archctx 0.6.0 → 0.6.3

package/bin/archctx.mjs

@@ -1,38 +1,7 @@
 #!/usr/bin/env node
 // @bun
 import { createRequire } from "node:module";
-var __create = Object.create;
-var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-function __accessProp(key) {
-  return this[key];
-}
-var __toESMCache_node;
-var __toESMCache_esm;
-var __toESM = (mod, isNodeMode, target) => {
-  var canCache = mod != null && typeof mod === "object";
-  if (canCache) {
-    var cache = isNodeMode ? __toESMCache_node ??= new WeakMap : __toESMCache_esm ??= new WeakMap;
-    var cached = cache.get(mod);
-    if (cached)
-      return cached;
-  }
-  target = mod != null ? __create(__getProtoOf(mod)) : {};
-  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  if (mod && typeof mod === "object" || typeof mod === "function") {
-    for (let key of __getOwnPropNames(mod))
-      if (!__hasOwnProp.call(to, key))
-        __defProp(to, key, {
-          get: __accessProp.bind(mod, key),
-          enumerable: true
-        });
-  }
-  if (canCache)
-    cache.set(mod, to);
-  return to;
-};
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
 var __returnValue = (v) => v;
 function __exportSetter(name, newValue) {
@@ -1356,13 +1325,13 @@ function productVersionManifest() {
       sqliteMigrations: "0001_runtime_state..0012_explorer_projection_index",
       codeGraph: {
         packageName: "@colbymchenry/codegraph",
-        requiredVersion: "1.5.0",
+        requiredVersion: "1.6.1",
         adapter: "codegraph-cli"
       }
     }
   };
 }
-var ARCHCONTEXT_PRODUCT_NAME = "archctx", ARCHCONTEXT_PRODUCT_VERSION = "0.6.0", ARCHCONTEXT_PACKAGE_MANAGER = "bun@1.4.0", ARCHCONTEXT_NODE_RANGE = ">=22.22 <26", LOCAL_RUNTIME_RPC_SCHEMA_VERSION = "archcontext.runtime-rpc/v1", ARCHCONTEXT_SCHEMA_SET_VERSION = "2026-07-11.explorer-view-v2";
+var ARCHCONTEXT_PRODUCT_NAME = "archctx", ARCHCONTEXT_PRODUCT_VERSION = "0.6.3", ARCHCONTEXT_PACKAGE_MANAGER = "bun@1.4.0", ARCHCONTEXT_NODE_RANGE = ">=22.22 <26", LOCAL_RUNTIME_RPC_SCHEMA_VERSION = "archcontext.runtime-rpc/v1", ARCHCONTEXT_SCHEMA_SET_VERSION = "2026-07-11.explorer-view-v2";
 
 // packages/contracts/src/refactor.ts
 function refactorProposalDigest(proposal) {
@@ -2111,42 +2080,6 @@ var init_src = __esm(() => {
   init_validator();
 });
 
-// node_modules/.bun/@colbymchenry+codegraph@1.5.0/node_modules/@colbymchenry/codegraph/npm-sdk.js
-var require_npm_sdk = __commonJS(function(exports, module) {
-  var __dirname = "/Users/chris/Projects/arch-context-publish-0600/node_modules/.bun/@colbymchenry+codegraph@1.5.0/node_modules/@colbymchenry/codegraph";
-  var path = __require("path");
-  var os = __require("os");
-  var fs = __require("fs");
-  var target = process.platform + "-" + process.arch;
-  var pkg = "@colbymchenry/codegraph-" + target;
-  module.exports = __require(resolveLibrary());
-  function resolveLibrary() {
-    try {
-      return __require.resolve(pkg + "/lib/dist/index.js");
-    } catch (e) {}
-    var cached = cachedLibrary();
-    if (cached)
-      return cached;
-    throw new Error(`codegraph: the programmatic API is unavailable because the platform bundle
-` + "(" + pkg + `) is not installed.
-` + `The compiled library ships inside that per-platform optional dependency.
-` + `Fixes:
-` + `  - install from the official npm registry so the matching bundle is fetched:
-` + `      npm i @colbymchenry/codegraph --registry=https://registry.npmjs.org
-` + "  - or run the CLI once (e.g. `npx @colbymchenry/codegraph status`) to\n" + "    self-heal the bundle into ~/.codegraph, then require() will find it.");
-  }
-  function cachedLibrary() {
-    try {
-      var version = __require(path.join(__dirname, "package.json")).version;
-      var base = process.env.CODEGRAPH_INSTALL_DIR || path.join(os.homedir(), ".codegraph");
-      var lib = path.join(base, "bundles", target + "-" + version, "lib", "dist", "index.js");
-      if (fs.existsSync(lib))
-        return lib;
-    } catch (e) {}
-    return null;
-  }
-});
-
 // node_modules/.bun/yaml@2.9.1/node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS(function(exports) {
   var ALIAS = Symbol.for("yaml.alias");
@@ -11351,9 +11284,9 @@ class ControlPlane {
       rollback: "versioned-cloud-metadata-release"
     };
   }
-  rollbackChatGptRelease(version2) {
-    this.releaseRollbacks.push(version2);
-    return { rolledBack: true, version: version2 };
+  rollbackChatGptRelease(version) {
+    this.releaseRollbacks.push(version);
+    return { rolledBack: true, version };
   }
   redactLog(value) {
     return value.replace(/(access|refresh|secret|token)_[a-zA-Z0-9_-]+/g, "[REDACTED]");
@@ -13550,11 +13483,10 @@ function withLocalEgress2(channel, operation, env = process.env) {
 }
 
 // packages/local-runtime/codegraph-adapter/src/index.ts
-var import_codegraph = __toESM(require_npm_sdk(), 1);
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash as createHash5 } from "node:crypto";
 import { accessSync, closeSync as closeSync3, constants as fsConstants2, existsSync as existsSync6, openSync as openSync3, readFileSync as readFileSync7, readSync, realpathSync as realpathSync4, statSync as statSync3 } from "node:fs";
-import { createRequire as createRequire4 } from "node:module";
+import { createRequire as createRequire2 } from "node:module";
 import { basename as basename3, delimiter, dirname as dirname4, isAbsolute as isAbsolute4, join as join4, posix as posix2, resolve as resolve8 } from "node:path";
 
 // packages/core/architecture-delta/src/index.ts
@@ -15314,401 +15246,7 @@ function evaluateChangeSetPaths(root, paths, scope) {
 init_src();
 import { chmodSync as chmodSync2, closeSync, constants as fsConstants, fstatSync, fsyncSync, linkSync, mkdirSync as mkdirSync2, openSync, readFileSync as readFileSync3, renameSync, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname2, join as join3, resolve as resolve4 } from "node:path";
-
-// node_modules/.bun/koffi@3.1.6/node_modules/koffi/src/koffi/index.js
-import util from "node:util";
-import fs2 from "node:fs";
-import { createRequire as createRequire3 } from "node:module";
-import fs from "node:fs";
-
-// node_modules/.bun/koffi@3.1.6/node_modules/koffi/src/koffi/src/static.js
-import { createRequire as createRequire2 } from "node:module";
-var require2 = createRequire2(import.meta.url);
-function loadStatic(pkg) {
-  let native = null;
-  if (pkg == "linux-arm64") {
-    try {
-      native = require2("@koromix/koffi-linux-arm64");
-    } catch (err) {}
-  }
-  if (pkg == "linux-ia32") {
-    try {
-      native = require2("@koromix/koffi-linux-ia32");
-    } catch (err) {}
-  }
-  if (pkg == "linux-x64") {
-    try {
-      native = require2("@koromix/koffi-linux-x64");
-    } catch (err) {}
-  }
-  if (pkg == "linux-riscv64") {
-    try {
-      native = require2("@koromix/koffi-linux-riscv64");
-    } catch (err) {}
-  }
-  if (pkg == "freebsd-ia32") {
-    try {
-      native = require2("@koromix/koffi-freebsd-ia32");
-    } catch (err) {}
-  }
-  if (pkg == "freebsd-x64") {
-    try {
-      native = require2("@koromix/koffi-freebsd-x64");
-    } catch (err) {}
-  }
-  if (pkg == "freebsd-arm64") {
-    try {
-      native = require2("@koromix/koffi-freebsd-arm64");
-    } catch (err) {}
-  }
-  if (pkg == "openbsd-ia32") {
-    try {
-      native = require2("@koromix/koffi-openbsd-ia32");
-    } catch (err) {}
-  }
-  if (pkg == "openbsd-x64") {
-    try {
-      native = require2("@koromix/koffi-openbsd-x64");
-    } catch (err) {}
-  }
-  if (pkg == "win32-ia32") {
-    try {
-      native = require2("@koromix/koffi-win32-ia32");
-    } catch (err) {}
-  }
-  if (pkg == "win32-x64") {
-    try {
-      native = require2("@koromix/koffi-win32-x64");
-    } catch (err) {}
-  }
-  if (pkg == "win32-arm64") {
-    try {
-      native = require2("@koromix/koffi-win32-arm64");
-    } catch (err) {}
-  }
-  if (pkg == "darwin-x64") {
-    try {
-      native = require2("@koromix/koffi-darwin-x64");
-    } catch (err) {}
-  }
-  if (pkg == "darwin-arm64") {
-    try {
-      native = require2("@koromix/koffi-darwin-arm64");
-    } catch (err) {}
-  }
-  if (pkg == "linux-loong64") {
-    try {
-      native = require2("@koromix/koffi-linux-loong64");
-    } catch (err) {}
-  }
-  return native;
-}
-
-// node_modules/.bun/koffi@3.1.6/node_modules/koffi/src/koffi/index.js
-var __knownSymbol = (name, symbol) => (symbol = Symbol[name]) ? symbol : /* @__PURE__ */ Symbol.for("Symbol." + name);
-var __typeError = (msg) => {
-  throw TypeError(msg);
-};
-var __using = (stack, value, async) => {
-  if (value != null) {
-    if (typeof value !== "object" && typeof value !== "function")
-      __typeError("Object expected");
-    var dispose, inner;
-    if (async)
-      dispose = value[__knownSymbol("asyncDispose")];
-    if (dispose === undefined) {
-      dispose = value[__knownSymbol("dispose")];
-      if (async)
-        inner = dispose;
-    }
-    if (typeof dispose !== "function")
-      __typeError("Object not disposable");
-    if (inner)
-      dispose = function() {
-        try {
-          inner.call(this);
-        } catch (e) {
-          return Promise.reject(e);
-        }
-      };
-    stack.push([async, dispose, value]);
-  } else if (async) {
-    stack.push([async]);
-  }
-  return value;
-};
-var __callDispose = (stack, error, hasError) => {
-  var E = typeof SuppressedError === "function" ? SuppressedError : function(e, s, m, _) {
-    return _ = Error(m), _.name = "SuppressedError", _.error = e, _.suppressed = s, _;
-  };
-  var fail = (e) => error = hasError ? new E(e, error, "An error was suppressed during disposal") : (hasError = true, e);
-  var next = (it) => {
-    while (it = stack.pop()) {
-      try {
-        var result = it[1] && it[1].call(it[2]);
-        if (it[0])
-          return Promise.resolve(result).then(next, (e) => (fail(e), next()));
-      } catch (e) {
-        fail(e);
-      }
-    }
-    if (hasError)
-      throw error;
-  };
-  return next();
-};
-function determineAbi() {
-  let abi = process.arch.toString();
-  if (abi == "riscv32" || abi == "riscv64") {
-    var _stack = [];
-    try {
-      const file = __using(_stack, openFile(process.execPath, "r"));
-      let header = readElfHeader(file);
-      let float_abi = header.e_flags & 6;
-      switch (float_abi) {
-        case 0:
-          {}
-          break;
-        case 2:
-          {
-            abi += "f";
-          }
-          break;
-        case 4:
-          {
-            abi += "d";
-          }
-          break;
-        case 6:
-          {
-            abi += "q";
-          }
-          break;
-      }
-    } catch (_) {
-      var _error = _, _hasError = true;
-    } finally {
-      __callDispose(_stack, _error, _hasError);
-    }
-  } else if (abi == "arm") {
-    var _stack2 = [];
-    try {
-      const file = __using(_stack2, openFile(process.execPath, "r"));
-      let header = readElfHeader(file);
-      if (header.e_flags & 1024) {
-        abi += "hf";
-      } else if (header.e_flags & 512) {
-        abi += "sf";
-      } else {
-        throw new Error("Unknown ARM floating-point ABI");
-      }
-    } catch (_2) {
-      var _error2 = _2, _hasError2 = true;
-    } finally {
-      __callDispose(_stack2, _error2, _hasError2);
-    }
-  }
-  return abi;
-}
-function readElfHeader(file, offset = 0) {
-  let buf = file.read(offset, 512);
-  if (buf.length < 16)
-    throw new Error("Truncated header");
-  if (buf[0] != 127 || buf[1] != 69 || buf[2] != 76 || buf[3] != 70)
-    throw new Error("Invalid magic number");
-  if (buf[6] != 1)
-    throw new Error("Invalid ELF version");
-  if (buf[5] != 1)
-    throw new Error("Big-endian architectures are not supported");
-  switch (buf[4]) {
-    case 1:
-      {
-        if (buf.length < 68)
-          throw new Error("Truncated ELF header");
-        return {
-          ei_class: 32,
-          e_machine: buf.readUInt16LE(18),
-          e_flags: buf.readUInt32LE(36),
-          e_phoff: buf.readUInt32LE(28),
-          e_phentsize: buf.readUInt16LE(42),
-          e_phnum: buf.readUInt16LE(44)
-        };
-      }
-      break;
-    case 2:
-      {
-        if (buf.length < 120)
-          throw new Error("Truncated ELF header");
-        return {
-          ei_class: 64,
-          e_machine: buf.readUInt16LE(18),
-          e_flags: buf.readUInt32LE(48),
-          e_phoff: buf.readBigUInt64LE(32),
-          e_phentsize: buf.readUInt16LE(54),
-          e_phnum: buf.readUInt16LE(56)
-        };
-      }
-      break;
-    default:
-      throw new Error("Invalid ELF class");
-  }
-}
-function openFile(filename, flags) {
-  let fd = fs.openSync(filename, flags);
-  return new FileHandle(fd);
-}
-var FileHandle = class {
-  constructor(fd) {
-    this.fd = fd;
-  }
-  close() {
-    fs.closeSync(this.fd);
-  }
-  [Symbol.dispose]() {
-    fs.closeSync(this.fd);
-  }
-  read(offset, len) {
-    let buf = Buffer.allocUnsafe(len);
-    let read = fs.readSync(this.fd, buf, 0, len, offset);
-    return buf.subarray(0, read);
-  }
-};
-var package_default = { name: "koffi", version: "3.1.6", cnoke: { api: "../../vendor/node-api-headers", output: "../../bin/Koffi/{{ toolchain }}", node: 16, napi: 8 } };
-var require22 = createRequire3(import.meta.url);
-function detectPlatform() {
-  if (process.versions.napi == null || process.versions.napi < package_default.cnoke.napi) {
-    let major = parseInt(process.versions.node, 10);
-    throw new Error(`This engine is based on Node ${process.versions.node}, but ${package_default.name} does not support the Node ${major}.x branch (Node-API < ${package_default.cnoke.napi})`);
-  }
-  let abi = determineAbi();
-  let pkg2 = `${process.platform}-${process.arch}`;
-  let triplets2 = [`${process.platform}_${abi}`];
-  if (process.platform == "linux")
-    triplets2.push(`musl_${abi}`);
-  return [package_default.version, pkg2, triplets2];
-}
-function loadDynamic(dirname2, pkg2, triplets2) {
-  let suffix = "/../../build/koffi";
-  let root = dirname2 + suffix;
-  let roots = [root];
-  let native2 = null;
-  let err = null;
-  if (process["resourcesPath"] != null) {
-    let suffixes = [
-      "/koffi",
-      "/koffi/build",
-      "/node_modules/koffi/build"
-    ];
-    for (let suffix2 of suffixes)
-      roots.push(process["resourcesPath"] + suffix2);
-  }
-  let names = [
-    `${import.meta.dirname}/../../../@koromix/koffi-${pkg2}`,
-    ...triplets2.flatMap((triplet) => roots.map((dir) => `${dir}/${triplet}/koffi.node`))
-  ];
-  for (let name of names) {
-    if (!fs2.existsSync(name))
-      continue;
-    try {
-      native2 = require22(name);
-      break;
-    } catch (e) {
-      err ??= e;
-    }
-  }
-  if (native2 == null && err != null)
-    throw err;
-  return native2;
-}
-function wrapNative(native2, version2) {
-  if (native2 == null)
-    throw new Error("Cannot find the native Koffi module; did you bundle it correctly?");
-  if (native2.version != version2)
-    throw new Error("Mismatched native Koffi modules");
-  let load = native2.load;
-  let register = native2.register;
-  let introspect = native2.introspect ?? native2.type;
-  native2.sizeof = (spec) => introspect(spec).size;
-  native2.alignof = (spec) => introspect(spec).alignment;
-  native2.offsetof = (spec, name) => {
-    let info = introspect(spec);
-    if (info.primitive != "Record")
-      throw new TypeError("The offsetof() function can only be used with record types");
-    let member = info.members[name];
-    if (member == null)
-      throw new Error(`Record type ${info.name} does not have member '${name}'`);
-    return member.offset;
-  };
-  native2.register = (...args) => {
-    if (args.length >= 3 && typeof args[1] == "function") {
-      process.emitWarning("Using koffi.register() with a custom this value was deprecated in Koffi 2.17, use function.bind() instead", "DeprecationWarning", "KOFFI009");
-      args[1] = args[1].bind(args[0]);
-      args = args.slice(1);
-    }
-    return register(...args);
-  };
-  native2.load = (...args) => {
-    let lib = load(...args);
-    lib.cdecl = util.deprecate((...args2) => lib.func("__cdecl", ...args2), "The koffi.cdecl() function was deprecated in Koffi 2.7, use koffi.func(...) instead", "KOFFI003");
-    lib.stdcall = util.deprecate((...args2) => lib.func("__stdcall", ...args2), 'The koffi.stdcall() function was deprecated in Koffi 2.7, use koffi.func("__stdcall", ...) instead', "KOFFI004");
-    lib.fastcall = util.deprecate((...args2) => lib.func("__fastcall", ...args2), 'The koffi.fastcall() function was deprecated in Koffi 2.7, use koffi.func("__fastcall", ...) instead', "KOFFI005");
-    lib.thiscall = util.deprecate((...args2) => lib.func("__thiscall", ...args2), 'The koffi.thiscall() function was deprecated in Koffi 2.7, use koffi.func("__thiscall", ...) instead', "KOFFI006");
-    return lib;
-  };
-  if (native2.introspect == null) {
-    native2.resolve = util.deprecate(native2.type, "The koffi.resolve() function was deprecated in Koffi 3.0, use koffi.type() instead", "KOFFI007");
-    native2.introspect = util.deprecate(native2.type, "The koffi.introspect() function was deprecated in Koffi 3.0, use koffi.type() instead", "KOFFI008");
-  } else {
-    native2.resolve = native2.type;
-  }
-}
-var [version, pkg, triplets] = detectPlatform();
-var native = loadStatic(pkg) ?? loadDynamic(import.meta.dirname, pkg, triplets);
-wrapNative(native, version);
-var mod_LibraryHandle = native.LibraryHandle;
-var mod_TypeObject = native.TypeObject;
-var mod_Union = native.Union;
-var mod_address = native.address;
-var mod_alias = native.alias;
-var mod_alignof = native.alignof;
-var mod_alloc = native.alloc;
-var mod_array = native.array;
-var mod_as = native.as;
-var mod_call = native.call;
-var mod_config = native.config;
-var mod_decode = native.decode;
-var mod_disposable = native.disposable;
-var mod_encode = native.encode;
-var mod_enumeration = native.enumeration;
-var mod_errno = native.errno;
-var mod_extension = native.extension;
-var mod_free = native.free;
-var mod_in = native.in;
-var mod_inout = native.inout;
-var mod_introspect = native.introspect;
-var mod_load = native.load;
-var mod_node = native.node;
-var mod_offsetof = native.offsetof;
-var mod_opaque = native.opaque;
-var mod_os = native.os;
-var mod_out = native.out;
-var mod_pack = native.pack;
-var mod_pointer = native.pointer;
-var mod_proto = native.proto;
-var mod_register = native.register;
-var mod_reset = native.reset;
-var mod_resolve = native.resolve;
-var mod_sizeof = native.sizeof;
-var mod_stats = native.stats;
-var mod_struct = native.struct;
-var mod_type = native.type;
-var mod_types = native.types;
-var mod_union = native.union;
-var mod_unregister = native.unregister;
-var mod_version = native.version;
-var mod_view = native.view;
-var index_default = native;
-// packages/core/changeset-engine/src/descriptor-relative-write.ts
+import koffi from "koffi";
 var beforeCommitTestHook;
 var POSIX_FLAGS = {
   darwin: {
@@ -15748,7 +15286,7 @@ function descriptorRelativeWrite(request) {
   writeWithPosixDirectoryDescriptor(request, flags);
 }
 function writeWithPosixDirectoryDescriptor(request, flags) {
-  const libc = index_default.load(null);
+  const libc = koffi.load(null);
   const open = libc.func("open", "int", ["str", "int"]);
   const openat = libc.func("openat", "int", ["int", "str", "int", "uint"]);
   const mkdirat = libc.func("mkdirat", "int", ["int", "str", "uint"]);
@@ -15760,7 +15298,7 @@ function writeWithPosixDirectoryDescriptor(request, flags) {
   const linkat = libc.func("linkat", "int", ["int", "str", "int", "str", "int"]);
   const unlinkat = libc.func("unlinkat", "int", ["int", "str", "int"]);
   const close = libc.func("close", "int", ["int"]);
-  const errno = index_default.os.errno;
+  const errno = koffi.os.errno;
   const segments = request.path.split(/[\\/]/u);
   const leaf = segments.pop();
   if (!leaf || segments.some((segment) => !segment || segment === "." || segment === "..")) {
@@ -15771,7 +15309,7 @@ function writeWithPosixDirectoryDescriptor(request, flags) {
   try {
     for (const segment of segments) {
       let nextFd = openat(directoryFd, segment, flags.readOnly | flags.directory | flags.noFollow | flags.closeOnExec, 0);
-      if (nextFd < 0 && index_default.errno() === errno.ENOENT) {
+      if (nextFd < 0 && koffi.errno() === errno.ENOENT) {
         checkedResult(mkdirat(directoryFd, segment, 511), `mkdirat ${segment}`);
         nextFd = openat(directoryFd, segment, flags.readOnly | flags.directory | flags.noFollow | flags.closeOnExec, 0);
       }
@@ -15794,7 +15332,7 @@ function writeWithPosixDirectoryDescriptor(request, flags) {
     }
     if (request.expectedHash === "missing") {
       if (linkat(directoryFd, request.tempName, directoryFd, leaf, 0) < 0) {
-        if (index_default.errno() === index_default.os.errno.EEXIST)
+        if (koffi.errno() === koffi.os.errno.EEXIST)
           throw new Error(`Expected hash mismatch: ${leaf}`);
         throw posixError(`linkat ${leaf}`);
       }
@@ -15820,9 +15358,9 @@ function assertPinnedParentVisible(request, pinnedParent) {
 function assertExpectedHashAt(directoryFd, leaf, expectedHash, flags, openat, read, close) {
   const fd = openat(directoryFd, leaf, flags.readOnly | flags.noFollow | flags.closeOnExec, 0);
   if (fd < 0) {
-    if (index_default.errno() === index_default.os.errno.ENOENT && expectedHash === "missing")
+    if (koffi.errno() === koffi.os.errno.ENOENT && expectedHash === "missing")
       return;
-    if (index_default.errno() === index_default.os.errno.ENOENT)
+    if (koffi.errno() === koffi.os.errno.ENOENT)
       throw new Error(`Expected missing file hash for new path: ${leaf}`);
     throw posixError(`openat destination ${leaf}`);
   }
@@ -15865,17 +15403,17 @@ function checkedResult(result, action) {
     throw posixError(action);
 }
 function posixError(action) {
-  return new Error(`${action} failed with errno ${index_default.errno()}`);
+  return new Error(`${action} failed with errno ${koffi.errno()}`);
 }
 function writeWithLockedWindowsParents(request) {
-  const kernel32 = index_default.load("kernel32.dll");
+  const kernel32 = koffi.load("kernel32.dll");
   const createFileW = kernel32.func("CreateFileW", "void *", ["str16", "uint32", "uint32", "void *", "uint32", "uint32", "void *"]);
   const closeHandle = kernel32.func("CloseHandle", "int", ["void *"]);
-  const attributeTagInfo = index_default.struct({ FileAttributes: "uint32", ReparseTag: "uint32" });
+  const attributeTagInfo = koffi.struct({ FileAttributes: "uint32", ReparseTag: "uint32" });
   const getFileInformationByHandleEx = kernel32.func("GetFileInformationByHandleEx", "int", [
     "void *",
     "int",
-    index_default.out(index_default.pointer(attributeTagInfo)),
+    koffi.out(koffi.pointer(attributeTagInfo)),
     "uint32"
   ]);
   const handles = [];
@@ -15902,11 +15440,11 @@ function writeWithLockedWindowsParents(request) {
         }
       }
       const handle = createFileW(current, FILE_READ_ATTRIBUTES, FILE_SHARE_READ_WRITE, null, OPEN_EXISTING, FILE_FLAG_BACKUP_SEMANTICS | (index === 0 ? 0 : FILE_FLAG_OPEN_REPARSE_POINT), null);
-      if (index_default.address(handle) === 0xffffffffffffffffn)
+      if (koffi.address(handle) === 0xffffffffffffffffn)
         throw new Error(`CreateFileW failed for protected parent: ${current}`);
       handles.push(handle);
       const info = {};
-      if (!getFileInformationByHandleEx(handle, FILE_ATTRIBUTE_TAG_INFO, info, index_default.sizeof(attributeTagInfo))) {
+      if (!getFileInformationByHandleEx(handle, FILE_ATTRIBUTE_TAG_INFO, info, koffi.sizeof(attributeTagInfo))) {
         throw new Error(`GetFileInformationByHandleEx failed for protected parent: ${current}`);
       }
       if (!(info.FileAttributes & FILE_ATTRIBUTE_DIRECTORY) || index > 0 && info.FileAttributes & FILE_ATTRIBUTE_REPARSE_POINT) {
@@ -18576,6 +18114,14 @@ ${wrapped}`;
   }
   return `${existing.slice(0, region.start)}${wrapped}${existing.slice(region.end)}`;
 }
+function comparableExpectedManifestDigest(expected, actual) {
+  const baseline = actual && typeof actual === "object" && !Array.isArray(actual) ? actual.semanticBaseline : undefined;
+  if (!baseline || typeof baseline !== "object" || Array.isArray(baseline) || "evidence" in baseline)
+    return expected.digest;
+  const value = JSON.parse(expected.body);
+  const { evidence: _evidence, ...semanticBaseline } = value.semanticBaseline;
+  return digestJson({ ...value, semanticBaseline });
+}
 function architectureDocumentationProjectionDrift(input) {
   const existingByPath = new Map(input.existingFiles.map((file) => [file.path, file]));
   const expectedByPath = new Map(input.expectedFiles.map((file) => [file.path, file]));
@@ -18592,7 +18138,7 @@ function architectureDocumentationProjectionDrift(input) {
     try {
       const parsed = JSON.parse(existingManifest.body);
       const actualDigest = digestJson(parsed);
-      if (actualDigest !== input.expectedManifest.digest) {
+      if (actualDigest !== comparableExpectedManifestDigest(input.expectedManifest, parsed)) {
         diffs.push({
           path: input.expectedManifest.path,
           reasonCode: "projection-manifest-stale",
@@ -19005,7 +18551,8 @@ var REQUIRED_CODEGRAPH_VERSION = productVersionManifest().runtime.codeGraph.requ
 var CODEGRAPH_TELEMETRY_ENV = "DO_NOT_TRACK";
 var CODEGRAPH_TELEMETRY_DISABLED_VALUE = "1";
 var DEFAULT_CODEGRAPH_BINARY = "codegraph";
-var requireFromAdapter = createRequire4(import.meta.url);
+var requireFromAdapter = createRequire2(import.meta.url);
+var { CodeGraph } = requireFromAdapter(REQUIRED_CODEGRAPH_PACKAGE);
 var CODEGRAPH_OUTPUT_MAX_BYTES = 32 * 1024 * 1024;
 var CODEGRAPH_QUERY_TIMEOUT_MS = 30000;
 function disableCodeGraphTelemetryByDefault(env = process.env) {
@@ -19169,7 +18716,7 @@ function resolvePackagedCodeGraphShim() {
 function packagedCodeGraphRuntimeDigest() {
   try {
     const manifestPath = requireFromAdapter.resolve(`${REQUIRED_CODEGRAPH_PACKAGE}/package.json`);
-    const packageRequire = createRequire4(manifestPath);
+    const packageRequire = createRequire2(manifestPath);
     const manifest = JSON.parse(readFileSync7(manifestPath, "utf8"));
     if (manifest.version !== REQUIRED_CODEGRAPH_VERSION || !manifest.bin?.codegraph) {
       throw new Error(`package manifest is not exact ${REQUIRED_CODEGRAPH_VERSION}`);
@@ -19735,7 +19282,7 @@ function loadCapabilityCodeGraphProjectionInputs(root, model, options = {}) {
   disableCodeGraphTelemetryByDefault();
   const binary = options.binary ?? DEFAULT_CODEGRAPH_BINARY;
   const importGraphs = footprints.length > 0 ? capabilityImportGraphs(root, binary, footprints, options.importNodeLimit ?? CODEGRAPH_IMPORT_NODE_QUERY_LIMIT) : [];
-  const selectorIndex = entrypointNodes.length > 0 ? options.selectorIndexFactory?.(root) ?? import_codegraph.CodeGraph.openSync(root) : undefined;
+  const selectorIndex = entrypointNodes.length > 0 ? options.selectorIndexFactory?.(root) ?? CodeGraph.openSync(root) : undefined;
   let selectorEvidence;
   try {
     selectorEvidence = entrypointNodes.flatMap((entry) => entry.entrypoints.flatMap((entrypoint) => entrypoint.symbols.flatMap((source) => source.sinks.map((sink) => exactSelectorEvidence(selectorIndex, {
@@ -20167,8 +19714,8 @@ function assertContext7LibraryId(libraryId) {
   if (!LIBRARY_ID_PATTERN.test(libraryId))
     throw new Error("Context7 libraryId must be /owner/project and repo-pinned");
 }
-function assertContext7Version(version2) {
-  if (!VERSION_PATTERN.test(version2))
+function assertContext7Version(version) {
+  if (!VERSION_PATTERN.test(version))
     throw new Error("Context7 version must be an exact pinned version");
 }
 function buildExternalDocumentationResource(input) {
@@ -20223,7 +19770,7 @@ function projectLibraryCandidate(result) {
     id: result.id,
     title: result.title,
     ...result.description ? { description: cleanExternalText(result.description).slice(0, 240) } : {},
-    versions: [...new Set(result.versions ?? [])].filter((version2) => VERSION_PATTERN.test(version2)).sort(),
+    versions: [...new Set(result.versions ?? [])].filter((version) => VERSION_PATTERN.test(version)).sort(),
     ...typeof result.trustScore === "number" ? { trustScore: result.trustScore } : {},
     ...typeof result.benchmarkScore === "number" ? { benchmarkScore: result.benchmarkScore } : {}
   };
@@ -20442,8 +19989,8 @@ function localEgressStatus(env = process.env, live = {}) {
 
 // packages/surfaces/cli/src/main.ts
 import { spawn as spawn2, spawnSync as spawnSync3 } from "child_process";
-import { accessSync as accessSync2, closeSync as closeSync10, constants as constants2, existsSync as existsSync25, mkdirSync as mkdirSync13, openSync as openSync10, readFileSync as readFileSync27, rmSync as rmSync16, statSync as statSync10 } from "fs";
-import { dirname as dirname15, join as join18, resolve as resolve26 } from "path";
+import { accessSync as accessSync2, closeSync as closeSync10, constants as constants2, existsSync as existsSync26, mkdirSync as mkdirSync13, openSync as openSync10, readFileSync as readFileSync27, rmSync as rmSync16, statSync as statSync10 } from "fs";
+import { dirname as dirname15, join as join18, resolve as resolve27 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // packages/contracts/src/index.ts
@@ -22726,8 +22273,8 @@ function diagnostics(egress) {
     egress
   };
 }
-function isSupportedNodeVersion(version2) {
-  const match = /^v?(\d+)\.(\d+)\.(\d+)$/.exec(version2);
+function isSupportedNodeVersion(version) {
+  const match = /^v?(\d+)\.(\d+)\.(\d+)$/.exec(version);
   if (!match)
     return false;
   const major = Number(match[1]);
@@ -22970,7 +22517,7 @@ function isProcessAlive(pid) {
 // packages/local-runtime/local-store-sqlite/src/index.ts
 import { createHash as createHash8, randomUUID } from "node:crypto";
 import { chmodSync as chmodSync5, closeSync as closeSync6, copyFileSync, existsSync as existsSync9, fsyncSync as fsyncSync4, lstatSync as lstatSync4, mkdirSync as mkdirSync5, openSync as openSync6, readFileSync as readFileSync12, readSync as readSync2, realpathSync as realpathSync6, renameSync as renameSync4, rmSync as rmSync6, statfsSync, statSync as statSync6, writeFileSync as writeFileSync6 } from "node:fs";
-import { createRequire as createRequire5 } from "node:module";
+import { createRequire as createRequire3 } from "node:module";
 import { dirname as dirname6, isAbsolute as isAbsolute6, join as join6, relative as relative7, resolve as resolve12 } from "node:path";
 init_src();
 // schemas/runtime/explorer-projection-v2.schema.json
@@ -23527,7 +23074,7 @@ var explorer_projection_v2_schema_default = {
 };
 
 // packages/local-runtime/local-store-sqlite/src/index.ts
-var runtimeRequire = createRequire5(import.meta.url);
+var runtimeRequire = createRequire3(import.meta.url);
 var SQLITE_SIDECAR_SUFFIXES = ["", "-wal", "-shm"];
 var LEGACY_MIGRATION_MARKER_FILE = "runtime.sqlite.migration.json";
 var LEGACY_MIGRATION_LOCK_FILE = "runtime.sqlite.migration.lock";
@@ -30786,9 +30333,9 @@ function readExactPackageVersion(root, packageName) {
     return lockVersion;
   for (const manifestPath of packageManifestPaths(root)) {
     const manifest = readJsonFile(manifestPath);
-    const version2 = exactVersionFromManifest(manifest, packageName);
-    if (version2)
-      return version2;
+    const version = exactVersionFromManifest(manifest, packageName);
+    if (version)
+      return version;
   }
   return;
 }
@@ -35338,10 +34885,10 @@ init_src();
 import { createHash as createHash9, randomUUID as randomUUID2 } from "node:crypto";
 import { chmodSync as chmodSync7, closeSync as closeSync7, copyFileSync as copyFileSync2, existsSync as existsSync19, fsyncSync as fsyncSync5, lstatSync as lstatSync9, mkdirSync as mkdirSync10, openSync as openSync8, readFileSync as readFileSync20, readSync as readSync3, realpathSync as realpathSync8, renameSync as renameSync5, rmSync as rmSync12, statfsSync as statfsSync2, statSync as statSync9, writeFileSync as writeFileSync8 } from "node:fs";
 import { readdir, readFile } from "node:fs/promises";
-import { createRequire as createRequire6 } from "node:module";
+import { createRequire as createRequire4 } from "node:module";
 import { dirname as dirname12, isAbsolute as isAbsolute7, join as join12, relative as relative10, resolve as resolve21 } from "node:path";
 init_src();
-var runtimeRequire2 = createRequire6(import.meta.url);
+var runtimeRequire2 = createRequire4(import.meta.url);
 var SQLITE_SIDECAR_SUFFIXES2 = ["", "-wal", "-shm"];
 var LEGACY_MIGRATION_MARKER_FILE2 = "runtime.sqlite.migration.json";
 var LEGACY_MIGRATION_LOCK_FILE2 = "runtime.sqlite.migration.lock";
@@ -46510,7 +46057,7 @@ function readCodeFacts(root, worktreeDigest, edgeLimit) {
 }
 function attestCodeGraphBinary(root) {
   const invocation = codeGraphCliInvocation(CODEGRAPH_BINARY, root);
-  const version2 = execFileSync9(invocation.command, [...invocation.argsPrefix, "--version"], {
+  const version = execFileSync9(invocation.command, [...invocation.argsPrefix, "--version"], {
     cwd: root,
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"],
@@ -46518,7 +46065,7 @@ function attestCodeGraphBinary(root) {
   }).trim();
   const binaryPath = invocation.argsPrefix[0] ?? invocation.command;
   return {
-    version: version2,
+    version,
     binaryDigest: `sha256:${createHash10("sha256").update(readFileSync24(binaryPath)).digest("hex")}`
   };
 }
@@ -47399,6 +46946,12 @@ function recommendationActorKind(input) {
   return "cli";
 }
 
+// packages/local-runtime/runtime-daemon/src/changeset-authority.ts
+import { randomBytes as randomBytes5 } from "node:crypto";
+import { existsSync as existsSync24, readFileSync as readFileSync26 } from "node:fs";
+import { resolve as resolve25 } from "node:path";
+init_src();
+
 // packages/local-runtime/runtime-daemon/src/committed-change-acceptance.ts
 import { execFileSync as execFileSync10 } from "node:child_process";
 import { closeSync as closeSync8, constants as fsConstants3, fstatSync as fstatSync3, lstatSync as lstatSync11, openSync as openSync9, readdirSync as readdirSync12, readFileSync as readFileSync25 } from "node:fs";
@@ -47830,12 +47383,546 @@ function sameStrings(left, right) {
   return left.length === right.length && left.every((value, index) => value === right[index]);
 }
 
+// packages/local-runtime/runtime-daemon/src/changeset-authority.ts
+class RuntimeUpdateInputError extends Error {
+}
+function decodeRuntimeWorktreeDigestProfile(value, field) {
+  switch (value) {
+    case "repository":
+    case "architecture-documentation-projection":
+      return value;
+    default:
+      throw new RuntimeUpdateInputError(`${field} must be repository or architecture-documentation-projection`);
+  }
+}
+function decodeRuntimePlanUpdateInput(value) {
+  const input = runtimeUpdateInputRecord(value, "plan_update input");
+  if (typeof input.id !== "string" || input.id.length === 0) {
+    throw new RuntimeUpdateInputError("plan_update id must be a non-empty string");
+  }
+  if (!Array.isArray(input.operations)) {
+    throw new RuntimeUpdateInputError("plan_update operations must be an array");
+  }
+  if (input.approvalChannel !== undefined && input.approvalChannel !== "mcp") {
+    throw new RuntimeUpdateInputError("plan_update approvalChannel must be mcp");
+  }
+  let worktreeDigestPrecondition;
+  if (input.worktreeDigestPrecondition !== undefined) {
+    const precondition = runtimeUpdateInputRecord(input.worktreeDigestPrecondition, "plan_update worktreeDigestPrecondition");
+    const profile = decodeRuntimeWorktreeDigestProfile(precondition.profile, "plan_update worktreeDigestPrecondition.profile");
+    if (profile !== "architecture-documentation-projection") {
+      throw new RuntimeUpdateInputError("plan_update worktreeDigestPrecondition.profile must be architecture-documentation-projection");
+    }
+    if (typeof precondition.expectedDigest !== "string" || precondition.expectedDigest.length === 0) {
+      throw new RuntimeUpdateInputError("plan_update worktreeDigestPrecondition.expectedDigest must be a non-empty string");
+    }
+    worktreeDigestPrecondition = { profile, expectedDigest: precondition.expectedDigest };
+  }
+  return {
+    id: input.id,
+    operations: input.operations,
+    ...input.approvalChannel === "mcp" ? { approvalChannel: "mcp" } : {},
+    ...input.reason === undefined ? {} : { reason: input.reason },
+    ...worktreeDigestPrecondition === undefined ? {} : { worktreeDigestPrecondition }
+  };
+}
+function decodeRuntimeApplyUpdateInput(value) {
+  const input = runtimeUpdateInputRecord(value, "apply_update input");
+  if (typeof input.id !== "string" || input.id.length === 0) {
+    throw new RuntimeUpdateInputError("apply_update id must be a non-empty string");
+  }
+  if (typeof input.approved !== "boolean") {
+    throw new RuntimeUpdateInputError("apply_update approved must be a boolean");
+  }
+  if (typeof input.expectedWorktreeDigest !== "string" || input.expectedWorktreeDigest.length === 0) {
+    throw new RuntimeUpdateInputError("apply_update expectedWorktreeDigest must be a non-empty string");
+  }
+  const worktreeDigestProfile = input.worktreeDigestProfile === undefined ? undefined : decodeRuntimeWorktreeDigestProfile(input.worktreeDigestProfile, "apply_update worktreeDigestProfile");
+  return {
+    id: input.id,
+    approved: input.approved,
+    expectedWorktreeDigest: input.expectedWorktreeDigest,
+    ...worktreeDigestProfile === undefined ? {} : { worktreeDigestProfile },
+    ...input.projectionApplyReceipt === undefined ? {} : { projectionApplyReceipt: input.projectionApplyReceipt }
+  };
+}
+function runtimeUpdateInputRecord(value, field) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new RuntimeUpdateInputError(`${field} must be an object`);
+  }
+  return value;
+}
+
+class ChangeSetAuthorityService {
+  context;
+  readModelStore;
+  localStore;
+  changeSetEngine;
+  architectureLedger;
+  changesets = new Map;
+  changeSetRoots = new Map;
+  mcpChangeSets = new Set;
+  mcpApprovals = new Map;
+  changeSetWorktreeDigestProfiles = new Map;
+  constructor(context) {
+    this.context = context;
+    this.readModelStore = context.readModelStore;
+    this.localStore = context.localStore;
+    this.changeSetEngine = context.changeSetEngine;
+    this.architectureLedger = context.architectureLedger;
+  }
+  clearApprovals() {
+    this.mcpApprovals.clear();
+  }
+  async planPracticeWaiver(root, input) {
+    this.assertRunning();
+    const session = await this.openSession(root);
+    const model = await this.readModelStore.validateModel(session.workspace);
+    let ownerRegistry;
+    try {
+      ownerRegistry = loadPracticeWaiverOwnerRegistry(session.workspace.root);
+    } catch (error) {
+      return errorEnvelope("practices.waive", "AC_SCHEMA_INVALID", error instanceof Error ? error.message : String(error));
+    }
+    const waiver = {
+      schemaVersion: "archcontext.practice-waiver/v1",
+      practiceId: input.practiceId,
+      ...input.checkId === undefined ? {} : { checkId: input.checkId },
+      scope: {
+        ...input.pathGlobs && input.pathGlobs.length > 0 ? { pathGlobs: input.pathGlobs } : {},
+        ...input.subjects && input.subjects.length > 0 ? { subjects: input.subjects } : {}
+      },
+      owner: input.owner,
+      reason: input.reason,
+      createdAt: input.createdAt ?? this.clock(),
+      reviewAt: input.reviewAt,
+      expiresAt: input.expiresAt,
+      evidenceDigest: input.evidenceDigest
+    };
+    let waiverId;
+    try {
+      validatePracticeWaiver(waiver, "practice waiver input", { allowedOwners: ownerRegistry.owners });
+      waiverId = safePracticeWaiverId(input.waiverId, waiver);
+    } catch (error) {
+      return errorEnvelope("practices.waive", "AC_SCHEMA_INVALID", error instanceof Error ? error.message : String(error));
+    }
+    const path = `.archcontext/waivers/${waiverId}.json`;
+    const absolute = resolve25(session.workspace.root, path);
+    const body = `${JSON.stringify(waiver, null, 2)}
+`;
+    const expectedHash = existsSync24(absolute) ? digestJson({ body: readFileSync26(absolute, "utf8") }) : "missing";
+    const draft = this.changeSetEngine.plan({
+      id: input.id ?? `changeset.practice-waiver-${waiverId.replace(/[^A-Za-z0-9_-]/g, "-")}`,
+      base: {
+        headSha: session.workspace.headSha,
+        worktreeDigest: session.snapshot.worktreeDigest,
+        modelDigest: model.modelDigest
+      },
+      reason: { taskSessionId: input.taskSessionId ?? "task_runtime" },
+      operations: [{ op: "write_waiver", path, expectedHash, body }]
+    });
+    this.changesets.set(draft.id, draft);
+    this.changeSetRoots.set(draft.id, canonicalRepositoryRoot(root));
+    this.changeSetWorktreeDigestProfiles.set(draft.id, "repository");
+    this.mcpChangeSets.delete(draft.id);
+    return okEnvelope("practices.waive", {
+      schemaVersion: "archcontext.practice-waiver-plan/v1",
+      waiver,
+      waiverDigest: digestJson(waiver),
+      ownerRegistry,
+      path,
+      draft,
+      preview: this.changeSetEngine.preview(session.workspace.root, draft)
+    });
+  }
+  async planUpdate(root, rawInput) {
+    this.assertRunning();
+    let input;
+    try {
+      input = decodeRuntimePlanUpdateInput(rawInput);
+    } catch (error) {
+      if (error instanceof RuntimeUpdateInputError) {
+        return errorEnvelope("plan_update", "AC_SCHEMA_INVALID", error.message);
+      }
+      throw error;
+    }
+    const session = await this.openSession(root);
+    const model = await this.readModelStore.validateModel(session.workspace);
+    const worktreeDigestProfile = input.worktreeDigestPrecondition?.profile ?? "repository";
+    const worktreeDigest = runtimeWorktreeDigest(root, worktreeDigestProfile);
+    if (input.worktreeDigestPrecondition && input.worktreeDigestPrecondition.expectedDigest !== worktreeDigest) {
+      throw new Error("Worktree digest changed before plan");
+    }
+    const draft = this.changeSetEngine.plan({
+      id: input.id,
+      base: {
+        headSha: session.workspace.headSha,
+        worktreeDigest,
+        modelDigest: model.modelDigest
+      },
+      reason: input.reason ?? { taskSessionId: "task_runtime" },
+      operations: input.operations
+    });
+    this.changesets.set(draft.id, draft);
+    this.changeSetRoots.set(draft.id, canonicalRepositoryRoot(root));
+    this.changeSetWorktreeDigestProfiles.set(draft.id, worktreeDigestProfile);
+    if (input.approvalChannel === "mcp")
+      this.mcpChangeSets.add(draft.id);
+    else
+      this.mcpChangeSets.delete(draft.id);
+    return okEnvelope("plan_update", {
+      draft,
+      changeSetDigest: digestJson(draft),
+      preview: this.changeSetEngine.preview(root, draft)
+    });
+  }
+  async approveMcpProjection(root, input) {
+    this.assertRunning();
+    try {
+      validateProjectionInvocation(input);
+      if (!projectionInvocationWrites(input))
+        throw new Error("Projection approval requires an apply, adopt or recover invocation");
+      assertProjectionInvocationSnapshot(root, input);
+    } catch (error) {
+      return errorEnvelope("projection.approve", "AC_PRECONDITION_FAILED", error instanceof Error ? error.message : String(error));
+    }
+    const now = Date.parse(this.clock());
+    if (!Number.isFinite(now))
+      return errorEnvelope("projection.approve", "AC_PRECONDITION_FAILED", "Approval clock is invalid");
+    for (const [key, grant] of this.mcpApprovals)
+      if (grant.expiresAt <= now)
+        this.mcpApprovals.delete(key);
+    if (this.mcpApprovals.size >= 256)
+      return errorEnvelope("projection.approve", "AC_PRECONDITION_FAILED", "Too many outstanding approvals; consume an approval or wait for expiry");
+    const approvalToken = randomBytes5(32).toString("hex");
+    const expiresAt = now + 5 * 60000;
+    this.mcpApprovals.set(digestJson(approvalToken), { scope: "projection", root: canonicalRepositoryRoot(root), invocationDigest: digestJson(input), expiresAt });
+    return okEnvelope("projection.approve", { approvalToken, expiresAt: new Date(expiresAt).toISOString() });
+  }
+  async mcpProjection(root, input, approvalToken) {
+    this.assertRunning();
+    try {
+      validateProjectionInvocation(input);
+    } catch (error) {
+      return errorEnvelope("projection", "AC_SCHEMA_INVALID", error instanceof Error ? error.message : String(error));
+    }
+    if (projectionInvocationWrites(input)) {
+      const denied = () => errorEnvelope("projection", "AC_USER_CONFIRMATION_REQUIRED", "A fresh one-time token from archctx projection approve is required");
+      if (typeof approvalToken !== "string" || !/^[a-f0-9]{64}$/.test(approvalToken))
+        return denied();
+      const key = digestJson(approvalToken);
+      const grant = this.mcpApprovals.get(key);
+      this.mcpApprovals.delete(key);
+      const now = Date.parse(this.clock());
+      if (!grant || grant.scope !== "projection" || !Number.isFinite(now) || grant.expiresAt <= now || grant.root !== canonicalRepositoryRoot(root) || grant.invocationDigest !== digestJson(input))
+        return denied();
+    }
+    return this.projection(root, input);
+  }
+  async approveMcpUpdate(root, input) {
+    this.assertRunning();
+    const draft = this.changesets.get(input?.id);
+    const canonicalRoot = canonicalRepositoryRoot(root);
+    const now = Date.parse(this.clock());
+    if (!draft || this.changeSetRoots.get(input.id) !== canonicalRoot || this.changeSetWorktreeDigestProfiles.get(input.id) !== "repository" || input.expectedChangeSetDigest !== digestJson(draft) || input.expectedWorktreeDigest !== draft.base.worktreeDigest || input.expectedWorktreeDigest !== runtimeWorktreeDigest(root, "repository") || !Number.isFinite(now)) {
+      return errorEnvelope("approve_mcp_update", "AC_PRECONDITION_FAILED", "Approval must match the current ChangeSet preview and repository");
+    }
+    for (const [key, grant] of this.mcpApprovals)
+      if (grant.expiresAt <= now)
+        this.mcpApprovals.delete(key);
+    if (this.mcpApprovals.size >= 256)
+      return errorEnvelope("approve_mcp_update", "AC_PRECONDITION_FAILED", "Too many outstanding approvals; consume an approval or wait for expiry");
+    const approvalToken = randomBytes5(32).toString("hex");
+    const expiresAt = now + 5 * 60000;
+    this.mcpApprovals.set(digestJson(approvalToken), {
+      scope: "changeset",
+      root: canonicalRoot,
+      id: input.id,
+      draftDigest: input.expectedChangeSetDigest,
+      worktreeDigest: input.expectedWorktreeDigest,
+      expiresAt
+    });
+    return okEnvelope("approve_mcp_update", { approvalToken, expiresAt: new Date(expiresAt).toISOString() });
+  }
+  async applyMcpUpdate(root, input) {
+    this.assertRunning();
+    const denied = () => errorEnvelope("apply_update", "AC_USER_CONFIRMATION_REQUIRED", "A fresh one-time token from archctx approve is required");
+    if (typeof input?.approvalToken !== "string" || !/^[a-f0-9]{64}$/.test(input.approvalToken))
+      return denied();
+    const key = digestJson(input.approvalToken);
+    const grant = this.mcpApprovals.get(key);
+    if (!grant)
+      return denied();
+    this.mcpApprovals.delete(key);
+    const draft = this.changesets.get(input.id);
+    const now = Date.parse(this.clock());
+    if (grant.scope !== "changeset" || !Number.isFinite(now) || grant.expiresAt <= now || grant.root !== canonicalRepositoryRoot(root) || grant.id !== input.id || grant.worktreeDigest !== input.expectedWorktreeDigest || !draft || grant.draftDigest !== digestJson(draft))
+      return denied();
+    return this.applyAuthorizedUpdate(root, { id: input.id, expectedWorktreeDigest: input.expectedWorktreeDigest, approved: true });
+  }
+  async applyUpdate(root, rawInput) {
+    this.assertRunning();
+    if (this.mcpChangeSets.has(rawInput?.id)) {
+      return errorEnvelope("apply_update", "AC_USER_CONFIRMATION_REQUIRED", "MCP ChangeSets require a one-time approval token through applyMcpUpdate");
+    }
+    return this.applyAuthorizedUpdate(root, rawInput);
+  }
+  async applyAuthorizedUpdate(root, rawInput) {
+    this.assertRunning();
+    let input;
+    try {
+      input = decodeRuntimeApplyUpdateInput(rawInput);
+    } catch (error) {
+      if (error instanceof RuntimeUpdateInputError) {
+        return errorEnvelope("apply_update", "AC_SCHEMA_INVALID", error.message);
+      }
+      throw error;
+    }
+    return this.withWriter(async () => {
+      const draft = this.changesets.get(input.id);
+      if (!draft)
+        throw new Error(`Unknown ChangeSet: ${input.id}`);
+      const plannedProfile = this.changeSetWorktreeDigestProfiles.get(input.id);
+      if (!plannedProfile)
+        throw new Error("ChangeSet worktree digest profile missing before apply");
+      const requestedProfile = input.worktreeDigestProfile ?? "repository";
+      if (requestedProfile !== plannedProfile)
+        throw new Error("ChangeSet worktree digest profile changed before apply");
+      const current = runtimeWorktreeDigest(root, plannedProfile);
+      if (current !== input.expectedWorktreeDigest)
+        throw new Error("Worktree digest changed before apply");
+      const session = await this.openSession(root);
+      if (draft.base.headSha !== session.workspace.headSha)
+        throw new Error("ChangeSet HEAD changed before apply");
+      if (draft.base.worktreeDigest !== current)
+        throw new Error("ChangeSet worktree digest changed before apply");
+      const currentModel = await this.readModelStore.validateModel(session.workspace);
+      const baseErrors = baseModelBlockingErrors(currentModel);
+      if (baseErrors.length > 0) {
+        throw new Error(`ChangeSet base model is invalid: ${baseErrors.join("; ")}`);
+      }
+      if (draft.base.modelDigest !== currentModel.modelDigest)
+        throw new Error("ChangeSet model digest changed before apply");
+      if (input.projectionApplyReceipt && await this.localStore.inspectProjectionApplyReceipt(input.projectionApplyReceipt.identity.lookupKey)) {
+        return errorEnvelope("apply_update", "AC_PRECONDITION_FAILED", "committed projection receipt requires explicit projection recover");
+      }
+      const approved = input.approved ? this.changeSetEngine.approve(draft) : draft;
+      const transitionBase = captureModelTransitionBase(root, approved);
+      let ledgerAppend;
+      let appliedJournalId;
+      const writesLedger = architectureLedgerWriteAppendsEvents(this.architectureLedger.writeMode);
+      const result = await this.changeSetEngine.apply(root, approved, {
+        approved: input.approved,
+        afterModelValidatedBeforeCommit: async ({ journalId }) => {
+          appliedJournalId = journalId;
+          if (transitionBase && journalId)
+            await recordModelTransitionEvidence(this.localStore, root, journalId, transitionBase);
+          if (journalId && this.context.projectionPlannedDrafts.has(draft))
+            await this.localStore.recordChangeSetProjectionOwner(journalId);
+          if (input.projectionApplyReceipt) {
+            if (!journalId)
+              throw new Error("projection apply receipt requires a durable ChangeSet journal");
+            await this.localStore.recordProjectionApplyReceipt(journalId, input.projectionApplyReceipt);
+          }
+          if (writesLedger) {
+            const appended = await this.appendAppliedChangeSetToArchitectureLedger(root, session, approved, journalId);
+            ledgerAppend = {
+              status: "appended",
+              appendedEventCount: appended.appendedEvents.length,
+              duplicateEventCount: appended.duplicateEvents.length,
+              graphDigest: appended.graphDigest,
+              entityCount: appended.entityCount,
+              relationCount: appended.relationCount,
+              constraintCount: appended.constraintCount
+            };
+          }
+          return { journalCommitted: writesLedger && Boolean(journalId) };
+        }
+      });
+      return okEnvelope("apply_update", {
+        ...result,
+        ...appliedJournalId ? { journalId: appliedJournalId } : {},
+        architectureLedger: {
+          ...this.architectureLedger,
+          append: writesLedger ? ledgerAppend ?? { status: "not-appended" } : { status: "not-applicable" }
+        }
+      });
+    });
+  }
+  async appendAppliedChangeSetToArchitectureLedger(root, session, draft, journalId) {
+    const paths = runtimeStatePaths(root);
+    const scope = {
+      repository: {
+        repositoryId: session.workspace.repositoryId,
+        storageRepositoryId: paths.storageRepositoryId
+      },
+      worktree: {
+        workspaceId: paths.workspaceId,
+        storageWorkspaceId: paths.storageWorkspaceId,
+        branch: readCurrentBranch(root),
+        headSha: session.workspace.headSha,
+        worktreeDigest: computeWorktreeDigest(root)
+      }
+    };
+    const plan = planChangeSetApplyToArchitectureLedgerEvent({
+      ...scope,
+      draft,
+      files: listModelFiles(root),
+      previousEvidenceState: await this.localStore.replayArchitectureLedgerEvidence(scope),
+      createdAt: this.clock(),
+      writeMode: this.architectureLedger.writeMode === "ledger-with-projection" ? "ledger-with-projection" : "dual",
+      command: "archctx apply"
+    });
+    if (journalId)
+      await this.localStore.recordChangeSetLedgerPlan(journalId, { event: plan.event });
+    const appendInput = { writer: "runtime-daemon", events: [plan.event] };
+    const result = await this.appendArchitectureEventsWithFeed(root, appendInput, journalId);
+    return result;
+  }
+  async acceptCommittedChange(root, rawInput) {
+    this.assertRunning();
+    let input;
+    try {
+      input = decodeAcceptCommittedChangeInput(rawInput);
+    } catch (error) {
+      if (error instanceof AcceptCommittedChangeInputError)
+        return errorEnvelope("ledger.accept-committed", "AC_SCHEMA_INVALID", error.message);
+      throw error;
+    }
+    if (this.architectureLedger.readMode !== "yaml" || this.architectureLedger.writeMode !== "yaml") {
+      return errorEnvelope("ledger.accept-committed", "AC_PRECONDITION_FAILED", "committed YAML acceptance requires YAML read and write authority");
+    }
+    return this.withWriter(async () => {
+      try {
+        const canonicalRoot = canonicalRepositoryRoot(root);
+        const journals = [];
+        for (const ref of input.journals)
+          journals.push(await this.localStore.readCommittedChangeSet(canonicalRoot, ref.journalId));
+        const model = loadNativeModelFromArchContext(canonicalRoot);
+        const worktreeDigest = architectureDocumentationProjectionWorktreeDigest(canonicalRoot, model);
+        const projection3 = buildArchitectureDocsProjection(this.projectionHost(), canonicalRoot, new Date(0).toISOString(), "repo-harness/v1");
+        const scope = acceptedCommittedChangeScope(canonicalRoot, worktreeDigest, resolveAcceptanceHeadSha(canonicalRoot));
+        const manifestWrite = await this.localStore.readLatestCommittedChangeSetFile(canonicalRoot, "docs/architecture/.projection-manifest.json");
+        const acceptance = planCommittedChangeAcceptance(canonicalRoot, {
+          requested: input.journals,
+          journals,
+          model,
+          existingFiles: projection3.loaded.existingFiles,
+          latestJournaledManifest: manifestWrite,
+          projection: projection3.plan,
+          currentEvidence: projection3.snapshotEvidence,
+          projectionWorktreeDigest: worktreeDigest,
+          scope
+        });
+        if (!input.approved) {
+          return okEnvelope("ledger.accept-committed", { status: "preview", plan: acceptance.plan, acceptancePlanId: acceptance.acceptancePlanId, expectedWorktreeDigest: worktreeDigest });
+        }
+        if (input.expectedWorktreeDigest !== worktreeDigest)
+          throw new Error("accepted ChangeSet expected worktree digest mismatch");
+        if (input.acceptancePlanId !== acceptance.acceptancePlanId)
+          throw new Error("accepted ChangeSet acceptance plan changed since preview");
+        const accepted = (event2, replayed) => {
+          const recorded = acceptedChangeFromEventV2(event2);
+          if (!recorded || !event2.eventHash)
+            throw new Error("committed ChangeSet acceptance readback failed");
+          return okEnvelope("ledger.accept-committed", {
+            status: "accepted",
+            replayed,
+            acceptedChange: recorded.acceptedChange,
+            acceptancePlanId: recorded.acceptancePlanId,
+            journalIds: input.journals.map((journal) => journal.journalId),
+            eventHash: event2.eventHash,
+            fileSetDigest: acceptance.plan.fileSetDigest
+          });
+        };
+        const existing = await this.localStore.readArchitectureEvent({ ...scope, eventId: acceptance.acceptedChange.eventId });
+        if (existing) {
+          if (acceptedChangeFromEventV2(existing)?.acceptancePlanId === acceptance.acceptancePlanId)
+            return accepted(existing, true);
+          throw new Error(`committed ChangeSet already has a different acceptance event at this snapshot: ${existing.eventId}`);
+        }
+        const ledgerGraphDigest = architectureLedgerStateDigest(await this.localStore.readArchitectureLedgerState(scope));
+        const event = acceptedCommittedChangeEventV2({ acceptance, scope, ledgerGraphDigest, timestamp: this.clock() });
+        const appended = await this.appendArchitectureEventsWithFeed(canonicalRoot, { writer: "runtime-daemon", events: [event] });
+        if (appended.appendedEvents.length !== 1)
+          throw new Error("committed ChangeSet acceptance event was not appended");
+        const readback = await this.localStore.readArchitectureEvent({ ...scope, eventId: event.eventId });
+        if (!readback || readback.eventType !== event.eventType || readback.payloadVersion !== event.payloadVersion) {
+          throw new Error("committed ChangeSet acceptance readback failed");
+        }
+        return accepted(readback, false);
+      } catch (error) {
+        return errorEnvelope("ledger.accept-committed", "AC_PRECONDITION_FAILED", error instanceof Error ? error.message : String(error));
+      }
+    });
+  }
+  assertRunning() {
+    this.context.assertRunning();
+  }
+  clock() {
+    return this.context.clock();
+  }
+  openSession(root) {
+    return this.context.openSession(root);
+  }
+  withWriter(fn) {
+    return this.context.withWriter(fn);
+  }
+  appendArchitectureEventsWithFeed(root, input, journalId) {
+    return this.context.appendArchitectureEventsWithFeed(root, input, journalId);
+  }
+  projectionHost() {
+    return this.context.projectionHost();
+  }
+  projection(root, input) {
+    return this.context.projection(root, input);
+  }
+}
+function runtimeWorktreeDigest(root, profile) {
+  switch (profile) {
+    case "repository":
+      return computeWorktreeDigest(root);
+    case "architecture-documentation-projection":
+      return architectureDocumentationProjectionWorktreeDigest(root, loadNativeModelFromArchContext(root));
+    default:
+      throw new RuntimeUpdateInputError(`unsupported worktree digest profile: ${String(profile)}`);
+  }
+}
+function acceptedCommittedChangeScope(root, worktreeDigest, headSha) {
+  const paths = runtimeStatePaths(root);
+  return {
+    repository: { repositoryId: repositoryFingerprint(root), storageRepositoryId: paths.storageRepositoryId },
+    worktree: {
+      workspaceId: projectionWorkspaceId(root),
+      storageWorkspaceId: paths.storageWorkspaceId,
+      branch: readCurrentBranch(root),
+      headSha,
+      worktreeDigest
+    }
+  };
+}
+function safePracticeWaiverId(explicit, waiver) {
+  const explicitTrimmed = explicit?.trim();
+  if (explicitTrimmed && (explicitTrimmed === "." || explicitTrimmed === ".." || explicitTrimmed.includes("/") || explicitTrimmed.includes("\\"))) {
+    throw new Error("practice-waiver-id-invalid");
+  }
+  const evidencePrefix = waiver.evidenceDigest.startsWith("sha256:") ? waiver.evidenceDigest.slice("sha256:".length, "sha256:".length + 12) : waiver.evidenceDigest.slice(0, 12);
+  const candidate = (explicitTrimmed || [waiver.practiceId.replace(/\./g, "-"), waiver.checkId ?? "all", evidencePrefix].join("-")).replace(/[^A-Za-z0-9_.-]/g, "-").replace(/-+/g, "-").replace(/^-+|-+$/g, "").slice(0, 96);
+  if (!candidate || candidate === "." || candidate === ".." || candidate.includes("/") || candidate.includes("\\")) {
+    throw new Error("practice-waiver-id-invalid");
+  }
+  return candidate;
+}
+function architectureLedgerWriteAppendsEvents(mode) {
+  return mode === "dual" || mode === "ledger-with-projection";
+}
+
 // packages/local-runtime/runtime-daemon/src/rpc-server.ts
 init_src();
 import { createServer as createServer2 } from "node:http";
 import { closeSync as closeSync9, mkdirSync as mkdirSync12, rmSync as rmSync15 } from "node:fs";
 import { dirname as dirname14 } from "node:path";
-import { randomBytes as randomBytes5 } from "node:crypto";
+import { randomBytes as randomBytes6 } from "node:crypto";
 var DEFAULT_DAEMON_IDLE_TIMEOUT_MS = 30 * 60000;
 var DAEMON_IDLE_TIMEOUT_ENV = "ARCHCONTEXT_DAEMON_IDLE_TIMEOUT_MS";
 function resolveDaemonIdleTimeoutMs(explicit) {
@@ -47905,7 +47992,7 @@ class ArchctxRuntimeRpcServer {
     mkdirSync12(dirname14(connectionPath), { recursive: true });
     mkdirSync12(dirname14(lockPath), { recursive: true });
     this.lockFd = acquireDaemonLock(lockPath, root);
-    const token = this.options.token ?? randomBytes5(18).toString("base64url");
+    const token = this.options.token ?? randomBytes6(18).toString("base64url");
     const server = createServer2((request, response) => {
       this.handleRequest(request, response).catch((error) => {
         writeJson(response, 500, { schemaVersion: RUNTIME_RPC_VERSION, ok: false, error: error instanceof Error ? error.message : String(error) });
@@ -48171,10 +48258,9 @@ async function readRpcRequestBody(request, limits) {
 }
 
 // packages/local-runtime/runtime-daemon/src/index.ts
-import { randomBytes as randomBytes6 } from "node:crypto";
 import { execFileSync as execFileSync11 } from "node:child_process";
-import { existsSync as existsSync24, readFileSync as readFileSync26 } from "node:fs";
-import { resolve as resolve25 } from "node:path";
+import { existsSync as existsSync25 } from "node:fs";
+import { resolve as resolve26 } from "node:path";
 init_src();
 
 // packages/local-runtime/runtime-daemon/src/egress.ts
@@ -48244,75 +48330,6 @@ function localEgressStatus2(env = process.env, live = {}) {
 }
 
 // packages/local-runtime/runtime-daemon/src/index.ts
-class RuntimeUpdateInputError extends Error {
-}
-function decodeRuntimeWorktreeDigestProfile(value, field) {
-  switch (value) {
-    case "repository":
-    case "architecture-documentation-projection":
-      return value;
-    default:
-      throw new RuntimeUpdateInputError(`${field} must be repository or architecture-documentation-projection`);
-  }
-}
-function decodeRuntimePlanUpdateInput(value) {
-  const input = runtimeUpdateInputRecord(value, "plan_update input");
-  if (typeof input.id !== "string" || input.id.length === 0) {
-    throw new RuntimeUpdateInputError("plan_update id must be a non-empty string");
-  }
-  if (!Array.isArray(input.operations)) {
-    throw new RuntimeUpdateInputError("plan_update operations must be an array");
-  }
-  if (input.approvalChannel !== undefined && input.approvalChannel !== "mcp") {
-    throw new RuntimeUpdateInputError("plan_update approvalChannel must be mcp");
-  }
-  let worktreeDigestPrecondition;
-  if (input.worktreeDigestPrecondition !== undefined) {
-    const precondition = runtimeUpdateInputRecord(input.worktreeDigestPrecondition, "plan_update worktreeDigestPrecondition");
-    const profile = decodeRuntimeWorktreeDigestProfile(precondition.profile, "plan_update worktreeDigestPrecondition.profile");
-    if (profile !== "architecture-documentation-projection") {
-      throw new RuntimeUpdateInputError("plan_update worktreeDigestPrecondition.profile must be architecture-documentation-projection");
-    }
-    if (typeof precondition.expectedDigest !== "string" || precondition.expectedDigest.length === 0) {
-      throw new RuntimeUpdateInputError("plan_update worktreeDigestPrecondition.expectedDigest must be a non-empty string");
-    }
-    worktreeDigestPrecondition = { profile, expectedDigest: precondition.expectedDigest };
-  }
-  return {
-    id: input.id,
-    operations: input.operations,
-    ...input.approvalChannel === "mcp" ? { approvalChannel: "mcp" } : {},
-    ...input.reason === undefined ? {} : { reason: input.reason },
-    ...worktreeDigestPrecondition === undefined ? {} : { worktreeDigestPrecondition }
-  };
-}
-function decodeRuntimeApplyUpdateInput(value) {
-  const input = runtimeUpdateInputRecord(value, "apply_update input");
-  if (typeof input.id !== "string" || input.id.length === 0) {
-    throw new RuntimeUpdateInputError("apply_update id must be a non-empty string");
-  }
-  if (typeof input.approved !== "boolean") {
-    throw new RuntimeUpdateInputError("apply_update approved must be a boolean");
-  }
-  if (typeof input.expectedWorktreeDigest !== "string" || input.expectedWorktreeDigest.length === 0) {
-    throw new RuntimeUpdateInputError("apply_update expectedWorktreeDigest must be a non-empty string");
-  }
-  const worktreeDigestProfile = input.worktreeDigestProfile === undefined ? undefined : decodeRuntimeWorktreeDigestProfile(input.worktreeDigestProfile, "apply_update worktreeDigestProfile");
-  return {
-    id: input.id,
-    approved: input.approved,
-    expectedWorktreeDigest: input.expectedWorktreeDigest,
-    ...worktreeDigestProfile === undefined ? {} : { worktreeDigestProfile },
-    ...input.projectionApplyReceipt === undefined ? {} : { projectionApplyReceipt: input.projectionApplyReceipt }
-  };
-}
-function runtimeUpdateInputRecord(value, field) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new RuntimeUpdateInputError(`${field} must be an object`);
-  }
-  return value;
-}
-
 class ArchitectureLedgerReadModelStore {
   fallback;
   localStore;
@@ -48401,12 +48418,8 @@ class ArchctxDaemon {
   maxRepoSessions;
   composition;
   sessions = new Map;
-  changesets = new Map;
-  changeSetRoots = new Map;
-  mcpChangeSets = new Set;
+  changeSetAuthority;
   projectionPlannedDrafts = new WeakSet;
-  mcpApprovals = new Map;
-  changeSetWorktreeDigestProfiles = new Map;
   auditRunAbortControllers = new Map;
   landscapes;
   explorerServer;
@@ -48538,6 +48551,20 @@ class ArchctxDaemon {
       worktreeDigest: runtimeWorktreeDigest,
       loadSourceChanges: loadCapabilitySourceChangesSinceStamps
     });
+    this.changeSetAuthority = new ChangeSetAuthorityService({
+      projectionPlannedDrafts: this.projectionPlannedDrafts,
+      assertRunning: () => this.assertRunning(),
+      clock: this.clock,
+      openSession: (root) => this.openSession(root),
+      withWriter: (run) => this.withWriter(run),
+      appendArchitectureEventsWithFeed: (root, input, journalId) => this.appendArchitectureEventsWithFeed(root, input, journalId),
+      projectionHost: () => this.projectionHost(),
+      projection: (root, input) => this.projection(root, input),
+      readModelStore: this.readModelStore,
+      localStore: this.localStore,
+      changeSetEngine: this.changeSetEngine,
+      architectureLedger: this.architectureLedger
+    });
     this.developerReviewRuns = new DeveloperReviewRunService(() => this.assertRunning(), this.clock);
     this.externalDocumentation = deps.externalDocumentation ?? new Context7ExternalDocumentationAdapter({
       enabled: process.env[CONTEXT7_ENABLED_ENV] === "1",
@@ -48607,7 +48634,7 @@ class ArchctxDaemon {
     try {
       for (const controller of this.auditRunAbortControllers.values())
         controller.abort();
-      this.mcpApprovals.clear();
+      this.changeSetAuthority.clearApprovals();
       this.sessions.clear();
       this.practiceCheckpoints.clear();
       this.explorerProjections.clearDeferredChangeFeedFailures();
@@ -48751,65 +48778,7 @@ class ArchctxDaemon {
     return this.practiceCheckpoints.practiceWaivers(root);
   }
   async planPracticeWaiver(root, input) {
-    this.assertRunning();
-    const session = await this.openSession(root);
-    const model = await this.readModelStore.validateModel(session.workspace);
-    let ownerRegistry;
-    try {
-      ownerRegistry = loadPracticeWaiverOwnerRegistry(session.workspace.root);
-    } catch (error) {
-      return errorEnvelope("practices.waive", "AC_SCHEMA_INVALID", error instanceof Error ? error.message : String(error));
-    }
-    const waiver = {
-      schemaVersion: "archcontext.practice-waiver/v1",
-      practiceId: input.practiceId,
-      ...input.checkId === undefined ? {} : { checkId: input.checkId },
-      scope: {
-        ...input.pathGlobs && input.pathGlobs.length > 0 ? { pathGlobs: input.pathGlobs } : {},
-        ...input.subjects && input.subjects.length > 0 ? { subjects: input.subjects } : {}
-      },
-      owner: input.owner,
-      reason: input.reason,
-      createdAt: input.createdAt ?? this.clock(),
-      reviewAt: input.reviewAt,
-      expiresAt: input.expiresAt,
-      evidenceDigest: input.evidenceDigest
-    };
-    let waiverId;
-    try {
-      validatePracticeWaiver(waiver, "practice waiver input", { allowedOwners: ownerRegistry.owners });
-      waiverId = safePracticeWaiverId(input.waiverId, waiver);
-    } catch (error) {
-      return errorEnvelope("practices.waive", "AC_SCHEMA_INVALID", error instanceof Error ? error.message : String(error));
-    }
-    const path = `.archcontext/waivers/${waiverId}.json`;
-    const absolute = resolve25(session.workspace.root, path);
-    const body = `${JSON.stringify(waiver, null, 2)}
-`;
-    const expectedHash = existsSync24(absolute) ? digestJson({ body: readFileSync26(absolute, "utf8") }) : "missing";
-    const draft = this.changeSetEngine.plan({
-      id: input.id ?? `changeset.practice-waiver-${waiverId.replace(/[^A-Za-z0-9_-]/g, "-")}`,
-      base: {
-        headSha: session.workspace.headSha,
-        worktreeDigest: session.snapshot.worktreeDigest,
-        modelDigest: model.modelDigest
-      },
-      reason: { taskSessionId: input.taskSessionId ?? "task_runtime" },
-      operations: [{ op: "write_waiver", path, expectedHash, body }]
-    });
-    this.changesets.set(draft.id, draft);
-    this.changeSetRoots.set(draft.id, canonicalRepositoryRoot(root));
-    this.changeSetWorktreeDigestProfiles.set(draft.id, "repository");
-    this.mcpChangeSets.delete(draft.id);
-    return okEnvelope("practices.waive", {
-      schemaVersion: "archcontext.practice-waiver-plan/v1",
-      waiver,
-      waiverDigest: digestJson(waiver),
-      ownerRegistry,
-      path,
-      draft,
-      preview: this.changeSetEngine.preview(session.workspace.root, draft)
-    });
+    return this.changeSetAuthority.planPracticeWaiver(root, input);
   }
   async docs(root, input) {
     return this.externalDocumentationService.docs(root, input);
@@ -48818,45 +48787,7 @@ class ArchctxDaemon {
     return this.externalDocumentationService.readResource(root, uri);
   }
   async planUpdate(root, rawInput) {
-    this.assertRunning();
-    let input;
-    try {
-      input = decodeRuntimePlanUpdateInput(rawInput);
-    } catch (error) {
-      if (error instanceof RuntimeUpdateInputError) {
-        return errorEnvelope("plan_update", "AC_SCHEMA_INVALID", error.message);
-      }
-      throw error;
-    }
-    const session = await this.openSession(root);
-    const model = await this.readModelStore.validateModel(session.workspace);
-    const worktreeDigestProfile = input.worktreeDigestPrecondition?.profile ?? "repository";
-    const worktreeDigest = runtimeWorktreeDigest(root, worktreeDigestProfile);
-    if (input.worktreeDigestPrecondition && input.worktreeDigestPrecondition.expectedDigest !== worktreeDigest) {
-      throw new Error("Worktree digest changed before plan");
-    }
-    const draft = this.changeSetEngine.plan({
-      id: input.id,
-      base: {
-        headSha: session.workspace.headSha,
-        worktreeDigest,
-        modelDigest: model.modelDigest
-      },
-      reason: input.reason ?? { taskSessionId: "task_runtime" },
-      operations: input.operations
-    });
-    this.changesets.set(draft.id, draft);
-    this.changeSetRoots.set(draft.id, canonicalRepositoryRoot(root));
-    this.changeSetWorktreeDigestProfiles.set(draft.id, worktreeDigestProfile);
-    if (input.approvalChannel === "mcp")
-      this.mcpChangeSets.add(draft.id);
-    else
-      this.mcpChangeSets.delete(draft.id);
-    return okEnvelope("plan_update", {
-      draft,
-      changeSetDigest: digestJson(draft),
-      preview: this.changeSetEngine.preview(root, draft)
-    });
+    return this.changeSetAuthority.planUpdate(root, rawInput);
   }
   async completeTask(root, input = {}) {
     this.assertRunning();
@@ -48965,177 +48896,19 @@ class ArchctxDaemon {
     return runProjectionProtocolCommand(input, root, this.projectionHost());
   }
   async approveMcpProjection(root, input) {
-    this.assertRunning();
-    try {
-      validateProjectionInvocation(input);
-      if (!projectionInvocationWrites(input))
-        throw new Error("Projection approval requires an apply, adopt or recover invocation");
-      assertProjectionInvocationSnapshot(root, input);
-    } catch (error) {
-      return errorEnvelope("projection.approve", "AC_PRECONDITION_FAILED", error instanceof Error ? error.message : String(error));
-    }
-    const now = Date.parse(this.clock());
-    if (!Number.isFinite(now))
-      return errorEnvelope("projection.approve", "AC_PRECONDITION_FAILED", "Approval clock is invalid");
-    for (const [key, grant] of this.mcpApprovals)
-      if (grant.expiresAt <= now)
-        this.mcpApprovals.delete(key);
-    if (this.mcpApprovals.size >= 256)
-      return errorEnvelope("projection.approve", "AC_PRECONDITION_FAILED", "Too many outstanding approvals; consume an approval or wait for expiry");
-    const approvalToken = randomBytes6(32).toString("hex");
-    const expiresAt = now + 5 * 60000;
-    this.mcpApprovals.set(digestJson(approvalToken), { scope: "projection", root: canonicalRepositoryRoot(root), invocationDigest: digestJson(input), expiresAt });
-    return okEnvelope("projection.approve", { approvalToken, expiresAt: new Date(expiresAt).toISOString() });
+    return this.changeSetAuthority.approveMcpProjection(root, input);
   }
   async mcpProjection(root, input, approvalToken) {
-    this.assertRunning();
-    try {
-      validateProjectionInvocation(input);
-    } catch (error) {
-      return errorEnvelope("projection", "AC_SCHEMA_INVALID", error instanceof Error ? error.message : String(error));
-    }
-    if (projectionInvocationWrites(input)) {
-      const denied = () => errorEnvelope("projection", "AC_USER_CONFIRMATION_REQUIRED", "A fresh one-time token from archctx projection approve is required");
-      if (typeof approvalToken !== "string" || !/^[a-f0-9]{64}$/.test(approvalToken))
-        return denied();
-      const key = digestJson(approvalToken);
-      const grant = this.mcpApprovals.get(key);
-      this.mcpApprovals.delete(key);
-      const now = Date.parse(this.clock());
-      if (!grant || grant.scope !== "projection" || !Number.isFinite(now) || grant.expiresAt <= now || grant.root !== canonicalRepositoryRoot(root) || grant.invocationDigest !== digestJson(input))
-        return denied();
-    }
-    return this.projection(root, input);
+    return this.changeSetAuthority.mcpProjection(root, input, approvalToken);
   }
   async approveMcpUpdate(root, input) {
-    this.assertRunning();
-    const draft = this.changesets.get(input?.id);
-    const canonicalRoot = canonicalRepositoryRoot(root);
-    const now = Date.parse(this.clock());
-    if (!draft || this.changeSetRoots.get(input.id) !== canonicalRoot || this.changeSetWorktreeDigestProfiles.get(input.id) !== "repository" || input.expectedChangeSetDigest !== digestJson(draft) || input.expectedWorktreeDigest !== draft.base.worktreeDigest || input.expectedWorktreeDigest !== runtimeWorktreeDigest(root, "repository") || !Number.isFinite(now)) {
-      return errorEnvelope("approve_mcp_update", "AC_PRECONDITION_FAILED", "Approval must match the current ChangeSet preview and repository");
-    }
-    for (const [key, grant] of this.mcpApprovals)
-      if (grant.expiresAt <= now)
-        this.mcpApprovals.delete(key);
-    if (this.mcpApprovals.size >= 256)
-      return errorEnvelope("approve_mcp_update", "AC_PRECONDITION_FAILED", "Too many outstanding approvals; consume an approval or wait for expiry");
-    const approvalToken = randomBytes6(32).toString("hex");
-    const expiresAt = now + 5 * 60000;
-    this.mcpApprovals.set(digestJson(approvalToken), {
-      scope: "changeset",
-      root: canonicalRoot,
-      id: input.id,
-      draftDigest: input.expectedChangeSetDigest,
-      worktreeDigest: input.expectedWorktreeDigest,
-      expiresAt
-    });
-    return okEnvelope("approve_mcp_update", { approvalToken, expiresAt: new Date(expiresAt).toISOString() });
+    return this.changeSetAuthority.approveMcpUpdate(root, input);
   }
   async applyMcpUpdate(root, input) {
-    this.assertRunning();
-    const denied = () => errorEnvelope("apply_update", "AC_USER_CONFIRMATION_REQUIRED", "A fresh one-time token from archctx approve is required");
-    if (typeof input?.approvalToken !== "string" || !/^[a-f0-9]{64}$/.test(input.approvalToken))
-      return denied();
-    const key = digestJson(input.approvalToken);
-    const grant = this.mcpApprovals.get(key);
-    if (!grant)
-      return denied();
-    this.mcpApprovals.delete(key);
-    const draft = this.changesets.get(input.id);
-    const now = Date.parse(this.clock());
-    if (grant.scope !== "changeset" || !Number.isFinite(now) || grant.expiresAt <= now || grant.root !== canonicalRepositoryRoot(root) || grant.id !== input.id || grant.worktreeDigest !== input.expectedWorktreeDigest || !draft || grant.draftDigest !== digestJson(draft))
-      return denied();
-    return this.applyAuthorizedUpdate(root, { id: input.id, expectedWorktreeDigest: input.expectedWorktreeDigest, approved: true });
+    return this.changeSetAuthority.applyMcpUpdate(root, input);
   }
   async applyUpdate(root, rawInput) {
-    this.assertRunning();
-    if (this.mcpChangeSets.has(rawInput?.id)) {
-      return errorEnvelope("apply_update", "AC_USER_CONFIRMATION_REQUIRED", "MCP ChangeSets require a one-time approval token through applyMcpUpdate");
-    }
-    return this.applyAuthorizedUpdate(root, rawInput);
-  }
-  async applyAuthorizedUpdate(root, rawInput) {
-    this.assertRunning();
-    let input;
-    try {
-      input = decodeRuntimeApplyUpdateInput(rawInput);
-    } catch (error) {
-      if (error instanceof RuntimeUpdateInputError) {
-        return errorEnvelope("apply_update", "AC_SCHEMA_INVALID", error.message);
-      }
-      throw error;
-    }
-    return this.withWriter(async () => {
-      const draft = this.changesets.get(input.id);
-      if (!draft)
-        throw new Error(`Unknown ChangeSet: ${input.id}`);
-      const plannedProfile = this.changeSetWorktreeDigestProfiles.get(input.id);
-      if (!plannedProfile)
-        throw new Error("ChangeSet worktree digest profile missing before apply");
-      const requestedProfile = input.worktreeDigestProfile ?? "repository";
-      if (requestedProfile !== plannedProfile)
-        throw new Error("ChangeSet worktree digest profile changed before apply");
-      const current = runtimeWorktreeDigest(root, plannedProfile);
-      if (current !== input.expectedWorktreeDigest)
-        throw new Error("Worktree digest changed before apply");
-      const session = await this.openSession(root);
-      if (draft.base.headSha !== session.workspace.headSha)
-        throw new Error("ChangeSet HEAD changed before apply");
-      if (draft.base.worktreeDigest !== current)
-        throw new Error("ChangeSet worktree digest changed before apply");
-      const currentModel = await this.readModelStore.validateModel(session.workspace);
-      const baseErrors = baseModelBlockingErrors(currentModel);
-      if (baseErrors.length > 0) {
-        throw new Error(`ChangeSet base model is invalid: ${baseErrors.join("; ")}`);
-      }
-      if (draft.base.modelDigest !== currentModel.modelDigest)
-        throw new Error("ChangeSet model digest changed before apply");
-      if (input.projectionApplyReceipt && await this.localStore.inspectProjectionApplyReceipt(input.projectionApplyReceipt.identity.lookupKey)) {
-        return errorEnvelope("apply_update", "AC_PRECONDITION_FAILED", "committed projection receipt requires explicit projection recover");
-      }
-      const approved = input.approved ? this.changeSetEngine.approve(draft) : draft;
-      const transitionBase = captureModelTransitionBase(root, approved);
-      let ledgerAppend;
-      let appliedJournalId;
-      const writesLedger = architectureLedgerWriteAppendsEvents(this.architectureLedger.writeMode);
-      const result = await this.changeSetEngine.apply(root, approved, {
-        approved: input.approved,
-        afterModelValidatedBeforeCommit: async ({ journalId }) => {
-          appliedJournalId = journalId;
-          if (transitionBase && journalId)
-            await recordModelTransitionEvidence(this.localStore, root, journalId, transitionBase);
-          if (journalId && this.projectionPlannedDrafts.has(draft))
-            await this.localStore.recordChangeSetProjectionOwner(journalId);
-          if (input.projectionApplyReceipt) {
-            if (!journalId)
-              throw new Error("projection apply receipt requires a durable ChangeSet journal");
-            await this.localStore.recordProjectionApplyReceipt(journalId, input.projectionApplyReceipt);
-          }
-          if (writesLedger) {
-            const appended = await this.appendAppliedChangeSetToArchitectureLedger(root, session, approved, journalId);
-            ledgerAppend = {
-              status: "appended",
-              appendedEventCount: appended.appendedEvents.length,
-              duplicateEventCount: appended.duplicateEvents.length,
-              graphDigest: appended.graphDigest,
-              entityCount: appended.entityCount,
-              relationCount: appended.relationCount,
-              constraintCount: appended.constraintCount
-            };
-          }
-          return { journalCommitted: writesLedger && Boolean(journalId) };
-        }
-      });
-      return okEnvelope("apply_update", {
-        ...result,
-        ...appliedJournalId ? { journalId: appliedJournalId } : {},
-        architectureLedger: {
-          ...this.architectureLedger,
-          append: writesLedger ? ledgerAppend ?? { status: "not-appended" } : { status: "not-applicable" }
-        }
-      });
-    });
+    return this.changeSetAuthority.applyUpdate(root, rawInput);
   }
   async inspectProjectionApplyReceipt(root, lookupKey) {
     return this.projectionApplies.inspectProjectionApplyReceipt(root, lookupKey);
@@ -49149,112 +48922,8 @@ class ArchctxDaemon {
   async recoverProjectionApply(root, intent) {
     return this.projectionApplies.recoverProjectionApply(root, intent);
   }
-  async appendAppliedChangeSetToArchitectureLedger(root, session, draft, journalId) {
-    const paths = runtimeStatePaths(root);
-    const scope = {
-      repository: {
-        repositoryId: session.workspace.repositoryId,
-        storageRepositoryId: paths.storageRepositoryId
-      },
-      worktree: {
-        workspaceId: paths.workspaceId,
-        storageWorkspaceId: paths.storageWorkspaceId,
-        branch: readCurrentBranch(root),
-        headSha: session.workspace.headSha,
-        worktreeDigest: computeWorktreeDigest(root)
-      }
-    };
-    const plan = planChangeSetApplyToArchitectureLedgerEvent({
-      ...scope,
-      draft,
-      files: listModelFiles(root),
-      previousEvidenceState: await this.localStore.replayArchitectureLedgerEvidence(scope),
-      createdAt: this.clock(),
-      writeMode: this.architectureLedger.writeMode === "ledger-with-projection" ? "ledger-with-projection" : "dual",
-      command: "archctx apply"
-    });
-    if (journalId)
-      await this.localStore.recordChangeSetLedgerPlan(journalId, { event: plan.event });
-    const appendInput = { writer: "runtime-daemon", events: [plan.event] };
-    const result = await this.appendArchitectureEventsWithFeed(root, appendInput, journalId);
-    return result;
-  }
   async acceptCommittedChange(root, rawInput) {
-    this.assertRunning();
-    let input;
-    try {
-      input = decodeAcceptCommittedChangeInput(rawInput);
-    } catch (error) {
-      if (error instanceof AcceptCommittedChangeInputError)
-        return errorEnvelope("ledger.accept-committed", "AC_SCHEMA_INVALID", error.message);
-      throw error;
-    }
-    if (this.architectureLedger.readMode !== "yaml" || this.architectureLedger.writeMode !== "yaml") {
-      return errorEnvelope("ledger.accept-committed", "AC_PRECONDITION_FAILED", "committed YAML acceptance requires YAML read and write authority");
-    }
-    return this.withWriter(async () => {
-      try {
-        const canonicalRoot = canonicalRepositoryRoot(root);
-        const journals = [];
-        for (const ref of input.journals)
-          journals.push(await this.localStore.readCommittedChangeSet(canonicalRoot, ref.journalId));
-        const model = loadNativeModelFromArchContext(canonicalRoot);
-        const worktreeDigest = architectureDocumentationProjectionWorktreeDigest(canonicalRoot, model);
-        const projection3 = buildArchitectureDocsProjection(this.projectionHost(), canonicalRoot, new Date(0).toISOString(), "repo-harness/v1");
-        const scope = acceptedCommittedChangeScope(canonicalRoot, worktreeDigest, resolveAcceptanceHeadSha(canonicalRoot));
-        const manifestWrite = await this.localStore.readLatestCommittedChangeSetFile(canonicalRoot, "docs/architecture/.projection-manifest.json");
-        const acceptance = planCommittedChangeAcceptance(canonicalRoot, {
-          requested: input.journals,
-          journals,
-          model,
-          existingFiles: projection3.loaded.existingFiles,
-          latestJournaledManifest: manifestWrite,
-          projection: projection3.plan,
-          currentEvidence: projection3.snapshotEvidence,
-          projectionWorktreeDigest: worktreeDigest,
-          scope
-        });
-        if (!input.approved) {
-          return okEnvelope("ledger.accept-committed", { status: "preview", plan: acceptance.plan, acceptancePlanId: acceptance.acceptancePlanId, expectedWorktreeDigest: worktreeDigest });
-        }
-        if (input.expectedWorktreeDigest !== worktreeDigest)
-          throw new Error("accepted ChangeSet expected worktree digest mismatch");
-        if (input.acceptancePlanId !== acceptance.acceptancePlanId)
-          throw new Error("accepted ChangeSet acceptance plan changed since preview");
-        const accepted = (event2, replayed) => {
-          const recorded = acceptedChangeFromEventV2(event2);
-          if (!recorded || !event2.eventHash)
-            throw new Error("committed ChangeSet acceptance readback failed");
-          return okEnvelope("ledger.accept-committed", {
-            status: "accepted",
-            replayed,
-            acceptedChange: recorded.acceptedChange,
-            acceptancePlanId: recorded.acceptancePlanId,
-            journalIds: input.journals.map((journal) => journal.journalId),
-            eventHash: event2.eventHash,
-            fileSetDigest: acceptance.plan.fileSetDigest
-          });
-        };
-        const existing = await this.localStore.readArchitectureEvent({ ...scope, eventId: acceptance.acceptedChange.eventId });
-        if (existing) {
-          if (acceptedChangeFromEventV2(existing)?.acceptancePlanId === acceptance.acceptancePlanId)
-            return accepted(existing, true);
-          throw new Error(`committed ChangeSet already has a different acceptance event at this snapshot: ${existing.eventId}`);
-        }
-        const ledgerGraphDigest = architectureLedgerStateDigest(await this.localStore.readArchitectureLedgerState(scope));
-        const event = acceptedCommittedChangeEventV2({ acceptance, scope, ledgerGraphDigest, timestamp: this.clock() });
-        const appended = await this.appendArchitectureEventsWithFeed(canonicalRoot, { writer: "runtime-daemon", events: [event] });
-        if (appended.appendedEvents.length !== 1)
-          throw new Error("committed ChangeSet acceptance event was not appended");
-        const readback = await this.localStore.readArchitectureEvent({ ...scope, eventId: event.eventId });
-        if (!readback || readback.eventType !== event.eventType || readback.payloadVersion !== event.payloadVersion) {
-          throw new Error("committed ChangeSet acceptance readback failed");
-        }
-        return accepted(readback, false);
-      } catch (error) {
-        return errorEnvelope("ledger.accept-committed", "AC_PRECONDITION_FAILED", error instanceof Error ? error.message : String(error));
-      }
-    });
+    return this.changeSetAuthority.acceptCommittedChange(root, rawInput);
   }
   async ledgerState(root) {
     this.assertRunning();
@@ -49534,7 +49203,7 @@ class ArchctxDaemon {
   }
   async restoreRepositorySessions() {
     for (const record3 of await this.localStore.listRepositorySessions()) {
-      if (!record3.root || !existsSync24(record3.root))
+      if (!record3.root || !existsSync25(record3.root))
         continue;
       if (repositoryFingerprint(record3.root) !== record3.repositoryId)
         continue;
@@ -49596,16 +49265,6 @@ class ArchctxDaemon {
 function shortDigest3(digest2) {
   return digest2.replace(/^sha256:/, "").slice(0, 16);
 }
-function runtimeWorktreeDigest(root, profile) {
-  switch (profile) {
-    case "repository":
-      return computeWorktreeDigest(root);
-    case "architecture-documentation-projection":
-      return architectureDocumentationProjectionWorktreeDigest(root, loadNativeModelFromArchContext(root));
-    default:
-      throw new RuntimeUpdateInputError(`unsupported worktree digest profile: ${String(profile)}`);
-  }
-}
 function codeFactsDigest(snapshot) {
   return digestJson({
     schemaVersion: "archcontext.code-facts-digest/v1",
@@ -49631,19 +49290,6 @@ function architectureLedgerScopeForWorkspace(workspace) {
     }
   };
 }
-function acceptedCommittedChangeScope(root, worktreeDigest, headSha) {
-  const paths = runtimeStatePaths(root);
-  return {
-    repository: { repositoryId: repositoryFingerprint(root), storageRepositoryId: paths.storageRepositoryId },
-    worktree: {
-      workspaceId: projectionWorkspaceId(root),
-      storageWorkspaceId: paths.storageWorkspaceId,
-      branch: readCurrentBranch(root),
-      headSha,
-      worktreeDigest
-    }
-  };
-}
 function validateModelFiles(files) {
   const errors2 = [];
   const paths = new Set(files.map((file) => file.path));
@@ -49688,18 +49334,6 @@ function schemaVersionFromModelBody(body) {
   } catch {}
   return "";
 }
-function safePracticeWaiverId(explicit, waiver) {
-  const explicitTrimmed = explicit?.trim();
-  if (explicitTrimmed && (explicitTrimmed === "." || explicitTrimmed === ".." || explicitTrimmed.includes("/") || explicitTrimmed.includes("\\"))) {
-    throw new Error("practice-waiver-id-invalid");
-  }
-  const evidencePrefix = waiver.evidenceDigest.startsWith("sha256:") ? waiver.evidenceDigest.slice("sha256:".length, "sha256:".length + 12) : waiver.evidenceDigest.slice(0, 12);
-  const candidate = (explicitTrimmed || [waiver.practiceId.replace(/\./g, "-"), waiver.checkId ?? "all", evidencePrefix].join("-")).replace(/[^A-Za-z0-9_.-]/g, "-").replace(/-+/g, "-").replace(/^-+|-+$/g, "").slice(0, 96);
-  if (!candidate || candidate === "." || candidate === ".." || candidate.includes("/") || candidate.includes("\\")) {
-    throw new Error("practice-waiver-id-invalid");
-  }
-  return candidate;
-}
 async function createStartedDaemon(deps = {}) {
   const daemon = new ArchctxDaemon(deps);
   await daemon.start();
@@ -49820,9 +49454,6 @@ function readRuntimeArchitectureLedgerWriteMode(value) {
 function architectureLedgerReadAuthority(mode) {
   return mode === "ledger" ? "ledger" : "yaml";
 }
-function architectureLedgerWriteAppendsEvents(mode) {
-  return mode === "dual" || mode === "ledger-with-projection";
-}
 var GIT_OBJECT_NAME_PATTERN = /^[0-9a-f]{7,64}$/;
 function readChangedPathsSince(root, commit) {
   if (!GIT_OBJECT_NAME_PATTERN.test(commit)) {
@@ -49861,7 +49492,7 @@ function blockedProductionInjections(deps) {
   ].filter((key) => (key in deps));
 }
 function completeTaskProjectionDrift(root) {
-  if (!existsSync24(resolve25(root, "docs/architecture/.projection-manifest.json")))
+  if (!existsSync25(resolve26(root, "docs/architecture/.projection-manifest.json")))
     return;
   const profile = loadArchitectureDocumentationProfile(root);
   const loaded = loadArchitectureDocumentationInputs(root, profile);
@@ -50375,10 +50006,10 @@ class McpLocalServer {
         ...localResources,
         ...cacheEntries.filter((entry) => typeof entry.contentDigest === "string" && /^sha256:[0-9a-f]{64}$/.test(entry.contentDigest)).map((entry) => {
           const library = typeof entry.libraryId === "string" ? entry.libraryId : "context7";
-          const version2 = typeof entry.version === "string" ? entry.version : "unknown";
+          const version = typeof entry.version === "string" ? entry.version : "unknown";
           return {
             uri: `archcontext://external-docs/context7/${entry.contentDigest}`,
-            name: `Context7 ${library}@${version2}`,
+            name: `Context7 ${library}@${version}`,
             description: "Read-only external documentation resource from the local daemon cache.",
             mimeType: "application/json",
             annotations: { safety: "read-only" }
@@ -50741,7 +50372,7 @@ async function runCliUnchecked(command2 = "help", args2 = [], cwd, deps = {}) {
         const subcommand = args2[0] ?? "list";
         if (subcommand === "add") {
           const root = readFlag(args2, "--root") ?? cwd;
-          if (resolve26(root) !== resolve26(cwd)) {
+          if (resolve27(root) !== resolve27(cwd)) {
             return errorEnvelope("repo.add", "AC_CAPABILITY_UNSUPPORTED", "Multi-repo architecture context is outside the Local Core MVP; run archctx inside one Git repository.");
           }
           const daemon2 = await runtime();
@@ -51978,8 +51609,8 @@ function auditManifestGateRoot(cwd) {
   }
 }
 function auditGithubIssuesEnabled(cwd) {
-  const manifestPath = resolve26(auditManifestGateRoot(cwd), ".archcontext/manifest.yaml");
-  if (!existsSync25(manifestPath))
+  const manifestPath = resolve27(auditManifestGateRoot(cwd), ".archcontext/manifest.yaml");
+  if (!existsSync26(manifestPath))
     return false;
   let raw;
   try {
@@ -52365,7 +51996,7 @@ async function runGithubCommand(args2, cwd, deps) {
   }
   if (subcommand === "disconnect") {
     const connection = await deps.githubConnectionReader?.readVerifiedConnection({ repositoryRoot: cwd });
-    const localRecordRemoved = existsSync25(connectionPath);
+    const localRecordRemoved = existsSync26(connectionPath);
     rmSync16(connectionPath, { force: true });
     return okEnvelope("github.disconnect", {
       connected: connection !== undefined,
@@ -52677,7 +52308,7 @@ async function readReviewChallengeV2Arg(args2, cwd, commandName = "github verify
   if (!inline && !challengePath)
     return { ok: false, message: `${commandName} requires --challenge-json or --challenge-path` };
   try {
-    const raw = inline ?? readFileSync27(resolve26(cwd, challengePath), "utf8");
+    const raw = inline ?? readFileSync27(resolve27(cwd, challengePath), "utf8");
     const parsed = JSON.parse(raw);
     const attestation = await Promise.resolve().then(() => (init_src6(), exports_src2));
     const assertReviewChallengeV23 = attestation.assertReviewChallengeV2;
@@ -53152,10 +52783,10 @@ function doctorSqlite(cwd) {
   const legacyLocalStore = inspectLegacyLocalStoreMigration(cwd);
   return {
     path,
-    exists: existsSync25(path),
+    exists: existsSync26(path),
     migrations: productVersionManifest().runtime.sqliteMigrations,
     legacyPath: paths.legacyLocalStorePath,
-    legacyExists: existsSync25(paths.legacyLocalStorePath),
+    legacyExists: existsSync26(paths.legacyLocalStorePath),
     legacyLocalStore
   };
 }
@@ -53186,7 +52817,7 @@ function runtimePathsReport(cwd) {
   };
 }
 function pathAccess(path) {
-  const exists = existsSync25(path);
+  const exists = existsSync26(path);
   return {
     path,
     exists,
@@ -53644,7 +53275,7 @@ async function waitForDaemonReady(cwd, timeoutMs, shouldStop) {
   return;
 }
 function sleep(ms) {
-  return new Promise((resolve27) => setTimeout(resolve27, ms));
+  return new Promise((resolve28) => setTimeout(resolve28, ms));
 }
 function readFileTail(path, maxBytes = 4096) {
   try {
@@ -53657,8 +53288,8 @@ function readFileTail(path, maxBytes = 4096) {
 async function runForegroundDaemon(cwd, args2) {
   const daemon = await createStartedProductionDaemon({ root: cwd });
   let resolveStopped;
-  const stopped = new Promise((resolve27) => {
-    resolveStopped = resolve27;
+  const stopped = new Promise((resolve28) => {
+    resolveStopped = resolve28;
   });
   const idleTimeoutFlag = readFlag(args2, "--idle-timeout-ms");
   const server = new ArchctxRuntimeRpcServer(daemon, {