@wairon/cli 5.1.1-dev.60 → 5.1.1-dev.61

package/dist/index.js

@@ -3401,7 +3401,6 @@ __export(src_exports, {
   BuiltinTargetSchema: () => BuiltinTargetSchema,
   BundleNotFoundError: () => BundleNotFoundError,
   COMPONENT_AUTH_SOURCE: () => COMPONENT_AUTH_SOURCE,
-  CONTEXT_PATHS: () => CONTEXT_PATHS,
   CarriedDebtKindSchema: () => CarriedDebtKindSchema,
   CarriedDebtSchema: () => CarriedDebtSchema,
   CarriedFindingSchema: () => CarriedFindingSchema,
@@ -3556,7 +3555,6 @@ __export(src_exports, {
   computeStateIdAt: () => computeStateIdAt,
   conceptNoun: () => conceptNoun,
   consumedContractInputs: () => consumedContractInputs,
-  contextDir: () => contextDir,
   createAgentRecord: () => createAgentRecord,
   createChainedSubsystem: () => createChainedSubsystem,
   createEmptyRegistry: () => createEmptyRegistry,
@@ -3579,6 +3577,7 @@ __export(src_exports, {
   deleteTypeSpec: () => deleteTypeSpec,
   deregisterPackRef: () => deregisterPackRef,
   deriveExecutionProfile: () => deriveExecutionProfile,
+  derivedDocPaths: () => derivedDocPaths,
   describeApprover: () => describeApprover,
   detectDomainCandidates: () => detectDomainCandidates,
   diagnoseProjectPacks: () => diagnoseProjectPacks,
@@ -3633,7 +3632,6 @@ __export(src_exports, {
   globalPacksEnabled: () => globalPacksEnabled,
   globalTemplatesDir: () => globalTemplatesDir,
   globalVariantsDir: () => globalVariantsDir,
-  hasArchitectureContext: () => hasArchitectureContext,
   hasAuthoredSpecs: () => hasAuthoredSpecs,
   hasContext: () => hasContext,
   hasFunctionBody: () => hasFunctionBody,
@@ -3732,14 +3730,12 @@ __export(src_exports, {
   projectSubsystemSurface: () => projectSubsystemSurface,
   provisionProject: () => provisionProject,
   qualifiedTypeId: () => qualifiedTypeId,
-  readArchitectureContext: () => readArchitectureContext,
   readFileOrNull: () => readFileOrNull,
   readJsonFile: () => readJsonFile,
   readLockRecord: () => readLockRecord,
   readLockRecordAt: () => readLockRecordAt,
   readLockState: () => readLockState,
   readManifest: () => readManifest,
-  readProjectContext: () => readProjectContext,
   readResource: () => readResource,
   readSkillResource: () => readSkillResource,
   readStampVersion: () => readStampVersion,
@@ -3756,9 +3752,7 @@ __export(src_exports, {
   renameComponent: () => renameComponent,
   renameMethod: () => renameMethod,
   renderDiagram: () => renderDiagram,
-  renderDomainsDoc: () => renderDomainsDoc,
   renderTemplateInstructions: () => renderTemplateInstructions,
-  renderWaironGuide: () => renderWaironGuide,
   repairForeignStepFields: () => repairForeignStepFields,
   resolveAgentTopology: () => resolveAgentTopology,
   resolveBudget: () => resolveBudget,
@@ -3821,12 +3815,10 @@ __export(src_exports, {
   validateRegistry: () => validateRegistry,
   validateSddTree: () => validateSddTree,
   workspaceFor: () => workspaceFor,
-  writeArchitectureContext: () => writeArchitectureContext,
   writeFile: () => writeFile,
   writeFileIfChanged: () => writeFileIfChanged,
   writeJsonFile: () => writeJsonFile,
   writeLockRecord: () => writeLockRecord,
-  writeProjectContext: () => writeProjectContext,
   writeRootGuideDelegator: () => writeRootGuideDelegator,
   writeYamlFile: () => writeYamlFile
 });
@@ -11662,7 +11654,7 @@ function defaultTargetConfig(type) {
     enabled: true
   };
 }
-var WAIRON_VERSION = "5.1.1-dev.60";
+var WAIRON_VERSION = "5.1.1-dev.61";
 var GITHUB_REPO = "SYW-Apps/Waffle-AIron";
 var ARCHITECT_AGENT_ID = "agent-architect";
 var ARCHITECT_TEMPLATE_ID = "architect";
@@ -26347,390 +26339,97 @@ function readResource(resourceId) {
   return readSkillResource(resourceId);
 }
 
-// src/utils/ai-guide.ts
+// src/core/treetransfer.ts
 var fs17 = __toESM(require("fs"));
-var os4 = __toESM(require("os"));
 var path22 = __toESM(require("path"));
-
-// src/core/stamp.ts
-function versionStamp() {
-  return `<!-- wairon-version: ${WAIRON_VERSION} -->`;
-}
-var STAMP_RE = /<!--\s*wairon-version:\s*([^\s]+)\s*-->/;
-function readStampVersion(content) {
-  const m = content.match(STAMP_RE);
-  return m ? m[1] : null;
-}
-
-// src/utils/ai-guide.ts
-var GUIDE_MARKER_START = "<!-- wairon-guide-start -->";
-var GUIDE_MARKER_END = "<!-- wairon-guide-end -->";
-var GLOBAL_GUIDE_BODY = `## wairon \u2014 Spec-Driven Development (optional)
-
-If \`.wai/specs/\` exists, the wairon SDD workflow is active; otherwise ignore it. wairon does not orchestrate sessions \u2014 it equips yours.
-
-### In SDD Projects:
-- **Source of Truth**: All architecture lives in the spec tree under \`.wai/specs/\` (L0 System \u2192 L1 Subsystem \u2192 L2 Component \u2192 L3 Interface \u2192 L4 Implementation \u2192 L5 Narrative). Do not edit generated agent config files under \`.claude/agents/\` (rebuilt via \`wairon generate\`).
-- **Validation**: Conformance checks (stereotype rules, cycle checks, reference integrity) are run via the \`sdd_validate_tree\` MCP tool.
-- **Operating Rules**:
-  1. **Skills**: Use \`sdd-architect\` to design (and \`sdd-implement\`, \`sdd-narrative\`, \`sdd-auditor\`). Refer to project's local guide file for detailed constraints.
-  2. **MCP Tools Only**: Author/validate specs *only* via \`sdd_*\` tools (e.g. \`sdd_initialize_system\`, \`sdd_validate_tree\`).
-  3. **No CLI Exec**: Do not run the \`wairon\` CLI (human tool). Use MCP tools \`sdd_validate_tree\` and \`sdd_get_status\` instead.
-  4. **Delegation**: Delegate implementation via the \`sdd-delegate\` skill \u2014 live agent briefs (\`sdd_get_agent_brief\` MCP tool / \`wairon-agent://\` resource) are composed per call and always current; no session restart. Generated agent files are an optional materialized view of the same topology. User-owned per-agent guidance may live in \`.wai/agents/<agent-id>.md\` (folded into every brief; scaffold via \`wairon agent customize <id>\`).
-  5. **Design First**: Complete spec and pass \`sdd_validate_tree\` before writing code.
-  6. **Consistency**: Code must match L3 interfaces and L5 narratives exactly. If the spec is wrong, stop and update the spec.
-  7. **Subprojects & Namespacing**: If a subsystem uses \`projectPath\` delegation, target its specs using namespaced IDs (e.g. \`subsystem::component\`). Use leading \`::\` to target root (e.g. \`::shared::type\`) and \`super::\` to go up a level (e.g. \`super::sibling\`). wairon automatically resolves the path and strips the prefix on writes.`;
-var LOCAL_GUIDE_BODY = `## Wairon \u2014 Spec-Driven Development (you are operating inside it)
-
-This project uses **wairon**. System specs live under \`.wai/specs/\` (L0 System \u2192 L1 Subsystem \u2192 L2 Component \u2192 L3 Interface \u2192 L4 Implementation \u2192 Narrative); agent topology and code are derived from it.
-
-**Do NOT search files or read agent configs to learn about wairon or SDD. Use the context here and the \`sdd-architect\` skill to start.**
-
-**Your first move: call the \`sdd_get_status\` MCP tool** (or \`wairon/sdd_get_status\`) to see the spec tree. Do not parse files or run CLI commands manually.
-
-### How you operate
-- **To design/modify specs**: Use **\`sdd-architect\`** skill (in \`.claude/skills/\` or \`.gemini/skills/\`).
-- **Manage specs via MCP tools only**: Use \`sdd_initialize_system\`, \`sdd_add_subsystem\`, \`sdd_add_component\`, \`sdd_define_interface\`, \`sdd_write_narrative\`, \`sdd_add_type\`, \`sdd_get_spec\`, \`sdd_delete_spec\`, \`sdd_validate_tree\`, and \`sdd_get_status\` (namespaced if needed). Do not edit specs manually.
-- **Subprojects & Namespacing (Chaining)**: If a subsystem defines a \`projectPath\`, its entire \`.wai/\` spec tree is recursively loaded and namespaced with the subsystem ID as a prefix (using \`::\`, e.g. \`billing::invoice::invoice_portal\`). Use the qualified namespaced ID with the parent MCP tools; wairon will resolve the path and strip the prefix automatically.
-  - **Leading \`::\`**: Bypasses the local subsystem prefix to resolve absolute from the system root (e.g. \`::shared::error-type\`).
-  - **\`super::\`**: Goes up one parent subsystem level (e.g. \`super::sibling_comp\`, \`super::super::parent_sibling\`).
-- **Do not run the \`wairon\` CLI**: Use \`sdd_validate_tree\` and \`sdd_get_status\` instead of CLI commands.
-- **Handoff to implementation**: Once design is complete and validates cleanly, tell the human: *"The specs are complete and validate. Please run \`wairon lock\` to confirm and freeze them."* No session restart is needed after the lock \u2014 delegate implementation right away via the \`sdd-delegate\` skill.
-- **To implement code**: Delegate via the \`sdd-delegate\` skill: fetch the component's live brief with the \`sdd_get_agent_brief\` MCP tool (or the \`wairon-agent://\` resource) and spawn a subagent from it. Briefs are composed per call from the current spec tree, so they are always current \u2014 never wait for a restart. Implementations must match L3 interfaces and L5 narratives exactly. Generated agent files under \`.claude/agents/\` are an optional materialized view of the same topology \u2014 the live briefs are canonical.
-
-### Rules (enforced by \`sdd_validate_tree\`)
-1. **Design before code**: Complete spec and pass validator before writing source code.
-2. **Human-in-the-loop**: Ask user approval for each spec layer before proceeding.
-3. **Spec consistency**: If a 1:1 narrative match is incorrect or conflicts with L0 requirements, escalate a spec revision first. Never ship mismatched code.
-4. **No persistence shortcuts & strict layers**: A Portal must never depend directly on a Store, Registry, or Adapter. Portal reads MAY go through a Repository/Index facade (passthrough reads need no per-entity Orchestrator ceremony), but a Portal narrative call or dispatch-table binding that reaches a write-effect facade method is an error (\`PORTAL_WRITE_SHORTCUT\`) \u2014 writes always route through an Orchestrator. Held domain state always lives in a dedicated data component, never as fields inside an Orchestrator. Two sanctioned shapes: the RECOMMENDED Repository pattern (owns Store + Registry + Index; consumers depend on the facade), or \u2014 for genuinely simple state \u2014 a deliberately standalone Store (workflow-layer consumers only, acknowledged with a lint.allow reason on the UNOWNED_STORE warning). Never combine Store/Registry/Index roles into one component, and never fold state into a consuming component because a link was refused.
-
-### Component Vocabulary
-* **Blocks**: Portal, Orchestrator, Supervisor, Actor, Store, Index, Query, Registry, Adapter, Observer.
-* **Patterns**: Repository \u2014 the composable pattern that \`owns\` its member blocks: one Store with its Registry, Indexes and Queries, and optionally an Adapter.
-* **Variants**: \`gateway\`, a Portal that authenticates, authorizes, validates or rate-limits before it dispatches. Logic is an Orchestrator, and \`dependencyClass: pure | read\` bounds what it may depend on (unset = a workflow). Specialist and Gateway are retired stereotypes.
-* Use \`owns\` for private member containment (exactly one hop) and \`dependsOn\` for collaborators. Never use generic suffixes like "Manager", "Helper", or "Utils".`;
-function globalGuideFilePath(targetType) {
-  if (targetType === "claude") return path22.join(process.env["CLAUDE_CONFIG_DIR"] || path22.join(os4.homedir(), ".claude"), "CLAUDE.md");
-  if (targetType === "gemini") return path22.join(process.env["GEMINI_CONFIG_DIR"] || path22.join(os4.homedir(), ".gemini"), "GEMINI.md");
-  return null;
-}
-function localGuideFilePath(projectRoot, targetType) {
-  if (targetType === "claude") return path22.join(projectRoot, ".claude", "CLAUDE.md");
-  if (targetType === "gemini" || targetType === "agy") return path22.join(projectRoot, ".gemini", "GEMINI.md");
-  return null;
+var sdkPortal = __toESM(require_dist());
+var STAGING_PREFIX = ".wai-staging-";
+var BACKUP_DIR = ".wai-backups";
+function buildTreeArchive2(roots, projectName, stateId, includeDerived) {
+  return sdkPortal.buildTreeArchive(roots, projectName, stateId, includeDerived);
 }
-function injectGuide(filePath, scope) {
-  const body = scope === "global" ? GLOBAL_GUIDE_BODY : LOCAL_GUIDE_BODY;
-  const section = `
-
-${GUIDE_MARKER_START}
-${versionStamp()}
-${body}
-${GUIDE_MARKER_END}
-`;
-  const existing = fs17.existsSync(filePath) ? fs17.readFileSync(filePath, "utf-8") : "";
-  const stripped = stripGuideSection(existing);
-  const newContent = stripped.trimEnd() + section;
-  fs17.mkdirSync(path22.dirname(filePath), { recursive: true });
-  fs17.writeFileSync(filePath, newContent, "utf-8");
+function inspectTreeArchive2(archive) {
+  return sdkPortal.inspectTreeArchive(archive);
 }
-function stripGuideSection(content) {
-  const start = content.indexOf(GUIDE_MARKER_START);
-  const end = content.indexOf(GUIDE_MARKER_END);
-  if (start === -1 || end === -1) return content;
-  return content.slice(0, start) + content.slice(end + GUIDE_MARKER_END.length);
+function extractTreeArchive2(archive, destDir, refuseExecutableEntries) {
+  const limits = void 0;
+  return sdkPortal.extractTreeArchive(archive, destDir, limits, refuseExecutableEntries);
 }
-function writeRootGuideDelegator(projectRoot, targetType) {
-  if (targetType === "claude") {
-    const filePath = path22.join(projectRoot, "CLAUDE.md");
-    const content = `@.claude/CLAUDE.md
-
-# Wairon SDD Project
-
-This project uses the Wairon Spec-Driven Development (SDD) framework. The imported
-\`.claude/CLAUDE.md\` above is your complete operating guide \u2014 you already have the
-full context, so don't search the project to learn how wairon or SDD works.
-
-To design or modify the system, invoke the **\`sdd-architect\`** skill
-(in \`.claude/skills/\`). Author and validate specs with the \`sdd_*\` MCP tools;
-the \`wairon\` CLI is the human developer's tool, not yours.
-`;
-    fs17.writeFileSync(filePath, content, "utf-8");
-  } else if (targetType === "gemini" || targetType === "agy") {
-    const filePath = path22.join(projectRoot, "GEMINI.md");
-    const content = `# Wairon SDD Project
-${GUIDE_MARKER_START}
-${versionStamp()}
-${LOCAL_GUIDE_BODY}
-${GUIDE_MARKER_END}
-`;
-    fs17.writeFileSync(filePath, content, "utf-8");
-  } else if (targetType === "cursor") {
-    const filePath = path22.join(projectRoot, ".cursorrules");
-    const content = `# Wairon SDD Project
-
-This project uses the Wairon Spec-Driven Development (SDD) framework.
-
-Refer to the rules in [.cursor/rules/](.cursor/rules/) for full instructions.
-`;
-    fs17.writeFileSync(filePath, content, "utf-8");
-  } else if (targetType === "copilot") {
-    const filePath = path22.join(projectRoot, ".github", "copilot-instructions.md");
-    fs17.mkdirSync(path22.dirname(filePath), { recursive: true });
-    const content = `# Wairon SDD Project
-
-This project uses the Wairon Spec-Driven Development (SDD) framework.
-
-Refer to the prompts in [.github/prompts/](.github/prompts/) for instructions.
-`;
-    fs17.writeFileSync(filePath, content, "utf-8");
-  } else if (targetType === "codex") {
-    const filePath = path22.join(projectRoot, ".codexrules");
-    const content = `# Wairon SDD Project
-
-Refer to [.codex/agents/](.codex/agents/) for full instructions.
-`;
-    fs17.writeFileSync(filePath, content, "utf-8");
+function hasSpecTree(root) {
+  if (pathExists(aiPathsAt(root).projectConfig())) {
+    return true;
   }
+  return false;
 }
-var GUIDE_TARGETS = ["claude", "gemini", "agy", "cursor", "copilot", "codex"];
-function reinjectLocalGuides(projectRoot, targetTypes) {
-  const written = [];
-  for (const type of targetTypes) {
-    if (!GUIDE_TARGETS.includes(type)) continue;
-    const guidePath = localGuideFilePath(projectRoot, type);
-    if (guidePath) {
-      injectGuide(guidePath, "local");
-      if (!written.includes(guidePath)) written.push(guidePath);
+function hasAuthoredSpecs(root) {
+  const paths = aiPathsAt(root);
+  const specsDir = paths.specsDir();
+  if (!pathExists(specsDir)) {
+    return false;
+  }
+  const systemIndex = path22.resolve(paths.specsSystem());
+  for (const file of listFilesRecursive(specsDir, ".yaml")) {
+    if (path22.resolve(file) !== systemIndex) {
+      return true;
     }
-    writeRootGuideDelegator(projectRoot, type);
   }
-  return written;
-}
-
-// src/core/context.ts
-function contextDir(...segments) {
-  return aiDir("context", ...segments);
-}
-var CONTEXT_PATHS = {
-  dir: () => contextDir(),
-  projectMd: () => contextDir("project.md"),
-  architectureMd: () => contextDir("architecture.md"),
-  domainsMd: () => contextDir("domains.md"),
-  waironGuideMd: () => contextDir("wairon-guide.md")
-};
-function hasContext() {
-  return pathExists(CONTEXT_PATHS.projectMd());
-}
-function hasArchitectureContext() {
-  return pathExists(CONTEXT_PATHS.architectureMd());
-}
-function readProjectContext() {
-  return readFileOrNull(CONTEXT_PATHS.projectMd());
-}
-function readArchitectureContext() {
-  return readFileOrNull(CONTEXT_PATHS.architectureMd());
-}
-function writeProjectContext(content) {
-  writeFile(CONTEXT_PATHS.projectMd(), content);
+  return false;
 }
-function writeArchitectureContext(content) {
-  writeFile(CONTEXT_PATHS.architectureMd(), content);
+function createStagingDir(destDir) {
+  const root = path22.resolve(destDir);
+  fs17.mkdirSync(root, { recursive: true });
+  const stagingDir = fs17.mkdtempSync(path22.join(root, STAGING_PREFIX));
+  return stagingDir;
 }
-function renderDomainsDoc() {
-  const domains = resolveDomains();
-  const lines = [
-    versionStamp(),
-    `# Domains`,
-    ``,
-    `> Auto-generated by wairon. The human developer rebuilds this with \`wairon generate\`.  `,
-    ``
-  ];
-  if (domains.length === 0) {
-    lines.push("_No domains yet. Define subsystems in the spec tree, or add free-standing domains with `wairon domains add`._");
-  } else {
-    lines.push(`**${domains.length} domain(s).**`);
-    lines.push("");
-    lines.push("| ID | Name | Source | Owned paths |");
-    lines.push("|----|------|--------|-------------|");
-    for (const d of domains) {
-      const name = d.name ?? d.id;
-      const source = d.boundTo ? `subsystem \`${d.boundTo}\`` : "free-standing";
-      lines.push(`| \`${d.id}\` | ${name} | ${source} | \`${d.ownedPaths.join("`, `") || "\u2014"}\` |`);
+function commitStagedTree(stagingDir, destDir, roots, backupExisting) {
+  const root = path22.resolve(destDir);
+  const backupDir = path22.join(root, BACKUP_DIR, timestampSlug());
+  let backedUp = false;
+  for (const rootRel of roots) {
+    const relative9 = rootRel === "." ? "" : rootRel;
+    const stagedSpecDir = path22.join(stagingDir, relative9, ".wai");
+    if (!fs17.existsSync(stagedSpecDir)) continue;
+    const liveSpecDir = liveSpecDirFor(path22.join(root, relative9));
+    if (backupExisting && liveSpecDir && fs17.existsSync(liveSpecDir)) {
+      const backupTarget = path22.join(backupDir, relative9, path22.basename(liveSpecDir));
+      fs17.mkdirSync(path22.dirname(backupTarget), { recursive: true });
+      fs17.renameSync(liveSpecDir, backupTarget);
+      backedUp = true;
+    } else if (liveSpecDir && fs17.existsSync(liveSpecDir)) {
+      fs17.rmSync(liveSpecDir, { recursive: true, force: true });
     }
+    const target = path22.join(root, relative9, ".wai");
+    fs17.mkdirSync(path22.dirname(target), { recursive: true });
+    if (fs17.existsSync(target)) fs17.rmSync(target, { recursive: true, force: true });
+    fs17.renameSync(stagedSpecDir, target);
   }
-  return lines.join("\n") + "\n";
+  if (backedUp) {
+    return backupDir;
+  }
+  return "";
 }
-function renderWaironGuide() {
-  const domains = resolveDomains();
-  let projectName = "this project";
+function discardStagingDir(stagingDir) {
   try {
-    projectName = projectConfigRepository.load()?.name ?? projectName;
+    fs17.rmSync(stagingDir, { recursive: true, force: true });
   } catch {
   }
-  const projectCtx = readProjectContext();
-  const archCtx = readArchitectureContext();
-  const lines = [
-    versionStamp(),
-    `<!-- wairon-generated \u2014 do not edit directly; the human developer rebuilds this with \`wairon generate\` -->`,
-    ``
-  ];
-  if (projectCtx) {
-    lines.push(`# Project Context \u2014 ${projectName}`);
-    lines.push("");
-    lines.push(projectCtx.trim());
-    lines.push("");
-    lines.push("---");
-    lines.push("");
+}
+function exportSpecTree(includeDerived, allowPartial) {
+  const system = loadSystemSpec();
+  if (!system) {
+    throw new Error("no spec tree to export at this project root");
   }
-  if (archCtx) {
-    lines.push("# Architecture");
-    lines.push("");
-    lines.push(archCtx.trim());
-    lines.push("");
-    lines.push("---");
-    lines.push("");
-  }
-  lines.push(`# Domain Map (${domains.length} domain${domains.length !== 1 ? "s" : ""})`);
-  lines.push("");
-  if (domains.length === 0) {
-    lines.push("_No domains yet._");
-  } else {
-    lines.push("| ID | Source | Name |");
-    lines.push("|----|--------|------|");
-    for (const d of domains) {
-      const name = d.name ?? d.id;
-      const source = d.boundTo ? `subsystem \`${d.boundTo}\`` : "free-standing";
-      lines.push(`| \`${d.id}\` | ${source} | ${name} |`);
-    }
-  }
-  lines.push("");
-  lines.push("---");
-  lines.push("");
-  const mcpSettingsPath = require("path").join(process.cwd(), ".claude", "settings.json");
-  let mcpInstalled = false;
-  try {
-    const s = JSON.parse(require("fs").readFileSync(mcpSettingsPath, "utf8"));
-    mcpInstalled = !!s?.mcpServers?.wairon;
-  } catch {
-  }
-  if (mcpInstalled) {
-    lines.push("# wairon MCP Tools");
-    lines.push("");
-    lines.push("The **wairon MCP server** is active in this project. The tools are self-describing; call them directly:");
-    lines.push("");
-    lines.push("- Authoring: `sdd_initialize_system`, `sdd_add_subsystem`, `sdd_set_public_interfaces`, `sdd_set_subsystem_project_path`, `sdd_add_component`, `sdd_define_interface`, `sdd_set_endpoints`, `sdd_write_narrative`, `sdd_add_type`.");
-    lines.push("- Reading & maintenance: `sdd_get_spec`, `sdd_update_spec`, `sdd_delete_spec`, `sdd_validate_tree`, `sdd_get_status`.");
-    lines.push("- Topology: `listAgents`, `getAgent`, `listDomains`, `validateTopology`, `getProjectConfig`.");
-    lines.push("");
-    lines.push("Use these MCP tools to query and change project state \u2014 never the `wairon` CLI (that is the human developer's tool).");
-    lines.push("");
-    lines.push("---");
-    lines.push("");
-  }
-  lines.push(GLOBAL_GUIDE_BODY);
-  lines.push("");
-  return lines.join("\n");
-}
-function syncContextFiles() {
-  const domainsContent = renderDomainsDoc();
-  const guideContent = renderWaironGuide();
-  const domainsUpdated = writeFileIfChanged(CONTEXT_PATHS.domainsMd(), domainsContent);
-  const guideUpdated = writeFileIfChanged(CONTEXT_PATHS.waironGuideMd(), guideContent);
-  return { domainsUpdated, guideUpdated };
-}
-
-// src/core/treetransfer.ts
-var fs18 = __toESM(require("fs"));
-var path23 = __toESM(require("path"));
-var sdkPortal = __toESM(require_dist());
-var STAGING_PREFIX = ".wai-staging-";
-var BACKUP_DIR = ".wai-backups";
-function buildTreeArchive2(roots, projectName, stateId, includeDerived) {
-  return sdkPortal.buildTreeArchive(roots, projectName, stateId, includeDerived);
-}
-function inspectTreeArchive2(archive) {
-  return sdkPortal.inspectTreeArchive(archive);
-}
-function extractTreeArchive2(archive, destDir, refuseExecutableEntries) {
-  const limits = void 0;
-  return sdkPortal.extractTreeArchive(archive, destDir, limits, refuseExecutableEntries);
-}
-function hasSpecTree(root) {
-  if (pathExists(aiPathsAt(root).projectConfig())) {
-    return true;
-  }
-  return false;
-}
-function hasAuthoredSpecs(root) {
-  const paths = aiPathsAt(root);
-  const specsDir = paths.specsDir();
-  if (!pathExists(specsDir)) {
-    return false;
-  }
-  const systemIndex = path23.resolve(paths.specsSystem());
-  for (const file of listFilesRecursive(specsDir, ".yaml")) {
-    if (path23.resolve(file) !== systemIndex) {
-      return true;
-    }
-  }
-  return false;
-}
-function createStagingDir(destDir) {
-  const root = path23.resolve(destDir);
-  fs18.mkdirSync(root, { recursive: true });
-  const stagingDir = fs18.mkdtempSync(path23.join(root, STAGING_PREFIX));
-  return stagingDir;
-}
-function commitStagedTree(stagingDir, destDir, roots, backupExisting) {
-  const root = path23.resolve(destDir);
-  const backupDir = path23.join(root, BACKUP_DIR, timestampSlug());
-  let backedUp = false;
-  for (const rootRel of roots) {
-    const relative9 = rootRel === "." ? "" : rootRel;
-    const stagedSpecDir = path23.join(stagingDir, relative9, ".wai");
-    if (!fs18.existsSync(stagedSpecDir)) continue;
-    const liveSpecDir = liveSpecDirFor(path23.join(root, relative9));
-    if (backupExisting && liveSpecDir && fs18.existsSync(liveSpecDir)) {
-      const backupTarget = path23.join(backupDir, relative9, path23.basename(liveSpecDir));
-      fs18.mkdirSync(path23.dirname(backupTarget), { recursive: true });
-      fs18.renameSync(liveSpecDir, backupTarget);
-      backedUp = true;
-    } else if (liveSpecDir && fs18.existsSync(liveSpecDir)) {
-      fs18.rmSync(liveSpecDir, { recursive: true, force: true });
-    }
-    const target = path23.join(root, relative9, ".wai");
-    fs18.mkdirSync(path23.dirname(target), { recursive: true });
-    if (fs18.existsSync(target)) fs18.rmSync(target, { recursive: true, force: true });
-    fs18.renameSync(stagedSpecDir, target);
-  }
-  if (backedUp) {
-    return backupDir;
-  }
-  return "";
-}
-function discardStagingDir(stagingDir) {
-  try {
-    fs18.rmSync(stagingDir, { recursive: true, force: true });
-  } catch {
-  }
-}
-function exportSpecTree(includeDerived, allowPartial) {
-  const system = loadSystemSpec();
-  if (!system) {
-    throw new Error("no spec tree to export at this project root");
-  }
-  const inspection = inspectChainedRoots();
-  const root = getProjectRoot();
-  const skipped = [...inspection.skipped];
-  const roots = [{ relativePath: ".", waiDir: aiPathsAt(root).root() }];
-  for (const rel2 of inspection.roots) {
-    const waiDir = aiPathsAt(path23.resolve(root, rel2)).root();
-    if (pathExists(waiDir)) {
-      roots.push({ relativePath: rel2, waiDir });
-    } else {
-      skipped.push({ mount: rel2, projectPath: rel2, reason: "no-spec-tree" });
-    }
+  const inspection = inspectChainedRoots();
+  const root = getProjectRoot();
+  const skipped = [...inspection.skipped];
+  const roots = [{ relativePath: ".", waiDir: aiPathsAt(root).root() }];
+  for (const rel2 of inspection.roots) {
+    const waiDir = aiPathsAt(path22.resolve(root, rel2)).root();
+    if (pathExists(waiDir)) {
+      roots.push({ relativePath: rel2, waiDir });
+    } else {
+      skipped.push({ mount: rel2, projectPath: rel2, reason: "no-spec-tree" });
+    }
   }
   if (skipped.length > 0 && !allowPartial) {
     const detail = skipped.map((s) => `${s.mount} (${s.reason})`).join(", ");
@@ -26756,7 +26455,7 @@ function importSpecTree(archive, options) {
   if (!info.compatible) {
     throw new Error("incompatible .waitree archive (format or minimum wairon version)");
   }
-  const destDir = path23.resolve(options.destDir ?? getProjectRoot());
+  const destDir = path22.resolve(options.destDir ?? getProjectRoot());
   const occupied = hasSpecTree(destDir);
   const authored = hasAuthoredSpecs(destDir);
   if (authored && options.replaceExisting !== true) {
@@ -26787,10 +26486,10 @@ function importSpecTree(archive, options) {
   return result;
 }
 function liveSpecDirFor(rootDir) {
-  const modern = path23.join(rootDir, ".wai");
-  if (fs18.existsSync(modern)) return modern;
-  const legacy = path23.join(rootDir, ".wairon");
-  if (fs18.existsSync(legacy)) return legacy;
+  const modern = path22.join(rootDir, ".wai");
+  if (fs17.existsSync(modern)) return modern;
+  const legacy = path22.join(rootDir, ".wairon");
+  if (fs17.existsSync(legacy)) return legacy;
   return null;
 }
 function timestampSlug() {
@@ -26798,10 +26497,10 @@ function timestampSlug() {
 }
 
 // src/exporters/generate.ts
-var path27 = __toESM(require("path"));
+var path26 = __toESM(require("path"));
 
 // src/exporters/claude.ts
-var path24 = __toESM(require("path"));
+var path23 = __toESM(require("path"));
 var MODEL_BY_TIER = {
   small: "haiku",
   standard: "sonnet",
@@ -26840,7 +26539,7 @@ var ClaudeExporter = class {
   outputPath(ctx) {
     const { agent, target, projectRoot } = ctx;
     const outputDir = "outputDir" in target ? target.outputDir : ".claude/agents";
-    return path24.resolve(projectRoot, outputDir, `${agent.id.replace(/::/g, "--")}.md`);
+    return path23.resolve(projectRoot, outputDir, `${agent.id.replace(/::/g, "--")}.md`);
   }
   export(ctx) {
     const { agent, renderedInstructions, budget } = ctx;
@@ -26865,7 +26564,7 @@ var ClaudeExporter = class {
 };
 
 // src/exporters/custom.ts
-var path25 = __toESM(require("path"));
+var path24 = __toESM(require("path"));
 var CustomExporter = class {
   constructor() {
     this.targetType = "custom";
@@ -26875,7 +26574,7 @@ var CustomExporter = class {
     if (!("outputDir" in target)) {
       throw new Error("CustomExporter requires target.outputDir");
     }
-    return path25.resolve(projectRoot, target.outputDir, `${agent.id.replace(/::/g, "--")}.md`);
+    return path24.resolve(projectRoot, target.outputDir, `${agent.id.replace(/::/g, "--")}.md`);
   }
   export(ctx) {
     const { agent, target, renderedInstructions } = ctx;
@@ -26898,7 +26597,7 @@ var CustomExporter = class {
 };
 
 // src/exporters/gemini.ts
-var path26 = __toESM(require("path"));
+var path25 = __toESM(require("path"));
 var GeminiExporter = class {
   constructor() {
     this.targetType = "gemini";
@@ -26906,7 +26605,7 @@ var GeminiExporter = class {
   outputPath(ctx) {
     const { agent, target, projectRoot } = ctx;
     const outputDir = "outputDir" in target ? target.outputDir : ".gemini/agents";
-    return path26.resolve(projectRoot, outputDir, `${agent.id.replace(/::/g, "--")}.yaml`);
+    return path25.resolve(projectRoot, outputDir, `${agent.id.replace(/::/g, "--")}.yaml`);
   }
   export(ctx) {
     const { agent, renderedInstructions } = ctx;
@@ -27003,7 +26702,7 @@ function resolveExpectedOutputPaths(agents, projectConfig, projectRoot = getProj
       const targetConfig = resolveTargetConfig(agentTarget, projectConfig);
       if (!targetConfig) continue;
       const ctx = { agent, projectRoot, target: targetConfig };
-      expected.add(path27.resolve(getExporter(targetConfig).outputPath(ctx)));
+      expected.add(path26.resolve(getExporter(targetConfig).outputPath(ctx)));
     }
   }
   return expected;
@@ -27112,167 +26811,460 @@ function retireSpecialists(apply) {
     if (retype.dependencyClass) orchestrator.dependencyClass = retype.dependencyClass;
     saveComponentSpec(orchestrator);
   }
-  const rebasedVariants = rebaseProjectVariants("Specialist", "Orchestrator");
-  invalidateSpecCache();
-  return { retyped, rebasedVariants, applied: true };
+  const rebasedVariants = rebaseProjectVariants("Specialist", "Orchestrator");
+  invalidateSpecCache();
+  return { retyped, rebasedVariants, applied: true };
+}
+
+// src/core/narrative-repair.ts
+function repairForeignStepFields(apply) {
+  const implementations = loadImplementationSpecs();
+  const repairs = [];
+  const changed = [];
+  for (const impl of implementations) {
+    let touched = false;
+    for (const method of impl.methods) {
+      for (const step of method.narrative) {
+        const fields = narrativeStepForeignFields(step);
+        if (!fields.length) continue;
+        repairs.push({
+          implementation: impl.id,
+          method: method.name,
+          stepNumber: step.stepNumber,
+          stepType: step.type,
+          fields
+        });
+        for (const field of fields) delete step[field];
+        touched = true;
+      }
+    }
+    if (touched) changed.push(impl);
+  }
+  if (apply && changed.length) {
+    for (const impl of changed) saveImplementationSpec(impl);
+    invalidateSpecCache();
+  }
+  return repairs;
+}
+
+// src/core/approval.ts
+var crypto4 = __toESM(require("crypto"));
+var path27 = __toESM(require("path"));
+function diffSize(d) {
+  return d.added.length + d.changed.length + d.removed.length;
+}
+function digest(content) {
+  const normalized = content.replace(/\r\n/g, "\n");
+  return crypto4.createHash("sha256").update(normalized, "utf8").digest("hex");
+}
+function currentSpecDigests(root = getProjectRoot()) {
+  const mountDirs = loadSubsystemSpecs().filter((s) => s.projectPath && !s.id.includes("::")).map((s) => `${path27.resolve(root, s.projectPath).split(path27.sep).join("/")}/`);
+  const out = {};
+  for (const [abs, content] of snapshotSpecFiles()) {
+    const normalized = path27.resolve(abs).split(path27.sep).join("/");
+    if (mountDirs.some((dir) => normalized.startsWith(dir))) continue;
+    out[path27.relative(root, abs).split(path27.sep).join("/")] = digest(content);
+  }
+  return out;
+}
+function captureApprovedSpecs(root = getProjectRoot(), scope) {
+  const current2 = currentSpecDigests(root);
+  if (!scope) return current2;
+  const previous = readLockRecord()?.specs ?? {};
+  const specs = { ...previous };
+  for (const rel2 of Object.keys(previous)) {
+    if (scope.paths.has(rel2) && current2[rel2] === void 0) delete specs[rel2];
+  }
+  for (const rel2 of scope.paths) {
+    if (current2[rel2] !== void 0) specs[rel2] = current2[rel2];
+  }
+  return specs;
+}
+function diffAgainstApproval(root = getProjectRoot()) {
+  const approved = approvedSpecs(root);
+  if (!approved) return null;
+  const current2 = currentSpecDigests(root);
+  const added = [];
+  const changed = [];
+  const removed = [];
+  const unchangedPaths = [];
+  for (const [rel2, d] of Object.entries(current2)) {
+    const before = approved[rel2];
+    if (before === void 0) added.push(rel2);
+    else if (before !== d) changed.push(rel2);
+    else unchangedPaths.push(rel2);
+  }
+  for (const rel2 of Object.keys(approved)) {
+    if (current2[rel2] === void 0) removed.push(rel2);
+  }
+  return {
+    added: added.sort(),
+    changed: changed.sort(),
+    removed: removed.sort(),
+    unchangedPaths: unchangedPaths.sort()
+  };
+}
+function approvedSpecs(root) {
+  return approvalRecord(root)?.specs ?? null;
+}
+function approvalRecord(root = getProjectRoot()) {
+  return readLockRecordAt(root);
+}
+function settledSpecPaths(root = getProjectRoot()) {
+  const diff = diffAgainstApproval(root);
+  return diff ? new Set(diff.unchangedPaths) : null;
+}
+function pinOf(stateId) {
+  return `${stateId.algorithm}:${stateId.digest}`;
+}
+function currentChildPins(mounts, root = getProjectRoot()) {
+  const pins = {};
+  for (const mount of mounts) {
+    if (!mount.projectPath || mount.id.includes("::")) continue;
+    const child = readLockRecordAt(path27.resolve(root, mount.projectPath));
+    if (child) pins[mount.id] = pinOf(child.stateId);
+  }
+  return pins;
+}
+function movedChildren(mounts, root = getProjectRoot()) {
+  const pinned = approvalRecord(root)?.children;
+  if (!pinned) return [];
+  const now = currentChildPins(mounts, root);
+  const moved = [];
+  for (const [id, was] of Object.entries(pinned)) {
+    const current2 = now[id] ?? null;
+    if (current2 !== was) moved.push({ id, pinned: was, now: current2 });
+  }
+  return moved;
+}
+
+// src/core/approver.ts
+var import_child_process = require("child_process");
+var os4 = __toESM(require("os"));
+function gitConfig(key) {
+  try {
+    const value = (0, import_child_process.execFileSync)("git", ["config", "--get", key], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
+    }).trim();
+    return value || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function machineIdentity() {
+  let user = "unknown";
+  try {
+    user = os4.userInfo().username || user;
+  } catch {
+  }
+  let host = "";
+  try {
+    host = os4.hostname();
+  } catch {
+  }
+  return { id: host ? `${user}@${host}` : user, source: "os" };
+}
+function localApprover() {
+  const name = gitConfig("user.name");
+  const email = gitConfig("user.email");
+  if (name && email) return { id: `${name} <${email}>`, source: "git" };
+  if (email) return { id: email, source: "git" };
+  return machineIdentity();
+}
+
+// src/utils/ai-guide.ts
+var fs18 = __toESM(require("fs"));
+var os5 = __toESM(require("os"));
+var path28 = __toESM(require("path"));
+
+// src/core/stamp.ts
+function versionStamp() {
+  return `<!-- wairon-version: ${WAIRON_VERSION} -->`;
+}
+var STAMP_RE = /<!--\s*wairon-version:\s*([^\s]+)\s*-->/;
+function readStampVersion(content) {
+  const m = content.match(STAMP_RE);
+  return m ? m[1] : null;
+}
+
+// src/utils/ai-guide.ts
+var GUIDE_MARKER_START = "<!-- wairon-guide-start -->";
+var GUIDE_MARKER_END = "<!-- wairon-guide-end -->";
+var GLOBAL_GUIDE_BODY = `## wairon \u2014 Spec-Driven Development (optional)
+
+If \`.wai/specs/\` exists, the wairon SDD workflow is active; otherwise ignore it. wairon does not orchestrate sessions \u2014 it equips yours.
+
+### In SDD Projects:
+- **Source of Truth**: All architecture lives in the spec tree under \`.wai/specs/\` (L0 System \u2192 L1 Subsystem \u2192 L2 Component \u2192 L3 Interface \u2192 L4 Implementation \u2192 L5 Narrative). Do not edit generated agent config files under \`.claude/agents/\` (rebuilt via \`wairon generate\`).
+- **Validation**: Conformance checks (stereotype rules, cycle checks, reference integrity) are run via the \`sdd_validate_tree\` MCP tool.
+- **Operating Rules**:
+  1. **Skills**: Use \`sdd-architect\` to design (and \`sdd-implement\`, \`sdd-narrative\`, \`sdd-auditor\`). Refer to project's local guide file for detailed constraints.
+  2. **MCP Tools Only**: Author/validate specs *only* via \`sdd_*\` tools (e.g. \`sdd_initialize_system\`, \`sdd_validate_tree\`).
+  3. **No CLI Exec**: Do not run the \`wairon\` CLI (human tool). Use MCP tools \`sdd_validate_tree\` and \`sdd_get_status\` instead.
+  4. **Delegation**: Delegate implementation via the \`sdd-delegate\` skill \u2014 live agent briefs (\`sdd_get_agent_brief\` MCP tool / \`wairon-agent://\` resource) are composed per call and always current; no session restart. Generated agent files are an optional materialized view of the same topology. User-owned per-agent guidance may live in \`.wai/agents/<agent-id>.md\` (folded into every brief; scaffold via \`wairon agent customize <id>\`).
+  5. **Design First**: Complete spec and pass \`sdd_validate_tree\` before writing code.
+  6. **Consistency**: Code must match L3 interfaces and L5 narratives exactly. If the spec is wrong, stop and update the spec.
+  7. **Subprojects & Namespacing**: If a subsystem uses \`projectPath\` delegation, target its specs using namespaced IDs (e.g. \`subsystem::component\`). Use leading \`::\` to target root (e.g. \`::shared::type\`) and \`super::\` to go up a level (e.g. \`super::sibling\`). wairon automatically resolves the path and strips the prefix on writes.`;
+var LOCAL_GUIDE_BODY = `## Wairon \u2014 Spec-Driven Development (you are operating inside it)
+
+This project uses **wairon**. System specs live under \`.wai/specs/\` (L0 System \u2192 L1 Subsystem \u2192 L2 Component \u2192 L3 Interface \u2192 L4 Implementation \u2192 Narrative); agent topology and code are derived from it.
+
+**Do NOT search files or read agent configs to learn about wairon or SDD. Use the context here and the \`sdd-architect\` skill to start.**
+
+**Your first move: call the \`sdd_get_status\` MCP tool** (or \`wairon/sdd_get_status\`) to see the spec tree. Do not parse files or run CLI commands manually.
+
+### How you operate
+- **To design/modify specs**: Use **\`sdd-architect\`** skill (in \`.claude/skills/\` or \`.gemini/skills/\`).
+- **Manage specs via MCP tools only**: Use \`sdd_initialize_system\`, \`sdd_add_subsystem\`, \`sdd_add_component\`, \`sdd_define_interface\`, \`sdd_write_narrative\`, \`sdd_add_type\`, \`sdd_get_spec\`, \`sdd_delete_spec\`, \`sdd_validate_tree\`, and \`sdd_get_status\` (namespaced if needed). Do not edit specs manually.
+- **Subprojects & Namespacing (Chaining)**: If a subsystem defines a \`projectPath\`, its entire \`.wai/\` spec tree is recursively loaded and namespaced with the subsystem ID as a prefix (using \`::\`, e.g. \`billing::invoice::invoice_portal\`). Use the qualified namespaced ID with the parent MCP tools; wairon will resolve the path and strip the prefix automatically.
+  - **Leading \`::\`**: Bypasses the local subsystem prefix to resolve absolute from the system root (e.g. \`::shared::error-type\`).
+  - **\`super::\`**: Goes up one parent subsystem level (e.g. \`super::sibling_comp\`, \`super::super::parent_sibling\`).
+- **Do not run the \`wairon\` CLI**: Use \`sdd_validate_tree\` and \`sdd_get_status\` instead of CLI commands.
+- **Handoff to implementation**: Once design is complete and validates cleanly, tell the human: *"The specs are complete and validate. Please run \`wairon lock\` to confirm and freeze them."* No session restart is needed after the lock \u2014 delegate implementation right away via the \`sdd-delegate\` skill.
+- **To implement code**: Delegate via the \`sdd-delegate\` skill: fetch the component's live brief with the \`sdd_get_agent_brief\` MCP tool (or the \`wairon-agent://\` resource) and spawn a subagent from it. Briefs are composed per call from the current spec tree, so they are always current \u2014 never wait for a restart. Implementations must match L3 interfaces and L5 narratives exactly. Generated agent files under \`.claude/agents/\` are an optional materialized view of the same topology \u2014 the live briefs are canonical.
+
+### Rules (enforced by \`sdd_validate_tree\`)
+1. **Design before code**: Complete spec and pass validator before writing source code.
+2. **Human-in-the-loop**: Ask user approval for each spec layer before proceeding.
+3. **Spec consistency**: If a 1:1 narrative match is incorrect or conflicts with L0 requirements, escalate a spec revision first. Never ship mismatched code.
+4. **No persistence shortcuts & strict layers**: A Portal must never depend directly on a Store, Registry, or Adapter. Portal reads MAY go through a Repository/Index facade (passthrough reads need no per-entity Orchestrator ceremony), but a Portal narrative call or dispatch-table binding that reaches a write-effect facade method is an error (\`PORTAL_WRITE_SHORTCUT\`) \u2014 writes always route through an Orchestrator. Held domain state always lives in a dedicated data component, never as fields inside an Orchestrator. Two sanctioned shapes: the RECOMMENDED Repository pattern (owns Store + Registry + Index; consumers depend on the facade), or \u2014 for genuinely simple state \u2014 a deliberately standalone Store (workflow-layer consumers only, acknowledged with a lint.allow reason on the UNOWNED_STORE warning). Never combine Store/Registry/Index roles into one component, and never fold state into a consuming component because a link was refused.
+
+### Component Vocabulary
+* **Blocks**: Portal, Orchestrator, Supervisor, Actor, Store, Index, Query, Registry, Adapter, Observer.
+* **Patterns**: Repository \u2014 the composable pattern that \`owns\` its member blocks: one Store with its Registry, Indexes and Queries, and optionally an Adapter.
+* **Variants**: \`gateway\`, a Portal that authenticates, authorizes, validates or rate-limits before it dispatches. Logic is an Orchestrator, and \`dependencyClass: pure | read\` bounds what it may depend on (unset = a workflow). Specialist and Gateway are retired stereotypes.
+* Use \`owns\` for private member containment (exactly one hop) and \`dependsOn\` for collaborators. Never use generic suffixes like "Manager", "Helper", or "Utils".`;
+function globalGuideFilePath(targetType) {
+  if (targetType === "claude") return path28.join(process.env["CLAUDE_CONFIG_DIR"] || path28.join(os5.homedir(), ".claude"), "CLAUDE.md");
+  if (targetType === "gemini") return path28.join(process.env["GEMINI_CONFIG_DIR"] || path28.join(os5.homedir(), ".gemini"), "GEMINI.md");
+  return null;
+}
+function localGuideFilePath(projectRoot, targetType) {
+  if (targetType === "claude") return path28.join(projectRoot, ".claude", "CLAUDE.md");
+  if (targetType === "gemini" || targetType === "agy") return path28.join(projectRoot, ".gemini", "GEMINI.md");
+  return null;
+}
+function injectGuide(filePath, scope) {
+  const body = scope === "global" ? GLOBAL_GUIDE_BODY : LOCAL_GUIDE_BODY;
+  const section = `
+
+${GUIDE_MARKER_START}
+${versionStamp()}
+${body}
+${GUIDE_MARKER_END}
+`;
+  const existing = fs18.existsSync(filePath) ? fs18.readFileSync(filePath, "utf-8") : "";
+  const stripped = stripGuideSection(existing);
+  const newContent = stripped.trimEnd() + section;
+  fs18.mkdirSync(path28.dirname(filePath), { recursive: true });
+  fs18.writeFileSync(filePath, newContent, "utf-8");
+}
+function stripGuideSection(content) {
+  const start = content.indexOf(GUIDE_MARKER_START);
+  const end = content.indexOf(GUIDE_MARKER_END);
+  if (start === -1 || end === -1) return content;
+  return content.slice(0, start) + content.slice(end + GUIDE_MARKER_END.length);
+}
+function writeRootGuideDelegator(projectRoot, targetType) {
+  if (targetType === "claude") {
+    const filePath = path28.join(projectRoot, "CLAUDE.md");
+    const content = `@.claude/CLAUDE.md
+
+# Wairon SDD Project
+
+This project uses the Wairon Spec-Driven Development (SDD) framework. The imported
+\`.claude/CLAUDE.md\` above is your complete operating guide \u2014 you already have the
+full context, so don't search the project to learn how wairon or SDD works.
+
+To design or modify the system, invoke the **\`sdd-architect\`** skill
+(in \`.claude/skills/\`). Author and validate specs with the \`sdd_*\` MCP tools;
+the \`wairon\` CLI is the human developer's tool, not yours.
+`;
+    fs18.writeFileSync(filePath, content, "utf-8");
+  } else if (targetType === "gemini" || targetType === "agy") {
+    const filePath = path28.join(projectRoot, "GEMINI.md");
+    const content = `# Wairon SDD Project
+${GUIDE_MARKER_START}
+${versionStamp()}
+${LOCAL_GUIDE_BODY}
+${GUIDE_MARKER_END}
+`;
+    fs18.writeFileSync(filePath, content, "utf-8");
+  } else if (targetType === "cursor") {
+    const filePath = path28.join(projectRoot, ".cursorrules");
+    const content = `# Wairon SDD Project
+
+This project uses the Wairon Spec-Driven Development (SDD) framework.
+
+Refer to the rules in [.cursor/rules/](.cursor/rules/) for full instructions.
+`;
+    fs18.writeFileSync(filePath, content, "utf-8");
+  } else if (targetType === "copilot") {
+    const filePath = path28.join(projectRoot, ".github", "copilot-instructions.md");
+    fs18.mkdirSync(path28.dirname(filePath), { recursive: true });
+    const content = `# Wairon SDD Project
+
+This project uses the Wairon Spec-Driven Development (SDD) framework.
+
+Refer to the prompts in [.github/prompts/](.github/prompts/) for instructions.
+`;
+    fs18.writeFileSync(filePath, content, "utf-8");
+  } else if (targetType === "codex") {
+    const filePath = path28.join(projectRoot, ".codexrules");
+    const content = `# Wairon SDD Project
+
+Refer to [.codex/agents/](.codex/agents/) for full instructions.
+`;
+    fs18.writeFileSync(filePath, content, "utf-8");
+  }
 }
-
-// src/core/narrative-repair.ts
-function repairForeignStepFields(apply) {
-  const implementations = loadImplementationSpecs();
-  const repairs = [];
-  const changed = [];
-  for (const impl of implementations) {
-    let touched = false;
-    for (const method of impl.methods) {
-      for (const step of method.narrative) {
-        const fields = narrativeStepForeignFields(step);
-        if (!fields.length) continue;
-        repairs.push({
-          implementation: impl.id,
-          method: method.name,
-          stepNumber: step.stepNumber,
-          stepType: step.type,
-          fields
-        });
-        for (const field of fields) delete step[field];
-        touched = true;
-      }
+var GUIDE_TARGETS = ["claude", "gemini", "agy", "cursor", "copilot", "codex"];
+function reinjectLocalGuides(projectRoot, targetTypes) {
+  const written = [];
+  for (const type of targetTypes) {
+    if (!GUIDE_TARGETS.includes(type)) continue;
+    const guidePath = localGuideFilePath(projectRoot, type);
+    if (guidePath) {
+      injectGuide(guidePath, "local");
+      if (!written.includes(guidePath)) written.push(guidePath);
     }
-    if (touched) changed.push(impl);
-  }
-  if (apply && changed.length) {
-    for (const impl of changed) saveImplementationSpec(impl);
-    invalidateSpecCache();
+    writeRootGuideDelegator(projectRoot, type);
   }
-  return repairs;
+  return written;
 }
 
-// src/core/approval.ts
-var crypto4 = __toESM(require("crypto"));
-var path28 = __toESM(require("path"));
-function diffSize(d) {
-  return d.added.length + d.changed.length + d.removed.length;
-}
-function digest(content) {
-  const normalized = content.replace(/\r\n/g, "\n");
-  return crypto4.createHash("sha256").update(normalized, "utf8").digest("hex");
-}
-function currentSpecDigests(root = getProjectRoot()) {
-  const mountDirs = loadSubsystemSpecs().filter((s) => s.projectPath && !s.id.includes("::")).map((s) => `${path28.resolve(root, s.projectPath).split(path28.sep).join("/")}/`);
-  const out = {};
-  for (const [abs, content] of snapshotSpecFiles()) {
-    const normalized = path28.resolve(abs).split(path28.sep).join("/");
-    if (mountDirs.some((dir) => normalized.startsWith(dir))) continue;
-    out[path28.relative(root, abs).split(path28.sep).join("/")] = digest(content);
-  }
-  return out;
-}
-function captureApprovedSpecs(root = getProjectRoot(), scope) {
-  const current2 = currentSpecDigests(root);
-  if (!scope) return current2;
-  const previous = readLockRecord()?.specs ?? {};
-  const specs = { ...previous };
-  for (const rel2 of Object.keys(previous)) {
-    if (scope.paths.has(rel2) && current2[rel2] === void 0) delete specs[rel2];
-  }
-  for (const rel2 of scope.paths) {
-    if (current2[rel2] !== void 0) specs[rel2] = current2[rel2];
-  }
-  return specs;
+// src/core/context.ts
+function contextDir(...segments) {
+  return aiDir("context", ...segments);
 }
-function diffAgainstApproval(root = getProjectRoot()) {
-  const approved = approvedSpecs(root);
-  if (!approved) return null;
-  const current2 = currentSpecDigests(root);
-  const added = [];
-  const changed = [];
-  const removed = [];
-  const unchangedPaths = [];
-  for (const [rel2, d] of Object.entries(current2)) {
-    const before = approved[rel2];
-    if (before === void 0) added.push(rel2);
-    else if (before !== d) changed.push(rel2);
-    else unchangedPaths.push(rel2);
-  }
-  for (const rel2 of Object.keys(approved)) {
-    if (current2[rel2] === void 0) removed.push(rel2);
-  }
-  return {
-    added: added.sort(),
-    changed: changed.sort(),
-    removed: removed.sort(),
-    unchangedPaths: unchangedPaths.sort()
-  };
+var CONTEXT_PATHS = {
+  dir: () => contextDir(),
+  projectMd: () => contextDir("project.md"),
+  architectureMd: () => contextDir("architecture.md"),
+  domainsMd: () => contextDir("domains.md"),
+  waironGuideMd: () => contextDir("wairon-guide.md")
+};
+function hasContext() {
+  return pathExists(CONTEXT_PATHS.projectMd());
 }
-function approvedSpecs(root) {
-  return approvalRecord(root)?.specs ?? null;
+function readProjectContext() {
+  return readFileOrNull(CONTEXT_PATHS.projectMd());
 }
-function approvalRecord(root = getProjectRoot()) {
-  return readLockRecordAt(root);
+function readArchitectureContext() {
+  return readFileOrNull(CONTEXT_PATHS.architectureMd());
 }
-function settledSpecPaths(root = getProjectRoot()) {
-  const diff = diffAgainstApproval(root);
-  return diff ? new Set(diff.unchangedPaths) : null;
+function writeDomainsDoc(content) {
+  return writeFileIfChanged(CONTEXT_PATHS.domainsMd(), content);
 }
-function pinOf(stateId) {
-  return `${stateId.algorithm}:${stateId.digest}`;
+function writeGuideDoc(content) {
+  return writeFileIfChanged(CONTEXT_PATHS.waironGuideMd(), content);
 }
-function currentChildPins(mounts, root = getProjectRoot()) {
-  const pins = {};
-  for (const mount of mounts) {
-    if (!mount.projectPath || mount.id.includes("::")) continue;
-    const child = readLockRecordAt(path28.resolve(root, mount.projectPath));
-    if (child) pins[mount.id] = pinOf(child.stateId);
-  }
-  return pins;
+function derivedDocPaths() {
+  return [CONTEXT_PATHS.waironGuideMd(), CONTEXT_PATHS.domainsMd()];
 }
-function movedChildren(mounts, root = getProjectRoot()) {
-  const pinned = approvalRecord(root)?.children;
-  if (!pinned) return [];
-  const now = currentChildPins(mounts, root);
-  const moved = [];
-  for (const [id, was] of Object.entries(pinned)) {
-    const current2 = now[id] ?? null;
-    if (current2 !== was) moved.push({ id, pinned: was, now: current2 });
+function renderDomainsDoc() {
+  const domains = resolveDomains();
+  const lines = [
+    versionStamp(),
+    `# Domains`,
+    ``,
+    `> Auto-generated by wairon. The human developer rebuilds this with \`wairon generate\`.  `,
+    ``
+  ];
+  if (domains.length === 0) {
+    lines.push("_No domains yet. Define subsystems in the spec tree, or add free-standing domains with `wairon domains add`._");
+  } else {
+    lines.push(`**${domains.length} domain(s).**`);
+    lines.push("");
+    lines.push("| ID | Name | Source | Owned paths |");
+    lines.push("|----|------|--------|-------------|");
+    for (const d of domains) {
+      const name = d.name ?? d.id;
+      const source = d.boundTo ? `subsystem \`${d.boundTo}\`` : "free-standing";
+      lines.push(`| \`${d.id}\` | ${name} | ${source} | \`${d.ownedPaths.join("`, `") || "\u2014"}\` |`);
+    }
   }
-  return moved;
+  return lines.join("\n") + "\n";
 }
-
-// src/core/approver.ts
-var import_child_process = require("child_process");
-var os5 = __toESM(require("os"));
-function gitConfig(key) {
+function renderWaironGuide() {
+  const domains = resolveDomains();
+  let projectName = "this project";
   try {
-    const value = (0, import_child_process.execFileSync)("git", ["config", "--get", key], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"],
-      env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
-    }).trim();
-    return value || void 0;
+    projectName = projectConfigRepository.load()?.name ?? projectName;
   } catch {
-    return void 0;
   }
-}
-function machineIdentity() {
-  let user = "unknown";
-  try {
-    user = os5.userInfo().username || user;
-  } catch {
+  const projectCtx = readProjectContext();
+  const archCtx = readArchitectureContext();
+  const lines = [
+    versionStamp(),
+    `<!-- wairon-generated \u2014 do not edit directly; the human developer rebuilds this with \`wairon generate\` -->`,
+    ``
+  ];
+  if (projectCtx) {
+    lines.push(`# Project Context \u2014 ${projectName}`);
+    lines.push("");
+    lines.push(projectCtx.trim());
+    lines.push("");
+    lines.push("---");
+    lines.push("");
   }
-  let host = "";
+  if (archCtx) {
+    lines.push("# Architecture");
+    lines.push("");
+    lines.push(archCtx.trim());
+    lines.push("");
+    lines.push("---");
+    lines.push("");
+  }
+  lines.push(`# Domain Map (${domains.length} domain${domains.length !== 1 ? "s" : ""})`);
+  lines.push("");
+  if (domains.length === 0) {
+    lines.push("_No domains yet._");
+  } else {
+    lines.push("| ID | Source | Name |");
+    lines.push("|----|--------|------|");
+    for (const d of domains) {
+      const name = d.name ?? d.id;
+      const source = d.boundTo ? `subsystem \`${d.boundTo}\`` : "free-standing";
+      lines.push(`| \`${d.id}\` | ${source} | ${name} |`);
+    }
+  }
+  lines.push("");
+  lines.push("---");
+  lines.push("");
+  const mcpSettingsPath = require("path").join(process.cwd(), ".claude", "settings.json");
+  let mcpInstalled = false;
   try {
-    host = os5.hostname();
+    const s = JSON.parse(require("fs").readFileSync(mcpSettingsPath, "utf8"));
+    mcpInstalled = !!s?.mcpServers?.wairon;
   } catch {
   }
-  return { id: host ? `${user}@${host}` : user, source: "os" };
+  if (mcpInstalled) {
+    lines.push("# wairon MCP Tools");
+    lines.push("");
+    lines.push("The **wairon MCP server** is active in this project. The tools are self-describing; call them directly:");
+    lines.push("");
+    lines.push("- Authoring: `sdd_initialize_system`, `sdd_add_subsystem`, `sdd_set_public_interfaces`, `sdd_set_subsystem_project_path`, `sdd_add_component`, `sdd_define_interface`, `sdd_set_endpoints`, `sdd_write_narrative`, `sdd_add_type`.");
+    lines.push("- Reading & maintenance: `sdd_get_spec`, `sdd_update_spec`, `sdd_delete_spec`, `sdd_validate_tree`, `sdd_get_status`.");
+    lines.push("- Topology: `listAgents`, `getAgent`, `listDomains`, `validateTopology`, `getProjectConfig`.");
+    lines.push("");
+    lines.push("Use these MCP tools to query and change project state \u2014 never the `wairon` CLI (that is the human developer's tool).");
+    lines.push("");
+    lines.push("---");
+    lines.push("");
+  }
+  lines.push(GLOBAL_GUIDE_BODY);
+  lines.push("");
+  return lines.join("\n");
 }
-function localApprover() {
-  const name = gitConfig("user.name");
-  const email = gitConfig("user.email");
-  if (name && email) return { id: `${name} <${email}>`, source: "git" };
-  if (email) return { id: email, source: "git" };
-  return machineIdentity();
+function syncContextFiles() {
+  const domainsContent = renderDomainsDoc();
+  const guideContent = renderWaironGuide();
+  const domainsUpdated = writeDomainsDoc(domainsContent);
+  const guideUpdated = writeGuideDoc(guideContent);
+  return { domainsUpdated, guideUpdated };
 }
 
 // src/core/index.ts
@@ -27372,7 +27364,6 @@ function loadProjectConfig4() {
   BuiltinTargetSchema,
   BundleNotFoundError,
   COMPONENT_AUTH_SOURCE,
-  CONTEXT_PATHS,
   CarriedDebtKindSchema,
   CarriedDebtSchema,
   CarriedFindingSchema,
@@ -27527,7 +27518,6 @@ function loadProjectConfig4() {
   computeStateIdAt,
   conceptNoun,
   consumedContractInputs,
-  contextDir,
   createAgentRecord,
   createChainedSubsystem,
   createEmptyRegistry,
@@ -27550,6 +27540,7 @@ function loadProjectConfig4() {
   deleteTypeSpec,
   deregisterPackRef,
   deriveExecutionProfile,
+  derivedDocPaths,
   describeApprover,
   detectDomainCandidates,
   diagnoseProjectPacks,
@@ -27604,7 +27595,6 @@ function loadProjectConfig4() {
   globalPacksEnabled,
   globalTemplatesDir,
   globalVariantsDir,
-  hasArchitectureContext,
   hasAuthoredSpecs,
   hasContext,
   hasFunctionBody,
@@ -27703,14 +27693,12 @@ function loadProjectConfig4() {
   projectSubsystemSurface,
   provisionProject,
   qualifiedTypeId,
-  readArchitectureContext,
   readFileOrNull,
   readJsonFile,
   readLockRecord,
   readLockRecordAt,
   readLockState,
   readManifest,
-  readProjectContext,
   readResource,
   readSkillResource,
   readStampVersion,
@@ -27727,9 +27715,7 @@ function loadProjectConfig4() {
   renameComponent,
   renameMethod,
   renderDiagram,
-  renderDomainsDoc,
   renderTemplateInstructions,
-  renderWaironGuide,
   repairForeignStepFields,
   resolveAgentTopology,
   resolveBudget,
@@ -27792,12 +27778,10 @@ function loadProjectConfig4() {
   validateRegistry,
   validateSddTree,
   workspaceFor,
-  writeArchitectureContext,
   writeFile,
   writeFileIfChanged,
   writeJsonFile,
   writeLockRecord,
-  writeProjectContext,
   writeRootGuideDelegator,
   writeYamlFile
 });