@ybotok/loam 0.2.0-alpha.1 → 0.2.0-alpha.13

package/dist/commands/archive/plan/model/extending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extending.js","sourceRoot":"","sources":["../../../../../src/commands/archive/plan/model/extending.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC1D,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAU/D;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAiB;IACtD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC5C,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACpC,MAAM,EAAE,GACN,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG;gBACzC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC;gBACnC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAC/F,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,GAAW,EAAE,IAAY;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,GAAW,EAAE,OAAe;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC","sourcesContent":["/**\n * Whether the model this merge would leave behind is one LikeC4 can read.\n *\n * It is here because this is the seam that HAS the other document: an extending\n * model is never parsed alone, it is parsed beside the `architecture/` project,\n * and the project the merge must be proven against is the one this very archive\n * would leave behind — the merged map, not the living one. `core/c4/splice` is\n * a pure text-to-text computation — texts in, texts out — so proving the result\n * stays with the command that decides to write.\n *\n * READING the fleet's extending models used to be here too, as the other half\n * of one seam. It moved to `core/c4/service-model/fleet/extending.ts` when the\n * archive stopped being the only reader: `core/c4/project/staged.ts` previews\n * the same merge for every feature-side gate, and `core/` may not import\n * `commands/`. That module's header carries the fail-open the move closes.\n */\nimport { copyFile, mkdir, mkdtemp, rm, writeFile } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { errorText } from \"../../../../core/c4/likec4.js\";\nimport { architectureProjectDocuments } from \"../../../../core/c4/project/architecture.js\";\nimport { asLoadedDoc, loadProject } from \"../../../../core/c4/project/load.js\";\nimport type { DocsDir } from \"../../../../core/kernel/ids/dirs.js\";\nimport { repoPath } from \"../../../../core/envelope/json.js\";\nimport { landscapePath } from \"../../../../core/repo/paths.js\";\n\nexport interface ModelProof {\n  docsDir: DocsDir;\n  /** The merged landscape, or null when this archive leaves the map as it is. */\n  landscape: string | null;\n  /** The merged model: repo-relative path, and the text the archive would write. */\n  model: { path: string; content: string };\n}\n\n/**\n * What LikeC4 says about the model this merge would leave, read the way the\n * per-service grade reads it — the `architecture/` project plus this one file.\n *\n * Empty means clean. Anything else refuses the archive at plan time, with\n * nothing written, for the reason the landscape's own parse net exists:\n * splicing is text surgery, and a document that does not parse takes a whole\n * service's grade down (`c4.invalid`) the moment it lands.\n *\n * Errors carry the path the author wrote rather than the staged copy's, and a\n * staging failure is reported as an error rather than swallowed: a merge that\n * could not be proven is not one that passed.\n */\nexport async function modelMergeErrors(proof: ModelProof): Promise<string[]> {\n  const { docsDir, landscape, model } = proof;\n  let root: string | undefined;\n  try {\n    root = await mkdtemp(join(tmpdir(), \"loam-model-merge-\"));\n    const map = resolve(landscapePath(docsDir));\n    const authored = new Map<string, string>();\n    const staged: string[] = [];\n    for (const path of await architectureProjectDocuments(docsDir)) {\n      const rel = repoPath(docsDir, path);\n      const at =\n        landscape !== null && resolve(path) === map\n          ? await write(root, rel, landscape)\n          : await copy(root, rel, path);\n      authored.set(at, rel);\n      staged.push(at);\n    }\n    const at = await write(root, model.path, model.content);\n    authored.set(at, model.path);\n    staged.push(at);\n    const doc = asLoadedDoc(await loadProject(root, staged));\n    return doc.errors.map((e) => {\n      const where = e.sourceFsPath === undefined ? undefined : authored.get(resolve(e.sourceFsPath));\n      return where === undefined ? errorText(e) : `${where} ${errorText(e)}`;\n    });\n  } catch (err) {\n    return [err instanceof Error ? err.message : String(err)];\n  } finally {\n    if (root !== undefined) await rm(root, { recursive: true, force: true });\n  }\n}\n\n/** Mirror one authored document into the staged tree at its docs-relative path. */\nasync function copy(root: string, rel: string, path: string): Promise<string> {\n  const dest = join(root, ...rel.split(\"/\"));\n  await mkdir(dirname(dest), { recursive: true });\n  await copyFile(path, dest);\n  return resolve(dest);\n}\n\n/** The same for bytes loam holds rather than a file — the merge previews. */\nasync function write(root: string, rel: string, content: string): Promise<string> {\n  const dest = join(root, ...rel.split(\"/\"));\n  await mkdir(dirname(dest), { recursive: true });\n  await writeFile(dest, content, \"utf8\");\n  return resolve(dest);\n}\n"]}

package/dist/commands/archive/plan/refusal.js

@@ -3,10 +3,11 @@
  *
  * Every arm here keeps one property: a refusal means nothing was written. The
  * `--json` shapes carry the issues that caused it so an agent can act on the
- * list rather than on the sentence, and `ArchiveFailure` exists so a merge that
- * could not be computed reports as a merge failure rather than as `internal` —
- * a read-only directory or an unreadable pre-image is not a bug in loam, and
- * saying so sends the reader looking for one.
+ * list rather than on the sentence, and a refusal thrown from below is a
+ * `CodedFailure` (core/envelope/json.ts) so a merge that could not be computed
+ * reports as a merge failure rather than as `internal` — a read-only directory
+ * or an unreadable pre-image is not a bug in loam, and saying so sends the
+ * reader looking for one.
  */
 import { existsSync } from "node:fs";
 import { emitJsonError, repoPath } from "../../../core/envelope/json.js";
@@ -15,20 +16,9 @@ import {} from "../../../core/staging/interrupted.js";
 import {} from "../../../core/staging/writes.js";
 import { findingJson } from "../../../core/vocabulary/report.js";
 /**
- * A refusal or failure with its stable `--json` code attached. Thrown from the
- * plan phase (nothing written yet) and from the commit's rollback path (whose
- * message says whether the rollback held). Anything ELSE that escapes runArchive
- * is a bug, and the action handler reports it as `internal`.
- */
-export class ArchiveFailure extends Error {
-    code;
-    constructor(code, msg) {
-        super(msg);
-        this.code = code;
-    }
-}
-/**
- * An Issue as the `--json` envelope spells it — the Finding shape, minus details.
+ * An Issue as the `--json` envelope spells it — the whole Finding shape, `details`
+ * included (`[]` when the issue carries none; the overwrite warnings list their
+ * current consumers there), plus `overridable`.
  * `gates` and `overridable` are always present and already resolved: a consumer
  * must not have to re-implement the severity default to know what blocks
  * archive, nor keep a code list to know what `--approve` can move.
@@ -99,13 +89,18 @@ export function sayRecovery(r) {
     console.log("");
 }
 /** The full plan, as files: what a dry run shows instead of doing. */
-export function printPlan(docsDir, writes, dirName) {
+export function printPlan(docsDir, writes, dirName, owed) {
     console.log(`\n  plan — ${writes.length} file(s):`);
     for (const w of writes) {
         const verb = existsSync(w.path) ? "update" : "create";
         console.log(`    ${verb}  ${repoPath(docsDir, w.path)}`);
     }
     console.log(`    move    features/${dirName} → features/archive/${dirName}`);
+    // What the real run would print in place of "complete + current" (../closing.ts).
+    if (owed.length > 0)
+        console.log("");
+    for (const line of owed)
+        console.log(line);
     console.log("\n  dry run — nothing was written.");
 }
 //# sourceMappingURL=refusal.js.map

package/dist/commands/archive/plan/refusal.js.map

@@ -1 +1 @@
-{"version":3,"file":"refusal.js","sourceRoot":"","sources":["../../../../src/commands/archive/plan/refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAkB,MAAM,gCAAgC,CAAC;AACzF,OAAO,EACL,gBAAgB,EAChB,YAAY,GAEb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAuB,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAAqB,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAgB,MAAM,oCAAoC,CAAC;AAS/E;;;;;GAKG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IAE5B,IAAI;IADf,YACW,IAAe,EACxB,GAAW;QAEX,KAAK,CAAC,GAAG,CAAC,CAAC;oBAHF,IAAI;IAIf,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,CAAQ,EAAE,KAAc;IAChD,OAAO;QACL,GAAG,WAAW,CACZ,YAAY,CAAC,CAAC,CAAC,EACf,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CACjE;QACD,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAC,IAAe,EAAE,GAAW,EAAE,MAAe,EAAE,KAAc;IACtF,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAe,EACf,GAAW,EACX,QAAmB,EACnB,KAAc;IAEd,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE;QACvB,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjC,GAAG,WAAW,CACZ,OAAO,EACP,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CACjE;YACD,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,CAAiB;IAC3C,MAAM,IAAI,GAAG,yBAAyB,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC;IACjE,IAAI,CAAC,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,sDAAsD,CAAC,CAAC;QAC7E,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,0EAA0E,CAAC,CAAC;QACjG,OAAO;IACT,CAAC;IACD,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,0BAA0B,KAAK,gBAAgB,CAAC,CAAC;IAChG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,MAAsB,EAAE,OAAe;IAChF,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,uBAAuB,OAAO,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;AACpD,CAAC","sourcesContent":["/**\n * How `loam archive` refuses, and what a refusal prints.\n *\n * Every arm here keeps one property: a refusal means nothing was written. The\n * `--json` shapes carry the issues that caused it so an agent can act on the\n * list rather than on the sentence, and `ArchiveFailure` exists so a merge that\n * could not be computed reports as a merge failure rather than as `internal` —\n * a read-only directory or an unreadable pre-image is not a bug in loam, and\n * saying so sends the reader looking for one.\n */\nimport { existsSync } from \"node:fs\";\nimport { emitJsonError, repoPath, type ErrorCode } from \"../../../core/envelope/json.js\";\nimport {\n  approveOverrides,\n  issueFinding,\n  type Issue,\n} from \"../../../core/vocabulary/issue.js\";\nimport { type CommitRecovery } from \"../../../core/staging/interrupted.js\";\nimport { type PlannedWrite } from \"../../../core/staging/writes.js\";\nimport { findingJson, type Finding } from \"../../../core/vocabulary/report.js\";\n\nexport interface ArchiveOptions {\n  approve?: boolean;\n  dryRun?: boolean;\n  json?: boolean;\n}\n\n\n/**\n * A refusal or failure with its stable `--json` code attached. Thrown from the\n * plan phase (nothing written yet) and from the commit's rollback path (whose\n * message says whether the rollback held). Anything ELSE that escapes runArchive\n * is a bug, and the action handler reports it as `internal`.\n */\nexport class ArchiveFailure extends Error {\n  constructor(\n    readonly code: ErrorCode,\n    msg: string,\n  ) {\n    super(msg);\n  }\n}\n\n/**\n * An Issue as the `--json` envelope spells it — the Finding shape, minus details.\n * `gates` and `overridable` are always present and already resolved: a consumer\n * must not have to re-implement the severity default to know what blocks\n * archive, nor keep a code list to know what `--approve` can move.\n */\nexport function issueJson(i: Issue, scope?: string): Record<string, unknown> {\n  return {\n    ...findingJson(\n      issueFinding(i),\n      scope === undefined ? undefined : { path: scope, role: \"scope\" },\n    ),\n    overridable: approveOverrides(i),\n  };\n}\n\n/** The failure envelope plus the issues that caused it, so a caller need not re-run validate. */\nexport function refuseJson(code: ErrorCode, msg: string, issues: Issue[], scope?: string): void {\n  emitJsonError(code, msg, { issues: issues.map((issue) => issueJson(issue, scope)) });\n}\n\n/**\n * The same envelope for a refusal computed from `Finding`s rather than\n * `Issue`s — the plan-time checks whose codes are not coherence's (they belong\n * to the LIVING documents, not to the feature) and so are not `IssueCode`s.\n *\n * `gates: true` is asserted rather than derived: every finding listed in a\n * refusal is a reason archive stopped, which is what the field means. Nothing\n * advisory reaches here.\n */\nexport function refuseFindings(\n  code: ErrorCode,\n  msg: string,\n  findings: Finding[],\n  scope?: string,\n): void {\n  emitJsonError(code, msg, {\n    issues: findings.map((finding) => ({\n      ...findingJson(\n        finding,\n        scope === undefined ? undefined : { path: scope, role: \"scope\" },\n      ),\n      gates: true,\n    })),\n  });\n}\n\n/**\n * Take the docs repo's advisory lock for the WHOLE plan+commit window, then\n * archive.\n *\n * The window is the point. Two archives that overlap do not fight over a\n * rename: they each read the living landscape, each splice their additions into\n * the bytes they read, and the second write replaces the first — both exit 0,\n * and `validate` stays green over a landscape that is missing one feature's\n * architecture, because a document with fewer elements is not an invalid one.\n * That is the only silent-loss path in loam that a later command cannot even\n * detect, so it is closed at the coarsest possible granularity: one writer per\n * docs repo, refusing rather than queueing, because a CLI that blocks for an\n * unknown time is worse for an agent than one that says `docs-busy`.\n */\n\n/**\n * What the recovery did, before this command's own output — a docs repo that\n * changed under the caller is the first thing they have to be told, not a\n * footnote. Shared by archive and unarchive through the same CommitRecovery.\n */\nexport function sayRecovery(r: CommitRecovery): void {\n  const what = `an interrupted \\`loam ${r.command} ${r.feature}\\``;\n  if (r.outcome === \"completed\") {\n    console.log(`⚠ ${what} had in fact finished — cleared its commit record.\\n`);\n    return;\n  }\n  if (r.outcome === \"consistent\") {\n    console.log(`⚠ ${what} was rolled back before it wrote anything — cleared its commit record.\\n`);\n    return;\n  }\n  // An interrupted archive is UNDONE and an interrupted unarchive is FINISHED —\n  // the merged text a restore was replacing is written down nowhere, so there is\n  // nothing to go back to. Say which happened; the paths are the same either way.\n  const what_ = r.command === \"archive\" ? \"put them back from\" : \"finished them from\";\n  console.log(`⚠ ${what} left ${r.repaired.length} file(s) half-written; ${what_} its snapshot:`);\n  for (const p of r.repaired) console.log(`  ↩ ${p}`);\n  console.log(\"\");\n}\n\n/** The full plan, as files: what a dry run shows instead of doing. */\nexport function printPlan(docsDir: string, writes: PlannedWrite[], dirName: string): void {\n  console.log(`\\n  plan — ${writes.length} file(s):`);\n  for (const w of writes) {\n    const verb = existsSync(w.path) ? \"update\" : \"create\";\n    console.log(`    ${verb}  ${repoPath(docsDir, w.path)}`);\n  }\n  console.log(`    move    features/${dirName} → features/archive/${dirName}`);\n  console.log(\"\\n  dry run — nothing was written.\");\n}\n"]}
+{"version":3,"file":"refusal.js","sourceRoot":"","sources":["../../../../src/commands/archive/plan/refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAkB,MAAM,gCAAgC,CAAC;AACzF,OAAO,EACL,gBAAgB,EAChB,YAAY,GAEb,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAuB,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAAqB,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAgB,MAAM,oCAAoC,CAAC;AAQ/E;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,CAAQ,EAAE,KAAc;IAChD,OAAO;QACL,GAAG,WAAW,CACZ,YAAY,CAAC,CAAC,CAAC,EACf,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CACjE;QACD,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAC,IAAe,EAAE,GAAW,EAAE,MAAe,EAAE,KAAc;IACtF,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAe,EACf,GAAW,EACX,QAAmB,EACnB,KAAc;IAEd,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE;QACvB,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjC,GAAG,WAAW,CACZ,OAAO,EACP,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CACjE;YACD,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,CAAiB;IAC3C,MAAM,IAAI,GAAG,yBAAyB,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC;IACjE,IAAI,CAAC,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,sDAAsD,CAAC,CAAC;QAC7E,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,0EAA0E,CAAC,CAAC;QACjG,OAAO;IACT,CAAC;IACD,8EAA8E;IAC9E,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,0BAA0B,KAAK,gBAAgB,CAAC,CAAC;IAChG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,MAAsB,EAAE,OAAe,EAAE,IAAuB;IACzG,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,WAAW,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,wBAAwB,OAAO,uBAAuB,OAAO,EAAE,CAAC,CAAC;IAC7E,kFAAkF;IAClF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;AACpD,CAAC","sourcesContent":["/**\n * How `loam archive` refuses, and what a refusal prints.\n *\n * Every arm here keeps one property: a refusal means nothing was written. The\n * `--json` shapes carry the issues that caused it so an agent can act on the\n * list rather than on the sentence, and a refusal thrown from below is a\n * `CodedFailure` (core/envelope/json.ts) so a merge that could not be computed\n * reports as a merge failure rather than as `internal` — a read-only directory\n * or an unreadable pre-image is not a bug in loam, and saying so sends the\n * reader looking for one.\n */\nimport { existsSync } from \"node:fs\";\nimport { emitJsonError, repoPath, type ErrorCode } from \"../../../core/envelope/json.js\";\nimport {\n  approveOverrides,\n  issueFinding,\n  type Issue,\n} from \"../../../core/vocabulary/issue.js\";\nimport { type CommitRecovery } from \"../../../core/staging/interrupted.js\";\nimport { type PlannedWrite } from \"../../../core/staging/writes.js\";\nimport { findingJson, type Finding } from \"../../../core/vocabulary/report.js\";\n\nexport interface ArchiveOptions {\n  approve?: boolean;\n  dryRun?: boolean;\n  json?: boolean;\n}\n\n/**\n * An Issue as the `--json` envelope spells it — the whole Finding shape, `details`\n * included (`[]` when the issue carries none; the overwrite warnings list their\n * current consumers there), plus `overridable`.\n * `gates` and `overridable` are always present and already resolved: a consumer\n * must not have to re-implement the severity default to know what blocks\n * archive, nor keep a code list to know what `--approve` can move.\n */\nexport function issueJson(i: Issue, scope?: string): Record<string, unknown> {\n  return {\n    ...findingJson(\n      issueFinding(i),\n      scope === undefined ? undefined : { path: scope, role: \"scope\" },\n    ),\n    overridable: approveOverrides(i),\n  };\n}\n\n/** The failure envelope plus the issues that caused it, so a caller need not re-run validate. */\nexport function refuseJson(code: ErrorCode, msg: string, issues: Issue[], scope?: string): void {\n  emitJsonError(code, msg, { issues: issues.map((issue) => issueJson(issue, scope)) });\n}\n\n/**\n * The same envelope for a refusal computed from `Finding`s rather than\n * `Issue`s — the plan-time checks whose codes are not coherence's (they belong\n * to the LIVING documents, not to the feature) and so are not `IssueCode`s.\n *\n * `gates: true` is asserted rather than derived: every finding listed in a\n * refusal is a reason archive stopped, which is what the field means. Nothing\n * advisory reaches here.\n */\nexport function refuseFindings(\n  code: ErrorCode,\n  msg: string,\n  findings: Finding[],\n  scope?: string,\n): void {\n  emitJsonError(code, msg, {\n    issues: findings.map((finding) => ({\n      ...findingJson(\n        finding,\n        scope === undefined ? undefined : { path: scope, role: \"scope\" },\n      ),\n      gates: true,\n    })),\n  });\n}\n\n/**\n * Take the docs repo's advisory lock for the WHOLE plan+commit window, then\n * archive.\n *\n * The window is the point. Two archives that overlap do not fight over a\n * rename: they each read the living landscape, each splice their additions into\n * the bytes they read, and the second write replaces the first — both exit 0,\n * and `validate` stays green over a landscape that is missing one feature's\n * architecture, because a document with fewer elements is not an invalid one.\n * That is the only silent-loss path in loam that a later command cannot even\n * detect, so it is closed at the coarsest possible granularity: one writer per\n * docs repo, refusing rather than queueing, because a CLI that blocks for an\n * unknown time is worse for an agent than one that says `docs-busy`.\n */\n\n/**\n * What the recovery did, before this command's own output — a docs repo that\n * changed under the caller is the first thing they have to be told, not a\n * footnote. Shared by archive and unarchive through the same CommitRecovery.\n */\nexport function sayRecovery(r: CommitRecovery): void {\n  const what = `an interrupted \\`loam ${r.command} ${r.feature}\\``;\n  if (r.outcome === \"completed\") {\n    console.log(`⚠ ${what} had in fact finished — cleared its commit record.\\n`);\n    return;\n  }\n  if (r.outcome === \"consistent\") {\n    console.log(`⚠ ${what} was rolled back before it wrote anything — cleared its commit record.\\n`);\n    return;\n  }\n  // An interrupted archive is UNDONE and an interrupted unarchive is FINISHED —\n  // the merged text a restore was replacing is written down nowhere, so there is\n  // nothing to go back to. Say which happened; the paths are the same either way.\n  const what_ = r.command === \"archive\" ? \"put them back from\" : \"finished them from\";\n  console.log(`⚠ ${what} left ${r.repaired.length} file(s) half-written; ${what_} its snapshot:`);\n  for (const p of r.repaired) console.log(`  ↩ ${p}`);\n  console.log(\"\");\n}\n\n/** The full plan, as files: what a dry run shows instead of doing. */\nexport function printPlan(docsDir: string, writes: PlannedWrite[], dirName: string, owed: readonly string[]): void {\n  console.log(`\\n  plan — ${writes.length} file(s):`);\n  for (const w of writes) {\n    const verb = existsSync(w.path) ? \"update\" : \"create\";\n    console.log(`    ${verb}  ${repoPath(docsDir, w.path)}`);\n  }\n  console.log(`    move    features/${dirName} → features/archive/${dirName}`);\n  // What the real run would print in place of \"complete + current\" (../closing.ts).\n  if (owed.length > 0) console.log(\"\");\n  for (const line of owed) console.log(line);\n  console.log(\"\\n  dry run — nothing was written.\");\n}\n"]}

package/dist/commands/archive/plan/specs.js

@@ -2,7 +2,10 @@
  * The requirements merge: the feature's ADDED/MODIFIED/REMOVED requirements
  * applied into each living service spec. The contract merges live beside it in
  * `./contracts/` — one file per axis, split out when the OpenAPI half made
- * this one carry two merges.
+ * this one carry two merges. What happens to the TEXT of one document lives in
+ * `./document/`: the in-place rewrite of an existing requirements run, the
+ * head of a document this merge creates, and where a merged link points once
+ * the feature has moved.
  *
  * ONE code path for the pair of requirement-carrying files — the business
  * spec.md and the architecture arch.spec.md ride the same delta algebra, the
@@ -19,16 +22,29 @@ import { planWrite, readUtf8 } from "../../../core/staging/writes.js";
 import { featureSpecPaths, SPEC_AXES } from "../../../core/repo/paths.js";
 import { capabilityDocsDir, glossaryDir, livingCapabilityPaths } from "../../../core/repo/authored/paths.js";
 import { featureGlossary, livingTermPath } from "../../../core/glossary/delta.js";
-import { locateServicePaths } from "../../../core/repo/service-target.js";
-import { isRequirementsHeading, parseRequirements, sectionHeadings, splitRequirementsSection, } from "../../../core/document/parse.js";
-import { applyRequirementDelta } from "../../../core/document/apply.js";
-import { serializeRequirements } from "../../../core/document/spec.js";
+import { enumeratedServiceIds, locateServicePaths } from "../../../core/repo/service-target.js";
+import { introducedServices } from "../../../core/projection/arch-slice.js";
+import { isRequirementsHeading, parseRequirements, sectionHeadings } from "../../../core/document/parse.js";
+import { applyRequirementDelta, droppedBy, droppedSentence } from "../../../core/document/apply.js";
 import {} from "../../../core/document/spec.js";
-import { ArchiveFailure } from "./refusal.js";
+import { movedUnderVouch, parseFrontmatter, stringField } from "../../../core/document/frontmatter.js";
+import { CodedFailure } from "../../../core/envelope/json.js";
 import {} from "./state.js";
+import { featureRetarget } from "./document/links.js";
+import { createdDocument, hasPurpose } from "./document/head.js";
+import { rewriteRequirementsRun } from "./document/run.js";
 export async function planSpecs(config, gated, plan, say) {
     const { featureDir, deltaServices } = gated;
     const { writes } = plan;
+    // Where every file of the feature will be once this archive lands — the
+    // glossary terms it copies out, everything else under features/archive/.
+    const retarget = await featureRetarget(config.docsDir, gated);
+    // Who the fleet already has, asked BEFORE any of this archive's writes, and
+    // which of them this feature's own C4 delta introduces: a first spec.md for a
+    // service that existed and was never adopted is the feature's slice, not the
+    // service, and the create branch below says so in its frontmatter.
+    const existing = new Set(await enumeratedServiceIds(config.docsDir, config.fleet));
+    const introduced = new Set(introducedServices(gated.deltaDoc ?? null, gated.id));
     // Requirements merge — apply ADDED/MODIFIED/REMOVED into each living service
     // spec. ONE code path for the pair of requirement-carrying files: the business
     // spec.md and the architecture arch.spec.md ride the same delta algebra, the
@@ -48,19 +64,43 @@ export async function planSpecs(config, gated, plan, say) {
             // `core/links/parse.ts`'s `rebaseLinks` states the defect; the ordering
             // here is what lets the fix see both ends of the move, including a
             // service filed under a subsystem, whose living directory is deeper still.
-            const deltaReqs = parseRequirements(rebaseLinks(await readUtf8(deltaPath), { from: dirname(deltaPath), to: dirname(livingPath) }));
+            // `retarget` is the other half: a link INTO the feature points at a file
+            // this same archive moves (`./document/links.ts`).
+            const delta = rebaseLinks(await readUtf8(deltaPath), { from: dirname(deltaPath), to: dirname(livingPath), retarget });
+            const deltaReqs = parseRequirements(delta);
             if (!existsSync(livingPath)) {
                 // New service (or first arch spec) — create the living file from the
-                // ADDED/MODIFIED requirements.
+                // ADDED/MODIFIED requirements, under the head `./document/head.ts` writes:
+                // what the delta marked as the document's own, and a link to the rest.
                 const created = applyRequirementDelta([], deltaReqs);
                 if (created.length === 0) {
                     say(`  ${axis.label}: ${svc} — nothing to merge (delta leaves no requirements), no living ${axis.file} created`);
                     continue;
                 }
-                const heading = axis.key === "spec" ? svc : `${svc} — architecture`;
-                const frontmatter = `---\nservice: ${svc}\nstatus: draft\n---\n\n# ${heading}\n\n`;
-                writes.push(planWrite(livingPath, `${frontmatter}## Requirements\n\n${serializeRequirements(created)}`));
+                // The business spec only: it is the document the maturity ladder and
+                // `next.adopt` read as "this service is written down" (SCHEMA.md,
+                // `adoption`). A service the feature introduces IS its slice — there was
+                // nothing before it to adopt — so it is never marked.
+                const unadopted = axis.key === "spec" && existing.has(svc) && !introduced.has(svc);
+                const doc = createdDocument({
+                    docsDir: config.docsDir,
+                    featureId: gated.id,
+                    deltaPath,
+                    delta,
+                    livingPath,
+                    retarget,
+                    fallbackTitle: axis.key === "spec" ? svc : `${svc} — architecture`,
+                    service: svc,
+                    ...(unadopted ? { adoption: "partial" } : {}),
+                    requirements: created,
+                });
+                writes.push(planWrite(livingPath, doc.text));
                 say(`  ${axis.label}: ${svc} — created living ${axis.file} (${created.length} requirement(s))`);
+                say(`      ${doc.note}`);
+                if (unadopted) {
+                    say(`      ${svc} existed before ${gated.id} and was never adopted — this spec.md holds only the feature's slice, so it is ` +
+                        `written \`adoption: partial\` and ${svc} stays owed its adoption: \`loam adopt --service ${svc}\`, then delete the line`);
+                }
                 continue;
             }
             const livingText = await readUtf8(livingPath);
@@ -71,23 +111,47 @@ export async function planSpecs(config, gated, plan, say) {
             // Mechanical, like a model-less landscape, so merge-failed, not --approve.
             const reqHeadings = sectionHeadings(livingText).filter((h) => isRequirementsHeading(h.text));
             if (reqHeadings.length > 1) {
-                throw new ArchiveFailure("merge-failed", `living ${axis.file} for ${svc} has ${reqHeadings.length} '## Requirements' headings (lines ${reqHeadings.map((h) => h.line).join(", ")}) — the merge rewrites ONE requirements section and cannot choose; merge them into one, then re-run`);
+                throw new CodedFailure("merge-failed", `living ${axis.file} for ${svc} has ${reqHeadings.length} '## Requirements' headings (lines ${reqHeadings.map((h) => h.line).join(", ")}) — the merge rewrites ONE requirements section and cannot choose; merge them into one, then re-run`);
+            }
+            const livingReqs = parseRequirements(livingText);
+            const merged = applyRequirementDelta(livingReqs, deltaReqs);
+            const next = rewriteRequirementsRun(livingText, livingReqs, merged);
+            writes.push(planWrite(livingPath, next));
+            // A merge is an edit to the document's body like any other, so a vouched
+            // spec it moves goes `content.stale` — and honestly: the merged text is
+            // words no person has yet read against the code. Archive does not soften
+            // that. It names the document and its owner, so the re-vouch is known to
+            // be owed while the merge is still a PR rather than discovered later as a
+            // red `--strict` gate. Asked of the bytes about to be written, through the
+            // one definition validate grades with.
+            const fm = parseFrontmatter(next);
+            if (movedUnderVouch(fm, next)) {
+                plan.revouchOwed.push({ service: svc, path: livingPath, owner: stringField(fm, "owner") ?? null });
             }
-            const merged = applyRequirementDelta(parseRequirements(livingText), deltaReqs);
-            writes.push(planWrite(livingPath, rewriteRequirementsRun(livingText, merged)));
             const c = summarize(deltaReqs);
             say(`  ${axis.label}: ${svc} ← +${c.ADDED} ~${c.MODIFIED} -${c.REMOVED} (now ${merged.length} total)`);
+            sayDropped(plan, say, livingPath, droppedBy(livingReqs, deltaReqs));
+            if (hasPurpose(delta))
+                say(`      ${PURPOSE_NOT_MERGED}`);
         }
     }
 }
+/**
+ * A `## Purpose` in a delta against a document that already exists merges as
+ * nothing — the living narrative is edited in place, never replaced by a merge
+ * — and the author who wrote one expected it to land. Said, not refused: the
+ * requirements are still exactly what they meant.
+ */
+const PURPOSE_NOT_MERGED = "the delta's ## Purpose was not merged — the living document keeps its own narrative; edit it there in this change";
 /**
  * The BUSINESS corpus's merge: a feature's `capabilities/<id>/spec.md` deltas
  * applied into the living `capabilities/<id>/spec.md`.
  *
  * Here rather than in a sixth file in this package because this module already
- * owns "requirements merged into a living document" — it owns
- * `rewriteRequirementsRun`, the two-headings refusal and the `applyRequirementDelta`
- * call, and the business corpus needs all three unchanged. What differs from
+ * owns "requirements merged into a living document" — it owns the two-headings
+ * refusal and the `applyRequirementDelta` call, and calls the same
+ * `./document/` rewrite and head, and the business corpus needs all of them
+ * unchanged. What differs from
  * `planSpecs` above is only where the living document lives and what a CREATED
  * one says at the top.
  *
@@ -118,25 +182,42 @@ export async function planCapabilities(config, gated, plan, say) {
     // run whose every capability delta merged into a document already there.
     const adopting = !existsSync(capabilityDocsDir(config.docsDir));
     let creating = false;
+    const retarget = await featureRetarget(config.docsDir, gated);
     for (const doc of gated.capabilityDeltas) {
         const livingPath = livingCapabilityPaths(config.docsDir, doc.id).spec;
         // Same move, same rewrite: `features/<FEAT>/capabilities/<id>/` is two
         // directories deeper than `capabilities/<id>/`, so a citation of a glossary
-        // term or an ADR would land pointing above the repository.
-        const deltaReqs = parseRequirements(rebaseLinks(await readUtf8(doc.spec), { from: dirname(doc.spec), to: dirname(livingPath) }));
+        // term or an ADR would land pointing above the repository — or, aimed into
+        // the feature itself, at a file this archive moves.
+        const delta = rebaseLinks(await readUtf8(doc.spec), { from: dirname(doc.spec), to: dirname(livingPath), retarget });
+        const deltaReqs = parseRequirements(delta);
         if (!existsSync(livingPath)) {
             const created = applyRequirementDelta([], deltaReqs);
             if (created.length === 0) {
                 say(`  capability: ${doc.id} — nothing to merge (delta leaves no requirements), no living spec.md created`);
                 continue;
             }
-            // The heading is the id and nothing else. loam merges requirements and
-            // never prose, so it must not fabricate the narrative that is the whole
-            // point of the document — the line below tells the author it is theirs.
-            writes.push(planWrite(livingPath, `# ${doc.id}\n\n## Requirements\n\n${serializeRequirements(created)}`));
+            // The heading is the id unless the delta titled the capability, and the
+            // narrative is the delta's `## Purpose` or nothing: loam merges
+            // requirements and never prose, so it must not fabricate the narrative
+            // that is the whole point of the document — it carries only what the
+            // author marked as the document's own (`./document/head.ts`), and the note
+            // below tells them where the rest is.
+            const living = createdDocument({
+                docsDir: config.docsDir,
+                featureId: gated.id,
+                deltaPath: doc.spec,
+                delta,
+                livingPath,
+                retarget,
+                fallbackTitle: doc.id,
+                service: null,
+                requirements: created,
+            });
+            writes.push(planWrite(livingPath, living.text));
             creating = true;
             say(`  capability: ${doc.id} — created capabilities/${doc.id}/spec.md (${created.length} requirement(s))`);
-            say(`      write the narrative above '## Requirements' — loam merges requirements, not prose`);
+            say(`      ${living.note}`);
             continue;
         }
         const livingText = await readUtf8(livingPath);
@@ -144,44 +225,35 @@ export async function planCapabilities(config, gated, plan, say) {
         // reason it cannot be guessed at.
         const reqHeadings = sectionHeadings(livingText).filter((h) => isRequirementsHeading(h.text));
         if (reqHeadings.length > 1) {
-            throw new ArchiveFailure("merge-failed", `living capabilities/${doc.id}/spec.md has ${reqHeadings.length} '## Requirements' headings (lines ${reqHeadings.map((h) => h.line).join(", ")}) — the merge rewrites ONE requirements section and cannot choose; merge them into one, then re-run`);
+            throw new CodedFailure("merge-failed", `living capabilities/${doc.id}/spec.md has ${reqHeadings.length} '## Requirements' headings (lines ${reqHeadings.map((h) => h.line).join(", ")}) — the merge rewrites ONE requirements section and cannot choose; merge them into one, then re-run`);
         }
-        const merged = applyRequirementDelta(parseRequirements(livingText), deltaReqs);
-        writes.push(planWrite(livingPath, rewriteRequirementsRun(livingText, merged)));
+        const livingReqs = parseRequirements(livingText);
+        const merged = applyRequirementDelta(livingReqs, deltaReqs);
+        writes.push(planWrite(livingPath, rewriteRequirementsRun(livingText, livingReqs, merged)));
         const c = summarize(deltaReqs);
         say(`  capability: ${doc.id} ← +${c.ADDED} ~${c.MODIFIED} -${c.REMOVED} (now ${merged.length} total)`);
+        sayDropped(plan, say, livingPath, droppedBy(livingReqs, deltaReqs));
+        if (hasPurpose(delta))
+            say(`      ${PURPOSE_NOT_MERGED}`);
     }
     if (adopting && creating) {
         say(`  capabilities/ did not exist — this archive opts the fleet into the business axis, and \`loam validate --all\` grades it from now on`);
     }
 }
 /**
- * Rewrite ONLY the requirements run of a living spec. Byte-for-byte preserved:
- * everything before the first requirement inside `## Requirements` (the intro,
- * the heading line, prose under the heading) and everything from the section's
- * end onward (the next `## ` heading to EOF) — the old cut was a substring
- * `indexOf("\n## Requirements")`, a prefix match that also hit
- * `## Requirements Extra` and silently destroyed every section after the
- * requirements. Prose BETWEEN requirements is body text of whatever is open
- * above it (parseRequirements attributes it to the previous requirement's last
- * scenario, or its text) and survives inside the re-serialized run, framing
- * normalized. `merged` must contain every living requirement — runArchive's
- * stray guard refuses any document whose requirements sit outside the section,
- * using the same heading definition, before this output is ever written.
+ * What each replacement takes out of the living document, named under the
+ * count line and carried as `--json` `dropped`. The counts alone were the whole
+ * report — `~1` — while a MODIFIED that restated one of two scenarios, or wrote
+ * `Covers:` without the `sli:` entries the living text had, merged at exit 0
+ * and the rest was gone (`core/document/apply.ts` says why it is read verbatim
+ * and by name). Said, never gated: rewriting a requirement smaller is a
+ * legitimate change, and what was missing was only that nobody was told.
  */
-function rewriteRequirementsRun(text, merged) {
-    const s = splitRequirementsSection(text);
-    // No `## Requirements` at all: the stray guard has already refused any doc
-    // whose requirements live elsewhere, so this one has none — open the section.
-    if (s === null)
-        return `${text.trimEnd()}\n\n## Requirements\n\n${serializeRequirements(merged)}`;
-    const body = serializeRequirements(merged);
-    // head/tail are raw slices; only the run's own framing is normalized. When
-    // the section held no requirements yet, the glue supplies the blank line the
-    // author never had reason to write.
-    const headGlue = s.run !== "" || s.head.endsWith("\n\n") ? "" : s.head.endsWith("\n") ? "\n" : "\n\n";
-    const tailGlue = s.tail === "" ? "" : "\n";
-    return s.head + headGlue + body + tailGlue + s.tail;
+function sayDropped(plan, say, path, rows) {
+    for (const row of rows) {
+        plan.dropped.push({ path, ...row });
+        say(`      ${row.kind === "REMOVED" ? "-" : "~"} ${droppedSentence(row)}`);
+    }
 }
 function summarize(reqs) {
     const c = { ADDED: 0, MODIFIED: 0, REMOVED: 0 };
@@ -203,9 +275,15 @@ function summarize(reqs) {
  * is folded into a living document by the requirement algebra because the two
  * documents share identified parts; a term document has one part, and merging
  * two definitions of one word is not something a machine may attempt. So the
- * definition the author wrote in the feature IS the definition that lands,
- * verbatim — loam re-encodes it as UTF-8 through `readUtf8` and changes nothing
- * else, not even the trailing newline.
+ * definition the author wrote in the feature IS the definition that lands —
+ * loam re-encodes it as UTF-8 through `readUtf8` and changes nothing else, not
+ * even the trailing newline, but the ROUTE of each relative link. That one
+ * exception is the requirement merge's, for the requirement merge's reason: the
+ * term moves from `features/<FEAT>/glossary/` to `glossary/`, two directories
+ * up, so a definition citing a service spec or the feature's own ADR landed
+ * pointing at nothing (`link.unresolved` on the very next `validate --all`,
+ * against a document graded at fleet scope). Same `rebaseLinks`, same
+ * `retarget`: the target is unchanged, only the way there.
  *
  * CREATE-ONLY, which is why this loop has no other branch. A term the living
  * glossary already defines was refused at the gate (`glossary.term-exists`,
@@ -226,8 +304,11 @@ export async function planGlossary(config, gated, plan, say) {
         return;
     // Asked BEFORE the loop, because the loop is what would create it.
     const adopting = !existsSync(glossaryDir(config.docsDir));
+    const retarget = await featureRetarget(config.docsDir, gated);
     for (const term of glossary.terms) {
-        plan.writes.push(planWrite(livingTermPath(config.docsDir, term.id), await readUtf8(term.path)));
+        const livingPath = livingTermPath(config.docsDir, term.id);
+        const text = rebaseLinks(await readUtf8(term.path), { from: dirname(term.path), to: dirname(livingPath), retarget });
+        plan.writes.push(planWrite(livingPath, text));
         say(`  glossary: ${term.id} — created glossary/${term.id}.md`);
     }
     if (adopting) {

package/dist/commands/archive/plan/specs.js.map

@@ -1 +1 @@
-{"version":3,"file":"specs.js","sourceRoot":"","sources":["../../../../src/commands/archive/plan/specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7G,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAoB,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAyB,MAAM,YAAY,CAAC;AAInD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAkD,EAClD,KAAY,EACZ,IAAU,EACV,GAA4B;IAE5B,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,0EAA0E;IAC1E,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,SAAS;YAErC,sEAAsE;YACtE,0DAA0D;YAC1D,MAAM,UAAU,GAAG,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3F,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,mEAAmE;YACnE,2EAA2E;YAC3E,MAAM,SAAS,GAAG,iBAAiB,CACjC,WAAW,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAC9F,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,qEAAqE;gBACrE,+BAA+B;gBAC/B,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;gBACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,GAAG,iEAAiE,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC;oBACjH,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,iBAAiB,CAAC;gBACpE,MAAM,WAAW,GAAG,iBAAiB,GAAG,6BAA6B,OAAO,MAAM,CAAC;gBACnF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,WAAW,sBAAsB,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzG,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,GAAG,qBAAqB,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,kBAAkB,CAAC,CAAC;gBAChG,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC9C,qEAAqE;YACrE,wEAAwE;YACxE,qEAAqE;YACrE,2EAA2E;YAC3E,2EAA2E;YAC3E,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,cAAc,CACtB,cAAc,EACd,UAAU,IAAI,CAAC,IAAI,QAAQ,GAAG,QAAQ,WAAW,CAAC,MAAM,sCAAsC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qGAAqG,CAC7O,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YAE/E,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;YAC/B,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAkD,EAClD,KAAY,EACZ,IAAU,EACV,GAA4B;IAE5B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;QACtE,uEAAuE;QACvE,4EAA4E;QAC5E,2DAA2D;QAC3D,MAAM,SAAS,GAAG,iBAAiB,CACjC,WAAW,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAC5F,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,+EAA+E,CAAC,CAAC;gBAC5G,SAAS;YACX,CAAC;YACD,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,GAAG,CAAC,EAAE,0BAA0B,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1G,QAAQ,GAAG,IAAI,CAAC;YAChB,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,2BAA2B,GAAG,CAAC,EAAE,aAAa,OAAO,CAAC,MAAM,kBAAkB,CAAC,CAAC;YAC3G,GAAG,CAAC,yFAAyF,CAAC,CAAC;YAC/F,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9C,yEAAyE;QACzE,kCAAkC;QAClC,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,cAAc,CACtB,cAAc,EACd,uBAAuB,GAAG,CAAC,EAAE,gBAAgB,WAAW,CAAC,MAAM,sCAAsC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qGAAqG,CACpP,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/B,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,GAAG,CAAC,uIAAuI,CAAC,CAAC;IAC/I,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,sBAAsB,CAAC,IAAY,EAAE,MAAqB;IACjE,MAAM,CAAC,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACzC,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,0BAA0B,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;IAClG,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC3C,2EAA2E;IAC3E,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACtG,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,OAAO,CAAC,CAAC,IAAI,GAAG,QAAQ,GAAG,IAAI,GAAG,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED,SAAS,SAAS,CAAC,IAAmB;IACpC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;aAChC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;aAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAA4B,EAC5B,KAAY,EACZ,IAAU,EACV,GAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC7D,mEAAmE;IACnE,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChG,GAAG,CAAC,eAAe,IAAI,CAAC,EAAE,uBAAuB,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,CAAC,uIAAuI,CAAC,CAAC;IAC/I,CAAC;AACH,CAAC","sourcesContent":["/**\n * The requirements merge: the feature's ADDED/MODIFIED/REMOVED requirements\n * applied into each living service spec. The contract merges live beside it in\n * `./contracts/` — one file per axis, split out when the OpenAPI half made\n * this one carry two merges.\n *\n * ONE code path for the pair of requirement-carrying files — the business\n * spec.md and the architecture arch.spec.md ride the same delta algebra, the\n * same prose-preserving rewrite and the same guards, parameterized by filename.\n * A fork here would be two places the merge could disagree.\n *\n * Nothing is written. Everything lands in the `Plan`, so a failure on any axis\n * leaves the living docs exactly as they were.\n */\nimport { existsSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\nimport { rebaseLinks } from \"../../../core/links/parse.js\";\nimport { planWrite, readUtf8 } from \"../../../core/staging/writes.js\";\nimport { featureSpecPaths, SPEC_AXES } from \"../../../core/repo/paths.js\";\nimport { capabilityDocsDir, glossaryDir, livingCapabilityPaths } from \"../../../core/repo/authored/paths.js\";\nimport { featureGlossary, livingTermPath } from \"../../../core/glossary/delta.js\";\nimport { locateServicePaths } from \"../../../core/repo/service-target.js\";\nimport {\n  isRequirementsHeading,\n  parseRequirements,\n  sectionHeadings,\n  splitRequirementsSection,\n} from \"../../../core/document/parse.js\";\nimport { applyRequirementDelta } from \"../../../core/document/apply.js\";\nimport { serializeRequirements } from \"../../../core/document/spec.js\";\nimport { type Requirement } from \"../../../core/document/spec.js\";\nimport { ArchiveFailure } from \"./refusal.js\";\nimport { type Gated, type Plan } from \"./state.js\";\nimport type { DocsDir } from \"../../../core/kernel/ids/dirs.js\";\nimport type { FleetContext } from \"../../../core/fleet-context.js\";\n\nexport async function planSpecs(\n  config: { docsDir: DocsDir; fleet?: FleetContext },\n  gated: Gated,\n  plan: Plan,\n  say: (line?: string) => void,\n): Promise<void> {\n  const { featureDir, deltaServices } = gated;\n  const { writes } = plan;\n  // Requirements merge — apply ADDED/MODIFIED/REMOVED into each living service\n  // spec. ONE code path for the pair of requirement-carrying files: the business\n  // spec.md and the architecture arch.spec.md ride the same delta algebra, the\n  // same prose-preserving rewrite and the same guards, parameterized by filename\n  // (SPEC_AXES) — a fork here would be two places the merge could disagree.\n  for (const svc of deltaServices) {\n    for (const axis of SPEC_AXES) {\n      const deltaPath = featureSpecPaths(featureDir, svc)[axis.key];\n      if (!existsSync(deltaPath)) continue;\n\n      // The shared context: this is a deltaServices × SPEC_AXES loop, and a\n      // context-less locate is a full fleet walk per iteration.\n      const livingPath = (await locateServicePaths(config.docsDir, svc, config.fleet))[axis.key];\n      // Resolved BEFORE the delta is parsed, because the parse now depends on\n      // it: a requirement's markdown links are relative to the file they were\n      // written in, and this merge moves the text two directories up the tree.\n      // `core/links/parse.ts`'s `rebaseLinks` states the defect; the ordering\n      // here is what lets the fix see both ends of the move, including a\n      // service filed under a subsystem, whose living directory is deeper still.\n      const deltaReqs = parseRequirements(\n        rebaseLinks(await readUtf8(deltaPath), { from: dirname(deltaPath), to: dirname(livingPath) }),\n      );\n      if (!existsSync(livingPath)) {\n        // New service (or first arch spec) — create the living file from the\n        // ADDED/MODIFIED requirements.\n        const created = applyRequirementDelta([], deltaReqs);\n        if (created.length === 0) {\n          say(`  ${axis.label}: ${svc} — nothing to merge (delta leaves no requirements), no living ${axis.file} created`);\n          continue;\n        }\n        const heading = axis.key === \"spec\" ? svc : `${svc} — architecture`;\n        const frontmatter = `---\\nservice: ${svc}\\nstatus: draft\\n---\\n\\n# ${heading}\\n\\n`;\n        writes.push(planWrite(livingPath, `${frontmatter}## Requirements\\n\\n${serializeRequirements(created)}`));\n        say(`  ${axis.label}: ${svc} — created living ${axis.file} (${created.length} requirement(s))`);\n        continue;\n      }\n      const livingText = await readUtf8(livingPath);\n      // TWO `## Requirements` headings would put the rewrite's one-section\n      // invariant to a choice it must not make: the run of the first would be\n      // rewritten while the second survived verbatim in the tail — and its\n      // requirements, collected by parseRequirements, would land in the run TOO.\n      // Mechanical, like a model-less landscape, so merge-failed, not --approve.\n      const reqHeadings = sectionHeadings(livingText).filter((h) => isRequirementsHeading(h.text));\n      if (reqHeadings.length > 1) {\n        throw new ArchiveFailure(\n          \"merge-failed\",\n          `living ${axis.file} for ${svc} has ${reqHeadings.length} '## Requirements' headings (lines ${reqHeadings.map((h) => h.line).join(\", \")}) — the merge rewrites ONE requirements section and cannot choose; merge them into one, then re-run`,\n        );\n      }\n      const merged = applyRequirementDelta(parseRequirements(livingText), deltaReqs);\n      writes.push(planWrite(livingPath, rewriteRequirementsRun(livingText, merged)));\n\n      const c = summarize(deltaReqs);\n      say(`  ${axis.label}: ${svc} ← +${c.ADDED} ~${c.MODIFIED} -${c.REMOVED} (now ${merged.length} total)`);\n    }\n  }\n}\n\n/**\n * The BUSINESS corpus's merge: a feature's `capabilities/<id>/spec.md` deltas\n * applied into the living `capabilities/<id>/spec.md`.\n *\n * Here rather than in a sixth file in this package because this module already\n * owns \"requirements merged into a living document\" — it owns\n * `rewriteRequirementsRun`, the two-headings refusal and the `applyRequirementDelta`\n * call, and the business corpus needs all three unchanged. What differs from\n * `planSpecs` above is only where the living document lives and what a CREATED\n * one says at the top.\n *\n * ARCHIVE CREATES THE LIVING DOCUMENT, by exact analogy with the new-service\n * branch above. The directory IS the list on this axis (`core/capabilities/tree.ts`),\n * so an archive that merged into a file it refused to create would make the\n * whole delta merge nothing — which is the `delta.no-delta-sections` failure\n * class, arriving through the merge instead of through the grammar.\n *\n * NO FRONTMATTER on a created capability document, and that is a decision\n * rather than an omission. Nothing reads a capability document's frontmatter:\n * `readCapabilityTree` classifies by the file's PRESENCE and\n * `readCapabilityVocabulary` takes `description`/`owner` from the YAML side. A\n * `status:` field invented here would be the \"second list nothing keeps\n * current\" this axis was designed against.\n *\n * AND IT SAYS SO OUT LOUD. Creating the first `capabilities/<id>/spec.md`\n * creates `capabilities/`, which is one of the two ways a fleet opts INTO the\n * capability axis — from the next command on, `loam validate --all` grades a\n * corpus that did not exist before. A merge that changes what the whole fleet\n * is graded on must not do it silently.\n */\nexport async function planCapabilities(\n  config: { docsDir: DocsDir; fleet?: FleetContext },\n  gated: Gated,\n  plan: Plan,\n  say: (line?: string) => void,\n): Promise<void> {\n  const { writes } = plan;\n  // Whether `capabilities/` exists is asked BEFORE the loop, because the loop\n  // is what would create it; `creating` records whether this run actually\n  // materialises a document, so the adoption line below is not printed by a\n  // run whose every capability delta merged into a document already there.\n  const adopting = !existsSync(capabilityDocsDir(config.docsDir));\n  let creating = false;\n  for (const doc of gated.capabilityDeltas) {\n    const livingPath = livingCapabilityPaths(config.docsDir, doc.id).spec;\n    // Same move, same rewrite: `features/<FEAT>/capabilities/<id>/` is two\n    // directories deeper than `capabilities/<id>/`, so a citation of a glossary\n    // term or an ADR would land pointing above the repository.\n    const deltaReqs = parseRequirements(\n      rebaseLinks(await readUtf8(doc.spec), { from: dirname(doc.spec), to: dirname(livingPath) }),\n    );\n    if (!existsSync(livingPath)) {\n      const created = applyRequirementDelta([], deltaReqs);\n      if (created.length === 0) {\n        say(`  capability: ${doc.id} — nothing to merge (delta leaves no requirements), no living spec.md created`);\n        continue;\n      }\n      // The heading is the id and nothing else. loam merges requirements and\n      // never prose, so it must not fabricate the narrative that is the whole\n      // point of the document — the line below tells the author it is theirs.\n      writes.push(planWrite(livingPath, `# ${doc.id}\\n\\n## Requirements\\n\\n${serializeRequirements(created)}`));\n      creating = true;\n      say(`  capability: ${doc.id} — created capabilities/${doc.id}/spec.md (${created.length} requirement(s))`);\n      say(`      write the narrative above '## Requirements' — loam merges requirements, not prose`);\n      continue;\n    }\n    const livingText = await readUtf8(livingPath);\n    // The same one-section invariant as the service axis above, and the same\n    // reason it cannot be guessed at.\n    const reqHeadings = sectionHeadings(livingText).filter((h) => isRequirementsHeading(h.text));\n    if (reqHeadings.length > 1) {\n      throw new ArchiveFailure(\n        \"merge-failed\",\n        `living capabilities/${doc.id}/spec.md has ${reqHeadings.length} '## Requirements' headings (lines ${reqHeadings.map((h) => h.line).join(\", \")}) — the merge rewrites ONE requirements section and cannot choose; merge them into one, then re-run`,\n      );\n    }\n    const merged = applyRequirementDelta(parseRequirements(livingText), deltaReqs);\n    writes.push(planWrite(livingPath, rewriteRequirementsRun(livingText, merged)));\n    const c = summarize(deltaReqs);\n    say(`  capability: ${doc.id} ← +${c.ADDED} ~${c.MODIFIED} -${c.REMOVED} (now ${merged.length} total)`);\n  }\n  if (adopting && creating) {\n    say(`  capabilities/ did not exist — this archive opts the fleet into the business axis, and \\`loam validate --all\\` grades it from now on`);\n  }\n}\n\n/**\n * Rewrite ONLY the requirements run of a living spec. Byte-for-byte preserved:\n * everything before the first requirement inside `## Requirements` (the intro,\n * the heading line, prose under the heading) and everything from the section's\n * end onward (the next `## ` heading to EOF) — the old cut was a substring\n * `indexOf(\"\\n## Requirements\")`, a prefix match that also hit\n * `## Requirements Extra` and silently destroyed every section after the\n * requirements. Prose BETWEEN requirements is body text of whatever is open\n * above it (parseRequirements attributes it to the previous requirement's last\n * scenario, or its text) and survives inside the re-serialized run, framing\n * normalized. `merged` must contain every living requirement — runArchive's\n * stray guard refuses any document whose requirements sit outside the section,\n * using the same heading definition, before this output is ever written.\n */\nfunction rewriteRequirementsRun(text: string, merged: Requirement[]): string {\n  const s = splitRequirementsSection(text);\n  // No `## Requirements` at all: the stray guard has already refused any doc\n  // whose requirements live elsewhere, so this one has none — open the section.\n  if (s === null) return `${text.trimEnd()}\\n\\n## Requirements\\n\\n${serializeRequirements(merged)}`;\n  const body = serializeRequirements(merged);\n  // head/tail are raw slices; only the run's own framing is normalized. When\n  // the section held no requirements yet, the glue supplies the blank line the\n  // author never had reason to write.\n  const headGlue = s.run !== \"\" || s.head.endsWith(\"\\n\\n\") ? \"\" : s.head.endsWith(\"\\n\") ? \"\\n\" : \"\\n\\n\";\n  const tailGlue = s.tail === \"\" ? \"\" : \"\\n\";\n  return s.head + headGlue + body + tailGlue + s.tail;\n}\n\nfunction summarize(reqs: Requirement[]): { ADDED: number; MODIFIED: number; REMOVED: number } {\n  const c = { ADDED: 0, MODIFIED: 0, REMOVED: 0 };\n  for (const r of reqs) {\n    if (r.kind === \"ADDED\") c.ADDED += 1;\n    else if (r.kind === \"MODIFIED\") c.MODIFIED += 1;\n    else if (r.kind === \"REMOVED\") c.REMOVED += 1;\n  }\n  return c;\n}\n\n/**\n * The vocabulary merge: each `features/<FEAT>/glossary/<term>.md` copied to\n * `glossary/<term>.md`.\n *\n * A WHOLE-FILE COPY, and there is nothing else it could be. A capability delta\n * is folded into a living document by the requirement algebra because the two\n * documents share identified parts; a term document has one part, and merging\n * two definitions of one word is not something a machine may attempt. So the\n * definition the author wrote in the feature IS the definition that lands,\n * verbatim — loam re-encodes it as UTF-8 through `readUtf8` and changes nothing\n * else, not even the trailing newline.\n *\n * CREATE-ONLY, which is why this loop has no other branch. A term the living\n * glossary already defines was refused at the gate (`glossary.term-exists`,\n * `core/glossary/delta.ts` has the reasoning), so by the time the plan runs\n * every path here is a file that does not exist. `planWrite` marks it\n * `exclusive`, so a race that created it between the gate and the commit fails\n * the write rather than overwriting somebody.\n *\n * AND IT SAYS SO OUT LOUD when it creates `glossary/`, exactly as\n * `planCapabilities` does for `capabilities/`: the directory's existence is the\n * axis's opt-in, so this merge changes what `loam validate --all` grades from\n * the next command on, and a merge that widens the fleet's own gate must not do\n * it silently.\n */\nexport async function planGlossary(\n  config: { docsDir: DocsDir },\n  gated: Gated,\n  plan: Plan,\n  say: (line?: string) => void,\n): Promise<void> {\n  const glossary = await featureGlossary(gated.featureDir);\n  if (!glossary.present || glossary.terms.length === 0) return;\n  // Asked BEFORE the loop, because the loop is what would create it.\n  const adopting = !existsSync(glossaryDir(config.docsDir));\n  for (const term of glossary.terms) {\n    plan.writes.push(planWrite(livingTermPath(config.docsDir, term.id), await readUtf8(term.path)));\n    say(`  glossary: ${term.id} — created glossary/${term.id}.md`);\n  }\n  if (adopting) {\n    say(`  glossary/ did not exist — this archive opts the fleet into the domain vocabulary, and \\`loam validate --all\\` grades it from now on`);\n  }\n}\n"]}
+{"version":3,"file":"specs.js","sourceRoot":"","sources":["../../../../src/commands/archive/plan/specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7G,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,eAAe,EAAmB,MAAM,iCAAiC,CAAC;AACrH,OAAO,EAAoB,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACvG,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAyB,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAI3D,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAiD,EACjD,KAAY,EACZ,IAAU,EACV,GAA4B;IAE5B,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9D,4EAA4E;IAC5E,8EAA8E;IAC9E,6EAA6E;IAC7E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,MAAM,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACjF,6EAA6E;IAC7E,+EAA+E;IAC/E,6EAA6E;IAC7E,+EAA+E;IAC/E,0EAA0E;IAC1E,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,SAAS;YAErC,sEAAsE;YACtE,0DAA0D;YAC1D,MAAM,UAAU,GAAG,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3F,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,mEAAmE;YACnE,2EAA2E;YAC3E,yEAAyE;YACzE,mDAAmD;YACnD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtH,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,qEAAqE;gBACrE,2EAA2E;gBAC3E,uEAAuE;gBACvE,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;gBACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,GAAG,iEAAiE,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC;oBACjH,SAAS;gBACX,CAAC;gBACD,qEAAqE;gBACrE,kEAAkE;gBAClE,yEAAyE;gBACzE,sDAAsD;gBACtD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,KAAK,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACnF,MAAM,GAAG,GAAG,eAAe,CAAC;oBAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,SAAS,EAAE,KAAK,CAAC,EAAE;oBACnB,SAAS;oBACT,KAAK;oBACL,UAAU;oBACV,QAAQ;oBACR,aAAa,EAAE,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,iBAAiB;oBAClE,OAAO,EAAE,GAAG;oBACZ,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,YAAY,EAAE,OAAO;iBACtB,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7C,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,GAAG,qBAAqB,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,kBAAkB,CAAC,CAAC;gBAChG,GAAG,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzB,IAAI,SAAS,EAAE,CAAC;oBACd,GAAG,CACD,SAAS,GAAG,mBAAmB,KAAK,CAAC,EAAE,iFAAiF;wBACtH,qCAAqC,GAAG,oDAAoD,GAAG,0BAA0B,CAC5H,CAAC;gBACJ,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC9C,qEAAqE;YACrE,wEAAwE;YACxE,qEAAqE;YACrE,2EAA2E;YAC3E,2EAA2E;YAC3E,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,YAAY,CACpB,cAAc,EACd,UAAU,IAAI,CAAC,IAAI,QAAQ,GAAG,QAAQ,WAAW,CAAC,MAAM,sCAAsC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qGAAqG,CAC7O,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,sBAAsB,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YACpE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YACzC,yEAAyE;YACzE,wEAAwE;YACxE,yEAAyE;YACzE,yEAAyE;YACzE,0EAA0E;YAC1E,2EAA2E;YAC3E,uCAAuC;YACvC,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YACrG,CAAC;YAED,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;YAC/B,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,KAAK,GAAG,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;YACvG,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;YACpE,IAAI,UAAU,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,kBAAkB,GACtB,mHAAmH,CAAC;AAEtH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAiD,EACjD,KAAY,EACZ,IAAU,EACV,GAA4B;IAE5B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;QACtE,uEAAuE;QACvE,4EAA4E;QAC5E,2EAA2E;QAC3E,oDAAoD;QACpD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpH,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,+EAA+E,CAAC,CAAC;gBAC5G,SAAS;YACX,CAAC;YACD,wEAAwE;YACxE,gEAAgE;YAChE,uEAAuE;YACvE,qEAAqE;YACrE,2EAA2E;YAC3E,sCAAsC;YACtC,MAAM,MAAM,GAAG,eAAe,CAAC;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,KAAK,CAAC,EAAE;gBACnB,SAAS,EAAE,GAAG,CAAC,IAAI;gBACnB,KAAK;gBACL,UAAU;gBACV,QAAQ;gBACR,aAAa,EAAE,GAAG,CAAC,EAAE;gBACrB,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,OAAO;aACtB,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAChD,QAAQ,GAAG,IAAI,CAAC;YAChB,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,2BAA2B,GAAG,CAAC,EAAE,aAAa,OAAO,CAAC,MAAM,kBAAkB,CAAC,CAAC;YAC3G,GAAG,CAAC,SAAS,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9C,yEAAyE;QACzE,kCAAkC;QAClC,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,YAAY,CACpB,cAAc,EACd,uBAAuB,GAAG,CAAC,EAAE,gBAAgB,WAAW,CAAC,MAAM,sCAAsC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,qGAAqG,CACpP,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/B,GAAG,CAAC,iBAAiB,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;QACvG,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;QACpE,IAAI,UAAU,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;QACzB,GAAG,CAAC,uIAAuI,CAAC,CAAC;IAC/I,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,IAAU,EAAE,GAA4B,EAAE,IAAY,EAAE,IAAkB;IAC5F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QACpC,GAAG,CAAC,SAAS,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAmB;IACpC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;aAChC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;aAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAA4B,EAC5B,KAAY,EACZ,IAAU,EACV,GAA4B;IAE5B,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC7D,mEAAmE;IACnE,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,eAAe,IAAI,CAAC,EAAE,uBAAuB,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,CAAC,uIAAuI,CAAC,CAAC;IAC/I,CAAC;AACH,CAAC","sourcesContent":["/**\n * The requirements merge: the feature's ADDED/MODIFIED/REMOVED requirements\n * applied into each living service spec. The contract merges live beside it in\n * `./contracts/` — one file per axis, split out when the OpenAPI half made\n * this one carry two merges. What happens to the TEXT of one document lives in\n * `./document/`: the in-place rewrite of an existing requirements run, the\n * head of a document this merge creates, and where a merged link points once\n * the feature has moved.\n *\n * ONE code path for the pair of requirement-carrying files — the business\n * spec.md and the architecture arch.spec.md ride the same delta algebra, the\n * same prose-preserving rewrite and the same guards, parameterized by filename.\n * A fork here would be two places the merge could disagree.\n *\n * Nothing is written. Everything lands in the `Plan`, so a failure on any axis\n * leaves the living docs exactly as they were.\n */\nimport { existsSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\nimport { rebaseLinks } from \"../../../core/links/parse.js\";\nimport { planWrite, readUtf8 } from \"../../../core/staging/writes.js\";\nimport { featureSpecPaths, SPEC_AXES } from \"../../../core/repo/paths.js\";\nimport { capabilityDocsDir, glossaryDir, livingCapabilityPaths } from \"../../../core/repo/authored/paths.js\";\nimport { featureGlossary, livingTermPath } from \"../../../core/glossary/delta.js\";\nimport { enumeratedServiceIds, locateServicePaths } from \"../../../core/repo/service-target.js\";\nimport { introducedServices } from \"../../../core/projection/arch-slice.js\";\nimport { isRequirementsHeading, parseRequirements, sectionHeadings } from \"../../../core/document/parse.js\";\nimport { applyRequirementDelta, droppedBy, droppedSentence, type DroppedRow } from \"../../../core/document/apply.js\";\nimport { type Requirement } from \"../../../core/document/spec.js\";\nimport { movedUnderVouch, parseFrontmatter, stringField } from \"../../../core/document/frontmatter.js\";\nimport { CodedFailure } from \"../../../core/envelope/json.js\";\nimport { type Gated, type Plan } from \"./state.js\";\nimport { featureRetarget } from \"./document/links.js\";\nimport { createdDocument, hasPurpose } from \"./document/head.js\";\nimport { rewriteRequirementsRun } from \"./document/run.js\";\nimport type { DocsDir } from \"../../../core/kernel/ids/dirs.js\";\nimport type { FleetContext } from \"../../../core/fleet-context.js\";\n\nexport async function planSpecs(\n  config: { docsDir: DocsDir; fleet: FleetContext },\n  gated: Gated,\n  plan: Plan,\n  say: (line?: string) => void,\n): Promise<void> {\n  const { featureDir, deltaServices } = gated;\n  const { writes } = plan;\n  // Where every file of the feature will be once this archive lands — the\n  // glossary terms it copies out, everything else under features/archive/.\n  const retarget = await featureRetarget(config.docsDir, gated);\n  // Who the fleet already has, asked BEFORE any of this archive's writes, and\n  // which of them this feature's own C4 delta introduces: a first spec.md for a\n  // service that existed and was never adopted is the feature's slice, not the\n  // service, and the create branch below says so in its frontmatter.\n  const existing = new Set<string>(await enumeratedServiceIds(config.docsDir, config.fleet));\n  const introduced = new Set(introducedServices(gated.deltaDoc ?? null, gated.id));\n  // Requirements merge — apply ADDED/MODIFIED/REMOVED into each living service\n  // spec. ONE code path for the pair of requirement-carrying files: the business\n  // spec.md and the architecture arch.spec.md ride the same delta algebra, the\n  // same prose-preserving rewrite and the same guards, parameterized by filename\n  // (SPEC_AXES) — a fork here would be two places the merge could disagree.\n  for (const svc of deltaServices) {\n    for (const axis of SPEC_AXES) {\n      const deltaPath = featureSpecPaths(featureDir, svc)[axis.key];\n      if (!existsSync(deltaPath)) continue;\n\n      // The shared context: this is a deltaServices × SPEC_AXES loop, and a\n      // context-less locate is a full fleet walk per iteration.\n      const livingPath = (await locateServicePaths(config.docsDir, svc, config.fleet))[axis.key];\n      // Resolved BEFORE the delta is parsed, because the parse now depends on\n      // it: a requirement's markdown links are relative to the file they were\n      // written in, and this merge moves the text two directories up the tree.\n      // `core/links/parse.ts`'s `rebaseLinks` states the defect; the ordering\n      // here is what lets the fix see both ends of the move, including a\n      // service filed under a subsystem, whose living directory is deeper still.\n      // `retarget` is the other half: a link INTO the feature points at a file\n      // this same archive moves (`./document/links.ts`).\n      const delta = rebaseLinks(await readUtf8(deltaPath), { from: dirname(deltaPath), to: dirname(livingPath), retarget });\n      const deltaReqs = parseRequirements(delta);\n      if (!existsSync(livingPath)) {\n        // New service (or first arch spec) — create the living file from the\n        // ADDED/MODIFIED requirements, under the head `./document/head.ts` writes:\n        // what the delta marked as the document's own, and a link to the rest.\n        const created = applyRequirementDelta([], deltaReqs);\n        if (created.length === 0) {\n          say(`  ${axis.label}: ${svc} — nothing to merge (delta leaves no requirements), no living ${axis.file} created`);\n          continue;\n        }\n        // The business spec only: it is the document the maturity ladder and\n        // `next.adopt` read as \"this service is written down\" (SCHEMA.md,\n        // `adoption`). A service the feature introduces IS its slice — there was\n        // nothing before it to adopt — so it is never marked.\n        const unadopted = axis.key === \"spec\" && existing.has(svc) && !introduced.has(svc);\n        const doc = createdDocument({\n          docsDir: config.docsDir,\n          featureId: gated.id,\n          deltaPath,\n          delta,\n          livingPath,\n          retarget,\n          fallbackTitle: axis.key === \"spec\" ? svc : `${svc} — architecture`,\n          service: svc,\n          ...(unadopted ? { adoption: \"partial\" as const } : {}),\n          requirements: created,\n        });\n        writes.push(planWrite(livingPath, doc.text));\n        say(`  ${axis.label}: ${svc} — created living ${axis.file} (${created.length} requirement(s))`);\n        say(`      ${doc.note}`);\n        if (unadopted) {\n          say(\n            `      ${svc} existed before ${gated.id} and was never adopted — this spec.md holds only the feature's slice, so it is ` +\n              `written \\`adoption: partial\\` and ${svc} stays owed its adoption: \\`loam adopt --service ${svc}\\`, then delete the line`,\n          );\n        }\n        continue;\n      }\n      const livingText = await readUtf8(livingPath);\n      // TWO `## Requirements` headings would put the rewrite's one-section\n      // invariant to a choice it must not make: the run of the first would be\n      // rewritten while the second survived verbatim in the tail — and its\n      // requirements, collected by parseRequirements, would land in the run TOO.\n      // Mechanical, like a model-less landscape, so merge-failed, not --approve.\n      const reqHeadings = sectionHeadings(livingText).filter((h) => isRequirementsHeading(h.text));\n      if (reqHeadings.length > 1) {\n        throw new CodedFailure(\n          \"merge-failed\",\n          `living ${axis.file} for ${svc} has ${reqHeadings.length} '## Requirements' headings (lines ${reqHeadings.map((h) => h.line).join(\", \")}) — the merge rewrites ONE requirements section and cannot choose; merge them into one, then re-run`,\n        );\n      }\n      const livingReqs = parseRequirements(livingText);\n      const merged = applyRequirementDelta(livingReqs, deltaReqs);\n      const next = rewriteRequirementsRun(livingText, livingReqs, merged);\n      writes.push(planWrite(livingPath, next));\n      // A merge is an edit to the document's body like any other, so a vouched\n      // spec it moves goes `content.stale` — and honestly: the merged text is\n      // words no person has yet read against the code. Archive does not soften\n      // that. It names the document and its owner, so the re-vouch is known to\n      // be owed while the merge is still a PR rather than discovered later as a\n      // red `--strict` gate. Asked of the bytes about to be written, through the\n      // one definition validate grades with.\n      const fm = parseFrontmatter(next);\n      if (movedUnderVouch(fm, next)) {\n        plan.revouchOwed.push({ service: svc, path: livingPath, owner: stringField(fm, \"owner\") ?? null });\n      }\n\n      const c = summarize(deltaReqs);\n      say(`  ${axis.label}: ${svc} ← +${c.ADDED} ~${c.MODIFIED} -${c.REMOVED} (now ${merged.length} total)`);\n      sayDropped(plan, say, livingPath, droppedBy(livingReqs, deltaReqs));\n      if (hasPurpose(delta)) say(`      ${PURPOSE_NOT_MERGED}`);\n    }\n  }\n}\n\n/**\n * A `## Purpose` in a delta against a document that already exists merges as\n * nothing — the living narrative is edited in place, never replaced by a merge\n * — and the author who wrote one expected it to land. Said, not refused: the\n * requirements are still exactly what they meant.\n */\nconst PURPOSE_NOT_MERGED =\n  \"the delta's ## Purpose was not merged — the living document keeps its own narrative; edit it there in this change\";\n\n/**\n * The BUSINESS corpus's merge: a feature's `capabilities/<id>/spec.md` deltas\n * applied into the living `capabilities/<id>/spec.md`.\n *\n * Here rather than in a sixth file in this package because this module already\n * owns \"requirements merged into a living document\" — it owns the two-headings\n * refusal and the `applyRequirementDelta` call, and calls the same\n * `./document/` rewrite and head, and the business corpus needs all of them\n * unchanged. What differs from\n * `planSpecs` above is only where the living document lives and what a CREATED\n * one says at the top.\n *\n * ARCHIVE CREATES THE LIVING DOCUMENT, by exact analogy with the new-service\n * branch above. The directory IS the list on this axis (`core/capabilities/tree.ts`),\n * so an archive that merged into a file it refused to create would make the\n * whole delta merge nothing — which is the `delta.no-delta-sections` failure\n * class, arriving through the merge instead of through the grammar.\n *\n * NO FRONTMATTER on a created capability document, and that is a decision\n * rather than an omission. Nothing reads a capability document's frontmatter:\n * `readCapabilityTree` classifies by the file's PRESENCE and\n * `readCapabilityVocabulary` takes `description`/`owner` from the YAML side. A\n * `status:` field invented here would be the \"second list nothing keeps\n * current\" this axis was designed against.\n *\n * AND IT SAYS SO OUT LOUD. Creating the first `capabilities/<id>/spec.md`\n * creates `capabilities/`, which is one of the two ways a fleet opts INTO the\n * capability axis — from the next command on, `loam validate --all` grades a\n * corpus that did not exist before. A merge that changes what the whole fleet\n * is graded on must not do it silently.\n */\nexport async function planCapabilities(\n  config: { docsDir: DocsDir; fleet: FleetContext },\n  gated: Gated,\n  plan: Plan,\n  say: (line?: string) => void,\n): Promise<void> {\n  const { writes } = plan;\n  // Whether `capabilities/` exists is asked BEFORE the loop, because the loop\n  // is what would create it; `creating` records whether this run actually\n  // materialises a document, so the adoption line below is not printed by a\n  // run whose every capability delta merged into a document already there.\n  const adopting = !existsSync(capabilityDocsDir(config.docsDir));\n  let creating = false;\n  const retarget = await featureRetarget(config.docsDir, gated);\n  for (const doc of gated.capabilityDeltas) {\n    const livingPath = livingCapabilityPaths(config.docsDir, doc.id).spec;\n    // Same move, same rewrite: `features/<FEAT>/capabilities/<id>/` is two\n    // directories deeper than `capabilities/<id>/`, so a citation of a glossary\n    // term or an ADR would land pointing above the repository — or, aimed into\n    // the feature itself, at a file this archive moves.\n    const delta = rebaseLinks(await readUtf8(doc.spec), { from: dirname(doc.spec), to: dirname(livingPath), retarget });\n    const deltaReqs = parseRequirements(delta);\n    if (!existsSync(livingPath)) {\n      const created = applyRequirementDelta([], deltaReqs);\n      if (created.length === 0) {\n        say(`  capability: ${doc.id} — nothing to merge (delta leaves no requirements), no living spec.md created`);\n        continue;\n      }\n      // The heading is the id unless the delta titled the capability, and the\n      // narrative is the delta's `## Purpose` or nothing: loam merges\n      // requirements and never prose, so it must not fabricate the narrative\n      // that is the whole point of the document — it carries only what the\n      // author marked as the document's own (`./document/head.ts`), and the note\n      // below tells them where the rest is.\n      const living = createdDocument({\n        docsDir: config.docsDir,\n        featureId: gated.id,\n        deltaPath: doc.spec,\n        delta,\n        livingPath,\n        retarget,\n        fallbackTitle: doc.id,\n        service: null,\n        requirements: created,\n      });\n      writes.push(planWrite(livingPath, living.text));\n      creating = true;\n      say(`  capability: ${doc.id} — created capabilities/${doc.id}/spec.md (${created.length} requirement(s))`);\n      say(`      ${living.note}`);\n      continue;\n    }\n    const livingText = await readUtf8(livingPath);\n    // The same one-section invariant as the service axis above, and the same\n    // reason it cannot be guessed at.\n    const reqHeadings = sectionHeadings(livingText).filter((h) => isRequirementsHeading(h.text));\n    if (reqHeadings.length > 1) {\n      throw new CodedFailure(\n        \"merge-failed\",\n        `living capabilities/${doc.id}/spec.md has ${reqHeadings.length} '## Requirements' headings (lines ${reqHeadings.map((h) => h.line).join(\", \")}) — the merge rewrites ONE requirements section and cannot choose; merge them into one, then re-run`,\n      );\n    }\n    const livingReqs = parseRequirements(livingText);\n    const merged = applyRequirementDelta(livingReqs, deltaReqs);\n    writes.push(planWrite(livingPath, rewriteRequirementsRun(livingText, livingReqs, merged)));\n    const c = summarize(deltaReqs);\n    say(`  capability: ${doc.id} ← +${c.ADDED} ~${c.MODIFIED} -${c.REMOVED} (now ${merged.length} total)`);\n    sayDropped(plan, say, livingPath, droppedBy(livingReqs, deltaReqs));\n    if (hasPurpose(delta)) say(`      ${PURPOSE_NOT_MERGED}`);\n  }\n  if (adopting && creating) {\n    say(`  capabilities/ did not exist — this archive opts the fleet into the business axis, and \\`loam validate --all\\` grades it from now on`);\n  }\n}\n\n/**\n * What each replacement takes out of the living document, named under the\n * count line and carried as `--json` `dropped`. The counts alone were the whole\n * report — `~1` — while a MODIFIED that restated one of two scenarios, or wrote\n * `Covers:` without the `sli:` entries the living text had, merged at exit 0\n * and the rest was gone (`core/document/apply.ts` says why it is read verbatim\n * and by name). Said, never gated: rewriting a requirement smaller is a\n * legitimate change, and what was missing was only that nobody was told.\n */\nfunction sayDropped(plan: Plan, say: (line?: string) => void, path: string, rows: DroppedRow[]): void {\n  for (const row of rows) {\n    plan.dropped.push({ path, ...row });\n    say(`      ${row.kind === \"REMOVED\" ? \"-\" : \"~\"} ${droppedSentence(row)}`);\n  }\n}\n\nfunction summarize(reqs: Requirement[]): { ADDED: number; MODIFIED: number; REMOVED: number } {\n  const c = { ADDED: 0, MODIFIED: 0, REMOVED: 0 };\n  for (const r of reqs) {\n    if (r.kind === \"ADDED\") c.ADDED += 1;\n    else if (r.kind === \"MODIFIED\") c.MODIFIED += 1;\n    else if (r.kind === \"REMOVED\") c.REMOVED += 1;\n  }\n  return c;\n}\n\n/**\n * The vocabulary merge: each `features/<FEAT>/glossary/<term>.md` copied to\n * `glossary/<term>.md`.\n *\n * A WHOLE-FILE COPY, and there is nothing else it could be. A capability delta\n * is folded into a living document by the requirement algebra because the two\n * documents share identified parts; a term document has one part, and merging\n * two definitions of one word is not something a machine may attempt. So the\n * definition the author wrote in the feature IS the definition that lands —\n * loam re-encodes it as UTF-8 through `readUtf8` and changes nothing else, not\n * even the trailing newline, but the ROUTE of each relative link. That one\n * exception is the requirement merge's, for the requirement merge's reason: the\n * term moves from `features/<FEAT>/glossary/` to `glossary/`, two directories\n * up, so a definition citing a service spec or the feature's own ADR landed\n * pointing at nothing (`link.unresolved` on the very next `validate --all`,\n * against a document graded at fleet scope). Same `rebaseLinks`, same\n * `retarget`: the target is unchanged, only the way there.\n *\n * CREATE-ONLY, which is why this loop has no other branch. A term the living\n * glossary already defines was refused at the gate (`glossary.term-exists`,\n * `core/glossary/delta.ts` has the reasoning), so by the time the plan runs\n * every path here is a file that does not exist. `planWrite` marks it\n * `exclusive`, so a race that created it between the gate and the commit fails\n * the write rather than overwriting somebody.\n *\n * AND IT SAYS SO OUT LOUD when it creates `glossary/`, exactly as\n * `planCapabilities` does for `capabilities/`: the directory's existence is the\n * axis's opt-in, so this merge changes what `loam validate --all` grades from\n * the next command on, and a merge that widens the fleet's own gate must not do\n * it silently.\n */\nexport async function planGlossary(\n  config: { docsDir: DocsDir },\n  gated: Gated,\n  plan: Plan,\n  say: (line?: string) => void,\n): Promise<void> {\n  const glossary = await featureGlossary(gated.featureDir);\n  if (!glossary.present || glossary.terms.length === 0) return;\n  // Asked BEFORE the loop, because the loop is what would create it.\n  const adopting = !existsSync(glossaryDir(config.docsDir));\n  const retarget = await featureRetarget(config.docsDir, gated);\n  for (const term of glossary.terms) {\n    const livingPath = livingTermPath(config.docsDir, term.id);\n    const text = rebaseLinks(await readUtf8(term.path), { from: dirname(term.path), to: dirname(livingPath), retarget });\n    plan.writes.push(planWrite(livingPath, text));\n    say(`  glossary: ${term.id} — created glossary/${term.id}.md`);\n  }\n  if (adopting) {\n    say(`  glossary/ did not exist — this archive opts the fleet into the domain vocabulary, and \\`loam validate --all\\` grades it from now on`);\n  }\n}\n"]}

package/dist/commands/archive/plan/state.js

@@ -14,6 +14,7 @@ import {} from "../../../core/kernel/ids/service.js";
 import {} from "../../../core/c4/likec4.js";
 import {} from "../../../core/capabilities/tree.js";
 import {} from "../../../core/staging/interrupted.js";
+import {} from "../../../core/document/apply.js";
 export function emptyPlan() {
     return {
         writes: [],
@@ -22,6 +23,8 @@ export function emptyPlan() {
         openapiRemovals: [],
         asyncapiRemovals: [],
         architectureServices: new Set(),
+        revouchOwed: [],
+        dropped: [],
     };
 }
 //# sourceMappingURL=state.js.map

package/dist/commands/archive/plan/state.js.map

@@ -1 +1 @@
-{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../../src/commands/archive/plan/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAc,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAqB,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAmB,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAwB,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAkB,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAsB,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAuB,MAAM,sCAAsC,CAAC;AA6C3E,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,EAAE;QACnB,gBAAgB,EAAE,EAAE;QACpB,oBAAoB,EAAE,IAAI,GAAG,EAAmB;KACjD,CAAC;AACJ,CAAC","sourcesContent":["/**\n * What one phase of an archive hands the next.\n *\n * `Gated` is everything the refusals resolved on the way through — the\n * canonical id, the delta document parsed once, the issue lists. `Plan` is what\n * the merges accumulate. Neither is a bag of conveniences: a value is in here\n * exactly when two phases have to agree about it, and the alternative was\n * fifteen parameters threaded through three functions in the same order.\n */\nimport { type Issue } from \"../../../core/vocabulary/issue.js\";\nimport { type PlannedWrite } from \"../../../core/staging/writes.js\";\nimport { type FeatureDir } from \"../../../core/kernel/ids/dirs.js\";\nimport { type PathableService } from \"../../../core/kernel/ids/service.js\";\nimport { type LoadedDoc } from \"../../../core/c4/likec4.js\";\nimport { type CapabilityDoc } from \"../../../core/capabilities/tree.js\";\nimport { type CommitRecovery } from \"../../../core/staging/interrupted.js\";\n\nexport interface Gated {\n  /** The canonical feature id. The raw argument does not survive the gate. */\n  id: string;\n  dirName: string;\n  featureDir: FeatureDir;\n  /** Parsed ONCE for the whole run — loading it spins up a fresh Langium workspace. */\n  deltaDoc: LoadedDoc | undefined;\n  deltaServices: PathableService[];\n  /**\n   * The capability documents this feature's delta carries, walked ONCE in the\n   * gate. Three phases downstream ask about them — the conflict-marker scan,\n   * the strayed-requirement scan and the merge — and a second walk is a second\n   * chance to disagree about which capabilities the merge touches.\n   */\n  capabilityDeltas: CapabilityDoc[];\n  gating: Issue[];\n  advisory: Issue[];\n  archiveDir: string;\n  archiveDest: string;\n  /** The interrupted commit this run repaired, if any — `--json` reports it. */\n  recovered: CommitRecovery | null;\n  /** Every coherence issue the gate read, gating and advisory together. */\n  issues: Issue[];\n}\n\nexport interface Plan {\n  writes: PlannedWrite[];\n  /**\n   * Warnings born in the plan itself (openapi.op-modified,\n   * openapi.component-modified, the asyncapi.*-modified trio) — printed with\n   * the plan and carried into the `--json` envelope beside the coherence\n   * warnings.\n   */\n  planWarns: Issue[];\n  /** Gating issues born in the plan itself (openapi.ref-unresolved, asyncapi.ref-unresolved). */\n  planGates: Issue[];\n  openapiRemovals: Array<{ service: string; operations: string[] }>;\n  /** Living asyncapi slots the plan deletes on removal markers, by their labels. */\n  asyncapiRemovals: Array<{ service: string; slots: string[] }>;\n  /** Services this feature introduces on the architecture axis alone. */\n  architectureServices: Set<PathableService>;\n}\n\nexport function emptyPlan(): Plan {\n  return {\n    writes: [],\n    planWarns: [],\n    planGates: [],\n    openapiRemovals: [],\n    asyncapiRemovals: [],\n    architectureServices: new Set<PathableService>(),\n  };\n}\n"]}
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../../src/commands/archive/plan/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAc,MAAM,mCAAmC,CAAC;AAC/D,OAAO,EAAqB,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAmB,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAwB,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAkB,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAsB,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAuB,MAAM,sCAAsC,CAAC;AAC3E,OAAO,EAAmB,MAAM,iCAAiC,CAAC;AA+DlE,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,MAAM,EAAE,EAAE;QACV,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,EAAE;QACnB,gBAAgB,EAAE,EAAE;QACpB,oBAAoB,EAAE,IAAI,GAAG,EAAmB;QAChD,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,EAAE;KACZ,CAAC;AACJ,CAAC","sourcesContent":["/**\n * What one phase of an archive hands the next.\n *\n * `Gated` is everything the refusals resolved on the way through — the\n * canonical id, the delta document parsed once, the issue lists. `Plan` is what\n * the merges accumulate. Neither is a bag of conveniences: a value is in here\n * exactly when two phases have to agree about it, and the alternative was\n * fifteen parameters threaded through three functions in the same order.\n */\nimport { type Issue } from \"../../../core/vocabulary/issue.js\";\nimport { type PlannedWrite } from \"../../../core/staging/writes.js\";\nimport { type FeatureDir } from \"../../../core/kernel/ids/dirs.js\";\nimport { type PathableService } from \"../../../core/kernel/ids/service.js\";\nimport { type LoadedDoc } from \"../../../core/c4/likec4.js\";\nimport { type CapabilityDoc } from \"../../../core/capabilities/tree.js\";\nimport { type CommitRecovery } from \"../../../core/staging/interrupted.js\";\nimport { type DroppedRow } from \"../../../core/document/apply.js\";\n\nexport interface Gated {\n  /** The canonical feature id. The raw argument does not survive the gate. */\n  id: string;\n  dirName: string;\n  featureDir: FeatureDir;\n  /** Parsed ONCE for the whole run — loading it spins up a fresh Langium workspace. */\n  deltaDoc: LoadedDoc | undefined;\n  deltaServices: PathableService[];\n  /**\n   * The capability documents this feature's delta carries, walked ONCE in the\n   * gate. Three phases downstream ask about them — the conflict-marker scan,\n   * the strayed-requirement scan and the merge — and a second walk is a second\n   * chance to disagree about which capabilities the merge touches.\n   */\n  capabilityDeltas: CapabilityDoc[];\n  gating: Issue[];\n  advisory: Issue[];\n  archiveDir: string;\n  archiveDest: string;\n  /** The interrupted commit this run repaired, if any — `--json` reports it. */\n  recovered: CommitRecovery | null;\n  /** Every coherence issue the gate read, gating and advisory together. */\n  issues: Issue[];\n}\n\nexport interface Plan {\n  writes: PlannedWrite[];\n  /**\n   * Warnings born in the plan itself (openapi.op-modified,\n   * openapi.component-modified, the asyncapi.*-modified trio) — printed with\n   * the plan and carried into the `--json` envelope beside the coherence\n   * warnings. Every one of them is NON-GATING, which is not the same as being a\n   * warning: `service.no-model` rides here at error severity with `gates: false`,\n   * the grade validate gives the directory it names (../closing.ts prints it in\n   * place of the closing line).\n   */\n  planWarns: Issue[];\n  /** Gating issues born in the plan itself (openapi.ref-unresolved, asyncapi.ref-unresolved). */\n  planGates: Issue[];\n  openapiRemovals: Array<{ service: string; operations: string[] }>;\n  /** Living asyncapi slots the plan deletes on removal markers, by their labels. */\n  asyncapiRemovals: Array<{ service: string; slots: string[] }>;\n  /** Services this feature introduces on the architecture axis alone. */\n  architectureServices: Set<PathableService>;\n  /**\n   * Every vouched living spec this merge leaves out of step with its vouch\n   * stamp — `content.stale` follows on each until its owner re-vouches.\n   * `path` is absolute, like every planned write's, and made docs-relative\n   * where it is printed; `owner` is the frontmatter's, or null when the\n   * document names none. The `--json` payload carries it as `revouchOwed`.\n   */\n  revouchOwed: Array<{ service: string; path: string; owner: string | null }>;\n  /**\n   * What each requirement replacement takes out of a living document — the\n   * scenarios and join-line entries a MODIFIED does not restate, and every\n   * removal. `path` is absolute like `revouchOwed`'s, made docs-relative where\n   * it is printed; the `--json` payload carries it as `dropped`.\n   */\n  dropped: Array<DroppedRow & { path: string }>;\n}\n\nexport function emptyPlan(): Plan {\n  return {\n    writes: [],\n    planWarns: [],\n    planGates: [],\n    openapiRemovals: [],\n    asyncapiRemovals: [],\n    architectureServices: new Set<PathableService>(),\n    revouchOwed: [],\n    dropped: [],\n  };\n}\n"]}