@stacksjs/defaults 0.75.361 → 0.75.366

package/ai/skills/stacks-technical-diagrams/renderers/shared/cli.mjs

@@ -1,31 +1,90 @@
+import { softwareNoticesHtml } from './software-notices.mjs';
+import { createHash } from 'node:crypto';
 import fs from 'node:fs';
 import path from 'node:path';
 import { applyTemplate, renderCards, esc } from './utils.mjs';
 import { validateSchema } from './validator.mjs';
 import { verifyRepositoryEvidence } from './repository-evidence.mjs';
-import { installRendererDiagnosticBoundary, throwDiagnosticProblems } from './diagnostics.mjs';
+import { installRendererDiagnosticBoundary, throwDiagnosticError, throwDiagnosticProblems, recordDiagnostic } from './diagnostics.mjs';
 import { validateEngineeringProfile } from './engineering-profiles.mjs';
-import { resolveOutputPath } from './output-path.mjs';
+import {
+  resolveOutputPath,
+  validateAuthoredOutputPath,
+} from './output-path.mjs';
+import {
+  captureAtomicOutput,
+  captureRegularFileBinding,
+  publishRegularFileBinding,
+  releaseRegularFileBinding,
+  removeOwnedRegularFile,
+  verifyAtomicOutput,
+} from './atomic-output.mjs';
+import { resolveLocale, translateMessage, registerLocale, localeDiagnostics } from './i18n.mjs';
 import { prepareDiagramBrandMarks } from './brand-marks.mjs';
-import { resolveLocale, translateMessage } from './i18n.mjs';
-
-installRendererDiagnosticBoundary();
 
 const outputPathGuards = new Map();
+let renderCandidateSequence = 0;
+
+// meta.locale is renderer-owned Viewer UI, not authored content. Each message
+// resolves as: valid meta.translations value → bundled catalog enrolled in
+// locales/manifest.json → English (see i18n.mjs). Every fallback is disclosed
+// by human renderers on stderr. Diagnostic JSON mode records warnings without
+// mixing text into failure receipts; validate/deliver disclose them publicly.
+function applyLocaleTranslations(diagramType, diagram) {
+  const locale = diagram.meta?.locale;
+  if (!locale) return;
+  registerLocale(locale, diagram.meta.translations);
+  for (const diagnostic of localeDiagnostics(diagramType, diagram.meta)) {
+    recordDiagnostic(diagnostic);
+    if (process.env.ARCHIFY_DIAGNOSTIC_FORMAT !== 'json') {
+      console.warn(`archify: ${diagnostic.message}`);
+    }
+  }
+}
 
 // Common CLI head: node render-<type>.mjs [input.json] [output.html]
 // Keep this synchronous because callers also use it to establish the guarded
 // output path before testing a last-moment filesystem alias change.
 export function loadDiagram({ rendererDir, diagramType, defaultExample, argv = process.argv }) {
+  // Compilers also import this module for SVG helpers. Only CLI execution
+  // should install a process-level handler, before reading or validating input.
+  installRendererDiagnosticBoundary();
   const skillRoot = path.resolve(rendererDir, '../..');
   const inputPath = path.resolve(argv[2] || path.join(skillRoot, 'examples', defaultExample));
-  const diagram = JSON.parse(fs.readFileSync(inputPath, 'utf8'));
+  let input;
+  try {
+    input = fs.readFileSync(inputPath, 'utf8');
+  } catch (error) {
+    if (!isFilesystemError(error)) throw error;
+    const message = `Input could not be read: ${error.message}`;
+    throwDiagnosticError(message, [{
+      code: 'input/read', message,
+      subject: { input: inputPath },
+      evidence: { systemCode: error.code, reason: error.message },
+      supportedFixes: ['provide one readable JSON input file'],
+    }]);
+  }
+  let diagram;
+  try {
+    diagram = JSON.parse(input);
+  } catch (error) {
+    if (!(error instanceof SyntaxError)) throw error;
+    const message = `Input JSON could not be parsed: ${error.message}`;
+    throwDiagnosticError(message, [{
+      code: 'input/json-parse', message,
+      subject: { input: inputPath },
+      evidence: { reason: error.message },
+      supportedFixes: ['repair the JSON syntax and run validation again'],
+    }]);
+  }
+  const authoredOutput = diagram?.meta?.output;
+  if (authoredOutput !== undefined) validateAuthoredOutputPath(authoredOutput);
   validateSchema(diagramType, diagram);
-  validateGuidedViews(diagramType, diagram);
-  validateRelationshipIds(diagramType, diagram);
+  applyLocaleTranslations(diagramType, diagram);
+  validateCrossCollectionContracts(diagramType, diagram);
   validateEngineeringProfile(diagramType, diagram);
   const sourceEvidence = verifyRepositoryEvidence(diagramType, diagram, process.env.ARCHIFY_REPO_ROOT);
-  const template = fs.readFileSync(path.join(skillRoot, 'assets/template.html'), 'utf8');
+  const template = fs.readFileSync(path.join(skillRoot, 'assets/template.html'), 'utf8').replace('</head>', `${softwareNoticesHtml}\n</head>`);
   const outputRequest = {
     requestedOutput: argv[3],
     authoredOutput: diagram.meta?.output,
@@ -33,7 +92,12 @@ export function loadDiagram({ rendererDir, diagramType, defaultExample, argv = p
     inputPaths: [inputPath],
     cwd: process.cwd(),
   };
-  const { outputPath: outPath } = resolveOutputPath(outputRequest);
+  let outPath;
+  try {
+    ({ outputPath: outPath } = resolveOutputPath(outputRequest));
+  } catch (error) {
+    throwOutputError(error, path.resolve(outputRequest.requestedOutput || outputRequest.authoredOutput || outputRequest.defaultOutput));
+  }
   outputPathGuards.set(outPath, outputRequest);
   return { diagram, template, outPath, sourceEvidence };
 }
@@ -47,25 +111,194 @@ export async function loadDiagramWithBrandMarks(options) {
   return loaded;
 }
 
-const START_TYPES = new Set(['architecture', 'workflow', 'sequence', 'dataflow', 'lifecycle']);
+const START_TYPES = new Set(['architecture', 'workflow', 'sequence', 'dataflow', 'lifecycle', 'erd', 'tree', 'class', 'timeline', 'waterfall']);
+
+function isFilesystemError(error) {
+  return typeof error?.code === 'string'
+    && typeof error?.syscall === 'string'
+    && typeof error?.errno === 'number';
+}
+
+function throwOutputError(error, output) {
+  if (error?.archifyDiagnostics || !isFilesystemError(error)) throw error;
+  const message = `Output could not be written: ${error.message}`;
+  throwDiagnosticError(message, [{
+    code: 'output/write', message,
+    subject: { output },
+    evidence: { systemCode: error.code, reason: error.message },
+    supportedFixes: ['choose a writable HTML file path and ensure its parent directories can be created'],
+  }]);
+}
+
+function throwAtomicOutputFailure(result, output) {
+  const reason = result.reason || { code: 'unclassified' };
+  const changed = result.status === 'different';
+  const candidate = reason.code.startsWith('candidate-');
+  const nonRegular = ['target-not-regular-file', 'candidate-not-regular-file'].includes(reason.code);
+  const hardlinked = ['target-hardlinked', 'candidate-hardlinked'].includes(reason.code);
+  const message = changed
+    ? 'Output target changed while the rendered artifact was being prepared.'
+    : nonRegular
+      ? candidate
+        ? 'Temporary output candidate is no longer a regular file.'
+        : 'Output already exists and is not a regular file.'
+      : hardlinked
+        ? candidate
+          ? 'Temporary output candidate has multiple hard-link names.'
+          : 'Output already exists through multiple hard-link names.'
+        : 'Output target stability could not be determined safely before commit.';
+  throwDiagnosticError(message, [{
+    code: changed
+      ? 'output/target-changed'
+      : nonRegular
+        ? 'output/target-not-regular-file'
+        : hardlinked
+          ? 'output/target-hardlinked'
+          : 'output/target-indeterminate',
+    message,
+    subject: { output },
+    evidence: { relation: reason },
+    supportedFixes: [hardlinked
+      ? 'choose a non-hardlinked output path; atomic replacement cannot update every hard-link name'
+      : 'retry after other processes stop replacing or redirecting the output path'],
+  }]);
+}
+
+function stageRenderedHtml(outputPath, html, mode) {
+  for (let attempt = 0; attempt < 100; attempt += 1) {
+    renderCandidateSequence += 1;
+    const candidatePath = path.join(
+      path.dirname(outputPath),
+      `.archify-render-${process.pid}-${Date.now().toString(36)}-${renderCandidateSequence}.tmp`,
+    );
+    let descriptor;
+    let identity;
+    try {
+      const noFollow = process.platform === 'win32' ? 0 : (fs.constants.O_NOFOLLOW || 0);
+      descriptor = fs.openSync(
+        candidatePath,
+        fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL | noFollow,
+        mode ?? 0o666,
+      );
+      let metadata;
+      try {
+        metadata = fs.fstatSync(descriptor, { bigint: true });
+      } catch (error) {
+        // A transient first inspection failure must not strand the exclusive
+        // candidate. A successful retry binds cleanup to the still-open file;
+        // if both inspections fail, preserving the unknown entry is safer.
+        try {
+          const retry = fs.fstatSync(descriptor, { bigint: true });
+          if (retry.isFile() && retry.ino !== 0n) {
+            identity = { device: retry.dev, inode: retry.ino };
+          }
+        } catch {}
+        throw error;
+      }
+      if (!metadata.isFile() || metadata.ino === 0n) {
+        throw new Error('Temporary render candidate identity could not be verified safely.');
+      }
+      identity = { device: metadata.dev, inode: metadata.ino };
+      fs.writeFileSync(descriptor, html);
+      // Creation modes are filtered through the process umask. An atomic
+      // replacement must retain the exact permissions of an existing target,
+      // while a brand-new target should keep normal umask behavior.
+      if (mode !== null) fs.fchmodSync(descriptor, mode);
+      fs.closeSync(descriptor);
+      descriptor = undefined;
+      return { candidatePath, identity };
+    } catch (error) {
+      if (descriptor !== undefined) {
+        try { fs.closeSync(descriptor); } catch {}
+      }
+      if (error.code === 'EEXIST') continue;
+      if (identity) {
+        const cleanup = removeOwnedRegularFile(candidatePath, identity);
+        if (!['removed', 'absent', 'preserved'].includes(cleanup.status)) {
+          const cleanupError = new Error(`${error.message}; temporary render candidate cleanup also failed.`);
+          cleanupError.cause = error;
+          throw cleanupError;
+        }
+      }
+      throw error;
+    }
+  }
+  const error = new Error(`Could not reserve a temporary render candidate beside "${outputPath}".`);
+  error.code = 'EEXIST';
+  error.errno = -17;
+  error.syscall = 'open';
+  throw error;
+}
 
 // Common CLI tail: fill the template and write the standalone HTML file.
 export function writeDiagram({ outPath, template, diagramType, meta, svg, cards, sourceEvidence = null }) {
   if (!START_TYPES.has(diagramType)) throw new Error(`writeDiagram: unknown diagram type ${JSON.stringify(diagramType)}`);
   const outputGuard = outputPathGuards.get(outPath);
-  if (outputGuard) resolveOutputPath(outputGuard);
-  fs.mkdirSync(path.dirname(outPath), { recursive: true });
-  fs.writeFileSync(outPath, applyTemplate(template, {
+  const html = applyTemplate(template, {
     title: meta.title,
     subtitle: meta.subtitle,
     svg,
     cards: renderCards(cards),
     locale: meta.locale,
     visualPreset: meta.visual_preset || 'classic',
-    guidedViews: meta.views || [],
     sourceEvidence,
-  }));
-  outputPathGuards.delete(outPath);
+  });
+  let candidatePath;
+  let candidateIdentity;
+  let candidateBinding;
+  try {
+    fs.mkdirSync(path.dirname(outPath), { recursive: true });
+    const outputCapture = captureAtomicOutput(outPath);
+    if (outputCapture.status !== 'captured') throwAtomicOutputFailure(outputCapture, outPath);
+    const beforeStage = verifyAtomicOutput(outputCapture.snapshot);
+    if (beforeStage.status !== 'match') throwAtomicOutputFailure(beforeStage, outPath);
+    ({ candidatePath, identity: candidateIdentity } = stageRenderedHtml(
+      outputCapture.commitPath,
+      html,
+      outputCapture.mode,
+    ));
+
+    // The renderer may spend substantial time building HTML after loadDiagram
+    // establishes the guard. Re-run it after staging so a last-moment alias
+    // cannot redirect the commit onto an input file.
+    if (outputGuard) resolveOutputPath(outputGuard);
+    const candidateCapture = captureRegularFileBinding(candidatePath, {
+      subject: 'candidate',
+      expectedSha256: createHash('sha256').update(html).digest('hex'),
+      expectedBytes: Buffer.byteLength(html),
+      expectedIdentity: candidateIdentity,
+      ...(outputCapture.mode === null ? {} : { expectedMode: outputCapture.mode }),
+    });
+    if (candidateCapture.status !== 'captured') throwAtomicOutputFailure(candidateCapture, outPath);
+    candidateBinding = candidateCapture.binding;
+    const beforeCommit = verifyAtomicOutput(outputCapture.snapshot);
+    if (beforeCommit.status !== 'match') throwAtomicOutputFailure(beforeCommit, outPath);
+    const publication = publishRegularFileBinding(
+      candidateBinding,
+      candidatePath,
+      outputCapture.snapshot,
+      { subject: 'candidate' },
+    );
+    if (!['committed', 'committed-with-warning'].includes(publication.status)) {
+      throwAtomicOutputFailure(publication, outPath);
+    }
+    const releasedCandidate = releaseRegularFileBinding(candidateBinding);
+    candidateBinding = undefined;
+    if (releasedCandidate.status !== 'released') throwAtomicOutputFailure(releasedCandidate, outPath);
+    candidatePath = undefined;
+    candidateIdentity = undefined;
+  } catch (error) {
+    throwOutputError(error, outPath);
+  } finally {
+    outputPathGuards.delete(outPath);
+    if (candidateBinding) releaseRegularFileBinding(candidateBinding);
+    if (candidatePath && candidateIdentity) {
+      const cleanup = removeOwnedRegularFile(candidatePath, candidateIdentity);
+      if (!['removed', 'absent', 'preserved'].includes(cleanup.status)) {
+        throwAtomicOutputFailure(cleanup, outPath);
+      }
+    }
+  }
   console.log(outPath);
 }
 
@@ -75,6 +308,11 @@ const SEMANTIC_COLLECTIONS = {
   sequence: 'participants',
   dataflow: 'nodes',
   lifecycle: 'states',
+  erd: 'entities',
+  tree: 'nodes',
+  class: 'types',
+  timeline: 'events',
+  waterfall: 'spans',
 };
 
 const RELATIONSHIP_COLLECTIONS = {
@@ -83,6 +321,8 @@ const RELATIONSHIP_COLLECTIONS = {
   sequence: 'messages',
   dataflow: 'flows',
   lifecycle: 'transitions',
+  erd: 'relationships',
+  class: 'relationships',
 };
 
 // Relationship IDs are optional for backwards compatibility, but once an
@@ -111,48 +351,21 @@ export function validateRelationshipIds(diagramType, diagram) {
   }
 }
 
-// JSON Schema keeps the view object bounded; this pass checks facts that span
-// collections. Keeping it here makes the same contract apply to all five
-// renderers, including the zero-install standalone-validator path.
-export function validateGuidedViews(diagramType, diagram) {
-  const views = diagram.meta?.views;
-  if (!Array.isArray(views) || views.length === 0) return;
-  const collection = SEMANTIC_COLLECTIONS[diagramType];
-  const semanticIds = new Set((diagram[collection] || []).map((item) => item.id));
-  const seen = new Set();
-  const problems = [];
-
-  views.forEach((view, index) => {
-    if (seen.has(view.id)) problems.push(`/meta/views/${index}/id duplicates view id ${JSON.stringify(view.id)}`);
-    seen.add(view.id);
-    const seenFocus = new Set();
-    (view.focus || []).forEach((id, focusIndex) => {
-      if (seenFocus.has(id)) {
-        problems.push(`/meta/views/${index}/focus/${focusIndex} duplicates semantic id ${JSON.stringify(id)}`);
-      }
-      seenFocus.add(id);
-      if (!semanticIds.has(id)) {
-        problems.push(`/meta/views/${index}/focus/${focusIndex} references unknown semantic id ${JSON.stringify(id)}`);
-      }
-    });
-  });
-
-  if (problems.length) {
-    throwDiagnosticProblems('Guided view validation failed', problems, {
-      code: 'guided-view/invalid',
-      subject: { diagramType, collection: 'meta.views' },
-    });
-  }
+// Share relationship-ID semantic checks between the loader
+// and workflow compiler without performing filesystem operations (see #429).
+export function validateCrossCollectionContracts(diagramType, diagram) {
+  validateRelationshipIds(diagramType, diagram);
 }
 
 // Accessible name for the generated diagram SVG.
-export function svgRootAttrs(meta) {
-  const animation = meta.animation === 'trace' ? ' data-animation="trace"' : '';
+export function svgRootAttrs(meta, explicitQualityProfile) {
+  // Motion is a Viewer capability for every diagram; Live/Still controls playback.
+  const animation = ' data-animation="trace"';
   const preset = ` data-preset="${esc(meta.visual_preset || 'classic')}"`;
   const engineeringProfile = meta.engineering_profile
     ? ` data-engineering-profile="${esc(meta.engineering_profile)}"`
     : '';
-  const requestedProfile = process.env.ARCHIFY_QUALITY_PROFILE || meta.quality_profile;
+  const requestedProfile = explicitQualityProfile || process.env.ARCHIFY_QUALITY_PROFILE || meta.quality_profile;
   const qualityProfile = requestedProfile === 'showcase' ? 'showcase' : 'standard';
   const advisory = requestedProfile ? '' : ' data-quality-gates="advisory"';
   return `role="img" lang="${esc(resolveLocale(meta.locale))}" aria-labelledby="archify-diagram-title archify-diagram-description"${animation}${preset}${engineeringProfile} data-quality-profile="${esc(qualityProfile)}"${advisory}`;
@@ -167,10 +380,9 @@ export function svgAccessibleText(meta, kind) {
 }
 
 export function animateAttr(meta, kind, step) {
-  if (meta.animation !== 'trace') return '';
   // Ambient trace must finish inside the fixed six-second WebM capture. The
   // cap affects visual delay only; authored order and semantic identity stay
-  // untouched in the JSON, DOM, Story, and relationship contracts.
+  // untouched in the JSON, DOM, and relationship contracts.
   const safeStep = Number.isFinite(step) && step >= 0 ? Math.min(12, Math.floor(step)) : 0;
   return ` data-animate="${kind}" style="--step:${safeStep}"`;
 }

package/ai/skills/stacks-technical-diagrams/renderers/shared/desktop-readability.mjs

@@ -3,6 +3,11 @@ export const DESKTOP_READER_MIN_WIDTH = 960;
 export const DESKTOP_READER_HORIZONTAL_CHROME = 30;
 export const DESKTOP_READER_DIAGRAM_WIDTH = DESKTOP_READER_MIN_WIDTH - DESKTOP_READER_HORIZONTAL_CHROME;
 export const MIN_PROJECTED_NODE_TEXT_PX = 6;
+export const DECLARED_WIDE_READER_CONTRACT = 'declared-wide-v1';
+export const DECLARED_WIDE_READER_RATIO = 1.55;
+export const DECLARED_WIDE_READER_MAX_WIDTH = 1920;
+export const DECLARED_WIDE_REFERENCE_BODY_HORIZONTAL_PX = 64;
+export const DECLARED_WIDE_REFERENCE_DIAGRAM_HORIZONTAL_PX = 30;
 
 export function projectedNodeTextPx(sourceFontPx, viewBoxWidth, diagramWidth = DESKTOP_READER_DIAGRAM_WIDTH) {
   if (![sourceFontPx, viewBoxWidth, diagramWidth].every(Number.isFinite) || viewBoxWidth <= 0 || diagramWidth <= 0) {
@@ -24,3 +29,104 @@ export function minimumReadableSourceTextPx(
   }
   return minimumProjectedPx / Math.min(1, diagramWidth / viewBoxWidth);
 }
+
+// This is deliberately separate from the legacy 930px projection. Architecture
+// boundary convergence depends on that legacy default, while only a recognized
+// v2 wide Reader may use this declared-width proof.
+export function declaredWideReadabilityBudget({
+  viewBoxWidth,
+  viewBoxHeight,
+  minimumSourceTextPx,
+  requestedMinimumTextPx,
+  viewportWidth = DESKTOP_READABILITY_VIEWPORT.width,
+  bodyHorizontalPx = DECLARED_WIDE_REFERENCE_BODY_HORIZONTAL_PX,
+  diagramHorizontalPx = DECLARED_WIDE_REFERENCE_DIAGRAM_HORIZONTAL_PX,
+  minimumReaderWidth = DESKTOP_READER_MIN_WIDTH,
+  maximumReaderWidth = DECLARED_WIDE_READER_MAX_WIDTH,
+} = {}) {
+  const values = [
+    viewBoxWidth, viewBoxHeight, minimumSourceTextPx, requestedMinimumTextPx,
+    viewportWidth, bodyHorizontalPx, diagramHorizontalPx, minimumReaderWidth, maximumReaderWidth,
+  ];
+  if (!values.every(Number.isFinite) || viewBoxWidth <= 0 || viewBoxHeight <= 0
+    || minimumSourceTextPx <= 0 || requestedMinimumTextPx <= 0 || viewportWidth <= 0
+    || bodyHorizontalPx < 0 || diagramHorizontalPx < 0 || minimumReaderWidth <= 0
+    || maximumReaderWidth < minimumReaderWidth || viewBoxWidth / viewBoxHeight < DECLARED_WIDE_READER_RATIO) {
+    return null;
+  }
+  const requestedTargetPx = Math.max(MIN_PROJECTED_NODE_TEXT_PX, requestedMinimumTextPx);
+  const requestedScale = Math.min(1, requestedTargetPx / minimumSourceTextPx);
+  const desiredReaderWidth = Math.max(minimumReaderWidth, viewBoxWidth * requestedScale + diagramHorizontalPx);
+  const viewportCap = Math.max(0, viewportWidth - bodyHorizontalPx);
+  const cap = Math.min(maximumReaderWidth, viewportCap);
+  const actualReaderWidth = Math.min(desiredReaderWidth, cap);
+  const guaranteedSvgWidth = Math.max(0, actualReaderWidth - diagramHorizontalPx);
+  const projectedMinimumTextPx = projectedNodeTextPx(minimumSourceTextPx, viewBoxWidth, guaranteedSvgWidth);
+  const limit = actualReaderWidth < desiredReaderWidth
+    ? (viewportCap <= maximumReaderWidth ? 'viewport-cap' : 'reader-cap')
+    : 'source-size';
+  return {
+    requestedTargetPx,
+    requestedScale,
+    desiredReaderWidth,
+    viewportCap,
+    maximumReaderWidth,
+    actualReaderWidth,
+    guaranteedSvgWidth,
+    projectedMinimumTextPx,
+    hardFloorPx: MIN_PROJECTED_NODE_TEXT_PX,
+    hardFloorMet: projectedMinimumTextPx >= MIN_PROJECTED_NODE_TEXT_PX,
+    requestedTargetMet: projectedMinimumTextPx >= requestedMinimumTextPx,
+    limit,
+  };
+}
+
+// Vertical chrome that always stacks with the SVG at the 1440x900 desktop
+// viewport, measured from the delivered Viewer with the shortest one-line
+// header and no cards: body padding 12, header 39, diagram padding/border 75.
+// Cards are excluded so the prediction stays a lower bound.
+export const DESKTOP_FIXED_VERTICAL_CHROME_PX = Object.freeze({ body: 12, header: 39, diagram: 75 });
+
+// A canvas the Reader can neither narrow (viewBox ratio below the wide
+// threshold) nor scroll readably (no automatic Reader fit) renders at the full
+// reader width, so its page height is a function of the viewBox alone. Returns
+// null when the Reader has a way to fit the page; otherwise the certain
+// overflow at 1440x900 before any cards are counted.
+export function predictedFixedWidthOverflow({
+  viewBoxWidth,
+  viewBoxHeight,
+  readerFit,
+  diagramType,
+  viewport = DESKTOP_READABILITY_VIEWPORT,
+  bodyHorizontalPx = DECLARED_WIDE_REFERENCE_BODY_HORIZONTAL_PX,
+  diagramHorizontalPx = DECLARED_WIDE_REFERENCE_DIAGRAM_HORIZONTAL_PX,
+  chrome = DESKTOP_FIXED_VERTICAL_CHROME_PX,
+} = {}) {
+  if (![viewBoxWidth, viewBoxHeight].every(Number.isFinite) || viewBoxWidth <= 0 || viewBoxHeight <= 0) return null;
+  const ratio = viewBoxWidth / viewBoxHeight;
+  if (readerFit === 'intrinsic-height' || readerFit === 'width-first'
+      || (readerFit === 'authored-height' && diagramType === 'architecture')
+      || ratio >= DECLARED_WIDE_READER_RATIO) return null;
+  const svgWidthPx = viewport.width - bodyHorizontalPx - diagramHorizontalPx;
+  const svgHeightPx = Math.round(svgWidthPx * viewBoxHeight / viewBoxWidth);
+  const fixedChromePx = chrome.body + chrome.header + chrome.diagram;
+  const pageHeightPx = svgHeightPx + fixedChromePx;
+  if (pageHeightPx <= viewport.height) return null;
+  return {
+    viewportWidth: viewport.width,
+    viewportHeight: viewport.height,
+    ratio: Math.round(ratio * 100) / 100,
+    wideRatio: DECLARED_WIDE_READER_RATIO,
+    svgWidthPx,
+    svgHeightPx,
+    fixedChromePx,
+    pageHeightPx,
+    overflowPx: pageHeightPx - viewport.height,
+  };
+}
+
+export function describeFixedWidthOverflow(issue) {
+  const maximumViewBoxHeight = Math.floor(issue.viewBoxWidth / issue.wideRatio);
+  const wideViewBoxWidth = Math.ceil(issue.viewBoxHeight * issue.wideRatio);
+  return `Preserve every node, relationship, and label. This ${issue.viewBoxWidth}x${issue.viewBoxHeight} canvas (ratio ${issue.ratio}) declares no intrinsic-height fit and is below the ${issue.wideRatio} wide ratio, so the desktop Reader can neither narrow it nor accept vertical scroll: it renders ${issue.svgHeightPx}px tall at the full ${issue.svgWidthPx}px width and the page reaches ${issue.pageHeightPx}px before cards against ${issue.viewportHeight}px, a certain visual-check failure. Either compact vertical spacing so meta.viewBox height is at most ${maximumViewBoxHeight} at this width, or spread content sideways so the width is at least ${wideViewBoxWidth} at this height; for architecture and readable-v2 workflow, omitting meta.viewBox lets the renderer size the canvas and declare the fit.`;
+}