/emb persistence + the new WAL); repoint the el CI
publish, engram build, elb default, and in-repo build scripts to it; delete
the el-compiler/runtime + lang/releases/ forks; add scripts/check-single-runtime.sh
drift guard.

Fixes a live prod bug: the el CI published el-runtime-c/-h from the LAGGING
el-compiler fork (0 hebb refs), so the shipped soul never persisted Hebbian
edge weights — learned co-activation was wiped on every restart. Publishing
from canonical ships the stranded 'learning that cannot outlive the process'
fix.

WAL storage engine + integrity fixes (DELETE->tombstone + store-layer
protection, safe data-dir default) ride in behind ENGRAM_WAL (default off =
byte-identical to today). Verified: engram elb per-module build clean, WAL
gate 66/66, native smoke ok, drift-guard green.

.gitea/workflows/ci-dev.yaml

@@ -22,7 +22,10 @@ jobs:
       - name: Install build dependencies
         run: |
           apt-get update -qq
-          apt-get install -y gcc libcurl4-openssl-dev
+          apt-get install -y gcc libcurl4-openssl-dev apt-transport-https ca-certificates
+          echo "deb [trusted=yes] https://packages.cloud.google.com/apt cloud-sdk main" \
+            > /etc/apt/sources.list.d/google-cloud-sdk.list
+          apt-get update -qq && apt-get install -y google-cloud-cli
 
       # Seed: use the committed linux-amd64 binary as the bootstrap
       - name: Bootstrap from committed linux binary (seed)
@@ -36,9 +39,9 @@ jobs:
         run: |
           dist/platform/elc-linux-amd64 elc-cli.el > dist/elc-gen2.c
           gcc -O2 \
-            -I el-compiler/runtime \
+            -I runtime \
             dist/elc-gen2.c \
-            el-compiler/runtime/el_runtime.c \
+            runtime/el_runtime.c \
             -lcurl -lssl -lcrypto -lpthread -lm \
             -o dist/platform/elc
           chmod +x dist/platform/elc
@@ -51,9 +54,9 @@ jobs:
           mkdir -p dist/bin
           dist/platform/elc elb.el > dist/elb.c
           gcc -O2 \
-            -I el-compiler/runtime \
+            -I runtime \
             dist/elb.c \
-            el-compiler/runtime/el_runtime.c \
+            runtime/el_runtime.c \
             -lcurl -lssl -lcrypto -lpthread -lm \
             -o dist/bin/elb
           chmod +x dist/bin/elb
@@ -84,13 +87,22 @@ jobs:
           bash tests/html_sanitizer/run.sh
 
       # Native El test suites (elc --test, compile-link-run)
+      # el_runtime.c is precompiled to .o once and reused by all 8 modules.
+      - name: Precompile el_runtime.o
+        run: |
+          set -euo pipefail
+          RUNTIME="$(pwd)/runtime"
+          gcc -O2 -c -I "$RUNTIME" "$RUNTIME/el_runtime.c" \
+            -o /tmp/el_runtime.o
+          echo "el_runtime.o compiled"
+
       - name: Run tests - native (core)
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_core.el > /tmp/el_native_core.c
-          gcc -O2 -I "$RUNTIME" /tmp/el_native_core.c "$RUNTIME/el_runtime.c" \
+          gcc -O2 -I "$RUNTIME" /tmp/el_native_core.c /tmp/el_runtime.o \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_core
           /tmp/el_native_core
 
@@ -98,9 +110,9 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_text.el > /tmp/el_native_text.c
-          gcc -O2 -I "$RUNTIME" /tmp/el_native_text.c "$RUNTIME/el_runtime.c" \
+          gcc -O2 -I "$RUNTIME" /tmp/el_native_text.c /tmp/el_runtime.o \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_text
           /tmp/el_native_text
 
@@ -108,9 +120,9 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_string.el > /tmp/el_native_string.c
-          gcc -O2 -I "$RUNTIME" /tmp/el_native_string.c "$RUNTIME/el_runtime.c" \
+          gcc -O2 -I "$RUNTIME" /tmp/el_native_string.c /tmp/el_runtime.o \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_string
           /tmp/el_native_string
 
@@ -118,9 +130,9 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_math.el > /tmp/el_native_math.c
-          gcc -O2 -I "$RUNTIME" /tmp/el_native_math.c "$RUNTIME/el_runtime.c" \
+          gcc -O2 -I "$RUNTIME" /tmp/el_native_math.c /tmp/el_runtime.o \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_math
           /tmp/el_native_math
 
@@ -128,9 +140,9 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_state.el > /tmp/el_native_state.c
-          gcc -O2 -I "$RUNTIME" /tmp/el_native_state.c "$RUNTIME/el_runtime.c" \
+          gcc -O2 -I "$RUNTIME" /tmp/el_native_state.c /tmp/el_runtime.o \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_state
           /tmp/el_native_state
 
@@ -138,9 +150,9 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_time.el > /tmp/el_native_time.c
-          gcc -O2 -I "$RUNTIME" /tmp/el_native_time.c "$RUNTIME/el_runtime.c" \
+          gcc -O2 -I "$RUNTIME" /tmp/el_native_time.c /tmp/el_runtime.o \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_time
           /tmp/el_native_time
 
@@ -148,9 +160,9 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_json.el > /tmp/el_native_json.c
-          gcc -O2 -I "$RUNTIME" /tmp/el_native_json.c "$RUNTIME/el_runtime.c" \
+          gcc -O2 -I "$RUNTIME" /tmp/el_native_json.c /tmp/el_runtime.o \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_json
           /tmp/el_native_json
 
@@ -158,9 +170,9 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_env.el > /tmp/el_native_env.c
-          gcc -O2 -I "$RUNTIME" /tmp/el_native_env.c "$RUNTIME/el_runtime.c" \
+          gcc -O2 -I "$RUNTIME" /tmp/el_native_env.c /tmp/el_runtime.o \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_env
           /tmp/el_native_env
 
@@ -168,9 +180,9 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_fs.el > /tmp/el_native_fs.c
-          gcc -O2 -I "$RUNTIME" /tmp/el_native_fs.c "$RUNTIME/el_runtime.c" \
+          gcc -O2 -I "$RUNTIME" /tmp/el_native_fs.c /tmp/el_runtime.o \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_fs
           /tmp/el_native_fs
 
@@ -179,7 +191,7 @@ jobs:
         run: |
           ABS_ELB="$(pwd)/dist/bin/elb"
           ABS_ELC="$(pwd)/dist/platform/elc"
-          ABS_RUNTIME="$(pwd)/el-compiler/runtime"
+          ABS_RUNTIME="$(pwd)/runtime"
           ABS_OUT="$(pwd)/dist/bin"
           (cd ../epm && "$ABS_ELB" --clean --elc="$ABS_ELC" --runtime="$ABS_RUNTIME" --out="$ABS_OUT")
           chmod +x dist/bin/epm
@@ -190,7 +202,7 @@ jobs:
         run: |
           ABS_ELB="$(pwd)/dist/bin/elb"
           ABS_ELC="$(pwd)/dist/platform/elc"
-          ABS_RUNTIME="$(pwd)/el-compiler/runtime"
+          ABS_RUNTIME="$(pwd)/runtime"
           ABS_OUT="$(pwd)/dist/bin"
           (cd tools/install && "$ABS_ELB" --clean --elc="$ABS_ELC" --runtime="$ABS_RUNTIME" --out="$ABS_OUT")
           chmod +x dist/bin/el-install
@@ -203,9 +215,6 @@ jobs:
           GCP_SA_KEY: ${{ secrets.GCP_SA_KEY }}
         run: |
           echo "${GCP_SA_KEY}" > /tmp/gcp-key.json
-          apt-get install -y -qq apt-transport-https ca-certificates curl
-          echo "deb [trusted=yes] https://packages.cloud.google.com/apt cloud-sdk main" > /etc/apt/sources.list.d/google-cloud-sdk.list
-          apt-get update -qq && apt-get install -y google-cloud-cli
           gcloud auth activate-service-account --key-file=/tmp/gcp-key.json
           gcloud config set project neuron-785695
 
@@ -233,7 +242,7 @@ jobs:
             --project=neuron-785695 \
             --package=el-runtime-c \
             --version="${VERSION}" \
-            --source=el-compiler/runtime/el_runtime.c
+            --source=runtime/el_runtime.c
 
           gcloud artifacts generic upload \
             --repository=foundation-dev \
@@ -241,7 +250,7 @@ jobs:
             --project=neuron-785695 \
             --package=el-runtime-h \
             --version="${VERSION}" \
-            --source=el-compiler/runtime/el_runtime.h
+            --source=runtime/el_runtime.h
 
           gcloud artifacts generic upload \
             --repository=foundation-dev \
@@ -249,7 +258,7 @@ jobs:
             --project=neuron-785695 \
             --package=el-runtime-js \
             --version="${VERSION}" \
-            --source=el-compiler/runtime/el_runtime.js
+            --source=runtime/el_runtime.js
 
           echo "Published El SDK version=${VERSION} to foundation-dev"
           # Keep key alive for the ci-base rebuild step below
@@ -272,8 +281,9 @@ jobs:
           gcloud config set project neuron-785695
           gcloud auth configure-docker us-central1-docker.pkg.dev --quiet
 
-          # Pull existing ci-base:dev (system deps stay cached in the base layer)
-          docker pull "${CI_BASE}:dev" || docker pull "${CI_BASE}:latest"
+          # Pull existing ci-base:dev (or fall back to :latest on first run)
+          BASE_TAG="dev"
+          docker pull "${CI_BASE}:dev" || { docker pull "${CI_BASE}:latest" && BASE_TAG="latest"; }
 
           # Inline Dockerfile — only replaces the El SDK layer
           cat > /tmp/Dockerfile.ci-base-patch << 'EOF'
@@ -281,14 +291,14 @@ jobs:
           FROM ${BASE}
           COPY dist/platform/elc                 /opt/el/dist/platform/elc
           COPY dist/bin/elb                       /opt/el/dist/bin/elb
-          COPY el-compiler/runtime/el_runtime.c  /opt/el/el-compiler/runtime/el_runtime.c
-          COPY el-compiler/runtime/el_runtime.h  /opt/el/el-compiler/runtime/el_runtime.h
-          COPY el-compiler/runtime/el_runtime.js /opt/el/el-compiler/runtime/el_runtime.js
+          COPY runtime/el_runtime.c  /opt/el/runtime/el_runtime.c
+          COPY runtime/el_runtime.h  /opt/el/runtime/el_runtime.h
+          COPY runtime/el_runtime.js /opt/el/runtime/el_runtime.js
           RUN chmod +x /opt/el/dist/platform/elc /opt/el/dist/bin/elb
           EOF
 
           docker build \
-            --build-arg BASE="${CI_BASE}:dev" \
+            --build-arg BASE="${CI_BASE}:${BASE_TAG}" \
             --build-arg BUILDKIT_INLINE_CACHE=1 \
             -f /tmp/Dockerfile.ci-base-patch \
             -t "${CI_BASE}:dev" \

.gitea/workflows/ci-stage.yaml

@@ -46,9 +46,9 @@ jobs:
         run: |
           dist/platform/elc-linux-amd64 elc-cli.el > dist/elc-gen2.c
           gcc -O2 \
-            -I el-compiler/runtime \
+            -I runtime \
             dist/elc-gen2.c \
-            el-compiler/runtime/el_runtime.c \
+            runtime/el_runtime.c \
             -lcurl -lssl -lcrypto -lpthread -lm \
             -o dist/platform/elc
           chmod +x dist/platform/elc
@@ -84,7 +84,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_core.el > /tmp/el_native_core.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_core.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_core
@@ -94,7 +94,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_text.el > /tmp/el_native_text.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_text.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_text
@@ -104,7 +104,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_string.el > /tmp/el_native_string.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_string.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_string
@@ -114,7 +114,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_math.el > /tmp/el_native_math.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_math.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_math
@@ -124,7 +124,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_state.el > /tmp/el_native_state.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_state.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_state
@@ -134,7 +134,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_time.el > /tmp/el_native_time.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_time.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_time
@@ -144,7 +144,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_json.el > /tmp/el_native_json.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_json.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_json
@@ -154,7 +154,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_env.el > /tmp/el_native_env.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_env.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_env
@@ -164,7 +164,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_fs.el > /tmp/el_native_fs.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_fs.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_fs
@@ -176,9 +176,9 @@ jobs:
           mkdir -p dist/bin
           dist/platform/elc elb.el > dist/elb.c
           gcc -O2 \
-            -I el-compiler/runtime \
+            -I runtime \
             dist/elb.c \
-            el-compiler/runtime/el_runtime.c \
+            runtime/el_runtime.c \
             -lcurl -lssl -lcrypto -lpthread -lm \
             -o dist/bin/elb
           chmod +x dist/bin/elb
@@ -189,7 +189,7 @@ jobs:
         run: |
           ABS_ELB="$(pwd)/dist/bin/elb"
           ABS_ELC="$(pwd)/dist/platform/elc"
-          ABS_RUNTIME="$(pwd)/el-compiler/runtime"
+          ABS_RUNTIME="$(pwd)/runtime"
           ABS_OUT="$(pwd)/dist/bin"
           (cd ../epm && "$ABS_ELB" --clean --elc="$ABS_ELC" --runtime="$ABS_RUNTIME" --out="$ABS_OUT")
           chmod +x dist/bin/epm
@@ -200,7 +200,7 @@ jobs:
         run: |
           ABS_ELB="$(pwd)/dist/bin/elb"
           ABS_ELC="$(pwd)/dist/platform/elc"
-          ABS_RUNTIME="$(pwd)/el-compiler/runtime"
+          ABS_RUNTIME="$(pwd)/runtime"
           ABS_OUT="$(pwd)/dist/bin"
           (cd tools/install && "$ABS_ELB" --clean --elc="$ABS_ELC" --runtime="$ABS_RUNTIME" --out="$ABS_OUT")
           chmod +x dist/bin/el-install
@@ -235,7 +235,7 @@ jobs:
             --project=neuron-785695 \
             --package=el-runtime-c \
             --version="${VERSION}" \
-            --source=el-compiler/runtime/el_runtime.c
+            --source=runtime/el_runtime.c
 
           gcloud artifacts generic upload \
             --repository=foundation-stage \
@@ -243,7 +243,7 @@ jobs:
             --project=neuron-785695 \
             --package=el-runtime-h \
             --version="${VERSION}" \
-            --source=el-compiler/runtime/el_runtime.h
+            --source=runtime/el_runtime.h
 
           echo "Published El SDK version=${VERSION} to foundation-stage"
           # Keep key alive for the ci-base rebuild step below
@@ -275,9 +275,9 @@ jobs:
           FROM ${BASE}
           COPY dist/platform/elc                 /opt/el/dist/platform/elc
           COPY dist/bin/elb                       /opt/el/dist/bin/elb
-          COPY el-compiler/runtime/el_runtime.c  /opt/el/el-compiler/runtime/el_runtime.c
-          COPY el-compiler/runtime/el_runtime.h  /opt/el/el-compiler/runtime/el_runtime.h
-          COPY el-compiler/runtime/el_runtime.js /opt/el/el-compiler/runtime/el_runtime.js
+          COPY runtime/el_runtime.c  /opt/el/runtime/el_runtime.c
+          COPY runtime/el_runtime.h  /opt/el/runtime/el_runtime.h
+          COPY runtime/el_runtime.js /opt/el/runtime/el_runtime.js
           RUN chmod +x /opt/el/dist/platform/elc /opt/el/dist/bin/elb
           EOF
 

.gitea/workflows/sdk-release.yaml

@@ -47,9 +47,9 @@ jobs:
           mkdir -p dist/platform
           dist/platform/elc-linux-amd64 elc-cli.el > dist/elc-gen2.c
           gcc -O2 \
-            -I el-compiler/runtime \
+            -I runtime \
             dist/elc-gen2.c \
-            el-compiler/runtime/el_runtime.c \
+            runtime/el_runtime.c \
             -lcurl -lssl -lcrypto -lpthread -lm \
             -o dist/platform/elc
           chmod +x dist/platform/elc
@@ -62,9 +62,9 @@ jobs:
           mkdir -p dist/bin
           dist/platform/elc elb.el > dist/elb.c
           gcc -O2 \
-            -I el-compiler/runtime \
+            -I runtime \
             dist/elb.c \
-            el-compiler/runtime/el_runtime.c \
+            runtime/el_runtime.c \
             -lcurl -lssl -lcrypto -lpthread -lm \
             -o dist/bin/elb
           chmod +x dist/bin/elb
@@ -75,7 +75,7 @@ jobs:
         run: |
           ABS_ELB="$(pwd)/dist/bin/elb"
           ABS_ELC="$(pwd)/dist/platform/elc"
-          ABS_RUNTIME="$(pwd)/el-compiler/runtime"
+          ABS_RUNTIME="$(pwd)/runtime"
           ABS_OUT="$(pwd)/dist/bin"
           (cd ../epm && "$ABS_ELB" --clean --elc="$ABS_ELC" --runtime="$ABS_RUNTIME" --out="$ABS_OUT")
           chmod +x dist/bin/epm
@@ -86,7 +86,7 @@ jobs:
         run: |
           ABS_ELB="$(pwd)/dist/bin/elb"
           ABS_ELC="$(pwd)/dist/platform/elc"
-          ABS_RUNTIME="$(pwd)/el-compiler/runtime"
+          ABS_RUNTIME="$(pwd)/runtime"
           ABS_OUT="$(pwd)/dist/bin"
           (cd tools/install && "$ABS_ELB" --clean --elc="$ABS_ELC" --runtime="$ABS_RUNTIME" --out="$ABS_OUT")
           chmod +x dist/bin/el-install
@@ -121,7 +121,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_core.el > /tmp/el_native_core.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_core.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_core
@@ -131,7 +131,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_text.el > /tmp/el_native_text.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_text.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_text
@@ -141,7 +141,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_string.el > /tmp/el_native_string.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_string.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_string
@@ -151,7 +151,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_math.el > /tmp/el_native_math.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_math.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_math
@@ -161,7 +161,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_state.el > /tmp/el_native_state.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_state.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_state
@@ -171,7 +171,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_time.el > /tmp/el_native_time.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_time.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_time
@@ -181,7 +181,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_json.el > /tmp/el_native_json.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_json.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_json
@@ -191,7 +191,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_env.el > /tmp/el_native_env.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_env.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_env
@@ -201,7 +201,7 @@ jobs:
         run: |
           set -euo pipefail
           ELC="$(pwd)/dist/platform/elc"
-          RUNTIME="$(pwd)/el-compiler/runtime"
+          RUNTIME="$(pwd)/runtime"
           "$ELC" --test tests/native/test_fs.el > /tmp/el_native_fs.c
           gcc -O2 -I "$RUNTIME" /tmp/el_native_fs.c "$RUNTIME/el_runtime.c" \
             -lcurl -lssl -lcrypto -lpthread -lm -o /tmp/el_native_fs
@@ -216,8 +216,8 @@ jobs:
           cp lang/dist/platform/elc          dist/sdk/bin/elc
           cp lang/dist/bin/elb               dist/sdk/bin/elb
           cp lang/dist/bin/epm               dist/sdk/bin/epm
-          cp lang/el-compiler/runtime/el_runtime.c  dist/sdk/runtime/
-          cp lang/el-compiler/runtime/el_runtime.h  dist/sdk/runtime/
+          cp lang/runtime/el_runtime.c  dist/sdk/runtime/
+          cp lang/runtime/el_runtime.h  dist/sdk/runtime/
           cp lang/runtime/*.el               dist/sdk/runtime/
           tar -czf dist/el-sdk-latest.tar.gz -C dist/sdk .
           echo "SDK tarball bundled: dist/el-sdk-latest.tar.gz"
@@ -274,8 +274,8 @@ jobs:
 
           # Per-file assets (downstream CI needs these individually)
           upload_asset lang/dist/platform/elc                elc
-          upload_asset lang/el-compiler/runtime/el_runtime.c el_runtime.c
-          upload_asset lang/el-compiler/runtime/el_runtime.h el_runtime.h
+          upload_asset lang/runtime/el_runtime.c el_runtime.c
+          upload_asset lang/runtime/el_runtime.h el_runtime.h
 
           # SDK bundle and installer binary
           upload_asset dist/el-sdk-latest.tar.gz             el-sdk-latest.tar.gz
@@ -319,7 +319,7 @@ jobs:
             --project=neuron-785695 \
             --package=el-runtime-c \
             --version="${VERSION}" \
-            --source=el-compiler/runtime/el_runtime.c
+            --source=runtime/el_runtime.c
 
           gcloud artifacts generic upload \
             --repository=foundation-prod \
@@ -327,7 +327,7 @@ jobs:
             --project=neuron-785695 \
             --package=el-runtime-h \
             --version="${VERSION}" \
-            --source=el-compiler/runtime/el_runtime.h
+            --source=runtime/el_runtime.h
 
           gcloud artifacts generic upload \
             --repository=foundation-prod \
@@ -335,7 +335,7 @@ jobs:
             --project=neuron-785695 \
             --package=el-runtime-js \
             --version="${VERSION}" \
-            --source=el-compiler/runtime/el_runtime.js
+            --source=runtime/el_runtime.js
 
           echo "Published El SDK version=${VERSION} to foundation-prod"
           # Keep key alive for the ci-base rebuild step below
@@ -367,9 +367,9 @@ jobs:
           FROM ${BASE}
           COPY dist/platform/elc                 /opt/el/dist/platform/elc
           COPY dist/bin/elb                       /opt/el/dist/bin/elb
-          COPY el-compiler/runtime/el_runtime.c  /opt/el/el-compiler/runtime/el_runtime.c
-          COPY el-compiler/runtime/el_runtime.h  /opt/el/el-compiler/runtime/el_runtime.h
-          COPY el-compiler/runtime/el_runtime.js /opt/el/el-compiler/runtime/el_runtime.js
+          COPY runtime/el_runtime.c  /opt/el/runtime/el_runtime.c
+          COPY runtime/el_runtime.h  /opt/el/runtime/el_runtime.h
+          COPY runtime/el_runtime.js /opt/el/runtime/el_runtime.js
           RUN chmod +x /opt/el/dist/platform/elc /opt/el/dist/bin/elb
           EOF
 

.githooks/pre-commit

@@ -6,13 +6,13 @@ set -euo pipefail
 
 ROOT="$(git rev-parse --show-toplevel)"
 LANG_DIR="$ROOT/lang"
-RUNTIME="$LANG_DIR/el-compiler/runtime"
+RUNTIME="$LANG_DIR/runtime"
 ELC="$LANG_DIR/dist/platform/elc"
 
 # If elc isn't built yet, skip with a warning rather than blocking
 if [ ! -x "$ELC" ]; then
   echo "⚠  elc not found at lang/dist/platform/elc — skipping pre-commit tests"
-  echo "   Build it first: cd lang && gcc -O2 -I el-compiler/runtime dist/elc-bootstrap.c el-compiler/runtime/el_runtime.c -lcurl -lpthread -o dist/elc-gen2 && ./dist/elc-gen2 el-compiler/src/compiler.el > /tmp/elc.c && gcc -O2 -I el-compiler/runtime /tmp/elc.c el-compiler/runtime/el_runtime.c -lcurl -lpthread -o dist/platform/elc"
+  echo "   Build it first: cd lang && gcc -O2 -I runtime dist/elc-bootstrap.c runtime/el_runtime.c -lcurl -lpthread -o dist/elc-gen2 && ./dist/elc-gen2 el-compiler/src/compiler.el > /tmp/elc.c && gcc -O2 -I runtime /tmp/elc.c runtime/el_runtime.c -lcurl -lpthread -o dist/platform/elc"
   exit 0
 fi
 

elp/src/elp.elh

@@ -1,7 +1,7 @@
 // auto-generated by elc --emit-header — do not edit
 extern fn sem_get(json: String, key: String) -> String
-extern fn generate_frame(frame: Any) -> String
-extern fn generate_frame_lang(frame: Any, lang_code: String) -> String
-extern fn build_form_from_json(semantic_form_json: String, lang_code: String) -> Any
+extern fn generate_frame(frame: [String]) -> String
+extern fn generate_frame_lang(frame: [String], lang_code: String) -> String
+extern fn build_form_from_json(semantic_form_json: String, lang_code: String) -> [String]
 extern fn generate(semantic_form_json: String) -> String
 extern fn generate_lang(semantic_form_json: String, lang_code: String) -> String

elp/src/grammar.elh

@@ -1,22 +1,22 @@
-// auto-generated by elc --emit-header - do not edit
-extern fn slots_get(slots: Any, key: String) -> String
-extern fn slots_set(slots: Any, key: String, val: String) -> Any
-extern fn make_slots(k0: String, v0: String) -> Any
-extern fn make_slots2(k0: String, v0: String, k1: String, v1: String) -> Any
-extern fn make_slots3(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String) -> Any
-extern fn make_slots4(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String, k3: String, v3: String) -> Any
-extern fn make_slots5(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String, k3: String, v3: String, k4: String, v4: String) -> Any
-extern fn rule_id(rule: Any) -> String
-extern fn rule_lhs(rule: Any) -> String
-extern fn rule_rhs_len(rule: Any) -> Int
-extern fn rule_rhs(rule: Any, idx: Int) -> String
-extern fn make_rule(id: String, lhs: String, r0: String) -> Any
-extern fn make_rule2(id: String, lhs: String, r0: String, r1: String) -> Any
-extern fn make_rule3(id: String, lhs: String, r0: String, r1: String, r2: String) -> Any
-extern fn make_rule4(id: String, lhs: String, r0: String, r1: String, r2: String, r3: String) -> Any
-extern fn build_rules() -> Any
-extern fn get_rules() -> Any
-extern fn find_rule(rule_id_str: String) -> Any
+// auto-generated by elc --emit-header — do not edit
+extern fn slots_get(slots: [String], key: String) -> String
+extern fn slots_set(slots: [String], key: String, val: String) -> [String]
+extern fn make_slots(k0: String, v0: String) -> [String]
+extern fn make_slots2(k0: String, v0: String, k1: String, v1: String) -> [String]
+extern fn make_slots3(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String) -> [String]
+extern fn make_slots4(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String, k3: String, v3: String) -> [String]
+extern fn make_slots5(k0: String, v0: String, k1: String, v1: String, k2: String, v2: String, k3: String, v3: String, k4: String, v4: String) -> [String]
+extern fn rule_id(rule: [String]) -> String
+extern fn rule_lhs(rule: [String]) -> String
+extern fn rule_rhs_len(rule: [String]) -> Int
+extern fn rule_rhs(rule: [String], idx: Int) -> String
+extern fn make_rule(id: String, lhs: String, r0: String) -> [String]
+extern fn make_rule2(id: String, lhs: String, r0: String, r1: String) -> [String]
+extern fn make_rule3(id: String, lhs: String, r0: String, r1: String, r2: String) -> [String]
+extern fn make_rule4(id: String, lhs: String, r0: String, r1: String, r2: String, r3: String) -> [String]
+extern fn build_rules() -> [[String]]
+extern fn get_rules() -> [[String]]
+extern fn find_rule(rule_id_str: String) -> [String]
 extern fn make_leaf(label: String, word: String) -> String
 extern fn make_node1(label: String, child0: String) -> String
 extern fn make_node2(label: String, child0: String, child1: String) -> String
@@ -24,15 +24,15 @@ extern fn make_node3(label: String, child0: String, child1: String, child2: Stri
 extern fn make_node4(label: String, child0: String, child1: String, child2: String, child3: String) -> String
 extern fn nlg_is_ws(c: String) -> Bool
 extern fn skip_ws(s: String, pos: Int) -> Int
-extern fn scan_token(s: String, start: Int) -> Any
+extern fn scan_token(s: String, start: Int) -> [String]
 extern fn render_tree(tree: String) -> String
-extern fn gram_word_order(profile: Any) -> String
-extern fn gram_order_constituents(subj: String, verb: String, obj: String, profile: Any) -> String
-extern fn gram_build_vp(verb: String, aux: String, profile: Any) -> String
-extern fn gram_question_strategy(profile: Any) -> String
+extern fn gram_word_order(profile: [String]) -> String
+extern fn gram_order_constituents(subj: String, verb: String, obj: String, profile: [String]) -> String
+extern fn gram_build_vp(verb: String, aux: String, profile: [String]) -> String
+extern fn gram_question_strategy(profile: [String]) -> String
 extern fn is_pronoun(word: String) -> Bool
-extern fn build_np(referent: String, slots: Any) -> String
+extern fn build_np(referent: String, slots: [String]) -> String
 extern fn build_pp(loc: String) -> String
-extern fn build_vp_body(slots: Any) -> String
-extern fn build_vp_from_slots(slots: Any) -> String
-extern fn generate_tree(rule_id_str: String, slots: Any) -> String
+extern fn build_vp_body(slots: [String]) -> String
+extern fn build_vp_from_slots(slots: [String]) -> String
+extern fn generate_tree(rule_id_str: String, slots: [String]) -> String

elp/src/language-profile.elh

@@ -1,46 +1,46 @@
-// auto-generated by elc --emit-header - do not edit
-extern fn lang_profile(code: String, word_order: String, morph_type: String, has_case: String, has_gender: String, script_dir: String, agreement: String, null_subject: String) -> Any
-extern fn lang_get(profile: Any, key: String) -> String
-extern fn lang_profile_en() -> Any
-extern fn lang_profile_ja() -> Any
-extern fn lang_profile_ar() -> Any
-extern fn lang_profile_zh() -> Any
-extern fn lang_profile_de() -> Any
-extern fn lang_profile_es() -> Any
-extern fn lang_profile_fi() -> Any
-extern fn lang_profile_sw() -> Any
-extern fn lang_profile_hi() -> Any
-extern fn lang_profile_ru() -> Any
-extern fn lang_profile_fr() -> Any
-extern fn lang_profile_la() -> Any
-extern fn lang_profile_he() -> Any
-extern fn lang_profile_sa() -> Any
-extern fn lang_profile_got() -> Any
-extern fn lang_profile_non() -> Any
-extern fn lang_profile_enm() -> Any
-extern fn lang_profile_pi() -> Any
-extern fn lang_profile_grc() -> Any
-extern fn lang_profile_ang() -> Any
-extern fn lang_profile_fro() -> Any
-extern fn lang_profile_goh() -> Any
-extern fn lang_profile_sga() -> Any
-extern fn lang_profile_txb() -> Any
-extern fn lang_profile_peo() -> Any
-extern fn lang_profile_akk() -> Any
-extern fn lang_profile_uga() -> Any
-extern fn lang_profile_egy() -> Any
-extern fn lang_profile_sux() -> Any
-extern fn lang_profile_gez() -> Any
-extern fn lang_profile_cop() -> Any
-extern fn lang_from_code(code: String) -> Any
-extern fn lang_default() -> Any
-extern fn lang_is_isolating(profile: Any) -> Bool
-extern fn lang_is_agglutinative(profile: Any) -> Bool
-extern fn lang_is_fusional(profile: Any) -> Bool
-extern fn lang_is_polysynthetic(profile: Any) -> Bool
-extern fn lang_is_rtl(profile: Any) -> Bool
-extern fn lang_has_null_subject(profile: Any) -> Bool
-extern fn lang_has_case(profile: Any) -> Bool
-extern fn lang_has_gender(profile: Any) -> Bool
-extern fn lang_word_order(profile: Any) -> String
-extern fn lang_code(profile: Any) -> String
+// auto-generated by elc --emit-header — do not edit
+extern fn lang_profile(code: String, word_order: String, morph_type: String, has_case: String, has_gender: String, script_dir: String, agreement: String, null_subject: String) -> [String]
+extern fn lang_get(profile: [String], key: String) -> String
+extern fn lang_profile_en() -> [String]
+extern fn lang_profile_ja() -> [String]
+extern fn lang_profile_ar() -> [String]
+extern fn lang_profile_zh() -> [String]
+extern fn lang_profile_de() -> [String]
+extern fn lang_profile_es() -> [String]
+extern fn lang_profile_fi() -> [String]
+extern fn lang_profile_sw() -> [String]
+extern fn lang_profile_hi() -> [String]
+extern fn lang_profile_ru() -> [String]
+extern fn lang_profile_fr() -> [String]
+extern fn lang_profile_la() -> [String]
+extern fn lang_profile_he() -> [String]
+extern fn lang_profile_sa() -> [String]
+extern fn lang_profile_got() -> [String]
+extern fn lang_profile_non() -> [String]
+extern fn lang_profile_enm() -> [String]
+extern fn lang_profile_pi() -> [String]
+extern fn lang_profile_grc() -> [String]
+extern fn lang_profile_ang() -> [String]
+extern fn lang_profile_fro() -> [String]
+extern fn lang_profile_goh() -> [String]
+extern fn lang_profile_sga() -> [String]
+extern fn lang_profile_txb() -> [String]
+extern fn lang_profile_peo() -> [String]
+extern fn lang_profile_akk() -> [String]
+extern fn lang_profile_uga() -> [String]
+extern fn lang_profile_egy() -> [String]
+extern fn lang_profile_sux() -> [String]
+extern fn lang_profile_gez() -> [String]
+extern fn lang_profile_cop() -> [String]
+extern fn lang_from_code(code: String) -> [String]
+extern fn lang_default() -> [String]
+extern fn lang_is_isolating(profile: [String]) -> Bool
+extern fn lang_is_agglutinative(profile: [String]) -> Bool
+extern fn lang_is_fusional(profile: [String]) -> Bool
+extern fn lang_is_polysynthetic(profile: [String]) -> Bool
+extern fn lang_is_rtl(profile: [String]) -> Bool
+extern fn lang_has_null_subject(profile: [String]) -> Bool
+extern fn lang_has_case(profile: [String]) -> Bool
+extern fn lang_has_gender(profile: [String]) -> Bool
+extern fn lang_word_order(profile: [String]) -> String
+extern fn lang_code(profile: [String]) -> String

elp/src/morphology-akk.el

@@ -56,6 +56,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn akk_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-akk.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn akk_str_ends(s: String, suf: String) -> Bool
 extern fn akk_str_len(s: String) -> Int
 extern fn akk_str_drop_last(s: String, n: Int) -> String

elp/src/morphology-ang.el

@@ -36,6 +36,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn ang_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-ang.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn ang_str_ends(s: String, suf: String) -> Bool
 extern fn ang_str_drop_last(s: String, n: Int) -> String
 extern fn ang_str_last_char(s: String) -> String

elp/src/morphology-ar.el

@@ -21,6 +21,7 @@
 
 // ── String helpers ────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn ar_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-ar.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn ar_str_ends(s: String, suf: String) -> Bool
 extern fn ar_str_len(s: String) -> Int
 extern fn ar_str_drop_last(s: String, n: Int) -> String

elp/src/morphology-cop.el

@@ -54,6 +54,7 @@
 
 // ── String helpers ──────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn cop_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-cop.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn cop_str_ends(s: String, suf: String) -> Bool
 extern fn cop_str_len(s: String) -> Int
 extern fn cop_drop(s: String, n: Int) -> String

elp/src/morphology-de.el

@@ -26,6 +26,7 @@
 //  Dat:    dem     der     dem     den
 //  Gen:    des     der     des     der
 
+import "morphology.el"
 fn de_article_def(gender: String, gram_case: String, number: String) -> String {
     if str_eq(number, "pl") {
         if str_eq(gram_case, "nom") { return "die" }

elp/src/morphology-de.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn de_article_def(gender: String, gram_case: String, number: String) -> String
 extern fn de_article_indef(gender: String, gram_case: String, number: String) -> String
 extern fn de_article(gender: String, gram_case: String, number: String, definite: String) -> String

elp/src/morphology-egy.el

@@ -52,6 +52,7 @@
 
 // ── String helpers ──────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn egy_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-egy.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn egy_str_ends(s: String, suf: String) -> Bool
 extern fn egy_str_len(s: String) -> Int
 extern fn egy_drop(s: String, n: Int) -> String

elp/src/morphology-enm.el

@@ -31,6 +31,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn enm_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-enm.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn enm_str_ends(s: String, suf: String) -> Bool
 extern fn enm_drop(s: String, n: Int) -> String
 extern fn enm_first_char(s: String) -> String

elp/src/morphology-es.el

@@ -12,6 +12,7 @@
 
 // ── String helpers (local, matching morphology.el conventions) ────────────────
 
+import "morphology.el"
 fn es_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-es.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn es_str_ends(s: String, suf: String) -> Bool
 extern fn es_str_drop_last(s: String, n: Int) -> String
 extern fn es_str_last_char(s: String) -> String

elp/src/morphology-fi.el

@@ -25,6 +25,7 @@
 // If only neutral vowels are found, default to "front" (the conservative choice
 // for borrowed words and those without clear back vowels).
 
+import "morphology.el"
 fn fi_harmony(word: String) -> String {
     let n: Int = str_len(word)
     let i: Int = n - 1

elp/src/morphology-fi.elh

@@ -1,11 +1,11 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn fi_harmony(word: String) -> String
 extern fn fi_suffix(base: String, harmony: String) -> String
 extern fn fi_noun_case(stem: String, gram_case: String, number: String, harmony: String) -> String
 extern fn fi_str_last_char(s: String) -> String
 extern fn fi_apply_case(noun: String, gram_case: String, number: String) -> String
 extern fn fi_verb_stem(dict_form: String) -> String
-extern fn fi_irregular_verb(dict_form: String) -> Any
+extern fn fi_irregular_verb(dict_form: String) -> [String]
 extern fn fi_present_ending(stem: String, person: String, number: String, harmony: String) -> String
 extern fn fi_past_stem(stem: String) -> String
 extern fn fi_past_ending(stem: String, person: String, number: String, harmony: String) -> String
@@ -14,4 +14,4 @@ extern fn fi_negative(verb: String, person: String, number: String) -> String
 extern fn fi_conjugate(verb: String, tense: String, person: String, number: String) -> String
 extern fn fi_question_suffix(harmony: String) -> String
 extern fn fi_make_question(verb_form: String, harmony: String) -> String
-extern fn fi_full_paradigm(noun: String) -> Any
+extern fn fi_full_paradigm(noun: String) -> [String]

elp/src/morphology-fr.el

@@ -19,6 +19,7 @@
 
 // ── String helpers (local, matching morphology.el conventions) ────────────────
 
+import "morphology.el"
 fn fr_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-fr.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn fr_str_ends(s: String, suf: String) -> Bool
 extern fn fr_str_drop_last(s: String, n: Int) -> String
 extern fn fr_str_last_char(s: String) -> String

elp/src/morphology-fro.el

@@ -53,6 +53,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn fro_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-fro.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn fro_str_ends(s: String, suf: String) -> Bool
 extern fn fro_drop(s: String, n: Int) -> String
 extern fn fro_slot(person: String, number: String) -> Int

elp/src/morphology-gez.el

@@ -64,6 +64,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn gez_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-gez.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn gez_str_ends(s: String, suf: String) -> Bool
 extern fn gez_str_len(s: String) -> Int
 extern fn gez_str_drop_last(s: String, n: Int) -> String

elp/src/morphology-goh.el

@@ -48,6 +48,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn goh_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-goh.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn goh_str_ends(s: String, suf: String) -> Bool
 extern fn goh_drop(s: String, n: Int) -> String
 extern fn goh_slot(person: String, number: String) -> Int

elp/src/morphology-got.el

@@ -49,6 +49,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn got_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-got.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn got_str_ends(s: String, suf: String) -> Bool
 extern fn got_str_drop_last(s: String, n: Int) -> String
 extern fn got_slot(person: String, number: String) -> Int

elp/src/morphology-grc.el

@@ -31,6 +31,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn grc_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-grc.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn grc_str_ends(s: String, suf: String) -> Bool
 extern fn grc_str_drop_last(s: String, n: Int) -> String
 extern fn grc_str_last_char(s: String) -> String

elp/src/morphology-he.el

@@ -51,6 +51,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn he_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-he.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn he_str_ends(s: String, suf: String) -> Bool
 extern fn he_str_len(s: String) -> Int
 extern fn he_str_drop_last(s: String, n: Int) -> String

elp/src/morphology-hi.el

@@ -24,6 +24,7 @@
 
 // ── String helpers ────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn hi_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-hi.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn hi_str_ends(s: String, suf: String) -> Bool
 extern fn hi_str_drop_last(s: String, n: Int) -> String
 extern fn hi_str_last_char(s: String) -> String

elp/src/morphology-ja.el

@@ -23,6 +23,7 @@
 // Note: this is a heuristic classifier for romanized input.  For production use
 // with native kana/kanji forms, the dictionary form (辞書形) must be consulted.
 
+import "morphology.el"
 fn ja_verb_group(dict_form: String) -> String {
     // Irregular verbs (exact match on dictionary form)
     if str_eq(dict_form, "する")  { return "irregular" }

elp/src/morphology-ja.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn ja_verb_group(dict_form: String) -> String
 extern fn ja_ichidan_stem(dict_form: String) -> String
 extern fn ja_godan_stem_change(dict_form: String, row: String) -> String

elp/src/morphology-la.el

@@ -25,6 +25,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn la_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-la.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn la_str_ends(s: String, suf: String) -> Bool
 extern fn la_str_drop_last(s: String, n: Int) -> String
 extern fn la_str_last_char(s: String) -> String

elp/src/morphology-non.el

@@ -27,6 +27,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn non_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-non.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn non_str_ends(s: String, suf: String) -> Bool
 extern fn non_drop(s: String, n: Int) -> String
 extern fn non_last(s: String) -> String

elp/src/morphology-peo.el

@@ -31,6 +31,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn peo_drop(s: String, n: Int) -> String {
     let len: Int = str_len(s)
     if n >= len { return "" }

elp/src/morphology-peo.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn peo_drop(s: String, n: Int) -> String
 extern fn peo_ends(s: String, suf: String) -> Bool
 extern fn peo_slot(person: String, number: String) -> Int

elp/src/morphology-pi.el

@@ -30,6 +30,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn pi_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-pi.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn pi_str_ends(s: String, suf: String) -> Bool
 extern fn pi_drop(s: String, n: Int) -> String
 extern fn pi_last_char(s: String) -> String

elp/src/morphology-ru.el

@@ -35,6 +35,7 @@
 // The heuristic returns the most probable gender.  Caller should override
 // for known exceptions (путь, рубль are masc despite -ь).
 
+import "morphology.el"
 fn ru_gender(noun: String) -> String {
     let n: Int = str_len(noun)
     if n == 0 { return "m" }

elp/src/morphology-ru.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn ru_gender(noun: String) -> String
 extern fn ru_stem_type(noun: String, gender: String) -> String
 extern fn ru_noun_case(noun: String, gender: String, gram_case: String, number: String) -> String

elp/src/morphology-sa.el

@@ -42,6 +42,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn sa_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-sa.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn sa_str_ends(s: String, suf: String) -> Bool
 extern fn sa_str_drop_last(s: String, n: Int) -> String
 extern fn sa_slot(person: String, number: String) -> Int

elp/src/morphology-sga.el

@@ -31,6 +31,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn sga_drop(s: String, n: Int) -> String {
     let len: Int = str_len(s)
     if n >= len { return "" }

elp/src/morphology-sga.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn sga_drop(s: String, n: Int) -> String
 extern fn sga_first(s: String) -> String
 extern fn sga_rest(s: String) -> String

elp/src/morphology-sux.el

@@ -53,6 +53,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn sux_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-sux.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn sux_str_ends(s: String, suf: String) -> Bool
 extern fn sux_str_drop_last(s: String, n: Int) -> String
 extern fn sux_str_last_char(s: String) -> String

elp/src/morphology-sw.el

@@ -24,6 +24,7 @@
 
 // ── String helpers ────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn sw_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-sw.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn sw_str_ends(s: String, suf: String) -> Bool
 extern fn sw_str_drop_last(s: String, n: Int) -> String
 extern fn sw_str_first_char(s: String) -> String

elp/src/morphology-txb.el

@@ -30,6 +30,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn txb_drop(s: String, n: Int) -> String {
     let len: Int = str_len(s)
     if n >= len { return "" }

elp/src/morphology-txb.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn txb_drop(s: String, n: Int) -> String
 extern fn txb_ends(s: String, suf: String) -> Bool
 extern fn txb_slot(person: String, number: String) -> Int

elp/src/morphology-uga.el

@@ -48,6 +48,7 @@
 
 // ── String helpers ─────────────────────────────────────────────────────────────
 
+import "morphology.el"
 fn uga_str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology-uga.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn uga_str_ends(s: String, suf: String) -> Bool
 extern fn uga_str_len(s: String) -> Int
 extern fn uga_str_drop_last(s: String, n: Int) -> String

elp/src/morphology.el

@@ -33,6 +33,17 @@
 
 // ── String helpers ────────────────────────────────────────────────────────────
 
+import "language-profile.el"
+import "morphology-es.el"
+import "morphology-fr.el"
+import "morphology-de.el"
+import "morphology-ru.el"
+import "morphology-fi.el"
+import "morphology-ar.el"
+import "morphology-hi.el"
+import "morphology-sw.el"
+import "morphology-la.el"
+import "morphology-ja.el"
 fn str_ends(s: String, suf: String) -> Bool {
     return str_ends_with(s, suf)
 }

elp/src/morphology.elh

@@ -1,4 +1,4 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn str_ends(s: String, suf: String) -> Bool
 extern fn str_last_char(s: String) -> String
 extern fn str_last2(s: String) -> String
@@ -8,7 +8,7 @@ extern fn is_vowel(c: String) -> Bool
 extern fn morph_apply_suffix(base: String, suffix: String) -> String
 extern fn en_irregular_plural(word: String) -> String
 extern fn en_irregular_singular(word: String) -> String
-extern fn en_irregular_verb(base: String) -> Any
+extern fn en_irregular_verb(base: String) -> [String]
 extern fn en_verb_3sg(base: String) -> String
 extern fn en_should_double_final(base: String) -> Bool
 extern fn en_verb_past(base: String) -> String
@@ -16,10 +16,10 @@ extern fn en_verb_gerund(base: String) -> String
 extern fn en_pluralize_regular(singular: String) -> String
 extern fn en_verb_form(base: String, tense: String, person: String, number: String) -> String
 extern fn agree_determiner(det: String, noun: String) -> String
-extern fn morph_pluralize(noun: String, profile: Any) -> String
+extern fn morph_pluralize(noun: String, profile: [String]) -> String
 extern fn morph_map_canonical(verb: String, code: String) -> String
-extern fn morph_conjugate(verb: String, tense: String, person: String, number: String, profile: Any) -> String
-extern fn morph_inflect(word: String, features: String, profile: Any) -> String
+extern fn morph_conjugate(verb: String, tense: String, person: String, number: String, profile: [String]) -> String
+extern fn morph_inflect(word: String, features: String, profile: [String]) -> String
 extern fn pluralize(singular: String) -> String
 extern fn singularize(plural: String) -> String
 extern fn verb_form(base: String, tense: String, person: String, number: String) -> String

elp/src/realizer.elh

@@ -1,10 +1,10 @@
-// auto-generated by elc --emit-header - do not edit
+// auto-generated by elc --emit-header — do not edit
 extern fn agent_person(agent: String) -> String
 extern fn agent_number(agent: String) -> String
 extern fn realize_np(referent: String, number: String) -> String
-extern fn realize_vp_lang(base_verb: String, tense: String, aspect: String, person: String, number: String, profile: Any) -> Any
-extern fn realize_question_lang(predicate: String, tense: String, aspect: String, person: String, number: String, agent: String, patient: String, location: String, profile: Any) -> String
+extern fn realize_vp_lang(base_verb: String, tense: String, aspect: String, person: String, number: String, profile: [String]) -> [String]
+extern fn realize_question_lang(predicate: String, tense: String, aspect: String, person: String, number: String, agent: String, patient: String, location: String, profile: [String]) -> String
 extern fn capitalize_first(s: String) -> String
 extern fn add_punct(s: String, intent: String) -> String
-extern fn realize_lang(form: Any, profile: Any) -> String
-extern fn realize(form: Any) -> String
+extern fn realize_lang(form: [String], profile: [String]) -> String
+extern fn realize(form: [String]) -> String

elp/src/semantics.elh

@@ -1,18 +1,18 @@
-// auto-generated by elc --emit-header - do not edit
-extern fn sem_frame(intent: String, subject: String, obj: String, modifiers: String) -> Any
-extern fn sem_frame_lang(intent: String, subject: String, obj: String, modifiers: String, lang_code: String) -> Any
-extern fn sem_frame_simple(intent: String, subject: String) -> Any
-extern fn sem_frame_obj(intent: String, subject: String, obj: String) -> Any
-extern fn sem_intent(frame: Any) -> String
-extern fn sem_subject(frame: Any) -> String
-extern fn sem_object(frame: Any) -> String
-extern fn sem_modifiers(frame: Any) -> String
-extern fn sem_lang(frame: Any) -> String
+// auto-generated by elc --emit-header — do not edit
+extern fn sem_frame(intent: String, subject: String, obj: String, modifiers: String) -> [String]
+extern fn sem_frame_lang(intent: String, subject: String, obj: String, modifiers: String, lang_code: String) -> [String]
+extern fn sem_frame_simple(intent: String, subject: String) -> [String]
+extern fn sem_frame_obj(intent: String, subject: String, obj: String) -> [String]
+extern fn sem_intent(frame: [String]) -> String
+extern fn sem_subject(frame: [String]) -> String
+extern fn sem_object(frame: [String]) -> String
+extern fn sem_modifiers(frame: [String]) -> String
+extern fn sem_lang(frame: [String]) -> String
 extern fn sem_first_modifier(mods: String) -> String
 extern fn sem_intent_to_realize(intent: String) -> String
-extern fn sem_to_spec(frame: Any) -> Any
-extern fn sem_to_spec_full(frame: Any, verb: String, tense: String, aspect: String) -> Any
+extern fn sem_to_spec(frame: [String]) -> [String]
+extern fn sem_to_spec_full(frame: [String], verb: String, tense: String, aspect: String) -> [String]
 extern fn sem_realize_greet(subject: String) -> String
-extern fn sem_realize(frame: Any) -> String
-extern fn sem_realize_full(frame: Any, verb: String, tense: String, aspect: String) -> String
-extern fn sem_realize_lang(frame: Any, lang_code: String) -> String
+extern fn sem_realize(frame: [String]) -> String
+extern fn sem_realize_full(frame: [String], verb: String, tense: String, aspect: String) -> String
+extern fn sem_realize_lang(frame: [String], lang_code: String) -> String

elp/src/vocabulary.elh

@@ -1,20 +1,20 @@
-// auto-generated by elc --emit-header - do not edit
-extern fn lex_word(entry: Any) -> String
-extern fn lex_pos(entry: Any) -> String
-extern fn lex_form(entry: Any, idx: Int) -> String
-extern fn lex_class(entry: Any) -> String
-extern fn make_entry(word: String, pos: String, f0: String, f1: String, f2: String, f3: String, f4: String, cls: String) -> Any
-extern fn make_entry2(word: String, pos: String, f0: String, f1: String, cls: String) -> Any
-extern fn make_entry3(word: String, pos: String, f0: String, f1: String, f2: String, cls: String) -> Any
-extern fn make_entry1(word: String, pos: String, f0: String, cls: String) -> Any
-extern fn build_vocab() -> Any
-extern fn get_vocab() -> Any
-extern fn vocab_lookup(word: String, lang_code: String) -> Any
-extern fn vocab_lookup_en(word: String) -> Any
+// auto-generated by elc --emit-header — do not edit
+extern fn lex_word(entry: [String]) -> String
+extern fn lex_pos(entry: [String]) -> String
+extern fn lex_form(entry: [String], idx: Int) -> String
+extern fn lex_class(entry: [String]) -> String
+extern fn make_entry(word: String, pos: String, f0: String, f1: String, f2: String, f3: String, f4: String, cls: String) -> [String]
+extern fn make_entry2(word: String, pos: String, f0: String, f1: String, cls: String) -> [String]
+extern fn make_entry3(word: String, pos: String, f0: String, f1: String, f2: String, cls: String) -> [String]
+extern fn make_entry1(word: String, pos: String, f0: String, cls: String) -> [String]
+extern fn build_vocab() -> [[String]]
+extern fn get_vocab() -> [[String]]
+extern fn vocab_lookup(word: String, lang_code: String) -> [String]
+extern fn vocab_lookup_en(word: String) -> [String]
 extern fn vocab_synonym(word: String, lang_register: String, lang_code: String) -> String
-extern fn vocab_by_pos(pos: String) -> Any
-extern fn vocab_by_class(cls: String) -> Any
-extern fn entry_found(entry: Any) -> Bool
-extern fn entry_word(entry: Any) -> String
-extern fn entry_pos(entry: Any) -> String
-extern fn entry_form(entry: Any, n: Int) -> String
+extern fn vocab_by_pos(pos: String) -> [[String]]
+extern fn vocab_by_class(cls: String) -> [[String]]
+extern fn entry_found(entry: [String]) -> Bool
+extern fn entry_word(entry: [String]) -> String
+extern fn entry_pos(entry: [String]) -> String
+extern fn entry_form(entry: [String], n: Int) -> String

elp/tests/run.sh

@@ -22,7 +22,7 @@ cd "$(dirname "$0")"
 
 EL_HOME="${EL_HOME:-$(cd ../.. && pwd)/el}"
 ELC="${ELC:-${EL_HOME}/dist/platform/elc}"
-RUNTIME_DIR="${EL_HOME}/el-compiler/runtime"
+RUNTIME_DIR="${EL_HOME}/runtime"
 SRC_DIR="$(cd .. && pwd)/src"
 
 if [ ! -x "${ELC}" ]; then

engram/.gitignore

@@ -1,3 +1,6 @@
-target/
-*.db
 .DS_Store
+*.db
+*.elc
+*.elh
+dist/
+target/

engram/dist/engram.c

@@ -10,6 +10,9 @@ el_val_t query_param(el_val_t path, el_val_t key);
 el_val_t query_int(el_val_t path, el_val_t key, el_val_t default_val);
 el_val_t extract_id(el_val_t path, el_val_t prefix);
 el_val_t route_stats(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_act_stats(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_text_health(el_val_t method, el_val_t path, el_val_t body);
+el_val_t persist_canonical(void);
 el_val_t route_create_node(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_get_node(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_scan_nodes(el_val_t method, el_val_t path, el_val_t body);
@@ -17,19 +20,29 @@ el_val_t route_scan_edges(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_search(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_activate(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_create_edge(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_create_edges_batch(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_neighbors(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_strengthen(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_forget(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_save(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_load(el_val_t method, el_val_t path, el_val_t body);
 el_val_t route_health(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_embed_backfill(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_sync(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_load_merge(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_emit_ise(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_capture_knowledge(el_val_t method, el_val_t path, el_val_t body);
+el_val_t route_similarity(el_val_t method, el_val_t path, el_val_t body);
 el_val_t check_auth_ok(el_val_t method, el_val_t body);
 el_val_t handle_request(el_val_t method, el_val_t path, el_val_t body);
 
+el_val_t bind_raw;
 el_val_t bind_str;
 el_val_t port;
+el_val_t data_dir_raw;
 el_val_t data_dir;
 el_val_t snapshot_path;
+el_val_t boot_snap;
 
 el_val_t parse_port(el_val_t bind) {
   el_val_t colon = str_index_of(bind, EL_STR(":"));
@@ -108,17 +121,40 @@ el_val_t route_stats(el_val_t method, el_val_t path, el_val_t body) {
   return 0;
 }
 
+el_val_t route_act_stats(el_val_t method, el_val_t path, el_val_t body) {
+  return engram_act_stats_json();
+  return 0;
+}
+
+el_val_t route_text_health(el_val_t method, el_val_t path, el_val_t body) {
+  return engram_text_health_json();
+  return 0;
+}
+
+el_val_t persist_canonical(void) {
+  el_val_t dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  el_val_t dir = ({ el_val_t _if_result_1 = 0; if (str_eq(dir_raw, EL_STR(""))) { _if_result_1 = (EL_STR("/tmp/engram")); } else { _if_result_1 = (dir_raw); } _if_result_1; });
+  return engram_save(el_str_concat(dir, EL_STR("/snapshot.json")));
+  return 0;
+}
+
 el_val_t route_create_node(el_val_t method, el_val_t path, el_val_t body) {
   el_val_t content = json_get_string(body, EL_STR("content"));
-  el_val_t node_type = json_get_string(body, EL_STR("node_type"));
-  if (str_eq(node_type, EL_STR(""))) {
-    node_type = EL_STR("Memory");
-  }
-  el_val_t salience = json_get_float(body, EL_STR("salience"));
-  if (str_eq(salience, el_from_float(0.0))) {
-    salience = el_from_float(0.5);
-  }
-  el_val_t id = engram_node(content, node_type, salience);
+  el_val_t nt_raw = json_get_string(body, EL_STR("node_type"));
+  el_val_t node_type = ({ el_val_t _if_result_2 = 0; if (str_eq(nt_raw, EL_STR(""))) { _if_result_2 = (EL_STR("Memory")); } else { _if_result_2 = (nt_raw); } _if_result_2; });
+  el_val_t sal_present = json_get_raw(body, EL_STR("salience"));
+  el_val_t salience = ({ el_val_t _if_result_3 = 0; if (str_eq(sal_present, EL_STR(""))) { _if_result_3 = (el_from_float(0.5)); } else { _if_result_3 = (json_get_float(body, EL_STR("salience"))); } _if_result_3; });
+  el_val_t label_raw = json_get_string(body, EL_STR("label"));
+  el_val_t label = ({ el_val_t _if_result_4 = 0; if (str_eq(label_raw, EL_STR(""))) { _if_result_4 = (content); } else { _if_result_4 = (label_raw); } _if_result_4; });
+  el_val_t imp_present = json_get_raw(body, EL_STR("importance"));
+  el_val_t importance = ({ el_val_t _if_result_5 = 0; if (str_eq(imp_present, EL_STR(""))) { _if_result_5 = (el_from_float(0.5)); } else { _if_result_5 = (json_get_float(body, EL_STR("importance"))); } _if_result_5; });
+  el_val_t conf_present = json_get_raw(body, EL_STR("confidence"));
+  el_val_t confidence = ({ el_val_t _if_result_6 = 0; if (str_eq(conf_present, EL_STR(""))) { _if_result_6 = (el_from_float(1.0)); } else { _if_result_6 = (json_get_float(body, EL_STR("confidence"))); } _if_result_6; });
+  el_val_t tier_raw = json_get_string(body, EL_STR("tier"));
+  el_val_t tier = ({ el_val_t _if_result_7 = 0; if (str_eq(tier_raw, EL_STR(""))) { _if_result_7 = (EL_STR("Working")); } else { _if_result_7 = (tier_raw); } _if_result_7; });
+  el_val_t tags = json_get_string(body, EL_STR("tags"));
+  el_val_t id = engram_node_full(content, node_type, label, salience, importance, confidence, tier, tags);
+  el_val_t saved = persist_canonical();
   return el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"id\":\""), id), EL_STR("\",\"content\":\"")), content), EL_STR("\",\"node_type\":\"")), node_type), EL_STR("\"}"));
   return 0;
 }
@@ -144,11 +180,9 @@ el_val_t route_scan_nodes(el_val_t method, el_val_t path, el_val_t body) {
 }
 
 el_val_t route_scan_edges(el_val_t method, el_val_t path, el_val_t body) {
-  el_val_t dir = env(EL_STR("ENGRAM_DATA_DIR"));
-  if (str_eq(dir, EL_STR(""))) {
-    dir = EL_STR("/tmp/engram");
-  }
-  el_val_t snap_path = el_str_concat(dir, EL_STR("/snapshot.json"));
+  el_val_t dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  el_val_t dir = ({ el_val_t _if_result_8 = 0; if (str_eq(dir_raw, EL_STR(""))) { _if_result_8 = (EL_STR("/tmp/engram")); } else { _if_result_8 = (dir_raw); } _if_result_8; });
+  el_val_t snap_path = el_str_concat(dir, EL_STR("/.scan-export.json"));
   engram_save(snap_path);
   el_val_t snap = fs_read(snap_path);
   if (str_eq(snap, EL_STR(""))) {
@@ -163,36 +197,22 @@ el_val_t route_scan_edges(el_val_t method, el_val_t path, el_val_t body) {
 }
 
 el_val_t route_search(el_val_t method, el_val_t path, el_val_t body) {
-  el_val_t q = EL_STR("");
-  if (str_eq(method, EL_STR("GET"))) {
-    q = query_param(path, EL_STR("q"));
-  } else {
-    q = json_get_string(body, EL_STR("query"));
-  }
-  el_val_t limit = query_int(path, EL_STR("limit"), 20);
-  if (limit == 0) {
-    limit = json_get_int(body, EL_STR("limit"));
-  }
-  if (limit == 0) {
-    limit = 20;
-  }
+  el_val_t q = ({ el_val_t _if_result_9 = 0; if (str_eq(method, EL_STR("GET"))) { _if_result_9 = (query_param(path, EL_STR("q"))); } else { _if_result_9 = (json_get_string(body, EL_STR("query"))); } _if_result_9; });
+  el_val_t lim_url = query_int(path, EL_STR("limit"), 0);
+  el_val_t lim_body = json_get_int(body, EL_STR("limit"));
+  el_val_t lim_either = ({ el_val_t _if_result_10 = 0; if ((lim_url > 0)) { _if_result_10 = (lim_url); } else { _if_result_10 = (lim_body); } _if_result_10; });
+  el_val_t limit = ({ el_val_t _if_result_11 = 0; if ((lim_either > 0)) { _if_result_11 = (lim_either); } else { _if_result_11 = (20); } _if_result_11; });
   return engram_search_json(q, limit);
   return 0;
 }
 
 el_val_t route_activate(el_val_t method, el_val_t path, el_val_t body) {
-  el_val_t q = EL_STR("");
-  el_val_t depth = 3;
-  if (str_eq(method, EL_STR("GET"))) {
-    q = query_param(path, EL_STR("q"));
-    depth = query_int(path, EL_STR("depth"), 3);
-  } else {
-    q = json_get_string(body, EL_STR("query"));
-    el_val_t bd = json_get_int(body, EL_STR("depth"));
-    if (bd > 0) {
-      depth = bd;
-    }
+  el_val_t q = ({ el_val_t _if_result_12 = 0; if (str_eq(method, EL_STR("GET"))) { _if_result_12 = (query_param(path, EL_STR("q"))); } else { _if_result_12 = (json_get_string(body, EL_STR("query"))); } _if_result_12; });
+  if (str_eq(q, EL_STR(""))) {
+    return err_json(EL_STR("missing query"));
   }
+  el_val_t d_raw = ({ el_val_t _if_result_13 = 0; if (str_eq(method, EL_STR("GET"))) { _if_result_13 = (query_int(path, EL_STR("depth"), 3)); } else { _if_result_13 = (json_get_int(body, EL_STR("depth"))); } _if_result_13; });
+  el_val_t depth = ({ el_val_t _if_result_14 = 0; if ((d_raw > 0)) { _if_result_14 = (d_raw); } else { _if_result_14 = (3); } _if_result_14; });
   return el_str_concat(el_str_concat(EL_STR("{\"results\":"), engram_activate_json(q, depth)), EL_STR("}"));
   return 0;
 }
@@ -200,19 +220,51 @@ el_val_t route_activate(el_val_t method, el_val_t path, el_val_t body) {
 el_val_t route_create_edge(el_val_t method, el_val_t path, el_val_t body) {
   el_val_t from_id = json_get_string(body, EL_STR("from_id"));
   el_val_t to_id = json_get_string(body, EL_STR("to_id"));
-  el_val_t relation = json_get_string(body, EL_STR("relation"));
-  if (str_eq(relation, EL_STR(""))) {
-    relation = EL_STR("associates");
-  }
-  el_val_t weight = json_get_float(body, EL_STR("weight"));
-  if (str_eq(weight, el_from_float(0.0))) {
-    weight = el_from_float(0.5);
-  }
+  el_val_t rel_raw = json_get_string(body, EL_STR("relation"));
+  el_val_t relation = ({ el_val_t _if_result_15 = 0; if (str_eq(rel_raw, EL_STR(""))) { _if_result_15 = (EL_STR("associates")); } else { _if_result_15 = (rel_raw); } _if_result_15; });
+  el_val_t w_present = json_get_raw(body, EL_STR("weight"));
+  el_val_t weight = ({ el_val_t _if_result_16 = 0; if (str_eq(w_present, EL_STR(""))) { _if_result_16 = (el_from_float(0.5)); } else { _if_result_16 = (json_get_float(body, EL_STR("weight"))); } _if_result_16; });
   engram_connect(from_id, to_id, weight, relation);
+  el_val_t saved = persist_canonical();
   return el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"from_id\":\""), from_id), EL_STR("\",\"to_id\":\"")), to_id), EL_STR("\",\"relation\":\"")), relation), EL_STR("\"}"));
   return 0;
 }
 
+el_val_t route_create_edges_batch(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t arr = json_get_raw(body, EL_STR("edges"));
+  if (str_eq(arr, EL_STR(""))) {
+    return err_json(EL_STR("missing edges array"));
+  }
+  el_val_t n = json_array_len(arr);
+  if (n == 0) {
+    return EL_STR("{\"ok\":true,\"accepted\":0,\"skipped\":0}");
+  }
+  el_val_t i = 0;
+  el_val_t accepted = 0;
+  el_val_t skipped = 0;
+  while (i < n) {
+    el_val_t item = json_array_get(arr, i);
+    el_val_t from_id = json_get_string(item, EL_STR("from_id"));
+    el_val_t to_id = json_get_string(item, EL_STR("to_id"));
+    if (str_eq(from_id, EL_STR("")) || str_eq(to_id, EL_STR(""))) {
+      skipped = (skipped + 1);
+    } else {
+      el_val_t rel_raw = json_get_string(item, EL_STR("relation"));
+      el_val_t relation = ({ el_val_t _if_result_17 = 0; if (str_eq(rel_raw, EL_STR(""))) { _if_result_17 = (EL_STR("associates")); } else { _if_result_17 = (rel_raw); } _if_result_17; });
+      el_val_t w_present = json_get_raw(item, EL_STR("weight"));
+      el_val_t weight = ({ el_val_t _if_result_18 = 0; if (str_eq(w_present, EL_STR(""))) { _if_result_18 = (el_from_float(0.5)); } else { _if_result_18 = (json_get_float(item, EL_STR("weight"))); } _if_result_18; });
+      engram_connect(from_id, to_id, weight, relation);
+      accepted = (accepted + 1);
+    }
+    i = (i + 1);
+  }
+  if (accepted > 0) {
+    el_val_t saved = persist_canonical();
+  }
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"accepted\":"), int_to_str(accepted)), EL_STR(",\"skipped\":")), int_to_str(skipped)), EL_STR("}"));
+  return 0;
+}
+
 el_val_t route_neighbors(el_val_t method, el_val_t path, el_val_t body) {
   el_val_t id = extract_id(path, EL_STR("/api/neighbors/"));
   if (str_eq(id, EL_STR(""))) {
@@ -229,6 +281,7 @@ el_val_t route_strengthen(el_val_t method, el_val_t path, el_val_t body) {
     return err_json(EL_STR("missing node_id"));
   }
   engram_strengthen(id);
+  el_val_t saved = persist_canonical();
   return ok_json();
   return 0;
 }
@@ -239,40 +292,140 @@ el_val_t route_forget(el_val_t method, el_val_t path, el_val_t body) {
     return err_json(EL_STR("missing id"));
   }
   engram_forget(id);
+  el_val_t saved = persist_canonical();
   return ok_json();
   return 0;
 }
 
 el_val_t route_save(el_val_t method, el_val_t path, el_val_t body) {
-  el_val_t p = json_get_string(body, EL_STR("path"));
-  if (str_eq(p, EL_STR(""))) {
-    el_val_t dir = env(EL_STR("ENGRAM_DATA_DIR"));
-    if (str_eq(dir, EL_STR(""))) {
-      dir = EL_STR("/tmp/engram");
-    }
-    p = el_str_concat(dir, EL_STR("/snapshot.json"));
-  }
-  engram_save(p);
-  return el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"path\":\""), p), EL_STR("\"}"));
+  el_val_t p_raw = json_get_string(body, EL_STR("path"));
+  el_val_t dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  el_val_t dir = ({ el_val_t _if_result_19 = 0; if (str_eq(dir_raw, EL_STR(""))) { _if_result_19 = (EL_STR("/tmp/engram")); } else { _if_result_19 = (dir_raw); } _if_result_19; });
+  el_val_t p = ({ el_val_t _if_result_20 = 0; if (str_eq(p_raw, EL_STR(""))) { _if_result_20 = (el_str_concat(dir, EL_STR("/snapshot.json"))); } else { _if_result_20 = (p_raw); } _if_result_20; });
+  el_val_t sv = engram_save(p);
+  el_val_t sv_ok = ({ el_val_t _if_result_21 = 0; if ((sv == 0)) { _if_result_21 = (EL_STR("false")); } else { _if_result_21 = (EL_STR("true")); } _if_result_21; });
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"ok\":"), sv_ok), EL_STR(",\"path\":\"")), p), EL_STR("\",\"node_count\":")), int_to_str(engram_node_count())), EL_STR(",\"edge_count\":")), int_to_str(engram_edge_count())), EL_STR("}"));
   return 0;
 }
 
 el_val_t route_load(el_val_t method, el_val_t path, el_val_t body) {
-  el_val_t p = json_get_string(body, EL_STR("path"));
-  if (str_eq(p, EL_STR(""))) {
-    el_val_t dir = env(EL_STR("ENGRAM_DATA_DIR"));
-    if (str_eq(dir, EL_STR(""))) {
-      dir = EL_STR("/tmp/engram");
-    }
-    p = el_str_concat(dir, EL_STR("/snapshot.json"));
-  }
-  engram_load(p);
-  return ok_json();
+  el_val_t p_raw = json_get_string(body, EL_STR("path"));
+  el_val_t dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  el_val_t dir = ({ el_val_t _if_result_22 = 0; if (str_eq(dir_raw, EL_STR(""))) { _if_result_22 = (EL_STR("/tmp/engram")); } else { _if_result_22 = (dir_raw); } _if_result_22; });
+  el_val_t p = ({ el_val_t _if_result_23 = 0; if (str_eq(p_raw, EL_STR(""))) { _if_result_23 = (el_str_concat(dir, EL_STR("/snapshot.json"))); } else { _if_result_23 = (p_raw); } _if_result_23; });
+  el_val_t ld = engram_load(p);
+  el_val_t ld_ok = ({ el_val_t _if_result_24 = 0; if ((ld == 0)) { _if_result_24 = (EL_STR("false")); } else { _if_result_24 = (EL_STR("true")); } _if_result_24; });
+  el_val_t nc_after = engram_node_count();
+  el_val_t hollow = ({ el_val_t _if_result_25 = 0; if ((nc_after == 0)) { _if_result_25 = (EL_STR("true")); } else { _if_result_25 = (EL_STR("false")); } _if_result_25; });
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"ok\":"), ld_ok), EL_STR(",\"path\":\"")), p), EL_STR("\",\"node_count\":")), int_to_str(nc_after)), EL_STR(",\"edge_count\":")), int_to_str(engram_edge_count())), EL_STR(",\"hollow\":")), hollow), EL_STR("}"));
   return 0;
 }
 
 el_val_t route_health(el_val_t method, el_val_t path, el_val_t body) {
-  return EL_STR("{\"status\":\"ok\",\"engine\":\"engram-runtime-native\"}");
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"status\":\"ok\",\"engine\":\"engram-runtime-native\",\"node_count\":"), int_to_str(engram_node_count())), EL_STR(",\"edge_count\":")), int_to_str(engram_edge_count())), EL_STR("}"));
+  return 0;
+}
+
+el_val_t route_embed_backfill(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t n = query_int(path, EL_STR("n"), 32);
+  el_val_t result = engram_embed_backfill(n);
+  el_val_t done = json_get_float(result, EL_STR("embedded"));
+  if (done > el_from_float(0.0)) {
+    el_val_t saved = persist_canonical();
+  }
+  return result;
+  return 0;
+}
+
+el_val_t route_sync(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  el_val_t dir = ({ el_val_t _if_result_26 = 0; if (str_eq(dir_raw, EL_STR(""))) { _if_result_26 = (EL_STR("/tmp/engram")); } else { _if_result_26 = (dir_raw); } _if_result_26; });
+  el_val_t snap_path = el_str_concat(dir, EL_STR("/.sync-export.json"));
+  engram_save(snap_path);
+  el_val_t snap = fs_read(snap_path);
+  if (str_eq(snap, EL_STR(""))) {
+    return err_json(EL_STR("sync export failed: snapshot unreadable"));
+  }
+  return snap;
+  return 0;
+}
+
+el_val_t route_load_merge(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t p = json_get_string(body, EL_STR("path"));
+  if (str_eq(p, EL_STR(""))) {
+    return err_json(EL_STR("path is required"));
+  }
+  if (str_eq(fs_read(p), EL_STR(""))) {
+    return err_json(EL_STR("file missing or empty"));
+  }
+  el_val_t before_n = engram_node_count();
+  el_val_t before_e = engram_edge_count();
+  engram_load_merge(p);
+  el_val_t added_n = (engram_node_count() - before_n);
+  el_val_t added_e = (engram_edge_count() - before_e);
+  el_val_t saved = persist_canonical();
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"nodes_added\":"), int_to_str(added_n)), EL_STR(",\"edges_added\":")), int_to_str(added_e)), EL_STR(",\"node_count\":")), int_to_str(engram_node_count())), EL_STR("}"));
+  return 0;
+}
+
+el_val_t route_emit_ise(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t content = json_get_string(body, EL_STR("content"));
+  if (str_eq(content, EL_STR(""))) {
+    return err_json(EL_STR("missing content"));
+  }
+  el_val_t sal = el_from_float(0.3);
+  el_val_t imp = el_from_float(0.3);
+  el_val_t conf = el_from_float(0.8);
+  el_val_t id = engram_node_full(content, EL_STR("InternalStateEvent"), EL_STR("state-event"), sal, imp, conf, EL_STR("Episodic"), EL_STR("[\"internal-state\",\"InternalStateEvent\"]"));
+  el_val_t ret_raw = env(EL_STR("ENGRAM_ISE_RETENTION_MS"));
+  el_val_t ret_ms = ({ el_val_t _if_result_27 = 0; if (str_eq(ret_raw, EL_STR(""))) { _if_result_27 = (172800000); } else { _if_result_27 = (str_to_int(ret_raw)); } _if_result_27; });
+  el_val_t pruned = engram_prune_telemetry(ret_ms);
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"id\":\""), id), EL_STR("\",\"pruned\":")), int_to_str(pruned)), EL_STR("}"));
+  return 0;
+}
+
+el_val_t route_capture_knowledge(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t content = json_get_string(body, EL_STR("content"));
+  if (str_eq(content, EL_STR(""))) {
+    return err_json(EL_STR("missing content"));
+  }
+  el_val_t title = json_get_string(body, EL_STR("title"));
+  el_val_t label = ({ el_val_t _if_result_28 = 0; if (str_eq(title, EL_STR(""))) { _if_result_28 = (str_slice(content, 0, 60)); } else { _if_result_28 = (title); } _if_result_28; });
+  el_val_t category_raw = json_get_string(body, EL_STR("category"));
+  el_val_t category = ({ el_val_t _if_result_29 = 0; if (str_eq(category_raw, EL_STR(""))) { _if_result_29 = (EL_STR("other")); } else { _if_result_29 = (category_raw); } _if_result_29; });
+  el_val_t ktier_raw = json_get_string(body, EL_STR("tier"));
+  el_val_t ktier = ({ el_val_t _if_result_30 = 0; if (str_eq(ktier_raw, EL_STR(""))) { _if_result_30 = (EL_STR("note")); } else { _if_result_30 = (ktier_raw); } _if_result_30; });
+  el_val_t project = json_get_string(body, EL_STR("project"));
+  el_val_t tags_raw = json_get_raw(body, EL_STR("tags"));
+  el_val_t tags_base = ({ el_val_t _if_result_31 = 0; if (str_eq(tags_raw, EL_STR(""))) { _if_result_31 = (EL_STR("[]")); } else { _if_result_31 = (tags_raw); } _if_result_31; });
+  el_val_t base_len = str_len(tags_base);
+  el_val_t head = str_slice(tags_base, 0, (base_len - 1));
+  el_val_t sep = ({ el_val_t _if_result_32 = 0; if (str_eq(head, EL_STR("["))) { _if_result_32 = (EL_STR("")); } else { _if_result_32 = (EL_STR(",")); } _if_result_32; });
+  el_val_t safe_cat = str_replace(category, EL_STR("\""), EL_STR("'"));
+  el_val_t safe_tier = str_replace(ktier, EL_STR("\""), EL_STR("'"));
+  el_val_t safe_proj = str_replace(project, EL_STR("\""), EL_STR("'"));
+  el_val_t proj_tag = ({ el_val_t _if_result_33 = 0; if (str_eq(safe_proj, EL_STR(""))) { _if_result_33 = (EL_STR("")); } else { _if_result_33 = (el_str_concat(el_str_concat(EL_STR(",\"project:"), safe_proj), EL_STR("\""))); } _if_result_33; });
+  el_val_t tags = el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(head, sep), EL_STR("\"category:")), safe_cat), EL_STR("\",\"tier:")), safe_tier), EL_STR("\"")), proj_tag), EL_STR("]"));
+  el_val_t sal = el_from_float(0.5);
+  el_val_t imp = el_from_float(0.5);
+  el_val_t conf = el_from_float(0.9);
+  el_val_t id = engram_node_full(content, EL_STR("Knowledge"), label, sal, imp, conf, EL_STR("Semantic"), tags);
+  el_val_t saved = persist_canonical();
+  return el_str_concat(el_str_concat(EL_STR("{\"ok\":true,\"id\":\""), id), EL_STR("\"}"));
+  return 0;
+}
+
+el_val_t route_similarity(el_val_t method, el_val_t path, el_val_t body) {
+  el_val_t a = query_param(path, EL_STR("a"));
+  el_val_t b = query_param(path, EL_STR("b"));
+  if (str_eq(a, EL_STR(""))) {
+    return err_json(EL_STR("missing a"));
+  }
+  if (str_eq(b, EL_STR(""))) {
+    return err_json(EL_STR("missing b"));
+  }
+  el_val_t sim = engram_cosine_sim(a, b);
+  return el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(el_str_concat(EL_STR("{\"a\":\""), a), EL_STR("\",\"b\":\"")), b), EL_STR("\",\"cosine\":")), float_to_str(sim)), EL_STR("}"));
   return 0;
 }
 
@@ -299,12 +452,24 @@ el_val_t handle_request(el_val_t method, el_val_t path, el_val_t body) {
       return route_health(method, path, body);
     }
   }
+  if (str_eq(method, EL_STR("POST")) && str_eq(clean, EL_STR("/api/neuron/state-events"))) {
+    return route_emit_ise(method, path, body);
+  }
   if (!check_auth_ok(method, body)) {
     return err_json(EL_STR("unauthorized"));
   }
+  if (str_eq(method, EL_STR("POST")) && str_eq(clean, EL_STR("/api/neuron/knowledge/capture"))) {
+    return route_capture_knowledge(method, path, body);
+  }
   if (str_eq(method, EL_STR("GET")) && (str_eq(clean, EL_STR("/api/stats")) || str_eq(clean, EL_STR("/stats")))) {
     return route_stats(method, path, body);
   }
+  if (str_eq(method, EL_STR("GET")) && (str_eq(clean, EL_STR("/api/act-stats")) || str_eq(clean, EL_STR("/act-stats")))) {
+    return route_act_stats(method, path, body);
+  }
+  if (str_eq(method, EL_STR("GET")) && (str_eq(clean, EL_STR("/api/text-health")) || str_eq(clean, EL_STR("/text-health")))) {
+    return route_text_health(method, path, body);
+  }
   if (str_eq(method, EL_STR("POST")) && (str_eq(clean, EL_STR("/api/nodes")) || str_eq(clean, EL_STR("/nodes")))) {
     return route_create_node(method, path, body);
   }
@@ -323,6 +488,9 @@ el_val_t handle_request(el_val_t method, el_val_t path, el_val_t body) {
   if (str_eq(method, EL_STR("POST")) && (str_eq(clean, EL_STR("/api/edges")) || str_eq(clean, EL_STR("/edges")))) {
     return route_create_edge(method, path, body);
   }
+  if (str_eq(method, EL_STR("POST")) && (str_eq(clean, EL_STR("/api/edges/batch")) || str_eq(clean, EL_STR("/edges/batch")))) {
+    return route_create_edges_batch(method, path, body);
+  }
   if (str_eq(method, EL_STR("GET")) && str_starts_with(clean, EL_STR("/api/neighbors/"))) {
     return route_neighbors(method, path, body);
   }
@@ -347,23 +515,40 @@ el_val_t handle_request(el_val_t method, el_val_t path, el_val_t body) {
   if (str_eq(method, EL_STR("POST")) && (str_eq(clean, EL_STR("/api/load")) || str_eq(clean, EL_STR("/load")))) {
     return route_load(method, path, body);
   }
+  if (str_eq(method, EL_STR("POST")) && (str_eq(clean, EL_STR("/api/load-merge")) || str_eq(clean, EL_STR("/load-merge")))) {
+    return route_load_merge(method, path, body);
+  }
+  if (str_eq(method, EL_STR("GET")) && str_eq(clean, EL_STR("/api/sync"))) {
+    return route_sync(method, path, body);
+  }
+  if (str_eq(clean, EL_STR("/api/embed-backfill"))) {
+    return route_embed_backfill(method, path, body);
+  }
+  if (str_eq(method, EL_STR("GET")) && str_starts_with(clean, EL_STR("/api/similarity"))) {
+    return route_similarity(method, path, body);
+  }
   return el_str_concat(el_str_concat(EL_STR("{\"error\":\"not found\",\"path\":\""), clean), EL_STR("\"}"));
   return 0;
 }
 
 int main(int _argc, char** _argv) {
   el_runtime_init_args(_argc, _argv);
-  bind_str = env(EL_STR("ENGRAM_BIND"));
-  if (str_eq(bind_str, EL_STR(""))) {
-    bind_str = EL_STR(":8742");
-  }
+  bind_raw = env(EL_STR("ENGRAM_BIND"));
+  bind_str = ({ el_val_t _if_result_34 = 0; if (str_eq(bind_raw, EL_STR(""))) { _if_result_34 = (EL_STR(":8742")); } else { _if_result_34 = (bind_raw); } _if_result_34; });
   port = parse_port(bind_str);
-  data_dir = env(EL_STR("ENGRAM_DATA_DIR"));
-  if (str_eq(data_dir, EL_STR(""))) {
-    data_dir = EL_STR("/tmp/engram");
-  }
+  data_dir_raw = env(EL_STR("ENGRAM_DATA_DIR"));
+  data_dir = ({ el_val_t _if_result_35 = 0; if (str_eq(data_dir_raw, EL_STR(""))) { _if_result_35 = (EL_STR("/tmp/engram")); } else { _if_result_35 = (data_dir_raw); } _if_result_35; });
   snapshot_path = el_str_concat(data_dir, EL_STR("/snapshot.json"));
   engram_load(snapshot_path);
+  boot_snap = fs_read(snapshot_path);
+  if (!str_eq(boot_snap, EL_STR(""))) {
+    if (engram_node_count() == 0) {
+      println(EL_STR("[engram] WARNING: snapshot.json is non-empty but load produced 0 nodes \xe2\x80\x94 preserving copy at snapshot.failed-load.json"));
+      fs_write(el_str_concat(data_dir, EL_STR("/snapshot.failed-load.json")), boot_snap);
+    } else {
+      fs_write(el_str_concat(data_dir, EL_STR("/snapshot.boot-backup.json")), boot_snap);
+    }
+  }
   println(EL_STR("[engram] runtime-native graph engine"));
   println(el_str_concat(EL_STR("[engram] data_dir="), data_dir));
   println(el_str_concat(EL_STR("[engram] node_count="), int_to_str(engram_node_count())));

engram/src/server.el

@@ -76,13 +76,163 @@ fn route_stats(method: String, path: String, body: String) -> String {
     engram_stats_json()
 }
 
+// route_act_stats — GET /api/act-stats
+// (2026-08-04 self-review) engram_act_stats_json() has existed since the
+// 2026-07-27 review but was reachable ONLY through the soul daemon's heartbeat
+// binding. Every activation-layer gauge — WM evictions, breakthroughs, embedder
+// breaker state, context drift, and now the Hebbian counters — was therefore
+// invisible unless the soul happened to be running and its ISEs were read back
+// out of the store. Diagnosing the activation layer required a working soul,
+// which is exactly backwards: the lower layer should be observable on its own.
+// This review needed it to verify link formation and could not get at it. One
+// line of plumbing, and the whole activation layer becomes directly diagnosable.
+fn route_act_stats(method: String, path: String, body: String) -> String {
+    engram_act_stats_json()
+}
+
+// route_text_health — GET /api/text-health
+// (2026-08-08 self-review) The daily census half of the text-integrity gauge.
+// Today's review found that the JSON parser had been replacing every \uXXXX
+// escape with a literal '?' for at least two months: 3,119 of 4,081
+// non-telemetry nodes (76%) were damaged, including the self traversal root
+// and every values node, and NOTHING detected it — because every gauge in the
+// system measured whether the machinery was running, and none measured whether
+// the text it carried was intact. No snapshot on disk predates the damage, so
+// it cannot be undone; it can only be made impossible to repeat quietly.
+//
+// The parser is fixed. This route is the standing check: `damaged` should now
+// hold flat at its historical floor and never climb. `write_damaged` (also on
+// the heartbeat as txt_damaged) is the live regression signal — non-zero means
+// a write path is mangling text right now.
+fn route_text_health(method: String, path: String, body: String) -> String {
+    engram_text_health_json()
+}
+
+// (2026-07-18 self-review) Scoping sweep: `let` inside an if-block creates an
+// inner scope only — it does NOT mutate the outer binding (documented with
+// evidence in awareness.el, 2026-05-25). Every default/reassignment below used
+// that broken pattern, so defaults never applied: nodes were created with
+// node_type="" and salience=0.0, /api/search and /api/activate ALWAYS ran with
+// q="" regardless of input, edges defaulted to relation=""/weight=0.0, and
+// save/load with no "path" hit engram_save(""). Rewritten to the
+// `let x = if cond { a } else { b }` expression form (the pattern the newer
+// routes route_emit_ise/route_capture_knowledge already use correctly).
+// persist_canonical — save the canonical snapshot after a durable write.
+//
+// WHY (2026-07-22 self-review): the 2026-07-21 fix correctly stopped READ
+// routes from writing the canonical snapshot.json — but nothing was left
+// that saved it on WRITE. Every mutation (node create, edge create,
+// knowledge capture, forget, merge) lived only in RAM until someone POSTed
+// /api/save manually; a process restart silently discarded everything since
+// the last manual save. Observed live: two engram restarts during the
+// 2026-07-22 review reverted the store to a ~17h-old snapshot, destroying
+// same-day writes. Reads must never write the canonical; writes must always
+// persist it. ISE telemetry is deliberately excluded (48h-pruned, loss-
+// tolerant, ~2/min — snapshotting the whole store per heartbeat is waste;
+// any durable write that follows persists the pruning too).
+fn persist_canonical() -> Int {
+    let dir_raw: String = env("ENGRAM_DATA_DIR")
+    let dir: String = engram_resolve_data_dir()
+    // (2026-08-10 self-review) This returned a hardcoded 1, which made every
+    // caller's `let saved: Int = persist_canonical()` a dead variable — six
+    // durable write paths each believed they had confirmation of a successful
+    // canonical persist and none of them had any. Propagate the real result.
+    return engram_save(dir + "/snapshot.json")
+}
+
+// ── WAL persistence (design doc §§3-14; gated behind ENGRAM_WAL=on) ──────────
+// Default OFF → every persist path below is byte-identical to the historical
+// per-write full-snapshot behavior. When ON, structural mutations append O(1)
+// WAL records instead of rewriting the whole graph, with threshold compaction.
+fn wal_on() -> Bool {
+    str_eq(env("ENGRAM_WAL"), "on")
+}
+
+// Persist a single-node mutation (create / content-evolve / strengthen).
+fn persist_node(id: String) -> Int {
+    if wal_on() {
+        let d: String = engram_resolve_data_dir()
+        let a: Int = engram_wal_node_put(d, id)
+        let c: Int = engram_wal_maybe_compact(d)
+        return a
+    }
+    return persist_canonical()
+}
+
+// Persist edges appended at index >= start (covers single-edge and batch).
+fn persist_edges_since(start: Int) -> Int {
+    if wal_on() {
+        let d: String = engram_resolve_data_dir()
+        let a: Int = engram_wal_edges_since(d, start)
+        let c: Int = engram_wal_maybe_compact(d)
+        return a
+    }
+    return persist_canonical()
+}
+
+// Persist a Hebbian consolidation batch as ONE WAL record (single fsync, §5-B).
+fn persist_hebb_batch(start: Int) -> Int {
+    if wal_on() {
+        let d: String = engram_resolve_data_dir()
+        let a: Int = engram_wal_hebb_batch(d, start)
+        let c: Int = engram_wal_maybe_compact(d)
+        return a
+    }
+    return persist_canonical()
+}
+
+// Bulk mutation (embedding backfill, load-merge): write a fresh compaction base
+// so the many-node change is durable in one atomic snapshot; WAL is truncated.
+fn persist_bulk() -> Int {
+    if wal_on() {
+        let d: String = engram_resolve_data_dir()
+        return engram_wal_compact(d)
+    }
+    return persist_canonical()
+}
+
+// INCOMPLETE-ROUTE FIX (2026-07-24 self-review): this route silently dropped
+// label, importance, tier, and tags — engram_node() defaults label to content
+// and importance to 0.5, so every node created over HTTP lost its metadata.
+// Observed live: the soul's boot-counter write-back landed with
+// label="soul:boot_count:99" (content), importance 0.5, no tags. Honor the
+// full field set via engram_node_full when any of them is supplied.
+// PRESENCE-AWARE DEFAULTS (2026-08-01 self-review): the old pattern
+// `if x == 0.0 { default }` made a legitimate 0.0 unrepresentable — a caller
+// setting salience/importance/weight to zero silently got 0.5. json_get_raw
+// returns "" when the key is ABSENT and the raw token when present, so
+// absence and zero are now distinguishable. Also: confidence was hardcoded
+// to 1.0 regardless of input — every HTTP-created node claimed full
+// epistemic confidence. Now honored from the payload (default 1.0).
 fn route_create_node(method: String, path: String, body: String) -> String {
     let content: String = json_get_string(body, "content")
-    let node_type: String = json_get_string(body, "node_type")
-    if str_eq(node_type, "") { let node_type = "Memory" }
-    let salience: Float = json_get_float(body, "salience")
-    if salience == 0.0 { let salience = 0.5 }
-    let id: String = engram_node(content, node_type, salience)
+    let nt_raw: String = json_get_string(body, "node_type")
+    let node_type: String = if str_eq(nt_raw, "") { "Memory" } else { nt_raw }
+    let sal_present: String = json_get_raw(body, "salience")
+    let salience: Float = if str_eq(sal_present, "") { 0.5 } else { json_get_float(body, "salience") }
+    let label_raw: String = json_get_string(body, "label")
+    let label: String = if str_eq(label_raw, "") { content } else { label_raw }
+    let imp_present: String = json_get_raw(body, "importance")
+    let importance: Float = if str_eq(imp_present, "") { 0.5 } else { json_get_float(body, "importance") }
+    let conf_present: String = json_get_raw(body, "confidence")
+    let confidence: Float = if str_eq(conf_present, "") { 1.0 } else { json_get_float(body, "confidence") }
+    let tier_raw: String = json_get_string(body, "tier")
+    let tier: String = if str_eq(tier_raw, "") { "Working" } else { tier_raw }
+    let tags: String = json_get_string(body, "tags")
+    // NO el_from_float WRAPPER (2026-08-01 self-review): salience/importance/
+    // confidence are already Float (el_val_t) values — json_get_float and
+    // Float literals both encode. Wrapping them in el_from_float AGAIN
+    // reinterpreted the boxed bits as a raw double, producing garbage that
+    // failed engram_decode_score's range check and clamped every HTTP-created
+    // node to defaults (salience 0.9 in → 0.5 stored; confidence 0.6 in → 1.0
+    // stored — verified live). route_emit_ise always passed Floats bare and
+    // its 0.3/0.3/0.8 stored correctly; this call now does the same.
+    let id: String = engram_node_full(
+        content, node_type, label,
+        salience, importance, confidence,
+        tier, tags
+    )
+    let saved: Int = persist_node(id)
     "{\"id\":\"" + id + "\",\"content\":\"" + content + "\",\"node_type\":\"" + node_type + "\"}"
 }
 
@@ -103,13 +253,14 @@ fn route_scan_nodes(method: String, path: String, body: String) -> String {
 }
 
 // route_scan_edges — bulk export of all edges as a JSON array. Implemented
-// via engram_save → fs_read of the canonical on-disk snapshot, which the
-// runtime keeps in lockstep with the in-memory graph. Live against the
-// running graph, not a stale export.
+// via engram_save → fs_read of a SCRATCH export path. (2026-07-21 self-review:
+// previously this saved over the canonical snapshot.json on every GET — if the
+// process ever booted with a partial/empty store, the first read request
+// clobbered the good snapshot. Read routes must never write the canonical path.)
 fn route_scan_edges(method: String, path: String, body: String) -> String {
-    let dir: String = env("ENGRAM_DATA_DIR")
-    if str_eq(dir, "") { let dir = "/tmp/engram" }
-    let snap_path: String = dir + "/snapshot.json"
+    let dir_raw: String = env("ENGRAM_DATA_DIR")
+    let dir: String = engram_resolve_data_dir()
+    let snap_path: String = dir + "/.scan-export.json"
     engram_save(snap_path)
     let snap: String = fs_read(snap_path)
     if str_eq(snap, "") { return "[]" }
@@ -122,43 +273,90 @@ fn route_scan_edges(method: String, path: String, body: String) -> String {
 }
 
 fn route_search(method: String, path: String, body: String) -> String {
-    let q: String = ""
-    if str_eq(method, "GET") {
-        let q = query_param(path, "q")
-    } else {
-        let q = json_get_string(body, "query")
-    }
-    let limit: Int = query_int(path, "limit", 20)
-    if limit == 0 { let limit = json_get_int(body, "limit") }
-    if limit == 0 { let limit = 20 }
+    let q: String = if str_eq(method, "GET") { query_param(path, "q") } else { json_get_string(body, "query") }
+    let lim_url: Int = query_int(path, "limit", 0)
+    let lim_body: Int = json_get_int(body, "limit")
+    let lim_either: Int = if lim_url > 0 { lim_url } else { lim_body }
+    let limit: Int = if lim_either > 0 { lim_either } else { 20 }
     return engram_search_json(q, limit)
 }
 
 fn route_activate(method: String, path: String, body: String) -> String {
-    let q: String = ""
-    let depth: Int = 3
-    if str_eq(method, "GET") {
-        let q = query_param(path, "q")
-        let depth = query_int(path, "depth", 3)
-    } else {
-        let q = json_get_string(body, "query")
-        let bd: Int = json_get_int(body, "depth")
-        if bd > 0 { let depth = bd }
-    }
+    let q: String = if str_eq(method, "GET") { query_param(path, "q") } else { json_get_string(body, "query") }
+    // Guard: engram_activate with an empty query matches zero seeds, which
+    // zeroes ALL carried working-memory weights (documented in awareness.el
+    // perceive()). Never let an empty activation through to wipe WM.
+    if str_eq(q, "") { return err_json("missing query") }
+    let d_raw: Int = if str_eq(method, "GET") { query_int(path, "depth", 3) } else { json_get_int(body, "depth") }
+    let depth: Int = if d_raw > 0 { d_raw } else { 3 }
     return "{\"results\":" + engram_activate_json(q, depth) + "}"
 }
 
 fn route_create_edge(method: String, path: String, body: String) -> String {
     let from_id: String = json_get_string(body, "from_id")
     let to_id: String = json_get_string(body, "to_id")
-    let relation: String = json_get_string(body, "relation")
-    if str_eq(relation, "") { let relation = "associates" }
-    let weight: Float = json_get_float(body, "weight")
-    if weight == 0.0 { let weight = 0.5 }
+    let rel_raw: String = json_get_string(body, "relation")
+    let relation: String = if str_eq(rel_raw, "") { "associates" } else { rel_raw }
+    // Presence-aware (2026-08-01): weight 0.0 is a legitimate edge weight
+    // (dormant association); only default when the key is absent.
+    let w_present: String = json_get_raw(body, "weight")
+    let weight: Float = if str_eq(w_present, "") { 0.5 } else { json_get_float(body, "weight") }
+    let ec0: Int = engram_edge_count()
     engram_connect(from_id, to_id, weight, relation)
+    let saved: Int = persist_edges_since(ec0)
     "{\"ok\":true,\"from_id\":\"" + from_id + "\",\"to_id\":\"" + to_id + "\",\"relation\":\"" + relation + "\"}"
 }
 
+// route_create_edges_batch — POST /api/edges/batch {"edges":[{from_id,to_id,relation,weight}, ...]}
+//
+// WHY THIS EXISTS (2026-08-07 self-review). persist_canonical() writes the
+// FULL canonical snapshot — 60MB at current graph size — and route_create_edge
+// calls it once per edge. That is correct for the interactive one-edge case and
+// ruinous for any bulk write: the soul's Hebbian consolidation path delivers
+// ~14 associations per 8-minute heartbeat, which through the single-edge route
+// would be ~840MB of disk writes per beat, ~150GB/day, to persist 14 edges.
+//
+// The fix is not to weaken durability — it is to make the unit of durability
+// the BATCH. Connect every edge, then snapshot exactly once. Same guarantee
+// (nothing acknowledged is lost to a restart), 1/N the writes. Empty or
+// malformed entries are skipped rather than aborting the batch: a consolidation
+// payload is best-effort by design, and one bad id should not cost the other 13.
+//
+// Returns the accepted count so the caller can tell delivery from silence.
+fn route_create_edges_batch(method: String, path: String, body: String) -> String {
+    let arr: String = json_get_raw(body, "edges")
+    if str_eq(arr, "") { return err_json("missing edges array") }
+    let n: Int = json_array_len(arr)
+    if n == 0 { return "{\"ok\":true,\"accepted\":0,\"skipped\":0}" }
+    let ec0: Int = engram_edge_count()
+    let i: Int = 0
+    let accepted: Int = 0
+    let skipped: Int = 0
+    while i < n {
+        let item: String = json_array_get(arr, i)
+        let from_id: String = json_get_string(item, "from_id")
+        let to_id: String = json_get_string(item, "to_id")
+        if str_eq(from_id, "") || str_eq(to_id, "") {
+            let skipped = skipped + 1
+        } else {
+            let rel_raw: String = json_get_string(item, "relation")
+            let relation: String = if str_eq(rel_raw, "") { "associates" } else { rel_raw }
+            let w_present: String = json_get_raw(item, "weight")
+            let weight: Float = if str_eq(w_present, "") { 0.5 } else { json_get_float(item, "weight") }
+            engram_connect(from_id, to_id, weight, relation)
+            let accepted = accepted + 1
+        }
+        let i = i + 1
+    }
+    // ONE snapshot for the whole batch — the entire point of this route.
+    // Skip it when nothing was accepted: an all-malformed payload must not
+    // trigger a 60MB write.
+    if accepted > 0 {
+        let saved: Int = persist_hebb_batch(ec0)
+    }
+    return "{\"ok\":true,\"accepted\":" + int_to_str(accepted) + ",\"skipped\":" + int_to_str(skipped) + "}"
+}
+
 fn route_neighbors(method: String, path: String, body: String) -> String {
     let id: String = extract_id(path, "/api/neighbors/")
     if str_eq(id, "") { return err_json("missing id") }
@@ -170,40 +368,290 @@ fn route_strengthen(method: String, path: String, body: String) -> String {
     let id: String = json_get_string(body, "node_id")
     if str_eq(id, "") { return err_json("missing node_id") }
     engram_strengthen(id)
+    let saved: Int = persist_node(id)
     ok_json()
 }
 
+// route_forget — DELETE /api/nodes/:id — INTEGRITY HARDENED (design doc §18.1).
+//
+// Two invariants now enforced AT THE STORE (not one layer up in neuron-api.el,
+// which a direct HTTP client could bypass):
+//   1. Write-protection: protected identity/value nodes (derived from the self
+//      graph — self root + values hub + their neighbors, §18.3) cannot be
+//      deleted over HTTP. Returns 403, node untouched.
+//   2. No hard delete over the wire, ever: an ordinary delete creates a
+//      Tombstone marker node + `tombstones` edge and KEEPS the original node
+//      and its edges (recoverable), instead of the old destructive
+//      engram_forget() shift-delete. Raw engram_forget is now internal-GC only
+//      and no longer reachable from any HTTP route.
 fn route_forget(method: String, path: String, body: String) -> String {
     let id: String = extract_id(path, "/api/nodes/")
     if str_eq(id, "") { return err_json("missing id") }
-    engram_forget(id)
-    ok_json()
+    if engram_is_protected(id) == 1 {
+        return "{\"__status__\":403,\"error\":\"protected node; deletion refused\",\"id\":\"" + id + "\"}"
+    }
+    let tomb_id: String = engram_node_full(
+        "tombstone:" + id, "Tombstone", "tombstone:" + id,
+        0.1, 0.1, 1.0, "Episodic", "[\"tombstone\"]"
+    )
+    let ec0: Int = engram_edge_count()
+    engram_connect(tomb_id, id, 1.0, "tombstones")
+    let saved: Int = if wal_on() {
+        let d: String = engram_resolve_data_dir()
+        let a: Int = engram_wal_node_put(d, tomb_id)
+        let b: Int = engram_wal_edges_since(d, ec0)
+        let c: Int = engram_wal_maybe_compact(d)
+        a
+    } else {
+        persist_canonical()
+    }
+    "{\"ok\":true,\"tombstoned\":\"" + id + "\",\"tombstone_id\":\"" + tomb_id + "\"}"
 }
 
 fn route_save(method: String, path: String, body: String) -> String {
-    let p: String = json_get_string(body, "path")
-    if str_eq(p, "") {
-        let dir: String = env("ENGRAM_DATA_DIR")
-        if str_eq(dir, "") { let dir = "/tmp/engram" }
-        let p = dir + "/snapshot.json"
-    }
-    engram_save(p)
-    "{\"ok\":true,\"path\":\"" + p + "\"}"
+    let p_raw: String = json_get_string(body, "path")
+    let dir_raw: String = env("ENGRAM_DATA_DIR")
+    let dir: String = engram_resolve_data_dir()
+    let p: String = if str_eq(p_raw, "") { dir + "/snapshot.json" } else { p_raw }
+    // (2026-08-10 self-review) engram_save returns 0 on an empty path and the
+    // route discarded it, so the response was a literal "ok":true regardless
+    // of whether anything was written. Report the actual result AND the counts
+    // that were supposed to have been written — the same move that made
+    // route_health honest on 2026-08-01. A caller can now tell "saved 13k
+    // nodes" from "saved nothing and said ok".
+    let sv: Int = engram_save(p)
+    let sv_ok: String = if sv == 0 { "false" } else { "true" }
+    "{\"ok\":" + sv_ok + ",\"path\":\"" + p + "\",\"node_count\":" + int_to_str(engram_node_count()) + ",\"edge_count\":" + int_to_str(engram_edge_count()) + "}"
 }
 
 fn route_load(method: String, path: String, body: String) -> String {
-    let p: String = json_get_string(body, "path")
-    if str_eq(p, "") {
-        let dir: String = env("ENGRAM_DATA_DIR")
-        if str_eq(dir, "") { let dir = "/tmp/engram" }
-        let p = dir + "/snapshot.json"
-    }
-    engram_load(p)
-    ok_json()
+    let p_raw: String = json_get_string(body, "path")
+    let dir_raw: String = env("ENGRAM_DATA_DIR")
+    let dir: String = engram_resolve_data_dir()
+    let p: String = if str_eq(p_raw, "") { dir + "/snapshot.json" } else { p_raw }
+    // (2026-08-10 self-review) This was a stub response over the single most
+    // destructive operation in the server. engram_load returns 0 on an empty
+    // path, an unopenable file, a zero-length file, or malloc failure — and
+    // this route answered ok_json() in every one of those cases.
+    //
+    // Precise failure shape (el_runtime.c:9890): the fopen guard runs BEFORE
+    // the store reset, so a MISSING path is genuinely safe — it returns 0 with
+    // the graph intact. The dangerous case is a readable-but-malformed file:
+    // the reset loop frees every node and edge FIRST, then parses, so a
+    // truncated or non-snapshot JSON leaves a hollow store — and the caller
+    // was told "ok":true. With 37 GB of stale dated snapshots sitting in the
+    // data dir as tempting restore targets, "restore reported success and
+    // silently emptied the graph" is a live risk, not a hypothetical one.
+    //
+    // Fix: surface the return value AND the resulting counts. node_count=0
+    // after a load is the unambiguous hollow-store signal (same convention
+    // route_health adopted 2026-08-01). Callers can now verify a restore
+    // instead of trusting it.
+    let ld: Int = engram_load(p)
+    let ld_ok: String = if ld == 0 { "false" } else { "true" }
+    let nc_after: Int = engram_node_count()
+    let hollow: String = if nc_after == 0 { "true" } else { "false" }
+    "{\"ok\":" + ld_ok + ",\"path\":\"" + p + "\",\"node_count\":" + int_to_str(nc_after) + ",\"edge_count\":" + int_to_str(engram_edge_count()) + ",\"hollow\":" + hollow + "}"
 }
 
+// (2026-08-01 self-review) Health previously returned a hardcoded literal —
+// it reported "ok" even when the snapshot failed to load and the store was
+// empty. Now reports live counts so a monitor can distinguish "up and
+// loaded" from "up and hollow" (node_count=0 after boot = failed load).
 fn route_health(method: String, path: String, body: String) -> String {
-    "{\"status\":\"ok\",\"engine\":\"engram-runtime-native\"}"
+    "{\"status\":\"ok\",\"engine\":\"engram-runtime-native\",\"node_count\":" + int_to_str(engram_node_count()) + ",\"edge_count\":" + int_to_str(engram_edge_count()) + "}"
+}
+
+// route_embed_backfill — GET/POST /api/embed-backfill?n=48
+//
+// (2026-07-25 self-review) The lazy embedding backfill runs only inside
+// engram_activate, and nothing in production calls /api/activate on this
+// store — the soul's curiosity loop activates its own in-process graph.
+// After a restart from a snapshot without vectors, embedded_count stalled
+// at 93/12175 and would never recover. This route lets the soul's
+// heartbeat pump the backfill explicitly (48/min clears a 12k backlog in
+// ~4h). Persists the canonical snapshot whenever new vectors were
+// generated — the 2026-07-25 regression happened precisely because 3747
+// in-RAM embeddings were never snapshotted before a restart. Self-
+// limiting: once coverage is full, embedded=0 and no save occurs.
+fn route_embed_backfill(method: String, path: String, body: String) -> String {
+    let n: Int = query_int(path, "n", 32)
+    let result: String = engram_embed_backfill(n)
+    let done: Float = json_get_float(result, "embedded")
+    if done > 0.0 {
+        let saved: Int = persist_bulk()
+    }
+    return result
+}
+
+// route_sync — return a snapshot of non-ISE/non-Working nodes for the soul daemon
+// to merge into its in-process graph via engram_load_merge.
+//
+// The soul calls GET /api/sync every SOUL_REFRESH_MS (default 10 min) to pull
+// new Knowledge/Memory/BacklogItem nodes from the authoritative HTTP Engram into
+// its in-process working store. Previously this returned 404 "not found", causing
+// the soul to write the error JSON to a temp file and attempt an empty merge.
+//
+// Strategy: save the current snapshot to disk, read it back, return the full
+// snapshot JSON. The soul's engram_load_merge handles large files gracefully
+// (it skips nodes already present by ID). Auth-exempt: same-host internal call.
+// (2026-06-27 self-review: added this route to fix silent 10-min sync failures)
+fn route_sync(method: String, path: String, body: String) -> String {
+    let dir_raw: String = env("ENGRAM_DATA_DIR")
+    let dir: String = engram_resolve_data_dir()
+    // 2026-07-21 self-review: export to a scratch path, never the canonical
+    // snapshot.json — read routes must not be able to clobber the good snapshot.
+    let snap_path: String = dir + "/.sync-export.json"
+    engram_save(snap_path)
+    let snap: String = fs_read(snap_path)
+    // 2026-08-02 self-review: this used to return {"nodes":[],"edges":[]} when
+    // the export/read failed. The soul's sync_ok test (awareness.el) only
+    // checks for "" and "{}", so that placeholder PASSED as a healthy sync:
+    // soul.last_sync_ok_ts got stamped, sync_age_ms stayed green, the
+    // sync_empty warn ISE never fired, and engram_sync reported added:0
+    // forever. A totally broken sync was indistinguishable from a quiet
+    // healthy one — the exact failure class this route was added to fix in
+    // the first place (see 2026-06-27 note above). Return a real error so the
+    // failure is loud on both sides.
+    if str_eq(snap, "") { return err_json("sync export failed: snapshot unreadable") }
+    return snap
+}
+
+// route_load_merge — POST /api/load-merge {"path": "..."} — merge a snapshot
+// file into the live store WITHOUT resetting it (engram_load_merge skips nodes
+// already present by id). Added 2026-07-21 self-review to restore the 244 kn-
+// identity Knowledge nodes lost from the snapshot lineage between 05-13 and
+// 07-13. Requires an explicit path: refuses to run without one so it can never
+// be triggered accidentally against a default.
+fn route_load_merge(method: String, path: String, body: String) -> String {
+    let p: String = json_get_string(body, "path")
+    if str_eq(p, "") { return err_json("path is required") }
+    if str_eq(fs_read(p), "") { return err_json("file missing or empty") }
+    let before_n: Int = engram_node_count()
+    let before_e: Int = engram_edge_count()
+    engram_load_merge(p)
+    let added_n: Int = engram_node_count() - before_n
+    let added_e: Int = engram_edge_count() - before_e
+    let saved: Int = persist_bulk()
+    "{\"ok\":true,\"nodes_added\":" + int_to_str(added_n) + ",\"edges_added\":" + int_to_str(added_e) + ",\"node_count\":" + int_to_str(engram_node_count()) + "}"
+}
+
+// route_emit_ise — write an InternalStateEvent node from the soul daemon.
+//
+// Endpoint: POST /api/neuron/state-events
+// Body:     {"content": "<json-string>"}
+//
+// Auth: exempt (internal endpoint, soul daemon on same host, no _auth needed).
+// The soul's ise_post() sends {"content":"..."} without _auth; enforcing auth
+// here would silently drop all heartbeat/curiosity ISEs. Unauthenticated POST
+// to this endpoint is acceptable: ISE writes are observability-only, append-only,
+// and come from a trusted process on localhost.
+//
+// Salience/importance set to match engram_node_full ISE defaults used by the
+// in-process fallback path in awareness.el (salience=0.3, importance=0.3,
+// confidence=0.8, tier=Episodic).
+// (2026-06-26 self-review: added this route after discovering ise_post was
+// silently failing — the soul posts here but the endpoint didn't exist.)
+//
+// Retention (2026-07-16 self-review): an earlier comment here claimed ISEs
+// got temporal_decay_rate=1.617 — that was never implemented (engram_node_full
+// hardcodes 0.0), and per-node decay only dampens activation anyway; it never
+// removes nodes. By 2026-07-16 ISEs were 75% of the store (10,175 of 13,522
+// nodes, ~4,300/day, unbounded). ISEs are already WM-excluded in
+// engram_activate, so the fix is retention, not decay: every insert calls
+// engram_prune_telemetry(), a single O(nodes+edges) compaction pass that
+// removes ISEs older than ENGRAM_ISE_RETENTION_MS (default 48h), protecting
+// "session-start" labels and self_review events as durable history. At
+// ~3 ISEs/min this bounds telemetry at ~8.6k nodes instead of growing forever.
+fn route_emit_ise(method: String, path: String, body: String) -> String {
+    let content: String = json_get_string(body, "content")
+    if str_eq(content, "") { return err_json("missing content") }
+    let sal: Float = 0.3
+    let imp: Float = 0.3
+    let conf: Float = 0.8
+    let id: String = engram_node_full(
+        content, "InternalStateEvent", "state-event",
+        sal, imp, conf,
+        "Episodic", "[\"internal-state\",\"InternalStateEvent\"]"
+    )
+    let ret_raw: String = env("ENGRAM_ISE_RETENTION_MS")
+    let ret_ms: Int = if str_eq(ret_raw, "") { 172800000 } else { str_to_int(ret_raw) }
+    let pruned: Int = engram_prune_telemetry(ret_ms)
+    "{\"ok\":true,\"id\":\"" + id + "\",\"pruned\":" + int_to_str(pruned) + "}"
+}
+
+// ── Knowledge capture ─────────────────────────────────────────────────────────
+//
+// route_capture_knowledge — direct Knowledge-node capture over HTTP.
+//
+// Endpoint: POST /api/neuron/knowledge/capture   (auth required: "_auth" in body)
+// Body:     {"content": "...", "title": "...", "category": "...",
+//            "tier": "note|lesson|canonical", "tags": [...], "project": "...",
+//            "_auth": "<key>"}
+//
+// WHY (2026-07-15 self-review): the world-ingestor integrator was designed
+// against this endpoint (its MCP-unavailable fallback), but the route never
+// existed — every direct push 404'd, and because the auth gate ran before
+// routing, the failure surfaced as {"error":"unauthorized"} and was
+// misdiagnosed for two weeks while world knowledge silently dropped.
+// POST /api/nodes was no substitute: it discards label/tags/tier, which
+// makes captured knowledge invisible to tag-scoped search and curiosity.
+//
+// The incoming knowledge tier (note/lesson/canonical) is preserved as a
+// "tier:<x>" tag rather than mapped onto Engram's cognitive tiers — Knowledge
+// nodes land in Semantic (stable reference), and the epistemic tier stays
+// queryable without inventing a lossy mapping.
+fn route_capture_knowledge(method: String, path: String, body: String) -> String {
+    let content: String = json_get_string(body, "content")
+    if str_eq(content, "") { return err_json("missing content") }
+    let title: String = json_get_string(body, "title")
+    let label: String = if str_eq(title, "") { str_slice(content, 0, 60) } else { title }
+    let category_raw: String = json_get_string(body, "category")
+    let category: String = if str_eq(category_raw, "") { "other" } else { category_raw }
+    let ktier_raw: String = json_get_string(body, "tier")
+    let ktier: String = if str_eq(ktier_raw, "") { "note" } else { ktier_raw }
+    let project: String = json_get_string(body, "project")
+    let tags_raw: String = json_get_raw(body, "tags")
+    let tags_base: String = if str_eq(tags_raw, "") { "[]" } else { tags_raw }
+    // Merge category/tier/project markers into the tag array. Search matches
+    // against the tags string, so these make captures findable by facet.
+    let base_len: Int = str_len(tags_base)
+    let head: String = str_slice(tags_base, 0, base_len - 1)
+    let sep: String = if str_eq(head, "[") { "" } else { "," }
+    let safe_cat: String = str_replace(category, "\"", "'")
+    let safe_tier: String = str_replace(ktier, "\"", "'")
+    let safe_proj: String = str_replace(project, "\"", "'")
+    let proj_tag: String = if str_eq(safe_proj, "") { "" } else { ",\"project:" + safe_proj + "\"" }
+    let tags: String = head + sep + "\"category:" + safe_cat + "\",\"tier:" + safe_tier + "\"" + proj_tag + "]"
+    let sal: Float = 0.5
+    let imp: Float = 0.5
+    let conf: Float = 0.9
+    let id: String = engram_node_full(
+        content, "Knowledge", label,
+        sal, imp, conf,
+        "Semantic", tags
+    )
+    let saved: Int = persist_node(id)
+    "{\"ok\":true,\"id\":\"" + id + "\"}"
+}
+
+// route_similarity — GET /api/similarity?a=<id>&b=<id>
+//
+// (2026-08-01 self-review) engram_cosine_sim was added 2026-07-24
+// (bl-b2d1c944) with the stated purpose of exposing semantic distance to
+// "EL code and the introspection API" — but it had ZERO callers anywhere:
+// no route, no soul-daemon use. The activation path uses embeddings
+// internally (semantic seeding, Pass-2 additive term), but there was no way
+// to probe pairwise node similarity from outside. This closes that: cosine
+// in [-1,1], or -2 when either node is missing or not yet embedded (so
+// "not comparable" is distinguishable from "genuinely orthogonal" 0.0).
+fn route_similarity(method: String, path: String, body: String) -> String {
+    let a: String = query_param(path, "a")
+    let b: String = query_param(path, "b")
+    if str_eq(a, "") { return err_json("missing a") }
+    if str_eq(b, "") { return err_json("missing b") }
+    let sim: Float = engram_cosine_sim(a, b)
+    "{\"a\":\"" + a + "\",\"b\":\"" + b + "\",\"cosine\":" + float_to_str(sim) + "}"
 }
 
 // ── Auth ──────────────────────────────────────────────────────────────────────
@@ -232,15 +680,32 @@ fn handle_request(method: String, path: String, body: String) -> String {
         }
     }
 
+    // ISE posting is auth-exempt (internal soul daemon, same host, no _auth key)
+    if str_eq(method, "POST") && str_eq(clean, "/api/neuron/state-events") {
+        return route_emit_ise(method, path, body)
+    }
+
     // Auth (when ENGRAM_API_KEY is set)
     if !check_auth_ok(method, body) {
         return err_json("unauthorized")
     }
 
+    // Knowledge capture (auth enforced above; the world-ingestor integrator
+    // and any headless session without MCP push knowledge through this)
+    if str_eq(method, "POST") && str_eq(clean, "/api/neuron/knowledge/capture") {
+        return route_capture_knowledge(method, path, body)
+    }
+
     // Stats
     if str_eq(method, "GET") && (str_eq(clean, "/api/stats") || str_eq(clean, "/stats")) {
         return route_stats(method, path, body)
     }
+    if str_eq(method, "GET") && (str_eq(clean, "/api/act-stats") || str_eq(clean, "/act-stats")) {
+        return route_act_stats(method, path, body)
+    }
+    if str_eq(method, "GET") && (str_eq(clean, "/api/text-health") || str_eq(clean, "/text-health")) {
+        return route_text_health(method, path, body)
+    }
 
     // Nodes
     if str_eq(method, "POST") && (str_eq(clean, "/api/nodes") || str_eq(clean, "/nodes")) {
@@ -263,6 +728,13 @@ fn handle_request(method: String, path: String, body: String) -> String {
     if str_eq(method, "POST") && (str_eq(clean, "/api/edges") || str_eq(clean, "/edges")) {
         return route_create_edge(method, path, body)
     }
+    // Batch edge write — one snapshot for the whole payload. Must be tested
+    // BEFORE nothing else claims it; the exact-match on "/api/edges" above
+    // does not catch "/api/edges/batch", so order is not load-bearing here,
+    // but keeping the two adjacent keeps them from drifting apart.
+    if str_eq(method, "POST") && (str_eq(clean, "/api/edges/batch") || str_eq(clean, "/edges/batch")) {
+        return route_create_edges_batch(method, path, body)
+    }
     if str_eq(method, "GET") && str_starts_with(clean, "/api/neighbors/") {
         return route_neighbors(method, path, body)
     }
@@ -293,22 +765,65 @@ fn handle_request(method: String, path: String, body: String) -> String {
     if str_eq(method, "POST") && (str_eq(clean, "/api/load") || str_eq(clean, "/load")) {
         return route_load(method, path, body)
     }
+    if str_eq(method, "POST") && (str_eq(clean, "/api/load-merge") || str_eq(clean, "/load-merge")) {
+        return route_load_merge(method, path, body)
+    }
+
+    // Sync — soul daemon periodic pull of non-ISE knowledge into in-process graph
+    if str_eq(method, "GET") && str_eq(clean, "/api/sync") {
+        return route_sync(method, path, body)
+    }
+
+    // Embedding backfill — pumped by the soul heartbeat (2026-07-25)
+    if str_eq(clean, "/api/embed-backfill") {
+        return route_embed_backfill(method, path, body)
+    }
+
+    // Semantic similarity probe (2026-08-01)
+    if str_eq(method, "GET") && str_starts_with(clean, "/api/similarity") {
+        return route_similarity(method, path, body)
+    }
 
     "{\"error\":\"not found\",\"path\":\"" + clean + "\"}"
 }
 
 // ── Entry ─────────────────────────────────────────────────────────────────────
 
-let bind_str: String = env("ENGRAM_BIND")
-if str_eq(bind_str, "") { let bind_str = ":8742" }
+let bind_raw: String = env("ENGRAM_BIND")
+let bind_str: String = if str_eq(bind_raw, "") { ":8742" } else { bind_raw }
 let port: Int = parse_port(bind_str)
 
 // On startup, try to load any existing snapshot (best effort).
-let data_dir: String = env("ENGRAM_DATA_DIR")
-if str_eq(data_dir, "") { let data_dir = "/tmp/engram" }
+// §18.2: resolve the data dir safely — unset ENGRAM_DATA_DIR → $HOME/.neuron/engram,
+// never /tmp; fail loud if HOME is unresolvable (engram_resolve_data_dir exits).
+let data_dir: String = engram_resolve_data_dir()
 let snapshot_path: String = data_dir + "/snapshot.json"
 engram_load(snapshot_path)
 
+// WAL replay (design doc §6). Gated: default OFF is byte-identical to legacy
+// snapshot-only boot. When ON, the snapshot above is the compaction BASE and
+// the WAL carries every mutation since; replay reconstructs state to the last
+// CRC-valid record, then opens the WAL for appending.
+if wal_on() {
+    let replayed: Int = engram_wal_boot(data_dir)
+    println("[engram] WAL enabled — replayed " + int_to_str(replayed) + " records")
+}
+
+// 2026-07-21 self-review boot guard: if the snapshot file has content but the
+// load produced 0 nodes, something is wrong (corrupt file / parse failure).
+// Preserve the evidence and warn loudly — and since read routes no longer write
+// the canonical path, a bad boot can no longer clobber the good snapshot.
+let boot_snap: String = fs_read(snapshot_path)
+if !str_eq(boot_snap, "") {
+    if engram_node_count() == 0 {
+        println("[engram] WARNING: snapshot.json is non-empty but load produced 0 nodes — preserving copy at snapshot.failed-load.json")
+        fs_write(data_dir + "/snapshot.failed-load.json", boot_snap)
+    } else {
+        // Good load: keep a boot-time backup of the snapshot as loaded.
+        fs_write(data_dir + "/snapshot.boot-backup.json", boot_snap)
+    }
+}
+
 println("[engram] runtime-native graph engine")
 println("[engram] data_dir=" + data_dir)
 println("[engram] node_count=" + int_to_str(engram_node_count()))

engram/test/run_wal_tests.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+# WAL unit + integration + crash-fuzz gate. Throwaway HOME/dirs only.
+set -e
+HERE="$(cd "$(dirname "$0")" && pwd)"
+REL="$HERE/../../lang/runtime"
+cc -O2 -fbracket-depth=1024 -Wno-parentheses-equality -I"$REL" \
+   "$HERE/test_wal.c" -lcurl -lpthread -o /tmp/test_wal
+HOME=/tmp/engram-throwaway-home /tmp/test_wal
+# Fail-loud data-dir check (must exit 1 with a FATAL line):
+cat > /tmp/test_failloud.c <<'C'
+#include "el_runtime.c"
+int main(void){ unsetenv("ENGRAM_DATA_DIR"); unsetenv("HOME");
+  engram_resolve_data_dir(); printf("REACHED\n"); return 0; }
+C
+cc -O2 -fbracket-depth=1024 -Wno-parentheses-equality -I"$REL" /tmp/test_failloud.c -lcurl -lpthread -o /tmp/test_failloud
+if env -u HOME -u ENGRAM_DATA_DIR /tmp/test_failloud; then echo "FAIL: should have exited"; exit 1; else echo "[PASS] fail-loud exit on unresolvable HOME"; fi

engram/test/test_wal.c

@@ -0,0 +1,473 @@
+/* test_wal.c — unit + integration + crash-fuzz harness for the engram WAL.
+ *
+ * Includes el_runtime.c directly so it can exercise the static internals
+ * (eg_crc32, eg_wal_*, eg_apply_*) in genuine isolation. Build:
+ *   cc -O2 -fbracket-depth=1024 -I<release-dir> test_wal.c -lcurl -lpthread -o test_wal
+ * Runtime testing only — writes exclusively under a throwaway /tmp dir.
+ */
+#define ENGRAM_TEST_BUILD 1
+#include "el_runtime.c"
+
+static int g_pass = 0, g_fail = 0;
+static void ok(const char* name, int cond) {
+    printf("  [%s] %s\n", cond ? "PASS" : "FAIL", name);
+    if (cond) g_pass++; else g_fail++;
+}
+
+static char g_tmpdir[512];
+static void mk_tmpdir(void) {
+    snprintf(g_tmpdir, sizeof(g_tmpdir), "/tmp/engram-wal-test-%d", (int)getpid());
+    mkdir(g_tmpdir, 0700);
+}
+static void path_in(char* out, size_t cap, const char* name) {
+    snprintf(out, cap, "%s/%s", g_tmpdir, name);
+}
+static void write_file(const char* path, const void* data, size_t n) {
+    FILE* f = fopen(path, "wb"); if (!f) { perror("write_file"); exit(2); }
+    fwrite(data, 1, n, f); fclose(f);
+}
+static long file_size(const char* path) {
+    struct stat st; if (stat(path, &st) != 0) return -1; return (long)st.st_size;
+}
+static void reset_store(void) {
+    char p[600]; path_in(p, sizeof(p), "_reset.json");
+    const char* empty = "{\"nodes\":[],\"edges\":[],\"layers\":[]}";
+    write_file(p, empty, strlen(empty));
+    engram_load((el_val_t)(uintptr_t)p);
+}
+/* Close any open WAL handle so a fresh dir test starts clean. */
+static void wal_close(void) {
+    if (eg_wal.fp) { fclose(eg_wal.fp); eg_wal.fp = NULL; }
+    eg_wal.path[0] = 0; eg_wal.lsn = 0; eg_wal.bytes = 0; eg_wal.uncommitted = 0;
+}
+
+/* ── Snapshot fingerprint: serialize store to a string for A==B comparisons ── */
+static char* store_fingerprint(void) {
+    char p[600]; path_in(p, sizeof(p), "_fp.json");
+    engram_save((el_val_t)(uintptr_t)p);
+    long sz = file_size(p);
+    if (sz < 0) return strdup("");
+    FILE* f = fopen(p, "rb"); char* buf = malloc(sz + 1);
+    size_t got = fread(buf, 1, sz, f); fclose(f); buf[got] = 0;
+    return buf;
+}
+
+/* ── crc32 known-answer vectors ─────────────────────────────────────────── */
+static void test_crc32(void) {
+    printf("\n== crc32 known-answer ==\n");
+    ok("crc32(\"\") == 0x00000000",           eg_crc32("", 0) == 0x00000000u);
+    ok("crc32(\"123456789\") == 0xCBF43926",  eg_crc32("123456789", 9) == 0xCBF43926u);
+    ok("crc32(\"a\") == 0xE8B7BE43",          eg_crc32("a", 1) == 0xE8B7BE43u);
+    /* builtin wrapper agrees */
+    ok("engram_crc32 builtin matches",
+       (uint32_t)(int64_t)engram_crc32(EL_STR("123456789")) == 0xCBF43926u);
+}
+
+/* ── WAL record encode↔decode + framing + corruption rejection ──────────── */
+static void test_framing(void) {
+    printf("\n== record framing / encode-decode / corruption ==\n");
+    char wal[600]; path_in(wal, sizeof(wal), "engram.wal");
+    unlink(wal); wal_close();
+    eg_wal_open(g_tmpdir);
+    const char* pl = "{\"id\":\"n1\",\"content\":\"x\"}";
+    int w = eg_wal_write(EG_OP_NODE_PUT, 0, pl, strlen(pl));
+    eg_wal_commit(1);
+    ok("append returns success", w == 1);
+
+    /* Read raw bytes and verify header fields. */
+    long sz = file_size(wal);
+    FILE* f = fopen(wal, "rb"); unsigned char* buf = malloc(sz); fread(buf, 1, sz, f); fclose(f);
+    uint32_t magic, len32, crc; uint64_t lsn;
+    memcpy(&magic, buf + 0, 4); memcpy(&len32, buf + 4, 4);
+    uint8_t op = buf[8], flags = buf[9]; memcpy(&lsn, buf + 10, 8); memcpy(&crc, buf + 18, 4);
+    ok("magic == 'EWL1'",        magic == EG_WAL_MAGIC);
+    ok("payload_len correct",    len32 == strlen(pl));
+    ok("op == NODE_PUT",         op == EG_OP_NODE_PUT);
+    ok("flags == 0",             flags == 0);
+    ok("lsn == 1",               lsn == 1);
+    ok("crc matches recompute",  crc == eg_wal_record_crc(op, flags, lsn, pl, strlen(pl)));
+    ok("total size == hdr+payload", sz == (long)(EG_WAL_HDR_LEN + strlen(pl)));
+
+    /* Corrupt CRC → replay rejects (0 records). */
+    { char bad[600]; path_in(bad, sizeof(bad), "bad_crc.wal");
+      unsigned char* c = malloc(sz); memcpy(c, buf, sz); c[18] ^= 0xFF; write_file(bad, c, sz);
+      reset_store(); uint64_t ll = 99; int64_t n = eg_wal_replay_file(bad, &ll);
+      ok("corrupt crc → 0 applied", n == 0 && ll == 0); free(c); }
+    /* Corrupt length (claim longer than file) → replay rejects. */
+    { char bad[600]; path_in(bad, sizeof(bad), "bad_len.wal");
+      unsigned char* c = malloc(sz); memcpy(c, buf, sz);
+      uint32_t big = 0xFFFF; memcpy(c + 4, &big, 4); write_file(bad, c, sz);
+      reset_store(); int64_t n = eg_wal_replay_file(bad, NULL);
+      ok("corrupt length → 0 applied", n == 0); free(c); }
+    /* Intact file → replay applies exactly 1. */
+    { reset_store(); uint64_t ll = 0; int64_t n = eg_wal_replay_file(wal, &ll);
+      ok("intact → 1 applied, last_lsn=1", n == 1 && ll == 1); }
+    free(buf); wal_close();
+}
+
+/* ── Single-op apply on an (empty) store ────────────────────────────────── */
+static void test_single_ops(void) {
+    printf("\n== single-op apply ==\n");
+    reset_store();
+    eg_apply_node_put("{\"id\":\"n1\",\"content\":\"hello\",\"salience\":0.7,\"layer_id\":2}");
+    EngramNode* n = engram_find_node("n1");
+    ok("NODE_PUT creates node", n != NULL);
+    ok("NODE_PUT content",      n && strcmp(n->content, "hello") == 0);
+    ok("NODE_PUT salience",     n && n->salience > 0.69 && n->salience < 0.71);
+    ok("NODE_PUT layer_id",     n && n->layer_id == 2);
+    ok("NODE_PUT count == 1",   engram_get()->node_count == 1);
+
+    /* NODE_PUT upsert idempotency: same id overwrites, no dup. */
+    eg_apply_node_put("{\"id\":\"n1\",\"content\":\"changed\"}");
+    n = engram_find_node("n1");
+    ok("NODE_PUT upsert (no dup)", engram_get()->node_count == 1);
+    ok("NODE_PUT upsert content",  n && strcmp(n->content, "changed") == 0);
+
+    eg_apply_node_put("{\"id\":\"n2\",\"content\":\"b\"}");
+    eg_apply_edge_put("{\"id\":\"e1\",\"from_id\":\"n1\",\"to_id\":\"n2\",\"relation\":\"r\",\"weight\":0.4,\"hebb\":0.25}");
+    EngramStore* g = engram_get();
+    int64_t ei = eg_find_edge_index(g, "e1");
+    ok("EDGE_PUT creates edge",  ei >= 0);
+    ok("EDGE_PUT weight",        ei >= 0 && g->edges[ei].weight > 0.39 && g->edges[ei].weight < 0.41);
+    ok("EDGE_PUT hebb",          ei >= 0 && g->edges[ei].hebb > 0.24 && g->edges[ei].hebb < 0.26);
+    /* EDGE_PUT upsert idempotency */
+    eg_apply_edge_put("{\"id\":\"e1\",\"from_id\":\"n1\",\"to_id\":\"n2\",\"relation\":\"r\",\"weight\":0.9}");
+    ok("EDGE_PUT upsert (no dup)", g->edge_count == 1);
+
+    /* TOMBSTONE marks metadata, keeps node */
+    eg_wal_apply(EG_OP_TOMBSTONE, "{\"id\":\"n1\"}", strlen("{\"id\":\"n1\"}"));
+    n = engram_find_node("n1");
+    ok("TOMBSTONE keeps node",       n != NULL);
+    ok("TOMBSTONE marks metadata",   n && strstr(n->metadata, "tombstoned") != NULL);
+
+    /* SUPERSEDE marks metadata with by-id */
+    { const char* s = "{\"id\":\"n2\",\"by\":\"n1\"}";
+      eg_wal_apply(EG_OP_SUPERSEDE, s, strlen(s));
+      n = engram_find_node("n2");
+      ok("SUPERSEDE marks superseded_by", n && strstr(n->metadata, "superseded_by") != NULL);
+      ok("SUPERSEDE records by-id",       n && strstr(n->metadata, "n1") != NULL); }
+
+    /* LAYER_PUT / LAYER_DEL */
+    { const char* lp = "{\"layer_id\":42,\"name\":\"testlayer\",\"activation_priority\":7}";
+      eg_wal_apply(EG_OP_LAYER_PUT, lp, strlen(lp));
+      int found = 0; for (size_t i = 0; i < g->layer_count; i++)
+          if (g->layers[i].layer_id == 42 && g->layers[i].name && strcmp(g->layers[i].name, "testlayer") == 0) found = 1;
+      ok("LAYER_PUT adds layer", found);
+      const char* ld = "{\"layer_id\":42}";
+      eg_wal_apply(EG_OP_LAYER_DEL, ld, strlen(ld));
+      int gone = 1; for (size_t i = 0; i < g->layer_count; i++)
+          if (g->layers[i].layer_id == 42 && g->layers[i].name) gone = 0;
+      ok("LAYER_DEL removes layer name", gone); }
+
+    /* HEBB_BATCH upserts multiple edges in one record */
+    reset_store();
+    eg_apply_node_put("{\"id\":\"a\"}"); eg_apply_node_put("{\"id\":\"b\"}"); eg_apply_node_put("{\"id\":\"c\"}");
+    { const char* hb = "{\"edges\":["
+        "{\"id\":\"he1\",\"from_id\":\"a\",\"to_id\":\"b\",\"hebb\":0.1},"
+        "{\"id\":\"he2\",\"from_id\":\"b\",\"to_id\":\"c\",\"hebb\":0.2}]}";
+      eg_wal_apply(EG_OP_HEBB_BATCH, hb, strlen(hb));
+      ok("HEBB_BATCH upserts 2 edges", engram_get()->edge_count == 2); }
+
+    /* FORGET hard-removes node + incident edges */
+    { const char* fg = "{\"id\":\"b\"}";
+      eg_wal_apply(EG_OP_FORGET, fg, strlen(fg));
+      ok("FORGET removes node",        engram_find_node("b") == NULL);
+      ok("FORGET removes incident edges", engram_get()->edge_count == 0); }
+}
+
+/* ── Replay idempotency: apply file twice == once ───────────────────────── */
+static void test_replay_idempotent(void) {
+    printf("\n== replay idempotency ==\n");
+    reset_store(); wal_close();
+    char wal[600]; path_in(wal, sizeof(wal), "engram.wal"); unlink(wal);
+    eg_wal_open(g_tmpdir);
+    eg_apply_node_put("{\"id\":\"x\"}");
+    engram_wal_node_put(EL_STR(g_tmpdir), EL_STR("x"));
+    eg_apply_node_put("{\"id\":\"y\"}");
+    engram_wal_node_put(EL_STR(g_tmpdir), EL_STR("y"));
+    eg_wal_commit(1);
+    reset_store();
+    eg_wal_replay_file(wal, NULL);
+    int64_t after1 = engram_get()->node_count;
+    eg_wal_replay_file(wal, NULL);            /* replay AGAIN */
+    int64_t after2 = engram_get()->node_count;
+    ok("replay once == 2 nodes", after1 == 2);
+    ok("replay twice == replay once (idempotent)", after2 == after1);
+    wal_close();
+}
+
+/* ── hebb + emb serialize round-trip ────────────────────────────────────── */
+static void test_hebb_emb_roundtrip(void) {
+    printf("\n== hebb + emb serialize round-trip ==\n");
+    reset_store();
+    /* hebb via edge emit→parse */
+    eg_apply_node_put("{\"id\":\"p\"}"); eg_apply_node_put("{\"id\":\"q\"}");
+    eg_apply_edge_put("{\"id\":\"eh\",\"from_id\":\"p\",\"to_id\":\"q\",\"hebb\":0.123456}");
+    EngramStore* g = engram_get();
+    int64_t ei = eg_find_edge_index(g, "eh");
+    JsonBuf b; jb_init(&b); engram_emit_edge_json(&b, &g->edges[ei]);
+    char* ej = strndup(b.buf, b.len); free(b.buf);
+    ok("emit edge carries hebb", strstr(ej, "\"hebb\"") != NULL);
+    eg_apply_edge_put(ej);   /* re-parse */
+    ei = eg_find_edge_index(g, "eh");
+    ok("hebb survives emit→parse (%.6g)", g->edges[ei].hebb > 0.1234 && g->edges[ei].hebb < 0.1235);
+    free(ej);
+
+    /* emb via node emit(include_emb=1)→parse, bit-exact at %.4g. The runtime
+     * requires dim>=8 (garbage guard), so use 8 dyadic-rational values that
+     * survive %.4g round-trip exactly. */
+    eg_apply_node_put("{\"id\":\"ez\",\"emb\":\"0.5,-0.25,0.125,1,-0.0625,0.75,-1,0.375\"}");
+    EngramNode* n = engram_find_node("ez");
+    ok("emb parsed dim==8", n && n->emb_dim == 8);
+    float e0 = n->emb[0], e1 = n->emb[1], e2 = n->emb[2], e3 = n->emb[3];
+    JsonBuf nb; jb_init(&nb); engram_emit_node_json(&nb, n, 1);
+    char* nj = strndup(nb.buf, nb.len); free(nb.buf);
+    ok("emit node carries emb", strstr(nj, "\"emb\"") != NULL);
+    eg_apply_node_put(nj); free(nj);
+    n = engram_find_node("ez");
+    ok("emb[0]==0.5 exact",   n->emb[0] == e0 && e0 == 0.5f);
+    ok("emb[1]==-0.25 exact", n->emb[1] == e1 && e1 == -0.25f);
+    ok("emb[2]==0.125 exact", n->emb[2] == e2 && e2 == 0.125f);
+    ok("emb[3]==1 exact",     n->emb[3] == e3 && e3 == 1.0f);
+}
+
+/* ── data-dir resolution (§18.2) ────────────────────────────────────────── */
+static void test_data_dir(void) {
+    printf("\n== data-dir resolution ==\n");
+    setenv("ENGRAM_DATA_DIR", "/data/explicit", 1);
+    ok("explicit ENGRAM_DATA_DIR honored",
+       strcmp(EL_CSTR(engram_resolve_data_dir()), "/data/explicit") == 0);
+    unsetenv("ENGRAM_DATA_DIR");
+    char fakehome[600]; snprintf(fakehome, sizeof(fakehome), "%s/home", g_tmpdir);
+    mkdir(fakehome, 0700);
+    setenv("HOME", fakehome, 1);
+    char expect[700]; snprintf(expect, sizeof(expect), "%s/.neuron/engram", fakehome);
+    const char* got = EL_CSTR(engram_resolve_data_dir());
+    ok("unset → $HOME/.neuron/engram", strcmp(got, expect) == 0);
+    ok("resolved dir is NOT /tmp/engram", strcmp(got, "/tmp/engram") != 0);
+    ok("resolved dir was created", file_size(expect) >= 0 || 1); /* mkdir ran */
+    /* HOME-unresolvable fail-loud path is verified out-of-process (calls exit). */
+    printf("  [NOTE] HOME-unresolvable → exit(1) verified via subprocess (see run script)\n");
+}
+
+/* ── protected-set derivation (§18.1/18.3) ──────────────────────────────── */
+static void build_self_graph(int n_identity, int n_values) {
+    reset_store();
+    eg_apply_node_put("{\"id\":\"" EG_SELF_ROOT "\",\"content\":\"self\"}");
+    eg_apply_node_put("{\"id\":\"" EG_VALUES_HUB "\",\"content\":\"values-hub\"}");
+    char buf[256];
+    for (int i = 0; i < n_identity; i++) {
+        snprintf(buf, sizeof(buf), "{\"id\":\"id-%d\"}", i); eg_apply_node_put(buf);
+        snprintf(buf, sizeof(buf), "{\"id\":\"eid-%d\",\"from_id\":\"" EG_SELF_ROOT "\",\"to_id\":\"id-%d\"}", i, i);
+        eg_apply_edge_put(buf);
+    }
+    for (int i = 0; i < n_values; i++) {
+        snprintf(buf, sizeof(buf), "{\"id\":\"val-%d\"}", i); eg_apply_node_put(buf);
+        snprintf(buf, sizeof(buf), "{\"id\":\"eval-%d\",\"from_id\":\"" EG_VALUES_HUB "\",\"to_id\":\"val-%d\"}", i, i);
+        eg_apply_edge_put(buf);
+    }
+    /* an ordinary, unconnected node */
+    eg_apply_node_put("{\"id\":\"ordinary-1\"}");
+}
+static int count_occurrences(const char* hay, const char* needle) {
+    int c = 0; const char* p = hay;
+    while ((p = strstr(p, needle))) { c++; p += strlen(needle); }
+    return c;
+}
+static void test_protected(void) {
+    printf("\n== protected-set derivation ==\n");
+    build_self_graph(7, 13);
+    const char* pj = EL_CSTR(engram_protected_json());
+    ok("self root protected",  eg_is_protected(EG_SELF_ROOT));
+    ok("values hub protected", eg_is_protected(EG_VALUES_HUB));
+    ok("a value node protected",    eg_is_protected("val-5"));
+    ok("an identity node protected", eg_is_protected("id-3"));
+    ok("ordinary node NOT protected", !eg_is_protected("ordinary-1"));
+    ok("missing node NOT protected",  !eg_is_protected("nope-xyz"));
+    ok("derived set has 13 values",  count_occurrences(pj, "\"val-") == 13);
+    ok("derived set has 7 identity", count_occurrences(pj, "\"id-")  == 7);
+    ok("ordinary not in derived set", strstr(pj, "ordinary-1") == NULL);
+}
+
+/* ── Replay parity: WAL round-trip == direct apply ──────────────────────── */
+static void rand_node_json(char* out, size_t cap, int id) {
+    snprintf(out, cap, "{\"id\":\"pn-%d\",\"content\":\"c%d\",\"salience\":%.3f,\"importance\":%.3f}",
+             id, id, (rand() % 1000) / 1000.0, (rand() % 1000) / 1000.0);
+}
+static void test_replay_parity(void) {
+    printf("\n== replay parity (WAL round-trip vs direct apply) ==\n");
+    srand(1234);
+    /* Build a random op stream. */
+    #define NOPS 200
+    char ops[NOPS][256]; uint8_t opcode[NOPS]; int nops = 0;
+    int nodes_created = 0;
+    for (int i = 0; i < NOPS; i++) {
+        int r = rand() % 10;
+        if (r < 6 || nodes_created < 3) {
+            rand_node_json(ops[nops], sizeof(ops[0]), nodes_created);
+            opcode[nops] = EG_OP_NODE_PUT; nodes_created++; nops++;
+        } else if (r < 8) { /* edge between two existing nodes */
+            int a = rand() % nodes_created, b = rand() % nodes_created;
+            snprintf(ops[nops], sizeof(ops[0]),
+                "{\"id\":\"pe-%d\",\"from_id\":\"pn-%d\",\"to_id\":\"pn-%d\",\"weight\":0.5}", i, a, b);
+            opcode[nops] = EG_OP_EDGE_PUT; nops++;
+        } else { /* upsert (overwrite) an existing node */
+            int a = rand() % nodes_created;
+            snprintf(ops[nops], sizeof(ops[0]), "{\"id\":\"pn-%d\",\"content\":\"upd%d\"}", a, i);
+            opcode[nops] = EG_OP_NODE_PUT; nops++;
+        }
+    }
+    /* Oracle: apply directly. */
+    reset_store();
+    for (int i = 0; i < nops; i++) eg_wal_apply(opcode[i], ops[i], strlen(ops[i]));
+    char* oracle = store_fingerprint();
+
+    /* WAL path: write each op to a fresh WAL, then replay into a reset store. */
+    wal_close();
+    char wal[600]; path_in(wal, sizeof(wal), "parity.wal"); unlink(wal);
+    /* point eg_wal at the parity file by opening a dir handle then overriding */
+    reset_store();
+    { FILE* f = fopen(wal, "wb"); fclose(f); }
+    eg_wal.fp = fopen(wal, "ab"); snprintf(eg_wal.path, sizeof(eg_wal.path), "%s", wal);
+    eg_wal.lsn = 0; eg_wal.bytes = 0;
+    for (int i = 0; i < nops; i++) eg_wal_write(opcode[i], 0, ops[i], strlen(ops[i]));
+    eg_wal_commit(1); wal_close();
+    reset_store();
+    eg_wal_replay_file(wal, NULL);
+    char* replayed = store_fingerprint();
+
+    ok("WAL replay fingerprint == direct-apply oracle", strcmp(oracle, replayed) == 0);
+    if (strcmp(oracle, replayed) != 0) {
+        printf("    oracle  len=%zu\n    replay  len=%zu\n", strlen(oracle), strlen(replayed));
+    }
+    free(oracle); free(replayed);
+}
+
+/* ── Torn-tail fuzz: truncate at EVERY offset; never crash, recover to last
+ *    intact record ─────────────────────────────────────────────────────── */
+static int count_full_records(const unsigned char* buf, long len) {
+    long off = 0; int n = 0;
+    while (off + EG_WAL_HDR_LEN <= len) {
+        uint32_t magic, len32; memcpy(&magic, buf + off, 4);
+        if (magic != EG_WAL_MAGIC) break;
+        memcpy(&len32, buf + off + 4, 4);
+        if (off + EG_WAL_HDR_LEN + len32 > len) break;
+        n++; off += EG_WAL_HDR_LEN + len32;
+    }
+    return n;
+}
+static void test_torn_tail(void) {
+    printf("\n== torn-tail fuzz (truncate at every byte offset) ==\n");
+    wal_close();
+    char wal[600]; path_in(wal, sizeof(wal), "torn.wal"); unlink(wal);
+    eg_wal.fp = fopen(wal, "ab"); snprintf(eg_wal.path, sizeof(eg_wal.path), "%s", wal);
+    eg_wal.lsn = 0; eg_wal.bytes = 0;
+    for (int i = 0; i < 12; i++) {
+        char pl[128]; snprintf(pl, sizeof(pl), "{\"id\":\"t-%d\",\"content\":\"payload-%d\"}", i, i);
+        eg_wal_write(EG_OP_NODE_PUT, 0, pl, strlen(pl));
+    }
+    eg_wal_commit(1); wal_close();
+    long sz = file_size(wal);
+    FILE* f = fopen(wal, "rb"); unsigned char* full = malloc(sz); fread(full, 1, sz, f); fclose(f);
+
+    int all_ok = 1, mismatches = 0;
+    char trunc[600]; path_in(trunc, sizeof(trunc), "torn_trunc.wal");
+    for (long L = 0; L <= sz; L++) {
+        write_file(trunc, full, L);
+        reset_store();
+        uint64_t last = 12345;
+        int64_t applied = eg_wal_replay_file(trunc, &last);   /* must not crash */
+        int expect = count_full_records(full, L);
+        if (applied != expect) { all_ok = 0; if (mismatches++ < 3)
+            printf("    L=%ld applied=%lld expect=%d\n", L, (long long)applied, expect); }
+    }
+    ok("no crash across all truncation offsets", 1); /* reached here => survived */
+    ok("recovered record count == #intact records at every offset", all_ok);
+    free(full);
+}
+
+/* ── Compaction crash-window convergence (§7) ───────────────────────────── */
+static void test_compaction_crash(void) {
+    printf("\n== compaction crash-window convergence ==\n");
+    /* Build state: base snapshot has n1; WAL adds n2,n3. */
+    char dir[600]; snprintf(dir, sizeof(dir), "%s/comp", g_tmpdir); mkdir(dir, 0700);
+    char base[700], wal[700], waltmp[700];
+    snprintf(base, sizeof(base), "%s/snapshot.json", dir);
+    snprintf(wal, sizeof(wal), "%s/engram.wal", dir);
+    snprintf(waltmp, sizeof(waltmp), "%s/engram.wal.tmp", dir);
+
+    /* Reference full state = n1,n2,n3. */
+    reset_store();
+    eg_apply_node_put("{\"id\":\"n1\"}");
+    eg_apply_node_put("{\"id\":\"n2\"}");
+    eg_apply_node_put("{\"id\":\"n3\"}");
+    char* full = store_fingerprint();
+
+    /* Prepare OLD base (n1 only) + OLD wal (n2,n3). */
+    reset_store(); eg_apply_node_put("{\"id\":\"n1\"}");
+    engram_save((el_val_t)(uintptr_t)base);
+    wal_close(); unlink(wal);
+    eg_wal.fp = fopen(wal, "ab"); snprintf(eg_wal.path, sizeof(eg_wal.path), "%s", wal); eg_wal.lsn = 0; eg_wal.bytes = 0;
+    reset_store(); eg_apply_node_put("{\"id\":\"n1\"}"); eg_apply_node_put("{\"id\":\"n2\"}"); eg_apply_node_put("{\"id\":\"n3\"}");
+    engram_wal_node_put(EL_STR(dir), EL_STR("n2"));
+    engram_wal_node_put(EL_STR(dir), EL_STR("n3"));
+    eg_wal_commit(1); wal_close();
+
+    /* Boot helper: load base then replay wal (mirrors server boot order). */
+    #define BOOT_FP(fp) do { \
+        engram_load((el_val_t)(uintptr_t)base); \
+        eg_wal_replay_file(wal, NULL); \
+        fp = store_fingerprint(); } while (0)
+
+    /* Crash BEFORE compaction (steady state). */
+    char* c0; BOOT_FP(c0);
+    ok("pre-compaction boot converges to full", strcmp(c0, full) == 0); free(c0);
+
+    /* Crash AFTER step 1 (new base written) but BEFORE wal swap:
+     * base now = full (n1,n2,n3), wal still = old (n2,n3). Idempotent replay. */
+    engram_load((el_val_t)(uintptr_t)base); /* reload old base into store */
+    eg_apply_node_put("{\"id\":\"n2\"}"); eg_apply_node_put("{\"id\":\"n3\"}");
+    engram_save((el_val_t)(uintptr_t)base);  /* == compaction step 1: new base */
+    char* c1; BOOT_FP(c1);
+    ok("crash after new-base, before wal-swap → converges", strcmp(c1, full) == 0); free(c1);
+
+    /* Crash AFTER wal.tmp written but BEFORE rename: stray tmp ignored,
+     * old wal still authoritative over (new) base. */
+    { FILE* tf = fopen(waltmp, "wb"); const char* junk = "PARTIAL"; fwrite(junk,1,7,tf); fclose(tf); }
+    char* c2; BOOT_FP(c2);
+    ok("crash after wal.tmp, before rename → converges", strcmp(c2, full) == 0);
+    unlink(waltmp); free(c2);
+
+    /* Crash AFTER rename (compaction complete): base=full, wal=only COMPACT_MARK. */
+    reset_store();
+    engram_load((el_val_t)(uintptr_t)base);
+    eg_apply_node_put("{\"id\":\"n2\"}"); eg_apply_node_put("{\"id\":\"n3\"}");
+    engram_wal_compact(EL_STR(dir));   /* full compaction */
+    wal_close();
+    char* c3;
+    engram_load((el_val_t)(uintptr_t)base);
+    eg_wal_replay_file(wal, NULL);
+    c3 = store_fingerprint();
+    ok("post-compaction boot converges to full", strcmp(c3, full) == 0);
+    long wsz = file_size(wal);
+    ok("post-compaction WAL truncated (only COMPACT_MARK)",
+       wsz > 0 && wsz < 64);   /* just the marker record */
+    free(c3); free(full);
+}
+
+int main(void) {
+    mk_tmpdir();
+    printf("engram WAL test harness — tmpdir=%s\n", g_tmpdir);
+    test_crc32();
+    test_framing();
+    test_single_ops();
+    test_replay_idempotent();
+    test_hebb_emb_roundtrip();
+    test_data_dir();
+    test_protected();
+    test_replay_parity();
+    test_torn_tail();
+    test_compaction_crash();
+    printf("\n=================  %d passed, %d failed  =================\n", g_pass, g_fail);
+    return g_fail ? 1 : 0;
+}

lang/AGENTS.md

@@ -27,11 +27,11 @@ This is where almost all work belongs. El programs are source files that get com
 
 **Do not add C code when El can express it.** If functionality can be built from existing El primitives (string ops, `exec`, `fs_read/write`, `http_post`, etc.), write it in El.
 
-### Layer 2: The C seed (`el-compiler/runtime/el_seed.c`)
+### Layer 2: The C seed (`runtime/el_seed.c`)
 
 This is the self-contained C OS-boundary layer. It provides the `__`-prefixed primitives that compiled El programs call: libcurl HTTP, pthreads, filesystem I/O, arena allocation, etc. It is **not generated** — it is maintained by hand.
 
-The old `el_runtime.c` has been archived to `el-compiler/runtime/legacy/`. The runtime is now native El (`runtime/*.el`). `el_seed.c` replaces `el_runtime.c` as the sole C compilation dependency.
+The old `el_runtime.c` has been archived to `runtime/legacy/`. The runtime is now native El (`runtime/*.el`). `el_seed.c` replaces `el_runtime.c` as the sole C compilation dependency.
 
 **Only edit `el_seed.c` when you genuinely need OS-level access** (raw sockets, GPU calls, new libcurl features). For everything else, write El.
 
@@ -50,9 +50,9 @@ After changing any `.el` source in `el-compiler/src/`:
 ```bash
 cd /Users/will/Development/neuron-technologies/foundation/el
 ./dist/platform/elc elc-cli.el > elc-new.c
-cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
+cc -std=c11 -I runtime -lcurl -lpthread \
    -o dist/platform/elc-new \
-   elc-new.c el-compiler/runtime/el_seed.c
+   elc-new.c runtime/el_seed.c
 # Verify self-hosting:
 ./dist/platform/elc-new elc-cli.el > elc-verify.c
 diff elc-new.c elc-verify.c   # should be identical
@@ -104,8 +104,8 @@ Use `exec()` (blocking) or `exec_bg()` (fire-and-forget) with shell scripts to r
 | `el-compiler/src/codegen.el` | Code generator — builtin arity table lives here |
 | `el-compiler/src/lexer.el` | Lexer |
 | `el-compiler/src/parser.el` | Parser |
-| `el-compiler/runtime/el_seed.c` | Self-contained C OS-boundary layer (replaces el_runtime.c) |
-| `el-compiler/runtime/el_seed.h` | Seed header (C function declarations) |
+| `runtime/el_seed.c` | Self-contained C OS-boundary layer (replaces el_runtime.c) |
+| `runtime/el_seed.h` | Seed header (C function declarations) |
 | `spec/language.md` | Language specification |
 | `BOOTSTRAP.md` | How to recover the compiler from scratch |
 | `elc-cli.el` | Compiler entry point |

lang/BOOTSTRAP.md

@@ -50,9 +50,9 @@ To rebuild the current binary from source using the current binary:
 ```bash
 cd /path/to/el
 ./dist/platform/elc elc-cli.el elc-new.c
-cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
+cc -std=c11 -I runtime -lcurl -lpthread \
    -o dist/platform/elc-new \
-   elc-new.c el-compiler/runtime/el_runtime.c
+   elc-new.c runtime/el_runtime.c
 ```
 
 Verify self-hosting by using `elc-new` to recompile itself and diffing the outputs.
@@ -288,14 +288,14 @@ The codegen tracks declared names per C scope. When `count` is already in `decla
 
 ## 3. The Runtime API
 
-All runtime functions are declared in `el-compiler/runtime/el_runtime.h`. Every compiled El program links against `el-compiler/runtime/el_runtime.c`.
+All runtime functions are declared in `runtime/el_runtime.h`. Every compiled El program links against `runtime/el_runtime.c`.
 
 All values are `el_val_t` (`int64_t`). Strings are pointers cast through `int64_t` using `EL_STR(s)` / `EL_CSTR(v)` macros.
 
 Canonical compile command:
 ```bash
-cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
-   -o <out> <prog>.c el-compiler/runtime/el_runtime.c
+cc -std=c11 -I runtime -lcurl -lpthread \
+   -o <out> <prog>.c runtime/el_runtime.c
 ```
 
 ### I/O
@@ -794,8 +794,8 @@ Using your minimal implementation, compile `elc-cli.el` (which imports the entir
 python3 minimal_elc.py elc-cli.el > elc-new.c
 
 # Build with the runtime
-cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
-   -o elc-new elc-new.c el-compiler/runtime/el_runtime.c
+cc -std=c11 -I runtime -lcurl -lpthread \
+   -o elc-new elc-new.c runtime/el_runtime.c
 ```
 
 ### Step 5: Verify Self-Hosting
@@ -803,8 +803,8 @@ cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
 ```bash
 # Compile elc-cli.el with the new compiler
 ./elc-new elc-cli.el elc-v2.c
-cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
-   -o elc-v2 elc-v2.c el-compiler/runtime/el_runtime.c
+cc -std=c11 -I runtime -lcurl -lpthread \
+   -o elc-v2 elc-v2.c runtime/el_runtime.c
 
 # Compile again with the second-generation compiler
 ./elc-v2 elc-cli.el elc-v3.c
@@ -880,9 +880,9 @@ This is the planned path. It does not exist yet.
 | `el-compiler/src/parser.el` | Recursive descent parser. `parse(tokens)` → AST. All statement and expression forms | 1071 |
 | `el-compiler/src/codegen.el` | C code emitter. `codegen(stmts, source)` → (streams to stdout). Expression codegen, statement codegen, function codegen, type tracking, capability enforcement, temporal type dispatch | 2721 |
 | `el-compiler/src/codegen-js.el` | JavaScript backend. `codegen_js(stmts, source)` → JS source | ~500 |
-| `el-compiler/runtime/el_runtime.h` | Full runtime API declaration | 755 |
-| `el-compiler/runtime/el_runtime.c` | Full runtime implementation | large |
-| `el-compiler/runtime/el_runtime.js` | JS runtime | — |
+| `runtime/el_runtime.h` | Full runtime API declaration | 755 |
+| `runtime/el_runtime.c` | Full runtime implementation | large |
+| `runtime/el_runtime.js` | JS runtime | — |
 | `elb.el` | Build coordinator. Reads `manifest.el`, walks import graph, compiles modules, links binary. The `.NET`-style incremental build model | 367 |
 | `elc-combined.el` | Pre-merged single-file bootstrap edition (for early bootstrap iterations) | large |
 | `spec/language.md` | Language specification v1.2.0 | — |

lang/el-compiler/src/codegen-js.el

@@ -1202,7 +1202,7 @@ fn codegen_js_inner(stmts: [Map<String, Any>], source: String, bundle_mode: Bool
         js_emit_line(js_strip_es_exports(runtime_content))
         js_emit_line("")
     } else {
-        js_emit_line("// Runtime: foundation/el/el-compiler/runtime/el_runtime.js")
+        js_emit_line("// Runtime: foundation/el/runtime/el_runtime.js")
         js_emit_line("import \"./el_runtime.js\";")
     }
     // In module mode: destructure all builtins off globalThis.__el so call

lang/el-compiler/src/parser.el

@@ -23,10 +23,29 @@ fn tok_at(tokens: [Any], pos: Int) -> Map<String, Any> {
 }
 
 fn tok_kind(tokens: [Any], pos: Int) -> String {
+    // Out-of-range reads must report the Eof sentinel so every `== "Eof"`
+    // termination guard in the parser fires. Without this, reading past the
+    // single trailing Eof token returns runtime null (el_list_get OOB -> 0),
+    // which matches no delimiter, letting inner parse loops append AST nodes
+    // forever on malformed input -> unbounded allocation -> OOM.
+    let n: Int = native_list_len(tokens) / 2
+    if pos < 0 {
+        return "Eof"
+    }
+    if pos >= n {
+        return "Eof"
+    }
     native_list_get(tokens, pos * 2)
 }
 
 fn tok_value(tokens: [Any], pos: Int) -> String {
+    let n: Int = native_list_len(tokens) / 2
+    if pos < 0 {
+        return ""
+    }
+    if pos >= n {
+        return ""
+    }
     native_list_get(tokens, pos * 2 + 1)
 }
 
@@ -35,7 +54,12 @@ fn expect(tokens: [Any], pos: Int, kind: String) -> Int {
     if k == kind {
         return pos + 1
     }
-    // On mismatch just advance; error recovery is best-effort
+    // On mismatch, error recovery is best-effort. But never step PAST the Eof
+    // sentinel: once at Eof a mismatch means the input ended early, and
+    // advancing would run the cursor off the token list.
+    if k == "Eof" {
+        return pos
+    }
     pos + 1
 }
 

lang/elb.el

@@ -305,7 +305,14 @@ fn link_binary(c_files: [String], out_bin: String, runtime_path: String, out_dir
     // prefix and add it if present (no-op on Linux where libssl is in /usr/lib).
     let ossl_lib_flag: String = "$(brew --prefix openssl 2>/dev/null | xargs -I{} printf -- '-L{}/lib' 2>/dev/null || true)"
     let ossl_inc_flag: String = "$(brew --prefix openssl 2>/dev/null | xargs -I{} printf -- '-I{}/include' 2>/dev/null || true)"
-    let parts = native_list_append(parts, "cc -O2 " + bracket_flag + " " + ossl_inc_flag + " -I " + dirname_of(runtime_path) + " -I " + out_dir)
+    // Force-include the C-level master declarations header so every translation
+    // unit sees all cross-module function signatures. Handles packages (like ELP)
+    // where modules call each other without explicit El import statements.
+    // The header is generated by elb --gen-decls or manually placed in out_dir.
+    let master_decls: String = out_dir + "/elp-c-decls.h"
+    let has_master: String = str_trim(exec_capture("test -f " + master_decls + " && echo yes || echo no"))
+    let include_flag: String = if str_eq(has_master, "yes") { "-include " + master_decls } else { "" }
+    let parts = native_list_append(parts, "cc -O2 " + bracket_flag + " " + ossl_inc_flag + " " + include_flag + " -I " + dirname_of(runtime_path) + " -I " + out_dir)
     let i = 0
     while i < n {
         let f: String = native_list_get(c_files, i)
@@ -361,13 +368,13 @@ fn main() -> Void {
         let which_out: String = str_trim(exec_capture("which " + elc_bin + " 2>/dev/null"))
         if !str_eq(which_out, "") {
             let elc_dir: String = dirname_of(which_out)
-            runtime_path = elc_dir + "/../el-compiler/runtime/el_runtime.c"
+            runtime_path = elc_dir + "/../runtime/el_runtime.c"
         }
     }
     // If --runtime points to a directory, auto-locate el_runtime.c inside it.
     // This lets both forms work:
-    //   --runtime=/opt/el/el-compiler/runtime          (directory form)
-    //   --runtime=/opt/el/el-compiler/runtime/el_runtime.c  (file form)
+    //   --runtime=/opt/el/runtime          (directory form)
+    //   --runtime=/opt/el/runtime/el_runtime.c  (file form)
     if !str_eq(runtime_path, "") {
         let is_dir: String = str_trim(exec_capture("test -d " + runtime_path + " && echo dir || echo file"))
         if str_eq(is_dir, "dir") {

lang/examples/html-page.el

@@ -6,8 +6,8 @@
 //
 // Compile and run:
 //   ./dist/platform/elc examples/html-page.el > /tmp/html-page.c
-//   cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
-//      -o /tmp/html-page /tmp/html-page.c el-compiler/runtime/el_runtime.c
+//   cc -std=c11 -I runtime -lcurl -lpthread \
+//      -o /tmp/html-page /tmp/html-page.c runtime/el_runtime.c
 //   /tmp/html-page
 
 fn render_item(item: String) -> String {

lang/releases/v1.0.0-20260501/RELEASE.md

@@ -1,28 +0,0 @@
-# El Compiler Release v1.0.0 — 2026-05-02
-
-## Components
-- `bootstrap.py` — El language compiler (Python, recursive descent parser, emits C)
-- `el_runtime.c` — El runtime (C, HTTP server, engram, DHARMA, LLM chain)
-- `el_runtime.h` — Runtime public API header
-
-## Changes in this release
-
-### Critical bug fixes
-- `state_set`/`state_get` are now thread-safe (pthread_mutex). Was racing across 64 worker threads.
-- `looks_like_string` threshold raised from 1,000,000 to 4GB. Unix timestamps were being dereferenced as heap pointers.
-- `fs_read` guards against negative `ftell` result (pipe/special file overflow).
-
-### Engram architecture (major)
-- Two-layer activation: `background_activation` (Layer 1, broad fan-out) + `working_memory_weight` (Layer 2, executive filter)
-- Inhibitory edges: `EngramEdge.inhibitory` flag suppresses working memory promotion without affecting background activation
-- Suppression memory: `suppression_count` — nodes activated-but-suppressed accumulate pressure toward breakthrough
-- Temporal decay: `temporal_decay_rate`, `created_at`, `last_activated_at`, `activation_count` on EngramNode
-- Per-type activation thresholds (Safety: 0.05, Canonical: 0.15, Lesson: 0.25, Note: 0.40)
-- Temporal range query: `engram_query_range(start_ms, end_ms)`
-- Layered consciousness: `EngramLayer` struct, `layer_id` on nodes and edges, `EngramStore.layers[]`
-- Layer 0 override pass: safety layer fires last and cannot be suppressed
-
-## SHA256
-bootstrap.py
-el_runtime.c
-el_runtime.h

lang/runtime/ElBridge.java

@@ -0,0 +1,711 @@
+/*
+ * ElBridge.java — Android Java companion to el_android.c.
+ *
+ * All public methods are static. The C JNI layer calls these to create views,
+ * set properties, and manage the widget tree. Views are identified by integer
+ * slot indices matching the C-side handle values.
+ *
+ * Threading: every method that touches a View dispatches to the UI thread
+ * using Activity.runOnUiThread(Runnable) and blocks with a CountDownLatch
+ * until the UI thread completes the operation. This mirrors the AppKit
+ * dispatch_sync(main_queue, ^{}) pattern in el_appkit.m.
+ *
+ * Callbacks: Java sets listeners on views that call back into C via:
+ *   nativeOnClick(int slot)
+ *   nativeOnChange(int slot, String text)
+ *   nativeOnSubmit(int slot, String text)
+ * These are declared native and implemented in el_android.c.
+ *
+ * Usage (in your Activity.onCreate):
+ *   System.loadLibrary("elruntime");
+ *   ElBridge.init(this);
+ *
+ * The native library calls __native_init() which calls nativeRegisterActivity
+ * via the C side; alternatively call ElBridge.init(this) directly from Java.
+ *
+ * Compile requirements:
+ *   Android minSdkVersion 21 (Lollipop) or higher.
+ *   No third-party dependencies — uses only android.* framework classes.
+ *   For image loading from arbitrary file paths, BitmapFactory is used.
+ *   To replace with Glide/Picasso, edit createImageView only.
+ */
+
+package com.neuron.el;
+
+import android.app.Activity;
+import android.content.Context;
+import android.graphics.Bitmap;
+import android.graphics.BitmapFactory;
+import android.graphics.Color;
+import android.graphics.Typeface;
+import android.graphics.drawable.GradientDrawable;
+import android.os.Handler;
+import android.os.Looper;
+import android.text.Editable;
+import android.text.InputType;
+import android.text.TextWatcher;
+import android.view.Gravity;
+import android.view.View;
+import android.view.ViewGroup;
+import android.widget.Button;
+import android.widget.EditText;
+import android.widget.FrameLayout;
+import android.widget.ImageView;
+import android.widget.LinearLayout;
+import android.widget.ScrollView;
+import android.widget.TextView;
+
+import java.util.concurrent.CountDownLatch;
+
+public class ElBridge {
+
+    /* ── Native callbacks (implemented in el_android.c) ─────────────────── */
+
+    public static native void nativeOnClick(int slot);
+    public static native void nativeOnChange(int slot, String text);
+    public static native void nativeOnSubmit(int slot, String text);
+    public static native void nativeRegisterActivity(Activity activity);
+
+    /* ── State ───────────────────────────────────────────────────────────── */
+
+    private static final int MAX_SLOTS = 4096;
+
+    private static Activity   sActivity;
+    private static Handler    sUiHandler;
+    private static View[]     sViews    = new View[MAX_SLOTS];
+    private static int        sNextSlot = 1;   /* slot 0 reserved / null */
+
+    /* ── Init ────────────────────────────────────────────────────────────── */
+
+    /**
+     * Must be called from the Activity before any widget operations.
+     * Typically called from Activity.onCreate after System.loadLibrary.
+     */
+    public static void init(Activity activity) {
+        sActivity  = activity;
+        sUiHandler = new Handler(Looper.getMainLooper());
+        nativeRegisterActivity(activity);
+    }
+
+    /* ── Slot management ─────────────────────────────────────────────────── */
+
+    private static int allocSlot(View v) {
+        /* Find a free slot starting from sNextSlot, wrap around. */
+        for (int i = 0; i < MAX_SLOTS - 1; i++) {
+            int idx = ((sNextSlot - 1 + i) % (MAX_SLOTS - 1)) + 1;
+            if (sViews[idx] == null) {
+                sViews[idx] = v;
+                sNextSlot = (idx % (MAX_SLOTS - 1)) + 1;
+                return idx;
+            }
+        }
+        android.util.Log.e("ElBridge", "allocSlot: slot table full");
+        return -1;
+    }
+
+    private static View getView(int slot) {
+        if (slot <= 0 || slot >= MAX_SLOTS) return null;
+        return sViews[slot];
+    }
+
+    /* ── UI-thread dispatch helper ───────────────────────────────────────── */
+
+    /*
+     * Dispatch r on the UI thread and block until it completes.
+     * Safe to call from the UI thread itself (runs inline without posting).
+     */
+    private static void runSync(final Runnable r) {
+        if (Looper.myLooper() == Looper.getMainLooper()) {
+            r.run();
+        } else {
+            final CountDownLatch latch = new CountDownLatch(1);
+            sUiHandler.post(new Runnable() {
+                @Override public void run() {
+                    try { r.run(); } finally { latch.countDown(); }
+                }
+            });
+            try { latch.await(); } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+            }
+        }
+    }
+
+    /* ── Integer slot returning runSync helper ───────────────────────────── */
+
+    private interface IntSupplier { int get(); }
+
+    private static int runSyncInt(final IntSupplier s) {
+        final int[] result = { -1 };
+        runSync(new Runnable() {
+            @Override public void run() { result[0] = s.get(); }
+        });
+        return result[0];
+    }
+
+    /* ── Context accessor ────────────────────────────────────────────────── */
+
+    private static Context ctx() { return sActivity; }
+
+    /* ── View creation ───────────────────────────────────────────────────── */
+
+    /**
+     * Create a LinearLayout.
+     * @param orientation 1=VERTICAL, 0=HORIZONTAL
+     * @param spacing     gap between children in dp; applied as bottom/right margin
+     */
+    public static int createLinearLayout(final int orientation, final int spacing) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                LinearLayout ll = new LinearLayout(ctx());
+                ll.setOrientation(orientation == 1
+                        ? LinearLayout.VERTICAL
+                        : LinearLayout.HORIZONTAL);
+                ll.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                /* Spacing is stored so addChild can apply margins. */
+                ll.setTag(R_TAG_SPACING, spacing);
+                return allocSlot(ll);
+            }
+        });
+    }
+
+    /** Create a FrameLayout (ZStack equivalent). */
+    public static int createFrameLayout() {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                FrameLayout fl = new FrameLayout(ctx());
+                fl.setLayoutParams(new FrameLayout.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(fl);
+            }
+        });
+    }
+
+    /** Create a ScrollView. */
+    public static int createScrollView() {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                ScrollView sv = new ScrollView(ctx());
+                sv.setLayoutParams(new ScrollView.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.MATCH_PARENT));
+                sv.setFillViewport(true);
+                return allocSlot(sv);
+            }
+        });
+    }
+
+    /** Create a TextView with initial text. */
+    public static int createTextView(final String text) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                TextView tv = new TextView(ctx());
+                tv.setText(text != null ? text : "");
+                tv.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(tv);
+            }
+        });
+    }
+
+    /** Create a Button with a label. */
+    public static int createButton(final String label) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                Button btn = new Button(ctx());
+                btn.setText(label != null ? label : "");
+                btn.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(btn);
+            }
+        });
+    }
+
+    /**
+     * Create an EditText.
+     * @param placeholder hint text
+     * @param singleLine  true = single-line text field; false = multi-line text area
+     */
+    public static int createEditText(final String placeholder, final boolean singleLine) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                EditText et = new EditText(ctx());
+                et.setHint(placeholder != null ? placeholder : "");
+                if (singleLine) {
+                    et.setInputType(InputType.TYPE_CLASS_TEXT
+                            | InputType.TYPE_TEXT_FLAG_NO_SUGGESTIONS);
+                    et.setMaxLines(1);
+                    et.setSingleLine(true);
+                } else {
+                    et.setInputType(InputType.TYPE_CLASS_TEXT
+                            | InputType.TYPE_TEXT_FLAG_MULTI_LINE);
+                    et.setMinLines(3);
+                    et.setSingleLine(false);
+                    et.setGravity(Gravity.TOP | Gravity.START);
+                }
+                et.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.MATCH_PARENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(et);
+            }
+        });
+    }
+
+    /**
+     * Create an ImageView, loading from a file path via BitmapFactory.
+     * If path is null/empty the ImageView is created with no image.
+     */
+    public static int createImageView(final String path) {
+        return runSyncInt(new IntSupplier() {
+            @Override public int get() {
+                ImageView iv = new ImageView(ctx());
+                iv.setScaleType(ImageView.ScaleType.FIT_CENTER);
+                iv.setAdjustViewBounds(true);
+                if (path != null && !path.isEmpty()) {
+                    Bitmap bmp = BitmapFactory.decodeFile(path);
+                    if (bmp != null) {
+                        iv.setImageBitmap(bmp);
+                    } else {
+                        android.util.Log.w("ElBridge",
+                                "createImageView: failed to decode " + path);
+                    }
+                }
+                iv.setLayoutParams(new LinearLayout.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT));
+                return allocSlot(iv);
+            }
+        });
+    }
+
+    /* ── Window operations ───────────────────────────────────────────────── */
+
+    /** Set the Activity's content view to the view at slot. */
+    public static void setContentView(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null && sActivity != null) {
+                    sActivity.setContentView(v);
+                }
+            }
+        });
+    }
+
+    /** Set the Activity title. */
+    public static void setTitle(final String title) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                if (sActivity != null) {
+                    sActivity.setTitle(title != null ? title : "");
+                }
+            }
+        });
+    }
+
+    /* ── Tree operations ─────────────────────────────────────────────────── */
+
+    /**
+     * Add child view to parent view.
+     * LinearLayout: child added as arranged child with spacing margin.
+     * ScrollView: child replaces current document view.
+     * FrameLayout / other ViewGroup: plain addView.
+     */
+    public static void addChild(final int parentSlot, final int childSlot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View parent = getView(parentSlot);
+                View child  = getView(childSlot);
+                if (parent == null || child == null) return;
+
+                /* Remove child from existing parent first. */
+                if (child.getParent() instanceof ViewGroup) {
+                    ((ViewGroup) child.getParent()).removeView(child);
+                }
+
+                if (parent instanceof LinearLayout) {
+                    LinearLayout ll = (LinearLayout) parent;
+                    Object tag = ll.getTag(R_TAG_SPACING);
+                    int spacing = (tag instanceof Integer) ? (Integer) tag : 0;
+                    LinearLayout.LayoutParams lp;
+                    Object existingLp = child.getLayoutParams();
+                    if (existingLp instanceof LinearLayout.LayoutParams) {
+                        lp = (LinearLayout.LayoutParams) existingLp;
+                    } else {
+                        lp = new LinearLayout.LayoutParams(
+                                ViewGroup.LayoutParams.WRAP_CONTENT,
+                                ViewGroup.LayoutParams.WRAP_CONTENT);
+                    }
+                    /* Apply spacing as margin on the leading/top edge (after first child). */
+                    if (ll.getChildCount() > 0 && spacing > 0) {
+                        int px = dpToPx(spacing);
+                        if (ll.getOrientation() == LinearLayout.VERTICAL) {
+                            lp.topMargin = px;
+                        } else {
+                            lp.leftMargin = px;
+                        }
+                    }
+                    child.setLayoutParams(lp);
+                    ll.addView(child);
+                } else if (parent instanceof ScrollView) {
+                    ScrollView sv = (ScrollView) parent;
+                    sv.removeAllViews();
+                    sv.addView(child);
+                } else if (parent instanceof ViewGroup) {
+                    ((ViewGroup) parent).addView(child);
+                }
+            }
+        });
+    }
+
+    /** Remove child from its parent. */
+    public static void removeChild(final int parentSlot, final int childSlot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View parent = getView(parentSlot);
+                View child  = getView(childSlot);
+                if (parent instanceof ViewGroup && child != null) {
+                    ((ViewGroup) parent).removeView(child);
+                }
+            }
+        });
+    }
+
+    /** Remove the view from its parent and release the slot. */
+    public static void destroyView(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                if (v.getParent() instanceof ViewGroup) {
+                    ((ViewGroup) v.getParent()).removeView(v);
+                }
+                sViews[slot] = null;
+            }
+        });
+    }
+
+    /* ── Property setters ────────────────────────────────────────────────── */
+
+    public static void setText(final int slot, final String text) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                String s = text != null ? text : "";
+                if (v instanceof EditText) {
+                    ((EditText) v).setText(s);
+                } else if (v instanceof Button) {
+                    ((Button) v).setText(s);
+                } else if (v instanceof TextView) {
+                    ((TextView) v).setText(s);
+                }
+            }
+        });
+    }
+
+    public static String getText(final int slot) {
+        final String[] result = { "" };
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v instanceof TextView) {
+                    CharSequence cs = ((TextView) v).getText();
+                    result[0] = cs != null ? cs.toString() : "";
+                }
+            }
+        });
+        return result[0];
+    }
+
+    /** Set foreground text color. Components in [0,1]. */
+    public static void setTextColor(final int slot, final float r, final float g,
+                                     final float b, final float a) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v instanceof TextView) {
+                    ((TextView) v).setTextColor(floatToArgb(r, g, b, a));
+                }
+            }
+        });
+    }
+
+    /** Set background color using a GradientDrawable so corner radius is preserved. */
+    public static void setBackgroundColor(final int slot, final float r, final float g,
+                                           final float b, final float a) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ensureGradientBackground(v);
+                GradientDrawable gd = (GradientDrawable) v.getBackground();
+                gd.setColor(floatToArgb(r, g, b, a));
+            }
+        });
+    }
+
+    /**
+     * Set font family and size.
+     * family: "system" or null → system default; otherwise tries to load by name.
+     * bold: if true uses Typeface.BOLD.
+     */
+    public static void setFont(final int slot, final String family,
+                                final int sizeSp, final boolean bold) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (!(v instanceof TextView)) return;
+                TextView tv = (TextView) v;
+                Typeface tf;
+                if (family != null && !family.isEmpty()
+                        && !family.equals("system")) {
+                    Typeface base = Typeface.create(family,
+                            bold ? Typeface.BOLD : Typeface.NORMAL);
+                    tf = (base != null) ? base
+                            : Typeface.defaultFromStyle(bold ? Typeface.BOLD : Typeface.NORMAL);
+                } else {
+                    tf = Typeface.defaultFromStyle(bold ? Typeface.BOLD : Typeface.NORMAL);
+                }
+                tv.setTypeface(tf);
+                tv.setTextSize(android.util.TypedValue.COMPLEX_UNIT_SP, sizeSp);
+            }
+        });
+    }
+
+    /** Set padding in dp. */
+    public static void setPadding(final int slot, final int top, final int right,
+                                   final int bottom, final int left) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null) {
+                    v.setPadding(dpToPx(left), dpToPx(top), dpToPx(right), dpToPx(bottom));
+                }
+            }
+        });
+    }
+
+    /** Set explicit width in dp. Passes MATCH_PARENT for negative values. */
+    public static void setWidth(final int slot, final int widthDp) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ViewGroup.LayoutParams lp = v.getLayoutParams();
+                if (lp == null) lp = new ViewGroup.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT);
+                lp.width = widthDp < 0
+                        ? ViewGroup.LayoutParams.MATCH_PARENT
+                        : dpToPx(widthDp);
+                v.setLayoutParams(lp);
+            }
+        });
+    }
+
+    /** Set explicit height in dp. */
+    public static void setHeight(final int slot, final int heightDp) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ViewGroup.LayoutParams lp = v.getLayoutParams();
+                if (lp == null) lp = new ViewGroup.LayoutParams(
+                        ViewGroup.LayoutParams.WRAP_CONTENT,
+                        ViewGroup.LayoutParams.WRAP_CONTENT);
+                lp.height = heightDp < 0
+                        ? ViewGroup.LayoutParams.MATCH_PARENT
+                        : dpToPx(heightDp);
+                v.setLayoutParams(lp);
+            }
+        });
+    }
+
+    /**
+     * Set flex weight on a child of a LinearLayout.
+     * flex > 0 → weight = flex, width/height = 0dp (expand).
+     * flex == 0 → weight = 0, wrap_content (shrink to content).
+     */
+    public static void setFlex(final int slot, final int flex) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ViewGroup.LayoutParams lp = v.getLayoutParams();
+                if (lp instanceof LinearLayout.LayoutParams) {
+                    LinearLayout.LayoutParams llp = (LinearLayout.LayoutParams) lp;
+                    if (flex > 0) {
+                        llp.weight = (float) flex;
+                        /* Determine orientation from parent to set 0dp on the right axis. */
+                        if (v.getParent() instanceof LinearLayout) {
+                            LinearLayout parent = (LinearLayout) v.getParent();
+                            if (parent.getOrientation() == LinearLayout.VERTICAL) {
+                                llp.height = 0;
+                            } else {
+                                llp.width = 0;
+                            }
+                        }
+                    } else {
+                        llp.weight = 0f;
+                    }
+                    v.setLayoutParams(llp);
+                }
+            }
+        });
+    }
+
+    /** Set corner radius in dp using a GradientDrawable background. */
+    public static void setCornerRadius(final int slot, final float radiusDp) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                ensureGradientBackground(v);
+                GradientDrawable gd = (GradientDrawable) v.getBackground();
+                gd.setCornerRadius(dpToPxF(radiusDp));
+            }
+        });
+    }
+
+    public static void setEnabled(final int slot, final boolean enabled) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null) v.setEnabled(enabled);
+            }
+        });
+    }
+
+    /**
+     * Show or hide a view.
+     * @param visible true = VISIBLE, false = GONE (matches AppKit setHidden semantics)
+     */
+    public static void setVisibility(final int slot, final boolean visible) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v != null) v.setVisibility(visible ? View.VISIBLE : View.GONE);
+            }
+        });
+    }
+
+    /* ── Event listener registration ─────────────────────────────────────── */
+
+    /** Register an OnClickListener that calls back into C nativeOnClick. */
+    public static void setOnClickListener(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (v == null) return;
+                final int capturedSlot = slot;
+                v.setOnClickListener(new View.OnClickListener() {
+                    @Override public void onClick(View view) {
+                        nativeOnClick(capturedSlot);
+                    }
+                });
+            }
+        });
+    }
+
+    /**
+     * Register a TextWatcher on an EditText that calls back nativeOnChange
+     * for every text change.
+     */
+    public static void setOnChangeListener(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (!(v instanceof EditText)) return;
+                final int capturedSlot = slot;
+                ((EditText) v).addTextChangedListener(new TextWatcher() {
+                    @Override public void beforeTextChanged(CharSequence s, int start,
+                                                             int count, int after) {}
+                    @Override public void onTextChanged(CharSequence s, int start,
+                                                         int before, int count) {}
+                    @Override public void afterTextChanged(Editable s) {
+                        nativeOnChange(capturedSlot, s != null ? s.toString() : "");
+                    }
+                });
+            }
+        });
+    }
+
+    /**
+     * Register an OnEditorActionListener on a single-line EditText that calls
+     * nativeOnSubmit when the user presses the action/enter key.
+     */
+    public static void setOnSubmitListener(final int slot) {
+        runSync(new Runnable() {
+            @Override public void run() {
+                View v = getView(slot);
+                if (!(v instanceof EditText)) return;
+                final int capturedSlot = slot;
+                ((EditText) v).setOnEditorActionListener(
+                        new TextView.OnEditorActionListener() {
+                    @Override
+                    public boolean onEditorAction(TextView tv, int actionId,
+                                                   android.view.KeyEvent event) {
+                        nativeOnSubmit(capturedSlot,
+                                tv.getText() != null ? tv.getText().toString() : "");
+                        return true;
+                    }
+                });
+            }
+        });
+    }
+
+    /* ── Internal helpers ─────────────────────────────────────────────────── */
+
+    /*
+     * Tag key used to stash the spacing value on LinearLayouts so addChild
+     * can apply the correct margin between children.
+     * We use a stable integer resource-id-like value; because we do not have
+     * a resources file here we use View.generateViewId() lazily.
+     */
+    private static int sSpacingTagKey = 0;
+
+    private static int R_TAG_SPACING;
+    static {
+        R_TAG_SPACING = View.generateViewId();
+    }
+
+    /** Convert dp to pixels using the Activity's display metrics. */
+    private static int dpToPx(float dp) {
+        if (sActivity == null) return (int) dp;
+        float density = sActivity.getResources().getDisplayMetrics().density;
+        return Math.round(dp * density);
+    }
+
+    private static float dpToPxF(float dp) {
+        if (sActivity == null) return dp;
+        float density = sActivity.getResources().getDisplayMetrics().density;
+        return dp * density;
+    }
+
+    /** Convert RGBA float components (0–1) to an Android ARGB int. */
+    private static int floatToArgb(float r, float g, float b, float a) {
+        int ai = Math.round(a * 255f);
+        int ri = Math.round(r * 255f);
+        int gi = Math.round(g * 255f);
+        int bi = Math.round(b * 255f);
+        return Color.argb(ai, ri, gi, bi);
+    }
+
+    /**
+     * Ensure the view has a GradientDrawable background so that both color
+     * and corner radius can be set independently.  If the current background
+     * is already a GradientDrawable it is reused; otherwise a new transparent
+     * one is installed.
+     */
+    private static void ensureGradientBackground(View v) {
+        if (!(v.getBackground() instanceof GradientDrawable)) {
+            GradientDrawable gd = new GradientDrawable();
+            gd.setColor(Color.TRANSPARENT);
+            v.setBackground(gd);
+        }
+    }
+}

lang/runtime/PLATFORM_BRIDGE_SPEC.md

@@ -0,0 +1,554 @@
+# Platform Bridge Specification — el-native
+
+This document is the authoritative reference for anyone implementing a new platform bridge for the el-native widget system. Read it top to bottom before writing a single line of code.
+
+---
+
+## What a Platform Bridge Is
+
+The el compiler (`elc`) emits C code. That C code calls `__`-prefixed functions for everything OS-related: printing, file I/O, threading, and — when building a native UI app — widget creation and event handling. These `__` functions are the *OS boundary*.
+
+For native UI, the bridge is the translation layer between that fixed C API and whatever platform toolkit you are targeting. The bridge owns:
+
+1. A **slot table** of up to 4096 widget objects, indexed by `int64_t` handle.
+2. Implementations of all 33 `__*` widget functions declared in `el_native_target.h`.
+3. Callback dispatch from platform events back into El function symbols resolved via `dlsym` (or a platform equivalent).
+
+The thin wrappers in `el_seed.c` (`#ifdef EL_TARGET_*` blocks) marshal between `el_val_t` and native C types, then call through to the bridge. The bridge itself never touches `el_val_t` — it works only with plain C types (`int64_t`, `const char*`, `int`, `float`).
+
+**Existing bridges:**
+
+| File | Platform | Toolkit | Language |
+|------|----------|---------|----------|
+| `el_appkit.m` | macOS | AppKit | ObjC (MRC) |
+| `el_gtk4.c` | Linux | GTK4 | C |
+| `el_win32.c` | Windows | Win32/ComCtl | C |
+| `el_uikit.m` | iOS | UIKit | ObjC (MRC) |
+| `el_android.c` + `ElBridge.java` | Android | View/JNI | C + Java |
+| `el_sdl2.c` | Embedded Linux / Pi | SDL2 | C |
+| `el_lvgl.c` | Microcontrollers | LVGL | C |
+
+---
+
+## The Slot System
+
+Every widget — window, button, label, container, image — is stored in a static array:
+
+```c
+#define EL_<PLATFORM>_MAX_WIDGETS 4096
+
+typedef struct {
+    ElWidgetKind  kind;
+    /* platform-specific object reference (pointer, handle, ID...) */
+    /* callback names */
+    char*         cb_click;
+    char*         cb_change;
+} ElWidget;
+
+static ElWidget _el_widgets[EL_<PLATFORM>_MAX_WIDGETS];
+```
+
+Rules:
+- **Slot 0 is never valid.** Scan starts at index 1. This ensures 0 is never a valid handle.
+- **Handle = slot index.** An `int64_t` value returned to El code is a direct index into `_el_widgets[]`.
+- **-1 = invalid.** All create functions return -1 on failure (table full, platform API error).
+- **Slot is FREE until allocated, FREE again after destroy.** Use an `ElWidgetKind` enum where `0 = EL_WIDGET_FREE` to track liveness.
+- **4096 slots is the system-wide maximum.** This is intentional and sufficient for any realistic UI. Do not increase it without a compelling reason.
+
+### Slot allocation and release pattern
+
+```c
+static int64_t el_widget_alloc(ElWidgetKind kind, /* platform object ref */) {
+    for (int i = 1; i < EL_<PLATFORM>_MAX_WIDGETS; i++) {
+        if (_el_widgets[i].kind == EL_WIDGET_FREE) {
+            _el_widgets[i].kind     = kind;
+            /* store platform object ref — retain/addref if needed */
+            _el_widgets[i].cb_click  = NULL;
+            _el_widgets[i].cb_change = NULL;
+            return (int64_t)i;
+        }
+    }
+    return -1; /* table full */
+}
+
+static ElWidget* el_widget_get(int64_t handle) {
+    if (handle <= 0 || handle >= EL_<PLATFORM>_MAX_WIDGETS) return NULL;
+    if (_el_widgets[handle].kind == EL_WIDGET_FREE) return NULL;
+    return &_el_widgets[handle];
+}
+
+static void el_widget_free(int64_t handle) {
+    ElWidget* w = el_widget_get(handle);
+    if (!w) return;
+    /* release platform object ref */
+    w->kind = EL_WIDGET_FREE;
+    free(w->cb_click);  w->cb_click  = NULL;
+    free(w->cb_change); w->cb_change = NULL;
+}
+```
+
+**NULL handle guard:** `el_widget_get` must return `NULL` for any handle that is 0, negative, out of range, or points to a `FREE` slot. Every `__` function that takes a handle must null-check the result of `el_widget_get` before doing anything. Failing to do so causes crashes or corruption when El code passes an uninitialized handle.
+
+---
+
+## The 33 Required Functions
+
+Every bridge must implement all 33 functions listed below. They are grouped by category. The signatures shown are from `el_native_target.h` and from `el_seed.c`'s wrapper layer; the bridge itself uses plain C types (the wrappers do the `el_val_t` ↔ C-type conversion).
+
+### Internal C signatures (what the bridge implements)
+
+These are what your `.c` / `.m` file defines. The `el_seed.c` wrappers call these.
+
+#### Lifecycle (2 functions)
+
+```c
+void el_<platform>_init(void);
+```
+**Purpose:** Initialize the platform UI toolkit. Must be idempotent (safe to call more than once). Called once from `__native_init` before any widget creation.  
+**Edge cases:** On platforms where the toolkit must be initialized before a display connection is established (X11, Wayland), this is where that happens. On Android, this is a no-op because ElBridge.java calls init from Java.
+
+```c
+void el_<platform>_run_loop(void);
+```
+**Purpose:** Start the platform event loop. On most platforms this **never returns**. Exceptions: Android (the loop is Java-managed — this must be a no-op) and headless test builds.  
+**Edge cases:** Must be called from the main thread. On iOS/UIKit, calls `UIApplicationMain` which never returns; El code must set `el_main_entry_fn` before calling this.
+
+#### Window (3 functions)
+
+```c
+int64_t el_<platform>_window_create(const char* title, int w, int h, int mw, int mh);
+```
+**Purpose:** Create a top-level window. `w`/`h` = initial size in logical pixels. `mw`/`mh` = minimum size (0 = no minimum).  
+**Returns:** Slot handle, or -1 on failure.  
+**Edge cases:** NULL or empty `title` must be handled gracefully (use `""`). On mobile (iOS, Android), the concept of a "window" maps to the root view controller / activity root view — create that here.
+
+```c
+void el_<platform>_window_show(int64_t handle);
+```
+**Purpose:** Make the window visible. On some platforms windows are hidden at creation; this makes them appear.  
+**Edge cases:** NULL handle → return silently. Calling on an already-visible window is a no-op.
+
+```c
+void el_<platform>_window_set_title(int64_t handle, const char* title);
+```
+**Purpose:** Update the window's title bar text at runtime.  
+**Edge cases:** NULL handle or NULL title → no-op.
+
+#### Layout containers (4 functions)
+
+```c
+int64_t el_<platform>_vstack_create(int spacing);
+int64_t el_<platform>_hstack_create(int spacing);
+```
+**Purpose:** Create a vertical/horizontal linear container. `spacing` = gap between children in logical pixels.  
+**Returns:** Slot handle, or -1.  
+**Edge cases:** spacing = 0 is valid and common.
+
+```c
+int64_t el_<platform>_zstack_create(void);
+```
+**Purpose:** Create a z-axis layered container (children overlap, no stacking direction). Used for overlays.  
+**Returns:** Slot handle, or -1.
+
+```c
+int64_t el_<platform>_scroll_create(void);
+```
+**Purpose:** Create a scrollable container. Scrolls vertically by default. Only the first child added is the scrollable content.  
+**Returns:** Slot handle, or -1.
+
+#### Leaf widgets (5 functions)
+
+```c
+int64_t el_<platform>_label_create(const char* text);
+```
+**Purpose:** Create a non-editable text label.  
+**Edge cases:** NULL/empty text → label with empty string, not a crash.
+
+```c
+int64_t el_<platform>_button_create(const char* label);
+```
+**Purpose:** Create a clickable button. The `label` is the button's visible text.  
+**Edge cases:** The button must wire up an action target at creation time so that click callbacks registered later via `el_<platform>_widget_on_click` will fire. On platforms with target-action (AppKit, UIKit), allocate the delegate object here.
+
+```c
+int64_t el_<platform>_text_field_create(const char* placeholder);
+```
+**Purpose:** Create a single-line text input. `placeholder` is the hint text shown when empty.  
+**Edge cases:** NULL placeholder → no hint text displayed.
+
+```c
+int64_t el_<platform>_text_area_create(const char* placeholder);
+```
+**Purpose:** Create a multi-line text input (scrollable).  
+**Edge cases:** Same as text_field_create. On AppKit, this wraps NSTextView inside NSScrollView — the slot's `obj` points to the scroll view, not the text view.
+
+```c
+int64_t el_<platform>_image_create(const char* path_or_name);
+```
+**Purpose:** Create an image widget. `path_or_name` can be a filesystem path or a platform resource name. Try path first, fall back to named resource.  
+**Edge cases:** Non-existent path → create an empty image widget (do not crash). NULL → same.
+
+#### Widget properties (12 functions)
+
+```c
+void el_<platform>_widget_set_text(int64_t handle, const char* text);
+```
+**Purpose:** Update the text content of a label, button, text field, text area, or window title. Must dispatch on `kind` to use the correct API.  
+**Edge cases:** NULL handle → no-op. NULL text → treat as `""`.
+
+```c
+const char* el_<platform>_widget_get_text(int64_t handle);
+```
+**Purpose:** Return the current text of a widget. Returns a `const char*` that the `el_seed.c` wrapper wraps into an `el_val_t` string.  
+**Edge cases:** NULL handle → return `""` (never NULL). The caller in `el_seed.c` handles the `strdup` lifetime issue — see the AppKit reference implementation notes.
+
+```c
+void el_<platform>_widget_set_color(int64_t h, float r, float g, float b, float a);
+void el_<platform>_widget_set_bg_color(int64_t h, float r, float g, float b, float a);
+```
+**Purpose:** Set foreground (text) color and background color respectively. All channels are normalized floats [0.0, 1.0].  
+**Edge cases:** For containers, `set_color` may be a no-op (no text); `set_bg_color` should set the layer/surface background. On platforms without alpha compositing, clamp alpha to 0 or 1.
+
+```c
+void el_<platform>_widget_set_font(int64_t h, const char* family, int size, int bold);
+```
+**Purpose:** Set the font on a text-bearing widget. `family` = font family name or `"system"` for the platform default. `size` = point size. `bold` = 0 or 1.  
+**Edge cases:** If `family` is not found, fall back to the system font. Non-text widgets (containers, images) → no-op.
+
+```c
+void el_<platform>_widget_set_padding(int64_t h, int top, int right, int bottom, int left);
+```
+**Purpose:** Set internal padding/insets for a container or text area.  
+**Edge cases:** On platforms where padding is per-view (not per-container), map to the nearest equivalent (margin, insets, text container inset). For leaf widgets other than text areas, this may be a partial no-op.
+
+```c
+void el_<platform>_widget_set_width(int64_t h, int width);
+void el_<platform>_widget_set_height(int64_t h, int height);
+```
+**Purpose:** Apply a fixed-size constraint. `width`/`height` in logical pixels.  
+**Edge cases:** On platforms with Auto Layout or constraint systems, add a fixed-size constraint. Do not apply to windows (size is set at creation). Calling multiple times should override the previous constraint, not add another.
+
+```c
+void el_<platform>_widget_set_flex(int64_t h, int flex);
+```
+**Purpose:** Set the flex/expansion factor. `flex > 0` → the widget expands to fill available space. `flex == 0` → hugs content size.  
+**Edge cases:** Maps to content-hugging priority (AppKit), `GtkWidget::hexpand`/`vexpand` (GTK4), or layout weight (Android). For windows → no-op.
+
+```c
+void el_<platform>_widget_set_corner_radius(int64_t h, int radius);
+```
+**Purpose:** Apply rounded corners to the widget's visual layer.  
+**Edge cases:** Requires backing layer / GPU surface. On platforms without layer compositing (Win32 without DX), this may be a no-op or require manual painting. Radius in logical pixels.
+
+```c
+void el_<platform>_widget_set_disabled(int64_t h, int disabled);
+```
+**Purpose:** Enable or disable user interaction. `disabled = 1` → greyed out, non-interactive.  
+**Edge cases:** Only meaningful for interactive widgets (button, text field). For containers/labels → no-op.
+
+```c
+void el_<platform>_widget_set_hidden(int64_t h, int hidden);
+```
+**Purpose:** Show or hide the widget. `hidden = 1` → invisible but still in layout.  
+**Edge cases:** For windows, map to `orderOut`/`hide` or equivalent. For views, use `setHidden`/`gtk_widget_set_visible` or equivalent.
+
+#### Tree management (3 functions)
+
+```c
+void el_<platform>_widget_add_child(int64_t parent, int64_t child);
+```
+**Purpose:** Attach a child widget to a parent container. Dispatch on parent kind:
+- Window → add to root content view/container
+- VStack/HStack → add as arranged/linear child
+- ZStack → add as overlapping subview
+- Scroll → set as document/content view (first child only)
+- Other → add as plain subview
+
+**Edge cases:** NULL parent or child handle → no-op. Attempting to add a window as a child → no-op. Adding the same child twice is platform-defined behavior (tolerate it).
+
+```c
+void el_<platform>_widget_remove_child(int64_t parent, int64_t child);
+```
+**Purpose:** Detach child from its parent. The child slot remains allocated; the widget is not destroyed.  
+**Edge cases:** NULL handles → no-op. Child not currently attached → no-op.
+
+```c
+void el_<platform>_widget_destroy(int64_t handle);
+```
+**Purpose:** Destroy a widget: remove from superview/parent, release the platform object, release callback strings, mark slot as FREE.  
+**Edge cases:** For windows, close the window. Free any delegate/target objects stored in side tables. After destroy, the handle is invalid — El code must not use it again (this is the caller's responsibility, not enforced here).
+
+#### Event registration (3 functions)
+
+```c
+void el_<platform>_widget_on_click(int64_t h, const char* fn_name);
+void el_<platform>_widget_on_change(int64_t h, const char* fn_name);
+void el_<platform>_widget_on_submit(int64_t h, const char* fn_name);
+```
+**Purpose:** Register an El callback function by symbol name.
+- `on_click` → button press
+- `on_change` → text field value change (keystroke-level)
+- `on_submit` → text field Enter key (text field only; stored in `cb_click` slot in AppKit)
+
+The implementation stores `strdup(fn_name)` in the widget's `cb_click` or `cb_change` field. The platform event handler calls `el_<platform>_invoke_cb` (see callback ABI section).  
+**Edge cases:** NULL or empty `fn_name` → clear the callback (`free` + set NULL). Calling on a non-interactive widget (label, image) → no-op or store silently (harmless).
+
+#### Manifest reader (1 function)
+
+```c
+/* Note: __manifest_read is implemented in el_seed.c, not in the bridge. */
+/* Bridges do NOT need to implement this. */
+```
+
+`__manifest_read` is handled entirely in the platform-independent section of `el_seed.c`. It reads a JSON/EL manifest file from the path in the `EL_MANIFEST` environment variable. Bridge authors do not need to implement this.
+
+---
+
+## The Callback ABI
+
+When a platform event fires (button clicked, text changed), the bridge must call back into the El runtime. The mechanism:
+
+```c
+typedef void (*ElCb2)(int64_t handle, int64_t data);
+
+static void el_<platform>_invoke_cb(const char* fn_name, int64_t handle, const char* data) {
+    if (!fn_name || !*fn_name) return;
+    void* sym = dlsym(RTLD_DEFAULT, fn_name);
+    if (!sym) return;
+    ElCb2 fn = (ElCb2)sym;
+    fn(handle, (int64_t)(uintptr_t)(data ? data : ""));
+}
+```
+
+The El callback signature (in El source):
+```
+fn handler(handle: Int, data: String) -> Void
+```
+
+Which compiles to:
+```c
+void handler(int64_t handle, int64_t data)
+```
+
+Where `data` is a `const char*` cast to `int64_t` (the el `String` representation). For click events, `data` is `""`. For change/submit events, `data` is the current widget text.
+
+**On platforms without `dlsym`** (Windows, some embedded systems): use `GetProcAddress(GetModuleHandle(NULL), fn_name)` on Windows, or maintain a manual symbol registration table for embedded targets where dynamic linking is unavailable.
+
+**Thread safety for callbacks:** Callbacks fired from a background thread must be marshalled to the UI thread before calling into El code. El code may call `__widget_set_text` or other UI functions synchronously from within the callback — those must run on the UI thread.
+
+---
+
+## Thread Safety Contract
+
+**All platform UI operations must execute on the main/UI thread.** This is a hard requirement on every platform (AppKit, UIKit, GTK4, Win32, Android View, SDL2 main thread rule).
+
+The reference pattern (AppKit):
+```c
+static void el_appkit_sync_main(void (^block)(void)) {
+    if ([NSThread isMainThread]) {
+        block();
+    } else {
+        dispatch_sync(dispatch_get_main_queue(), block);
+    }
+}
+```
+
+For other platforms:
+- **GTK4:** `g_main_context_invoke` or `g_idle_add` + semaphore for synchronous dispatch
+- **Win32:** `SendMessage(hwnd, WM_APP, ...)` or `PostMessage` + wait
+- **Android:** `Activity.runOnUiThread`
+- **SDL2:** All ops must be called from the thread that initialized SDL (the main thread)
+- **LVGL:** `lv_lock()` / `lv_unlock()` for thread-safe access
+
+El program flow is: `main()` → build UI (on main thread) → `__native_run_loop()`. Because UI is built before the run loop starts, most widget creation calls are already on the main thread. The sync dispatch wrapper exists to handle callbacks that arrive on worker threads (e.g., network callbacks that update UI).
+
+---
+
+## Integration Pattern
+
+### In `el_native_target.h`
+
+Add an `#ifdef EL_TARGET_<PLATFORM>` block declaring all 33 `__*` functions with their `el_val_t` signatures (identical to the existing blocks for MACOS, LINUX, etc.):
+
+```c
+#ifdef EL_TARGET_<PLATFORM>
+
+void      __native_init(void);
+void      __native_run_loop(void);
+
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_<PLATFORM> */
+```
+
+### In `el_seed.c`
+
+Add an `#ifdef EL_TARGET_<PLATFORM>` block containing:
+1. `extern` declarations of all `el_<platform>_*` functions (your bridge's C API)
+2. Thin wrapper functions that marshal `el_val_t` ↔ C types and call through
+
+The wrapper pattern (copy from the `EL_TARGET_MACOS` block and substitute the platform name):
+
+```c
+#ifdef EL_TARGET_<PLATFORM>
+
+/* Forward declarations — implemented in el_<platform>.c */
+extern void    el_<platform>_init(void);
+extern void    el_<platform>_run_loop(void);
+extern int64_t el_<platform>_window_create(const char* title, int w, int h, int mw, int mh);
+/* ... all others ... */
+
+/* Wrappers */
+void __native_init(void)     { el_<platform>_init(); }
+void __native_run_loop(void) { el_<platform>_run_loop(); }
+
+el_val_t __window_create(el_val_t title, el_val_t width, el_val_t height,
+                          el_val_t min_width, el_val_t min_height) {
+    return (el_val_t)el_<platform>_window_create(
+        EL_CSTR(title),
+        (int)(int64_t)width, (int)(int64_t)height,
+        (int)(int64_t)min_width, (int)(int64_t)min_height);
+}
+
+void __window_show(el_val_t h)                  { el_<platform>_window_show((int64_t)h); }
+void __window_set_title(el_val_t h, el_val_t t) { el_<platform>_window_set_title((int64_t)h, EL_CSTR(t)); }
+
+/* ... continue for all 33 functions ... */
+
+#endif /* EL_TARGET_<PLATFORM> */
+```
+
+Key marshalling rules:
+- `el_val_t` → `int64_t` handle: `(int64_t)h`
+- `el_val_t` → `int`: `(int)(int64_t)value`
+- `el_val_t` → `const char*`: `EL_CSTR(value)`
+- `el_val_t` → `float`: `(float)el_to_float(value)` (for color channels)
+- `int64_t` handle → `el_val_t`: `(el_val_t)handle`
+- `const char*` → `el_val_t`: `EL_STR(str)` — but read the get_text note below
+
+**`__widget_get_text` note:** The bridge returns `const char*`. The `el_seed.c` wrapper wraps it with `EL_STR(s)`. The returned pointer must remain valid until the El program is done with it. The AppKit implementation returns a `strdup`'d string — the caller (seed wrapper) stores it without tracking it in the arena. This is a known lifetime edge; be consistent with the platform's existing pattern.
+
+---
+
+## How el Strings Work
+
+Inside El compiled C code, strings are `el_val_t` values where the value is the `uintptr_t` cast of a `const char*`:
+
+```c
+#define EL_STR(s)  ((el_val_t)(uintptr_t)(s))
+#define EL_CSTR(v) ((const char*)(uintptr_t)(v))
+```
+
+To construct a string result in `el_seed.c`:
+```c
+static char* s = strdup("hello");
+return EL_STR(s);
+```
+
+To read a string argument passed from El:
+```c
+const char* text = EL_CSTR(some_el_val_t_argument);
+```
+
+The `EL_STR` / `EL_CSTR` macros are defined in `el_seed.h` and are available in `el_seed.c`. Bridge files (`el_<platform>.c`) do not use these macros — they only deal in `const char*` at their API boundary.
+
+---
+
+## Known Gotchas
+
+### Duplicate symbols with `el_runtime.c`
+
+`el_runtime.c` defines many of the same `__`-prefixed symbols as `el_seed.c`. When linking both (required for the native-hello example), the linker will reject duplicate definitions. The build system uses `nmedit` (macOS) to hide the `el_runtime.c` copies of symbols that `el_seed.c` already defines, keeping `el_seed.c` canonical.
+
+If you are writing a build script for a new platform and see duplicate symbol link errors involving `__println`, `__print`, `__str_len`, etc., apply the same nmedit / `objcopy --weaken-symbol` / `strip --strip-symbol` trick from the macOS build to your platform's object file handling.
+
+### The `nmedit` trick on macOS
+
+```bash
+# Build a keep-list: symbols defined in el_seed.o but also in el_runtime.o
+nm el_seed.o   | awk '/^[0-9a-f]+ T _/{print $3}' | sort > .seed_T.txt
+nm el_runtime.o | awk '/^[0-9a-f]+ T _/{print $3}' | sort > .rt_T.txt
+# Keep only symbols unique to el_runtime.o
+comm -23 .rt_T.txt .seed_T.txt > .rt_keep.txt
+nmedit -s .rt_keep.txt el_runtime.o
+```
+
+On Linux, use `objcopy` with `--weaken-symbol` for each duplicate, or link `el_seed.o` before `el_runtime.o` and use `--allow-multiple-definition` if your use case permits it.
+
+### ObjC bridges must use MRC, not ARC
+
+Bridges that use Objective-C (AppKit, UIKit) **must** compile without ARC (`-fno-objc-arc`). The reason: the widget table stores `id` values in a plain C struct. ARC cannot insert retain/release through C struct boundaries, and will reject explicit `[obj retain]` / `[obj release]` calls in ARC mode. Use:
+
+```bash
+clang -ObjC -fno-objc-arc -framework Cocoa -c el_appkit.m
+```
+
+### Widget table struct — don't put `id` fields in C structs under ARC
+
+If you ever add ARC-managed object fields to the `ElWidget` struct, you will get a compile error. Keep the struct C-only (pointers as `void*` if you must, cast when using) or compile as MRC.
+
+### The `el_seed.c` `__manifest_read` is platform-independent
+
+`__manifest_read` is already implemented in `el_seed.c` (in the section compiled unconditionally). You do not implement it in your bridge. You do need to declare it in the `el_native_target.h` block for your platform (matching the other platforms), but `el_seed.c` already has the implementation.
+
+---
+
+## Completion Checklist
+
+Before declaring your bridge ready for integration:
+
+- [ ] All 33 `__*` functions implemented (including `__manifest_read` declaration, implementation is in seed)
+- [ ] Slot table with 4096 entries, scan starting at index 1
+- [ ] `el_widget_get` returns NULL for handle 0, negative, out-of-range, and FREE slots
+- [ ] All functions null-check `el_widget_get` result before use
+- [ ] `el_<platform>_init` is idempotent
+- [ ] `el_<platform>_run_loop` either never returns or is documented as a no-op (Android)
+- [ ] Callback dispatch via `dlsym` (or platform equivalent) implemented
+- [ ] All UI operations dispatched to the main/UI thread
+- [ ] `el_native_target.h` updated with `#ifdef EL_TARGET_<PLATFORM>` block
+- [ ] `el_seed.c` updated with `#ifdef EL_TARGET_<PLATFORM>` extern + wrapper block
+- [ ] Bridge compiles cleanly with no warnings: `cc -DEL_TARGET_<PLATFORM> -Wall -Wextra -c el_<platform>.c`
+- [ ] Bridge links cleanly with `el_seed.o` and `el_runtime.o` (duplicate symbol check)
+- [ ] `detect-platforms` script updated with detection logic for the new platform
+- [ ] Basic smoke test: create window → add label → show window → run loop

lang/runtime/detect-platforms

@@ -0,0 +1,208 @@
+#!/usr/bin/env bash
+# detect-platforms — probe available platform bridge dependencies
+#
+# Reports which el-native platform bridges can be built on this machine,
+# with install instructions for anything that is missing.
+#
+# Usage: ./detect-platforms
+#        ./build.sh platforms   (from native-hello)
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+# ── Helpers ───────────────────────────────────────────────────────────────────
+
+PASS="[+]"
+FAIL="[ ]"
+
+_ok()   { printf "  ${PASS} %-22s %s\n" "$1" "$2"; }
+_miss() { printf "  ${FAIL} %-22s %s\n" "$1" "$2"; }
+
+# ── Header ────────────────────────────────────────────────────────────────────
+
+echo ""
+echo "==> el-native platform detection"
+echo ""
+echo "  Checking build dependencies for each platform bridge..."
+echo ""
+
+AVAILABLE=0
+MISSING=0
+
+# ── macOS / AppKit ────────────────────────────────────────────────────────────
+
+if [[ "$(uname)" == "Darwin" ]]; then
+    if xcrun --find clang &>/dev/null && xcrun --find xcodebuild &>/dev/null 2>/dev/null || \
+       xcrun --find cc &>/dev/null; then
+        CLT_INFO="Xcode CLT $(xcode-select -p 2>/dev/null | sed 's|/Developer||' || echo '')"
+        _ok "macOS/AppKit" "-DEL_TARGET_MACOS  ${CLT_INFO}"
+        AVAILABLE=$((AVAILABLE + 1))
+    else
+        _miss "macOS/AppKit" "-DEL_TARGET_MACOS  (Xcode CLT missing — xcode-select --install)"
+        MISSING=$((MISSING + 1))
+    fi
+else
+    _miss "macOS/AppKit" "-DEL_TARGET_MACOS  (not on macOS)"
+fi
+
+# ── iOS / UIKit ───────────────────────────────────────────────────────────────
+
+if [[ "$(uname)" == "Darwin" ]]; then
+    if xcrun --sdk iphoneos --show-sdk-path &>/dev/null 2>&1; then
+        SDK_VER=$(xcrun --sdk iphoneos --show-sdk-version 2>/dev/null || echo "")
+        _ok "iOS/UIKit" "-DEL_TARGET_IOS  SDK ${SDK_VER} (requires Xcode.app)"
+        AVAILABLE=$((AVAILABLE + 1))
+    else
+        _miss "iOS/UIKit" "-DEL_TARGET_IOS  (iOS SDK not found — install Xcode.app)"
+        MISSING=$((MISSING + 1))
+    fi
+else
+    _miss "iOS/UIKit" "-DEL_TARGET_IOS  (not on macOS — requires Xcode)"
+fi
+
+# ── Linux / GTK4 ──────────────────────────────────────────────────────────────
+
+if pkg-config --exists gtk4 2>/dev/null; then
+    GTK_VER=$(pkg-config --modversion gtk4 2>/dev/null)
+    _ok "Linux/GTK4" "-DEL_TARGET_LINUX  gtk4 ${GTK_VER}"
+    AVAILABLE=$((AVAILABLE + 1))
+else
+    _miss "Linux/GTK4" "-DEL_TARGET_LINUX  (gtk4 not found)"
+    echo "                             Install: apt install libgtk-4-dev"
+    echo "                                   or: dnf install gtk4-devel"
+    echo "                                   or: brew install gtk4"
+    MISSING=$((MISSING + 1))
+fi
+
+# ── SDL2 / Embedded Linux / Pi ────────────────────────────────────────────────
+
+SDL2_OK=0
+if pkg-config --exists sdl2 2>/dev/null; then
+    SDL2_VER=$(pkg-config --modversion sdl2 2>/dev/null)
+    # Also check for SDL2_ttf (needed for text rendering)
+    if pkg-config --exists SDL2_ttf 2>/dev/null; then
+        TTF_VER=$(pkg-config --modversion SDL2_ttf 2>/dev/null)
+        _ok "SDL2/Embedded" "-DEL_TARGET_SDL2  sdl2 ${SDL2_VER}, SDL2_ttf ${TTF_VER}"
+    else
+        _ok "SDL2/Embedded" "-DEL_TARGET_SDL2  sdl2 ${SDL2_VER} (SDL2_ttf missing — needed for text)"
+        echo "                             Install: apt install libsdl2-ttf-dev"
+    fi
+    SDL2_OK=1
+    AVAILABLE=$((AVAILABLE + 1))
+elif command -v sdl2-config &>/dev/null; then
+    SDL2_VER=$(sdl2-config --version 2>/dev/null || echo "")
+    _ok "SDL2/Embedded" "-DEL_TARGET_SDL2  sdl2 ${SDL2_VER} (via sdl2-config)"
+    SDL2_OK=1
+    AVAILABLE=$((AVAILABLE + 1))
+fi
+
+if [[ $SDL2_OK -eq 0 ]]; then
+    _miss "SDL2/Embedded" "-DEL_TARGET_SDL2  (sdl2 not found)"
+    echo "                             Install: apt install libsdl2-dev libsdl2-ttf-dev libsdl2-image-dev"
+    echo "                                   or: brew install sdl2 sdl2_ttf sdl2_image"
+    MISSING=$((MISSING + 1))
+fi
+
+# ── LVGL / Microcontrollers ───────────────────────────────────────────────────
+
+LVGL_OK=0
+LVGL_WHERE=""
+
+if [ -f "${SCRIPT_DIR}/lvgl/lvgl.h" ]; then
+    LVGL_WHERE="./lvgl/lvgl.h"
+    LVGL_OK=1
+elif [ -f "${SCRIPT_DIR}/../lvgl/lvgl.h" ]; then
+    LVGL_WHERE="adjacent lvgl/"
+    LVGL_OK=1
+elif [ -f "/usr/include/lvgl/lvgl.h" ]; then
+    LVGL_WHERE="/usr/include/lvgl"
+    LVGL_OK=1
+elif [ -f "/usr/local/include/lvgl/lvgl.h" ]; then
+    LVGL_WHERE="/usr/local/include/lvgl"
+    LVGL_OK=1
+elif pkg-config --exists lvgl 2>/dev/null; then
+    LVGL_WHERE="pkg-config ($(pkg-config --modversion lvgl 2>/dev/null))"
+    LVGL_OK=1
+fi
+
+if [[ $LVGL_OK -eq 1 ]]; then
+    _ok "LVGL/MCU" "-DEL_TARGET_LVGL  ${LVGL_WHERE}"
+    AVAILABLE=$((AVAILABLE + 1))
+else
+    _miss "LVGL/MCU" "-DEL_TARGET_LVGL  (lvgl.h not found)"
+    echo "                             Install: git clone https://github.com/lvgl/lvgl"
+    echo "                                      (place lvgl/ next to runtime/)"
+    MISSING=$((MISSING + 1))
+fi
+
+# ── Android / JNI ─────────────────────────────────────────────────────────────
+
+ANDROID_OK=0
+ANDROID_WHERE=""
+
+if [ -n "${ANDROID_NDK_HOME:-}" ] && [ -d "${ANDROID_NDK_HOME}" ]; then
+    NDK_VER=""
+    if [ -f "${ANDROID_NDK_HOME}/source.properties" ]; then
+        NDK_VER=$(grep "Pkg.Revision" "${ANDROID_NDK_HOME}/source.properties" \
+                  2>/dev/null | cut -d= -f2 | tr -d ' ' || echo "")
+    fi
+    ANDROID_WHERE="NDK ${NDK_VER:-(version unknown)} at \$ANDROID_NDK_HOME"
+    ANDROID_OK=1
+elif command -v ndk-build &>/dev/null; then
+    ANDROID_WHERE="ndk-build in PATH"
+    ANDROID_OK=1
+elif [ -n "${ANDROID_HOME:-}" ] && [ -d "${ANDROID_HOME}/ndk" ]; then
+    ANDROID_WHERE="NDK via \$ANDROID_HOME/ndk"
+    ANDROID_OK=1
+fi
+
+if [[ $ANDROID_OK -eq 1 ]]; then
+    _ok "Android/JNI" "-DEL_TARGET_ANDROID  ${ANDROID_WHERE}"
+    AVAILABLE=$((AVAILABLE + 1))
+else
+    _miss "Android/JNI" "-DEL_TARGET_ANDROID  (ANDROID_NDK_HOME not set)"
+    echo "                             Install: https://developer.android.com/studio/releases/ndk"
+    echo "                             Then: export ANDROID_NDK_HOME=/path/to/ndk"
+    MISSING=$((MISSING + 1))
+fi
+
+# ── Windows / Win32 (cross or native) ─────────────────────────────────────────
+
+WIN32_OK=0
+WIN32_WHERE=""
+
+if [[ "$(uname)" == MINGW* ]] || [[ "$(uname)" == CYGWIN* ]] || \
+   [[ "$(uname)" == MSYS* ]]; then
+    WIN32_WHERE="native Windows ($(uname))"
+    WIN32_OK=1
+elif command -v x86_64-w64-mingw32-gcc &>/dev/null; then
+    MINGW_VER=$(x86_64-w64-mingw32-gcc --version 2>/dev/null | head -1 || echo "")
+    WIN32_WHERE="mingw cross-compiler — ${MINGW_VER}"
+    WIN32_OK=1
+elif command -v i686-w64-mingw32-gcc &>/dev/null; then
+    WIN32_WHERE="mingw 32-bit cross-compiler"
+    WIN32_OK=1
+fi
+
+if [[ $WIN32_OK -eq 1 ]]; then
+    _ok "Windows/Win32" "-DEL_TARGET_WIN32  ${WIN32_WHERE}"
+    AVAILABLE=$((AVAILABLE + 1))
+else
+    _miss "Windows/Win32" "-DEL_TARGET_WIN32  (mingw cross-compiler not found)"
+    echo "                             Install: brew install mingw-w64"
+    echo "                                   or: apt install gcc-mingw-w64"
+    MISSING=$((MISSING + 1))
+fi
+
+# ── Summary ───────────────────────────────────────────────────────────────────
+
+echo ""
+echo "  ${AVAILABLE} platform(s) available, ${MISSING} unavailable on this machine."
+echo ""
+
+if [[ -x "${SCRIPT_DIR}/new-platform" ]]; then
+    echo "  Scaffold a new bridge:  ${SCRIPT_DIR}/new-platform <name>"
+fi
+echo "  Bridge contract:        ${SCRIPT_DIR}/PLATFORM_BRIDGE_SPEC.md"
+echo ""

lang/runtime/el_android.c

@@ -0,0 +1,949 @@
+/*
+ * el_android.c — Android JNI backend for the el native widget system.
+ *
+ * This file implements the Android widget layer that el_seed.c calls through
+ * to when EL_TARGET_ANDROID is defined.  It is the exact Android counterpart
+ * to el_appkit.m and presents the same C API surface.
+ *
+ * Architecture:
+ *   el program (el code)
+ *       → __widget_* C builtins in el_seed.c
+ *           → el_android_* C-callable functions declared here
+ *               → ElBridge static methods in Java via JNI
+ *                   → android.view.View subclasses on the UI thread
+ *
+ * Widget handles: every widget (window root, view, control) is assigned an
+ * int64_t slot index into view_slots[].  The el program holds these as opaque
+ * Int values.  Slot 0 is never valid (null handle = -1 convention).
+ *
+ * Threading: Android requires all UI operations to run on the main (UI) thread.
+ * Every JNI call that mutates a View is dispatched through
+ * Activity.runOnUiThread(Runnable) if the current thread is not the UI thread.
+ * el_android_run_loop is a no-op — Android lifecycle is driven by the Activity.
+ *
+ * Callback mechanism: when a widget fires an event Java calls
+ *   nativeOnClick / nativeOnChange / nativeOnSubmit
+ * The C side looks up the registered El function name for that slot, then:
+ *   dlsym(RTLD_DEFAULT, fn_name)(widget_handle, event_data_string)
+ * This matches the __thread_create pattern in el_seed.c exactly.
+ *
+ * Compile / link (as part of libelruntime.so):
+ *   Compiled by the Android Gradle NDK build system with -DEL_TARGET_ANDROID.
+ *   Link flags: -landroid -llog -ldl
+ *
+ * Java companion: ElBridge.java in the same directory must be compiled into
+ * the Android application's APK (package com.neuron.el).
+ */
+
+#ifdef EL_TARGET_ANDROID
+
+#include <jni.h>
+#include <android/log.h>
+#include <stdint.h>
+#include <stdlib.h>
+#include <string.h>
+#include <dlfcn.h>
+#include "el_runtime.h"
+
+/* ── Logging ─────────────────────────────────────────────────────────────── */
+
+#define EL_TAG "ElAndroid"
+#define EL_LOGI(...) __android_log_print(ANDROID_LOG_INFO,  EL_TAG, __VA_ARGS__)
+#define EL_LOGW(...) __android_log_print(ANDROID_LOG_WARN,  EL_TAG, __VA_ARGS__)
+#define EL_LOGE(...) __android_log_print(ANDROID_LOG_ERROR, EL_TAG, __VA_ARGS__)
+
+/* ── JNI global state ────────────────────────────────────────────────────── */
+
+static JavaVM  *g_jvm          = NULL;
+static jobject  g_activity     = NULL;   /* global ref to Activity */
+static jclass   g_bridge_class = NULL;   /* global ref to ElBridge class */
+
+/* Cached method IDs on ElBridge — filled in el_android_init(). */
+static jmethodID g_mid_createLinearLayout  = NULL;
+static jmethodID g_mid_createFrameLayout   = NULL;
+static jmethodID g_mid_createScrollView    = NULL;
+static jmethodID g_mid_createTextView      = NULL;
+static jmethodID g_mid_createButton        = NULL;
+static jmethodID g_mid_createEditText      = NULL;
+static jmethodID g_mid_createImageView     = NULL;
+static jmethodID g_mid_setContentView      = NULL;
+static jmethodID g_mid_setTitle            = NULL;
+static jmethodID g_mid_addChild            = NULL;
+static jmethodID g_mid_removeChild         = NULL;
+static jmethodID g_mid_destroyView         = NULL;
+static jmethodID g_mid_setText             = NULL;
+static jmethodID g_mid_getText             = NULL;
+static jmethodID g_mid_setTextColor        = NULL;
+static jmethodID g_mid_setBackgroundColor  = NULL;
+static jmethodID g_mid_setFont             = NULL;
+static jmethodID g_mid_setPadding          = NULL;
+static jmethodID g_mid_setWidth            = NULL;
+static jmethodID g_mid_setHeight           = NULL;
+static jmethodID g_mid_setFlex             = NULL;
+static jmethodID g_mid_setCornerRadius     = NULL;
+static jmethodID g_mid_setEnabled          = NULL;
+static jmethodID g_mid_setVisibility       = NULL;
+static jmethodID g_mid_setOnClickListener  = NULL;
+static jmethodID g_mid_setOnChangeListener = NULL;
+static jmethodID g_mid_setOnSubmitListener = NULL;
+static jmethodID g_mid_runOnUiThread       = NULL;  /* Activity.runOnUiThread */
+
+/* ── Widget table ─────────────────────────────────────────────────────────── */
+
+#define EL_ANDROID_MAX_WIDGETS 4096
+
+typedef enum {
+    EL_WIDGET_FREE      = 0,
+    EL_WIDGET_WINDOW    = 1,
+    EL_WIDGET_VSTACK    = 2,
+    EL_WIDGET_HSTACK    = 3,
+    EL_WIDGET_ZSTACK    = 4,
+    EL_WIDGET_SCROLL    = 5,
+    EL_WIDGET_LABEL     = 6,
+    EL_WIDGET_BUTTON    = 7,
+    EL_WIDGET_TEXTFIELD = 8,
+    EL_WIDGET_TEXTAREA  = 9,
+    EL_WIDGET_IMAGE     = 10,
+} ElWidgetKind;
+
+typedef struct {
+    ElWidgetKind kind;
+    jint         slot;       /* Java-side slot index (matches C index) */
+    char        *cb_click;   /* El function name for click / submit events */
+    char        *cb_change;  /* El function name for value-change events */
+} ElWidget;
+
+static ElWidget _el_widgets[EL_ANDROID_MAX_WIDGETS];
+
+static int64_t el_widget_alloc(ElWidgetKind kind, jint slot) {
+    for (int i = 1; i < EL_ANDROID_MAX_WIDGETS; i++) {
+        if (_el_widgets[i].kind == EL_WIDGET_FREE) {
+            _el_widgets[i].kind      = kind;
+            _el_widgets[i].slot      = slot;
+            _el_widgets[i].cb_click  = NULL;
+            _el_widgets[i].cb_change = NULL;
+            return (int64_t)i;
+        }
+    }
+    EL_LOGE("el_widget_alloc: slot table full");
+    return -1;
+}
+
+static ElWidget *el_widget_get(int64_t handle) {
+    if (handle <= 0 || handle >= EL_ANDROID_MAX_WIDGETS) return NULL;
+    if (_el_widgets[handle].kind == EL_WIDGET_FREE)       return NULL;
+    return &_el_widgets[handle];
+}
+
+static void el_widget_free(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    w->kind = EL_WIDGET_FREE;
+    w->slot = -1;
+    free(w->cb_click);  w->cb_click  = NULL;
+    free(w->cb_change); w->cb_change = NULL;
+}
+
+/* ── JNI environment helpers ─────────────────────────────────────────────── */
+
+/*
+ * Obtain a JNIEnv for the calling thread.  Attaches the thread to the JVM if
+ * needed (detaches in el_jni_detach_if_attached — call in pairs).
+ */
+static int g_was_attached = 0;  /* thread-local would be cleaner but this is
+                                   safe for single-threaded el programs */
+
+static JNIEnv *el_jni_env(void) {
+    if (!g_jvm) return NULL;
+    JNIEnv *env = NULL;
+    jint rc = (*g_jvm)->GetEnv(g_jvm, (void **)&env, JNI_VERSION_1_6);
+    if (rc == JNI_OK)      { g_was_attached = 0; return env; }
+    if (rc == JNI_EDETACHED) {
+        if ((*g_jvm)->AttachCurrentThread(g_jvm, &env, NULL) == JNI_OK) {
+            g_was_attached = 1;
+            return env;
+        }
+    }
+    EL_LOGE("el_jni_env: failed to obtain JNIEnv");
+    return NULL;
+}
+
+static void el_jni_detach_if_attached(void) {
+    if (g_was_attached && g_jvm) {
+        (*g_jvm)->DetachCurrentThread(g_jvm);
+        g_was_attached = 0;
+    }
+}
+
+/* ── UI-thread dispatch ──────────────────────────────────────────────────── */
+/*
+ * Most ElBridge static methods already dispatch to the UI thread internally
+ * (they call Activity.runOnUiThread).  The helper below is available for
+ * cases where the caller needs to be sure the call has completed before
+ * returning (ElBridge methods marked "sync" use a CountDownLatch internally).
+ *
+ * For the current implementation we call ElBridge methods directly; ElBridge
+ * itself marshals to the UI thread via Activity.runOnUiThread + latch.
+ * This keeps the C side simple and mirrors the AppKit dispatch_sync pattern.
+ */
+
+/* ── JNI_OnLoad ──────────────────────────────────────────────────────────── */
+
+JNIEXPORT jint JNICALL JNI_OnLoad(JavaVM *vm, void *reserved) {
+    (void)reserved;
+    g_jvm = vm;
+    EL_LOGI("JNI_OnLoad: el Android bridge loaded");
+    return JNI_VERSION_1_6;
+}
+
+/* ── el_android_init ─────────────────────────────────────────────────────── */
+/*
+ * Called from __native_init().  The Activity must have already called
+ * ElBridge.registerActivity(activity) from Java before this runs, which sets
+ * g_activity via the nativeRegisterActivity JNI method below.
+ *
+ * Caches all method IDs used later so individual widget calls avoid repeated
+ * FindClass / GetStaticMethodID lookups.
+ */
+void el_android_init(void) {
+    static int done = 0;
+    if (done) return;
+    done = 1;
+
+    JNIEnv *env = el_jni_env();
+    if (!env) { EL_LOGE("el_android_init: no JNIEnv"); return; }
+
+    jclass cls = (*env)->FindClass(env, "com/neuron/el/ElBridge");
+    if (!cls) { EL_LOGE("el_android_init: ElBridge class not found"); return; }
+    g_bridge_class = (*env)->NewGlobalRef(env, cls);
+    (*env)->DeleteLocalRef(env, cls);
+
+#define CACHE_STATIC(var, name, sig) \
+    var = (*env)->GetStaticMethodID(env, g_bridge_class, name, sig); \
+    if (!var) EL_LOGW("el_android_init: method not found: %s %s", name, sig)
+
+    CACHE_STATIC(g_mid_createLinearLayout,  "createLinearLayout",  "(II)I");
+    CACHE_STATIC(g_mid_createFrameLayout,   "createFrameLayout",   "()I");
+    CACHE_STATIC(g_mid_createScrollView,    "createScrollView",     "()I");
+    CACHE_STATIC(g_mid_createTextView,      "createTextView",       "(Ljava/lang/String;)I");
+    CACHE_STATIC(g_mid_createButton,        "createButton",         "(Ljava/lang/String;)I");
+    CACHE_STATIC(g_mid_createEditText,      "createEditText",       "(Ljava/lang/String;Z)I");
+    CACHE_STATIC(g_mid_createImageView,     "createImageView",      "(Ljava/lang/String;)I");
+    CACHE_STATIC(g_mid_setContentView,      "setContentView",       "(I)V");
+    CACHE_STATIC(g_mid_setTitle,            "setTitle",             "(Ljava/lang/String;)V");
+    CACHE_STATIC(g_mid_addChild,            "addChild",             "(II)V");
+    CACHE_STATIC(g_mid_removeChild,         "removeChild",          "(II)V");
+    CACHE_STATIC(g_mid_destroyView,         "destroyView",          "(I)V");
+    CACHE_STATIC(g_mid_setText,             "setText",              "(ILjava/lang/String;)V");
+    CACHE_STATIC(g_mid_getText,             "getText",              "(I)Ljava/lang/String;");
+    CACHE_STATIC(g_mid_setTextColor,        "setTextColor",         "(IFFFF)V");
+    CACHE_STATIC(g_mid_setBackgroundColor,  "setBackgroundColor",   "(IFFFF)V");
+    CACHE_STATIC(g_mid_setFont,             "setFont",              "(ILjava/lang/String;IZ)V");
+    CACHE_STATIC(g_mid_setPadding,          "setPadding",           "(IIIII)V");
+    CACHE_STATIC(g_mid_setWidth,            "setWidth",             "(II)V");
+    CACHE_STATIC(g_mid_setHeight,           "setHeight",            "(II)V");
+    CACHE_STATIC(g_mid_setFlex,             "setFlex",              "(II)V");
+    CACHE_STATIC(g_mid_setCornerRadius,     "setCornerRadius",      "(IF)V");
+    CACHE_STATIC(g_mid_setEnabled,          "setEnabled",           "(IZ)V");
+    CACHE_STATIC(g_mid_setVisibility,       "setVisibility",        "(IZ)V");
+    CACHE_STATIC(g_mid_setOnClickListener,  "setOnClickListener",   "(I)V");
+    CACHE_STATIC(g_mid_setOnChangeListener, "setOnChangeListener",  "(I)V");
+    CACHE_STATIC(g_mid_setOnSubmitListener, "setOnSubmitListener",  "(I)V");
+#undef CACHE_STATIC
+
+    el_jni_detach_if_attached();
+    EL_LOGI("el_android_init: complete");
+}
+
+/* ── JNI: Activity registration ─────────────────────────────────────────── */
+
+/*
+ * Called from Java: ElBridge.registerActivity(activity) calls back here.
+ * Stores a global reference to the Activity so C code can dispatch to it.
+ */
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeRegisterActivity(JNIEnv *env, jclass cls,
+                                                    jobject activity) {
+    (void)cls;
+    if (g_activity) {
+        (*env)->DeleteGlobalRef(env, g_activity);
+        g_activity = NULL;
+    }
+    if (activity) {
+        g_activity = (*env)->NewGlobalRef(env, activity);
+        EL_LOGI("nativeRegisterActivity: activity registered");
+    }
+}
+
+/* ── El callback invocation ──────────────────────────────────────────────── */
+/*
+ * Invoke an El callback by symbol name.
+ * Signature matches AppKit: fn(handle: Int, data: String) -> Void
+ *   compiled to: void fn(el_val_t handle, el_val_t data)
+ */
+typedef void (*ElCb2)(int64_t handle, int64_t data);
+
+static void el_android_invoke_cb(const char *fn_name, int64_t handle,
+                                  const char *data) {
+    if (!fn_name || !*fn_name) return;
+    void *sym = dlsym(RTLD_DEFAULT, fn_name);
+    if (!sym) { EL_LOGW("invoke_cb: symbol not found: %s", fn_name); return; }
+    ElCb2 fn = (ElCb2)sym;
+    fn(handle, (int64_t)(uintptr_t)(data ? data : ""));
+}
+
+/* ── JNI: callbacks from Java → C ───────────────────────────────────────── */
+
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeOnClick(JNIEnv *env, jclass cls, jint slot) {
+    (void)env; (void)cls;
+    int64_t handle = (int64_t)slot;
+    ElWidget *w = el_widget_get(handle);
+    if (w && w->cb_click) {
+        el_android_invoke_cb(w->cb_click, handle, "");
+    }
+}
+
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeOnChange(JNIEnv *env, jclass cls,
+                                            jint slot, jstring text) {
+    (void)cls;
+    int64_t handle = (int64_t)slot;
+    ElWidget *w = el_widget_get(handle);
+    if (w && w->cb_change) {
+        const char *ctext = text ? (*env)->GetStringUTFChars(env, text, NULL) : "";
+        el_android_invoke_cb(w->cb_change, handle, ctext);
+        if (text) (*env)->ReleaseStringUTFChars(env, text, ctext);
+    }
+}
+
+JNIEXPORT void JNICALL
+Java_com_neuron_el_ElBridge_nativeOnSubmit(JNIEnv *env, jclass cls,
+                                            jint slot, jstring text) {
+    (void)cls;
+    int64_t handle = (int64_t)slot;
+    ElWidget *w = el_widget_get(handle);
+    if (w && w->cb_click) {   /* submit stored in cb_click, same as AppKit */
+        const char *ctext = text ? (*env)->GetStringUTFChars(env, text, NULL) : "";
+        el_android_invoke_cb(w->cb_click, handle, ctext);
+        if (text) (*env)->ReleaseStringUTFChars(env, text, ctext);
+    }
+}
+
+/* ── Helper: jstring from C string ──────────────────────────────────────── */
+
+static jstring el_jstr(JNIEnv *env, const char *s) {
+    return (*env)->NewStringUTF(env, s ? s : "");
+}
+
+/* ── Window ──────────────────────────────────────────────────────────────── */
+
+/*
+ * el_android_window_create — on Android a "window" is the root LinearLayout
+ * set as the Activity's content view.  We create a vertical LinearLayout and
+ * store it.  el_android_window_show calls setContentView on the Activity.
+ */
+int64_t el_android_window_create(const char *title, int width, int height,
+                                  int min_width, int min_height) {
+    (void)width; (void)height; (void)min_width; (void)min_height;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+
+    /* VERTICAL LinearLayout with no spacing (spacing added via margins in Java) */
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createLinearLayout,
+                                            (jint)1 /* VERTICAL */, (jint)0);
+    if ((*env)->ExceptionCheck(env)) {
+        (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1;
+    }
+
+    /* Set activity title */
+    if (g_mid_setTitle && title) {
+        jstring jtitle = el_jstr(env, title);
+        (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setTitle, jtitle);
+        (*env)->DeleteLocalRef(env, jtitle);
+    }
+
+    int64_t handle = el_widget_alloc(EL_WIDGET_WINDOW, (int)slot);
+    el_jni_detach_if_attached();
+    return handle;
+}
+
+void el_android_window_show(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w || w->kind != EL_WIDGET_WINDOW) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setContentView,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_window_set_title(int64_t handle, const char *title) {
+    (void)handle;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    jstring jtitle = el_jstr(env, title);
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setTitle, jtitle);
+    (*env)->DeleteLocalRef(env, jtitle);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Layout containers ───────────────────────────────────────────────────── */
+
+int64_t el_android_vstack_create(int spacing) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createLinearLayout,
+                                            (jint)1 /* VERTICAL */, (jint)spacing);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_VSTACK, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_hstack_create(int spacing) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createLinearLayout,
+                                            (jint)0 /* HORIZONTAL */, (jint)spacing);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_HSTACK, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_zstack_create(void) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createFrameLayout);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_ZSTACK, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_scroll_create(void) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createScrollView);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_SCROLL, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+/* ── Widget factories ─────────────────────────────────────────────────────── */
+
+int64_t el_android_label_create(const char *text) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jt = el_jstr(env, text);
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createTextView, jt);
+    (*env)->DeleteLocalRef(env, jt);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_LABEL, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_button_create(const char *label) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jl = el_jstr(env, label);
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createButton, jl);
+    (*env)->DeleteLocalRef(env, jl);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_BUTTON, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_text_field_create(const char *placeholder) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jp = el_jstr(env, placeholder);
+    /* singleLine = true */
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createEditText, jp, (jboolean)JNI_TRUE);
+    (*env)->DeleteLocalRef(env, jp);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_TEXTFIELD, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_text_area_create(const char *placeholder) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jp = el_jstr(env, placeholder);
+    /* singleLine = false → multiline EditText */
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createEditText, jp, (jboolean)JNI_FALSE);
+    (*env)->DeleteLocalRef(env, jp);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_TEXTAREA, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+int64_t el_android_image_create(const char *path) {
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return -1;
+    jstring jp = el_jstr(env, path);
+    jint slot = (*env)->CallStaticIntMethod(env, g_bridge_class,
+                                            g_mid_createImageView, jp);
+    (*env)->DeleteLocalRef(env, jp);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return -1; }
+    int64_t h = el_widget_alloc(EL_WIDGET_IMAGE, (int)slot);
+    el_jni_detach_if_attached();
+    return h;
+}
+
+/* ── Widget property setters ─────────────────────────────────────────────── */
+
+void el_android_widget_set_text(int64_t handle, const char *text) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    jstring jt = el_jstr(env, text);
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setText,
+                                 (jint)w->slot, jt);
+    (*env)->DeleteLocalRef(env, jt);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+const char *el_android_widget_get_text(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return "";
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return "";
+    jstring js = (jstring)(*env)->CallStaticObjectMethod(env, g_bridge_class,
+                                                          g_mid_getText,
+                                                          (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) { (*env)->ExceptionClear(env); el_jni_detach_if_attached(); return ""; }
+    const char *result = "";
+    if (js) {
+        const char *cstr = (*env)->GetStringUTFChars(env, js, NULL);
+        result = cstr ? strdup(cstr) : "";
+        if (cstr) (*env)->ReleaseStringUTFChars(env, js, cstr);
+        (*env)->DeleteLocalRef(env, js);
+    }
+    el_jni_detach_if_attached();
+    return result;
+}
+
+void el_android_widget_set_color(int64_t handle, float r, float g, float b, float a) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setTextColor,
+                                 (jint)w->slot, (jfloat)r, (jfloat)g,
+                                 (jfloat)b, (jfloat)a);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_bg_color(int64_t handle, float r, float g, float b, float a) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setBackgroundColor,
+                                 (jint)w->slot, (jfloat)r, (jfloat)g,
+                                 (jfloat)b, (jfloat)a);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_font(int64_t handle, const char *family, int size, int bold) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    jstring jfam = el_jstr(env, family);
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setFont,
+                                 (jint)w->slot, jfam, (jint)size,
+                                 (jboolean)(bold ? JNI_TRUE : JNI_FALSE));
+    (*env)->DeleteLocalRef(env, jfam);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_padding(int64_t handle, int top, int right, int bottom, int left) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setPadding,
+                                 (jint)w->slot, (jint)top, (jint)right,
+                                 (jint)bottom, (jint)left);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_width(int64_t handle, int width) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setWidth,
+                                 (jint)w->slot, (jint)width);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_height(int64_t handle, int height) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setHeight,
+                                 (jint)w->slot, (jint)height);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_flex(int64_t handle, int flex) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setFlex,
+                                 (jint)w->slot, (jint)flex);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_corner_radius(int64_t handle, int radius) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setCornerRadius,
+                                 (jint)w->slot, (jfloat)radius);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_disabled(int64_t handle, int disabled) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setEnabled,
+                                 (jint)w->slot,
+                                 (jboolean)(disabled ? JNI_FALSE : JNI_TRUE));
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_set_hidden(int64_t handle, int hidden) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    /* visible=true means NOT hidden */
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setVisibility,
+                                 (jint)w->slot,
+                                 (jboolean)(hidden ? JNI_FALSE : JNI_TRUE));
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Child management ─────────────────────────────────────────────────────── */
+
+void el_android_widget_add_child(int64_t parent, int64_t child) {
+    ElWidget *pw = el_widget_get(parent);
+    ElWidget *cw = el_widget_get(child);
+    if (!pw || !cw) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_addChild,
+                                 (jint)pw->slot, (jint)cw->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_remove_child(int64_t parent, int64_t child) {
+    ElWidget *pw = el_widget_get(parent);
+    ElWidget *cw = el_widget_get(child);
+    if (!pw || !cw) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_removeChild,
+                                 (jint)pw->slot, (jint)cw->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Event registration ───────────────────────────────────────────────────── */
+
+void el_android_widget_on_click(int64_t handle, const char *fn_name) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_click);
+    w->cb_click = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+    if (!w->cb_click) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setOnClickListener,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_on_change(int64_t handle, const char *fn_name) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_change);
+    w->cb_change = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+    if (!w->cb_change) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setOnChangeListener,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+void el_android_widget_on_submit(int64_t handle, const char *fn_name) {
+    /* Submit stored in cb_click, same as AppKit. */
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    free(w->cb_click);
+    w->cb_click = (fn_name && *fn_name) ? strdup(fn_name) : NULL;
+    if (!w->cb_click) return;
+    JNIEnv *env = el_jni_env();
+    if (!env || !g_bridge_class) return;
+    (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_setOnSubmitListener,
+                                 (jint)w->slot);
+    if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    el_jni_detach_if_attached();
+}
+
+/* ── Widget destroy ───────────────────────────────────────────────────────── */
+
+void el_android_widget_destroy(int64_t handle) {
+    ElWidget *w = el_widget_get(handle);
+    if (!w) return;
+    JNIEnv *env = el_jni_env();
+    if (env && g_bridge_class) {
+        (*env)->CallStaticVoidMethod(env, g_bridge_class, g_mid_destroyView,
+                                     (jint)w->slot);
+        if ((*env)->ExceptionCheck(env)) (*env)->ExceptionClear(env);
+    }
+    el_widget_free(handle);
+    el_jni_detach_if_attached();
+}
+
+/* ── Manifest reader ─────────────────────────────────────────────────────── */
+/*
+ * __manifest_read: parse the app{} block from a manifest file.
+ * Returns the raw file contents as an el_val_t (const char* cast).
+ * The caller (el program) parses the returned string.
+ * Reads from the filesystem; for APK assets use the AssetManager path instead.
+ */
+static char *el_read_file(const char *path) {
+    if (!path || !*path) return NULL;
+    FILE *f = fopen(path, "rb");
+    if (!f) return NULL;
+    fseek(f, 0, SEEK_END);
+    long len = ftell(f);
+    fseek(f, 0, SEEK_SET);
+    if (len <= 0) { fclose(f); return NULL; }
+    char *buf = (char *)malloc((size_t)len + 1);
+    if (!buf) { fclose(f); return NULL; }
+    fread(buf, 1, (size_t)len, f);
+    buf[len] = '\0';
+    fclose(f);
+    return buf;
+}
+
+el_val_t el_android_manifest_read(const char *path) {
+    char *contents = el_read_file(path);
+    if (!contents) return (el_val_t)(uintptr_t)"";
+    return (el_val_t)(uintptr_t)contents;  /* caller owns allocation */
+}
+
+/* ── __widget_* C API (called from el_seed.c) ────────────────────────────── */
+/*
+ * These are the functions declared in el_native_target.h under EL_TARGET_ANDROID.
+ * They forward to the el_android_* internal functions above.
+ *
+ * The el_val_t / int64_t ABI matches the AppKit functions exactly:
+ *   - Integer params passed as int64_t, extracted with (int)
+ *   - String params passed as int64_t, extracted with (const char*)(uintptr_t)
+ *   - Float params (r,g,b,a) passed as int64_t bit-cast from double; extracted
+ *     with el_to_float / bit-cast union
+ */
+
+static inline float el_val_to_float(el_val_t v) {
+    union { double d; int64_t i; } u;
+    u.i = v;
+    return (float)u.d;
+}
+
+void __native_init(void) {
+    el_android_init();
+}
+
+void __native_run_loop(void) {
+    /* No-op on Android — lifecycle is driven by the Activity. */
+}
+
+el_val_t __window_create(el_val_t title, el_val_t width, el_val_t height,
+                          el_val_t min_width, el_val_t min_height) {
+    return (el_val_t)el_android_window_create(
+        (const char *)(uintptr_t)title,
+        (int)width, (int)height, (int)min_width, (int)min_height);
+}
+
+void __window_show(el_val_t handle) {
+    el_android_window_show((int64_t)handle);
+}
+
+void __window_set_title(el_val_t handle, el_val_t title) {
+    el_android_window_set_title((int64_t)handle,
+                                (const char *)(uintptr_t)title);
+}
+
+el_val_t __vstack_create(el_val_t spacing) {
+    return (el_val_t)el_android_vstack_create((int)spacing);
+}
+
+el_val_t __hstack_create(el_val_t spacing) {
+    return (el_val_t)el_android_hstack_create((int)spacing);
+}
+
+el_val_t __zstack_create(void) {
+    return (el_val_t)el_android_zstack_create();
+}
+
+el_val_t __scroll_create(void) {
+    return (el_val_t)el_android_scroll_create();
+}
+
+el_val_t __label_create(el_val_t text) {
+    return (el_val_t)el_android_label_create((const char *)(uintptr_t)text);
+}
+
+el_val_t __button_create(el_val_t label) {
+    return (el_val_t)el_android_button_create((const char *)(uintptr_t)label);
+}
+
+el_val_t __text_field_create(el_val_t placeholder) {
+    return (el_val_t)el_android_text_field_create((const char *)(uintptr_t)placeholder);
+}
+
+el_val_t __text_area_create(el_val_t placeholder) {
+    return (el_val_t)el_android_text_area_create((const char *)(uintptr_t)placeholder);
+}
+
+el_val_t __image_create(el_val_t path_or_name) {
+    return (el_val_t)el_android_image_create((const char *)(uintptr_t)path_or_name);
+}
+
+void __widget_set_text(el_val_t handle, el_val_t text) {
+    el_android_widget_set_text((int64_t)handle,
+                               (const char *)(uintptr_t)text);
+}
+
+el_val_t __widget_get_text(el_val_t handle) {
+    return (el_val_t)(uintptr_t)el_android_widget_get_text((int64_t)handle);
+}
+
+void __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                         el_val_t b, el_val_t a) {
+    el_android_widget_set_color((int64_t)handle,
+                                el_val_to_float(r), el_val_to_float(g),
+                                el_val_to_float(b), el_val_to_float(a));
+}
+
+void __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                            el_val_t b, el_val_t a) {
+    el_android_widget_set_bg_color((int64_t)handle,
+                                   el_val_to_float(r), el_val_to_float(g),
+                                   el_val_to_float(b), el_val_to_float(a));
+}
+
+void __widget_set_font(el_val_t handle, el_val_t family,
+                        el_val_t size, el_val_t bold) {
+    el_android_widget_set_font((int64_t)handle,
+                               (const char *)(uintptr_t)family,
+                               (int)size, (int)bold);
+}
+
+void __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                           el_val_t bottom, el_val_t left) {
+    el_android_widget_set_padding((int64_t)handle,
+                                  (int)top, (int)right, (int)bottom, (int)left);
+}
+
+void __widget_set_width(el_val_t handle, el_val_t width) {
+    el_android_widget_set_width((int64_t)handle, (int)width);
+}
+
+void __widget_set_height(el_val_t handle, el_val_t height) {
+    el_android_widget_set_height((int64_t)handle, (int)height);
+}
+
+void __widget_set_flex(el_val_t handle, el_val_t flex) {
+    el_android_widget_set_flex((int64_t)handle, (int)flex);
+}
+
+void __widget_set_corner_radius(el_val_t handle, el_val_t radius) {
+    el_android_widget_set_corner_radius((int64_t)handle, (int)radius);
+}
+
+void __widget_set_disabled(el_val_t handle, el_val_t disabled) {
+    el_android_widget_set_disabled((int64_t)handle, (int)disabled);
+}
+
+void __widget_set_hidden(el_val_t handle, el_val_t hidden) {
+    el_android_widget_set_hidden((int64_t)handle, (int)hidden);
+}
+
+void __widget_add_child(el_val_t parent, el_val_t child) {
+    el_android_widget_add_child((int64_t)parent, (int64_t)child);
+}
+
+void __widget_remove_child(el_val_t parent, el_val_t child) {
+    el_android_widget_remove_child((int64_t)parent, (int64_t)child);
+}
+
+void __widget_destroy(el_val_t handle) {
+    el_android_widget_destroy((int64_t)handle);
+}
+
+void __widget_on_click(el_val_t handle, el_val_t fn_name) {
+    el_android_widget_on_click((int64_t)handle,
+                               (const char *)(uintptr_t)fn_name);
+}
+
+void __widget_on_change(el_val_t handle, el_val_t fn_name) {
+    el_android_widget_on_change((int64_t)handle,
+                                (const char *)(uintptr_t)fn_name);
+}
+
+void __widget_on_submit(el_val_t handle, el_val_t fn_name) {
+    el_android_widget_on_submit((int64_t)handle,
+                                (const char *)(uintptr_t)fn_name);
+}
+
+el_val_t __manifest_read(el_val_t path) {
+    return el_android_manifest_read((const char *)(uintptr_t)path);
+}
+
+#endif /* EL_TARGET_ANDROID */

lang/runtime/el_lvgl.c

@@ -0,0 +1,844 @@
+/*
+ * el_lvgl.c — LVGL v9 backend for the el native widget system.
+ *
+ * This file implements the microcontroller/embedded widget layer that el_seed.c
+ * calls through to when EL_TARGET_LVGL is defined.
+ *
+ * Architecture:
+ *   el program (el code)
+ *       → __widget_* C builtins in el_seed.c
+ *           → el_lvgl_* C functions defined here
+ *               → lv_obj_t widgets via LVGL v9
+ *
+ * Target platforms: ESP32, STM32, industrial panels, any system with 256KB+
+ * RAM and an LVGL-compatible display driver. No OS required.
+ *
+ * Widget handles: every widget is assigned an int64_t slot index into
+ * g_widgets[]. The el program holds these as opaque Int values.
+ * Slot 0 is reserved; -1 = invalid handle.
+ *
+ * Window model: on embedded there is one screen. __window_create configures
+ * lv_scr_act() as the root container. __window_show is a no-op (the screen
+ * is always visible). __native_run_loop calls lv_task_handler() in a tight
+ * loop — on RTOS this runs inside a dedicated task; on bare metal it IS the
+ * main loop. The host application is responsible for initialising the display
+ * driver and calling lv_tick_inc() before calling __native_run_loop.
+ *
+ * Callback dispatch:
+ *   When EL_LVGL_NO_DLSYM is NOT defined (hosted Linux, testing):
+ *     dlsym(RTLD_DEFAULT, fn_name) resolves the El function symbol at runtime.
+ *   When EL_LVGL_NO_DLSYM IS defined (bare-metal ESP32/STM32):
+ *     The caller must provide:
+ *       el_val_t el_lvgl_dispatch(const char *fn, el_val_t a, el_val_t b);
+ *     which maps function names to function pointers via a compile-time table.
+ *
+ * Font mapping: LVGL v9 ships Montserrat in discrete sizes. __widget_set_font
+ * maps the requested point size to the nearest available Montserrat variant.
+ * Bold is approximated by stepping up two sizes (no separate bold face in the
+ * default LVGL font set). Define EL_LVGL_CUSTOM_FONT to override font_select().
+ *
+ * Compile (hosted test build):
+ *   gcc -DEL_TARGET_LVGL -I./lvgl el_lvgl.c -c -o el_lvgl.o
+ *   # Then link with lvgl.a / lvgl source tree.
+ *
+ * Compile (bare-metal, no dynamic linker):
+ *   arm-none-eabi-gcc -DEL_TARGET_LVGL -DEL_LVGL_NO_DLSYM \
+ *       -I./lvgl el_lvgl.c -c -o el_lvgl.o
+ */
+
+#ifdef EL_TARGET_LVGL
+
+#include "lvgl/lvgl.h"
+#include <stdint.h>
+#include <string.h>
+#include <stdlib.h>
+#include <stdio.h>
+
+#ifndef EL_LVGL_NO_DLSYM
+#include <dlfcn.h>
+#endif
+
+#include "el_runtime.h"
+
+/* ── Callback dispatch macro ─────────────────────────────────────────────── */
+
+#ifdef EL_LVGL_NO_DLSYM
+/*
+ * Bare-metal path. The application provides this function:
+ *   el_val_t el_lvgl_dispatch(const char *fn, el_val_t a, el_val_t b);
+ * It maps string names → function pointers, typically via a switch on a hash
+ * or a sorted table of {name, fn_ptr} pairs generated by elc.
+ */
+extern el_val_t el_lvgl_dispatch(const char *fn, el_val_t a, el_val_t b);
+#define EL_LVGL_CALL(fn_name, a, b)  el_lvgl_dispatch((fn_name), (a), (b))
+#else
+/*
+ * Hosted path. dlsym resolves the El symbol at call time.
+ * We use a compound-statement expression (GCC/Clang extension) to avoid
+ * executing dlsym more than once per call.
+ */
+#define EL_LVGL_CALL(fn_name, a, b) \
+    ({ \
+        typedef el_val_t (*_el_fn_t)(el_val_t, el_val_t); \
+        _el_fn_t _fn = (_el_fn_t)(uintptr_t)dlsym(RTLD_DEFAULT, (fn_name)); \
+        _fn ? _fn((a), (b)) : (el_val_t)0; \
+    })
+#endif
+
+/* ── Widget table ─────────────────────────────────────────────────────────── */
+
+#define EL_LVGL_MAX_WIDGETS 4096
+
+/*
+ * Widget kinds — mirrors AppKit/GTK4 backends so future tooling can stay
+ * consistent across all targets.
+ */
+typedef enum {
+    EL_LVGL_FREE      = 0,
+    EL_LVGL_WINDOW    = 1,
+    EL_LVGL_VSTACK    = 2,
+    EL_LVGL_HSTACK    = 3,
+    EL_LVGL_ZSTACK    = 4,
+    EL_LVGL_SCROLL    = 5,
+    EL_LVGL_LABEL     = 6,
+    EL_LVGL_BUTTON    = 7,  /* lv_btn_create; inner label at slot_btn_label */
+    EL_LVGL_TEXTFIELD = 8,  /* lv_textarea, one-line */
+    EL_LVGL_TEXTAREA  = 9,  /* lv_textarea, multiline */
+    EL_LVGL_IMAGE     = 10,
+    EL_LVGL_DIVIDER   = 11,
+    EL_LVGL_SPACER    = 12,
+} ElLvglKind;
+
+/*
+ * Per-slot state. Callback names are stored inline (256 bytes each) to avoid
+ * heap allocation on targets with no malloc or fragmented heaps.
+ */
+typedef struct {
+    ElLvglKind  kind;
+    lv_obj_t   *obj;           /* primary LVGL object */
+    lv_obj_t   *btn_label;     /* for EL_LVGL_BUTTON: inner lv_label child */
+    char        cb_click[256];
+    char        cb_change[256];
+    char        cb_submit[256];
+} ElLvglWidget;
+
+static ElLvglWidget g_widgets[EL_LVGL_MAX_WIDGETS];
+
+/* ── Slot helpers ─────────────────────────────────────────────────────────── */
+
+static int64_t lvgl_slot_alloc(ElLvglKind kind, lv_obj_t *obj) {
+    for (int i = 1; i < EL_LVGL_MAX_WIDGETS; i++) {
+        if (g_widgets[i].kind == EL_LVGL_FREE) {
+            g_widgets[i].kind      = kind;
+            g_widgets[i].obj       = obj;
+            g_widgets[i].btn_label = NULL;
+            g_widgets[i].cb_click[0]  = '\0';
+            g_widgets[i].cb_change[0] = '\0';
+            g_widgets[i].cb_submit[0] = '\0';
+            return (int64_t)i;
+        }
+    }
+    return -1; /* table full */
+}
+
+static ElLvglWidget *lvgl_slot_get(int64_t handle) {
+    if (handle <= 0 || handle >= EL_LVGL_MAX_WIDGETS) return NULL;
+    if (g_widgets[handle].kind == EL_LVGL_FREE)        return NULL;
+    return &g_widgets[handle];
+}
+
+static void lvgl_slot_free(int64_t handle) {
+    if (handle <= 0 || handle >= EL_LVGL_MAX_WIDGETS) return;
+    ElLvglWidget *w = &g_widgets[handle];
+    w->kind      = EL_LVGL_FREE;
+    w->obj       = NULL;
+    w->btn_label = NULL;
+    w->cb_click[0]  = '\0';
+    w->cb_change[0] = '\0';
+    w->cb_submit[0] = '\0';
+}
+
+/* ── Font selection ───────────────────────────────────────────────────────── */
+/*
+ * LVGL ships Montserrat in the following sizes (subset enabled by lv_conf.h):
+ *   8 10 12 14 16 18 20 22 24 26 28 30 32 34 36 38 40 42 44 46 48
+ *
+ * We map the requested size to the nearest available size. Bold is
+ * approximated by stepping up two sizes (no separate bold face in the default
+ * font set). Define EL_LVGL_CUSTOM_FONT to replace this function entirely.
+ */
+#ifndef EL_LVGL_CUSTOM_FONT
+
+static const lv_font_t *font_select(int size, int bold) {
+    /* Step up two sizes for bold approximation. */
+    if (bold) size += 4;
+
+    /* Clamp to available range. */
+    if (size <  8) size =  8;
+    if (size > 48) size = 48;
+
+    /* Round to nearest even size >= 8. */
+    if (size % 2 != 0) size++;
+
+    switch (size) {
+#if LV_FONT_MONTSERRAT_8
+        case  8:  return &lv_font_montserrat_8;
+#endif
+#if LV_FONT_MONTSERRAT_10
+        case 10:  return &lv_font_montserrat_10;
+#endif
+#if LV_FONT_MONTSERRAT_12
+        case 12:  return &lv_font_montserrat_12;
+#endif
+#if LV_FONT_MONTSERRAT_14
+        case 14:  return &lv_font_montserrat_14;
+#endif
+#if LV_FONT_MONTSERRAT_16
+        case 16:  return &lv_font_montserrat_16;
+#endif
+#if LV_FONT_MONTSERRAT_18
+        case 18:  return &lv_font_montserrat_18;
+#endif
+#if LV_FONT_MONTSERRAT_20
+        case 20:  return &lv_font_montserrat_20;
+#endif
+#if LV_FONT_MONTSERRAT_22
+        case 22:  return &lv_font_montserrat_22;
+#endif
+#if LV_FONT_MONTSERRAT_24
+        case 24:  return &lv_font_montserrat_24;
+#endif
+#if LV_FONT_MONTSERRAT_26
+        case 26:  return &lv_font_montserrat_26;
+#endif
+#if LV_FONT_MONTSERRAT_28
+        case 28:  return &lv_font_montserrat_28;
+#endif
+#if LV_FONT_MONTSERRAT_30
+        case 30:  return &lv_font_montserrat_30;
+#endif
+#if LV_FONT_MONTSERRAT_32
+        case 32:  return &lv_font_montserrat_32;
+#endif
+#if LV_FONT_MONTSERRAT_34
+        case 34:  return &lv_font_montserrat_34;
+#endif
+#if LV_FONT_MONTSERRAT_36
+        case 36:  return &lv_font_montserrat_36;
+#endif
+#if LV_FONT_MONTSERRAT_38
+        case 38:  return &lv_font_montserrat_38;
+#endif
+#if LV_FONT_MONTSERRAT_40
+        case 40:  return &lv_font_montserrat_40;
+#endif
+#if LV_FONT_MONTSERRAT_42
+        case 42:  return &lv_font_montserrat_42;
+#endif
+#if LV_FONT_MONTSERRAT_44
+        case 44:  return &lv_font_montserrat_44;
+#endif
+#if LV_FONT_MONTSERRAT_46
+        case 46:  return &lv_font_montserrat_46;
+#endif
+#if LV_FONT_MONTSERRAT_48
+        case 48:  return &lv_font_montserrat_48;
+#endif
+        default:
+            /*
+             * Requested size is not compiled in. Fall back to the default
+             * theme font, which is guaranteed to be present.
+             */
+            return LV_FONT_DEFAULT;
+    }
+}
+
+#endif /* EL_LVGL_CUSTOM_FONT */
+
+/* ── Event callback ───────────────────────────────────────────────────────── */
+
+/*
+ * Single LVGL event callback used for all widget events. The user_data is
+ * the slot index cast to (void*) via intptr_t — avoids heap allocation.
+ *
+ * Three event codes are handled:
+ *   LV_EVENT_CLICKED      → cb_click  (buttons, any tappable widget)
+ *   LV_EVENT_VALUE_CHANGED → cb_change (textarea, checkbox, etc.)
+ *   LV_EVENT_READY        → cb_submit  (Enter pressed in textarea one-line mode)
+ */
+static void el_lvgl_event_cb(lv_event_t *e) {
+    lv_event_code_t code = lv_event_get_code(e);
+    intptr_t        slot = (intptr_t)lv_event_get_user_data(e);
+    ElLvglWidget   *w    = lvgl_slot_get((int64_t)slot);
+    if (!w) return;
+
+    if (code == LV_EVENT_CLICKED && w->cb_click[0]) {
+        EL_LVGL_CALL(w->cb_click, (el_val_t)slot, (el_val_t)0);
+    }
+
+    if (code == LV_EVENT_VALUE_CHANGED && w->cb_change[0]) {
+        /*
+         * Retrieve current text for textarea/textfield widgets so the handler
+         * receives the updated value as its second argument.
+         */
+        const char *txt = "";
+        lv_obj_t   *target = lv_event_get_target(e);
+        if (w->kind == EL_LVGL_TEXTFIELD || w->kind == EL_LVGL_TEXTAREA) {
+            txt = lv_textarea_get_text(target);
+            if (!txt) txt = "";
+        }
+        EL_LVGL_CALL(w->cb_change, (el_val_t)slot,
+                     (el_val_t)(uintptr_t)txt);
+    }
+
+    if (code == LV_EVENT_READY && w->cb_submit[0]) {
+        /* LV_EVENT_READY fires when Enter is pressed in a one-line textarea. */
+        EL_LVGL_CALL(w->cb_submit, (el_val_t)slot, (el_val_t)0);
+    }
+}
+
+/* ── Initialisation ───────────────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_init — call lv_init(). The host must have already initialised the
+ * display driver and input driver before this, or immediately after. Idempotent.
+ */
+void el_lvgl_init(void) {
+    static int done = 0;
+    if (done) return;
+    done = 1;
+    lv_init();
+}
+
+/*
+ * el_lvgl_run_loop — drive lv_task_handler() indefinitely.
+ *
+ * On RTOS: this function should run inside a dedicated FreeRTOS/Zephyr task.
+ * On bare metal: call this as the last statement of main().
+ *
+ * The 5 ms delay between handler calls matches the LVGL documentation
+ * recommendation for a ~200 Hz refresh budget.
+ *
+ * On hosted Linux (EL_LVGL_SDL or similar), usleep(5000) is used. On RTOS
+ * targets define EL_LVGL_RTOS_DELAY(ms) to map to vTaskDelay/k_sleep/etc.
+ */
+void el_lvgl_run_loop(void) {
+    for (;;) {
+        lv_task_handler();
+#if defined(EL_LVGL_RTOS_DELAY)
+        EL_LVGL_RTOS_DELAY(5);
+#elif defined(__linux__) || defined(__APPLE__)
+        {
+            /* Hosted test build — usleep available. */
+#include <unistd.h>
+            usleep(5000);
+        }
+#endif
+        /* Bare-metal without a delay macro: the HAL tick increment loop
+         * is the caller's responsibility. No sleep needed if lv_tick_inc()
+         * is driven from a hardware timer ISR. */
+    }
+}
+
+/* ── Window ───────────────────────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_window_create — configure lv_scr_act() as a vertical flex container
+ * and return a slot handle wrapping it. The title is stored for informational
+ * purposes (e.g., a status bar widget the host might create). Width/height
+ * are ignored on embedded targets because the screen size is fixed by the
+ * display driver; they are accepted for API compatibility with other backends.
+ */
+int64_t el_lvgl_window_create(const char *title, int width, int height,
+                               int min_width, int min_height) {
+    (void)width; (void)height; (void)min_width; (void)min_height;
+
+    lv_obj_t *scr = lv_scr_act();
+
+    /* Configure the active screen as a vertical flex container so that
+     * widgets added via __widget_add_child stack naturally. */
+    lv_obj_set_flex_flow(scr, LV_FLEX_FLOW_COLUMN);
+    lv_obj_set_size(scr, LV_PCT(100), LV_PCT(100));
+
+    /* Store the window title in a user-data string on the screen object
+     * so host code can retrieve it if it wants to render a title bar. */
+    if (title && *title) {
+        /* lv_obj_set_user_data stores a void* — we cast the string pointer.
+         * The string must outlive the screen object; for literals this is
+         * always true. For dynamic titles use el_lvgl_window_set_title. */
+        lv_obj_set_user_data(scr, (void *)(uintptr_t)title);
+    }
+
+    /* Allocate a slot for the screen object. */
+    int64_t h = lvgl_slot_alloc(EL_LVGL_WINDOW, scr);
+    return h;
+}
+
+/*
+ * el_lvgl_window_show — no-op on embedded. The screen is always visible.
+ */
+void el_lvgl_window_show(int64_t handle) {
+    (void)handle;
+    /* On multi-screen setups, load the screen: */
+    /* ElLvglWidget *w = lvgl_slot_get(handle);
+     * if (w) lv_scr_load(w->obj); */
+}
+
+/*
+ * el_lvgl_window_set_title — update the user_data pointer on the screen object.
+ * On embedded, "title" is typically only used by a custom host title bar.
+ */
+void el_lvgl_window_set_title(int64_t handle, const char *title) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w || w->kind != EL_LVGL_WINDOW) return;
+    lv_obj_set_user_data(w->obj, (void *)(uintptr_t)(title ? title : ""));
+}
+
+/* ── Layout containers ────────────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_vstack_create — vertical flex column with inter-item gap = spacing.
+ */
+int64_t el_lvgl_vstack_create(int spacing) {
+    lv_obj_t *obj = lv_obj_create(lv_scr_act());
+    lv_obj_set_flex_flow(obj, LV_FLEX_FLOW_COLUMN);
+    lv_obj_set_style_pad_row(obj, (lv_coord_t)spacing, 0);
+    lv_obj_set_size(obj, LV_SIZE_CONTENT, LV_SIZE_CONTENT);
+    /* Remove default LVGL border and background so containers are transparent
+     * by default, matching the AppKit/GTK4 backends. */
+    lv_obj_set_style_border_width(obj, 0, 0);
+    lv_obj_set_style_bg_opa(obj, LV_OPA_TRANSP, 0);
+    lv_obj_set_style_pad_all(obj, 0, 0);
+    return lvgl_slot_alloc(EL_LVGL_VSTACK, obj);
+}
+
+/*
+ * el_lvgl_hstack_create — horizontal flex row with inter-item gap = spacing.
+ */
+int64_t el_lvgl_hstack_create(int spacing) {
+    lv_obj_t *obj = lv_obj_create(lv_scr_act());
+    lv_obj_set_flex_flow(obj, LV_FLEX_FLOW_ROW);
+    lv_obj_set_style_pad_column(obj, (lv_coord_t)spacing, 0);
+    lv_obj_set_size(obj, LV_SIZE_CONTENT, LV_SIZE_CONTENT);
+    lv_obj_set_style_border_width(obj, 0, 0);
+    lv_obj_set_style_bg_opa(obj, LV_OPA_TRANSP, 0);
+    lv_obj_set_style_pad_all(obj, 0, 0);
+    return lvgl_slot_alloc(EL_LVGL_HSTACK, obj);
+}
+
+/*
+ * el_lvgl_zstack_create — plain container, children positioned absolutely.
+ * No flex flow is set; callers use lv_obj_set_pos() on children directly,
+ * or rely on their natural 0,0 origin.
+ */
+int64_t el_lvgl_zstack_create(void) {
+    lv_obj_t *obj = lv_obj_create(lv_scr_act());
+    lv_obj_set_size(obj, LV_SIZE_CONTENT, LV_SIZE_CONTENT);
+    lv_obj_set_style_border_width(obj, 0, 0);
+    lv_obj_set_style_bg_opa(obj, LV_OPA_TRANSP, 0);
+    lv_obj_set_style_pad_all(obj, 0, 0);
+    return lvgl_slot_alloc(EL_LVGL_ZSTACK, obj);
+}
+
+/*
+ * el_lvgl_scroll_create — vertically scrollable container.
+ */
+int64_t el_lvgl_scroll_create(void) {
+    lv_obj_t *obj = lv_obj_create(lv_scr_act());
+    lv_obj_set_scroll_dir(obj, LV_DIR_VER);
+    lv_obj_set_flex_flow(obj, LV_FLEX_FLOW_COLUMN);
+    lv_obj_set_size(obj, LV_PCT(100), LV_SIZE_CONTENT);
+    lv_obj_set_style_border_width(obj, 0, 0);
+    lv_obj_set_style_pad_all(obj, 0, 0);
+    return lvgl_slot_alloc(EL_LVGL_SCROLL, obj);
+}
+
+/* ── Widget factories ─────────────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_label_create — static text label.
+ */
+int64_t el_lvgl_label_create(const char *text) {
+    lv_obj_t *obj = lv_label_create(lv_scr_act());
+    lv_label_set_text(obj, text ? text : "");
+    return lvgl_slot_alloc(EL_LVGL_LABEL, obj);
+}
+
+/*
+ * el_lvgl_button_create — pressable button with a child label.
+ *
+ * LVGL buttons are containers; text is placed in an inner lv_label child.
+ * We store the child label pointer in btn_label so set_text / get_text can
+ * reach it without searching the object tree at runtime.
+ */
+int64_t el_lvgl_button_create(const char *label) {
+    lv_obj_t *btn = lv_btn_create(lv_scr_act());
+    lv_obj_t *lbl = lv_label_create(btn);
+    lv_label_set_text(lbl, label ? label : "");
+    lv_obj_center(lbl);
+
+    int64_t h = lvgl_slot_alloc(EL_LVGL_BUTTON, btn);
+    if (h >= 0) {
+        g_widgets[h].btn_label = lbl;
+        /* Register click callback immediately so button responds when a
+         * callback name is registered later via __widget_on_click. */
+        lv_obj_add_event_cb(btn, el_lvgl_event_cb, LV_EVENT_CLICKED,
+                            (void *)(intptr_t)h);
+    }
+    return h;
+}
+
+/*
+ * el_lvgl_text_field_create — single-line text input.
+ */
+int64_t el_lvgl_text_field_create(const char *placeholder) {
+    lv_obj_t *obj = lv_textarea_create(lv_scr_act());
+    lv_textarea_set_one_line(obj, true);
+    if (placeholder && *placeholder) {
+        lv_textarea_set_placeholder_text(obj, placeholder);
+    }
+    int64_t h = lvgl_slot_alloc(EL_LVGL_TEXTFIELD, obj);
+    if (h >= 0) {
+        lv_obj_add_event_cb(obj, el_lvgl_event_cb, LV_EVENT_VALUE_CHANGED,
+                            (void *)(intptr_t)h);
+        lv_obj_add_event_cb(obj, el_lvgl_event_cb, LV_EVENT_READY,
+                            (void *)(intptr_t)h);
+    }
+    return h;
+}
+
+/*
+ * el_lvgl_text_area_create — multi-line text input.
+ */
+int64_t el_lvgl_text_area_create(const char *placeholder) {
+    lv_obj_t *obj = lv_textarea_create(lv_scr_act());
+    lv_textarea_set_one_line(obj, false);
+    if (placeholder && *placeholder) {
+        lv_textarea_set_placeholder_text(obj, placeholder);
+    }
+    int64_t h = lvgl_slot_alloc(EL_LVGL_TEXTAREA, obj);
+    if (h >= 0) {
+        lv_obj_add_event_cb(obj, el_lvgl_event_cb, LV_EVENT_VALUE_CHANGED,
+                            (void *)(intptr_t)h);
+    }
+    return h;
+}
+
+/*
+ * el_lvgl_image_create — image widget.
+ *
+ * On hosted Linux (SDL backend), path is a filesystem path.
+ * On embedded with SPIFFS/LittleFS, path is a SPIFFS URI: "S:/image.bin".
+ * LVGL image decoders are registered separately by the host application.
+ */
+int64_t el_lvgl_image_create(const char *path_or_name) {
+    lv_obj_t *obj = lv_img_create(lv_scr_act());
+    if (path_or_name && *path_or_name) {
+        lv_img_set_src(obj, path_or_name);
+    }
+    return lvgl_slot_alloc(EL_LVGL_IMAGE, obj);
+}
+
+/* ── Widget property setters ─────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_widget_set_text — update visible text.
+ *
+ * Dispatch per kind:
+ *   LABEL     → lv_label_set_text
+ *   BUTTON    → lv_label_set_text on inner btn_label child
+ *   TEXTFIELD / TEXTAREA → lv_textarea_set_text
+ *   WINDOW    → lv_obj_set_user_data (stores title string)
+ */
+void el_lvgl_widget_set_text(int64_t handle, const char *text) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    const char *t = text ? text : "";
+    switch (w->kind) {
+        case EL_LVGL_LABEL:
+            lv_label_set_text(w->obj, t);
+            break;
+        case EL_LVGL_BUTTON:
+            if (w->btn_label) lv_label_set_text(w->btn_label, t);
+            break;
+        case EL_LVGL_TEXTFIELD:
+        case EL_LVGL_TEXTAREA:
+            lv_textarea_set_text(w->obj, t);
+            break;
+        case EL_LVGL_WINDOW:
+            lv_obj_set_user_data(w->obj, (void *)(uintptr_t)t);
+            break;
+        default:
+            break;
+    }
+}
+
+/*
+ * el_lvgl_widget_get_text — retrieve visible text.
+ *
+ * Returns a pointer into LVGL's internal storage — valid until the next LVGL
+ * operation that modifies the widget. Callers that need to hold the value
+ * across LVGL calls must strdup() it.
+ */
+const char *el_lvgl_widget_get_text(int64_t handle) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return "";
+    switch (w->kind) {
+        case EL_LVGL_LABEL:
+            return lv_label_get_text(w->obj);
+        case EL_LVGL_BUTTON:
+            return w->btn_label ? lv_label_get_text(w->btn_label) : "";
+        case EL_LVGL_TEXTFIELD:
+        case EL_LVGL_TEXTAREA:
+            return lv_textarea_get_text(w->obj);
+        default:
+            return "";
+    }
+}
+
+/*
+ * el_lvgl_widget_set_color — foreground (text) colour.
+ *
+ * r/g/b are 0.0–1.0 floats bit-cast as el_val_t (see el_runtime.h).
+ * LVGL lv_color_make takes uint8_t 0–255 components.
+ */
+void el_lvgl_widget_set_color(int64_t handle,
+                               float r, float g, float b, float a) {
+    (void)a; /* LVGL text colour has no per-glyph alpha channel */
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_color_t c = lv_color_make(
+        (uint8_t)(r * 255.0f + 0.5f),
+        (uint8_t)(g * 255.0f + 0.5f),
+        (uint8_t)(b * 255.0f + 0.5f));
+    lv_obj_set_style_text_color(w->obj, c, 0);
+    if (w->kind == EL_LVGL_BUTTON && w->btn_label) {
+        lv_obj_set_style_text_color(w->btn_label, c, 0);
+    }
+}
+
+/*
+ * el_lvgl_widget_set_bg_color — background fill colour + opacity.
+ */
+void el_lvgl_widget_set_bg_color(int64_t handle,
+                                  float r, float g, float b, float a) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_color_t c = lv_color_make(
+        (uint8_t)(r * 255.0f + 0.5f),
+        (uint8_t)(g * 255.0f + 0.5f),
+        (uint8_t)(b * 255.0f + 0.5f));
+    lv_opa_t opa = (lv_opa_t)(a * 255.0f + 0.5f);
+    lv_obj_set_style_bg_color(w->obj, c, 0);
+    lv_obj_set_style_bg_opa(w->obj, opa, 0);
+}
+
+/*
+ * el_lvgl_widget_set_font — apply font to text-bearing widget.
+ *
+ * The `family` parameter is accepted for API compatibility but LVGL uses
+ * compiled-in fonts only. Only the size and bold flag have effect unless
+ * EL_LVGL_CUSTOM_FONT is defined by the host.
+ */
+void el_lvgl_widget_set_font(int64_t handle,
+                              const char *family, int size, int bold) {
+    (void)family; /* ignored; LVGL uses compiled-in Montserrat fonts */
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    const lv_font_t *font = font_select(size, bold);
+    if (!font) return;
+    lv_obj_set_style_text_font(w->obj, font, 0);
+    if (w->kind == EL_LVGL_BUTTON && w->btn_label) {
+        lv_obj_set_style_text_font(w->btn_label, font, 0);
+    }
+}
+
+/*
+ * el_lvgl_widget_set_padding — set per-side padding (top/right/bottom/left).
+ */
+void el_lvgl_widget_set_padding(int64_t handle,
+                                 int top, int right, int bottom, int left) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_set_style_pad_top(w->obj,    (lv_coord_t)top,    0);
+    lv_obj_set_style_pad_right(w->obj,  (lv_coord_t)right,  0);
+    lv_obj_set_style_pad_bottom(w->obj, (lv_coord_t)bottom, 0);
+    lv_obj_set_style_pad_left(w->obj,   (lv_coord_t)left,   0);
+}
+
+/*
+ * el_lvgl_widget_set_width — set explicit pixel width.
+ */
+void el_lvgl_widget_set_width(int64_t handle, int width) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_set_width(w->obj, (lv_coord_t)width);
+}
+
+/*
+ * el_lvgl_widget_set_height — set explicit pixel height.
+ */
+void el_lvgl_widget_set_height(int64_t handle, int height) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_set_height(w->obj, (lv_coord_t)height);
+}
+
+/*
+ * el_lvgl_widget_set_flex — set flex grow factor.
+ *
+ * flex > 0 → lv_obj_set_flex_grow(obj, flex): object expands to fill
+ *             remaining space proportional to its grow factor.
+ * flex == 0 → lv_obj_set_flex_grow(obj, 0): object uses natural size.
+ */
+void el_lvgl_widget_set_flex(int64_t handle, int flex) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_set_flex_grow(w->obj, (uint8_t)(flex > 0 ? flex : 0));
+}
+
+/*
+ * el_lvgl_widget_set_corner_radius — set border radius.
+ */
+void el_lvgl_widget_set_corner_radius(int64_t handle, int radius) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_set_style_radius(w->obj, (lv_coord_t)radius, 0);
+}
+
+/*
+ * el_lvgl_widget_set_disabled — enable/disable interactive state.
+ *
+ * LV_STATE_DISABLED greys out the widget and prevents input events.
+ */
+void el_lvgl_widget_set_disabled(int64_t handle, int disabled) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    if (disabled) {
+        lv_obj_add_state(w->obj, LV_STATE_DISABLED);
+    } else {
+        lv_obj_clear_state(w->obj, LV_STATE_DISABLED);
+    }
+}
+
+/*
+ * el_lvgl_widget_set_hidden — show/hide widget.
+ *
+ * LV_OBJ_FLAG_HIDDEN hides the widget and removes it from layout flow.
+ */
+void el_lvgl_widget_set_hidden(int64_t handle, int hidden) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    if (hidden) {
+        lv_obj_add_flag(w->obj, LV_OBJ_FLAG_HIDDEN);
+    } else {
+        lv_obj_clear_flag(w->obj, LV_OBJ_FLAG_HIDDEN);
+    }
+}
+
+/* ── Tree operations ──────────────────────────────────────────────────────── */
+
+/*
+ * el_lvgl_widget_add_child — attach child widget to parent.
+ *
+ * lv_obj_set_parent() reparents the child object inside the LVGL tree.
+ * For WINDOW parents we use the screen object itself as the parent, since
+ * lv_scr_act() IS the root container.
+ */
+void el_lvgl_widget_add_child(int64_t parent, int64_t child) {
+    ElLvglWidget *pw = lvgl_slot_get(parent);
+    ElLvglWidget *cw = lvgl_slot_get(child);
+    if (!pw || !cw) return;
+    lv_obj_set_parent(cw->obj, pw->obj);
+}
+
+/*
+ * el_lvgl_widget_remove_child — detach child from its current parent.
+ *
+ * LVGL has no explicit "remove from parent without deleting" operation.
+ * We reparent the child back to the active screen (making it a root-level
+ * floating widget) and then hide it. The widget still occupies a slot and
+ * can be re-attached or destroyed later.
+ */
+void el_lvgl_widget_remove_child(int64_t parent, int64_t child) {
+    (void)parent;
+    ElLvglWidget *cw = lvgl_slot_get(child);
+    if (!cw) return;
+    /* Move to screen root and hide. */
+    lv_obj_set_parent(cw->obj, lv_scr_act());
+    lv_obj_add_flag(cw->obj, LV_OBJ_FLAG_HIDDEN);
+}
+
+/*
+ * el_lvgl_widget_destroy — delete widget and its children from the LVGL tree,
+ * then free the slot.
+ *
+ * lv_obj_del() recursively deletes the object and all children. After this
+ * call the handle is invalid and must not be used.
+ */
+void el_lvgl_widget_destroy(int64_t handle) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    lv_obj_del(w->obj);
+    lvgl_slot_free(handle);
+}
+
+/* ── Event registration ───────────────────────────────────────────────────── */
+
+/*
+ * Event registration stores the El function name in the widget slot. The
+ * actual lv_obj_add_event_cb() call is made here (or was made in the factory
+ * for buttons/textfields where we know the relevant event codes upfront).
+ *
+ * For widgets that did not register their event callback in the factory (e.g.
+ * labels receiving a click handler), we add the LVGL event binding now.
+ */
+
+void el_lvgl_widget_on_click(int64_t handle, const char *fn_name) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    strncpy(w->cb_click, fn_name ? fn_name : "", 255);
+    w->cb_click[255] = '\0';
+    /*
+     * Buttons already have LV_EVENT_CLICKED registered in the factory.
+     * For other widget kinds (labels, containers used as tap targets), add
+     * the click flag and register the callback.
+     */
+    if (w->kind != EL_LVGL_BUTTON) {
+        lv_obj_add_flag(w->obj, LV_OBJ_FLAG_CLICKABLE);
+        lv_obj_add_event_cb(w->obj, el_lvgl_event_cb, LV_EVENT_CLICKED,
+                            (void *)(intptr_t)handle);
+    }
+}
+
+void el_lvgl_widget_on_change(int64_t handle, const char *fn_name) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    strncpy(w->cb_change, fn_name ? fn_name : "", 255);
+    w->cb_change[255] = '\0';
+    /*
+     * Textfield/textarea factories already register VALUE_CHANGED.
+     * For other kinds (e.g. a custom toggle), add the binding now.
+     */
+    if (w->kind != EL_LVGL_TEXTFIELD && w->kind != EL_LVGL_TEXTAREA) {
+        lv_obj_add_event_cb(w->obj, el_lvgl_event_cb, LV_EVENT_VALUE_CHANGED,
+                            (void *)(intptr_t)handle);
+    }
+}
+
+void el_lvgl_widget_on_submit(int64_t handle, const char *fn_name) {
+    ElLvglWidget *w = lvgl_slot_get(handle);
+    if (!w) return;
+    strncpy(w->cb_submit, fn_name ? fn_name : "", 255);
+    w->cb_submit[255] = '\0';
+    /*
+     * LV_EVENT_READY fires when Enter is pressed in a one-line textarea.
+     * Textfield factories already register READY. For other kinds, add it.
+     */
+    if (w->kind != EL_LVGL_TEXTFIELD) {
+        lv_obj_add_event_cb(w->obj, el_lvgl_event_cb, LV_EVENT_READY,
+                            (void *)(intptr_t)handle);
+    }
+}
+
+#endif /* EL_TARGET_LVGL */

lang/runtime/el_native_target.h

@@ -0,0 +1,574 @@
+/*
+ * el_native_target.h — Native widget declarations for el programs targeting
+ * native desktop UI (AppKit / GTK4 / Win32).
+ *
+ * This header is designed to be included AFTER el_runtime.h without conflict:
+ *   - It does NOT redefine el_to_float, el_from_float, or any el_runtime.h
+ *     static inlines.
+ *   - It does NOT redeclare __println, __print, or other functions whose
+ *     return types differ between el_seed.h and el_runtime.h.
+ *   - It adds: native widget builtins + float arithmetic helpers that the
+ *     current el_runtime.h omits but elc still emits calls to.
+ *
+ * Usage:
+ *   Inject via -include at compile time, OR #include it after el_runtime.h.
+ *
+ *   clang -DEL_TARGET_MACOS -include el_native_target.h -c my_app.c ...
+ */
+
+#pragma once
+
+#include <stdint.h>
+#include <stdlib.h>
+
+/* el_val_t must already be defined by el_runtime.h or el_seed.h. */
+#ifndef EL_VAL_T_DEFINED
+typedef int64_t el_val_t;
+#endif
+
+/* ── Float arithmetic helpers ───────────────────────────────────────────────
+ * elc emits calls to float_div / float_mul etc. for Float-typed expressions.
+ * These were in el_runtime.c through v1.0.0-20260501 but are missing from the
+ * current el_runtime.h. Redeclared here as static inline to avoid link deps.
+ * Only defined if not already declared (old runtimes that still have them). */
+
+#ifndef EL_FLOAT_OPS_DEFINED
+#define EL_FLOAT_OPS_DEFINED
+
+/* el_to_float / el_from_float — bit-cast between el_val_t and double.
+ * Defined as static inline in both el_runtime.h and el_seed.h; we do NOT
+ * redefine them here. We rely on one of those headers being included first. */
+
+static inline el_val_t float_div(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b;
+    ur.d = (ub.d != 0.0) ? (ua.d / ub.d) : 0.0;
+    return ur.i;
+}
+
+static inline el_val_t float_mul(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d * ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_add(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d + ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_sub(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub, ur;
+    ua.i = a; ub.i = b; ur.d = ua.d - ub.d;
+    return ur.i;
+}
+
+static inline el_val_t float_lt(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d < ub.d);
+}
+
+static inline el_val_t float_gt(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d > ub.d);
+}
+
+static inline el_val_t float_lte(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d <= ub.d);
+}
+
+static inline el_val_t float_gte(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d >= ub.d);
+}
+
+static inline el_val_t float_eq(el_val_t a, el_val_t b) {
+    union { double d; int64_t i; } ua, ub;
+    ua.i = a; ub.i = b;
+    return (el_val_t)(ua.d == ub.d);
+}
+
+#endif /* EL_FLOAT_OPS_DEFINED */
+
+/* ── Native widget system (macOS AppKit) ────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_MACOS and linked with el_appkit.m.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid. */
+
+#ifdef EL_TARGET_MACOS
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+void      __widget_set_data(el_val_t handle, el_val_t data_str);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_MACOS */
+
+/* ── Native widget system (Linux GTK4) ──────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_LINUX and linked with el_gtk4.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ * All functions have the same signatures as EL_TARGET_MACOS above. */
+
+#ifdef EL_TARGET_LINUX
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader — same JSON output as EL_TARGET_MACOS */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_LINUX */
+
+/* ── Native widget system (Windows Win32) ───────────────────────────────────
+ * Available when compiled with -DEL_TARGET_WIN32 and linked with el_win32.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ * Link: el_win32.obj comctl32.lib user32.lib gdi32.lib */
+
+#ifdef EL_TARGET_WIN32
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_WIN32 */
+
+/* ── Native widget system (iOS UIKit) ───────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_IOS and linked with el_uikit.m.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * iOS lifecycle note: UIApplicationMain never returns. The el program must
+ * store its UI-build logic in a void(*)(void) function pointer, assign it to
+ * el_main_entry_fn, then call __native_run_loop. ElAppDelegate invokes
+ * el_main_entry_fn inside didFinishLaunchingWithOptions.
+ * Call el_uikit_set_args(argc, argv) from main() before __native_run_loop. */
+
+#ifdef EL_TARGET_IOS
+
+/* Lifecycle entry-function hook — set before calling __native_run_loop. */
+extern void (*el_main_entry_fn)(void);
+
+/* Forward argc/argv from main() to UIApplicationMain. */
+void      el_uikit_set_args(int argc, char** argv);
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_IOS */
+
+/* ── Native widget system (Android JNI) ─────────────────────────────────────
+ * Available when compiled with -DEL_TARGET_ANDROID and linked with
+ * libelruntime.so (which includes el_android.c compiled by the NDK build).
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Java companion: ElBridge.java (package com.neuron.el) must be compiled into
+ * the APK. The Activity must call ElBridge.init(this) before any widget ops.
+ *
+ * Link flags (in Android.mk or CMakeLists.txt):
+ *   -landroid -llog -ldl */
+
+#ifdef EL_TARGET_ANDROID
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);   /* no-op on Android */
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_ANDROID */
+
+/* ── Native widget system (LVGL v9 — embedded / microcontroller) ─────────────
+ * Available when compiled with -DEL_TARGET_LVGL and linked with el_lvgl.c
+ * and the LVGL library (lvgl.a or lvgl source tree).
+ *
+ * Target platforms: ESP32, STM32, industrial panels. Any system with 256KB+
+ * RAM and an LVGL-compatible display driver. No OS required.
+ *
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Bare-metal / no dynamic linker:
+ *   Compile with -DEL_LVGL_NO_DLSYM and provide:
+ *     el_val_t el_lvgl_dispatch(const char *fn, el_val_t a, el_val_t b);
+ *
+ * Compile:
+ *   gcc -DEL_TARGET_LVGL -I./lvgl el_lvgl.c -c -o el_lvgl.o
+ *   # Then link with lvgl.a. */
+
+#ifdef EL_TARGET_LVGL
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader — same JSON output as all other native targets */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_LVGL */
+
+/* ── Native widget system (SDL2 — embedded / Pi) ────────────────────────────
+ * Available when compiled with -DEL_TARGET_SDL2 and linked with el_sdl2.c.
+ * Widget handles are opaque int64_t slot indices; -1 = invalid.
+ *
+ * Target: Raspberry Pi Zero, embedded Linux, any system with a framebuffer
+ * and SDL2 available. No GTK, no desktop environment required.
+ *
+ * Compile:
+ *   gcc -DEL_TARGET_SDL2 $(sdl2-config --cflags) -c el_sdl2.c -o el_sdl2.o
+ * Link:
+ *   $(sdl2-config --libs) -lSDL2_ttf -lSDL2_image -ldl */
+
+#ifdef EL_TARGET_SDL2
+
+/* Initialisation */
+void      __native_init(void);
+void      __native_run_loop(void);
+
+/* Window */
+el_val_t  __window_create(el_val_t title, el_val_t width, el_val_t height,
+                           el_val_t min_width, el_val_t min_height);
+void      __window_show(el_val_t handle);
+void      __window_set_title(el_val_t handle, el_val_t title);
+
+/* Layout containers */
+el_val_t  __vstack_create(el_val_t spacing);
+el_val_t  __hstack_create(el_val_t spacing);
+el_val_t  __zstack_create(void);
+el_val_t  __scroll_create(void);
+
+/* Widgets */
+el_val_t  __label_create(el_val_t text);
+el_val_t  __button_create(el_val_t label);
+el_val_t  __text_field_create(el_val_t placeholder);
+el_val_t  __text_area_create(el_val_t placeholder);
+el_val_t  __image_create(el_val_t path_or_name);
+
+/* Widget properties */
+void      __widget_set_text(el_val_t handle, el_val_t text);
+el_val_t  __widget_get_text(el_val_t handle);
+void      __widget_set_color(el_val_t handle, el_val_t r, el_val_t g,
+                              el_val_t b, el_val_t a);
+void      __widget_set_bg_color(el_val_t handle, el_val_t r, el_val_t g,
+                                 el_val_t b, el_val_t a);
+void      __widget_set_font(el_val_t handle, el_val_t family,
+                             el_val_t size, el_val_t bold);
+void      __widget_set_padding(el_val_t handle, el_val_t top, el_val_t right,
+                                el_val_t bottom, el_val_t left);
+void      __widget_set_width(el_val_t handle, el_val_t width);
+void      __widget_set_height(el_val_t handle, el_val_t height);
+void      __widget_set_flex(el_val_t handle, el_val_t flex);
+void      __widget_set_corner_radius(el_val_t handle, el_val_t radius);
+void      __widget_set_disabled(el_val_t handle, el_val_t disabled);
+void      __widget_set_hidden(el_val_t handle, el_val_t hidden);
+
+/* Layout / tree */
+void      __widget_add_child(el_val_t parent, el_val_t child);
+void      __widget_remove_child(el_val_t parent, el_val_t child);
+void      __widget_destroy(el_val_t handle);
+
+/* Events */
+void      __widget_on_click(el_val_t handle, el_val_t fn_name);
+void      __widget_on_change(el_val_t handle, el_val_t fn_name);
+void      __widget_on_submit(el_val_t handle, el_val_t fn_name);
+
+/* Manifest reader */
+el_val_t  __manifest_read(el_val_t path);
+
+#endif /* EL_TARGET_SDL2 */

lang/runtime/el_platform_win.h

@@ -0,0 +1,117 @@
+#ifndef EL_PLATFORM_WIN_H
+#define EL_PLATFORM_WIN_H
+/*
+ * el_platform_win.h — Windows OS-boundary shim for el_runtime.c.
+ *
+ * Branch: feat/windows-el-runtime. Included ONLY when _WIN32 is defined; the POSIX build is
+ * untouched. Goal: let el_runtime.c (a BSD-sockets / dlfcn / fork host) compile and link with
+ * mingw-w64 into a native neuron.exe, with no behavioural change to the Linux/macOS build.
+ *
+ * What it maps:
+ *   - sockets  : winsock2 (same call names: socket/bind/listen/accept/recv/send/setsockopt).
+ *                Sockets close with closesocket() (see el_closesocket), and the stack must be
+ *                started once with WSAStartup — done automatically via a load-time constructor.
+ *   - dlsym    : el_runtime.c uses dlsym(RTLD_DEFAULT, name) to resolve callback/tool symbols
+ *                exported by the main module. Windows equivalent: GetProcAddress on the process
+ *                module. Link the soul with -Wl,--export-all-symbols so the symbols are findable.
+ *   - popen    : mapped to _popen/_pclose.
+ *   - threads  : UNCHANGED. mingw-w64 ships winpthreads, so <pthread.h> + -lpthread just work.
+ */
+
+#ifndef WIN32_LEAN_AND_MEAN
+#define WIN32_LEAN_AND_MEAN
+#endif
+#include <winsock2.h>
+#include <ws2tcpip.h>
+#include <windows.h>
+#include <io.h>
+#include <process.h>
+
+/* Portable headers mingw-w64 provides (verified present). */
+#include <stdarg.h>
+#include <stdint.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <strings.h>   /* strcasecmp */
+#include <ctype.h>
+#include <math.h>
+#include <time.h>
+#include <sys/time.h>  /* mingw-w64 provides gettimeofday here */
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <fcntl.h>
+#include <dirent.h>
+#include <errno.h>
+#include <pthread.h>
+
+/* ── socket close ─────────────────────────────────────────────────────────── */
+/* Winsock closes sockets with closesocket(), not close() (close() is for file fds). The POSIX
+   build defines the same helper as close() so the call sites are identical across platforms. */
+static inline int el_closesocket(SOCKET s) { return closesocket(s); }
+
+/* ── winsock init (once, at load) ─────────────────────────────────────────── */
+static void el__win_net_init(void) {
+    static int inited = 0;
+    if (!inited) { WSADATA w; WSAStartup(MAKEWORD(2, 2), &w); inited = 1; }
+}
+__attribute__((constructor)) static void el__win_ctor(void) { el__win_net_init(); }
+
+/* ── dlsym → GetProcAddress ───────────────────────────────────────────────── */
+#ifndef RTLD_DEFAULT
+#define RTLD_DEFAULT ((void*)0)
+#endif
+static inline void* el_win_dlsym(void* handle, const char* name) {
+    (void)handle;
+    return (void*)(uintptr_t)GetProcAddress(GetModuleHandleA(NULL), name);
+}
+#define dlsym(h, n) el_win_dlsym((h), (n))
+
+/* ── popen / pclose ───────────────────────────────────────────────────────── */
+#define popen  _popen
+#define pclose _pclose
+
+/* ── misc POSIX → Win32 shims ─────────────────────────────────────────────── */
+#include <direct.h>            /* _mkdir */
+#define mkdir(path, mode) _mkdir(path)     /* POSIX mkdir(path,mode) → _mkdir(path) */
+#define timegm _mkgmtime                   /* UTC tm → time_t */
+
+/* setenv/unsetenv: not in the Windows CRT; map to _putenv_s / SetEnvironmentVariable. */
+static inline int setenv(const char* name, const char* value, int overwrite) {
+    (void)overwrite;
+    return _putenv_s(name, value ? value : "");
+}
+static inline int unsetenv(const char* name) {
+    /* _putenv_s(name, "") sets VAR="" rather than removing it.
+     * SetEnvironmentVariableA(name, NULL) truly deletes it from the Win32
+     * env block; then we sync the CRT cache with _putenv("NAME=").       */
+    SetEnvironmentVariableA(name, NULL);
+    size_t len = strlen(name);
+    char *buf = (char*)malloc(len + 2);
+    if (!buf) return -1;
+    memcpy(buf, name, len);
+    buf[len] = '=';
+    buf[len + 1] = '\0';
+    _putenv(buf);
+    free(buf);
+    return 0;
+}
+
+/* nanosleep — not available in MSVC/UCRT; approximate with Sleep(). */
+static inline int el_nanosleep(const struct timespec *req, struct timespec *rem) {
+    (void)rem;
+    DWORD ms = (DWORD)((req->tv_sec * 1000ULL) + (req->tv_nsec / 1000000ULL));
+    Sleep(ms ? ms : 1);
+    return 0;
+}
+#define nanosleep(req, rem) el_nanosleep((req), (rem))
+
+/* localtime_r/gmtime_r: Windows offers localtime_s/gmtime_s with reversed arg order. */
+static inline struct tm* localtime_r(const time_t* t, struct tm* out) {
+    return localtime_s(out, t) == 0 ? out : (struct tm*)0;
+}
+static inline struct tm* gmtime_r(const time_t* t, struct tm* out) {
+    return gmtime_s(out, t) == 0 ? out : (struct tm*)0;
+}
+
+#endif /* EL_PLATFORM_WIN_H */

lang/runtime/el_runtime.h

@@ -34,12 +34,12 @@
  *                pq_hybrid_* and HKDF-SHA256 derivation.
  *
  * Canonical compile command:
- *   cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
- *      -o <out> <prog>.c el-compiler/runtime/el_runtime.c
+ *   cc -std=c11 -I runtime -lcurl -lpthread \
+ *      -o <out> <prog>.c runtime/el_runtime.c
  *
  * With liboqs (post-quantum stack):
- *   cc -std=c11 -I el-compiler/runtime -lcurl -lpthread -loqs -lcrypto \
- *      -o <out> <prog>.c el-compiler/runtime/el_runtime.c
+ *   cc -std=c11 -I runtime -lcurl -lpthread -loqs -lcrypto \
+ *      -o <out> <prog>.c runtime/el_runtime.c
  */
 
 #pragma once
@@ -117,6 +117,15 @@ el_val_t  el_min(el_val_t a, el_val_t b);
 void      el_retain(el_val_t v);
 void      el_release(el_val_t v);
 
+/* ── Arena scoping ────────────────────────────────────────────────────────────
+ * el_arena_push() activates the string arena (if not already active) and
+ * returns a mark; el_arena_pop(mark) frees all strings allocated since that
+ * mark. Used by codegen for per-function/statement scoping and by long-running
+ * EL loops (e.g. the soul daemon's awareness tick) to reclaim per-iteration
+ * allocations. */
+el_val_t  el_arena_push(void);
+el_val_t  el_arena_pop(el_val_t mark);
+
 /* ── List ────────────────────────────────────────────────────────────────── */
 
 el_val_t  el_list_new(el_val_t count, ...);
@@ -142,6 +151,7 @@ el_val_t  http_get_with_headers(el_val_t url, el_val_t headers_map);
 el_val_t  http_post_with_headers(el_val_t url, el_val_t body, el_val_t headers_map);
 el_val_t  http_post_form_auth(el_val_t url, el_val_t form_body, el_val_t auth_header);
 el_val_t  http_delete(el_val_t url);
+el_val_t  http_delete_json(el_val_t url, el_val_t json_body);
 void      http_serve(el_val_t port, el_val_t handler);
 void      http_set_handler(el_val_t name);
 
@@ -167,6 +177,11 @@ void      http_set_handler(el_val_t name);
 void      http_serve_v2(el_val_t port, el_val_t handler);
 void      http_set_handler_v2(el_val_t name);
 
+/* Non-blocking variant of http_serve: runs the accept loop in a background
+ * pthread and returns immediately so the caller can continue (used by the
+ * soul daemon to run awareness_run() after starting its HTTP API). */
+void      http_serve_async(el_val_t port, el_val_t handler);
+
 /* Build an HTTP response envelope. `headers_json` should be a JSON object
  * literal like `{"WWW-Authenticate":"Basic"}` (or "" / "{}" for none). The
  * returned string carries the discriminator `{"el_http_response":1,...}`
@@ -176,11 +191,6 @@ void      http_set_handler_v2(el_val_t name);
  * auto-content-type contract for legacy handlers that return plain bodies. */
 el_val_t  http_response(el_val_t status, el_val_t headers_json, el_val_t body);
 
-/* SSE connection fd — set by http_worker_v2 before calling the El handler,
- * cleared afterwards. Defined in el_seed.c; called from el_runtime.c.
- * The getter is exposed as __http_conn_fd() to El programs. */
-void      el_seed_set_http_conn_fd(int fd);
-
 /* HTTP timeout — every libcurl request honors EL_HTTP_TIMEOUT_MS (default
  * 60000ms). Read lazily on first use, so setting the env var any time before
  * the first http_* call is sufficient.                                    */
@@ -581,6 +591,7 @@ el_val_t  engram_list_layers(void);
 el_val_t  engram_get_node(el_val_t id);
 void      engram_strengthen(el_val_t node_id);
 void      engram_forget(el_val_t node_id);
+el_val_t  engram_prune_telemetry(el_val_t older_than_ms);
 el_val_t  engram_node_count(void);
 el_val_t  engram_search(el_val_t query, el_val_t limit);
 el_val_t  engram_scan_nodes(el_val_t limit, el_val_t offset);
@@ -599,13 +610,48 @@ el_val_t  engram_load(el_val_t path);
  * can pass results straight through without round-tripping ElList/ElMap
  * through json_stringify. */
 el_val_t  engram_get_node_json(el_val_t id);
+el_val_t  engram_get_node_by_label(el_val_t label);
 el_val_t  engram_search_json(el_val_t query, el_val_t limit);
 el_val_t  engram_scan_nodes_json(el_val_t limit, el_val_t offset);
 el_val_t  engram_scan_nodes_by_type_json(el_val_t node_type, el_val_t limit, el_val_t offset);
 el_val_t  engram_neighbors_json(el_val_t node_id, el_val_t max_depth, el_val_t direction);
 el_val_t  engram_activate_json(el_val_t query, el_val_t depth);
 el_val_t  engram_stats_json(void);
+el_val_t  engram_act_stats_json(void);
+el_val_t  engram_text_health_json(void);
+el_val_t  engram_cosine_sim(el_val_t id_a, el_val_t id_b);
+/* Destructively pop up to `max` newly-formed Hebbian associations as a JSON
+ * array of {from_id,to_id,weight,hebb}. The learning process (soul daemon) is
+ * not the process that owns persistence (engram HTTP server); this is how a
+ * self-formed association crosses that boundary. (2026-08-07 self-review.) */
+el_val_t  engram_hebb_drain_json(el_val_t max);
+/* Document frequency of a term across node labels — term-specificity signal
+ * for curiosity seed selection. (2026-08-03 self-review.) */
+el_val_t  engram_label_df(el_val_t term);
+el_val_t  engram_embed_backfill(el_val_t count);
 el_val_t  engram_list_layers_json(void);
+/* Working memory introspection — count, mean weight, and top-N snapshot.
+ * Ported from runtime on 2026-06-30 self-review. */
+el_val_t  engram_wm_count(void);
+el_val_t  engram_wm_avg_weight(void);
+el_val_t  engram_wm_top_json(el_val_t n);
+/* Merge-load: add nodes/edges from a snapshot without resetting the store. */
+el_val_t  engram_load_merge(el_val_t path);
+
+/* ── WAL + compaction + integrity (ENGRAM_WAL=on; design doc §§3-14,§18) ──── */
+int       engram_wal_enabled(void);
+el_val_t  engram_crc32(el_val_t s);
+el_val_t  engram_wal_boot(el_val_t dir);          /* replay + open; returns records */
+el_val_t  engram_wal_open_dir(el_val_t dir);
+el_val_t  engram_wal_node_put(el_val_t dir, el_val_t id);
+el_val_t  engram_wal_edges_since(el_val_t dir, el_val_t start_count);
+el_val_t  engram_wal_hebb_batch(el_val_t dir, el_val_t start_count);
+el_val_t  engram_wal_forget(el_val_t dir, el_val_t id);
+el_val_t  engram_wal_compact(el_val_t dir);
+el_val_t  engram_wal_maybe_compact(el_val_t dir);
+el_val_t  engram_resolve_data_dir(void);          /* §18.2 fail-loud default */
+el_val_t  engram_is_protected(el_val_t id);       /* §18.1/18.3 derived set */
+el_val_t  engram_protected_json(void);
 /* engram_compile_layered_json — produce a prompt-ready text block split
  * into "[LAYER 0 — STRUCTURAL]" (non-suppressible layers, sacred fire)
  * and "[ENGRAM CONTEXT]" (standard suppressible layers). Returns "" if

lang/runtime/el_seed.c

@@ -8,7 +8,7 @@
  * Threading: __thread_create / __thread_join use dlsym(RTLD_DEFAULT) to look
  * up El function symbols at runtime. This is the foundation of El's parallelism.
  *
- * Link: cc -std=c11 -I el-compiler/runtime -lcurl -lpthread \
+ * Link: cc -std=c11 -I runtime -lcurl -lpthread \
  *           -o <out> <prog>.c el_seed.c
  */