@milehimikey/em 1.14.2 → 1.16.0

package/plugin/skills/implement/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: implement
-em-version: 1.14.2
+em-version: 1.16.0
 description: >-
   Use when building a single ratified event-modeling slice (status: ready-to-implement) into
   merged, tested code — the one phase where the agent builds rather than facilitates. Gates on
@@ -35,8 +35,8 @@ em-sdd-bridge (redirect mode) and never run `/speckit.specify`.
 **Gate: no constitution, no first slice.** The constitution is the project's ratified house rules
 — stack and architectural shape (including which implementation skill each slice pattern routes
 to), code style, testing norms, NFR baselines, review/merge norms. It lives at
-`.specify/memory/constitution.md` in a spec-kit project, otherwise `constitution.md` beside the
-model; `em status` reports which, and whether it's there. If it's missing — or its `ratifiedBy:`
+`.specify/memory/constitution.md` in a spec-kit project (when that file exists), otherwise
+`constitution.md` beside the model; `em status` reports which, and whether it's there. If it's missing — or its `ratifiedBy:`
 is empty, meaning nobody has signed it off — run `reference/implement.md` §7 ("Before the first
 slice: the constitution") first: ask its questions conversationally, write the answers in, and
 have a human ratify them. Don't decide the project's stack or style yourself to get moving.

package/plugin/skills/implement/reference/implement.md

@@ -49,12 +49,14 @@ facilitated session, not in an implementation branch.
 
 **First, read the project's constitution** — the house rules for *how* implementation happens
 here (stack and architectural shape, which implementation skill each slice pattern routes to,
-code style, testing norms, NFR baselines, review and merge norms). It lives in one of exactly two
-places, never both:
+code style, testing norms, NFR baselines, review and merge norms). It lives in one place, found by
+one lookup (shared by `em status` and `em upgrade`):
 
 - **spec-kit project** (a `.specify/` directory exists at or above the model):
-  `.specify/memory/constitution.md` — spec-kit's own slot, which em defers to.
-- **anything else**: `constitution.md` beside the model, where `em scaffold` writes it.
+  `.specify/memory/constitution.md` — spec-kit's own slot, which em defers to — wins whenever it
+  exists.
+- **otherwise, or while that slot is empty**: `constitution.md` beside the model, where
+  `em scaffold` writes it (a symlink to a repo-root file counts).
 
 `em status <model>.em --json` reports which one applies and whether it's there
 (`conformance[].constitution`) — existence only; nothing in `em` reads or judges its content.
@@ -158,12 +160,23 @@ undocumented ordering, a contradiction with adjacent code. The discipline:
   your recommendation. The human resolves it — at the model, where the resolution lands as an
   answered open question or a small ratified delta alongside your fix, so the decision is
   recorded instead of buried in an implementation diff.
+- **A question this build will not wait on is queued, never written into the doc** (GH #236). On a
+  ratified doc the body is the signed spec: `em slice defer <model>.em <slice-key> "<question>"
+  --until v<n> --decision "<what this version does>"` records it in `.event-modeling.md` as queued
+  for `<key>@v<N+1>` and leaves the doc — and `ratifiedHash`, and `--slice-ready` — untouched. When
+  the slice merges (`mark-implemented`) or is revised, the queued question is injected into the
+  v<N+1> draft's Open Questions. Never add the `- [ ]` item to the ratified doc yourself.
 - **How a delta is ratified on a doc that never shipped** (it is `ready-to-implement` with
-  `ratifiedBy` set): once the human has answered, the doc changes by `em slice reratify
-  <model>.em <slice-key>` (bumps `version:`, clears the old sign-off, leaves `status` alone),
-  the answer is written into the doc, and the human re-signs with `em slice ratify <model>.em
-  <slice-key> --by <name>` — on a slice owning a `public` element both commands also need
-  `--meaning-unchanged` or `--contract-change "<why>"` (MIL-238). That is the human's step, not
+  `ratifiedBy` set) when the spec itself must change: once the human has answered, the doc changes
+  by `em slice revise <model>.em <slice-key> --withdraw` (MIL-283: opens the next version as a
+  `draft` — `version:` bumped, the old sign-off cleared; the ratification of the unshipped version
+  is withdrawn, which is why GH #236 makes you pass `--withdraw` — plain `revise` refuses),
+  the answer is written into the doc and committed, the room reviews it (`em slice review
+  --by`), and the human re-signs with `em slice ratify
+  <model>.em <slice-key> --by <name>` (it records the commit it signs and refuses uncommitted
+  changes, MIL-284) — on a slice owning a `public` element that `ratify` also needs
+  `--meaning-unchanged` or `--contract-change "<why>"` (MIL-238; `revise` takes neither — the
+  confirmation belongs to the new version's sign-off). That is the human's step, not
   yours — you never run `ratify`, and
   the doc is not ratified again until they do; resume the build after that.
 - **Never edit the ratified doc to record your own answer**, and never quietly pick a behavior
@@ -232,7 +245,13 @@ with the same URL, and refuses (never silently overwrites) if the doc is already
 with a different URL. It also refuses a doc that isn't `ready-to-implement` (MIL-277): if it
 reports `doc is \`status: draft\``/`reviewed`, the slice was never ratified — stop and surface
 that to the human rather than editing the frontmatter by hand; the §1 gate should have caught it.
-Prefer it over hand-editing the doc's frontmatter.
+Prefer it over hand-editing the doc's frontmatter. It also writes the **shipped record**
+(`shippedVersion:`/`shippedRef:`/`shippedOn:`, MIL-284) — what every reader decides "has this
+shipped?" on since 1.15.0 — and, when the ratified doc deferred a question to the next version,
+**opens that version as a `draft` on the same write** (MIL-283: `status: draft`, `version` bumped,
+the question back to `- [ ]`; the version you built stays shipped) — questions queued with `em slice
+defer` while the doc was ratified (GH #236) are injected into that draft too. If it prints `opened draft
+v<N+1>`, say so in your report: the slice has known work, and a design session, not you, decides it.
 
 Then, if the project keeps a model README (from `../../../shared/templates/model-readme.md`), run
 `em slice index <model-name>.em` so its generated Slices table reflects the new status and
@@ -312,23 +331,17 @@ sibling slice's package to reuse it — the boundary the constitution drew is go
    contract into a pre-empted slice.
 2. **It merges before any slice PR opens.** Every slice branch is cut *after* the foundation PR
    has landed on `main` — never from a commit that predates it, and never alongside an open,
-   unmerged foundation PR. Within an engagement, cut the slice branch from the base the
-   engagement plan names (`em engagement plan`); outside an engagement, from `main`. A slice PR
-   never carries foundation files. Because: a slice PR opened while the foundation is still in
-   review shows a diff dominated by files the slice didn't write and can't be held accountable
-   for, and its merge depends on someone else's review timeline instead of its own. The plan's
-   base is either `main` or `impl/<upstream>` (the one unmerged upstream slice this slice builds
-   on); either way it already contains the foundation.
-
-2a. **While a dependent PR is open, the lower PR merges with a merge commit; squash is forbidden
-   in that state (it strands the dependent's history).** A PR is the *lower* one when another
-   open PR targets its branch as its base. Once no open PR depends on it, the project's usual
-   merge strategy applies. Because: a squash rewrites the lower branch's commits into one new
-   commit on `main`, so the dependent branch still carries the originals and its diff against
-   `main` shows them again — it then needs a hand rebase (`git rebase --onto main <old base
-   tip>`). A merge commit keeps the original commits: once the lower branch is merged and
-   deleted, the dependent is retargeted to `main` and its diff shrinks to its own commits with
-   no rebase.
+   unmerged foundation PR. Every slice branch is cut from `main` and every slice PR targets
+   `main` — inside an engagement (`em engagement plan` names `main` as every slice's base) and
+   outside one alike; never from another slice's branch, never targeting another slice's PR. A
+   slice PR never carries foundation files. Because: a slice PR opened while the foundation is
+   still in review shows a diff dominated by files the slice didn't write and can't be held
+   accountable for, and its merge depends on someone else's review timeline instead of its own.
+   And because the foundation already holds every event and rule 3 keeps a slice out of its
+   siblings' code, no slice needs another slice's branch to compile or test: a PR cut from a
+   sibling's branch (a "stack") carries a dependency this contract forbids, and turns N isolated
+   slices into one landing with merge-commit and retargeting ceremony attached. `main` already
+   contains the foundation; that is all a slice needs.
 
 3. **A slice never creates, edits, or reaches into another slice's code.** It *imports* events —
    only events — from wherever the foundation placed them; a sibling slice's handlers, storage,

package/plugin/skills/review/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: review
-em-version: 1.14.2
+em-version: 1.16.0
 description: >-
   Use when starting em's live browser viewer (`em watch --serve`) so a team can watch a model
   update in real time, or facilitating a SCHEDULED stakeholder walkthrough that steps through
@@ -54,10 +54,20 @@ walk each one with the user, same as any open issue. Update the state file's Par
 section with who attended, and run `em state set-review <date>` to set the `Last stakeholder
 review:` marker (mirrors `Last conformance:`).
 
-**Per-slice outcome.** A slice whose open questions are all resolved in the room →
+**Per-slice outcome.** Walk the slice's questions — the doc's `## Open Questions` and every
+`issue "..."` note the room added to its elements — and give each one of three endings:
+
+- **Answered in the room** → edit the doc's authored section with the answer and delete the
+  `issue` note by hand. Defer is never used to record an answer.
+- **Raised in the room, not for this version** → `em slice defer <model> <key> --from-issue "<text>" --until v<n> --decision "<what this version does>"`:
+  promotes the captured `issue` into the doc's Open Questions as a deferred item, mirrors it
+  into the state file and removes the red note — one command, no hand edit mid-session.
+- **Already on the doc, not for this version** → the positional form. A question this version will not answer is deferred with `em slice defer <model> <key> "<question>" --until v<n> --decision "<what this version does>"` — never left `- [ ]`, never deleted, never answered by guessing.
+
+Then, and only then: a slice with nothing left `- [ ]` and no open `issue` →
 `em slice review <model>.em <key> --by <name>` (flips its doc to `status: reviewed` and records
 `reviewedBy:`/`reviewedOn:`). Anything still open stays `draft` — the walkthrough doesn't decide
-it, the next session or the open-questions list does. A question this version will not answer is deferred with `em slice defer <model> <key> "<question>" --until v<n> --decision "<what this version does>"` — never left `- [ ]`, never deleted, never answered by guessing.
+it, the next session or the open-questions list does.
 
 **The facilitator never ratifies, never offers to ratify, and never suggests ratification in a
 review session. Ratification is a separate human gate after review**

package/dist/cli/reratify.d.ts

@@ -1,58 +0,0 @@
-import { NormalizedModel } from "../model/model.js";
-import { RefsResult } from "../model/refs.js";
-import { MeaningConfirmation } from "./ratify.js";
-export type ApplyReratifyResult = {
-    ok: true;
-    content: string;
-    newVersion: number;
-    kind: ReratifyKind;
-} | {
-    ok: false;
-    message: string;
-};
-/** MIL-258: `shipped` = the doc was `status: implemented` (status flips back); `unshipped` = a
- *  ratified `ready-to-implement` doc that never shipped (status untouched). */
-export type ReratifyKind = "shipped" | "unshipped";
-/**
- * Pure text transform: bumps `version:` by 1 and flips `status:` to `ready-to-implement` in
- * `raw`'s frontmatter block, clearing any `ratifiedBy:`/`ratifiedOn:` lines found (see module
- * header). Refuses (`ok: false`) unless the doc's CURRENT `status:` is `implemented`, or
- * `ready-to-implement` with `ratifiedBy:` set (MIL-258, `kind: "unshipped"`, status left alone) —
- * see module header for why this precondition (not idempotent-no-op) is the right refusal
- * shape here. No fs access — the caller reads/writes; see `runReratify` below.
- */
-export declare function applyReratifyFrontmatter(raw: string, confirmation?: MeaningConfirmation | null): ApplyReratifyResult;
-/** MIL-214: the certification-aware advisory `runReratify` computes about the version being
- *  superseded — never gates the bump, see module header. */
-export interface ReratifyAdvisory {
-    /** True when the CURRENT (pre-bump) version has no matching `conformedVersion` — either never
-     *  certified at all, or certified against a different version. */
-    neverCertified: boolean;
-    /** Count of unruled (`locus: null`) conformance findings in scope for this slice, across every
-     *  `conformance/*-findings.json` beside the model — not scoped to one revision, since a
-     *  reratify has no `--at` of its own to anchor on. */
-    unruledFindingsCount: number;
-}
-/** Pure: the two facts `runReratify`'s advisory reports, from the doc's own pre-bump
- *  `version`/`conformedVersion` plus a scan of every findings file beside the model — see
- *  `ReratifyAdvisory`. No refusal here or anywhere downstream; this is data for the CLI layer to
- *  print as `warn:` lines. */
-export declare function reratifyAdvisory(baseDir: string, sliceKey: string, currentVersion: number | null, conformedVersion: number | null): ReratifyAdvisory;
-export type RunReratifyResult = {
-    ok: true;
-    path: string;
-    newVersion: number;
-    kind: ReratifyKind;
-    advisory: ReratifyAdvisory | null;
-    reopened: number;
-} | {
-    ok: false;
-    message: string;
-};
-/**
- * Resolves `sliceKey` to its bound doc via the same note-binding join `mark-implemented`/
- * `ratify`/`--slice-ready`/`em export` use (MIL-121 cross-binding included), then reads/applies/
- * writes it. `baseDir` is the `.em` file's directory, same convention every doc/note path in
- * `em` uses.
- */
-export declare function runReratify(model: NormalizedModel, refs: RefsResult, baseDir: string, sliceKey: string, confirmation?: MeaningConfirmation | null): RunReratifyResult;

package/dist/cli/reratify.js

@@ -1,238 +0,0 @@
-// SPDX-License-Identifier: MIT
-// `em slice reratify` (MIL-161 finding #4): the version-bump / status-flip mechanical edit
-// SKILL.md's `slice` phase (step 0/2, re-ratification) has always described as "bump `version`
-// and flip `status` back to `ready-to-implement` by hand" — the same shape `em slice
-// mark-implemented` (MIL-103) already mechanized at the OTHER end of the lifecycle (the merge-
-// time flip). Sets exactly two frontmatter fields on the doc resolved from the key via the SAME
-// note-binding resolution `mark-implemented`/`ratify`/`--slice-ready`/`em export` use
-// (catalog/docJoin.ts's resolveSliceDocJoin):
-//
-//   version: <current + 1>
-//   status: ready-to-implement
-//
-// MIL-258: that is the SHIPPED path. A second path covers a doc at `status: ready-to-implement`
-// that still carries `ratifiedBy:` — a ratified version that has not shipped (the most common
-// change during delivery: an implementer hits a gap, a human answers it, the doc changes before
-// the build resumes). It bumps `version:` and clears the same four sign-off fields but leaves
-// `status:` (and any `implementedIn:`) alone, since there is nothing to flip back. A
-// `ready-to-implement` doc with NO `ratifiedBy:` still refuses: that is the exact state a
-// reratify leaves a doc in, so refusing keeps the double-bump guard — the doc is awaiting
-// `em slice ratify --by`, not another bump. `draft`/`reviewed` docs are not ratified and refuse
-// too; they can simply be edited.
-//
-// Shipped path precondition (original, MIL-161) — a doc currently `status: implemented`, the precondition
-// docs/slice-doc-schema.md#status-under-re-ratification describes ("a new version is ratified
-// for a slice whose previous version already shipped"). Refuses (never guesses) otherwise: a
-// `draft`/`reviewed` doc hasn't shipped yet, so there's no prior version to bump FROM, and a
-// doc already `ready-to-implement` WITHOUT `ratifiedBy:` means either first-time authoring (never
-// touch this doc with reratify at all — `em slice new` is what scaffolds those) or a reratify
-// that already ran (a second bump would silently double-increment `version`, which this command
-// deliberately never does — bumping isn't naturally idempotent the way ratify/mark-implemented's
-// absolute-value writes are).
-//
-// Also clears `ratifiedBy:`/`ratifiedOn:` if either is present: those fields record who signed
-// off the PRIOR version (`em slice ratify`, MIL-165) and describing the brand-new, not-yet-
-// reviewed version as already ratified by the old signer would be actively misleading. Clearing
-// them (rather than leaving them stale) is also what lets a subsequent `em slice ratify --by
-// <name>` apply cleanly afterward — ratify's own idempotent-refusal guard would otherwise read
-// the leftover prior ratifiedBy/ratifiedOn as "already ratified by someone else" and refuse.
-//
-// MIL-201: `reviewedBy:`/`reviewedOn:` are cleared for the same reason and in the same sweep. The
-// review record describes the version that shipped, not the new one — a re-ratified version needs
-// no fresh review session (the doc lands at `ready-to-implement`, which `em slice ratify`'s review
-// gate accepts), but leaving the old review in place would claim the room walked a version it has
-// never seen.
-//
-// Write strategy: the same surgical index-math splicing markImplemented.ts/ratify.ts use, via
-// the shared primitives in ./frontmatterSurgery.js — never a parse+re-serialize. Everything
-// outside the edited value spans — the body, `implementedIn:`, the lineage/`covers` keys, and
-// (best-effort) the file's own line-ending style — is copied through verbatim. The `## Delta`
-// section (docs/slice-doc-schema.md#delta-section-grammar-and-lifecycle) recording WHAT changed
-// stays entirely hand-authored — this command only ever touches the two lifecycle fields above.
-//
-// MIL-214: `reratifyAdvisory` below is the certification-aware counterpart to MIL-198's
-// upstream-timeline advisory (ratify.ts's `upstreamUnratifiedSlices`) — same shape, same
-// never-refuses stance. Bumping a version whose CURRENT one was never certified (or still has
-// unruled conformance findings) isn't wrong — the team may have good reason to move on before a
-// conform sweep ever ran — so this is advisory only, printed by the CLI layer, never gating the
-// bump itself. MIL-258: the advisory is about superseding a SHIPPED version, so the unshipped
-// path skips it entirely (`advisory: null`) — an unshipped version has no certification to lack.
-//
-// MIL-238: `meaningConfirmed:`/`contractChange:` describe the PRIOR version too, so they are
-// cleared in the same sweep as the sign-off keys. On a public-touching slice the bump itself
-// requires a fresh confirmation (`--meaning-unchanged` or `--contract-change "<why>"`), written
-// directly after the new `version:` line; on any other slice either flag is accepted and recorded.
-import { readFileSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { continuationOf } from "../model/continuation.js";
-import { resolveSliceDocJoin } from "../catalog/docJoin.js";
-import { fieldLineRegex, fieldLineWithEolRegex, locateFrontmatterInner, normalizeFieldValue } from "./frontmatterSurgery.js";
-import { listAllFindingsFiles, unruledFindingsInScope } from "./findings.js";
-import { MEANING_CONFIRMATION_KEYS, meaningConfirmationLine, meaningConfirmationRequiredMessage, } from "./ratify.js";
-import { isPublicTouchingSlice } from "../catalog/apiFirst.js";
-import { reopenDeferred } from "./defer.js";
-/** The status a doc must already be in for `reratify` to apply — mirrors `RATIFIED_STATUS` in
- *  ratify.ts (the status this command flips TO), named separately since it's the precondition
- *  here, not the target. */
-const IMPLEMENTED_STATUS = "implemented";
-const TARGET_STATUS = "ready-to-implement";
-/**
- * Pure text transform: bumps `version:` by 1 and flips `status:` to `ready-to-implement` in
- * `raw`'s frontmatter block, clearing any `ratifiedBy:`/`ratifiedOn:` lines found (see module
- * header). Refuses (`ok: false`) unless the doc's CURRENT `status:` is `implemented`, or
- * `ready-to-implement` with `ratifiedBy:` set (MIL-258, `kind: "unshipped"`, status left alone) —
- * see module header for why this precondition (not idempotent-no-op) is the right refusal
- * shape here. No fs access — the caller reads/writes; see `runReratify` below.
- */
-export function applyReratifyFrontmatter(raw, confirmation = null) {
-    const range = locateFrontmatterInner(raw);
-    if (!range)
-        return { ok: false, message: "no frontmatter block found" };
-    const inner = raw.slice(range.innerStart, range.innerEnd);
-    const statusMatch = fieldLineRegex("status").exec(inner);
-    if (!statusMatch)
-        return { ok: false, message: "no `status:` field found in frontmatter" };
-    const currentStatus = normalizeFieldValue(statusMatch[2])?.toLowerCase() ?? null;
-    let kind = "shipped";
-    if (currentStatus !== IMPLEMENTED_STATUS) {
-        const ratifiedByMatch = fieldLineRegex("ratifiedBy").exec(inner);
-        const hasRatifiedBy = ratifiedByMatch !== null && normalizeFieldValue(ratifiedByMatch[2]) !== null;
-        if (currentStatus === TARGET_STATUS && hasRatifiedBy) {
-            kind = "unshipped";
-        }
-        else if (currentStatus === TARGET_STATUS) {
-            return {
-                ok: false,
-                message: "doc is `status: ready-to-implement` with no `ratifiedBy:` — it is awaiting ratification " +
-                    "(a reratify already ran, or it was never signed off), so another version bump would " +
-                    "double-increment `version:`; record the sign-off with `em slice ratify --by <name>`",
-            };
-        }
-        else {
-            return {
-                ok: false,
-                message: `doc is \`status: ${currentStatus ?? "(empty)"}\` — reratify only applies to a slice doc that has ` +
-                    "shipped (`status: implemented`) or to a ratified `ready-to-implement` doc that has not (see " +
-                    "docs/slice-doc-schema.md#status-under-re-ratification); a `draft`/`reviewed` doc is not ratified " +
-                    "and can simply be edited, and first-time authoring uses `em slice new`",
-            };
-        }
-    }
-    const versionMatch = fieldLineRegex("version").exec(inner);
-    if (!versionMatch)
-        return { ok: false, message: "no `version:` field found in frontmatter" };
-    const currentVersionRaw = normalizeFieldValue(versionMatch[2]);
-    const currentVersion = currentVersionRaw !== null ? Number(currentVersionRaw) : NaN;
-    if (!Number.isInteger(currentVersion) || currentVersion < 1) {
-        return {
-            ok: false,
-            message: `doc's \`version:\` value "${currentVersionRaw ?? ""}" isn't a positive integer — refusing to guess a bump`,
-        };
-    }
-    const newVersion = currentVersion + 1;
-    // Clear stale ratifiedBy:/ratifiedOn:/reviewedBy:/reviewedOn: — see module header — and
-    // (MIL-238) the prior version's meaningConfirmed:/contractChange:. Done FIRST, on the original
-    // text, so the fresh confirmation line spliced in after `version:` below is never swept away.
-    // These keys are disjoint from `status:`/`version:` by construction (fieldLineRegex matches one
-    // key at a time), so the two lines are re-located on the cleared text unchanged.
-    let cleared = inner;
-    for (const key of ["ratifiedBy", "ratifiedOn", "reviewedBy", "reviewedOn", ...MEANING_CONFIRMATION_KEYS]) {
-        cleared = cleared.replace(fieldLineWithEolRegex(key), "");
-    }
-    const clearedStatus = fieldLineRegex("status").exec(cleared);
-    const clearedVersion = fieldLineRegex("version").exec(cleared);
-    const afterVersion = cleared.slice(clearedVersion.index + clearedVersion[0].length);
-    const eol = afterVersion.startsWith("\r\n") ? "\r\n" : "\n";
-    const versionNext = `${clearedVersion[1]}${newVersion}`;
-    // Apply from the highest index first so an earlier edit's index stays valid — same convention
-    // markImplemented.ts/ratify.ts use.
-    const edits = [
-        // MIL-258: the unshipped path is already at the target status — nothing to flip.
-        ...(kind === "shipped"
-            ? [{ index: clearedStatus.index, oldLen: clearedStatus[0].length, next: `${clearedStatus[1]}${TARGET_STATUS}` }]
-            : []),
-        {
-            index: clearedVersion.index,
-            oldLen: clearedVersion[0].length,
-            next: confirmation ? `${versionNext}${eol}${meaningConfirmationLine(confirmation)}` : versionNext,
-        },
-    ].sort((a, b) => b.index - a.index);
-    let updatedInner = cleared;
-    for (const edit of edits) {
-        updatedInner = updatedInner.slice(0, edit.index) + edit.next + updatedInner.slice(edit.index + edit.oldLen);
-    }
-    const content = raw.slice(0, range.innerStart) + updatedInner + raw.slice(range.innerEnd);
-    return { ok: true, content, newVersion, kind };
-}
-/** Pure: the two facts `runReratify`'s advisory reports, from the doc's own pre-bump
- *  `version`/`conformedVersion` plus a scan of every findings file beside the model — see
- *  `ReratifyAdvisory`. No refusal here or anywhere downstream; this is data for the CLI layer to
- *  print as `warn:` lines. */
-export function reratifyAdvisory(baseDir, sliceKey, currentVersion, conformedVersion) {
-    const neverCertified = conformedVersion === null || conformedVersion !== currentVersion;
-    let unruledFindingsCount = 0;
-    for (const { doc } of listAllFindingsFiles(baseDir)) {
-        unruledFindingsCount += unruledFindingsInScope(doc.findings, new Set([sliceKey])).length;
-    }
-    return { neverCertified, unruledFindingsCount };
-}
-/**
- * Resolves `sliceKey` to its bound doc via the same note-binding join `mark-implemented`/
- * `ratify`/`--slice-ready`/`em export` use (MIL-121 cross-binding included), then reads/applies/
- * writes it. `baseDir` is the `.em` file's directory, same convention every doc/note path in
- * `em` uses.
- */
-export function runReratify(model, refs, baseDir, sliceKey, confirmation = null) {
-    const sliceIndex = refs.sliceKeys.indexOf(sliceKey);
-    if (sliceIndex === -1) {
-        return { ok: false, message: `no slice with export key "${sliceKey}" in this model` };
-    }
-    const slice = model.slices[sliceIndex];
-    const { doc, continuationOf: continuationOfKey } = resolveSliceDocJoin(model, refs, slice, sliceKey, baseDir, (id) => refs.refById.get(id));
-    // MIL-208: see runRatify's own comment — a continuation slice has no status of its own.
-    if (continuationOfKey) {
-        const continuation = continuationOf(model, refs, sliceIndex);
-        const viewName = model.byId.get(continuation.viewLogicalId).name;
-        return {
-            ok: false,
-            message: `"${sliceKey}" is a continuation of "${continuationOfKey}" (view "${viewName}" again) — ` +
-                `it has no doc of its own; reratify "${continuationOfKey}" instead`,
-        };
-    }
-    if (doc.reason === "no-doc-bound") {
-        return {
-            ok: false,
-            message: `slice "${sliceKey}" has no doc bound via \`note "slices/${sliceKey}.md"\` — bind a slice doc before reratifying it`,
-        };
-    }
-    if (doc.reason === "binding-missing-file") {
-        return { ok: false, message: `slice "${sliceKey}" notes "${doc.path}" but no such file exists` };
-    }
-    if (doc.reason === "frontmatter-invalid") {
-        return {
-            ok: false,
-            message: `slice doc "${doc.path}" has missing or invalid frontmatter — run \`em validate\` for details`,
-        };
-    }
-    const absPath = join(baseDir, doc.path);
-    const raw = readFileSync(absPath, "utf8");
-    const result = applyReratifyFrontmatter(raw, confirmation);
-    if (!result.ok) {
-        return { ok: false, message: `${doc.path}: ${result.message}` };
-    }
-    // MIL-238: the API-first gate — after the doc's own preconditions, before any write: a
-    // public-touching slice's new version needs a meaning confirmation.
-    if (confirmation === null && isPublicTouchingSlice(model, refs, sliceKey)) {
-        return { ok: false, message: meaningConfirmationRequiredMessage(sliceKey) };
-    }
-    // MIL-214: computed from the doc's PRE-BUMP version/certification (`doc` was resolved before
-    // the write below changes `version`) — "was the version we're about to supersede ever fully
-    // certified". MIL-258: only meaningful for a SHIPPED version; an unshipped one has no
-    // certification to lack, so that path carries no advisory at all.
-    const advisory = result.kind === "shipped" ? reratifyAdvisory(baseDir, sliceKey, doc.version, doc.conformedVersion) : null;
-    // MIL-275: questions deferred to the version this bump reaches come back as `- [ ]`.
-    const reopened = reopenDeferred(result.content, result.newVersion);
-    writeFileSync(absPath, reopened.content, "utf8");
-    return { ok: true, path: doc.path, newVersion: result.newVersion, kind: result.kind, advisory, reopened: reopened.count };
-}
-//# sourceMappingURL=reratify.js.map

package/dist/cli/reratify.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reratify.js","sourceRoot":"","sources":["../../src/cli/reratify.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,2FAA2F;AAC3F,+FAA+F;AAC/F,qFAAqF;AACrF,+FAA+F;AAC/F,gGAAgG;AAChG,sFAAsF;AACtF,8CAA8C;AAC9C,EAAE;AACF,2BAA2B;AAC3B,+BAA+B;AAC/B,EAAE;AACF,gGAAgG;AAChG,8FAA8F;AAC9F,gGAAgG;AAChG,8FAA8F;AAC9F,qFAAqF;AACrF,0FAA0F;AAC1F,0FAA0F;AAC1F,gGAAgG;AAChG,kCAAkC;AAClC,EAAE;AACF,0GAA0G;AAC1G,8FAA8F;AAC9F,6FAA6F;AAC7F,6FAA6F;AAC7F,kGAAkG;AAClG,8FAA8F;AAC9F,gGAAgG;AAChG,iGAAiG;AACjG,8BAA8B;AAC9B,EAAE;AACF,+FAA+F;AAC/F,4FAA4F;AAC5F,gGAAgG;AAChG,6FAA6F;AAC7F,+FAA+F;AAC/F,6FAA6F;AAC7F,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,mGAAmG;AACnG,kGAAkG;AAClG,cAAc;AACd,EAAE;AACF,8FAA8F;AAC9F,4FAA4F;AAC5F,8FAA8F;AAC9F,8FAA8F;AAC9F,gGAAgG;AAChG,gGAAgG;AAChG,EAAE;AACF,wFAAwF;AACxF,yFAAyF;AACzF,8FAA8F;AAC9F,gGAAgG;AAChG,gGAAgG;AAChG,8FAA8F;AAC9F,iGAAiG;AAEjG,EAAE;AACF,6FAA6F;AAC7F,6FAA6F;AAC7F,gGAAgG;AAChG,mGAAmG;AAEnG,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAEL,yBAAyB,EACzB,uBAAuB,EACvB,kCAAkC,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C;;4BAE4B;AAC5B,MAAM,kBAAkB,GAAG,aAAa,CAAC;AACzC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAU3C;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW,EAAE,eAA2C,IAAI;IACnG,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE1D,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAC3F,MAAM,aAAa,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC;IACjF,IAAI,IAAI,GAAiB,SAAS,CAAC;IACnC,IAAI,aAAa,KAAK,kBAAkB,EAAE,CAAC;QACzC,MAAM,eAAe,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,eAAe,KAAK,IAAI,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;QACnG,IAAI,aAAa,KAAK,aAAa,IAAI,aAAa,EAAE,CAAC;YACrD,IAAI,GAAG,WAAW,CAAC;QACrB,CAAC;aAAM,IAAI,aAAa,KAAK,aAAa,EAAE,CAAC;YAC3C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EACL,0FAA0F;oBAC1F,sFAAsF;oBACtF,qFAAqF;aACxF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EACL,oBAAoB,aAAa,IAAI,SAAS,qDAAqD;oBACnG,8FAA8F;oBAC9F,mGAAmG;oBACnG,wEAAwE;aAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IAC7F,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACpF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,6BAA6B,iBAAiB,IAAI,EAAE,uDAAuD;SACrH,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,GAAG,CAAC,CAAC;IAEtC,wFAAwF;IACxF,+FAA+F;IAC/F,8FAA8F;IAC9F,gGAAgG;IAChG,iFAAiF;IACjF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,yBAAyB,CAAC,EAAE,CAAC;QACzG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,aAAa,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAE,CAAC;IAC9D,MAAM,cAAc,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,CAAE,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,MAAM,WAAW,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC;IAExD,8FAA8F;IAC9F,oCAAoC;IACpC,MAAM,KAAK,GAAG;QACZ,iFAAiF;QACjF,GAAG,CAAC,IAAI,KAAK,SAAS;YACpB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,EAAE,CAAC;YAChH,CAAC,CAAC,EAAE,CAAC;QACP;YACE,KAAK,EAAE,cAAc,CAAC,KAAK;YAC3B,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM;YAChC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,GAAG,GAAG,uBAAuB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;SAClG;KACF,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,YAAY,GAAG,OAAO,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAcD;;;8BAG8B;AAC9B,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,QAAgB,EAChB,cAA6B,EAC7B,gBAA+B;IAE/B,MAAM,cAAc,GAAG,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,cAAc,CAAC;IACxF,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,oBAAoB,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,CAAC;AAClD,CAAC;AAMD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,KAAsB,EACtB,IAAgB,EAChB,OAAe,EACf,QAAgB,EAChB,eAA2C,IAAI;IAE/C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,6BAA6B,QAAQ,iBAAiB,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,mBAAmB,CACpE,KAAK,EACL,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,OAAO,EACP,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAE,CAC9B,CAAC;IAEF,wFAAwF;IACxF,IAAI,iBAAiB,EAAE,CAAC;QACtB,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAE,CAAC;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,aAAa,CAAE,CAAC,IAAI,CAAC;QAClE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,IAAI,QAAQ,2BAA2B,iBAAiB,YAAY,QAAQ,aAAa;gBACzF,uCAAuC,iBAAiB,WAAW;SACtE,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,UAAU,QAAQ,yCAAyC,QAAQ,iDAAiD;SAC9H,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,QAAQ,YAAY,GAAG,CAAC,IAAI,2BAA2B,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,cAAc,GAAG,CAAC,IAAI,wEAAwE;SACxG,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,uFAAuF;IACvF,oEAAoE;IACpE,IAAI,YAAY,KAAK,IAAI,IAAI,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,6FAA6F;IAC7F,4FAA4F;IAC5F,sFAAsF;IACtF,kEAAkE;IAClE,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5G,qFAAqF;IACrF,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACnE,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AAC5H,CAAC"}