@wairon/cli 5.1.1-dev.52 → 5.1.1-dev.53

package/dist/index.js

@@ -1233,7 +1233,7 @@ var init_defaults = __esm({
       copilot: ".github/prompts",
       codex: ".codex/agents"
     };
-    WAIRON_VERSION = "5.1.1-dev.52";
+    WAIRON_VERSION = "5.1.1-dev.53";
     GITHUB_REPO = "SYW-Apps/Waffle-AIron";
     ARCHITECT_AGENT_ID = "agent-architect";
     ARCHITECT_TEMPLATE_ID = "architect";
@@ -17994,92 +17994,6 @@ var init_surfaces = __esm({
   }
 });
 
-// src/core/approval.ts
-function digest(content) {
-  const normalized = content.replace(/\r\n/g, "\n");
-  return crypto4.createHash("sha256").update(normalized, "utf8").digest("hex");
-}
-function currentSpecDigests(root = getProjectRoot()) {
-  const mountDirs = loadSubsystemSpecs().filter((s) => s.projectPath && !s.id.includes("::")).map((s) => `${path15.resolve(root, s.projectPath).split(path15.sep).join("/")}/`);
-  const out = {};
-  for (const [abs, content] of snapshotSpecFiles()) {
-    const normalized = path15.resolve(abs).split(path15.sep).join("/");
-    if (mountDirs.some((dir) => normalized.startsWith(dir))) continue;
-    out[path15.relative(root, abs).split(path15.sep).join("/")] = digest(content);
-  }
-  return out;
-}
-function captureApprovedSpecs(root = getProjectRoot(), scope) {
-  const current2 = currentSpecDigests(root);
-  if (!scope) return current2;
-  const previous = readLockRecord()?.specs ?? {};
-  const specs = { ...previous };
-  for (const rel2 of Object.keys(previous)) {
-    if (scope.paths.has(rel2) && current2[rel2] === void 0) delete specs[rel2];
-  }
-  for (const rel2 of scope.paths) {
-    if (current2[rel2] !== void 0) specs[rel2] = current2[rel2];
-  }
-  return specs;
-}
-function diffAgainstApproval(root = getProjectRoot()) {
-  const approved = approvedSpecs(root);
-  if (!approved) return null;
-  const current2 = currentSpecDigests(root);
-  const added = [];
-  const changed = [];
-  const removed = [];
-  const unchangedPaths = [];
-  for (const [rel2, d] of Object.entries(current2)) {
-    const before = approved[rel2];
-    if (before === void 0) added.push(rel2);
-    else if (before !== d) changed.push(rel2);
-    else unchangedPaths.push(rel2);
-  }
-  for (const rel2 of Object.keys(approved)) {
-    if (current2[rel2] === void 0) removed.push(rel2);
-  }
-  return {
-    added: added.sort(),
-    changed: changed.sort(),
-    removed: removed.sort(),
-    unchangedPaths: unchangedPaths.sort()
-  };
-}
-function approvedSpecs(root) {
-  return approvalRecord(root)?.specs ?? null;
-}
-function approvalRecord(root = getProjectRoot()) {
-  return readLockRecordAt(root);
-}
-function settledSpecPaths(root = getProjectRoot()) {
-  const diff = diffAgainstApproval(root);
-  return diff ? new Set(diff.unchangedPaths) : null;
-}
-function pinOf(stateId) {
-  return `${stateId.algorithm}:${stateId.digest}`;
-}
-function currentChildPins(mounts, root = getProjectRoot()) {
-  const pins = {};
-  for (const mount of mounts) {
-    if (!mount.projectPath || mount.id.includes("::")) continue;
-    const child = readLockRecordAt(path15.resolve(root, mount.projectPath));
-    if (child) pins[mount.id] = pinOf(child.stateId);
-  }
-  return pins;
-}
-var crypto4, path15;
-var init_approval = __esm({
-  "src/core/approval.ts"() {
-    "use strict";
-    crypto4 = __toESM(require("crypto"));
-    path15 = __toESM(require("path"));
-    init_fs();
-    init_specs2();
-    init_lockfile();
-  }
-});
-
 // src/core/validation.ts
 function loadProjectConfig2() {
   return loadProjectConfig();
@@ -18361,13 +18275,13 @@ function validateSddTree(rulesOrOptions, projectType = "backend") {
 function resolveThroughParent(boundRoot, treatAllAsComplete, childRules) {
   const reach = getRequestParentReach();
   if (reach && !reach.parentReach) return null;
-  const ceiling = reach?.topRoot ? path16.resolve(reach.topRoot) : void 0;
+  const ceiling = reach?.topRoot ? path15.resolve(reach.topRoot) : void 0;
   const chain = [];
-  let top = path16.resolve(boundRoot);
+  let top = path15.resolve(boundRoot);
   while (top !== ceiling) {
     const hop = findChainingParent(top, ceiling);
     if (!hop) break;
-    const next = path16.resolve(hop.parentRoot);
+    const next = path15.resolve(hop.parentRoot);
     if (ceiling && !isWithinOrEqual(ceiling, next)) break;
     chain.unshift(hop.subsystemId);
     top = next;
@@ -18414,8 +18328,8 @@ function isIdChar(ch) {
   return ch >= "a" && ch <= "z" || ch >= "A" && ch <= "Z" || ch >= "0" && ch <= "9" || ch === "_" || ch === "-" || ch === "." || ch === ":";
 }
 function isWithinOrEqual(dir, target) {
-  const rel2 = path16.relative(dir, target);
-  return rel2 === "" || !rel2.startsWith("..") && !path16.isAbsolute(rel2);
+  const rel2 = path15.relative(dir, target);
+  return rel2 === "" || !rel2.startsWith("..") && !path15.isAbsolute(rel2);
 }
 function dedupeIssues(list) {
   const seen = /* @__PURE__ */ new Set();
@@ -18436,7 +18350,7 @@ function settledStatusBearing(loaded) {
   if (!settled || settled.size === 0) return [];
   const root = getProjectRoot();
   const index = scanAllSpecs();
-  const rel2 = (abs) => path16.relative(root, abs).split(path16.sep).join("/");
+  const rel2 = (abs) => path15.relative(root, abs).split(path15.sep).join("/");
   const out = [];
   const take = (specs, paths) => {
     for (const spec of specs) {
@@ -18466,7 +18380,7 @@ function computeGateStateId() {
   registerBuiltinRules();
   return computeGateIdentity(content, extensions, ruleSequence(), inputs, gate);
 }
-var path16, RESOLUTION_FAILURE_CODES, SEVERITY_RANK;
+var path15, RESOLUTION_FAILURE_CODES, SEVERITY_RANK;
 var init_validation = __esm({
   "src/core/validation.ts"() {
     "use strict";
@@ -18482,8 +18396,8 @@ var init_validation = __esm({
     init_source_analysis();
     init_specs2();
     init_fs();
-    path16 = __toESM(require("path"));
-    init_approval();
+    path15 = __toESM(require("path"));
+    init_core();
     RESOLUTION_FAILURE_CODES = /* @__PURE__ */ new Set([
       "UNDEFINED_TYPE_REFERENCE",
       "INVALID_DEPENDENCY_REFERENCE",
@@ -19125,42 +19039,42 @@ function rebaseReference(ref, mount, direction, isMoved = () => false) {
   return relativizeId(travels ? qualifyId(left, to, NO_ROOT_SUBSYSTEMS) : target, to);
 }
 function isWithin(dir, file) {
-  const d = path17.resolve(dir);
-  const f = path17.resolve(file);
-  return f === d || f.startsWith(d + path17.sep);
+  const d = path16.resolve(dir);
+  const f = path16.resolve(file);
+  return f === d || f.startsWith(d + path16.sep);
 }
 function canonicalPath(target) {
-  let existing = path17.resolve(target);
+  let existing = path16.resolve(target);
   const rest = [];
   for (; ; ) {
     try {
       fs12.lstatSync(existing);
       break;
     } catch {
-      const up = path17.dirname(existing);
-      if (up === existing) return path17.resolve(target);
-      rest.unshift(path17.basename(existing));
+      const up = path16.dirname(existing);
+      if (up === existing) return path16.resolve(target);
+      rest.unshift(path16.basename(existing));
       existing = up;
     }
   }
   try {
-    return path17.join(fs12.realpathSync.native(existing), ...rest);
+    return path16.join(fs12.realpathSync.native(existing), ...rest);
   } catch {
     return null;
   }
 }
 function chainDirKey(dir) {
-  return canonicalPath(dir) ?? path17.resolve(dir);
+  return canonicalPath(dir) ?? path16.resolve(dir);
 }
 function projectPathEscapesRoot(projectRoot, projectPath, resolvedChildDir) {
-  if (path17.isAbsolute(projectPath) || !isWithin(projectRoot, resolvedChildDir)) return true;
+  if (path16.isAbsolute(projectPath) || !isWithin(projectRoot, resolvedChildDir)) return true;
   const root = canonicalPath(projectRoot);
   const child = canonicalPath(resolvedChildDir);
   return root === null || child === null || !isWithin(root, child);
 }
 function assertContainedProjectPath(projectRoot, projectPath) {
-  const root = path17.resolve(projectRoot);
-  const resolved = path17.resolve(root, projectPath);
+  const root = path16.resolve(projectRoot);
+  const resolved = path16.resolve(root, projectPath);
   if (projectPathEscapesRoot(root, projectPath, resolved)) {
     throw new Error(
       `projectPath "${projectPath}" must resolve within the project root "${root}", but resolves to "${resolved}"; absolute, ../-escaping and link-escaping paths are rejected so a chained subproject is always contained by its parent.`
@@ -19171,12 +19085,12 @@ function assertContainedProjectPath(projectRoot, projectPath) {
 function findChainingParent(childRoot, ceiling) {
   let childResolved;
   try {
-    childResolved = path17.resolve(childRoot);
+    childResolved = path16.resolve(childRoot);
   } catch {
     return null;
   }
-  const bound2 = ceiling ? path17.resolve(ceiling) : void 0;
-  let dir = path17.dirname(childResolved);
+  const bound2 = ceiling ? path16.resolve(ceiling) : void 0;
+  let dir = path16.dirname(childResolved);
   for (let hops = 0; hops < 32; hops++) {
     if (bound2 && !isWithin(bound2, dir)) break;
     const specsDir = aiPathsAt(dir).specsDir();
@@ -19192,7 +19106,7 @@ function findChainingParent(childRoot, ceiling) {
           const projectPath = raw.projectPath;
           if (typeof projectPath === "string" && projectPath.trim() !== "") {
             try {
-              const mountDir = path17.resolve(dir, projectPath);
+              const mountDir = path16.resolve(dir, projectPath);
               if (mountDir === childResolved && !projectPathEscapesRoot(dir, projectPath, mountDir)) {
                 const id = raw.id;
                 return { parentRoot: dir, subsystemId: typeof id === "string" ? id : "?" };
@@ -19203,14 +19117,14 @@ function findChainingParent(childRoot, ceiling) {
         }
       }
     }
-    const up = path17.dirname(dir);
+    const up = path16.dirname(dir);
     if (up === dir) break;
     dir = up;
   }
   return null;
 }
 function inspectChainedRoots(rootDir = getProjectRoot()) {
-  const root = path17.resolve(rootDir);
+  const root = path16.resolve(rootDir);
   const inspection = { roots: [], skipped: [] };
   const listed = /* @__PURE__ */ new Set();
   const walk2 = (projectDir, prefix, ancestors, depth) => {
@@ -19229,7 +19143,7 @@ function inspectChainedRoots(rootDir = getProjectRoot()) {
       const localId = typeof id === "string" ? id : "?";
       let childDir;
       try {
-        childDir = path17.resolve(projectDir, projectPath);
+        childDir = path16.resolve(projectDir, projectPath);
       } catch {
         continue;
       }
@@ -19246,7 +19160,7 @@ function inspectChainedRoots(rootDir = getProjectRoot()) {
       const key = chainDirKey(childDir);
       if (listed.has(key)) continue;
       listed.add(key);
-      inspection.roots.push(path17.relative(root, childDir).split(path17.sep).join("/"));
+      inspection.roots.push(path16.relative(root, childDir).split(path16.sep).join("/"));
       walk2(childDir, prefix ? `${prefix}::${localId}` : localId, /* @__PURE__ */ new Set([...ancestors, key]), depth + 1);
     }
   };
@@ -19332,9 +19246,9 @@ function stripNamespaceFromImplementation(spec, prefix) {
 }
 function childRelativeFilePaths(spec, authoringRoot, childRoot) {
   const reexpress = (p) => {
-    if (path17.isAbsolute(p)) return p;
-    const rel2 = path17.relative(childRoot, path17.resolve(authoringRoot, p));
-    const inside = rel2 !== "" && rel2 !== ".." && !rel2.startsWith(`..${path17.sep}`) && !path17.isAbsolute(rel2);
+    if (path16.isAbsolute(p)) return p;
+    const rel2 = path16.relative(childRoot, path16.resolve(authoringRoot, p));
+    const inside = rel2 !== "" && rel2 !== ".." && !rel2.startsWith(`..${path16.sep}`) && !path16.isAbsolute(rel2);
     return inside ? rel2.replace(/\\/g, "/") : p;
   };
   return {
@@ -19369,9 +19283,9 @@ function findOwner(id, components) {
   }) ?? null;
 }
 function moveComponentFolder(fromDir, toDir) {
-  if (path17.normalize(fromDir) === path17.normalize(toDir)) return false;
+  if (path16.normalize(fromDir) === path16.normalize(toDir)) return false;
   if (!fs12.existsSync(fromDir) || fs12.existsSync(toDir)) return false;
-  ensureDir(path17.dirname(toDir));
+  ensureDir(path16.dirname(toDir));
   fs12.renameSync(fromDir, toDir);
   return true;
 }
@@ -19787,7 +19701,7 @@ function refusedMoveSummary(from, to, methods, refusals, alternatives) {
   return `Refused: moving ${namedMethods(methods)} from "${from}" to "${to}" is refused by ${refusals.join(", ")}. Nothing was written. ` + (cheapest ? `The cheapest legal home is "${cheapest.component}" (${cheapest.newDependencies.length} new dependenc${cheapest.newDependencies.length === 1 ? "y" : "ies"}, ${cheapest.dependencyCount} of ${cheapest.dependencyLimit}).` : `No component of this subsystem can take them as they stand \u2014 ${alternatives.length} were weighed.`);
 }
 function workspaceFor(rootDir) {
-  const key = path17.resolve(rootDir);
+  const key = path16.resolve(rootDir);
   let ws = workspaces.get(key);
   if (!ws) {
     ws = new SpecWorkspace(key);
@@ -19917,13 +19831,13 @@ function snapshotInputKey(snapshot) {
   return canonicalize(content);
 }
 function consumedSurfaceInputsAt(rootDir) {
-  const dir = path17.join(rootDir, ".wai", "surfaces");
+  const dir = path16.join(rootDir, ".wai", "surfaces");
   if (!pathExists(dir)) return [];
   const keys = [];
   for (const file of fs12.readdirSync(dir)) {
     if (!file.endsWith(".yaml") && !file.endsWith(".yml")) continue;
     try {
-      keys.push(snapshotInputKey(SurfaceSnapshotSchema.parse(readYamlFile(path17.join(dir, file)))));
+      keys.push(snapshotInputKey(SurfaceSnapshotSchema.parse(readYamlFile(path16.join(dir, file)))));
     } catch {
     }
   }
@@ -19931,7 +19845,7 @@ function consumedSurfaceInputsAt(rootDir) {
 }
 function consumedContractInputs() {
   const root = getProjectRoot();
-  const roots = [root, ...listChainedRoots(root).map((rel2) => path17.join(root, rel2))];
+  const roots = [root, ...listChainedRoots(root).map((rel2) => path16.join(root, rel2))];
   return roots.flatMap(consumedSurfaceInputsAt);
 }
 function readLockState(current2) {
@@ -19967,7 +19881,7 @@ function markSelectionsBundled(bundled) {
   projectConfigRepository.markSelectionsBundled(bundled);
 }
 function computeStateIdAt(root) {
-  const resolved = path17.resolve(root);
+  const resolved = path16.resolve(root);
   return runWithProjectRoot(resolved, () => {
     workspaceFor(resolved).invalidate();
     const system = loadSystemSpec();
@@ -20017,12 +19931,12 @@ function updateSpec(kind, id, delta, hooks, dryRun) {
 function moveMethods(from, to, methods, hooks, dryRun) {
   return current().moveMethods(from, to, methods, hooks, dryRun);
 }
-var fs12, path17, NO_ROOT_SUBSYSTEMS, SIGNATURE_TTL_MS, COMPONENT_AUTH_SOURCE, DELTA_VERBS, JUMP_LABEL_TWINS, LABEL_TWIN_CONTAINERS, SpecWorkspace, DEFAULT_DEPENDENCY_LIMIT, PROSE_FIELDS, workspaces;
+var fs12, path16, NO_ROOT_SUBSYSTEMS, SIGNATURE_TTL_MS, COMPONENT_AUTH_SOURCE, DELTA_VERBS, JUMP_LABEL_TWINS, LABEL_TWIN_CONTAINERS, SpecWorkspace, DEFAULT_DEPENDENCY_LIMIT, PROSE_FIELDS, workspaces;
 var init_specs2 = __esm({
   "src/core/specs.ts"() {
     "use strict";
     fs12 = __toESM(require("fs"));
-    path17 = __toESM(require("path"));
+    path16 = __toESM(require("path"));
     init_loader();
     init_project_config();
     init_fs();
@@ -20057,7 +19971,7 @@ var init_specs2 = __esm({
         this.rootSubsystems = /* @__PURE__ */ new Set();
         this.scanVisitedSpecDirs = [];
         this.loaderIssues = [];
-        this.rootDir = path17.resolve(rootDir);
+        this.rootDir = path16.resolve(rootDir);
         this.paths = aiPathsAt(this.rootDir);
       }
       invalidate() {
@@ -20100,8 +20014,8 @@ var init_specs2 = __esm({
        * qualifies the spec itself — so scoping a validate to a mount keeps it.
        */
       loaderIssueSpecId(file, rawId, namespacePrefix) {
-        const stem = path17.basename(file, ".yaml");
-        const local = rawId ?? (stem.startsWith(".") ? path17.basename(path17.dirname(file)) : stem);
+        const stem = path16.basename(file, ".yaml");
+        const local = rawId ?? (stem.startsWith(".") ? path16.basename(path16.dirname(file)) : stem);
         return namespacePrefix ? qualifyId(local, namespacePrefix, this.rootSubsystems) : local;
       }
       scanSpecsForProject(projectDir, namespacePrefix, visitedDirs, maxDepth, currentDepth) {
@@ -20111,10 +20025,10 @@ var init_specs2 = __esm({
         this.scanVisitedSpecDirs.push(specsDir);
         if (!pathExists(specsDir)) return index;
         const files = listSpecFiles(specsDir);
-        const systemYaml = path17.normalize(projectPaths.specsSystem());
+        const systemYaml = path16.normalize(projectPaths.specsSystem());
         const localSubprojects = [];
         for (const file of files) {
-          const normFile = path17.normalize(file);
+          const normFile = path16.normalize(file);
           if (normFile === systemYaml) continue;
           let detectedType = "spec";
           let rawId;
@@ -20158,7 +20072,7 @@ var init_specs2 = __esm({
             } else if ("contract" in raw) {
               detectedType = "implementation";
               const parsed = ImplementationSpecSchema.parse(raw);
-              const normalizeSourcePath = (p) => path17.relative(projectDir, path17.resolve(projectDir, p)).replace(/\\/g, "/");
+              const normalizeSourcePath = (p) => path16.relative(projectDir, path16.resolve(projectDir, p)).replace(/\\/g, "/");
               if (parsed.sourcePath) parsed.sourcePath = normalizeSourcePath(parsed.sourcePath);
               for (const method of parsed.methods) {
                 if (method.sourcePath) method.sourcePath = normalizeSourcePath(method.sourcePath);
@@ -20284,7 +20198,7 @@ var init_specs2 = __esm({
         }
         if (currentDepth < maxDepth) {
           for (const subproj of localSubprojects) {
-            const childDir = path17.resolve(projectDir, subproj.projectPath);
+            const childDir = path16.resolve(projectDir, subproj.projectPath);
             const mountId = namespacePrefix ? qualifyDeclaredId(subproj.subsystemId, namespacePrefix, true) : subproj.subsystemId;
             if (projectPathEscapesRoot(projectDir, subproj.projectPath, childDir)) {
               this.loaderIssues.push({
@@ -20347,7 +20261,7 @@ var init_specs2 = __esm({
           const index = this.scanAll();
           const sub = index.subsystems.find((s) => s.id === currentPrefix);
           if (sub && sub.projectPath) {
-            const nextDir = path17.resolve(currentDir, sub.projectPath);
+            const nextDir = path16.resolve(currentDir, sub.projectPath);
             if (projectPathEscapesRoot(currentDir, sub.projectPath, nextDir)) {
               this.loaderIssues.push({
                 severity: "error",
@@ -20399,9 +20313,9 @@ var init_specs2 = __esm({
           return index.paths.subsystem[matches[0]];
         }
         if (pathExists(this.paths.specsSubsystemsDir()) && listFiles(this.paths.specsSubsystemsDir(), ".yaml").length > 0) {
-          return path17.join(this.paths.specsSubsystemsDir(), `${id}.yaml`);
+          return path16.join(this.paths.specsSubsystemsDir(), `${id}.yaml`);
         }
-        return path17.join(this.paths.specsDir(), id, ".index.yaml");
+        return path16.join(this.paths.specsDir(), id, ".index.yaml");
       }
       getComponentPath(id, subsystemId) {
         const index = this.scanAll();
@@ -20421,21 +20335,21 @@ var init_specs2 = __esm({
         if (owner) {
           const ownerPath = index.paths.component[owner.id];
           if (ownerPath && ownerPath.endsWith(".index.yaml")) {
-            return path17.join(path17.dirname(ownerPath), id, ".index.yaml");
+            return path16.join(path16.dirname(ownerPath), id, ".index.yaml");
           }
         }
         if (subsystemId) {
           const subPath = this.getSubsystemPath(subsystemId);
-          const subDir = path17.dirname(subPath);
+          const subDir = path16.dirname(subPath);
           if (subPath.endsWith(".index.yaml")) {
-            return path17.join(subDir, id, ".index.yaml");
+            return path16.join(subDir, id, ".index.yaml");
           }
         }
         if (pathExists(this.paths.specsComponentsDir()) && listFiles(this.paths.specsComponentsDir(), ".yaml").length > 0) {
-          return path17.join(this.paths.specsComponentsDir(), `${id}.yaml`);
+          return path16.join(this.paths.specsComponentsDir(), `${id}.yaml`);
         }
         const targetSubsystem = subsystemId || "default";
-        return path17.join(this.paths.specsDir(), targetSubsystem, id, ".index.yaml");
+        return path16.join(this.paths.specsDir(), targetSubsystem, id, ".index.yaml");
       }
       getInterfacePath(id, componentId) {
         const index = this.scanAll();
@@ -20461,16 +20375,16 @@ var init_specs2 = __esm({
         }
         if (componentId) {
           const compPath = this.getComponentPath(componentId);
-          const compDir = path17.dirname(compPath);
+          const compDir = path16.dirname(compPath);
           if (compPath.endsWith(".index.yaml")) {
-            return path17.join(compDir, ".interface.yaml");
+            return path16.join(compDir, ".interface.yaml");
           }
         }
         if (pathExists(this.paths.specsInterfacesDir()) && listFiles(this.paths.specsInterfacesDir(), ".yaml").length > 0) {
-          return path17.join(this.paths.specsInterfacesDir(), `${id}.yaml`);
+          return path16.join(this.paths.specsInterfacesDir(), `${id}.yaml`);
         }
         const targetComponent = componentId || "default";
-        return path17.join(this.paths.specsDir(), "default", targetComponent, ".interface.yaml");
+        return path16.join(this.paths.specsDir(), "default", targetComponent, ".interface.yaml");
       }
       getImplementationPath(id, contractId) {
         const index = this.scanAll();
@@ -20496,16 +20410,16 @@ var init_specs2 = __esm({
         }
         if (contractId) {
           const intfPath = this.getInterfacePath(contractId);
-          const intfDir = path17.dirname(intfPath);
+          const intfDir = path16.dirname(intfPath);
           if (intfPath.endsWith(".interface.yaml")) {
-            return path17.join(intfDir, ".implementation.yaml");
+            return path16.join(intfDir, ".implementation.yaml");
           }
         }
         if (pathExists(this.paths.specsImplementationsDir()) && listFiles(this.paths.specsImplementationsDir(), ".yaml").length > 0) {
-          return path17.join(this.paths.specsImplementationsDir(), `${id}.yaml`);
+          return path16.join(this.paths.specsImplementationsDir(), `${id}.yaml`);
         }
         const targetContract = contractId ? contractId.replace(/^i/, "") : "default";
-        return path17.join(this.paths.specsDir(), "default", targetContract, ".implementation.yaml");
+        return path16.join(this.paths.specsDir(), "default", targetContract, ".implementation.yaml");
       }
       getTypePath(id, subsystemId, group) {
         const index = this.scanAll();
@@ -20536,7 +20450,7 @@ var init_specs2 = __esm({
           const groupPath = index.paths.group[targetGroup] || index.paths.group[plainGroup];
           if (groupPath) {
             const localId2 = id.split("::").pop();
-            return path17.join(path17.dirname(groupPath), `${localId2}.yaml`);
+            return path16.join(path16.dirname(groupPath), `${localId2}.yaml`);
           }
         }
         let localId = id;
@@ -20549,12 +20463,12 @@ var init_specs2 = __esm({
         }
         if (subsystemId) {
           const subPath = this.getSubsystemPath(subsystemId);
-          const subDir = path17.dirname(subPath);
+          const subDir = path16.dirname(subPath);
           if (subPath.endsWith(".index.yaml")) {
-            return path17.join(subDir, "types", `${localId}.yaml`);
+            return path16.join(subDir, "types", `${localId}.yaml`);
           }
         }
-        return path17.join(this.paths.specsTypesDir(), `${localId}.yaml`);
+        return path16.join(this.paths.specsTypesDir(), `${localId}.yaml`);
       }
       getGroupPath(id, subsystemId) {
         const index = this.scanAll();
@@ -20588,12 +20502,12 @@ var init_specs2 = __esm({
         }
         if (subsystemId) {
           const subPath = this.getSubsystemPath(subsystemId);
-          const subDir = path17.dirname(subPath);
+          const subDir = path16.dirname(subPath);
           if (subPath.endsWith(".index.yaml")) {
-            return path17.join(subDir, "types", localId, ".index.yaml");
+            return path16.join(subDir, "types", localId, ".index.yaml");
           }
         }
-        return path17.join(this.paths.specsTypesDir(), localId, ".index.yaml");
+        return path16.join(this.paths.specsTypesDir(), localId, ".index.yaml");
       }
       // -------------------------------------------------------------------------
       // Level 0: System
@@ -20616,7 +20530,7 @@ var init_specs2 = __esm({
       }
       saveSystemSpec(spec) {
         const p = this.paths.specsSystem();
-        ensureDir(path17.dirname(p));
+        ensureDir(path16.dirname(p));
         writeSpecFile(p, parseOrThrow(SystemSpecSchema, spec, "system", spec.name));
         invalidateSpecCache();
       }
@@ -20738,7 +20652,7 @@ var init_specs2 = __esm({
       }
       saveSubsystemSpec(spec, opts) {
         const p = this.getSubsystemPath(spec.id);
-        ensureDir(path17.dirname(p));
+        ensureDir(path16.dirname(p));
         const { prefix } = splitNamespace(spec.id);
         if (!prefix && spec.projectPath && spec.projectPath.trim() !== "") {
           assertContainedProjectPath(this.rootDir, spec.projectPath);
@@ -20805,7 +20719,7 @@ var init_specs2 = __esm({
       saveComponentSpec(spec, opts) {
         const notices = [];
         const p = this.getComponentPath(spec.id, spec.subsystem);
-        ensureDir(path17.dirname(p));
+        ensureDir(path16.dirname(p));
         const specToWrite = this.prepareComponentForWrite(spec);
         const existing = this.loadComponentSpec(spec.id);
         if (existing) {
@@ -20822,7 +20736,7 @@ var init_specs2 = __esm({
         const subsystemChanged = existing && existing.subsystem !== spec.subsystem && splitNamespace(existing.subsystem).localId !== splitNamespace(spec.subsystem).localId;
         if (subsystemChanged && !p.endsWith(".index.yaml")) {
           notices.push(
-            `component "${spec.id}" already exists at ${path17.relative(this.rootDir, p)} \u2014 the flat layout re-saves in place and never relocates the file. The subsystem field is now "${spec.subsystem}" (was "${existing.subsystem}").`
+            `component "${spec.id}" already exists at ${path16.relative(this.rootDir, p)} \u2014 the flat layout re-saves in place and never relocates the file. The subsystem field is now "${spec.subsystem}" (was "${existing.subsystem}").`
           );
         }
         specToWrite.updatedAt = opts?.preserveUpdatedAt && existing?.updatedAt ? existing.updatedAt : (/* @__PURE__ */ new Date()).toISOString();
@@ -20846,12 +20760,12 @@ var init_specs2 = __esm({
         if (owner) {
           const ownerPath = index.paths.component[owner.id];
           if (ownerPath && ownerPath.endsWith(".index.yaml")) {
-            const ownerSubDir = path17.dirname(this.getSubsystemPath(owner.subsystem));
-            return path17.join(ownerSubDir, owner.id, comp.id);
+            const ownerSubDir = path16.dirname(this.getSubsystemPath(owner.subsystem));
+            return path16.join(ownerSubDir, owner.id, comp.id);
           }
         }
-        const subDir = path17.dirname(this.getSubsystemPath(comp.subsystem));
-        return path17.join(subDir, comp.id);
+        const subDir = path16.dirname(this.getSubsystemPath(comp.subsystem));
+        return path16.join(subDir, comp.id);
       }
       /**
        * Move component folders so the physical tree mirrors ownership: each owned
@@ -20867,7 +20781,7 @@ var init_specs2 = __esm({
           if (!currentPath) continue;
           const desiredDir = this.desiredComponentDir(comp, index);
           if (!desiredDir) continue;
-          if (moveComponentFolder(path17.dirname(currentPath), desiredDir)) moved.push(comp.id);
+          if (moveComponentFolder(path16.dirname(currentPath), desiredDir)) moved.push(comp.id);
         }
         if (moved.length) invalidateSpecCache();
         return moved;
@@ -20923,7 +20837,7 @@ var init_specs2 = __esm({
         if (!occupantId) return;
         if (occupantId === id || splitNamespace(occupantId).localId === splitNamespace(id).localId) return;
         throw new Error(
-          `Cannot write ${kind} "${id}": ${parentLabel} is already ${kind === "interface" ? "served by" : "implemented by"} "${occupantId}" at ${path17.relative(this.rootDir, p)}, and both ids resolve to that one file. Re-author "${occupantId}" instead, or delete it first if you meant to replace it.`
+          `Cannot write ${kind} "${id}": ${parentLabel} is already ${kind === "interface" ? "served by" : "implemented by"} "${occupantId}" at ${path16.relative(this.rootDir, p)}, and both ids resolve to that one file. Re-author "${occupantId}" instead, or delete it first if you meant to replace it.`
         );
       }
       /** Returns non-fatal placement notices (see saveTypeSpec) — empty when there is nothing to clarify. */
@@ -20931,12 +20845,12 @@ var init_specs2 = __esm({
         const notices = [];
         const p = this.getInterfacePath(spec.id, spec.component);
         this.assertPathHoldsNoOtherSpec(p, spec.id, "interface", `component "${spec.component}"`);
-        ensureDir(path17.dirname(p));
+        ensureDir(path16.dirname(p));
         const specToWrite = this.prepareInterfaceForWrite(spec);
         const existing = this.loadInterfaceSpec(spec.id);
         if (existing && existing.component !== spec.component && splitNamespace(existing.component).localId !== splitNamespace(spec.component).localId) {
           notices.push(
-            `interface "${spec.id}" already exists at ${path17.relative(this.rootDir, p)} \u2014 re-saving updates the component binding field in place (now "${spec.component}", was "${existing.component}") and never moves the file.`
+            `interface "${spec.id}" already exists at ${path16.relative(this.rootDir, p)} \u2014 re-saving updates the component binding field in place (now "${spec.component}", was "${existing.component}") and never moves the file.`
           );
         }
         if (existing) {
@@ -20993,12 +20907,12 @@ var init_specs2 = __esm({
         const notices = [];
         const p = this.getImplementationPath(spec.id, spec.contract);
         this.assertPathHoldsNoOtherSpec(p, spec.id, "implementation", `contract "${spec.contract}"`);
-        ensureDir(path17.dirname(p));
+        ensureDir(path16.dirname(p));
         const specToWrite = this.prepareImplementationForWrite(spec);
         const existing = this.loadImplementationSpec(spec.id);
         if (existing && existing.contract !== spec.contract && splitNamespace(existing.contract).localId !== splitNamespace(spec.contract).localId) {
           notices.push(
-            `implementation "${spec.id}" already exists at ${path17.relative(this.rootDir, p)} \u2014 re-saving updates the contract binding field in place (now "${spec.contract}", was "${existing.contract}") and never moves the file.`
+            `implementation "${spec.id}" already exists at ${path16.relative(this.rootDir, p)} \u2014 re-saving updates the contract binding field in place (now "${spec.contract}", was "${existing.contract}") and never moves the file.`
           );
         }
         if (existing) {
@@ -21039,11 +20953,11 @@ var init_specs2 = __esm({
         const existing = this.loadTypeSpec(spec.id);
         const group = spec.group || (existing ? existing.group : void 0);
         const p = this.getTypePath(spec.id, spec.subsystem, group);
-        ensureDir(path17.dirname(p));
+        ensureDir(path16.dirname(p));
         const subsystemChanged = existing && (existing.subsystem ?? "") !== (spec.subsystem ?? "") && splitNamespace(existing.subsystem ?? "").localId !== splitNamespace(spec.subsystem ?? "").localId;
         if (subsystemChanged) {
           notices.push(
-            `type "${spec.id}" already exists at ${path17.relative(this.rootDir, p)} \u2014 re-saving updates fields in place and never relocates the file. The subsystem field is now "${spec.subsystem ?? "(none)"}" (was "${existing.subsystem ?? "(none)"}").`
+            `type "${spec.id}" already exists at ${path16.relative(this.rootDir, p)} \u2014 re-saving updates fields in place and never relocates the file. The subsystem field is now "${spec.subsystem ?? "(none)"}" (was "${existing.subsystem ?? "(none)"}").`
           );
         }
         if (spec.subsystem && (!existing || subsystemChanged) && !this.getSubsystemPath(spec.subsystem).endsWith(".index.yaml")) {
@@ -21081,7 +20995,7 @@ var init_specs2 = __esm({
       }
       saveGroupSpec(spec, opts) {
         const p = this.getGroupPath(spec.id);
-        ensureDir(path17.dirname(p));
+        ensureDir(path16.dirname(p));
         const specToWrite = this.prepareGroupForWrite(spec);
         const existing = this.loadGroupSpec(spec.id);
         if (existing) {
@@ -21159,7 +21073,7 @@ var init_specs2 = __esm({
         };
         const out = /* @__PURE__ */ new Set();
         const add = (p) => {
-          if (p) out.add(path17.resolve(p));
+          if (p) out.add(path16.resolve(p));
         };
         for (const s of this.loadSubsystemSpecs()) {
           if (!scopeSubsystem || s.id === scopeSubsystem || s.id.startsWith(`${scopeSubsystem}::`)) {
@@ -21230,11 +21144,11 @@ var init_specs2 = __esm({
         const files = /* @__PURE__ */ new Set();
         const sysPath = this.paths.specsSystem();
         if (pathExists(sysPath)) {
-          files.add(path17.resolve(sysPath));
+          files.add(path16.resolve(sysPath));
         }
         for (const group of Object.values(index.paths)) {
           for (const file of Object.values(group)) {
-            files.add(path17.resolve(file));
+            files.add(path16.resolve(file));
           }
         }
         for (const file of files) {
@@ -21253,20 +21167,20 @@ var init_specs2 = __esm({
         const files = listSpecFiles(specsDir);
         const legacy = [];
         for (const f of files) {
-          const base = path17.basename(f);
-          const dir = path17.dirname(f);
+          const base = path16.basename(f);
+          const dir = path16.dirname(f);
           if (base === "system.yaml") {
-            legacy.push({ path: f, expected: path17.join(dir, ".index.yaml") });
+            legacy.push({ path: f, expected: path16.join(dir, ".index.yaml") });
           } else if (base === "subsystem.yaml") {
-            legacy.push({ path: f, expected: path17.join(dir, ".index.yaml") });
+            legacy.push({ path: f, expected: path16.join(dir, ".index.yaml") });
           } else if (base === "component.yaml") {
-            legacy.push({ path: f, expected: path17.join(dir, ".index.yaml") });
+            legacy.push({ path: f, expected: path16.join(dir, ".index.yaml") });
           } else if (base === "group.yaml") {
-            legacy.push({ path: f, expected: path17.join(dir, ".index.yaml") });
+            legacy.push({ path: f, expected: path16.join(dir, ".index.yaml") });
           } else if (base === "interface.yaml") {
-            legacy.push({ path: f, expected: path17.join(dir, ".interface.yaml") });
+            legacy.push({ path: f, expected: path16.join(dir, ".interface.yaml") });
           } else if (base === "implementation.yaml") {
-            legacy.push({ path: f, expected: path17.join(dir, ".implementation.yaml") });
+            legacy.push({ path: f, expected: path16.join(dir, ".implementation.yaml") });
           }
         }
         return legacy;
@@ -22278,7 +22192,7 @@ __export(agent_resolver_exports, {
 });
 function listFilesRecursiveSafe(dirPath, ext) {
   if (!fs13.existsSync(dirPath)) return [];
-  const nameLower = path18.basename(dirPath).toLowerCase();
+  const nameLower = path17.basename(dirPath).toLowerCase();
   const IGNORED_DIRS = /* @__PURE__ */ new Set([
     "node_modules",
     "target",
@@ -22296,7 +22210,7 @@ function listFilesRecursiveSafe(dirPath, ext) {
   const entries = fs13.readdirSync(dirPath, { withFileTypes: true });
   const files = [];
   for (const entry of entries) {
-    const fullPath = path18.join(dirPath, entry.name);
+    const fullPath = path17.join(dirPath, entry.name);
     if (entry.isDirectory()) {
       files.push(...listFilesRecursiveSafe(fullPath, ext));
     } else if (entry.isFile() && entry.name.endsWith(ext)) {
@@ -22309,8 +22223,8 @@ function getProjectFiles(projectDir) {
   let files = projectFilesCache.get(projectDir);
   if (!files) {
     files = [];
-    const srcDir = path18.join(projectDir, "src");
-    const legacySrcDir = path18.join(projectDir, "legacy-src");
+    const srcDir = path17.join(projectDir, "src");
+    const legacySrcDir = path17.join(projectDir, "legacy-src");
     let searchDir = projectDir;
     if (pathExists(srcDir)) {
       searchDir = srcDir;
@@ -22325,7 +22239,7 @@ function getProjectFiles(projectDir) {
       files.push(...listFilesRecursiveSafe(searchDir, ext));
     }
     const rootDir = getProjectRoot();
-    files = files.map((f) => path18.relative(rootDir, f).replace(/\\/g, "/"));
+    files = files.map((f) => path17.relative(rootDir, f).replace(/\\/g, "/"));
     projectFilesCache.set(projectDir, files);
   }
   return files;
@@ -22350,8 +22264,8 @@ function inferSourcePathForComponent(comp, subsystems) {
     let bestFile = null;
     let bestScore = -1;
     for (const f of files) {
-      const ext = path18.extname(f);
-      const base = path18.basename(f, ext).toLowerCase();
+      const ext = path17.extname(f);
+      const base = path17.basename(f, ext).toLowerCase();
       if (candidates.has(base)) {
         let score = 0;
         const normalizedPath = f.toLowerCase();
@@ -22448,7 +22362,7 @@ function resolveAgentTopology() {
   });
   for (const sub of subsystems) {
     if (sub.projectPath) {
-      const mountSpecPath = path18.relative(getProjectRoot(), getSubsystemPath(sub.id)).replace(/\\/g, "/");
+      const mountSpecPath = path17.relative(getProjectRoot(), getSubsystemPath(sub.id)).replace(/\\/g, "/");
       agents.push({
         id: `${sub.id}-owner`,
         name: `${sub.name} (chained subproject)`,
@@ -22470,9 +22384,9 @@ function resolveAgentTopology() {
     }
     const subComponents = components.filter((c) => c.subsystem === sub.id);
     const ownedPaths = [];
-    ownedPaths.push(path18.relative(getProjectRoot(), getSubsystemPath(sub.id)).replace(/\\/g, "/"));
+    ownedPaths.push(path17.relative(getProjectRoot(), getSubsystemPath(sub.id)).replace(/\\/g, "/"));
     for (const c of subComponents) {
-      ownedPaths.push(path18.relative(getProjectRoot(), getComponentPath(c.id, sub.id)).replace(/\\/g, "/"));
+      ownedPaths.push(path17.relative(getProjectRoot(), getComponentPath(c.id, sub.id)).replace(/\\/g, "/"));
     }
     if (!config.rules.generateComponentImplementers) {
       for (const comp of subComponents) {
@@ -22548,10 +22462,10 @@ function resolveAgentTopology() {
       }
       const dependencies = comp.dependsOn.map((depId) => `${depId}-implementer`);
       const readPaths = [
-        path18.relative(getProjectRoot(), AI_PATHS.specsSystem()).replace(/\\/g, "/"),
-        path18.relative(getProjectRoot(), getComponentPath(comp.id, comp.subsystem)).replace(/\\/g, "/"),
-        ...compInterfaces.map((i) => path18.relative(getProjectRoot(), getInterfacePath(i.id, comp.id)).replace(/\\/g, "/")),
-        ...compImpls.map((impl) => path18.relative(getProjectRoot(), getImplementationPath(impl.id, impl.contract)).replace(/\\/g, "/"))
+        path17.relative(getProjectRoot(), AI_PATHS.specsSystem()).replace(/\\/g, "/"),
+        path17.relative(getProjectRoot(), getComponentPath(comp.id, comp.subsystem)).replace(/\\/g, "/"),
+        ...compInterfaces.map((i) => path17.relative(getProjectRoot(), getInterfacePath(i.id, comp.id)).replace(/\\/g, "/")),
+        ...compImpls.map((impl) => path17.relative(getProjectRoot(), getImplementationPath(impl.id, impl.contract)).replace(/\\/g, "/"))
       ];
       agents.push({
         id: `${comp.id}-implementer`,
@@ -22640,11 +22554,11 @@ ${guidance.trim()}
     budget
   };
 }
-var path18, fs13, projectFilesCache, UnknownAgentError;
+var path17, fs13, projectFilesCache, UnknownAgentError;
 var init_agent_resolver = __esm({
   "src/core/agent_resolver.ts"() {
     "use strict";
-    path18 = __toESM(require("path"));
+    path17 = __toESM(require("path"));
     fs13 = __toESM(require("fs"));
     init_loader();
     init_project_config();
@@ -22668,12 +22582,12 @@ var init_agent_resolver = __esm({
 
 // src/config/loader.ts
 function aiPathsAt(rootDir) {
-  const resolvedRoot = path19.resolve(rootDir);
+  const resolvedRoot = path18.resolve(rootDir);
   const aiDirAt2 = (...segments) => {
-    const waiPath = path19.join(resolvedRoot, ".wai");
-    const waironPath = path19.join(resolvedRoot, ".wairon");
+    const waiPath = path18.join(resolvedRoot, ".wai");
+    const waironPath = path18.join(resolvedRoot, ".wairon");
     const base = !fs14.existsSync(waiPath) && fs14.existsSync(waironPath) ? waironPath : waiPath;
-    return path19.join(base, ...segments);
+    return path18.join(base, ...segments);
   };
   const specsDir = () => projectConfigRepositoryAt(resolvedRoot).specsDir();
   return {
@@ -22690,12 +22604,12 @@ function aiPathsAt(rootDir) {
     contextDomainsMd: () => aiDirAt2("context", "domains.md"),
     contextWaironGuideMd: () => aiDirAt2("context", "wairon-guide.md"),
     specsDir,
-    specsSystem: () => path19.join(specsDir(), ".index.yaml"),
-    specsSubsystemsDir: () => path19.join(specsDir(), "subsystems"),
-    specsComponentsDir: () => path19.join(specsDir(), "components"),
-    specsInterfacesDir: () => path19.join(specsDir(), "interfaces"),
-    specsImplementationsDir: () => path19.join(specsDir(), "implementations"),
-    specsTypesDir: () => path19.join(specsDir(), "types")
+    specsSystem: () => path18.join(specsDir(), ".index.yaml"),
+    specsSubsystemsDir: () => path18.join(specsDir(), "subsystems"),
+    specsComponentsDir: () => path18.join(specsDir(), "components"),
+    specsInterfacesDir: () => path18.join(specsDir(), "interfaces"),
+    specsImplementationsDir: () => path18.join(specsDir(), "implementations"),
+    specsTypesDir: () => path18.join(specsDir(), "types")
   };
 }
 function isProjectInitialized() {
@@ -22726,12 +22640,12 @@ function loadTopologyConfig() {
 function saveTopologyConfig(config) {
   writeYamlFile(AI_PATHS.topologyConfig(), config);
 }
-var fs14, path19, AI_PATHS;
+var fs14, path18, AI_PATHS;
 var init_loader = __esm({
   "src/config/loader.ts"() {
     "use strict";
     fs14 = __toESM(require("fs"));
-    path19 = __toESM(require("path"));
+    path18 = __toESM(require("path"));
     init_fs();
     init_yaml();
     init_errors();
@@ -22772,7 +22686,7 @@ __export(domains_exports, {
   resolveDomains: () => resolveDomains
 });
 function rel(p) {
-  return path20.relative(process.cwd(), p).replace(/\\/g, "/");
+  return path19.relative(process.cwd(), p).replace(/\\/g, "/");
 }
 function deriveSubsystemDomains() {
   const subsystems = loadSubsystemSpecs();
@@ -22822,11 +22736,11 @@ function removeFreeStandingDomain(id) {
   config.domains.splice(idx, 1);
   saveTopologyConfig(config);
 }
-var path20;
+var path19;
 var init_domains = __esm({
   "src/core/domains.ts"() {
     "use strict";
-    path20 = __toESM(require("path"));
+    path19 = __toESM(require("path"));
     init_loader();
     init_specs2();
     init_errors();
@@ -22903,7 +22817,7 @@ function ensureProjectInitialized(fallbackName) {
 function walkChainedSubprojects(projectRoot, onChild) {
   const visited = /* @__PURE__ */ new Set();
   const walk2 = (dir) => {
-    const resolved = path21.resolve(dir);
+    const resolved = path20.resolve(dir);
     if (visited.has(resolved)) return;
     visited.add(resolved);
     const specsDir = aiPathsAt(dir).specsDir();
@@ -22925,7 +22839,7 @@ function walkChainedSubprojects(projectRoot, onChild) {
         continue;
       }
       const id = raw.id;
-      onChild(childDir, typeof id === "string" ? id : path21.basename(childDir));
+      onChild(childDir, typeof id === "string" ? id : path20.basename(childDir));
       walk2(childDir);
     }
   };
@@ -22952,7 +22866,7 @@ function listDirectChainedSubprojects(projectRoot) {
       continue;
     }
     const id = raw.id;
-    out.push({ dir, subsystemId: typeof id === "string" ? id : path21.basename(dir) });
+    out.push({ dir, subsystemId: typeof id === "string" ? id : path20.basename(dir) });
   }
   return out;
 }
@@ -23012,7 +22926,7 @@ function moveSubsystemProject(subsystemId, newProjectPath) {
     if (fs15.existsSync(newDir)) {
       throw new WaironError(`Target directory already exists: ${newDir}`);
     }
-    ensureDir(path21.dirname(newDir));
+    ensureDir(path20.dirname(newDir));
     fs15.renameSync(oldDir, newDir);
   }
   saveSubsystemSpec({ ...sub, projectPath: nextPath, updatedAt: (/* @__PURE__ */ new Date()).toISOString() });
@@ -23022,9 +22936,9 @@ function toPosixPath(p) {
   return p.replace(/\\/g, "/");
 }
 function isWithinDir(dir, file) {
-  const d = path21.resolve(dir);
-  const f = path21.resolve(file);
-  return f === d || f.startsWith(d + path21.sep);
+  const d = path20.resolve(dir);
+  const f = path20.resolve(file);
+  return f === d || f.startsWith(d + path20.sep);
 }
 function externalizeSubsystem(subsystemId, projectPath) {
   if (subsystemId.includes("::")) {
@@ -23036,13 +22950,13 @@ function externalizeSubsystem(subsystemId, projectPath) {
   }
   const parentRoot = getProjectRoot();
   const parentSpecsDir = aiPathsAt(parentRoot).specsDir();
-  const fooDir = path21.join(parentSpecsDir, subsystemId);
+  const fooDir = path20.join(parentSpecsDir, subsystemId);
   if (!fs15.existsSync(fooDir)) {
     throw new WaironError(`subsystem specs directory not found: ${fooDir}`);
   }
   const relPath = toPosixPath(projectPath);
   const childDir = assertContainedProjectPath(parentRoot, relPath);
-  const childFooDir = path21.join(childDir, ".wai", "specs", subsystemId);
+  const childFooDir = path20.join(childDir, ".wai", "specs", subsystemId);
   if (fs15.existsSync(childFooDir)) {
     throw new WaironError(`target already contains a "${subsystemId}" subsystem: ${childFooDir}`);
   }
@@ -23055,18 +22969,18 @@ function externalizeSubsystem(subsystemId, projectPath) {
   runWithProjectRoot(childDir, () => {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     projectConfigRepository.create(defaultProjectConfig(childSystemName, now));
-    ensureDir(path21.join(childDir, ".wai", "specs"));
+    ensureDir(path20.join(childDir, ".wai", "specs"));
     saveSystemSpec(bootstrapSystemSpec(childSystemName, now));
   });
-  ensureDir(path21.dirname(childFooDir));
+  ensureDir(path20.dirname(childFooDir));
   fs15.renameSync(fooDir, childFooDir);
   rebaseImplementationPaths(childFooDir, parentRoot, childDir);
-  patchSubsystemIndex(path21.join(childFooDir, ".index.yaml"), (s) => {
+  patchSubsystemIndex(path20.join(childFooDir, ".index.yaml"), (s) => {
     s.parentSystem = childSystemName;
     delete s.projectPath;
   });
   ensureDir(fooDir);
-  writeYamlFile(path21.join(fooDir, ".index.yaml"), {
+  writeYamlFile(path20.join(fooDir, ".index.yaml"), {
     id: subsystemId,
     name: foo.name,
     description: foo.description,
@@ -23093,8 +23007,8 @@ function internalizeSubsystem(subsystemId) {
   const parentRoot = getProjectRoot();
   const parentSpecsDir = aiPathsAt(parentRoot).specsDir();
   const childDir = assertContainedProjectPath(parentRoot, foo.projectPath);
-  const childWai = path21.join(childDir, ".wai");
-  const childFooDir = path21.join(childDir, ".wai", "specs", subsystemId);
+  const childWai = path20.join(childDir, ".wai");
+  const childFooDir = path20.join(childDir, ".wai", "specs", subsystemId);
   if (!fs15.existsSync(childFooDir)) {
     throw new WaironError(`external subproject missing subsystem "${subsystemId}": ${childFooDir}`);
   }
@@ -23108,12 +23022,12 @@ function internalizeSubsystem(subsystemId) {
     false
   );
   const parentSystemName = loadSystemSpec()?.name ?? foo.parentSystem;
-  const fooDir = path21.join(parentSpecsDir, subsystemId);
+  const fooDir = path20.join(parentSpecsDir, subsystemId);
   fs15.rmSync(fooDir, { recursive: true, force: true });
-  ensureDir(path21.dirname(fooDir));
+  ensureDir(path20.dirname(fooDir));
   fs15.renameSync(childFooDir, fooDir);
   rebaseImplementationPaths(fooDir, childDir, parentRoot);
-  patchSubsystemIndex(path21.join(fooDir, ".index.yaml"), (s) => {
+  patchSubsystemIndex(path20.join(fooDir, ".index.yaml"), (s) => {
     s.parentSystem = parentSystemName;
     delete s.projectPath;
   });
@@ -23195,8 +23109,8 @@ function rebaseImplementationPaths(specsDir, fromRoot, toRoot) {
     let changed = false;
     const rebase = (holder, key) => {
       const p = holder[key];
-      if (typeof p !== "string" || p === "" || path21.isAbsolute(p)) return;
-      const next = toPosixPath(path21.relative(toRoot, path21.resolve(fromRoot, p)));
+      if (typeof p !== "string" || p === "" || path20.isAbsolute(p)) return;
+      const next = toPosixPath(path20.relative(toRoot, path20.resolve(fromRoot, p)));
       if (next !== p) {
         holder[key] = next;
         changed = true;
@@ -23273,7 +23187,7 @@ function moveRenamedSpecs(componentId, newId, component, movingInterface, moving
   if (movedInterface) saveInterfaceSpec({ ...movedInterface, id: interfaceId, component: newId });
   if (movedImplementation) {
     const oldFile = getImplementationPath(movedImplementation.id);
-    if (path21.resolve(getImplementationPath(implementationId, movedImplementation.contract)) === path21.resolve(oldFile)) {
+    if (path20.resolve(getImplementationPath(implementationId, movedImplementation.contract)) === path20.resolve(oldFile)) {
       fs15.unlinkSync(oldFile);
     }
     saveImplementationSpec({ ...movedImplementation, id: implementationId });
@@ -23291,8 +23205,8 @@ function removeSpecFile2(file, id) {
     return;
   }
   fs15.unlinkSync(file);
-  const specsRoot = path21.resolve(aiPathsAt(getProjectRoot()).specsDir());
-  for (let dir = path21.dirname(path21.resolve(file)); dir !== specsRoot && isWithinDir(specsRoot, dir); dir = path21.dirname(dir)) {
+  const specsRoot = path20.resolve(aiPathsAt(getProjectRoot()).specsDir());
+  for (let dir = path20.dirname(path20.resolve(file)); dir !== specsRoot && isWithinDir(specsRoot, dir); dir = path20.dirname(dir)) {
     if (fs15.readdirSync(dir).length > 0) break;
     fs15.rmdirSync(dir);
   }
@@ -23391,12 +23305,12 @@ function collectMentions(specsDir, methodName, moved) {
 function identifierPattern(methodName) {
   return new RegExp(`(?<![A-Za-z0-9_])${methodName}(?![A-Za-z0-9_])`);
 }
-var fs15, path21, METHOD_NAME, PROSE_FIELDS2;
+var fs15, path20, METHOD_NAME, PROSE_FIELDS2;
 var init_provision = __esm({
   "src/core/provision.ts"() {
     "use strict";
     fs15 = __toESM(require("fs"));
-    path21 = __toESM(require("path"));
+    path20 = __toESM(require("path"));
     init_specs2();
     init_loader();
     init_project_config();
@@ -23583,16 +23497,16 @@ function readFrontmatter(raw, fallbackName) {
   return { name: field("name") || fallbackName, description: field("description") };
 }
 function builtinSkillsDir() {
-  return path22.resolve(__dirname, "..", "templates", "skills");
+  return path21.resolve(__dirname, "..", "templates", "skills");
 }
 function skillTemplatePath(name) {
-  return path22.join(builtinSkillsDir(), `${name}.md`);
+  return path21.join(builtinSkillsDir(), `${name}.md`);
 }
 function skillDestPath(type, destDir, name) {
   if (type === "claude" || type === "codex" || type === "gemini" || type === "agy") {
-    return path22.join(destDir, name, "SKILL.md");
+    return path21.join(destDir, name, "SKILL.md");
   }
-  return path22.join(destDir, `${name}.md`);
+  return path21.join(destDir, `${name}.md`);
 }
 function skillsDirForTarget(type) {
   switch (type) {
@@ -23630,7 +23544,7 @@ function exportSddSkills(targetTypes) {
       if (!fs16.existsSync(skillTemplatePath(name))) continue;
       const content = composeBuiltinSkill(name, packSkills.filter((s) => s.targets.includes(type)));
       const destPath = skillDestPath(type, destDir, name);
-      ensureDir(path22.dirname(destPath));
+      ensureDir(path21.dirname(destPath));
       fs16.writeFileSync(destPath, content, "utf-8");
       fileCount++;
     }
@@ -23641,7 +23555,7 @@ function exportSddSkills(targetTypes) {
       const id = packSkillId(skill);
       const content = fs16.readFileSync(skill.sourcePath, "utf-8");
       const destPath = skillDestPath(type, destDir, id);
-      ensureDir(path22.dirname(destPath));
+      ensureDir(path21.dirname(destPath));
       fs16.writeFileSync(destPath, content, "utf-8");
       fileCount++;
     }
@@ -23718,11 +23632,11 @@ function readResource(resourceId) {
   if (!known) throw new SkillResourceNotFoundError(resourceId);
   return readSkillResource(resourceId);
 }
-var path22, fs16, SKILL_NAMES, SKILL_RESOURCE_SCHEME, RESOURCE_SKILL_IDS, SkillResourceNotFoundError;
+var path21, fs16, SKILL_NAMES, SKILL_RESOURCE_SCHEME, RESOURCE_SKILL_IDS, SkillResourceNotFoundError;
 var init_skills = __esm({
   "src/core/skills.ts"() {
     "use strict";
-    path22 = __toESM(require("path"));
+    path21 = __toESM(require("path"));
     fs16 = __toESM(require("fs"));
     init_fs();
     init_defaults();
@@ -27296,39 +27210,39 @@ function hasAuthoredSpecs(root) {
   if (!pathExists(specsDir)) {
     return false;
   }
-  const systemIndex = path23.resolve(paths.specsSystem());
+  const systemIndex = path22.resolve(paths.specsSystem());
   for (const file of listFilesRecursive(specsDir, ".yaml")) {
-    if (path23.resolve(file) !== systemIndex) {
+    if (path22.resolve(file) !== systemIndex) {
       return true;
     }
   }
   return false;
 }
 function createStagingDir(destDir) {
-  const root = path23.resolve(destDir);
+  const root = path22.resolve(destDir);
   fs17.mkdirSync(root, { recursive: true });
-  const stagingDir = fs17.mkdtempSync(path23.join(root, STAGING_PREFIX));
+  const stagingDir = fs17.mkdtempSync(path22.join(root, STAGING_PREFIX));
   return stagingDir;
 }
 function commitStagedTree(stagingDir, destDir, roots, backupExisting) {
-  const root = path23.resolve(destDir);
-  const backupDir = path23.join(root, BACKUP_DIR, timestampSlug());
+  const root = path22.resolve(destDir);
+  const backupDir = path22.join(root, BACKUP_DIR, timestampSlug());
   let backedUp = false;
   for (const rootRel of roots) {
     const relative9 = rootRel === "." ? "" : rootRel;
-    const stagedSpecDir = path23.join(stagingDir, relative9, ".wai");
+    const stagedSpecDir = path22.join(stagingDir, relative9, ".wai");
     if (!fs17.existsSync(stagedSpecDir)) continue;
-    const liveSpecDir = liveSpecDirFor(path23.join(root, relative9));
+    const liveSpecDir = liveSpecDirFor(path22.join(root, relative9));
     if (backupExisting && liveSpecDir && fs17.existsSync(liveSpecDir)) {
-      const backupTarget = path23.join(backupDir, relative9, path23.basename(liveSpecDir));
-      fs17.mkdirSync(path23.dirname(backupTarget), { recursive: true });
+      const backupTarget = path22.join(backupDir, relative9, path22.basename(liveSpecDir));
+      fs17.mkdirSync(path22.dirname(backupTarget), { recursive: true });
       fs17.renameSync(liveSpecDir, backupTarget);
       backedUp = true;
     } else if (liveSpecDir && fs17.existsSync(liveSpecDir)) {
       fs17.rmSync(liveSpecDir, { recursive: true, force: true });
     }
-    const target = path23.join(root, relative9, ".wai");
-    fs17.mkdirSync(path23.dirname(target), { recursive: true });
+    const target = path22.join(root, relative9, ".wai");
+    fs17.mkdirSync(path22.dirname(target), { recursive: true });
     if (fs17.existsSync(target)) fs17.rmSync(target, { recursive: true, force: true });
     fs17.renameSync(stagedSpecDir, target);
   }
@@ -27353,7 +27267,7 @@ function exportSpecTree(includeDerived, allowPartial) {
   const skipped = [...inspection.skipped];
   const roots = [{ relativePath: ".", waiDir: aiPathsAt(root).root() }];
   for (const rel2 of inspection.roots) {
-    const waiDir = aiPathsAt(path23.resolve(root, rel2)).root();
+    const waiDir = aiPathsAt(path22.resolve(root, rel2)).root();
     if (pathExists(waiDir)) {
       roots.push({ relativePath: rel2, waiDir });
     } else {
@@ -27384,7 +27298,7 @@ function importSpecTree(archive, options) {
   if (!info.compatible) {
     throw new Error("incompatible .waitree archive (format or minimum wairon version)");
   }
-  const destDir = path23.resolve(options.destDir ?? getProjectRoot());
+  const destDir = path22.resolve(options.destDir ?? getProjectRoot());
   const occupied = hasSpecTree(destDir);
   const authored = hasAuthoredSpecs(destDir);
   if (authored && options.replaceExisting !== true) {
@@ -27415,21 +27329,21 @@ function importSpecTree(archive, options) {
   return result;
 }
 function liveSpecDirFor(rootDir) {
-  const modern = path23.join(rootDir, ".wai");
+  const modern = path22.join(rootDir, ".wai");
   if (fs17.existsSync(modern)) return modern;
-  const legacy = path23.join(rootDir, ".wairon");
+  const legacy = path22.join(rootDir, ".wairon");
   if (fs17.existsSync(legacy)) return legacy;
   return null;
 }
 function timestampSlug() {
   return (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
 }
-var fs17, path23, sdkPortal, STAGING_PREFIX, BACKUP_DIR;
+var fs17, path22, sdkPortal, STAGING_PREFIX, BACKUP_DIR;
 var init_treetransfer = __esm({
   "src/core/treetransfer.ts"() {
     "use strict";
     fs17 = __toESM(require("fs"));
-    path23 = __toESM(require("path"));
+    path22 = __toESM(require("path"));
     sdkPortal = __toESM(require_dist());
     init_loader();
     init_fs();
@@ -27587,6 +27501,106 @@ var init_narrative_repair = __esm({
   }
 });
 
+// src/core/approval.ts
+function diffSize(d) {
+  return d.added.length + d.changed.length + d.removed.length;
+}
+function digest(content) {
+  const normalized = content.replace(/\r\n/g, "\n");
+  return crypto4.createHash("sha256").update(normalized, "utf8").digest("hex");
+}
+function currentSpecDigests(root = getProjectRoot()) {
+  const mountDirs = loadSubsystemSpecs().filter((s) => s.projectPath && !s.id.includes("::")).map((s) => `${path23.resolve(root, s.projectPath).split(path23.sep).join("/")}/`);
+  const out = {};
+  for (const [abs, content] of snapshotSpecFiles()) {
+    const normalized = path23.resolve(abs).split(path23.sep).join("/");
+    if (mountDirs.some((dir) => normalized.startsWith(dir))) continue;
+    out[path23.relative(root, abs).split(path23.sep).join("/")] = digest(content);
+  }
+  return out;
+}
+function captureApprovedSpecs(root = getProjectRoot(), scope) {
+  const current2 = currentSpecDigests(root);
+  if (!scope) return current2;
+  const previous = readLockRecord()?.specs ?? {};
+  const specs = { ...previous };
+  for (const rel2 of Object.keys(previous)) {
+    if (scope.paths.has(rel2) && current2[rel2] === void 0) delete specs[rel2];
+  }
+  for (const rel2 of scope.paths) {
+    if (current2[rel2] !== void 0) specs[rel2] = current2[rel2];
+  }
+  return specs;
+}
+function diffAgainstApproval(root = getProjectRoot()) {
+  const approved = approvedSpecs(root);
+  if (!approved) return null;
+  const current2 = currentSpecDigests(root);
+  const added = [];
+  const changed = [];
+  const removed = [];
+  const unchangedPaths = [];
+  for (const [rel2, d] of Object.entries(current2)) {
+    const before = approved[rel2];
+    if (before === void 0) added.push(rel2);
+    else if (before !== d) changed.push(rel2);
+    else unchangedPaths.push(rel2);
+  }
+  for (const rel2 of Object.keys(approved)) {
+    if (current2[rel2] === void 0) removed.push(rel2);
+  }
+  return {
+    added: added.sort(),
+    changed: changed.sort(),
+    removed: removed.sort(),
+    unchangedPaths: unchangedPaths.sort()
+  };
+}
+function approvedSpecs(root) {
+  return approvalRecord(root)?.specs ?? null;
+}
+function approvalRecord(root = getProjectRoot()) {
+  return readLockRecordAt(root);
+}
+function settledSpecPaths(root = getProjectRoot()) {
+  const diff = diffAgainstApproval(root);
+  return diff ? new Set(diff.unchangedPaths) : null;
+}
+function pinOf(stateId) {
+  return `${stateId.algorithm}:${stateId.digest}`;
+}
+function currentChildPins(mounts, root = getProjectRoot()) {
+  const pins = {};
+  for (const mount of mounts) {
+    if (!mount.projectPath || mount.id.includes("::")) continue;
+    const child = readLockRecordAt(path23.resolve(root, mount.projectPath));
+    if (child) pins[mount.id] = pinOf(child.stateId);
+  }
+  return pins;
+}
+function movedChildren(mounts, root = getProjectRoot()) {
+  const pinned = approvalRecord(root)?.children;
+  if (!pinned) return [];
+  const now = currentChildPins(mounts, root);
+  const moved = [];
+  for (const [id, was] of Object.entries(pinned)) {
+    const current2 = now[id] ?? null;
+    if (current2 !== was) moved.push({ id, pinned: was, now: current2 });
+  }
+  return moved;
+}
+var crypto4, path23;
+var init_approval = __esm({
+  "src/core/approval.ts"() {
+    "use strict";
+    crypto4 = __toESM(require("crypto"));
+    path23 = __toESM(require("path"));
+    init_fs();
+    init_specs2();
+    init_lockfile();
+  }
+});
+
 // src/core/approver.ts
 function gitConfig(key) {
   try {
@@ -27877,6 +27891,7 @@ __export(src_exports, {
   diagnoseProjectPacks: () => diagnoseProjectPacks,
   diagramSetIndex: () => diagramSetIndex,
   diffAgainstApproval: () => diffAgainstApproval,
+  diffSize: () => diffSize,
   discardStagingDir: () => discardStagingDir,
   discoverPacks: () => discoverPacks,
   dryRunSerializeSpecs: () => dryRunSerializeSpecs,
@@ -28001,6 +28016,7 @@ __export(src_exports, {
   methodTypeRefs: () => methodTypeRefs,
   moveMethods: () => moveMethods,
   moveSubsystemProject: () => moveSubsystemProject,
+  movedChildren: () => movedChildren,
   narrativeStepForeignFields: () => narrativeStepForeignFields,
   normalizeApprover: () => normalizeApprover,
   normalizeComponentLayout: () => normalizeComponentLayout,
@@ -28078,6 +28094,7 @@ __export(src_exports, {
   setLogLevel: () => setLogLevel,
   setProjectRoot: () => setProjectRoot,
   setProjectType: () => setProjectType,
+  settledSpecPaths: () => settledSpecPaths,
   skillExtendErrors: () => skillExtendErrors,
   skillsDirForTarget: () => skillsDirForTarget,
   snapshotSpecFiles: () => snapshotSpecFiles,
@@ -28622,6 +28639,7 @@ function loadProjectConfig4() {
   diagnoseProjectPacks,
   diagramSetIndex,
   diffAgainstApproval,
+  diffSize,
   discardStagingDir,
   discoverPacks,
   dryRunSerializeSpecs,
@@ -28746,6 +28764,7 @@ function loadProjectConfig4() {
   methodTypeRefs,
   moveMethods,
   moveSubsystemProject,
+  movedChildren,
   narrativeStepForeignFields,
   normalizeApprover,
   normalizeComponentLayout,
@@ -28823,6 +28842,7 @@ function loadProjectConfig4() {
   setLogLevel,
   setProjectRoot,
   setProjectType,
+  settledSpecPaths,
   skillExtendErrors,
   skillsDirForTarget,
   snapshotSpecFiles,