yichus 0.3.0 → 0.3.1

package/dist/main.js

@@ -0,0 +1,3762 @@
+// src/main.ts
+import { text as text2 } from "stream/consumers";
+import { checkLeanWasmSources, findApiMcpBundle, loadApiEngine } from "@yichus/api-mcp";
+
+// src/run.ts
+import fs9 from "fs";
+import path9 from "path";
+import { isDeepStrictEqual, parseArgs as parseArgs2 } from "util";
+import { z as z12 } from "zod";
+
+// src/engine-results.ts
+import { z } from "zod";
+var PropertyStatus = z.enum(["proven", "warning", "violated", "blocked"]);
+var Property = z.looseObject({
+  id: z.string(),
+  title: z.string().optional(),
+  status: PropertyStatus,
+  details: z.array(z.string()),
+  // The declared assumption an accepted warning rests on, e.g. "instances=1".
+  accepted: z.string().optional()
+});
+var VerifyResult = z.looseObject({
+  topology: z.string().optional(),
+  verdict: z.looseObject({
+    properties: z.array(Property),
+    errors: z.array(z.string()).default([]),
+    // Present only when the caller passed block_on_warnings: the warnings
+    // among the listed properties, which made the verdict not proven.
+    blockedWarnings: z.array(z.string()).optional()
+  })
+});
+var VerdictErrors = z.object({ verdict: z.object({ errors: z.array(z.string()) }) });
+var EngineError = z.object({ error: z.string(), errorKinds: z.array(z.string()).optional() });
+var Count = z.int().nonnegative();
+var AbstractionMap = z.looseObject({
+  measures: z.looseObject({
+    definitions: Count,
+    edges: Count,
+    layers: Count,
+    layerSkips: Count,
+    usedOnce: Count,
+    usedMany: Count,
+    clonePairs: Count,
+    duplicatedMass: Count,
+    maxSize: Count,
+    largestDefinition: z.string().optional()
+  })
+});
+
+// src/verdict.ts
+var title = (p) => p.title ?? p.id;
+var MEANING = {
+  proven: "holds for every input",
+  warning: "holds only under the acceptance its details name",
+  violated: "is broken; the details are the evidence",
+  blocked: "was not checked: the check could not run, could not finish, or could not see its subject"
+};
+var ACCEPTANCE = {
+  "instances=1": "Safe while you run one instance (--instances 1). Before running more than one:"
+};
+var acceptance = (a) => ACCEPTANCE[a] ?? `Safe under the declared ${a}. Before dropping it:`;
+var label = (p) => p.status === "warning" && p.accepted !== void 0 ? "accepted" : p.status;
+var indent = (text3, prefix) => text3.split("\n").map((line) => prefix + line).join("\n");
+function count(props) {
+  const order = [];
+  const counts = /* @__PURE__ */ new Map();
+  for (const p of props) {
+    const status = label(p);
+    if (!counts.has(status)) order.push(status);
+    counts.set(status, (counts.get(status) ?? 0) + 1);
+  }
+  return order.map((status) => `${counts.get(status)} ${status}`).join(", ");
+}
+function verifySummary(result, proven, artifact) {
+  const parsed = VerifyResult.safeParse(result);
+  if (!parsed.success) {
+    const said2 = EngineError.safeParse(result);
+    const reason2 = said2.success ? ` The engine said: ${said2.data.error}` : "";
+    const errors2 = VerdictErrors.safeParse(result);
+    const lines2 = [
+      proven ? "Proven, but the verdict has no readable property list." : `Not proven. The engine returned no readable verdict.${reason2}`
+    ];
+    if (errors2.success && errors2.data.verdict.errors.length)
+      lines2.push("Errors:", ...errors2.data.verdict.errors.map((e) => indent(e, "  ")));
+    lines2.push(`The full result is in ${artifact}.`);
+    return `${lines2.join("\n")}
+`;
+  }
+  const checked = parsed.data.verdict.properties;
+  const errors = parsed.data.verdict.errors;
+  const topology2 = parsed.data.topology !== void 0 ? ` Topology: ${parsed.data.topology}.` : "";
+  const lines = [];
+  if (proven) {
+    lines.push(`Proven: ${checked.length} properties checked (${count(checked)}).${topology2}`);
+  } else {
+    lines.push(`Not proven: ${checked.length} properties checked (${count(checked)}).${topology2}`);
+    const blocking = new Set(parsed.data.verdict.blockedWarnings ?? []);
+    const first = checked.find((p) => p.status === "violated") ?? checked.find((p) => p.status !== "proven" && p.status !== "warning") ?? checked.find((p) => blocking.has(p.id));
+    if (first) {
+      const why = blocking.has(first.id) && first.status === "warning" ? " It blocks because --block-on-warning named it." : "";
+      lines.push(`First failure (${first.status}): ${title(first)}. This property ${MEANING[first.status]}.${why}`);
+      for (const detail of first.details) lines.push(indent(detail, "    "));
+    }
+  }
+  lines.push("Every property:");
+  const width = Math.max(...checked.map((p) => label(p).length));
+  for (const p of checked) {
+    lines.push(`  ${label(p).padEnd(width)}  ${title(p)}`);
+    const pad = `  ${" ".repeat(width)}    `;
+    if (p.status === "warning" && p.accepted !== void 0) lines.push(pad + acceptance(p.accepted));
+    if (p.status === "warning") for (const detail of p.details) lines.push(indent(detail, pad));
+  }
+  const shown2 = new Set(checked.flatMap((p) => p.details));
+  const unshown = errors.filter((e) => !shown2.has(e));
+  if (unshown.length) lines.push("Errors:", ...unshown.map((e) => indent(e, "  ")));
+  lines.push(`The full verdict, with every property's details, is in ${artifact}.`);
+  return `${lines.join("\n")}
+`;
+}
+
+// src/lean-verdict.ts
+import { LEAN_WASM_INSTALL_COMMAND, LeanCheckResult } from "@yichus/api-mcp";
+import { z as z2 } from "zod";
+var plural = (n, word) => `${n} ${word}${n === 1 ? "" : "s"}`;
+var indent2 = (value, prefix) => value.split("\n").map((line) => prefix + line).join("\n");
+var SIDE = {
+  rejected: "checker",
+  "axiom-audit": "checker",
+  "not-admitted": "checker",
+  "runtime-missing": "harness",
+  timeout: "harness",
+  "runtime-error": "harness"
+};
+var DEFAULT_TIMEOUT_MS = 18e4;
+var MAX_TIMEOUT_MS = 3e5;
+function remedy(cause, timeoutMs, files) {
+  const sources = files.map((f) => `--source ${f}`).join(" ");
+  switch (cause) {
+    case "runtime-missing":
+      return [
+        "Install the pinned runtime once (about 290 MB to download), then pass that folder as --lean-wasm-root:",
+        `  ${LEAN_WASM_INSTALL_COMMAND.replace("NEW_DIRECTORY", "/absolute/new/folder")}`
+      ];
+    case "timeout":
+      return [timeoutMs < MAX_TIMEOUT_MS ? `The ${timeoutMs} ms budget ran out before Lean finished. Rerun with a larger --timeout-ms (the default is ${DEFAULT_TIMEOUT_MS}, the most is ${MAX_TIMEOUT_MS}).` : `The ${timeoutMs} ms budget, the most allowed, ran out before Lean finished. Split the laws across separate files and check them one at a time.`];
+    case "runtime-error":
+      return [
+        "The Lean Wasm runtime could not run. If it was changed or only partly installed, install a fresh copy into a new folder:",
+        `  ${LEAN_WASM_INSTALL_COMMAND.replace("NEW_DIRECTORY", "/absolute/new/folder")}`
+      ];
+    case "rejected":
+      return [
+        "A rejected theorem means the law fails for some input, its witness matches no value, or the generated Lean is wrong; Lean's words above say which.",
+        `To see a failing input, run: yichus call api_law_check ${sources}. Fix the code, not the law.`
+      ];
+    case "axiom-audit":
+      return ["Lean accepted the theorem, but its axiom audit was missing or named an axiom other than propext, Classical.choice and Quot.sound, so it is not counted as proven."];
+    case "not-admitted":
+      return [`Lean Wasm proves Bool and structural List[Bool] laws with one direct witness. Check other laws with: yichus call api_law_check ${sources}`];
+  }
+}
+var unreadable = (artifact, why) => ({
+  exit: 2,
+  text: `Not checked: the Lean result could not be read (${why}). The full result is in ${artifact}.
+`
+});
+var EngineError2 = z2.object({ ok: z2.literal(false), error: z2.string().min(1), proof: z2.undefined().optional() });
+var issue = (error) => {
+  const first = error.issues[0];
+  return first.path.length ? `${first.path.join(".")}: ${first.message}` : first.message;
+};
+function leanSummary(raw, artifact, timeoutMs, files) {
+  const refused = EngineError2.safeParse(raw);
+  if (refused.success) return unreadable(artifact, `the engine said: ${refused.data.error}`);
+  const parsed = LeanCheckResult.safeParse(raw);
+  if (!parsed.success) return unreadable(artifact, issue(parsed.error));
+  const proof = parsed.data.proof;
+  const laws = proof.obligations;
+  const lines = [];
+  if (proof.status === "verified") {
+    lines.push(`Proven: ${plural(laws.length, "law")} verified by the pinned Lean Wasm kernel.`);
+    for (const row of laws) {
+      if (row.status !== "verified") continue;
+      const { check, witness, domain } = row.proof.subject;
+      lines.push(`  ${row.binding}: ${check} holds for ${domain}, and ${witness} holds for at least one.`);
+    }
+    lines.push(`The proof receipt is in ${artifact}. It is a local Wasm kernel check (independentKernelReplay: false).`);
+    return { exit: 0, text: `${lines.join("\n")}
+` };
+  }
+  if (!laws.length) {
+    const cause = proof.cause;
+    const checker2 = SIDE[cause] === "checker";
+    lines.push(`${checker2 ? "Not proven" : "Not checked"}: ${proof.reason}.`);
+    if (cause === "not-admitted") lines.push("Fix the source, or add a Yichus/Law Obligation for lean to prove.");
+    else lines.push(...remedy(cause, timeoutMs, files));
+    lines.push(`The full result is in ${artifact}.`);
+    return { exit: checker2 ? 1 : 2, text: `${lines.join("\n")}
+` };
+  }
+  const failed = laws.flatMap((row) => row.status === "inconclusive" ? [row] : []);
+  const causes = [...new Set(failed.map((row) => row.cause))];
+  const checker = causes.some((cause) => SIDE[cause] === "checker");
+  lines.push(checker ? `Not proven: ${failed.length} of ${plural(laws.length, "law")} did not verify.` : `Not checked: ${failed.length} of ${plural(laws.length, "law")} could not be checked.`);
+  for (const row of laws) {
+    if (row.status === "verified") {
+      lines.push(`  verified      ${row.binding}`);
+      continue;
+    }
+    lines.push(`  ${row.cause.padEnd(12)}  ${row.binding}: ${row.reason}.`);
+    if (row.diagnostics?.length) lines.push("      Lean said:", ...row.diagnostics.map((d) => indent2(d, "        ")));
+  }
+  for (const cause of causes) lines.push(...remedy(cause, timeoutMs, files));
+  lines.push(`The full result is in ${artifact}.`);
+  return { exit: checker ? 1 : 2, text: `${lines.join("\n")}
+` };
+}
+
+// src/call-summary.ts
+var plural2 = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
+function mapSummary(result) {
+  const parsed = AbstractionMap.safeParse(result);
+  if (!parsed.success) return ["The map has no readable measures block; read the JSON for its contents."];
+  const m = parsed.data.measures;
+  const lines = [
+    `Layers: ${plural2(m.definitions, "definition")} stacked ${plural2(m.layers, "layer")} deep (a definition sits one layer above the highest one it uses).`,
+    m.layerSkips === 0 ? `Layer skips: none of the ${plural2(m.edges, "dependency edge")} reaches past the layer just below.` : `Layer skips: ${m.layerSkips} of ${plural2(m.edges, "dependency edge")} reach past the layer just below, using a definition two or more layers down; they are the "edges" with "span" above 1.`,
+    `Reuse: ${plural2(m.usedMany, "definition is", "definitions are")} used by several others, ${m.usedOnce} by exactly one (each node's "fanIn").`,
+    m.clonePairs === 0 ? "Copies: no two definitions have the same compiled body." : `Copies: ${plural2(m.clonePairs, "pair")} of definitions have the same compiled body; see "clonePairs".`,
+    m.duplicatedMass === 0 ? "Repeats: no block of code repeats inside a definition." : `Repeats: blocks repeated inside one definition add ${plural2(m.duplicatedMass, "node")}; nodes with "repeatedBlockMass" above 0 list each block's places in "repeatedBlocks".`
+  ];
+  if (m.largestDefinition !== void 0)
+    lines.push(`Largest definition: ${m.largestDefinition} (${m.maxSize} nodes).`);
+  return lines;
+}
+var SUMMARIES = {
+  api_abstraction_map: {
+    noun: "the abstraction map",
+    progress: (files) => `Mapping ${files === void 0 ? "the program" : plural2(files, "Bosatsu file")}: compiling it and measuring every definition, which can take half a minute or more for a large program...`,
+    summary: mapSummary
+  }
+};
+function callProgress(tool, files) {
+  const known = SUMMARIES[tool];
+  return known ? `${known.progress(files)}
+` : void 0;
+}
+function callSummary(tool, result, output) {
+  const known = SUMMARIES[tool];
+  const lines = [];
+  if (output) lines.push(`Wrote ${known?.noun ?? `the ${tool} result`} to ${output}.`);
+  if (known) lines.push(...known.summary(result));
+  return lines.length ? `${lines.join("\n")}
+` : void 0;
+}
+var NEXT_STEP = {
+  "duplicate-package": "Each package can be declared by only one file. Give each file its own package name, or pass only one of them."
+};
+function callFailure(tool, result, artifact) {
+  const said2 = EngineError.safeParse(result);
+  const lines = said2.success ? [`${tool} failed:`, said2.data.error] : [`${tool} failed without saying why.`];
+  if (said2.success) {
+    for (const kind of said2.data.errorKinds ?? []) if (Object.hasOwn(NEXT_STEP, kind)) lines.push(`Next: ${NEXT_STEP[kind]}`);
+  }
+  lines.push(`The full result is in ${artifact}.`);
+  return `${lines.join("\n")}
+`;
+}
+
+// src/studio/command.ts
+import fs8 from "fs";
+import path8 from "path";
+import { parseArgs } from "util";
+
+// src/studio/director.ts
+import fs3 from "fs";
+import path3 from "path";
+import { z as z6 } from "zod";
+
+// ../../web/system-map-record.js
+var MARKS_VERSION = "yichus-marks-3";
+var VOCABULARY = {
+  version: MARKS_VERSION,
+  fixedPlaces: {
+    callers: "left of the wall: one glyph per transport kind, HTTP above, importer below, each with a bracket over the openings it calls; the kind the program lacks is the same glyph struck through  <- callers[], ghostCallers[]",
+    openings: "the left wall: one opening per entry  <- entries[]",
+    hullBand: "the middle band of the wall: wrappers sit here and nowhere else; empty band = no entry goes through a shared wrapper  <- wrappers[]",
+    afterBand: "between a hull's right wall and the reply bars: work an entry does after its wrapper returns, with its stations and checks; empty = none  <- entries[].beside",
+    replyBars: "one bar per entry at the same x, past the hull band  <- entries[]",
+    rail: "the bottom of the wall: a handle handed in from outside, with a riser to each use; a ? on the rail where a use is handed in on some paths only  <- uses[how=handed|mixed]",
+    rack: "right of the wall: db, model, net, always in this order; struck = the engine checked and found none  <- resources[], ghostResources[]",
+    programBand: "the bottom of the wall, under the rail: one container per pure program, its request openings on its right edge, the engine lanes right of it; empty = the engine found no program  <- programs[]",
+    quietLine: "bottom inside the wall: parts on no entry path, one stretch per package, with their forks, sockets, generic letters and steps  <- keyed[], library.applied[], steps[]"
+  },
+  marks: {
+    entryHead: "arrowhead at an opening; solid = the entry writes, hollow = it only reads  <- entries[].writes",
+    lock: "closed padlock by the path: sign-in with a secret key; open padlock with a raised shackle: a publishable key may call it  <- entries[].authority",
+    role: "red word beside the lock: a role beyond sign-in  <- entries[].roles",
+    limit: "gauge beside the path: a declared rate limit  <- entries[].limits",
+    station: "ring on a path: code touching a table, with the verb and table beside it; filled = writes  <- entries[].reach, wrappers[].effects, entries[].beside.effects",
+    modelRing: "violet ring: the entry reaches the model  <- entries[].model",
+    reachedBy: "under each resource in the rack: how many routes reach it, the resource drawn at that share of the routes (never smaller than its name)  <- entries[].db, model, net, beside.resources",
+    netRing: "orange ring: the entry reaches the network  <- entries[].net",
+    guard: "red diamond on the path where the check happens, its name above, failure stem below  <- entries[].guards, wrappers[].guards, entries[].passed[].guards, entries[].beside.guards",
+    hull: "translucent region in the hull band: paths merge into it, run one shared stretch, and split; everything inside it runs inside the wrapper; its right wall, drawn in the hull ink, is where the wrapper returns  <- wrappers[]",
+    socket: "broken-rim ring: a function the caller hands in runs here; its centre fills like a station  <- entries[].passed[]",
+    token: "small grey word under a path: the value the caller fixes for the wrapper  <- entries[].policy",
+    afterDot: "dot in the after band: a call the entry makes after its wrapper returns  <- entries[].beside.calls",
+    builder: "plus-disc under a station with the call that builds the handle there  <- uses[how=local].builtBy",
+    unknown: 'a ? in a circle on the rail, with "partly traced" beside it and a sentence on hover: the engine traced the handle only on some paths  <- uses[how=mixed]',
+    fork: "three prongs and a type: a choice keyed on a plain String or Int; under the mark that makes it, else on the quiet line  <- keyed[]",
+    bundle: 'one cable with how many routes it carries ("4 routes"): entries with the same wrapper and identical marks; its title names every route; opening it draws each one  <- bundles[]',
+    anchor: "where the rail starts: platform when no definition of the program can make the handle; ? when the trace stops and the program could  <- uses[].anchor",
+    step: 'loop arc with a type on the quiet line: functions of the package take that type and return it; gathered, a count in words ("8 steps"), as are choices, db uses and generic parts  <- steps[]',
+    loop: "loop arc with package names: packages whose types lead back to themselves  <- phases.cycles",
+    composes: "hull round a chain: a definition takes the type the chain hands in at each step and applies it  <- library.applied[].fedBy",
+    port: "plug strip on the right: a record of functions; each adapter a plug, hollow when nothing plugs it in  <- library.ports[]",
+    generic: "the letter \u2200 with its variables over a part that never looks inside what it carries  <- library.generic[]",
+    program: `large container: a pure program, its step and package named, with its package's own definition count (as the layer stack counts them) and how many more it uses from other packages, the most used named with their counts; routes that act on one step's answer per call are named as its starters ("one step per call of"), and routes that only replay it are named on hover  <- programs[], definitions, usesElsewhere, elsewhere[], starters[advances=false], replays[]`,
+    decision: "bar and number in the program: its decisions, on one scale shared with its engines' bars  <- programs[].decisions",
+    struck: 'on a program, a struck "effects": no definition in its package performs an effect  <- programs[].beside = []',
+    programEffect: "red disc and count on a program: definitions in its own package that perform effects, named in its title  <- programs[].beside[]",
+    request: "opening on the program's right edge: a request constructor its step can return, with its payload's types  <- programs[].requests[]",
+    variant: 'short opening under a request: a constructor of a user sum type its payload carries, with what the program calls it ("BriefCase \u2192 Lawyer") where a total match maps each kind to a plain constructor; eight drawn, the rest counted with their names in a title  <- programs[].requests[].variants[], namings[]',
+    starter: "dashed line from a route's reply bar into the program top: the route calls the step with its values and acts on the answer, found by value flow; a route that runs an engine is named under its loop instead  <- programs[].starters[advances=false]",
+    gap: "struck opening: a request constructor no engine handles  <- programs[].gaps[]",
+    wire: "line from an opening to the lane that handles it, ending in the names of the resources the arm reaches, or a dot each where they do not fit  <- programs[].requests[].handledBy",
+    lane: `thin vertical line on the resource side: an engine that performs the program's requests, its package above it (package.definition where lanes share one) and what it does written from its type (its own parameters \u2192 what its effect yields), its code name and whole type on hover; it ends in the resources its arms reach, then dashed pills under "also" for resources it reaches for no request  <- programs[].engines[], pkgLabel, type, resources, also`,
+    laneFork: "bar and number on a lane: the engine's decisions, on the program's scale; 0 = a rule-free engine  <- programs[].engines[].decisions",
+    replyLoop: `one solid arc from a lane's foot back into the program, with one loop node naming what repeats the step within one call, and "each call of \u2026 runs it" naming the routes that run the rounds  <- programs[].engines[].replies, loop, starters`,
+    replaced: 'a check named "(in place of \u2026)": in the compared base record the same route had that other check at the same place, and it is on that route no longer; says nothing about whether the two do the same  <- compare.replaced[]'
+  },
+  rule: "every guard, wrapper, socket, fork, handle, station, step and resource the engine records is drawn at its fixed place, in every view; where nothing is drawn, the engine checked and found none."
+};
+var bare = (id) => String(id).split("::").pop();
+var pkgOf = (id) => String(id).split("::")[0];
+var uniq = (xs) => [...new Set(xs)];
+var OPS = { read: "read", query: "read", delete: "delete" };
+function effectsOf(steps) {
+  return (steps || []).filter((e) => e.resource === "db").flatMap((e) => e.tables.map((table) => ({ op: OPS[e.op] || "write", table })));
+}
+var isWrite = (op) => op !== "read";
+var uniqBy = (xs, key) => {
+  const seen = /* @__PURE__ */ new Set();
+  return xs.filter((x) => !seen.has(key(x)) && seen.add(key(x)));
+};
+var RUNNER = { CompileProgram: "compile", RunProgram: "run" };
+var effectResource = (e) => e.resource || RUNNER[e.kind] || "io";
+var LANE_RES = ["db", "model", "net", "compile", "run", "io"];
+var resOrder = (rs) => LANE_RES.filter((r) => rs.includes(r));
+function programsOf(st, layers = null) {
+  const found = st.programs && st.programs.programs || [];
+  const ownCount = (pkg) => {
+    const lp = layers && layers.packages.find((x) => x.name === pkg);
+    return lp ? lp.definitions.length : null;
+  };
+  return found.map((p) => {
+    const engines = p.engines.map((e) => {
+      const resources = resOrder(uniq(e.handles.flatMap((h) => h.effects.map(effectResource))));
+      return {
+        id: e.id,
+        label: bare(e.id),
+        pkg: pkgOf(e.id),
+        pkgLabel: pkgOf(e.id).split("/").pop(),
+        handles: e.handles.map((h) => h.constructor),
+        resources,
+        // effects the engine performs that are no request's: drawn, not hidden
+        also: resOrder(uniq((e.effects || []).map(effectResource))).filter((r) => !resources.includes(r)),
+        replies: resOrder(uniq(e.replies.map(effectResource))),
+        decisions: +e.decisions,
+        entries: e.entries,
+        truncated: e.truncated,
+        loop: e.loop ? { kind: e.loop.kind, by: e.loop.by, label: e.loop.by ? bare(e.loop.by) : null } : { kind: "sequence", by: null, label: null },
+        starters: (p.starters || []).filter((s) => s.advances && s.via.some((v) => v === e.id || e.entries.includes(s.entry))).map((s) => s.entry),
+        // what it does, from its type: the program's own and standard parameters, and what its effect yields; the whole type on hover
+        type: {
+          takes: e.labels.takes,
+          returns: e.labels.returns,
+          plainTakes: e.labels.plainTakes,
+          yields: e.labels.yields,
+          from: "structure.programs.programs[].engines[].labels"
+        },
+        from: "structure.programs.programs[].engines[]"
+      };
+    });
+    const requests = p.requests.map((q) => ({
+      constructor: q.constructor,
+      fields: q.fields.map((f) => f.label),
+      variants: (q.variants || []).map((v) => ({
+        path: v.path,
+        type: bare(v.type),
+        constructors: v.constructors,
+        // what the program calls each kind: total matches onto plain constructors, the type's own package first
+        namings: (v.namings || []).slice().sort((a, b) => (pkgOf(b.definition) === pkgOf(v.type)) - (pkgOf(a.definition) === pkgOf(v.type))).map((n) => ({
+          definition: n.definition,
+          label: bare(n.definition),
+          type: bare(n.type),
+          names: n.names.map((x) => ({ constructor: x.constructor, name: x.name })),
+          from: "structure.programs.programs[].requests[].variants[].namings[]"
+        })),
+        from: "structure.programs.programs[].requests[].variants[]"
+      })),
+      handledBy: p.engines.filter((e) => e.handles.some((h) => h.constructor === q.constructor)).map((e) => ({
+        engine: e.id,
+        resources: resOrder(uniq(e.handles.find((h) => h.constructor === q.constructor).effects.map(effectResource)))
+      })),
+      gap: p.gaps.some((g) => g.constructor === q.constructor),
+      from: "structure.programs.programs[].requests[] + engines[].handles[]"
+    }));
+    return {
+      id: p.step,
+      label: bare(p.step),
+      pkg: p.package,
+      pkgLabel: p.package.split("/").pop(),
+      result: bare(p.result),
+      requestType: bare(p.requestType),
+      carrier: p.carrier,
+      decisions: +p.decisions,
+      finishes: p.finishes,
+      // definitions: the package's own, as the layer stack counts them; reached: everything the program's definitions use
+      definitions: ownCount(p.package) ?? +(p.ownDefinitions || 0),
+      reached: p.definitions.length,
+      // of what it reaches, the definitions that live in other packages
+      usesElsewhere: p.definitions.filter((d) => pkgOf(d) !== p.package).length,
+      // and which packages those are, the most used first
+      elsewhere: Object.entries(p.definitions.filter((d) => pkgOf(d) !== p.package).reduce((m, d) => ({ ...m, [pkgOf(d)]: (m[pkgOf(d)] || 0) + 1 }), {})).sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).map(([pkg, n]) => ({ pkg, label: pkg.split("/").pop(), n, from: "structure.programs.programs[].definitions[]" })),
+      requests,
+      engines,
+      starters: (p.starters || []).map((s) => ({
+        entry: s.entry,
+        path: s.entry.replace(/^route:/, ""),
+        advances: s.advances,
+        via: s.via,
+        from: "structure.programs.programs[].starters[]"
+      })),
+      // routes that call the step and act on nothing it says: they read where the program is
+      replays: (p.replays || []).map((s) => ({ entry: s.entry, path: s.entry.replace(/^route:/, ""), via: s.via, from: "structure.programs.programs[].replays[]" })),
+      // what each reaches, as the structure lens's effect sites say (io when none is a resource)
+      beside: (p.beside || []).map((b) => ({
+        id: b.definition,
+        label: bare(b.definition),
+        kinds: b.kinds,
+        resources: resOrder(uniq((st.ioKinds || []).filter((k) => k.definition === b.definition).flatMap((k) => k.resources))),
+        from: "structure.programs.programs[].beside[], structure.ioKinds[].resources"
+      })),
+      gaps: p.gaps.map((g) => ({ constructor: g.constructor, from: "structure.programs.programs[].gaps[]" })),
+      from: "structure.programs.programs[]"
+    };
+  });
+}
+var outsideResourcesOf = (steps) => uniq((steps || []).map((e) => e.resource).filter((r) => r === "model" || r === "net"));
+function buildSystemMap(engine, { program }) {
+  for (const [k, v] of Object.entries(engine)) if (!v.ok) throw new Error(`${k}: ${v.error}`);
+  const report = engine.report, st = engine.structure, abs = engine.abstractions.abstractions, layers = engine.layers.layers;
+  const routes = (report.surface.routes || []).slice().sort((a, b) => a.path.localeCompare(b.path));
+  const engEntry = new Map(st.entries.map((e) => [e.entry, e]));
+  const shapes = new Map(abs.routeShapes.map((r) => [r.path, r]));
+  const gens = new Map(abs.generators.map((g) => [g.id, g]));
+  const insts = abs.instantiations;
+  const besideOf = (inst) => ({
+    calls: inst.besideCalls.map(bare),
+    callIds: inst.besideCalls,
+    guards: inst.besideGuards.map(bare),
+    guardIds: inst.besideGuards,
+    effects: effectsOf(inst.besideEffectSteps),
+    resources: outsideResourcesOf(inst.besideEffectSteps),
+    from: "abstractions.instantiations[].beside*"
+  });
+  const entries = routes.map((r) => {
+    const key = `route:${r.path}`;
+    const ee = engEntry.get(key);
+    const rs = shapes.get(r.path);
+    const wrapper = rs.shapedByGenerator;
+    const inst = wrapper ? insts.find((i) => i.callerId === rs.handlerId && i.generatorId === wrapper) : null;
+    const passed = (inst ? inst.slotBindings : []).filter((sb) => ["function", "effect"].includes(sb.slotRole)).map((sb) => ({
+      slot: sb.slotName,
+      id: sb.targetId || null,
+      label: sb.targetId ? bare(sb.targetId) : null,
+      kind: sb.passedKind,
+      guards: (sb.guards || []).map(bare),
+      guardIds: sb.guards || [],
+      effects: effectsOf(sb.effectSteps),
+      from: "abstractions.instantiations[].slotBindings[slotRole=function|effect]"
+    }));
+    const reach = wrapper ? [
+      ...effectsOf(rs.effectsInGeneratorSteps).map((e) => ({ ...e, where: "wrapper", from: "abstractions.routeShapes[].effectsInGeneratorSteps" })),
+      ...effectsOf(rs.effectsInPassedFunctionSteps).map((e) => ({ ...e, where: "passed", from: "abstractions.routeShapes[].effectsInPassedFunctionSteps" })),
+      ...effectsOf(rs.effectsDirectOrBesideSteps).map((e) => ({ ...e, where: "beside", from: "abstractions.routeShapes[].effectsDirectOrBesideSteps" }))
+    ] : uniqBy([
+      ...effectsOf(r.inferredSteps).map((e) => ({ ...e, where: "direct", from: "report.surface.routes[].inferredSteps" })),
+      ...effectsOf(rs.effectsDirectOrBesideSteps).map((e) => ({ ...e, where: "direct", from: "abstractions.routeShapes[].effectsDirectOrBesideSteps" }))
+    ], (e) => `${e.op} ${e.table}`);
+    const limits = ee.limits.written === "literal" ? ee.limits.each.map((l) => ({ requests: +l.requests, seconds: +l.seconds, by: l.by })) : [];
+    return {
+      key,
+      path: r.path,
+      handler: r.handler,
+      handlerId: rs.handlerId,
+      transport: ee.transport,
+      authority: ee.authority,
+      signedIn: !["public", "anonymous"].includes(ee.authority),
+      roles: r.requiredRoles || [],
+      limits,
+      limitComputed: ee.limits.written === "computed",
+      reachKinds: ee.reaches,
+      db: ee.resources.includes("db"),
+      model: ee.resources.includes("model"),
+      net: ee.resources.includes("net"),
+      writes: reach.some((e) => isWrite(e.op)),
+      guards: rs.handlerGuards.map(bare),
+      guardIds: rs.handlerGuards,
+      wrapper,
+      via: rs.viaSpecialization ? bare(rs.viaSpecialization) : null,
+      policy: (inst ? inst.slotBindings : []).filter((s) => s.slotRole === "semantic-object").map((s) => s.value).filter(Boolean),
+      passed,
+      beside: inst ? besideOf(inst) : null,
+      reach,
+      from: { entry: "report.surface.routes[]", transport: "structure.entries[]", shape: "abstractions.routeShapes[]", head: "entries[].reach (writes)" }
+    };
+  });
+  const partOf = (g) => {
+    const own = insts.filter((i) => i.generatorId === g.id);
+    return {
+      id: g.id,
+      label: g.name || bare(g.id),
+      pkg: pkgOf(g.id),
+      guards: g.envelope.guards.map(bare),
+      guardIds: g.envelope.guards,
+      effects: effectsOf(g.envelope.effectSteps),
+      groups: (g.parameterGroups || []).map((grp) => grp.map((sl) => ({ name: sl.name, role: sl.role, type: sl.type, guardsFed: (sl.guardsFed || []).map(bare) }))),
+      instantiationCount: own.length,
+      instantiatingPackages: uniq(own.map((i) => pkgOf(i.callerId))).sort(),
+      besideEmpty: own.every((i) => !i.besideCalls.length && !i.besideGuards.length && !i.besideEffects.length),
+      callers: own.map((i) => ({
+        id: i.callerId,
+        label: i.callerName || bare(i.callerId),
+        pkg: pkgOf(i.callerId),
+        routes: i.routes || [],
+        via: i.viaSpecialization ? bare(i.viaSpecialization) : null,
+        tokens: i.slotBindings.filter((s) => s.slotRole === "semantic-object").map((s) => s.value).filter(Boolean),
+        passed: i.slotBindings.filter((s) => ["function", "effect"].includes(s.slotRole)).map((s) => ({
+          slot: s.slotName,
+          id: s.targetId || null,
+          label: s.targetId ? bare(s.targetId) : null,
+          guards: (s.guards || []).map(bare),
+          guardIds: s.guards || [],
+          effects: effectsOf(s.effectSteps)
+        })),
+        beside: besideOf(i)
+      })),
+      from: "abstractions.generators[] + abstractions.instantiations[generatorId]"
+    };
+  };
+  const parts = abs.generators.filter((g) => insts.some((i) => i.generatorId === g.id)).map(partOf);
+  const wrapperIds = uniq(entries.map((e) => e.wrapper).filter(Boolean)).sort();
+  const wrappers = wrapperIds.map((id) => ({
+    ...parts.find((x) => x.id === id) || partOf(gens.get(id)),
+    entries: entries.filter((e) => e.wrapper === id).map((e) => e.key),
+    from: "abstractions.generators[] shaping routeShapes[].shapedByGenerator"
+  }));
+  const handlerToEntry = new Map(entries.map((e) => [e.handlerId, e.key]));
+  const passedToEntry = new Map(entries.flatMap((e) => e.passed.filter((p) => p.id).map((p) => [p.id, e.key])));
+  const uses = [];
+  for (const s of st.supply) {
+    const kind = s.via === "record" ? "record" : s.resource;
+    if (kind !== "db" && kind !== "record") continue;
+    const ids = /* @__PURE__ */ new Set([s.definition]);
+    for (const t of s.traces) {
+      for (const id of t.through) ids.add(id);
+      if (t.end.where) ids.add(t.end.where);
+      if (t.end.referrer) ids.add(t.end.referrer);
+    }
+    let ats;
+    if (handlerToEntry.has(s.definition)) ats = [{ node: "entry", entry: handlerToEntry.get(s.definition) }];
+    else if (wrapperIds.includes(s.definition)) ats = [{ node: "wrapper", wrapper: s.definition }];
+    else if (passedToEntry.has(s.definition)) ats = [{ node: "passed", entry: passedToEntry.get(s.definition), id: s.definition }];
+    else {
+      const ents = uniq([...ids].map((i) => handlerToEntry.get(i)).filter(Boolean));
+      ats = ents.length ? ents.map((entry) => ({ node: "entry", entry, helper: bare(s.definition) })) : [{ node: "definition", id: s.definition }];
+    }
+    const builtBy = s.traces.map((t) => t.end.kind === "builds" && t.end.by ? bare(t.end.by) : t.end.kind === "reachesFor" ? bare(t.end.definition) : null).find(Boolean) || null;
+    const anchor = !s.leaves ? "none" : s.leaves.builtBy.length ? "program" : "platform";
+    for (const at of ats) uses.push({
+      kind,
+      how: s.supply,
+      definition: s.definition,
+      effect: s.effect || null,
+      writes: s.via === "effect" && isWrite(OPS[s.op] || "write"),
+      at,
+      builtBy,
+      untracedSource: s.traces.some((t) => ["asValue", "entry"].includes(t.end.kind)),
+      anchor,
+      handleBuiltBy: s.leaves ? s.leaves.builtBy : [],
+      records: s.records || [],
+      ends: s.traces.map((t) => ({ kind: t.end.kind, where: t.end.where || null, referrer: t.end.referrer || null, definition: t.end.definition || null, by: t.end.by || null })),
+      from: "structure.supply[]"
+    });
+  }
+  const present = uniq(st.ioKinds.flatMap((b) => b.resources));
+  const tables = uniq(entries.flatMap((e) => [...e.reach, ...e.beside ? e.beside.effects : []].map((r) => r.table))).sort();
+  const resources = ["db", "model", "net"].filter((k) => present.includes(k)).map((k) => ({ kind: k, ...k === "db" ? { tables } : {}, from: "structure.ioKinds[].resources" }));
+  const ghostResources = ["db", "model", "net"].filter((k) => !present.includes(k)).map((k) => ({ kind: k, from: "structure.ioKinds[] checked: no site of this kind" }));
+  const transports = uniq(st.entries.map((e) => e.transport));
+  const callers = [];
+  if (transports.includes("http")) callers.push({ kind: "http", keyKinds: uniq(entries.map(keyKindOf)), from: "structure.entries[transport=http] + authority" });
+  if (transports.includes("link")) callers.push({ kind: "link", from: "structure.entries[transport=link]" });
+  const ghostCallers = ["http", "link"].filter((k) => !transports.includes(k)).map((k) => ({ kind: k, from: "structure.entries[]: no entry with this transport" }));
+  const library = routes.length ? null : {
+    packages: layers.packages.map((p) => ({ name: p.name, label: p.name.split("/").pop(), exports: p.definitions.filter((d) => d.exported).map((d) => d.name) })),
+    ports: st.ports.map((p) => ({
+      id: p.id,
+      label: bare(p.id),
+      pkg: pkgOf(p.id),
+      fields: p.fields,
+      heldBy: p.heldBy,
+      adapters: p.values.map((v) => ({ id: v.value, label: bare(v.value), usedBy: v.usedBy.map((u) => ({ id: u, label: bare(u), pkg: pkgOf(u) })) })),
+      from: "structure.ports[]"
+    })),
+    chains: st.chains.map((c) => ({
+      value: c.value,
+      label: bare(c.value),
+      pkg: pkgOf(c.value),
+      by: bare(c.by),
+      start: c.start.map((i) => i.id ? bare(i.id) : i.text),
+      steps: c.steps.map((s) => s.map((i) => ({ id: i.id || null, label: i.id ? bare(i.id) : i.text, pkg: i.id ? pkgOf(i.id) : null, applied: i.applied }))),
+      from: "structure.chains[]"
+    })),
+    combinations: st.combinations,
+    applied: st.applied.map((a) => ({
+      id: a.definition,
+      label: bare(a.definition),
+      pkg: pkgOf(a.definition),
+      fn: a.function,
+      insideBranch: a.insideBranch,
+      fedBy: a.fedBy,
+      from: "structure.applied[]"
+    })),
+    generic: st.generic.map((g) => ({ id: g.definition, label: bare(g.definition), vars: g.vars, signature: g.signature, from: "structure.generic[]" })),
+    exported: st.entries.filter((e) => e.transport === "link").map((e) => e.entry)
+  };
+  const steps = st.phases.phases.flatMap((ph) => ph.steps.map((s) => ({ pkg: ph.package, type: s.type, label: bare(s.type), by: s.by, from: "structure.phases.phases[].steps" })));
+  const keyed = st.keyed.map((k) => ({ id: k.definition, label: bare(k.definition), pkg: pkgOf(k.definition), types: uniq(k.parameters.map((p) => p.type)), from: "structure.keyed[]" }));
+  return {
+    schema: "system-map-2",
+    marks: MARKS_VERSION,
+    vocabulary: VOCABULARY,
+    program,
+    class: report.headline.class,
+    kind: routes.length ? "service" : "library",
+    callers,
+    ghostCallers,
+    entries,
+    wrappers,
+    parts,
+    uses,
+    resources,
+    ghostResources,
+    library,
+    keyed,
+    steps,
+    programs: programsOf(st, layers),
+    bundles: routes.length > 12 ? bundlesOf(entries, uses, keyed) : null,
+    phases: st.phases,
+    evidence: {
+      tools: ["api_report", "api_organize:abstractions", "api_organize:structure", "api_organize:layers"],
+      headline: report.headline,
+      derived: ["bundles: entries grouped by wrapper and identical marks"]
+    }
+  };
+}
+var keyKindOf = (e) => e.authority === "publishable" ? "publishable" : e.signedIn ? "secret" : "public";
+function bundlesOf(entries, uses, keyed) {
+  const keyedIds = new Set(keyed.map((k) => k.id));
+  const sup = (e) => uniq(uses.filter((u) => u.kind === "db" && u.at.entry === e.key).flatMap((u) => [u.how, ...u.untracedSource ? [`?${u.anchor}`] : []])).sort().join(" ");
+  const fill = (l) => l.length ? l.some((x) => isWrite(x.op)) ? "W" : "R" : "-";
+  const sig = (e) => {
+    const p = e.passed[0], b = e.beside;
+    return JSON.stringify([
+      e.wrapper,
+      keyKindOf(e),
+      e.roles.length > 0,
+      e.writes,
+      e.guards.length > 0,
+      fill(e.reach.filter((r) => r.where === "direct")),
+      fill(e.reach.filter((r) => r.where === "passed")),
+      !!(p && p.guards.length),
+      e.model,
+      e.net,
+      sup(e),
+      e.limits.length > 0,
+      !!(b && b.calls.length),
+      !!(b && b.guards.length),
+      fill(b ? b.effects : []),
+      e.policy.length > 0,
+      [e.handlerId, ...e.guardIds, ...p ? [p.id, ...p.guardIds] : []].some((id) => keyedIds.has(id))
+    ]);
+  };
+  const groups = /* @__PURE__ */ new Map();
+  for (const e of entries) {
+    const k = sig(e);
+    if (!groups.has(k)) groups.set(k, []);
+    groups.get(k).push(e.key);
+  }
+  const pathOf = new Map(entries.map((e) => [e.key, e.path]));
+  return [...groups.values()].map((keys, i) => ({
+    id: `bundle:${i + 1}`,
+    entries: keys,
+    count: keys.length,
+    label: pathPattern(keys.map((k) => pathOf.get(k))),
+    from: "derived: entries[] grouped by wrapper and identical marks"
+  }));
+}
+function pathPattern(paths) {
+  if (paths.length === 1) return paths[0];
+  const segs = paths.map((p) => p.split("/"));
+  const n = Math.min(...segs.map((s) => s.length));
+  const out = [];
+  for (let i = 0; i < n; i++) {
+    const v = uniq(segs.map((s) => s[i]));
+    out.push(v.length === 1 ? v[0] : "*");
+  }
+  if (segs.every((s) => s.length === n)) return out.join("/");
+  let k = 0;
+  while (k < n && out[k] !== "*") k++;
+  return out.slice(0, Math.max(k, 1)).join("/") + "/**";
+}
+
+// ../../web/system-map-names.js
+var SKIP = /* @__PURE__ */ new Set(["vocabulary", "evidence", "schema", "marks", "program", "class"]);
+var skipped = (key, v) => SKIP.has(key) || key === "from" && !Array.isArray(v);
+var STRUCTURAL = /* @__PURE__ */ new Set([
+  "kind",
+  "op",
+  "how",
+  "transport",
+  "authority",
+  "where",
+  "slotRole",
+  "role",
+  "passedKind",
+  "anchor",
+  "node",
+  "keyKinds",
+  "reachKinds",
+  "resources",
+  "replies",
+  "also",
+  "kinds",
+  "within",
+  "vars",
+  "id"
+]);
+var WHAT = {
+  path: "an action the app answers",
+  routes: "an action the app answers",
+  table: "a kind of record the app keeps",
+  tables: "a kind of record the app keeps",
+  roles: "a permission an action requires, held by a person's role or by the app's own server",
+  policy: "a setting an action passes to shared code",
+  tokens: "a setting an action passes to shared code",
+  fields: "an operation a pluggable part offers"
+};
+var PACKAGE = "a section of the program";
+var DEFINITION = "a piece of the program";
+var VALUE = "a kind of value";
+var TYPES = /* @__PURE__ */ new Set(["type", "types", "signature"]);
+var WORD = /[A-Za-z_][\w/]*::\w+|[A-Za-z_]\w*/g;
+var PREDEF_WORDS = {
+  String: "text",
+  Int: "a number",
+  Bool: "yes or no",
+  Float64: "a decimal number",
+  Char: "a letter",
+  Unit: "nothing",
+  List: "a list",
+  Option: "maybe one",
+  Dict: "a lookup table"
+};
+var leaves = (record, visit) => {
+  const walk3 = (v, key) => {
+    if (typeof v === "string") visit(v, key);
+    else if (Array.isArray(v)) v.forEach((x) => walk3(x, key));
+    else if (v && typeof v === "object") {
+      for (const [k, x] of Object.entries(v)) if (!skipped(k, x)) walk3(x, k);
+    }
+  };
+  walk3(record, null);
+};
+function nameableParts(map, own) {
+  const found = /* @__PURE__ */ new Map();
+  const theirs2 = (pkg) => !own || own.has(pkg);
+  const add = (code, what) => {
+    if (code && !found.has(code) && !(code in PREDEF_WORDS) && (what !== PACKAGE || theirs2(code))) found.set(code, what);
+  };
+  const idParts = (id) => {
+    const i = id.lastIndexOf("::");
+    if (!theirs2(id.slice(0, i))) return;
+    add(id.slice(0, i), PACKAGE);
+    add(id.slice(i + 2), DEFINITION);
+  };
+  leaves(map, (s, key) => {
+    if (s.startsWith("route:")) return add(s.slice(6), WHAT.path);
+    if (TYPES.has(key)) {
+      for (const w of s.match(WORD) ?? []) if (w.includes("::")) idParts(w);
+      else if (w.length > 1) add(w, VALUE);
+      return;
+    }
+    if (s.includes("::")) {
+      for (const w of s.match(WORD)) if (w.includes("::")) idParts(w);
+      return;
+    }
+    if (STRUCTURAL.has(key)) return;
+    if (key === "name" || key === "package" || key === "pkg" || key === "instantiatingPackages" || key === "cycles" || key === "to") return add(s, s.includes("/") ? PACKAGE : DEFINITION);
+    add(s, WHAT[key] ?? DEFINITION);
+  });
+  for (const b of map.bundles ?? []) if (b.count > 1) found.delete(b.label);
+  return [...found].map(([code, what]) => ({ code, what })).sort((a, b) => a.code.localeCompare(b.code));
+}
+function plainNames(names) {
+  const out = /* @__PURE__ */ new Map(), taken = /* @__PURE__ */ new Set();
+  for (const [code, name] of Object.entries(names).sort(([a], [b]) => a.localeCompare(b))) {
+    const base = name.replace(/::|\//g, " ").replace(/\s+/g, " ").trim();
+    if (!base) continue;
+    let plain = base;
+    for (let n = 2; taken.has(plain); n++) plain = `${base} (${n})`;
+    taken.add(plain);
+    out.set(code, plain);
+  }
+  return out;
+}
+function relabelSystemMap(map, names) {
+  const plain = plainNames({ ...PREDEF_WORDS, ...names });
+  const word = (w) => plain.get(w) ?? w;
+  const id = (w) => {
+    const i = w.lastIndexOf("::");
+    return `${word(w.slice(0, i))}::${word(w.slice(i + 2))}`;
+  };
+  const text3 = (s, key) => {
+    if (s.startsWith("route:")) return `route:${word(s.slice(6))}`;
+    if (plain.has(s) && !STRUCTURAL.has(key)) return plain.get(s);
+    if (s.startsWith("/")) return s;
+    return s.replace(WORD, (w) => w.includes("::") ? id(w) : STRUCTURAL.has(key) ? w : word(w));
+  };
+  const walk3 = (v, key) => {
+    if (typeof v === "string") return text3(v, key);
+    if (Array.isArray(v)) return v.map((x) => walk3(x, key));
+    if (v && typeof v === "object") return Object.fromEntries(Object.entries(v).map(([k, x]) => [k, skipped(k, x) ? x : walk3(x, k)]));
+    return v;
+  };
+  const out = walk3(map, null);
+  const pathOf = new Map(map.entries.map((e) => [e.key, e.path]));
+  out.bundles = map.bundles && map.bundles.map((b, i) => {
+    const paths = b.entries.map((k) => pathOf.get(k));
+    if (!paths.some((p) => plain.has(p))) return out.bundles[i];
+    return { ...out.bundles[i], label: b.count === 1 ? word(paths[0]) : `${word(paths[0])} and ${b.count - 1} more` };
+  });
+  return out;
+}
+
+// ../../web/what-happens-record.js
+var SCHEMA = "what-happens-1";
+var VOCABULARY2 = {
+  version: MARKS_VERSION,
+  added: ["outcome"],
+  marks: {
+    entryHead: "arrowhead where a request comes in; the rack above the tree has one per described entry, then one dashed line counting the entries no scenario describes, which opens to draw each of them struck  <- entries[], ghosts[]",
+    guard: "red diamond: the declared sign-in or role check, the first branch of every entry that has one; its failure stem ends in a refusal  <- tree node with from.kind=guard",
+    fork: "three prongs: a branch the code takes on the request, the caller, a value read from a table, or a call result; the arm each line takes is written where it leaves  <- tree nodes",
+    station: "ring on a line: an effect on that path, its verb and table beside it; filled = it writes  <- arms[].effects, entry.effects",
+    modelRing: "violet ring: the path reaches the model  <- effects[resource=model]",
+    netRing: "orange ring: the path reaches the network  <- effects[resource=net]",
+    outcome: "the end of a path: a cap with what the request gets back (a constructor, or a refusal with its status and code); red when a claim fails there or a check reports a witness that ends there, green when every obligation that failed there at the base is checked here and holds, hollow and dashed (unchecked) when a claim there is inconclusive or an obligation that failed at the base is no longer checked, grey otherwise  <- leaves",
+    unchecked: "a hollow dashed cap and a ? tick: the engine cannot say whether the claim holds on this path (a step it could not open, a table it could not name, an answer it could not decide), or what failed here at the base is not checked here; never counted as holding  <- claims[verdict=inconclusive], leaves[].gaps, diff.unresolved",
+    struck: "a struck ghost: something checked and found absent (an entry nobody described, a write a claim says a path must not make)  <- ghosts[], claims holding with not",
+    bundle: "a cable with a count: a subtree too large for this view; opening it draws that part with a breadcrumb  <- derived from the tree",
+    compared: 'a line under the rack, always there: "compared with <base> \xB7 N fixed \xB7 M still failing", or "no base compared" in faint text  <- diff',
+    hull: `a shaded box on the line: a step that is not the handler's own work, folded (a wrapper's guard or short-circuit, the platform's declared check or the transaction it runs the plan in, work beside the wrapper, a wrapper's work after the handler); it keeps what the step answers instead of running the handler: the effects it makes before its test above the arms, then one row per arm read as a side stub (the arm, the effects that arm makes, its struck writes, what the request gets, ticks), then "continue"; opening it draws the step's own tree; drawn inline, the same hull is a light band behind the step and its exits, with its role and where it comes from above its test, so either way it reads as not the handler's own work  <- tree nodes[concern.role], entries[].steps`
+  },
+  rule: "every entry, branch, arm, effect and outcome the engine computes is drawn, a folded step's inside its box and an undescribed entry behind the rack's one line; the author's words appear only on ids the engine computed, in italic, with the code name beside them.",
+  concerns: "where each branch and effect comes from in value flow (concern.layer, effects[].layer): core = the handler's own work, a function it hands its wrapper or its body when it has none; cross = the wrapper its route shape names, shared with other entries; beside = the handler's code outside the wrapper call; platform = the route's declared authority, or the transaction the platform runs a plan in (its arms that give up or cannot confirm skip the handler's work). Roles come from which arms reach the handler, never from names."
+};
+var bare2 = (id) => String(id).split("::").pop();
+var claimKey = (entry, c) => `${entry}\0${c.at}\0${c.parsed}`;
+function walk(tree, f, path11 = []) {
+  if (!tree) return;
+  f(tree, path11);
+  if (tree.kind === "node") for (const arm of tree.arms) {
+    f(arm, path11);
+    walk(arm.next, f, [...path11, arm]);
+  }
+}
+var leavesOf = (tree) => {
+  const out = [];
+  walk(tree, (t) => {
+    if (t.kind === "leaf") out.push(t);
+  });
+  return out;
+};
+function pathEffects(entry) {
+  const out = /* @__PURE__ */ new Map();
+  const go = (t, acc) => {
+    if (!t) return;
+    if (t.kind === "leaf") {
+      out.set(t.id, acc);
+      return;
+    }
+    for (const a of t.arms) go(a.next, [...acc, ...a.effects]);
+  };
+  go(entry.tree, entry.effects || []);
+  return out;
+}
+function heldOn(tree, guards) {
+  const out = /* @__PURE__ */ new Set();
+  const go = (t, held) => {
+    if (!t) return;
+    if (t.kind === "leaf") {
+      if (held) out.add(t.id);
+      return;
+    }
+    const isGuard = t.from?.kind === "call" && guards.includes(bare2(t.from.callee));
+    for (const a of t.arms) go(a.next, held || isGuard && a.arm === "True");
+  };
+  go(tree, false);
+  return out;
+}
+function witnessesOf(access, entries) {
+  if (!access) return [];
+  const findings = (access.report?.findings || []).filter((f) => f.status === "violated");
+  return findings.map((f, i) => {
+    const site = `${f.package}::${f.binding}`;
+    const guards = f.pathCondition?.unlessHeld || [];
+    const leaves2 = entries.flatMap((e) => {
+      const held = heldOn(e.tree, guards);
+      return leavesOf(e.tree).filter((l) => !held.has(l.id) && l.effects.some((x) => x.site === site && bare2(x.primitive) === f.operation && x.tables.includes(f.resource)));
+    }).map((l) => l.id);
+    return {
+      id: `witness:${i + 1}`,
+      check: "access",
+      resource: f.resource,
+      site,
+      operation: f.operation,
+      kind: f.kind,
+      detail: f.detail,
+      leaves: leaves2,
+      ...guards.length ? { unlessHeld: guards } : {},
+      from: guards.length ? "api_access_check report.findings[status=violated], on paths where pathCondition.unlessHeld did not hold" : "api_access_check report.findings[status=violated]"
+    };
+  });
+}
+function buildWhatHappens(engine, { program, base = null, baseLabel = "base" } = {}) {
+  for (const [k, v] of Object.entries(engine)) if (v && !v.ok) throw new Error(`${k}: ${v.error}`);
+  const st = engine.structure;
+  const claims = st.claims || { scenarios: [], undescribed: (st.scenarios || []).map((s) => s.entry) };
+  const byEntry = new Map(claims.scenarios.filter((s) => s.status === "matched").map((s) => [s.entry, s]));
+  const routes = new Map((st.entries || []).map((e) => [e.entry, e]));
+  const entries = st.scenarios.map((s) => {
+    const meta = routes.get(s.entry) || {};
+    const sc = byEntry.get(s.entry);
+    const names = new Map((sc?.names || []).filter((n) => n.status === "named").map((n) => [n.id, n.words]));
+    const copy = (t) => {
+      if (!t) return null;
+      if (t.kind === "leaf") return { ...t, words: names.get(t.id) || null, claims: [], witnesses: [], status: "grey" };
+      return { ...t, words: names.get(t.id) || null, arms: t.arms.map((a) => ({ ...a, words: names.get(a.id) || null, next: copy(a.next) })) };
+    };
+    return {
+      entry: s.entry,
+      handler: s.handler,
+      label: s.entry.replace(/^route:/, ""),
+      authority: meta.authority || null,
+      transport: meta.transport || null,
+      title: sc?.title || null,
+      described: !!sc,
+      effects: s.effects,
+      tree: copy(s.tree),
+      leafCount: Number(s.leafCount),
+      truncated: s.truncated,
+      unsupported: s.unsupported || null,
+      wrapper: s.wrapper || null,
+      steps: s.steps || [],
+      from: "structure.scenarios[]"
+    };
+  });
+  const entryOf = new Map(entries.map((e) => [e.entry, e]));
+  const leafById = new Map(entries.flatMap((e) => leavesOf(e.tree).map((l) => [l.id, l])));
+  const checked = [], notes = [], refused = [], mismatches = [];
+  for (const sc of claims.scenarios) {
+    if (sc.status !== "matched") {
+      mismatches.push({ entry: sc.entry, title: sc.title || null, reason: sc.reason, from: "structure.claims.scenarios[status=mismatch]" });
+      continue;
+    }
+    for (const n of sc.names) if (n.status !== "named") refused.push({ entry: sc.entry, id: n.id, words: n.words, reason: n.reason, from: "structure.claims.scenarios[].names[status=refused]" });
+    for (const x of sc.expect) {
+      if (x.verdict === "not-a-claim") {
+        notes.push({ entry: sc.entry, at: x.at, text: x.claim, from: "structure.claims.scenarios[].expect[verdict=not-a-claim]" });
+        continue;
+      }
+      if (x.verdict === "refused") {
+        refused.push({ entry: sc.entry, id: x.at, words: x.claim, reason: x.reason, from: "structure.claims.scenarios[].expect[verdict=refused]" });
+        continue;
+      }
+      const open = new Map((x.inconclusive || []).map((o) => [o.leaf, o.reasons]));
+      const c = {
+        id: `claim:${checked.length + 1}`,
+        entry: sc.entry,
+        at: x.at,
+        claim: x.claim,
+        parsed: x.parsed,
+        property: x.property,
+        verdict: x.verdict,
+        leaves: x.leaves,
+        failing: x.failing,
+        inconclusive: x.inconclusive || [],
+        from: "structure.claims.scenarios[].expect[]"
+      };
+      checked.push(c);
+      for (const id of x.leaves) {
+        const l = leafById.get(id);
+        if (!l) continue;
+        const verdict = x.failing.includes(id) ? "fails" : open.has(id) ? "inconclusive" : "holds";
+        l.claims.push({ id: c.id, at: x.at, parsed: x.parsed, property: x.property, verdict, ...verdict === "inconclusive" ? { reasons: open.get(id) } : {} });
+      }
+    }
+  }
+  const witnesses = witnessesOf(engine.access, entries);
+  const basePaths = base ? new Map(base.entries.flatMap((e) => [...pathEffects(e)])) : null;
+  for (const w of witnesses) for (const id of w.leaves) leafById.get(id)?.witnesses.push(w.id);
+  for (const l of leafById.values()) {
+    if (l.claims.some((c) => c.verdict === "fails") || l.witnesses.length) l.status = "red";
+    else if (l.claims.some((c) => c.verdict === "inconclusive")) l.status = "unchecked";
+  }
+  let diff = null;
+  if (base) {
+    const baseRed = new Map(base.entries.flatMap((e) => leavesOf(e.tree).filter((l) => l.status === "red").map((l) => [l.id, { entry: e.entry, leaf: l }])));
+    const baseWitness = new Map((base.witnesses || []).map((w) => [w.id, w]));
+    const fixed = [], still = [], gone = [], unresolved = [];
+    for (const [id, { entry, leaf: bl }] of baseRed) {
+      const here = leafById.get(id);
+      if (!here) {
+        gone.push(id);
+        continue;
+      }
+      if (here.status === "red") {
+        still.push(id);
+        continue;
+      }
+      const reasons = [
+        ...bl.claims.filter((c) => c.verdict === "fails").flatMap((c) => {
+          const now = here.claims.find((h) => claimKey(entry, h) === claimKey(entry, c));
+          if (!now) return [`the claim ${c.parsed} at ${c.at} failed here at the base and is not checked here`];
+          return now.verdict === "holds" ? [] : [`the claim ${c.parsed} at ${c.at} failed here at the base and is inconclusive here`];
+        }),
+        ...bl.witnesses.length && !engine.access ? [`the access check reported a witness here at the base and did not run here`] : []
+      ];
+      const baseClaims = bl.claims, baseWitnesses = bl.witnesses.map((w) => baseWitness.get(w)).filter(Boolean);
+      here.base = { outcome: bl.outcome, effects: bl.effects || basePaths.get(id) || [], claims: baseClaims, witnesses: baseWitnesses };
+      if (reasons.length) {
+        here.status = "unchecked";
+        unresolved.push({ id, reasons });
+        continue;
+      }
+      here.status = "green";
+      fixed.push(id);
+    }
+    diff = {
+      base: baseLabel,
+      fixed,
+      stillRed: still,
+      goneAtHead: gone,
+      unresolved,
+      from: "derived: base leaves[status=red] matched by id; each failed claim matched by entry, at and parsed claim; a witness is gone when the access check ran here and reports none on the leaf"
+    };
+  }
+  const ghosts = entries.filter((e) => !e.described).map((e) => ({ entry: e.entry, from: "structure.claims.undescribed[]" }));
+  for (const l of leafById.values()) delete l.effects;
+  return {
+    schema: SCHEMA,
+    marks: MARKS_VERSION,
+    vocabulary: VOCABULARY2,
+    program,
+    entries,
+    ghosts,
+    claims: checked,
+    witnesses,
+    notes,
+    refused,
+    mismatches,
+    diff,
+    counts: {
+      entries: entries.length,
+      described: entries.length - ghosts.length,
+      leaves: leafById.size,
+      steps: entries.reduce((n, e) => n + e.steps.length, 0),
+      wrapped: entries.filter((e) => e.wrapper && e.wrapper.wraps).length,
+      red: [...leafById.values()].filter((l) => l.status === "red").length,
+      green: [...leafById.values()].filter((l) => l.status === "green").length,
+      unchecked: [...leafById.values()].filter((l) => l.status === "unchecked").length
+    },
+    evidence: { tools: ["api_organize:structure", ...engine.access ? ["api_access_check"] : []], derived: ["diff: base red leaves matched by id, their failed obligations by identity"] }
+  };
+}
+function stationLabel(e) {
+  const verb = e.op === "mint id" ? "mint" : e.op;
+  if (e.tables.length) return `${verb} \xB7 ${e.tables.join(", ")}`;
+  if (e.resource === "model" || e.resource === "net") return verb;
+  return `${verb} \xB7 ${bare2(e.primitive)}`;
+}
+var said = (f) => {
+  if (f.kind !== "read") return null;
+  const gives = `what ${f.op} \xB7 ${f.table || bare2(f.primitive)} gives back`;
+  return f.path && f.path.length ? `the ${f.path.join(".")} of ${gives}` : gives;
+};
+function outcomeLabel(o) {
+  if (o.status && !o.constructors.length) return o.shown;
+  const head = o.constructors.length ? o.constructors.join(" | ") : o.from && said(o.from) || (o.value ? `the ${o.value}` : o.shown);
+  return head;
+}
+
+// src/studio/project.ts
+import { createHash } from "crypto";
+import fs from "fs";
+import path from "path";
+var SKIPPED = /* @__PURE__ */ new Set(["node_modules", "dist", "build", "target", "out"]);
+function projectSources(root) {
+  const files = [];
+  const walk3 = (dir) => {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+      if (entry.name.startsWith(".") || SKIPPED.has(entry.name)) continue;
+      const full = path.join(dir, entry.name);
+      if (entry.isDirectory()) walk3(full);
+      else if (entry.isFile() && entry.name.endsWith(".bosatsu")) {
+        files.push({ fileName: path.relative(root, full).split(path.sep).join("/"), source: fs.readFileSync(full, "utf8") });
+      }
+    }
+  };
+  walk3(root);
+  return files;
+}
+function sourcesHash(files) {
+  const hash = createHash("sha256");
+  for (const file of files) hash.update(`${file.fileName}\0${file.source}\0`);
+  return hash.digest("hex");
+}
+function caseSources(root) {
+  const dir = path.join(root, ".yichus", "cases");
+  if (!fs.existsSync(dir)) return [];
+  return fs.readdirSync(dir).filter((name) => name.endsWith(".bosatsu")).sort().map((name) => ({ fileName: `cases/${name}`, source: fs.readFileSync(path.join(dir, name), "utf8") }));
+}
+
+// src/studio/questions.ts
+import { z as z3 } from "zod";
+var Step = z3.looseObject({ op: z3.string(), tables: z3.array(z3.string()).default([]), resource: z3.string() });
+var Route = z3.looseObject({
+  path: z3.string(),
+  handler: z3.string(),
+  authority: z3.string().optional(),
+  tables: z3.array(z3.string()).default([]),
+  inferredSteps: z3.array(Step).default([])
+});
+var Access = z3.looseObject({
+  kind: z3.string(),
+  guards: z3.array(z3.string()).default([]),
+  roles: z3.array(z3.string()).default([])
+});
+var Table = z3.looseObject({
+  name: z3.string(),
+  policy: z3.string().nullable().optional(),
+  access: Access.nullable().optional(),
+  readers: z3.array(z3.string()).default([]),
+  writers: z3.array(z3.string()).default([])
+});
+var Report = z3.looseObject({
+  surface: z3.looseObject({ routes: z3.array(Route).default([]) }).default({ routes: [] }),
+  dataModel: z3.looseObject({ tables: z3.array(Table).default([]) }).default({ tables: [] })
+});
+var Entry = z3.looseObject({ entry: z3.string(), resources: z3.array(z3.string()).default([]) });
+var Structure = z3.looseObject({ entries: z3.array(Entry).default([]) });
+var ACCESS_RULES = {
+  owner: { declared: (a) => a.kind === "OwnerScoped", write: "OwnerScoped", guide: "Owner-scoped data" },
+  // A guard every person passes through; a role may pass it only where every route that reaches it requires the role.
+  shared: {
+    declared: (a) => (a.kind === "Guarded" || a.kind === "GuardedOrRoles") && a.guards.length > 0,
+    write: "Guarded([the guard that says who may see a record]), or GuardedOrRoles([the guard], [the roles that may pass it])",
+    guide: "Guarded data"
+  },
+  "server-only": { declared: (a) => a.kind === "GuardedOrRoles" && !a.guards.length, write: "GuardedOrRoles([], [the grants of the worker routes that use it])", guide: "Principal is a trust boundary" },
+  "everyone-reads": { declared: (a) => a.kind === "PublicReadRoleWrite", write: "PublicReadRoleWrite([the roles that may change it])", guide: "Public data" },
+  public: { declared: (a) => a.kind === "Public", write: "Public", guide: "Public data" }
+};
+var platform = {
+  id: "platform",
+  kind: "platform",
+  subject: null,
+  ask: "Where do you want your app to run once it is ready?",
+  why: "Each place runs apps differently: some keep a server running, some only run the page people open. Knowing it now means your agent builds the pieces that place can run, instead of rebuilding them later.",
+  choices: [
+    { id: "render", label: "Render", means: "The server, its database, the page and background jobs all run on Render." },
+    { id: "vercel", label: "Vercel", means: "The page people open runs on Vercel; the server and its database run on a second service, because Vercel does not keep a server running." },
+    { id: "netlify", label: "Netlify", means: "The page people open runs on Netlify; the server and its database run on a second service, because Netlify does not keep a server running." },
+    { id: "aws", label: "Amazon Web Services", means: "The server runs on App Runner or ECS with an RDS database." },
+    { id: "gcp", label: "Google Cloud", means: "The server runs on Cloud Run with a Cloud SQL database." },
+    { id: "azure", label: "Microsoft Azure", means: "The server runs on Container Apps or App Service with an Azure PostgreSQL database." },
+    { id: "undecided", label: "Not sure yet", means: "Your agent builds for Render, which holds everything in one place; moving later changes configuration, not the app." }
+  ],
+  fact: "Every app runs somewhere."
+};
+var PLATFORM_SECTION = {
+  render: "Render",
+  vercel: "Vercel",
+  netlify: "Netlify",
+  aws: "AWS",
+  gcp: "Google Cloud",
+  azure: "Microsoft Azure",
+  undecided: "Not decided yet"
+};
+var PAGE_ONLY = /* @__PURE__ */ new Set(["vercel", "netlify"]);
+var HOST_SECTION = { render: "Render", gcp: "Google Cloud", aws: "AWS", azure: "Microsoft Azure", undecided: "Render" };
+function hostQuestion(platformLabel) {
+  return {
+    id: "host",
+    kind: "host",
+    subject: null,
+    ask: `${platformLabel} runs the page people open, but it does not keep a server running. Where should your app's server and its database run?`,
+    why: "This is a second service with its own account and its own monthly bill, next to the one you already have. Your agent sets it up there and connects your pages to it.",
+    choices: [
+      { id: "render", label: "Render", means: "The server and its database run on Render, set up from one file in your project." },
+      { id: "gcp", label: "Google Cloud", means: "The server runs on Cloud Run with a Cloud SQL database." },
+      { id: "aws", label: "Amazon Web Services", means: "The server runs on App Runner with an RDS database." },
+      { id: "azure", label: "Microsoft Azure", means: "The server runs on Container Apps with an Azure PostgreSQL database." },
+      { id: "undecided", label: "Not sure yet", means: "Your agent builds for Render; moving later changes configuration, not the app." }
+    ],
+    fact: `${platformLabel} does not keep a server running.`
+  };
+}
+var topology = {
+  id: "topology",
+  kind: "topology",
+  subject: null,
+  ask: "When many people use your app at the same time, should it run as one server, or as several copies of the server that share one database?",
+  why: "Several copies keep the app up when one fails and when traffic grows, but then two requests really can run at the same moment, so every check below assumes that unless you choose one server.",
+  choices: [
+    { id: "many", label: "Several copies", means: "Every check assumes requests can run at the same moment on different copies." },
+    { id: "one", label: "One server", means: "Checks may assume one request at a time. This holds only while exactly one copy runs; the page shows it as an assumption." }
+  ],
+  fact: "The program serves routes."
+};
+var shown = (names, subject) => names[subject] ?? subject;
+function accessQuestion(table, names) {
+  return {
+    id: `access:${table.name}`,
+    kind: "access",
+    subject: table.name,
+    ask: `Your app saves "${shown(names, table.name)}"${table.name in names ? "" : " records"}. Who should be able to see one, and who should be able to change it?`,
+    why: "Without a rule the app has no way to know a record is private. Yichus checks every place the app reads or changes these records against the rule you choose.",
+    choices: [
+      { id: "owner", label: "Only the person who created it", means: "Every read and write is tied to the signed-in person, and the check proves no one reaches another person's records. No one else, not even a manager, sees or changes them, so anything someone else decides about them, such as an approval, belongs in records only the person who decides it may change." },
+      { id: "shared", label: "Only the people a rule lets in", means: "For example the members of a team, or the people a record was shared with. Every read and change goes through that rule, except work done under a role you name, such as an administrator or the app's own server, and the check proves nothing else skips it." },
+      { id: "server-only", label: "No person, only the app's own server", means: "Records the app keeps for itself, such as which number belongs to whom or which messages it has already seen. Only work the app's own server starts may read or change them, and the check proves nothing a person calls reaches them." },
+      { id: "everyone-reads", label: "Everyone can see it; only certain roles can change it", means: "Anyone can read; changes need a role the app gives out." },
+      { id: "public", label: "Anyone, even without signing in", means: "Nothing in these records is private." }
+    ],
+    fact: `The program stores rows in "${table.name}" (policy declared: ${table.policy ?? "none"}).`
+  };
+}
+function togetherQuestion(table, handlers, names) {
+  const who = table.access?.kind === "OwnerScoped" ? "the person it belongs to, on two devices or in two tabs" : "two people, or one person on two devices";
+  return {
+    id: `together:${table.name}`,
+    kind: "together",
+    subject: table.name,
+    ask: `Two requests change the same record in "${shown(names, table.name)}" at the same moment (${who}). What should happen?`,
+    why: "When a request reads a record and then writes it back, a second request in between can be silently lost, or both can pass a limit only one should, such as two people taking the last spot. People rarely notice until data goes missing.",
+    choices: [
+      { id: "keep-both", label: "Both changes are kept", means: "Each change happens as one indivisible step that sees the one before it, so neither can overwrite the other unseen and a limit the app checks is never passed twice; the check proves no change is lost." },
+      { id: "refuse-second", label: "The second is refused and they try again", means: "A change made to an out-of-date copy is turned away; the check proves no change is lost." }
+    ],
+    fact: `${handlers.join(", ")} ${handlers.length === 1 ? "reads" : "read"} "${table.name}" and then ${handlers.length === 1 ? "writes" : "write"} it.`
+  };
+}
+function partialQuestion(route, tables, names) {
+  return {
+    id: `partial:${route.path}`,
+    kind: "partial",
+    subject: route.path,
+    ask: `If the server stops halfway through "${shown(names, route.path)}" (a crash, a database error, a timeout), may part of its changes stay saved?`,
+    why: `This action changes ${tables.map((t) => `"${shown(names, t)}"`).join(" and ")} in more than one step. A stop between steps can leave them disagreeing, for example money taken but no receipt.`,
+    choices: [
+      { id: "all-or-nothing", label: "All or nothing", means: "Every change this action makes is saved together or not at all; Yichus stops it at each step and checks nothing half-done stays saved." },
+      { id: "partial-ok", label: "Partial is fine", means: "No check is added for this action." }
+    ],
+    fact: `${route.handler} writes ${tables.map((t) => `"${t}"`).join(", ")} in more than one step.`
+  };
+}
+function outsideQuestion(route, kinds, names) {
+  const service = kinds.includes("model") ? "an AI model" : "another service on the internet";
+  return {
+    id: `outside:${route.path}`,
+    kind: "outside",
+    subject: route.path,
+    ask: `"${shown(names, route.path)}" calls ${service}. If that service is down or slow, what should the person using your app see?`,
+    why: "Outside services fail often. Without a plan, a failure can leave a half-finished record or charge for work that never happened.",
+    choices: [
+      { id: "fail-clean", label: "An error, with nothing saved", means: "Yichus makes the service fail and checks that nothing from this action stays saved." },
+      { id: "finish-later", label: "Save the request and finish it later", means: "Yichus makes the service fail and checks the saved request is tried again and finished exactly once." },
+      { id: "no-plan", label: "No preference", means: "No check is added for this action." }
+    ],
+    fact: `${route.handler} reaches ${kinds.join(" and ")}.`
+  };
+}
+var PERSON_SIGNS_IN = /* @__PURE__ */ new Set(["authenticated", "publishable", "requires-roles"]);
+var signIn = {
+  id: "sign-in",
+  kind: "sign-in",
+  subject: null,
+  ask: "How do people sign in to your app?",
+  why: "The server checks who is asking before it shows or changes anything private, so it has to trust the same sign-in your pages use.",
+  choices: [
+    { id: "new", label: "They don't yet", means: "Your agent adds sign-in with a provider that runs it for you, such as Clerk." },
+    { id: "clerk", label: "Clerk", means: "The server checks each person's Clerk session." },
+    { id: "supabase", label: "Supabase", means: "The server checks each person's Supabase session. Your agent checks how your Supabase project signs sessions, because the server has to be set up to match." },
+    { id: "other", label: "Another sign-in provider", means: "Auth0, Google, Firebase, Cognito, Microsoft Entra or another provider that publishes its signing keys." },
+    { id: "keys", label: "Only programs call it, with keys", means: "No person signs in: scripts and other servers call the app with API keys." }
+  ],
+  fact: "Some actions are for signed-in people only."
+};
+var existingData = {
+  id: "data",
+  kind: "data",
+  subject: null,
+  ask: "Are there records somewhere today, such as in an app you already run, that this app must start with?",
+  why: "Moving records is a step of its own: they have to be copied in, matched to the people they belong to, and checked. Anything the old place keeps that this app does not would be lost, so your agent lists those first.",
+  choices: [
+    { id: "new", label: "No, it starts empty", means: "Nothing is moved." },
+    { id: "move", label: "Yes, copy them in", means: "Your agent writes a one-time import into this app's database. Before anything moves, it lists every kind of record the old place keeps that this app would not, and you decide about each." },
+    { id: "same-database", label: "Yes, and keep the database they are in", means: "This app keeps its records in the PostgreSQL database you already have, beside the old tables, and the old records are copied in once. Your agent lists anything this app would not keep, and you decide about each." }
+  ],
+  fact: "The program keeps records."
+};
+function questionsFor(report, structure, names = {}) {
+  const questions = [];
+  if (report.surface.routes.length) questions.push(topology);
+  for (const table of report.dataModel.tables) questions.push(accessQuestion(table, names));
+  for (const table of report.dataModel.tables) {
+    const both = table.readers.filter((h) => table.writers.includes(h));
+    if (both.length) questions.push(togetherQuestion(table, both, names));
+  }
+  for (const route of report.surface.routes) {
+    const writes = route.inferredSteps.filter((s) => s.resource === "db" && s.op !== "read" && s.op !== "query");
+    const tables = [...new Set(writes.flatMap((s) => s.tables))];
+    if (writes.length >= 2) questions.push(partialQuestion(route, tables, names));
+  }
+  for (const route of report.surface.routes) {
+    const entry = structure.entries.find((e) => e.entry === `route:${route.path}`);
+    const kinds = (entry?.resources ?? []).filter((r) => r === "model" || r === "net");
+    if (kinds.length) questions.push(outsideQuestion(route, kinds, names));
+  }
+  if (report.surface.routes.some((r) => r.authority !== void 0 && PERSON_SIGNS_IN.has(r.authority))) questions.push(signIn);
+  if (report.dataModel.tables.length) questions.push(existingData);
+  return questions;
+}
+
+// src/studio/requirements.ts
+import fs2 from "fs";
+import path2 from "path";
+import { z as z4 } from "zod";
+var Answer = z4.object({
+  question: z4.string().min(1),
+  choice: z4.string().min(1),
+  words: z4.string(),
+  answeredAt: z4.string()
+});
+var Scenario = z4.object({
+  entry: z4.string().min(1),
+  title: z4.string().optional(),
+  names: z4.record(z4.string(), z4.string()).optional(),
+  expect: z4.array(z4.object({ at: z4.string(), claim: z4.string() }).strict()).optional()
+}).strict();
+var RuleRecord = z4.object({ rule: z4.string().trim().min(1), laws: z4.array(z4.string().min(1)).min(1) }).strict();
+var Requirements = z4.object({
+  schemaVersion: z4.literal("yichus-requirements-1"),
+  description: z4.string().nullable(),
+  answers: z4.array(Answer),
+  /** Plain names for the program's records and actions, keyed by code name. */
+  names: z4.record(z4.string(), z4.string()).optional(),
+  scenarios: z4.array(Scenario).optional(),
+  /** The rules the agent listed; absent until it has looked, empty when the
+   * person stated none. */
+  rules: z4.array(RuleRecord).optional()
+});
+var studioDir = (root) => path2.join(root, ".yichus");
+var requirementsPath = (root) => path2.join(studioDir(root), "requirements.json");
+function loadRequirements(root) {
+  const file = requirementsPath(root);
+  if (!fs2.existsSync(file)) return { schemaVersion: "yichus-requirements-1", description: null, answers: [] };
+  const parsed = Requirements.safeParse(JSON.parse(fs2.readFileSync(file, "utf8")));
+  if (!parsed.success) throw new Error(`${file} is not a yichus-requirements-1 file: ${parsed.error.issues[0]?.message ?? "invalid"}`);
+  return parsed.data;
+}
+function saveRequirements(root, requirements) {
+  ensureStudioDir(root);
+  fs2.writeFileSync(requirementsPath(root), `${JSON.stringify(Requirements.parse(requirements), null, 2)}
+`);
+}
+function withNames(requirements, names) {
+  return { ...requirements, names: { ...requirements.names, ...names } };
+}
+function withScenarios(requirements, scenarios, drop = []) {
+  const replaced = /* @__PURE__ */ new Set([...scenarios.map((s) => s.entry), ...drop]);
+  return { ...requirements, scenarios: [...(requirements.scenarios ?? []).filter((s) => !replaced.has(s.entry)), ...scenarios] };
+}
+function withAnswer(requirements, answer) {
+  return { ...requirements, answers: [...requirements.answers.filter((a) => a.question !== answer.question), answer] };
+}
+function ensureStudioDir(root) {
+  const dir = studioDir(root);
+  fs2.mkdirSync(dir, { recursive: true });
+  const ignore = path2.join(dir, ".gitignore");
+  const before = fs2.existsSync(ignore) ? fs2.readFileSync(ignore, "utf8") : "";
+  const kept = new Set(before.split("\n").map((line) => line.trim()));
+  const missing = ["state.json", "marks.json", "viewing.json", "pages/"].filter((name) => !kept.has(name));
+  if (missing.length) fs2.appendFileSync(ignore, `${before && !before.endsWith("\n") ? "\n" : ""}${missing.map((line) => `${line}
+`).join("")}`);
+}
+
+// src/studio/scenarios.ts
+import { z as z5 } from "zod";
+var Effect = z5.looseObject({ op: z5.string(), tables: z5.array(z5.string()).default([]) });
+var Claim = z5.looseObject({
+  verdict: z5.string(),
+  parsed: z5.string(),
+  at: z5.string(),
+  property: z5.looseObject({ is: z5.string(), subject: z5.string().optional() }).optional()
+});
+var Leaf = z5.looseObject({ kind: z5.literal("leaf"), id: z5.string(), words: z5.string().nullable(), outcome: z5.unknown(), claims: z5.array(Claim).default([]) });
+var Tree = z5.lazy(() => z5.union([Leaf, z5.looseObject({
+  kind: z5.literal("node"),
+  id: z5.string(),
+  test: z5.string(),
+  words: z5.string().nullable(),
+  arms: z5.array(z5.looseObject({ id: z5.string(), pattern: z5.string(), words: z5.string().nullable(), effects: z5.array(Effect).default([]), next: Tree }))
+})]));
+var Entry2 = z5.looseObject({
+  entry: z5.string(),
+  title: z5.string().nullable(),
+  described: z5.boolean(),
+  effects: z5.array(Effect).default([]),
+  tree: Tree.nullable(),
+  unsupported: z5.string().nullable()
+});
+var Checked = z5.looseObject({ entry: z5.string(), at: z5.string(), claim: z5.string(), parsed: z5.string(), verdict: z5.string() });
+var Refused = z5.looseObject({ entry: z5.string(), id: z5.string(), words: z5.string(), reason: z5.string() });
+var WhatHappens = z5.looseObject({
+  entries: z5.array(Entry2),
+  claims: z5.array(Checked),
+  refused: z5.array(Refused),
+  /** Expectations that are not claims in the grammar, so nothing checks them. */
+  notes: z5.array(z5.looseObject({ entry: z5.string(), at: z5.string(), text: z5.string() })),
+  mismatches: z5.array(z5.looseObject({ entry: z5.string(), reason: z5.string() }))
+});
+var effectsText = (effects) => effects.length ? `; effects: ${effects.map(stationLabel).join(", ")}` : "";
+function walk2(tree, visit) {
+  if (!tree) return;
+  if (tree.kind === "leaf") {
+    visit(tree.id, `outcome: ${outcomeLabel(tree.outcome)}`, tree.words, true, tree.claims.length);
+    return;
+  }
+  visit(tree.id, `the program checks ${tree.test}`, tree.words, false, 0);
+  for (const arm of tree.arms) {
+    if (arm.next.id !== arm.id) visit(arm.id, `when ${arm.pattern}${effectsText(arm.effects)}`, arm.words, false, 0);
+    else if (arm.next.kind === "leaf") {
+      const leaf = arm.next;
+      visit(leaf.id, `when ${arm.pattern}${effectsText(arm.effects)}, outcome: ${outcomeLabel(leaf.outcome)}`, leaf.words ?? arm.words, true, leaf.claims.length);
+      continue;
+    }
+    walk2(arm.next, visit);
+  }
+}
+function owed(record) {
+  return record.entries.map((e) => {
+    const unnamed = [], uncovered = [];
+    walk2(e.tree, (id, what, words, leaf, claims) => {
+      if (!words) unnamed.push({ id, what });
+      if (leaf && !claims) uncovered.push(id);
+    });
+    return { entry: e.entry, undescribed: !e.described, unnamed, uncovered };
+  }).filter((o) => o.undescribed || o.unnamed.length || o.uncovered.length);
+}
+function replies(record) {
+  const found = /* @__PURE__ */ new Set();
+  const visit = (tree) => {
+    if (!tree) return;
+    if (tree.kind === "leaf") {
+      for (const c of tree.claims) if (c.property?.is === "returns" && c.property.subject) found.add(c.property.subject);
+      return;
+    }
+    for (const arm of tree.arms) visit(arm.next);
+  };
+  for (const e of record.entries) visit(e.tree);
+  return [...found].sort();
+}
+function unfollowed(record) {
+  return record.entries.filter((e) => !e.tree).map((e) => ({
+    entry: e.entry,
+    why: e.unsupported ?? "the engine gave no reason"
+  }));
+}
+
+// src/studio/surface.ts
+var MCP = {
+  surface: "mcp",
+  name: (tool) => tool,
+  use: (tool) => `call ${tool}`,
+  useWith: (tool, input) => `call ${tool} with ${input}`,
+  reference: (topic) => `call yichus_reference with topic "${topic}"`,
+  api: (tool, args) => {
+    const given = Object.entries(args ?? {}).map(([key, value]) => `${key} ${JSON.stringify(value)}`);
+    return `call ${tool}${given.length ? ` with ${given.join(" and ")}` : ""}`;
+  }
+};
+var COMMAND = {
+  yichus_start: 'yichus start "DESCRIPTION"',
+  yichus_next: "yichus next",
+  yichus_name: 'yichus name CODE "NAME" [CODE "NAME" ...]',
+  yichus_answer: 'yichus answer QUESTION CHOICE --words "THEIR WORDS"',
+  yichus_rules: "yichus rules FILE.json",
+  yichus_scenario: "yichus scenario FILE.json",
+  yichus_point: "yichus point FILE.json",
+  yichus_page: "yichus page"
+};
+var CLI = {
+  surface: "cli",
+  name: (tool) => `\`${COMMAND[tool].split(" ").slice(0, 2).join(" ")}\``,
+  use: (tool) => `run \`${COMMAND[tool]}\``,
+  // A command that takes input reads it from the FILE.json it names.
+  useWith: (tool, input) => `run \`${COMMAND[tool]}\` with FILE.json holding ${input}`,
+  reference: (topic) => `run \`yichus reference ${topic}\``,
+  api: (tool, args) => {
+    const select = tool === "api_guide" && args?.section !== void 0 ? " --select /sections/0/body" : "";
+    if (!args || !Object.keys(args).length) return `run \`yichus call ${tool}${select}\``;
+    return `run \`yichus call ${tool} --args ARGS.json${select}\` with ARGS.json holding ${JSON.stringify(args)}`;
+  }
+};
+var CLI_LEGEND = [
+  "On the command line, the tools this document names are commands:",
+  ...Object.entries(COMMAND).map(([tool, command]) => `  ${tool}: ${command}`),
+  "  yichus_reference: yichus reference TOPIC",
+  "  api_* (an engine tool): yichus call TOOL [--args ARGS.json]; a tool that requires sources reads every .bosatsu file in the project folder (--project DIR, default the current folder), so you never pass them"
+].join("\n");
+
+// src/studio/director.ts
+var VerifyProperty = z6.looseObject({
+  id: z6.string(),
+  title: z6.string(),
+  status: z6.string(),
+  details: z6.array(z6.string()).default([]),
+  accepted: z6.unknown().optional()
+});
+var Verify = z6.looseObject({
+  topology: z6.string().optional(),
+  verdict: z6.looseObject({ proven: z6.boolean(), properties: z6.array(VerifyProperty) })
+});
+var Protocol = z6.looseObject({ protocol: z6.looseObject({ status: z6.string(), name: z6.string().optional() }).optional(), error: z6.string().optional() });
+var LawRow = z6.looseObject({
+  binding: z6.string(),
+  law: z6.string().nullable().optional(),
+  verdict: z6.string(),
+  complete: z6.boolean().optional(),
+  scope: z6.looseObject({ kind: z6.string() }).optional(),
+  detail: z6.string().optional(),
+  reason: z6.string().optional(),
+  counterexample: z6.string().optional()
+});
+var LawCheck = z6.looseObject({
+  laws: z6.looseObject({ obligations: z6.array(LawRow) }).optional(),
+  notSampled: z6.array(z6.looseObject({ binding: z6.string() })).optional(),
+  reach: z6.array(z6.looseObject({ binding: z6.string(), usedBy: z6.array(z6.string()) })).optional()
+});
+var caseFile = (root, questionId) => path3.join(studioDir(root), "cases", `${questionId.replace(/[^A-Za-z0-9]+/g, "-").replace(/^-|-$/g, "")}.json`);
+var answerOf = (requirements, id) => requirements.answers.find((a) => a.question === id) ?? null;
+function instancesFor(requirements) {
+  const choice = answerOf(requirements, "topology")?.choice;
+  return choice === "one" ? "1" : choice === "many" ? "many" : void 0;
+}
+async function call(engine, tool, args) {
+  const result = await engine.call(tool, args);
+  if (result.ok !== true) throw new Error(`${tool} failed: ${typeof result.error === "string" ? result.error : "no reason given"}`);
+  return result;
+}
+var isAccepted = (p) => p.status === "warning" && p.accepted !== void 0;
+var raceCell = (detail) => /^race-free:([^:\s]+):/.exec(detail)?.[1] ?? null;
+var worst = (props) => props.find((p) => p.status !== "proven" && !isAccepted(p)) ?? props.find(isAccepted);
+async function judge(root, engine, sources, question, saved, report, verify, together = /* @__PURE__ */ new Set()) {
+  const answer = saved && question.choices.some((c) => c.id === saved.choice) ? saved : null;
+  const base = { question, answer, evidence: [], check: null };
+  if (!answer) return { ...base, status: "unanswered" };
+  const byId = (id) => verify.find((p) => p.id === id);
+  switch (question.kind) {
+    case "platform":
+    case "host":
+    case "sign-in":
+    case "data":
+      return { ...base, status: "decided" };
+    case "topology":
+      return {
+        ...base,
+        status: answer.choice === "one" ? "assumed" : "decided",
+        evidence: answer.choice === "one" ? ["Every check below assumes exactly one copy of the server runs."] : []
+      };
+    case "access": {
+      const table = report.dataModel.tables.find((t) => t.name === question.subject);
+      const rule = ACCESS_RULES[answer.choice];
+      const access = table?.access ?? null;
+      const check = "api_report dataModel.tables[].access";
+      if (!access || !rule.declared(access)) {
+        return {
+          ...base,
+          status: "mismatch",
+          check,
+          evidence: [`"${question.subject}" is declared ${table?.policy ?? "with no rule"}; the person chose ${rule.write}.`]
+        };
+      }
+      const personal = answer.choice === "server-only" ? report.surface.routes.filter((r) => r.tables.includes(question.subject) && r.authority !== "requires-worker") : [];
+      if (personal.length) {
+        return {
+          ...base,
+          status: "mismatch",
+          check: "api_report surface.routes[].authority",
+          evidence: personal.map((r) => `${r.path} reaches "${question.subject}" and is called ${r.authority === "requires-roles" ? "by a person with a role" : "by a person"}, not by the app's own server.`)
+        };
+      }
+      const prop = byId(`access:${question.subject}`) ?? byId("access-coverage");
+      if (!prop) return { ...base, status: "inconclusive", check: "api_verify", evidence: ["api_verify reported no access property for this table."] };
+      return {
+        ...base,
+        check: `api_verify ${prop.id}`,
+        evidence: prop.details,
+        status: prop.status === "proven" ? "proven" : "broken"
+      };
+    }
+    case "together": {
+      const elsewhere = (p) => p.details.length > 0 && p.details.every((d) => {
+        const cell = raceCell(d);
+        return cell !== null && cell !== question.subject && together.has(cell);
+      });
+      const props = verify.filter((p) => (p.id === "rmw-transactions" || p.id === "integrity") && !elsewhere(p));
+      const bad = worst(props);
+      const mentions = (p) => p.details.filter((d) => d.includes(`"${question.subject}"`) || raceCell(d) === question.subject);
+      const evidence = props.flatMap((p) => mentions(p).length ? mentions(p) : p.status === "proven" ? [] : p.details);
+      const check = `api_verify ${props.map((p) => p.id).join(" + ")}`;
+      if (!bad) return { ...base, check, evidence, status: props.length ? "proven" : "inconclusive" };
+      return { ...base, check, evidence, status: isAccepted(bad) ? "assumed" : "broken" };
+    }
+    case "partial":
+    case "outside": {
+      if (answer.choice === "partial-ok" || answer.choice === "no-plan") return { ...base, status: "no-check" };
+      const file = caseFile(root, question.id);
+      const rel = path3.relative(root, file).split(path3.sep).join("/");
+      if (!fs3.existsSync(file)) return { ...base, casePath: rel, status: "needs-case", check: "api_protocol_check", evidence: [`No protocol case at ${rel} yet.`] };
+      let protocolCase;
+      try {
+        protocolCase = JSON.parse(fs3.readFileSync(file, "utf8"));
+      } catch (error) {
+        return {
+          ...base,
+          casePath: rel,
+          check: "api_protocol_check",
+          status: "inconclusive",
+          evidence: [`${rel} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`]
+        };
+      }
+      const result = Protocol.parse(await engine.call("api_protocol_check", { sources: [...sources, ...caseSources(root)], case: protocolCase }));
+      const status = result.protocol?.status;
+      const check = `api_protocol_check ${rel}`;
+      if (!status) return { ...base, casePath: rel, check, status: "inconclusive", evidence: [result.error ?? "The protocol check gave no status."] };
+      return {
+        ...base,
+        casePath: rel,
+        check,
+        evidence: [`${result.protocol?.name ?? rel}: ${status}`],
+        status: status === "holds" ? "bounded" : status === "violated" ? "broken" : "inconclusive"
+      };
+    }
+  }
+}
+var reason = (result) => typeof result.error === "string" ? result.error : "no reason given";
+async function checkLaws(engine, sources) {
+  const answer = async (mode) => {
+    const result = await engine.call("api_law_check", { sources, ...mode === "exhaustive" ? { mode } : {} });
+    if (result.ok !== true) return { answer: { kind: "refused", reason: reason(result) }, finite: [] };
+    const parsed = LawCheck.parse(result);
+    const reach2 = parsed.reach ? new Map(parsed.reach.map((r) => [r.binding, r.usedBy])) : null;
+    return { answer: { kind: "rows", rows: parsed.laws?.obligations ?? [], reach: reach2 }, finite: (parsed.notSampled ?? []).map((n) => n.binding) };
+  };
+  const sampled = await answer("sampled");
+  if (sampled.answer.kind === "rows" && !sampled.answer.rows.length && !sampled.finite.length) return { laws: [], error: null };
+  const { answer: exhaustive } = await answer("exhaustive");
+  if (sampled.answer.kind === "refused" && exhaustive.kind === "refused")
+    return { laws: [], error: `api_law_check failed: ${sampled.answer.reason}; exhaustive: ${exhaustive.reason}` };
+  const rowsOf = (a) => a.kind === "rows" ? a.rows : [];
+  const reach = [sampled.answer, exhaustive].flatMap((a) => a.kind === "rows" && a.reach ? [a.reach] : [])[0] ?? null;
+  const bindings = [.../* @__PURE__ */ new Set([...rowsOf(sampled.answer).map((r) => r.binding), ...sampled.finite, ...rowsOf(exhaustive).map((r) => r.binding)])];
+  return { error: null, laws: bindings.map((binding) => {
+    const s = rowsOf(sampled.answer).find((r) => r.binding === binding);
+    const e = rowsOf(exhaustive).find((r) => r.binding === binding);
+    const listed = e?.scope !== void 0 && e.scope.kind !== "type-wide";
+    const said2 = (mode, r) => `${mode}: ${r.verdict}${r.detail ? `; ${r.detail}` : ""}${r.reason ? `; ${r.reason}` : ""}${r.counterexample ? `; counterexample ${r.counterexample}` : ""}`;
+    const evidence = [
+      ...s ? [said2("sampled", s)] : [],
+      ...!s && sampled.answer.kind === "refused" ? [`sampled: refused; ${sampled.answer.reason}`] : [],
+      ...!s && sampled.finite.includes(binding) ? ["sampled: left to the check over its listed inputs"] : [],
+      ...!e && exhaustive.kind === "refused" ? [`every input: refused; ${exhaustive.reason}`] : [],
+      ...e ? [said2(listed ? "only the listed inputs" : "every input", e)] : []
+    ];
+    const name = s?.law ?? e?.law ?? null;
+    const usedBy = reach?.get(binding) ?? null;
+    if (usedBy && !usedBy.length) evidence.push("used by: no action of the app reaches what its check calls");
+    const status = s?.verdict === "violated" || e?.verdict === "violated" ? "broken" : e?.verdict === "holds-exhaustive" ? e.complete && e.scope?.kind === "type-wide" ? "proven" : "bounded" : s?.verdict === "holds" ? "bounded" : "inconclusive";
+    return { binding, name, status, usedBy, evidence };
+  }) };
+}
+var lawNamed = (laws, ref) => laws.find((l) => l.binding === ref || l.binding.endsWith(`::${ref}`) || l.name === ref);
+var unused = (law) => law.usedBy !== null && !law.usedBy.length;
+function judgeRule(rule, laws) {
+  const found = rule.laws.map((ref) => [ref, lawNamed(laws, ref)]);
+  const missing = found.filter(([, law]) => !law).map(([ref]) => ref);
+  const checked = found.flatMap(([, law]) => law ? [law] : []);
+  const evidence = [...missing.map((ref) => `No law named ${ref} in the program.`), ...checked.flatMap((l) => l.evidence.map((e) => `${l.name ?? l.binding}: ${e}`))];
+  const status = missing.length || !checked.length ? "needs-law" : checked.some((l) => l.status === "broken") ? "broken" : checked.some((l) => l.status === "inconclusive") ? "inconclusive" : checked.some(unused) ? "unused" : checked.every((l) => l.status === "proven") ? "proven" : "bounded";
+  return { ...rule, status, evidence };
+}
+var USE_THE_LAW = "If the function the law checks is in the program, make the action the rule is about decide with it. If it is defined next to the law, move it into the program, have the law check it there, and make the action decide with it. Never weaken what the law says.";
+var QUESTION_PROPERTIES = (id) => id.startsWith("access:") || id === "access-coverage" || id === "rmw-transactions" || id === "integrity";
+var GUIDE = {
+  access: "Owner-scoped data",
+  together: "Atomic commands with Yichus/Transaction",
+  partial: "Transaction protocols: finite cases, retries, and receipts",
+  outside: "Transaction protocols: finite cases, retries, and receipts"
+};
+var SCAFFOLD_ARGS = {
+  package_name: "My/App/Api",
+  service_name: "my_app",
+  resources: [{ name: "record", fields: [{ name: "title", type: "String" }], policy: "owner" }]
+};
+var plural3 = (n, one, many) => `${n} ${n === 1 ? one : many}`;
+var capital = (s) => `${s[0].toUpperCase()}${s.slice(1)}`;
+var askStep = (open, say2) => ({
+  stage: "ask",
+  summary: `${plural3(open.length, "question", "questions")} for you about how the app should behave.`,
+  instructions: [
+    "Ask the person each question below, in its words, with its choices. They may also answer on the studio page.",
+    "Speak in product terms: never quote question ids, code names, file names, tool names or the programming language to the person.",
+    'Do not answer for them and do not pick a default: these are product decisions only they can make. If they are unsure, explain the "why" and the choices.',
+    `Record each answer: ${say2.use("yichus_answer")} with the question id, the choice id, and their own words. Then ${say2.use("yichus_next")}.`
+  ],
+  ask: open.map((p) => ({ id: p.question.id, ask: p.question.ask, why: p.question.why, choices: p.question.choices }))
+});
+function deploySections(state) {
+  const choice = (kind) => state.properties.find((p) => p.question.kind === kind)?.answer?.choice;
+  const where = choice("platform");
+  if (!where) return [];
+  const host = choice("host");
+  return host ? [PLATFORM_SECTION[where], HOST_SECTION[host]] : [PLATFORM_SECTION[where]];
+}
+var sectionsText = (sections) => sections.map((s) => `"${s}"`).join(" and ");
+function nextStep(state, compileErrors, say2 = MCP) {
+  const next = `Then ${say2.use("yichus_next")}.`;
+  if (!state.description) return {
+    stage: "describe",
+    summary: "Waiting for a description of what to build.",
+    instructions: [`Ask the person what they want to build, in their own words. ${capital(say2.use("yichus_start"))} with their description, unchanged.`]
+  };
+  const sections = deploySections(state);
+  if (!state.files.length) return {
+    stage: "write",
+    summary: "No program yet.",
+    instructions: [
+      `If this replaces an app the person already has, ${say2.reference("porting")} first: reading the old app is yours, and the studio sees only the new one. Keep the new program in this folder, apart from the old app's code.`,
+      "Build only what the person asked for. A calculation that keeps no records needs no server, database or sign-in: write it as pure functions, with a law for each rule about its numbers.",
+      `An app that keeps records runs as a server. The program is the same wherever it runs, so build it first; the studio asks the person where it runs once the program has records or actions, and ${say2.reference("deploy")} then says how to put it online.`,
+      `${capital(say2.api("api_guide", { section: "Required workflow" }))}, then write the program as .bosatsu files in this project folder.`,
+      `For an app that stores records, ${say2.api("api_scaffold", SCAFFOLD_ARGS)} first and save its module as a file here. Each resource's policy is owner or public. You never need to pass sources: the studio reads every .bosatsu file in the folder.`,
+      `Shape the records to the people in the description before you show anything. The scaffold's owner and public records are only a start.`,
+      "Its creator decides everything in a record they own. So a decision someone else makes about it (a manager approving a claim, a coordinator confirming a sign-up) goes in records of its own that only that role may change. Otherwise the creator can make the decision themselves.",
+      `Records other people must see (a coordinator who sees every sign-up) need a rule that lets them in, not owner-only. ${capital(say2.api("api_guide", { section: "Guarded data" }))} for how to write one with roles.`,
+      `A limit across many people's records ("each shift has 10 spots") needs one record that holds the count. Change it in the same transaction as the sign-up. Then the studio asks what happens when two people take the last spot.`,
+      `Put every decision the app makes in pure functions, and keep the code that reads, writes and calls out free of business rules. When work takes several steps or waits on an outside service (a model, a web page, a payment), write it as one pure step program that a rule-free engine drives: ${say2.reference("portable-programs")} before writing it.`,
+      `Write each rule the person states about what the app must always or never do as a law: ${say2.reference("laws")} for the syntax, the standard functions and a worked example.`,
+      "A law checks the pure function it calls. So the action the rule is about must decide by calling that same function. A law over a helper no action uses passes while the app ignores the rule.",
+      next
+    ]
+  };
+  if (compileErrors) return {
+    stage: "fix-compile",
+    summary: "The program does not compile yet.",
+    instructions: [`Fix these compile errors in the files. ${next}`, `For the standard functions the language has, ${say2.reference("laws")}.`],
+    evidence: compileErrors
+  };
+  if (!state.rulesListed) return {
+    stage: "rules",
+    summary: "Your agent is writing down the rules you gave for your app, so each one is checked.",
+    instructions: [
+      `Read the person's description and answers again. List every rule they stated about what the app must always or never do, in their words (for example "a fan who opts out stays opted out").`,
+      `Write a law for each rule in a .bosatsu file of the app (${say2.reference("laws")} for the syntax, the standard functions and a worked example). A law states the rule, never what the code happens to do.`,
+      `${capital(say2.use("yichus_next"))} so the studio finds the laws you wrote, then record the rules with the laws that check each: ${say2.useWith("yichus_rules", '{"rules": [{"rule": their words, "laws": [law names]}]}')}. If they stated no rule, record an empty list.`,
+      "A rule no law can state (for example one about what a page shows) is not checked: tell the person so, and leave it out.",
+      next
+    ],
+    ...state.laws.length ? { items: { heading: "Laws the program has", lines: state.laws.map((l) => `${l.binding}${l.name ? ` ("${l.name}")` : ""}: ${l.status}`) } } : {}
+  };
+  const unnamed = /* @__PURE__ */ new Map();
+  for (const { question } of state.properties) {
+    if (question.subject !== null && !(question.subject in state.names)) unnamed.set(question.subject, [...unnamed.get(question.subject) ?? [], question.fact]);
+  }
+  for (const { code, what } of drawnParts(state)) {
+    if (!(code in state.names) && !unnamed.has(code)) unnamed.set(code, [`${capital(what)}.`]);
+  }
+  if (unnamed.size) return {
+    stage: "name",
+    summary: "Your agent is putting the parts of your app into plain words.",
+    instructions: [
+      `The person sees the parts of the program below in questions and in the pictures of the program. Give each a short name in the person's own vocabulary, never a code name, path or table name (for example "family lists" or "starting a new list"). Name a kind of value plainly too ("text", "a number").`,
+      `${capital(say2.use("yichus_name"))} with all of them at once. ${next}`
+    ],
+    items: { heading: "Parts to name", lines: [...unnamed].map(([subject, facts]) => `${subject}: ${facts.join(" ")}`) }
+  };
+  const unanswered = state.properties.filter((p) => p.status === "unanswered");
+  if (unanswered.length) return askStep(unanswered, say2);
+  const mismatched = state.properties.filter((p) => p.status === "mismatch");
+  if (mismatched.length) return {
+    stage: "declare",
+    summary: "The program's declared rules do not match what you chose yet.",
+    instructions: [
+      ...mismatched.map((p) => {
+        const rule = ACCESS_RULES[p.answer.choice];
+        return `Make the AccessSpec rule for "${p.question.subject}" ${rule.write}${p.answer.choice === "server-only" ? ", and reach it only from worker routes" : ""} (${say2.api("api_add_rule")} for the snippet; ${say2.api("api_guide", { section: rule.guide })} for what it means).`;
+      }),
+      next
+    ],
+    evidence: mismatched.flatMap((p) => p.evidence)
+  };
+  const broken = state.properties.filter((p) => p.status === "broken" || p.status === "inconclusive");
+  const failing = state.other.filter((o) => o.status !== "warning");
+  const warnings = state.other.filter((o) => o.status === "warning");
+  const brokenRules = state.rules.filter((r) => r.status !== "proven" && r.status !== "bounded");
+  const ruled = new Set(state.rules.flatMap((r) => r.laws.flatMap((ref) => lawNamed(state.laws, ref)?.binding ?? [])));
+  const brokenLaws = state.laws.filter((l) => !ruled.has(l.binding) && (l.status === "broken" || l.status === "inconclusive" || unused(l)));
+  const notHolding = broken.length + failing.length + brokenRules.length + brokenLaws.length + (state.lawsError ? 1 : 0);
+  if (notHolding || warnings.length) return {
+    stage: "fix",
+    summary: [
+      notHolding ? `${notHolding === 1 ? "1 property is" : `${notHolding} properties are`} not holding yet.` : "",
+      warnings.length ? `${plural3(warnings.length, "warning needs", "warnings need")} a look.` : ""
+    ].filter(Boolean).join(" "),
+    instructions: [
+      "Fix the program so each property below holds. The evidence lines are the engine's own words.",
+      ...broken.map((p) => `"${p.question.ask}" The person chose "${p.question.choices.find((c) => c.id === p.answer?.choice)?.label}".${GUIDE[p.question.kind] ? ` ${capital(say2.api("api_guide", { section: GUIDE[p.question.kind] }))} for how.` : ""}`),
+      ...failing.map((o) => `${o.title} (${o.id}) is ${o.status}.`),
+      ...warnings.map((o) => `${o.title} (${o.id}) is a warning, not a failure: read its evidence. Change the code if it shows something the person did not choose, such as a stored field an action gives away; otherwise tell the person what it means.`),
+      ...brokenRules.map((r) => r.status === "needs-law" ? `The person's rule "${r.rule}" has no law in the program that checks it. Write one (${say2.reference("laws")} for how), then record the rules again with ${say2.name("yichus_rules")}.` : r.status === "unused" ? `The person's rule "${r.rule}" is checked by a law whose check calls nothing any action of the app reaches, so the law says nothing about what the app's actions do. ${USE_THE_LAW}` : `The person's rule "${r.rule}" is ${r.status === "broken" ? "broken: a law that states it fails" : "not decided by its laws"}. Change the code, never the law.`),
+      ...brokenLaws.map((l) => `The law ${l.name ? `"${l.name}" (${l.binding})` : l.binding} ${l.status === "broken" ? "is broken. Change the code, never the law." : l.status === "inconclusive" ? "is not decided. Change the code, never the law." : `checks code no action of the app reaches. ${USE_THE_LAW}`}`),
+      ...state.lawsError ? ["The engine could not check the program's laws, so no rule the person stated is checked. If the error below points at the program, fix the program; otherwise tell the person their rules are not checked yet."] : [],
+      `Never weaken a rule, delete a check, a law or a claim, or declare one server to make a check pass: change the code. ${next}`
+    ],
+    evidence: [
+      ...broken.flatMap((p) => p.evidence),
+      ...state.other.flatMap((o) => o.details),
+      ...brokenRules.flatMap((r) => r.evidence),
+      ...brokenLaws.flatMap((l) => l.evidence),
+      ...state.lawsError ? [state.lawsError] : []
+    ]
+  };
+  const scenarios = state.whatHappens;
+  const owes = scenarios ? owed(scenarios) : [];
+  if (scenarios && (owes.length || scenarios.refused.length || scenarios.notes.length || scenarios.mismatches.length)) return {
+    stage: "scenarios",
+    summary: "Your agent is writing down, in your words, what should happen in each thing your app does.",
+    instructions: [
+      `Write down what should happen in each action listed below, as the person would say it, and ${say2.use("yichus_scenario")} with all of them at once. For each action give:`,
+      'title: what the person does ("You add a note").',
+      'names: for every id listed under the action, a few words the person would use: the question the app asks itself ("are you signed in?"), each answer, and each outcome ("your note is saved").',
+      'expect: for every outcome, what must and must not happen there, each {"at": an id, "claim": a claim}. A claim is [not] reads TABLE, writes TABLE, refused, returns CONSTRUCTOR, reaches model or reaches net; a claim at an id covers every outcome under it.',
+      "State what the person wants, from their description and answers, never what the code happens to do. Where you cannot tell, ask the person in product terms.",
+      ...scenarios.notes.length ? ["Some expectations are not claims, so nothing checks them (the evidence lists them). Write each as a claim in the grammar above. If what the person expects cannot be said that way, tell them it will not be checked and leave it out."] : [],
+      ...scenarios.mismatches.length ? ["Some scenarios are for actions the app no longer has (the evidence lists them). If the person dropped the action, pass it in drop. If it was renamed or moved, describe the new action and drop the old one in the same call."] : [],
+      next
+    ],
+    ...owes.length ? { items: { heading: "Actions to describe", lines: owes.flatMap((o) => [
+      `${o.entry}${o.undescribed ? " (not described yet)" : ""}:`,
+      ...o.unnamed.map((u) => `  ${u.id}: ${u.what}`),
+      ...o.uncovered.length ? [`  outcomes no claim covers: ${o.uncovered.join(", ")}`] : []
+    ]) } } : {},
+    evidence: [
+      ...scenarios.refused.map((r) => `${r.entry}: "${r.words}" at ${r.id} was refused: ${r.reason}`),
+      ...scenarios.notes.map((n) => `${n.entry}: "${n.text}" at ${n.at} is not a claim`),
+      ...scenarios.mismatches.map((m) => `${m.entry}: ${m.reason}`)
+    ]
+  };
+  const claims = (scenarios?.claims ?? []).filter((c) => c.verdict !== "holds");
+  const unfollowedEntries = scenarios ? unfollowed(scenarios) : [];
+  const open = claims.length + (state.whatHappensError ? 1 : 0) + unfollowedEntries.length;
+  if (open) return {
+    stage: "fix",
+    summary: `${open === 1 ? "1 property is" : `${open} properties are`} not holding yet.`,
+    instructions: [
+      "Fix the program so each property below holds. The evidence lines are the engine's own words.",
+      ...claims.map((c) => `${c.entry}: the person expects "${c.claim}" at ${c.at}, and the engine finds it ${c.verdict === "fails" ? "fails" : "cannot be decided"} there.`),
+      ...state.whatHappensError ? ["The engine could not follow each action through, so no scenario is checked. If the error below points at the program, fix the program. Otherwise tell the person their scenarios cannot be checked yet, and never tell them their choices hold."] : [],
+      ...unfollowedEntries.length ? ["The engine could not follow some actions through (the evidence says which and why), so nothing the person expects of them is checked. If the reason points at the program, such as an action with too many ways through, change the program so it can be followed. Otherwise tell the person those actions are not checked, and never tell them their choices hold."] : [],
+      `Never weaken a rule, delete a check or a claim, or declare one server to make a check pass: change the code. If a claim misread what the person wants, ask them and correct the scenario. ${next}`
+    ],
+    evidence: [
+      ...claims.map((c) => `${c.entry} at ${c.at}: ${c.parsed}: ${c.verdict}`),
+      ...state.whatHappensError ? [state.whatHappensError] : [],
+      ...unfollowedEntries.map((u) => `${u.entry} could not be followed: ${u.why}`)
+    ]
+  };
+  const cases = state.properties.filter((p) => p.status === "needs-case");
+  if (cases.length) return {
+    stage: "write-case",
+    summary: "Writing the failure scenarios that test your answers.",
+    instructions: [
+      `${capital(say2.reference("protocol-case"))}: it gives the case specification and a complete worked case with its program.`,
+      "Put any Bosatsu observation predicates the case names in .yichus/cases/*.bosatsu. The studio adds those files to protocol checks only, so they never count as part of the app.",
+      ...cases.map((p) => `Write ${p.casePath}: a protocol-case-1.0 for ${p.question.subject} whose invariants state the person's choice ("${p.question.choices.find((c) => c.id === p.answer?.choice)?.label}"), with crashes${p.question.kind === "outside" ? " and failed external results" : ""} at each step.`),
+      `State the person's rule exactly; never weaken it to match the code. ${next}`
+    ]
+  };
+  const assumed = state.properties.filter((p) => p.status === "assumed");
+  const data = state.properties.find((p) => p.question.kind === "data")?.answer?.choice;
+  return {
+    stage: "done",
+    summary: assumed.length ? "Everything you chose holds, under the assumptions shown." : "Everything you chose holds.",
+    instructions: [
+      "Tell the person every property they chose holds, and point them at the studio page for the evidence.",
+      ...assumed.length ? ["Say plainly which results depend on running exactly one server."] : [],
+      ...data === "move" || data === "same-database" ? [`Before any record moves, list for the person every kind of record the old place keeps that this app does not (for example timestamps or a message log), and ask about each: add it to the app, or agree to leave it behind. ${capital(say2.reference("porting"))} says how to bring the data over.`] : [],
+      `When they describe a new feature, change the code and ${say2.use("yichus_next")} again: new facts can raise new questions.`,
+      sections.length ? `When they want the app online, follow the ${sectionsText(sections)} section${sections.length === 1 ? "" : "s"} of the deploy reference (${say2.reference("deploy")}), and ${say2.api("api_deploy")} to generate the server.` : `The program keeps no records and has no actions people call, so it needs no server. When they want it on a page, ${say2.reference("calculator")}.`
+    ]
+  };
+}
+function drawnParts(state) {
+  return [
+    ...state.map ? nameableParts(state.map, ownPackages(state.layers)) : [],
+    ...(state.whatHappens ? replies(state.whatHappens) : []).map((code) => ({ code, what: "an answer the app gives" }))
+  ];
+}
+function ownPackages(layers) {
+  const parsed = z6.looseObject({ layers: z6.looseObject({ packages: z6.array(z6.looseObject({ name: z6.string() })) }) }).safeParse(layers);
+  return parsed.success ? new Set(parsed.data.layers.packages.map((p) => p.name)) : void 0;
+}
+var serves = (report) => report.surface.routes.length > 0 || report.dataModel.tables.length > 0;
+async function direct({ root, engine, requirements, withMap = true, previous = null, say: say2 = MCP }) {
+  const sources = projectSources(root);
+  const hash = sourcesHash(sources);
+  const instances = instancesFor(requirements);
+  const base = {
+    schemaVersion: "yichus-studio-state-1",
+    project: path3.basename(path3.resolve(root)),
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    sourcesHash: hash,
+    files: sources.map((s) => s.fileName),
+    description: requirements.description,
+    names: requirements.names ?? {},
+    topology: null,
+    proven: null,
+    properties: [],
+    other: [],
+    laws: [],
+    lawsError: null,
+    rulesListed: requirements.rules !== void 0,
+    rules: [],
+    map: null,
+    mapError: null,
+    layers: null,
+    hasActions: null,
+    whatHappens: null,
+    whatHappensError: null
+  };
+  let compileErrors = null;
+  if (requirements.description && sources.length) {
+    const verify = Verify.parse(await call(engine, "api_verify", { sources, ...instances ? { instances } : {} }));
+    base.topology = verify.topology ?? null;
+    base.proven = verify.verdict.proven;
+    const compiles = verify.verdict.properties.find((p) => p.id === "compiles");
+    if (compiles && compiles.status !== "proven") compileErrors = compiles.details;
+    else {
+      const report = Report.parse(await call(engine, "api_report", { sources }));
+      const structureRaw = await call(engine, "api_organize", { sources, lens: "structure", requirements });
+      const structure = Structure.parse(structureRaw);
+      const questions = questionsFor(report, structure, base.names);
+      if (serves(report)) {
+        questions.push(platform);
+        const where = answerOf(requirements, platform.id)?.choice;
+        if (where && PAGE_ONLY.has(where)) questions.push(hostQuestion(platform.choices.find((c) => c.id === where).label));
+      }
+      const together = new Set(questions.filter((q) => q.kind === "together").map((q) => q.subject));
+      for (const question of questions) {
+        base.properties.push(await judge(root, engine, sources, question, answerOf(requirements, question.id), report, verify.verdict.properties, together));
+      }
+      const routeless = (p) => !serves(report) && p.status === "warning" && p.id.startsWith("route-");
+      base.other = verify.verdict.properties.filter((p) => !QUESTION_PROPERTIES(p.id) && p.status !== "proven" && !isAccepted(p) && !routeless(p)).map(({ id, title: title2, status, details }) => ({ id, title: title2, status, details }));
+      const checked = await checkLaws(engine, sources);
+      base.laws = checked.laws;
+      base.lawsError = checked.error;
+      base.rules = (requirements.rules ?? []).map((r) => judgeRule(r, base.laws));
+      base.hasActions = report.surface.routes.length > 0;
+      if (base.hasActions || requirements.scenarios?.length) {
+        try {
+          const access = await call(engine, "api_access_check", { sources });
+          const record = WhatHappens.parse(buildWhatHappens({ structure: structureRaw, access }, { program: base.project }));
+          base.whatHappens = base.hasActions ? record : { ...record, entries: [], ghosts: [], claims: [], witnesses: [], refused: [], notes: [] };
+        } catch (error) {
+          base.whatHappensError = error instanceof Error ? error.message : String(error);
+        }
+      }
+      if (withMap) {
+        if (previous?.sourcesHash === hash && previous.map) {
+          base.map = previous.map;
+          base.layers = previous.layers ?? null;
+        } else {
+          try {
+            const [abstractions, layers] = [
+              await call(engine, "api_organize", { sources, lens: "abstractions" }),
+              await call(engine, "api_organize", { sources, lens: "layers" })
+            ];
+            base.map = buildSystemMap({ report, structure: structureRaw, abstractions, layers }, { program: base.project });
+            base.layers = layers;
+          } catch (error) {
+            base.mapError = error instanceof Error ? error.message : String(error);
+          }
+        }
+      }
+    }
+  }
+  const state = { ...base, step: nextStep(base, compileErrors, say2) };
+  writeState(root, state);
+  return state;
+}
+function writeState(root, state) {
+  ensureStudioDir(root);
+  fs3.writeFileSync(path3.join(studioDir(root), "state.json"), `${JSON.stringify(state, null, 2)}
+`);
+}
+function readState(root) {
+  const file = path3.join(studioDir(root), "state.json");
+  return fs3.existsSync(file) ? JSON.parse(fs3.readFileSync(file, "utf8")) : null;
+}
+
+// src/studio/mcp.ts
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+import { z as z10 } from "zod";
+
+// src/studio/marks.ts
+import fs4 from "fs";
+import path4 from "path";
+import { z as z8 } from "zod";
+
+// src/studio/person.ts
+import { createHash as createHash2 } from "crypto";
+import { z as z7 } from "zod";
+
+// ../../web/layer-groups.js
+var dimensions = Object.freeze({
+  connections: "packages they connect to",
+  types: "types they share",
+  tables: "tables they touch",
+  none: "no grouping"
+});
+function usesElsewhere(data, nodeOf = new Map(data.packages.map((p) => [p.name, p.name]))) {
+  const pkg = (id) => id.slice(0, id.indexOf("::"));
+  const uses = new Map([...new Set(nodeOf.values())].map((n) => [n, 0]));
+  const add = (from, to, n) => {
+    if (nodeOf.get(from) !== nodeOf.get(to)) uses.set(nodeOf.get(to), uses.get(nodeOf.get(to)) + n);
+  };
+  for (const e of data.crossEdges) add(pkg(e.from), pkg(e.to), 1);
+  for (const e of data.packageEdges) add(e.from, e.to, e.typeNames.length);
+  return uses;
+}
+
+// src/studio/person.ts
+var named = (names, code) => names[code] ?? null;
+var theirs = (words, missing) => words === null ? missing : { theirs: words };
+var Package = z7.looseObject({
+  name: z7.string(),
+  level: z7.number(),
+  reads: z7.array(z7.string()),
+  writes: z7.array(z7.string()),
+  handedIn: z7.array(z7.string())
+});
+var Layers = z7.looseObject({
+  layers: z7.looseObject({ packages: z7.array(Package), packageEdges: z7.array(z7.looseObject({})), crossEdges: z7.array(z7.looseObject({})) })
+});
+function personSections(layers, names, anchors = /* @__PURE__ */ new Map()) {
+  const parsed = Layers.safeParse(layers);
+  if (!parsed.success) return null;
+  const data = parsed.data.layers;
+  const uses = usesElsewhere(data);
+  const levels = [...new Set(data.packages.map((p) => p.level))].sort((a, b) => b - a);
+  return levels.map((level, i) => data.packages.filter((p) => p.level === level).map((p) => {
+    const own = (tables) => [...new Set(tables.filter((t) => !p.handedIn.includes(t)).map((t) => named(names, t)))];
+    const changes = own(p.writes);
+    return { code: p.name, name: named(names, p.name), changes, looks: own(p.reads).filter((t) => !changes.includes(t)), uses: uses.get(p.name) };
+  }).sort((a, b) => b.uses - a.uses).map(({ code, ...section }, k) => {
+    const anchor = `section-${i}-${k}`;
+    anchors.set(code, anchor);
+    return { anchor, ...section };
+  }));
+}
+var Property2 = z7.object({ negated: z7.boolean(), is: z7.enum(["reads", "writes", "refused", "returns", "reaches"]), subject: z7.string().optional() });
+var Claim2 = z7.looseObject({ property: Property2, verdict: z7.enum(["holds", "fails", "inconclusive"]) });
+var Leaf2 = z7.looseObject({
+  kind: z7.literal("leaf"),
+  id: z7.string(),
+  words: z7.string().nullable(),
+  status: z7.enum(["grey", "red", "green", "unchecked"]),
+  outcome: z7.looseObject({ kind: z7.string() }),
+  claims: z7.array(Claim2),
+  witnesses: z7.array(z7.string())
+});
+var Tree2 = z7.lazy(() => z7.union([Leaf2, z7.looseObject({
+  kind: z7.literal("node"),
+  id: z7.string(),
+  words: z7.string().nullable(),
+  arms: z7.array(z7.looseObject({ id: z7.string(), words: z7.string().nullable(), next: Tree2 }))
+})]));
+var Happens = z7.looseObject({
+  entries: z7.array(z7.looseObject({ entry: z7.string(), title: z7.string().nullable(), described: z7.boolean(), tree: Tree2.nullable() })),
+  witnesses: z7.array(z7.looseObject({ id: z7.string(), resource: z7.string() }))
+});
+function sayClaim({ negated, is, subject }, names) {
+  const thing = theirs(subject === void 0 ? null : named(names, subject), "something not named yet");
+  const said2 = is === "refused" ? ["turned away"] : is === "reaches" ? [subject === "model" ? "asks the AI model" : "reaches the internet"] : [is === "reads" ? "looks at " : is === "writes" ? "changes " : "answers ", thing];
+  return !negated ? said2 : is === "refused" ? ["not turned away"] : ["never ", ...said2];
+}
+function personWhatHappens(record, names, anchors = /* @__PURE__ */ new Map()) {
+  const parsed = Happens.safeParse(record);
+  if (!parsed.success) return null;
+  const reach = new Map(parsed.data.witnesses.map((w) => [w.id, named(names, w.resource)]));
+  const VERDICT = { holds: "holds", fails: "fails", inconclusive: "cannot say" };
+  const at = (id, anchor) => {
+    anchors.set(id, anchor);
+    return anchor;
+  };
+  const step = (t, said2, place) => {
+    if (t.kind === "leaf") return {
+      kind: "outcome",
+      anchor: at(t.id, place),
+      words: t.words === said2 ? null : t.words,
+      refused: t.outcome.kind === "refused",
+      status: t.status,
+      checks: [
+        ...t.claims.map((c) => ({ says: sayClaim(c.property, names), verdict: VERDICT[c.verdict] })),
+        ...t.witnesses.map((w) => ({ says: ["someone else's ", theirs(reach.get(w) ?? null, "records"), " can be reached here"], verdict: "fails" }))
+      ]
+    };
+    return { kind: "choice", anchor: at(t.id, place), words: t.words, ways: t.arms.map((a, k) => {
+      const then = step(a.next, a.next.id === a.id ? a.words : null, `${place}-${k}`);
+      return { anchor: a.next.id === a.id ? then.anchor : at(a.id, `${place}-${k}-way`), words: a.words, then };
+    }) };
+  };
+  const described = parsed.data.entries.filter((e) => e.described);
+  return {
+    actions: described.map((e, i) => ({ anchor: at(e.entry, `action-${i}`), title: e.title, first: e.tree && step(e.tree, null, `action-${i}-step`) })),
+    waiting: parsed.data.entries.length - described.length
+  };
+}
+function personDiagrams(state, names) {
+  const anchors = /* @__PURE__ */ new Map();
+  const sections = personSections(state.layers, names, anchors);
+  const whatHappens = state.whatHappens ? personWhatHappens(state.whatHappens, names, anchors) : null;
+  const drawing = createHash2("sha256").update(JSON.stringify([...anchors])).digest("hex").slice(0, 16);
+  return { sections, whatHappens, anchors, drawing };
+}
+
+// src/studio/marks.ts
+var Mark = z8.object({ at: z8.string().min(1), note: z8.string().trim().min(1).max(280) }).strict();
+var Marks = z8.object({ schemaVersion: z8.literal("yichus-marks-1"), said: z8.string(), marks: z8.array(Mark) });
+var PointArgs = z8.object({ marks: z8.array(Mark) }).strict();
+var marksPath = (root) => path4.join(studioDir(root), "marks.json");
+function loadMarks(root) {
+  const file = marksPath(root);
+  if (!fs4.existsSync(file)) return null;
+  const parsed = Marks.safeParse(JSON.parse(fs4.readFileSync(file, "utf8")));
+  if (!parsed.success) throw new Error(`${file} is not a yichus-marks-1 file: ${z8.prettifyError(parsed.error)}`);
+  return parsed.data;
+}
+function pointable(root) {
+  const state = readState(root);
+  return new Set(state ? personDiagrams(state, loadRequirements(root).names ?? {}).anchors.keys() : []);
+}
+function recordMarks(root, args, now) {
+  const parsed = PointArgs.safeParse(args);
+  if (!parsed.success) return { ok: false, error: `yichus_point needs marks, each with at and a note of at most 280 characters. ${z8.prettifyError(parsed.error)}` };
+  const known = pointable(root);
+  const unknown = parsed.data.marks.map((m) => m.at).filter((at) => !known.has(at));
+  if (unknown.length) return { ok: false, error: `The page draws nothing at ${unknown.join(", ")}. Point at a section (a part's code name as yichus_name took it), an action once yichus_scenario described it, or an id yichus_next listed under a described action; call yichus_next for the latest ids.` };
+  ensureStudioDir(root);
+  fs4.writeFileSync(marksPath(root), `${JSON.stringify(Marks.parse({ schemaVersion: "yichus-marks-1", said: now.toISOString(), marks: parsed.data.marks }), null, 2)}
+`);
+  return { ok: true };
+}
+
+// src/studio/page.ts
+var PAGE_STATUS = {
+  unanswered: ["waiting for your answer", "quiet"],
+  decided: ["decided", "good"],
+  assumed: ["holds, under an assumption", "warn"],
+  proven: ["proven", "good"],
+  bounded: ["holds in every scenario checked", "good"],
+  broken: ["broken", "bad"],
+  mismatch: ["the code says otherwise", "bad"],
+  "needs-case": ["scenario being written", "quiet"],
+  "needs-law": ["check being written", "quiet"],
+  unused: ["checked, but your app does not use it yet", "bad"],
+  inconclusive: ["not decided yet", "warn"],
+  "no-check": ["no check needed", "quiet"],
+  pending: ["answered, waiting for your agent to check", "quiet"]
+};
+var PAGE_HEADINGS = {
+  asked: "What you asked for",
+  now: "What is happening now",
+  questions: "Questions for you",
+  props: "What your program must do",
+  happens: "What happens when",
+  sections: "How your app is built",
+  map: "The shape of your program"
+};
+var NO_ACTIONS = "Nothing to follow here: your program works out answers from what is entered, and has no actions people take, such as saving or sending something.";
+var STUDIO_PAGE = `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Yichus studio</title>
+<link rel="stylesheet" href="system-map.css">
+<style>
+  :root { --ink:#0f172a; --muted:#475569; --faint:#94a3b8; --rule:#e2e8f0; --paper:#ffffff; --page:#f6f8fb;
+    --good:#047857; --goodSoft:#ecfdf5; --bad:#b91c1c; --badSoft:#fef2f2; --warn:#92400e; --warnSoft:#fffbeb; --accent:#22675e;
+    --agent:#4f46e5; --agentSoft:rgba(79,70,229,0.16); }
+  * { box-sizing:border-box; }
+  body { margin:0; background:var(--page); color:var(--ink); font:16px/1.55 Inter, system-ui, sans-serif; }
+  main { max-width:1100px; margin:0 auto; padding:24px 16px 64px; }
+  header p { margin:4px 0 0; color:var(--muted); }
+  h1 { font-size:1.6rem; margin:0; font-weight:600; }
+  h2 { font-size:1.15rem; margin:32px 0 8px; }
+  section > p.lede { color:var(--muted); margin:0 0 12px; max-width:70ch; }
+  .frame { background:var(--paper); border:1px solid var(--rule); border-radius:10px; padding:16px; position:relative; }
+  .frame > .tag { position:absolute; top:-10px; left:12px; background:var(--page); padding:0 6px; font-size:0.72rem; letter-spacing:0.08em; text-transform:uppercase; color:var(--accent); font-weight:700; }
+  .yours { border-left:3px solid var(--accent); padding:4px 12px; margin:0; font-style:italic; }
+  .label { font-size:0.75rem; color:var(--muted); text-transform:uppercase; letter-spacing:0.06em; margin:0 0 4px; }
+  .now { font-weight:600; }
+  .question { border-top:1px solid var(--rule); padding:14px 0; }
+  .question:first-of-type { border-top:none; padding-top:4px; }
+  .question .ask { font-weight:600; margin:0 0 4px; }
+  .question .why { color:var(--muted); margin:0 0 8px; font-size:0.94rem; }
+  .choice { display:flex; gap:8px; align-items:flex-start; margin:6px 0; }
+  .choice span small { display:block; color:var(--muted); }
+  textarea { width:100%; min-height:3.2em; font:inherit; border:1px solid var(--rule); border-radius:8px; padding:8px; margin:6px 0; }
+  button { font:inherit; font-weight:600; border:none; border-radius:8px; padding:8px 14px; background:var(--accent); color:#fff; cursor:pointer; }
+  button:disabled { opacity:0.5; cursor:default; }
+  .props { list-style:none; margin:0; padding:0; }
+  .props li { border-top:1px solid var(--rule); padding:12px 0; display:grid; grid-template-columns:1fr auto; gap:4px 16px; }
+  .props li:first-child { border-top:none; }
+  .chip { font-size:0.8rem; font-weight:700; border-radius:999px; padding:2px 10px; white-space:nowrap; align-self:start; justify-self:start; }
+  .chip.good { color:var(--good); background:var(--goodSoft); }
+  .chip.bad { color:var(--bad); background:var(--badSoft); }
+  .chip.warn { color:var(--warn); background:var(--warnSoft); }
+  .chip.quiet { color:var(--muted); background:var(--rule); }
+  .props .choice-said { color:var(--muted); font-size:0.94rem; grid-column:1 / -1; }
+  details { grid-column:1 / -1; font-size:0.88rem; }
+  details pre { white-space:pre-wrap; word-break:break-word; background:var(--page); border-radius:8px; padding:8px; margin:6px 0 0; font-size:0.82rem; }
+  .empty { color:var(--muted); }
+  .studio-action { border-top:1px solid var(--rule); padding:12px 0; }
+  .studio-action:first-child { border-top:none; padding-top:0; }
+  .studio-action h3 { font-size:1rem; margin:0 0 8px; font-weight:600; }
+  .studio-ask, .studio-way { margin:0; }
+  .studio-ways { list-style:none; margin:4px 0 0 9px; padding:0 0 0 14px; border-left:2px solid var(--rule); }
+  .studio-ways > li { position:relative; padding:4px 0; }
+  .studio-ways > li::before { content:''; position:absolute; left:-14px; top:15px; width:10px; border-top:2px solid var(--rule); }
+  .studio-way, .studio-on { color:var(--muted); }
+  .studio-on { margin:4px 0 0; }
+  .studio-fold summary { cursor:pointer; color:var(--muted); }
+  .studio-folded { margin:4px 0 0; padding-left:10px; border-left:2px dashed var(--rule); }
+  .studio-outcome { display:grid; grid-template-columns:20px minmax(0, 1fr); align-items:center; gap:2px 8px; margin:2px 0 0; }
+  .studio-said, .studio-ask, .studio-way, .studio-checks li { overflow-wrap:anywhere; }
+  .studio-end { font-weight:600; }
+  .studio-outcome[data-status="red"] .studio-end { color:var(--bad); }
+  .studio-outcome[data-status="green"] .studio-end { color:var(--good); }
+  .studio-checks { list-style:none; margin:0; padding:0; grid-column:2; display:flex; flex-wrap:wrap; gap:2px 12px; font-size:0.9rem; color:var(--muted); }
+  .studio-checks li { min-width:0; }
+  .studio-checks [data-verdict="fails"] { color:var(--bad); font-weight:600; }
+  .studio-checks [data-verdict="cannot say"] { color:var(--warn); }
+  .studio-unnamed, .studio-waiting { color:var(--faint); }
+  .studio-stack { display:block; max-width:100%; height:auto; }
+  .studio-band { fill:var(--page); }
+  .studio-band[data-shade="1"] { fill:#eef2f7; }
+  .studio-section rect { fill:var(--paper); stroke:var(--faint); }
+  .studio-canvas { fill:var(--paper); }
+  .studio-section-name { fill:var(--ink); }
+  .studio-section[data-named="false"] .studio-section-name { fill:var(--faint); }
+  .studio-section-does { fill:var(--muted); }
+  .agent-layer { position:absolute; left:0; top:0; width:0; height:0; z-index:20; pointer-events:none; }
+  .agent-ring { position:absolute; border-radius:10px; box-shadow:0 0 0 2px var(--agent), 0 0 0 8px var(--agentSoft); }
+  .agent-bubble { position:absolute; pointer-events:auto; background:var(--paper); border:1px solid var(--agent); border-radius:4px 14px 14px 14px;
+    padding:8px 30px 10px 12px; box-shadow:0 10px 28px rgba(15,23,42,0.18); font-size:0.94rem; }
+  .agent-tail { position:absolute; top:-7px; width:12px; height:12px; background:var(--paper); border-left:1px solid var(--agent); border-top:1px solid var(--agent); transform:rotate(45deg); }
+  .agent-bubble[data-side="right"] { border-radius:14px 14px 14px 14px; }
+  .agent-bubble[data-side="right"] .agent-tail { transform:rotate(-45deg); }
+  .agent-who { margin:0 0 2px; font-size:0.72rem; font-weight:700; letter-spacing:0.06em; text-transform:uppercase; color:var(--agent); }
+  .agent-who span { color:var(--muted); font-weight:600; }
+  .agent-says { margin:0; overflow-wrap:anywhere; }
+  .agent-close { position:absolute; top:4px; right:4px; background:none; color:var(--muted); padding:2px 8px; font-size:1rem; line-height:1; }
+  .agent-in { animation:agent-in 280ms ease-out both; }
+  @keyframes agent-in { from { opacity:0; transform:translateY(6px); } to { opacity:1; transform:none; } }
+  @media (prefers-reduced-motion: reduce) { .agent-in { animation:none; } }
+  @media (max-width:640px) { .props li { grid-template-columns:1fr; } }
+</style>
+</head>
+<body>
+<main>
+  <header>
+    <h1>Yichus studio<span id="project"></span></h1>
+    <p id="updated">Waiting for your agent.</p>
+    <p>Ask your agent what anything here means.</p>
+  </header>
+  <section aria-labelledby="h-asked" data-section="asked">
+    <h2 id="h-asked">${PAGE_HEADINGS.asked}</h2>
+    <p class="label">Your words</p>
+    <p class="yours" id="description">Nothing yet. Tell your agent what you want to build.</p>
+  </section>
+  <section aria-labelledby="h-now" data-section="now">
+    <h2 id="h-now">${PAGE_HEADINGS.now}</h2>
+    <div class="frame"><span class="tag">Yichus output</span>
+      <p class="now" id="summary">No checks have run yet.</p>
+    </div>
+  </section>
+  <section aria-labelledby="h-questions" id="questions-section" data-section="questions" hidden>
+    <h2 id="h-questions">${PAGE_HEADINGS.questions}</h2>
+    <p class="lede">Your agent will ask you these too. Answer here or in the chat, whichever is easier.</p>
+    <div class="frame"><span class="tag">Yichus output</span><div id="questions"></div></div>
+  </section>
+  <section aria-labelledby="h-props" data-section="props">
+    <h2 id="h-props">${PAGE_HEADINGS.props}</h2>
+    <div class="frame"><span class="tag">Yichus output</span><ul class="props" id="props"><li class="empty">No properties chosen yet.</li></ul></div>
+  </section>
+  <section aria-labelledby="h-happens" data-section="happens">
+    <h2 id="h-happens">${PAGE_HEADINGS.happens}</h2>
+    <p class="lede">Each thing your app does, every way it can go, and what you get at the end, in the words you and your agent chose.</p>
+    <p class="label">Drawn by Yichus. Words in italics are your agent's, not checked</p>
+    <div class="frame"><div id="happens"><p class="empty">This appears once the program compiles.</p></div></div>
+  </section>
+  <section aria-labelledby="h-sections" data-section="sections">
+    <h2 id="h-sections">${PAGE_HEADINGS.sections}</h2>
+    <p class="lede">The parts of your app, stacked: each layer is built only from the layers below it.</p>
+    <p class="label">Drawn by Yichus. Words in italics are your agent's, not checked</p>
+    <div class="frame"><div id="sections"><p class="empty">This appears once the program compiles.</p></div></div>
+  </section>
+  <section aria-labelledby="h-map" data-section="map">
+    <h2 id="h-map">${PAGE_HEADINGS.map}</h2>
+    <div class="frame"><div class="system-map" id="map"><p class="empty">The map appears once the program compiles.</p></div></div>
+  </section>
+</main>
+<script type="module">
+import { mount } from './system-map.js';
+import { mountSections, mountWhatHappens, reportViewing, showMarks } from './studio-views.js';
+
+const STATUS = ${JSON.stringify(PAGE_STATUS)};
+const NO_ACTIONS = ${JSON.stringify(NO_ACTIONS)};
+const el = (tag, props = {}, ...kids) => { const n = Object.assign(document.createElement(tag), props); n.append(...kids); return n; };
+let mapHash = null, drawn = '';
+
+function questionCard(q, saved) {
+  const card = el('div', { className: 'question' });
+  card.dataset.question = q.id;
+  card.append(el('p', { className: 'ask', textContent: q.ask }), el('p', { className: 'why', textContent: q.why }));
+  const name = 'q-' + q.id;
+  for (const c of q.choices) {
+    const input = el('input', { type: 'radio', name, value: c.id, checked: saved?.choice === c.id });
+    card.append(el('label', { className: 'choice' }, input, el('span', {}, c.label, el('small', { textContent: c.means }))));
+  }
+  const words = el('textarea', { placeholder: 'In your own words (optional)', value: saved?.words ?? '' });
+  const status = el('span', { className: 'empty', textContent: saved ? ' Saved. Your agent will check it next.' : '' });
+  const save = el('button', { type: 'button', textContent: 'Save answer' });
+  save.addEventListener('click', async () => {
+    const picked = card.querySelector('input[name="' + CSS.escape(name) + '"]:checked');
+    if (!picked) { status.textContent = ' Pick one of the choices first.'; return; }
+    save.disabled = true;
+    const label = q.choices.find(c => c.id === picked.value).label;
+    const response = await fetch('/answer', { method: 'POST', headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ question: q.id, choice: picked.value, words: words.value.trim() || label }) });
+    const result = await response.json();
+    status.textContent = result.ok ? ' Saved. Your agent will check it next.' : ' ' + result.error;
+    save.disabled = false;
+  });
+  card.append(el('p', { className: 'label', textContent: 'Your words' }), words, save, status);
+  return card;
+}
+
+function ruleRow(r) {
+  const [words, tone] = STATUS[r.status];
+  const li = el('li', {}, el('span', { textContent: 'A rule you gave: ' }, el('em', { textContent: r.rule })), el('span', { className: 'chip ' + tone, textContent: words }));
+  li.append(el('span', { className: 'choice-said', textContent: 'Checked with ' + (r.laws === 1 ? '1 law' : r.laws + ' laws') + ' your agent wrote.' }));
+  return li;
+}
+
+function propertyRow(p, saved) {
+  const stale = saved && (!p.answer || p.answer.answeredAt !== saved.answeredAt);
+  const [words, tone] = STATUS[stale ? 'pending' : p.status];
+  const answer = stale ? saved : p.answer;
+  const label = p.question.choices.find(c => c.id === answer.choice)?.label ?? answer.choice;
+  const li = el('li', {}, el('span', { textContent: p.question.ask }), el('span', { className: 'chip ' + tone, textContent: words }));
+  li.dataset.property = p.question.id;
+  li.append(el('span', { className: 'choice-said', textContent: 'You chose: ' + label + (answer.words && answer.words !== label ? ' ("' + answer.words + '")' : '') }));
+  return li;
+}
+
+async function refresh() {
+  const { state, requirements } = await (await fetch('/state')).json();
+  const savedOf = id => requirements.answers.find(a => a.question === id);
+  if (requirements.description) document.getElementById('description').textContent = requirements.description;
+  if (!state) return;
+  document.getElementById('project').textContent = ': ' + state.project;
+  document.getElementById('updated').textContent = 'Last checked ' + new Date(state.updatedAt).toLocaleTimeString() + '.';
+  document.getElementById('summary').textContent = state.summary;
+  const open = state.properties.filter(p => p.status === 'unanswered' && !savedOf(p.question.id));
+  document.getElementById('questions-section').hidden = !open.length;
+  // Keep a half-written answer: only rebuild cards when the questions change.
+  const qs = document.getElementById('questions');
+  const ids = open.map(p => p.question.id).join(' ');
+  if (qs.dataset.ids !== ids) { qs.dataset.ids = ids; qs.replaceChildren(...open.map(p => questionCard(p.question, savedOf(p.question.id)))); }
+  const chosen = state.properties.filter(p => p.answer || savedOf(p.question.id));
+  const rows = [...state.rules.map(ruleRow), ...chosen.map(p => propertyRow(p, savedOf(p.question.id)))];
+  document.getElementById('props').replaceChildren(...(rows.length ? rows : [el('li', { className: 'empty', textContent: 'No properties chosen yet.' })]));
+  // Redrawn only when the words or the program change.
+  const views = JSON.stringify([state.hasActions, state.whatHappens, state.sections]);
+  if (views !== drawn) {
+    drawn = views;
+    const happens = document.getElementById('happens');
+    if (state.hasActions === false) happens.replaceChildren(el('p', { className: 'empty', textContent: NO_ACTIONS }));
+    else if (state.whatHappens) mountWhatHappens(happens, state.whatHappens);
+    else happens.replaceChildren(el('p', { className: 'empty', textContent: 'This appears once the program compiles.' }));
+    if (state.sections) mountSections(document.getElementById('sections'), state.sections);
+  }
+  const map = document.getElementById('map');
+  if (state.map && state.sourcesHash !== mapHash) { mapHash = state.sourcesHash; mount(map, state.map); }
+  else if (!state.map && state.mapError) map.replaceChildren(el('p', { className: 'empty', textContent: 'The map could not be drawn: ' + state.mapError }));
+  // Last, so each note is placed over the pictures as they are now drawn.
+  showMarks(state.marks);
+  viewing(state.drawing);
+}
+
+// What the person has in view goes to the studio, so their agent can follow
+// along when they say "this one".
+const viewing = reportViewing(body => fetch('/viewing', { method: 'POST', headers: { 'content-type': 'application/json' }, body }));
+
+new EventSource('/events').addEventListener('change', () => refresh());
+refresh();
+</script>
+</body>
+</html>
+`;
+
+// src/studio/viewing.ts
+import fs5 from "fs";
+import path5 from "path";
+import { z as z9 } from "zod";
+var PAGE_SECTIONS = ["asked", "now", "questions", "props", "happens", "sections", "map"];
+var Id = z9.string().min(1).max(200);
+var Ids = z9.array(Id).max(1e3);
+var Section = z9.enum(PAGE_SECTIONS);
+var Touched = z9.discriminatedUnion("kind", [
+  z9.object({ kind: z9.literal("section"), id: Section }).strict(),
+  z9.object({ kind: z9.enum(["part", "question", "property"]), id: Id }).strict()
+]);
+var Report2 = z9.object({
+  /** The page's tab is the one in front. */
+  shown: z9.boolean(),
+  sections: z9.array(Section).max(PAGE_SECTIONS.length),
+  /** Anchors of the drawn parts on screen (person.ts). */
+  parts: Ids,
+  questions: Ids,
+  /** Question ids of the properties shown. */
+  properties: Ids,
+  /** Anchors of the folds the person opened. */
+  open: Ids,
+  touched: Touched.nullable(),
+  /** The drawing the anchors belong to (person.ts), or null before one is drawn. */
+  drawing: z9.string().max(64).nullable()
+}).strict();
+var Viewing = Report2.extend({ schemaVersion: z9.literal("yichus-viewing-1"), at: z9.string() }).strict();
+var viewingPath = (root) => path5.join(studioDir(root), "viewing.json");
+function loadViewing(root) {
+  const file = viewingPath(root);
+  if (!fs5.existsSync(file)) return null;
+  const parsed = Viewing.safeParse(JSON.parse(fs5.readFileSync(file, "utf8")));
+  if (!parsed.success) throw new Error(`${file} is not a yichus-viewing-1 file: ${z9.prettifyError(parsed.error)}`);
+  return parsed.data;
+}
+function recordViewing(root, report, now) {
+  const parsed = Report2.safeParse(report);
+  if (!parsed.success) return { ok: false, error: `The page's report is not one this studio reads. ${z9.prettifyError(parsed.error)}` };
+  ensureStudioDir(root);
+  const file = viewingPath(root), written = `${file}.${process.pid}.tmp`;
+  fs5.writeFileSync(written, `${JSON.stringify(Viewing.parse({ schemaVersion: "yichus-viewing-1", at: now.toISOString(), ...parsed.data }), null, 2)}
+`);
+  fs5.renameSync(written, file);
+  return { ok: true };
+}
+
+// src/studio/page-view.ts
+var quoted = (words, missing) => words === null ? missing : `"${words}"`;
+var say = (phrase) => phrase.map((p) => typeof p === "string" ? p : `"${p.theirs}"`).join("");
+var TICK = { holds: "\u2713", fails: "\u2717", "cannot say": "?" };
+var ENDING = {
+  grey: "no expectation is false here",
+  red: "something expected is false here",
+  green: "an ending that was broken is fixed",
+  unchecked: "the check cannot say"
+};
+function ago(from, now) {
+  const seconds = Math.max(0, Math.round((now.getTime() - Date.parse(from)) / 1e3));
+  const [n, unit] = seconds < 120 ? [seconds, "second"] : seconds < 7200 ? [Math.round(seconds / 60), "minute"] : [Math.round(seconds / 3600), "hour"];
+  return `${n} ${unit}${n === 1 ? "" : "s"} ago`;
+}
+function pageText(root, pageUrl, now, surface) {
+  const state = readState(root);
+  const { description, answers, names = {} } = loadRequirements(root);
+  const marks = loadMarks(root);
+  const { sections, whatHappens, anchors, drawing } = state ? personDiagrams(state, names) : { sections: null, whatHappens: null, anchors: /* @__PURE__ */ new Map(), drawing: null };
+  const codeAt = new Map([...anchors].map(([code, anchor]) => [anchor, code]));
+  const said2 = /* @__PURE__ */ new Map();
+  const part = (anchor, words) => {
+    said2.set(codeAt.get(anchor), words);
+    return `[${codeAt.get(anchor)}]`;
+  };
+  const out = [`The studio page${pageUrl ? ` (${pageUrl})` : ""}, as the person sees it now. Words in quotes are yours or the person's; the rest is computed. [ids] are what ${surface.name("yichus_point")} takes.`];
+  const heading = (key) => out.push("", `## ${PAGE_HEADINGS[key]}`);
+  out.push("", "## What the person has in view");
+  const inView = out.length;
+  heading("asked");
+  out.push(description ? `"${description}"` : "Nothing yet.");
+  heading("now");
+  out.push(state ? state.step.summary : "No checks have run yet.");
+  const savedOf = (id) => answers.find((a) => a.question === id);
+  const open = (state?.properties ?? []).filter((p) => p.status === "unanswered" && !savedOf(p.question.id));
+  if (open.length) {
+    heading("questions");
+    for (const { question: q } of open) out.push(`question ${q.id}: ${q.ask}`, ...q.choices.map((c) => `  - ${c.label}: ${c.means}`));
+  }
+  heading("props");
+  const chosen = (state?.properties ?? []).filter((p) => p.answer || savedOf(p.question.id));
+  const rules = state?.rules ?? [];
+  if (!chosen.length && !rules.length) out.push("No properties chosen yet.");
+  for (const r of rules) out.push(`A rule the person gave: "${r.rule}" Status: ${PAGE_STATUS[r.status][0]}. Checked with ${r.laws.length === 1 ? "1 law" : `${r.laws.length} laws`} you wrote.`);
+  for (const p of chosen) {
+    const saved = savedOf(p.question.id);
+    const stale = saved && (!p.answer || p.answer.answeredAt !== saved.answeredAt);
+    const answer = stale ? saved : p.answer;
+    const label2 = p.question.choices.find((c) => c.id === answer.choice)?.label ?? answer.choice;
+    out.push(`question ${p.question.id}: ${p.question.ask} Status: ${PAGE_STATUS[stale ? "pending" : p.status][0]}. They chose ${label2}${answer.words && answer.words !== label2 ? ` ("${answer.words}")` : ""}.`);
+  }
+  heading("happens");
+  const step = (s, pad) => {
+    if (s.kind === "outcome") {
+      const end = `${s.refused ? "turned away" : "answered"}${s.words ? ` "${s.words}"` : ""}`;
+      return [`${pad}${part(s.anchor, end)} ${end}: ${ENDING[s.status]}`, ...s.checks.map((c) => `${pad}  ${TICK[c.verdict]} ${say(c.says)}`)];
+    }
+    const asks = quoted(s.words, "a check not described yet");
+    return [`${pad}${part(s.anchor, asks)} checks ${asks}`, ...s.ways.flatMap((w) => {
+      const words = quoted(w.words, "a way not described yet");
+      return [`${pad}  way ${words}${w.anchor === w.then.anchor ? "" : ` ${part(w.anchor, words)}`}:`, ...step(w.then, `${pad}    `)];
+    })];
+  };
+  if (state?.hasActions === false) out.push(NO_ACTIONS);
+  else if (!whatHappens) out.push(state?.whatHappensError ? `It could not be drawn: ${state.whatHappensError}` : "This appears once the program compiles.");
+  else {
+    if (!whatHappens.actions.length && !whatHappens.waiting) out.push("The app has no actions yet.");
+    for (const a of whatHappens.actions) {
+      const title2 = quoted(a.title, "an action not described yet");
+      out.push(`${part(a.anchor, title2)} ${title2}`, ...a.first ? step(a.first, "  ") : ["  This action could not be followed."]);
+    }
+    if (whatHappens.waiting) out.push(`${whatHappens.waiting} more ${whatHappens.waiting === 1 ? "action is" : "actions are"} not described yet.`);
+  }
+  heading("sections");
+  const records = (verb, names2) => names2.length ? [`${verb} ${names2.map((n) => quoted(n, "a kind of record not named yet")).join(", ")}`] : [];
+  const does = (s) => [...records("changes", s.changes), ...records("looks at", s.looks)].join(" \xB7 ") || "keeps no records itself";
+  if (!sections) out.push("This appears once the program compiles.");
+  else sections.forEach((layer, i) => {
+    out.push(`layer ${i + 1} of ${sections.length}${i === 0 ? ", the top" : ""}:`);
+    for (const s of layer) {
+      const name = quoted(s.name, "a part not named yet");
+      out.push(`  ${part(s.anchor, name)} ${name}: ${does(s)}`);
+    }
+  });
+  heading("map");
+  if (state?.map) {
+    const parts = nameableParts(state.map, ownPackages(state.layers));
+    const unnamed = parts.filter((p) => !(p.code in names)).length;
+    out.push(`The system map of the program, drawn with the person's names for ${parts.length - unnamed} of its ${parts.length} parts${unnamed === 1 ? "; the other one shows its code name" : unnamed ? `; the other ${unnamed} show their code names` : ""}. api_abstraction_map gives the map itself.`);
+  } else out.push(state?.mapError ? `The map could not be drawn: ${state.mapError}` : "The map appears once the program compiles.");
+  out.push("", "## Your notes on the page");
+  const report = loadViewing(root);
+  const viewing = report && { ...report, current: report.drawing === drawing };
+  const visible = new Set(!viewing?.current ? [] : viewing.parts.flatMap((a) => codeAt.has(a) ? [codeAt.get(a)] : []));
+  const notes = marks?.marks.filter((m) => anchors.has(m.at)) ?? [];
+  if (!notes.length) out.push(`None. ${surface.name("yichus_point")} puts a note over a part of the page.`);
+  else out.push(`Said ${ago(marks.said, now)}:`, ...notes.map((m) => `  [${m.at}] "${m.note}"${visible.has(m.at) ? " (on screen)" : ""}`));
+  out.splice(inView, 0, ...inViewLines(viewing, codeAt, said2, now, pageUrl));
+  return `${out.join("\n")}
+`;
+}
+function inViewLines(viewing, codeAt, said2, now, pageUrl) {
+  if (!viewing) return [`The page has not said what is on screen: it may not be open. ${pageUrl ? `Give the person its link: ${pageUrl}` : "The page is not running: start `yichus studio --page` in the background in this folder, then run this again for its link."}`];
+  const parts = (anchors) => !viewing.current ? [] : anchors.flatMap((a) => codeAt.has(a) ? [`[${codeAt.get(a)}] ${said2.get(codeAt.get(a))}`] : []);
+  const list = (what, items) => items.length ? [`${what}:`, ...items.map((i) => `  ${i}`)] : [];
+  const { touched } = viewing;
+  const clicked = !touched ? [] : touched.kind === "section" ? [`Last clicked: in ${PAGE_HEADINGS[touched.id]}.`] : touched.kind === "question" ? [`Last clicked: question ${touched.id}.`] : touched.kind === "property" ? [`Last clicked: the property of question ${touched.id}.`] : parts([touched.id]).map((p) => `Last clicked: ${p}`);
+  return [
+    `The page said this ${ago(viewing.at, now)}. ${viewing.shown ? "Its tab is in front." : "Its tab is behind another one."}`,
+    `On screen: ${viewing.sections.map((s) => PAGE_HEADINGS[s]).join(", ") || "nothing of the page"}.`,
+    ...viewing.current ? [] : ["The pictures have changed since, so which of their parts are in view is not known until the page redraws and says again."],
+    ...list("Parts on screen", parts(viewing.parts)),
+    ...list("Questions on screen", viewing.questions.map((q) => `question ${q}`)),
+    ...list("Properties on screen", viewing.properties.map((q) => `question ${q}`)),
+    ...list("Folds the person opened", parts(viewing.open)),
+    ...clicked
+  ];
+}
+
+// src/studio/reference.ts
+import fs6 from "fs";
+import path6 from "path";
+import { fileURLToPath } from "url";
+
+// src/studio/reference.json
+var reference_default = {
+  guiding: {
+    about: "How to guide the person through the studio page: what each part shows and when to bring it up.",
+    files: [
+      { name: "the-page.md", from: "docs/studio/the-page.md" }
+    ]
+  },
+  porting: {
+    about: "Replacing an app the person already has: reading the old app, where its entry points go, worker routes for webhooks and forms, and bringing its data over.",
+    files: [
+      { name: "porting.md", from: "docs/studio/porting.md" },
+      { name: "worker-authority.md", from: "docs/runtime/worker-authority.md", sections: ["Worker authority in generated APIs", "Secret bootstrap"] }
+    ]
+  },
+  deploy: {
+    about: "What to build for each place the app can run, with a working server, store and Render Blueprint to start from.",
+    files: [
+      { name: "deploy-platforms.md", from: "docs/studio/deploy-platforms.md" },
+      { name: "server.mjs", from: "docs/studio/deploy-example/server.mjs" },
+      { name: "store.mjs", from: "docs/studio/deploy-example/store.mjs" },
+      { name: "render.yaml", from: "docs/studio/deploy-example/render.yaml" }
+    ]
+  },
+  laws: {
+    about: "Writing a rule the person stated as a law the studio checks, and the standard functions the language has.",
+    files: [
+      { name: "laws.md", from: "docs/studio/laws.md" },
+      { name: "consent.bosatsu", from: "docs/studio/laws-example/consent.bosatsu" },
+      { name: "consent-laws.bosatsu", from: "docs/studio/laws-example/consent-laws.bosatsu" },
+      { name: "balance.bosatsu", from: "docs/studio/laws-example/limits/balance.bosatsu" },
+      { name: "balance-listed-laws.bosatsu", from: "docs/studio/laws-example/limits/balance-listed-laws.bosatsu" }
+    ]
+  },
+  "portable-programs": {
+    about: "Work that takes several steps or waits on an outside service, written as one pure step program a rule-free engine drives.",
+    files: [
+      { name: "portable-programs.md", from: "docs/studio/portable-programs.md" },
+      { name: "refund-policy.bosatsu", from: "demos/portable/refund-policy.bosatsu" },
+      { name: "refund-desk.bosatsu", from: "demos/portable/refund-desk.bosatsu" },
+      { name: "refund-test.bosatsu", from: "demos/portable/refund-test.bosatsu" },
+      { name: "refund-desk-one-round.bosatsu", from: "demos/portable/limits/refund-desk-one-round.bosatsu" }
+    ]
+  },
+  "protocol-case": {
+    about: "The failure scenarios the studio checks for an action that must be all or nothing, or must survive an outside service failing: the case format and a complete worked case.",
+    files: [
+      { name: "protocol-cases.md", from: "docs/studio/protocol-cases.md" },
+      { name: "protocol-specification.md", from: "docs/protocol-verification.md", sections: ["Case format: protocol-case-1.0", "Observation predicates", "Trace assertions", "Reachability witnesses", "Interpretation and limits"] },
+      { name: "withdrawal-case.json", from: "eval/corpus/webmcp-traps/iteration-003/programs/Q15/twin/case.json" },
+      { name: "withdrawal.bosatsu", from: "eval/corpus/webmcp-traps/iteration-003/programs/Q15/twin/ledger.bosatsu" }
+    ]
+  },
+  calculator: {
+    about: "A calculation that keeps no records (a calculator, a quote): what the studio checks for it, and putting it on a page with Why on every number.",
+    files: [
+      { name: "calculator.md", from: "docs/studio/calculator.md" }
+    ]
+  }
+};
+
+// src/studio/reference.ts
+var TOPICS = Object.keys(reference_default);
+var BUILT_REFERENCE = fileURLToPath(new URL("./studio-reference/", import.meta.url));
+var REPO_ROOT = fileURLToPath(new URL("../../../../", import.meta.url));
+var builtCopy = (file) => path6.join(BUILT_REFERENCE, file.name);
+function sectionsOf(text3, titles) {
+  const lines = text3.split("\n");
+  let fenced = false;
+  const headings = lines.map((line) => {
+    if (line.startsWith("```")) fenced = !fenced;
+    const match = fenced ? null : /^(#+) (.*)$/.exec(line);
+    return match ? { level: match[1].length, title: match[2] } : null;
+  });
+  const parts = titles.map((title2) => {
+    const start = headings.findIndex((h) => h?.title === title2);
+    if (start < 0) throw new Error(`No section "${title2}" in the reference file`);
+    const level = Math.max(headings[start].level, 2);
+    const end = headings.findIndex((h, i) => i > start && h !== null && h.level <= level);
+    return lines.slice(start, end < 0 ? void 0 : end).join("\n").trim();
+  });
+  return `${parts.join("\n\n")}
+`;
+}
+var topicList = (ask) => ["Reference topics:", ...TOPICS.map((topic) => `  ${topic}: ${reference_default[topic].about} (${ask(topic)})`)].join("\n");
+function readReference(topic, locate) {
+  if (!TOPICS.includes(topic)) return null;
+  return reference_default[topic].files.map((file) => {
+    const text3 = fs6.readFileSync(locate(file), "utf8");
+    return `===== ${file.name} =====
+${file.sections ? sectionsOf(text3, file.sections) : text3}`;
+  }).join("\n\n");
+}
+
+// src/studio/text.ts
+var STATUS_WORDS = {
+  unanswered: "not answered yet",
+  decided: "decided",
+  assumed: "holds under an assumption",
+  proven: "proven",
+  bounded: "holds in every scenario checked",
+  broken: "broken",
+  mismatch: "declared differently from the answer",
+  "needs-case": "needs a failure scenario",
+  "needs-law": "needs a law that checks it",
+  unused: "checked, but no action of the app uses what the law checks",
+  inconclusive: "not decided by the check",
+  "no-check": "no check needed"
+};
+function stepText(state, pageUrl) {
+  const { step } = state;
+  const lines = [`Stage: ${step.stage}. ${step.summary}`, "", "Do this:", ...step.instructions.map((s, i) => `${i + 1}. ${s}`)];
+  if (step.items) lines.push("", `${step.items.heading}:`, ...step.items.lines.map((l) => `  ${l}`));
+  for (const q of step.ask ?? []) {
+    lines.push("", `Question ${q.id}: ${q.ask}`, `  Why it matters: ${q.why}`);
+    for (const c of q.choices) lines.push(`  - ${c.id}: ${c.label}. ${c.means}`);
+  }
+  if (step.evidence?.length) lines.push("", "Evidence (engine output):", ...step.evidence.map((e) => `  ${e}`));
+  const answered = state.properties.filter((p) => p.status !== "unanswered");
+  if (answered.length) {
+    lines.push("", "Properties:");
+    for (const p of answered) {
+      const choice = p.question.choices.find((c) => c.id === p.answer?.choice)?.label ?? p.answer?.choice;
+      lines.push(`  ${p.question.id} (${choice}): ${STATUS_WORDS[p.status]}`);
+    }
+  }
+  if (state.rules.length) {
+    lines.push("", "Rules the person stated:");
+    for (const r of state.rules) lines.push(`  "${r.rule}" (${r.laws.join(", ")}): ${STATUS_WORDS[r.status]}`);
+  }
+  if (pageUrl) lines.push("", `Studio page: ${pageUrl}`);
+  return `${lines.join("\n")}
+`;
+}
+
+// src/studio/mcp.ts
+var INSTRUCTIONS = `Yichus studio: you are building software for a person who will not read the code. Yichus tells you what to do next and checks the properties the person's answers set, and the rules they state become laws it checks.
+
+Why this is worth it to them: they cannot read your code or your tests, so the studio's checks, run again after every change, are their evidence instead of your word. The cost is a less common language that you maintain, on Yichus's MIT-licensed engine and a host they pick; porting in or out is cheap with you doing it. When they ask whether it is worth it, or the app keeps no records (a calculator), answer from yichus_reference topic "guiding", "Is this worth it?".
+
+The loop:
+1. Ask the person what they want built and call yichus_start with their words. If it replaces an app they already have, read yichus_reference topic "porting" first: reading the old app is yours, and the studio sees only the new one.
+2. After every change to the code, call yichus_next and do exactly what it says. It reads the .bosatsu files in the project folder itself; you never paste sources.
+3. When yichus_next lists questions, put each one to the person with its choices and record their answer with yichus_answer. Never answer for them or pick a default: who may see data, what happens when two people act at once, and what happens when a server or an outside service fails are their product decisions.
+4. Never weaken a rule, delete a check or a law, or declare a single server to make a check pass. Change the code. Each rule the person states about what the app must always or never do becomes a law the studio runs; yichus_next asks you to record them with yichus_rules.
+5. Give the person the studio page link from yichus_start, if their browser can reach it (it says when it cannot). It shows the shape of their program, what happens in each thing it does, and whether each property they chose holds. The person reads no documentation: everything they need to know about the steps, the questions, the statuses and the pictures comes from you, a little at a time as it becomes relevant. Read yichus_reference topic "guiding" before you give them the link.
+6. Speak to the person in product terms. They never need code names, file names, tool names or question ids. Name the language only if they ask, but tell them the trade-off of a less common language. When yichus_next asks you to name parts of the program or describe what happens, use the words they would use.
+7. Build only what the person asked for. A calculation that keeps no records needs no server, database or sign-in (yichus_reference topic "calculator"). An app that keeps records runs as a server, and is the same program wherever it runs. The studio asks where once the program has records or actions, and yichus_reference topic "deploy" says how to put it online there. Keep every business decision in pure code: work that takes several steps or waits on outside services is one pure step program that a rule-free engine drives (yichus_reference topic "portable-programs").
+8. While you talk with the person, point at what you mean on the studio page with yichus_point: a section of their app, an action, or a step in one, with a sentence or two as you would say it in the chat. The page shows each note over the pictures as yours, not checked, so never use a note to say something holds; the checks say that. Point again as the conversation moves on, and clear the marks when they no longer help.
+9. You drive the conversation, and the person reads the studio page while you talk. Call yichus_page to see what the page shows them, in words: what they asked for, the questions, each property with its status, what happens in each action, the sections of their app, your notes, and what they have on screen and last clicked. Call it whenever they refer to something on the page ("this one", "the red one", "what does that mean"), and after they answer on the page.
+
+Every api_* tool is available too. Leave out sources and the studio supplies the project's files. Pages on yich.us, such as calculators and the playground, come through a separate connection (@yichus/mcp); building needs only this one.`;
+var START = {
+  name: "yichus_start",
+  description: "Record what the person wants built, in their own words, and get the studio page link to give them. Call this first.",
+  inputSchema: { type: "object", properties: { description: { type: "string", description: "The person's description of the software, unchanged." } }, required: ["description"] }
+};
+var NEXT = {
+  name: "yichus_next",
+  description: "Read the program from the project folder, run the checks, and return the one next step: questions to ask the person, code to fix, a declaration to add, or done. Call after every change.",
+  inputSchema: { type: "object", properties: {} }
+};
+var ANSWER = {
+  name: "yichus_answer",
+  description: "Record the person's answer to a question yichus_next listed: the question id, the id of the choice they picked, and their own words.",
+  inputSchema: { type: "object", properties: {
+    question: { type: "string", description: "The question id from yichus_next." },
+    choice: { type: "string", description: "The id of the choice the person picked." },
+    words: { type: "string", description: "What the person said, in their words." }
+  }, required: ["question", "choice", "words"] }
+};
+var NAME = {
+  name: "yichus_name",
+  description: "Give the parts of the program yichus_next listed (kinds of record, actions, pieces of the program) the short plain names the person would use. The person sees these names instead of the code names, in questions and in the picture.",
+  inputSchema: { type: "object", properties: {
+    names: {
+      type: "object",
+      additionalProperties: { type: "string" },
+      description: `Each code name yichus_next listed, such as a table name or a route path, with a few words in the person's vocabulary, such as "family lists" or "starting a new list".`
+    }
+  }, required: ["names"] }
+};
+var SCENARIO = {
+  name: "yichus_scenario",
+  description: "Record what should happen in actions yichus_next listed, in the person's words: a title, names for the ids the engine computed, and claims the engine checks on each outcome. A scenario replaces any earlier one for the same action. drop removes the scenario of an action the app no longer has.",
+  inputSchema: { type: "object", properties: {
+    scenarios: { type: "array", items: { type: "object", properties: {
+      entry: { type: "string", description: "The action, as yichus_next listed it (route:/path)." },
+      title: { type: "string", description: "What the person does, in their words." },
+      names: { type: "object", additionalProperties: { type: "string" }, description: "Each id yichus_next listed under the action, with the person's words for it." },
+      expect: {
+        type: "array",
+        items: { type: "object", properties: { at: { type: "string" }, claim: { type: "string" } }, required: ["at", "claim"] },
+        description: "What must and must not happen: [not] reads TABLE, writes TABLE, refused, returns CONSTRUCTOR, reaches model or reaches net, at an id."
+      }
+    }, required: ["entry", "title", "names", "expect"] } },
+    drop: { type: "array", items: { type: "string" }, description: "Actions yichus_next reports the app no longer has, whose scenarios to remove." }
+  } }
+};
+var RULES = {
+  name: "yichus_rules",
+  description: "Record the rules the person stated about what the app must always or never do, in their words, each with the laws (Yichus/Law) in the program that check it. A call replaces the whole list; an empty list says they stated none.",
+  inputSchema: { type: "object", properties: {
+    rules: { type: "array", items: { type: "object", properties: {
+      rule: { type: "string", description: "The rule, in the person's words." },
+      laws: { type: "array", items: { type: "string" }, description: "The laws that check it: each a law binding's name, or the name the Law gives itself." }
+    }, required: ["rule", "laws"] } }
+  }, required: ["rules"] }
+};
+var POINT = {
+  name: "yichus_point",
+  description: "Point at parts of the studio page while you talk with the person: each mark puts your short note over the picture, next to a section of their app, an action, or a step in one, marked as your words and not checked. A call replaces the marks before it; an empty list clears them.",
+  inputSchema: { type: "object", properties: {
+    marks: { type: "array", items: { type: "object", properties: {
+      at: { type: "string", description: "What to point at: a section by its code name as yichus_name took it, an action yichus_scenario described (route:/path), or an id yichus_next listed under a described action." },
+      note: { type: "string", description: "What you are saying about it, in the person's words, at most 280 characters." }
+    }, required: ["at", "note"] } }
+  }, required: ["marks"] }
+};
+var PAGE = {
+  name: "yichus_page",
+  description: "See the studio page as the person sees it now, in words, with the id yichus_point takes for each part: the questions, each property and its status, what happens in each action, the sections of their app and your notes. Also what the person has on screen, the folds they opened and what they last clicked. Call it when the person refers to something on the page.",
+  inputSchema: { type: "object", properties: {} }
+};
+var REFERENCE_TOOL = {
+  name: "yichus_reference",
+  description: `Reference material yichus_next asks for. ${TOPICS.map((t) => `${t}: ${reference_default[t].about}`).join(" ")}`,
+  inputSchema: { type: "object", properties: { topic: { type: "string", enum: TOPICS, description: "The topic yichus_next named." } }, required: ["topic"] }
+};
+var StartArgs = z10.object({ description: z10.string().min(1) }).strict();
+var AnswerArgs = z10.object({ question: z10.string().min(1), choice: z10.string().min(1), words: z10.string() }).strict();
+var ScenarioInput = z10.object({
+  entry: z10.string().min(1),
+  title: z10.string().trim().min(1),
+  names: z10.record(z10.string().min(1), z10.string().trim().min(1)),
+  expect: z10.array(z10.object({ at: z10.string().min(1), claim: z10.string().trim().min(1) }).strict())
+}).strict();
+var ScenarioArgs = z10.object({ scenarios: z10.array(ScenarioInput).default([]), drop: z10.array(z10.string().min(1)).default([]) }).refine((a) => a.scenarios.length + a.drop.length > 0, "give at least one scenario or one action to drop");
+var RulesArgs = z10.object({ rules: z10.array(RuleRecord) }).strict();
+var NameArgs = z10.object({ names: z10.record(z10.string().min(1), z10.string().trim().min(1)).refine((names) => Object.keys(names).length > 0) });
+var text = (body, structured, isError = false) => ({ content: [{ type: "text", text: body }], ...structured ? { structuredContent: structured } : {}, isError });
+function studioTool(tool) {
+  const schema = tool.inputSchema;
+  if (!schema.properties || !("sources" in schema.properties)) return tool;
+  return {
+    ...tool,
+    description: [tool.description, "In the studio, leave out sources to check every .bosatsu file in the project folder."].filter(Boolean).join(" "),
+    inputSchema: { ...schema, required: (schema.required ?? []).filter((name) => name !== "sources") }
+  };
+}
+function recordStart(root, args, say2 = MCP) {
+  const parsed = StartArgs.safeParse(args);
+  if (!parsed.success) return { ok: false, error: `${say2.name("yichus_start")} needs the person's description, and nothing else. ${z10.prettifyError(parsed.error)}` };
+  saveRequirements(root, { ...loadRequirements(root), description: parsed.data.description });
+  return { ok: true };
+}
+function recordAnswer(root, args, now, say2 = MCP) {
+  const parsed = AnswerArgs.safeParse(args);
+  if (!parsed.success) return { ok: false, error: `${say2.name("yichus_answer")} needs question, choice and words, and nothing else. ${z10.prettifyError(parsed.error)}` };
+  const state = readState(root);
+  const property = state?.properties.find((p) => p.question.id === parsed.data.question);
+  if (!property) return { ok: false, error: `No question ${parsed.data.question} in the latest ${say2.name("yichus_next")}; ${say2.use("yichus_next")} and use its ids.` };
+  if (!property.question.choices.some((c) => c.id === parsed.data.choice)) {
+    return { ok: false, error: `${parsed.data.choice} is not a choice of ${parsed.data.question}; the choices are ${property.question.choices.map((c) => c.id).join(", ")}.` };
+  }
+  saveRequirements(root, withAnswer(loadRequirements(root), { ...parsed.data, answeredAt: now.toISOString() }));
+  return { ok: true };
+}
+function recordNames(root, args, say2 = MCP) {
+  const parsed = NameArgs.safeParse(args);
+  if (!parsed.success) return { ok: false, error: `${say2.name("yichus_name")} needs names: each code name ${say2.name("yichus_next")} listed, with its plain name.` };
+  const state = readState(root);
+  const parts = /* @__PURE__ */ new Set([...state?.properties.flatMap((p) => p.question.subject ?? []) ?? [], ...state ? drawnParts(state).map((p) => p.code) : []]);
+  const unknown = Object.keys(parsed.data.names).filter((code) => !parts.has(code));
+  if (unknown.length) {
+    const listed = [...parts].slice(0, 20).join(", ") + (parts.size > 20 ? `, and ${parts.size - 20} more` : "");
+    const changed = state && state.sourcesHash !== sourcesHash(projectSources(root)) ? ` The program changed since then: ${say2.use("yichus_next")} first.` : "";
+    return { ok: false, error: `No part named ${unknown.join(", ")} in the latest ${say2.name("yichus_next")}; the parts are ${listed || "none yet"}.${changed}` };
+  }
+  saveRequirements(root, withNames(loadRequirements(root), parsed.data.names));
+  return { ok: true };
+}
+function recordScenarios(root, args, say2 = MCP) {
+  const parsed = ScenarioArgs.safeParse(args);
+  if (!parsed.success) return { ok: false, error: `${say2.name("yichus_scenario")} needs scenarios, each with entry, title, names and expect, or drop. ${z10.prettifyError(parsed.error)}` };
+  const happens = readState(root)?.whatHappens;
+  const entries = new Set(happens?.entries.map((e) => e.entry) ?? []);
+  const unknown = parsed.data.scenarios.map((s) => s.entry).filter((e) => !entries.has(e));
+  if (unknown.length) return { ok: false, error: `No action ${unknown.join(", ")} in the latest ${say2.name("yichus_next")}; the actions are ${[...entries].join(", ") || "none yet"}.` };
+  const gone = new Set(happens?.mismatches.map((m) => m.entry));
+  const kept = parsed.data.drop.filter((e) => !gone.has(e));
+  if (kept.length) return { ok: false, error: `The latest ${say2.name("yichus_next")} does not report ${kept.join(", ")} as gone, so its scenario stays. Only an action the app no longer has can be dropped; replace the scenario of one it still has.` };
+  saveRequirements(root, withScenarios(loadRequirements(root), parsed.data.scenarios, parsed.data.drop));
+  return { ok: true };
+}
+function recordRules(root, args, say2 = MCP) {
+  const parsed = RulesArgs.safeParse(args);
+  if (!parsed.success) return { ok: false, error: `${say2.name("yichus_rules")} needs rules: a list of {"rule": the person's words, "laws": [law names]}, empty if they stated none. ${z10.prettifyError(parsed.error)}` };
+  const laws = readState(root)?.laws ?? [];
+  const known = (ref) => laws.some((l) => l.binding === ref || l.binding.endsWith(`::${ref}`) || l.name === ref);
+  const unknown = [...new Set(parsed.data.rules.flatMap((r) => r.laws).filter((ref) => !known(ref)))];
+  if (unknown.length) {
+    const listed = laws.map((l) => l.binding.slice(l.binding.lastIndexOf("::") + 2)).join(", ");
+    return { ok: false, error: `No law named ${unknown.join(", ")} in the latest ${say2.name("yichus_next")}; the laws are ${listed || "none yet"}. Write the law, ${say2.use("yichus_next")}, then record the rules.` };
+  }
+  saveRequirements(root, { ...loadRequirements(root), rules: parsed.data.rules });
+  return { ok: true };
+}
+function pageNote(pageUrl, say2) {
+  const elsewhere = `If the person's browser is elsewhere (you run in a cloud container or on another computer), tell them the page is not reachable from there, and describe it to them with ${say2.name("yichus_page")}.`;
+  if (!pageUrl) return [
+    `The studio page is not running yet. Start it in the background in this folder with \`yichus studio --page\` and leave it running; ${say2.name("yichus_start")}, ${say2.name("yichus_next")} and ${say2.name("yichus_page")} then give its link. It opens only in a browser on the computer it runs on.`,
+    `${elsewhere} Before you give them the link, ${say2.reference("guiding")}.`
+  ].join("\n");
+  return [
+    `Read the "guiding" reference (${say2.reference("guiding")}), then give the person this link and ask them to keep it open: ${pageUrl}`,
+    `It opens only in a browser on the computer the studio runs on. ${elsewhere}`
+  ].join("\n");
+}
+function createStudioMcpServer({ root, engine, catalog, pageUrl, now = () => /* @__PURE__ */ new Date(), locate = builtCopy }) {
+  const server = new Server({ name: "yichus-studio", version: "0.3.1" }, { capabilities: { tools: {} }, instructions: INSTRUCTIONS });
+  const active = /* @__PURE__ */ new Set();
+  const track = (task) => {
+    active.add(task);
+    void task.finally(() => active.delete(task)).catch(() => {
+    });
+    return task;
+  };
+  let tools = null;
+  const catalogTools2 = async () => tools ??= (await catalog()).map(studioTool);
+  let last = readState(root);
+  server.setRequestHandler(ListToolsRequestSchema, () => track((async () => ({ tools: [START, NEXT, NAME, ANSWER, RULES, SCENARIO, POINT, PAGE, REFERENCE_TOOL, ...await catalogTools2()] }))()));
+  server.setRequestHandler(CallToolRequestSchema, (request) => track(callTool(request.params)));
+  async function callTool(params) {
+    const { name, arguments: args = {} } = params;
+    if (name === "yichus_start") {
+      const result2 = recordStart(root, args);
+      if (!result2.ok) return text(result2.error, void 0, true);
+      return text(`${pageNote(pageUrl, MCP)}
+If this replaces an app the person already has, read yichus_reference topic "porting" first.
+Next: call yichus_next.`, { pageUrl });
+    }
+    if (name === "yichus_next") {
+      last = await direct({ root, engine, requirements: loadRequirements(root), previous: last });
+      const { map: _map, layers: _layers, whatHappens: _whatHappens, ...rest } = last;
+      return text(stepText(last, pageUrl), rest);
+    }
+    if (name === "yichus_answer") {
+      const result2 = recordAnswer(root, args, now());
+      return result2.ok ? text("Recorded. Ask any remaining questions, then call yichus_next.") : text(result2.error, void 0, true);
+    }
+    if (name === "yichus_name") {
+      const result2 = recordNames(root, args);
+      return result2.ok ? text("Recorded. Call yichus_next.") : text(result2.error, void 0, true);
+    }
+    if (name === "yichus_rules") {
+      const result2 = recordRules(root, args);
+      return result2.ok ? text("Recorded. Call yichus_next: it runs every law and says how each rule stands.") : text(result2.error, void 0, true);
+    }
+    if (name === "yichus_scenario") {
+      const result2 = recordScenarios(root, args);
+      return result2.ok ? text("Recorded. Call yichus_next: the engine checks every name and claim.") : text(result2.error, void 0, true);
+    }
+    if (name === "yichus_point") {
+      const result2 = recordMarks(root, args, now());
+      return result2.ok ? text("The page shows your notes now. Go on talking with the person.") : text(result2.error, void 0, true);
+    }
+    if (name === "yichus_page") {
+      if (Object.keys(args).length) return text("yichus_page takes no arguments.", void 0, true);
+      return text(pageText(root, pageUrl, now(), MCP));
+    }
+    if (name === "yichus_reference") {
+      const said2 = readReference(String(args.topic), locate);
+      return said2 ? text(said2) : text(`No reference topic ${String(args.topic)}.
+${topicList((topic) => `topic "${topic}"`)}`, void 0, true);
+    }
+    const tool = (await catalogTools2()).find((t) => t.name === name);
+    if (!tool) return text(`Unknown tool ${name}.`, void 0, true);
+    const filled = { ...args };
+    const props = tool.inputSchema.properties ?? {};
+    if ("sources" in props && filled.sources === void 0) {
+      filled.sources = name === "api_protocol_check" ? [...projectSources(root), ...caseSources(root)] : projectSources(root);
+    }
+    const topology2 = loadRequirements(root).answers.find((a) => a.question === "topology")?.choice;
+    if ("instances" in props && filled.instances === void 0 && topology2) filled.instances = topology2 === "one" ? "1" : "many";
+    const result = await engine.call(name, filled);
+    if (name === "api_guide" && filled.section === void 0 && Array.isArray(result.sections)) {
+      const titles = {
+        ok: true,
+        tool: "api_guide",
+        titles: result.sections.map((s) => s.title),
+        note: "The whole guide is long. Call api_guide with section set to one of these titles, or to part of one."
+      };
+      return text(JSON.stringify(titles), titles);
+    }
+    return text(JSON.stringify(result), result, result.ok !== true);
+  }
+  return {
+    server,
+    async idle() {
+      while (active.size) await Promise.allSettled(active);
+      await new Promise((resolve) => setImmediate(resolve));
+    }
+  };
+}
+
+// src/studio/page-link.ts
+import fs7 from "fs";
+import path7 from "path";
+import { z as z11 } from "zod";
+var PageLink = z11.object({
+  schemaVersion: z11.literal("yichus-page-2"),
+  url: z11.string().url(),
+  pid: z11.number().int().positive(),
+  startedAt: z11.number().int().nonnegative()
+}).strict();
+var pagesDir = (root) => path7.join(studioDir(root), "pages");
+var linkPath = (root, url, pid) => path7.join(pagesDir(root), `${pid}-${new URL(url).port}.json`);
+function writePageLink(root, url, pid = process.pid, startedAt = Date.now()) {
+  ensureStudioDir(root);
+  fs7.mkdirSync(pagesDir(root), { recursive: true });
+  fs7.rmSync(path7.join(studioDir(root), "page.json"), { force: true });
+  const port = new URL(url).port;
+  for (const { file: file2, link } of liveLinks(root)) if (new URL(link.url).port === port) fs7.rmSync(file2, { force: true });
+  const file = linkPath(root, url, pid), written = `${file}.tmp`;
+  fs7.writeFileSync(written, `${JSON.stringify(PageLink.parse({ schemaVersion: "yichus-page-2", url, pid, startedAt }), null, 2)}
+`);
+  fs7.renameSync(written, file);
+}
+function clearPageLink(root, url, pid = process.pid) {
+  fs7.rmSync(linkPath(root, url, pid), { force: true });
+}
+var running = (pid) => {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    return error.code === "EPERM";
+  }
+};
+function liveLinks(root) {
+  const dir = pagesDir(root);
+  if (!fs7.existsSync(dir)) return [];
+  return fs7.readdirSync(dir).filter((name) => name.endsWith(".json")).flatMap((name) => {
+    const file = path7.join(dir, name);
+    let raw;
+    try {
+      raw = JSON.parse(fs7.readFileSync(file, "utf8"));
+    } catch {
+      raw = null;
+    }
+    const parsed = PageLink.safeParse(raw);
+    if (parsed.success && running(parsed.data.pid)) return [{ file, link: parsed.data }];
+    fs7.rmSync(file, { force: true });
+    return [];
+  });
+}
+function runningPageUrl(root) {
+  const live = liveLinks(root).map(({ link }) => link);
+  return live.length ? live.reduce((a, b) => b.startedAt > a.startedAt ? b : a).url : null;
+}
+
+// src/studio/command.ts
+var STUDIO_COMMANDS = /* @__PURE__ */ new Set(["start", "next", "name", "answer", "rules", "scenario", "point", "page", "reference", "studio"]);
+var STUDIO_HELP = `
+Studio (guided building; all take --project DIR, default the current folder).
+Keep the project in a folder of its own, apart from any old app it replaces:
+the studio reads every .bosatsu file in it.
+  yichus studio [--port N]         MCP server on stdio plus the studio page
+  yichus studio --page [--port N]  only the studio page, for the commands below
+  yichus start "DESCRIPTION"       record what the person wants built
+  yichus next [--json]             check the program and print the next step
+  yichus name SUBJECT "NAME" ...   plain names the person sees for parts of the program
+  yichus answer QUESTION CHOICE [--words TEXT]
+  yichus rules FILE.json           the rules the person stated: {"rules": [{"rule": ..., "laws": [...]}]}
+  yichus scenario FILE.json        what should happen in actions: {"scenarios": [...], "drop": [...]}
+  yichus point FILE.json           point at parts of the page: {"marks": [{"at": ..., "note": ...}]}
+  yichus page                      the page as the person sees it now, in words
+  yichus reference [TOPIC]         reference material a step asks for; no topic lists them
+`;
+async function runStudioCommand(argv2, io) {
+  try {
+    const { values, positionals } = parseArgs({ args: argv2, allowPositionals: true, strict: true, options: {
+      project: { type: "string" },
+      json: { type: "boolean" },
+      words: { type: "string" },
+      page: { type: "boolean" },
+      port: { type: "string" }
+    } });
+    const [command, ...rest] = positionals;
+    const root = path8.resolve(values.project ?? ".");
+    const expect = (n, usage) => {
+      if (rest.length !== n) throw new Error(`Usage: ${usage}`);
+    };
+    if (command === "start") {
+      expect(1, 'yichus start "DESCRIPTION"');
+      const result = recordStart(root, { description: rest[0] }, CLI);
+      if (!result.ok) throw new Error(result.error);
+      io.stdout(`Recorded the description.
+${pageNote(runningPageUrl(root), CLI)}
+If this replaces an app the person already has, run \`yichus reference porting\` first.
+Next: yichus next
+`);
+      return 0;
+    }
+    if (command === "name") {
+      if (!rest.length || rest.length % 2) throw new Error('Usage: yichus name SUBJECT "NAME" [SUBJECT "NAME" ...]');
+      const names = Object.fromEntries(rest.flatMap((s, i) => i % 2 ? [] : [[s, rest[i + 1]]]));
+      const result = recordNames(root, { names }, CLI);
+      if (!result.ok) throw new Error(result.error);
+      io.stderr(`Named ${Object.entries(names).map(([subject, name]) => `${subject} "${name}"`).join(", ")}. Next: yichus next
+`);
+      return 0;
+    }
+    if (command === "answer") {
+      expect(2, "yichus answer QUESTION CHOICE [--words TEXT]");
+      const [question, choice] = rest;
+      const result = recordAnswer(root, { question, choice, words: values.words ?? "" }, io.now(), CLI);
+      if (!result.ok) throw new Error(result.error);
+      io.stderr(`Recorded ${choice} for ${question}. Next: yichus next
+`);
+      return 0;
+    }
+    if (command === "rules") {
+      expect(1, "yichus rules FILE.json");
+      const result = recordRules(root, JSON.parse(fs8.readFileSync(path8.resolve(rest[0]), "utf8")), CLI);
+      if (!result.ok) throw new Error(result.error);
+      io.stderr("Recorded the rules. Next: yichus next\n");
+      return 0;
+    }
+    if (command === "scenario") {
+      expect(1, "yichus scenario FILE.json");
+      const result = recordScenarios(root, JSON.parse(fs8.readFileSync(path8.resolve(rest[0]), "utf8")), CLI);
+      if (!result.ok) throw new Error(result.error);
+      io.stderr("Recorded the scenarios. Next: yichus next\n");
+      return 0;
+    }
+    if (command === "point") {
+      expect(1, "yichus point FILE.json");
+      const result = recordMarks(root, JSON.parse(fs8.readFileSync(path8.resolve(rest[0]), "utf8")), io.now());
+      if (!result.ok) throw new Error(result.error);
+      io.stderr("The page shows the notes now.\n");
+      return 0;
+    }
+    if (command === "page") {
+      expect(0, "yichus page");
+      io.stdout(pageText(root, runningPageUrl(root), io.now(), CLI));
+      return 0;
+    }
+    if (command === "reference") {
+      if (rest.length > 1) throw new Error("Usage: yichus reference [TOPIC]");
+      const list = topicList((topic) => `yichus reference ${topic}`);
+      if (!rest.length) {
+        io.stdout(`${list}
+`);
+        return 0;
+      }
+      const said2 = readReference(rest[0], io.locate);
+      if (!said2) throw new Error(`No reference topic ${rest[0]}.
+${list}`);
+      io.stdout(`${CLI_LEGEND}
+
+${said2}
+`);
+      return 0;
+    }
+    if (command === "next") {
+      expect(0, "yichus next [--json]");
+      const state = await direct({ root, engine: await io.engine(), requirements: loadRequirements(root), previous: readState(root), say: CLI });
+      io.stdout(values.json ? `${JSON.stringify(state, null, 2)}
+` : stepText(state, runningPageUrl(root)));
+      return 0;
+    }
+    expect(0, "yichus studio [--page] [--port N]");
+    const port = values.port === void 0 ? null : Number(values.port);
+    if (port !== null && (!Number.isInteger(port) || port < 0 || port > 65535)) throw new Error("--port must be a port number");
+    await io.serve({ root, port, pageOnly: values.page ?? false });
+    return 0;
+  } catch (error) {
+    io.stderr(`Error: ${error instanceof Error ? error.message : String(error)}
+`);
+    return 2;
+  }
+}
+
+// src/run.ts
+var HELP = `yichus \u2014 the Yichus WebMCP analysis engine, locally
+
+  yichus tools
+  yichus call TOOL [--args JSON_FILE|-] [--source FILE ... | --project DIR]
+  yichus verify FILE ... [--instances 1|many] [--block-on-warning ID ...]
+  yichus lean FILE ... --lean-wasm-root DIRECTORY [--timeout-ms N]
+${STUDIO_HELP}
+Options:
+  --source FILE       Add a Bosatsu source (repeatable; call only). Files
+                      sharing a basename are named by their folders.
+  --project DIR       For a tool that requires sources, given no --source
+                      and no args.sources: every .bosatsu file under DIR
+                      (default the current folder), as the studio reads
+                      it (call only).
+  --args FILE|-       Tool arguments as a JSON object; - reads stdin.
+  --block-on-warning ID  A property id whose warning blocks the verdict, as a
+                      violation would (repeatable; all names every property;
+                      verify only). An id the verdict lacks exits 2.
+  --output FILE       Write the result to this file instead of stdout.
+  --select /POINTER   Extract a JSON field; strings are written verbatim.
+  --expect /PTR=JSON  Fail unless a result field exactly equals JSON (repeatable).
+  --bundle FILE       Explicit Scala.js engine override.
+  --lean-wasm-root DIR  Pinned local Lean Wasm installation (lean only).
+  --timeout-ms N      Total proof budget, at most 300000 (lean only).
+  --help, -h          Show this help without loading the engine.
+
+tools and call expose Yichus/Mcp::catalog without a second analysis layer.
+verify runs api_verify and requires verdict.proven to be exactly true.
+Its JSON opens with proven, the verdict; ok only says the check ran.
+It always prints a plain summary of the verdict to stderr: each property's
+status, the first failure's evidence (parse errors carry file:line:col),
+and where the full JSON verdict went.
+lean runs the pinned Wasm kernel and requires all discovered obligations to be verified.
+It prints on stderr whether each law was proven and, if not, why: Lean
+rejected it (with Lean's words), the law is outside what Lean Wasm admits,
+the --timeout-ms budget ran out, or no runtime is installed (with the
+install command).
+call requires ok:true; use --expect to gate on a check's actual verdict.
+When the tool fails, stderr gives its error as plain text, what to do
+instead when the engine names the failure's kind (errorKinds), and where
+the JSON result went. An unmet --expect is one JSON line on stderr.
+With --output it says on stderr where the result went; api_abstraction_map
+also says what it is mapping before it starts, and afterwards its layer,
+reuse and copy counts in words, each with the JSON field that lists them.
+No browser is needed. Page editing, visible feedback and app sessions use
+the separate @yichus/mcp browser relay.
+
+Exit status: 0 = completed and expectations met; 1 = tool/check rejected;
+2 = invalid invocation (including a --block-on-warning id the verdict lacks), malformed engine result, or execution/IO failure
+(for lean: no runtime, the budget ran out, or the runtime failed).
+JSON diagnostics remain available for rejected checks: the result JSON,
+or, when --select withheld it, a JSON line on stderr. --select emits no
+artifact on rejection. A named output is removed before execution so a
+failed check cannot leave yesterday's artifact behind.
+`;
+function pointerParts(pointer) {
+  if (pointer === "") return [];
+  if (!pointer.startsWith("/") || /~(?:[^01]|$)/u.test(pointer)) {
+    throw new Error(`Invalid JSON Pointer: ${pointer}`);
+  }
+  return pointer.slice(1).split("/").map((part) => part.replaceAll("~1", "/").replaceAll("~0", "~"));
+}
+function readPointer(value, pointer) {
+  for (const part of pointerParts(pointer)) {
+    if (value === null || typeof value !== "object" || !Object.hasOwn(value, part)) return void 0;
+    value = value[part];
+  }
+  return value;
+}
+function objectValue(value, label2) {
+  const parsed = z12.record(z12.string(), z12.unknown()).safeParse(value);
+  if (!parsed.success) throw new Error(`${label2} must be a JSON object`);
+  return parsed.data;
+}
+var objectJson = (raw, label2) => objectValue(JSON.parse(raw), label2);
+var FLAGS = {
+  source: { type: "string", multiple: true },
+  args: { type: "string" },
+  project: { type: "string" },
+  instances: { type: "string" },
+  "block-on-warning": { type: "string", multiple: true },
+  output: { type: "string" },
+  bundle: { type: "string" },
+  "lean-wasm-root": { type: "string" },
+  "timeout-ms": { type: "string" },
+  select: { type: "string" },
+  expect: { type: "string", multiple: true }
+};
+var TimeoutMs = z12.coerce.number().int().min(1).max(3e5);
+function parse(argv2) {
+  const { values, positionals, tokens } = parseArgs2({ args: argv2, options: FLAGS, allowPositionals: true, strict: true, tokens: true });
+  const named2 = tokens.flatMap((token) => token.kind === "option" ? [token.name] : []);
+  const repeated = named2.find((name, i) => !("multiple" in FLAGS[name]) && named2.indexOf(name) !== i);
+  if (repeated) throw new Error(`Repeated --${repeated}`);
+  const [command, ...rest] = positionals;
+  if (command !== "tools" && command !== "call" && command !== "verify" && command !== "lean") {
+    throw new Error("Expected tools, call TOOL, verify FILE, or lean FILE; use --help for usage.");
+  }
+  const opts = { command, sources: [], expects: [], blockOnWarnings: values["block-on-warning"] ?? [] };
+  if (command === "call") {
+    opts.tool = rest.shift();
+    if (!opts.tool) throw new Error("call requires a tool name");
+  }
+  if ((command === "tools" || command === "call") && rest.length) throw new Error(`Unexpected argument: ${rest[0]}`);
+  opts.sources = [...rest, ...values.source ?? []];
+  opts.args = values.args;
+  opts.project = values.project;
+  if (opts.project !== void 0 && command !== "call") throw new Error("--project is for call");
+  if (opts.project !== void 0 && opts.sources.length) throw new Error("Use either --source files or --project, not both");
+  opts.instances = values.instances;
+  opts.output = values.output;
+  opts.bundle = values.bundle;
+  opts.leanWasmRoot = values["lean-wasm-root"];
+  if (values["timeout-ms"] !== void 0) {
+    const timeout = TimeoutMs.safeParse(values["timeout-ms"]);
+    if (!timeout.success) throw new Error("--timeout-ms must be an integer from 1 to 300000");
+    opts.timeoutMs = timeout.data;
+  }
+  if (values.select !== void 0) {
+    pointerParts(values.select);
+    opts.select = values.select;
+  }
+  for (const value of values.expect ?? []) {
+    const equal = value.indexOf("=");
+    if (equal < 0) throw new Error("--expect requires /POINTER=JSON");
+    const pointer = value.slice(0, equal);
+    pointerParts(pointer);
+    opts.expects.push({ pointer, value: JSON.parse(value.slice(equal + 1)) });
+  }
+  if (command === "tools" && (opts.sources.length || opts.args || opts.instances)) {
+    throw new Error("tools does not accept sources or tool arguments");
+  }
+  if (command === "verify") {
+    if (!opts.sources.length) throw new Error("verify requires at least one Bosatsu file");
+    if (opts.args) throw new Error("verify accepts --instances; use call for arbitrary arguments");
+    if (values.source !== void 0) throw new Error("verify takes positional files; --source is for call");
+    if (opts.instances && opts.instances !== "1" && opts.instances !== "many") {
+      throw new Error("--instances must be 1 or many");
+    }
+    opts.expects.push({ pointer: "/verdict/proven", value: true });
+  } else if (command === "lean") {
+    if (!opts.sources.length) throw new Error("lean requires at least one Bosatsu file");
+    if (!opts.leanWasmRoot) throw new Error("lean requires --lean-wasm-root");
+    if (opts.args || opts.instances || values.source !== void 0)
+      throw new Error("lean takes positional files and a Wasm root");
+    opts.expects.push({ pointer: "/allVerified", value: true });
+  } else if (opts.instances) {
+    throw new Error("--instances is for verify; pass catalog arguments through --args for call");
+  }
+  if (command !== "verify" && opts.blockOnWarnings.length)
+    throw new Error("--block-on-warning is for verify; pass block_on_warnings through --args for call");
+  if (command !== "lean" && (opts.leanWasmRoot || opts.timeoutMs !== void 0))
+    throw new Error("--lean-wasm-root and --timeout-ms are for lean");
+  return opts;
+}
+function closestSibling(file) {
+  const dir = path9.dirname(file);
+  const want = path9.basename(file);
+  let names;
+  try {
+    names = fs9.readdirSync(dir);
+  } catch {
+    return void 0;
+  }
+  const distance = (a, b) => {
+    const row = Array.from({ length: b.length + 1 }, (_, j) => j);
+    for (let i = 1; i <= a.length; i++) {
+      let diagonal = row[0];
+      row[0] = i;
+      for (let j = 1; j <= b.length; j++) {
+        const above = row[j];
+        row[j] = Math.min(row[j] + 1, row[j - 1] + 1, diagonal + (a[i - 1] === b[j - 1] ? 0 : 1));
+        diagonal = above;
+      }
+    }
+    return row[b.length];
+  };
+  const scored = names.map((name) => ({ name, d: distance(want, name) })).filter(({ d }) => d <= 2).sort((x, y) => x.d - y.d);
+  return scored.length ? path9.join(dir, scored[0].name) : void 0;
+}
+function readInput(file) {
+  try {
+    return fs9.readFileSync(file, "utf8");
+  } catch (error) {
+    const code = error?.code;
+    if (code === "ENOENT") {
+      const near = closestSibling(file);
+      throw new Error(`File not found: ${file}${near ? `. Did you mean ${near}?` : ""}`);
+    }
+    if (code === "EISDIR") throw new Error(`${file} is a directory; name a file instead.`);
+    if (code === "EACCES" || code === "EPERM") throw new Error(`Permission denied reading ${file}.`);
+    throw error;
+  }
+}
+function sourceNames(paths) {
+  const parts = paths.map((p) => path9.resolve(p).split(path9.sep).filter((s) => s !== ""));
+  const seen = /* @__PURE__ */ new Set();
+  parts.forEach((segments, i) => {
+    const full = segments.join("/");
+    if (seen.has(full)) throw new Error(`${paths[i]} names the same file as an earlier --source; name each source once`);
+    seen.add(full);
+  });
+  const tail = (segments, n) => segments.slice(-n).join("/");
+  return parts.map((segments, i) => {
+    let n = 1;
+    while (parts.some((other, j) => j !== i && tail(other, n) === tail(segments, n))) n += 1;
+    return tail(segments, n);
+  });
+}
+async function argumentsFor(opts, io) {
+  const args = opts.args ? objectJson(opts.args === "-" ? await io.readStdin() : readInput(opts.args), "Arguments") : {};
+  if (opts.sources.length) {
+    if (Object.hasOwn(args, "sources")) throw new Error("Use either --source files or args.sources, not both");
+    const names = sourceNames(opts.sources);
+    args.sources = opts.sources.map((sourcePath, i) => ({ fileName: names[i], source: readInput(sourcePath) }));
+  }
+  if (opts.instances) args.instances = opts.instances;
+  if (opts.blockOnWarnings.length) args.block_on_warnings = [...new Set(opts.blockOnWarnings)];
+  return args;
+}
+var Catalog = z12.looseObject({ tools: z12.array(z12.looseObject({
+  name: z12.string(),
+  inputSchema: z12.looseObject({ required: z12.array(z12.string()).default([]) }).optional()
+})).default([]) });
+function readsProgram(engine, tool) {
+  const catalog = Catalog.safeParse(JSON.parse(engine.listTools()));
+  return catalog.success && (catalog.data.tools.find((t) => t.name === tool)?.inputSchema?.required.includes("sources") ?? false);
+}
+function folderSources(tool, project) {
+  const root = path9.resolve(project ?? ".");
+  const files = projectSources(root);
+  if (!files.length) throw new Error(`${tool} reads the program, and there is no .bosatsu file under ${root}. Pass --project with the project folder, or --source for each file.`);
+  return files;
+}
+function clearOutput(opts) {
+  if (!opts.output) return;
+  const output = path9.resolve(opts.output);
+  const outputStat = fs9.existsSync(output) ? fs9.statSync(output) : void 0;
+  for (const input of [...opts.sources, opts.args, opts.bundle].filter((p) => !!p && p !== "-")) {
+    const inputStat = fs9.existsSync(input) ? fs9.statSync(input) : void 0;
+    if (path9.resolve(input) === output || outputStat && inputStat && inputStat.dev === outputStat.dev && inputStat.ino === outputStat.ino) {
+      throw new Error("--output must not overwrite an input file");
+    }
+  }
+  fs9.rmSync(output, { force: true });
+}
+function rejection(result, unmet) {
+  if (result.ok) return `${unmet} --expect ${unmet === 1 ? "expectation was" : "expectations were"} not met`;
+  const said2 = EngineError.safeParse(result);
+  return said2.success ? said2.data.error : "The tool failed without saying why; see its result";
+}
+async function runCli(argv2, io) {
+  try {
+    if (argv2.length === 0 || argv2.includes("--help") || argv2.includes("-h")) {
+      io.stdout(HELP);
+      return 0;
+    }
+    const opts = parse(argv2);
+    clearOutput(opts);
+    const args = await argumentsFor(opts, io);
+    let result;
+    const timeoutMs = opts.timeoutMs ?? 18e4;
+    if (opts.command === "lean") {
+      if (!io.checkLeanWasm) throw new Error("Lean Wasm backend is unavailable");
+      io.stderr(`Checking the laws in ${opts.sources.join(", ")} with Lean Wasm at ${opts.leanWasmRoot} (budget ${timeoutMs} ms)...
+`);
+      result = objectValue(await io.checkLeanWasm(
+        opts.bundle,
+        opts.leanWasmRoot,
+        args.sources,
+        timeoutMs
+      ), "Lean result");
+    } else {
+      if (opts.command === "call") {
+        const files = Array.isArray(args.sources) ? args.sources.length : void 0;
+        const progress = callProgress(opts.tool, files);
+        if (progress) io.stderr(progress);
+      }
+      const engine = await io.loadEngine(opts.bundle);
+      if (opts.command === "call" && !Object.hasOwn(args, "sources") && readsProgram(engine, opts.tool)) {
+        args.sources = folderSources(opts.tool, opts.project);
+      }
+      const raw = opts.command === "tools" ? engine.listTools() : engine.callTool(opts.command === "verify" ? "api_verify" : opts.tool, JSON.stringify(args));
+      result = objectJson(raw, "Engine result");
+    }
+    if (typeof result.ok !== "boolean") throw new Error("Engine result must explicitly contain boolean ok");
+    const unmet = opts.expects.filter(({ pointer, value }) => !isDeepStrictEqual(readPointer(result, pointer), value));
+    const passed = result.ok && unmet.length === 0;
+    if (opts.select === void 0 || passed) {
+      const selected = opts.select === void 0 ? result : readPointer(result, opts.select);
+      if (selected === void 0) throw new Error(`Result field missing: ${opts.select}`);
+      const text3 = opts.select !== void 0 && typeof selected === "string" ? selected : `${JSON.stringify(selected, null, 2)}
+`;
+      if (opts.output) fs9.writeFileSync(opts.output, text3);
+      else io.stdout(text3);
+    }
+    const artifact = opts.select !== void 0 ? "the unselected result; run without --select to see it" : opts.output ?? "the JSON on standard output";
+    let exit = passed ? 0 : 1;
+    if (opts.command === "verify") {
+      io.stderr(verifySummary(result, passed, artifact));
+      if (!result.ok && result.errorKind === "invalid-arguments") exit = 2;
+    } else if (opts.command === "lean") {
+      const reading = leanSummary(result, artifact, timeoutMs, opts.sources);
+      io.stderr(reading.text);
+      exit = reading.exit;
+    } else if (!result.ok) {
+      io.stderr(callFailure(opts.tool ?? "tools", result, artifact));
+    } else if (passed && opts.select === void 0 && opts.command === "call") {
+      const said2 = callSummary(opts.tool, result, opts.output);
+      if (said2) io.stderr(said2);
+    }
+    const generic = opts.command === "call" || opts.command === "tools";
+    if (!passed && (opts.select !== void 0 || generic && result.ok)) {
+      io.stderr(`${JSON.stringify({ ok: false, error: rejection(result, unmet.length), unmet, result: opts.select === void 0 ? void 0 : result })}
+`);
+    }
+    return exit;
+  } catch (error) {
+    io.stderr(`Error: ${error instanceof Error ? error.message : String(error)}
+`);
+    return 2;
+  }
+}
+
+// src/studio/serve.ts
+import { once } from "events";
+import { fileURLToPath as fileURLToPath2 } from "url";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { EngineWorkerClient, catalogTools } from "@yichus/api-mcp";
+
+// src/studio/page-server.ts
+import fs10 from "fs";
+import http from "http";
+import path10 from "path";
+
+// src/studio/page-assets.json
+var page_assets_default = ["system-map.js", "label-fit.js", "system-map-record.js", "system-map.css", "dom.js", "layer-groups.js", "layer-diagram.js", "source-link.js", "what-happens.js", "what-happens-record.js", "studio-views.js"];
+
+// src/studio/page-server.ts
+var PAGE_ASSETS = page_assets_default;
+function personView(state, names, marks = null) {
+  if (!state) return null;
+  const { sections, whatHappens, anchors, drawing } = personDiagrams(state, names);
+  return {
+    project: state.project,
+    updatedAt: state.updatedAt,
+    sourcesHash: state.sourcesHash,
+    summary: state.step.summary,
+    properties: state.properties.map((p) => ({
+      question: { id: p.question.id, ask: p.question.ask, why: p.question.why, choices: p.question.choices },
+      answer: p.answer,
+      status: p.status
+    })),
+    // A state written before rules were kept has none.
+    rules: (state.rules ?? []).map((r) => ({ rule: r.rule, status: r.status, laws: r.laws.length })),
+    map: state.map ? relabelSystemMap(state.map, names) : null,
+    mapError: state.mapError,
+    sections,
+    // A state written before this field says nothing either way.
+    hasActions: state.hasActions ?? null,
+    whatHappens,
+    // Sent back with what the person has in view, so a report about an
+    // older drawing is not read against this one.
+    drawing,
+    // A mark on a part the page no longer draws is left out.
+    marks: marks && { said: marks.said, marks: marks.marks.flatMap((m) => anchors.has(m.at) ? [{ anchor: anchors.get(m.at), note: m.note }] : []) }
+  };
+}
+function stateBody(root) {
+  const { description, answers, names } = loadRequirements(root);
+  return { state: personView(readState(root), names ?? {}, loadMarks(root)), requirements: { description, answers } };
+}
+var STUDIO_PORTS = [4317, 4318, 4319, 4320, 4321, 0];
+async function startPageServer(root, assetsDir, port = null, now = () => /* @__PURE__ */ new Date()) {
+  ensureStudioDir(root);
+  const clients = /* @__PURE__ */ new Set();
+  const watched = ["state.json", "requirements.json", "marks.json"].map((name) => path10.join(studioDir(root), name));
+  const changed = (now2, before) => {
+    if (now2.mtimeMs !== before.mtimeMs || now2.size !== before.size) for (const res of clients) res.write("event: change\ndata: {}\n\n");
+  };
+  for (const file of watched) fs10.watchFile(file, { interval: 250 }, changed);
+  const hosts = /* @__PURE__ */ new Set();
+  const takes = /* @__PURE__ */ new Map([
+    ["/answer", (args) => recordAnswer(root, args, now())],
+    ["/viewing", (args) => recordViewing(root, args, now())]
+  ]);
+  const server = http.createServer((req, res) => {
+    const send = (status, type, body) => {
+      res.writeHead(status, { "content-type": type, "cache-control": "no-store", "x-content-type-options": "nosniff" });
+      res.end(body);
+    };
+    const host = req.headers.host ?? "";
+    if (!hosts.has(host) || req.headers.origin && req.headers.origin !== `http://${host}`) {
+      send(403, "text/plain", "This studio only answers its own page.");
+      return;
+    }
+    const url = new URL(req.url ?? "/", `http://${host}`);
+    if (req.method === "GET" && url.pathname === "/") return send(200, "text/html; charset=utf-8", STUDIO_PAGE);
+    if (req.method === "GET" && url.pathname === "/state") {
+      return send(200, "application/json", JSON.stringify(stateBody(root)));
+    }
+    if (req.method === "GET" && url.pathname === "/events") {
+      res.writeHead(200, { "content-type": "text/event-stream", "cache-control": "no-store", connection: "keep-alive" });
+      res.write(": connected\n\n");
+      clients.add(res);
+      req.on("close", () => clients.delete(res));
+      return;
+    }
+    const asset = PAGE_ASSETS.find((a) => url.pathname === `/${a}`);
+    if (req.method === "GET" && asset) {
+      return send(200, asset.endsWith(".css") ? "text/css" : "text/javascript", fs10.readFileSync(path10.join(assetsDir, asset), "utf8"));
+    }
+    const take = req.method === "POST" ? takes.get(url.pathname) : void 0;
+    if (take) {
+      if (req.headers["content-type"] !== "application/json") return send(415, "text/plain", "Send JSON.");
+      let body = "";
+      req.setEncoding("utf8");
+      req.on("data", (chunk) => {
+        body += chunk;
+        if (body.length > 65536) req.destroy();
+      });
+      req.on("end", () => {
+        let args;
+        try {
+          args = JSON.parse(body);
+        } catch {
+          return send(400, "application/json", JSON.stringify({ ok: false, error: "The request is not JSON." }));
+        }
+        const result = take(args);
+        send(result.ok ? 200 : 400, "application/json", JSON.stringify(result));
+      });
+      return;
+    }
+    send(404, "text/plain", "Not found.");
+  });
+  for (const candidate of port === null ? STUDIO_PORTS : [port]) {
+    const error = await new Promise((resolve) => {
+      server.once("error", resolve);
+      server.listen(candidate, "127.0.0.1", () => {
+        server.off("error", resolve);
+        resolve(null);
+      });
+    });
+    if (!error) break;
+    if (error.code !== "EADDRINUSE" || candidate === port) throw error;
+  }
+  const bound = server.address().port;
+  hosts.add(`127.0.0.1:${bound}`).add(`localhost:${bound}`);
+  return {
+    url: `http://127.0.0.1:${bound}/`,
+    async close() {
+      for (const file of watched) fs10.unwatchFile(file, changed);
+      const closed = new Promise((resolve) => server.close(() => resolve()));
+      server.closeAllConnections();
+      await closed;
+    }
+  };
+}
+
+// src/studio/serve.ts
+var objectResult = (raw, tool) => {
+  const value = JSON.parse(raw);
+  if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(`${tool} returned no JSON object`);
+  return value;
+};
+var inProcessEngine = (engine) => ({
+  async call(tool, args) {
+    return objectResult(engine.callTool(tool, JSON.stringify(args)), tool);
+  }
+});
+function workerEngine(bundle) {
+  const worker = new EngineWorkerClient(bundle, 9e5);
+  let id = 0;
+  return {
+    async call(tool, args) {
+      return objectResult(await worker.callTool(tool, JSON.stringify(args), `studio-${++id}`), tool);
+    },
+    async catalog() {
+      return catalogTools(await worker.listTools(`studio-${++id}`));
+    },
+    close: () => worker.close()
+  };
+}
+var BUILT_ASSETS = fileURLToPath2(new URL("./studio-page/", import.meta.url));
+async function serveStudio(options) {
+  const started = await startPageServer(options.root, options.assetsDir ?? BUILT_ASSETS, options.port);
+  writePageLink(options.root, started.url);
+  const page = { url: started.url, async close() {
+    clearPageLink(options.root, started.url);
+    await started.close();
+  } };
+  options.stderr(`Yichus studio page: ${page.url}
+`);
+  if (options.pageOnly) {
+    await (options.stopped ?? Promise.race([once(process, "SIGINT"), once(process, "SIGTERM")]));
+    await page.close();
+    return;
+  }
+  const engine = workerEngine(options.bundle);
+  const { server, idle } = createStudioMcpServer({ root: options.root, engine, pageUrl: page.url, catalog: engine.catalog });
+  const stdin = options.stdin ?? process.stdin;
+  const closed = once(stdin, "end");
+  try {
+    await server.connect(new StdioServerTransport(stdin, options.stdout ?? process.stdout));
+    await closed;
+    await idle();
+  } finally {
+    await server.close();
+    await engine.close();
+    await page.close();
+  }
+}
+
+// src/main.ts
+var bundleOrThrow = (bundle) => {
+  const resolved = bundle ?? findApiMcpBundle();
+  if (!resolved) throw new Error("Yichus engine bundle missing. Reinstall @yichus/api-mcp or pass --bundle.");
+  return resolved;
+};
+var argv = process.argv.slice(2);
+process.exitCode = STUDIO_COMMANDS.has(argv[0] ?? "") ? await runStudioCommand(argv, {
+  engine: async () => inProcessEngine(await loadApiEngine(bundleOrThrow())),
+  serve: (options) => serveStudio({ ...options, bundle: bundleOrThrow(), stderr: (text3) => process.stderr.write(text3) }),
+  stdout: (text3) => process.stdout.write(text3),
+  stderr: (text3) => process.stderr.write(text3),
+  now: () => /* @__PURE__ */ new Date(),
+  locate: builtCopy
+}) : await runCli(argv, {
+  async loadEngine(bundle) {
+    return loadApiEngine(bundleOrThrow(bundle));
+  },
+  async checkLeanWasm(bundle, root, sources, timeoutMs) {
+    return checkLeanWasmSources(bundleOrThrow(bundle), root, sources, timeoutMs);
+  },
+  // A stream, not readFileSync(0): a pipe the parent has not written yet
+  // fails a synchronous read with EAGAIN on macOS.
+  readStdin: () => text2(process.stdin),
+  stdout: (text3) => process.stdout.write(text3),
+  stderr: (text3) => process.stderr.write(text3)
+});
+//# sourceMappingURL=main.js.map