@wairon/cli 5.1.1-dev.87 → 5.1.1-dev.89

package/dist/index.js

@@ -3060,7 +3060,7 @@ var require_dist = __commonJS({
     function slug(name) {
       return name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
     }
-    var fs24 = __toESM2(require("fs"));
+    var fs25 = __toESM2(require("fs"));
     var path46 = __toESM2(require("path"));
     var import_fflate = require_node();
     var SKIP_DIRS = /* @__PURE__ */ new Set(["node_modules", ".git", ".hg", ".svn"]);
@@ -3100,8 +3100,8 @@ var require_dist = __commonJS({
     function writeTree(destDir, files) {
       for (const file of files) {
         const absolute = path46.join(destDir, file.path);
-        fs24.mkdirSync(path46.dirname(absolute), { recursive: true });
-        fs24.writeFileSync(absolute, file.contents);
+        fs25.mkdirSync(path46.dirname(absolute), { recursive: true });
+        fs25.writeFileSync(absolute, file.contents);
       }
     }
     function classifyKind(name, symlinks) {
@@ -3110,14 +3110,14 @@ var require_dist = __commonJS({
       return "file";
     }
     function walkPackDir(root, current2, out) {
-      for (const entry of fs24.readdirSync(current2, { withFileTypes: true })) {
+      for (const entry of fs25.readdirSync(current2, { withFileTypes: true })) {
         if (entry.isDirectory()) {
           if (SKIP_DIRS.has(entry.name)) continue;
           walkPackDir(root, path46.join(current2, entry.name), out);
         } else if (entry.isFile()) {
           const absolute = path46.join(current2, entry.name);
           const relative22 = path46.relative(root, absolute).split(path46.sep).join("/");
-          out.push({ path: relative22, contents: fs24.readFileSync(absolute) });
+          out.push({ path: relative22, contents: fs25.readFileSync(absolute) });
         }
       }
     }
@@ -3503,6 +3503,7 @@ __export(src_exports, {
   SystemPublicInterfaceSchema: () => SystemPublicInterfaceSchema,
   SystemSpecSchema: () => SystemSpecSchema,
   TargetConfigSchema: () => TargetConfigSchema,
+  TechnologySchema: () => TechnologySchema,
   TemplateNotFoundError: () => TemplateNotFoundError,
   TemplateSchema: () => TemplateSchema,
   TopologyConfigSchema: () => TopologyConfigSchema,
@@ -3530,6 +3531,7 @@ __export(src_exports, {
   assertProjectInitialized: () => assertProjectInitialized,
   backendCommand: () => backendCommand,
   backfillChainedSubprojectConfigs: () => backfillChainedSubprojectConfigs,
+  backupBeside: () => backupBeside,
   buildCanvasDataModel: () => buildCanvasDataModel,
   buildProjectGraph: () => buildProjectGraph,
   buildRuleContext: () => buildRuleContext,
@@ -3604,6 +3606,7 @@ __export(src_exports, {
   generateDiagramSet: () => generateDiagramSet,
   generateSequenceDiagram: () => generateSequenceDiagram,
   getExporter: () => getExporter,
+  getHostedLookup: () => getHostedLookup,
   getLoaderIssues: () => getLoaderIssues,
   getProjectRoot: () => getProjectRoot,
   getProjectRootOverride: () => getProjectRootOverride,
@@ -3628,6 +3631,7 @@ __export(src_exports, {
   internalizeMember: () => internalizeMember,
   isDraftSubsystem: () => isDraftSubsystem,
   isLogic: () => isLogic,
+  isOutsideRoot: () => isOutsideRoot,
   isOwnComponentEntry: () => isOwnComponentEntry,
   isPattern: () => isPattern,
   isProjectInitialized: () => isProjectInitialized,
@@ -3735,6 +3739,7 @@ __export(src_exports, {
   resolveVariantGuidance: () => resolveVariantGuidance,
   retireSpecialists: () => retireSpecialists,
   rewriteReferences: () => rewriteReferences2,
+  runWithHostedLookup: () => runWithHostedLookup,
   runWithProjectBinding: () => runWithProjectBinding,
   runWithProjectRoot: () => runWithProjectRoot,
   sameContract: () => sameContract,
@@ -3756,6 +3761,8 @@ __export(src_exports, {
   stepFieldsFor: () => stepFieldsFor,
   stepGraph: () => stepGraph,
   syncContextFiles: () => syncContextFiles,
+  technologyName: () => technologyName,
+  technologyTokens: () => technologyTokens,
   toMarkdown: () => toMarkdown,
   typeBindingOf: () => typeBindingOf,
   typeGenericParameters: () => typeGenericParameters,
@@ -3812,6 +3819,15 @@ function readFileOrNull(filePath) {
 function pathExists(targetPath) {
   return fs.existsSync(targetPath);
 }
+function isOutsideRoot(root, target) {
+  const rel2 = path.relative(path.resolve(root), path.resolve(target));
+  return rel2 === ".." || rel2.startsWith(`..${path.sep}`) || path.isAbsolute(rel2);
+}
+function backupBeside(file, at = /* @__PURE__ */ new Date()) {
+  const backup = `${file}.wairon-backup-${at.toISOString().replace(/[:.]/g, "-")}`;
+  fs.copyFileSync(file, backup);
+  return backup;
+}
 function listFiles(dirPath, ext) {
   if (!fs.existsSync(dirPath)) return [];
   return fs.readdirSync(dirPath).filter((f) => f.endsWith(ext)).map((f) => path.join(dirPath, f));
@@ -3844,18 +3860,33 @@ function runWithProjectBinding(dir, reach2, fn) {
       root: path.resolve(dir),
       topRoot: path.resolve(reach2.topRoot),
       parentReach: reach2.parentReach,
-      ...reach2.narrowed ? { narrowed: true } : {}
+      ...reach2.narrowed ? { narrowed: true } : {},
+      ...reach2.unwritableRoots ? { unwritableRoots: reach2.unwritableRoots.map((r) => path.resolve(r)) } : {},
+      ...reach2.hostedLookup ? { hostedLookup: reach2.hostedLookup } : {}
     },
     fn
   );
 }
+function getHostedLookup() {
+  return requestRootStore.getStore()?.hostedLookup ?? null;
+}
+function runWithHostedLookup(lookup2, fn) {
+  const scope = requestRootStore.getStore();
+  if (!scope?.hostedLookup) return fn();
+  return requestRootStore.run({ ...scope, hostedLookup: lookup2 }, fn);
+}
 function getRequestProjectRoot() {
   return requestRootStore.getStore()?.root ?? null;
 }
 function getRequestParentReach() {
   const scope = requestRootStore.getStore();
   if (!scope || scope.parentReach === void 0) return null;
-  return { topRoot: scope.topRoot, parentReach: scope.parentReach, ...scope.narrowed ? { narrowed: true } : {} };
+  return {
+    topRoot: scope.topRoot,
+    parentReach: scope.parentReach,
+    ...scope.narrowed ? { narrowed: true } : {},
+    ...scope.unwritableRoots ? { unwritableRoots: scope.unwritableRoots } : {}
+  };
 }
 function setProjectRoot(dir) {
   projectRootOverride = dir === null ? null : path.resolve(dir);
@@ -4571,7 +4602,8 @@ var ProjectProfileSelectionSchema = import_zod3.z.object({
   selectedAt: import_zod3.z.string()
 });
 var ExternalSourceSchema = import_zod3.z.object({
-  path: import_zod3.z.string()
+  path: import_zod3.z.string().optional(),
+  hosted: import_zod3.z.string().optional()
 });
 var ExternalDeclarationSchema = import_zod3.z.object({
   /** The producer's project id; defaults to the alias. Plain string: a malformed id is REPORTED, never unreadable. */
@@ -4942,6 +4974,12 @@ function projectIdentity(config, lockedProjectId) {
   };
 }
 var EXTERNAL_ALIAS_RE = /^[a-z0-9_-]+$/;
+function sourceProblem(source) {
+  if (source === void 0) return void 0;
+  const named2 = (source.path !== void 0 ? 1 : 0) + (source.hosted !== void 0 ? 1 : 0);
+  if (named2 === 1) return void 0;
+  return named2 === 0 ? "its `source` names neither `path` nor `hosted` \u2014 give exactly one" : "its `source` names both `path` and `hosted` \u2014 give exactly one";
+}
 var USE_ENTRY_RE = /^(\*|[a-z0-9_-]+)$/;
 function readUse(alias, use) {
   const list = Array.isArray(use) ? use.map((u) => String(u)) : [];
@@ -4956,11 +4994,12 @@ function declaredExternals(config) {
   return Object.entries(config.externals ?? {}).map(([alias, declaration2]) => {
     const project = declaration2?.project ?? alias;
     const imports = readUse(alias, declaration2?.use);
-    const problem = !EXTERNAL_ALIAS_RE.test(alias) ? PROJECT_ID_RE.test(alias) ? `the alias "${alias}" is not a reference name ([a-z0-9-_]+) \u2014 a dotted producer id needs an explicit alias, e.g. \`${alias.replace(/\./g, "-")}: { project: ${alias} }\`` : `the alias "${alias}" breaks [a-z0-9-_]+` : config.members?.[alias] !== void 0 ? `the alias "${alias}" is also declared under \`members\` \u2014 one alias names one project` : !PROJECT_ID_RE.test(project) ? `the producer id "${project}" breaks the project-id grammar` : imports.problem;
+    const problem = !EXTERNAL_ALIAS_RE.test(alias) ? PROJECT_ID_RE.test(alias) ? `the alias "${alias}" is not a reference name ([a-z0-9-_]+) \u2014 a dotted producer id needs an explicit alias, e.g. \`${alias.replace(/\./g, "-")}: { project: ${alias} }\`` : `the alias "${alias}" breaks [a-z0-9-_]+` : config.members?.[alias] !== void 0 ? `the alias "${alias}" is also declared under \`members\` \u2014 one alias names one project` : !PROJECT_ID_RE.test(project) ? `the producer id "${project}" breaks the project-id grammar` : sourceProblem(declaration2?.source) ?? imports.problem;
     return {
       alias,
       project,
       ...declaration2?.source?.path !== void 0 ? { sourcePath: declaration2.source.path } : {},
+      ...declaration2?.source?.hosted !== void 0 ? { sourceHosted: declaration2.source.hosted } : {},
       ...problem ? { problem } : {},
       use: imports.use
     };
@@ -7003,6 +7042,19 @@ function parseDeclaredCall(ref) {
   if (at <= 0 || at === ref.length - 1) return null;
   return { compId: ref.slice(0, at), methodName: ref.slice(at + 1) };
 }
+var TechnologySchema = import_zod8.z.union([
+  import_zod8.z.string().min(1),
+  import_zod8.z.object({
+    name: import_zod8.z.string().min(1),
+    matches: import_zod8.z.array(import_zod8.z.string().min(1)).min(1)
+  }).strict()
+]);
+function technologyName(tech) {
+  return typeof tech === "string" ? tech : tech.name;
+}
+function technologyTokens(tech) {
+  return typeof tech === "string" ? [tech] : [...tech.matches];
+}
 var ImplementationSpecSchema = import_zod8.z.object({
   id: SpecIdSchema,
   name: import_zod8.z.string(),
@@ -7027,9 +7079,10 @@ var ImplementationSpecSchema = import_zod8.z.object({
    * component's ownership tree the technology's home: references anywhere
    * outside it are flagged (TECH_LEAKAGE), contract identifiers must stay
    * intent-language (VENDOR_NAME_IN_CONTRACT), and only data-layer
-   * stereotypes should bind tech directly (TECH_ON_LOGIC_COMPONENT).
+   * stereotypes should bind tech directly (TECH_ON_LOGIC_COMPONENT). An entry
+   * is a bare name or `{ name, matches }` (see TechnologySchema).
    */
-  technologies: import_zod8.z.array(import_zod8.z.string()).optional(),
+  technologies: import_zod8.z.array(TechnologySchema).optional(),
   /**
    * The parameter names THIS realization takes BEFORE the ones its contract
    * declares — a config object, a data root, the transport handles a portal is
@@ -7556,10 +7609,10 @@ function stepGraph(method) {
     const s = byNum.get(n);
     if (s.type !== "parallel" || s.endStep === void 0 || !s.branches?.length) continue;
     const entries = s.branches.map((b) => b.step).sort((a, b) => a - b);
-    const join27 = fallNext(s.endStep);
+    const join28 = fallNext(s.endStep);
     for (let i = 0; i < entries.length; i++) {
       const armEnd = i + 1 < entries.length ? prevOf(entries[i + 1]) : s.endStep;
-      if (armEnd !== void 0 && armEnd >= entries[i]) armEndJoin.set(armEnd, join27);
+      if (armEnd !== void 0 && armEnd >= entries[i]) armEndJoin.set(armEnd, join28);
     }
   }
   const successorsOf = (n) => {
@@ -13418,10 +13471,11 @@ function isWithinDir(dir, target) {
   const rel2 = path10.relative(path10.resolve(dir), path10.resolve(target));
   return rel2 === "" || !rel2.startsWith("..") && !path10.isAbsolute(rel2);
 }
-function producerUnreadable(directory) {
+function producerUnreadable(external) {
+  const directory = external.directory;
   if (!directory) return "the producer has no root directory";
   const reach2 = getRequestParentReach();
-  if (reach2) {
+  if (reach2 && external.sourceKind !== "hosted") {
     const bound2 = getProjectRoot();
     const ceiling = reach2.parentReach ? reach2.topRoot ?? bound2 : bound2;
     if (!isWithinDir(ceiling, directory)) return OUT_OF_REACH;
@@ -13450,7 +13504,7 @@ function usedDigests(usage, snapshot) {
 function pinBinding(binding, lock) {
   const { external } = binding;
   const unexported = binding.usage?.unexported ?? [];
-  const unreadable = producerUnreadable(external.directory);
+  const unreadable = producerUnreadable(external);
   let snapshot;
   try {
     if (unreadable) throw new Error(unreadable);
@@ -13553,7 +13607,7 @@ function externalStatus(binding, lock) {
   const entry = lock?.externals[external.alias];
   const pinned = entry !== void 0 && externalsRepository.readSnapshot(external.alias) !== null;
   const base = { alias: external.alias, project: external.project, sourceKind: external.sourceKind, pinned };
-  const unreadable = external.sourceKind === "unresolved" ? `the external does not resolve: ${external.problem}` : producerUnreadable(external.directory);
+  const unreadable = external.sourceKind === "unresolved" ? hostedOnly(external) ? external.problem : `the external does not resolve: ${external.problem}` : producerUnreadable(external);
   let live = null;
   let reason = unreadable;
   if (!reason) {
@@ -13564,7 +13618,7 @@ function externalStatus(binding, lock) {
     }
   }
   if (!live) {
-    const outOfReach = reason === OUT_OF_REACH || !binding.reachable && external.sourceKind !== "family";
+    const outOfReach = reason === OUT_OF_REACH || hostedOutOfReach(external) || !binding.reachable && external.sourceKind !== "family";
     return {
       ...base,
       reachable: false,
@@ -13575,7 +13629,7 @@ function externalStatus(binding, lock) {
     };
   }
   const drifted = entry !== void 0 ? contentDigest(live) !== entry.digest : void 0;
-  if (external.sourceKind === "path") {
+  if (external.sourceKind === "path" || external.sourceKind === "hosted") {
     return { ...base, reachable: true, stale: false, ...drifted !== void 0 ? { drifted } : {}, uses: [{ state: "unavailable", code: CHECK_UNAVAILABLE, detail: OUTSIDE_FAMILY }], detail: OUTSIDE_FAMILY };
   }
   const uses = compareUses(entry, binding.usage, live);
@@ -13587,6 +13641,12 @@ function externalStatus(binding, lock) {
     uses
   };
 }
+function hostedOnly(external) {
+  return external.hosted !== void 0 && external.sourceKind === "unresolved" && getHostedLookup() === null;
+}
+function hostedOutOfReach(external) {
+  return external.hosted !== void 0 && external.sourceKind === "unresolved" && getHostedLookup() !== null;
+}
 function getExternalsStatus() {
   const bindings = resolveDeclared();
   const lock = externalsRepository.readLock();
@@ -14250,7 +14310,7 @@ function defaultTargetConfig(type) {
     enabled: true
   };
 }
-var WAIRON_VERSION = "5.1.1-dev.87";
+var WAIRON_VERSION = "5.1.1-dev.89";
 var GITHUB_REPO = "SYW-Apps/Waffle-AIron";
 var ARCHITECT_AGENT_ID = "agent-architect";
 var ARCHITECT_TEMPLATE_ID = "architect";
@@ -15047,13 +15107,13 @@ function buildCodeIndex(model) {
     const to = resolveImport(scope, specifier, paths);
     return to ? republishedFrom(to) : NO_ORIGIN;
   };
-  const scopeOf = (site, from) => {
+  const scopeOf2 = (site, from) => {
     const path46 = pathKey(site.from ?? from);
     const f = facts.get(path46);
     return f?.status === "analyzed" && f.analysisGrade === "exact" ? { path: path46, facts: f } : void 0;
   };
   const originOf2 = (site, from) => {
-    const resolved = scopeOf(site, from);
+    const resolved = scopeOf2(site, from);
     if (!resolved) return NO_ORIGIN;
     const { path: scope, facts: f } = resolved;
     const landing = (specifier) => landingFrom(scope, specifier);
@@ -15075,7 +15135,7 @@ function buildCodeIndex(model) {
   const possibleOriginsOf = (site, from) => {
     const proven = originOf2(site, from);
     if (!site.field && !site.constructed && !site.via) return proven;
-    const resolved = scopeOf(site, from);
+    const resolved = scopeOf2(site, from);
     if (!resolved) return proven;
     const { path: scope, facts: f } = resolved;
     const out = new Set(proven);
@@ -21381,7 +21441,7 @@ var technologyBindingRule = {
       ctx.addIssue(
         "warning",
         "TECH_ON_LOGIC_COMPONENT",
-        `Implementation "${impl.id}" binds technology (${impl.technologies.join(", ")}) on component "${comp.id}" (${comp.componentType}). Technology belongs behind a data-layer seam \u2014 extract an Adapter (or Store/Registry/Index) behind an intent interface and let this component depend on that.`,
+        `Implementation "${impl.id}" binds technology (${impl.technologies.map(technologyName).join(", ")}) on component "${comp.id}" (${comp.componentType}). Technology belongs behind a data-layer seam \u2014 extract an Adapter (or Store/Registry/Index) behind an intent interface and let this component depend on that.`,
         impl.id,
         ctx.isImplementationDraft(impl)
       );
@@ -21406,6 +21466,16 @@ function makeMatcher(tech) {
     return false;
   };
 }
+function newHome(label7) {
+  const home = {
+    label: label7,
+    matchers: [],
+    match: (text3) => home.matchers.some((m) => m(text3)),
+    ownerComponents: /* @__PURE__ */ new Set(),
+    scope: /* @__PURE__ */ new Set()
+  };
+  return home;
+}
 function contractIdentifiers(m) {
   const parts = [m.name, m.signature, m.returns];
   for (const p of m.params ?? []) parts.push(p.name, p.type);
@@ -21415,7 +21485,7 @@ function contractIdentifiers(m) {
 var technologyRule = {
   name: "technology-boundaries",
   judges: "design",
-  description: "Technology stays behind its owning boundary: an L4 that declares `technologies` (e.g. [mysql]) makes its component's ownership tree the technology's home. References outside that tree are leakage, and L3 contract identifiers must stay intent-language \u2014 the contract is the swap seam, so the vendor name is wrong even on the owning component's own interface.",
+  description: "Technology stays behind its owning boundary: an L4 that declares `technologies` (e.g. [mysql]) makes its component's ownership tree the technology's home. References outside that tree are leakage, and L3 contract identifiers must stay intent-language \u2014 the contract is the swap seam, so the vendor name is wrong even on the owning component's own interface. A technology is matched by its name, or \u2014 when it declares `matches` because its name is also an ordinary word of the tree (a package named after the file format it reads) \u2014 by those tokens alone.",
   codes: [
     { code: "TECH_LEAKAGE", defaultSeverity: "warning", summary: "Technology referenced outside its owning boundary" },
     { code: "VENDOR_NAME_IN_CONTRACT", defaultSeverity: "warning", summary: "Technology name in L3 contract identifiers" }
@@ -21452,10 +21522,12 @@ var technologyRule = {
       const intf = ctx.interfaceMap.get(impl.contract);
       const comp = intf ? ctx.componentMap.get(intf.component) : void 0;
       if (!comp) continue;
-      for (const tech of impl.technologies) declarations.push({ comp, tech });
+      for (const tech of impl.technologies) {
+        declarations.push({ comp, name: technologyName(tech), tokens: technologyTokens(tech) });
+      }
     }
     const scopes = /* @__PURE__ */ new Map();
-    const scopeOf = (comp) => {
+    const scopeOf2 = (comp) => {
       const cached = scopes.get(comp.id);
       if (cached) return cached;
       const compSet = ownsClosure(ownershipRoot(comp.id));
@@ -21476,13 +21548,14 @@ var technologyRule = {
       return scope;
     };
     const homes = /* @__PURE__ */ new Map();
-    for (const { comp, tech } of declarations) {
-      const match2 = makeMatcher(tech);
-      if (!match2) continue;
-      const key = tech.toLowerCase().split(/[^a-z0-9]+/).filter(Boolean).join("");
-      const home = homes.get(key) ?? { label: tech, match: match2, ownerComponents: /* @__PURE__ */ new Set(), scope: /* @__PURE__ */ new Set() };
+    for (const { comp, name, tokens } of declarations) {
+      const matchers = tokens.map(makeMatcher).filter((m) => m !== null);
+      if (!matchers.length) continue;
+      const key = name.toLowerCase().split(/[^a-z0-9]+/).filter(Boolean).join("");
+      const home = homes.get(key) ?? newHome(name);
+      home.matchers.push(...matchers);
       home.ownerComponents.add(comp.id);
-      for (const id of scopeOf(comp)) home.scope.add(id);
+      for (const id of scopeOf2(comp)) home.scope.add(id);
       homes.set(key, home);
     }
     if (homes.size === 0) return;
@@ -24904,8 +24977,8 @@ function generateSequenceDiagram(componentId, methodName, options) {
     const steps = [...methodImpl.narrative].sort((a, b) => a.stepNumber - b.stepNumber);
     for (const step of steps) {
       for (const par of parallelArms) {
-        const sep12 = par.sepByStep.get(step.stepNumber);
-        if (sep12 !== void 0) lines.push(`  and ${escapeLabel(sep12)}`);
+        const sep13 = par.sepByStep.get(step.stepNumber);
+        if (sep13 !== void 0) lines.push(`  and ${escapeLabel(sep13)}`);
       }
       switch (step.type) {
         case "local":
@@ -25167,6 +25240,7 @@ function bindExternals(node, root, nodes) {
   return declaredExternals(root.config).map((decl) => {
     const unresolved = (problem) => ({ alias: decl.alias, project: decl.project, sourceKind: "unresolved", audience: "instance", problem });
     if (decl.problem) return unresolved(decl.problem);
+    if (decl.sourceHosted !== void 0) return { alias: decl.alias, project: decl.project, sourceKind: "hosted", hosted: decl.sourceHosted, audience: "instance" };
     if (decl.sourcePath !== void 0) {
       const directory = path18.resolve(node.directory, decl.sourcePath);
       const found = nodes.find((n) => dirKey(n.directory) === dirKey(directory));
@@ -25954,7 +26028,7 @@ function mapSpecReferences(kind, spec, map) {
       const s = spec;
       return {
         ...s,
-        publicInterfaces: s.publicInterfaces.map((p) => ({
+        publicInterfaces: (s.publicInterfaces ?? []).map((p) => ({
           ...p,
           ...p.component !== void 0 ? { component: map("publicInterfaces", p.component) } : {},
           ...p.interface !== void 0 ? { interface: map("publicInterfaces", p.interface) } : {},
@@ -25970,8 +26044,8 @@ function mapSpecReferences(kind, spec, map) {
       return {
         ...c,
         subsystem: map("subsystem", c.subsystem),
-        owns: c.owns.map((o) => map("owns", o)),
-        dependsOn: c.dependsOn.map((d) => map("dependsOn", d)),
+        owns: (c.owns ?? []).map((o) => map("owns", o)),
+        dependsOn: (c.dependsOn ?? []).map((d) => map("dependsOn", d)),
         ...c.dispatch ? { dispatch: c.dispatch.map((b) => ({ ...b, component: map("dispatch", b.component) })) } : {},
         ...c.mounts ? { mounts: c.mounts.map((m) => ({ ...m, portal: map("mounts", m.portal) })) } : {}
       };
@@ -25985,9 +26059,9 @@ function mapSpecReferences(kind, spec, map) {
       return {
         ...impl,
         contract: map("contract", impl.contract),
-        methods: impl.methods.map((m) => ({
+        methods: (impl.methods ?? []).map((m) => ({
           ...m,
-          narrative: m.narrative.map((step) => step.targetComponent !== void 0 ? { ...step, targetComponent: map("narrative", step.targetComponent) } : step)
+          narrative: (m.narrative ?? []).map((step) => step.targetComponent !== void 0 ? { ...step, targetComponent: map("narrative", step.targetComponent) } : step)
         }))
       };
     }
@@ -27835,10 +27909,10 @@ var SpecWorkspace = class {
     return this.relativizeSpec("interface", spec);
   }
   prepareImplementationForWrite(spec, carry = true) {
-    const relative18 = this.relativizeSpec("implementation", spec, carry);
+    const relative19 = this.relativizeSpec("implementation", spec, carry);
     const member = this.getSubprojectPrefix(spec.id);
     const memberRoot = member ? this.resolveSubprojectForNamespace(member) : null;
-    return memberRoot ? childRelativeFilePaths(relative18, this.rootDir, memberRoot) : relative18;
+    return memberRoot ? childRelativeFilePaths(relative19, this.rootDir, memberRoot) : relative19;
   }
   prepareTypeForWrite(spec) {
     return this.relativizeSpec("type", spec);
@@ -28677,7 +28751,10 @@ var SpecWorkspace = class {
    *     second delete written as 7 addresses what used to be step 8. That is why
    *     a delete may restate the step's `label` or `description` as a guard, and
    *     why labels are the reliable way to name a jump target. Inserts and
-   *     deletes relocate every jump field in the same narrative around them; a
+   *     deletes relocate every STORED jump field in the same narrative around
+   *     them; a jump the delta itself writes is already in the numbering the
+   *     whole delta leaves behind, so none of its later steps moves it. A new
+   *     implementation method with no narrative is intent-level ([]); a
    *     step whose `type` changes is REBUILT for its new type, keeping its
    *     description and label.
    *  5. UNSET the fields the delta names, at the level each `unset` sits in.
@@ -28735,16 +28812,19 @@ var SpecWorkspace = class {
     }
     const JUMP_FIELDS = ["onTrueStep", "onFalseStep", "defaultStep", "endStep", "finallyStep", "toStep"];
     const JUMP_LIST_FIELDS = ["cases", "catches", "branches"];
+    const isPinned = (step, field) => step?.[DELTA_JUMP_PINS] instanceof Set && step[DELTA_JUMP_PINS].has(field);
+    const isPinnedEntry = (entry) => entry?.[DELTA_JUMP_PINS] === true;
     const relocateJumps = (step, shiftFrom, deltaN, captureInsertTarget = false) => {
       const hit = (v, isRegionTail = false) => deltaN > 0 ? captureInsertTarget && !isRegionTail ? v > shiftFrom : v >= shiftFrom : v > shiftFrom;
       const out = { ...step };
       for (const f of JUMP_FIELDS) {
+        if (isPinned(step, f)) continue;
         if (typeof out[f] === "number" && hit(out[f], f === "endStep")) out[f] = out[f] + deltaN;
       }
       for (const lf of JUMP_LIST_FIELDS) {
         if (Array.isArray(out[lf])) {
           out[lf] = out[lf].map(
-            (c) => typeof c?.step === "number" && hit(c.step) ? { ...c, step: c.step + deltaN } : c
+            (c) => !isPinnedEntry(c) && typeof c?.step === "number" && hit(c.step) ? { ...c, step: c.step + deltaN } : c
           );
         }
       }
@@ -28752,14 +28832,39 @@ var SpecWorkspace = class {
     };
     const jumpRefsTo = (step, target) => {
       const refs = [];
-      for (const f of JUMP_FIELDS) if (step[f] === target) refs.push(f);
+      for (const f of JUMP_FIELDS) if (step[f] === target && !isPinned(step, f)) refs.push(f);
       for (const lf of JUMP_LIST_FIELDS) {
         (Array.isArray(step[lf]) ? step[lf] : []).forEach((c, i) => {
-          if (c?.step === target) refs.push(`${lf}[${i}].step`);
+          if (c?.step === target && !isPinnedEntry(c)) refs.push(`${lf}[${i}].step`);
         });
       }
       return refs;
     };
+    const pinDeltaJumps = (deltaStep, carried) => {
+      const pins = new Set(carried ?? []);
+      for (const f of JUMP_FIELDS) if (typeof deltaStep[f] === "number") pins.add(f);
+      const out = { ...deltaStep };
+      for (const lf of JUMP_LIST_FIELDS) {
+        if (!Array.isArray(out[lf])) continue;
+        out[lf] = out[lf].map((c) => c && typeof c === "object" && typeof c.step === "number" ? { ...c, [DELTA_JUMP_PINS]: true } : c);
+      }
+      out[DELTA_JUMP_PINS] = pins;
+      return out;
+    };
+    const unpinned = (step) => {
+      const out = { ...step };
+      delete out[DELTA_JUMP_PINS];
+      for (const lf of JUMP_LIST_FIELDS) {
+        if (!Array.isArray(out[lf])) continue;
+        out[lf] = out[lf].map((c) => {
+          if (!c || typeof c !== "object" || !(DELTA_JUMP_PINS in c)) return c;
+          const entry = { ...c };
+          delete entry[DELTA_JUMP_PINS];
+          return entry;
+        });
+      }
+      return out;
+    };
     const normalizeIdentity = (k) => String(k ?? "").toLowerCase().replace(/[_\-\s]/g, "");
     const unsetFieldsOf = (item) => Array.isArray(item?.unset) ? item.unset.filter((f) => typeof f === "string") : [];
     const withUnset = (merged, deltaItem) => {
@@ -28939,21 +29044,24 @@ var SpecWorkspace = class {
             capture
           ));
           const { action, remove: remove2, captureJumps, ...cleanStep } = deltaStep;
-          steps.push(withUnset(cleanStep, deltaStep));
+          steps.push(withUnset(pinDeltaJumps(cleanStep), deltaStep));
         } else {
           const idx = steps.findIndex((s) => s.stepNumber === stepNum);
           if (idx !== -1) {
-            const { action, remove: remove2, ...cleanStep } = deltaStep;
+            const { action, remove: remove2, ...rawStep } = deltaStep;
             const stored = steps[idx];
+            const cleanStep = pinDeltaJumps(rawStep, stored[DELTA_JUMP_PINS]);
             const merged = withUnset(retargetByLabel(mergeElement(stored, cleanStep), cleanStep), deltaStep);
-            steps[idx] = rebuildOnRetype(stored, cleanStep, merged, methodName);
+            const rebuilt = rebuildOnRetype(stored, rawStep, merged, methodName);
+            rebuilt[DELTA_JUMP_PINS] = cleanStep[DELTA_JUMP_PINS];
+            steps[idx] = rebuilt;
           } else {
             const { action, remove: remove2, ...cleanStep } = deltaStep;
-            steps.push(withUnset(cleanStep, deltaStep));
+            steps.push(withUnset(pinDeltaJumps(cleanStep), deltaStep));
           }
         }
       }
-      return steps.sort((a, b) => a.stepNumber - b.stepNumber);
+      return steps.map(unpinned).sort((a, b) => a.stepNumber - b.stepNumber);
     };
     const isPlainObject2 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
     const mergeExt = (existing, delta2) => {
@@ -28976,6 +29084,11 @@ var SpecWorkspace = class {
           } else {
             const existingMethod = merged[idx];
             let narrative = existingMethod.narrative ? [...existingMethod.narrative] : [];
+            if (deltaMethod.narrative !== void 0 && deltaMethod.narrative !== null && !Array.isArray(deltaMethod.narrative)) {
+              throw new Error(
+                `Refusing to update implementation method "${String(deltaMethod.name)}": its "narrative" must be a list of step deltas, got ${JSON.stringify(deltaMethod.narrative)}.`
+              );
+            }
             if (Array.isArray(deltaMethod.narrative)) {
               narrative = deltaMethod.narrative.length === 0 ? [] : mergeNarrative(String(deltaMethod.name), narrative, deltaMethod.narrative);
             }
@@ -28988,11 +29101,21 @@ var SpecWorkspace = class {
           }
         } else {
           assertUnmatchedIsAnAddition(deltaMethod, deltaMethod.name, merged.map((m) => m.name), "method");
-          merged.push(withUnset(deltaMethod, deltaMethod));
+          merged.push(withUnset(newMethodOf(deltaMethod), deltaMethod));
         }
       }
       return merged;
     };
+    const newMethodOf = (deltaMethod) => {
+      if (kind !== "implementation") return deltaMethod;
+      if (deltaMethod.narrative === void 0 || deltaMethod.narrative === null) return { ...deltaMethod, narrative: [] };
+      if (!Array.isArray(deltaMethod.narrative)) {
+        throw new Error(
+          `Refusing to add implementation method "${String(deltaMethod.name)}": its "narrative" must be a list of steps, got ${JSON.stringify(deltaMethod.narrative)}. Leave it out (or pass []) for an intent-level method.`
+        );
+      }
+      return deltaMethod;
+    };
     const mergeNamedArray = (existing, delta2) => {
       const merged = [...existing];
       for (const deltaItem of delta2) {
@@ -29170,6 +29293,12 @@ var SpecWorkspace = class {
     const qualifiedDelta = qualifyDeltaRefs(mergeableDelta);
     const mergedResult = mergeDelta(result, qualifiedDelta);
     for (const field of unsetFields) delete mergedResult[field];
+    const withDefaults = deltaSchema.safeParse(mergedResult);
+    if (withDefaults.success) {
+      for (const [key, value] of Object.entries(withDefaults.data)) {
+        if (!(key in mergedResult)) mergedResult[key] = value;
+      }
+    }
     if (kind === "implementation" && Array.isArray(mergedResult.methods)) {
       const labelErrors = [];
       for (const m of mergedResult.methods) {
@@ -29690,6 +29819,7 @@ var PROSE_FIELDS = /* @__PURE__ */ new Set([
   "note",
   "caller"
 ]);
+var DELTA_JUMP_PINS = /* @__PURE__ */ Symbol("jumps written by this delta");
 function cloneSpec(spec) {
   return JSON.parse(JSON.stringify(spec));
 }
@@ -30169,6 +30299,17 @@ function unregisterDomain(id) {
 
 // src/core/external-producers.ts
 var path21 = __toESM(require("path"));
+function hostedOnlyProducer(id) {
+  return `hosted-only producer \`${id}\`: available only through the hosted server`;
+}
+function resolveHosted(external) {
+  if (external.sourceKind !== "hosted" || external.hosted === void 0) return external;
+  const lookup2 = getHostedLookup();
+  const unresolved = (problem) => ({ ...external, sourceKind: "unresolved", problem });
+  if (!lookup2) return unresolved(hostedOnlyProducer(external.hosted));
+  const root = lookup2(external.hosted);
+  return root === null ? unresolved(`the hosted producer \`${external.hosted}\` is unknown or outside this request's reach`) : { ...external, directory: path21.resolve(root) };
+}
 function dirKey2(dir) {
   const resolved = path21.resolve(dir);
   return process.platform === "win32" ? resolved.toLowerCase() : resolved;
@@ -30194,11 +30335,14 @@ function resolveDeclared() {
     const family = graph();
     const node = consumerNode(family, bound2);
     if (!node) return null;
-    return node.externals.map((external) => ({
-      external,
-      ...external.sourceKind === "family" && external.producer !== void 0 ? { usage: exportUsage(node.namespace, external.producer) } : {},
-      reachable: whole
-    }));
+    return node.externals.map((declared) => {
+      const external = resolveHosted(declared);
+      return {
+        external,
+        ...external.sourceKind === "family" && external.producer !== void 0 ? { usage: exportUsage(node.namespace, external.producer) } : {},
+        reachable: whole
+      };
+    });
   });
   return answer(top) ?? answer(bound2) ?? [];
 }
@@ -30881,7 +31025,7 @@ function carryDeclarations(scan, result) {
   const bound2 = projectConfigRepository.load() ?? {};
   for (const [alias, decl] of Object.entries(scan.config?.externals ?? {})) {
     if (carriedExternal(scan, alias, decl) === "parent") continue;
-    const source = decl.source && !path22.isAbsolute(decl.source.path) ? { path: toPosixPath(path22.relative(root, path22.resolve(scan.memberDir, decl.source.path))) } : decl.source;
+    const source = decl.source?.path !== void 0 && !path22.isAbsolute(decl.source.path) ? { path: toPosixPath(path22.relative(root, path22.resolve(scan.memberDir, decl.source.path))) } : decl.source;
     if (bound2.members?.[alias] === void 0) {
       projectConfigRepository.declareExternal(alias, {
         ...decl.project !== void 0 ? { project: decl.project } : {},
@@ -32224,17 +32368,17 @@ function memberHop(agentId) {
   const alias = agentId.slice(0, at);
   const member = graph().nodes.find((n) => n.parent === "" && n.mountAlias === alias);
   if (!member) return null;
-  const relative18 = path26.relative(getProjectRoot(), member.directory).split(path26.sep).join("/");
-  return { alias, rest: agentId.slice(at + 2), directory: member.directory, relative: relative18 };
+  const relative19 = path26.relative(getProjectRoot(), member.directory).split(path26.sep).join("/");
+  return { alias, rest: agentId.slice(at + 2), directory: member.directory, relative: relative19 };
 }
-function throughMount(brief, alias, relative18) {
-  const under = (p) => path26.posix.join(relative18, p);
+function throughMount(brief, alias, relative19) {
+  const under = (p) => path26.posix.join(relative19, p);
   return {
     ...brief,
     agentId: `${alias}::${brief.agentId}`,
     ownedPaths: brief.ownedPaths.map(under),
     ...brief.readPaths ? { readPaths: brief.readPaths.map(under) } : {},
-    root: brief.root ? under(brief.root) : relative18
+    root: brief.root ? under(brief.root) : relative19
   };
 }
 function loadRegistry() {
@@ -32513,19 +32657,19 @@ function commitStagedTree(stagingDir, destDir, roots, backupExisting) {
   const backupDir = path31.join(root, BACKUP_DIR, timestampSlug());
   let backedUp = false;
   for (const rootRel of roots) {
-    const relative18 = rootRel === "." ? "" : rootRel;
-    const stagedSpecDir = path31.join(stagingDir, relative18, ".wai");
+    const relative19 = rootRel === "." ? "" : rootRel;
+    const stagedSpecDir = path31.join(stagingDir, relative19, ".wai");
     if (!fs17.existsSync(stagedSpecDir)) continue;
-    const liveSpecDir = liveSpecDirFor(path31.join(root, relative18));
+    const liveSpecDir = liveSpecDirFor(path31.join(root, relative19));
     if (backupExisting && liveSpecDir && fs17.existsSync(liveSpecDir)) {
-      const backupTarget = path31.join(backupDir, relative18, path31.basename(liveSpecDir));
+      const backupTarget = path31.join(backupDir, relative19, path31.basename(liveSpecDir));
       fs17.mkdirSync(path31.dirname(backupTarget), { recursive: true });
       fs17.renameSync(liveSpecDir, backupTarget);
       backedUp = true;
     } else if (liveSpecDir && fs17.existsSync(liveSpecDir)) {
       fs17.rmSync(liveSpecDir, { recursive: true, force: true });
     }
-    const target = path31.join(root, relative18, ".wai");
+    const target = path31.join(root, relative19, ".wai");
     fs17.mkdirSync(path31.dirname(target), { recursive: true });
     if (fs17.existsSync(target)) fs17.rmSync(target, { recursive: true, force: true });
     fs17.renameSync(stagedSpecDir, target);
@@ -32583,7 +32727,7 @@ function importSpecTree(archive, options) {
     throw new Error("incompatible .waitree archive (format or minimum wairon version)");
   }
   const destDir = path31.resolve(options.destDir ?? getProjectRoot());
-  const occupied = hasSpecTree(destDir);
+  const occupied2 = hasSpecTree(destDir);
   const authored = hasAuthoredSpecs(destDir);
   if (authored && options.replaceExisting !== true) {
     throw new Error(
@@ -32598,7 +32742,7 @@ function importSpecTree(archive, options) {
     discardStagingDir(stagingDir);
     throw err;
   }
-  const backupPath = commitStagedTree(stagingDir, destDir, extraction.roots, occupied);
+  const backupPath = commitStagedTree(stagingDir, destDir, extraction.roots, occupied2);
   discardStagingDir(stagingDir);
   invalidateSpecCache();
   const result = {
@@ -32606,7 +32750,7 @@ function importSpecTree(archive, options) {
     projectName: extraction.manifest.projectName,
     roots: extraction.roots,
     fileCount: extraction.writtenPaths.length,
-    replaced: occupied
+    replaced: occupied2
   };
   if (backupPath) result.backupPath = backupPath;
   if (extraction.manifest.stateId) result.stateId = extraction.manifest.stateId;
@@ -33108,7 +33252,7 @@ var CONTEXT_PATHS = {
   waironGuideMd: () => contextDir("wairon-guide.md")
 };
 function hasContext() {
-  return pathExists(CONTEXT_PATHS.projectMd());
+  return pathExists(CONTEXT_PATHS.dir());
 }
 function readProjectContext() {
   return readFileOrNull(CONTEXT_PATHS.projectMd());
@@ -35205,6 +35349,7 @@ function pin(p, log) {
 }
 
 // src/migrations/membership.ts
+var fs22 = __toESM(require("fs"));
 var path40 = __toESM(require("path"));
 
 // src/migrations/family-files.ts
@@ -35285,39 +35430,93 @@ function within2(root, candidate) {
   const rel2 = nodePath.relative(root, candidate);
   return rel2 === "" || !rel2.startsWith("..") && !nodePath.isAbsolute(rel2);
 }
+function areaFiles(owner, area) {
+  const out = [];
+  const walk2 = (rel2) => {
+    if (rel2 === `${WAI}/${TRANSACTIONS}`) return;
+    const abs = nodePath.join(owner, ...rel2.split("/"));
+    let stat;
+    try {
+      stat = fs21.lstatSync(abs);
+    } catch {
+      return;
+    }
+    if (stat.isSymbolicLink()) return;
+    if (stat.isFile()) {
+      out.push(rel2);
+      return;
+    }
+    if (!stat.isDirectory()) return;
+    for (const name of fs21.readdirSync(abs)) walk2(`${rel2}/${name}`);
+  };
+  walk2(area.split(nodePath.sep).join("/").replace(/\/+$/, ""));
+  return out.sort();
+}
+function everyFile(owner) {
+  const out = [];
+  const walk2 = (dir, rel2) => {
+    let entries;
+    try {
+      entries = fs21.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const relPath = rel2 ? `${rel2}/${entry.name}` : entry.name;
+      if (relPath === `${WAI}/${TRANSACTIONS}`) continue;
+      if (entry.isSymbolicLink()) continue;
+      if (entry.isDirectory()) walk2(nodePath.join(dir, entry.name), relPath);
+      else if (entry.isFile()) out.push(relPath);
+    }
+  };
+  walk2(owner, "");
+  return out.sort();
+}
+function insideWhole(whole, dir) {
+  return whole.some((w) => within2(w, dir));
+}
+function scopedFiles(owner, areas) {
+  return areas ? [...new Set(areas.flatMap((a) => areaFiles(owner, a)))].sort() : waiFiles(owner);
+}
 function mirror(scope, target) {
   const digests = /* @__PURE__ */ new Map();
-  for (const project of scope.projects) {
-    if (!within2(scope.familyRoot, project)) {
-      throw new Error(`${project} does not lie within the family root ${scope.familyRoot}; a rehearsal copies only the family's own trees`);
-    }
-    const at = nodePath.join(target, nodePath.relative(scope.familyRoot, project));
-    for (const rel2 of waiFiles(project)) {
-      const live = nodePath.join(project, ...rel2.split("/"));
-      let bytes;
-      try {
-        bytes = fs21.readFileSync(live);
-      } catch (e) {
-        throw new Error(`could not copy ${live} into the rehearsal: ${e instanceof Error ? e.message : String(e)}`);
-      }
-      const copy = nodePath.join(at, ...rel2.split("/"));
-      fs21.mkdirSync(nodePath.dirname(copy), { recursive: true });
-      fs21.writeFileSync(copy, bytes);
-      digests.set(live, sha2562(bytes));
+  const whole = scope.whole ?? [];
+  for (const owner of [...scope.projects, ...whole]) {
+    if (!within2(scope.familyRoot, owner)) {
+      throw new Error(`${owner} does not lie within the family root ${scope.familyRoot}; a rehearsal copies only the family's own trees`);
     }
   }
+  for (const project of scope.projects.filter((p) => !insideWhole(whole, p))) {
+    copyFiles(project, scopedFiles(project, scope.areas), nodePath.join(target, nodePath.relative(scope.familyRoot, project)), digests);
+  }
+  for (const owner of whole) {
+    copyFiles(owner, everyFile(owner), nodePath.join(target, nodePath.relative(scope.familyRoot, owner)), digests);
+  }
   return digests;
 }
+function copyFiles(owner, rels, at, digests) {
+  fs21.mkdirSync(at, { recursive: true });
+  for (const rel2 of rels) {
+    const live = nodePath.join(owner, ...rel2.split("/"));
+    let bytes;
+    try {
+      bytes = fs21.readFileSync(live);
+    } catch (e) {
+      throw new Error(`could not copy ${live} into the rehearsal: ${e instanceof Error ? e.message : String(e)}`);
+    }
+    const copy = nodePath.join(at, ...rel2.split("/"));
+    fs21.mkdirSync(nodePath.dirname(copy), { recursive: true });
+    fs21.writeFileSync(copy, bytes);
+    digests.set(live, sha2562(bytes));
+  }
+}
 function compare4(rehearsal) {
   const changes = [];
   const seen = /* @__PURE__ */ new Set();
-  for (const owner of waiOwners(rehearsal.directory)) {
-    const live = nodePath.join(rehearsal.familyRoot, nodePath.relative(rehearsal.directory, owner));
-    for (const rel2 of waiFiles(owner)) {
-      seen.add(nodePath.join(live, ...rel2.split("/")));
-      const change = changeOf(rehearsal, live, rel2, sha2562(fs21.readFileSync(nodePath.join(owner, ...rel2.split("/")))));
-      if (change) changes.push(change);
-    }
+  for (const [live, copyRoot, rel2] of comparedFiles(rehearsal)) {
+    seen.add(nodePath.join(live, ...rel2.split("/")));
+    const change = changeOf(rehearsal, live, rel2, sha2562(fs21.readFileSync(nodePath.join(copyRoot, ...rel2.split("/")))));
+    if (change) changes.push(change);
   }
   for (const [liveFile, base] of rehearsal.baseDigests) {
     if (seen.has(liveFile)) continue;
@@ -35326,6 +35525,16 @@ function compare4(rehearsal) {
   }
   return changes.sort(byOwnerThenPath);
 }
+function comparedFiles(rehearsal) {
+  const whole = rehearsal.whole ?? [];
+  const owners = rehearsal.areas ? [...rehearsal.roots].map(([live, copy]) => [live, copy, scopedFiles(copy, rehearsal.areas)]) : waiOwners(rehearsal.directory).map((copy) => [nodePath.join(rehearsal.familyRoot, nodePath.relative(rehearsal.directory, copy)), copy, waiFiles(copy)]);
+  const imageOf = (live) => nodePath.join(rehearsal.directory, nodePath.relative(rehearsal.familyRoot, live));
+  const all = [
+    ...owners.filter(([live]) => !insideWhole(whole, live)),
+    ...whole.map((live) => [live, imageOf(live), everyFile(imageOf(live))])
+  ];
+  return all.flatMap(([live, copy, rels]) => rels.map((rel2) => [live, copy, rel2]));
+}
 function changeOf(rehearsal, live, rel2, staged) {
   const base = rehearsal.baseDigests.get(nodePath.join(live, ...rel2.split("/")));
   if (base === staged) return null;
@@ -35334,9 +35543,23 @@ function changeOf(rehearsal, live, rel2, staged) {
 var order = (a, b) => a < b ? -1 : a > b ? 1 : 0;
 var byOwnerThenPath = (a, b) => order(a.project, b.project) || order(a.path, b.path);
 function ownerOf3(rehearsal, liveFile) {
-  const roots = [...rehearsal.roots.keys()].filter((r) => within2(nodePath.join(r, WAI), liveFile));
+  const whole = (rehearsal.whole ?? []).find((w) => within2(w, liveFile));
+  if (whole !== void 0) return whole;
+  const roots = [...rehearsal.roots.keys()].filter((r) => within2(rehearsal.areas ? r : nodePath.join(r, WAI), liveFile));
   return roots.sort((a, b) => b.length - a.length)[0] ?? nodePath.dirname(nodePath.dirname(liveFile));
 }
+function move(from, to) {
+  const rels = everyFile(from);
+  const taken = rels.find((rel2) => fs21.existsSync(nodePath.join(to, ...rel2.split("/"))));
+  if (taken !== void 0) throw new Error(`cannot move ${from} to ${to}: ${nodePath.join(to, ...taken.split("/"))} already exists`);
+  for (const rel2 of rels) {
+    const target = nodePath.join(to, ...rel2.split("/"));
+    makeDirs(nodePath.dirname(target));
+    replace(nodePath.join(from, ...rel2.split("/")), target);
+  }
+  for (const rel2 of rels) prune(nodePath.dirname(nodePath.join(from, ...rel2.split("/"))), nodePath.dirname(from));
+  prune(from, nodePath.dirname(from));
+}
 function read(path46) {
   try {
     return fs21.readFileSync(path46);
@@ -35478,6 +35701,13 @@ function hasSystemAt(dir) {
     }
   });
 }
+function occupied(dir) {
+  try {
+    return !fs22.statSync(dir).isDirectory() || fs22.readdirSync(dir).length > 0;
+  } catch {
+    return false;
+  }
+}
 function boundNode(family, bound2) {
   return familyNode(family, bound2);
 }
@@ -35551,8 +35781,11 @@ function planDetach(family, bound2, request) {
   const plan5 = emptyPlan(family, request);
   const alias = request.alias ?? "";
   const done = configAt3(familyNode(family, bound2).directory)?.externals?.[alias];
-  if (done?.source?.path && !family.nodes.some((n) => n.parent === bound2 && n.mountAlias === alias)) return plan5;
+  if ((done?.source?.path || done?.source?.hosted) && !family.nodes.some((n) => n.parent === bound2 && n.mountAlias === alias)) return plan5;
   const member = memberUnder(family, bound2, alias, plan5);
+  if (member && request.relocation && occupied(request.relocation.to)) {
+    refuse(plan5, "relocation-target-exists", bound2, `the member "${alias}" cannot move to ${request.relocation.to}: it already exists`);
+  }
   if (!member) return plan5;
   const table = resolveProjectExports(member.namespace || void 0);
   const leaving = (key) => key !== void 0 && withinMember(family, member, key);
@@ -35605,27 +35838,34 @@ function planWidening(plan5, member, narrow) {
 }
 function detachEdits(plan5, family, bound2, member, alias, declared, consumers, outward) {
   const boundDir = familyNode(family, bound2).directory;
-  edit(plan5, bound2, "member", `members: ${alias} removed (${declared.path} stays as it is)`, { root: boundDir, call: "removeMember", args: [alias] });
+  const relocation = plan5.request.relocation;
+  const sourceTo = (from, producer) => relocation ? { hosted: producer.id ?? producer.mountAlias ?? producer.namespace } : { path: posix3(path40.relative(from, producer.directory)) };
+  const where = (source) => source.hosted !== void 0 ? `hosted record ${source.hosted}` : source.path;
+  edit(plan5, bound2, "member", `members: ${alias} removed (${declared.path} ${relocation ? `moves to ${relocation.to}` : "stays as it is"})`, { root: boundDir, call: "removeMember", args: [alias] });
+  const boundSource = relocation ? sourceTo(boundDir, member) : { path: declared.path };
   const external = {
     ...member.id !== void 0 && member.id !== alias ? { project: member.id } : {},
-    source: { path: declared.path },
+    source: boundSource,
     ...declared.use && declared.use.length > 0 ? { use: declared.use } : {},
     ...declared.description !== void 0 ? { description: declared.description } : {}
   };
-  edit(plan5, bound2, "external", `externals: ${alias} \u2192 ${member.id ?? alias} at ${declared.path}`, { root: boundDir, call: "declareExternal", args: [alias, external] });
+  edit(plan5, bound2, "external", `externals: ${alias} \u2192 ${member.id ?? alias} at ${where(boundSource)}`, { root: boundDir, call: "declareExternal", args: [alias, external] });
   for (const c of consumers) {
     const held = configAt3(c.node.directory)?.externals?.[c.alias];
-    const source = { path: posix3(path40.relative(c.node.directory, member.directory)) };
-    edit(plan5, c.node.namespace, "external", `externals: ${c.alias} found at ${source.path} (it leaves the family)`, { root: c.node.directory, call: "repointExternal", args: [c.alias, held?.project ?? null, source] });
+    const source = sourceTo(c.node.directory, member);
+    edit(plan5, c.node.namespace, "external", `externals: ${c.alias} found at ${where(source)} (it leaves the family)`, { root: c.node.directory, call: "repointExternal", args: [c.alias, held?.project ?? null, source] });
   }
   const own = configAt3(member.directory)?.externals ?? {};
   for (const e of outward) {
     const producer = familyNode(family, e.producer);
-    const source = { path: posix3(path40.relative(member.directory, producer.directory)) };
-    edit(plan5, member.namespace, "external", `externals: ${e.alias} found at ${source.path} (the member leaves the family)`, { root: member.directory, call: "repointExternal", args: [e.alias, own[e.alias]?.project ?? null, source] });
+    const source = sourceTo(member.directory, producer);
+    edit(plan5, member.namespace, "external", `externals: ${e.alias} found at ${where(source)} (the member leaves the family)`, { root: member.directory, call: "repointExternal", args: [e.alias, own[e.alias]?.project ?? null, source] });
+  }
+  if (relocation) {
+    edit(plan5, member.namespace, "move", `${member.directory} moved to ${relocation.to} (its own isolated root), its own members with it`, { root: member.directory, call: "move", args: [relocation.to] });
   }
   edit(plan5, bound2, "pin", `pin ${alias} (the detached project's surface, read last)`, { root: boundDir, call: "pinExternals", args: [[alias]] });
-  plan5.notes.push(`Consumers outside the family are not affected: they already name ${member.id ?? alias} by path, or not at all.`);
+  plan5.notes.push(`Consumers outside the family are not affected: they already name ${member.id ?? alias} by ${relocation ? "hosted record id" : "path"}, or not at all.`);
 }
 function planAdopt(family, bound2, request) {
   const plan5 = emptyPlan(family, request);
@@ -35636,6 +35876,7 @@ function planAdopt(family, bound2, request) {
   if (!external && boundConfig?.members?.[alias] !== void 0) return plan5;
   let dir = null;
   if (!external) refuse(plan5, "not-an-external", bound2, `${label4(bound2)} declares no external "${alias}"`);
+  else if (request.relocation) return planRelocatedAdopt(plan5, family, bound2, alias, external, request.relocation);
   else {
     dir = resolve30(boundDir, external.source?.path ?? "");
     if (dir === null) refuse(plan5, "not-contained", bound2, `the external "${alias}" ${external.source?.path ? `is found at "${external.source.path}", which is not strictly within ${label4(bound2)}` : "names no source.path"}`);
@@ -35644,7 +35885,18 @@ function planAdopt(family, bound2, request) {
   if (plan5.refusals.length > 0) return plan5;
   return adoptEdits(plan5, family, bound2, alias, external, dir);
 }
-function adoptEdits(plan5, family, bound2, alias, external, dir) {
+function planRelocatedAdopt(plan5, family, bound2, alias, external, relocation) {
+  const boundDir = familyNode(family, bound2).directory;
+  const target = resolve30(boundDir, plan5.request.path ?? "");
+  if (!external.source?.hosted) refuse(plan5, "not-contained", bound2, `the external "${alias}" names no source.hosted \u2014 a hosted adopt moves a project named by its hosted record id`);
+  else if (target === null || path40.resolve(target) !== path40.resolve(relocation.to)) refuse(plan5, "not-contained", bound2, `the member path "${plan5.request.path ?? ""}" does not resolve strictly within ${label4(bound2)} to ${relocation.to}`);
+  else if (occupied(relocation.to)) refuse(plan5, "relocation-target-exists", bound2, `the external "${alias}" cannot be adopted at ${relocation.to}: it already exists and is not an empty directory`);
+  const from = relocation.from ?? (external.source?.hosted !== void 0 ? getHostedLookup()?.(external.source.hosted) ?? void 0 : void 0);
+  if (plan5.refusals.length === 0 && !from) refuse(plan5, "not-a-project", bound2, `the hosted record "${external.source?.hosted}" is unknown or outside this request's reach \u2014 there is no root to adopt from`);
+  if (plan5.refusals.length > 0) return plan5;
+  return adoptEdits(plan5, family, bound2, alias, external, from, relocation.to);
+}
+function adoptEdits(plan5, family, bound2, alias, external, dir, at = dir) {
   const boundDir = familyNode(family, bound2).directory;
   const adoptee = configAt3(dir);
   if (!adoptee && !hasSystemAt(dir)) {
@@ -35661,22 +35913,28 @@ function adoptEdits(plan5, family, bound2, alias, external, dir) {
   edit(plan5, bound2, "pin", `pin ${alias} removed (the family supplies it now)`, { root: boundDir, call: "unpin", args: [alias] });
   edit(plan5, bound2, "external", `externals: ${alias} removed`, { root: boundDir, call: "removeExternal", args: [alias] });
   const declaration2 = {
-    path: posix3(path40.relative(boundDir, dir)),
+    path: posix3(path40.relative(boundDir, at)),
     ...external.description !== void 0 ? { description: external.description } : {},
     ...external.use && external.use.length > 0 ? { use: external.use } : {}
   };
   edit(plan5, bound2, "member", `members: ${alias} \u2192 ${declaration2.path}`, { root: boundDir, call: "declareMember", args: [alias, declaration2] });
+  const namesAdoptee = (from, e) => e.source?.path !== void 0 && path40.resolve(from, e.source.path) === path40.resolve(dir) || plan5.request.relocation !== void 0 && id !== void 0 && e.source?.hosted === id;
+  const sourceText = (e) => e.source?.hosted !== void 0 ? `source.hosted ${e.source.hosted}` : `source.path ${e.source?.path}`;
   for (const n of family.nodes) {
     for (const [a, e] of Object.entries(configAt3(n.directory)?.externals ?? {})) {
       if (n.namespace === bound2 && a === alias) continue;
-      if (!e.source?.path || path40.resolve(n.directory, e.source.path) !== path40.resolve(dir)) continue;
-      edit(plan5, n.namespace, "external", `externals: ${a} found through the family (its source.path ${e.source.path} removed)`, { root: n.directory, call: "repointExternal", args: [a, e.project ?? null, null] });
-      plan5.notes.push(`${label4(n.namespace)}'s external "${a}" named the adoptee by path; adopt removes it \u2014 detach-then-adopt is exact only when detach wrote that path`);
+      if (!namesAdoptee(n.directory, e)) continue;
+      edit(plan5, n.namespace, "external", `externals: ${a} found through the family (its ${sourceText(e)} removed)`, { root: n.directory, call: "repointExternal", args: [a, e.project ?? null, null] });
+      plan5.notes.push(`${label4(n.namespace)}'s external "${a}" named the adoptee by ${e.source?.hosted !== void 0 ? "hosted record id" : "path"}; adopt removes it \u2014 detach-then-adopt is exact only when detach wrote that source`);
     }
   }
+  const namesFamily = (e) => e.source?.path !== void 0 && nodeAt(family, path40.resolve(dir, e.source.path)) !== void 0 || plan5.request.relocation !== void 0 && e.source?.hosted !== void 0 && family.nodes.some((n) => n.id === e.source.hosted);
   for (const [a, e] of Object.entries(adoptee?.externals ?? {})) {
-    if (!e.source?.path || !nodeAt(family, path40.resolve(dir, e.source.path))) continue;
-    edit(plan5, key, "external", `externals: ${a} found through the family (its source.path ${e.source.path} removed)`, { root: dir, call: "repointExternal", args: [a, e.project ?? null, null] });
+    if (!namesFamily(e)) continue;
+    edit(plan5, key, "external", `externals: ${a} found through the family (its ${sourceText(e)} removed)`, { root: dir, call: "repointExternal", args: [a, e.project ?? null, null] });
+  }
+  if (plan5.request.relocation) {
+    edit(plan5, key, "move", `${dir} moved to ${at} (it joins the family's tree), its own members with it`, { root: dir, call: "move", args: [at] });
   }
   return plan5;
 }
@@ -35688,11 +35946,13 @@ function write3(plan5, rehearsal) {
       break;
     case "detach":
       for (const e of planned.filter((x) => x.write.call === "updateSpecGated")) writeOne(rehearsal, e.write);
-      for (const e of planned.filter((x) => x.write.call !== "pinExternals" && x.write.call !== "updateSpecGated")) writeOne(rehearsal, e.write);
+      for (const e of planned.filter((x) => !["pinExternals", "updateSpecGated", "move"].includes(x.write.call))) writeOne(rehearsal, e.write);
+      for (const e of planned.filter((x) => x.write.call === "move")) writeOne(rehearsal, e.write);
       for (const e of planned.filter((x) => x.write.call === "pinExternals")) writeOne(rehearsal, e.write);
       break;
     case "adopt":
-      for (const e of planned) writeOne(rehearsal, e.write);
+      for (const e of planned.filter((x) => x.write.call !== "move")) writeOne(rehearsal, e.write);
+      for (const e of planned.filter((x) => x.write.call === "move")) writeOne(rehearsal, e.write);
       break;
     default:
       throw new Error(`membership_migration writes attach, detach and adopt, not "${plan5.request.verb}"`);
@@ -35700,6 +35960,7 @@ function write3(plan5, rehearsal) {
 }
 function writeOne(rehearsal, w) {
   const args = w.args;
+  if (w.call === "move") return move(rehearsalRoot(rehearsal, w.root), rehearsalRoot(rehearsal, String(args[0])));
   runWithProjectRoot(rehearsalRoot(rehearsal, w.root), () => {
     switch (w.call) {
       case "setId":
@@ -36124,11 +36385,11 @@ function planExternalize(family, bound2, request) {
   const donePath = typeof done === "string" ? done : done?.path;
   if (donePath !== void 0 && request.path !== void 0 && path42.resolve(node.directory, donePath) === path42.resolve(node.directory, request.path)) return plan5;
   const dir = resolve30(node.directory, request.path ?? "");
-  const occupied = dir !== null && holdsProject(dir);
+  const occupied2 = dir !== null && holdsProject(dir);
   const sub = id.includes("::") ? null : loadSpec("subsystem", subKey);
   if (!sub || sub.projectPath || (family.owners.get(subKey) ?? "") !== bound2) refuse3(plan5, "externalize-refused", bound2, `${label6(bound2)} has no subsystem "${id}" to externalize (it is missing, or already a member)`);
   if (dir === null) refuse3(plan5, "not-contained", bound2, `the path "${request.path ?? ""}" does not resolve strictly within ${label6(bound2)}`);
-  else if (family.nodes.some((n) => path42.resolve(n.directory) === dir) || occupied) {
+  else if (family.nodes.some((n) => path42.resolve(n.directory) === dir) || occupied2) {
     refuse3(plan5, "not-contained", bound2, `${dir} already holds a project`);
   }
   const config = configAt5(node.directory);
@@ -36243,11 +36504,11 @@ function writeOne3(rehearsal, w) {
 
 // src/migrations/transaction.ts
 var crypto6 = __toESM(require("crypto"));
-var fs23 = __toESM(require("fs"));
+var fs24 = __toESM(require("fs"));
 var path43 = __toESM(require("path"));
 
 // src/migrations/transaction-files.ts
-var fs22 = __toESM(require("fs"));
+var fs23 = __toESM(require("fs"));
 var os6 = __toESM(require("os"));
 var nodePath2 = __toESM(require("path"));
 var yaml3 = __toESM(require("js-yaml"));
@@ -36261,7 +36522,7 @@ function pause2(ms) {
 function removeTree(dir) {
   for (let attempt = 1; ; attempt++) {
     try {
-      fs22.rmSync(dir, { recursive: true, force: true });
+      fs23.rmSync(dir, { recursive: true, force: true });
       return;
     } catch (e) {
       const code = e.code;
@@ -36271,20 +36532,20 @@ function removeTree(dir) {
   }
 }
 function writeDurably(file, bytes) {
-  fs22.mkdirSync(nodePath2.dirname(file), { recursive: true });
+  fs23.mkdirSync(nodePath2.dirname(file), { recursive: true });
   const tmp = `${file}.tmp`;
   try {
-    const fd = fs22.openSync(tmp, "w");
+    const fd = fs23.openSync(tmp, "w");
     try {
-      fs22.writeSync(fd, typeof bytes === "string" ? Buffer.from(bytes, "utf8") : bytes);
-      fs22.fsyncSync(fd);
+      fs23.writeSync(fd, typeof bytes === "string" ? Buffer.from(bytes, "utf8") : bytes);
+      fs23.fsyncSync(fd);
     } finally {
-      fs22.closeSync(fd);
+      fs23.closeSync(fd);
     }
-    fs22.renameSync(tmp, file);
+    fs23.renameSync(tmp, file);
   } catch (e) {
     try {
-      fs22.unlinkSync(tmp);
+      fs23.unlinkSync(tmp);
     } catch {
     }
     throw e;
@@ -36294,18 +36555,18 @@ function writeDurably(file, bytes) {
 function syncDirectory(dir) {
   if (process.platform === "win32") return;
   try {
-    const fd = fs22.openSync(dir, "r");
+    const fd = fs23.openSync(dir, "r");
     try {
-      fs22.fsyncSync(fd);
+      fs23.fsyncSync(fd);
     } finally {
-      fs22.closeSync(fd);
+      fs23.closeSync(fd);
     }
   } catch {
   }
 }
 function openRehearsal(id) {
   const dir = rehearsalDir(id);
-  fs22.mkdirSync(dir);
+  fs23.mkdirSync(dir);
   return dir;
 }
 function dropRehearsal(id) {
@@ -36316,14 +36577,14 @@ function dropRehearsal(id) {
 }
 function saveJournal(journal) {
   const ignore = nodePath2.join(transactionsDir(journal.owner), ".gitignore");
-  if (!fs22.existsSync(ignore)) writeDurably(ignore, "*\n");
+  if (!fs23.existsSync(ignore)) writeDurably(ignore, "*\n");
   writeDurably(nodePath2.join(transactionDir(journal.owner, journal.id), "journal.yaml"), yaml3.dump(journal, { noRefs: true, lineWidth: 200 }));
 }
 function readJournal(owner, id) {
   const file = nodePath2.join(transactionDir(owner, id), "journal.yaml");
   let text3;
   try {
-    text3 = fs22.readFileSync(file, "utf8");
+    text3 = fs23.readFileSync(file, "utf8");
   } catch (e) {
     if (e.code === "ENOENT") return null;
     throw e;
@@ -36338,7 +36599,7 @@ function listJournals(owner) {
   const dir = transactionsDir(owner);
   let names;
   try {
-    names = fs22.readdirSync(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
+    names = fs23.readdirSync(dir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name).sort();
   } catch {
     return [];
   }
@@ -36360,7 +36621,7 @@ function putFile(owner, id, area, path46, bytes) {
 }
 function readFile(owner, id, area, path46) {
   try {
-    return fs22.readFileSync(locate(owner, id, area, path46));
+    return fs23.readFileSync(locate(owner, id, area, path46));
   } catch (e) {
     if (e.code === "ENOENT") return null;
     throw e;
@@ -36374,7 +36635,7 @@ function close(owner, id) {
   const dir = transactionsDir(owner);
   let left;
   try {
-    left = fs22.readdirSync(dir);
+    left = fs23.readdirSync(dir);
   } catch {
     return;
   }
@@ -36382,7 +36643,11 @@ function close(owner, id) {
   removeTree(dir);
   const wai = nodePath2.dirname(dir);
   try {
-    if (fs22.readdirSync(wai).length === 0) fs22.rmdirSync(wai);
+    if (fs23.readdirSync(wai).length === 0) fs23.rmdirSync(wai);
+  } catch {
+  }
+  try {
+    if (fs23.readdirSync(owner).length === 0) fs23.rmdirSync(owner);
   } catch {
   }
 }
@@ -36469,15 +36734,16 @@ function rehearse(scope) {
   const directory = transactionRepository.openRehearsal(id);
   const familyRoot = path43.resolve(scope.familyRoot);
   const projects = [...new Set(scope.projects.map((p) => path43.resolve(p)))];
+  const whole = scope.whole ? [...new Set(scope.whole.map((p) => path43.resolve(p)))] : void 0;
   let baseDigests;
   try {
-    baseDigests = mirror({ familyRoot, projects }, directory);
+    baseDigests = mirror({ familyRoot, projects, ...scope.areas ? { areas: scope.areas } : {}, ...whole ? { whole } : {} }, directory);
   } catch (e) {
     transactionRepository.dropRehearsal(id);
     throw e;
   }
   const roots = new Map(projects.map((p) => [p, path43.join(directory, path43.relative(familyRoot, p))]));
-  return { id, directory, familyRoot, roots, baseDigests };
+  return { id, directory, familyRoot, roots, baseDigests, ...scope.areas ? { areas: [...scope.areas] } : {}, ...whole ? { whole } : {} };
 }
 function diff(rehearsal) {
   return compare4(rehearsal);
@@ -36564,7 +36830,7 @@ function missingDirs(owner, entries) {
   for (const entry of entries.filter((e) => e.action === "create")) {
     const missing = [];
     let at = path43.dirname(liveOf(owner, entry.path));
-    while (!fs23.existsSync(at) && at !== path43.dirname(at)) {
+    while (!fs24.existsSync(at) && at !== path43.dirname(at)) {
       missing.unshift(at);
       at = path43.dirname(at);
     }
@@ -36598,7 +36864,7 @@ function stageBytes(rehearsal, journal, entry) {
 function checkVolume(journal, entry, target) {
   const staged = transactionRepository.locate(journal.owner, journal.id, "staged", entry.path);
   let nearest = path43.dirname(target);
-  while (!fs23.existsSync(nearest) && nearest !== path43.dirname(nearest)) nearest = path43.dirname(nearest);
+  while (!fs24.existsSync(nearest) && nearest !== path43.dirname(nearest)) nearest = path43.dirname(nearest);
   if (!sameVolume(staged, nearest)) {
     throw new StagingError(`cross-volume: ${target} lies on another volume than its staged copy; a rename across volumes is not atomic`);
   }
@@ -36682,7 +36948,7 @@ function recover(root, fix) {
 var coordinatorRoot = (journal) => path43.resolve(journal.owner, journal.coordinator);
 function journalAt(owner, id) {
   try {
-    const journal = fs23.existsSync(owner) ? transactionRepository.readJournal(owner, id) : null;
+    const journal = fs24.existsSync(owner) ? transactionRepository.readJournal(owner, id) : null;
     return journal ? { ...journal, owner } : null;
   } catch {
     return null;
@@ -36714,7 +36980,7 @@ function resolveOne(journal) {
     for (const owner of [...owners.filter((o) => o !== coordinator.owner), coordinator.owner]) transactionRepository.close(owner, journal.id);
     return { ...base, owners, phase, action: "cleaned", detail: "it had committed; its transaction directories were removed" };
   }
-  const absent = owners.filter((o) => !fs23.existsSync(o));
+  const absent = phase === "staging" ? [] : owners.filter((o) => !fs24.existsSync(o));
   if (absent.length > 0) {
     return { ...base, owners, phase, action: "refused", detail: `owner(s) out of reach: ${absent.join(", ")}` };
   }
@@ -36745,14 +37011,15 @@ function plan3(request) {
   const { top, whole } = climb3(bound2);
   const family = runWithProjectRoot(top, () => graph());
   const boundKey = family.nodes.find((n) => path44.resolve(n.directory) === path44.resolve(bound2))?.namespace ?? "";
-  const pending3 = unfinished(top, bound2);
+  const pending3 = unfinished(top, bound2, request.relocation?.coordinator);
   if (pending3.length > 0) return refusedForPending(request, top, whole, pending3);
   const planned = request.verb === "chaining" ? route(request, family, boundKey) : runWithProjectRoot(top, () => route(request, family, boundKey));
   return rehearse2(request.verb === "chaining" ? planned : { ...planned, familyRoot: top, whole });
 }
-function unfinished(top, bound2) {
+function unfinished(top, bound2, coordinator) {
   const found = recover(top, false);
   if (path44.resolve(bound2) !== path44.resolve(top)) found.push(...recover(bound2, false));
+  if (coordinator !== void 0) found.push(...recover(coordinator, false));
   return found.filter((t, i) => found.findIndex((u) => u.id === t.id) === i);
 }
 function refusedForPending(request, top, whole, pending3) {
@@ -36830,17 +37097,62 @@ function rehearse2(plan5) {
   if (blocked(plan5) || plan5.request.rehearse === false) return plan5;
   const family = runWithProjectRoot(plan5.familyRoot, () => graph());
   const projects = [...family.nodes.map((n) => n.directory), ...broughtIn(plan5, family), ...pathProducers(plan5, family)];
-  const rehearsal = rehearse({ familyRoot: plan5.familyRoot, projects });
+  const rehearsal = rehearse(scopeOf(plan5, projects));
   try {
-    onCopy(rehearsal, () => writeVerb(plan5, rehearsal));
+    onCopy(rehearsal, () => relocatedLookup(plan5, rehearsal, () => writeVerb(plan5, rehearsal)));
   } catch (e) {
     discard(rehearsal);
     const detail = e instanceof Error ? e.message : String(e);
     return { ...plan5, refusals: [...plan5.refusals, { code: `${plan5.request.verb}-refused`, project: "", detail }] };
   }
   const changes = diff(rehearsal);
+  const outside = unwritableOwners(changes);
+  if (outside.length > 0) {
+    discard(rehearsal);
+    return { ...plan5, refusals: [...plan5.refusals, ...outside.map((o) => ({ code: "family-partial", project: o, detail: `the plan must write ${o}, which this request may not write` }))] };
+  }
   return { ...plan5, rehearsal, changes, relock: relockOf(plan5, changes) };
 }
+function movedOf(plan5) {
+  const relocation = plan5.request.relocation;
+  const move2 = plan5.edits.find((e) => e.write?.call === "move");
+  if (!relocation || !move2?.write) return null;
+  return { from: path44.resolve(move2.write.root), to: path44.resolve(relocation.to) };
+}
+function scopeOf(plan5, projects) {
+  const relocation = plan5.request.relocation;
+  const moved = movedOf(plan5);
+  if (!relocation || !moved) return { familyRoot: plan5.familyRoot, projects };
+  return {
+    familyRoot: relocation.coordinator,
+    projects: [relocation.coordinator, ...projects],
+    areas: [".wai", ...relocation.areas],
+    whole: [moved.from, moved.to]
+  };
+}
+function relocatedLookup(plan5, rehearsal, run3) {
+  const moved = movedOf(plan5);
+  const live = getHostedLookup();
+  if (!moved || !live) return run3();
+  const copied = [...rehearsal.roots.keys(), ...rehearsal.whole ?? []].filter((r) => r !== path44.resolve(rehearsal.familyRoot));
+  const inside = (root, dir) => {
+    const rel2 = path44.relative(root, dir);
+    return rel2 === "" || !rel2.startsWith("..") && !path44.isAbsolute(rel2);
+  };
+  return runWithHostedLookup((id) => {
+    const root = live(id);
+    if (root === null) return null;
+    const at = path44.resolve(root);
+    if (inside(moved.from, at)) return path44.join(rehearsalRoot(rehearsal, moved.to), path44.relative(moved.from, at));
+    return copied.some((r) => inside(r, at)) ? rehearsalRoot(rehearsal, at) : at;
+  }, run3);
+}
+function unwritableOwners(changes) {
+  const denied = getRequestParentReach()?.unwritableRoots ?? [];
+  if (denied.length === 0) return [];
+  const owners = [...new Set(changes.map((c) => path44.resolve(c.project)))];
+  return owners.filter((o) => denied.includes(o));
+}
 function pathProducers(plan5, family) {
   const inside = (dir) => {
     const rel2 = path44.relative(plan5.familyRoot, dir);
@@ -36883,7 +37195,9 @@ function onCopy(rehearsal, run3) {
 function relockOf(plan5, changes) {
   const ended = new Set(changes.filter((c) => c.action === "delete" && c.path === ".wai/project.yaml").map((c) => path44.resolve(c.project)));
   const owners = [...new Set(changes.map((c) => path44.resolve(c.project)))].filter((o) => !ended.has(o));
-  if (plan5.request.verb !== "rename") return owners.filter((owner) => approvalRecord(owner) !== null);
+  const moved = movedOf(plan5);
+  const relocated = moved !== null && approvalRecord(moved.from) !== null ? [moved.to] : [];
+  if (plan5.request.verb !== "rename") return [...owners.filter((owner) => approvalRecord(owner) !== null), ...relocated];
   const renamed = plan5.edits.find((e) => e.write?.call === "renameId")?.write?.root;
   const first = renamed !== void 0 ? path44.resolve(renamed) : void 0;
   return [...owners.filter((o) => o === first), ...owners.filter((o) => o !== first)];
@@ -38060,9 +38374,10 @@ ${renderChangeReport(report2)}`,
     server,
     "sdd_adopt_member",
     {
-      description: "Make the bound project's external found by a path inside it a member \u2014 sdd_detach_member's inverse. All-or-nothing; dryRun answers the plan and writes nothing. Never locks.",
+      description: "Make the bound project's external a member \u2014 sdd_detach_member's inverse. Locally the external is found by a path inside the bound project and adopted where it is; on a hosted instance it names a project by source.hosted and `path` says where to adopt it (the hosting server relocates it there). All-or-nothing; dryRun answers the plan and writes nothing. Never locks.",
       inputSchema: {
         alias: import_zod11.z.string().describe("The external's alias"),
+        path: import_zod11.z.string().optional().describe("Hosted: the member path to adopt a source.hosted external at, relative to the bound project; a source.path external is adopted where it is"),
         dryRun: dryRunArg
       }
     },
@@ -38408,7 +38723,7 @@ ${renderChangeReport(report2)}`,
     contract: import_zod11.z.string().describe("The L3 Interface contract ID this implements"),
     sourcePath: import_zod11.z.string().optional().describe("Optional: target source code file path relative to project root \u2014 for a chained subproject's implementation (qualified id), relative to that subproject's root; a path given relative to this root that lands inside the subproject is re-expressed for you"),
     simPath: import_zod11.z.string().optional().describe("Optional: the committed integration-sim harness file (project-relative; N:1 sharing allowed). The validator proves it exists and its import graph wires the REAL modules (this component + each direct dependency; technology adapters may stay faked) \u2014 running it is CI's job. Declaring the first simPath in a subsystem activates MISSING_INTEGRATION_SIM for its other complete non-leaf implementations"),
-    technologies: import_zod11.z.array(import_zod11.z.string()).optional().describe(`External technologies this implementation binds to (e.g. ["mysql"]) \u2014 declares this component's ownership tree as the technology's home; references outside it are flagged (TECH_LEAKAGE) and contract identifiers must stay intent-language. Only for Adapter/Store/Registry/Index components.`),
+    technologies: import_zod11.z.array(import_zod11.z.union([import_zod11.z.string(), import_zod11.z.object({ name: import_zod11.z.string(), matches: import_zod11.z.array(import_zod11.z.string()).min(1).describe("The tokens the leakage and contract checks match INSTEAD of the name \u2014 for a technology whose name is also an ordinary word of the tree (the yaml package, the YAML format)") }).strict()])).optional().describe(`External technologies this implementation binds to (e.g. ["mysql"], or [{ "name": "yaml", "matches": ["yaml package", "parseDocument"] }] when the bare name would match a common word) \u2014 declares this component's ownership tree as the technology's home; references outside it are flagged (TECH_LEAKAGE) and contract identifiers must stay intent-language. Only for Adapter/Store/Registry/Index components.`),
     injectedParams: import_zod11.z.array(import_zod11.z.string()).optional().describe("The parameter names this realization takes BEFORE the ones its contract declares \u2014 a config object, a data root, the transport handles a portal is handed. Supplied by whatever wires the component up, never by the caller the contract describes, which is why they belong here and not to the contract: another realization may hold them as fields instead. Declared rather than guessed, because a leading parameter the contract does not name cannot be told from one it named under a different name (`seed(config)` realized as `bootstrapInstance(cfg)`); a leading parameter this list does not name is reported (UNDECLARED_PARAM). Only a LEADING run is dropped \u2014 one of these names appearing after the contract's own parameters is an argument in the middle of the caller's list, not wiring"),
     detail: detailEnum.optional().describe("Spec-level narrative detail default for all methods"),
     conformance: conformanceEnum.optional().describe("Spec-level conformance tier default: declared | anchored | off (omitted = stereotype default: Portal \u2192 anchored, else declared)"),
@@ -38687,7 +39002,7 @@ ${testsBlock}` : ""}`, deletion);
       inputSchema: {
         kind: import_zod11.z.enum(["system", "subsystem", "component", "interface", "implementation", "type"]).describe("The spec kind to update (system = the singleton L0 \u2014 vision, boundaries, globalRequirements, databases, and publicInterfaces: the project export table, each entry a re-export {from, component, interface, typeDef, as, name, type, details, audience: project|department|instance|partner|external} \u2014 from alone re-exports everything a subsystem exports, and a legacy {id, subsystem} reads as {as, from})"),
         id: import_zod11.z.string().describe("The ID of the spec to update (namespaced if needed)"),
-        delta: import_zod11.z.record(import_zod11.z.any()).describe(`The partial fields to merge into the spec. ARRAYS UPSERT, they do not replace: an array whose elements carry an identity is merged element-by-element, so a delta naming ONE element leaves the others intact. Identity is "name" or "id" by default, and per field: dispatch by "capability", a listener's mounts by "portal", lifecycle by phase+component+method, emits/subscribesTo by topic+event, trustedLinks by "subsystem", a subsystem's publicInterfaces by component+interface (or type+details for an entry not yet bound to a component, and by from+item+interface+as for a re-export or a type export), invariants and patterns by "id", lint.allow by "code" AND "at" (an allow covers one occurrence, so several may share a code on one spec), an interface method's findings by "code", boundaries by "name", globalRequirements by "description", switch cases by "value", try catches by "error". Identity merging applies at EVERY depth, including an array INSIDE an element (a method's params, a step's catches). Add "action: 'delete'" (or "remove: true") alongside that identity to REMOVE an element \u2014 including a stale lint allow. Arrays of plain STRINGS (owns, dependsOn, guarantees) carry no per-element identity and are replaced wholesale; pass [] to clear any array outright. To REMOVE an optional field entirely, list it in "unset": e.g. {"unset": ["basePath", "variant"]} \u2014 passing null/undefined means "no change" (they are skipped), and writing "" would leave the field present but empty, which is a different and usually wrong spec. Unsetting a required field is refused by schema validation, which names it. For narrative steps, match by "stepNumber" and use "action: 'insert'" (shifts subsequent steps up) or "action: 'delete'" (shifts subsequent steps down and removes it). Step entries apply in ASCENDING stepNumber order, each against the numbering the earlier entries of the SAME delta left behind \u2014 delete step 3 and step 7 becomes step 6 \u2014 so prefer labels, and restate the step's "label" or "description" on a delete to have it checked against the step actually addressed. Renumbering RELOCATES every flow jump field (onTrueStep/onFalseStep/cases.step/defaultStep/endStep/catches.step/finallyStep/toStep) in the same narrative. A delete is REJECTED when the narrative has no such step, when a jump still targets it (retarget the referrers first), when a restated label/description does not match, or when it is a loop/try/parallel header whose body would be left standing (retype the header first to dissolve the region, then delete it). Changing a step's "type" REBUILDS it for the new type: its description and label are kept and every field the new type cannot carry is dropped (returned as a NOTICE); a delta that retypes AND sets such a field is refused. A step delta is also refused when it carries a marker the merge does not recognise: a non-boolean "remove", an "action" that is neither "insert" nor "delete", a "captureJumps" outside an insert, or no "stepNumber" to address. Inserting AT a jump target relocates those jumps past the inserted step by default (a NOTICE is returned) \u2014 add "captureJumps": true on the inserted step to retarget entry jumps onto it (loop/try endStep region tails always relocate with the body and are never captured). Every jump field has a "*Label" twin (toLabel, onFalseLabel, endLabel, \u2026, and "label" on a cases/catches entry) resolved against step labels AFTER the merge, so a delta may anchor on a label only pre-existing steps carry; a label the delta supplies REPLACES the stored number it twins, while setting the number and its label together in one delta is refused as a contradiction. Reference ids in deltas may use LOCAL names \u2014 they are qualified against the spec's namespace exactly as the loader would. Per-spec lint suppression: set "lint: { allow: [{ code, at, covers, reason }] }" to silence a WARNING or NOTICE code on this spec only (errors always surface; stale allows are flagged). An allow covers EXACTLY the occurrence it names: "at" is the site the finding names (a contract method, an import edge "from -> to", a declared edge "component -> target") and is REQUIRED for a code whose findings report one, while a finding that reports no site is covered only by an allow that names none; "covers" lists the units an aggregating finding reports, and the allow silences it only when every one is listed. This delta is deliberately OPEN below its top level \u2014 the shapes nest further than a schema here should restate \u2014 so a key that is not a field at its depth is not refused, it is NAMED BACK under NO EFFECT in the answer, together with any value the spec already held and any "unset" that removed nothing. Read that list: it is where a nested typo shows up.`),
+        delta: import_zod11.z.record(import_zod11.z.any()).describe(`The partial fields to merge into the spec. ARRAYS UPSERT, they do not replace: an array whose elements carry an identity is merged element-by-element, so a delta naming ONE element leaves the others intact. Identity is "name" or "id" by default, and per field: dispatch by "capability", a listener's mounts by "portal", lifecycle by phase+component+method, emits/subscribesTo by topic+event, trustedLinks by "subsystem", a subsystem's publicInterfaces by component+interface (or type+details for an entry not yet bound to a component, and by from+item+interface+as for a re-export or a type export), invariants and patterns by "id", lint.allow by "code" AND "at" (an allow covers one occurrence, so several may share a code on one spec), an interface method's findings by "code", boundaries by "name", globalRequirements by "description", switch cases by "value", try catches by "error". Identity merging applies at EVERY depth, including an array INSIDE an element (a method's params, a step's catches). Add "action: 'delete'" (or "remove: true") alongside that identity to REMOVE an element \u2014 including a stale lint allow. Arrays of plain STRINGS (owns, dependsOn, guarantees) carry no per-element identity and are replaced wholesale; pass [] to clear any array outright. To REMOVE an optional field entirely, list it in "unset": e.g. {"unset": ["basePath", "variant"]} \u2014 passing null/undefined means "no change" (they are skipped), and writing "" would leave the field present but empty, which is a different and usually wrong spec. Unsetting a required field is refused by schema validation, which names it. For narrative steps, match by "stepNumber" and use "action: 'insert'" (shifts subsequent steps up) or "action: 'delete'" (shifts subsequent steps down and removes it). Step entries apply in ASCENDING stepNumber order, each against the numbering the earlier entries of the SAME delta left behind \u2014 delete step 3 and step 7 becomes step 6 \u2014 so prefer labels, and restate the step's "label" or "description" on a delete to have it checked against the step actually addressed. Renumbering RELOCATES every flow jump field (onTrueStep/onFalseStep/cases.step/defaultStep/endStep/catches.step/finallyStep/toStep) in the same narrative. Only STORED jumps relocate: a jump the delta itself writes (on an inserted, appended or edited step) names its target in the numbering the WHOLE delta leaves behind, after all of its inserts and deletes, and no later step of the same delta moves it. A method the delta ADDS without a narrative is an intent-level method with none ([]). A delete is REJECTED when the narrative has no such step, when a jump still targets it (retarget the referrers first), when a restated label/description does not match, or when it is a loop/try/parallel header whose body would be left standing (retype the header first to dissolve the region, then delete it). Changing a step's "type" REBUILDS it for the new type: its description and label are kept and every field the new type cannot carry is dropped (returned as a NOTICE); a delta that retypes AND sets such a field is refused. A step delta is also refused when it carries a marker the merge does not recognise: a non-boolean "remove", an "action" that is neither "insert" nor "delete", a "captureJumps" outside an insert, or no "stepNumber" to address. Inserting AT a jump target relocates those jumps past the inserted step by default (a NOTICE is returned) \u2014 add "captureJumps": true on the inserted step to retarget entry jumps onto it (loop/try endStep region tails always relocate with the body and are never captured). Every jump field has a "*Label" twin (toLabel, onFalseLabel, endLabel, \u2026, and "label" on a cases/catches entry) resolved against step labels AFTER the merge, so a delta may anchor on a label only pre-existing steps carry; a label the delta supplies REPLACES the stored number it twins, while setting the number and its label together in one delta is refused as a contradiction. Reference ids in deltas may use LOCAL names \u2014 they are qualified against the spec's namespace exactly as the loader would. Per-spec lint suppression: set "lint: { allow: [{ code, at, covers, reason }] }" to silence a WARNING or NOTICE code on this spec only (errors always surface; stale allows are flagged). An allow covers EXACTLY the occurrence it names: "at" is the site the finding names (a contract method, an import edge "from -> to", a declared edge "component -> target") and is REQUIRED for a code whose findings report one, while a finding that reports no site is covered only by an allow that names none; "covers" lists the units an aggregating finding reports, and the allow silences it only when every one is listed. This delta is deliberately OPEN below its top level \u2014 the shapes nest further than a schema here should restate \u2014 so a key that is not a field at its depth is not refused, it is NAMED BACK under NO EFFECT in the answer, together with any value the spec already held and any "unset" that removed nothing. Read that list: it is where a nested typo shows up.`),
         dryRun: import_zod11.z.boolean().optional().describe("Ask what this delta WOULD do instead of doing it. The whole write runs, the candidate gate included, and the answer is the change report it would have produced \u2014 marked DRY RUN, with nothing stamped and not one byte of the stored file moved. Use it before a delta that renumbers a long narrative.")
       },
       outputSchema: specChangeReportOutput
@@ -39026,6 +39341,7 @@ function loadProjectConfig3() {
   SystemPublicInterfaceSchema,
   SystemSpecSchema,
   TargetConfigSchema,
+  TechnologySchema,
   TemplateNotFoundError,
   TemplateSchema,
   TopologyConfigSchema,
@@ -39053,6 +39369,7 @@ function loadProjectConfig3() {
   assertProjectInitialized,
   backendCommand,
   backfillChainedSubprojectConfigs,
+  backupBeside,
   buildCanvasDataModel,
   buildProjectGraph,
   buildRuleContext,
@@ -39127,6 +39444,7 @@ function loadProjectConfig3() {
   generateDiagramSet,
   generateSequenceDiagram,
   getExporter,
+  getHostedLookup,
   getLoaderIssues,
   getProjectRoot,
   getProjectRootOverride,
@@ -39151,6 +39469,7 @@ function loadProjectConfig3() {
   internalizeMember,
   isDraftSubsystem,
   isLogic,
+  isOutsideRoot,
   isOwnComponentEntry,
   isPattern,
   isProjectInitialized,
@@ -39258,6 +39577,7 @@ function loadProjectConfig3() {
   resolveVariantGuidance,
   retireSpecialists,
   rewriteReferences,
+  runWithHostedLookup,
   runWithProjectBinding,
   runWithProjectRoot,
   sameContract,
@@ -39279,6 +39599,8 @@ function loadProjectConfig3() {
   stepFieldsFor,
   stepGraph,
   syncContextFiles,
+  technologyName,
+  technologyTokens,
   toMarkdown,
   typeBindingOf,
   typeGenericParameters,