@wairon/cli 5.1.1-dev.77 → 5.1.1-dev.79

package/dist/cli/index.js

@@ -65,7 +65,7 @@ var init_defaults = __esm({
       copilot: ".github/prompts",
       codex: ".codex/agents"
     };
-    WAIRON_VERSION = "5.1.1-dev.77";
+    WAIRON_VERSION = "5.1.1-dev.79";
     GITHUB_REPO = "SYW-Apps/Waffle-AIron";
     SUPPORTED_ALIASES = ["wai"];
     SCAN_EXCLUDE_DIRS = /* @__PURE__ */ new Set([
@@ -117,6 +117,15 @@ var init_logger = __esm({
           console.warn(import_chalk.default.yellow("\u26A0") + "  " + import_chalk.default.yellow(message));
         }
       },
+      /**
+       * A finding reported at `notice` severity: listed, never a failure. Kept
+       * visually apart from warn so a reader never mistakes one for the other.
+       */
+      notice(message) {
+        if (shouldLog("info")) {
+          console.log(import_chalk.default.blue("\u25C6") + "  " + import_chalk.default.blue("notice ") + message);
+        }
+      },
       error(message) {
         console.error(import_chalk.default.red("\u2716") + "  " + import_chalk.default.red(message));
       },
@@ -864,9 +873,11 @@ var init_project = __esm({
       materializeAgentFiles: import_zod3.z.boolean().default(false),
       /**
        * Severity overrides for SDD validation rules.
-       * Key: rule code (e.g. CIRCULAR_DEPENDENCY), Value: error | warning | off
+       * Key: rule code (e.g. CIRCULAR_DEPENDENCY), Value: error | warning | notice | off.
+       * A notice is still reported, but never makes the tree invalid and never
+       * fails `--ci`; off is not reported at all.
        */
-      sddRuleSeverity: import_zod3.z.record(import_zod3.z.enum(["error", "warning", "off"])).default({}),
+      sddRuleSeverity: import_zod3.z.record(import_zod3.z.enum(["error", "warning", "notice", "off"])).default({}),
       /** Dynamic naming conventions and stereotype suffix rules */
       naming: NamingRuleConfigSchema.optional(),
       /** Dynamic metadata documentation constraints */
@@ -4412,6 +4423,8 @@ body:not(.panel-closed) #panelToggle { background:var(--accent); color:#fff; bor
 #panel .flowbtn:hover { background:var(--hover-bg); }
 #panel .issue { border-left:3px solid var(--danger); padding:6px 9px; margin:6px 0; background:var(--card); font-size:12px; border-radius:0 7px 7px 0; }
 #panel .issue.warning { border-left-color:var(--warn); }
+#panel .issue.notice { border-left-color:var(--accent); }
+#panel .issue .sev { font-size:10px; color:var(--dim); text-transform:uppercase; letter-spacing:.04em; margin-left:6px; }
 #panel .issue code { font-size:10.5px; color:var(--dim); }
 
 /* Presentation mode = the canvas page, focused: the header chrome and legend
@@ -4622,7 +4635,15 @@ var MODEL = __MODEL_JSON__;
   });
   document.getElementById('issueCount').textContent =
     MODEL.issues.filter(function (i) { return i.severity === 'error'; }).length + 'e/' +
-    MODEL.issues.filter(function (i) { return i.severity === 'warning'; }).length + 'w';
+    MODEL.issues.filter(function (i) { return i.severity === 'warning'; }).length + 'w/' +
+    MODEL.issues.filter(function (i) { return i.severity === 'notice'; }).length + 'n';
+  // A node is marked failing only for an error or a warning; one that holds
+  // only notices gets its own quieter mark, never the failing one.
+  function issueMark(id) {
+    var list = state.showIssues && issuesBySpec[id];
+    if (!list) return '';
+    return list.some(function (i) { return i.severity !== 'notice'; }) ? ' hasIssue' : ' hasNotice';
+  }
 
   var PATTERN_TYPES = { Repository:1, FeatureComponent:1, RouterComponent:1 };
   // A retired Specialist or Gateway renders as a plain box marked retired, so a
@@ -4962,6 +4983,9 @@ var MODEL = __MODEL_JSON__;
       { selector: 'edge.stubHover', style: { 'line-color': t.selGlow, 'target-arrow-color': t.selGlow, width: 2.6, opacity: 1, 'z-compound-depth': 'top' } },
       { selector: '.dimmed', style: { opacity: 0.13 } },
       { selector: '.hasIssue', style: { 'border-color': t.issue, 'border-style': 'dashed', 'border-width': 3 } },
+      // Notices only: the node keeps its own border colour and width (no layout
+      // nudge), drawn dotted so it reads as noted rather than failing.
+      { selector: '.hasNotice', style: { 'border-style': 'dotted' } },
       // Overlay only (no border) \u2014 a border changes node geometry, which nudges
       // the compound parent and makes hover flicker; overlay never affects layout.
       { selector: '.sel', style: { 'overlay-color': t.selGlow, 'overlay-opacity': 0.34, 'overlay-padding': 6 } },
@@ -5751,7 +5775,7 @@ var MODEL = __MODEL_JSON__;
       var kindCls = t.kind === 'entity' ? 'typeEntity' : 'typeValue';
       var dim = !typeMatches(t);
       var extra = (dim ? ' dimmed' : '')
-        + (state.showIssues && issuesBySpec[t.id] ? ' hasIssue' : '')
+        + issueMark(t.id)
         + (state.selectedKind === 'type' && state.selected === t.id ? ' sel' : '');
       if (sh.plain) {
         eles.push({
@@ -6041,7 +6065,7 @@ var MODEL = __MODEL_JSON__;
       }
       classes += (e.hasKids ? ' drillable' : '') + (isPub ? ' public' : '')
         + (dim ? ' dimmed' : '')
-        + (state.showIssues && issuesBySpec[e.id] ? ' hasIssue' : '')
+        + issueMark(e.id)
         + (state.selectedKind === e.kind && state.selected === e.id ? ' sel' : '');
       if (inner) {
         var boxNode = { data: { id: aid, label: e.kind === 'subsystem' ? nameOf(e) : nameOf(e), w: p.w, h: p.h, tw: p.w - 16 }, classes: classes };
@@ -7986,7 +8010,7 @@ var MODEL = __MODEL_JSON__;
   }
   function issueHtml(list) {
     return list.map(function (i) {
-      return '<div class="issue ' + esc(i.severity) + '"><code>' + esc(i.code) + '</code><br>' + esc(i.message) + '</div>';
+      return '<div class="issue ' + esc(i.severity) + '"><code>' + esc(i.code) + '</code><span class="sev">' + esc(i.severity) + '</span><br>' + esc(i.message) + '</div>';
     }).join('');
   }
 
@@ -10613,7 +10637,7 @@ var init_lint_allows = __esm({
     "use strict";
     lintAllowsRule = {
       name: "lint-allows",
-      description: "Per-spec lint suppressions (lint.allow) must name real issue codes and actually suppress a finding \u2014 unknown codes and stale allows are flagged. An allow covers exactly the occurrence it names: a finding that reports a site is silenced only by an allow whose `at` is that site, a finding that reports none only by an allow that names none, and an aggregating finding only by an allow whose `covers` lists every unit it reports \u2014 a unit nobody listed is named back as new instead of inheriting a decision taken about its neighbours. So a coarse allow left on a rule that names sites, and an allow whose site the run no longer reports, are both UNUSED_LINT_ALLOW, and the finding names the sites that did fire. Allows silence warnings only; errors always surface.",
+      description: "Per-spec lint suppressions (lint.allow) must name real issue codes and actually suppress a finding \u2014 unknown codes and stale allows are flagged. An allow covers exactly the occurrence it names: a finding that reports a site is silenced only by an allow whose `at` is that site, a finding that reports none only by an allow that names none, and an aggregating finding only by an allow whose `covers` lists every unit it reports \u2014 a unit nobody listed is named back as new instead of inheriting a decision taken about its neighbours. So a coarse allow left on a rule that names sites, and an allow whose site the run no longer reports, are both UNUSED_LINT_ALLOW, and the finding names the sites that did fire. Allows silence warnings and notices; errors always surface.",
       codes: [
         { code: "UNKNOWN_LINT_ALLOW_CODE", defaultSeverity: "warning", summary: "lint.allow names an issue code no registered rule emits" },
         { code: "UNUSED_LINT_ALLOW", defaultSeverity: "warning", summary: "lint.allow entry matched no finding this run \u2014 the code never fired, or it fired at sites this allow does not name" }
@@ -18379,6 +18403,9 @@ var init_source_analysis = __esm({
 });
 
 // src/core/rules/index.ts
+function atMostWarning(severity) {
+  return severity === "error" ? "warning" : severity;
+}
 function makeScopeFilter(opts) {
   const { components, interfaces, implementations, types, scopeSubsystem } = opts;
   return (specId) => {
@@ -18614,7 +18641,7 @@ function buildRuleContext(opts) {
       return profileSeverity;
     }
     if (isDraftContext && COMPLETENESS_RULES.has(ruleCode)) {
-      return "warning";
+      return atMostWarning(defaultSeverity);
     }
     return defaultSeverity;
   };
@@ -18688,13 +18715,13 @@ function buildRuleContext(opts) {
         allowClaimed = true;
         const grew = (parts?.covers ?? []).filter((unit) => !(allow.covers ?? []).includes(unit));
         if (grew.length === 0) {
-          if (severity === "warning") return;
+          if (severity !== "error") return;
         } else {
           text2 = `${text2} A lint.allow covers this site, but not ${grew.length} part(s) of it \u2014 ${grew.map((u) => `"${u}"`).join("; ")} ${grew.length === 1 ? "is" : "are"} new. Decide on them: add them to the allow's \`covers\` with a reason that is actually true, or fix them.`;
         }
       }
     }
-    if (specId && parts && severity === "warning" && !allowClaimed) {
+    if (specId && parts && severity !== "error" && !allowClaimed) {
       const entry = carriedLookup.get(carriedKey(specId, code, parts.at));
       if (entry) {
         entry.fired = true;
@@ -18927,7 +18954,8 @@ function validateComponentCandidate(candidate, opts = {}) {
   const own = issues.filter((i) => !i.specId || i.specId === candidate.id);
   return {
     errors: own.filter((i) => i.severity === "error"),
-    warnings: own.filter((i) => i.severity === "warning")
+    warnings: own.filter((i) => i.severity === "warning"),
+    notices: own.filter((i) => i.severity === "notice")
   };
 }
 var init_candidate = __esm({
@@ -19414,7 +19442,7 @@ var init_validation = __esm({
       "INVALID_TRUSTED_LINK",
       "CROSS_TREE_REF_UNRESOLVED"
     ]);
-    SEVERITY_RANK = { off: 0, warning: 1, error: 2 };
+    SEVERITY_RANK = { off: 0, notice: 1, warning: 2, error: 3 };
   }
 });
 
@@ -30222,11 +30250,15 @@ function candidateOptions() {
   return config ? { rules: config.rules, projectType: config.projectType } : {};
 }
 function noticesFrom(verdict) {
-  return verdict.warnings.map((w) => `${w.code}: ${w.message}`);
+  return [
+    ...verdict.warnings.map((w) => `${w.code}: ${w.message}`),
+    ...verdict.notices.map((n) => `${n.code} (notice): ${n.message}`)
+  ];
 }
-function componentCandidateGate(options = candidateOptions()) {
+function componentCandidateGate(options = candidateOptions(), storedOwner) {
   return {
     gate: (kind, merged) => {
+      refuseUnknownOwner(kind, merged, storedOwner);
       if (kind !== "component") return;
       const verdict = validateComponentCandidate(merged, options);
       if (verdict.errors.length) throw new Error(formatCandidateRefusal(verdict));
@@ -30234,6 +30266,14 @@ function componentCandidateGate(options = candidateOptions()) {
     }
   };
 }
+function refuseUnknownOwner(kind, merged, storedOwner) {
+  if (kind !== "component" && kind !== "type") return;
+  const owner = merged.subsystem;
+  if (!owner || owner === storedOwner) return;
+  if (loadSpec("subsystem", owner)) return;
+  const sentence = MISSING_PARENT[kind](owner);
+  throw new Error(`${sentence} Nothing was written.`);
+}
 function restatementParent(restatement) {
   const spec = restatement.spec;
   switch (restatement.kind) {
@@ -30497,9 +30537,9 @@ function deleteSpec2(kind, id) {
 }
 function updateSpecGated(kind, id, delta, dryRun) {
   const bound2 = candidateOptions();
-  const gate = componentCandidateGate(bound2);
   const testRoots = bound2.rules?.conformance?.testRoots ?? [];
-  const stored = testRoots.length > 0 ? loadSpec(kind, id) : null;
+  const stored = loadSpec(kind, id);
+  const gate = componentCandidateGate(bound2, stored?.subsystem);
   const report2 = updateSpec(kind, id, delta, gate, dryRun);
   const changed = changedMethods(report2);
   if (changed.length > 0 && testRoots.length > 0) {
@@ -31143,7 +31183,7 @@ function createMcpServer(options = {}) {
     server,
     "validateTopology",
     {
-      description: "Validate the project's agent topology. Returns errors and warnings (duplicate ids, overlapping ownership, missing paths, etc.). Supports optional subsystem scoping.",
+      description: "Validate the project's agent topology. Returns errors, warnings and notices (duplicate ids, overlapping ownership, missing paths, etc.). Supports optional subsystem scoping.",
       inputSchema: {
         subsystem: import_zod11.z.string().optional().describe("Only validate topology for agents under the specified subsystem")
       }
@@ -31163,7 +31203,8 @@ function createMcpServer(options = {}) {
         return json({
           valid: result.issues.filter((i) => i.severity === "error").length === 0,
           errors: result.issues.filter((i) => i.severity === "error"),
-          warnings: result.issues.filter((i) => i.severity === "warning")
+          warnings: result.issues.filter((i) => i.severity === "warning"),
+          notices: result.issues.filter((i) => i.severity === "notice")
         });
       } catch (e) {
         return errText(String(e));
@@ -31881,7 +31922,7 @@ ${renderChangeReport(report2)}`,
     server,
     "sdd_validate_tree",
     {
-      description: "Validate the SDD spec tree, checking parent references, contract compatibility, narratives, and component type boundaries. Supports scoping and recursion controls. Findings come back as structured content too, under the schema this tool declares \u2014 errors and warnings already split, each with its code, severity, message and the spec it concerns \u2014 so a caller filters them as objects instead of parsing the JSON text block and hoping its shape holds.",
+      description: "Validate the SDD spec tree, checking parent references, contract compatibility, narratives, and component type boundaries. Supports scoping and recursion controls. Findings come back as structured content too, under the schema this tool declares \u2014 errors, warnings and notices already split into three lists (a notice never makes the tree invalid and never fails --ci), each with its code, severity, message and the spec it concerns \u2014 so a caller filters them as objects instead of parsing the JSON text block and hoping its shape holds.",
       inputSchema: {
         subsystem: import_zod11.z.string().optional().describe("Only validate the specified subsystem (granular)"),
         recursive: import_zod11.z.boolean().optional().describe("Whether to recursively validate subprojects (default: true)")
@@ -31902,6 +31943,7 @@ ${renderChangeReport(report2)}`,
           valid: result.valid,
           errors: result.issues.filter((i) => i.severity === "error"),
           warnings: result.issues.filter((i) => i.severity === "warning"),
+          notices: result.issues.filter((i) => i.severity === "notice"),
           ...result.resolvedThrough ? { resolvedThrough: result.resolvedThrough } : {}
         });
       } catch (e) {
@@ -32017,7 +32059,7 @@ ${testsBlock}` : ""}`, deletion);
       inputSchema: {
         kind: import_zod11.z.enum(["system", "subsystem", "component", "interface", "implementation", "type"]).describe("The spec kind to update (system = the singleton L0 \u2014 vision, boundaries, globalRequirements, databases, and publicInterfaces: the project gateway surface, each entry {id, name, subsystem, component, type, details, audience: project|department|instance|partner|external}; id is informational)"),
         id: import_zod11.z.string().describe("The ID of the spec to update (namespaced if needed)"),
-        delta: import_zod11.z.record(import_zod11.z.any()).describe(`The partial fields to merge into the spec. ARRAYS UPSERT, they do not replace: an array whose elements carry an identity is merged element-by-element, so a delta naming ONE element leaves the others intact. Identity is "name" or "id" by default, and per field: dispatch by "capability", a listener's mounts by "portal", lifecycle by phase+component+method, emits/subscribesTo by topic+event, trustedLinks by "subsystem", a subsystem's publicInterfaces by component+interface (or type+details for an entry not yet bound to a component), invariants and patterns by "id", lint.allow by "code" AND "at" (an allow covers one occurrence, so several may share a code on one spec), an interface method's findings by "code", boundaries by "name", globalRequirements by "description", switch cases by "value", try catches by "error". Identity merging applies at EVERY depth, including an array INSIDE an element (a method's params, a step's catches). Add "action: 'delete'" (or "remove: true") alongside that identity to REMOVE an element \u2014 including a stale lint allow. Arrays of plain STRINGS (owns, dependsOn, guarantees) carry no per-element identity and are replaced wholesale; pass [] to clear any array outright. To REMOVE an optional field entirely, list it in "unset": e.g. {"unset": ["basePath", "variant"]} \u2014 passing null/undefined means "no change" (they are skipped), and writing "" would leave the field present but empty, which is a different and usually wrong spec. Unsetting a required field is refused by schema validation, which names it. For narrative steps, match by "stepNumber" and use "action: 'insert'" (shifts subsequent steps up) or "action: 'delete'" (shifts subsequent steps down and removes it). Step entries apply in ASCENDING stepNumber order, each against the numbering the earlier entries of the SAME delta left behind \u2014 delete step 3 and step 7 becomes step 6 \u2014 so prefer labels, and restate the step's "label" or "description" on a delete to have it checked against the step actually addressed. Renumbering RELOCATES every flow jump field (onTrueStep/onFalseStep/cases.step/defaultStep/endStep/catches.step/finallyStep/toStep) in the same narrative. A delete is REJECTED when the narrative has no such step, when a jump still targets it (retarget the referrers first), when a restated label/description does not match, or when it is a loop/try/parallel header whose body would be left standing (retype the header first to dissolve the region, then delete it). Changing a step's "type" REBUILDS it for the new type: its description and label are kept and every field the new type cannot carry is dropped (returned as a NOTICE); a delta that retypes AND sets such a field is refused. A step delta is also refused when it carries a marker the merge does not recognise: a non-boolean "remove", an "action" that is neither "insert" nor "delete", a "captureJumps" outside an insert, or no "stepNumber" to address. Inserting AT a jump target relocates those jumps past the inserted step by default (a NOTICE is returned) \u2014 add "captureJumps": true on the inserted step to retarget entry jumps onto it (loop/try endStep region tails always relocate with the body and are never captured). Every jump field has a "*Label" twin (toLabel, onFalseLabel, endLabel, \u2026, and "label" on a cases/catches entry) resolved against step labels AFTER the merge, so a delta may anchor on a label only pre-existing steps carry; a label the delta supplies REPLACES the stored number it twins, while setting the number and its label together in one delta is refused as a contradiction. Reference ids in deltas may use LOCAL names \u2014 they are qualified against the spec's namespace exactly as the loader would. Per-spec lint suppression: set "lint: { allow: [{ code, at, covers, reason }] }" to silence a WARNING code on this spec only (errors always surface; stale allows are flagged). An allow covers EXACTLY the occurrence it names: "at" is the site the finding names (a contract method, an import edge "from -> to", a declared edge "component -> target") and is REQUIRED for a code whose findings report one, while a finding that reports no site is covered only by an allow that names none; "covers" lists the units an aggregating finding reports, and the allow silences it only when every one is listed. This delta is deliberately OPEN below its top level \u2014 the shapes nest further than a schema here should restate \u2014 so a key that is not a field at its depth is not refused, it is NAMED BACK under NO EFFECT in the answer, together with any value the spec already held and any "unset" that removed nothing. Read that list: it is where a nested typo shows up.`),
+        delta: import_zod11.z.record(import_zod11.z.any()).describe(`The partial fields to merge into the spec. ARRAYS UPSERT, they do not replace: an array whose elements carry an identity is merged element-by-element, so a delta naming ONE element leaves the others intact. Identity is "name" or "id" by default, and per field: dispatch by "capability", a listener's mounts by "portal", lifecycle by phase+component+method, emits/subscribesTo by topic+event, trustedLinks by "subsystem", a subsystem's publicInterfaces by component+interface (or type+details for an entry not yet bound to a component), invariants and patterns by "id", lint.allow by "code" AND "at" (an allow covers one occurrence, so several may share a code on one spec), an interface method's findings by "code", boundaries by "name", globalRequirements by "description", switch cases by "value", try catches by "error". Identity merging applies at EVERY depth, including an array INSIDE an element (a method's params, a step's catches). Add "action: 'delete'" (or "remove: true") alongside that identity to REMOVE an element \u2014 including a stale lint allow. Arrays of plain STRINGS (owns, dependsOn, guarantees) carry no per-element identity and are replaced wholesale; pass [] to clear any array outright. To REMOVE an optional field entirely, list it in "unset": e.g. {"unset": ["basePath", "variant"]} \u2014 passing null/undefined means "no change" (they are skipped), and writing "" would leave the field present but empty, which is a different and usually wrong spec. Unsetting a required field is refused by schema validation, which names it. For narrative steps, match by "stepNumber" and use "action: 'insert'" (shifts subsequent steps up) or "action: 'delete'" (shifts subsequent steps down and removes it). Step entries apply in ASCENDING stepNumber order, each against the numbering the earlier entries of the SAME delta left behind \u2014 delete step 3 and step 7 becomes step 6 \u2014 so prefer labels, and restate the step's "label" or "description" on a delete to have it checked against the step actually addressed. Renumbering RELOCATES every flow jump field (onTrueStep/onFalseStep/cases.step/defaultStep/endStep/catches.step/finallyStep/toStep) in the same narrative. A delete is REJECTED when the narrative has no such step, when a jump still targets it (retarget the referrers first), when a restated label/description does not match, or when it is a loop/try/parallel header whose body would be left standing (retype the header first to dissolve the region, then delete it). Changing a step's "type" REBUILDS it for the new type: its description and label are kept and every field the new type cannot carry is dropped (returned as a NOTICE); a delta that retypes AND sets such a field is refused. A step delta is also refused when it carries a marker the merge does not recognise: a non-boolean "remove", an "action" that is neither "insert" nor "delete", a "captureJumps" outside an insert, or no "stepNumber" to address. Inserting AT a jump target relocates those jumps past the inserted step by default (a NOTICE is returned) \u2014 add "captureJumps": true on the inserted step to retarget entry jumps onto it (loop/try endStep region tails always relocate with the body and are never captured). Every jump field has a "*Label" twin (toLabel, onFalseLabel, endLabel, \u2026, and "label" on a cases/catches entry) resolved against step labels AFTER the merge, so a delta may anchor on a label only pre-existing steps carry; a label the delta supplies REPLACES the stored number it twins, while setting the number and its label together in one delta is refused as a contradiction. Reference ids in deltas may use LOCAL names \u2014 they are qualified against the spec's namespace exactly as the loader would. Per-spec lint suppression: set "lint: { allow: [{ code, at, covers, reason }] }" to silence a WARNING or NOTICE code on this spec only (errors always surface; stale allows are flagged). An allow covers EXACTLY the occurrence it names: "at" is the site the finding names (a contract method, an import edge "from -> to", a declared edge "component -> target") and is REQUIRED for a code whose findings report one, while a finding that reports no site is covered only by an allow that names none; "covers" lists the units an aggregating finding reports, and the allow silences it only when every one is listed. This delta is deliberately OPEN below its top level \u2014 the shapes nest further than a schema here should restate \u2014 so a key that is not a field at its depth is not refused, it is NAMED BACK under NO EFFECT in the answer, together with any value the spec already held and any "unset" that removed nothing. Read that list: it is where a nested typo shows up.`),
         dryRun: import_zod11.z.boolean().optional().describe("Ask what this delta WOULD do instead of doing it. The whole write runs, the candidate gate included, and the answer is the change report it would have produced \u2014 marked DRY RUN, with nothing stamped and not one byte of the stored file moved. Use it before a delta that renumbers a long narrative.")
       },
       outputSchema: specChangeReportOutput
@@ -32333,7 +32375,7 @@ var init_server = __esm({
       ...staleServerOutput
     };
     validationIssueOutput = {
-      severity: import_zod11.z.enum(["error", "warning"]).describe("The finding's severity after project overrides."),
+      severity: import_zod11.z.enum(["error", "warning", "notice"]).describe("The finding's severity after project overrides."),
       code: import_zod11.z.string().describe("The rule code, UPPER_SNAKE \u2014 the stable handle to filter and suppress by."),
       message: import_zod11.z.string().describe("What is wrong, named."),
       agentId: import_zod11.z.string().optional().describe("The agent the finding concerns, when it concerns one."),
@@ -32346,9 +32388,12 @@ var init_server = __esm({
       )
     };
     validateTreeOutput = {
-      valid: import_zod11.z.boolean().describe("False when the tree holds at least one error."),
+      valid: import_zod11.z.boolean().describe("False when the tree holds at least one error; warnings and notices never make it false."),
       errors: import_zod11.z.array(import_zod11.z.object(validationIssueOutput)).describe("Every finding of severity error."),
       warnings: import_zod11.z.array(import_zod11.z.object(validationIssueOutput)).describe("Every finding of severity warning."),
+      notices: import_zod11.z.array(import_zod11.z.object(validationIssueOutput)).describe(
+        "Every finding of severity notice: reported, never a failure \u2014 they never make the tree invalid and never fail `wairon validate --ci`."
+      ),
       resolvedThrough: import_zod11.z.object({
         root: import_zod11.z.string().describe("The top root that was validated."),
         scope: import_zod11.z.string().describe("The mount chain the verdict was scoped to.")
@@ -33679,7 +33724,8 @@ async function runLock(options = {}, gate) {
     validationResult: {
       valid: true,
       errors: 0,
-      warnings: gate ? gate.issues.filter((i) => i.severity === "warning").length : 0
+      warnings: gate ? gate.issues.filter((i) => i.severity === "warning").length : 0,
+      notices: gate ? gate.issues.filter((i) => i.severity === "notice").length : 0
     },
     status: "ready",
     specs: captureApprovedSpecs(root, scope),
@@ -33731,6 +33777,7 @@ async function runValidate(options = {}) {
   let hasErrors = false;
   let hasFatalWarnings = false;
   let waivedWarnings = 0;
+  let noticeTotal = 0;
   const legacySpecs = findLegacySpecFiles();
   if (legacySpecs.length > 0) {
     logger.warn(`Warning: ${legacySpecs.length} legacy spec filename(s) detected (e.g., component.yaml). These are deprecated. Please run \`wairon doctor --fix\` to migrate them to the new unified .index.yaml schema.`);
@@ -33745,6 +33792,9 @@ async function runValidate(options = {}) {
       if (issue2.severity === "error") {
         logger.error(`[${issue2.code}] ${issue2.message}`);
         hasErrors = true;
+      } else if (issue2.severity === "notice") {
+        logger.notice(`[${issue2.code}] ${issue2.message}`);
+        noticeTotal++;
       } else {
         logger.warn(`[${issue2.code}] ${issue2.message}`);
         hasFatalWarnings = true;
@@ -33762,6 +33812,9 @@ async function runValidate(options = {}) {
       if (issue2.severity === "error") {
         logger.error(`${prefix}[${issue2.code}] ${issue2.message}`);
         hasErrors = true;
+      } else if (issue2.severity === "notice") {
+        logger.notice(`${prefix}[${issue2.code}] ${issue2.message}`);
+        noticeTotal++;
       } else {
         logger.warn(`${prefix}[${issue2.code}] ${issue2.message}`);
         hasFatalWarnings = true;
@@ -33788,9 +33841,11 @@ async function runValidate(options = {}) {
     } else {
       let errorCount = 0;
       let warningCount = 0;
+      let noticeCount = 0;
       const MAX_PRINT = 100;
       let skippedErrors = 0;
       let skippedWarnings = 0;
+      let skippedNotices = 0;
       for (const issue2 of sddResult.issues) {
         const prefix = issue2.specId ? import_chalk5.default.gray(`[${issue2.specId}] `) : "";
         if (issue2.severity === "error") {
@@ -33801,6 +33856,14 @@ async function runValidate(options = {}) {
           } else {
             skippedErrors++;
           }
+        } else if (issue2.severity === "notice") {
+          noticeTotal++;
+          if (noticeCount < MAX_PRINT) {
+            logger.notice(`${prefix}[${issue2.code}] ${issue2.message}`);
+            noticeCount++;
+          } else {
+            skippedNotices++;
+          }
         } else {
           if (isCiDraftWaivable(issue2)) {
             waivedWarnings++;
@@ -33821,6 +33884,9 @@ async function runValidate(options = {}) {
       if (skippedWarnings > 0) {
         logger.warn(`... and ${skippedWarnings} more warning(s) omitted. Use '--subsystem <id>' to validate a specific subsystem.`);
       }
+      if (skippedNotices > 0) {
+        logger.notice(`... and ${skippedNotices} more notice(s) omitted. Use '--subsystem <id>' to validate a specific subsystem.`);
+      }
     }
   }
   const summary = carriedDebtSummary(projectConfig.rules?.conformance?.carried);
@@ -33830,6 +33896,9 @@ async function runValidate(options = {}) {
     for (const note of summary.revisits) logger.info(import_chalk5.default.gray(note));
   }
   logger.blank();
+  if (noticeTotal > 0) {
+    logger.info(import_chalk5.default.blue(`${noticeTotal} notice(s) reported \u2014 never part of the failure decision${options.ci ? " (--ci does not fail on notices)" : ""}.`));
+  }
   if (options.ci && waivedWarnings > 0) {
     logger.info(import_chalk5.default.gray(`${waivedWarnings} draft-related warning(s) (non-fatal in --ci): excluded from the failure decision because the referenced specs are in draft/design status.`));
   }
@@ -33844,7 +33913,7 @@ async function runValidate(options = {}) {
     process.exit(1);
   } else {
     if (options.ci) {
-      logger.success("All checks passed (CI mode \u2014 warnings treated as errors, draft-related warnings excepted).");
+      logger.success("All checks passed (CI mode \u2014 warnings treated as errors, draft-related warnings excepted; notices never fail).");
     } else {
       logger.success("All checks passed.");
     }
@@ -34871,8 +34940,11 @@ async function runDoctor(options = {}) {
       const result = validateSddTree(cfg.rules, cfg.projectType);
       const errs = result.issues.filter((i) => i.severity === "error").length;
       const warns = result.issues.filter((i) => i.severity === "warning").length;
-      if (errs > 0) line(tally, "error", `Conformance: ${errs} error(s), ${warns} warning(s) \u2014 see \`wairon validate\` (you: \`sdd_validate_tree\`)`);
-      else if (warns > 0) line(tally, "warn", `Conformance: ${warns} warning(s) \u2014 see \`wairon validate\` (you: \`sdd_validate_tree\`)`);
+      const notes = result.issues.filter((i) => i.severity === "notice").length;
+      const noted = notes > 0 ? `, ${notes} notice(s)` : "";
+      if (errs > 0) line(tally, "error", `Conformance: ${errs} error(s), ${warns} warning(s)${noted} \u2014 see \`wairon validate\` (you: \`sdd_validate_tree\`)`);
+      else if (warns > 0) line(tally, "warn", `Conformance: ${warns} warning(s)${noted} \u2014 see \`wairon validate\` (you: \`sdd_validate_tree\`)`);
+      else if (notes > 0) line(tally, "ok", `Conformance: 0 errors, 0 warnings, ${notes} notice(s) \u2014 see \`wairon validate\` (you: \`sdd_validate_tree\`)`);
       else line(tally, "ok", "Conformance: 0 errors, 0 warnings");
     } catch (e) {
       line(tally, "warn", `Could not run conformance check: ${e instanceof Error ? e.message : String(e)}`);
@@ -35362,6 +35434,7 @@ async function listRules3() {
   const sevLabel = (sev) => {
     if (sev === "error") return import_chalk13.default.red("error  ");
     if (sev === "warning") return import_chalk13.default.yellow("warning");
+    if (sev === "notice") return import_chalk13.default.blue("notice ");
     return import_chalk13.default.gray("off    ");
   };
   const ext = loadProjectExtensions();
@@ -35394,7 +35467,7 @@ SDD conformance rules (${active.length})
   for (const err of ext.errors) {
     logger.error(err);
   }
-  logger.info("Override severities per project via rules.sddRuleSeverity in .wai/project.yaml (error | warning | off).");
+  logger.info("Override severities per project via rules.sddRuleSeverity in .wai/project.yaml (error | warning | notice | off). A notice is reported but never fails the gate, --ci included.");
   if (ext.packNames.length) {
     logger.info(`Extension packs loaded: ${ext.packNames.join(", ")} (.wai/project.yaml \u2192 extensions.packs).`);
   }
@@ -38445,7 +38518,8 @@ function executeApprovedLock(cfg, projectId, approver, subproject) {
       validationResult: {
         valid: true,
         errors: 0,
-        warnings: result.issues.filter((i) => i.severity === "warning").length
+        warnings: result.issues.filter((i) => i.severity === "warning").length,
+        notices: result.issues.filter((i) => i.severity === "notice").length
       },
       status: "ready",
       specs,
@@ -44709,13 +44783,22 @@ function reshapeLandscapeGraph(model, level) {
 }
 function overlayProjectIssues(graph, issues, projectId, level) {
   const counts = /* @__PURE__ */ new Map();
+  const noticeCounts = /* @__PURE__ */ new Map();
   for (const issue2 of issues) {
     const id = issue2.specId;
-    if (id) counts.set(id, (counts.get(id) ?? 0) + 1);
+    if (!id) continue;
+    const into = issue2.severity === "notice" ? noticeCounts : counts;
+    into.set(id, (into.get(id) ?? 0) + 1);
   }
   const nodes = graph.nodes.map((n) => {
     const count = counts.get(n.id);
-    return count !== void 0 ? { ...n, issueCount: count } : n;
+    const notices = noticeCounts.get(n.id);
+    if (count === void 0 && notices === void 0) return n;
+    return {
+      ...n,
+      ...count !== void 0 ? { issueCount: count } : {},
+      ...notices !== void 0 ? { noticeCount: notices } : {}
+    };
   });
   return {
     ...graph,
@@ -45419,7 +45502,8 @@ details.adv summary { cursor:pointer; color:var(--dim); font-size:12px; margin-b
         nodes.forEach(function (n) {
           var li = document.createElement('li');
           li.innerHTML = '<span class="kind">' + esc(n.kind) + '</span><span>' + esc(n.label || n.id) + '</span>'
-            + (n.issueCount ? ' <span class="pill bad" title="validation issues">' + n.issueCount + '</span>' : '');
+            + (n.issueCount ? ' <span class="pill bad" title="validation errors and warnings">' + n.issueCount + '</span>' : '')
+            + (n.noticeCount ? ' <span class="pill" title="validation notices">' + n.noticeCount + '</span>' : '');
           li.addEventListener('click', function () {
             Array.prototype.forEach.call(list.children, function (x) { x.classList.remove('sel'); });
             li.classList.add('sel');
@@ -45462,14 +45546,18 @@ details.adv summary { cursor:pointer; color:var(--dim); font-size:12px; margin-b
   $('btnValidate').addEventListener('click', function () {
     var insp = $('insp'); insp.innerHTML = '<div class="hint">Validating\u2026</div>';
     mcp('sdd_validate_tree', {}).then(function (res) {
-      var issues = (res && res.issues) || [];
+      // sdd_validate_tree answers with three lists \u2014 errors, warnings, notices;
+      // this view used to read an "issues" list the tool never sends, so it
+      // reported every tree clean.
+      var issues = (res && res.issues) || [].concat((res && res.errors) || [], (res && res.warnings) || [], (res && res.notices) || []);
       var errs = issues.filter(function (i) { return i.severity === 'error'; }).length;
-      var warns = issues.length - errs;
-      var html = '<h2>Validation</h2><p class="meta">' + (issues.length ? (errs + ' error(s), ' + warns + ' warning(s)') : 'clean \u2014 no findings') + '</p>';
+      var notes = issues.filter(function (i) { return i.severity === 'notice'; }).length;
+      var warns = issues.length - errs - notes;
+      var html = '<h2>Validation</h2><p class="meta">' + (issues.length ? (errs + ' error(s), ' + warns + ' warning(s), ' + notes + ' notice(s)') : 'clean \u2014 no findings') + '</p>';
       if (issues.length) {
         html += '<table class="grid"><thead><tr><th>Severity</th><th>Code</th><th>Spec</th><th>Message</th></tr></thead><tbody>';
         issues.slice(0, 200).forEach(function (i) {
-          var cls = i.severity === 'error' ? 'bad' : 'warn';
+          var cls = i.severity === 'error' ? 'bad' : i.severity === 'notice' ? '' : 'warn';
           html += '<tr><td><span class="pill ' + cls + '">' + esc(i.severity) + '</span></td><td>' + esc(i.code) + '</td><td>' + esc(i.specId || '') + '</td><td>' + esc(i.message) + '</td></tr>';
         });
         html += '</tbody></table>';
@@ -50446,9 +50534,11 @@ async function validateCommand(opts) {
     const report2 = await validateAttached(target, opts.subsystem);
     const errors = report2.errors ?? [];
     const warnings = report2.warnings ?? [];
-    logger.info(`Validated "${target.projectId}" on ${target.url} \u2014 ${errors.length} error(s), ${warnings.length} warning(s).`);
+    const notices = report2.notices ?? [];
+    logger.info(`Validated "${target.projectId}" on ${target.url} \u2014 ${errors.length} error(s), ${warnings.length} warning(s), ${notices.length} notice(s).`);
     for (const e of errors) logger.error(`  [${e.code}] ${e.specId ? `${e.specId}: ` : ""}${e.message}`);
     for (const w of warnings) logger.warn(`  [${w.code}] ${w.specId ? `${w.specId}: ` : ""}${w.message}`);
+    for (const n of notices) logger.notice(`  [${n.code}] ${n.specId ? `${n.specId}: ` : ""}${n.message}`);
     if (errors.length || opts.ci && warnings.length) process.exit(1);
     return;
   }
@@ -50478,7 +50568,7 @@ program.command("lock-check").description("Merge gate: is the design in this wor
 program.command("lock").description("Final check before implementation: validate the spec tree as complete, freeze all specs to complete, and (re)generate the agent topology \u2014 only if it validates. In an attached checkout, locks the hosted project instead.").option("-y, --yes", "skip the confirmation prompt (for scripts / CI)").option("--subsystem <id>", "only lock specs in the specified subsystem").option("--no-recursive", "do not recursively validate subprojects").action(async (opts) => {
   await lockCommand(opts);
 });
-program.command("validate").description("Validate the project configuration and the SDD Spec Tree").option("--ci", "treat warnings as errors for CI pipelines").option("--subsystem <id>", "only validate the specified subsystem (granular)").option("--no-recursive", "do not recursively validate subprojects").action(async (opts) => {
+program.command("validate").description("Validate the project configuration and the SDD Spec Tree").option("--ci", "treat warnings as errors for CI pipelines (notices are printed and counted, never fatal)").option("--subsystem <id>", "only validate the specified subsystem (granular)").option("--no-recursive", "do not recursively validate subprojects").action(async (opts) => {
   await validateCommand(opts);
 });
 program.command("status").description("Show a hierarchical completeness graph of the SDD Spec Tree").option("--subsystem <id>", "only show status for the specified subsystem").option("--no-recursive", "do not recursively show status for subprojects").action(async (opts) => {