@ybotok/loam 0.2.0-alpha.1 → 0.2.0-alpha.13

package/dist/commands/rebase/rebase.js.map

@@ -1 +1 @@
-{"version":3,"file":"rebase.js","sourceRoot":"","sources":["../../../src/commands/rebase/rebase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAuB,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC5E,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EACL,YAAY,EACZ,QAAQ,EACR,kBAAkB,EAClB,WAAW,GAGZ,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA+BjD,gCAAgC;AAEhC,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;QAClB,wEAAwE;QACxE,yEAAyE;QACzE,oEAAoE;SACnE,QAAQ,CAAC,aAAa,EAAE,mDAAmD,CAAC;SAC5E,WAAW,CAAC,2FAA2F,CAAC;SACxG,MAAM,CAAC,gBAAgB,EAAE,sEAAsE,CAAC;SAChG,MAAM,CACL,UAAU,EACV,qHAAqH,CACtH;SACA,MAAM,CACL,WAAW,EACX,uIAAuI,CACxI;SACA,MAAM,CAAC,QAAQ,EAAE,qDAAqD,CAAC;SACvE,MAAM,CAAC,KAAK,EAAE,SAA6B,EAAE,IAAmB,EAAE,EAAE;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAE7B,sEAAsE;QACtE,+DAA+D;QAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,cAAc,CAAC;oBAAE,MAAM,GAAG,CAAC;gBAChD,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,oEAAoE;QACpE,qDAAqD;QACrD,IAAI,OAA4B,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC/C,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC;YACH,sEAAsE;YACtE,mEAAmE;YACnE,mEAAmE;YACnE,kCAAkC;YAClC,IAAI,SAAgC,CAAC;YACrC,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,sBAAsB,CAAC;oBAAE,MAAM,GAAG,CAAC;gBACxD,OAAO,IAAI,CAAC,IAAI,EAAE,oBAAoB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACzB,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,oEAAoE;gBACpE,kEAAkE;gBAClE,0DAA0D;gBAC1D,OAAO,IAAI,CACT,IAAI,EACJ,gBAAgB,EAChB,mJAAmJ,CACpJ,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAgB,EAChB,SAAiB,EACjB,IAA0D;IAE1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAEpC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;IAEvB,uEAAuE;IACvE,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;IACzG,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACvD,0EAA0E;QAC1E,iEAAiE;QACjE,OAAO,IAAI,CACT,IAAI,EACJ,gBAAgB,EAChB,GAAG,EAAE,sCAAsC,IAAI,CAAC,OAAO,GAAG;YACxD,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAC5B,CAAC,CAAC,kCAAkC;gBACpC,CAAC,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE5F,sEAAsE;IACtE,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,YAAY,EAAE,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,MAAM,kBAAkB,GAA2B,EAAE,CAAC;IACtD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,gFAAgF;IAChF,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,YAAY,GAChB,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBACpC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC9D,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,yEAAyE;YACzE,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC;YACnE,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;gBAC9D,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,uEAAuE;YACvE,uEAAuE;YACvE,wBAAwB;YACxB,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;YACrE,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;gBAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,yEAAyE;QACzE,oEAAoE;QACpE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACjE,kBAAkB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,oBAAoB,CAAC;YAAE,MAAM,GAAG,CAAC;QACtD,4EAA4E;QAC5E,uEAAuE;QACvE,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,kEAAkE;QAClE,OAAO,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,oEAAoE;QACpE,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAC5E,MAAM,EACN,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,IAAI,CACT,IAAI,EACJ,SAAS,CAAC,IAAI,EACd,SAAS,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,iCAAiC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CACzH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,qBAAqB;IACrB,MAAM,KAAK,GAAG;QACZ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;KAChG,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IAC9F,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;IAEtE,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC;YACP,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE;YACX,QAAQ;YACR,MAAM;YACN,IAAI,EAAE,QAAQ;YACd,wEAAwE;YACxE,sEAAsE;YACtE,2DAA2D;YAC3D,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,cAAc,EAAE,kBAAkB;YAClC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CACT,GAAG,EAAE,4KAA4K,CAClL,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,KAAK,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,+CAA+C,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,wFAAwF,CAAC,CAAC;QACnH,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC3F,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,mBAAmB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACnG,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CACT,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,qEAAqE;gBACxG,4JAA4J,CAC/J,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,sEAAsE;YAC1G,0CAA0C,EAAE,yFAAyF,CACxI,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import type { Command } from \"commander\";\nimport { existsSync } from \"node:fs\";\nimport { loadConfig } from \"../../core/envelope/config.js\";\nimport { NotUtf8DocumentError } from \"../../core/kernel/document-bytes.js\";\nimport { InvalidIdError, assertServiceId } from \"../../core/kernel/ids/service.js\";\nimport { emitJson, fail, repoPath, reportNoConfig } from \"../../core/envelope/json.js\";\nimport { compareIds } from \"../../core/repo/entries.js\";\nimport { featureSpecPaths, SPEC_AXES } from \"../../core/repo/paths.js\";\nimport { missingFeatureMessage, resolveFeature } from \"../../core/repo/repo.js\";\nimport { stageWrites } from \"../../core/staging/commit.js\";\nimport { type CommitRecovery, InterruptedCommitError } from \"../../core/staging/interrupted.js\";\nimport { acquireDocsLock, DocsBusyError } from \"../../core/staging/lock.js\";\nimport { recoverInterruptedCommit } from \"../../core/staging/recovery/recover.js\";\nimport { commitStaged } from \"../../core/staging/txn/transaction.js\";\nimport { type PlannedWrite } from \"../../core/staging/writes.js\";\nimport { plural, sayRecovered } from \"../policy/format.js\";\nimport { FleetContext } from \"../../core/fleet-context.js\";\nimport {\n  planAsyncapi,\n  planAxis,\n  planCapabilityAxis,\n  planOpenapi,\n  type CapabilityPinOutcome,\n  type PinOutcome,\n} from \"./plan.js\";\nimport type { DocsDir } from \"../../core/kernel/ids/dirs.js\";\nimport { rebaseLivingLocked } from \"./living.js\";\n\n/**\n * `loam rebase` — pin a feature's MODIFIED/REMOVED requirements to the living\n * text they are written against.\n *\n * The counterpart to `loam vouch`: vouch stamps a digest of the CODE a living\n * spec was written from, this stamps a digest of the LIVING REQUIREMENT a delta\n * was written from. Both exist so a later `loam validate` can tell \"still true\"\n * from \"something moved underneath\", and both are worth exactly what they claim\n * — so this command computes every pin from what is on disk right now and never\n * invents one for a requirement that addresses nothing living.\n *\n * It is the fix `delta.baseline-stale` sends people to, which is why the\n * rewrite is line SURGERY rather than a reserialize: a delta document is\n * authored prose — section headings, comments, the order the author chose — and\n * `serializeRequirements` would flatten all of it into a bare requirement run.\n * One line changes per requirement; every other byte is copied.\n *\n * Restamping is the LAST step of resolving a collision, never the resolution\n * itself: a pin says \"I read this version\", so running it without re-reading\n * makes it a lie with a digest on it. The output says so on the way out.\n */\n\ninterface RebaseOptions {\n  service?: string;\n  json?: boolean;\n  dryRun?: boolean;\n  living?: boolean;\n}\n\n/** What happened to one pin. */\n\nexport function registerRebase(program: Command): void {\n  program\n    .command(\"rebase\")\n    // Optional ONLY because `--living` names no feature: that mode pins the\n    // living corpus itself. Every existing invocation still parses, which is\n    // what makes the relaxation additive rather than a contract change.\n    .argument(\"[featureId]\", \"feature id, e.g. FEAT-101 — omitted with --living\")\n    .description(\"Pin a feature's MODIFIED/REMOVED requirements to the living text they are written against\")\n    .option(\"--service <id>\", \"restrict to one service (default: every service the feature touches)\")\n    .option(\n      \"--living\",\n      \"pin the LIVING corpus's `Realizes:` entries to the capability requirements they name, instead of a feature's deltas\",\n    )\n    .option(\n      \"--dry-run\",\n      \"print what would be pinned and write nothing — beyond first finishing a predecessor's interrupted commit, exactly as a real run would\",\n    )\n    .option(\"--json\", \"emit the machine contract instead of the human view\")\n    .action(async (featureId: string | undefined, opts: RebaseOptions) => {\n      const json = opts.json === true;\n      const loaded = await loadConfig();\n      if (loaded.kind !== \"loaded\") {\n        reportNoConfig(json, loaded);\n        return;\n      }\n      const config = loaded.config;\n\n      // The id grammar on the RAW argument, before it reaches a path join —\n      // one grammar for the whole tool (core/kernel/ids/service.ts).\n      if (opts.service !== undefined) {\n        try {\n          assertServiceId(opts.service, \"--service\");\n        } catch (err) {\n          if (!(err instanceof InvalidIdError)) throw err;\n          return fail(json, \"invalid-option\", err.message);\n        }\n      }\n\n      // The living specs must not move between the read that computes a pin and\n      // the write that records it: a digest taken over a document an archive\n      // replaced a millisecond later is precisely the false \"I read this\" the\n      // pin exists to make impossible. One writer per docs repo, refusing\n      // rather than queueing, exactly as archive takes it.\n      let release: () => Promise<void>;\n      try {\n        release = await acquireDocsLock(config.docsDir);\n      } catch (err) {\n        if (!(err instanceof DocsBusyError)) throw err;\n        return fail(json, \"docs-busy\", err.message);\n      }\n      try {\n        // A journal in the repo means the LAST write never finished — reading\n        // living documents to compute pins over a half-commit would digest\n        // bytes no run ever produced. Recover (or refuse) first, under the\n        // same lock the commit will hold.\n        let recovered: CommitRecovery | null;\n        try {\n          recovered = await recoverInterruptedCommit(config.docsDir);\n        } catch (err) {\n          if (!(err instanceof InterruptedCommitError)) throw err;\n          return fail(json, \"commit-interrupted\", err.message);\n        }\n        if (opts.living === true) {\n          await rebaseLivingLocked(config.docsDir, opts);\n          return;\n        }\n        if (featureId === undefined) {\n          // The argument is optional only for the mode that names no feature.\n          // Refusing here rather than making the whole command feature-less\n          // keeps one rule: every pin says which documents it read.\n          return fail(\n            json,\n            \"invalid-option\",\n            \"loam rebase needs a feature id — e.g. `loam rebase FEAT-101`. To pin the living corpus's `Realizes:` entries instead, run `loam rebase --living`.\",\n          );\n        }\n        await rebaseLocked(config.docsDir, featureId, { ...opts, recovered });\n      } finally {\n        await release();\n      }\n    });\n}\n\nasync function rebaseLocked(\n  docsDir: DocsDir,\n  featureId: string,\n  opts: RebaseOptions & { recovered: CommitRecovery | null },\n): Promise<void> {\n  const json = opts.json === true;\n  const dryRun = opts.dryRun === true;\n\n  const feature = await resolveFeature(docsDir, featureId, \"exclude\");\n  if (!feature) {\n    return fail(json, \"unknown-target\", await missingFeatureMessage(docsDir, featureId));\n  }\n  const { id } = feature;\n\n  // The enumeration's own id is what travels on when --service names one\n  // (`entry.id` rather than the argument — repo/service-target.ts's rule):\n  // equal as strings, and only one of them was produced by a readdir.\n  const chosen = opts.service === undefined ? undefined : feature.services.find((s) => s === opts.service);\n  if (opts.service !== undefined && chosen === undefined) {\n    // The refusal names the choices, the way `loam delta`'s does: a typo must\n    // never be indistinguishable from a feature with nothing to pin.\n    return fail(\n      json,\n      \"unknown-target\",\n      `${id} carries no requirement delta for '${opts.service}'` +\n        (feature.services.length === 0\n          ? \" — it touches no service at all.\"\n          : ` — it touches: ${[...feature.services].sort(compareIds).join(\", \")}.`),\n    );\n  }\n  const services = (chosen === undefined ? [...feature.services] : [chosen]).sort(compareIds);\n\n  // One read index for the whole loop below: every planner resolves its\n  // living document through `locateServicePaths`, and without a shared\n  // context each of those calls is a fresh fleet walk — services × axes of\n  // them per run, on a tree that cannot change under the lock this holds.\n  const repo = { docsDir, fleet: new FleetContext() };\n  const outcomes: PinOutcome[] = [];\n  const capabilityOutcomes: CapabilityPinOutcome[] = [];\n  const writes: PlannedWrite[] = [];\n  // The business corpus this feature changes. Skipped entirely under `--service`:\n  // that flag means \"restrict to one service\", and a capability names none — so\n  // pinning capability deltas under it would write files the caller narrowed the\n  // command to exclude. One `existsSync` when the feature carries no capability\n  // delta, which is every feature in a fleet that has not adopted the axis.\n  const capabilities =\n    chosen === undefined ? (await repo.fleet.featureCapabilityDeltas(feature.dir)).docs : [];\n  try {\n    for (const service of services) {\n      for (const axis of SPEC_AXES) {\n        const specPath = featureSpecPaths(feature.dir, service)[axis.key];\n        if (!existsSync(specPath)) continue;\n        const planned = await planAxis(repo, service, axis, specPath);\n        outcomes.push(...planned.outcomes);\n        if (planned.content !== null) writes.push({ path: specPath, content: planned.content });\n      }\n      // The contract axis. It needs the pin more than the requirement axes do:\n      // a requirement delta spells only the requirements it changes, while an\n      // openapi delta is a COMPLETE document and spells the whole contract.\n      const openapiPath = featureSpecPaths(feature.dir, service).openapi;\n      if (existsSync(openapiPath)) {\n        const planned = await planOpenapi(repo, service, openapiPath);\n        outcomes.push(...planned.outcomes);\n        if (planned.content !== null) writes.push({ path: openapiPath, content: planned.content });\n      }\n      // The event axis, for the openapi reason: a feature's asyncapi.yaml is\n      // a complete document too, so its quotes need pins or the merge cannot\n      // tell them from edits.\n      const asyncapiPath = featureSpecPaths(feature.dir, service).asyncapi;\n      if (existsSync(asyncapiPath)) {\n        const planned = await planAsyncapi(repo, service, asyncapiPath);\n        outcomes.push(...planned.outcomes);\n        if (planned.content !== null) writes.push({ path: asyncapiPath, content: planned.content });\n      }\n    }\n    // The business axis, after the services and in the same transaction: a\n    // feature that changes a promise and the services keeping it is ONE act,\n    // and half of it pinned is the state the journal exists to prevent.\n    for (const doc of capabilities) {\n      const planned = await planCapabilityAxis(repo, doc.id, doc.spec);\n      capabilityOutcomes.push(...planned.outcomes);\n      if (planned.content !== null) writes.push({ path: doc.spec, content: planned.content });\n    }\n  } catch (err) {\n    if (!(err instanceof NotUtf8DocumentError)) throw err;\n    // A pin is a claim about text somebody read. Over a document loam could not\n    // decode it would be a digest of mojibake with loam's name on it — the\n    // precise false claim this command exists to prevent — and the next archive\n    // would land a stale delta over living text on the strength of it. So it\n    // refuses by name and writes nothing, exactly as `loam archive` refuses a\n    // merge it could not read, under archive's code. The refusal is here, in\n    // the PLAN, so it lands before stageWrites: no file is touched, and a\n    // feature spanning four services does not get two of them pinned.\n    return fail(json, \"merge-failed\", `rebase ${id} failed — nothing was pinned: ${err.message}`);\n  }\n\n  if (!dryRun && writes.length > 0) {\n    // Staged and committed through the journaled transaction: a feature\n    // spanning four services is one act, and neither a full disk between its\n    // second and third file NOR a kill between two renames may leave two of\n    // them pinned to a reading the other two never saw — the journal makes\n    // the second case recoverable where rollback alone could not see it.\n    const staged = await stageWrites(writes);\n    const committed = await commitStaged(\n      { root: docsDir, command: \"rebase\", rerun: `loam rebase ${id}`, target: id },\n      staged,\n      \"pinned\",\n    );\n    if (!committed.ok) {\n      return fail(\n        json,\n        committed.code,\n        committed.code === \"merge-failed\" ? `rebase ${id} failed — nothing was pinned: ${committed.message}` : committed.message,\n      );\n    }\n  }\n\n  // One line per pin, whichever corpus it came from: what to call the document,\n  // and the record itself. The two lists are reported separately in `--json`\n  // (the published `pins[]`/`services[]` keys keep meaning exactly what they\n  // meant) and together here, because a human rebasing one feature wants one\n  // list in one order.\n  const lines = [\n    ...outcomes.map((o) => ({ where: `${o.service}/${o.file}`, pin: o })),\n    ...capabilityOutcomes.map((o) => ({ where: `capabilities/${o.capability}/${o.file}`, pin: o })),\n  ];\n  const changed = lines.filter((l) => l.pin.status === \"pinned\" || l.pin.status === \"repinned\");\n  const unresolved = lines.filter((l) => l.pin.status === \"unresolved\");\n\n  if (json) {\n    emitJson({\n      command: \"rebase\",\n      feature: id,\n      services,\n      dryRun,\n      pins: outcomes,\n      // Additive, and separate from `pins[]` on purpose: `PinOutcome.service`\n      // is a published field, and a capability id written into it would say\n      // something false to every consumer that already reads it.\n      capabilities: capabilities.map((c) => c.id),\n      capabilityPins: capabilityOutcomes,\n      written: dryRun ? [] : writes.map((w) => repoPath(docsDir, w.path)),\n      ...(opts.recovered === null ? {} : { recovered: opts.recovered }),\n    });\n    return;\n  }\n\n  if (lines.length === 0) {\n    console.log(\n      `${id}: nothing to pin — a baseline only means something for a requirement, an operation, a path-level key, a component or an event slot that already exists in the living docs.`,\n    );\n    return;\n  }\n\n  if (opts.recovered !== null) console.log(`${sayRecovered(opts.recovered)}\\n`);\n  console.log(`${id}${dryRun ? \" (dry run)\" : \"\"}\\n`);\n  for (const { where, pin: o } of lines) {\n    const what = `${where}  ${o.kind} ${o.target}`;\n    if (o.status === \"unresolved\") {\n      console.log(`  · ${what} — not in the living docs yet, nothing to pin`);\n    } else if (o.status === \"unwritable\") {\n      console.log(`  ! ${what} — a YAML alias (or a key loam cannot address by name); loam will not stamp through it`);\n    } else if (o.status === \"unchanged\") {\n      console.log(`  = ${what} — already ${o.to}`);\n    } else if (o.status === \"pinned\") {\n      console.log(`  + ${what} — pinned ${o.to}`);\n    } else {\n      console.log(`  ~ ${what} — ${o.from} → ${o.to}`);\n    }\n  }\n\n  if (changed.length === 0) {\n    console.log(`\\nNothing to write: every pin already names the living version.`);\n  } else if (dryRun) {\n    console.log(`\\n${plural(changed.length, \"pin\")} would be written. Nothing was written.`);\n  } else {\n    console.log(`\\n${plural(changed.length, \"pin\")} written across ${plural(writes.length, \"file\")}.`);\n    // The one sentence that keeps this command honest. A pin is a claim about\n    // what its author read, and a `repinned` line means the living text moved\n    // under a delta that still says what it said before — restamping does not\n    // fold in the change it just stopped reporting.\n    const repinned = changed.filter((l) => l.pin.status === \"repinned\");\n    if (repinned.length > 0) {\n      console.log(\n        `\\n⚠ ${plural(repinned.length, \"pin\")} moved since this delta was written. A pin records what you read — ` +\n          `re-read those living requirements and operations and fold in what you still mean, or the next archive lands your version over theirs with loam's blessing.`,\n      );\n    }\n  }\n  if (unresolved.length > 0) {\n    console.log(\n      `\\n${plural(unresolved.length, \"item\")} could not be pinned because the living docs do not have them yet — ` +\n        `for a requirement, \\`loam dependencies ${id}\\` says which feature introduces it first; for an operation, this feature is adding it.`,\n    );\n  }\n}\n"]}
+{"version":3,"file":"rebase.js","sourceRoot":"","sources":["../../../src/commands/rebase/rebase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAuB,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EACL,YAAY,EACZ,QAAQ,EACR,kBAAkB,EAClB,WAAW,GAGZ,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,YAAY,EAAc,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AA+BjD,gCAAgC;AAEhC,MAAM,UAAU,cAAc,CAAC,OAAgB;IAC7C,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;QAClB,wEAAwE;QACxE,yEAAyE;QACzE,oEAAoE;SACnE,QAAQ,CAAC,aAAa,EAAE,mDAAmD,CAAC;SAC5E,WAAW,CAAC,2FAA2F,CAAC;SACxG,MAAM,CAAC,gBAAgB,EAAE,sEAAsE,CAAC;SAChG,MAAM,CACL,UAAU,EACV,qHAAqH,CACtH;SACA,MAAM,CACL,WAAW,EACX,uIAAuI,CACxI;SACA,MAAM,CAAC,QAAQ,EAAE,qDAAqD,CAAC;SACvE,MAAM,CAAC,KAAK,EAAE,SAA6B,EAAE,IAAmB,EAAE,EAAE;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO;QAE5B,sEAAsE;QACtE,+DAA+D;QAC/D,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,cAAc,CAAC;oBAAE,MAAM,GAAG,CAAC;gBAChD,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,oEAAoE;QACpE,qDAAqD;QACrD,EAAE;QACF,sEAAsE;QACtE,mEAAmE;QACnE,mEAAmE;QACnE,kCAAkC;QAClC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACzB,MAAM,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,oEAAoE;gBACpE,kEAAkE;gBAClE,0DAA0D;gBAC1D,OAAO,IAAI,CACT,IAAI,EACJ,gBAAgB,EAChB,mJAAmJ,CACpJ,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1F,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAgB,EAChB,SAAiB,EACjB,IAA0D;IAE1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAEpC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;IAEvB,uEAAuE;IACvE,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC;IACzG,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACvD,0EAA0E;QAC1E,iEAAiE;QACjE,OAAO,IAAI,CACT,IAAI,EACJ,gBAAgB,EAChB,GAAG,EAAE,sCAAsC,IAAI,CAAC,OAAO,GAAG;YACxD,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAC5B,CAAC,CAAC,kCAAkC;gBACpC,CAAC,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE5F,sEAAsE;IACtE,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,YAAY,EAAE,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,MAAM,kBAAkB,GAA2B,EAAE,CAAC;IACtD,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAY,EAAE,CAAC;IAC5B,gFAAgF;IAChF,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,YAAY,GAChB,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBACpC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC9D,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,yEAAyE;YACzE,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC;YACnE,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;gBAC9D,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,uEAAuE;YACvE,uEAAuE;YACvE,wBAAwB;YACxB,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC;YACrE,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;gBAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,yEAAyE;QACzE,oEAAoE;QACpE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACjE,kBAAkB,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtH,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,eAAe,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACjI,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,oBAAoB,CAAC;YAAE,MAAM,GAAG,CAAC;QACtD,4EAA4E;QAC5E,uEAAuE;QACvE,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,kEAAkE;QAClE,OAAO,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,oEAAoE;QACpE,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAC5E,MAAM,EACN,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,IAAI,CACT,IAAI,EACJ,SAAS,CAAC,IAAI,EACd,SAAS,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,iCAAiC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CACzH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,qBAAqB;IACrB,MAAM,KAAK,GAAG;QACZ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrE,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;KAChG,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IAC9F,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;IAEtE,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC;YACP,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,EAAE;YACX,QAAQ;YACR,MAAM;YACN,IAAI,EAAE,QAAQ;YACd,wEAAwE;YACxE,sEAAsE;YACtE,2DAA2D;YAC3D,YAAY,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,cAAc,EAAE,kBAAkB;YAClC,wEAAwE;YACxE,uEAAuE;YACvE,wEAAwE;YACxE,iDAAiD;YACjD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAClC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACnE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CACT,GAAG,EAAE,4KAA4K,CAClL,CAAC;QACF,UAAU,CAAC,OAAO,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,KAAK,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,KAAK,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,+CAA+C,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACrC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,wFAAwF,CAAC,CAAC;QACnH,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC3F,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,mBAAmB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACnG,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CACT,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,qEAAqE;gBACxG,4JAA4J,CAC/J,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,sEAAsE;YAC1G,0CAA0C,EAAE,wFAAwF;YACpI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,0GAA0G,CAAC,CAC5I,CAAC;IACJ,CAAC;IACD,UAAU,CAAC,OAAO,CAAC,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,OAAyB;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CACT,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,wBAAwB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,wEAAwE;QACvJ,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,yDAAyD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAChI,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACnE,CAAC","sourcesContent":["import type { Command } from \"commander\";\nimport { existsSync } from \"node:fs\";\nimport { NotUtf8DocumentError } from \"../../core/kernel/document-bytes.js\";\nimport { InvalidIdError, assertServiceId } from \"../../core/kernel/ids/service.js\";\nimport { configOrRefuse, emitJson, fail, repoPath } from \"../../core/envelope/json.js\";\nimport { compareIds } from \"../../core/repo/entries.js\";\nimport { featureSpecPaths, SPEC_AXES } from \"../../core/repo/paths.js\";\nimport { missingFeatureMessage, resolveFeature } from \"../../core/repo/repo.js\";\nimport { stageWrites } from \"../../core/staging/commit.js\";\nimport { type CommitRecovery } from \"../../core/staging/interrupted.js\";\nimport { openCommitWindow } from \"../../core/staging/recovery/recover.js\";\nimport { commitStaged } from \"../../core/staging/txn/transaction.js\";\nimport { type PlannedWrite } from \"../../core/staging/writes.js\";\nimport { plural, sayRecovered } from \"../policy/format.js\";\nimport { FleetContext } from \"../../core/fleet-context.js\";\nimport {\n  planAsyncapi,\n  planAxis,\n  planCapabilityAxis,\n  planOpenapi,\n  type CapabilityPinOutcome,\n  type PinOutcome,\n} from \"./plan.js\";\nimport type { DocsDir } from \"../../core/kernel/ids/dirs.js\";\nimport { issueFinding, type Issue } from \"../../core/vocabulary/issue.js\";\nimport { retiredLookup } from \"../../core/coherence/retired/archived.js\";\nimport { serviceRevivals } from \"../../core/coherence/retired/revival/revived.js\";\nimport { rebaseLivingLocked } from \"./living.js\";\n\n/**\n * `loam rebase` — pin a feature's MODIFIED/REMOVED requirements to the living\n * text they are written against.\n *\n * The counterpart to `loam vouch`: vouch stamps a digest of the CODE a living\n * spec was written from, this stamps a digest of the LIVING REQUIREMENT a delta\n * was written from. Both exist so a later `loam validate` can tell \"still true\"\n * from \"something moved underneath\", and both are worth exactly what they claim\n * — so this command computes every pin from what is on disk right now and never\n * invents one for a requirement that addresses nothing living.\n *\n * It is the fix `delta.baseline-stale` sends people to, which is why the\n * rewrite is line SURGERY rather than a reserialize: a delta document is\n * authored prose — section headings, comments, the order the author chose — and\n * `serializeRequirements` would flatten all of it into a bare requirement run.\n * One line changes per requirement; every other byte is copied.\n *\n * Restamping is the LAST step of resolving a collision, never the resolution\n * itself: a pin says \"I read this version\", so running it without re-reading\n * makes it a lie with a digest on it. The output says so on the way out.\n */\n\ninterface RebaseOptions {\n  service?: string;\n  json?: boolean;\n  dryRun?: boolean;\n  living?: boolean;\n}\n\n/** What happened to one pin. */\n\nexport function registerRebase(program: Command): void {\n  program\n    .command(\"rebase\")\n    // Optional ONLY because `--living` names no feature: that mode pins the\n    // living corpus itself. Every existing invocation still parses, which is\n    // what makes the relaxation additive rather than a contract change.\n    .argument(\"[featureId]\", \"feature id, e.g. FEAT-101 — omitted with --living\")\n    .description(\"Pin a feature's MODIFIED/REMOVED requirements to the living text they are written against\")\n    .option(\"--service <id>\", \"restrict to one service (default: every service the feature touches)\")\n    .option(\n      \"--living\",\n      \"pin the LIVING corpus's `Realizes:` entries to the capability requirements they name, instead of a feature's deltas\",\n    )\n    .option(\n      \"--dry-run\",\n      \"print what would be pinned and write nothing — beyond first finishing a predecessor's interrupted commit, exactly as a real run would\",\n    )\n    .option(\"--json\", \"emit the machine contract instead of the human view\")\n    .action(async (featureId: string | undefined, opts: RebaseOptions) => {\n      const json = opts.json === true;\n      const config = await configOrRefuse(json);\n      if (config === null) return;\n\n      // The id grammar on the RAW argument, before it reaches a path join —\n      // one grammar for the whole tool (core/kernel/ids/service.ts).\n      if (opts.service !== undefined) {\n        try {\n          assertServiceId(opts.service, \"--service\");\n        } catch (err) {\n          if (!(err instanceof InvalidIdError)) throw err;\n          return fail(json, \"invalid-option\", err.message);\n        }\n      }\n\n      // The living specs must not move between the read that computes a pin and\n      // the write that records it: a digest taken over a document an archive\n      // replaced a millisecond later is precisely the false \"I read this\" the\n      // pin exists to make impossible. One writer per docs repo, refusing\n      // rather than queueing, exactly as archive takes it.\n      //\n      // A journal in the repo means the LAST write never finished — reading\n      // living documents to compute pins over a half-commit would digest\n      // bytes no run ever produced. Recover (or refuse) first, under the\n      // same lock the commit will hold.\n      const opened = await openCommitWindow(config.docsDir, 0);\n      if (!opened.ok) return fail(json, opened.code, opened.message);\n      try {\n        if (opts.living === true) {\n          await rebaseLivingLocked(config.docsDir, opts);\n          return;\n        }\n        if (featureId === undefined) {\n          // The argument is optional only for the mode that names no feature.\n          // Refusing here rather than making the whole command feature-less\n          // keeps one rule: every pin says which documents it read.\n          return fail(\n            json,\n            \"invalid-option\",\n            \"loam rebase needs a feature id — e.g. `loam rebase FEAT-101`. To pin the living corpus's `Realizes:` entries instead, run `loam rebase --living`.\",\n          );\n        }\n        await rebaseLocked(config.docsDir, featureId, { ...opts, recovered: opened.recovered });\n      } finally {\n        await opened.release();\n      }\n    });\n}\n\nasync function rebaseLocked(\n  docsDir: DocsDir,\n  featureId: string,\n  opts: RebaseOptions & { recovered: CommitRecovery | null },\n): Promise<void> {\n  const json = opts.json === true;\n  const dryRun = opts.dryRun === true;\n\n  const feature = await resolveFeature(docsDir, featureId, \"exclude\");\n  if (!feature) {\n    return fail(json, \"unknown-target\", await missingFeatureMessage(docsDir, featureId));\n  }\n  const { id } = feature;\n\n  // The enumeration's own id is what travels on when --service names one\n  // (`entry.id` rather than the argument — repo/service-target.ts's rule):\n  // equal as strings, and only one of them was produced by a readdir.\n  const chosen = opts.service === undefined ? undefined : feature.services.find((s) => s === opts.service);\n  if (opts.service !== undefined && chosen === undefined) {\n    // The refusal names the choices, the way `loam delta`'s does: a typo must\n    // never be indistinguishable from a feature with nothing to pin.\n    return fail(\n      json,\n      \"unknown-target\",\n      `${id} carries no requirement delta for '${opts.service}'` +\n        (feature.services.length === 0\n          ? \" — it touches no service at all.\"\n          : ` — it touches: ${[...feature.services].sort(compareIds).join(\", \")}.`),\n    );\n  }\n  const services = (chosen === undefined ? [...feature.services] : [chosen]).sort(compareIds);\n\n  // One read index for the whole loop below: every planner resolves its\n  // living document through `locateServicePaths`, and without a shared\n  // context each of those calls is a fresh fleet walk — services × axes of\n  // them per run, on a tree that cannot change under the lock this holds.\n  const repo = { docsDir, fleet: new FleetContext() };\n  const outcomes: PinOutcome[] = [];\n  const capabilityOutcomes: CapabilityPinOutcome[] = [];\n  const writes: PlannedWrite[] = [];\n  const revived: Issue[] = [];\n  // The business corpus this feature changes. Skipped entirely under `--service`:\n  // that flag means \"restrict to one service\", and a capability names none — so\n  // pinning capability deltas under it would write files the caller narrowed the\n  // command to exclude. One `existsSync` when the feature carries no capability\n  // delta, which is every feature in a fleet that has not adopted the axis.\n  const capabilities =\n    chosen === undefined ? (await repo.fleet.featureCapabilityDeltas(feature.dir)).docs : [];\n  try {\n    for (const service of services) {\n      for (const axis of SPEC_AXES) {\n        const specPath = featureSpecPaths(feature.dir, service)[axis.key];\n        if (!existsSync(specPath)) continue;\n        const planned = await planAxis(repo, service, axis, specPath);\n        outcomes.push(...planned.outcomes);\n        if (planned.content !== null) writes.push({ path: specPath, content: planned.content });\n      }\n      // The contract axis. It needs the pin more than the requirement axes do:\n      // a requirement delta spells only the requirements it changes, while an\n      // openapi delta is a COMPLETE document and spells the whole contract.\n      const openapiPath = featureSpecPaths(feature.dir, service).openapi;\n      if (existsSync(openapiPath)) {\n        const planned = await planOpenapi(repo, service, openapiPath);\n        outcomes.push(...planned.outcomes);\n        if (planned.content !== null) writes.push({ path: openapiPath, content: planned.content });\n      }\n      // The event axis, for the openapi reason: a feature's asyncapi.yaml is\n      // a complete document too, so its quotes need pins or the merge cannot\n      // tell them from edits.\n      const asyncapiPath = featureSpecPaths(feature.dir, service).asyncapi;\n      if (existsSync(asyncapiPath)) {\n        const planned = await planAsyncapi(repo, service, asyncapiPath);\n        outcomes.push(...planned.outcomes);\n        if (planned.content !== null) writes.push({ path: asyncapiPath, content: planned.content });\n      }\n    }\n    // The business axis, after the services and in the same transaction: a\n    // feature that changes a promise and the services keeping it is ONE act,\n    // and half of it pinned is the state the journal exists to prevent.\n    for (const doc of capabilities) {\n      const planned = await planCapabilityAxis(repo, doc.id, doc.spec);\n      capabilityOutcomes.push(...planned.outcomes);\n      if (planned.content !== null) writes.push({ path: doc.spec, content: planned.content });\n    }\n    // An operation or event slot the living docs do not hold reads `unresolved`\n    // above — \"this feature is adding it\". For one an ARCHIVED feature retired,\n    // that is the false sentence that put retired operations back: unpinned, the\n    // merge upserts it as an addition. Rebase pins nothing for it, so what it\n    // owes is the same finding the gate raises, said here before the archive\n    // refuses it, and the decision left to the human. Asked of the documents\n    // as this run leaves them (`planned`): a repin over whatever lives at an\n    // address now turns a quote the merge skipped into an edit it writes, and\n    // a revival that edit makes is this run's to report — the next validate\n    // reports it, and a dry run must say what the real one would leave.\n    const retired = retiredLookup(docsDir, repo.fleet);\n    const planned = new Map(writes.flatMap((w) => (typeof w.content === \"string\" ? [[w.path, w.content] as const] : [])));\n    for (const service of services) {\n      revived.push(...(await serviceRevivals({ docsDir, featureDir: feature.dir, service, retired, context: repo.fleet, planned })));\n    }\n  } catch (err) {\n    if (!(err instanceof NotUtf8DocumentError)) throw err;\n    // A pin is a claim about text somebody read. Over a document loam could not\n    // decode it would be a digest of mojibake with loam's name on it — the\n    // precise false claim this command exists to prevent — and the next archive\n    // would land a stale delta over living text on the strength of it. So it\n    // refuses by name and writes nothing, exactly as `loam archive` refuses a\n    // merge it could not read, under archive's code. The refusal is here, in\n    // the PLAN, so it lands before stageWrites: no file is touched, and a\n    // feature spanning four services does not get two of them pinned.\n    return fail(json, \"merge-failed\", `rebase ${id} failed — nothing was pinned: ${err.message}`);\n  }\n\n  if (!dryRun && writes.length > 0) {\n    // Staged and committed through the journaled transaction: a feature\n    // spanning four services is one act, and neither a full disk between its\n    // second and third file NOR a kill between two renames may leave two of\n    // them pinned to a reading the other two never saw — the journal makes\n    // the second case recoverable where rollback alone could not see it.\n    const staged = await stageWrites(writes);\n    const committed = await commitStaged(\n      { root: docsDir, command: \"rebase\", rerun: `loam rebase ${id}`, target: id },\n      staged,\n      \"pinned\",\n    );\n    if (!committed.ok) {\n      return fail(\n        json,\n        committed.code,\n        committed.code === \"merge-failed\" ? `rebase ${id} failed — nothing was pinned: ${committed.message}` : committed.message,\n      );\n    }\n  }\n\n  // One line per pin, whichever corpus it came from: what to call the document,\n  // and the record itself. The two lists are reported separately in `--json`\n  // (the published `pins[]`/`services[]` keys keep meaning exactly what they\n  // meant) and together here, because a human rebasing one feature wants one\n  // list in one order.\n  const lines = [\n    ...outcomes.map((o) => ({ where: `${o.service}/${o.file}`, pin: o })),\n    ...capabilityOutcomes.map((o) => ({ where: `capabilities/${o.capability}/${o.file}`, pin: o })),\n  ];\n  const changed = lines.filter((l) => l.pin.status === \"pinned\" || l.pin.status === \"repinned\");\n  const unresolved = lines.filter((l) => l.pin.status === \"unresolved\");\n\n  if (json) {\n    emitJson({\n      command: \"rebase\",\n      feature: id,\n      services,\n      dryRun,\n      pins: outcomes,\n      // Additive, and separate from `pins[]` on purpose: `PinOutcome.service`\n      // is a published field, and a capability id written into it would say\n      // something false to every consumer that already reads it.\n      capabilities: capabilities.map((c) => c.id),\n      capabilityPins: capabilityOutcomes,\n      // Additive: the `openapi.op-revived` / `asyncapi.slot-revived` findings\n      // for what this feature spells that an archived feature retired. Their\n      // `pins[]` rows still say `unresolved` — true, and published — and this\n      // key is what says those rows are not additions.\n      revived: revived.map(issueFinding),\n      written: dryRun ? [] : writes.map((w) => repoPath(docsDir, w.path)),\n      ...(opts.recovered === null ? {} : { recovered: opts.recovered }),\n    });\n    return;\n  }\n\n  if (lines.length === 0) {\n    console.log(\n      `${id}: nothing to pin — a baseline only means something for a requirement, an operation, a path-level key, a component or an event slot that already exists in the living docs.`,\n    );\n    sayRevived(revived);\n    return;\n  }\n\n  if (opts.recovered !== null) console.log(`${sayRecovered(opts.recovered)}\\n`);\n  console.log(`${id}${dryRun ? \" (dry run)\" : \"\"}\\n`);\n  for (const { where, pin: o } of lines) {\n    const what = `${where}  ${o.kind} ${o.target}`;\n    if (o.status === \"unresolved\") {\n      console.log(`  · ${what} — not in the living docs yet, nothing to pin`);\n    } else if (o.status === \"unwritable\") {\n      console.log(`  ! ${what} — a YAML alias (or a key loam cannot address by name); loam will not stamp through it`);\n    } else if (o.status === \"unchanged\") {\n      console.log(`  = ${what} — already ${o.to}`);\n    } else if (o.status === \"pinned\") {\n      console.log(`  + ${what} — pinned ${o.to}`);\n    } else {\n      console.log(`  ~ ${what} — ${o.from} → ${o.to}`);\n    }\n  }\n\n  if (changed.length === 0) {\n    console.log(`\\nNothing to write: every pin already names the living version.`);\n  } else if (dryRun) {\n    console.log(`\\n${plural(changed.length, \"pin\")} would be written. Nothing was written.`);\n  } else {\n    console.log(`\\n${plural(changed.length, \"pin\")} written across ${plural(writes.length, \"file\")}.`);\n    // The one sentence that keeps this command honest. A pin is a claim about\n    // what its author read, and a `repinned` line means the living text moved\n    // under a delta that still says what it said before — restamping does not\n    // fold in the change it just stopped reporting.\n    const repinned = changed.filter((l) => l.pin.status === \"repinned\");\n    if (repinned.length > 0) {\n      console.log(\n        `\\n⚠ ${plural(repinned.length, \"pin\")} moved since this delta was written. A pin records what you read — ` +\n          `re-read those living requirements and operations and fold in what you still mean, or the next archive lands your version over theirs with loam's blessing.`,\n      );\n    }\n  }\n  if (unresolved.length > 0) {\n    console.log(\n      `\\n${plural(unresolved.length, \"item\")} could not be pinned because the living docs do not have them yet — ` +\n        `for a requirement, \\`loam dependencies ${id}\\` says which feature introduces it first; for an operation, this feature is adding it` +\n        (revived.length === 0 ? \".\" : \", unless an archived feature retired it or moved it away — those are listed below, and they are not new.\"),\n    );\n  }\n  sayRevived(revived);\n}\n\n/**\n * The revival findings, in the gate's own words. Printed rather than acted on:\n * deleting a quote and re-adding a retired operation on purpose are both\n * legitimate, and which one this is is the author's call. The sentence once\n * said \"nothing was pinned\" for them — true of a retired entry, which has no\n * living version, and false of a quote this run repinned over whatever lives\n * at its address now, the very pin that made it a revival.\n */\nfunction sayRevived(revived: readonly Issue[]): void {\n  if (revived.length === 0) return;\n  const one = revived.length === 1;\n  console.log(\n    `\\n⚠ ${plural(revived.length, \"item\")} this feature spells ${one ? \"was\" : \"were\"} RETIRED by an archived feature, or moved to another address by one — ` +\n      `${one ? \"it is\" : \"they are\"} not new, pinned or not, and \\`loam archive\\` refuses ${one ? \"it\" : \"them\"} until you decide:`,\n  );\n  for (const issue of revived) console.log(`  ⚠ ${issue.message}`);\n}\n"]}

package/dist/commands/seed/commit.js

@@ -5,7 +5,7 @@
  * the docs lock, nothing outside it does, and the module prints nothing —
  * the caller renders every arm.
  *
- * The checks live UNDER the lock on purpose: the never-overwrite promise is a
+ * The three refusals live UNDER the lock on purpose: the never-overwrite promise is a
  * statement about the landscape as it is at the moment of the write, and an
  * unlocked classification would be a TOCTOU against every other docs writer.
  */
@@ -16,34 +16,21 @@ import { isLandscapeStub } from "../../core/scaffold/landscape.js";
 import { parseServiceId } from "../../core/kernel/ids/service.js";
 import { landscapePath } from "../../core/repo/paths.js";
 import { listFleetTree } from "../../core/repo/repo.js";
+import { authoredRefusal } from "../../core/repo/tree/render/service/header.js";
 import { DocsRepoUnavailableError } from "../../core/repo/state.js";
 import { stageWrites } from "../../core/staging/commit.js";
-import { InterruptedCommitError } from "../../core/staging/interrupted.js";
-import { acquireDocsLockWaiting, DocsBusyError, LOCK_WAIT_MS } from "../../core/staging/lock.js";
-import { recoverInterruptedCommit } from "../../core/staging/recovery/recover.js";
+import {} from "../../core/staging/interrupted.js";
+import { LOCK_WAIT_MS } from "../../core/staging/lock.js";
+import { openCommitWindow } from "../../core/staging/recovery/recover.js";
 import { commitStaged } from "../../core/staging/txn/transaction.js";
 import { planSeedWrites } from "./plan.js";
 export async function commitSeed(req) {
     const { docsDir } = req;
-    let releaseLock;
+    const opened = await openCommitWindow(docsDir, LOCK_WAIT_MS);
+    if (!opened.ok)
+        return opened;
+    const { recovered } = opened;
     try {
-        releaseLock = await acquireDocsLockWaiting(docsDir, LOCK_WAIT_MS);
-    }
-    catch (err) {
-        if (err instanceof DocsBusyError)
-            return { ok: false, code: "docs-busy", message: err.message };
-        throw err;
-    }
-    try {
-        let recovered;
-        try {
-            recovered = await recoverInterruptedCommit(docsDir);
-        }
-        catch (err) {
-            if (!(err instanceof InterruptedCommitError))
-                throw err;
-            return { ok: false, code: "commit-interrupted", message: err.message };
-        }
         // Provenance first, then the tree: both read the repo as this run will
         // leave it, and both refusals must prove nothing was written.
         const landscape = await classifyLandscape(docsDir);
@@ -63,6 +50,38 @@ export async function commitSeed(req) {
         if (inconsistency !== null)
             return inconsistency;
         const plan = await planSeedWrites(req, tree);
+        // THE OTHER never-overwrite promise, and the third refusal this window owns.
+        //
+        // `classifyLandscape` above keeps it for `architecture/landscape.likec4`;
+        // this keeps it for the two files seed does not share with the team at all —
+        // `architecture/subsystems.likec4` and `architecture/services.likec4` are
+        // filenames loam RESERVES inside a directory the team owns, and seed writes
+        // them whole. Until this line existed a `loam seed` into a repository that
+        // kept a hand-authored diagram at one of those paths destroyed it in
+        // silence: the same clobber reproduced through `loam subsystem new`, and the
+        // guard that caught it lived in `subsystem sync` alone.
+        //
+        // THE WHOLE SEED IS REFUSED, exactly as an edited landscape refuses it, and
+        // for the same reason: seed regenerates every file it owns wholesale from
+        // fleet.yaml, so landing the landscape and the markers while declining a
+        // views file would leave a tree whose very next `validate --all` — seed's
+        // own `next` command — reports `subsystem.views-stale` over a file no
+        // command could ever repair. `planSeedWrites` has staged nothing; the
+        // transaction below is the first byte, and it does not run.
+        if (plan.authored.length > 0) {
+            return {
+                ok: false,
+                // `already-exists` for the reason commands/subsystem/txn/txn.ts gives at
+                // its own copy of this refusal: it is what that code has always meant —
+                // refusing to create over something that already exists, because
+                // overwriting would destroy work nobody asked to lose.
+                code: "already-exists",
+                message: plan.authored.map((file) => authoredRefusal(file)).join(" ") +
+                    " NOTHING was written: not the landscape, not a subsystem marker, not a `.gitkeep`. Seed regenerates " +
+                    "every file it owns wholesale, so it never proceeds past human work standing at one of its paths — the " +
+                    "same promise `seed-landscape-edited` makes one file over.",
+            };
+        }
         const staged = await stageWrites(plan.writes);
         const committed = await commitStaged({ root: docsDir, command: "seed", rerun: req.rerun, target: "landscape" }, staged, "seeded");
         if (!committed.ok) {
@@ -83,7 +102,7 @@ export async function commitSeed(req) {
         };
     }
     finally {
-        await releaseLock();
+        await opened.release();
     }
 }
 /**
@@ -109,12 +128,22 @@ async function classifyLandscape(docsDir) {
     const provenance = landscapeProvenance(text);
     if (provenance === "seed-stamped")
         return { disposition: "regenerated" };
+    // The advice used to be "fold the edits into fleet.yaml and delete the
+    // file", which is impossible for the edit every documented next step makes:
+    // the first `metadata { op }` an author or an adopt brief writes onto an edge
+    // has no spelling in fleet.yaml (services, subsystems, plain `a -> b` calls),
+    // so a reader following it would delete the operation links the spine is
+    // graded on. Seed is a day-zero tool; the honest answer names what grows the
+    // map after day zero.
     return {
         refusal: `architecture/landscape.likec4 ${provenance === "seed-edited"
             ? "was seeded but has been hand-edited since — the line-1 stamp's digest no longer matches the content"
-            : "was not written by `loam seed`: it carries no line-1 stamp and is not the scaffold's untouched stub"}. Seed never overwrites human work; nothing was written. Either fold the edits into ` +
-            `fleet.yaml and delete the file, then re-run — or keep the hand-authored map and stop ` +
-            `using seed here.`,
+            : "was not written by `loam seed`: it carries no line-1 stamp and is not the scaffold's untouched stub"}. Seed never overwrites human work; nothing was written. Seed runs once, before anyone ` +
+            `draws an operation: fleet.yaml cannot carry \`metadata { op }\`, publishes or consumes, so a map ` +
+            `holding them is past seeding. Grow it from here without seed — \`loam adopt --service <id>\` ` +
+            `briefs the element and edges a new service adds, and a feature's C4 delta carries every other ` +
+            `change. Only if the edits are things fleet.yaml can say (a service, a subsystem, a plain call) ` +
+            `is folding them into fleet.yaml and deleting the file still an option.`,
     };
 }
 /**

package/dist/commands/seed/commit.js.map

@@ -1 +1 @@
-{"version":3,"file":"commit.js","sourceRoot":"","sources":["../../../src/commands/seed/commit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAuB,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAsB,MAAM,WAAW,CAAC;AA2C/D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAsB;IACrD,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACxB,IAAI,WAAgC,CAAC;IACrC,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAChG,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,IAAI,SAAgC,CAAC;QACrC,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,sBAAsB,CAAC;gBAAE,MAAM,GAAG,CAAC;YACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QACzE,CAAC;QAED,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAClF,CAAC;QAED,IAAI,IAAe,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,wBAAwB,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QACtC,CAAC;QACD,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,aAAa,KAAK,IAAI;YAAE,OAAO,aAAa,CAAC;QAEjD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EACzE,MAAM,EACN,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,kCAAkC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QACzE,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,SAAS,CAAC,WAAW;YAChC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACzE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACzE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS;SACV,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAAgB;IAEhB,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrD,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,mEAAmE;IACnE,sEAAsE;IACtE,sEAAsE;IACtE,4EAA4E;IAC5E,6DAA6D;IAC7D,IAAI,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IACnE,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAK,cAAc;QAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IACzE,OAAO;QACL,OAAO,EACL,iCACE,UAAU,KAAK,aAAa;YAC1B,CAAC,CAAC,qGAAqG;YACvG,CAAC,CAAC,qGACN,sFAAsF;YACtF,uFAAuF;YACvF,kBAAkB;KACrB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,IAAe,EAAE,IAAe;IACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC,CAAC;IAElE,4EAA4E;IAC5E,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAa,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,cAAc,GAAG,oCAAoC,CAAC,CAAC;IACzG,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAY,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,sCAAsC,CAAC,CAAC;IAC5G,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,oCAAoC,CAAC,CAAC;QACxF,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,sCAAsC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EACL,2FAA2F;gBAC3F,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC;gBACzF,2FAA2F;YAC7F,eAAe,EAAE,EAAE;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,2EAA2E;IAC3E,6EAA6E;IAC7E,qEAAqE;IACrE,0EAA0E;IAC1E,4EAA4E;IAC5E,oCAAoC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC;IACjF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC7F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CACR,cAAc,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACvF,WAAW,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,uCAAuC,IAAI;YACrH,kCAAkC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,mBAAmB;QACzB,OAAO,EACL,0FAA0F;YAC1F,kDAAkD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACxE,WAAW,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,qCAAqC;QACtE,eAAe,EAAE,OAAO;KACzB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Seed's commit window: lock, recover, the under-lock provenance and\n * fleet-consistency checks, one journaled transaction. Modeled line for line\n * on commands/new/commit.ts and on the same seam: everything in here holds\n * the docs lock, nothing outside it does, and the module prints nothing —\n * the caller renders every arm.\n *\n * The checks live UNDER the lock on purpose: the never-overwrite promise is a\n * statement about the landscape as it is at the moment of the write, and an\n * unlocked classification would be a TOCTOU against every other docs writer.\n */\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport type { FleetSeed } from \"../../core/c4/seed/fleet-file.js\";\nimport { landscapeProvenance } from \"../../core/c4/seed/stamp.js\";\nimport { isLandscapeStub } from \"../../core/scaffold/landscape.js\";\nimport type { DocsDir } from \"../../core/kernel/ids/dirs.js\";\nimport { parseServiceId } from \"../../core/kernel/ids/service.js\";\nimport { landscapePath } from \"../../core/repo/paths.js\";\nimport { listFleetTree } from \"../../core/repo/repo.js\";\nimport { DocsRepoUnavailableError } from \"../../core/repo/state.js\";\nimport type { FleetTree } from \"../../core/repo/tree/walk.js\";\nimport { stageWrites } from \"../../core/staging/commit.js\";\nimport { type CommitRecovery, InterruptedCommitError } from \"../../core/staging/interrupted.js\";\nimport { acquireDocsLockWaiting, DocsBusyError, LOCK_WAIT_MS } from \"../../core/staging/lock.js\";\nimport { recoverInterruptedCommit } from \"../../core/staging/recovery/recover.js\";\nimport { commitStaged } from \"../../core/staging/txn/transaction.js\";\nimport { planSeedWrites, type SeedPlanInput } from \"./plan.js\";\n\n/** The plan's input, plus the one fact only the transaction needs. */\nexport interface SeedCommitRequest extends SeedPlanInput {\n  /** How a human re-runs this command — the transaction journal's `rerun`. */\n  rerun: string;\n}\n\n/** What happened to architecture/landscape.likec4 — the three writes seed may prove safe. */\nexport type LandscapeDisposition = \"created\" | \"replaced-stub\" | \"regenerated\";\n\nexport type SeedCommit =\n  | {\n      ok: true;\n      landscape: LandscapeDisposition;\n      /** Absolute path of every file the transaction wrote, in write order. */\n      written: string[];\n      /**\n       * Absolute path of every file the transaction REMOVED — only ever the\n       * generated views file, when the resulting tree has no subsystems left\n       * to view. Separate from `written` because \"+ path\" is a lie about a\n       * delete.\n       */\n      removed: string[];\n      /** Service ids split by whether this run created the directory. */\n      services: { created: string[]; existing: string[] };\n      recovered: CommitRecovery | null;\n    }\n  | {\n      ok: false;\n      code:\n        | \"docs-busy\"\n        | \"commit-interrupted\"\n        | \"merge-failed\"\n        | \"rollback-incomplete\"\n        | \"seed-landscape-edited\";\n      message: string;\n    }\n  /** The under-lock fleet-consistency preflight refusing; see `missingServices`. */\n  | { ok: false; code: \"seed-file-invalid\"; message: string; missingServices: string[] }\n  /** The docs repo went away between the command's gate and the locked read — new/commit.ts says why this is not a `code:` arm. */\n  | { ok: false; repoGone: DocsRepoUnavailableError };\n\nexport async function commitSeed(req: SeedCommitRequest): Promise<SeedCommit> {\n  const { docsDir } = req;\n  let releaseLock: () => Promise<void>;\n  try {\n    releaseLock = await acquireDocsLockWaiting(docsDir, LOCK_WAIT_MS);\n  } catch (err) {\n    if (err instanceof DocsBusyError) return { ok: false, code: \"docs-busy\", message: err.message };\n    throw err;\n  }\n  try {\n    let recovered: CommitRecovery | null;\n    try {\n      recovered = await recoverInterruptedCommit(docsDir);\n    } catch (err) {\n      if (!(err instanceof InterruptedCommitError)) throw err;\n      return { ok: false, code: \"commit-interrupted\", message: err.message };\n    }\n\n    // Provenance first, then the tree: both read the repo as this run will\n    // leave it, and both refusals must prove nothing was written.\n    const landscape = await classifyLandscape(docsDir);\n    if (\"refusal\" in landscape) {\n      return { ok: false, code: \"seed-landscape-edited\", message: landscape.refusal };\n    }\n\n    let tree: FleetTree;\n    try {\n      tree = await listFleetTree(docsDir);\n    } catch (err) {\n      if (!(err instanceof DocsRepoUnavailableError)) throw err;\n      return { ok: false, repoGone: err };\n    }\n    const inconsistency = preflight(tree, req.seed);\n    if (inconsistency !== null) return inconsistency;\n\n    const plan = await planSeedWrites(req, tree);\n    const staged = await stageWrites(plan.writes);\n    const committed = await commitStaged(\n      { root: docsDir, command: \"seed\", rerun: req.rerun, target: \"landscape\" },\n      staged,\n      \"seeded\",\n    );\n    if (!committed.ok) {\n      // `committed.raced` is deliberately NOT remapped: the lock serialises\n      // loam writers, so a fired CAS or a lost exclusive create here means an\n      // out-of-band editor, and seed has no softer race answer the way `new`\n      // has already-exists — merge-failed's \"nothing was written, re-run\" is\n      // the honest sentence either way.\n      return { ok: false, code: committed.code, message: committed.message };\n    }\n    return {\n      ok: true,\n      landscape: landscape.disposition,\n      written: plan.writes.filter((w) => w.content !== null).map((w) => w.path),\n      removed: plan.writes.filter((w) => w.content === null).map((w) => w.path),\n      services: plan.services,\n      recovered,\n    };\n  } finally {\n    await releaseLock();\n  }\n}\n\n/**\n * May seed write the landscape? Absent and untouched-scaffold-stub are the\n * two states with provably no human work in them; a matching stamp digest is\n * the third (`core/c4/seed/stamp.ts`). Everything else refuses.\n */\nasync function classifyLandscape(\n  docsDir: DocsDir,\n): Promise<{ disposition: LandscapeDisposition } | { refusal: string }> {\n  const path = landscapePath(docsDir);\n  if (!existsSync(path)) return { disposition: \"created\" };\n  const text = (await readFile(path)).toString(\"utf8\");\n  // `isLandscapeStub`, never a byte-compare of our own: that function IS the\n  // repo's answer to \"is this still the scaffold's untouched map\", it is what\n  // `loam status` reads before telling the reader to run seed, and it is\n  // suffix-matched and CRLF-normalised for two reasons seed shares —\n  // `migrate-openspec` prepends a preamble to the identical stub, and a\n  // checkout under `core.autocrlf` (Git for Windows' installer default)\n  // rewrites every line without touching a fact. A stricter compare here made\n  // status and seed contradict each other about the same file.\n  if (isLandscapeStub(text)) return { disposition: \"replaced-stub\" };\n  const provenance = landscapeProvenance(text);\n  if (provenance === \"seed-stamped\") return { disposition: \"regenerated\" };\n  return {\n    refusal:\n      `architecture/landscape.likec4 ${\n        provenance === \"seed-edited\"\n          ? \"was seeded but has been hand-edited since — the line-1 stamp's digest no longer matches the content\"\n          : \"was not written by `loam seed`: it carries no line-1 stamp and is not the scaffold's untouched stub\"\n      }. Seed never overwrites human work; nothing was written. Either fold the edits into ` +\n      `fleet.yaml and delete the file, then re-run — or keep the hand-authored map and stop ` +\n      `using seed here.`,\n  };\n}\n\n/**\n * The fleet-consistency preflight. Seed regenerates the landscape WHOLESALE —\n * that is the only posture the stamp can prove safe — so every existing\n * services/<id>/ must be named in fleet.yaml, or the regenerate would orphan\n * it into `landscape.service-unmodelled`. And the file's names must not\n * collide with what the tree already holds under a different kind: one flat\n * namespace, the same rule the walk enforces.\n */\nfunction preflight(tree: FleetTree, seed: FleetSeed): SeedCommit | null {\n  const treeSubs = new Set(tree.subsystems.map((s) => s.name));\n  const treeIds = new Set(tree.services.map((s) => s.id as string));\n\n  // The collision scan runs BEFORE the missing-service scan, and the order is\n  // load-bearing. A name the file declares as a subsystem or an external while\n  // the tree holds it as a service DIRECTORY is both facts at once: it is a\n  // namespace collision, and it is also an existing service the file does not\n  // name. With the missing scan first, the caller was told to paste that name\n  // into `services:` — advice that walks straight into `seed-duplicate-service`\n  // on the next run, because the file already declares it as something else.\n  const collisions: string[] = [];\n  for (const sub of seed.subsystems) {\n    if (treeIds.has(sub as string)) collisions.push(`subsystem '${sub}' is an existing service directory`);\n  }\n  for (const s of seed.services) {\n    if (treeSubs.has(s.id as string)) collisions.push(`service '${s.id}' is an existing subsystem directory`);\n  }\n  for (const x of seed.externals) {\n    if (treeIds.has(x)) collisions.push(`external '${x}' is an existing service directory`);\n    if (treeSubs.has(x)) collisions.push(`external '${x}' is an existing subsystem directory`);\n  }\n  if (collisions.length > 0) {\n    return {\n      ok: false,\n      code: \"seed-file-invalid\",\n      message:\n        `fleet.yaml collides with the services/ tree — service ids, subsystem names and externals ` +\n        `share one flat namespace: ${collisions.join(\"; \")}. Rename the fleet.yaml side (or the ` +\n        `directory, with \\`loam subsystem rename <from> <to>\\`), then re-run. Nothing was written.`,\n      missingServices: [],\n    };\n  }\n\n  const ids = new Set(seed.services.map((s) => s.id as string));\n  const missing = tree.services.map((s) => s.id as string).filter((id) => !ids.has(id)).sort();\n  if (missing.length === 0) return null;\n  // The ids are partitioned because one half cannot take the other's advice.\n  // `tree.services` carries RAW ids — a directory whose name fails the service\n  // grammar is still a service to the walk, by design — and \"add it to\n  // services: exactly as spelled\" is impossible for one of those: the fleet\n  // file would refuse the entry. Without this split, seed was simply unusable\n  // on such a repo and never said so.\n  const legal = missing.filter((id) => parseServiceId(id, \"services entry\").ok);\n  const illegal = missing.filter((id) => !parseServiceId(id, \"services entry\").ok);\n  const fixes: string[] = [];\n  if (legal.length > 0) fixes.push(`add ${legal.join(\", \")} to services:, exactly as spelled`);\n  if (illegal.length > 0) {\n    fixes.push(\n      `rename the ${illegal.length === 1 ? \"directory\" : \"directories\"} ${illegal.join(\", \")} ` +\n        `first — ${illegal.length === 1 ? \"that name is not a legal service id\" : \"those names are not legal service ids\"}, ` +\n        `so no services: entry can name ${illegal.length === 1 ? \"it\" : \"them\"}`,\n    );\n  }\n  return {\n    ok: false,\n    code: \"seed-file-invalid\",\n    message:\n      `fleet.yaml must name every existing service — seed regenerates the landscape wholesale, ` +\n      `and these services/ directories are not in it: ${missing.join(\", \")}. ` +\n      `To fix: ${fixes.join(\"; and \")}. Then re-run. Nothing was written.`,\n    missingServices: missing,\n  };\n}\n"]}
+{"version":3,"file":"commit.js","sourceRoot":"","sources":["../../../src/commands/seed/commit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAEnE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,+CAA+C,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EAAuB,MAAM,mCAAmC,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAsB,MAAM,WAAW,CAAC;AA6C/D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAsB;IACrD,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC7B,IAAI,CAAC;QACH,uEAAuE;QACvE,8DAA8D;QAC9D,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QAClF,CAAC;QAED,IAAI,IAAe,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,wBAAwB,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QACtC,CAAC;QACD,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,aAAa,KAAK,IAAI;YAAE,OAAO,aAAa,CAAC;QAEjD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7C,6EAA6E;QAC7E,EAAE;QACF,0EAA0E;QAC1E,6EAA6E;QAC7E,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,qEAAqE;QACrE,6EAA6E;QAC7E,wDAAwD;QACxD,EAAE;QACF,4EAA4E;QAC5E,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,sEAAsE;QACtE,sEAAsE;QACtE,4DAA4D;QAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,yEAAyE;gBACzE,wEAAwE;gBACxE,iEAAiE;gBACjE,uDAAuD;gBACvD,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EACL,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC5D,sGAAsG;oBACtG,wGAAwG;oBACxG,2DAA2D;aAC9D,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,MAAM,YAAY,CAClC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EACzE,MAAM,EACN,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,kCAAkC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;QACzE,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,SAAS,EAAE,SAAS,CAAC,WAAW;YAChC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACzE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACzE,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS;SACV,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAAgB;IAEhB,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrD,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,mEAAmE;IACnE,sEAAsE;IACtE,sEAAsE;IACtE,4EAA4E;IAC5E,6DAA6D;IAC7D,IAAI,eAAe,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IACnE,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,UAAU,KAAK,cAAc;QAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IACzE,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,6EAA6E;IAC7E,sBAAsB;IACtB,OAAO;QACL,OAAO,EACL,iCACE,UAAU,KAAK,aAAa;YAC1B,CAAC,CAAC,qGAAqG;YACvG,CAAC,CAAC,qGACN,yFAAyF;YACzF,mGAAmG;YACnG,+FAA+F;YAC/F,gGAAgG;YAChG,iGAAiG;YACjG,wEAAwE;KAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,IAAe,EAAE,IAAe;IACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC,CAAC;IAElE,4EAA4E;IAC5E,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAa,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,cAAc,GAAG,oCAAoC,CAAC,CAAC;IACzG,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAY,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,sCAAsC,CAAC,CAAC;IAC5G,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,oCAAoC,CAAC,CAAC;QACxF,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,sCAAsC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,mBAAmB;YACzB,OAAO,EACL,2FAA2F;gBAC3F,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC;gBACzF,2FAA2F;YAC7F,eAAe,EAAE,EAAE;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,2EAA2E;IAC3E,6EAA6E;IAC7E,qEAAqE;IACrE,0EAA0E;IAC1E,4EAA4E;IAC5E,oCAAoC;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,CAAC;IACjF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAC7F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CACR,cAAc,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACvF,WAAW,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,uCAAuC,IAAI;YACrH,kCAAkC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,mBAAmB;QACzB,OAAO,EACL,0FAA0F;YAC1F,kDAAkD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YACxE,WAAW,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,qCAAqC;QACtE,eAAe,EAAE,OAAO;KACzB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Seed's commit window: lock, recover, the under-lock provenance and\n * fleet-consistency checks, one journaled transaction. Modeled line for line\n * on commands/new/commit.ts and on the same seam: everything in here holds\n * the docs lock, nothing outside it does, and the module prints nothing —\n * the caller renders every arm.\n *\n * The three refusals live UNDER the lock on purpose: the never-overwrite promise is a\n * statement about the landscape as it is at the moment of the write, and an\n * unlocked classification would be a TOCTOU against every other docs writer.\n */\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport type { FleetSeed } from \"../../core/c4/seed/fleet-file.js\";\nimport { landscapeProvenance } from \"../../core/c4/seed/stamp.js\";\nimport { isLandscapeStub } from \"../../core/scaffold/landscape.js\";\nimport type { DocsDir } from \"../../core/kernel/ids/dirs.js\";\nimport { parseServiceId } from \"../../core/kernel/ids/service.js\";\nimport { landscapePath } from \"../../core/repo/paths.js\";\nimport { listFleetTree } from \"../../core/repo/repo.js\";\nimport { authoredRefusal } from \"../../core/repo/tree/render/service/header.js\";\nimport { DocsRepoUnavailableError } from \"../../core/repo/state.js\";\nimport type { FleetTree } from \"../../core/repo/tree/walk.js\";\nimport { stageWrites } from \"../../core/staging/commit.js\";\nimport { type CommitRecovery } from \"../../core/staging/interrupted.js\";\nimport { LOCK_WAIT_MS } from \"../../core/staging/lock.js\";\nimport { openCommitWindow } from \"../../core/staging/recovery/recover.js\";\nimport { commitStaged } from \"../../core/staging/txn/transaction.js\";\nimport { planSeedWrites, type SeedPlanInput } from \"./plan.js\";\n\n/** The plan's input, plus the one fact only the transaction needs. */\nexport interface SeedCommitRequest extends SeedPlanInput {\n  /** How a human re-runs this command — the transaction journal's `rerun`. */\n  rerun: string;\n}\n\n/** What happened to architecture/landscape.likec4 — the three writes seed may prove safe. */\nexport type LandscapeDisposition = \"created\" | \"replaced-stub\" | \"regenerated\";\n\nexport type SeedCommit =\n  | {\n      ok: true;\n      landscape: LandscapeDisposition;\n      /** Absolute path of every file the transaction wrote, in write order. */\n      written: string[];\n      /**\n       * Absolute path of every file the transaction REMOVED — only ever the\n       * generated views file, when the resulting tree has no subsystems left\n       * to view. Separate from `written` because \"+ path\" is a lie about a\n       * delete.\n       */\n      removed: string[];\n      /** Service ids split by whether this run created the directory. */\n      services: { created: string[]; existing: string[] };\n      recovered: CommitRecovery | null;\n    }\n  | {\n      ok: false;\n      code:\n        | \"docs-busy\"\n        | \"commit-interrupted\"\n        | \"merge-failed\"\n        | \"rollback-incomplete\"\n        | \"seed-landscape-edited\"\n        /** A hand-authored document standing at one of the two generated views paths — see the refusal in `commitSeed`. */\n        | \"already-exists\";\n      message: string;\n    }\n  /** The under-lock fleet-consistency preflight refusing; see `missingServices`. */\n  | { ok: false; code: \"seed-file-invalid\"; message: string; missingServices: string[] }\n  /** The docs repo went away between the command's gate and the locked read — new/commit.ts says why this is not a `code:` arm. */\n  | { ok: false; repoGone: DocsRepoUnavailableError };\n\nexport async function commitSeed(req: SeedCommitRequest): Promise<SeedCommit> {\n  const { docsDir } = req;\n  const opened = await openCommitWindow(docsDir, LOCK_WAIT_MS);\n  if (!opened.ok) return opened;\n  const { recovered } = opened;\n  try {\n    // Provenance first, then the tree: both read the repo as this run will\n    // leave it, and both refusals must prove nothing was written.\n    const landscape = await classifyLandscape(docsDir);\n    if (\"refusal\" in landscape) {\n      return { ok: false, code: \"seed-landscape-edited\", message: landscape.refusal };\n    }\n\n    let tree: FleetTree;\n    try {\n      tree = await listFleetTree(docsDir);\n    } catch (err) {\n      if (!(err instanceof DocsRepoUnavailableError)) throw err;\n      return { ok: false, repoGone: err };\n    }\n    const inconsistency = preflight(tree, req.seed);\n    if (inconsistency !== null) return inconsistency;\n\n    const plan = await planSeedWrites(req, tree);\n    // THE OTHER never-overwrite promise, and the third refusal this window owns.\n    //\n    // `classifyLandscape` above keeps it for `architecture/landscape.likec4`;\n    // this keeps it for the two files seed does not share with the team at all —\n    // `architecture/subsystems.likec4` and `architecture/services.likec4` are\n    // filenames loam RESERVES inside a directory the team owns, and seed writes\n    // them whole. Until this line existed a `loam seed` into a repository that\n    // kept a hand-authored diagram at one of those paths destroyed it in\n    // silence: the same clobber reproduced through `loam subsystem new`, and the\n    // guard that caught it lived in `subsystem sync` alone.\n    //\n    // THE WHOLE SEED IS REFUSED, exactly as an edited landscape refuses it, and\n    // for the same reason: seed regenerates every file it owns wholesale from\n    // fleet.yaml, so landing the landscape and the markers while declining a\n    // views file would leave a tree whose very next `validate --all` — seed's\n    // own `next` command — reports `subsystem.views-stale` over a file no\n    // command could ever repair. `planSeedWrites` has staged nothing; the\n    // transaction below is the first byte, and it does not run.\n    if (plan.authored.length > 0) {\n      return {\n        ok: false,\n        // `already-exists` for the reason commands/subsystem/txn/txn.ts gives at\n        // its own copy of this refusal: it is what that code has always meant —\n        // refusing to create over something that already exists, because\n        // overwriting would destroy work nobody asked to lose.\n        code: \"already-exists\",\n        message:\n          plan.authored.map((file) => authoredRefusal(file)).join(\" \") +\n          \" NOTHING was written: not the landscape, not a subsystem marker, not a `.gitkeep`. Seed regenerates \" +\n          \"every file it owns wholesale, so it never proceeds past human work standing at one of its paths — the \" +\n          \"same promise `seed-landscape-edited` makes one file over.\",\n      };\n    }\n    const staged = await stageWrites(plan.writes);\n    const committed = await commitStaged(\n      { root: docsDir, command: \"seed\", rerun: req.rerun, target: \"landscape\" },\n      staged,\n      \"seeded\",\n    );\n    if (!committed.ok) {\n      // `committed.raced` is deliberately NOT remapped: the lock serialises\n      // loam writers, so a fired CAS or a lost exclusive create here means an\n      // out-of-band editor, and seed has no softer race answer the way `new`\n      // has already-exists — merge-failed's \"nothing was written, re-run\" is\n      // the honest sentence either way.\n      return { ok: false, code: committed.code, message: committed.message };\n    }\n    return {\n      ok: true,\n      landscape: landscape.disposition,\n      written: plan.writes.filter((w) => w.content !== null).map((w) => w.path),\n      removed: plan.writes.filter((w) => w.content === null).map((w) => w.path),\n      services: plan.services,\n      recovered,\n    };\n  } finally {\n    await opened.release();\n  }\n}\n\n/**\n * May seed write the landscape? Absent and untouched-scaffold-stub are the\n * two states with provably no human work in them; a matching stamp digest is\n * the third (`core/c4/seed/stamp.ts`). Everything else refuses.\n */\nasync function classifyLandscape(\n  docsDir: DocsDir,\n): Promise<{ disposition: LandscapeDisposition } | { refusal: string }> {\n  const path = landscapePath(docsDir);\n  if (!existsSync(path)) return { disposition: \"created\" };\n  const text = (await readFile(path)).toString(\"utf8\");\n  // `isLandscapeStub`, never a byte-compare of our own: that function IS the\n  // repo's answer to \"is this still the scaffold's untouched map\", it is what\n  // `loam status` reads before telling the reader to run seed, and it is\n  // suffix-matched and CRLF-normalised for two reasons seed shares —\n  // `migrate-openspec` prepends a preamble to the identical stub, and a\n  // checkout under `core.autocrlf` (Git for Windows' installer default)\n  // rewrites every line without touching a fact. A stricter compare here made\n  // status and seed contradict each other about the same file.\n  if (isLandscapeStub(text)) return { disposition: \"replaced-stub\" };\n  const provenance = landscapeProvenance(text);\n  if (provenance === \"seed-stamped\") return { disposition: \"regenerated\" };\n  // The advice used to be \"fold the edits into fleet.yaml and delete the\n  // file\", which is impossible for the edit every documented next step makes:\n  // the first `metadata { op }` an author or an adopt brief writes onto an edge\n  // has no spelling in fleet.yaml (services, subsystems, plain `a -> b` calls),\n  // so a reader following it would delete the operation links the spine is\n  // graded on. Seed is a day-zero tool; the honest answer names what grows the\n  // map after day zero.\n  return {\n    refusal:\n      `architecture/landscape.likec4 ${\n        provenance === \"seed-edited\"\n          ? \"was seeded but has been hand-edited since — the line-1 stamp's digest no longer matches the content\"\n          : \"was not written by `loam seed`: it carries no line-1 stamp and is not the scaffold's untouched stub\"\n      }. Seed never overwrites human work; nothing was written. Seed runs once, before anyone ` +\n      `draws an operation: fleet.yaml cannot carry \\`metadata { op }\\`, publishes or consumes, so a map ` +\n      `holding them is past seeding. Grow it from here without seed — \\`loam adopt --service <id>\\` ` +\n      `briefs the element and edges a new service adds, and a feature's C4 delta carries every other ` +\n      `change. Only if the edits are things fleet.yaml can say (a service, a subsystem, a plain call) ` +\n      `is folding them into fleet.yaml and deleting the file still an option.`,\n  };\n}\n\n/**\n * The fleet-consistency preflight. Seed regenerates the landscape WHOLESALE —\n * that is the only posture the stamp can prove safe — so every existing\n * services/<id>/ must be named in fleet.yaml, or the regenerate would orphan\n * it into `landscape.service-unmodelled`. And the file's names must not\n * collide with what the tree already holds under a different kind: one flat\n * namespace, the same rule the walk enforces.\n */\nfunction preflight(tree: FleetTree, seed: FleetSeed): SeedCommit | null {\n  const treeSubs = new Set(tree.subsystems.map((s) => s.name));\n  const treeIds = new Set(tree.services.map((s) => s.id as string));\n\n  // The collision scan runs BEFORE the missing-service scan, and the order is\n  // load-bearing. A name the file declares as a subsystem or an external while\n  // the tree holds it as a service DIRECTORY is both facts at once: it is a\n  // namespace collision, and it is also an existing service the file does not\n  // name. With the missing scan first, the caller was told to paste that name\n  // into `services:` — advice that walks straight into `seed-duplicate-service`\n  // on the next run, because the file already declares it as something else.\n  const collisions: string[] = [];\n  for (const sub of seed.subsystems) {\n    if (treeIds.has(sub as string)) collisions.push(`subsystem '${sub}' is an existing service directory`);\n  }\n  for (const s of seed.services) {\n    if (treeSubs.has(s.id as string)) collisions.push(`service '${s.id}' is an existing subsystem directory`);\n  }\n  for (const x of seed.externals) {\n    if (treeIds.has(x)) collisions.push(`external '${x}' is an existing service directory`);\n    if (treeSubs.has(x)) collisions.push(`external '${x}' is an existing subsystem directory`);\n  }\n  if (collisions.length > 0) {\n    return {\n      ok: false,\n      code: \"seed-file-invalid\",\n      message:\n        `fleet.yaml collides with the services/ tree — service ids, subsystem names and externals ` +\n        `share one flat namespace: ${collisions.join(\"; \")}. Rename the fleet.yaml side (or the ` +\n        `directory, with \\`loam subsystem rename <from> <to>\\`), then re-run. Nothing was written.`,\n      missingServices: [],\n    };\n  }\n\n  const ids = new Set(seed.services.map((s) => s.id as string));\n  const missing = tree.services.map((s) => s.id as string).filter((id) => !ids.has(id)).sort();\n  if (missing.length === 0) return null;\n  // The ids are partitioned because one half cannot take the other's advice.\n  // `tree.services` carries RAW ids — a directory whose name fails the service\n  // grammar is still a service to the walk, by design — and \"add it to\n  // services: exactly as spelled\" is impossible for one of those: the fleet\n  // file would refuse the entry. Without this split, seed was simply unusable\n  // on such a repo and never said so.\n  const legal = missing.filter((id) => parseServiceId(id, \"services entry\").ok);\n  const illegal = missing.filter((id) => !parseServiceId(id, \"services entry\").ok);\n  const fixes: string[] = [];\n  if (legal.length > 0) fixes.push(`add ${legal.join(\", \")} to services:, exactly as spelled`);\n  if (illegal.length > 0) {\n    fixes.push(\n      `rename the ${illegal.length === 1 ? \"directory\" : \"directories\"} ${illegal.join(\", \")} ` +\n        `first — ${illegal.length === 1 ? \"that name is not a legal service id\" : \"those names are not legal service ids\"}, ` +\n        `so no services: entry can name ${illegal.length === 1 ? \"it\" : \"them\"}`,\n    );\n  }\n  return {\n    ok: false,\n    code: \"seed-file-invalid\",\n    message:\n      `fleet.yaml must name every existing service — seed regenerates the landscape wholesale, ` +\n      `and these services/ directories are not in it: ${missing.join(\", \")}. ` +\n      `To fix: ${fixes.join(\"; and \")}. Then re-run. Nothing was written.`,\n    missingServices: missing,\n  };\n}\n"]}

package/dist/commands/seed/plan.js

@@ -1,21 +1,125 @@
 /**
  * What a seed run will write, decided in full before a byte lands. Split from
  * `./commit.ts` on the phase seam: that module owns the WINDOW — the lock, the
- * interrupted-commit recovery, the two refusals and the transaction — while
+ * interrupted-commit recovery, the refusals and the transaction — while
  * this one answers the single question "given the tree as it is and the fleet
  * file as it reads, which files change and how". Nothing here acquires
  * anything, and nothing here writes: it is called under the lock and hands
  * back a plan the transaction executes or rolls back whole.
  */
-import { existsSync } from "node:fs";
-import { readdir, readFile } from "node:fs/promises";
-import { join } from "node:path";
+import { copyFile, mkdir, mkdtemp, readdir, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join, relative, resolve } from "node:path";
+import { architectureDir, architectureProjectDocuments } from "../../core/c4/project/architecture.js";
+import { loadProject } from "../../core/c4/project/load.js";
+import { repoPath } from "../../core/envelope/json.js";
 import { serviceDirOf } from "../../core/kernel/ids/dirs.js";
-import { landscapePath, servicePathsUnder, servicesDir, subsystemPathUnder, subsystemViewsPath, unfiledServicePaths, } from "../../core/repo/paths.js";
+import { landscapePath, servicePathsUnder, servicesDir, serviceViewsPath, subsystemPathUnder, subsystemViewsPath, unfiledServicePaths, } from "../../core/repo/paths.js";
 import { SUBSYSTEM_MARKER } from "../../core/repo/tree/marker.js";
-import { renderSubsystemViews, viewsAgree } from "../../core/repo/tree/views.js";
+import { readGeneratedFile } from "../../core/repo/tree/render/service/header.js";
+import { renderServiceOverviews, renderSubsystemViews, viewsAgree, } from "../../core/repo/tree/render/views.js";
 import { TEMP_FILE_RE } from "../../core/staging/commit.js";
 import { planWrite } from "../../core/staging/writes.js";
+/**
+ * The facts the generated views are rendered from: the `architecture/` PROJECT
+ * as this commit leaves it — the sealed landscape standing in for the file it is
+ * about to become, beside every other `.likec4` the directory already holds —
+ * and never the sealed landscape alone.
+ *
+ * WHY THE PROJECT. `subsystem.views-stale` (`validate --all`) and `loam
+ * subsystem sync` both recompute the expected bytes from `loadArchitecture` —
+ * the landscape merged with every other `architecture/**` document, the
+ * generated file excluded — and the render asks that document set which global
+ * style ids it declares. A repository's `global { styleGroup subsystems { … } }`
+ * naturally lives in a sibling such as `architecture/usecases/palette.likec4`,
+ * since seed regenerates the landscape wholesale, so it was in the grader's
+ * census and not in seed's: a seed into such a repo wrote a views file the very
+ * next `validate --all` — seed's own first `next` command — graded stale, and
+ * re-seeding wrote the same bytes again, the one loop no `next` could leave.
+ * Reading the same documents the grader reads is what makes the shared render
+ * shared in fact rather than in name (commands/subsystem/txn/views.ts's banner).
+ *
+ * NO SIBLING, NO WORKSPACE: the landscape's own facts, already in hand from the
+ * self-check, ARE the project's, and the common case pays one readdir.
+ *
+ * STAGED, for `core/c4/project/staged.ts`'s reason: `loadProject` copies
+ * documents from disk keyed on their path relative to a base, and the landscape
+ * here exists only in memory. That module's staging is bound to a feature's
+ * merge preview, so the same handful of copies is made here once more — the
+ * temp tree is gone before this returns, and nothing under the docs repo is
+ * touched.
+ *
+ * FAIL CLOSED to the landscape's own facts. A project that does not parse (a
+ * sibling carrying an error of its own, or a copy the temp directory refused)
+ * declares nothing loam can rely on, so the render carries exactly what it
+ * carried before the project was asked, and the seed still lands: that sibling
+ * is `landscape.invalid`'s to name on the next `validate --all`, and a seed
+ * refusing over it would make seed the first command to grade a file it does
+ * not own. Nothing is hidden by the fallback: the grader compares the views
+ * file only once the project has parsed (`validate/fleet/landscape.ts`), so
+ * the repo sees the one finding that names the sibling, never a stale-views
+ * finding over a file no command could have rendered differently.
+ */
+async function projectFacts(req) {
+    const arch = architectureDir(req.docsDir);
+    const landscape = resolve(landscapePath(req.docsDir));
+    // The PROJECT's documents, root `exclude` applied — `loadArchitecture`'s own
+    // list minus the landscape, which is staged from memory just below. Walking
+    // `architecture/` directly skipped that filter, and here that is a WRONG
+    // answer rather than an over-scan: a `palette.likec4` under an excluded path
+    // is a document the renderer never loads, so its `global styleGroup` id put
+    // `global style subsystems` into the generated views file — a name the fleet
+    // project cannot resolve — and the very next `validate --all` (seed's own
+    // `next` command) graded that file against the same set THIS one now reads.
+    // The W5b defect, one command over.
+    const siblings = (await architectureProjectDocuments(req.docsDir)).filter((p) => resolve(p) !== landscape);
+    if (siblings.length === 0)
+        return req.map;
+    // The temp directory is made INSIDE the try, not one line above it: a full
+    // disk, a read-only temp root, or a TMPDIR naming a directory that no longer
+    // exists rejects `mkdtemp`, and outside the try that rejection left `seed` as
+    // the generic `internal` refusal on a repository where nothing is wrong — the
+    // defect docs/CODE-STYLE.md's "read inside the try that handles the read" rule
+    // was written from.
+    let root = null;
+    try {
+        root = await mkdtemp(join(tmpdir(), "loam-seed-"));
+        const staged = [];
+        for (const path of [landscape, ...siblings]) {
+            const dest = join(root, relative(arch, path));
+            await mkdir(dirname(dest), { recursive: true });
+            // The landscape is staged from the bytes this commit writes, never from
+            // the file on disk — which may be the scaffold's stub, a stamped
+            // predecessor, or absent — so the project parsed is the one the grader
+            // will read after the commit.
+            if (path === landscape)
+                await writeFile(dest, req.landscape, "utf8");
+            else
+                await copyFile(path, dest);
+            staged.push(dest);
+        }
+        const project = await loadProject(root, staged);
+        // RELATIONSHIPS travel with the elements, and dropping them is silent: they
+        // are what each per-service overview computes its peer set from, so a facts
+        // record without them renders every service view peerless — the service and
+        // its own interior, and nothing it touches — with no error anywhere
+        // (`core/repo/tree/render/views.ts` states the consequence beside the
+        // optional field). The fallback `req.map` is the whole self-check document
+        // and already carries them.
+        return project.clean
+            ? { elements: project.elements, globalStyles: project.globalStyles, relationships: project.relationships }
+            : req.map;
+    }
+    catch {
+        // `loadProject` throws on an error it cannot attribute to a document, and
+        // a full disk fails the staging above; both are the fail-closed arm.
+        return req.map;
+    }
+    finally {
+        if (root !== null)
+            await rm(root, { recursive: true, force: true });
+    }
+}
 /**
  * Does this existing service directory hold nothing git would keep? An empty
  * directory is a service to the walk but nothing at all to git, so a landscape
@@ -122,12 +226,53 @@ export async function planSeedWrites(req, tree) {
     // to disk that writes.ts forbids; a views file whose bytes are not UTF-8
     // therefore fails the compare and is regenerated, which is the right answer
     // for it anyway.
-    const viewsPath = subsystemViewsPath(docsDir);
-    const views = renderSubsystemViews(plannedTree, req.elements);
-    const wanted = views === null ? null : Buffer.from(views, "utf8");
-    const onDisk = existsSync(viewsPath) ? await readFile(viewsPath, "utf8") : null;
-    if (!viewsAgree(onDisk, views))
-        writes.push({ path: viewsPath, content: wanted });
-    return { writes, services: { created: created.sort(), existing: existing.sort() } };
+    //
+    // BOTH generated files, from ONE read of the project: `architecture/services.likec4`
+    // is the same contract one file over — one overview view per service the map
+    // draws, absent when it draws none — and a seed that landed only the subsystem
+    // views would send its caller, through its own `next` list, into a
+    // `subsystem.views-stale` no `seed` could clear. This is where the seeded
+    // services first exist AND the sealed landscape first says what they are, so
+    // it is the only moment the pair can be rendered together.
+    const facts = await projectFacts(req);
+    const authored = [
+        await stageGenerated(writes, subsystemViewsPath(docsDir), renderSubsystemViews(plannedTree, facts)),
+        await stageGenerated(writes, serviceViewsPath(docsDir), renderServiceOverviews(plannedTree, facts)),
+    ].filter((path) => path !== null);
+    return {
+        writes,
+        services: { created: created.sort(), existing: existing.sort() },
+        authored: authored.map((path) => repoPath(docsDir, path)),
+    };
+}
+/**
+ * Append the write for ONE generated file, or nothing when the file already
+ * says it — the comparison the block above argues for, spelled once so the two
+ * generated files cannot drift into two rules. Answers the path when the file
+ * standing there is SOMEBODY ELSE'S, and stages nothing for it.
+ *
+ * OWNERSHIP FIRST, before the compare, exactly as `commands/subsystem/sync.ts`
+ * asks it — through the same reader, from beneath every writer
+ * (`core/repo/tree/render/service/header.ts`). Both of these are filenames loam
+ * RESERVES inside `architecture/`, a directory the team owns, and seed rewrites
+ * them whole; until this line existed a `loam seed` into a repository that kept
+ * a hand-authored diagram at one of those paths destroyed it without a word.
+ * That is the same promise `seed-landscape-edited` makes one file over — seed
+ * never overwrites human work — and it was missing for the two files seed
+ * reserves rather than shares.
+ *
+ * It is checked before the compare and not after, so that "the file already says
+ * this" can never vouch for a file loam did not write. An authored file cannot
+ * in fact agree with a render that opens with loam's mark, but a reader must not
+ * have to prove that to know the guard holds.
+ */
+async function stageGenerated(writes, path, content) {
+    const { text: onDisk, authored } = await readGeneratedFile(path);
+    if (authored)
+        return path;
+    if (viewsAgree(onDisk, content))
+        return null;
+    writes.push({ path, content: content === null ? null : Buffer.from(content, "utf8") });
+    return null;
 }
 //# sourceMappingURL=plan.js.map