@sdd-method/author-cli 0.13.0 → 0.14.1

package/dist/lib/structure/intended.js

@@ -0,0 +1,199 @@
+// What an open change adds, for the references its own content makes (M-ADR 0230 §4.7, §4.11 proof 3).
+// A reference made by an open change resolves against the current view plus that change's additions: the elements its
+// structural deltas ADD, those of the changes in its depends_on closure, and the contracts its agreement record agrees
+// as new files. A reference made by anything else resolves against the current view only, so a current reference that
+// resolves only against an addition is still refused.
+// What ties content to a change is never the reference being resolved:
+//   a model element                        the change's own delta (validateDeltas, viewAt)
+//   a source-built row with a change_id    that change
+//   a contract row                         the change whose record agrees its file as new
+//   a row naming such a contract           that change
+//   a row built from the change's files    that change (its spec_path lies in openspec/changes/<change>/, as a
+//                                          requirement the change ADDS does)
+// Pure but for reading agreement records.
+import { readdir, readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { parseDocument } from "yaml";
+import { closure } from "./compose.js";
+import { elementKey, loadChangeStructure } from "./model.js";
+export const CONTRACTS = "contracts";
+const LIFECYCLES = ["proposed", "agreed", "withdrawn", "superseded"];
+/** The change's agreement record (docs/agreements/<change>.yaml): its status, or `unrecorded`, and its new contract files. */
+export async function readAgreement(repo, change) {
+    let text;
+    try {
+        text = await readFile(join(repo, "docs", "agreements", `${change}.yaml`), "utf8");
+    }
+    catch {
+        return { status: "unrecorded", newContracts: [] };
+    }
+    let record;
+    try {
+        record = parseDocument(text).toJS()?.agreement_record;
+    }
+    catch {
+        return { status: "unrecorded", newContracts: [] };
+    }
+    const status = LIFECYCLES.find((s) => s === String(record?.["status"] ?? "")) ?? "unrecorded";
+    const newContracts = [];
+    const entries = Array.isArray(record?.["contracts"]) ? record["contracts"] : [];
+    for (const raw of entries) {
+        if (raw === null || typeof raw !== "object")
+            continue;
+        const e = raw;
+        if (e["amended_by_this_change"] !== true)
+            continue;
+        const files = Array.isArray(e["files"]) ? e["files"].map(String) : e["file"] !== undefined ? [String(e["file"])] : [];
+        // agreement-record schema 1.2.0 and later: a file the change relies on carries relies_on, so an agreed file
+        // without one is new (1.3.0 states it). An entry with no agrees predates the digests and says nothing either way.
+        const digest = (field, f) => {
+            const v = e[field];
+            return v !== null && typeof v === "object" ? String(v[f] ?? "") : String(v ?? "");
+        };
+        for (const f of files)
+            if (digest("agrees", f) !== "" && digest("relies_on", f) === "")
+                newContracts.push(`${String(e["repo"] ?? "")}/${f}`);
+    }
+    return { status, newContracts };
+}
+/** The open changes (openspec/changes/<change>, not archive/), with their agreement records. */
+export async function loadOpenChanges(repo, problems) {
+    let names;
+    try {
+        names = (await readdir(join(repo, "openspec", "changes"), { withFileTypes: true }))
+            .filter((e) => e.isDirectory() && e.name !== "archive")
+            .map((e) => e.name)
+            .sort();
+    }
+    catch {
+        names = [];
+    }
+    const open = new Map();
+    const newContracts = new Map();
+    for (const name of names) {
+        const agreement = await readAgreement(repo, name);
+        open.set(name, { structure: await loadChangeStructure(repo, name, problems), status: agreement.status });
+        newContracts.set(name, agreement.newContracts);
+    }
+    return { open, newContracts };
+}
+const cell = (v) => (v === null || v === undefined ? "" : String(v));
+/**
+ * Each open change's additions, and the change that adds each. A contract is identified by its built row: the row
+ * whose spec_path is `<repo>/<file>` as the record names it. A new contract with no built row adds nothing, and a
+ * reference to it stays unresolved.
+ */
+export class Additions {
+    open;
+    own = new Map();
+    adder = new Map();
+    constructor(open, newContracts, contractRows) {
+        this.open = open;
+        const idByPath = new Map();
+        for (const r of contractRows)
+            if (cell(r["spec_path"]) !== "")
+                idByPath.set(cell(r["spec_path"]), cell(r["id"]));
+        for (const [name, oc] of open) {
+            const keys = new Set();
+            for (const d of oc.structure.deltas)
+                for (const e of d.added)
+                    keys.add(elementKey(e.catalogue, e.id));
+            for (const p of newContracts.get(name) ?? []) {
+                const id = idByPath.get(p);
+                if (id !== undefined && id !== "")
+                    keys.add(elementKey(CONTRACTS, id));
+            }
+            this.own.set(name, keys);
+            for (const k of keys)
+                if (!this.adder.has(k))
+                    this.adder.set(k, name);
+        }
+    }
+    /** The open change that adds the element or contract, if one does. */
+    addedBy(catalogue, id) {
+        return this.adder.get(elementKey(catalogue, id));
+    }
+    /** Whether the element or contract is the change's own addition or one of its dependency closure's. */
+    within(change, catalogue, id) {
+        const key = elementKey(catalogue, id);
+        return closure(change, this.open).some((c) => this.own.get(c)?.has(key) ?? false);
+    }
+    /** The contracts the given changes add. */
+    contracts(changes) {
+        const out = new Set();
+        for (const c of changes)
+            for (const k of this.own.get(c) ?? [])
+                if (k.startsWith(`${CONTRACTS}/`))
+                    out.add(k.slice(CONTRACTS.length + 1));
+        return out;
+    }
+    /** The open changes a source-built row belongs to: its change_id, the change whose files it is built from, or a new contract it is or names. */
+    ownersOf(schema, catalogue, row, sddId) {
+        const out = new Set();
+        const changeId = cell(row["change_id"]);
+        if (changeId !== "") {
+            const name = changeId.startsWith(`${sddId}::`) ? changeId.slice(sddId.length + 2) : changeId;
+            if (this.open.has(name))
+                out.add(name);
+        }
+        const from = /^openspec\/changes\/([^/]+)\//.exec(cell(row["spec_path"]))?.[1];
+        if (from !== undefined && this.open.has(from))
+            out.add(from);
+        const contractOwner = (id) => {
+            const by = this.adder.get(elementKey(CONTRACTS, id));
+            if (by !== undefined)
+                out.add(by);
+        };
+        const cat = schema.catalogues.find((c) => c.name === catalogue);
+        if (catalogue === CONTRACTS && cat)
+            contractOwner(cell(row[cat.primaryKey]));
+        for (const fk of cat?.foreignKeys ?? [])
+            if (fk.references === `${CONTRACTS}.id` && cell(row[fk.column]) !== "")
+                contractOwner(cell(row[fk.column]));
+        return [...out].sort();
+    }
+}
+/**
+ * Sort a build's dangling references: a row an open change owns, naming that change's addition, resolves in that
+ * change's view. Every other stays dangling, including a row nothing ties to the change that adds its target.
+ */
+export function splitDangling(schema, rowsByCatalogue, failures, additions, sddId) {
+    const intended = [];
+    const dangling = [];
+    const index = new Map();
+    const rowOf = (catalogue, pk) => {
+        let byPk = index.get(catalogue);
+        if (!byPk) {
+            const key = schema.catalogues.find((c) => c.name === catalogue)?.primaryKey ?? "id";
+            byPk = new Map((rowsByCatalogue.get(catalogue) ?? []).map((r) => [cell(r[key]), r]));
+            index.set(catalogue, byPk);
+        }
+        return byPk.get(pk);
+    };
+    for (const f of failures) {
+        const [target, column] = f.target.split(".");
+        const targetPk = schema.catalogues.find((c) => c.name === target)?.primaryKey;
+        const row = rowOf(f.catalogue, f.referencingRow);
+        const owner = f.value === "" || column !== targetPk || row === undefined
+            ? undefined
+            : additions.ownersOf(schema, f.catalogue, row, sddId).find((c) => additions.within(c, target, f.value));
+        if (owner !== undefined)
+            intended.push({ failure: f, change: owner });
+        else {
+            const by = f.value === "" ? undefined : additions.addedBy(target, f.value);
+            dangling.push(by === undefined ? { failure: f } : { failure: f, addedBy: by });
+        }
+    }
+    return { intended, dangling };
+}
+/** Element key -> the agreed change that adds or modifies it, and the element as that change states it. */
+export function intendedWrites(open, agreed) {
+    const out = new Map();
+    for (const c of agreed) {
+        for (const d of open.get(c)?.structure.deltas ?? [])
+            for (const e of [...d.added, ...d.modified])
+                out.set(elementKey(e.catalogue, e.id), { change: c, element: e });
+    }
+    return out;
+}
+//# sourceMappingURL=intended.js.map

package/dist/lib/structure/model.js

@@ -1,4 +1,4 @@
-// The structural model and a change's structural deltas (M-ADR 0230 §4.3, §4.4, Proposed). Pure reads, so the
+// The structural model and a change's structural deltas (M-ADR 0230 §4.3, §4.4). Pure reads, so the
 // verify-only CLI can carry them. The format is docs/method/methods/guides/structural-model-format.md:
 //   openspec/structure/<partition>.yaml                    the model, one file per partition
 //   openspec/changes/<change>/structure/<partition>.yaml   a change's delta for that partition

package/dist/lib/structure/render.js

@@ -1,4 +1,4 @@
-// The generated views of the structural model (M-ADR 0230 §4.3, Proposed): projections, never edited. Each file is
+// The generated views of the structural model (M-ADR 0230 §4.3): projections, never edited. Each file is
 // rendered from the current view alone, in id order, so the same model renders the same bytes. Its first line names
 // the generator and the digest of the body below it, which tells three states apart:
 //   missing      the file is absent

package/dist/lib/structure/view.js

@@ -121,7 +121,12 @@ function naturalKey(cat, e) {
  * catalogue of another class, against its built rows), no cycle through a self-reference, natural keys unique, and
  * domain invariants naming their entity's own attributes and relationships.
  */
-export function validateView(schema, view, built, problems, unresolved) {
+export function validateView(schema, view, built, problems, unresolved, addedBy = () => undefined) {
+    // A reference to an open change's addition, from outside that change and its dependants (§4.11 proof 3).
+    const outside = (catalogue, id) => {
+        const by = addedBy(catalogue, id);
+        return by === undefined ? "" : `; open change ${by} adds it, and only that change and those depending on it can name it`;
+    };
     for (const [catalogue, byId] of view) {
         const cat = catalogueOf(schema, catalogue);
         for (const e of byId.values()) {
@@ -133,14 +138,14 @@ export function validateView(schema, view, built, problems, unresolved) {
             for (const r of referencesOf(schema, e)) {
                 if (r.structural) {
                     if (!find(view, r.catalogue, r.targetColumn, r.value))
-                        problems.push(`${e.file}: ${elementKey(catalogue, e.id)}: ${r.column} ${JSON.stringify(r.value)} names no ${r.catalogue} element in this view (${elementKey(r.catalogue, r.value)})`);
+                        problems.push(`${e.file}: ${elementKey(catalogue, e.id)}: ${r.column} ${JSON.stringify(r.value)} names no ${r.catalogue} element in this view (${elementKey(r.catalogue, r.value)})${r.targetColumn === "id" ? outside(r.catalogue, r.value) : ""}`);
                 }
                 else {
                     const rows = built(r.catalogue, r.targetColumn);
                     if (rows === null)
                         unresolved.add(r.catalogue);
                     else if (!rows.has(r.value))
-                        problems.push(`${e.file}: ${elementKey(catalogue, e.id)}: ${r.column} ${JSON.stringify(r.value)} names no row of ${r.catalogue} as built`);
+                        problems.push(`${e.file}: ${elementKey(catalogue, e.id)}: ${r.column} ${JSON.stringify(r.value)} names no row of ${r.catalogue} as built${outside(r.catalogue, r.value)}`);
                 }
             }
         }

package/dist/lib/validate/agreement-evidence.js

@@ -3,7 +3,7 @@
 //
 //   agreed content   the change's proposal, deltas, Gate 0, design, tasks (checkboxes ignored), the test plan's
 //                    scenario-to-test rows (its Before and After cells ignored) and its structural deltas with their
-//                    base revisions (M-ADR 0230 §4.4, Proposed; report only until it is accepted) are what was approved. Each is compared
+//                    base revisions (M-ADR 0230 §4.4; report only until it is accepted) are what was approved. Each is compared
 //                    with its state at the record's pinned commit: the latest amendment's commit, else sdd.commit.
 //   requirement      a requirement's block in a spec: its heading to the next requirement or section heading. The
 //                    stale check compares the blocks a change targets, not the whole file.
@@ -16,7 +16,7 @@ export function boundFile(rel) {
     return /^(proposal|design|gate-0|tasks|test-plan)\.md$/.test(rel) || /^specs\/.+\/spec\.md$/.test(rel) || structuralFile(rel);
 }
 /**
- * A change's structural artifact (M-ADR 0230 §4.4, Proposed): a partition delta or the no-op claim, both agreed
+ * A change's structural artifact (M-ADR 0230 §4.4): a partition delta or the no-op claim, both agreed
  * content, so a delta's base revisions are pinned with it. The effect record (structure/applied.yaml) is written by
  * the archive, after agreement, and is not.
  */

package/dist/lib/validate/behaviour-store.js

@@ -16,10 +16,12 @@
 //                 check is vacuous, and says so.
 //      agreed content: the change's proposal, deltas, Gate 0, design, tasks (checkboxes ignored), test
 //                 plan (its execution results ignored) and structural deltas equal their state at that commit
-//                 (M-ADR 0222 §4.6; a structural delta's change is a [WARN] while M-ADR 0230 is Proposed).
+//                 (M-ADR 0222 §4.6; a structural delta's change fails like the rest, a [WARN] only with ENFORCED false).
 //      kinds:    on a record held to 1.1.0, each test-plan row's Kind (changed or carried) is the one computed
-//                 from the deltas and the living spec, a row naming no scenario of the deltas fails, and a
-//                 filled Before is a fail for changed and a pass for carried (M-ADR 0223 §4.4).
+//                 from the deltas and the living spec, or repaired (declared, on a carried scenario); a row
+//                 naming no scenario of the deltas fails; and a filled Before, read as whole-word results, is a
+//                 fail for changed, a pass for carried, and a fail citing the test double's correcting commit
+//                 for repaired (M-ADR 0223 §4.4).
 //   4. verdicts: every archived change except a baseline has a verdict.md whose verdict line agrees with
 //                 its record's PASS (M-ADR 0223 §4.6). A record held to 1.1.0 (by its own history, or by the
 //                 schema the SDD shipped when the change archived) also needs: an agreed record; archived
@@ -186,6 +188,16 @@ export function parseAgreementRecord(file, text) {
                     noLongerImplements.push({ repo: e.repo, requirement: e.requirement });
             }
     }
+    // Record 1.3.0 (M-ADR 0230 §4.2): a contracts entry may deprecate its version, stating the sunset. A
+    // deprecation that names no date states no runway, so it is refused rather than read as a deprecation without one.
+    for (const [i, x] of (Array.isArray(r.contracts) ? r.contracts : []).entries()) {
+        const d = x?.deprecates;
+        if (d === undefined)
+            continue;
+        const sunset = d?.sunset;
+        if (typeof sunset !== "string" || !isCalendarDate(sunset))
+            problems.push(`${file}: contracts[${i}].deprecates must be {sunset: YYYY-MM-DD}, a calendar date as a string; found ${JSON.stringify(d)}`);
+    }
     if (problems.length > 0)
         return { problems };
     return {
@@ -205,6 +217,13 @@ export function parseAgreementRecord(file, text) {
         problems,
     };
 }
+/** A YYYY-MM-DD string naming a day that exists. */
+function isCalendarDate(s) {
+    if (!/^\d{4}-\d{2}-\d{2}$/.test(s))
+        return false;
+    const t = new Date(`${s}T00:00:00Z`);
+    return !Number.isNaN(t.getTime()) && t.toISOString().slice(0, 10) === s;
+}
 /** Every pinned commit in a record: any key named `commit` or ending `_commit`, and each value under verdict.merged and current. */
 function commitFields(r) {
     const out = [];
@@ -489,7 +508,7 @@ export async function checkBehaviourStore(repo, options = {}) {
                         if (a === null || b === null || normaliseBound(f, a) !== normaliseBound(f, b)) {
                             const what = `${dir}: AGREED CONTENT CHANGED: ${f} ${a === null ? "was added" : b === null ? "was removed" : "differs"} since ${base}, with no amendment recording a commit and an approver; amend the agreement or renew it (M-ADR 0222 §4.6)`;
                             if (structuralFile(f) && !STRUCTURE_ENFORCED)
-                                warnings.push(`${what}; a structural delta, report only while M-ADR 0230 is Proposed`);
+                                warnings.push(`${what}; a structural delta, reported only because ENFORCED is off`);
                             else
                                 failures.push(what);
                         }
@@ -497,14 +516,14 @@ export async function checkBehaviourStore(repo, options = {}) {
                 }
             }
         }
-        // A test plan's kinds (M-ADR 0223 §4.4 as amended): changed scenarios go red then green, carried ones stay green.
+        // A test plan's kinds (M-ADR 0223 §4.4 as amended): changed and repaired scenarios go red then green, carried ones stay green.
         if (versionAtLeast(record?.schemaVersion, "1.1.0") && record?.status === "agreed") {
             const plan = await readText(join(repo, dir, "test-plan.md"));
             if (plan !== null) {
                 const header = testPlanHeader(plan);
                 const col = (name) => header.indexOf(name);
                 if (col("kind") < 0)
-                    failures.push(`${dir}/test-plan.md: the scenario table has no Kind column (changed | carried)`);
+                    failures.push(`${dir}/test-plan.md: the scenario table has no Kind column (changed | carried | repaired)`);
                 else {
                     for (const row of testPlanMapping(plan)) {
                         const cell = row[col("requirement")] ?? "";
@@ -533,13 +552,31 @@ export async function checkBehaviourStore(repo, options = {}) {
                             continue;
                         }
                         kindsChecked++;
-                        if (kind !== expected)
+                        // `repaired` is declared, never computed: a carried scenario whose earlier pass was false-green.
+                        const repaired = kind === "repaired";
+                        if (repaired && expected === "changed")
+                            failures.push(`${dir}/test-plan.md: "${req}" / "${scen}" is changed against the living spec, so it cannot be repaired: repaired is a scenario carried as the living spec states it, whose code did not meet it`);
+                        else if (!repaired && kind !== expected)
                             failures.push(`${dir}/test-plan.md: "${req}" / "${scen}" is ${expected} against the living spec, and the plan says ${JSON.stringify(kind)}`);
                         const before = col("before") >= 0 ? (row[col("before")] ?? "") : "";
-                        if (before !== "" && expected === "changed" && !/fail|red/i.test(before))
-                            failures.push(`${dir}/test-plan.md: "${req}" / "${scen}" is changed, so its test fails before the code; the scenario table's Before cell says ${JSON.stringify(before)}`);
-                        if (before !== "" && expected === "carried" && !/pass|green/i.test(before))
-                            failures.push(`${dir}/test-plan.md: "${req}" / "${scen}" is carried, so its test passes before the code as regression; the scenario table's Before cell says ${JSON.stringify(before)}`);
+                        if (before !== "") {
+                            // The cell's results, as whole words: "PASS at x; FAIL at y" holds both, and "setup required" or "bypass" holds neither.
+                            const pass = /\b(?:pass(?:es|ed)?|green)\b/i.test(before);
+                            const fail = /\b(?:fail(?:s|ed)?|red)\b/i.test(before);
+                            const said = `the scenario table's Before cell says ${JSON.stringify(before)}`;
+                            if (repaired) {
+                                if (!fail)
+                                    failures.push(`${dir}/test-plan.md: "${req}" / "${scen}" is repaired, so its test fails before the code; ${said}`);
+                                else if (!/\b[0-9a-f]{7,40}\b/i.test(before))
+                                    failures.push(`${dir}/test-plan.md: "${req}" / "${scen}" is repaired, so its Before cell cites the commit that corrects the test double, with its own red run; ${said}`);
+                            }
+                            else if (expected === "changed" && (!fail || pass)) {
+                                failures.push(`${dir}/test-plan.md: "${req}" / "${scen}" is changed, so its test fails before the code${pass && fail ? ", and a cell holding both results is not a result" : ""}; ${said}`);
+                            }
+                            else if (expected === "carried" && (!pass || fail)) {
+                                failures.push(`${dir}/test-plan.md: "${req}" / "${scen}" is carried, so its test passes before the code as regression${fail ? "; if its earlier pass was false-green, declare it repaired and cite the commit that corrects the test double" : ""}; ${said}`);
+                            }
+                        }
                     }
                 }
             }
@@ -640,7 +677,7 @@ export async function checkBehaviourStore(repo, options = {}) {
                 if (a === null || b === null || normaliseBound(f, a) !== normaliseBound(f, b)) {
                     const what = `${dir}: AGREED CONTENT CHANGED: ${f} ${a === null ? "was added" : b === null ? "was removed" : "differs"} from what was agreed at ${base}, with no amendment recording a commit and an approver (M-ADR 0222 §4.6)`;
                     if (structuralFile(f) && !STRUCTURE_ENFORCED)
-                        warnings.push(`${what}; a structural delta, report only while M-ADR 0230 is Proposed`);
+                        warnings.push(`${what}; a structural delta, reported only because ENFORCED is off`);
                     else
                         failures.push(what);
                 }

package/dist/lib/validate/dispatch.js

@@ -43,7 +43,7 @@ const BEHAVIOUR_STORE_VALIDATORS = [
         source: { kind: "native", run: async (ctx) => checkJourneyImpact(ctx.targetRepo) },
         build: () => ({ status: "run", args: [] }),
     },
-    // The structural model and each open change's structural artifact (M-ADR 0230, Proposed). Report only; [N/A] without a model.
+    // The structural model and each open change's structural artifact (M-ADR 0230). Report only; [N/A] without a model.
     {
         name: "structural-model",
         source: { kind: "native", run: async (ctx) => checkStructuralModel(ctx.targetRepo) },

package/dist/lib/validate/structural-model.js

@@ -1,4 +1,4 @@
-// structural-model: the structural model and each open change's structural artifact (M-ADR 0230 §4.3, §4.4, Proposed;
+// structural-model: the structural model and each open change's structural artifact (M-ADR 0230 §4.3, §4.4;
 // docs/method/methods/guides/structural-model-format.md).
 //
 // The model (openspec/structure/<partition>.yaml), as the current view:
@@ -6,11 +6,13 @@
 //               (a platform SDD: its domains and `platform`; an application or integration SDD: its sdd_id)
 //   elements    a `structure` catalogue, its `structure` columns only, an id held once, required columns,
 //               value types and vocabularies (the catalogue metamodel's)
-//   references  resolved in the view; into a catalogue of another class, against that catalogue as built
+//   references  resolved in the view; into a catalogue of another class, against that catalogue as built, less the
+//               contracts open changes' records agree as new (lib/structure/intended.ts): those are in their change's
+//               view, its dependants' and the intended one, so a current reference to one is refused (§4.11 proof 3)
 //   hierarchies no cycle through a self-reference; natural keys unique; domain invariants naming their entity's own
 //               attributes and relationships
-//   views       each generated view under docs/structure/ missing, stale (rendered from an earlier model) or edited by
-//               hand (its body no longer matches the digest in its header)
+//   views       docs/structure/ absent where the model is admitted, and each generated view under it missing, stale
+//               (rendered from an earlier model) or edited by hand (its body no longer matches the digest in its header)
 // Each open change (openspec/changes/<change>/structure/):
 //   artifact    where the model exists, a change has partition deltas or none.yaml, never both
 //   deltas      well formed; ADDED ids new; MODIFIED and REMOVED ids held by the delta's partition; a base
@@ -29,20 +31,22 @@
 //   archived    a change archived with structural deltas and no effect record (a raw `openspec archive`): its
 //               structure is not applied, so its transition is not shipped
 //
-// Report only while M-ADR 0230 is Proposed (ENFORCED): every finding is a [WARN] and the check exits 0. Without
-// openspec/structure/ and with no change carrying a structure/ directory it reports [N/A].
+// Enforced (the release that accepts M-ADR 0230): every finding is a [FAIL] and the check
+// exits 1; with ENFORCED false it reports them as [WARN] and exits 0. Without openspec/structure/ and with no change
+// carrying a structure/ directory it reports [N/A], so an SDD without a model is unaffected.
 import { readdir, readFile } from "node:fs/promises";
 import { join } from "node:path";
 import { parseDocument } from "yaml";
 import { parseCatalogueCsv } from "../catalogue/csv-reader.js";
 import { loadCanonicalSchema } from "../catalogue/schema-loader.js";
 import { APPLIED_FILE, elementKey, loadChangeStructure, loadModel, STRUCTURE_DIR } from "../structure/model.js";
-import { agreedOrder, attribute, checkDependencies, checkOverlap, intended, viewAt } from "../structure/compose.js";
+import { agreedOrder, attribute, checkDependencies, checkOverlap, closure, intended, viewAt } from "../structure/compose.js";
 import { describeState, renderViews, VIEW_PATHS, viewState } from "../structure/render.js";
+import { Additions, CONTRACTS, readAgreement } from "../structure/intended.js";
 import { validateDeltas, validateView, viewOf } from "../structure/view.js";
 const VIEW_COUNT = Object.keys(VIEW_PATHS).length;
-/** Flipped when M-ADR 0230 is accepted: findings then FAIL. */
-export const ENFORCED = false;
+/** Findings FAIL (from M-ADR 0230's acceptance); false reports them only, as while M-ADR 0230 was Proposed. Also binds a change's structural deltas as agreed content in the behaviour-store check. */
+export const ENFORCED = true;
 const CHANGES_DIR = join("openspec", "changes");
 async function readText(p) {
     try {
@@ -60,19 +64,6 @@ async function subdirs(p) {
         return [];
     }
 }
-/** The change's agreement record status (docs/agreements/<change>.yaml), or `unrecorded`. */
-async function agreementStatus(repo, change) {
-    const text = await readText(join(repo, "docs", "agreements", `${change}.yaml`));
-    if (text === null)
-        return "unrecorded";
-    try {
-        const status = String(parseDocument(text).toJS()?.agreement_record?.status ?? "");
-        return ["proposed", "agreed", "withdrawn", "superseded"].find((s) => s === status) ?? "unrecorded";
-    }
-    catch {
-        return "unrecorded";
-    }
-}
 /** Names of archived changes: openspec/changes/archive/<YYYY-MM-DD>-<name>. */
 async function archivedNames(repo) {
     return new Set((await subdirs(join(repo, CHANGES_DIR, "archive"))).map((d) => d.replace(/^\d{4}-\d{2}-\d{2}-/, "")));
@@ -91,8 +82,22 @@ function builtLookup(repo) {
         const text = await readText(join(repo, "catalogues", `${catalogue}.csv`));
         cache.set(catalogue, text === null ? null : parseCatalogueCsv(text).rows);
     };
+    fn.rows = (catalogue) => cache.get(catalogue) ?? [];
     return fn;
 }
+/**
+ * The built catalogues as one view sees them. A contract an open change's record agrees as new is built from the
+ * change's own sources, so it is in no view but that change's, its dependants' and, once agreed, the intended one.
+ */
+function builtIn(built, all, mine) {
+    return (catalogue, column) => {
+        const rows = built(catalogue, column);
+        if (rows === null || catalogue !== CONTRACTS || column !== "id")
+            return rows;
+        const out = new Set([...rows].filter((id) => !all.has(id) || mine.has(id)));
+        return out;
+    };
+}
 export async function checkStructuralModel(repo, options = {}) {
     const enforced = options.enforced ?? ENFORCED;
     const problems = [];
@@ -123,6 +128,16 @@ export async function checkStructuralModel(repo, options = {}) {
     for (const c of schema.catalogues)
         if (c.sourceOfTruth !== "structure")
             await built.load(c.name);
+    const open = new Map();
+    const newContracts = new Map();
+    for (const s of structures) {
+        const agreement = await readAgreement(repo, s.change);
+        open.set(s.change, { structure: s, status: agreement.status });
+        newContracts.set(s.change, agreement.newContracts);
+    }
+    const additions = new Additions(open, newContracts, built.rows(CONTRACTS));
+    const allNew = additions.contracts(open.keys());
+    const addedBy = (catalogue, id) => additions.addedBy(catalogue, id);
     let allowed = null;
     if (profile === "platform-profile") {
         allowed = new Set(["platform", ...(view.get("domains")?.keys() ?? []), ...(built("domains", "id") ?? [])]);
@@ -143,14 +158,14 @@ export async function checkStructuralModel(repo, options = {}) {
     // The current view.
     const unresolved = new Set();
     const currentProblems = [];
-    validateView(schema, view, built, currentProblems, unresolved);
+    validateView(schema, view, builtIn(built, allNew, new Set()), currentProblems, unresolved, addedBy);
     problems.push(...currentProblems);
     const elementCount = [...view.values()].reduce((n, m) => n + m.size, 0);
     lines.push(files === null ? `model: none (${STRUCTURE_DIR}/ absent)` : `model: ${files.length} partition file(s), ${elementCount} element(s) in ${view.size} catalogue(s)`);
     if (unresolved.size > 0)
         lines.push(`references into ${[...unresolved].sort().join(", ")}: unresolved (no built catalogue)`);
-    // The generated views, against a render of the current view. An SDD that has not rendered them yet (no
-    // docs/structure/) is adopting the model, which keeps its originals until the review is complete (§6 step 1).
+    // The generated views, against a render of the current view. Where a model is admitted they are required (M-ADR
+    // 0230 §4.3): an SDD reviews an extraction before writing it (§6 step 1), so none is mid-adoption with a model.
     if (files !== null && (await subdirs(join(repo, "docs"))).includes("structure")) {
         let current = 0;
         for (const [path, rendered] of renderViews(view)) {
@@ -163,14 +178,15 @@ export async function checkStructuralModel(repo, options = {}) {
         lines.push(`generated views: ${current} of ${VIEW_COUNT} current`);
     }
     else if (files !== null) {
-        lines.push("generated views: not rendered (no docs/structure/); `sdd-cli structure render` writes them");
+        problems.push("docs/structure/: the generated views are not rendered; where a structural model is admitted they are required. `structure render` writes them (sdd-maintain or sdd-cli)");
+        lines.push(`generated views: 0 of ${VIEW_COUNT} (no docs/structure/)`);
     }
     // Open changes.
-    const addedBy = new Map();
+    const addedByChange = new Map();
     for (const s of structures)
         for (const d of s.deltas)
             for (const e of d.added)
-                addedBy.set(elementKey(e.catalogue, e.id), s.change);
+                addedByChange.set(elementKey(e.catalogue, e.id), s.change);
     const features = new Set(view.get("features")?.keys() ?? []);
     let withDeltas = 0;
     let noOps = 0;
@@ -190,7 +206,7 @@ export async function checkStructuralModel(repo, options = {}) {
         }
         if (s.noOp && s.deltas.length > 0)
             problems.push(`${s.noOp.file}: a no-op claim beside ${s.deltas.length} partition delta(s); state one or the other`);
-        const elsewhere = new Map([...addedBy].filter(([, c]) => c !== s.change));
+        const elsewhere = new Map([...addedByChange].filter(([, c]) => c !== s.change));
         validateDeltas(schema, view, s.deltas, elsewhere, problems);
         // A behaviour delta for a feature the model does not hold needs that feature added here.
         const adds = new Set(s.deltas.flatMap((d) => d.added.filter((e) => e.catalogue === "features").map((e) => e.id)));
@@ -207,9 +223,6 @@ export async function checkStructuralModel(repo, options = {}) {
     }
     lines.push(`changes: ${changes.length} open, ${withDeltas} with structural deltas, ${noOps} claiming none, ${without} without the artifact`);
     // Composition (M-ADR 0230 §4.5): the three views and the three checks.
-    const open = new Map();
-    for (const s of structures)
-        open.set(s.change, { structure: s, status: await agreementStatus(repo, s.change) });
     const archived = await archivedNames(repo);
     checkOverlap(open, problems);
     checkDependencies(open, archived, problems);
@@ -219,7 +232,7 @@ export async function checkStructuralModel(repo, options = {}) {
         if (oc.structure.deltas.length === 0)
             continue;
         const at = [];
-        validateView(schema, viewAt(view, name, open), built, at, new Set());
+        validateView(schema, viewAt(view, name, open), builtIn(built, allNew, additions.contracts(closure(name, open))), at, new Set(), addedBy);
         for (const p of at) {
             if (known.has(p))
                 continue;
@@ -231,7 +244,7 @@ export async function checkStructuralModel(repo, options = {}) {
     const agreed = agreedOrder(open);
     if (agreed.length > 0) {
         const inIntended = [];
-        validateView(schema, intended(view, open), built, inIntended, new Set());
+        validateView(schema, intended(view, open), builtIn(built, allNew, additions.contracts(agreed)), inIntended, new Set(), addedBy);
         for (const p of inIntended) {
             if (known.has(p) || atAgreed.has(p))
                 continue;
@@ -259,7 +272,7 @@ export async function checkStructuralModel(repo, options = {}) {
     if (problems.length === 0)
         return { exitCode: 0, stdout: `structural-model:\n${body}[PASS] structural-model: ok\n` };
     const tag = enforced ? "FAIL" : "WARN";
-    const tail = enforced ? `[FAIL] structural-model: ${problems.length} finding(s)\n` : `[WARN] structural-model: ${problems.length} finding(s), report only (M-ADR 0230, Proposed)\n`;
+    const tail = enforced ? `[FAIL] structural-model: ${problems.length} finding(s)\n` : `[WARN] structural-model: ${problems.length} finding(s), report only (M-ADR 0230)\n`;
     return { exitCode: enforced ? 1 : 0, stdout: `structural-model:\n${body}${problems.map((p) => `[${tag}] ${p}\n`).join("")}${tail}` };
 }
 //# sourceMappingURL=structural-model.js.map

package/dist/maintain-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.14.0",
-  "built_against_sdd_cli": "5.0.0"
+  "version": "0.15.1",
+  "built_against_sdd_cli": "5.1.1"
 }

package/dist/verbs/change.js

@@ -0,0 +1,15 @@
+import { archiveChange } from "../lib/structure/archive.js";
+// `change archive <change>`: the method's archive operation (M-ADR 0230 §4.6). Behaviour and structure are
+// prepared in a scratch worktree, validated as a whole, and published as one commit only if the store has not moved.
+// Run it again after an interruption: it verifies an archive that already landed, and recovers a raw `openspec archive`.
+export function registerChange(program) {
+    const change = program.command("change").description("Operate on a change in the behaviour store (M-ADR 0223, M-ADR 0230)");
+    change
+        .command("archive <change>")
+        .description("Archive a judged change: its behaviour and structure published as one guarded commit (M-ADR 0230 §4.6)")
+        .option("--sdd-path <path>", "the SDD whose openspec/ is the store (default: the current directory)", ".")
+        .action(async (name, opts) => {
+        process.exitCode = await archiveChange({ sddPath: opts.sddPath, change: name, write: (s) => process.stdout.write(s) });
+    });
+}
+//# sourceMappingURL=change.js.map