yichus 0.2.0 → 0.3.1

package/dist/cli.js

@@ -1,2132 +1,26 @@
 #!/usr/bin/env node
 
-// src/cli.ts
-import { text as text2 } from "stream/consumers";
-import { checkLeanWasmSources, findApiMcpBundle, loadApiEngine } from "@yichus/api-mcp";
-
-// src/run.ts
-import fs5 from "fs";
-import path6 from "path";
-import { isDeepStrictEqual, parseArgs as parseArgs2 } from "util";
-import { z as z7 } from "zod";
-
-// src/engine-results.ts
-import { z } from "zod";
-var PropertyStatus = z.enum(["proven", "warning", "violated", "blocked"]);
-var Property = z.looseObject({
-  id: z.string(),
-  title: z.string().optional(),
-  status: PropertyStatus,
-  details: z.array(z.string()),
-  // The declared assumption an accepted warning rests on, e.g. "instances=1".
-  accepted: z.string().optional()
-});
-var VerifyResult = z.looseObject({
-  topology: z.string().optional(),
-  verdict: z.looseObject({
-    properties: z.array(Property),
-    errors: z.array(z.string()).default([]),
-    // Present only when the caller passed block_on_warnings: the warnings
-    // among the listed properties, which made the verdict not proven.
-    blockedWarnings: z.array(z.string()).optional()
-  })
-});
-var VerdictErrors = z.object({ verdict: z.object({ errors: z.array(z.string()) }) });
-var EngineError = z.object({ error: z.string(), errorKinds: z.array(z.string()).optional() });
-var Count = z.int().nonnegative();
-var AbstractionMap = z.looseObject({
-  measures: z.looseObject({
-    definitions: Count,
-    edges: Count,
-    layers: Count,
-    layerSkips: Count,
-    usedOnce: Count,
-    usedMany: Count,
-    clonePairs: Count,
-    duplicatedMass: Count,
-    maxSize: Count,
-    largestDefinition: z.string().optional()
-  })
-});
-
-// src/verdict.ts
-var title = (p) => p.title ?? p.id;
-var MEANING = {
-  proven: "holds for every input",
-  warning: "holds only under the acceptance its details name",
-  violated: "is broken; the details are the evidence",
-  blocked: "was not checked: the check could not run, could not finish, or could not see its subject"
-};
-var ACCEPTANCE = {
-  "instances=1": "Safe while you run one instance (--instances 1). Before running more than one:"
+// package.json
+var engines = {
+  node: ">=20"
 };
-var acceptance = (a) => ACCEPTANCE[a] ?? `Safe under the declared ${a}. Before dropping it:`;
-var label = (p) => p.status === "warning" && p.accepted !== void 0 ? "accepted" : p.status;
-var indent = (text3, prefix) => text3.split("\n").map((line) => prefix + line).join("\n");
-function count(props) {
-  const order = [];
-  const counts = /* @__PURE__ */ new Map();
-  for (const p of props) {
-    const status = label(p);
-    if (!counts.has(status)) order.push(status);
-    counts.set(status, (counts.get(status) ?? 0) + 1);
-  }
-  return order.map((status) => `${counts.get(status)} ${status}`).join(", ");
-}
-function verifySummary(result, proven, artifact) {
-  const parsed = VerifyResult.safeParse(result);
-  if (!parsed.success) {
-    const said = EngineError.safeParse(result);
-    const reason = said.success ? ` The engine said: ${said.data.error}` : "";
-    const errors2 = VerdictErrors.safeParse(result);
-    const lines2 = [
-      proven ? "Proven, but the verdict has no readable property list." : `Not proven. The engine returned no readable verdict.${reason}`
-    ];
-    if (errors2.success && errors2.data.verdict.errors.length)
-      lines2.push("Errors:", ...errors2.data.verdict.errors.map((e) => indent(e, "  ")));
-    lines2.push(`The full result is in ${artifact}.`);
-    return `${lines2.join("\n")}
-`;
-  }
-  const checked = parsed.data.verdict.properties;
-  const errors = parsed.data.verdict.errors;
-  const topology2 = parsed.data.topology !== void 0 ? ` Topology: ${parsed.data.topology}.` : "";
-  const lines = [];
-  if (proven) {
-    lines.push(`Proven: ${checked.length} properties checked (${count(checked)}).${topology2}`);
-  } else {
-    lines.push(`Not proven: ${checked.length} properties checked (${count(checked)}).${topology2}`);
-    const blocking = new Set(parsed.data.verdict.blockedWarnings ?? []);
-    const first = checked.find((p) => p.status === "violated") ?? checked.find((p) => p.status !== "proven" && p.status !== "warning") ?? checked.find((p) => blocking.has(p.id));
-    if (first) {
-      const why = blocking.has(first.id) && first.status === "warning" ? " It blocks because --block-on-warning named it." : "";
-      lines.push(`First failure (${first.status}): ${title(first)}. This property ${MEANING[first.status]}.${why}`);
-      for (const detail of first.details) lines.push(indent(detail, "    "));
-    }
-  }
-  lines.push("Every property:");
-  const width = Math.max(...checked.map((p) => label(p).length));
-  for (const p of checked) {
-    lines.push(`  ${label(p).padEnd(width)}  ${title(p)}`);
-    const pad = `  ${" ".repeat(width)}    `;
-    if (p.status === "warning" && p.accepted !== void 0) lines.push(pad + acceptance(p.accepted));
-    if (p.status === "warning") for (const detail of p.details) lines.push(indent(detail, pad));
-  }
-  const shown2 = new Set(checked.flatMap((p) => p.details));
-  const unshown = errors.filter((e) => !shown2.has(e));
-  if (unshown.length) lines.push("Errors:", ...unshown.map((e) => indent(e, "  ")));
-  lines.push(`The full verdict, with every property's details, is in ${artifact}.`);
-  return `${lines.join("\n")}
-`;
-}
 
-// src/lean-verdict.ts
-import { LEAN_WASM_INSTALL_COMMAND, LeanCheckResult } from "@yichus/api-mcp";
-import { z as z2 } from "zod";
-var plural = (n, word) => `${n} ${word}${n === 1 ? "" : "s"}`;
-var indent2 = (value, prefix) => value.split("\n").map((line) => prefix + line).join("\n");
-var SIDE = {
-  rejected: "checker",
-  "axiom-audit": "checker",
-  "not-admitted": "checker",
-  "runtime-missing": "harness",
-  timeout: "harness",
-  "runtime-error": "harness"
-};
-var DEFAULT_TIMEOUT_MS = 18e4;
-var MAX_TIMEOUT_MS = 3e5;
-function remedy(cause, timeoutMs, files) {
-  const sources = files.map((f) => `--source ${f}`).join(" ");
-  switch (cause) {
-    case "runtime-missing":
-      return [
-        "Install the pinned runtime once (about 290 MB to download), then pass that folder as --lean-wasm-root:",
-        `  ${LEAN_WASM_INSTALL_COMMAND.replace("NEW_DIRECTORY", "/absolute/new/folder")}`
-      ];
-    case "timeout":
-      return [timeoutMs < MAX_TIMEOUT_MS ? `The ${timeoutMs} ms budget ran out before Lean finished. Rerun with a larger --timeout-ms (the default is ${DEFAULT_TIMEOUT_MS}, the most is ${MAX_TIMEOUT_MS}).` : `The ${timeoutMs} ms budget, the most allowed, ran out before Lean finished. Split the laws across separate files and check them one at a time.`];
-    case "runtime-error":
-      return [
-        "The Lean Wasm runtime could not run. If it was changed or only partly installed, install a fresh copy into a new folder:",
-        `  ${LEAN_WASM_INSTALL_COMMAND.replace("NEW_DIRECTORY", "/absolute/new/folder")}`
-      ];
-    case "rejected":
-      return [
-        "A rejected theorem means the law fails for some input, its witness matches no value, or the generated Lean is wrong; Lean's words above say which.",
-        `To see a failing input, run: yichus call api_law_check ${sources}. Fix the code, not the law.`
-      ];
-    case "axiom-audit":
-      return ["Lean accepted the theorem, but its axiom audit was missing or named an axiom other than propext, Classical.choice and Quot.sound, so it is not counted as proven."];
-    case "not-admitted":
-      return [`Lean Wasm proves Bool and structural List[Bool] laws with one direct witness. Check other laws with: yichus call api_law_check ${sources}`];
-  }
-}
-var unreadable = (artifact, why) => ({
-  exit: 2,
-  text: `Not checked: the Lean result could not be read (${why}). The full result is in ${artifact}.
-`
-});
-var EngineError2 = z2.object({ ok: z2.literal(false), error: z2.string().min(1), proof: z2.undefined().optional() });
-var issue = (error) => {
-  const first = error.issues[0];
-  return first.path.length ? `${first.path.join(".")}: ${first.message}` : first.message;
-};
-function leanSummary(raw, artifact, timeoutMs, files) {
-  const refused = EngineError2.safeParse(raw);
-  if (refused.success) return unreadable(artifact, `the engine said: ${refused.data.error}`);
-  const parsed = LeanCheckResult.safeParse(raw);
-  if (!parsed.success) return unreadable(artifact, issue(parsed.error));
-  const proof = parsed.data.proof;
-  const laws = proof.obligations;
-  const lines = [];
-  if (proof.status === "verified") {
-    lines.push(`Proven: ${plural(laws.length, "law")} verified by the pinned Lean Wasm kernel.`);
-    for (const row of laws) {
-      if (row.status !== "verified") continue;
-      const { check, witness, domain } = row.proof.subject;
-      lines.push(`  ${row.binding}: ${check} holds for ${domain}, and ${witness} holds for at least one.`);
-    }
-    lines.push(`The proof receipt is in ${artifact}. It is a local Wasm kernel check (independentKernelReplay: false).`);
-    return { exit: 0, text: `${lines.join("\n")}
-` };
-  }
-  if (!laws.length) {
-    const cause = proof.cause;
-    const checker2 = SIDE[cause] === "checker";
-    lines.push(`${checker2 ? "Not proven" : "Not checked"}: ${proof.reason}.`);
-    if (cause === "not-admitted") lines.push("Fix the source, or add a Yichus/Law Obligation for lean to prove.");
-    else lines.push(...remedy(cause, timeoutMs, files));
-    lines.push(`The full result is in ${artifact}.`);
-    return { exit: checker2 ? 1 : 2, text: `${lines.join("\n")}
-` };
-  }
-  const failed = laws.flatMap((row) => row.status === "inconclusive" ? [row] : []);
-  const causes = [...new Set(failed.map((row) => row.cause))];
-  const checker = causes.some((cause) => SIDE[cause] === "checker");
-  lines.push(checker ? `Not proven: ${failed.length} of ${plural(laws.length, "law")} did not verify.` : `Not checked: ${failed.length} of ${plural(laws.length, "law")} could not be checked.`);
-  for (const row of laws) {
-    if (row.status === "verified") {
-      lines.push(`  verified      ${row.binding}`);
-      continue;
-    }
-    lines.push(`  ${row.cause.padEnd(12)}  ${row.binding}: ${row.reason}.`);
-    if (row.diagnostics?.length) lines.push("      Lean said:", ...row.diagnostics.map((d) => indent2(d, "        ")));
-  }
-  for (const cause of causes) lines.push(...remedy(cause, timeoutMs, files));
-  lines.push(`The full result is in ${artifact}.`);
-  return { exit: checker ? 1 : 2, text: `${lines.join("\n")}
-` };
-}
-
-// src/call-summary.ts
-var plural2 = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
-function mapSummary(result) {
-  const parsed = AbstractionMap.safeParse(result);
-  if (!parsed.success) return ["The map has no readable measures block; read the JSON for its contents."];
-  const m = parsed.data.measures;
-  const lines = [
-    `Layers: ${plural2(m.definitions, "definition")} stacked ${plural2(m.layers, "layer")} deep (a definition sits one layer above the highest one it uses).`,
-    m.layerSkips === 0 ? `Layer skips: none of the ${plural2(m.edges, "dependency edge")} reaches past the layer just below.` : `Layer skips: ${m.layerSkips} of ${plural2(m.edges, "dependency edge")} reach past the layer just below, using a definition two or more layers down; they are the "edges" with "span" above 1.`,
-    `Reuse: ${plural2(m.usedMany, "definition is", "definitions are")} used by several others, ${m.usedOnce} by exactly one (each node's "fanIn").`,
-    m.clonePairs === 0 ? "Copies: no two definitions have the same compiled body." : `Copies: ${plural2(m.clonePairs, "pair")} of definitions have the same compiled body; see "clonePairs".`,
-    m.duplicatedMass === 0 ? "Repeats: no block of code repeats inside a definition." : `Repeats: blocks repeated inside one definition add ${plural2(m.duplicatedMass, "node")}; nodes with "repeatedBlockMass" above 0 list each block's places in "repeatedBlocks".`
-  ];
-  if (m.largestDefinition !== void 0)
-    lines.push(`Largest definition: ${m.largestDefinition} (${m.maxSize} nodes).`);
-  return lines;
-}
-var SUMMARIES = {
-  api_abstraction_map: {
-    noun: "the abstraction map",
-    progress: (files) => `Mapping ${files === void 0 ? "the program" : plural2(files, "Bosatsu file")}: compiling it and measuring every definition, which can take half a minute or more for a large program...`,
-    summary: mapSummary
-  }
-};
-function callProgress(tool, files) {
-  const known = SUMMARIES[tool];
-  return known ? `${known.progress(files)}
-` : void 0;
-}
-function callSummary(tool, result, output) {
-  const known = SUMMARIES[tool];
-  const lines = [];
-  if (output) lines.push(`Wrote ${known?.noun ?? `the ${tool} result`} to ${output}.`);
-  if (known) lines.push(...known.summary(result));
-  return lines.length ? `${lines.join("\n")}
-` : void 0;
-}
-var NEXT_STEP = {
-  "duplicate-package": "Each package can be declared by only one file. Give each file its own package name, or pass only one of them."
-};
-function callFailure(tool, result, artifact) {
-  const said = EngineError.safeParse(result);
-  const lines = said.success ? [`${tool} failed:`, said.data.error] : [`${tool} failed without saying why.`];
-  if (said.success) {
-    for (const kind of said.data.errorKinds ?? []) if (Object.hasOwn(NEXT_STEP, kind)) lines.push(`Next: ${NEXT_STEP[kind]}`);
-  }
-  lines.push(`The full result is in ${artifact}.`);
-  return `${lines.join("\n")}
-`;
+// src/node-version.ts
+function nodeVersionProblem(running, required) {
+  const floor = /^>=(\d+)$/.exec(required);
+  if (!floor) throw new Error(`engines.node must read >=N, not ${required}`);
+  const needed = Number(floor[1]);
+  if (Number(running.split(".")[0]) >= needed) return void 0;
+  return `yichus needs Node ${needed} or newer; this is Node ${running}. Install Node ${needed} or newer and run the command again.`;
 }
 
-// src/studio/command.ts
-import path5 from "path";
-import { parseArgs } from "util";
-
-// src/studio/director.ts
-import fs3 from "fs";
-import path3 from "path";
-import { z as z5 } from "zod";
-
-// ../../web/system-map-record.js
-var MARKS_VERSION = "yichus-marks-2";
-var VOCABULARY = {
-  version: MARKS_VERSION,
-  fixedPlaces: {
-    callers: "left of the wall: one glyph per transport kind, HTTP above, importer below, each with a bracket over the openings it calls; the kind the program lacks is the same glyph struck through  <- callers[], ghostCallers[]",
-    openings: "the left wall: one opening per entry  <- entries[]",
-    hullBand: "the middle band of the wall: wrappers sit here and nowhere else; empty band = no entry goes through a shared wrapper  <- wrappers[]",
-    afterBand: "between the hull band and the reply bars: work an entry does after its wrapper returns, with its stations and checks; empty = none  <- entries[].beside",
-    replyBars: "one bar per entry at the same x, past the hull band  <- entries[]",
-    rail: "the bottom of the wall: a handle handed in from outside, with a riser to each use; a ? on the rail where a use is handed in on some paths only  <- uses[how=handed|mixed]",
-    rack: "right of the wall: db, model, net, always in this order; struck = the engine checked and found none  <- resources[], ghostResources[]",
-    quietLine: "bottom inside the wall: parts on no entry path, one stretch per package, with their forks, sockets, generic letters and steps  <- keyed[], library.applied[], steps[]"
-  },
-  marks: {
-    entryHead: "arrowhead at an opening; solid = the entry writes, hollow = it only reads  <- entries[].writes",
-    lock: "closed padlock by the path: sign-in with a secret key; open padlock with a raised shackle: a publishable key may call it  <- entries[].authority",
-    role: "red word beside the lock: a role beyond sign-in  <- entries[].roles",
-    limit: "gauge beside the path: a declared rate limit  <- entries[].limits",
-    station: "ring on a path: code touching a table, with the verb and table beside it; filled = writes  <- entries[].reach, wrappers[].effects, entries[].beside.effects",
-    modelRing: "violet ring: the entry reaches the model; the count under the model says how many entries do  <- entries[].model",
-    netRing: "orange ring: the entry reaches the network  <- entries[].net",
-    guard: "red diamond on the path where the check happens, its name above, failure stem below  <- entries[].guards, wrappers[].guards, entries[].passed[].guards, entries[].beside.guards",
-    hull: "translucent region in the hull band: paths merge into it, run one shared stretch, and split; everything inside it runs inside the wrapper  <- wrappers[]",
-    socket: "broken-rim ring: a function the caller hands in runs here; its centre fills like a station  <- entries[].passed[]",
-    token: "small grey word under a path: the value the caller fixes for the wrapper  <- entries[].policy",
-    afterDot: "dot in the after band: a call the entry makes after its wrapper returns  <- entries[].beside.calls",
-    builder: "plus-disc under a station with the call that builds the handle there  <- uses[how=local].builtBy",
-    unknown: "a ? in a circle on the rail: the engine traced the handle only on some paths  <- uses[how=mixed]",
-    fork: "three prongs and a type: a choice keyed on a plain String or Int; under the mark that makes it, else on the quiet line  <- keyed[]",
-    bundle: "one cable with a count: entries with the same wrapper and identical marks; its title names every route; opening it draws each one  <- bundles[]",
-    anchor: "where the rail starts: platform when no definition of the program can make the handle; ? when the trace stops and the program could  <- uses[].anchor",
-    step: "loop arc with a type on the quiet line: functions of the package take that type and return it  <- steps[]",
-    loop: "loop arc with package names: packages whose types lead back to themselves  <- phases.cycles",
-    composes: "hull round a chain: a definition takes the type the chain hands in at each step and applies it  <- library.applied[].fedBy",
-    port: "plug strip on the right: a record of functions; each adapter a plug, hollow when nothing plugs it in  <- library.ports[]",
-    generic: "the letter \u2200 with its variables over a part that never looks inside what it carries  <- library.generic[]"
-  },
-  rule: "every guard, wrapper, socket, fork, handle, station, step and resource the engine records is drawn at its fixed place, in every view; where nothing is drawn, the engine checked and found none."
-};
-var bare = (id) => String(id).split("::").pop();
-var pkgOf = (id) => String(id).split("::")[0];
-var uniq = (xs) => [...new Set(xs)];
-var OPS = { read: "read", query: "read", delete: "delete" };
-function effectsOf(steps) {
-  return (steps || []).filter((e) => e.resource === "db").flatMap((e) => e.tables.map((table) => ({ op: OPS[e.op] || "write", table })));
-}
-var isWrite = (op) => op !== "read";
-var uniqBy = (xs, key) => {
-  const seen = /* @__PURE__ */ new Set();
-  return xs.filter((x) => !seen.has(key(x)) && seen.add(key(x)));
-};
-var outsideResourcesOf = (steps) => uniq((steps || []).map((e) => e.resource).filter((r) => r === "model" || r === "net"));
-function buildSystemMap(engine, { program }) {
-  for (const [k, v] of Object.entries(engine)) if (!v.ok) throw new Error(`${k}: ${v.error}`);
-  const report = engine.report, st = engine.structure, abs = engine.abstractions.abstractions, layers = engine.layers.layers;
-  const routes = (report.surface.routes || []).slice().sort((a, b) => a.path.localeCompare(b.path));
-  const engEntry = new Map(st.entries.map((e) => [e.entry, e]));
-  const shapes = new Map(abs.routeShapes.map((r) => [r.path, r]));
-  const gens = new Map(abs.generators.map((g) => [g.id, g]));
-  const insts = abs.instantiations;
-  const besideOf = (inst) => ({
-    calls: inst.besideCalls.map(bare),
-    callIds: inst.besideCalls,
-    guards: inst.besideGuards.map(bare),
-    guardIds: inst.besideGuards,
-    effects: effectsOf(inst.besideEffectSteps),
-    resources: outsideResourcesOf(inst.besideEffectSteps),
-    from: "abstractions.instantiations[].beside*"
-  });
-  const entries = routes.map((r) => {
-    const key = `route:${r.path}`;
-    const ee = engEntry.get(key);
-    const rs = shapes.get(r.path);
-    const wrapper = rs.shapedByGenerator;
-    const inst = wrapper ? insts.find((i) => i.callerId === rs.handlerId && i.generatorId === wrapper) : null;
-    const passed = (inst ? inst.slotBindings : []).filter((sb) => ["function", "effect"].includes(sb.slotRole)).map((sb) => ({
-      slot: sb.slotName,
-      id: sb.targetId || null,
-      label: sb.targetId ? bare(sb.targetId) : null,
-      kind: sb.passedKind,
-      guards: (sb.guards || []).map(bare),
-      guardIds: sb.guards || [],
-      effects: effectsOf(sb.effectSteps),
-      from: "abstractions.instantiations[].slotBindings[slotRole=function|effect]"
-    }));
-    const reach = wrapper ? [
-      ...effectsOf(rs.effectsInGeneratorSteps).map((e) => ({ ...e, where: "wrapper", from: "abstractions.routeShapes[].effectsInGeneratorSteps" })),
-      ...effectsOf(rs.effectsInPassedFunctionSteps).map((e) => ({ ...e, where: "passed", from: "abstractions.routeShapes[].effectsInPassedFunctionSteps" })),
-      ...effectsOf(rs.effectsDirectOrBesideSteps).map((e) => ({ ...e, where: "beside", from: "abstractions.routeShapes[].effectsDirectOrBesideSteps" }))
-    ] : uniqBy([
-      ...effectsOf(r.inferredSteps).map((e) => ({ ...e, where: "direct", from: "report.surface.routes[].inferredSteps" })),
-      ...effectsOf(rs.effectsDirectOrBesideSteps).map((e) => ({ ...e, where: "direct", from: "abstractions.routeShapes[].effectsDirectOrBesideSteps" }))
-    ], (e) => `${e.op} ${e.table}`);
-    const limits = ee.limits.written === "literal" ? ee.limits.each.map((l) => ({ requests: +l.requests, seconds: +l.seconds, by: l.by })) : [];
-    return {
-      key,
-      path: r.path,
-      handler: r.handler,
-      handlerId: rs.handlerId,
-      transport: ee.transport,
-      authority: ee.authority,
-      signedIn: !["public", "anonymous"].includes(ee.authority),
-      roles: r.requiredRoles || [],
-      limits,
-      limitComputed: ee.limits.written === "computed",
-      reachKinds: ee.reaches,
-      model: ee.resources.includes("model"),
-      net: ee.resources.includes("net"),
-      writes: reach.some((e) => isWrite(e.op)),
-      guards: rs.handlerGuards.map(bare),
-      guardIds: rs.handlerGuards,
-      wrapper,
-      via: rs.viaSpecialization ? bare(rs.viaSpecialization) : null,
-      policy: (inst ? inst.slotBindings : []).filter((s) => s.slotRole === "semantic-object").map((s) => s.value).filter(Boolean),
-      passed,
-      beside: inst ? besideOf(inst) : null,
-      reach,
-      from: { entry: "report.surface.routes[]", transport: "structure.entries[]", shape: "abstractions.routeShapes[]", head: "entries[].reach (writes)" }
-    };
-  });
-  const partOf = (g) => {
-    const own = insts.filter((i) => i.generatorId === g.id);
-    return {
-      id: g.id,
-      label: g.name || bare(g.id),
-      pkg: pkgOf(g.id),
-      guards: g.envelope.guards.map(bare),
-      guardIds: g.envelope.guards,
-      effects: effectsOf(g.envelope.effectSteps),
-      groups: (g.parameterGroups || []).map((grp) => grp.map((sl) => ({ name: sl.name, role: sl.role, type: sl.type, guardsFed: (sl.guardsFed || []).map(bare) }))),
-      instantiationCount: own.length,
-      instantiatingPackages: uniq(own.map((i) => pkgOf(i.callerId))).sort(),
-      besideEmpty: own.every((i) => !i.besideCalls.length && !i.besideGuards.length && !i.besideEffects.length),
-      callers: own.map((i) => ({
-        id: i.callerId,
-        label: i.callerName || bare(i.callerId),
-        pkg: pkgOf(i.callerId),
-        routes: i.routes || [],
-        via: i.viaSpecialization ? bare(i.viaSpecialization) : null,
-        tokens: i.slotBindings.filter((s) => s.slotRole === "semantic-object").map((s) => s.value).filter(Boolean),
-        passed: i.slotBindings.filter((s) => ["function", "effect"].includes(s.slotRole)).map((s) => ({
-          slot: s.slotName,
-          id: s.targetId || null,
-          label: s.targetId ? bare(s.targetId) : null,
-          guards: (s.guards || []).map(bare),
-          guardIds: s.guards || [],
-          effects: effectsOf(s.effectSteps)
-        })),
-        beside: besideOf(i)
-      })),
-      from: "abstractions.generators[] + abstractions.instantiations[generatorId]"
-    };
-  };
-  const parts = abs.generators.filter((g) => insts.some((i) => i.generatorId === g.id)).map(partOf);
-  const wrapperIds = uniq(entries.map((e) => e.wrapper).filter(Boolean)).sort();
-  const wrappers = wrapperIds.map((id) => ({
-    ...parts.find((x) => x.id === id) || partOf(gens.get(id)),
-    entries: entries.filter((e) => e.wrapper === id).map((e) => e.key),
-    from: "abstractions.generators[] shaping routeShapes[].shapedByGenerator"
-  }));
-  const handlerToEntry = new Map(entries.map((e) => [e.handlerId, e.key]));
-  const passedToEntry = new Map(entries.flatMap((e) => e.passed.filter((p) => p.id).map((p) => [p.id, e.key])));
-  const uses = [];
-  for (const s of st.supply) {
-    const kind = s.via === "record" ? "record" : s.resource;
-    if (kind !== "db" && kind !== "record") continue;
-    const ids = /* @__PURE__ */ new Set([s.definition]);
-    for (const t of s.traces) {
-      for (const id of t.through) ids.add(id);
-      if (t.end.where) ids.add(t.end.where);
-      if (t.end.referrer) ids.add(t.end.referrer);
-    }
-    let ats;
-    if (handlerToEntry.has(s.definition)) ats = [{ node: "entry", entry: handlerToEntry.get(s.definition) }];
-    else if (wrapperIds.includes(s.definition)) ats = [{ node: "wrapper", wrapper: s.definition }];
-    else if (passedToEntry.has(s.definition)) ats = [{ node: "passed", entry: passedToEntry.get(s.definition), id: s.definition }];
-    else {
-      const ents = uniq([...ids].map((i) => handlerToEntry.get(i)).filter(Boolean));
-      ats = ents.length ? ents.map((entry) => ({ node: "entry", entry, helper: bare(s.definition) })) : [{ node: "definition", id: s.definition }];
-    }
-    const builtBy = s.traces.map((t) => t.end.kind === "builds" && t.end.by ? bare(t.end.by) : t.end.kind === "reachesFor" ? bare(t.end.definition) : null).find(Boolean) || null;
-    const anchor = !s.leaves ? "none" : s.leaves.builtBy.length ? "program" : "platform";
-    for (const at of ats) uses.push({
-      kind,
-      how: s.supply,
-      definition: s.definition,
-      effect: s.effect || null,
-      writes: s.via === "effect" && isWrite(OPS[s.op] || "write"),
-      at,
-      builtBy,
-      untracedSource: s.traces.some((t) => ["asValue", "entry"].includes(t.end.kind)),
-      anchor,
-      handleBuiltBy: s.leaves ? s.leaves.builtBy : [],
-      records: s.records || [],
-      ends: s.traces.map((t) => ({ kind: t.end.kind, where: t.end.where || null, referrer: t.end.referrer || null, definition: t.end.definition || null, by: t.end.by || null })),
-      from: "structure.supply[]"
-    });
-  }
-  const present = uniq(st.ioKinds.flatMap((b) => b.resources));
-  const tables = uniq(entries.flatMap((e) => [...e.reach, ...e.beside ? e.beside.effects : []].map((r) => r.table))).sort();
-  const resources = ["db", "model", "net"].filter((k) => present.includes(k)).map((k) => ({ kind: k, ...k === "db" ? { tables } : {}, from: "structure.ioKinds[].resources" }));
-  const ghostResources = ["db", "model", "net"].filter((k) => !present.includes(k)).map((k) => ({ kind: k, from: "structure.ioKinds[] checked: no site of this kind" }));
-  const transports = uniq(st.entries.map((e) => e.transport));
-  const callers = [];
-  if (transports.includes("http")) callers.push({ kind: "http", keyKinds: uniq(entries.map(keyKindOf)), from: "structure.entries[transport=http] + authority" });
-  if (transports.includes("link")) callers.push({ kind: "link", from: "structure.entries[transport=link]" });
-  const ghostCallers = ["http", "link"].filter((k) => !transports.includes(k)).map((k) => ({ kind: k, from: "structure.entries[]: no entry with this transport" }));
-  const library = routes.length ? null : {
-    packages: layers.packages.map((p) => ({ name: p.name, label: p.name.split("/").pop(), exports: p.definitions.filter((d) => d.exported).map((d) => d.name) })),
-    ports: st.ports.map((p) => ({
-      id: p.id,
-      label: bare(p.id),
-      pkg: pkgOf(p.id),
-      fields: p.fields,
-      heldBy: p.heldBy,
-      adapters: p.values.map((v) => ({ id: v.value, label: bare(v.value), usedBy: v.usedBy.map((u) => ({ id: u, label: bare(u), pkg: pkgOf(u) })) })),
-      from: "structure.ports[]"
-    })),
-    chains: st.chains.map((c) => ({
-      value: c.value,
-      label: bare(c.value),
-      pkg: pkgOf(c.value),
-      by: bare(c.by),
-      start: c.start.map((i) => i.id ? bare(i.id) : i.text),
-      steps: c.steps.map((s) => s.map((i) => ({ id: i.id || null, label: i.id ? bare(i.id) : i.text, pkg: i.id ? pkgOf(i.id) : null, applied: i.applied }))),
-      from: "structure.chains[]"
-    })),
-    combinations: st.combinations,
-    applied: st.applied.map((a) => ({
-      id: a.definition,
-      label: bare(a.definition),
-      pkg: pkgOf(a.definition),
-      fn: a.function,
-      insideBranch: a.insideBranch,
-      fedBy: a.fedBy,
-      from: "structure.applied[]"
-    })),
-    generic: st.generic.map((g) => ({ id: g.definition, label: bare(g.definition), vars: g.vars, signature: g.signature, from: "structure.generic[]" })),
-    exported: st.entries.filter((e) => e.transport === "link").map((e) => e.entry)
-  };
-  const steps = st.phases.phases.flatMap((ph) => ph.steps.map((s) => ({ pkg: ph.package, type: s.type, label: bare(s.type), by: s.by, from: "structure.phases.phases[].steps" })));
-  const keyed = st.keyed.map((k) => ({ id: k.definition, label: bare(k.definition), pkg: pkgOf(k.definition), types: uniq(k.parameters.map((p) => p.type)), from: "structure.keyed[]" }));
-  return {
-    schema: "system-map-2",
-    marks: MARKS_VERSION,
-    vocabulary: VOCABULARY,
-    program,
-    class: report.headline.class,
-    kind: routes.length ? "service" : "library",
-    callers,
-    ghostCallers,
-    entries,
-    wrappers,
-    parts,
-    uses,
-    resources,
-    ghostResources,
-    library,
-    keyed,
-    steps,
-    bundles: routes.length > 12 ? bundlesOf(entries, uses, keyed) : null,
-    phases: st.phases,
-    evidence: {
-      tools: ["api_report", "api_organize:abstractions", "api_organize:structure", "api_organize:layers"],
-      headline: report.headline,
-      derived: ["bundles: entries grouped by wrapper and identical marks"]
-    }
-  };
-}
-var keyKindOf = (e) => e.authority === "publishable" ? "publishable" : e.signedIn ? "secret" : "public";
-function bundlesOf(entries, uses, keyed) {
-  const keyedIds = new Set(keyed.map((k) => k.id));
-  const sup = (e) => uniq(uses.filter((u) => u.kind === "db" && u.at.entry === e.key).flatMap((u) => [u.how, ...u.untracedSource ? [`?${u.anchor}`] : []])).sort().join(" ");
-  const fill = (l) => l.length ? l.some((x) => isWrite(x.op)) ? "W" : "R" : "-";
-  const sig = (e) => {
-    const p = e.passed[0], b = e.beside;
-    return JSON.stringify([
-      e.wrapper,
-      keyKindOf(e),
-      e.roles.length > 0,
-      e.writes,
-      e.guards.length > 0,
-      fill(e.reach.filter((r) => r.where === "direct")),
-      fill(e.reach.filter((r) => r.where === "passed")),
-      !!(p && p.guards.length),
-      e.model,
-      e.net,
-      sup(e),
-      e.limits.length > 0,
-      !!(b && b.calls.length),
-      !!(b && b.guards.length),
-      fill(b ? b.effects : []),
-      e.policy.length > 0,
-      [e.handlerId, ...e.guardIds, ...p ? [p.id, ...p.guardIds] : []].some((id) => keyedIds.has(id))
-    ]);
-  };
-  const groups = /* @__PURE__ */ new Map();
-  for (const e of entries) {
-    const k = sig(e);
-    if (!groups.has(k)) groups.set(k, []);
-    groups.get(k).push(e.key);
-  }
-  const pathOf = new Map(entries.map((e) => [e.key, e.path]));
-  return [...groups.values()].map((keys, i) => ({
-    id: `bundle:${i + 1}`,
-    entries: keys,
-    count: keys.length,
-    label: pathPattern(keys.map((k) => pathOf.get(k))),
-    from: "derived: entries[] grouped by wrapper and identical marks"
-  }));
-}
-function pathPattern(paths) {
-  if (paths.length === 1) return paths[0];
-  const segs = paths.map((p) => p.split("/"));
-  const n = Math.min(...segs.map((s) => s.length));
-  const out = [];
-  for (let i = 0; i < n; i++) {
-    const v = uniq(segs.map((s) => s[i]));
-    out.push(v.length === 1 ? v[0] : "*");
-  }
-  if (segs.every((s) => s.length === n)) return out.join("/");
-  let k = 0;
-  while (k < n && out[k] !== "*") k++;
-  return out.slice(0, Math.max(k, 1)).join("/") + "/**";
-}
-
-// ../../web/system-map-names.js
-var SKIP = /* @__PURE__ */ new Set(["vocabulary", "evidence", "schema", "marks", "program", "class"]);
-var skipped = (key, v) => SKIP.has(key) || key === "from" && !Array.isArray(v);
-var STRUCTURAL = /* @__PURE__ */ new Set([
-  "kind",
-  "op",
-  "how",
-  "transport",
-  "authority",
-  "where",
-  "slotRole",
-  "role",
-  "passedKind",
-  "anchor",
-  "node",
-  "keyKinds",
-  "reachKinds",
-  "resources",
-  "vars",
-  "id"
-]);
-var WHAT = {
-  path: "an action the app answers",
-  routes: "an action the app answers",
-  table: "a kind of record the app keeps",
-  tables: "a kind of record the app keeps",
-  roles: "a role a person can hold",
-  policy: "a setting an action passes to shared code",
-  tokens: "a setting an action passes to shared code",
-  fields: "an operation a pluggable part offers"
-};
-var PACKAGE = "a section of the program";
-var DEFINITION = "a piece of the program";
-var VALUE = "a kind of value";
-var TYPES = /* @__PURE__ */ new Set(["type", "types", "signature"]);
-var WORD = /[A-Za-z_][\w/]*::\w+|[A-Za-z_]\w*/g;
-var leaves = (record, visit) => {
-  const walk = (v, key) => {
-    if (typeof v === "string") visit(v, key);
-    else if (Array.isArray(v)) v.forEach((x) => walk(x, key));
-    else if (v && typeof v === "object") {
-      for (const [k, x] of Object.entries(v)) if (!skipped(k, x)) walk(x, k);
-    }
-  };
-  walk(record, null);
-};
-function nameableParts(map) {
-  const found = /* @__PURE__ */ new Map();
-  const add = (code, what) => {
-    if (code && !found.has(code)) found.set(code, what);
-  };
-  const idParts = (id) => {
-    const i = id.lastIndexOf("::");
-    add(id.slice(0, i), PACKAGE);
-    add(id.slice(i + 2), DEFINITION);
-  };
-  leaves(map, (s, key) => {
-    if (s.startsWith("route:")) return add(s.slice(6), WHAT.path);
-    if (TYPES.has(key)) {
-      for (const w of s.match(WORD) ?? []) if (w.includes("::")) idParts(w);
-      else if (w.length > 1) add(w, VALUE);
-      return;
-    }
-    if (s.includes("::")) {
-      for (const w of s.match(WORD)) if (w.includes("::")) idParts(w);
-      return;
-    }
-    if (STRUCTURAL.has(key)) return;
-    if (key === "name" || key === "package" || key === "pkg" || key === "instantiatingPackages" || key === "cycles" || key === "to") return add(s, s.includes("/") ? PACKAGE : DEFINITION);
-    add(s, WHAT[key] ?? DEFINITION);
-  });
-  for (const b of map.bundles ?? []) if (b.count > 1) found.delete(b.label);
-  return [...found].map(([code, what]) => ({ code, what })).sort((a, b) => a.code.localeCompare(b.code));
-}
-function plainNames(names) {
-  const out = /* @__PURE__ */ new Map(), taken = /* @__PURE__ */ new Set();
-  for (const [code, name] of Object.entries(names).sort(([a], [b]) => a.localeCompare(b))) {
-    const base = name.replace(/::|\//g, " ").replace(/\s+/g, " ").trim();
-    if (!base) continue;
-    let plain = base;
-    for (let n = 2; taken.has(plain); n++) plain = `${base} (${n})`;
-    taken.add(plain);
-    out.set(code, plain);
-  }
-  return out;
-}
-function relabelSystemMap(map, names) {
-  const plain = plainNames(names);
-  const word = (w) => plain.get(w) ?? w;
-  const id = (w) => {
-    const i = w.lastIndexOf("::");
-    return `${word(w.slice(0, i))}::${word(w.slice(i + 2))}`;
-  };
-  const text3 = (s, key) => {
-    if (s.startsWith("route:")) return `route:${word(s.slice(6))}`;
-    if (plain.has(s) && !STRUCTURAL.has(key)) return plain.get(s);
-    if (s.startsWith("/")) return s;
-    return s.replace(WORD, (w) => w.includes("::") ? id(w) : STRUCTURAL.has(key) ? w : word(w));
-  };
-  const walk = (v, key) => {
-    if (typeof v === "string") return text3(v, key);
-    if (Array.isArray(v)) return v.map((x) => walk(x, key));
-    if (v && typeof v === "object") return Object.fromEntries(Object.entries(v).map(([k, x]) => [k, skipped(k, x) ? x : walk(x, k)]));
-    return v;
-  };
-  const out = walk(map, null);
-  const pathOf = new Map(map.entries.map((e) => [e.key, e.path]));
-  out.bundles = map.bundles && map.bundles.map((b, i) => {
-    const paths = b.entries.map((k) => pathOf.get(k));
-    if (!paths.some((p) => plain.has(p))) return out.bundles[i];
-    return { ...out.bundles[i], label: b.count === 1 ? word(paths[0]) : `${word(paths[0])} and ${b.count - 1} more` };
-  });
-  return out;
-}
-
-// src/studio/project.ts
-import { createHash } from "crypto";
-import fs from "fs";
-import path from "path";
-var SKIPPED = /* @__PURE__ */ new Set(["node_modules", "dist", "build", "target", "out"]);
-function projectSources(root) {
-  const files = [];
-  const walk = (dir) => {
-    for (const entry of fs.readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
-      if (entry.name.startsWith(".") || SKIPPED.has(entry.name)) continue;
-      const full = path.join(dir, entry.name);
-      if (entry.isDirectory()) walk(full);
-      else if (entry.isFile() && entry.name.endsWith(".bosatsu")) {
-        files.push({ fileName: path.relative(root, full).split(path.sep).join("/"), source: fs.readFileSync(full, "utf8") });
-      }
-    }
-  };
-  walk(root);
-  return files;
-}
-function sourcesHash(files) {
-  const hash = createHash("sha256");
-  for (const file of files) hash.update(`${file.fileName}\0${file.source}\0`);
-  return hash.digest("hex");
-}
-function caseSources(root) {
-  const dir = path.join(root, ".yichus", "cases");
-  if (!fs.existsSync(dir)) return [];
-  return fs.readdirSync(dir).filter((name) => name.endsWith(".bosatsu")).sort().map((name) => ({ fileName: `cases/${name}`, source: fs.readFileSync(path.join(dir, name), "utf8") }));
-}
-
-// src/studio/questions.ts
-import { z as z3 } from "zod";
-var Step = z3.looseObject({ op: z3.string(), tables: z3.array(z3.string()).default([]), resource: z3.string() });
-var Route = z3.looseObject({ path: z3.string(), handler: z3.string(), inferredSteps: z3.array(Step).default([]) });
-var Table = z3.looseObject({
-  name: z3.string(),
-  policy: z3.string().nullable().optional(),
-  readers: z3.array(z3.string()).default([]),
-  writers: z3.array(z3.string()).default([])
-});
-var Report = z3.looseObject({
-  surface: z3.looseObject({ routes: z3.array(Route).default([]) }).default({ routes: [] }),
-  dataModel: z3.looseObject({ tables: z3.array(Table).default([]) }).default({ tables: [] })
-});
-var Entry = z3.looseObject({ entry: z3.string(), resources: z3.array(z3.string()).default([]) });
-var Structure = z3.looseObject({ entries: z3.array(Entry).default([]) });
-var ACCESS_POLICY = {
-  owner: "OwnerScoped",
-  shared: "Guarded",
-  "everyone-reads": "PublicReadRoleWrite",
-  public: "Public"
-};
-var topology = {
-  id: "topology",
-  kind: "topology",
-  subject: null,
-  ask: "When many people use your app at the same time, should it run as one server, or as several copies of the server that share one database?",
-  why: "Several copies keep the app up when one fails and when traffic grows, but then two requests really can run at the same moment, so every check below assumes that unless you choose one server.",
-  choices: [
-    { id: "many", label: "Several copies", means: "Every check assumes requests can run at the same moment on different copies." },
-    { id: "one", label: "One server", means: "Checks may assume one request at a time. This holds only while exactly one copy runs; the page shows it as an assumption." }
-  ],
-  fact: "The program serves routes."
-};
-var shown = (names, subject) => names[subject] ?? subject;
-function accessQuestion(table, names) {
-  return {
-    id: `access:${table.name}`,
-    kind: "access",
-    subject: table.name,
-    ask: `Your app saves "${shown(names, table.name)}"${table.name in names ? "" : " records"}. Who should be able to see one, and who should be able to change it?`,
-    why: "Without a rule the app has no way to know a record is private. Yichus checks every place the app reads or changes these records against the rule you choose.",
-    choices: [
-      { id: "owner", label: "Only the person who created it", means: "Every read and write is tied to the signed-in person, and the check proves no one reaches another person's records." },
-      { id: "shared", label: "The creator and people they share it with", means: "Every read goes through a sharing rule, and the check proves nothing skips it." },
-      { id: "everyone-reads", label: "Everyone can see it; only certain roles can change it", means: "Anyone can read; changes need a role the app gives out." },
-      { id: "public", label: "Anyone, even without signing in", means: "Nothing in these records is private." }
-    ],
-    fact: `The program stores rows in "${table.name}" (policy declared: ${table.policy ?? "none"}).`
-  };
-}
-function togetherQuestion(table, handlers, names) {
-  return {
-    id: `together:${table}`,
-    kind: "together",
-    subject: table,
-    ask: `Two requests change the same record in "${shown(names, table)}" at the same moment (two people, or one person on two devices). What should happen?`,
-    why: "When a request reads a record and then writes it back, a second request in between can be silently lost. People rarely notice until data goes missing.",
-    choices: [
-      { id: "keep-both", label: "Both changes are kept", means: "Each change happens as one indivisible step, so neither can overwrite the other unseen; the check proves no change is lost." },
-      { id: "refuse-second", label: "The second is refused and they try again", means: "A change made to an out-of-date copy is turned away; the check proves no change is lost." }
-    ],
-    fact: `${handlers.join(", ")} ${handlers.length === 1 ? "reads" : "read"} "${table}" and then ${handlers.length === 1 ? "writes" : "write"} it.`
-  };
-}
-function partialQuestion(route, tables, names) {
-  return {
-    id: `partial:${route.path}`,
-    kind: "partial",
-    subject: route.path,
-    ask: `If the server stops halfway through "${shown(names, route.path)}" (a crash, a database error, a timeout), may part of its changes stay saved?`,
-    why: `This action changes ${tables.map((t) => `"${shown(names, t)}"`).join(" and ")} in more than one step. A stop between steps can leave them disagreeing, for example money taken but no receipt.`,
-    choices: [
-      { id: "all-or-nothing", label: "All or nothing", means: "Every change this action makes is saved together or not at all; Yichus stops it at each step and checks nothing half-done stays saved." },
-      { id: "partial-ok", label: "Partial is fine", means: "No check is added for this action." }
-    ],
-    fact: `${route.handler} writes ${tables.map((t) => `"${t}"`).join(", ")} in more than one step.`
-  };
-}
-function outsideQuestion(route, kinds, names) {
-  const service = kinds.includes("model") ? "an AI model" : "another service on the internet";
-  return {
-    id: `outside:${route.path}`,
-    kind: "outside",
-    subject: route.path,
-    ask: `"${shown(names, route.path)}" calls ${service}. If that service is down or slow, what should the person using your app see?`,
-    why: "Outside services fail often. Without a plan, a failure can leave a half-finished record or charge for work that never happened.",
-    choices: [
-      { id: "fail-clean", label: "An error, with nothing saved", means: "Yichus makes the service fail and checks that nothing from this action stays saved." },
-      { id: "finish-later", label: "Save the request and finish it later", means: "Yichus makes the service fail and checks the saved request is tried again and finished exactly once." },
-      { id: "no-plan", label: "No preference", means: "No check is added for this action." }
-    ],
-    fact: `${route.handler} reaches ${kinds.join(" and ")}.`
-  };
-}
-function questionsFor(report, structure, names = {}) {
-  const questions = [];
-  if (report.surface.routes.length) questions.push(topology);
-  for (const table of report.dataModel.tables) questions.push(accessQuestion(table, names));
-  for (const table of report.dataModel.tables) {
-    const both = table.readers.filter((h) => table.writers.includes(h));
-    if (both.length) questions.push(togetherQuestion(table.name, both, names));
-  }
-  for (const route of report.surface.routes) {
-    const writes = route.inferredSteps.filter((s) => s.resource === "db" && s.op !== "read" && s.op !== "query");
-    const tables = [...new Set(writes.flatMap((s) => s.tables))];
-    if (writes.length >= 2) questions.push(partialQuestion(route, tables, names));
-  }
-  for (const route of report.surface.routes) {
-    const entry = structure.entries.find((e) => e.entry === `route:${route.path}`);
-    const kinds = (entry?.resources ?? []).filter((r) => r === "model" || r === "net");
-    if (kinds.length) questions.push(outsideQuestion(route, kinds, names));
-  }
-  return questions;
-}
-
-// src/studio/requirements.ts
-import fs2 from "fs";
-import path2 from "path";
-import { z as z4 } from "zod";
-var Answer = z4.object({
-  question: z4.string().min(1),
-  choice: z4.string().min(1),
-  words: z4.string(),
-  answeredAt: z4.string()
-});
-var Scenario = z4.object({
-  entry: z4.string().min(1),
-  title: z4.string().optional(),
-  names: z4.record(z4.string(), z4.string()).optional(),
-  expect: z4.array(z4.object({ at: z4.string(), claim: z4.string() }).strict()).optional()
-}).strict();
-var Requirements = z4.object({
-  schemaVersion: z4.literal("yichus-requirements-1"),
-  description: z4.string().nullable(),
-  answers: z4.array(Answer),
-  /** Plain names for the program's records and actions, keyed by code name. */
-  names: z4.record(z4.string(), z4.string()).optional(),
-  scenarios: z4.array(Scenario).optional()
-});
-var studioDir = (root) => path2.join(root, ".yichus");
-var requirementsPath = (root) => path2.join(studioDir(root), "requirements.json");
-function loadRequirements(root) {
-  const file = requirementsPath(root);
-  if (!fs2.existsSync(file)) return { schemaVersion: "yichus-requirements-1", description: null, answers: [] };
-  const parsed = Requirements.safeParse(JSON.parse(fs2.readFileSync(file, "utf8")));
-  if (!parsed.success) throw new Error(`${file} is not a yichus-requirements-1 file: ${parsed.error.issues[0]?.message ?? "invalid"}`);
-  return parsed.data;
-}
-function saveRequirements(root, requirements) {
-  ensureStudioDir(root);
-  fs2.writeFileSync(requirementsPath(root), `${JSON.stringify(Requirements.parse(requirements), null, 2)}
-`);
-}
-function withNames(requirements, names) {
-  return { ...requirements, names: { ...requirements.names, ...names } };
-}
-function withAnswer(requirements, answer) {
-  return { ...requirements, answers: [...requirements.answers.filter((a) => a.question !== answer.question), answer] };
-}
-function ensureStudioDir(root) {
-  const dir = studioDir(root);
-  fs2.mkdirSync(dir, { recursive: true });
-  const ignore = path2.join(dir, ".gitignore");
-  if (!fs2.existsSync(ignore)) fs2.writeFileSync(ignore, "state.json\n");
-}
-
-// src/studio/director.ts
-var VerifyProperty = z5.looseObject({
-  id: z5.string(),
-  title: z5.string(),
-  status: z5.string(),
-  details: z5.array(z5.string()).default([]),
-  accepted: z5.unknown().optional()
-});
-var Verify = z5.looseObject({
-  topology: z5.string().optional(),
-  verdict: z5.looseObject({ proven: z5.boolean(), properties: z5.array(VerifyProperty) })
-});
-var Protocol = z5.looseObject({ protocol: z5.looseObject({ status: z5.string(), name: z5.string().optional() }).optional(), error: z5.string().optional() });
-var caseFile = (root, questionId) => path3.join(studioDir(root), "cases", `${questionId.replace(/[^A-Za-z0-9]+/g, "-").replace(/^-|-$/g, "")}.json`);
-var answerOf = (requirements, id) => requirements.answers.find((a) => a.question === id) ?? null;
-function instancesFor(requirements) {
-  const choice = answerOf(requirements, "topology")?.choice;
-  return choice === "one" ? "1" : choice === "many" ? "many" : void 0;
-}
-async function call(engine, tool, args) {
-  const result = await engine.call(tool, args);
-  if (result.ok !== true) throw new Error(`${tool} failed: ${typeof result.error === "string" ? result.error : "no reason given"}`);
-  return result;
-}
-var isAccepted = (p) => p.status === "warning" && p.accepted !== void 0;
-var worst = (props) => props.find((p) => p.status !== "proven" && !isAccepted(p)) ?? props.find(isAccepted);
-async function judge(root, engine, sources, question, answer, report, verify) {
-  const base = { question, answer, evidence: [], check: null };
-  if (!answer) return { ...base, status: "unanswered" };
-  const byId = (id) => verify.find((p) => p.id === id);
-  switch (question.kind) {
-    case "topology":
-      return {
-        ...base,
-        status: answer.choice === "one" ? "assumed" : "decided",
-        evidence: answer.choice === "one" ? ["Every check below assumes exactly one copy of the server runs."] : []
-      };
-    case "access": {
-      const table = report.dataModel.tables.find((t) => t.name === question.subject);
-      const want = ACCESS_POLICY[answer.choice];
-      const declared = table?.policy ?? null;
-      if (!want || !declared || !declared.startsWith(want)) {
-        return {
-          ...base,
-          status: "mismatch",
-          check: "api_report dataModel.tables[].policy",
-          evidence: [`"${question.subject}" is declared ${declared ?? "with no rule"}; the person chose ${want ?? answer.choice}.`]
-        };
-      }
-      const prop = byId(`access:${question.subject}`) ?? byId("access-coverage");
-      if (!prop) return { ...base, status: "inconclusive", check: "api_verify", evidence: ["api_verify reported no access property for this table."] };
-      return {
-        ...base,
-        check: `api_verify ${prop.id}`,
-        evidence: prop.details,
-        status: prop.status === "proven" ? "proven" : "broken"
-      };
-    }
-    case "together": {
-      const props = verify.filter((p) => p.id === "rmw-transactions" || p.id === "integrity");
-      const bad = worst(props);
-      const mentions = (p) => p.details.filter((d) => d.includes(`"${question.subject}"`));
-      const evidence = props.flatMap((p) => mentions(p).length ? mentions(p) : p.status === "proven" ? [] : p.details);
-      const check = `api_verify ${props.map((p) => p.id).join(" + ")}`;
-      if (!bad) return { ...base, check, evidence, status: props.length ? "proven" : "inconclusive" };
-      return { ...base, check, evidence, status: isAccepted(bad) ? "assumed" : "broken" };
-    }
-    case "partial":
-    case "outside": {
-      if (answer.choice === "partial-ok" || answer.choice === "no-plan") return { ...base, status: "no-check" };
-      const file = caseFile(root, question.id);
-      const rel = path3.relative(root, file).split(path3.sep).join("/");
-      if (!fs3.existsSync(file)) return { ...base, casePath: rel, status: "needs-case", check: "api_protocol_check", evidence: [`No protocol case at ${rel} yet.`] };
-      let protocolCase;
-      try {
-        protocolCase = JSON.parse(fs3.readFileSync(file, "utf8"));
-      } catch (error) {
-        return {
-          ...base,
-          casePath: rel,
-          check: "api_protocol_check",
-          status: "inconclusive",
-          evidence: [`${rel} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`]
-        };
-      }
-      const result = Protocol.parse(await engine.call("api_protocol_check", { sources: [...sources, ...caseSources(root)], case: protocolCase }));
-      const status = result.protocol?.status;
-      const check = `api_protocol_check ${rel}`;
-      if (!status) return { ...base, casePath: rel, check, status: "inconclusive", evidence: [result.error ?? "The protocol check gave no status."] };
-      return {
-        ...base,
-        casePath: rel,
-        check,
-        evidence: [`${result.protocol?.name ?? rel}: ${status}`],
-        status: status === "holds" ? "bounded" : status === "violated" ? "broken" : "inconclusive"
-      };
-    }
-  }
-}
-var QUESTION_PROPERTIES = (id) => id.startsWith("access:") || id === "access-coverage" || id === "rmw-transactions" || id === "integrity";
-var GUIDE = {
-  topology: "Multi-instance data integrity",
-  access: "Owner-scoped data",
-  together: "Atomic commands with Yichus/Transaction",
-  partial: "Transaction protocols: finite cases, retries, and receipts",
-  outside: "Transaction protocols: finite cases, retries, and receipts"
-};
-function nextStep(state, compileErrors) {
-  if (!state.description) return {
-    stage: "describe",
-    summary: "Waiting for a description of what to build.",
-    instructions: ["Ask the person what they want to build, in their own words. Call yichus_start with their description, unchanged."]
-  };
-  if (!state.files.length) return {
-    stage: "write",
-    summary: "No program yet.",
-    instructions: [
-      'Call api_guide with section "Required workflow", then write the program as .bosatsu files in this project folder.',
-      "For an app that stores records, call api_scaffold first and save its module as a file here. You never need to pass sources: the studio reads every .bosatsu file in the folder.",
-      "Then call yichus_next."
-    ]
-  };
-  if (compileErrors) return {
-    stage: "fix-compile",
-    summary: "The program does not compile yet.",
-    instructions: ["Fix these compile errors in the files, then call yichus_next."],
-    evidence: compileErrors
-  };
-  const unnamed = /* @__PURE__ */ new Map();
-  for (const { question } of state.properties) {
-    if (question.subject !== null && !(question.subject in state.names)) unnamed.set(question.subject, [...unnamed.get(question.subject) ?? [], question.fact]);
-  }
-  for (const { code, what } of state.map ? nameableParts(state.map) : []) {
-    if (!(code in state.names) && !unnamed.has(code)) unnamed.set(code, [`${what[0].toUpperCase()}${what.slice(1)}.`]);
-  }
-  if (unnamed.size) return {
-    stage: "name",
-    summary: "Your agent is putting the parts of your app into plain words.",
-    instructions: [
-      `The person sees these parts of the program in questions and in the picture of the program. Give each a short name in the person's own vocabulary, never a code name, path or table name (for example "family lists" or "starting a new list"). Name a kind of value plainly too ("text", "a number"):`,
-      ...[...unnamed].map(([subject, facts]) => `${subject}: ${facts.join(" ")}`),
-      "Call yichus_name with all of them at once, then call yichus_next."
-    ]
-  };
-  const unanswered = state.properties.filter((p) => p.status === "unanswered");
-  if (unanswered.length) return {
-    stage: "ask",
-    summary: `${unanswered.length} question${unanswered.length === 1 ? "" : "s"} for you about how the app should behave.`,
-    instructions: [
-      "Ask the person each question below, in its words, with its choices. They may also answer on the studio page.",
-      "Speak in product terms: never quote question ids, code names, file names, tool names or the programming language to the person.",
-      'Do not answer for them and do not pick a default: these are product decisions only they can make. If they are unsure, explain the "why" and the choices.',
-      "Record each answer with yichus_answer (the question id, the choice id, and their own words), then call yichus_next."
-    ],
-    ask: unanswered.map((p) => ({ id: p.question.id, ask: p.question.ask, why: p.question.why, choices: p.question.choices }))
-  };
-  const mismatched = state.properties.filter((p) => p.status === "mismatch");
-  if (mismatched.length) return {
-    stage: "declare",
-    summary: "The program's declared rules do not match what you chose yet.",
-    instructions: [
-      ...mismatched.map((p) => `Make the AccessSpec rule for "${p.question.subject}" ${ACCESS_POLICY[p.answer.choice]} (api_add_rule gives the snippet; api_guide section "${p.answer.choice === "owner" ? "Owner-scoped data" : p.answer.choice === "shared" ? "Guarded data" : "Public data"}" explains it).`),
-      "Then call yichus_next."
-    ],
-    evidence: mismatched.flatMap((p) => p.evidence)
-  };
-  const broken = state.properties.filter((p) => p.status === "broken" || p.status === "inconclusive");
-  if (broken.length || state.other.length) return {
-    stage: "fix",
-    summary: `${broken.length + state.other.length} propert${broken.length + state.other.length === 1 ? "y is" : "ies are"} not holding yet.`,
-    instructions: [
-      "Fix the program so each property below holds. The evidence lines are the engine's own words.",
-      ...broken.map((p) => `"${p.question.ask}" The person chose "${p.question.choices.find((c) => c.id === p.answer?.choice)?.label}". Read api_guide section "${GUIDE[p.question.kind]}".`),
-      ...state.other.map((o) => `${o.title} (${o.id}) is ${o.status}.`),
-      "Never weaken a rule, delete a check, or declare one server to make a check pass: change the code. Then call yichus_next."
-    ],
-    evidence: [...broken.flatMap((p) => p.evidence), ...state.other.flatMap((o) => o.details)]
-  };
-  const cases = state.properties.filter((p) => p.status === "needs-case");
-  if (cases.length) return {
-    stage: "write-case",
-    summary: "Writing the failure scenarios that test your answers.",
-    instructions: [
-      'Call yichus_reference with topic "protocol-case": it returns the case specification and a complete worked case with its program.',
-      "Put any Bosatsu observation predicates the case names in .yichus/cases/*.bosatsu. The studio adds those files to protocol checks only, so they never count as part of the app.",
-      ...cases.map((p) => `Write ${p.casePath}: a protocol-case-1.0 for ${p.question.subject} whose invariants state the person's choice ("${p.question.choices.find((c) => c.id === p.answer?.choice)?.label}"), with crashes${p.question.kind === "outside" ? " and failed external results" : ""} at each step.`),
-      "State the person's rule exactly; never weaken it to match the code. Then call yichus_next."
-    ]
-  };
-  const assumed = state.properties.filter((p) => p.status === "assumed");
-  return {
-    stage: "done",
-    summary: assumed.length ? "Everything you chose holds, under the assumptions shown." : "Everything you chose holds.",
-    instructions: [
-      "Tell the person every property they chose holds, and point them at the studio page for the evidence.",
-      ...assumed.length ? ["Say plainly which results depend on running exactly one server."] : [],
-      "When they describe a new feature, change the code and call yichus_next again: new facts can raise new questions."
-    ]
-  };
-}
-async function direct({ root, engine, requirements, withMap = true, previous = null }) {
-  const sources = projectSources(root);
-  const hash = sourcesHash(sources);
-  const instances = instancesFor(requirements);
-  const base = {
-    schemaVersion: "yichus-studio-state-1",
-    project: path3.basename(path3.resolve(root)),
-    updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    sourcesHash: hash,
-    files: sources.map((s) => s.fileName),
-    description: requirements.description,
-    names: requirements.names ?? {},
-    topology: null,
-    proven: null,
-    properties: [],
-    other: [],
-    map: null,
-    mapError: null
-  };
-  let compileErrors = null;
-  if (requirements.description && sources.length) {
-    const verify = Verify.parse(await call(engine, "api_verify", { sources, ...instances ? { instances } : {} }));
-    base.topology = verify.topology ?? null;
-    base.proven = verify.verdict.proven;
-    const compiles = verify.verdict.properties.find((p) => p.id === "compiles");
-    if (compiles && compiles.status !== "proven") compileErrors = compiles.details;
-    else {
-      const report = Report.parse(await call(engine, "api_report", { sources }));
-      const structureRaw = await call(engine, "api_organize", { sources, lens: "structure" });
-      const structure = Structure.parse(structureRaw);
-      for (const question of questionsFor(report, structure, base.names)) {
-        base.properties.push(await judge(root, engine, sources, question, answerOf(requirements, question.id), report, verify.verdict.properties));
-      }
-      base.other = verify.verdict.properties.filter((p) => !QUESTION_PROPERTIES(p.id) && p.status !== "proven" && !isAccepted(p)).map(({ id, title: title2, status, details }) => ({ id, title: title2, status, details }));
-      if (withMap) {
-        if (previous?.sourcesHash === hash && previous.map) base.map = previous.map;
-        else {
-          try {
-            const [abstractions, layers] = [
-              await call(engine, "api_organize", { sources, lens: "abstractions" }),
-              await call(engine, "api_organize", { sources, lens: "layers" })
-            ];
-            base.map = buildSystemMap({ report, structure: structureRaw, abstractions, layers }, { program: base.project });
-          } catch (error) {
-            base.mapError = error instanceof Error ? error.message : String(error);
-          }
-        }
-      }
-    }
-  }
-  const state = { ...base, step: nextStep(base, compileErrors) };
-  writeState(root, state);
-  return state;
-}
-function writeState(root, state) {
-  ensureStudioDir(root);
-  fs3.writeFileSync(path3.join(studioDir(root), "state.json"), `${JSON.stringify(state, null, 2)}
-`);
-}
-function readState(root) {
-  const file = path3.join(studioDir(root), "state.json");
-  return fs3.existsSync(file) ? JSON.parse(fs3.readFileSync(file, "utf8")) : null;
-}
-
-// src/studio/mcp.ts
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
-import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
-import { z as z6 } from "zod";
-
-// src/studio/reference.ts
-import fs4 from "fs";
-import path4 from "path";
-import { fileURLToPath } from "url";
-
-// src/studio/reference.json
-var reference_default = {
-  "protocol-case": [
-    { name: "protocol-specification.txt", from: "docs/protocol-verification.md" },
-    { name: "withdrawal-case.json", from: "eval/corpus/webmcp-traps/iteration-003/programs/Q15/twin/case.json" },
-    { name: "withdrawal.bosatsu", from: "eval/corpus/webmcp-traps/iteration-003/programs/Q15/twin/ledger.bosatsu" }
-  ]
-};
-
-// src/studio/reference.ts
-var TOPICS = Object.keys(reference_default);
-var BUILT_REFERENCE = fileURLToPath(new URL("./studio-reference/", import.meta.url));
-var REPO_ROOT = fileURLToPath(new URL("../../../../", import.meta.url));
-var builtCopy = (file) => path4.join(BUILT_REFERENCE, file.name);
-function readReference(topic, locate) {
-  if (!TOPICS.includes(topic)) return null;
-  return reference_default[topic].map((file) => `===== ${file.name} =====
-${fs4.readFileSync(locate(file), "utf8")}`).join("\n\n");
-}
-
-// src/studio/text.ts
-var STATUS_WORDS = {
-  unanswered: "not answered yet",
-  decided: "decided",
-  assumed: "holds under an assumption",
-  proven: "proven",
-  bounded: "holds in every scenario checked",
-  broken: "broken",
-  mismatch: "declared differently from the answer",
-  "needs-case": "needs a failure scenario",
-  inconclusive: "not decided by the check",
-  "no-check": "no check needed"
-};
-function stepText(state, pageUrl) {
-  const { step } = state;
-  const lines = [`Stage: ${step.stage}. ${step.summary}`, "", "Do this:", ...step.instructions.map((s, i) => `${i + 1}. ${s}`)];
-  for (const q of step.ask ?? []) {
-    lines.push("", `Question ${q.id}: ${q.ask}`, `  Why it matters: ${q.why}`);
-    for (const c of q.choices) lines.push(`  - ${c.id}: ${c.label}. ${c.means}`);
-  }
-  if (step.evidence?.length) lines.push("", "Evidence (engine output):", ...step.evidence.map((e) => `  ${e}`));
-  const answered = state.properties.filter((p) => p.status !== "unanswered");
-  if (answered.length) {
-    lines.push("", "Properties:");
-    for (const p of answered) {
-      const choice = p.question.choices.find((c) => c.id === p.answer?.choice)?.label ?? p.answer?.choice;
-      lines.push(`  ${p.question.id} (${choice}): ${STATUS_WORDS[p.status]}`);
-    }
-  }
-  if (pageUrl) lines.push("", `Studio page: ${pageUrl}`);
-  return `${lines.join("\n")}
-`;
-}
-
-// src/studio/mcp.ts
-var INSTRUCTIONS = `Yichus studio: you are building software for a person who will not read the code. Yichus tells you what to do next and proves the properties the person chooses.
-
-The loop:
-1. Ask the person what they want built and call yichus_start with their words.
-2. After every change to the code, call yichus_next and do exactly what it says. It reads the .bosatsu files in the project folder itself; you never paste sources.
-3. When yichus_next lists questions, put each one to the person with its choices and record their answer with yichus_answer. Never answer for them or pick a default: who may see data, what happens when two people act at once, and what happens when a server or an outside service fails are their product decisions.
-4. Never weaken a rule, delete a check, or declare a single server to make a check pass. Change the code.
-5. Give the person the studio page link from yichus_start. It shows the shape of their program and whether each property they chose holds.
-6. Speak to the person in product terms. They never need the programming language, code names, file names, tool names or question ids; when yichus_next asks you to name parts of the program, use the words they would use.
-
-Every api_* tool is available too. Leave out sources and the studio supplies the project's files.`;
-var START = {
-  name: "yichus_start",
-  description: "Record what the person wants built, in their own words, and get the studio page link to give them. Call this first.",
-  inputSchema: { type: "object", properties: { description: { type: "string", description: "The person's description of the software, unchanged." } }, required: ["description"] }
-};
-var NEXT = {
-  name: "yichus_next",
-  description: "Read the program from the project folder, run the checks, and return the one next step: questions to ask the person, code to fix, a declaration to add, or done. Call after every change.",
-  inputSchema: { type: "object", properties: {} }
-};
-var ANSWER = {
-  name: "yichus_answer",
-  description: "Record the person's answer to a question yichus_next listed: the question id, the id of the choice they picked, and their own words.",
-  inputSchema: { type: "object", properties: {
-    question: { type: "string", description: "The question id from yichus_next." },
-    choice: { type: "string", description: "The id of the choice the person picked." },
-    words: { type: "string", description: "What the person said, in their words." }
-  }, required: ["question", "choice", "words"] }
-};
-var NAME = {
-  name: "yichus_name",
-  description: "Give the parts of the program yichus_next listed (kinds of record, actions, pieces of the program) the short plain names the person would use. The person sees these names instead of the code names, in questions and in the picture.",
-  inputSchema: { type: "object", properties: {
-    names: {
-      type: "object",
-      additionalProperties: { type: "string" },
-      description: `Each code name yichus_next listed, such as a table name or a route path, with a few words in the person's vocabulary, such as "family lists" or "starting a new list".`
-    }
-  }, required: ["names"] }
-};
-var REFERENCE_TOOL = {
-  name: "yichus_reference",
-  description: "Reference material yichus_next asks for, such as the protocol case specification with a complete worked case.",
-  inputSchema: { type: "object", properties: { topic: { type: "string", enum: TOPICS, description: "The topic yichus_next named." } }, required: ["topic"] }
-};
-var StartArgs = z6.object({ description: z6.string().min(1) });
-var AnswerArgs = z6.object({ question: z6.string().min(1), choice: z6.string().min(1), words: z6.string() });
-var NameArgs = z6.object({ names: z6.record(z6.string().min(1), z6.string().trim().min(1)).refine((names) => Object.keys(names).length > 0) });
-var text = (body, structured, isError = false) => ({ content: [{ type: "text", text: body }], ...structured ? { structuredContent: structured } : {}, isError });
-function studioTool(tool) {
-  const schema = tool.inputSchema;
-  if (!schema.properties || !("sources" in schema.properties)) return tool;
-  return {
-    ...tool,
-    description: [tool.description, "In the studio, leave out sources to check every .bosatsu file in the project folder."].filter(Boolean).join(" "),
-    inputSchema: { ...schema, required: (schema.required ?? []).filter((name) => name !== "sources") }
-  };
-}
-function recordAnswer(root, args, now) {
-  const parsed = AnswerArgs.safeParse(args);
-  if (!parsed.success) return { ok: false, error: "yichus_answer needs question, choice and words." };
-  const state = readState(root);
-  const property = state?.properties.find((p) => p.question.id === parsed.data.question);
-  if (!property) return { ok: false, error: `No question ${parsed.data.question} in the latest yichus_next; call yichus_next and use its ids.` };
-  if (!property.question.choices.some((c) => c.id === parsed.data.choice)) {
-    return { ok: false, error: `${parsed.data.choice} is not a choice of ${parsed.data.question}; the choices are ${property.question.choices.map((c) => c.id).join(", ")}.` };
-  }
-  saveRequirements(root, withAnswer(loadRequirements(root), { ...parsed.data, answeredAt: now.toISOString() }));
-  return { ok: true };
-}
-function recordNames(root, args) {
-  const parsed = NameArgs.safeParse(args);
-  if (!parsed.success) return { ok: false, error: "yichus_name needs names: each code name yichus_next listed, with its plain name." };
-  const state = readState(root);
-  const parts = /* @__PURE__ */ new Set([...state?.properties.flatMap((p) => p.question.subject ?? []) ?? [], ...state?.map ? nameableParts(state.map).map((p) => p.code) : []]);
-  const unknown = Object.keys(parsed.data.names).filter((code) => !parts.has(code));
-  if (unknown.length) {
-    const listed = [...parts].slice(0, 20).join(", ") + (parts.size > 20 ? `, and ${parts.size - 20} more` : "");
-    return { ok: false, error: `No part named ${unknown.join(", ")} in the latest yichus_next; the parts are ${listed || "none yet"}.` };
-  }
-  saveRequirements(root, withNames(loadRequirements(root), parsed.data.names));
-  return { ok: true };
-}
-function createStudioMcpServer({ root, engine, catalog, pageUrl, now = () => /* @__PURE__ */ new Date(), locate = builtCopy }) {
-  const server = new Server({ name: "yichus-studio", version: "0.2.0" }, { capabilities: { tools: {} }, instructions: INSTRUCTIONS });
-  const active = /* @__PURE__ */ new Set();
-  const track = (task) => {
-    active.add(task);
-    void task.finally(() => active.delete(task)).catch(() => {
-    });
-    return task;
-  };
-  let tools = null;
-  const catalogTools2 = async () => tools ??= (await catalog()).map(studioTool);
-  let last = readState(root);
-  server.setRequestHandler(ListToolsRequestSchema, () => track((async () => ({ tools: [START, NEXT, NAME, ANSWER, REFERENCE_TOOL, ...await catalogTools2()] }))()));
-  server.setRequestHandler(CallToolRequestSchema, (request) => track(callTool(request.params)));
-  async function callTool(params) {
-    const { name, arguments: args = {} } = params;
-    if (name === "yichus_start") {
-      const parsed = StartArgs.safeParse(args);
-      if (!parsed.success) return text("yichus_start needs the person's description.", void 0, true);
-      saveRequirements(root, { ...loadRequirements(root), description: parsed.data.description });
-      const page = pageUrl ? `Give the person this link and ask them to keep it open: ${pageUrl}` : "No studio page is running.";
-      return text(`${page}
-Next: call yichus_next.`, { pageUrl });
-    }
-    if (name === "yichus_next") {
-      last = await direct({ root, engine, requirements: loadRequirements(root), previous: last });
-      const { map: _map, ...rest } = last;
-      return text(stepText(last, pageUrl), rest);
-    }
-    if (name === "yichus_answer") {
-      const result2 = recordAnswer(root, args, now());
-      return result2.ok ? text("Recorded. Ask any remaining questions, then call yichus_next.") : text(result2.error, void 0, true);
-    }
-    if (name === "yichus_name") {
-      const result2 = recordNames(root, args);
-      return result2.ok ? text("Recorded. Call yichus_next.") : text(result2.error, void 0, true);
-    }
-    if (name === "yichus_reference") {
-      const said = readReference(String(args.topic), locate);
-      return said ? text(said) : text(`No reference topic ${String(args.topic)}; the topics are ${TOPICS.join(", ")}.`, void 0, true);
-    }
-    const tool = (await catalogTools2()).find((t) => t.name === name);
-    if (!tool) return text(`Unknown tool ${name}.`, void 0, true);
-    const filled = { ...args };
-    const props = tool.inputSchema.properties ?? {};
-    if ("sources" in props && filled.sources === void 0) {
-      filled.sources = name === "api_protocol_check" ? [...projectSources(root), ...caseSources(root)] : projectSources(root);
-    }
-    const topology2 = loadRequirements(root).answers.find((a) => a.question === "topology")?.choice;
-    if ("instances" in props && filled.instances === void 0 && topology2) filled.instances = topology2 === "one" ? "1" : "many";
-    const result = await engine.call(name, filled);
-    if (name === "api_guide" && filled.section === void 0 && Array.isArray(result.sections)) {
-      const titles = {
-        ok: true,
-        tool: "api_guide",
-        titles: result.sections.map((s) => s.title),
-        note: "The whole guide is long. Call api_guide with section set to one of these titles, or to part of one."
-      };
-      return text(JSON.stringify(titles), titles);
-    }
-    return text(JSON.stringify(result), result, result.ok !== true);
-  }
-  return {
-    server,
-    async idle() {
-      while (active.size) await Promise.allSettled(active);
-      await new Promise((resolve) => setImmediate(resolve));
-    }
-  };
-}
-
-// src/studio/command.ts
-var STUDIO_COMMANDS = /* @__PURE__ */ new Set(["start", "next", "name", "answer", "reference", "studio"]);
-var STUDIO_HELP = `
-Studio (guided building; all take --project DIR, default the current folder):
-  yichus studio [--port N]         MCP server on stdio plus the studio page
-  yichus studio --page [--port N]  only the studio page, for the commands below
-  yichus start "DESCRIPTION"       record what the person wants built
-  yichus next [--json]             check the program and print the next step
-  yichus name SUBJECT "NAME" ...   plain names the person sees for parts of the program
-  yichus answer QUESTION CHOICE [--words TEXT]
-  yichus reference TOPIC           reference material a step asks for
-`;
-async function runStudioCommand(argv2, io) {
-  try {
-    const { values, positionals } = parseArgs({ args: argv2, allowPositionals: true, strict: true, options: {
-      project: { type: "string" },
-      json: { type: "boolean" },
-      words: { type: "string" },
-      page: { type: "boolean" },
-      port: { type: "string" }
-    } });
-    const [command, ...rest] = positionals;
-    const root = path5.resolve(values.project ?? ".");
-    const expect = (n, usage) => {
-      if (rest.length !== n) throw new Error(`Usage: ${usage}`);
-    };
-    if (command === "start") {
-      expect(1, 'yichus start "DESCRIPTION"');
-      saveRequirements(root, { ...loadRequirements(root), description: rest[0] });
-      io.stderr("Recorded the description. Next: yichus next\n");
-      return 0;
-    }
-    if (command === "name") {
-      if (!rest.length || rest.length % 2) throw new Error('Usage: yichus name SUBJECT "NAME" [SUBJECT "NAME" ...]');
-      const names = Object.fromEntries(rest.flatMap((s, i) => i % 2 ? [] : [[s, rest[i + 1]]]));
-      const result = recordNames(root, { names });
-      if (!result.ok) throw new Error(result.error);
-      io.stderr(`Named ${Object.entries(names).map(([subject, name]) => `${subject} "${name}"`).join(", ")}. Next: yichus next
-`);
-      return 0;
-    }
-    if (command === "answer") {
-      expect(2, "yichus answer QUESTION CHOICE [--words TEXT]");
-      const [question, choice] = rest;
-      const result = recordAnswer(root, { question, choice, words: values.words ?? "" }, io.now());
-      if (!result.ok) throw new Error(result.error);
-      io.stderr(`Recorded ${choice} for ${question}. Next: yichus next
-`);
-      return 0;
-    }
-    if (command === "reference") {
-      expect(1, "yichus reference TOPIC");
-      const said = readReference(rest[0], io.locate);
-      if (!said) throw new Error(`No reference topic ${rest[0]}`);
-      io.stdout(`${said}
-`);
-      return 0;
-    }
-    if (command === "next") {
-      expect(0, "yichus next [--json]");
-      const state = await direct({ root, engine: await io.engine(), requirements: loadRequirements(root), previous: readState(root) });
-      io.stdout(values.json ? `${JSON.stringify(state, null, 2)}
-` : stepText(state, null));
-      return 0;
-    }
-    expect(0, "yichus studio [--page] [--port N]");
-    const port = values.port === void 0 ? null : Number(values.port);
-    if (port !== null && (!Number.isInteger(port) || port < 0 || port > 65535)) throw new Error("--port must be a port number");
-    await io.serve({ root, port, pageOnly: values.page ?? false });
-    return 0;
-  } catch (error) {
-    io.stderr(`Error: ${error instanceof Error ? error.message : String(error)}
-`);
-    return 2;
-  }
-}
-
-// src/run.ts
-var HELP = `yichus \u2014 the Yichus WebMCP analysis engine, locally
-
-  yichus tools
-  yichus call TOOL [--args JSON_FILE|-] [--source FILE ...]
-  yichus verify FILE ... [--instances 1|many] [--block-on-warning ID ...]
-  yichus lean FILE ... --lean-wasm-root DIRECTORY [--timeout-ms N]
-${STUDIO_HELP}
-Options:
-  --source FILE       Add a Bosatsu source (repeatable; call only). Files
-                      sharing a basename are named by their folders.
-  --args FILE|-       Tool arguments as a JSON object; - reads stdin.
-  --block-on-warning ID  A property id whose warning blocks the verdict, as a
-                      violation would (repeatable; all names every property;
-                      verify only). An id the verdict lacks exits 2.
-  --output FILE       Write the result to this file instead of stdout.
-  --select /POINTER   Extract a JSON field; strings are written verbatim.
-  --expect /PTR=JSON  Fail unless a result field exactly equals JSON (repeatable).
-  --bundle FILE       Explicit Scala.js engine override.
-  --lean-wasm-root DIR  Pinned local Lean Wasm installation (lean only).
-  --timeout-ms N      Total proof budget, at most 300000 (lean only).
-  --help, -h          Show this help without loading the engine.
-
-tools and call expose Yichus/Mcp::catalog without a second analysis layer.
-verify runs api_verify and requires verdict.proven to be exactly true.
-Its JSON opens with proven, the verdict; ok only says the check ran.
-It always prints a plain summary of the verdict to stderr: each property's
-status, the first failure's evidence (parse errors carry file:line:col),
-and where the full JSON verdict went.
-lean runs the pinned Wasm kernel and requires all discovered obligations to be verified.
-It prints on stderr whether each law was proven and, if not, why: Lean
-rejected it (with Lean's words), the law is outside what Lean Wasm admits,
-the --timeout-ms budget ran out, or no runtime is installed (with the
-install command).
-call requires ok:true; use --expect to gate on a check's actual verdict.
-When the tool fails, stderr gives its error as plain text, what to do
-instead when the engine names the failure's kind (errorKinds), and where
-the JSON result went. An unmet --expect is one JSON line on stderr.
-With --output it says on stderr where the result went; api_abstraction_map
-also says what it is mapping before it starts, and afterwards its layer,
-reuse and copy counts in words, each with the JSON field that lists them.
-No browser is needed. Page editing, visible feedback and app sessions use
-the separate @yichus/mcp browser relay.
-
-Exit status: 0 = completed and expectations met; 1 = tool/check rejected;
-2 = invalid invocation (including a --block-on-warning id the verdict lacks), malformed engine result, or execution/IO failure
-(for lean: no runtime, the budget ran out, or the runtime failed).
-JSON diagnostics remain available for rejected checks: the result JSON,
-or, when --select withheld it, a JSON line on stderr. --select emits no
-artifact on rejection. A named output is removed before execution so a
-failed check cannot leave yesterday's artifact behind.
-`;
-function pointerParts(pointer) {
-  if (pointer === "") return [];
-  if (!pointer.startsWith("/") || /~(?:[^01]|$)/u.test(pointer)) {
-    throw new Error(`Invalid JSON Pointer: ${pointer}`);
-  }
-  return pointer.slice(1).split("/").map((part) => part.replaceAll("~1", "/").replaceAll("~0", "~"));
-}
-function readPointer(value, pointer) {
-  for (const part of pointerParts(pointer)) {
-    if (value === null || typeof value !== "object" || !Object.hasOwn(value, part)) return void 0;
-    value = value[part];
-  }
-  return value;
-}
-function objectValue(value, label2) {
-  const parsed = z7.record(z7.string(), z7.unknown()).safeParse(value);
-  if (!parsed.success) throw new Error(`${label2} must be a JSON object`);
-  return parsed.data;
-}
-var objectJson = (raw, label2) => objectValue(JSON.parse(raw), label2);
-var FLAGS = {
-  source: { type: "string", multiple: true },
-  args: { type: "string" },
-  instances: { type: "string" },
-  "block-on-warning": { type: "string", multiple: true },
-  output: { type: "string" },
-  bundle: { type: "string" },
-  "lean-wasm-root": { type: "string" },
-  "timeout-ms": { type: "string" },
-  select: { type: "string" },
-  expect: { type: "string", multiple: true }
-};
-var TimeoutMs = z7.coerce.number().int().min(1).max(3e5);
-function parse(argv2) {
-  const { values, positionals, tokens } = parseArgs2({ args: argv2, options: FLAGS, allowPositionals: true, strict: true, tokens: true });
-  const named = tokens.flatMap((token) => token.kind === "option" ? [token.name] : []);
-  const repeated = named.find((name, i) => !("multiple" in FLAGS[name]) && named.indexOf(name) !== i);
-  if (repeated) throw new Error(`Repeated --${repeated}`);
-  const [command, ...rest] = positionals;
-  if (command !== "tools" && command !== "call" && command !== "verify" && command !== "lean") {
-    throw new Error("Expected tools, call TOOL, verify FILE, or lean FILE; use --help for usage.");
-  }
-  const opts = { command, sources: [], expects: [], blockOnWarnings: values["block-on-warning"] ?? [] };
-  if (command === "call") {
-    opts.tool = rest.shift();
-    if (!opts.tool) throw new Error("call requires a tool name");
-  }
-  if ((command === "tools" || command === "call") && rest.length) throw new Error(`Unexpected argument: ${rest[0]}`);
-  opts.sources = [...rest, ...values.source ?? []];
-  opts.args = values.args;
-  opts.instances = values.instances;
-  opts.output = values.output;
-  opts.bundle = values.bundle;
-  opts.leanWasmRoot = values["lean-wasm-root"];
-  if (values["timeout-ms"] !== void 0) {
-    const timeout = TimeoutMs.safeParse(values["timeout-ms"]);
-    if (!timeout.success) throw new Error("--timeout-ms must be an integer from 1 to 300000");
-    opts.timeoutMs = timeout.data;
-  }
-  if (values.select !== void 0) {
-    pointerParts(values.select);
-    opts.select = values.select;
-  }
-  for (const value of values.expect ?? []) {
-    const equal = value.indexOf("=");
-    if (equal < 0) throw new Error("--expect requires /POINTER=JSON");
-    const pointer = value.slice(0, equal);
-    pointerParts(pointer);
-    opts.expects.push({ pointer, value: JSON.parse(value.slice(equal + 1)) });
-  }
-  if (command === "tools" && (opts.sources.length || opts.args || opts.instances)) {
-    throw new Error("tools does not accept sources or tool arguments");
-  }
-  if (command === "verify") {
-    if (!opts.sources.length) throw new Error("verify requires at least one Bosatsu file");
-    if (opts.args) throw new Error("verify accepts --instances; use call for arbitrary arguments");
-    if (values.source !== void 0) throw new Error("verify takes positional files; --source is for call");
-    if (opts.instances && opts.instances !== "1" && opts.instances !== "many") {
-      throw new Error("--instances must be 1 or many");
-    }
-    opts.expects.push({ pointer: "/verdict/proven", value: true });
-  } else if (command === "lean") {
-    if (!opts.sources.length) throw new Error("lean requires at least one Bosatsu file");
-    if (!opts.leanWasmRoot) throw new Error("lean requires --lean-wasm-root");
-    if (opts.args || opts.instances || values.source !== void 0)
-      throw new Error("lean takes positional files and a Wasm root");
-    opts.expects.push({ pointer: "/allVerified", value: true });
-  } else if (opts.instances) {
-    throw new Error("--instances is for verify; pass catalog arguments through --args for call");
-  }
-  if (command !== "verify" && opts.blockOnWarnings.length)
-    throw new Error("--block-on-warning is for verify; pass block_on_warnings through --args for call");
-  if (command !== "lean" && (opts.leanWasmRoot || opts.timeoutMs !== void 0))
-    throw new Error("--lean-wasm-root and --timeout-ms are for lean");
-  return opts;
-}
-function closestSibling(file) {
-  const dir = path6.dirname(file);
-  const want = path6.basename(file);
-  let names;
-  try {
-    names = fs5.readdirSync(dir);
-  } catch {
-    return void 0;
-  }
-  const distance = (a, b) => {
-    const row = Array.from({ length: b.length + 1 }, (_, j) => j);
-    for (let i = 1; i <= a.length; i++) {
-      let diagonal = row[0];
-      row[0] = i;
-      for (let j = 1; j <= b.length; j++) {
-        const above = row[j];
-        row[j] = Math.min(row[j] + 1, row[j - 1] + 1, diagonal + (a[i - 1] === b[j - 1] ? 0 : 1));
-        diagonal = above;
-      }
-    }
-    return row[b.length];
-  };
-  const scored = names.map((name) => ({ name, d: distance(want, name) })).filter(({ d }) => d <= 2).sort((x, y) => x.d - y.d);
-  return scored.length ? path6.join(dir, scored[0].name) : void 0;
-}
-function readInput(file) {
-  try {
-    return fs5.readFileSync(file, "utf8");
-  } catch (error) {
-    const code = error?.code;
-    if (code === "ENOENT") {
-      const near = closestSibling(file);
-      throw new Error(`File not found: ${file}${near ? `. Did you mean ${near}?` : ""}`);
-    }
-    if (code === "EISDIR") throw new Error(`${file} is a directory; name a file instead.`);
-    if (code === "EACCES" || code === "EPERM") throw new Error(`Permission denied reading ${file}.`);
-    throw error;
-  }
-}
-function sourceNames(paths) {
-  const parts = paths.map((p) => path6.resolve(p).split(path6.sep).filter((s) => s !== ""));
-  const seen = /* @__PURE__ */ new Set();
-  parts.forEach((segments, i) => {
-    const full = segments.join("/");
-    if (seen.has(full)) throw new Error(`${paths[i]} names the same file as an earlier --source; name each source once`);
-    seen.add(full);
-  });
-  const tail = (segments, n) => segments.slice(-n).join("/");
-  return parts.map((segments, i) => {
-    let n = 1;
-    while (parts.some((other, j) => j !== i && tail(other, n) === tail(segments, n))) n += 1;
-    return tail(segments, n);
-  });
-}
-async function argumentsFor(opts, io) {
-  const args = opts.args ? objectJson(opts.args === "-" ? await io.readStdin() : readInput(opts.args), "Arguments") : {};
-  if (opts.sources.length) {
-    if (Object.hasOwn(args, "sources")) throw new Error("Use either --source files or args.sources, not both");
-    const names = sourceNames(opts.sources);
-    args.sources = opts.sources.map((sourcePath, i) => ({ fileName: names[i], source: readInput(sourcePath) }));
-  }
-  if (opts.instances) args.instances = opts.instances;
-  if (opts.blockOnWarnings.length) args.block_on_warnings = [...new Set(opts.blockOnWarnings)];
-  return args;
-}
-function clearOutput(opts) {
-  if (!opts.output) return;
-  const output = path6.resolve(opts.output);
-  const outputStat = fs5.existsSync(output) ? fs5.statSync(output) : void 0;
-  for (const input of [...opts.sources, opts.args, opts.bundle].filter((p) => !!p && p !== "-")) {
-    const inputStat = fs5.existsSync(input) ? fs5.statSync(input) : void 0;
-    if (path6.resolve(input) === output || outputStat && inputStat && inputStat.dev === outputStat.dev && inputStat.ino === outputStat.ino) {
-      throw new Error("--output must not overwrite an input file");
-    }
-  }
-  fs5.rmSync(output, { force: true });
-}
-function rejection(result, unmet) {
-  if (result.ok) return `${unmet} --expect ${unmet === 1 ? "expectation was" : "expectations were"} not met`;
-  const said = EngineError.safeParse(result);
-  return said.success ? said.data.error : "The tool failed without saying why; see its result";
-}
-async function runCli(argv2, io) {
-  try {
-    if (argv2.length === 0 || argv2.includes("--help") || argv2.includes("-h")) {
-      io.stdout(HELP);
-      return 0;
-    }
-    const opts = parse(argv2);
-    clearOutput(opts);
-    const args = await argumentsFor(opts, io);
-    let result;
-    const timeoutMs = opts.timeoutMs ?? 18e4;
-    if (opts.command === "lean") {
-      if (!io.checkLeanWasm) throw new Error("Lean Wasm backend is unavailable");
-      io.stderr(`Checking the laws in ${opts.sources.join(", ")} with Lean Wasm at ${opts.leanWasmRoot} (budget ${timeoutMs} ms)...
-`);
-      result = objectValue(await io.checkLeanWasm(
-        opts.bundle,
-        opts.leanWasmRoot,
-        args.sources,
-        timeoutMs
-      ), "Lean result");
-    } else {
-      if (opts.command === "call") {
-        const files = Array.isArray(args.sources) ? args.sources.length : void 0;
-        const progress = callProgress(opts.tool, files);
-        if (progress) io.stderr(progress);
-      }
-      const engine = await io.loadEngine(opts.bundle);
-      const raw = opts.command === "tools" ? engine.listTools() : engine.callTool(opts.command === "verify" ? "api_verify" : opts.tool, JSON.stringify(args));
-      result = objectJson(raw, "Engine result");
-    }
-    if (typeof result.ok !== "boolean") throw new Error("Engine result must explicitly contain boolean ok");
-    const unmet = opts.expects.filter(({ pointer, value }) => !isDeepStrictEqual(readPointer(result, pointer), value));
-    const passed = result.ok && unmet.length === 0;
-    if (opts.select === void 0 || passed) {
-      const selected = opts.select === void 0 ? result : readPointer(result, opts.select);
-      if (selected === void 0) throw new Error(`Result field missing: ${opts.select}`);
-      const text3 = opts.select !== void 0 && typeof selected === "string" ? selected : `${JSON.stringify(selected, null, 2)}
-`;
-      if (opts.output) fs5.writeFileSync(opts.output, text3);
-      else io.stdout(text3);
-    }
-    const artifact = opts.select !== void 0 ? "the unselected result; run without --select to see it" : opts.output ?? "the JSON on standard output";
-    let exit = passed ? 0 : 1;
-    if (opts.command === "verify") {
-      io.stderr(verifySummary(result, passed, artifact));
-      if (!result.ok && result.errorKind === "invalid-arguments") exit = 2;
-    } else if (opts.command === "lean") {
-      const reading = leanSummary(result, artifact, timeoutMs, opts.sources);
-      io.stderr(reading.text);
-      exit = reading.exit;
-    } else if (!result.ok) {
-      io.stderr(callFailure(opts.tool ?? "tools", result, artifact));
-    } else if (passed && opts.select === void 0 && opts.command === "call") {
-      const said = callSummary(opts.tool, result, opts.output);
-      if (said) io.stderr(said);
-    }
-    const generic = opts.command === "call" || opts.command === "tools";
-    if (!passed && (opts.select !== void 0 || generic && result.ok)) {
-      io.stderr(`${JSON.stringify({ ok: false, error: rejection(result, unmet.length), unmet, result: opts.select === void 0 ? void 0 : result })}
-`);
-    }
-    return exit;
-  } catch (error) {
-    io.stderr(`Error: ${error instanceof Error ? error.message : String(error)}
-`);
-    return 2;
-  }
-}
-
-// src/studio/serve.ts
-import { once } from "events";
-import { fileURLToPath as fileURLToPath2 } from "url";
-import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { EngineWorkerClient, catalogTools } from "@yichus/api-mcp";
-
-// src/studio/page-server.ts
-import fs6 from "fs";
-import http from "http";
-import path7 from "path";
-
-// src/studio/page.ts
-var STUDIO_PAGE = `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>Yichus studio</title>
-<link rel="stylesheet" href="system-map.css">
-<style>
-  :root { --ink:#0f172a; --muted:#475569; --faint:#94a3b8; --rule:#e2e8f0; --paper:#ffffff; --page:#f6f8fb;
-    --good:#047857; --goodSoft:#ecfdf5; --bad:#b91c1c; --badSoft:#fef2f2; --warn:#92400e; --warnSoft:#fffbeb; --accent:#22675e; }
-  * { box-sizing:border-box; }
-  body { margin:0; background:var(--page); color:var(--ink); font:16px/1.55 Inter, system-ui, sans-serif; }
-  main { max-width:1100px; margin:0 auto; padding:24px 16px 64px; }
-  header p { margin:4px 0 0; color:var(--muted); }
-  h1 { font-size:1.6rem; margin:0; font-weight:600; }
-  h2 { font-size:1.15rem; margin:32px 0 8px; }
-  section > p.lede { color:var(--muted); margin:0 0 12px; max-width:70ch; }
-  a.guide { color:var(--accent); font-weight:600; }
-  .frame { background:var(--paper); border:1px solid var(--rule); border-radius:10px; padding:16px; position:relative; }
-  .frame > .tag { position:absolute; top:-10px; left:12px; background:var(--page); padding:0 6px; font-size:0.72rem; letter-spacing:0.08em; text-transform:uppercase; color:var(--accent); font-weight:700; }
-  .yours { border-left:3px solid var(--accent); padding:4px 12px; margin:0; font-style:italic; }
-  .label { font-size:0.75rem; color:var(--muted); text-transform:uppercase; letter-spacing:0.06em; margin:0 0 4px; }
-  .now { font-weight:600; }
-  .question { border-top:1px solid var(--rule); padding:14px 0; }
-  .question:first-of-type { border-top:none; padding-top:4px; }
-  .question .ask { font-weight:600; margin:0 0 4px; }
-  .question .why { color:var(--muted); margin:0 0 8px; font-size:0.94rem; }
-  .choice { display:flex; gap:8px; align-items:flex-start; margin:6px 0; }
-  .choice span small { display:block; color:var(--muted); }
-  textarea { width:100%; min-height:3.2em; font:inherit; border:1px solid var(--rule); border-radius:8px; padding:8px; margin:6px 0; }
-  button { font:inherit; font-weight:600; border:none; border-radius:8px; padding:8px 14px; background:var(--accent); color:#fff; cursor:pointer; }
-  button:disabled { opacity:0.5; cursor:default; }
-  .props { list-style:none; margin:0; padding:0; }
-  .props li { border-top:1px solid var(--rule); padding:12px 0; display:grid; grid-template-columns:1fr auto; gap:4px 16px; }
-  .props li:first-child { border-top:none; }
-  .chip { font-size:0.8rem; font-weight:700; border-radius:999px; padding:2px 10px; white-space:nowrap; align-self:start; justify-self:start; }
-  .chip.good { color:var(--good); background:var(--goodSoft); }
-  .chip.bad { color:var(--bad); background:var(--badSoft); }
-  .chip.warn { color:var(--warn); background:var(--warnSoft); }
-  .chip.quiet { color:var(--muted); background:var(--rule); }
-  .props .choice-said { color:var(--muted); font-size:0.94rem; grid-column:1 / -1; }
-  details { grid-column:1 / -1; font-size:0.88rem; }
-  details pre { white-space:pre-wrap; word-break:break-word; background:var(--page); border-radius:8px; padding:8px; margin:6px 0 0; font-size:0.82rem; }
-  .empty { color:var(--muted); }
-  @media (max-width:640px) { .props li { grid-template-columns:1fr; } }
-</style>
-</head>
-<body>
-<main>
-  <header>
-    <h1>Yichus studio<span id="project"></span></h1>
-    <p id="updated">Waiting for your agent.</p>
-    <p><a class="guide" href="https://yich.us/start/studio.html#page" target="_blank" rel="noopener">How to read this page</a> (opens in a new tab)</p>
-  </header>
-  <section aria-labelledby="h-asked">
-    <h2 id="h-asked">What you asked for</h2>
-    <p class="label">Your words</p>
-    <p class="yours" id="description">Nothing yet. Tell your agent what you want to build.</p>
-  </section>
-  <section aria-labelledby="h-now">
-    <h2 id="h-now">What is happening now</h2>
-    <div class="frame"><span class="tag">Yichus output</span>
-      <p class="now" id="summary">No checks have run yet.</p>
-    </div>
-  </section>
-  <section aria-labelledby="h-questions" id="questions-section" hidden>
-    <h2 id="h-questions">Questions for you</h2>
-    <p class="lede">Your agent will ask you these too. Answer here or in the chat, whichever is easier. <a class="guide" href="https://yich.us/start/studio.html#questions" target="_blank" rel="noopener">About these questions</a></p>
-    <div class="frame"><span class="tag">Yichus output</span><div id="questions"></div></div>
-  </section>
-  <section aria-labelledby="h-props">
-    <h2 id="h-props">What your program must do</h2>
-    <p class="lede"><a class="guide" href="https://yich.us/start/studio.html#statuses" target="_blank" rel="noopener">What each status means</a></p>
-    <div class="frame"><span class="tag">Yichus output</span><ul class="props" id="props"><li class="empty">No properties chosen yet.</li></ul></div>
-  </section>
-  <section aria-labelledby="h-map">
-    <h2 id="h-map">The shape of your program</h2>
-    <p class="lede"><a class="guide" href="https://yich.us/start/studio.html#shape" target="_blank" rel="noopener">How to read the picture</a></p>
-    <div class="frame"><div class="system-map" id="map"><p class="empty">The map appears once the program compiles.</p></div></div>
-  </section>
-</main>
-<script type="module">
-import { mount } from './system-map.js';
-
-const STATUS = {
-  unanswered: ['waiting for your answer', 'quiet'], decided: ['decided', 'good'], assumed: ['holds, under an assumption', 'warn'],
-  proven: ['proven', 'good'], bounded: ['holds in every scenario checked', 'good'], broken: ['broken', 'bad'],
-  mismatch: ['the code says otherwise', 'bad'], 'needs-case': ['scenario being written', 'quiet'],
-  inconclusive: ['not decided yet', 'warn'], 'no-check': ['no check needed', 'quiet'], pending: ['answered, waiting for your agent to check', 'quiet'],
-};
-const el = (tag, props = {}, ...kids) => { const n = Object.assign(document.createElement(tag), props); n.append(...kids); return n; };
-let mapHash = null;
-
-function questionCard(q, saved) {
-  const card = el('div', { className: 'question' });
-  card.append(el('p', { className: 'ask', textContent: q.ask }), el('p', { className: 'why', textContent: q.why }));
-  const name = 'q-' + q.id;
-  for (const c of q.choices) {
-    const input = el('input', { type: 'radio', name, value: c.id, checked: saved?.choice === c.id });
-    card.append(el('label', { className: 'choice' }, input, el('span', {}, c.label, el('small', { textContent: c.means }))));
-  }
-  const words = el('textarea', { placeholder: 'In your own words (optional)', value: saved?.words ?? '' });
-  const status = el('span', { className: 'empty', textContent: saved ? ' Saved. Your agent will check it next.' : '' });
-  const save = el('button', { type: 'button', textContent: 'Save answer' });
-  save.addEventListener('click', async () => {
-    const picked = card.querySelector('input[name="' + CSS.escape(name) + '"]:checked');
-    if (!picked) { status.textContent = ' Pick one of the choices first.'; return; }
-    save.disabled = true;
-    const label = q.choices.find(c => c.id === picked.value).label;
-    const response = await fetch('/answer', { method: 'POST', headers: { 'content-type': 'application/json' },
-      body: JSON.stringify({ question: q.id, choice: picked.value, words: words.value.trim() || label }) });
-    const result = await response.json();
-    status.textContent = result.ok ? ' Saved. Your agent will check it next.' : ' ' + result.error;
-    save.disabled = false;
-  });
-  card.append(el('p', { className: 'label', textContent: 'Your words' }), words, save, status);
-  return card;
-}
-
-function propertyRow(p, saved) {
-  const stale = saved && (!p.answer || p.answer.answeredAt !== saved.answeredAt);
-  const [words, tone] = STATUS[stale ? 'pending' : p.status];
-  const answer = stale ? saved : p.answer;
-  const label = p.question.choices.find(c => c.id === answer.choice)?.label ?? answer.choice;
-  const li = el('li', {}, el('span', { textContent: p.question.ask }), el('span', { className: 'chip ' + tone, textContent: words }));
-  li.append(el('span', { className: 'choice-said', textContent: 'You chose: ' + label + (answer.words && answer.words !== label ? ' ("' + answer.words + '")' : '') }));
-  return li;
-}
-
-async function refresh() {
-  const { state, requirements } = await (await fetch('/state')).json();
-  const savedOf = id => requirements.answers.find(a => a.question === id);
-  if (requirements.description) document.getElementById('description').textContent = requirements.description;
-  if (!state) return;
-  document.getElementById('project').textContent = ': ' + state.project;
-  document.getElementById('updated').textContent = 'Last checked ' + new Date(state.updatedAt).toLocaleTimeString() + '.';
-  document.getElementById('summary').textContent = state.summary;
-  const open = state.properties.filter(p => p.status === 'unanswered' && !savedOf(p.question.id));
-  document.getElementById('questions-section').hidden = !open.length;
-  // Keep a half-written answer: only rebuild cards when the questions change.
-  const qs = document.getElementById('questions');
-  const ids = open.map(p => p.question.id).join(' ');
-  if (qs.dataset.ids !== ids) { qs.dataset.ids = ids; qs.replaceChildren(...open.map(p => questionCard(p.question, savedOf(p.question.id)))); }
-  const chosen = state.properties.filter(p => p.answer || savedOf(p.question.id));
-  document.getElementById('props').replaceChildren(...(chosen.length ? chosen.map(p => propertyRow(p, savedOf(p.question.id)))
-    : [el('li', { className: 'empty', textContent: 'No properties chosen yet.' })]));
-  const map = document.getElementById('map');
-  if (state.map && state.sourcesHash !== mapHash) { mapHash = state.sourcesHash; mount(map, state.map); }
-  else if (!state.map && state.mapError) map.replaceChildren(el('p', { className: 'empty', textContent: 'The map could not be drawn: ' + state.mapError }));
-}
-
-new EventSource('/events').addEventListener('change', () => refresh());
-refresh();
-</script>
-</body>
-</html>
-`;
-
-// src/studio/page-server.ts
-var PAGE_ASSETS = ["system-map.js", "label-fit.js", "system-map-record.js", "system-map.css"];
-function personView(state, names) {
-  if (!state) return null;
-  return {
-    project: state.project,
-    updatedAt: state.updatedAt,
-    sourcesHash: state.sourcesHash,
-    summary: state.step.summary,
-    properties: state.properties.map((p) => ({
-      question: { id: p.question.id, ask: p.question.ask, why: p.question.why, choices: p.question.choices },
-      answer: p.answer,
-      status: p.status
-    })),
-    map: state.map ? relabelSystemMap(state.map, names) : null,
-    mapError: state.mapError
-  };
-}
-function stateBody(root) {
-  const { description, answers, names } = loadRequirements(root);
-  return { state: personView(readState(root), names ?? {}), requirements: { description, answers } };
-}
-var STUDIO_PORTS = [4317, 4318, 4319, 4320, 4321, 0];
-async function startPageServer(root, assetsDir, port = null, now = () => /* @__PURE__ */ new Date()) {
-  ensureStudioDir(root);
-  const clients = /* @__PURE__ */ new Set();
-  const watched = ["state.json", "requirements.json"].map((name) => path7.join(studioDir(root), name));
-  const changed = (now2, before) => {
-    if (now2.mtimeMs !== before.mtimeMs || now2.size !== before.size) for (const res of clients) res.write("event: change\ndata: {}\n\n");
-  };
-  for (const file of watched) fs6.watchFile(file, { interval: 250 }, changed);
-  const hosts = /* @__PURE__ */ new Set();
-  const server = http.createServer((req, res) => {
-    const send = (status, type, body) => {
-      res.writeHead(status, { "content-type": type, "cache-control": "no-store", "x-content-type-options": "nosniff" });
-      res.end(body);
-    };
-    const host = req.headers.host ?? "";
-    if (!hosts.has(host) || req.headers.origin && req.headers.origin !== `http://${host}`) {
-      send(403, "text/plain", "This studio only answers its own page.");
-      return;
-    }
-    const url = new URL(req.url ?? "/", `http://${host}`);
-    if (req.method === "GET" && url.pathname === "/") return send(200, "text/html; charset=utf-8", STUDIO_PAGE);
-    if (req.method === "GET" && url.pathname === "/state") {
-      return send(200, "application/json", JSON.stringify(stateBody(root)));
-    }
-    if (req.method === "GET" && url.pathname === "/events") {
-      res.writeHead(200, { "content-type": "text/event-stream", "cache-control": "no-store", connection: "keep-alive" });
-      res.write(": connected\n\n");
-      clients.add(res);
-      req.on("close", () => clients.delete(res));
-      return;
-    }
-    const asset = PAGE_ASSETS.find((a) => url.pathname === `/${a}`);
-    if (req.method === "GET" && asset) {
-      return send(200, asset.endsWith(".css") ? "text/css" : "text/javascript", fs6.readFileSync(path7.join(assetsDir, asset), "utf8"));
-    }
-    if (req.method === "POST" && url.pathname === "/answer") {
-      if (req.headers["content-type"] !== "application/json") return send(415, "text/plain", "Send JSON.");
-      let body = "";
-      req.setEncoding("utf8");
-      req.on("data", (chunk) => {
-        body += chunk;
-        if (body.length > 65536) req.destroy();
-      });
-      req.on("end", () => {
-        let args;
-        try {
-          args = JSON.parse(body);
-        } catch {
-          return send(400, "application/json", JSON.stringify({ ok: false, error: "The answer is not JSON." }));
-        }
-        const result = recordAnswer(root, args, now());
-        send(result.ok ? 200 : 400, "application/json", JSON.stringify(result));
-      });
-      return;
-    }
-    send(404, "text/plain", "Not found.");
-  });
-  for (const candidate of port === null ? STUDIO_PORTS : [port]) {
-    const error = await new Promise((resolve) => {
-      server.once("error", resolve);
-      server.listen(candidate, "127.0.0.1", () => {
-        server.off("error", resolve);
-        resolve(null);
-      });
-    });
-    if (!error) break;
-    if (error.code !== "EADDRINUSE" || candidate === port) throw error;
-  }
-  const bound = server.address().port;
-  hosts.add(`127.0.0.1:${bound}`).add(`localhost:${bound}`);
-  return {
-    url: `http://127.0.0.1:${bound}/`,
-    async close() {
-      for (const file of watched) fs6.unwatchFile(file, changed);
-      const closed = new Promise((resolve) => server.close(() => resolve()));
-      server.closeAllConnections();
-      await closed;
-    }
-  };
-}
-
-// src/studio/serve.ts
-var objectResult = (raw, tool) => {
-  const value = JSON.parse(raw);
-  if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(`${tool} returned no JSON object`);
-  return value;
-};
-var inProcessEngine = (engine) => ({
-  async call(tool, args) {
-    return objectResult(engine.callTool(tool, JSON.stringify(args)), tool);
-  }
-});
-function workerEngine(bundle) {
-  const worker = new EngineWorkerClient(bundle, 9e5);
-  let id = 0;
-  return {
-    async call(tool, args) {
-      return objectResult(await worker.callTool(tool, JSON.stringify(args), `studio-${++id}`), tool);
-    },
-    async catalog() {
-      return catalogTools(await worker.listTools(`studio-${++id}`));
-    },
-    close: () => worker.close()
-  };
-}
-var BUILT_ASSETS = fileURLToPath2(new URL("./studio-page/", import.meta.url));
-async function serveStudio(options) {
-  const page = await startPageServer(options.root, options.assetsDir ?? BUILT_ASSETS, options.port);
-  options.stderr(`Yichus studio page: ${page.url}
+// src/cli.ts
+var problem = nodeVersionProblem(process.versions.node, engines.node);
+if (problem) {
+  process.stderr.write(`${problem}
 `);
-  if (options.pageOnly) {
-    await (options.stopped ?? once(process, "SIGINT"));
-    await page.close();
-    return;
-  }
-  const engine = workerEngine(options.bundle);
-  const { server, idle } = createStudioMcpServer({ root: options.root, engine, pageUrl: page.url, catalog: engine.catalog });
-  const stdin = options.stdin ?? process.stdin;
-  const closed = once(stdin, "end");
-  try {
-    await server.connect(new StdioServerTransport(stdin, options.stdout ?? process.stdout));
-    await closed;
-    await idle();
-  } finally {
-    await server.close();
-    await engine.close();
-    await page.close();
-  }
+  process.exitCode = 1;
+} else {
+  await import("./main.js");
 }
-
-// src/cli.ts
-var bundleOrThrow = (bundle) => {
-  const resolved = bundle ?? findApiMcpBundle();
-  if (!resolved) throw new Error("Yichus engine bundle missing. Reinstall @yichus/api-mcp or pass --bundle.");
-  return resolved;
-};
-var argv = process.argv.slice(2);
-process.exitCode = STUDIO_COMMANDS.has(argv[0] ?? "") ? await runStudioCommand(argv, {
-  engine: async () => inProcessEngine(await loadApiEngine(bundleOrThrow())),
-  serve: (options) => serveStudio({ ...options, bundle: bundleOrThrow(), stderr: (text3) => process.stderr.write(text3) }),
-  stdout: (text3) => process.stdout.write(text3),
-  stderr: (text3) => process.stderr.write(text3),
-  now: () => /* @__PURE__ */ new Date(),
-  locate: builtCopy
-}) : await runCli(argv, {
-  async loadEngine(bundle) {
-    return loadApiEngine(bundleOrThrow(bundle));
-  },
-  async checkLeanWasm(bundle, root, sources, timeoutMs) {
-    return checkLeanWasmSources(bundleOrThrow(bundle), root, sources, timeoutMs);
-  },
-  // A stream, not readFileSync(0): a pipe the parent has not written yet
-  // fails a synchronous read with EAGAIN on macOS.
-  readStdin: () => text2(process.stdin),
-  stdout: (text3) => process.stdout.write(text3),
-  stderr: (text3) => process.stderr.write(text3)
-});
 //# sourceMappingURL=cli.js.map