daftari 1.30.0 → 1.31.0

package/dist/tools/search.js

@@ -6,6 +6,12 @@
 // it. If the index is empty (first run after a fresh clone) they trigger a
 // reindex first, so search works without an explicit setup step.
 import { canRead } from "../access/rbac.js";
+import { currentConsumesEdges } from "../curation/consumes.js";
+import { compiledUpstreamStaleness, loadCompiledStaleContext, splitUpstreamVisibility, } from "../curation/edge-staleness.js";
+import { recordReads } from "../curation/read-log.js";
+import { structuralDecay } from "../curation/structural.js";
+import { sourceReadable } from "../curation/tension-access.js";
+import { bucketHiddenDownstream } from "../curation/tension-blast.js";
 import { err, ok } from "../frontmatter/types.js";
 import { contestedFor } from "../search/contested.js";
 import { applyCoveragePass, DEFAULT_COVERAGE_OPTIONS, enforceTokenCap, } from "../search/coverage.js";
@@ -25,6 +31,15 @@ import { documentCount, openIndexDb } from "../storage/index-db.js";
 export function openIndexForActiveProvider(vaultRoot) {
     return openIndexDb(vaultRoot, getProvider().dim);
 }
+// Read-only index handle for RBAC collection lookups. openIndexForActiveProvider
+// ONLY — never ensureIndexReady, which reindexes on an empty index; visibility
+// gates must never reindex. Open failure degrades to null: visibility then
+// gates on the pure first-segment rule (fail-closed), and the tool call
+// itself never fails for RBAC-lookup reasons.
+export function openIndexForAccessOrNull(vaultRoot) {
+    const opened = openIndexForActiveProvider(vaultRoot);
+    return opened.ok ? opened.value : null;
+}
 // Gate every index-backed tool on the current indexing state.
 //
 // - "indexing": refuse with a progress-bearing message. The server is still
@@ -78,11 +93,92 @@ function parseWeights(raw) {
     }
     return DEFAULT_WEIGHTS;
 }
-function parseLimit(raw) {
+// Shared numeric-arg posture: a positive finite number floors and clamps to
+// `max`; anything else silently takes `fallback`.
+function clampPositiveInt(raw, max, fallback) {
     if (typeof raw === "number" && Number.isFinite(raw) && raw > 0) {
-        return Math.min(Math.floor(raw), 50);
+        return Math.min(Math.floor(raw), max);
+    }
+    return fallback;
+}
+function parseLimit(raw) {
+    return clampPositiveInt(raw, 50, 10);
+}
+// #3: rerank pool size. 0 = feature off (the default — absent or invalid
+// mirrors parseLimit's silent-fallback posture). Capped: the pool is token
+// cost in the caller's context window, and past ~30 snippets judgment
+// quality decays faster than recall improves.
+const RERANK_CANDIDATES_MAX = 30;
+function parseRerankCandidates(raw) {
+    return clampPositiveInt(raw, RERANK_CANDIDATES_MAX, 0);
+}
+// The agent-as-judge protocol text (#3), one fixed string like the #169
+// supersede hint: the signal is the field's presence and a stable text is
+// grep-able in agent traces. The server never calls a model — the same
+// division of labor the tier-2 protocol settled: it prepares constrained
+// judging context; the CALLING agent is the judge.
+const RERANK_INSTRUCTIONS = "You are the reranker. The candidates below are the fused hybrid ranking " +
+    "(BM25 + vector); their scores measure retrieval proximity, NOT whether a " +
+    "candidate answers the query. Judge each candidate's snippet against the " +
+    "query and reorder by how well it answers. Candidates ranked past the " +
+    "returned hits may outrank them — promote them if they answer better. " +
+    "Read any candidate you promote with vault_read before relying on it: " +
+    "candidates carry no enrichment (tensions, staleness, structural flags); " +
+    "the served hits and vault_read do.";
+// #234 serve instrumentation, shared by every snippet-serving tool
+// (vault_search AND vault_search_related — the broken-read rate's
+// denominator counts serves, whichever tool served them). Each SERVED hit
+// becomes one read-log entry carrying its pending-broken upstream count —
+// the TRUE count, unfiltered, because the log is local operator telemetry —
+// batched into a single append so N hits do not pay N fs writes.
+//
+// The caller-facing hit uses the shared #217 split (splitUpstreamVisibility):
+// the "broken" (incident) classification is disclosed only for upstream
+// units the caller can read — pendingBrokenUpstream buckets the VISIBLE
+// broken count. Edges to unreadable units contribute only the generic
+// hiddenPendingUpstream bucket, which never carries severity: an incident
+// verdict derived from a hidden unit would leak that unit's change activity
+// across the ACL boundary. The visible count is bucketed for hit-payload
+// compactness, not disclosure — vault_read's exact pending_broken is the
+// drill-down. Best-effort: a telemetry failure never fails the search.
+async function annotateAndLogServedHits(vaultRoot, db, tool, hits, access) {
+    if (hits.length === 0)
+        return;
+    // The newest-compile-group collapse is O(total edges); do it ONCE per
+    // call, not per hit. Passing the pre-collapsed set through is sound
+    // because currentConsumesEdges is idempotent. An empty consumes log
+    // short-circuits before the provenance log is read at all — with zero
+    // compiled edges every broken count is zero (same posture as vault_read).
+    const loaded = await loadCompiledStaleContext(vaultRoot);
+    const staleCtx = loaded
+        ? { consumes: currentConsumesEdges(loaded.consumes), provenance: loaded.provenance }
+        : null;
+    const entries = [];
+    for (const hit of hits) {
+        let broken;
+        if (staleCtx) {
+            const rows = compiledUpstreamStaleness(hit.path, staleCtx.consumes, staleCtx.provenance);
+            broken = rows.filter((r) => r.staleness === "pending-broken").length;
+            // `db` is the caller's already-open index handle — the same one the
+            // other RBAC enrichments (resolveCurrentSource, contestedFor) read.
+            const { visible, hiddenPending } = access
+                ? splitUpstreamVisibility(rows, (unit) => sourceReadable(db, access, unit))
+                : { visible: rows, hiddenPending: "none" };
+            const visibleBroken = visible.filter((r) => r.staleness === "pending-broken").length;
+            const brokenBucket = bucketHiddenDownstream(visibleBroken);
+            if (brokenBucket !== "none")
+                hit.pendingBrokenUpstream = brokenBucket;
+            if (hiddenPending !== "none")
+                hit.hiddenPendingUpstream = hiddenPending;
+        }
+        entries.push({
+            tool,
+            file: hit.path,
+            ...(access?.user != null ? { principal: access.user } : {}),
+            ...(broken !== undefined ? { broken_upstream: broken } : {}),
+        });
     }
-    return 10;
+    await recordReads(vaultRoot, entries);
 }
 // ---------------------------------------------------------------------------
 // vault_search
@@ -152,11 +248,45 @@ export async function vaultSearch(vaultRoot, args, access) {
                 hit.contested = ct.contested;
                 hit.contestedCount = ct.contestedCount;
             }
+            // #8: structural decay flags from the materialized inbound-link graph —
+            // one indexed query per hit on the same open handle, vantage-filtered.
+            const sd = structuralDecay({ db, path: hit.path, status: hit.status, access });
+            if (sd?.orphan)
+                hit.orphan = true;
+            if (sd?.deprecated_still_linked)
+                hit.deprecatedStillLinked = true;
         }
         // Token-cap backstop: evict coverage-added docs (stale first, then oldest) if
         // their combined snippets exceed the budget. Never drops ranked hits.
         const capped = enforceTokenCap(permitted, DEFAULT_COVERAGE_OPTIONS);
-        return ok({ ...result.value, count: capped.length, hits: capped });
+        await annotateAndLogServedHits(vaultRoot, db, "vault_search", capped, access);
+        // #3: opt-in agent-as-judge rerank pool — the top-K of the SAME
+        // RBAC-filtered fused ranking the hits were sliced from (never coverage
+        // additions; those are recall, not ranking). Compact judging records
+        // only: no enrichment joins, per the protocol text.
+        const rerankK = parseRerankCandidates(args.rerank_candidates);
+        const rerank = rerankK > 0
+            ? {
+                instructions: RERANK_INSTRUCTIONS,
+                candidates: permittedRanked.slice(0, rerankK).map((h, i) => ({
+                    rank: i + 1,
+                    path: h.path,
+                    title: h.title,
+                    collection: h.collection,
+                    status: h.status,
+                    score: h.score,
+                    bm25Score: h.bm25Score,
+                    vectorScore: h.vectorScore,
+                    snippet: h.snippet,
+                })),
+            }
+            : undefined;
+        return ok({
+            ...result.value,
+            count: capped.length,
+            hits: capped,
+            ...(rerank ? { rerank } : {}),
+        });
     }
     finally {
         db.close();
@@ -198,6 +328,7 @@ export async function vaultSearchRelated(vaultRoot, args, access) {
             ? result.value.hits.filter((h) => canRead(access.role, h.collection))
             : result.value.hits;
         const hits = permitted.slice(0, limit);
+        await annotateAndLogServedHits(vaultRoot, db, "vault_search_related", hits, access);
         return ok({ ...result.value, count: hits.length, hits });
     }
     finally {
@@ -244,7 +375,12 @@ export const searchTools = [
             "Falls back to lexical-only ranking if embeddings are unavailable. " +
             "Hits may carry `contested`: unresolved recorded tensions involving " +
             "the document, with both claims shown (`claimSelf`/`claimOther`), " +
-            "capped at 3 per hit; `contestedCount` reports the true total.",
+            "capped at 3 per hit; `contestedCount` reports the true total. " +
+            "Pass rerank_candidates to also receive a `rerank` block — the top-K " +
+            "of the fused ranking as compact judging records plus instructions — " +
+            "and act as the reranker yourself: fusion scores measure retrieval " +
+            "proximity, not answer quality, so judging the pool against the query " +
+            "can surface candidates ranked past the returned hits.",
         inputSchema: {
             type: "object",
             properties: {
@@ -254,6 +390,12 @@ export const searchTools = [
                     description: "Maximum results to return (default 10, max 50)",
                 },
                 weights: weightsSchema,
+                rerank_candidates: {
+                    type: "number",
+                    description: "Opt-in agent-as-judge rerank: return the top-K fused candidates " +
+                        "(max 30) with judging context so YOU reorder by answer quality. " +
+                        "Omit to skip.",
+                },
             },
             required: ["query"],
             additionalProperties: false,

package/dist/tools/search.js.map

@@ -1 +1 @@
-{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,+EAA+E;AAC/E,2EAA2E;AAC3E,iEAAiE;AAEjE,OAAO,EAAsB,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,eAAe,EAGf,YAAY,EAEZ,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAsB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAgB,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGlF,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,+CAA+C;AAC/C,EAAE;AACF,qEAAqE;AACrE,uBAAuB;AACvB,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC1D,OAAO,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,8DAA8D;AAC9D,EAAE;AACF,4EAA4E;AAC5E,oEAAoE;AACpE,wEAAwE;AACxE,yDAAyD;AACzD,0EAA0E;AAC1E,wEAAwE;AACxE,2EAA2E;AAC3E,oEAAoE;AACpE,oBAAoB;AACpB,EAAE;AACF,qEAAqE;AACrE,kBAAkB;AAClB,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IACtD,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClD,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACvB,IAAI,KAAK,EAAE,CAAC;QACV,YAAY,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,cAAc,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,OAAO,MAAM,KAAK,QAAQ;YAC1B,IAAI,IAAI,CAAC;YACT,MAAM,IAAI,CAAC;YACX,IAAI,GAAG,MAAM,GAAG,CAAC,EACjB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,IAA6B,EAC7B,MAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI,KAAK,CAAC,oDAAoD,CAAC;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAE5B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE;YAC3C,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YACnC,KAAK;YACL,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAE9B,2EAA2E;QAC3E,0EAA0E;QAC1E,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,eAAe,GAAG,MAAM;YAC5B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;YACrE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QACtB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAE/C,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,wDAAwD;QACxD,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,MAAM;YACtB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpF,CAAC,CAAC,OAAO,CAAC;QAEZ,4EAA4E;QAC5E,oEAAoE;QACpE,iEAAiE;QACjE,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,6BAA6B;QAC7B,EAAE;QACF,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtD,IAAI,EAAE;gBAAE,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzD,IAAI,EAAE,EAAE,CAAC;gBACP,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC;gBAC7B,GAAG,CAAC,cAAc,GAAG,EAAE,CAAC,cAAc,CAAC;YACzC,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,sEAAsE;QACtE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAEpE,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,IAA6B,EAC7B,MAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI,KAAK,CAAC,2DAA2D,CAAC;SAC9E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAE5B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE;YACrC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YACnC,KAAK;YACL,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,uEAAuE;QACvE,6EAA6E;QAC7E,2EAA2E;QAC3E,MAAM,SAAS,GAAG,MAAM;YACtB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;YACrE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QACtB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,oEAAoE;IACpE,2EAA2E;IAC3E,oEAAoE;IACpE,qEAAqE;IACrE,+DAA+D;IAC/D,IAAI,cAAc,EAAE,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,YAAY,EAAE,CAAC;IACf,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,aAAa,GAAG;IACpB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,kEAAkE;IAC/E,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;QACpE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;KAC1E;IACD,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAqB;IAC3C;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EACT,qEAAqE;YACrE,sEAAsE;YACtE,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,+DAA+D;QACjE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;gBAChE,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,gDAAgD;iBAC9D;gBACD,OAAO,EAAE,aAAa;aACvB;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;YACnB,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC;KAC3E;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EACT,8DAA8D;YAC9D,uEAAuE;YACvE,+DAA+D;QACjE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+CAA+C;iBAC7D;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,gDAAgD;iBAC9D;gBACD,OAAO,EAAE,aAAa;aACvB;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC;KAClF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,sBAAsB;QAC7B,mEAAmE;QACnE,kEAAkE;QAClE,4BAA4B;QAC5B,WAAW,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE;QAC7D,WAAW,EACT,sEAAsE;YACtE,oEAAoE;YACpE,6DAA6D;QAC/D,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;YACd,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC;KAChD;CACF,CAAC"}
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../src/tools/search.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,+EAA+E;AAC/E,2EAA2E;AAC3E,iEAAiE;AAEjE,OAAO,EAAsB,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EACL,eAAe,EAIf,YAAY,EAEZ,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,cAAc,GACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAsB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAgB,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGlF,uEAAuE;AACvE,uEAAuE;AACvE,sEAAsE;AACtE,+CAA+C;AAC/C,EAAE;AACF,qEAAqE;AACrE,uBAAuB;AACvB,MAAM,UAAU,0BAA0B,CAAC,SAAiB;IAC1D,OAAO,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,iFAAiF;AACjF,+EAA+E;AAC/E,2EAA2E;AAC3E,wEAAwE;AACxE,8CAA8C;AAC9C,MAAM,UAAU,wBAAwB,CAAC,SAAiB;IACxD,MAAM,MAAM,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,8DAA8D;AAC9D,EAAE;AACF,4EAA4E;AAC5E,oEAAoE;AACpE,wEAAwE;AACxE,yDAAyD;AACzD,0EAA0E;AAC1E,wEAAwE;AACxE,2EAA2E;AAC3E,oEAAoE;AACpE,oBAAoB;AACpB,EAAE;AACF,qEAAqE;AACrE,kBAAkB;AAClB,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IACtD,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClD,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACvB,IAAI,KAAK,EAAE,CAAC;QACV,YAAY,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,cAAc,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,OAAO,MAAM,KAAK,QAAQ;YAC1B,IAAI,IAAI,CAAC;YACT,MAAM,IAAI,CAAC;YACX,IAAI,GAAG,MAAM,GAAG,CAAC,EACjB,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,4EAA4E;AAC5E,kDAAkD;AAClD,SAAS,gBAAgB,CAAC,GAAY,EAAE,GAAW,EAAE,QAAgB;IACnE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,gBAAgB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,yEAAyE;AACzE,2EAA2E;AAC3E,sEAAsE;AACtE,8CAA8C;AAC9C,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,SAAS,qBAAqB,CAAC,GAAY;IACzC,OAAO,gBAAgB,CAAC,GAAG,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,wEAAwE;AACxE,0EAA0E;AAC1E,uEAAuE;AACvE,yEAAyE;AACzE,mDAAmD;AACnD,MAAM,mBAAmB,GACvB,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,uEAAuE;IACvE,uEAAuE;IACvE,0EAA0E;IAC1E,oCAAoC,CAAC;AAEvC,mEAAmE;AACnE,kEAAkE;AAClE,0EAA0E;AAC1E,0EAA0E;AAC1E,4EAA4E;AAC5E,iEAAiE;AACjE,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,wEAAwE;AACxE,sEAAsE;AACtE,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,KAAK,UAAU,wBAAwB,CACrC,SAAiB,EACjB,EAAW,EACX,IAAY,EACZ,IAAiB,EACjB,MAAsB;IAEtB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,sEAAsE;IACtE,oEAAoE;IACpE,oEAAoE;IACpE,sEAAsE;IACtE,0EAA0E;IAC1E,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM;QACrB,CAAC,CAAC,EAAE,QAAQ,EAAE,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE;QACpF,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,OAAO,GAAsC,EAAE,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAA0B,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,yBAAyB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YACzF,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC,MAAM,CAAC;YACrE,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,MAAM;gBACvC,CAAC,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC3E,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAe,EAAE,CAAC;YACtD,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC,MAAM,CAAC;YACrF,MAAM,YAAY,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;YAC3D,IAAI,YAAY,KAAK,MAAM;gBAAE,GAAG,CAAC,qBAAqB,GAAG,YAAY,CAAC;YACtE,IAAI,aAAa,KAAK,MAAM;gBAAE,GAAG,CAAC,qBAAqB,GAAG,aAAa,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,IAA6B,EAC7B,MAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI,KAAK,CAAC,oDAAoD,CAAC;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAE5B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE;YAC3C,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YACnC,KAAK;YACL,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAE9B,2EAA2E;QAC3E,0EAA0E;QAC1E,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,eAAe,GAAG,MAAM;YAC5B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;YACrE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QACtB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAE/C,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,wDAAwD;QACxD,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;QACxE,MAAM,SAAS,GAAG,MAAM;YACtB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpF,CAAC,CAAC,OAAO,CAAC;QAEZ,4EAA4E;QAC5E,oEAAoE;QACpE,iEAAiE;QACjE,6EAA6E;QAC7E,4EAA4E;QAC5E,2EAA2E;QAC3E,6BAA6B;QAC7B,EAAE;QACF,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,oBAAoB,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtD,IAAI,EAAE;gBAAE,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,YAAY,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzD,IAAI,EAAE,EAAE,CAAC;gBACP,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC;gBAC7B,GAAG,CAAC,cAAc,GAAG,EAAE,CAAC,cAAc,CAAC;YACzC,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/E,IAAI,EAAE,EAAE,MAAM;gBAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;YAClC,IAAI,EAAE,EAAE,uBAAuB;gBAAE,GAAG,CAAC,qBAAqB,GAAG,IAAI,CAAC;QACpE,CAAC;QAED,8EAA8E;QAC9E,sEAAsE;QACtE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC;QAEpE,MAAM,wBAAwB,CAAC,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAE9E,gEAAgE;QAChE,wEAAwE;QACxE,qEAAqE;QACrE,oDAAoD;QACpD,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9D,MAAM,MAAM,GACV,OAAO,GAAG,CAAC;YACT,CAAC,CAAC;gBACE,YAAY,EAAE,mBAAmB;gBACjC,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC3D,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,UAAU,EAAE,CAAC,CAAC,UAAU;oBACxB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC,CAAC;aACJ;YACH,CAAC,CAAC,SAAS,CAAC;QAEhB,OAAO,EAAE,CAAC;YACR,GAAG,MAAM,CAAC,KAAK;YACf,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,IAAI,EAAE,MAAM;YACZ,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,IAA6B,EAC7B,MAAsB;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI,KAAK,CAAC,2DAA2D,CAAC;SAC9E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAE5B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE;YACrC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YACnC,KAAK;YACL,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,uEAAuE;QACvE,6EAA6E;QAC7E,2EAA2E;QAC3E,MAAM,SAAS,GAAG,MAAM;YACtB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;YACrE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QACtB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEvC,MAAM,wBAAwB,CAAC,SAAS,EAAE,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAEpF,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,oEAAoE;IACpE,2EAA2E;IAC3E,oEAAoE;IACpE,qEAAqE;IACrE,+DAA+D;IAC/D,IAAI,cAAc,EAAE,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,YAAY,EAAE,CAAC;IACf,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,cAAc,EAAE,CAAC;IACjB,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,aAAa,GAAG;IACpB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,kEAAkE;IAC/E,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;QACpE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;KAC1E;IACD,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAqB;IAC3C;QACE,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EACT,qEAAqE;YACrE,sEAAsE;YACtE,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,gEAAgE;YAChE,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,uEAAuE;YACvE,uDAAuD;QACzD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;gBAChE,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,gDAAgD;iBAC9D;gBACD,OAAO,EAAE,aAAa;gBACtB,iBAAiB,EAAE;oBACjB,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,kEAAkE;wBAClE,kEAAkE;wBAClE,eAAe;iBAClB;aACF;YACD,QAAQ,EAAE,CAAC,OAAO,CAAC;YACnB,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC;KAC3E;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE;QACnC,WAAW,EACT,8DAA8D;YAC9D,uEAAuE;YACvE,+DAA+D;QACjE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+CAA+C;iBAC7D;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,gDAAgD;iBAC9D;gBACD,OAAO,EAAE,aAAa;aACvB;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC;KAClF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,sBAAsB;QAC7B,mEAAmE;QACnE,kEAAkE;QAClE,4BAA4B;QAC5B,WAAW,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE;QAC7D,WAAW,EACT,sEAAsE;YACtE,oEAAoE;YACpE,6DAA6D;QAC/D,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;YACd,oBAAoB,EAAE,KAAK;SAC5B;QACD,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC;KAChD;CACF,CAAC"}

package/dist/tools/staged-actions.d.ts

@@ -4,6 +4,9 @@ import type { ToolDefinition } from "./read.js";
 export interface StageActionResult {
     id: string;
     expires_at: string;
+    conflicts_with: string[];
+    tension_id: string | null;
+    tension_error?: string;
 }
 export declare function vaultStageAction(vaultRoot: string, args: Record<string, unknown>, access?: AccessContext): Promise<Result<StageActionResult, Error>>;
 export interface RatifyResult {

package/dist/tools/staged-actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"staged-actions.d.ts","sourceRoot":"","sources":["../../src/tools/staged-actions.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,aAAa,EAAuB,MAAM,mBAAmB,CAAC;AAU5E,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA0BhD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAyE3C;AAMD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAGhB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CA6LtC;AAMD,eAAO,MAAM,iBAAiB,EAAE,cAAc,EA4F7C,CAAC"}
+{"version":3,"file":"staged-actions.d.ts","sourceRoot":"","sources":["../../src/tools/staged-actions.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,aAAa,EAA+C,MAAM,mBAAmB,CAAC;AAcpG,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAI/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AA2BhD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IAInB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAI1B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,CA2G3C;AAMD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAGhB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,CAAC,EAAE,aAAa,GACrB,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CA6XtC;AAMD,eAAO,MAAM,iBAAiB,EAAE,cAAc,EA8G7C,CAAC"}

package/dist/tools/staged-actions.js

@@ -12,12 +12,18 @@
 // vault_supersede, confidence-up → vault_set_confidence, merge → vault_merge
 // (the §11.4 write tools). A dispatch failure (including a malformed
 // proposed_diff) leaves the action pending so it can be retried.
-import { canRatify, canWrite } from "../access/rbac.js";
-import { getStagedActionById, nowISO, recordDecision, STAGED_ACTION_TYPES, stageAction, } from "../curation/staged-actions.js";
+import { canRatify, canRead, canWrite, isProposeOnly } from "../access/rbac.js";
+import { getStagedActionById, nowISO, recordDecision, STAGED_ACTION_TYPES, stageActionWithConflictCheck, } from "../curation/staged-actions.js";
+import { bucketHiddenDownstream } from "../curation/tension-blast.js";
+import { tier0DeprecateGate, tier0PromoteGate } from "../curation/tier0.js";
+import { loadDocuments } from "../curation/vault-docs.js";
 import { parseDocument } from "../frontmatter/parser.js";
+import { validateFrontmatter } from "../frontmatter/schema.js";
 import { err, ok } from "../frontmatter/types.js";
 import { readFile, resolveVaultPath } from "../storage/local.js";
-import { vaultDeprecate, vaultMerge, vaultPromote, vaultSetConfidence, vaultSupersede, } from "./write.js";
+import { loadConfig } from "../utils/config.js";
+import { readRunId } from "../utils/run-id.js";
+import { vaultDeprecate, vaultMerge, vaultPromote, vaultSetConfidence, vaultSupersede, vaultWrite, } from "./write.js";
 function requireString(args, field, tool) {
     const v = args[field];
     if (typeof v !== "string" || v.trim().length === 0) {
@@ -44,6 +50,22 @@ export async function vaultStageAction(vaultRoot, args, access) {
     if (args.proposed_diff === undefined || args.proposed_diff === null) {
         return err(new Error("vault_stage_action requires a 'proposed_diff' object argument"));
     }
+    const runId = readRunId(args, "vault_stage_action");
+    if (!runId.ok)
+        return runId;
+    // A `write` proposal carries full content; validate the payload shape at
+    // stage time so a malformed one never sits in the queue until ratify.
+    const isWrite = actionType.value === "write";
+    if (isWrite) {
+        const diff = args.proposed_diff;
+        if (typeof args.proposed_diff !== "object" ||
+            diff.frontmatter === null ||
+            typeof diff.frontmatter !== "object" ||
+            typeof diff.body !== "string") {
+            return err(new Error("vault_stage_action: a 'write' action needs proposed_diff.frontmatter " +
+                "(object) and proposed_diff.body (string)"));
+        }
+    }
     const resolved = resolveVaultPath(vaultRoot, targetPath.value);
     if (!resolved.ok)
         return resolved;
@@ -56,21 +78,28 @@ export async function vaultStageAction(vaultRoot, args, access) {
     // to the queue. The gate runs BEFORE the not-found branch so a role lacking
     // write cannot probe document existence (not-found vs access-denied). The
     // collection is authoritative from the document's own frontmatter when it is
-    // readable; for a not-yet-existing target it falls back to the path's leading
-    // segment (the same convention the write tools use).
+    // readable; for a not-yet-existing target it falls back to the leading
+    // segment of the NORMALIZED path (resolved.relPath), never the raw caller
+    // string — `pricing/../competitive-intel/x.md` splits to "pricing" raw but
+    // resolves to competitive-intel, and with `write` targets allowed to not
+    // exist, gating on the raw string would let a pricing-only role queue
+    // proposals into collections it cannot write (same S1 rule as write.ts's
+    // targetCollection).
     if (access) {
         const parsed = exists.ok ? parseDocument(exists.value) : null;
         const collection = (parsed?.ok ? parsed.value.frontmatter.collection : "") ||
-            (targetPath.value.split("/")[0] ?? "");
+            (resolved.value.relPath.split("/")[0] ?? "");
         if (!canWrite(access.role, collection)) {
             return err(new Error(`access denied: role '${access.roleName}' cannot stage actions for collection '${collection}'`));
         }
     }
-    // Fail fast: an action that targets a non-existent document can never be
-    // ratified (the write-tool dispatch would reject "document not found"). Catch
-    // it at stage time so a bad target never sits in the queue for 14 days. This
-    // is reached only by callers that already hold write access (checked above).
-    if (!exists.ok) {
+    // Fail fast: a lifecycle action that targets a non-existent document can
+    // never be ratified (the write-tool dispatch would reject "document not
+    // found"). Catch it at stage time so a bad target never sits in the queue
+    // for 14 days. This is reached only by callers that already hold write
+    // access (checked above). `write` proposals are exempt — creating a new
+    // document is their point.
+    if (!exists.ok && !isWrite) {
         return err(new Error(`vault_stage_action: target document not found: ${targetPath.value}`));
     }
     let ttlDays;
@@ -80,12 +109,16 @@ export async function vaultStageAction(vaultRoot, args, access) {
         }
         ttlDays = args.ttl_days;
     }
-    return stageAction(vaultRoot, {
+    // Stage the CANONICAL relPath, not the raw caller string, so aliased
+    // spellings of one target contend in conflict detection and the queued
+    // target matches what dispatch will actually write (#127/#128 rule).
+    return stageActionWithConflictCheck(vaultRoot, {
         actionType: actionType.value,
-        targetPath: targetPath.value,
+        targetPath: resolved.value.relPath,
         proposedBy: proposedBy.value,
         rationale: rationale.value,
         proposedDiff: args.proposed_diff,
+        ...(runId.value !== undefined ? { runId: runId.value } : {}),
         ...(ttlDays !== undefined ? { ttlDays } : {}),
     });
 }
@@ -96,6 +129,15 @@ export async function vaultRatify(vaultRoot, args, access) {
     if (access && !canRatify(access.role)) {
         return err(new Error(`access denied: role '${access.roleName}' cannot ratify staged actions`));
     }
+    // A propose-only role must never ratify, even if a hand-built role grants
+    // both (config load rejects the combination, but AccessContexts constructed
+    // in code bypass that). Without this, approving a `write` action would be
+    // coerced by vaultWrite's propose-only path into staging a NEW proposal
+    // while the original got marked ratified/applied — a silent no-op.
+    if (access && isProposeOnly(access.role)) {
+        return err(new Error(`access denied: role '${access.roleName}' is propose-only — it cannot ` +
+            `ratify staged actions`));
+    }
     const id = requireString(args, "id", "vault_ratify");
     if (!id.ok)
         return id;
@@ -150,8 +192,155 @@ export async function vaultRatify(vaultRoot, args, access) {
     const diff = action.proposedDiff && typeof action.proposedDiff === "object"
         ? action.proposedDiff
         : {};
+    // Tier 0 ratify gate (#232; quick win 1 of #236). Ratification is already a
+    // gate, so blocking here does not violate the advisory-curation rule — the
+    // direct write tools stay unblocked. A blocked approval is an error, which
+    // leaves the action pending (same contract as a dispatch failure): fix the
+    // underlying state and re-approve, or reject. Under RBAC the error names
+    // only docs the ratifier can read; a hidden remainder is coarsened
+    // (#217 B′), never reported as an exact count.
+    // A `write` proposal's payload shape is needed by both the gate and the
+    // dispatch — validate it once, up front. A malformed payload errors and
+    // leaves the action pending, same contract as a malformed supersede diff.
+    let writePayload = null;
+    if (action.actionType === "write") {
+        if (diff.frontmatter === null || typeof diff.frontmatter !== "object") {
+            return err(new Error(`vault_ratify: write action ${id.value} needs proposed_diff.frontmatter`));
+        }
+        if (typeof diff.body !== "string") {
+            return err(new Error(`vault_ratify: write action ${id.value} needs proposed_diff.body`));
+        }
+        writePayload = { frontmatter: diff.frontmatter, body: diff.body };
+    }
+    if (action.actionType === "promote" ||
+        action.actionType === "deprecate" ||
+        action.actionType === "write") {
+        const loaded = await loadDocuments(vaultRoot);
+        // Fail closed: without the doc set there is no gate, so no dispatch.
+        if (!loaded.ok)
+            return loaded;
+        const visible = access
+            ? (d) => canRead(access.role, d.frontmatter.collection)
+            : undefined;
+        if (action.actionType === "write" && writePayload) {
+            // A write proposal whose POST-state is canonical is a promote in one
+            // step — hold it to the same tier-0 bar. The post-state is NOT the
+            // payload as submitted: vaultWrite's update path merges the payload
+            // UNDER the existing frontmatter (#113 — omitted keys are inherited,
+            // explicit nulls delete), so gate the same merge. Judging the payload
+            // alone has two bypasses: omitted `sources` inherit the on-disk value
+            // unseen, and an omitted `status` on an already-canonical doc keeps it
+            // canonical while dodging a payload-declared-status check.
+            const existing = loaded.value.find((d) => d.path === action.targetPath);
+            const mergedRaw = existing
+                ? { ...existing.frontmatter }
+                : {};
+            for (const [key, value] of Object.entries(writePayload.frontmatter)) {
+                if (value === null)
+                    delete mergedRaw[key];
+                else
+                    mergedRaw[key] = value;
+            }
+            // Validate with the vault's schema extensions, same as the dispatch —
+            // without them a required extension field missing from a canonical
+            // write proposal would slip past the tier-0 schema check and only fail
+            // later with the generic invalid-frontmatter error.
+            const gateConfig = loadConfig(vaultRoot);
+            if (!gateConfig.ok)
+                return gateConfig;
+            const { frontmatter, report } = validateFrontmatter(mergedRaw, gateConfig.value.schemaExtensions);
+            if (frontmatter.status === "canonical") {
+                // Splice the merged post-state in as a synthetic doc (replacing any
+                // existing doc at the target) and reuse the promote gate wholesale.
+                const synthetic = {
+                    path: action.targetPath,
+                    frontmatter,
+                    content: writePayload.body,
+                    validation: report,
+                };
+                const docs = [...loaded.value.filter((d) => d.path !== action.targetPath), synthetic];
+                const gate = tier0PromoteGate(docs, action.targetPath, visible);
+                const problems = [...gate.violations];
+                if (gate.hiddenConflicts > 0) {
+                    problems.push(`non-canonical sources hidden from your role: ${bucketHiddenDownstream(gate.hiddenConflicts)}`);
+                }
+                if (problems.length > 0) {
+                    return err(new Error(`vault_ratify: tier-0 gate blocked canonical write of ${action.targetPath}: ` +
+                        `${problems.join("; ")} — the action stays pending`));
+                }
+            }
+            else if (existing?.frontmatter.status === "canonical" &&
+                !(typeof frontmatter.superseded_by === "string" && frontmatter.superseded_by.length > 0)) {
+                // The mirror case: a write whose merged post-state moves an
+                // already-canonical doc AWAY from canonical is a deprecate in one
+                // step — without a superseded_by forward it strands canonical
+                // dependents exactly like an unforwarded staged deprecate, so it
+                // gets the same gate. A merged superseded_by provides the
+                // resolution path and passes, same as a forwarded deprecate.
+                const gate = tier0DeprecateGate(loaded.value, action.targetPath, visible);
+                const problems = [];
+                if (gate.dependents.length > 0) {
+                    problems.push(`cited as a source by canonical: ${gate.dependents.join(", ")}`);
+                }
+                if (gate.hiddenDependents > 0) {
+                    problems.push(`hidden canonical dependents: ${bucketHiddenDownstream(gate.hiddenDependents)}`);
+                }
+                if (problems.length > 0) {
+                    return err(new Error(`vault_ratify: tier-0 gate blocked demoting write of ${action.targetPath} ` +
+                        `(canonical → ${frontmatter.status}): ${problems.join("; ")} — supersede ` +
+                        `with a successor or update the dependents first; the action stays pending`));
+                }
+            }
+        }
+        else if (action.actionType === "promote") {
+            const gate = tier0PromoteGate(loaded.value, action.targetPath, visible);
+            const problems = [...gate.violations];
+            if (gate.hiddenConflicts > 0) {
+                problems.push(`non-canonical sources hidden from your role: ${bucketHiddenDownstream(gate.hiddenConflicts)}`);
+            }
+            if (problems.length > 0) {
+                return err(new Error(`vault_ratify: tier-0 gate blocked promote of ${action.targetPath}: ` +
+                    `${problems.join("; ")} — the action stays pending`));
+            }
+        }
+        else if (typeof diff.superseded_by !== "string") {
+            // A deprecate carrying a superseded_by hint forwards dependents to a
+            // successor (same as supersede) — only an unforwarded deprecate can
+            // strand canonical dependents on a retired source.
+            const gate = tier0DeprecateGate(loaded.value, action.targetPath, visible);
+            const problems = [];
+            if (gate.dependents.length > 0) {
+                problems.push(`cited as a source by canonical: ${gate.dependents.join(", ")}`);
+            }
+            if (gate.hiddenDependents > 0) {
+                problems.push(`hidden canonical dependents: ${bucketHiddenDownstream(gate.hiddenDependents)}`);
+            }
+            if (problems.length > 0) {
+                return err(new Error(`vault_ratify: tier-0 gate blocked deprecate of ${action.targetPath}: ` +
+                    `${problems.join("; ")} — supersede with a successor or update the ` +
+                    `dependents first; the action stays pending`));
+            }
+        }
+    }
     let dispatched;
     switch (action.actionType) {
+        case "write": {
+            // Payload validated above (writePayload is always set for this type).
+            // The proposer's run_id (stamped at stage time) is carried into the
+            // write so provenance correlates the landed content with the run that
+            // proposed it (#235 → #233).
+            if (!writePayload) {
+                return err(new Error(`vault_ratify: write action ${id.value} lost its payload`));
+            }
+            dispatched = await vaultWrite(vaultRoot, {
+                path: action.targetPath,
+                frontmatter: writePayload.frontmatter,
+                body: writePayload.body,
+                agent: principal.value,
+                ...(action.runId ? { run_id: action.runId } : {}),
+            }, access);
+            break;
+        }
         case "promote":
             dispatched = await vaultPromote(vaultRoot, { path: action.targetPath, agent: principal.value }, access);
             break;
@@ -199,8 +388,7 @@ export async function vaultRatify(vaultRoot, args, access) {
             // proposed_diff = { merge_from: [path_a, path_b], body, frontmatter? };
             // the staged target_path is the merge target.
             const mergeFrom = Array.isArray(diff.merge_from) ? diff.merge_from : null;
-            if (!mergeFrom ||
-                mergeFrom.length !== 2 ||
+            if (mergeFrom?.length !== 2 ||
                 typeof mergeFrom[0] !== "string" ||
                 typeof mergeFrom[1] !== "string" ||
                 typeof diff.body !== "string") {
@@ -259,11 +447,15 @@ export const stagedActionTools = [
         description: "Record a proposed change to the vault for later human ratification via " +
             "vault_ratify. The action waits in a pending queue and auto-expires after " +
             "ttl_days (default 14). This is the producer side of the staged-action " +
-            "queue — normally called by the curation loop, not by a human directly. " +
-            "Action types: promote, deprecate, supersede, merge, confidence-up. " +
-            "proposed_diff carries the per-action payload replayed on ratification: " +
-            "supersede → {superseded_by}, confidence-up → {confidence}, " +
-            "merge → {merge_from: [path_a, path_b], body, frontmatter?}.",
+            "queue — normally called by the curation loop or an agent, not by a human " +
+            "directly. Action types: promote, deprecate, supersede, merge, " +
+            "confidence-up, write. proposed_diff carries the per-action payload " +
+            "replayed on ratification: supersede → {superseded_by}, confidence-up → " +
+            "{confidence}, merge → {merge_from: [path_a, path_b], body, frontmatter?}, " +
+            "write → {frontmatter, body} (full content; the target may be a new " +
+            "document). If other pending proposals already target the same document, " +
+            "the new one still lands — both stay pending — and an inter-proposal " +
+            "tension is logged; the result carries conflicts_with and tension_id.",
         inputSchema: {
             type: "object",
             properties: {
@@ -294,6 +486,12 @@ export const stagedActionTools = [
                     type: "number",
                     description: "Days until the action auto-expires if not ratified (default 14)",
                 },
+                run_id: {
+                    type: "string",
+                    description: "Optional trace/run identifier of the proposing run. Recorded on " +
+                        "the proposal and carried into provenance when a write action is " +
+                        "ratified.",
+                },
             },
             required: ["action_type", "target_path", "proposed_by", "rationale", "proposed_diff"],
             additionalProperties: false,
@@ -307,9 +505,16 @@ export const stagedActionTools = [
         description: "Approve or reject a single pending staged action. On approve, dispatches " +
             "to the matching write tool (promote → vault_promote, deprecate → " +
             "vault_deprecate, supersede → vault_supersede, confidence-up → " +
-            "vault_set_confidence, merge → vault_merge) and auto-commits. On reject, " +
+            "vault_set_confidence, merge → vault_merge, write → vault_write) and " +
+            "auto-commits. On reject, " +
             "records the rejection and applies nothing. A dispatch failure leaves the " +
-            "action pending. Errors if the id is unknown or the action is not pending " +
+            "action pending. Approving a promote, an unforwarded deprecate, or a " +
+            "write that declares status canonical runs the " +
+            "tier-0 gate first (#232): if applying would create a certain structural " +
+            "violation (broken source refs, canonical citing draft/deprecated/archived, " +
+            "schema-invalid frontmatter, stranded canonical dependents), the approval " +
+            "errors and the action stays pending — fix the state and re-approve, or " +
+            "reject. Errors if the id is unknown or the action is not pending " +
             "(already decided or expired). Requires the role's 'ratify' grant. If " +
             "the vault runs shadow_mode, an approved dispatch is computed and " +
             "shadow-logged but NOT applied — the result carries shadow: true and " +