@maycombhq/atticus 2.0.0-beta.26 → 2.0.0-beta.27.1

package/dist/{chunk-6ZDAEUKB.js → chunk-WJWSB65O.js}

@@ -6,10 +6,12 @@ var __atticusPath = (p) => __atticusFileURLToPath(__atticusUrl(p));
 import {
   FileChangedError,
   ensureLocalIgnore,
+  hasSecretShape,
+  redactSecrets,
   withSharedFileLock,
   writeFileAtomic,
   writeFileIfUnchanged
-} from "./chunk-MEMEO7YO.js";
+} from "./chunk-SMFFUFMN.js";
 import {
   AI_RUNTIMES,
   ASSISTANTS,
@@ -118,11 +120,11 @@ import {
   normalizePath,
   slugify,
   urlHostPort
-} from "./chunk-LZFKJ2BR.js";
+} from "./chunk-A3LVMCA5.js";
 import {
   SCHEMA_VERSION,
   keptParse
-} from "./chunk-CTJHEG6A.js";
+} from "./chunk-NWMFVPEP.js";
 import {
   require_dist
 } from "./chunk-BQGDB6ZL.js";
@@ -131,199 +133,6 @@ import {
   __toESM
 } from "./chunk-TV45EUGM.js";
 
-// packages/core/dist/cite.js
-var escape = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-var PARAM = /^(\{[^}]*\}|:[^/]+|<[^>]+>|\$\{[^}]*\})$/;
-var PARAM_RE = "(?:\\{[^}]*\\}|:[A-Za-z_]\\w*|<[^>]+>|\\$\\{[^}]*\\})";
-var fieldKey = (f) => f.split(".").pop().toLowerCase().replace(/[^a-z0-9]/g, "");
-function lineNamesRoute(line, path) {
-  const segs2 = path.split(/[?#]/, 1)[0].split("/").filter(Boolean);
-  if (!segs2.some((s) => !PARAM.test(s))) {
-    const body = segs2.map((s) => PARAM.test(s) ? PARAM_RE : escape(s)).join("/");
-    if (new RegExp(`["'\`]/${body}/?["'\`]`).test(line))
-      return true;
-    if (!segs2.length && /\bpath:\s*(['"`])\1|\bindex:\s*true\b/.test(line))
-      return true;
-    const head = segs2.slice(0, -1).map(() => PARAM_RE).join("/");
-    return segs2.length > 0 && new RegExp(`["'\`]/${head ? `${head}/` : ""}["'\`]\\s*\\+`).test(line);
-  }
-  for (let k = 0; k < segs2.length; k++) {
-    const tail = segs2.slice(k);
-    if (!tail.some((s) => !PARAM.test(s)))
-      break;
-    const re = new RegExp(`(?:/|["'\`])${tail.map((s) => PARAM.test(s) ? PARAM_RE : escape(s)).join("/")}(?![A-Za-z0-9_-])`, "i");
-    if (re.test(line))
-      return true;
-    const last = tail[tail.length - 1];
-    if (PARAM.test(last) && tail.length > 1) {
-      const head = tail.slice(0, -1);
-      const re2 = new RegExp(`/${head.map((s) => PARAM.test(s) ? PARAM_RE : escape(s)).join("/")}/?["'\`]`, "i");
-      if (re2.test(line))
-        return true;
-    }
-  }
-  return false;
-}
-var lineNamesWord = (line, word) => {
-  const w = word.trim();
-  if (!w)
-    return false;
-  const before = /^[A-Za-z0-9_]/.test(w) ? "(^|[^A-Za-z0-9_])" : "";
-  const after = /[A-Za-z0-9_]$/.test(w) ? "($|[^A-Za-z0-9_])" : "";
-  return new RegExp(`${before}${escape(w)}${after}`, "i").test(line);
-};
-var lineNamesField = (line, field) => {
-  const k = fieldKey(field);
-  return k.length > 0 && line.toLowerCase().replace(/[^a-z0-9]/g, " ").replace(/ /g, "").includes(k);
-};
-var lineNamesClaim = (line, c) => c.kind === "route" ? lineNamesRoute(line, c.value) : c.kind === "word" ? lineNamesWord(line, c.value) : lineNamesField(line, c.value);
-function claimOnLines(lines, line, claim, window = 1) {
-  const from = Math.max(1, line - window);
-  const to = Math.min(lines.length, line + window);
-  for (let i = from; i <= to; i++)
-    if (lineNamesClaim(lines[i - 1] ?? "", claim))
-      return true;
-  return false;
-}
-function normalizeQuote(q2) {
-  return q2.replace(/\r\n?/g, "\n").replace(/[‘’‚]/g, "'").replace(/[“”„]/g, '"').replace(/\s+/g, " ").trim().replace(/[;,.]+$/, "").trim();
-}
-function quoteMatches(line, quote) {
-  if (!quote)
-    return true;
-  const q2 = normalizeQuote(quote).replace(/"/g, "'");
-  if (q2 === "")
-    return true;
-  const l = normalizeQuote(line).replace(/"/g, "'");
-  const at3 = q2.indexOf("<redacted>");
-  if (at3 >= 0)
-    return at3 === 0 || l.includes(q2.slice(0, at3).trimEnd());
-  return l === q2 || l.startsWith(q2) || l.includes(q2);
-}
-var BINARY = /\.(png|jpe?g|gif|webp|ico|pdf|zip|jar|war|ear|gz|tgz|7z|exe|dll|so|dylib|class|wasm|woff2?|ttf|otf|mp[34]|mov|avi|bin|dat)$/i;
-var NOTEBOOK = /\.ipynb$/i;
-var MINIFIED = /(\.min\.(js|css)|[-.]bundle\.js|\.map)$/i;
-function isBinaryPath(path) {
-  return BINARY.test(path);
-}
-function quoteNotRequired(path, line) {
-  return BINARY.test(path) || NOTEBOOK.test(path) || MINIFIED.test(path) || line.length > 1e3;
-}
-var SECRET_PATH = [
-  /(^|\/)\.env(\.|$)/i,
-  /(^|\/)secrets?\//i,
-  /(^|\/)credentials?(\.|$)/i,
-  /\.(pem|key|p12|pfx|jks|keystore)$/i,
-  /(^|\/)id_(rsa|ed25519|ecdsa|dsa)(\.|$)/i
-];
-function isSecretPath(path) {
-  const p2 = path.replace(/\\/g, "/").split("/").map((x) => x.replace(/:.*$/, "").replace(/[. ]+$/, "")).join("/");
-  return SECRET_PATH.some((re) => re.test(p2));
-}
-var SECRET_KEY = /(password|passwd|pwd|secret|token|api[-_]?key|access[-_]?key|private[-_]?key|client[-_]?secret|credential)/i;
-var PLACEHOLDER = /^(\$\{|\{\{|env:|vault:|secret:|ref:|<)/;
-var KEY_VALUE = /^(\s*[-"']?\s*)([A-Za-z0-9_.:-]*?(?:password|passwd|pwd|secret|token|api[-_]?key|access[-_]?key|private[-_]?key|credentials?))(["']?\s*[:=]\s*)(.+)$/i;
-var SECRET_WORDS = "(?:password|passwd|pwd|secret|token|api[-_]?key|access[-_]?key|private[-_]?key|credentials?)";
-var KEY_LITERAL = new RegExp(`((?:^|[^A-Za-z0-9_.$-])[A-Za-z0-9_.$-]*?${SECRET_WORDS}["'\`]?\\]?(?:\\s*:\\s*[A-Za-z_][\\w.<>?\\[\\]]*(?=\\s*=))?\\s*(?::=|=>|=(?!=)|:(?!:))\\s*)(["'\`])((?:(?!\\2)[^\\\\]|\\\\.)+)\\2`, "i");
-var SETTER_LITERAL = new RegExp(`(\\b(?:set|with)[A-Za-z0-9_]*?${SECRET_WORDS}\\s*\\(\\s*)(["'\`])((?:(?!\\2)[^\\\\]|\\\\.)+)\\2`, "i");
-var KEY_BARE = new RegExp(`((?:\\bexport\\s+|--|[?&;])[A-Za-z0-9_.-]*?${SECRET_WORDS}\\s*=\\s*)([^\\s&;"'\`]+)`, "gi");
-var URL_CREDENTIALS = /\b([a-z][a-z0-9+.-]*:\/\/[^\s:@/]+:)([^\s@/]+)(?=@)/gi;
-var BEARER = /\b(Bearer\s+)([A-Za-z0-9._~+/-]{16,}=*)/g;
-var BASIC = /\b(Basic\s+)((?=[A-Za-z0-9+/]*[0-9+/=])[A-Za-z0-9+/]{12,}={0,2})/g;
-var TOKEN_SHAPES = [
-  /\bgh[pousr]_[A-Za-z0-9]{20,}/g,
-  /\bgithub_pat_[A-Za-z0-9_]{20,}/g,
-  /\b(?:sk|rk)_(?:live|test)_[A-Za-z0-9]{8,}/g,
-  /\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g,
-  /\bxox[abprs]-[A-Za-z0-9-]{10,}/g,
-  /\bAIza[0-9A-Za-z_-]{35}/g,
-  /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g
-];
-function hasSecretShape(text4, o = {}) {
-  for (const m of text4.matchAll(URL_CREDENTIALS))
-    if (!refersOnly(m[2]))
-      return true;
-  if (new RegExp(BEARER.source).test(text4))
-    return true;
-  if (o.basic !== false && new RegExp(BASIC.source).test(text4))
-    return true;
-  return TOKEN_SHAPES.some((re) => new RegExp(re.source).test(text4));
-}
-var placeholder = (v) => PLACEHOLDER.test(v.trim().replace(/^["'`]/, ""));
-var refersOnly = (v) => placeholder(v) || /^[$%{]/.test(v);
-function redactSecrets(line) {
-  if (/-----BEGIN [A-Z ]*PRIVATE KEY-----/.test(line))
-    return "<redacted>";
-  let out = line;
-  if (SECRET_KEY.test(out)) {
-    const m = KEY_VALUE.exec(out);
-    if (m && !placeholder(m[4]))
-      out = `${m[1]}${m[2]}${m[3]}<redacted>`;
-    for (const re of [KEY_LITERAL, SETTER_LITERAL]) {
-      const k = re.exec(out);
-      if (k && !placeholder(k[3]))
-        out = `${out.slice(0, k.index)}${k[1]}<redacted>`;
-    }
-    out = out.replace(KEY_BARE, (all, key3, v) => refersOnly(v) || v === "<redacted>" ? all : `${key3}<redacted>`);
-  }
-  out = out.replace(URL_CREDENTIALS, (all, head, pass) => refersOnly(pass) ? all : `${head}<redacted>`);
-  out = out.replace(BEARER, "$1<redacted>").replace(BASIC, "$1<redacted>");
-  for (const re of TOKEN_SHAPES)
-    out = out.replace(re, "<redacted>");
-  return out;
-}
-var SECRET_IDENT = new RegExp(`[A-Za-z0-9_]*${SECRET_WORDS}[A-Za-z0-9_]*`, "i");
-var OPAQUE_LITERAL = /(["'`])([^\s"'`]{8,})\1/g;
-function quoteHoldsSecret(quote) {
-  if (!SECRET_IDENT.test(quote))
-    return false;
-  for (const m of quote.matchAll(OPAQUE_LITERAL)) {
-    const v = m[2];
-    if (/^[/.#$%{<]/.test(v) || v.includes("://") || placeholder(v))
-      continue;
-    if (/[A-Za-z]/.test(v) && /[0-9]/.test(v))
-      return true;
-  }
-  return false;
-}
-function defaultActionAt(lines, path) {
-  if (path.split(/[?#]/, 1)[0].replace(/\/+/g, "") !== "")
-    return false;
-  const text4 = lines.join("\n");
-  const mvc5 = /defaults:\s*new\s*\{[^}]*\}/.exec(text4)?.[0];
-  if (!/MapDefaultControllerRoute|\{controller=\w+\}/.test(text4) && !mvc5)
-    return false;
-  const controller = /\{controller=(\w+)\}/.exec(text4)?.[1] ?? (mvc5 ? /controller\s*=\s*"(\w+)"/.exec(mvc5)?.[1] : void 0) ?? "Home";
-  const action = /\{action=(\w+)\}/.exec(text4)?.[1] ?? (mvc5 ? /action\s*=\s*"(\w+)"/.exec(mvc5)?.[1] : void 0) ?? "Index";
-  return new RegExp(`\\b${controller}Controller\\b`).test(text4) && new RegExp(`\\b${action}\\s*\\(`).test(text4);
-}
-var WORD_SEP = "[:._/#\\s]";
-function partsBuildWord(claim, parts, lines) {
-  if (!parts.length)
-    return false;
-  let s = claim.trim();
-  for (const raw of parts) {
-    const v = raw.trim();
-    if (!v)
-      return false;
-    const before = new RegExp(`^${WORD_SEP}`).test(v) ? "" : `(?<=^|${WORD_SEP}|\\u0000)`;
-    const after = new RegExp(`${WORD_SEP}$`).test(v) ? "" : `(?=$|${WORD_SEP}|\\u0000)`;
-    const re = new RegExp(`${before}${escape(v)}${after}`, "i");
-    if (!re.test(s))
-      return false;
-    s = s.replace(re, "\0");
-  }
-  const edge = new RegExp(`^${WORD_SEP}+|${WORD_SEP}+$`, "g");
-  const rest = s.split("\0").map((p2) => p2.replace(edge, "")).filter(Boolean);
-  return rest.length > 0 && rest.every((p2) => lines.some((l) => lineNamesWord(l, p2)));
-}
-function partsNamePath(lines, path) {
-  const parts = path.split(/[?#]/, 1)[0].split("/").filter((s) => s && !PARAM.test(s)).flatMap((s) => s.split(".")).filter(Boolean);
-  if (!parts.length)
-    return lines.some((l) => lineNamesRoute(l, path)) || defaultActionAt(lines, path);
-  return parts.every((p2) => [p2, p2.replace(/-/g, "")].some((q2) => lines.some((l) => new RegExp(`(^|[^A-Za-z0-9]|(?<=[a-z0-9])(?=[A-Z]))${escape(q2)}`, "i").test(l))));
-}
-
 // packages/core/dist/schema/facts.js
 var str = () => external_exports.string().min(1);
 var FACT_KINDS = [
@@ -561,7 +370,7 @@ var SETTING_KINDS = [
   "config",
   "schedule"
 ];
-var SECRET_KEY2 = /(password|passwd|pwd|secret|token|api[-_]?key|access[-_]?key|private[-_]?key|credentials?)$/i;
+var SECRET_KEY = /(password|passwd|pwd|secret|token|api[-_]?key|access[-_]?key|private[-_]?key|credentials?)$/i;
 var SECRET_SOURCE = /^(env:|vault:|secret:|ref:|\$\{|\{\{)/;
 var NOT_A_SECRET = /^(true|false|yes|no|on|off|include|omit|same-origin|none|null|\d+)$/i;
 function namesOfKey(key3) {
@@ -571,7 +380,7 @@ function namesOfKey(key3) {
   return [lastOf(bare), ...bracketed.map(lastOf)].filter(Boolean);
 }
 function looksLikeSecret(key3, value) {
-  return value !== void 0 && namesOfKey(key3).some((n) => SECRET_KEY2.test(n)) && !SECRET_SOURCE.test(value) && !NOT_A_SECRET.test(value.trim());
+  return value !== void 0 && namesOfKey(key3).some((n) => SECRET_KEY.test(n)) && !SECRET_SOURCE.test(value) && !NOT_A_SECRET.test(value.trim());
 }
 var tokenLike = (t) => /^[A-Za-z0-9+/=_.~-]{6,}$/.test(t) && /[0-9]/.test(t) && /[A-Za-z]/.test(t) && !/\.[a-z]{2,5}$/i.test(t) && !pathOfNames(t);
 var pathOfNames = (t) => t.startsWith("/") || t.includes("/") && t.split("/").every((s) => s === "" || NAME_LIKE.some((r) => r.test(s)) || identifierName(s) || fileName(s));
@@ -2294,7 +2103,9 @@ var FACTS_COMPANIONS = [
   // ADR 0164: the specs (OpenAPI, .proto, Avro, JSON Schema, AsyncAPI) read in the repo at the facts' commit.
   ".specs.yaml",
   // ADR 0157: the prompt for a second pass on the gaps the last verify listed.
-  ".gaps.md"
+  ".gaps.md",
+  // ADR 0195 point 3: a person's dismissals of what the readers found.
+  ".crosscheck.yaml"
 ];
 function factsFileOf(name) {
   for (const c of FACTS_COMPANIONS)
@@ -2529,6 +2340,11 @@ async function addManifestRepos(root, platform, entries, o = {}) {
   return { file, changes, written: true };
 }
 async function renameManifestRepo(root, repo, to) {
+  const r = await renamedManifest(root, repo, to);
+  await writeFileIfUnchanged(r.file.path, r.text, r.next);
+  return r.file;
+}
+async function renamedManifest(root, repo, to) {
   for (const other of await manifestFiles(root)) {
     const t = await readFile(other.path, "utf8").catch(() => void 0);
     if (t === void 0)
@@ -2541,8 +2357,11 @@ async function renameManifestRepo(root, repo, to) {
   if (!found)
     throw new ManifestEditError("not-found", `There is no repo ${repo} in any manifest.`);
   found.item.set("id", to);
-  await save(found.file.path, found.doc, found.text);
-  return found.file;
+  const check = RepoManifest.safeParse(found.doc.toJS());
+  if (!check.success)
+    throw new ManifestEditError("invalid", check.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; "));
+  const next = inEol(found.doc.toString({ lineWidth: 0, flowCollectionPadding: true }), eolOf(found.text));
+  return { file: found.file, text: found.text, next };
 }
 async function migrateManifests(root, o = {}) {
   const to = o.to ?? WORKSPACE_SCHEMA_VERSION;
@@ -2763,7 +2582,7 @@ function systemNameProblem(name) {
   return void 0;
 }
 async function knownTargetNames(root, o = {}) {
-  const { loadOrgPack } = await import("./chunk-3D74UADA.js");
+  const { loadOrgPack } = await import("./chunk-NGSGJLKW.js");
   const op = await loadOrgPack(orgPackDirOf(root)).catch(() => void 0);
   const ids = /* @__PURE__ */ new Set();
   const names = /* @__PURE__ */ new Set();
@@ -3126,18 +2945,18 @@ var isShortServiceHost = (host) => !host.replace(/:\d+$/, "").includes(".");
 var PATH_PATTERN = /[()[\]|$^*+?\\]/;
 var isPatternPath = (path) => PATH_PATTERN.test(path);
 function plainPathPrefix(path) {
-  const segs2 = [];
+  const segs3 = [];
   for (const s of path.split("/").filter(Boolean)) {
     const at3 = s.search(PATH_PATTERN);
     if (at3 < 0) {
-      segs2.push(s);
+      segs3.push(s);
       continue;
     }
     if (at3 > 0)
-      segs2.push(s.slice(0, at3));
+      segs3.push(s.slice(0, at3));
     break;
   }
-  return `/${segs2.join("/")}`;
+  return `/${segs3.join("/")}`;
 }
 var JOINED_BY_PATH = "joined-by-path";
 var JOINED_BY_LABEL = "joined-by-label";
@@ -3275,10 +3094,11 @@ function callTargetQuestion(f, component) {
   const what2 = [f.method?.toUpperCase(), f.path].filter(Boolean).join(" ");
   return `Which repo or system answers ${what2}, which ${component} calls${f.base ? ` through ${f.base}` : ""}?`;
 }
-function forwardHostQuestion(host, repo) {
+function forwardHostQuestion(host, repo, prefix) {
   if (!placeholderIn(host))
     return hostQuestionText(host);
-  return `Which repo answers on ${host}? ${repo}'s target URL is a token no fact sets. If a deploy file sets it per environment (the Apigee config plugin's config.json), read ${repo} again with your assistant (Read with my assistant): the read records each environment's value, and the calls join where they go. Else name the repo or the outside system that answers.`;
+  const routes = prefix ? ` for the routes under ${prefix === "/" ? "" : prefix}/**` : "";
+  return `Which repo answers on ${host}? ${repo}'s target URL${routes} is a token no fact sets. If a deploy file sets it per environment (the Apigee config plugin's config.json), read ${repo} again with your assistant (Read with my assistant): the read records each environment's value, and the calls join where they go. Else name the repo or the outside system that answers.`;
 }
 function gatewayCycleQuestion(f, component, gateway) {
   const what2 = [f.method?.toUpperCase(), f.path].filter(Boolean).join(" ");
@@ -3288,8 +3108,8 @@ var SECRETISH = /^(env:|vault:|secret:|ref:|\$\{|\{\{)/i;
 function pathSegments(p2) {
   if (!p2)
     return void 0;
-  const segs2 = p2.split(/[?#]/)[0].split("/").filter(Boolean).map((x) => /^\{[^}]*\}$/.test(x) ? "{}" : x.toLowerCase());
-  return segs2.length ? segs2 : void 0;
+  const segs3 = p2.split(/[?#]/)[0].split("/").filter(Boolean).map((x) => /^\{[^}]*\}$/.test(x) ? "{}" : x.toLowerCase());
+  return segs3.length ? segs3 : void 0;
 }
 var sameSegment = (a, b) => a === "{}" || b === "{}" || a === b;
 var sameSegments = (a, b) => (a?.length ?? 0) === (b?.length ?? 0) && (a ?? []).every((x, i) => sameSegment(x, b[i]));
@@ -3597,7 +3417,7 @@ function joinFacts(input) {
       return !!deploysIn.get(key3(t.repo, t.fact.cite.file))?.has(name);
     });
   };
-  const resolve3 = (raw, owner, seen, depth = 0) => {
+  const resolve3 = (raw, owner, seen, depth = 0, own = false) => {
     const v = raw?.trim();
     if (!v)
       return [];
@@ -3607,8 +3427,8 @@ function joinFacts(input) {
     if (depth >= MAX_PLACEHOLDER_DEPTH)
       return [];
     if (placeholderIn(p2.after)) {
-      const head = resolve3(v.slice(0, v.length - p2.after.length), owner, seen, depth);
-      const tail = resolve3(p2.after, owner, seen, depth);
+      const head = resolve3(v.slice(0, v.length - p2.after.length), owner, seen, depth, own);
+      const tail = resolve3(p2.after, owner, seen, depth, own);
       if (new Set(head.map((r) => r.value)).size !== 1)
         return [];
       if (new Set(tail.map((r) => r.value)).size !== 1)
@@ -3626,10 +3446,12 @@ function joinFacts(input) {
     const named = (configsByName.get(want) ?? []).filter((s) => !seen.has(key3(s.repo, s.fact.id)));
     const mine = named.flatMap((s) => {
       const how = setsFor(s, owner);
+      if (own && how !== "cited")
+        return [];
       const guess = how === "folder" ? [JOINED_BY_FOLDER_NAME] : [];
       return how ? [{ s, guess }] : [];
     });
-    const settings = mine.length ? mine : named.filter((x) => setsForAll(x, owner)).map((s) => ({ s, guess: [JOINED_BY_PLATFORM_SETTING] }));
+    const settings = mine.length || own ? mine : named.filter((x) => setsForAll(x, owner)).map((s) => ({ s, guess: [JOINED_BY_PLATFORM_SETTING] }));
     const viaRef = new Set(settings.flatMap(({ s }) => refTargets(s, owner, seen).map((t) => key3(t.repo, t.fact.id))));
     for (const { s, guess } of settings.filter(({ s: x }) => !viaRef.has(key3(x.repo, x.fact.id)))) {
       const k = key3(s.repo, s.fact.id);
@@ -3637,7 +3459,7 @@ function joinFacts(input) {
       if (ref2) {
         for (const t of refTargets(s, owner, seen)) {
           const tv = t.fact.value?.trim() ?? "";
-          const rs = ref2.secret ? PLAIN_HOST.test(tv) ? [{ value: tv, through: [], guesses: [] }] : [] : resolve3(t.fact.value, owner, /* @__PURE__ */ new Set([...seen, k, key3(t.repo, t.fact.id)]), depth + 1);
+          const rs = ref2.secret ? PLAIN_HOST.test(tv) ? [{ value: tv, through: [], guesses: [] }] : [] : resolve3(t.fact.value, owner, /* @__PURE__ */ new Set([...seen, k, key3(t.repo, t.fact.id)]), depth + 1, own);
           for (const r of rs)
             out.push({
               value: `${p2.before}${r.value}${p2.after}`,
@@ -3647,7 +3469,7 @@ function joinFacts(input) {
         }
         continue;
       }
-      for (const r of resolve3(s.fact.value ?? s.fact.source, owner, /* @__PURE__ */ new Set([...seen, k]), depth + 1))
+      for (const r of resolve3(s.fact.value ?? s.fact.source, owner, /* @__PURE__ */ new Set([...seen, k]), depth + 1, own))
         out.push({
           value: `${p2.before}${r.value}${p2.after}`,
           through: [s, ...r.through],
@@ -3656,7 +3478,7 @@ function joinFacts(input) {
     }
     if (out.length || !p2.fallback)
       return out;
-    return resolve3(p2.fallback, owner, seen, depth + 1).map((r) => ({
+    return resolve3(p2.fallback, owner, seen, depth + 1, own).map((r) => ({
       ...r,
       value: `${p2.before}${r.value}${p2.after}`
     }));
@@ -3696,8 +3518,8 @@ function joinFacts(input) {
   };
   const ownNamespaces = [];
   const addPath = (g, path, by) => {
-    const segs2 = pathSegments(path);
-    const h = g.paths.find((x) => sameSegments(pathSegments(x.path), segs2));
+    const segs3 = pathSegments(path);
+    const h = g.paths.find((x) => sameSegments(pathSegments(x.path), segs3));
     if (h) {
       if (by)
         h.by.push(by);
@@ -3826,8 +3648,8 @@ function joinFacts(input) {
     const listed = ported.length ? ported : declared.filter((d) => !hostHasPort(d.pattern) && hostMatches(d.pattern, h.host, h.port));
     if (!listed.length)
       return void 0;
-    const segs2 = pathSegments(path) ?? [];
-    const starts = listed.filter((d) => d.basePath && d.basePath.length <= segs2.length && d.basePath.every((x, i) => sameSegment(x, segs2[i])));
+    const segs3 = pathSegments(path) ?? [];
+    const starts = listed.filter((d) => d.basePath && d.basePath.length <= segs3.length && d.basePath.every((x, i) => sameSegment(x, segs3[i])));
     const longest2 = Math.max(0, ...starts.map((d) => d.basePath.length));
     const all = starts.length ? starts.filter((d) => d.basePath.length === longest2) : listed.filter((d) => !d.basePath);
     if (!all.length)
@@ -3886,32 +3708,32 @@ function joinFacts(input) {
       byLastLiteral.set(k, [e]);
   };
   for (const e of entries) {
-    const segs2 = segments(e.fact.path);
-    if (!segs2)
+    const segs3 = segments(e.fact.path);
+    if (!segs3)
       continue;
-    if (segs2.includes("**")) {
+    if (segs3.includes("**")) {
       withCatchAll.push(e);
       continue;
     }
-    if (!segs2.length) {
+    if (!segs3.length) {
       push2("/", e);
       continue;
     }
-    for (let k = 0; k < segs2.length; k++)
-      if (literal(segs2[segs2.length - 1 - k])) {
-        push2(`${k}\0${segs2[segs2.length - 1 - k]}`, e);
+    for (let k = 0; k < segs3.length; k++)
+      if (literal(segs3[segs3.length - 1 - k])) {
+        push2(`${k}\0${segs3[segs3.length - 1 - k]}`, e);
         break;
       }
   }
   const routeCandidates = (path) => {
-    const segs2 = segments(path);
-    if (!segs2)
+    const segs3 = segments(path);
+    if (!segs3)
       return [];
     const got = [...withCatchAll];
-    if (!segs2.length)
+    if (!segs3.length)
       got.push(...byLastLiteral.get("/") ?? []);
-    for (let k = 0; k < segs2.length; k++) {
-      const s = segs2[segs2.length - 1 - k];
+    for (let k = 0; k < segs3.length; k++) {
+      const s = segs3[segs3.length - 1 - k];
       if (literal(s))
         got.push(...byLastLiteral.get(`${k}\0${s}`) ?? []);
     }
@@ -3977,7 +3799,7 @@ function joinFacts(input) {
     return hs;
   };
   const rawSegs = (p2) => (p2.trim().split(/[?#]/, 1)[0] ?? "").split("/").filter((s) => s.length > 0);
-  const toPath = (segs2) => `/${segs2.join("/")}`;
+  const toPath = (segs3) => `/${segs3.join("/")}`;
   const segKey = (s) => segments(`/${s}`)?.[0] ?? s;
   const startsWithSegs = (a, b) => b.length <= a.length && b.every((x, i) => sameSegment(segKey(x), segKey(a[i])));
   const endsWithSegs = (a, b) => startsWithSegs(a.slice(a.length - b.length), b) && b.length <= a.length;
@@ -4034,9 +3856,9 @@ function joinFacts(input) {
     const servlets = valuesOf(SERVLET_PATH_KEYS);
     for (const c of contexts.length ? contexts : none)
       for (const s of servlets.length ? servlets : none) {
-        const segs2 = [...c.segs, ...s.segs];
-        if (segs2.length)
-          out.push({ from: "config", segs: segs2, by: [...c.by, ...s.by] });
+        const segs3 = [...c.segs, ...s.segs];
+        if (segs3.length)
+          out.push({ from: "config", segs: segs3, by: [...c.by, ...s.by] });
       }
     basesSeen.set(k, out);
     return out;
@@ -4084,13 +3906,13 @@ function joinFacts(input) {
     const out = [];
     for (const x of tried) {
       const method = [f.method, x.route?.fact.method].find((m) => !!m && m.toUpperCase() !== "ANY")?.toUpperCase();
-      const score = (segs2, e) => {
+      const score = (segs3, e) => {
         if (!x.under) {
-          const s = routeScore(toPath(segs2), e.path);
+          const s = routeScore(toPath(segs3), e.path);
           return s >= 400 ? s : 0;
         }
         const es = rawSegs(e.path);
-        return es.includes("**") || !startsWithSegs(es, segs2) ? 0 : 1;
+        return es.includes("**") || !startsWithSegs(es, segs3) ? 0 : 1;
       };
       const hits = [];
       for (const e of x.under ? entries : routeCandidates(toPath(x.segs))) {
@@ -4151,9 +3973,10 @@ function joinFacts(input) {
     from: b.from,
     ...b.by.length ? { by: uniqueEnds(b.by) } : {}
   });
-  const replacedFor = (call) => {
+  const replacedFor = (call, token) => {
+    const written = call.fact.host ?? call.fact.base ?? token;
     const parts = [call.fact.cite, ...call.fact.cite.with ?? []];
-    const urlText = (call.fact.host ?? call.fact.base ?? "").trim();
+    const urlText = (written ?? "").trim();
     const writing = urlText ? parts.filter((p2) => p2.value.trim() === urlText) : [];
     const cited = (writing.length ? writing : parts).map((p2) => p2.file);
     const rootFits = (file, xpath) => {
@@ -4177,7 +4000,7 @@ function joinFacts(input) {
     const home = bundleHomeOf(call.fact.cite.file);
     const homes = home === void 0 ? void 0 : bundleHomesOf(call.repo);
     const ownedBy = (file) => homes.filter((h) => file.startsWith(h)).sort((a, b) => b.length - a.length)[0] ?? (homes.length === 1 ? homes[0] : void 0);
-    const wanted = placeholderIn(call.fact.host ?? call.fact.base)?.name;
+    const wanted = placeholderIn(written)?.name;
     const tokenNames = (n) => [n.fact.source, ...(n.fact.cite.with ?? []).map((w) => w.value)].flatMap((v) => {
       const p2 = v && /^\s*(@[^@\s]+@|\{\{[^}]+\}\})\s*$/.test(v) ? placeholderIn(v) : void 0;
       return p2 ? [p2.name] : [];
@@ -4226,7 +4049,7 @@ function joinFacts(input) {
     return !served;
   };
   const targetServed = /* @__PURE__ */ new Map();
-  const genericBase = (segs2) => segs2.every((s) => /^(v\d+(\.\d+)*|api|rest|services)$/i.test(s));
+  const genericBase = (segs3) => segs3.every((s) => /^(v\d+(\.\d+)*|api|rest|services)$/i.test(s));
   const ownBaseSeen = /* @__PURE__ */ new Map();
   let baseOwners;
   const ownersOfBases = () => {
@@ -4244,10 +4067,10 @@ function joinFacts(input) {
     return baseOwners;
   };
   const isOwnBase = (component, p2) => {
-    const segs2 = rawSegs(p2);
-    if (genericBase(segs2))
+    const segs3 = rawSegs(p2);
+    if (genericBase(segs3))
       return false;
-    const k = `${component}\0${segs2.join("/").toLowerCase()}`;
+    const k = `${component}\0${segs3.join("/").toLowerCase()}`;
     const was = ownBaseSeen.get(k);
     if (was !== void 0)
       return was;
@@ -4260,7 +4083,7 @@ function joinFacts(input) {
       if (done.has(ek))
         continue;
       done.add(ek);
-      if (basesOf(e).some((b) => b.segs.length === segs2.length && startsWithSegs(segs2, b.segs))) {
+      if (basesOf(e).some((b) => b.segs.length === segs3.length && startsWithSegs(segs3, b.segs))) {
         got = true;
         break;
       }
@@ -4273,7 +4096,7 @@ function joinFacts(input) {
       return true;
     if (call.fact.callType !== "rest")
       return false;
-    const segs2 = rawSegs(p2);
+    const segs3 = rawSegs(p2);
     return routeCandidates(p2).some((e) => {
       if (e.component === call.component || !SERVES.rest.includes(e.fact.entryType) || !sameMethod(call.fact.method, e.fact.method))
         return false;
@@ -4281,11 +4104,26 @@ function joinFacts(input) {
       if (gatewayRoute && isPassThrough(e.fact))
         return false;
       const least = gatewayRoute ? 400 : 100;
-      return basesOf(e).some((b) => b.segs.length > 0 && b.segs.length < segs2.length && startsWithSegs(segs2, b.segs) && routeScore(toPath(segs2.slice(b.segs.length)), e.fact.path) >= least);
+      return basesOf(e).some((b) => b.segs.length > 0 && b.segs.length < segs3.length && startsWithSegs(segs3, b.segs) && routeScore(toPath(segs3.slice(b.segs.length)), e.fact.path) >= least);
     });
   };
   const gatewayRepos = new Set(repos.filter((r) => r.gateway).map((r) => r.repo));
   const isForwarding = (c) => c.fact.callType === "rest" && (!!bundleRootOf(c.fact.cite.file) || gatewayRepos.has(c.repo));
+  const forwardTokenOf = (c) => {
+    if (c.fact.host || c.fact.base || !isForwarding(c))
+      return void 0;
+    const said = new Set([c.fact.cite.value, ...(c.fact.cite.with ?? []).map((w) => w.value)].flatMap((raw) => {
+      const v = raw.trim();
+      const p2 = placeholderIn(v);
+      if (!p2 || hostIn(v))
+        return [];
+      const before = p2.before.trim();
+      if (before && !/^[a-z][a-z0-9+.-]*:\/\/$/i.test(before))
+        return [];
+      return p2.after === "" || /^[/:?]/.test(p2.after) ? [v] : [];
+    }));
+    return said.size === 1 ? [...said][0] : void 0;
+  };
   const proxyOf = (r) => key3(r.repo, bundleRootOf(r.fact.cite.file) ?? r.fact.handler?.split("/")[0] ?? "");
   let baseRoutes;
   const baseRoutesOf = () => {
@@ -4317,18 +4155,18 @@ function joinFacts(input) {
     return baseRoutes;
   };
   const byBasePath = (c, path) => {
-    const segs2 = rawSegs(path);
-    if (!segs2.length)
+    const segs3 = rawSegs(path);
+    if (!segs3.length)
       return void 0;
     const { byFirst, all } = baseRoutesOf();
-    const first = segKey(segs2[0]);
+    const first = segKey(segs3[0]);
     const pool = first === "{}" ? all : [...byFirst.get(first) ?? [], ...byFirst.get("{}") ?? []];
     const ownBundle = bundleRootOf(c.fact.cite.file);
-    const under2 = pool.filter((x) => (x.r.component !== c.component || !!ownBundle && proxyOf(x.r) !== key3(c.repo, ownBundle)) && x.base.length < segs2.length && startsWithSegs(segs2, x.base));
-    if (!under2.length)
+    const under3 = pool.filter((x) => (x.r.component !== c.component || !!ownBundle && proxyOf(x.r) !== key3(c.repo, ownBundle)) && x.base.length < segs3.length && startsWithSegs(segs3, x.base));
+    if (!under3.length)
       return void 0;
-    const longest2 = Math.max(...under2.map((x) => x.base.length));
-    const top = under2.filter((x) => x.base.length === longest2).map((x) => x.r);
+    const longest2 = Math.max(...under3.map((x) => x.base.length));
+    const top = under3.filter((x) => x.base.length === longest2).map((x) => x.r);
     if (new Set(top.map(proxyOf)).size !== 1)
       return void 0;
     const scored = top.filter((r) => sameMethod(c.fact.method, r.fact.method) && !isPassThrough(r.fact)).map((r) => ({ r, score: routeScore(path, r.fact.path) })).filter((x) => x.score >= 400);
@@ -4336,7 +4174,7 @@ function joinFacts(input) {
       return void 0;
     const best = Math.max(...scored.map((x) => x.score));
     const flows = scored.filter((x) => x.score === best).map((x) => x.r).sort((x, y) => cmp(x.repo, y.repo) || cmp(x.fact.id, y.fact.id));
-    const routed = new Set(under2.map((x) => x.r));
+    const routed = new Set(under3.map((x) => x.r));
     const others = serving({ ...c, fact: { ...c.fact, path } }, (e) => !routed.has(e), true);
     return { flows, others };
   };
@@ -4388,17 +4226,20 @@ function joinFacts(input) {
     }
     const keyed = f.base ? (configsByRepo.get(call.repo) ?? []).filter((n) => n.fact.key === f.base) : [];
     const cands = [];
+    const token = forwardTokenOf(call);
+    const fHost = f.host ?? token;
+    const own = isForwarding(call) && !!bundleRootOf(f.cite.file) && TOKEN_FORMS.some((re) => re.test(fHost ?? f.base ?? ""));
     if (!hostIn(f.host)) {
-      if (placeholderIn(f.host))
-        cands.push(...resolve3(f.host, call, /* @__PURE__ */ new Set()));
+      if (placeholderIn(fHost))
+        cands.push(...resolve3(fHost, call, /* @__PURE__ */ new Set(), 0, own));
       else if (keyed.length)
         for (const t of keyed)
           for (const r of resolve3(t.fact.value ?? t.fact.source, call, /* @__PURE__ */ new Set([key3(t.repo, t.fact.id)])))
             cands.push({ ...r, tie: t });
       else if (placeholderIn(f.base))
-        cands.push(...resolve3(f.base, call, /* @__PURE__ */ new Set()));
+        cands.push(...resolve3(f.base, call, /* @__PURE__ */ new Set(), 0, own));
       if (!cands.some((x) => !!hostIn(x.value)))
-        cands.push(...replacedFor(call));
+        cands.push(...replacedFor(call, token));
     }
     const configs = cands.filter((x) => !!hostIn(x.value));
     const claimOf2 = (x) => claimed(hostIn(x.value), joinPaths(urlPathOf(x.value), f.path));
@@ -4415,7 +4256,7 @@ function joinFacts(input) {
       if (host)
         return void 0;
       if (!keyed.length)
-        return pathAroundPlaceholder(f.host) ?? pathAroundPlaceholder(f.base);
+        return pathAroundPlaceholder(fHost) ?? pathAroundPlaceholder(f.base);
       const ps = new Set(keyed.map((t) => pathAroundPlaceholder(t.fact.value ?? t.fact.source)));
       return ps.size === 1 ? [...ps][0] : void 0;
     };
@@ -4561,9 +4402,9 @@ function joinFacts(input) {
         continue;
       }
       const forwarding = isForwarding(call);
-      const namesHost = !!(f.host || f.base);
+      const namesHost = !!(f.host || f.base || token);
       if (forwarding && namesHost) {
-        const named2 = f.host ?? f.base;
+        const named2 = f.host ?? f.base ?? token;
         asks.push({
           call: end(call),
           reason: "unknown-host",
@@ -4980,9 +4821,9 @@ function gatewayRouteId(n) {
   return fitId(id, `gw-${n.component}`).replace(/\./g, "-");
 }
 function basePathOf(e) {
-  const segs2 = (p2) => p2.split(/[?#]/, 1)[0].split("/").filter(Boolean);
-  const path = segs2(e.path);
-  const base = (e.cite.with ?? []).map((p2) => segs2(p2.value)).filter((s) => s.length > 0 && s.length < path.length && s.every((x, k) => x === path[k])).sort((a, b) => b.length - a.length)[0];
+  const segs3 = (p2) => p2.split(/[?#]/, 1)[0].split("/").filter(Boolean);
+  const path = segs3(e.path);
+  const base = (e.cite.with ?? []).map((p2) => segs3(p2.value)).filter((s) => s.length > 0 && s.length < path.length && s.every((x, k) => x === path[k])).sort((a, b) => b.length - a.length)[0];
   return base ? `/${base.join("/")}` : e.path;
 }
 function joinGuessesOf(j) {
@@ -5305,6 +5146,52 @@ function joinRecords(result, repos) {
 var cmp2 = (a, b) => a < b ? -1 : a > b ? 1 : 0;
 var compact = (x) => x.toLowerCase().replace(/[^a-z0-9]/g, "");
 var SECRETISH2 = /^(env:|vault:|secret:|ref:|\$\{|\{\{)/i;
+function urlPathOf2(s) {
+  const m = s ? /^[a-z][a-z0-9+.-]*:\/\/[^/?#]+(\/[^?#]*)/i.exec(s.trim()) : null;
+  const p2 = m?.[1]?.replace(/\/+$/, "");
+  return p2 ? p2 : void 0;
+}
+var PROD_LIKE = /(^|[^a-z])(pd|prod|prd|production)([^a-z]|$)/i;
+function preferredEnvironment(envs) {
+  const named = [...new Set(envs.filter(Boolean))].sort(cmp2);
+  return named.find((e) => PROD_LIKE.test(e) && !NOT_PROD.test(e)) ?? named[0];
+}
+var NOT_PROD = /(^|[^a-z])(non|pre|np)[-_ ]?(pd|prod|prd|production)([^a-z]|$)/i;
+function under(prefix, path) {
+  const p2 = path.startsWith("/") ? path : `/${path}`;
+  if (!prefix)
+    return p2;
+  const lower2 = p2.toLowerCase();
+  const pre = prefix.toLowerCase();
+  return lower2 === pre || lower2.startsWith(`${pre}/`) ? p2 : `${prefix}${p2 === "/" ? "" : p2}`;
+}
+function segs(path) {
+  const p2 = (path.trim().split(/[?#]/, 1)[0] ?? "").replace(/\{([^}:?]*)[^}]*\}/g, "{$1}");
+  if (!p2.startsWith("/"))
+    return void 0;
+  return p2.split("/").filter(Boolean).map((s) => /^(\{\*[^}]*\}|\*\*|\{\*\*\})$/.test(s) ? "**" : s === "*" ? "*" : /^(\{[^}]*\}|:[^/]+|<[^>]+>|\$\{[^}]*\})$/.test(s) ? "{}" : s.toLowerCase());
+}
+function fit(call, op) {
+  const rest = call.indexOf("**");
+  const head = rest >= 0 ? call.slice(0, rest) : call;
+  if (rest >= 0 ? op.length < head.length : op.length !== call.length)
+    return void 0;
+  let literals = 0;
+  let wildcard = rest >= 0;
+  for (let i = 0; i < head.length; i++) {
+    const a = head[i];
+    const b = op[i];
+    if (a === "*")
+      wildcard = true;
+    else if (b === "{}")
+      continue;
+    else if (a === b)
+      literals++;
+    else
+      return void 0;
+  }
+  return literals > 0 ? { literals, wildcard } : void 0;
+}
 function hostOf(s) {
   const t = s?.trim();
   if (!t || SECRETISH2.test(t))
@@ -5315,6 +5202,22 @@ function hostOf(s) {
   const m = /^([a-z0-9][a-z0-9.-]*)(?::(\d+))?$/i.exec(t);
   return m ? { host: m[1].toLowerCase(), ...m[2] ? { port: Number(m[2]) } : {} } : void 0;
 }
+function tokenOf(call, forwarding) {
+  const whole = (v) => {
+    const t = v?.trim();
+    const p2 = t ? placeholderIn(t) : void 0;
+    return p2 && !p2.before.trim() && (p2.after === "" || /^[/:?]/.test(p2.after)) ? t : void 0;
+  };
+  if (call.host)
+    return whole(call.host);
+  if (call.base || !forwarding)
+    return void 0;
+  const said = new Set([call.cite.value, ...(call.cite.with ?? []).map((w) => w.value)].flatMap((v) => {
+    const t = whole(v);
+    return t ? [t] : [];
+  }));
+  return said.size === 1 ? [...said][0] : void 0;
+}
 var takesDirect = (v) => v.boundary === "internal";
 var sameMethod2 = (a, b) => {
   const x = a?.toUpperCase();
@@ -5336,7 +5239,14 @@ function joinVendorOperations(input) {
       if (k.length >= 3)
         byLabel.set(k, (byLabel.get(k) ?? /* @__PURE__ */ new Set()).add(v));
     }
+  const estateHosts = input.repos.flatMap((r) => [
+    ...r.hosts ?? [],
+    ...(r.modules ?? []).flatMap((m) => m.hosts)
+  ]);
+  const joinedCalls = new Set((input.joined ?? []).map((j) => `${j.call.repo}\0${j.call.fact}`));
   const vendorOfHost = (h) => {
+    if (estateHosts.some((p2) => hostMatches(p2, h.host, h.port)))
+      return void 0;
     const listed = vendors.filter((v) => v.hosts.some((p2) => hostMatches(p2, h.host, h.port)));
     if (listed.length === 1)
       return listed[0];
@@ -5371,9 +5281,22 @@ function joinVendorOperations(input) {
         continue;
       const call = f;
       const route = routeFact ? end(routeFact) : void 0;
+      if (joinedCalls.has(`${r.repo}\0${call.id}`))
+        continue;
       let vendor;
       let how;
       let tie;
+      const direct = hostOf(call.host);
+      const token = direct ? void 0 : tokenOf(call, forwarding);
+      const keyed = (k) => facts.filter((c) => c.kind === "config" && c.key === k && !!hostOf(c.value));
+      const tokenName = token ? placeholderIn(token)?.name : void 0;
+      const configs = token ? [
+        .../* @__PURE__ */ new Set([
+          ...keyed(token),
+          ...tokenName && tokenName !== token ? keyed(tokenName) : []
+        ])
+      ] : call.base ? keyed(call.base) : [];
+      const baseIsKey = !!call.base && facts.some((c) => c.kind === "config" && c.key === call.base);
       const answer = input.targets?.[r.repo]?.[call.id];
       if (answer) {
         vendor = byName2.get(factIdPart(answer));
@@ -5382,8 +5305,6 @@ function joinVendorOperations(input) {
         vendor = byName2.get(factIdPart(call.to));
         how = "named";
       } else {
-        const direct = hostOf(call.host);
-        const configs = call.base ? facts.filter((c) => c.kind === "config" && c.key === call.base && !!hostOf(c.value)) : [];
         const seen = /* @__PURE__ */ new Map();
         if (direct) {
           const v = vendorOfHost(direct);
@@ -5395,7 +5316,7 @@ function joinVendorOperations(input) {
             if (v && !seen.has(v.system))
               seen.set(v.system, { v, tie: c });
           }
-        } else {
+        } else if (!token && !baseIsKey) {
           const b = hostOf(call.base);
           const v = b ? vendorOfHost(b) : void 0;
           if (v)
@@ -5413,49 +5334,123 @@ function joinVendorOperations(input) {
         continue;
       if (!forwarding && !takesDirect(vendor))
         continue;
+      const own = vendor;
+      const groups = /* @__PURE__ */ new Map();
+      const groupOf = (path) => {
+        const k = path ?? "";
+        const g = groups.get(k) ?? { ...path ? { path } : {}, envs: [] };
+        groups.set(k, g);
+        return g;
+      };
+      const settings = configs.filter((c) => how !== "host" || vendorOfHost(hostOf(c.value)) === own);
+      const ownPath = urlPathOf2(call.host);
+      if (ownPath || !settings.length)
+        groupOf(ownPath);
+      for (const c of settings) {
+        const g = groupOf(urlPathOf2(c.value));
+        if (c.env)
+          g.envs.push(c.env);
+      }
+      for (const g of groups.values()) {
+        const env = preferredEnvironment(g.envs);
+        if (env)
+          g.env = env;
+        g.tie = settings.find((c) => urlPathOf2(c.value) === g.path && c.env === env) ?? settings.find((c) => urlPathOf2(c.value) === g.path);
+      }
+      const first = preferredEnvironment([...groups.values()].flatMap((g) => g.envs));
+      const lead = (g) => first !== void 0 && g.envs.includes(first) ? 0 : 1;
+      const ordered = [...groups.values()].sort((a, b) => lead(a) - lead(b) || Number(!a.env) - Number(!b.env) || cmp2(a.path ?? "", b.path ?? ""));
+      const several = ordered.length > 1;
       const name = vendor.names[0] ?? vendor.system;
       const method = call.method?.toUpperCase();
-      const what2 = [method, call.path].filter(Boolean).join(" ");
-      const shape = (op) => Math.max(routeScore(call.path, op.fullPath ?? op.path), op.fullPath ? routeScore(call.path, op.path) : 0);
-      const scored = vendor.operations.map((op) => ({ op, score: shape(op) })).filter((s) => s.score >= 400);
-      const fitting = scored.filter((s) => sameMethod2(method, s.op.method));
-      const best = Math.max(0, ...fitting.map((s) => s.score));
-      const hits = fitting.filter((s) => s.score === best).map((s) => s.op).sort((a, b) => cmp2(a.id, b.id));
       const base = {
         call: end(call),
-        ...route ? { route } : {},
-        ...tie ? { tie } : {},
-        vendor: vendor.system
+        ...route ? { route } : {}
       };
-      if (hits.length === 1) {
-        const op = hits[0];
-        matches.push({
-          ...base,
-          how,
-          operation: op.id,
-          ...method || op.method ? { method: (method ?? op.method).toUpperCase() } : {},
-          path: call.path,
-          ...forwarding ? {} : { direct: true }
+      const sentOf = (g) => g.path ? under(g.path, call.path) : under(void 0, call.path);
+      const whatOf = (g) => [method, sentOf(g)].filter(Boolean).join(" ");
+      const inEnvs = (g) => several && g.envs.length ? ` in ${[...new Set(g.envs)].sort(cmp2).join(", ")}` : "";
+      const tieOf = (g) => tie && g.tie ? { tie: end(g.tie) } : tie ? { tie } : {};
+      const envOf = (g) => g.env ? { env: g.env } : {};
+      const results = ordered.map((g) => {
+        const sent = sentOf(g);
+        const shape = (op) => {
+          const a = segs(sent);
+          if (!a)
+            return void 0;
+          let bestFit;
+          const served = g.path ? [op.fullPath ?? op.path] : op.fullPath ? [op.fullPath, op.path] : [op.path];
+          for (const path of served) {
+            const b = segs(path);
+            const x = b ? fit(a, b) : void 0;
+            if (x && (!bestFit || x.literals > bestFit.literals))
+              bestFit = x;
+          }
+          return bestFit;
+        };
+        const scored = vendor.operations.flatMap((op) => {
+          const x = shape(op);
+          return x ? [{ op, ...x }] : [];
         });
-      } else if (hits.length > 1) {
+        const fitting = scored.filter((x) => sameMethod2(method, x.op.method));
+        const wild = fitting.some((x) => x.wildcard);
+        const best = Math.max(0, ...fitting.map((x) => x.literals));
+        const hits = fitting.filter((x) => wild || x.literals === best).sort((a, b) => cmp2(a.op.id, b.op.id));
+        return { g, sent, scored, wild, hits };
+      });
+      const reached = results.filter((x) => x.hits.length === 1 || x.wild && x.hits.length > 1);
+      const done = /* @__PURE__ */ new Set();
+      const found = [];
+      for (const x of reached)
+        for (const h of x.hits) {
+          if (done.has(h.op.id))
+            continue;
+          done.add(h.op.id);
+          found.push({
+            ...base,
+            ...tieOf(x.g),
+            vendor: vendor.system,
+            how,
+            operation: h.op.id,
+            ...method || h.op.method ? { method: (method ?? h.op.method).toUpperCase() } : {},
+            path: x.sent,
+            ...envOf(x.g),
+            ...x.wild ? { wildcard: true } : {},
+            ...forwarding ? {} : { direct: true }
+          });
+        }
+      matches.push(...found.sort((a, b) => cmp2(a.operation, b.operation)));
+      for (const x of results.filter((y) => !y.wild && y.hits.length > 1)) {
         const opName = (op) => `${op.method.toUpperCase()} ${op.path}`;
-        const names = hits.map(opName).sort();
+        const names = x.hits.map((h) => opName(h.op)).sort();
         asks.push({
-          call: end(call),
-          ...route ? { route } : {},
+          ...base,
           vendor: vendor.system,
-          question: `Which of ${name}'s operations does ${what2}, which ${component(call)} forwards, reach: ${names.slice(0, -1).join(", ")} or ${names.at(-1)}?`,
-          candidates: hits.map((o) => o.id)
+          question: `Which of ${name}'s operations does ${whatOf(x.g)}${inEnvs(x.g)}, which ${component(call)} forwards, reach: ${names.slice(0, -1).join(", ")} or ${names.at(-1)}?`,
+          candidates: x.hits.map((h) => h.op.id),
+          ...envOf(x.g)
         });
-      } else {
-        const others = [...new Set(scored.map((s) => s.op.method.toUpperCase()))].sort();
+      }
+      const missed = results.filter((x) => !x.hits.length);
+      const gap = (x, what2) => {
+        const others = [...new Set(x.scored.map((y) => y.op.method.toUpperCase()))].sort();
         gaps.push({
           ...base,
+          ...tieOf(x.g),
+          vendor: vendor.system,
           ...method ? { method } : {},
-          path: call.path,
+          path: x.sent,
+          ...envOf(x.g),
           message: `${component(call)} ${forwarding ? "forwards" : "calls"} ${what2} ${forwarding ? "to" : "on"} ${name}, whose spec publishes no such operation${others.length ? ` (it publishes ${others.join(", ")} on that path)` : ""}`
         });
-      }
+      };
+      if (missed.length === results.length) {
+        const [head, ...rest] = missed;
+        const also = rest.map((x) => `${x.sent}${inEnvs(x.g)}`);
+        gap(head, `${whatOf(head.g)}${inEnvs(head.g)}${also.length ? ` (${also.join("; ")})` : ""}`);
+      } else
+        for (const x of missed)
+          gap(x, `${whatOf(x.g)}${inEnvs(x.g)}`);
     }
   }
   const byCall = (x, y) => cmp2(x.call.repo, y.call.repo) || cmp2(x.call.fact, y.call.fact);
@@ -6337,7 +6332,7 @@ function callerRecords(result, repos, join18, o = {}) {
     } else if (known && products.length === 1 && known.kind === "GatewayRoute" && !known.product)
       put({ ...known, product: products[0] });
     for (const c of route.callers ?? []) {
-      const id = fit(`ag-${rc.gatewayRoute.replace(/^gw-/, "")}-${c.as}-${factIdPart(c.value)}`);
+      const id = fit2(`ag-${rc.gatewayRoute.replace(/^gw-/, "")}-${c.as}-${factIdPart(c.value)}`);
       put({
         kind: "AccessGrant",
         schemaVersion: 2,
@@ -6387,7 +6382,7 @@ function callerRecords(result, repos, join18, o = {}) {
   }
   return [...out.values()].sort((a, b) => a.kind === b.kind ? cmp4(a.id, b.id) : cmp4(a.kind, b.kind));
 }
-var fit = (id) => id.length <= 120 ? id : id.slice(0, 120).replace(/[-.]+$/, "");
+var fit2 = (id) => id.length <= 120 ? id : id.slice(0, 120).replace(/[-.]+$/, "");
 function once2(ev) {
   const seen = /* @__PURE__ */ new Set();
   return ev.filter((e) => {
@@ -6524,7 +6519,7 @@ function termGrantRecords(result, repos, o = {}) {
       side: "gateway",
       by: f.by
     });
-    const id = fit2(`ag-${g.gatewayRoute.replace(/^gw-/, "")}-${factIdPart(f.term)}-${factIdPart(f.value)}`, `${g.gatewayRoute}\0${f.term}\0${f.value}`);
+    const id = fit3(`ag-${g.gatewayRoute.replace(/^gw-/, "")}-${factIdPart(f.term)}-${factIdPart(f.value)}`, `${g.gatewayRoute}\0${f.term}\0${f.value}`);
     out.set(id, {
       kind: "AccessGrant",
       schemaVersion: 2,
@@ -6546,7 +6541,7 @@ function termGrantRecords(result, repos, o = {}) {
   }
   return [...out.values()].sort((a, b) => cmp5(a.id, b.id));
 }
-var fit2 = (id, whole) => id.length <= 120 ? id : `${id.slice(0, 111).replace(/[-.]+$/, "")}-${createHash3("sha256").update(whole).digest("hex").slice(0, 8)}`;
+var fit3 = (id, whole) => id.length <= 120 ? id : `${id.slice(0, 111).replace(/[-.]+$/, "")}-${createHash3("sha256").update(whole).digest("hex").slice(0, 8)}`;
 var ownerTermFlag = (term, value) => `term:${term}=${value}`;
 
 // packages/core/dist/facts-deps.js
@@ -8539,6 +8534,7 @@ function shuffled(list, seed) {
   }
   return out;
 }
+var seededShuffle = shuffled;
 function drawAudit(o) {
   return [
     ...shuffled(o.facts, `${o.seed}:facts`).slice(0, o.size),
@@ -8656,6 +8652,330 @@ function sampleConfirmed(audit, facts) {
   return new Set((audit?.items ?? []).filter((i) => i.kind === "fact" && i.answer === "right" && i.fact && auditItemHolds(i, byId)).map((i) => i.fact));
 }
 
+// packages/core/dist/canary.js
+var import_yaml10 = __toESM(require_dist(), 1);
+var canaryReportsRelOf = (root) => isAdopted(root) ? ".atticus/reports/canaries" : "reports/canaries";
+var WINDOWS_DEVICE = /^(?:con|prn|aux|nul|com[0-9]|lpt[0-9])(?:\.|$)/i;
+var isCanaryRepoName = (repo) => /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(repo) && !repo.includes("..") && !WINDOWS_DEVICE.test(repo);
+var CANARY_READS_DIR = "atticus-reads";
+var isCanaryMetarepoId = (id) => /^[0-9a-f]{8}$/.test(id);
+var canaryRunPrefix = (repo, id) => `${repo}-${id}-`;
+var isCanaryRunName = (name, repo, id) => isCanaryRepoName(repo) && isCanaryMetarepoId(id) && name.startsWith(canaryRunPrefix(repo, id)) && /^[A-Za-z0-9]{6}$/.test(name.slice(canaryRunPrefix(repo, id).length));
+function canaryRunOf(name) {
+  const m = /^(.+)-([0-9a-f]{8})-[A-Za-z0-9]{6}$/.exec(name);
+  return m && isCanaryRunName(name, m[1], m[2]) ? { repo: m[1], id: m[2] } : void 0;
+}
+var CANARY_WHATS = ["entry", "call", "topic-in", "topic-out", "config"];
+var CanaryPlanted = external_exports.strictObject({
+  /** `plant:<n>`, in the order planted. */
+  id: external_exports.string().min(1),
+  /** The fact kind a reader should write for it. */
+  kind: external_exports.enum(["entry", "call", "config"]),
+  what: external_exports.enum(CANARY_WHATS),
+  /** The template's stack, as `@maycombhq/verify` names it. */
+  stack: external_exports.string().min(1),
+  /** Where it was planted, repo-relative, and the line that holds it. */
+  file: external_exports.string().min(1),
+  line: external_exports.number().int().positive(),
+  /** What it says, in one line (synthetic: no code of the repo). */
+  claim: external_exports.string().min(1),
+  /**
+   * Its own words, folded (`foldCanary`): a fact of its kind whose claim holds them is about it.
+   * Drawn so that no fact of the repo holds them.
+   */
+  needle: external_exports.string().min(1)
+});
+var CanaryRemoved = external_exports.strictObject({
+  /** `remove:<fact id>`. */
+  id: external_exports.string().min(1),
+  /** The verified fact whose cited line was commented out. */
+  fact: external_exports.string().min(1),
+  kind: external_exports.string().min(1),
+  file: external_exports.string().min(1),
+  line: external_exports.number().int().positive(),
+  /** The fact's claim, as the facts already state it. */
+  claim: external_exports.string().min(1),
+  /** The fact's cited value: a fact of the kind citing that very line with it is the removed one. */
+  value: external_exports.string().min(1),
+  /**
+   * What the fact claims (`canaryNeedleOf`): an entry's or call's method and path with its
+   * parameters left out (`get /ledger-v1-transfers`), a config key exactly, folded. A fact of the
+   * kind with the same needle claims the removed one.
+   */
+  needle: external_exports.string().min(1),
+  how: external_exports.literal("commented")
+});
+var CanarySkipped = external_exports.strictObject({
+  stack: external_exports.string().min(1),
+  what: external_exports.enum(CANARY_WHATS),
+  reason: external_exports.string().min(1)
+});
+var CanaryKey = external_exports.strictObject({
+  schema: external_exports.literal(1),
+  repo: external_exports.string().refine(isCanaryRepoName, "not a repo name"),
+  seed: external_exports.string().min(1),
+  commit: external_exports.string().optional(),
+  /** The run folder's base name: the copy (`<repo>/`), `prompt.md` and `facts.jsonl` are in it. */
+  run: external_exports.string().min(1),
+  /**
+   * The real path of the `atticus-reads` folder the run folder is in (third review of ADR 0196),
+   * so a temporary folder set otherwise later still finds it; checked again (named so, a real
+   * folder by its real path, this user's, closed to others) before it is used. A key planted
+   * before has none: its run is in the temporary folder's.
+   */
+  reads: external_exports.string().min(1).optional(),
+  stacks: external_exports.array(external_exports.string()),
+  planted: external_exports.array(CanaryPlanted),
+  removed: external_exports.array(CanaryRemoved),
+  skipped: external_exports.array(CanarySkipped).default([]),
+  at: external_exports.string()
+}).refine((k) => canaryRunOf(k.run)?.repo === k.repo, {
+  message: "run is not this repo's run folder name",
+  path: ["run"]
+});
+var CanaryRate = external_exports.strictObject({
+  k: external_exports.number().int().nonnegative(),
+  n: external_exports.number().int().nonnegative(),
+  rate: external_exports.number().nullable(),
+  low: external_exports.number().nullable(),
+  high: external_exports.number().nullable()
+});
+var CanaryReport = external_exports.strictObject({
+  schema: external_exports.literal(1),
+  repo: external_exports.string().min(1),
+  commit: external_exports.string().optional(),
+  /** The seed it was planted by: drawn at random unless one was given, so no read can guess it. */
+  seed: external_exports.string().min(1),
+  /** When it was scored, and who scored it. */
+  at: external_exports.string(),
+  by: external_exports.string().min(1),
+  stacks: external_exports.array(external_exports.string()),
+  /** The facts the read wrote, those the verifier kept and rejected, and lines that didn't read. */
+  read: external_exports.strictObject({
+    facts: external_exports.number().int().nonnegative(),
+    kept: external_exports.number().int().nonnegative(),
+    rejected: external_exports.number().int().nonnegative(),
+    unread: external_exports.number().int().nonnegative().default(0)
+  }),
+  /**
+   * Each planted item by an opaque id, what it stood for, its stack and how the read did: never
+   * its words, file or line (review of ADR 0196), so a committed report teaches no read what a
+   * canary plants.
+   */
+  planted: external_exports.array(CanaryPlanted.pick({ id: true, kind: true, what: true, stack: true }).extend({
+    /** found: a kept fact; rejected: only a fact the verifier refused; missed: none. */
+    result: external_exports.enum(["found", "rejected", "missed"])
+  })),
+  /** The items the templates have that this repo couldn't serve, so weren't planted. */
+  skipped: external_exports.array(CanarySkipped).default([]),
+  removed: external_exports.array(CanaryRemoved.omit({ needle: true }).extend({
+    /**
+     * absent: no fact claims it; kept: a kept fact cites its line or one beside it, by its cite
+     * or a part (silent); rejected: one did, refused; elsewhere: a fact names its path or key
+     * but cites neither its line nor one beside it, so may be about another line (in no rate).
+     */
+    result: external_exports.enum(["absent", "kept", "rejected", "elsewhere"]),
+    by: external_exports.string().optional()
+  })),
+  /** Planted found by a kept fact, of planted. */
+  recall: CanaryRate,
+  /** Removed the read still claimed at its line, kept by the verifier or not: the reader's rate. */
+  fabrication: CanaryRate,
+  /** Removed still claimed at its line by a fact the verifier kept: backed, and wrong (silent). */
+  passed: CanaryRate
+});
+function parseCanaryReport(text4) {
+  let raw;
+  try {
+    raw = (0, import_yaml10.parse)(text4);
+  } catch (e) {
+    return { ok: false, issues: [`not YAML: ${e.message.split("\n")[0]}`] };
+  }
+  const r = CanaryReport.safeParse(raw);
+  if (!r.success)
+    return {
+      ok: false,
+      issues: r.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`)
+    };
+  return { ok: true, report: r.data };
+}
+var serializeCanaryReport = (r) => (0, import_yaml10.stringify)(CanaryReport.parse(r), { lineWidth: 0 });
+var foldCanary = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+function canaryClaimText(f) {
+  const x = f;
+  return ["path", "key", "name", "topic", "source", "base"].map((k) => typeof x[k] === "string" ? x[k] : "").concat(f.cite.value).map(foldCanary).filter(Boolean).join(" ");
+}
+var pathKey = (p2) => foldCanary(p2.replace(/\{[^}]*\}|:[A-Za-z_]\w*/g, "-param-"));
+function canaryNeedleOf(f) {
+  const x = f;
+  if ((f.kind === "entry" || f.kind === "call") && typeof x.path === "string" && pathKey(x.path))
+    return withMethod(x.method, pathKey(x.path));
+  if (f.kind === "config" && typeof x.key === "string" && foldCanary(x.key))
+    return foldCanary(x.key);
+  return foldCanary(f.cite.value) || f.cite.value;
+}
+var withMethod = (method, path) => typeof method === "string" && foldCanary(method) ? `${foldCanary(method)} ${path}` : path;
+var anyMethod = (m) => m === void 0 || m === "any" || m === "all";
+function sameNeedle(a, b) {
+  const [am, ap] = a.includes(" ") ? a.split(" ") : [void 0, a];
+  const [bm, bp] = b.includes(" ") ? b.split(" ") : [void 0, b];
+  return ap === bp && (anyMethod(am) || anyMethod(bm) || am === bm);
+}
+var plantedBy = (p2, f) => f.kind === p2.kind && canaryClaimText(f).includes(p2.needle);
+var citesNear = (f, file, line) => [f.cite, ...f.cite.with ?? []].some((c) => c.file === file && Math.abs(c.line - line) <= 1);
+function removedMatch(r, f) {
+  if (f.kind !== r.kind)
+    return void 0;
+  const same = sameNeedle(canaryNeedleOf(f), r.needle);
+  const near = citesNear(f, r.file, r.line);
+  if (near && same)
+    return "near";
+  const v = foldCanary(r.value);
+  if (near && v && ([f.cite, ...f.cite.with ?? []].some((c) => c.file === r.file && c.line === r.line && foldCanary(c.value) === v) || (f.kind === "entry" || f.kind === "call") && /^\//.test(r.value.trim()) && sameNeedle(canaryNeedleOf(f), withMethod(r.needle.includes(" ") ? r.needle.split(" ")[0] : void 0, pathKey(r.value)))))
+    return "value";
+  return same ? "elsewhere" : void 0;
+}
+function removedBy(r, f) {
+  const m = removedMatch(r, f);
+  return m === "value" ? "near" : m;
+}
+function canaryRate(k, n) {
+  const ci = wilson(k, n);
+  return {
+    k,
+    n,
+    rate: n ? Math.round(k / n * 1e3) / 1e3 : null,
+    low: ci?.low ?? null,
+    high: ci?.high ?? null
+  };
+}
+function scoreCanary(key3, read, o) {
+  const taken = /* @__PURE__ */ new Set();
+  const first = (list, ok) => {
+    const f = list.find((x) => !taken.has(x) && ok(x));
+    if (f)
+      taken.add(f);
+    return f;
+  };
+  const planted = key3.planted.map((p2) => {
+    const kept = first(read.kept, (f) => plantedBy(p2, f));
+    const refused = kept ? void 0 : first(read.rejected, (f) => plantedBy(p2, f));
+    return {
+      id: p2.id,
+      kind: p2.kind,
+      what: p2.what,
+      stack: p2.stack,
+      result: kept ? "found" : refused ? "rejected" : "missed"
+    };
+  });
+  const got = /* @__PURE__ */ new Map();
+  const passes = [
+    [read.kept, "near", "kept"],
+    [read.rejected, "near", "rejected"],
+    [read.kept, "value", "kept"],
+    [read.rejected, "value", "rejected"],
+    [[...read.kept, ...read.rejected], "elsewhere", "elsewhere"]
+  ];
+  for (const [list, m, result] of passes)
+    for (const r of key3.removed) {
+      if (got.has(r.id))
+        continue;
+      const f = first(list, (x) => removedMatch(r, x) === m);
+      if (f)
+        got.set(r.id, { result, by: f });
+    }
+  const removed = key3.removed.map((r) => {
+    const g = got.get(r.id);
+    return {
+      ...(({ needle: _n, ...rest }) => rest)(r),
+      result: g?.result ?? "absent",
+      ...g ? { by: g.by.id } : {}
+    };
+  });
+  const counted = removed.filter((r) => r.result !== "elsewhere");
+  return {
+    schema: 1,
+    repo: key3.repo,
+    ...key3.commit ? { commit: key3.commit } : {},
+    seed: key3.seed,
+    at: o.at,
+    by: o.by,
+    stacks: [...key3.stacks],
+    read: {
+      facts: read.kept.length + read.rejected.length,
+      kept: read.kept.length,
+      rejected: read.rejected.length,
+      unread: read.unread ?? 0
+    },
+    planted,
+    skipped: [...key3.skipped ?? []],
+    removed,
+    recall: canaryRate(planted.filter((p2) => p2.result === "found").length, planted.length),
+    fabrication: canaryRate(counted.filter((r) => r.result === "kept" || r.result === "rejected").length, counted.length),
+    passed: canaryRate(counted.filter((r) => r.result === "kept").length, counted.length)
+  };
+}
+var GUESSED = /* @__PURE__ */ new Set([
+  ...JOIN_GUESS_FLAGS,
+  JOINED_BY_PATH_OVERLAP,
+  JOINED_BY_AI
+]);
+var GUESSED_JOINS = { test: (how) => GUESSED.has(how) };
+var answered = (t) => t.right + t.wrong;
+function canaryCovers(reports) {
+  const by = /* @__PURE__ */ new Map();
+  for (const r of reports)
+    for (const p2 of r.planted)
+      by.set(p2.stack, (by.get(p2.stack) ?? /* @__PURE__ */ new Set()).add(p2.what));
+  return [...by.keys()].sort().map((stack) => ({ stack, what: CANARY_WHATS.filter((w) => by.get(stack).has(w)) }));
+}
+function silentErrorRate(audit, canaries) {
+  let wrong = 0;
+  let backed = 0;
+  if (audit) {
+    const p2 = audit.precision;
+    const links = Object.entries(p2.byHow).filter(([how]) => !GUESSED_JOINS.test(how));
+    wrong += p2.facts.wrong + links.reduce((n, [, t]) => n + t.wrong, 0);
+    backed += answered(p2.facts) + links.reduce((n, [, t]) => n + answered(t), 0);
+  }
+  let found = 0;
+  let planted = 0;
+  let kept = 0;
+  let claimed = 0;
+  let removed = 0;
+  let caught = 0;
+  let elsewhere = 0;
+  for (const c of canaries) {
+    found += c.recall.k;
+    planted += c.recall.n;
+    kept += c.passed.k;
+    claimed += c.fabrication.k;
+    removed += c.passed.n;
+    caught += c.removed.filter((r) => r.result === "rejected").length;
+    elsewhere += c.removed.filter((r) => r.result === "elsewhere").length;
+  }
+  return {
+    misread: canaryRate(wrong, backed),
+    passed: canaryRate(kept, removed),
+    recall: canaryRate(found, planted),
+    fabrication: canaryRate(claimed, removed),
+    caught,
+    elsewhere,
+    repos: { audited: audit?.repos ?? 0, canaries: canaries.length },
+    covers: canaryCovers(canaries)
+  };
+}
+function latestCanaries(reports) {
+  const by = /* @__PURE__ */ new Map();
+  for (const r of reports) {
+    const had = by.get(r.repo);
+    if (!had || had.at < r.at)
+      by.set(r.repo, r);
+  }
+  return [...by.values()].sort((a, b) => a.repo < b.repo ? -1 : a.repo > b.repo ? 1 : 0);
+}
+var isWindowsDeviceName = (name) => WINDOWS_DEVICE.test(name);
+
 // packages/core/dist/stack-helpers.js
 var STACK_HELPERS = [
   "framework-models",
@@ -9086,6 +9406,7 @@ __export(api_exports, {
   AnsweredQuestion: () => AnsweredQuestion,
   ArchiveRequest: () => ArchiveRequest,
   ArtifactContent: () => ArtifactContent,
+  ArtifactFiles: () => ArtifactFiles,
   ArtifactStatus: () => ArtifactStatus,
   AttachFileRequest: () => AttachFileRequest,
   AttachPastChangeRequest: () => AttachPastChangeRequest,
@@ -9099,12 +9420,31 @@ __export(api_exports, {
   BaselineRequest: () => BaselineRequest,
   BoxCorrections: () => BoxCorrections,
   BranchCompare: () => BranchCompare,
+  BuildHandEdit: () => BuildHandEdit,
+  BuildRefusalView: () => BuildRefusalView,
+  BuildRemoval: () => BuildRemoval,
+  BuildRemovalInput: () => BuildRemovalInput,
+  BuildReportFile: () => BuildReportFile,
+  BuildReportView: () => BuildReportView,
+  BuildSourceView: () => BuildSourceView,
   CHANGE_OWNER_ROLES: () => CHANGE_OWNER_ROLES,
   CONFIRMED_WRITES: () => CONFIRMED_WRITES,
+  CanaryRateView: () => CanaryRateView,
+  CanaryRepoView: () => CanaryRepoView,
+  CanaryView: () => CanaryView,
   CandidateApiView: () => CandidateApiView,
   CandidateCallView: () => CandidateCallView,
   CandidateSuggestion: () => CandidateSuggestion,
+  CatalogBuildRequest: () => CatalogBuildRequest,
+  CatalogBuildView: () => CatalogBuildView,
+  CatalogEditsRequest: () => CatalogEditsRequest,
+  CatalogPruneRequest: () => CatalogPruneRequest,
+  CatalogPruneView: () => CatalogPruneView,
   CatalogRecord: () => CatalogRecord2,
+  CatalogUndoRequest: () => CatalogUndoRequest,
+  CatalogUndoView: () => CatalogUndoView,
+  CatalogUpgradeRequest: () => CatalogUpgradeRequest,
+  CatalogUpgradeView: () => CatalogUpgradeView,
   ChangeCockpit: () => ChangeCockpit,
   ChangeConformance: () => ChangeConformance,
   ChangeDetail: () => ChangeDetail,
@@ -9117,6 +9457,7 @@ __export(api_exports, {
   ChangeMap: () => ChangeMap,
   ChangeNeedsView: () => ChangeNeedsView,
   ChangeOwnersRequest: () => ChangeOwnersRequest,
+  ChangeProblems: () => ChangeProblems,
   ChangePrototype: () => ChangePrototype,
   ChangePrototypeList: () => ChangePrototypeList,
   ChangeState: () => ChangeState,
@@ -9158,6 +9499,14 @@ __export(api_exports, {
   CorrectionView: () => CorrectionView,
   Coverage: () => Coverage,
   CreateMetarepoRequest: () => CreateMetarepoRequest,
+  CrossCheckCite: () => CrossCheckCite,
+  CrossCheckCounts: () => CrossCheckCounts,
+  CrossCheckDismissRequest: () => CrossCheckDismissRequest,
+  CrossCheckItem: () => CrossCheckItem,
+  CrossCheckPromoteRequest: () => CrossCheckPromoteRequest,
+  CrossCheckPromoteView: () => CrossCheckPromoteView,
+  CrossCheckSide: () => CrossCheckSide,
+  CrossCheckView: () => CrossCheckView,
   DEFAULT_PORT: () => DEFAULT_PORT,
   DRAFT_PAGES: () => DRAFT_PAGES,
   DecideStateView: () => DecideStateView,
@@ -9181,6 +9530,7 @@ __export(api_exports, {
   FactCiteView: () => FactCiteView,
   FactCorrectionRequest: () => FactCorrectionRequest,
   FactCorrectionResult: () => FactCorrectionResult,
+  FactsApplyRequest: () => FactsApplyRequest,
   FileChangeResult: () => FileChangeResult,
   FileEditView: () => FileEditView,
   FillRequestFieldsRequest: () => FillRequestFieldsRequest,
@@ -9308,6 +9658,8 @@ __export(api_exports, {
   RepoAbout: () => RepoAbout,
   RepoBranchesList: () => RepoBranchesList,
   RepoBranchesView: () => RepoBranchesView,
+  RepoCrossCheck: () => RepoCrossCheck,
+  RepoFactsBatch: () => RepoFactsBatch,
   RepoFactsView: () => RepoFactsView,
   RepoOwnerView: () => RepoOwnerView,
   RepoTypeDetectView: () => RepoTypeDetectView,
@@ -9396,6 +9748,7 @@ __export(api_exports, {
   TrustView: () => TrustView,
   UndeclareLinkRequest: () => UndeclareLinkRequest,
   UndoBatchResult: () => UndoBatchResult,
+  UndoCopyView: () => UndoCopyView,
   UndoCorrectionRequest: () => UndoCorrectionRequest,
   UpgradeView: () => UpgradeView,
   UpstreamRequest: () => UpstreamRequest,
@@ -9410,7 +9763,7 @@ __export(api_exports, {
   WorkItemSyncResult: () => WorkItemSyncResult,
   openApiDocument: () => openApiDocument
 });
-var API_VERSION = "3.11.0";
+var API_VERSION = "3.12.0";
 var DEFAULT_PORT = 4321;
 var NextStep = external_exports.object({ step: external_exports.literal("sync"), repos: external_exports.array(external_exports.string()) });
 var Problem = external_exports.object({
@@ -9428,7 +9781,12 @@ var Problem = external_exports.object({
    * 3.11.0 (beta.25): for a 500 that wrote only part of what was asked, the files left written
    * (each in the metarepo, or in `repo`'s working copy), so the app reads them again.
    */
-  written: external_exports.array(external_exports.object({ repo: external_exports.string().optional(), file: external_exports.string() })).optional()
+  written: external_exports.array(external_exports.object({ repo: external_exports.string().optional(), file: external_exports.string() })).optional(),
+  /**
+   * 3.12.0 (beta.27): which refusal it is, where one status has more than one the app tells
+   * apart (an owner question's send: 409 `being-sent` or `already-sent`).
+   */
+  code: external_exports.string().optional()
 });
 var Kind = external_exports.enum(RECORD_KINDS);
 var CatalogRecord2 = external_exports.union(RECORD_KINDS.map((k) => RECORD_SCHEMAS[k]));
@@ -9717,7 +10075,9 @@ var Job = external_exports.object({
   finishedAt: external_exports.string().optional(),
   errors: external_exports.array(external_exports.string()),
   /** Kind-specific outcome, e.g. scan diff counts. */
-  result: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
+  result: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
+  /** 3.12.0: Stop was asked and the job is ending (it stops at its next safe point). */
+  stopping: external_exports.boolean().optional()
 });
 var JobAccepted = external_exports.object({ jobId: external_exports.string() });
 var ArtifactStatus = external_exports.object({
@@ -9791,6 +10151,15 @@ var ArtifactContent = external_exports.object({
   /** sha256 of the content; send it back on save to detect concurrent edits. */
   sha256: external_exports.string()
 });
+var ArtifactFiles = external_exports.object({
+  /** By the file asked for (`file`), in the order asked. */
+  files: external_exports.array(ArtifactContent.extend({ file: external_exports.string() })),
+  /**
+   * Beta.27 re-review: by file, the problem its one-file read would have answered (a story
+   * deleted since the page listed it): the call answers the others, never fails whole.
+   */
+  problems: external_exports.record(external_exports.string(), external_exports.object({ status: external_exports.number().int(), title: external_exports.string(), detail: external_exports.string().optional() })).optional()
+});
 var Task = external_exports.object({
   id: external_exports.string(),
   repo: RecordId,
@@ -10241,6 +10610,293 @@ var AnswerBoxResult = external_exports.object({
    */
   stamp: external_exports.string().optional()
 });
+var CrossCheckCite = external_exports.object({
+  file: external_exports.string(),
+  line: external_exports.number().int().optional(),
+  commit: external_exports.string().optional()
+});
+var CrossCheckSide = external_exports.object({
+  id: external_exports.string(),
+  value: external_exports.unknown(),
+  cites: external_exports.array(CrossCheckCite)
+});
+var CrossCheckItem = external_exports.object({
+  key: external_exports.string(),
+  kind: external_exports.string(),
+  state: external_exports.enum(["agree", "readers-only", "facts-only", "disagree"]),
+  readers: CrossCheckSide.optional(),
+  facts: CrossCheckSide.optional(),
+  fields: external_exports.array(external_exports.object({ field: external_exports.string(), readers: external_exports.unknown(), facts: external_exports.unknown() })).optional(),
+  dismissed: external_exports.literal(true).optional(),
+  /**
+   * The SHA-256 of the readers' value as shown (its JSON), for a readers-only or disagreeing
+   * item: a dismissal sends it back, so it dismisses the value the page showed (409 when the
+   * readers say another now). Only GET /api/crosscheck/{repo} says it.
+   */
+  readersSha256: external_exports.string().optional(),
+  /**
+   * A readers-only item a person promoted to assert: the `by: person` fact in the repo's facts
+   * file and where it stands: `written` (not verified yet), `verified` (the verifier found it on
+   * its line; `atticus verify <repo> --write` puts it in the catalog) or `rejected` (with why, in
+   * facts/<repo>.rejected.jsonl). Only GET /api/crosscheck/{repo} says it.
+   */
+  promoted: external_exports.object({
+    fact: external_exports.string(),
+    state: external_exports.enum(["written", "verified", "rejected"]),
+    file: external_exports.string(),
+    line: external_exports.number().int(),
+    message: external_exports.string().optional()
+  }).optional()
+});
+var CrossCheckCounts = external_exports.object({
+  agree: external_exports.number().int(),
+  readersOnly: external_exports.number().int(),
+  factsOnly: external_exports.number().int(),
+  disagree: external_exports.number().int(),
+  dismissed: external_exports.number().int()
+});
+var RepoCrossCheck = external_exports.object({
+  repo: external_exports.string(),
+  state: external_exports.enum(["compared", "no-facts", "no-readers", "legacy", "unusable"]),
+  readersCommit: external_exports.string().optional(),
+  factsCommit: external_exports.string().optional(),
+  readersSlot: external_exports.string().optional(),
+  factsSlot: external_exports.string().optional(),
+  dismissals: external_exports.string(),
+  counts: CrossCheckCounts,
+  /** Every item but those that agree (GET /api/crosscheck lists none: each repo's own call does). */
+  items: external_exports.array(CrossCheckItem),
+  problem: external_exports.string().optional(),
+  /** The base clone's commit, when it is there: a slot behind it is shown as read at its commit. */
+  head: external_exports.string().optional()
+});
+var CrossCheckView = external_exports.object({
+  repos: external_exports.array(RepoCrossCheck),
+  problems: external_exports.array(external_exports.object({ file: external_exports.string(), message: external_exports.string() }))
+});
+var CrossCheckDismissRequest = external_exports.strictObject({
+  key: external_exports.string().trim().min(1).max(500),
+  undo: external_exports.literal(true).optional(),
+  /** The item's `readersSha256` as the page showed it: required to dismiss (not to list again). */
+  sha256: external_exports.string().regex(/^[0-9a-f]{64}$/).optional()
+});
+var CrossCheckPromoteView = external_exports.object({
+  repo: external_exports.string(),
+  key: external_exports.string(),
+  can: external_exports.boolean(),
+  why: external_exports.string().optional(),
+  factsFile: external_exports.string(),
+  fact: external_exports.string().optional(),
+  factKind: external_exports.string().optional(),
+  line: external_exports.string().optional(),
+  sha256: external_exports.string().optional(),
+  cite: external_exports.object({
+    file: external_exports.string(),
+    line: external_exports.number().int(),
+    value: external_exports.string(),
+    text: external_exports.string().optional(),
+    commit: external_exports.string()
+  }).optional(),
+  fromSnapshot: external_exports.boolean().optional(),
+  already: external_exports.boolean().optional()
+});
+var CrossCheckPromoteRequest = external_exports.strictObject({
+  key: external_exports.string().trim().min(1).max(500),
+  sha256: external_exports.string().regex(/^[0-9a-f]{64}$/)
+});
+var BuildRemovalInput = external_exports.object({
+  what: external_exports.enum([
+    "answers",
+    "pairings",
+    "org-pack",
+    "curated",
+    "traffic",
+    "shared",
+    "inputs",
+    "proposals",
+    "federated",
+    "other"
+  ]),
+  path: external_exports.string()
+});
+var BuildRemoval = external_exports.object({
+  path: external_exports.string(),
+  kind: external_exports.string(),
+  id: external_exports.string(),
+  repos: external_exports.array(external_exports.string()),
+  explainedBy: external_exports.array(external_exports.string()),
+  /** What kind of change explains it: a slot, the manifests, archived, curated, an input, the build. */
+  reasons: external_exports.array(external_exports.enum(["slot", "manifest", "archived", "curated", "input", "build"])).optional(),
+  /** The inputs other than a slot that changed and explain it (an answer, say), when any did. */
+  inputs: external_exports.array(BuildRemovalInput).optional()
+});
+var BuildHandEdit = external_exports.object({
+  path: external_exports.string(),
+  how: external_exports.enum(["changed", "added", "deleted"])
+});
+var BuildRefusalView = external_exports.object({
+  reasons: external_exports.array(external_exports.enum([
+    "nothing-read",
+    "empty",
+    "unexplained-removals",
+    "large-removals",
+    "hand-edits",
+    "not-upgraded"
+  ])),
+  message: external_exports.string(),
+  removals: external_exports.array(BuildRemoval).optional(),
+  unexplained: external_exports.array(BuildRemoval).optional(),
+  allowRemovals: external_exports.number().int().optional(),
+  edits: external_exports.array(BuildHandEdit).optional(),
+  discardEdits: external_exports.number().int().optional(),
+  /** A scan that read nothing: each repo it couldn't read in full, and why. */
+  unread: external_exports.array(external_exports.object({ repo: external_exports.string(), why: external_exports.string() })).optional(),
+  /** What goes on in a terminal (the build, the hand edits' curate, or the upgrade). */
+  command: external_exports.string(),
+  /**
+   * The hash of what the lists say (each removal's path, reasons and words; each hand edit's
+   * path and how), as GET /api/build's `pending.plan` hashes them: a confirm of this refusal
+   * sends it back (POST /api/facts/{repo}/apply, POST /api/scan), and a list that changed
+   * meanwhile writes nothing.
+   */
+  plan: external_exports.string().optional()
+});
+var BuildReportFile = external_exports.object({ path: external_exports.string(), kind: external_exports.string(), id: external_exports.string() });
+var BuildReportView = external_exports.object({
+  command: external_exports.string(),
+  at: external_exports.string(),
+  generated: external_exports.string(),
+  outcome: external_exports.enum(["written", "unchanged", "refused", "stopped"]),
+  refused: BuildRefusalView.optional(),
+  stopped: external_exports.string().optional(),
+  run: external_exports.array(external_exports.string()),
+  counts: external_exports.object({
+    records: external_exports.number().int(),
+    added: external_exports.number().int(),
+    changed: external_exports.number().int(),
+    removed: external_exports.number().int(),
+    written: external_exports.number().int(),
+    unchanged: external_exports.number().int()
+  }),
+  added: external_exports.array(BuildReportFile),
+  changed: external_exports.array(BuildReportFile),
+  /** Every removal with why: for a refusal, those it would have made, unexplained ones included. */
+  removed: external_exports.array(BuildRemoval),
+  slots: external_exports.array(external_exports.string()),
+  /** The undo copy a written build took. */
+  undo: external_exports.number().int().optional(),
+  discarded: external_exports.array(BuildHandEdit).optional()
+});
+var BuildSourceView = external_exports.object({
+  repo: external_exports.string(),
+  source: external_exports.enum(["facts", "readers", "legacy", "none"]),
+  commit: external_exports.string().optional(),
+  slot: external_exports.string().optional(),
+  problem: external_exports.string().optional()
+});
+var CatalogBuildView = external_exports.object({
+  sources: external_exports.array(BuildSourceView),
+  pending: external_exports.object({
+    upToDate: external_exports.boolean(),
+    removals: external_exports.array(BuildRemoval),
+    refused: BuildRefusalView.optional(),
+    /**
+     * A hash of what the lists say (each removal's path, reasons and words; each hand edit's path
+     * and how), which a confirm of them sends back (POST /api/build, POST
+     * /api/build/edits/curate): a list that changed meanwhile is a 409 and nothing runs.
+     */
+    plan: external_exports.string()
+  }),
+  last: BuildReportView.optional(),
+  upgrade: external_exports.literal(true).optional(),
+  orphaned: external_exports.array(external_exports.object({
+    repo: external_exports.string(),
+    why: external_exports.enum(["not-listed", "archived"]),
+    files: external_exports.array(external_exports.string())
+  })),
+  problems: external_exports.array(external_exports.object({ file: external_exports.string(), message: external_exports.string() }))
+});
+var CatalogBuildRequest = external_exports.strictObject({
+  allowRemovals: external_exports.number().int().min(0).max(1e6).optional(),
+  discardEdits: external_exports.number().int().min(0).max(1e6).optional(),
+  /** GET /api/build's `pending.plan`: required with a count (the list it confirms). */
+  plan: external_exports.string().regex(/^[0-9a-f]{64}$/).optional()
+});
+var CatalogEditsRequest = external_exports.strictObject({
+  count: external_exports.number().int().min(1).max(1e6),
+  plan: external_exports.string().regex(/^[0-9a-f]{64}$/)
+});
+var UndoCopyView = external_exports.object({
+  /** 1 is the latest build, up to 5. */
+  n: external_exports.number().int(),
+  command: external_exports.string(),
+  at: external_exports.string(),
+  commit: external_exports.string().nullable(),
+  files: external_exports.number().int()
+});
+var CatalogUndoView = external_exports.object({
+  copies: external_exports.array(UndoCopyView),
+  plan: external_exports.object({
+    n: external_exports.number().int(),
+    takesBack: external_exports.array(external_exports.object({ n: external_exports.number().int(), command: external_exports.string() })),
+    files: external_exports.array(external_exports.object({ path: external_exports.string(), to: external_exports.enum(["file", "absent"]) })),
+    /** A hash of the undo copies it takes back (their folder numbers) and each file, sent back by the confirm. */
+    hash: external_exports.string()
+  }).optional(),
+  /** Why there is nothing to undo, in words. */
+  problem: external_exports.string().optional()
+});
+var CatalogUndoRequest = external_exports.strictObject({
+  n: external_exports.number().int().min(1).max(5),
+  files: external_exports.number().int().min(0),
+  /** GET /api/build/undo's `plan.hash` for that `n`. */
+  plan: external_exports.string().regex(/^[0-9a-f]{64}$/)
+});
+var CatalogPruneView = external_exports.object({
+  files: external_exports.array(external_exports.object({ path: external_exports.string(), why: external_exports.string() })),
+  /** A hash of the files listed and why, sent back by the confirm. */
+  plan: external_exports.string()
+});
+var CatalogPruneRequest = external_exports.strictObject({
+  count: external_exports.number().int().min(1),
+  /** GET /api/build/prune's `plan`. */
+  plan: external_exports.string().regex(/^[0-9a-f]{64}$/)
+});
+var CatalogUpgradeView = external_exports.object({
+  pending: external_exports.boolean(),
+  records: external_exports.number().int(),
+  write: external_exports.array(external_exports.object({ path: external_exports.string(), records: external_exports.number().int(), repo: external_exports.string().optional() })),
+  writes: external_exports.array(external_exports.object({
+    path: external_exports.string(),
+    what: external_exports.enum(["readers-slot", "legacy-joins", "copy", "build-manifest"]),
+    bytes: external_exports.number().int(),
+    sha256: external_exports.string()
+  })),
+  copy: external_exports.object({ dir: external_exports.string(), files: external_exports.number().int() }),
+  firstBuildChanges: external_exports.array(external_exports.string()),
+  /** The record files the first build gives differently, each with how (relative to catalog/generated). */
+  changes: external_exports.array(external_exports.object({ path: external_exports.string(), how: external_exports.enum(["added", "changed", "removed"]) })),
+  /**
+   * The count of `changes` the confirm accepts (`atticus upgrade --yes --accept-changes <n>`);
+   * 0 when the first build changes nothing and plain `--yes` applies it.
+   */
+  acceptChanges: external_exports.number().int(),
+  applies: external_exports.boolean(),
+  run: external_exports.string(),
+  verifiable: external_exports.array(external_exports.string()),
+  plan: external_exports.string(),
+  /**
+   * The upgrade's other steps that wait (GET /api/upgrade's `pending`). They may change an input
+   * the slots record, so this step is confirmed only once they have run (Run the upgrade, on Home or on Catalog builds):
+   * the confirm is refused (409) while any waits.
+   */
+  others: external_exports.array(external_exports.object({ id: external_exports.string(), summary: external_exports.string() }))
+});
+var CatalogUpgradeRequest = external_exports.strictObject({
+  count: external_exports.number().int().min(1),
+  plan: external_exports.string().regex(/^[0-9a-f]{64}$/),
+  acceptChanges: external_exports.number().int().min(1).optional()
+});
 var FreshState = external_exports.enum([
   /** Facts cite files that changed, or source files changed: read again. */
   "stale",
@@ -10286,6 +10942,67 @@ var FreshView = external_exports.object({
   repos: external_exports.array(FreshRepo),
   problems: external_exports.array(external_exports.object({ file: external_exports.string(), message: external_exports.string() }))
 });
+var CanaryRateView = external_exports.object({
+  k: external_exports.number().int(),
+  n: external_exports.number().int(),
+  rate: external_exports.number().nullable(),
+  low: external_exports.number().nullable(),
+  high: external_exports.number().nullable()
+});
+var CanaryRepoView = external_exports.object({
+  repo: external_exports.string(),
+  /** The report's file, relative to the metarepo. */
+  path: external_exports.string(),
+  at: external_exports.string(),
+  by: external_exports.string(),
+  seed: external_exports.string(),
+  commit: external_exports.string().optional(),
+  stacks: external_exports.array(external_exports.string()),
+  /** Each stack planted in, with the items planted there (`entry`, `call`, `topic-in`...). */
+  covers: external_exports.array(external_exports.object({ stack: external_exports.string(), what: external_exports.array(external_exports.string()) })),
+  /** The items the templates have that the repo couldn't serve, so weren't planted, and why. */
+  skipped: external_exports.array(external_exports.object({ stack: external_exports.string(), what: external_exports.string(), reason: external_exports.string() })),
+  /** Lines of the read's facts file that didn't read as facts, left out of the score. */
+  unread: external_exports.number().int(),
+  planted: external_exports.object({
+    n: external_exports.number().int(),
+    found: external_exports.number().int(),
+    rejected: external_exports.number().int(),
+    missed: external_exports.number().int()
+  }),
+  removed: external_exports.object({
+    n: external_exports.number().int(),
+    absent: external_exports.number().int(),
+    kept: external_exports.number().int(),
+    rejected: external_exports.number().int(),
+    /** Named by a fact cited neither on the line nor beside it: in neither rate's count. */
+    elsewhere: external_exports.number().int()
+  }),
+  recall: CanaryRateView,
+  /** Removed lines the read still claimed at their place, kept by the verifier or not. */
+  fabrication: CanaryRateView,
+  /** Removed lines claimed by a fact the verifier kept: graded as backed, and wrong. */
+  passed: CanaryRateView
+});
+var CanaryView = external_exports.object({
+  reportsDir: external_exports.string(),
+  latest: external_exports.array(CanaryRepoView),
+  pending: external_exports.array(external_exports.object({ repo: external_exports.string(), at: external_exports.string(), seed: external_exports.string() })),
+  rates: external_exports.object({
+    /** The audit misread rate: backed claims of the sample answered wrong, of those answered. */
+    misread: CanaryRateView,
+    /** The canary pass-through rate: lines taken out, claimed and kept, of those taken out. */
+    passed: CanaryRateView,
+    recall: CanaryRateView,
+    fabrication: CanaryRateView,
+    caught: external_exports.number().int(),
+    elsewhere: external_exports.number().int(),
+    repos: external_exports.object({ audited: external_exports.number().int(), canaries: external_exports.number().int() }),
+    covers: external_exports.array(external_exports.object({ stack: external_exports.string(), what: external_exports.array(external_exports.string()) }))
+  }),
+  commands: external_exports.object({ plant: external_exports.string(), score: external_exports.string(), report: external_exports.string() }),
+  problems: external_exports.array(external_exports.object({ file: external_exports.string(), message: external_exports.string() }))
+});
 var ChangeKnowledgeItem = external_exports.object({
   id: external_exports.string(),
   kind: external_exports.string(),
@@ -10425,6 +11142,12 @@ var RepoFactsView = external_exports.object({
   verify: external_exports.string(),
   problems: external_exports.array(external_exports.object({ file: external_exports.string(), message: external_exports.string() }))
 });
+var RepoFactsBatch = external_exports.object({
+  /** By repo, as asked: what GET /api/facts/{repo} gives. */
+  facts: external_exports.record(external_exports.string(), RepoFactsView),
+  /** By repo: the problem GET /api/facts/{repo} would have answered (a name refused, none). */
+  problems: external_exports.record(external_exports.string(), external_exports.object({ status: external_exports.number().int(), title: external_exports.string(), detail: external_exports.string().optional() }))
+});
 var FactCorrectionRequest = external_exports.strictObject({
   fact: external_exports.string().min(1),
   action: external_exports.enum(["wrong", "edit"]),
@@ -10681,6 +11404,11 @@ var OutsideCallView = external_exports.object({
   interface: external_exports.string().optional(),
   /** The spec operation it reaches (its Endpoint id), when it matches one. */
   operation: external_exports.string().optional(),
+  /**
+   * 3.12.0 (beta.27): every operation it reaches, sorted, when it is more than one: a gateway
+   * route that forwards a wildcard (`/accounts/*`) reaches every operation under it.
+   */
+  operations: external_exports.array(external_exports.string()).optional(),
   /** Through a gateway's forwarding call (the route and the gateway's call), when it is. */
   through: external_exports.object({ repo: external_exports.string(), at: external_exports.string() }).optional(),
   /** 2.44.0 (ADR 0160): the entry of another team's shared map that answers it. */
@@ -10713,6 +11441,11 @@ var OutsideSystemView = external_exports.object({
   ambiguous: external_exports.array(OutsideCallView.extend({ candidates: external_exports.array(external_exports.string()) })),
   /** Open questions about it: naming it, or citing a line one of its calls is on. */
   questions: external_exports.array(external_exports.object({ id: external_exports.string(), repo: external_exports.string(), question: external_exports.string() })),
+  /**
+   * 3.12.0 (beta.27): what in the configuration is at odds with it, in plain words (an alias in
+   * the profile that is a host an estate repo answers on, whose calls go to that repo instead).
+   */
+  notes: external_exports.array(external_exports.string()).optional(),
   /** With no spec: how to add one. */
   addSpec: external_exports.array(external_exports.string()).optional(),
   /**
@@ -10938,10 +11671,23 @@ var StageThreadView = external_exports.object({
   waiting: external_exports.object({ runId: external_exports.string(), prompt: external_exports.string() }).optional(),
   /** The step's words, for POST /api/runs/handoff (the next round's prompt). */
   step: external_exports.array(external_exports.string()),
+  /**
+   * 3.12.0 (beta.27 review): the planning files a person wrote, when the stage never ran and they
+   * stand for its work (state `done`); drafting again replaces them (`step` with --force).
+   */
+  byPerson: external_exports.array(external_exports.string()).optional(),
   /** Whether a reply is taken now, and if not, why. */
   reply: external_exports.object({ open: external_exports.boolean(), why: external_exports.string().optional() }),
   problems: external_exports.array(external_exports.object({ file: external_exports.string(), message: external_exports.string() }))
 });
+var ChangeProblems = external_exports.array(external_exports.object({
+  /** The change's folder name, its id. */
+  id: external_exports.string(),
+  /** Metarepo-relative, with forward slashes. */
+  file: external_exports.string(),
+  line: external_exports.number().int().optional(),
+  message: external_exports.string()
+}));
 var StageThreadPost = external_exports.discriminatedUnion("kind", [
   external_exports.strictObject({ kind: external_exports.literal("reply"), text: external_exports.string().trim().min(1).max(4e3) }),
   external_exports.strictObject({
@@ -11390,6 +12136,13 @@ var Health = external_exports.object({
   apiVersion: external_exports.string(),
   schemaVersion: external_exports.number().int(),
   root: external_exports.string(),
+  /**
+   * 3.12.0 (beta.27 re-review): the root as one key, to tell the metarepo a page started with
+   * from another after a restart: its real path as the file system gives it (links and 8.3
+   * names resolved, the folders' own case), never case-folded but for a Windows drive letter
+   * (upper case). Compare this exactly, never `root`.
+   */
+  rootKey: external_exports.string().optional(),
   openspec: external_exports.string().optional(),
   user: external_exports.string(),
   /** 2.22.0: started with `atticus ui --full`, so the app offers every page, not only the six. */
@@ -11400,6 +12153,11 @@ var Health = external_exports.object({
    */
   metarepo: external_exports.boolean().optional()
 });
+var FactsApplyRequest = external_exports.strictObject({
+  allowRemovals: external_exports.number().int().min(0).max(1e6).optional(),
+  discardEdits: external_exports.number().int().min(0).max(1e6).optional(),
+  plan: external_exports.string().regex(/^[0-9a-f]{64}$/).optional()
+});
 var ScanRequest = external_exports.strictObject({
   repos: external_exports.array(RecordId).optional(),
   /** Ignore the cache and rescan everything. */
@@ -11411,7 +12169,19 @@ var ScanRequest = external_exports.strictObject({
    * which repo answers on an unknown host only for the repos the assistant has read (facts on
    * file); `askAll` asks for every repo, as the command line's `atticus scan` does.
    */
-  askAll: external_exports.boolean().optional()
+  askAll: external_exports.boolean().optional(),
+  /**
+   * 3.12.0 (ADR 0195 point 4): confirms the large removals a refused build listed, with their
+   * count (`--allow-removals`); any other count refuses again.
+   */
+  allowRemovals: external_exports.number().int().min(0).max(1e6).optional(),
+  /** 3.12.0: discards the hand edits a refused build listed, with their count (`--discard-edits`). */
+  discardEdits: external_exports.number().int().min(0).max(1e6).optional(),
+  /**
+   * 3.12.0: the `plan` of the refusal a count confirms (its job's result's `refused.plan`),
+   * required with a count, as Apply's is.
+   */
+  plan: external_exports.string().regex(/^[0-9a-f]{64}$/).optional()
 });
 var RepoBranchesView = external_exports.object({
   id: RecordId,
@@ -11487,7 +12257,13 @@ var ChangeCockpit = external_exports.object({
   work: external_exports.string().optional(),
   stages: external_exports.array(external_exports.object({
     stage: external_exports.enum(["feature", "architecture", "stories"]),
+    /**
+     * The loop's state, or not-started. 3.12.0 (beta.27 review), as the plan gate reads it:
+     * `person` when a person wrote the planning files the stage writes (it never ran; `files`
+     * names them) and `skipped` when the change passed the stage without it running.
+     */
     state: external_exports.string(),
+    files: external_exports.array(external_exports.string()).optional(),
     drafts: external_exports.number().int(),
     rounds: external_exports.number().int(),
     openQuestions: external_exports.number().int()
@@ -11531,7 +12307,12 @@ var ProposeScope = external_exports.enum([
   /** 2.67.0 (UX re-walk): everything the app's work writes, for the one Propose on Home. */
   "work",
   /** 2.67.0 (UX review): the changes' snow.md, after filling a service-desk draft's fields. */
-  "service-desk"
+  "service-desk",
+  /**
+   * 3.12.0 (beta.27 review): exactly the paths `atticus upgrade` changed (kept with its run) and
+   * its stamp, .atticus/metarepo.yaml, for the upgrade panel's Propose; never other pending work.
+   */
+  "upgrade"
 ]);
 var ProposePlanView = external_exports.object({
   scope: ProposeScope,
@@ -11607,6 +12388,20 @@ var OwnerQuestionView = external_exports.object({
   channel: external_exports.string(),
   state: external_exports.enum(["sent", "answered", "overdue"]),
   answer: external_exports.string().optional(),
+  /** 3.12.0 (beta.27 review): the owner's display name (teams.yaml), for a team named there. */
+  ownerName: external_exports.string().optional(),
+  /**
+   * 3.12.0 (beta.27 review): when it was asked or sent (a send is on file in the question's own
+   * record, catalog/curated/ownerquestion/<id>.yaml, for every machine), when that is. A gap's question with no `sentAt` wasn't sent, whatever `state` says (the
+   * record's own state starts at `sent`).
+   */
+  sentAt: external_exports.string().optional(),
+  /**
+   * 3.12.0 (beta.27 review of the fix): its Send made a manual step that is still open (the step
+   * whose approval ref is `owner-ask:<id>`, in the metarepo for every machine): asked, waiting for
+   * a person to send it; the step and when it was made. Marked done, it is a send on record.
+   */
+  asked: external_exports.object({ step: external_exports.string(), at: external_exports.string() }).optional(),
   routeTo: external_exports.string().optional(),
   fill: external_exports.array(external_exports.object({ file: external_exports.string(), field: external_exports.string(), what: external_exports.string() })).optional(),
   records: external_exports.array(external_exports.string()),
@@ -12701,7 +13496,13 @@ var UpgradeView = external_exports.object({
   newer: external_exports.boolean(),
   /** The Atticus that last upgraded it. */
   stamp: external_exports.string().optional(),
-  pending: external_exports.array(external_exports.object({ id: external_exports.string(), summary: external_exports.string(), files: external_exports.array(external_exports.string()) }))
+  pending: external_exports.array(external_exports.object({ id: external_exports.string(), summary: external_exports.string(), files: external_exports.array(external_exports.string()) })),
+  /**
+   * 3.12.0 (beta.27 review): the paths the upgrades run here changed and nobody proposed or
+   * committed yet, besides the stamp. Final round: the panel reads them from the upgrade job's
+   * result, and offers Propose for the stamp alone too.
+   */
+  upgraded: external_exports.array(external_exports.string()).optional()
 });
 var FileEditView = external_exports.object({
   path: external_exports.string(),
@@ -13055,7 +13856,13 @@ var StartCopilotRunRequest = external_exports.object({
   kind: CopilotRunKind,
   repos: external_exports.array(external_exports.string().min(1)).max(500).optional(),
   /** Read the repos whole again (`--force`). */
-  force: external_exports.boolean().optional()
+  force: external_exports.boolean().optional(),
+  /**
+   * 3.12.0 (beta.27): the model's limit in tokens, as the person gives it in the dialog, passed
+   * as --max-tokens. Needed when Atticus doesn't know it (`limit.known` false in
+   * GET /api/copilot-runs/current); kept on this machine to fill the field next time.
+   */
+  maxTokens: external_exports.number().int().min(1e3).max(1e7).optional()
 });
 var CopilotRunState = external_exports.enum(["running", "done", "stopped", "failed"]);
 var CopilotRunTab = external_exports.object({
@@ -13096,6 +13903,19 @@ var CopilotRunView = external_exports.object({
   }),
   /** The last thing said: the error a failed run ended on, or how it ended. */
   message: external_exports.string().optional(),
+  /**
+   * 3.12.0 (beta.27): the repos the run stopped on, each after two Copilot sessions added nothing
+   * to a part: why, and what verify rejected (its code and reason) when it rejected something.
+   */
+  problems: external_exports.array(external_exports.object({
+    repo: external_exports.string(),
+    part: external_exports.number().int().min(1).optional(),
+    total: external_exports.number().int().min(1).optional(),
+    message: external_exports.string(),
+    rejected: external_exports.array(external_exports.object({ code: external_exports.string(), message: external_exports.string() })),
+    /** How many were rejected in all (`rejected` lists the first ones). */
+    rejectedCount: external_exports.number().int().min(0)
+  })).optional(),
   tabs: external_exports.array(CopilotRunTab)
 });
 var CopilotRunCurrent = external_exports.object({
@@ -13104,7 +13924,34 @@ var CopilotRunCurrent = external_exports.object({
   /** Whether runtime.yaml allows copilot-acp here, and if not, why. */
   allowed: external_exports.boolean(),
   why: external_exports.string().optional(),
-  model: external_exports.string().optional()
+  model: external_exports.string().optional(),
+  /**
+   * 3.12.0 (beta.27): the model's limit a run reads at. `known` with `tokens` and where it is set
+   * (runtime.yaml's maxInput, or what atticus probe measured); else the dialog asks for it, filled
+   * with `tokens` when there is one to offer (`last`: the value given for the last run on this
+   * machine; `probe`: a limit atticus probe measured for another assistant).
+   */
+  limit: external_exports.object({
+    known: external_exports.boolean(),
+    tokens: external_exports.number().int().min(1).optional(),
+    from: external_exports.enum(["runtime.yaml", "probe", "last"]).optional()
+  }).optional(),
+  /**
+   * 3.12.0 (beta.27): the /atticus-* assistant files each Copilot session reads, as
+   * `atticus assistant-files --check` says: those missing or out of date (`stale`), which the run
+   * writes first, and those edited by hand or not Atticus's (`edited`), which refuse the run.
+   */
+  assistantFiles: external_exports.object({
+    upToDate: external_exports.boolean(),
+    stale: external_exports.array(external_exports.string()),
+    edited: external_exports.array(external_exports.string()),
+    /**
+     * 3.12.0 (beta.27, additive): of `stale`, the files shared with a person (CLAUDE.md,
+     * .github/copilot-instructions.md, ...) with no Atticus section yet, which the run adds
+     * its section to after the person's own lines; the dialog names them.
+     */
+    shared: external_exports.array(external_exports.string()).optional()
+  }).optional()
 });
 var ActivityKind = external_exports.enum([
   // The app's own jobs (ADR 0015), by their kind.
@@ -13167,6 +14014,13 @@ var ActivityEntry = external_exports.object({
   rev: external_exports.string().optional(),
   /** The route that stops it (POST), when the app can; a command stops in its terminal. */
   stop: external_exports.string().optional(),
+  /** 3.12.0: Stop was asked and it is ending. */
+  stopping: external_exports.boolean().optional(),
+  /**
+   * 3.12.0 (beta.27 review): how a `done` entry ended when it isn't plain done: `refused`, it
+   * refused and wrote nothing (a scan's safety stop), neither done work nor a failure.
+   */
+  outcome: external_exports.enum(["refused"]).optional(),
   jobId: external_exports.string().optional(),
   copilotRunId: external_exports.string().optional(),
   /** A command's run id (its files in .atticus/logs/). */
@@ -13287,7 +14141,15 @@ var WorkItemSyncResult = external_exports.object({
   done: external_exports.array(external_exports.object({ key: external_exports.string(), action: external_exports.string(), id: external_exports.string() })),
   failed: external_exports.array(external_exports.object({ key: external_exports.string(), reason: external_exports.string() }))
 });
-var SendOwnerAskRequest = external_exports.strictObject({ confirmation: Confirmation.optional() });
+var SendOwnerAskRequest = external_exports.strictObject({
+  confirmation: Confirmation.optional(),
+  /**
+   * 3.12.0 (beta.27 review): the person chose Send again: a question whose own record says it
+   * was sent (by anyone, from any machine) is sent through a live notifier only then (409
+   * otherwise).
+   */
+  again: external_exports.boolean().optional()
+});
 var SentOwnerAsk = external_exports.object({
   /** sent: through the adapter; step: a manual step for a person; not-sent: why in `why`. */
   state: external_exports.enum(["sent", "step", "not-sent"]),
@@ -14200,6 +15062,180 @@ var OPS = {
       ok: { status: 200, schema: "FreshView", description: "OK" }
     }
   },
+  "/api/facts": {
+    get: {
+      id: "getReposFacts",
+      summary: "3.12.0: several repos' facts in one call, each as GET /api/facts/{repo} gives it, and the problem of each repo that can't be read (the Map's one read for all its repos)",
+      tag: "workspace",
+      params: [q("repo", str2, "A repo, once per repo (or several, comma-separated); at most 100")],
+      ok: { status: 200, schema: "RepoFactsBatch", description: "OK" },
+      errors: [400]
+    }
+  },
+  "/api/trust/canaries": {
+    get: {
+      id: "getTrustCanaries",
+      summary: "Canaries (ADR 0196): the latest canary of each repo (recall on what was planted, fabrication on what was commented out, what it covers), those planted here and not yet scored, and the audit misread rate and the canary pass-through rate side by side; files only, nothing run or written",
+      tag: "workspace",
+      ok: { status: 200, schema: "CanaryView", description: "OK" }
+    }
+  },
+  "/api/crosscheck": {
+    get: {
+      id: "getCrossCheck",
+      summary: "3.12.0 (ADR 0195 point 3): each repo's readers' cross-check counts: what the built-in readers found that its facts don't have, where they disagree, and what only the facts have; or why it isn't compared (no facts, no readers slot yet, a legacy slot). Reads files only",
+      tag: "workspace",
+      ok: { status: 200, schema: "CrossCheckView", description: "OK" }
+    }
+  },
+  "/api/crosscheck/{repo}": {
+    get: {
+      id: "getRepoCrossCheck",
+      summary: "3.12.0: one repo's cross-check with its items, each with the readers' and the facts' value and their citations, and whether it is dismissed. Reads files only",
+      tag: "workspace",
+      params: [p("repo")],
+      ok: { status: 200, schema: "RepoCrossCheck", description: "OK" },
+      errors: [400, 404]
+    }
+  },
+  "/api/crosscheck/{repo}/dismiss": {
+    post: {
+      id: "dismissCrossCheckItem",
+      summary: "3.12.0: dismiss a cross-check item at the readers' value it has now (listed again when that value changes), or take the dismissal back (undo): atticus catalog crosscheck <repo> --dismiss|--undismiss <key> as a local job, writing facts/<repo>.crosscheck.yaml. Changes no catalog record",
+      tag: "workspace",
+      params: [p("repo")],
+      body: CrossCheckDismissRequest,
+      ok: {
+        status: 202,
+        schema: "JobAccepted",
+        description: "Started: its job's result is the code and the lines the command printed"
+      },
+      errors: [400, 404, 409]
+    }
+  },
+  "/api/crosscheck/{repo}/promote": {
+    get: {
+      id: "getCrossCheckPromote",
+      summary: "3.12.0 (ADR 0195 point 3): what promoting a readers-only item to assert would write: the by: person fact with the reader's citation, the cited line's text, the facts file it goes into and the hash the confirm sends back; or why it can't be promoted. Writes nothing",
+      tag: "workspace",
+      params: [
+        p("repo"),
+        q("key", { type: "string" }, "The item's key, as the cross-check names it")
+      ],
+      ok: { status: 200, schema: "CrossCheckPromoteView", description: "OK" },
+      errors: [400, 404]
+    },
+    post: {
+      id: "promoteCrossCheckItem",
+      summary: "3.12.0: atticus catalog crosscheck <repo> --promote <key>, then atticus verify <repo>, as one local job: the by: person fact is added to facts/<repo>.jsonl (an edit to propose) and the verifier checks it on its line; GET /api/crosscheck/{repo} then says whether it verified. 409 when the fact is no longer the one previewed. Changes no catalog record (verify --write does, on Apply)",
+      tag: "workspace",
+      params: [p("repo")],
+      body: CrossCheckPromoteRequest,
+      ok: {
+        status: 202,
+        schema: "JobAccepted",
+        description: "Started: its job's result is the code and the lines the commands printed"
+      },
+      errors: [400, 404, 409]
+    }
+  },
+  "/api/build": {
+    get: {
+      id: "getCatalogBuild",
+      summary: "3.12.0 (ADR 0195 points 4 and 7): each repo's source, what atticus catalog build would do now (nothing, the removals it writes, or its refusal with the removals and hand edits it lists and the counts that confirm them), and what the last build here changed. Builds in memory; writes nothing",
+      tag: "scans",
+      ok: { status: 200, schema: "CatalogBuildView", description: "OK" }
+    },
+    post: {
+      id: "runCatalogBuild",
+      summary: "3.12.0: atticus catalog build as a local job, confirming exactly the removals and hand edits listed with their counts (--allow-removals, --discard-edits); any other count refuses again and writes nothing",
+      tag: "scans",
+      body: CatalogBuildRequest,
+      bodyOptional: true,
+      ok: {
+        status: 202,
+        schema: "JobAccepted",
+        description: "Started: its job's result is the code and the lines the build printed"
+      },
+      errors: [400, 409]
+    }
+  },
+  "/api/build/edits/curate": {
+    post: {
+      id: "curateHandEdits",
+      summary: "3.12.0 (ADR 0195 point 4): atticus catalog edits --curate then atticus catalog build, as one local job: each hand edit listed becomes a curated decision in catalog/curated/ (an edit to propose), and the build with them keeps what the edited files hold. 409 when the edits are no longer the count listed",
+      tag: "scans",
+      body: CatalogEditsRequest,
+      ok: {
+        status: 202,
+        schema: "JobAccepted",
+        description: "Started: its job's result is the code and the lines the command printed"
+      },
+      errors: [400, 409]
+    }
+  },
+  "/api/build/undo": {
+    get: {
+      id: "getCatalogUndo",
+      summary: "3.12.0 (ADR 0195 point 7): the builds kept to undo on this machine (the last five), newest first and numbered 1 (the latest) to 5, and the files taking back the n latest would put back (1 when left out). Writes nothing",
+      tag: "scans",
+      params: [q("n", { type: "integer" }, "How many of the latest builds to take back")],
+      ok: { status: 200, schema: "CatalogUndoView", description: "OK" },
+      errors: [400]
+    },
+    post: {
+      id: "runCatalogUndo",
+      summary: "3.12.0: atticus catalog undo <n> --yes as a local job: puts back the files listed, as they were before the n latest builds; its own undo copy is kept, so it can be undone. 409 when the plan is no longer the files listed",
+      tag: "scans",
+      body: CatalogUndoRequest,
+      ok: {
+        status: 202,
+        schema: "JobAccepted",
+        description: "Started: its job's result is the code and the lines the command printed"
+      },
+      errors: [400, 409]
+    }
+  },
+  "/api/build/upgrade": {
+    get: {
+      id: "getCatalogUpgrade",
+      summary: "3.12.0 (ADR 0195 point 6): the upgrade to source slots as a dry run, as atticus upgrade --json lists it: every file atticus upgrade --yes writes with its size and hash, the copy kept in generated-before-upgrade/, and the first build's changes (none, or it refuses). Writes nothing",
+      tag: "scans",
+      ok: { status: 200, schema: "CatalogUpgradeView", description: "OK" }
+    },
+    post: {
+      id: "runCatalogUpgrade",
+      summary: "3.12.0: atticus upgrade --yes as a local job, confirming the files listed (their count, typed by the person, and the listing's plan hash). 409 when the upgrade no longer waits, would refuse, or its files are no longer the ones listed",
+      tag: "scans",
+      body: CatalogUpgradeRequest,
+      ok: {
+        status: 202,
+        schema: "JobAccepted",
+        description: "Started: its job's result is the code and the lines the upgrade printed"
+      },
+      errors: [400, 409]
+    }
+  },
+  "/api/build/prune": {
+    get: {
+      id: "getCatalogPrune",
+      summary: "3.12.0 (ADR 0195 point 4): the slot files no build reads (repos no longer listed or archived, the upgrade's copy of the catalog), each with why. Writes nothing",
+      tag: "scans",
+      ok: { status: 200, schema: "CatalogPruneView", description: "OK" }
+    },
+    post: {
+      id: "runCatalogPrune",
+      summary: "3.12.0: atticus catalog prune --yes as a local job, removing exactly the files listed (an undo copy keeps them). 409 when the list is no longer the count listed",
+      tag: "scans",
+      body: CatalogPruneRequest,
+      ok: {
+        status: 202,
+        schema: "JobAccepted",
+        description: "Started: its job's result is the code and the lines the command printed"
+      },
+      errors: [400, 409]
+    }
+  },
   "/api/facts/{repo}": {
     get: {
       id: "getRepoFacts",
@@ -14347,12 +15383,21 @@ var OPS = {
       errors: [400, 409, 422]
     }
   },
+  "/api/change-problems": {
+    get: {
+      id: "listChangeProblems",
+      summary: "3.12.0 (beta.27 review): the changes whose change.yaml doesn't read, with the file, the line and why; GET /api/changes leaves them out",
+      tag: "changes",
+      ok: { status: 200, schema: "ChangeProblems", description: "OK" }
+    }
+  },
   "/api/facts/{repo}/apply": {
     post: {
       id: "applyFacts",
-      summary: "2.65.0 (ADR 0183): run atticus verify <repo> --write, as Apply after an answer or a correction",
+      summary: "2.65.0 (ADR 0183): run atticus verify <repo> --write, as Apply after an answer or a correction; 3.12.0: with the counts that confirm a refused build",
       tag: "workspace",
       params: [p("repo")],
+      body: FactsApplyRequest,
       ok: {
         status: 202,
         schema: "JobAccepted",
@@ -14398,12 +15443,12 @@ var OPS = {
   "/api/owner-questions/{id}/send": {
     post: {
       id: "sendOwnerQuestion",
-      summary: "3.6.0 (ADR 0191): send the owner question through the notify adapter to its owner, on the person's `owner-ask` confirmation; with manual notifications it is a step for a person, and with none it says to copy the text",
+      summary: "3.6.0 (ADR 0191): send the owner question through the notify adapter to its owner, on the person's `owner-ask` confirmation; with no notifications set up it says to copy the text (`state: not-sent`). 3.12.0 (beta.27 review): a live send (`state: sent`) is written to the question's own record, catalog/curated/ownerquestion/<id>.yaml (`questionState: sent`, manual evidence first); a manual step (manual notifications, or a live notifier that couldn't start or fell back on the send) answers `state: step` with why and writes no record: the question says `asked` while the step is open, one step per question whoever sends it, and is sent on record once a person marks the step done. One whose record says sent is sent again through a live notifier only with `again` (409 Already sent without it); 409 Being sent while another send of it is under way",
       tag: "questions",
       params: [p("id")],
       body: SendOwnerAskRequest,
       ok: { status: 200, schema: "SentOwnerAsk", description: "Sent, or why not" },
-      errors: [400, 403, 404]
+      errors: [400, 403, 404, 409]
     }
   },
   "/api/owner-questions/{id}/answer": {
@@ -14559,6 +15604,20 @@ var OPS = {
       errors: [400, 403, 404, 422]
     }
   },
+  "/api/changes/{changeId}/artifacts/{artifact}/files": {
+    get: {
+      id: "getArtifactFiles",
+      summary: "3.12.0: several files of a many-file artifact in one call (a change's stories), each as GET /api/changes/{changeId}/artifacts/{artifact}?file= gives it",
+      tag: "changes",
+      params: [
+        p("changeId"),
+        p("artifact", { schema: { type: "string", enum: ChangeArtifact.options } }),
+        q("file", str2, "One file, relative to the change folder (stories/<id>.md), once per file; at most 200. A file that can't be read is in `problems`, the others answered")
+      ],
+      ok: { status: 200, schema: "ArtifactFiles", description: "OK" },
+      errors: [400, 404]
+    }
+  },
   "/api/changes/{changeId}/artifacts/{artifact}": {
     get: {
       id: "getArtifact",
@@ -16106,6 +17165,7 @@ function openApiDocument() {
     InitiativeSavedView,
     ChangeDetail,
     ArtifactContent,
+    ArtifactFiles,
     Task,
     RunView,
     RunList,
@@ -16197,11 +17257,20 @@ function openApiDocument() {
     MarkedNeed,
     TrustView,
     AnswerBoxResult,
+    CrossCheckView,
+    RepoCrossCheck,
+    CatalogBuildView,
+    CatalogUndoView,
+    CatalogPruneView,
+    CatalogUpgradeView,
+    CrossCheckPromoteView,
     FreshView,
+    CanaryView,
     ChangeKnowledgeView,
     KnowledgeConflictView,
     SetChangeKnowledgeResult,
     RepoFactsView,
+    RepoFactsBatch,
     FactCorrectionResult,
     LinkCorrectionsResult,
     VerifyPreviewView,
@@ -16213,6 +17282,7 @@ function openApiDocument() {
     StageCommentResult,
     StageThreadView,
     StageThreadPostResult,
+    ChangeProblems,
     PlacementView,
     StageDraftsView,
     CorrectionResult,
@@ -16329,6 +17399,7 @@ function stripMeta(s) {
 
 // packages/core/dist/merge.js
 import { createHash as createHash5 } from "node:crypto";
+var guessedLink = (d) => Array.isArray(d.flags) && d.flags.some((f) => JOIN_GUESS_FLAGS.includes(f));
 var DECLARED_TOPIC = "declared-topic";
 var short = (s, n = 6) => createHash5("sha256").update(s).digest("hex").slice(0, n);
 var MAX_RECORD_ID = 120;
@@ -16405,8 +17476,8 @@ function singularNoun(word) {
 }
 var singular = singularNoun;
 function endpointId(component, method, normalizedPath) {
-  const segs2 = normalizedPath.split("/").filter((s) => s && s !== "{}" && !/^v\d+$/i.test(s));
-  const last = segs2.at(-1) ?? "root";
+  const segs3 = normalizedPath.split("/").filter((s) => s && s !== "{}" && !/^v\d+$/i.test(s));
+  const last = segs3.at(-1) ?? "root";
   const slug = last.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
   const words = slug.split("-");
   const name = [...words.slice(0, -1), singular(words.at(-1) ?? "")].join("-") || "root";
@@ -16424,6 +17495,7 @@ function mergeCatalog(input) {
   const put = (key3, r) => byKey.set(key3, byKey.has(key3) ? combine(byKey.get(key3), r, known) : r);
   const loose = [];
   const dialectInterfaces = [];
+  const topicEndpoints = [];
   const owners = /* @__PURE__ */ new Map();
   for (const r of input.records)
     if (r.kind === "DataStore" && typeof r.ownerComponent === "string")
@@ -16473,10 +17545,23 @@ function mergeCatalog(input) {
     } else if (r.kind === "Endpoint" && BY_ID_ENDPOINTS.has(String(r.endpointType)))
       put(`Typed|${r.id}`, r);
     else if (r.kind === "Endpoint")
-      put(`Topic|${r.pathOrTopic}`, r);
+      topicEndpoints.push(r);
     else
       put(`${r.kind}|${r.id}`, r);
   }
+  const defined = new Set(topicEndpoints.filter((r) => r.evidence.some((e) => e.side === "definition")).map((r) => String(r.pathOrTopic)));
+  const ownTopicKeys = /* @__PURE__ */ new Map();
+  for (const r of topicEndpoints) {
+    const topic = String(r.pathOrTopic);
+    if (defined.has(topic)) {
+      put(`Topic|${topic}`, r);
+      continue;
+    }
+    const key3 = `Topic|${topic}|${String(r.component ?? "")}`;
+    if (!byKey.has(key3))
+      ownTopicKeys.set(topic, [...ownTopicKeys.get(topic) ?? [], key3]);
+    put(key3, r);
+  }
   const endpoints = [...byKey.entries()].filter(([k]) => k.startsWith("Endpoint|"));
   const proposed = /* @__PURE__ */ new Map();
   for (const [k, e] of endpoints) {
@@ -16514,6 +17599,11 @@ function mergeCatalog(input) {
     return systemByPrefix.get(componentId);
   };
   const componentsOfSystem = (sys) => [...components.values()].filter((c) => c.system === sys).map((c) => c.id);
+  const estateSystems = /* @__PURE__ */ new Set([
+    ...input.repos.flatMap((r) => r.system ? [r.system] : []),
+    ...[...components.values()].flatMap((c) => c.repo && c.system ? [String(c.system)] : [])
+  ]);
+  const vendorBox = (id) => systemsById.get(id)?.boundary === "vendor" && !estateSystems.has(id);
   const resolveComponent = (name, ev) => {
     if (components.has(name))
       return name;
@@ -16529,9 +17619,18 @@ function mergeCatalog(input) {
         const inSys = componentsOfSystem(s.id);
         if (inSys.length === 1)
           return inSys[0];
+        if (inSys.length === 0 && vendorBox(s.id))
+          return s.id;
       }
     }
     const sys = systemOf(name);
+    if (sys && vendorBox(sys)) {
+      const inSys = componentsOfSystem(sys);
+      if (inSys.length === 0)
+        return sys;
+      if (inSys.length === 1)
+        return inSys[0];
+    }
     if (sys) {
       const c = {
         schemaVersion: 1,
@@ -16675,17 +17774,24 @@ function mergeCatalog(input) {
       evidence: unionEvidence(caller, gwEv, callee)
     });
   }
-  for (const d of dialectInterfaces) {
+  for (const raw of dialectInterfaces) {
+    const target = resolveComponent(String(raw.to), raw.evidence[0]);
+    const d = target && target !== raw.to && !components.has(String(raw.to)) && vendorBox(systemOf(target) ?? target) ? {
+      ...raw,
+      to: target,
+      id: interfaceId(String(raw.from), target, raw.method, String(raw.normalizedPath))
+    } : raw;
     const ep = findEndpoint(String(d.to), d.method, String(d.normalizedPath));
     const callee = calleeEvidence(ep);
-    resolveComponent(String(d.to), d.evidence[0]);
     addInterface({
       ...d,
       ...ep ? { endpoint: ep.id } : {},
       evidence: unionEvidence(d.evidence, callee),
       // A person's word stays asserted (A-callers): finding the callee's code doesn't prove the
-      // caller, which nobody read, makes the call.
-      confidence: d.confidence === "asserted" ? "asserted" : callee.length > 0 ? "verified" : d.confidence
+      // caller, which nobody read, makes the call. Beta.27 (a user's Map): nor does it prove a
+      // guess right. An Interface the facts join guessed (by path, a host's label, J0's and J1's
+      // guesses) stays as the join made it: never verified because its callee's line is found.
+      confidence: d.confidence === "asserted" ? "asserted" : guessedLink(d) ? d.confidence : callee.length > 0 ? "verified" : d.confidence
     });
   }
   resolveTypedCalls({
@@ -16732,12 +17838,20 @@ function mergeCatalog(input) {
     const firstCodePub = [...pub.entries()].find(([, ev]) => ev.some((e) => e.source === "code"))?.[0];
     if (ep && (ep.component === "unknown" || !ep.component) && firstCodePub)
       ep.component = firstCodePub;
+    const own = (ownTopicKeys.get(topic) ?? []).map((k) => byKey.get(k));
+    if (!ep && firstCodePub) {
+      for (const x of own)
+        if (x.component === "unknown" || !x.component)
+          x.component = firstCodePub;
+    }
+    const epOf = (p2, s) => ep ?? own.find((x) => x.component === s) ?? own.find((x) => x.component === p2);
     for (const [p2, pev] of [...pub.entries()].sort()) {
       for (const [s, sev] of [...sub.entries()].sort()) {
         if (p2 === s)
           continue;
         const pc = pev.filter((e) => e.source === "code");
         const sc = sev.filter((e) => e.source === "code");
+        const pairEp = epOf(p2, s);
         addInterface({
           schemaVersion: 1,
           kind: "Interface",
@@ -16746,7 +17860,10 @@ function mergeCatalog(input) {
           confidence: pc.length > 0 && sc.length > 0 ? "verified" : "inferred",
           from: p2,
           to: s,
-          ...ep ? { endpoint: ep.id } : {},
+          // The topic's Endpoint: its definition's, or one either end of this pair serves. Another
+          // consumer's own endpoint for the topic (a facts entry) isn't this pair's (ADR 0195,
+          // locality: a repo's read changes only the joins it is part of).
+          ...pairEp && (def.length > 0 || pairEp.component === p2 || pairEp.component === s) ? { endpoint: pairEp.id } : {},
           via: "event-bus",
           normalizedPath: topic,
           sync: "async",
@@ -17139,8 +18256,21 @@ function recordReferences(record) {
 var PROTECTED = ["kind", "id", "schemaVersion", "confidence", "evidence"];
 var SCOPES = ["diagram", "triage"];
 var isObject = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+function byDecisionTime(a, b) {
+  const x = Date.parse(a.at);
+  const y = Date.parse(b.at);
+  const xs = Number.isNaN(x);
+  const ys = Number.isNaN(y);
+  if (xs !== ys)
+    return xs ? 1 : -1;
+  if (!xs && x !== y)
+    return x < y ? -1 : 1;
+  if (xs && a.at !== b.at)
+    return a.at < b.at ? -1 : 1;
+  return a.id === b.id ? 0 : a.id < b.id ? -1 : 1;
+}
 function applyCurated(records, decisions) {
-  const list = decisions.filter((d) => d.kind === "CuratedDecision").filter((d) => d.status === "current").sort((a, b) => a.at === b.at ? a.id < b.id ? -1 : 1 : a.at < b.at ? -1 : 1);
+  const list = decisions.filter((d) => d.kind === "CuratedDecision").filter((d) => d.status === "current").sort(byDecisionTime);
   const work = records.filter((r) => r.kind !== "CuratedDecision").map((r) => r);
   const current = new Map(work.map((r, i) => [i, r]));
   const dropped = /* @__PURE__ */ new Set();
@@ -17272,7 +18402,7 @@ function applyCurated(records, decisions) {
 var article2 = (kind) => /^[AEIOU]/.test(kind) ? `an ${kind}` : `a ${kind}`;
 
 // packages/core/dist/migrate.js
-var import_yaml10 = __toESM(require_dist(), 1);
+var import_yaml11 = __toESM(require_dist(), 1);
 import { readdir as readdir4, readFile as readFile5 } from "node:fs/promises";
 import { join as join6, relative as relative2, sep as sep2 } from "node:path";
 
@@ -17392,7 +18522,7 @@ function verdictOf(text4, o) {
   }
   let data;
   try {
-    data = (0, import_yaml10.parse)(text4);
+    data = (0, import_yaml11.parse)(text4);
   } catch {
     return "skip";
   }
@@ -17438,7 +18568,7 @@ async function migrateCatalog(dir, o = {}) {
     }
     let data;
     try {
-      data = (0, import_yaml10.parse)(text4);
+      data = (0, import_yaml11.parse)(text4);
     } catch {
       continue;
     }
@@ -17474,37 +18604,37 @@ function keepLineEndings(was, now) {
 }
 
 // packages/core/dist/gates-migrate.js
-var import_yaml11 = __toESM(require_dist(), 1);
+var import_yaml12 = __toESM(require_dist(), 1);
 function migrateGatesText(text4) {
-  const doc = (0, import_yaml11.parseDocument)(text4);
-  if (!(0, import_yaml11.isMap)(doc.contents) || doc.get("schemaVersion") !== 1)
+  const doc = (0, import_yaml12.parseDocument)(text4);
+  if (!(0, import_yaml12.isMap)(doc.contents) || doc.get("schemaVersion") !== 1)
     return { text: text4, changed: false };
   doc.set("schemaVersion", GATES_SCHEMA_VERSION);
   const gates = doc.get("gates");
-  if ((0, import_yaml11.isSeq)(gates)) {
+  if ((0, import_yaml12.isSeq)(gates)) {
     for (const g of gates.items)
-      if ((0, import_yaml11.isMap)(g) && !g.has("maxAuthorRounds"))
+      if ((0, import_yaml12.isMap)(g) && !g.has("maxAuthorRounds"))
         g.set("maxAuthorRounds", 2);
   }
   return { text: keepLineEndings(text4, doc.toString({ lineWidth: 0 })), changed: true };
 }
 
 // packages/core/dist/change-types-migrate.js
-var import_yaml12 = __toESM(require_dist(), 1);
+var import_yaml13 = __toESM(require_dist(), 1);
 function migrateChangeTypesText(text4) {
-  const doc = (0, import_yaml12.parseDocument)(text4);
-  if (!(0, import_yaml12.isMap)(doc.contents) || doc.get("schemaVersion") !== 1)
+  const doc = (0, import_yaml13.parseDocument)(text4);
+  if (!(0, import_yaml13.isMap)(doc.contents) || doc.get("schemaVersion") !== 1)
     return { text: text4, changed: false };
   doc.set("schemaVersion", CHANGE_TYPES_SCHEMA_VERSION);
   return { text: keepLineEndings(text4, doc.toString({ lineWidth: 0 })), changed: true };
 }
 
 // packages/core/dist/sources-migrate.js
-var import_yaml13 = __toESM(require_dist(), 1);
+var import_yaml14 = __toESM(require_dist(), 1);
 function migrateSourcesText(text4, o = {}) {
   const to = o.to ?? SOURCES_SCHEMA_VERSION;
-  const doc = (0, import_yaml13.parseDocument)(text4);
-  if (!(0, import_yaml13.isMap)(doc.contents))
+  const doc = (0, import_yaml14.parseDocument)(text4);
+  if (!(0, import_yaml14.isMap)(doc.contents))
     return { text: text4, changed: false };
   const v = doc.get("schemaVersion");
   if (typeof v !== "number" || v >= to || o.from !== void 0 && v !== o.from)
@@ -17514,10 +18644,10 @@ function migrateSourcesText(text4, o = {}) {
 }
 
 // packages/core/dist/runtime-migrate.js
-var import_yaml14 = __toESM(require_dist(), 1);
+var import_yaml15 = __toESM(require_dist(), 1);
 function migrateRuntimeText(text4) {
-  const doc = (0, import_yaml14.parseDocument)(text4);
-  if (!(0, import_yaml14.isMap)(doc.contents) || doc.get("schemaVersion") !== 1)
+  const doc = (0, import_yaml15.parseDocument)(text4);
+  if (!(0, import_yaml15.isMap)(doc.contents) || doc.get("schemaVersion") !== 1)
     return { text: text4, changed: false };
   const line = /^schemaVersion:[ \t]*1[ \t]*(#.*)?$/m;
   if (line.test(text4))
@@ -17534,8 +18664,8 @@ function namesCopilotAcp(doc) {
   return js.copilotAcp !== void 0 || allowed.includes("copilot-acp") || js.modes?.default === "copilot-acp";
 }
 function migrateRuntimeV3Text(text4) {
-  const doc = (0, import_yaml14.parseDocument)(text4);
-  if (doc.errors.length || !(0, import_yaml14.isMap)(doc.contents))
+  const doc = (0, import_yaml15.parseDocument)(text4);
+  if (doc.errors.length || !(0, import_yaml15.isMap)(doc.contents))
     return { text: text4, changed: false };
   const v = doc.get("schemaVersion");
   if (v !== 1 && v !== 2 || !namesCopilotAcp(doc))
@@ -17550,8 +18680,8 @@ function migrateRuntimeV3Text(text4) {
   return { text: doc.toString({ lineWidth: 0 }), changed: true };
 }
 function migrateRuntimeV4Text(text4) {
-  const doc = (0, import_yaml14.parseDocument)(text4);
-  if (doc.errors.length || !(0, import_yaml14.isMap)(doc.contents))
+  const doc = (0, import_yaml15.parseDocument)(text4);
+  if (doc.errors.length || !(0, import_yaml15.isMap)(doc.contents))
     return { text: text4, changed: false };
   const v = doc.get("schemaVersion");
   if (v !== 1 && v !== 2 && v !== 3 || !doc.has("decide"))
@@ -18167,13 +19297,13 @@ function readTarGz(bytes, limits = {}) {
 }
 
 // packages/core/dist/questions.js
-var import_yaml16 = __toESM(require_dist(), 1);
+var import_yaml17 = __toESM(require_dist(), 1);
 import { createHash as createHash8 } from "node:crypto";
 import { mkdir as mkdir2, readdir as readdir7, readFile as readFile8 } from "node:fs/promises";
 import { join as join9 } from "node:path";
 
 // packages/core/dist/judgments.js
-var import_yaml15 = __toESM(require_dist(), 1);
+var import_yaml16 = __toESM(require_dist(), 1);
 import { createHash as createHash7 } from "node:crypto";
 import { mkdir, readdir as readdir6, readFile as readFile7 } from "node:fs/promises";
 import { join as join8 } from "node:path";
@@ -18207,7 +19337,7 @@ function fileJudgments(root) {
     const text4 = await readFile7(fileOf2(kind, key3), "utf8").catch(() => void 0);
     if (text4 === void 0)
       return void 0;
-    const r = Judgment.safeParse((0, import_yaml15.parse)(text4));
+    const r = Judgment.safeParse((0, import_yaml16.parse)(text4));
     return r.success && r.data.kind === kind && r.data.key === key3 ? r.data : void 0;
   };
   return {
@@ -18231,7 +19361,7 @@ ${toCanonicalYaml(next, ["schemaVersion", "kind", "key", "verdict", "value"])}`)
         for (const n of (await readdir6(join8(dir, k)).catch(() => [])).filter((x) => x.endsWith(".yaml")).sort()) {
           const file = `${rel}/${k}/${n}`;
           try {
-            const r = Judgment.safeParse((0, import_yaml15.parse)(await readFile7(join8(dir, k, n), "utf8")));
+            const r = Judgment.safeParse((0, import_yaml16.parse)(await readFile7(join8(dir, k, n), "utf8")));
             if (r.success)
               judgments.push(r.data);
             else
@@ -18508,9 +19638,9 @@ var lcp = (a, b) => {
   return a.slice(0, i);
 };
 var longest = (xs) => xs.length ? [...xs.reduce((a, b) => b.length > a.length ? b : a)] : void 0;
-var fixed = (segs2) => {
-  const i = segs2.findIndex(isPlaceholder);
-  return i < 0 ? [...segs2] : segs2.slice(0, i);
+var fixed = (segs3) => {
+  const i = segs3.findIndex(isPlaceholder);
+  return i < 0 ? [...segs3] : segs3.slice(0, i);
 };
 function deriveMatch(item, siblings) {
   if (item.topic) {
@@ -18699,10 +19829,12 @@ async function routeQuestion(root, id, o) {
   return next;
 }
 var fileOf = (root, id) => join9(questionsDirOf(root), `${id}.yaml`);
+var questionFileOf = (root, id) => fileOf(root, id);
+var questionFileText = (q2) => `# A question from ${q2.askedBy.command} (ADR 0078). Answer it with atticus questions answer ${q2.id}, or in the app.
+${(0, import_yaml17.stringify)(Question.parse(q2))}`;
 async function write(root, q2, before) {
   await mkdir2(questionsDirOf(root), { recursive: true });
-  const text4 = `# A question from ${q2.askedBy.command} (ADR 0078). Answer it with atticus questions answer ${q2.id}, or in the app.
-${(0, import_yaml16.stringify)(Question.parse(q2))}`;
+  const text4 = questionFileText(q2);
   if (before)
     await writeFileIfUnchanged(fileOf(root, q2.id), before.text, text4);
   else
@@ -18717,7 +19849,7 @@ async function readQuestionText(root, id) {
   } catch {
     return void 0;
   }
-  const data = (0, import_yaml16.parse)(text4);
+  const data = (0, import_yaml17.parse)(text4);
   const newer2 = newerQuestion(data);
   if (newer2)
     throw new Error(`${questionsRelOf(root)}/${id}.yaml was ${newer2}`);
@@ -18734,7 +19866,7 @@ async function readQuestion(root, id) {
   return (await readQuestionText(root, id))?.q;
 }
 function questionOfText(text4) {
-  const data = (0, import_yaml16.parse)(text4);
+  const data = (0, import_yaml17.parse)(text4);
   const newer2 = newerQuestion(data);
   if (newer2)
     return { error: newer2 };
@@ -18814,22 +19946,22 @@ function sameQuestionInputs(repo, d, existing) {
 }
 var ANSWERED_BY = "answered-by";
 var ANSWERED_BY_VERSION = 1;
-function answeredByInputs(repo, d, answered) {
+function answeredByInputs(repo, d, answered2) {
   return {
     v: ANSWERED_BY_VERSION,
     repo,
     new: { question: d.question.trim(), evidence: [...d.evidence].sort() },
     answered: {
-      id: answered.id,
-      question: answered.question.trim(),
-      answer: (answerWords(answered) ?? "").trim()
+      id: answered2.id,
+      question: answered2.question.trim(),
+      answer: (answerWords(answered2) ?? "").trim()
     }
   };
 }
-function namedBeyondAnswer(d, answered, repo = "") {
+function namedBeyondAnswer(d, answered2, repo = "") {
   const known = /* @__PURE__ */ new Set([
-    ...namedIdentifiers(answered.question, repo),
-    ...namedIdentifiers(answered.answer, repo)
+    ...namedIdentifiers(answered2.question, repo),
+    ...namedIdentifiers(answered2.answer, repo)
   ]);
   return [...namedIdentifiers(d.question, repo)].filter((n) => !known.has(n));
 }
@@ -18900,8 +20032,8 @@ async function raiseQuestions(root, drafts, by, o = {}) {
     }
     others ??= (await listQuestions(root, { repo: by.repo })).questions;
     const cands = candidatesFor(by.repo, d, by.step, others).filter((x) => !differentThings(d, x, by.repo));
-    const answered = others.filter((x) => x.state === "answered" && (x.id === d.sameAs?.id || sameTarget(d, x, by.repo)) && namedBeyondAnswer(d, { question: x.question, answer: answerWords(x) ?? "" }, by.repo).length === 0);
-    plans.push({ i, d, q: q2, cands, answered });
+    const answered2 = others.filter((x) => x.state === "answered" && (x.id === d.sameAs?.id || sameTarget(d, x, by.repo)) && namedBeyondAnswer(d, { question: x.question, answer: answerWords(x) ?? "" }, by.repo).length === 0);
+    plans.push({ i, d, q: q2, cands, answered: answered2 });
   }
   const decides = /* @__PURE__ */ new Map();
   const open = [];
@@ -19050,7 +20182,7 @@ async function raiseQuestions(root, drafts, by, o = {}) {
 function olderQuestionText(text4) {
   let data;
   try {
-    data = (0, import_yaml16.parse)(text4);
+    data = (0, import_yaml17.parse)(text4);
   } catch {
     return false;
   }
@@ -19076,7 +20208,7 @@ async function migrateQuestions(root, o = {}) {
       let data;
       try {
         text4 = await readFile8(file, "utf8");
-        data = (0, import_yaml16.parse)(text4);
+        data = (0, import_yaml17.parse)(text4);
       } catch {
         break;
       }
@@ -19111,7 +20243,7 @@ async function migrateQuestions(root, o = {}) {
 var reusedLine = (q2) => `${q2.id} was already asked by ${q2.askedBy.command}: "${q2.question.trim()}" This step ${q2.state === "answered" ? "reads its answer" : "waits on the same answer"} instead of asking again.`;
 async function repoTypeSkillRel(root, type) {
   const pack = isAdopted(root) ? ".atticus/org-pack" : "org-pack";
-  const listed = await readFile8(join9(root, pack, "repo-types", type, "type.yaml"), "utf8").then((t) => (0, import_yaml16.parse)(t)?.skills).catch(() => void 0);
+  const listed = await readFile8(join9(root, pack, "repo-types", type, "type.yaml"), "utf8").then((t) => (0, import_yaml17.parse)(t)?.skills).catch(() => void 0);
   const first = Array.isArray(listed) && typeof listed[0] === "string" ? listed[0] : void 0;
   return `${pack}/${first ?? `process/skills/${type}/SKILL.md`}`;
 }
@@ -19270,7 +20402,7 @@ async function answerQuestion(root, id, a) {
       throw new QuestionError("bad-answer", why);
   }
   const skill = level === "repo-type" ? await repoTypeSkillRel(root, scopeId) : void 0;
-  const answered = Question.parse({
+  const answered2 = Question.parse({
     ...q2,
     state: "answered",
     answer: {
@@ -19333,7 +20465,7 @@ async function answerQuestion(root, id, a) {
       throw new QuestionError("bad-answer", e.message.split("\n")[0]);
     }
   }
-  await write(root, answered, read);
+  await write(root, answered2, read);
   const covered = [];
   if (hosts && match && !isPathMatch(match))
     for (const x of (await listQuestions(root, { state: "open", step: HOSTS_STEP })).questions) {
@@ -19353,35 +20485,35 @@ async function answerQuestion(root, id, a) {
     ...covered.length ? { covered } : {}
   };
   if (!skill)
-    return { question: answered, ...extra };
+    return { question: answered2, ...extra };
   const file = join9(root, ...skill.split("/"));
   let body;
   try {
     body = await readFile8(file, "utf8");
   } catch {
-    return { question: answered, ...extra, skill: { path: skill, written: false } };
+    return { question: answered2, ...extra, skill: { path: skill, written: false } };
   }
   try {
-    await writeFileIfUnchanged(file, body, withSkillAnswer(body, answered));
+    await writeFileIfUnchanged(file, body, withSkillAnswer(body, answered2));
   } catch (e) {
     if (!(e instanceof FileChangedError))
       throw e;
     const now = await readFile8(file, "utf8").catch(() => void 0);
     if (now === void 0)
-      return { question: answered, ...extra, skill: { path: skill, written: false } };
+      return { question: answered2, ...extra, skill: { path: skill, written: false } };
     try {
-      await writeFileIfUnchanged(file, now, withSkillAnswer(now, answered));
+      await writeFileIfUnchanged(file, now, withSkillAnswer(now, answered2));
     } catch (again) {
       if (again instanceof FileChangedError)
-        return { question: answered, ...extra, skill: { path: skill, written: false } };
+        return { question: answered2, ...extra, skill: { path: skill, written: false } };
       throw again;
     }
   }
-  return { question: answered, ...extra, skill: { path: skill, written: true } };
+  return { question: answered2, ...extra, skill: { path: skill, written: true } };
 }
 
 // packages/core/dist/repo-reads.js
-var import_yaml17 = __toESM(require_dist(), 1);
+var import_yaml18 = __toESM(require_dist(), 1);
 import { readFile as readFile9, stat as stat2 } from "node:fs/promises";
 import { join as join10, resolve as resolve2 } from "node:path";
 var FULL_SHA = /^[0-9a-f]{40,64}$/;
@@ -19439,7 +20571,7 @@ async function repoReadOf(root, repo) {
   }
   let report;
   try {
-    report = reportText === void 0 ? void 0 : (0, import_yaml17.parse)(reportText);
+    report = reportText === void 0 ? void 0 : (0, import_yaml18.parse)(reportText);
   } catch {
     why.push("the verifier's report can't be read");
   }
@@ -19497,7 +20629,7 @@ function callsOfQuestion(q2, facts) {
 }
 
 // packages/core/dist/question-order.js
-var import_yaml18 = __toESM(require_dist(), 1);
+var import_yaml19 = __toESM(require_dist(), 1);
 import { readdir as readdir8, readFile as readFile10 } from "node:fs/promises";
 import { join as join11 } from "node:path";
 var LANDED = /* @__PURE__ */ new Set(["released", "archived", "post-release-review"]);
@@ -19513,7 +20645,7 @@ async function changesInFlight(root) {
       continue;
     let state;
     try {
-      state = (0, import_yaml18.parse)(raw)?.state;
+      state = (0, import_yaml19.parse)(raw)?.state;
     } catch {
       continue;
     }
@@ -19525,7 +20657,7 @@ async function changesInFlight(root) {
 function citedQuestions(raw) {
   let f;
   try {
-    f = (0, import_yaml18.parse)(raw);
+    f = (0, import_yaml19.parse)(raw);
   } catch {
     return [];
   }
@@ -19601,7 +20733,7 @@ function orderQuestions(questions, weights) {
 }
 
 // packages/core/dist/question-owners.js
-var import_yaml19 = __toESM(require_dist(), 1);
+var import_yaml20 = __toESM(require_dist(), 1);
 import { readFile as readFile11 } from "node:fs/promises";
 import { join as join12 } from "node:path";
 async function readTeams(root) {
@@ -19611,7 +20743,7 @@ async function readTeams(root) {
     return { teams: [] };
   let data;
   try {
-    data = (0, import_yaml19.parse)(raw);
+    data = (0, import_yaml20.parse)(raw);
   } catch (e) {
     return { teams: [], problem: `${rel} can't be read: ${e.message.split("\n")[0]}` };
   }
@@ -19669,7 +20801,7 @@ function ownerWords(o) {
 }
 
 // packages/core/dist/question-proposals.js
-var import_yaml20 = __toESM(require_dist(), 1);
+var import_yaml21 = __toESM(require_dist(), 1);
 import { readdir as readdir9, readFile as readFile12, realpath, stat as stat3 } from "node:fs/promises";
 import { isAbsolute as isAbsolute2, join as join13, relative as relative3 } from "node:path";
 var QUESTION_PROPOSAL_SCHEMA_VERSION = 1;
@@ -19708,7 +20840,7 @@ async function listedRepos(root) {
       continue;
     let data;
     try {
-      data = (0, import_yaml20.parse)(text4);
+      data = (0, import_yaml21.parse)(text4);
     } catch {
       continue;
     }
@@ -19723,7 +20855,7 @@ async function listedRepos(root) {
   }
   return ids;
 }
-function under(base, path) {
+function under2(base, path) {
   const r = relative3(base, path);
   if (!r || isAbsolute2(r) || r.split(/[\\/]/)[0] === "..")
     return void 0;
@@ -19761,7 +20893,7 @@ async function checkProposal(root, q2, p2) {
     }
     const realBase = await realpath(base);
     const real = await realpath(join13(base, ...rel.split("/"))).catch(() => void 0);
-    const realRel = real === void 0 ? void 0 : under(realBase, real);
+    const realRel = real === void 0 ? void 0 : under2(realBase, real);
     if (real !== void 0 && realRel === void 0) {
       problems.push(`${rel} leaves the repo: cite a file in it.`);
       continue;
@@ -19809,7 +20941,7 @@ async function checkOne(root, id) {
     return { id, file, ok: false, problems: [] };
   let data;
   try {
-    data = (0, import_yaml20.parse)(raw);
+    data = (0, import_yaml21.parse)(raw);
   } catch (e) {
     return {
       id,
@@ -19933,7 +21065,7 @@ function descriptionWords(d) {
 }
 
 // packages/core/dist/setup-edit.js
-var import_yaml21 = __toESM(require_dist(), 1);
+var import_yaml22 = __toESM(require_dist(), 1);
 import { createHash as createHash9 } from "node:crypto";
 import { mkdir as mkdir3, readdir as readdir10, readFile as readFile13 } from "node:fs/promises";
 import { dirname, isAbsolute as isAbsolute3, join as join14, normalize, sep as sep3 } from "node:path";
@@ -19975,7 +21107,7 @@ var SetupEditError = class extends Error {
 var issues = (e) => e.issues.map((i) => `${i.path.join(".") || "the file"}: ${i.message}`).join("; ");
 var packRel = (root, rel) => `${isAdopted(root) ? ".atticus/org-pack" : "org-pack"}/${rel}`;
 function yamlDoc(text4, where2) {
-  const doc = (0, import_yaml21.parseDocument)(lfOnly(text4));
+  const doc = (0, import_yaml22.parseDocument)(lfOnly(text4));
   if (doc.errors.length)
     throw new SetupEditError("invalid", `${where2} isn't YAML: ${doc.errors[0].message}`);
   return doc;
@@ -20002,10 +21134,10 @@ async function setRuntimeAdapter(root, kind, value, o = {}) {
   if (o.baseSha256 !== void 0 && sha256Of(before) !== o.baseSha256)
     throw new SetupEditError("exists", `${packRel(root, "runtime.yaml")} changed since this form read it (another window, the raw editor or the CLI): read it again, then make the edit.`);
   const doc = yamlDoc(before, "runtime.yaml");
-  if (!(0, import_yaml21.isMap)(doc.contents))
+  if (!(0, import_yaml22.isMap)(doc.contents))
     throw new SetupEditError("invalid", "runtime.yaml isn't a map.");
   let adapters = doc.get("adapters");
-  if (!(0, import_yaml21.isMap)(adapters)) {
+  if (!(0, import_yaml22.isMap)(adapters)) {
     doc.set("adapters", doc.createNode({}));
     adapters = doc.get("adapters");
   }
@@ -20017,26 +21149,26 @@ async function setRuntimeAdapter(root, kind, value, o = {}) {
     if (!map.items.length)
       map.flow = false;
     const entry = map.get(kind, true);
-    const had = (0, import_yaml21.isMap)(entry) ? entry.get("settings", true) : void 0;
+    const had = (0, import_yaml22.isMap)(entry) ? entry.get("settings", true) : void 0;
     if (!Object.keys(settings).length)
       map.set(kind, value.type);
-    else if ((0, import_yaml21.isMap)(entry)) {
+    else if ((0, import_yaml22.isMap)(entry)) {
       if (entry.get("type") !== value.type)
         entry.set("type", value.type);
-      if ((0, import_yaml21.isMap)(had)) {
+      if ((0, import_yaml22.isMap)(had)) {
         for (const pair of [...had.items]) {
-          const k = (0, import_yaml21.isScalar)(pair.key) ? String(pair.key.value) : String(pair.key);
+          const k = (0, import_yaml22.isScalar)(pair.key) ? String(pair.key.value) : String(pair.key);
           if (!(k in settings))
             had.delete(pair.key);
         }
         for (const [k, v] of Object.entries(settings)) {
           const now = had.get(k, true);
-          if (now !== void 0 && sameValue((0, import_yaml21.isNode)(now) ? now.toJS(doc) : now, v))
+          if (now !== void 0 && sameValue((0, import_yaml22.isNode)(now) ? now.toJS(doc) : now, v))
             continue;
-          if ((0, import_yaml21.isScalar)(now) && !Array.isArray(v))
+          if ((0, import_yaml22.isScalar)(now) && !Array.isArray(v))
             now.value = v;
           else
-            had.set(k, doc.createNode(v, { flow: (0, import_yaml21.isSeq)(now) && now.flow === true }));
+            had.set(k, doc.createNode(v, { flow: (0, import_yaml22.isSeq)(now) && now.flow === true }));
         }
       } else
         entry.set("settings", doc.createNode(settings, { flow: false }));
@@ -20112,8 +21244,8 @@ async function idsUniqueAcrossProfiles(root, r, content) {
   if (orgPackFileSchema(r) !== RepoManifest)
     return;
   const mine = r.split("/")[1];
-  const repos = (0, import_yaml21.parseDocument)(lfOnly(content)).get("repos");
-  const ids = (0, import_yaml21.isSeq)(repos) ? repos.items.map((x) => (0, import_yaml21.isMap)(x) ? x.get("id") : void 0).filter((x) => typeof x === "string") : [];
+  const repos = (0, import_yaml22.parseDocument)(lfOnly(content)).get("repos");
+  const ids = (0, import_yaml22.isSeq)(repos) ? repos.items.map((x) => (0, import_yaml22.isMap)(x) ? x.get("id") : void 0).filter((x) => typeof x === "string") : [];
   const listed = /* @__PURE__ */ new Map();
   for (const other of await manifestFiles(root)) {
     if (other.platform === mine)
@@ -20121,11 +21253,11 @@ async function idsUniqueAcrossProfiles(root, r, content) {
     const t = await readFile13(other.path, "utf8").catch(() => void 0);
     if (t === void 0)
       continue;
-    const list = (0, import_yaml21.parseDocument)(lfOnly(t)).get("repos");
-    if (!(0, import_yaml21.isSeq)(list))
+    const list = (0, import_yaml22.parseDocument)(lfOnly(t)).get("repos");
+    if (!(0, import_yaml22.isSeq)(list))
       continue;
     for (const x of list.items) {
-      const id = (0, import_yaml21.isMap)(x) ? x.get("id") : void 0;
+      const id = (0, import_yaml22.isMap)(x) ? x.get("id") : void 0;
       if (typeof id === "string" && !listed.has(id))
         listed.set(id, other.rel);
     }
@@ -20154,7 +21286,7 @@ function orgPackFileProblems(rel, content) {
   const r = orgPackFileRel(rel);
   if (!/\.ya?ml$/i.test(r))
     return [];
-  const doc = (0, import_yaml21.parseDocument)(lfOnly(content));
+  const doc = (0, import_yaml22.parseDocument)(lfOnly(content));
   if (doc.errors.length)
     return doc.errors.map((e) => `${r} isn't YAML: ${e.message}`);
   const schema = orgPackFileSchema(r);
@@ -20196,11 +21328,11 @@ async function addPattern(root, p2, o = {}) {
   const there = await readFile13(join14(orgPackDirOf(root), "patterns", `${data.code}.yaml`), "utf8").then(() => true).catch(() => false);
   if (there)
     throw new SetupEditError("exists", `${packRel(root, rel)} is there already: edit it in the raw editor instead.`);
-  return finish2(root, rel, void 0, (0, import_yaml21.stringify)(data, { lineWidth: 0 }), o.preview);
+  return finish2(root, rel, void 0, (0, import_yaml22.stringify)(data, { lineWidth: 0 }), o.preview);
 }
 
 // packages/core/dist/specs.js
-var import_yaml22 = __toESM(require_dist(), 1);
+var import_yaml23 = __toESM(require_dist(), 1);
 import { createHash as createHash10 } from "node:crypto";
 import { readdir as readdir11, readFile as readFile14, rm } from "node:fs/promises";
 import { join as join15 } from "node:path";
@@ -20211,7 +21343,7 @@ var SPEC_CACHE_VERSION = `spec@${FLOW_SCHEMA_VERSION}.${SPEC_HEADER_SCHEMA_VERSI
 function parseSpecFile(text4, name, rel) {
   let data;
   try {
-    data = (0, import_yaml22.parse)(text4);
+    data = (0, import_yaml23.parse)(text4);
   } catch (e) {
     return { ok: false, message: e.message.split("\n")[0] };
   }
@@ -20302,7 +21434,7 @@ ${toCanonicalYaml(h, HEADER_KEYS)}`);
 }
 async function readSpecFindings(root, repo) {
   try {
-    const r = SpecFindings.safeParse((0, import_yaml22.parse)(await readFile14(join15(specDirOf(root, repo), SPEC_FINDINGS_FILE), "utf8")));
+    const r = SpecFindings.safeParse((0, import_yaml23.parse)(await readFile14(join15(specDirOf(root, repo), SPEC_FINDINGS_FILE), "utf8")));
     return r.success ? r.data : void 0;
   } catch {
     return void 0;
@@ -20329,7 +21461,7 @@ async function specRepos(root) {
 }
 async function readEstateJoins(root) {
   try {
-    const r = EstateJoins.safeParse((0, import_yaml22.parse)(await readFile14(join15(specsDirOf(root), ESTATE_FILE), "utf8")));
+    const r = EstateJoins.safeParse((0, import_yaml23.parse)(await readFile14(join15(specsDirOf(root), ESTATE_FILE), "utf8")));
     return r.success ? r.data : void 0;
   } catch {
     return void 0;
@@ -20407,7 +21539,7 @@ var isAssistantResolution = (r, known = []) => !!r && assistantActor(r.by, known
 
 // packages/core/dist/link-candidates.js
 var JOINABLE = /* @__PURE__ */ new Set(["rest", "soap", "grpc", "graphql"]);
-var PLACEHOLDER2 = /^(\$\{[^}]*\}|@[^@]+@|\{[^}]*\}|:[a-z_]\w*|\*\*?)$/i;
+var PLACEHOLDER = /^(\$\{[^}]*\}|@[^@]+@|\{[^}]*\}|:[a-z_]\w*|\*\*?)$/i;
 function resolvePath(p2, settings) {
   if (!settings)
     return { path: p2, resolved: false };
@@ -20421,12 +21553,12 @@ function resolvePath(p2, settings) {
   });
   return { path: out, resolved };
 }
-var segs = (p2) => normalizePath(p2.replace(/\$\{[^}]*\}/g, "{}")).toLowerCase().split("/").filter(Boolean).filter((x, i) => !(i === 0 && /^v\d+$/.test(x)));
+var segs2 = (p2) => normalizePath(p2.replace(/\$\{[^}]*\}/g, "{}")).toLowerCase().split("/").filter(Boolean).filter((x, i) => !(i === 0 && /^v\d+$/.test(x)));
 var STOP = /* @__PURE__ */ new Set(["path", "url", "uri", "endpoint", "api", "v1", "v2", "v3", "the"]);
 function wordsOf(p2) {
   return new Set(p2.replace(/\$\{([^}]*)\}/g, " $1 ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").toLowerCase().split(/[^a-z0-9]+/).filter((w) => w.length > 1 && !STOP.has(w) && !/^\d+$/.test(w)).map((w) => w.endsWith("s") && w.length > 3 ? w.slice(0, -1) : w));
 }
-var isWild = (s) => s === "{}" || PLACEHOLDER2.test(s);
+var isWild = (s) => s === "{}" || PLACEHOLDER.test(s);
 function pairScore(call, api, settings) {
   const tries = [pathScore2(call, api)];
   const r = resolvePath(call.path, settings);
@@ -20456,8 +21588,8 @@ function pairScore(call, api, settings) {
 var methodFactor = (call, api) => !!call.method && !!api.method && call.method.toUpperCase() !== api.method.toUpperCase() ? 0.5 : 1;
 function pathScore2(call, api) {
   const k = methodFactor(call, api);
-  const a = segs(call.path);
-  const b = segs(api.path);
+  const a = segs2(call.path);
+  const b = segs2(api.path);
   const eq = (x, y) => x === y || isWild(x) || isWild(y);
   const shaped = a.some((x) => !isWild(x)) && b.some((x) => !isWild(x));
   if (a.length && a.join("/") === b.join("/"))
@@ -20550,14 +21682,14 @@ function linkCandidates(o) {
 }
 
 // packages/core/dist/decision-batches.js
-var import_yaml23 = __toESM(require_dist(), 1);
+var import_yaml24 = __toESM(require_dist(), 1);
 import { readdir as readdir12, readFile as readFile15 } from "node:fs/promises";
 import { join as join16 } from "node:path";
 var batchRelOf = (root, id) => `${decisionsRelOf(root)}/${id}.yaml`;
 async function writeBatch(root, b) {
   const p2 = DecisionBatch.parse(b);
   await writeFileAtomic(join16(decisionsDirOf(root), `${p2.id}.yaml`), `# A batch of decisions (ADR 0181): what it applied and what it took away. Undo: atticus questions undo ${p2.id}
-${(0, import_yaml23.stringify)(p2, { lineWidth: 0 })}`);
+${(0, import_yaml24.stringify)(p2, { lineWidth: 0 })}`);
   return batchRelOf(root, p2.id);
 }
 async function readBatch(root, id) {
@@ -20566,7 +21698,7 @@ async function readBatch(root, id) {
   const text4 = await readFile15(join16(decisionsDirOf(root), `${id}.yaml`), "utf8").catch(() => void 0);
   if (text4 === void 0)
     return void 0;
-  const r = DecisionBatch.safeParse((0, import_yaml23.parse)(text4));
+  const r = DecisionBatch.safeParse((0, import_yaml24.parse)(text4));
   return r.success ? r.data : void 0;
 }
 async function listBatches(root) {
@@ -20577,7 +21709,7 @@ async function listBatches(root) {
     const file = `${decisionsRelOf(root)}/${n}`;
     let data;
     try {
-      data = (0, import_yaml23.parse)(await readFile15(join16(decisionsDirOf(root), n), "utf8"));
+      data = (0, import_yaml24.parse)(await readFile15(join16(decisionsDirOf(root), n), "utf8"));
     } catch (e) {
       problems.push({ file, message: `not YAML: ${e.message.split("\n")[0]}` });
       continue;
@@ -20635,7 +21767,7 @@ async function migrateOne(file, dryRun) {
 }
 
 // packages/core/dist/declared-links.js
-var import_yaml24 = __toESM(require_dist(), 1);
+var import_yaml25 = __toESM(require_dist(), 1);
 import { readdir as readdir13, readFile as readFile16 } from "node:fs/promises";
 import { join as join17 } from "node:path";
 var DeclareError = class extends Error {
@@ -20661,12 +21793,12 @@ async function systemNode(root, system) {
       continue;
     const eol = eolOf(raw);
     const text4 = lfOnly(raw);
-    const doc = (0, import_yaml24.parseDocument)(text4);
+    const doc = (0, import_yaml25.parseDocument)(text4);
     const seq = doc.get("systems");
-    if (!(0, import_yaml24.isSeq)(seq))
+    if (!(0, import_yaml25.isSeq)(seq))
       continue;
-    const node = seq.items.find((x) => (0, import_yaml24.isMap)(x) && x.get("id") === system);
-    if ((0, import_yaml24.isMap)(node))
+    const node = seq.items.find((x) => (0, import_yaml25.isMap)(x) && x.get("id") === system);
+    if ((0, import_yaml25.isMap)(node))
       return { ...f, raw, text: text4, eol, doc, node };
   }
   return void 0;
@@ -20678,18 +21810,18 @@ async function declareLink(root, d, o) {
   if (!found)
     throw new DeclareError("not-found", `No system of the profiles is ${d.system}.`);
   const { path, rel, raw, text: text4, eol } = found;
-  const doc = (0, import_yaml24.parseDocument)(d.kind === "topic" ? migrateProfileText(text4).text : text4);
-  const node = doc.get("systems").items.find((x) => (0, import_yaml24.isMap)(x) && x.get("id") === d.system);
+  const doc = (0, import_yaml25.parseDocument)(d.kind === "topic" ? migrateProfileText(text4).text : text4);
+  const node = doc.get("systems").items.find((x) => (0, import_yaml25.isMap)(x) && x.get("id") === d.system);
   const field = d.kind === "topic" ? "topics" : "calls";
   let list = node.get(field);
-  if (!(0, import_yaml24.isSeq)(list)) {
+  if (!(0, import_yaml25.isSeq)(list)) {
     node.set(field, doc.createNode([]));
     list = node.get(field);
   }
-  if (!(0, import_yaml24.isSeq)(list))
+  if (!(0, import_yaml25.isSeq)(list))
     throw new DeclareError("invalid", `${rel}: ${d.system} has no ${field} list.`);
   const value = d.kind === "topic" ? d.topic.trim() : d.route.trim();
-  const has2 = list.items.some((x) => d.kind === "topic" ? (0, import_yaml24.isScalar)(x) && String(x.value) === value : (0, import_yaml24.isMap)(x) && x.get("route") === value);
+  const has2 = list.items.some((x) => d.kind === "topic" ? (0, import_yaml25.isScalar)(x) && String(x.value) === value : (0, import_yaml25.isMap)(x) && x.get("route") === value);
   if (has2)
     throw new DeclareError("exists", `${rel} already has ${value} under ${d.system}'s ${field}.`);
   const item = d.kind === "topic" ? doc.createNode(value) : doc.createNode(DeclaredCall.parse({ route: value }));
@@ -20711,8 +21843,8 @@ async function undeclareLink(root, d) {
     throw new DeclareError("not-found", `No system of the profiles is ${d.system}.`);
   const { path, rel, raw, text: text4, eol, doc, node } = found;
   const list = node.get(d.kind === "topic" ? "topics" : "calls");
-  const i = (0, import_yaml24.isSeq)(list) ? list.items.findIndex((x) => COMMENT.test(x.comment ?? "") && (d.kind === "topic" ? (0, import_yaml24.isScalar)(x) && String(x.value) === d.value : (0, import_yaml24.isMap)(x) && x.get("route") === d.value)) : -1;
-  if (!(0, import_yaml24.isSeq)(list) || i < 0)
+  const i = (0, import_yaml25.isSeq)(list) ? list.items.findIndex((x) => COMMENT.test(x.comment ?? "") && (d.kind === "topic" ? (0, import_yaml25.isScalar)(x) && String(x.value) === d.value : (0, import_yaml25.isMap)(x) && x.get("route") === d.value)) : -1;
+  if (!(0, import_yaml25.isSeq)(list) || i < 0)
     throw new DeclareError("not-found", `${rel} has no ${d.value} declared from the canvas under ${d.system} (removed already, or written by hand there).`);
   list.items.splice(i, 1);
   const after = doc.toString({ lineWidth: 0, flowCollectionPadding: true });
@@ -20729,15 +21861,15 @@ async function declaredOf(root, system) {
     return m ? { ...m[1] ? { side: m[1] } : {}, by: m[2], at: m[3] } : {};
   };
   const topics = found.node.get("topics");
-  if ((0, import_yaml24.isSeq)(topics)) {
+  if ((0, import_yaml25.isSeq)(topics)) {
     for (const x of topics.items)
-      if ((0, import_yaml24.isScalar)(x))
+      if ((0, import_yaml25.isScalar)(x))
         out.push({ kind: "topic", system, value: String(x.value), ...read(x.comment) });
   }
   const calls = found.node.get("calls");
-  if ((0, import_yaml24.isSeq)(calls)) {
+  if ((0, import_yaml25.isSeq)(calls)) {
     for (const x of calls.items)
-      if ((0, import_yaml24.isMap)(x) && typeof x.get("route") === "string")
+      if ((0, import_yaml25.isMap)(x) && typeof x.get("route") === "string")
         out.push({ kind: "call", system, value: String(x.get("route")), ...read(x.comment) });
   }
   return { rel: found.rel, list: out };
@@ -20780,22 +21912,6 @@ var ReadingRulesFile = external_exports.strictObject({
 });
 
 export {
-  fieldKey,
-  lineNamesRoute,
-  lineNamesWord,
-  lineNamesField,
-  lineNamesClaim,
-  claimOnLines,
-  normalizeQuote,
-  quoteMatches,
-  isBinaryPath,
-  quoteNotRequired,
-  isSecretPath,
-  hasSecretShape,
-  redactSecrets,
-  quoteHoldsSecret,
-  partsBuildWord,
-  partsNamePath,
   FACT_KINDS,
   FactId,
   CitePart,
@@ -20911,6 +22027,7 @@ export {
   addManifestRepo,
   addManifestRepos,
   renameManifestRepo,
+  renamedManifest,
   migrateManifests,
   eolOf,
   lfOnly,
@@ -21009,6 +22126,7 @@ export {
   joinFlagsOf,
   sharedLinkFlags,
   joinRecords,
+  preferredEnvironment,
   joinVendorOperations,
   PROTOTYPE_TYPE,
   isPrototypeType,
@@ -21099,6 +22217,7 @@ export {
   parseAuditFile,
   serializeAuditFile,
   auditCandidates,
+  seededShuffle,
   drawAudit,
   mergeDraw,
   wilson,
@@ -21106,6 +22225,34 @@ export {
   sumAuditPrecision,
   auditItemHolds,
   sampleConfirmed,
+  canaryReportsRelOf,
+  isCanaryRepoName,
+  CANARY_READS_DIR,
+  isCanaryMetarepoId,
+  canaryRunPrefix,
+  isCanaryRunName,
+  canaryRunOf,
+  CANARY_WHATS,
+  CanaryPlanted,
+  CanaryRemoved,
+  CanarySkipped,
+  CanaryKey,
+  CanaryRate,
+  CanaryReport,
+  parseCanaryReport,
+  serializeCanaryReport,
+  foldCanary,
+  canaryClaimText,
+  canaryNeedleOf,
+  plantedBy,
+  removedMatch,
+  removedBy,
+  canaryRate,
+  scoreCanary,
+  canaryCovers,
+  silentErrorRate,
+  latestCanaries,
+  isWindowsDeviceName,
   STACK_HELPERS,
   stackHelpersOff,
   helperOn,
@@ -21160,6 +22307,7 @@ export {
   MESH_KEY,
   referenceFields,
   recordReferences,
+  byDecisionTime,
   applyCurated,
   mapAtOnce,
   readParsedFiles,
@@ -21227,6 +22375,8 @@ export {
   askedGapQuestionId,
   questionFromDraft,
   routeQuestion,
+  questionFileOf,
+  questionFileText,
   writeQuestion,
   readQuestion,
   listQuestions,