@wairon/cli 5.1.1-dev.91 → 5.1.1-dev.93

package/dist/index.js

@@ -3621,6 +3621,7 @@ __export(src_exports, {
   getRequestParentReach: () => getRequestParentReach,
   getRequestProjectRoot: () => getRequestProjectRoot,
   getStatusReport: () => getStatusReport,
+  getWriteReach: () => getWriteReach,
   globalGuideFilePath: () => globalGuideFilePath,
   globalPacksDir: () => globalPacksDir,
   globalPacksEnabled: () => globalPacksEnabled,
@@ -3725,6 +3726,7 @@ __export(src_exports, {
   registerExporter: () => registerExporter,
   registerPackRef: () => registerPackRef,
   reinjectLocalGuides: () => reinjectLocalGuides,
+  relationHealth: () => relationHealth,
   removeDomain: () => removeDomain,
   removeExternal: () => removeExternal,
   removeMember: () => removeMember,
@@ -3791,6 +3793,8 @@ __export(src_exports, {
   writeFileIfChanged: () => writeFileIfChanged,
   writeJsonFile: () => writeJsonFile,
   writeLockRecord: () => writeLockRecord,
+  writeReachDenials: () => writeReachDenials,
+  writeReachPermits: () => writeReachPermits,
   writeRootGuideDelegator: () => writeRootGuideDelegator,
   writeYamlFile: () => writeYamlFile
 });
@@ -3860,6 +3864,18 @@ function listFilesRecursive(dirPath, ext) {
   return files;
 }
 var projectRootOverride = null;
+var sameRoot = (a, b) => path.resolve(a) === path.resolve(b);
+function writeReachPermits(reach2, root, subsystemId) {
+  const own = subsystemId === null ? void 0 : reach2.subsystems.find((s) => s.subsystemId === subsystemId && sameRoot(s.root, root));
+  if (own) return own.writable;
+  return !reach2.unwritableRoots.some((r) => sameRoot(r, root));
+}
+function writeReachDenials(reach2, root) {
+  return reach2.subsystems.filter((s) => !s.writable && sameRoot(s.root, root));
+}
+function getWriteReach() {
+  return requestRootStore.getStore()?.writeReach ?? null;
+}
 var requestRootStore = new import_node_async_hooks.AsyncLocalStorage();
 function currentRootBinding() {
   return requestRootStore.getStore();
@@ -3875,7 +3891,8 @@ function runWithProjectBinding(dir, reach2, fn) {
       parentReach: reach2.parentReach,
       ...reach2.narrowed ? { narrowed: true } : {},
       ...reach2.unwritableRoots ? { unwritableRoots: reach2.unwritableRoots.map((r) => path.resolve(r)) } : {},
-      ...reach2.hostedLookup ? { hostedLookup: reach2.hostedLookup } : {}
+      ...reach2.hostedLookup ? { hostedLookup: reach2.hostedLookup } : {},
+      ...reach2.writeReach ? { writeReach: reach2.writeReach } : {}
     },
     fn
   );
@@ -7727,6 +7744,12 @@ var ParentExcerptSchema = import_zod8.z.object({
   /** sha256:… over the canonical excerpt without its commit. */
   digest: import_zod8.z.string()
 });
+function relationHealth(status) {
+  if (status.uses.some((u) => u.state === "changed" || u.state === "removed")) return "incompatible";
+  if (!status.reachable || status.outOfReach || status.uses.some((u) => u.state === "unavailable" || u.state === "unlocked")) return "unavailable";
+  if (status.drifted) return "drifted";
+  return "ok";
+}
 var NamedOpenApiSpecSchema = import_zod8.z.object({
   portalId: import_zod8.z.string(),
   name: import_zod8.z.string(),
@@ -9048,12 +9071,16 @@ function memberProjectNodes() {
     trustedLinks: [],
     project: true
   }));
-  const referenced = (family.nodes.find((n) => n.namespace === "")?.externals ?? []).filter((e) => e.role === "member").map((e) => ({ id: e.alias, name: e.alias, description: "", trustedLinks: [], project: true, storage: storageBadge(e.sourceKind === "family" ? "contained" : e.sourceKind, e.directory, e.commit) }));
-  return [...contained, ...referenced];
+  const rootExternals = family.nodes.find((n) => n.namespace === "")?.externals ?? [];
+  const referenced = rootExternals.filter((e) => e.role === "member").map((e) => ({ id: e.alias, name: e.alias, description: "", trustedLinks: [], project: true, storage: storageBadge(e.sourceKind === "family" ? "contained" : e.sourceKind, e.directory, e.commit) }));
+  const taken = new Set([...contained, ...referenced].map((n) => n.id));
+  const external = rootExternals.filter((e) => e.role !== "member" && e.sourceKind !== "family" && !taken.has(e.alias)).map((e) => ({ id: e.alias, name: e.alias, description: e.project === e.alias ? "" : `project ${e.project}`, trustedLinks: [], project: true, external: true, storage: storageBadge(e.sourceKind, e.directory, e.commit) }));
+  return [...contained, ...referenced, ...external];
 }
 function storageBadge(storage, directory, commit2) {
   if (storage === "git") return `git ${commit2 ? commit2.slice(0, 7) : ""}`.trim();
   if (storage === "hosted") return "hosted";
+  if (storage === "unresolved") return "unresolved";
   if (storage === "path") return directory ? `../${directory.split(/[\\/]/).pop()}` : "sibling";
   return "contained";
 }
@@ -9065,7 +9092,60 @@ function partBadges() {
   }
   return out;
 }
-function buildCanvasModel(issues = []) {
+function useLabel(use) {
+  if (use.publicName === void 0) return use.member ?? "(the external)";
+  return use.member === void 0 || use.member === "type" ? use.publicName : `${use.publicName}.${use.member}`;
+}
+function relationFrom(id, consumer, producer, status, comparedAt) {
+  const changed = status.uses.filter((u) => u.state !== "unchanged");
+  const health = relationHealth(status);
+  return {
+    id,
+    consumer,
+    producer,
+    health,
+    uses: changed.map((u) => ({ name: useLabel(u), state: u.state, ...u.detail !== void 0 ? { detail: u.detail } : {} })),
+    unchanged: status.uses.length - changed.length,
+    ...status.pinnedCommit !== void 0 ? { pinnedCommit: status.pinnedCommit } : {},
+    ...status.pinnedDigest !== void 0 ? { pinnedDigest: status.pinnedDigest } : {},
+    comparedAt,
+    ...health === "unavailable" && status.detail !== void 0 ? { detail: status.detail } : {}
+  };
+}
+function statusFor(entry, consumer, producer) {
+  const { alias, node } = producer;
+  return entry.externals.find((s) => alias !== void 0 && s.alias === alias || node !== void 0 && (node.parent === consumer && s.alias === node.mountAlias || s.sourceKind === "family" && node.id !== void 0 && s.project === node.id));
+}
+function nameRelations(edges, relations, outsideIds, ownerOf4) {
+  const family = graph();
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const out = /* @__PURE__ */ new Map();
+  for (const edge of edges) {
+    if (!edge.consumption) continue;
+    const consumer = ownerOf4(edge.from);
+    const node = outsideIds.has(edge.to) ? void 0 : familyNode(family, ownerOf4(edge.to)) ?? void 0;
+    const alias = outsideIds.has(edge.to) ? edge.to : void 0;
+    const entry = relations.find((r) => r.project === consumer);
+    const status = entry && !entry.detail ? statusFor(entry, consumer, { alias, node }) : void 0;
+    const producer = status?.alias ?? alias ?? (node?.parent === consumer ? node.mountAlias : void 0) ?? node?.id ?? ownerOf4(edge.to);
+    const id = `${consumer}\u2192${producer}`;
+    if (!out.has(id)) {
+      out.set(id, status ? relationFrom(id, consumer, producer, status, entry.comparedAt) : {
+        id,
+        consumer,
+        producer,
+        health: "unavailable",
+        uses: [],
+        unchanged: 0,
+        comparedAt: entry?.comparedAt ?? now,
+        detail: entry?.detail ?? (entry ? `the consumer's statuses name no producer "${producer}"` : "the consumer's statuses were not read")
+      });
+    }
+    edge.relation = id;
+  }
+  return [...out.values()];
+}
+function buildCanvasModel(issues = [], relations) {
   const system = loadSystemSpec();
   const subsystems = loadSubsystemSpecs();
   const components = loadComponentSpecs();
@@ -9173,22 +9253,26 @@ function buildCanvasModel(issues = []) {
   const badges = partBadges();
   const componentSub = new Map(components.map((c) => [c.id, c.subsystem]));
   const edges = [];
-  const referencedIds = new Set(projectNodes.filter((p) => p.storage !== void 0).map((p) => p.id));
+  const outsideIds = new Set(projectNodes.filter((p) => p.storage !== void 0).map((p) => p.id));
+  const owners = graph().owners;
+  const ownerOfSpec = (id) => owners.get(id) ?? "";
   for (const comp of components) {
     for (const depId of comp.dependsOn) {
       const alias = depId.includes("::") ? depId.split("::")[0] : "";
-      if (referencedIds.has(alias) && !componentIds.has(depId)) {
-        edges.push({ from: comp.id, to: alias, cross: true });
+      if (outsideIds.has(alias) && !componentIds.has(depId)) {
+        edges.push({ from: comp.id, to: alias, cross: true, consumption: true });
         continue;
       }
       if (!componentIds.has(depId)) continue;
       edges.push({
         from: comp.id,
         to: depId,
-        cross: componentSub.get(depId) !== comp.subsystem
+        cross: componentSub.get(depId) !== comp.subsystem,
+        ...ownerOfSpec(depId) !== ownerOfSpec(comp.id) ? { consumption: true } : {}
       });
     }
   }
+  const canvasRelations = relations === void 0 ? void 0 : nameRelations(edges, relations, outsideIds, ownerOfSpec);
   const typeSpecs = loadTypeSpecs();
   const usedByFor = (t) => {
     const qualified = t.subsystem && !t.id.startsWith(`${t.subsystem}::`) ? `${t.subsystem}::${t.id}` : t.id;
@@ -9310,6 +9394,7 @@ function buildCanvasModel(issues = []) {
     ],
     components: modelComponents,
     edges,
+    ...canvasRelations !== void 0 ? { relations: canvasRelations } : {},
     types: modelTypes,
     typeEdges,
     dataEdges,
@@ -9483,6 +9568,7 @@ body[data-theme="light"] .selectControl { color-scheme:light; }
 #cy { position:absolute; inset:0; }
 .legend { position:absolute; left:12px; bottom:12px; background:var(--chrome); border:1px solid var(--chrome-border); border-radius:10px; padding:8px 12px; font-size:11px; color:var(--dim); z-index:5; pointer-events:none; }
 .legend .sw { display:inline-block; width:10px; height:10px; border-radius:3px; margin-right:4px; vertical-align:-1px; border:1.5px solid; }
+.reltip { position:absolute; display:none; background:var(--chrome); border:1px solid var(--chrome-border); border-radius:8px; padding:6px 10px; font-size:11px; color:var(--dim); white-space:pre; z-index:6; pointer-events:none; max-width:520px; overflow:hidden; }
 /* Stage overlays clear the floating header (52px + 10px top + 10px gap). The
    header hides in presentation mode, where they return to the top edge. */
 .viewhint { position:absolute; top:72px; left:12px; color:var(--dim); font-size:11px; background:var(--chrome); border:1px solid var(--chrome-border); border-radius:9px; padding:5px 10px; z-index:5; pointer-events:none; }
@@ -9668,6 +9754,7 @@ body.presentation #exitPresent, body.presentation #presentDetails { display:bloc
     <div class="viewhint" id="viewHint"></div>
     <div id="typesWarn"></div>
     <div class="legend" id="legend"></div>
+    <div class="reltip" id="relTip"></div>
   </div>
   <div id="panelResizer" title="Drag to resize details sidebar"></div>
   <div id="panel"></div>
@@ -9995,6 +10082,7 @@ var MODEL = __MODEL_JSON__;
         retired: { fill: '#ebe8e4', stroke: '#857b73', text: '#35302b' },
       },
       issue: '#b3261e', selGlow: '#3465b4', bgLabel: '#f2f5f8', png: '#f2f5f8',
+      relOk: '#2e7d4f', relDrift: '#8a6116', relBad: '#b3261e', relUnknown: '#5f6b78',
     },
     syw: {
       pageEdge: '#7c8ca3', edgeText: '#aebdd2', cross: '#ff6b81', ink: '#eef2f8',
@@ -10016,6 +10104,7 @@ var MODEL = __MODEL_JSON__;
         retired: { fill: '#24211f', stroke: '#a8a29e', text: '#e7e5e4' },
       },
       issue: '#ff6b81', selGlow: '#22ddff', bgLabel: '#0a0a0f', png: '#0a0a0f',
+      relOk: '#34d399', relDrift: '#f59e0b', relBad: '#ff6b81', relUnknown: '#93a1b8',
     },
   };
 
@@ -10078,6 +10167,15 @@ var MODEL = __MODEL_JSON__;
       { selector: 'edge.bundle', style: { width: 4.5, opacity: 0.7 } },
       { selector: 'edge.toghost', style: { 'line-style': 'dashed', opacity: 0.75 } },
       { selector: 'edge.inneredge', style: { width: 1.1, 'arrow-scale': 0.6, opacity: 0.8 } },
+      // Relation health on consumption edges: the health colour replaces the
+      // boundary-hop colour, and unavailable is dotted as well as grey, so the
+      // state never rests on colour alone (the glyph is the edge's label).
+      { selector: 'edge.rel-unchecked', style: { 'line-color': t.pageEdge, 'target-arrow-color': t.pageEdge } },
+      { selector: 'edge.rel-ok', style: { 'line-color': t.relOk, 'target-arrow-color': t.relOk } },
+      { selector: 'edge.rel-drifted', style: { 'line-color': t.relDrift, 'target-arrow-color': t.relDrift } },
+      { selector: 'edge.rel-incompatible', style: { 'line-color': t.relBad, 'target-arrow-color': t.relBad } },
+      { selector: 'edge.rel-unavailable', style: { 'line-color': t.relUnknown, 'target-arrow-color': t.relUnknown, 'line-style': 'dotted' } },
+      { selector: '.extProject', style: { 'border-style': 'dashed' } },
       { selector: 'edge.stubHover', style: { 'line-color': t.selGlow, 'target-arrow-color': t.selGlow, width: 2.6, opacity: 1, 'z-compound-depth': 'top' } },
       { selector: '.dimmed', style: { opacity: 0.13 } },
       { selector: '.hasIssue', style: { 'border-color': t.issue, 'border-style': 'dashed', 'border-width': 3 } },
@@ -10114,6 +10212,83 @@ var MODEL = __MODEL_JSON__;
     ];
   }
 
+  // ---- relation health (consumption edges) ----------------------------------
+  // The model carries relations only when health was computed; without them a
+  // consumption edge is drawn neutral and the legend says it was not checked \u2014
+  // never green for something nobody compared.
+  var HAS_RELATIONS = Array.isArray(MODEL.relations);
+  var REL_BY_ID = {};
+  (MODEL.relations || []).forEach(function (r) { REL_BY_ID[r.id] = r; });
+  var HEALTH_RANK = { ok: 1, drifted: 2, unavailable: 3, incompatible: 4 };
+  var HEALTH_GLYPH = { ok: '\\u2713', drifted: '\\u0394', incompatible: '\\u2715', unavailable: '?' };
+  var HAS_CONSUMPTION = MODEL.edges.some(function (e) { return !!e.consumption; });
+  function edgeHealth(edge) {
+    var r = edge.relation ? REL_BY_ID[edge.relation] : null;
+    return r ? r.health : (HAS_RELATIONS ? 'unavailable' : null);
+  }
+  // Where edges fold into one, the worst health wins.
+  function worseHealth(a, b) {
+    if (!a) return b;
+    if (!b) return a;
+    return HEALTH_RANK[b] > HEALTH_RANK[a] ? b : a;
+  }
+  function relationsComparedAt() {
+    var at = null;
+    (MODEL.relations || []).forEach(function (r) { if (!at || r.comparedAt < at) at = r.comparedAt; });
+    return at;
+  }
+  function shortPin(r) {
+    if (r.pinnedCommit) return r.pinnedCommit.slice(0, 7);
+    return r.pinnedDigest ? r.pinnedDigest.replace(/^[a-z0-9-]+:/, '').slice(0, 12) : '';
+  }
+  function relationName(r) { return (r.consumer || 'this project') + ' \\u2192 ' + r.producer; }
+  function relationText(r) {
+    var lines = [relationName(r) + ': ' + HEALTH_GLYPH[r.health] + ' ' + r.health];
+    r.uses.forEach(function (u) { lines.push('  ' + u.name + ' \\u2014 ' + u.state + (u.detail ? ': ' + u.detail : '')); });
+    if (r.unchanged) lines.push('  ' + r.unchanged + ' use' + (r.unchanged === 1 ? '' : 's') + ' unchanged');
+    if (r.detail) lines.push('  ' + r.detail);
+    var pin = shortPin(r);
+    lines.push((pin ? 'pinned ' + pin + ' \\u00B7 ' : '') + 'compared ' + r.comparedAt);
+    return lines.join('\\n');
+  }
+  function relationHtml(r) {
+    var pin = shortPin(r);
+    return '<div class="method"><div class="mname">' + esc(relationName(r)) + '<span class="grow"></span><span class="chip">' + HEALTH_GLYPH[r.health] + ' ' + esc(r.health) + '</span></div>'
+      + r.uses.map(function (u) { return '<div class="mdesc">' + esc(u.name) + ' \\u2014 ' + esc(u.state) + (u.detail ? ': ' + esc(u.detail) : '') + '</div>'; }).join('')
+      + (r.unchanged ? '<div class="mdesc">' + r.unchanged + ' use' + (r.unchanged === 1 ? '' : 's') + ' unchanged</div>' : '')
+      + (r.detail ? '<div class="mdesc">' + esc(r.detail) + '</div>' : '')
+      + '<div class="mdesc">' + (pin ? 'pinned ' + esc(pin) + ' \\u00B7 ' : '') + 'compared ' + esc(r.comparedAt) + '</div></div>';
+  }
+  // The relations whose consumption edges start or land inside a node.
+  function relationsTouching(sid) {
+    var seen = {}, out = [];
+    var inside = function (x) {
+      var c = compById[x];
+      return x === sid || x.indexOf(sid + '::') === 0 || !!(c && (c.subsystem === sid || c.subsystem.indexOf(sid + '::') === 0));
+    };
+    MODEL.edges.forEach(function (e) {
+      if (!e.relation || seen[e.relation] || !(inside(e.to) || inside(e.from))) return;
+      seen[e.relation] = true;
+      if (REL_BY_ID[e.relation]) out.push(REL_BY_ID[e.relation]);
+    });
+    return out;
+  }
+  // The one legend row, only when the model has a consumption edge.
+  function relationLegend(t) {
+    if (!HAS_CONSUMPTION) return '';
+    if (!HAS_RELATIONS) return '<br>relations: <span style="color:' + t.pageEdge + '">health not checked</span>';
+    var at = relationsComparedAt();
+    return '<br>relations: <span style="color:' + t.relOk + '">\\u2713 ok</span>&nbsp; <span style="color:' + t.relDrift + '">\\u0394 drifted</span>&nbsp; '
+      + '<span style="color:' + t.relBad + '">\\u2715 incompatible</span>&nbsp; <span style="color:' + t.relUnknown + '">? unavailable (dotted)</span>'
+      + (at ? '&nbsp; \\u00B7 as of ' + esc(at) : '');
+  }
+  // A project's own page, only through the host's open-project hook (the web
+  // app): never in a standalone file or on a shared page, which have none.
+  function openProjectButton(s) {
+    if (!s.recordId || typeof opts === 'undefined' || !opts || typeof opts.onOpenProject !== 'function') return '';
+    return '<div class="openbtn"><button class="tbtn" data-openproject-id="' + esc(s.recordId) + '">Open project \\u2197</button></div>';
+  }
+
   function renderLegend() {
     var t = THEMES[state.theme];
     var sw = function (c) { return '<span class="sw" style="background:' + c.fill + ';border-color:' + c.stroke + '"></span>'; };
@@ -10127,7 +10302,8 @@ var MODEL = __MODEL_JSON__;
       sw(t.proxyIn) + '\\u21E0 in-port&nbsp; ' + sw(t.proxyOut) + '\\u21E2 out-port&nbsp; \u2014 bold border = published \xB7 ' +
       '<span style="color:' + t.cross + '">red</span> = boundary hop \xB7 double-click = open<br>' +
       'on select: <span style="color:' + t.selGlow + '">\\u2192 depends on</span>&nbsp; <span style="color:' + t.warn + '">\\u2190 used by</span>' +
-      (state.dataCoupling ? '&nbsp; \xB7 &nbsp;<span style="color:' + t.typeV.stroke + '">- - \\u25B8 uses models</span>' : '');
+      (state.dataCoupling ? '&nbsp; \xB7 &nbsp;<span style="color:' + t.typeV.stroke + '">- - \\u25B8 uses models</span>' : '') +
+      relationLegend(t);
   }
 
   // ---- view layout ---------------------------------------------------------------
@@ -10594,6 +10770,14 @@ var MODEL = __MODEL_JSON__;
       if (!agg[key]) agg[key] = { src: src, tgt: tgt, n: 0, cross: false, ghost: ghost };
       agg[key].n++;
       if (edge.cross) agg[key].cross = true;
+      if (edge.consumption) {
+        agg[key].consumption = true;
+        agg[key].health = worseHealth(agg[key].health, edgeHealth(edge));
+        if (edge.relation) {
+          var rels = agg[key].rels || (agg[key].rels = []);
+          if (rels.indexOf(edge.relation) < 0) rels.push(edge.relation);
+        }
+      }
     });
     return { agg: agg, ghosts: ghosts };
   }
@@ -11154,7 +11338,7 @@ var MODEL = __MODEL_JSON__;
       var classes, label;
       var isPub = e.kind === 'component' && compById[e.id] && compById[e.id].public;
       if (e.kind === 'subsystem') {
-        classes = 'subsysBox';
+        classes = 'subsysBox' + (subById[e.id] && subById[e.id].external ? ' extProject' : '');
         label = nameOf(e) + (e.hasKids && !inner ? '\\n\\u25B8 open' : '');
       } else {
         var c = compById[e.id];
@@ -11362,9 +11546,13 @@ var MODEL = __MODEL_JSON__;
       var bundle = e.n > 1;
       var dim = state.query && (dimmedAnchors[e.src] || dimmedAnchors[e.tgt]);
       var route = routeData(e.src, e.tgt, key);
+      // A consumption edge carries its relation's health: the glyph at its middle,
+      // its colour (and line, dotted when unavailable) by class.
+      var glyph = e.health ? HEALTH_GLYPH[e.health] : '';
+      var relCls = e.consumption ? 'rel rel-' + (e.health || 'unchecked') + ' ' : '';
       eles.push({
-        data: { id: 'e' + (i++), source: e.src, target: e.tgt, lbl: bundle ? e.n + ' links' : '', cpDist: route.cpDist, cpWeight: route.cpWeight, taxiTurn: route.taxiTurn },
-        classes: 'routed ' + (e.cross ? 'cross ' : '') + (bundle ? 'bundle ' : '') + (e.ghost ? 'toghost ' : '') + (dim ? 'dimmed' : ''),
+        data: { id: 'e' + (i++), source: e.src, target: e.tgt, lbl: (bundle ? e.n + ' links' : '') + (glyph ? (bundle ? ' ' : '') + glyph : ''), rels: (e.rels || []).join('|'), cpDist: route.cpDist, cpWeight: route.cpWeight, taxiTurn: route.taxiTurn },
+        classes: 'routed ' + (e.cross ? 'cross ' : '') + (bundle ? 'bundle ' : '') + (e.ghost ? 'toghost ' : '') + relCls + (dim ? 'dimmed' : ''),
       });
     });
 
@@ -11864,6 +12052,27 @@ var MODEL = __MODEL_JSON__;
   cy.on('mouseover', 'node', function (ev) { setHover(ev.target); });
   cy.on('mouseout', 'node', function (ev) { if (hoveredNode && hoveredNode.id() === ev.target.id()) setHover(null); });
 
+  // Relation health: hovering a consumption edge shows its relation(s) \u2014 which
+  // uses changed or were removed, why one could not be compared, the pin and
+  // when it was compared; tapping it shows the same in the details panel.
+  function relationsOfEdge(edge) {
+    return (edge.data('rels') || '').split('|').filter(Boolean).map(function (rid) { return REL_BY_ID[rid]; }).filter(Boolean);
+  }
+  cy.on('mouseover', 'edge.rel', function (ev) {
+    var tip = document.getElementById('relTip');
+    var rels = relationsOfEdge(ev.target);
+    tip.textContent = rels.length ? rels.map(relationText).join('\\n\\n') : 'relation health not checked';
+    var at = ev.renderedPosition || { x: 0, y: 0 };
+    tip.style.left = (at.x + 12) + 'px';
+    tip.style.top = (at.y + 12) + 'px';
+    tip.style.display = 'block';
+  });
+  cy.on('mouseout', 'edge.rel', function () { document.getElementById('relTip').style.display = 'none'; });
+  cy.on('tap', 'edge.rel', function (ev) {
+    var ids = ev.target.data('rels') || '';
+    if (ids) select('relation', ids, false);
+  });
+
   cy.on('tap', 'node', function (ev) {
     var t = idOf(ev.target);
     if (t.group) return;
@@ -11921,7 +12130,15 @@ var MODEL = __MODEL_JSON__;
     var hasKids = t.kind === 'subsystem'
       ? (childSubsOf(t.id).length + childCompsOf(t.id).length) > 0
       : memberCompsOf(t.id).length > 0;
-    if (hasKids) navigateTo(t.kind, t.id);
+    if (hasKids) { navigateTo(t.kind, t.id); return; }
+    // A project node with nothing to drill into (a referenced or external one):
+    // its own page through the host's open-project hook when it carries a
+    // record id, else its details panel \u2014 its storage and its relations.
+    var ps = t.kind === 'subsystem' ? subById[t.id] : null;
+    if (ps && ps.project) {
+      if (ps.recordId && typeof opts !== 'undefined' && opts && typeof opts.onOpenProject === 'function') { opts.onOpenProject(ps.recordId); return; }
+      select('subsystem', t.id, false);
+    }
   });
   cy.on('dragfree', 'node', function () { harvestPositions(); });
 
@@ -13158,7 +13375,7 @@ var MODEL = __MODEL_JSON__;
     cy.nodes().removeClass('sel');
     cy.edges().removeClass('fieldhl');
     if (id) {
-      var node = nodeForRef(kind, id);
+      var node = kind === 'relation' ? cy.collection() : nodeForRef(kind, id);
       if (node.length) {
         node.addClass('sel');
         applyFocus(node);
@@ -13328,6 +13545,10 @@ var MODEL = __MODEL_JSON__;
             via.map(function (v) { return chip(v.label, v.kind, v.id); }).join(''), true);
         }
       }
+    } else if (focusKind === 'relation') {
+      var rl = String(focusId).split('|').map(function (rid) { return REL_BY_ID[rid]; }).filter(Boolean);
+      head = '<h2>' + esc(rl.length === 1 ? relationName(rl[0]) : rl.length + ' relations') + '</h2>' + staticChip('relation');
+      body += rl.map(relationHtml).join('');
     } else if (focusKind === 'type') {
       var ty = null;
       MODEL.types.forEach(function (t2) { if (t2.id === focusId) ty = t2; });
@@ -13411,8 +13632,14 @@ var MODEL = __MODEL_JSON__;
         + (scopeFocus ? staticChip('current view') : '')
         + (scopeFocus ? '' : openViewButton('subsystem', s.id, subKids > 0))
         + openApiButton(subsystemExposesApi(s.id), '')
-        + openSpecButton('subsystem', s.id);
+        + openSpecButton('subsystem', s.id)
+        + (s.project ? staticChip(s.external ? 'external project' : 'project') : '')
+        + (s.storage ? staticChip(s.storage) : '')
+        + openProjectButton(s);
       body += '<p class="desc">' + esc(s.description) + '</p>';
+      var nodeRels = relationsTouching(s.id);
+      if (nodeRels.length) body += section('Relations', nodeRels.length, nodeRels.map(relationHtml).join(''), true);
+      else if (s.project && HAS_CONSUMPTION && !HAS_RELATIONS) body += section('Relations', null, '<span class="desc">relation health was not checked</span>', true);
       if (s.trustedLinks.length) {
         body += section('Trusted links (fast lanes)', s.trustedLinks.length, s.trustedLinks.map(function (t2) {
           return '<div class="method">' + chip(t2.subsystem, 'subsystem', t2.subsystem) + '<div class="mdesc">' + esc(t2.reason) + '</div></div>';
@@ -13479,6 +13706,14 @@ var MODEL = __MODEL_JSON__;
         });
       })(ospecs[si]);
     }
+    var oprojs = panel.querySelectorAll('[data-openproject-id]');
+    for (var opi = 0; opi < oprojs.length; opi++) {
+      (function (b) {
+        b.addEventListener('click', function () {
+          if (typeof opts !== 'undefined' && opts && typeof opts.onOpenProject === 'function') opts.onOpenProject(b.getAttribute('data-openproject-id'));
+        });
+      })(oprojs[opi]);
+    }
     var flows = panel.querySelectorAll('[data-flow-comp]');
     for (var j = 0; j < flows.length; j++) {
       (function (b) {
@@ -14074,7 +14309,14 @@ function externalStatus(binding, lock) {
   const { external } = binding;
   const entry = lock?.externals[external.alias];
   const pinned = entry !== void 0 && externalsRepository.readSnapshot(external.alias) !== null;
-  const base = { alias: external.alias, project: external.project, sourceKind: external.sourceKind, pinned };
+  const base = {
+    alias: external.alias,
+    project: external.project,
+    sourceKind: external.sourceKind,
+    pinned,
+    ...entry !== void 0 ? { pinnedDigest: entry.digest } : {},
+    ...entry?.commit !== void 0 ? { pinnedCommit: entry.commit } : {}
+  };
   const unreadable = external.sourceKind === "unresolved" ? hostedOnly(external) ? external.problem : `the external does not resolve: ${external.problem}` : producerUnreadable(external);
   let live = null;
   let reason = unreadable;
@@ -14314,7 +14556,8 @@ function reachCeiling(root, family) {
 }
 function within2(dir, ceiling, fn) {
   if (ceiling === null) return runWithProjectRoot(dir, fn);
-  return runWithProjectBinding(dir, { topRoot: ceiling.topRoot, parentReach: true, narrowed: ceiling.narrowed }, fn);
+  const lookup2 = getHostedLookup();
+  return runWithProjectBinding(dir, { topRoot: ceiling.topRoot, parentReach: true, narrowed: ceiling.narrowed, ...lookup2 ? { hostedLookup: lookup2 } : {} }, fn);
 }
 function depthOf(family, node) {
   let depth = 0;
@@ -14365,7 +14608,8 @@ function referencedOf(nodes) {
   return out;
 }
 function atReferenced(ref, fn) {
-  return runWithProjectBinding(ref.directory, { topRoot: ref.directory, parentReach: true, narrowed: true }, fn);
+  const lookup2 = getHostedLookup();
+  return runWithProjectBinding(ref.directory, { topRoot: ref.directory, parentReach: true, narrowed: true, ...lookup2 ? { hostedLookup: lookup2 } : {} }, fn);
 }
 function narrowed(family, selected) {
   const keys = /* @__PURE__ */ new Set(["", ...selected.map((s) => s.node.namespace)]);
@@ -14853,7 +15097,7 @@ function defaultTargetConfig(type) {
     enabled: true
   };
 }
-var WAIRON_VERSION = "5.1.1-dev.91";
+var WAIRON_VERSION = "5.1.1-dev.93";
 var GITHUB_REPO = "SYW-Apps/Waffle-AIron";
 var ARCHITECT_AGENT_ID = "agent-architect";
 var ARCHITECT_TEMPLATE_ID = "architect";
@@ -25349,10 +25593,11 @@ function familyApprovals(depth) {
 }
 
 // src/core/diagram.ts
-function renderDiagram(format) {
+function renderDiagram(format, relations) {
   switch (format) {
+    // Only the canvas carries relation health; the other formats ignore it.
     case "canvas":
-      return renderCanvasHtml(buildCanvasModel(diagramIssues()));
+      return renderCanvasHtml(buildCanvasModel(diagramIssues(), relations));
     case "mermaid":
       return generateComponentDiagram();
     case "drawio":
@@ -25363,8 +25608,8 @@ function renderDiagram(format) {
       throw new Error(`Unsupported diagram format "${format}" (canvas | mermaid | drawio | excalidraw).`);
   }
 }
-function buildCanvasDataModel() {
-  return buildCanvasModel(diagramIssues());
+function buildCanvasDataModel(relations) {
+  return buildCanvasModel(diagramIssues(), relations);
 }
 function diagramIssues() {
   try {
@@ -26617,6 +26862,34 @@ var PartReadOnly = class extends WaironError {
     this.name = "PartReadOnly";
   }
 };
+var SubsystemWriteDenied = class extends WaironError {
+  constructor(message) {
+    super(message);
+    this.name = "SubsystemWriteDenied";
+  }
+};
+function deniedOwners(reach2, owners) {
+  const seen = /* @__PURE__ */ new Set();
+  const denied = [];
+  for (const o of owners) {
+    const key = `${path21.resolve(o.root)}|${o.subsystemId ?? ""}`;
+    if (seen.has(key)) continue;
+    seen.add(key);
+    if (writeReachPermits(reach2, o.root, o.subsystemId)) continue;
+    const rule = o.subsystemId === null ? void 0 : reach2.subsystems.find((s) => s.subsystemId === o.subsystemId && path21.resolve(s.root) === path21.resolve(o.root));
+    denied.push(o.subsystemId === null ? `project "${o.project}" itself (a spec of no subsystem, decided at the project rung)` : `subsystem "${o.subsystemId}" of project "${o.project}" (decided by ${rule?.decidedBy ?? "the project rung"})`);
+  }
+  return denied;
+}
+function assertSpecWritesPermitted(owners, what) {
+  const reach2 = getWriteReach();
+  if (!reach2) return;
+  const denied = deniedOwners(reach2, owners);
+  if (denied.length === 0) return;
+  throw new SubsystemWriteDenied(
+    `SubsystemWriteDenied: ${what} would change ${denied.length === 1 ? "a spec" : "specs"} this request may not change \u2014 ${denied.join("; ")}. Nothing was written.`
+  );
+}
 function unknownKeysIn(raw, parsed, at, out) {
   if (Array.isArray(raw)) {
     if (!Array.isArray(parsed) || parsed.length !== raw.length) return;
@@ -28627,6 +28900,92 @@ var SpecWorkspace = class {
       `The spec file ${file} belongs to the part "${held.part.alias}", fetched from git (${held.source?.git ?? "its repository"} at ${held.part.commit ?? "its pinned commit"}): a git part is read-only here. Edit it in its own repository, commit it there, and take it in with \`wairon member update ${held.part.alias}\`. Nothing was written.`
     );
   }
+  /**
+   * spec_registry.save step 5 / delete step 2: inside a hosted request, may the
+   * request change this spec? Judged against the request's write reach with the
+   * home's project root and the spec's owning subsystem — the document written
+   * and, when a stored document is replaced or removed, the one stored (a
+   * component moved out of a subsystem changes that subsystem too). Outside a
+   * hosted request nothing is judged.
+   */
+  assertHomeInReach(file, kind, document) {
+    if (!getWriteReach()) return;
+    const raw = this.homeRootOf(file);
+    const owners = [];
+    if (document !== null) owners.push(this.documentOwner(raw, kind, document));
+    if (pathExists(file)) {
+      try {
+        owners.push(this.documentOwner(raw, kind, readSpecFile(file)));
+      } catch {
+      }
+    }
+    assertSpecWritesPermitted(owners, `writing ${kind} spec ${path21.basename(path21.dirname(file))}/${path21.basename(file)}`);
+  }
+  /** The project root a spec file is homed under: the root whose specs folder, or one of whose parts' folders, holds it (deepest wins). */
+  homeRootOf(file) {
+    this.scanAll();
+    let best;
+    let depth = -1;
+    for (const raw of this.cachedRawRoots) {
+      const homes = [aiPathsAt(raw.dir).specsDir(), ...raw.record.parts.map((p) => p.directory).filter((d) => d !== void 0)];
+      for (const home of homes) {
+        if (isWithin(home, file) && path21.resolve(home).length > depth) {
+          best = raw;
+          depth = path21.resolve(home).length;
+        }
+      }
+    }
+    if (!best) return { dir: this.rootDir, namespace: "", project: path21.basename(this.rootDir) };
+    return { dir: best.dir, namespace: best.record.namespace, project: idOf(best) ?? (best.record.namespace || path21.basename(best.dir)) };
+  }
+  /**
+   * The owner of one spec DOCUMENT as stored in its root (its references local
+   * to that root): a subsystem is its own, a component or type names its
+   * subsystem, an interface or implementation follows its component; the L0, a
+   * system-level type and a type group belong to no subsystem.
+   */
+  documentOwner(root, kind, document) {
+    const doc = document ?? {};
+    const local = (v) => typeof v === "string" && v ? splitNamespace(v).localId : null;
+    const key = (v) => typeof v === "string" && v ? keyIn(root.namespace, splitNamespace(v).localId) : null;
+    let subsystemId = null;
+    if (kind === "subsystem") subsystemId = local(doc.id);
+    else if (kind === "component" || kind === "type") subsystemId = local(doc.subsystem);
+    else if (kind === "interface") subsystemId = this.componentSubsystem(key(doc.component));
+    else if (kind === "implementation") {
+      const contract = key(doc.contract);
+      subsystemId = this.componentSubsystem(contract ? this.loadInterfaceSpec(contract)?.component ?? null : null);
+    }
+    return { root: root.dir, project: root.project, subsystemId };
+  }
+  /** The local id of a component's subsystem, by the component's key; null when no such component is stored. */
+  componentSubsystem(componentKey) {
+    if (!componentKey) return null;
+    const subsystem = this.loadComponentSpec(componentKey)?.subsystem;
+    return subsystem ? splitNamespace(subsystem).localId : null;
+  }
+  /**
+   * The owner of one IN-MEMORY spec (its references keys, as the loader binds
+   * them) — what a multi-spec write (a rename, a method move) judges before its
+   * first write. `staged` answers a spec the write itself creates.
+   */
+  specOwner(kind, spec, staged) {
+    this.scanAll();
+    const id = kind === "system" ? "" : String(spec?.id ?? "");
+    const namespace = (kind === "system" ? "" : this.ownerKeyOf(id)) ?? "";
+    const raw = this.cachedRawRoots.find((r) => r.record.namespace === namespace);
+    const root = raw ? { dir: raw.dir, project: idOf(raw) ?? (namespace || path21.basename(raw.dir)) } : { dir: this.rootDir, project: path21.basename(this.rootDir) };
+    const localOfKey = (v) => v ? splitNamespace(v).localId : null;
+    let subsystemId = null;
+    if (kind === "subsystem") subsystemId = localOfKey(id);
+    else if (kind === "component" || kind === "type") subsystemId = localOfKey(spec?.subsystem);
+    else if (kind === "interface") subsystemId = this.componentSubsystem(spec?.component ?? null);
+    else if (kind === "implementation" && spec?.contract) {
+      const component = this.loadInterfaceSpec(spec.contract)?.component ?? staged?.("interface", spec.contract)?.component ?? null;
+      subsystemId = this.componentSubsystem(component);
+    }
+    return { root: root.dir, project: root.project, subsystemId };
+  }
   /**
    * The key one spec file is approved under (stage 8): its path from the bound
    * root, POSIX — or, for a part's file, `members/<alias>/<path inside the
@@ -28637,13 +28996,15 @@ var SpecWorkspace = class {
     return approvalKeyIn(file, this.rootDir, this.cachedRoots[0]?.parts ?? []);
   }
   /** The file store's write, at a home the writer resolved — a part's folder included, a git part's refused. */
-  writeHome(file, document) {
+  writeHome(file, document, kind) {
     this.assertHomeWritable(file);
+    this.assertHomeInReach(file, kind, document);
     writeSpecFile(file, document);
   }
   /** The file store's delete, pruning up to the specs folder the file lives in (its part's, for a part's file). */
-  removeHome(file) {
+  removeHome(file, kind) {
     this.assertHomeWritable(file);
+    this.assertHomeInReach(file, kind, null);
     const part = this.partHolding(file)?.part;
     return removeSpecFile(file, part?.directory ? aiPathsAt(part.directory).specsDir() : this.paths.specsDir());
   }
@@ -28994,6 +29355,7 @@ var SpecWorkspace = class {
   }
   saveSystemSpec(spec) {
     const p = this.paths.specsSystem();
+    this.assertHomeInReach(p, "system", spec);
     ensureDir(path21.dirname(p));
     writeSpecFile(p, parseOrThrow(SystemSpecSchema, spec, "system", spec.name));
     invalidateSpecCache();
@@ -29144,12 +29506,12 @@ var SpecWorkspace = class {
       }
     }
     specToWrite.updatedAt = opts?.preserveUpdatedAt && existing?.updatedAt ? existing.updatedAt : (/* @__PURE__ */ new Date()).toISOString();
-    this.writeHome(p, parseOrThrow(SubsystemSpecSchema, specToWrite, "subsystem", spec.id));
+    this.writeHome(p, parseOrThrow(SubsystemSpecSchema, specToWrite, "subsystem", spec.id), "subsystem");
     invalidateSpecCache();
   }
   deleteSubsystemSpec(id) {
     const p = this.getSubsystemPath(id);
-    if (!this.removeHome(p)) return false;
+    if (!this.removeHome(p, "subsystem")) return false;
     invalidateSpecCache();
     return true;
   }
@@ -29204,14 +29566,14 @@ var SpecWorkspace = class {
       );
     }
     specToWrite.updatedAt = opts?.preserveUpdatedAt && existing?.updatedAt ? existing.updatedAt : (/* @__PURE__ */ new Date()).toISOString();
-    this.writeHome(p, parseOrThrow(ComponentSpecSchema, specToWrite, "component", spec.id));
+    this.writeHome(p, parseOrThrow(ComponentSpecSchema, specToWrite, "component", spec.id), "component");
     invalidateSpecCache();
     this.normalizeComponentLayout();
     return notices;
   }
   deleteComponentSpec(id) {
     const p = this.getComponentPath(id);
-    if (!this.removeHome(p)) return false;
+    if (!this.removeHome(p, "component")) return false;
     invalidateSpecCache();
     return true;
   }
@@ -29333,13 +29695,13 @@ var SpecWorkspace = class {
       }
     }
     specToWrite.updatedAt = opts?.preserveUpdatedAt && existing?.updatedAt ? existing.updatedAt : (/* @__PURE__ */ new Date()).toISOString();
-    this.writeHome(p, parseOrThrow(InterfaceSpecSchema, specToWrite, "interface", spec.id));
+    this.writeHome(p, parseOrThrow(InterfaceSpecSchema, specToWrite, "interface", spec.id), "interface");
     invalidateSpecCache();
     return notices;
   }
   deleteInterfaceSpec(id) {
     const p = this.getInterfacePath(id);
-    if (!this.removeHome(p)) return false;
+    if (!this.removeHome(p, "interface")) return false;
     invalidateSpecCache();
     return true;
   }
@@ -29389,13 +29751,13 @@ var SpecWorkspace = class {
       }
     }
     specToWrite.updatedAt = opts?.preserveUpdatedAt && existing?.updatedAt ? existing.updatedAt : (/* @__PURE__ */ new Date()).toISOString();
-    this.writeHome(p, parseOrThrow(ImplementationSpecSchema, specToWrite, "implementation", spec.id));
+    this.writeHome(p, parseOrThrow(ImplementationSpecSchema, specToWrite, "implementation", spec.id), "implementation");
     invalidateSpecCache();
     return notices;
   }
   deleteImplementationSpec(id) {
     const p = this.getImplementationPath(id);
-    if (!this.removeHome(p)) return false;
+    if (!this.removeHome(p, "implementation")) return false;
     invalidateSpecCache();
     return true;
   }
@@ -29441,14 +29803,14 @@ var SpecWorkspace = class {
       }
     }
     specToWrite.updatedAt = opts?.preserveUpdatedAt && existing?.updatedAt ? existing.updatedAt : (/* @__PURE__ */ new Date()).toISOString();
-    this.writeHome(p, parseOrThrow(TypeSpecSchema, specToWrite, "type", spec.id));
+    this.writeHome(p, parseOrThrow(TypeSpecSchema, specToWrite, "type", spec.id), "type");
     invalidateSpecCache();
     return notices;
   }
   deleteTypeSpec(id) {
     const spec = this.loadTypeSpec(id);
     const p = this.getTypePath(id, spec?.subsystem, spec?.group);
-    if (!this.removeHome(p)) return false;
+    if (!this.removeHome(p, "type")) return false;
     invalidateSpecCache();
     return true;
   }
@@ -29471,12 +29833,12 @@ var SpecWorkspace = class {
       specToWrite.createdAt = existing.createdAt;
     }
     specToWrite.updatedAt = opts?.preserveUpdatedAt && existing?.updatedAt ? existing.updatedAt : (/* @__PURE__ */ new Date()).toISOString();
-    this.writeHome(p, parseOrThrow(GroupSpecSchema, specToWrite, "group", spec.id));
+    this.writeHome(p, parseOrThrow(GroupSpecSchema, specToWrite, "group", spec.id), "group");
     invalidateSpecCache();
   }
   deleteGroupSpec(id) {
     const p = this.getGroupPath(id);
-    if (!this.removeHome(p)) return false;
+    if (!this.removeHome(p, "group")) return false;
     invalidateSpecCache();
     return true;
   }
@@ -29674,7 +30036,7 @@ var SpecWorkspace = class {
       );
     }
     if (JSON.stringify(document) === JSON.stringify(stored)) return false;
-    this.writeHome(file, document);
+    this.writeHome(file, document, kind);
     invalidateSpecCache();
     return true;
   }
@@ -30588,6 +30950,7 @@ var SpecWorkspace = class {
       }
     }
     const carried = projectConfigRepository.rekeyCarried(rename, true);
+    this.assertMoveInReach(from, to, plan6, carried.length > 0);
     if (dryRun) {
       const edits2 = moveChangeReports([...plan6.edits.values()], true);
       return {
@@ -30627,6 +30990,14 @@ var SpecWorkspace = class {
       carried
     };
   }
+  /** Refuse a method move, naming every subsystem it may not change, before anything is written. */
+  assertMoveInReach(from, to, plan6, rekeysRegister) {
+    if (!getWriteReach()) return;
+    const staged = (kind, id) => plan6.edits.get(`${kind}:${id}`)?.after;
+    const owners = [...plan6.edits.values()].flatMap((e) => [e.before, e.after].filter((s) => s !== null && s !== void 0).map((s) => this.specOwner(e.kind, s, staged)));
+    if (rekeysRegister) owners.push(this.specOwner("system", null));
+    assertSpecWritesPermitted(owners, `moving methods from "${from}" to "${to}"`);
+  }
   /**
    * Rekey every lint allow keyed on a moved method, staging each spec it
    * changes like any other reference the move follows. An allow anchored at a
@@ -31357,6 +31728,14 @@ function normalizeReferences(kind, id) {
 function rewriteReferences(kind, id, edits) {
   return current().respellReferences(kind, id, edits);
 }
+function assertSpecsInReach(targets, what, projectRung = false) {
+  if (!getWriteReach()) return;
+  const ws = current();
+  const writable = ["system", "subsystem", "component", "interface", "implementation", "type"];
+  const owners = targets.map((t) => ws.specOwner(t.kind, t.kind === "system" ? null : (writable.includes(t.kind) ? ws.load(t.kind, t.id) : null) ?? { id: t.id }));
+  if (projectRung) owners.push(ws.specOwner("system", null));
+  assertSpecWritesPermitted(owners, what);
+}
 function moveMethods(from, to, methods, hooks, dryRun) {
   return current().moveMethods(from, to, methods, hooks, dryRun);
 }
@@ -32922,7 +33301,7 @@ function restateReExports(from, to) {
     publicInterfaces: entries.map((e) => e.from === from ? { ...e, from: to } : e)
   });
 }
-function rewriteRefFields(specsDir, remap, excludeDir) {
+function rewriteRefFields(specsDir, remap, excludeDir, dryRun = false) {
   const rewritten = [];
   for (const file of listFilesRecursive(specsDir, ".yaml")) {
     if (excludeDir && isWithinDir2(excludeDir, file)) continue;
@@ -32935,12 +33314,12 @@ function rewriteRefFields(specsDir, remap, excludeDir) {
     if (!raw || typeof raw !== "object") continue;
     const kind = specKind(raw);
     if (!rewriteSpecRefs(raw, remap) || !kind) continue;
-    writeYamlFile(file, raw);
+    if (!dryRun) writeYamlFile(file, raw);
     rewritten.push({ kind, id: kind === "system" ? "system" : String(raw.id) });
   }
   return rewritten;
 }
-function rekeyLintAllows(specsDir, rename) {
+function rekeyLintAllows(specsDir, rename, dryRun = false) {
   const rewritten = [];
   for (const file of listFilesRecursive(specsDir, ".yaml")) {
     let raw;
@@ -32971,7 +33350,7 @@ function rekeyLintAllows(specsDir, rename) {
       }
     }
     if (!changed) continue;
-    writeYamlFile(file, raw);
+    if (!dryRun) writeYamlFile(file, raw);
     rewritten.push({ kind, id: specId });
   }
   return rewritten;
@@ -33049,15 +33428,22 @@ function renameComponent(componentId, newId) {
     specs: renamed.map(({ from, to }) => ({ from, to })),
     components: [{ from: componentId, to: newId }]
   };
-  projectConfigRepository.rekeyCarried(rename, true);
-  const rewrittenRefs = rewriteRefFields(aiPathsAt(getProjectRoot()).specsDir(), (ref, position) => {
+  const registerEdits = projectConfigRepository.rekeyCarried(rename, true);
+  const remap = (ref, position) => {
     if (position === "component" || position === "entity-class" || position === "auth-source") {
       return ref === componentId ? newId : ref;
     }
     if (position === "interface" && ref === movingInterface?.id) return interfaceId;
     return ref;
-  });
-  const allowsRekeyed = rekeyLintAllows(aiPathsAt(getProjectRoot()).specsDir(), rename);
+  };
+  const specsDir = aiPathsAt(getProjectRoot()).specsDir();
+  assertSpecsInReach(
+    [...renamed.map(({ kind, from }) => ({ kind, id: from })), ...rewriteRefFields(specsDir, remap, void 0, true), ...rekeyLintAllows(specsDir, rename, true)],
+    `renaming component "${componentId}"`,
+    Array.isArray(registerEdits) && registerEdits.length > 0
+  );
+  const rewrittenRefs = rewriteRefFields(specsDir, remap);
+  const allowsRekeyed = rekeyLintAllows(specsDir, rename);
   const rewritten = [...new Set([...rewrittenRefs, ...allowsRekeyed].filter((spec) => !renamed.some((moved) => moved.kind === spec.kind && moved.from === spec.id)).map((spec) => spec.id))];
   invalidateSpecCache();
   moveRenamedSpecs(componentId, newId, component, movingInterface, movingImplementation);
@@ -33147,7 +33533,18 @@ function renameMethod(componentId, methodName, newName, pinSymbol) {
       ]
     }]
   };
-  projectConfigRepository.rekeyCarried(rename, true);
+  const registerEdits = projectConfigRepository.rekeyCarried(rename, true);
+  const methodRemap = (ref, position, owner) => position === "method" && owner === componentId && ref === methodName ? newName : ref;
+  const reachDir = aiPathsAt(getProjectRoot()).specsDir();
+  assertSpecsInReach(
+    [
+      ...(rename.methods?.[0]?.specs ?? []).map((id) => ({ kind: moving.some((i) => i.id === id) ? "interface" : "implementation", id })),
+      ...rewriteRefFields(reachDir, methodRemap, void 0, true),
+      ...rekeyLintAllows(reachDir, rename, true)
+    ],
+    `renaming method "${componentId}.${methodName}"`,
+    Array.isArray(registerEdits) && registerEdits.length > 0
+  );
   for (const contract of moving) {
     saveInterfaceSpec({
       ...contract,
@@ -33170,7 +33567,7 @@ function renameMethod(componentId, methodName, newName, pinSymbol) {
   }
   invalidateSpecCache();
   const specsDir = aiPathsAt(getProjectRoot()).specsDir();
-  const retargeted = rewriteRefFields(specsDir, (ref, position, owner) => position === "method" && owner === componentId && ref === methodName ? newName : ref);
+  const retargeted = rewriteRefFields(specsDir, methodRemap);
   const allowsRekeyed = rekeyLintAllows(specsDir, rename);
   const rewritten = [...new Set([...retargeted, ...allowsRekeyed].map((spec) => spec.id))];
   const mentions = collectMentions(specsDir, methodName, moving);
@@ -39209,10 +39606,13 @@ function rehearse2(plan6) {
     return { ...plan6, refusals: [...plan6.refusals, { code: `${plan6.request.verb}-refused`, project: "", detail }] };
   }
   const changes = diff(rehearsal);
-  const outside = unwritableOwners(changes);
-  if (outside.length > 0) {
+  const refused2 = [
+    ...unwritableOwners(changes).map((o) => ({ code: "family-partial", project: o, detail: `the plan must write ${o}, which this request may not write` })),
+    ...deniedSubsystems(changes)
+  ];
+  if (refused2.length > 0) {
     discard(rehearsal);
-    return { ...plan6, refusals: [...plan6.refusals, ...outside.map((o) => ({ code: "family-partial", project: o, detail: `the plan must write ${o}, which this request may not write` }))] };
+    return { ...plan6, refusals: [...plan6.refusals, ...refused2] };
   }
   return { ...plan6, rehearsal, changes, relock: relockOf(plan6, changes) };
 }
@@ -39256,6 +39656,16 @@ function unwritableOwners(changes) {
   const owners = [...new Set(changes.map((c) => path47.resolve(c.project)))];
   return owners.filter((o) => denied.includes(o));
 }
+function deniedSubsystems(changes) {
+  const reach2 = getWriteReach();
+  if (!reach2) return [];
+  const owners = [...new Set(changes.map((c) => path47.resolve(c.project)))];
+  return owners.flatMap((o) => writeReachDenials(reach2, o).map((s) => ({
+    code: "subsystem-denied",
+    project: o,
+    detail: `the plan must change ${o}, which holds subsystem "${s.subsystemId}" this request may not change (decided by ${s.decidedBy}); a family migration reshapes its projects whole, so it needs write on every subsystem of every project it changes`
+  })));
+}
 function pathProducers(plan6, family) {
   const inside = (dir) => {
     const rel2 = path47.relative(plan6.familyRoot, dir);
@@ -39525,7 +39935,10 @@ var externalStatusesOutput = {
     stale: import_zod11.z.boolean(),
     drifted: import_zod11.z.boolean().optional(),
     uses: import_zod11.z.array(import_zod11.z.record(import_zod11.z.unknown())),
-    detail: import_zod11.z.string().optional()
+    detail: import_zod11.z.string().optional(),
+    outOfReach: import_zod11.z.boolean().optional(),
+    pinnedDigest: import_zod11.z.string().optional().describe("The content digest the lock recorded; provenance, never compared here."),
+    pinnedCommit: import_zod11.z.string().optional().describe("The producer commit the lock recorded, for one in another repository; provenance only.")
   })).describe("One status per declared external, in declaration order; EXTERNAL_CHECK_UNAVAILABLE marks what could not be compared."),
   ...staleServerOutput
 };
@@ -41613,6 +42026,7 @@ function loadProjectConfig3() {
   getRequestParentReach,
   getRequestProjectRoot,
   getStatusReport,
+  getWriteReach,
   globalGuideFilePath,
   globalPacksDir,
   globalPacksEnabled,
@@ -41717,6 +42131,7 @@ function loadProjectConfig3() {
   registerExporter,
   registerPackRef,
   reinjectLocalGuides,
+  relationHealth,
   removeDomain,
   removeExternal,
   removeMember,
@@ -41783,6 +42198,8 @@ function loadProjectConfig3() {
   writeFileIfChanged,
   writeJsonFile,
   writeLockRecord,
+  writeReachDenials,
+  writeReachPermits,
   writeRootGuideDelegator,
   writeYamlFile
 });