@milehimikey/em 1.13.1 → 1.14.0

package/dist/cli/pluginPin.js

@@ -0,0 +1,188 @@
+// SPDX-License-Identifier: MIT
+// The em Claude Code plugin's pin check (MIL-231, R14). Pure: reads a repo's `.claude/settings.json`
+// (then `.claude/settings.local.json`) and the machine-level marketplace registry, and reports
+// findings. No process.exit, no console, and nothing reads the real `~/.claude/plugins` unless the
+// caller passes it - the CLI resolves the directory (EM_CLAUDE_PLUGINS_DIR, default
+// ~/.claude/plugins), tests pass a fixture.
+//
+// Why two parts. A marketplace registration is per user and keyed by marketplace NAME: two repos
+// pinning different refs under one name silently collide (MIL-229 spike). The marketplace name
+// therefore carries the exact version (`em-1-14-0`), and the check compares the repo's declaration
+// (settings) AND the machine's registration (known_marketplaces.json) against the installed em.
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export const PLUGIN_NAME = "em";
+export const PLUGIN_REPO = "milehimikey/em";
+/** A marketplace key that makes a repo "declare the plugin": `em-<major>-<minor>-<patch>`. */
+export const PLUGIN_MARKETPLACE_RE = /^em-\d+-\d+-\d+$/;
+/** `1.14.0` -> `em-1-14-0` (the marketplace name the release stamps into .claude-plugin/marketplace.json). */
+export function pluginMarketplaceName(version) {
+    return `em-${version.replace(/\./g, "-")}`;
+}
+/** The two commands that register and enable the plugin pinned to `version` (both are required, in
+ *  this order: `plugin install` alone fails with "Plugin not found in marketplace"). */
+export function pluginInstallCommands(version) {
+    return [
+        `claude plugin marketplace add ${PLUGIN_REPO}@v${version} --scope project`,
+        `claude plugin install ${PLUGIN_NAME}@${pluginMarketplaceName(version)} --scope project`,
+    ];
+}
+/** The `.claude/settings.json` entries that pin the plugin to `version` (MIL-232, R14). Pure. */
+export function pluginSettingsEntries(version) {
+    const name = pluginMarketplaceName(version);
+    return {
+        name,
+        marketplace: { source: { source: "github", repo: PLUGIN_REPO, ref: `v${version}` } },
+        enabledKey: `${PLUGIN_NAME}@${name}`,
+    };
+}
+/**
+ * Merge the plugin pin for `version` into the text of a `.claude/settings.json` (`null` = file
+ * absent). Unknown keys and key order are preserved; output is 2-space JSON with a trailing newline.
+ * Returns `null` when the existing text is not a JSON object (the caller must not clobber it).
+ */
+export function mergePluginSettings(existing, version) {
+    let settings = {};
+    if (existing !== null) {
+        try {
+            const v = JSON.parse(existing);
+            if (v === null || typeof v !== "object" || Array.isArray(v))
+                return null;
+            settings = v;
+        }
+        catch {
+            return null;
+        }
+    }
+    const e = pluginSettingsEntries(version);
+    const markets = { ...(obj(settings.extraKnownMarketplaces) ?? {}), [e.name]: e.marketplace };
+    const enabled = { ...(obj(settings.enabledPlugins) ?? {}), [e.enabledKey]: true };
+    const out = { ...settings, extraKnownMarketplaces: markets, enabledPlugins: enabled };
+    return JSON.stringify(out, null, 2) + "\n";
+}
+function readJson(path) {
+    try {
+        const v = JSON.parse(readFileSync(path, "utf8"));
+        return v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
+    }
+    catch {
+        return null;
+    }
+}
+function obj(v) {
+    return v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
+}
+/**
+ * A repo "declares the plugin" iff `.claude/settings.json` (then `.claude/settings.local.json`) has
+ * an `extraKnownMarketplaces` key matching `^em-\d+-\d+-\d+$` whose `source` is the github repo
+ * `milehimikey/em`. When several keys match (a stale pin left beside the current one), the one named
+ * `preferName` wins, else the first in key order.
+ */
+export function detectPlugin(repoRoot, preferName) {
+    const files = [join(repoRoot, ".claude", "settings.json"), join(repoRoot, ".claude", "settings.local.json")]
+        .map(readJson)
+        .filter((j) => j !== null);
+    for (const settings of files) {
+        const markets = obj(settings.extraKnownMarketplaces);
+        if (!markets)
+            continue;
+        const names = Object.keys(markets)
+            .filter((k) => {
+            const src = obj(obj(markets[k])?.source);
+            return PLUGIN_MARKETPLACE_RE.test(k) && src?.source === "github" && src.repo === PLUGIN_REPO;
+        })
+            .sort();
+        if (names.length === 0)
+            continue;
+        const name = preferName && names.includes(preferName) ? preferName : names[0];
+        const ref = obj(obj(markets[name])?.source)?.ref;
+        let enabled = false;
+        for (const f of files) {
+            const v = obj(f.enabledPlugins)?.[`${PLUGIN_NAME}@${name}`];
+            if (v !== undefined)
+                enabled = v === true;
+        }
+        return { declared: true, name, ref: typeof ref === "string" ? ref : null, enabled };
+    }
+    return null;
+}
+/** The machine-level plugins directory: EM_CLAUDE_PLUGINS_DIR, else ~/.claude/plugins. */
+export function claudePluginsDir(env = process.env) {
+    return env.EM_CLAUDE_PLUGINS_DIR ? env.EM_CLAUDE_PLUGINS_DIR : join(homedir(), ".claude", "plugins");
+}
+/** The `source.ref` the machine registry holds for `name`, `undefined` when there is no entry (or no
+ *  readable registry), `null` when the entry carries no ref. */
+function registeredRef(pluginsDir, name) {
+    const file = join(pluginsDir, "known_marketplaces.json");
+    if (!existsSync(file))
+        return undefined;
+    const entry = obj(readJson(file)?.[name]);
+    if (!entry)
+        return undefined;
+    const ref = obj(entry.source)?.ref;
+    return typeof ref === "string" ? ref : null;
+}
+/**
+ * Check the plugin declaration in `repoRoot` against `installedVersion` (em --version) and the
+ * machine registry in `pluginsDir`. `null` when the repo does not declare the plugin.
+ */
+export function checkPlugin(repoRoot, installedVersion, pluginsDir) {
+    const expectedName = pluginMarketplaceName(installedVersion);
+    const expectedRef = `v${installedVersion}`;
+    const plugin = detectPlugin(repoRoot, expectedName);
+    if (!plugin)
+        return null;
+    const commands = pluginInstallCommands(installedVersion);
+    const findings = [];
+    const pinOk = plugin.name === expectedName && plugin.ref === expectedRef;
+    if (!pinOk) {
+        findings.push({
+            code: "plugin-pin-mismatch",
+            message: `em plugin pin mismatch: .claude/settings.json pins ${plugin.name} at ref ${plugin.ref ?? "(none)"}, ` +
+                `but installed em is ${installedVersion} (expected marketplace ${expectedName} at ref ${expectedRef}) - ` +
+                `update extraKnownMarketplaces and enabledPlugins to the installed version, then run the install commands`,
+            pluginName: plugin.name,
+            pluginRef: plugin.ref,
+            installedVersion,
+            installCommands: commands,
+        });
+    }
+    if (!plugin.enabled) {
+        findings.push({
+            code: "plugin-not-enabled",
+            message: `em plugin is not enabled: enabledPlugins["${PLUGIN_NAME}@${plugin.name}"] is not true in .claude/settings.json`,
+            pluginName: plugin.name,
+            pluginRef: plugin.ref,
+            installedVersion,
+        });
+    }
+    // The machine registration is only meaningful against a correct pin; a wrong pin is the one root
+    // cause, reported once.
+    if (pinOk) {
+        const reg = registeredRef(pluginsDir, plugin.name);
+        if (reg === undefined) {
+            findings.push({
+                code: "plugin-not-installed-locally",
+                message: `em plugin ${plugin.name} is not registered on this machine (no entry in ${join(pluginsDir, "known_marketplaces.json")}) - run:\n  ${commands.join("\n  ")}`,
+                pluginName: plugin.name,
+                pluginRef: null,
+                installedVersion,
+                installCommands: commands,
+            });
+        }
+        else if (reg !== expectedRef) {
+            findings.push({
+                code: "plugin-registered-at-different-ref",
+                message: `em plugin ${plugin.name} is registered on this machine at ${reg ?? "(no ref)"}, not ${expectedRef} - ` +
+                    `the agent would run the wrong skills; run: claude plugin marketplace remove ${plugin.name}, then:\n  ${commands.join("\n  ")}`,
+                pluginName: plugin.name,
+                pluginRef: reg,
+                installedVersion,
+                installCommands: commands,
+            });
+        }
+    }
+    return { plugin, findings };
+}
+//# sourceMappingURL=pluginPin.js.map

package/dist/cli/pluginPin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pluginPin.js","sourceRoot":"","sources":["../../src/cli/pluginPin.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,qGAAqG;AACrG,+FAA+F;AAC/F,mGAAmG;AACnG,oFAAoF;AACpF,4CAA4C;AAC5C,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,mGAAmG;AACnG,gGAAgG;AAEhG,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC;AAChC,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAC5C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAExD,8GAA8G;AAC9G,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;wFACwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO;QACL,iCAAiC,WAAW,KAAK,OAAO,kBAAkB;QAC1E,yBAAyB,WAAW,IAAI,qBAAqB,CAAC,OAAO,CAAC,kBAAkB;KACzF,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,qBAAqB,CAAC,OAAe;IAKnD,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO;QACL,IAAI;QACJ,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,OAAO,EAAE,EAAE,EAAE;QACpF,UAAU,EAAE,GAAG,WAAW,IAAI,IAAI,EAAE;KACrC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAuB,EAAE,OAAe;IAC1E,IAAI,QAAQ,GAA4B,EAAE,CAAC;IAC3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,CAAC,GAAY,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzE,QAAQ,GAAG,CAA4B,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7F,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;IAClF,MAAM,GAAG,GAA4B,EAAE,GAAG,QAAQ,EAAE,sBAAsB,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IAC/G,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAYD,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1G,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,UAAmB;IAChE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC;SACzG,GAAG,CAAC,QAAQ,CAAC;SACb,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC3D,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;aAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACZ,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACzC,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC;QAC/F,CAAC,CAAC;aACD,IAAI,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,IAAI,GAAG,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC;QACjD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC,GAAG,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC,KAAK,IAAI,CAAC;QAC5C,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;IACtF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,OAAO,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AACvG,CAAC;AAED;gEACgE;AAChE,SAAS,aAAa,CAAC,UAAkB,EAAE,IAAY;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC;IACnC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,gBAAwB,EAAE,UAAkB;IACxF,MAAM,YAAY,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,GAAG,KAAK,WAAW,CAAC;IACzE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EACL,sDAAsD,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,GAAG,IAAI,QAAQ,IAAI;gBACtG,uBAAuB,gBAAgB,0BAA0B,YAAY,WAAW,WAAW,MAAM;gBACzG,0GAA0G;YAC5G,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,SAAS,EAAE,MAAM,CAAC,GAAG;YACrB,gBAAgB;YAChB,eAAe,EAAE,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,6CAA6C,WAAW,IAAI,MAAM,CAAC,IAAI,yCAAyC;YACzH,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,SAAS,EAAE,MAAM,CAAC,GAAG;YACrB,gBAAgB;SACjB,CAAC,CAAC;IACL,CAAC;IAED,iGAAiG;IACjG,wBAAwB;IACxB,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,8BAA8B;gBACpC,OAAO,EAAE,aAAa,MAAM,CAAC,IAAI,mDAAmD,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,eAAe,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBACrK,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,SAAS,EAAE,IAAI;gBACf,gBAAgB;gBAChB,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,oCAAoC;gBAC1C,OAAO,EACL,aAAa,MAAM,CAAC,IAAI,qCAAqC,GAAG,IAAI,UAAU,SAAS,WAAW,KAAK;oBACvG,+EAA+E,MAAM,CAAC,IAAI,cAAc,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;gBACjI,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,SAAS,EAAE,GAAG;gBACd,gBAAgB;gBAChB,eAAe,EAAE,QAAQ;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC"}

package/dist/cli/ratify.d.ts

@@ -1,5 +1,30 @@
 import { NormalizedModel } from "../model/model.js";
 import { RefsResult } from "../model/refs.js";
+/** MIL-238: the ratifier's API-first statement about this version of a public-touching slice. */
+export type MeaningConfirmation = {
+    kind: "meaning-unchanged";
+} | {
+    kind: "contract-change";
+    why: string;
+};
+/** The two frontmatter keys a `MeaningConfirmation` is written to — cleared together on rewrite. */
+export declare const MEANING_CONFIRMATION_KEYS: readonly ["meaningConfirmed", "contractChange"];
+/** Turn the `--meaning-unchanged` / `--contract-change "<why>"` flags into a confirmation (or
+ *  null when neither was passed). Refuses both at once, an empty reason, and a reason that can't
+ *  be written as one quoted frontmatter value (control characters, double quotes). */
+export declare function parseMeaningFlags(meaningUnchanged: boolean | undefined, contractChange: string | undefined): {
+    ok: true;
+    confirmation: MeaningConfirmation | null;
+} | {
+    ok: false;
+    message: string;
+};
+/** The frontmatter line a confirmation is recorded as. */
+export declare function meaningConfirmationLine(c: MeaningConfirmation): string;
+/** The refusal for a public-touching slice ratified/reratified without a confirmation. */
+export declare function meaningConfirmationRequiredMessage(sliceKey: string): string;
+/** Remove every `meaningConfirmed:`/`contractChange:` line (whole line, EOL included). */
+export declare function stripMeaningConfirmation(inner: string): string;
 /** The status this command flips a slice doc to — the handoff gate
  *  (docs/process.md#the-slice-lifecycle-gates): contracts/invariants agreed, open questions
  *  resolved or deferred, ready for an implementing agent or engineer to pick up. */
@@ -51,7 +76,7 @@ export type ApplyRatifyResult = {
  * that refusal message (and in the caller's skip notice); every other refusal here is about the
  * doc's own text. No fs access — the caller reads/writes; see `runRatify` below.
  */
-export declare function applyRatifyFrontmatter(raw: string, sliceKey: string, ratifiedBy: string, ratifiedOn: string, skipReview?: boolean): ApplyRatifyResult;
+export declare function applyRatifyFrontmatter(raw: string, sliceKey: string, ratifiedBy: string, ratifiedOn: string, skipReview?: boolean, confirmation?: MeaningConfirmation | null): ApplyRatifyResult;
 export type RunRatifyResult = {
     ok: true;
     path: string;
@@ -70,4 +95,4 @@ export type RunRatifyResult = {
  * `--slice-ready`/`em export` use (MIL-121 cross-binding included), then reads/applies/writes
  * it. `baseDir` is the `.em` file's directory, same convention every doc/note path in `em` uses.
  */
-export declare function runRatify(model: NormalizedModel, refs: RefsResult, baseDir: string, sliceKey: string, ratifiedBy: string, ratifiedOn: string, skipReview?: boolean): RunRatifyResult;
+export declare function runRatify(model: NormalizedModel, refs: RefsResult, baseDir: string, sliceKey: string, ratifiedBy: string, ratifiedOn: string, skipReview?: boolean, confirmation?: MeaningConfirmation | null): RunRatifyResult;

package/dist/cli/ratify.js

@@ -40,14 +40,79 @@
 // reports any whose doc isn't `ready-to-implement`/`implemented` yet. Repeated-view instance
 // hops (`view X again`) are never edges in `ModelIndex.out`/`.in` (queryIndex.ts's own design
 // note), so they never surface here either — nothing extra to filter.
+// MIL-238 — the API-first meaning confirmation: on a public-touching slice (one owning a `public`
+// command/event/view, catalog/apiFirst.ts) ratification also asserts the contract is current and
+// says whether this version changes what it MEANS to a consumer. `--meaning-unchanged` records
+// `meaningConfirmed: true`; `--contract-change "<why>"` records `contractChange: "<why>"`; exactly
+// one is required there, and either is accepted (and recorded, harmlessly) on any other slice.
+// The line goes directly after `ratifiedOn:`, replacing any earlier confirmation line.
 import { readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { continuationOf } from "../model/continuation.js";
 import { resolveSliceDocJoin } from "../catalog/docJoin.js";
 import { buildModelIndex } from "../model/queryIndex.js";
-import { fieldLineRegex, locateFrontmatterInner, normalizeFieldValue } from "./frontmatterSurgery.js";
+import { fieldLineRegex, fieldLineWithEolRegex, locateFrontmatterInner, normalizeFieldValue } from "./frontmatterSurgery.js";
 import { REVIEWED_STATUS } from "./review.js";
 import { isValidDateString } from "./stateFile.js";
+import { isPublicTouchingSlice } from "../catalog/apiFirst.js";
+/** The two frontmatter keys a `MeaningConfirmation` is written to — cleared together on rewrite. */
+export const MEANING_CONFIRMATION_KEYS = ["meaningConfirmed", "contractChange"];
+/** Turn the `--meaning-unchanged` / `--contract-change "<why>"` flags into a confirmation (or
+ *  null when neither was passed). Refuses both at once, an empty reason, and a reason that can't
+ *  be written as one quoted frontmatter value (control characters, double quotes). */
+export function parseMeaningFlags(meaningUnchanged, contractChange) {
+    if (meaningUnchanged && contractChange !== undefined) {
+        return { ok: false, message: 'pass one of --meaning-unchanged or --contract-change "<why>", not both' };
+    }
+    if (meaningUnchanged)
+        return { ok: true, confirmation: { kind: "meaning-unchanged" } };
+    if (contractChange === undefined)
+        return { ok: true, confirmation: null };
+    const why = contractChange.trim();
+    if (!why)
+        return { ok: false, message: 'a contract-change reason is required (--contract-change "<why>")' };
+    if (/[\x00-\x1f\x7f]/.test(why)) {
+        return { ok: false, message: "contract-change reason must not contain control characters" };
+    }
+    if (why.includes('"')) {
+        return {
+            ok: false,
+            message: "contract-change reason must not contain double quotes — it is written as one quoted frontmatter value",
+        };
+    }
+    return { ok: true, confirmation: { kind: "contract-change", why } };
+}
+/** The frontmatter line a confirmation is recorded as. */
+export function meaningConfirmationLine(c) {
+    return c.kind === "meaning-unchanged" ? "meaningConfirmed: true" : `contractChange: "${c.why}"`;
+}
+/** The refusal for a public-touching slice ratified/reratified without a confirmation. */
+export function meaningConfirmationRequiredMessage(sliceKey) {
+    return (`slice "${sliceKey}" touches the public surface — pass --meaning-unchanged, or ` +
+        `--contract-change "<why>" if a consumer must read this change differently`);
+}
+/** Remove every `meaningConfirmed:`/`contractChange:` line (whole line, EOL included). */
+export function stripMeaningConfirmation(inner) {
+    let out = inner;
+    for (const key of MEANING_CONFIRMATION_KEYS) {
+        const re = fieldLineWithEolRegex(key);
+        while (re.test(out))
+            out = out.replace(re, "");
+    }
+    return out;
+}
+/** The confirmation currently recorded in a frontmatter `inner` block, or null. */
+function recordedConfirmation(inner) {
+    const mc = fieldLineRegex("meaningConfirmed").exec(inner);
+    if (mc && normalizeFieldValue(mc[2])?.toLowerCase() === "true")
+        return { kind: "meaning-unchanged" };
+    const cc = fieldLineRegex("contractChange").exec(inner);
+    const why = cc ? normalizeFieldValue(cc[2]) : null;
+    return why !== null ? { kind: "contract-change", why } : null;
+}
+function sameConfirmation(a, b) {
+    return a.kind === b.kind && (a.kind === "meaning-unchanged" || a.why === b.why);
+}
 /** The status this command flips a slice doc to — the handoff gate
  *  (docs/process.md#the-slice-lifecycle-gates): contracts/invariants agreed, open questions
  *  resolved or deferred, ready for an implementing agent or engineer to pick up. */
@@ -113,7 +178,7 @@ export function upstreamUnratifiedSlices(model, refs, baseDir, sliceKey) {
  * that refusal message (and in the caller's skip notice); every other refusal here is about the
  * doc's own text. No fs access — the caller reads/writes; see `runRatify` below.
  */
-export function applyRatifyFrontmatter(raw, sliceKey, ratifiedBy, ratifiedOn, skipReview = false) {
+export function applyRatifyFrontmatter(raw, sliceKey, ratifiedBy, ratifiedOn, skipReview = false, confirmation = null) {
     const trimmedBy = ratifiedBy.trim();
     if (!trimmedBy)
         return { ok: false, message: "a ratifier name is required (--by)" };
@@ -129,7 +194,11 @@ export function applyRatifyFrontmatter(raw, sliceKey, ratifiedBy, ratifiedOn, sk
     const range = locateFrontmatterInner(raw);
     if (!range)
         return { ok: false, message: "no frontmatter block found" };
-    const inner = raw.slice(range.innerStart, range.innerEnd);
+    const originalInner = raw.slice(range.innerStart, range.innerEnd);
+    const recorded = recordedConfirmation(originalInner);
+    // MIL-238: a new confirmation replaces any earlier one — strip it before locating the lines
+    // below, so the fresh line can be spliced in right after `ratifiedOn:`.
+    const inner = confirmation ? stripMeaningConfirmation(originalInner) : originalInner;
     const statusMatch = fieldLineRegex("status").exec(inner);
     if (!statusMatch)
         return { ok: false, message: "no `status:` field found in frontmatter" };
@@ -140,13 +209,27 @@ export function applyRatifyFrontmatter(raw, sliceKey, ratifiedBy, ratifiedOn, sk
     const currentOn = onMatch ? normalizeFieldValue(onMatch[2]) : null;
     if (currentStatus === RATIFIED_STATUS && currentBy !== null && currentOn !== null) {
         if (currentBy === trimmedBy && currentOn === ratifiedOn) {
-            return { ok: true, content: raw, changed: false, skippedReviewFrom: null }; // idempotent no-op
+            // MIL-238: same identity — a no-op unless this run adds a confirmation the doc lacks. A
+            // DIFFERENT recorded confirmation is provenance, refused like a different ratifier.
+            if (confirmation === null || (recorded !== null && sameConfirmation(recorded, confirmation))) {
+                return { ok: true, content: raw, changed: false, skippedReviewFrom: null }; // idempotent no-op
+            }
+            if (recorded !== null) {
+                return {
+                    ok: false,
+                    message: `already ratified by ${currentBy} on ${currentOn} with ${meaningConfirmationLine(recorded)} — ` +
+                        `refusing to overwrite with ${meaningConfirmationLine(confirmation)}`,
+                };
+            }
+            // else: fall through and record the confirmation alongside the unchanged sign-off.
+        }
+        else {
+            return {
+                ok: false,
+                message: `already ratified by ${currentBy} on ${currentOn} — refusing to overwrite with ` +
+                    `${trimmedBy} on ${ratifiedOn}`,
+            };
         }
-        return {
-            ok: false,
-            message: `already ratified by ${currentBy} on ${currentOn} — refusing to overwrite with ` +
-                `${trimmedBy} on ${ratifiedOn}`,
-        };
     }
     // The review gate (MIL-201, D1). A doc that never passed through `status: reviewed` has not
     // been through the first human gate, so ratifying it collapses two decisions into one — the
@@ -178,6 +261,11 @@ export function applyRatifyFrontmatter(raw, sliceKey, ratifiedBy, ratifiedOn, sk
         missingLines.push(`ratifiedBy: ${trimmedBy}`);
     if (!onMatch)
         missingLines.push(`ratifiedOn: ${ratifiedOn}`);
+    // MIL-238: the confirmation line goes directly after `ratifiedOn:` — at the end of the
+    // inserted block when `ratifiedOn:` is new, else appended to the existing line's edit below.
+    const confirmationText = confirmation ? meaningConfirmationLine(confirmation) : null;
+    if (confirmationText && !onMatch)
+        missingLines.push(confirmationText);
     const newStatusText = `${statusMatch[1]}${RATIFIED_STATUS}`;
     const statusNext = missingLines.length > 0 ? `${newStatusText}${eol}${missingLines.join(eol)}` : newStatusText;
     // Apply from the highest index first so an earlier edit's index stays valid — same convention
@@ -189,8 +277,14 @@ export function applyRatifyFrontmatter(raw, sliceKey, ratifiedBy, ratifiedOn, sk
     ];
     if (byMatch)
         edits.push({ index: byMatch.index, oldLen: byMatch[0].length, next: `${byMatch[1]}${trimmedBy}` });
-    if (onMatch)
-        edits.push({ index: onMatch.index, oldLen: onMatch[0].length, next: `${onMatch[1]}${ratifiedOn}` });
+    if (onMatch) {
+        const onNext = `${onMatch[1]}${ratifiedOn}`;
+        edits.push({
+            index: onMatch.index,
+            oldLen: onMatch[0].length,
+            next: confirmationText ? `${onNext}${eol}${confirmationText}` : onNext,
+        });
+    }
     edits.sort((a, b) => b.index - a.index);
     let updatedInner = inner;
     for (const edit of edits) {
@@ -204,7 +298,7 @@ export function applyRatifyFrontmatter(raw, sliceKey, ratifiedBy, ratifiedOn, sk
  * `--slice-ready`/`em export` use (MIL-121 cross-binding included), then reads/applies/writes
  * it. `baseDir` is the `.em` file's directory, same convention every doc/note path in `em` uses.
  */
-export function runRatify(model, refs, baseDir, sliceKey, ratifiedBy, ratifiedOn, skipReview = false) {
+export function runRatify(model, refs, baseDir, sliceKey, ratifiedBy, ratifiedOn, skipReview = false, confirmation = null) {
     const sliceIndex = refs.sliceKeys.indexOf(sliceKey);
     if (sliceIndex === -1) {
         return { ok: false, message: `no slice with export key "${sliceKey}" in this model` };
@@ -243,10 +337,15 @@ export function runRatify(model, refs, baseDir, sliceKey, ratifiedBy, ratifiedOn
     }
     const absPath = join(baseDir, doc.path);
     const raw = readFileSync(absPath, "utf8");
-    const result = applyRatifyFrontmatter(raw, sliceKey, ratifiedBy, ratifiedOn, skipReview);
+    const result = applyRatifyFrontmatter(raw, sliceKey, ratifiedBy, ratifiedOn, skipReview, confirmation);
     if (!result.ok) {
         return { ok: false, message: `${doc.path}: ${result.message}` };
     }
+    // MIL-238: the API-first gate — after the doc's own preconditions, before any write: a
+    // public-touching slice needs a meaning confirmation.
+    if (confirmation === null && isPublicTouchingSlice(model, refs, sliceKey)) {
+        return { ok: false, message: meaningConfirmationRequiredMessage(sliceKey) };
+    }
     // MIL-198: computed once the gate above has passed, before the write — advisory only, so it
     // runs the same whether the gate passed on its own merits or via --skip-review.
     const upstreamWarnings = upstreamUnratifiedSlices(model, refs, baseDir, sliceKey);

package/dist/cli/ratify.js.map

@@ -1 +1 @@
-{"version":3,"file":"ratify.js","sourceRoot":"","sources":["../../src/cli/ratify.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,0FAA0F;AAC1F,kFAAkF;AAClF,8FAA8F;AAC9F,8FAA8F;AAC9F,wFAAwF;AACxF,8FAA8F;AAC9F,6FAA6F;AAC7F,EAAE;AACF,gGAAgG;AAChG,+FAA+F;AAC/F,0FAA0F;AAC1F,gGAAgG;AAChG,yFAAyF;AACzF,EAAE;AACF,gGAAgG;AAChG,8FAA8F;AAC9F,8FAA8F;AAC9F,0FAA0F;AAC1F,gDAAgD;AAChD,EAAE;AACF,iGAAiG;AACjG,wFAAwF;AACxF,6FAA6F;AAC7F,iGAAiG;AACjG,0FAA0F;AAC1F,0FAA0F;AAC1F,2FAA2F;AAC3F,kGAAkG;AAClG,qFAAqF;AACrF,EAAE;AACF,iGAAiG;AACjG,6FAA6F;AAC7F,2FAA2F;AAC3F,+FAA+F;AAC/F,4FAA4F;AAC5F,8FAA8F;AAC9F,4FAA4F;AAC5F,8FAA8F;AAC9F,6FAA6F;AAC7F,8FAA8F;AAC9F,sEAAsE;AAEtE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD;;oFAEoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAEpD;;gFAEgF;AAChF,MAAM,mBAAmB,GAAsB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;AAElF;6FAC6F;AAC7F,MAAM,yBAAyB,GAAsB,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;AAUtF;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAsB,EACtB,IAAgB,EAChB,OAAe,EACf,QAAgB;IAEhB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAEpD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU;gBAAE,SAAS;YAC9D,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,KAAK,MAAM,aAAa,IAAI,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC;QACrE,IAAI,MAAM,KAAK,IAAI,IAAI,yBAAyB,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QAC5E,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAeD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAW,EACX,QAAgB,EAChB,UAAkB,EAClB,UAAkB,EAClB,UAAU,GAAG,KAAK;IAElB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IACpF,0FAA0F;IAC1F,8FAA8F;IAC9F,6FAA6F;IAC7F,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,UAAU,yBAAyB,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE1D,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAE3F,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC;IACjF,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,aAAa,KAAK,eAAe,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAClF,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,mBAAmB;QACjG,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,uBAAuB,SAAS,OAAO,SAAS,gCAAgC;gBAChF,GAAG,SAAS,OAAO,UAAU,EAAE;SAClC,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,4FAA4F;IAC5F,2FAA2F;IAC3F,8FAA8F;IAC9F,MAAM,UAAU,GAAG,aAAa,IAAI,SAAS,CAAC;IAC9C,MAAM,eAAe,GAAG,aAAa,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC/F,IAAI,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,UAAU,QAAQ,kBAAkB,UAAU,wCAAwC;gBACtF,+EAA+E;gBAC/E,qCAAqC;SACxC,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAE9D,mFAAmF;IACnF,8FAA8F;IAC9F,4FAA4F;IAC5F,iFAAiF;IACjF,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3D,+FAA+F;IAC/F,2FAA2F;IAC3F,+FAA+F;IAC/F,0EAA0E;IAC1E,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,YAAY,CAAC,IAAI,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO;QAAE,YAAY,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,eAAe,EAAE,CAAC;IAC5D,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,GAAG,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;IAE/G,8FAA8F;IAC9F,8FAA8F;IAC9F,6FAA6F;IAC7F,oEAAoE;IACpE,MAAM,KAAK,GAAsD;QAC/D,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;KAC9E,CAAC;IACF,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,EAAE,CAAC,CAAC;IAChH,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,EAAE,CAAC,CAAC;IACjH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAExC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACjE,CAAC;AAeD;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACvB,KAAsB,EACtB,IAAgB,EAChB,OAAe,EACf,QAAgB,EAChB,UAAkB,EAClB,UAAkB,EAClB,UAAU,GAAG,KAAK;IAElB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6BAA6B,QAAQ,iBAAiB,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,CACpE,KAAK,EACL,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,OAAO,EACP,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAC9B,CAAC;IAEF,6FAA6F;IAC7F,uFAAuF;IACvF,qFAAqF;IACrF,6FAA6F;IAC7F,8FAA8F;IAC9F,sCAAsC;IACtC,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,aAAa,CAAE,CAAC,IAAI,CAAC;QAClE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,IAAI,QAAQ,2BAA2B,iBAAiB,YAAY,QAAQ,aAAa;gBACzF,qCAAqC,iBAAiB,WAAW;SACpE,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,UAAU,QAAQ,yCAAyC,QAAQ,+CAA+C;SAC5H,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,QAAQ,YAAY,GAAG,CAAC,IAAI,2BAA2B,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,cAAc,GAAG,CAAC,IAAI,wEAAwE;SACxG,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,4FAA4F;IAC5F,gFAAgF;IAChF,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB;KACjB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"ratify.js","sourceRoot":"","sources":["../../src/cli/ratify.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,0FAA0F;AAC1F,kFAAkF;AAClF,8FAA8F;AAC9F,8FAA8F;AAC9F,wFAAwF;AACxF,8FAA8F;AAC9F,6FAA6F;AAC7F,EAAE;AACF,gGAAgG;AAChG,+FAA+F;AAC/F,0FAA0F;AAC1F,gGAAgG;AAChG,yFAAyF;AACzF,EAAE;AACF,gGAAgG;AAChG,8FAA8F;AAC9F,8FAA8F;AAC9F,0FAA0F;AAC1F,gDAAgD;AAChD,EAAE;AACF,iGAAiG;AACjG,wFAAwF;AACxF,6FAA6F;AAC7F,iGAAiG;AACjG,0FAA0F;AAC1F,0FAA0F;AAC1F,2FAA2F;AAC3F,kGAAkG;AAClG,qFAAqF;AACrF,EAAE;AACF,iGAAiG;AACjG,6FAA6F;AAC7F,2FAA2F;AAC3F,+FAA+F;AAC/F,4FAA4F;AAC5F,8FAA8F;AAC9F,4FAA4F;AAC5F,8FAA8F;AAC9F,6FAA6F;AAC7F,8FAA8F;AAC9F,sEAAsE;AAEtE,kGAAkG;AAClG,iGAAiG;AACjG,+FAA+F;AAC/F,mGAAmG;AACnG,+FAA+F;AAC/F,uFAAuF;AAEvF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAK/D,oGAAoG;AACpG,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,CAAU,CAAC;AAEzF;;sFAEsF;AACtF,MAAM,UAAU,iBAAiB,CAC/B,gBAAqC,EACrC,cAAkC;IAElC,IAAI,gBAAgB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wEAAwE,EAAE,CAAC;IAC1G,CAAC;IACD,IAAI,gBAAgB;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,CAAC;IACvF,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kEAAkE,EAAE,CAAC;IAC5G,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,uGAAuG;SACjH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,EAAE,CAAC;AACtE,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,uBAAuB,CAAC,CAAsB;IAC5D,OAAO,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,GAAG,GAAG,CAAC;AAClG,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,kCAAkC,CAAC,QAAgB;IACjE,OAAO,CACL,UAAU,QAAQ,8DAA8D;QAChF,2EAA2E,CAC5E,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,yBAAyB,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,EAAE,GAAG,cAAc,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,EAAE,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IACrG,MAAM,EAAE,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAsB,EAAE,CAAsB;IACtE,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,CAAC,GAAG,KAAM,CAAqB,CAAC,GAAG,CAAC,CAAC;AACvG,CAAC;AAED;;oFAEoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAEpD;;gFAEgF;AAChF,MAAM,mBAAmB,GAAsB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;AAElF;6FAC6F;AAC7F,MAAM,yBAAyB,GAAsB,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;AAUtF;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAsB,EACtB,IAAgB,EAChB,OAAe,EACf,QAAgB;IAEhB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAEpD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU;gBAAE,SAAS;YAC9D,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,KAAK,MAAM,aAAa,IAAI,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC;QACrE,IAAI,MAAM,KAAK,IAAI,IAAI,yBAAyB,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QAC5E,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAeD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAW,EACX,QAAgB,EAChB,UAAkB,EAClB,UAAkB,EAClB,UAAU,GAAG,KAAK,EAClB,eAA2C,IAAI;IAE/C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IACpF,0FAA0F;IAC1F,8FAA8F;IAC9F,6FAA6F;IAC7F,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,UAAU,yBAAyB,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxE,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACrD,4FAA4F;IAC5F,wEAAwE;IACxE,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAErF,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAE3F,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC;IACjF,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,aAAa,KAAK,eAAe,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QAClF,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YACxD,wFAAwF;YACxF,oFAAoF;YACpF,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;gBAC7F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,mBAAmB;YACjG,CAAC;YACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,OAAO,EACL,uBAAuB,SAAS,OAAO,SAAS,SAAS,uBAAuB,CAAC,QAAQ,CAAC,KAAK;wBAC/F,8BAA8B,uBAAuB,CAAC,YAAY,CAAC,EAAE;iBACxE,CAAC;YACJ,CAAC;YACD,mFAAmF;QACrF,CAAC;aAAM,CAAC;YACN,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EACL,uBAAuB,SAAS,OAAO,SAAS,gCAAgC;oBAChF,GAAG,SAAS,OAAO,UAAU,EAAE;aAClC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4FAA4F;IAC5F,4FAA4F;IAC5F,2FAA2F;IAC3F,8FAA8F;IAC9F,MAAM,UAAU,GAAG,aAAa,IAAI,SAAS,CAAC;IAC9C,MAAM,eAAe,GAAG,aAAa,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC/F,IAAI,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,UAAU,QAAQ,kBAAkB,UAAU,wCAAwC;gBACtF,+EAA+E;gBAC/E,qCAAqC;SACxC,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAE9D,mFAAmF;IACnF,8FAA8F;IAC9F,4FAA4F;IAC5F,iFAAiF;IACjF,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAE3D,+FAA+F;IAC/F,2FAA2F;IAC3F,+FAA+F;IAC/F,0EAA0E;IAC1E,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO;QAAE,YAAY,CAAC,IAAI,CAAC,eAAe,SAAS,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO;QAAE,YAAY,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;IAC7D,uFAAuF;IACvF,6FAA6F;IAC7F,MAAM,gBAAgB,GAAG,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,IAAI,gBAAgB,IAAI,CAAC,OAAO;QAAE,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,eAAe,EAAE,CAAC;IAC5D,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,GAAG,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;IAE/G,8FAA8F;IAC9F,8FAA8F;IAC9F,6FAA6F;IAC7F,oEAAoE;IACpE,MAAM,KAAK,GAAsD;QAC/D,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE;KAC9E,CAAC;IACF,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,EAAE,CAAC,CAAC;IAChH,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM;YACzB,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,GAAG,GAAG,gBAAgB,EAAE,CAAC,CAAC,CAAC,MAAM;SACvE,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAExC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACjE,CAAC;AAeD;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACvB,KAAsB,EACtB,IAAgB,EAChB,OAAe,EACf,QAAgB,EAChB,UAAkB,EAClB,UAAkB,EAClB,UAAU,GAAG,KAAK,EAClB,eAA2C,IAAI;IAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6BAA6B,QAAQ,iBAAiB,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,CACpE,KAAK,EACL,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,OAAO,EACP,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAC9B,CAAC;IAEF,6FAA6F;IAC7F,uFAAuF;IACvF,qFAAqF;IACrF,6FAA6F;IAC7F,8FAA8F;IAC9F,sCAAsC;IACtC,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,aAAa,CAAE,CAAC,IAAI,CAAC;QAClE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,IAAI,QAAQ,2BAA2B,iBAAiB,YAAY,QAAQ,aAAa;gBACzF,qCAAqC,iBAAiB,WAAW;SACpE,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,UAAU,QAAQ,yCAAyC,QAAQ,+CAA+C;SAC5H,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,QAAQ,YAAY,GAAG,CAAC,IAAI,2BAA2B,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,cAAc,GAAG,CAAC,IAAI,wEAAwE;SACxG,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IACvG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,uFAAuF;IACvF,sDAAsD;IACtD,IAAI,YAAY,KAAK,IAAI,IAAI,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,4FAA4F;IAC5F,gFAAgF;IAChF,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/cli/reratify.d.ts

@@ -1,5 +1,6 @@
 import { NormalizedModel } from "../model/model.js";
 import { RefsResult } from "../model/refs.js";
+import { MeaningConfirmation } from "./ratify.js";
 export type ApplyReratifyResult = {
     ok: true;
     content: string;
@@ -20,7 +21,7 @@ export type ReratifyKind = "shipped" | "unshipped";
  * see module header for why this precondition (not idempotent-no-op) is the right refusal
  * shape here. No fs access — the caller reads/writes; see `runReratify` below.
  */
-export declare function applyReratifyFrontmatter(raw: string): ApplyReratifyResult;
+export declare function applyReratifyFrontmatter(raw: string, confirmation?: MeaningConfirmation | null): ApplyReratifyResult;
 /** MIL-214: the certification-aware advisory `runReratify` computes about the version being
  *  superseded — never gates the bump, see module header. */
 export interface ReratifyAdvisory {
@@ -53,4 +54,4 @@ export type RunReratifyResult = {
  * writes it. `baseDir` is the `.em` file's directory, same convention every doc/note path in
  * `em` uses.
  */
-export declare function runReratify(model: NormalizedModel, refs: RefsResult, baseDir: string, sliceKey: string): RunReratifyResult;
+export declare function runReratify(model: NormalizedModel, refs: RefsResult, baseDir: string, sliceKey: string, confirmation?: MeaningConfirmation | null): RunReratifyResult;

package/dist/cli/reratify.js

@@ -57,12 +57,19 @@
 // conform sweep ever ran — so this is advisory only, printed by the CLI layer, never gating the
 // bump itself. MIL-258: the advisory is about superseding a SHIPPED version, so the unshipped
 // path skips it entirely (`advisory: null`) — an unshipped version has no certification to lack.
+//
+// MIL-238: `meaningConfirmed:`/`contractChange:` describe the PRIOR version too, so they are
+// cleared in the same sweep as the sign-off keys. On a public-touching slice the bump itself
+// requires a fresh confirmation (`--meaning-unchanged` or `--contract-change "<why>"`), written
+// directly after the new `version:` line; on any other slice either flag is accepted and recorded.
 import { readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { continuationOf } from "../model/continuation.js";
 import { resolveSliceDocJoin } from "../catalog/docJoin.js";
 import { fieldLineRegex, fieldLineWithEolRegex, locateFrontmatterInner, normalizeFieldValue } from "./frontmatterSurgery.js";
 import { listAllFindingsFiles, unruledFindingsInScope } from "./findings.js";
+import { MEANING_CONFIRMATION_KEYS, meaningConfirmationLine, meaningConfirmationRequiredMessage, } from "./ratify.js";
+import { isPublicTouchingSlice } from "../catalog/apiFirst.js";
 /** The status a doc must already be in for `reratify` to apply — mirrors `RATIFIED_STATUS` in
  *  ratify.ts (the status this command flips TO), named separately since it's the precondition
  *  here, not the target. */
@@ -76,7 +83,7 @@ const TARGET_STATUS = "ready-to-implement";
  * see module header for why this precondition (not idempotent-no-op) is the right refusal
  * shape here. No fs access — the caller reads/writes; see `runReratify` below.
  */
-export function applyReratifyFrontmatter(raw) {
+export function applyReratifyFrontmatter(raw, confirmation = null) {
     const range = locateFrontmatterInner(raw);
     if (!range)
         return { ok: false, message: "no frontmatter block found" };
@@ -122,27 +129,37 @@ export function applyReratifyFrontmatter(raw) {
         };
     }
     const newVersion = currentVersion + 1;
+    // Clear stale ratifiedBy:/ratifiedOn:/reviewedBy:/reviewedOn: — see module header — and
+    // (MIL-238) the prior version's meaningConfirmed:/contractChange:. Done FIRST, on the original
+    // text, so the fresh confirmation line spliced in after `version:` below is never swept away.
+    // These keys are disjoint from `status:`/`version:` by construction (fieldLineRegex matches one
+    // key at a time), so the two lines are re-located on the cleared text unchanged.
+    let cleared = inner;
+    for (const key of ["ratifiedBy", "ratifiedOn", "reviewedBy", "reviewedOn", ...MEANING_CONFIRMATION_KEYS]) {
+        cleared = cleared.replace(fieldLineWithEolRegex(key), "");
+    }
+    const clearedStatus = fieldLineRegex("status").exec(cleared);
+    const clearedVersion = fieldLineRegex("version").exec(cleared);
+    const afterVersion = cleared.slice(clearedVersion.index + clearedVersion[0].length);
+    const eol = afterVersion.startsWith("\r\n") ? "\r\n" : "\n";
+    const versionNext = `${clearedVersion[1]}${newVersion}`;
     // Apply from the highest index first so an earlier edit's index stays valid — same convention
     // markImplemented.ts/ratify.ts use.
     const edits = [
         // MIL-258: the unshipped path is already at the target status — nothing to flip.
         ...(kind === "shipped"
-            ? [{ index: statusMatch.index, oldLen: statusMatch[0].length, next: `${statusMatch[1]}${TARGET_STATUS}` }]
+            ? [{ index: clearedStatus.index, oldLen: clearedStatus[0].length, next: `${clearedStatus[1]}${TARGET_STATUS}` }]
             : []),
-        { index: versionMatch.index, oldLen: versionMatch[0].length, next: `${versionMatch[1]}${newVersion}` },
+        {
+            index: clearedVersion.index,
+            oldLen: clearedVersion[0].length,
+            next: confirmation ? `${versionNext}${eol}${meaningConfirmationLine(confirmation)}` : versionNext,
+        },
     ].sort((a, b) => b.index - a.index);
-    let updatedInner = inner;
+    let updatedInner = cleared;
     for (const edit of edits) {
         updatedInner = updatedInner.slice(0, edit.index) + edit.next + updatedInner.slice(edit.index + edit.oldLen);
     }
-    // Clear stale ratifiedBy:/ratifiedOn:/reviewedBy:/reviewedOn: — see module header. A plain
-    // `.replace()` (not index-spliced alongside the edits above) is safe here: these four keys are
-    // disjoint from `status:`/`version:` and from each other by construction (fieldLineRegex matches
-    // one key at a time), so removing them from the ALREADY-updated text can't disturb the edits
-    // just applied.
-    for (const key of ["ratifiedBy", "ratifiedOn", "reviewedBy", "reviewedOn"]) {
-        updatedInner = updatedInner.replace(fieldLineWithEolRegex(key), "");
-    }
     const content = raw.slice(0, range.innerStart) + updatedInner + raw.slice(range.innerEnd);
     return { ok: true, content, newVersion, kind };
 }
@@ -164,7 +181,7 @@ export function reratifyAdvisory(baseDir, sliceKey, currentVersion, conformedVer
  * writes it. `baseDir` is the `.em` file's directory, same convention every doc/note path in
  * `em` uses.
  */
-export function runReratify(model, refs, baseDir, sliceKey) {
+export function runReratify(model, refs, baseDir, sliceKey, confirmation = null) {
     const sliceIndex = refs.sliceKeys.indexOf(sliceKey);
     if (sliceIndex === -1) {
         return { ok: false, message: `no slice with export key "${sliceKey}" in this model` };
@@ -198,10 +215,15 @@ export function runReratify(model, refs, baseDir, sliceKey) {
     }
     const absPath = join(baseDir, doc.path);
     const raw = readFileSync(absPath, "utf8");
-    const result = applyReratifyFrontmatter(raw);
+    const result = applyReratifyFrontmatter(raw, confirmation);
     if (!result.ok) {
         return { ok: false, message: `${doc.path}: ${result.message}` };
     }
+    // MIL-238: the API-first gate — after the doc's own preconditions, before any write: a
+    // public-touching slice's new version needs a meaning confirmation.
+    if (confirmation === null && isPublicTouchingSlice(model, refs, sliceKey)) {
+        return { ok: false, message: meaningConfirmationRequiredMessage(sliceKey) };
+    }
     // MIL-214: computed from the doc's PRE-BUMP version/certification (`doc` was resolved before
     // the write below changes `version`) — "was the version we're about to supersede ever fully
     // certified". MIL-258: only meaningful for a SHIPPED version; an unshipped one has no