@maycombhq/atticus 2.0.0-beta.11 → 2.0.0-beta.12.1

package/dist/{chunk-IILZ7J3L.js → chunk-DBZNQAMN.js}

@@ -7,18 +7,18 @@ import {
   featuresForScan,
   namingHint,
   syncSources
-} from "./chunk-TEBBD4XH.js";
+} from "./chunk-QR65C3DV.js";
 import {
   dirSource,
   sameCommit,
   verifyFacts
-} from "./chunk-XPWSNKF3.js";
+} from "./chunk-7VAMO66T.js";
 import {
   scanInputs
-} from "./chunk-WIMOJMAK.js";
+} from "./chunk-HY2VVVFZ.js";
 import {
   listIngestors
-} from "./chunk-5V5BJACL.js";
+} from "./chunk-PJRMMWU4.js";
 import {
   BUILT_IN_EXTRACTORS,
   MODEL_READERS,
@@ -33,12 +33,12 @@ import {
   runDialectTests,
   runFrameworkTests,
   unmodelledFrameworks
-} from "./chunk-GVFUEGGM.js";
+} from "./chunk-34NWVIBC.js";
 import {
   baseClonePath,
   changesSince,
   checkoutState
-} from "./chunk-XZJE6WIT.js";
+} from "./chunk-RA64IK43.js";
 import {
   DEFAULT_IGNORES,
   configHash,
@@ -50,11 +50,11 @@ import {
   sandboxedExtractor,
   scanRepo,
   withParseCache
-} from "./chunk-FMRMTI7W.js";
+} from "./chunk-MRLCNXXR.js";
 import {
   buildContextPack,
   toRunSummary
-} from "./chunk-BKFGGJKA.js";
+} from "./chunk-CQD26SMZ.js";
 import {
   AgentDefinition,
   DECLARED_CALLER,
@@ -135,7 +135,7 @@ import {
   toCanonicalYaml,
   topicQuestionText,
   urlHostPort
-} from "./chunk-JMOLB347.js";
+} from "./chunk-U25OX22K.js";
 import {
   SCHEMA_VERSION,
   writeFileAtomic
@@ -1494,6 +1494,7 @@ import { createHash as createHash2 } from "node:crypto";
 // packages/scanner/dist/target-suggest.js
 var TARGETS_MAX_SUGGESTED = 5;
 var TARGETS_ANOTHER = TARGETS_ANOTHER_LABEL;
+var TARGETS_NO_EVIDENCE = "no evidence; listed so you can pick it";
 var STOP = new Set("url uri base host client clients service services svc api apis http https rest endpoint endpoints impl java kt ts js py cs go src main test get post put delete patch the and for com www internal example config configs properties yaml yml env app apps application new call calls feign template web request requests response gateway proxy remote adapter port".split(" "));
 function nameWords(s) {
   if (!s)
@@ -1531,20 +1532,14 @@ function hostOf(f, facts) {
     return fromUrl(f.host) ?? f.host.split(/[/:]/)[0];
   if (f.base) {
     const cfg = facts.find((x) => x.kind === "config" && x.key === f.base && !!x.value);
-    return cfg?.value ? fromUrl(cfg.value) : void 0;
+    if (!cfg?.value)
+      return void 0;
+    return fromUrl(cfg.value) ?? (/^[a-z0-9-]+(\.[a-z0-9-]+)+(:\d+)?$/i.test(cfg.value) ? cfg.value.split(":")[0] : void 0);
   }
   return void 0;
 }
 var answerLabel = (q) => q.answer?.option !== void 0 ? q.options[q.answer.option - 1]?.label : q.answer?.text;
 var NOT_A_TARGET = /* @__PURE__ */ new Set(["None of these", TARGETS_SPLIT_LABEL, TARGETS_ANOTHER_LABEL]);
-var SERVES = {
-  rest: ["rest"],
-  soap: ["soap"],
-  graphql: ["graphql"],
-  grpc: ["grpc"],
-  webhook: ["webhook"],
-  sftp: ["file-drop"]
-};
 function candidates(callerRepo, ctx) {
   const manifest = estateRepos(ctx.op).filter((r) => r.id !== callerRepo || !!ctx.only);
   const systems = ctx.op.profiles.flatMap((p) => p.profile?.systems ?? []);
@@ -1612,7 +1607,6 @@ function candidates(callerRepo, ctx) {
         names,
         bases,
         entries,
-        types: new Set(mine.map((e) => e.endpointType)),
         ...m.description?.text ? { description: m.description.text } : {},
         hosts: m.hosts.map((h) => h.toLowerCase())
       });
@@ -1632,7 +1626,6 @@ function candidates(callerRepo, ctx) {
         names: /* @__PURE__ */ new Map(),
         bases: [],
         entries: [],
-        types: /* @__PURE__ */ new Set(),
         hosts: []
       });
   const own = new Set(estateRepos(ctx.op).flatMap((r) => r.system ? [r.system] : []));
@@ -1659,7 +1652,6 @@ function candidates(callerRepo, ctx) {
       names,
       bases: [],
       entries: [],
-      types: /* @__PURE__ */ new Set(),
       hosts: s.aliases.map((a) => a.toLowerCase())
     });
   }
@@ -1675,21 +1667,20 @@ function targetSuggestions(f, ctx) {
   const host = hostOf(f, ctx.facts)?.toLowerCase();
   const client = clientOf(f);
   const said = [
-    { from: f.base ? `its config key ${f.base}` : "", words: nameWords(f.base), weight: 4 },
-    { from: client ? `its client ${client}` : "", words: nameWords(client), weight: 4 },
+    { from: f.base ? `the config key ${f.base}` : "", words: nameWords(f.base), weight: 4 },
+    { from: client ? `the client ${client}` : "", words: nameWords(client), weight: 4 },
     {
-      from: host ? `its host ${host}` : "",
+      from: host ? `the host label ${host.split(".")[0]} (${host})` : "",
       words: host ? nameWords(host.split(".")[0]) : [],
       weight: 4
     },
     {
-      from: `its path ${f.path}`,
+      from: `the path ${f.path}`,
       words: nameWords(segs(f.path).filter((x) => x !== "{}").join(" ")),
       weight: 2
     }
   ].filter((x) => x.from && x.words.length);
   const method = f.method?.toUpperCase();
-  const types = new Set(SERVES[f.callType] ?? []);
   const earlier = (ctx.questions ?? []).filter((q) => q.askedBy?.step === TARGETS_STEP_ID && q.state === "answered" && q.repo === f.repo && !q.evidence.includes(`${f.cite.file}:${f.cite.line}`));
   const only = ctx.only ? new Set(ctx.only) : void 0;
   const out = [];
@@ -1703,18 +1694,21 @@ function targetSuggestions(f, ctx) {
     };
     if (only?.has(c.s.label))
       add(6, "the join found an entry of it that serves the call");
-    const hit = c.entries.find((e) => (!method || !e.method || e.method === method) && serves(e.path, f.path, c.bases.map((b) => b.path)));
-    if (hit && !only)
-      add(6, `it serves ${[hit.method, hit.path].filter(Boolean).join(" ")} (${hit.at})`);
+    const hit = c.entries.find((e) => (!method || !e.method || e.method === method || e.method === "ANY") && serves(e.path, f.path, c.bases.map((b) => b.path)));
+    if (hit && !only) {
+      const what2 = [hit.method, hit.path].filter(Boolean).join(" ");
+      add(6, `serves ${what2} (${hit.at})`);
+      s.serves = [what2];
+    }
     const base2 = c.bases.find((b) => under(f.path, b.path));
     if (base2)
-      add(5, `${f.path} is under ${base2.path}, ${base2.from}`);
+      add(5, `its basePath ${base2.path} matches: ${base2.from}`);
     if (host && c.hosts.includes(host))
-      add(8, `it answers on ${host}`);
+      add(8, `it lists ${host} under hosts`);
     for (const x of said) {
       const w = x.words.find((y) => c.names.has(y) && telling(y));
       if (w)
-        add(x.weight, `${x.from} names ${c.names.get(w)}`);
+        add(x.weight, `named like ${x.from}`);
     }
     if (c.description) {
       const d = new Set(nameWords(c.description));
@@ -1730,9 +1724,9 @@ function targetSuggestions(f, ctx) {
       return t === slugify(c.s.label) || !!c.s.repo && t === slugify(c.s.repo);
     }).length;
     if (named2)
-      add(3, `${f.repo}'s answers name it for ${named2} other ${named2 === 1 ? "call" : "calls"}`);
-    if (c.s.kind === "repo" && c.s.read && [...c.types].some((t) => types.has(t)) && !s.score)
-      s.why.push(`it serves ${[...types].join(" and ")} calls`);
+      add(3, `picked for ${named2} other ${named2 === 1 ? "call" : "calls"} of ${f.repo}`);
+    if (!s.score)
+      s.why.push(TARGETS_NO_EVIDENCE);
     s.why = [...new Set(s.why)];
     out.push(s);
   }
@@ -1867,7 +1861,7 @@ function targetQuestionFor(f) {
     evidence: [`${f.cite.file}:${f.cite.line}`]
   };
 }
-var SERVES2 = {
+var SERVES = {
   rest: ["rest"],
   soap: ["soap"],
   graphql: ["graphql"],
@@ -1886,7 +1880,7 @@ function targetAsks(facts, records, asks) {
     if (f.kind !== "call" || !needsTarget(f, facts) && !ask)
       continue;
     const own = slugify(f.component ?? f.repo).replace(/\./g, "-");
-    const types = new Set(SERVES2[f.callType] ?? []);
+    const types = new Set(SERVES[f.callType] ?? []);
     const servers = ask ? [...new Set(ask.candidates.map((c) => c.component))].sort() : [
       ...new Set(records.filter((r) => r.kind === "Endpoint" && types.has(r.endpointType) && r.component !== own).filter((r) => repoOf.get(r.component) !== f.repo).map((r) => r.component))
     ].sort();
@@ -1896,20 +1890,31 @@ function targetAsks(facts, records, asks) {
 }
 var outsideAs = (s) => s.boundary === "vendor" ? "an outside system" : "another team's system";
 var callWhat = (f) => [f.method?.toUpperCase(), f.path].filter(Boolean).join(" ");
-function suggestionOption(s, callerRepo, what2, n) {
-  const calls = n ? `all ${n} calls: ${what2}` : what2;
-  const why = s.why.length ? `. Suggested: ${s.why.slice(0, 3).join("; ")}` : "";
+function suggestionWhy(s, prefix) {
+  const served = s.serves ?? [];
+  let why = s.why;
+  if (prefix !== void 0 && served.length > 1) {
+    const under2 = prefix === "/" ? "" : ` under ${prefix}`;
+    why = [
+      `serves ${served[0]} and ${served.length - 1} more${under2}`,
+      ...why.filter((w) => !w.startsWith("serves "))
+    ];
+  }
+  return (why.length ? why : [TARGETS_NO_EVIDENCE]).slice(0, 3).join("; ");
+}
+function suggestionOption(s, callerRepo, n, prefix) {
+  const why = suggestionWhy(s, prefix);
   if (s.kind === "outside")
     return {
       label: s.label,
-      means: `${s.name}, ${outsideAs({ boundary: s.boundary ?? "vendor" })}, answers ${calls}${why}`,
+      means: `${s.name}, ${outsideAs({ boundary: s.boundary ?? "vendor" })}: ${why}`,
       changes: n ? `The ${n} calls go to ${s.name} when the facts are next written` : `The call goes to ${s.name} when the facts are next written`
     };
-  const who = s.label === s.repo ? `${s.repo}${s.read ? "" : ", not read yet,"}` : `${s.label}, built in ${s.repo}${s.read ? "" : ", not read yet"},`;
+  const who = s.label === s.repo ? `${s.repo}${s.read ? "" : " (not read yet)"}` : `${s.label}, built in ${s.repo}${s.read ? "" : " (not read yet)"}`;
   const them = n ? `The ${n} calls` : "The call";
   return {
     label: s.label,
-    means: `${who} answers ${calls}${why}`,
+    means: `${who}: ${why}`,
     changes: s.read ? `${them} ${n ? "join" : "joins"} ${s.label} when the facts are next written (atticus verify ${callerRepo} --write)` : `${them} ${n ? "go" : "goes"} to ${s.repo} when the facts are next written (atticus verify ${callerRepo} --write), and ${n ? "join" : "joins"} its route once ${s.repo} is read and verified (/atticus-map ${s.repo}); if no route of it serves ${n ? "them" : "it"}, the question opens again`
   };
 }
@@ -1937,29 +1942,33 @@ function offered(members, facts, records, op, asks, ctx) {
     })) {
       const x = merged.get(s.label);
       if (!x)
-        merged.set(s.label, { ...s, why: [...s.why] });
+        merged.set(s.label, { ...s, why: [...s.why], serves: [...s.serves ?? []] });
       else {
         x.score += s.score;
         for (const w of s.why)
           if (!x.why.includes(w))
             x.why.push(w);
+        for (const w of s.serves ?? [])
+          if (!x.serves.includes(w))
+            x.serves.push(w);
+        if (x.why.length > 1)
+          x.why = x.why.filter((w) => w !== TARGETS_NO_EVIDENCE);
       }
     }
   }
   const ranked = [...merged.values()].sort((a, b) => b.score - a.score || Number(b.read) - Number(a.read) || (a.kind === b.kind ? 0 : a.kind === "repo" ? -1 : 1) || a.label.localeCompare(b.label));
   const serving = new Set(members.flatMap((m) => m.servers));
-  const types = new Set(members.flatMap((m) => SERVES2[m.f.callType] ?? []));
+  const types = new Set(members.flatMap((m) => SERVES[m.f.callType] ?? []));
   return offeredSuggestions(ranked, { types, serving });
 }
 function targetQuestionDrafts(facts, records, op, asks, ctx = {}) {
   const { list } = targetAsks(facts, records, asks);
   return list.map((m) => {
     const { f, q } = m;
-    const what2 = callWhat(f);
     const draft = {
       question: q.question,
       options: [
-        ...offered([m], facts, records, op, asks, ctx).map((s) => suggestionOption(s, f.repo, what2)),
+        ...offered([m], facts, records, op, asks, ctx).map((s) => suggestionOption(s, f.repo)),
         anotherOption(op),
         {
           label: TARGETS_NONE,
@@ -2006,9 +2015,28 @@ function groupVia(f) {
     return ` through ${f.base}`;
   return "";
 }
-function targetGroupQuestion(repo, f) {
+function targetGroupQuestion(repo, f, facts) {
+  const proxy = facts ? proxyOf(f, facts) : void 0;
+  const through = f.base ?? f.host ?? f.to;
+  if (proxy && through) {
+    const p = targetPathPrefix(f.path);
+    return `Which repo serves the routes under ${p === "/" ? "" : p}/** that ${proxy} forwards to ${through}?`;
+  }
   return `Which repo or system answers the calls ${repo} makes under ${targetPathPrefix(f.path)}${groupVia(f)}?`;
 }
+function proxyOf(f, facts) {
+  if (!f.from)
+    return void 0;
+  const from = facts.find((x) => x.id === f.from);
+  if (!from || from.kind !== "entry")
+    return void 0;
+  const proxy = facts.find((x) => x.kind === "deploy" && x.repo === f.repo && x.platform === "apigee" && !!x.basePath);
+  return proxy ? proxy.resourceName ?? f.repo : void 0;
+}
+function targetGroupWordings(repo, f, facts) {
+  return [.../* @__PURE__ */ new Set([targetGroupQuestion(repo, f, facts), targetGroupQuestion(repo, f)])];
+}
+var repo0 = (members) => members[0].f.repo;
 var byLine = (a, b) => a.localeCompare(b, "en", { numeric: true });
 var answerLabel2 = (q) => q.answer?.option !== void 0 ? q.options[q.answer.option - 1]?.label : q.answer?.text;
 function splitTargetGroups(questions) {
@@ -2025,12 +2053,13 @@ function groupedTargetDrafts(facts, records, op, asks, o) {
   for (const a of list) {
     if (!o.ask.has(a.f.id))
       continue;
-    const k = targetGroupQuestion(a.f.repo, a.f);
+    const k = targetGroupQuestion(a.f.repo, a.f, facts);
     groups.set(k, [...groups.get(k) ?? [], a]);
   }
   const out = [];
   for (const [question, members] of groups) {
-    if (members.length === 1 || o.split?.has(question)) {
+    const split = targetGroupWordings(repo0(members), members[0].f, facts).some((w) => o.split?.has(w));
+    if (members.length === 1 || split) {
       for (const m of members)
         out.push({ ...own.get(m.f.id), factIds: [m.f.id] });
       continue;
@@ -2043,7 +2072,7 @@ function groupedTargetDrafts(facts, records, op, asks, o) {
     const draft = {
       question,
       options: [
-        ...offered(members, facts, records, op, asks, ctx).map((s) => suggestionOption(s, repo, listed, n)),
+        ...offered(members, facts, records, op, asks, ctx).map((s) => suggestionOption(s, repo, n, targetPathPrefix(members[0].f.path))),
         anotherOption(op),
         {
           label: TARGETS_SPLIT,
@@ -2069,6 +2098,40 @@ function groupedTargetDrafts(facts, records, op, asks, o) {
   }
   return out.sort((a, b) => a.factId.localeCompare(b.factId));
 }
+function targetRuleOffers(questions, factsOf) {
+  const byKey = /* @__PURE__ */ new Map();
+  for (const q of questions) {
+    if (q.state !== "open" || q.askedBy?.step !== TARGETS_STEP)
+      continue;
+    const facts = factsOf(q.repo) ?? [];
+    const at3 = new Set(q.evidence);
+    const calls = facts.filter((f) => f.kind === "call" && f.repo === q.repo && at3.has(`${f.cite.file}:${f.cite.line}`));
+    if (!calls.length)
+      continue;
+    const prefixes = new Set(calls.map((c) => targetPathPrefix(c.path)));
+    const hosts = new Set(calls.map((c) => c.host?.replace(/^[a-z][a-z0-9+.-]*:\/\//i, "").split(/[/:]/)[0]));
+    const [prefix] = prefixes;
+    const [host] = hosts;
+    const match = prefixes.size === 1 && prefix !== "/" ? `${prefix}/**` : hosts.size === 1 && host ? host : void 0;
+    if (!match)
+      continue;
+    const key = `${q.repo}
+${match}`;
+    const x = byKey.get(key) ?? { match, ids: [], calls: 0 };
+    x.ids.push(q.id);
+    x.calls += calls.length;
+    byKey.set(key, x);
+  }
+  const out = /* @__PURE__ */ new Map();
+  for (const x of byKey.values()) {
+    if (x.ids.length < 2)
+      continue;
+    const ids = [...x.ids].sort();
+    for (const id of ids)
+      out.set(id, { match: x.match, ids, calls: x.calls });
+  }
+  return out;
+}
 var segmentsOf = (p) => p.split(/[?#]/)[0].split("/").filter(Boolean).map((x) => /^[{:<]/.test(x) ? "{}" : x);
 function ruleCoversCall(match, f, facts) {
   if (isPathMatch(match)) {
@@ -2110,7 +2173,7 @@ function targetsFromAnswers(repo, facts, questions, o = {}) {
       continue;
     let asked = byId.get(questionId({ step: TARGETS_STEP, repo, ...q }));
     if (!asked || asked.state !== "answered" || !asked.answer) {
-      const g = groups.get(targetGroupQuestion(repo, f));
+      const g = targetGroupWordings(repo, f, facts).map((w) => groups.get(w)).find((x) => !!x);
       asked = g && (needsTarget(f, facts) || g.evidence.includes(q.evidence[0])) ? g : void 0;
     }
     let label2 = asked && asked.state === "answered" && asked.answer ? answerLabel2(asked) : void 0;
@@ -2135,7 +2198,7 @@ function answeredQuestionOfCall(repo, facts, questions, factId) {
   const own = targetQuestionFor(f);
   const ownId = questionId({ step: TARGETS_STEP, repo, ...own });
   const answered = questions.filter((q2) => q2.askedBy?.step === TARGETS_STEP && q2.state === "answered" && q2.repo === repo);
-  const q = answered.find((x) => x.id === ownId) ?? answered.find((x) => x.question.trim() === targetGroupQuestion(repo, f) && x.evidence.includes(own.evidence[0]));
+  const q = answered.find((x) => x.id === ownId) ?? answered.find((x) => targetGroupWordings(repo, f, facts).includes(x.question.trim()) && x.evidence.includes(own.evidence[0]));
   return q?.answer?.match ? void 0 : q;
 }
 function answerReconfirmed(q) {
@@ -2158,7 +2221,7 @@ function callsOfTargetQuestion(repo, facts, q) {
     const own = targetQuestionFor(f);
     if (questionId({ step: TARGETS_STEP, repo, ...own }) === q.id)
       return true;
-    return targetGroupQuestion(repo, f) === q.question.trim() && q.evidence.includes(own.evidence[0]);
+    return targetGroupWordings(repo, f, facts).includes(q.question.trim()) && q.evidence.includes(own.evidence[0]);
   });
 }
 function staleTargetQuestions(input) {
@@ -4896,6 +4959,17 @@ function fieldLineage(f, field) {
 }
 
 // packages/scanner/dist/hosts-asked.js
+var segs3 = (p) => p.split(/[?#]/)[0].split("/").filter(Boolean).map((x) => /^[{:<$]/.test(x) ? "{}" : x);
+var underPath = (path, base2) => {
+  const b = segs3(base2);
+  const c = segs3(path);
+  return b.length > 0 && b.length <= c.length && b.every((x, i) => x === c[i]);
+};
+var servesPath = (entry, path) => {
+  const e = segs3(entry);
+  const c = segs3(path);
+  return e.length === c.length && e.every((x, i) => x === "{}" || c[i] === "{}" || x === c[i]);
+};
 var HTTP_TYPES = /* @__PURE__ */ new Set(["rest", "graphql", "soap", "websocket", "sse", "webhook"]);
 var CONFIG_FILES = [
   "**/application*.properties",
@@ -4958,8 +5032,12 @@ async function unknownHosts(o) {
     const entry = byHost.get(h.label) ?? {
       ...h.port !== void 0 ? { port: h.port } : {},
       explicit: h.label !== h.host,
-      calls: []
+      calls: [],
+      paths: /* @__PURE__ */ new Set()
     };
+    const path = /^[a-z][a-z0-9+.-]*:\/\/[^/?#]*(\/[^?#]*)?/i.exec(url)?.[1];
+    if (path)
+      entry.paths.add(path);
     const at3 = `${e.path}:${e.line}`;
     if (!entry.calls.some((c) => c.repo === repo && c.at === at3))
       entry.calls.push({ repo, at: at3 });
@@ -5012,6 +5090,25 @@ async function unknownHosts(o) {
       }
     const suggest = hits.length === 1 ? hits[0] : void 0;
     const calls = entry.calls.sort((a, b) => a.repo.localeCompare(b.repo) || a.at.localeCompare(b.at, "en", { numeric: true }));
+    const byPath = [];
+    for (const g of o.records) {
+      if (g.kind !== "GatewayRoute")
+        continue;
+      const repo = g.evidence.find((e) => e.repo)?.repo;
+      if (!repo || byPath.some((b) => b.repo === repo))
+        continue;
+      const under2 = [...entry.paths].filter((p) => underPath(p, g.basepath));
+      if (!under2.length)
+        continue;
+      const comps = new Set([...compRepo].filter(([, r]) => r === repo).map(([c]) => c));
+      const hit = o.records.find((r) => r.kind === "Endpoint" && comps.has(r.component) && under2.some((p) => servesPath(r.pathOrTopic, p)));
+      byPath.push({
+        repo,
+        serves: hit ? [hit.method?.toUpperCase(), hit.pathOrTopic].filter(Boolean).join(" ") : `the routes under ${g.basepath}`
+      });
+    }
+    byPath.sort((a, b) => a.repo.localeCompare(b.repo));
+    const first = suggest ? [suggest.repo] : byPath.map((b) => b.repo).filter((x) => servers.includes(x));
     const about = Object.fromEntries(servers.flatMap((s) => {
       const d = o.repos.find((r) => r.id === s)?.description;
       return d ? [[s, { text: d.text, trust: d.trust }]] : [];
@@ -5019,9 +5116,10 @@ async function unknownHosts(o) {
     asks.push({
       host,
       calls,
-      servers: suggest ? [suggest.repo, ...servers.filter((s) => s !== suggest.repo)] : servers,
+      servers: [...first, ...servers.filter((s) => !first.includes(s))],
       ...suggest ? { suggest } : {},
-      ...Object.keys(about).length ? { about } : {}
+      ...Object.keys(about).length ? { about } : {},
+      ...byPath.length ? { byPath } : {}
     });
   }
   return asks;
@@ -5032,18 +5130,24 @@ function aboutOf(a, repo) {
     return "";
   return d.trust === "suggested" ? `. What it is, as your assistant drafted it (unconfirmed): ${d.text}` : `. What it is: ${d.text}`;
 }
+function gatewayHostFix(host, byPath) {
+  const repos = byPath.map((b) => b.repo);
+  return `${repos.length === 1 ? `${repos[0]}'s routes serve` : `The routes of ${repos.join(", ")} serve`} the paths the calls to ${host} make, and no repo lists ${host}: it looks like a shared gateway's host. Once, not per call: list ${host} under hosts: on each proxy repo in repos.manifest.yaml (${repos.join(", ")}, and any other proxy on it); the path then picks the proxy, and this question retires itself`;
+}
 function hostQuestionDrafts(asks) {
   return asks.map((a) => {
     const repo = a.calls[0].repo;
+    const byPath = new Map((a.byPath ?? []).map((b) => [b.repo, b.serves]));
     return {
       repo,
+      ...a.byPath?.length ? { byPath: a.byPath } : {},
       draft: {
         question: hostQuestionText(a.host),
         options: [
           ...a.servers.map((s) => ({
             label: s,
-            means: (a.suggest?.repo === s ? `${s} serves HTTP, and its ${a.suggest.at} sets the port ${a.host.split(":").pop()} (${a.suggest.line})` : `${s} serves HTTP`) + aboutOf(a, s),
-            changes: `${a.host} goes under hosts for ${s} in repos.manifest.yaml, and the calls to it join ${s} on the next scan`
+            means: (a.suggest?.repo === s ? `${s} serves HTTP, and its ${a.suggest.at} sets the port ${a.host.split(":").pop()} (${a.suggest.line})` : byPath.has(s) ? `${s} serves ${byPath.get(s)}, a path the calls to ${a.host} make` : `${s} serves HTTP`) + aboutOf(a, s),
+            changes: byPath.has(s) ? `${a.host} goes under hosts for ${s} in repos.manifest.yaml, and the calls to it join ${s} on the next scan; on a shared gateway host, list it on each proxy repo instead (${[...byPath.keys()].join(", ")}, and any other proxy on it), and the path picks the proxy` : `${a.host} goes under hosts for ${s} in repos.manifest.yaml, and the calls to it join ${s} on the next scan`
           })),
           // O1: a system outside the estate, declared in the profile with the host as its alias.
           ...[
@@ -5162,12 +5266,12 @@ function parseLinkReference(source) {
   return { ok: true, reference: { ...estate ? { estate } : {}, repos } };
 }
 var stripped = (o) => Object.fromEntries(Object.entries(o).filter(([, v]) => v !== void 0));
-function segs3(path) {
+function segs4(path) {
   return path.split(/[?#]/)[0].split("/").filter(Boolean).map((s) => /^(\{[^}]*\}|:\w+|\*)$/.test(s) ? "{}" : s.toLowerCase());
 }
 function pathMatch(a, b) {
-  const x = segs3(a);
-  const y = segs3(b);
+  const x = segs4(a);
+  const y = segs4(b);
   if (x.length === y.length && x.every((s, i) => s === y[i]))
     return 2;
   const [short, long] = x.length < y.length ? [x, y] : [y, x];
@@ -5464,6 +5568,7 @@ export {
   curatedDirOf,
   TARGETS_MAX_SUGGESTED,
   TARGETS_ANOTHER,
+  TARGETS_NO_EVIDENCE,
   nameWords,
   targetSuggestions,
   offeredSuggestions,
@@ -5474,12 +5579,15 @@ export {
   TARGETS_NONE,
   remapIds,
   targetQuestionFor,
+  suggestionWhy,
   targetQuestionDrafts,
   TARGETS_SPLIT,
   targetPathPrefix,
   targetGroupQuestion,
+  targetGroupWordings,
   splitTargetGroups,
   groupedTargetDrafts,
+  targetRuleOffers,
   ruleCoversCall,
   ruledTargets,
   targetsFromAnswers,
@@ -5540,6 +5648,7 @@ export {
   fieldLineage,
   lineSetsPort,
   unknownHosts,
+  gatewayHostFix,
   hostQuestionDrafts,
   parseLinkReference,
   measureLinks,

package/dist/{chunk-D7MWYJZF.js → chunk-DDOLWHIM.js}

@@ -12,23 +12,23 @@ import {
   ruleLineOf,
   rulesCovering,
   taughtIn
-} from "./chunk-LS3WR2RF.js";
-import "./chunk-52WCHTVZ.js";
-import "./chunk-B3QOYE74.js";
-import "./chunk-LVBPY2M6.js";
-import "./chunk-ASKDCMW5.js";
-import "./chunk-LDIARP6F.js";
-import "./chunk-6RGIM2ZH.js";
-import "./chunk-IILZ7J3L.js";
-import "./chunk-TEBBD4XH.js";
-import "./chunk-XPWSNKF3.js";
-import "./chunk-WIMOJMAK.js";
-import "./chunk-5V5BJACL.js";
-import "./chunk-GVFUEGGM.js";
-import "./chunk-XZJE6WIT.js";
-import "./chunk-FMRMTI7W.js";
-import "./chunk-BKFGGJKA.js";
-import "./chunk-JMOLB347.js";
+} from "./chunk-7C7PTJM2.js";
+import "./chunk-XDTD55UU.js";
+import "./chunk-CGF4LKXR.js";
+import "./chunk-PAQDPB6T.js";
+import "./chunk-6AYUBYK6.js";
+import "./chunk-7VNEDDCC.js";
+import "./chunk-J22RSFKY.js";
+import "./chunk-DBZNQAMN.js";
+import "./chunk-QR65C3DV.js";
+import "./chunk-7VAMO66T.js";
+import "./chunk-HY2VVVFZ.js";
+import "./chunk-PJRMMWU4.js";
+import "./chunk-34NWVIBC.js";
+import "./chunk-RA64IK43.js";
+import "./chunk-MRLCNXXR.js";
+import "./chunk-CQD26SMZ.js";
+import "./chunk-U25OX22K.js";
 import "./chunk-MMB2OHUY.js";
 import "./chunk-TV45EUGM.js";
 export {

package/dist/{chunk-EW7MRMD5.js → chunk-DIAYQLEY.js}

@@ -5,18 +5,18 @@ var __atticusUrl = (p) => new URL("./" + p, import.meta.url).href;
 var __atticusPath = (p) => __atticusFileURLToPath(__atticusUrl(p));
 import {
   contractCheckOf
-} from "./chunk-IA2RKC6I.js";
+} from "./chunk-WFJMKUTR.js";
 import {
   readCatalog
-} from "./chunk-IILZ7J3L.js";
+} from "./chunk-DBZNQAMN.js";
 import {
   frameworkFacts,
   frameworkGaps
-} from "./chunk-XPWSNKF3.js";
+} from "./chunk-7VAMO66T.js";
 import {
   baseClonePath,
   loadRepos
-} from "./chunk-XZJE6WIT.js";
+} from "./chunk-RA64IK43.js";
 import {
   auditItemHolds,
   auditPrecision,
@@ -30,7 +30,7 @@ import {
   parseAuditFile,
   parseFacts,
   require_dist
-} from "./chunk-JMOLB347.js";
+} from "./chunk-U25OX22K.js";
 import {
   __toESM
 } from "./chunk-TV45EUGM.js";
@@ -300,8 +300,17 @@ async function trustView(root) {
 }
 function uiTrustRoutes(r, ctx) {
   return r.add("GET", "/api/trust", async () => ({ status: 200, body: await trustView(ctx.root) })).add("GET", "/api/trust/fresh", async () => {
-    const { estateFreshness } = await import("./chunk-C75W7VXX.js");
-    const body = await estateFreshness(ctx.root);
+    const { estateFreshness } = await import("./chunk-S4USA5WC.js");
+    const v = await estateFreshness(ctx.root);
+    const body = {
+      ...v,
+      repos: v.repos.map(({ rulesLacking: _r, ...r2 }) => {
+        if (r2.state !== "rules-changed")
+          return { ...r2, state: r2.state };
+        const { command: _c, slash: _s, ...x } = r2;
+        return { ...x, state: "fresh" };
+      })
+    };
     return { status: 200, body };
   });
 }