@bongos/core 1.24.72 → 1.24.74

package/docs/page-readings.json

@@ -12,7 +12,7 @@
       "surface": "builders",
       "title": "Studio",
       "states_read": ["pick","describe","make","waiting","result","result-own","failed","balance","balance-all","out"],
-      "files_hash": "50e25bda4cc82a5a",
+      "files_hash": "4f71b6714f7e2d61",
       "reading_hash": "e381a3141dc6b9cb",
       "counts": {"lines":105,"placed":38,"shared":9,"unplaced":58},
       "omitted": {"data":15},
@@ -130,7 +130,7 @@
       "surface": "builders",
       "title": "Repo Atlas",
       "states_read": ["map","truth","detail","index","out"],
-      "files_hash": "63832faf57d99cf1",
+      "files_hash": "5c3b63261c77b636",
       "reading_hash": "94058beb635218ba",
       "counts": {"lines":24,"placed":11,"shared":9,"unplaced":4},
       "omitted": {"data":3},
@@ -167,7 +167,7 @@
       "surface": "builders",
       "title": "Blockers",
       "states_read": ["default"],
-      "files_hash": "92d9a0d9aa43e122",
+      "files_hash": "ab533cabec76122e",
       "reading_hash": "ab984bd8e91a5a9d",
       "counts": {"lines":35,"placed":14,"shared":9,"unplaced":12},
       "omitted": {"data":49},
@@ -215,7 +215,7 @@
       "surface": "builders",
       "title": "Board Room",
       "states_read": ["room","out","sitting-meta","objection-form"],
-      "files_hash": "016178799cf60cb4",
+      "files_hash": "9461cd6cbc270ae2",
       "reading_hash": "020553cb2a438d56",
       "counts": {"lines":51,"placed":18,"shared":9,"unplaced":24},
       "omitted": {"data":15},
@@ -279,7 +279,7 @@
       "surface": "builders",
       "title": "The city",
       "states_read": ["city","fullscreen","switched","focus","pins","living","card","card-ask"],
-      "files_hash": "61386477fb128d7f",
+      "files_hash": "9ed0417e2e4dfb92",
       "reading_hash": "11234462e18a0037",
       "counts": {"lines":44,"placed":10,"shared":9,"unplaced":25},
       "omitted": {"data":18},
@@ -336,7 +336,7 @@
       "surface": "builders",
       "title": "Collab",
       "states_read": ["board","out"],
-      "files_hash": "5cf57d56b9e9ecf7",
+      "files_hash": "887a503d80d5c0e2",
       "reading_hash": "2d5df14f73c44d86",
       "counts": {"lines":81,"placed":33,"shared":8,"unplaced":40},
       "omitted": {"data":21},
@@ -430,7 +430,7 @@
       "surface": "builders",
       "title": "Commands",
       "states_read": ["in","out"],
-      "files_hash": "2b04b74db0dafd12",
+      "files_hash": "687bb6af0eff6e0c",
       "reading_hash": "b7107deecbf6bf46",
       "counts": {"lines":70,"placed":46,"shared":9,"unplaced":15},
       "omitted": {"data":175},
@@ -513,7 +513,7 @@
       "surface": "builders",
       "title": "Copy desk",
       "states_read": ["queue","out","search","composer","closer","proposer"],
-      "files_hash": "f3e33781928f9834",
+      "files_hash": "6d4903527b0a1c30",
       "reading_hash": "4476deef6b37ffe5",
       "counts": {"lines":78,"placed":39,"shared":9,"unplaced":30},
       "omitted": {"data":119},
@@ -604,7 +604,7 @@
       "surface": "builders",
       "title": "Deploy",
       "states_read": ["work","out"],
-      "files_hash": "dfa284608a5cebe7",
+      "files_hash": "a0ab8445ee5bf294",
       "reading_hash": "76c11d0fbc739610",
       "counts": {"lines":19,"placed":5,"shared":9,"unplaced":5},
       "omitted": {"data":3},
@@ -636,7 +636,7 @@
       "surface": "builders",
       "title": "The sky",
       "states_read": ["tour","sky","wells","ledger","full","full-back","out"],
-      "files_hash": "adf0f533cc7d8e49",
+      "files_hash": "b47d4ef94ef6d2c5",
       "reading_hash": "2ae796b3e72c6d26",
       "counts": {"lines":49,"placed":22,"shared":8,"unplaced":19},
       "omitted": {"data":8},
@@ -698,7 +698,7 @@
       "surface": "builders",
       "title": "Goals",
       "states_read": ["list","filters","cards","detail","dependencies","out","uat","uat-panel","author"],
-      "files_hash": "b3b5b86934a95f45",
+      "files_hash": "ddc111d1819224ad",
       "reading_hash": "82f9b0ae157d2700",
       "counts": {"lines":186,"placed":58,"shared":9,"unplaced":119},
       "omitted": {"data":313},
@@ -897,7 +897,7 @@
       "surface": "builders",
       "title": "Government",
       "states_read": ["constitution","out","permissions","board","constitution-tab"],
-      "files_hash": "7de217569d7dee56",
+      "files_hash": "3a9b128ca492be07",
       "reading_hash": "0d1ee732e57189fb",
       "counts": {"lines":64,"placed":24,"shared":9,"unplaced":31},
       "omitted": {"data":274},
@@ -974,7 +974,7 @@
       "surface": "builders",
       "title": "Builders' Hall",
       "states_read": ["home","out","founding","genesis","decide","demo"],
-      "files_hash": "a7f35bfa83de9522",
+      "files_hash": "5c8e267006cb62e1",
       "reading_hash": "4cc2e5e86483a66e",
       "counts": {"lines":28,"placed":9,"shared":10,"unplaced":9},
       "omitted": {"data":4},
@@ -1015,7 +1015,7 @@
       "surface": "builders",
       "title": "Idea",
       "states_read": ["record","missing"],
-      "files_hash": "fd3aca17029f8215",
+      "files_hash": "d31ed5e538fa57ac",
       "reading_hash": "1924057e1bb86631",
       "counts": {"lines":51,"placed":22,"shared":10,"unplaced":19},
       "omitted": {"data":23},
@@ -1079,7 +1079,7 @@
       "surface": "builders",
       "title": "Ideas",
       "states_read": ["compose","full","develop"],
-      "files_hash": "8f52a6b42f728cc5",
+      "files_hash": "59081864d4eabae8",
       "reading_hash": "9ed251f7cc60a885",
       "counts": {"lines":67,"placed":31,"shared":9,"unplaced":27},
       "omitted": {"data":116},
@@ -1159,7 +1159,7 @@
       "surface": "builders",
       "title": "Market Watch",
       "states_read": ["desk","settings","out"],
-      "files_hash": "9140a587c36cb555",
+      "files_hash": "a46496a5cf19a695",
       "reading_hash": "de1a8fdf7ebcc959",
       "counts": {"lines":13,"placed":3,"shared":9,"unplaced":1},
       "omitted": {"data":2},
@@ -1185,7 +1185,7 @@
       "surface": "builders",
       "title": "Market Watch",
       "states_read": ["dossier","out","propose","correct","filtered"],
-      "files_hash": "0043d2efb8ce3fae",
+      "files_hash": "f3b5b24581756454",
       "reading_hash": "12483255342bd007",
       "counts": {"lines":14,"placed":4,"shared":9,"unplaced":1},
       "omitted": {"data":2},
@@ -1212,7 +1212,7 @@
       "surface": "builders",
       "title": "Market Watch rules",
       "states_read": ["in","scoring","names","propose","out"],
-      "files_hash": "cb4364ca3a8fd6a4",
+      "files_hash": "d37cdb4cc97ae6a3",
       "reading_hash": "bf661622dd283b83",
       "counts": {"lines":48,"placed":13,"shared":9,"unplaced":26},
       "omitted": {"data":45},
@@ -1273,7 +1273,7 @@
       "surface": "builders",
       "title": "Modules",
       "states_read": ["browse","search-empty","lens","details","out"],
-      "files_hash": "94eba85cba4f0d69",
+      "files_hash": "85e1f48677ea96f7",
       "reading_hash": "cdf89441f9e9516e",
       "counts": {"lines":60,"placed":26,"shared":9,"unplaced":25},
       "omitted": {"data":105},
@@ -1346,7 +1346,7 @@
       "surface": "builders",
       "title": "Money",
       "states_read": ["money","hosting","out"],
-      "files_hash": "f9a4e0eac1b68a92",
+      "files_hash": "cbf3f8ed30ccfff6",
       "reading_hash": "285d714c7aba1fc9",
       "counts": {"lines":82,"placed":25,"shared":9,"unplaced":48},
       "omitted": {"data":25},
@@ -1441,7 +1441,7 @@
       "surface": "builders",
       "title": "My agents",
       "states_read": ["desk","factory","saved","what-it-knows","speciality-walk","speciality-forms","nobody"],
-      "files_hash": "6fc32880505c557d",
+      "files_hash": "25a31340d16b79d9",
       "reading_hash": "74d10b6c2a24ce2e",
       "counts": {"lines":138,"placed":60,"shared":9,"unplaced":69},
       "omitted": {"data":171},
@@ -1592,7 +1592,7 @@
       "surface": "builders",
       "title": "Primer",
       "states_read": ["in","toc-open","jump","out"],
-      "files_hash": "919ef5b8b427e8cf",
+      "files_hash": "93efc9b10054a26a",
       "reading_hash": "395c98d876001b5a",
       "counts": {"lines":486,"placed":54,"shared":9,"unplaced":423},
       "omitted": {"data":16},
@@ -2091,7 +2091,7 @@
       "surface": "builders",
       "title": "Profile",
       "states_read": ["own","works","activity","yours","activity-artist","activity-ideator","other","artist","ideator","out"],
-      "files_hash": "faab3fa3b6220357",
+      "files_hash": "fd066c9c1add890e",
       "reading_hash": "fe899712427882ff",
       "counts": {"lines":219,"placed":77,"shared":9,"unplaced":133},
       "omitted": {"data":250},
@@ -2323,7 +2323,7 @@
       "surface": "builders",
       "title": "Project settings",
       "states_read": ["default"],
-      "files_hash": "85c0c733104bd60e",
+      "files_hash": "2c0f365687004dda",
       "reading_hash": "849399ad428ae9c7",
       "counts": {"lines":42,"placed":22,"shared":9,"unplaced":11},
       "omitted": {"data":31},
@@ -2378,7 +2378,7 @@
       "surface": "builders",
       "title": "Builders",
       "states_read": ["roster","artists","search","out"],
-      "files_hash": "0aa74b38af3f3c52",
+      "files_hash": "562ab7294ed7994a",
       "reading_hash": "ab1f237b3ce6f134",
       "counts": {"lines":58,"placed":14,"shared":9,"unplaced":35},
       "omitted": {"data":135},
@@ -2449,7 +2449,7 @@
       "surface": "builders",
       "title": "Settings",
       "states_read": ["account","access","preferences","install-reports","sound","update"],
-      "files_hash": "da132b7d96a13735",
+      "files_hash": "685465c1780ddf1b",
       "reading_hash": "085bb32894909ee0",
       "counts": {"lines":137,"placed":90,"shared":9,"unplaced":38},
       "omitted": {"data":16},
@@ -2599,7 +2599,7 @@
       "surface": "builders",
       "title": "The street",
       "states_read": ["street","fullscreen","card","switched","focus","here","inside-rules","inside-disputes","inside-people","inside-planning","inside-automation","inside-review","inside-release","inside-treasury","floor","amend","district","desk","desk-facts","desk-quiet","desk-people-builders","desk-people-tier","desk-disputes","desk-automation-goals","desk-release-core","desk-rules","desk-rules-category","desk-planning-priorities","desk-planning-ideas","desk-planning-blockers","pins","pins-pager","living","deck","deck-treasury","sitting","object","voted","admission","settled","blocker","blocker-more","report","report-more","core","core-more","recheck","recheck-more","idea","idea-more","queue","queue-more","automation","automation-more"],
-      "files_hash": "54383081a21db0f9",
+      "files_hash": "bcc43de9ec38fb26",
       "reading_hash": "8e9e3422f6b72884",
       "counts": {"lines":460,"placed":65,"shared":9,"unplaced":386},
       "omitted": {"data":433},
@@ -3072,7 +3072,7 @@
       "surface": "builders",
       "title": "Studio",
       "states_read": ["home","out","flow","flow-pick","status","words-offer","words-edit","reviews","full","full-back","approvals","approvals-before","approvals-phone","approvals-note","approved","sent-back","approvals-page"],
-      "files_hash": "70fed47103199ae9",
+      "files_hash": "6b37ea0de369e584",
       "reading_hash": "55463fb0c09b5d71",
       "counts": {"lines":50,"placed":26,"shared":9,"unplaced":15},
       "omitted": {"data":21},
@@ -3135,7 +3135,7 @@
       "surface": "builders",
       "title": "Task",
       "states_read": ["record","from-goal","missing"],
-      "files_hash": "b653ab7f5907351c",
+      "files_hash": "7f1c8fcc8e9f83d5",
       "reading_hash": "ecaa5fba5bc119a8",
       "counts": {"lines":150,"placed":43,"shared":11,"unplaced":96},
       "omitted": {"data":109},
@@ -3298,7 +3298,7 @@
       "surface": "builders",
       "title": "Your thinking",
       "states_read": ["tour","sky","list","simple","full-idea","full","full-list","full-back","out"],
-      "files_hash": "032c6af6a1ffbd68",
+      "files_hash": "ec5269e1f8585592",
       "reading_hash": "8113aa9e50ec5600",
       "counts": {"lines":49,"placed":22,"shared":8,"unplaced":19},
       "omitted": {"data":8},
@@ -3360,7 +3360,7 @@
       "surface": "builders",
       "title": "Tweak a page",
       "states_read": ["doc","typed","chrome","submitted","picking","out"],
-      "files_hash": "d23569d9061dd5b1",
+      "files_hash": "cbd96ef300b7e801",
       "reading_hash": "711c540ebc7ef977",
       "counts": {"lines":23,"placed":15,"shared":1,"unplaced":7},
       "omitted": {"data":35},
@@ -3396,7 +3396,7 @@
       "surface": "builders",
       "title": "Watch",
       "states_read": ["board","out","operations","security","sessions","autobongos"],
-      "files_hash": "a58bbb70d55ab295",
+      "files_hash": "08e46562439e6d7b",
       "reading_hash": "2e2e07eab2e3e772",
       "counts": {"lines":69,"placed":28,"shared":9,"unplaced":32},
       "omitted": {"data":50},
@@ -3478,7 +3478,7 @@
       "surface": "builders",
       "title": "Tasks",
       "states_read": ["ready","in-progress","backlog","completed","filters-open","out","founding"],
-      "files_hash": "fabac0ed9aaf82fb",
+      "files_hash": "469be6bdd4773fb7",
       "reading_hash": "f1d7a8ed45e60ffa",
       "counts": {"lines":122,"placed":46,"shared":9,"unplaced":67},
       "omitted": {"data":321},

package/modules/government/board.js

@@ -47,6 +47,9 @@ const db = require('./db');
 // file (the reward-port delegation lesson: a destructured binding is frozen at
 // load and un-patchable).
 const governmentConfig = require('./config');
+// The durable half of applying a passed amendment (task 1005140), required as a
+// namespace for the same reason.
+const constitutionStore = require('./constitution');
 const {
   loadGovernmentConfig, PASS_RULES, MAX_WINDOW_MINUTES,
   RECOMMENDED_WINDOW_MINUTES, CLOCK_SAFE_PASS_RULES, isClockSafe,
@@ -668,17 +671,25 @@ async function closeItem(item, { cause = 'vote' } = {}) {
   // close commits (the board's decision is the durable record), loudly on
   // failure, never silently absorbed. The apply is re-drivable from the passed
   // item + amendment rows. A returned amendment applies nothing.
+  //
+  // Task 1005140: the ROW is written first (a container's file does not survive
+  // a restart), then this process's file, and then both are READ BACK. An
+  // amendment that did not take comes back as `constitution_not_applied`, which
+  // the vote route hands to the page the voter is standing on.
   let appliedConstitution = null;
+  let constitutionNotApplied = null;
   // A rules or laws amendment changes its own table, never the board block.
   if (outcome === 'passed' && closed.subject_type === 'constitutional_amendment' && !rulesAmendment && !lawsAmendment) {
-    try {
-      if (amendment) {
-        appliedConstitution = governmentConfig.applyBoardAmendment(amendment.proposed);
-      } else {
-        console.error(`[government] passed amendment item ${closed.id} names amendment ${closed.subject_id}, which does not exist — NOT applied`);
+    if (amendment) {
+      const out = await constitutionStore.recordRatified(amendment.proposed, { itemId: closed.id });
+      appliedConstitution = out.applied;
+      constitutionNotApplied = out.failure;
+      if (out.failure) {
+        console.error(`[government] amendment ${closed.subject_id} ratified but NOT in force (re-apply with POST /government/constitution/reapply): ${JSON.stringify(out.failure.problems)}`);
       }
-    } catch (applyErr) {
-      console.error(`[government] amendment ${closed.subject_id} ratified but NOT applied (re-drivable from the passed item): ${applyErr && applyErr.message}`);
+    } else {
+      console.error(`[government] passed amendment item ${closed.id} names amendment ${closed.subject_id}, which does not exist — NOT applied`);
+      constitutionNotApplied = Object.freeze({ should: null, problems: [{ where: 'database', reason: 'the amendment row does not exist' }] });
     }
   }
 
@@ -713,6 +724,7 @@ async function closeItem(item, { cause = 'vote' } = {}) {
     closed: true, item: closed, outcome, cause, author_karma: authorKarma,
     ...(credit ? { credit } : {}),
     ...(appliedConstitution ? { applied_constitution: appliedConstitution } : {}),
+    ...(constitutionNotApplied ? { constitution_not_applied: constitutionNotApplied } : {}),
     ...(appliedDecisionRules ? { applied_decision_rules: appliedDecisionRules } : {}),
     ...(appliedLaws ? { applied_laws: appliedLaws } : {}),
     ...(acted ? { acted: acted.result } : {}),

package/modules/government/config.js

@@ -366,16 +366,20 @@ function loadGovernmentConfig({ neutralPath = NEUTRAL_PATH, instancePath = INSTA
 // the proposal was strictly validated at propose time, but a file on disk must
 // never hold a shape the resolver would have to guess at.
 //
-// WHY A FILE WRITE AND NOT A DB ROW: R05 made the constitution config-resolved
-// on purpose (the board block is a RULE SHAPE, not authority — who holds the
-// governing rank stays a DB row). Moving the live value into the DB on
-// ratification would fork the resolution into two paths, the exact thing the
-// board-snapshot design avoids. The instance pack is host-owned and untracked,
-// so a deploy pull never clobbers it.
+// THE FILE IS NOT THE DURABLE RECORD (task 1005140). It used to be, on the
+// reasoning that the instance pack is host-owned and untracked so a deploy pull
+// never clobbers it. True on a long-lived checkout; false on every instance this
+// platform provisions, whose container filesystem is wiped on each deploy,
+// restart and idle wake — toast's ratified Timocratic Republic vanished that way.
+// The durable record is now the government_constitution ROW, written first by
+// constitution.js recordRatified; this write is the running process's copy of
+// it, and constitution.js reconcile restores it at boot. Resolution is still
+// ONE path (env → instance → neutral): only where the instance layer comes from
+// changed.
 //
-// The caller (board.js closeItem) runs this AFTER the close commits — the
-// board's decision is the durable record; a failed apply is logged loudly and
-// re-appliable from the passed item + amendment rows, never silently absorbed.
+// The caller (constitution.recordRatified, from board.js closeItem) runs this
+// AFTER the close commits and re-reads what is in force afterwards, so an
+// amendment that did not take is reported at the close itself.
 function applyBoardAmendment(proposed, { instancePath = INSTANCE_PATH } = {}) {
   const instance = readJson(instancePath) || {};
   const next = { ...instance, board: { ...sanitizeBoard(proposed) } };
@@ -392,8 +396,16 @@ function applyBoardAmendment(proposed, { instancePath = INSTANCE_PATH } = {}) {
   return next.board;
 }
 
+// The instance pack as it is on disk (null when absent; a file that does not
+// parse throws, as the loader does). constitution.js reads the board block
+// through this so absent and malformed keep one meaning.
+function readInstancePack(instancePath = INSTANCE_PATH) {
+  return readJson(instancePath);
+}
+
 module.exports = {
   resolveGovernmentConfig,
+  readInstancePack,
   loadGovernmentConfig,
   grantableOnly,
   sanitizeBoard,

package/modules/government/constitution.js

@@ -0,0 +1,224 @@
+'use strict';
+
+// modules/government/constitution.js — the constitution in force survives a
+// restart (task 1005140).
+//
+// THE BUG THIS EXISTS FOR. A ratified amendment was written only to
+// <instance root>/config/government.json. Every instance this platform
+// provisions runs on a container whose filesystem is wiped on each deploy,
+// restart and idle wake, so the write took effect and then vanished at the next
+// container start: toast's board ratified a Timocratic Republic on 2026-11-06
+// and the constitution went on answering the day-one monarchy. ADR 0268 fixed
+// the PATH of that write; this fixes its MEDIUM.
+//
+// THE SHAPE. The database row (government_037) is the durable record of the
+// instance's board block. The file stays as the RUNNING PROCESS's copy of that
+// row, so `config.loadGovernmentConfig()` keeps its one synchronous path
+// (env → instance → neutral) and none of its callers change:
+//
+//   • a passed amendment writes the ROW, then the file (`recordRatified`), then
+//     re-reads both and compares (`verifyInForce`) — an amendment that did not
+//     take is reported at the close, not weeks later by the divergence banner;
+//   • at boot, and on a slow interval after, `reconcile` brings the file in step
+//     with the row (a fresh container has no file; the row restores it). If the
+//     row does not exist yet but a file does, the file's board block is ADOPTED
+//     into the row and the log says so — nobody loses a constitution that
+//     happens to still be on disk. If there is NEITHER a row NOR a file but a
+//     constitutional amendment has passed, that amendment is put back in force:
+//     an instance whose ratified constitution a restart already erased (toast,
+//     2026-11-06) repairs itself on its first boot with this code. That is not
+//     the auto-heal ADR 0268 refused — with no file there is no hand edit to
+//     revert; the only thing the process could answer is a default nobody chose;
+//   • `reapplyNewestPassed` is the operator's supported path: it writes the
+//     newest PASSED constitutional amendment back into force. It never takes a
+//     free-form block — changing the constitution is a board act (owner
+//     decision 11); this only makes a decision the board already took stick.
+//
+// The ROW WINS over the file. A hand edit of the file on a long-lived checkout
+// is therefore overwritten at the next reconcile once a row exists — on a
+// container that edit was never durable anyway, and a constitution that quietly
+// differed between the database and one process is the failure being fixed.
+
+const api = require('../../src/module-api');
+const governmentConfig = require('./config');
+const db = require('./db');
+
+const logger = api.logger('government');
+
+const BOARD_KEYS = Object.freeze(['membership', 'pass_rule', 'window_minutes', 'close_early_on_full_turnout']);
+
+// Field-by-field over the four keys — the same comparison board.js
+// constitutionDivergence makes, so "in step" here and "no divergence" there
+// mean the same thing. The two answer different questions (is this process in
+// step with the row / is the newest passed amendment in force); if the board
+// block ever gains a key, change both.
+function differingFields(should, actual) {
+  const a = actual || {};
+  return BOARD_KEYS.filter((k) => should[k] !== a[k]);
+}
+
+// The file's own board block, or null when there is none. Read through the
+// config loader's reader so absent and malformed keep their meanings (absent is
+// null; a file that does not parse throws — a human must fix it).
+function fileBoard(instancePath) {
+  const pack = governmentConfig.readInstancePack(instancePath);
+  return pack && pack.board && typeof pack.board === 'object' ? pack.board : null;
+}
+
+// A missing table means this instance has not run government_037 yet: the
+// caller reports it rather than pretending the row is empty.
+const isMissingTable = (err) => !!(err && err.code === '42P01');
+
+// The newest PASSED constitution amendment (not a rules or laws one, which
+// change their own tables), or null. listAmendmentHistory is newest first.
+async function newestPassed(historyLimit = 50) {
+  const rows = await db.listAmendmentHistory(historyLimit);
+  return (rows || []).find((r) => r.outcome === 'passed' && r.proposed && r.kind === 'constitution') || null;
+}
+
+// A failure the caller hands to a voter carries a fixed reason word, never a
+// driver message (that is logged here, for the operator).
+function problem(where, reason, err) {
+  if (err) logger.error(`[government] constitution: ${where} ${reason}: ${err.message || err}`);
+  return { where, reason };
+}
+
+// Bring this process's file in step with the row, or adopt the file into an
+// empty row. Never throws; returns what it did.
+async function reconcile({ instancePath = governmentConfig.INSTANCE_PATH, log = console.log, error = console.error } = {}) {
+  let row;
+  try {
+    row = await db.getConstitutionRow();
+  } catch (err) {
+    if (isMissingTable(err)) return { action: 'no_table' };
+    error(`[government] constitution: could not read the constitution row (the file stays as it is): ${err && err.message}`);
+    return { action: 'read_failed' };
+  }
+  try {
+    if (row && row.board) {
+      const should = governmentConfig.sanitizeBoard(row.board);
+      const current = fileBoard(instancePath);
+      if (current && differingFields(should, governmentConfig.sanitizeBoard(current)).length === 0) {
+        return { action: 'in_step', board: should };
+      }
+      governmentConfig.applyBoardAmendment(should, { instancePath });
+      log(`[government] constitution: restored the constitution in force from the database (${should.pass_rule}, ${should.membership})`);
+      return { action: 'restored', board: should };
+    }
+    const current = fileBoard(instancePath);
+    if (!current) {
+      // Neither a row nor a file: if the board passed a constitution, the only
+      // reason it is not in force is that a restart erased it. Put it back.
+      const last = await newestPassed();
+      if (!last) return { action: 'none' };
+      const out = await recordRatified(last.proposed, { itemId: last.item_id, source: 'reapply', instancePath });
+      if (out.failure) {
+        error(`[government] constitution: could not put back passed amendment ${last.amendment_id}: ${JSON.stringify(out.failure.problems)}`);
+        return { action: 'failed', failure: out.failure };
+      }
+      log(`[government] constitution: no constitution survived the restart — put back passed amendment ${last.amendment_id} (item ${last.item_id}: ${out.applied.pass_rule}, ${out.applied.membership})`);
+      return { action: 'recovered', board: out.applied, item_id: String(last.item_id) };
+    }
+    const adopted = governmentConfig.sanitizeBoard(current);
+    await db.saveConstitutionRow({ board: adopted, source: 'adopted_file' });
+    log(`[government] constitution: adopted the board block from ${instancePath} into the database (${adopted.pass_rule}, ${adopted.membership}) — it now survives a restart`);
+    return { action: 'adopted', board: adopted };
+  } catch (err) {
+    error(`[government] constitution: reconcile failed: ${err && err.message}`);
+    return { action: 'failed', error: err && err.message };
+  }
+}
+
+// Re-read the row and the constitution this process resolves, and compare both
+// to what should be in force. Null when both match; otherwise what is wrong.
+//
+// The row is read back on purpose even though the save RETURNed it: the point
+// is to prove what a fresh read sees, not what the driver said it wrote. Two
+// small reads, only when a constitution sitting closes.
+async function verifyInForce(should, { instancePath } = {}) {
+  const problems = [];
+  let row = null;
+  try { row = await db.getConstitutionRow(); }
+  catch (err) { problems.push(problem('database', 'read_back_failed', err)); }
+  if (!problems.length) {
+    const rowFields = row && row.board ? differingFields(should, governmentConfig.sanitizeBoard(row.board)) : BOARD_KEYS.slice();
+    if (rowFields.length) problems.push({ where: 'database', fields: rowFields });
+  }
+  let live = null;
+  try { live = governmentConfig.loadGovernmentConfig(instancePath ? { instancePath } : {}).board; }
+  catch (err) { problems.push(problem('in_force', 'resolve_failed', err)); }
+  if (live) {
+    const liveFields = differingFields(should, live);
+    if (liveFields.length) problems.push({ where: 'in_force', fields: liveFields });
+  }
+  return problems.length ? Object.freeze({ should, problems }) : null;
+}
+
+// Put a ratified board block into force: the ROW first (the durable record),
+// then the file (this process), then verify. Never throws — the board's
+// decision is already committed; the caller reports what this returns.
+async function recordRatified(proposed, { itemId = null, source = 'amendment', updatedBy = null, instancePath } = {}) {
+  const should = governmentConfig.sanitizeBoard(proposed);
+  try {
+    await db.saveConstitutionRow({ board: should, source, itemId, updatedBy });
+  } catch (err) {
+    return { applied: null, failure: Object.freeze({ should, problems: [problem('database', 'save_failed', err)] }) };
+  }
+  let applied = null;
+  try {
+    // By property lookup at call time, so a test can redirect the file write.
+    applied = instancePath
+      ? governmentConfig.applyBoardAmendment(should, { instancePath })
+      : governmentConfig.applyBoardAmendment(should);
+  } catch (err) {
+    return { applied: null, failure: Object.freeze({ should, problems: [problem('in_force', 'write_failed', err)] }) };
+  }
+  return { applied, failure: await verifyInForce(should, { instancePath }) };
+}
+
+// The operator's path: re-apply the newest PASSED constitutional amendment.
+// Refuses when there is none — it never invents a constitution.
+async function reapplyNewestPassed({ updatedBy = null, historyLimit = 50 } = {}) {
+  const last = await newestPassed(historyLimit);
+  if (!last) return { ok: false, reason: 'no_passed_amendment' };
+  const out = await recordRatified(last.proposed, { itemId: last.item_id, source: 'reapply', updatedBy });
+  return {
+    ok: !out.failure,
+    item_id: String(last.item_id),
+    amendment_id: String(last.amendment_id),
+    applied: out.applied,
+    ...(out.failure ? { reason: 'not_applied', failure: out.failure } : {}),
+  };
+}
+
+// The handler behind POST /government/constitution/reapply. The route — its
+// path, its government.manage gate and its pin — is declared in
+// routes/government.js, where route-rank-check reads it; only the body lives
+// here (the access-routes.js pattern, for the router's size ratchet). It takes
+// NO block from the request: it can only re-apply what a sitting passed, never
+// invent one (changing the constitution is a board act, owner decision 11).
+function reapplyRoute(log) {
+  return async (req, res) => {
+    try {
+      const out = await module.exports.reapplyNewestPassed({ updatedBy: req.builder.id });
+      if (!out.ok && out.reason === 'no_passed_amendment') {
+        return res.fail('no_passed_amendment', 404, { message: 'No change to the constitution has passed yet, so there is nothing to re-apply. Propose one in the Board Room; once it passes it takes effect.' });
+      }
+      if (!out.ok) return res.fail('constitution_not_applied', 500, { item_id: out.item_id, failure: out.failure });
+      res.json({ ok: true, item_id: out.item_id, amendment_id: out.amendment_id, board: out.applied });
+    } catch (err) {
+      log.error('[gds] POST /government/constitution/reapply', err);
+      res.fail('constitution_reapply_failed', { status: 500, message: 'internal error' });
+    }
+  };
+}
+
+module.exports = {
+  reapplyRoute,
+  reconcile,
+  recordRatified,
+  verifyInForce,
+  reapplyNewestPassed,
+  differingFields,
+  BOARD_KEYS,
+};