@ontrails/trails 1.0.0-beta.39 → 1.0.0-beta.41

package/CHANGELOG.md

@@ -1,5 +1,93 @@
 # trails
 
+## 1.0.0-beta.41
+
+### Patch Changes
+
+- [`19406e0`](https://github.com/outfitter-dev/trails/commit/19406e06f825c5ba4460b153eaf2ade721a749d7): Classify unauthenticated scoped-package dist-tag fallbacks as first publications after npm has already reported the package missing, and preserve registry probe details in release-policy blockers.
+
+## 1.0.0-beta.40
+
+### Minor Changes
+
+- [`5adb995`](https://github.com/outfitter-dev/trails/commit/5adb99551c2dda6190d46cce7f60bb08d63c99aa): Complete the v1 hard cutover from the authored `blaze` field to
+  `implementation` across trail contracts, surface projections, tests, examples,
+  and public source-analysis helpers. Existing applications must rename authored
+  trail behavior fields and direct trail-object access before upgrading.
+- [`6712075`](https://github.com/outfitter-dev/trails/commit/67120754df3f614c7f4dd98be1fa0ba9d69b7765): Complete the v1 hard cutover from the `contour` domain-object declaration
+  vocabulary to `entity` across contracts, topo facts, store helpers, Warden,
+  Wayfinder, operator surfaces, examples, and generated locks. Existing
+  applications must rename contour APIs, run `trails dev reset --yes` to discard
+  pre-cutover local Topographer snapshots, and then recompile committed
+  `trails.lock` artifacts before upgrading. Those derived snapshots are
+  intentionally not read through a compatibility layer.
+  The entity-shaped wire contract advances `TopoGraph` and split lock manifests
+  from schema version 3 to 4; old split artifacts fail with regeneration guidance,
+  while the canonical root `trails.lock` remains schema version 5.
+  Wayfinder reports those stale rows as topo-store drift while keeping current
+  committed lock facts available for inspection.
+
+### Patch Changes
+
+- [`4def007`](https://github.com/outfitter-dev/trails/commit/4def007a53c42881fba1d958a67f0c05f417e811): Move adapter source export scanning into adapter-kit and have `create.adapter`
+  consume the shared helper.
+- [`78575d5`](https://github.com/outfitter-dev/trails/commit/78575d5193242053b4dc1f4fa6150b94bacaff44): Discover owner-package subpath adapter subjects in shared adapter checks and
+  enable `trails create adapter --placement subpath` to generate immediately
+  checkable owner subpaths.
+- [`35cbe28`](https://github.com/outfitter-dev/trails/commit/35cbe289db46539b3689dbf6cf8ab0e5d9a1b09c): Found `@ontrails/source` as the shared source-code AST kernel for parsing,
+  walking, locations, edits, literals, and generic Trails syntax recognition.
+  Warden, Regrade, Wayfinder, and the Trails operator now import those shared
+  mechanics from `@ontrails/source`; the legacy Warden AST route is removed by the
+  stacked hard cutover.
+- [`10f2492`](https://github.com/outfitter-dev/trails/commit/10f24928d3bc9d995abf7aa261ecf515c295855d): Own the `wayfind.outline` implementation in the Trails operator app while preserving the existing `trails wayfind file <file> --outline` CLI and MCP composition behavior, and document `@ontrails/source` as the operator's live-source analysis kernel.
+- [`35e5fed`](https://github.com/outfitter-dev/trails/commit/35e5fedd228e498783f479f0dd502e2f3ec772b8): Fold the Wayfinder graph-read catalog into `@ontrails/topography`. Wayfind
+  remains the product, trail-id, CLI, and MCP brand, but there is no longer an
+  `@ontrails/wayfinder` package to install or import. Programmatic consumers
+  should move imports such as `wayfinderTopo`, `wayfindOverviewTrail`,
+  `loadWayfinderArtifacts`, and the Wayfinder filter/provenance types to
+  `@ontrails/topography`.
+
+  Expose that package move as a governed Regrade transition so exact
+  `@ontrails/wayfinder` imports can move safely while product vocabulary and near
+  routes remain unchanged for review. Regrade routes package manifests through
+  structured review instead of rewriting dependency keys as plain text.
+
+  The Trails operator now reads all `wayfind.*` query trails and artifact helpers
+  from `@ontrails/topography` while preserving the existing CLI/MCP schemas,
+  route IDs, output shapes, and internal trail visibility.
+
+- [`3a65ae3`](https://github.com/outfitter-dev/trails/commit/3a65ae363e05b7589f4a9876da4346886353b48c): Rename the durable graph substrate package from `@ontrails/topographer` to
+  `@ontrails/topography` after folding Wayfind graph queries into that owner.
+
+  Update imports to `@ontrails/topography` or
+  `@ontrails/topography/backend-support`. The pre-1.0 cutover does not ship a
+  compatibility package. TopoGraph, lock, topo-store, semantic diff, and Wayfind
+  APIs keep their existing contracts, and the `trails wayfind` CLI and MCP names
+  remain unchanged.
+
+  The governed package-route transition moves legacy `@ontrails/wayfinder`
+  imports directly to `@ontrails/topography`; it does not emit the retired
+  intermediate `@ontrails/topographer` route.
+
+- [`e5edace`](https://github.com/outfitter-dev/trails/commit/e5edace60281c76157512acc6e1446c8415633ba): Make Regrade history hashes stable across report serialization and preserve
+  pre-apply occurrence evidence alongside truthful completion counts and a
+  freshly scanned post-apply completion report for replay detection. Existing
+  plans and history stamped with the earlier hash serializer remain valid.
+- [`4030698`](https://github.com/outfitter-dev/trails/commit/40306984467625844564f0f84156530d7118a79c): Keep structured input on nested child commands from being reinterpreted as a
+  bare child-name positional fallback, while preserving schema-authored
+  `inputJson` flags as ordinary trail input, including through the public Trails
+  CLI. Optional numeric flags now consume negative values with Commander's own
+  parsing semantics, and variadic flags consume every following value, before
+  nested command routing is resolved.
+- [`8a1ac00`](https://github.com/outfitter-dev/trails/commit/8a1ac00b5d789be41ca6e464358c96b01e442bf4): Govern the exact `@ontrails/warden/ast` to `@ontrails/source` package route
+  transition for Regrade string-literal and module-specifier rewrites exposed
+  through the Trails CLI and MCP tools. Safe rewrites now require the owning
+  manifest to already declare the target package; otherwise Regrade preserves the
+  occurrence with dependency repair guidance. Invalid manifests remain unchanged
+  and produce structured repair guidance that names the owning manifest. Explicit
+  preserve rules remain no-ops before dependency validation, and dotted or
+  subpath-like near routes remain deferred instead of becoming invented imports.
+
 ## 1.0.0-beta.39
 
 ### Minor Changes

package/README.md

@@ -15,7 +15,7 @@ Common workflows:
 - `trails topo` inspects topo state and manages pins/history.
 - `trails compile` writes root `trails.lock`.
 - `trails validate` checks root `trails.lock` for drift.
-- `trails wayfind`, `trails wayfind --trails --intent read`, `trails wayfind <id> --contract`, `trails wayfind <id> --deps`, `trails wayfind <id> --impact`, `trails wayfind pattern "wayfind.*"`, `trails wayfind query "release drift"`, `trails wayfind file <file> --outline`, and `trails wayfind diff ...` read graph artifacts and source outlines through Wayfinder for local navigation.
+- `trails wayfind`, `trails wayfind --trails --intent read`, `trails wayfind <id> --contract`, `trails wayfind <id> --deps`, `trails wayfind <id> --impact`, `trails wayfind pattern "wayfind.*"`, `trails wayfind query "release drift"`, and `trails wayfind diff ...` read graph artifacts through Wayfinder. `trails wayfind file <file> --outline` is the operator-owned live-source exception, assembled with `@ontrails/source` and enriched with saved graph context when available.
 - `trails schema <command...>` shows accepted CLI routes, aliases, flags, and schemas for an operator command or command namespace.
 - `trails warden` runs Trails governance checks for contract and architecture drift. Use `--scope-exclude <glob>` or project `warden.scope.exclude` config when local notes, scratch space, or generated state should not be governed by Warden.
 - `trails regrade plan <from> <to> --root-dir <path> --json` writes an active Regrade plan, `trails regrade plan --expand` stages wide-net review candidates in that plan, `trails regrade preview` reruns it without writing, and `trails regrade apply` consumes the plan and writes history. Use `plan --expand --dry-run` to inspect staged candidates without writing the active plan, and add `--dry-run` to `apply` to prove the apply path without mutating source. Use `trails regrade plans` and `trails regrade check` when a workspace has active plans that need inspection before apply. MCP exposes the same lifecycle as `trails_plan_regrade`, `trails_list_regrades`, `trails_check_regrade`, `trails_preview_regrade`, and `trails_apply_regrade`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ontrails/trails",
-  "version": "1.0.0-beta.39",
+  "version": "1.0.0-beta.41",
   "bin": {
     "trails": "./bin/trails.ts"
   },
@@ -27,26 +27,26 @@
   },
   "dependencies": {
     "@clack/prompts": "^1.1.0",
-    "@ontrails/adapter-kit": "^1.0.0-beta.39",
-    "@ontrails/cli": "^1.0.0-beta.39",
-    "@ontrails/commander": "^1.0.0-beta.39",
-    "@ontrails/config": "^1.0.0-beta.39",
-    "@ontrails/core": "^1.0.0-beta.39",
-    "@ontrails/http": "^1.0.0-beta.39",
-    "@ontrails/mcp": "^1.0.0-beta.39",
-    "@ontrails/observe": "^1.0.0-beta.39",
-    "@ontrails/permits": "^1.0.0-beta.39",
-    "@ontrails/regrade": "^1.0.0-beta.39",
-    "@ontrails/topographer": "^1.0.0-beta.39",
-    "@ontrails/tracing": "^1.0.0-beta.39",
-    "@ontrails/warden": "^1.0.0-beta.39",
-    "@ontrails/wayfinder": "^1.0.0-beta.39",
+    "@ontrails/adapter-kit": "^1.0.0-beta.41",
+    "@ontrails/cli": "^1.0.0-beta.41",
+    "@ontrails/commander": "^1.0.0-beta.41",
+    "@ontrails/config": "^1.0.0-beta.41",
+    "@ontrails/core": "^1.0.0-beta.41",
+    "@ontrails/http": "^1.0.0-beta.41",
+    "@ontrails/mcp": "^1.0.0-beta.41",
+    "@ontrails/observe": "^1.0.0-beta.41",
+    "@ontrails/permits": "^1.0.0-beta.41",
+    "@ontrails/regrade": "^1.0.0-beta.41",
+    "@ontrails/source": "^1.0.0-beta.41",
+    "@ontrails/topography": "^1.0.0-beta.41",
+    "@ontrails/tracing": "^1.0.0-beta.41",
+    "@ontrails/warden": "^1.0.0-beta.41",
     "commander": "^14.0.3",
     "typescript": "^5.9.3",
     "zod": "^4.3.5"
   },
   "devDependencies": {
-    "@ontrails/cloudflare": "^1.0.0-beta.39",
-    "@ontrails/testing": "^1.0.0-beta.39"
+    "@ontrails/cloudflare": "^1.0.0-beta.41",
+    "@ontrails/testing": "^1.0.0-beta.41"
   }
 }

package/src/app.ts

@@ -1,7 +1,7 @@
 import { surfaceOverlay, topo } from '@ontrails/core';
 import {
   wayfindAdaptersTrail,
-  wayfindContoursTrail,
+  wayfindEntitiesTrail,
   wayfindContractTrail,
   wayfindDescribeTrail,
   wayfindDiffTrail,
@@ -12,14 +12,13 @@ import {
   wayfindImpactTrail,
   wayfindNearbyTrail,
   wayfindOverviewTrail,
-  wayfindOutlineTrail,
   wayfindResourcesTrail,
   wayfindSearchTrail,
   wayfindSignalsTrail,
   wayfindSurfacesTrail,
   wayfindTrailsTrail,
   wayfindVersionsTrail,
-} from '@ontrails/wayfinder';
+} from '@ontrails/topography';
 
 import * as addSurface from './trails/add-surface.js';
 import * as addTrail from './trails/add-trail.js';
@@ -55,6 +54,7 @@ import * as validate from './trails/validate.js';
 import * as warden from './trails/warden.js';
 import * as wardenGuide from './trails/warden-guide.js';
 import * as wayfind from './trails/wayfind.js';
+import { wayfindOutlineTrail } from './trails/wayfind-outline.js';
 
 export const operatorApp = topo(
   'trails',
@@ -107,9 +107,9 @@ const cliWayfinderCommandTrails = {
 
 const cliWayfinderSupportTrails = {
   wayfindAdaptersTrail,
-  wayfindContoursTrail,
   wayfindContractTrail,
   wayfindDescribeTrail,
+  wayfindEntitiesTrail,
   wayfindErrorsTrail,
   wayfindExamplesTrail,
   wayfindImpactTrail,

package/src/cli.ts

@@ -19,7 +19,7 @@ import type {
 import { createProgram } from '@ontrails/commander';
 import type { CreateProgramOptions } from '@ontrails/commander';
 import { resolvePermitFromBearerToken } from '@ontrails/permits';
-import { deriveTopoGraph } from '@ontrails/topographer';
+import { deriveTopoGraph } from '@ontrails/topography';
 
 import { app, trailsCliIncludedTrails, trailsOverlays } from './app.js';
 import { resolveInputWithClack } from './clack.js';

package/src/completions.ts

@@ -21,7 +21,7 @@ import {
   Result,
   ValidationError,
 } from '@ontrails/core';
-import { buildWorkspaceTrailIndex } from '@ontrails/topographer';
+import { buildWorkspaceTrailIndex } from '@ontrails/topography';
 
 import { tryLoadFreshAppLease } from './trails/load-app.js';
 

package/src/mcp-app.ts

@@ -10,14 +10,14 @@ import {
   wayfindImpactTrail,
   wayfindNearbyTrail,
   wayfindOverviewTrail,
-  wayfindOutlineTrail,
   wayfindResourcesTrail,
   wayfindSearchTrail,
   wayfindSurfacesTrail,
   wayfindTrailsTrail,
-} from '@ontrails/wayfinder';
+} from '@ontrails/topography';
 
 import { operatorApp } from './app.js';
+import { wayfindOutlineTrail } from './trails/wayfind-outline.js';
 
 const operatorTrails = Object.fromEntries(
   operatorApp.list().map((trailItem) => [trailItem.id, trailItem])

package/src/regrade/history.ts

@@ -19,7 +19,10 @@ import {
   regradePlanContentHash,
   regradePlanDirectory,
   regradePlanSlugForBody,
+  legacyRegradeSourceHash,
   regradeSourceHash,
+  regradeSourceHashMatches,
+  regradeSourceHashes,
   rootRelativePath,
 } from './plan-artifact.js';
 import type { RegradePlanArtifact, RegradePlanBody } from './plan-artifact.js';
@@ -30,8 +33,23 @@ import type { RegradePlanArtifact, RegradePlanBody } from './plan-artifact.js';
  */
 export const REGRADE_HISTORY_SCHEMA_VERSION = 2;
 
+const rawCompletionReportHash = Symbol('rawCompletionReportHash');
+const rawReportHash = Symbol('rawReportHash');
+const rawCompletionReport = Symbol('rawCompletionReport');
+const rawReport = Symbol('rawReport');
+
 const regradeHistoryRunSchema = z
   .object({
+    completionReport: regradeReportOutput
+      .optional()
+      .describe(
+        'Post-apply source evidence used to recognize a completed-state replay'
+      ),
+    completionReportHash: z
+      .string()
+      .regex(/^[0-9a-f]{64}$/)
+      .optional()
+      .describe('Canonical hash of the post-apply completion report'),
     lockHashAtRun: z
       .string()
       .min(1)
@@ -58,6 +76,12 @@ const regradeHistoryArtifactSchema = z
   .strict();
 
 interface RegradeHistoryRun {
+  readonly [rawCompletionReportHash]?: string;
+  readonly [rawCompletionReport]?: RegradeReport;
+  readonly [rawReportHash]?: string;
+  readonly [rawReport]?: RegradeReport;
+  readonly completionReport: RegradeReport;
+  readonly completionReportHash: string;
   readonly lockHashAtRun: string;
   readonly plan: RegradePlanArtifact;
   readonly planContentHash: string;
@@ -115,7 +139,46 @@ export const readRegradeHistoryArtifact = (
       })
     );
   }
-  return Result.ok(parsed.data as unknown as RegradeHistoryArtifact);
+  const rawRuns = (
+    parsedJson as {
+      readonly runs: readonly {
+        readonly completionReport?: RegradeReport;
+        readonly report: RegradeReport;
+      }[];
+    }
+  ).runs;
+  return Result.ok({
+    ...parsed.data,
+    runs: parsed.data.runs.map((run, index) => {
+      // Early schema-v2 histories recorded only the post-apply report. Treat
+      // that report and its lock hash as completion evidence when reading
+      // those artifacts.
+      const completionReport = run.completionReport ?? run.report;
+      const normalized = {
+        ...run,
+        completionReport,
+        completionReportHash: run.completionReportHash ?? run.lockHashAtRun,
+      } as RegradeHistoryRun;
+      const rawRun = rawRuns[index];
+      if (rawRun !== undefined) {
+        Object.defineProperties(normalized, {
+          [rawCompletionReport]: {
+            value: rawRun.completionReport ?? rawRun.report,
+          },
+          [rawCompletionReportHash]: {
+            value: legacyRegradeSourceHash(
+              rawRun.completionReport ?? rawRun.report
+            ),
+          },
+          [rawReportHash]: {
+            value: legacyRegradeSourceHash(rawRun.report),
+          },
+          [rawReport]: { value: rawRun.report },
+        });
+      }
+      return normalized;
+    }),
+  } as RegradeHistoryArtifact);
 };
 
 /**
@@ -132,14 +195,66 @@ export const mintTransitionId = (
     .digest('hex')
     .slice(0, 12);
 
+/**
+ * Verify every recorded run at its own stamped lock: recompute the plan
+ * content hash and lock hash from the recorded plan and report, then compare
+ * with the stamped values.
+ */
+export const verifyRegradeHistoryRuns = (
+  artifact: RegradeHistoryArtifact
+): TrailsResult<{ readonly runs: number }, ValidationError> => {
+  for (const [index, run] of artifact.runs.entries()) {
+    if (regradePlanContentHash(run.plan.plan) !== run.planContentHash) {
+      return Result.err(
+        new ValidationError('Regrade history run stamp mismatch.', {
+          context: {
+            field: 'planContentHash',
+            path: artifact.path,
+            run: index,
+          },
+        })
+      );
+    }
+    if (
+      !regradeSourceHashMatches(run.lockHashAtRun, run.report) &&
+      run[rawReportHash] !== run.lockHashAtRun
+    ) {
+      return Result.err(
+        new ValidationError('Regrade history run stamp mismatch.', {
+          context: { field: 'lockHashAtRun', path: artifact.path, run: index },
+        })
+      );
+    }
+    if (
+      !regradeSourceHashMatches(
+        run.completionReportHash,
+        run.completionReport
+      ) &&
+      run[rawCompletionReportHash] !== run.completionReportHash
+    ) {
+      return Result.err(
+        new ValidationError('Regrade history run stamp mismatch.', {
+          context: {
+            field: 'completionReportHash',
+            path: artifact.path,
+            run: index,
+          },
+        })
+      );
+    }
+  }
+  return Result.ok({ runs: artifact.runs.length });
+};
+
 /**
  * Append one applied run to the transition's consolidated history file. A
- * run whose plan content hash and lock hash both equal the last recorded
- * run's stamps is a replay: nothing is written and `status: 'replay'` is
- * surfaced instead of a duplicate record.
+ * run whose plan content hash and source evidence equal either the last run's
+ * pre-apply report or completed state is a replay: nothing is written and
+ * `status: 'replay'` is surfaced instead of a duplicate record.
  */
 export const appendRegradeHistoryRun = (params: {
   readonly artifact: RegradePlanArtifact;
+  readonly completedReport?: RegradeReport;
   readonly report: RegradeReport;
   readonly rootDir: string;
 }): TrailsResult<RegradeHistorySummary, Error> => {
@@ -150,7 +265,11 @@ export const appendRegradeHistoryRun = (params: {
   const relativePath = rootRelativePath(params.rootDir, absolutePath);
   const planContentHash = regradePlanContentHash(params.artifact.plan);
   const lockHashAtRun = regradeSourceHash(params.report);
+  const currentSourceHashes = regradeSourceHashes(params.report);
+  const completionReport = params.completedReport ?? params.report;
   const entry: RegradeHistoryRun = {
+    completionReport,
+    completionReportHash: regradeSourceHash(completionReport),
     lockHashAtRun,
     plan: params.artifact,
     planContentHash,
@@ -164,6 +283,10 @@ export const appendRegradeHistoryRun = (params: {
       return existing;
     }
     prior = existing.value;
+    const verified = verifyRegradeHistoryRuns(prior);
+    if (verified.isErr()) {
+      return verified;
+    }
     if (
       params.artifact.transitionId !== undefined &&
       params.artifact.transitionId !== prior.id
@@ -208,7 +331,8 @@ export const appendRegradeHistoryRun = (params: {
     if (
       lastRun !== undefined &&
       lastRun.planContentHash === planContentHash &&
-      lastRun.lockHashAtRun === lockHashAtRun
+      (currentSourceHashes.includes(lastRun.lockHashAtRun) ||
+        currentSourceHashes.includes(lastRun.completionReportHash))
     ) {
       return Result.ok({
         path: relativePath,
@@ -233,7 +357,21 @@ export const appendRegradeHistoryRun = (params: {
     runs: prior === undefined ? [entry] : [...prior.runs, entry],
     schemaVersion: REGRADE_HISTORY_SCHEMA_VERSION,
   };
-  const parsed = regradeHistoryArtifactSchema.safeParse(artifact);
+  const writableArtifact = {
+    id: artifact.id,
+    kind: artifact.kind,
+    path: artifact.path,
+    runs: artifact.runs.map((run) => ({
+      completionReport: run[rawCompletionReport] ?? run.completionReport,
+      completionReportHash: run.completionReportHash,
+      lockHashAtRun: run.lockHashAtRun,
+      plan: run.plan,
+      planContentHash: run.planContentHash,
+      report: run[rawReport] ?? run.report,
+    })),
+    schemaVersion: artifact.schemaVersion,
+  };
+  const parsed = regradeHistoryArtifactSchema.safeParse(writableArtifact);
   if (!parsed.success) {
     return Result.err(
       new ValidationError('Invalid Regrade history artifact.', {
@@ -243,7 +381,10 @@ export const appendRegradeHistoryRun = (params: {
   }
   try {
     mkdirSync(dirname(absolutePath), { recursive: true });
-    writeFileSync(absolutePath, `${JSON.stringify(parsed.data, null, 2)}\n`);
+    writeFileSync(
+      absolutePath,
+      `${JSON.stringify(writableArtifact, null, 2)}\n`
+    );
   } catch (error) {
     return Result.err(
       new InternalError('Failed to write Regrade history entry.', {
@@ -259,37 +400,6 @@ export const appendRegradeHistoryRun = (params: {
   });
 };
 
-/**
- * Verify every recorded run at its own stamped lock: recompute the plan
- * content hash and lock hash from the recorded plan and report, then compare
- * with the stamped values.
- */
-export const verifyRegradeHistoryRuns = (
-  artifact: RegradeHistoryArtifact
-): TrailsResult<{ readonly runs: number }, ValidationError> => {
-  for (const [index, run] of artifact.runs.entries()) {
-    if (regradePlanContentHash(run.plan.plan) !== run.planContentHash) {
-      return Result.err(
-        new ValidationError('Regrade history run stamp mismatch.', {
-          context: {
-            field: 'planContentHash',
-            path: artifact.path,
-            run: index,
-          },
-        })
-      );
-    }
-    if (regradeSourceHash(run.report) !== run.lockHashAtRun) {
-      return Result.err(
-        new ValidationError('Regrade history run stamp mismatch.', {
-          context: { field: 'lockHashAtRun', path: artifact.path, run: index },
-        })
-      );
-    }
-  }
-  return Result.ok({ runs: artifact.runs.length });
-};
-
 const hasPathSeparator = (value: string): boolean =>
   value.includes('/') || value.includes('\\');
 

package/src/regrade/plan-artifact.ts

@@ -223,17 +223,6 @@ const sourceHashEntryFacts = (
       ...(reviewDetails === undefined ? {} : { reviewDetails }),
     }));
 
-export const regradeSourceHash = (report: RegradeReport): string =>
-  createHash('sha256')
-    .update(
-      JSON.stringify({
-        entries: sourceHashEntryFacts(report.entries),
-        ledger: report.run?.ledger,
-        selectedClassIds: report.selectedClassIds,
-      })
-    )
-    .digest('hex');
-
 const canonicalizeJsonValue = (value: unknown): unknown => {
   if (Array.isArray(value)) {
     return value.map((entry) => canonicalizeJsonValue(entry));
@@ -256,6 +245,37 @@ const canonicalizeJsonValue = (value: unknown): unknown => {
 export const canonicalJsonStringify = (value: unknown): string =>
   JSON.stringify(canonicalizeJsonValue(value));
 
+const regradeSourceHashFacts = (report: RegradeReport): unknown => ({
+  entries: sourceHashEntryFacts(report.entries),
+  ledger: report.run?.ledger,
+  selectedClassIds: report.selectedClassIds,
+});
+
+const hashSerializedSourceFacts = (serialized: string): string =>
+  createHash('sha256').update(serialized).digest('hex');
+
+export const regradeSourceHash = (report: RegradeReport): string =>
+  hashSerializedSourceFacts(
+    canonicalJsonStringify(regradeSourceHashFacts(report))
+  );
+
+export const legacyRegradeSourceHash = (report: RegradeReport): string =>
+  hashSerializedSourceFacts(JSON.stringify(regradeSourceHashFacts(report)));
+
+/** Match source evidence written before canonical JSON hashing. */
+export const regradeSourceHashMatches = (
+  stampedHash: string,
+  report: RegradeReport
+): boolean =>
+  stampedHash === regradeSourceHash(report) ||
+  stampedHash === legacyRegradeSourceHash(report);
+
+export const regradeSourceHashes = (
+  report: RegradeReport
+): readonly string[] => [
+  ...new Set([regradeSourceHash(report), legacyRegradeSourceHash(report)]),
+];
+
 /**
  * Canonical content hash of a resolved Regrade plan body — the authored
  * migration intent. Stable across key insertion order; changes on any edit to

package/src/release/native-bun-registry.ts

@@ -339,6 +339,11 @@ const isNpmNotFoundOutput = (stdout: string, stderr: string): boolean => {
   return combined.includes('E404') || combined.includes('404 Not Found');
 };
 
+const isNpmUnauthorizedOutput = (stdout: string, stderr: string): boolean => {
+  const combined = `${stdout}\n${stderr}`;
+  return combined.includes('E401') || combined.includes('401 Unauthorized');
+};
+
 const isNpmExactVersionMissingOutput = (
   stdout: string,
   stderr: string
@@ -403,7 +408,13 @@ const npmDistTagRegistryView = async (
 ): Promise<NpmView | null> => {
   const { exitCode, stderr, stdout } = await runNpm(['dist-tag', 'ls', name]);
   if (exitCode !== 0) {
-    if (isNpmNotFoundOutput(stdout, stderr)) {
+    // npm returns E401 for the dist-tag endpoint of an unpublished scoped
+    // package, even though the preceding package view returned E404. At this
+    // fallback boundary both responses mean the package does not exist yet.
+    if (
+      isNpmNotFoundOutput(stdout, stderr) ||
+      isNpmUnauthorizedOutput(stdout, stderr)
+    ) {
       return null;
     }
     throw new Error(stderr.trim() || `npm dist-tag ls failed for ${name}`);

package/src/release/policy.ts

@@ -59,6 +59,7 @@ export interface ReleasePolicySourcePullRequest {
 }
 
 export interface ReleasePolicyRegistryPackage {
+  readonly error?: string | undefined;
   readonly expectedTagVersion?: string | undefined;
   readonly name: string;
   readonly status: 'inaccessible' | 'missing' | 'published';
@@ -462,6 +463,7 @@ const readLabelFamily = <T extends string>(
 const factsFromPolicyPackage = (
   entry: ReleasePolicyRegistryPackage
 ): PackageRegistryFacts => ({
+  error: entry.error,
   expectedTagVersion: entry.expectedTagVersion,
   status: entry.status,
   targetVersion: entry.version,
@@ -485,7 +487,7 @@ const registryBlockers = (
   packages.flatMap((entry) => {
     const state = classifyPackageRegistryState(factsFromPolicyPackage(entry));
     if (state.kind === 'registry-inaccessible') {
-      return [`${entry.name}: registry state is inaccessible`];
+      return [`${entry.name}: registry state is inaccessible: ${state.error}`];
     }
     if (state.kind === 'tag-points-ahead') {
       return [
@@ -986,6 +988,7 @@ const registryPackagesFromResults = (
       };
     }
     return {
+      ...(result.status === 'inaccessible' ? { error: result.error } : {}),
       name: result.name,
       status: result.status,
       version: result.workspaceVersion,

package/src/retired-topo-command.ts

@@ -30,7 +30,7 @@ export const getRetiredTopoCommandDiagnostic = (
 
   return {
     attempted,
-    message: `"${attempted}" was retired. Use "${replacement}" instead.\nTopographer artifact commands now live at the top level: "trails compile", "trails validate", and "trails diff". "trails topo" is for topo-store history, pin, and unpin.`,
+    message: `"${attempted}" was retired. Use "${replacement}" instead.\nTopography artifact commands now live at the top level: "trails compile", "trails validate", and "trails diff". "trails topo" is for topo-store history, pin, and unpin.`,
     replacement,
   };
 };

package/src/run-watch.ts

@@ -27,7 +27,7 @@ import { watch as nodeWatch } from 'node:fs';
 import type { FSWatcher } from 'node:fs';
 import { dirname, extname } from 'node:path';
 
-import type { TopoGraphEntry } from '@ontrails/topographer';
+import type { TopoGraphEntry } from '@ontrails/topography';
 
 // ---------------------------------------------------------------------------
 // Constants

package/src/run-wayfind-outline.ts

@@ -1,7 +1,11 @@
 import { deriveOutputMode, output } from '@ontrails/cli';
 import type { ActionResultContext } from '@ontrails/cli';
-import { outlineOutputSchema } from '@ontrails/wayfinder';
-import type { OutlineFeature, OutlineOutput } from '@ontrails/wayfinder';
+
+import { outlineOutputSchema } from './trails/wayfind-outline.js';
+import type {
+  OutlineFeature,
+  OutlineOutput,
+} from './trails/wayfind-outline.js';
 
 const includesFeature = (
   outline: OutlineOutput,