@spec-engine/spec-engine 0.4.0 → 0.6.0

package/dist/impl.js

@@ -20,7 +20,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@spec-engine/spec-engine",
-    version: "0.4.0",
+    version: "0.6.0",
     description: "Cross-repo spec engine \u2014 durable requirements with permanent IDs, bound to code via @spec tags, checked in CI. Ships the spec CLI, the local coverage webapp (spec serve), and offline docs (spec docs).",
     license: "MIT",
     type: "module",
@@ -432,19 +432,20 @@ function buildCoverageReport(rows) {
 }
 
 // ../shared/src/schema.ts
-var SCHEMA_VERSION = 10, FILES_MAX = 1000, DEFAULT_QUERY_LIMIT = 10, LIMIT_MAX = 1000, TABLES_DDL = `
+var SCHEMA_VERSION = 11, FILES_MAX = 1000, DEFAULT_QUERY_LIMIT = 10, LIMIT_MAX = 1000, TABLES_DDL = `
 -- _schema_version: single-row table holding the integer schema_version on disk.
 -- Engine reads this on open; if it doesn't match SCHEMA_VERSION, the DB is wiped
--- and rebuilt from scratch (D-12).
+-- and rebuilt from scratch.
 CREATE TABLE IF NOT EXISTS _schema_version (
   version INTEGER NOT NULL
 );
 
--- Per D-03 / SCHM-07: NO CHECK / FK / UNIQUE on domain fields. PRIMARY KEY only.
+-- No CHECK, FK, or UNIQUE constraint on any domain field. PRIMARY KEY only.
 CREATE TABLE IF NOT EXISTS repos (
   name                  TEXT PRIMARY KEY,
   path                  TEXT NOT NULL,
-  pinned_spec_version   INTEGER NOT NULL
+  pinned_spec_version   INTEGER NOT NULL,
+  dependency_depth      INTEGER NOT NULL
 );
 
 CREATE TABLE IF NOT EXISTS domains (
@@ -483,12 +484,10 @@ CREATE INDEX IF NOT EXISTS idx_tags_by_req  ON tags(req_id);
 CREATE INDEX IF NOT EXISTS idx_tags_by_repo ON tags(repo);
 CREATE INDEX IF NOT EXISTS idx_tags_by_file ON tags(file);
 
--- relations (RED-16): one row per **Relates:** link in a SPEC.md entry.
--- from_id carries the field; to_id is the linked requirement. Per
--- Invariant #4 there is NO FK \u2014 a to_id pointing at a missing requirement
+-- relations: one row per relates link. from_id carries the field; to_id is
+-- the linked requirement. No FK: a to_id pointing at a missing requirement
 -- lands verbatim so spec check can surface BROKEN_RELATES; a to_id whose
--- requirement was superseded surfaces RELATES_SUPERSEDED. source_file +
--- line locate the authored Relates field line.
+-- requirement was superseded surfaces RELATES_SUPERSEDED.
 CREATE TABLE IF NOT EXISTS relations (
   id            INTEGER PRIMARY KEY AUTOINCREMENT,
   from_id       TEXT NOT NULL,
@@ -499,11 +498,8 @@ CREATE TABLE IF NOT EXISTS relations (
 CREATE INDEX IF NOT EXISTS idx_relations_from ON relations(from_id);
 CREATE INDEX IF NOT EXISTS idx_relations_to   ON relations(to_id);
 
--- term_aliases (TERM-01, Phase 6): one row per glossary-term alias. Cloned 1:1
--- from the relations table \u2014 id AUTOINCREMENT (excluded from build_id), no
--- FK/CHECK/UNIQUE (SCHM-07 / Invariant #4, or the arch-fence trips). term_id is
--- the owning TERM's id; name the synonym string. Present-and-empty until Wave C
--- flattens the requirement aliases field into rows.
+-- term_aliases: one row per glossary-term alias. id AUTOINCREMENT is excluded
+-- from build_id. term_id is the owning TERM's id; name the synonym string.
 CREATE TABLE IF NOT EXISTS term_aliases (
   id            INTEGER PRIMARY KEY AUTOINCREMENT,
   term_id       TEXT NOT NULL,
@@ -512,15 +508,12 @@ CREATE TABLE IF NOT EXISTS term_aliases (
 CREATE INDEX IF NOT EXISTS idx_term_aliases_term ON term_aliases(term_id);
 CREATE INDEX IF NOT EXISTS idx_term_aliases_name ON term_aliases(name);
 
--- term_citations (TERM-01, Phase 6): one row per pinned cites reference from a
--- requirement to a glossary TERM. Cloned from the relations table: id
--- AUTOINCREMENT (excluded from build_id), NO FK/CHECK/UNIQUE (SCHM-07 /
--- Invariant #4) \u2014 a term_id pointing at a missing/superseded TERM lands verbatim
--- so spec check can surface UNDEFINED_TERM / TERM_DRIFT (Wave D). req_id carries
--- the citing requirement; term_id the cited TERM (nullable \u2014 an unresolved cite
--- still lands); cited_as the authored surface form; pinned_version the term
--- spec_version the citation was pinned to; source_file + line locate the cite.
--- Present-and-empty until Wave C wires the flatten.
+-- term_citations: one row per pinned cites reference from a requirement to a
+-- glossary TERM. id AUTOINCREMENT is excluded from build_id. No FK: a term_id
+-- pointing at a missing or superseded TERM lands verbatim so spec check can
+-- surface UNDEFINED_TERM / TERM_DRIFT. term_id is nullable (an unresolved cite
+-- still lands); cited_as is the authored surface form; pinned_version the term
+-- spec_version the citation was pinned to.
 CREATE TABLE IF NOT EXISTS term_citations (
   id             INTEGER PRIMARY KEY AUTOINCREMENT,
   req_id         TEXT NOT NULL,
@@ -533,30 +526,25 @@ CREATE TABLE IF NOT EXISTS term_citations (
 CREATE INDEX IF NOT EXISTS idx_term_citations_req  ON term_citations(req_id);
 CREATE INDEX IF NOT EXISTS idx_term_citations_term ON term_citations(term_id);
 
--- provenance (PROV-02 / PROV-04): one row per **Issues:** role:ID link in a
--- SPEC.md entry. req_id carries the field; issue_id is the OPAQUE external
--- tracker payload; role is a closed-allow-list label (created | supersedes-via
--- | amends-via), validated at PARSE time, never as a DB constraint (SCHM-07 /
--- Invariant #4). source_file + line locate the authored **Issues:** field line.
--- Exactly ONE index, on req_id (SC3) \u2014 never on issue_id, which would read as
--- treating the opaque payload as a lookup key (PROV-02, grep-fenced in Plan 04).
+-- provenance: one row per issues role:ID link. issue_id is the opaque
+-- external tracker payload; role is a closed-allow-list label (created |
+-- supersedes-via | amends-via), validated at parse time, never as a DB
+-- constraint. Exactly one index, on req_id; never on issue_id, which would
+-- treat the opaque payload as a lookup key.
 -- @spec PROV-004
 CREATE TABLE IF NOT EXISTS provenance (
   id            INTEGER PRIMARY KEY AUTOINCREMENT,
   req_id        TEXT NOT NULL,
-  issue_id      TEXT NOT NULL,   -- OPAQUE payload string \u2014 never PK/FK/UNIQUE/JOIN key (PROV-02/SC3)
+  issue_id      TEXT NOT NULL,   -- opaque payload string, never a PK/FK/UNIQUE/JOIN key
   role          TEXT NOT NULL,   -- created | supersedes-via | amends-via
   source_file   TEXT NOT NULL,
   line          INTEGER NOT NULL
 );
-CREATE INDEX IF NOT EXISTS idx_provenance_by_req ON provenance(req_id);  -- ONLY index, on req_id (SC3)
-
--- parse_diagnostics: structural diagnostics carried forward from Phase 2's
--- validate-on-parse pass (DUP_ID, BROKEN_SUPERSEDE, BAD_STATUS). Stored so
--- spec check can render them with file+line; not used by Phase 1's smoke.
--- req_id is nullable per WR-02 (03-REVIEW): the parser knows the implicated
--- id for BROKEN_SUPERSEDE and BAD_STATUS, and for the SECOND DUP_ID
--- occurrence. NULL when no specific id is implicated.
+CREATE INDEX IF NOT EXISTS idx_provenance_by_req ON provenance(req_id);  -- the only index
+
+-- parse_diagnostics: structural diagnostics from the validate-on-parse pass
+-- (DUP_ID, BROKEN_SUPERSEDE, BAD_STATUS), stored so spec check can render them
+-- with file+line. req_id is NULL when no specific id is implicated.
 CREATE TABLE IF NOT EXISTS parse_diagnostics (
   id            INTEGER PRIMARY KEY AUTOINCREMENT,
   code          TEXT NOT NULL,
@@ -591,13 +579,9 @@ FROM requirements r
 CROSS JOIN repos
 LEFT JOIN tags t
   ON t.req_id = r.id AND t.repo = repos.name
--- TERM-01 (Phase 6): a glossary TERM is a requirement row but NEVER a
--- code-coverage obligation \u2014 it carries no @spec tag. Excluding key='TERM' here
--- drops terms from spec map / spec report (and provenance_matrix, which joins
--- coverage) in ONE edit, so a migrated term never renders an empty coverage
--- cell. The Q4 ORPHAN_REQ / Q5 UNVERIFIED_REQ queries (sqlite.ts) carry the
--- SAME literal exclusion so a term never fires a coverage ERROR. The match is
--- the exact literal 'TERM' \u2014 never a real domain key.
+-- A glossary TERM is a requirement row but never a code-coverage obligation.
+-- The ORPHAN_REQ / UNVERIFIED_REQ queries in sqlite.ts carry the same literal
+-- exclusion. The match is the exact literal 'TERM', never a real domain key.
 -- @spec SCHM-017
 WHERE r.key != 'TERM'
 GROUP BY r.id, repos.name;
@@ -616,15 +600,9 @@ JOIN requirements r ON r.id = t.req_id
 JOIN repos        ON repos.name = t.repo
 WHERE r.changed_at_version > repos.pinned_spec_version;
 
--- term_drift (TERM-01 / Phase 6): the citation-drift VIEW, a 1:1 shape-clone of
--- the member-pin drift VIEW but keyed on the CITATION's pin instead of a repo's.
--- One row per cites reference whose pinned_version is behind the cited TERM's
--- changed_at_version \u2014 i.e. the term's definition moved on since the citation
--- was pinned. INNER JOIN (not LEFT): an unresolved term_id (no matching
--- requirement) is an UNDEFINED_TERM concern, NOT drift \u2014 scoped distinctly by
--- the Wave-D diagnostics. term.key='TERM' keeps the VIEW scoped to the reserved
--- glossary domain. Present-and-empty until Wave C populates term_citations; the
--- diagnostic (TERM_DRIFT) reads it in Wave E.
+-- term_drift: one row per cites reference whose pinned_version is behind the
+-- cited TERM's changed_at_version. INNER JOIN: an unresolved term_id is an
+-- UNDEFINED_TERM concern, not drift.
 -- @spec CHCK-018
 CREATE VIEW IF NOT EXISTS term_drift AS
 SELECT
@@ -638,38 +616,21 @@ FROM term_citations tc
 JOIN requirements term ON term.id = tc.term_id
 WHERE term.key = 'TERM' AND term.changed_at_version > tc.pinned_version;
 
--- provenance_matrix (PMAT-04 / data half of PMAT-01): a WIDENED projection
--- over provenance \xD7 requirements \xD7 coverage, never materialized (mirrors the
--- coverage VIEW pattern). The widening joins are ON req_id ONLY \u2014 NEVER on
--- issue_id, which is OPAQUE (PROV-02/SC3). JOIN requirements r ON p.req_id =
--- r.id carries req_status (the requirement's lifecycle status); LEFT JOIN
--- coverage c ON c.req_id = p.req_id carries the backing-test columns. Because
--- coverage is a per-(req,repo) matrix, the join fans out per repo \u2014 so we
--- aggregate to ONE row per provenance link.
---
--- WR-01 (13-REVIEW review-fix): test_levels is re-aggregated at the
--- INDIVIDUAL-level granularity via a correlated subquery over tags, NOT by
--- GROUP_CONCAT(DISTINCT c.test_levels). The coverage VIEW already concatenates
--- levels per (req,repo) into a single string (api -> "unit,integration",
--- mobile -> "unit"); GROUP_CONCAT(DISTINCT ...) over those whole strings
--- deduplicates STRINGS, not levels, so a level present in two repos emitted
--- twice ("unit,integration,unit"). The subquery selects DISTINCT t2.level for
--- this req across ALL repos (ORDER BY level for determinism), so each level
--- appears exactly once. The correlation is ON req_id ONLY (t2.req_id =
--- p.req_id) \u2014 the issue_id-opacity fence stays green (no issue_id key usage).
--- CRITICAL FENCE CONSTRAINT
--- (PROV-02/SC3): the CI issue_id-opacity fence forbids grouping by issue_id,
--- so we GROUP BY the provenance PK p.id (which uniquely determines the link)
--- and let issue_id ride as a bare projected column under SQLite's
--- bare-column rule. issue_id is therefore PURELY projected \u2014 never a
--- JOIN/GROUP-BY/PK/FK/UNIQUE/INDEX key.
+-- provenance_matrix: provenance \xD7 requirements \xD7 coverage, never
+-- materialized. Every join is on req_id, never on issue_id. coverage is a
+-- per-(req, repo) matrix, so the join fans out per repo and is aggregated to
+-- one row per provenance link, grouped by the provenance PK p.id; issue_id
+-- rides as a bare projected column and is never a JOIN, GROUP BY, PK, FK,
+-- UNIQUE, or INDEX key. test_levels is aggregated by a correlated subquery
+-- over tags (DISTINCT level, ORDER BY level) so a level present in two repos
+-- appears once.
 CREATE VIEW IF NOT EXISTS provenance_matrix AS
 SELECT
   p.req_id                          AS req_id,
   p.role                            AS role,
-  p.issue_id                        AS issue_id,   -- OPAQUE payload, projected only (PROV-02/SC3)
+  p.issue_id                        AS issue_id,   -- opaque payload, projected only
   p.source_file                     AS source_file,
-  p.line                            AS line,        -- git pointer per PMAT-01
+  p.line                            AS line,
   r.status                          AS req_status,
   MAX(c.implemented)                AS implemented,
   MAX(c.verified)                   AS verified,
@@ -1204,19 +1165,86 @@ function packageColumnName(root, dir) {
 function byName(a, b) {
   return a.name < b.name ? -1 : a.name > b.name ? 1 : 0;
 }
-function column(name, path, pin, ignore) {
+function column(name, path, pin, node, ignore) {
   return {
-    name,
-    path,
-    pinned_spec_version: pin,
-    ...ignore && ignore.length > 0 ? { ignore } : {}
+    repo: {
+      name,
+      path,
+      pinned_spec_version: pin,
+      ...ignore && ignore.length > 0 ? { ignore } : {}
+    },
+    node
   };
 }
+function packageKey(ecosystem, packageName) {
+  return `${ecosystem ?? ""}\x00${packageName}`;
+}
+function providersOf(columns) {
+  const providers = new Map;
+  for (const c of columns) {
+    if (c.node.packageName === undefined)
+      continue;
+    const key = packageKey(c.node.ecosystem, c.node.packageName);
+    if (!providers.has(key))
+      providers.set(key, c.repo.name);
+  }
+  return providers;
+}
+function dependenciesOf(c, providers) {
+  const deps = new Set;
+  for (const name of c.node.dependsOn) {
+    const provider = providers.get(packageKey(c.node.ecosystem, name));
+    if (provider !== undefined && provider !== c.repo.name)
+      deps.add(provider);
+  }
+  return deps;
+}
+function dependencyGraph(columns) {
+  const providers = providersOf(columns);
+  const dependents = new Map;
+  const waitingOn = new Map;
+  for (const c of columns) {
+    const deps = dependenciesOf(c, providers);
+    waitingOn.set(c.repo.name, deps.size);
+    for (const provider of deps) {
+      dependents.set(provider, [...dependents.get(provider) ?? [], c.repo.name]);
+    }
+  }
+  return { names: columns.map((c) => c.repo.name).sort(), dependents, waitingOn };
+}
+function dependencyDepths(columns) {
+  const { names, dependents, waitingOn } = dependencyGraph(columns);
+  const depth = new Map;
+  const ready = names.filter((n) => waitingOn.get(n) === 0);
+  for (const n of ready)
+    depth.set(n, 0);
+  for (let i = 0;i < ready.length; i++) {
+    const provider = ready[i];
+    const providerDepth = depth.get(provider) ?? 0;
+    for (const consumer of dependents.get(provider) ?? []) {
+      depth.set(consumer, Math.max(depth.get(consumer) ?? 0, providerDepth + 1));
+      const left = (waitingOn.get(consumer) ?? 0) - 1;
+      waitingOn.set(consumer, left);
+      if (left === 0)
+        ready.push(consumer);
+    }
+  }
+  const cyclic = Math.max(-1, ...depth.values()) + 1;
+  for (const n of names)
+    if (!depth.has(n))
+      depth.set(n, cyclic);
+  return depth;
+}
+function toRepos(columns) {
+  const depth = dependencyDepths(columns);
+  return columns.map((c) => ({ ...c.repo, dependency_depth: depth.get(c.repo.name) ?? 0 })).sort(byName);
+}
 function selfMember(absPlatform, platformVersion) {
   return {
     name: basename(absPlatform),
     path: absPlatform,
     pinned_spec_version: platformVersion,
+    dependency_depth: 0,
     selfMember: true
   };
 }
@@ -1238,14 +1266,45 @@ async function packageColumns(repoPath, prefix, repo, parentPin) {
     const path = join3(repoPath, pkg.path);
     const configPath = join3(path, MEMBER_CONFIG_FILENAME);
     if (!existsSync(configPath)) {
-      out.push(column(name, path, parentPin));
+      out.push(column(name, path, parentPin, pkg));
       continue;
     }
     const cfg = await readRepoConfig(configPath);
-    out.push(column(name, path, extractPin(cfg.specs), cfg.ignore));
+    out.push(column(name, path, extractPin(cfg.specs), pkg, cfg.ignore));
   }
   return out;
 }
+function packageDirs(repo) {
+  const dirs = repo.packages.map((p) => p.path);
+  return dirs.some((d) => d === "" || d === ".") ? null : dirs;
+}
+function loneRootColumn(absPlatform, repo, platformVersion) {
+  const dirs = packageDirs(repo);
+  const { dependency_depth: _depth, ...self } = selfMember(absPlatform, platformVersion);
+  if (dirs === null || self.name === CANONICAL_SPECS_DIR)
+    return [];
+  return [{ repo: { ...self, ignore: dirs }, node: repo }];
+}
+async function loneMembers(repo, absPlatform, platformVersion) {
+  if (repo === undefined || repo.mode !== "monorepo" || repo.packages.length === 0) {
+    return [selfMember(absPlatform, platformVersion)];
+  }
+  return toRepos([
+    ...await packageColumns(absPlatform, "", repo, platformVersion),
+    ...loneRootColumn(absPlatform, repo, platformVersion)
+  ]);
+}
+async function memberColumns(repo, path, cfg) {
+  const pin = extractPin(cfg.specs);
+  if (repo.mode !== "monorepo" || repo.packages.length === 0) {
+    return [column(repo.name, path, pin, repo, cfg.ignore)];
+  }
+  const packages = await packageColumns(path, `${repo.name}/`, repo, pin);
+  const dirs = packageDirs(repo);
+  if (dirs === null)
+    return packages;
+  return [...packages, column(repo.name, path, pin, repo, [...cfg.ignore ?? [], ...dirs])];
+}
 function describe(d, mapped) {
   const s = d.subject;
   switch (d.code) {
@@ -1278,15 +1337,14 @@ async function membersOf(reading, absPlatform, platformVersion) {
   const { mapped, located } = reading;
   const diagnostics2 = surfaced(mapped);
   if (mapped.mode !== "multi-repo") {
-    const repo = mapped.repos[0];
-    const members2 = repo !== undefined && repo.mode === "monorepo" && repo.packages.length > 0 ? await packageColumns(absPlatform, "", repo, platformVersion) : [selfMember(absPlatform, platformVersion)];
-    return { mode: mapped.mode, members: members2, unpinned: [], undeclared: [], diagnostics: diagnostics2 };
+    const members = await loneMembers(mapped.repos[0], absPlatform, platformVersion);
+    return { mode: mapped.mode, members, unpinned: [], undeclared: [], diagnostics: diagnostics2 };
   }
   if (!mapped.declared) {
     const undeclared2 = mapped.repos.map((r) => ({ name: r.name, path: join3(absPlatform, r.name) }));
     return { mode: "multi-repo", members: [], unpinned: [], undeclared: undeclared2, diagnostics: diagnostics2 };
   }
-  const members = [];
+  const columns = [];
   const unpinned = [];
   for (const repo of mapped.repos) {
     const path = located.repos[repo.name];
@@ -1297,17 +1355,10 @@ async function membersOf(reading, absPlatform, platformVersion) {
       unpinned.push({ name: repo.name, path });
       continue;
     }
-    const cfg = await readRepoConfig(configPath);
-    const pin = extractPin(cfg.specs);
-    if (repo.mode === "monorepo" && repo.packages.length > 0) {
-      members.push(...await packageColumns(path, `${repo.name}/`, repo, pin));
-    } else {
-      members.push(column(repo.name, path, pin, cfg.ignore));
-    }
+    columns.push(...await memberColumns(repo, path, await readRepoConfig(configPath)));
   }
-  members.sort(byName);
   const undeclared = mapped.diagnostics.filter((d) => d.code === "UNLISTED_REPO").map((d) => ({ name: d.subject, path: join3(absPlatform, d.subject) }));
-  return { mode: "multi-repo", members, unpinned, undeclared, diagnostics: diagnostics2 };
+  return { mode: "multi-repo", members: toRepos(columns), unpinned, undeclared, diagnostics: diagnostics2 };
 }
 async function discoverRepos(platformDir) {
   const absPlatform = resolve2(platformDir);
@@ -1320,7 +1371,8 @@ async function discoverRepos(platformDir) {
   const canonical = {
     name: CANONICAL_SPECS_DIR,
     path: canonicalPath,
-    pinned_spec_version: platformVersion
+    pinned_spec_version: platformVersion,
+    dependency_depth: 0
   };
   const reading = readPlatformMap(absPlatform);
   const shape = reading === null ? loneSingleRepo(absPlatform, platformVersion) : await membersOf(reading, absPlatform, platformVersion);
@@ -1706,11 +1758,11 @@ SELECT
   ) AS via_other
 FROM repos
 WHERE repos.name != 'spec-engine'
-ORDER BY repos.name
+ORDER BY repos.dependency_depth, repos.name
 `;
 
 // src/storage/sql/reads.ts
-var LIST_RELATIONS_SQL, LIST_TERM_ALIASES_SQL = "SELECT term_id, name FROM term_aliases ORDER BY term_id, name", LIST_TERM_CITATIONS_SQL, LIST_PROVENANCE_SQL, LIST_PROVENANCE_MATRIX_SQL, PROVENANCE_BY_ISSUE_SQL, LIST_REPOS_SQL = "SELECT name, path, pinned_spec_version FROM repos ORDER BY name", GET_REPO_SQL = "SELECT name, path, pinned_spec_version FROM repos WHERE name = $name", LIST_DOMAINS_SQL = "SELECT key, owner, schema, spec_version, source_repo FROM domains ORDER BY key", GET_DOMAIN_SQL = "SELECT key, owner, schema, spec_version, source_repo FROM domains WHERE key = $key", LIST_TAGS_SQL = `SELECT id, req_id, repo, file, line, kind, level FROM tags
+var LIST_RELATIONS_SQL, LIST_TERM_ALIASES_SQL = "SELECT term_id, name FROM term_aliases ORDER BY term_id, name", LIST_TERM_CITATIONS_SQL, LIST_PROVENANCE_SQL, LIST_PROVENANCE_MATRIX_SQL, PROVENANCE_BY_ISSUE_SQL, LIST_REPOS_SQL = "SELECT name, path, pinned_spec_version, dependency_depth FROM repos ORDER BY name", GET_REPO_SQL = "SELECT name, path, pinned_spec_version, dependency_depth FROM repos WHERE name = $name", LIST_DOMAINS_SQL = "SELECT key, owner, schema, spec_version, source_repo FROM domains ORDER BY key", GET_DOMAIN_SQL = "SELECT key, owner, schema, spec_version, source_repo FROM domains WHERE key = $key", LIST_TAGS_SQL = `SELECT id, req_id, repo, file, line, kind, level FROM tags
   WHERE ($repo IS NULL OR repo = $repo)
     AND ($req_id IS NULL OR req_id = $req_id)
     AND ($file IS NULL OR file = $file)
@@ -1983,7 +2035,7 @@ class SqliteStorage {
   }
   #makeWriteHandle() {
     const db = this.#db;
-    const insRepo = db.prepare("INSERT OR REPLACE INTO repos (name, path, pinned_spec_version) VALUES ($name, $path, $pin)");
+    const insRepo = db.prepare("INSERT OR REPLACE INTO repos (name, path, pinned_spec_version, dependency_depth) VALUES ($name, $path, $pin, $depth)");
     const insDomain = db.prepare("INSERT OR REPLACE INTO domains (key, owner, schema, spec_version, source_repo) " + "VALUES ($key, $owner, $schema, $ver, $source)");
     const insReq = db.prepare("INSERT OR REPLACE INTO requirements " + "(id, key, seq, status, superseded_by, text, why, source_file, line, spec_version, changed_at_version, superseded_at_version) " + "VALUES ($id, $key, $seq, $status, $sup, $text, $why, $file, $line, $sver, $cver, $saver)");
     const insTag = db.prepare("INSERT INTO tags (req_id, repo, file, line, kind, level) " + "VALUES ($req, $repo, $file, $line, $kind, $level)");
@@ -2013,7 +2065,8 @@ class SqliteStorage {
         insRepo.run({
           name: r.name,
           path: r.path,
-          pin: r.pinned_spec_version
+          pin: r.pinned_spec_version,
+          depth: r.dependency_depth
         });
       },
       upsertDomain(d) {
@@ -2136,11 +2189,7 @@ function poisonSchemaVersion(path, badVersion) {
 function poisonRepoRow(path, name) {
   const db = new Database(path);
   try {
-    db.run("INSERT INTO repos (name, path, pinned_spec_version) VALUES (?, ?, ?)", [
-      name,
-      "/dev/null",
-      999
-    ]);
+    db.run("INSERT INTO repos (name, path, pinned_spec_version, dependency_depth) VALUES (?, ?, ?, ?)", [name, "/dev/null", 999, 0]);
   } finally {
     db.close();
   }
@@ -2165,7 +2214,7 @@ function computeBuildId(storage2) {
       },
       {
         label: "repos",
-        sql: "SELECT name, path, pinned_spec_version FROM repos ORDER BY name"
+        sql: "SELECT name, path, pinned_spec_version, dependency_depth FROM repos ORDER BY name"
       },
       {
         label: "domains",
@@ -2511,7 +2560,8 @@ function buildRows(input) {
     {
       name: canonical.name,
       path: canonical.path,
-      pinned_spec_version: platformVersion
+      pinned_spec_version: platformVersion,
+      dependency_depth: 0
     },
     ...members
   ], (r) => r.name);
@@ -3288,7 +3338,24 @@ import { resolve as resolve6 } from "path";
 function resolvePlatformDir(args) {
   return resolve6(args.platformDir ?? process.cwd());
 }
-var platformDirArg, outArg, jsonArg, freshArg, noPromptArg;
+function listFlag(rawArgs, name, parsed) {
+  const flag = `--${name}`;
+  const raw = [];
+  for (let i = 0;i < rawArgs.length; i++) {
+    const arg = rawArgs[i];
+    if (arg === flag && i + 1 < rawArgs.length)
+      raw.push(rawArgs[++i]);
+    else if (arg.startsWith(`${flag}=`))
+      raw.push(arg.slice(flag.length + 1));
+  }
+  if (raw.length === 0) {
+    if (parsed === undefined)
+      return;
+    raw.push(parsed);
+  }
+  return raw.flatMap((v) => v.split(",")).map((v) => v.trim()).filter((v) => v !== "");
+}
+var platformDirArg, outArg, jsonArg, freshArg, noPromptArg, livesArg;
 var init__args = __esm(() => {
   init_constants();
   platformDirArg = {
@@ -3309,6 +3376,10 @@ var init__args = __esm(() => {
     type: "boolean",
     description: "Suppress the interactive onboarding prompt for siblings missing spec-engine.member.json (they surface as NO_SPEC_CONFIG warnings)"
   };
+  livesArg = {
+    type: "string",
+    description: "Lives in (livesIn) paths: repeat the flag or comma-separate; an empty value clears the list"
+  };
 });
 
 // src/commands/index.ts
@@ -5654,19 +5725,15 @@ var init_list = __esm(() => {
 });
 
 // src/propagation/format.ts
-function sortPropagation(rows) {
-  return [...rows].sort((a, b) => a.repo.localeCompare(b.repo));
-}
 function renderPropagation(rows, mode) {
-  const sorted = sortPropagation(rows);
   if (mode === "json") {
-    return JSON.stringify(sorted);
+    return JSON.stringify(rows);
   }
-  if (sorted.length === 0)
+  if (rows.length === 0)
     return "";
   const header = ["REPO", "STATE", "VIA", "DRIFT?"];
   const lines = [header];
-  for (const row of sorted) {
+  for (const row of rows) {
     lines.push([row.repo, row.state, row.via_req_id ?? EMPTY_CELL2, row.drifted ? "yes" : "no"]);
   }
   const widths = header.map((_, col) => Math.max(...lines.map((row) => row[col]?.length ?? 0)));
@@ -6426,24 +6493,27 @@ __export(exports_req, {
 });
 import { createInterface as createInterface2 } from "readline";
 import { defineCommand as defineCommand12 } from "citty";
-async function mintFromFlags(platformDir, key, textFlag, args) {
+async function mintFromFlags(platformDir, key, textFlag, args, rawArgs) {
   const statement = textFlag.trim();
   if (statement === "") {
     console.error("spec req: --text must be a non-empty Requirement");
     process.exit(EXIT.USAGE);
   }
   await printResolvedCharter(platformDir, key);
-  const lives = (args.lives ?? "").trim();
   await mintAndReport(platformDir, key, {
     statement,
     why: (args.why ?? "").trim(),
-    livesIn: lives ? [lives] : [],
+    livesIn: listFlag(rawArgs, "lives", args.lives) ?? [],
     issue: (args.issue ?? "").trim() || undefined,
+    status: statusOf(args),
     json: Boolean(args.json)
   });
 }
-async function mintInteractively(platformDir, key, id) {
-  console.error(`Authoring ${id} \u2014 Active`);
+function statusOf(args) {
+  return args.draft ? "draft" : "active";
+}
+async function mintInteractively(platformDir, key, id, status) {
+  console.error(`Authoring ${id} \u2014 ${status === "draft" ? "Draft" : "Active"}`);
   await printResolvedCharter(platformDir, key);
   const requirement = (await askLine("Requirement: ")).trim();
   if (requirement === "") {
@@ -6452,12 +6522,13 @@ async function mintInteractively(platformDir, key, id) {
     return;
   }
   const why = (await askLine("Why it matters: ")).trim();
-  const lives = (await askLine("Lives in: ")).trim();
+  const livesIn = listFlag([], "lives", await askLine("Lives in: ")) ?? [];
   await mintAndReport(platformDir, key, {
     statement: requirement,
     why,
-    livesIn: lives ? [lives] : [],
+    livesIn,
     issue: undefined,
+    status,
     json: false
   });
 }
@@ -6510,10 +6581,14 @@ var init_req = __esm(() => {
       description: "Non-interactive authoring: the Requirement field. When set, the entry appends with zero prompts."
     },
     why: { type: "string", description: "Why it matters field (only with --text)" },
-    lives: { type: "string", description: "Lives in field (only with --text)" },
+    lives: livesArg,
     issue: {
       type: "string",
       description: "Originating ticket id, recorded as created-provenance on the entry (only with --text; opaque \u2014 never a requirement id)"
+    },
+    draft: {
+      type: "boolean",
+      description: "Author the entry as Draft instead of Active (promote it later with spec accept)"
     }
   };
   reqCommand = defineCommand12({
@@ -6522,7 +6597,7 @@ var init_req = __esm(() => {
       description: "Author a new requirement interactively (TTY) or print the next unused id (non-TTY)"
     },
     args: reqArgs,
-    async run({ args }) {
+    async run({ args, rawArgs }) {
       const input = args.domainPrefix;
       const platformDir = resolvePlatformDir(args);
       try {
@@ -6536,7 +6611,7 @@ var init_req = __esm(() => {
       const { key, nextId: id } = allocated;
       const textFlag = args.text;
       if (textFlag !== undefined) {
-        await mintFromFlags(platformDir, key, textFlag, args);
+        await mintFromFlags(platformDir, key, textFlag, args, rawArgs);
         return;
       }
       const hasFieldFlags = typeof args.why === "string" || typeof args.lives === "string" || typeof args.issue === "string";
@@ -6545,6 +6620,11 @@ var init_req = __esm(() => {
         process.exit(EXIT.USAGE);
         return;
       }
+      if (args.draft && (args.json || !process.stdin.isTTY)) {
+        console.error("spec req: --draft authors an entry \u2014 pass --text, or run on a TTY");
+        process.exit(EXIT.USAGE);
+        return;
+      }
       if (args.json) {
         console.log(JSON.stringify({ domain: key, next_id: id }));
         return;
@@ -6553,7 +6633,7 @@ var init_req = __esm(() => {
         console.log(id);
         return;
       }
-      await mintInteractively(platformDir, key, id);
+      await mintInteractively(platformDir, key, id, statusOf(args));
     }
   });
 });
@@ -7100,14 +7180,13 @@ async function resolveSuccessorText(args, platformDir, id) {
 function splitAliases(raw) {
   return raw.split(",").map((s) => s.trim()).filter((s) => s !== "");
 }
-function inputFromArgs(args, platformDir, id, statement) {
+function inputFromArgs(args, rawArgs, platformDir, id, statement) {
   const input = { platformDir, id, statement, noBump: Boolean(args.noBump) };
   if (typeof args.why === "string")
     input.why = args.why;
-  if (typeof args.lives === "string") {
-    const lives = args.lives.trim();
-    input.livesIn = lives === "" ? [] : [lives];
-  }
+  const livesIn = listFlag(rawArgs, "lives", args.lives);
+  if (livesIn !== undefined)
+    input.livesIn = livesIn;
   if (typeof args.term === "string")
     input.term = args.term;
   if (typeof args.aliases === "string")
@@ -7144,7 +7223,7 @@ var init_supersede2 = __esm(() => {
     },
     lives: {
       type: "string",
-      description: "Successor's Lives in (default: copied from the old entry)"
+      description: "Successor's Lives in: repeat or comma-separate; empty clears (default: copied from the old entry)"
     },
     term: {
       type: "string",
@@ -7173,7 +7252,7 @@ var init_supersede2 = __esm(() => {
       description: "Supersede a shipped requirement: flip it to superseded, mint the successor, bump specVersion, and emit the retag worklist."
     },
     args: supersedeArgs,
-    async run({ args }) {
+    async run({ args, rawArgs }) {
       const id = args.id;
       if (!ID_RE.test(id)) {
         console.error(`spec supersede: id must be a requirement id (KEY-NNN); got ${id}`);
@@ -7186,7 +7265,7 @@ var init_supersede2 = __esm(() => {
         handleNotAPlatform(e);
       }
       const statement = await resolveSuccessorText(args, platformDir, id);
-      const result = await supersede(inputFromArgs(args, platformDir, id, statement), coldFreshTags(platformDir));
+      const result = await supersede(inputFromArgs(args, rawArgs, platformDir, id, statement), coldFreshTags(platformDir));
       if (!result.ok)
         exitOnFailure("spec supersede", result);
       printWarnings("spec supersede", result.warnings);
@@ -7432,16 +7511,15 @@ __export(exports_move, {
   moveCommand: () => moveCommand
 });
 import { defineCommand as defineCommand17 } from "citty";
-function inputFromArgs2(args, platformDir, id, targetKey) {
+function inputFromArgs2(args, rawArgs, platformDir, id, targetKey) {
   const input = { platformDir, id, targetKey, noBump: Boolean(args.noBump) };
   if (typeof args.text === "string")
     input.statement = args.text;
   if (typeof args.why === "string")
     input.why = args.why;
-  if (typeof args.lives === "string") {
-    const lives = args.lives.trim();
-    input.livesIn = lives === "" ? [] : [lives];
-  }
+  const livesIn = listFlag(rawArgs, "lives", args.lives);
+  if (livesIn !== undefined)
+    input.livesIn = livesIn;
   return input;
 }
 var moveArgs, moveCommand;
@@ -7476,7 +7554,7 @@ var init_move2 = __esm(() => {
     },
     lives: {
       type: "string",
-      description: "Rewrite the successor's Lives in (default: copied from the source)"
+      description: "Rewrite the successor's Lives in: repeat or comma-separate; empty clears (default: copied from the source)"
     },
     noBump: {
       type: "boolean",
@@ -7493,7 +7571,7 @@ var init_move2 = __esm(() => {
       description: "Move a requirement to another domain: mint the successor in <NEW-DOMAIN> carrying the source's fields, mark the source superseded, bump both specVersions, and emit the retag worklist."
     },
     args: moveArgs,
-    async run({ args }) {
+    async run({ args, rawArgs }) {
       const id = args.id;
       const rawTargetKey = args.newDomain;
       const platformDir = resolvePlatformDir(args);
@@ -7511,7 +7589,7 @@ var init_move2 = __esm(() => {
       } catch (e) {
         handleNotAPlatform(e);
       }
-      const result = await move(inputFromArgs2(args, platformDir, id, targetKey), coldFreshTags(platformDir));
+      const result = await move(inputFromArgs2(args, rawArgs, platformDir, id, targetKey), coldFreshTags(platformDir));
       if (!result.ok)
         exitOnFailure("spec move", result);
       printWarnings("spec move", result.warnings);
@@ -7657,7 +7735,7 @@ function assertAmendFlags(args) {
 function splitAliases2(raw) {
   return raw === "" ? [] : raw.split(",").map((s) => s.trim()).filter((s) => s !== "");
 }
-function fieldsFromArgs(args) {
+function fieldsFromArgs(args, rawArgs) {
   assertAmendFlags(args);
   const fields = {};
   if (args.text !== undefined)
@@ -7666,10 +7744,9 @@ function fieldsFromArgs(args) {
     const v = args.why.trim();
     fields.why = v === "" ? null : v;
   }
-  if (args.lives !== undefined) {
-    const v = args.lives.trim();
-    fields.livesIn = v === "" ? [] : [v];
-  }
+  const livesIn = listFlag(rawArgs, "lives", args.lives);
+  if (livesIn !== undefined)
+    fields.livesIn = livesIn;
   if (args.term !== undefined)
     fields.term = args.term.trim();
   if (args.issue !== undefined && args.issue.trim() !== "")
@@ -7696,7 +7773,7 @@ var init_amend2 = __esm(() => {
     platformDir: platformDirArg,
     text: { type: "string", description: "New Requirement (statement) field value" },
     why: { type: "string", description: "New Why it matters field value" },
-    lives: { type: "string", description: "New Lives in (livesIn) field value" },
+    lives: livesArg,
     issue: {
       type: "string",
       description: "Ticket that motivated this amendment \u2014 recorded as amends-via provenance (opaque, never a requirement id)"
@@ -7714,7 +7791,7 @@ var init_amend2 = __esm(() => {
       description: "Revise an unshipped requirement's fields in place (same id, no specVersion bump). Supersede shipped truth instead."
     },
     args: amendArgs,
-    async run({ args }) {
+    async run({ args, rawArgs }) {
       const id = args.id;
       if (!ID_RE.test(id)) {
         console.error(`spec amend: id must be a requirement id (KEY-NNN); got ${id}`);
@@ -7727,7 +7804,7 @@ var init_amend2 = __esm(() => {
       } catch (e) {
         handleNotAPlatform(e);
       }
-      const fields = fieldsFromArgs(args);
+      const fields = fieldsFromArgs(args, rawArgs);
       const result = await amend({ platformDir, id, fields }, coldFreshTags(platformDir));
       if (!result.ok)
         exitOnFailure("spec amend", result);
@@ -7741,6 +7818,86 @@ var init_amend2 = __esm(() => {
   });
 });
 
+// src/operations/accept.ts
+async function accept(input) {
+  const { platformDir, id } = input;
+  const located = await locateEntry(platformDir, id);
+  if (!located.ok)
+    return located;
+  const { specPath, relFile, domain: domain2, req } = located;
+  if (req.status.toLowerCase() !== "draft") {
+    return fail("conflict", `${id} is ${displayStatus(req.status)} \u2014 only a Draft entry accepts`);
+  }
+  req.status = "active";
+  domain2.updated = localToday();
+  const res = await validateAndWrite(specPath, domain2, relFile);
+  if (!res.ok) {
+    return fail("invalid_domain_file", res.diagnostics.map((d) => d.detail).join(`
+`), {
+      diagnostics: res.diagnostics
+    });
+  }
+  return { ok: true, id, file: relFile };
+}
+var init_accept = __esm(() => {
+  init_src();
+  init__envelope();
+  init__result();
+});
+
+// src/commands/accept.ts
+var exports_accept = {};
+__export(exports_accept, {
+  acceptCommand: () => acceptCommand
+});
+import { defineCommand as defineCommand19 } from "citty";
+var acceptCommand;
+var init_accept2 = __esm(() => {
+  init_constants();
+  init_discover();
+  init_accept();
+  init_grammar3();
+  init__args();
+  init__shared();
+  acceptCommand = defineCommand19({
+    meta: {
+      name: "accept",
+      description: "Promote a Draft requirement to Active (same id, fields untouched)"
+    },
+    args: {
+      id: {
+        type: "positional",
+        required: true,
+        description: "Draft requirement id to accept (KEY-NNN)"
+      },
+      platformDir: platformDirArg,
+      json: jsonArg
+    },
+    async run({ args }) {
+      const id = args.id;
+      if (!ID_RE.test(id)) {
+        console.error(`spec accept: id must be a requirement id (KEY-NNN); got ${id}`);
+        process.exit(EXIT.USAGE);
+        return;
+      }
+      const platformDir = resolvePlatformDir(args);
+      try {
+        assertSpecPlatform(platformDir);
+      } catch (e) {
+        handleNotAPlatform(e);
+      }
+      const result = await accept({ platformDir, id });
+      if (!result.ok)
+        exitOnFailure("spec accept", result);
+      if (args.json) {
+        console.log(JSON.stringify({ id, file: result.file }));
+        return;
+      }
+      console.log(`accepted ${id} in ${result.file} \u2014 now Active`);
+    }
+  });
+});
+
 // src/server/authorPrompt.ts
 function renderAuthorPrompt(opts) {
   const charterBlock = opts.charter ? `
@@ -7916,6 +8073,19 @@ function buildMcpServer(platformDir) {
     const r = await deprecate({ platformDir, id: req_id, reason: trimmed }, coldFreshTags(platformDir));
     return r.ok ? jsonResult({ id: r.id, file: r.file, reason: r.reason, sites: r.sites }) : errorResult(r.detail);
   });
+  server.registerTool("spec_accept", {
+    title: "Accept a draft requirement",
+    description: "Promote a Draft requirement to Active, leaving every other field untouched. The same JSON as `spec accept --json`.",
+    inputSchema: {
+      req_id: z3.string().describe("The Draft requirement id to accept (KEY-NNN)")
+    }
+  }, async ({ req_id }) => {
+    if (!ID_RE.test(req_id)) {
+      return errorResult(`req_id must be a requirement id (KEY-NNN); got ${req_id}`);
+    }
+    const r = await accept({ platformDir, id: req_id });
+    return r.ok ? jsonResult({ id: r.id, file: r.file }) : errorResult(r.detail);
+  });
   server.registerPrompt("author_requirements", {
     title: "Author requirements from a brief",
     description: "Turn a vague brief/ticket into well-formed Spec Engine requirements: one requirement per testable promise, placed by domain charter, deduped via spec query, drafted to the GUARD template + cold-read rubric, minted with spec req. The engine returns a static playbook template \u2014 your model runs it.",
@@ -7950,6 +8120,7 @@ var init_mcp = __esm(() => {
   init_src();
   init_domains();
   init__index();
+  init_accept();
   init_check();
   init_deprecate();
   init_nextId();
@@ -7965,14 +8136,14 @@ __export(exports_mcp, {
   mcpCommand: () => mcpCommand
 });
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import { defineCommand as defineCommand19 } from "citty";
+import { defineCommand as defineCommand20 } from "citty";
 var mcpCommand;
 var init_mcp2 = __esm(() => {
   init_discover();
   init_mcp();
   init__args();
   init__shared();
-  mcpCommand = defineCommand19({
+  mcpCommand = defineCommand20({
     meta: {
       name: "mcp",
       description: "Serve Spec Engine as an MCP (Model Context Protocol) server over stdio \u2014 agent-native query/resolve/check/report tools."
@@ -8001,7 +8172,7 @@ __export(exports_resolve, {
 });
 import { statSync as statSync5 } from "fs";
 import { join as join12, relative as relative2, resolve as resolve13, sep as sep3 } from "path";
-import { defineCommand as defineCommand20 } from "citty";
+import { defineCommand as defineCommand21 } from "citty";
 function classifyArg(a) {
   if (a.startsWith("--")) {
     const eq = a.indexOf("=");
@@ -8187,7 +8358,7 @@ var init_resolve2 = __esm(() => {
       description: "Suppress interactive onboarding prompt for siblings missing spec-engine.member.json (defaults to NO_SPEC_CONFIG warning)"
     }
   };
-  resolveCommand = defineCommand20({
+  resolveCommand = defineCommand21({
     meta: {
       name: "resolve",
       description: "Return the requirements tagged in the given files (RSLV-01). Accepts multiple positional file paths (e.g. `spec resolve api/src/renew.ts api/src/charge.ts`) and a comma-split fallback inside a single positional (`spec resolve a.ts,b.ts`). Paths may be platform-relative or absolute under the platform tree."
@@ -8352,7 +8523,7 @@ __export(exports_gate, {
 });
 import { existsSync as existsSync12 } from "fs";
 import { join as join13 } from "path";
-import { defineCommand as defineCommand21 } from "citty";
+import { defineCommand as defineCommand22 } from "citty";
 function isEpipe(e) {
   if (e === null || typeof e !== "object" || !("code" in e))
     return false;
@@ -8415,7 +8586,7 @@ var init_gate2 = __esm(() => {
       description: "Suppress interactive onboarding prompt for siblings missing spec-engine.member.json (defaults to NO_SPEC_CONFIG warning)"
     }
   };
-  gateCommand = defineCommand21({
+  gateCommand = defineCommand22({
     meta: {
       name: "gate",
       description: "Rung-3 approval primitive: passes iff <reqId> is Active and <repo>'s pinned spec_version covers its changed_at_version. Exits 0 PASS / 1 any gate failure / 2 crash or bad args."
@@ -8737,14 +8908,14 @@ var exports_guard = {};
 __export(exports_guard, {
   guardCommand: () => guardCommand
 });
-import { defineCommand as defineCommand22 } from "citty";
+import { defineCommand as defineCommand23 } from "citty";
 var guardCommand;
 var init_guard2 = __esm(() => {
   init_constants();
   init_guard();
   init__args();
   init__shared();
-  guardCommand = defineCommand22({
+  guardCommand = defineCommand23({
     meta: {
       name: "guard",
       description: "Loss detection: diff the requirement derivation at a git ref (default HEAD) against the working tree and block requirements about to be steamrolled."
@@ -11708,6 +11879,15 @@ function toLivesIn(v) {
     return [v];
   return [];
 }
+function mintFieldsFromBody(body) {
+  return {
+    statement: typeof body.statement === "string" ? body.statement : "",
+    why: typeof body.why === "string" ? body.why : "",
+    livesIn: toLivesIn(body.livesIn),
+    issue: typeof body.issue === "string" && body.issue.trim() !== "" ? body.issue.trim() : undefined,
+    status: body.status === "draft" ? "draft" : "active"
+  };
+}
 function amendFieldsFromBody(body) {
   const fields = {};
   if (typeof body.statement === "string")
@@ -11792,14 +11972,7 @@ function mountApi(app, storage2, platformDir = process.cwd()) {
       return c.json({ error: "unknown domain key" }, 400);
     }
     return withWriteLock(async () => {
-      const r = await mint({
-        platformDir,
-        key,
-        statement: typeof body.statement === "string" ? body.statement : "",
-        why: typeof body.why === "string" ? body.why : "",
-        livesIn: toLivesIn(body.livesIn),
-        issue: typeof body.issue === "string" && body.issue.trim() !== "" ? body.issue.trim() : undefined
-      });
+      const r = await mint({ platformDir, key, ...mintFieldsFromBody(body) });
       if (!r.ok)
         return failureResponse(c, r);
       await runIndex({ platformDir, storage: storage2 });
@@ -11910,6 +12083,30 @@ function mountApi(app, storage2, platformDir = process.cwd()) {
       return c.json({ ok: true, id: r.id, file: r.file, reason: r.reason, sites: r.sites }, 200);
     });
   }));
+  app.post("/api/requirements/:id/accept", guarded(async function acceptRequirement(c) {
+    if (!featureEnabled("editor")) {
+      return c.json({ error: featureDisabledMessage("editor") }, 404);
+    }
+    const originReject = rejectCrossOrigin(c);
+    if (originReject)
+      return originReject;
+    const headerReject = rejectBadWriteHeaders(c);
+    if (headerReject)
+      return headerReject;
+    const parsed = await readJsonBody(c);
+    if (!parsed.ok)
+      return parsed.res;
+    const id = c.req.param("id") ?? "";
+    if (!ID_RE.test(id))
+      return c.json({ error: "id must be a requirement id (KEY-NNN)" }, 400);
+    return withWriteLock(async () => {
+      const r = await accept({ platformDir, id });
+      if (!r.ok)
+        return failureResponse(c, r);
+      await runIndex({ platformDir, storage: storage2 });
+      return c.json({ ok: true, id: r.id, file: r.file }, 200);
+    });
+  }));
   app.get("/api/propagation/:id", guarded((c) => c.json(propagation2(storage2, c.req.param("id") ?? "").rows)));
   app.get("/api/query", guarded((c) => {
     if (!featureEnabled("query")) {
@@ -11990,6 +12187,7 @@ var init_api = __esm(() => {
   init_discover();
   init_pipeline();
   init__result();
+  init_accept();
   init_amend();
   init_deprecate();
   init_mint();
@@ -12011,7 +12209,7 @@ __export(exports_serve, {
 });
 import { existsSync as existsSync13, mkdirSync as mkdirSync6 } from "fs";
 import { dirname as dirname8 } from "path";
-import { defineCommand as defineCommand23 } from "citty";
+import { defineCommand as defineCommand24 } from "citty";
 import { Hono as Hono2 } from "hono";
 function composeServeApp(storage2, platformDir = process.cwd()) {
   const app = new Hono2;
@@ -12060,7 +12258,7 @@ var init_serve = __esm(() => {
   init_sqlite();
   init__args();
   init__shared();
-  serveCommand = defineCommand23({
+  serveCommand = defineCommand24({
     meta: {
       name: "serve",
       description: "Run the local webapp. Binds 127.0.0.1 on --port (loopback only \u2014 no --host). --probe is the SERV-04 asset-embedding smoke."
@@ -12163,7 +12361,7 @@ __export(exports_docs, {
 import { existsSync as existsSync14, statSync as statSync6 } from "fs";
 import { join as join15, normalize, sep as sep4 } from "path";
 import { fileURLToPath } from "url";
-import { defineCommand as defineCommand24 } from "citty";
+import { defineCommand as defineCommand25 } from "citty";
 function resolveDocsRootFrom(candidates) {
   for (const candidate of candidates) {
     if (existsSync14(join15(candidate, "index.html")))
@@ -12241,7 +12439,7 @@ function exitNoDocsRoot() {
 var docsCommand;
 var init_docs2 = __esm(() => {
   init_constants();
-  docsCommand = defineCommand24({
+  docsCommand = defineCommand25({
     meta: {
       name: "docs",
       description: "Serve the bundled documentation site offline. Binds 127.0.0.1 on --port (loopback only \u2014 no --host). --probe is the boot-and-fetch smoke."
@@ -12302,10 +12500,10 @@ __export(exports___smoke, {
   schemaSmokeCommand: () => schemaSmokeCommand,
   schemaMismatchSmokeCommand: () => schemaMismatchSmokeCommand
 });
-import { defineCommand as defineCommand25 } from "citty";
+import { defineCommand as defineCommand26 } from "citty";
 var schemaSmokeCommand, schemaMismatchSmokeCommand;
 var init___smoke = __esm(() => {
-  schemaSmokeCommand = defineCommand25({
+  schemaSmokeCommand = defineCommand26({
     meta: {
       name: "__schema-smoke",
       description: "(hidden CI) open a fresh DB, exec DDL, assert the schema shape",
@@ -12348,7 +12546,7 @@ var init___smoke = __esm(() => {
       console.log("__schema-smoke OK");
     }
   });
-  schemaMismatchSmokeCommand = defineCommand25({
+  schemaMismatchSmokeCommand = defineCommand26({
     meta: {
       name: "__schema-mismatch-smoke",
       description: "(hidden CI) corrupt _schema_version, re-open, assert silent rebuild",
@@ -12374,8 +12572,8 @@ var init___smoke = __esm(() => {
 
 // src/cli.ts
 init_package();
-import { defineCommand as defineCommand26, runMain, showUsage } from "citty";
-var main = defineCommand26({
+import { defineCommand as defineCommand27, runMain, showUsage } from "citty";
+var main = defineCommand27({
   meta: {
     name: "spec",
     version: package_default.version,
@@ -12400,6 +12598,7 @@ var main = defineCommand26({
     deprecate: () => Promise.resolve().then(() => (init_deprecate2(), exports_deprecate)).then((m) => m.deprecateCommand),
     move: () => Promise.resolve().then(() => (init_move2(), exports_move)).then((m) => m.moveCommand),
     amend: () => Promise.resolve().then(() => (init_amend2(), exports_amend)).then((m) => m.amendCommand),
+    accept: () => Promise.resolve().then(() => (init_accept2(), exports_accept)).then((m) => m.acceptCommand),
     mcp: () => Promise.resolve().then(() => (init_mcp2(), exports_mcp)).then((m) => m.mcpCommand),
     resolve: () => Promise.resolve().then(() => (init_resolve2(), exports_resolve)).then((m) => m.resolveCommand),
     gate: () => Promise.resolve().then(() => (init_gate2(), exports_gate)).then((m) => m.gateCommand),