@wairon/cli 5.0.2-dev.5 → 5.0.2-dev.7

package/dist/cli/index.js

@@ -65,7 +65,7 @@ var init_defaults = __esm({
       copilot: ".github/prompts",
       codex: ".codex/agents"
     };
-    WAIRON_VERSION = "5.0.2-dev.5";
+    WAIRON_VERSION = "5.0.2-dev.7";
     GITHUB_REPO = "SYW-Apps/Waffle-AIron";
     ARCHITECT_AGENT_ID = "agent-architect";
     ARCHITECT_TEMPLATE_ID = "architect";
@@ -703,7 +703,7 @@ var init_template = __esm({
 });
 
 // src/models/specs.ts
-var import_zod6, SpecIdSchema, SpecStatusSchema, BoundaryItemSchema, RequirementItemSchema, DatabaseSpecSchema, DiagramConfigSchema, SURFACE_AUDIENCES, SurfaceAudienceSchema, SystemPublicInterfaceSchema, SystemSpecSchema, PublicInterfaceTypeSchema, PublicInterfaceSchema, TrustedLinkSchema, LintAllowSchema, LintConfigSchema, ExtDataSchema, LifecycleEntrypointSchema, SubsystemSpecSchema, ComponentTypeSchema, PATTERN_TYPES, PortalTypeSchema, DispatchBindingSchema, DurabilitySchema, PatternRefSchema, EventBindingSchema, ComponentSpecSchema, HttpMethodSchema, TransportSchema, EndpointSchema, SEMANTIC_GUARANTEES, GuaranteeSchema, MethodParamSchema, MethodSignatureSchema, InterfaceSpecSchema, NarrativeStepTypeSchema, LoopKindSchema, SwitchCaseSchema, CatchClauseSchema, ParallelBranchSchema, NarrativeStepSchema, NarrativeDetailSchema, ConformanceTierSchema, MethodImplementationSchema, ImplementationSpecSchema, TypeKindSchema, TypeFieldSchema, TypeMethodSchema, InvariantSchema, TypeSpecSchema, SurfaceOriginSchema, SurfaceTypeDefSchema, SurfaceContractEntrySchema, SurfaceSnapshotSchema, GroupSpecSchema;
+var import_zod6, SpecIdSchema, SpecStatusSchema, BoundaryItemSchema, RequirementItemSchema, DatabaseSpecSchema, DiagramConfigSchema, SURFACE_AUDIENCES, SurfaceAudienceSchema, SystemPublicInterfaceSchema, SystemSpecSchema, PublicInterfaceTypeSchema, PublicInterfaceSchema, TrustedLinkSchema, LintAllowSchema, LintConfigSchema, ExtDataSchema, LifecycleEntrypointSchema, SubsystemSpecSchema, ComponentTypeSchema, PATTERN_TYPES, PortalTypeSchema, DispatchBindingSchema, DurabilitySchema, PatternRefSchema, EventBindingSchema, ExternalLinkTypeSchema, ExternalLinkSchema, ComponentSpecSchema, HttpMethodSchema, TransportSchema, EndpointSchema, SEMANTIC_GUARANTEES, GuaranteeSchema, MethodParamSchema, MethodSignatureSchema, InterfaceSpecSchema, NarrativeStepTypeSchema, LoopKindSchema, SwitchCaseSchema, CatchClauseSchema, ParallelBranchSchema, NarrativeStepSchema, NarrativeDetailSchema, ConformanceTierSchema, MethodImplementationSchema, ImplementationSpecSchema, TypeKindSchema, TypeFieldSchema, TypeMethodSchema, InvariantSchema, TypeSpecSchema, SurfaceOriginSchema, SurfaceTypeDefSchema, SurfaceContractEntrySchema, SurfaceSnapshotSchema, GroupSpecSchema;
 var init_specs = __esm({
   "src/models/specs.ts"() {
     "use strict";
@@ -907,6 +907,13 @@ var init_specs = __esm({
       event: import_zod6.z.string().optional(),
       description: import_zod6.z.string().optional()
     });
+    ExternalLinkTypeSchema = import_zod6.z.enum(["implementation", "informative"]);
+    ExternalLinkSchema = import_zod6.z.object({
+      url: import_zod6.z.string(),
+      /** Defaults to 'informative' so an untyped link never silently satisfies the source requirement. */
+      type: ExternalLinkTypeSchema.default("informative"),
+      label: import_zod6.z.string().optional()
+    });
     ComponentSpecSchema = import_zod6.z.object({
       id: SpecIdSchema,
       name: import_zod6.z.string(),
@@ -932,6 +939,11 @@ var init_specs = __esm({
       patterns: import_zod6.z.array(PatternRefSchema).optional(),
       /** Optional component variant — a declared, base-anchored specialization of this component's stereotype (resolved against the variant registry; UNKNOWN_VARIANT / VARIANT_BASE_MISMATCH). */
       variant: import_zod6.z.string().optional(),
+      /** Opaque external references (see ExternalLinkSchema) — documented URLs wairon does
+       *  not fetch or validate. An `implementation` link is the external source-of-record and
+       *  satisfies the source requirement for a source-less implementation (suppresses
+       *  MISSING_SOURCE_PATH); `informative` links are context only. */
+      externalLinks: import_zod6.z.array(ExternalLinkSchema).optional(),
       /** Per-spec lint suppressions (see LintConfigSchema). */
       lint: LintConfigSchema.optional(),
       /** Opaque pack/tool extension data (see ExtDataSchema) — preserved verbatim. */
@@ -2652,6 +2664,7 @@ function buildCanvasModel(issues = []) {
       ...ownerOf.has(comp.id) ? { owner: ownerOf.get(comp.id) } : {},
       owns: comp.owns.filter((o) => componentIds.has(o)),
       dependsOn: comp.dependsOn,
+      ...comp.externalLinks && comp.externalLinks.length ? { externalLinks: comp.externalLinks } : {},
       interfaces: compInterfaces.map((i) => ({
         id: i.id,
         name: i.name,
@@ -6072,6 +6085,14 @@ var MODEL = __MODEL_JSON__;
     if (!exposes || !openApiAllowed()) return '';
     return '<div class="openbtn"><button class="tbtn" data-openapi-tag="' + esc(tag || '') + '">\\u25A4 View OpenAPI \\u2197</button></div>';
   }
+  // "Open in Specs" \u2014 deep-links the focused spec into the hosted Specs value
+  // editor via a host hook (opts.onOpenSpec). Hidden when no host provides it
+  // (standalone file, shared page): those have no editor to open. kind is the
+  // spec layer, id its qualified spec id.
+  function openSpecButton(kind, id) {
+    if (typeof opts === 'undefined' || !opts || typeof opts.onOpenSpec !== 'function') return '';
+    return '<div class="openbtn"><button class="tbtn" data-openspec-kind="' + kind + '" data-openspec-id="' + esc(id) + '">\\u270E Open in Specs \\u2197</button></div>';
+  }
 
   function renderPanel() {
     var head = '', body = '';
@@ -6094,7 +6115,8 @@ var MODEL = __MODEL_JSON__;
         + (scopeFocus ? staticChip('current view') : '')
         + chip(c.subsystem, 'subsystem', c.subsystem)
         + (scopeFocus ? '' : openViewButton('component', c.id, c.owns.length > 0))
-        + openApiButton(componentExposesApi(c), c.apiTag);
+        + openApiButton(componentExposesApi(c), c.apiTag)
+        + openSpecButton('component', c.id);
       
       var linkedTypes = MODEL.types.filter(function (t) { return t.componentClass === c.id; });
       if (linkedTypes.length) {
@@ -6104,6 +6126,14 @@ var MODEL = __MODEL_JSON__;
       }
       body += '<p class="desc">' + esc(c.description) + '</p>';
 
+      if (c.externalLinks && c.externalLinks.length) {
+        body += section('External links', c.externalLinks.length, c.externalLinks.map(function (l) {
+          var label = l.label || l.url;
+          var tag = l.type === 'implementation' ? staticChip('source') : '';
+          return '<div class="method">' + tag + '<a href="' + esc(l.url) + '" target="_blank" rel="noopener" style="color:var(--accent);word-break:break-all">' + esc(label) + ' \\u2197</a></div>';
+        }).join(''), true);
+      }
+
       var depInner = (c.dependsOn.length ? c.dependsOn.map(function (d) { return chip(d, 'component', d); }).join('') : '<span class="desc">none</span>')
         + (c.owns.length ? '<div style="margin-top:8px"><b style="font-size:11px">Owns:</b><br>' + c.owns.map(function (d) { return chip(d, 'component', d); }).join('') + '</div>' : '');
       body += section('Dependencies', c.dependsOn.length + c.owns.length, depInner, true);
@@ -6178,7 +6208,8 @@ var MODEL = __MODEL_JSON__;
       MODEL.types.forEach(function (t2) { if (t2.id === focusId) ty = t2; });
       if (ty) {
         head = '<h2>' + esc(ty.name) + '</h2>' + staticChip('\\u00AB' + ty.kind + '\\u00BB')
-          + (ty.subsystem ? chip(ty.subsystem, 'subsystem', ty.subsystem) : staticChip('system-level shared'));
+          + (ty.subsystem ? chip(ty.subsystem, 'subsystem', ty.subsystem) : staticChip('system-level shared'))
+          + openSpecButton('type', ty.id);
         
         if (ty.componentClass) {
           head += '<div style="margin-top:6px"><b style="font-size:11px">Class Component:</b> ' + chip(ty.componentClass, 'component', ty.componentClass) + '</div>';
@@ -6254,7 +6285,8 @@ var MODEL = __MODEL_JSON__;
         + (s.status ? staticChip(s.status) : '')
         + (scopeFocus ? staticChip('current view') : '')
         + (scopeFocus ? '' : openViewButton('subsystem', s.id, subKids > 0))
-        + openApiButton(subsystemExposesApi(s.id), '');
+        + openApiButton(subsystemExposesApi(s.id), '')
+        + openSpecButton('subsystem', s.id);
       body += '<p class="desc">' + esc(s.description) + '</p>';
       if (s.trustedLinks.length) {
         body += section('Trusted links (fast lanes)', s.trustedLinks.length, s.trustedLinks.map(function (t2) {
@@ -6312,6 +6344,16 @@ var MODEL = __MODEL_JSON__;
         });
       })(oapis[oi]);
     }
+    var ospecs = panel.querySelectorAll('[data-openspec-kind]');
+    for (var si = 0; si < ospecs.length; si++) {
+      (function (b) {
+        b.addEventListener('click', function () {
+          if (typeof opts !== 'undefined' && opts && typeof opts.onOpenSpec === 'function') {
+            opts.onOpenSpec(b.getAttribute('data-openspec-kind'), b.getAttribute('data-openspec-id') || '');
+          }
+        });
+      })(ospecs[si]);
+    }
     var flows = panel.querySelectorAll('[data-flow-comp]');
     for (var j = 0; j < flows.length; j++) {
       (function (b) {
@@ -6324,6 +6366,23 @@ var MODEL = __MODEL_JSON__;
   }
 
   renderPanel();
+  // Stage G: a deep link may focus a component and/or open a method's narrative
+  // modal once the seeded view + DOM + cy graph exist. The host parses the URL hash
+  // into opts.initialSelect / opts.initialFlow \u2014 both carry the component id, so this
+  // works whether the seeded view is the component itself or its parent subsystem
+  // (a leaf component has no meaningful "inside", so Specs deep-links open the parent
+  // and focus the component here).
+  (function () {
+    if (typeof opts === 'undefined' || !opts) return;
+    var f = opts.initialFlow, s = opts.initialSelect;
+    var focusComp = (f && f.comp) || (s && s.comp);
+    if (focusComp && compById[focusComp]) {
+      try { select('component', focusComp, true); } catch (e) { /* ignore */ }
+    }
+    if (f && f.comp && f.method && compById[f.comp]) {
+      try { openFlow(f.comp, f.method, f.mode === 'steps' ? 'steps' : 'flow'); } catch (e) { /* ignore */ }
+    }
+  })();
 })();
 </script>
 </body>
@@ -8436,13 +8495,16 @@ var init_conformance = __esm({
           if (isInChainedSubproject(component.subsystem, ctx)) continue;
           const draft = ctx.isImplementationDraft(impl);
           if (!impl.sourcePath) {
-            ctx.addIssue(
-              "warning",
-              "MISSING_SOURCE_PATH",
-              `Implementation "${impl.id}" declares no sourcePath \u2014 its contract "${impl.contract}" cannot be structurally checked against code.`,
-              impl.id,
-              draft
-            );
+            const hasExternalSource = (component.externalLinks ?? []).some((l) => l.type === "implementation");
+            if (!hasExternalSource) {
+              ctx.addIssue(
+                "warning",
+                "MISSING_SOURCE_PATH",
+                `Implementation "${impl.id}" declares no sourcePath \u2014 its contract "${impl.contract}" cannot be structurally checked against code.`,
+                impl.id,
+                draft
+              );
+            }
             continue;
           }
           const lookup = lookups.get(normalizeSourcePath(impl.sourcePath));
@@ -12705,6 +12767,28 @@ function buildGraphModel(level) {
       ...t.subsystem ? { parentId: t.subsystem } : {}
     });
   }
+  const componentByInterface = /* @__PURE__ */ new Map();
+  for (const c of model.components) {
+    for (const intf of c.interfaces) componentByInterface.set(intf.id, c.id);
+  }
+  for (const impl of loadImplementationSpecs()) {
+    const componentId = componentByInterface.get(impl.contract);
+    if (!componentId) continue;
+    nodes.push({
+      id: impl.id,
+      label: impl.name,
+      kind: "implementation",
+      level: 4,
+      parentId: componentId,
+      ...impl.status ? { status: impl.status } : {}
+    });
+    candidates.push({ from: componentId, to: impl.id, edgeKind: "owns" });
+  }
+  for (const c of model.components) {
+    for (const memberId of c.owns) {
+      candidates.push({ from: c.id, to: memberId, edgeKind: "owns" });
+    }
+  }
   for (const e of model.edges) {
     candidates.push({ from: e.from, to: e.to, edgeKind: "depends_on" });
   }
@@ -27670,6 +27754,7 @@ function removeIdentityProviderRecord(dataDir, id) {
 }
 var PROJECT_CREATE_CAPABILITY = "project:create";
 var PROJECT_WRITE_CAPABILITY = "project:write";
+var PROJECT_READ_CAPABILITY = "project:read";
 var POLICY_MANAGE_CAPABILITY = "project:admin";
 function carriesInstancePermission(cfg, principal, capability) {
   return authorize(cfg.dataDir, principal, capability, "instance", "").value === "yes";
@@ -27734,6 +27819,19 @@ function recordProjectProfileSelection(root, selection) {
     writeYamlFile(AI_PATHS.projectConfig(), raw);
   });
 }
+function readProjectType(root) {
+  return runWithProjectRoot(root, () => {
+    const raw = readYamlFile(AI_PATHS.projectConfig());
+    return raw?.projectType ?? "backend";
+  });
+}
+function writeProjectType(root, projectType) {
+  runWithProjectRoot(root, () => {
+    const raw = readYamlFile(AI_PATHS.projectConfig()) ?? {};
+    raw["projectType"] = projectType;
+    writeYamlFile(AI_PATHS.projectConfig(), raw);
+  });
+}
 function requestPackNames(request) {
   const sel = request.profileSelection;
   if (!sel) return [];
@@ -27928,6 +28026,32 @@ function reconcileProjectPolicy(cfg, credential, projectId) {
   );
   return result;
 }
+function getProjectConfig(cfg, credential, projectId) {
+  const principal = requirePrincipal4(cfg, credential);
+  if (authorize(cfg.dataDir, principal, PROJECT_READ_CAPABILITY, "project", projectId).value !== "yes") {
+    throw new ForbiddenError(
+      "reading a project's configuration requires project:read over the project"
+    );
+  }
+  const root = resolveProjectRoot(cfg.dataDir, principal, projectId);
+  if (!root) throw new Error(`Unknown project "${projectId}".`);
+  const projectType = readProjectType(root);
+  const locked = runWithProjectRoot(root, () => hostCore.readLockRecord() !== null);
+  return { projectType, locked };
+}
+function setProjectType(cfg, credential, projectId, projectType) {
+  const principal = requirePrincipal4(cfg, credential);
+  if (authorize(cfg.dataDir, principal, PROJECT_WRITE_CAPABILITY, "project", projectId).value !== "yes") {
+    throw new ForbiddenError(
+      "changing a project's configuration requires project:write over the project"
+    );
+  }
+  const root = resolveProjectRoot(cfg.dataDir, principal, projectId);
+  if (!root) throw new Error(`Unknown project "${projectId}".`);
+  writeProjectType(root, projectType);
+  const locked = runWithProjectRoot(root, () => hostCore.readLockRecord() !== null);
+  return { projectType, locked };
+}
 function getPackPolicy(cfg, credential) {
   requirePrincipal4(cfg, credential);
   return getPackPolicyRecord(cfg.dataDir) ?? PERMISSIVE_DEFAULT_POLICY;
@@ -27991,7 +28115,7 @@ function handlePolicyRequest(cfg, credential, req, res, body, url) {
 
 // src/server/identity.ts
 var PROJECT_ADMIN_CAPABILITY2 = "project:admin";
-var PROJECT_READ_CAPABILITY = "project:read";
+var PROJECT_READ_CAPABILITY2 = "project:read";
 var PROJECT_WRITE_CAPABILITY2 = "project:write";
 function requireInstanceProjectAdmin(cfg, principal, what) {
   if (authorize(cfg.dataDir, principal, PROJECT_ADMIN_CAPABILITY2, "instance", "").value !== "yes") {
@@ -28137,7 +28261,7 @@ function revokeToken(cfg, credential, tokenId) {
 }
 function mintSelfToken(cfg, credential, projectId, write) {
   const principal = requirePrincipal5(cfg, credential);
-  if (authorize(cfg.dataDir, principal, PROJECT_READ_CAPABILITY, "project", projectId).value !== "yes") {
+  if (authorize(cfg.dataDir, principal, PROJECT_READ_CAPABILITY2, "project", projectId).value !== "yes") {
     throw new ForbiddenError("caller lacks project:read on the requested project");
   }
   if (write && authorize(cfg.dataDir, principal, PROJECT_WRITE_CAPABILITY2, "project", projectId).value !== "yes") {
@@ -28783,7 +28907,7 @@ function audienceDistance(resolution, targetProjectId) {
 // src/server/landscape.ts
 var yamlLib = __toESM(require("js-yaml"));
 var PROJECT_ADMIN_CAPABILITY3 = "project:admin";
-var PROJECT_READ_CAPABILITY2 = "project:read";
+var PROJECT_READ_CAPABILITY3 = "project:read";
 var PROJECT_WRITE_CAPABILITY3 = "project:write";
 function requirePrincipal6(cfg, credential) {
   const principal = authenticateCredential(cfg.dataDir, credential);
@@ -28797,7 +28921,7 @@ function readView(cfg, principal) {
   if (isInstanceAdmin(principal)) {
     return { all: true, projectIds: /* @__PURE__ */ new Set(), unitIds: /* @__PURE__ */ new Set(), contextUnitIds: /* @__PURE__ */ new Set() };
   }
-  const read = visibleScopes(cfg.dataDir, principal, PROJECT_READ_CAPABILITY2);
+  const read = visibleScopes(cfg.dataDir, principal, PROJECT_READ_CAPABILITY3);
   const admin = visibleScopes(cfg.dataDir, principal, PROJECT_ADMIN_CAPABILITY3);
   const unitIds = /* @__PURE__ */ new Set([...actionableUnitIds(read), ...actionableUnitIds(admin)]);
   const contextUnitIds = new Set(
@@ -28812,13 +28936,13 @@ function readView(cfg, principal) {
 }
 function requireLandscapeReach(cfg, principal, view, what) {
   if (view.all || view.projectIds.size > 0 || view.unitIds.size > 0) return;
-  if (permitsCap(cfg, principal, PROJECT_READ_CAPABILITY2, "instance", "") || permitsCap(cfg, principal, PROJECT_ADMIN_CAPABILITY3, "instance", "")) {
+  if (permitsCap(cfg, principal, PROJECT_READ_CAPABILITY3, "instance", "") || permitsCap(cfg, principal, PROJECT_ADMIN_CAPABILITY3, "instance", "")) {
     return;
   }
   throw new ForbiddenError(`${what} requires project:read reach`);
 }
 function requireObserverScope(cfg, principal, observerProjectId) {
-  const covered = permitsCap(cfg, principal, PROJECT_READ_CAPABILITY2, "project", observerProjectId) || permitsCap(cfg, principal, PROJECT_WRITE_CAPABILITY3, "project", observerProjectId);
+  const covered = permitsCap(cfg, principal, PROJECT_READ_CAPABILITY3, "project", observerProjectId) || permitsCap(cfg, principal, PROJECT_WRITE_CAPABILITY3, "project", observerProjectId);
   if (!covered) {
     throw new ForbiddenError("caller lacks scope over the current project");
   }
@@ -30876,6 +31000,12 @@ function evaluateProjectPolicy2(cfg, credential, projectId) {
 function reconcileProjectPolicy2(cfg, credential, projectId) {
   return reconcileProjectPolicy(cfg, credential, projectId);
 }
+function getProjectConfig2(cfg, credential, projectId) {
+  return getProjectConfig(cfg, credential, projectId);
+}
+function setProjectType2(cfg, credential, projectId, projectType) {
+  return setProjectType(cfg, credential, projectId, projectType);
+}
 function listProducers2(cfg, credential, project2) {
   return listProducers(cfg, credential, project2);
 }
@@ -34178,6 +34308,12 @@ function opsPolicyEvaluate(cfg, sessionId, url, res) {
 function opsPolicyReconcile(cfg, sessionId, body, res) {
   sendJson(res, 200, reconcileProjectPolicy2(cfg, sessionId, String(body?.projectId ?? "")));
 }
+function opsGetProjectConfig(cfg, sessionId, url, res) {
+  sendJson(res, 200, getProjectConfig2(cfg, sessionId, q(url, "projectId") ?? ""));
+}
+function opsSetProjectConfig(cfg, sessionId, body, res) {
+  sendJson(res, 200, setProjectType2(cfg, sessionId, String(body?.projectId ?? ""), String(body?.projectType ?? "")));
+}
 function opsListProducers(cfg, sessionId, url, res) {
   sendJson(res, 200, { producers: listProducers2(cfg, sessionId, q(url, "projectId") ?? "") });
 }
@@ -34410,6 +34546,12 @@ async function handleWebRequest(cfg, req, res, body, url, ctx) {
       if (req.method === "POST" && parts.length === 4 && parts[2] === "packs" && parts[3] === "adopt") {
         return opsAdoptProjectPack(cfg, sessionId, body, res);
       }
+      if (req.method === "GET" && parts.length === 3 && parts[2] === "config") {
+        return opsGetProjectConfig(cfg, sessionId, url, res);
+      }
+      if (req.method === "POST" && parts.length === 3 && parts[2] === "config") {
+        return opsSetProjectConfig(cfg, sessionId, body, res);
+      }
       if (req.method === "GET" && parts.length === 3 && parts[2] === "policy") {
         return opsPolicyEvaluate(cfg, sessionId, url, res);
       }