aontu 0.65.0 → 0.67.0

package/README.md

@@ -75,8 +75,11 @@ the same thing in a Node agent harness and a Go gateway.
 ## Documentation
 
 - [Documentation home](https://github.com/aontu-lang/aontu/blob/main/docs/index.md)
-- [Tutorial](https://github.com/aontu-lang/aontu/blob/main/docs/tutorial.md)
+- [Tutorials](https://github.com/aontu-lang/aontu/blob/main/docs/tutorial.md)
 - [Language reference](https://github.com/aontu-lang/aontu/blob/main/docs/reference-language.md)
+- [Generation reference](https://github.com/aontu-lang/aontu/blob/main/docs/reference-generation.md)
+- [Functions reference](https://github.com/aontu-lang/aontu/blob/main/docs/reference-functions.md)
+- [Error reference](https://github.com/aontu-lang/aontu/blob/main/docs/reference-errors.md)
 - [API and CLI reference](https://github.com/aontu-lang/aontu/blob/main/docs/reference-api.md)
 - [Agent skill](https://github.com/aontu-lang/aontu/blob/main/docs/skill/SKILL.md)
 

package/dist/allow.js

@@ -44,7 +44,7 @@ function readEntries(list, by, ctx) {
         const text = true === el.isString ? el.peg : el.gen(ctx);
         if (before < ctx.err.length) {
             const err = ctx.err[before];
-            return { entries, finding: finding(err.why, `${by}.${i}`, err.msg) };
+            return { entries, finding: (0, vet_1.engineFinding)(err, ctx, `${by}.${i}`) };
         }
         entries.push({ parts: (0, query_1.pathParts)(text), text, by: `${by}.${i}` });
     }
@@ -99,7 +99,7 @@ function allow(src, role, paths, opts) {
     }
     const root = aontu.unify(new ConjunctVal_1.ConjunctVal({ peg: [model, shape] }, ctx), undefined, ctx);
     if (0 < ctx.err.length || true === root.isNil) {
-        return errorReport(role, (0, query_1.evalFailure)(ctx));
+        return errorReport(role, (0, query_1.evalFailure)(ctx, root));
     }
     const roles = (0, vet_1.anchorAt)(root, at);
     const atRole = `${at}.${role}`;

package/dist/allow.js.map

@@ -1 +1 @@
-{"version":3,"file":"allow.js","sourceRoot":"","sources":["../src/allow.ts"],"names":[],"mappings":";AAAA,oDAAoD;;;;AAGpD,mCAA+B;AAC/B,mDAA+C;AAC/C,+BAAgC;AAEhC,mCAA4D;AAC5D,uCAAuC;AAIvC,0DAA0D;AAC7C,QAAA,QAAQ,GAAG,SAAS,CAAA;AAqCjC,MAAM,KAAK,GAAG,mCAAmC,CAAA;AAEjD,gEAAgE;AAChE,wDAAwD;AACxD,MAAM,UAAU,GAAG,gBAAgB,KAAK,gBAAgB,KAAK,KAAK,CAAA;AAGlE,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,IAAI,GAAG,IAAA,iBAAS,EAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IACxD,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM;QACtB,CAAC,CAAC,KAAK,GAAG,UAAU;QACpB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,UAAU,GAAG,IAAI,CAAA;AACrD,CAAC;AAGD,sEAAsE;AACtE,8CAA8C;AAC9C,SAAS,QAAQ,CAAC,KAAe;IAC/B,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AAC9D,CAAC;AAGD,SAAS,OAAO,CACd,IAAY,EAAE,IAAY,EAAE,OAAe,EAAE,IAAa;IAC1D,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,OAAO;QACjB,IAAI;QACJ,OAAO;QACP,KAAK,EAAE,EAAE;QACT,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KAClC,CAAA;AACH,CAAC;AAUD,SAAS,WAAW,CAClB,IAAS,EAAE,EAAU,EAAE,GAAQ;IAE/B,MAAM,OAAO,GAAY,EAAE,CAAA;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,EAAE,GAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAA;QAC7B,MAAM,IAAI,GAAW,IAAI,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAChE,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAQ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAChC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAA;QACtE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAA,iBAAS,EAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC;AAGD,qEAAqE;AACrE,yCAAyC;AACzC,SAAS,cAAc,CAAC,OAAe,EAAE,OAAe;IACtD,OAAO,GAAG,KAAK,OAAO,IAAI,OAAO,KAAK,OAAO,CAAA;AAC/C,CAAC;AAGD,SAAS,UAAU,CAAC,KAAe,EAAE,IAAc;IACjD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAGD,SAAS,MAAM,CAAC,KAAe,EAAE,IAAc;IAC7C,OAAO,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;AAC/D,CAAC;AAGD,SAAS,MAAM,CAAC,KAAa,EAAE,MAAe,EAAE,MAAe;IAC7D,MAAM,KAAK,GAAG,IAAA,iBAAS,EAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5E,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AACtD,CAAC;AAGD,SAAS,WAAW,CAAC,IAAY,EAAE,CAAa;IAC9C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7D,CAAC;AAGD,mEAAmE;AACnE,eACE,GAAW,EAAE,IAAY,EAAE,KAAe,EAAE,IAAmB;IAE/D,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAA;IAC1B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAA,iBAAS,EAAC,OAAO,CAAC,EAAE,IAAI,QAAA,QAAQ,CAAC,CAAC,CAAA;IAEtD,MAAM,KAAK,GAAG,IAAI,aAAK,CAAC,IAAA,qBAAW,EAAC,OAAO,CAAC,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAA;IAE3E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,IAAI,EAAE,IAAA,mBAAW,EAAC,GAAG,CAAC,CAAC,CAAA;IAC5C,CAAC;IACD,MAAM,IAAI,GAAQ,KAAK,CAAC,KAAK,CAC3B,IAAI,yBAAW,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAChE,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9C,OAAO,WAAW,CAAC,IAAI,EAAE,IAAA,mBAAW,EAAC,GAAG,CAAC,CAAC,CAAA;IAC5C,CAAC;IAED,MAAM,KAAK,GAAQ,IAAA,cAAQ,EAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,GAAG,EAAE,IAAI,IAAI,EAAE,CAAA;IAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAA,kBAAU,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QACrD,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,IAAI;YACJ,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,IAAI,EAAE,QAAQ,CAAC,IAAA,iBAAS,EAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS;aAChE,CAAC,CAAC;YACH,QAAQ,EAAE,CAAC,OAAO,CAChB,SAAS,EACT,MAAM,EACN,YAAY,IAAI,uBAAuB,EAAE,oBAAoB,EAC7D,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;SACvD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAQ,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAEjC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,MAAM,QAAQ,EAAE,GAAG,CAAC,CAAA;IAClE,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,MAAM,OAAO,EAAE,GAAG,CAAC,CAAA;IAChE,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAE7E,mEAAmE;IACnE,2DAA2D;IAC3D,qBAAqB;IACrB,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAEzE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACxC,IAAI;QACJ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,EAAE;KACb,CAAA;AACH,CAAC"}
+{"version":3,"file":"allow.js","sourceRoot":"","sources":["../src/allow.ts"],"names":[],"mappings":";AAAA,oDAAoD;;;;AAGpD,mCAA+B;AAC/B,mDAA+C;AAC/C,+BAA+C;AAE/C,mCAA4D;AAC5D,uCAAuC;AAIvC,0DAA0D;AAC7C,QAAA,QAAQ,GAAG,SAAS,CAAA;AAqCjC,MAAM,KAAK,GAAG,mCAAmC,CAAA;AAEjD,gEAAgE;AAChE,wDAAwD;AACxD,MAAM,UAAU,GAAG,gBAAgB,KAAK,gBAAgB,KAAK,KAAK,CAAA;AAGlE,SAAS,WAAW,CAAC,EAAU;IAC7B,MAAM,IAAI,GAAG,IAAA,iBAAS,EAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IACxD,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM;QACtB,CAAC,CAAC,KAAK,GAAG,UAAU;QACpB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,UAAU,GAAG,IAAI,CAAA;AACrD,CAAC;AAGD,sEAAsE;AACtE,8CAA8C;AAC9C,SAAS,QAAQ,CAAC,KAAe;IAC/B,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AAC9D,CAAC;AAGD,SAAS,OAAO,CACd,IAAY,EAAE,IAAY,EAAE,OAAe,EAAE,IAAa;IAC1D,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,OAAO;QACjB,IAAI;QACJ,OAAO;QACP,KAAK,EAAE,EAAE;QACT,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;KAClC,CAAA;AACH,CAAC;AAUD,SAAS,WAAW,CAClB,IAAS,EAAE,EAAU,EAAE,GAAQ;IAE/B,MAAM,OAAO,GAAY,EAAE,CAAA;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,EAAE,GAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAA;QAC7B,MAAM,IAAI,GAAW,IAAI,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAChE,IAAI,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAQ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAChC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAA,mBAAa,EAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;QACpE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAA,iBAAS,EAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC;AAGD,qEAAqE;AACrE,yCAAyC;AACzC,SAAS,cAAc,CAAC,OAAe,EAAE,OAAe;IACtD,OAAO,GAAG,KAAK,OAAO,IAAI,OAAO,KAAK,OAAO,CAAA;AAC/C,CAAC;AAGD,SAAS,UAAU,CAAC,KAAe,EAAE,IAAc;IACjD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAGD,SAAS,MAAM,CAAC,KAAe,EAAE,IAAc;IAC7C,OAAO,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;AAC/D,CAAC;AAGD,SAAS,MAAM,CAAC,KAAa,EAAE,MAAe,EAAE,MAAe;IAC7D,MAAM,KAAK,GAAG,IAAA,iBAAS,EAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE5B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5E,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AACtD,CAAC;AAGD,SAAS,WAAW,CAAC,IAAY,EAAE,CAAa;IAC9C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7D,CAAC;AAGD,mEAAmE;AACnE,eACE,GAAW,EAAE,IAAY,EAAE,KAAe,EAAE,IAAmB;IAE/D,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAA;IAC1B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAA,iBAAS,EAAC,OAAO,CAAC,EAAE,IAAI,QAAA,QAAQ,CAAC,CAAC,CAAA;IAEtD,MAAM,KAAK,GAAG,IAAI,aAAK,CAAC,IAAA,qBAAW,EAAC,OAAO,CAAC,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,MAAM,SAAS,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAA;IAE3E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAC9C,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,IAAI,EAAE,IAAA,mBAAW,EAAC,GAAG,CAAC,CAAC,CAAA;IAC5C,CAAC;IACD,MAAM,IAAI,GAAQ,KAAK,CAAC,KAAK,CAC3B,IAAI,yBAAW,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAChE,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9C,OAAO,WAAW,CAAC,IAAI,EAAE,IAAA,mBAAW,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,MAAM,KAAK,GAAQ,IAAA,cAAQ,EAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IACrC,MAAM,MAAM,GAAG,GAAG,EAAE,IAAI,IAAI,EAAE,CAAA;IAC9B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAA,kBAAU,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAA;QACrD,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,IAAI;YACJ,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvB,IAAI,EAAE,QAAQ,CAAC,IAAA,iBAAS,EAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS;aAChE,CAAC,CAAC;YACH,QAAQ,EAAE,CAAC,OAAO,CAChB,SAAS,EACT,MAAM,EACN,YAAY,IAAI,uBAAuB,EAAE,oBAAoB,EAC7D,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;SACvD,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAQ,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAEjC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,MAAM,QAAQ,EAAE,GAAG,CAAC,CAAA;IAClE,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,MAAM,OAAO,EAAE,GAAG,CAAC,CAAA;IAChE,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC1C,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAE7E,mEAAmE;IACnE,2DAA2D;IAC3D,qBAAqB;IACrB,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAEzE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACxC,IAAI;QACJ,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,EAAE;KACb,CAAA;AACH,CAAC"}

package/dist/aontu.d.ts

@@ -23,7 +23,7 @@ import { loadProfile } from './profile';
 import { desugarTemplate, resugarTemplate, markerFor } from './template';
 import { format, unifiedDiff } from './format';
 export type { LintFinding, FormatReport, FormatOptions } from './format';
-declare const VERSION = "0.65.0";
+declare const VERSION = "0.67.0";
 declare class Aontu {
     opts: AontuOptions;
     lang: Lang;

package/dist/aontu.js

@@ -58,7 +58,7 @@ Object.defineProperty(exports, "markerFor", { enumerable: true, get: function ()
 const format_1 = require("./format");
 Object.defineProperty(exports, "format", { enumerable: true, get: function () { return format_1.format; } });
 Object.defineProperty(exports, "unifiedDiff", { enumerable: true, get: function () { return format_1.unifiedDiff; } });
-const VERSION = '0.65.0';
+const VERSION = '0.67.0';
 exports.VERSION = VERSION;
 function genQuiet(val, aontu) {
     return val.gen(aontu.ctx({ collect: true }));

package/dist/cli.d.ts

@@ -49,6 +49,8 @@ declare function runPackageVerb(verb: string, argv: string[], servers: Servers):
 declare function runModel(argv: string[]): number;
 declare function runRelations(argv: string[]): number;
 declare function runTrace(argv: string[]): number;
+declare function renderSkipped(folder: string, since: number): string[];
+declare function runRender(argv: string[]): Promise<number>;
 declare function runReaches(argv: string[]): number;
 declare function runView(argv: string[]): number;
 declare function runJsonSchema(argv: string[]): number;
@@ -80,4 +82,4 @@ declare const KNOWN_VERBS: string[];
 declare function looksLikeVerb(arg: string): boolean;
 declare function nearestVerb(word: string, verbs: string[]): string;
 declare function main(argv: string[], servers?: Servers): void;
-export { evalSource, main, runVet, runSubsume, runBreaking, runTrim, runRelations, runReaches, runView, runJsonSchema, runTemplate, runTrace, runPkg, runModel, runPackageVerb, pkgToolOptions, serveUntilInterrupted, runHash, runGet, runHelp, runExplain, runInit, nearestVerb, looksLikeVerb, KNOWN_VERBS, runWhy, renderWhyText, runSet, runAllow, runAgentsMd, runFmt, watchChange, watchSignature, vetWaiter, deprecatedAt, };
+export { evalSource, main, runVet, runSubsume, runBreaking, runTrim, runRelations, runReaches, runView, runJsonSchema, runTemplate, runTrace, runRender, renderSkipped, runPkg, runModel, runPackageVerb, pkgToolOptions, serveUntilInterrupted, runHash, runGet, runHelp, runExplain, runInit, nearestVerb, looksLikeVerb, KNOWN_VERBS, runWhy, renderWhyText, runSet, runAllow, runAgentsMd, runFmt, watchChange, watchSignature, vetWaiter, deprecatedAt, };

package/dist/cli.js

@@ -15,6 +15,8 @@ exports.runView = runView;
 exports.runJsonSchema = runJsonSchema;
 exports.runTemplate = runTemplate;
 exports.runTrace = runTrace;
+exports.runRender = runRender;
+exports.renderSkipped = renderSkipped;
 exports.runPkg = runPkg;
 exports.runModel = runModel;
 exports.runPackageVerb = runPackageVerb;
@@ -76,6 +78,9 @@ const HELP = `Usage: aontu [options] [file]
                       [--profile <file>] <file>
        aontu trace [--at <path>] [--format json] [--marker <token>]
                    [--profile <file>] <file>
+       aontu render [--check] [--at <path>] [--format json]
+                    [--marker <token>] [--profile <file>]
+                    <file|folder> <path>
        aontu hash [options] <file>
        aontu sync [--frozen] [options] [dir]
        aontu add <pkg>[@<version>] [options] [dir]
@@ -140,22 +145,30 @@ query between a document and its own earlier versions.
 
 Options:
   -c, --canon     Print the canonical form instead of generated JSON
-  --format <f>    text (default) or json. The json form wraps the
-                  answer as {aontu, findings, ok, out}, so a failure
-                  here reads like every other verb's
+                  (the bare command's, as --jsonl is; model get has
+                  its own)
+  --format <f>    text (default) or json, on every verb that answers a
+                  report. The json form is one object opening with an
+                  aontu block; the bare command's carries findings, ok
+                  and out
   -h, --help      Show this help and exit (the verbs and their flags);
                   aontu help is the LANGUAGE, and lists its own topics
   --jsonl         REPL: answer every command as one JSON line
   -v, --version   Print the version and exit
-  --trust <t>     Include capability: system (default), none, or
-                  root[:dir] to confine @"..." below a directory.
-                  Every verb takes it too, and a bare root means the
-                  document's own directory
+  --trust <t>     Include capability: system, none, or root[:dir] to
+                  confine @"..." below a directory. A bare root means
+                  the entry root: the document's own directory, or the
+                  project's for the package verbs. Every verb takes it
+                  but help, explain, init and lsp, which read no
+                  document, and mcp, which is the npm build's server
+                  and confines with --root. Unset, a run behaves as
+                  system, and the bare command warns once for an
+                  include that leaves the entry root
   --include-root <dir>  Shorthand for --trust root:<dir>
-  --text-ext <e>  Read these extensions as text too, comma-separated
-                  and without dots (md,sql). .txt needs no flag; a
+  --text-ext <e>  Read these extensions as text too, comma-separated,
+                  with or without dots (md,sql). .txt needs no flag; a
                   named format keeps its meaning, and .js stays
-                  refused. Every verb takes it
+                  refused. The verbs that take --trust take it too
 
 Package verbs (a module is imported; a package is published):
   sync      Make the project correct: resolve by minimum version
@@ -390,6 +403,31 @@ every other line is a line of output.
 
 Template exit codes: 0 written, 1 --check drift, 2 usage or I/O.
 
+Render options:
+  --check         Compare what the generator writes with what <path>
+                  holds, write nothing, and exit 1 on drift
+  --at <path>     Where the component tree lives in the document
+                  (default $.out)
+  --format json   Print the files written, or the drift, as JSON
+  --marker <t>    The file is a generator, and this is its marker
+                  (default //-, and #- --- /*- <!--- by extension)
+  --profile <f>   A profile file, whose template.ext names the
+                  extensions it marks and template.marker the marker
+
+The render verb writes the component tree a generator answers. The
+tree is handed to jostraca, the generator runtime, which writes the
+files: a tree that is one file is written to <path> itself, unless
+<path> is a directory, and any other tree is written below <path>.
+With --check nothing is written and <path> is compared with what the
+generator writes, one "kind: file" line per difference.
+A folder as the generator is a set: every regular file directly in
+it, dotfiles aside, in name order, and their trees are written below
+<path> as one run, so a path two of them claim is refused. A file with
+no marker line in it is refused by name.
+
+Render exit codes: 0 written or clean, 1 --check drift, 2 usage or
+I/O, 4 the document does not stand up, or --at names nothing.
+
 Model set options:
   --entry <file>    The document the change is checked against
   --overlay <file>  The file the change is appended to (created if
@@ -624,7 +662,7 @@ function takeTrust(argv, io = PROCESS_IO) {
         }
         else if ('--include-root' === arg) {
             const dir = argv[++i];
-            if (null == dir) {
+            if (null == dir || '' === dir) {
                 io.err('aontu: --include-root needs a directory\n');
                 return undefined;
             }
@@ -2263,20 +2301,38 @@ function pkgNetText(verb, report) {
 }
 const MODEL_HELP = 'aontu model get|why|set ... (try --help)';
 // One document, interrogated or edited (ADR-039 part 5).
+// Where the subcommand is, past any global flag that precedes it.
+// `takeTrust` strips those anywhere in a tail, so the subcommand has
+// to be found past a flag AND past its value: in `--text-ext get` the
+// `get` is the extension list, not the subcommand.
+const MODEL_SUBS = ['get', 'why', 'set'];
+const GLOBAL_VALUED = ['--trust', '--include-root', '--text-ext'];
+function modelSubAt(argv) {
+    for (let i = 0; i < argv.length; i++) {
+        if (GLOBAL_VALUED.includes(argv[i])) {
+            i++;
+            continue;
+        }
+        return MODEL_SUBS.includes(argv[i]) ? i : -1;
+    }
+    return -1;
+}
 function runModel(argv) {
     const sub = argv[0];
     if ('-h' === sub || '--help' === sub) {
         process.stdout.write(HELP);
         return 0;
     }
-    if ('get' === sub) {
-        return runGet(argv.slice(1));
-    }
-    if ('why' === sub) {
-        return runWhy(argv.slice(1));
-    }
-    if ('set' === sub) {
-        return runSet(argv.slice(1));
+    const at = modelSubAt(argv);
+    if (0 <= at) {
+        const tail = argv.slice(0, at).concat(argv.slice(at + 1));
+        if ('get' === argv[at]) {
+            return runGet(tail);
+        }
+        if ('why' === argv[at]) {
+            return runWhy(tail);
+        }
+        return runSet(tail);
     }
     process.stderr.write(`aontu: model needs get, why or set\n${MODEL_HELP}\n`);
     return 2;
@@ -2446,6 +2502,268 @@ function runTrace(argv) {
     }
     return 0;
 }
+// ---------------------------------------------------------------------
+// The writer (ADR-040). A generator answers a component tree; this verb
+// hands it to jostraca, which writes the files below a path or holds
+// them to it.
+const RENDER_HELP = 'aontu render [--check] [--at <path>] [--format json] ' +
+    '[--marker <token>] [--profile <file>] <file|folder> <path> (try --help)';
+// Loaded at the call, so every other verb starts without it.
+function generatorRuntime() {
+    return require('jostraca');
+}
+function isDirectory(path) {
+    return true === (0, node_fs_1.statSync)(path, { throwIfNoEntry: false })?.isDirectory();
+}
+// A `File` the write path skips, RENAMED rather than removed: dropping
+// the node would take its children's claims with it and hide drift the
+// write path does make. The skip is the File's own save alone, so what
+// separates the runs is its output path, composed by the runtime rather
+// than here.
+const EXCLUDED_NAME = '.aontu-check-excluded-';
+// `exclude` as the runtime reads it: `true`, or a string or list member
+// equal to the node's COMPONENT path, the chain of `name` props above
+// it, which a Project's `folder` is not part of. The Go runtime honours
+// the boolean alone, so the ports' `--check` answers differ for the
+// path forms (test/spec/divergent.tsv).
+function excludedFile(exclude, at) {
+    if (true === exclude) {
+        return true;
+    }
+    const path = at.join('/');
+    if ('string' === typeof exclude) {
+        return exclude === path;
+    }
+    return Array.isArray(exclude) && exclude.includes(path);
+}
+function renameExcluded(node, at, cut) {
+    if (Array.isArray(node)) {
+        return node.map((child) => renameExcluded(child, at, cut));
+    }
+    // A hand-written tree carries nodes with no `props` and nodes with
+    // no `children`, and neither needs an arm of its own.
+    const props = node.props ?? {};
+    const below = 'string' === typeof props.name ? at.concat(props.name) : at;
+    if ('File' === node.cmp && excludedFile(props.exclude, below)) {
+        cut.push(1);
+        return { ...node, props: { ...props, name: EXCLUDED_NAME + cut.length } };
+    }
+    if (!Array.isArray(node.children)) {
+        return node;
+    }
+    return { ...node, children: renameExcluded(node.children, below, cut) };
+}
+// A file the runtime declined to touch, its copy on disk carrying the
+// protect marker, is in none of the lists it answers with: they hold
+// what was DONE to a file, and nothing was. The run's own record names
+// it. `since` drops what earlier runs left.
+function renderSkipped(folder, since) {
+    const at = (0, node_path_1.join)(folder, '.jostraca', 'jostraca.meta.log');
+    let meta;
+    try {
+        meta = JSON.parse((0, node_fs_1.readFileSync)(at, 'utf8'));
+    }
+    catch (err) {
+        return [];
+    }
+    return Object.entries(meta?.files ?? {})
+        .filter(([_, f]) => 'skip' === f?.action && since <= f?.when)
+        .map(([path]) => path)
+        .sort(keyorder_1.cmpCodePoint);
+}
+async function runRender(argv) {
+    const trusted = takeTrust(argv);
+    if (null == trusted) {
+        return 2;
+    }
+    argv = trusted.argv;
+    const trust = trusted.trust;
+    const rest = [];
+    const profileFiles = [];
+    let format = 'text';
+    let at = undefined;
+    let marker = undefined;
+    let check = false;
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if ('-h' === arg || '--help' === arg) {
+            process.stdout.write(HELP);
+            return 0;
+        }
+        if ('--check' === arg) {
+            check = true;
+        }
+        else if ('--format' === arg) {
+            const f = argv[++i];
+            if ('text' !== f && 'json' !== f) {
+                process.stderr.write('aontu: --format needs text or json\n');
+                return 2;
+            }
+            format = f;
+        }
+        else if ('--at' === arg) {
+            at = argv[++i];
+            if (null == at || '' === at) {
+                process.stderr.write('aontu: --at needs a path\n');
+                return 2;
+            }
+        }
+        else if ('--marker' === arg) {
+            marker = argv[++i];
+            if (null == marker || '' === marker) {
+                process.stderr.write('aontu: --marker needs a token\n');
+                return 2;
+            }
+        }
+        else if ('--profile' === arg) {
+            const pf = argv[++i];
+            if (null == pf || '' === pf) {
+                process.stderr.write('aontu: --profile needs a file\n');
+                return 2;
+            }
+            profileFiles.push(pf);
+        }
+        else if (arg.startsWith('-')) {
+            process.stderr.write(`aontu: unknown render option ${arg} (try --help)\n`);
+            return 2;
+        }
+        else {
+            rest.push(arg);
+        }
+    }
+    if (2 !== rest.length) {
+        process.stderr.write(`aontu: render needs a file and a path\n${RENDER_HELP}\n`);
+        return 2;
+    }
+    const [file, dest] = rest;
+    const declared = loadProfiles(profileFiles, trust);
+    if ('number' === typeof declared) {
+        return declared;
+    }
+    // A FOLDER IS A SET OF GENERATORS: every regular file directly in it,
+    // dotfiles aside, in code-point order, written as one tree.
+    let entries;
+    try {
+        entries = (0, node_fs_1.readdirSync)(file, { withFileTypes: true });
+    }
+    catch (err) {
+        entries = undefined;
+    }
+    const set = undefined !== entries;
+    const files = undefined === entries ? [file] :
+        entries.filter((e) => e.isFile() && !e.name.startsWith('.'))
+            .map((e) => e.name).sort(keyorder_1.cmpCodePoint).map((n) => (0, node_path_1.join)(file, n));
+    if (0 === files.length) {
+        process.stderr.write(`aontu: ${file} holds no generator\n`);
+        return 2;
+    }
+    const trees = [];
+    for (const f of files) {
+        let src;
+        try {
+            src = (0, node_fs_1.readFileSync)(f, 'utf8');
+        }
+        catch (err) {
+            process.stderr.write(`aontu: cannot read ${err.path}: ${err.message}\n`);
+            return 2;
+        }
+        if (!/[.](aon|aontu)$/.test(f)) {
+            const mark = marker ?? (0, template_1.markerFromProfiles)(declared, f) ?? (0, template_1.markerFor)(f);
+            if (!(0, template_1.templateOutputs)(src, mark).some((out) => !out)) {
+                process.stderr.write(`aontu: ${f} carries no ${mark} marker line, ` +
+                    'so there is no aontu in it to render\n');
+                return 2;
+            }
+            src = (0, template_1.desugarTemplate)(src, mark);
+        }
+        const report = (0, aontu_1.get)(src, at ?? '$.out', {
+            view: 'json', path: f, ...verbOpts(trust, entryRootOf(f)),
+        });
+        if (!report.ok) {
+            process.stderr.write(report.findings.map(renderFinding).join('\n') + '\n');
+            return 4;
+        }
+        const tree = JSON.parse(report.out);
+        // A `File` without a name is refused: the runtime ports disagree
+        // about it.
+        if ('File' === tree?.cmp && 'string' !== typeof tree.props?.name) {
+            process.stderr.write(`aontu: ${f}: the file at ${at ?? '$.out'} has no name\n`);
+            return 4;
+        }
+        trees.push(tree);
+    }
+    // ONE FILE GOES TO THE PATH ITSELF, unless the path is a directory; a
+    // set is written below the path whatever its trees are.
+    let folder = dest;
+    const tree = set ? trees.flatMap((t) => Array.isArray(t) ? t : [t]) : trees[0];
+    if (!set && 'File' === tree?.cmp && !isDirectory(dest)) {
+        tree.props.name = (0, node_path_1.basename)(dest);
+        folder = (0, node_path_1.dirname)(dest);
+    }
+    const { cmpTree, Jostraca } = generatorRuntime();
+    let root;
+    try {
+        root = cmpTree(tree, { raw: true });
+    }
+    catch (err) {
+        process.stderr.write(`aontu: ${file}: ${err.message}\n`);
+        return 4;
+    }
+    const runtime = Jostraca();
+    try {
+        if (check) {
+            const res = await runtime.check({ folder }, root);
+            let drift = res.drift.map((d) => ({ kind: d.kind, path: d.path }));
+            // `--check` answers "would `render` change anything", so a file
+            // the write path leaves alone is not held to the generator's
+            // bytes. The skip is gated on the target BEING there -- `render`
+            // writes an absent one -- so drift at a path with nothing at it
+            // survives, which is the `missing` a deleted file reports.
+            const cut = [];
+            const renamed = renameExcluded(tree, [], cut);
+            if (0 < cut.length) {
+                const kept = new Set((await Jostraca().check({ folder }, cmpTree(renamed, { raw: true }))).checked);
+                const skipped = new Set(res.checked.filter((p) => !kept.has(p)));
+                drift = drift.filter((d) => !skipped.has(d.path) ||
+                    !(0, node_fs_1.existsSync)((0, node_path_1.join)(folder, d.path)));
+            }
+            if ('json' === format) {
+                process.stdout.write((0, aontu_1.exactJSON)({
+                    aontu: { version: version(), verb: 'render' },
+                    verdict: 0 === drift.length ? 'ok' : 'drift',
+                    checked: res.checked,
+                    drift,
+                }, 2) + '\n');
+            }
+            else {
+                for (const d of drift) {
+                    process.stdout.write(`${d.kind}: ${d.path}\n`);
+                }
+            }
+            return 0 === drift.length ? 0 : 1;
+        }
+        const since = Date.now();
+        const res = await runtime.generate({ folder }, root);
+        const skipped = renderSkipped(folder, since);
+        if ('json' === format) {
+            process.stdout.write((0, aontu_1.exactJSON)({
+                aontu: { version: version(), verb: 'render' },
+                verdict: 'ok',
+                files: { ...res.files, skipped },
+            }, 2) + '\n');
+        }
+        else {
+            for (const path of skipped) {
+                process.stdout.write(`skipped: ${path}\n`);
+            }
+        }
+        return 0;
+    }
+    catch (err) {
+        process.stderr.write(`aontu: ${err.message}\n`);
+        return 2;
+    }
+}
 function runReaches(argv) {
     const trusted = takeTrust(argv);
     if (null == trusted) {
@@ -3172,7 +3490,7 @@ function runHash(argv) {
     const v = aontu.unify(src, { path: files[0] }, ctx);
     if (0 < ctx.err.length || true === v?.isNil) {
         process.stderr.write(`aontu: ${files[0]} does not evaluate on its own; nothing to hash\n` +
-            renderFinding((0, query_1.evalFailure)(ctx)) + '\n');
+            renderFinding((0, query_1.evalFailure)(ctx, v)) + '\n');
         return 4;
     }
     const text = 'json' === format
@@ -4191,8 +4509,8 @@ function runInit(argv) {
 const KNOWN_VERBS = [
     'add', 'agentsmd', 'allow', 'breaking', 'explain', 'fmt', 'get', 'hash',
     'help', 'init', 'jsonschema', 'lsp', 'mcp', 'model', 'pkg', 'publish',
-    'reaches', 'relations', 'remove', 'subsume', 'sync', 'template', 'trace',
-    'trim', 'vet', 'view', 'why',
+    'reaches', 'relations', 'remove', 'render', 'subsume', 'sync', 'template',
+    'trace', 'trim', 'vet', 'view', 'why',
 ];
 exports.KNOWN_VERBS = KNOWN_VERBS;
 // looksLikeVerb reports whether an unreadable argument was meant as a
@@ -4316,6 +4634,9 @@ function main(argv, servers = SERVERS) {
     if ('trace' === argv[2]) {
         return finish(runTrace(argv.slice(3)));
     }
+    if ('render' === argv[2]) {
+        return void runRender(argv.slice(3)).then(finish);
+    }
     if ('reaches' === argv[2]) {
         return finish(runReaches(argv.slice(3)));
     }
@@ -4366,7 +4687,7 @@ function main(argv, servers = SERVERS) {
         }
         else if ('--include-root' === arg) {
             const dir = args[++i];
-            if (null == dir) {
+            if (null == dir || '' === dir) {
                 process.stderr.write('aontu: --include-root needs a directory\n');
                 return finish(2);
             }