@wairon/cli 5.1.1-dev.71 → 5.1.1-dev.72

package/dist/cli/index.js

@@ -65,7 +65,7 @@ var init_defaults = __esm({
       copilot: ".github/prompts",
       codex: ".codex/agents"
     };
-    WAIRON_VERSION = "5.1.1-dev.71";
+    WAIRON_VERSION = "5.1.1-dev.72";
     GITHUB_REPO = "SYW-Apps/Waffle-AIron";
     SUPPORTED_ALIASES = ["wai"];
     SCAN_EXCLUDE_DIRS = /* @__PURE__ */ new Set([
@@ -1860,7 +1860,13 @@ var init_specs = __esm({
       /** The L2 component that realizes this public interface (the subsystem's published surface). */
       component: SpecIdSchema.optional(),
       /** Optional L3 interface on that component backing this entry. */
-      interface: SpecIdSchema.optional()
+      interface: SpecIdSchema.optional(),
+      /**
+       * The subsystems this surface is published to. Absent, anyone may depend on
+       * it; present, only these subsystems may — when every entry publishing the
+       * component names consumers, the union of those lists is the whole set.
+       */
+      consumers: import_zod8.z.array(SpecIdSchema).optional()
     });
     TrustedLinkSchema = import_zod8.z.object({
       /** The peer subsystem id this link sanctions tight coupling with. */
@@ -9477,6 +9483,39 @@ var init_public_surface_binding = __esm({
   }
 });
 
+// src/core/rules/integrity/public-surface-consumers.ts
+var publicSurfaceConsumersRule;
+var init_public_surface_consumers = __esm({
+  "src/core/rules/integrity/public-surface-consumers.ts"() {
+    "use strict";
+    init_models();
+    publicSurfaceConsumersRule = {
+      name: "public-surface-consumers",
+      description: "Every subsystem a published surface names as its consumer must exist in the tree. A consumers list restricts who may depend on the surface, so an id that names nothing locks the surface against a caller nobody can be \u2014 and a typo there silently locks out the caller that was meant, which the boundary rule would then report against the wrong party.",
+      codes: [
+        { code: "PUBLIC_INTERFACE_UNKNOWN_CONSUMER", defaultSeverity: "error", summary: "A published surface names as its consumer a subsystem the tree does not have" }
+      ],
+      check(ctx) {
+        const known = new Set(ctx.subsystems.map((s) => s.id));
+        for (const sub of ctx.subsystems) {
+          for (const pi of sub.publicInterfaces) {
+            for (const consumer of pi.consumers ?? []) {
+              if (known.has(consumer)) continue;
+              ctx.addIssue(
+                "error",
+                "PUBLIC_INTERFACE_UNKNOWN_CONSUMER",
+                `Subsystem "${sub.id}" publishes "${pi.component ?? `${pi.type} ${pi.details}`}" to consumer "${consumer}", which names no subsystem of this tree. Name an existing subsystem, or drop the id \u2014 a consumers list admits only the subsystems it names.`,
+                sub.id,
+                isDraftSubsystem(sub)
+              );
+            }
+          }
+        }
+      }
+    };
+  }
+});
+
 // src/core/rules/integrity/public-surface-declared-type.ts
 var pubTypeMatches, EVENT_VOCAB, expectedFor, publicSurfaceDeclaredTypeRule;
 var init_public_surface_declared_type = __esm({
@@ -11009,6 +11048,11 @@ var init_auth_source_wiring = __esm({
 });
 
 // src/core/rules/doctrine/subsystem-boundary-dependencies.ts
+function restrictedConsumers(ctx, subsystemId, componentId) {
+  const entries = (ctx.subsystems.find((s) => s.id === subsystemId)?.publicInterfaces ?? []).filter((pi) => pi.component === componentId);
+  if (entries.length === 0 || entries.some((pi) => pi.consumers === void 0)) return null;
+  return [...new Set(entries.flatMap((pi) => pi.consumers ?? []))];
+}
 var subsystemBoundaryDepsRule;
 var init_subsystem_boundary_dependencies = __esm({
   "src/core/rules/doctrine/subsystem-boundary-dependencies.ts"() {
@@ -11016,14 +11060,15 @@ var init_subsystem_boundary_dependencies = __esm({
     init_models();
     subsystemBoundaryDepsRule = {
       name: "subsystem-boundary-dependencies",
-      description: "Judges every dependsOn edge that leaves its own subsystem, and every one that resolves nowhere. Across subsystems the shape is client Adapter \u2192 published remote Portal, OR a direct in-process edge licensed by a trustedLink declared on the SOURCE subsystem (the published-Portal target requirement applies either way). A reference that names nothing in this tree is resolved against the stored surface snapshots: a hit is a DECLARED remote portal and the same Adapter requirement applies to it, snapshots of several providers that disagree make the reference ambiguous, and a reference authored to leave this root that no snapshot covers warns instead of erroring. Boundary rules are never relaxed by a pack profile.",
+      description: "Judges every dependsOn edge that leaves its own subsystem, and every one that resolves nowhere. Across subsystems the shape is client Adapter \u2192 published remote Portal, OR a direct in-process edge licensed by a trustedLink declared on the SOURCE subsystem (the published-Portal target requirement applies either way). A published surface may also name the subsystems it serves (a publicInterfaces entry's consumers): a component every one of whose entries names consumers may be depended on only from those subsystems, which is how a provider keeps a surface \u2014 the raw spec writes \u2014 away from a door that must not reach it. A reference that names nothing in this tree is resolved against the stored surface snapshots: a hit is a DECLARED remote portal and the same Adapter requirement applies to it, snapshots of several providers that disagree make the reference ambiguous, and a reference authored to leave this root that no snapshot covers warns instead of erroring. Boundary rules are never relaxed by a pack profile.",
       codes: [
         { code: "INVALID_DEPENDENCY_REFERENCE", defaultSeverity: "error", summary: "dependsOn names a non-existent component" },
         { code: "CROSS_TREE_REF_UNRESOLVED", defaultSeverity: "warning", summary: "Cross-tree dependsOn (super::/:: form) with no surface snapshot covering it" },
         { code: "SURFACE_REF_AMBIGUOUS", defaultSeverity: "error", summary: "Cross-tree dependsOn matched by surface snapshots of several providers with different contracts" },
         { code: "CROSS_SUBSYSTEM_NON_ADAPTER", defaultSeverity: "error", summary: "Non-Adapter component crossing a subsystem boundary" },
         { code: "CROSS_SUBSYSTEM_PRIVATE_ACCESS", defaultSeverity: "error", summary: "Cross-subsystem dependency on an unpublished component" },
-        { code: "CROSS_SUBSYSTEM_TARGET_NON_PORTAL", defaultSeverity: "error", summary: "Cross-subsystem hop entering through a non-Portal" }
+        { code: "CROSS_SUBSYSTEM_TARGET_NON_PORTAL", defaultSeverity: "error", summary: "Cross-subsystem hop entering through a non-Portal" },
+        { code: "CROSS_SUBSYSTEM_UNLISTED_CONSUMER", defaultSeverity: "error", summary: "Cross-subsystem dependency on a surface published only to other subsystems" }
       ],
       check(ctx) {
         for (const edge of ctx.dependencyEdges().all) {
@@ -11106,6 +11151,16 @@ var init_subsystem_boundary_dependencies = __esm({
               edge.draftContext
             );
           }
+          const publishedTo = restrictedConsumers(ctx, depComp.subsystem, depComp.id);
+          if (publishedTo && !publishedTo.includes(comp.subsystem)) {
+            ctx.addIssue(
+              "error",
+              "CROSS_SUBSYSTEM_UNLISTED_CONSUMER",
+              `Boundary violation: "${comp.id}" (subsystem "${comp.subsystem}") depends on "${depComp.id}", which subsystem "${depComp.subsystem}" publishes only to ${publishedTo.map((s) => `"${s}"`).join(", ")}. Depend on a surface published to "${comp.subsystem}" instead, or \u2014 when "${comp.subsystem}" really is a caller the provider meant to serve \u2014 add it to the entry's consumers.`,
+              comp.id,
+              edge.draftContext
+            );
+          }
         }
       }
     };
@@ -15983,6 +16038,7 @@ var init_repository = __esm({
     init_field_type_references();
     init_signature_type_references();
     init_public_surface_binding();
+    init_public_surface_consumers();
     init_public_surface_declared_type();
     init_public_surface_bound_contract();
     init_lint_allows();
@@ -16161,10 +16217,11 @@ var init_repository = __esm({
       assertionForbiddenEdgesRule,
       assertionRequiredFieldsRule,
       assertionEndpointShapesRule,
-      // The published surface in three questions: what backs the entry, whether
-      // that component's stereotype can realize the type it declares, and whether
-      // the contract it binds is that component's own.
+      // The published surface in four questions: what backs the entry, who it is
+      // published to, whether that component's stereotype can realize the type it
+      // declares, and whether the contract it binds is that component's own.
       publicSurfaceBindingRule,
+      publicSurfaceConsumersRule,
       publicSurfaceDeclaredTypeRule,
       publicSurfaceBoundContractRule,
       cyclesRule,
@@ -19949,7 +20006,10 @@ function stripNamespaceFromSubsystem(spec, prefix) {
     publicInterfaces: spec.publicInterfaces.map((pi) => ({
       ...pi,
       component: pi.component ? relMember(pi.component) : void 0,
-      interface: pi.interface ? relMember(pi.interface) : void 0
+      interface: pi.interface ? relMember(pi.interface) : void 0,
+      // consumers name SUBSYSTEMS — peers of this one, so they are relative to
+      // the namespace the subsystem itself is declared in, never its members'.
+      ...pi.consumers ? { consumers: pi.consumers.map((c) => c.includes("::") ? relativizeId(c, prefix) : c) } : {}
     })),
     lifecycle: spec.lifecycle?.map((le) => ({
       ...le,
@@ -20897,7 +20957,10 @@ var init_specs2 = __esm({
             publicInterfaces: sub.publicInterfaces.map((p) => ({
               ...p,
               component: p.component ? qualifyId(p.component, componentPrefix, this.rootSubsystems) : void 0,
-              interface: p.interface ? qualifyId(p.interface, componentPrefix, this.rootSubsystems) : void 0
+              interface: p.interface ? qualifyId(p.interface, componentPrefix, this.rootSubsystems) : void 0,
+              // Each consumer is a subsystem reference: qualified into the namespace
+              // this subsystem is declared in, like a component's `subsystem` field.
+              ...p.consumers ? { consumers: p.consumers.map((c) => qualifySubsystemRef(c, namespacePrefix, this.rootSubsystems)) } : {}
             })),
             lifecycle: sub.lifecycle?.map((le) => ({
               ...le,
@@ -22511,7 +22574,8 @@ var init_specs2 = __esm({
                 out.publicInterfaces = out.publicInterfaces.map((pi) => ({
                   ...pi,
                   ...typeof pi?.component === "string" ? { component: qm(pi.component) } : {},
-                  ...typeof pi?.interface === "string" ? { interface: qm(pi.interface) } : {}
+                  ...typeof pi?.interface === "string" ? { interface: qm(pi.interface) } : {},
+                  ...Array.isArray(pi?.consumers) ? { consumers: pi.consumers.map((c) => typeof c === "string" ? qualifySubsystemRef(c, prefix, this.rootSubsystems) : c) } : {}
                 }));
               }
               if (Array.isArray(out.lifecycle)) {
@@ -29129,643 +29193,680 @@ var init_core = __esm({
   }
 });
 
-// src/core/instructions.ts
-function governingProfile() {
+// src/core/authoring.ts
+function candidateOptions() {
   try {
-    return loadProjectConfig4()?.projectType ?? null;
+    const config = loadProjectConfig();
+    return config ? { rules: config.rules, projectType: config.projectType } : {};
   } catch {
-    return null;
+    return {};
   }
 }
-function blockApplies(block, profile) {
-  if (!block.profile || block.profile.length === 0) return true;
-  return profile !== null && block.profile.includes(profile);
-}
-function skillPointers(skills) {
-  if (skills.length === 0) return "(none published by this server)";
-  return skills.map((s) => `- \`${s.resourceUri}\` \u2014 ${s.description || s.name}`).join("\n");
+function noticesFrom(verdict) {
+  return verdict.warnings.map((w) => `${w.code}: ${w.message}`);
 }
-function waironInstructions(profile, packNames, skills, variants) {
-  return `# wairon \u2014 Spec-Driven Development (SDD)
-
-This server owns one system's **spec tree**: its architecture, specified top-down
-and machine-checked. Author it ONLY through this server's \`sdd_*\` tools \u2014 never by
-writing spec files directly, and never via the \`wairon\` CLI (that is the human
-developer's tool).
-
-## The tree: L0 \u2192 L5
-
-- **L0 System** \u2014 vision, boundaries, global requirements, target language.
-- **L1 Subsystem** \u2014 an isolated service, its \`publicInterfaces\`, its trusted links.
-- **L2 Component** \u2014 ONE building block (\`Portal\`, \`Orchestrator\`, \`Supervisor\`,
-  \`Actor\`, \`Store\`, \`Index\`, \`Query\`, \`Registry\`, \`Adapter\`, \`Observer\`, and
-  \`View\` for UIs) or pattern (\`Repository\`, and \`FeatureComponent\` or
-  \`RouterComponent\` for UIs), plus \`owns\` (a pattern's private members) and
-  \`dependsOn\` (collaborators). Logic is an \`Orchestrator\` whose \`dependencyClass\`
-  (\`pure\` or \`read\`; unset, a workflow) bounds what it may depend on; a gateway is
-  a \`Portal\` with the \`gateway\` variant. \`Specialist\` and \`Gateway\` are retired.
-- **L3 Interface** \u2014 the contract: method signatures with structured \`params\`,
-  plus wire \`endpoint\` bindings for a Portal's methods.
-- **L4 Implementation** \u2014 a concrete realization of one L3 contract: narrative
-  detail level, bound \`technologies\` (the vendor swap seam), optional \`sourcePath\`.
-- **L5 Narrative** \u2014 each method's logic as a FLAT numbered step list; \`call\` steps
-  resolve to real dependency methods, and flow steps jump by step number.
-
-These stereotypes are not labels \u2014 they carry enforced dependency rules (e.g. a
-Portal may not depend on a Store; state lives in a Store, never as fields inside
-an Orchestrator). \`sdd_validate_tree\` is the gate, and it is the authority on
-whether a design is legal.
-
-## Authoring order
-
-1. \`sdd_initialize_system\` (L0), then \`sdd_add_subsystem\` (L1).
-2. Then, **one subsystem at a time**: \`sdd_add_component\` (L2) \u2192 \`sdd_define_interface\`
-   (L3) \u2192 \`sdd_set_endpoints\` for Portals \u2192 \`sdd_write_narrative\` (L4+L5).
-3. Run \`sdd_validate_tree\` as you go \u2014 early and per subsystem, not once at the end.
-   \`sdd_get_status\` reports completeness; \`sdd_get_spec\` reads any spec back as JSON.
-4. Edit granularly with \`sdd_update_spec\` (it renumbers narrative steps and
-   relocates jump targets for you).
-
-## The tool schemas are the field reference
-
-Every \`sdd_*\` tool's input schema is self-describing and authoritative \u2014 read the
-schema rather than guessing field names, and prefer structured \`params\` over prose
-signatures. Specs are ${profile === null ? "validated against the project's configured profile" : `governed by the **\`${profile}\`** profile`}, which decides which stereotypes are legal
-here, which narrative flow constructs the target language supports, and which
-extra rules apply. A subsystem may override the profile for itself.
-
-## Loaded extension packs
-
-${packNames.length === 0 ? "None \u2014 only wairon's built-in doctrine applies." : `${packNames.map((n) => `\`${n}\``).join(", ")} \u2014 these inject profiles, language tables, patterns, and
-additional conformance rules. Their doctrine is enforced by the same gate.`}
-
-${variants.length === 0 ? "" : `## Component variants in play
-
-This project defines variants \u2014 named, base-anchored kinds carrying implementation
-guidance, so every component of the same kind is built alike: ${variants.map((v) => `\`${v.id}\` (a kind of ${v.base})`).join(", ")}.
-Tag a component with \`variant\` where it fits, and read a component's resolved
-guidance and its same-variant siblings from \`sdd_get_spec\` (kind: component).
-
-`}## Read the skills BEFORE authoring
-
-This server publishes its skills as MCP resources. **Read \`wairon-skill://sdd-architect\`
-before you design anything**, and the others when their turn comes \u2014 they carry the
-architecture standard, the narrative step reference, and the review checklist that
-this briefing only points at:
-
-${skillPointers(skills)}
-
-## Delegating implementation
-
-Delegate component work from a LIVE agent brief, never a generated file: discover
-agents via \`listAgents\` (or the \`wairon-agent://\` resources), fetch the target's
-brief with \`sdd_get_agent_brief\`, and spawn a scoped subagent from it \u2014 its
-\`instructions\` as prompt, its \`ownedPaths\` as write fence. Briefs are composed
-from the current spec tree on every call, so a re-lock never requires a session
-restart \u2014 fetch fresh per delegation. \`wairon-skill://sdd-delegate\` carries the
-full flow.`;
+function componentCandidateGate(options = candidateOptions()) {
+  return {
+    gate: (kind, merged) => {
+      if (kind !== "component") return;
+      const verdict = validateComponentCandidate(merged, options);
+      if (verdict.errors.length) throw new Error(formatCandidateRefusal(verdict));
+      return noticesFrom(verdict);
+    }
+  };
 }
-function buildServerInstructions() {
-  const profile = governingProfile();
-  let skills = [];
-  let blocks = [];
-  let packNames = [];
-  const variants = [];
-  try {
-    skills = listSkillResources();
-    const extensions = loadProjectExtensions2();
-    blocks = extensions.instructions;
-    packNames = extensions.packNames;
-  } catch {
-  }
-  const sections = [waironInstructions(profile, packNames, skills, variants)];
-  for (const block of blocks) {
-    if (!blockApplies(block, profile)) continue;
-    sections.push(`## From pack "${block.pack}"
-
-${block.text.trim()}`);
+function restatementParent(restatement) {
+  const spec = restatement.spec;
+  switch (restatement.kind) {
+    case "subsystem":
+      return { kind: "system", id: "system" };
+    case "component":
+      return { kind: "subsystem", id: spec.subsystem };
+    case "interface":
+      return { kind: "component", id: spec.component };
+    case "implementation":
+      return { kind: "interface", id: spec.contract };
+    default:
+      return null;
   }
-  return sections.join("\n\n");
 }
-var init_instructions = __esm({
-  "src/core/instructions.ts"() {
-    "use strict";
-    init_skills();
+function applyRestatement(restatement, existing, parent) {
+  const replacedExisting = existing !== null;
+  const parentRef = restatementParent(restatement);
+  if (parentRef && !parent) return refused(restatement, replacedExisting, MISSING_PARENT[restatement.kind](parentRef.id));
+  const status2 = statusForCreate(restatement, existing);
+  if ("refusal" in status2) return refused(restatement, replacedExisting, status2.refusal);
+  const candidate = JSON.parse(JSON.stringify(restatement.spec));
+  if (restatement.kind === "subsystem") candidate.parentSystem = parent.name;
+  const carried = carryInto(restatement, existing, candidate);
+  const cleared = clearedByOmission(existing, candidate, restatement.fields);
+  stampLifecycle(candidate, existing, status2.status);
+  const labelErrors = resolveLabelsOf(restatement.kind, candidate);
+  if (labelErrors.length) {
+    return refused(restatement, replacedExisting, `Unresolved narrative label references \u2014 nothing was saved:
+- ${labelErrors.join("\n- ")}`);
   }
-});
-
-// src/core/skills.ts
-function loadProjectExtensions2() {
-  return loadProjectExtensions();
+  const parsed = parseCandidate(restatement.kind, candidate);
+  if ("refusal" in parsed) return refused(restatement, replacedExisting, parsed.refusal);
+  return {
+    spec: parsed.spec,
+    ...status2.status ? { status: status2.status } : {},
+    replacedExisting,
+    notices: existing ? rewriteNotices(restatement.kind, existing, candidate, carried, cleared) : [],
+    changedMethods: changedMethodsOf(restatement.kind, existing, candidate)
+  };
 }
-function loadProjectConfig4() {
-  return loadProjectConfig();
+function parseCandidate(kind, candidate) {
+  const masked = /* @__PURE__ */ new Map();
+  const mask = (value) => {
+    if (typeof value === "string") {
+      if (!value.includes("::")) return value;
+      const token = `nsref_${masked.size}_masked`;
+      masked.set(token, value);
+      return token;
+    }
+    if (Array.isArray(value)) return value.map(mask);
+    if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, mask(v)]));
+    return value;
+  };
+  const restore = (value) => {
+    if (typeof value === "string") return masked.get(value) ?? value;
+    if (Array.isArray(value)) return value.map(restore);
+    if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, restore(v)]));
+    return value;
+  };
+  const result = SPEC_SCHEMA[kind].safeParse(mask(candidate));
+  if (result.success) return { spec: restore(result.data) };
+  const id = kind === "system" ? "system" : String(candidate.id);
+  const issues = result.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ");
+  return {
+    refusal: `Refusing to write ${kind} "${id}": the spec it would become does not parse \u2014 ${issues}. Nothing was written. State the missing or malformed field and call again.`
+  };
 }
-function packSkillId(skill) {
-  return `${packNamespace(skill.pack)}-${skill.id}`;
+function refused(restatement, replacedExisting, refusal2) {
+  return { spec: restatement.spec, refusal: refusal2, replacedExisting, notices: [], changedMethods: [] };
 }
-function packNamespace(pack) {
-  return pack.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+function statusForCreate(restatement, existing) {
+  if (!STATUSED_KINDS.has(restatement.kind)) return {};
+  const stated = restatement.status;
+  const stored = existing?.status;
+  const held = stored !== void 0 && STATUS_ORDER.includes(stored) ? stored : void 0;
+  if (stated === void 0) return { status: held ?? "draft" };
+  if (held === void 0 || STATUS_ORDER.indexOf(stated) >= STATUS_ORDER.indexOf(held)) return { status: stated };
+  const label = `${restatement.kind} "${restatement.spec.id}"`;
+  return {
+    refusal: `Refusing to re-author ${label} at status "${stated}": it is stored at "${held}", and a create tool never lowers a spec's status \u2014 a restatement that reopened a frozen spec would undo a lock without saying so. Nothing was written. To reopen it deliberately, use sdd_update_spec with {"status": "${stated}"}; to keep the level it has, leave status out.`
+  };
 }
-function extensionsFor(builtin, packSkills) {
-  return packSkills.filter((s) => s.extends === builtin && fs20.existsSync(s.sourcePath));
+function carryInto(restatement, existing, candidate) {
+  if (!existing) return [];
+  const carried = ["createdAt"];
+  if (restatement.memberFields && Array.isArray(candidate.methods)) {
+    const stored = existing.methods ?? [];
+    for (const method2 of candidate.methods) {
+      const prev = stored.find((p) => p.name === method2.name);
+      for (const field of carryUnexpressed(prev, method2, restatement.memberFields)) carried.push(`${field} (${String(method2.name)})`);
+    }
+  }
+  carried.push(...carryUnexpressed(existing, candidate, [...restatement.fields, "createdAt"]));
+  return carried;
 }
-function composeBuiltinSkill(name, packSkills) {
-  const srcPath = skillTemplatePath(name);
-  const base = fs20.existsSync(srcPath) ? fs20.readFileSync(srcPath, "utf-8") : "";
-  const sections = extensionsFor(name, packSkills);
-  if (sections.length === 0) return base;
-  const parts = [base.trimEnd()];
-  for (const section of sections) {
-    const body = fs20.readFileSync(section.sourcePath, "utf-8").replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/, "");
-    parts.push(`## Platform: ${section.pack}`, body.trim());
+function carryUnexpressed(existing, next, expressed) {
+  if (!existing) return [];
+  const carried = [];
+  for (const [field, value] of Object.entries(existing)) {
+    if (value === void 0) continue;
+    if (STORE_MANAGED_FIELDS.has(field)) continue;
+    if (expressed.includes(field) && !ALWAYS_CARRIED_FIELDS.has(field)) continue;
+    if (next[field] !== void 0) continue;
+    next[field] = value;
+    carried.push(field);
   }
-  return `${parts.join("\n\n")}
-`;
+  return carried;
 }
-function readFrontmatter(raw, fallbackName) {
-  const match = /^---\r?\n([\s\S]*?)\r?\n---/.exec(raw);
-  const block = match ? match[1] : "";
-  const field = (key) => {
-    const m = new RegExp(`^${key}:\\s*(.*)$`, "m").exec(block);
-    return m ? m[1].trim() : "";
-  };
-  return { name: field("name") || fallbackName, description: field("description") };
-}
-function builtinSkillsDir() {
-  return path31.resolve(__dirname, "..", "templates", "skills");
-}
-function skillTemplatePath(name) {
-  return path31.join(builtinSkillsDir(), `${name}.md`);
+function isEmptyValue(value) {
+  if (value === void 0 || value === null) return true;
+  if (Array.isArray(value)) return value.length === 0;
+  if (typeof value === "string") return value.trim() === "";
+  if (typeof value === "object") return Object.keys(value).length === 0;
+  return false;
 }
-function skillDestPath(type, destDir, name) {
-  if (type === "claude" || type === "codex" || type === "gemini" || type === "agy") {
-    return path31.join(destDir, name, "SKILL.md");
+function clearedByOmission(existing, next, expressed) {
+  if (!existing) return [];
+  const stored = existing;
+  const cleared = [];
+  for (const field of expressed) {
+    const before = stored[field];
+    if (STORE_MANAGED_FIELDS.has(field) || ALWAYS_CARRIED_FIELDS.has(field)) continue;
+    if (isEmptyValue(before) || !isEmptyValue(next[field])) continue;
+    cleared.push(Array.isArray(before) ? `${field} (had ${before.length})` : field);
   }
-  return path31.join(destDir, `${name}.md`);
+  return cleared;
 }
-function skillsDirForTarget(type) {
-  switch (type) {
-    case "claude":
-      return fromProjectRoot(".claude", "skills");
-    case "gemini":
-    // Gemini-based Antigravity
-    case "agy":
-    case "codex":
-      return fromProjectRoot(".agents", "skills");
-    case "cursor":
-      return fromProjectRoot(".cursor", "skills");
-    default:
-      return null;
-  }
+function stampLifecycle(candidate, existing, status2) {
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  candidate.createdAt = existing?.createdAt ?? now;
+  candidate.updatedAt = now;
+  if (status2) candidate.status = status2;
+  else delete candidate.status;
 }
-function listSkillNames() {
-  return [...SKILL_NAMES];
+function resolveLabelsOf(kind, candidate) {
+  if (kind !== "implementation") return [];
+  const methods = candidate.methods ?? [];
+  return methods.flatMap((m) => resolveNarrativeLabels(m.name, m.narrative ?? []));
 }
-function exportSddSkills(targetTypes) {
-  const types = targetTypes ?? activeTargetTypes2();
-  const destinations = [];
-  const skipped = [];
-  let fileCount = 0;
-  const packSkills = loadProjectExtensions2().skills;
-  for (const type of types) {
-    const destDir = skillsDirForTarget(type);
-    if (!destDir) {
-      skipped.push(type);
-      continue;
-    }
-    ensureDir(destDir);
-    destinations.push(destDir);
-    for (const name of SKILL_NAMES) {
-      if (!fs20.existsSync(skillTemplatePath(name))) continue;
-      const content = composeBuiltinSkill(name, packSkills.filter((s) => s.targets.includes(type)));
-      const destPath = skillDestPath(type, destDir, name);
-      ensureDir(path31.dirname(destPath));
-      fs20.writeFileSync(destPath, content, "utf-8");
-      fileCount++;
-    }
-    for (const skill of packSkills) {
-      if (skill.extends !== void 0) continue;
-      if (!skill.targets.includes(type)) continue;
-      if (!fs20.existsSync(skill.sourcePath)) continue;
-      const id = packSkillId(skill);
-      const content = fs20.readFileSync(skill.sourcePath, "utf-8");
-      const destPath = skillDestPath(type, destDir, id);
-      ensureDir(path31.dirname(destPath));
-      fs20.writeFileSync(destPath, content, "utf-8");
-      fileCount++;
-    }
+function removedByName(before, after) {
+  if (!before?.length) return [];
+  const kept = new Set((after ?? []).map((m) => m.name));
+  return before.map((m) => m.name).filter((n) => !kept.has(n));
+}
+function rewriteNotices(kind, existing, candidate, carried, cleared) {
+  const named = kind === "system" ? existing.name : String(candidate.id);
+  const notices = [`${REWRITE_LABEL[kind]} "${named}" already existed \u2014 re-authored in place; this input REPLACES what it expresses.`];
+  if (carried.length) notices.push(`Carried forward (not expressible through this tool): ${carried.join(", ")}.`);
+  const removal = removalNotice(kind, existing, candidate);
+  if (removal) notices.push(removal);
+  if (cleared.length) {
+    notices.push(
+      `CLEARED by omission: ${cleared.join(", ")} \u2014 the argument was not repeated, so the previous value is gone. Use sdd_update_spec if you meant to leave it untouched.`
+    );
   }
-  return { destinations, fileCount, skipped };
+  return notices;
 }
-function checkSkillFreshness(type) {
-  const dir = skillsDirForTarget(type);
-  const result = { dir, missing: [], stale: [], ok: [] };
-  if (!dir) return result;
-  const packSkills = loadProjectExtensions2().skills.filter((s) => s.targets.includes(type));
-  for (const name of SKILL_NAMES) {
-    const destPath = skillDestPath(type, dir, name);
-    if (!fs20.existsSync(destPath)) {
-      result.missing.push(name);
-      continue;
-    }
-    const want = composeBuiltinSkill(name, packSkills);
-    const have = fs20.readFileSync(destPath, "utf-8");
-    if (have === want) result.ok.push(name);
-    else result.stale.push(name);
+function removalNotice(kind, existing, candidate) {
+  const before = existing;
+  let removed = [];
+  let noun = "method";
+  let suffix = "";
+  if (kind === "interface" || kind === "implementation") {
+    removed = removedByName(before.methods, candidate.methods);
+    suffix = kind === "interface" ? " (endpoint bindings included)" : " (L5 narratives included)";
+  } else if (kind === "type") {
+    removed = [
+      ...removedByName(before.fields, candidate.fields).map((n) => `field ${n}`),
+      ...removedByName(before.methods, candidate.methods).map((n) => `method ${n}`)
+    ];
+    noun = "member";
   }
-  return result;
+  if (!removed.length) return void 0;
+  return `REMOVED by this restatement: ${removed.length === 1 ? noun : `${noun}s`} ${removed.map((n) => `"${n}"`).join(", ")}${suffix} \u2014 absent from the input, so no longer in the spec. Restate them to keep them, or use sdd_update_spec to edit one member at a time.`;
 }
-function activeTargetTypes2() {
-  const config = loadProjectConfig4();
-  if (!config) return [];
-  return activeTargetTypes(config);
+function changedMethodsOf(kind, existing, candidate) {
+  if (!existing || !(kind in METHOD_SCHEMA)) return [];
+  const schema = METHOD_SCHEMA[kind];
+  const stored = existing.methods ?? [];
+  const next = candidate.methods ?? [];
+  return stored.filter((method2) => {
+    const restated = next.find((m) => m.name === method2.name);
+    if (!restated) return true;
+    const parsed = schema.safeParse(restated);
+    return !parsed.success || canonical(parsed.data) !== canonical(method2);
+  }).map((method2) => method2.name);
 }
-function readSkillFrontmatter(name) {
-  return readFrontmatter(fs20.readFileSync(skillTemplatePath(name), "utf-8"), name);
+function canonical(value) {
+  return JSON.stringify(value, (_key, v) => v && typeof v === "object" && !Array.isArray(v) ? Object.fromEntries(Object.entries(v).filter(([, x]) => x !== void 0).sort(([a], [b]) => a.localeCompare(b))) : v);
 }
-function listSkillResources() {
-  const builtin = RESOURCE_SKILL_IDS.map((id) => {
-    const fm = readSkillFrontmatter(id);
-    return {
-      id,
-      name: fm.name,
-      description: fm.description,
-      version: WAIRON_VERSION,
-      resourceUri: `${SKILL_RESOURCE_SCHEME}://${id}`,
-      defaultForHostedMcp: true
-    };
-  });
-  const pack = loadProjectExtensions2().skills.filter((s) => s.extends === void 0 && fs20.existsSync(s.sourcePath)).map((skill) => {
-    const id = packSkillId(skill);
-    const fm = readFrontmatter(fs20.readFileSync(skill.sourcePath, "utf-8"), id);
-    return {
-      id,
-      name: fm.name,
-      description: fm.description,
-      version: skill.packVersion ?? WAIRON_VERSION,
-      resourceUri: `${SKILL_RESOURCE_SCHEME}://${id}`,
-      defaultForHostedMcp: true
-    };
-  });
-  return [...builtin, ...pack];
+function writeSpec(restatement) {
+  const bound2 = candidateOptions();
+  const parentRef = restatementParent(restatement);
+  const parent = parentRef ? loadSpec(parentRef.kind, parentRef.id) : null;
+  const id = restatement.kind === "system" ? "system" : restatement.spec.id;
+  const existing = loadSpec(restatement.kind, id);
+  const application = applyRestatement(restatement, existing, parent);
+  if (application.refusal !== void 0) throw new Error(application.refusal);
+  const gateNotices = restatement.kind === "component" ? judgeComponent(application.spec, bound2) : [];
+  const persisted = persistCandidate(restatement.kind, application.spec);
+  const testsToRevisit = testsInvalidatedBy(application.changedMethods, [existing, application.spec], bound2);
+  return {
+    kind: restatement.kind,
+    id,
+    name: application.spec.name,
+    replacedExisting: application.replacedExisting,
+    ...application.status ? { status: application.status } : {},
+    notices: [...gateNotices, ...persisted.notices, ...application.notices],
+    ...persisted.scaffoldedProjectPath ? { scaffoldedProjectPath: persisted.scaffoldedProjectPath } : {},
+    testsToRevisit
+  };
 }
-function readSkillResource(resourceId) {
-  const packSkills = loadProjectExtensions2().skills;
-  if (SKILL_NAMES.includes(resourceId)) return composeBuiltinSkill(resourceId, packSkills);
-  const packSkill = packSkills.find((s) => s.extends === void 0 && packSkillId(s) === resourceId);
-  if (packSkill) return fs20.readFileSync(packSkill.sourcePath, "utf-8");
-  return fs20.readFileSync(skillTemplatePath(resourceId), "utf-8");
+function judgeComponent(candidate, options) {
+  const verdict = validateComponentCandidate(candidate, options);
+  if (verdict.errors.length) throw new Error(formatCandidateRefusal(verdict));
+  return noticesFrom(verdict);
 }
-function listResources() {
-  return listSkillResources();
+function persistCandidate(kind, spec) {
+  const projectPath = kind === "subsystem" ? spec.projectPath : void 0;
+  if (projectPath && projectPath.trim() !== "") {
+    createChainedSubsystem(spec, spec.name);
+    return { notices: [], scaffoldedProjectPath: projectPath };
+  }
+  return { notices: saveSpec(kind, spec) };
 }
-function buildServerInstructions2() {
-  return buildServerInstructions();
+function testsInvalidatedBy(methods, specs, options) {
+  const testRoots = options.rules?.conformance?.testRoots ?? [];
+  if (methods.length === 0 || testRoots.length === 0) return [];
+  const symbolOf = (name) => specs.map((s) => (s?.methods ?? []).find((m) => m.name === name)?.symbol).find((symbol) => symbol !== void 0);
+  return findTestsReferencing2(methods.map((name) => ({ name, symbol: symbolOf(name) })), getProjectRoot(), testRoots);
 }
-function readResource(resourceId) {
-  const known = listSkillResources().some((d) => d.id === resourceId);
-  if (!known) throw new SkillResourceNotFoundError(resourceId);
-  return readSkillResource(resourceId);
+function deleteSpec2(kind, id) {
+  const bound2 = candidateOptions();
+  const stored = loadSpec(kind, id);
+  const deleted = deleteSpec(kind, id);
+  const methods = deleted ? (stored?.methods ?? []).map((m) => m.name) : [];
+  const testsToRevisit = testsInvalidatedBy(methods, [stored], bound2);
+  return { kind, id, deleted, testsToRevisit };
 }
-var path31, fs20, SKILL_NAMES, SKILL_RESOURCE_SCHEME, RESOURCE_SKILL_IDS, SkillResourceNotFoundError;
-var init_skills = __esm({
-  "src/core/skills.ts"() {
-    "use strict";
-    path31 = __toESM(require("path"));
-    fs20 = __toESM(require("fs"));
-    init_fs();
-    init_defaults();
-    init_project();
-    init_extensions();
-    init_instructions();
-    init_core();
-    SKILL_NAMES = ["sdd-architect", "sdd-narrative", "sdd-auditor", "sdd-implement", "sdd-delegate"];
-    SKILL_RESOURCE_SCHEME = "wairon-skill";
-    RESOURCE_SKILL_IDS = [...SKILL_NAMES].sort();
-    SkillResourceNotFoundError = class extends Error {
-      constructor(resourceId) {
-        super(`Unknown SDD skill resource id: "${resourceId}".`);
-        this.name = "SkillResourceNotFoundError";
-      }
-    };
-  }
-});
-
-// src/core/authoring.ts
-function candidateOptions() {
-  try {
-    const config = loadProjectConfig();
-    return config ? { rules: config.rules, projectType: config.projectType } : {};
-  } catch {
-    return {};
+function updateSpecGated(kind, id, delta, dryRun) {
+  const bound2 = candidateOptions();
+  const gate = componentCandidateGate(bound2);
+  const report2 = updateSpec(kind, id, delta, gate, dryRun);
+  const testRoots = bound2.rules?.conformance?.testRoots ?? [];
+  const changed = changedMethods(report2, delta);
+  if (changed.length > 0 && testRoots.length > 0) {
+    report2.testsToRevisit = findTestsReferencing2(changed, getProjectRoot(), testRoots);
   }
+  return report2;
 }
-function noticesFrom(verdict) {
-  return verdict.warnings.map((w) => `${w.code}: ${w.message}`);
+function changedMethods(report2, delta) {
+  const named = /* @__PURE__ */ new Set();
+  for (const change of report2.changes) {
+    const [field, name] = change.path.split(".");
+    if (field === "methods" && name) named.add(name);
+  }
+  const written = Array.isArray(delta?.methods) ? delta.methods : [];
+  return [...named].map((name) => ({
+    name,
+    symbol: written.find((m) => m?.name === name)?.symbol
+  }));
 }
-function componentCandidateGate(options = candidateOptions()) {
+function methodMoveGate(source) {
+  const bound2 = candidateOptions();
   return {
     gate: (kind, merged) => {
       if (kind !== "component") return;
-      const verdict = validateComponentCandidate(merged, options);
-      if (verdict.errors.length) throw new Error(formatCandidateRefusal(verdict));
-      return noticesFrom(verdict);
-    }
+      const { codes, verdict, ceiling } = judgeMoveHome(merged, source, bound2);
+      if (codes.length === 0) return noticesFrom(verdict);
+      throw new Error(
+        `${codes.join(", ")} refuses "${merged.id}" as the home for these methods. ` + (verdict.errors.length ? formatCandidateRefusal(verdict) : `It would reach ${merged.dependsOn?.length ?? 0} dependencies against a ceiling of ${ceiling}.`)
+      );
+    },
+    assess: (kind, merged) => kind === "component" ? judgeMoveHome(merged, source, bound2).codes : []
   };
 }
-function restatementParent(restatement) {
-  const spec = restatement.spec;
-  switch (restatement.kind) {
-    case "subsystem":
-      return { kind: "system", id: "system" };
-    case "component":
-      return { kind: "subsystem", id: spec.subsystem };
-    case "interface":
-      return { kind: "component", id: spec.component };
-    case "implementation":
-      return { kind: "interface", id: spec.contract };
-    default:
-      return null;
+function judgeMoveHome(component, source, options) {
+  const ceiling = options.rules?.complexity?.maxComponentDependencies;
+  const verdict = validateComponentCandidate(component, options);
+  const codes = verdict.errors.map((e) => e.code);
+  if (component.id !== source && ceiling !== void 0 && (component.dependsOn?.length ?? 0) > ceiling) {
+    codes.push("EXCESSIVE_DEPENDENCIES");
   }
+  return { codes: [...new Set(codes)], verdict, ceiling };
 }
-function applyRestatement(restatement, existing, parent) {
-  const replacedExisting = existing !== null;
-  const parentRef = restatementParent(restatement);
-  if (parentRef && !parent) return refused(restatement, replacedExisting, MISSING_PARENT[restatement.kind](parentRef.id));
-  const status2 = statusForCreate(restatement, existing);
-  if ("refusal" in status2) return refused(restatement, replacedExisting, status2.refusal);
-  const candidate = JSON.parse(JSON.stringify(restatement.spec));
-  if (restatement.kind === "subsystem") candidate.parentSystem = parent.name;
-  const carried = carryInto(restatement, existing, candidate);
-  const cleared = clearedByOmission(existing, candidate, restatement.fields);
-  stampLifecycle(candidate, existing, status2.status);
-  const labelErrors = resolveLabelsOf(restatement.kind, candidate);
-  if (labelErrors.length) {
-    return refused(restatement, replacedExisting, `Unresolved narrative label references \u2014 nothing was saved:
-- ${labelErrors.join("\n- ")}`);
+function moveMethods2(from, to, methods, dryRun) {
+  return moveMethods(from, to, methods, methodMoveGate(from), dryRun);
+}
+var STORE_MANAGED_FIELDS, ALWAYS_CARRIED_FIELDS, STATUS_ORDER, STATUSED_KINDS, MISSING_PARENT, REWRITE_LABEL, SPEC_SCHEMA, METHOD_SCHEMA;
+var init_authoring = __esm({
+  "src/core/authoring.ts"() {
+    "use strict";
+    init_specs();
+    init_core();
+    init_validation();
+    init_candidate();
+    init_narrative_labels();
+    init_fs();
+    STORE_MANAGED_FIELDS = /* @__PURE__ */ new Set(["status", "updatedAt"]);
+    ALWAYS_CARRIED_FIELDS = /* @__PURE__ */ new Set(["ext"]);
+    STATUS_ORDER = ["draft", "design", "complete"];
+    STATUSED_KINDS = /* @__PURE__ */ new Set(["subsystem", "component", "interface", "implementation"]);
+    MISSING_PARENT = {
+      subsystem: () => "System spec must be initialized (sdd_initialize_system) first.",
+      component: (id) => `Parent subsystem "${id}" does not exist.`,
+      interface: (id) => `Component "${id}" does not exist.`,
+      implementation: (id) => `Interface contract "${id}" does not exist.`
+    };
+    REWRITE_LABEL = {
+      system: "System spec",
+      subsystem: "Subsystem",
+      component: "Component",
+      interface: "Interface",
+      implementation: "Implementation",
+      type: "Type"
+    };
+    SPEC_SCHEMA = {
+      system: SystemSpecSchema,
+      subsystem: SubsystemSpecSchema,
+      component: ComponentSpecSchema,
+      interface: InterfaceSpecSchema,
+      implementation: ImplementationSpecSchema,
+      type: TypeSpecSchema
+    };
+    METHOD_SCHEMA = {
+      interface: MethodSignatureSchema,
+      implementation: MethodImplementationSchema,
+      type: TypeMethodSchema
+    };
+  }
+});
+
+// src/core/instructions.ts
+function governingProfile() {
+  try {
+    return loadProjectConfig4()?.projectType ?? null;
+  } catch {
+    return null;
   }
-  return {
-    spec: candidate,
-    ...status2.status ? { status: status2.status } : {},
-    replacedExisting,
-    notices: existing ? rewriteNotices(restatement.kind, existing, candidate, carried, cleared) : [],
-    changedMethods: changedMethodsOf(restatement.kind, existing, candidate)
-  };
 }
-function refused(restatement, replacedExisting, refusal2) {
-  return { spec: restatement.spec, refusal: refusal2, replacedExisting, notices: [], changedMethods: [] };
+function blockApplies(block, profile) {
+  if (!block.profile || block.profile.length === 0) return true;
+  return profile !== null && block.profile.includes(profile);
 }
-function statusForCreate(restatement, existing) {
-  if (!STATUSED_KINDS.has(restatement.kind)) return {};
-  const stated = restatement.status;
-  const stored = existing?.status;
-  const held = stored !== void 0 && STATUS_ORDER.includes(stored) ? stored : void 0;
-  if (stated === void 0) return { status: held ?? "draft" };
-  if (held === void 0 || STATUS_ORDER.indexOf(stated) >= STATUS_ORDER.indexOf(held)) return { status: stated };
-  const label = `${restatement.kind} "${restatement.spec.id}"`;
-  return {
-    refusal: `Refusing to re-author ${label} at status "${stated}": it is stored at "${held}", and a create tool never lowers a spec's status \u2014 a restatement that reopened a frozen spec would undo a lock without saying so. Nothing was written. To reopen it deliberately, use sdd_update_spec with {"status": "${stated}"}; to keep the level it has, leave status out.`
-  };
+function skillPointers(skills) {
+  if (skills.length === 0) return "(none published by this server)";
+  return skills.map((s) => `- \`${s.resourceUri}\` \u2014 ${s.description || s.name}`).join("\n");
 }
-function carryInto(restatement, existing, candidate) {
-  if (!existing) return [];
-  const carried = ["createdAt"];
-  if (restatement.memberFields && Array.isArray(candidate.methods)) {
-    const stored = existing.methods ?? [];
-    for (const method2 of candidate.methods) {
-      const prev = stored.find((p) => p.name === method2.name);
-      for (const field of carryUnexpressed(prev, method2, restatement.memberFields)) carried.push(`${field} (${String(method2.name)})`);
-    }
-  }
-  carried.push(...carryUnexpressed(existing, candidate, [...restatement.fields, "createdAt"]));
-  return carried;
+function waironInstructions(profile, packNames, skills, variants) {
+  return `# wairon \u2014 Spec-Driven Development (SDD)
+
+This server owns one system's **spec tree**: its architecture, specified top-down
+and machine-checked. Author it ONLY through this server's \`sdd_*\` tools \u2014 never by
+writing spec files directly, and never via the \`wairon\` CLI (that is the human
+developer's tool).
+
+## The tree: L0 \u2192 L5
+
+- **L0 System** \u2014 vision, boundaries, global requirements, target language.
+- **L1 Subsystem** \u2014 an isolated service, its \`publicInterfaces\`, its trusted links.
+- **L2 Component** \u2014 ONE building block (\`Portal\`, \`Orchestrator\`, \`Supervisor\`,
+  \`Actor\`, \`Store\`, \`Index\`, \`Query\`, \`Registry\`, \`Adapter\`, \`Observer\`, and
+  \`View\` for UIs) or pattern (\`Repository\`, and \`FeatureComponent\` or
+  \`RouterComponent\` for UIs), plus \`owns\` (a pattern's private members) and
+  \`dependsOn\` (collaborators). Logic is an \`Orchestrator\` whose \`dependencyClass\`
+  (\`pure\` or \`read\`; unset, a workflow) bounds what it may depend on; a gateway is
+  a \`Portal\` with the \`gateway\` variant. \`Specialist\` and \`Gateway\` are retired.
+- **L3 Interface** \u2014 the contract: method signatures with structured \`params\`,
+  plus wire \`endpoint\` bindings for a Portal's methods.
+- **L4 Implementation** \u2014 a concrete realization of one L3 contract: narrative
+  detail level, bound \`technologies\` (the vendor swap seam), optional \`sourcePath\`.
+- **L5 Narrative** \u2014 each method's logic as a FLAT numbered step list; \`call\` steps
+  resolve to real dependency methods, and flow steps jump by step number.
+
+These stereotypes are not labels \u2014 they carry enforced dependency rules (e.g. a
+Portal may not depend on a Store; state lives in a Store, never as fields inside
+an Orchestrator). \`sdd_validate_tree\` is the gate, and it is the authority on
+whether a design is legal.
+
+## Authoring order
+
+1. \`sdd_initialize_system\` (L0), then \`sdd_add_subsystem\` (L1).
+2. Then, **one subsystem at a time**: \`sdd_add_component\` (L2) \u2192 \`sdd_define_interface\`
+   (L3) \u2192 \`sdd_set_endpoints\` for Portals \u2192 \`sdd_write_narrative\` (L4+L5).
+3. Run \`sdd_validate_tree\` as you go \u2014 early and per subsystem, not once at the end.
+   \`sdd_get_status\` reports completeness; \`sdd_get_spec\` reads any spec back as JSON.
+4. Edit granularly with \`sdd_update_spec\` (it renumbers narrative steps and
+   relocates jump targets for you).
+
+## The tool schemas are the field reference
+
+Every \`sdd_*\` tool's input schema is self-describing and authoritative \u2014 read the
+schema rather than guessing field names, and prefer structured \`params\` over prose
+signatures. Specs are ${profile === null ? "validated against the project's configured profile" : `governed by the **\`${profile}\`** profile`}, which decides which stereotypes are legal
+here, which narrative flow constructs the target language supports, and which
+extra rules apply. A subsystem may override the profile for itself.
+
+## Loaded extension packs
+
+${packNames.length === 0 ? "None \u2014 only wairon's built-in doctrine applies." : `${packNames.map((n) => `\`${n}\``).join(", ")} \u2014 these inject profiles, language tables, patterns, and
+additional conformance rules. Their doctrine is enforced by the same gate.`}
+
+${variants.length === 0 ? "" : `## Component variants in play
+
+This project defines variants \u2014 named, base-anchored kinds carrying implementation
+guidance, so every component of the same kind is built alike: ${variants.map((v) => `\`${v.id}\` (a kind of ${v.base})`).join(", ")}.
+Tag a component with \`variant\` where it fits, and read a component's resolved
+guidance and its same-variant siblings from \`sdd_get_spec\` (kind: component).
+
+`}## Read the skills BEFORE authoring
+
+This server publishes its skills as MCP resources. **Read \`wairon-skill://sdd-architect\`
+before you design anything**, and the others when their turn comes \u2014 they carry the
+architecture standard, the narrative step reference, and the review checklist that
+this briefing only points at:
+
+${skillPointers(skills)}
+
+## Delegating implementation
+
+Delegate component work from a LIVE agent brief, never a generated file: discover
+agents via \`listAgents\` (or the \`wairon-agent://\` resources), fetch the target's
+brief with \`sdd_get_agent_brief\`, and spawn a scoped subagent from it \u2014 its
+\`instructions\` as prompt, its \`ownedPaths\` as write fence. Briefs are composed
+from the current spec tree on every call, so a re-lock never requires a session
+restart \u2014 fetch fresh per delegation. \`wairon-skill://sdd-delegate\` carries the
+full flow.`;
 }
-function carryUnexpressed(existing, next, expressed) {
-  if (!existing) return [];
-  const carried = [];
-  for (const [field, value] of Object.entries(existing)) {
-    if (value === void 0) continue;
-    if (STORE_MANAGED_FIELDS.has(field)) continue;
-    if (expressed.includes(field) && !ALWAYS_CARRIED_FIELDS.has(field)) continue;
-    if (next[field] !== void 0) continue;
-    next[field] = value;
-    carried.push(field);
+function buildServerInstructions() {
+  const profile = governingProfile();
+  let skills = [];
+  let blocks = [];
+  let packNames = [];
+  const variants = [];
+  try {
+    skills = listSkillResources();
+    const extensions = loadProjectExtensions2();
+    blocks = extensions.instructions;
+    packNames = extensions.packNames;
+  } catch {
   }
-  return carried;
-}
-function isEmptyValue(value) {
-  if (value === void 0 || value === null) return true;
-  if (Array.isArray(value)) return value.length === 0;
-  if (typeof value === "string") return value.trim() === "";
-  if (typeof value === "object") return Object.keys(value).length === 0;
-  return false;
+  const sections = [waironInstructions(profile, packNames, skills, variants)];
+  for (const block of blocks) {
+    if (!blockApplies(block, profile)) continue;
+    sections.push(`## From pack "${block.pack}"
+
+${block.text.trim()}`);
+  }
+  return sections.join("\n\n");
 }
-function clearedByOmission(existing, next, expressed) {
-  if (!existing) return [];
-  const stored = existing;
-  const cleared = [];
-  for (const field of expressed) {
-    const before = stored[field];
-    if (STORE_MANAGED_FIELDS.has(field) || ALWAYS_CARRIED_FIELDS.has(field)) continue;
-    if (isEmptyValue(before) || !isEmptyValue(next[field])) continue;
-    cleared.push(Array.isArray(before) ? `${field} (had ${before.length})` : field);
+var init_instructions = __esm({
+  "src/core/instructions.ts"() {
+    "use strict";
+    init_skills();
   }
-  return cleared;
+});
+
+// src/core/skills.ts
+function loadProjectExtensions2() {
+  return loadProjectExtensions();
 }
-function stampLifecycle(candidate, existing, status2) {
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  candidate.createdAt = existing?.createdAt ?? now;
-  candidate.updatedAt = now;
-  if (status2) candidate.status = status2;
-  else delete candidate.status;
+function loadProjectConfig4() {
+  return loadProjectConfig();
 }
-function resolveLabelsOf(kind, candidate) {
-  if (kind !== "implementation") return [];
-  const methods = candidate.methods ?? [];
-  return methods.flatMap((m) => resolveNarrativeLabels(m.name, m.narrative ?? []));
+function packSkillId(skill) {
+  return `${packNamespace(skill.pack)}-${skill.id}`;
 }
-function removedByName(before, after) {
-  if (!before?.length) return [];
-  const kept = new Set((after ?? []).map((m) => m.name));
-  return before.map((m) => m.name).filter((n) => !kept.has(n));
+function packNamespace(pack) {
+  return pack.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
-function rewriteNotices(kind, existing, candidate, carried, cleared) {
-  const named = kind === "system" ? existing.name : String(candidate.id);
-  const notices = [`${REWRITE_LABEL[kind]} "${named}" already existed \u2014 re-authored in place; this input REPLACES what it expresses.`];
-  if (carried.length) notices.push(`Carried forward (not expressible through this tool): ${carried.join(", ")}.`);
-  const removal = removalNotice(kind, existing, candidate);
-  if (removal) notices.push(removal);
-  if (cleared.length) {
-    notices.push(
-      `CLEARED by omission: ${cleared.join(", ")} \u2014 the argument was not repeated, so the previous value is gone. Use sdd_update_spec if you meant to leave it untouched.`
-    );
-  }
-  return notices;
+function extensionsFor(builtin, packSkills) {
+  return packSkills.filter((s) => s.extends === builtin && fs20.existsSync(s.sourcePath));
 }
-function removalNotice(kind, existing, candidate) {
-  const before = existing;
-  let removed = [];
-  let noun = "method";
-  let suffix = "";
-  if (kind === "interface" || kind === "implementation") {
-    removed = removedByName(before.methods, candidate.methods);
-    suffix = kind === "interface" ? " (endpoint bindings included)" : " (L5 narratives included)";
-  } else if (kind === "type") {
-    removed = [
-      ...removedByName(before.fields, candidate.fields).map((n) => `field ${n}`),
-      ...removedByName(before.methods, candidate.methods).map((n) => `method ${n}`)
-    ];
-    noun = "member";
+function composeBuiltinSkill(name, packSkills) {
+  const srcPath = skillTemplatePath(name);
+  const base = fs20.existsSync(srcPath) ? fs20.readFileSync(srcPath, "utf-8") : "";
+  const sections = extensionsFor(name, packSkills);
+  if (sections.length === 0) return base;
+  const parts = [base.trimEnd()];
+  for (const section of sections) {
+    const body = fs20.readFileSync(section.sourcePath, "utf-8").replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/, "");
+    parts.push(`## Platform: ${section.pack}`, body.trim());
   }
-  if (!removed.length) return void 0;
-  return `REMOVED by this restatement: ${removed.length === 1 ? noun : `${noun}s`} ${removed.map((n) => `"${n}"`).join(", ")}${suffix} \u2014 absent from the input, so no longer in the spec. Restate them to keep them, or use sdd_update_spec to edit one member at a time.`;
-}
-function changedMethodsOf(kind, existing, candidate) {
-  if (!existing || !(kind in METHOD_SCHEMA)) return [];
-  const schema = METHOD_SCHEMA[kind];
-  const stored = existing.methods ?? [];
-  const next = candidate.methods ?? [];
-  return stored.filter((method2) => {
-    const restated = next.find((m) => m.name === method2.name);
-    if (!restated) return true;
-    const parsed = schema.safeParse(restated);
-    return !parsed.success || canonical(parsed.data) !== canonical(method2);
-  }).map((method2) => method2.name);
-}
-function canonical(value) {
-  return JSON.stringify(value, (_key, v) => v && typeof v === "object" && !Array.isArray(v) ? Object.fromEntries(Object.entries(v).filter(([, x]) => x !== void 0).sort(([a], [b]) => a.localeCompare(b))) : v);
+  return `${parts.join("\n\n")}
+`;
 }
-function writeSpec(restatement) {
-  const bound2 = candidateOptions();
-  const parentRef = restatementParent(restatement);
-  const parent = parentRef ? loadSpec(parentRef.kind, parentRef.id) : null;
-  const id = restatement.kind === "system" ? "system" : restatement.spec.id;
-  const existing = loadSpec(restatement.kind, id);
-  const application = applyRestatement(restatement, existing, parent);
-  if (application.refusal !== void 0) throw new Error(application.refusal);
-  const gateNotices = restatement.kind === "component" ? judgeComponent(application.spec, bound2) : [];
-  const persisted = persistCandidate(restatement.kind, application.spec);
-  const testsToRevisit = testsInvalidatedBy(application.changedMethods, [existing, application.spec], bound2);
-  return {
-    kind: restatement.kind,
-    id,
-    name: application.spec.name,
-    replacedExisting: application.replacedExisting,
-    ...application.status ? { status: application.status } : {},
-    notices: [...gateNotices, ...persisted.notices, ...application.notices],
-    ...persisted.scaffoldedProjectPath ? { scaffoldedProjectPath: persisted.scaffoldedProjectPath } : {},
-    testsToRevisit
+function readFrontmatter(raw, fallbackName) {
+  const match = /^---\r?\n([\s\S]*?)\r?\n---/.exec(raw);
+  const block = match ? match[1] : "";
+  const field = (key) => {
+    const m = new RegExp(`^${key}:\\s*(.*)$`, "m").exec(block);
+    return m ? m[1].trim() : "";
   };
+  return { name: field("name") || fallbackName, description: field("description") };
 }
-function judgeComponent(candidate, options) {
-  const verdict = validateComponentCandidate(candidate, options);
-  if (verdict.errors.length) throw new Error(formatCandidateRefusal(verdict));
-  return noticesFrom(verdict);
+function builtinSkillsDir() {
+  return path31.resolve(__dirname, "..", "templates", "skills");
 }
-function persistCandidate(kind, spec) {
-  const projectPath = kind === "subsystem" ? spec.projectPath : void 0;
-  if (projectPath && projectPath.trim() !== "") {
-    createChainedSubsystem(spec, spec.name);
-    return { notices: [], scaffoldedProjectPath: projectPath };
+function skillTemplatePath(name) {
+  return path31.join(builtinSkillsDir(), `${name}.md`);
+}
+function skillDestPath(type, destDir, name) {
+  if (type === "claude" || type === "codex" || type === "gemini" || type === "agy") {
+    return path31.join(destDir, name, "SKILL.md");
   }
-  return { notices: saveSpec(kind, spec) };
+  return path31.join(destDir, `${name}.md`);
 }
-function testsInvalidatedBy(methods, specs, options) {
-  const testRoots = options.rules?.conformance?.testRoots ?? [];
-  if (methods.length === 0 || testRoots.length === 0) return [];
-  const symbolOf = (name) => specs.map((s) => (s?.methods ?? []).find((m) => m.name === name)?.symbol).find((symbol) => symbol !== void 0);
-  return findTestsReferencing2(methods.map((name) => ({ name, symbol: symbolOf(name) })), getProjectRoot(), testRoots);
+function skillsDirForTarget(type) {
+  switch (type) {
+    case "claude":
+      return fromProjectRoot(".claude", "skills");
+    case "gemini":
+    // Gemini-based Antigravity
+    case "agy":
+    case "codex":
+      return fromProjectRoot(".agents", "skills");
+    case "cursor":
+      return fromProjectRoot(".cursor", "skills");
+    default:
+      return null;
+  }
 }
-function deleteSpec2(kind, id) {
-  const bound2 = candidateOptions();
-  const stored = loadSpec(kind, id);
-  const deleted = deleteSpec(kind, id);
-  const methods = deleted ? (stored?.methods ?? []).map((m) => m.name) : [];
-  const testsToRevisit = testsInvalidatedBy(methods, [stored], bound2);
-  return { kind, id, deleted, testsToRevisit };
+function listSkillNames() {
+  return [...SKILL_NAMES];
 }
-function updateSpecGated(kind, id, delta, dryRun) {
-  const bound2 = candidateOptions();
-  const gate = componentCandidateGate(bound2);
-  const report2 = updateSpec(kind, id, delta, gate, dryRun);
-  const testRoots = bound2.rules?.conformance?.testRoots ?? [];
-  const changed = changedMethods(report2, delta);
-  if (changed.length > 0 && testRoots.length > 0) {
-    report2.testsToRevisit = findTestsReferencing2(changed, getProjectRoot(), testRoots);
+function exportSddSkills(targetTypes) {
+  const types = targetTypes ?? activeTargetTypes2();
+  const destinations = [];
+  const skipped = [];
+  let fileCount = 0;
+  const packSkills = loadProjectExtensions2().skills;
+  for (const type of types) {
+    const destDir = skillsDirForTarget(type);
+    if (!destDir) {
+      skipped.push(type);
+      continue;
+    }
+    ensureDir(destDir);
+    destinations.push(destDir);
+    for (const name of SKILL_NAMES) {
+      if (!fs20.existsSync(skillTemplatePath(name))) continue;
+      const content = composeBuiltinSkill(name, packSkills.filter((s) => s.targets.includes(type)));
+      const destPath = skillDestPath(type, destDir, name);
+      ensureDir(path31.dirname(destPath));
+      fs20.writeFileSync(destPath, content, "utf-8");
+      fileCount++;
+    }
+    for (const skill of packSkills) {
+      if (skill.extends !== void 0) continue;
+      if (!skill.targets.includes(type)) continue;
+      if (!fs20.existsSync(skill.sourcePath)) continue;
+      const id = packSkillId(skill);
+      const content = fs20.readFileSync(skill.sourcePath, "utf-8");
+      const destPath = skillDestPath(type, destDir, id);
+      ensureDir(path31.dirname(destPath));
+      fs20.writeFileSync(destPath, content, "utf-8");
+      fileCount++;
+    }
   }
-  return report2;
+  return { destinations, fileCount, skipped };
 }
-function changedMethods(report2, delta) {
-  const named = /* @__PURE__ */ new Set();
-  for (const change of report2.changes) {
-    const [field, name] = change.path.split(".");
-    if (field === "methods" && name) named.add(name);
+function checkSkillFreshness(type) {
+  const dir = skillsDirForTarget(type);
+  const result = { dir, missing: [], stale: [], ok: [] };
+  if (!dir) return result;
+  const packSkills = loadProjectExtensions2().skills.filter((s) => s.targets.includes(type));
+  for (const name of SKILL_NAMES) {
+    const destPath = skillDestPath(type, dir, name);
+    if (!fs20.existsSync(destPath)) {
+      result.missing.push(name);
+      continue;
+    }
+    const want = composeBuiltinSkill(name, packSkills);
+    const have = fs20.readFileSync(destPath, "utf-8");
+    if (have === want) result.ok.push(name);
+    else result.stale.push(name);
   }
-  const written = Array.isArray(delta?.methods) ? delta.methods : [];
-  return [...named].map((name) => ({
-    name,
-    symbol: written.find((m) => m?.name === name)?.symbol
-  }));
+  return result;
 }
-function methodMoveGate(source) {
-  const bound2 = candidateOptions();
-  return {
-    gate: (kind, merged) => {
-      if (kind !== "component") return;
-      const { codes, verdict, ceiling } = judgeMoveHome(merged, source, bound2);
-      if (codes.length === 0) return noticesFrom(verdict);
-      throw new Error(
-        `${codes.join(", ")} refuses "${merged.id}" as the home for these methods. ` + (verdict.errors.length ? formatCandidateRefusal(verdict) : `It would reach ${merged.dependsOn?.length ?? 0} dependencies against a ceiling of ${ceiling}.`)
-      );
-    },
-    assess: (kind, merged) => kind === "component" ? judgeMoveHome(merged, source, bound2).codes : []
-  };
+function activeTargetTypes2() {
+  const config = loadProjectConfig4();
+  if (!config) return [];
+  return activeTargetTypes(config);
 }
-function judgeMoveHome(component, source, options) {
-  const ceiling = options.rules?.complexity?.maxComponentDependencies;
-  const verdict = validateComponentCandidate(component, options);
-  const codes = verdict.errors.map((e) => e.code);
-  if (component.id !== source && ceiling !== void 0 && (component.dependsOn?.length ?? 0) > ceiling) {
-    codes.push("EXCESSIVE_DEPENDENCIES");
-  }
-  return { codes: [...new Set(codes)], verdict, ceiling };
+function readSkillFrontmatter(name) {
+  return readFrontmatter(fs20.readFileSync(skillTemplatePath(name), "utf-8"), name);
 }
-function moveMethods2(from, to, methods, dryRun) {
-  return moveMethods(from, to, methods, methodMoveGate(from), dryRun);
+function listSkillResources() {
+  const builtin = RESOURCE_SKILL_IDS.map((id) => {
+    const fm = readSkillFrontmatter(id);
+    return {
+      id,
+      name: fm.name,
+      description: fm.description,
+      version: WAIRON_VERSION,
+      resourceUri: `${SKILL_RESOURCE_SCHEME}://${id}`,
+      defaultForHostedMcp: true
+    };
+  });
+  const pack = loadProjectExtensions2().skills.filter((s) => s.extends === void 0 && fs20.existsSync(s.sourcePath)).map((skill) => {
+    const id = packSkillId(skill);
+    const fm = readFrontmatter(fs20.readFileSync(skill.sourcePath, "utf-8"), id);
+    return {
+      id,
+      name: fm.name,
+      description: fm.description,
+      version: skill.packVersion ?? WAIRON_VERSION,
+      resourceUri: `${SKILL_RESOURCE_SCHEME}://${id}`,
+      defaultForHostedMcp: true
+    };
+  });
+  return [...builtin, ...pack];
 }
-var STORE_MANAGED_FIELDS, ALWAYS_CARRIED_FIELDS, STATUS_ORDER, STATUSED_KINDS, MISSING_PARENT, REWRITE_LABEL, METHOD_SCHEMA;
-var init_authoring = __esm({
-  "src/core/authoring.ts"() {
+function readSkillResource(resourceId) {
+  const packSkills = loadProjectExtensions2().skills;
+  if (SKILL_NAMES.includes(resourceId)) return composeBuiltinSkill(resourceId, packSkills);
+  const packSkill = packSkills.find((s) => s.extends === void 0 && packSkillId(s) === resourceId);
+  if (packSkill) return fs20.readFileSync(packSkill.sourcePath, "utf-8");
+  return fs20.readFileSync(skillTemplatePath(resourceId), "utf-8");
+}
+function listResources() {
+  return listSkillResources();
+}
+function buildServerInstructions2() {
+  return buildServerInstructions();
+}
+function readResource(resourceId) {
+  const known = listSkillResources().some((d) => d.id === resourceId);
+  if (!known) throw new SkillResourceNotFoundError(resourceId);
+  return readSkillResource(resourceId);
+}
+var path31, fs20, SKILL_NAMES, SKILL_RESOURCE_SCHEME, RESOURCE_SKILL_IDS, SkillResourceNotFoundError;
+var init_skills = __esm({
+  "src/core/skills.ts"() {
     "use strict";
-    init_specs();
-    init_core();
-    init_validation();
-    init_candidate();
-    init_narrative_labels();
+    path31 = __toESM(require("path"));
+    fs20 = __toESM(require("fs"));
     init_fs();
-    STORE_MANAGED_FIELDS = /* @__PURE__ */ new Set(["status", "updatedAt"]);
-    ALWAYS_CARRIED_FIELDS = /* @__PURE__ */ new Set(["ext"]);
-    STATUS_ORDER = ["draft", "design", "complete"];
-    STATUSED_KINDS = /* @__PURE__ */ new Set(["subsystem", "component", "interface", "implementation"]);
-    MISSING_PARENT = {
-      subsystem: () => "System spec must be initialized (sdd_initialize_system) first.",
-      component: (id) => `Parent subsystem "${id}" does not exist.`,
-      interface: (id) => `Component "${id}" does not exist.`,
-      implementation: (id) => `Interface contract "${id}" does not exist.`
-    };
-    REWRITE_LABEL = {
-      system: "System spec",
-      subsystem: "Subsystem",
-      component: "Component",
-      interface: "Interface",
-      implementation: "Implementation",
-      type: "Type"
-    };
-    METHOD_SCHEMA = {
-      interface: MethodSignatureSchema,
-      implementation: MethodImplementationSchema,
-      type: TypeMethodSchema
+    init_defaults();
+    init_project();
+    init_extensions();
+    init_instructions();
+    init_core();
+    SKILL_NAMES = ["sdd-architect", "sdd-narrative", "sdd-auditor", "sdd-implement", "sdd-delegate"];
+    SKILL_RESOURCE_SCHEME = "wairon-skill";
+    RESOURCE_SKILL_IDS = [...SKILL_NAMES].sort();
+    SkillResourceNotFoundError = class extends Error {
+      constructor(resourceId) {
+        super(`Unknown SDD skill resource id: "${resourceId}".`);
+        this.name = "SkillResourceNotFoundError";
+      }
     };
   }
 });
@@ -29862,7 +29963,12 @@ function publicInterfacesReplacement(subsystem, stored, list2) {
       deletes.push(pi.component ? { component: pi.component, interface: pi.interface, action: "delete" } : { type: pi.type, details: pi.details, action: "delete" });
     }
   }
-  return { publicInterfaces: [...deletes, ...list2] };
+  const restatedEntries = list2.map((pi) => {
+    const prev = stored.find((s) => identity(s) === identity(pi));
+    const dropped = prev ? Object.keys(prev).filter((f) => prev[f] !== void 0 && pi[f] === void 0) : [];
+    return dropped.length ? { ...pi, unset: dropped } : pi;
+  });
+  return { publicInterfaces: [...deletes, ...restatedEntries] };
 }
 function text(content) {
   return { content: [{ type: "text", text: content }] };
@@ -30241,7 +30347,8 @@ function createMcpServer(options = {}) {
       type: import_zod11.z.enum(["REST", "GraphQL", "MessageBus", "RPC", "Custom"]),
       details: import_zod11.z.string(),
       component: import_zod11.z.string().optional().describe("The L2 component id that realizes this interface (this subsystem's published surface)"),
-      interface: import_zod11.z.string().optional().describe("Optional L3 interface id on that component backing this entry")
+      interface: import_zod11.z.string().optional().describe("Optional L3 interface id on that component backing this entry"),
+      consumers: import_zod11.z.array(import_zod11.z.string()).optional().describe("The subsystem ids this surface is published to. Absent, any subsystem may depend on the component; present, only these may \u2014 when every entry publishing the component names consumers, the union of the lists is the whole set, and a dependency from any other subsystem is CROSS_SUBSYSTEM_UNLISTED_CONSUMER. Every id must name a subsystem of the tree (PUBLIC_INTERFACE_UNKNOWN_CONSUMER).")
     }).strict()).optional().describe("Public entrypoints exposed by this subsystem, each bound to a realizing component"),
     projectPath: import_zod11.z.string().optional().describe("Relative path to external project root for subsystem chaining"),
     targetLanguage: import_zod11.z.string().optional().describe("Override of the system-level targetLanguage for this subsystem"),
@@ -30311,15 +30418,16 @@ function createMcpServer(options = {}) {
           type: import_zod11.z.enum(["REST", "GraphQL", "MessageBus", "RPC", "Custom"]),
           details: import_zod11.z.string(),
           component: import_zod11.z.string().optional().describe("The L2 component id that realizes this interface"),
-          interface: import_zod11.z.string().optional().describe("Optional L3 interface id on that component")
+          interface: import_zod11.z.string().optional().describe("Optional L3 interface id on that component"),
+          consumers: import_zod11.z.array(import_zod11.z.string()).optional().describe("The subsystem ids this surface is published to. Absent, any subsystem may depend on the component; present, only these may \u2014 when every entry publishing the component names consumers, the union of the lists is the whole set, and a dependency from any other subsystem is CROSS_SUBSYSTEM_UNLISTED_CONSUMER. Every id must name a subsystem of the tree (PUBLIC_INTERFACE_UNKNOWN_CONSUMER).")
         }).strict()).describe("The full replacement list of public interfaces for this subsystem")
       },
       outputSchema: specChangeReportOutput
     },
     ({ subsystem, publicInterfaces }) => {
       try {
-        const { loadSubsystemSpec: loadSubsystemSpec2 } = requireSpecs();
-        const sub = loadSubsystemSpec2(subsystem);
+        const { loadSubsystemSpec: loadSubsystemSpec3 } = requireSpecs();
+        const sub = loadSubsystemSpec3(subsystem);
         if (!sub) return errText(`Subsystem "${subsystem}" does not exist.`);
         const delta = publicInterfacesReplacement(subsystem, sub.publicInterfaces ?? [], publicInterfaces);
         if (typeof delta === "string") return errText(delta);
@@ -31973,6 +32081,7 @@ init_errors();
 init_fs();
 init_core();
 init_core();
+init_authoring();
 init_core();
 function composeAgentBrief2(agentId) {
   return composeAgentBrief(agentId);
@@ -31998,8 +32107,11 @@ function projectConfigExists2() {
 function loadSystemSpec2() {
   return loadSystemSpec();
 }
-function createChainedSubsystem2(subsystem, projectName) {
-  createChainedSubsystem(subsystem, projectName);
+function loadSubsystemSpec2(id) {
+  return loadSubsystemSpec(id);
+}
+function writeSpec2(restatement) {
+  return writeSpec(restatement);
 }
 function resolveAgentTopology2() {
   return resolveAgentTopology();
@@ -32082,6 +32194,19 @@ function getStatusReport2(options, decor) {
 function approvalVerdict2() {
   return approvalVerdict();
 }
+function subsystemAddRestatement(id, projectPath, name, stored) {
+  const spec = { id, projectPath };
+  const fields = ["id", "projectPath"];
+  if (name !== void 0 || !stored) {
+    spec.name = name ?? id;
+    fields.push("name");
+  }
+  if (!stored) {
+    spec.description = `External subsystem ${spec.name}`;
+    fields.push("description");
+  }
+  return { kind: "subsystem", spec, fields };
+}
 async function runSubsystemAdd(id, options = {}) {
   logger.header("wairon subsystem add");
   if (!projectConfigExists2()) {
@@ -32096,23 +32221,12 @@ async function runSubsystemAdd(id, options = {}) {
   if (!system) {
     throw new WaironError("System spec is missing. Run `wairon init` first.");
   }
-  const displayName = options.name ?? id;
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const subsystem = {
-    id,
-    name: displayName,
-    description: `External subsystem ${displayName}`,
-    parentSystem: system.name,
-    publicInterfaces: [],
-    projectPath: options.projectPath,
-    trustedLinks: [],
-    status: "draft",
-    createdAt: now,
-    updatedAt: now
-  };
-  createChainedSubsystem2(subsystem, displayName);
+  const stored = loadSubsystemSpec2(id);
+  const restatement = subsystemAddRestatement(id, options.projectPath, options.name, stored);
+  const receipt = writeSpec2(restatement);
   const childDir = path30.resolve(getProjectRoot(), options.projectPath);
-  logger.success(`Added external subsystem "${id}" \u2192 ${options.projectPath}`);
+  logger.success(`${receipt.replacedExisting ? "Re-authored" : "Added"} external subsystem "${id}" \u2192 ${options.projectPath}`);
+  for (const notice of receipt.notices) logger.info(notice);
   logger.info(`Scaffolded child project at ${path30.relative(process.cwd(), childDir) || "."}`);
   logger.info(`Design its spec tree from this parent using namespaced ids (e.g. ${id}::<component>).`);
 }
@@ -32248,20 +32362,16 @@ async function runInitAsExternalSubsystem(parentRoot, cwd, options) {
     if (!system) {
       throw new WaironError(`Parent project at ${parentRoot} has no system spec.`);
     }
-    const now = (/* @__PURE__ */ new Date()).toISOString();
-    const subsystem = {
-      id: subsystemId,
-      name: subsystemId,
-      description: `External subsystem ${subsystemId}`,
-      parentSystem: system.name,
-      publicInterfaces: [],
-      projectPath: relPath,
-      trustedLinks: [],
-      status: "draft",
-      createdAt: now,
-      updatedAt: now
-    };
-    createChainedSubsystem2(subsystem, subsystemId);
+    const stored = loadSubsystemSpec2(subsystemId);
+    const spec = { id: subsystemId, projectPath: relPath };
+    const fields = ["id", "projectPath"];
+    if (!stored) {
+      Object.assign(spec, { name: subsystemId, description: `External subsystem ${subsystemId}` });
+      fields.push("name", "description");
+    }
+    const restatement = { kind: "subsystem", spec, fields };
+    const receipt = writeSpec2(restatement);
+    for (const notice of receipt.notices) logger.info(notice);
   } finally {
     setProjectRoot(prevOverride);
   }