@duo-director/cli 0.2.2 → 0.3.0-rc.3

package/dist/{cli-QTN5SRNE.js → cli-DJGVC2WO.js}

@@ -157,6 +157,8 @@ var DIAGNOSTIC_SEVERITY = {
   DECISION_SUPERSEDE_TARGET_INVALID: "error",
   /** DecisionService: another process holds the repository decision lock. */
   DECISION_LOCK_BUSY: "error",
+  /** DecisionService (T34.2): the candidate changed after the preview a person reviewed; nothing was confirmed. */
+  DECISION_CONFIRM_PREVIEW_CHANGED: "error",
   /** A confirmed Decision's lock.digest does not match its content fields (a detection aid, not a signature). */
   DECISION_LOCK_MISMATCH: "warning",
   /** T40 (N1): an authoritative operation refused partial Project Truth; the loader errors follow it. */
@@ -300,6 +302,7 @@ var DIAGNOSTIC_PERSISTENCE = {
   DECISION_TARGET_UNSUPPORTED: T,
   DECISION_SUPERSEDE_TARGET_INVALID: T,
   DECISION_LOCK_BUSY: T,
+  DECISION_CONFIRM_PREVIEW_CHANGED: T,
   PROJECT_TRUTH_INVALID: T,
   DECISION_LOCK_MISMATCH: P,
   SOURCE_LOCATION_INVALID: P,
@@ -1314,7 +1317,8 @@ var decisionShape = {
   rationale: text().optional(),
   owner: z.literal("human").optional(),
   governs: z.strictObject({ requirements: ids().optional(), paths: texts().optional(), symbols: texts().optional() }).optional(),
-  forbids: z.strictObject({ dependencies: texts().optional(), symbols: texts().optional(), paths: texts().optional() }).optional(),
+  /** imported_paths (H-72): repository path patterns; a changed import resolving to a matching file conflicts. */
+  forbids: z.strictObject({ dependencies: texts().optional(), symbols: texts().optional(), paths: texts().optional(), imported_paths: texts().optional() }).optional(),
   supersedes: id().nullable().optional(),
   evidence: z.array(EvidencePointerSchema).optional(),
   source: sources,
@@ -1595,7 +1599,9 @@ function mapDecisionContent(d, ctx, governsRelation) {
     forbids: {
       dependencies: d.forbids?.dependencies ?? [],
       symbols: d.forbids?.symbols ?? [],
-      paths: ctx.patterns(["forbids", "paths"], d.forbids?.paths)
+      paths: ctx.patterns(["forbids", "paths"], d.forbids?.paths),
+      // H-72: only when present and non-empty; absent stays absent (lock digest compatibility).
+      ...(d.forbids?.imported_paths?.length ?? 0) > 0 ? { importedPaths: ctx.patterns(["forbids", "imported_paths"], d.forbids?.imported_paths) } : {}
     },
     supersedes: d.supersedes ?? null,
     evidence: ctx.evidence(["evidence"], d.evidence),
@@ -2219,6 +2225,9 @@ function canonical(value) {
   }
   return value;
 }
+function candidateDigest(value) {
+  return sha256(stableJson(value));
+}
 function stableJson(value) {
   return JSON.stringify(canonical(value));
 }
@@ -2382,6 +2391,7 @@ var DECISION_PERMISSIONS = {
   confirm: ["human"],
   reject: ["human"]
 };
+var CANDIDATE_FIELDS = ["title", "kind", "question", "answer", "rationale", "governs", "forbids", "enforcement", "supersedes", "evidence", "source", "extensions"];
 var SYSTEM = { kind: "system", name: "duo" };
 var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var idTokens = (message2) => message2.split(/[^A-Za-z0-9-]+/u);
@@ -2609,7 +2619,7 @@ function createDecisionService(options) {
         return success({ proposalId: created.value.id, path: created.value.path, indexRequired: false, repaired }, prepared.diagnostics);
       });
     },
-    async confirm(actor, id3) {
+    async confirm(actor, id3, confirmOptions = {}) {
       const denied = forbidden(actor, "confirm");
       if (denied.length > 0)
         return failure(denied);
@@ -2621,7 +2631,13 @@ function createDecisionService(options) {
           return failure(prepared.diagnostics);
         const { truth, repaired } = prepared.value;
         const warnings = [...prepared.diagnostics];
-        return DECISION_ID.test(id3) ? confirmDecision(actor, id3, truth, repaired, warnings) : confirmProposal(actor, id3, truth, repaired, warnings);
+        const c = await candidateOf(truth, id3);
+        if (c.value === void 0)
+          return failure(c.diagnostics);
+        if (confirmOptions.expectedDigest !== void 0 && confirmOptions.expectedDigest !== c.value.digest) {
+          return failure([createDiagnostic("DECISION_CONFIRM_PREVIEW_CHANGED", "The Decision changed after you reviewed it. Review the current contents and confirm again.", { path: c.value.sourcePath })]);
+        }
+        return c.value.sourceKind === "decision" ? confirmDecision(actor, c.value, truth, repaired, warnings) : confirmProposal(actor, c.value, truth, repaired, warnings);
       });
     },
     async reject(actor, proposalId, reason) {
@@ -2656,39 +2672,70 @@ function createDecisionService(options) {
         return prepared.value === void 0 ? failure(prepared.diagnostics) : success({ repaired: prepared.value.repaired }, prepared.diagnostics);
       });
     },
-    async previewConfirm(proposalId) {
-      if (!PROPOSAL_ID_PATTERN.test(proposalId))
-        return failure([createDiagnostic("INVALID_ID", `"${proposalId}" is not a proposal ID`)]);
+    async previewConfirm(id3) {
+      if (!PROPOSAL_ID_PATTERN.test(id3) && !DECISION_ID.test(id3))
+        return failure([createDiagnostic("INVALID_ID", `"${id3}" is not a proposal or Decision ID`)]);
       const loaded = load();
       if (loaded.value === void 0)
         return failure(loaded.diagnostics);
       const truth = loaded.value;
-      const entry = listDecisionProposals(truth).find((p) => p.id === proposalId);
-      if (entry === void 0)
-        return failure([createDiagnostic("PROPOSAL_NOT_FOUND", `No proposal ${proposalId}`)]);
-      if (entry.status !== "pending")
-        return failure([createDiagnostic("PROPOSAL_NOT_PENDING", `${proposalId} is ${entry.status}`, entry.proposal.location)]);
-      const stale = staleness(truth, entry.proposal);
-      const target = entry.proposal.supersedes === null ? void 0 : truth.decisions.find((d) => d.id === entry.proposal.supersedes);
+      const c = await candidateOf(truth, id3);
+      if (c.value === void 0)
+        return failure(c.diagnostics);
+      const v = c.value;
+      const expected = v.sourceKind === "decision" ? id3 : await allocate("D", truth);
       return success({
-        proposalId,
-        nextDecisionId: await allocate("D", truth),
-        ...stale === void 0 ? {} : { stale },
-        ...target === void 0 ? {} : { supersedes: { id: target.id, title: target.title, state: target.state, path: target.location.path } }
+        sourceId: id3,
+        sourceKind: v.sourceKind,
+        sourcePath: v.sourcePath,
+        action: v.action,
+        ...v.sourceKind === "proposal" ? { proposalId: id3 } : {},
+        expectedDecisionId: expected,
+        nextDecisionId: expected,
+        candidate: v.candidate,
+        ...v.proposedBy === void 0 ? {} : { proposedBy: v.proposedBy },
+        ...v.proposedByKind === void 0 ? {} : { proposedByKind: v.proposedByKind },
+        ...v.stale === void 0 ? {} : { stale: v.stale },
+        ...v.target === void 0 ? {} : { supersedes: { id: v.target.id, title: v.target.title, state: v.target.state, path: v.target.location.path } },
+        digest: v.digest
       });
     },
-    verifyLock(decisionId) {
+    verifyLock(decisionId2) {
       const loaded = load();
       if (loaded.value === void 0)
         return failure(loaded.diagnostics);
-      const d = loaded.value.decisions.find((x) => x.id === decisionId);
+      const d = loaded.value.decisions.find((x) => x.id === decisionId2);
       if (d === void 0)
-        return failure([createDiagnostic("PROPOSAL_NOT_FOUND", `No Decision ${decisionId}`)]);
+        return failure([createDiagnostic("PROPOSAL_NOT_FOUND", `No Decision ${decisionId2}`)]);
       const r = verifyDecisionLock(d);
       return success(r.value, r.diagnostics);
     }
   };
-  async function confirmProposal(actor, id3, truth, repaired, warnings) {
+  async function candidateOf(truth, id3) {
+    if (DECISION_ID.test(id3)) {
+      const d = truth.decisions.find((x) => x.id === id3);
+      if (d === void 0)
+        return failure([createDiagnostic("PROPOSAL_NOT_FOUND", `No Decision ${id3}`)]);
+      if (!isServiceFile(d))
+        return failure([createDiagnostic("DECISION_TARGET_UNSUPPORTED", `${id3} is not a decisions/D-###.yaml file; DUO does not rewrite it`, d.location)]);
+      if (d.state === "superseded" || d.state === CONFIRMED && d.lock !== void 0) {
+        return failure([createDiagnostic("DECISION_LOCKED", `${id3} is ${d.state} and locked; supersede it with a new proposal`, d.location)]);
+      }
+      if (d.state === "rejected")
+        return failure([createDiagnostic("PROPOSAL_NOT_PENDING", `${id3} is rejected`, d.location)]);
+      const data2 = await rawData(d.location.path);
+      if (data2 === void 0)
+        return failure([createDiagnostic("PROPOSAL_NOT_FOUND", `${d.location.path} is missing`)]);
+      return success(finishCandidate(truth, {
+        sourceId: id3,
+        sourceKind: "decision",
+        sourcePath: d.location.path,
+        action: d.state === CONFIRMED ? "add-lock" : "confirm-in-place",
+        data: data2,
+        supersedesId: d.supersedes,
+        decision: d
+      }));
+    }
     const done = truth.decisions.find((d) => d.proposalId === id3);
     if (done !== void 0)
       return failure([createDiagnostic("PROPOSAL_NOT_PENDING", `${id3} was already confirmed as ${done.id}`)]);
@@ -2697,16 +2744,54 @@ function createDecisionService(options) {
       return failure([createDiagnostic("PROPOSAL_NOT_FOUND", `No proposal ${id3}`)]);
     if (entry.status !== "pending")
       return failure([createDiagnostic("PROPOSAL_NOT_PENDING", `${id3} is ${entry.status}`, entry.proposal.location)]);
-    const proposal = entry.proposal;
-    const stale = staleness(truth, proposal);
+    const data = await rawData(entry.proposal.location.path);
+    if (data === void 0)
+      return failure([createDiagnostic("PROPOSAL_NOT_FOUND", `${entry.proposal.location.path} is missing`)]);
+    const stale = staleness(truth, entry.proposal);
+    return success(finishCandidate(truth, {
+      sourceId: id3,
+      sourceKind: "proposal",
+      sourcePath: entry.proposal.location.path,
+      action: "create",
+      data,
+      supersedesId: entry.proposal.supersedes,
+      proposal: entry.proposal,
+      ...stale === void 0 ? {} : { stale },
+      ...typeof data.proposed_by === "string" ? { proposedBy: data.proposed_by } : {},
+      ...typeof data.proposed_by_kind === "string" ? { proposedByKind: data.proposed_by_kind } : {}
+    }));
+  }
+  async function rawData(repoPath3) {
+    const text4 = await fs28.readText(`${root}/${repoPath3}`);
+    if (text4 === void 0)
+      return void 0;
+    return parseYaml({ path: repoPath3, text: text4 }).value?.data ?? {};
+  }
+  function finishCandidate(truth, base) {
+    const candidate = defined(Object.fromEntries(CANDIDATE_FIELDS.map((k) => [k, base.data[k]])));
+    const target = base.supersedesId === null ? void 0 : truth.decisions.find((t2) => t2.id === base.supersedesId);
+    const digest = candidateDigest({
+      sourceId: base.sourceId,
+      sourceKind: base.sourceKind,
+      sourcePath: base.sourcePath,
+      action: base.action,
+      candidate,
+      stale: base.stale ?? null,
+      proposedBy: base.proposedBy ?? null,
+      proposedByKind: base.proposedByKind ?? null,
+      supersedes: base.supersedesId === null ? null : target === void 0 ? { id: base.supersedesId, missing: true } : { id: target.id, title: target.title, state: target.state, supersededBy: target.supersededBy, path: target.location.path, content: decisionLockDigest(target) }
+    });
+    return { ...base, candidate, ...target === void 0 ? {} : { target }, digest };
+  }
+  async function confirmProposal(actor, c, truth, repaired, warnings) {
+    const id3 = c.sourceId;
+    const proposal = c.proposal;
+    const stale = c.stale;
     if (stale !== void 0) {
       warnings.push(createDiagnostic("PROPOSAL_STALE", `${id3} was made on an older Project Truth${stale.changedRefs.length > 0 ? ` (changed: ${stale.changedRefs.join(", ")})` : ""}; confirmed anyway`, proposal.location));
     }
-    const text4 = await fs28.readText(`${root}/${proposal.location.path}`);
-    if (text4 === void 0)
-      return failure([createDiagnostic("PROPOSAL_NOT_FOUND", `${proposal.location.path} is missing`)]);
-    const data = parseYaml({ path: proposal.location.path, text: text4 }).value?.data ?? {};
-    const target = proposal.supersedes === null ? void 0 : truth.decisions.find((d) => d.id === proposal.supersedes);
+    const data = c.data;
+    const target = c.target;
     if (proposal.supersedes !== null) {
       if (target === void 0)
         return failure([createDiagnostic("BROKEN_REFERENCE", `${id3} supersedes ${proposal.supersedes}, which does not exist`, proposal.location)]);
@@ -2716,8 +2801,8 @@ function createDecisionService(options) {
         return failure([createDiagnostic("DECISION_SUPERSEDE_TARGET_INVALID", `${target.id} is ${target.state}; only a confirmed Decision can be superseded`, target.location)]);
     }
     const confirmedAt = now();
-    const content = (decisionId, digest) => yaml(defined({
-      id: decisionId,
+    const content = (decisionId2, digest) => yaml(defined({
+      id: decisionId2,
       title: data.title,
       kind: data.kind,
       state: CONFIRMED,
@@ -2740,9 +2825,9 @@ function createDecisionService(options) {
       confirmed_by: actor.name,
       lock: digest === void 0 ? void 0 : { digest }
     }));
-    const render = (decisionId) => {
-      const draft = parseDecisionFile(decisionPath(decisionId), content(decisionId));
-      return content(decisionId, draft.value === void 0 ? void 0 : decisionLockDigest(draft.value));
+    const render = (decisionId2) => {
+      const draft = parseDecisionFile(decisionPath(decisionId2), content(decisionId2));
+      return content(decisionId2, draft.value === void 0 ? void 0 : decisionLockDigest(draft.value));
     };
     const probeId = await allocate("D", truth);
     const probe = parseDecisionFile(decisionPath(probeId), render(probeId));
@@ -2775,17 +2860,9 @@ function createDecisionService(options) {
       repaired
     }, [...warnings, ...after.map((d) => ({ ...d, severity: "warning" }))]);
   }
-  async function confirmDecision(actor, id3, truth, repaired, warnings) {
-    const d = truth.decisions.find((x) => x.id === id3);
-    if (d === void 0)
-      return failure([createDiagnostic("PROPOSAL_NOT_FOUND", `No Decision ${id3}`)]);
-    if (!isServiceFile(d))
-      return failure([createDiagnostic("DECISION_TARGET_UNSUPPORTED", `${id3} is not a decisions/D-###.yaml file; DUO does not rewrite it`, d.location)]);
-    if (d.state === "superseded" || d.state === CONFIRMED && d.lock !== void 0) {
-      return failure([createDiagnostic("DECISION_LOCKED", `${id3} is ${d.state} and locked; supersede it with a new proposal`, d.location)]);
-    }
-    if (d.state === "rejected")
-      return failure([createDiagnostic("PROPOSAL_NOT_PENDING", `${id3} is rejected`, d.location)]);
+  async function confirmDecision(actor, c, truth, repaired, warnings) {
+    const id3 = c.sourceId;
+    const d = c.decision;
     const digest = decisionLockDigest(d);
     const values = d.state === CONFIRMED ? { lock: { digest }, confirmed_at: d.confirmedAt ?? now(), confirmed_by: d.confirmedBy ?? actor.name } : { state: CONFIRMED, owner: "human", confirmed_at: now(), confirmed_by: actor.name, lock: { digest } };
     const target = d.supersedes === null ? void 0 : truth.decisions.find((t2) => t2.id === d.supersedes);
@@ -9554,6 +9631,45 @@ function sameFingerprint(a, b) {
   return a !== void 0 && b !== void 0 && a.state === b.state && a.fingerprintMode === b.fingerprintMode && a.contentHash === b.contentHash && a.size === b.size && a.gitBlobOid === b.gitBlobOid;
 }
 
+// packages/graph/dist/incremental/references.js
+async function readIndexedModuleReferences(root, paths) {
+  const read2 = readIndexState(root);
+  if (read2.state === void 0)
+    return paths.map((path35) => ({ status: "unavailable", path: path35, reason: read2.problem ?? "index state" }));
+  const files = new Map(read2.state.files.map((f) => [f.path, f]));
+  const keys = paths.map((path35) => {
+    const f = files.get(path35);
+    return f?.analysis === void 0 || f.analysis.status !== "ok" || f.resolution === void 0 ? void 0 : { path: path35, contentHash: f.contentHash, analyzer: f.analysis.analyzer, analyzerIdentity: f.analysis.identity };
+  });
+  const present = keys.filter((k) => k !== void 0);
+  const cached = await readCachedAnalyses(root, present);
+  const byPath = new Map(present.map((k, i) => [k.path, cached[i]]));
+  return paths.map((path35, i) => {
+    const f = files.get(path35);
+    if (f === void 0)
+      return { status: "not-indexed", path: path35 };
+    if (keys[i] === void 0)
+      return { status: "not-analyzed", path: path35 };
+    const entry = byPath.get(path35);
+    const modules = f.resolution?.modules ?? [];
+    if (entry === void 0)
+      return { status: "unavailable", path: path35, reason: "analysis cache entry missing" };
+    const refs = entry.analysis.moduleReferences;
+    if (refs.length !== modules.length)
+      return { status: "unavailable", path: path35, reason: "analysis and resolution do not match" };
+    return {
+      status: "ok",
+      path: path35,
+      language: entry.analysis.language,
+      references: refs.map((r, j) => {
+        const resolution = modules[j];
+        const target = resolution.status === "resolved" && resolution.path !== path35 && files.has(resolution.path) ? resolution.path : void 0;
+        return { kind: r.kind, specifier: r.specifier, typeOnly: r.typeOnly, location: r.location, resolution, ...target === void 0 ? {} : { target } };
+      })
+    };
+  });
+}
+
 // packages/graph/dist/query/impact.js
 var RANK = { direct: 0, structural: 1, historical: 2 };
 var STEPS = {
@@ -10152,6 +10268,27 @@ function testRunEvidence(store, run2, test) {
     metadata: { status, ...run2.command === void 0 ? {} : { command: run2.command } }
   });
 }
+function moduleReferenceEvidence(store, reader, r, commit) {
+  const slice = reader.slice(r.location);
+  if (slice.value === void 0)
+    return void 0;
+  const contentHash = sha256Text(slice.value);
+  const range = lines(r.location);
+  return store.add({
+    id: evidenceId("repository", "file", `${r.path}
+module-reference
+${range?.join("-") ?? ""}
+${contentHash}`),
+    basis: "repository",
+    kind: "file",
+    entity: { type: "file", path: r.path },
+    source: r.location,
+    contentHash,
+    summary: `${r.path}:${range?.[0] ?? "?"} ${r.kind} "${r.specifier}" \u2192 ${r.target}`,
+    pointer: { kind: "file", path: r.path, ...range === void 0 ? {} : { lines: range }, commit, contentHash },
+    metadata: { moduleReference: r.kind, specifier: r.specifier, typeOnly: r.typeOnly, resolvedTo: r.target }
+  }, slice.value);
+}
 
 // packages/director/dist/llm/contract/evidence.js
 var OBSERVABLE = /* @__PURE__ */ new Set(["repository", "git", "test"]);
@@ -10175,7 +10312,7 @@ function makeClaim(ctx, input) {
   const basis = BASIS_ORDER.filter((b) => bases.has(b));
   const enforced = input.enforced ?? false;
   const v = input.violation;
-  const unverifiable = v?.language !== void 0 && ctx.baselineStructuralLanguages !== void 0 && !ctx.baselineStructuralLanguages.has(v.language);
+  const unverifiable = v?.unverifiable === true || v?.language !== void 0 && ctx.baselineStructuralLanguages !== void 0 && !ctx.baselineStructuralLanguages.has(v.language);
   const provenance = v === void 0 || ctx.baselineKeys === void 0 || input.alignment === "ALIGNED" ? void 0 : !ctx.baselineKeys.has(v.key) ? unverifiable ? "unverified-at-adoption" : "introduced" : v.touched ? "pre-existing-touched" : "pre-existing";
   const preExisting = provenance === "pre-existing" || provenance === "pre-existing-touched";
   return {
@@ -10324,77 +10461,333 @@ function declaredReferenceParts(message2) {
   return m === null ? void 0 : { governing: m[1] ?? "", offending: `ref:${m[2] ?? ""}:${m[3] ?? ""}` };
 }
 
-// packages/director/dist/review/rules.js
-var DECISIONS = `${STATE_DIR_NAME}/decisions/`;
-var PROPOSALS = `${STATE_DIR_NAME}/decisions/proposals/`;
-var TEST_FILE3 = /\.(?:test|spec)\.[cm]?[jt]sx?$/u;
-var decoder2 = new TextDecoder("utf-8");
-function blobSource(end2) {
-  if (end2 === "HEAD" || end2 === "INDEX")
-    return end2;
-  return typeof end2 === "string" ? void 0 : { commit: end2.commit };
+// packages/director/dist/context/policy.js
+var CONTEXT_POLICY_VERSION = "3";
+var EDGE_WEIGHTS = {
+  GOVERNS: 1,
+  IMPLEMENTS: 0.9,
+  TRACKED_BY: 0.9,
+  VALIDATED_BY: 0.8,
+  REQUIRES: 0.7,
+  CALLS: 0.7,
+  CONTAINS: 0.6,
+  IMPORTS: 0.5,
+  CHANGED_WITH: 0.3
+};
+var SEED_STRENGTH = { id: 1, path: 1, symbol: 1, "symbol-name": 0.9, keyword: 0.6, diff: 1 };
+var CROSS_LANGUAGE_FACTOR = 0.5;
+var DEFAULT_LIMITS = {
+  /** Upper bound; project.yaml context.max_depth (1–3, default 2) replaces it. */
+  maxDepth: 2,
+  /** Finalized candidates (05 nodeLimit 200). */
+  nodeLimit: 200,
+  /** Edges read per expanded node. */
+  edgeLimit: 2e3
+};
+var MIN_BUDGET = 1e3;
+var MAX_BUDGET = 1e6;
+var TASK_TOKEN_LIMIT = 200;
+var KEYWORD = {
+  /** Keyword seeds kept (05: top 8). */
+  top: 8,
+  /** Keyword matches below this fraction of the best one are not seeds. */
+  minFraction: 0.3,
+  /** BM25 parameters. */
+  k1: 1.2,
+  b: 0.75
+};
+var SYMBOL_NAME_MAX_MATCHES = 5;
+var TIER_ORDER = [
+  "requirement",
+  "decision",
+  "pending",
+  "code-direct",
+  "test",
+  "issue",
+  "code-structural",
+  "code-historical"
+];
+var TIER_SHARE = {
+  requirement: 0.25,
+  decision: 0.15,
+  pending: 0.05,
+  "code-direct": 0.3,
+  test: 0.12,
+  issue: 0.05,
+  "code-structural": 0.06,
+  "code-historical": 0.02
+};
+var L3_PER_FILE_FIRST_PASS = 2;
+var LEADING_CONTEXT_LINES = 12;
+var GENERIC_FILE_WINDOW = { lines: 40, chars: 2e3 };
+
+// packages/director/dist/context/expand.js
+var HUBS = /* @__PURE__ */ new Set(["project", "milestone", "decision", "issue"]);
+function displayRef(id3) {
+  const ref = parseNodeId(id3);
+  if (ref === void 0)
+    return id3;
+  switch (ref.type) {
+    case "project":
+      return "project";
+    case "file":
+      return ref.path;
+    case "symbol":
+      return `${ref.path}#${ref.symbol}`;
+    case "test":
+      return `${ref.path}#${ref.name}`;
+    default:
+      return ref.id;
+  }
 }
-async function sideText(ctx, side, file) {
-  if (side === "WORKTREE")
-    return readSourceFile(ctx.root, file).value;
-  const source = blobSource(side);
-  if (source === void 0)
-    return void 0;
-  const blob = await ctx.git.readBlob(source, file);
-  return blob.value === void 0 ? void 0 : canonicalSourceText(decoder2.decode(blob.value));
+function better(a, b) {
+  return b.score - a.score || a.depth - b.depth || compareUtf8(a.node.id, b.node.id);
 }
-function decisionsOf(file, text4) {
-  if (file.endsWith(".md"))
-    return [...parseDefinitionMarkdown(file, text4).value?.decisions ?? []];
-  const d = parseDecisionFile(file, text4).value;
-  return d === void 0 ? [] : [d];
+var Heap = class {
+  items = [];
+  get size() {
+    return this.items.length;
+  }
+  push(c) {
+    const a = this.items;
+    a.push(c);
+    let i = a.length - 1;
+    while (i > 0) {
+      const p = i - 1 >> 1;
+      if (better(a[i], a[p]) >= 0)
+        break;
+      [a[i], a[p]] = [a[p], a[i]];
+      i = p;
+    }
+  }
+  pop() {
+    const a = this.items;
+    const top = a[0];
+    const last = a.pop();
+    if (a.length > 0 && last !== void 0) {
+      a[0] = last;
+      let i = 0;
+      for (; ; ) {
+        const l = 2 * i + 1, r = l + 1;
+        let m = i;
+        if (l < a.length && better(a[l], a[m]) < 0)
+          m = l;
+        if (r < a.length && better(a[r], a[m]) < 0)
+          m = r;
+        if (m === i)
+          break;
+        [a[i], a[m]] = [a[m], a[i]];
+        i = m;
+      }
+    }
+    return top;
+  }
+};
+function step(edge) {
+  const provenance = typeof edge.metadata.provenance === "string" ? edge.metadata.provenance : "unknown";
+  return { from: displayRef(edge.from), type: edge.type, to: displayRef(edge.to), provenance };
 }
-var decisionFiles = (ctx) => ctx.files.filter((f) => f.path.startsWith(DECISIONS) && !f.path.startsWith(PROPOSALS));
-var codeSeeds = (ctx) => ctx.seeds.filter((s) => s.entity.type === "symbol" || s.entity.type === "file");
-async function decisionIntegrity(ctx) {
-  const out = [];
-  for (const f of decisionFiles(ctx)) {
-    const oldPath = f.oldPath ?? f.path;
-    const oldText = f.kind === "added" || f.kind === "untracked" ? void 0 : await sideText(ctx, ctx.from, oldPath);
-    const before = oldText === void 0 ? [] : decisionsOf(oldPath, oldText);
-    const after = f.kind === "deleted" ? [] : ctx.truth.decisions.filter((d) => d.location.path === f.path);
-    const ids2 = [.../* @__PURE__ */ new Set([...before.map((d) => d.id), ...after.map((d) => d.id)])].sort(compareUtf8);
-    for (const id3 of ids2) {
-      const o = before.find((d) => d.id === id3);
-      const n = after.find((d) => d.id === id3);
-      const oldEvidence = o === void 0 || oldText === void 0 ? void 0 : truthEvidenceFromText(ctx.store, { kind: "decision", id: id3, title: o.title, location: o.location }, oldText, `old:${ctx.fromLabel}`);
-      const newEvidence = n === void 0 ? void 0 : truthEvidence(ctx.store, ctx.reader, { kind: "decision", id: id3, title: n.title, location: n.location });
-      const evidence = [oldEvidence, newEvidence, ...f.evidenceIds];
-      const subject = { kind: "decision", id: id3 };
-      const wasConfirmed = o !== void 0 && (o.state === "confirmed" || o.state === "superseded");
-      if (n === void 0) {
-        if (wasConfirmed) {
-          const c2 = makeClaim(ctx, {
-            rule: "decision-integrity",
-            subject,
-            alignment: "CONFLICT",
-            reason: "confirmed-decision-removed",
-            enforced: true,
-            evidence,
-            expected: `${id3} stays in Project Truth (confirmed Decisions are superseded, not deleted)`,
-            observed: `${id3} was removed`
-          });
-          if (c2 !== void 0)
-            out.push(c2);
-        }
+function expandCandidates(store, seeds, options) {
+  const heap = new Heap();
+  const best = /* @__PURE__ */ new Map();
+  const seedIds = new Set(seeds.map((s) => s.id));
+  for (const s of seeds) {
+    const ref = parseNodeId(s.id);
+    const node = ref === void 0 ? void 0 : store.getNode(ref);
+    if (node === void 0)
+      continue;
+    heap.push({ node, score: s.strength, depth: 0, seed: s.id, steps: [] });
+    best.set(s.id, Math.max(best.get(s.id) ?? 0, s.strength));
+  }
+  const done = /* @__PURE__ */ new Map();
+  let truncated = false;
+  while (heap.size > 0) {
+    const c = heap.pop();
+    if (done.has(c.node.id))
+      continue;
+    if (done.size >= options.nodeLimit) {
+      truncated = true;
+      break;
+    }
+    done.set(c.node.id, c);
+    if (c.depth >= options.maxDepth || HUBS.has(c.node.type) && !(c.depth === 0 && seedIds.has(c.node.id)))
+      continue;
+    const adjacent = store.adjacentEdges([c.node.ref], { direction: "both", limit: options.edgeLimit });
+    if (adjacent.truncated)
+      truncated = true;
+    for (const edge of adjacent.edges) {
+      if (edge.type === "SUPERSEDES")
         continue;
-      }
-      if (n.state !== "confirmed" && n.state !== "superseded")
+      const other = edge.from === c.node.id ? edge.to : edge.from;
+      if (done.has(other) || other.startsWith("project:"))
         continue;
-      const lock = verifyDecisionLock(n).value;
-      let c;
-      if (wasConfirmed && decisionLockDigest(o) !== decisionLockDigest(n)) {
-        c = makeClaim(ctx, {
-          rule: "decision-integrity",
-          subject,
-          alignment: "CONFLICT",
-          reason: "confirmed-content-changed",
-          enforced: true,
+      const score = c.score * EDGE_WEIGHTS[edge.type];
+      if (score <= (best.get(other) ?? 0))
+        continue;
+      const ref = parseNodeId(other);
+      const node = ref === void 0 ? void 0 : store.getNode(ref);
+      if (node === void 0)
+        continue;
+      best.set(other, score);
+      heap.push({ node, score, depth: c.depth + 1, seed: c.seed, steps: [...c.steps, step(edge)] });
+    }
+  }
+  return { candidates: [...done.values()].sort(better), truncated };
+}
+
+// packages/director/dist/review/seeds.js
+var PROPOSALS = `${STATE_DIR_NAME}/decisions/proposals/`;
+function hunkRange(h) {
+  return h.newLines > 0 ? [h.newStart, h.newStart + h.newLines - 1] : [Math.max(1, h.newStart), Math.max(1, h.newStart)];
+}
+function overlaps(loc2, range) {
+  if (loc2?.startLine === void 0)
+    return false;
+  const end2 = loc2.endLine ?? loc2.startLine;
+  return range[0] <= end2 && range[1] >= loc2.startLine;
+}
+function owned(graph, path35) {
+  const out = [];
+  let afterId;
+  for (; ; ) {
+    const page = graph.listNodes({ ownerFile: path35, limit: 1e3, ...afterId === void 0 ? {} : { afterId } });
+    out.push(...page);
+    if (page.length < 1e3)
+      return out;
+    afterId = page[page.length - 1]?.id;
+  }
+}
+var width = (loc2) => (loc2?.endLine ?? 0) - (loc2?.startLine ?? 0);
+function truthDefinitions(truth) {
+  return [
+    ...truth.requirements.map((d) => ({ ref: definitionRef("requirement", d.id), location: d.location })),
+    ...truth.decisions.map((d) => ({ ref: definitionRef("decision", d.id), location: d.location })),
+    ...truth.constraints.map((d) => ({ ref: definitionRef("decision", d.id), location: d.location })),
+    ...truth.issues.map((d) => ({ ref: definitionRef("issue", d.id), location: d.location })),
+    ...truth.milestones.map((d) => ({ ref: definitionRef("milestone", d.id), location: d.location }))
+  ];
+}
+function diffSeeds(files, graph, truth) {
+  const seeds = /* @__PURE__ */ new Map();
+  const put = (entity, reason, path35, evidenceId2) => {
+    if (graph.getNode(entity) === void 0)
+      return;
+    const id3 = nodeId(entity);
+    const s = seeds.get(id3) ?? { entity, reason, path: path35, evidence: /* @__PURE__ */ new Set() };
+    s.evidence.add(evidenceId2);
+    seeds.set(id3, s);
+  };
+  const defs = truthDefinitions(truth);
+  for (const f of files) {
+    if (f.kind === "deleted")
+      continue;
+    if (f.path.startsWith(`${STATE_DIR_NAME}/`)) {
+      if (f.path.startsWith(PROPOSALS))
+        continue;
+      for (const h of f.hunks) {
+        for (const d of defs)
+          if (d.location.path === f.path && overlaps(d.location, hunkRange(h)))
+            put(d.ref, "truth-changed", f.path, h.evidenceId);
+      }
+      continue;
+    }
+    const nodes = owned(graph, f.path).filter((n) => n.type === "symbol" || n.type === "test");
+    const ranges = new Map(nodes.map((n) => [n.id, nodeLocations(n)]));
+    let touched = false;
+    for (const h of f.hunks) {
+      const range = hunkRange(h);
+      const hits = nodes.map((n) => ({ n, at: (ranges.get(n.id) ?? []).filter((l) => overlaps(l, range)) })).filter((x) => x.at.length > 0);
+      const inner = hits.filter((x) => !hits.some((o) => o !== x && o.at.some((ol) => x.at.some((xl) => width(ol) < width(xl) && overlaps(xl, [ol.startLine ?? 0, ol.endLine ?? 0])))));
+      for (const { n } of inner) {
+        put(n.ref, "hunk-overlap", f.path, h.evidenceId);
+        touched = true;
+      }
+    }
+    if (!touched)
+      for (const e of f.evidenceIds)
+        put(fileRef(f.path), "file-changed", f.path, e);
+  }
+  return [...seeds.entries()].sort(([a], [b]) => compareUtf8(a, b)).map(([id3, s]) => ({
+    id: id3,
+    ref: displayRef(id3),
+    entity: s.entity,
+    reason: s.reason,
+    path: s.path,
+    evidenceIds: [...s.evidence].sort(compareUtf8)
+  }));
+}
+
+// packages/director/dist/review/rules.js
+var DECISIONS = `${STATE_DIR_NAME}/decisions/`;
+var PROPOSALS2 = `${STATE_DIR_NAME}/decisions/proposals/`;
+var TEST_FILE3 = /\.(?:test|spec)\.[cm]?[jt]sx?$/u;
+var decoder2 = new TextDecoder("utf-8");
+function blobSource(end2) {
+  if (end2 === "HEAD" || end2 === "INDEX")
+    return end2;
+  return typeof end2 === "string" ? void 0 : { commit: end2.commit };
+}
+async function sideText(ctx, side, file) {
+  if (side === "WORKTREE")
+    return readSourceFile(ctx.root, file).value;
+  const source = blobSource(side);
+  if (source === void 0)
+    return void 0;
+  const blob = await ctx.git.readBlob(source, file);
+  return blob.value === void 0 ? void 0 : canonicalSourceText(decoder2.decode(blob.value));
+}
+function decisionsOf(file, text4) {
+  if (file.endsWith(".md"))
+    return [...parseDefinitionMarkdown(file, text4).value?.decisions ?? []];
+  const d = parseDecisionFile(file, text4).value;
+  return d === void 0 ? [] : [d];
+}
+var decisionFiles = (ctx) => ctx.files.filter((f) => f.path.startsWith(DECISIONS) && !f.path.startsWith(PROPOSALS2));
+var codeSeeds = (ctx) => ctx.seeds.filter((s) => s.entity.type === "symbol" || s.entity.type === "file");
+async function decisionIntegrity(ctx) {
+  const out = [];
+  for (const f of decisionFiles(ctx)) {
+    const oldPath = f.oldPath ?? f.path;
+    const oldText = f.kind === "added" || f.kind === "untracked" ? void 0 : await sideText(ctx, ctx.from, oldPath);
+    const before = oldText === void 0 ? [] : decisionsOf(oldPath, oldText);
+    const after = f.kind === "deleted" ? [] : ctx.truth.decisions.filter((d) => d.location.path === f.path);
+    const ids2 = [.../* @__PURE__ */ new Set([...before.map((d) => d.id), ...after.map((d) => d.id)])].sort(compareUtf8);
+    for (const id3 of ids2) {
+      const o = before.find((d) => d.id === id3);
+      const n = after.find((d) => d.id === id3);
+      const oldEvidence = o === void 0 || oldText === void 0 ? void 0 : truthEvidenceFromText(ctx.store, { kind: "decision", id: id3, title: o.title, location: o.location }, oldText, `old:${ctx.fromLabel}`);
+      const newEvidence = n === void 0 ? void 0 : truthEvidence(ctx.store, ctx.reader, { kind: "decision", id: id3, title: n.title, location: n.location });
+      const evidence = [oldEvidence, newEvidence, ...f.evidenceIds];
+      const subject = { kind: "decision", id: id3 };
+      const wasConfirmed = o !== void 0 && (o.state === "confirmed" || o.state === "superseded");
+      if (n === void 0) {
+        if (wasConfirmed) {
+          const c2 = makeClaim(ctx, {
+            rule: "decision-integrity",
+            subject,
+            alignment: "CONFLICT",
+            reason: "confirmed-decision-removed",
+            enforced: true,
+            evidence,
+            expected: `${id3} stays in Project Truth (confirmed Decisions are superseded, not deleted)`,
+            observed: `${id3} was removed`
+          });
+          if (c2 !== void 0)
+            out.push(c2);
+        }
+        continue;
+      }
+      if (n.state !== "confirmed" && n.state !== "superseded")
+        continue;
+      const lock = verifyDecisionLock(n).value;
+      let c;
+      if (wasConfirmed && decisionLockDigest(o) !== decisionLockDigest(n)) {
+        c = makeClaim(ctx, {
+          rule: "decision-integrity",
+          subject,
+          alignment: "CONFLICT",
+          reason: "confirmed-content-changed",
+          enforced: true,
           evidence,
           expected: `confirmed ${id3} content unchanged (supersede it with a new Decision instead)`,
           observed: `content fields of ${id3} changed`
@@ -10813,6 +11206,124 @@ function scopeRelevance(ctx, covered = /* @__PURE__ */ new Set()) {
   }
   return out;
 }
+var overlapsLines = (loc2, [a, b]) => {
+  const start2 = loc2.startLine ?? 1;
+  return start2 <= b && (loc2.endLine ?? start2) >= a;
+};
+var preview = (items) => `${items.slice(0, 5).join(", ")}${items.length > 5 ? `, \u2026 (${items.length} in all)` : ""}`;
+function confirmedAfterBaseline(confirmedAt, recordedAt) {
+  if (confirmedAt === void 0 || recordedAt === void 0)
+    return false;
+  const c = Date.parse(confirmedAt);
+  const r = Date.parse(recordedAt);
+  return Number.isFinite(c) && Number.isFinite(r) && c > r;
+}
+async function decisionForbidsImport(ctx) {
+  const decisions = ctx.truth.decisions.filter((d) => isActive(d) && (d.forbids.importedPaths?.length ?? 0) > 0).sort((a, b) => compareUtf8(a.id, b.id));
+  if (decisions.length === 0)
+    return { claims: [], limitations: [] };
+  const matchers = decisions.map((d) => ({ d, match: (d.forbids.importedPaths ?? []).flatMap((p) => compileRepoPattern(p) ?? []) }));
+  const changed = ctx.files.filter((f) => f.kind !== "deleted" && !f.binary && !f.path.startsWith(`${STATE_DIR_NAME}/`) && f.hunks.length > 0);
+  const usable = [];
+  const otherSide = [];
+  for (const f of changed) {
+    if (ctx.to === "WORKTREE") {
+      usable.push(f);
+      continue;
+    }
+    const side = await sideText(ctx, ctx.to, f.path);
+    const current = readSourceFile(ctx.root, f.path).value;
+    if (side !== void 0 && current !== void 0 && side === canonicalSourceText(current))
+      usable.push(f);
+    else
+      otherSide.push(f.path);
+  }
+  const indexed = await readIndexedModuleReferences(ctx.root, usable.map((f) => f.path));
+  const unresolved = [];
+  const ambiguous = [];
+  const unsupported = [];
+  const notIndexedTarget = [];
+  const unavailable2 = [];
+  const groups = /* @__PURE__ */ new Map();
+  usable.forEach((f, i) => {
+    const r = indexed[i];
+    if (r === void 0 || r.status === "unavailable") {
+      unavailable2.push(f.path);
+      return;
+    }
+    if (r.status !== "ok")
+      return;
+    for (const ref of r.references) {
+      const hunks = f.hunks.filter((h) => overlapsLines(ref.location, hunkRange(h))).map((h) => h.evidenceId);
+      if (hunks.length === 0)
+        continue;
+      const where = `${f.path}:${ref.location.startLine ?? "?"}`;
+      const target = ref.target;
+      if (target === void 0) {
+        const s = ref.resolution.status;
+        if (s === "unresolved")
+          unresolved.push(where);
+        else if (s === "ambiguous")
+          ambiguous.push(where);
+        else if (s === "unsupported")
+          unsupported.push(where);
+        else if (s === "resolved")
+          notIndexedTarget.push(where);
+        continue;
+      }
+      for (const { d, match } of matchers) {
+        if (!match.some((m) => m(target)))
+          continue;
+        const key2 = `${d.id}
+${f.path}
+${target}`;
+        const g = groups.get(key2) ?? { d, source: f.path, target, sites: [] };
+        g.sites.push({ ref, hunks });
+        groups.set(key2, g);
+      }
+    }
+  });
+  const coverage = ctx.baselineEvaluatedRules?.has("decision-forbids-import") === true;
+  const claims = [];
+  for (const g of [...groups.values()].sort((a, b) => compareUtf8(a.d.id, b.d.id) || compareUtf8(a.source, b.source) || compareUtf8(a.target, b.target))) {
+    const where = g.sites.map((s) => `${g.source}:${s.ref.location.startLine ?? "?"} ${s.ref.kind} "${s.ref.specifier}"${s.ref.typeOnly ? " (type-only)" : ""}`).join("; ");
+    const unverifiable = ctx.baselineKeys !== void 0 && !coverage && !confirmedAfterBaseline(g.d.confirmedAt, ctx.baselineRecordedAt);
+    const c = makeClaim(ctx, {
+      rule: "decision-forbids-import",
+      subject: { kind: "decision", id: g.d.id },
+      key: `import:${g.source}->${g.target}`,
+      alignment: "CONFLICT",
+      reason: "forbidden-import",
+      enforced: g.d.enforcement === "block",
+      expected: `no changed import resolves to ${(g.d.forbids.importedPaths ?? []).join(", ")} (${g.d.id})`,
+      observed: `forbidden import on a changed line: ${where} resolves to ${g.target}`,
+      evidence: [
+        decisionEvidence(ctx, g.d.id),
+        ...g.sites.map((s) => moduleReferenceEvidence(ctx.store, ctx.reader, { path: g.source, location: s.ref.location, kind: s.ref.kind, specifier: s.ref.specifier, typeOnly: s.ref.typeOnly, target: g.target }, ctx.toLabel)),
+        ...g.sites.flatMap((s) => s.hunks),
+        nodeEvidence(ctx, ctx.graph.getNode(fileRef(g.target)))
+      ],
+      violation: { key: violationKey("decision-forbids-import", g.d.id, `import:${nodeId(fileRef(g.source))}->${nodeId(fileRef(g.target))}`), touched: true, ...unverifiable ? { unverifiable: true } : {} }
+    });
+    if (c !== void 0)
+      claims.push(c);
+  }
+  const limitations2 = [];
+  const not = "were not checked against forbids.imported_paths";
+  if (unresolved.length > 0)
+    limitations2.push({ code: "imports-unresolved", message: `${unresolved.length} changed import(s) did not resolve to a repository file and ${not}: ${preview(unresolved)}.` });
+  if (ambiguous.length > 0)
+    limitations2.push({ code: "imports-ambiguous", message: `${ambiguous.length} changed import(s) have more than one candidate file and ${not}: ${preview(ambiguous)}.` });
+  if (unsupported.length > 0)
+    limitations2.push({ code: "imports-resolution-unsupported", message: `${unsupported.length} changed import(s) are in a language without module resolution (imports are recorded as written) and ${not}: ${preview(unsupported)}.` });
+  if (notIndexedTarget.length > 0)
+    limitations2.push({ code: "imports-target-not-indexed", message: `${notIndexedTarget.length} changed import(s) resolve to a file outside the index and ${not}: ${preview(notIndexedTarget)}.` });
+  if (unavailable2.length > 0)
+    limitations2.push({ code: "imports-index-unavailable", message: `The indexed imports of ${unavailable2.length} changed file(s) could not be read and ${not}: ${preview(unavailable2)}.` });
+  if (otherSide.length > 0)
+    limitations2.push({ code: "imports-reviewed-side-not-indexed", message: `${otherSide.length} changed file(s) differ on the reviewed side from the indexed working tree; their imports ${not}: ${preview(otherSide)}.` });
+  return { claims, limitations: limitations2 };
+}
 
 // packages/director/dist/adoption/head.js
 var externals = (s) => s.filter((x) => x.kind === "external");
@@ -10834,7 +11345,7 @@ async function headBaselineFindings(input) {
     if (!found.has(key2))
       found.set(key2, { key: key2, rule, governing, offending, ...extra });
   };
-  const decisions = input.truth.decisions.filter((d) => isActive(d) && d.forbids.paths.length + d.forbids.symbols.length + d.forbids.dependencies.length > 0);
+  const decisions = input.truth.decisions.filter((d) => isActive(d) && d.forbids.paths.length + d.forbids.symbols.length + d.forbids.dependencies.length + (d.forbids.importedPaths?.length ?? 0) > 0);
   const declared = input.stateDiagnostics.filter((x) => x.code === "DECLARED_SYMBOL_UNRESOLVED");
   const needSymbols = decisions.some((d) => d.forbids.symbols.length > 0) || declared.length > 0 && input.divergent.size > 0;
   const symbols = [];
@@ -10884,6 +11395,20 @@ async function headBaselineFindings(input) {
       }
     }
   }
+  const importing = decisions.filter((d) => (d.forbids.importedPaths?.length ?? 0) > 0).map((d) => ({ d, match: (d.forbids.importedPaths ?? []).flatMap((p) => compileRepoPattern(p) ?? []) }));
+  if (importing.length > 0) {
+    for (const f of headFiles.filter((p) => !input.divergent.has(p))) {
+      for (const e of input.graph.adjacentEdges([fileRef(f)], { direction: "outgoing", types: ["IMPORTS"], limit: 1e4 }).edges) {
+        const to = parseNodeId(e.to);
+        if (to?.type !== "file" || !inHead.has(to.path))
+          continue;
+        for (const { d, match } of importing) {
+          if (match.some((m) => m(to.path)))
+            add("decision-forbids-import", d.id, `import:${nodeId(fileRef(f))}->${nodeId(fileRef(to.path))}`, { path: f, enforced: d.enforcement === "block" });
+        }
+      }
+    }
+  }
   if (declared.length > 0 && input.divergent.size > 0)
     limitations2.add("declared-references-approximated-for-divergent-paths");
   for (const diag of declared) {
@@ -11087,7 +11612,12 @@ async function captureAdoptionBaseline(root, options) {
     own?.value?.dispose();
   }
   const bootstrapTruth = await bootstrapTruthOf(root, git.value);
-  const limitations2 = [...evaluated.limitations, ...wt.truncated ? ["working-tree-list-truncated"] : []].sort(compareUtf8);
+  const evaluatedRules = ["decision-forbids", "declared-reference", "external-source-drift", ...wt.dirty ? [] : ["decision-forbids-import"]].sort(compareUtf8);
+  const limitations2 = [
+    ...evaluated.limitations,
+    ...wt.truncated ? ["working-tree-list-truncated"] : [],
+    ...wt.dirty ? ["import-relations-not-evaluated-dirty-working-tree"] : []
+  ].sort(compareUtf8);
   const body = {
     format: "duo.adoption-baseline/2",
     project: { name: truth.config.name, rootCommits: repo.value.rootCommitOids },
@@ -11118,7 +11648,8 @@ async function captureAdoptionBaseline(root, options) {
     findingsAt: "HEAD",
     findings: evaluated.findings,
     limitations: limitations2,
-    analysis
+    analysis,
+    evaluatedRules
   };
   const id3 = historyRecordId("adoption", body);
   const existing = loadAdoptionBaseline(root);
@@ -11290,180 +11821,6 @@ function oneGroup(groups, nodes) {
   return g !== void 0 && nodes.length > 1 && nodes.every((n) => groups.groups.get(n.id) === g);
 }
 
-// packages/director/dist/context/policy.js
-var CONTEXT_POLICY_VERSION = "2";
-var EDGE_WEIGHTS = {
-  GOVERNS: 1,
-  IMPLEMENTS: 0.9,
-  TRACKED_BY: 0.9,
-  VALIDATED_BY: 0.8,
-  REQUIRES: 0.7,
-  CALLS: 0.7,
-  CONTAINS: 0.6,
-  IMPORTS: 0.5,
-  CHANGED_WITH: 0.3
-};
-var SEED_STRENGTH = { id: 1, path: 1, symbol: 1, "symbol-name": 0.9, keyword: 0.6, diff: 1 };
-var CROSS_LANGUAGE_FACTOR = 0.5;
-var DEFAULT_LIMITS = {
-  /** Upper bound; project.yaml context.max_depth (1–3, default 2) replaces it. */
-  maxDepth: 2,
-  /** Finalized candidates (05 nodeLimit 200). */
-  nodeLimit: 200,
-  /** Edges read per expanded node. */
-  edgeLimit: 2e3
-};
-var MIN_BUDGET = 1e3;
-var MAX_BUDGET = 1e6;
-var TASK_TOKEN_LIMIT = 200;
-var KEYWORD = {
-  /** Keyword seeds kept (05: top 8). */
-  top: 8,
-  /** Keyword matches below this fraction of the best one are not seeds. */
-  minFraction: 0.3,
-  /** BM25 parameters. */
-  k1: 1.2,
-  b: 0.75
-};
-var SYMBOL_NAME_MAX_MATCHES = 5;
-var TIER_ORDER = [
-  "requirement",
-  "decision",
-  "pending",
-  "code-direct",
-  "test",
-  "issue",
-  "code-structural",
-  "code-historical"
-];
-var TIER_SHARE = {
-  requirement: 0.25,
-  decision: 0.15,
-  pending: 0.05,
-  "code-direct": 0.3,
-  test: 0.12,
-  issue: 0.05,
-  "code-structural": 0.06,
-  "code-historical": 0.02
-};
-var L3_PER_FILE_FIRST_PASS = 2;
-var LEADING_CONTEXT_LINES = 12;
-var GENERIC_FILE_WINDOW = { lines: 40, chars: 2e3 };
-
-// packages/director/dist/context/expand.js
-var HUBS = /* @__PURE__ */ new Set(["project", "milestone", "decision", "issue"]);
-function displayRef(id3) {
-  const ref = parseNodeId(id3);
-  if (ref === void 0)
-    return id3;
-  switch (ref.type) {
-    case "project":
-      return "project";
-    case "file":
-      return ref.path;
-    case "symbol":
-      return `${ref.path}#${ref.symbol}`;
-    case "test":
-      return `${ref.path}#${ref.name}`;
-    default:
-      return ref.id;
-  }
-}
-function better(a, b) {
-  return b.score - a.score || a.depth - b.depth || compareUtf8(a.node.id, b.node.id);
-}
-var Heap = class {
-  items = [];
-  get size() {
-    return this.items.length;
-  }
-  push(c) {
-    const a = this.items;
-    a.push(c);
-    let i = a.length - 1;
-    while (i > 0) {
-      const p = i - 1 >> 1;
-      if (better(a[i], a[p]) >= 0)
-        break;
-      [a[i], a[p]] = [a[p], a[i]];
-      i = p;
-    }
-  }
-  pop() {
-    const a = this.items;
-    const top = a[0];
-    const last = a.pop();
-    if (a.length > 0 && last !== void 0) {
-      a[0] = last;
-      let i = 0;
-      for (; ; ) {
-        const l = 2 * i + 1, r = l + 1;
-        let m = i;
-        if (l < a.length && better(a[l], a[m]) < 0)
-          m = l;
-        if (r < a.length && better(a[r], a[m]) < 0)
-          m = r;
-        if (m === i)
-          break;
-        [a[i], a[m]] = [a[m], a[i]];
-        i = m;
-      }
-    }
-    return top;
-  }
-};
-function step(edge) {
-  const provenance = typeof edge.metadata.provenance === "string" ? edge.metadata.provenance : "unknown";
-  return { from: displayRef(edge.from), type: edge.type, to: displayRef(edge.to), provenance };
-}
-function expandCandidates(store, seeds, options) {
-  const heap = new Heap();
-  const best = /* @__PURE__ */ new Map();
-  const seedIds = new Set(seeds.map((s) => s.id));
-  for (const s of seeds) {
-    const ref = parseNodeId(s.id);
-    const node = ref === void 0 ? void 0 : store.getNode(ref);
-    if (node === void 0)
-      continue;
-    heap.push({ node, score: s.strength, depth: 0, seed: s.id, steps: [] });
-    best.set(s.id, Math.max(best.get(s.id) ?? 0, s.strength));
-  }
-  const done = /* @__PURE__ */ new Map();
-  let truncated = false;
-  while (heap.size > 0) {
-    const c = heap.pop();
-    if (done.has(c.node.id))
-      continue;
-    if (done.size >= options.nodeLimit) {
-      truncated = true;
-      break;
-    }
-    done.set(c.node.id, c);
-    if (c.depth >= options.maxDepth || HUBS.has(c.node.type) && !(c.depth === 0 && seedIds.has(c.node.id)))
-      continue;
-    const adjacent = store.adjacentEdges([c.node.ref], { direction: "both", limit: options.edgeLimit });
-    if (adjacent.truncated)
-      truncated = true;
-    for (const edge of adjacent.edges) {
-      if (edge.type === "SUPERSEDES")
-        continue;
-      const other = edge.from === c.node.id ? edge.to : edge.from;
-      if (done.has(other) || other.startsWith("project:"))
-        continue;
-      const score = c.score * EDGE_WEIGHTS[edge.type];
-      if (score <= (best.get(other) ?? 0))
-        continue;
-      const ref = parseNodeId(other);
-      const node = ref === void 0 ? void 0 : store.getNode(ref);
-      if (node === void 0)
-        continue;
-      best.set(other, score);
-      heap.push({ node, score, depth: c.depth + 1, seed: c.seed, steps: [...c.steps, step(edge)] });
-    }
-  }
-  return { candidates: [...done.values()].sort(better), truncated };
-}
-
 // packages/director/dist/context/types.js
 var SEED_PROVENANCE = {
   id: "explicit",
@@ -11633,6 +11990,7 @@ function planContext(input) {
   const mil = new Map(truth.milestones.map((m) => [m.id, m]));
   const seedIds = new Set(input.seeds.seeds.map((s) => s.id));
   const exactSeeds = new Set(input.seeds.seeds.filter((s) => s.match !== "keyword").map((s) => s.id));
+  const idSeeds = new Set(input.seeds.seeds.filter((s) => s.match === "id").map((s) => s.id));
   const slice = (loc2) => {
     const r = reader.slice(loc2);
     diagnostics.push(...r.diagnostics);
@@ -11665,6 +12023,7 @@ function planContext(input) {
       score: c.score,
       depth: c.depth,
       mandatory: exactSeeds.has(c.node.id),
+      ...c.depth === 0 && idSeeds.has(c.node.id) ? { primary: true } : {},
       levels: levels([["L1", head], ["L2", body === "" ? void 0 : `${head}
 ${body}`], ["L3", exact === void 0 ? void 0 : `${head}
 ${fence(exact, "md")}`]]),
@@ -11773,7 +12132,7 @@ ${fence(exact, "yaml")}`]]),
       case "issue": {
         const i = iss.get(ref.id);
         if (i !== void 0)
-          put(issueDraft(i, node, c, slice, via(c)));
+          put(issueDraft(i, node, c, slice, via(c), c.depth === 0 && idSeeds.has(node.id)));
         break;
       }
       case "milestone": {
@@ -11929,6 +12288,7 @@ ${fence(w.text, langOf(ref.path))}`;
     tier: d.tier,
     rank: i + 1,
     mandatory: d.mandatory,
+    ...d.primary === true ? { primary: true } : {},
     levels: d.levels,
     via: d.via,
     ...d.source === void 0 ? {} : { source: d.source },
@@ -11965,7 +12325,7 @@ function proposalRefs(p) {
       out.add(e.id);
   return [...out].sort(compareUtf8);
 }
-function issueDraft(i, node, c, slice, v) {
+function issueDraft(i, node, c, slice, v, primary) {
   const head = `${i.id} ${i.title} (${[i.status, i.milestone].filter((x) => x !== null).join(", ")})`;
   const ac = i.acceptance.map((a) => `- ${a.id} ${a.text}`);
   const commits = Array.isArray(node.payload.commits) ? node.payload.commits.slice(0, 3).map((x) => String(x).slice(0, 12)) : [];
@@ -11978,6 +12338,7 @@ function issueDraft(i, node, c, slice, v) {
     score: c.score,
     depth: c.depth,
     mandatory: c.depth === 0,
+    ...primary ? { primary: true } : {},
     levels: levels([
       ["L1", head],
       ["L2", ac.length === 0 ? void 0 : [head, ...ac].join("\n")],
@@ -12237,8 +12598,14 @@ var STATIC_LIMITATIONS = [
   { code: "files-by-path", message: "Files are listed by path; whole files are never included. Symbols and tests show their own source range; a file without a structural analyzer shows at most its first lines." },
   { code: "no-diff", message: "The working-tree diff is not part of this packet." }
 ];
-function limitations(plan, taskTruncated, omitted, summarized) {
+function limitations(plan, taskTruncated, omitted, summarized, budget, truncatedSeeds) {
   const out = [...STATIC_LIMITATIONS];
+  for (const t2 of truncatedSeeds) {
+    out.push({
+      code: "explicit-seed-truncated",
+      message: t2.shown === void 0 ? `Explicit seed ${t2.ref} could not fit within the ${budget}-token budget (its full specification is ${t2.fullTokens} tokens); it is not shown.` : `Explicit seed ${t2.ref} could not fit its full specification within the ${budget}-token budget (${t2.fullTokens} tokens); the highest fitting representation (${t2.shown}) is shown.`
+    });
+  }
   if (omitted > 0)
     out.push({ code: "omitted", message: `omitted: ${omitted} lower-ranked candidates did not fit the budget (ids in omittedCandidates).` });
   if (summarized > 0)
@@ -12261,6 +12628,11 @@ function packContext(input) {
   const block = (text4) => meter.count(renderItemBlock(text4) + "\n");
   const evidence = (i) => meter.count(renderEvidenceLine(i.ref, i.via) + "\n");
   const itemTokens = (i, level) => level < 0 ? 0 : block(i.levels[level]?.text ?? "") + evidence(i);
+  const truncatedSeed = (s, level) => ({
+    ref: s.value.ref,
+    fullTokens: itemTokens(s.value, s.value.levels.length - 1),
+    shown: level < 0 ? void 0 : s.value.levels[level]?.level ?? "L1"
+  });
   const pendingTokens = (p, level) => block(p.levels[level]?.text ?? "");
   const build = () => {
     const chosen = items.filter((s) => s.level >= 0);
@@ -12298,6 +12670,7 @@ function packContext(input) {
     const omitted = items.filter((s) => s.level < 0);
     const summarized = chosen.filter((s) => s.level < s.value.levels.length - 1).length;
     const taskTruncated = request.taskTruncated;
+    const truncatedSeeds = items.filter((s) => s.value.primary === true && s.level < s.value.levels.length - 1).map((s) => truncatedSeed(s, s.level));
     const packet2 = {
       format: "duo.context-packet/1",
       request,
@@ -12309,7 +12682,7 @@ function packContext(input) {
       issues: of((i) => i.kind === "issue" || i.kind === "milestone"),
       pendingDecisions: pend,
       evidence: chosen.map((s) => ({ id: s.value.id, ref: s.value.ref, via: s.value.via })),
-      limitations: limitations(plan, taskTruncated, omitted.length, summarized),
+      limitations: limitations(plan, taskTruncated, omitted.length, summarized, request.budget, truncatedSeeds),
       signals: plan.signals,
       omittedCandidates: omitted.map((s) => ({ id: s.value.id, ref: s.value.ref, rank: s.value.rank, tier: s.value.tier, reason: "budget" })),
       truncated: omitted.length > 0 || plan.traversalTruncated || taskTruncated,
@@ -12320,7 +12693,7 @@ function packContext(input) {
     return { packet: packet2, markdown: renderContextMarkdown(packet2) };
   };
   const frame = build();
-  const frameLimits = limitations(plan, request.taskTruncated, Math.max(1, items.length), Math.max(1, items.length));
+  const frameLimits = limitations(plan, request.taskTruncated, Math.max(1, items.length), Math.max(1, items.length), request.budget, items.filter((s) => s.value.primary === true).map((s) => truncatedSeed(s, 0)));
   const reserved = meter.count(renderContextMarkdown({ ...frame.packet, limitations: frameLimits }));
   if (reserved > request.budget) {
     return failure([createDiagnostic("CONTEXT_REQUEST_INVALID", `budget ${request.budget} is smaller than the packet frame (${reserved} tokens: task, headings, pending decisions, limitations)`)]);
@@ -12355,6 +12728,12 @@ function packContext(input) {
   for (const s of items)
     if (s.value.mandatory)
       raise(s, s.value.tier, void 0);
+  for (const s of items) {
+    if (s.value.primary !== true)
+      continue;
+    while (raise(s, s.value.tier, void 0)) {
+    }
+  }
   const promotion = available - spent;
   const byTier = (tier) => tier === "pending" ? pending : items.filter((s) => s.value.tier === tier);
   for (const capped of [true, false]) {
@@ -14466,88 +14845,6 @@ async function externalSourceDrift(ctx) {
   return { claims, limitations: limitations2 };
 }
 
-// packages/director/dist/review/seeds.js
-var PROPOSALS2 = `${STATE_DIR_NAME}/decisions/proposals/`;
-function hunkRange(h) {
-  return h.newLines > 0 ? [h.newStart, h.newStart + h.newLines - 1] : [Math.max(1, h.newStart), Math.max(1, h.newStart)];
-}
-function overlaps(loc2, range) {
-  if (loc2?.startLine === void 0)
-    return false;
-  const end2 = loc2.endLine ?? loc2.startLine;
-  return range[0] <= end2 && range[1] >= loc2.startLine;
-}
-function owned(graph, path35) {
-  const out = [];
-  let afterId;
-  for (; ; ) {
-    const page = graph.listNodes({ ownerFile: path35, limit: 1e3, ...afterId === void 0 ? {} : { afterId } });
-    out.push(...page);
-    if (page.length < 1e3)
-      return out;
-    afterId = page[page.length - 1]?.id;
-  }
-}
-var width = (loc2) => (loc2?.endLine ?? 0) - (loc2?.startLine ?? 0);
-function truthDefinitions(truth) {
-  return [
-    ...truth.requirements.map((d) => ({ ref: definitionRef("requirement", d.id), location: d.location })),
-    ...truth.decisions.map((d) => ({ ref: definitionRef("decision", d.id), location: d.location })),
-    ...truth.constraints.map((d) => ({ ref: definitionRef("decision", d.id), location: d.location })),
-    ...truth.issues.map((d) => ({ ref: definitionRef("issue", d.id), location: d.location })),
-    ...truth.milestones.map((d) => ({ ref: definitionRef("milestone", d.id), location: d.location }))
-  ];
-}
-function diffSeeds(files, graph, truth) {
-  const seeds = /* @__PURE__ */ new Map();
-  const put = (entity, reason, path35, evidenceId2) => {
-    if (graph.getNode(entity) === void 0)
-      return;
-    const id3 = nodeId(entity);
-    const s = seeds.get(id3) ?? { entity, reason, path: path35, evidence: /* @__PURE__ */ new Set() };
-    s.evidence.add(evidenceId2);
-    seeds.set(id3, s);
-  };
-  const defs = truthDefinitions(truth);
-  for (const f of files) {
-    if (f.kind === "deleted")
-      continue;
-    if (f.path.startsWith(`${STATE_DIR_NAME}/`)) {
-      if (f.path.startsWith(PROPOSALS2))
-        continue;
-      for (const h of f.hunks) {
-        for (const d of defs)
-          if (d.location.path === f.path && overlaps(d.location, hunkRange(h)))
-            put(d.ref, "truth-changed", f.path, h.evidenceId);
-      }
-      continue;
-    }
-    const nodes = owned(graph, f.path).filter((n) => n.type === "symbol" || n.type === "test");
-    const ranges = new Map(nodes.map((n) => [n.id, nodeLocations(n)]));
-    let touched = false;
-    for (const h of f.hunks) {
-      const range = hunkRange(h);
-      const hits = nodes.map((n) => ({ n, at: (ranges.get(n.id) ?? []).filter((l) => overlaps(l, range)) })).filter((x) => x.at.length > 0);
-      const inner = hits.filter((x) => !hits.some((o) => o !== x && o.at.some((ol) => x.at.some((xl) => width(ol) < width(xl) && overlaps(xl, [ol.startLine ?? 0, ol.endLine ?? 0])))));
-      for (const { n } of inner) {
-        put(n.ref, "hunk-overlap", f.path, h.evidenceId);
-        touched = true;
-      }
-    }
-    if (!touched)
-      for (const e of f.evidenceIds)
-        put(fileRef(f.path), "file-changed", f.path, e);
-  }
-  return [...seeds.entries()].sort(([a], [b]) => compareUtf8(a, b)).map(([id3, s]) => ({
-    id: id3,
-    ref: displayRef(id3),
-    entity: s.entity,
-    reason: s.reason,
-    path: s.path,
-    evidenceIds: [...s.evidence].sort(compareUtf8)
-  }));
-}
-
 // packages/director/dist/review/semantic.js
 var ALIGNMENTS = ["ALIGNED", "PARTIAL", "CONFLICT", "UNKNOWN"];
 function semanticSchema(claimIds) {
@@ -14853,17 +15150,21 @@ async function reviewChanges(root, request, options) {
     stateDiagnostics: readIndexState(root).state?.diagnostics ?? [],
     ...request.testResults === void 0 ? {} : { testResults: request.testResults },
     ...adoption.baseline === void 0 ? {} : { baselineKeys: new Set(adoption.baseline.findings.map((f) => f.key)) },
-    ...adoption.baseline === void 0 ? {} : { baselineStructuralLanguages: new Set(adoption.baseline.analysis?.structuralLanguages ?? PRE_T18_STRUCTURAL_LANGUAGES) }
+    ...adoption.baseline === void 0 ? {} : { baselineStructuralLanguages: new Set(adoption.baseline.analysis?.structuralLanguages ?? PRE_T18_STRUCTURAL_LANGUAGES) },
+    ...adoption.baseline?.evaluatedRules === void 0 ? {} : { baselineEvaluatedRules: new Set(adoption.baseline.evaluatedRules) },
+    ...adoption.baseline === void 0 ? {} : { baselineRecordedAt: adoption.baseline.recorded.at }
   };
   const integrity = await decisionIntegrity(ctx);
-  const forbids = await decisionForbids(ctx);
+  const forbids2 = await decisionForbids(ctx);
+  const imports = await decisionForbidsImport(ctx);
   const drift = await externalSourceDrift(ctx);
   const additions = unlinkedAdditions(ctx);
-  const conflicted = new Set(forbids.map((c) => c.subject.id));
+  const conflicted = new Set([...forbids2, ...imports.claims].map((c) => c.subject.id));
   const claims = [
     ...integrity,
     ...supersedeIntegrity(ctx),
-    ...forbids,
+    ...forbids2,
+    ...imports.claims,
     ...decisionGovernance(ctx, conflicted),
     ...declaredReferences(ctx),
     ...requirementImplementation(ctx),
@@ -14914,6 +15215,7 @@ async function reviewChanges(root, request, options) {
       ...limitationsOf({ identity: diff.value.identity, from: diff.value.from, to: diff.value.to, files }, reviewPacket, task !== "", taskContext?.status === "ready"),
       ...analysisLimitsOf(files, options.graph),
       ...drift.limitations,
+      ...imports.limitations,
       ...adoption.status === "incompatible" ? [{ code: "adoption-baseline-unusable", message: "The Adoption Baseline cannot be used (" + (adoption.reason ?? "unreadable") + "); violations are not told apart from pre-existing ones." }] : []
     ],
     semanticAssist: semantic.assist,
@@ -14934,6 +15236,25 @@ async function reviewChanges(root, request, options) {
   return success({ result, performance: perf() }, result.diagnostics);
 }
 
+// packages/director/dist/review/provenance-label.js
+var PROVENANCE_LABELS = {
+  en: {
+    introduced: "not-in-adoption-baseline",
+    "pre-existing": "in-adoption-baseline",
+    "pre-existing-touched": "in-adoption-baseline, touched",
+    "unverified-at-adoption": "baseline-unverified"
+  },
+  ko: {
+    introduced: "\uCC44\uD0DD \uAE30\uC900\uC120\uC5D0 \uC5C6\uC74C",
+    "pre-existing": "\uCC44\uD0DD \uAE30\uC900\uC120\uC5D0 \uC874\uC7AC",
+    "pre-existing-touched": "\uCC44\uD0DD \uAE30\uC900\uC120\uC5D0 \uC874\uC7AC, \uC774\uBC88 \uBCC0\uACBD\uC5D0\uC11C \uC811\uCD09",
+    "unverified-at-adoption": "\uCC44\uD0DD \uC2DC\uC810 \uAC80\uC99D \uBD88\uAC00"
+  }
+};
+function provenanceLabel(value, locale = "en") {
+  return PROVENANCE_LABELS[locale][value];
+}
+
 // packages/director/dist/runtime/metrics.js
 import fs23 from "node:fs";
 import fsp5 from "node:fs/promises";
@@ -15918,6 +16239,16 @@ var repoPattern = z4.string().min(1).max(4096).refine((p) => normalizeRepoPatter
 var definitionId = z4.string().regex(DEFINITION_ID_PATTERN, "a definition ID such as AUTH-03 or D-004");
 var endpoint = z4.string().min(1).max(256).refine((v) => !v.startsWith("-") && !/[\u0000-\u001f\u007f\s]/u.test(v), "HEAD, INDEX, WORKTREE or a commit / branch name");
 var text2 = (max) => z4.string().trim().min(1).max(max);
+var decisionId = z4.string().regex(/^D-\d+$/u, "a Decision ID such as D-004");
+var forbidPattern = z4.string().min(1).max(4096).refine((p) => compileRepoPattern(p) !== void 0, "a repository-relative pattern review can match (no absolute or .. pattern)");
+var FORBIDS_SYMBOL_MESSAGE = "forbids.symbols matches symbol qualified names only. Do not use a DUO path#symbol reference. Use a qualified-name wildcard such as 'LegacyDb' or '*LegacyDb*'.";
+var forbidSymbol = text2(500).refine((s) => !/[/\\#]/u.test(s), FORBIDS_SYMBOL_MESSAGE);
+var forbids = z4.strictObject({
+  paths: z4.array(forbidPattern).max(100).optional().describe("Repository path patterns; a change to a matching file conflicts."),
+  symbols: z4.array(forbidSymbol).max(100).optional().describe("Wildcard patterns over the qualified names of changed symbols ('*' any text, '?' one character), e.g. LegacyDb, LegacyDb.run, *LegacyDb*. Not a DUO path#symbol reference. Catches changes to matching symbols, not new calls or references from other symbols."),
+  dependencies: z4.array(text2(500)).max(100).optional().describe("Package names; adding one to a package.json conflicts."),
+  imported_paths: z4.array(forbidPattern).max(100).optional().describe("Repository path patterns (H-72). Matches changed import/module-reference statements (import, export-from, require, dynamic import, type-only included; Python imports and C++ quoted includes where DUO resolves them) that resolve exactly to a matching repository file. It does not prove the import relation is newly introduced; unresolved, ambiguous and Java/C# imports are not checked. External packages belong in dependencies.")
+}).refine((f) => (f.paths?.length ?? 0) + (f.symbols?.length ?? 0) + (f.dependencies?.length ?? 0) + (f.imported_paths?.length ?? 0) > 0, "forbids needs at least one path, symbol, dependency or imported path");
 var INPUT = {
   duo_get_status: z4.strictObject({}),
   duo_get_context: z4.strictObject({ task: text2(2e4), budget: z4.number().int().min(MIN_BUDGET).max(MAX_BUDGET).optional(), profile: z4.enum(["default", "review"]).optional() }),
@@ -15940,6 +16271,10 @@ var INPUT = {
     answer: text2(2e3),
     rationale: text2(4e3).optional(),
     governs: z4.strictObject({ requirements: z4.array(definitionId).max(100).optional(), paths: z4.array(repoPattern).max(100).optional(), symbols: z4.array(text2(500)).max(100).optional() }).optional(),
+    // H-71: the proposal may carry what a Decision enforces and what it replaces; it gains no authority until a human confirms it.
+    forbids: forbids.optional(),
+    enforcement: z4.enum(["warn", "block"]).optional(),
+    supersedes: decisionId.optional(),
     agent: text2(100).optional()
   })
 };
@@ -16058,7 +16393,7 @@ ${advice.join("\n")}`);
       const r = p;
       if (r.status === "index-required")
         return "INDEX_REQUIRED: the DUO index is not current. Run duoctl index, then review again.";
-      const lines4 = r.claims.filter((c) => c.alignment !== "ALIGNED").map((c) => `- ${c.alignment} ${c.rule} ${c.subject.id}: ${c.reason}${c.provenance === void 0 ? "" : ` (${c.provenance})`}${c.blockEligible ? " [blocking]" : ""}`);
+      const lines4 = r.claims.filter((c) => c.alignment !== "ALIGNED").map((c) => `- ${c.alignment} ${c.rule} ${c.subject.id}: ${c.reason}${c.provenance === void 0 ? "" : ` (${provenanceLabel(c.provenance)})`}${c.blockEligible ? " [blocking]" : ""}`);
       const a = r.semanticAssist;
       const semantic = a.status === "not-requested" ? [] : [
         `Semantic assistance (supplemental, never blocks): ${a.status}${a.failure === void 0 ? "" : ` (${a.failure})`}`,
@@ -16111,14 +16446,17 @@ ${advice.join("\n")}`);
     name: "duo_propose_decision",
     title: "Propose a Decision",
     readOnly: false,
-    description: "Creates a Decision proposal only (decisions/proposals/P-*.yaml). Cannot confirm or reject a decision: a human does that in duoctl or the Web UI. A proposal is not confirmed intent. The agent name is an audit label, not an authentication.",
+    description: `Creates a Decision proposal only (decisions/proposals/P-*.yaml). Cannot confirm or reject a decision: a human does that in duoctl or the Web UI. A proposal is not confirmed Project Truth and does not change any review verdict. forbids and enforcement: "block" have no authority until a human confirms the proposal. supersedes names a confirmed Decision to replace; that Decision is not modified until a human confirms this proposal. governs describes what the Decision concerns (for tracing and context); it does not scope forbids. Forbids are repository-wide: they apply to matching changes anywhere in the repository. forbids.symbols are wildcard patterns over the qualified names of changed symbols ('*' any text, '?' one character), e.g. LegacyDb, LegacyDb.run, *LegacyDb*; a DUO path#symbol reference such as src/db/legacy-db.ts#LegacyDb (a display handle in context output) is not a pattern and is refused. A symbol pattern catches changes to matching symbols, not new calls or references from other code. forbids.imported_paths are repository path patterns: they match changed import/module-reference statements that resolve exactly to a matching repository file; this does not prove the import relation is newly introduced, and unresolved, ambiguous or Java/C# imports are not checked. The agent name is an audit label, not an authentication.`,
     run: async (args, ctx) => {
       const op = await proposeDecision(ctx.root, args.agent ?? ctx.agentName, {
         title: args.title,
         question: args.question,
         answer: args.answer,
         ...args.rationale === void 0 ? {} : { rationale: args.rationale },
-        ...args.governs === void 0 ? {} : { governs: args.governs }
+        ...args.governs === void 0 ? {} : { governs: args.governs },
+        ...args.forbids === void 0 ? {} : { forbids: args.forbids },
+        ...args.enforcement === void 0 ? {} : { enforcement: args.enforcement },
+        ...args.supersedes === void 0 ? {} : { supersedes: args.supersedes }
       });
       return { op, metric: { status: op.kind === "ok" ? "proposed" : op.kind } };
     },
@@ -17304,8 +17642,8 @@ function projectProposals(root) {
     const service = createDecisionService({ root });
     const previews = {};
     for (const e of d.proposals.filter((x) => x.status === "pending")) {
-      const preview = await service.previewConfirm(e.id);
-      previews[e.id] = preview.value ?? { error: preview.diagnostics.map((x) => x.code) };
+      const preview2 = await service.previewConfirm(e.id);
+      previews[e.id] = preview2.value ?? { error: preview2.diagnostics.map((x) => x.code) };
     }
     return { kind: "ok", diagnostics: [], payload: { proposals: d.proposals, previews } };
   });
@@ -17462,7 +17800,8 @@ var PROPOSAL_ID = /^P-[A-Za-z0-9-]{1,64}$/u;
 var SCHEMAS = {
   context: z5.strictObject({ task: text3(2e4), budget: z5.number().int().min(MIN_BUDGET).max(MAX_BUDGET).optional() }),
   review: z5.strictObject({ task: text3(2e4).optional(), from: endpoint2.optional(), to: endpoint2.optional(), includeSemanticAssist: z5.boolean().optional() }),
-  confirm: z5.strictObject({ confirmId: z5.string().max(80) }),
+  // previewDigest is required (T34.3): a UI confirm is always bound to the preview the person reviewed.
+  confirm: z5.strictObject({ confirmId: z5.string().max(80), previewDigest: z5.string().min(1).max(100) }),
   reject: z5.strictObject({ reason: z5.string().max(2e3).optional() }),
   graph: z5.strictObject({ node: text3(4096), kind: z5.enum(["trace", "impact"]).default("trace"), depth: z5.coerce.number().int().min(1).max(3).default(1) }),
   search: z5.strictObject({ q: text3(200), limit: z5.coerce.number().int().min(1).max(50).default(20) }),
@@ -17519,7 +17858,7 @@ async function startDuoUiServer(options) {
         const body2 = parse3(SCHEMAS.confirm, await readJson2(req));
         if (body2.confirmId.trim() !== id3)
           throw new HttpError(400, "UI_CONFIRM_ID_MISMATCH", "type the proposal ID to confirm it");
-        const r2 = await service.confirm(await actor(), id3);
+        const r2 = await service.confirm(await actor(), id3, { expectedDigest: body2.previewDigest });
         await meter("decision", r2.value === void 0 ? "failed" : "confirmed", started);
         return { name: "decision", body: r2.value === void 0 ? { status: "failed", diagnostics: r2.diagnostics.map((d) => ({ code: d.code, message: d.message })) } : { status: "confirmed", result: r2.value, warnings: r2.diagnostics.map((d) => ({ code: d.code, message: d.message })) } };
       }
@@ -17802,6 +18141,22 @@ var EN = {
   "decision.confirmed": "confirmed as {id} \xB7 {path}",
   "decision.rejected": "rejected {id}",
   "decision.none": "No pending decisions.",
+  "decision.preview.create": "Confirm {id}: this proposal becomes a new confirmed Decision.",
+  "decision.preview.in-place": "Confirm {id}: this proposed Decision becomes confirmed in place.",
+  "decision.preview.lock": "Confirm {id}: this Decision is already confirmed; confirming adds its lock.",
+  "decision.preview.reject": "Reject {id}: the proposal is kept as rejected; nothing becomes a Decision.",
+  "decision.preview.becomes-superseded": "becomes superseded by this Decision",
+  "decision.preview.not-found": "not found; confirm will fail",
+  "decision.preview.stale": "yes, Project Truth changed since this proposal was made{changed}",
+  "decision.preview.fresh": "no",
+  "decision.preview.stale-na": "not applicable (staleness is tracked for proposals only)",
+  "decision.preview.expected": "{id} (expected; the ID in the confirm result is authoritative)",
+  "decision.preview.in-place-id": "{id} (confirmed in place)",
+  "decision.preview.lock-id": "{id} (already confirmed; the lock is added)",
+  "decision.preview.not-set": "(not set)",
+  "decision.preview.none": "(none)",
+  "decision.preview.forbids-scope": "repository-wide (governs does not narrow forbids)",
+  "decision.index-hint": "Run duoctl index so review and context see it.",
   "decision.truth-errors": "Not listed: {n} Truth error(s). These files could not be read; confirm and reject refuse to run until they are fixed:",
   "stats.none": "No metrics yet.",
   "not-initialized": "Not a DUO project (no .duo-project/project.yaml). Run duoctl init.",
@@ -17996,6 +18351,22 @@ var KO = {
   "decision.confirmed": "{id}\uB85C \uD655\uC815 \xB7 {path}",
   "decision.rejected": "{id} \uAC70\uC808",
   "decision.none": "\uB300\uAE30 \uC911 decision\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+  "decision.preview.create": "{id} \uD655\uC815: \uC774 proposal\uC774 \uC0C8 \uD655\uC815 Decision\uC774 \uB429\uB2C8\uB2E4.",
+  "decision.preview.in-place": "{id} \uD655\uC815: \uC774 proposed Decision\uC774 \uADF8 \uC790\uB9AC\uC5D0\uC11C \uD655\uC815\uB429\uB2C8\uB2E4.",
+  "decision.preview.lock": "{id} \uD655\uC815: \uC774\uBBF8 \uD655\uC815\uB41C Decision\uC774\uBA70 lock\uC744 \uCD94\uAC00\uD569\uB2C8\uB2E4.",
+  "decision.preview.reject": "{id} \uAC70\uC808: proposal\uC740 rejected\uB85C \uB0A8\uACE0 Decision\uC774 \uB418\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4.",
+  "decision.preview.becomes-superseded": "\uC774 Decision\uC5D0 \uC758\uD574 superseded\uAC00 \uB429\uB2C8\uB2E4",
+  "decision.preview.not-found": "\uC5C6\uC74C, \uD655\uC815\uC774 \uC2E4\uD328\uD569\uB2C8\uB2E4",
+  "decision.preview.stale": "\uC608, proposal \uC774\uD6C4 Project Truth\uAC00 \uBC14\uB00C\uC5C8\uC2B5\uB2C8\uB2E4{changed}",
+  "decision.preview.fresh": "\uC544\uB2C8\uC694",
+  "decision.preview.stale-na": "\uD574\uB2F9 \uC5C6\uC74C(staleness\uB294 proposal\uC5D0\uB9CC \uC801\uC6A9)",
+  "decision.preview.expected": "{id} (\uC608\uC0C1\uAC12, \uC2E4\uC81C ID\uB294 \uD655\uC815 \uACB0\uACFC\uB97C \uB530\uB985\uB2C8\uB2E4)",
+  "decision.preview.in-place-id": "{id} (\uADF8 \uC790\uB9AC\uC5D0\uC11C \uD655\uC815)",
+  "decision.preview.lock-id": "{id} (\uC774\uBBF8 \uD655\uC815\uB428, lock \uCD94\uAC00)",
+  "decision.preview.not-set": "(\uC5C6\uC74C)",
+  "decision.preview.none": "(\uBE44\uC5B4 \uC788\uC74C)",
+  "decision.preview.forbids-scope": "\uC800\uC7A5\uC18C \uC804\uCCB4(governs\uB294 forbids\uC758 \uBC94\uC704\uB97C \uC881\uD788\uC9C0 \uC54A\uC74C)",
+  "decision.index-hint": "review\uC640 context\uC5D0 \uBC18\uC601\uD558\uB824\uBA74 duoctl index\uB97C \uC2E4\uD589\uD558\uC138\uC694.",
   "decision.truth-errors": "\uBAA9\uB85D\uC5D0 \uC5C6\uC74C: Truth \uC624\uB958 {n}\uAC1C. \uC544\uB798 \uD30C\uC77C\uC744 \uC77D\uC9C0 \uBABB\uD588\uC73C\uBA70, \uACE0\uCE60 \uB54C\uAE4C\uC9C0 \uD655\uC815\uACFC \uAC70\uC808\uC740 \uC2E4\uD589\uB418\uC9C0 \uC54A\uC2B5\uB2C8\uB2E4:",
   "stats.none": "\uC9C0\uD45C\uAC00 \uC544\uC9C1 \uC5C6\uC2B5\uB2C8\uB2E4.",
   "not-initialized": "DUO project\uAC00 \uC544\uB2D9\uB2C8\uB2E4(.duo-project/project.yaml \uC5C6\uC74C). duoctl init\uC744 \uC2E4\uD589\uD558\uC138\uC694.",
@@ -18258,6 +18629,59 @@ function ambiguityHint(L, a) {
 }
 
 // apps/cli/dist/commands/decision.js
+var DECISION_ID2 = /^D-\d+$/u;
+var LABEL_WIDTH = 13;
+function show(L, value, nested = false) {
+  if (value === void 0 || value === null)
+    return t(L, "decision.preview.not-set");
+  if (Array.isArray(value))
+    return value.length === 0 ? t(L, "decision.preview.none") : value.map((v) => show(L, v, true)).join(", ");
+  if (typeof value === "object") {
+    const parts = Object.entries(value).filter(([, v]) => v !== void 0 && v !== null && !(Array.isArray(v) && v.length === 0)).map(([k, v]) => `${k}: ${show(L, v, true)}`);
+    if (parts.length === 0)
+      return t(L, "decision.preview.none");
+    return nested ? `{${parts.join("; ")}}` : parts.join("; ");
+  }
+  return String(value).replace(/\r?\n/gu, `
+${" ".repeat(LABEL_WIDTH + 3)}`);
+}
+function hasForbids(forbids2) {
+  return typeof forbids2 === "object" && forbids2 !== null && Object.values(forbids2).some((v) => Array.isArray(v) && v.length > 0);
+}
+function previewLines(L, p, op) {
+  const c = p.candidate;
+  const id3 = p.sourceId;
+  const head = op === "reject" ? t(L, "decision.preview.reject", { id: id3 }) : p.action === "create" ? t(L, "decision.preview.create", { id: id3 }) : p.action === "add-lock" ? t(L, "decision.preview.lock", { id: id3 }) : t(L, "decision.preview.in-place", { id: id3 });
+  const row = (label, value) => `  ${label.padEnd(LABEL_WIDTH)} ${value}`;
+  const supersedes = c.supersedes === void 0 ? t(L, "decision.preview.not-set") : p.supersedes === void 0 ? `${show(L, c.supersedes)} (${t(L, "decision.preview.not-found")})` : `${p.supersedes.id} "${p.supersedes.title}" (${p.supersedes.state})${op === "confirm" ? ` \u2192 ${t(L, "decision.preview.becomes-superseded")}` : ""}`;
+  const stale = p.sourceKind === "decision" ? t(L, "decision.preview.stale-na") : p.stale === void 0 ? t(L, "decision.preview.fresh") : t(L, "decision.preview.stale", { changed: p.stale.changedRefs.length > 0 ? ` (changed: ${p.stale.changedRefs.join(", ")})` : "" });
+  const lines4 = [
+    head,
+    row("Title", show(L, c.title)),
+    row("Question", show(L, c.question)),
+    row("Answer", show(L, c.answer)),
+    row("Kind", show(L, c.kind)),
+    row("Rationale", show(L, c.rationale)),
+    row("Governs", show(L, c.governs)),
+    row("Forbids", show(L, c.forbids)),
+    // T40 (N3): governs does not scope forbids; say so wherever forbids are set.
+    ...hasForbids(c.forbids) ? [row("Forbids scope", t(L, "decision.preview.forbids-scope"))] : [],
+    row("Enforcement", show(L, c.enforcement)),
+    row("Supersedes", supersedes),
+    // H-71: the proposer as the proposal file records it (an audit label); a YAML Decision has none to show.
+    ...p.sourceKind === "proposal" ? [row("Proposed by", p.proposedBy === void 0 ? t(L, "decision.preview.not-set") : `${p.proposedBy}${p.proposedByKind === void 0 ? "" : ` (${p.proposedByKind})`}`)] : [],
+    ...c.evidence === void 0 ? [] : [row("Evidence", show(L, c.evidence))],
+    ...c.source === void 0 ? [] : [row("Source", show(L, c.source))],
+    ...c.extensions === void 0 ? [] : [row("Extensions", show(L, c.extensions))],
+    row("Stale", stale)
+  ];
+  if (op === "confirm") {
+    const expected = p.action === "create" ? t(L, "decision.preview.expected", { id: p.expectedDecisionId }) : p.action === "add-lock" ? t(L, "decision.preview.lock-id", { id: p.expectedDecisionId }) : t(L, "decision.preview.in-place-id", { id: p.expectedDecisionId });
+    lines4.push(row("Expected ID", expected));
+  }
+  lines4.push(row("File", p.sourcePath));
+  return lines4;
+}
 async function decisionCommand(env, sub, id3, reason) {
   const project2 = requireProject(env, "decision");
   if (project2.value === void 0)
@@ -18281,27 +18705,31 @@ async function decisionCommand(env, sub, id3, reason) {
   if (!env.io.isTTY || env.nonInteractive) {
     return failed4("decision", EXIT.ERROR, [createDiagnostic("CLI_TTY_REQUIRED", t("en", "decision.tty"))], [t(env.locale, "decision.tty")]);
   }
-  const proposal = entries.find((e) => e.id === id3);
-  const decision = truth.decisions.find((d) => d.id === id3);
-  const shown = proposal?.proposal ?? decision;
-  if (shown !== void 0) {
-    env.io.err(`${id3}  "${shown.title}"`);
-    env.io.err(`  question  ${shown.question}`);
-    env.io.err(`  answer    ${shown.answer}`);
-    if (shown.governs.requirements.length > 0)
-      env.io.err(`  governs   ${shown.governs.requirements.join(", ")}`);
+  const service = createDecisionService({ root: env.root, clock: () => env.io.now() });
+  const previewed = sub === "reject" && DECISION_ID2.test(id3) ? void 0 : await service.previewConfirm(id3);
+  if (previewed !== void 0) {
+    if (previewed.value === void 0)
+      return failed4("decision", EXIT.ERROR, previewed.diagnostics, diagLines(previewed.diagnostics), null, { status: "failed" });
+    for (const line of previewLines(env.locale, previewed.value, sub))
+      env.io.err(line);
   }
   const typed = (await env.io.prompt(t(env.locale, "decision.retype", { op: sub })))?.trim();
   if (typed !== id3)
     return failed4("decision", EXIT.ERROR, [], [t(env.locale, "decision.mismatch")]);
-  const service = createDecisionService({ root: env.root, clock: () => env.io.now() });
   const actor = await humanActor(env.root);
   if (sub === "confirm") {
-    const r2 = await service.confirm(actor, id3);
+    const r2 = await service.confirm(actor, id3, previewed?.value === void 0 ? {} : { expectedDigest: previewed.value.digest });
     if (r2.value === void 0)
       return failed4("decision", EXIT.ERROR, r2.diagnostics, diagLines(r2.diagnostics), null, { status: "failed" });
     const warnings = r2.diagnostics.filter((d) => d.severity === "warning").map((d) => `${d.code}: ${d.message}`);
-    return { command: "decision", exitCode: EXIT.OK, diagnostics: r2.diagnostics, result: r2.value, human: [...warnings, t(env.locale, "decision.confirmed", { id: r2.value.decisionId, path: r2.value.path })], metric: { status: "confirmed" } };
+    return {
+      command: "decision",
+      exitCode: EXIT.OK,
+      diagnostics: r2.diagnostics,
+      result: r2.value,
+      human: [...warnings, t(env.locale, "decision.confirmed", { id: r2.value.decisionId, path: r2.value.path }), t(env.locale, "decision.index-hint")],
+      metric: { status: "confirmed" }
+    };
   }
   const r = await service.reject(actor, id3, reason);
   if (r.value === void 0)
@@ -18823,7 +19251,7 @@ function renderReview(env, r) {
   const ev = new Map(r.evidence.map((e) => [e.id, e]));
   const shown = r.claims.filter((c) => env.verbose || c.alignment !== "ALIGNED");
   for (const c of shown) {
-    const tags = [c.blockEligible ? "blocking" : "", c.provenance ?? "", c.drift ? "drift" : ""].filter((x) => x !== "").join(", ");
+    const tags = [c.blockEligible ? "blocking" : "", c.provenance === void 0 ? "" : provenanceLabel(c.provenance, L), c.drift ? "drift" : ""].filter((x) => x !== "").join(", ");
     out.push(`  ${c.alignment.padEnd(9)} ${c.rule.padEnd(26)} ${c.subject.id} \xB7 ${c.reason}${tags === "" ? "" : ` [${tags}]`}`);
     const pointers = c.evidenceIds.map((id3) => ev.get(id3)?.pointer).filter((p) => p?.path !== void 0).slice(0, 3).map((p) => `${p?.path ?? ""}${p?.lines === void 0 ? "" : `:${p.lines[0]}-${p.lines[1]}`}`);
     if (pointers.length > 0)