Fuaran.UI.Ops.Abstractions 0.83.0

Fuaran tree-op apply engine — §4g op vocabulary + Result-returning apply against typed Node<'Msg> trees, with §4d AI-recovery-shaped error payloads. The JSON decoder is default-deny by shape: an undeclared or malformed emission is refused with a typed DecodeError carrying a stable code and a path, and a payload breaching the wire format's §21 resource limits is refused as LIMIT_EXCEEDED before the recursion that would breach them. Apache-2.0 licensed.

Fuaran op-apply + authorizing-runtime-deny telemetry — type contract and sync fire-and-forget sink interface. The observability counterpart to the Fuaran.UI.Ops apply engine and the downstream orchestration tier's authorizing runtime: every applied op surfaces as an OpApplyTelemetry record; every denied tool call surfaces as a DenyTelemetry record. Hosts implement IFuaranTelemetrySink against their own observability backend; the default sinks live in Fuaran.UI.Telemetry.Default. Apache-2.0 licensed.

Fuaran renderer – Fable + React + Feliz. Every string-to-DOM seam carries a declared sanitisation posture (SANITIZATION.md states it seam by seam): an allowlisted URL-scheme floor on href/src that also rejects the protocol-relative spellings, a positive character gate on extra-attribute names, and a raw-HTML floor over rendered markdown. Interactive dispatch fails closed – a shipped runtime denies until the host grants, and the permissive posture is reached by name. Apache-2.0 licensed.

Fuaran.Program.Server.UI — the UI adapter for the server placement of the domain-generic bounded program core: the pre-0.6.0 server names as aliases over the UI witness, and the UI event step (the validation gate in front of the core's dispatch) for the server session, the durable interpreter and the operator controls. .NET only. Released in the same version as the core it instantiates. Apache-2.0 licensed.

Fuaran.Program.UI — the UI adapter for the domain-generic bounded program core: the UI witness (the UI tier's action union, node tree, binding store, tree-ops and client effects seen through the core's witness contract), the pre-0.6.0 names as aliases over it, and the UI transport loop (the bounded driver, its channel glue and the client runtime). Fable-clean. Released in the same version as the core it instantiates. Apache-2.0 licensed.