@ybotok/loam 0.2.0-alpha.1 → 0.2.0-alpha.13

package/dist/core/usecases/delta/modified.js

@@ -0,0 +1,315 @@
+/**
+ * The LIVING flows whose `#req-` tag claims a requirement this feature changes:
+ * `usecase.requirement-modified` for one it rewrites, and
+ * `usecase.requirement-unresolved` for one it takes away.
+ *
+ * THE HOLE. A `#req-` tag joins a flow to one named promise, and the join is by
+ * id. A MODIFIED requirement keeps its id and replaces its whole text, so after
+ * the archive the tag still resolves, every grade of the flow stays green — and
+ * the flow can be drawing exactly the behaviour the new wording forbids: an
+ * event path the requirement now says is gone, a hop through a service it no
+ * longer names. Nothing in loam reads a flow's MEANING, so nothing can say
+ * whether the drawing still keeps the promise. What loam can say is that the
+ * promise moved under it, and it said nothing.
+ *
+ * A WARNING, AND IT NEVER GATES. Rewording a promise a flow keeps is ordinary;
+ * the flow may well still keep it. This names each flow and the requirement, so
+ * the author reads one against the other while the feature is still open — and
+ * redraws the flow in the same change where it no longer holds.
+ *
+ * A REMOVAL IS THE FLEET'S OWN ERROR, ONE ARCHIVE EARLY. The merge deletes the
+ * promise and leaves the tag, so the very next `validate --all` reports the flow
+ * `usecase.requirement-unresolved` — while the feature gate had said nothing and
+ * the archive had exited 0 (the real-fleet review, 2026-10-21). That grade holds
+ * no judgement about the drawing: the tag resolves to nothing, whatever the flow
+ * shows. So it is raised here under the SAME code, at the same severity, with
+ * the VIEW as its subject as at fleet altitude — the fleet's grade predicted,
+ * not a second opinion beside it — and as an error it gates the archive.
+ * `--approve` may walk past it, for `capability.remove-requirement-realized`'s
+ * reason one carrier over: retiring a promise something still claims is the
+ * author's call about the feature, loam reads the flow perfectly well (this is
+ * no `usecase.flow-invalid` blindness), and the living docs then carry exactly
+ * the error this named.
+ *
+ * GRADED AGAINST WHAT THE MERGE LEAVES, not against the REMOVED list. Each
+ * document's after-side is the merge's own fold (`applyRequirementDelta`), so a
+ * removal the same delta re-spells under an id that flattens to the same tag
+ * leaves the tag resolving and earns nothing, exactly as the fleet will grade
+ * it. The same verdict is asked of a MODIFIED: it keeps its id, but
+ * an id this feature adds beside it may flatten to the same tag, and then the
+ * merge breaks the tag too — the error, not the warning, whose "the tag will
+ * still resolve" would be false. And only a claim that resolves TODAY is asked
+ * about: one that is already broken is `validate --all`'s finding now, and
+ * reporting it again here would be one mistake counted twice.
+ *
+ * TWO ALTITUDES, TWO SCOPES — the ones `validate --all` resolves the tag with.
+ * A flow in `architecture/` keeps a BUSINESS promise: its `#req-` tag is scoped
+ * by its `#cap-` tag to a capability document (`core/capabilities/usecase-join.ts`),
+ * so it is asked about the capability requirements this feature changes. A
+ * flow beside a service's model keeps that SERVICE's promise: its `#req-` tag is
+ * scoped by the directory to the ids of that service's spec.md and arch.spec.md
+ * (`commands/validate/service/usecases/tags.ts`), so it is asked about the
+ * service requirements this feature changes there — and only the services the
+ * feature's `specs/` touch can hold one. BOTH documents are that scope, so the
+ * one a touched service carries no delta for is read as it stands: without it
+ * an id the other document also declares would read as gone after the merge,
+ * and gate an archive the fleet then grades green. The feature's own
+ * `usecases/` are not living and are graded against the new text already
+ * (`../grade/feature.ts`).
+ *
+ * WHAT IT COSTS. Nothing, for a feature that modifies and removes no
+ * requirement — which is nearly every feature, and the caller does not call
+ * this then. For one that does, a byte scan for the tag's own spelling
+ * (`req-<slug>`) over the documents that could declare it, the living document
+ * of a touched service's other axis, and a LikeC4 load only for a project one
+ * of them is in: a tag name is one token, so a document without its characters
+ * cannot carry it. A project that does not parse is skipped, not reported —
+ * `validate --all` owns that answer (`usecase.flow-invalid`, `landscape.invalid`),
+ * and a finding about one requirement must not become a second report of a
+ * broken map.
+ */
+import { existsSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { join, relative } from "node:path";
+import { REQ_TAG_PREFIX, resolveCapabilityTags, resolveRequirementTags, tagSlug, } from "../../capabilities/usecase-join.js";
+import { gradableCapabilityIds } from "../../capabilities/findings.js";
+import { architectureDocuments } from "../../c4/project/documents.js";
+import { architectureProjectDocuments } from "../../c4/project/architecture.js";
+import { applyRequirementDelta, replacementsOf } from "../../document/apply.js";
+import { SPEC_AXES } from "../../repo/paths.js";
+import { compareIds } from "../../repo/entries.js";
+import { useCasesIn } from "../fleet.js";
+import { viewFile } from "../place.js";
+import { readServiceFlows } from "../service/flows.js";
+export async function changedPromiseFlowIssues(req) {
+    const tables = {
+        capability: tableOf(req.capabilities),
+        service: tableOf(await withUntouchedAxes(req)),
+    };
+    const flows = [
+        ...(await fleetFlows(req, changedIds(tables.capability))),
+        ...(await serviceFlows(req, changedIds(tables.service))),
+    ];
+    const issues = [];
+    for (const flow of flows.sort((a, b) => compareIds(a.file, b.file) || compareIds(a.view.id, b.view.id))) {
+        const table = tables[flow.altitude];
+        const after = new Map(resolveRequirementTags(flow.view.tags, flow.scope, (id) => table.merged.get(id)).map((c) => [c.tag, c]));
+        for (const claim of resolveRequirementTags(flow.view.tags, flow.scope, (id) => table.living.get(id))) {
+            if (claim.kind !== "resolved")
+                continue;
+            const change = changeOf(table, claim);
+            if (change === null)
+                continue;
+            // The merge's verdict first, for either change: a MODIFIED keeps its id,
+            // but an id this feature adds beside it can flatten to the same tag, and
+            // then the warning's "the tag will still resolve" would be false.
+            const later = after.get(claim.tag);
+            if (later !== undefined && later.kind !== "resolved")
+                issues.push(brokenIssue(flow, claim, { change, later }));
+            else if (change === "MODIFIES")
+                issues.push(modifiedIssue(flow, claim));
+        }
+    }
+    return issues;
+}
+function changeOf(table, claim) {
+    if (table.modified.get(claim.capability)?.has(claim.id) === true)
+        return "MODIFIES";
+    return table.removed.get(claim.capability)?.has(claim.id) === true ? "REMOVES" : null;
+}
+function whose(flow, claim) {
+    return flow.altitude === "capability" ? `${claim.capability}#${claim.id}` : `${claim.capability}'s requirement ${claim.id}`;
+}
+function modifiedIssue(flow, claim) {
+    return {
+        severity: "warn",
+        code: "usecase.requirement-modified",
+        subject: claim.capability,
+        message: `${flow.file}: flow '${flow.view.id}' is tagged #${claim.tag} — it claims ${whose(flow, claim)}, which this feature MODIFIES. ` +
+            `The tag will still resolve after the archive and nothing grades what the flow draws against the new ` +
+            `wording: read the flow against the replacement, and redraw it in this change if it no longer keeps the promise.`,
+        locations: [{ path: flow.file, role: "primary" }],
+    };
+}
+/**
+ * The tag the merge breaks. Two ways, and each has its own fix: a removal
+ * leaves nothing the tag names, and an id this feature adds can flatten to the
+ * same tag as the one it claims — the only way a MODIFIED, which keeps its id,
+ * can break it at all.
+ */
+function brokenIssue(flow, claim, broken) {
+    const { change, later } = broken;
+    const [why, fix] = later.kind === "many"
+        ? [
+            `${later.ids.length} requirements will flatten to '${later.slug}' (${later.ids.join(", ")}), so nothing in the tag can say which promise the flow keeps`,
+            "rename one of the colliding ids in this change",
+        ]
+        : [
+            "nothing it names is left",
+            "drop the tag (or point it at the promise that replaces this one) in this change, or MODIFY the requirement instead of removing it",
+        ];
+    return {
+        severity: "error",
+        code: "usecase.requirement-unresolved",
+        // The VIEW, as `validate --all` names it once the archive lands — so the
+        // prediction and the outcome are about one thing a reader opens.
+        subject: flow.view.id,
+        message: `${flow.file}: flow '${flow.view.id}' is tagged #${claim.tag} — it claims ${whose(flow, claim)}, which this feature ${change}. ` +
+            `After the archive the tag no longer resolves — ${why} — and \`loam validate --all\` reports this flow with this ` +
+            `same error: ${fix}.`,
+        locations: [{ path: flow.file, role: "primary" }],
+    };
+}
+/**
+ * Each document's table rows. The modified and removed ids are named by the id
+ * the LIVING document gives them — selected by `replacementsOf`, the merge's own
+ * walk, so a MODIFIED or REMOVED written by heading alone still names the id a
+ * tag carries — and the after-side is that same merge's result. A document the
+ * merge would refuse keeps its living ids on both sides and changes nothing:
+ * the delta gate reports it, and nothing here has a true thing to say about a
+ * merge that cannot happen.
+ *
+ * TODAY'S side leaves out a living requirement sitting under a REMOVED heading,
+ * as both fleet indexes do (`capabilityRequirementIndex`, `requirementIdsOf`):
+ * a tag resolving only through one is already the fleet's error. The fold
+ * still runs on the whole living list, because that is the archive's input.
+ */
+function tableOf(docs) {
+    const table = { living: new Map(), merged: new Map(), modified: new Map(), removed: new Map() };
+    for (const doc of docs) {
+        const living = doc.living.filter((r) => r.kind !== "REMOVED");
+        let fold;
+        try {
+            fold = { replaced: replacementsOf([...doc.living], [...doc.reqs]), merged: applyRequirementDelta([...doc.living], [...doc.reqs]) };
+        }
+        catch {
+            fold = { replaced: [], merged: living };
+        }
+        idsInto(table.living, doc.id, living);
+        idsInto(table.merged, doc.id, fold.merged);
+        for (const r of fold.replaced) {
+            if (r.living.id === undefined || (r.kind !== "MODIFIED" && r.kind !== "REMOVED"))
+                continue;
+            const into = r.kind === "MODIFIED" ? table.modified : table.removed;
+            into.set(doc.id, (into.get(doc.id) ?? new Set()).add(r.living.id));
+        }
+    }
+    return table;
+}
+/** A document's ids, unioned into its row — created even when empty, which is the `empty` arm's answer rather than `undocumented`'s. */
+function idsInto(rows, id, reqs) {
+    const ids = rows.get(id) ?? new Set();
+    for (const r of reqs)
+        if (r.id !== undefined)
+            ids.add(r.id);
+    rows.set(id, ids);
+}
+/** The ids each document's delta modifies or removes — what a flow has to mention to be asked about at all. */
+function changedIds(table) {
+    const out = new Map();
+    for (const rows of [table.modified, table.removed]) {
+        for (const [id, ids] of rows)
+            out.set(id, new Set([...(out.get(id) ?? []), ...ids]));
+    }
+    return out;
+}
+/**
+ * The service pairs, plus — for each service whose delta modifies or removes
+ * something — every document of it the feature carries no delta for, as it
+ * stands (`reqs: []`, so it changes nothing and only widens both sides).
+ * `requirementIdsOf` (`commands/validate/service/usecases/usecases.ts`) reads
+ * both documents for a service-local tag, skipping a requirement under a
+ * REMOVED heading; so must this, or a tag the untouched document keeps
+ * resolving reads as broken — and one only a REMOVED entry there answers reads
+ * as kept, though the archive leaves that document as it is.
+ */
+async function withUntouchedAxes(req) {
+    const out = [...req.services];
+    const asked = new Set();
+    // Sequential, and it costs nothing worth racing: a feature names a handful of
+    // services, each read is one memoised document, and most services here
+    // already have both axes in the feature or no second document at all.
+    for (const pair of req.services) {
+        const own = req.services.filter((p) => p.id === pair.id);
+        if (asked.has(pair.id) || !own.some((p) => p.reqs.some((r) => r.kind === "MODIFIED" || r.kind === "REMOVED")))
+            continue;
+        asked.add(pair.id);
+        const paths = await pair.paths();
+        for (const axis of SPEC_AXES) {
+            if (own.some((p) => p.axis === axis.key) || !existsSync(paths[axis.key]))
+                continue;
+            const living = (await req.readRequirements(paths[axis.key])).filter((r) => r.kind !== "REMOVED");
+            out.push({ id: pair.id, reqs: [], living });
+        }
+    }
+    return out;
+}
+/** The tag spellings that could claim one of these ids. */
+function needlesFor(changed) {
+    return [...new Set([...changed.values()].flatMap((ids) => [...ids].map((id) => `${REQ_TAG_PREFIX}${tagSlug(id)}`)))];
+}
+/** Does any of these documents contain one of the tag spellings at all? Unreadable fails closed, as `../fleet.ts`'s gate does. */
+async function mentions(paths, needles) {
+    for (const path of paths) {
+        try {
+            const text = (await readFile(path)).toString("latin1");
+            if (needles.some((needle) => text.includes(needle)))
+                return true;
+        }
+        catch {
+            return true;
+        }
+    }
+    return false;
+}
+async function fleetFlows(req, changed) {
+    // The vocabulary ladder (`core/capabilities/findings.ts`): with nothing
+    // declared no `#cap-` tag resolves, so no fleet flow can be said to claim anything.
+    const declared = gradableCapabilityIds(req.vocabulary);
+    if (changed.size === 0 || declared === null)
+        return [];
+    if (!(await mentions(await architectureProjectDocuments(req.docsDir), needlesFor(changed))))
+        return [];
+    const read = useCasesIn(await req.architecture(), req.known);
+    if (read.kind !== "read")
+        return [];
+    return read.views.map((view) => ({
+        view,
+        file: viewFile(view),
+        scope: resolveCapabilityTags(view.tags, declared).flatMap((c) => (c.kind === "resolved" ? [c.id] : [])),
+        altitude: "capability",
+    }));
+}
+async function serviceFlows(req, changed) {
+    const out = [];
+    for (const [service, ids] of changed) {
+        // Sequential on purpose, for `../fleet.ts`'s gate's reason: nearly every
+        // service answers from one readdir and a byte scan, and the rare one that
+        // opens a workspace should not be raced by the ones that do not need one.
+        const pair = req.services.find((doc) => doc.id === service);
+        if (pair === undefined)
+            continue;
+        const paths = await pair.paths();
+        if (!(await mentions(await architectureDocuments(paths.dir), needlesFor(new Map([[service, ids]])))))
+            continue;
+        const model = await req.serviceModel(paths);
+        if (model.mapUnreadable || model.doc.errors.length > 0)
+            continue;
+        const flows = await readServiceFlows({
+            paths,
+            model: model.doc,
+            known: req.known,
+            ...(model.shape === "extending" && model.project !== null
+                ? { extending: { docsDir: req.docsDir, project: model.project } }
+                : {}),
+        });
+        if (flows.kind !== "read")
+            continue;
+        for (const view of flows.views) {
+            const file = relative(req.docsDir, join(paths.dir, view.sourcePath ?? "model.likec4")).split(/[\\/]/).join("/");
+            out.push({ view, file, scope: [service], altitude: "service" });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=modified.js.map

package/dist/core/usecases/delta/modified.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modified.js","sourceRoot":"","sources":["../../../../src/core/usecases/delta/modified.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,OAAO,GAER,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAGvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAIhF,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAoB,MAAM,yBAAyB,CAAC;AAGlG,OAAO,EAAE,SAAS,EAAoC,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAEnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAwEvD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAA0B;IACvE,MAAM,MAAM,GAA4B;QACtC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QACrC,OAAO,EAAE,OAAO,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;KAC/C,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;KACzD,CAAC;IACF,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACxG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/H,KAAK,MAAM,KAAK,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACrG,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAS;YAC9B,yEAAyE;YACzE,yEAAyE;YACzE,kEAAkE;YAClE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;iBAC1G,IAAI,MAAM,KAAK,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAY,EAAE,KAAe;IAC7C,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IACpF,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACxF,CAAC;AAED,SAAS,KAAK,CAAC,IAAgB,EAAE,KAAe;IAC9C,OAAO,IAAI,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,kBAAkB,KAAK,CAAC,EAAE,EAAE,CAAC;AAC9H,CAAC;AAED,SAAS,aAAa,CAAC,IAAgB,EAAE,KAAe;IACtD,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,KAAK,CAAC,UAAU;QACzB,OAAO,EACL,GAAG,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,gBAAgB,KAAK,CAAC,GAAG,gBAAgB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,iCAAiC;YAC/H,sGAAsG;YACtG,iHAAiH;QACnH,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,IAAgB,EAChB,KAAe,EACf,MAAkG;IAElG,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACjC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GACd,KAAK,CAAC,IAAI,KAAK,MAAM;QACnB,CAAC,CAAC;YACE,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,kCAAkC,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,+DAA+D;YACxJ,gDAAgD;SACjD;QACH,CAAC,CAAC;YACE,0BAA0B;YAC1B,mIAAmI;SACpI,CAAC;IACR,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,gCAAgC;QACtC,yEAAyE;QACzE,iEAAiE;QACjE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;QACrB,OAAO,EACL,GAAG,IAAI,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,EAAE,gBAAgB,KAAK,CAAC,GAAG,gBAAgB,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,wBAAwB,MAAM,IAAI;YAChI,kDAAkD,GAAG,6DAA6D;YAClH,eAAe,GAAG,GAAG;QACvB,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,OAAO,CAAC,IAA0B;IACzC,MAAM,KAAK,GAAU,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACvG,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC9D,IAAI,IAAiE,CAAC;QACtE,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACrI,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC1C,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;gBAAE,SAAS;YAC3F,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;YACpE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wIAAwI;AACxI,SAAS,OAAO,CAAC,IAA8B,EAAE,EAAU,EAAE,IAA4B;IACvF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,IAAI,CAAC,CAAC,EAAE,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AACpB,CAAC;AAED,+GAA+G;AAC/G,SAAS,UAAU,CAAC,KAAY;IAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI;YAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAA0B;IACzD,MAAM,GAAG,GAAgB,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,8EAA8E;IAC9E,uEAAuE;IACvE,sEAAsE;IACtE,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YAAE,SAAS;QACxH,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,SAAS;YACnF,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;YACjG,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2DAA2D;AAC3D,SAAS,UAAU,CAAC,OAAiD;IACnE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,cAAc,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACvH,CAAC;AAED,kIAAkI;AAClI,KAAK,UAAU,QAAQ,CAAC,KAAwB,EAAE,OAA0B;IAC1E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAA0B,EAAE,OAAiD;IACrG,wEAAwE;IACxE,oFAAoF;IACpF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACvD,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACvG,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,YAAY,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/B,IAAI;QACJ,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvG,QAAQ,EAAE,YAAqB;KAChC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAA0B,EAAE,OAAiD;IACvG,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QACrC,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QAC5D,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAC/G,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACjE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC;YACnC,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,GAAG;YAChB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;gBACvD,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE;gBACjE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,IAAI,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChH,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["/**\n * The LIVING flows whose `#req-` tag claims a requirement this feature changes:\n * `usecase.requirement-modified` for one it rewrites, and\n * `usecase.requirement-unresolved` for one it takes away.\n *\n * THE HOLE. A `#req-` tag joins a flow to one named promise, and the join is by\n * id. A MODIFIED requirement keeps its id and replaces its whole text, so after\n * the archive the tag still resolves, every grade of the flow stays green — and\n * the flow can be drawing exactly the behaviour the new wording forbids: an\n * event path the requirement now says is gone, a hop through a service it no\n * longer names. Nothing in loam reads a flow's MEANING, so nothing can say\n * whether the drawing still keeps the promise. What loam can say is that the\n * promise moved under it, and it said nothing.\n *\n * A WARNING, AND IT NEVER GATES. Rewording a promise a flow keeps is ordinary;\n * the flow may well still keep it. This names each flow and the requirement, so\n * the author reads one against the other while the feature is still open — and\n * redraws the flow in the same change where it no longer holds.\n *\n * A REMOVAL IS THE FLEET'S OWN ERROR, ONE ARCHIVE EARLY. The merge deletes the\n * promise and leaves the tag, so the very next `validate --all` reports the flow\n * `usecase.requirement-unresolved` — while the feature gate had said nothing and\n * the archive had exited 0 (the real-fleet review, 2026-10-21). That grade holds\n * no judgement about the drawing: the tag resolves to nothing, whatever the flow\n * shows. So it is raised here under the SAME code, at the same severity, with\n * the VIEW as its subject as at fleet altitude — the fleet's grade predicted,\n * not a second opinion beside it — and as an error it gates the archive.\n * `--approve` may walk past it, for `capability.remove-requirement-realized`'s\n * reason one carrier over: retiring a promise something still claims is the\n * author's call about the feature, loam reads the flow perfectly well (this is\n * no `usecase.flow-invalid` blindness), and the living docs then carry exactly\n * the error this named.\n *\n * GRADED AGAINST WHAT THE MERGE LEAVES, not against the REMOVED list. Each\n * document's after-side is the merge's own fold (`applyRequirementDelta`), so a\n * removal the same delta re-spells under an id that flattens to the same tag\n * leaves the tag resolving and earns nothing, exactly as the fleet will grade\n * it. The same verdict is asked of a MODIFIED: it keeps its id, but\n * an id this feature adds beside it may flatten to the same tag, and then the\n * merge breaks the tag too — the error, not the warning, whose \"the tag will\n * still resolve\" would be false. And only a claim that resolves TODAY is asked\n * about: one that is already broken is `validate --all`'s finding now, and\n * reporting it again here would be one mistake counted twice.\n *\n * TWO ALTITUDES, TWO SCOPES — the ones `validate --all` resolves the tag with.\n * A flow in `architecture/` keeps a BUSINESS promise: its `#req-` tag is scoped\n * by its `#cap-` tag to a capability document (`core/capabilities/usecase-join.ts`),\n * so it is asked about the capability requirements this feature changes. A\n * flow beside a service's model keeps that SERVICE's promise: its `#req-` tag is\n * scoped by the directory to the ids of that service's spec.md and arch.spec.md\n * (`commands/validate/service/usecases/tags.ts`), so it is asked about the\n * service requirements this feature changes there — and only the services the\n * feature's `specs/` touch can hold one. BOTH documents are that scope, so the\n * one a touched service carries no delta for is read as it stands: without it\n * an id the other document also declares would read as gone after the merge,\n * and gate an archive the fleet then grades green. The feature's own\n * `usecases/` are not living and are graded against the new text already\n * (`../grade/feature.ts`).\n *\n * WHAT IT COSTS. Nothing, for a feature that modifies and removes no\n * requirement — which is nearly every feature, and the caller does not call\n * this then. For one that does, a byte scan for the tag's own spelling\n * (`req-<slug>`) over the documents that could declare it, the living document\n * of a touched service's other axis, and a LikeC4 load only for a project one\n * of them is in: a tag name is one token, so a document without its characters\n * cannot carry it. A project that does not parse is skipped, not reported —\n * `validate --all` owns that answer (`usecase.flow-invalid`, `landscape.invalid`),\n * and a finding about one requirement must not become a second report of a\n * broken map.\n */\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { join, relative } from \"node:path\";\nimport {\n  REQ_TAG_PREFIX,\n  resolveCapabilityTags,\n  resolveRequirementTags,\n  tagSlug,\n  type RequirementClaim,\n} from \"../../capabilities/usecase-join.js\";\nimport { gradableCapabilityIds } from \"../../capabilities/findings.js\";\nimport type { CapabilityVocabulary } from \"../../capabilities/capabilities.js\";\nimport type { CapabilityDeltaDoc } from \"../../capabilities/delta/uncovered.js\";\nimport { architectureDocuments } from \"../../c4/project/documents.js\";\nimport { architectureProjectDocuments } from \"../../c4/project/architecture.js\";\nimport type { ParsedView } from \"../../c4/parsed/dynamic-views.js\";\nimport type { LoadedDoc } from \"../../c4/likec4.js\";\nimport type { ServiceModel } from \"../../c4/service-model/load.js\";\nimport { applyRequirementDelta, replacementsOf, type Replacement } from \"../../document/apply.js\";\nimport type { Requirement } from \"../../document/spec.js\";\nimport type { DocsDir } from \"../../kernel/ids/dirs.js\";\nimport { SPEC_AXES, type ServicePaths, type SpecAxis } from \"../../repo/paths.js\";\nimport { compareIds } from \"../../repo/entries.js\";\nimport type { Issue } from \"../../vocabulary/issue.js\";\nimport { useCasesIn } from \"../fleet.js\";\nimport { viewFile } from \"../place.js\";\nimport { readServiceFlows } from \"../service/flows.js\";\n\n/** One delta document beside the living one it merges into — a capability's, or one spec axis of a service. */\nexport interface DeltaPair {\n  /** The capability id, or the service id. */\n  id: string;\n  reqs: readonly Requirement[];\n  living: readonly Requirement[];\n}\n\n/** One spec axis of a service the feature touches, and where that service lives — asked only for one whose delta changes something. */\nexport interface ServiceDeltaPair extends DeltaPair {\n  /** Which of the service's two documents this is: the other is read as it stands when the feature carries no delta for it. */\n  axis: SpecAxis[\"key\"];\n  paths: () => Promise<ServicePaths>;\n}\n\nexport interface ChangedPromiseRequest {\n  docsDir: DocsDir;\n  /** The feature's capability deltas — what an `architecture/` flow's tag is asked about. */\n  capabilities: readonly CapabilityDeltaDoc[];\n  /** The feature's service deltas, one entry per spec axis — what a service's own flow is asked about. */\n  services: readonly ServiceDeltaPair[];\n  /** The capability vocabulary a `#cap-` tag resolves against. */\n  vocabulary: CapabilityVocabulary;\n  /** The enumerated fleet, for the element→service resolver's reason (`../fleet.ts`). */\n  known: ReadonlySet<string>;\n  /**\n   * A service's model, read the way its shape demands. Injected for\n   * `./overlay.ts`'s reason: a memoised read does not justify an edge from\n   * `core/usecases/` to `fleet-context`.\n   */\n  serviceModel: (paths: ServicePaths) => Promise<ServiceModel>;\n  /**\n   * The `architecture/` project, as the invocation already holds it — the\n   * same injection, for the same reason: `validate --all` and `status` run this\n   * walk once per active feature, and a fresh load per feature is a LikeC4\n   * workspace each.\n   */\n  architecture: () => Promise<LoadedDoc>;\n  /** A living requirements document, parsed — a touched service's axis the feature carries no delta for. Injected for the same reason again. */\n  readRequirements: (path: string) => Promise<Requirement[]>;\n}\n\n/** One living flow, located, and the scope its `#req-` tag resolves in. */\ninterface LivingFlow {\n  view: ParsedView;\n  /** The repo-relative file a reader opens. */\n  file: string;\n  /** The capability ids its own `#cap-` tags resolve to, or — beside a model — its service alone. */\n  scope: string[];\n  /** Which of the two scopes `scope` is in: a capability id and a service id may be spelled alike. */\n  altitude: Altitude;\n}\n\ntype Altitude = \"capability\" | \"service\";\n\ntype Resolved = Extract<RequirementClaim, { kind: \"resolved\" }>;\n\n/**\n * Per document id — a capability, or a service's two axes together, the one\n * set its directory-scoped tag is read against — the ids a tag resolves\n * against today and after the merge, and which living ids this feature\n * rewrites or retires.\n */\ninterface Table {\n  living: Map<string, Set<string>>;\n  merged: Map<string, Set<string>>;\n  modified: Map<string, Set<string>>;\n  removed: Map<string, Set<string>>;\n}\n\nexport async function changedPromiseFlowIssues(req: ChangedPromiseRequest): Promise<Issue[]> {\n  const tables: Record<Altitude, Table> = {\n    capability: tableOf(req.capabilities),\n    service: tableOf(await withUntouchedAxes(req)),\n  };\n  const flows = [\n    ...(await fleetFlows(req, changedIds(tables.capability))),\n    ...(await serviceFlows(req, changedIds(tables.service))),\n  ];\n  const issues: Issue[] = [];\n  for (const flow of flows.sort((a, b) => compareIds(a.file, b.file) || compareIds(a.view.id, b.view.id))) {\n    const table = tables[flow.altitude];\n    const after = new Map(resolveRequirementTags(flow.view.tags, flow.scope, (id) => table.merged.get(id)).map((c) => [c.tag, c]));\n    for (const claim of resolveRequirementTags(flow.view.tags, flow.scope, (id) => table.living.get(id))) {\n      if (claim.kind !== \"resolved\") continue;\n      const change = changeOf(table, claim);\n      if (change === null) continue;\n      // The merge's verdict first, for either change: a MODIFIED keeps its id,\n      // but an id this feature adds beside it can flatten to the same tag, and\n      // then the warning's \"the tag will still resolve\" would be false.\n      const later = after.get(claim.tag);\n      if (later !== undefined && later.kind !== \"resolved\") issues.push(brokenIssue(flow, claim, { change, later }));\n      else if (change === \"MODIFIES\") issues.push(modifiedIssue(flow, claim));\n    }\n  }\n  return issues;\n}\n\nfunction changeOf(table: Table, claim: Resolved): \"MODIFIES\" | \"REMOVES\" | null {\n  if (table.modified.get(claim.capability)?.has(claim.id) === true) return \"MODIFIES\";\n  return table.removed.get(claim.capability)?.has(claim.id) === true ? \"REMOVES\" : null;\n}\n\nfunction whose(flow: LivingFlow, claim: Resolved): string {\n  return flow.altitude === \"capability\" ? `${claim.capability}#${claim.id}` : `${claim.capability}'s requirement ${claim.id}`;\n}\n\nfunction modifiedIssue(flow: LivingFlow, claim: Resolved): Issue {\n  return {\n    severity: \"warn\",\n    code: \"usecase.requirement-modified\",\n    subject: claim.capability,\n    message:\n      `${flow.file}: flow '${flow.view.id}' is tagged #${claim.tag} — it claims ${whose(flow, claim)}, which this feature MODIFIES. ` +\n      `The tag will still resolve after the archive and nothing grades what the flow draws against the new ` +\n      `wording: read the flow against the replacement, and redraw it in this change if it no longer keeps the promise.`,\n    locations: [{ path: flow.file, role: \"primary\" }],\n  };\n}\n\n/**\n * The tag the merge breaks. Two ways, and each has its own fix: a removal\n * leaves nothing the tag names, and an id this feature adds can flatten to the\n * same tag as the one it claims — the only way a MODIFIED, which keeps its id,\n * can break it at all.\n */\nfunction brokenIssue(\n  flow: LivingFlow,\n  claim: Resolved,\n  broken: { change: \"MODIFIES\" | \"REMOVES\"; later: Exclude<RequirementClaim, { kind: \"resolved\" }> },\n): Issue {\n  const { change, later } = broken;\n  const [why, fix] =\n    later.kind === \"many\"\n      ? [\n          `${later.ids.length} requirements will flatten to '${later.slug}' (${later.ids.join(\", \")}), so nothing in the tag can say which promise the flow keeps`,\n          \"rename one of the colliding ids in this change\",\n        ]\n      : [\n          \"nothing it names is left\",\n          \"drop the tag (or point it at the promise that replaces this one) in this change, or MODIFY the requirement instead of removing it\",\n        ];\n  return {\n    severity: \"error\",\n    code: \"usecase.requirement-unresolved\",\n    // The VIEW, as `validate --all` names it once the archive lands — so the\n    // prediction and the outcome are about one thing a reader opens.\n    subject: flow.view.id,\n    message:\n      `${flow.file}: flow '${flow.view.id}' is tagged #${claim.tag} — it claims ${whose(flow, claim)}, which this feature ${change}. ` +\n      `After the archive the tag no longer resolves — ${why} — and \\`loam validate --all\\` reports this flow with this ` +\n      `same error: ${fix}.`,\n    locations: [{ path: flow.file, role: \"primary\" }],\n  };\n}\n\n/**\n * Each document's table rows. The modified and removed ids are named by the id\n * the LIVING document gives them — selected by `replacementsOf`, the merge's own\n * walk, so a MODIFIED or REMOVED written by heading alone still names the id a\n * tag carries — and the after-side is that same merge's result. A document the\n * merge would refuse keeps its living ids on both sides and changes nothing:\n * the delta gate reports it, and nothing here has a true thing to say about a\n * merge that cannot happen.\n *\n * TODAY'S side leaves out a living requirement sitting under a REMOVED heading,\n * as both fleet indexes do (`capabilityRequirementIndex`, `requirementIdsOf`):\n * a tag resolving only through one is already the fleet's error. The fold\n * still runs on the whole living list, because that is the archive's input.\n */\nfunction tableOf(docs: readonly DeltaPair[]): Table {\n  const table: Table = { living: new Map(), merged: new Map(), modified: new Map(), removed: new Map() };\n  for (const doc of docs) {\n    const living = doc.living.filter((r) => r.kind !== \"REMOVED\");\n    let fold: { replaced: Replacement[]; merged: readonly Requirement[] };\n    try {\n      fold = { replaced: replacementsOf([...doc.living], [...doc.reqs]), merged: applyRequirementDelta([...doc.living], [...doc.reqs]) };\n    } catch {\n      fold = { replaced: [], merged: living };\n    }\n    idsInto(table.living, doc.id, living);\n    idsInto(table.merged, doc.id, fold.merged);\n    for (const r of fold.replaced) {\n      if (r.living.id === undefined || (r.kind !== \"MODIFIED\" && r.kind !== \"REMOVED\")) continue;\n      const into = r.kind === \"MODIFIED\" ? table.modified : table.removed;\n      into.set(doc.id, (into.get(doc.id) ?? new Set()).add(r.living.id));\n    }\n  }\n  return table;\n}\n\n/** A document's ids, unioned into its row — created even when empty, which is the `empty` arm's answer rather than `undocumented`'s. */\nfunction idsInto(rows: Map<string, Set<string>>, id: string, reqs: readonly Requirement[]): void {\n  const ids = rows.get(id) ?? new Set<string>();\n  for (const r of reqs) if (r.id !== undefined) ids.add(r.id);\n  rows.set(id, ids);\n}\n\n/** The ids each document's delta modifies or removes — what a flow has to mention to be asked about at all. */\nfunction changedIds(table: Table): Map<string, Set<string>> {\n  const out = new Map<string, Set<string>>();\n  for (const rows of [table.modified, table.removed]) {\n    for (const [id, ids] of rows) out.set(id, new Set([...(out.get(id) ?? []), ...ids]));\n  }\n  return out;\n}\n\n/**\n * The service pairs, plus — for each service whose delta modifies or removes\n * something — every document of it the feature carries no delta for, as it\n * stands (`reqs: []`, so it changes nothing and only widens both sides).\n * `requirementIdsOf` (`commands/validate/service/usecases/usecases.ts`) reads\n * both documents for a service-local tag, skipping a requirement under a\n * REMOVED heading; so must this, or a tag the untouched document keeps\n * resolving reads as broken — and one only a REMOVED entry there answers reads\n * as kept, though the archive leaves that document as it is.\n */\nasync function withUntouchedAxes(req: ChangedPromiseRequest): Promise<DeltaPair[]> {\n  const out: DeltaPair[] = [...req.services];\n  const asked = new Set<string>();\n  // Sequential, and it costs nothing worth racing: a feature names a handful of\n  // services, each read is one memoised document, and most services here\n  // already have both axes in the feature or no second document at all.\n  for (const pair of req.services) {\n    const own = req.services.filter((p) => p.id === pair.id);\n    if (asked.has(pair.id) || !own.some((p) => p.reqs.some((r) => r.kind === \"MODIFIED\" || r.kind === \"REMOVED\"))) continue;\n    asked.add(pair.id);\n    const paths = await pair.paths();\n    for (const axis of SPEC_AXES) {\n      if (own.some((p) => p.axis === axis.key) || !existsSync(paths[axis.key])) continue;\n      const living = (await req.readRequirements(paths[axis.key])).filter((r) => r.kind !== \"REMOVED\");\n      out.push({ id: pair.id, reqs: [], living });\n    }\n  }\n  return out;\n}\n\n/** The tag spellings that could claim one of these ids. */\nfunction needlesFor(changed: ReadonlyMap<string, ReadonlySet<string>>): string[] {\n  return [...new Set([...changed.values()].flatMap((ids) => [...ids].map((id) => `${REQ_TAG_PREFIX}${tagSlug(id)}`)))];\n}\n\n/** Does any of these documents contain one of the tag spellings at all? Unreadable fails closed, as `../fleet.ts`'s gate does. */\nasync function mentions(paths: readonly string[], needles: readonly string[]): Promise<boolean> {\n  for (const path of paths) {\n    try {\n      const text = (await readFile(path)).toString(\"latin1\");\n      if (needles.some((needle) => text.includes(needle))) return true;\n    } catch {\n      return true;\n    }\n  }\n  return false;\n}\n\nasync function fleetFlows(req: ChangedPromiseRequest, changed: ReadonlyMap<string, ReadonlySet<string>>): Promise<LivingFlow[]> {\n  // The vocabulary ladder (`core/capabilities/findings.ts`): with nothing\n  // declared no `#cap-` tag resolves, so no fleet flow can be said to claim anything.\n  const declared = gradableCapabilityIds(req.vocabulary);\n  if (changed.size === 0 || declared === null) return [];\n  if (!(await mentions(await architectureProjectDocuments(req.docsDir), needlesFor(changed)))) return [];\n  const read = useCasesIn(await req.architecture(), req.known);\n  if (read.kind !== \"read\") return [];\n  return read.views.map((view) => ({\n    view,\n    file: viewFile(view),\n    scope: resolveCapabilityTags(view.tags, declared).flatMap((c) => (c.kind === \"resolved\" ? [c.id] : [])),\n    altitude: \"capability\" as const,\n  }));\n}\n\nasync function serviceFlows(req: ChangedPromiseRequest, changed: ReadonlyMap<string, ReadonlySet<string>>): Promise<LivingFlow[]> {\n  const out: LivingFlow[] = [];\n  for (const [service, ids] of changed) {\n    // Sequential on purpose, for `../fleet.ts`'s gate's reason: nearly every\n    // service answers from one readdir and a byte scan, and the rare one that\n    // opens a workspace should not be raced by the ones that do not need one.\n    const pair = req.services.find((doc) => doc.id === service);\n    if (pair === undefined) continue;\n    const paths = await pair.paths();\n    if (!(await mentions(await architectureDocuments(paths.dir), needlesFor(new Map([[service, ids]]))))) continue;\n    const model = await req.serviceModel(paths);\n    if (model.mapUnreadable || model.doc.errors.length > 0) continue;\n    const flows = await readServiceFlows({\n      paths,\n      model: model.doc,\n      known: req.known,\n      ...(model.shape === \"extending\" && model.project !== null\n        ? { extending: { docsDir: req.docsDir, project: model.project } }\n        : {}),\n    });\n    if (flows.kind !== \"read\") continue;\n    for (const view of flows.views) {\n      const file = relative(req.docsDir, join(paths.dir, view.sourcePath ?? \"model.likec4\")).split(/[\\\\/]/).join(\"/\");\n      out.push({ view, file, scope: [service], altitude: \"service\" });\n    }\n  }\n  return out;\n}\n"]}