@intentius/behold 0.26.0 → 0.27.0

package/dist/cli.js

@@ -5129,13 +5129,15 @@ function dropForeignDeclarations(ir, projectDir) {
     }
     groups[axis] = kept;
   }
-  return {
+  const out = {
     ...ir,
     nodes: ir.nodes.filter((n) => !gone.has(n.id)),
     edges: ir.edges.filter((e) => !gone.has(e.from) && !gone.has(e.to)),
     groups,
     foreign
   };
+  if (ir.dangling) out.dangling = ir.dangling.filter((d) => !gone.has(d.from));
+  return out;
 }
 function foreignNote(ir) {
   const f = ir.foreign;
@@ -12681,11 +12683,29 @@ function edgelessNote(zoom, ir, detail, instead) {
   if (zoom === "components" || zoom === "logical") return void 0;
   if (ir.nodes.length === 0 || ir.edges.length > 0) return void 0;
   if (instead) return instead;
-  if (detail !== void 0 && detail < 3) {
+  const dangling = ir.dangling?.length ?? 0;
+  if (dangling > 0) {
+    return `no edges: ${referencesCount(dangling)} ${dangling === 1 ? "names a target" : "name targets"} this project does not declare, listed on the card that holds ${dangling === 1 ? "it" : "each"}`;
+  }
+  if (detail !== void 0 && detail < 3 && !allInPipelines(ir)) {
     return "no edges at this detail \u2014 sourceRef/dependsOn and other attrs-derived references only appear at detail 3 (\u2318K \u2192 attributes, or add &detail=3)";
   }
   return "no edges \u2014 nothing in this estate references anything else";
 }
+function referencesCount(n) {
+  return `${n} reference${n === 1 ? "" : "s"}`;
+}
+function allInPipelines(ir) {
+  const byPipeline = ir.groups?.byPipeline;
+  if (!byPipeline) return false;
+  const inPipeline = new Set(Object.values(byPipeline).flat());
+  return ir.nodes.every((n) => inPipeline.has(n.id ?? ""));
+}
+function danglingNote(ir) {
+  const n = ir.dangling?.length ?? 0;
+  if (n === 0) return void 0;
+  return `${referencesCount(n)} to targets not declared here, such as another repo's workflow or a local action: listed on their cards, not drawn`;
+}
 var SAME_AS_RESOURCES = {
   choudoufu: ["composites", "attributes"],
   terraform: ["composites"]
@@ -12721,7 +12741,9 @@ function namespaceJoinNote(joined) {
 }
 function notesFor(zoom, ir, compositeEdgesAttached, logicalBefore, detail, edgelessInstead) {
   const primary = zoom === "logical" && logicalBefore !== void 0 ? logicalKept(logicalBefore, ir.nodes.length) : zoomNote(zoom, ir, compositeEdgesAttached);
-  const notes = [primary, edgelessNote(zoom, ir, detail, edgelessInstead)].filter((n) => n !== void 0);
+  const edgeless = edgelessNote(zoom, ir, detail, edgelessInstead);
+  const counted = edgeless !== void 0 || zoom === "components" || zoom === "logical" ? void 0 : danglingNote(ir);
+  const notes = [primary, edgeless, counted].filter((n) => n !== void 0);
   return notes.length ? notes.join(" \xB7 ") : void 0;
 }
 function tierMismatchNote(ir, tiers, currentTier) {
@@ -12984,7 +13006,7 @@ function memberIrFromGraphDocument(doc, member) {
   if (isRecord7(doc.groups)) {
     for (const [key, table] of Object.entries(doc.groups)) {
       if (key === "byMember" || !isRecord7(table)) continue;
-      const scoped = key === "byStack" || key === "byContainer" || key === "byWave";
+      const scoped = key === "byStack" || key === "byContainer" || key === "byWave" || key === "byPipeline";
       for (const [k, ids] of Object.entries(table)) {
         if (scoped && !k.startsWith(p)) continue;
         const members = (Array.isArray(ids) ? ids : []).map(un).filter((id) => own.has(id));
@@ -13000,7 +13022,12 @@ function memberIrFromGraphDocument(doc, member) {
     const { member: _m, ...rest } = i;
     return { ...rest, node: un(i.node) };
   });
+  const dangling = (Array.isArray(doc.dangling) ? doc.dangling : []).filter((d) => isRecord7(d) && (d.member === member || d.member === void 0 && typeof d.from === "string" && d.from.startsWith(p))).map((d) => {
+    const { member: _m, ...rest } = d;
+    return { ...rest, from: un(d.from) };
+  }).filter((d) => own.has(d.from));
   const ir = { version: 1, nodes, edges, groups, exports, imports };
+  if (dangling.length) ir.dangling = dangling;
   if (isRecord7(entry.meta)) ir.meta = entry.meta;
   if (entry.pipeline !== void 0) ir.pipeline = entry.pipeline;
   if (isRecord7(doc.derivedAttrs)) ir.derivedAttrs = doc.derivedAttrs;
@@ -14126,8 +14153,9 @@ function projectChoudoufuLogical(ir) {
   const edges = [];
   const seen = /* @__PURE__ */ new Set();
   for (const e of ir.edges) {
-    if (!kept.has(e.from) || !kept.has(e.to) || seen.has(`${e.from}|${e.to}`)) continue;
-    seen.add(`${e.from}|${e.to}`);
+    const key = `${e.from}|${e.to}|${e.kind}`;
+    if (!kept.has(e.from) || !kept.has(e.to) || seen.has(key)) continue;
+    seen.add(key);
     edges.push(e);
   }
   return { ir: { nodes: cards, edges, groups: {} }, byContainer };
@@ -14155,8 +14183,9 @@ function projectTerraformLogical(ir) {
   const edges = [];
   const seen = /* @__PURE__ */ new Set();
   for (const e of ir.edges) {
-    if (!kept.has(e.from) || !kept.has(e.to) || seen.has(`${e.from}|${e.to}`)) continue;
-    seen.add(`${e.from}|${e.to}`);
+    const key = `${e.from}|${e.to}|${e.kind}`;
+    if (!kept.has(e.from) || !kept.has(e.to) || seen.has(key)) continue;
+    seen.add(key);
     edges.push(e);
   }
   return { ir: { nodes: cards, edges, groups: {} }, byContainer };
@@ -15643,7 +15672,7 @@ function collapseBoxes(ir, opts = {}) {
     const from = standsFor.get(e.from) ?? e.from;
     const to = standsFor.get(e.to) ?? e.to;
     if (from === to) continue;
-    const key = `${from}|${to}`;
+    const key = `${from}|${to}|${e.kind}`;
     if (seen.has(key)) continue;
     seen.add(key);
     edges.push(from === e.from && to === e.to ? e : { ...e, from, to });
@@ -15795,7 +15824,8 @@ function renderArchitecture(ir, byContainer, opts = {}) {
 }
 function renderGraph(irIn, opts = {}) {
   const groupsIn = irIn.groups;
-  const boxKey = groupsIn.byWave ? "byWave" : opts.boxes;
+  const pipelines = groupsIn.byPipeline && Object.keys(groupsIn.byPipeline).length ? groupsIn.byPipeline : void 0;
+  const boxKey = groupsIn.byWave ? "byWave" : opts.boxes ?? (pipelines ? "byPipeline" : void 0);
   const face = estateFace(irIn, boxKey ? groupsIn[boxKey] : void 0);
   const ir = face.ir;
   const boxes = face.boxes;
@@ -15804,6 +15834,10 @@ function renderGraph(irIn, opts = {}) {
   if (opts.radial && !boxes) radializeLayout(layout, groupKeyByNode(ir), footprints(ir, face.overrides));
   else if (!boxes) packComponents(layout, ir);
   packEstateBoxes(layout, face, { members: boxKey === "byStack", ...opts.groupBadges ? { badges: opts.groupBadges } : {} });
+  if (boxKey === "byPipeline" && pipelines) {
+    const titles = pipelineTitles(irIn, pipelines);
+    for (const box of layout.groups ?? []) if (box.id !== void 0 && titles[box.id] !== void 0) box.title = titles[box.id];
+  }
   const svg = renderSvg(ir, layout, {
     fit: true,
     hideTitle: true,
@@ -15813,6 +15847,15 @@ function renderGraph(irIn, opts = {}) {
   });
   return { svg: face.restore(svg) };
 }
+function pipelineTitles(ir, byPipeline) {
+  const nodes = new Map(ir.nodes.map((n) => [n.id, n]));
+  return Object.fromEntries(
+    Object.keys(byPipeline).map((key) => {
+      const name = nodes.get(key)?.attrs?.["name"];
+      return [key, typeof name === "string" && name.trim() ? name : key];
+    })
+  );
+}
 function applyBadges(boxes, badges, marks) {
   if (!badges && !marks) return;
   for (const box of boxes ?? []) {
@@ -20878,7 +20921,7 @@ function startDriftPoll(opts) {
 // src/frames.ts
 function frameDigest(ir) {
   const nodes = ir.nodes.map((n) => `${n.id}:${n.kind}:${n.attrs?._status ?? ""}`).sort();
-  const edges = ir.edges.map((e) => `${e.from}>${e.to}`).sort();
+  const edges = ir.edges.map((e) => `${e.from}>${e.to}${e.kind === "ref" ? "" : `:${e.kind}`}`).sort();
   return `${nodes.join("|")}#${edges.join("|")}`;
 }
 var FrameBuffer = class {
@@ -26808,11 +26851,14 @@ function createApp(cfg, broadcaster = new Broadcaster(), frames = new FrameBuffe
       const tf = passNote(run3);
       const cdNote = lexiconNote(expanded);
       const sameNote = unchangedZoomNote(srcZoom, estateMembers(estateDirs).map((m) => m.kind));
+      const ownNote = [estateLensNote, tf.note, cdNote, sameNote].filter(Boolean).join(" \xB7 ");
+      const danglingClause = (ownNote || multi) && srcZoom !== "components" && srcZoom !== "logical" ? danglingNote(expanded) : void 0;
       const srcNote = [
-        [estateLensNote, tf.note, cdNote, sameNote].filter(Boolean).join(" \xB7 ") || (multi ? void 0 : notesFor(srcZoom, expanded, srcCompositeEdgesAttached, void 0, opts.detail ?? 2, cdNote)),
+        ownNote || (multi ? void 0 : notesFor(srcZoom, expanded, srcCompositeEdgesAttached, void 0, opts.detail ?? 2, cdNote)),
+        danglingClause,
         collapsedNote
       ].filter(Boolean).join(" \xB7 ") || void 0;
-      const srcNoteShort = tf.noteShort || sameNote ? [estateLensNote, tf.noteShort ?? tf.note, cdNote, sameNote, collapsedNote].filter(Boolean).join(" \xB7 ") : void 0;
+      const srcNoteShort = tf.noteShort || sameNote ? [estateLensNote, tf.noteShort ?? tf.note, cdNote, sameNote, danglingClause, collapsedNote].filter(Boolean).join(" \xB7 ") : void 0;
       return c.json({
         ir,
         svg,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/behold",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "license": "Apache-2.0",
   "type": "module",
   "description": "behold — a live control plane on chant. See your whole estate (every substrate in one graph), coloured by drift; act through delegated, gated Ops.",
@@ -41,9 +41,9 @@
   },
   "dependencies": {
     "@hono/node-server": "^2.0.5",
-    "@intentius/chant": "^0.124.17",
-    "@intentius/chant-k8s-client": "^0.124.17",
-    "@intentius/pinhole": "^0.3.8",
+    "@intentius/chant": "^0.124.20",
+    "@intentius/chant-k8s-client": "^0.124.20",
+    "@intentius/pinhole": "^0.4.0",
     "ajv": "^8.20.0",
     "hono": "^4.12.34"
   },

package/web/app.js

@@ -21,6 +21,7 @@ import { initTerragucciEstate } from "./terragucci-estate.js";
 import { auditLines as yrAuditLines, cornerText as yrCorner, datedWords as yrDated, environmentLines as yrEnvLines, joinMarks as yrJoin, legend as yrLegend, markLine as yrMarkLine } from "./yodel-report.js";
 import { cardProgress as tgCardProgress, progressLines as tgProgressLines, progressSection as tgProgressSection, stampProgress as tgStampProgress } from "./terragucci-progress.js";
 import { seconds, whyQuery, whyView } from "./why.js";
+import { edgeLabel, edgeLegend, edgeTitle, isCiKind } from "./edge-kind.js";
 import { readCostLine } from "./read-cost.js";
 import { mountHistoryPicker } from "./history-picker.js";
 import { applyMemberFrame, pendingLine, stillPending } from "./pending.js";
@@ -97,6 +98,7 @@ import { hasOperator, renderOperator, APPROVED_SEMANTICS } from "./operator.js";
 // which commit, approved by whom — and, when the ledger's run id cannot be
 // followed, the reason in words rather than a guessed link.
 import { releaseRows } from "./release.js";
+import { danglingFor, danglingRows, danglingHeading, DANGLING_EXPLAINED } from "./dangling.js";
 import { comparisonRow, comparisonSummary } from "./cross-env.js";
 initTheme();
 // #476: framed in a host pane. The flag is a class on <html>, so the CSS that
@@ -1160,6 +1162,19 @@ function inspect(node) {
     }
   }
 
+  // #554: references from this card to a target the project does not declare
+  // (chant#3912's `ir.dangling`), with the value as written. No edge is drawn
+  // for any of them, so this is the one place they show.
+  const dangling = danglingFor(lastGraphIr, node.id);
+  if (dangling.length) {
+    const row = section(danglingHeading(dangling));
+    for (const [k, v] of danglingRows(dangling)) row(k, v);
+    const p = document.createElement("p");
+    p.style.color = "var(--muted)";
+    p.textContent = DANGLING_EXPLAINED;
+    panel.appendChild(p);
+  }
+
   // CI projection facet (M1.2, #56/#58): loomster's GitLab CI is the SAME
   // component DAG projected — waves = stages, components = jobs, `dependsOn` =
   // `needs:`. Read one way it's the deployment, read the other it's the
@@ -2833,10 +2848,47 @@ function renderPanelModel() {
       host.appendChild(actButton("→ Scope", () => setPanelTab("scope")));
     }
   }
+  renderEdgeLegend(host, ir);
   renderBehaviourRefusal(host);
   renderBehaviourDiagnostics(host);
 }
 
+// #553: the CI edge kinds this graph draws, each with a stroke drawn by the
+// same rules as the graph's own edges (index.html matches `.edge-swatch` beside
+// `#graph`), so the legend changes with the theme. Nothing on a graph that
+// holds only references.
+function renderEdgeLegend(host, ir) {
+  const rows = edgeLegend(ir.edges || []);
+  if (!rows.length) return;
+  host.appendChild(panelHeading("edges"));
+  for (const r of rows) {
+    const row = document.createElement("div");
+    row.className = "count-row";
+    row.title = r.title;
+    const svg = document.createElementNS(SVGNS, "svg");
+    svg.setAttribute("class", "edge-swatch");
+    svg.setAttribute("viewBox", "0 0 28 10");
+    svg.setAttribute("width", "28");
+    svg.setAttribute("height", "10");
+    const g = document.createElementNS(SVGNS, "g");
+    if (r.kind) g.setAttribute("data-edge-kind", r.kind);
+    if (r.cross) g.setAttribute("data-edge-cross", "true");
+    const line = document.createElementNS(SVGNS, "path");
+    line.setAttribute("class", "pin-edge-line");
+    line.setAttribute("d", "M 1 5 L 27 5");
+    g.appendChild(line);
+    svg.appendChild(g);
+    const name = document.createElement("span");
+    name.className = "grow";
+    name.textContent = r.label;
+    const t = document.createElement("span");
+    t.className = "tag";
+    t.textContent = String(r.count);
+    row.append(svg, name, t);
+    host.appendChild(row);
+  }
+}
+
 /**
  * The refusal, where the legend would be (#401).
  *
@@ -4372,24 +4424,42 @@ async function loadReconcile() {
   }
 }
 
+// #553: pinhole writes the IR edge's `viaAttr` on the chip ("uses",
+// "workflow_run"). A CI edge's chip says its kind instead, with the attribute
+// when it adds something ("calls (uses)"), as chant's Mermaid does. The pill
+// is re-sized around the new text with pinhole's own metrics (5.7 per
+// character plus 14), centred where pinhole centred it.
+function relabelEdgeChip(chip, kind, via) {
+  if (!isCiKind(kind)) return;
+  const text = chip.querySelector("text");
+  const rect = chip.querySelector("rect");
+  const label = edgeLabel({ kind, via });
+  if (!text || !label || text.textContent === label) return;
+  text.textContent = label;
+  if (!rect) return;
+  const cx = Number(text.getAttribute("x"));
+  const w = label.length * 5.7 + 14;
+  if (!Number.isFinite(cx)) return;
+  rect.setAttribute("width", w.toFixed(1));
+  rect.setAttribute("x", (cx - w / 2).toFixed(1));
+}
+
 // Edge hover-highlight (helps trace one edge through an overlapping bundle — see
 // index.html's `.pin-edge-line` rules). pinhole already paints a fat transparent
 // hit-path per edge, so the CSS `:hover` does the visual work; this adds two
 // things CSS can't: raise the hovered edge to the top of the paint order (SVG has
 // no z-index) so it's not buried, and light up every edge touching a hovered node
 // (the `.edge-hi` class) so hovering a card traces all its connections.
-// Human-readable "why does this edge exist" from the IR edge's `viaAttr`
-// (src/logical.ts tags them). Shown as a native SVG <title> tooltip on hover;
-// the value also drives a dashed style for data-dependency links (index.html).
-const EDGE_REASON = {
-  "security-group ingress": "security-group ingress — traffic is allowed here",
-  "data dependency": "data dependency — reads/uses this store",
-};
+// Human-readable "why does this edge exist" from the IR edge's `viaAttr` and,
+// for a CI edge (#553), its `kind` and `crossPipeline` (web/edge-kind.js says
+// them in words). Shown as a native SVG <title> tooltip on hover; the stamped
+// attributes also drive the dashed and per-kind styles (index.html).
 function wireEdgeHighlight(svgEl, ir) {
   const edges = [...svgEl.querySelectorAll("g[data-edge-from]")];
   if (!edges.length) return;
   // Reason per edge, keyed by from|to (and its reverse, since pinhole may paint
-  // an edge in either direction relative to the IR).
+  // an edge in either direction relative to the IR). pinhole stamps
+  // data-edge-via itself; this fills it in where it did not.
   const viaOf = new Map();
   for (const e of ir.edges || []) {
     if (!e.viaAttr) continue;
@@ -4399,10 +4469,13 @@ function wireEdgeHighlight(svgEl, ir) {
   for (const g of edges) {
     const from = g.getAttribute("data-edge-from");
     const to = g.getAttribute("data-edge-to");
-    const via = viaOf.get(`${from}|${to}`);
+    const via = g.getAttribute("data-edge-via") || viaOf.get(`${from}|${to}`);
     if (via) g.setAttribute("data-edge-via", via); // drives the dashed style
+    const kind = g.getAttribute("data-edge-kind") || "ref";
+    const cross = g.getAttribute("data-edge-cross") === "true";
+    if (!g.querySelector("path")) relabelEdgeChip(g, kind, via);
     const title = document.createElementNS(SVGNS, "title");
-    title.textContent = `${from} → ${to}${via ? "\n" + (EDGE_REASON[via] || via) : ""}`;
+    title.textContent = edgeTitle(from, to, { kind, via, cross });
     g.insertBefore(title, g.firstChild);
   }
   const raise = (g) => g.parentNode && g.parentNode.appendChild(g);

package/web/dangling.js

@@ -0,0 +1,29 @@
+// #554: a CI reference whose target this project does not declare, such as
+// another repository's reusable workflow or a local composite action. chant
+// keeps each one on `ir.dangling` (chant#3912) with the value as written, and
+// behold draws no edge for it, so the card holding it is where it is listed.
+// The pure half, tested without a DOM the way web/release.js is.
+
+/** The dangling references `nodeId` holds, in the order chant listed them. */
+export function danglingFor(ir, nodeId) {
+  const all = ir && Array.isArray(ir.dangling) ? ir.dangling : [];
+  return all.filter((d) => d && d.from === nodeId);
+}
+
+/** One `[label, value]` row per reference: the edge kind it would have been
+ * and where on the card it was written, then the value exactly as written. A
+ * reference that leaves the pipeline says so. */
+export function danglingRows(refs) {
+  return refs.map((d) => {
+    const label = d.path ? `${d.kind} · ${d.path}` : String(d.kind);
+    return [label, d.crossPipeline ? `${d.value} (cross-pipeline)` : String(d.value)];
+  });
+}
+
+/** The section heading, with the count. */
+export function danglingHeading(refs) {
+  return `not declared here · ${refs.length}`;
+}
+
+/** The line under the rows, saying why no edge is drawn for them. */
+export const DANGLING_EXPLAINED = "these targets are not declared in this project, so no edge is drawn to them";

package/web/dangling.test.js

@@ -0,0 +1,34 @@
+import { describe, it, expect } from "vitest";
+import { danglingFor, danglingRows, danglingHeading } from "../web/dangling.js";
+
+// #554: the shape chant 0.124.20 writes (chant#3912) for a job calling another
+// repo's reusable workflow and a step using a local composite action.
+const IR = {
+  nodes: [{ id: "build" }, { id: "release" }, { id: "ci" }],
+  edges: [],
+  dangling: [
+    { from: "build", kind: "calls", path: "steps.uses", value: "./.github/actions/setup" },
+    { from: "release", kind: "calls", path: "uses", value: "octo/shared/.github/workflows/release.yml@main", crossPipeline: true },
+  ],
+};
+
+describe("dangling references on a card (#554)", () => {
+  it("lists only the references the card holds", () => {
+    expect(danglingFor(IR, "build").map((d) => d.value)).toEqual(["./.github/actions/setup"]);
+    expect(danglingFor(IR, "ci")).toEqual([]);
+  });
+
+  it("is empty on an IR without the field, or with none", () => {
+    expect(danglingFor({ nodes: [], edges: [] }, "build")).toEqual([]);
+    expect(danglingFor(null, "build")).toEqual([]);
+  });
+
+  it("shows kind, path and the value as written, and marks a cross-pipeline one", () => {
+    expect(danglingRows(danglingFor(IR, "build"))).toEqual([["calls · steps.uses", "./.github/actions/setup"]]);
+    expect(danglingRows(danglingFor(IR, "release"))).toEqual([["calls · uses", "octo/shared/.github/workflows/release.yml@main (cross-pipeline)"]]);
+  });
+
+  it("counts them in the heading", () => {
+    expect(danglingHeading(IR.dangling)).toBe("not declared here · 2");
+  });
+});

package/web/edge-kind.js

@@ -0,0 +1,93 @@
+// #553: an edge's kind, in words. chant 0.124.20 (chant#3912) gives every IR
+// edge a `kind` (ref | needs | calls | triggers | includes | extends) and marks
+// an edge that leaves its workflow or pipeline `crossPipeline`. pinhole 0.4.0
+// stamps both on the drawn edge and its chip as `data-edge-kind` (left off for
+// "ref") and `data-edge-cross="true"`; index.html styles them, and this module
+// writes the chip text, the hover tooltip and the Model tab's edge rows.
+// Pure, so web/edge-kind.test.js can pin the words.
+
+/** The CI kinds, in the order the legend lists them. */
+export const CI_KINDS = ["needs", "calls", "triggers", "includes", "extends"];
+
+/** What each CI kind means, for the tooltip and the legend row's title. */
+export const KIND_MEANING = {
+  needs: "waits for the other job to finish",
+  calls: "runs the other workflow as a reusable workflow",
+  triggers: "starts the other workflow or pipeline",
+  includes: "pulls the other file into this pipeline",
+  extends: "takes the other job's settings",
+};
+
+/** The sentence a cross-pipeline edge adds, here and on the legend row. */
+export const CROSS_MEANING = "cross-pipeline: leaves its own workflow or pipeline";
+
+// The reason sentences for behold's own `ref` edges (src/logical.ts tags them).
+const REF_REASON = {
+  "security-group ingress": "security-group ingress — traffic is allowed here",
+  "data dependency": "data dependency — reads/uses this store",
+};
+
+/** A missing or "ref" kind is a reference; anything else is a CI kind. */
+export function isCiKind(kind) {
+  return !!kind && kind !== "ref";
+}
+
+/**
+ * The chip text, as chant's Mermaid and DOT writers label the edge
+ * (graph-mermaid.ts `edgeLabel`): a CI edge by its kind, plus the attribute
+ * when that says something more (`needs (stage)`, `calls (uses)`); a
+ * reference by the attribute it flows through. Empty when there is nothing
+ * to say.
+ */
+export function edgeLabel({ kind, via, toAttr } = {}) {
+  if (!isCiKind(kind)) return [via, toAttr].filter(Boolean).join(" → ");
+  return via && via !== kind ? `${kind} (${via})` : kind;
+}
+
+/**
+ * The hover tooltip: who points at whom on the first line, then the kind
+ * (with its meaning) for a CI edge or the reason for a reference, then the
+ * cross-pipeline sentence when the edge carries it.
+ */
+export function edgeTitle(from, to, { kind, via, cross } = {}) {
+  const lines = [`${from} → ${to}`];
+  if (isCiKind(kind)) {
+    const meaning = KIND_MEANING[kind];
+    lines.push(meaning ? `${edgeLabel({ kind, via })}: ${meaning}` : edgeLabel({ kind, via }));
+  } else if (via) {
+    lines.push(REF_REASON[via] || via);
+  }
+  if (cross) lines.push(CROSS_MEANING);
+  return lines.join("\n");
+}
+
+/**
+ * The Model tab's edge rows: one per CI kind the graph holds, with its count,
+ * then one for the cross-pipeline edges. A kind whose every edge is
+ * cross-pipeline (GitHub's `calls` and `triggers`) is drawn dashed on its row
+ * too, as it is on the graph. Empty when the graph has neither, so an
+ * infrastructure graph shows no edge legend.
+ */
+export function edgeLegend(edges = []) {
+  const counts = new Map();
+  const crossCounts = new Map();
+  let cross = 0;
+  for (const e of edges) {
+    if (isCiKind(e.kind)) {
+      counts.set(e.kind, (counts.get(e.kind) || 0) + 1);
+      if (e.crossPipeline) crossCounts.set(e.kind, (crossCounts.get(e.kind) || 0) + 1);
+    }
+    if (e.crossPipeline) cross++;
+  }
+  const known = CI_KINDS.filter((k) => counts.has(k));
+  const other = [...counts.keys()].filter((k) => !CI_KINDS.includes(k)).sort();
+  const rows = [...known, ...other].map((kind) => ({
+    kind,
+    cross: crossCounts.get(kind) === counts.get(kind),
+    label: kind,
+    count: counts.get(kind),
+    title: KIND_MEANING[kind] || kind,
+  }));
+  if (cross) rows.push({ kind: null, cross: true, label: "cross-pipeline (dashed)", count: cross, title: CROSS_MEANING });
+  return rows;
+}

package/web/edge-kind.test.js

@@ -0,0 +1,70 @@
+import { describe, expect, it } from "vitest";
+import { edgeLabel, edgeLegend, edgeTitle } from "./edge-kind.js";
+
+// The edges chant 0.124.20's GitHub lexicon writes (lexicons/github/src/
+// graph-edges.ts) and one from its GitLab lexicon.
+const needs = { from: "Test", to: "Build", kind: "needs", viaAttr: "needs" };
+const calls = { from: "Ci", to: "Release", kind: "calls", viaAttr: "uses", crossPipeline: true };
+const triggers = { from: "Deploy", to: "Ci", kind: "triggers", viaAttr: "workflow_run", crossPipeline: true };
+const stage = { from: "test", to: "build", kind: "needs", viaAttr: "stage" };
+const ref = { from: "api", to: "db", kind: "ref", viaAttr: "data dependency" };
+
+const title = (e) => edgeTitle(e.from, e.to, { kind: e.kind, via: e.viaAttr, cross: e.crossPipeline });
+
+describe("edgeLabel (#553)", () => {
+  it("names a CI edge by its kind, with the attribute only when it adds something", () => {
+    expect(edgeLabel({ kind: "needs", via: "needs" })).toBe("needs");
+    expect(edgeLabel({ kind: "needs", via: "stage" })).toBe("needs (stage)");
+    expect(edgeLabel({ kind: "calls", via: "uses" })).toBe("calls (uses)");
+    expect(edgeLabel({ kind: "triggers", via: "workflow_run" })).toBe("triggers (workflow_run)");
+    expect(edgeLabel({ kind: "includes" })).toBe("includes");
+  });
+
+  it("names a reference by the attribute it flows through", () => {
+    expect(edgeLabel({ kind: "ref", via: "role" })).toBe("role");
+    expect(edgeLabel({ via: "role", toAttr: "arn" })).toBe("role → arn");
+    expect(edgeLabel({ kind: "ref" })).toBe("");
+  });
+});
+
+describe("edgeTitle, the hover tooltip (#553)", () => {
+  it("says a needs edge's kind and what it means", () => {
+    expect(title(needs)).toBe("Test → Build\nneeds: waits for the other job to finish");
+    expect(title(stage)).toBe("test → build\nneeds (stage): waits for the other job to finish");
+  });
+
+  it("says a call to a reusable workflow leaves its pipeline", () => {
+    expect(title(calls)).toBe(
+      "Ci → Release\ncalls (uses): runs the other workflow as a reusable workflow\ncross-pipeline: leaves its own workflow or pipeline",
+    );
+    expect(title(triggers)).toBe(
+      "Deploy → Ci\ntriggers (workflow_run): starts the other workflow or pipeline\ncross-pipeline: leaves its own workflow or pipeline",
+    );
+  });
+
+  it("keeps a reference's reason as it was", () => {
+    expect(title(ref)).toBe("api → db\ndata dependency — reads/uses this store");
+    expect(edgeTitle("a", "b", { kind: "ref", via: "role" })).toBe("a → b\nrole");
+    expect(edgeTitle("a", "b", {})).toBe("a → b");
+  });
+
+  it("names a kind it has no sentence for", () => {
+    expect(edgeTitle("a", "b", { kind: "waits", via: "on" })).toBe("a → b\nwaits (on)");
+  });
+});
+
+describe("edgeLegend (#553)", () => {
+  it("lists the CI kinds the graph holds, then the cross-pipeline edges", () => {
+    const rows = edgeLegend([needs, needs, calls, triggers, ref]);
+    expect(rows.map((r) => [r.label, r.count, r.cross])).toEqual([
+      ["needs", 2, false],
+      ["calls", 1, true],
+      ["triggers", 1, true],
+      ["cross-pipeline (dashed)", 2, true],
+    ]);
+  });
+
+  it("is empty for a graph of references", () => {
+    expect(edgeLegend([ref, { from: "a", to: "b", kind: "ref" }])).toEqual([]);
+  });
+});

package/web/index.html

@@ -132,6 +132,34 @@
          either for the full reason (native SVG <title>). */
       #graph g[data-edge-via="data dependency"] .pin-edge-line { stroke-dasharray: 6 5; }
       #graph g[data-edge-from][data-edge-via] { cursor: help; }
+      /* #553: CI edges by kind (chant's IREdge.kind, stamped by pinhole as
+         data-edge-kind, left off for a plain reference). Each kind has a hue,
+         65% of a status token and 35% --fg so it clears the background on the
+         light palettes too (all but Unikitty, whose pastel slots sit on its
+         pink ground, read at least as well as --edge). On 128 of the 552
+         themes two of those slots come out the same colour, so the line's
+         pattern carries the kind
+         as well: needs is a heavier solid line, triggers a dash-dot, includes
+         and extends dotted. An edge that leaves its workflow or pipeline
+         (data-edge-cross) is dashed, as chant's Mermaid and DOT draw it. The
+         Model tab's edge legend (.edge-swatch) is drawn by the same rules.
+         Hover and .edge-hi above stay the more specific rules, so a traced
+         edge still turns --pending. */
+      .edge-swatch { flex: none; overflow: visible; }
+      .edge-swatch .pin-edge-line { stroke: var(--edge); stroke-width: 1.5; fill: none; }
+      :is(#graph, .edge-swatch) g[data-edge-kind] .pin-edge-line { stroke-width: 1.6; }
+      :is(#graph, .edge-swatch) g[data-edge-kind="needs"] .pin-edge-line { stroke: color-mix(in srgb, var(--runtime) 65%, var(--fg)); stroke-width: 2.1; }
+      :is(#graph, .edge-swatch) g[data-edge-kind="calls"] .pin-edge-line { stroke: color-mix(in srgb, var(--foreign) 65%, var(--fg)); }
+      :is(#graph, .edge-swatch) g[data-edge-kind="triggers"] .pin-edge-line { stroke: color-mix(in srgb, var(--managed) 65%, var(--fg)); }
+      :is(#graph, .edge-swatch) g[data-edge-cross="true"] .pin-edge-line { stroke-dasharray: 7 5; }
+      :is(#graph, .edge-swatch) g[data-edge-kind="triggers"] .pin-edge-line { stroke-dasharray: 9 4 2 4; }
+      :is(#graph, .edge-swatch) g[data-edge-kind="includes"] .pin-edge-line,
+      :is(#graph, .edge-swatch) g[data-edge-kind="extends"] .pin-edge-line { stroke: var(--muted); stroke-dasharray: 1.5 4; stroke-linecap: round; }
+      /* The chip wears its kind's hue on its outline; its text stays pinhole's. */
+      #graph g[data-edge-kind="needs"] rect { stroke: color-mix(in srgb, var(--runtime) 65%, var(--fg)); }
+      #graph g[data-edge-kind="calls"] rect { stroke: color-mix(in srgb, var(--foreign) 65%, var(--fg)); }
+      #graph g[data-edge-kind="triggers"] rect { stroke: color-mix(in srgb, var(--managed) 65%, var(--fg)); }
+      #graph g[data-edge-kind="includes"] rect, #graph g[data-edge-kind="extends"] rect { stroke: var(--muted); }
       /* #477: a declared workspace's waiting gates, over the top of the graph
          pane (same grid cell, so #graph's re-renders never take it with them). */
       #ws-gates { grid-row: 1; grid-column: 1; align-self: start; justify-self: center; z-index: 3; margin-top: 8px;