@wairon/cli 5.1.1-dev.87 → 5.1.1-dev.88

package/dist/index.js

@@ -3060,7 +3060,7 @@ var require_dist = __commonJS({
     function slug(name) {
       return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
     }
-    var fs24 = __toESM2(require("fs"));
+    var fs25 = __toESM2(require("fs"));
     var path46 = __toESM2(require("path"));
     var import_fflate = require_node();
     var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", ".hg", ".svn"]);
@@ -3100,8 +3100,8 @@ var require_dist = __commonJS({
     function writeTree(destDir, files) {
       for (const file of files) {
         const absolute = path46.join(destDir, file.path);
-        fs24.mkdirSync(path46.dirname(absolute), { recursive: true });
-        fs24.writeFileSync(absolute, file.contents);
+        fs25.mkdirSync(path46.dirname(absolute), { recursive: true });
+        fs25.writeFileSync(absolute, file.contents);
       }
     }
     function classifyKind(name, symlinks) {
@@ -3110,14 +3110,14 @@ var require_dist = __commonJS({
       return "file";
     }
     function walkPackDir(root, current2, out) {
-      for (const entry of fs24.readdirSync(current2, { withFileTypes: true })) {
+      for (const entry of fs25.readdirSync(current2, { withFileTypes: true })) {
         if (entry.isDirectory()) {
           if (SKIP_DIRS.has(entry.name)) continue;
           walkPackDir(root, path46.join(current2, entry.name), out);
         } else if (entry.isFile()) {
           const absolute = path46.join(current2, entry.name);
           const relative22 = path46.relative(root, absolute).split(path46.sep).join("/");
-          out.push({ path: relative22, contents: fs24.readFileSync(absolute) });
+          out.push({ path: relative22, contents: fs25.readFileSync(absolute) });
         }
       }
     }
@@ -3604,6 +3604,7 @@ __export(src_exports, {
   generateDiagramSet: () => generateDiagramSet,
   generateSequenceDiagram: () => generateSequenceDiagram,
   getExporter: () => getExporter,
+  getHostedLookup: () => getHostedLookup,
   getLoaderIssues: () => getLoaderIssues,
   getProjectRoot: () => getProjectRoot,
   getProjectRootOverride: () => getProjectRootOverride,
@@ -3735,6 +3736,7 @@ __export(src_exports, {
   resolveVariantGuidance: () => resolveVariantGuidance,
   retireSpecialists: () => retireSpecialists,
   rewriteReferences: () => rewriteReferences2,
+  runWithHostedLookup: () => runWithHostedLookup,
   runWithProjectBinding: () => runWithProjectBinding,
   runWithProjectRoot: () => runWithProjectRoot,
   sameContract: () => sameContract,
@@ -3844,18 +3846,33 @@ function runWithProjectBinding(dir, reach2, fn) {
       root: path.resolve(dir),
       topRoot: path.resolve(reach2.topRoot),
       parentReach: reach2.parentReach,
-      ...reach2.narrowed ? { narrowed: true } : {}
+      ...reach2.narrowed ? { narrowed: true } : {},
+      ...reach2.unwritableRoots ? { unwritableRoots: reach2.unwritableRoots.map((r) => path.resolve(r)) } : {},
+      ...reach2.hostedLookup ? { hostedLookup: reach2.hostedLookup } : {}
     },
     fn
   );
 }
+function getHostedLookup() {
+  return requestRootStore.getStore()?.hostedLookup ?? null;
+}
+function runWithHostedLookup(lookup2, fn) {
+  const scope = requestRootStore.getStore();
+  if (!scope?.hostedLookup) return fn();
+  return requestRootStore.run({ ...scope, hostedLookup: lookup2 }, fn);
+}
 function getRequestProjectRoot() {
   return requestRootStore.getStore()?.root ?? null;
 }
 function getRequestParentReach() {
   const scope = requestRootStore.getStore();
   if (!scope || scope.parentReach === void 0) return null;
-  return { topRoot: scope.topRoot, parentReach: scope.parentReach, ...scope.narrowed ? { narrowed: true } : {} };
+  return {
+    topRoot: scope.topRoot,
+    parentReach: scope.parentReach,
+    ...scope.narrowed ? { narrowed: true } : {},
+    ...scope.unwritableRoots ? { unwritableRoots: scope.unwritableRoots } : {}
+  };
 }
 function setProjectRoot(dir) {
   projectRootOverride = dir === null ? null : path.resolve(dir);
@@ -4571,7 +4588,8 @@ var ProjectProfileSelectionSchema = import_zod3.z.object({
   selectedAt: import_zod3.z.string()
 });
 var ExternalSourceSchema = import_zod3.z.object({
-  path: import_zod3.z.string()
+  path: import_zod3.z.string().optional(),
+  hosted: import_zod3.z.string().optional()
 });
 var ExternalDeclarationSchema = import_zod3.z.object({
   /** The producer's project id; defaults to the alias. Plain string: a malformed id is REPORTED, never unreadable. */
@@ -4942,6 +4960,12 @@ function projectIdentity(config, lockedProjectId) {
   };
 }
 var EXTERNAL_ALIAS_RE = /^[a-z0-9_-]+$/;
+function sourceProblem(source) {
+  if (source === void 0) return void 0;
+  const named2 = (source.path !== void 0 ? 1 : 0) + (source.hosted !== void 0 ? 1 : 0);
+  if (named2 === 1) return void 0;
+  return named2 === 0 ? "its `source` names neither `path` nor `hosted` \u2014 give exactly one" : "its `source` names both `path` and `hosted` \u2014 give exactly one";
+}
 var USE_ENTRY_RE = /^(\*|[a-z0-9_-]+)$/;
 function readUse(alias, use) {
   const list = Array.isArray(use) ? use.map((u) => String(u)) : [];
@@ -4956,11 +4980,12 @@ function declaredExternals(config) {
   return Object.entries(config.externals ?? {}).map(([alias, declaration2]) => {
     const project = declaration2?.project ?? alias;
     const imports = readUse(alias, declaration2?.use);
-    const problem = !EXTERNAL_ALIAS_RE.test(alias) ? PROJECT_ID_RE.test(alias) ? `the alias "${alias}" is not a reference name ([a-z0-9-_]+) \u2014 a dotted producer id needs an explicit alias, e.g. \`${alias.replace(/\./g, "-")}: { project: ${alias} }\`` : `the alias "${alias}" breaks [a-z0-9-_]+` : config.members?.[alias] !== void 0 ? `the alias "${alias}" is also declared under \`members\` \u2014 one alias names one project` : !PROJECT_ID_RE.test(project) ? `the producer id "${project}" breaks the project-id grammar` : imports.problem;
+    const problem = !EXTERNAL_ALIAS_RE.test(alias) ? PROJECT_ID_RE.test(alias) ? `the alias "${alias}" is not a reference name ([a-z0-9-_]+) \u2014 a dotted producer id needs an explicit alias, e.g. \`${alias.replace(/\./g, "-")}: { project: ${alias} }\`` : `the alias "${alias}" breaks [a-z0-9-_]+` : config.members?.[alias] !== void 0 ? `the alias "${alias}" is also declared under \`members\` \u2014 one alias names one project` : !PROJECT_ID_RE.test(project) ? `the producer id "${project}" breaks the project-id grammar` : sourceProblem(declaration2?.source) ?? imports.problem;
     return {
       alias,
       project,
       ...declaration2?.source?.path !== void 0 ? { sourcePath: declaration2.source.path } : {},
+      ...declaration2?.source?.hosted !== void 0 ? { sourceHosted: declaration2.source.hosted } : {},
       ...problem ? { problem } : {},
       use: imports.use
     };
@@ -7556,10 +7581,10 @@ function stepGraph(method) {
     const s = byNum.get(n);
     if (s.type !== "parallel" || s.endStep === void 0 || !s.branches?.length) continue;
     const entries = s.branches.map((b) => b.step).sort((a, b) => a - b);
-    const join27 = fallNext(s.endStep);
+    const join28 = fallNext(s.endStep);
     for (let i = 0; i < entries.length; i++) {
       const armEnd = i + 1 < entries.length ? prevOf(entries[i + 1]) : s.endStep;
-      if (armEnd !== void 0 && armEnd >= entries[i]) armEndJoin.set(armEnd, join27);
+      if (armEnd !== void 0 && armEnd >= entries[i]) armEndJoin.set(armEnd, join28);
     }
   }
   const successorsOf = (n) => {
@@ -13418,10 +13443,11 @@ function isWithinDir(dir, target) {
   const rel2 = path10.relative(path10.resolve(dir), path10.resolve(target));
   return rel2 === "" || !rel2.startsWith("..") && !path10.isAbsolute(rel2);
 }
-function producerUnreadable(directory) {
+function producerUnreadable(external) {
+  const directory = external.directory;
   if (!directory) return "the producer has no root directory";
   const reach2 = getRequestParentReach();
-  if (reach2) {
+  if (reach2 && external.sourceKind !== "hosted") {
     const bound2 = getProjectRoot();
     const ceiling = reach2.parentReach ? reach2.topRoot ?? bound2 : bound2;
     if (!isWithinDir(ceiling, directory)) return OUT_OF_REACH;
@@ -13450,7 +13476,7 @@ function usedDigests(usage, snapshot) {
 function pinBinding(binding, lock) {
   const { external } = binding;
   const unexported = binding.usage?.unexported ?? [];
-  const unreadable = producerUnreadable(external.directory);
+  const unreadable = producerUnreadable(external);
   let snapshot;
   try {
     if (unreadable) throw new Error(unreadable);
@@ -13553,7 +13579,7 @@ function externalStatus(binding, lock) {
   const entry = lock?.externals[external.alias];
   const pinned = entry !== void 0 && externalsRepository.readSnapshot(external.alias) !== null;
   const base = { alias: external.alias, project: external.project, sourceKind: external.sourceKind, pinned };
-  const unreadable = external.sourceKind === "unresolved" ? `the external does not resolve: ${external.problem}` : producerUnreadable(external.directory);
+  const unreadable = external.sourceKind === "unresolved" ? hostedOnly(external) ? external.problem : `the external does not resolve: ${external.problem}` : producerUnreadable(external);
   let live = null;
   let reason = unreadable;
   if (!reason) {
@@ -13564,7 +13590,7 @@ function externalStatus(binding, lock) {
     }
   }
   if (!live) {
-    const outOfReach = reason === OUT_OF_REACH || !binding.reachable && external.sourceKind !== "family";
+    const outOfReach = reason === OUT_OF_REACH || hostedOutOfReach(external) || !binding.reachable && external.sourceKind !== "family";
     return {
       ...base,
       reachable: false,
@@ -13575,7 +13601,7 @@ function externalStatus(binding, lock) {
     };
   }
   const drifted = entry !== void 0 ? contentDigest(live) !== entry.digest : void 0;
-  if (external.sourceKind === "path") {
+  if (external.sourceKind === "path" || external.sourceKind === "hosted") {
     return { ...base, reachable: true, stale: false, ...drifted !== void 0 ? { drifted } : {}, uses: [{ state: "unavailable", code: CHECK_UNAVAILABLE, detail: OUTSIDE_FAMILY }], detail: OUTSIDE_FAMILY };
   }
   const uses = compareUses(entry, binding.usage, live);
@@ -13587,6 +13613,12 @@ function externalStatus(binding, lock) {
     uses
   };
 }
+function hostedOnly(external) {
+  return external.hosted !== void 0 && external.sourceKind === "unresolved" && getHostedLookup() === null;
+}
+function hostedOutOfReach(external) {
+  return external.hosted !== void 0 && external.sourceKind === "unresolved" && getHostedLookup() !== null;
+}
 function getExternalsStatus() {
   const bindings = resolveDeclared();
   const lock = externalsRepository.readLock();
@@ -14250,7 +14282,7 @@ function defaultTargetConfig(type) {
     enabled: true
   };
 }
-var WAIRON_VERSION = "5.1.1-dev.87";
+var WAIRON_VERSION = "5.1.1-dev.88";
 var GITHUB_REPO = "SYW-Apps/Waffle-AIron";
 var ARCHITECT_AGENT_ID = "agent-architect";
 var ARCHITECT_TEMPLATE_ID = "architect";
@@ -15047,13 +15079,13 @@ function buildCodeIndex(model) {
     const to = resolveImport(scope, specifier, paths);
     return to ? republishedFrom(to) : NO_ORIGIN;
   };
-  const scopeOf = (site, from) => {
+  const scopeOf2 = (site, from) => {
     const path46 = pathKey(site.from ?? from);
     const f = facts.get(path46);
     return f?.status === "analyzed" && f.analysisGrade === "exact" ? { path: path46, facts: f } : void 0;
   };
   const originOf2 = (site, from) => {
-    const resolved = scopeOf(site, from);
+    const resolved = scopeOf2(site, from);
     if (!resolved) return NO_ORIGIN;
     const { path: scope, facts: f } = resolved;
     const landing = (specifier) => landingFrom(scope, specifier);
@@ -15075,7 +15107,7 @@ function buildCodeIndex(model) {
   const possibleOriginsOf = (site, from) => {
     const proven = originOf2(site, from);
     if (!site.field && !site.constructed && !site.via) return proven;
-    const resolved = scopeOf(site, from);
+    const resolved = scopeOf2(site, from);
     if (!resolved) return proven;
     const { path: scope, facts: f } = resolved;
     const out = new Set(proven);
@@ -21455,7 +21487,7 @@ var technologyRule = {
       for (const tech of impl.technologies) declarations.push({ comp, tech });
     }
     const scopes = /* @__PURE__ */ new Map();
-    const scopeOf = (comp) => {
+    const scopeOf2 = (comp) => {
       const cached = scopes.get(comp.id);
       if (cached) return cached;
       const compSet = ownsClosure(ownershipRoot(comp.id));
@@ -21482,7 +21514,7 @@ var technologyRule = {
       const key = tech.toLowerCase().split(/[^a-z0-9]+/).filter(Boolean).join("");
       const home = homes.get(key) ?? { label: tech, match: match2, ownerComponents: /* @__PURE__ */ new Set(), scope: /* @__PURE__ */ new Set() };
       home.ownerComponents.add(comp.id);
-      for (const id of scopeOf(comp)) home.scope.add(id);
+      for (const id of scopeOf2(comp)) home.scope.add(id);
       homes.set(key, home);
     }
     if (homes.size === 0) return;
@@ -25167,6 +25199,7 @@ function bindExternals(node, root, nodes) {
   return declaredExternals(root.config).map((decl) => {
     const unresolved = (problem) => ({ alias: decl.alias, project: decl.project, sourceKind: "unresolved", audience: "instance", problem });
     if (decl.problem) return unresolved(decl.problem);
+    if (decl.sourceHosted !== void 0) return { alias: decl.alias, project: decl.project, sourceKind: "hosted", hosted: decl.sourceHosted, audience: "instance" };
     if (decl.sourcePath !== void 0) {
       const directory = path18.resolve(node.directory, decl.sourcePath);
       const found = nodes.find((n) => dirKey(n.directory) === dirKey(directory));
@@ -30169,6 +30202,17 @@ function unregisterDomain(id) {
 
 // src/core/external-producers.ts
 var path21 = __toESM(require("path"));
+function hostedOnlyProducer(id) {
+  return `hosted-only producer \`${id}\`: available only through the hosted server`;
+}
+function resolveHosted(external) {
+  if (external.sourceKind !== "hosted" || external.hosted === void 0) return external;
+  const lookup2 = getHostedLookup();
+  const unresolved = (problem) => ({ ...external, sourceKind: "unresolved", problem });
+  if (!lookup2) return unresolved(hostedOnlyProducer(external.hosted));
+  const root = lookup2(external.hosted);
+  return root === null ? unresolved(`the hosted producer \`${external.hosted}\` is unknown or outside this request's reach`) : { ...external, directory: path21.resolve(root) };
+}
 function dirKey2(dir) {
   const resolved = path21.resolve(dir);
   return process.platform === "win32" ? resolved.toLowerCase() : resolved;
@@ -30194,11 +30238,14 @@ function resolveDeclared() {
     const family = graph();
     const node = consumerNode(family, bound2);
     if (!node) return null;
-    return node.externals.map((external) => ({
-      external,
-      ...external.sourceKind === "family" && external.producer !== void 0 ? { usage: exportUsage(node.namespace, external.producer) } : {},
-      reachable: whole
-    }));
+    return node.externals.map((declared) => {
+      const external = resolveHosted(declared);
+      return {
+        external,
+        ...external.sourceKind === "family" && external.producer !== void 0 ? { usage: exportUsage(node.namespace, external.producer) } : {},
+        reachable: whole
+      };
+    });
   });
   return answer(top) ?? answer(bound2) ?? [];
 }
@@ -30881,7 +30928,7 @@ function carryDeclarations(scan, result) {
   const bound2 = projectConfigRepository.load() ?? {};
   for (const [alias, decl] of Object.entries(scan.config?.externals ?? {})) {
     if (carriedExternal(scan, alias, decl) === "parent") continue;
-    const source = decl.source && !path22.isAbsolute(decl.source.path) ? { path: toPosixPath(path22.relative(root, path22.resolve(scan.memberDir, decl.source.path))) } : decl.source;
+    const source = decl.source?.path !== void 0 && !path22.isAbsolute(decl.source.path) ? { path: toPosixPath(path22.relative(root, path22.resolve(scan.memberDir, decl.source.path))) } : decl.source;
     if (bound2.members?.[alias] === void 0) {
       projectConfigRepository.declareExternal(alias, {
         ...decl.project !== void 0 ? { project: decl.project } : {},
@@ -32583,7 +32630,7 @@ function importSpecTree(archive, options) {
     throw new Error("incompatible .waitree archive (format or minimum wairon version)");
   }
   const destDir = path31.resolve(options.destDir ?? getProjectRoot());
-  const occupied = hasSpecTree(destDir);
+  const occupied2 = hasSpecTree(destDir);
   const authored = hasAuthoredSpecs(destDir);
   if (authored && options.replaceExisting !== true) {
     throw new Error(
@@ -32598,7 +32645,7 @@ function importSpecTree(archive, options) {
     discardStagingDir(stagingDir);
     throw err;
   }
-  const backupPath = commitStagedTree(stagingDir, destDir, extraction.roots, occupied);
+  const backupPath = commitStagedTree(stagingDir, destDir, extraction.roots, occupied2);
   discardStagingDir(stagingDir);
   invalidateSpecCache();
   const result = {
@@ -32606,7 +32653,7 @@ function importSpecTree(archive, options) {
     projectName: extraction.manifest.projectName,
     roots: extraction.roots,
     fileCount: extraction.writtenPaths.length,
-    replaced: occupied
+    replaced: occupied2
   };
   if (backupPath) result.backupPath = backupPath;
   if (extraction.manifest.stateId) result.stateId = extraction.manifest.stateId;
@@ -35205,6 +35252,7 @@ function pin(p, log) {
 }
 
 // src/migrations/membership.ts
+var fs22 = __toESM(require("fs"));
 var path40 = __toESM(require("path"));
 
 // src/migrations/family-files.ts
@@ -35285,39 +35333,93 @@ function within2(root, candidate) {
   const rel2 = nodePath.relative(root, candidate);
   return rel2 === "" || !rel2.startsWith("..") && !nodePath.isAbsolute(rel2);
 }
+function areaFiles(owner, area) {
+  const out = [];
+  const walk2 = (rel2) => {
+    if (rel2 === `${WAI}/${TRANSACTIONS}`) return;
+    const abs = nodePath.join(owner, ...rel2.split("/"));
+    let stat;
+    try {
+      stat = fs21.lstatSync(abs);
+    } catch {
+      return;
+    }
+    if (stat.isSymbolicLink()) return;
+    if (stat.isFile()) {
+      out.push(rel2);
+      return;
+    }
+    if (!stat.isDirectory()) return;
+    for (const name of fs21.readdirSync(abs)) walk2(`${rel2}/${name}`);
+  };
+  walk2(area.split(nodePath.sep).join("/").replace(/\/+$/, ""));
+  return out.sort();
+}
+function everyFile(owner) {
+  const out = [];
+  const walk2 = (dir, rel2) => {
+    let entries;
+    try {
+      entries = fs21.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const relPath = rel2 ? `${rel2}/${entry.name}` : entry.name;
+      if (relPath === `${WAI}/${TRANSACTIONS}`) continue;
+      if (entry.isSymbolicLink()) continue;
+      if (entry.isDirectory()) walk2(nodePath.join(dir, entry.name), relPath);
+      else if (entry.isFile()) out.push(relPath);
+    }
+  };
+  walk2(owner, "");
+  return out.sort();
+}
+function insideWhole(whole, dir) {
+  return whole.some((w) => within2(w, dir));
+}
+function scopedFiles(owner, areas) {
+  return areas ? [...new Set(areas.flatMap((a) => areaFiles(owner, a)))].sort() : waiFiles(owner);
+}
 function mirror(scope, target) {
   const digests = /* @__PURE__ */ new Map();
-  for (const project of scope.projects) {
-    if (!within2(scope.familyRoot, project)) {
-      throw new Error(`${project} does not lie within the family root ${scope.familyRoot}; a rehearsal copies only the family's own trees`);
-    }
-    const at = nodePath.join(target, nodePath.relative(scope.familyRoot, project));
-    for (const rel2 of waiFiles(project)) {
-      const live = nodePath.join(project, ...rel2.split("/"));
-      let bytes;
-      try {
-        bytes = fs21.readFileSync(live);
-      } catch (e) {
-        throw new Error(`could not copy ${live} into the rehearsal: ${e instanceof Error ? e.message : String(e)}`);
-      }
-      const copy = nodePath.join(at, ...rel2.split("/"));
-      fs21.mkdirSync(nodePath.dirname(copy), { recursive: true });
-      fs21.writeFileSync(copy, bytes);
-      digests.set(live, sha2562(bytes));
+  const whole = scope.whole ?? [];
+  for (const owner of [...scope.projects, ...whole]) {
+    if (!within2(scope.familyRoot, owner)) {
+      throw new Error(`${owner} does not lie within the family root ${scope.familyRoot}; a rehearsal copies only the family's own trees`);
     }
   }
+  for (const project of scope.projects.filter((p) => !insideWhole(whole, p))) {
+    copyFiles(project, scopedFiles(project, scope.areas), nodePath.join(target, nodePath.relative(scope.familyRoot, project)), digests);
+  }
+  for (const owner of whole) {
+    copyFiles(owner, everyFile(owner), nodePath.join(target, nodePath.relative(scope.familyRoot, owner)), digests);
+  }
   return digests;
 }
+function copyFiles(owner, rels, at, digests) {
+  fs21.mkdirSync(at, { recursive: true });
+  for (const rel2 of rels) {
+    const live = nodePath.join(owner, ...rel2.split("/"));
+    let bytes;
+    try {
+      bytes = fs21.readFileSync(live);
+    } catch (e) {
+      throw new Error(`could not copy ${live} into the rehearsal: ${e instanceof Error ? e.message : String(e)}`);
+    }
+    const copy = nodePath.join(at, ...rel2.split("/"));
+    fs21.mkdirSync(nodePath.dirname(copy), { recursive: true });
+    fs21.writeFileSync(copy, bytes);
+    digests.set(live, sha2562(bytes));
+  }
+}
 function compare4(rehearsal) {
   const changes = [];
   const seen = /* @__PURE__ */ new Set();
-  for (const owner of waiOwners(rehearsal.directory)) {
-    const live = nodePath.join(rehearsal.familyRoot, nodePath.relative(rehearsal.directory, owner));
-    for (const rel2 of waiFiles(owner)) {
-      seen.add(nodePath.join(live, ...rel2.split("/")));
-      const change = changeOf(rehearsal, live, rel2, sha2562(fs21.readFileSync(nodePath.join(owner, ...rel2.split("/")))));
-      if (change) changes.push(change);
-    }
+  for (const [live, copyRoot, rel2] of comparedFiles(rehearsal)) {
+    seen.add(nodePath.join(live, ...rel2.split("/")));
+    const change = changeOf(rehearsal, live, rel2, sha2562(fs21.readFileSync(nodePath.join(copyRoot, ...rel2.split("/")))));
+    if (change) changes.push(change);
   }
   for (const [liveFile, base] of rehearsal.baseDigests) {
     if (seen.has(liveFile)) continue;
@@ -35326,6 +35428,16 @@ function compare4(rehearsal) {
   }
   return changes.sort(byOwnerThenPath);
 }
+function comparedFiles(rehearsal) {
+  const whole = rehearsal.whole ?? [];
+  const owners = rehearsal.areas ? [...rehearsal.roots].map(([live, copy]) => [live, copy, scopedFiles(copy, rehearsal.areas)]) : waiOwners(rehearsal.directory).map((copy) => [nodePath.join(rehearsal.familyRoot, nodePath.relative(rehearsal.directory, copy)), copy, waiFiles(copy)]);
+  const imageOf = (live) => nodePath.join(rehearsal.directory, nodePath.relative(rehearsal.familyRoot, live));
+  const all = [
+    ...owners.filter(([live]) => !insideWhole(whole, live)),
+    ...whole.map((live) => [live, imageOf(live), everyFile(imageOf(live))])
+  ];
+  return all.flatMap(([live, copy, rels]) => rels.map((rel2) => [live, copy, rel2]));
+}
 function changeOf(rehearsal, live, rel2, staged) {
   const base = rehearsal.baseDigests.get(nodePath.join(live, ...rel2.split("/")));
   if (base === staged) return null;
@@ -35334,9 +35446,23 @@ function changeOf(rehearsal, live, rel2, staged) {
 var order = (a, b) => a < b ? -1 : a > b ? 1 : 0;
 var byOwnerThenPath = (a, b) => order(a.project, b.project) || order(a.path, b.path);
 function ownerOf3(rehearsal, liveFile) {
-  const roots = [...rehearsal.roots.keys()].filter((r) => within2(nodePath.join(r, WAI), liveFile));
+  const whole = (rehearsal.whole ?? []).find((w) => within2(w, liveFile));
+  if (whole !== void 0) return whole;
+  const roots = [...rehearsal.roots.keys()].filter((r) => within2(rehearsal.areas ? r : nodePath.join(r, WAI), liveFile));
   return roots.sort((a, b) => b.length - a.length)[0] ?? nodePath.dirname(nodePath.dirname(liveFile));
 }
+function move(from, to) {
+  const rels = everyFile(from);
+  const taken = rels.find((rel2) => fs21.existsSync(nodePath.join(to, ...rel2.split("/"))));
+  if (taken !== void 0) throw new Error(`cannot move ${from} to ${to}: ${nodePath.join(to, ...taken.split("/"))} already exists`);
+  for (const rel2 of rels) {
+    const target = nodePath.join(to, ...rel2.split("/"));
+    makeDirs(nodePath.dirname(target));
+    replace(nodePath.join(from, ...rel2.split("/")), target);
+  }
+  for (const rel2 of rels) prune(nodePath.dirname(nodePath.join(from, ...rel2.split("/"))), nodePath.dirname(from));
+  prune(from, nodePath.dirname(from));
+}
 function read(path46) {
   try {
     return fs21.readFileSync(path46);
@@ -35478,6 +35604,13 @@ function hasSystemAt(dir) {
     }
   });
 }
+function occupied(dir) {
+  try {
+    return !fs22.statSync(dir).isDirectory() || fs22.readdirSync(dir).length > 0;
+  } catch {
+    return false;
+  }
+}
 function boundNode(family, bound2) {
   return familyNode(family, bound2);
 }
@@ -35551,8 +35684,11 @@ function planDetach(family, bound2, request) {
   const plan5 = emptyPlan(family, request);
   const alias = request.alias ?? "";
   const done = configAt3(familyNode(family, bound2).directory)?.externals?.[alias];
-  if (done?.source?.path && !family.nodes.some((n) => n.parent === bound2 && n.mountAlias === alias)) return plan5;
+  if ((done?.source?.path || done?.source?.hosted) && !family.nodes.some((n) => n.parent === bound2 && n.mountAlias === alias)) return plan5;
   const member = memberUnder(family, bound2, alias, plan5);
+  if (member && request.relocation && occupied(request.relocation.to)) {
+    refuse(plan5, "relocation-target-exists", bound2, `the member "${alias}" cannot move to ${request.relocation.to}: it already exists`);
+  }
   if (!member) return plan5;
   const table = resolveProjectExports(member.namespace || void 0);
   const leaving = (key) => key !== void 0 && withinMember(family, member, key);
@@ -35605,27 +35741,34 @@ function planWidening(plan5, member, narrow) {
 }
 function detachEdits(plan5, family, bound2, member, alias, declared, consumers, outward) {
   const boundDir = familyNode(family, bound2).directory;
-  edit(plan5, bound2, "member", `members: ${alias} removed (${declared.path} stays as it is)`, { root: boundDir, call: "removeMember", args: [alias] });
+  const relocation = plan5.request.relocation;
+  const sourceTo = (from, producer) => relocation ? { hosted: producer.id ?? producer.mountAlias ?? producer.namespace } : { path: posix3(path40.relative(from, producer.directory)) };
+  const where = (source) => source.hosted !== void 0 ? `hosted record ${source.hosted}` : source.path;
+  edit(plan5, bound2, "member", `members: ${alias} removed (${declared.path} ${relocation ? `moves to ${relocation.to}` : "stays as it is"})`, { root: boundDir, call: "removeMember", args: [alias] });
+  const boundSource = relocation ? sourceTo(boundDir, member) : { path: declared.path };
   const external = {
     ...member.id !== void 0 && member.id !== alias ? { project: member.id } : {},
-    source: { path: declared.path },
+    source: boundSource,
     ...declared.use && declared.use.length > 0 ? { use: declared.use } : {},
     ...declared.description !== void 0 ? { description: declared.description } : {}
   };
-  edit(plan5, bound2, "external", `externals: ${alias} \u2192 ${member.id ?? alias} at ${declared.path}`, { root: boundDir, call: "declareExternal", args: [alias, external] });
+  edit(plan5, bound2, "external", `externals: ${alias} \u2192 ${member.id ?? alias} at ${where(boundSource)}`, { root: boundDir, call: "declareExternal", args: [alias, external] });
   for (const c of consumers) {
     const held = configAt3(c.node.directory)?.externals?.[c.alias];
-    const source = { path: posix3(path40.relative(c.node.directory, member.directory)) };
-    edit(plan5, c.node.namespace, "external", `externals: ${c.alias} found at ${source.path} (it leaves the family)`, { root: c.node.directory, call: "repointExternal", args: [c.alias, held?.project ?? null, source] });
+    const source = sourceTo(c.node.directory, member);
+    edit(plan5, c.node.namespace, "external", `externals: ${c.alias} found at ${where(source)} (it leaves the family)`, { root: c.node.directory, call: "repointExternal", args: [c.alias, held?.project ?? null, source] });
   }
   const own = configAt3(member.directory)?.externals ?? {};
   for (const e of outward) {
     const producer = familyNode(family, e.producer);
-    const source = { path: posix3(path40.relative(member.directory, producer.directory)) };
-    edit(plan5, member.namespace, "external", `externals: ${e.alias} found at ${source.path} (the member leaves the family)`, { root: member.directory, call: "repointExternal", args: [e.alias, own[e.alias]?.project ?? null, source] });
+    const source = sourceTo(member.directory, producer);
+    edit(plan5, member.namespace, "external", `externals: ${e.alias} found at ${where(source)} (the member leaves the family)`, { root: member.directory, call: "repointExternal", args: [e.alias, own[e.alias]?.project ?? null, source] });
+  }
+  if (relocation) {
+    edit(plan5, member.namespace, "move", `${member.directory} moved to ${relocation.to} (its own isolated root), its own members with it`, { root: member.directory, call: "move", args: [relocation.to] });
   }
   edit(plan5, bound2, "pin", `pin ${alias} (the detached project's surface, read last)`, { root: boundDir, call: "pinExternals", args: [[alias]] });
-  plan5.notes.push(`Consumers outside the family are not affected: they already name ${member.id ?? alias} by path, or not at all.`);
+  plan5.notes.push(`Consumers outside the family are not affected: they already name ${member.id ?? alias} by ${relocation ? "hosted record id" : "path"}, or not at all.`);
 }
 function planAdopt(family, bound2, request) {
   const plan5 = emptyPlan(family, request);
@@ -35636,6 +35779,7 @@ function planAdopt(family, bound2, request) {
   if (!external && boundConfig?.members?.[alias] !== void 0) return plan5;
   let dir = null;
   if (!external) refuse(plan5, "not-an-external", bound2, `${label4(bound2)} declares no external "${alias}"`);
+  else if (request.relocation) return planRelocatedAdopt(plan5, family, bound2, alias, external, request.relocation);
   else {
     dir = resolve30(boundDir, external.source?.path ?? "");
     if (dir === null) refuse(plan5, "not-contained", bound2, `the external "${alias}" ${external.source?.path ? `is found at "${external.source.path}", which is not strictly within ${label4(bound2)}` : "names no source.path"}`);
@@ -35644,7 +35788,18 @@ function planAdopt(family, bound2, request) {
   if (plan5.refusals.length > 0) return plan5;
   return adoptEdits(plan5, family, bound2, alias, external, dir);
 }
-function adoptEdits(plan5, family, bound2, alias, external, dir) {
+function planRelocatedAdopt(plan5, family, bound2, alias, external, relocation) {
+  const boundDir = familyNode(family, bound2).directory;
+  const target = resolve30(boundDir, plan5.request.path ?? "");
+  if (!external.source?.hosted) refuse(plan5, "not-contained", bound2, `the external "${alias}" names no source.hosted \u2014 a hosted adopt moves a project named by its hosted record id`);
+  else if (target === null || path40.resolve(target) !== path40.resolve(relocation.to)) refuse(plan5, "not-contained", bound2, `the member path "${plan5.request.path ?? ""}" does not resolve strictly within ${label4(bound2)} to ${relocation.to}`);
+  else if (occupied(relocation.to)) refuse(plan5, "relocation-target-exists", bound2, `the external "${alias}" cannot be adopted at ${relocation.to}: it already exists and is not an empty directory`);
+  const from = relocation.from ?? (external.source?.hosted !== void 0 ? getHostedLookup()?.(external.source.hosted) ?? void 0 : void 0);
+  if (plan5.refusals.length === 0 && !from) refuse(plan5, "not-a-project", bound2, `the hosted record "${external.source?.hosted}" is unknown or outside this request's reach \u2014 there is no root to adopt from`);
+  if (plan5.refusals.length > 0) return plan5;
+  return adoptEdits(plan5, family, bound2, alias, external, from, relocation.to);
+}
+function adoptEdits(plan5, family, bound2, alias, external, dir, at = dir) {
   const boundDir = familyNode(family, bound2).directory;
   const adoptee = configAt3(dir);
   if (!adoptee && !hasSystemAt(dir)) {
@@ -35661,22 +35816,28 @@ function adoptEdits(plan5, family, bound2, alias, external, dir) {
   edit(plan5, bound2, "pin", `pin ${alias} removed (the family supplies it now)`, { root: boundDir, call: "unpin", args: [alias] });
   edit(plan5, bound2, "external", `externals: ${alias} removed`, { root: boundDir, call: "removeExternal", args: [alias] });
   const declaration2 = {
-    path: posix3(path40.relative(boundDir, dir)),
+    path: posix3(path40.relative(boundDir, at)),
     ...external.description !== void 0 ? { description: external.description } : {},
     ...external.use && external.use.length > 0 ? { use: external.use } : {}
   };
   edit(plan5, bound2, "member", `members: ${alias} \u2192 ${declaration2.path}`, { root: boundDir, call: "declareMember", args: [alias, declaration2] });
+  const namesAdoptee = (from, e) => e.source?.path !== void 0 && path40.resolve(from, e.source.path) === path40.resolve(dir) || plan5.request.relocation !== void 0 && id !== void 0 && e.source?.hosted === id;
+  const sourceText = (e) => e.source?.hosted !== void 0 ? `source.hosted ${e.source.hosted}` : `source.path ${e.source?.path}`;
   for (const n of family.nodes) {
     for (const [a, e] of Object.entries(configAt3(n.directory)?.externals ?? {})) {
       if (n.namespace === bound2 && a === alias) continue;
-      if (!e.source?.path || path40.resolve(n.directory, e.source.path) !== path40.resolve(dir)) continue;
-      edit(plan5, n.namespace, "external", `externals: ${a} found through the family (its source.path ${e.source.path} removed)`, { root: n.directory, call: "repointExternal", args: [a, e.project ?? null, null] });
-      plan5.notes.push(`${label4(n.namespace)}'s external "${a}" named the adoptee by path; adopt removes it \u2014 detach-then-adopt is exact only when detach wrote that path`);
+      if (!namesAdoptee(n.directory, e)) continue;
+      edit(plan5, n.namespace, "external", `externals: ${a} found through the family (its ${sourceText(e)} removed)`, { root: n.directory, call: "repointExternal", args: [a, e.project ?? null, null] });
+      plan5.notes.push(`${label4(n.namespace)}'s external "${a}" named the adoptee by ${e.source?.hosted !== void 0 ? "hosted record id" : "path"}; adopt removes it \u2014 detach-then-adopt is exact only when detach wrote that source`);
     }
   }
+  const namesFamily = (e) => e.source?.path !== void 0 && nodeAt(family, path40.resolve(dir, e.source.path)) !== void 0 || plan5.request.relocation !== void 0 && e.source?.hosted !== void 0 && family.nodes.some((n) => n.id === e.source.hosted);
   for (const [a, e] of Object.entries(adoptee?.externals ?? {})) {
-    if (!e.source?.path || !nodeAt(family, path40.resolve(dir, e.source.path))) continue;
-    edit(plan5, key, "external", `externals: ${a} found through the family (its source.path ${e.source.path} removed)`, { root: dir, call: "repointExternal", args: [a, e.project ?? null, null] });
+    if (!namesFamily(e)) continue;
+    edit(plan5, key, "external", `externals: ${a} found through the family (its ${sourceText(e)} removed)`, { root: dir, call: "repointExternal", args: [a, e.project ?? null, null] });
+  }
+  if (plan5.request.relocation) {
+    edit(plan5, key, "move", `${dir} moved to ${at} (it joins the family's tree), its own members with it`, { root: dir, call: "move", args: [at] });
   }
   return plan5;
 }
@@ -35688,11 +35849,13 @@ function write3(plan5, rehearsal) {
       break;
     case "detach":
       for (const e of planned.filter((x) => x.write.call === "updateSpecGated")) writeOne(rehearsal, e.write);
-      for (const e of planned.filter((x) => x.write.call !== "pinExternals" && x.write.call !== "updateSpecGated")) writeOne(rehearsal, e.write);
+      for (const e of planned.filter((x) => !["pinExternals", "updateSpecGated", "move"].includes(x.write.call))) writeOne(rehearsal, e.write);
+      for (const e of planned.filter((x) => x.write.call === "move")) writeOne(rehearsal, e.write);
       for (const e of planned.filter((x) => x.write.call === "pinExternals")) writeOne(rehearsal, e.write);
       break;
     case "adopt":
-      for (const e of planned) writeOne(rehearsal, e.write);
+      for (const e of planned.filter((x) => x.write.call !== "move")) writeOne(rehearsal, e.write);
+      for (const e of planned.filter((x) => x.write.call === "move")) writeOne(rehearsal, e.write);
       break;
     default:
       throw new Error(`membership_migration writes attach, detach and adopt, not "${plan5.request.verb}"`);
@@ -35700,6 +35863,7 @@ function write3(plan5, rehearsal) {
 }
 function writeOne(rehearsal, w) {
   const args = w.args;
+  if (w.call === "move") return move(rehearsalRoot(rehearsal, w.root), rehearsalRoot(rehearsal, String(args[0])));
   runWithProjectRoot(rehearsalRoot(rehearsal, w.root), () => {
     switch (w.call) {
       case "setId":
@@ -36124,11 +36288,11 @@ function planExternalize(family, bound2, request) {
   const donePath = typeof done === "string" ? done : done?.path;
   if (donePath !== void 0 && request.path !== void 0 && path42.resolve(node.directory, donePath) === path42.resolve(node.directory, request.path)) return plan5;
   const dir = resolve30(node.directory, request.path ?? "");
-  const occupied = dir !== null && holdsProject(dir);
+  const occupied2 = dir !== null && holdsProject(dir);
   const sub = id.includes("::") ? null : loadSpec("subsystem", subKey);
   if (!sub || sub.projectPath || (family.owners.get(subKey) ?? "") !== bound2) refuse3(plan5, "externalize-refused", bound2, `${label6(bound2)} has no subsystem "${id}" to externalize (it is missing, or already a member)`);
   if (dir === null) refuse3(plan5, "not-contained", bound2, `the path "${request.path ?? ""}" does not resolve strictly within ${label6(bound2)}`);
-  else if (family.nodes.some((n) => path42.resolve(n.directory) === dir) || occupied) {
+  else if (family.nodes.some((n) => path42.resolve(n.directory) === dir) || occupied2) {
     refuse3(plan5, "not-contained", bound2, `${dir} already holds a project`);
   }
   const config = configAt5(node.directory);
@@ -36243,11 +36407,11 @@ function writeOne3(rehearsal, w) {
 
 // src/migrations/transaction.ts
 var crypto6 = __toESM(require("crypto"));
-var fs23 = __toESM(require("fs"));
+var fs24 = __toESM(require("fs"));
 var path43 = __toESM(require("path"));
 
 // src/migrations/transaction-files.ts
-var fs22 = __toESM(require("fs"));
+var fs23 = __toESM(require("fs"));
 var os6 = __toESM(require("os"));
 var nodePath2 = __toESM(require("path"));
 var yaml3 = __toESM(require("js-yaml"));
@@ -36261,7 +36425,7 @@ function pause2(ms) {
 function removeTree(dir) {
   for (let attempt = 1; ; attempt++) {
     try {
-      fs22.rmSync(dir, { recursive: true, force: true });
+      fs23.rmSync(dir, { recursive: true, force: true });
       return;
     } catch (e) {
       const code = e.code;
@@ -36271,20 +36435,20 @@ function removeTree(dir) {
   }
 }
 function writeDurably(file, bytes) {
-  fs22.mkdirSync(nodePath2.dirname(file), { recursive: true });
+  fs23.mkdirSync(nodePath2.dirname(file), { recursive: true });
   const tmp = `${file}.tmp`;
   try {
-    const fd = fs22.openSync(tmp, "w");
+    const fd = fs23.openSync(tmp, "w");
     try {
-      fs22.writeSync(fd, typeof bytes === "string" ? Buffer.from(bytes, "utf8") : bytes);
-      fs22.fsyncSync(fd);
+      fs23.writeSync(fd, typeof bytes === "string" ? Buffer.from(bytes, "utf8") : bytes);
+      fs23.fsyncSync(fd);
     } finally {
-      fs22.closeSync(fd);
+      fs23.closeSync(fd);
     }
-    fs22.renameSync(tmp, file);
+    fs23.renameSync(tmp, file);
   } catch (e) {
     try {
-      fs22.unlinkSync(tmp);
+      fs23.unlinkSync(tmp);
     } catch {
     }
     throw e;
@@ -36294,18 +36458,18 @@ function writeDurably(file, bytes) {
 function syncDirectory(dir) {
   if (process.platform === "win32") return;
   try {
-    const fd = fs22.openSync(dir, "r");
+    const fd = fs23.openSync(dir, "r");
     try {
-      fs22.fsyncSync(fd);
+      fs23.fsyncSync(fd);
     } finally {
-      fs22.closeSync(fd);
+      fs23.closeSync(fd);
     }
   } catch {
   }
 }
 function openRehearsal(id) {
   const dir = rehearsalDir(id);
-  fs22.mkdirSync(dir);
+  fs23.mkdirSync(dir);
   return dir;
 }
 function dropRehearsal(id) {
@@ -36316,14 +36480,14 @@ function dropRehearsal(id) {
 }
 function saveJournal(journal) {
   const ignore = nodePath2.join(transactionsDir(journal.owner), ".gitignore");
-  if (!fs22.existsSync(ignore)) writeDurably(ignore, "*\n");
+  if (!fs23.existsSync(ignore)) writeDurably(ignore, "*\n");
   writeDurably(nodePath2.join(transactionDir(journal.owner, journal.id), "journal.yaml"), yaml3.dump(journal, { noRefs: true, lineWidth: 200 }));
 }
 function readJournal(owner, id) {
   const file = nodePath2.join(transactionDir(owner, id), "journal.yaml");
   let text3;
   try {
-    text3 = fs22.readFileSync(file, "utf8");
+    text3 = fs23.readFileSync(file, "utf8");
   } catch (e) {
     if (e.code === "ENOENT") return null;
     throw e;
@@ -36338,7 +36502,7 @@ function listJournals(owner) {
   const dir = transactionsDir(owner);
   let names;
   try {
-    names = fs22.readdirSync(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
+    names = fs23.readdirSync(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
   } catch {
     return [];
   }
@@ -36360,7 +36524,7 @@ function putFile(owner, id, area, path46, bytes) {
 }
 function readFile(owner, id, area, path46) {
   try {
-    return fs22.readFileSync(locate(owner, id, area, path46));
+    return fs23.readFileSync(locate(owner, id, area, path46));
   } catch (e) {
     if (e.code === "ENOENT") return null;
     throw e;
@@ -36374,7 +36538,7 @@ function close(owner, id) {
   const dir = transactionsDir(owner);
   let left;
   try {
-    left = fs22.readdirSync(dir);
+    left = fs23.readdirSync(dir);
   } catch {
     return;
   }
@@ -36382,7 +36546,11 @@ function close(owner, id) {
   removeTree(dir);
   const wai = nodePath2.dirname(dir);
   try {
-    if (fs22.readdirSync(wai).length === 0) fs22.rmdirSync(wai);
+    if (fs23.readdirSync(wai).length === 0) fs23.rmdirSync(wai);
+  } catch {
+  }
+  try {
+    if (fs23.readdirSync(owner).length === 0) fs23.rmdirSync(owner);
   } catch {
   }
 }
@@ -36469,15 +36637,16 @@ function rehearse(scope) {
   const directory = transactionRepository.openRehearsal(id);
   const familyRoot = path43.resolve(scope.familyRoot);
   const projects = [...new Set(scope.projects.map((p) => path43.resolve(p)))];
+  const whole = scope.whole ? [...new Set(scope.whole.map((p) => path43.resolve(p)))] : void 0;
   let baseDigests;
   try {
-    baseDigests = mirror({ familyRoot, projects }, directory);
+    baseDigests = mirror({ familyRoot, projects, ...scope.areas ? { areas: scope.areas } : {}, ...whole ? { whole } : {} }, directory);
   } catch (e) {
     transactionRepository.dropRehearsal(id);
     throw e;
   }
   const roots = new Map(projects.map((p) => [p, path43.join(directory, path43.relative(familyRoot, p))]));
-  return { id, directory, familyRoot, roots, baseDigests };
+  return { id, directory, familyRoot, roots, baseDigests, ...scope.areas ? { areas: [...scope.areas] } : {}, ...whole ? { whole } : {} };
 }
 function diff(rehearsal) {
   return compare4(rehearsal);
@@ -36564,7 +36733,7 @@ function missingDirs(owner, entries) {
   for (const entry of entries.filter((e) => e.action === "create")) {
     const missing = [];
     let at = path43.dirname(liveOf(owner, entry.path));
-    while (!fs23.existsSync(at) && at !== path43.dirname(at)) {
+    while (!fs24.existsSync(at) && at !== path43.dirname(at)) {
       missing.unshift(at);
       at = path43.dirname(at);
     }
@@ -36598,7 +36767,7 @@ function stageBytes(rehearsal, journal, entry) {
 function checkVolume(journal, entry, target) {
   const staged = transactionRepository.locate(journal.owner, journal.id, "staged", entry.path);
   let nearest = path43.dirname(target);
-  while (!fs23.existsSync(nearest) && nearest !== path43.dirname(nearest)) nearest = path43.dirname(nearest);
+  while (!fs24.existsSync(nearest) && nearest !== path43.dirname(nearest)) nearest = path43.dirname(nearest);
   if (!sameVolume(staged, nearest)) {
     throw new StagingError(`cross-volume: ${target} lies on another volume than its staged copy; a rename across volumes is not atomic`);
   }
@@ -36682,7 +36851,7 @@ function recover(root, fix) {
 var coordinatorRoot = (journal) => path43.resolve(journal.owner, journal.coordinator);
 function journalAt(owner, id) {
   try {
-    const journal = fs23.existsSync(owner) ? transactionRepository.readJournal(owner, id) : null;
+    const journal = fs24.existsSync(owner) ? transactionRepository.readJournal(owner, id) : null;
     return journal ? { ...journal, owner } : null;
   } catch {
     return null;
@@ -36714,7 +36883,7 @@ function resolveOne(journal) {
     for (const owner of [...owners.filter((o) => o !== coordinator.owner), coordinator.owner]) transactionRepository.close(owner, journal.id);
     return { ...base, owners, phase, action: "cleaned", detail: "it had committed; its transaction directories were removed" };
   }
-  const absent = owners.filter((o) => !fs23.existsSync(o));
+  const absent = phase === "staging" ? [] : owners.filter((o) => !fs24.existsSync(o));
   if (absent.length > 0) {
     return { ...base, owners, phase, action: "refused", detail: `owner(s) out of reach: ${absent.join(", ")}` };
   }
@@ -36745,14 +36914,15 @@ function plan3(request) {
   const { top, whole } = climb3(bound2);
   const family = runWithProjectRoot(top, () => graph());
   const boundKey = family.nodes.find((n) => path44.resolve(n.directory) === path44.resolve(bound2))?.namespace ?? "";
-  const pending3 = unfinished(top, bound2);
+  const pending3 = unfinished(top, bound2, request.relocation?.coordinator);
   if (pending3.length > 0) return refusedForPending(request, top, whole, pending3);
   const planned = request.verb === "chaining" ? route(request, family, boundKey) : runWithProjectRoot(top, () => route(request, family, boundKey));
   return rehearse2(request.verb === "chaining" ? planned : { ...planned, familyRoot: top, whole });
 }
-function unfinished(top, bound2) {
+function unfinished(top, bound2, coordinator) {
   const found = recover(top, false);
   if (path44.resolve(bound2) !== path44.resolve(top)) found.push(...recover(bound2, false));
+  if (coordinator !== void 0) found.push(...recover(coordinator, false));
   return found.filter((t, i) => found.findIndex((u) => u.id === t.id) === i);
 }
 function refusedForPending(request, top, whole, pending3) {
@@ -36830,17 +37000,62 @@ function rehearse2(plan5) {
   if (blocked(plan5) || plan5.request.rehearse === false) return plan5;
   const family = runWithProjectRoot(plan5.familyRoot, () => graph());
   const projects = [...family.nodes.map((n) => n.directory), ...broughtIn(plan5, family), ...pathProducers(plan5, family)];
-  const rehearsal = rehearse({ familyRoot: plan5.familyRoot, projects });
+  const rehearsal = rehearse(scopeOf(plan5, projects));
   try {
-    onCopy(rehearsal, () => writeVerb(plan5, rehearsal));
+    onCopy(rehearsal, () => relocatedLookup(plan5, rehearsal, () => writeVerb(plan5, rehearsal)));
   } catch (e) {
     discard(rehearsal);
     const detail = e instanceof Error ? e.message : String(e);
     return { ...plan5, refusals: [...plan5.refusals, { code: `${plan5.request.verb}-refused`, project: "", detail }] };
   }
   const changes = diff(rehearsal);
+  const outside = unwritableOwners(changes);
+  if (outside.length > 0) {
+    discard(rehearsal);
+    return { ...plan5, refusals: [...plan5.refusals, ...outside.map((o) => ({ code: "family-partial", project: o, detail: `the plan must write ${o}, which this request may not write` }))] };
+  }
   return { ...plan5, rehearsal, changes, relock: relockOf(plan5, changes) };
 }
+function movedOf(plan5) {
+  const relocation = plan5.request.relocation;
+  const move2 = plan5.edits.find((e) => e.write?.call === "move");
+  if (!relocation || !move2?.write) return null;
+  return { from: path44.resolve(move2.write.root), to: path44.resolve(relocation.to) };
+}
+function scopeOf(plan5, projects) {
+  const relocation = plan5.request.relocation;
+  const moved = movedOf(plan5);
+  if (!relocation || !moved) return { familyRoot: plan5.familyRoot, projects };
+  return {
+    familyRoot: relocation.coordinator,
+    projects: [relocation.coordinator, ...projects],
+    areas: [".wai", ...relocation.areas],
+    whole: [moved.from, moved.to]
+  };
+}
+function relocatedLookup(plan5, rehearsal, run3) {
+  const moved = movedOf(plan5);
+  const live = getHostedLookup();
+  if (!moved || !live) return run3();
+  const copied = [...rehearsal.roots.keys(), ...rehearsal.whole ?? []].filter((r) => r !== path44.resolve(rehearsal.familyRoot));
+  const inside = (root, dir) => {
+    const rel2 = path44.relative(root, dir);
+    return rel2 === "" || !rel2.startsWith("..") && !path44.isAbsolute(rel2);
+  };
+  return runWithHostedLookup((id) => {
+    const root = live(id);
+    if (root === null) return null;
+    const at = path44.resolve(root);
+    if (inside(moved.from, at)) return path44.join(rehearsalRoot(rehearsal, moved.to), path44.relative(moved.from, at));
+    return copied.some((r) => inside(r, at)) ? rehearsalRoot(rehearsal, at) : at;
+  }, run3);
+}
+function unwritableOwners(changes) {
+  const denied = getRequestParentReach()?.unwritableRoots ?? [];
+  if (denied.length === 0) return [];
+  const owners = [...new Set(changes.map((c) => path44.resolve(c.project)))];
+  return owners.filter((o) => denied.includes(o));
+}
 function pathProducers(plan5, family) {
   const inside = (dir) => {
     const rel2 = path44.relative(plan5.familyRoot, dir);
@@ -36883,7 +37098,9 @@ function onCopy(rehearsal, run3) {
 function relockOf(plan5, changes) {
   const ended = new Set(changes.filter((c) => c.action === "delete" && c.path === ".wai/project.yaml").map((c) => path44.resolve(c.project)));
   const owners = [...new Set(changes.map((c) => path44.resolve(c.project)))].filter((o) => !ended.has(o));
-  if (plan5.request.verb !== "rename") return owners.filter((owner) => approvalRecord(owner) !== null);
+  const moved = movedOf(plan5);
+  const relocated = moved !== null && approvalRecord(moved.from) !== null ? [moved.to] : [];
+  if (plan5.request.verb !== "rename") return [...owners.filter((owner) => approvalRecord(owner) !== null), ...relocated];
   const renamed = plan5.edits.find((e) => e.write?.call === "renameId")?.write?.root;
   const first = renamed !== void 0 ? path44.resolve(renamed) : void 0;
   return [...owners.filter((o) => o === first), ...owners.filter((o) => o !== first)];
@@ -38060,9 +38277,10 @@ ${renderChangeReport(report2)}`,
     server,
     "sdd_adopt_member",
     {
-      description: "Make the bound project's external found by a path inside it a member \u2014 sdd_detach_member's inverse. All-or-nothing; dryRun answers the plan and writes nothing. Never locks.",
+      description: "Make the bound project's external a member \u2014 sdd_detach_member's inverse. Locally the external is found by a path inside the bound project and adopted where it is; on a hosted instance it names a project by source.hosted and `path` says where to adopt it (the hosting server relocates it there). All-or-nothing; dryRun answers the plan and writes nothing. Never locks.",
       inputSchema: {
         alias: import_zod11.z.string().describe("The external's alias"),
+        path: import_zod11.z.string().optional().describe("Hosted: the member path to adopt a source.hosted external at, relative to the bound project; a source.path external is adopted where it is"),
         dryRun: dryRunArg
       }
     },
@@ -39127,6 +39345,7 @@ function loadProjectConfig3() {
   generateDiagramSet,
   generateSequenceDiagram,
   getExporter,
+  getHostedLookup,
   getLoaderIssues,
   getProjectRoot,
   getProjectRootOverride,
@@ -39258,6 +39477,7 @@ function loadProjectConfig3() {
   resolveVariantGuidance,
   retireSpecialists,
   rewriteReferences,
+  runWithHostedLookup,
   runWithProjectBinding,
   runWithProjectRoot,
   sameContract,