Optionaloptions: EntityCreateOptionsOptionaloptions: EntityDeleteOptionsOptionalquery: EntityQueryHost-pushed live form of watch (§16.5). Opens a stream; onChange is
called with each fresh batch (de-duped exactly-once). Returns a handle whose
close() ends the stream. watch remains the long-poll fallback.
Query membership stream. It is intentionally distinct from subscribe():
the host validates the query and sends an authorized seed followed by
enter/update/leave deltas.
Optionaloptions: { recoveryCursor?: string }Optionaloptions: EntityUpdateOptionsOptionalinput: EntityWatchInput
Ask the user to grant this app access to an entity type for which it lacks the requested live authority. Read/query/watch may target one type or
'*'; additivecreatemay target one exact type only. Wildcard create and update/delete/grant are rejected. The host files and holds a durable approval card; an Allow resolves only after the exact host writer acknowledges and live authority rechecks. A caller deadline returnspendingwhile the durable ask remains open, a lapsed ask returnsexpired, a trust/declaration veto returnsblocked, and a post-Allow host write failure returnsdecision: 'error'withreason: 'apply-failed'— neverdeny, which only ever means a human refused.