@subseam/mcp 0.4.44 → 0.4.46

package/README.md

@@ -2,7 +2,7 @@
 
 subseam reads your repository's history and checks every pull request against the rules your
 team writes down: "this package never imports that one", "only this module talks to the
-database". You write a rule as a one-line note, subseam turns it into a definition you approve,
+database". You write a rule as a one-line note, subseam turns it into a definition,
 and from then on each PR shows where it breaks the rule, with the file, the line and the cause.
 
 This package is the MCP server that gives your coding agent (Claude Code, or any MCP host) the

package/dist/main.js

@@ -20287,6 +20287,9 @@ init_esm_shims();
 // ../execution-contract/src/unit/test-shard.ts
 init_esm_shims();
 
+// ../execution-contract/src/unit/default-test-file.ts
+init_esm_shims();
+
 // ../execution-contract/src/unit/footprint-segment.ts
 init_esm_shims();
 
@@ -30647,7 +30650,7 @@ function renderDraft(d, atTip = true) {
   const tip = d.atTip.failures.length > 0 ? `${tipAt}: ${d.atTip.failures.length} failing: ` + shown.join("; ") + (more > 0 ? `; \u2026 and ${more} more` : "") : notEvaluated !== null ? `${tipAt}: not evaluated (${notEvaluated})` : `${tipAt}: holds`;
   const tipRest = d.atTip.failures.length > 0 && notEvaluated !== null ? [`${tipAt}, the rest was not evaluated (${notEvaluated})`] : [];
   const open7 = notComputedLines(d.atTip.uncomputed, atTip);
-  const rung = d.rung === void 0 ? [] : [`  on approval, in force at ${d.rung.means}`];
+  const rung = d.rung === void 0 ? [] : [`  in force at ${d.rung.means}`];
   if (typeof d.gated === "string") return [`  ${d.statement}`, `  gated: ${d.gated} This definition is not evaluated.`, ...rung, `  conflicts: ${d.conflicts}`].join("\n");
   return [`  ${d.statement}`, ...exampleLines(d.examples), `  history: ${history}`, ...floor, tip, ...tipRest, ...open7, ...rung, `  conflicts: ${d.conflicts}`].join("\n");
 }
@@ -30773,7 +30776,7 @@ var seedBody = external_exports.discriminatedUnion("status", [
       })),
       rejectedCandidates: external_exports.number(),
       gateErrorDistribution: external_exports.record(external_exports.number()),
-      admittedDefaulted: external_exports.array(external_exports.object({ name: external_exports.string(), definitionId: external_exports.string(), conceptId: external_exports.string() })),
+      admitted: external_exports.array(external_exports.object({ name: external_exports.string(), definitionId: external_exports.string(), conceptId: external_exports.string() })),
       routedContested: external_exports.array(external_exports.object({
         name: external_exports.string(),
         definitionId: external_exports.string(),
@@ -30794,11 +30797,8 @@ var input2 = external_exports.object({
   source: external_exports.record(external_exports.unknown()).optional(),
   nlIntent: external_exports.string().min(1).optional(),
   createdBy: external_exports.string().min(1).optional(),
-  // OPTIONAL IN THE SCHEMA, MANDATORY IN EFFECT ON `source` (the shape `invoke-define-admit-route.ts`
-  // takes): the `source` arm's admission is `authored`, and Core refuses a blank basis with a typed
-  // MISSING_BASIS carrying its repair hint. Declaring it required here would trade that named
-  // refusal for a Zod 400 with nothing to act on, and the `dry_run`/`mine` arms need none. The
-  // `nlIntent` arm forwards it when given and otherwise cites its own sentence.
+  // Optional on every arm: a citation is recorded as the version's history and nothing routes on it.
+  // The `nlIntent` arm forwards it when given and otherwise cites its own sentence.
   basis: external_exports.string().min(1).optional(),
   dry_run: external_exports.boolean().optional(),
   mine: external_exports.object({
@@ -30816,7 +30816,7 @@ var input2 = external_exports.object({
 });
 var defineTool = {
   name: "define",
-  description: "Write a definition into this tenant's governing corpus. Pass exactly one of `source` (the SDL definition object \u2014 deterministic, no LLM) or `nlIntent` (a natural-language note: your own agent decomposes it into slices by pull \u2014 the first call answers with the task to pull, then re-issue the same call unchanged \u2014 and each slice is authored through the CEGIS loop), plus `repo` (org-qualified) and optional `commit` (defaults to resolved tip). Pass `basis` on either arm: free text citing what the definition stood on \u2014 the source doc plus its section (there is no fixed vocabulary), or `capture-note:<id>` for a captured note, which also marks that note formalized. It is required in effect with `source`; an admission that cites nothing is refused. With `nlIntent` it defaults to the note, with the slice number appended. Authoring answers within about 45 s; if it is still queued or iterating it returns a job id: call `define` again with `authorJobId` to read it. An admission of `source` answers the same way: a job id still running is read with `admitJobId`, and a `dry_run` still running with `compileJobId`. `dry_run: true` with `source` validates against the live graph and admits NOTHING, returning per-gate errors with repair hints. `dry_run: true` with `source` and no `repo` answers only whether the language can say it (bind, capability and strength are deferred until a repo is named). `mine: {repo}` submits a whole-repo candidate mining pass instead (async \u2014 poll with `mine: {jobId}`). New versions land defaulted until approved. `gap: { construct, witness, issue }` records a construct the language cannot say yet (witness is the file:line that needed it) and admits nothing.",
+  description: "Write a definition into this tenant's governing corpus. Pass exactly one of `source` (the SDL definition object \u2014 deterministic, no LLM) or `nlIntent` (a natural-language note: your own agent decomposes it into slices by pull \u2014 the first call answers with the task to pull, then re-issue the same call unchanged \u2014 and each slice is authored through the CEGIS loop), plus `repo` (org-qualified) and optional `commit` (defaults to resolved tip). Pass `basis` on either arm: free text citing what the definition stood on \u2014 the source doc plus its section (there is no fixed vocabulary), or `capture-note:<id>` for a captured note, which also marks that note formalized. It is kept as the version's history. With `nlIntent` it defaults to the note, with the slice number appended. Authoring answers within about 45 s; if it is still queued or iterating it returns a job id: call `define` again with `authorJobId` to read it. An admission of `source` answers the same way: a job id still running is read with `admitJobId`, and a `dry_run` still running with `compileJobId`. `dry_run: true` with `source` validates against the live graph and admits NOTHING, returning per-gate errors with repair hints. `dry_run: true` with `source` and no `repo` answers only whether the language can say it (bind, capability and strength are deferred until a repo is named). `mine: {repo}` submits a whole-repo candidate mining pass instead (async \u2014 poll with `mine: {jobId}`). `gap: { construct, witness, issue }` records a construct the language cannot say yet (witness is the file:line that needed it) and admits nothing.",
   capability: "define",
   inputSchema: input2.shape,
   async handler(raw, ctx) {
@@ -30961,7 +30961,7 @@ function renderSlice(r) {
   const rungs = r.rungs === void 0 || r.rungs.length === 0 ? "" : `
     Model calls: ${rungLine(r.rungs)}`;
   if (r.ok) {
-    const head = `admitted definition ${r.definitionId} v${r.version} in ${r.iterations} iteration(s). Clover: ${r.clover.agreeCount} agreeing${r.clover.agreed ? "" : " \u2014 no consensus"}. It is defaulted until approved.`;
+    const head = `admitted definition ${r.definitionId} v${r.version} in ${r.iterations} iteration(s). Clover: ${r.clover.agreeCount} agreeing${r.clover.agreed ? "" : " \u2014 no consensus"}.`;
     return (r.draft === void 0 ? head : `${head}
 ${renderDraft(r.draft)}`) + rungs;
   }
@@ -31007,8 +31007,7 @@ function renderAdmit(r) {
     return r.status === "running" ? `define: admission job ${r.jobId} is still running (the gates and the first verdict). Call define with admitJobId: "${r.jobId}" to read it.` : `define: admission job ${r.jobId} failed: ${r.error}`;
   }
   if (r.ok) {
-    const standing = r.changeClass === "strengthen" ? "carries its predecessor's standing forward" : r.changeClass === "initial" ? "defaulted until approved" : "re-enters review (defaulted until approved)";
-    const head = `define: admitted ${r.definitionId} v${r.version} [${r.changeClass}] \u2014 ${standing}.`;
+    const head = `define: admitted ${r.definitionId} v${r.version} [${r.changeClass}].`;
     return r.draft === void 0 ? head : `${head}
 ${renderDraft(r.draft)}`;
   }
@@ -31030,7 +31029,7 @@ ${renderSummary(r.summary)}`;
 }
 function renderSummary(s) {
   const lines = [
-    `Mined ${s.candidatesMined} candidate(s): ${s.admittedDefaulted.length} admitted (defaulted), ${s.routedContested.length} contested, ${s.rejectedCandidates} rejected, ${s.droppedRedundant.count} redundant, ${s.discardedUnsupported.length} unsupported.`
+    `Mined ${s.candidatesMined} candidate(s): ${s.admitted.length} admitted, ${s.routedContested.length} contested, ${s.rejectedCandidates} rejected, ${s.droppedRedundant.count} redundant, ${s.discardedUnsupported.length} unsupported.`
   ];
   if (s.discardedUnsupported.length > 0) {
     lines.push("Discarded by measurement (support vs exceptions against the live graph):");
@@ -31038,9 +31037,9 @@ function renderSummary(s) {
       lines.push(`  \u2022 ${d.name} \u2014 ${d.reason}: support ${d.support}, exceptions ${d.exceptions} (${d.grain} grain)`);
     }
   }
-  if (s.admittedDefaulted.length > 0) {
-    lines.push("Admitted (defaulted \u2014 approve to promote):");
-    for (const a of s.admittedDefaulted) lines.push(`  \u2022 ${a.name} (${a.definitionId})`);
+  if (s.admitted.length > 0) {
+    lines.push("Admitted:");
+    for (const a of s.admitted) lines.push(`  \u2022 ${a.name} (${a.definitionId})`);
   }
   if (s.routedContested.length > 0) {
     lines.push("Contested (in the decision queue):");
@@ -31296,12 +31295,7 @@ var input3 = external_exports.object({
   definitionId: external_exports.string().uuid().optional(),
   repo: external_exports.string().min(1).optional(),
   status: external_exports.enum(["active", "contested", "abandoned", "superseded"]).optional(),
-  // F6d discovery (ruling 2026-08-02). Seeded/defaulted definitions are deliberately NOT pushed
-  // into the drift backlog, so they have to be FINDABLE: by standing (`versionStatus: 'defaulted'`
-  // is the un-affirmed corpus), by how they got here (`provenance`), and by area
-  // (`locationPrefix`). Dashboard-mode filters; meaningless beside `definitionId`.
-  versionStatus: external_exports.enum(["defaulted", "ratified", "corrected"]).optional(),
-  provenance: external_exports.enum(["authored", "mined", "witness-derived"]).optional(),
+  // Findable by area (`locationPrefix`). Dashboard-mode filter; meaningless beside `definitionId`.
   locationPrefix: external_exports.string().min(1).optional(),
   // The practice library (direction/define/language.md §9.6): a search over product content, never
   // over this tenant's definitions, so it is an arm of its own and takes no other field beside it.
@@ -31312,13 +31306,8 @@ var statusBody = external_exports.object({
     definitionId: external_exports.string(),
     name: external_exports.string(),
     class: external_exports.string(),
-    versionStatus: external_exports.string(),
     epistemicStatus: external_exports.string(),
-    currentVersion: external_exports.number(),
-    ratifiedBy: external_exports.string().nullable(),
-    ratifiedAt: external_exports.string().nullable(),
-    ratifiedBasis: external_exports.string().nullable(),
-    ratifiedActorKind: external_exports.string().nullable()
+    currentVersion: external_exports.number()
   })),
   driftBacklog: external_exports.array(external_exports.object({
     driftEventId: external_exports.string(),
@@ -31335,8 +31324,6 @@ var statusBody = external_exports.object({
 });
 var showVersion = external_exports.object({
   version: external_exports.number(),
-  status: external_exports.string(),
-  provenance: external_exports.string(),
   changeClass: external_exports.string(),
   class: external_exports.string(),
   modality: external_exports.string(),
@@ -31347,10 +31334,6 @@ var showVersion = external_exports.object({
   // such, while an absent field is a wire skew — without this it would render as "absent
   // (pre-#911)" for a version that has an envelope.
   authoredEnvelope: external_exports.unknown().refine((v) => v !== void 0, { message: "Required" }),
-  ratifiedBy: external_exports.string().nullable(),
-  ratifiedAt: external_exports.string().nullable(),
-  ratifiedBasis: external_exports.string().nullable(),
-  ratifiedActorKind: external_exports.string().nullable(),
   witnesses: external_exports.object({ corroboration: external_exports.number(), pinned: external_exports.number(), counterexample: external_exports.number() })
 });
 var showViolation = external_exports.object({
@@ -31396,7 +31379,7 @@ var showBody = external_exports.discriminatedUnion("ok", [
 ]);
 var showTool = {
   name: "show",
-  description: 'Show this tenant\'s definitions. With `definitionId`: ONE definition as a coherent object \u2014 every version with its status and provenance, the approval stamp, subject bindings, standing violations, live suppressions, and banked witnesses. Without: the corpus dashboard (admitted definitions, the open drift backlog, corpus size + evaluation staleness), optionally filtered by `repo`, epistemic `status`, `versionStatus` (use `defaulted` to see the un-affirmed definitions), `provenance`, or `locationPrefix` (e.g. `app/src/billing/`). With `practice` (words, e.g. "one integration point for an external API" or "least privilege"): the practice library \u2014 how to state a coding best practice as definitions on your code\'s concepts, with the plain sentences to enter through `define`.',
+  description: 'Show this tenant\'s definitions. With `definitionId`: ONE definition as a coherent object \u2014 every version with its change class, subject bindings, standing violations, live suppressions, and banked witnesses. Without: the corpus dashboard (admitted definitions, the open drift backlog, corpus size + evaluation staleness), optionally filtered by `repo`, epistemic `status`, or `locationPrefix` (e.g. `app/src/billing/`). With `practice` (words, e.g. "one integration point for an external API" or "least privilege"): the practice library \u2014 how to state a coding best practice as definitions on your code\'s concepts, with the plain sentences to enter through `define`.',
   capability: "define",
   inputSchema: input3.shape,
   async handler(raw, ctx) {
@@ -31474,13 +31457,7 @@ function json(value) {
 }
 function versionLines(v, currentVersion) {
   const current = v.version === currentVersion ? " \u2190 current" : "";
-  const lines = [`  \u2022 v${v.version}#${v.canonicalHash.slice(0, 12)} [${v.class}/${v.modality}/${v.status}] ${v.provenance}, ${v.changeClass}${current}`];
-  if (v.ratifiedBy !== null) {
-    const kind = v.ratifiedActorKind === null ? "" : ` (${v.ratifiedActorKind})`;
-    const when = v.ratifiedAt === null ? "" : ` on ${v.ratifiedAt}`;
-    const basis = v.ratifiedBasis === null ? "" : ` \u2014 basis: ${v.ratifiedBasis}`;
-    lines.push(`      approved by ${v.ratifiedBy}${kind}${when}${basis}`);
-  }
+  const lines = [`  \u2022 v${v.version}#${v.canonicalHash.slice(0, 12)} [${v.class}/${v.modality}] ${v.changeClass}${current}`];
   const w = v.witnesses;
   const banked = w.corroboration + w.pinned + w.counterexample;
   if (banked > 0) {
@@ -31517,13 +31494,7 @@ Definitions:
 ${defs}${queue}`;
 }
 function renderDefinition(d) {
-  const line = `  \u2022 ${d.name} [${d.class}/${d.versionStatus}] v${d.currentVersion} (${d.definitionId})`;
-  if (d.ratifiedBy === null) return line;
-  const kind = d.ratifiedActorKind === null ? "" : ` (${d.ratifiedActorKind})`;
-  const when = d.ratifiedAt === null ? "" : ` on ${d.ratifiedAt}`;
-  const basis = d.ratifiedBasis === null ? "" : ` \u2014 basis: ${d.ratifiedBasis}`;
-  return `${line}
-      approved by ${d.ratifiedBy}${kind}${when}${basis}`;
+  return `  \u2022 ${d.name} [${d.class}] v${d.currentVersion} (${d.definitionId})`;
 }
 function renderBacklogItem(q) {
   const line = `  \u2022 ${q.kind}: ${q.definitionName} (drift ${q.driftEventId})`;
@@ -31548,7 +31519,6 @@ var conformanceBody = external_exports.object({
     canonicalHash: external_exports.string(),
     class: external_exports.string(),
     modality: external_exports.string(),
-    versionStatus: external_exports.string(),
     verdict: external_exports.string(),
     reason: external_exports.string().optional(),
     witness: external_exports.object({
@@ -31591,7 +31561,7 @@ var generationBody = external_exports.object({
   planned: external_exports.number(),
   cached: external_exports.number(),
   witnessesStored: external_exports.number(),
-  kinds: external_exports.object({ corroboration: external_exports.number(), pinned: external_exports.number(), counterexample: external_exports.number() }),
+  kinds: external_exports.object({ corroboration: external_exports.number(), counterexample: external_exports.number() }),
   partitions: external_exports.object({
     hit: external_exports.array(external_exports.string()),
     skipped: external_exports.array(external_exports.object({ key: external_exports.string(), reason: external_exports.string() }))
@@ -31607,7 +31577,7 @@ var input4 = external_exports.object({
 });
 var evalTool = {
   name: "eval",
-  description: "Evaluate definitions against a repo's code as-built. With `definitionIds`: verdicts for those definitions, plus generated-and-executed behavioral checks (banked witnesses) where applicable. Without: the whole admitted corpus. Provide `repo` and optional `commit` (defaults to resolved tip). Returns conformant/violated/unevaluable per definition; violations carry a witness. Approved (store: ratified) MUST/MUST-NEVER violations are blocking. A pass that is still evaluating answers a job id: call again with `conformanceJobId` to read it.",
+  description: "Evaluate definitions against a repo's code as-built. With `definitionIds`: verdicts for those definitions, plus generated-and-executed behavioral checks (banked witnesses) where applicable. Without: the whole admitted corpus. Provide `repo` and optional `commit` (defaults to resolved tip). Returns conformant/violated/unevaluable per definition; violations carry a witness. MUST/MUST-NEVER violations are blocking. A pass that is still evaluating answers a job id: call again with `conformanceJobId` to read it.",
   capability: "define",
   inputSchema: input4.shape,
   async handler(raw, ctx) {
@@ -31652,9 +31622,6 @@ var evalTool = {
 function isHard(e) {
   return e.modality === "MUST" || e.modality === "MUST-NEVER";
 }
-function isCertified(e) {
-  return e.versionStatus === "ratified" || e.versionStatus === "corrected";
-}
 function witnessOf(e) {
   const f = e.witness?.structuralFacts;
   if (f !== void 0) return ` \u2014 concept is kind=${f.kind}, name=${f.name} at ${f.location}`;
@@ -31695,7 +31662,7 @@ function successorStamp(e) {
   return e.evaluatedOnSuccessor !== void 0 ? ` {evaluated on ${e.evaluatedOnSuccessor.name} at ${e.evaluatedOnSuccessor.location}}` : "";
 }
 function violationLine(e) {
-  return [`  \u2022 ${e.name}${versionStamp(e)} [${e.modality}/${e.versionStatus}]${grainStamp(e)}${successorStamp(e)}${witnessOf(e)}`, ...witnessDetailLines(e)];
+  return [`  \u2022 ${e.name}${versionStamp(e)} [${e.modality}]${grainStamp(e)}${successorStamp(e)}${witnessOf(e)}`, ...witnessDetailLines(e)];
 }
 function violationLines2(entries) {
   return entries.flatMap(violationLine);
@@ -31707,7 +31674,7 @@ function suppressedLine(e) {
   const sup = e.suppression;
   if (sup === void 0) return violationLine(e);
   return [
-    `  \u2022 ${e.name}${versionStamp(e)} [${e.modality}/${e.versionStatus}]${grainStamp(e)}${successorStamp(e)} \u2014 violated, suppressed until ${sup.expiresAt} by ${sup.attributedTo}: ${sup.reason}${witnessOf(e)}`,
+    `  \u2022 ${e.name}${versionStamp(e)} [${e.modality}]${grainStamp(e)}${successorStamp(e)} \u2014 violated, suppressed until ${sup.expiresAt} by ${sup.attributedTo}: ${sup.reason}${witnessOf(e)}`,
     ...witnessDetailLines(e)
   ];
 }
@@ -31721,14 +31688,12 @@ function guaranteeLine() {
 function laneLines(entries, behavioralHeader) {
   const violated = entries.filter((e) => e.verdict === "violated");
   const suppressed = violated.filter(isSuppressed);
-  const blocking = violated.filter((e) => isHard(e) && isCertified(e) && !isSuppressed(e));
-  const approvalQuestions = violated.filter((e) => isHard(e) && e.versionStatus === "defaulted" && !isSuppressed(e));
+  const blocking = violated.filter((e) => isHard(e) && !isSuppressed(e));
   const shoulds = violated.filter((e) => e.modality === "SHOULD" && !isSuppressed(e));
   const unevaluable = entries.filter((e) => e.verdict === "unevaluable");
   const behavioral = entries.filter((e) => e.verdict === "static-unevaluable");
   const out2 = [];
-  if (blocking.length > 0) out2.push("\nBLOCKING \u2014 approved (store: ratified) MUST/MUST-NEVER violations:", ...violationLines2(blocking));
-  if (approvalQuestions.length > 0) out2.push("\nApprove or correct? \u2014 defaulted violations:", ...violationLines2(approvalQuestions));
+  if (blocking.length > 0) out2.push("\nBLOCKING \u2014 MUST/MUST-NEVER violations:", ...violationLines2(blocking));
   if (shoulds.length > 0) out2.push("\nSHOULD reports:", ...violationLines2(shoulds));
   if (suppressed.length > 0) out2.push("\nSuppressed \u2014 still violated, not blocking (expiring):", ...suppressed.flatMap(suppressedLine));
   if (unevaluable.length > 0) out2.push("\nUnevaluable (no fact backing):", ...unevaluable.map((e) => `  \u2022 ${e.name}${versionStamp(e)}: ${e.reason ?? "no reason given"}`));
@@ -31775,18 +31740,13 @@ function renderGeneration(r) {
     lines.push("No witnesses banked this run.");
   } else {
     lines.push(
-      `Witnesses banked (${r.witnessesStored}): ${r.kinds.corroboration} corroboration, ${r.kinds.pinned} pinned, ${r.kinds.counterexample} counterexample.`
+      `Witnesses banked (${r.witnessesStored}): ${r.kinds.corroboration} corroboration, ${r.kinds.counterexample} counterexample.`
     );
     if (r.kinds.counterexample > 0) {
       lines.push(
         `  ! ${r.kinds.counterexample} COUNTEREXAMPLE(S): the code as-built contradicts the definition's own claim. Either the code is wrong or the definition is \u2014 this is not a passing run.`
       );
     }
-    if (r.kinds.pinned > 0) {
-      lines.push(
-        `  \xB7 ${r.kinds.pinned} pinned: these came from DEFAULTED definitions, so they pin current behavior rather than certify an approved intent. Approve the definitions to promote them to corroboration.`
-      );
-    }
   }
   if (r.partitions.hit.length > 0) {
     lines.push(`Checked partitions (${r.partitions.hit.length}):`);
@@ -31809,13 +31769,6 @@ var repinObserved = external_exports.object({
   observations: external_exports.array(external_exports.object({ kind: external_exports.enum(["return", "raise"]), value: external_exports.unknown() }))
 });
 var ratifyBody = external_exports.discriminatedUnion("kind", [
-  external_exports.object({
-    kind: external_exports.literal("ratify-version"),
-    result: external_exports.discriminatedUnion("ok", [
-      external_exports.object({ ok: external_exports.literal(true), definitionId: external_exports.string(), version: external_exports.number(), status: external_exports.enum(["ratified", "corrected"]) }),
-      refusal(["not-found", "not-defaulted", "missing-ratifier", "missing-basis", "ratifier-mismatch"])
-    ])
-  }),
   external_exports.object({
     kind: external_exports.literal("resolve-drift-item"),
     result: external_exports.discriminatedUnion("ok", [external_exports.object({ ok: external_exports.literal(true) }), refusal(["not-found", "already-resolved"])])
@@ -31856,21 +31809,8 @@ var ratifyBody = external_exports.discriminatedUnion("kind", [
   })
 ]);
 var input5 = external_exports.object({
-  kind: external_exports.enum(["ratify-version", "resolve-drift-item", "supersede", "suppress", "unsuppress", "repin-witness"]),
+  kind: external_exports.enum(["resolve-drift-item", "supersede", "suppress", "unsuppress", "repin-witness"]),
   definitionId: external_exports.string().min(1).optional(),
-  version: external_exports.number().int().optional(),
-  status: external_exports.enum(["ratified", "corrected"]).optional(),
-  // A4 + CL-E/F2. Optional because the gateway ALWAYS stamps the authenticated caller; passing it
-  // is only allowed as a restatement of who you already are, and passing anybody else's name is
-  // refused (`ratifier-mismatch`) rather than honoured. What it never does is go unrecorded.
-  ratifiedBy: external_exports.string().min(1).optional(),
-  // What the approval was judged against. Unnamed, it is the version's provenance basis (for a
-  // drafted note, the note), so approving a draft asks for nothing beyond the approval.
-  ratifiedBasis: external_exports.string().min(1).optional(),
-  // NO `ratifiedActorKind` (CL-F, operator direction 2026-08-05 on PR #96). The store records what
-  // was OBSERVED about a ratifier, never what a caller declares itself to be, so there is nothing
-  // for a caller to pass. `z.object` strips unknown keys, so a caller that sends one anyway is
-  // silently ignored here and it never reaches the gateway or the column.
   driftEventId: external_exports.string().min(1).optional(),
   resolvedBy: external_exports.string().min(1).optional(),
   anchorConceptId: external_exports.string().min(1).optional(),
@@ -31883,7 +31823,7 @@ var input5 = external_exports.object({
 });
 var defineRatifyTool = {
   name: "define_ratify",
-  description: "Ratify/retire the overlay. kind `ratify-version` needs {definitionId, version, status: ratified|corrected} and promotes a defaulted version (approving a draft). EVERY promotion is stamped: ratifiedBasis (optional) is what you judged it AGAINST, and when omitted it is what the version was drafted from (its note). You do NOT state what kind of actor you are and there is no field for it \u2014 the record holds what was observed about the ratifier, never a self-description. Your name and the moment are recorded automatically; ratifiedBy is optional and may only restate your own principal. The promotion is refused outright, by name, if any part of the stamp is missing. kind `resolve-drift-item` needs {driftEventId} (+ optional resolvedBy) and acknowledges a drift-backlog item. kind `supersede` needs {definitionId} and retires a definition from the active corpus. kind `suppress` needs {definitionId, anchorConceptId, attributedTo, reason, expiresAt} and marks a violation non-blocking until that date \u2014 it does NOT make it conformant, and there is no permanent suppression: past the date the violation blocks again and lands in the drift backlog. kind `unsuppress` needs {suppressionId, reason} (+ optional revokedBy, defaults to you) and REVOKES a suppression before its date \u2014 the violation blocks again on the next conformance run, and the revocation is recorded in the drift backlog with who/why. Extending a suppression is unsuppress then suppress, two explicit acts; there is no second live suppression per target. kind `repin-witness` needs {ledgerRowId} and reports the outcome of repinning a ledger-row witness; it returns whether the witness stands on the current determinant, or refuses with a reason when it cannot \u2014 row-not-found, not-witness-determinant, witness-absent, or not-pinnable.",
+  description: "Close out the overlay. kind `resolve-drift-item` needs {driftEventId} (+ optional resolvedBy) and acknowledges a drift-backlog item. kind `supersede` needs {definitionId} and retires a definition from the active corpus. kind `suppress` needs {definitionId, anchorConceptId, attributedTo, reason, expiresAt} and marks a violation non-blocking until that date \u2014 it does NOT make it conformant, and there is no permanent suppression: past the date the violation blocks again and lands in the drift backlog. kind `unsuppress` needs {suppressionId, reason} (+ optional revokedBy, defaults to you) and REVOKES a suppression before its date \u2014 the violation blocks again on the next conformance run, and the revocation is recorded in the drift backlog with who/why. Extending a suppression is unsuppress then suppress, two explicit acts; there is no second live suppression per target. kind `repin-witness` needs {ledgerRowId} and reports the outcome of repinning a ledger-row witness; it returns whether the witness stands on the current determinant, or refuses with a reason when it cannot \u2014 row-not-found, not-witness-determinant, witness-absent, or not-pinnable.",
   capability: "define",
   inputSchema: input5.shape,
   async handler(raw, ctx) {
@@ -31895,20 +31835,6 @@ var defineRatifyTool = {
   }
 };
 function renderRatify(r) {
-  if (r.kind === "ratify-version") {
-    if (r.result.ok) return `define_ratify: ${r.result.definitionId} v${r.result.version} is now ${r.result.status}, in force at rung *new code only* (the default): a PR that adds a violation fails its check; violations already on the trunk do not. \`define_config\` sets it to warn or off.`;
-    if (r.result.reason === "not-defaulted") return "define_ratify: refused \u2014 that version is not defaulted (already ratified/corrected).";
-    if (r.result.reason === "missing-ratifier") {
-      return "define_ratify: refused \u2014 the ratification names nobody. Ratifying is an act someone performs, and the record of it is permanent; pass ratifiedBy, or call as an authenticated principal.";
-    }
-    if (r.result.reason === "missing-basis") {
-      return "define_ratify: refused \u2014 this version cites nothing it was drafted from, so there is nothing to say it was judged against. Pass ratifiedBasis (a contract, a docstring, an issue).";
-    }
-    if (r.result.reason === "ratifier-mismatch") {
-      return "define_ratify: refused \u2014 ratifiedBy named somebody other than you. A ratification is a signature, and the signature is the signer; you cannot affirm on another principal's behalf. Drop ratifiedBy (your identity is recorded automatically), or have them ratify.";
-    }
-    return "define_ratify: refused \u2014 no such definition/version.";
-  }
   if (r.kind === "suppress") {
     if (r.result.ok) {
       return `define_ratify: suppressed until ${r.result.expiresAt}. The violation still reads violated \u2014 it is non-blocking until then, and blocks again afterwards.`;
@@ -32012,7 +31938,7 @@ var input6 = external_exports.object({
 });
 var defineInboxTool = {
   name: "define_inbox",
-  description: "The decision inbox: everything Define is currently waiting on a human for, open questions first and oldest first. Gathers the drift backlog (every drift kind, including expired and revoked suppressions), refinements that are still defaulted and so need re-review, and failure-ledger snoozes that have run out or are about to. Every line carries the id you act on. Optional `limit` caps the rendered list; the counts always describe the whole answer.",
+  description: "The decision inbox: everything Define is currently waiting on a human for, open questions first and oldest first. Gathers the drift backlog (every drift kind, including expired and revoked suppressions), and failure-ledger snoozes that have run out or are about to. Every line carries the id you act on. Optional `limit` caps the rendered list; the counts always describe the whole answer.",
   capability: "decision",
   inputSchema: input6.shape,
   async handler(raw, ctx) {
@@ -32025,8 +31951,6 @@ var defineInboxTool = {
 };
 var LABELS = {
   drift: "drift",
-  draft: "draft",
-  "refinement-pending": "refinement",
   "snooze-expired": "snooze expired",
   "snooze-expiring": "snooze due",
   proposal: "proposal"
@@ -32035,15 +31959,6 @@ var HOW = {
   // Both facts held: `item.id` IS the driftEventId this call takes (the wire's own contract for
   // the field). A complete, runnable call.
   drift: (item) => `define_ratify {kind:'resolve-drift-item', driftEventId:'${item.id}'}`,
-  // PARTIAL BY NECESSITY, and it says so rather than filling the hole. `item.id` is the
-  // definitionId, but `ratify-version` also needs `version` and `status`, and the version is NOT on
-  // the wire — it survives only as prose inside `detail` ("… v2 is a weaken refinement …"), and
-  // parsing a number back out of a sentence to put it in a tool call is precisely the guessed
-  // content the ruling forbids. So the call is named with the id it does hold and the remaining
-  // arguments are stated as arguments the caller supplies.
-  // A first draft is version 1, so the call is complete.
-  draft: (item) => `define_ratify {kind:'ratify-version', definitionId:'${item.id}', version:1, status:'ratified'|'corrected'}`,
-  "refinement-pending": (item) => `define_ratify {kind:'ratify-version', definitionId:'${item.id}', version:\u2026, status:'ratified'|'corrected'} \u2014 supply the version shown in this line`,
   // The read shows the alteration, verdict and definition; the adjudication follows it.
   proposal: (item) => `define_proposal_read {taskId:'${item.id}'}, then define_adjudicate {taskId:'${item.id}', decision:'accept'|'reject', reason:\u2026}`
 };
@@ -47431,10 +47346,8 @@ var VerificationQuestionSchema = contractObject({
   presentation: PresentationSchema
 }).readonly();
 var DivergenceKindSchema = external_exports2.enum(["missing", "spurious", "divergent"]);
-var DivergenceInterpretationSchema = external_exports2.enum(["ratify-or-correct", "conformance-violation"]);
 var ConformanceDivergenceSchema = contractObject({
   kind: DivergenceKindSchema,
-  interpretation: DivergenceInterpretationSchema,
   presentation: PresentationSchema
 }).readonly();
 var VerificationContextSchema = contractObject({
@@ -47559,7 +47472,6 @@ init_esm_shims();
 init_esm_shims();
 var DEFINITION_CLASSES = ["structural", "relational", "behavioral", "judgment"];
 var MODALITIES = ["MUST", "MUST-NEVER", "SHOULD", "MAY"];
-var VERSION_STATUSES = ["defaulted", "ratified", "corrected"];
 var CONFORMANCE_VERDICTS = ["conformant", "violated", "unevaluable", "static-unevaluable"];
 var CARDINALITY_GRAINS = ["concept", "element"];
 var CONFORMANCE_SCOPES = ["corpus", "cone", "scratch"];
@@ -47590,7 +47502,6 @@ var ConformanceEntrySchema = contractObject({
   canonicalHash: external_exports2.string(),
   class: external_exports2.enum(DEFINITION_CLASSES),
   modality: external_exports2.enum(MODALITIES),
-  versionStatus: external_exports2.enum(VERSION_STATUSES),
   verdict: external_exports2.enum(CONFORMANCE_VERDICTS),
   reason: external_exports2.string().optional(),
   witness: ConformanceWitnessSchema.optional(),
@@ -47831,6 +47742,7 @@ var BUILD_REFUSAL_CODES = [
   "origin-moved",
   "overlay-blob-missing",
   "overlay-path-ignored",
+  "path-file-and-directory",
   "path-invalid",
   "repo-name-invalid",
   "repo-not-found",
@@ -47973,28 +47885,26 @@ var BuildRunOutcomeShape = {
   shardPlan: ShardPlanSchema.nullable()
 };
 var LandDefineViolationSchema = contractObject({
-  name: external_exports2.string(),
-  definitionId: external_exports2.string(),
-  versionId: external_exports2.string(),
-  modality: external_exports2.string(),
-  versionStatus: external_exports2.string(),
-  /** The evaluator's own words, or null when the verdict carried none. */
-  reason: external_exports2.string().nullable(),
-  /** THE PAIRS THAT CARRY IT. The definition name says a boundary was crossed; these say where.
-   *  Empty when the verdict named none. */
-  offendingEdges: external_exports2.array(contractObject({ edge: external_exports2.string(), from: external_exports2.string(), to: external_exports2.string() }))
+  definitionName: external_exports2.string(),
+  path: external_exports2.string(),
+  line: external_exports2.number().int(),
+  /** Why, in the check's words: what the change adds that the definition forbids. */
+  cause: external_exports2.string()
 });
 var LandDefineVerdictSchema = external_exports2.discriminatedUnion("kind", [
   contractObject({
     kind: external_exports2.literal("judged"),
     commit: external_exports2.string(),
-    /** What the pass covered, in its own words — a cone pass is a PARTIAL corpus. */
+    /** What the pass covered, in its own words: the definitions the change reaches. */
     coverage: external_exports2.string(),
-    verdict: external_exports2.enum(["clean", "violated"]),
-    /** The violations that block: ratified MUST / MUST-NEVER, unsuppressed. */
+    /** `undecided`: nothing blocks, but part of the change was not computed. Never read as clean. */
+    verdict: external_exports2.enum(["clean", "violated", "undecided"]),
+    /** The divergences that block, by the check's own rule. */
     violations: external_exports2.array(LandDefineViolationSchema),
-    /** Violated but not blocking — soft modality, unratified, or suppressed. */
+    /** Diverged but not blocking (rung `warn` or suppressed). */
     reported: external_exports2.array(LandDefineViolationSchema),
+    /** Where the check could not compute a definition's answer, and why. */
+    uncomputed: external_exports2.array(contractObject({ definitionName: external_exports2.string(), path: external_exports2.string(), reason: external_exports2.string() })),
     /** When Define judged: the served report row's recordedAt, an ISO instant. */
     judgedAt: external_exports2.iso.datetime()
   }),
@@ -48767,7 +48677,7 @@ var workReadTools = createWorkReadToolProviders({ capability: "work" });
 var bundledProviders = [src_default2, src_default, tension_default, ...defineTools, ...decisionTools, ...captureTools, ...buildTools, secureTool, ...workTools, ...workReadTools];
 
 // package.json
-var version2 = "0.4.44";
+var version2 = "0.4.46";
 
 // src/server.ts
 var SERVER_VERSION = version2;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@subseam/mcp",
-  "version": "0.4.44",
+  "version": "0.4.46",
   "private": false,
   "type": "module",
   "bin": {